@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/transport/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2C,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAA2C,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjG,OAAO,EAAuE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE1H,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AACrE,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;CAC1C;AACD,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IACnD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACvC;AACD,iHAAiH;AACjH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAE5F,yGAAyG;AACzG,qBAAa,YAAY;;IAET,QAAQ,CAAC,KAAK,EAAE,YAAY;IAAxC,YAAqB,KAAK,GAAE,YAA0B,EAAI;IAC1D,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAEjC;IACK,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9C;CACJ;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAclE;AAMD,MAAM,WAAW,yBAAyB;IAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAA;CAAE;AAEzJ,qBAAa,kBAAkB;;IAI3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,YAAY,OAAO,GAAE,yBAA8B,EAKlD;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CA0C/J;IAED,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAoG;CACtH"}

package/dist/transport/http.js

@@ -0,0 +1,128 @@
+import { createAbortController } from '../runtime/abort.js';
+import { ProtocolError } from '../errors.js';
+import { validateAuthToken } from '../models/authentication.js';
+import { canonicalJson, parseJson, requireObject } from '../protocol/json.js';
+import { abortScope, systemClock, throwIfAborted } from '../runtime/clock.js';
+import { validateMethodName, webEndpoint } from './endpoint.js';
+import { RelayError, relayFailureCodec, retryAfter, validateRetryAfterHeader } from './relay-error.js';
+/** Share between HTTP and WebSocket for one relay. A rejected request is never automatically retried. */
+export class RelayBackoff {
+    clock;
+    #until = 0;
+    constructor(clock = systemClock) {
+        this.clock = clock;
+    }
+    apply(failure) {
+        if (failure.code === 'rate_limited')
+            this.#until = Math.max(this.#until, this.clock.monotonicMilliseconds() + Math.max(1, retryAfter(failure) ?? 1) * 1000);
+    }
+    async wait(signal) {
+        for (;;) {
+            throwIfAborted(signal);
+            const remaining = this.#until - this.clock.monotonicMilliseconds();
+            if (remaining <= 0)
+                return;
+            await this.clock.delay(Math.min(remaining, 60_000), signal);
+        }
+    }
+}
+/** Strict media-type parsing avoids accepting a second hidden non-UTF8 charset. */
+export function validateJsonContentType(value) {
+    if (value === null)
+        throw new ProtocolError('invalid_content_type', 'Relay responses require application/json with UTF-8 encoding.');
+    const token = "[!#$%&'*+.^_`|~0-9a-z-]+";
+    const match = /^\s*application\/json\s*/i.exec(value);
+    if (!match)
+        throw new ProtocolError('invalid_content_type', 'Relay responses require application/json with UTF-8 encoding.');
+    let rest = value.slice(match[0].length);
+    const parameter = new RegExp(`^;\\s*(${token})\\s*=\\s*(${token}|"(?:[^"\\\\\\r\\n]|\\\\[^\\r\\n])*")\\s*`, 'i');
+    while (rest.length !== 0) {
+        const part = parameter.exec(rest);
+        if (!part)
+            throw new ProtocolError('invalid_content_type', 'Malformed relay content type.');
+        const parameterValue = part[2].startsWith('"') ? part[2].slice(1, -1).replace(/\\(.)/g, '$1') : part[2];
+        if (part[1].toLowerCase() === 'charset' && parameterValue.toLowerCase() !== 'utf-8')
+            throw new ProtocolError('invalid_content_type', 'Relay response charset must be UTF-8.');
+        rest = rest.slice(part[0].length);
+    }
+}
+function escapeQuery(value) {
+    return encodeURIComponent(value).replace(/[!'()*]/g, character => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+export class HttpRelayTransport {
+    #fetch;
+    #lifetime = createAbortController();
+    #timeout;
+    backoff;
+    constructor(options = {}) {
+        this.#fetch = options.fetch ?? ((url, init) => fetch(url, init));
+        this.backoff = options.backoff ?? new RelayBackoff();
+        this.#timeout = options.requestTimeoutMilliseconds ?? 60_000;
+        if (!Number.isSafeInteger(this.#timeout) || this.#timeout < 1 || this.#timeout > 2_147_483_647)
+            throw new RangeError('Invalid relay request timeout.');
+    }
+    async request(endpoint, method, name, parameters, token, signal) {
+        validateMethodName(name);
+        if (!['GET', 'POST', 'PUT', 'PATCH', 'DELETE'].includes(method))
+            throw new ProtocolError('invalid_method', 'Unsupported HTTP method.');
+        let address = webEndpoint(endpoint, 'https:').href.replace(/\/+$/, '') + '/' + name.replaceAll('.', '/');
+        let body = parameters === undefined ? undefined : canonicalJson(requireObject(parameters));
+        if (method === 'GET' && parameters !== undefined) {
+            address += '?' + Object.entries(parameters).map(([key, value]) => {
+                if (typeof value !== 'string' && typeof value !== 'number' && typeof value !== 'boolean')
+                    throw new ProtocolError('invalid_query', 'GET parameters must be non-null scalars.');
+                return `${escapeQuery(key)}=${escapeQuery(String(value))}`;
+            }).join('&');
+            body = undefined;
+        }
+        const headers = { Accept: 'application/json' };
+        if (token !== undefined) {
+            validateAuthToken(token);
+            headers['X-Meshline-Session'] = token;
+        }
+        if (body !== undefined)
+            headers['Content-Type'] = 'application/json; charset=utf-8';
+        const lifetime = abortScope([signal, this.#lifetime.signal]);
+        let deadline;
+        try {
+            await this.backoff.wait(lifetime.signal);
+            deadline = abortScope([lifetime.signal], this.#timeout);
+            throwIfAborted(deadline.signal);
+            const response = await this.#fetch(address, { method, headers, ...(body === undefined ? {} : { body }), signal: deadline.signal,
+                redirect: 'error', credentials: 'omit', cache: 'no-store', referrerPolicy: 'no-referrer' });
+            if (response.redirected || response.type === 'opaqueredirect' || response.status >= 300 && response.status < 400) {
+                await response.body?.cancel();
+                throw new ProtocolError('redirect_rejected', 'Relay redirects are not permitted.');
+            }
+            if (response.status === 204) {
+                await response.body?.cancel();
+                return undefined;
+            }
+            try {
+                validateJsonContentType(response.headers.get('content-type'));
+            }
+            catch (error) {
+                await response.body?.cancel();
+                throw error;
+            }
+            const value = parseJson(new Uint8Array(await response.arrayBuffer()));
+            throwIfAborted(deadline.signal);
+            if (response.status < 200 || response.status >= 300) {
+                const failure = relayFailureCodec.decode(value);
+                validateRetryAfterHeader(failure, response.status, response.headers.get('retry-after'));
+                this.backoff.apply(failure);
+                throw new RelayError(failure, response.status);
+            }
+            if (response.status !== 200)
+                throw new ProtocolError('invalid_http_status', 'A method returning a result must return HTTP 200.');
+            return value;
+        }
+        finally {
+            deadline?.dispose();
+            lifetime.dispose();
+        }
+    }
+    /** Cancels active requests and makes later requests fail. */
+    dispose() { this.#lifetime.abort(new DOMException('The HTTP relay transport was disposed.', 'AbortError')); }
+}
+//# sourceMappingURL=http.js.map

package/dist/transport/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAmC,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAqB,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,wBAAwB,EAAqB,MAAM,kBAAkB,CAAC;AAwB1H,yGAAyG;AACzG,MAAM,OAAO,YAAY;IAEA,KAAK;IAD1B,MAAM,GAAG,CAAC,CAAC;IACX,YAAqB,KAAK,GAAiB,WAAW;qBAAjC,KAAK;IAA+B,CAAC;IAC1D,KAAK,CAAC,OAAqB;QACvB,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChK,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAoB;QAC3B,SAAS,CAAC;YACN,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;YACnE,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO;YAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;CACJ;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,KAAoB;IACxD,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,+DAA+D,CAAC,CAAC;IACrI,MAAM,KAAK,GAAG,0BAA0B,CAAC;IACzC,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,+DAA+D,CAAC,CAAC;IAC7H,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,UAAU,KAAK,cAAc,KAAK,2CAA2C,EAAE,GAAG,CAAC,CAAC;IACjH,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,CAAC;QAC5F,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAC3G,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,uCAAuC,CAAC,CAAC;QAC/K,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAChI,CAAC;AAID,MAAM,OAAO,kBAAkB;IAClB,MAAM,CAAa;IACnB,SAAS,GAAG,qBAAqB,EAAE,CAAC;IACpC,QAAQ,CAAS;IACjB,OAAO,CAAe;IAC/B,YAAY,OAAO,GAA8B,EAAE;QAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,YAAY,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,0BAA0B,IAAI,MAAM,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,aAAa;YAAE,MAAM,IAAI,UAAU,CAAC,gCAAgC,CAAC,CAAC;IAC3J,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,MAAkB,EAAE,IAAY,EAAE,UAAuB,EAAE,KAAc,EAAE,MAAoB;QAC3H,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;QACvI,IAAI,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzG,IAAI,IAAI,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3F,IAAI,MAAM,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;oBACpF,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;gBACzF,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/D,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC;QAAC,CAAC;QAC7F,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,iCAAiC,CAAC;QACpF,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,IAAI,QAAmD,CAAC;QACxD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,QAAQ,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;gBAC3H,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;YAChG,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC/G,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;YACjF,IAAI,CAAC;gBAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YAAC,CAAC;YACtE,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACtE,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChD,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5B,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,mDAAmD,CAAC,CAAC;YACjI,OAAO,KAAK,CAAC;QACjB,CAAC;gBAAS,CAAC;YAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1D,CAAC;IAED,6DAA6D;IAC7D,OAAO,KAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,wCAAwC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CACtH"}

package/dist/transport/pool.d.ts

@@ -0,0 +1,31 @@
+import type { RelayRegistry } from '../interactions.js';
+import type { NetworkContext } from '../protocol/context.js';
+import { type EventListener } from '../runtime/events.js';
+import { RelayClient, type RelayTransportOptions } from './client.js';
+import { type AuthenticationIdentity } from './session.js';
+export interface RelayClientPoolOptions extends RelayTransportOptions {
+    readonly context: NetworkContext;
+    readonly accountId: string;
+}
+export interface RelayPoolEvents {
+    readonly poolChanged: readonly RelayClient[];
+    readonly relayChanged: RelayClient;
+    readonly errorOccurred: unknown;
+}
+/** Owns account/device sessions separately; a pool binds to one network, account and device. */
+export declare class RelayClientPool {
+    #private;
+    readonly registry: RelayRegistry;
+    readonly context: NetworkContext;
+    readonly accountId: string;
+    constructor(options: RelayClientPoolOptions, registry: RelayRegistry);
+    get clients(): readonly RelayClient[];
+    /** Last application observer failure; transport failures remain on each relay client's state. */
+    get lastError(): unknown;
+    on<K extends keyof RelayPoolEvents>(event: K, listener: EventListener<RelayPoolEvents[K]>): () => void;
+    get(relayId: string, identity?: AuthenticationIdentity, signal?: AbortSignal): Promise<RelayClient>;
+    /** Device registration/key changes require new device sessions; account sessions remain independent. */
+    invalidateDevice(): Promise<void>;
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=pool.d.ts.map

package/dist/transport/pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../../src/transport/pool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACtI,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,WAAW,EAAE,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAAE;AAGtJ,gGAAgG;AAChG,qBAAa,eAAe;;IAWqB,QAAQ,CAAC,QAAQ,EAAE,aAAa;IAF7E,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,YAAY,OAAO,EAAE,sBAAsB,EAAW,QAAQ,EAAE,aAAa,EAI5E;IACD,IAAI,OAAO,IAAI,SAAS,WAAW,EAAE,CAA8G;IACnJ,iGAAiG;IACjG,IAAI,SAAS,IAAI,OAAO,CAA4B;IACpD,EAAE,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAA6C;IAU7I,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAmCxG;IAcD,wGAAwG;IAClG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAKtC;IAOD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAMvB;CACJ"}

package/dist/transport/pool.js

@@ -0,0 +1,137 @@
+import { createAbortController } from '../runtime/abort.js';
+import { ProtocolError } from '../errors.js';
+import { validateAccountId, validateRelayId } from '../identity/neo.js';
+import { certificateId } from '../models/identity.js';
+import { awaitWithSignal, throwIfAborted } from '../runtime/clock.js';
+import { EventHub } from '../runtime/events.js';
+import { RelayClient } from './client.js';
+import { RelayAuthenticator } from './session.js';
+/** Owns account/device sessions separately; a pool binds to one network, account and device. */
+export class RelayClientPool {
+    registry;
+    #events = new EventHub();
+    #entries = new Map();
+    #retirements = new Set();
+    #lifetime = createAbortController();
+    #options;
+    #deviceId;
+    #disposal;
+    #lastError;
+    context;
+    accountId;
+    constructor(options, registry) {
+        this.registry = registry;
+        validateAccountId(options.accountId);
+        if (options.context.toString() !== registry.context.toString())
+            throw new ProtocolError('invalid_context', 'Registry and client network contexts differ.');
+        this.context = options.context;
+        this.accountId = options.accountId;
+        this.#options = { ...options };
+    }
+    get clients() { return Object.freeze([...this.#entries.values()].flatMap(entries => entries.map(entry => entry.client))); }
+    /** Last application observer failure; transport failures remain on each relay client's state. */
+    get lastError() { return this.#lastError; }
+    on(event, listener) { return this.#events.on(event, listener); }
+    #notify(event, value) {
+        this.#events.notify(event, value, error => {
+            this.#lastError = error;
+            this.#events.notify('errorOccurred', error, observerError => {
+                this.#lastError = new AggregateError([error, observerError], 'Pool observer and error observer failed.');
+            });
+        });
+    }
+    async get(relayId, identity, signal) {
+        throwIfAborted(signal);
+        throwIfAborted(this.#lifetime.signal);
+        validateRelayId(relayId);
+        if (this.registry.context.toString() !== this.context.toString())
+            throw new ProtocolError('context_changed', 'Registry network context changed.');
+        if (identity) {
+            const account = identity.mode === 'account' ? identity.signer.accountId : identity.signer.certificate.account;
+            if (account !== this.accountId)
+                throw new ProtocolError('invalid_identity', 'Signer belongs to another account.');
+            if (identity.mode === 'device') {
+                const device = certificateId(identity.signer.certificate, this.context);
+                if (this.#deviceId !== undefined && this.#deviceId !== device)
+                    throw new ProtocolError('invalid_identity', 'Pool is already bound to another device.');
+                this.#deviceId = device;
+            }
+        }
+        let entries = this.#entries.get(relayId);
+        let entry = identity ? entries?.find(entry => entry.mode === identity.mode) : entries?.[0];
+        if (!entry) {
+            const authenticator = identity === undefined ? undefined : new RelayAuthenticator(relayId, this.context, identity, this.#options.clock);
+            const client = new RelayClient(relayId, this.registry, this.#options, authenticator);
+            entry = { client, mode: identity?.mode, retired: false, ready: Promise.resolve() };
+            if (!entries) {
+                entries = [];
+                this.#entries.set(relayId, entries);
+            }
+            entries.push(entry);
+            const captured = entry;
+            client.on('stateChanged', () => this.#notify('relayChanged', client));
+            client.on('faulted', () => { this.#retire(captured); });
+            // Publish only after the readiness promise is installed, so a callback
+            // acquiring the same relay waits for this authentication too.
+            entry.ready = Promise.resolve().then(async () => {
+                this.#notify('poolChanged', this.clients);
+                if (authenticator)
+                    await client.authenticate(this.#lifetime.signal);
+            });
+            entry.ready.then(() => undefined, () => { this.#retire(captured); });
+        }
+        await awaitWithSignal(entry.ready, signal);
+        throwIfAborted(this.#lifetime.signal);
+        throwIfAborted(signal);
+        if (entry.retired)
+            throw new ProtocolError('retired_client', 'Relay client was retired while being acquired.');
+        return entry.client;
+    }
+    #retire(entry) {
+        if (entry.retired)
+            return;
+        entry.retired = true;
+        const entries = this.#entries.get(entry.client.relayId);
+        entries.splice(entries.indexOf(entry), 1);
+        if (entries.length === 0)
+            this.#entries.delete(entry.client.relayId);
+        const cleanup = (async () => { await entry.client.dispose(); this.#notify('poolChanged', this.clients); })();
+        this.#retirements.add(cleanup);
+        // Keep failed retirements for dispose/invalidate to surface; successful ones need no retained task.
+        cleanup.then(() => this.#retirements.delete(cleanup), () => undefined);
+    }
+    /** Device registration/key changes require new device sessions; account sessions remain independent. */
+    async invalidateDevice() {
+        throwIfAborted(this.#lifetime.signal);
+        for (const entries of [...this.#entries.values()])
+            for (const entry of [...entries])
+                if (entry.mode === 'device')
+                    this.#retire(entry);
+        this.#deviceId = undefined;
+        await this.#finishRetirements();
+    }
+    async #finishRetirements() {
+        const jobs = [...this.#retirements];
+        const results = await Promise.allSettled(jobs);
+        for (const job of jobs)
+            this.#retirements.delete(job);
+        const errors = results.filter((result) => result.status === 'rejected').map(result => result.reason);
+        if (errors.length)
+            throw new AggregateError(errors, 'Relay client retirement failed.');
+    }
+    dispose() {
+        return this.#disposal ??= (async () => {
+            this.#lifetime.abort(new DOMException('Relay client pool was disposed.', 'AbortError'));
+            for (const entries of [...this.#entries.values()])
+                for (const entry of [...entries])
+                    this.#retire(entry);
+            try {
+                await this.#finishRetirements();
+            }
+            finally {
+                this.#events.clear();
+            }
+        })();
+    }
+}
+//# sourceMappingURL=pool.js.map

package/dist/transport/pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.js","sourceRoot":"","sources":["../../src/transport/pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAsB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,WAAW,EAA8B,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAA+B,MAAM,cAAc,CAAC;AAM/E,gGAAgG;AAChG,MAAM,OAAO,eAAe;IAW8B,QAAQ;IAVrD,OAAO,GAAG,IAAI,QAAQ,EAAmB,CAAC;IAC1C,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,YAAY,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,SAAS,GAAG,qBAAqB,EAAE,CAAC;IACpC,QAAQ,CAAyB;IAC1C,SAAS,CAAqB;IAC9B,SAAS,CAA4B;IACrC,UAAU,CAAU;IACX,OAAO,CAAiB;IACxB,SAAS,CAAS;IAC3B,YAAY,OAA+B,EAAW,QAAuB;wBAAvB,QAAQ;QAC1D,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAC;QAC3J,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,KAA6B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnJ,iGAAiG;IACjG,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,EAAE,CAAkC,KAAQ,EAAE,QAA2C,IAAgB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnJ,OAAO,CAA4D,KAAQ,EAAE,KAAyB;QAClG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;YACtC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE;gBACxD,IAAI,CAAC,UAAU,GAAG,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,0CAA0C,CAAC,CAAC;YAC7G,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,QAAiC,EAAE,MAAoB;QAC9E,cAAc,CAAC,MAAM,CAAC,CAAC;QAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;QAClJ,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;YAC9G,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;YAClH,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;oBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;gBACvJ,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YAC5B,CAAC;QACL,CAAC;QACD,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,aAAa,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxI,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACrF,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACnF,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC;YACvB,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,uEAAuE;YACvE,8DAA8D;YAC9D,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC5C,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1C,IAAI,aAAa;oBAAE,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,KAAY;QAChB,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO;QAC1B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,oGAAoG;QACpG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,gBAAgB;QAClB,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAAE,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC;gBAAE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtI,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACpC,CAAC;IACD,KAAK,CAAC,kBAAkB;QACpB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpF,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtI,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACH,OAAO,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,iCAAiC,EAAE,YAAY,CAAC,CAAC,CAAC;YACxF,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAE,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACzG,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;CACJ"}

package/dist/transport/relay-error.d.ts

@@ -0,0 +1,23 @@
+import { type ExtensibleModel } from '../protocol/codec.js';
+import { type JsonObject } from '../protocol/json.js';
+export interface RelayFailure extends ExtensibleModel {
+    readonly code: string;
+    readonly message: string;
+    readonly data?: JsonObject;
+}
+export declare const relayFailureCodec: import("../protocol/codec.js").ProtocolCodec<RelayFailure>;
+export declare const rpcErrorCodes: Readonly<Record<string, number>>;
+export declare function retryAfter(failure: RelayFailure): number | undefined;
+/** Only isDefinitiveRejection proves that a business operation was not accepted. */
+export declare class RelayError extends Error {
+    readonly httpStatus?: number | undefined;
+    readonly rpcCode?: number | undefined;
+    readonly name = "RelayError";
+    readonly failure: RelayFailure;
+    constructor(failure: RelayFailure, httpStatus?: number | undefined, rpcCode?: number | undefined);
+    get code(): string;
+    get retryAfter(): number | undefined;
+    get isDefinitiveRejection(): boolean;
+}
+export declare function validateRetryAfterHeader(failure: RelayFailure, status: number, header: string | null): void;
+//# sourceMappingURL=relay-error.d.ts.map

package/dist/transport/relay-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-error.d.ts","sourceRoot":"","sources":["../../src/transport/relay-error.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAqC,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEzF,MAAM,WAAW,YAAa,SAAQ,eAAe;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE;AACrI,eAAO,MAAM,iBAAiB,4DAG5B,CAAC;AAEH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKzD,CAAC;AAGH,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAIpE;AAED,oFAAoF;AACpF,qBAAa,UAAW,SAAQ,KAAK;IAGE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM;IAF1F,SAAkB,IAAI,gBAAgB;IACtC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,YAAY,OAAO,EAAE,YAAY,EAAW,UAAU,CAAC,EAAE,MAAM,YAAA,EAAW,OAAO,CAAC,EAAE,MAAM,YAAA,EAIzF;IACD,IAAI,IAAI,IAAI,MAAM,CAA8B;IAChD,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAAqC;IACzE,IAAI,qBAAqB,IAAI,OAAO,CAA2C;CAClF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAO3G"}

package/dist/transport/relay-error.js

@@ -0,0 +1,47 @@
+import { ProtocolError } from '../errors.js';
+import { defineCodec, text } from '../protocol/codec.js';
+import { requireObject, requireSafeInteger } from '../protocol/json.js';
+export const relayFailureCodec = defineCodec({
+    code: { wire: 'code', codec: text }, message: { wire: 'message', codec: text },
+    data: { wire: 'data', codec: { decode: requireObject, encode: requireObject }, optional: true },
+});
+export const rpcErrorCodes = Object.freeze({
+    bad_request: -32602, method_not_found: -32601, internal_error: -32603, unauthorized: -32001, forbidden: -32003,
+    invalid_signature: -32004, device_unknown: -32005, clock_skew: -32006, not_found: -32010, state_conflict: -32011,
+    stale_state: -32012, invalid_state: -32013, message_expired: -32014, request_too_large: -32015, target_not_local: -32020,
+    route_stale: -32021, route_not_found: -32022, bad_gateway: -32023, rate_limited: -32030, temporarily_unavailable: -32031,
+});
+const definitiveCodes = new Set(Object.keys(rpcErrorCodes).filter(code => !['internal_error', 'bad_gateway', 'temporarily_unavailable'].includes(code)));
+export function retryAfter(failure) {
+    if (failure.code !== 'rate_limited' || failure.data?.retry_after === undefined)
+        return undefined;
+    requireSafeInteger(failure.data.retry_after, 0);
+    return failure.data.retry_after;
+}
+/** Only isDefinitiveRejection proves that a business operation was not accepted. */
+export class RelayError extends Error {
+    httpStatus;
+    rpcCode;
+    name = 'RelayError';
+    failure;
+    constructor(failure, httpStatus, rpcCode) {
+        super(failure.message);
+        this.httpStatus = httpStatus;
+        this.rpcCode = rpcCode;
+        this.failure = relayFailureCodec.decode(relayFailureCodec.encode(failure));
+        retryAfter(this.failure);
+    }
+    get code() { return this.failure.code; }
+    get retryAfter() { return retryAfter(this.failure); }
+    get isDefinitiveRejection() { return definitiveCodes.has(this.code); }
+}
+export function validateRetryAfterHeader(failure, status, header) {
+    if (failure.code !== 'rate_limited')
+        return;
+    const seconds = retryAfter(failure);
+    if (header !== null && (seconds === undefined || !/^[0-9]+$/.test(header) || /\s/.test(header)
+        || !Number.isSafeInteger(Number(header)) || Number(header) !== seconds)
+        || status === 429 && seconds !== undefined && header === null)
+        throw new ProtocolError('invalid_retry_after', 'Retry-After must match the error retry_after value.');
+}
+//# sourceMappingURL=relay-error.js.map

package/dist/transport/relay-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-error.js","sourceRoot":"","sources":["../../src/transport/relay-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,IAAI,EAAwB,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AAGzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAe;IACvD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;IAC9E,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAClG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IACzE,WAAW,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,KAAK;IAC9G,iBAAiB,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,KAAK;IAChH,WAAW,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,KAAK;IACxH,WAAW,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,uBAAuB,EAAE,CAAC,KAAK;CAC3H,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEzJ,MAAM,UAAU,UAAU,CAAC,OAAqB;IAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;AACpC,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGW,UAAU;IAAoB,OAAO;IAF/D,IAAI,GAAG,YAAY,CAAC;IAC7B,OAAO,CAAe;IAC/B,YAAY,OAAqB,EAAW,UAAmB,EAAW,OAAgB;QACtF,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;0BADiB,UAAU;uBAAoB,OAAO;QAE7E,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,UAAU,KAAyB,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,qBAAqB,KAAc,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CAClF;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAqB,EAAE,MAAc,EAAE,MAAqB;IACjG,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;WACvF,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC;WACpE,MAAM,KAAK,GAAG,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAC7D,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,qDAAqD,CAAC,CAAC;AAC9G,CAAC"}

package/dist/transport/rpc.d.ts

@@ -0,0 +1,31 @@
+import { ProtocolError } from '../errors.js';
+import { type JsonObject, type JsonValue } from '../protocol/json.js';
+import { RelayError } from './relay-error.js';
+export declare const maxSocketMessageBytes = 1048576;
+export type RpcId = string | number;
+export interface RpcNotification {
+    readonly method: string;
+    readonly params?: JsonObject;
+}
+export interface RpcFailure {
+    readonly code: number;
+    readonly message: string;
+    readonly data?: JsonObject;
+}
+export type RpcMessage = {
+    readonly kind: 'notification';
+    readonly notification: RpcNotification;
+} | {
+    readonly kind: 'success';
+    readonly id: RpcId;
+    readonly result: JsonValue;
+} | {
+    readonly kind: 'failure';
+    readonly id: RpcId | null;
+    readonly error: RpcFailure;
+};
+export declare function encodeRpcRequest(id: RpcId, method: string, params?: JsonObject): string;
+/** Parses the whole message before ignoring unknown JSON-RPC wrapper extensions. */
+export declare function decodeRpcMessage(text: string): RpcMessage;
+export declare function rpcFailureError(error: RpcFailure): RelayError | ProtocolError;
+//# sourceMappingURL=rpc.d.ts.map

package/dist/transport/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/transport/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAA+D,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEnI,OAAO,EAAE,UAAU,EAAiB,MAAM,kBAAkB,CAAC;AAE7D,eAAO,MAAM,qBAAqB,UAAY,CAAC;AAC/C,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AACpC,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE;AAC1F,MAAM,WAAW,UAAU;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE;AAC3G,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAQ1F,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAOvF;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAkBzD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,CAK7E"}

package/dist/transport/rpc.js

@@ -0,0 +1,56 @@
+import { ProtocolError } from '../errors.js';
+import { encodeUtf8 } from '../protocol/encoding.js';
+import { canonicalJson, parseJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { validateMethodName } from './endpoint.js';
+import { RelayError, rpcErrorCodes } from './relay-error.js';
+export const maxSocketMessageBytes = 1_048_576;
+function requireId(value) {
+    if (typeof value === 'number') {
+        requireSafeInteger(value);
+        return value;
+    }
+    if (typeof value !== 'string' || encodeUtf8(value).length > 128)
+        throw new ProtocolError('invalid_rpc_id', 'RPC IDs must be safe integers or strings of at most 128 UTF-8 bytes.');
+    return value;
+}
+export function encodeRpcRequest(id, method, params) {
+    requireId(id);
+    validateMethodName(method);
+    const value = { jsonrpc: '2.0', id, method, ...(params === undefined ? {} : { params: requireObject(params) }) };
+    const text = canonicalJson(value);
+    if (encodeUtf8(text).length > maxSocketMessageBytes)
+        throw new ProtocolError('request_too_large', 'A WebSocket request cannot exceed 1 MiB.');
+    return text;
+}
+/** Parses the whole message before ignoring unknown JSON-RPC wrapper extensions. */
+export function decodeRpcMessage(text) {
+    if (encodeUtf8(text).length > maxSocketMessageBytes)
+        throw new ProtocolError('message_too_large', 'A WebSocket message cannot exceed 1 MiB.');
+    const value = requireObject(parseJson(text));
+    if (value.jsonrpc !== '2.0')
+        throw new ProtocolError('invalid_rpc', 'Expected JSON-RPC 2.0.');
+    const has = (key) => Object.hasOwn(value, key);
+    if (!has('id')) {
+        if (typeof value.method !== 'string' || value.method.length === 0)
+            throw new ProtocolError('invalid_rpc', 'A notification must have a method and no id.');
+        // Future method names are retained. Dispatchers may ignore notifications they do not know.
+        return { kind: 'notification', notification: { method: value.method, ...(has('params') ? { params: requireObject(value.params) } : {}) } };
+    }
+    if (has('result') === has('error'))
+        throw new ProtocolError('invalid_rpc', 'A response must contain exactly one of result or error.');
+    if (has('result'))
+        return { kind: 'success', id: requireId(value.id), result: value.result };
+    const error = requireObject(value.error);
+    requireSafeInteger(error.code);
+    if (typeof error.message !== 'string')
+        throw new ProtocolError('invalid_rpc', 'An RPC error must have a string message.');
+    return { kind: 'failure', id: value.id === null ? null : requireId(value.id),
+        error: { code: error.code, message: error.message, ...(Object.hasOwn(error, 'data') ? { data: requireObject(error.data) } : {}) } };
+}
+export function rpcFailureError(error) {
+    const code = Object.keys(rpcErrorCodes).find(key => rpcErrorCodes[key] === error.code);
+    return code === undefined
+        ? new ProtocolError('unknown_rpc_error', `Unmapped JSON-RPC error ${error.code}: ${error.message}`)
+        : new RelayError({ code, message: error.message, ...(error.data === undefined ? {} : { data: error.data }) }, undefined, error.code);
+}
+//# sourceMappingURL=rpc.js.map

package/dist/transport/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/transport/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAmC,MAAM,qBAAqB,CAAC;AACnI,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAQ/C,SAAS,SAAS,CAAC,KAA4B;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,sEAAsE,CAAC,CAAC;IACnL,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAS,EAAE,MAAc,EAAE,MAAmB;IAC3E,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7H,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;IAC9I,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IACzC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;IAC9I,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACb,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAC7D,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;QAC3F,2FAA2F;QAC3F,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IAChJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,yDAAyD,CAAC,CAAC;IACtI,IAAI,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC;IAC9F,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC;IAC1C,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;IAC1H,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAC7I,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO,IAAI,KAAK,SAAS;QACrB,CAAC,CAAC,IAAI,aAAa,CAAC,mBAAmB,EAAE,2BAA2B,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACnG,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7I,CAAC"}

package/dist/transport/session.d.ts

@@ -0,0 +1,49 @@
+import type { AccountSigner, DeviceSigner } from '../interactions.js';
+import { type SessionCredentials, type SessionMode } from '../models/authentication.js';
+import { NetworkContext } from '../protocol/context.js';
+import type { JsonObject, JsonValue } from '../protocol/json.js';
+import { type RuntimeClock } from '../runtime/clock.js';
+import type { HttpRelayTransport } from './http.js';
+export type AuthenticationIdentity = {
+    readonly mode: 'account';
+    readonly signer: AccountSigner;
+} | {
+    readonly mode: 'device';
+    readonly signer: DeviceSigner;
+};
+export type AuthenticationSender = (method: string, parameters: JsonObject, signal?: AbortSignal) => Promise<JsonValue | undefined>;
+/** Keeps bearer credentials out of ordinary object enumeration and diagnostic serialization. */
+export declare class RelaySession {
+    #private;
+    readonly origin: string;
+    constructor(credentials: SessionCredentials, origin: string, challengeCreatedAt: number, started: number, clock: RuntimeClock);
+    get mode(): SessionMode;
+    get lifetimeSeconds(): number;
+    get remainingSeconds(): number;
+    /** Return only for sending a request to origin. Do not log or persist. */
+    getToken(endpoint: string): string;
+}
+/** Captures immutable identity at binding time; certificate renewal for the same device is allowed. */
+export declare class RelayAuthenticator {
+    #private;
+    readonly relayId: string;
+    readonly context: NetworkContext;
+    readonly clock: RuntimeClock;
+    readonly accountId: string;
+    readonly deviceId: string | undefined;
+    readonly mode: SessionMode;
+    constructor(relayId: string, context: NetworkContext, identity: AuthenticationIdentity, clock?: RuntimeClock);
+    assertIdentity(): void;
+    authenticate(endpoint: string, send: AuthenticationSender, signal?: AbortSignal): Promise<RelaySession>;
+}
+/** Shares only authentication work. Canceling a waiter never cancels another caller's refresh. */
+export declare class HttpRelaySessions {
+    #private;
+    readonly authenticator: RelayAuthenticator;
+    readonly transport: HttpRelayTransport;
+    constructor(authenticator: RelayAuthenticator, transport: HttpRelayTransport);
+    get(endpoint: string, signal?: AbortSignal): Promise<RelaySession>;
+    invalidate(session?: RelaySession): void;
+    dispose(): void;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/transport/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/transport/session.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAGkE,KAAK,kBAAkB,EAAE,KAAK,WAAW,EACjH,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAA4D,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAElH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAC/J,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;AAEpI,gGAAgG;AAChG,qBAAa,YAAY;;IAKwB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAApE,YAAY,WAAW,EAAE,kBAAkB,EAAW,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAKrI;IACD,IAAI,IAAI,IAAI,WAAW,CAAmC;IAC1D,IAAI,eAAe,IAAI,MAAM,CAA8C;IAC3E,IAAI,gBAAgB,IAAI,MAAM,CAAwG;IACtI,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIjC;CACJ;AAED,uGAAuG;AACvG,qBAAa,kBAAkB;;IAMf,QAAQ,CAAC,OAAO,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc;IAAoC,QAAQ,CAAC,KAAK,EAAE,YAAY;IAHtI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,YAAqB,OAAO,EAAE,MAAM,EAAW,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,sBAAsB,EAAW,KAAK,GAAE,YAA0B,EAcnJ;IAED,cAAc,IAAI,IAAI,CAUrB;IAEK,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA4C5G;CACJ;AAED,kGAAkG;AAClG,qBAAa,iBAAiB;;IAId,QAAQ,CAAC,aAAa,EAAE,kBAAkB;IAAE,QAAQ,CAAC,SAAS,EAAE,kBAAkB;IAA9F,YAAqB,aAAa,EAAE,kBAAkB,EAAW,SAAS,EAAE,kBAAkB,EAAI;IAElG,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAgBjE;IAED,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAuF;IAC/H,OAAO,IAAI,IAAI,CAAiJ;CACnK"}