sealbridge 0.0.1 → 0.2.0

package/dist/packages/relay/dist/retry.d.ts

@@ -0,0 +1,12 @@
+export declare class RelayTimeoutError extends Error {
+    readonly code = "ETIMEDOUT";
+    constructor();
+}
+export declare function isTransientRelayError(error: unknown): boolean;
+export type RelayConnectionStatus = 'connected' | 'reconnecting' | 'unavailable' | 'stopped';
+/** Never include an HTTP response body or arbitrary transport text in diagnostics. */
+export declare function relayDiagnostic(error: unknown): Error;
+export declare function relayRetryDelay(attempt: number): number;
+export declare function waitForRelayRetry(ms: number, signal?: AbortSignal): Promise<void>;
+/** Bound even injected transports/resolvers that do not honor cancellation. */
+export declare function relayDeadline<T>(work: Promise<T>, ms: number, signal?: AbortSignal): Promise<T>;

package/dist/packages/relay/dist/retry.js

@@ -0,0 +1,59 @@
+// SPDX-License-Identifier: Apache-2.0
+export class RelayTimeoutError extends Error {
+    code = 'ETIMEDOUT';
+    constructor() { super('RELAY_REQUEST_TIMEOUT'); this.name = 'RelayTimeoutError'; }
+}
+export function isTransientRelayError(error) {
+    const causes = [];
+    for (let current = error; current instanceof Error && !causes.includes(current) && causes.length < 16; current = current.cause)
+        causes.push(current);
+    if (causes.some(e => /^(?:RELAY_(?:REGISTRATION_)?REJECTED:\s*(?:401|403)\b|RELAY_TAMPERING_DETECTED)/.test(e.message)))
+        return false;
+    return causes.some(e => e.name === 'TimeoutError' ||
+        ['ETIMEDOUT', 'ECONNRESET', 'EAI_AGAIN', 'ECONNREFUSED', 'EPIPE', 'ENETUNREACH', 'EHOSTUNREACH']
+            .includes(e.code ?? '') ||
+        /^(?:SSE_CLOSED|RELAY_IDLE_TIMEOUT)$/.test(e.message) ||
+        (e instanceof TypeError && /^(?:fetch failed|terminated)$/.test(e.message)) ||
+        /^socket hang up$/i.test(e.message) ||
+        /^RELAY_(?:REGISTRATION_)?REJECTED:\s*(429|502|503|504)\b/.test(e.message));
+}
+/** Never include an HTTP response body or arbitrary transport text in diagnostics. */
+export function relayDiagnostic(error) {
+    const message = error instanceof Error ? error.message : '';
+    const status = /^RELAY_(?:REGISTRATION_)?REJECTED:\s*(\d{3})\b/.exec(message)?.[1];
+    const code = /^(?:RELAY_[A-Z_]+|SSE_[A-Z_]+|SSRF_BLOCKED_RELAY_URL)$/.test(message)
+        ? message : 'RELAY_UNAVAILABLE';
+    return Object.assign(new Error(status ? 'RELAY_REJECTED: ' + status : code), { code: 'RELAY_TERMINAL', ...(status ? { status: Number(status) } : {}) });
+}
+export function relayRetryDelay(attempt) {
+    return Math.round(Math.min(30_000, 250 * 2 ** Math.min(attempt, 7)) * (0.5 + Math.random() * 0.5));
+}
+export function waitForRelayRetry(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const abort = () => { clearTimeout(timer); reject(signal?.reason ?? new Error('SESSION_ABORTED')); };
+        const timer = setTimeout(() => { signal?.removeEventListener('abort', abort); resolve(); }, ms);
+        signal?.addEventListener('abort', abort, { once: true });
+        if (signal?.aborted)
+            abort();
+    });
+}
+/** Bound even injected transports/resolvers that do not honor cancellation. */
+export async function relayDeadline(work, ms, signal) {
+    let timer;
+    let abort;
+    try {
+        return await Promise.race([work, new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new RelayTimeoutError()), ms);
+                abort = () => reject(signal?.reason ?? new Error('SESSION_ABORTED'));
+                signal?.addEventListener('abort', abort, { once: true });
+                if (signal?.aborted)
+                    abort();
+            })]);
+    }
+    finally {
+        clearTimeout(timer);
+        if (abort)
+            signal?.removeEventListener('abort', abort);
+    }
+}
+//# sourceMappingURL=retry.js.map

package/dist/packages/relay/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,WAAW,CAAC;IAC5B,gBAAgB,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC;CACnF;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,IAAI,OAAO,GAAG,KAAK,EAAE,OAAO,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EACnG,OAAO,GAAG,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iFAAiF,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtI,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc;QAC/C,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC;aAC7F,QAAQ,CAAE,CAA2B,CAAC,IAAI,IAAI,EAAE,CAAC;QACpD,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACrD,CAAC,CAAC,YAAY,SAAS,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3E,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACnC,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC;AAID,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC;QACjF,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EACzE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,MAAoB;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,IAAgB,EAAE,EAAU,EAAE,MAAoB;IACvF,IAAI,KAAgD,CAAC;IACrD,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9D,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACrE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzD,IAAI,MAAM,EAAE,OAAO;oBAAE,KAAK,EAAE,CAAC;YAC/B,CAAC,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,KAAK;YAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/packages/relay/dist/ssrf.d.ts

@@ -0,0 +1,32 @@
+import type { LookupFunction } from 'node:net';
+import type { RelayEndpointPolicy } from '@acp/core';
+export interface ResolvedAddress {
+    address: string;
+    family: 4 | 6;
+}
+/** Injectable DNS resolver. Tests pass a mock; production uses dns.lookup. */
+export interface RelayLookup {
+    (hostname: string, options?: {
+        all?: boolean;
+        family?: number;
+        verbatim?: boolean;
+    }): Promise<ResolvedAddress[]>;
+}
+export interface RelayClientSecurityOptions extends RelayEndpointPolicy {
+    lookup?: RelayLookup;
+    requestTimeoutMs?: number;
+    socketTimeoutMs?: number;
+}
+export interface ResolvedRelayEndpoint {
+    url: URL;
+    addresses: ResolvedAddress[];
+    /** Returns only the addresses accepted before the socket is opened. */
+    lookup: LookupFunction;
+}
+/**
+ * Resolve every A/AAAA answer and reject the endpoint when any address is disallowed.
+ * Literal IP hosts skip DNS. The returned lookup never resolves again.
+ */
+export declare function resolveAndValidateRelayEndpoint(value: string, options?: RelayClientSecurityOptions): Promise<ResolvedRelayEndpoint>;
+/** Fetch that dials only the addresses accepted by resolveAndValidateRelayEndpoint. */
+export declare function createPinnedRelayFetch(endpoint: string | ResolvedRelayEndpoint, options?: RelayClientSecurityOptions): typeof fetch;

package/dist/packages/relay/dist/ssrf.js

@@ -0,0 +1,213 @@
+// SPDX-License-Identifier: Apache-2.0
+import { lookup as dnsLookup } from 'node:dns/promises';
+import http from 'node:http';
+import https from 'node:https';
+import { Readable } from 'node:stream';
+import { validateIpAddress, validateRelayEndpointUrl } from '../../core/dist/index.js';
+import { RelayTimeoutError, relayDeadline, isTransientRelayError } from './retry.js';
+async function systemLookup(hostname) {
+    const found = await dnsLookup(hostname, { all: true, verbatim: true });
+    return found.map((item) => ({
+        address: item.address,
+        family: item.family === 6 ? 6 : 4,
+    }));
+}
+function pinnedNodeLookup(addresses) {
+    const listed = addresses.map((item) => ({ address: item.address, family: item.family }));
+    const lookup = (_hostname, options, callback) => {
+        const family = options.family;
+        const selected = family === 4 || family === 6 ? listed.filter((item) => item.family === family) : listed;
+        const chosen = selected.length > 0 ? selected : listed;
+        if (chosen.length === 0) {
+            callback(Object.assign(new Error('SSRF_BLOCKED_RELAY_URL'), { code: 'ENOTFOUND' }), '', 4);
+            return;
+        }
+        if (options.all) {
+            callback(null, chosen);
+            return;
+        }
+        callback(null, chosen[0].address, chosen[0].family);
+    };
+    return lookup;
+}
+function literalAddress(hostname) {
+    if (hostname.includes(':'))
+        return { address: hostname, family: 6 };
+    if (/^(?:0|[1-9]\d{0,2})(?:\.(?:0|[1-9]\d{0,2})){3}$/.test(hostname))
+        return { address: hostname, family: 4 };
+    return undefined;
+}
+/**
+ * Resolve every A/AAAA answer and reject the endpoint when any address is disallowed.
+ * Literal IP hosts skip DNS. The returned lookup never resolves again.
+ */
+export async function resolveAndValidateRelayEndpoint(value, options = {}) {
+    validateRelayEndpointUrl(value, { allowPrivateRelay: options.allowPrivateRelay });
+    const url = new URL(value);
+    const hostname = url.hostname.replace(/^\[|\]$/g, '').replace(/\.+$/, '').toLowerCase();
+    const literal = literalAddress(hostname);
+    let addresses;
+    if (literal) {
+        validateIpAddress(literal.address, { allowPrivateRelay: options.allowPrivateRelay });
+        addresses = [literal];
+    }
+    else {
+        let found;
+        try {
+            found = await relayDeadline((options.lookup ?? systemLookup)(hostname, { all: true, verbatim: true }), options.requestTimeoutMs ?? 45_000);
+        }
+        catch (error) {
+            if (isTransientRelayError(error))
+                throw error;
+            if (error instanceof Error && error.message === 'SSRF_BLOCKED_RELAY_URL')
+                throw error;
+            throw new Error('SSRF_BLOCKED_RELAY_URL');
+        }
+        if (!Array.isArray(found) || found.length === 0)
+            throw new Error('SSRF_BLOCKED_RELAY_URL');
+        addresses = found.map((item) => ({
+            address: item.address,
+            family: item.family === 6 ? 6 : 4,
+        }));
+        for (const item of addresses)
+            validateIpAddress(item.address, { allowPrivateRelay: options.allowPrivateRelay });
+    }
+    return { url, addresses, lookup: pinnedNodeLookup(addresses) };
+}
+function requestUrl(input) {
+    if (typeof input === 'string')
+        return new URL(input);
+    if (input instanceof URL)
+        return new URL(input.href);
+    return new URL(input.url);
+}
+function headerRecord(headers) {
+    const out = {};
+    new Headers(headers).forEach((value, key) => {
+        if (key === 'host')
+            return;
+        out[key] = value;
+    });
+    return out;
+}
+function abortError(signal) {
+    if (signal.reason instanceof Error)
+        return signal.reason;
+    return Object.assign(new Error('ABORT'), { name: 'AbortError' });
+}
+function sameOrigin(target, endpoint) {
+    return (target.protocol === endpoint.protocol &&
+        target.hostname === endpoint.hostname &&
+        target.port === endpoint.port);
+}
+async function pinnedRequest(pin, input, init, options = {}) {
+    const target = requestUrl(input);
+    if (!sameOrigin(target, pin.url))
+        throw new Error('SSRF_BLOCKED_RELAY_URL');
+    const secure = target.protocol === 'https:';
+    if (target.protocol !== 'http:' && target.protocol !== 'https:')
+        throw new Error('SSRF_BLOCKED_RELAY_URL');
+    const hostname = target.hostname.replace(/^\[|\]$/g, '');
+    const lib = secure ? https : http;
+    const signal = init?.signal ?? undefined;
+    return new Promise((resolve, reject) => {
+        let response;
+        const req = lib.request({
+            protocol: target.protocol,
+            hostname,
+            port: target.port === '' ? undefined : Number(target.port),
+            method: init?.method ?? (input instanceof Request ? input.method : 'GET'),
+            path: target.pathname + target.search,
+            headers: headerRecord(init?.headers),
+            lookup: pin.lookup,
+            agent: false,
+            ...(secure ? { servername: hostname } : {}),
+        }, (incoming) => {
+            response = incoming;
+            // SSE is intentionally long-lived; retain its idle timeout after headers arrive.
+            if (target.pathname.endsWith('/stream') && incoming.headers['content-type']?.startsWith('text/event-stream'))
+                clearTimeout(deadline);
+            const headers = new Headers();
+            for (const [key, value] of Object.entries(incoming.headers)) {
+                if (value === undefined)
+                    continue;
+                if (key === 'transfer-encoding' || key === 'content-length')
+                    continue;
+                if (Array.isArray(value))
+                    for (const item of value)
+                        headers.append(key, item);
+                else
+                    headers.set(key, value);
+            }
+            const status = incoming.statusCode ?? 0;
+            // 204/205/304 cannot carry a body. A stream argument makes Response throw.
+            const nullBody = status === 101 || status === 204 || status === 205 || status === 304;
+            if (nullBody)
+                incoming.resume();
+            const body = nullBody
+                ? null
+                : Readable.toWeb(incoming);
+            try {
+                resolve(new Response(body, {
+                    status,
+                    statusText: incoming.statusMessage,
+                    headers,
+                }));
+            }
+            catch (error) {
+                incoming.destroy();
+                reject(error instanceof Error ? error : new Error(String(error)));
+            }
+        });
+        const fail = (error) => {
+            if (signal?.aborted)
+                reject(abortError(signal));
+            else
+                reject(error);
+        };
+        req.on('error', fail);
+        const timeout = () => {
+            const error = new RelayTimeoutError();
+            response?.destroy(error);
+            req.destroy(error);
+        };
+        const deadline = setTimeout(timeout, options.requestTimeoutMs ?? 45_000);
+        req.setTimeout(options.socketTimeoutMs ?? 35_000, timeout);
+        req.once('close', () => clearTimeout(deadline));
+        if (signal) {
+            const onAbort = () => req.destroy(abortError(signal));
+            if (signal.aborted) {
+                req.destroy();
+                reject(abortError(signal));
+                return;
+            }
+            signal.addEventListener('abort', onAbort, { once: true });
+            req.on('close', () => signal.removeEventListener('abort', onAbort));
+        }
+        const body = init?.body ?? null;
+        if (body == null)
+            req.end();
+        else if (typeof body === 'string' || body instanceof Uint8Array)
+            req.end(body);
+        else if (body instanceof URLSearchParams)
+            req.end(body.toString());
+        else
+            req.destroy(new Error('UNSUPPORTED_BODY'));
+    });
+}
+/** Fetch that dials only the addresses accepted by resolveAndValidateRelayEndpoint. */
+export function createPinnedRelayFetch(endpoint, options = {}) {
+    let pending;
+    const resolve = () => {
+        if (typeof endpoint !== 'string')
+            return Promise.resolve(endpoint);
+        pending ??= resolveAndValidateRelayEndpoint(endpoint, options).catch((error) => {
+            if (isTransientRelayError(error))
+                pending = undefined;
+            throw error;
+        });
+        return pending;
+    };
+    return (async (input, init) => pinnedRequest(await resolve(), input, init, options));
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/packages/relay/dist/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../src/ssrf.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA6BrF,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAClC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA4B;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,QAAQ,GACZ,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACpE,IAAI,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAAa,EACb,UAAsC,EAAE;IAExC,wBAAwB,CAAC,KAAK,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,SAA4B,CAAC;IACjC,IAAI,OAAO,EAAE,CAAC;QACZ,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACrF,SAAS,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,IAAI,KAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,CAAC;QAC7I,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,qBAAqB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,wBAAwB;gBAAE,MAAM,KAAK,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3F,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAClC,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,SAAS;YAC1B,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,OAAgC;IACpD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO;QAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,IAAI,MAAM,CAAC,MAAM,YAAY,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,MAAW,EAAE,QAAa;IAC5C,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QACrC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QACrC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAA0B,EAC1B,KAAwB,EACxB,IAAkB,EAClB,UAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC7D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,QAA0C,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CACrB;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACzE,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;YACrC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;YACpC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,EACD,CAAC,QAAQ,EAAE,EAAE;YACX,QAAQ,GAAG,QAAQ,CAAC;YACpB,iFAAiF;YACjF,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,mBAAmB,CAAC;gBAC1G,YAAY,CAAC,QAAQ,CAAC,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAClC,IAAI,GAAG,KAAK,mBAAmB,IAAI,GAAG,KAAK,gBAAgB;oBAAE,SAAS;gBACtE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,KAAK,MAAM,IAAI,IAAI,KAAK;wBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;;oBACzE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,2EAA2E;YAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;YACtF,IAAI,QAAQ;gBAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,QAAQ;gBACnB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAgC,CAAC;YAC7D,IAAI,CAAC;gBACH,OAAO,CACL,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACjB,MAAM;oBACN,UAAU,EAAE,QAAQ,CAAC,aAAa;oBAClC,OAAO;iBACR,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CACF,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;;gBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACtC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACzB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,CAAC;QACzE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,eAAe,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;aACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,YAAY,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAC1E,IAAI,IAAI,YAAY,eAAe;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;;YAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sBAAsB,CACpC,QAAwC,EACxC,UAAsC,EAAE;IAExC,IAAI,OAAmD,CAAC;IACxD,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnE,OAAO,KAAK,+BAA+B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACtF,IAAI,qBAAqB,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,SAAS,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE,CAC7D,aAAa,CAAC,MAAM,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;AAC1E,CAAC"}

package/dist/packages/relay/dist/worker.d.ts

@@ -0,0 +1,92 @@
+interface DurableStorage {
+    get<T>(key: string): Promise<T | undefined>;
+    put(key: string, value: unknown): Promise<void>;
+    delete?(key: string): Promise<unknown>;
+    setAlarm?(scheduledTime: number | Date): Promise<void>;
+    deleteAlarm?(): Promise<void>;
+}
+interface DurableState {
+    storage: DurableStorage;
+    waitUntil?(promise: Promise<unknown>): void;
+    blockConcurrencyWhile<T>(callback: () => Promise<T>): Promise<T>;
+}
+/**
+ * One inbox or the registry. Storage is granular: a POST writes the new
+ * envelope, its seen-id slot, and the fixed-size meta record. Write cost does
+ * not grow with the number of queued envelopes or registered agents.
+ */
+export declare class RelayDurableObject {
+    private state;
+    private relay;
+    private handler;
+    private ready;
+    /** Serializes handler mutation, snapshot write, and rollback for every request. */
+    private turn;
+    private persistedVersion;
+    private notifications?;
+    private notificationKey;
+    private configuredNotificationKey?;
+    private committedSnapshot;
+    private cursor;
+    constructor(state: DurableState, env?: Record<string, unknown>);
+    private bootstrap;
+    /** Rewrite a pre-sharding blob into per-key records once, then drop the blob. */
+    private migrateLegacy;
+    /** Queue one turn. A rejection stays on that turn and does not poison the next one. */
+    private enqueue;
+    /**
+     * Persist the current relay. Caller must already hold the request turn.
+     * A single POST /envelopes or DELETE /envelopes/:id commits a constant
+     * number of keys (the touched envelope, its replay slot, and `meta`).
+     * The fixed-size `meta` record is independent of inbox and registry length.
+     */
+    private writeSnapshot;
+    private commitPlan;
+    private bestEffortAlarm;
+    /** Later SSE pulls persist after the request turn has released this lock. */
+    private persist;
+    /** Claims and completions are serialized; external notification delivery never holds the inbox turn. */
+    private runNotifications;
+    private scheduleNotifications;
+    alarm(): Promise<void>;
+    fetch(request: Request): Promise<Response>;
+    /** Positive waitMs on GET /envelopes. Invalid values stay on the normal handler path. */
+    private longPollWait;
+    private emptyPoll;
+    /**
+     * Authenticate and pop inside the mutation turn, then release that turn while
+     * relay.wait is pending so a POST can wake the poll.
+     */
+    private handleLongPoll;
+    private openLongPoll;
+    private finishLongPoll;
+    private handle;
+}
+export declare const DEFAULT_RATE_LIMIT_MAX = 300;
+export declare const DEFAULT_RATE_LIMIT_WINDOW_MS = 60000;
+interface RelayNamespace {
+    idFromName(name: string): unknown;
+    get(id: unknown): {
+        fetch(request: Request): Promise<Response>;
+    };
+}
+export interface RelayEdgeEnv {
+    RELAY?: RelayNamespace;
+    RATE_LIMITER?: {
+        limit(options: {
+            key: string;
+        }): Promise<{
+            success: boolean;
+        }>;
+    };
+    [key: string]: unknown;
+}
+/** Test hook. Production isolates keep this map for the life of the isolate. */
+export declare function resetRelayRateLimits(): void;
+/** CF-Connecting-IP wins. X-Forwarded-For is only a fallback for local tests. */
+export declare function clientIp(request: Request): string;
+export declare function handleRelayEdge(request: Request, env?: RelayEdgeEnv): Promise<Response>;
+declare const _default: {
+    fetch(request: Request, env?: RelayEdgeEnv): Promise<Response>;
+};
+export default _default;