@tdxvolt/volt-client-grpc 0.11.0 → 0.11.1

package/lib/index.cjs

@@ -34,192 +34,192 @@ var bent__default = /*#__PURE__*/_interopDefaultLegacy(bent);
 
 // eslint-disable-next-line import/prefer-default-export
 const constants = {
-	authTokenName: "tdx-token",
-	collectionOperation: {
-		add: "ADD",
-		remove: "REMOVE",
-		update: "UPDATE",
-	},
-	crypto: {
-		subjectDefaults: [
-			{
-				name: "countryName",
-				value: "GB",
-			},
-			{
-				name: "localityName",
-				value: "Southampton",
-			},
-			{
-				name: "organizationName",
-				value: "nquiringminds Ltd",
-			},
-		],
-		userIdOID: "0.9.2342.19200300.100.1.1",
-	},
-	defaultDIDHostName: "cloud.tdxvolt.com",
-	didServiceType: {
-		voltConfig: "tdx-volt-config",
-	},
-	identityType: {
-		did: "did",
-		volt: "volt",
-	},
-	onlineStatus: {
-		offline: "offline",
-		online: "online",
-		unknown: "unknown",
-	},
-	publicKeyPrefix: "-----BEGIN PUBLIC KEY-----",
-	privateKeyPrefix: "-----BEGIN RSA PRIVATE KEY-----",
-	privateEncryptedKeyPrefix: "-----BEGIN ENCRYPTED PRIVATE KEY-----",
-	resource: {
-		identity: "ident",
-		identityView: "ident-view",
-		proxy: "proxy",
-		proxyView: "proxy-view",
-		vc: "vc",
-		vcView: "vc-view",
-	},
-	voltStatus: {
-		pending: "",
-		online: "online",
-		offline: "offline",
-		deleted: "deleted",
-		revoked: "revoked",
-	},
-	/**
-	 * These top-level service types should map to a protobuf definition
-	 * in @tdxvolt/volt-proto.
-	 */
-	serviceType: {
-		fileAPI: "tdx.volt_api.volt.v1.FileAPI",
-		sqliteServerAPI: "tdx.volt_api.data.v1.SqliteServerAPI",
-		sqliteDatabaseAPI: "tdx.volt_api.data.v1.SqliteDatabaseAPI",
-		ssiAPI: "tdx.volt_api.ssi.v1.SsiAPI",
-		relayAPI: "tdx.volt_api.relay.v1.RelayAPI",
-		voltAPI: "tdx.volt_api.volt.v1.VoltAPI",
-		wireAPI: "tdx.volt_api.volt.v1.WireAPI",
-	},
-	tunnelInvokeMethod: "/tdx.volt_api.volt.v1.VoltAPI/Invoke",
-	tunnelPingInterval: 10000,
-	tunnelPingTimeout: 2500,
-	tunnelReconnectAfter: 30000,
-	tunnelTimeoutInterval: 10000 * 2, // This must always be greater than `tunnelPingInterval`.
+  authTokenName: "tdx-token",
+  collectionOperation: {
+    add: "ADD",
+    remove: "REMOVE",
+    update: "UPDATE",
+  },
+  crypto: {
+    subjectDefaults: [
+      {
+        name: "countryName",
+        value: "GB",
+      },
+      {
+        name: "localityName",
+        value: "Southampton",
+      },
+      {
+        name: "organizationName",
+        value: "nquiringminds Ltd",
+      },
+    ],
+    userIdOID: "0.9.2342.19200300.100.1.1",
+  },
+  defaultDIDHostName: "cloud.tdxvolt.com",
+  didServiceType: {
+    voltConfig: "tdx-volt-config",
+  },
+  identityType: {
+    did: "did",
+    volt: "volt",
+  },
+  onlineStatus: {
+    offline: "offline",
+    online: "online",
+    unknown: "unknown",
+  },
+  publicKeyPrefix: "-----BEGIN PUBLIC KEY-----",
+  privateKeyPrefix: "-----BEGIN RSA PRIVATE KEY-----",
+  privateEncryptedKeyPrefix: "-----BEGIN ENCRYPTED PRIVATE KEY-----",
+  resource: {
+    identity: "ident",
+    identityView: "ident-view",
+    proxy: "proxy",
+    proxyView: "proxy-view",
+    vc: "vc",
+    vcView: "vc-view",
+  },
+  voltStatus: {
+    pending: "",
+    online: "online",
+    offline: "offline",
+    deleted: "deleted",
+    revoked: "revoked",
+  },
+  /**
+   * These top-level service types should map to a protobuf definition
+   * in @tdxvolt/volt-proto.
+   */
+  serviceType: {
+    fileAPI: "tdx.volt_api.volt.v1.FileAPI",
+    sqliteServerAPI: "tdx.volt_api.data.v1.SqliteServerAPI",
+    sqliteDatabaseAPI: "tdx.volt_api.data.v1.SqliteDatabaseAPI",
+    ssiAPI: "tdx.volt_api.ssi.v1.SsiAPI",
+    relayAPI: "tdx.volt_api.relay.v1.RelayAPI",
+    voltAPI: "tdx.volt_api.volt.v1.VoltAPI",
+    wireAPI: "tdx.volt_api.volt.v1.WireAPI",
+  },
+  tunnelInvokeMethod: "/tdx.volt_api.volt.v1.VoltAPI/Invoke",
+  tunnelPingInterval: 10000,
+  tunnelPingTimeout: 2500,
+  tunnelReconnectAfter: 30000,
+  tunnelTimeoutInterval: 10000 * 2, // This must always be greater than `tunnelPingInterval`.
 };
 
 const { pki: pki$2 } = forge__default["default"];
 
 const createSecureContextOptions = (cryptoOptions) => {
-	const tlsOptions = {
-		cert: Buffer.from(cryptoOptions.cert),
-		ca: Buffer.from(cryptoOptions.ca),
-		key: Buffer.from(cryptoOptions.key),
-	};
-	return tlsOptions;
+  const tlsOptions = {
+    cert: Buffer.from(cryptoOptions.cert),
+    ca: Buffer.from(cryptoOptions.ca),
+    key: Buffer.from(cryptoOptions.key),
+  };
+  return tlsOptions;
 };
 
 const getServiceAddress = (mdnsService) => {
-	let address;
-
-	if (mdnsService.txtRecord?.ip) {
-		// Use the advertised IP address if present.
-		address = `${mdnsService.txtRecord.ip}:${mdnsService.port}`;
-	} else {
-		// Find a valid ipv4 address.
-		const ipv4 = lodash__default["default"].find(mdnsService.addresses, (addy) => ip__default["default"].isV4Format(addy));
-		const serviceDetails = {
-			host: ipv4,
-			port: mdnsService.port,
-		};
-
-		address = `${serviceDetails.host}:${serviceDetails.port}`;
-	}
-
-	return address;
+  let address;
+
+  if (mdnsService.txtRecord?.ip) {
+    // Use the advertised IP address if present.
+    address = `${mdnsService.txtRecord.ip}:${mdnsService.port}`;
+  } else {
+    // Find a valid ipv4 address.
+    const ipv4 = lodash__default["default"].find(mdnsService.addresses, (addy) => ip__default["default"].isV4Format(addy));
+    const serviceDetails = {
+      host: ipv4,
+      port: mdnsService.port,
+    };
+
+    address = `${serviceDetails.host}:${serviceDetails.port}`;
+  }
+
+  return address;
 };
 
 const privateKeyToPem = (keyPair) => {
-	return pki$2.privateKeyToPem(keyPair.privateKey);
+  return pki$2.privateKeyToPem(keyPair.privateKey);
 };
 
 const publicKeyToPem = (keyPair) => {
-	return pki$2.publicKeyToPem(keyPair.publicKey);
+  return pki$2.publicKeyToPem(keyPair.publicKey);
 };
 
 const deserialisePEM = (pem) => {
-	return pem.replace(/\\r\\n/g, "\r\n");
+  return pem.replace(/\\r\\n/g, "\r\n");
 };
 
 const removeCarriageReturn = (inp) => {
-	return inp.replace(/\r\n/g, "\n");
+  return inp.replace(/\r\n/g, "\n");
 };
 
 const createBase58Hash = (inp) => {
-	const md = forge__default["default"].md.sha256.create();
-	md.update(inp);
-	const hashBuf = Buffer.from(md.digest().getBytes(), "binary");
-	return bs58__default["default"].encode(hashBuf);
+  const md = forge__default["default"].md.sha256.create();
+  md.update(inp);
+  const hashBuf = Buffer.from(md.digest().getBytes(), "binary");
+  return bs58__default["default"].encode(hashBuf);
 };
 
 const createPublicKeyFingerprint = (key) => {
-	// Remove carriage returns before creating hash to bring into line with openSSL / volt format.
-	return createBase58Hash(removeCarriageReturn(key));
+  // Remove carriage returns before creating hash to bring into line with openSSL / volt format.
+  return createBase58Hash(removeCarriageReturn(key));
 };
 
 const signBase64 = (key, msg) => {
-	const md = forge__default["default"].md.sha256.create();
-	md.update(msg);
-	const signature = key.sign(md);
-	return forge__default["default"].util.encode64(signature);
+  const md = forge__default["default"].md.sha256.create();
+  md.update(msg);
+  const signature = key.sign(md);
+  return forge__default["default"].util.encode64(signature);
 };
 
 const verifyBase64 = (key, msg, signature) => {
-	const md = forge__default["default"].md.sha256.create();
-	md.update(msg);
-	return key.verify(md.digest().bytes(), forge__default["default"].util.decode64(signature));
+  const md = forge__default["default"].md.sha256.create();
+  md.update(msg);
+  return key.verify(md.digest().bytes(), forge__default["default"].util.decode64(signature));
 };
 
 const getDIDResolutionURL = (didIn) => {
-	const did = didIn.toLowerCase().split(":");
-	if (did.length < 3) {
-		return "";
-	}
-
-	if (did[0] !== "did") {
-		return "";
-	}
-
-	if (did[1] !== "tdx") {
-		return "";
-	}
-
-	let hostName;
-	let didGUID;
-	if (did.length === 3) {
-		hostName = constants.defaultDIDHostName;
-		didGUID = did[2];
-	} else {
-		hostName = did[2];
-		didGUID = did[3];
-	}
-
-	return `https://${hostName}/api/identity/${didGUID}`;
+  const did = didIn.toLowerCase().split(":");
+  if (did.length < 3) {
+    return "";
+  }
+
+  if (did[0] !== "did") {
+    return "";
+  }
+
+  if (did[1] !== "tdx") {
+    return "";
+  }
+
+  let hostName;
+  let didGUID;
+  if (did.length === 3) {
+    hostName = constants.defaultDIDHostName;
+    didGUID = did[2];
+  } else {
+    hostName = did[2];
+    didGUID = did[3];
+  }
+
+  return `https://${hostName}/api/identity/${didGUID}`;
 };
 
 var utils = /*#__PURE__*/Object.freeze({
-	__proto__: null,
-	createSecureContextOptions: createSecureContextOptions,
-	getServiceAddress: getServiceAddress,
-	privateKeyToPem: privateKeyToPem,
-	publicKeyToPem: publicKeyToPem,
-	deserialisePEM: deserialisePEM,
-	removeCarriageReturn: removeCarriageReturn,
-	createBase58Hash: createBase58Hash,
-	createPublicKeyFingerprint: createPublicKeyFingerprint,
-	signBase64: signBase64,
-	verifyBase64: verifyBase64,
-	getDIDResolutionURL: getDIDResolutionURL
+  __proto__: null,
+  createSecureContextOptions: createSecureContextOptions,
+  getServiceAddress: getServiceAddress,
+  privateKeyToPem: privateKeyToPem,
+  publicKeyToPem: publicKeyToPem,
+  deserialisePEM: deserialisePEM,
+  removeCarriageReturn: removeCarriageReturn,
+  createBase58Hash: createBase58Hash,
+  createPublicKeyFingerprint: createPublicKeyFingerprint,
+  signBase64: signBase64,
+  verifyBase64: verifyBase64,
+  getDIDResolutionURL: getDIDResolutionURL
 });
 
 /* eslint-disable no-underscore-dangle */
@@ -227,77 +227,77 @@ var utils = /*#__PURE__*/Object.freeze({
 const { forEach, isEmpty } = lodash__default["default"];
 
 const serialiseNOP = (arg) => {
-	return arg;
+  return arg;
 };
 
 function createClient(
-	grpc,
-	serviceDescriptors,
-	address,
-	credentials,
-	noSerialise,
-	voltId,
-	serviceId,
+  grpc,
+  serviceDescriptors,
+  address,
+  credentials,
+  noSerialise,
+  voltId,
+  serviceId,
 ) {
-	let grpcCredentials;
-	if (credentials) {
-		const ca = credentials.config?.relay?.ca_pem || credentials.cache.ca;
-		const cert = credentials.cache.cloud_cert || credentials.cache.cert;
-		const { key } = credentials.cache;
-
-		if (key && cert) {
-			const cryyptoOptions = { ca, cert, key };
-			const tlsOptions = createSecureContextOptions(cryyptoOptions);
-			grpcCredentials = grpc.credentials.createSsl(
-				tlsOptions.ca,
-				tlsOptions.key,
-				tlsOptions.cert,
-			);
-		} else {
-			// Cache has no private key, this implies we are connecting without supplying a client certificate.
-			// Simply connect using the CA certificate.
-			grpcCredentials = grpc.credentials.createSsl(Buffer.from(ca));
-		}
-	} else {
-		grpcCredentials = grpc.credentials.createInsecure();
-	}
-
-	// Force all methods to appear bi-directional, since we manually handle the call flow (see grpc-call.js).
-	forEach(serviceDescriptors, (method) => {
-		method.requestStream = true;
-		method.responseStream = true;
-	});
-
-	if (noSerialise || voltId) {
-		if (voltId && !serviceId) {
-			// We must have a service identifier id when tunnelling in order to be able to route the rpc.
-			throw new Error("createClient - no serviceId given");
-		}
-		forEach(serviceDescriptors, (method) => {
-			if (voltId) {
-				// Prepend the resource id to the method path if tunnelling.
-				if (voltId === serviceId) {
-					method.path = `/${voltId}${method.path}`;
-				} else {
-					method.path = `/${voltId}/${serviceId}${method.path}`;
-				}
-			}
-			if (noSerialise) {
-				// Save original serialisation methods so we can encrypt/decrypt in the tunnel.
-				method.requestSerializeOriginal = method.requestSerialize;
-				method.responseDeserializeOriginal = method.responseDeserialize;
-
-				// Replace default serialisation with NOP, since when tunnelling we encrypt the payload
-				// before sending it to the channel, so we want it to be treated as a pure byte array (pass-through).
-				method.requestSerialize = serialiseNOP;
-				method.responseDeserialize = serialiseNOP;
-			}
-		});
-	}
-
-	const SubClass = grpc.makeGenericClientConstructor(serviceDescriptors);
-
-	return new SubClass(address, grpcCredentials);
+  let grpcCredentials;
+  if (credentials) {
+    const ca = credentials.config?.relay?.ca_pem || credentials.cache.ca;
+    const cert = credentials.cache.cloud_cert || credentials.cache.cert;
+    const { key } = credentials.cache;
+
+    if (key && cert) {
+      const cryyptoOptions = { ca, cert, key };
+      const tlsOptions = createSecureContextOptions(cryyptoOptions);
+      grpcCredentials = grpc.credentials.createSsl(
+        tlsOptions.ca,
+        tlsOptions.key,
+        tlsOptions.cert,
+      );
+    } else {
+      // Cache has no private key, this implies we are connecting without supplying a client certificate.
+      // Simply connect using the CA certificate.
+      grpcCredentials = grpc.credentials.createSsl(Buffer.from(ca));
+    }
+  } else {
+    grpcCredentials = grpc.credentials.createInsecure();
+  }
+
+  // Force all methods to appear bi-directional, since we manually handle the call flow (see grpc-call.js).
+  forEach(serviceDescriptors, (method) => {
+    method.requestStream = true;
+    method.responseStream = true;
+  });
+
+  if (noSerialise || voltId) {
+    if (voltId && !serviceId) {
+      // We must have a service identifier id when tunnelling in order to be able to route the rpc.
+      throw new Error("createClient - no serviceId given");
+    }
+    forEach(serviceDescriptors, (method) => {
+      if (voltId) {
+        // Prepend the resource id to the method path if tunnelling.
+        if (voltId === serviceId) {
+          method.path = `/${voltId}${method.path}`;
+        } else {
+          method.path = `/${voltId}/${serviceId}${method.path}`;
+        }
+      }
+      if (noSerialise) {
+        // Save original serialisation methods so we can encrypt/decrypt in the tunnel.
+        method.requestSerializeOriginal = method.requestSerialize;
+        method.responseDeserializeOriginal = method.responseDeserialize;
+
+        // Replace default serialisation with NOP, since when tunnelling we encrypt the payload
+        // before sending it to the channel, so we want it to be treated as a pure byte array (pass-through).
+        method.requestSerialize = serialiseNOP;
+        method.responseDeserialize = serialiseNOP;
+      }
+    });
+  }
+
+  const SubClass = grpc.makeGenericClientConstructor(serviceDescriptors);
+
+  return new SubClass(address, grpcCredentials);
 }
 
 /**
@@ -305,158 +305,158 @@ function createClient(
  * @param {*} api
  */
 const grpcWrap = (api) => {
-	const grpcRoutes = {};
-
-	// Don't bother trying to wrap class constructors.
-	const ignoreMethods = ["constructor"];
-
-	// Support class instances and PoJos
-	const isClass = api.constructor !== Object;
-	const iterate = Object.getOwnPropertyNames(
-		isClass ? api.constructor.prototype : api,
-	);
-
-	// Wrap each method on the api.
-	forEach(iterate, (name) => {
-		if (!ignoreMethods.includes(name)) {
-			const method = api[name];
-			grpcRoutes[name] = (call, callback) => {
-				// Execute the method in the context of the api.
-				const resultPromise = method.call(api, call.request, call);
-
-				// Enforce promise results.
-				if (!(resultPromise?.then && resultPromise?.catch)) {
-					throw new Error(
-						`implementation methods must return a Promise [${name}]`,
-					);
-				}
-
-				resultPromise
-					.then((response) => {
-						if (callback) {
-							callback(null, response);
-						}
-					})
-					.catch((err) => {
-						if (callback) {
-							callback(err);
-						} else {
-							// TODO - verify this => how to send error to stream clients?
-							// Destroy stream on error.
-							call.destroy(err);
-						}
-					});
-			};
-		}
-	});
-
-	return grpcRoutes;
+  const grpcRoutes = {};
+
+  // Don't bother trying to wrap class constructors.
+  const ignoreMethods = ["constructor"];
+
+  // Support class instances and PoJos
+  const isClass = api.constructor !== Object;
+  const iterate = Object.getOwnPropertyNames(
+    isClass ? api.constructor.prototype : api,
+  );
+
+  // Wrap each method on the api.
+  forEach(iterate, (name) => {
+    if (!ignoreMethods.includes(name)) {
+      const method = api[name];
+      grpcRoutes[name] = (call, callback) => {
+        // Execute the method in the context of the api.
+        const resultPromise = method.call(api, call.request, call);
+
+        // Enforce promise results.
+        if (!(resultPromise?.then && resultPromise?.catch)) {
+          throw new Error(
+            `implementation methods must return a Promise [${name}]`,
+          );
+        }
+
+        resultPromise
+          .then((response) => {
+            if (callback) {
+              callback(null, response);
+            }
+          })
+          .catch((err) => {
+            if (callback) {
+              callback(err);
+            } else {
+              // TODO - verify this => how to send error to stream clients?
+              // Destroy stream on error.
+              call.destroy(err);
+            }
+          });
+      };
+    }
+  });
+
+  return grpcRoutes;
 };
 
 class GrpcServer {
-	constructor(options) {
-		const { grpc, serviceDescriptors, routes, tlsOptions, requireClientCert } =
-			options;
-		this._grpc = grpc;
-		this._server = new this._grpc.Server({
-			"grpc.keepalive_time_ms": 500,
-			"grpc.keepalive_timeout_ms": 5000,
-			"grpc.http2.max_pings_without_data": 0,
-			"grpc.keepalive_permit_without_calls": 1,
-			"grpc.http2.min_ping_interval_without_data_ms": 250,
-			"grpc.http2.max_ping_strikes": 0,
-		});
-
-		if (tlsOptions) {
-			const caList = [];
-			const certChains = [];
-			[].concat(tlsOptions).forEach((tlsOption) => {
-				caList.push(tlsOption.ca);
-				certChains.push({
-					private_key: tlsOption.key,
-					cert_chain: tlsOption.cert,
-				});
-			});
-
-			// Create credentials from the volt CA and our own pub/priv key.
-			this._credentials = grpc.ServerCredentials.createSsl(
-				// The root CAs we trust when verifying client certificates.
-				Buffer.concat(caList),
-				// The certificate chain(s) we present to the client.
-				certChains,
-				// Flag indicating if we insist on a client certificate.
-				requireClientCert,
-			);
-		} else {
-			this._credentials = grpc.ServerCredentials.createInsecure();
-		}
-
-		if (serviceDescriptors && !isEmpty(routes)) {
-			// Enforce decoupling of the service implementation.
-			const router = grpcWrap(routes);
-			this._server.addService(serviceDescriptors, router);
-		}
-	}
-
-	close(force = false) {
-		return new Promise((resolve) => {
-			if (force) {
-				resolve(this._server.forceShutdown());
-			} else {
-				this._server.tryShutdown(resolve);
-			}
-		});
-	}
-
-	listen(address) {
-		return new Promise((resolve, reject) => {
-			// If no port is specified, grpc will return the port number assigned.
-			this._server.bindAsync(address, this._credentials, (err, port) => {
-				if (err) {
-					reject(err);
-				} else {
-					this._port = port;
-					this._server.start();
-					resolve(port);
-				}
-			});
-		});
-	}
-
-	get server() {
-		return this._server;
-	}
-
-	get port() {
-		return this._port;
-	}
+  constructor(options) {
+    const { grpc, serviceDescriptors, routes, tlsOptions, requireClientCert } =
+      options;
+    this._grpc = grpc;
+    this._server = new this._grpc.Server({
+      "grpc.keepalive_time_ms": 500,
+      "grpc.keepalive_timeout_ms": 5000,
+      "grpc.http2.max_pings_without_data": 0,
+      "grpc.keepalive_permit_without_calls": 1,
+      "grpc.http2.min_ping_interval_without_data_ms": 250,
+      "grpc.http2.max_ping_strikes": 0,
+    });
+
+    if (tlsOptions) {
+      const caList = [];
+      const certChains = [];
+      [].concat(tlsOptions).forEach((tlsOption) => {
+        caList.push(tlsOption.ca);
+        certChains.push({
+          private_key: tlsOption.key,
+          cert_chain: tlsOption.cert,
+        });
+      });
+
+      // Create credentials from the volt CA and our own pub/priv key.
+      this._credentials = grpc.ServerCredentials.createSsl(
+        // The root CAs we trust when verifying client certificates.
+        Buffer.concat(caList),
+        // The certificate chain(s) we present to the client.
+        certChains,
+        // Flag indicating if we insist on a client certificate.
+        requireClientCert,
+      );
+    } else {
+      this._credentials = grpc.ServerCredentials.createInsecure();
+    }
+
+    if (serviceDescriptors && !isEmpty(routes)) {
+      // Enforce decoupling of the service implementation.
+      const router = grpcWrap(routes);
+      this._server.addService(serviceDescriptors, router);
+    }
+  }
+
+  close(force = false) {
+    return new Promise((resolve) => {
+      if (force) {
+        resolve(this._server.forceShutdown());
+      } else {
+        this._server.tryShutdown(resolve);
+      }
+    });
+  }
+
+  listen(address) {
+    return new Promise((resolve, reject) => {
+      // If no port is specified, grpc will return the port number assigned.
+      this._server.bindAsync(address, this._credentials, (err, port) => {
+        if (err) {
+          reject(err);
+        } else {
+          this._port = port;
+          this._server.start();
+          resolve(port);
+        }
+      });
+    });
+  }
+
+  get server() {
+    return this._server;
+  }
+
+  get port() {
+    return this._port;
+  }
 }
 
 function createServer(
-	grpc,
-	serviceDescriptors,
-	routes,
-	cryptoCache,
-	requireClientCert,
+  grpc,
+  serviceDescriptors,
+  routes,
+  cryptoCache,
+  requireClientCert,
 ) {
-	let tlsOptions;
-	if (cryptoCache) {
-		tlsOptions = createSecureContextOptions(cryptoCache);
-	}
-	const serverArgs = {
-		grpc,
-		serviceDescriptors,
-		routes,
-		tlsOptions,
-		requireClientCert,
-	};
-	return new GrpcServer(serverArgs);
+  let tlsOptions;
+  if (cryptoCache) {
+    tlsOptions = createSecureContextOptions(cryptoCache);
+  }
+  const serverArgs = {
+    grpc,
+    serviceDescriptors,
+    routes,
+    tlsOptions,
+    requireClientCert,
+  };
+  return new GrpcServer(serverArgs);
 }
 
 var grpcUtils = /*#__PURE__*/Object.freeze({
-	__proto__: null,
-	createClient: createClient,
-	createServer: createServer
+  __proto__: null,
+  createClient: createClient,
+  createServer: createServer
 });
 
 /* eslint-disable no-underscore-dangle */
@@ -467,227 +467,227 @@ const aesAlgorithm = "aes-256-cbc";
 const rs256Algorithm = "RS256";
 
 class VoltCredential {
-	constructor(config, configPath) {
-		this._config = config;
-		this._voltConfig = config.volt;
-		this._configPath = configPath;
-		this._persistCache = !!configPath;
-
-		if (this._config.credential) {
-			this._cryptoCache = this._config.credential;
-		} else {
-			this._cryptoCache = {};
-		}
-
-		// Determine if we're dealing with an encrypted key.
-		if (
-			this._cryptoCache.key?.startsWith(constants.privateEncryptedKeyPrefix)
-		) {
-			if (!config.p) {
-				throw new Error("encrypted key but no passphrase given");
-			}
-
-			// Need to unencrypt the private key.
-			const decrypted = pki$1.decryptRsaPrivateKey(
-				this._cryptoCache.key,
-				config.p,
-			);
-			if (!decrypted) {
-				throw new Error("failed to decrypt key - check passphrase");
-			}
-			this._cryptoCache.key = pki$1.privateKeyToPem(decrypted);
-		}
-
-		if (this._voltConfig.ca_pem) {
-			if (!this._cryptoCache.ca) {
-				// Copy the volt signing CA to the crypto cache.
-				this._cryptoCache.ca = this._voltConfig.ca_pem;
-			}
-
-			// Pre-cache the target Volt public key by extracting it from the signing certificate.
-			const voltCert = forge__default["default"].pki.certificateFromPem(this._voltConfig.ca_pem);
-
-			// Extract Volt public key (used for encrypting Relay payloads).
-			this._voltPublicKey = forge__default["default"].pki.publicKeyToPem(voltCert.publicKey);
-			this._voltFingerprint = createPublicKeyFingerprint(
-				this._voltPublicKey,
-			);
-		}
-	}
-
-	get config() {
-		return this._config;
-	}
-
-	get cache() {
-		return this._cryptoCache;
-	}
-
-	get voltFingerprint() {
-		return this._voltFingerprint;
-	}
-
-	getKey() {
-		const privateKey = pki$1.privateKeyFromPem(this._cryptoCache.key);
-		const publicKey = pki$1.rsa.setPublicKey(privateKey.n, privateKey.e);
-		return { privateKey, publicKey };
-	}
-
-	/**
-	 * Retrieves and re-hydrates the pub/priv key data from the crypto cache, or creates one if not found.
-	 */
-	createKey() {
-		if (this._cryptoCache.key) {
-			// Already have key data in the cache in pem format => create fully-formed pki instances.
-			log$4("createKey - key already exists");
-			return Promise.resolve(this.getKey());
-		} else {
-			log$4("creating key");
-			return new Promise((resolve, reject) => {
-				pki$1.rsa.generateKeyPair({ bits: 2048, workers: -1 }, (err, keypair) => {
-					if (err) {
-						log$4("failure creating key [%s]", err.message);
-						reject(err);
-					} else {
-						log$4("successfully created key");
-						const pem = pki$1.privateKeyToPem(keypair.privateKey);
-						this._cryptoCache.key = pem;
-						resolve(keypair);
-					}
-				});
-			});
-		}
-	}
-
-	/**
-	 * Create cryptocache from scratch.
-	 */
-	initialise() {
-		return this.createKey()
-			.then((/* keypair */) => {
-				return this.saveCache();
-			})
-			.then(() => {
-				return this._cryptoCache;
-			})
-			.catch((err) => {
-				log$4("failure initialising crypto [%s]", err.message);
-				return Promise.reject(err);
-			});
-	}
-
-	get isBound() {
-		return !!this._cryptoCache.cert;
-	}
-
-	/**
-	 * Signs the identity resource id using the private key.
-	 * @param {*} audience the token audience (usually the target volt)
-	 * @param {*} tunnelling flag indicating if the token is required for a tunnelled connection
-	 * @param {*} ttl time to live in seconds (default to 1 minute)
-	 */
-	getIdentityToken(audience, tunnelling = false, ttl = 60) {
-		if (!this._cryptoCache.key) {
-			throw new Error("crypto cache invalid");
-		}
-
-		const keyPair = this.getKey();
-		const publicKeyPem = pki$1.publicKeyToPem(keyPair.publicKey);
-		const base58Key = createPublicKeyFingerprint(publicKeyPem);
-
-		log$4("base58 key is %s", base58Key);
-
-		// Allow TTL either side of the current time.
-		// @todo - fix with server time sync on volt connection.
-		const payload = {
-			aud: audience,
-			iat: Math.floor(Date.now() / 1000) - ttl,
-			exp: Math.floor(Date.now() / 1000) + ttl,
-		};
-
-		let sharedKey;
-		if (tunnelling) {
-			// Initialise the Relay encryption key.
-			sharedKey = VoltCredential.aesCreateKey();
-
-			// Encrypt the key details using the target Volt public key and include this in the JWT payload.
-			payload.sk = VoltCredential.rsaEncrypt(
-				this._voltPublicKey,
-				sharedKey.key,
-			);
-			payload.iv = VoltCredential.rsaEncrypt(this._voltPublicKey, sharedKey.iv);
-		}
-
-		// Sign synchronously.
-		const token = jwt__default["default"].sign(payload, this._cryptoCache.key, {
-			algorithm: rs256Algorithm,
-			keyid: base58Key,
-		});
-
-		// Return the token along with any encryption key details.
-		return {
-			token,
-			sharedKey,
-		};
-	}
-
-	/**
-	 * Creates the metadata required for a grpc call, including the Volt authentication token
-	 * and optionally tunnel encryption parameters.
-	 * @param {*} grpc
-	 * @param {*} audience
-	 * @param {*} tunnelling
-	 * @param {*} ttl
-	 * @returns
-	 */
-	getIdentityMetadata(grpc, audience, tunnelling = false, ttl = 60) {
-		const identityToken = this.getIdentityToken(
-			audience || this._voltConfig.id,
-			tunnelling,
-			ttl,
-		);
-		const metadata = new grpc.Metadata();
-		metadata.add(constants.authTokenName, identityToken.token);
-		return { ...identityToken, metadata };
-	}
-
-	saveCache() {
-		if (this._persistCache) {
-			const clone = { ...this._config, credential: { ...this._cryptoCache } };
-			if (this._config.p) {
-				// A passphrase option exists => encrypt the key before writing the cache file.
-				const privateKey = pki$1.privateKeyFromPem(this._cryptoCache.key);
-				clone.credential.key = pki$1.encryptRsaPrivateKey(
-					privateKey,
-					this._config.p,
-				);
-			}
-			fs__default["default"].writeFileSync(this._configPath, JSON.stringify(clone, null, 2));
-		}
-	}
-
-	static aesCreateKey() {
-		// Generate random key for the AES-256 algorithm (32 bytes = 256 bits).
-		const key = crypto__default["default"].randomBytes(32);
-		const iv = crypto__default["default"].randomBytes(16);
-		return { key, iv };
-	}
-
-	static aesEncrypt(buffer, key, iv) {
-		const cipher = crypto__default["default"].createCipheriv(aesAlgorithm, key, iv);
-		const crypted = Buffer.concat([cipher.update(buffer), cipher.final()]);
-		return crypted;
-	}
-
-	static aesDecrypt(buffer, key, iv) {
-		const cipher = crypto__default["default"].createDecipheriv(aesAlgorithm, key, iv);
-		const decrypted = Buffer.concat([cipher.update(buffer), cipher.final()]);
-		return decrypted;
-	}
-
-	static rsaEncrypt(key, buffer) {
-		return crypto__default["default"].publicEncrypt(key, buffer).toString("base64");
-	}
+  constructor(config, configPath) {
+    this._config = config;
+    this._voltConfig = config.volt;
+    this._configPath = configPath;
+    this._persistCache = !!configPath;
+
+    if (this._config.credential) {
+      this._cryptoCache = this._config.credential;
+    } else {
+      this._cryptoCache = {};
+    }
+
+    // Determine if we're dealing with an encrypted key.
+    if (
+      this._cryptoCache.key?.startsWith(constants.privateEncryptedKeyPrefix)
+    ) {
+      if (!config.p) {
+        throw new Error("encrypted key but no passphrase given");
+      }
+
+      // Need to unencrypt the private key.
+      const decrypted = pki$1.decryptRsaPrivateKey(
+        this._cryptoCache.key,
+        config.p,
+      );
+      if (!decrypted) {
+        throw new Error("failed to decrypt key - check passphrase");
+      }
+      this._cryptoCache.key = pki$1.privateKeyToPem(decrypted);
+    }
+
+    if (this._voltConfig.ca_pem) {
+      if (!this._cryptoCache.ca) {
+        // Copy the volt signing CA to the crypto cache.
+        this._cryptoCache.ca = this._voltConfig.ca_pem;
+      }
+
+      // Pre-cache the target Volt public key by extracting it from the signing certificate.
+      const voltCert = forge__default["default"].pki.certificateFromPem(this._voltConfig.ca_pem);
+
+      // Extract Volt public key (used for encrypting Relay payloads).
+      this._voltPublicKey = forge__default["default"].pki.publicKeyToPem(voltCert.publicKey);
+      this._voltFingerprint = createPublicKeyFingerprint(
+        this._voltPublicKey,
+      );
+    }
+  }
+
+  get config() {
+    return this._config;
+  }
+
+  get cache() {
+    return this._cryptoCache;
+  }
+
+  get voltFingerprint() {
+    return this._voltFingerprint;
+  }
+
+  getKey() {
+    const privateKey = pki$1.privateKeyFromPem(this._cryptoCache.key);
+    const publicKey = pki$1.rsa.setPublicKey(privateKey.n, privateKey.e);
+    return { privateKey, publicKey };
+  }
+
+  /**
+   * Retrieves and re-hydrates the pub/priv key data from the crypto cache, or creates one if not found.
+   */
+  createKey() {
+    if (this._cryptoCache.key) {
+      // Already have key data in the cache in pem format => create fully-formed pki instances.
+      log$4("createKey - key already exists");
+      return Promise.resolve(this.getKey());
+    } else {
+      log$4("creating key");
+      return new Promise((resolve, reject) => {
+        pki$1.rsa.generateKeyPair({ bits: 2048, workers: -1 }, (err, keypair) => {
+          if (err) {
+            log$4("failure creating key [%s]", err.message);
+            reject(err);
+          } else {
+            log$4("successfully created key");
+            const pem = pki$1.privateKeyToPem(keypair.privateKey);
+            this._cryptoCache.key = pem;
+            resolve(keypair);
+          }
+        });
+      });
+    }
+  }
+
+  /**
+   * Create cryptocache from scratch.
+   */
+  initialise() {
+    return this.createKey()
+      .then((/* keypair */) => {
+        return this.saveCache();
+      })
+      .then(() => {
+        return this._cryptoCache;
+      })
+      .catch((err) => {
+        log$4("failure initialising crypto [%s]", err.message);
+        return Promise.reject(err);
+      });
+  }
+
+  get isBound() {
+    return !!this._cryptoCache.cert;
+  }
+
+  /**
+   * Signs the identity resource id using the private key.
+   * @param {*} audience the token audience (usually the target volt)
+   * @param {*} tunnelling flag indicating if the token is required for a tunnelled connection
+   * @param {*} ttl time to live in seconds (default to 1 minute)
+   */
+  getIdentityToken(audience, tunnelling = false, ttl = 60) {
+    if (!this._cryptoCache.key) {
+      throw new Error("crypto cache invalid");
+    }
+
+    const keyPair = this.getKey();
+    const publicKeyPem = pki$1.publicKeyToPem(keyPair.publicKey);
+    const base58Key = createPublicKeyFingerprint(publicKeyPem);
+
+    log$4("base58 key is %s", base58Key);
+
+    // Allow TTL either side of the current time.
+    // @todo - fix with server time sync on volt connection.
+    const payload = {
+      aud: audience,
+      iat: Math.floor(Date.now() / 1000) - ttl,
+      exp: Math.floor(Date.now() / 1000) + ttl,
+    };
+
+    let sharedKey;
+    if (tunnelling) {
+      // Initialise the Relay encryption key.
+      sharedKey = VoltCredential.aesCreateKey();
+
+      // Encrypt the key details using the target Volt public key and include this in the JWT payload.
+      payload.sk = VoltCredential.rsaEncrypt(
+        this._voltPublicKey,
+        sharedKey.key,
+      );
+      payload.iv = VoltCredential.rsaEncrypt(this._voltPublicKey, sharedKey.iv);
+    }
+
+    // Sign synchronously.
+    const token = jwt__default["default"].sign(payload, this._cryptoCache.key, {
+      algorithm: rs256Algorithm,
+      keyid: base58Key,
+    });
+
+    // Return the token along with any encryption key details.
+    return {
+      token,
+      sharedKey,
+    };
+  }
+
+  /**
+   * Creates the metadata required for a grpc call, including the Volt authentication token
+   * and optionally tunnel encryption parameters.
+   * @param {*} grpc
+   * @param {*} audience
+   * @param {*} tunnelling
+   * @param {*} ttl
+   * @returns
+   */
+  getIdentityMetadata(grpc, audience, tunnelling = false, ttl = 60) {
+    const identityToken = this.getIdentityToken(
+      audience || this._voltConfig.id,
+      tunnelling,
+      ttl,
+    );
+    const metadata = new grpc.Metadata();
+    metadata.add(constants.authTokenName, identityToken.token);
+    return { ...identityToken, metadata };
+  }
+
+  saveCache() {
+    if (this._persistCache) {
+      const clone = { ...this._config, credential: { ...this._cryptoCache } };
+      if (this._config.p) {
+        // A passphrase option exists => encrypt the key before writing the cache file.
+        const privateKey = pki$1.privateKeyFromPem(this._cryptoCache.key);
+        clone.credential.key = pki$1.encryptRsaPrivateKey(
+          privateKey,
+          this._config.p,
+        );
+      }
+      fs__default["default"].writeFileSync(this._configPath, JSON.stringify(clone, null, 2));
+    }
+  }
+
+  static aesCreateKey() {
+    // Generate random key for the AES-256 algorithm (32 bytes = 256 bits).
+    const key = crypto__default["default"].randomBytes(32);
+    const iv = crypto__default["default"].randomBytes(16);
+    return { key, iv };
+  }
+
+  static aesEncrypt(buffer, key, iv) {
+    const cipher = crypto__default["default"].createCipheriv(aesAlgorithm, key, iv);
+    const crypted = Buffer.concat([cipher.update(buffer), cipher.final()]);
+    return crypted;
+  }
+
+  static aesDecrypt(buffer, key, iv) {
+    const cipher = crypto__default["default"].createDecipheriv(aesAlgorithm, key, iv);
+    const decrypted = Buffer.concat([cipher.update(buffer), cipher.final()]);
+    return decrypted;
+  }
+
+  static rsaEncrypt(key, buffer) {
+    return crypto__default["default"].publicEncrypt(key, buffer).toString("base64");
+  }
 }
 
 const { get: getProp, snakeCase } = lodash__default["default"];
@@ -696,93 +696,93 @@ const __dirname$1 = path.dirname(url.fileURLToPath((typeof document === 'undefin
 const defaultProtoPath = path.join(__dirname$1, "../protobuf");
 
 const defaultLoaderOptions = {
-	keepCase: true,
-	longs: String,
-	enums: String,
-	defaults: true,
-	oneofs: true,
-	includeDirs: [defaultProtoPath],
+  keepCase: true,
+  longs: String,
+  enums: String,
+  defaults: true,
+  oneofs: true,
+  includeDirs: [defaultProtoPath],
 };
 
 const getProtoDescriptors = (grpc, protoPath, opts) => {
-	const definition = protoLoader__default["default"].loadSync(
-		protoPath,
-		opts || defaultLoaderOptions,
-	);
-	const descriptors = grpc.loadPackageDefinition(definition);
-	return descriptors;
+  const definition = protoLoader__default["default"].loadSync(
+    protoPath,
+    opts || defaultLoaderOptions,
+  );
+  const descriptors = grpc.loadPackageDefinition(definition);
+  return descriptors;
 };
 
 const getProtoService = (descriptors, servicePath) => {
-	const serviceDef = getProp(descriptors, servicePath);
-	if (serviceDef?.service) {
-		return serviceDef.service;
-	} else {
-		return null;
-	}
+  const serviceDef = getProp(descriptors, servicePath);
+  if (serviceDef?.service) {
+    return serviceDef.service;
+  } else {
+    return null;
+  }
 };
 
 function getServiceDescriptorsFromPath(
-	grpc,
-	protoPath,
-	servicePackageName,
-	opts,
+  grpc,
+  protoPath,
+  servicePackageName,
+  opts,
 ) {
-	let serviceDescriptors;
-	const descriptors = getProtoDescriptors(grpc, protoPath, opts);
-	if (descriptors) {
-		serviceDescriptors = getProtoService(descriptors, servicePackageName);
-	}
+  let serviceDescriptors;
+  const descriptors = getProtoDescriptors(grpc, protoPath, opts);
+  if (descriptors) {
+    serviceDescriptors = getProtoService(descriptors, servicePackageName);
+  }
 
-	return serviceDescriptors;
+  return serviceDescriptors;
 }
 
 function getServiceDescriptors(grpc, servicePackageName, opts) {
-	// Extract the package components of the service proto package. The package name should be of the
-	// fully qualified proto path, e.g. tdx.volt_api.webcam.v1.WebcamControlAPI.
-	const protoServiceComponents = servicePackageName.split(".");
-
-	// The service name is the last component of the path.
-	const protoServiceName = protoServiceComponents.pop();
-
-	// The actual file name should match the snake case of the service name.
-	const protoFileName = `${snakeCase(protoServiceName).toLowerCase()}.proto`;
-
-	// The path to the proto file should match each component of the package name.
-	const protoPath = path.join(
-		defaultProtoPath,
-		...protoServiceComponents,
-		protoFileName,
-	);
-
-	let serviceDescriptors;
-	const descriptors = getProtoDescriptors(grpc, protoPath, opts);
-	if (descriptors) {
-		serviceDescriptors = getProtoService(descriptors, servicePackageName);
-	}
-
-	return serviceDescriptors;
+  // Extract the package components of the service proto package. The package name should be of the
+  // fully qualified proto path, e.g. tdx.volt_api.webcam.v1.WebcamControlAPI.
+  const protoServiceComponents = servicePackageName.split(".");
+
+  // The service name is the last component of the path.
+  const protoServiceName = protoServiceComponents.pop();
+
+  // The actual file name should match the snake case of the service name.
+  const protoFileName = `${snakeCase(protoServiceName).toLowerCase()}.proto`;
+
+  // The path to the proto file should match each component of the package name.
+  const protoPath = path.join(
+    defaultProtoPath,
+    ...protoServiceComponents,
+    protoFileName,
+  );
+
+  let serviceDescriptors;
+  const descriptors = getProtoDescriptors(grpc, protoPath, opts);
+  if (descriptors) {
+    serviceDescriptors = getProtoService(descriptors, servicePackageName);
+  }
+
+  return serviceDescriptors;
 }
 
 function getProtoDescriptorMethods(protoDescriptor) {
-	const methods = [];
-	Object.keys(protoDescriptor).forEach((methodName) => {
-		const method = protoDescriptor[methodName];
-		methods.push({
-			path: method.path,
-			client_streaming: method.requestStream,
-			server_streaming: method.responseStream,
-		});
-	});
-	return methods;
+  const methods = [];
+  Object.keys(protoDescriptor).forEach((methodName) => {
+    const method = protoDescriptor[methodName];
+    methods.push({
+      path: method.path,
+      client_streaming: method.requestStream,
+      server_streaming: method.responseStream,
+    });
+  });
+  return methods;
 }
 
 var protoUtils = /*#__PURE__*/Object.freeze({
-	__proto__: null,
-	getServiceDescriptors: getServiceDescriptors,
-	getProtoDescriptors: getProtoDescriptors,
-	getProtoDescriptorMethods: getProtoDescriptorMethods,
-	getServiceDescriptorsFromPath: getServiceDescriptorsFromPath
+  __proto__: null,
+  getServiceDescriptors: getServiceDescriptors,
+  getProtoDescriptors: getProtoDescriptors,
+  getProtoDescriptorMethods: getProtoDescriptorMethods,
+  getServiceDescriptorsFromPath: getServiceDescriptorsFromPath
 });
 
 /* eslint-disable no-underscore-dangle */
@@ -790,282 +790,282 @@ var protoUtils = /*#__PURE__*/Object.freeze({
 const log$3 = debug__default["default"]("volt-client-grpc:grpc-call");
 
 function _prepareInvokeRequest(
-	request,
-	method,
-	methodType = "METHOD_TYPE_UNARY",
+  request,
+  method,
+  methodType = "METHOD_TYPE_UNARY",
 ) {
-	const meta = this._voltClient.credential.getIdentityMetadata(
-		this._voltClient.grpc,
-		this._voltClient.voltConfig.id,
-		this._voltClient.isRemote,
-	);
-	let invokeRequest;
-	let callMethod = method;
-
-	if (this._voltClient.isVoltRelay) {
-		let requestPayload;
-		if (request) {
-			requestPayload = this._grpcClient[method].requestSerialize(request);
-		} else if (request !== null) {
-			log$3("****************LOOKOUT****************** - empty request");
-		} else {
-			log$3("explicit empty request payload");
-		}
-
-		const tunnelMethod = this._grpcClient.Tunnel;
-
-		const tunnelResp = {
-			method_invoke: {
-				method_name: this._grpcClient[method].path,
-				method_type: methodType,
-				token: meta.token,
-				request: requestPayload,
-			},
-		};
-
-		const invokePayload = VoltCredential.aesEncrypt(
-			tunnelMethod.responseSerialize(tunnelResp),
-			meta.sharedKey.key,
-			meta.sharedKey.iv,
-		);
-
-		log$3("target volt is %s", this._voltClient.credential.voltFingerprint);
-
-		invokeRequest = {
-			identity_fingerprint: this._voltClient.credential.voltFingerprint,
-			payload: invokePayload,
-		};
-
-		callMethod = "Invoke";
-	} else if (this._voltClient.isRemote && meta.sharedKey.key) {
-		const requestPayload =
-			this._grpcClient[method].requestSerializeOriginal(request);
-		invokeRequest = VoltCredential.aesEncrypt(
-			requestPayload,
-			meta.sharedKey.key,
-			meta.sharedKey.iv,
-		);
-	} else {
-		invokeRequest = request;
-	}
-
-	return {
-		meta,
-		method: callMethod,
-		methodName: method,
-		request: invokeRequest,
-	};
+  const meta = this._voltClient.credential.getIdentityMetadata(
+    this._voltClient.grpc,
+    this._voltClient.voltConfig.id,
+    this._voltClient.isRemote,
+  );
+  let invokeRequest;
+  let callMethod = method;
+
+  if (this._voltClient.isVoltRelay) {
+    let requestPayload;
+    if (request) {
+      requestPayload = this._grpcClient[method].requestSerialize(request);
+    } else if (request !== null) {
+      log$3("****************LOOKOUT****************** - empty request");
+    } else {
+      log$3("explicit empty request payload");
+    }
+
+    const tunnelMethod = this._grpcClient.Tunnel;
+
+    const tunnelResp = {
+      method_invoke: {
+        method_name: this._grpcClient[method].path,
+        method_type: methodType,
+        token: meta.token,
+        request: requestPayload,
+      },
+    };
+
+    const invokePayload = VoltCredential.aesEncrypt(
+      tunnelMethod.responseSerialize(tunnelResp),
+      meta.sharedKey.key,
+      meta.sharedKey.iv,
+    );
+
+    log$3("target volt is %s", this._voltClient.credential.voltFingerprint);
+
+    invokeRequest = {
+      identity_fingerprint: this._voltClient.credential.voltFingerprint,
+      payload: invokePayload,
+    };
+
+    callMethod = "Invoke";
+  } else if (this._voltClient.isRemote && meta.sharedKey.key) {
+    const requestPayload =
+      this._grpcClient[method].requestSerializeOriginal(request);
+    invokeRequest = VoltCredential.aesEncrypt(
+      requestPayload,
+      meta.sharedKey.key,
+      meta.sharedKey.iv,
+    );
+  } else {
+    invokeRequest = request;
+  }
+
+  return {
+    meta,
+    method: callMethod,
+    methodName: method,
+    request: invokeRequest,
+  };
 }
 
 function _preparePayloadRequest(request, invokeInfo) {
-	let payloadRequest;
-
-	if (this._voltClient.isVoltRelay) {
-		const requestPayload =
-			this._grpcClient[invokeInfo.methodName].requestSerialize(request);
-		const tunnelMethod = this._grpcClient.Tunnel;
-
-		const tunnelResp = {
-			method_payload: {
-				payload: requestPayload,
-			},
-		};
-
-		const invokePayload = VoltCredential.aesEncrypt(
-			tunnelMethod.responseSerialize(tunnelResp),
-			invokeInfo.meta.sharedKey.key,
-			invokeInfo.meta.sharedKey.iv,
-		);
-
-		payloadRequest = {
-			payload: invokePayload,
-		};
-	} else if (this._voltClient.isRemote && invokeInfo.meta.sharedKey.key) {
-		const requestPayload =
-			this._grpcClient[invokeInfo.methodName].requestSerializeOriginal(request);
-		payloadRequest = VoltCredential.aesEncrypt(
-			requestPayload,
-			invokeInfo.meta.sharedKey.key,
-			invokeInfo.meta.sharedKey.iv,
-		);
-	} else {
-		payloadRequest = request;
-	}
-
-	return payloadRequest;
+  let payloadRequest;
+
+  if (this._voltClient.isVoltRelay) {
+    const requestPayload =
+      this._grpcClient[invokeInfo.methodName].requestSerialize(request);
+    const tunnelMethod = this._grpcClient.Tunnel;
+
+    const tunnelResp = {
+      method_payload: {
+        payload: requestPayload,
+      },
+    };
+
+    const invokePayload = VoltCredential.aesEncrypt(
+      tunnelMethod.responseSerialize(tunnelResp),
+      invokeInfo.meta.sharedKey.key,
+      invokeInfo.meta.sharedKey.iv,
+    );
+
+    payloadRequest = {
+      payload: invokePayload,
+    };
+  } else if (this._voltClient.isRemote && invokeInfo.meta.sharedKey.key) {
+    const requestPayload =
+      this._grpcClient[invokeInfo.methodName].requestSerializeOriginal(request);
+    payloadRequest = VoltCredential.aesEncrypt(
+      requestPayload,
+      invokeInfo.meta.sharedKey.key,
+      invokeInfo.meta.sharedKey.iv,
+    );
+  } else {
+    payloadRequest = request;
+  }
+
+  return payloadRequest;
 }
 
 function _parseResponse(method, meta, response) {
-	let invokeResponse = {};
-
-	if (this._voltClient.isVoltRelay) {
-		if (response.payload) {
-			const decryptedPayload = VoltCredential.aesDecrypt(
-				response.payload,
-				meta.sharedKey.key,
-				meta.sharedKey.iv,
-			);
-			const tunnelMethod = this._grpcClient.Tunnel;
-			const responsePayload = tunnelMethod.requestDeserialize(decryptedPayload);
-			if (responsePayload.payload === "method_payload") {
-				invokeResponse.payload = this._grpcClient[method].responseDeserialize(
-					responsePayload.method_payload.payload,
-				);
-			} else if (responsePayload.payload === "method_end") {
-				invokeResponse = responsePayload.method_end;
-			} else {
-				log$3("unexpected tunnel payload type: %s", responsePayload.payload);
-			}
-		} else if (response.status?.message) {
-			// There's been an error in the tunnel.
-			log$3(
-				"Tunnel status received: %s, code %d, description: %s",
-				response.status.message,
-				response.status.code,
-				response.status.description || "n/a",
-			);
-			invokeResponse = {
-				ended: true,
-				error: `Error in tunnel: ${response.status.message}`,
-			};
-		} else {
-			invokeResponse.methodId = response.invoke_id;
-			log$3("started method %d for %s", invokeResponse.methodId, method);
-		}
-	} else if (this._voltClient.isRemote && meta.sharedKey.key) {
-		const decryptedPayload = VoltCredential.aesDecrypt(
-			response,
-			meta.sharedKey.key,
-			meta.sharedKey.iv,
-		);
-		invokeResponse = {
-			payload:
-				this._grpcClient[method].responseDeserializeOriginal(decryptedPayload),
-		};
-	} else {
-		invokeResponse = { payload: response };
-	}
-
-	return invokeResponse;
+  let invokeResponse = {};
+
+  if (this._voltClient.isVoltRelay) {
+    if (response.payload) {
+      const decryptedPayload = VoltCredential.aesDecrypt(
+        response.payload,
+        meta.sharedKey.key,
+        meta.sharedKey.iv,
+      );
+      const tunnelMethod = this._grpcClient.Tunnel;
+      const responsePayload = tunnelMethod.requestDeserialize(decryptedPayload);
+      if (responsePayload.payload === "method_payload") {
+        invokeResponse.payload = this._grpcClient[method].responseDeserialize(
+          responsePayload.method_payload.payload,
+        );
+      } else if (responsePayload.payload === "method_end") {
+        invokeResponse = responsePayload.method_end;
+      } else {
+        log$3("unexpected tunnel payload type: %s", responsePayload.payload);
+      }
+    } else if (response.status?.message) {
+      // There's been an error in the tunnel.
+      log$3(
+        "Tunnel status received: %s, code %d, description: %s",
+        response.status.message,
+        response.status.code,
+        response.status.description || "n/a",
+      );
+      invokeResponse = {
+        ended: true,
+        error: `Error in tunnel: ${response.status.message}`,
+      };
+    } else {
+      invokeResponse.methodId = response.invoke_id;
+      log$3("started method %d for %s", invokeResponse.methodId, method);
+    }
+  } else if (this._voltClient.isRemote && meta.sharedKey.key) {
+    const decryptedPayload = VoltCredential.aesDecrypt(
+      response,
+      meta.sharedKey.key,
+      meta.sharedKey.iv,
+    );
+    invokeResponse = {
+      payload:
+        this._grpcClient[method].responseDeserializeOriginal(decryptedPayload),
+    };
+  } else {
+    invokeResponse = { payload: response };
+  }
+
+  return invokeResponse;
 }
 
 class GRPCCall extends EventEmitter__default["default"] {
-	constructor(voltClient, methodName, methodType) {
-		super();
-		this._methodName = methodName;
-		this._methodType = methodType;
-		this._call = null;
-		this._voltClient = voltClient;
-	}
-
-	start(grpcClient, request) {
-		this._grpcClient = grpcClient;
-
-		this._initialRequest = _prepareInvokeRequest.call(
-			this,
-			request,
-			this._methodName,
-			this._methodType,
-		);
-
-		if (!this._grpcClient[this._initialRequest.method]) {
-			return reject(
-				new Error(`method not found: '${this._initialRequest.method}'`),
-			);
-		}
-
-		this._call = this._grpcClient[this._initialRequest.method](
-			this._initialRequest.meta.metadata,
-		);
-
-		this._call.on("data", (streamResponse) => {
-			try {
-				const parsedResponse = _parseResponse.call(
-					this,
-					this._methodName,
-					this._initialRequest.meta,
-					streamResponse,
-				);
-				if (parsedResponse.payload) {
-					this.emit("data", parsedResponse.payload);
-				} else if (parsedResponse.ended) {
-					if (parsedResponse.error) {
-						this.emit("error", new Error(parsedResponse.error));
-					} else {
-						// Not sure this is necessary - we should receive "end" from grpc soon...
-						this.emit("end");
-					}
-				} else {
-					log$3("method id is %s", parsedResponse.methodId);
-				}
-			} catch (err) {
-				log$3("failure processing connect response: %s", err.message);
-				this.emit("error", err);
-			}
-		});
-
-		this._call.on("error", (err) => {
-			log$3("ERROR - intercepted stream error %s", err.message);
-			this.emit("error", err);
-		});
-
-		this._call.on("finish", () => {
-			// The read side has ended (i.e. we called end()).
-			log$3("finished call %s", this._methodName);
-			this.emit("finish");
-		});
-
-		this._call.on("end", () => {
-			// The remote peer ended the stream.
-			log$3(
-				"ended call %s, method id: %s",
-				this._methodName,
-				this._initialRequest.methodId || "n/a - not tunnelling",
-			);
-			this.emit("end");
-		});
-
-		if (this._initialRequest.request) {
-			this._call.write(this._initialRequest.request);
-		}
-
-		return this;
-	}
-
-	end() {
-		if (this._call) {
-			return this._call.end();
-		} else {
-			throw new Error("call not initialised");
-		}
-	}
-
-	get writable() {
-		return this._call?.writable;
-	}
-
-	write(request) {
-		if (!this._call) {
-			log$3("ERROR - call not initialised");
-			throw new Error("call not initialised");
-		} else if (this._initialRequest) {
-			const payloadRequest = _preparePayloadRequest.call(
-				this,
-				request,
-				this._initialRequest,
-			);
-			return this._call.write(payloadRequest);
-		} else {
-			this._initialRequest = _prepareInvokeRequest.call(
-				this,
-				request,
-				this._methodName,
-				this._methodType,
-			);
-
-			return this._call.write(this._initialRequest.request);
-		}
-	}
+  constructor(voltClient, methodName, methodType) {
+    super();
+    this._methodName = methodName;
+    this._methodType = methodType;
+    this._call = null;
+    this._voltClient = voltClient;
+  }
+
+  start(grpcClient, request) {
+    this._grpcClient = grpcClient;
+
+    this._initialRequest = _prepareInvokeRequest.call(
+      this,
+      request,
+      this._methodName,
+      this._methodType,
+    );
+
+    if (!this._grpcClient[this._initialRequest.method]) {
+      return reject(
+        new Error(`method not found: '${this._initialRequest.method}'`),
+      );
+    }
+
+    this._call = this._grpcClient[this._initialRequest.method](
+      this._initialRequest.meta.metadata,
+    );
+
+    this._call.on("data", (streamResponse) => {
+      try {
+        const parsedResponse = _parseResponse.call(
+          this,
+          this._methodName,
+          this._initialRequest.meta,
+          streamResponse,
+        );
+        if (parsedResponse.payload) {
+          this.emit("data", parsedResponse.payload);
+        } else if (parsedResponse.ended) {
+          if (parsedResponse.error) {
+            this.emit("error", new Error(parsedResponse.error));
+          } else {
+            // Not sure this is necessary - we should receive "end" from grpc soon...
+            this.emit("end");
+          }
+        } else {
+          log$3("method id is %s", parsedResponse.methodId);
+        }
+      } catch (err) {
+        log$3("failure processing connect response: %s", err.message);
+        this.emit("error", err);
+      }
+    });
+
+    this._call.on("error", (err) => {
+      log$3("ERROR - intercepted stream error %s", err.message);
+      this.emit("error", err);
+    });
+
+    this._call.on("finish", () => {
+      // The read side has ended (i.e. we called end()).
+      log$3("finished call %s", this._methodName);
+      this.emit("finish");
+    });
+
+    this._call.on("end", () => {
+      // The remote peer ended the stream.
+      log$3(
+        "ended call %s, method id: %s",
+        this._methodName,
+        this._initialRequest.methodId || "n/a - not tunnelling",
+      );
+      this.emit("end");
+    });
+
+    if (this._initialRequest.request) {
+      this._call.write(this._initialRequest.request);
+    }
+
+    return this;
+  }
+
+  end() {
+    if (this._call) {
+      return this._call.end();
+    } else {
+      throw new Error("call not initialised");
+    }
+  }
+
+  get writable() {
+    return this._call?.writable;
+  }
+
+  write(request) {
+    if (!this._call) {
+      log$3("ERROR - call not initialised");
+      throw new Error("call not initialised");
+    } else if (this._initialRequest) {
+      const payloadRequest = _preparePayloadRequest.call(
+        this,
+        request,
+        this._initialRequest,
+      );
+      return this._call.write(payloadRequest);
+    } else {
+      this._initialRequest = _prepareInvokeRequest.call(
+        this,
+        request,
+        this._methodName,
+        this._methodType,
+      );
+
+      return this._call.write(this._initialRequest.request);
+    }
+  }
 }
 
 /* eslint-disable no-use-before-define */
@@ -1116,58 +1116,53 @@ function _doConnect() {
 	const helloPayload = {
 		hello: {},
 	};
-
-	this.call.start(grpcClient, helloPayload, (err, response) => {
-		if (err) {
-			log$2("error on connection stream [%s]", err.message);
-			_cleanUp.call(this);
-			this.emit("error", err);
-		} else {
-			switch (response.payload) {
-				case "ping": {
-					log$2("pinged");
-
-					// Received ping response from server => clear timeout.
-					if (this._pingTimeoutTimer) {
-						clearTimeout(this._pingTimeoutTimer);
-					}
-
-					// Schedule the next ping.
-					_startPingTimer.call(this);
-					break;
-				}
-				case "hello": {
-					if (!this._session) {
-						this._session = true;
-						this.emit("connected", this._session);
-					}
-					break;
-				}
-				case "evt": {
-					log$2("received event %s", response.evt.event_type);
-					this.emit("evt", response.evt);
-					break;
-				}
-				default:
-					log$2("unimplemented connect response payload: %s", response.payload);
-					break;
-			}
-		}
-	});
-
-	this.call
-		.wait()
-		.then(() => {
-			if (this._session) {
-				this.emit("connected", false);
-			}
-		})
-		.catch((err) => {
-			log$2("unexpected error on connect call [%s]", err.message);
-		})
-		.finally(() => {
-			_cleanUp.call(this);
-		});
+  
+  this.call.on("error", (err) => {
+    log$2("error on connection stream [%s]", err.message);
+    _cleanUp.call(this);
+    this.emit("error", err);
+  });
+
+  this.call.on("data", (response) => {
+    switch (response.payload) {
+      case "ping": {
+        log$2("pinged");
+
+        // Received ping response from server => clear timeout.
+        if (this._pingTimeoutTimer) {
+          clearTimeout(this._pingTimeoutTimer);
+        }
+
+        // Schedule the next ping.
+        _startPingTimer.call(this);
+        break;
+      }
+      case "hello": {
+        if (!this._session) {
+          this._session = true;
+          this.emit("connected", this._session);
+        }
+        break;
+      }
+      case "evt": {
+        log$2("received event %s", response.evt.event_type);
+        this.emit("evt", response.evt);
+        break;
+      }
+      default:
+        log$2("unimplemented connect response payload: %s", response.payload);
+        break;
+    }
+  });
+
+  this.call.on("end", () => {
+    if (this._session) {
+      this.emit("connected", false);
+    }
+    _cleanUp.call(this);
+  });
+
+	this.call.start(grpcClient, helloPayload);
 
 	_startPingTimer.call(this);
 }
@@ -1238,890 +1233,890 @@ const { filter, pick } = lodash__default["default"];
 
 const log$1 = debug__default["default"]("volt-client-grpc:volt-client-internal");
 const voltServices = [
-	constants.serviceType.voltAPI,
-	constants.serviceType.fileAPI,
-	constants.serviceType.sqliteDatabaseAPI,
-	constants.serviceType.sqliteServerAPI,
-	constants.serviceType.ssiAPI,
-	constants.serviceType.relayAPI,
-	constants.serviceType.wireAPI,
+  constants.serviceType.voltAPI,
+  constants.serviceType.fileAPI,
+  constants.serviceType.sqliteDatabaseAPI,
+  constants.serviceType.sqliteServerAPI,
+  constants.serviceType.ssiAPI,
+  constants.serviceType.relayAPI,
+  constants.serviceType.wireAPI,
 ];
 
 function issueBind(bindRequest, ttl) {
-	// eslint-disable-next-line no-use-before-define
-	return unaryCall.call(this, "Bind", bindRequest).then((bindResponse) => {
-		log$1("got binding request response %j", bindResponse);
-		if (bindResponse.status?.code) {
-			log$1("error in bind response: %s", bindResponse.status.message);
-			return Promise.reject(new Error(bindResponse.status.message));
-		} else {
-			switch (bindResponse.decision) {
-				case "POLICY_DECISION_PERMIT": {
-					//
-					// The request status is permit => cache the bind response info.
-					//
-
-					// This is the certificate assigned to us by the volt.
-					this._credential.cache.cert = bindResponse.cert;
-
-					// This is the signing CA used by the volt (don't ov)
-					this._credential.cache.ca = bindResponse.chain;
-
-					// Resource id is assigned by the volt.
-					this._credential.cache.client_id = bindResponse.identity_id;
-					this._credential.saveCache();
-					break;
-				}
-				case "POLICY_DECISION_DENY": {
-					log$1(">>>>>>>>>>>>>>> access request is DENIED <<<<<<<<<<<<<<<<<<<");
-					break;
-				}
-				case "POLICY_DECISION_PROMPT":
-				case "POLICY_DECISION_PENDING": {
-					log$1("access pending approval - waiting...");
-					break;
-				}
-				default:
-					log$1("ignoring unknown bind descision %s", bindResponse.status);
-					break;
-			}
-		}
-
-		return bindResponse.decision;
-	});
+  // eslint-disable-next-line no-use-before-define
+  return unaryCall.call(this, "Bind", bindRequest).then((bindResponse) => {
+    log$1("got binding request response %j", bindResponse);
+    if (bindResponse.status?.code) {
+      log$1("error in bind response: %s", bindResponse.status.message);
+      return Promise.reject(new Error(bindResponse.status.message));
+    } else {
+      switch (bindResponse.decision) {
+        case "POLICY_DECISION_PERMIT": {
+          //
+          // The request status is permit => cache the bind response info.
+          //
+
+          // This is the certificate assigned to us by the volt.
+          this._credential.cache.cert = bindResponse.cert;
+
+          // This is the signing CA used by the volt (don't ov)
+          this._credential.cache.ca = bindResponse.chain;
+
+          // Resource id is assigned by the volt.
+          this._credential.cache.client_id = bindResponse.identity_id;
+          this._credential.saveCache();
+          break;
+        }
+        case "POLICY_DECISION_DENY": {
+          log$1(">>>>>>>>>>>>>>> access request is DENIED <<<<<<<<<<<<<<<<<<<");
+          break;
+        }
+        case "POLICY_DECISION_PROMPT":
+        case "POLICY_DECISION_PENDING": {
+          log$1("access pending approval - waiting...");
+          break;
+        }
+        default:
+          log$1("ignoring unknown bind descision %s", bindResponse.status);
+          break;
+      }
+    }
+
+    return bindResponse.decision;
+  });
 }
 
 function findDIDDocumentService(document, serviceType) {
-	if (!document.service) {
-		return [];
-	}
+  if (!document.service) {
+    return [];
+  }
 
-	const matches = filter(document.service, (svc) => svc.type === serviceType);
-	return matches;
+  const matches = filter(document.service, (svc) => svc.type === serviceType);
+  return matches;
 }
 
 async function bindInternal() {
-	try {
-		// Check if we need to resolve a Relay volt.
-		if (
-			typeof this._voltConfig?.relay === "string" ||
-			this._voltConfig?.relay?.http_address
-		) {
-			const relayURL =
-				this._voltConfig.relay?.http_address || this._voltConfig.relay;
-			log$1("attempting to retrieve Relay information from %s", relayURL);
-			this._voltConfig.relay = await fetchVoltConfig.call(
-				this,
-				`${relayURL}/discovery`,
-			);
-			if (this._voltConfig.relay.ca_pem) {
-				log$1(
-					"Auto-fetched Relay CA %s, remote address %s",
-					this._voltConfig.relay.ca_pem,
-					this._voltConfig.relay.address,
-				);
-			} else {
-				throw new Error("Unable to fetch Relay CA - cannot securely connect.");
-			}
-		}
-
-		if (!this._credential.cache.ca) {
-			this._credential.cache.ca = this._voltConfig.ca_pem;
-		}
-
-		if (!this._credential.cache.ca) {
-			throw new Error(
-				"No certificate authority found in configuration for target Volt - check configuration",
-			);
-		}
-
-		const keyPair = this._credential.getKey();
-		const publicKeyPem = pki.publicKeyToPem(keyPair.publicKey);
-
-		if (!this._credential.cache.bindIp) {
-			// Default the IP address if none is specified. This is used to set the SAN in the
-			// certificate issued by the Volt.
-			this._credential.cache.bindIp = ip__default["default"].address();
-		}
-
-		this._credential.saveCache();
-
-		// Form the request message.
-		const bindRequest = {
-			binding_name: this._config.client_name,
-			public_key: publicKeyPem,
-			host: this._credential.cache.bindIp,
-			x509_credential: [],
-		};
-
-		if (this._credential.cache.cert) {
-			bindRequest.x509_credential = [
-				this._credential.cache.cert + this._credential.cache.ca,
-			];
-		}
-
-		if (this._voltConfig.challenge_code) {
-			bindRequest.challenge = signBase64(
-				keyPair.privateKey,
-				this._voltConfig.challenge_code,
-			);
-		} else {
-			log$1(
-				"****no Volt challenge code available**** => not sending challenge signature",
-			);
-		}
-
-		// For remote connections, add our cloud-issued certificate as an additional credential.
-		if (this._config?.relay?.ca_pem && this._credential.cache.cloud_cert) {
-			bindRequest.x509_credential = bindRequest.x509_credential.concat(
-				this._credential.cache.cloud_cert + this._config.relay.ca_pem,
-			);
-		}
-
-		log$1("sending %d x509 credentials", bindRequest.x509_credential.length);
-		log$1("bind TTL is ", this._config.bindRequestTTL);
-
-		// This will block while the request is pending.
-		const pollInterval = 10000;
-		let decision = "";
-		do {
-			if (decision) {
-				// Wait a while before retrying.
-				// eslint-disable-next-line no-await-in-loop
-				await new Promise((resolve) => setTimeout(resolve, pollInterval));
-			}
-			// eslint-disable-next-line no-await-in-loop
-			decision = await issueBind.call(
-				this,
-				bindRequest,
-				this._voltConfig.bindRequestTTL,
-			);
-			log$1("binding decision: %s", decision);
-		} while (
-			decision === "POLICY_DECISION_PROMPT" ||
-			decision === "POLICY_DECISION_PENDING"
-		);
-
-		return decision === "POLICY_DECISION_PERMIT";
-	} catch (err) {
-		log$1("failure binding to Volt [%s]", err.message);
-		throw err;
-	}
+  try {
+    // Check if we need to resolve a Relay volt.
+    if (
+      typeof this._voltConfig?.relay === "string" ||
+      this._voltConfig?.relay?.http_address
+    ) {
+      const relayURL =
+        this._voltConfig.relay?.http_address || this._voltConfig.relay;
+      log$1("attempting to retrieve Relay information from %s", relayURL);
+      this._voltConfig.relay = await fetchVoltConfig.call(
+        this,
+        `${relayURL}/discovery`,
+      );
+      if (this._voltConfig.relay.ca_pem) {
+        log$1(
+          "Auto-fetched Relay CA %s, remote address %s",
+          this._voltConfig.relay.ca_pem,
+          this._voltConfig.relay.address,
+        );
+      } else {
+        throw new Error("Unable to fetch Relay CA - cannot securely connect.");
+      }
+    }
+
+    if (!this._credential.cache.ca) {
+      this._credential.cache.ca = this._voltConfig.ca_pem;
+    }
+
+    if (!this._credential.cache.ca) {
+      throw new Error(
+        "No certificate authority found in configuration for target Volt - check configuration",
+      );
+    }
+
+    const keyPair = this._credential.getKey();
+    const publicKeyPem = pki.publicKeyToPem(keyPair.publicKey);
+
+    if (!this._credential.cache.bindIp) {
+      // Default the IP address if none is specified. This is used to set the SAN in the
+      // certificate issued by the Volt.
+      this._credential.cache.bindIp = ip__default["default"].address();
+    }
+
+    this._credential.saveCache();
+
+    // Form the request message.
+    const bindRequest = {
+      binding_name: this._config.client_name,
+      public_key: publicKeyPem,
+      host: this._credential.cache.bindIp,
+      x509_credential: [],
+    };
+
+    if (this._credential.cache.cert) {
+      bindRequest.x509_credential = [
+        this._credential.cache.cert + this._credential.cache.ca,
+      ];
+    }
+
+    if (this._voltConfig.challenge_code) {
+      bindRequest.challenge = signBase64(
+        keyPair.privateKey,
+        this._voltConfig.challenge_code,
+      );
+    } else {
+      log$1(
+        "****no Volt challenge code available**** => not sending challenge signature",
+      );
+    }
+
+    // For remote connections, add our cloud-issued certificate as an additional credential.
+    if (this._config?.relay?.ca_pem && this._credential.cache.cloud_cert) {
+      bindRequest.x509_credential = bindRequest.x509_credential.concat(
+        this._credential.cache.cloud_cert + this._config.relay.ca_pem,
+      );
+    }
+
+    log$1("sending %d x509 credentials", bindRequest.x509_credential.length);
+    log$1("bind TTL is ", this._config.bindRequestTTL);
+
+    // This will block while the request is pending.
+    const pollInterval = 10000;
+    let decision = "";
+    do {
+      if (decision) {
+        // Wait a while before retrying.
+        // eslint-disable-next-line no-await-in-loop
+        await new Promise((resolve) => setTimeout(resolve, pollInterval));
+      }
+      // eslint-disable-next-line no-await-in-loop
+      decision = await issueBind.call(
+        this,
+        bindRequest,
+        this._voltConfig.bindRequestTTL,
+      );
+      log$1("binding decision: %s", decision);
+    } while (
+      decision === "POLICY_DECISION_PROMPT" ||
+      decision === "POLICY_DECISION_PENDING"
+    );
+
+    return decision === "POLICY_DECISION_PERMIT";
+  } catch (err) {
+    log$1("failure binding to Volt [%s]", err.message);
+    throw err;
+  }
 }
 
 function connectInternal() {
-	try {
-		if (this._voltConnection) {
-			log$1("connectInternal - Volt connection already exists");
-			return Promise.resolve();
-		}
-
-		const onDisconnected = () => {
-			this._connected = false;
-			this._session = null;
-
-			if (this._cachedClient) {
-				this._grpc.closeClient(this._cachedClient);
-				this._cachedClient = null;
-			}
-
-			if (this._cachedRemoteClient) {
-				this._grpc.closeClient(this._cachedRemoteClient);
-				this._cachedRemoteClient = null;
-			}
-		};
-
-		this._voltConnection = new VoltConnection(this, this._grpc);
-
-		this._voltConnection.on("connected", (session) => {
-			this._session = session;
-			this._connected = !!session;
-			if (!this._connected) {
-				onDisconnected();
-			}
-			this.emit("connected", !!session);
-		});
-
-		this._voltConnection.on("error", (err) => {
-			// Should auto-reconnect.
-			log$1("Volt connection error [%s]", err.message);
-			if (this._connected) {
-				onDisconnected();
-				this.emit("connected", false);
-			}
-		});
-
-		this._voltConnection.on("evt", (evt) => {
-			this.emit("evt", evt);
-		});
-
-		return this._voltConnection.connect();
-	} catch (err) {
-		log$1("connect - error [%s]", err.message);
-		throw err;
-	}
+  try {
+    if (this._voltConnection) {
+      log$1("connectInternal - Volt connection already exists");
+      return Promise.resolve();
+    }
+
+    const onDisconnected = () => {
+      this._connected = false;
+      this._session = null;
+
+      if (this._cachedClient) {
+        this._grpc.closeClient(this._cachedClient);
+        this._cachedClient = null;
+      }
+
+      if (this._cachedRemoteClient) {
+        this._grpc.closeClient(this._cachedRemoteClient);
+        this._cachedRemoteClient = null;
+      }
+    };
+
+    this._voltConnection = new VoltConnection(this, this._grpc);
+
+    this._voltConnection.on("connected", (session) => {
+      this._session = session;
+      this._connected = !!session;
+      if (!this._connected) {
+        onDisconnected();
+      }
+      this.emit("connected", !!session);
+    });
+
+    this._voltConnection.on("error", (err) => {
+      // Should auto-reconnect.
+      log$1("Volt connection error [%s]", err.message);
+      if (this._connected) {
+        onDisconnected();
+        this.emit("connected", false);
+      }
+    });
+
+    this._voltConnection.on("evt", (evt) => {
+      this.emit("evt", evt);
+    });
+
+    return this._voltConnection.connect();
+  } catch (err) {
+    log$1("connect - error [%s]", err.message);
+    throw err;
+  }
 }
 
 function getVoltAPIClientInternal() {
-	if (!this._cachedClient) {
-		const serviceAddress = this.isRemote
-			? this._config.relay.address
-			: this._voltConfig.address;
-		log$1("creating cached VoltAPI service client on %s", serviceAddress);
-		let serviceDescriptors = {};
-		voltServices.forEach((pkg) => {
-			const packageDescriptors = getServiceDescriptors(this._grpc, pkg);
-			serviceDescriptors = { ...serviceDescriptors, ...packageDescriptors };
-		});
-
-		this._cachedClient = createClient(
-			this._grpc,
-			serviceDescriptors,
-			serviceAddress,
-			this._credential,
-			this.isRemote && !this.isVoltRelay,
-			this._config?.relay?.cloud ? this._voltConfig.id : "",
-			this._config?.relay?.cloud ? this._voltConfig.id : "",
-		);
-	}
-
-	return this._cachedClient;
+  if (!this._cachedClient) {
+    const serviceAddress = this.isRemote
+      ? this._config.relay.address
+      : this._voltConfig.address;
+    log$1("creating cached VoltAPI service client on %s", serviceAddress);
+    let serviceDescriptors = {};
+    voltServices.forEach((pkg) => {
+      const packageDescriptors = getServiceDescriptors(this._grpc, pkg);
+      serviceDescriptors = { ...serviceDescriptors, ...packageDescriptors };
+    });
+
+    this._cachedClient = createClient(
+      this._grpc,
+      serviceDescriptors,
+      serviceAddress,
+      this._credential,
+      this.isRemote && !this.isVoltRelay,
+      this._config?.relay?.cloud ? this._voltConfig.id : "",
+      this._config?.relay?.cloud ? this._voltConfig.id : "",
+    );
+  }
+
+  return this._cachedClient;
 }
 
 function unaryCall(method, request) {
-	return new Promise((resolve, reject) => {
-		const grpcClient = this.getVoltAPIClient();
+  return new Promise((resolve, reject) => {
+    const grpcClient = this.getVoltAPIClient();
 
-		const call = new GRPCCall(this, method, "METHOD_TYPE_UNARY");
+    const call = new GRPCCall(this, method, "METHOD_TYPE_UNARY");
 
-		let response = null;
+    let response = null;
 
-		call.on("data", (payload) => {
-			// Cache the response and wait for `end`.
-			response = payload;
-		});
+    call.on("data", (payload) => {
+      // Cache the response and wait for `end`.
+      response = payload;
+    });
 
-		call.on("error", reject);
+    call.on("error", reject);
 
-		call.on("end", () => {
-			if (!response) {
-				return reject(new Error("no response received"));
-			}
+    call.on("end", () => {
+      if (!response) {
+        return reject(new Error("no response received"));
+      }
 
-			// Convert non-OK status to a JS error.
-			if (response.status?.message) {
-				reject(new Error(response.status.message));
-			} else {
-				resolve(response);
-			}
-		});
+      // Convert non-OK status to a JS error.
+      if (response.status?.message) {
+        reject(new Error(response.status.message));
+      } else {
+        resolve(response);
+      }
+    });
 
-		call.start(grpcClient, request);
-	});
+    call.start(grpcClient, request);
+  });
 }
 
 async function fetchVoltConfig(discovery_url) {
-	try {
-		const getJSON = bent__default["default"]("json");
-		const fullVoltConfig = await getJSON(discovery_url);
-
-		if (!fullVoltConfig || typeof fullVoltConfig !== "object") {
-			throw new Error(`invalid config resolved from: ${discovery_url}`);
-		}
-
-		const voltConfig = pick(
-			fullVoltConfig,
-			"id",
-			"display_name",
-			"public_key",
-			"fingerprint",
-			"address",
-			"ca_pem",
-			"challenge_code",
-			"cloud",
-			"relay",
-		);
-
-		return voltConfig;
-	} catch (err) {
-		throw new Error(
-			`Failure loading config from ${discovery_url}: ${err.message}`,
-		);
-	}
+  try {
+    const getJSON = bent__default["default"]("json");
+    const fullVoltConfig = await getJSON(discovery_url);
+
+    if (!fullVoltConfig || typeof fullVoltConfig !== "object") {
+      throw new Error(`invalid config resolved from: ${discovery_url}`);
+    }
+
+    const voltConfig = pick(
+      fullVoltConfig,
+      "id",
+      "display_name",
+      "public_key",
+      "fingerprint",
+      "address",
+      "ca_pem",
+      "challenge_code",
+      "cloud",
+      "relay",
+    );
+
+    return voltConfig;
+  } catch (err) {
+    throw new Error(
+      `Failure loading config from ${discovery_url}: ${err.message}`,
+    );
+  }
 }
 
 async function fetchVoltConfigFromDID(volt_did) {
-	try {
-		const didResolution = getDIDResolutionURL(volt_did);
-		if (!didResolution) {
-			throw new Error(`Invalid Volt DID: ${volt_did}`);
-		}
-
-		const getJSON = bent__default["default"]("json");
-		const didDocument = await getJSON(didResolution);
-		const voltConfigServices = findDIDDocumentService(
-			didDocument,
-			constants.didServiceType.voltConfig,
-		);
-		if (voltConfigServices.length !== 1) {
-			log$1(
-				"Unexpected number of Volt configuration endpoints found in DID document for %s, services found: %d",
-				volt_did,
-				voltConfigServices.length,
-			);
-		}
-
-		const serviceEndpoint = voltConfigServices[0].serviceEndpoint;
-		return await fetchVoltConfig.call(this, serviceEndpoint);
-	} catch (err) {
-		throw new Error(
-			`Failure fetching Volt config from DID document ${volt_did}: ${err.message}`,
-		);
-	}
+  try {
+    const didResolution = getDIDResolutionURL(volt_did);
+    if (!didResolution) {
+      throw new Error(`Invalid Volt DID: ${volt_did}`);
+    }
+
+    const getJSON = bent__default["default"]("json");
+    const didDocument = await getJSON(didResolution);
+    const voltConfigServices = findDIDDocumentService(
+      didDocument,
+      constants.didServiceType.voltConfig,
+    );
+    if (voltConfigServices.length !== 1) {
+      log$1(
+        "Unexpected number of Volt configuration endpoints found in DID document for %s, services found: %d",
+        volt_did,
+        voltConfigServices.length,
+      );
+    }
+
+    const serviceEndpoint = voltConfigServices[0].serviceEndpoint;
+    return await fetchVoltConfig.call(this, serviceEndpoint);
+  } catch (err) {
+    throw new Error(
+      `Failure fetching Volt config from DID document ${volt_did}: ${err.message}`,
+    );
+  }
 }
 
 const { readFile } = fs__default["default"].promises;
 const log = debug__default["default"]("volt-client-grpc:volt-client");
 
 class VoltClient extends EventEmitter__default["default"] {
-	/**
-	 * @param {object} grpc - an instance of the grpc module (see https://www.npmjs.com/package/grpc)
-	 */
-	constructor(grpc) {
-		super();
-
-		if (!grpc) {
-			throw new Error("invalid arguments, grpc is required");
-		}
-		this._grpc = grpc;
-		this._cachedClient = null;
-		this._cachedRemoteClient = null;
-		this._session = null;
-		this._config = null;
-		this._voltConfig = null;
-		this._voltConnection = null;
-	}
-
-	get config() {
-		return this._config;
-	}
-
-	get credential() {
-		return this._credential;
-	}
-
-	get grpc() {
-		return this._grpc;
-	}
-
-	get voltConfig() {
-		return this._voltConfig;
-	}
-
-	/**
-	 * Initialises a binding and connection to the volt.
-	 * @param {string} [config] - the location of the Volt configuration file, or a configuration object
-	 */
-	async initialise(config, extras = {}) {
-		try {
-			if (!config) {
-				throw new Error(
-					"configPath argument is required to be a non-empty string",
-				);
-			}
-
-			let configPath;
-			let configJSON;
-			if (typeof config === "string") {
-				configPath = path__default["default"].resolve(config);
-				log("Attempt to load config from file %s", configPath);
-				try {
-					const configContents = await readFile(
-						new URL(configPath, (typeof document === 'undefined' ? new (require('u' + 'rl').URL)('file:' + __filename).href : (document.currentScript && document.currentScript.src || new URL('index.cjs', document.baseURI).href))),
-					);
-					configJSON = JSON.parse(configContents);
-				} catch (err) {
-					log("failure loading config file %s [%s]", configPath, err.message);
-					throw new Error(
-						`failed to load configuration - check JSON format in ${configPath}`,
-					);
-				}
-			} else if (typeof config === "object") {
-				configJSON = config;
-			} else {
-				throw new Error("config must be either a file path or a config object");
-			}
-
-			if (!configJSON || typeof configJSON !== "object") {
-				throw new Error("config argument is required to be an object");
-			}
-
-			if (
-				!configJSON.client_name ||
-				typeof configJSON.client_name !== "string"
-			) {
-				throw new Error("client_name property required in config");
-			}
-
-			this._config = { ...configJSON, ...extras };
-
-			let voltDID = "";
-			let voltHttpAddress = "";
-			if (typeof this._config.volt === "string") {
-				if (this._config.volt.indexOf("did:") === 0) {
-					voltDID = this._config.volt;
-				} else {
-					voltHttpAddress = this._config.volt;
-				}
-			} else if (typeof this._config.volt !== "object") {
-				throw new Error("configuration is missing the 'volt' object");
-			} else {
-				voltDID = this._config.volt.did;
-				voltHttpAddress = this._config.volt.http_address;
-			}
-
-			if (voltDID) {
-				const didConfig = await fetchVoltConfigFromDID.call(this, voltDID);
-				this._config = { ...this._config, volt: didConfig };
-				log("resolved config from DID: %s", JSON.stringify(didConfig, null, 2));
-			} else if (voltHttpAddress) {
-				const discoConfig = await fetchVoltConfig.call(
-					this,
-					`${voltHttpAddress}/discovery`,
-				);
-				this._config = {
-					...this._config,
-					volt: { ...this._config.volt, ...discoConfig },
-				};
-			}
-
-			this._voltConfig = this._config.volt;
-			this._voltConfig.did = voltDID;
-			this._voltConfig.http_address = voltHttpAddress;
-
-			if (!this._voltConfig.id || typeof this._voltConfig.id !== "string") {
-				throw new Error("'id' property is missing in Volt configuration");
-			}
-
-			this._credential = new VoltCredential(this._config, configPath);
-
-			await this._credential.initialise();
-
-			if (!this.isRemote) {
-				// If we're not connecting via a Relay, we must have the address and CA.
-				if (
-					!this._voltConfig.address ||
-					typeof this._voltConfig.address !== "string"
-				) {
-					throw new Error("'address' property missing in Volt configuration");
-				}
-
-				if (
-					!this._voltConfig.ca_pem ||
-					typeof this._voltConfig.ca_pem !== "string"
-				) {
-					throw new Error("'ca_pPem' property missing in Volt configuration");
-				}
-			}
-
-			let isBound;
-			if (this._credential._cryptoCache.cert) {
-				isBound = true;
-			} else {
-				// No certificate present in the cache yet => we need to bind.
-				try {
-					isBound = await bindInternal.call(this);
-				} catch (bindErr) {
-					if (bindErr.message === "invalid arguments") {
-						// This is usually the result of a missing challenge signature or credential.
-						log(
-							"failure binding to Volt - did you supply a challenge code or verified credential?",
-						);
-						throw bindErr;
-					}
-				}
-			}
-
-			if (!isBound) {
-				// This is usually because of request being denied.
-				throw new Error("Volt binding failed");
-			}
-
-			return Promise.resolve();
-		} catch (err) {
-			log("Failure starting Volt client [%s]", err.message);
-			throw err;
-		}
-	}
-
-	initialiseAndConnect(configPath, extras = {}) {
-		return this.initialise(configPath, extras)
-			.then(() => {
-				return connectInternal.call(this);
-			})
-			.catch((err) => {
-				log("initialiseAndConnect failure: %s", err.message);
-				return Promise.reject(err);
-			});
-	}
-
-	/**
-	 * Creates a GRPC client for the given Volt service description.
-	 *
-	 * Automatically handles remote connections.
-	 *
-	 * n.b. for this javascript client Protobuf definitions should conform to the recommended
-	 * structure, which is that a package proto file resides in a folder path that matches the
-	 * package name, and services contained in the package are named in in Pascal Case and using
-	 * the suffix 'API'. For example the WebcamControlAPI in package tdx.volt_api.webcam.v1 should reside
-	 * in a protobuf file at tdx/api/webcam/v1/webcam_control_api.proto
-	 *
-	 * @param {object} service a service description.
-	 * @param {object} descriptors the service descriptors, must be specified unless the service
-	 * packages are well-known Volt APIs.
-	 */
-	createServiceClient(service, descriptors) {
-		const pkg = service.service_description.service_api;
-
-		let serviceDescriptors;
-		if (descriptors) {
-			serviceDescriptors = descriptors;
-		} else {
-			serviceDescriptors = {};
-			pkg.forEach((svc) => {
-				log("adding service %s to service client", svc);
-				const packageDescriptors = getServiceDescriptors(this._grpc, svc);
-				serviceDescriptors = { ...serviceDescriptors, ...packageDescriptors };
-			});
-		}
-
-		if (this.isRemote) {
-			if (!this._config?.relay?.address) {
-				throw new Error(
-					"Remote connection enabled but no Relay address - have you called start()?",
-				);
-			}
-
-			// In remote mode => create a client using the discovered Relay address **and** passing the service reourceId
-			return createClient(
-				this._grpc,
-				serviceDescriptors,
-				this._config.relay.address,
-				this._credential,
-				false,
-				service.volt_id,
-				service.id,
-			);
-		} else {
-			return createClient(
-				this._grpc,
-				serviceDescriptors,
-				service.service_description.address,
-				this._credential,
-			);
-		}
-	}
-
-	get isRemote() {
-		return !!(this._config?.relay && this._voltConfig.id);
-	}
-
-	get isVoltRelay() {
-		return this.isRemote && !this._config?.relay.cloud;
-	}
-
-	connect() {
-		return connectInternal.call(this);
-	}
-
-	disconnect() {
-		if (this._voltConnection) {
-			this._voltConnection.disconnect();
-			this._voltConnection = null;
-		}
-	}
-
-	getVoltAPIClient() {
-		return getVoltAPIClientInternal.call(this);
-	}
-
-	/**
-	 * Request resource access.
-	 * @param {*} targetResourceId
-	 * @param {*} accessType - see volt.proto for values.
-	 */
-	async RequestAccessBlocking(
-		targetResourceId,
-		accessType = "VOLT_ACCESS_READ",
-	) {
-		try {
-			const accessRequest = {
-				access: accessType,
-				resource_id: targetResourceId,
-			};
-
-			// This will block while the request is pending.
-			// TODO - implement streamed rpc on volt? Not sure there is a need really...
-			const pollInterval = 10000;
-			let decision = "";
-			do {
-				if (decision) {
-					await new Promise((resolve) => setTimeout(resolve, pollInterval));
-				}
-				const accessResponse = await this.RequestAccess(accessRequest);
-				decision = accessResponse.decision;
-				log("access decision: %s", decision);
-			} while (
-				decision === "POLICY_DECISION_PROMPT" ||
-				decision === "POLICY_DECISION_PENDING"
-			);
-
-			log("requestResourceAccess result is %j", decision);
-			return decision === "POLICY_DECISION_PERMIT";
-		} catch (err) {
-			log("failure requesting resource access [%s]", err.message);
-			return Promise.reject(err);
-		}
-	}
-
-	/**
-	 * VoltAPI - resource management
-	 */
-
-	CanAccessResource(request) {
-		return unaryCall.call(this, "CanAccessResource", request);
-	}
-
-	DeleteResource(request) {
-		return unaryCall.call(this, "DeleteResource", request);
-	}
-
-	DiscoverServices(request) {
-		return unaryCall.call(this, "DiscoverServices", request);
-	}
-
-	GetResource(request) {
-		return unaryCall.call(this, "GetResource", request);
-	}
-
-	GetResources(request) {
-		return unaryCall.call(this, "GetResources", request);
-	}
-
-	GetResourceAncestors(request) {
-		return unaryCall.call(this, "GetResourceAncestors", request);
-	}
-
-	GetResourceDescendants(request) {
-		return unaryCall.call(this, "GetResourceDescendants", request);
-	}
-
-	RequestAccess(request) {
-		return unaryCall.call(this, "RequestAccess", request);
-	}
-
-	SaveResource(request) {
-		return unaryCall.call(this, "SaveResource", request);
-	}
-
-	SaveResourceAttribute(request) {
-		return unaryCall.call(this, "SaveResourceAttribute", request);
-	}
-
-	SetServiceStatus(request) {
-		return unaryCall.call(this, "SetServiceStatus", request);
-	}
-
-	/**
-	 * VoltAPI - volt management
-	 */
-
-	Bind(request) {
-		return unaryCall.call(this, "Bind", request);
-	}
-
-	DeleteAccess(request) {
-		return unaryCall.call(this, "DeleteAccess", request);
-	}
-
-	DeleteVolt(request) {
-		return unaryCall.call(this, "DeleteVolt", request);
-	}
-
-	GetAccess(request) {
-		return unaryCall.call(this, "GetAccess", request);
-	}
-
-	GetBindings(request) {
-		return unaryCall.call(this, "GetBindings", request);
-	}
-
-	GetIdentities(request) {
-		return unaryCall.call(this, "GetIdentities", request);
-	}
-
-	GetIdentity(request) {
-		return unaryCall.call(this, "GetIdentity", request);
-	}
-
-	GetIdentityToken(request) {
-		return unaryCall.call(this, "GetIdentityToken", request);
-	}
-
-	GetPolicy(request) {
-		return unaryCall.call(this, "GetPolicy", request);
-	}
-
-	GetSettings(request) {
-		return unaryCall.call(this, "GetSettings", request);
-	}
-
-	SaveAccess(request) {
-		return unaryCall.call(this, "SaveAccess", request);
-	}
-
-	SaveCloudConnection(request) {
-		return unaryCall.call(this, "SaveCloudConnection", request);
-	}
-
-	SaveIdentity(request) {
-		return unaryCall.call(this, "SaveIdentity", request);
-	}
-
-	SaveSettings(request) {
-		return unaryCall.call(this, "SaveSettings", request);
-	}
-
-	SetAccessRequestDecision(request) {
-		return unaryCall.call(this, "SetAccessRequestDecision", request);
-	}
-
-	SetBindingDecision(request) {
-		return unaryCall.call(this, "SetBindingDecision", request);
-	}
-
-	Shutdown(request) {
-		return unaryCall.call(this, "Shutdown", request);
-	}
-
-	SignVerify(request) {
-		return unaryCall.call(this, "SignVerify", request);
-	}
-
-	/**
-	 * FileAPI
-	 */
-	GetFileDescendants(request) {
-		return unaryCall.call(this, "GetFileDescendants", request);
-	}
-
-	/**
-	 * Asynchronous file download
-	 * @param {*} request
-	 * @returns stream
-	 */
-	DownloadFile(request) {
-		const grpcClient = this.getVoltAPIClient();
-
-		const downloadCall = new GRPCCall(
-			this,
-			"DownloadFile",
-			"METHOD_TYPE_SERVER_STREAM",
-		);
-		return downloadCall.start(grpcClient, request);
-	}
-
-	UploadFile(request) {
-		const grpcClient = this.getVoltAPIClient();
-
-		const uploadCall = new GRPCCall(this, "UploadFile", "METHOD_TYPE_BIDI");
-		return uploadCall.start(grpcClient, request);
-	}
-
-	/**
-	 * Synchronous file download
-	 * @param {*} request
-	 * @returns file buffer, base64 encoded
-	 */
-	DownloadFileSync(request) {
-		return new Promise((resolve, reject) => {
-			const grpcClient = this.getVoltAPIClient();
-
-			const blocks = [];
-
-			const call = new GRPCCall(
-				this,
-				"DownloadFile",
-				"METHOD_TYPE_SERVER_STREAM",
-			);
-
-			call.on("data", (response) => {
-				switch (response.payload) {
-					case "block": {
-						blocks.push(response.block);
-						break;
-					}
-					case "status": {
-						if (response.status.message) {
-							return call.reject(new Error(response.status.message));
-						}
-						break;
-					}
-					default:
-						log("unrecognised response payload %s", response.payload);
-						break;
-				}
-			});
-
-			call.on("error", (err) => {
-				log("error during DownloadFile [%s]", err.message);
-				reject(err);
-			});
-
-			call.on("end", () => {
-				log("Download finished");
-				resolve({ buffer: Buffer.concat(blocks).toString("base64") });
-			});
-
-			call.start(grpcClient, request);
-		});
-	}
-
-	/**
-	 * SqliteDatabaseAPI
-	 */
-	SqlExecute(request) {
-		const grpcClient = this.getVoltAPIClient();
-
-		const subscribeCall = new GRPCCall(this, "Execute", "METHOD_TYPE_BIDI");
-		return subscribeCall.start(grpcClient, request);
-	}
-
-	/**
-	 * WireAPI
-	 */
-	PublishWire(request) {
-		const grpcClient = this.getVoltAPIClient();
-
-		const publishCall = new GRPCCall(this, "PublishWire", "METHOD_TYPE_BIDI");
-		return publishCall.start(grpcClient, request);
-	}
-
-	SubscribeWire(request) {
-		const grpcClient = this.getVoltAPIClient();
-
-		const subscribeCall = new GRPCCall(
-			this,
-			"SubscribeWire",
-			"METHOD_TYPE_BIDI",
-		);
-		return subscribeCall.start(grpcClient, request);
-	}
+  /**
+   * @param {object} grpc - an instance of the grpc module (see https://www.npmjs.com/package/grpc)
+   */
+  constructor(grpc) {
+    super();
+
+    if (!grpc) {
+      throw new Error("invalid arguments, grpc is required");
+    }
+    this._grpc = grpc;
+    this._cachedClient = null;
+    this._cachedRemoteClient = null;
+    this._session = null;
+    this._config = null;
+    this._voltConfig = null;
+    this._voltConnection = null;
+  }
+
+  get config() {
+    return this._config;
+  }
+
+  get credential() {
+    return this._credential;
+  }
+
+  get grpc() {
+    return this._grpc;
+  }
+
+  get voltConfig() {
+    return this._voltConfig;
+  }
+
+  /**
+   * Initialises a binding and connection to the volt.
+   * @param {string} [config] - the location of the Volt configuration file, or a configuration object
+   */
+  async initialise(config, extras = {}) {
+    try {
+      if (!config) {
+        throw new Error(
+          "configPath argument is required to be a non-empty string",
+        );
+      }
+
+      let configPath;
+      let configJSON;
+      if (typeof config === "string") {
+        configPath = path__default["default"].resolve(config);
+        log("Attempt to load config from file %s", configPath);
+        try {
+          const configContents = await readFile(
+            new URL(configPath, (typeof document === 'undefined' ? new (require('u' + 'rl').URL)('file:' + __filename).href : (document.currentScript && document.currentScript.src || new URL('index.cjs', document.baseURI).href))),
+          );
+          configJSON = JSON.parse(configContents);
+        } catch (err) {
+          log("failure loading config file %s [%s]", configPath, err.message);
+          throw new Error(
+            `failed to load configuration - check JSON format in ${configPath}`,
+          );
+        }
+      } else if (typeof config === "object") {
+        configJSON = config;
+      } else {
+        throw new Error("config must be either a file path or a config object");
+      }
+
+      if (!configJSON || typeof configJSON !== "object") {
+        throw new Error("config argument is required to be an object");
+      }
+
+      if (
+        !configJSON.client_name ||
+        typeof configJSON.client_name !== "string"
+      ) {
+        throw new Error("client_name property required in config");
+      }
+
+      this._config = { ...configJSON, ...extras };
+
+      let voltDID = "";
+      let voltHttpAddress = "";
+      if (typeof this._config.volt === "string") {
+        if (this._config.volt.indexOf("did:") === 0) {
+          voltDID = this._config.volt;
+        } else {
+          voltHttpAddress = this._config.volt;
+        }
+      } else if (typeof this._config.volt !== "object") {
+        throw new Error("configuration is missing the 'volt' object");
+      } else {
+        voltDID = this._config.volt.did;
+        voltHttpAddress = this._config.volt.http_address;
+      }
+
+      if (voltDID) {
+        const didConfig = await fetchVoltConfigFromDID.call(this, voltDID);
+        this._config = { ...this._config, volt: didConfig };
+        log("resolved config from DID: %s", JSON.stringify(didConfig, null, 2));
+      } else if (voltHttpAddress) {
+        const discoConfig = await fetchVoltConfig.call(
+          this,
+          `${voltHttpAddress}/discovery`,
+        );
+        this._config = {
+          ...this._config,
+          volt: { ...this._config.volt, ...discoConfig },
+        };
+      }
+
+      this._voltConfig = this._config.volt;
+      this._voltConfig.did = voltDID;
+      this._voltConfig.http_address = voltHttpAddress;
+
+      if (!this._voltConfig.id || typeof this._voltConfig.id !== "string") {
+        throw new Error("'id' property is missing in Volt configuration");
+      }
+
+      this._credential = new VoltCredential(this._config, configPath);
+
+      await this._credential.initialise();
+
+      if (!this.isRemote) {
+        // If we're not connecting via a Relay, we must have the address and CA.
+        if (
+          !this._voltConfig.address ||
+          typeof this._voltConfig.address !== "string"
+        ) {
+          throw new Error("'address' property missing in Volt configuration");
+        }
+
+        if (
+          !this._voltConfig.ca_pem ||
+          typeof this._voltConfig.ca_pem !== "string"
+        ) {
+          throw new Error("'ca_pPem' property missing in Volt configuration");
+        }
+      }
+
+      let isBound;
+      if (this._credential._cryptoCache.cert) {
+        isBound = true;
+      } else {
+        // No certificate present in the cache yet => we need to bind.
+        try {
+          isBound = await bindInternal.call(this);
+        } catch (bindErr) {
+          if (bindErr.message === "invalid arguments") {
+            // This is usually the result of a missing challenge signature or credential.
+            log(
+              "failure binding to Volt - did you supply a challenge code or verified credential?",
+            );
+            throw bindErr;
+          }
+        }
+      }
+
+      if (!isBound) {
+        // This is usually because of request being denied.
+        throw new Error("Volt binding failed");
+      }
+
+      return Promise.resolve();
+    } catch (err) {
+      log("Failure starting Volt client [%s]", err.message);
+      throw err;
+    }
+  }
+
+  initialiseAndConnect(configPath, extras = {}) {
+    return this.initialise(configPath, extras)
+      .then(() => {
+        return connectInternal.call(this);
+      })
+      .catch((err) => {
+        log("initialiseAndConnect failure: %s", err.message);
+        return Promise.reject(err);
+      });
+  }
+
+  /**
+   * Creates a GRPC client for the given Volt service description.
+   *
+   * Automatically handles remote connections.
+   *
+   * n.b. for this javascript client Protobuf definitions should conform to the recommended
+   * structure, which is that a package proto file resides in a folder path that matches the
+   * package name, and services contained in the package are named in in Pascal Case and using
+   * the suffix 'API'. For example the WebcamControlAPI in package tdx.volt_api.webcam.v1 should reside
+   * in a protobuf file at tdx/api/webcam/v1/webcam_control_api.proto
+   *
+   * @param {object} service a service description.
+   * @param {object} descriptors the service descriptors, must be specified unless the service
+   * packages are well-known Volt APIs.
+   */
+  createServiceClient(service, descriptors) {
+    const pkg = service.service_description.service_api;
+
+    let serviceDescriptors;
+    if (descriptors) {
+      serviceDescriptors = descriptors;
+    } else {
+      serviceDescriptors = {};
+      pkg.forEach((svc) => {
+        log("adding service %s to service client", svc);
+        const packageDescriptors = getServiceDescriptors(this._grpc, svc);
+        serviceDescriptors = { ...serviceDescriptors, ...packageDescriptors };
+      });
+    }
+
+    if (this.isRemote) {
+      if (!this._config?.relay?.address) {
+        throw new Error(
+          "Remote connection enabled but no Relay address - have you called start()?",
+        );
+      }
+
+      // In remote mode => create a client using the discovered Relay address **and** passing the service reourceId
+      return createClient(
+        this._grpc,
+        serviceDescriptors,
+        this._config.relay.address,
+        this._credential,
+        false,
+        service.volt_id,
+        service.id,
+      );
+    } else {
+      return createClient(
+        this._grpc,
+        serviceDescriptors,
+        service.service_description.address,
+        this._credential,
+      );
+    }
+  }
+
+  get isRemote() {
+    return !!(this._config?.relay && this._voltConfig.id);
+  }
+
+  get isVoltRelay() {
+    return this.isRemote && !this._config?.relay.cloud;
+  }
+
+  connect() {
+    return connectInternal.call(this);
+  }
+
+  disconnect() {
+    if (this._voltConnection) {
+      this._voltConnection.disconnect();
+      this._voltConnection = null;
+    }
+  }
+
+  getVoltAPIClient() {
+    return getVoltAPIClientInternal.call(this);
+  }
+
+  /**
+   * Request resource access.
+   * @param {*} targetResourceId
+   * @param {*} accessType - see volt.proto for values.
+   */
+  async RequestAccessBlocking(
+    targetResourceId,
+    accessType = "VOLT_ACCESS_READ",
+  ) {
+    try {
+      const accessRequest = {
+        access: accessType,
+        resource_id: targetResourceId,
+      };
+
+      // This will block while the request is pending.
+      // TODO - implement streamed rpc on volt? Not sure there is a need really...
+      const pollInterval = 10000;
+      let decision = "";
+      do {
+        if (decision) {
+          await new Promise((resolve) => setTimeout(resolve, pollInterval));
+        }
+        const accessResponse = await this.RequestAccess(accessRequest);
+        decision = accessResponse.decision;
+        log("access decision: %s", decision);
+      } while (
+        decision === "POLICY_DECISION_PROMPT" ||
+        decision === "POLICY_DECISION_PENDING"
+      );
+
+      log("requestResourceAccess result is %j", decision);
+      return decision === "POLICY_DECISION_PERMIT";
+    } catch (err) {
+      log("failure requesting resource access [%s]", err.message);
+      return Promise.reject(err);
+    }
+  }
+
+  /**
+   * VoltAPI - resource management
+   */
+
+  CanAccessResource(request) {
+    return unaryCall.call(this, "CanAccessResource", request);
+  }
+
+  DeleteResource(request) {
+    return unaryCall.call(this, "DeleteResource", request);
+  }
+
+  DiscoverServices(request) {
+    return unaryCall.call(this, "DiscoverServices", request);
+  }
+
+  GetResource(request) {
+    return unaryCall.call(this, "GetResource", request);
+  }
+
+  GetResources(request) {
+    return unaryCall.call(this, "GetResources", request);
+  }
+
+  GetResourceAncestors(request) {
+    return unaryCall.call(this, "GetResourceAncestors", request);
+  }
+
+  GetResourceDescendants(request) {
+    return unaryCall.call(this, "GetResourceDescendants", request);
+  }
+
+  RequestAccess(request) {
+    return unaryCall.call(this, "RequestAccess", request);
+  }
+
+  SaveResource(request) {
+    return unaryCall.call(this, "SaveResource", request);
+  }
+
+  SaveResourceAttribute(request) {
+    return unaryCall.call(this, "SaveResourceAttribute", request);
+  }
+
+  SetServiceStatus(request) {
+    return unaryCall.call(this, "SetServiceStatus", request);
+  }
+
+  /**
+   * VoltAPI - volt management
+   */
+
+  Bind(request) {
+    return unaryCall.call(this, "Bind", request);
+  }
+
+  DeleteAccess(request) {
+    return unaryCall.call(this, "DeleteAccess", request);
+  }
+
+  DeleteVolt(request) {
+    return unaryCall.call(this, "DeleteVolt", request);
+  }
+
+  GetAccess(request) {
+    return unaryCall.call(this, "GetAccess", request);
+  }
+
+  GetBindings(request) {
+    return unaryCall.call(this, "GetBindings", request);
+  }
+
+  GetIdentities(request) {
+    return unaryCall.call(this, "GetIdentities", request);
+  }
+
+  GetIdentity(request) {
+    return unaryCall.call(this, "GetIdentity", request);
+  }
+
+  GetIdentityToken(request) {
+    return unaryCall.call(this, "GetIdentityToken", request);
+  }
+
+  GetPolicy(request) {
+    return unaryCall.call(this, "GetPolicy", request);
+  }
+
+  GetSettings(request) {
+    return unaryCall.call(this, "GetSettings", request);
+  }
+
+  SaveAccess(request) {
+    return unaryCall.call(this, "SaveAccess", request);
+  }
+
+  SaveCloudConnection(request) {
+    return unaryCall.call(this, "SaveCloudConnection", request);
+  }
+
+  SaveIdentity(request) {
+    return unaryCall.call(this, "SaveIdentity", request);
+  }
+
+  SaveSettings(request) {
+    return unaryCall.call(this, "SaveSettings", request);
+  }
+
+  SetAccessRequestDecision(request) {
+    return unaryCall.call(this, "SetAccessRequestDecision", request);
+  }
+
+  SetBindingDecision(request) {
+    return unaryCall.call(this, "SetBindingDecision", request);
+  }
+
+  Shutdown(request) {
+    return unaryCall.call(this, "Shutdown", request);
+  }
+
+  SignVerify(request) {
+    return unaryCall.call(this, "SignVerify", request);
+  }
+
+  /**
+   * FileAPI
+   */
+  GetFileDescendants(request) {
+    return unaryCall.call(this, "GetFileDescendants", request);
+  }
+
+  /**
+   * Asynchronous file download
+   * @param {*} request
+   * @returns stream
+   */
+  DownloadFile(request) {
+    const grpcClient = this.getVoltAPIClient();
+
+    const downloadCall = new GRPCCall(
+      this,
+      "DownloadFile",
+      "METHOD_TYPE_SERVER_STREAM",
+    );
+    return downloadCall.start(grpcClient, request);
+  }
+
+  UploadFile(request) {
+    const grpcClient = this.getVoltAPIClient();
+
+    const uploadCall = new GRPCCall(this, "UploadFile", "METHOD_TYPE_BIDI");
+    return uploadCall.start(grpcClient, request);
+  }
+
+  /**
+   * Synchronous file download
+   * @param {*} request
+   * @returns file buffer, base64 encoded
+   */
+  DownloadFileSync(request) {
+    return new Promise((resolve, reject) => {
+      const grpcClient = this.getVoltAPIClient();
+
+      const blocks = [];
+
+      const call = new GRPCCall(
+        this,
+        "DownloadFile",
+        "METHOD_TYPE_SERVER_STREAM",
+      );
+
+      call.on("data", (response) => {
+        switch (response.payload) {
+          case "block": {
+            blocks.push(response.block);
+            break;
+          }
+          case "status": {
+            if (response.status.message) {
+              return call.reject(new Error(response.status.message));
+            }
+            break;
+          }
+          default:
+            log("unrecognised response payload %s", response.payload);
+            break;
+        }
+      });
+
+      call.on("error", (err) => {
+        log("error during DownloadFile [%s]", err.message);
+        reject(err);
+      });
+
+      call.on("end", () => {
+        log("Download finished");
+        resolve({ buffer: Buffer.concat(blocks).toString("base64") });
+      });
+
+      call.start(grpcClient, request);
+    });
+  }
+
+  /**
+   * SqliteDatabaseAPI
+   */
+  SqlExecute(request) {
+    const grpcClient = this.getVoltAPIClient();
+
+    const subscribeCall = new GRPCCall(this, "Execute", "METHOD_TYPE_BIDI");
+    return subscribeCall.start(grpcClient, request);
+  }
+
+  /**
+   * WireAPI
+   */
+  PublishWire(request) {
+    const grpcClient = this.getVoltAPIClient();
+
+    const publishCall = new GRPCCall(this, "PublishWire", "METHOD_TYPE_BIDI");
+    return publishCall.start(grpcClient, request);
+  }
+
+  SubscribeWire(request) {
+    const grpcClient = this.getVoltAPIClient();
+
+    const subscribeCall = new GRPCCall(
+      this,
+      "SubscribeWire",
+      "METHOD_TYPE_BIDI",
+    );
+    return subscribeCall.start(grpcClient, request);
+  }
 }
 
 Object.defineProperty(exports, 'generateId', {
-	enumerable: true,
-	get: function () { return uuid.v4; }
+  enumerable: true,
+  get: function () { return uuid.v4; }
 });
 exports.VoltClient = VoltClient;
 exports.VoltCredential = VoltCredential;