sealbridge 0.2.1 → 0.3.0

package/dist/packages/runtime/dist/connection-records.d.ts

@@ -0,0 +1,167 @@
+import type { Invite, Json, Signed } from '../../core/dist/index.js';
+export declare const CONNECTION_DAY_MS = 86400000;
+export declare const CONNECTION_OFFER_TTL_MS: number;
+export declare const CONNECTION_REFUSAL_TTL_MS: number;
+export declare const CONNECTION_CAPACITY: {
+    readonly connections: 1000;
+    readonly inviteBindings: 1000;
+    readonly outbox: 100;
+    readonly priorApprovedPeers: 1000;
+    readonly refusals: 1000;
+};
+export type ConnectionState = 'none' | 'pending' | 'connected' | 'blocked';
+/** Owner-local observation of the current connection or latest retained offer. */
+export interface ConnectionStatus {
+    peerOwnerDid: string;
+    /** Informational name retained in local connection or offer metadata, when known. */
+    peerDisplayName?: string;
+    state: ConnectionState;
+    status: 'none' | 'pending_peer' | 'pending_owner' | 'connected' | 'inactive' | 'expired' | 'blocked';
+    requestId?: string;
+    direction?: 'incoming' | 'outgoing';
+    createdAt?: number;
+    expiresAt?: number;
+    connectionId?: string;
+    connectedAt?: number;
+    /** Outgoing: ACK awaits sending. Incoming: acceptance awaits the peer ACK. */
+    acknowledgementPending?: boolean;
+}
+export type ConnectionTrust = 'unknown' | 'limited' | 'denied';
+export interface ConnectionIncomingOffer {
+    requestId: string;
+    requestDigest: string;
+    receivedAt: number;
+    expiresAt: number;
+}
+export interface ConnectionOutgoingOffer {
+    requestId: string;
+    requestDigest: string;
+    createdAt: number;
+    expiresAt: number;
+    ownerConsentDigest: string;
+}
+export interface ConnectionRecord {
+    peerOwnerDid: string;
+    peerAgentDid?: string;
+    peerDisplayName?: string;
+    relayUrl: string;
+    state: 'pending' | 'connected';
+    incoming?: ConnectionIncomingOffer;
+    outgoing?: ConnectionOutgoingOffer;
+    connectionId?: string;
+    connectedAt?: number;
+    source?: 'request' | 'invite' | 'prior-approval';
+    localConsentDigest?: string;
+    remoteAcceptanceDigest?: string;
+}
+export interface InviteBindingRecord {
+    inviteDigest: string;
+    requesterOwnerDid: string;
+    boundAt: number;
+    tokenExpiresAt: number;
+    connectionId: string;
+}
+export interface PriorApprovedPeer {
+    peerOwnerDid: string;
+    peerDisplayName?: string;
+    lastApprovedAt?: number;
+    sourceRequestIds: string[];
+    legacyTrust: 'limited' | 'trusted';
+}
+/** Callers supply owner-signed control data and omit invitation tokens and task input. */
+export interface ConnectionOutboxRecord {
+    eventId: string;
+    peerOwnerDid: string;
+    relayUrl: string;
+    signedEvent: Signed<Json>;
+    deliveryDeadline: number;
+    state: 'pending' | 'delivered';
+}
+export interface ConnectionData {
+    connections: ConnectionRecord[];
+    inviteBindings: InviteBindingRecord[];
+    refusals: Array<{
+        peerOwnerDid: string;
+        refuseUntil: number;
+    }>;
+    priorApprovedPeers: PriorApprovedPeer[];
+    outbox: ConnectionOutboxRecord[];
+}
+/** Peer names are informational; owner and agent DIDs determine identity. */
+export interface ConnectionPeer {
+    peerOwnerDid: string;
+    peerAgentDid?: string;
+    peerDisplayName?: string;
+    relayUrl: string;
+}
+export interface ConnectionSummary {
+    peerOwnerDid: string;
+    peerAgentDid?: string;
+    peerDisplayName?: string;
+    relayUrl?: string;
+    state: Exclude<ConnectionState, 'none'>;
+}
+export interface RecordOutgoingConnection extends ConnectionPeer {
+    outgoing: ConnectionOutgoingOffer;
+}
+export interface RecordIncomingConnection extends ConnectionPeer {
+    incoming: ConnectionIncomingOffer;
+}
+export interface ApproveConnectionInput {
+    peerOwnerDid: string;
+    requestId: string;
+    requestDigest: string;
+    connectionId: string;
+    localConsentDigest: string;
+    outbox: ConnectionOutboxRecord;
+    source?: 'request' | 'prior-approval';
+}
+/** The exchange layer verifies remote signature and identities before calling this port. */
+export interface ApplyConnectionAcceptedInput {
+    peerOwnerDid: string;
+    requestId: string;
+    requestDigest: string;
+    connectionId: string;
+    remoteAcceptanceDigest: string;
+}
+/** Pass a parsed, verified, unrevoked issuer invitation and an authenticated requester owner DID. */
+export interface BindInviteFirstUseInput extends ConnectionPeer {
+    invite: Invite;
+    connectionId: string;
+    localConsentDigest: string;
+    outbox: ConnectionOutboxRecord;
+}
+/** Structural port for owner-local persistence; it has no transport or review policy. */
+export interface ConnectionPersistence {
+    connectionState(peerOwnerDid: string): ConnectionState;
+    connectionLevel(peerOwnerDid: string): ConnectionTrust;
+    listConnections(): ConnectionSummary[];
+    listPriorApprovedPeers(): PriorApprovedPeer[];
+    recordOutgoing(input: RecordOutgoingConnection): void;
+    recordIncoming(input: RecordIncomingConnection): void;
+    approveConnection(input: ApproveConnectionInput): void;
+    applyAccepted(input: ApplyConnectionAcceptedInput): void;
+    rejectConnection(peerOwnerDid: string): void;
+    disconnect(peerOwnerDid: string): void;
+    block(peerOwnerDid: string): void;
+    unblock(peerOwnerDid: string): void;
+    bindInviteFirstUse(input: BindInviteFirstUseInput): 'first' | 'same' | 'other';
+    listConnectionOutbox(): ConnectionOutboxRecord[];
+    markConnectionEventDelivered(eventId: string): void;
+}
+/** Explicit adapter with no store-specific fields exposed to consumers. */
+export declare function connectionPersistencePort(store: ConnectionPersistence): ConnectionPersistence;
+export declare function emptyConnectionData(): ConnectionData;
+export declare function projectConnectionState(data: ConnectionData, denials: string[], peer: string, now: number): ConnectionState;
+export declare function projectConnectionTrust(state: ConnectionState): ConnectionTrust;
+export declare function pruneConnectionData(data: ConnectionData, now: number): void;
+export declare function assertConnectionCapacity(data: ConnectionData): void;
+export declare function validConnectionPeer(p: ConnectionPeer): boolean;
+export declare function assertConnectionOwnerDid(peerOwnerDid: string): void;
+export declare function validConnectionOffer(o: ConnectionIncomingOffer | ConnectionOutgoingOffer, outgoing: boolean): boolean;
+export declare function validConnectionOutbox(e: ConnectionOutboxRecord, owner: string): boolean;
+export declare function assertConnectionCommit(connectionId: string, consentDigest: string): void;
+/** Validate the persisted lifecycle, including uniqueness and explicit connected consent. */
+export declare function validConnectionData(d: ConnectionData, owner: string): boolean;
+/** Canonical parsed invitations have the same digest for each supported URI encoding. */
+export declare function connectionInviteDigest(invite: Invite): string;

package/dist/packages/runtime/dist/connection-records.js

@@ -0,0 +1,132 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest, verifySigned } from '../../core/dist/index.js';
+export const CONNECTION_DAY_MS = 86_400_000;
+export const CONNECTION_OFFER_TTL_MS = 14 * CONNECTION_DAY_MS;
+export const CONNECTION_REFUSAL_TTL_MS = 7 * CONNECTION_DAY_MS;
+export const CONNECTION_CAPACITY = { connections: 1000, inviteBindings: 1000, outbox: 100,
+    priorApprovedPeers: 1000, refusals: 1000 };
+/** Explicit adapter with no store-specific fields exposed to consumers. */
+export function connectionPersistencePort(store) {
+    return {
+        connectionState: did => store.connectionState(did), connectionLevel: did => store.connectionLevel(did),
+        listConnections: () => store.listConnections(), listPriorApprovedPeers: () => store.listPriorApprovedPeers(),
+        recordOutgoing: input => store.recordOutgoing(input), recordIncoming: input => store.recordIncoming(input),
+        approveConnection: input => store.approveConnection(input), applyAccepted: input => store.applyAccepted(input),
+        rejectConnection: did => store.rejectConnection(did), disconnect: did => store.disconnect(did),
+        block: did => store.block(did), unblock: did => store.unblock(did),
+        bindInviteFirstUse: input => store.bindInviteFirstUse(input),
+        listConnectionOutbox: () => store.listConnectionOutbox(),
+        markConnectionEventDelivered: id => store.markConnectionEventDelivered(id),
+    };
+}
+export function emptyConnectionData() {
+    return { connections: [], inviteBindings: [], refusals: [], priorApprovedPeers: [], outbox: [] };
+}
+export function projectConnectionState(data, denials, peer, now) {
+    if (denials.includes(peer))
+        return 'blocked';
+    const r = data.connections.find(c => c.peerOwnerDid === peer);
+    return r?.state === 'connected' ? 'connected' : r &&
+        ((r.incoming?.expiresAt ?? 0) > now || (r.outgoing?.expiresAt ?? 0) > now) ? 'pending' : 'none';
+}
+export function projectConnectionTrust(state) {
+    return state === 'blocked' ? 'denied' : state === 'connected' ? 'limited' : 'unknown';
+}
+export function pruneConnectionData(data, now) {
+    data.connections = data.connections.filter(c => {
+        if (c.state === 'connected')
+            return true;
+        if (c.incoming && c.incoming.expiresAt <= now)
+            delete c.incoming;
+        if (c.outgoing && c.outgoing.expiresAt <= now)
+            delete c.outgoing;
+        return !!(c.incoming || c.outgoing);
+    });
+    data.inviteBindings = data.inviteBindings.filter(b => b.tokenExpiresAt > now);
+    data.refusals = data.refusals.filter(r => r.refuseUntil > now);
+    data.outbox = data.outbox.filter(e => e.deliveryDeadline > now);
+}
+export function assertConnectionCapacity(data) {
+    for (const key of Object.keys(CONNECTION_CAPACITY))
+        if (data[key].length > CONNECTION_CAPACITY[key])
+            throw new Error('CONNECTION_STORE_FULL');
+}
+const text = (v, max = 512) => typeof v === 'string' && v.length > 0 && v.length <= max && !/[\p{Cc}\p{Cf}]/u.test(v);
+const did = (v) => text(v) && v.startsWith('did:');
+const hash = (v) => typeof v === 'string' && /^sha256:[a-f0-9]{64}$/.test(v);
+const time = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0 && v <= 8_640_000_000_000_000;
+const object = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+function keys(v, allowed) { return Object.keys(v).every(k => allowed.includes(k)); }
+function relay(v) {
+    if (!text(v, 2048))
+        return false;
+    try {
+        const u = new URL(v);
+        return ['http:', 'https:'].includes(u.protocol) && !u.username && !u.password && !u.search && !u.hash;
+    }
+    catch {
+        return false;
+    }
+}
+export function validConnectionPeer(p) {
+    return object(p) && did(p.peerOwnerDid) && (p.peerAgentDid === undefined || did(p.peerAgentDid)) &&
+        (p.peerDisplayName === undefined || typeof p.peerDisplayName === 'string' && p.peerDisplayName.length > 0) && relay(p.relayUrl);
+}
+export function assertConnectionOwnerDid(peerOwnerDid) {
+    if (!did(peerOwnerDid))
+        throw new Error('INTAKE_STORE_INVALID');
+}
+export function validConnectionOffer(o, outgoing) {
+    if (!object(o) || !text(o.requestId, 128) || !hash(o.requestDigest) || !time(o.expiresAt))
+        return false;
+    const start = outgoing ? o.createdAt : o.receivedAt;
+    return time(start) && o.expiresAt > start && o.expiresAt - start <= CONNECTION_OFFER_TTL_MS &&
+        (outgoing ? hash(o.ownerConsentDigest) &&
+            keys(o, ['requestId', 'requestDigest', 'createdAt', 'expiresAt', 'ownerConsentDigest']) :
+            keys(o, ['requestId', 'requestDigest', 'receivedAt', 'expiresAt']));
+}
+export function validConnectionOutbox(e, owner) {
+    return object(e) && keys(e, ['eventId', 'peerOwnerDid', 'relayUrl', 'signedEvent', 'deliveryDeadline', 'state']) &&
+        text(e.eventId, 128) && did(e.peerOwnerDid) && relay(e.relayUrl) && time(e.deliveryDeadline) &&
+        ['pending', 'delivered'].includes(e.state) && object(e.signedEvent) && verifySigned(e.signedEvent, owner) &&
+        Buffer.byteLength(JSON.stringify(e)) <= 8192;
+}
+export function assertConnectionCommit(connectionId, consentDigest) {
+    if (!text(connectionId, 128) || !hash(consentDigest))
+        throw new Error('INTAKE_STORE_INVALID');
+}
+/** Validate the persisted lifecycle, including uniqueness and explicit connected consent. */
+export function validConnectionData(d, owner) {
+    if (!object(d) || !Object.keys(CONNECTION_CAPACITY)
+        .every(k => Array.isArray(d[k]) && d[k].length <= CONNECTION_CAPACITY[k]))
+        return false;
+    const unique = (rows, key) => new Set(rows.map(key)).size === rows.length;
+    if (d.connections.some(c => !validConnectionPeer(c) ||
+        !keys(c, ['peerOwnerDid', 'peerAgentDid', 'peerDisplayName', 'relayUrl', 'state', 'incoming', 'outgoing', 'connectionId', 'connectedAt', 'source', 'localConsentDigest', 'remoteAcceptanceDigest']) ||
+        (c.incoming !== undefined && !validConnectionOffer(c.incoming, false)) ||
+        (c.outgoing !== undefined && !validConnectionOffer(c.outgoing, true)) ||
+        (c.state === 'pending' ? !(c.incoming || c.outgoing) ||
+            ['connectionId', 'connectedAt', 'source', 'localConsentDigest', 'remoteAcceptanceDigest'].some(k => Object.hasOwn(c, k)) :
+            c.state !== 'connected' || !text(c.connectionId, 128) || !time(c.connectedAt) ||
+                !['request', 'invite', 'prior-approval'].includes(c.source) || !hash(c.localConsentDigest) ||
+                (c.source !== 'invite' && !(c.incoming || c.outgoing)) ||
+                (!c.incoming && c.source !== 'invite' && !hash(c.remoteAcceptanceDigest)) ||
+                (c.remoteAcceptanceDigest !== undefined && !hash(c.remoteAcceptanceDigest)))))
+        return false;
+    if (d.inviteBindings.some(b => !object(b) || !keys(b, ['inviteDigest', 'requesterOwnerDid', 'boundAt', 'tokenExpiresAt', 'connectionId']) ||
+        !hash(b.inviteDigest) || !did(b.requesterOwnerDid) || !time(b.boundAt) || !time(b.tokenExpiresAt) ||
+        b.tokenExpiresAt <= b.boundAt || !text(b.connectionId, 128)) ||
+        d.refusals.some(r => !object(r) || !keys(r, ['peerOwnerDid', 'refuseUntil']) || !did(r.peerOwnerDid) || !time(r.refuseUntil)) ||
+        d.priorApprovedPeers.some(p => !object(p) || !keys(p, ['peerOwnerDid', 'peerDisplayName', 'lastApprovedAt', 'sourceRequestIds', 'legacyTrust']) ||
+            !did(p.peerOwnerDid) || (p.peerDisplayName !== undefined && (typeof p.peerDisplayName !== 'string' || !p.peerDisplayName)) ||
+            (p.lastApprovedAt !== undefined && !time(p.lastApprovedAt)) ||
+            !['limited', 'trusted'].includes(p.legacyTrust) || !Array.isArray(p.sourceRequestIds) || p.sourceRequestIds.length > 200 ||
+            p.sourceRequestIds.some(id => !text(id, 128)) || new Set(p.sourceRequestIds).size !== p.sourceRequestIds.length) ||
+        d.outbox.some(e => !validConnectionOutbox(e, owner)))
+        return false;
+    return unique(d.connections, c => c.peerOwnerDid) && unique(d.inviteBindings, b => b.inviteDigest) &&
+        unique(d.refusals, r => r.peerOwnerDid) && unique(d.priorApprovedPeers, p => p.peerOwnerDid) && unique(d.outbox, e => e.eventId);
+}
+/** Canonical parsed invitations have the same digest for each supported URI encoding. */
+export function connectionInviteDigest(invite) { return digest(invite); }
+//# sourceMappingURL=connection-records.js.map

package/dist/packages/runtime/dist/connection-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-records.js","sourceRoot":"","sources":["../src/connection-records.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,iBAAiB,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,iBAAiB,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;IACvF,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAW,CAAC;AAsFtD,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,KAA4B;IACpE,OAAO;QACL,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC;QACtG,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE;QAC5G,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC;QAC1G,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;QAC9G,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9F,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAClE,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAC5D,oBAAoB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE;QACxD,4BAA4B,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,mBAAmB;IACjC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnG,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,IAAoB,EAAE,OAAiB,EAAE,IAAY,EAAE,GAAW;IACvG,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACpG,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,IAAoB,EAAE,GAAW;IACnE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC7C,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;QACjE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;QACjE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,IAAoB;IAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAA4C;QAC3F,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC9F,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,GAAG,GAAG,GAAG,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5I,MAAM,GAAG,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACzE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnG,MAAM,IAAI,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC;AACnI,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/G,SAAS,IAAI,CAAC,CAAS,EAAE,OAAiB,IAAa,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/G,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IACpI,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,CAAiB;IACnD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACpI,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,CAAoD,EAAE,QAAiB;IAC1G,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACxG,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAA6B,CAAC,SAAS,CAAC,CAAC,CAAE,CAA6B,CAAC,UAAU,CAAC;IAC9G,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,KAAK,IAAI,uBAAuB;QACzF,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAE,CAA6B,CAAC,kBAAkB,CAAC;YACjE,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,CAAyB,EAAE,KAAa;IAC5E,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC9G,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5F,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC;QACzG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,YAAoB,EAAE,aAAqB;IAChF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAChG,CAAC;AACD,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,CAAiB,EAAE,KAAa;IAClE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAA6C;SAC7F,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAI,IAAS,EAAE,GAAqB,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC;IACpG,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACjD,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;QACnM,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC;YAClD,CAAC,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1H,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC7E,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBAC3F,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACtD,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC,sBAAsB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACrI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QACjG,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC7H,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;YAC7I,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1H,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC3D,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,GAAG;YACxH,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAClH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAChG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACrI,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CAAC,MAAc,IAAY,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC"}

package/dist/packages/runtime/dist/connection-router.d.ts

@@ -0,0 +1,45 @@
+import type { KeyPair, SignedAgentCard, SignedEnvelope, RevocationList } from '../../core/dist/index.js';
+import type { RelayTransport } from '../../relay/dist/index.js';
+import { ConnectionService } from './connection-service.js';
+import type { ConnectionHumanReviewProvider } from './connection-service.js';
+import { HeldRequestReview } from './held-request-review.js';
+import type { WorkerTrustStore } from './worker-trust-store.js';
+import type { ConnectionRecord } from './connection-records.js';
+export interface ConnectedEvent {
+    event: 'connected';
+    peerOwnerDid: string;
+    peerAgentDid?: string;
+    connectionId: string;
+    source: ConnectionRecord['source'];
+    connectedAt: number;
+}
+export interface ConnectionRouterOptions {
+    owner: KeyPair;
+    agentCard: SignedAgentCard;
+    relayUrl: string;
+    relay: RelayTransport;
+    store: WorkerTrustStore;
+    review: HeldRequestReview;
+    now?: () => number;
+    humanReview?: ConnectionHumanReviewProvider;
+    revocations?: RevocationList;
+    allowPrivateRelay?: boolean;
+    assertPeer?: (did: string) => void;
+    onConnectionEvent?: (event: ConnectedEvent) => void;
+}
+/** Control events are consumed by the existing role reader before task mailbox routing. */
+export declare class ConnectionRouter {
+    readonly options: ConnectionRouterOptions;
+    readonly service: ConnectionService;
+    constructor(options: ConnectionRouterOptions);
+    private notify;
+    consume(envelope: SignedEnvelope): Promise<boolean>;
+    /** Hosts discard terminal control decisions locally and keep their task reader running. */
+    route(envelope: SignedEnvelope): Promise<boolean>;
+    approve(envelope: SignedEnvelope): Promise<import("./connection-service.js").ConnectionServiceResult>;
+}
+/** Explicit control-only sync. A task at the queue head is left for the task listener. */
+export declare function syncConnections(router: ConnectionRouter, options?: {
+    once?: boolean;
+    signal?: AbortSignal;
+}): Promise<void>;

package/dist/packages/runtime/dist/connection-router.js

@@ -0,0 +1,130 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest, isConnectionEvent, openEnvelope } from '../../core/dist/index.js';
+import { waitForRelayRetry } from '../../relay/dist/index.js';
+import { acknowledgeRelay } from './session-audit.js';
+import { ConnectionService } from './connection-service.js';
+import { StoredConnectionExchange } from './connection-persistence.js';
+import { openConnectionFrame } from './connection-transport.js';
+import { heldContentDigest } from './held-request-review.js';
+/** Control events are consumed by the existing role reader before task mailbox routing. */
+export class ConnectionRouter {
+    options;
+    service;
+    constructor(options) {
+        this.options = options;
+        const { review, owner } = options;
+        const find = (contentDigest) => review.list().find(r => r.kind === 'connection' &&
+            digest(openConnectionFrame(review.store.read(r.id).envelope, owner).event) === contentDigest);
+        const inspection = {
+            async hold(envelope, context) {
+                const frame = openConnectionFrame(envelope, owner);
+                options.store.consumeAdmission(frame.event.payload.fromOwnerDid, frame.requestId);
+                const previous = find(context.contentDigest);
+                if (previous)
+                    return;
+                review.hold({ kind: 'connection', senderOwnerDid: frame.event.payload.fromOwnerDid,
+                    requestId: frame.requestId, contentDigest: heldContentDigest('connection', openEnvelope(envelope, owner)),
+                    deadline: Date.parse(context.expiresAt), envelope });
+            },
+            async inspect(contentDigest) {
+                const held = find(contentDigest);
+                if (!held)
+                    return { contentDigest, status: 'unavailable' };
+                const result = await review.inspect(held.id);
+                return { contentDigest, status: result.inspectionStatus === 'complete' ? 'complete' :
+                        result.inspectionStatus === 'error' ? 'error' : 'unavailable' };
+            },
+            async discard(contentDigest) { const held = find(contentDigest); if (held)
+                review.discard(held.id); },
+        };
+        this.service = new ConnectionService({ ...options, persistence: new StoredConnectionExchange(options.store),
+            inspection, transport: { send: async (url, envelope) => {
+                    if (url !== options.relayUrl)
+                        throw new Error('CONNECTION_RELAY_MISMATCH');
+                    options.assertPeer?.(envelope.payload.recipientDid);
+                    await options.relay.send(envelope);
+                } } });
+    }
+    notify(before) {
+        for (const c of this.options.store.listConnections())
+            if ('connectionId' in c && c.state === 'connected' &&
+                !before.some(b => 'connectionId' in b && b.connectionId === c.connectionId && b.state === 'connected'))
+                this.options.onConnectionEvent?.({ event: 'connected', peerOwnerDid: c.peerOwnerDid,
+                    ...(c.peerAgentDid ? { peerAgentDid: c.peerAgentDid } : {}), connectionId: c.connectionId,
+                    source: c.source, connectedAt: c.connectedAt });
+    }
+    async consume(envelope) {
+        if (!isConnectionEvent(envelope.payload.eventType))
+            return false;
+        // Block is silent and creates no held-content entry.
+        try {
+            this.options.assertPeer?.(envelope.payload.senderDid);
+        }
+        catch {
+            await acknowledgeRelay(this.options.relay, envelope);
+            return true;
+        }
+        if (this.options.store.connectionState(envelope.payload.senderDid) === 'blocked') {
+            await acknowledgeRelay(this.options.relay, envelope);
+            return true;
+        }
+        const before = this.options.store.listConnections();
+        await this.service.receive(envelope);
+        this.notify(before);
+        await acknowledgeRelay(this.options.relay, envelope);
+        return true;
+    }
+    /** Hosts discard terminal control decisions locally and keep their task reader running. */
+    async route(envelope) {
+        try {
+            return await this.consume(envelope);
+        }
+        catch (error) {
+            const code = error instanceof Error ? error.message.split(':')[0] : '';
+            if (!/^(?:INVALID_CONNECTION_|INVALID_AGENT_CARD$|CONNECTION_NOT_PENDING$|CONNECTION_REQUEST_EXPIRED$|CONNECTION_ALREADY_DECIDED$|CONNECTION_REQUEST_COOLDOWN$|INVITE_EXPIRED$|INVITE_WORKER_MISMATCH$|TOKEN_REVOKED$|INTAKE_RATE_LIMITED$)/.test(code))
+                throw error;
+            await acknowledgeRelay(this.options.relay, envelope);
+            return true;
+        }
+    }
+    async approve(envelope) {
+        const before = this.options.store.listConnections();
+        const result = await this.service.approve(envelope);
+        this.notify(before);
+        return result;
+    }
+}
+/** Explicit control-only sync. A task at the queue head is left for the task listener. */
+export async function syncConnections(router, options = {}) {
+    await router.service.flushOutbox();
+    try {
+        do {
+            if (options.signal?.aborted)
+                return;
+            const relay = router.options.relay, ownerDid = router.options.owner.did;
+            // Known offers can receive late acceptance even when a task is at the queue head.
+            const taskIds = router.options.store.controlSnapshot().filter(r => r.active &&
+                Date.parse(r.offer.expiresAt) > (router.options.now ?? Date.now)()).map(r => 'conn_' + r.offer.requestId);
+            const known = taskIds.length ? await relay.receive(ownerDid, 0, options.signal, { taskId: taskIds, lease: true }) : undefined;
+            if (known) {
+                await router.route(known);
+                if (options.once)
+                    return;
+                continue;
+            }
+            const next = await relay.receive(ownerDid, options.once ? 0 : 1000, options.signal, { role: 'worker', peek: true });
+            if (next && isConnectionEvent(next.payload.eventType)) {
+                const envelope = await relay.receive(ownerDid, 0, options.signal, { taskId: next.payload.taskId, lease: true });
+                if (envelope)
+                    await router.route(envelope);
+            }
+            else if (!options.once)
+                await waitForRelayRetry(100, options.signal);
+        } while (!options.once);
+    }
+    catch (error) {
+        if (!options.signal?.aborted)
+            throw error;
+    }
+}
+//# sourceMappingURL=connection-router.js.map

package/dist/packages/runtime/dist/connection-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-router.js","sourceRoot":"","sources":["../src/connection-router.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAqB,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAehF,2FAA2F;AAC3F,MAAM,OAAO,gBAAgB;IAEN;IADZ,OAAO,CAAoB;IACpC,YAAqB,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;QACnD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,aAAqB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY;YACrF,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,CAAC;QACjG,MAAM,UAAU,GAA6B;YAC3C,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO;gBAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC7C,IAAI,QAAQ;oBAAE,OAAO;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY;oBAChF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBACzG,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,aAAa;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;wBACnF,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACpE,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SACtG,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC;YACzG,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;oBACrD,IAAI,GAAG,KAAK,OAAO,CAAC,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBAC3E,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1F,CAAC,EAAE,EAAE,CAAC,CAAC;IACX,CAAC;IACO,MAAM,CAAC,MAAuD;QACpE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE;YAAE,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;gBACtG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC;gBACtG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;oBACjF,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAa;oBAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,WAAY,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAwB;QACpC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,qDAAqD;QACrD,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAC9D,MAAM,CAAC;YAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACjF,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACpD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2FAA2F;IAC3F,KAAK,CAAC,KAAK,CAAC,QAAwB;QAClC,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC5C,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,uOAAuO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrQ,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACpE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAwB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAC1F,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAwB,EAAE,UAAoD,EAAE;IACpH,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,GAAG,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO;YACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YACxE,kFAAkF;YAClF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;gBACzE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5G,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9H,IAAI,KAAK,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,OAAO,CAAC,IAAI;oBAAE,OAAO;gBAAC,SAAS;YAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,IAAI,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChH,IAAI,QAAQ;oBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,MAAM,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;AAChE,CAAC"}