@qlever-llc/trellis 0.10.3-rc.2 → 0.10.3

package/esm/npm/src/telemetry/result.js

@@ -1,18 +0,0 @@
-import { trace } from "@opentelemetry/api";
-import { BaseError } from "@qlever-llc/result";
-let traceIdGetterConfigured = false;
-export function configureErrorTraceId() {
-    if (traceIdGetterConfigured)
-        return;
-    traceIdGetterConfigured = true;
-    BaseError.traceIdGetter = () => {
-        const span = trace.getActiveSpan();
-        if (!span)
-            return undefined;
-        const spanContext = span.spanContext();
-        if (spanContext.traceId === "00000000000000000000000000000000") {
-            return undefined;
-        }
-        return spanContext.traceId;
-    };
-}

package/esm/npm/src/telemetry/trace.d.ts

@@ -1,5 +0,0 @@
-import type { Context, Span } from "@opentelemetry/api";
-export declare function getTrellisTracer(): import("@opentelemetry/api").Tracer;
-export declare function startClientSpan(method: string, subject: string): Span;
-export declare function startServerSpan(method: string, subject: string, parentContext?: Context): Span;
-//# sourceMappingURL=trace.d.ts.map

package/esm/npm/src/telemetry/trace.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../../../src/telemetry/trace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAMxD,wBAAgB,gBAAgB,wCAE/B;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CASrE;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,OAAO,GACtB,IAAI,CAaN"}

package/esm/npm/src/telemetry/trace.js

@@ -1,26 +0,0 @@
-import { SpanKind } from "@opentelemetry/api";
-import { getTracer } from "./core.js";
-const TRELLIS_INSTRUMENTATION_SCOPE = "@qlever-llc/trellis";
-export function getTrellisTracer() {
-    return getTracer(TRELLIS_INSTRUMENTATION_SCOPE);
-}
-export function startClientSpan(method, subject) {
-    return getTrellisTracer().startSpan(`rpc.client.${method}`, {
-        kind: SpanKind.CLIENT,
-        attributes: {
-            "rpc.system": "nats",
-            "rpc.method": method,
-            "messaging.destination": subject,
-        },
-    });
-}
-export function startServerSpan(method, subject, parentContext) {
-    return getTrellisTracer().startSpan(`rpc.server.${method}`, {
-        kind: SpanKind.SERVER,
-        attributes: {
-            "rpc.system": "nats",
-            "rpc.method": method,
-            "messaging.destination": subject,
-        },
-    }, parentContext);
-}

package/esm/npm/src/telemetry/trellis.d.ts

@@ -1,2 +0,0 @@
-export { getTrellisTracer, startClientSpan, startServerSpan } from "./trace.js";
-//# sourceMappingURL=trellis.d.ts.map

package/esm/npm/src/telemetry/trellis.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trellis.d.ts","sourceRoot":"","sources":["../../../../src/telemetry/trellis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/esm/npm/src/telemetry/trellis.js

@@ -1 +0,0 @@
-export { getTrellisTracer, startClientSpan, startServerSpan } from "./trace.js";

package/esm/npm/src/tracing.d.ts

@@ -1,5 +0,0 @@
-import "./_dnt.polyfills.js";
-export type { HeaderCarrier, NatsHeadersLike } from "./telemetry/mod.js";
-export { configureErrorTraceId, context, createMapCarrier, createNatsHeaderCarrier, extractTraceContext, getActiveSpan, getTrellisTracer as getTracer, injectTraceContext, SpanKind, SpanStatusCode, startClientSpan, startServerSpan, trace, withSpan, withSpanAsync, } from "./telemetry/mod.js";
-export declare function initTracing(serviceName: string): void;
-//# sourceMappingURL=tracing.d.ts.map

package/esm/npm/src/tracing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../../../src/tracing.ts"],"names":[],"mappings":"AAEA,OAAO,qBAAqB,CAAC;AAE7B,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,OAAO,EACP,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,IAAI,SAAS,EAC7B,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,eAAe,EACf,KAAK,EACL,QAAQ,EACR,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAKrD"}

package/esm/npm/src/tracing.js

@@ -1,8 +0,0 @@
-// Keep this subpath for Trellis-specific tracing convenience without exposing
-// telemetry from the root `@qlever-llc/trellis` package surface.
-import "./_dnt.polyfills.js";
-export { configureErrorTraceId, context, createMapCarrier, createNatsHeaderCarrier, extractTraceContext, getActiveSpan, getTrellisTracer as getTracer, injectTraceContext, SpanKind, SpanStatusCode, startClientSpan, startServerSpan, trace, withSpan, withSpanAsync, } from "./telemetry/mod.js";
-export function initTracing(serviceName) {
-    const load = new Function("specifier", "return import(specifier);");
-    void load("./telemetry/init.js").then((mod) => mod.initTracing(serviceName));
-}

package/esm/npm/src/transfer.d.ts

@@ -1,118 +0,0 @@
-import { AsyncResult, type Result as ResultType } from "@qlever-llc/result";
-import { type MsgHdrs, type NatsConnection } from "@nats-io/nats-core";
-import Type, { type Static } from "typebox";
-import { TransferError } from "./errors/TransferError.js";
-export declare const FileInfoSchema: Type.TObject<{
-    key: Type.TString;
-    size: Type.TInteger;
-    updatedAt: Type.TString;
-    digest: Type.TOptional<Type.TString>;
-    contentType: Type.TOptional<Type.TString>;
-    metadata: Type.TRecord<"^.*$", Type.TString>;
-}>;
-export type FileInfo = Static<typeof FileInfoSchema>;
-export declare const SendTransferGrantSchema: Type.TObject<{
-    direction: Type.TLiteral<"send">;
-    maxBytes: Type.TOptional<Type.TInteger>;
-    contentType: Type.TOptional<Type.TString>;
-    metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
-    type: Type.TLiteral<"TransferGrant">;
-    service: Type.TString;
-    sessionKey: Type.TString;
-    transferId: Type.TString;
-    subject: Type.TString;
-    expiresAt: Type.TString;
-    chunkBytes: Type.TInteger;
-}>;
-export declare const ReceiveTransferGrantSchema: Type.TObject<{
-    direction: Type.TLiteral<"receive">;
-    info: Type.TObject<{
-        key: Type.TString;
-        size: Type.TInteger;
-        updatedAt: Type.TString;
-        digest: Type.TOptional<Type.TString>;
-        contentType: Type.TOptional<Type.TString>;
-        metadata: Type.TRecord<"^.*$", Type.TString>;
-    }>;
-    type: Type.TLiteral<"TransferGrant">;
-    service: Type.TString;
-    sessionKey: Type.TString;
-    transferId: Type.TString;
-    subject: Type.TString;
-    expiresAt: Type.TString;
-    chunkBytes: Type.TInteger;
-}>;
-export declare const TransferGrantSchema: Type.TUnion<[Type.TObject<{
-    direction: Type.TLiteral<"send">;
-    maxBytes: Type.TOptional<Type.TInteger>;
-    contentType: Type.TOptional<Type.TString>;
-    metadata: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
-    type: Type.TLiteral<"TransferGrant">;
-    service: Type.TString;
-    sessionKey: Type.TString;
-    transferId: Type.TString;
-    subject: Type.TString;
-    expiresAt: Type.TString;
-    chunkBytes: Type.TInteger;
-}>, Type.TObject<{
-    direction: Type.TLiteral<"receive">;
-    info: Type.TObject<{
-        key: Type.TString;
-        size: Type.TInteger;
-        updatedAt: Type.TString;
-        digest: Type.TOptional<Type.TString>;
-        contentType: Type.TOptional<Type.TString>;
-        metadata: Type.TRecord<"^.*$", Type.TString>;
-    }>;
-    type: Type.TLiteral<"TransferGrant">;
-    service: Type.TString;
-    sessionKey: Type.TString;
-    transferId: Type.TString;
-    subject: Type.TString;
-    expiresAt: Type.TString;
-    chunkBytes: Type.TInteger;
-}>]>;
-export type SendTransferGrant = Static<typeof SendTransferGrantSchema>;
-export type ReceiveTransferGrant = Static<typeof ReceiveTransferGrantSchema>;
-export type TransferGrant = Static<typeof TransferGrantSchema>;
-export type TransferBody = Uint8Array | ArrayBuffer | ReadableStream<Uint8Array> | AsyncIterable<Uint8Array>;
-type TrellisTransferAuth = {
-    sessionKey: string;
-    sign(data: Uint8Array): Promise<Uint8Array> | Uint8Array;
-    currentIat?: () => number;
-};
-declare class BaseTransferHandle {
-    #private;
-    protected constructor(nc: NatsConnection, auth: TrellisTransferAuth, timeoutMs: number);
-    protected get nc(): NatsConnection;
-    protected get auth(): TrellisTransferAuth;
-    protected get timeoutMs(): number;
-    protected validateGrant(grant: TransferGrant, operation: string): ResultType<void, TransferError>;
-    protected buildHeaders(subject: string, payload: Uint8Array, seq?: number, eof?: boolean): Promise<MsgHdrs>;
-}
-export declare class SendTransferHandle extends BaseTransferHandle {
-    #private;
-    constructor(nc: NatsConnection, auth: TrellisTransferAuth, timeoutMs: number, grant: SendTransferGrant);
-    send(body: TransferBody): AsyncResult<FileInfo, TransferError>;
-}
-export declare class ReceiveTransferHandle extends BaseTransferHandle {
-    #private;
-    constructor(nc: NatsConnection, auth: TrellisTransferAuth, timeoutMs: number, grant: ReceiveTransferGrant);
-    stream(): AsyncResult<ReadableStream<Uint8Array>, TransferError>;
-    bytes(): AsyncResult<Uint8Array, TransferError>;
-}
-export type TransferHandle = SendTransferHandle | ReceiveTransferHandle;
-export declare function createTransferHandle(nc: NatsConnection, auth: TrellisTransferAuth, timeoutMs: number, grant: SendTransferGrant): SendTransferHandle;
-export declare function createTransferHandle(nc: NatsConnection, auth: TrellisTransferAuth, timeoutMs: number, grant: ReceiveTransferGrant): ReceiveTransferHandle;
-export declare function createTransferHandle(nc: NatsConnection, auth: TrellisTransferAuth, timeoutMs: number, grant: TransferGrant): TransferHandle;
-export declare function verifyTransferMessage(args: {
-    expectedSessionKey: string;
-    subject: string;
-    payload: Uint8Array;
-    proof?: string | null;
-    sessionKey?: string | null;
-    iat?: string | number | null;
-    requestId?: string | null;
-}): Promise<boolean>;
-export {};
-//# sourceMappingURL=transfer.d.ts.map

package/esm/npm/src/transfer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transfer.d.ts","sourceRoot":"","sources":["../../../src/transfer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EAGX,KAAK,MAAM,IAAI,UAAU,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAIL,KAAK,OAAO,EACZ,KAAK,cAAc,EAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,IAAI,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAI5C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM1D,eAAO,MAAM,cAAc;;;;;;;EAOzB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAYrD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;EAQlC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;EAIrC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG9B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,MAAM,MAAM,YAAY,GACpB,UAAU,GACV,WAAW,GACX,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9B,KAAK,mBAAmB,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;IACzD,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;CAC3B,CAAC;AA4NF,cAAM,kBAAkB;;IAKtB,SAAS,aACP,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM;IAOnB,SAAS,KAAK,EAAE,IAAI,cAAc,CAEjC;IAED,SAAS,KAAK,IAAI,IAAI,mBAAmB,CAExC;IAED,SAAS,KAAK,SAAS,IAAI,MAAM,CAEhC;IAED,SAAS,CAAC,aAAa,CACrB,KAAK,EAAE,aAAa,EACpB,SAAS,EAAE,MAAM,GAChB,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC;cAwBlB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,GAAG,CAAC,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC;CAgBpB;AAED,qBAAa,kBAAmB,SAAQ,kBAAkB;;gBAItD,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,iBAAiB;IAM1B,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC;CA+F/D;AAED,qBAAa,qBAAsB,SAAQ,kBAAkB;;gBAIzD,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,oBAAoB;IAM7B,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IAiChE,KAAK,IAAI,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC;CAWhD;AAED,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,qBAAqB,CAAC;AAExE,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,iBAAiB,GACvB,kBAAkB,CAAC;AACtB,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,oBAAoB,GAC1B,qBAAqB,CAAC;AACzB,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,aAAa,GACnB,cAAc,CAAC;AAYlB,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,OAAO,CAAC,OAAO,CAAC,CAiBnB"}

package/esm/npm/src/transfer.js

@@ -1,407 +0,0 @@
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _BaseTransferHandle_nc, _BaseTransferHandle_auth, _BaseTransferHandle_timeoutMs, _SendTransferHandle_grant, _ReceiveTransferHandle_grant;
-import { AsyncResult, isErr, Result, } from "@qlever-llc/result";
-import { createInbox, headers as natsHeaders, } from "@nats-io/nats-core";
-import Type from "typebox";
-import { ulid } from "ulid";
-import { buildProofInput, verifyProof } from "./auth/proof.js";
-import { base64urlEncode, sha256 } from "./auth/utils.js";
-import { TransferError } from "./errors/TransferError.js";
-import { createNatsHeaderCarrier, injectTraceContext } from "./tracing.js";
-const TRANSFER_SEQUENCE_HEADER = "trellis-transfer-seq";
-const TRANSFER_EOF_HEADER = "trellis-transfer-eof";
-export const FileInfoSchema = Type.Object({
-    key: Type.String({ minLength: 1 }),
-    size: Type.Integer({ minimum: 0 }),
-    updatedAt: Type.String({ minLength: 1 }),
-    digest: Type.Optional(Type.String({ minLength: 1 })),
-    contentType: Type.Optional(Type.String({ minLength: 1 })),
-    metadata: Type.Record(Type.String({ minLength: 1 }), Type.String()),
-});
-const TransferGrantBaseSchema = Type.Object({
-    type: Type.Literal("TransferGrant"),
-    service: Type.String({ minLength: 1 }),
-    sessionKey: Type.String({ minLength: 1 }),
-    transferId: Type.String({ minLength: 1 }),
-    subject: Type.String({ minLength: 1 }),
-    expiresAt: Type.String({ minLength: 1 }),
-    chunkBytes: Type.Integer({ minimum: 1 }),
-});
-export const SendTransferGrantSchema = Type.Object({
-    ...TransferGrantBaseSchema.properties,
-    direction: Type.Literal("send"),
-    maxBytes: Type.Optional(Type.Integer({ minimum: 1 })),
-    contentType: Type.Optional(Type.String({ minLength: 1 })),
-    metadata: Type.Optional(Type.Record(Type.String({ minLength: 1 }), Type.String())),
-});
-export const ReceiveTransferGrantSchema = Type.Object({
-    ...TransferGrantBaseSchema.properties,
-    direction: Type.Literal("receive"),
-    info: FileInfoSchema,
-});
-export const TransferGrantSchema = Type.Union([
-    SendTransferGrantSchema,
-    ReceiveTransferGrantSchema,
-]);
-async function createTransferProof(auth, subject, payload) {
-    const payloadHash = await sha256(payload);
-    const iat = auth.currentIat?.() ?? Math.floor(Date.now() / 1000);
-    const requestId = ulid();
-    const proofOk = await auth.sign(await sha256(buildProofInput(auth.sessionKey, subject, payloadHash, iat, requestId)));
-    return { proof: base64urlEncode(proofOk), iat, requestId };
-}
-function expired(expiresAt) {
-    return Date.now() >= Date.parse(expiresAt);
-}
-function asUint8Array(body) {
-    return body instanceof Uint8Array ? body : new Uint8Array(body);
-}
-function streamFromAsyncIterable(iterable) {
-    const iterator = iterable[Symbol.asyncIterator]();
-    return new ReadableStream({
-        async pull(controller) {
-            const next = await iterator.next();
-            if (next.done) {
-                controller.close();
-                return;
-            }
-            controller.enqueue(next.value);
-        },
-        async cancel(reason) {
-            await iterator.return?.(reason);
-        },
-    });
-}
-function streamFromBody(body) {
-    if (body instanceof Uint8Array || body instanceof ArrayBuffer) {
-        const bytes = asUint8Array(body);
-        return new ReadableStream({
-            start(controller) {
-                controller.enqueue(bytes);
-                controller.close();
-            },
-        });
-    }
-    return body instanceof ReadableStream ? body : streamFromAsyncIterable(body);
-}
-async function* chunkBody(body, chunkBytes) {
-    const reader = streamFromBody(body).getReader();
-    try {
-        while (true) {
-            const next = await reader.read();
-            if (next.done) {
-                return;
-            }
-            let offset = 0;
-            while (offset < next.value.length) {
-                const end = Math.min(offset + chunkBytes, next.value.length);
-                yield next.value.slice(offset, end);
-                offset = end;
-            }
-        }
-    }
-    finally {
-        reader.releaseLock();
-    }
-}
-function parseTransferAck(msg, operation) {
-    if (msg.headers?.get("status") === "error") {
-        return Result.err(deserializeTransferError(msg, operation));
-    }
-    try {
-        const value = JSON.parse(msg.string());
-        return Result.ok(value);
-    }
-    catch (cause) {
-        return Result.err(new TransferError({ operation, cause }));
-    }
-}
-function deserializeTransferError(msg, operation) {
-    try {
-        const value = JSON.parse(msg.string());
-        return new TransferError({
-            operation: value.operation ?? operation,
-            context: value.context,
-            cause: value.message ? new Error(value.message) : undefined,
-        });
-    }
-    catch (cause) {
-        return new TransferError({ operation, cause });
-    }
-}
-function receiveStream(sub, timeoutMs) {
-    const iterator = sub[Symbol.asyncIterator]();
-    return new ReadableStream({
-        async pull(controller) {
-            try {
-                const next = await new Promise((resolve, reject) => {
-                    const timer = setTimeout(() => {
-                        reject(new TransferError({
-                            operation: "stream",
-                            context: { reason: "timeout" },
-                        }));
-                    }, timeoutMs);
-                    iterator.next().then((value) => {
-                        clearTimeout(timer);
-                        resolve(value);
-                    }, (error) => {
-                        clearTimeout(timer);
-                        reject(error);
-                    });
-                });
-                if (next.done) {
-                    throw new TransferError({
-                        operation: "stream",
-                        context: { reason: "stream_closed" },
-                    });
-                }
-                const msg = next.value;
-                if (msg.headers?.get("status") === "error") {
-                    throw deserializeTransferError(msg, "stream");
-                }
-                if (msg.data.length > 0) {
-                    controller.enqueue(msg.data);
-                }
-                if (msg.headers?.get(TRANSFER_EOF_HEADER) === "true") {
-                    controller.close();
-                    sub.unsubscribe();
-                }
-            }
-            catch (cause) {
-                sub.unsubscribe();
-                controller.error(cause instanceof TransferError
-                    ? cause
-                    : new TransferError({ operation: "stream", cause }));
-            }
-        },
-        cancel() {
-            sub.unsubscribe();
-        },
-    });
-}
-async function collectStream(stream) {
-    const reader = stream.getReader();
-    const chunks = [];
-    let total = 0;
-    try {
-        while (true) {
-            const next = await reader.read();
-            if (next.done) {
-                const merged = new Uint8Array(total);
-                let offset = 0;
-                for (const chunk of chunks) {
-                    merged.set(chunk, offset);
-                    offset += chunk.length;
-                }
-                return Result.ok(merged);
-            }
-            chunks.push(next.value);
-            total += next.value.length;
-        }
-    }
-    catch (cause) {
-        return Result.err(cause instanceof TransferError
-            ? cause
-            : new TransferError({ operation: "bytes", cause }));
-    }
-    finally {
-        reader.releaseLock();
-    }
-}
-class BaseTransferHandle {
-    constructor(nc, auth, timeoutMs) {
-        _BaseTransferHandle_nc.set(this, void 0);
-        _BaseTransferHandle_auth.set(this, void 0);
-        _BaseTransferHandle_timeoutMs.set(this, void 0);
-        __classPrivateFieldSet(this, _BaseTransferHandle_nc, nc, "f");
-        __classPrivateFieldSet(this, _BaseTransferHandle_auth, auth, "f");
-        __classPrivateFieldSet(this, _BaseTransferHandle_timeoutMs, timeoutMs, "f");
-    }
-    get nc() {
-        return __classPrivateFieldGet(this, _BaseTransferHandle_nc, "f");
-    }
-    get auth() {
-        return __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f");
-    }
-    get timeoutMs() {
-        return __classPrivateFieldGet(this, _BaseTransferHandle_timeoutMs, "f");
-    }
-    validateGrant(grant, operation) {
-        if (expired(grant.expiresAt)) {
-            return Result.err(new TransferError({
-                operation,
-                context: { reason: "expired", transferId: grant.transferId },
-            }));
-        }
-        if (grant.sessionKey !== __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f").sessionKey) {
-            return Result.err(new TransferError({
-                operation,
-                context: {
-                    reason: "session_mismatch",
-                    expectedSessionKey: grant.sessionKey,
-                    actualSessionKey: __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f").sessionKey,
-                },
-            }));
-        }
-        return Result.ok(undefined);
-    }
-    async buildHeaders(subject, payload, seq, eof) {
-        const headers = natsHeaders();
-        const authHeaders = await createTransferProof(__classPrivateFieldGet(this, _BaseTransferHandle_auth, "f"), subject, payload);
-        headers.set("session-key", __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f").sessionKey);
-        headers.set("proof", authHeaders.proof);
-        headers.set("iat", String(authHeaders.iat));
-        headers.set("request-id", authHeaders.requestId);
-        if (seq !== undefined) {
-            headers.set(TRANSFER_SEQUENCE_HEADER, String(seq));
-        }
-        if (eof) {
-            headers.set(TRANSFER_EOF_HEADER, "true");
-        }
-        injectTraceContext(createNatsHeaderCarrier(headers));
-        return headers;
-    }
-}
-_BaseTransferHandle_nc = new WeakMap(), _BaseTransferHandle_auth = new WeakMap(), _BaseTransferHandle_timeoutMs = new WeakMap();
-export class SendTransferHandle extends BaseTransferHandle {
-    constructor(nc, auth, timeoutMs, grant) {
-        super(nc, auth, timeoutMs);
-        _SendTransferHandle_grant.set(this, void 0);
-        __classPrivateFieldSet(this, _SendTransferHandle_grant, grant, "f");
-    }
-    send(body) {
-        return AsyncResult.from((async () => {
-            const valid = this.validateGrant(__classPrivateFieldGet(this, _SendTransferHandle_grant, "f"), "send").take();
-            if (isErr(valid)) {
-                return Result.err(valid.error);
-            }
-            let sentBytes = 0;
-            let seq = 0;
-            let completed = null;
-            for await (const chunk of chunkBody(body, __classPrivateFieldGet(this, _SendTransferHandle_grant, "f").chunkBytes)) {
-                sentBytes += chunk.length;
-                if (__classPrivateFieldGet(this, _SendTransferHandle_grant, "f").maxBytes !== undefined &&
-                    sentBytes > __classPrivateFieldGet(this, _SendTransferHandle_grant, "f").maxBytes) {
-                    return Result.err(new TransferError({
-                        operation: "send",
-                        context: {
-                            reason: "max_bytes_exceeded",
-                            maxBytes: __classPrivateFieldGet(this, _SendTransferHandle_grant, "f").maxBytes,
-                            attemptedBytes: sentBytes,
-                        },
-                    }));
-                }
-                const headers = await this.buildHeaders(__classPrivateFieldGet(this, _SendTransferHandle_grant, "f").subject, chunk, seq, false);
-                const response = await AsyncResult.try(() => this.nc.request(__classPrivateFieldGet(this, _SendTransferHandle_grant, "f").subject, chunk, {
-                    timeout: this.timeoutMs,
-                    headers,
-                })).take();
-                if (isErr(response)) {
-                    return Result.err(new TransferError({ operation: "send", cause: response.error }));
-                }
-                const ack = parseTransferAck(response, "send").take();
-                if (isErr(ack)) {
-                    return Result.err(ack.error);
-                }
-                if (ack.status === "complete") {
-                    completed = ack.info;
-                }
-                seq += 1;
-            }
-            const finalHeaders = await this.buildHeaders(__classPrivateFieldGet(this, _SendTransferHandle_grant, "f").subject, new Uint8Array(), seq, true);
-            const finalResponse = await AsyncResult.try(() => this.nc.request(__classPrivateFieldGet(this, _SendTransferHandle_grant, "f").subject, new Uint8Array(), {
-                timeout: this.timeoutMs,
-                headers: finalHeaders,
-            })).take();
-            if (isErr(finalResponse)) {
-                return Result.err(new TransferError({
-                    operation: "send",
-                    cause: finalResponse.error,
-                }));
-            }
-            const finalAck = parseTransferAck(finalResponse, "send").take();
-            if (isErr(finalAck)) {
-                return Result.err(finalAck.error);
-            }
-            if (finalAck.status !== "complete") {
-                return Result.err(new TransferError({
-                    operation: "send",
-                    context: { reason: "missing_completion" },
-                }));
-            }
-            return Result.ok(finalAck.info ?? completed);
-        })());
-    }
-}
-_SendTransferHandle_grant = new WeakMap();
-export class ReceiveTransferHandle extends BaseTransferHandle {
-    constructor(nc, auth, timeoutMs, grant) {
-        super(nc, auth, timeoutMs);
-        _ReceiveTransferHandle_grant.set(this, void 0);
-        __classPrivateFieldSet(this, _ReceiveTransferHandle_grant, grant, "f");
-    }
-    stream() {
-        return AsyncResult.from((async () => {
-            const valid = this.validateGrant(__classPrivateFieldGet(this, _ReceiveTransferHandle_grant, "f"), "stream").take();
-            if (isErr(valid)) {
-                return Result.err(valid.error);
-            }
-            const inbox = createInbox(`_INBOX.${this.auth.sessionKey.slice(0, 16)}`);
-            const sub = this.nc.subscribe(inbox);
-            const payload = new Uint8Array();
-            const headers = await this.buildHeaders(__classPrivateFieldGet(this, _ReceiveTransferHandle_grant, "f").subject, payload);
-            try {
-                this.nc.publish(__classPrivateFieldGet(this, _ReceiveTransferHandle_grant, "f").subject, payload, {
-                    headers,
-                    reply: inbox,
-                });
-                await this.nc.flush();
-            }
-            catch (cause) {
-                sub.unsubscribe();
-                return Result.err(new TransferError({ operation: "stream", cause }));
-            }
-            return Result.ok(receiveStream(sub, this.timeoutMs));
-        })());
-    }
-    bytes() {
-        return AsyncResult.from((async () => {
-            const streamResult = await this.stream().take();
-            if (isErr(streamResult)) {
-                return Result.err(streamResult.error);
-            }
-            return await collectStream(streamResult);
-        })());
-    }
-}
-_ReceiveTransferHandle_grant = new WeakMap();
-export function createTransferHandle(nc, auth, timeoutMs, grant) {
-    return grant.direction === "send"
-        ? new SendTransferHandle(nc, auth, timeoutMs, grant)
-        : new ReceiveTransferHandle(nc, auth, timeoutMs, grant);
-}
-export async function verifyTransferMessage(args) {
-    const iat = typeof args.iat === "number" ? args.iat : Number(args.iat);
-    if (!args.proof || !args.sessionKey ||
-        args.sessionKey !== args.expectedSessionKey ||
-        !Number.isSafeInteger(iat) || !args.requestId) {
-        return false;
-    }
-    return await verifyProof(args.expectedSessionKey, {
-        sessionKey: args.sessionKey,
-        subject: args.subject,
-        payloadHash: await sha256(args.payload),
-        iat,
-        requestId: args.requestId,
-    }, args.proof);
-}