opcjs-base 0.1.10 → 0.1.14

package/dist/index.d.ts

@@ -107,7 +107,7 @@ declare class NodeId {
 /**
  * OPC UA ExpandedNodeId Type
  *
- * ExpandedNodeId extends NodeId with optional server identification,
+ * ExpandedNodeId wraps a NodeId with optional server identification,
  * allowing nodes to be identified across multiple servers.
  *
  * @module expanded-nodeid
@@ -116,53 +116,83 @@ declare class NodeId {
 /**
  * OPC UA ExpandedNodeId
  *
- * An ExpandedNodeId extends NodeId with optional server identification,
+ * An ExpandedNodeId wraps a NodeId with optional server identification,
  * allowing nodes to be identified across multiple servers.
  *
  * @example
  * ```typescript
  * import { ExpandedNodeId } from '@opcua/types';
  *
- * const expandedNodeId = new ExpandedNodeId(2, 123, "http://opcfoundation.org/UA/", 1);
+ * const expandedNodeId = new ExpandedNodeId(
+ *   new NodeId(2, 123),
+ *   'http://opcfoundation.org/UA/',
+ *   1,
+ * );
  * console.log(expandedNodeId.toString());
  * // "svr=1;nsu=http://opcfoundation.org/UA/;ns=2;i=123"
  * ```
  */
-declare class ExpandedNodeId extends NodeId {
-    /**
-     * The server index (optional, for cross-server references)
-     */
+declare class ExpandedNodeId {
+    /** The wrapped NodeId. */
+    readonly nodeId: NodeId;
+    /** The server index (optional, for cross-server references). */
     readonly serverIndex?: number;
-    /**
-     * The namespace URI (optional, alternative to namespace index)
-     */
+    /** The namespace URI (optional, alternative to the namespace index on nodeId). */
     readonly namespaceUri?: string;
     /**
-     * Create a new ExpandedNodeId
+     * Create a new ExpandedNodeId.
      *
-     * @param namespace - The namespace index
-     * @param identifier - The identifier
+     * @param nodeId - The wrapped NodeId
      * @param namespaceUri - Optional namespace URI
      * @param serverIndex - Optional server index
      */
-    constructor(namespace?: number, identifier?: number | string | Uint8Array, namespaceUri?: string, serverIndex?: number);
-    /**
-     * Convert ExpandedNodeId to string representation
-     *
-     * @returns String representation of the ExpandedNodeId
-     */
+    constructor(nodeId: NodeId, namespaceUri?: string, serverIndex?: number);
+    /** Convert ExpandedNodeId to string representation. */
     toString(): string;
 }
 
+/**
+ * Enumeration of variant types based on BuiltinType NodeIds.
+ */
+declare enum BuiltInType {
+    Null = 0,
+    Boolean = 1,
+    SByte = 2,
+    Byte = 3,
+    Int16 = 4,
+    UInt16 = 5,
+    Int32 = 6,
+    UInt32 = 7,
+    Int64 = 8,
+    UInt64 = 9,
+    Float = 10,
+    Double = 11,
+    String = 12,
+    DateTime = 13,
+    Guid = 14,
+    ByteString = 15,
+    XmlElement = 16,
+    NodeId = 17,
+    ExpandedNodeId = 18,
+    StatusCode = 19,
+    QualifiedName = 20,
+    LocalizedText = 21,
+    ExtensionObject = 22,
+    DataValue = 23,
+    Variant = 24,
+    DiagnosticInfo = 25
+}
+
 /**
  * OPC UA StatusCode Type (i=19)
  *
  * StatusCode is a 32-bit unsigned integer that indicates the quality of a result.
  * The format is: [Severity:2][SubCode:14][Code:16]
  *
- * @see OPC UA Part 4, Section 7.34
- * @see OPC UA Part 6, Section 5.1.1
+ * @see OPC UA Part 4, Section 7.38
+ * @see OPC UA Part 6, Annex A
  */
+
 declare enum StatusCode {
     Good,
     Uncertain,
@@ -412,6 +442,89 @@ declare enum StatusCode {
     BadSyntaxError,
     BadMaxConnectionsReached
 }
+/**
+ * Converts an OPC UA status code to a human-readable string.
+ *
+ * OPC UA status codes have two independent parts (OPC UA Part 4, §7.38 / Part 6, §5.1.1):
+ *
+ *   Bits 31:30  Severity   00=Good, 01=Uncertain, 10/11=Bad
+ *   Bits 27:16  SubCode    Named code (e.g. 0x34 = NodeIdUnknown)
+ *   Bit  15     StructureChanged – data type structure of the variable changed
+ *   Bit  14     SemanticsChanged – engineering unit or range of the variable changed
+ *   Bits 13:12  InfoType   00=not used, 01=DataValue info bits active
+ *   Bit  11     Overflow   – (DataValue) notifications dropped from queue
+ *   Bits 10:9   LimitBits  – (DataValue) 00=None, 01=Low, 10=High, 11=Constant
+ *
+ * All named codes (BadNodeIdUnknown, Good, …) have their lower 16 bits = 0.
+ * The lower 16 bits are flag bits and are decoded separately via {@link StatusCodeGetFlagBits}.
+ *
+ * @see OPC UA Part 4, Section 7.38
+ * @see OPC UA Part 6, Section 5.1.1 and Annex A
+ */
+/**
+ * Returns the name of the StatusCode enum member for the given code.
+ * Flag bits (lower 16 bits) are masked off before looking up the name.
+ * Returns the hex string if the code is not in the enum.
+ *
+ * Examples:
+ *   StatusCodeToString(0x00000000) → "Good"
+ *   StatusCodeToString(0x80340000) → "BadNodeIdUnknown"
+ *   StatusCodeToString(0x00000400) → "Good"  (flags ignored for name lookup)
+ *   StatusCodeToString(undefined)  → "Unknown"
+ *
+ * @see OPC UA Part 4, Section 7.38
+ */
+declare function StatusCodeToString(statusCode?: number): string;
+/**
+ * Returns the full status code value (including flag bits) as an uppercase hex string.
+ *
+ * Examples:
+ *   StatusCodeToStringNumber(0x00000000) → "0x00000000"
+ *   StatusCodeToStringNumber(0x80340000) → "0x80340000"
+ *   StatusCodeToStringNumber(0x00000400) → "0x00000400"
+ */
+declare function StatusCodeToStringNumber(statusCode?: number): string;
+/** Flag bits decoded from the lower 16 bits of an OPC UA StatusCode value. */
+interface StatusCodeFlagBits {
+    /** Bit 15 – the data type structure of the variable has changed. */
+    StructureChanged: boolean;
+    /** Bit 14 – engineering unit or range of the variable has changed. */
+    SemanticsChanged: boolean;
+    /** Bit 11 – notifications were dropped from the queue (DataValue). */
+    Overflow: boolean;
+    /** Bits 10:9 = 01 – value is pegged at the low engineering limit. */
+    LimitLow: boolean;
+    /** Bits 10:9 = 10 – value is pegged at the high engineering limit. */
+    LimitHigh: boolean;
+    /** Bits 10:9 = 11 – value is a constant and cannot change. */
+    LimitConstant: boolean;
+}
+/**
+ * Decodes the flag bits (lower 16 bits) of a StatusCode value.
+ *
+ * Examples:
+ *   StatusCodeGetFlagBits(0x00000000) → { StructureChanged: false, SemanticsChanged: false, … }
+ *   StatusCodeGetFlagBits(0x00000400) → { …, LimitHigh: true, … }
+ *   StatusCodeGetFlagBits(0x00008C00) → { StructureChanged: true, Overflow: true, LimitHigh: true, … }
+ *
+ * @see OPC UA Part 6, Section 5.1.1, Table 49
+ */
+declare function StatusCodeGetFlagBits(statusCode?: number): StatusCodeFlagBits;
+/**
+ * Returns true if the base code of `statusCode` matches the given `expected` StatusCode enum value.
+ * Flag bits (lower 16 bits) are masked off before comparison.
+ *
+ * Examples:
+ *   StatusCodeIs(0x00000000, StatusCode.Good)          → true
+ *   StatusCodeIs(0x00000400, StatusCode.Good)           → true  (flag bits ignored)
+ *   StatusCodeIs(1024,        StatusCode.Good)           → true  (1024 = 0x00000400)
+ *   StatusCodeIs(0x80340000, StatusCode.BadNodeIdUnknown) → true
+ *   StatusCodeIs(0x80340000, StatusCode.Good)            → false
+ *
+ * @param statusCode - The raw status code value to test.
+ * @param expected   - The StatusCode enum member to compare against.
+ */
+declare function StatusCodeIs(statusCode: number, expected: StatusCode): boolean;
 
 /**
  * OPC UA QualifiedName Type
@@ -623,9 +736,9 @@ declare enum ExtensionObjectEncoding {
  */
 declare class ExtensionObject {
     /**
-     * The NodeId that identifies the type of structure encoded in the body.
+     * The NodeId (or ExpandedNodeId) that identifies the type of structure encoded in the body.
      */
-    readonly typeId: NodeId;
+    readonly typeId: NodeId | ExpandedNodeId;
     /**
      * The encoding used for the body.
      */
@@ -644,7 +757,7 @@ declare class ExtensionObject {
      * @param encoding - The encoding type
      * @param body - The encoded body (null for None encoding)
      */
-    constructor(typeId: NodeId, encoding?: ExtensionObjectEncoding, data?: IOpcType);
+    constructor(typeId: NodeId | ExpandedNodeId, encoding?: ExtensionObjectEncoding, data?: IOpcType);
     /**
      * Creates an ExtensionObject with no body.
      *
@@ -667,7 +780,7 @@ declare class ExtensionObject {
      * @param body - The XML encoded body
      * @returns A new ExtensionObject with Xml encoding
      */
-    static newXml(typeId: NodeId, data: IOpcType): ExtensionObject;
+    static newXml(typeId: NodeId | ExpandedNodeId, data: IOpcType): ExtensionObject;
 }
 
 /**
@@ -717,26 +830,6 @@ declare class XmlElement {
      * @returns The number of characters
      */
     get length(): number;
-    /**
-     * Validate if this XmlElement contains valid XML
-     *
-     * Note: This is a simple check, not a full XML validator.
-     * For production use, consider using a proper XML parser.
-     *
-     * @returns true if the string appears to be valid XML
-     *
-     * @example
-     * ```typescript
-     * const xml = new XmlElement("<root></root>");
-     * xml.isValid(); // true
-     * ```
-     */
-    isValid(): boolean;
-    /**
-     * Basic XML structure validation (for Node.js environment)
-     * Checks for matching opening and closing tags
-     */
-    private static checkBasicXmlStructure;
     /**
      * Escape special XML characters in text content
      *
@@ -925,6 +1018,95 @@ declare class DiagnosticInfo {
     toString(includeInner?: boolean): string;
 }
 
+/**
+ * OPC UA Primitive Type Mappings
+ *
+ * We try to use the JS built in types wherever we can. But sometimes, often in the context
+ * where Variant is involved, we need to have a wrapper type that includes the BuiltInType
+ * for type checking and encoding purposes. In those cases, we define a wrapper type with a
+ * value and a type field. For simple cases like boolean, we can just use the native boolean
+ * type directly as UaBoolean.
+ * @module primitives
+ */
+
+type UaBoolean = boolean;
+/**
+ * OPC UA Builtin Type Numeric IDs
+ *
+ * These correspond to the NodeId numeric identifiers defined in OPC UA Part 6, Table 1.
+ */
+type UaSbyte = {
+    value: number;
+    readonly type: BuiltInType.SByte;
+};
+declare const uaSbyte: (value: number) => UaSbyte;
+type UaByte = {
+    value: number;
+    readonly type: BuiltInType.Byte;
+};
+declare const uaByte: (value: number) => UaByte;
+type UaInt16 = {
+    value: number;
+    readonly type: BuiltInType.Int16;
+};
+declare const uaInt16: (value: number) => UaInt16;
+type UaUint16 = {
+    value: number;
+    readonly type: BuiltInType.UInt16;
+};
+declare const uaUint16: (value: number) => UaUint16;
+type UaInt32 = {
+    value: number;
+    readonly type: BuiltInType.Int32;
+};
+declare const uaInt32: (value: number) => UaInt32;
+type UaUint32 = {
+    value: number;
+    readonly type: BuiltInType.UInt32;
+};
+declare const uaUint32: (value: number) => UaUint32;
+type UaInt64 = {
+    value: bigint;
+    readonly type: BuiltInType.Int64;
+};
+declare const uaInt64: (value: bigint) => UaInt64;
+type UaUint64 = {
+    value: bigint;
+    readonly type: BuiltInType.UInt64;
+};
+declare const uaUint64: (value: bigint) => UaUint64;
+type UaFloat = {
+    value: number;
+    readonly type: BuiltInType.Float;
+};
+declare const uaFloat: (value: number) => UaFloat;
+type UaDouble = {
+    value: number;
+    readonly type: BuiltInType.Double;
+};
+declare const uaDouble: (value: number) => UaDouble;
+/**
+ * OPC UA String primitive type.
+ *
+ * A String in OPC UA can be null (encoded as length -1 in binary).
+ * Using `string | null` instead of `string | undefined` aligns with the
+ * OPC UA specification where null is an explicit, valid value distinct
+ * from an empty string. Same is true for ByteString which can be null (length -1)
+ * or a Uint8Array.
+ */
+type UaString = string | null;
+type UaByteString = Uint8Array | null;
+type UaGuid = {
+    value: string;
+    readonly type: BuiltInType.Guid;
+};
+declare const uaGuid: (value: string) => UaGuid;
+type UaDateTime = Date;
+/**
+ * Union of all OPC UA primitive types accepted by {@link Variant.newFrom}.
+ */
+type UaPrimitive = UaBoolean | UaSbyte | UaByte | UaInt16 | UaUint16 | UaInt32 | UaUint32 | UaInt64 | UaUint64 | UaFloat | UaDouble | UaString | UaDateTime | UaGuid | UaByteString;
+
 /**
  * OPC UA Variant Type (i=24)
  *
@@ -934,41 +1116,10 @@ declare class DiagnosticInfo {
  * @see OPC UA Part 6, Section 5.1.2
  */
 
-/**
- * Enumeration of variant types based on BuiltinType NodeIds.
- */
-declare enum VariantType {
-    Null = 0,
-    Boolean = 1,
-    SByte = 2,
-    Byte = 3,
-    Int16 = 4,
-    UInt16 = 5,
-    Int32 = 6,
-    UInt32 = 7,
-    Int64 = 8,
-    UInt64 = 9,
-    Float = 10,
-    Double = 11,
-    String = 12,
-    DateTime = 13,
-    Guid = 14,
-    ByteString = 15,
-    XmlElement = 16,
-    NodeId = 17,
-    ExpandedNodeId = 18,
-    StatusCode = 19,
-    QualifiedName = 20,
-    LocalizedText = 21,
-    ExtensionObject = 22,
-    DataValue = 23,
-    Variant = 24,
-    DiagnosticInfo = 25
-}
 /**
  * Type union representing all possible variant values.
  */
-type VariantValue = undefined | boolean | number | bigint | string | Date | Uint8Array | NodeId | ExpandedNodeId | QualifiedName | LocalizedText | Uint8Array | XmlElement | ExtensionObject | DataValue | StatusCode | DiagnosticInfo | Variant;
+type VariantValue = null | undefined | boolean | number | bigint | string | Date | Uint8Array | NodeId | ExpandedNodeId | QualifiedName | LocalizedText | XmlElement | ExtensionObject | DataValue | StatusCode | DiagnosticInfo | Variant;
 /**
  * Type for variant arrays.
  */
@@ -997,7 +1148,7 @@ declare class Variant {
     /**
      * The variant type identifier.
      */
-    readonly variantType: VariantType;
+    readonly type: BuiltInType;
     /**
      * The variant value (scalar or array).
      */
@@ -1008,20 +1159,6 @@ declare class Variant {
      * For 2D arrays, this is [rows, cols], etc.
      */
     readonly arrayDimensions: number[] | undefined;
-    /**
-     * Creates a new Variant.
-     *
-     * @param variantType - The type of value stored in the variant
-     * @param value - The scalar or array value
-     * @param arrayDimensions - Optional array dimensions for structured arrays
-     */
-    constructor(variantType?: VariantType, value?: VariantValue | VariantArrayValue, arrayDimensions?: number[] | undefined);
-    /**
-     * Creates a undefined variant.
-     *
-     * @returns A new Variant with undefined value
-     */
-    static createNull(): Variant;
     /**
      * Checks if this variant is null.
      *
@@ -1059,6 +1196,45 @@ declare class Variant {
      * @returns A string representation of the variant
      */
     toString(): string;
+    /**
+     * Creates a {@link Variant} from any OPC UA built-in scalar value or a
+     * homogeneous array of such values.
+     *
+     * **Scalar usage** — pass any concrete OPC UA type and the BuiltInType is
+     * inferred automatically:
+     * ```ts
+     * Variant.newFrom('hello')              // String
+     * Variant.newFrom(uaDouble(3.14))       // Double
+     * Variant.newFrom(new LocalizedText('en', 'Hi'))
+     * ```
+     *
+     * **Array usage** — pass a plain JS array of a single homogeneous element type:
+     * ```ts
+     * Variant.newFrom([uaDouble(1.0), uaDouble(2.0)])          // Double[]
+     * Variant.newFrom([new LocalizedText('en', 'A'), ...])     // LocalizedText[]
+     * ```
+     *
+     * Throws if the array is empty (element type cannot be inferred), if the
+     * first element is null/undefined, or if elements have mixed types.
+     *
+     * Note: `Variant` itself is excluded from the accepted types intentionally —
+     * callers should work with concrete OPC UA types.
+     */
+    static newFrom(value: UaPrimitive | NodeId | ExpandedNodeId | QualifiedName | LocalizedText | XmlElement | ExtensionObject | DataValue | DiagnosticInfo | null | undefined | UaPrimitive[] | NodeId[] | ExpandedNodeId[] | QualifiedName[] | LocalizedText[] | XmlElement[] | ExtensionObject[] | DataValue[] | DiagnosticInfo[]): Variant;
+    /**
+     * Creates a undefined variant.
+     *
+     * @returns A new Variant with undefined value
+     */
+    static newNull(): Variant;
+    /**
+     * Creates a new Variant.
+     *
+     * @param variantType - The type of value stored in the variant
+     * @param value - The scalar or array value
+     * @param arrayDimensions - Optional array dimensions for structured arrays
+     */
+    constructor(variantType?: BuiltInType, value?: VariantValue | VariantArrayValue, arrayDimensions?: number[] | undefined);
 }
 
 /**
@@ -1192,130 +1368,12 @@ declare class Decoder {
     private encodingIdMap;
     registerReaderFactory(writerId: string, factory: (data: unknown) => IReader): void;
     registerEncodingId(encodingId: number, writerId: string, typeId: number): void;
-    registerType<T>(typeId: number, decoder: (decoder: IReader) => unknown): void;
+    registerType(typeId: number, decoder: (decoder: IReader) => unknown): void;
     decode<T extends IOpcType>(data: unknown, encodingType: string): T;
     decodeWithEncodingId<T extends IOpcType>(encodingId: number, reader: IReader): T;
     decodeWithTypeId<T extends IOpcType>(typeId: number, reader: IReader): T;
 }
 
-/**
- * OPC UA Primitive Type Mappings
- *
- * Defines TypeScript type mappings for OPC UA primitive types.
- * Primitives map directly to native TypeScript types without wrapper classes.
- *
- * @module primitives
- */
-/**
- * OPC UA Builtin Type Numeric IDs
- *
- * These correspond to the NodeId numeric identifiers defined in OPC UA Part 6, Table 1.
- */
-declare const BuiltinTypeId: {
-    readonly Boolean: 1;
-    readonly SByte: 2;
-    readonly Byte: 3;
-    readonly Int16: 4;
-    readonly UInt16: 5;
-    readonly Int32: 6;
-    readonly UInt32: 7;
-    readonly Int64: 8;
-    readonly UInt64: 9;
-    readonly Float: 10;
-    readonly Double: 11;
-    readonly String: 12;
-    readonly DateTime: 13;
-    readonly Guid: 14;
-    readonly ByteString: 15;
-    readonly XmlElement: 16;
-    readonly NodeId: 17;
-    readonly ExpandedNodeId: 18;
-    readonly StatusCode: 19;
-    readonly QualifiedName: 20;
-    readonly LocalizedText: 21;
-    readonly ExtensionObject: 22;
-    readonly DataValue: 23;
-    readonly Variant: 24;
-    readonly DiagnosticInfo: 25;
-};
-/**
- * Type representing any builtin type ID
- */
-type BuiltinTypeIdValue = typeof BuiltinTypeId[keyof typeof BuiltinTypeId];
-/**
- * OPC UA String primitive type.
- *
- * A String in OPC UA can be null (encoded as length -1 in binary).
- * Using `string | null` instead of `string | undefined` aligns with the
- * OPC UA specification where null is an explicit, valid value distinct
- * from an empty string.
- */
-type UaString = string | null;
-/**
- * OPC UA ByteString primitive type.
- *
- * A ByteString in OPC UA can be null (encoded as length -1 in binary).
- * Using `Uint8Array | null` instead of `Uint8Array | undefined` aligns
- * with the OPC UA specification where null is an explicit, valid value
- * distinct from an empty byte array.
- */
-type UaByteString = Uint8Array | null;
-/**
- * Primitive type mappings: OPC UA type → TypeScript type
- *
- * Primitives use native TypeScript types directly:
- * - Boolean → boolean
- * - All numeric types → number (TypeScript doesn't distinguish integer types)
- * - String → string
- * - DateTime → Date
- * - Guid → string (UUID format)
- */
-type PrimitiveTypeMap = {
-    [BuiltinTypeId.Boolean]: boolean;
-    [BuiltinTypeId.SByte]: number;
-    [BuiltinTypeId.Byte]: number;
-    [BuiltinTypeId.Int16]: number;
-    [BuiltinTypeId.UInt16]: number;
-    [BuiltinTypeId.Int32]: number;
-    [BuiltinTypeId.UInt32]: number;
-    [BuiltinTypeId.Int64]: bigint;
-    [BuiltinTypeId.UInt64]: bigint;
-    [BuiltinTypeId.Float]: number;
-    [BuiltinTypeId.Double]: number;
-    [BuiltinTypeId.String]: UaString;
-    [BuiltinTypeId.DateTime]: Date;
-    [BuiltinTypeId.Guid]: string;
-    [BuiltinTypeId.ByteString]: UaByteString;
-};
-/**
- * Get the TypeScript type name for a primitive builtin type
- *
- * @param typeId - The numeric builtin type ID
- * @returns The TypeScript type name as a string, or undefined if not a primitive
- *
- * @example
- * ```typescript
- * getPrimitiveTypeName(1);  // "boolean"
- * getPrimitiveTypeName(6); // "number"
- * getPrimitiveTypeName(12); // "string"
- * getPrimitiveTypeName(17); // undefined (NodeId is complex, not primitive)
- * ```
- */
-declare function getPrimitiveTypeName(typeId: number): string | undefined;
-/**
- * Check if a builtin type ID represents a primitive type
- *
- * @param typeId - The numeric builtin type ID
- * @returns true if the type is primitive, false otherwise
- *
- * @example
- * ```typescript
- * isPrimitive(1);  // true (Boolean)
- * isPrimitive(17); // false (NodeId is complex)
- * ```
- */
-declare function isPrimitive(typeId: number): boolean;
-
 /**
  * @fileoverview Decoder interface for OPC UA data decoding
  * @module codec/interfaces/decoder
@@ -1401,7 +1459,7 @@ interface IReader {
      * Binary: Int32 length prefix + UTF-8 bytes (-1 indicates null)
      * @returns The string value, or null if the length prefix is -1 (OPC UA null)
      */
-    readString(): UaString;
+    readString(): string | null;
     /**
      * Decode a DateTime value.
      * Binary: Int64 representing 100-nanosecond intervals since January 1, 1601 UTC
@@ -1488,7 +1546,7 @@ declare class Encoder {
     private encoders;
     private writerFactories;
     registerWriterFactory(writerId: string, factory: () => IWriter): void;
-    registerType<T>(typeId: number, encoder: (encoder: IWriter, value: any) => void): void;
+    registerType(typeId: number, encoder: (encoder: IWriter, value: unknown) => void): void;
     encode<T extends IOpcType>(value: T, encodingType: string): unknown;
     encodeWithoutId<T extends IOpcType>(value: T, encodingType: string): unknown;
 }
@@ -1579,7 +1637,7 @@ interface IWriter {
      * Binary: Int32 length prefix + UTF-8 bytes
      * @param value The string value; null or undefined is encoded as length -1 (OPC UA null)
      */
-    writeString(value: UaString): void;
+    writeString(value: string | null): void;
     /**
      * Encode a DateTime value.
      * Binary: Int64 representing 100-nanosecond intervals since January 1, 1601 UTC
@@ -1597,13 +1655,13 @@ interface IWriter {
      * Binary: Int32 length prefix + bytes
      * @param value The byte array; null or undefined is encoded as length -1 (OPC UA null)
      */
-    writeByteString(value: Buffer | Uint8Array | null | undefined): void;
+    writeByteString(value: Uint8Array | null | undefined): void;
     /**
      * Encode an XmlElement value.
      * Binary: Int32 length prefix + UTF-8 encoded XML
      * @param value The XML string (undefined encoded as length -1)
      */
-    writeXmlElement(value: string): void;
+    writeXmlElement(value: XmlElement | string): void;
     /**
      * Encode an array with Int32 length prefix.
      * Binary: Int32 length where -1=undefined, 0=empty, positive=count
@@ -1696,7 +1754,7 @@ declare class BinaryReader implements IReader {
     readUInt64(): bigint;
     readFloat(): number;
     readDouble(): number;
-    readString(): UaString;
+    readString(): string | null;
     readDateTime(): Date;
     readGuid(): string;
     readByteString(): Uint8Array | null;
@@ -1758,11 +1816,6 @@ declare class BinaryReader implements IReader {
      * @see OPC 10000-6 Table 24
      */
     readDiagnosticInfo(): DiagnosticInfo;
-    /**
-     * Decode a NodeId with optional flag masking (used internally by readExpandedNodeId).
-     */
-    private readNodeIdWithMask;
-    private readVariantValue;
     getPosition(): number;
     /**
      * Read all remaining bytes from the current position to the end of the buffer.
@@ -1830,11 +1883,11 @@ declare class BinaryWriter implements IWriter {
     writeUInt64(value: bigint): void;
     writeFloat(value: number): void;
     writeDouble(value: number): void;
-    writeString(value: UaString): void;
+    writeString(value: string | null): void;
     writeDateTime(value: Date): void;
     writeGuid(value: string): void;
     writeByteString(value: Uint8Array | null | undefined): void;
-    writeXmlElement(value: string): void;
+    writeXmlElement(value: XmlElement | string): void;
     /**
      * Write an array with Int32 length prefix.
      * Per FR-011: -1 = null, 0 = empty, positive = element count
@@ -1892,18 +1945,91 @@ declare class BinaryWriter implements IWriter {
      * @see OPC 10000-6 Table 24
      */
     writeDiagnosticInfo(value: DiagnosticInfo): void;
-    private writeVariantValue;
     constructor(initialSize?: number);
 }
 
-declare abstract class Configuration {
-    applicationName: string;
-    applicationUri: string;
-    productName: string;
-    productUri: string;
-    encoder: Encoder;
-    decoder: Decoder;
-    constructor(applicationName: string, applicationUri: string, productName: string, productUri: string, encoder: Encoder, decoder: Decoder);
+interface IEncryptionAlgorithm {
+    IsAuthenticated(): boolean;
+    GetMaxPayload(maxCipherTextSize: number): number;
+    GetEncryptedSize(dataSize: number): number;
+    GetPadding(bytesToWrite: number): Uint8Array;
+    HasPadding(): boolean;
+    Encrypt(cleartext: Uint8Array): Uint8Array;
+    Decrypt(ciphertext: Uint8Array): Uint8Array;
+    CalculateSignature(message: Uint8Array): Uint8Array;
+    VerifySignature(message: Uint8Array, signature: Uint8Array): boolean;
+    GetSignatureLength(): number;
+    SignatureUri(): string;
+}
+
+type MsgType = number;
+
+declare class MsgHeader$1 {
+    msgType: MsgType;
+    messageSize: number;
+    secureChannelId: number;
+    static Size: number;
+    static decode(buffer: BinaryReader): MsgHeader$1;
+    encode(buffer: BinaryWriter): void;
+    constructor(msgType: MsgType, messageSize: number, secureChannelId: number);
+}
+
+declare class MsgSequenceHeader {
+    sequenceNumber: number;
+    requestId: number;
+    static Size: number;
+    static decode(buffer: BinaryReader): MsgSequenceHeader;
+    encode(buffer: BinaryWriter): void;
+    constructor(sequenceNumber: number, requestId: number);
+}
+
+declare abstract class MsgBase$1 {
+    header: MsgHeader$1;
+    sequenceHeader: MsgSequenceHeader;
+    body: unknown;
+    static DecryptAndVerify(data: Uint8Array, encryptionAlgorithm: IEncryptionAlgorithm, headerLength: number): Uint8Array;
+    protected Encrypt(buffer: BinaryWriter, encryptionAlgorithm: IEncryptionAlgorithm, headerSize: number, paddingPosition: number): Uint8Array;
+    abstract encode(buffer: BinaryWriter, encryptionAlgorithm: IEncryptionAlgorithm): void;
+    constructor(header: MsgHeader$1, sequenceHeader: MsgSequenceHeader, body: unknown);
+}
+
+/**
+ * TransformStream that binary-encodes each {@link IOpcType} chunk into a
+ * {@link Uint8Array} using the supplied {@link Encoder}.
+ *
+ * Use this to separate the OPC UA service-encoding step from the secure-channel
+ * framing step, keeping each stage composable:
+ *
+ * ```ts
+ * requestStream
+ *   .pipeThrough(new SecureChannelTypeEncoder(config.encoder))
+ *   .pipeThrough(new SecureChannelFramingTransform(context))
+ *   .pipeTo(wsSendable);
+ * ```
+ */
+declare class SecureChannelTypeEncoder extends TransformStream<MsgBase$1, MsgBase$1> {
+    constructor(encoder: Encoder);
+}
+
+/**
+ * TransformStream that binary-decodes each raw-body {@link Uint8Array} into
+ * the corresponding {@link IOpcType} using the supplied {@link Decoder}.
+ *
+ * Abort messages (MSG+A) carry a transport-level StatusCode+Reason payload,
+ * not an OPC UA service response, so their bodies are passed through as-is
+ * for the {@link SecureChannelFacade} to decode and report.
+ *
+ * Use this to separate the OPC UA service-decoding step from the secure-channel
+ * framing step, keeping each stage composable:
+ *
+ * ```ts
+ * bodyBytesReadable
+ *   .pipeThrough(new BinaryDecoderTransform(config.decoder))
+ *   .pipeTo(responseHandler.writable);
+ * ```
+ */
+declare class SecureChannelTypeDecoder extends TransformStream<MsgBase$1, MsgBase$1> {
+    constructor(decoder: Decoder);
 }
 
 /**
@@ -1912,7 +2038,7 @@ declare abstract class Configuration {
  * This file was automatically generated from OPC UA NodeSet2 XML.
  *
  * Source: Opc.Ua.NodeSet2.Services.xml
- * Generated: 2026-02-27T12:42:09.143Z
+ * Generated: 2026-03-16T04:16:36.493Z
  * Generator: @opcua/nodeset-generator
  *
  * Any changes made to this file will be lost when regenerated.
@@ -2489,15 +2615,6 @@ declare enum UserTokenTypeEnum {
     IssuedToken = 3
 }
 
-interface ITransportChannel {
-    connect(): Promise<boolean>;
-    disconnect(): void;
-    send(data: Uint8Array): Promise<void>;
-    onMessage?: (data: Uint8Array) => void;
-    getEndpointUrl(): string;
-    getCodecType(): string;
-}
-
 interface ISecureChannel {
     getSecurityPolicy(): string;
     getSecurityMode(): MessageSecurityModeEnum;
@@ -2505,29 +2622,28 @@ interface ISecureChannel {
     issueServiceRequest(request: IOpcType): Promise<IOpcType>;
 }
 
-declare class SecureChannel implements ISecureChannel {
-    private channel;
-    private configuration;
-    private sequenceNumber;
-    private requestNumber;
-    private securityPolicy;
-    private resolvers;
-    private id;
-    private token;
-    private chunkBuffers;
-    openSecureChannelRequest(): Promise<void>;
-    disconnect(): Promise<void>;
-    getSecurityPolicy(): string;
-    getSecurityMode(): MessageSecurityModeEnum;
-    getEndpointUrl(): string;
-    issueServiceRequest(request: IOpcType): Promise<IOpcType>;
-    private onMessage;
-    private onReceivedMessage;
-    constructor(channel: ITransportChannel, configuration: Configuration);
+interface ILogger {
+    trace(msg: string | (() => string), ...args: unknown[]): void;
+    debug(msg: string | (() => string), ...args: unknown[]): void;
+    info(msg: string | (() => string), ...args: unknown[]): void;
+    warn(msg: string | (() => string), ...args: unknown[]): void;
+    error(msg: string | (() => string), ...args: unknown[]): void;
+    fatal(msg: string | (() => string), ...args: unknown[]): void;
 }
 
-declare class ChannelFactory {
-    static createChannel(endpointUrl: string): ITransportChannel;
+interface ILoggerFactory {
+    getLogger(category: string): ILogger;
+}
+
+declare abstract class Configuration {
+    applicationName: string;
+    applicationUri: string;
+    productName: string;
+    productUri: string;
+    encoder: Encoder;
+    decoder: Decoder;
+    loggerFactory: ILoggerFactory;
+    constructor(applicationName: string, applicationUri: string, productName: string, productUri: string, encoder: Encoder, decoder: Decoder, loggerFactory: ILoggerFactory);
 }
 
 /**
@@ -2536,7 +2652,7 @@ declare class ChannelFactory {
  * This file was automatically generated from OPC UA NodeSet2 XML.
  *
  * Source: Opc.Ua.NodeSet2.Services.xml
- * Generated: 2026-02-27T12:42:09.143Z
+ * Generated: 2026-03-16T04:16:36.493Z
  * Generator: @opcua/nodeset-generator
  *
  * Any changes made to this file will be lost when regenerated.
@@ -2550,7 +2666,7 @@ declare function registerEncoders(encoder: Encoder): void;
  * This file was automatically generated from OPC UA NodeSet2 XML.
  *
  * Source: Opc.Ua.NodeSet2.Services.xml
- * Generated: 2026-02-27T12:42:09.143Z
+ * Generated: 2026-03-16T04:16:36.493Z
  * Generator: @opcua/nodeset-generator
  *
  * Any changes made to this file will be lost when regenerated.
@@ -2567,7 +2683,7 @@ declare function registerXmlDecoders(decoder: Decoder): void;
  * This file was automatically generated from OPC UA NodeSet2 XML.
  *
  * Source: Opc.Ua.NodeSet2.Services.xml
- * Generated: 2026-02-27T12:42:09.143Z
+ * Generated: 2026-03-16T04:16:36.493Z
  * Generator: @opcua/nodeset-generator
  *
  * Any changes made to this file will be lost when regenerated.
@@ -4438,7 +4554,7 @@ declare class ReferenceListEntryDataType extends Structure implements IOpcType {
  * NodeId: i=19361
  * Extends: Structure
  */
-declare class LogRecord extends Structure implements IOpcType {
+declare class LogRecord$1 extends Structure implements IOpcType {
     time: Date;
     severity: number;
     eventType?: NodeId | null;
@@ -4458,7 +4574,7 @@ declare class LogRecord extends Structure implements IOpcType {
  * Extends: Structure
  */
 declare class LogRecordsDataType extends Structure implements IOpcType {
-    logRecordArray: LogRecord[];
+    logRecordArray: LogRecord$1[];
     getTypeId(): number;
     getBinaryEncodingId(): number;
     getXmlEncodingId(): number;
@@ -7897,4 +8013,319 @@ declare class Annotation extends Structure implements IOpcType {
     getJsonEncodingId(): number;
 }
 
-export { ActionMethodDataType, ActionStateEnum, ActionTargetDataType, ActivateSessionRequest, ActivateSessionResponse, AddNodesItem, AddNodesRequest, AddNodesResponse, AddNodesResult, AddReferencesItem, AddReferencesRequest, AddReferencesResponse, AdditionalParametersType, AggregateConfiguration, AggregateFilter, AggregateFilterResult, AliasNameDataType, Annotation, AnnotationDataType, AnonymousIdentityToken, ApplicationConfigurationDataType, ApplicationDescription, ApplicationIdentityDataType, ApplicationTypeEnum, Argument, AttributeOperand, AuthorizationServiceConfigurationDataType, AxisInformation, AxisScaleEnumerationEnum, BaseConfigurationDataType, BaseConfigurationRecordDataType, BinaryReader, BinaryWriter, BitFieldDefinition, BrokerConnectionTransportDataType, BrokerDataSetReaderTransportDataType, BrokerDataSetWriterTransportDataType, BrokerTransportQualityOfServiceEnum, BrokerWriterGroupTransportDataType, BrowseDescription, BrowseDirectionEnum, BrowseNextRequest, BrowseNextResponse, BrowsePath, BrowsePathResult, BrowsePathTarget, BrowseRequest, BrowseResponse, BrowseResult, BrowseResultMaskEnum, BuildInfo, BuiltinTypeId, type BuiltinTypeIdValue, CallMethodRequest, CallMethodResult, CallRequest, CallResponse, CancelRequest, CancelResponse, CartesianCoordinates, CertificateGroupDataType, ChannelFactory, ChannelSecurityToken, ChassisIdSubtypeEnum, CloseSecureChannelRequest, CloseSecureChannelResponse, CloseSessionRequest, CloseSessionResponse, ComplexNumberType, Configuration, ConfigurationUpdateTargetType, ConfigurationUpdateTypeEnum, ConfigurationVersionDataType, ConnectionTransportDataType, ContentFilter, ContentFilterElement, ContentFilterElementResult, ContentFilterResult, ConversionLimitEnumEnum, CreateMonitoredItemsRequest, CreateMonitoredItemsResponse, CreateSessionRequest, CreateSessionResponse, CreateSubscriptionRequest, CreateSubscriptionResponse, CurrencyUnitType, DataChangeFilter, DataChangeNotification, DataChangeTriggerEnum, DataSetMetaDataType, DataSetOrderingTypeEnum, DataSetReaderDataType, DataSetReaderMessageDataType, DataSetReaderTransportDataType, DataSetWriterDataType, DataSetWriterMessageDataType, DataSetWriterTransportDataType, DataTypeAttributes, DataTypeDefinition, DataTypeDescription, DataTypeNode, DataTypeSchemaHeader, DataValue, DatagramConnectionTransport2DataType, DatagramConnectionTransportDataType, DatagramDataSetReaderTransportDataType, DatagramWriterGroupTransport2DataType, DatagramWriterGroupTransportDataType, DeadbandTypeEnum, DecimalDataType, Decoder, DeleteAtTimeDetails, DeleteEventDetails, DeleteMonitoredItemsRequest, DeleteMonitoredItemsResponse, DeleteNodesItem, DeleteNodesRequest, DeleteNodesResponse, DeleteRawModifiedDetails, DeleteReferencesItem, DeleteReferencesRequest, DeleteReferencesResponse, DeleteSubscriptionsRequest, DeleteSubscriptionsResponse, DiagnosticInfo, DiagnosticsLevelEnum, DiscoveryConfiguration, DoubleComplexNumberType, DtlsPubSubConnectionDataType, DuplexEnum, EUInformation, ElementOperand, Encoder, EndpointConfiguration, EndpointDataType, EndpointDescription, EndpointType, EndpointUrlListDataType, EnumDefinition, EnumDescription, EnumField, EnumValueType, EphemeralKeyType, EventFieldList, EventFilter, EventFilterResult, EventNotificationList, ExceptionDeviationFormatEnum, ExpandedNodeId, ExtensionObject, FieldMetaData, FieldTargetDataType, FilterOperand, FilterOperatorEnum, FindServersOnNetworkRequest, FindServersOnNetworkResponse, FindServersRequest, FindServersResponse, Frame, GenericAttributeValue, GenericAttributes, GetEndpointsRequest, GetEndpointsResponse, HistoryData, HistoryEvent, HistoryEventFieldList, HistoryModifiedData, HistoryModifiedEvent, HistoryReadDetails, HistoryReadRequest, HistoryReadResponse, HistoryReadResult, HistoryReadValueId, HistoryUpdateDetails, HistoryUpdateRequest, HistoryUpdateResponse, HistoryUpdateResult, HistoryUpdateTypeEnum, type IOpcType, type IReader, type ISecureChannel, type IWriter, IdTypeEnum, IdentityCriteriaTypeEnum, IdentityMappingRuleType, InstanceNode, InterfaceAdminStatusEnum, InterfaceOperStatusEnum, IssuedIdentityToken, JsonActionMetaDataMessage, JsonActionNetworkMessage, JsonActionRequestMessage, JsonActionResponderMessage, JsonActionResponseMessage, JsonApplicationDescriptionMessage, JsonDataSetMessage, JsonDataSetMetaDataMessage, JsonDataSetReaderMessageDataType, JsonDataSetWriterMessageDataType, JsonNetworkMessage, JsonPubSubConnectionMessage, JsonServerEndpointsMessage, JsonStatusMessage, JsonWriterGroupMessageDataType, KeyValuePair, LinearConversionDataType, LiteralOperand, LldpManagementAddressTxPortType, LldpManagementAddressType, LldpTlvType, LocalizedText, LogRecord, LogRecordsDataType, ManAddrIfSubtypeEnum, MdnsDiscoveryConfiguration, MessageSecurityModeEnum, MethodAttributes, MethodNode, ModelChangeStructureDataType, ModelChangeStructureVerbMaskEnum, ModificationInfo, ModifyMonitoredItemsRequest, ModifyMonitoredItemsResponse, ModifySubscriptionRequest, ModifySubscriptionResponse, MonitoredItemCreateRequest, MonitoredItemCreateResult, MonitoredItemModifyRequest, MonitoredItemModifyResult, MonitoredItemNotification, MonitoringFilter, MonitoringFilterResult, MonitoringModeEnum, MonitoringParameters, NameValuePair, NamingRuleTypeEnum, NegotiationStatusEnum, NetworkAddressDataType, NetworkAddressUrlDataType, NetworkGroupDataType, Node, NodeAttributes, NodeAttributesMaskEnum, NodeClassEnum, NodeId, NodeIdType, NodeReference, NodeTypeDescription, NotificationData, NotificationMessage, ObjectAttributes, ObjectNode, ObjectTypeAttributes, ObjectTypeNode, OpenFileModeEnum, OpenSecureChannelRequest, OpenSecureChannelResponse, OptionSet, Orientation, OverrideValueHandlingEnum, ParsingResult, PerformUpdateTypeEnum, PortIdSubtypeEnum, PortableNodeId, PortableQualifiedName, type PrimitiveTypeMap, PriorityMappingEntryType, ProgramDiagnostic2DataType, ProgramDiagnosticDataType, PubSubConfiguration2DataType, PubSubConfigurationDataType, PubSubConfigurationRefDataType, PubSubConfigurationValueDataType, PubSubConnectionDataType, PubSubDiagnosticsCounterClassificationEnum, PubSubGroupDataType, PubSubKeyPushTargetDataType, PubSubStateEnum, PublishRequest, PublishResponse, PublishedActionDataType, PublishedActionMethodDataType, PublishedDataItemsDataType, PublishedDataSetCustomSourceDataType, PublishedDataSetDataType, PublishedDataSetSourceDataType, PublishedEventsDataType, PublishedVariableDataType, QosDataType, QualifiedName, QuantityDimension, QueryDataDescription, QueryDataSet, QueryFirstRequest, QueryFirstResponse, QueryNextRequest, QueryNextResponse, Range, RationalNumber, ReadAnnotationDataDetails, ReadAtTimeDetails, ReadEventDetails, ReadEventDetails2, ReadEventDetailsSorted, ReadProcessedDetails, ReadRawModifiedDetails, ReadRequest, ReadResponse, ReadValueId, ReaderGroupDataType, ReaderGroupMessageDataType, ReaderGroupTransportDataType, ReceiveQosDataType, ReceiveQosPriorityDataType, RedundancySupportEnum, RedundantServerDataType, RedundantServerModeEnum, ReferenceDescription, ReferenceDescriptionDataType, ReferenceListEntryDataType, ReferenceNode, ReferenceTypeAttributes, ReferenceTypeNode, RegisterNodesRequest, RegisterNodesResponse, RegisterServer2Request, RegisterServer2Response, RegisterServerRequest, RegisterServerResponse, RegisteredServer, RelativePath, RelativePathElement, RepublishRequest, RepublishResponse, RequestHeader, ResponseHeader, RolePermissionType, SamplingIntervalDiagnosticsDataType, SecureChannel, SecurityGroupDataType, SecuritySettingsDataType, SecurityTokenRequestTypeEnum, SemanticChangeStructureDataType, ServerDiagnosticsSummaryDataType, ServerEndpointDataType, ServerOnNetwork, ServerStateEnum, ServerStatusDataType, ServiceCertificateDataType, ServiceCounterDataType, ServiceFault, SessionDiagnosticsDataType, SessionSecurityDiagnosticsDataType, SessionlessInvokeRequestType, SessionlessInvokeResponseType, SetMonitoringModeRequest, SetMonitoringModeResponse, SetPublishingModeRequest, SetPublishingModeResponse, SetTriggeringRequest, SetTriggeringResponse, SignatureData, SignedSoftwareCertificate, SimpleAttributeOperand, SimpleTypeDescription, SortOrderTypeEnum, SortRuleElement, SpanContextDataType, StandaloneSubscribedDataSetDataType, StandaloneSubscribedDataSetRefDataType, StatusChangeNotification, StatusResult, Structure, StructureDefinition, StructureDescription, StructureField, StructureTypeEnum, SubscribedDataSetDataType, SubscribedDataSetMirrorDataType, SubscriptionAcknowledgement, SubscriptionDiagnosticsDataType, TargetVariablesDataType, TimeZoneDataType, TimestampsToReturnEnum, TraceContextDataType, TransactionErrorType, TransferResult, TransferSubscriptionsRequest, TransferSubscriptionsResponse, TranslateBrowsePathsToNodeIdsRequest, TranslateBrowsePathsToNodeIdsResponse, TransmitQosDataType, TransmitQosPriorityDataType, TrustListDataType, TrustListMasksEnum, TsnFailureCodeEnum, TsnListenerStatusEnum, TsnStreamStateEnum, TsnTalkerStatusEnum, TypeNode, UABinaryFileDataType, type UaByteString, type UaString, UadpDataSetReaderMessageDataType, UadpDataSetWriterMessageDataType, UadpWriterGroupMessageDataType, Union, UnregisterNodesRequest, UnregisterNodesResponse, UnsignedRationalNumber, UpdateDataDetails, UpdateEventDetails, UpdateStructureDataDetails, UserIdentityToken, UserManagementDataType, UserNameIdentityToken, UserTokenPolicy, UserTokenSettingsDataType, UserTokenTypeEnum, VariableAttributes, VariableNode, VariableTypeAttributes, VariableTypeNode, Variant, type VariantArrayValue, VariantType, type VariantValue, Vector, ViewAttributes, ViewDescription, ViewNode, WriteRequest, WriteResponse, WriteValue, WriterGroupDataType, WriterGroupMessageDataType, WriterGroupTransportDataType, X509IdentityToken, XVType, XmlElement, _3DCartesianCoordinates, _3DFrame, _3DOrientation, _3DVector, getPrimitiveTypeName, isPrimitive, registerBinaryDecoders, registerEncoders, registerJsonDecoders, registerTypeDecoders, registerXmlDecoders };
+type LevelName = "TRACE" | "DEBUG" | "INFO" | "WARN" | "ERROR" | "FATAL" | "OFF";
+
+interface LogRecord {
+    time: Date;
+    level: LevelName;
+    levelValue: number;
+    category: string;
+    message: string;
+    args: unknown[];
+}
+
+interface ISink {
+    log(record: LogRecord): void;
+}
+
+interface LoggerConfig {
+    defaultLevel: LevelName;
+    categoryLevels?: Record<string, LevelName>;
+    sink?: ISink;
+    includeTimestamp?: boolean;
+}
+
+declare class LoggerFactory implements ILoggerFactory {
+    private config;
+    private cache;
+    constructor(config?: Partial<LoggerConfig>);
+    getLogger(category: string): ILogger;
+    setDefaultLevel(level: LevelName): void;
+    setCategoryLevel(categoryOrPattern: string, level: LevelName): void;
+    removeCategoryLevel(categoryOrPattern: string): void;
+    setSink(sink: ISink): void;
+}
+
+declare class ConsoleSink implements ISink {
+    private opts;
+    constructor(opts?: {
+        includeTimestamp: boolean;
+    });
+    log(record: LogRecord): void;
+}
+
+declare function getLogger(category: string): ILogger;
+declare function initLoggerProvider(provider: ILoggerFactory): void;
+
+type WebSocketOptions = {
+    endpoint: string;
+    openTimeoutMs?: number;
+    maxBufferedMessages?: number;
+};
+declare class WebSocketFascade {
+    private options;
+    private logger;
+    private webSocket?;
+    onMessageHandler: ((event: MessageEvent) => void) | null;
+    onErrorHandler: ((event: Event) => void) | null;
+    onCloseHandler: ((event: Event) => void) | null;
+    connect(): Promise<void>;
+    send(data: Uint8Array): void;
+    close(): void;
+    setOnMessage(handler: (event: MessageEvent) => void): void;
+    setOnClose(handler: (event: Event) => void): void;
+    setOnError(handler: (event: Event) => void): void;
+    private describeCloseCode;
+    constructor(options: WebSocketOptions);
+}
+
+declare class WebSocketReadableStream extends ReadableStream<Uint8Array> {
+    private readonly ws;
+    private readonly maxBufferedMessages;
+    private readonly logger;
+    private buffer;
+    private closed;
+    private errored;
+    private notifyPull;
+    private bufferPush;
+    private cleanup;
+    private sourceOnPull;
+    private sourceOnCancel;
+    private wsOnMessage;
+    constructor(ws: WebSocketFascade, maxBufferedMessages: number);
+}
+
+declare class WebSocketWritableStream extends WritableStream<Uint8Array> {
+    private ws;
+    private logger;
+    private sinkOnWrite;
+    private sinkOnClose;
+    private sinkOnAbort;
+    constructor(ws: WebSocketFascade);
+}
+
+declare class MsgHeader {
+    messageType: number;
+    messageSize: number;
+    constructor(messageType: number, messageSize: number);
+    static decode(buffer: IReader): MsgHeader;
+    encode(buffer: IWriter): void;
+}
+
+declare class MsgBase {
+    header: MsgHeader;
+    constructor(header: MsgHeader);
+}
+
+declare class TcpMessageDecoupler extends TransformStream<Uint8Array, Uint8Array> {
+    private onTcpMessage;
+    private logger;
+    private transform;
+    constructor(onTcpMessage: (message: MsgBase) => void);
+}
+
+declare class TcpMessageInjector extends TransformStream<Uint8Array, Uint8Array> {
+    private logger;
+    private controller;
+    constructor();
+    sendMessage(message: Uint8Array): void;
+}
+
+interface ICertificate {
+    getBytes(): Uint8Array;
+}
+
+declare class SecurityPolicyNone {
+    getSecurityMode(): MessageSecurityModeEnum;
+    getSecurityPolicyUri(): string;
+    getSecurityLevel(): number;
+    getCertificate(): Uint8Array;
+    createNonce(): Uint8Array;
+    verifyNonce(nonce: Uint8Array): boolean;
+    getAlgorithmSymmetric(localCertificate: ICertificate, remoteCertificate: ICertificate): IEncryptionAlgorithm;
+    getAlgorithmAsymmetric(localNonce: Uint8Array, remoteNonce: Uint8Array): IEncryptionAlgorithm;
+}
+
+/**
+ * Shared mutable state for the OPC UA Secure Conversation layer.
+ * Passed to both the chunk reader/writer and the secure channel facade so
+ * they all operate on the same channel identity and sequence counters.
+ */
+declare class SecureChannelContext {
+    readonly endpointUrl: string;
+    /**
+     * Next outgoing sequence number. Starts at 1 for non-ECC legacy profiles
+     * per OPC UA Part 6, Section 6.7.2.4.  The value 0 is used only as the
+     * LastSequenceNumber sentinel in the OPN request ("no prior sequence").
+     */
+    sequenceNumber: number;
+    /** Next outgoing request ID. The value 0 is reserved and must be skipped. */
+    requestId: number;
+    channelId: number;
+    tokenId: number;
+    maxSendBufferSize: number;
+    maxRecvBufferSize: number;
+    /** Pending chunk bodies keyed by requestId, for reassembling multi-chunk messages. */
+    chunkBuffers: Map<number, Uint8Array<ArrayBufferLike>[]>;
+    securityAlgorithm?: IEncryptionAlgorithm;
+    /** Last remote sequence number seen; undefined before the first received message. */
+    lastRemoteSequenceNumber: number | undefined;
+    readonly securityPolicy: SecurityPolicyNone;
+    /**
+     * Returns the current outgoing sequence number then advances it with
+     * UInt32 wrap-around per OPC UA Part 6, Section 6.7.2.4.  Only advances
+     * the sequence counter — use when creating additional chunks for the same
+     * message (each chunk needs its own sequence number but the same requestId).
+     */
+    nextSequenceNumber(): number;
+    /**
+     * Returns the next outgoing sequence number and request ID, then advances
+     * both counters.  Call once per outgoing message; use {@link nextSequenceNumber}
+     * for additional chunks of the same message.
+     *
+     * Handles UInt32 wrap-around per OPC UA Part 6, Section 6.7.2.4:
+     * sequence numbers reset to 1 after reaching 0xFFFFFFFF-1024; request IDs
+     * skip the reserved value 0 on wrap.
+     */
+    nextIds(): {
+        sequenceNumber: number;
+        requestId: number;
+    };
+    constructor(endpointUrl: string);
+}
+
+declare class TcpConnectionHandler {
+    private injector;
+    private context;
+    private connectResolve?;
+    private logger;
+    private buf;
+    /**
+     * Sends the OPC UA Hello message over `wsSendable` and waits for the server
+     * Acknowledge.  The WebSocket readable **must** already be piped into
+     * `this.writable` before calling this method.
+     *
+     * @param endpointUrl  The OPC UA endpoint URL (e.g. `"opc.wss://host:4840/"`).
+     * @param wsSendable   The writable side of the WebSocket duplex, used for
+     *                     sending the Hello frame.
+     * @returns `true` on a successful Acknowledge, `false` on a server Error.
+     */
+    connect(endpointUrl: string): Promise<boolean>;
+    onTcpMessage(msg: MsgBase): void;
+    constructor(injector: TcpMessageInjector, context: SecureChannelContext);
+}
+
+declare class SecureChannelFacade implements ISecureChannel {
+    private readonly context;
+    private readerTransform;
+    private writerTransform;
+    private readonly pending;
+    private readonly logger;
+    private readonly writer;
+    private readonly reader;
+    /** Timer handle for the scheduled token renewal; undefined when no renewal is pending. */
+    private renewalTimer;
+    /**
+     * Builds and sends an OpenSecureChannel request.
+     * Called for both the initial Issue and subsequent Renew requests.
+     *
+     * On success the context `channelId` and `tokenId` are updated and a new
+     * renewal is scheduled at 75 % of the server-revised token lifetime, per
+     * OPC UA Part 4 Section 5.4.1 / Part 6 Section 6.7.3.
+     */
+    private sendOpenSecureChannel;
+    /**
+     * Schedules a proactive token renewal at {@link TOKEN_RENEW_FRACTION} of
+     * `lifetimeMs`.  Any previously scheduled renewal is cancelled first.
+     */
+    private scheduleRenewal;
+    /**
+     * Sends the initial OpenSecureChannel request and resolves once the server
+     * replies.  Updates `context.channelId` and `context.tokenId` on success
+     * and schedules automatic renewal at 75 % of the token lifetime.
+     */
+    openSecureChannel(): Promise<void>;
+    /**
+     * Cancels any pending token renewal timer and releases the stream writer.
+     * Call this when the secure channel is no longer needed.
+     */
+    close(): void;
+    getSecurityPolicy(): string;
+    getSecurityMode(): MessageSecurityModeEnum;
+    getEndpointUrl(): string;
+    /**
+     * Sends a service request and returns a Promise that resolves with the
+     * matched response decoded by {@link SecureChannelReadable}.
+     */
+    issueServiceRequest(request: IOpcType): Promise<IOpcType>;
+    private routeFrames;
+    private pushMessage;
+    constructor(context: SecureChannelContext, readerTransform: TransformStream<MsgBase$1, MsgBase$1>, writerTransform: TransformStream<MsgBase$1, MsgBase$1>);
+}
+
+/**
+ * Deframing transform for pipe use.
+ *
+ * Accepts raw OPC UA secure-conversation frame bytes, strips the message
+ * framing, and emits decoded {@link MsgBase} objects.
+ * Routing (pending request settlement vs. unsolicited) is the caller’s
+ * responsibility — use {@link SecureChannelFacade} for that.
+ *
+ * ```ts
+ * tcpReadable
+ *   .pipeThrough(new SecureChannelDeframingTransform(context))
+ *   .pipeTo(routerWritable);
+ * ```
+ */
+declare class SecureChannelMessageDecoder extends TransformStream<Uint8Array, MsgBase$1> {
+    private context;
+    private logger;
+    /**
+     * Validates that `sequenceNumber` is monotonically increasing from the
+     * highest seen remote sequence.  Allows UInt32 wrap-around per token.
+     *
+     * Over TLS/WSS the transport already provides integrity and replay
+     * protection, so small out-of-order deliveries (caused by multi-threaded
+     * server writes) are tolerated with a warning rather than tearing down the
+     * channel.  Only truly anomalous conditions (e.g. a very large backward
+     * jump that could indicate corruption) are treated as errors.
+     */
+    private validateSequenceNumber;
+    private transform;
+    constructor(context: SecureChannelContext);
+}
+
+/**
+ * Framing-only transform for pipe use.
+ *
+ * Accepts a stream of pre-encoded binary body {@link Uint8Array}s, wraps each
+ * in a symmetric OPC UA message frame, and emits the framed bytes.
+ * Pipe the output directly to the wire transport.
+ * No request/response correlation is performed — use {@link SecureChannelFacade}
+ * for that. Pair with {@link BinaryEncoderTransform} upstream:
+ *
+ * ```ts
+ * requestStream
+ *   .pipeThrough(new SecureChannelTypeEncoder(config.encoder))
+ *   .pipeThrough(new SecureChannelMesssageEncoder(context))
+ *   .pipeTo(wsSendable);
+ * ```
+ */
+declare class SecureChannelMessageEncoder extends TransformStream<MsgBase$1, Uint8Array> {
+    constructor(context: SecureChannelContext);
+}
+
+declare class SecureChannelChunkReader extends TransformStream<MsgBase$1, MsgBase$1> {
+    private logger;
+    private transform;
+    constructor(context: SecureChannelContext);
+}
+
+declare class SecureChannelChunkWriter extends TransformStream<MsgBase$1, MsgBase$1> {
+    private context;
+    private logger;
+    private transform;
+    constructor(context: SecureChannelContext);
+}
+
+export { ActionMethodDataType, ActionStateEnum, ActionTargetDataType, ActivateSessionRequest, ActivateSessionResponse, AddNodesItem, AddNodesRequest, AddNodesResponse, AddNodesResult, AddReferencesItem, AddReferencesRequest, AddReferencesResponse, AdditionalParametersType, AggregateConfiguration, AggregateFilter, AggregateFilterResult, AliasNameDataType, Annotation, AnnotationDataType, AnonymousIdentityToken, ApplicationConfigurationDataType, ApplicationDescription, ApplicationIdentityDataType, ApplicationTypeEnum, Argument, AttributeOperand, AuthorizationServiceConfigurationDataType, AxisInformation, AxisScaleEnumerationEnum, BaseConfigurationDataType, BaseConfigurationRecordDataType, SecureChannelTypeDecoder as BinaryDecoderTransform, SecureChannelTypeEncoder as BinaryEncoderTransform, BinaryReader, BinaryWriter, BitFieldDefinition, BrokerConnectionTransportDataType, BrokerDataSetReaderTransportDataType, BrokerDataSetWriterTransportDataType, BrokerTransportQualityOfServiceEnum, BrokerWriterGroupTransportDataType, BrowseDescription, BrowseDirectionEnum, BrowseNextRequest, BrowseNextResponse, BrowsePath, BrowsePathResult, BrowsePathTarget, BrowseRequest, BrowseResponse, BrowseResult, BrowseResultMaskEnum, BuildInfo, CallMethodRequest, CallMethodResult, CallRequest, CallResponse, CancelRequest, CancelResponse, CartesianCoordinates, CertificateGroupDataType, ChannelSecurityToken, ChassisIdSubtypeEnum, CloseSecureChannelRequest, CloseSecureChannelResponse, CloseSessionRequest, CloseSessionResponse, ComplexNumberType, Configuration, ConfigurationUpdateTargetType, ConfigurationUpdateTypeEnum, ConfigurationVersionDataType, ConnectionTransportDataType, ConsoleSink, ContentFilter, ContentFilterElement, ContentFilterElementResult, ContentFilterResult, ConversionLimitEnumEnum, CreateMonitoredItemsRequest, CreateMonitoredItemsResponse, CreateSessionRequest, CreateSessionResponse, CreateSubscriptionRequest, CreateSubscriptionResponse, CurrencyUnitType, DataChangeFilter, DataChangeNotification, DataChangeTriggerEnum, DataSetMetaDataType, DataSetOrderingTypeEnum, DataSetReaderDataType, DataSetReaderMessageDataType, DataSetReaderTransportDataType, DataSetWriterDataType, DataSetWriterMessageDataType, DataSetWriterTransportDataType, DataTypeAttributes, DataTypeDefinition, DataTypeDescription, DataTypeNode, DataTypeSchemaHeader, DataValue, DatagramConnectionTransport2DataType, DatagramConnectionTransportDataType, DatagramDataSetReaderTransportDataType, DatagramWriterGroupTransport2DataType, DatagramWriterGroupTransportDataType, DeadbandTypeEnum, DecimalDataType, Decoder, DeleteAtTimeDetails, DeleteEventDetails, DeleteMonitoredItemsRequest, DeleteMonitoredItemsResponse, DeleteNodesItem, DeleteNodesRequest, DeleteNodesResponse, DeleteRawModifiedDetails, DeleteReferencesItem, DeleteReferencesRequest, DeleteReferencesResponse, DeleteSubscriptionsRequest, DeleteSubscriptionsResponse, DiagnosticInfo, DiagnosticsLevelEnum, DiscoveryConfiguration, DoubleComplexNumberType, DtlsPubSubConnectionDataType, DuplexEnum, EUInformation, ElementOperand, Encoder, EndpointConfiguration, EndpointDataType, EndpointDescription, EndpointType, EndpointUrlListDataType, EnumDefinition, EnumDescription, EnumField, EnumValueType, EphemeralKeyType, EventFieldList, EventFilter, EventFilterResult, EventNotificationList, ExceptionDeviationFormatEnum, ExpandedNodeId, ExtensionObject, FieldMetaData, FieldTargetDataType, FilterOperand, FilterOperatorEnum, FindServersOnNetworkRequest, FindServersOnNetworkResponse, FindServersRequest, FindServersResponse, Frame, GenericAttributeValue, GenericAttributes, GetEndpointsRequest, GetEndpointsResponse, HistoryData, HistoryEvent, HistoryEventFieldList, HistoryModifiedData, HistoryModifiedEvent, HistoryReadDetails, HistoryReadRequest, HistoryReadResponse, HistoryReadResult, HistoryReadValueId, HistoryUpdateDetails, HistoryUpdateRequest, HistoryUpdateResponse, HistoryUpdateResult, HistoryUpdateTypeEnum, type ILogger, type ILoggerFactory, type IOpcType, type IReader, type ISecureChannel, type ISink, type IWriter, IdTypeEnum, IdentityCriteriaTypeEnum, IdentityMappingRuleType, InstanceNode, InterfaceAdminStatusEnum, InterfaceOperStatusEnum, IssuedIdentityToken, JsonActionMetaDataMessage, JsonActionNetworkMessage, JsonActionRequestMessage, JsonActionResponderMessage, JsonActionResponseMessage, JsonApplicationDescriptionMessage, JsonDataSetMessage, JsonDataSetMetaDataMessage, JsonDataSetReaderMessageDataType, JsonDataSetWriterMessageDataType, JsonNetworkMessage, JsonPubSubConnectionMessage, JsonServerEndpointsMessage, JsonStatusMessage, JsonWriterGroupMessageDataType, KeyValuePair, type LevelName, LinearConversionDataType, LiteralOperand, LldpManagementAddressTxPortType, LldpManagementAddressType, LldpTlvType, LocalizedText, type LogRecord, LogRecordsDataType, LoggerFactory, ManAddrIfSubtypeEnum, MdnsDiscoveryConfiguration, MessageSecurityModeEnum, MethodAttributes, MethodNode, ModelChangeStructureDataType, ModelChangeStructureVerbMaskEnum, ModificationInfo, ModifyMonitoredItemsRequest, ModifyMonitoredItemsResponse, ModifySubscriptionRequest, ModifySubscriptionResponse, MonitoredItemCreateRequest, MonitoredItemCreateResult, MonitoredItemModifyRequest, MonitoredItemModifyResult, MonitoredItemNotification, MonitoringFilter, MonitoringFilterResult, MonitoringModeEnum, MonitoringParameters, NameValuePair, NamingRuleTypeEnum, NegotiationStatusEnum, NetworkAddressDataType, NetworkAddressUrlDataType, NetworkGroupDataType, Node, NodeAttributes, NodeAttributesMaskEnum, NodeClassEnum, NodeId, NodeIdType, NodeReference, NodeTypeDescription, NotificationData, NotificationMessage, ObjectAttributes, ObjectNode, ObjectTypeAttributes, ObjectTypeNode, OpenFileModeEnum, OpenSecureChannelRequest, OpenSecureChannelResponse, OptionSet, Orientation, OverrideValueHandlingEnum, ParsingResult, PerformUpdateTypeEnum, PortIdSubtypeEnum, PortableNodeId, PortableQualifiedName, PriorityMappingEntryType, ProgramDiagnostic2DataType, ProgramDiagnosticDataType, PubSubConfiguration2DataType, PubSubConfigurationDataType, PubSubConfigurationRefDataType, PubSubConfigurationValueDataType, PubSubConnectionDataType, PubSubDiagnosticsCounterClassificationEnum, PubSubGroupDataType, PubSubKeyPushTargetDataType, PubSubStateEnum, PublishRequest, PublishResponse, PublishedActionDataType, PublishedActionMethodDataType, PublishedDataItemsDataType, PublishedDataSetCustomSourceDataType, PublishedDataSetDataType, PublishedDataSetSourceDataType, PublishedEventsDataType, PublishedVariableDataType, QosDataType, QualifiedName, QuantityDimension, QueryDataDescription, QueryDataSet, QueryFirstRequest, QueryFirstResponse, QueryNextRequest, QueryNextResponse, Range, RationalNumber, ReadAnnotationDataDetails, ReadAtTimeDetails, ReadEventDetails, ReadEventDetails2, ReadEventDetailsSorted, ReadProcessedDetails, ReadRawModifiedDetails, ReadRequest, ReadResponse, ReadValueId, ReaderGroupDataType, ReaderGroupMessageDataType, ReaderGroupTransportDataType, ReceiveQosDataType, ReceiveQosPriorityDataType, RedundancySupportEnum, RedundantServerDataType, RedundantServerModeEnum, ReferenceDescription, ReferenceDescriptionDataType, ReferenceListEntryDataType, ReferenceNode, ReferenceTypeAttributes, ReferenceTypeNode, RegisterNodesRequest, RegisterNodesResponse, RegisterServer2Request, RegisterServer2Response, RegisterServerRequest, RegisterServerResponse, RegisteredServer, RelativePath, RelativePathElement, RepublishRequest, RepublishResponse, RequestHeader, ResponseHeader, RolePermissionType, SamplingIntervalDiagnosticsDataType, SecureChannelChunkReader, SecureChannelChunkWriter, SecureChannelContext, SecureChannelFacade, SecureChannelMessageDecoder, SecureChannelMessageEncoder, SecureChannelTypeDecoder, SecureChannelTypeEncoder, SecurityGroupDataType, SecuritySettingsDataType, SecurityTokenRequestTypeEnum, SemanticChangeStructureDataType, ServerDiagnosticsSummaryDataType, ServerEndpointDataType, ServerOnNetwork, ServerStateEnum, ServerStatusDataType, ServiceCertificateDataType, ServiceCounterDataType, ServiceFault, SessionDiagnosticsDataType, SessionSecurityDiagnosticsDataType, SessionlessInvokeRequestType, SessionlessInvokeResponseType, SetMonitoringModeRequest, SetMonitoringModeResponse, SetPublishingModeRequest, SetPublishingModeResponse, SetTriggeringRequest, SetTriggeringResponse, SignatureData, SignedSoftwareCertificate, SimpleAttributeOperand, SimpleTypeDescription, SortOrderTypeEnum, SortRuleElement, SpanContextDataType, StandaloneSubscribedDataSetDataType, StandaloneSubscribedDataSetRefDataType, StatusChangeNotification, StatusCode, type StatusCodeFlagBits, StatusCodeGetFlagBits, StatusCodeIs, StatusCodeToString, StatusCodeToStringNumber, StatusResult, Structure, StructureDefinition, StructureDescription, StructureField, StructureTypeEnum, SubscribedDataSetDataType, SubscribedDataSetMirrorDataType, SubscriptionAcknowledgement, SubscriptionDiagnosticsDataType, TargetVariablesDataType, TcpConnectionHandler, TcpMessageDecoupler, TcpMessageInjector, TimeZoneDataType, TimestampsToReturnEnum, TraceContextDataType, TransactionErrorType, TransferResult, TransferSubscriptionsRequest, TransferSubscriptionsResponse, TranslateBrowsePathsToNodeIdsRequest, TranslateBrowsePathsToNodeIdsResponse, TransmitQosDataType, TransmitQosPriorityDataType, TrustListDataType, TrustListMasksEnum, TsnFailureCodeEnum, TsnListenerStatusEnum, TsnStreamStateEnum, TsnTalkerStatusEnum, TypeNode, UABinaryFileDataType, type UaBoolean, type UaByte, type UaByteString, type UaDateTime, type UaDouble, type UaFloat, type UaGuid, type UaInt16, type UaInt32, type UaInt64, type UaPrimitive, type UaSbyte, type UaString, type UaUint16, type UaUint32, type UaUint64, UadpDataSetReaderMessageDataType, UadpDataSetWriterMessageDataType, UadpWriterGroupMessageDataType, Union, UnregisterNodesRequest, UnregisterNodesResponse, UnsignedRationalNumber, UpdateDataDetails, UpdateEventDetails, UpdateStructureDataDetails, UserIdentityToken, UserManagementDataType, UserNameIdentityToken, UserTokenPolicy, UserTokenSettingsDataType, UserTokenTypeEnum, VariableAttributes, VariableNode, VariableTypeAttributes, VariableTypeNode, Variant, type VariantArrayValue, type VariantValue, Vector, ViewAttributes, ViewDescription, ViewNode, WebSocketFascade, WebSocketReadableStream, WebSocketWritableStream, WriteRequest, WriteResponse, WriteValue, WriterGroupDataType, WriterGroupMessageDataType, WriterGroupTransportDataType, X509IdentityToken, XVType, XmlElement, _3DCartesianCoordinates, _3DFrame, _3DOrientation, _3DVector, getLogger, initLoggerProvider, registerBinaryDecoders, registerEncoders, registerJsonDecoders, registerTypeDecoders, registerXmlDecoders, uaByte, uaDouble, uaFloat, uaGuid, uaInt16, uaInt32, uaInt64, uaSbyte, uaUint16, uaUint32, uaUint64 };