opcjs-base 0.1.39-alpha → 0.1.41-alpha

package/dist/index.d.cts

@@ -1655,7 +1655,7 @@ interface IWriter {
      * Binary: Int32 length prefix + bytes
      * @param value The byte array; null or undefined is encoded as length -1 (OPC UA null)
      */
-    writeByteString(value: Buffer | Uint8Array | null | undefined): void;
+    writeByteString(value: Uint8Array | null | undefined): void;
     /**
      * Encode an XmlElement value.
      * Binary: Int32 length prefix + UTF-8 encoded XML
@@ -8281,13 +8281,14 @@ declare class SecureChannelMessageDecoder extends TransformStream<Uint8Array, Ms
     private context;
     private logger;
     /**
-     * Validates that `sequenceNumber` is monotonically increasing from the last
-     * seen remote sequence.  Allows exactly one UInt32 wrap-around per token.
+     * Validates that `sequenceNumber` is monotonically increasing from the
+     * highest seen remote sequence.  Allows UInt32 wrap-around per token.
      *
-     * Forward gaps are tolerated with a warning because some server implementations
-     * may consume sequence numbers internally (e.g. cancelled responses) without
-     * sending them on the wire.  Backward jumps and duplicates are rejected as
-     * errors since they indicate replay or reordering.
+     * Over TLS/WSS the transport already provides integrity and replay
+     * protection, so small out-of-order deliveries (caused by multi-threaded
+     * server writes) are tolerated with a warning rather than tearing down the
+     * channel.  Only truly anomalous conditions (e.g. a very large backward
+     * jump that could indicate corruption) are treated as errors.
      */
     private validateSequenceNumber;
     private transform;

package/dist/index.d.ts

@@ -1655,7 +1655,7 @@ interface IWriter {
      * Binary: Int32 length prefix + bytes
      * @param value The byte array; null or undefined is encoded as length -1 (OPC UA null)
      */
-    writeByteString(value: Buffer | Uint8Array | null | undefined): void;
+    writeByteString(value: Uint8Array | null | undefined): void;
     /**
      * Encode an XmlElement value.
      * Binary: Int32 length prefix + UTF-8 encoded XML
@@ -8281,13 +8281,14 @@ declare class SecureChannelMessageDecoder extends TransformStream<Uint8Array, Ms
     private context;
     private logger;
     /**
-     * Validates that `sequenceNumber` is monotonically increasing from the last
-     * seen remote sequence.  Allows exactly one UInt32 wrap-around per token.
+     * Validates that `sequenceNumber` is monotonically increasing from the
+     * highest seen remote sequence.  Allows UInt32 wrap-around per token.
      *
-     * Forward gaps are tolerated with a warning because some server implementations
-     * may consume sequence numbers internally (e.g. cancelled responses) without
-     * sending them on the wire.  Backward jumps and duplicates are rejected as
-     * errors since they indicate replay or reordering.
+     * Over TLS/WSS the transport already provides integrity and replay
+     * protection, so small out-of-order deliveries (caused by multi-threaded
+     * server writes) are tolerated with a warning rather than tearing down the
+     * channel.  Only truly anomalous conditions (e.g. a very large backward
+     * jump that could indicate corruption) are treated as errors.
      */
     private validateSequenceNumber;
     private transform;

package/dist/index.js

@@ -84,9 +84,7 @@ var NodeId = class _NodeId {
         break;
       case 3 /* ByteString */:
         prefix = "b";
-        if (typeof Buffer !== "undefined") {
-          value = Buffer.from(this.identifier).toString("base64");
-        } else {
+        {
           const bytes = this.identifier;
           let binary = "";
           for (let i = 0; i < bytes.length; i++) {
@@ -146,17 +144,14 @@ var NodeId = class _NodeId {
       case "g":
         return new _NodeId(namespace, value);
       // GUID as string
-      case "b":
-        if (typeof Buffer !== "undefined") {
-          return new _NodeId(namespace, new Uint8Array(Buffer.from(value, "base64")));
-        } else {
-          const binary = atob(value);
-          const bytes = new Uint8Array(binary.length);
-          for (let i = 0; i < binary.length; i++) {
-            bytes[i] = binary.charCodeAt(i);
-          }
-          return new _NodeId(namespace, bytes);
+      case "b": {
+        const binary = atob(value);
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++) {
+          bytes[i] = binary.charCodeAt(i);
         }
+        return new _NodeId(namespace, bytes);
+      }
       default:
         throw new Error(`Unknown NodeId type: ${type}`);
     }
@@ -316,9 +311,7 @@ var CodecError = class _CodecError extends Error {
     this.suggestedAction = options?.suggestedAction;
     this.typeName = options?.typeName;
     this.cause = options?.cause;
-    if (Error.captureStackTrace) {
-      Error.captureStackTrace(this, _CodecError);
-    }
+    Error.captureStackTrace?.(this, _CodecError);
   }
   /**
    * Returns a detailed error message including all context.
@@ -901,7 +894,10 @@ var XmlReader = class {
     const text = this.getTextContent();
     if (text === "") return null;
     try {
-      return Buffer.from(text, "base64");
+      const binary = atob(text);
+      const bytes = new Uint8Array(binary.length);
+      for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+      return bytes;
     } catch {
       throw new CodecError(`Invalid Base64 ByteString: ${text}`);
     }
@@ -16601,10 +16597,12 @@ var UserTokenTypeEnum = /* @__PURE__ */ ((UserTokenTypeEnum2) => {
 
 // src/utils/logger/consoleSink.ts
 function isNodeLike() {
-  return typeof process !== "undefined" && typeof process.versions !== "undefined" && typeof process.versions?.node !== "undefined";
+  const g = globalThis;
+  return typeof g.process !== "undefined" && typeof g.process?.versions !== "undefined" && typeof g.process?.versions?.node !== "undefined";
 }
 function supportsAnsiColors() {
-  return isNodeLike() && !!process.stdout?.isTTY;
+  const g = globalThis;
+  return isNodeLike() && !!g.process?.stdout?.isTTY;
 }
 function pad2(n) {
   return n < 10 ? `0${n}` : `${n}`;
@@ -17868,15 +17866,16 @@ var SecureChannelMessageDecoder = class extends TransformStream {
   }
   logger = getLogger("secureChannel.SecureChannelMessageDecoder");
   /**
-   * Validates that `sequenceNumber` is monotonically increasing from the last
-   * seen remote sequence.  Allows exactly one UInt32 wrap-around per token.
+   * Validates that `sequenceNumber` is monotonically increasing from the
+   * highest seen remote sequence.  Allows UInt32 wrap-around per token.
    *
-   * Forward gaps are tolerated with a warning because some server implementations
-   * may consume sequence numbers internally (e.g. cancelled responses) without
-   * sending them on the wire.  Backward jumps and duplicates are rejected as
-   * errors since they indicate replay or reordering.
+   * Over TLS/WSS the transport already provides integrity and replay
+   * protection, so small out-of-order deliveries (caused by multi-threaded
+   * server writes) are tolerated with a warning rather than tearing down the
+   * channel.  Only truly anomalous conditions (e.g. a very large backward
+   * jump that could indicate corruption) are treated as errors.
    */
-  validateSequenceNumber(sequenceNumber, msgType, controller) {
+  validateSequenceNumber(sequenceNumber, msgType) {
     const last = this.context.lastRemoteSequenceNumber;
     if (last === void 0) {
       this.context.lastRemoteSequenceNumber = sequenceNumber;
@@ -17884,18 +17883,22 @@ var SecureChannelMessageDecoder = class extends TransformStream {
       return true;
     }
     const isWrap = last >= SEQ_WRAP_THRESHOLD2 && sequenceNumber < SEQ_WRAP_MAX;
-    const isForward = sequenceNumber > last;
-    if (!isForward && !isWrap) {
-      this.logger.error(`[${msgType}] Invalid remote sequence number: expected > ${last}, got ${sequenceNumber}`);
-      controller.error(new Error(`Invalid remote sequence number: expected > ${last}, got ${sequenceNumber}`));
-      return false;
+    if (isWrap) {
+      this.context.lastRemoteSequenceNumber = sequenceNumber;
+      this.logger.debug(`[${msgType}] Sequence number wrapped: ${last} \u2192 ${sequenceNumber}`);
+      return true;
     }
-    if (sequenceNumber !== last + 1 && !isWrap) {
-      this.logger.warn(`[${msgType}] Remote sequence number gap: expected ${last + 1}, got ${sequenceNumber} (skipped ${sequenceNumber - last - 1})`);
-    } else {
+    if (sequenceNumber === last + 1) {
+      this.context.lastRemoteSequenceNumber = sequenceNumber;
       this.logger.debug(`[${msgType}] Sequence number advanced: ${last} \u2192 ${sequenceNumber}`);
+      return true;
+    }
+    if (sequenceNumber > last + 1) {
+      this.logger.warn(`[${msgType}] Remote sequence number gap: expected ${last + 1}, got ${sequenceNumber} (skipped ${sequenceNumber - last - 1})`);
+      this.context.lastRemoteSequenceNumber = sequenceNumber;
+      return true;
     }
-    this.context.lastRemoteSequenceNumber = sequenceNumber;
+    this.logger.warn(`[${msgType}] Out-of-order remote sequence number: highest seen ${last}, got ${sequenceNumber}`);
     return true;
   }
   transform(data, controller) {
@@ -17912,7 +17915,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
           secHeader,
           this.context.securityAlgorithm
         );
-        if (!this.validateSequenceNumber(msgAsym.sequenceHeader.sequenceNumber, "OPN", controller)) return;
+        if (!this.validateSequenceNumber(msgAsym.sequenceHeader.sequenceNumber, "OPN")) return;
         controller.enqueue(msgAsym);
         break;
       }
@@ -17920,7 +17923,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.warn("SecureChannel received Abort message");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-A", controller)) return;
+        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-A")) return;
         controller.enqueue(msgSym);
         break;
       }
@@ -17928,7 +17931,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.debug("SecureChannel received Chunk message.");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-C", controller)) return;
+        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-C")) return;
         controller.enqueue(msgSym);
         break;
       }
@@ -17936,7 +17939,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.debug("SecureChannel received Final message");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-F", controller)) return;
+        if (!this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "MSG-F")) return;
         controller.enqueue(msgSym);
         break;
       }
@@ -17944,7 +17947,7 @@ var SecureChannelMessageDecoder = class extends TransformStream {
         this.logger.warn("SecureChannel received CloseFinal message.");
         const secHeader = MsgSecurityHeaderSymmetric.decode(buffer);
         const msgSym = MsgSymmetric.decode(buffer, header, secHeader, this.context.securityAlgorithm);
-        this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "CLO-F", controller);
+        this.validateSequenceNumber(msgSym.sequenceHeader.sequenceNumber, "CLO-F");
         break;
       }
       default: