@securitydept/client 0.3.0-beta.5 → 0.3.0-beta.7

package/dist/{create-Bm-XRA3G.mjs → create-i5VyYgN6.mjs}

@@ -1,126 +1,8 @@
-import { A as RxEventSubject, D as RxStateSignal, F as SYMBOL_DISPOSE, G as UserRecovery, H as ClientErrorKind, M as isInteropObservableTrait, U as ClientErrorSource, V as ClientError, W as ErrorPresentationTone, h as createAsyncSchedulerWithTimestampProvider, j as SYMBOL_OBSERVABLE, k as RxEventStream } from "./rx-BoB32Dzg.mjs";
+import { A as RxEventSubject, F as SYMBOL_DISPOSE, H as ClientError, K as UserRecovery, M as isInteropObservableTrait, U as ClientErrorKind, W as ClientErrorSource, j as SYMBOL_OBSERVABLE, k as RxEventStream } from "./rx-DM6Ouv-m.mjs";
 import { v7 } from "uuid";
 import { InjectionToken, Injector, Optional, ReflectiveInjector } from "injection-js";
-import { BehaviorSubject, EMPTY, ReplaySubject, Subject, catchError, delayWhen, distinctUntilChanged, exhaustMap, filter, from, fromEventPattern, map, merge, of, shareReplay, take, takeUntil, timeout, timer } from "rxjs";
+import { EMPTY, from, fromEventPattern, map, merge, of } from "rxjs";
 import { type } from "arktype";
-//#region src/errors/presentation-descriptor.ts
-const DEFAULT_RECOVERY_LABELS = {
-	[UserRecovery.None]: "",
-	[UserRecovery.Retry]: "Try again",
-	[UserRecovery.RestartFlow]: "Restart flow",
-	[UserRecovery.Reauthenticate]: "Sign in again",
-	[UserRecovery.ContactSupport]: "Contact support"
-};
-const userRecoveryValues = new Set(Object.values(UserRecovery));
-const clientErrorKindValues = new Set(Object.values(ClientErrorKind));
-function readErrorPresentationDescriptor(error, options = {}) {
-	const clientError = error instanceof ClientError ? error : coerceClientErrorLike(error);
-	if (!clientError) return {
-		code: null,
-		kind: null,
-		title: options.fallbackTitle ?? "Operation failed",
-		description: options.fallbackDescription ?? "An unexpected error prevented the operation from completing.",
-		recovery: UserRecovery.None,
-		retryable: false,
-		tone: ErrorPresentationTone.Danger,
-		primaryAction: null
-	};
-	const code = clientError.presentation?.code ?? clientError.code;
-	const codePresentation = code ? options.codePresentations?.[code] : void 0;
-	const recovery = clientError.presentation?.recovery ?? codePresentation?.recovery ?? clientError.recovery;
-	const generic = readGenericPresentation(clientError.kind);
-	return {
-		code,
-		kind: clientError.kind,
-		source: clientError.source,
-		title: codePresentation?.title ?? generic.title,
-		description: clientError.presentation?.message ?? codePresentation?.description ?? generic.description,
-		recovery,
-		retryable: clientError.retryable,
-		tone: codePresentation?.tone ?? readClientErrorTone(clientError.kind, recovery),
-		primaryAction: readPrimaryAction(recovery, options)
-	};
-}
-function readGenericPresentation(kind) {
-	switch (kind) {
-		case ClientErrorKind.Unauthenticated: return {
-			title: "Authentication required",
-			description: "Sign in again to continue."
-		};
-		case ClientErrorKind.Unauthorized: return {
-			title: "Access denied",
-			description: "You do not have permission to complete this operation."
-		};
-		case ClientErrorKind.Cancelled: return {
-			title: "Operation cancelled",
-			description: "The operation was cancelled before it completed."
-		};
-		case ClientErrorKind.Timeout: return {
-			title: "Request timed out",
-			description: "The operation did not complete in time."
-		};
-		case ClientErrorKind.Configuration: return {
-			title: "Configuration error",
-			description: "The client is not configured to complete this operation."
-		};
-		case ClientErrorKind.Storage: return {
-			title: "Storage failed",
-			description: "The client could not access required stored data."
-		};
-		case ClientErrorKind.Transport: return {
-			title: "Network request failed",
-			description: "The client could not reach the service."
-		};
-		case ClientErrorKind.Server: return {
-			title: "Server request failed",
-			description: "The service could not complete the request."
-		};
-		case ClientErrorKind.Protocol: return {
-			title: "Invalid response",
-			description: "The service response did not satisfy the expected protocol."
-		};
-		case ClientErrorKind.Authorization: return {
-			title: "Authorization failed",
-			description: "The authorization flow could not be completed."
-		};
-		default: return {
-			title: "Operation failed",
-			description: "The operation could not be completed."
-		};
-	}
-}
-function readClientErrorTone(kind, recovery) {
-	if (kind === ClientErrorKind.Cancelled) return ErrorPresentationTone.Neutral;
-	if (kind === ClientErrorKind.Unauthenticated || kind === ClientErrorKind.Timeout || kind === ClientErrorKind.Transport || kind === ClientErrorKind.Server || recovery === UserRecovery.Retry || recovery === UserRecovery.RestartFlow || recovery === UserRecovery.Reauthenticate) return ErrorPresentationTone.Warning;
-	return ErrorPresentationTone.Danger;
-}
-function coerceClientErrorLike(error) {
-	if (typeof error !== "object" || error === null) return null;
-	const candidate = error;
-	if (typeof candidate.kind !== "string" || !clientErrorKindValues.has(candidate.kind)) return null;
-	return {
-		code: typeof candidate.code === "string" ? candidate.code : null,
-		kind: candidate.kind,
-		recovery: typeof candidate.recovery === "string" && userRecoveryValues.has(candidate.recovery) ? candidate.recovery : UserRecovery.None,
-		retryable: candidate.retryable === true,
-		source: typeof candidate.source === "string" ? candidate.source : void 0,
-		presentation: isErrorPresentation(candidate.presentation) ? candidate.presentation : void 0
-	};
-}
-function isErrorPresentation(value) {
-	return typeof value === "object" && value !== null && typeof value.code === "string" && typeof value.message === "string" && typeof value.recovery === "string" && userRecoveryValues.has(value.recovery);
-}
-function readPrimaryAction(recovery, options) {
-	if (recovery === UserRecovery.None) return null;
-	const label = options.recoveryLabels?.[recovery] ?? DEFAULT_RECOVERY_LABELS[recovery];
-	if (!label) return null;
-	return {
-		recovery,
-		label,
-		href: options.recoveryLinks?.[recovery] ?? null
-	};
-}
-//#endregion
 //#region src/injection/types.ts
 var SecuritydeptInjectionToken = class extends InjectionToken {};
 const SecurityDeptOptional = Optional;
@@ -229,22 +111,6 @@ function describeDependencyToken(token) {
 	return String(token);
 }
 //#endregion
-//#region src/signals/signal.ts
-/**
-* Minimal writable signal implementation.
-* `set()` always publishes a write. Equality-based value-version suppression is
-* handled by the underlying Rx signal for computed dependency validation.
-*/
-function createSignal(initial, options) {
-	return RxStateSignal.fromInitialValue(initial, options);
-}
-/**
-* Create a read-only view of a writable signal.
-*/
-function readonlySignal(signal) {
-	return signal;
-}
-//#endregion
 //#region src/events/types.ts
 const EventStreamTraitSchema = type({ subscribe: "Function" });
 const EventSourceKind = {
@@ -263,32 +129,6 @@ function isEventStreamTrait(value) {
 const PageLifecycleTraitSchema = type({ resume: EventStreamTraitSchema });
 const PAGE_LIFECYCLE_TRAIT_TOKEN = new SecuritydeptInjectionToken("PAGE_LIFECYCLE_TRAIT_TOKEN");
 //#endregion
-//#region src/popup/errors.ts
-const PopupErrorCode = {
-	Blocked: "popup.blocked",
-	Closed: "popup.closed_by_user"
-};
-function readPopupErrorPresentationDescriptor(error, options = {}) {
-	return readErrorPresentationDescriptor(error, {
-		...options,
-		codePresentations: {
-			[PopupErrorCode.Blocked]: {
-				title: "Popup was blocked",
-				description: "The browser blocked the popup window. Allow popups for this site, then try again.",
-				recovery: UserRecovery.Retry,
-				tone: ErrorPresentationTone.Warning
-			},
-			[PopupErrorCode.Closed]: {
-				title: "Popup was closed",
-				description: "The popup window was closed before the operation completed. Start the flow again.",
-				recovery: UserRecovery.RestartFlow,
-				tone: ErrorPresentationTone.Warning
-			},
-			...options.codePresentations
-		}
-	});
-}
-//#endregion
 //#region src/validation/validator.ts
 function formatValidationFailure(failure) {
 	if (!failure) return null;
@@ -363,473 +203,6 @@ function validateTraitInput(options) {
 	options.onInvalid(result);
 }
 //#endregion
-//#region src/protocol/json-rpc/types.ts
-const JsonRpcIdSchema = type("string | number");
-const JsonRpcErrorPayloadSchema = type({
-	code: "number",
-	message: "string",
-	data: "unknown?"
-});
-const JsonRpcRequestMessageSchema = type({
-	jsonrpc: "\"2.0\"",
-	id: JsonRpcIdSchema,
-	method: "string",
-	params: "unknown?"
-});
-const JsonRpcNotificationMessageSchema = type({
-	jsonrpc: "\"2.0\"",
-	method: "string",
-	params: "unknown?"
-});
-const JsonRpcSuccessResponseMessageSchema = type({
-	jsonrpc: "\"2.0\"",
-	id: JsonRpcIdSchema,
-	result: "unknown"
-});
-const JsonRpcErrorResponseMessageSchema = type({
-	jsonrpc: "\"2.0\"",
-	id: JsonRpcIdSchema,
-	error: JsonRpcErrorPayloadSchema
-});
-const JsonRpcMessageSchema = JsonRpcRequestMessageSchema.or(JsonRpcNotificationMessageSchema).or(JsonRpcSuccessResponseMessageSchema).or(JsonRpcErrorResponseMessageSchema);
-//#endregion
-//#region src/protocol/json-rpc/create.ts
-function createJsonRpcClient(options) {
-	return new JsonRpcClient(options);
-}
-function createJsonRpcServer(options) {
-	return new JsonRpcServer(options);
-}
-function createJsonRpcServerAndClient(options) {
-	return new JsonRpcServerAndClient(options);
-}
-var JsonRpcClient = class {
-	options;
-	onNotification;
-	notificationSubject = new RxEventSubject();
-	pendingRequests = /* @__PURE__ */ new Map();
-	disposed = false;
-	nextRequestId = 1;
-	constructor(options) {
-		this.options = options;
-		this.onNotification = this.notificationSubject;
-	}
-	request(method, params, requestOptions = {}) {
-		if (this.disposed) return Promise.reject(createJsonRpcDisposedError("client"));
-		const id = this.nextRequestId++;
-		const timeoutMs = requestOptions.timeoutMs ?? this.options.defaultRequestTimeoutMs;
-		return new Promise((resolve, reject) => {
-			const pendingRequest = {
-				method,
-				reject,
-				resolve
-			};
-			if (timeoutMs !== void 0) pendingRequest.timeoutHandle = this.options.time.setTimeout(() => {
-				this.pendingRequests.delete(id);
-				reject(/* @__PURE__ */ new Error(`JSON-RPC request timed out for ${method}.`));
-			}, timeoutMs);
-			this.pendingRequests.set(id, pendingRequest);
-			try {
-				this.options.send({
-					jsonrpc: "2.0",
-					id,
-					method,
-					params
-				});
-			} catch (error) {
-				this.clearPendingRequest(id);
-				reject(error);
-			}
-		});
-	}
-	notify(method, params) {
-		if (this.disposed) return;
-		this.options.send({
-			jsonrpc: "2.0",
-			method,
-			params
-		});
-	}
-	receive(message) {
-		if (this.disposed) return;
-		for (const parsedMessage of parseIncomingMessages(message)) {
-			if (isJsonRpcResponseMessage(parsedMessage)) {
-				this.resolvePendingRequest(parsedMessage);
-				continue;
-			}
-			if (isJsonRpcNotificationMessage(parsedMessage)) this.notificationSubject.next({
-				method: parsedMessage.method,
-				params: parsedMessage.params
-			});
-		}
-	}
-	rejectAllPendingRequests(reason) {
-		for (const [id, pendingRequest] of this.pendingRequests) {
-			this.clearPendingRequest(id);
-			pendingRequest.reject(reason);
-		}
-	}
-	dispose() {
-		if (this.disposed) return;
-		this.disposed = true;
-		this.rejectAllPendingRequests(/* @__PURE__ */ new Error("JSON-RPC client disposed."));
-		this.notificationSubject.complete();
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-	resolvePendingRequest(message) {
-		const pendingRequest = this.pendingRequests.get(message.id);
-		if (!pendingRequest) return;
-		this.clearPendingRequest(message.id);
-		if ("error" in message) {
-			pendingRequest.reject(/* @__PURE__ */ new Error(`JSON-RPC request failed for ${pendingRequest.method}: ${message.error.message}`));
-			return;
-		}
-		pendingRequest.resolve(message.result);
-	}
-	clearPendingRequest(id) {
-		const pendingRequest = this.pendingRequests.get(id);
-		if (!pendingRequest) return;
-		if (pendingRequest.timeoutHandle !== void 0) this.options.time.clearTimeout(pendingRequest.timeoutHandle);
-		this.pendingRequests.delete(id);
-	}
-};
-var JsonRpcServer = class {
-	options;
-	onRequest;
-	onNotification;
-	requestSubject = new RxEventSubject();
-	notificationSubject = new RxEventSubject();
-	disposed = false;
-	constructor(options) {
-		this.options = options;
-		this.onRequest = this.requestSubject;
-		this.onNotification = this.notificationSubject;
-	}
-	notify(method, params) {
-		if (this.disposed) return;
-		this.options.send({
-			jsonrpc: "2.0",
-			method,
-			params
-		});
-	}
-	receive(message) {
-		if (this.disposed) return;
-		for (const parsedMessage of parseIncomingMessages(message)) {
-			if (isJsonRpcRequestMessage(parsedMessage)) {
-				this.requestSubject.next({
-					id: parsedMessage.id,
-					method: parsedMessage.method,
-					params: parsedMessage.params
-				});
-				continue;
-			}
-			if (isJsonRpcNotificationMessage(parsedMessage)) this.notificationSubject.next({
-				method: parsedMessage.method,
-				params: parsedMessage.params
-			});
-		}
-	}
-	respondSuccess(id, result) {
-		if (this.disposed) return;
-		this.options.send({
-			jsonrpc: "2.0",
-			id,
-			result
-		});
-	}
-	respondError(id, error) {
-		if (this.disposed) return;
-		this.options.send({
-			jsonrpc: "2.0",
-			id,
-			error
-		});
-	}
-	dispose() {
-		if (this.disposed) return;
-		this.disposed = true;
-		this.requestSubject.complete();
-		this.notificationSubject.complete();
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-};
-var JsonRpcServerAndClient = class {
-	onNotification;
-	onRequest;
-	client;
-	server;
-	disposed = false;
-	constructor(options) {
-		this.client = new JsonRpcClient(options);
-		this.server = new JsonRpcServer(options);
-		this.onNotification = this.server.onNotification;
-		this.onRequest = this.server.onRequest;
-	}
-	request(method, params, options) {
-		return this.client.request(method, params, options);
-	}
-	notify(method, params) {
-		this.client.notify(method, params);
-	}
-	receive(message) {
-		for (const parsedMessage of parseIncomingMessages(message)) {
-			if (isJsonRpcResponseMessage(parsedMessage)) {
-				this.client.receive(parsedMessage);
-				continue;
-			}
-			this.server.receive(parsedMessage);
-		}
-	}
-	rejectAllPendingRequests(reason) {
-		this.client.rejectAllPendingRequests(reason);
-	}
-	respondSuccess(id, result) {
-		this.server.respondSuccess(id, result);
-	}
-	respondError(id, error) {
-		this.server.respondError(id, error);
-	}
-	dispose() {
-		if (this.disposed) return;
-		this.disposed = true;
-		this.client.dispose();
-		this.server.dispose();
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-};
-function parseIncomingMessages(message) {
-	if (!Array.isArray(message)) return parseJsonRpcMessage(message);
-	const parsedMessages = [];
-	for (const entry of message) parsedMessages.push(...parseJsonRpcMessage(entry));
-	return parsedMessages;
-}
-function parseJsonRpcMessage(message) {
-	const result = validateWithSchemaSync(JsonRpcMessageSchema, message);
-	return result.success ? [result.value] : [];
-}
-function isJsonRpcRequestMessage(message) {
-	return "method" in message && "id" in message;
-}
-function isJsonRpcResponseMessage(message) {
-	return "id" in message && !("method" in message);
-}
-function isJsonRpcNotificationMessage(message) {
-	return "method" in message && !("id" in message);
-}
-function createJsonRpcDisposedError(role) {
-	return /* @__PURE__ */ new Error(`JSON-RPC ${role} disposed.`);
-}
-//#endregion
-//#region src/popup/session.ts
-const PopupSessionControlMethod = {
-	Ready: "securitydept.popup.session.ready",
-	Ping: "securitydept.popup.session.ping",
-	Pong: "securitydept.popup.session.pong"
-};
-const DEFAULT_READY_TIMEOUT_MS = 1e4;
-const DEFAULT_HEARTBEAT_INTERVAL_MS = 5e3;
-const DEFAULT_HEARTBEAT_TIMEOUT_MS = 15e3;
-var PopupClientSession = class {
-	failure = createSignal(null);
-	isActive = createSignal(false);
-	init$ = new ReplaySubject();
-	destroyed = createSignal(false);
-	destroyed$ = from(this.destroyed).pipe(distinctUntilChanged(), filter(Boolean), shareReplay(1));
-	constructor(options) {
-		const timestampScheduler = createAsyncSchedulerWithTimestampProvider(options.time);
-		const ready$ = new Subject();
-		const pong$ = new Subject();
-		const closed$ = from(options.closedStream).pipe(filter(Boolean));
-		const ping$ = merge(ready$.pipe(filter(Boolean)), pong$.pipe(filter(Boolean))).pipe(delayWhen(() => timer(options.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS, timestampScheduler)));
-		from(this.init$).pipe(exhaustMap(() => from(options.jsonRpc.onNotification).pipe(filter(function isReadyNotification(event) {
-			return event.method === PopupSessionControlMethod.Ready;
-		}), take(1), timeout({
-			each: options.readyTimeoutMs ?? DEFAULT_READY_TIMEOUT_MS,
-			scheduler: timestampScheduler
-		}), map(() => true), catchError(() => of(false)))), takeUntil(this.destroyed$)).subscribe(ready$);
-		ping$.pipe(exhaustMap(() => from(options.jsonRpc.onNotification).pipe(filter(function isPongNotification(event) {
-			return event.method === PopupSessionControlMethod.Pong;
-		}), take(1), timeout({
-			first: options.heartbeatTimeoutMs ?? DEFAULT_HEARTBEAT_TIMEOUT_MS,
-			scheduler: timestampScheduler
-		}), map(() => true), catchError(() => of(false)))), takeUntil(this.destroyed$)).subscribe(pong$);
-		merge(closed$.pipe(map(() => new ClientError({
-			kind: ClientErrorKind.Authorization,
-			code: PopupErrorCode.Closed,
-			message: "Popup window was closed before completing the login flow.",
-			recovery: UserRecovery.RestartFlow,
-			source: "popup"
-		}))), ready$.pipe(map((success) => !success ? new ClientError({
-			kind: ClientErrorKind.Protocol,
-			message: "Did not receive ready notification from popup within the expected time.",
-			recovery: UserRecovery.RestartFlow,
-			source: "popup"
-		}) : null)), pong$.pipe(map((success) => !success ? new ClientError({
-			kind: ClientErrorKind.Protocol,
-			message: "Did not receive pong notification from popup within the expected time.",
-			recovery: UserRecovery.RestartFlow,
-			source: "popup"
-		}) : null))).pipe(takeUntil(this.destroyed$), shareReplay({
-			bufferSize: 1,
-			refCount: false
-		})).subscribe((error) => this.failure.set(error));
-		merge(closed$.pipe(map(() => false)), ready$.pipe(map(Boolean)), pong$.pipe(map(Boolean))).pipe(takeUntil(this.destroyed$)).subscribe((nextIsActive) => {
-			this.isActive.set(nextIsActive);
-		});
-	}
-	init() {
-		this.init$.next(true);
-	}
-	dispose() {
-		this.destroyed.set(true);
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-};
-var PopupServerSession = class {
-	init$ = new ReplaySubject();
-	destroyed$$ = new BehaviorSubject(false);
-	destroyed$ = this.destroyed$$.pipe(distinctUntilChanged(), filter(Boolean), shareReplay(1));
-	constructor(options) {
-		const ready$ = from(this.init$);
-		const pong$ = from(options.jsonRpc.onNotification).pipe(filter(function isPing(event) {
-			return event.method === PopupSessionControlMethod.Ping;
-		}));
-		merge(ready$.pipe(map(function createReadyNotify() {
-			return { method: PopupSessionControlMethod.Ready };
-		})), pong$.pipe(map(function createPongNotify() {
-			return { method: PopupSessionControlMethod.Pong };
-		}))).pipe(takeUntil(this.destroyed$)).subscribe((event) => {
-			options.jsonRpc.notify(event.method, event.params);
-		});
-	}
-	init() {
-		this.init$.next(true);
-	}
-	dispose() {
-		this.destroyed$$.next(true);
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-};
-//#endregion
-//#region src/popup/handle.ts
-/**
-* popup opener
-*/
-var PopupClientWindowHandle = class {
-	messaging;
-	disposed = false;
-	jsonRpc;
-	session;
-	incomingSubscription;
-	closePopup;
-	constructor(options) {
-		this.messaging = options.messaging;
-		this.closePopup = options.close;
-		this.jsonRpc = createJsonRpcClient({
-			send: (message) => {
-				options.messaging.outgoing.next(message);
-			},
-			time: options.time
-		});
-		this.session = new PopupClientSession({
-			jsonRpc: this.jsonRpc,
-			time: options.time,
-			closedStream: options.closedStream
-		});
-		this.incomingSubscription = options.messaging.incoming.subscribe({ next: (message) => {
-			this.jsonRpc.receive(message);
-		} });
-		this.session.init();
-	}
-	get onNotification() {
-		return this.jsonRpc.onNotification;
-	}
-	get failure() {
-		return this.session.failure;
-	}
-	get isActive() {
-		return this.session.isActive;
-	}
-	async notify(method, params) {
-		this.jsonRpc.notify(method, params);
-	}
-	request(method, params, options) {
-		return this.jsonRpc.request(method, params, options);
-	}
-	close() {
-		this.closePopup();
-	}
-	dispose() {
-		if (this.disposed) return;
-		this.disposed = true;
-		this.session.dispose();
-		this.jsonRpc.dispose();
-		this.incomingSubscription.unsubscribe();
-		this.messaging.outgoing.complete();
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-};
-/**
-* popup target
-*/
-var PopupServerWindowHandle = class {
-	messaging;
-	disposed = false;
-	jsonRpc;
-	session;
-	incomingSubscription;
-	closePopup;
-	constructor(options) {
-		this.messaging = options.messaging;
-		this.closePopup = options.close;
-		this.jsonRpc = createJsonRpcServer({ send: (message) => {
-			options.messaging.outgoing.next(message);
-		} });
-		this.session = new PopupServerSession({ jsonRpc: this.jsonRpc });
-		this.incomingSubscription = options.messaging.incoming.subscribe({ next: (message) => {
-			this.jsonRpc.receive(message);
-		} });
-		this.session.init();
-	}
-	get onNotification() {
-		return this.jsonRpc.onNotification;
-	}
-	get onRequest() {
-		return this.jsonRpc.onRequest;
-	}
-	notify(method, params) {
-		this.jsonRpc.notify(method, params);
-		return Promise.resolve();
-	}
-	close() {
-		this.closePopup();
-	}
-	dispose() {
-		if (this.disposed) return;
-		this.disposed = true;
-		this.session.dispose();
-		this.jsonRpc.dispose();
-		this.incomingSubscription.unsubscribe();
-		this.messaging.outgoing.complete();
-	}
-	[SYMBOL_DISPOSE]() {
-		this.dispose();
-	}
-};
-//#endregion
 //#region src/popup/index.ts
 const PopupAttachFailureReason = {
 	MissingOpener: "missing_opener",
@@ -967,7 +340,9 @@ const SpanCreateOptionsSchema = type({
 const SpanTraitSchema = type({
 	id: "string",
 	fork: "Function",
-	attributes: "object"
+	getAttributes: "Function",
+	getRootToNodePath: "Function",
+	getRootToNodeAttributes: "Function"
 });
 const SPAN_TRAIT_TOKEN = new SecuritydeptInjectionToken("SPAN_TRAIT_TOKEN");
 //#endregion
@@ -978,26 +353,63 @@ function createDefaultSpanId() {
 var DefaultSpan = class DefaultSpan {
 	id;
 	parent;
-	_attributes;
+	_sharedAttributes;
+	_providerAttributes = /* @__PURE__ */ new Map();
 	_idFactory;
-	get attributes() {
-		return this._attributes;
-	}
 	constructor(parent, idFactory, attributes) {
 		this._idFactory = idFactory;
 		this.id = idFactory();
 		this.parent = parent;
-		this._attributes = attributes;
+		this._sharedAttributes = attributes;
 	}
 	static root(options = {}) {
-		return new DefaultSpan(void 0, options.idFactory ?? createDefaultSpanId, Object.freeze({ ...options.attributes ?? {} }));
+		return new DefaultSpan(void 0, options.idFactory ?? createDefaultSpanId, { ...options.attributes ?? {} });
 	}
 	fork(options = {}) {
-		return new DefaultSpan(this, options.idFactory ?? this._idFactory, Object.freeze({ ...options.attributes }));
+		return new DefaultSpan(this, options.idFactory ?? this._idFactory, { ...options.attributes });
+	}
+	getAttributes(options) {
+		if (!options) return this._sharedAttributes;
+		const providerAttributes = this._providerAttributes.get(options.providerId) ?? {};
+		if (options.withShared === false) return providerAttributes;
+		return {
+			...this._sharedAttributes,
+			...providerAttributes
+		};
 	}
-	setAttributes(attributes) {
-		this._attributes = Object.freeze({
-			...this._attributes,
+	getRootToNodePath(options = {}) {
+		const path = [];
+		let current = options.skipSelf ? this.parent : this;
+		while (current) {
+			path.push(current);
+			current = current.parent;
+		}
+		return path.reverse();
+	}
+	getRootToNodeAttributes(options = {}) {
+		const path = this.getRootToNodePath({ skipSelf: options.skipSelf });
+		const frames = [];
+		for (const span of path) {
+			const attributes = options.providerId !== void 0 ? span.getAttributes({ providerId: options.providerId }) : span.getAttributes();
+			if (Object.keys(attributes).length === 0) continue;
+			frames.push({
+				spanId: span.id,
+				...span.parent ? { parentSpanId: span.parent.id } : {},
+				attributes
+			});
+		}
+		return frames;
+	}
+	setAttributes(attributes, options = {}) {
+		if (options.providerId === void 0) {
+			this._sharedAttributes = {
+				...this._sharedAttributes,
+				...attributes
+			};
+			return;
+		}
+		this._providerAttributes.set(options.providerId, {
+			...this._providerAttributes.get(options.providerId),
 			...attributes
 		});
 	}
@@ -1129,11 +541,14 @@ function normalizeAbortError(token, error) {
 function isAbortError(error) {
 	return typeof error === "object" && error !== null && "name" in error && error.name === "AbortError";
 }
-const TimeForStdCreateOptionsSchema = type({ host: type({
+//#endregion
+//#region src/std/time.ts
+const TimeTraitStdHostSchema = type({
 	Date: type({ now: "Function" }),
 	setTimeout: "Function",
 	clearTimeout: "Function"
-}) });
+});
+const TimeForStdCreateOptionsSchema = type({ host: TimeTraitStdHostSchema });
 function createTimeForStd(options = {}) {
 	const { validators, ...createOptions } = options;
 	const resolvedCreateOptions = { host: createOptions.host ?? globalThis };
@@ -1321,8 +736,11 @@ function createInMemoryRecordStore() {
 	};
 }
 //#endregion
+//#region src/tracing/subscriber/types.ts
+const TracingSubscriberTraitSchema = type({ record: "Function" });
+//#endregion
 //#region src/tracing/create.ts
-const TracingCreateOptionsSchema = type({ subscribers: type({ record: "Function" }).array() });
+const TracingCreateOptionsSchema = type({ subscribers: TracingSubscriberTraitSchema.array() });
 function createTracing(options) {
 	const { validators, ...resolvedOptions } = options ?? {};
 	const resolvedCreateOptions = { subscribers: resolvedOptions.subscribers ?? [] };
@@ -1338,18 +756,15 @@ function createTracing(options) {
 		})
 	});
 	const subject = new RxEventSubject();
-	const events = subject;
-	const subscriptions = [];
-	for (const subscriber of resolvedCreateOptions.subscribers) subscriptions.push(events.subscribe({ next(event) {
-		subscriber.record(event);
-	} }));
+	let subscribers = resolvedCreateOptions.subscribers;
 	return {
 		record(event) {
+			for (const subscriber of subscribers) subscriber.record(event);
 			subject.next(event);
 		},
-		events,
+		events: subject,
 		dispose() {
-			for (const subscription of subscriptions.splice(0)) subscription.unsubscribe();
+			subscribers = [];
 		},
 		[SYMBOL_DISPOSE]() {
 			this.dispose();
@@ -1370,6 +785,7 @@ const OperationTraceEventType = {
 	Error: "operation.error",
 	Ended: "operation.ended"
 };
+const TRACING_SPAN_ATTRIBUTE_PROVIDER_ID = "@securitydept/client/tracing";
 const TracingTraitSchema = type({
 	record: "Function",
 	dispose: "Function",
@@ -1568,6 +984,6 @@ function createFoundationEnvironmentUnit() {
 	};
 }
 //#endregion
-export { INJECTOR_TOKEN as $, appendOrReplaceCompatFragment as A, createJsonRpcServerAndClient as B, IDLE_CALLBACK_TRAIT_TOKEN as C, RouterNavigationMode as D, RouterNavigationIntent as E, PopupAttachFailureReason as F, validateWithSchemaSync as G, throwValidationClientError as H, PopupClientWindowHandle as I, PAGE_LIFECYCLE_TRAIT_TOKEN as J, PopupErrorCode as K, PopupServerWindowHandle as L, parseCompatFragment as M, takeCompatFragment as N, takeCompatFragmentFromRouter as O, POPUP_TRAIT_TOKEN as P, readonlySignal as Q, createJsonRpcClient as R, SPAN_TRAIT_TOKEN as S, ROUTER_TRAIT_TOKEN as T, validateTraitInput as U, formatValidationFailure as V, validateWithSchema as W, isEventStreamTrait as X, EventSourceKind as Y, createSignal as Z, abortSignalToCancellationToken as _, TracingLevel as a, createProviderIfTokenMissing as at, abortSignalToEventStream as b, PERSISTENT_STORAGE_TRAIT_TOKEN as c, readErrorPresentationDescriptor as ct, StorageChangeEventOrigin as d, PARENT_INJECTOR_TOKEN as et, FetchTransportRedirectKind as f, createTimeForStd as g, TransportErrorCode as h, TRACING_TRAIT_TOKEN as i, SecuritydeptInjectionToken as it, isCompatFragmentBlock as j, SECURITYDEPT_COMPAT_FRAGMENT_VERSION as k, REALM_STORAGE_TRAIT_TOKEN as l, TRANSPORT_TRAIT_TOKEN as m, ENVIRONMENT_TOKEN as n, toRuntimeInjector as nt, createTracing as o, getSecuritydeptProviderToken as ot, createBaseTransportForStdFetch as p, readPopupErrorPresentationDescriptor as q, OperationTraceEventType as r, SecurityDeptOptional as rt, createInMemoryRecordStore as s, notMissingProvider as st, createFoundationEnvironment as t, SecuritydeptInjector as tt, SESSION_STORAGE_TRAIT_TOKEN as u, cancellationTokenToAbortSignal as v, TIME_TRAIT_TOKEN as w, createRootSpan as x, normalizeAbortError as y, createJsonRpcServer as z };
+export { notMissingProvider as $, SECURITYDEPT_COMPAT_FRAGMENT_VERSION as A, validateWithSchema as B, SPAN_TRAIT_TOKEN as C, RouterNavigationIntent as D, ROUTER_TRAIT_TOKEN as E, POPUP_TRAIT_TOKEN as F, INJECTOR_TOKEN as G, PAGE_LIFECYCLE_TRAIT_TOKEN as H, PopupAttachFailureReason as I, toRuntimeInjector as J, PARENT_INJECTOR_TOKEN as K, formatValidationFailure as L, isCompatFragmentBlock as M, parseCompatFragment as N, RouterNavigationMode as O, takeCompatFragment as P, getSecuritydeptProviderToken as Q, throwValidationClientError as R, createRootSpan as S, TIME_TRAIT_TOKEN as T, EventSourceKind as U, validateWithSchemaSync as V, isEventStreamTrait as W, SecuritydeptInjectionToken as X, SecurityDeptOptional as Y, createProviderIfTokenMissing as Z, createTimeForStd as _, TRACING_TRAIT_TOKEN as a, normalizeAbortError as b, createInMemoryRecordStore as c, SESSION_STORAGE_TRAIT_TOKEN as d, StorageChangeEventOrigin as f, TransportErrorCode as g, TRANSPORT_TRAIT_TOKEN as h, TRACING_SPAN_ATTRIBUTE_PROVIDER_ID as i, appendOrReplaceCompatFragment as j, takeCompatFragmentFromRouter as k, PERSISTENT_STORAGE_TRAIT_TOKEN as l, createBaseTransportForStdFetch as m, ENVIRONMENT_TOKEN as n, TracingLevel as o, FetchTransportRedirectKind as p, SecuritydeptInjector as q, OperationTraceEventType as r, createTracing as s, createFoundationEnvironment as t, REALM_STORAGE_TRAIT_TOKEN as u, abortSignalToCancellationToken as v, IDLE_CALLBACK_TRAIT_TOKEN as w, abortSignalToEventStream as x, cancellationTokenToAbortSignal as y, validateTraitInput as z };
 
-//# sourceMappingURL=create-Bm-XRA3G.mjs.map
+//# sourceMappingURL=create-i5VyYgN6.mjs.map