mqtt-plus 1.4.18 → 1.4.20

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 ChangeLog
 =========
 
+1.4.20 (2026-05-13)
+-------------------
+
+- UPDATE: upgrade NPM dependencies
+
+1.4.19 (2026-04-18)
+-------------------
+
+- IMPROVEMENT: improve error handling in source and sink traits
+- UPDATE: upgrade NPM dependencies
+
 1.4.18 (2026-04-17)
 -------------------
 

package/dst-stage1/mqtt-plus-api.js

@@ -22,4 +22,3 @@
 **  SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */
 export {};
-//# sourceMappingURL=mqtt-plus-api.js.map

package/dst-stage1/mqtt-plus-auth.d.ts

@@ -1,7 +1,7 @@
 import type { APISchema } from "./mqtt-plus-api";
 import { MetaTrait } from "./mqtt-plus-meta";
-export type AuthMode = "require" | "optional";
-export type AuthRole = string;
+type AuthMode = "require" | "optional";
+type AuthRole = string;
 export type AuthOption = AuthRole | {
     mode: AuthMode;
     roles: AuthRole[];

package/dst-stage1/mqtt-plus-auth.js

@@ -127,4 +127,3 @@ export class AuthTrait extends MetaTrait {
         return authenticated;
     }
 }
-//# sourceMappingURL=mqtt-plus-auth.js.map

package/dst-stage1/mqtt-plus-base.js

@@ -233,4 +233,3 @@ export class BaseTrait extends TraceTrait {
         }
     }
 }
-//# sourceMappingURL=mqtt-plus-base.js.map

package/dst-stage1/mqtt-plus-codec.js

@@ -121,4 +121,3 @@ export class CodecTrait extends OptionsTrait {
         this.codec = new Codec(this.options.codec);
     }
 }
-//# sourceMappingURL=mqtt-plus-codec.js.map

package/dst-stage1/mqtt-plus-encode.js

@@ -60,4 +60,3 @@ export class EncodeTrait extends CodecTrait {
         return arr;
     }
 }
-//# sourceMappingURL=mqtt-plus-encode.js.map

package/dst-stage1/mqtt-plus-error.js

@@ -290,4 +290,3 @@ export function run(...args) {
         return result;
     }
 }
-//# sourceMappingURL=mqtt-plus-error.js.map

package/dst-stage1/mqtt-plus-event.js

@@ -186,4 +186,3 @@ export class EventTrait extends AuthTrait {
             return run(`publish event as MQTT message to topic "${topic}"`, () => this.publishToTopic(topic, message, { qos: 2, ...options }));
     }
 }
-//# sourceMappingURL=mqtt-plus-event.js.map

package/dst-stage1/mqtt-plus-info.js

@@ -22,4 +22,3 @@
 **  SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */
 export {};
-//# sourceMappingURL=mqtt-plus-info.js.map

package/dst-stage1/mqtt-plus-meta.js

@@ -53,4 +53,3 @@ export class MetaTrait extends TimerTrait {
             return { ...Object.fromEntries(this._meta), ...extra };
     }
 }
-//# sourceMappingURL=mqtt-plus-meta.js.map

package/dst-stage1/mqtt-plus-msg.js

@@ -370,4 +370,3 @@ export class MsgTrait extends EncodeTrait {
         this.msg = new Msg();
     }
 }
-//# sourceMappingURL=mqtt-plus-msg.js.map

package/dst-stage1/mqtt-plus-options.d.ts

@@ -4,8 +4,8 @@ type TopicMatching = {
     operation: string;
     peerId?: string;
 };
-export type TopicMake = (name: string, operation: string, peerId?: string) => string;
-export type TopicMatch = (topic: string) => TopicMatching | null;
+type TopicMake = (name: string, operation: string, peerId?: string) => string;
+type TopicMatch = (topic: string) => TopicMatching | null;
 export interface APIOptions {
     id: string;
     codec: "cbor" | "json";

package/dst-stage1/mqtt-plus-options.js

@@ -50,4 +50,3 @@ export class OptionsTrait {
         };
     }
 }
-//# sourceMappingURL=mqtt-plus-options.js.map

package/dst-stage1/mqtt-plus-service.js

@@ -303,4 +303,3 @@ export class ServiceTrait extends EventTrait {
         return promise;
     }
 }
-//# sourceMappingURL=mqtt-plus-service.js.map

package/dst-stage1/mqtt-plus-sink.js

@@ -120,8 +120,6 @@ export class SinkTrait extends SourceTrait {
             const receiver = request.receiver;
             /*  create a resource spool for request cleanup  */
             const reqSpool = new Spool();
-            this.pushSpools.set(requestId, reqSpool);
-            reqSpool.roll(() => { this.pushSpools.delete(requestId); });
             /*  sanity check sender  */
             if (sender === undefined || sender === "") {
                 this.error(new Error("invalid request: missing sender"));
@@ -162,6 +160,8 @@ export class SinkTrait extends SourceTrait {
             }
             this.pushRecvControllers.set(requestId, abortController);
             reqSpool.roll(() => { this.pushRecvControllers.delete(requestId); });
+            this.pushSpools.set(requestId, reqSpool);
+            reqSpool.roll(() => { this.pushSpools.delete(requestId); });
             /*  check authentication and prepare stream  */
             let dataCompleted = false;
             let ackSent = false;
@@ -358,10 +358,9 @@ export class SinkTrait extends SourceTrait {
                 await sendResponse(undefined, true);
                 ackSent = true;
                 /*  call handler  */
-                await Promise.race([
-                    Promise.resolve(callback(...params, info)),
-                    abortPromise
-                ]);
+                const callbackPromise = Promise.resolve(callback(...params, info));
+                callbackPromise.catch(() => { }); /*  guard against unhandled rejection if abort wins the race  */
+                await Promise.race([callbackPromise, abortPromise]);
                 /*  ensure stream is consumed or destroyed to prevent hang  */
                 if (readable.readableFlowing !== true && !readable.destroyed)
                     readable.resume();
@@ -395,10 +394,14 @@ export class SinkTrait extends SourceTrait {
                     if (stream !== undefined && !stream.destroyed)
                         stream.destroy(error);
                 }
-                /*  send error as nak response or as mid-stream error response  */
+                /*  send error as nak response or as mid-stream error response
+                    (skip when a terminal signal was already emitted, e.g. the
+                    pre-emptive credit=0 cancel published by the timeout handler)  */
                 this.error(error);
-                errorResponseSent = true;
-                await sendResponse(error.message).catch(() => { });
+                if (!errorResponseSent) {
+                    errorResponseSent = true;
+                    await sendResponse(error.message).catch(() => { });
+                }
             }
             finally {
                 /*  cleanup resources  */
@@ -625,6 +628,17 @@ export class SinkTrait extends SourceTrait {
                 creditGate.replenish(response.credit);
                 refreshTimeout();
             }
+            else if (pushAcked && initialCredit === undefined) {
+                /*  protocol violation: receiver sent credit despite
+                    not granting initial credit during ack  */
+                const error = new Error(`push to sink "${name}" received unsolicited credit (credit-flow disabled)`);
+                remoteErrorObject = error;
+                abortController.abort(error);
+                if (!pushFinalized) {
+                    pushFinalized = true;
+                    pushFinalizeReject(error);
+                }
+            }
             else
                 pendingCredit += response.credit;
         });
@@ -660,6 +674,9 @@ export class SinkTrait extends SourceTrait {
                     refreshTimeout();
                 pendingCredit = 0;
             }
+            else if (pendingCredit > 0)
+                /*  protocol violation: receiver sent credit before ack despite not granting initial credit  */
+                throw new Error(`push to sink "${name}" received unsolicited credit (credit-flow disabled)`);
             /*  register credit gate at instance level  */
             if (creditGate) {
                 this.pushCreditGates.set(requestId, creditGate);
@@ -736,4 +753,3 @@ export class SinkTrait extends SourceTrait {
         }
     }
 }
-//# sourceMappingURL=mqtt-plus-sink.js.map

package/dst-stage1/mqtt-plus-source.js

@@ -199,9 +199,8 @@ export class SourceTrait extends ServiceTrait {
             try {
                 if (topicName !== request.name)
                     throw new Error(`source name mismatch (topic: "${topicName}", payload: "${request.name}")`);
-                if (auth)
-                    info.authenticated = await this.authenticated(sender, request.auth, auth, `source "${name}"`);
-                /*  register credit/cancel handler (unconditional for cancel support)  */
+                /*  register credit/cancel handler early (before any await) so cancel
+                    signals arriving during async authentication are not lost  */
                 this.onResponse.set(`source-fetch-credit:${requestId}`, (creditParsed) => {
                     if (abortSignal.aborted)
                         return;
@@ -229,10 +228,13 @@ export class SourceTrait extends ServiceTrait {
                 reqSpool.roll(() => {
                     this.onResponse.delete(`source-fetch-credit:${requestId}`);
                 });
-                await Promise.race([
-                    Promise.resolve(callback(...params, info)),
-                    abortPromise
-                ]);
+                /*  check for authentication  */
+                if (auth)
+                    info.authenticated = await this.authenticated(sender, request.auth, auth, `source "${name}"`);
+                /*  finally call the handler callback  */
+                const callbackPromise = Promise.resolve(callback(...params, info));
+                callbackPromise.catch(() => { }); /*  guard against unhandled rejection if abort wins the race  */
+                await Promise.race([callbackPromise, abortPromise]);
                 /*  check for valid data source  */
                 if (!(info.stream instanceof Readable) && !(info.buffer instanceof Promise) && !(info.buffer instanceof Uint8Array))
                     throw new Error("handler did not provide data via info.stream or info.buffer fields");
@@ -259,9 +261,14 @@ export class SourceTrait extends ServiceTrait {
                     await sendStreamAsChunks(info.stream, this.options.chunkSize, sendChunk, creditGate, abortSignal);
                 else if (info.buffer instanceof Promise || info.buffer instanceof Uint8Array) {
                     /*  handle Buffer result  */
-                    const buffer = (info.buffer instanceof Promise)
-                        ? await Promise.race([info.buffer, abortPromise])
-                        : info.buffer;
+                    let buffer;
+                    if (info.buffer instanceof Promise) {
+                        const bufferPromise = info.buffer;
+                        bufferPromise.catch(() => { }); /*  guard against unhandled rejection if abort wins the race  */
+                        buffer = await Promise.race([bufferPromise, abortPromise]);
+                    }
+                    else
+                        buffer = info.buffer;
                     /*  re-check abort: a late info.buffer resolution could win the race  */
                     /*  by a microtask margin even after abort fired -- discard silently  */
                     abortSignal.throwIfAborted();
@@ -557,4 +564,3 @@ export class SourceTrait extends ServiceTrait {
         return result;
     }
 }
-//# sourceMappingURL=mqtt-plus-source.js.map

package/dst-stage1/mqtt-plus-subscription.js

@@ -180,4 +180,3 @@ export class SubscriptionTrait extends BaseTrait {
         await super.destroy();
     }
 }
-//# sourceMappingURL=mqtt-plus-subscription.js.map

package/dst-stage1/mqtt-plus-timer.js

@@ -113,4 +113,3 @@ export class TimerTrait extends SubscriptionTrait {
         });
     }
 }
-//# sourceMappingURL=mqtt-plus-timer.js.map

package/dst-stage1/mqtt-plus-trace.js

@@ -109,4 +109,3 @@ export class TraceTrait extends MsgTrait {
         }
     }
 }
-//# sourceMappingURL=mqtt-plus-trace.js.map

package/dst-stage1/mqtt-plus-util.js

@@ -245,4 +245,3 @@ export function makeMutuallyExclusiveFields(obj, f1Name, f2Name, onConsumed) {
         configurable: true
     });
 }
-//# sourceMappingURL=mqtt-plus-util.js.map

package/dst-stage1/mqtt-plus-version.js

@@ -38,4 +38,3 @@ export const MIN_VERSION = "0.0";
 /*  package version (numeric format)  */
 export const version = versionToNum(VERSION);
 export const minVersion = versionToNum(MIN_VERSION);
-//# sourceMappingURL=mqtt-plus-version.js.map

package/dst-stage1/mqtt-plus.js

@@ -25,4 +25,3 @@ import { SinkTrait } from "./mqtt-plus-sink";
 /*  export the default API class  */
 export default class MQTTp extends SinkTrait {
 }
-//# sourceMappingURL=mqtt-plus.js.map

package/dst-stage1/tsc.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/mqtt-plus-api.ts","../src/mqtt-plus-auth.ts","../src/mqtt-plus-base.ts","../src/mqtt-plus-codec.ts","../src/mqtt-plus-encode.ts","../src/mqtt-plus-error.ts","../src/mqtt-plus-event.ts","../src/mqtt-plus-info.ts","../src/mqtt-plus-meta.ts","../src/mqtt-plus-msg.ts","../src/mqtt-plus-options.ts","../src/mqtt-plus-service.ts","../src/mqtt-plus-sink.ts","../src/mqtt-plus-source.ts","../src/mqtt-plus-subscription.ts","../src/mqtt-plus-timer.ts","../src/mqtt-plus-trace.ts","../src/mqtt-plus-util.ts","../src/mqtt-plus-version.ts","../src/mqtt-plus.ts"],"version":"6.0.2"}
+{"root":["../src/mqtt-plus-api.ts","../src/mqtt-plus-auth.ts","../src/mqtt-plus-base.ts","../src/mqtt-plus-codec.ts","../src/mqtt-plus-encode.ts","../src/mqtt-plus-error.ts","../src/mqtt-plus-event.ts","../src/mqtt-plus-info.ts","../src/mqtt-plus-meta.ts","../src/mqtt-plus-msg.ts","../src/mqtt-plus-options.ts","../src/mqtt-plus-service.ts","../src/mqtt-plus-sink.ts","../src/mqtt-plus-source.ts","../src/mqtt-plus-subscription.ts","../src/mqtt-plus-timer.ts","../src/mqtt-plus-trace.ts","../src/mqtt-plus-util.ts","../src/mqtt-plus-version.ts","../src/mqtt-plus.ts"],"version":"6.0.3"}

package/dst-stage2/mqtt-plus.cjs.cjs

@@ -1824,7 +1824,6 @@ var SourceTrait = class extends ServiceTrait {
 			let cancelledByFetcher = false;
 			try {
 				if (topicName !== request.name) throw new Error(`source name mismatch (topic: "${topicName}", payload: "${request.name}")`);
-				if (auth) info.authenticated = await this.authenticated(sender, request.auth, auth, `source "${name}"`);
 				this.onResponse.set(`source-fetch-credit:${requestId}`, (creditParsed) => {
 					if (abortSignal.aborted) return;
 					if (creditParsed.name !== name) {
@@ -1849,7 +1848,10 @@ var SourceTrait = class extends ServiceTrait {
 				reqSpool.roll(() => {
 					this.onResponse.delete(`source-fetch-credit:${requestId}`);
 				});
-				await Promise.race([Promise.resolve(callback(...params, info)), abortPromise]);
+				if (auth) info.authenticated = await this.authenticated(sender, request.auth, auth, `source "${name}"`);
+				const callbackPromise = Promise.resolve(callback(...params, info));
+				callbackPromise.catch(() => {});
+				await Promise.race([callbackPromise, abortPromise]);
 				if (!(info.stream instanceof node_stream.Readable) && !(info.buffer instanceof Promise) && !(info.buffer instanceof Uint8Array)) throw new Error("handler did not provide data via info.stream or info.buffer fields");
 				if (info.stream instanceof node_stream.Readable && (info.buffer instanceof Promise || info.buffer instanceof Uint8Array)) throw new Error("handler has set both info.stream and info.buffer fields");
 				const initialCredit = request.credit;
@@ -1866,7 +1868,12 @@ var SourceTrait = class extends ServiceTrait {
 				ackSent = true;
 				if (info.stream instanceof node_stream.Readable) await sendStreamAsChunks(info.stream, this.options.chunkSize, sendChunk, creditGate, abortSignal);
 				else if (info.buffer instanceof Promise || info.buffer instanceof Uint8Array) {
-					const buffer = info.buffer instanceof Promise ? await Promise.race([info.buffer, abortPromise]) : info.buffer;
+					let buffer;
+					if (info.buffer instanceof Promise) {
+						const bufferPromise = info.buffer;
+						bufferPromise.catch(() => {});
+						buffer = await Promise.race([bufferPromise, abortPromise]);
+					} else buffer = info.buffer;
 					abortSignal.throwIfAborted();
 					await sendBufferAsChunks(buffer, this.options.chunkSize, sendChunk, creditGate, abortSignal);
 				}
@@ -2164,10 +2171,6 @@ var SinkTrait = class extends SourceTrait {
 			const sender = request.sender;
 			const receiver = request.receiver;
 			const reqSpool = new Spool();
-			this.pushSpools.set(requestId, reqSpool);
-			reqSpool.roll(() => {
-				this.pushSpools.delete(requestId);
-			});
 			if (sender === void 0 || sender === "") {
 				this.error(/* @__PURE__ */ new Error("invalid request: missing sender"));
 				await reqSpool.unroll();
@@ -2208,6 +2211,10 @@ var SinkTrait = class extends SourceTrait {
 			reqSpool.roll(() => {
 				this.pushRecvControllers.delete(requestId);
 			});
+			this.pushSpools.set(requestId, reqSpool);
+			reqSpool.roll(() => {
+				this.pushSpools.delete(requestId);
+			});
 			let dataCompleted = false;
 			let ackSent = false;
 			let errorResponseSent = false;
@@ -2367,7 +2374,9 @@ var SinkTrait = class extends SourceTrait {
 				});
 				await sendResponse(void 0, true);
 				ackSent = true;
-				await Promise.race([Promise.resolve(callback(...params, info)), abortPromise]);
+				const callbackPromise = Promise.resolve(callback(...params, info));
+				callbackPromise.catch(() => {});
+				await Promise.race([callbackPromise, abortPromise]);
 				if (readable.readableFlowing !== true && !readable.destroyed) readable.resume();
 				await streamDone.catch((err) => {
 					this.error(ensureError(err), `stream drain after sink "${name}" callback failed`);
@@ -2388,8 +2397,10 @@ var SinkTrait = class extends SourceTrait {
 					if (stream !== void 0 && !stream.destroyed) stream.destroy(error);
 				}
 				this.error(error);
-				errorResponseSent = true;
-				await sendResponse(error.message).catch(() => {});
+				if (!errorResponseSent) {
+					errorResponseSent = true;
+					await sendResponse(error.message).catch(() => {});
+				}
 			} finally {
 				const stream = this.pushStreams.get(requestId);
 				if (stream !== void 0 && !stream.destroyed && !dataCompleted && !errorResponseSent) stream.destroy(abortSignal.aborted ? ensureError(abortSignal.reason) : /* @__PURE__ */ new Error("sink push aborted without cause"));
@@ -2572,6 +2583,14 @@ var SinkTrait = class extends SourceTrait {
 			if (creditGate !== void 0) {
 				creditGate.replenish(response.credit);
 				refreshTimeout();
+			} else if (pushAcked && initialCredit === void 0) {
+				const error = /* @__PURE__ */ new Error(`push to sink "${name}" received unsolicited credit (credit-flow disabled)`);
+				remoteErrorObject = error;
+				abortController.abort(error);
+				if (!pushFinalized) {
+					pushFinalized = true;
+					pushFinalizeReject(error);
+				}
 			} else pendingCredit += response.credit;
 		});
 		spool.roll(() => {
@@ -2607,7 +2626,7 @@ var SinkTrait = class extends SourceTrait {
 				creditGate = new CreditGate(initialCredit + pendingCredit);
 				if (pendingCredit > 0) refreshTimeout();
 				pendingCredit = 0;
-			}
+			} else if (pendingCredit > 0) throw new Error(`push to sink "${name}" received unsolicited credit (credit-flow disabled)`);
 			if (creditGate) {
 				this.pushCreditGates.set(requestId, creditGate);
 				spool.roll(() => {

package/dst-stage2/mqtt-plus.esm.js

@@ -1797,7 +1797,6 @@ var SourceTrait = class extends ServiceTrait {
 			let cancelledByFetcher = false;
 			try {
 				if (topicName !== request.name) throw new Error(`source name mismatch (topic: "${topicName}", payload: "${request.name}")`);
-				if (auth) info.authenticated = await this.authenticated(sender, request.auth, auth, `source "${name}"`);
 				this.onResponse.set(`source-fetch-credit:${requestId}`, (creditParsed) => {
 					if (abortSignal.aborted) return;
 					if (creditParsed.name !== name) {
@@ -1822,7 +1821,10 @@ var SourceTrait = class extends ServiceTrait {
 				reqSpool.roll(() => {
 					this.onResponse.delete(`source-fetch-credit:${requestId}`);
 				});
-				await Promise.race([Promise.resolve(callback(...params, info)), abortPromise]);
+				if (auth) info.authenticated = await this.authenticated(sender, request.auth, auth, `source "${name}"`);
+				const callbackPromise = Promise.resolve(callback(...params, info));
+				callbackPromise.catch(() => {});
+				await Promise.race([callbackPromise, abortPromise]);
 				if (!(info.stream instanceof Readable) && !(info.buffer instanceof Promise) && !(info.buffer instanceof Uint8Array)) throw new Error("handler did not provide data via info.stream or info.buffer fields");
 				if (info.stream instanceof Readable && (info.buffer instanceof Promise || info.buffer instanceof Uint8Array)) throw new Error("handler has set both info.stream and info.buffer fields");
 				const initialCredit = request.credit;
@@ -1839,7 +1841,12 @@ var SourceTrait = class extends ServiceTrait {
 				ackSent = true;
 				if (info.stream instanceof Readable) await sendStreamAsChunks(info.stream, this.options.chunkSize, sendChunk, creditGate, abortSignal);
 				else if (info.buffer instanceof Promise || info.buffer instanceof Uint8Array) {
-					const buffer = info.buffer instanceof Promise ? await Promise.race([info.buffer, abortPromise]) : info.buffer;
+					let buffer;
+					if (info.buffer instanceof Promise) {
+						const bufferPromise = info.buffer;
+						bufferPromise.catch(() => {});
+						buffer = await Promise.race([bufferPromise, abortPromise]);
+					} else buffer = info.buffer;
 					abortSignal.throwIfAborted();
 					await sendBufferAsChunks(buffer, this.options.chunkSize, sendChunk, creditGate, abortSignal);
 				}
@@ -2137,10 +2144,6 @@ var SinkTrait = class extends SourceTrait {
 			const sender = request.sender;
 			const receiver = request.receiver;
 			const reqSpool = new Spool();
-			this.pushSpools.set(requestId, reqSpool);
-			reqSpool.roll(() => {
-				this.pushSpools.delete(requestId);
-			});
 			if (sender === void 0 || sender === "") {
 				this.error(/* @__PURE__ */ new Error("invalid request: missing sender"));
 				await reqSpool.unroll();
@@ -2181,6 +2184,10 @@ var SinkTrait = class extends SourceTrait {
 			reqSpool.roll(() => {
 				this.pushRecvControllers.delete(requestId);
 			});
+			this.pushSpools.set(requestId, reqSpool);
+			reqSpool.roll(() => {
+				this.pushSpools.delete(requestId);
+			});
 			let dataCompleted = false;
 			let ackSent = false;
 			let errorResponseSent = false;
@@ -2340,7 +2347,9 @@ var SinkTrait = class extends SourceTrait {
 				});
 				await sendResponse(void 0, true);
 				ackSent = true;
-				await Promise.race([Promise.resolve(callback(...params, info)), abortPromise]);
+				const callbackPromise = Promise.resolve(callback(...params, info));
+				callbackPromise.catch(() => {});
+				await Promise.race([callbackPromise, abortPromise]);
 				if (readable.readableFlowing !== true && !readable.destroyed) readable.resume();
 				await streamDone.catch((err) => {
 					this.error(ensureError(err), `stream drain after sink "${name}" callback failed`);
@@ -2361,8 +2370,10 @@ var SinkTrait = class extends SourceTrait {
 					if (stream !== void 0 && !stream.destroyed) stream.destroy(error);
 				}
 				this.error(error);
-				errorResponseSent = true;
-				await sendResponse(error.message).catch(() => {});
+				if (!errorResponseSent) {
+					errorResponseSent = true;
+					await sendResponse(error.message).catch(() => {});
+				}
 			} finally {
 				const stream = this.pushStreams.get(requestId);
 				if (stream !== void 0 && !stream.destroyed && !dataCompleted && !errorResponseSent) stream.destroy(abortSignal.aborted ? ensureError(abortSignal.reason) : /* @__PURE__ */ new Error("sink push aborted without cause"));
@@ -2545,6 +2556,14 @@ var SinkTrait = class extends SourceTrait {
 			if (creditGate !== void 0) {
 				creditGate.replenish(response.credit);
 				refreshTimeout();
+			} else if (pushAcked && initialCredit === void 0) {
+				const error = /* @__PURE__ */ new Error(`push to sink "${name}" received unsolicited credit (credit-flow disabled)`);
+				remoteErrorObject = error;
+				abortController.abort(error);
+				if (!pushFinalized) {
+					pushFinalized = true;
+					pushFinalizeReject(error);
+				}
 			} else pendingCredit += response.credit;
 		});
 		spool.roll(() => {
@@ -2580,7 +2599,7 @@ var SinkTrait = class extends SourceTrait {
 				creditGate = new CreditGate(initialCredit + pendingCredit);
 				if (pendingCredit > 0) refreshTimeout();
 				pendingCredit = 0;
-			}
+			} else if (pendingCredit > 0) throw new Error(`push to sink "${name}" received unsolicited credit (credit-flow disabled)`);
 			if (creditGate) {
 				this.pushCreditGates.set(requestId, creditGate);
 				spool.roll(() => {