midline-agent 0.4.0 → 0.4.1

package/README.md

@@ -1,6 +1,6 @@
 # midline-agent
 
-**The Node.js SDK for Midline** — request and error monitoring with security and threat detection.
+**SDK for Midline** — request and error monitoring with security and threat detection.
 It also ships **`midline-agent/browser`** for web apps: see [Browser apps](#browser-apps).
 
 Midline itself is not tied to Node. Every event lands on the same stream through a plain JSON

package/dist/agent.d.ts

@@ -80,7 +80,15 @@ export declare class MidlineAgent {
     recordHttp(exchange: HttpExchange): void;
     private recordConsole;
     private takeConsoleToken;
-    /** Sends whatever is buffered now, ignoring backoff, and keeps the process alive until done. */
+    /**
+     * Sends whatever is buffered now, ignoring backoff.
+     *
+     * The transport's connection is always unref'd (telemetry alone must never
+     * keep an otherwise-idle process alive), so this relies on something else in
+     * the process keeping the event loop open until the await resolves — true for
+     * the overwhelmingly common case (a running server), not guaranteed for a
+     * bare script whose last statement is `await agent.flush()`.
+     */
     flush(): Promise<void>;
     /** Flushes with a deadline, then closes. For graceful shutdown. */
     shutdown(timeoutMs?: number): Promise<void>;

package/dist/agent.js

@@ -4,7 +4,7 @@ exports.MidlineAgent = exports.SDK_VERSION = void 0;
 const config_1 = require("./config");
 const console_1 = require("./console");
 const redact_1 = require("./redact");
-const transport_1 = require("./transport");
+const socket_transport_1 = require("./socket-transport");
 exports.SDK_VERSION = (() => {
     try {
         return require("../package.json").version;
@@ -104,15 +104,19 @@ class MidlineAgent {
             return;
         }
         this.config = resolved;
-        this.transport = new transport_1.Transport(resolved.ingestUrl, {
+        this.transport = new socket_transport_1.SocketTransport(resolved.socketOrigin, {
+            apiKey: resolved.apiKey,
             ca: resolved.ca,
             connectTimeoutMs: resolved.connectTimeoutMs,
             timeoutMs: resolved.timeoutMs,
+            reconnectionDelayMs: resolved.flushIntervalMs,
+            reconnectionDelayMaxMs: resolved.maxRetryDelayMs,
+            idleDisconnectMs: Math.max(5 * resolved.flushIntervalMs, 30000),
             userAgent: `midline-agent/${exports.SDK_VERSION} node/${process.version}`,
         });
         this.timer = setInterval(() => {
             this.consoleCapture?.flushPending();
-            void this.drain(false);
+            void this.drain();
         }, resolved.flushIntervalMs);
         // Telemetry must never be the reason a process refuses to exit.
         this.timer.unref?.();
@@ -212,7 +216,15 @@ class MidlineAgent {
         this.consoleTokens -= 1;
         return true;
     }
-    /** Sends whatever is buffered now, ignoring backoff, and keeps the process alive until done. */
+    /**
+     * Sends whatever is buffered now, ignoring backoff.
+     *
+     * The transport's connection is always unref'd (telemetry alone must never
+     * keep an otherwise-idle process alive), so this relies on something else in
+     * the process keeping the event loop open until the await resolves — true for
+     * the overwhelmingly common case (a running server), not guaranteed for a
+     * bare script whose last statement is `await agent.flush()`.
+     */
     async flush() {
         if (!this.active)
             return;
@@ -221,7 +233,7 @@ class MidlineAgent {
         if (this.drainPromise) {
             await this.drainPromise;
         }
-        await this.drain(true);
+        await this.drain();
     }
     /** Flushes with a deadline, then closes. For graceful shutdown. */
     async shutdown(timeoutMs = 5000) {
@@ -417,23 +429,23 @@ class MidlineAgent {
         }
         return batch;
     }
-    drain(keepProcessAlive) {
+    drain() {
         if (this.drainPromise)
             return this.drainPromise;
         if (!this.active || !this.queue.length || Date.now() < this.retryAfter) {
             return Promise.resolve();
         }
-        this.drainPromise = this.runDrain(keepProcessAlive).finally(() => {
+        this.drainPromise = this.runDrain().finally(() => {
             this.drainPromise = null;
         });
         return this.drainPromise;
     }
-    async runDrain(keepProcessAlive) {
+    async runDrain() {
         while (this.queue.length && this.active) {
             // Taken off the queue while in flight, so overflow trimming can't remove
             // events that are mid-send and then be confused about what was accepted.
             const batch = this.takeBatch();
-            const outcome = await this.send(batch, keepProcessAlive);
+            const outcome = await this.send(batch);
             if (outcome.kind === "ok") {
                 this.onSuccess();
                 continue;
@@ -454,7 +466,7 @@ class MidlineAgent {
                 }
                 else {
                     this.dropped += 1;
-                    this.report("http-413", "midline: the Midline server rejected an event as too large (HTTP 413); dropped it.");
+                    this.report("too-large", "midline: the Midline server rejected an event as too large; dropped it.");
                 }
                 continue;
             }
@@ -468,7 +480,7 @@ class MidlineAgent {
                 }
                 // One malformed event fails validation for the whole batch. Send them one
                 // at a time so it only costs that event.
-                const isolated = await this.sendIndividually(batch, keepProcessAlive);
+                const isolated = await this.sendIndividually(batch);
                 if (!isolated)
                     return;
                 continue;
@@ -479,16 +491,16 @@ class MidlineAgent {
         }
     }
     /** Returns false if delivery should stop for this drain. */
-    async sendIndividually(batch, keepProcessAlive) {
+    async sendIndividually(batch) {
         for (let index = 0; index < batch.length; index++) {
             if (this.consoleUnsupported && batch[index].wire.eventType === "console")
                 continue;
-            const outcome = await this.send([batch[index]], keepProcessAlive);
+            const outcome = await this.send([batch[index]]);
             if (outcome.kind === "ok") {
                 this.onSuccess();
             }
             else if (outcome.kind === "rejected" || outcome.kind === "tooLarge") {
-                const detail = outcome.kind === "rejected" ? outcome.detail : "HTTP 413";
+                const detail = outcome.kind === "rejected" ? outcome.detail : "too_large";
                 if (outcome.kind === "rejected" && this.refusedConsole(batch[index], detail))
                     continue;
                 this.dropped += 1;
@@ -506,53 +518,40 @@ class MidlineAgent {
         }
         return true;
     }
-    async send(batch, keepProcessAlive) {
-        const config = this.config;
-        const body = JSON.stringify({ events: batch.map((item) => item.wire) });
-        let result;
+    async send(batch) {
+        let ack;
         try {
-            result = await this.transport.post(config.batchUrl, body, { "x-api-key": config.apiKey }, keepProcessAlive);
+            ack = await this.transport.send(batch.map((item) => item.wire));
         }
         catch (err) {
             this.report(`transport:${errorCode(err)}`, this.describe(err, batch.length));
             return { kind: "retry" };
         }
-        const { status } = result;
-        if (status >= 200 && status < 300) {
-            // Servers that predate 401-on-bad-key answer 201 and count the rejects.
-            const summary = parseJson(result.body);
-            const failed = typeof summary?.failed === "number" ? summary.failed : 0;
-            if (failed >= batch.length && batch.length > 0) {
+        if (ack.ok) {
+            // Servers that predate 401-on-bad-key ack ok and count the rejects.
+            if (ack.rejected >= batch.length && batch.length > 0) {
                 this.log("error", "midline: the Midline server did not accept this API key. Monitoring is now off — retrying wouldn't help. Check apiKey / MIDLINE_API_KEY.");
                 return { kind: "stop" };
             }
-            if (failed > 0) {
-                this.dropped += failed;
-                this.report("partial", `midline: the Midline server rejected ${failed} of ${batch.length} events.`);
+            if (ack.rejected > 0) {
+                this.dropped += ack.rejected;
+                this.report("partial", `midline: the Midline server rejected ${ack.rejected} of ${batch.length} events.`);
             }
             return { kind: "ok" };
         }
-        if (status === 401 || status === 403) {
-            this.log("error", `midline: the Midline server rejected the API key (HTTP ${status}). ` +
+        if (ack.code === "unauthorized" || ack.code === "forbidden") {
+            this.log("error", `midline: the Midline server rejected the API key (${ack.code}). ` +
                 "Monitoring is now off — retrying wouldn't help. Check apiKey / MIDLINE_API_KEY.");
             return { kind: "stop" };
         }
-        if (status === 413) {
+        if (ack.code === "too_large") {
             return { kind: "tooLarge" };
         }
-        if (status === 408 || status === 429 || status >= 500) {
-            const retryAfterMs = parseRetryAfter(result.headers["retry-after"]);
-            this.report(`http-${status}`, `midline: the Midline server returned HTTP ${status}; events are buffered and will be retried.`);
-            return { kind: "retry", retryAfterMs };
+        if (ack.code === "rate_limited") {
+            this.report("rate_limited", `midline: the Midline server is rate-limiting this project; events are buffered and will be retried.`);
+            return { kind: "retry", retryAfterMs: ack.retryAfterMs };
         }
-        if (status >= 300 && status < 400) {
-            // Never followed: that would hand the API key to wherever the redirect points.
-            const location = String(result.headers.location ?? "").slice(0, 200);
-            this.report(`http-${status}`, `midline: the Midline endpoint redirected (HTTP ${status}${location ? ` to ${location}` : ""}). ` +
-                "Redirects are not followed; set MIDLINE_ENDPOINT to the final URL.");
-            return { kind: "retry" };
-        }
-        return { kind: "rejected", detail: `HTTP ${status}${serverMessage(result.body)}` };
+        return { kind: "rejected", detail: `${ack.code}: ${ack.message}` };
     }
     /**
      * True when a rejected event is a console line the server has no event type for,
@@ -582,7 +581,7 @@ class MidlineAgent {
     }
     describe(err, inFlight) {
         const config = this.config;
-        const origin = config.ingestUrl.origin;
+        const origin = config.socketOrigin.origin;
         const code = errorCode(err);
         const buffered = ` ${this.queue.length + inFlight} event(s) buffered; your application is unaffected.`;
         if (TLS_ERROR_REASONS[code] || code.startsWith("ERR_SSL") || code === "EPROTO") {
@@ -600,7 +599,7 @@ class MidlineAgent {
             return `midline: could not connect to ${origin} within ${config.connectTimeoutMs}ms; retrying with backoff.${buffered}`;
         }
         if (code === "ENOTFOUND" || code === "EAI_AGAIN") {
-            return `midline: cannot resolve ${config.ingestUrl.hostname} (${code}) — check MIDLINE_ENDPOINT and DNS; retrying with backoff.${buffered}`;
+            return `midline: cannot resolve ${config.socketOrigin.hostname} (${code}) — check MIDLINE_ENDPOINT and DNS; retrying with backoff.${buffered}`;
         }
         if (code === "ECONNREFUSED") {
             return `midline: ${origin} refused the connection; retrying with backoff.${buffered}`;
@@ -745,26 +744,3 @@ function errorCode(err) {
     const e = err;
     return String(e?.code ?? e?.cause?.code ?? e?.errno ?? e?.name ?? "");
 }
-function parseJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}
-function serverMessage(body) {
-    const message = parseJson(body)?.message;
-    const text = Array.isArray(message) ? message.join("; ") : typeof message === "string" ? message : "";
-    return text ? `: ${text.slice(0, 300)}` : "";
-}
-function parseRetryAfter(header) {
-    const value = Array.isArray(header) ? header[0] : header;
-    if (!value)
-        return undefined;
-    const seconds = Number(value);
-    if (Number.isFinite(seconds))
-        return Math.max(0, seconds * 1000);
-    const date = Date.parse(value);
-    return Number.isFinite(date) ? Math.max(0, date - Date.now()) : undefined;
-}

package/dist/config.d.ts

@@ -1,6 +1,5 @@
 import { CaInput, CaptureOptions, MidlineConfig } from "./types";
 export declare const DEFAULT_ENDPOINT = "https://api.usemidline.com";
-export declare const INGEST_PATH = "/api/api-monitor/events";
 /** A setting that cannot work as given. Thrown at construction, never while serving traffic. */
 export declare class ConfigError extends Error {
     constructor(message: string);
@@ -15,8 +14,8 @@ export interface ResolvedCapture {
 export interface ResolvedConfig {
     apiKey: string;
     serviceName?: string;
-    ingestUrl: URL;
-    batchUrl: URL;
+    /** The Midline server's origin; the ingest gateway lives at `${socketOrigin}/ingest`. */
+    socketOrigin: URL;
     /** Full trust store for the Midline endpoint, or undefined for Node's default. */
     ca?: Array<string | Buffer>;
     hasCustomCa: boolean;
@@ -43,12 +42,14 @@ export declare function envFlag(name: string): boolean | undefined;
 export declare function envInt(name: string): number | undefined;
 export declare function isLoopback(hostname: string): boolean;
 /**
- * Turns whatever the user configured into the ingest URL.
- *
+ * Turns whatever the user configured into the Midline server's origin — the
+ * agent connects to `${origin}/ingest` over socket.io, so only the origin
+ * matters now. Tolerates an old-style full ingest URL some existing
+ * `MIDLINE_ENDPOINT` values still carry (from before the socket.io transport):
  * `https://api.usemidline.com`, `https://api.usemidline.com/api/api-monitor/events`
- * and `https://gateway.internal/midline` all work; the last is treated as a prefix.
+ * and `https://gateway.internal/midline` all resolve to the same origin.
  */
-export declare function resolveIngestUrl(endpoint: string): URL;
+export declare function resolveEndpointOrigin(endpoint: string): URL;
 /**
  * Loads extra CAs. Every entry must contain at least one parseable certificate, so a
  * typo in a path fails loudly at startup instead of silently trusting nothing.

package/dist/config.js

@@ -33,12 +33,12 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigError = exports.INGEST_PATH = exports.DEFAULT_ENDPOINT = void 0;
+exports.ConfigError = exports.DEFAULT_ENDPOINT = void 0;
 exports.env = env;
 exports.envFlag = envFlag;
 exports.envInt = envInt;
 exports.isLoopback = isLoopback;
-exports.resolveIngestUrl = resolveIngestUrl;
+exports.resolveEndpointOrigin = resolveEndpointOrigin;
 exports.loadCa = loadCa;
 exports.trustStore = trustStore;
 exports.resolveCapture = resolveCapture;
@@ -47,7 +47,6 @@ const fs_1 = require("fs");
 const crypto_1 = require("crypto");
 const tls = __importStar(require("tls"));
 exports.DEFAULT_ENDPOINT = "https://api.usemidline.com";
-exports.INGEST_PATH = "/api/api-monitor/events";
 /** A setting that cannot work as given. Thrown at construction, never while serving traffic. */
 class ConfigError extends Error {
     constructor(message) {
@@ -88,12 +87,14 @@ function isLoopback(hostname) {
         /^127(\.\d{1,3}){3}$/.test(host));
 }
 /**
- * Turns whatever the user configured into the ingest URL.
- *
+ * Turns whatever the user configured into the Midline server's origin — the
+ * agent connects to `${origin}/ingest` over socket.io, so only the origin
+ * matters now. Tolerates an old-style full ingest URL some existing
+ * `MIDLINE_ENDPOINT` values still carry (from before the socket.io transport):
  * `https://api.usemidline.com`, `https://api.usemidline.com/api/api-monitor/events`
- * and `https://gateway.internal/midline` all work; the last is treated as a prefix.
+ * and `https://gateway.internal/midline` all resolve to the same origin.
  */
-function resolveIngestUrl(endpoint) {
+function resolveEndpointOrigin(endpoint) {
     let url;
     try {
         url = new URL(endpoint);
@@ -111,19 +112,7 @@ function resolveIngestUrl(endpoint) {
     if (url.username || url.password) {
         throw new ConfigError("endpoint must not contain credentials; pass the key as apiKey");
     }
-    url.search = "";
-    url.hash = "";
-    const path = url.pathname.replace(/\/+$/, "");
-    if (path.endsWith(`${exports.INGEST_PATH}/batch`)) {
-        url.pathname = path.slice(0, -"/batch".length);
-    }
-    else if (path.endsWith(exports.INGEST_PATH)) {
-        url.pathname = path;
-    }
-    else {
-        url.pathname = `${path}${exports.INGEST_PATH}`;
-    }
-    return url;
+    return new URL(url.origin);
 }
 /**
  * Loads extra CAs. Every entry must contain at least one parseable certificate, so a
@@ -197,16 +186,15 @@ function resolveCapture(capture) {
 }
 function resolveConfig(config) {
     const apiKey = (config.apiKey ?? env("MIDLINE_API_KEY") ?? "").trim();
-    const ingestUrl = resolveIngestUrl(config.endpoint || env("MIDLINE_ENDPOINT") || exports.DEFAULT_ENDPOINT);
+    const socketOrigin = resolveEndpointOrigin(config.endpoint || env("MIDLINE_ENDPOINT") || exports.DEFAULT_ENDPOINT);
     const extraCa = loadCa(config.ca ?? env("MIDLINE_CUSTOM_CA"), "ca / MIDLINE_CUSTOM_CA");
-    if (extraCa && ingestUrl.protocol !== "https:") {
+    if (extraCa && socketOrigin.protocol !== "https:") {
         throw new ConfigError("ca / MIDLINE_CUSTOM_CA is set but the endpoint is not https://");
     }
     return {
         apiKey,
         serviceName: config.serviceName ?? env("MIDLINE_SERVICE_NAME"),
-        ingestUrl,
-        batchUrl: new URL(`${ingestUrl.pathname}/batch`, ingestUrl),
+        socketOrigin,
         ca: trustStore(extraCa),
         hasCustomCa: Boolean(extraCa),
         environment: config.environment ?? env("MIDLINE_ENVIRONMENT"),

package/dist/socket-transport.d.ts

@@ -0,0 +1,58 @@
+/** Mirrors midline-core-api/src/realtime/ingest-protocol.ts's IngestAck. Duplicated,
+ * not shared: the two are separate packages, kept in sync by wire convention. */
+export type IngestAckErrorCode = "unauthorized" | "forbidden" | "rate_limited" | "bad_request" | "too_large" | "internal_error";
+export interface IngestAckOk {
+    ok: true;
+    accepted: number;
+    rejected: number;
+}
+export interface IngestAckError {
+    ok: false;
+    code: IngestAckErrorCode;
+    message: string;
+    retryAfterMs?: number;
+}
+export type IngestAck = IngestAckOk | IngestAckError;
+export interface SocketTransportOptions {
+    apiKey: string;
+    /** Full trust store for the Midline endpoint, or undefined for Node's default. */
+    ca?: Array<string | Buffer>;
+    connectTimeoutMs: number;
+    /** Per-emit ack timeout. */
+    timeoutMs: number;
+    /** Reconnection backoff bounds, derived from the agent's own flush/backoff config (see agent.ts). */
+    reconnectionDelayMs: number;
+    reconnectionDelayMaxMs: number;
+    /** Nothing queued for this long -> disconnect; reconnects lazily on the next send(). */
+    idleDisconnectMs: number;
+    userAgent: string;
+}
+/** A transport failure with a stable `code`, matching what agent.ts's errorCode()/describe() expect. */
+export declare class TransportError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Owns one socket.io-client connection to the ingest gateway: connects lazily on
+ * first send, lets socket.io-client's own reconnection/backoff handle transport
+ * drops, and disconnects after a sustained idle period (autoUnref also unrefs the
+ * underlying socket, so — as with the old HTTP transport — telemetry alone never
+ * keeps the process alive; the idle disconnect is extra hygiene on top of that,
+ * not the only thing standing between this and a hung process).
+ */
+export declare class SocketTransport {
+    private readonly origin;
+    private readonly options;
+    private socket;
+    private connecting;
+    private idleTimer;
+    constructor(origin: URL, options: SocketTransportOptions);
+    /** Sends one batch, connecting first if needed. Resolves with the server's ack or throws. */
+    send(events: Array<Record<string, unknown>>): Promise<IngestAck>;
+    destroy(): void;
+    private ensureConnected;
+    private createSocket;
+    private emit;
+    private scheduleIdleDisconnect;
+    private clearIdleTimer;
+}

package/dist/socket-transport.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocketTransport = exports.TransportError = void 0;
+const socket_io_client_1 = require("socket.io-client");
+const INGEST_NAMESPACE = "/ingest";
+const INGEST_EVENT = "ingest";
+/** A transport failure with a stable `code`, matching what agent.ts's errorCode()/describe() expect. */
+class TransportError extends Error {
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "TransportError";
+    }
+}
+exports.TransportError = TransportError;
+/**
+ * Owns one socket.io-client connection to the ingest gateway: connects lazily on
+ * first send, lets socket.io-client's own reconnection/backoff handle transport
+ * drops, and disconnects after a sustained idle period (autoUnref also unrefs the
+ * underlying socket, so — as with the old HTTP transport — telemetry alone never
+ * keeps the process alive; the idle disconnect is extra hygiene on top of that,
+ * not the only thing standing between this and a hung process).
+ */
+class SocketTransport {
+    constructor(origin, options) {
+        this.origin = origin;
+        this.options = options;
+        this.socket = null;
+        this.connecting = null;
+        this.idleTimer = null;
+    }
+    /** Sends one batch, connecting first if needed. Resolves with the server's ack or throws. */
+    async send(events) {
+        this.clearIdleTimer();
+        try {
+            await this.ensureConnected();
+            return await this.emit(events);
+        }
+        finally {
+            this.scheduleIdleDisconnect();
+        }
+    }
+    destroy() {
+        this.clearIdleTimer();
+        this.socket?.removeAllListeners();
+        this.socket?.disconnect();
+        this.socket = null;
+    }
+    ensureConnected() {
+        if (this.socket?.connected)
+            return Promise.resolve();
+        if (this.connecting)
+            return this.connecting;
+        if (!this.socket) {
+            this.socket = this.createSocket();
+        }
+        else if (!this.socket.active) {
+            // Cleanly disconnected earlier (our own idle timeout, or the server closed
+            // it): socket.io-client won't retry on its own, so ask it to.
+            this.socket.connect();
+        }
+        // Otherwise the existing socket is already reconnecting on its own; just wait below.
+        const socket = this.socket;
+        this.connecting = new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                cleanup();
+                reject(new TransportError(`connection not established within ${this.options.connectTimeoutMs}ms`, "ECONNECT_TIMEOUT"));
+            }, this.options.connectTimeoutMs);
+            const onConnect = () => {
+                cleanup();
+                resolve();
+            };
+            const onError = (err) => {
+                cleanup();
+                reject(classifyConnectError(err));
+            };
+            const cleanup = () => {
+                clearTimeout(timer);
+                socket.off("connect", onConnect);
+                socket.off("connect_error", onError);
+            };
+            socket.once("connect", onConnect);
+            socket.once("connect_error", onError);
+        }).finally(() => {
+            this.connecting = null;
+        });
+        return this.connecting;
+    }
+    createSocket() {
+        const socket = (0, socket_io_client_1.io)(`${this.origin.origin}${INGEST_NAMESPACE}`, {
+            auth: { apiKey: this.options.apiKey },
+            transports: ["websocket"],
+            reconnection: true,
+            reconnectionAttempts: Infinity,
+            reconnectionDelay: this.options.reconnectionDelayMs,
+            reconnectionDelayMax: this.options.reconnectionDelayMaxMs,
+            randomizationFactor: 0.5,
+            timeout: this.options.connectTimeoutMs,
+            // Never the reason the process stays alive — same property the old HTTP
+            // transport's unref'd keep-alive sockets had.
+            autoUnref: true,
+            forceNew: true,
+            ca: this.options.ca,
+            extraHeaders: { "user-agent": this.options.userAgent },
+        });
+        return socket;
+    }
+    emit(events) {
+        const socket = this.socket;
+        if (!socket) {
+            return Promise.reject(new TransportError("not connected", "ENOTCONNECTED"));
+        }
+        return new Promise((resolve, reject) => {
+            socket.timeout(this.options.timeoutMs).emit(INGEST_EVENT, { events }, (err, ack) => {
+                if (err) {
+                    reject(new TransportError(`no response within ${this.options.timeoutMs}ms`, "ETIMEDOUT"));
+                }
+                else {
+                    resolve(ack);
+                }
+            });
+        });
+    }
+    scheduleIdleDisconnect() {
+        this.idleTimer = setTimeout(() => {
+            this.idleTimer = null;
+            this.socket?.disconnect();
+        }, this.options.idleDisconnectMs);
+        this.idleTimer.unref?.();
+    }
+    clearIdleTimer() {
+        if (this.idleTimer) {
+            clearTimeout(this.idleTimer);
+            this.idleTimer = null;
+        }
+    }
+}
+exports.SocketTransport = SocketTransport;
+/**
+ * `connect_error` from a plain `io()` connect-timeout has message "timeout" and
+ * no further detail. Anything else wraps the real Node error (ECONNREFUSED,
+ * ENOTFOUND, a TLS failure, ...) inside engine.io-client's TransportError, whose
+ * `.description` — for the websocket transport — is a `ws` ErrorEvent exposing
+ * the underlying error via its public `.error` getter (mirrors the DOM
+ * ErrorEvent.error field; see ws/lib/event-target.js). Verified empirically
+ * against the installed socket.io-client/ws versions, not assumed.
+ */
+function classifyConnectError(err) {
+    const anyErr = err;
+    if (anyErr?.message === "timeout") {
+        return new TransportError("connection timed out", "ECONNECT_TIMEOUT");
+    }
+    const inner = anyErr?.description?.error;
+    const code = inner?.code ?? "";
+    const message = inner?.message ?? anyErr?.message ?? "connection failed";
+    return new TransportError(message, code);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "midline-agent",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Midline — request, error and security monitoring for Node, and error, network and Web Vitals monitoring for browsers",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -55,9 +55,13 @@
     "@types/express": "^4.17.19",
     "@types/node": "^24.10.1",
     "express": "^4.18.2",
+    "socket.io": "^4.8.3",
     "typescript": "^5.1.3"
   },
   "publishConfig": {
     "access": "public"
+  },
+  "dependencies": {
+    "socket.io-client": "^4.8.3"
   }
 }