@meshline/expo 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Meshline contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,94 @@
+# Meshline Expo native adapters
+
+Native SQLite, cryptographic randomness, HTTP, and WebSocket adapters for an
+Expo Modules application. This ESM package includes TypeScript declarations.
+Use `@meshline/storage-browser` and browser transport for an Expo web build.
+
+## Install
+
+Install the matching core and adapter together:
+
+```sh
+npm install @meshline/sdk@0.1.0-alpha.1 @meshline/expo@0.1.0-alpha.1
+```
+
+Use Expo **57.0.25**, Expo Modules Core **57.0.19**, and React Native
+**>=0.86.3 <0.87.0**. The native dependencies are `expo-crypto ^57.0.3`,
+`expo-file-system ^57.0.7`, and `expo-sqlite ^57.0.3`.
+In an Expo 57 app, install matching versions:
+
+```sh
+npx expo install expo@57.0.25 expo-modules-core@57.0.19 react-native@0.86.3 expo-crypto@57.0.3 expo-file-system@57.0.7 expo-sqlite@57.0.3
+```
+
+Rebuild the native app after installing this package. **Expo Go does not contain
+the included `MeshlineRelaySocket` module.** A missing module produces an error;
+the adapter does not fall back to React Native's default WebSocket.
+
+## Android compatibility
+
+Apply the shipped compatibility fixes after installing dependencies and before
+building Android:
+
+```sh
+npx meshline-expo-android-compat . --apply
+npx meshline-expo-android-compat . --check
+npx expo run:android
+```
+
+The fixes address shared-object registry access and HTTP startup in the pinned
+Expo dependencies. Installation does not apply them automatically.
+The command checks exact versions and original/already-fixed source hashes,
+is idempotent, and refuses unknown or locally modified sources.
+
+Repeat after a clean dependency installation and rebuild the native app.
+Reloading JavaScript cannot apply native fixes. Do not bypass version or source
+mismatch errors. The patches affect Android only.
+
+## Configure a session
+
+Import `ExpoSqliteStore`, `expoRandom`, `expoRelayFetch`, and
+`createExpoSocketFactory` from `@meshline/expo`.
+
+- Construct `ExpoSqliteStore({ databaseName })`, migrate explicitly, then pass it
+  to the client before initialization. The name is a basename; optional
+  `directory` accepts an absolute app-private path or local file URI.
+- Pass `fetch: expoRelayFetch`, `socketFactory: createExpoSocketFactory()`, and
+  `random: expoRandom` to `RelayClientPool`.
+- Pass `random: expoRandom` to `MeshlineClient` along with the store, pool, and
+  application integrations.
+- Supply a persistent, purpose-bound `SecretProtector`; manage protection keys
+  through your application's Keychain/Keystore integration.
+
+The [Expo session example](https://github.com/meshline-network/sdk/blob/main/typescript/examples/expo.ts)
+shows construction and cleanup. If implementing an account signer using
+`signAccount`, pass `expoRandom` as its third argument too. A hardware-backed
+signer owns its own randomness.
+
+## Runtime behavior
+
+SQLite writers serialize transactions and readers retain independent fixed WAL
+snapshots. Dispose query readers promptly. Cancellation before commit rolls back
+the transaction; a canceled read does not consume a page. Retain the original
+database and protector across restart. Secret protection does not encrypt the
+whole database or stored message text.
+
+`expoRelayFetch` uses `expo/fetch`, omits cookies, rejects redirects, and consumes
+response streams so cancellation and partial failures settle reads.
+It does not use React Native's legacy global fetch.
+
+The native WebSocket module uses dedicated Android OkHttp and iOS ephemeral
+URLSession clients without cookie storage, credential storage, or caching.
+It rejects redirects and retains platform TLS trust checks.
+
+Use Bundler resolution, the `react-native` condition, and DOM request/stream types
+for TypeScript. The
+[native example configuration](https://github.com/meshline-network/sdk/blob/main/typescript/examples/tsconfig.expo.json)
+uses `skipLibCheck` for overlapping Expo/React Native dependency declarations.
+
+Android execution has been exercised on Android 11/API 30 with Hermes.
+iOS native builds and runtime behavior remain unverified. Background execution
+depends on OS/OEM policy; persistent recovery does not guarantee background delivery.
+
+[Application guide](https://github.com/meshline-network/sdk/blob/main/typescript/docs/README.md)
+· [Platform requirements and limits](https://github.com/meshline-network/sdk/blob/main/typescript/docs/platforms.md)

package/android/build.gradle

@@ -0,0 +1,20 @@
+plugins {
+  id 'com.android.library'
+  id 'expo-module-gradle-plugin'
+}
+
+group = 'org.meshline.expo'
+version = '0.1.0-alpha.1'
+
+android {
+  namespace 'org.meshline.expo'
+  defaultConfig {
+    versionCode 1
+    versionName project.version.toString()
+  }
+}
+
+dependencies {
+  // Align with the React Native 0.86.3 dependency, without using its shared client.
+  implementation 'com.squareup.okhttp3:okhttp:4.9.2'
+}

package/android/src/main/AndroidManifest.xml

@@ -0,0 +1,3 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+  <uses-permission android:name="android.permission.INTERNET" />
+</manifest>

package/android/src/main/java/org/meshline/expo/MeshlineRelaySocketModule.kt

@@ -0,0 +1,82 @@
+package org.meshline.expo
+
+import expo.modules.kotlin.modules.Module
+import expo.modules.kotlin.modules.ModuleDefinition
+import okhttp3.Authenticator
+import okhttp3.CookieJar
+import okhttp3.OkHttpClient
+import okhttp3.Request
+import okhttp3.Response
+import okhttp3.WebSocket
+import okhttp3.WebSocketListener
+import okio.ByteString
+import java.net.URI
+import java.util.concurrent.ConcurrentHashMap
+import java.util.concurrent.TimeUnit
+
+class MeshlineRelaySocketModule : Module() {
+  private class Entry { @Volatile var socket: WebSocket? = null }
+  private val sockets = ConcurrentHashMap<Double, Entry>()
+  private val client by lazy {
+    // A dedicated client: no React Native interceptors, cookie jar or credentials.
+    OkHttpClient.Builder()
+      .cookieJar(CookieJar.NO_COOKIES).cache(null)
+      .authenticator(Authenticator.NONE).proxyAuthenticator(Authenticator.NONE)
+      .followRedirects(false).followSslRedirects(false).retryOnConnectionFailure(false)
+      .connectTimeout(60, TimeUnit.SECONDS).readTimeout(0, TimeUnit.MILLISECONDS)
+      .build()
+  }
+
+  override fun definition() = ModuleDefinition {
+    Name("MeshlineRelaySocket")
+    Events("socket")
+    Function("connect") { id: Double, endpoint: String -> connect(id, endpoint) }
+    Function("send") { id: Double, text: String ->
+      val socket = sockets[id]?.socket ?: throw IllegalStateException("WebSocket is not open.")
+      check(socket.send(text)) { "WebSocket rejected the outgoing message." }
+    }
+    Function("close") { id: Double, code: Int, reason: String ->
+      sockets[id]?.socket?.close(code, reason)
+      Unit
+    }
+    Function("cancel") { id: Double ->
+      sockets.remove(id)?.socket?.cancel()
+      Unit
+    }
+    Function("bufferedAmount") { id: Double -> sockets[id]?.socket?.queueSize()?.toDouble() ?: 0.0 }
+    OnDestroy {
+      val closing = sockets.values.toList(); sockets.clear()
+      closing.forEach { it.socket?.cancel() }
+      client.dispatcher.executorService.shutdown()
+      client.connectionPool.evictAll()
+    }
+  }
+
+  private fun connect(id: Double, endpoint: String) {
+    val uri = URI(endpoint)
+    require(uri.scheme == "wss" && uri.host != null && uri.rawUserInfo == null && uri.rawQuery == null && uri.rawFragment == null) { "Expected a credential-free WSS endpoint." }
+    val entry = Entry()
+    check(sockets.putIfAbsent(id, entry) == null) { "Duplicate native WebSocket identifier." }
+    fun emit(type: String, fields: Map<String, Any> = emptyMap()) {
+      if (sockets[id] === entry) sendEvent("socket", mapOf("id" to id, "type" to type) + fields)
+    }
+    try {
+      val socket = client.newWebSocket(Request.Builder().url(endpoint).build(), object : WebSocketListener() {
+        override fun onOpen(webSocket: WebSocket, response: Response) { emit("open") }
+        override fun onMessage(webSocket: WebSocket, text: String) { emit("text", mapOf("text" to text)) }
+        override fun onMessage(webSocket: WebSocket, bytes: ByteString) { emit("binary") }
+        override fun onClosing(webSocket: WebSocket, code: Int, reason: String) { webSocket.close(code, reason) }
+        override fun onClosed(webSocket: WebSocket, code: Int, reason: String) {
+          emit("close", mapOf("code" to code, "reason" to reason)); sockets.remove(id, entry)
+        }
+        override fun onFailure(webSocket: WebSocket, error: Throwable, response: Response?) {
+          emit("error", mapOf("message" to (error.message ?: "Native WebSocket failed.")))
+          emit("close", mapOf("code" to 1006, "reason" to "Native WebSocket failed.")); sockets.remove(id, entry)
+          response?.close()
+        }
+      })
+      entry.socket = socket
+      if (sockets[id] !== entry) socket.cancel()
+    } catch (error: Throwable) { sockets.remove(id, entry); throw error }
+  }
+}

package/compatibility/apply-android-fix.mjs

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+import { readFile, realpath, writeFile } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { isAbsolute, join, relative, resolve, sep } from 'node:path';
+
+const [appDirectory, mode = '--check'] = process.argv.slice(2);
+if (!appDirectory || !['--check', '--apply'].includes(mode) || process.argv.length > 4) throw new Error('Usage: meshline-expo-android-compat <app-directory> [--check|--apply]');
+const app = await realpath(resolve(appDirectory));
+const digest = value => createHash('sha256').update(value).digest('hex');
+const fixes = [{
+    name: 'expo-modules-core', version: '57.0.19', path: 'android/src/main/java/expo/modules/kotlin/sharedobjects/SharedObjectRegistry.kt',
+    originalSha256: 'c41c2a8aab60bef0476b2f805aa863507b96144701d782a228e76c1afbf1b4b3',
+    fixedSha256: 'b9417c719e9cdd92c1f08ba8d841e4b9cbfd933dd031b7b2e3a8ff44b9861df4',
+    apply: source => source.replace(
+        '    val native = pairs[id.ensureWasNotRelease()]?.first\n    return native ?: throw InvalidSharedObjectIdException()',
+        '    return synchronized(this) {\n      val native = pairs[id.ensureWasNotRelease()]?.first\n      native ?: throw InvalidSharedObjectIdException()\n    }',
+    ).replace(
+        '    return pairs[id]?.first',
+        '    return synchronized(this) {\n      pairs[id]?.first\n    }',
+    ),
+}, {
+    name: 'expo', version: '57.0.25', path: 'android/src/main/java/expo/modules/fetch/NativeRequest.kt',
+    originalSha256: '4e35ef082ef083490e7088d732af787c348678bc653deab3ef646ef9c1707938',
+    fixedSha256: '6fc9d773e12eb1788cde5392c666e495131240b2240657c85664de02aa3fc458',
+    apply: source => source.replace('    this.task?.enqueue(this.response)\n    response.onStarted()',
+        '    response.onStarted()\n    this.task?.enqueue(this.response)'),
+}];
+// Validate every target before writing either dependency. A rejected second
+// dependency must not leave the first dependency partially patched.
+const changes = [];
+for (const fix of fixes) {
+    const dependency = await realpath(join(app, 'node_modules', fix.name));
+    const withinApp = relative(app, dependency);
+    if (!withinApp || isAbsolute(withinApp) || withinApp.startsWith('..' + sep) || withinApp === '..') throw new Error('The dependency must be installed inside the explicitly selected app directory.');
+    const metadata = JSON.parse(await readFile(join(dependency, 'package.json'), 'utf8'));
+    if (metadata.name !== fix.name || metadata.version !== fix.version) throw new Error(`This reviewed compatibility fix targets ${fix.name} ${fix.version} only; review other versions separately.`);
+    const sourcePath = join(dependency, fix.path); const source = await readFile(sourcePath, 'utf8'); const current = digest(source);
+    if (current !== fix.originalSha256 && current !== fix.fixedSha256) throw new Error(`${fix.name} native source differs from both reviewed versions; refusing to replace it.`);
+    if (current === fix.originalSha256 && mode !== '--apply') throw new Error(`${fix.name} Android compatibility fix is missing. Apply the reviewed patch and rebuild the native app.`);
+    const updated = current === fix.fixedSha256 ? source : fix.apply(source);
+    if (digest(updated) !== fix.fixedSha256) throw new Error('Patched source fingerprint differs from the reviewed fix.');
+    changes.push({ fix, sourcePath, current, updated });
+}
+for (const change of changes) if (change.current !== change.fix.fixedSha256) await writeFile(change.sourcePath, change.updated);
+const receipt = change => ({ version: change.fix.version, status: change.current === change.fix.fixedSha256 ? 'already applied' : 'applied', source: change.sourcePath, sourceSha256: change.fix.fixedSha256, nativeRebuildRequired: true });
+console.log(JSON.stringify({ ...receipt(changes[0]), http: receipt(changes[1]) }));

package/compatibility/expo+57.0.25.patch

@@ -0,0 +1,13 @@
+diff --git a/node_modules/expo/android/src/main/java/expo/modules/fetch/NativeRequest.kt b/node_modules/expo/android/src/main/java/expo/modules/fetch/NativeRequest.kt
+--- a/node_modules/expo/android/src/main/java/expo/modules/fetch/NativeRequest.kt
++++ b/node_modules/expo/android/src/main/java/expo/modules/fetch/NativeRequest.kt
+@@ -73,8 +73,8 @@ internal class NativeRequest(appContext: AppContext, internal val response: NativeR
+     this.requestHolder.request = request
+ 
+     this.task = newClient.newCall(request)
+-    this.task?.enqueue(this.response)
+     response.onStarted()
++    this.task?.enqueue(this.response)
+   }
+ 
+   fun cancel() {

package/compatibility/expo-modules-core+57.0.19.patch

@@ -0,0 +1,27 @@
+diff --git a/node_modules/expo-modules-core/android/src/main/java/expo/modules/kotlin/sharedobjects/SharedObjectRegistry.kt b/node_modules/expo-modules-core/android/src/main/java/expo/modules/kotlin/sharedobjects/SharedObjectRegistry.kt
+--- a/node_modules/expo-modules-core/android/src/main/java/expo/modules/kotlin/sharedobjects/SharedObjectRegistry.kt
++++ b/node_modules/expo-modules-core/android/src/main/java/expo/modules/kotlin/sharedobjects/SharedObjectRegistry.kt
+@@ -94,8 +94,10 @@ class SharedObjectRegistry(runtime: Runtime) {
+   }
+ 
+   internal fun toNativeObject(id: SharedObjectId): SharedObject {
+-    val native = pairs[id.ensureWasNotRelease()]?.first
+-    return native ?: throw InvalidSharedObjectIdException()
++    return synchronized(this) {
++      val native = pairs[id.ensureWasNotRelease()]?.first
++      native ?: throw InvalidSharedObjectIdException()
++    }
+   }
+ 
+   internal fun toNativeObjectOrNull(id: SharedObjectId): SharedObject? {
+@@ -110,7 +112,9 @@ class SharedObjectRegistry(runtime: Runtime) {
+     }
+ 
+     val id = SharedObjectId(js.getProperty(sharedObjectIdPropertyName).getInt())
+-    return pairs[id]?.first
++    return synchronized(this) {
++      pairs[id]?.first
++    }
+   }
+ 
+   internal fun toJavaScriptObjectOrNull(native: SharedObject): JavaScriptObject? {

package/dist/database-path.d.ts

@@ -0,0 +1,7 @@
+/** Both Expo SQLite and FileSystem consume file URIs on Android and iOS. */
+export declare function databaseLocation(directory: string, name: string): {
+    directoryUri: string;
+    encodedName: string;
+    fileUri: string;
+};
+//# sourceMappingURL=database-path.d.ts.map

package/dist/database-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-path.d.ts","sourceRoot":"","sources":["../src/database-path.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAehI"}

package/dist/database-path.js

@@ -0,0 +1,22 @@
+/** Both Expo SQLite and FileSystem consume file URIs on Android and iOS. */
+export function databaseLocation(directory, name) {
+    if (!name.trim() || name === '.' || name === '..' || /[\x00-\x1f\x7f/\\:?]/.test(name))
+        throw new TypeError('Expected a persistent SQLite database basename.');
+    if (typeof directory !== 'string' || directory.length === 0)
+        throw new Error('A native SQLite database directory is required.');
+    let path = directory;
+    if (directory.startsWith('file:///')) {
+        if (/[?#]/.test(directory))
+            throw new TypeError('A database directory URI cannot contain a query or fragment.');
+        path = decodeURIComponent(directory.slice('file://'.length));
+    }
+    if (!path.startsWith('/') || /[\x00-\x1f\x7f\\]/.test(path))
+        throw new TypeError('Expected an absolute local database directory or file URI.');
+    // Android's defaultDatabaseDirectory is an absolute path without a URI scheme.
+    // Escape each component once so #, %, spaces and Unicode name the same file
+    // in the existence probe and in SQLite's native URI-to-path conversion.
+    const directoryUri = `file://${path.split('/').map(encodeURIComponent).join('/').replace(/\/+$/, '')}`;
+    const encodedName = encodeURIComponent(name);
+    return { directoryUri, encodedName, fileUri: `${directoryUri}/${encodedName}` };
+}
+//# sourceMappingURL=database-path.js.map

package/dist/database-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-path.js","sourceRoot":"","sources":["../src/database-path.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,IAAY;IAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IAC/J,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChI,IAAI,IAAI,GAAG,SAAS,CAAC;IACrB,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;QAChH,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAC;IAC/I,+EAA+E;IAC/E,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,YAAY,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACvG,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,YAAY,IAAI,WAAW,EAAE,EAAE,CAAC;AACpF,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,9 @@
+import { type RelayFetch, type RelayFetchInit, type RelayFetchResponse } from '@meshline/sdk';
+interface NativeResponse extends Omit<RelayFetchResponse, 'body'> {
+    readonly body: ReadableStream<Uint8Array> | null;
+}
+/** Read the abort/error-aware stream, not Expo's native arrayBuffer fast path:
+ * that path can remain pending when native state becomes ERROR_RECEIVED. */
+export declare function createExpoRelayFetch(fetch: (url: string, init: RelayFetchInit) => Promise<NativeResponse>): RelayFetch;
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE9G,UAAU,cAAe,SAAQ,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAG,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;CAAE;AAEtH;4EAC4E;AAC5E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,GAAG,UAAU,CAqCtH"}

package/dist/http.js

@@ -0,0 +1,64 @@
+import { throwIfAborted } from '@meshline/sdk';
+/** Read the abort/error-aware stream, not Expo's native arrayBuffer fast path:
+ * that path can remain pending when native state becomes ERROR_RECEIVED. */
+export function createExpoRelayFetch(fetch) {
+    return async (url, init) => {
+        throwIfAborted(init.signal);
+        const response = await fetch(url, { ...init, headers: { ...init.headers, 'Cache-Control': 'no-store, no-cache', Pragma: 'no-cache' }, credentials: 'omit', redirect: 'error' });
+        const body = response.body;
+        let consumed = false;
+        return {
+            status: response.status, headers: response.headers,
+            ...(response.redirected === undefined ? {} : { redirected: response.redirected }), ...(response.type === undefined ? {} : { type: response.type }),
+            body: body ? { async cancel() { consumed = true; await body.cancel(); } } : null,
+            async arrayBuffer() {
+                throwIfAborted(init.signal);
+                if (consumed)
+                    throw new TypeError('Response body has already been consumed.');
+                consumed = true;
+                if (!body)
+                    return new ArrayBuffer(0);
+                const reader = body.getReader();
+                const chunks = [];
+                let length = 0;
+                let cancellation;
+                let cancellationFailure;
+                const abort = () => {
+                    // Observe cancellation immediately, then propagate any failure
+                    // in finally after the pending read settles and its lock releases.
+                    cancellation = reader.cancel(init.signal.reason).then(() => undefined, error => { cancellationFailure = { error }; });
+                };
+                init.signal.addEventListener('abort', abort, { once: true });
+                try {
+                    for (;;) {
+                        const chunk = await reader.read();
+                        throwIfAborted(init.signal);
+                        if (chunk.done)
+                            break;
+                        chunks.push(chunk.value);
+                        length += chunk.value.byteLength;
+                    }
+                    const bytes = new Uint8Array(length);
+                    let offset = 0;
+                    for (const chunk of chunks) {
+                        bytes.set(chunk, offset);
+                        offset += chunk.byteLength;
+                    }
+                    return bytes.buffer;
+                }
+                finally {
+                    init.signal.removeEventListener('abort', abort);
+                    try {
+                        await cancellation;
+                        if (cancellationFailure)
+                            throw cancellationFailure.error;
+                    }
+                    finally {
+                        reader.releaseLock();
+                    }
+                }
+            },
+        };
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAiE,MAAM,eAAe,CAAC;AAI9G;4EAC4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,KAAqE;IACtG,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvB,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChL,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAAC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACjD,OAAO;YACH,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;YAClD,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClJ,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YAChF,KAAK,CAAC,WAAW;gBACb,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAI,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBAC/F,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,MAAM,MAAM,GAAiB,EAAE,CAAC;gBAAC,IAAI,MAAM,GAAG,CAAC,CAAC;gBACjF,IAAI,YAAuC,CAAC;gBAAC,IAAI,mBAAmD,CAAC;gBACrG,MAAM,KAAK,GAAG,GAAG,EAAE;oBACf,+DAA+D;oBAC/D,mEAAmE;oBACnE,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,GAAG,mBAAmB,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1H,CAAC,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC;oBACD,SAAS,CAAC;wBACN,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC/D,IAAI,KAAK,CAAC,IAAI;4BAAE,MAAM;wBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;oBACtF,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;oBAAC,IAAI,MAAM,GAAG,CAAC,CAAC;oBACrD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;oBAAC,CAAC;oBACrF,OAAO,KAAK,CAAC,MAAM,CAAC;gBACxB,CAAC;wBAAS,CAAC;oBACP,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBAChD,IAAI,CAAC;wBAAC,MAAM,YAAY,CAAC;wBAAC,IAAI,mBAAmB;4BAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC;oBAAC,CAAC;4BAC7E,CAAC;wBAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAAC,CAAC;gBACrC,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC,CAAC;AACN,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+import { type RandomSource } from '@meshline/sdk';
+import { NativeSqliteStore } from './sqlite-store.js';
+import type { RelaySocketFactory } from '@meshline/sdk';
+/** Requires a development/production build containing this package's native module. */
+export declare function createExpoSocketFactory(): RelaySocketFactory;
+export interface ExpoSqliteStoreOptions {
+    /** Persistent database basename, not an absolute path or SQLite connection URI. */
+    readonly databaseName: string;
+    /** Absolute app-private directory path or local file URI. Omit to use expo-sqlite's default. */
+    readonly directory?: string;
+}
+/** Native SQLite storage for Expo Modules applications; constructors never open or create files. */
+export declare class ExpoSqliteStore extends NativeSqliteStore {
+    constructor(options: ExpoSqliteStoreOptions);
+}
+/** This API always uses the native cryptographic source, including development builds. */
+export declare const expoRandom: RandomSource;
+/** Uses expo/fetch explicitly: React Native's legacy global fetch cannot enforce these transport policies. */
+export declare const expoRelayFetch: import("@meshline/sdk").RelayFetch;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD,uFAAuF;AACvF,wBAAgB,uBAAuB,IAAI,kBAAkB,CAE5D;AAED,MAAM,WAAW,sBAAsB;IACnC,mFAAmF;IACnF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,oGAAoG;AACpG,qBAAa,eAAgB,SAAQ,iBAAiB;IAClD,YAAY,OAAO,EAAE,sBAAsB,EAM1C;CACJ;AAED,0FAA0F;AAC1F,eAAO,MAAM,UAAU,EAAE,YAOxB,CAAC;AAEF,8GAA8G;AAC9G,eAAO,MAAM,cAAc,oCAA8D,CAAC"}

package/dist/index.js

@@ -0,0 +1,38 @@
+import { fetch as nativeFetch } from 'expo/fetch';
+import { getRandomValues } from 'expo-crypto';
+import { File } from 'expo-file-system';
+import { defaultDatabaseDirectory, openDatabaseAsync } from 'expo-sqlite';
+import {} from '@meshline/sdk';
+import { NativeSqliteStore } from './sqlite-store.js';
+import { requireNativeModule } from 'expo';
+import { nativeSocketFactory } from './socket.js';
+import { databaseLocation } from './database-path.js';
+import { createExpoRelayFetch } from './http.js';
+/** Requires a development/production build containing this package's native module. */
+export function createExpoSocketFactory() {
+    return nativeSocketFactory(requireNativeModule('MeshlineRelaySocket'));
+}
+/** Native SQLite storage for Expo Modules applications; constructors never open or create files. */
+export class ExpoSqliteStore extends NativeSqliteStore {
+    constructor(options) {
+        const location = databaseLocation(options.directory ?? defaultDatabaseDirectory, options.databaseName);
+        super({
+            async exists() { return new File(location.fileUri).exists; },
+            open() { return openDatabaseAsync(location.encodedName, { useNewConnection: true }, location.directoryUri); },
+        });
+    }
+}
+/** This API always uses the native cryptographic source, including development builds. */
+export const expoRandom = {
+    bytes(length) {
+        if (!Number.isSafeInteger(length) || length < 0)
+            throw new RangeError('Invalid random byte count.');
+        const bytes = new Uint8Array(length);
+        for (let offset = 0; offset < length; offset += 65536)
+            getRandomValues(bytes.subarray(offset, offset + 65536));
+        return bytes;
+    },
+};
+/** Uses expo/fetch explicitly: React Native's legacy global fetch cannot enforce these transport policies. */
+export const expoRelayFetch = createExpoRelayFetch((url, init) => nativeFetch(url, init));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAqB,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAA2B,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,uFAAuF;AACvF,MAAM,UAAU,uBAAuB;IACnC,OAAO,mBAAmB,CAAC,mBAAmB,CAAqB,qBAAqB,CAAC,CAAC,CAAC;AAC/F,CAAC;AASD,oGAAoG;AACpG,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IAClD,YAAY,OAA+B;QACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,IAAI,wBAAwB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACvG,KAAK,CAAC;YACF,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,IAAI,KAAK,OAAO,iBAAiB,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SAChH,CAAC,CAAC;IACP,CAAC;CACJ;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAiB;IACpC,KAAK,CAAC,MAAM;QACR,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,KAAK;YAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAC;AAEF,8GAA8G;AAC9G,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC"}

package/dist/socket.d.ts

@@ -0,0 +1,23 @@
+import { type RelaySocketFactory } from '@meshline/sdk';
+/** Internal Expo Modules contract, separated from module loading for adapter tests. */
+export interface NativeSocketEvent {
+    readonly id: number;
+    readonly type: 'open' | 'text' | 'binary' | 'error' | 'close';
+    readonly text?: string;
+    readonly message?: string;
+    readonly code?: number;
+    readonly reason?: string;
+}
+export interface NativeSocketModule {
+    connect(id: number, endpoint: string): void;
+    send(id: number, text: string): void;
+    close(id: number, code: number, reason: string): void;
+    cancel(id: number): void;
+    bufferedAmount(id: number): number;
+    addListener(event: 'socket', listener: (event: NativeSocketEvent) => void): {
+        remove(): void;
+    };
+}
+/** The native implementation owns TLS, cookie/redirect policy and actual RFC close codes. */
+export declare function nativeSocketFactory(module: NativeSocketModule): RelaySocketFactory;
+//# sourceMappingURL=socket.d.ts.map

package/dist/socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../src/socket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE3H,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,kBAAkB;IAC/B,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG;QAAE,MAAM,IAAI,IAAI,CAAA;KAAE,CAAC;CAClG;AAID,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,CAqElF"}