@naylence/runtime 0.3.5-test.950 → 0.3.5-test.952

package/dist/browser/index.mjs

@@ -96,12 +96,12 @@ installProcessEnvShim();
 // --- END ENV SHIM ---
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.3.5-test.950
+// Generated from package.json version: 0.3.5-test.952
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.3.5-test.950';
+const VERSION = '0.3.5-test.952';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -9862,14 +9862,12 @@ function serializeTransportFrame(frame) {
     return serializable;
 }
 /**
- * Unwrap a transport frame, validating source and destination
+ * Unwrap a transport frame (pure deserializer - no filtering)
  *
  * @param raw - Raw data from the bus
- * @param localNodeId - This connector's node ID
- * @param remoteNodeId - Expected remote node ID
- * @returns Unwrapped payload if frame is valid and addressed to us, null otherwise
+ * @returns Unwrapped frame with payload as Uint8Array, or null if invalid structure
  */
-function unwrapTransportFrame(raw, localNodeId, remoteNodeId) {
+function unwrapTransportFrame(raw) {
     // Validate basic structure
     if (!raw || typeof raw !== 'object') {
         return null;
@@ -9883,16 +9881,17 @@ function unwrapTransportFrame(raw, localNodeId, remoteNodeId) {
     if (typeof frame.src !== 'string' || typeof frame.dst !== 'string') {
         return null;
     }
-    // Only accept frames addressed to us from the expected remote
-    if (frame.dst !== localNodeId || frame.src !== remoteNodeId) {
-        return null;
-    }
     // Extract payload
     if (!frame.payload || !Array.isArray(frame.payload)) {
         return null;
     }
-    // Convert array back to Uint8Array
-    return Uint8Array.from(frame.payload);
+    // Convert array back to Uint8Array and return full frame
+    return {
+        v: frame.v,
+        src: frame.src,
+        dst: frame.dst,
+        payload: Uint8Array.from(frame.payload),
+    };
 }
 
 const logger$_ = getLogger('naylence.fame.connector.broadcast_channel_connector');
@@ -10007,43 +10006,64 @@ let BroadcastChannelConnector$2 = class BroadcastChannelConnector extends BaseAs
                 return;
             }
             // Try to unwrap as transport frame
-            const unwrapped = unwrapTransportFrame(busMessage.payload, this.localNodeId, this.remoteNodeId === '*' ? busMessage.senderId : this.remoteNodeId);
-            if (unwrapped) {
-                // Successfully unwrapped transport frame
-                logger$_.debug('broadcast_channel_transport_frame_received', {
-                    channel: this.channelName,
-                    sender_id: busMessage.senderId,
-                    connector_id: this.connectorId,
-                    local_node_id: this.localNodeId,
-                    remote_node_id: this.remoteNodeId,
-                    payload_length: unwrapped.byteLength,
-                });
-                if (this._shouldSkipDuplicateAck(busMessage.senderId, unwrapped)) {
-                    return;
-                }
-                try {
-                    if (typeof this.inbox.tryEnqueue === 'function') {
-                        const accepted = this.inbox.tryEnqueue(unwrapped);
-                        if (accepted) {
-                            return;
-                        }
+            const frame = unwrapTransportFrame(busMessage.payload);
+            if (frame) {
+                // Apply connector's filtering policy: strict dst check, src accepts wildcard
+                const srcMatches = this.remoteNodeId === '*' || frame.src === this.remoteNodeId;
+                const dstMatches = frame.dst === this.localNodeId;
+                if (dstMatches && srcMatches) {
+                    // Successfully received and filtered transport frame
+                    logger$_.debug('broadcast_channel_transport_frame_received', {
+                        channel: this.channelName,
+                        sender_id: busMessage.senderId,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        payload_length: frame.payload.byteLength,
+                    });
+                    const unwrapped = frame.payload;
+                    if (this._shouldSkipDuplicateAck(busMessage.senderId, unwrapped)) {
+                        return;
                     }
-                    this.inbox.enqueue(unwrapped);
-                }
-                catch (error) {
-                    if (error instanceof QueueFullError) {
-                        logger$_.warning('broadcast_channel_receive_queue_full', {
-                            channel: this.channelName,
-                        });
+                    try {
+                        if (typeof this.inbox.tryEnqueue === 'function') {
+                            const accepted = this.inbox.tryEnqueue(unwrapped);
+                            if (accepted) {
+                                return;
+                            }
+                        }
+                        this.inbox.enqueue(unwrapped);
                     }
-                    else {
-                        logger$_.error('broadcast_channel_receive_error', {
-                            channel: this.channelName,
-                            error: error instanceof Error ? error.message : String(error),
-                        });
+                    catch (error) {
+                        if (error instanceof QueueFullError) {
+                            logger$_.warning('broadcast_channel_receive_queue_full', {
+                                channel: this.channelName,
+                            });
+                        }
+                        else {
+                            logger$_.error('broadcast_channel_receive_error', {
+                                channel: this.channelName,
+                                error: error instanceof Error ? error.message : String(error),
+                            });
+                        }
                     }
+                    return;
+                }
+                else {
+                    // Frame filtered out by addressing rules
+                    logger$_.debug('broadcast_channel_transport_frame_filtered', {
+                        channel: this.channelName,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        reason: !dstMatches ? 'wrong_destination' : 'wrong_source',
+                    });
+                    return;
                 }
-                return;
             }
             // Fall back to legacy format (no transport frame)
             const payload = BroadcastChannelConnector.coercePayload(busMessage.payload);
@@ -20570,40 +20590,61 @@ class InPageConnector extends BaseAsyncConnector {
                 return;
             }
             // Try to unwrap as transport frame
-            const unwrapped = unwrapTransportFrame(busMessage.payload, this.localNodeId, this.remoteNodeId === '*' ? busMessage.senderId : this.remoteNodeId);
-            if (unwrapped) {
-                // Successfully unwrapped transport frame
-                logger$G.debug('inpage_transport_frame_received', {
-                    channel: this.channelName,
-                    sender_id: busMessage.senderId,
-                    connector_id: this.connectorId,
-                    local_node_id: this.localNodeId,
-                    remote_node_id: this.remoteNodeId,
-                    payload_length: unwrapped.byteLength,
-                });
-                try {
-                    if (typeof this.inbox.tryEnqueue === 'function') {
-                        const accepted = this.inbox.tryEnqueue(unwrapped);
-                        if (accepted) {
-                            return;
+            const frame = unwrapTransportFrame(busMessage.payload);
+            if (frame) {
+                // Apply connector's filtering policy: strict dst check, src accepts wildcard
+                const srcMatches = this.remoteNodeId === '*' || frame.src === this.remoteNodeId;
+                const dstMatches = frame.dst === this.localNodeId;
+                if (dstMatches && srcMatches) {
+                    // Successfully received and filtered transport frame
+                    logger$G.debug('inpage_transport_frame_received', {
+                        channel: this.channelName,
+                        sender_id: busMessage.senderId,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        payload_length: frame.payload.byteLength,
+                    });
+                    const unwrapped = frame.payload;
+                    try {
+                        if (typeof this.inbox.tryEnqueue === 'function') {
+                            const accepted = this.inbox.tryEnqueue(unwrapped);
+                            if (accepted) {
+                                return;
+                            }
                         }
+                        this.inbox.enqueue(unwrapped);
                     }
-                    this.inbox.enqueue(unwrapped);
-                }
-                catch (error) {
-                    if (error instanceof QueueFullError) {
-                        logger$G.warning('inpage_receive_queue_full', {
-                            channel: this.channelName,
-                        });
-                    }
-                    else {
-                        logger$G.error('inpage_receive_error', {
-                            channel: this.channelName,
-                            error: error instanceof Error ? error.message : String(error),
-                        });
+                    catch (error) {
+                        if (error instanceof QueueFullError) {
+                            logger$G.warning('inpage_receive_queue_full', {
+                                channel: this.channelName,
+                            });
+                        }
+                        else {
+                            logger$G.error('inpage_receive_error', {
+                                channel: this.channelName,
+                                error: error instanceof Error ? error.message : String(error),
+                            });
+                        }
                     }
+                    return;
+                }
+                else {
+                    // Frame filtered out by addressing rules
+                    logger$G.debug('inpage_transport_frame_filtered', {
+                        channel: this.channelName,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        reason: !dstMatches ? 'wrong_destination' : 'wrong_source',
+                    });
+                    return;
                 }
-                return;
             }
             // Fall back to legacy format (no transport frame)
             const payload = InPageConnector.coercePayload(busMessage.payload);
@@ -30138,41 +30179,44 @@ class BroadcastChannelListener extends TransportListener {
         if (typeof senderId !== 'string' || senderId.length === 0) {
             return null;
         }
-        const payload = coercePayload(record.payload);
-        if (!payload) {
-            logger$o.debug('broadcast_channel_listener_ignored_event_without_payload', {
-                sender_id: senderId,
-            });
-            return null;
-        }
-        // Try to unwrap as transport frame first
-        // Use wildcard for remoteNodeId since we don't know the sender's node ID yet
-        let unwrapped = null;
-        if (this._routingNode) {
-            try {
-                // First try to deserialize as transport frame
-                const parsed = JSON.parse(new TextDecoder().decode(payload));
-                if (parsed && typeof parsed === 'object' && 'v' in parsed && 'src' in parsed && 'dst' in parsed) {
-                    const frame = parsed;
-                    // Check if this frame is addressed to us (localNodeId)
-                    if (frame.dst === this._routingNode.id) {
-                        unwrapped = unwrapTransportFrame(payload, this._routingNode.id, '*');
-                        if (unwrapped) {
-                            logger$o.debug('broadcast_channel_listener_unwrapped_transport_frame', {
-                                sender_id: senderId,
-                                src: frame.src,
-                                dst: frame.dst,
-                            });
-                        }
-                    }
+        // Check if payload is a transport frame object first
+        let envelopePayload = null;
+        if (this._routingNode && record.payload && typeof record.payload === 'object') {
+            // Try to unwrap as transport frame
+            const frame = unwrapTransportFrame(record.payload);
+            if (frame) {
+                // Apply listener's filtering policy: accept frames addressed to us OR with wildcard destination
+                // Wildcard is needed because downstream nodes don't know the sentinel's ID during initial attach
+                const isAddressedToUs = frame.dst === this._routingNode.id || frame.dst === '*';
+                if (isAddressedToUs) {
+                    envelopePayload = frame.payload;
+                    logger$o.debug('broadcast_channel_listener_unwrapped_transport_frame', {
+                        sender_id: senderId,
+                        src: frame.src,
+                        dst: frame.dst,
+                    });
+                }
+                else {
+                    // Frame addressed to a different node, ignore it
+                    logger$o.debug('broadcast_channel_listener_ignored_frame_wrong_destination', {
+                        sender_id: senderId,
+                        dst: frame.dst,
+                        expected: this._routingNode.id,
+                    });
+                    return null;
                 }
             }
-            catch {
-                // Not a transport frame, continue with legacy format
+        }
+        // If not a transport frame, try to coerce as legacy format
+        if (!envelopePayload) {
+            envelopePayload = coercePayload(record.payload);
+            if (!envelopePayload) {
+                logger$o.debug('broadcast_channel_listener_ignored_event_without_payload', {
+                    sender_id: senderId,
+                });
+                return null;
             }
         }
-        // Use unwrapped payload if available, otherwise use raw payload
-        const envelopePayload = unwrapped ?? payload;
         let envelope;
         try {
             const decoded = new TextDecoder().decode(envelopePayload);
@@ -30182,7 +30226,7 @@ class BroadcastChannelListener extends TransportListener {
         catch (error) {
             const decoded = (() => {
                 try {
-                    return new TextDecoder().decode(payload);
+                    return new TextDecoder().decode(envelopePayload);
                 }
                 catch {
                     return null;

package/dist/cjs/naylence/fame/connector/broadcast-channel-connector.browser.js

@@ -119,43 +119,64 @@ class BroadcastChannelConnector extends base_async_connector_js_1.BaseAsyncConne
                 return;
             }
             // Try to unwrap as transport frame
-            const unwrapped = (0, transport_frame_js_1.unwrapTransportFrame)(busMessage.payload, this.localNodeId, this.remoteNodeId === '*' ? busMessage.senderId : this.remoteNodeId);
-            if (unwrapped) {
-                // Successfully unwrapped transport frame
-                logger.debug('broadcast_channel_transport_frame_received', {
-                    channel: this.channelName,
-                    sender_id: busMessage.senderId,
-                    connector_id: this.connectorId,
-                    local_node_id: this.localNodeId,
-                    remote_node_id: this.remoteNodeId,
-                    payload_length: unwrapped.byteLength,
-                });
-                if (this._shouldSkipDuplicateAck(busMessage.senderId, unwrapped)) {
-                    return;
-                }
-                try {
-                    if (typeof this.inbox.tryEnqueue === 'function') {
-                        const accepted = this.inbox.tryEnqueue(unwrapped);
-                        if (accepted) {
-                            return;
-                        }
+            const frame = (0, transport_frame_js_1.unwrapTransportFrame)(busMessage.payload);
+            if (frame) {
+                // Apply connector's filtering policy: strict dst check, src accepts wildcard
+                const srcMatches = this.remoteNodeId === '*' || frame.src === this.remoteNodeId;
+                const dstMatches = frame.dst === this.localNodeId;
+                if (dstMatches && srcMatches) {
+                    // Successfully received and filtered transport frame
+                    logger.debug('broadcast_channel_transport_frame_received', {
+                        channel: this.channelName,
+                        sender_id: busMessage.senderId,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        payload_length: frame.payload.byteLength,
+                    });
+                    const unwrapped = frame.payload;
+                    if (this._shouldSkipDuplicateAck(busMessage.senderId, unwrapped)) {
+                        return;
                     }
-                    this.inbox.enqueue(unwrapped);
-                }
-                catch (error) {
-                    if (error instanceof bounded_async_queue_js_1.QueueFullError) {
-                        logger.warning('broadcast_channel_receive_queue_full', {
-                            channel: this.channelName,
-                        });
+                    try {
+                        if (typeof this.inbox.tryEnqueue === 'function') {
+                            const accepted = this.inbox.tryEnqueue(unwrapped);
+                            if (accepted) {
+                                return;
+                            }
+                        }
+                        this.inbox.enqueue(unwrapped);
                     }
-                    else {
-                        logger.error('broadcast_channel_receive_error', {
-                            channel: this.channelName,
-                            error: error instanceof Error ? error.message : String(error),
-                        });
+                    catch (error) {
+                        if (error instanceof bounded_async_queue_js_1.QueueFullError) {
+                            logger.warning('broadcast_channel_receive_queue_full', {
+                                channel: this.channelName,
+                            });
+                        }
+                        else {
+                            logger.error('broadcast_channel_receive_error', {
+                                channel: this.channelName,
+                                error: error instanceof Error ? error.message : String(error),
+                            });
+                        }
                     }
+                    return;
+                }
+                else {
+                    // Frame filtered out by addressing rules
+                    logger.debug('broadcast_channel_transport_frame_filtered', {
+                        channel: this.channelName,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        reason: !dstMatches ? 'wrong_destination' : 'wrong_source',
+                    });
+                    return;
                 }
-                return;
             }
             // Fall back to legacy format (no transport frame)
             const payload = BroadcastChannelConnector.coercePayload(busMessage.payload);

package/dist/cjs/naylence/fame/connector/broadcast-channel-listener.js

@@ -214,41 +214,44 @@ class BroadcastChannelListener extends transport_listener_js_1.TransportListener
         if (typeof senderId !== 'string' || senderId.length === 0) {
             return null;
         }
-        const payload = coercePayload(record.payload);
-        if (!payload) {
-            logger.debug('broadcast_channel_listener_ignored_event_without_payload', {
-                sender_id: senderId,
-            });
-            return null;
-        }
-        // Try to unwrap as transport frame first
-        // Use wildcard for remoteNodeId since we don't know the sender's node ID yet
-        let unwrapped = null;
-        if (this._routingNode) {
-            try {
-                // First try to deserialize as transport frame
-                const parsed = JSON.parse(new TextDecoder().decode(payload));
-                if (parsed && typeof parsed === 'object' && 'v' in parsed && 'src' in parsed && 'dst' in parsed) {
-                    const frame = parsed;
-                    // Check if this frame is addressed to us (localNodeId)
-                    if (frame.dst === this._routingNode.id) {
-                        unwrapped = (0, transport_frame_js_1.unwrapTransportFrame)(payload, this._routingNode.id, '*');
-                        if (unwrapped) {
-                            logger.debug('broadcast_channel_listener_unwrapped_transport_frame', {
-                                sender_id: senderId,
-                                src: frame.src,
-                                dst: frame.dst,
-                            });
-                        }
-                    }
+        // Check if payload is a transport frame object first
+        let envelopePayload = null;
+        if (this._routingNode && record.payload && typeof record.payload === 'object') {
+            // Try to unwrap as transport frame
+            const frame = (0, transport_frame_js_1.unwrapTransportFrame)(record.payload);
+            if (frame) {
+                // Apply listener's filtering policy: accept frames addressed to us OR with wildcard destination
+                // Wildcard is needed because downstream nodes don't know the sentinel's ID during initial attach
+                const isAddressedToUs = frame.dst === this._routingNode.id || frame.dst === '*';
+                if (isAddressedToUs) {
+                    envelopePayload = frame.payload;
+                    logger.debug('broadcast_channel_listener_unwrapped_transport_frame', {
+                        sender_id: senderId,
+                        src: frame.src,
+                        dst: frame.dst,
+                    });
+                }
+                else {
+                    // Frame addressed to a different node, ignore it
+                    logger.debug('broadcast_channel_listener_ignored_frame_wrong_destination', {
+                        sender_id: senderId,
+                        dst: frame.dst,
+                        expected: this._routingNode.id,
+                    });
+                    return null;
                 }
             }
-            catch {
-                // Not a transport frame, continue with legacy format
+        }
+        // If not a transport frame, try to coerce as legacy format
+        if (!envelopePayload) {
+            envelopePayload = coercePayload(record.payload);
+            if (!envelopePayload) {
+                logger.debug('broadcast_channel_listener_ignored_event_without_payload', {
+                    sender_id: senderId,
+                });
+                return null;
             }
         }
-        // Use unwrapped payload if available, otherwise use raw payload
-        const envelopePayload = unwrapped ?? payload;
         let envelope;
         try {
             const decoded = new TextDecoder().decode(envelopePayload);
@@ -258,7 +261,7 @@ class BroadcastChannelListener extends transport_listener_js_1.TransportListener
         catch (error) {
             const decoded = (() => {
                 try {
-                    return new TextDecoder().decode(payload);
+                    return new TextDecoder().decode(envelopePayload);
                 }
                 catch {
                     return null;

package/dist/cjs/naylence/fame/connector/inpage-connector.js

@@ -129,40 +129,61 @@ class InPageConnector extends base_async_connector_js_1.BaseAsyncConnector {
                 return;
             }
             // Try to unwrap as transport frame
-            const unwrapped = (0, transport_frame_js_1.unwrapTransportFrame)(busMessage.payload, this.localNodeId, this.remoteNodeId === '*' ? busMessage.senderId : this.remoteNodeId);
-            if (unwrapped) {
-                // Successfully unwrapped transport frame
-                logger.debug('inpage_transport_frame_received', {
-                    channel: this.channelName,
-                    sender_id: busMessage.senderId,
-                    connector_id: this.connectorId,
-                    local_node_id: this.localNodeId,
-                    remote_node_id: this.remoteNodeId,
-                    payload_length: unwrapped.byteLength,
-                });
-                try {
-                    if (typeof this.inbox.tryEnqueue === 'function') {
-                        const accepted = this.inbox.tryEnqueue(unwrapped);
-                        if (accepted) {
-                            return;
+            const frame = (0, transport_frame_js_1.unwrapTransportFrame)(busMessage.payload);
+            if (frame) {
+                // Apply connector's filtering policy: strict dst check, src accepts wildcard
+                const srcMatches = this.remoteNodeId === '*' || frame.src === this.remoteNodeId;
+                const dstMatches = frame.dst === this.localNodeId;
+                if (dstMatches && srcMatches) {
+                    // Successfully received and filtered transport frame
+                    logger.debug('inpage_transport_frame_received', {
+                        channel: this.channelName,
+                        sender_id: busMessage.senderId,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        payload_length: frame.payload.byteLength,
+                    });
+                    const unwrapped = frame.payload;
+                    try {
+                        if (typeof this.inbox.tryEnqueue === 'function') {
+                            const accepted = this.inbox.tryEnqueue(unwrapped);
+                            if (accepted) {
+                                return;
+                            }
                         }
+                        this.inbox.enqueue(unwrapped);
                     }
-                    this.inbox.enqueue(unwrapped);
-                }
-                catch (error) {
-                    if (error instanceof bounded_async_queue_js_1.QueueFullError) {
-                        logger.warning('inpage_receive_queue_full', {
-                            channel: this.channelName,
-                        });
-                    }
-                    else {
-                        logger.error('inpage_receive_error', {
-                            channel: this.channelName,
-                            error: error instanceof Error ? error.message : String(error),
-                        });
+                    catch (error) {
+                        if (error instanceof bounded_async_queue_js_1.QueueFullError) {
+                            logger.warning('inpage_receive_queue_full', {
+                                channel: this.channelName,
+                            });
+                        }
+                        else {
+                            logger.error('inpage_receive_error', {
+                                channel: this.channelName,
+                                error: error instanceof Error ? error.message : String(error),
+                            });
+                        }
                     }
+                    return;
+                }
+                else {
+                    // Frame filtered out by addressing rules
+                    logger.debug('inpage_transport_frame_filtered', {
+                        channel: this.channelName,
+                        connector_id: this.connectorId,
+                        local_node_id: this.localNodeId,
+                        remote_node_id: this.remoteNodeId,
+                        frame_src: frame.src,
+                        frame_dst: frame.dst,
+                        reason: !dstMatches ? 'wrong_destination' : 'wrong_source',
+                    });
+                    return;
                 }
-                return;
             }
             // Fall back to legacy format (no transport frame)
             const payload = InPageConnector.coercePayload(busMessage.payload);