request-iframe 0.0.6 → 0.1.1

package/library/core/server.js

@@ -27,6 +27,7 @@ var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/sli
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _utils = require("../utils");
 var _pathMatch = require("../utils/path-match");
+var _origin = require("../utils/origin");
 var _request = require("./request");
 var _response = require("./response");
 var _message = require("../message");
@@ -58,12 +59,15 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
  */
 class RequestIframeServerImpl {
   constructor(options) {
-    var _options$ackTimeout, _options$versionValid;
+    var _options$ackTimeout, _options$versionValid, _options$maxConcurren;
     /** Unique instance ID */
     (0, _defineProperty2.default)(this, "handlers", new Map());
     (0, _defineProperty2.default)(this, "middlewares", []);
+    (0, _defineProperty2.default)(this, "inFlightByClientKey", new Map());
     /** Responses waiting for client acknowledgment */
     (0, _defineProperty2.default)(this, "pendingAcks", new Map());
+    /** Pending pings waiting for client PONG (server -> client heartbeat) */
+    (0, _defineProperty2.default)(this, "pendingPongs", new Map());
     /** Pending requests waiting for client stream_start (streamId present) */
     (0, _defineProperty2.default)(this, "pendingStreamRequests", new Map());
     /** Stream message handlers (streamId -> handler) for client→server streams */
@@ -76,10 +80,23 @@ class RequestIframeServerImpl {
     this.id = (options === null || options === void 0 ? void 0 : options.id) || (0, _utils.generateInstanceId)();
     this.ackTimeout = (_options$ackTimeout = options === null || options === void 0 ? void 0 : options.ackTimeout) !== null && _options$ackTimeout !== void 0 ? _options$ackTimeout : _constants.DefaultTimeout.ACK;
     this.versionValidator = (_options$versionValid = options === null || options === void 0 ? void 0 : options.versionValidator) !== null && _options$versionValid !== void 0 ? _options$versionValid : _utils.isCompatibleVersion;
+    this.maxConcurrentRequestsPerClient = (_options$maxConcurren = options === null || options === void 0 ? void 0 : options.maxConcurrentRequestsPerClient) !== null && _options$maxConcurren !== void 0 ? _options$maxConcurren : Number.POSITIVE_INFINITY;
+
+    // Build origin validator (incoming messages)
+    if (options !== null && options !== void 0 && options.validateOrigin) {
+      this.originValidator = (origin, data, context) => options.validateOrigin(origin, data, context);
+    } else if (options !== null && options !== void 0 && options.allowedOrigins) {
+      var matcher = options.allowedOrigins;
+      this.originValidator = origin => (0, _origin.matchOrigin)(origin, matcher);
+    }
 
     // Get or create shared channel and create dispatcher
     var channel = (0, _cache.getOrCreateMessageChannel)(options === null || options === void 0 ? void 0 : options.secretKey);
     this.dispatcher = new _message.MessageDispatcher(channel, _constants.MessageRole.SERVER, this.id);
+    this.dispatcher.setAutoAckLimits({
+      maxMetaLength: options === null || options === void 0 ? void 0 : options.autoAckMaxMetaLength,
+      maxIdLength: options === null || options === void 0 ? void 0 : options.autoAckMaxIdLength
+    });
 
     // Auto-open by default (unless explicitly set to false)
     if ((options === null || options === void 0 ? void 0 : options.autoOpen) !== false) {
@@ -87,6 +104,39 @@ class RequestIframeServerImpl {
     }
   }
 
+  /**
+   * Check whether an incoming message origin is allowed.
+   */
+  isOriginAllowed(data, context) {
+    if (!this.originValidator) return true;
+    try {
+      return this.originValidator(context.origin, data, context);
+    } catch (_unused) {
+      return false;
+    }
+  }
+
+  /**
+   * Build a per-client key used for concurrency limiting.
+   * We intentionally include origin to prevent cross-origin collisions.
+   */
+  getClientKey(origin, creatorId) {
+    return `${origin}::${creatorId || 'unknown'}`;
+  }
+  incInFlight(clientKey) {
+    var current = this.inFlightByClientKey.get(clientKey) || 0;
+    this.inFlightByClientKey.set(clientKey, current + 1);
+  }
+  decInFlight(clientKey) {
+    var current = this.inFlightByClientKey.get(clientKey) || 0;
+    var next = current - 1;
+    if (next <= 0) {
+      this.inFlightByClientKey.delete(clientKey);
+      return;
+    }
+    this.inFlightByClientKey.set(clientKey, next);
+  }
+
   /**
    * Open message processing (register message handlers)
    */
@@ -130,22 +180,27 @@ class RequestIframeServerImpl {
     // Handle PING messages
     this.unregisterFns.push(this.dispatcher.registerHandler(_constants.MessageType.PING, (data, context) => this.handlePing(data, context), handlerOptions));
 
-    // Handle RECEIVED messages (for confirming response delivery)
-    this.unregisterFns.push(this.dispatcher.registerHandler(_constants.MessageType.RECEIVED, data => this.handleReceived(data), handlerOptions));
+    // Handle PONG messages (server -> client heartbeat)
+    this.unregisterFns.push(this.dispatcher.registerHandler(_constants.MessageType.PONG, (data, context) => this.handlePong(data, context), handlerOptions));
+
+    // Handle ACK messages (for confirming response delivery when requireAck === true)
+    this.unregisterFns.push(this.dispatcher.registerHandler(_constants.MessageType.ACK, (data, context) => this.handleAck(data, context), handlerOptions));
 
     // Handle stream_* messages (client→server stream)
     this.unregisterFns.push(this.dispatcher.registerHandler(_constants.MessageType.STREAM_START, (data, ctx) => this.handleStreamStart(data, ctx), handlerOptions));
-    this.unregisterFns.push(this.dispatcher.registerHandler(type => type.startsWith('stream_') && type !== _constants.MessageType.STREAM_START, (data, _context) => this.dispatchStreamMessage(data), handlerOptions));
+    this.unregisterFns.push(this.dispatcher.registerHandler(type => type.startsWith('stream_') && type !== _constants.MessageType.STREAM_START, (data, context) => this.dispatchStreamMessage(data, context), handlerOptions));
   }
 
   /** Handle stream_start from client (stream request with streamId) */
-  handleStreamStart(data, _context) {
+  handleStreamStart(data, context) {
     var _body$chunked;
     if (data.role !== _constants.MessageRole.CLIENT) return;
+    if (!this.isOriginAllowed(data, context)) return;
     var body = data.body;
     if (!(body !== null && body !== void 0 && body.streamId)) return;
     var pending = this.pendingStreamRequests.get(data.requestId);
     if (!pending || pending.streamId !== body.streamId) return;
+    clearTimeout(pending.timeoutId);
     this.pendingStreamRequests.delete(data.requestId);
     var targetWindow = pending.targetWindow,
       targetOrigin = pending.targetOrigin,
@@ -165,6 +220,7 @@ class RequestIframeServerImpl {
       }
     };
     var streamType = body.type || _constants.StreamType.DATA;
+    var streamMode = body.mode;
     var streamChunked = (_body$chunked = body.chunked) !== null && _body$chunked !== void 0 ? _body$chunked : true;
     var streamMetadata = body.metadata;
     var req = new _request.ServerRequestImpl(reqData, reqContext, res, pending.params);
@@ -175,6 +231,8 @@ class RequestIframeServerImpl {
       var fileStream = new _stream.IframeFileReadableStream(body.streamId, data.requestId, streamHandler, {
         chunked: streamChunked,
         metadata: streamMetadata,
+        secretKey: data.secretKey,
+        mode: streamMode,
         filename: streamMetadata === null || streamMetadata === void 0 ? void 0 : streamMetadata.filename,
         mimeType: streamMetadata === null || streamMetadata === void 0 ? void 0 : streamMetadata.mimeType,
         size: streamMetadata === null || streamMetadata === void 0 ? void 0 : streamMetadata.size
@@ -216,8 +274,10 @@ class RequestIframeServerImpl {
       // Non-file stream
       var readableStream = new _stream.IframeReadableStream(body.streamId, data.requestId, streamHandler, {
         type: streamType,
+        mode: streamMode,
         chunked: streamChunked,
-        metadata: streamMetadata
+        metadata: streamMetadata,
+        secretKey: data.secretKey
       });
       req.body = undefined;
       req.stream = readableStream;
@@ -240,11 +300,17 @@ class RequestIframeServerImpl {
       }
     });
   }
-  dispatchStreamMessage(data) {
+  dispatchStreamMessage(data, context) {
+    if (!this.isOriginAllowed(data, context)) return;
     var body = data.body;
     if (!(body !== null && body !== void 0 && body.streamId)) return;
     var handler = this.streamHandlers.get(body.streamId);
     if (handler) {
+      // Mark as accepted/handled so MessageDispatcher can auto-ack when requireAck === true
+      if (!context.handledBy) {
+        context.accepted = true;
+        context.handledBy = this.id;
+      }
       var messageType = data.type.replace('stream_', '');
       handler(_objectSpread(_objectSpread({}, body), {}, {
         type: messageType
@@ -276,20 +342,67 @@ class RequestIframeServerImpl {
    */
   handlePing(data, context) {
     if (!context.source) return;
+    if (!this.isOriginAllowed(data, context)) return;
+
+    /**
+     * Only allow one server instance to respond.
+     * This is important when multiple server instances share the same channel.
+     */
+    if (!context.handledBy) {
+      // Mark as accepted so MessageDispatcher can auto-send ACK when requireAck === true
+      context.accepted = true;
+      context.handledBy = this.id;
+    }
 
     // Window check is handled in MessageDispatcher
     this.dispatcher.sendMessage(context.source, context.origin, _constants.MessageType.PONG, data.requestId);
   }
+  handlePong(data, context) {
+    if (!this.isOriginAllowed(data, context)) return;
+    var pending = this.pendingPongs.get(data.requestId);
+    if (pending) {
+      if (!context.handledBy) {
+        context.accepted = true;
+        context.handledBy = this.id;
+      }
+      clearTimeout(pending.timeoutId);
+      this.pendingPongs.delete(data.requestId);
+      pending.resolve(true);
+    }
+  }
+  pingClient(targetWindow, targetOrigin, targetClientId) {
+    var requestId = (0, _utils.generateRequestId)();
+    return new Promise(resolve => {
+      var timeoutId = setTimeout(() => {
+        this.pendingPongs.delete(requestId);
+        resolve(false);
+      }, this.ackTimeout);
+      this.pendingPongs.set(requestId, {
+        resolve,
+        timeoutId
+      });
+      // Window check is handled in MessageDispatcher
+      this.dispatcher.sendMessage(targetWindow, targetOrigin, _constants.MessageType.PING, requestId, {
+        requireAck: true,
+        targetId: targetClientId
+      });
+    });
+  }
 
   /**
-   * Handle received acknowledgment
+   * Handle ACK (receipt confirmation for responses when requireAck === true).
    */
-  handleReceived(data) {
+  handleAck(data, context) {
+    if (!this.isOriginAllowed(data, context)) return;
     var pending = this.pendingAcks.get(data.requestId);
     if (pending) {
+      // Best-effort: prevent other server instances from also resolving
+      if (!context.handledBy) {
+        context.handledBy = this.id;
+      }
       clearTimeout(pending.timeoutId);
       this.pendingAcks.delete(data.requestId);
-      pending.resolve(true);
+      pending.resolve(true, data.ack);
     }
   }
 
@@ -304,6 +417,7 @@ class RequestIframeServerImpl {
   }
   handleRequestError(res, targetWindow, targetOrigin, data, err) {
     if (!res._sent) {
+      res._markSent();
       /** 
        * Use INTERNAL_SERVER_ERROR (500) for handler errors unless a different error status code was explicitly set.
        * If statusCode is still the default OK (200), override it to INTERNAL_SERVER_ERROR.
@@ -328,6 +442,7 @@ class RequestIframeServerImpl {
     if (!res._sent && result !== undefined) {
       res.send(result);
     } else if (!res._sent) {
+      res._markSent();
       this.dispatcher.sendMessage(targetWindow, targetOrigin, _constants.MessageType.ERROR, data.requestId, {
         path: data.path,
         error: {
@@ -392,6 +507,7 @@ class RequestIframeServerImpl {
     // If targetId is specified, only process if it matches this server's id
     if (!data.path || data.targetId && data.targetId !== this.id) return;
     if (!context.source) return;
+    if (!this.isOriginAllowed(data, context)) return;
 
     // If message has already been handled by another server instance, skip processing
     if (context.handledBy) {
@@ -425,25 +541,51 @@ class RequestIframeServerImpl {
     }
     var handlerFn = handlerMatch.handler,
       params = handlerMatch.params;
+    var clientKey = this.getClientKey(targetOrigin, data.creatorId);
+    if (Number.isFinite(this.maxConcurrentRequestsPerClient)) {
+      var inFlight = this.inFlightByClientKey.get(clientKey) || 0;
+      if (inFlight >= this.maxConcurrentRequestsPerClient) {
+        // Prevent other server instances from also responding
+        context.handledBy = this.id;
+        this.dispatcher.sendMessage(targetWindow, targetOrigin, _constants.MessageType.ERROR, data.requestId, {
+          path: data.path,
+          error: {
+            message: (0, _constants.formatMessage)(_constants.Messages.TOO_MANY_REQUESTS, this.maxConcurrentRequestsPerClient),
+            code: _constants.ErrorCode.TOO_MANY_REQUESTS
+          },
+          status: _constants.HttpStatus.TOO_MANY_REQUESTS,
+          statusText: _constants.HttpStatusText[_constants.HttpStatus.TOO_MANY_REQUESTS],
+          requireAck: data.requireAck,
+          ack: data.ack,
+          targetId: data.creatorId
+        });
+        return;
+      }
+    }
+    this.incInFlight(clientKey);
+
+    // Mark as accepted so MessageDispatcher can auto-send ACK (delivery confirmation)
+    context.accepted = true;
 
     // Mark message as handled by this server instance to prevent other server instances from processing it
     context.handledBy = this.id;
 
-    // Send ACK immediately via dispatcher
-    // Use request's creatorId as targetId to route back to the correct client
-    // Window check is handled in MessageDispatcher
-    this.dispatcher.sendMessage(targetWindow, targetOrigin, _constants.MessageType.ACK, data.requestId, {
-      path: data.path,
-      targetId: data.creatorId
-    });
-
     // Create response object with channel reference
     // Pass request's creatorId as targetId so responses are routed back to the correct client
-    var res = new _response.ServerResponseImpl(data.requestId, data.path || '', data.secretKey, targetWindow, targetOrigin, this.dispatcher.getChannel(), this.id, data.creatorId);
+    var res = new _response.ServerResponseImpl(data.requestId, data.path || '', data.secretKey, targetWindow, targetOrigin, this.dispatcher.getChannel(), this.id, data.creatorId, {
+      registerStreamHandler: (streamId, handler) => {
+        this.streamHandlers.set(streamId, handler);
+      },
+      unregisterStreamHandler: streamId => {
+        this.streamHandlers.delete(streamId);
+      },
+      heartbeat: () => this.pingClient(targetWindow, targetOrigin, data.creatorId),
+      onSent: () => this.decInFlight(clientKey)
+    });
 
     // Register callback waiting for client acknowledgment
-    this.registerPendingAck(data.requestId, received => {
-      res._triggerAck(received);
+    this.registerPendingAck(data.requestId, (received, ack) => {
+      res._triggerAck(received, ack);
     }, () => {
       res._triggerAck(false);
     });
@@ -452,10 +594,32 @@ class RequestIframeServerImpl {
     // If streamId is present, this is a stream request
     var streamId = data.streamId;
     if (streamId) {
+      var streamStartTimeout = this.ackTimeout;
+      var timeoutId = setTimeout(() => {
+        var pending = this.pendingStreamRequests.get(data.requestId);
+        if (!pending) return;
+        this.pendingStreamRequests.delete(data.requestId);
+        if (!pending.res._sent) {
+          pending.res._markSent();
+          this.dispatcher.sendMessage(pending.targetWindow, pending.targetOrigin, _constants.MessageType.ERROR, pending.requestId, {
+            path: pending.path,
+            error: {
+              message: (0, _constants.formatMessage)(_constants.Messages.STREAM_START_TIMEOUT, streamStartTimeout),
+              code: _constants.ErrorCode.STREAM_START_TIMEOUT
+            },
+            status: _constants.HttpStatus.REQUEST_TIMEOUT,
+            statusText: _constants.HttpStatusText[_constants.HttpStatus.REQUEST_TIMEOUT],
+            requireAck: pending.data.requireAck,
+            ack: pending.data.ack,
+            targetId: pending.data.creatorId
+          });
+        }
+      }, streamStartTimeout);
       this.pendingStreamRequests.set(data.requestId, {
         path: data.path || '',
         requestId: data.requestId,
         streamId,
+        timeoutId,
         handlerFn,
         targetWindow,
         targetOrigin,
@@ -598,10 +762,16 @@ class RequestIframeServerImpl {
     // Clean up pending
     this.pendingAcks.forEach(pending => clearTimeout(pending.timeoutId));
     this.pendingAcks.clear();
+    this.pendingPongs.forEach(pending => clearTimeout(pending.timeoutId));
+    this.pendingPongs.clear();
+    this.pendingStreamRequests.forEach(pending => clearTimeout(pending.timeoutId));
+    this.pendingStreamRequests.clear();
+    this.inFlightByClientKey.clear();
 
     // Clean up handlers
     this.handlers.clear();
     this.middlewares.length = 0;
+    this.streamHandlers.clear();
 
     // Destroy dispatcher and release channel reference
     this.dispatcher.destroy();

package/library/message/channel.d.ts

@@ -7,6 +7,12 @@ export interface MessageContext {
     source?: Window;
     /** Origin of the message */
     origin: string;
+    /**
+     * Whether the receiver accepted this message for processing.
+     * - Used by MessageDispatcher to decide whether it should send an ACK automatically.
+     * - Should be set by high-level handlers once they确定会处理该消息（例如：路由匹配到 handler，或找到 pending request）。
+     */
+    accepted?: boolean;
     /** ID of the instance that handled this message (if handled) */
     handledBy?: string;
 }

package/library/message/channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/message/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAChB,MAAM,UAAU,CAAC;AAGlB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB,+BAA+B;;CAEvB,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IACzB,8CAA8C;IAC9C,SAAgB,IAAI,EAAE,WAAW,CAAC;IAElC,uCAAuC;IACvC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnC,8DAA8D;IAC9D,OAAO,CAAC,SAAS,CAAmC;IAEpD,gDAAgD;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAE/D,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAK;gBAEF,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,WAAsC;IAOnF;;;OAGG;IACI,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAInD;;OAEG;IACI,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAItD;;OAEG;IACI,MAAM,IAAI,IAAI;IAIrB;;;OAGG;IACI,OAAO,IAAI,MAAM;IAIxB;;OAEG;IACI,WAAW,IAAI,MAAM;IAI5B;;;OAGG;IACH,OAAO,CAAC,cAAc;IAOtB;;OAEG;IACH,OAAO,CAAC,SAAS;IA4BjB;;;;;OAKG;IACI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,GAAE,MAAY,GAAG,OAAO;IAQ1F;;;;;;;OAOG;IACI,WAAW,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC,GACvG,OAAO;IAQV;;OAEG;IACI,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIvC;;OAEG;IACI,OAAO,IAAI,IAAI;CAIvB"}
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/message/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAChB,MAAM,UAAU,CAAC;AAIlB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB,+BAA+B;;CAEvB,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IACzB,8CAA8C;IAC9C,SAAgB,IAAI,EAAE,WAAW,CAAC;IAElC,uCAAuC;IACvC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnC,8DAA8D;IAC9D,OAAO,CAAC,SAAS,CAAmC;IAEpD,gDAAgD;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAE/D,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAK;gBAEF,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,WAAsC;IAOnF;;;OAGG;IACI,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAInD;;OAEG;IACI,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAItD;;OAEG;IACI,MAAM,IAAI,IAAI;IAIrB;;;OAGG;IACI,OAAO,IAAI,MAAM;IAIxB;;OAEG;IACI,WAAW,IAAI,MAAM;IAI5B;;;OAGG;IACH,OAAO,CAAC,cAAc;IAOtB;;OAEG;IACH,OAAO,CAAC,SAAS;IA4BjB;;;;;OAKG;IACI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,GAAE,MAA2B,GAAG,OAAO;IAQzG;;;;;;;OAOG;IACI,WAAW,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC,GACvG,OAAO;IAQV;;OAEG;IACI,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIvC;;OAEG;IACI,OAAO,IAAI,IAAI;CAIvB"}

package/library/message/channel.js

@@ -13,6 +13,7 @@ require("core-js/modules/web.dom-collections.for-each.js");
 require("core-js/modules/web.dom-collections.iterator.js");
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _utils = require("../utils");
+var _constants = require("../constants");
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { (0, _defineProperty2.default)(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 /**
@@ -147,7 +148,7 @@ class MessageChannel {
    * @param message message data (already formatted as PostMessageData)
    * @param targetOrigin target origin (defaults to '*')
    */
-  send(target, message, targetOrigin = '*') {
+  send(target, message, targetOrigin = _constants.OriginConstant.ANY) {
     if (!(0, _utils.isWindowAvailable)(target)) {
       return false;
     }

package/library/message/dispatcher.d.ts

@@ -52,6 +52,15 @@ export declare class MessageDispatcher {
     private readonly instanceId?;
     /** Underlying message channel */
     private readonly channel;
+    private autoAckMaxMetaLength;
+    private autoAckMaxIdLength;
+    /**
+     * Fallback target for sending auto-ack messages when MessageEvent.source is unavailable.
+     * - In real browser postMessage events, `source` should normally exist.
+     * - This is primarily used for unit tests or edge environments that synthesize MessageEvent without `source`.
+     */
+    private fallbackTargetWindow?;
+    private fallbackTargetOrigin;
     /** Message handler list */
     private readonly handlers;
     /** Message receiver callback (bound to this) */
@@ -59,6 +68,10 @@ export declare class MessageDispatcher {
     /** Reference count (for determining if can be destroyed when cached) */
     private refCount;
     constructor(channel: MessageChannel, role: MessageRoleValue, instanceId?: string);
+    /**
+     * Set fallback target for outgoing auto-ack messages.
+     */
+    setFallbackTarget(targetWindow: Window, targetOrigin?: string): void;
     /**
      * Increment reference count
      */
@@ -88,6 +101,25 @@ export declare class MessageDispatcher {
      * Dispatch message to matching handlers
      */
     private dispatchMessage;
+    /**
+     * Auto-ack logic (generalized requireAck workflow)
+     *
+     * Notes:
+     * - This is intentionally conservative: it only runs after the message is marked as handled
+     *   (via `context.handledBy`) to avoid acknowledging messages that no consumer will process.
+     * - For backward compatibility:
+     *   - REQUEST defaults to requiring ACK unless `requireAck === false`
+     *   - Other message types only ack when `requireAck === true`
+     */
+    private tryAutoAck;
+    /**
+     * Limit echoed ack payload size for auto-ack replies.
+     *
+     * We only echo a fixed shape `{ id, meta?: string }`:
+     * - If meta is too long, we drop meta and only echo `{ id }`.
+     * - If id is missing or too long, omit `ack` field.
+     */
+    private getAutoAckEchoPayload;
     /**
      * Check if message type matches
      */

package/library/message/dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/message/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EACL,eAAe,EAChB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAExF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,4DAA4D;IAC5D,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5F;AAkBD;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IAC5B,uCAAuC;IACvC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnC,mBAAmB;IACnB,SAAgB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAE7C,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IAExC,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IAErC,iCAAiC;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IAEzC,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD,gDAAgD;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2D;IAEzF,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAK;gBAEF,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM;IAkBvF;;OAEG;IACI,MAAM,IAAI,IAAI;IAIrB;;;OAGG;IACI,OAAO,IAAI,MAAM;IAIxB;;OAEG;IACI,WAAW,IAAI,MAAM;IAM5B;;;;;;OAMG;IACI,eAAe,CACpB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,GAChC,MAAM,IAAI;IAyBb;;OAEG;IACI,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAOzD;;OAEG;IACH,OAAO,CAAC,eAAe;IAkDvB;;OAEG;IACH,OAAO,CAAC,SAAS;IAejB;;;;;OAKG;IACI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,GAAE,MAAY,GAAG,OAAO;IAW1F;;;;;;;OAOG;IACI,WAAW,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,GACrH,OAAO;IAcV;;OAEG;IACI,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIvC;;OAEG;IACI,UAAU,IAAI,cAAc;IAInC;;OAEG;IACI,OAAO,IAAI,IAAI;CAIvB"}
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/message/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,gBAAgB,EAA+B,MAAM,cAAc,CAAC;AAC3G,OAAO,EACL,eAAe,EAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAExF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,4DAA4D;IAC5D,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5F;AAkBD;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IAC5B,uCAAuC;IACvC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnC,mBAAmB;IACnB,SAAgB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAE7C,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IAExC,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IAErC,iCAAiC;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,oBAAoB,CAA2C;IACvE,OAAO,CAAC,kBAAkB,CAAyC;IAEnE;;;;OAIG;IACH,OAAO,CAAC,oBAAoB,CAAC,CAAS;IACtC,OAAO,CAAC,oBAAoB,CAA8B;IAE1D,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD,gDAAgD;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2D;IAEzF,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAK;gBAEF,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM;IAgBvF;;OAEG;IACI,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,GAAE,MAA2B,GAAG,IAAI;IAsB/F;;OAEG;IACI,MAAM,IAAI,IAAI;IAIrB;;;OAGG;IACI,OAAO,IAAI,MAAM;IAIxB;;OAEG;IACI,WAAW,IAAI,MAAM;IAM5B;;;;;;OAMG;IACI,eAAe,CACpB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,cAAc,GAAG,MAAM,GAChC,MAAM,IAAI;IAyBb;;OAEG;IACI,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAOzD;;OAEG;IACH,OAAO,CAAC,eAAe;IAqFvB;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU;IAqClB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAW7B;;OAEG;IACH,OAAO,CAAC,SAAS;IAejB;;;;;OAKG;IACI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,GAAE,MAA2B,GAAG,OAAO;IAWzG;;;;;;;OAOG;IACI,WAAW,CAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,GACrH,OAAO;IAcV;;OAEG;IACI,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIvC;;OAEG;IACI,UAAU,IAAI,cAAc;IAInC;;OAEG;IACI,OAAO,IAAI,IAAI;CAIvB"}

package/library/message/dispatcher.js

@@ -22,6 +22,7 @@ require("core-js/modules/es.regexp.to-string.js");
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _constants = require("../constants");
 var _utils = require("../utils");
+var _ack = require("../utils/ack");
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { (0, _defineProperty2.default)(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t.return || t.return(); } finally { if (u) throw o; } } }; }
@@ -71,6 +72,9 @@ class MessageDispatcher {
     /** Role of this dispatcher ('client' or 'server') */
     /** Instance ID of the client/server that owns this dispatcher */
     /** Underlying message channel */
+    (0, _defineProperty2.default)(this, "autoAckMaxMetaLength", _constants.AutoAckConstant.MAX_META_LENGTH);
+    (0, _defineProperty2.default)(this, "autoAckMaxIdLength", _constants.AutoAckConstant.MAX_ID_LENGTH);
+    (0, _defineProperty2.default)(this, "fallbackTargetOrigin", _constants.OriginConstant.ANY);
     /** Message handler list */
     (0, _defineProperty2.default)(this, "handlers", []);
     /** Reference count (for determining if can be destroyed when cached) */
@@ -90,6 +94,29 @@ class MessageDispatcher {
     this.channel.addReceiver(this.boundReceiver);
   }
 
+  /**
+   * Set fallback target for outgoing auto-ack messages.
+   */
+  setFallbackTarget(targetWindow, targetOrigin = _constants.OriginConstant.ANY) {
+    this.fallbackTargetWindow = targetWindow;
+    this.fallbackTargetOrigin = targetOrigin;
+  }
+
+  /**
+   * Configure auto-ack echo limits (advanced/internal).
+   *
+   * @internal
+   */
+  setAutoAckLimits(limits) {
+    if (!limits || typeof limits !== 'object') return;
+    if (typeof limits.maxMetaLength === 'number' && Number.isFinite(limits.maxMetaLength) && limits.maxMetaLength >= 0) {
+      this.autoAckMaxMetaLength = limits.maxMetaLength;
+    }
+    if (typeof limits.maxIdLength === 'number' && Number.isFinite(limits.maxIdLength) && limits.maxIdLength >= 0) {
+      this.autoAckMaxIdLength = limits.maxIdLength;
+    }
+  }
+
   // ==================== Reference Counting ====================
 
   /**
@@ -177,6 +204,43 @@ class MessageDispatcher {
     }
     var type = data.type;
     var version = (0, _utils.getProtocolVersion)(data);
+
+    /**
+     * Auto-ack state for this incoming message.
+     * - We intentionally couple this to `context.handledBy` as the "accepted/handled" signal.
+     * - For some message types we only ack if they are truly handled (e.g. response requireAck),
+     *   so we avoid incorrectly acknowledging messages when there is no pending consumer.
+     *
+     * Implementation note:
+     * We avoid using Proxy for compatibility and instead hook the `handledBy` property
+     * with a setter so handlers can trigger the ack immediately when they "accept" a message.
+     */
+    var autoAckState = {
+      sent: false
+    };
+    var originalHandledBy = context.handledBy;
+    var handledByValue = originalHandledBy;
+    try {
+      Object.defineProperty(context, 'handledBy', {
+        configurable: true,
+        enumerable: true,
+        get() {
+          return handledByValue;
+        },
+        set: value => {
+          handledByValue = value;
+          if (value && !autoAckState.sent) {
+            autoAckState.sent = true;
+            this.tryAutoAck(data, context);
+          }
+        }
+      });
+    } catch (_unused) {
+      /**
+       * In very rare cases `defineProperty` may fail (frozen object).
+       * We still proceed without auto-ack; handlers will continue to work as before.
+       */
+    }
     var _iterator = _createForOfIteratorHelper(this.handlers),
       _step;
     try {
@@ -214,6 +278,72 @@ class MessageDispatcher {
     }
   }
 
+  /**
+   * Auto-ack logic (generalized requireAck workflow)
+   *
+   * Notes:
+   * - This is intentionally conservative: it only runs after the message is marked as handled
+   *   (via `context.handledBy`) to avoid acknowledging messages that no consumer will process.
+   * - For backward compatibility:
+   *   - REQUEST defaults to requiring ACK unless `requireAck === false`
+   *   - Other message types only ack when `requireAck === true`
+   */
+  tryAutoAck(data, context) {
+    var _context$source;
+    var targetWindow = (_context$source = context.source) !== null && _context$source !== void 0 ? _context$source : this.fallbackTargetWindow;
+    if (!targetWindow) return;
+    var targetOrigin = context.source ? context.origin : this.fallbackTargetOrigin || context.origin;
+    var type = data.type;
+
+    // Don't auto-ack ack messages (avoid loops)
+    if (type === _constants.MessageType.ACK) return;
+
+    /**
+     * ACK-only requireAck workflow (no compatibility guarantees):
+     * - For any message with `requireAck === true`, once the message is accepted/handled
+     *   (via `context.accepted === true` + `context.handledBy` setter hook),
+     *   we reply with `ack`.
+     *
+     * This unifies:
+     * - request delivery confirmation
+     * - response receipt confirmation
+     * - stream frame delivery confirmation (e.g. stream_data per-frame ack)
+     */
+    if (data.requireAck === true && context.accepted === true) {
+      var ack = this.getAutoAckEchoPayload(data.ack);
+      this.sendMessage(targetWindow, targetOrigin, _constants.MessageType.ACK, data.requestId, {
+        path: data.path,
+        targetId: data.creatorId,
+        ack
+      });
+    }
+  }
+
+  /**
+   * Limit echoed ack payload size for auto-ack replies.
+   *
+   * We only echo a fixed shape `{ id, meta?: string }`:
+   * - If meta is too long, we drop meta and only echo `{ id }`.
+   * - If id is missing or too long, omit `ack` field.
+   */
+  getAutoAckEchoPayload(rawAck) {
+    if (rawAck === undefined) return undefined;
+    var id = (0, _ack.getAckId)(rawAck);
+    if (id === undefined) return undefined;
+    if (typeof id === 'string' && id.length > this.autoAckMaxIdLength) return undefined;
+    var meta = (0, _ack.getAckMeta)(rawAck);
+    if (meta === undefined) return {
+      id
+    };
+    if (meta.length > this.autoAckMaxMetaLength) return {
+      id
+    };
+    return {
+      id,
+      meta
+    };
+  }
+
   /**
    * Check if message type matches
    */
@@ -238,7 +368,7 @@ class MessageDispatcher {
    * @param message message data (already formatted as PostMessageData)
    * @param targetOrigin target origin (defaults to '*')
    */
-  send(target, message, targetOrigin = '*') {
+  send(target, message, targetOrigin = _constants.OriginConstant.ANY) {
     // Automatically set role and creatorId if not already set (for backward compatibility)
     if (message.role === undefined) {
       message.role = this.role;

package/library/stream/file-stream.d.ts

@@ -32,6 +32,10 @@ export declare class IframeFileReadableStream extends IframeReadableStream<Uint8
      * Override merge method to merge all Uint8Array chunks
      */
     protected mergeChunks(): Uint8Array;
+    /**
+     * Read all data as a merged Uint8Array (file stream default behavior)
+     */
+    read(): Promise<Uint8Array>;
     /**
      * Read as Blob
      */