@cortexkit/subc-client - npm Package Compare versions

Comparing version 0.3.0 to 0.3.1

dist/auth.d.ts

+import type { ConnectionInfo } from "./connection-file.js";
+import { SubcSocket } from "./socket.js";
+export declare const NONCE_LEN = 32;
+export declare const PROOF_LEN = 32;
+export declare const MAX_AUTH_MESSAGE_LEN = 4096;
+export declare const SERVER_PROOF_DOMAIN = "subc-server-v1";
+export declare const CLIENT_AUTH_DOMAIN = "subc-client-v1";
+export declare const DEFAULT_CLIENT_ROLE = "client";
+export declare class AuthError extends Error {
+}
+/** HMAC-SHA256 over domain ‖ client_nonce ‖ server_nonce ‖ daemon_id. */
+export declare function computeProof(key: Uint8Array, domain: string, clientNonce: Uint8Array, serverNonce: Uint8Array, daemonId: Uint8Array): Uint8Array;
+/**
+ * Run the client handshake over an already-connected socket. Resolves on
+ * success; throws AuthError on any proof/identity mismatch or framing fault.
+ * The whole exchange is bounded by `deadlineMs` (epoch ms).
+ */
+export declare function authenticateClient(sock: SubcSocket, conn: ConnectionInfo, deadlineMs: number): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

dist/auth.d.ts.map

+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,mBAAmB,WAAW,CAAC;AAE5C,qBAAa,SAAU,SAAQ,KAAK;CAAG;AAEvC,yEAAyE;AACzE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,UAAU,EACvB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,UAAU,GACnB,UAAU,CAOZ;AA2CD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,cAAc,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAwBf"}

dist/auth.js

+// Port of subc-transport's auth.rs client handshake. The proof construction,
+// domain strings, message framing, and verification order must match the Rust
+// byte-for-byte: a single byte of drift fails authentication outright.
+//
+// Handshake (client side):
+//   1. send ClientHello { client_nonce, role }
+//   2. receive ServerProof { daemon_id, server_nonce, daemon_ver, server_proof }
+//   3. verify server_proof == HMAC(key, "subc-server-v1" ‖ cn ‖ sn ‖ did)  (constant-time)
+//      and daemon_id == the id from the connection file
+//   4. send ClientAuth { client_auth = HMAC(key, "subc-client-v1" ‖ cn ‖ sn ‖ did) }
+//
+// Each message on the wire is a 4-byte little-endian length prefix followed by
+// the JSON body. Byte arrays (nonces, proofs, ids) serialize as JSON arrays of
+// numbers, matching serde's default for [u8; N].
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+export const NONCE_LEN = 32;
+export const PROOF_LEN = 32;
+export const MAX_AUTH_MESSAGE_LEN = 4096;
+export const SERVER_PROOF_DOMAIN = "subc-server-v1";
+export const CLIENT_AUTH_DOMAIN = "subc-client-v1";
+export const DEFAULT_CLIENT_ROLE = "client";
+export class AuthError extends Error {
+}
+/** HMAC-SHA256 over domain ‖ client_nonce ‖ server_nonce ‖ daemon_id. */
+export function computeProof(key, domain, clientNonce, serverNonce, daemonId) {
+    const mac = createHmac("sha256", Buffer.from(key));
+    mac.update(Buffer.from(domain, "utf8"));
+    mac.update(Buffer.from(clientNonce));
+    mac.update(Buffer.from(serverNonce));
+    mac.update(Buffer.from(daemonId));
+    return new Uint8Array(mac.digest());
+}
+function constantTimeEq(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(Buffer.from(a), Buffer.from(b));
+}
+async function writeMessage(sock, value, deadlineMs) {
+    const json = Buffer.from(JSON.stringify(value), "utf8");
+    if (json.length > MAX_AUTH_MESSAGE_LEN) {
+        throw new AuthError(`auth message too large: ${json.length} > ${MAX_AUTH_MESSAGE_LEN}`);
+    }
+    const lenPrefix = new Uint8Array(4);
+    new DataView(lenPrefix.buffer).setUint32(0, json.length, true);
+    await sock.write(lenPrefix, deadlineMs);
+    await sock.write(json, deadlineMs);
+}
+async function readMessage(sock, deadlineMs) {
+    const lenBytes = await sock.readExact(4, deadlineMs);
+    const len = new DataView(lenBytes.buffer, lenBytes.byteOffset, 4).getUint32(0, true);
+    if (len > MAX_AUTH_MESSAGE_LEN) {
+        throw new AuthError(`auth message too large: ${len} > ${MAX_AUTH_MESSAGE_LEN}`);
+    }
+    const body = len === 0 ? new Uint8Array(0) : await sock.readExact(len, deadlineMs);
+    try {
+        return JSON.parse(Buffer.from(body).toString("utf8"));
+    }
+    catch (err) {
+        throw new AuthError(`auth message JSON decode failed: ${String(err)}`);
+    }
+}
+/**
+ * Run the client handshake over an already-connected socket. Resolves on
+ * success; throws AuthError on any proof/identity mismatch or framing fault.
+ * The whole exchange is bounded by `deadlineMs` (epoch ms).
+ */
+export async function authenticateClient(sock, conn, deadlineMs) {
+    const clientNonce = new Uint8Array(randomBytes(NONCE_LEN));
+    await writeMessage(sock, { client_nonce: Array.from(clientNonce), role: DEFAULT_CLIENT_ROLE }, deadlineMs);
+    const proof = await readMessage(sock, deadlineMs);
+    const serverNonce = Uint8Array.from(proof.server_nonce);
+    const daemonId = Uint8Array.from(proof.daemon_id);
+    const serverProof = Uint8Array.from(proof.server_proof);
+    const expected = computeProof(conn.key, SERVER_PROOF_DOMAIN, clientNonce, serverNonce, daemonId);
+    if (!constantTimeEq(expected, serverProof)) {
+        throw new AuthError("server proof mismatch — wrong key or impostor daemon");
+    }
+    if (!constantTimeEq(daemonId, conn.daemonId)) {
+        throw new AuthError("daemon id mismatch — connection file points at a different daemon");
+    }
+    const clientAuth = computeProof(conn.key, CLIENT_AUTH_DOMAIN, clientNonce, serverNonce, daemonId);
+    await writeMessage(sock, { client_auth: Array.from(clientAuth) }, deadlineMs);
+}
+//# sourceMappingURL=auth.js.map

dist/auth.js.map

+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,uEAAuE;AACvE,EAAE;AACF,2BAA2B;AAC3B,+CAA+C;AAC/C,iFAAiF;AACjF,2FAA2F;AAC3F,wDAAwD;AACxD,qFAAqF;AACrF,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,iDAAiD;AAEjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKvE,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAE5C,MAAM,OAAO,SAAU,SAAQ,KAAK;CAAG;AAEvC,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAC1B,GAAe,EACf,MAAc,EACd,WAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,CAAa,EAAE,CAAa;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAgB,EAChB,KAAc,EACd,UAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,2BAA2B,IAAI,CAAC,MAAM,MAAM,oBAAoB,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,IAAgB,EAAE,UAAkB;IAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACrF,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,2BAA2B,GAAG,MAAM,oBAAoB,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAgB,EAChB,IAAoB,EACpB,UAAkB;IAElB,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAE3D,MAAM,YAAY,CAChB,IAAI,EACJ,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EACpE,UAAU,CACX,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAqB,IAAI,EAAE,UAAU,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACjG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;AAChF,CAAC"}

dist/client.d.ts

+import { type ConnectionInfo } from "./connection-file.js";
+import { Priority } from "./envelope.js";
+export declare const SUBC_MODULE_ID_ENV = "SUBC_MODULE_ID";
+export declare const SUBC_LAUNCH_NONCE_ENV = "SUBC_LAUNCH_NONCE";
+export interface BindIdentity {
+    project_root: string;
+    harness: string;
+    session: string;
+}
+export type RouteTarget = {
+    kind: "tool_provider";
+    module_id: string;
+} | {
+    kind: "management_surface";
+    module_id: string;
+} | {
+    kind: "internal_service";
+    module_id: string;
+    service_id: string;
+};
+export type ManagedRouteKind = "management_surface" | "tool_provider";
+export interface ConsumerIdentity {
+    module_id: string;
+    launch_nonce: string;
+}
+export interface RouteOpenOptions {
+    /** Optional override for the consumer identity; by default the SUBC_MODULE_ID and SUBC_LAUNCH_NONCE environment variables are used when both are non-empty. Set null to send route.open without consumer_identity. */
+    consumerIdentity?: ConsumerIdentity | null;
+}
+export interface CatalogEntry {
+    module_id: string;
+    roles: unknown[];
+    control_ops: string[];
+}
+export interface RequestOptions {
+    priority?: Priority;
+    timeoutMs?: number;
+    /** Called for each interim PUSH / StreamData frame before the terminal reply. */
+    onProgress?: (body: Uint8Array) => void;
+}
+export interface ManagedCallOptions extends RequestOptions {
+    /** Overrides the per-client identity used for route.open before this call. */
+    identity?: BindIdentity;
+    /** Defaults to management_surface, matching the store/host management APIs. */
+    targetKind?: ManagedRouteKind;
+    /** Optional override for the consumer identity; by default the SUBC_MODULE_ID and SUBC_LAUNCH_NONCE environment variables are used when both are non-empty. Set null to send route.open without consumer_identity. */
+    consumerIdentity?: ConsumerIdentity | null;
+}
+export interface SubscribeOptions {
+    priority?: Priority;
+}
+export interface CloseRouteOptions {
+    /**
+     * Await in-flight UNARY requests on the route to settle before tearing it down.
+     * Subscriptions are always aborted (a held-open stream cannot be drained).
+     * Defaults to false: close immediately, aborting everything in flight.
+     */
+    drain?: boolean;
+    /** Consumer identity to use when looking up the route to close; only needed for routes opened with a non-default consumer identity. */
+    consumerIdentity?: ConsumerIdentity | null;
+}
+/**
+ * Capped exponential reconnect backoff. maxAttempts includes the first immediate
+ * reconnect attempt; sleeps happen only between failed transient attempts.
+ */
+export interface ReconnectBackoff {
+    /** First retry delay. */
+    baseMs: number;
+    /** Delay ceiling (doubling is capped here). */
+    capMs: number;
+    /** Max attempts (including the first) before giving up. */
+    maxAttempts: number;
+}
+export declare const DEFAULT_RECONNECT_BACKOFF: ReconnectBackoff;
+export type SubcCallErrorKind = "not_sent" | "outcome_unknown" | "terminal";
+/**
+ * Managed call failure with send-outcome semantics.
+ *
+ * `not_sent` is intentionally narrow: the request bytes provably never left the
+ * local process (the connection was already closed, or net.Socket.write failed
+ * before queuing bytes). Managed call() may retry only this case.
+ *
+ * `outcome_unknown` is the safe default once bytes have been handed to the local
+ * socket. The daemon or module may have received the request before the response
+ * was lost, so call() never retries it automatically; the caller must decide
+ * whether the operation is idempotent or needs a check-then-act recovery.
+ *
+ * `terminal` covers protocol Error frames and non-retryable client/setup errors.
+ */
+export declare class SubcCallError extends Error {
+    readonly kind: SubcCallErrorKind;
+    readonly code?: string | undefined;
+    readonly cause?: unknown | undefined;
+    constructor(kind: SubcCallErrorKind, message: string, code?: string | undefined, cause?: unknown | undefined);
+}
+/**
+ * A live subscription to a provider's event stream, riding a single held-open
+ * request. `onEvent` fires for each StreamData frame; `closed` resolves when the
+ * provider ends the stream (StreamEnd) and rejects on an Error terminal or a route
+ * GOODBYE. `unsubscribe` cancels the held-open request so the provider unwinds.
+ */
+export interface Subscription {
+    /** Cancel the subscription: sends Cancel on the held-open request; idempotent. */
+    unsubscribe(): void;
+    /** Resolves on StreamEnd; rejects on an Error terminal or route close. */
+    readonly closed: Promise<void>;
+}
+export declare class SubcError extends Error {
+    readonly code?: string | undefined;
+    constructor(message: string, code?: string | undefined);
+}
+export interface ConnectOptions {
+    connectionFile: string;
+    handshakeTimeoutMs?: number;
+    /** Default route identity used by managed call(); can be overridden per call. */
+    identity?: BindIdentity;
+    /** Default route target kind used by managed call(); defaults to management_surface. */
+    targetKind?: ManagedRouteKind;
+    /** Backoff for managed reconnect after a connection drop. */
+    reconnectBackoff?: ReconnectBackoff;
+    /** Injectable sleep for timer-free reconnect tests. */
+    sleep?: (ms: number) => Promise<void>;
+    /**
+     * Hard cap on the timeout-arbitration grace window (see
+     * TIMEOUT_ARBITRATION_GRACE_MS). A reply whose bytes are actively arriving when
+     * the request deadline fires is given up to this long to finish dispatching
+     * before the call settles as a timeout. Bounded and never a deadline extension;
+     * exposed mainly so tests can prove the arbitration deterministically.
+     */
+    timeoutArbitrationGraceMs?: number;
+}
+export declare class SubcClient {
+    private sock;
+    private currentConn;
+    private readonly opts;
+    private nextCorr;
+    private readonly pending;
+    private readonly routes;
+    private closedErr;
+    private closeStarted;
+    private reconnecting;
+    private generation;
+    private readerActive;
+    private constructor();
+    get conn(): ConnectionInfo;
+    /** Read the connection file, connect, authenticate, and start the read loop. */
+    static connect(opts: ConnectOptions): Promise<SubcClient>;
+    /** List modules subc knows about (channel-0 catalog.list). */
+    catalogList(moduleId?: string): Promise<CatalogEntry[]>;
+    /** Open a route to a provider (channel-0 route.open); returns the route channel. */
+    routeOpen(target: RouteTarget, identity: BindIdentity, opts?: RouteOpenOptions): Promise<number>;
+    /** Send a data-plane request on a route channel and await its terminal reply. */
+    request(routeChannel: number, body: unknown, opts?: RequestOptions): Promise<unknown>;
+    /**
+     * Managed route + request convenience. Opens and caches a route for the module,
+     * reconnecting and re-opening cached routes after connection drops.
+     */
+    call<Response = unknown>(moduleId: string, method: string, params?: unknown, opts?: ManagedCallOptions): Promise<Response>;
+    /**
+     * Open a held-open event subscription on a route channel. Sends one Request the
+     * provider keeps open, delivering each interim StreamData frame to `onEvent`; the
+     * returned `closed` settles on the StreamEnd terminal (resolve) or an Error / route
+     * GOODBYE (reject). Events ride this held-open request's correlation id — they are
+     * never unsolicited, so they are not dropped. Call `unsubscribe()` to cancel.
+     */
+    subscribe(routeChannel: number, body: unknown, onEvent: (event: Uint8Array) => void, opts?: SubscribeOptions): Subscription;
+    /**
+     * Tear down ONE managed route (a route opened via `call()`), keyed by its
+     * (target, identity). Idempotent and never throws — callers over-call on
+     * session-end. The teardown:
+     *  - flips a tombstone on the cached route and removes it from the cache, so an
+     *    in-flight `openCachedRoute` for the same key will NOT install its channel
+     *    (the generation guard: close beats a racing reopen), and a later `call()`
+     *    opens a fresh route (this is NOT a permanent tombstone);
+     *  - settles in-flight requests on the channel as RouteClosed (managed requests
+     *    keep their at-most-once classification: outcome_unknown if already sent,
+     *    not_sent otherwise; subscriptions always abort);
+     *  - sends a best-effort route GOODBYE so subc releases the route and notifies
+     *    the module to free per-session resources.
+     * `opts.drain` waits for in-flight UNARY requests to settle before tearing down.
+     */
+    closeRoute(target: Extract<RouteTarget, {
+        kind: ManagedRouteKind;
+    }>, identity: BindIdentity, opts?: CloseRouteOptions): Promise<void>;
+    /**
+     * Tear down ONE route by its channel number — the primitive for callers that
+     * opened a route with `routeOpen` directly (e.g. a tool route carrying raw
+     * {name, arguments}) and hold the channel themselves. Idempotent, never throws.
+     * Settles in-flight requests on the channel as RouteClosed and sends a best-effort
+     * route GOODBYE. `opts.drain` awaits in-flight UNARY requests first; subscriptions
+     * are always aborted (a held-open stream cannot be drained).
+     */
+    closeRouteChannel(channel: number, opts?: CloseRouteOptions): Promise<void>;
+    close(): void;
+    /** Resolve once every in-flight UNARY request on the channel (snapshot at call
+     * time) has settled. Subscriptions are excluded — they are aborted, not drained. */
+    private drainUnaryOnChannel;
+    /** Send a best-effort header-only route GOODBYE for `channel`. One-way: the daemon
+     * releases the route and relays a route-gone GOODBYE to the module; no ack. */
+    private sendRouteGoodbye;
+    private static openConnection;
+    private controlRpc;
+    private send;
+    /**
+     * A request-deadline timer has fired. Before settling as a timeout, arbitrate
+     * the timer-vs-poll race: a reply may already be in the socket buffer, unread
+     * only because the loop was starved. Yield one check phase (setImmediate) so a
+     * fully-buffered reply dispatches and wins via settle()'s identity guard; then,
+     * only while the reader is actively draining THIS socket (a frame mid-arrival),
+     * grant a single hard-capped grace before finally settling. Absent replies
+     * still settle right after the check phase. The settle carries the deadline
+     * marker so the managed classifier reports deadline-not-drop.
+     */
+    private arbitrateTimeout;
+    private managedRequest;
+    private sendManaged;
+    private cachedRouteChannel;
+    private openCachedRoute;
+    private ensureConnectedForManaged;
+    private scheduleReconnectAfterDrop;
+    private reconnectAfterDrop;
+    private reconnectWithRetry;
+    private replaceConnection;
+    private reopenCachedRoutes;
+    private timeoutMessage;
+    private routeClosedDuringOpen;
+    private readLoop;
+    private dispatch;
+    /**
+     * Settle a pending exactly once. The object-identity guard (the map still
+     * holds THIS pending under `key`) is the single-winner primitive: whichever of
+     * dispatch, a timeout, fail(), failChannel(), a GOODBYE, or a deferred timeout
+     * arbitration reaches it first wins, and every later caller no-ops. This is what
+     * makes the deferred-timeout arbitration safe — it cannot double-settle, reject
+     * an already-resolved promise, or delete a pending re-created for a later corr.
+     * Returns true when this call was the settler.
+     */
+    private settle;
+    private rejectPending;
+    private errorFromFrame;
+    private failChannel;
+    private fail;
+    private notSentCallError;
+    private outcomeUnknownCallError;
+    private terminalCallError;
+    private notSentRecoveryError;
+    private encode;
+    private parseJson;
+}
+export declare function isConsumerReconnectTransient(err: unknown): boolean;
+/**
+ * The closed set of route.open rejection codes that mean "the target is
+ * momentarily unavailable but the request could succeed on retry" — the target
+ * is booting, mid-reload, transiently absent, or the bind relay timed out. A
+ * daemon-rejected route.open is provably pre-send (no data frame ever left the
+ * client), so these classify as not_sent; the managed path retries them in-place
+ * within ROUTE_OPEN_RETRY_DEADLINE_MS. Permanent rejections (bad_consumer_identity,
+ * config_divergence, unknown_target, ...) are excluded — they are pre-send but
+ * would never succeed, so retrying them would only storm the daemon. Kept
+ * byte-identical to subc-client-rs is_retryable_route_open_code for cross-client
+ * classification parity.
+ */
+export declare function isRetryableRouteOpenCode(code: string | undefined): boolean;
+export declare function connectionFileExists(path: string): Promise<boolean>;
+//# sourceMappingURL=client.d.ts.map

dist/client.d.ts.map

+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAeA,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EAOL,QAAQ,EAET,MAAM,eAAe,CAAC;AA8CvB,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sNAAsN;IACtN,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,sNAAsN;IACtN,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uIAAuI;IACvI,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,yBAAyB,EAAE,gBAIvC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;IAEhC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAHf,IAAI,EAAE,iBAAiB,EAChC,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,KAAK,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,WAAW,IAAI,IAAI,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,qBAAa,SAAU,SAAQ,KAAK;IAGhC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBADtB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;CAIzB;AAeD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,wFAAwF;IACxF,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAqCD,qBAAa,UAAU;IAenB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhBvB,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,UAAU,CAAK;IAKvB,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO;IAQP,IAAI,IAAI,IAAI,cAAc,CAEzB;IAED,gFAAgF;WACnE,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAM/D,8DAA8D;IACxD,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAS7D,oFAAoF;IAC9E,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB1G,iFAAiF;IAC3E,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO/F;;;OAGG;IACG,IAAI,CAAC,QAAQ,GAAG,OAAO,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,EAChB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,QAAQ,CAAC;IA6BpB;;;;;;OAMG;IACH,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACpC,IAAI,GAAE,gBAAqB,GAC1B,YAAY;IA4Cf;;;;;;;;;;;;;;OAcG;IACG,UAAU,CACd,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,EACxD,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC;IAkBhB;;;;;;;OAOG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrF,KAAK,IAAI,IAAI;IAMb;wFACoF;IACpF,OAAO,CAAC,mBAAmB;IAkB3B;mFAC+E;IAC/E,OAAO,CAAC,gBAAgB;mBAQH,cAAc;YAcrB,UAAU;IAKxB,OAAO,CAAC,IAAI;IAgCZ;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;YA0BV,cAAc;IAgB5B,OAAO,CAAC,WAAW;YAgEL,kBAAkB;YA0ClB,eAAe;YAqEf,yBAAyB;IAMvC,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,kBAAkB;YAWZ,kBAAkB;IA0BhC,OAAO,CAAC,iBAAiB;YASX,kBAAkB;IA+BhC,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,qBAAqB;YAIf,QAAQ;IAkCtB,OAAO,CAAC,QAAQ;IAgDhB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,SAAS;CAGlB;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQlE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAO1E;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOzE"}

dist/client.js

+// The consumer-facing subc client. Mirrors the canonical pure consumer
+// (subc-core/src/bin/subc-probe.rs): authenticate -> catalog.list (optional) ->
+// route.open -> request on the returned route channel. There is no client HELLO
+// — HELLO is module-registration only.
+//
+// A single background loop reads every inbound frame and demuxes it by
+// (channel, corr) to the matching in-flight request. Never assume positional
+// read order: subc may interleave a control reply ahead of another exchange's
+// response on the same connection, so frames are matched to their request by
+// correlation id, not arrival order.
+import { promises as fs } from "node:fs";
+import { debuglog } from "node:util";
+import { AuthError, authenticateClient } from "./auth.js";
+import { ConnectionFileError, readConnectionFile } from "./connection-file.js";
+import { buildFrame, buildFlags, decodeHeader, encodeFrame, FrameType, HEADER_LEN, Priority, } from "./envelope.js";
+import { SocketClosedError, SocketTimeoutError, SocketWriteNotQueuedError, SocketWriteQueuedError, SubcSocket, } from "./socket.js";
+const debug = debuglog("subc-client");
+const DEFAULT_HANDSHAKE_TIMEOUT_MS = 10_000;
+const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+// When a request-timeout timer fires, its reply may already be sitting in the
+// socket read buffer, unprocessed only because the event loop was starved (Node
+// runs the TIMERS phase before the POLL phase, so an expired timer can beat an
+// already-arrived frame). Rather than settle as a timeout immediately, arbitrate:
+// yield one check-phase turn (setImmediate) so a fully-buffered reply dispatches
+// and wins, and — only while the reader is actively draining the same socket —
+// allow a small hard-capped grace for a reply whose header/body spans more than
+// one loop turn. This is a demux tiebreak for a reply that RACED the deadline,
+// NOT a deadline extension: an absent reply still settles right after the check
+// phase. Capped so it can never approach BODY_READ_TIMEOUT_MS.
+const TIMEOUT_ARBITRATION_GRACE_MS = 50;
+// Internal marker set as the `code` on the SubcError a request-deadline timeout
+// rejects with, so the managed classifier can tell a deadline (reply may simply
+// not have been read in time) from an actual connection drop. Never surfaced to
+// callers directly — it is refined into DEADLINE_NO_DROP_CODE by classifyFailure.
+const REQUEST_DEADLINE_MARKER = "request_deadline";
+// The consumer-facing code for a managed call whose deadline elapsed while its
+// bytes were queued to the local socket and NO connection drop / GOODBYE was
+// observed. Distinct from "connection_dropped" so a caller can skip a
+// was-it-even-sent recovery path — but still kind=outcome_unknown (never safe to
+// retry: "queued to the local socket" is NOT proof the daemon received or ran it).
+const DEADLINE_NO_DROP_CODE = "deadline_exceeded_no_drop_observed";
+// A retryable route.open rejection (target booting / reloading / momentarily
+// absent) is retried in-place against the same connection up to this deadline
+// before it is surfaced as not_sent. Mirrors subc-client-rs
+// DEFAULT_ROUTE_RETRY_DEADLINE so a target that is briefly unavailable at daemon
+// restart recovers without a misleading terminal error.
+const ROUTE_OPEN_RETRY_DEADLINE_MS = 10_000;
+// Once a header arrives, its body must follow promptly; bound it so a truncated
+// frame cannot wedge the read loop forever.
+const BODY_READ_TIMEOUT_MS = 30_000;
+const EMPTY_BODY = new Uint8Array(0);
+const DEFAULT_MANAGED_TARGET_KIND = "management_surface";
+export const SUBC_MODULE_ID_ENV = "SUBC_MODULE_ID";
+export const SUBC_LAUNCH_NONCE_ENV = "SUBC_LAUNCH_NONCE";
+export const DEFAULT_RECONNECT_BACKOFF = {
+    baseMs: 100,
+    capMs: 2_000,
+    maxAttempts: 6,
+};
+/**
+ * Managed call failure with send-outcome semantics.
+ *
+ * `not_sent` is intentionally narrow: the request bytes provably never left the
+ * local process (the connection was already closed, or net.Socket.write failed
+ * before queuing bytes). Managed call() may retry only this case.
+ *
+ * `outcome_unknown` is the safe default once bytes have been handed to the local
+ * socket. The daemon or module may have received the request before the response
+ * was lost, so call() never retries it automatically; the caller must decide
+ * whether the operation is idempotent or needs a check-then-act recovery.
+ *
+ * `terminal` covers protocol Error frames and non-retryable client/setup errors.
+ */
+export class SubcCallError extends Error {
+    kind;
+    code;
+    cause;
+    constructor(kind, message, code, cause) {
+        super(message);
+        this.kind = kind;
+        this.code = code;
+        this.cause = cause;
+        this.name = "SubcCallError";
+    }
+}
+export class SubcError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+    }
+}
+export class SubcClient {
+    sock;
+    currentConn;
+    opts;
+    nextCorr = 1n;
+    pending = new Map();
+    routes = new Map();
+    closedErr = null;
+    closeStarted = false;
+    reconnecting = null;
+    generation = 1;
+    // True while the read loop is actively reading/dispatching a frame off the
+    // current socket (between reading a header and finishing its dispatch). The
+    // timeout arbitration reads it to decide whether a just-fired timeout should
+    // grant a reply mid-arrival a small grace window before settling.
+    readerActive = false;
+    constructor(sock, currentConn, opts) {
+        this.sock = sock;
+        this.currentConn = currentConn;
+        this.opts = opts;
+        void this.readLoop(sock, this.generation);
+    }
+    get conn() {
+        return this.currentConn;
+    }
+    /** Read the connection file, connect, authenticate, and start the read loop. */
+    static async connect(opts) {
+        const normalized = normalizeConnectOptions(opts);
+        const opened = await SubcClient.openConnection(normalized);
+        return new SubcClient(opened.sock, opened.conn, normalized);
+    }
+    /** List modules subc knows about (channel-0 catalog.list). */
+    async catalogList(moduleId) {
+        const body = this.encode(moduleId === undefined ? { op: "catalog.list" } : { op: "catalog.list", module_id: moduleId });
+        const reply = await this.controlRpc(body);
+        const parsed = this.parseJson(reply);
+        return parsed.modules ?? [];
+    }
+    /** Open a route to a provider (channel-0 route.open); returns the route channel. */
+    async routeOpen(target, identity, opts = {}) {
+        const consumerIdentity = routeOpenConsumerIdentity(opts);
+        const body = this.encode({
+            op: "route.open",
+            target,
+            identity,
+            ...(consumerIdentity ? { consumer_identity: consumerIdentity } : {}),
+        });
+        const reply = await this.controlRpc(body);
+        const parsed = this.parseJson(reply);
+        if (typeof parsed.route_channel !== "number") {
+            throw new SubcError(`route.open returned no route_channel: ${JSON.stringify(parsed)}`);
+        }
+        return parsed.route_channel;
+    }
+    /** Send a data-plane request on a route channel and await its terminal reply. */
+    async request(routeChannel, body, opts = {}) {
+        const bytes = body instanceof Uint8Array ? body : this.encode(body);
+        const priority = opts.priority ?? Priority.Interactive;
+        const reply = await this.send(routeChannel, bytes, priority, opts.timeoutMs, opts.onProgress);
+        return this.parseJson(reply);
+    }
+    /**
+     * Managed route + request convenience. Opens and caches a route for the module,
+     * reconnecting and re-opening cached routes after connection drops.
+     */
+    async call(moduleId, method, params, opts = {}) {
+        const body = params === undefined ? { method } : { method, params };
+        for (;;) {
+            const routeChannel = await this.cachedRouteChannel(moduleId, opts);
+            try {
+                return (await this.managedRequest(routeChannel, body, opts));
+            }
+            catch (err) {
+                if (!(err instanceof SubcCallError))
+                    throw this.terminalCallError("managed call failed", err);
+                if (err.kind === "not_sent") {
+                    try {
+                        await this.reconnectAfterDrop(err);
+                    }
+                    catch (reconnectErr) {
+                        throw this.notSentRecoveryError("managed call was not sent", reconnectErr);
+                    }
+                    continue;
+                }
+                if (err.kind === "outcome_unknown" && err.code !== DEADLINE_NO_DROP_CODE) {
+                    // A real drop schedules a reconnect. A deadline-with-no-drop does NOT:
+                    // the socket was never observed to fail (the reply was likely just read
+                    // late under load), so tearing it down would abandon a healthy connection
+                    // and its other in-flight routes for nothing.
+                    this.scheduleReconnectAfterDrop(err);
+                }
+                throw err;
+            }
+        }
+    }
+    /**
+     * Open a held-open event subscription on a route channel. Sends one Request the
+     * provider keeps open, delivering each interim StreamData frame to `onEvent`; the
+     * returned `closed` settles on the StreamEnd terminal (resolve) or an Error / route
+     * GOODBYE (reject). Events ride this held-open request's correlation id — they are
+     * never unsolicited, so they are not dropped. Call `unsubscribe()` to cancel.
+     */
+    subscribe(routeChannel, body, onEvent, opts = {}) {
+        const bytes = body instanceof Uint8Array ? body : this.encode(body);
+        const priority = opts.priority ?? Priority.Interactive;
+        const corr = this.nextCorr++;
+        const key = `${routeChannel}:${corr}`;
+        const closed = new Promise((resolve, reject) => {
+            if (this.closedErr) {
+                reject(this.closedErr);
+                return;
+            }
+            // No timeout: a subscription stays open indefinitely until StreamEnd, Error,
+            // route GOODBYE, or unsubscribe.
+            this.pending.set(key, {
+                channel: routeChannel,
+                resolve: () => resolve(),
+                reject,
+                onProgress: onEvent,
+                timer: null,
+                subscription: true,
+            });
+            const frame = buildFrame(FrameType.Request, buildFlags(false, priority, false), routeChannel, corr, bytes);
+            this.sock.write(encodeFrame(frame), Date.now() + DEFAULT_REQUEST_TIMEOUT_MS).catch((err) => {
+                const p = this.pending.get(key);
+                if (p)
+                    this.rejectPending(key, p, err instanceof Error ? err : new SubcError(String(err)));
+            });
+        });
+        let cancelled = false;
+        const unsubscribe = () => {
+            if (cancelled)
+                return;
+            cancelled = true;
+            // Pure-header Cancel on the held-open (channel, corr): the provider aborts its
+            // handler and ends with StreamEnd, which settles `closed`.
+            const cancel = buildFrame(FrameType.Cancel, buildFlags(false, priority, false), routeChannel, corr, EMPTY_BODY);
+            this.sock.write(encodeFrame(cancel), Date.now() + DEFAULT_REQUEST_TIMEOUT_MS).catch(() => {
+                // Best-effort: if the socket is already gone, the read loop fails the
+                // pending waiter and `closed` rejects on its own.
+            });
+        };
+        return { unsubscribe, closed };
+    }
+    /**
+     * Tear down ONE managed route (a route opened via `call()`), keyed by its
+     * (target, identity). Idempotent and never throws — callers over-call on
+     * session-end. The teardown:
+     *  - flips a tombstone on the cached route and removes it from the cache, so an
+     *    in-flight `openCachedRoute` for the same key will NOT install its channel
+     *    (the generation guard: close beats a racing reopen), and a later `call()`
+     *    opens a fresh route (this is NOT a permanent tombstone);
+     *  - settles in-flight requests on the channel as RouteClosed (managed requests
+     *    keep their at-most-once classification: outcome_unknown if already sent,
+     *    not_sent otherwise; subscriptions always abort);
+     *  - sends a best-effort route GOODBYE so subc releases the route and notifies
+     *    the module to free per-session resources.
+     * `opts.drain` waits for in-flight UNARY requests to settle before tearing down.
+     */
+    async closeRoute(target, identity, opts = {}) {
+        const key = routeCacheKey(target, identity, routeOpenConsumerIdentity(opts));
+        const cached = this.routes.get(key);
+        if (!cached)
+            return; // never opened / already closed — idempotent no-op.
+        // Generation guard: an in-flight openCachedRoute holds this same object and
+        // re-checks `closed` before installing its channel, so flipping it here makes
+        // close win over a racing reopen. Removing the map entry lets a later call()
+        // create a fresh route for the key (not a permanent tombstone).
+        cached.closed = true;
+        this.routes.delete(key);
+        const channel = cached.channel;
+        cached.channel = null;
+        // channel === null means the route was still opening (no channel installed yet);
+        // the racing open will see closed=true and GOODBYE whatever it opens, so there is
+        // nothing local to tear down here.
+        if (channel !== null)
+            await this.closeRouteChannel(channel, opts);
+    }
+    /**
+     * Tear down ONE route by its channel number — the primitive for callers that
+     * opened a route with `routeOpen` directly (e.g. a tool route carrying raw
+     * {name, arguments}) and hold the channel themselves. Idempotent, never throws.
+     * Settles in-flight requests on the channel as RouteClosed and sends a best-effort
+     * route GOODBYE. `opts.drain` awaits in-flight UNARY requests first; subscriptions
+     * are always aborted (a held-open stream cannot be drained).
+     */
+    async closeRouteChannel(channel, opts = {}) {
+        if (channel === 0)
+            return; // channel 0 is the control plane, never a route.
+        if (opts.drain) {
+            // Wait only for in-flight UNARY requests on this channel; subscriptions are
+            // aborted below (a held-open stream has no natural completion to drain to).
+            await this.drainUnaryOnChannel(channel);
+        }
+        // Settle anything still in flight on the channel (all of it in abort mode; only
+        // subscriptions + late stragglers after a drain). Managed requests are classified
+        // at-most-once via their classifyFailure; raw requests/subscriptions get a plain
+        // RouteClosed error.
+        this.failChannel(channel, new SubcError("route closed by closeRoute", "route_closed"));
+        // Best-effort GOODBYE: releases the route on the daemon and notifies the module.
+        this.sendRouteGoodbye(channel);
+    }
+    close() {
+        this.closeStarted = true;
+        this.fail(new SubcError("client closed"));
+        this.sock.close();
+    }
+    /** Resolve once every in-flight UNARY request on the channel (snapshot at call
+     * time) has settled. Subscriptions are excluded — they are aborted, not drained. */
+    drainUnaryOnChannel(channel) {
+        const waiters = [];
+        for (const pending of this.pending.values()) {
+            if (pending.channel === channel && !pending.subscription) {
+                waiters.push(new Promise((resolve) => {
+                    const prev = pending.onSettle;
+                    pending.onSettle = () => {
+                        prev?.();
+                        resolve();
+                    };
+                }));
+            }
+        }
+        return Promise.all(waiters).then(() => undefined);
+    }
+    /** Send a best-effort header-only route GOODBYE for `channel`. One-way: the daemon
+     * releases the route and relays a route-gone GOODBYE to the module; no ack. */
+    sendRouteGoodbye(channel) {
+        if (this.closedErr)
+            return; // connection already gone — the route died with it.
+        const goodbye = buildFrame(FrameType.Goodbye, buildFlags(false, Priority.Interactive, false), channel, 0n, EMPTY_BODY);
+        this.sock.write(encodeFrame(goodbye), Date.now() + DEFAULT_REQUEST_TIMEOUT_MS).catch(() => {
+            // Best-effort: if the socket is already gone, the route is torn down anyway.
+        });
+    }
+    static async openConnection(opts) {
+        const conn = await readConnectionFile(opts.connectionFile);
+        const deadline = Date.now() + (opts.handshakeTimeoutMs ?? DEFAULT_HANDSHAKE_TIMEOUT_MS);
+        const endpoint = conn.endpoints[0];
+        const sock = await SubcSocket.connect(endpoint.host, endpoint.port, deadline);
+        try {
+            await authenticateClient(sock, conn, deadline);
+        }
+        catch (err) {
+            sock.close();
+            throw err;
+        }
+        return { sock, conn };
+    }
+    async controlRpc(body) {
+        // Match the canonical probe: control requests go out Interactive on channel 0.
+        return this.send(0, body, Priority.Interactive, undefined, undefined);
+    }
+    send(channel, body, priority, timeoutMs, onProgress) {
+        if (this.closedErr)
+            return Promise.reject(this.closedErr);
+        const corr = this.nextCorr++;
+        const key = `${channel}:${corr}`;
+        const frame = buildFrame(FrameType.Request, buildFlags(false, priority, false), channel, corr, body);
+        return new Promise((resolve, reject) => {
+            const ms = timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+            const pending = {
+                channel,
+                resolve,
+                reject,
+                onProgress,
+                timer: null,
+            };
+            pending.timer = setTimeout(() => {
+                this.arbitrateTimeout(key, pending, channel, corr, ms);
+            }, ms);
+            this.pending.set(key, pending);
+            this.sock.write(encodeFrame(frame), Date.now() + ms).catch((err) => {
+                const p = this.pending.get(key);
+                if (p)
+                    this.rejectPending(key, p, err instanceof Error ? err : new SubcError(String(err)));
+            });
+        });
+    }
+    /**
+     * A request-deadline timer has fired. Before settling as a timeout, arbitrate
+     * the timer-vs-poll race: a reply may already be in the socket buffer, unread
+     * only because the loop was starved. Yield one check phase (setImmediate) so a
+     * fully-buffered reply dispatches and wins via settle()'s identity guard; then,
+     * only while the reader is actively draining THIS socket (a frame mid-arrival),
+     * grant a single hard-capped grace before finally settling. Absent replies
+     * still settle right after the check phase. The settle carries the deadline
+     * marker so the managed classifier reports deadline-not-drop.
+     */
+    arbitrateTimeout(key, pending, channel, corr, ms) {
+        const settleAsTimeout = () => {
+            this.rejectPending(key, pending, new SubcError(this.timeoutMessage(channel, corr, ms), REQUEST_DEADLINE_MARKER));
+        };
+        const graceDeadline = Date.now() + this.opts.timeoutArbitrationGraceMs;
+        const arbitrate = () => {
+            // Already settled (by dispatch, fail, GOODBYE, or close)? Nothing to do.
+            if (this.pending.get(key) !== pending)
+                return;
+            // A reply is mid-arrival on this socket (or bytes are buffered), and we are
+            // still inside the grace window: give the reader another turn to finish
+            // dispatching it. The generation guard in readLoop keeps this scoped to the
+            // live socket; the grace cap keeps it from approaching the body-read timeout.
+            const readerDraining = this.readerActive || this.sock.bufferedBytes() > 0;
+            if (readerDraining && Date.now() < graceDeadline) {
+                setImmediate(arbitrate);
+                return;
+            }
+            settleAsTimeout();
+        };
+        setImmediate(arbitrate);
+    }
+    async managedRequest(routeChannel, body, opts) {
+        const bytes = body instanceof Uint8Array ? body : this.encode(body);
+        const priority = opts.priority ?? Priority.Interactive;
+        try {
+            const reply = await this.sendManaged(routeChannel, bytes, priority, opts.timeoutMs, opts.onProgress);
+            return this.parseJson(reply);
+        }
+        catch (err) {
+            if (err instanceof SubcCallError)
+                throw err;
+            throw this.terminalCallError("managed call failed", err);
+        }
+    }
+    sendManaged(channel, body, priority, timeoutMs, onProgress) {
+        if (this.closedErr) {
+            return Promise.reject(this.notSentCallError("request was not sent because the subc connection was already closed", this.closedErr));
+        }
+        const corr = this.nextCorr++;
+        const key = `${channel}:${corr}`;
+        const frame = buildFrame(FrameType.Request, buildFlags(false, priority, false), channel, corr, body);
+        let handedToSocket = false;
+        const classifyFailure = (err) => {
+            // This is the load-bearing asymmetry: only the pre-write paths are NotSent.
+            // As soon as writeTracked reports that bytes were queued to Node's socket,
+            // those bytes may already be in the OS buffer or at the daemon. Any later
+            // close, write callback error, route GOODBYE, or timeout before a response is
+            // therefore OutcomeUnknown to avoid an unsafe double-mutation retry.
+            if (!handedToSocket) {
+                return this.notSentCallError("request bytes were not queued to the subc socket", err);
+            }
+            // A request-deadline timeout (arbitration expired without observing a drop)
+            // is refined from a real connection drop: the socket was NOT seen to fail, so
+            // the caller can skip a was-it-even-sent recovery path. Still outcome_unknown
+            // — queued-to-local-socket is not proof the daemon received or ran it.
+            if (err instanceof SubcError && err.code === REQUEST_DEADLINE_MARKER) {
+                return new SubcCallError("outcome_unknown", `managed call deadline exceeded after request bytes were queued to the local socket; no terminal response was observed; outcome unknown${causeMessage(err)}`, DEADLINE_NO_DROP_CODE, err);
+            }
+            return this.outcomeUnknownCallError("connection dropped before the managed call returned a response", err);
+        };
+        return new Promise((resolve, reject) => {
+            const ms = timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+            const pending = {
+                channel,
+                resolve,
+                reject,
+                onProgress,
+                timer: null,
+                classifyFailure,
+            };
+            pending.timer = setTimeout(() => {
+                this.arbitrateTimeout(key, pending, channel, corr, ms);
+            }, ms);
+            this.pending.set(key, pending);
+            const write = this.sock.writeTracked(encodeFrame(frame), Date.now() + ms);
+            handedToSocket = write.queued;
+            write.completed.catch((err) => {
+                const p = this.pending.get(key);
+                if (p)
+                    this.rejectPending(key, p, err instanceof Error ? err : new SubcError(String(err)));
+            });
+        });
+    }
+    async cachedRouteChannel(moduleId, opts) {
+        const identity = opts.identity ?? this.opts.identity;
+        if (!identity) {
+            throw new SubcCallError("terminal", "managed call requires a BindIdentity in SubcClient.connect({ identity }) or call(..., { identity })", "missing_identity");
+        }
+        const target = { kind: opts.targetKind ?? this.opts.targetKind, module_id: moduleId };
+        const consumerIdentity = routeOpenConsumerIdentity(opts);
+        const key = routeCacheKey(target, identity, consumerIdentity);
+        let cached = this.routes.get(key);
+        if (!cached) {
+            cached = {
+                key,
+                moduleId,
+                target,
+                identity,
+                consumerIdentity,
+                channel: null,
+                generation: 0,
+                opening: null,
+            };
+            this.routes.set(key, cached);
+        }
+        if (cached.channel !== null && cached.generation === this.generation && !this.closedErr) {
+            return cached.channel;
+        }
+        if (!cached.opening) {
+            cached.opening = this.openCachedRoute(cached).finally(() => {
+                cached.opening = null;
+            });
+        }
+        return cached.opening;
+    }
+    async openCachedRoute(cached) {
+        const routeRetryDeadline = Date.now() + ROUTE_OPEN_RETRY_DEADLINE_MS;
+        let routeRetryDelay = this.opts.reconnectBackoff.baseMs;
+        let routeRetryAttempt = 0;
+        for (;;) {
+            if (cached.closed)
+                throw this.routeClosedDuringOpen();
+            try {
+                await this.ensureConnectedForManaged();
+            }
+            catch (err) {
+                throw this.notSentRecoveryError("route.open could not run because reconnect failed", err);
+            }
+            if (cached.channel !== null && cached.generation === this.generation && !this.closedErr) {
+                return cached.channel;
+            }
+            try {
+                const channel = await this.routeOpen(cached.target, cached.identity, {
+                    consumerIdentity: cached.consumerIdentity ?? null,
+                });
+                // Generation guard: a closeRoute may have flipped the tombstone WHILE this
+                // route.open was in flight. If so, close wins — do NOT install the channel
+                // into the (already-removed) cache entry; GOODBYE the channel we just opened
+                // so the daemon/module don't leak it, and fail as RouteClosed.
+                if (cached.closed) {
+                    this.sendRouteGoodbye(channel);
+                    throw this.routeClosedDuringOpen();
+                }
+                cached.channel = channel;
+                cached.generation = this.generation;
+                return channel;
+            }
+            catch (err) {
+                if (err instanceof SubcCallError && err.code === "route_closed")
+                    throw err;
+                if (!this.closeStarted && isConsumerReconnectTransient(err)) {
+                    try {
+                        await this.reconnectAfterDrop(err);
+                    }
+                    catch (reconnectErr) {
+                        throw this.notSentRecoveryError("route.open was not sent and reconnect failed", reconnectErr);
+                    }
+                    continue;
+                }
+                // A daemon-rejected route.open with a RETRYABLE code (target booting /
+                // reloading / momentarily absent) is retried IN-PLACE against the same live
+                // connection — never a socket reconnect, which would needlessly disrupt this
+                // connection's other routes — until the route-retry deadline. Past the
+                // deadline it surfaces as not_sent: provably pre-send (no data frame ever
+                // left the client) AND still transient, so the caller's own retry policy may
+                // safely re-attempt later. Reason and set kept in parity with subc-client-rs.
+                if (!this.closeStarted && err instanceof SubcError && isRetryableRouteOpenCode(err.code)) {
+                    routeRetryAttempt += 1;
+                    if (routeRetryAttempt < this.opts.reconnectBackoff.maxAttempts && Date.now() < routeRetryDeadline) {
+                        await this.opts.sleep(routeRetryDelay);
+                        routeRetryDelay = Math.min(routeRetryDelay * 2, this.opts.reconnectBackoff.capMs);
+                        continue;
+                    }
+                    throw this.notSentCallError(`route.open failed for module ${cached.moduleId}: ${err.code} (retry budget exhausted)`, err);
+                }
+                // A permanent route.open rejection (bad_consumer_identity, config_divergence,
+                // unknown_target, ...) is pre-send but would never succeed on retry, so it
+                // stays terminal — a not_sent class here would invite a retry storm against a
+                // request the daemon will always reject.
+                throw this.terminalCallError(`route.open failed for module ${cached.moduleId}`, err);
+            }
+        }
+    }
+    async ensureConnectedForManaged() {
+        if (this.closeStarted)
+            throw new SubcError("client closed");
+        if (this.reconnecting)
+            await this.reconnecting;
+        if (this.closedErr)
+            await this.reconnectAfterDrop(this.closedErr);
+    }
+    scheduleReconnectAfterDrop(err) {
+        if (this.closeStarted || this.reconnecting)
+            return;
+        void this.reconnectAfterDrop(err).catch(() => {
+            // The originating call keeps its OutcomeUnknown classification. A later call
+            // will retry reconnect with the same closed connection state if this attempt
+            // cannot restore the daemon yet.
+        });
+    }
+    reconnectAfterDrop(trigger) {
+        if (this.closeStarted)
+            return Promise.reject(new SubcError("client closed"));
+        if (this.reconnecting)
+            return this.reconnecting;
+        const promise = this.reconnectWithRetry(trigger).finally(() => {
+            if (this.reconnecting === promise)
+                this.reconnecting = null;
+        });
+        this.reconnecting = promise;
+        return promise;
+    }
+    async reconnectWithRetry(_trigger) {
+        let attempt = 0;
+        let delay = this.opts.reconnectBackoff.baseMs;
+        for (;;) {
+            if (this.closeStarted)
+                throw new SubcError("client closed");
+            attempt += 1;
+            try {
+                const opened = await SubcClient.openConnection(this.opts);
+                if (this.closeStarted) {
+                    opened.sock.close();
+                    throw new SubcError("client closed");
+                }
+                this.replaceConnection(opened);
+                await this.reopenCachedRoutes();
+                return;
+            }
+            catch (err) {
+                if (!isConsumerReconnectTransient(err) || attempt >= this.opts.reconnectBackoff.maxAttempts) {
+                    throw err;
+                }
+                await this.opts.sleep(delay);
+                delay = Math.min(delay * 2, this.opts.reconnectBackoff.capMs);
+            }
+        }
+    }
+    replaceConnection(opened) {
+        this.sock.close();
+        this.sock = opened.sock;
+        this.currentConn = opened.conn;
+        this.closedErr = null;
+        this.generation += 1;
+        void this.readLoop(opened.sock, this.generation);
+    }
+    async reopenCachedRoutes() {
+        for (const cached of this.routes.values()) {
+            cached.channel = null;
+            cached.generation = 0;
+        }
+        for (const cached of this.routes.values()) {
+            if (cached.closed)
+                continue; // closed concurrently with reconnect — don't reopen.
+            // Thread the route's consumer identity through the reopen, exactly as the
+            // lazy per-call path (openCachedRoute) does. Dropping it here would make a
+            // route reopened after a reconnect send route.open with no consumer_identity,
+            // so the daemon would re-stamp it with a different (weaker) principal than the
+            // one it was originally bound under — a silent post-reconnect trust downgrade.
+            const channel = await this.routeOpen(cached.target, cached.identity, {
+                consumerIdentity: cached.consumerIdentity ?? null,
+            });
+            // A closeRoute may have raced this reopen (flipping the tombstone during the
+            // route.open await). If so, GOODBYE the channel instead of installing it, so the
+            // closed route isn't silently re-established on the new connection.
+            if (cached.closed) {
+                this.sendRouteGoodbye(channel);
+                continue;
+            }
+            cached.channel = channel;
+            cached.generation = this.generation;
+        }
+    }
+    // A request timeout carries the local socket port and (channel, corr) so a
+    // packet capture can pinpoint the exact on-wire exchange — the decisive evidence
+    // for whether a "timed out" reply was actually delivered to this socket (a
+    // client-local demux problem) or never sent (a daemon/module problem).
+    timeoutMessage(channel, corr, ms) {
+        const port = this.sock.localPort();
+        const where = port === null ? "channel" : `local_port=${port} channel`;
+        return `request on ${where} ${channel} corr ${corr} timed out after ${ms}ms`;
+    }
+    routeClosedDuringOpen() {
+        return new SubcCallError("not_sent", "route was closed before route.open completed", "route_closed");
+    }
+    async readLoop(sock, generation) {
+        try {
+            for (;;) {
+                // Header read waits indefinitely — idle time between frames is normal, and
+                // the reader is NOT "active" while parked here (a racing timeout must not
+                // grant grace just because the connection is idle between frames).
+                const headerBytes = await sock.readExact(HEADER_LEN, Number.POSITIVE_INFINITY);
+                // A frame is now arriving. Mark the reader active THROUGH dispatch so a
+                // timeout that fires mid-arrival grants the reply its bounded grace window
+                // instead of settling as a spurious timeout.
+                this.readerActive = true;
+                try {
+                    const header = decodeHeader(headerBytes);
+                    const body = header.len === 0
+                        ? new Uint8Array(0)
+                        : await sock.readExact(header.len, Date.now() + BODY_READ_TIMEOUT_MS);
+                    // Drop a frame read off a socket this client has already replaced
+                    // (reconnect): its pendings were settled by fail(), and dispatching it
+                    // against the current pending map could match a re-used (channel, corr).
+                    if (this.sock === sock && this.generation === generation) {
+                        this.dispatch({ header, body });
+                    }
+                }
+                finally {
+                    this.readerActive = false;
+                }
+            }
+        }
+        catch (err) {
+            if (this.sock === sock && this.generation === generation) {
+                this.fail(err instanceof Error ? err : new SubcError(String(err)));
+            }
+        }
+    }
+    dispatch(frame) {
+        const key = `${frame.header.channel}:${frame.header.corr}`;
+        const pending = this.pending.get(key);
+        if (pending) {
+            switch (frame.header.ty) {
+                case FrameType.Push:
+                case FrameType.StreamData:
+                    pending.onProgress?.(frame.body);
+                    return;
+                case FrameType.Response:
+                case FrameType.StreamEnd:
+                    this.settle(key, pending, () => pending.resolve(frame));
+                    return;
+                case FrameType.Error:
+                    this.settle(key, pending, () => pending.reject(this.errorFromFrame(frame)));
+                    return;
+                default:
+                    return;
+            }
+        }
+        if (frame.header.ty === FrameType.Goodbye) {
+            this.failChannel(frame.header.channel, new SubcError("route closed by subc (GOODBYE)"));
+            return;
+        }
+        // A terminal frame (Response/Error/StreamEnd) with no waiter is almost always
+        // a reply that arrived AFTER its request already settled — the fingerprint of a
+        // premature timeout under event-loop starvation (the reply raced the deadline
+        // and lost). Metadata-only debug log (never the body) so every future
+        // occurrence is a one-line diagnosis instead of an invisible drop. Enable with
+        // NODE_DEBUG=subc-client.
+        if (frame.header.ty === FrameType.Response ||
+            frame.header.ty === FrameType.Error ||
+            frame.header.ty === FrameType.StreamEnd) {
+            debug("dropped terminal frame with no waiter: type=%d channel=%d corr=%s port=%s", frame.header.ty, frame.header.channel, frame.header.corr, this.sock.localPort() ?? "?");
+            return;
+        }
+        // Unmatched Push or stray frame: no registered waiter. Drop it — v1 has no
+        // unsolicited-push consumers.
+    }
+    /**
+     * Settle a pending exactly once. The object-identity guard (the map still
+     * holds THIS pending under `key`) is the single-winner primitive: whichever of
+     * dispatch, a timeout, fail(), failChannel(), a GOODBYE, or a deferred timeout
+     * arbitration reaches it first wins, and every later caller no-ops. This is what
+     * makes the deferred-timeout arbitration safe — it cannot double-settle, reject
+     * an already-resolved promise, or delete a pending re-created for a later corr.
+     * Returns true when this call was the settler.
+     */
+    settle(key, pending, run) {
+        if (this.pending.get(key) !== pending)
+            return false;
+        this.pending.delete(key);
+        if (pending.timer)
+            clearTimeout(pending.timer);
+        run();
+        pending.onSettle?.();
+        return true;
+    }
+    rejectPending(key, pending, err) {
+        this.settle(key, pending, () => pending.reject(pending.classifyFailure?.(err) ?? err));
+    }
+    errorFromFrame(frame) {
+        try {
+            const parsed = JSON.parse(Buffer.from(frame.body).toString("utf8"));
+            return new SubcError(parsed.message ?? "subc error", parsed.code);
+        }
+        catch {
+            return new SubcError(Buffer.from(frame.body).toString("utf8") || "subc error");
+        }
+    }
+    failChannel(channel, err) {
+        for (const [key, pending] of this.pending) {
+            if (pending.channel === channel) {
+                this.rejectPending(key, pending, err);
+            }
+        }
+    }
+    fail(err) {
+        if (!this.closedErr)
+            this.closedErr = err;
+        for (const [key, pending] of this.pending) {
+            this.rejectPending(key, pending, err);
+        }
+    }
+    notSentCallError(message, cause) {
+        return new SubcCallError("not_sent", `${message}${causeMessage(cause)}`, errorCode(cause), cause);
+    }
+    outcomeUnknownCallError(message, cause) {
+        return new SubcCallError("outcome_unknown", `${message}${causeMessage(cause)}`, errorCode(cause), cause);
+    }
+    terminalCallError(message, cause) {
+        if (cause instanceof SubcCallError)
+            return cause;
+        return new SubcCallError("terminal", `${message}${causeMessage(cause)}`, errorCode(cause), cause);
+    }
+    notSentRecoveryError(message, cause) {
+        if (cause instanceof SubcCallError)
+            return cause;
+        if (isConsumerReconnectTransient(cause))
+            return this.notSentCallError(message, cause);
+        return this.terminalCallError(message, cause);
+    }
+    encode(value) {
+        return new Uint8Array(Buffer.from(JSON.stringify(value), "utf8"));
+    }
+    parseJson(frame) {
+        return JSON.parse(Buffer.from(frame.body).toString("utf8"));
+    }
+}
+export function isConsumerReconnectTransient(err) {
+    if (err instanceof SocketClosedError || err instanceof SocketTimeoutError)
+        return true;
+    if (err instanceof SocketWriteNotQueuedError || err instanceof SocketWriteQueuedError)
+        return true;
+    if (err instanceof SubcCallError)
+        return err.kind === "not_sent" || err.kind === "outcome_unknown";
+    if (err instanceof SubcError || err instanceof ConnectionFileError || err instanceof AuthError)
+        return false;
+    const code = errorCode(err);
+    return code === "ECONNREFUSED" || code === "ECONNRESET" || code === "EPIPE" || code === "ETIMEDOUT" || code === "ENOENT";
+}
+/**
+ * The closed set of route.open rejection codes that mean "the target is
+ * momentarily unavailable but the request could succeed on retry" — the target
+ * is booting, mid-reload, transiently absent, or the bind relay timed out. A
+ * daemon-rejected route.open is provably pre-send (no data frame ever left the
+ * client), so these classify as not_sent; the managed path retries them in-place
+ * within ROUTE_OPEN_RETRY_DEADLINE_MS. Permanent rejections (bad_consumer_identity,
+ * config_divergence, unknown_target, ...) are excluded — they are pre-send but
+ * would never succeed, so retrying them would only storm the daemon. Kept
+ * byte-identical to subc-client-rs is_retryable_route_open_code for cross-client
+ * classification parity.
+ */
+export function isRetryableRouteOpenCode(code) {
+    return (code === "unknown_module" ||
+        code === "module_reloading" ||
+        code === "target_unavailable" ||
+        code === "module_timeout");
+}
+export async function connectionFileExists(path) {
+    try {
+        await fs.access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function normalizeConnectOptions(opts) {
+    return {
+        connectionFile: opts.connectionFile,
+        handshakeTimeoutMs: opts.handshakeTimeoutMs,
+        identity: opts.identity,
+        targetKind: opts.targetKind ?? DEFAULT_MANAGED_TARGET_KIND,
+        reconnectBackoff: opts.reconnectBackoff ?? DEFAULT_RECONNECT_BACKOFF,
+        sleep: opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms))),
+        timeoutArbitrationGraceMs: opts.timeoutArbitrationGraceMs ?? TIMEOUT_ARBITRATION_GRACE_MS,
+    };
+}
+function routeCacheKey(target, identity, consumerIdentity) {
+    const consumerPart = consumerIdentity
+        ? `${consumerIdentity.module_id}\0${consumerIdentity.launch_nonce}`
+        : "";
+    return `${target.kind}\0${target.module_id}\0${identity.project_root}\0${identity.harness}\0${identity.session}\0${consumerPart}`;
+}
+function routeOpenConsumerIdentity(opts = {}) {
+    if (opts.consumerIdentity !== undefined)
+        return opts.consumerIdentity ?? undefined;
+    const moduleId = process.env[SUBC_MODULE_ID_ENV];
+    const launchNonce = process.env[SUBC_LAUNCH_NONCE_ENV];
+    if (!moduleId || !launchNonce)
+        return undefined;
+    return { module_id: moduleId, launch_nonce: launchNonce };
+}
+function errorCode(err) {
+    if (typeof err === "object" && err !== null && "code" in err) {
+        const code = err.code;
+        if (typeof code === "string")
+            return code;
+    }
+    return undefined;
+}
+function causeMessage(cause) {
+    if (cause === undefined)
+        return "";
+    return `: ${cause instanceof Error ? cause.message : String(cause)}`;
+}
+//# sourceMappingURL=client.js.map

dist/client.js.map

+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,gFAAgF;AAChF,gFAAgF;AAChF,uCAAuC;AACvC,EAAE;AACF,uEAAuE;AACvE,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,qCAAqC;AAErC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAuB,MAAM,sBAAsB,CAAC;AACpG,OAAO,EACL,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,SAAS,EACT,UAAU,EACV,QAAQ,GAET,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;AAEtC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,+DAA+D;AAC/D,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AACnD,+EAA+E;AAC/E,6EAA6E;AAC7E,sEAAsE;AACtE,iFAAiF;AACjF,mFAAmF;AACnF,MAAM,qBAAqB,GAAG,oCAAoC,CAAC;AACnE,6EAA6E;AAC7E,8EAA8E;AAC9E,4DAA4D;AAC5D,iFAAiF;AACjF,wDAAwD;AACxD,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,gFAAgF;AAChF,4CAA4C;AAC5C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,2BAA2B,GAAqB,oBAAoB,CAAC;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AA2EzD,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,KAAK;IACZ,WAAW,EAAE,CAAC;CACf,CAAC;AAIF;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAE3B;IAEA;IACA;IAJX,YACW,IAAuB,EAChC,OAAe,EACN,IAAa,EACb,KAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,SAAI,GAAJ,IAAI,CAAmB;QAEvB,SAAI,GAAJ,IAAI,CAAS;QACb,UAAK,GAAL,KAAK,CAAU;QAGxB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAeD,MAAM,OAAO,SAAU,SAAQ,KAAK;IAGvB;IAFX,YACE,OAAe,EACN,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,SAAI,GAAJ,IAAI,CAAS;IAGxB,CAAC;CACF;AAuED,MAAM,OAAO,UAAU;IAeX;IACA;IACS;IAhBX,QAAQ,GAAG,EAAE,CAAC;IACL,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,SAAS,GAAiB,IAAI,CAAC;IAC/B,YAAY,GAAG,KAAK,CAAC;IACrB,YAAY,GAAyB,IAAI,CAAC;IAC1C,UAAU,GAAG,CAAC,CAAC;IACvB,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,kEAAkE;IAC1D,YAAY,GAAG,KAAK,CAAC;IAE7B,YACU,IAAgB,EAChB,WAA2B,EAClB,IAA8B;QAFvC,SAAI,GAAJ,IAAI,CAAY;QAChB,gBAAW,GAAX,WAAW,CAAgB;QAClB,SAAI,GAAJ,IAAI,CAA0B;QAE/C,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAoB;QACvC,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3D,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,WAAW,CAAC,QAAiB;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CACtB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,CAC9F,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAA6C,CAAC;QACjF,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,SAAS,CAAC,MAAmB,EAAE,QAAsB,EAAE,OAAyB,EAAE;QACtF,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;YACvB,EAAE,EAAE,YAAY;YAChB,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAA2C,CAAC;QAC/E,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,SAAS,CAAC,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,OAAO,CAAC,YAAoB,EAAE,IAAa,EAAE,OAAuB,EAAE;QAC1E,MAAM,KAAK,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,MAAc,EACd,MAAgB,EAChB,OAA2B,EAAE;QAE7B,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEpE,SAAS,CAAC;YACR,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAa,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;oBAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;gBAC9F,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBACrC,CAAC;oBAAC,OAAO,YAAY,EAAE,CAAC;wBACtB,MAAM,IAAI,CAAC,oBAAoB,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;oBAC7E,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;oBACzE,uEAAuE;oBACvE,wEAAwE;oBACxE,0EAA0E;oBAC1E,8CAA8C;oBAC9C,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,YAAoB,EACpB,IAAa,EACb,OAAoC,EACpC,OAAyB,EAAE;QAE3B,MAAM,KAAK,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,6EAA6E;YAC7E,iCAAiC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;gBACpB,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE;gBACxB,MAAM;gBACN,UAAU,EAAE,OAAO;gBACnB,KAAK,EAAE,IAAI;gBACX,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3G,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC;oBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,WAAW,GAAG,GAAS,EAAE;YAC7B,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,+EAA+E;YAC/E,2DAA2D;YAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YAChH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACvF,sEAAsE;gBACtE,kDAAkD;YACpD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,UAAU,CACd,MAAwD,EACxD,QAAsB,EACtB,OAA0B,EAAE;QAE5B,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,oDAAoD;QACzE,4EAA4E;QAC5E,8EAA8E;QAC9E,6EAA6E;QAC7E,gEAAgE;QAChE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,iFAAiF;QACjF,kFAAkF;QAClF,mCAAmC;QACnC,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,OAA0B,EAAE;QACnE,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,CAAC,iDAAiD;QAC5E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,4EAA4E;YAC5E,4EAA4E;YAC5E,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,gFAAgF;QAChF,kFAAkF;QAClF,iFAAiF;QACjF,qBAAqB;QACrB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC,CAAC;QACvF,iFAAiF;QACjF,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED;wFACoF;IAC5E,mBAAmB,CAAC,OAAe;QACzC,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzD,OAAO,CAAC,IAAI,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;oBAC9B,OAAO,CAAC,QAAQ,GAAG,GAAG,EAAE;wBACtB,IAAI,EAAE,EAAE,CAAC;wBACT,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;mFAC+E;IACvE,gBAAgB,CAAC,OAAe;QACtC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,oDAAoD;QAChF,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACvH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACxF,6EAA6E;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAA8B;QAChE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,4BAA4B,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAgB;QACvC,+EAA+E;QAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IAEO,IAAI,CACV,OAAe,EACf,IAAgB,EAChB,QAAkB,EAClB,SAA6B,EAC7B,UAAoD;QAEpD,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErG,OAAO,IAAI,OAAO,CAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,EAAE,GAAG,SAAS,IAAI,0BAA0B,CAAC;YACnD,MAAM,OAAO,GAAY;gBACvB,OAAO;gBACP,OAAO;gBACP,MAAM;gBACN,UAAU;gBACV,KAAK,EAAE,IAAI;aACZ,CAAC;YACF,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC;oBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,gBAAgB,CAAC,GAAW,EAAE,OAAgB,EAAE,OAAe,EAAE,IAAY,EAAE,EAAU;QAC/F,MAAM,eAAe,GAAG,GAAS,EAAE;YACjC,IAAI,CAAC,aAAa,CAChB,GAAG,EACH,OAAO,EACP,IAAI,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAC/E,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;QACvE,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,yEAAyE;YACzE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,OAAO;YAC9C,4EAA4E;YAC5E,wEAAwE;YACxE,4EAA4E;YAC5E,8EAA8E;YAC9E,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAC1E,IAAI,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;gBACjD,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;QACF,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,YAAoB,EACpB,IAAa,EACb,IAAwB;QAExB,MAAM,KAAK,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACrG,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,OAAe,EACf,IAAgB,EAChB,QAAkB,EAClB,SAA6B,EAC7B,UAAoD;QAEpD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,qEAAqE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACtI,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrG,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,MAAM,eAAe,GAAG,CAAC,GAAU,EAAiB,EAAE;YACpD,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;YAC1E,8EAA8E;YAC9E,qEAAqE;YACrE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,gBAAgB,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;YACD,4EAA4E;YAC5E,8EAA8E;YAC9E,8EAA8E;YAC9E,uEAAuE;YACvE,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACrE,OAAO,IAAI,aAAa,CACtB,iBAAiB,EACjB,yIAAyI,YAAY,CAAC,GAAG,CAAC,EAAE,EAC5J,qBAAqB,EACrB,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,gEAAgE,EAAE,GAAG,CAAC,CAAC;QAC7G,CAAC,CAAC;QAEF,OAAO,IAAI,OAAO,CAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,EAAE,GAAG,SAAS,IAAI,0BAA0B,CAAC;YACnD,MAAM,OAAO,GAAY;gBACvB,OAAO;gBACP,OAAO;gBACP,MAAM;gBACN,UAAU;gBACV,KAAK,EAAE,IAAI;gBACX,eAAe;aAChB,CAAC;YACF,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1E,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC;YAC9B,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC;oBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,IAAwB;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CACrB,UAAU,EACV,qGAAqG,EACrG,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAGlF,CAAC;QACF,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,GAAG;gBACH,QAAQ;gBACR,MAAM;gBACN,QAAQ;gBACR,gBAAgB;gBAChB,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACzD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAmB;QAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,4BAA4B,CAAC;QACrE,IAAI,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACxD,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,SAAS,CAAC;YACR,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,oBAAoB,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;YAC5F,CAAC;YAED,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxF,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACnE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;iBAClD,CAAC,CAAC;gBACH,2EAA2E;gBAC3E,2EAA2E;gBAC3E,6EAA6E;gBAC7E,+DAA+D;gBAC/D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;oBAC/B,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACrC,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;gBACpC,OAAO,OAAO,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;oBAAE,MAAM,GAAG,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5D,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBACrC,CAAC;oBAAC,OAAO,YAAY,EAAE,CAAC;wBACtB,MAAM,IAAI,CAAC,oBAAoB,CAAC,8CAA8C,EAAE,YAAY,CAAC,CAAC;oBAChG,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,uEAAuE;gBACvE,4EAA4E;gBAC5E,6EAA6E;gBAC7E,uEAAuE;gBACvE,0EAA0E;gBAC1E,6EAA6E;gBAC7E,8EAA8E;gBAC9E,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,GAAG,YAAY,SAAS,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzF,iBAAiB,IAAI,CAAC,CAAC;oBACvB,IAAI,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,EAAE,CAAC;wBAClG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBACvC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;wBAClF,SAAS;oBACX,CAAC;oBACD,MAAM,IAAI,CAAC,gBAAgB,CACzB,gCAAgC,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,2BAA2B,EACvF,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,8EAA8E;gBAC9E,2EAA2E;gBAC3E,8EAA8E;gBAC9E,yCAAyC;gBACzC,MAAM,IAAI,CAAC,iBAAiB,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB;QACrC,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,CAAC,YAAY,CAAC;QAC/C,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IAEO,0BAA0B,CAAC,GAAY;QAC7C,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QACnD,KAAK,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,6EAA6E;YAC7E,6EAA6E;YAC7E,iCAAiC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB,CAAC,OAAgB;QACzC,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC5D,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAiB;QAChD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAE9C,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACpB,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;gBACvC,CAAC;gBACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAChC,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;oBAC5F,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAwB;QAChD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM;gBAAE,SAAS,CAAC,qDAAqD;YAClF,0EAA0E;YAC1E,2EAA2E;YAC3E,8EAA8E;YAC9E,+EAA+E;YAC/E,+EAA+E;YAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACnE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;aAClD,CAAC,CAAC;YACH,6EAA6E;YAC7E,iFAAiF;YACjF,oEAAoE;YACpE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YACzB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACtC,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,iFAAiF;IACjF,2EAA2E;IAC3E,uEAAuE;IAC/D,cAAc,CAAC,OAAe,EAAE,IAAY,EAAE,EAAU;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,UAAU,CAAC;QACvE,OAAO,cAAc,KAAK,IAAI,OAAO,SAAS,IAAI,oBAAoB,EAAE,IAAI,CAAC;IAC/E,CAAC;IAEO,qBAAqB;QAC3B,OAAO,IAAI,aAAa,CAAC,UAAU,EAAE,8CAA8C,EAAE,cAAc,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAgB,EAAE,UAAkB;QACzD,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,2EAA2E;gBAC3E,0EAA0E;gBAC1E,mEAAmE;gBACnE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC/E,wEAAwE;gBACxE,2EAA2E;gBAC3E,6CAA6C;gBAC7C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;oBACzC,MAAM,IAAI,GACR,MAAM,CAAC,GAAG,KAAK,CAAC;wBACd,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;wBACnB,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC,CAAC;oBAC1E,kEAAkE;oBAClE,uEAAuE;oBACvE,yEAAyE;oBACzE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBACzD,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAY;QAC3B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACxB,KAAK,SAAS,CAAC,IAAI,CAAC;gBACpB,KAAK,SAAS,CAAC,UAAU;oBACvB,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,OAAO;gBACT,KAAK,SAAS,CAAC,QAAQ,CAAC;gBACxB,KAAK,SAAS,CAAC,SAAS;oBACtB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;oBACxD,OAAO;gBACT,KAAK,SAAS,CAAC,KAAK;oBAClB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC5E,OAAO;gBACT;oBACE,OAAO;YACX,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,8EAA8E;QAC9E,gFAAgF;QAChF,8EAA8E;QAC9E,sEAAsE;QACtE,+EAA+E;QAC/E,0BAA0B;QAC1B,IACE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,QAAQ;YACtC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK;YACnC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,SAAS,EACvC,CAAC;YACD,KAAK,CACH,2EAA2E,EAC3E,KAAK,CAAC,MAAM,CAAC,EAAE,EACf,KAAK,CAAC,MAAM,CAAC,OAAO,EACpB,KAAK,CAAC,MAAM,CAAC,IAAI,EACjB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,CAC7B,CAAC;YACF,OAAO;QACT,CAAC;QACD,2EAA2E;QAC3E,8BAA8B;IAChC,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,GAAW,EAAE,OAAgB,EAAE,GAAe;QAC3D,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,KAAK;YAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,GAAG,EAAE,CAAC;QACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,GAAW,EAAE,OAAgB,EAAE,GAAU;QAC7D,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,cAAc,CAAC,KAAY;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGjE,CAAC;YACF,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAAe,EAAE,GAAU;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAChC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,GAAU;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,OAAe,EAAE,KAAe;QACvD,OAAO,IAAI,aAAa,CAAC,UAAU,EAAE,GAAG,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,CAAC;IAEO,uBAAuB,CAAC,OAAe,EAAE,KAAe;QAC9D,OAAO,IAAI,aAAa,CAAC,iBAAiB,EAAE,GAAG,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3G,CAAC;IAEO,iBAAiB,CAAC,OAAe,EAAE,KAAe;QACxD,IAAI,KAAK,YAAY,aAAa;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,IAAI,aAAa,CAAC,UAAU,EAAE,GAAG,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,CAAC;IAEO,oBAAoB,CAAC,OAAe,EAAE,KAAe;QAC3D,IAAI,KAAK,YAAY,aAAa;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,4BAA4B,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAEO,MAAM,CAAC,KAAc;QAC3B,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAEO,SAAS,CAAC,KAAY;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,YAAY,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACvF,IAAI,GAAG,YAAY,yBAAyB,IAAI,GAAG,YAAY,sBAAsB;QAAE,OAAO,IAAI,CAAC;IACnG,IAAI,GAAG,YAAY,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACnG,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,YAAY,mBAAmB,IAAI,GAAG,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7G,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,CAAC;AAC3H,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAwB;IAC/D,OAAO,CACL,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,oBAAoB;QAC7B,IAAI,KAAK,gBAAgB,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAoB;IACnD,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,2BAA2B;QAC1D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,yBAAyB;QACpE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,yBAAyB,EAAE,IAAI,CAAC,yBAAyB,IAAI,4BAA4B;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAAwD,EACxD,QAAsB,EACtB,gBAAmC;IAEnC,MAAM,YAAY,GAAG,gBAAgB;QACnC,CAAC,CAAC,GAAG,gBAAgB,CAAC,SAAS,KAAK,gBAAgB,CAAC,YAAY,EAAE;QACnE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;AACpI,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAyB,EAAE;IAC5D,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;QAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC"}

dist/connection-file.d.ts

+export declare const SCHEMA_VERSION = 1;
+export declare const MIN_KEY_LEN = 32;
+export declare const DAEMON_ID_LEN = 16;
+export interface Endpoint {
+    host: string;
+    port: number;
+}
+export interface ConnectionInfo {
+    schema: number;
+    endpoints: Endpoint[];
+    /** Transport key bytes. Serialized on disk as a JSON array of numbers. */
+    key: Uint8Array;
+    /** 16-byte daemon identity. Serialized on disk as a JSON array of numbers. */
+    daemonId: Uint8Array;
+    pid: number;
+    daemonVer: string;
+}
+export declare class ConnectionFileError extends Error {
+}
+/** Read, permission-check, and validate a connection file. */
+export declare function readConnectionFile(path: string): Promise<ConnectionInfo>;
+//# sourceMappingURL=connection-file.d.ts.map

dist/connection-file.d.ts.map

+{"version":3,"file":"connection-file.d.ts","sourceRoot":"","sources":["../src/connection-file.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,eAAO,MAAM,aAAa,KAAK,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,0EAA0E;IAC1E,GAAG,EAAE,UAAU,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,UAAU,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AA+CjD,8DAA8D;AAC9D,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAgC9E"}

dist/connection-file.js

+// Port of subc-transport's connection_file.rs reader. The connection file is
+// the daemon's published rendezvous record; its `key` is the shared transport
+// secret. We refuse to trust a key from a file other local users can read,
+// exactly as the Rust reader does, so a leaked (group/world-readable) key is a
+// loud failure rather than a silent downgrade.
+import { promises as fs } from "node:fs";
+export const SCHEMA_VERSION = 1;
+export const MIN_KEY_LEN = 32;
+export const DAEMON_ID_LEN = 16;
+export class ConnectionFileError extends Error {
+}
+function toBytes(value, field) {
+    if (!Array.isArray(value) || value.some((n) => typeof n !== "number")) {
+        throw new ConnectionFileError(`connection file field '${field}' must be a JSON array of bytes`);
+    }
+    return Uint8Array.from(value);
+}
+function validate(info) {
+    if (info.schema !== SCHEMA_VERSION) {
+        throw new ConnectionFileError(`unsupported connection file schema ${info.schema}; expected ${SCHEMA_VERSION}`);
+    }
+    if (info.endpoints.length === 0) {
+        throw new ConnectionFileError("connection file must include at least one endpoint");
+    }
+    if (info.key.length < MIN_KEY_LEN) {
+        throw new ConnectionFileError(`connection file key is too short: ${info.key.length} bytes, need at least ${MIN_KEY_LEN}`);
+    }
+    if (info.daemonId.length !== DAEMON_ID_LEN) {
+        throw new ConnectionFileError(`connection file daemon_id must be ${DAEMON_ID_LEN} bytes, got ${info.daemonId.length}`);
+    }
+}
+/**
+ * On unix, reject any group/other permission bit: the key is published
+ * owner-only (0600), so a wider mode means the secret has leaked. On Windows the
+ * file inherits the per-user profile directory ACL at create time and there are
+ * no portable mode bits to re-check, matching the Rust no-op.
+ */
+async function verifyOwnerOnly(path) {
+    if (process.platform === "win32")
+        return;
+    const stat = await fs.stat(path);
+    const mode = stat.mode & 0o777;
+    if ((mode & 0o077) !== 0) {
+        throw new ConnectionFileError(`connection file ${path} has insecure permissions 0o${mode.toString(8)}; expected owner-only 0600`);
+    }
+}
+/** Read, permission-check, and validate a connection file. */
+export async function readConnectionFile(path) {
+    await verifyOwnerOnly(path);
+    const raw = await fs.readFile(path, "utf8");
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new ConnectionFileError(`connection file JSON read failed for ${path}: ${String(err)}`);
+    }
+    const endpointsRaw = parsed.endpoints;
+    if (!Array.isArray(endpointsRaw)) {
+        throw new ConnectionFileError("connection file 'endpoints' must be an array");
+    }
+    const endpoints = endpointsRaw.map((e) => {
+        const ep = e;
+        if (typeof ep.host !== "string" || typeof ep.port !== "number") {
+            throw new ConnectionFileError("connection file endpoint must be { host: string, port: number }");
+        }
+        return { host: ep.host, port: ep.port };
+    });
+    const info = {
+        schema: parsed.schema,
+        endpoints,
+        key: toBytes(parsed.key, "key"),
+        daemonId: toBytes(parsed.daemon_id, "daemon_id"),
+        pid: parsed.pid,
+        daemonVer: parsed.daemon_ver ?? "",
+    };
+    validate(info);
+    return info;
+}
+//# sourceMappingURL=connection-file.js.map

dist/connection-file.js.map

+{"version":3,"file":"connection-file.js","sourceRoot":"","sources":["../src/connection-file.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,+CAA+C;AAE/C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC9B,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAkBhC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,KAAK,iCAAiC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAiB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAoB;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,mBAAmB,CAC3B,sCAAsC,IAAI,CAAC,MAAM,cAAc,cAAc,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAAC,oDAAoD,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,mBAAmB,CAC3B,qCAAqC,IAAI,CAAC,GAAG,CAAC,MAAM,yBAAyB,WAAW,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAC3C,MAAM,IAAI,mBAAmB,CAC3B,qCAAqC,aAAa,eAAe,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAC3B,mBAAmB,IAAI,+BAA+B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,mBAAmB,CAAC,8CAA8C,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,SAAS,GAAe,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CAAC,iEAAiE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAmB;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAgB;QAC/B,SAAS;QACT,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;QAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QAChD,GAAG,EAAE,MAAM,CAAC,GAAa;QACzB,SAAS,EAAG,MAAM,CAAC,UAAqB,IAAI,EAAE;KAC/C,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC"}

dist/envelope.d.ts

+export declare const PROTOCOL_VERSION = 1;
+export declare const HEADER_LEN = 17;
+export declare const FROZEN_PREFIX_LEN = 5;
+export declare const MAX_FRAME_BODY_LEN: number;
+/** `type` byte at offset 5. */
+export declare enum FrameType {
+    Request = 0,
+    Response = 1,
+    Push = 2,
+    StreamData = 3,
+    StreamEnd = 4,
+    Error = 5,
+    Cancel = 6,
+    Ping = 7,
+    Pong = 8,
+    Hello = 9,
+    HelloAck = 10,
+    Goodbye = 11
+}
+/** Cancel/Ping/Pong/Goodbye carry only a header (`len` must be 0). */
+export declare function isPureHeader(ty: FrameType): boolean;
+/** Scheduling priority carried in flags bits 1-2. */
+export declare enum Priority {
+    Passive = 0,
+    Interactive = 1,
+    Background = 2
+}
+/** Build the flags byte from typed components (mirrors Flags::new). */
+export declare function buildFlags(binary: boolean, priority: Priority, last: boolean): number;
+export interface EnvelopeHeader {
+    len: number;
+    ver: number;
+    ty: FrameType;
+    flags: number;
+    channel: number;
+    corr: bigint;
+}
+export interface Frame {
+    header: EnvelopeHeader;
+    body: Uint8Array;
+}
+/** Serialize a header to its fixed 17-byte little-endian form. */
+export declare function encodeHeader(h: EnvelopeHeader): Uint8Array;
+export declare class DecodeError extends Error {
+}
+/**
+ * Decode a header from the front of `bytes`, following the frozen-prefix
+ * discipline: need 5 bytes for len+ver, dispatch full header length on ver,
+ * then validate. Mirrors decode_header — never throws on a structurally short
+ * buffer beyond the typed DecodeError.
+ */
+export declare function decodeHeader(bytes: Uint8Array): EnvelopeHeader;
+/** Build a full current-version frame, enforcing the body-length cap and the pure-header rule. */
+export declare function buildFrame(ty: FrameType, flags: number, channel: number, corr: bigint, body: Uint8Array): Frame;
+/** Build a full frame while preserving a peer-negotiated envelope version. */
+export declare function buildFrameWithVersion(ver: number, ty: FrameType, flags: number, channel: number, corr: bigint, body: Uint8Array): Frame;
+/** Encode a frame to wire bytes: 17-byte header followed by `len` body bytes. */
+export declare function encodeFrame(frame: Frame): Uint8Array;
+//# sourceMappingURL=envelope.d.ts.map

dist/envelope.d.ts.map

+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AAEnD,+BAA+B;AAC/B,oBAAY,SAAS;IACnB,OAAO,IAAI;IACX,QAAQ,IAAI;IACZ,IAAI,IAAI;IACR,UAAU,IAAI;IACd,SAAS,IAAI;IACb,KAAK,IAAI;IACT,MAAM,IAAI;IACV,IAAI,IAAI;IACR,IAAI,IAAI;IACR,KAAK,IAAI;IACT,QAAQ,KAAK;IACb,OAAO,KAAK;CACb;AAID,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAOnD;AAED,qDAAqD;AACrD,oBAAY,QAAQ;IAClB,OAAO,IAAI;IACX,WAAW,IAAI;IACf,UAAU,IAAI;CACf;AAQD,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAMrF;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,SAAS,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,CAAC,EAAE,cAAc,GAAG,UAAU,CAU1D;AAED,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CA+B9D;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,GACf,KAAK,CAEP;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,GACf,KAAK,CAWP;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAMpD"}

dist/envelope.js

+// Byte-for-byte port of subc-protocol's 17-byte envelope header.
+// Source of truth: crates/subc-protocol/src/lib.rs. Keep field offsets, the
+// little-endian encoding, and the frame-type/flag numbering in lock-step with
+// the Rust; a one-byte drift here desynchronizes every frame on the wire.
+export const PROTOCOL_VERSION = 1;
+export const HEADER_LEN = 17;
+export const FROZEN_PREFIX_LEN = 5;
+export const MAX_FRAME_BODY_LEN = 64 * 1024 * 1024;
+/** `type` byte at offset 5. */
+export var FrameType;
+(function (FrameType) {
+    FrameType[FrameType["Request"] = 0] = "Request";
+    FrameType[FrameType["Response"] = 1] = "Response";
+    FrameType[FrameType["Push"] = 2] = "Push";
+    FrameType[FrameType["StreamData"] = 3] = "StreamData";
+    FrameType[FrameType["StreamEnd"] = 4] = "StreamEnd";
+    FrameType[FrameType["Error"] = 5] = "Error";
+    FrameType[FrameType["Cancel"] = 6] = "Cancel";
+    FrameType[FrameType["Ping"] = 7] = "Ping";
+    FrameType[FrameType["Pong"] = 8] = "Pong";
+    FrameType[FrameType["Hello"] = 9] = "Hello";
+    FrameType[FrameType["HelloAck"] = 10] = "HelloAck";
+    FrameType[FrameType["Goodbye"] = 11] = "Goodbye";
+})(FrameType || (FrameType = {}));
+const FRAME_TYPE_MAX = FrameType.Goodbye;
+/** Cancel/Ping/Pong/Goodbye carry only a header (`len` must be 0). */
+export function isPureHeader(ty) {
+    return (ty === FrameType.Cancel ||
+        ty === FrameType.Ping ||
+        ty === FrameType.Pong ||
+        ty === FrameType.Goodbye);
+}
+/** Scheduling priority carried in flags bits 1-2. */
+export var Priority;
+(function (Priority) {
+    Priority[Priority["Passive"] = 0] = "Passive";
+    Priority[Priority["Interactive"] = 1] = "Interactive";
+    Priority[Priority["Background"] = 2] = "Background";
+})(Priority || (Priority = {}));
+const FLAG_BINARY = 0b0000_0001; // bit 0
+const FLAG_PRIORITY_MASK = 0b0000_0110; // bits 1-2
+const FLAG_PRIORITY_SHIFT = 1;
+const FLAG_LAST = 0b0000_1000; // bit 3
+const FLAG_RESERVED_MASK = 0b1111_0000; // bits 4-7 must be zero
+/** Build the flags byte from typed components (mirrors Flags::new). */
+export function buildFlags(binary, priority, last) {
+    let b = 0;
+    if (binary)
+        b |= FLAG_BINARY;
+    b |= priority << FLAG_PRIORITY_SHIFT;
+    if (last)
+        b |= FLAG_LAST;
+    return b;
+}
+/** Serialize a header to its fixed 17-byte little-endian form. */
+export function encodeHeader(h) {
+    const buf = new Uint8Array(HEADER_LEN);
+    const view = new DataView(buf.buffer);
+    view.setUint32(0, h.len, true);
+    buf[4] = h.ver;
+    buf[5] = h.ty;
+    buf[6] = h.flags;
+    view.setUint16(7, h.channel, true);
+    view.setBigUint64(9, h.corr, true);
+    return buf;
+}
+export class DecodeError extends Error {
+}
+/**
+ * Decode a header from the front of `bytes`, following the frozen-prefix
+ * discipline: need 5 bytes for len+ver, dispatch full header length on ver,
+ * then validate. Mirrors decode_header — never throws on a structurally short
+ * buffer beyond the typed DecodeError.
+ */
+export function decodeHeader(bytes) {
+    if (bytes.length < FROZEN_PREFIX_LEN) {
+        throw new DecodeError(`header shorter than frozen prefix: have ${bytes.length} bytes`);
+    }
+    const ver = bytes[4];
+    if (ver !== PROTOCOL_VERSION) {
+        throw new DecodeError(`unsupported envelope version ${ver}`);
+    }
+    if (bytes.length < HEADER_LEN) {
+        throw new DecodeError(`header too short for version: have ${bytes.length} bytes, need ${HEADER_LEN}`);
+    }
+    const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    const len = view.getUint32(0, true);
+    const tyByte = bytes[5];
+    if (tyByte > FRAME_TYPE_MAX) {
+        throw new DecodeError(`unknown frame type byte ${tyByte}`);
+    }
+    const ty = tyByte;
+    const flags = bytes[6];
+    if ((flags & FLAG_RESERVED_MASK) !== 0) {
+        throw new DecodeError(`reserved flag bits set in flags 0b${flags.toString(2)}`);
+    }
+    if (((flags & FLAG_PRIORITY_MASK) >> FLAG_PRIORITY_SHIFT) === 0b11) {
+        throw new DecodeError(`reserved priority bits set in flags 0b${flags.toString(2)}`);
+    }
+    if (isPureHeader(ty) && len !== 0) {
+        throw new DecodeError(`pure-header frame ${FrameType[ty]} declared non-zero body length ${len}`);
+    }
+    const channel = view.getUint16(7, true);
+    const corr = view.getBigUint64(9, true);
+    return { len, ver, ty, flags, channel, corr };
+}
+/** Build a full current-version frame, enforcing the body-length cap and the pure-header rule. */
+export function buildFrame(ty, flags, channel, corr, body) {
+    return buildFrameWithVersion(PROTOCOL_VERSION, ty, flags, channel, corr, body);
+}
+/** Build a full frame while preserving a peer-negotiated envelope version. */
+export function buildFrameWithVersion(ver, ty, flags, channel, corr, body) {
+    if (body.length > MAX_FRAME_BODY_LEN) {
+        throw new DecodeError(`frame body ${body.length} exceeds max ${MAX_FRAME_BODY_LEN}`);
+    }
+    if (isPureHeader(ty) && body.length !== 0) {
+        throw new DecodeError(`pure-header frame ${FrameType[ty]} cannot carry a body`);
+    }
+    return {
+        header: { len: body.length, ver, ty, flags, channel, corr },
+        body,
+    };
+}
+/** Encode a frame to wire bytes: 17-byte header followed by `len` body bytes. */
+export function encodeFrame(frame) {
+    const header = encodeHeader(frame.header);
+    const out = new Uint8Array(header.length + frame.body.length);
+    out.set(header, 0);
+    out.set(frame.body, header.length);
+    return out;
+}
+//# sourceMappingURL=envelope.js.map

dist/envelope.js.map

+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAE1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAC7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnD,+BAA+B;AAC/B,MAAM,CAAN,IAAY,SAaX;AAbD,WAAY,SAAS;IACnB,+CAAW,CAAA;IACX,iDAAY,CAAA;IACZ,yCAAQ,CAAA;IACR,qDAAc,CAAA;IACd,mDAAa,CAAA;IACb,2CAAS,CAAA;IACT,6CAAU,CAAA;IACV,yCAAQ,CAAA;IACR,yCAAQ,CAAA;IACR,2CAAS,CAAA;IACT,kDAAa,CAAA;IACb,gDAAY,CAAA;AACd,CAAC,EAbW,SAAS,KAAT,SAAS,QAapB;AAED,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC;AAEzC,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,EAAa;IACxC,OAAO,CACL,EAAE,KAAK,SAAS,CAAC,MAAM;QACvB,EAAE,KAAK,SAAS,CAAC,IAAI;QACrB,EAAE,KAAK,SAAS,CAAC,IAAI;QACrB,EAAE,KAAK,SAAS,CAAC,OAAO,CACzB,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAN,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,6CAAW,CAAA;IACX,qDAAe,CAAA;IACf,mDAAc,CAAA;AAChB,CAAC,EAJW,QAAQ,KAAR,QAAQ,QAInB;AAED,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,QAAQ;AACzC,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,WAAW;AACnD,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,QAAQ;AACvC,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,wBAAwB;AAEhE,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,MAAe,EAAE,QAAkB,EAAE,IAAa;IAC3E,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,MAAM;QAAE,CAAC,IAAI,WAAW,CAAC;IAC7B,CAAC,IAAI,QAAQ,IAAI,mBAAmB,CAAC;IACrC,IAAI,IAAI;QAAE,CAAC,IAAI,SAAS,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAgBD,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,CAAiB;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;IACf,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACd,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACjB,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACrC,MAAM,IAAI,WAAW,CAAC,2CAA2C,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACtB,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,WAAW,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,WAAW,CAAC,sCAAsC,KAAK,CAAC,MAAM,gBAAgB,UAAU,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACzB,IAAI,MAAM,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,WAAW,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,GAAG,MAAmB,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACxB,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,WAAW,CAAC,qCAAqC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,mBAAmB,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,WAAW,CAAC,yCAAyC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,YAAY,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,WAAW,CAAC,qBAAqB,SAAS,CAAC,EAAE,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,UAAU,CACxB,EAAa,EACb,KAAa,EACb,OAAe,EACf,IAAY,EACZ,IAAgB;IAEhB,OAAO,qBAAqB,CAAC,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,EAAa,EACb,KAAa,EACb,OAAe,EACf,IAAY,EACZ,IAAgB;IAEhB,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,WAAW,CAAC,cAAc,IAAI,CAAC,MAAM,gBAAgB,kBAAkB,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,YAAY,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,WAAW,CAAC,qBAAqB,SAAS,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QAC3D,IAAI;KACL,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC"}

dist/index.d.ts

+export { SubcClient, SubcError, SubcCallError, DEFAULT_RECONNECT_BACKOFF, SUBC_MODULE_ID_ENV, SUBC_LAUNCH_NONCE_ENV, isConsumerReconnectTransient, connectionFileExists, type BindIdentity, type RouteTarget, type ManagedRouteKind, type ConsumerIdentity, type RouteOpenOptions, type CatalogEntry, type RequestOptions, type ManagedCallOptions, type ConnectOptions, type ReconnectBackoff, type SubcCallErrorKind, type SubscribeOptions, type Subscription, type CloseRouteOptions, } from "./client.js";
+export { readConnectionFile, ConnectionFileError, type ConnectionInfo, type Endpoint, } from "./connection-file.js";
+export { FrameType, Priority, PROTOCOL_VERSION, HEADER_LEN, buildFrame, buildFrameWithVersion, buildFlags, encodeFrame, decodeHeader, encodeHeader, DecodeError, type Frame, type EnvelopeHeader, } from "./envelope.js";
+export { authenticateClient, computeProof, AuthError, NONCE_LEN, PROOF_LEN, SERVER_PROOF_DOMAIN, CLIENT_AUTH_DOMAIN, } from "./auth.js";
+export { SubcSocket, SocketClosedError, SocketTimeoutError } from "./socket.js";
+export { SubcProvider, SubcProviderError, HELLO_CORR, managementSurfaceManifest, jsonProviderHandler, type ProviderRequestContext, type BindDecision, type Principal, type BindingsInput, type CircuitBreakerInput, type Concurrency, type ConsumerRoleInput, type ExecutionMode, type IdentityBindingInput, type IdentityScope, type InternalTransport, type LeaseScope, type ManagementOperationInput, type ManagementOperationKind, type ManagementSurfaceManifestOptions, type ManifestInput, type ModelPolicyInput, type ModuleHelloAckBody, type ObservabilityKind, type ObservabilitySurfaceInput, type PipelineAppliesToInput, type PipelineStageKind, type ProviderConnectionState, type ProviderHandler, type ProviderRoleInput, type RouteBindRequest, type ScheduledTaskInput, type StorageBindingInput, type StorageKind, type StorageScope, type SubcProviderConnectOptions, type TaskEligibilityInput, type ToolInput, type TrustTier, type VaultGrantInput, } from "./provider.js";
+//# sourceMappingURL=index.d.ts.map

dist/index.d.ts.map

+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,aAAa,EACb,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,QAAQ,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,KAAK,KAAK,EACV,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC"}

dist/index.js

+export { SubcClient, SubcError, SubcCallError, DEFAULT_RECONNECT_BACKOFF, SUBC_MODULE_ID_ENV, SUBC_LAUNCH_NONCE_ENV, isConsumerReconnectTransient, connectionFileExists, } from "./client.js";
+export { readConnectionFile, ConnectionFileError, } from "./connection-file.js";
+export { FrameType, Priority, PROTOCOL_VERSION, HEADER_LEN, buildFrame, buildFrameWithVersion, buildFlags, encodeFrame, decodeHeader, encodeHeader, DecodeError, } from "./envelope.js";
+export { authenticateClient, computeProof, AuthError, NONCE_LEN, PROOF_LEN, SERVER_PROOF_DOMAIN, CLIENT_AUTH_DOMAIN, } from "./auth.js";
+export { SubcSocket, SocketClosedError, SocketTimeoutError } from "./socket.js";
+export { SubcProvider, SubcProviderError, HELLO_CORR, managementSurfaceManifest, jsonProviderHandler, } from "./provider.js";
+//# sourceMappingURL=index.js.map

dist/index.js.map

+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,aAAa,EACb,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,oBAAoB,GAerB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GAGpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,GAGZ,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,yBAAyB,EACzB,mBAAmB,GAoCpB,MAAM,eAAe,CAAC"}

dist/provider.d.ts

+import { type BindIdentity, type ReconnectBackoff, type RouteTarget } from "./client.js";
+import { type ConnectionInfo } from "./connection-file.js";
+export declare const HELLO_CORR = 1n;
+export type TrustTier = "first_party" | "reviewed" | "untrusted";
+export type ExecutionMode = "pure" | "mutating" | "unfenceable";
+export type Concurrency = "serial" | "module_managed" | "stateless_parallel";
+export type IdentityScope = "session" | "project";
+export type PipelineStageKind = "transform" | "codec" | "auth";
+export type ManagementOperationKind = "query" | "mutate";
+export type ObservabilityKind = "snapshot" | "stream";
+export type InternalTransport = "bulk";
+export type StorageKind = "sqlite";
+export type StorageScope = "project";
+export type LeaseScope = "project";
+export interface ManifestInput {
+    module_id: string;
+    module_version: string;
+    protocol_ver: number;
+    trust_tier: TrustTier;
+    provides: ProviderRoleInput[];
+    consumes: ConsumerRoleInput[];
+    scheduled_tasks: ScheduledTaskInput[];
+    bindings: BindingsInput;
+}
+export type ProviderRoleInput = {
+    role: "tool_provider";
+    tools: ToolInput[];
+    identity_scope: IdentityScope[];
+    concurrency: Concurrency;
+    emits_push: boolean;
+    sub_supervises: boolean;
+} | {
+    role: "pipeline_stage";
+    stage: PipelineStageKind;
+    applies_to: PipelineAppliesToInput;
+    interface: string;
+    declares_frozen_floor: boolean;
+    needs_signals: string[];
+    conformance_class: string;
+} | {
+    role: "management_surface";
+    operations: ManagementOperationInput[];
+    config_schema: unknown;
+    observability: ObservabilitySurfaceInput[];
+    identity_scope: IdentityScope[];
+} | {
+    role: "internal_service";
+    service_id: string;
+    transport: InternalTransport;
+    agent_facing: boolean;
+    operations: string[];
+};
+export interface ToolInput {
+    name: string;
+    execution_mode: ExecutionMode;
+    schema: unknown;
+}
+export interface PipelineAppliesToInput {
+    provider: string;
+    model: string;
+}
+export interface ManagementOperationInput {
+    name: string;
+    kind: ManagementOperationKind;
+}
+export interface ObservabilitySurfaceInput {
+    name: string;
+    kind: ObservabilityKind;
+}
+export type ConsumerRoleInput = {
+    role: "tool_client";
+    of: string[];
+} | {
+    role: "llm_client";
+    via: string;
+    auth: string;
+} | {
+    role: "service_client";
+    of: string[];
+};
+export interface ScheduledTaskInput {
+    task_id: string;
+    eligibility: TaskEligibilityInput;
+    lease_scope: LeaseScope;
+    renews_during_calls: boolean;
+    toolset: string[];
+    model_policy: ModelPolicyInput;
+    step_cap: number;
+    circuit_breaker: CircuitBreakerInput;
+}
+export interface TaskEligibilityInput {
+    cooldown: string;
+    window: string;
+}
+export interface ModelPolicyInput {
+    tier: string;
+    fallback_chain: string[];
+}
+export interface CircuitBreakerInput {
+    identical_failures: number;
+}
+export interface BindingsInput {
+    storage: StorageBindingInput;
+    vault_grants: VaultGrantInput[];
+    identity: IdentityBindingInput;
+}
+export interface StorageBindingInput {
+    kind: StorageKind;
+    scope: StorageScope;
+    owns_schema: boolean;
+}
+export interface VaultGrantInput {
+    secret: string;
+    reason: string;
+}
+export interface IdentityBindingInput {
+    requires: IdentityScope[];
+    optional: IdentityScope[];
+}
+export interface ManagementSurfaceManifestOptions {
+    moduleId: string;
+    operations: Array<string | ManagementOperationInput>;
+    moduleVersion?: string;
+}
+/**
+ * Per-request context handed to a provider handler. A unary handler ignores it and
+ * just returns its response bytes; a streaming handler uses `emit` to push interim
+ * events and `signal` to learn when the consumer cancelled or the route went away.
+ */
+export interface ProviderRequestContext {
+    /**
+     * Emit an interim event as a StreamData frame on this request's (channel, corr).
+     * The consumer receives it via its subscription `onEvent`. A no-op once the
+     * request has been aborted (cancelled or route-gone).
+     */
+    emit(body: Uint8Array): Promise<void>;
+    /** Aborts when the consumer sends Cancel for this request, or the route is torn down. */
+    signal: AbortSignal;
+    /**
+     * The provider's current transport connection epoch: 1 on the initial connection,
+     * +1 on each successful reconnect + re-registration. Read at the moment the handler
+     * calls it (so it reflects any reconnect that happened while the handler ran). A
+     * handler that reports connection liveness to its consumer (e.g. stamping the epoch
+     * on a response so the consumer can detect a reconnect) should read it from here —
+     * this is the single authoritative source of the transport epoch, so it can never
+     * drift from a separately-maintained counter.
+     */
+    currentEpoch(): number;
+}
+/**
+ * A request handler. Return a `Uint8Array` for a single Response (unary), or
+ * `void` to end a streaming subscription with a StreamEnd terminal (after emitting
+ * events via `ctx.emit`). Throwing produces an Error terminal.
+ */
+export type ProviderHandler = (routeChannel: number, body: Uint8Array, ctx: ProviderRequestContext) => Promise<Uint8Array | void> | Uint8Array | void;
+export type Principal = {
+    kind: "reserved";
+    module_id: string;
+} | {
+    kind: "direct";
+} | {
+    kind: "unverified";
+};
+export interface RouteBindRequest {
+    route_channel: number;
+    target: RouteTarget;
+    identity: BindIdentity;
+    principal?: Principal;
+}
+export type BindDecision = boolean | {
+    accept: boolean;
+    code?: string;
+    message?: string;
+};
+export type ProviderConnectionState = {
+    state: "connected";
+    epoch: number;
+} | {
+    state: "down";
+    cause: Error;
+} | {
+    state: "reconnecting";
+    attempt: number;
+} | {
+    state: "restored";
+    epoch: number;
+};
+export interface SubcProviderConnectOptions {
+    connectionFile: string;
+    manifest: ManifestInput;
+    handler: ProviderHandler;
+    handshakeTimeoutMs?: number;
+    controlOps?: string[] | null;
+    onBind?: (request: RouteBindRequest) => Promise<BindDecision> | BindDecision;
+    onRouteGone?: (routeChannel: number) => void | Promise<void>;
+    /** Backoff for provider reconnect after an unexpected socket drop. */
+    reconnectBackoff?: ReconnectBackoff;
+    /** Injectable sleep for timer-free reconnect and debounce tests. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Milliseconds to wait before emitting restored after the provider re-registers following a reconnect. */
+    restoredDebounceMs?: number;
+    /** Callback that receives ProviderConnectionState events one at a time and in order. */
+    onConnectionState?: (event: ProviderConnectionState) => void | Promise<void>;
+    /**
+     * The one-time launch nonce to echo in HELLO for a reserved module. Defaults to
+     * the `SUBC_LAUNCH_NONCE` environment variable subc injects on spawn; pass
+     * explicitly to override. Omitted from the wire when empty (non-reserved modules).
+     */
+    launchNonce?: string;
+}
+export interface ModuleHelloAckBody {
+    negotiated_ver: number;
+    subc_ops: string[];
+    subc_capabilities: string[];
+    /**
+     * The module's resolved storage descriptor, present when the daemon's central
+     * config configures managed storage. Carried opaquely (the wire crate has no
+     * storage dependency); a module using managed storage reads this and hands it to
+     * the storage library. Absent when no storage is configured.
+     */
+    storage?: unknown;
+}
+export declare class SubcProviderError extends Error {
+    readonly code?: string | undefined;
+    constructor(message: string, code?: string | undefined);
+}
+export declare function managementSurfaceManifest(opts: ManagementSurfaceManifestOptions): ManifestInput;
+export declare function jsonProviderHandler<Request = unknown, Response = unknown>(handler: (routeChannel: number, request: Request) => Promise<Response> | Response): ProviderHandler;
+export declare class SubcProvider {
+    private sock;
+    private currentConn;
+    private readonly opts;
+    private readonly closed;
+    private resolveClosed;
+    private closeStarted;
+    private closedErr;
+    private readonly inflight;
+    private reconnecting;
+    private generation;
+    private connectionEpoch;
+    private stateQueue;
+    private drainingStateQueue;
+    private restoredDebounceToken;
+    /**
+     * The resolved storage descriptor the daemon delivered in HELLO_ACK, or
+     * `undefined` when no managed storage is configured. A module that persists
+     * hands this to the storage library.
+     */
+    storage: unknown;
+    private constructor();
+    get conn(): ConnectionInfo;
+    currentEpoch(): number;
+    /** Read the connection file, authenticate as a client, register the manifest with HELLO, and serve frames. */
+    static connect(opts: SubcProviderConnectOptions): Promise<SubcProvider>;
+    close(): Promise<void>;
+    private static openConnection;
+    private readLoop;
+    private dispatch;
+    /** Abort every in-flight request on a route channel for the current socket generation. */
+    private abortChannel;
+    private abortGeneration;
+    private abortAllInflight;
+    private handleControlRequest;
+    private handleDataRequest;
+    private sendError;
+    private sendOn;
+    private handleUnexpectedDrop;
+    private scheduleReconnectAfterDrop;
+    private reconnectWithRetry;
+    private replaceConnection;
+    private scheduleRestored;
+    private cancelRestoredDebounce;
+    private enqueueConnectionState;
+    private drainConnectionStateQueue;
+    private failFatal;
+    private finishClosed;
+}
+//# sourceMappingURL=provider.d.ts.map

dist/provider.d.ts.map

+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6B,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACpH,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAyBpG,eAAO,MAAM,UAAU,KAAK,CAAC;AAE7B,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAC/D,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,QAAQ,CAAC;AACzD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;AACnC,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AACrC,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,eAAe,EAAE,kBAAkB,EAAE,CAAC;IACtC,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,sBAAsB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GACD;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,yBAAyB,EAAE,CAAC;IAC3C,cAAc,EAAE,aAAa,EAAE,CAAC;CACjC,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,aAAa,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,oBAAoB,CAAC;IAClC,WAAW,EAAE,UAAU,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAGD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,wBAAwB,CAAC,CAAC;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,yFAAyF;IACzF,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;;;;OAQG;IACH,YAAY,IAAI,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,sBAAsB,KACxB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;AAEpD,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAE3B,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,MAAM,YAAY,GACpB,OAAO,GACP;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC/B;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,eAAe,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;IAC7E,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oEAAoE;IACpE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2GAA2G;IAC3G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAuBD,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBADtB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;CAIzB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gCAAgC,GAAG,aAAa,CAoC/F;AAED,wBAAgB,mBAAmB,CAAC,OAAO,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,EACvE,OAAO,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAChF,eAAe,CAMjB;AAED,qBAAa,YAAY;IAwBrB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAzBvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAsB;IAIvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,qBAAqB,CAAK;IAElC;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB,OAAO;IAcP,IAAI,IAAI,IAAI,cAAc,CAEzB;IAED,YAAY,IAAI,MAAM;IAItB,8GAA8G;WACjG,OAAO,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;IAavE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;mBAiBP,cAAc;YAgBrB,QAAQ;YA6BR,QAAQ;IA8CtB,0FAA0F;IAC1F,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,gBAAgB;YAIV,oBAAoB;YAkCpB,iBAAiB;YAuDjB,SAAS;YAsBT,MAAM;IAKpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,0BAA0B;YAYpB,kBAAkB;IAyBhC,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,sBAAsB;YAMhB,yBAAyB;IAyBvC,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,YAAY;CAGrB"}

dist/provider.js

+import { Buffer } from "node:buffer";
+import { AuthError, authenticateClient } from "./auth.js";
+import { DEFAULT_RECONNECT_BACKOFF } from "./client.js";
+import { ConnectionFileError, readConnectionFile } from "./connection-file.js";
+import { buildFlags, buildFrame, buildFrameWithVersion, decodeHeader, encodeFrame, FrameType, HEADER_LEN, Priority, PROTOCOL_VERSION, } from "./envelope.js";
+import { SocketClosedError, SocketTimeoutError, SocketWriteNotQueuedError, SocketWriteQueuedError, SubcSocket, } from "./socket.js";
+const DEFAULT_HANDSHAKE_TIMEOUT_MS = 10_000;
+const BODY_READ_TIMEOUT_MS = 30_000;
+const WRITE_TIMEOUT_MS = 30_000;
+const DEFAULT_RESTORED_DEBOUNCE_MS = 250;
+export const HELLO_CORR = 1n;
+export class SubcProviderError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+    }
+}
+export function managementSurfaceManifest(opts) {
+    const operations = opts.operations.map((operation) => typeof operation === "string"
+        ? { name: operation, kind: "query" }
+        : { name: operation.name, kind: operation.kind });
+    return {
+        module_id: opts.moduleId,
+        module_version: opts.moduleVersion ?? "0.0.0",
+        protocol_ver: PROTOCOL_VERSION,
+        trust_tier: "first_party",
+        provides: [
+            {
+                role: "management_surface",
+                operations,
+                config_schema: { type: "object" },
+                observability: [],
+                identity_scope: [],
+            },
+        ],
+        consumes: [],
+        scheduled_tasks: [],
+        bindings: {
+            storage: {
+                kind: "sqlite",
+                scope: "project",
+                owns_schema: false,
+            },
+            vault_grants: [],
+            identity: {
+                requires: [],
+                optional: [],
+            },
+        },
+    };
+}
+export function jsonProviderHandler(handler) {
+    return async (routeChannel, body) => {
+        const request = JSON.parse(Buffer.from(body).toString("utf8"));
+        const response = await handler(routeChannel, request);
+        return encodeJson(response);
+    };
+}
+export class SubcProvider {
+    sock;
+    currentConn;
+    opts;
+    closed;
+    resolveClosed = () => undefined;
+    closeStarted = false;
+    closedErr = null;
+    // In-flight data requests are keyed by generation, channel, and correlation id.
+    // A socket drop only makes the reply path stale; handlers may still finish their
+    // durable work, and their late sends are ignored by the generation guard.
+    inflight = new Map();
+    reconnecting = null;
+    generation = 1;
+    connectionEpoch = 1;
+    stateQueue = [];
+    drainingStateQueue = false;
+    restoredDebounceToken = 0;
+    /**
+     * The resolved storage descriptor the daemon delivered in HELLO_ACK, or
+     * `undefined` when no managed storage is configured. A module that persists
+     * hands this to the storage library.
+     */
+    storage;
+    constructor(sock, currentConn, opts, storage) {
+        this.sock = sock;
+        this.currentConn = currentConn;
+        this.opts = opts;
+        this.storage = storage;
+        this.closed = new Promise((resolve) => {
+            this.resolveClosed = resolve;
+        });
+        void this.readLoop(sock, this.generation);
+        this.enqueueConnectionState({ state: "connected", epoch: this.connectionEpoch });
+    }
+    get conn() {
+        return this.currentConn;
+    }
+    currentEpoch() {
+        return this.connectionEpoch;
+    }
+    /** Read the connection file, authenticate as a client, register the manifest with HELLO, and serve frames. */
+    static async connect(opts) {
+        if (opts.manifest.protocol_ver !== PROTOCOL_VERSION) {
+            throw new SubcProviderError(`manifest protocol_ver ${opts.manifest.protocol_ver} does not match client protocol ${PROTOCOL_VERSION}`, "invalid_manifest");
+        }
+        const normalized = normalizeProviderConnectOptions(opts);
+        const opened = await SubcProvider.openConnection(normalized);
+        return new SubcProvider(opened.sock, opened.conn, normalized, opened.ack.storage);
+    }
+    async close() {
+        if (!this.closeStarted) {
+            this.closeStarted = true;
+            this.cancelRestoredDebounce();
+            const sock = this.sock;
+            try {
+                await sendFrame(sock, buildFrame(FrameType.Goodbye, controlFlags(), 0, 0n, new Uint8Array(0)));
+            }
+            catch {
+                // The daemon may already have closed the connection; close() remains best-effort.
+            }
+            finally {
+                sock.close();
+                this.finishClosed();
+            }
+        }
+        await this.closed;
+    }
+    static async openConnection(opts) {
+        const conn = await readConnectionFile(opts.connectionFile);
+        const deadline = Date.now() + (opts.handshakeTimeoutMs ?? DEFAULT_HANDSHAKE_TIMEOUT_MS);
+        const endpoint = conn.endpoints[0];
+        const sock = await SubcSocket.connect(endpoint.host, endpoint.port, deadline);
+        try {
+            await authenticateClient(sock, conn, deadline);
+            await sendFrame(sock, buildHelloFrame(opts));
+            const ack = await expectHelloAck(sock, deadline);
+            return { sock, conn, ack };
+        }
+        catch (err) {
+            sock.close();
+            throw err;
+        }
+    }
+    async readLoop(sock, generation) {
+        try {
+            for (;;) {
+                // Header read waits indefinitely — idle time between frames is normal.
+                const headerBytes = await sock.readExact(HEADER_LEN, Number.POSITIVE_INFINITY);
+                const header = decodeHeader(headerBytes);
+                const body = header.len === 0
+                    ? new Uint8Array(0)
+                    : await sock.readExact(header.len, Date.now() + BODY_READ_TIMEOUT_MS);
+                const keepGoing = await this.dispatch({ header, body }, sock, generation);
+                if (!keepGoing) {
+                    if (this.sock === sock && this.generation === generation)
+                        this.closeStarted = true;
+                    break;
+                }
+            }
+        }
+        catch (err) {
+            if (this.sock === sock && this.generation === generation && !this.closeStarted) {
+                this.handleUnexpectedDrop(sock, generation, err instanceof Error ? err : new SubcProviderError(String(err)));
+                return;
+            }
+        }
+        finally {
+            if (this.sock === sock && this.generation === generation) {
+                sock.close();
+                if (this.closeStarted)
+                    this.finishClosed();
+            }
+        }
+    }
+    async dispatch(frame, sock, generation) {
+        switch (frame.header.ty) {
+            case FrameType.Ping:
+                if (frame.header.channel === 0) {
+                    await this.sendOn(sock, generation, buildFrameWithVersion(frame.header.ver, FrameType.Pong, frame.header.flags, 0, frame.header.corr, new Uint8Array(0)));
+                }
+                return true;
+            case FrameType.Goodbye:
+                if (frame.header.channel === 0)
+                    return false;
+                // The route is gone: abort in-flight requests on that route so streaming
+                // handlers unwind, then notify the provider owner.
+                this.abortChannel(generation, frame.header.channel);
+                await this.opts.onRouteGone?.(frame.header.channel);
+                return true;
+            case FrameType.Cancel:
+                // The consumer cancelled one request: abort the matching handler. Its
+                // streaming handler observes ctx.signal and ends with a StreamEnd terminal.
+                this.inflight.get(routeKey(generation, frame.header.channel, frame.header.corr))?.abort();
+                return true;
+            case FrameType.Request:
+                if (frame.header.channel === 0) {
+                    await this.handleControlRequest(frame, sock, generation);
+                }
+                else {
+                    void this.handleDataRequest(frame, sock, generation).catch((err) => {
+                        if (!this.closeStarted && this.sock === sock && this.generation === generation) {
+                            console.warn("SubcProvider handler failed after its request was dispatched", err);
+                        }
+                    });
+                }
+                return true;
+            default:
+                return true;
+        }
+    }
+    /** Abort every in-flight request on a route channel for the current socket generation. */
+    abortChannel(generation, channel) {
+        const prefix = `${generation}:${channel}:`;
+        for (const [key, controller] of this.inflight) {
+            if (key.startsWith(prefix))
+                controller.abort();
+        }
+    }
+    abortGeneration(generation) {
+        const prefix = `${generation}:`;
+        for (const [key, controller] of this.inflight) {
+            if (key.startsWith(prefix))
+                controller.abort();
+        }
+    }
+    abortAllInflight() {
+        for (const controller of this.inflight.values())
+            controller.abort();
+    }
+    async handleControlRequest(frame, sock, generation) {
+        const request = parseJson(frame.body);
+        if (request.op !== "route.bind") {
+            throw new SubcProviderError(`unsupported module control request ${request.op ?? "<missing op>"}`);
+        }
+        const bindRequest = {
+            route_channel: numberField(request.route_channel, "route_channel"),
+            target: request.target,
+            identity: request.identity,
+            principal: request.principal,
+        };
+        const decision = await this.opts.onBind?.(bindRequest);
+        const rejection = bindRejection(decision);
+        if (rejection) {
+            await this.sendError(frame, rejection.code, rejection.message, controlFlags(), sock, generation);
+            return;
+        }
+        await this.sendOn(sock, generation, buildFrameWithVersion(frame.header.ver, FrameType.Response, controlFlags(), 0, frame.header.corr, encodeJson({ op: "route.bind" })));
+    }
+    async handleDataRequest(frame, sock, generation) {
+        const { channel, corr, ver } = frame.header;
+        const key = routeKey(generation, channel, corr);
+        const controller = new AbortController();
+        this.inflight.set(key, controller);
+        const dataFlags = buildFlags(false, Priority.Interactive, false);
+        const ctx = {
+            signal: controller.signal,
+            currentEpoch: () => this.connectionEpoch,
+            emit: async (eventBody) => {
+                // Once aborted (cancel / route-gone / socket drop), drop further events silently.
+                if (controller.signal.aborted)
+                    return;
+                await this.sendOn(sock, generation, buildFrameWithVersion(ver, FrameType.StreamData, dataFlags, channel, corr, eventBody));
+            },
+        };
+        try {
+            const body = await this.opts.handler(channel, frame.body, ctx);
+            if (body === undefined) {
+                // A streaming handler that ended: close the held-open request with a
+                // StreamEnd terminal (the consumer's subscription resolves).
+                await this.sendOn(sock, generation, buildFrameWithVersion(ver, FrameType.StreamEnd, dataFlags, channel, corr, new Uint8Array(0)));
+            }
+            else if (body instanceof Uint8Array) {
+                await this.sendOn(sock, generation, buildFrameWithVersion(ver, FrameType.Response, dataFlags, channel, corr, body));
+            }
+            else {
+                throw new SubcProviderError("provider handler must return a Uint8Array or void", "invalid_handler_response");
+            }
+        }
+        catch (err) {
+            await this.sendError(frame, err instanceof SubcProviderError && err.code ? err.code : "handler_error", err instanceof Error ? err.message : String(err), dataFlags, sock, generation);
+        }
+        finally {
+            if (this.inflight.get(key) === controller)
+                this.inflight.delete(key);
+        }
+    }
+    async sendError(frame, code, message, flags, sock, generation) {
+        await this.sendOn(sock, generation, buildFrameWithVersion(frame.header.ver, FrameType.Error, flags, frame.header.channel, frame.header.corr, encodeJson({ code, message })));
+    }
+    async sendOn(sock, generation, frame) {
+        if (this.sock !== sock || this.generation !== generation || this.closeStarted || this.closedErr)
+            return;
+        await sendFrame(sock, frame);
+    }
+    handleUnexpectedDrop(sock, generation, cause) {
+        this.cancelRestoredDebounce();
+        this.abortGeneration(generation);
+        this.generation += 1;
+        sock.close();
+        this.enqueueConnectionState({ state: "down", cause });
+        this.scheduleReconnectAfterDrop(cause);
+    }
+    scheduleReconnectAfterDrop(trigger) {
+        if (this.closeStarted || this.reconnecting)
+            return;
+        const promise = this.reconnectWithRetry(trigger)
+            .catch((err) => {
+            if (!this.closeStarted)
+                this.failFatal(err instanceof Error ? err : new SubcProviderError(String(err)));
+        })
+            .finally(() => {
+            if (this.reconnecting === promise)
+                this.reconnecting = null;
+        });
+        this.reconnecting = promise;
+    }
+    async reconnectWithRetry(_trigger) {
+        let attempt = 0;
+        let delay = this.opts.reconnectBackoff.baseMs;
+        for (;;) {
+            if (this.closeStarted)
+                throw new SubcProviderError("provider closed");
+            attempt += 1;
+            this.enqueueConnectionState({ state: "reconnecting", attempt });
+            try {
+                const opened = await SubcProvider.openConnection(this.opts);
+                if (this.closeStarted) {
+                    opened.sock.close();
+                    throw new SubcProviderError("provider closed");
+                }
+                this.replaceConnection(opened);
+                return;
+            }
+            catch (err) {
+                if (this.closeStarted)
+                    throw err;
+                if (!isProviderReconnectTransient(err))
+                    throw err;
+                await this.opts.sleep(delay);
+                delay = Math.min(delay * 2, this.opts.reconnectBackoff.capMs);
+            }
+        }
+    }
+    replaceConnection(opened) {
+        this.sock.close();
+        this.sock = opened.sock;
+        this.currentConn = opened.conn;
+        this.storage = opened.ack.storage;
+        this.closedErr = null;
+        this.connectionEpoch += 1;
+        const generation = this.generation;
+        void this.readLoop(opened.sock, generation);
+        this.scheduleRestored(generation, this.connectionEpoch);
+    }
+    scheduleRestored(generation, epoch) {
+        if (!this.opts.onConnectionState)
+            return;
+        const token = ++this.restoredDebounceToken;
+        void this.opts
+            .sleep(this.opts.restoredDebounceMs)
+            .then(() => {
+            if (token === this.restoredDebounceToken &&
+                !this.closeStarted &&
+                this.sock &&
+                this.generation === generation &&
+                this.connectionEpoch === epoch) {
+                this.enqueueConnectionState({ state: "restored", epoch });
+            }
+        })
+            .catch((err) => {
+            if (token === this.restoredDebounceToken && !this.closeStarted) {
+                console.warn("SubcProvider restored debounce timer failed", err);
+            }
+        });
+    }
+    cancelRestoredDebounce() {
+        this.restoredDebounceToken += 1;
+    }
+    enqueueConnectionState(event) {
+        if (!this.opts.onConnectionState)
+            return;
+        this.stateQueue.push(event);
+        if (!this.drainingStateQueue)
+            void this.drainConnectionStateQueue();
+    }
+    async drainConnectionStateQueue() {
+        if (this.drainingStateQueue)
+            return;
+        this.drainingStateQueue = true;
+        try {
+            while (this.stateQueue.length > 0) {
+                const event = this.stateQueue[0];
+                try {
+                    await this.opts.onConnectionState?.(event);
+                    this.stateQueue.shift();
+                }
+                catch (err) {
+                    if (event.state === "restored") {
+                        console.warn("SubcProvider restored callback failed; retrying delivery", err);
+                        await pauseBeforeStateRetry();
+                        continue;
+                    }
+                    console.warn("SubcProvider connection-state callback failed", err);
+                    this.stateQueue.shift();
+                }
+            }
+        }
+        finally {
+            this.drainingStateQueue = false;
+            if (this.stateQueue.length > 0)
+                void this.drainConnectionStateQueue();
+        }
+    }
+    failFatal(err) {
+        if (!this.closedErr)
+            this.closedErr = err;
+        this.closeStarted = true;
+        this.cancelRestoredDebounce();
+        this.abortAllInflight();
+        this.sock.close();
+        this.finishClosed();
+    }
+    finishClosed() {
+        this.resolveClosed();
+    }
+}
+function routeKey(generation, channel, corr) {
+    return `${generation}:${channel}:${corr}`;
+}
+function launchNonce(opts) {
+    const nonce = opts.launchNonce ?? process.env[SUBC_LAUNCH_NONCE_ENV];
+    return nonce && nonce.length > 0 ? nonce : undefined;
+}
+const SUBC_LAUNCH_NONCE_ENV = "SUBC_LAUNCH_NONCE";
+function normalizeProviderConnectOptions(opts) {
+    return {
+        connectionFile: opts.connectionFile,
+        manifest: opts.manifest,
+        handler: opts.handler,
+        handshakeTimeoutMs: opts.handshakeTimeoutMs,
+        controlOps: opts.controlOps,
+        onBind: opts.onBind,
+        onRouteGone: opts.onRouteGone,
+        reconnectBackoff: opts.reconnectBackoff ?? DEFAULT_RECONNECT_BACKOFF,
+        sleep: opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms))),
+        restoredDebounceMs: opts.restoredDebounceMs ?? DEFAULT_RESTORED_DEBOUNCE_MS,
+        onConnectionState: opts.onConnectionState,
+        launchNonce: opts.launchNonce,
+    };
+}
+function buildHelloFrame(opts) {
+    const nonce = launchNonce(opts);
+    return buildFrame(FrameType.Hello, controlFlags(), 0, HELLO_CORR, encodeJson({
+        manifest: normalizeManifest(opts.manifest),
+        protocol_ver: PROTOCOL_VERSION,
+        control_ops: opts.controlOps === undefined ? null : opts.controlOps,
+        // Echo the one-time launch nonce subc injects for a reserved module
+        // (SUBC_LAUNCH_NONCE), so only the daemon-spawned process can register a
+        // reserved module_id. Omitted when unset (non-reserved / self-connecting).
+        ...(nonce ? { launch_nonce: nonce } : {}),
+    }));
+}
+function isProviderReconnectTransient(err) {
+    if (err instanceof SubcProviderError)
+        return err.code === "duplicate_module_id";
+    if (err instanceof SocketClosedError || err instanceof SocketTimeoutError)
+        return true;
+    if (err instanceof SocketWriteNotQueuedError || err instanceof SocketWriteQueuedError)
+        return true;
+    if (err instanceof ConnectionFileError || err instanceof AuthError)
+        return false;
+    const code = errorCode(err);
+    return code === "ECONNREFUSED" || code === "ECONNRESET" || code === "EPIPE" || code === "ETIMEDOUT" || code === "ENOENT";
+}
+function errorCode(err) {
+    if (typeof err === "object" && err !== null && "code" in err) {
+        const code = err.code;
+        if (typeof code === "string")
+            return code;
+    }
+    return undefined;
+}
+async function pauseBeforeStateRetry() {
+    await new Promise((resolve) => setTimeout(resolve, 0));
+}
+function controlFlags() {
+    return buildFlags(false, Priority.Passive, false);
+}
+async function sendFrame(sock, frame) {
+    await sock.write(encodeFrame(frame), Date.now() + WRITE_TIMEOUT_MS);
+}
+async function expectHelloAck(sock, deadline) {
+    const header = decodeHeader(await sock.readExact(HEADER_LEN, deadline));
+    const body = header.len === 0 ? new Uint8Array(0) : await sock.readExact(header.len, deadline);
+    const frame = { header, body };
+    switch (header.ty) {
+        case FrameType.HelloAck:
+            return parseJson(body);
+        case FrameType.Error: {
+            const error = parseJson(body);
+            throw new SubcProviderError(`subc rejected HELLO: ${error.code ?? "unknown"} — ${error.message ?? "subc error"}`, error.code);
+        }
+        default:
+            throw new SubcProviderError(`unexpected frame ${FrameType[frame.header.ty]} awaiting HELLO_ACK`);
+    }
+}
+function encodeJson(value) {
+    return new Uint8Array(Buffer.from(JSON.stringify(value), "utf8"));
+}
+function parseJson(bytes) {
+    return JSON.parse(Buffer.from(bytes).toString("utf8"));
+}
+function numberField(value, field) {
+    if (typeof value !== "number" || !Number.isInteger(value)) {
+        throw new SubcProviderError(`route.bind ${field} must be an integer`);
+    }
+    return value;
+}
+function bindRejection(decision) {
+    if (decision === undefined || decision === true)
+        return null;
+    if (decision === false) {
+        return { code: "route_rejected", message: "route.bind rejected by provider" };
+    }
+    if (decision.accept)
+        return null;
+    return {
+        code: decision.code ?? "route_rejected",
+        message: decision.message ?? "route.bind rejected by provider",
+    };
+}
+function normalizeManifest(manifest) {
+    return {
+        module_id: manifest.module_id,
+        module_version: manifest.module_version,
+        protocol_ver: manifest.protocol_ver,
+        trust_tier: manifest.trust_tier,
+        provides: manifest.provides.map(normalizeProviderRole),
+        consumes: manifest.consumes.map(normalizeConsumerRole),
+        scheduled_tasks: manifest.scheduled_tasks.map(normalizeScheduledTask),
+        bindings: {
+            storage: {
+                kind: manifest.bindings.storage.kind,
+                scope: manifest.bindings.storage.scope,
+                owns_schema: manifest.bindings.storage.owns_schema,
+            },
+            vault_grants: manifest.bindings.vault_grants.map((grant) => ({
+                secret: grant.secret,
+                reason: grant.reason,
+            })),
+            identity: {
+                requires: [...manifest.bindings.identity.requires],
+                optional: [...manifest.bindings.identity.optional],
+            },
+        },
+    };
+}
+function normalizeProviderRole(role) {
+    switch (role.role) {
+        case "tool_provider":
+            return {
+                role: "tool_provider",
+                tools: role.tools.map((tool) => ({
+                    name: tool.name,
+                    execution_mode: tool.execution_mode,
+                    schema: tool.schema,
+                })),
+                identity_scope: [...role.identity_scope],
+                concurrency: role.concurrency,
+                emits_push: role.emits_push,
+                sub_supervises: role.sub_supervises,
+            };
+        case "pipeline_stage":
+            return {
+                role: "pipeline_stage",
+                stage: role.stage,
+                applies_to: {
+                    provider: role.applies_to.provider,
+                    model: role.applies_to.model,
+                },
+                interface: role.interface,
+                declares_frozen_floor: role.declares_frozen_floor,
+                needs_signals: [...role.needs_signals],
+                conformance_class: role.conformance_class,
+            };
+        case "management_surface":
+            return {
+                role: "management_surface",
+                operations: role.operations.map((operation) => ({
+                    name: operation.name,
+                    kind: operation.kind,
+                })),
+                config_schema: role.config_schema,
+                observability: role.observability.map((surface) => ({
+                    name: surface.name,
+                    kind: surface.kind,
+                })),
+                identity_scope: [...role.identity_scope],
+            };
+        case "internal_service":
+            return {
+                role: "internal_service",
+                service_id: role.service_id,
+                transport: role.transport,
+                agent_facing: role.agent_facing,
+                operations: [...role.operations],
+            };
+    }
+}
+function normalizeConsumerRole(role) {
+    switch (role.role) {
+        case "tool_client":
+            return { role: "tool_client", of: [...role.of] };
+        case "llm_client":
+            return { role: "llm_client", via: role.via, auth: role.auth };
+        case "service_client":
+            return { role: "service_client", of: [...role.of] };
+    }
+}
+function normalizeScheduledTask(task) {
+    return {
+        task_id: task.task_id,
+        eligibility: {
+            cooldown: task.eligibility.cooldown,
+            window: task.eligibility.window,
+        },
+        lease_scope: task.lease_scope,
+        renews_during_calls: task.renews_during_calls,
+        toolset: [...task.toolset],
+        model_policy: {
+            tier: task.model_policy.tier,
+            fallback_chain: [...task.model_policy.fallback_chain],
+        },
+        step_cap: task.step_cap,
+        circuit_breaker: {
+            identical_failures: task.circuit_breaker.identical_failures,
+        },
+    };
+}
+//# sourceMappingURL=provider.js.map

dist/provider.js.map

+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAA8D,MAAM,aAAa,CAAC;AACpH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAuB,MAAM,sBAAsB,CAAC;AACpG,OAAO,EACL,UAAU,EACV,UAAU,EACV,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,UAAU,EACV,QAAQ,EACR,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAmQ7B,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAG/B;IAFX,YACE,OAAe,EACN,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,SAAI,GAAJ,IAAI,CAAS;IAGxB,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAsC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACnD,OAAO,SAAS,KAAK,QAAQ;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAgB,EAAE;QAC7C,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CACnD,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,OAAO;QAC7C,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,UAAU;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,aAAa,EAAE,EAAE;gBACjB,cAAc,EAAE,EAAE;aACnB;SACF;QACD,QAAQ,EAAE,EAAE;QACZ,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE;YACR,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,KAAK;aACnB;YACD,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,EAAE;aACb;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAiF;IAEjF,OAAO,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IAwBb;IACA;IACS;IAzBF,MAAM,CAAgB;IAC/B,aAAa,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5C,YAAY,GAAG,KAAK,CAAC;IACrB,SAAS,GAAiB,IAAI,CAAC;IACvC,gFAAgF;IAChF,iFAAiF;IACjF,0EAA0E;IACzD,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,YAAY,GAAyB,IAAI,CAAC;IAC1C,UAAU,GAAG,CAAC,CAAC;IACf,eAAe,GAAG,CAAC,CAAC;IACpB,UAAU,GAA8B,EAAE,CAAC;IAC3C,kBAAkB,GAAG,KAAK,CAAC;IAC3B,qBAAqB,GAAG,CAAC,CAAC;IAElC;;;;OAIG;IACH,OAAO,CAAU;IAEjB,YACU,IAAgB,EAChB,WAA2B,EAClB,IAA0C,EAC3D,OAAgB;QAHR,SAAI,GAAJ,IAAI,CAAY;QAChB,gBAAW,GAAX,WAAW,CAAgB;QAClB,SAAI,GAAJ,IAAI,CAAsC;QAG3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC1C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,8GAA8G;IAC9G,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAgC;QACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,gBAAgB,EAAE,CAAC;YACpD,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,IAAI,CAAC,QAAQ,CAAC,YAAY,mCAAmC,gBAAgB,EAAE,EACxG,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7D,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjG,CAAC;YAAC,MAAM,CAAC;gBACP,kFAAkF;YACpF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAA0C;QAC5E,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,4BAA4B,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAgB,EAAE,UAAkB;QACzD,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,uEAAuE;gBACvE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC/E,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;gBACzC,MAAM,IAAI,GACR,MAAM,CAAC,GAAG,KAAK,CAAC;oBACd,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;oBACnB,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC,CAAC;gBAC1E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;wBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;oBACnF,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/E,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC7G,OAAO;YACT,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACzD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,YAAY;oBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,IAAgB,EAAE,UAAkB;QACvE,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC,IAAI;gBACjB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,EACJ,UAAU,EACV,qBAAqB,CACnB,KAAK,CAAC,MAAM,CAAC,GAAG,EAChB,SAAS,CAAC,IAAI,EACd,KAAK,CAAC,MAAM,CAAC,KAAK,EAClB,CAAC,EACD,KAAK,CAAC,MAAM,CAAC,IAAI,EACjB,IAAI,UAAU,CAAC,CAAC,CAAC,CAClB,CACF,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,KAAK,SAAS,CAAC,OAAO;gBACpB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC7C,yEAAyE;gBACzE,mDAAmD;gBACnD,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,KAAK,SAAS,CAAC,MAAM;gBACnB,sEAAsE;gBACtE,4EAA4E;gBAC5E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC1F,OAAO,IAAI,CAAC;YACd,KAAK,SAAS,CAAC,OAAO;gBACpB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC3D,CAAC;qBAAM,CAAC;oBACN,KAAK,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACjE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;4BAC/E,OAAO,CAAC,IAAI,CAAC,8DAA8D,EAAE,GAAG,CAAC,CAAC;wBACpF,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAI,CAAC;YACd;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,0FAA0F;IAClF,YAAY,CAAC,UAAkB,EAAE,OAAe;QACtD,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,OAAO,GAAG,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,KAAY,EAAE,IAAgB,EAAE,UAAkB;QACnF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAgD,CAAC;QACrF,IAAI,OAAO,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,OAAO,CAAC,EAAE,IAAI,cAAc,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,WAAW,GAAqB;YACpC,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC;YAClE,MAAM,EAAE,OAAO,CAAC,MAAqB;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAwB;YAC1C,SAAS,EAAE,OAAO,CAAC,SAAkC;SACtD,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,EACJ,UAAU,EACV,qBAAqB,CACnB,KAAK,CAAC,MAAM,CAAC,GAAG,EAChB,SAAS,CAAC,QAAQ,EAClB,YAAY,EAAE,EACd,CAAC,EACD,KAAK,CAAC,MAAM,CAAC,IAAI,EACjB,UAAU,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CACjC,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAAY,EAAE,IAAgB,EAAE,UAAkB;QAChF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,GAAG,GAA2B;YAClC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe;YACxC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;gBACxB,kFAAkF;gBAClF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtC,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,EACJ,UAAU,EACV,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CACtF,CAAC;YACJ,CAAC;SACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,qEAAqE;gBACrE,6DAA6D;gBAC7D,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,EACJ,UAAU,EACV,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAC7F,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,EACJ,UAAU,EACV,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAC/E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,iBAAiB,CACzB,mDAAmD,EACnD,0BAA0B,CAC3B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,SAAS,CAClB,KAAK,EACL,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,EACzE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,SAAS,EACT,IAAI,EACJ,UAAU,CACX,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,UAAU;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,KAAY,EACZ,IAAY,EACZ,OAAe,EACf,KAAa,EACb,IAAgB,EAChB,UAAkB;QAElB,MAAM,IAAI,CAAC,MAAM,CACf,IAAI,EACJ,UAAU,EACV,qBAAqB,CACnB,KAAK,CAAC,MAAM,CAAC,GAAG,EAChB,SAAS,CAAC,KAAK,EACf,KAAK,EACL,KAAK,CAAC,MAAM,CAAC,OAAO,EACpB,KAAK,CAAC,MAAM,CAAC,IAAI,EACjB,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAC9B,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAgB,EAAE,UAAkB,EAAE,KAAY;QACrE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QACxG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAEO,oBAAoB,CAAC,IAAgB,EAAE,UAAkB,EAAE,KAAY;QAC7E,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEO,0BAA0B,CAAC,OAAgB;QACjD,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;aAC7C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1G,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC9D,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAiB;QAChD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAE9C,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACpB,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,YAAY;oBAAE,MAAM,GAAG,CAAC;gBACjC,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAClD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAgC;QACxD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC;IAEO,gBAAgB,CAAC,UAAkB,EAAE,KAAa;QACxD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO;QACzC,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,qBAAqB,CAAC;QAC3C,KAAK,IAAI,CAAC,IAAI;aACX,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;aACnC,IAAI,CAAC,GAAG,EAAE;YACT,IACE,KAAK,KAAK,IAAI,CAAC,qBAAqB;gBACpC,CAAC,IAAI,CAAC,YAAY;gBAClB,IAAI,CAAC,IAAI;gBACT,IAAI,CAAC,UAAU,KAAK,UAAU;gBAC9B,IAAI,CAAC,eAAe,KAAK,KAAK,EAC9B,CAAC;gBACD,IAAI,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,IAAI,KAAK,KAAK,IAAI,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,qBAAqB,IAAI,CAAC,CAAC;IAClC,CAAC;IAEO,sBAAsB,CAAC,KAA8B;QAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,KAAK,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,yBAAyB;QACrC,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO;QACpC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC,CAAC;oBAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC1B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;wBAC/B,OAAO,CAAC,IAAI,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;wBAC9E,MAAM,qBAAqB,EAAE,CAAC;wBAC9B,SAAS;oBACX,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;oBACnE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,GAAU;QAC1B,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,UAAkB,EAAE,OAAe,EAAE,IAAY;IACjE,OAAO,GAAG,UAAU,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,IAAgC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrE,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAElD,SAAS,+BAA+B,CAAC,IAAgC;IACvE,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,yBAAyB;QACpE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,4BAA4B;QAC3E,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAA0C;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,UAAU,CACf,SAAS,CAAC,KAAK,EACf,YAAY,EAAE,EACd,CAAC,EACD,UAAU,EACV,UAAU,CAAC;QACT,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;QACnE,oEAAoE;QACpE,yEAAyE;QACzE,2EAA2E;QAC3E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CACH,CAAC;AACJ,CAAC;AAGD,SAAS,4BAA4B,CAAC,GAAY;IAChD,IAAI,GAAG,YAAY,iBAAiB;QAAE,OAAO,GAAG,CAAC,IAAI,KAAK,qBAAqB,CAAC;IAChF,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,YAAY,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACvF,IAAI,GAAG,YAAY,yBAAyB,IAAI,GAAG,YAAY,sBAAsB;QAAE,OAAO,IAAI,CAAC;IACnG,IAAI,GAAG,YAAY,mBAAmB,IAAI,GAAG,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAEjF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,CAAC;AAC3H,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;QAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,KAAY;IACrD,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,QAAgB;IAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/B,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,SAAS,CAAC,QAAQ;YACrB,OAAO,SAAS,CAAC,IAAI,CAAuB,CAAC;QAC/C,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAwC,CAAC;YACrE,MAAM,IAAI,iBAAiB,CACzB,wBAAwB,KAAK,CAAC,IAAI,IAAI,SAAS,MAAM,KAAK,CAAC,OAAO,IAAI,YAAY,EAAE,EACpF,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;QACD;YACE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CAAC,cAAc,KAAK,qBAAqB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAAkC;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,gBAAgB;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iCAAiC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAuB;IAChD,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACtD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACtD,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACrE,QAAQ,EAAE;YACR,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI;gBACpC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK;gBACtC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW;aACnD;YACD,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC3D,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,QAAQ,EAAE;gBACR,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAClD,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,eAAe;YAClB,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;gBACxC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE;oBACV,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;oBAClC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;iBAC7B;gBACD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;gBACjD,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;gBACtC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC9C,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;iBACrB,CAAC,CAAC;gBACH,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAClD,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC,CAAC;gBACH,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;aACzC,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;aACjC,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACnD,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,KAAK,gBAAgB;YACnB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAwB;IACtD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;YACnC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;SAChC;QACD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,YAAY,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;SACtD;QACD,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE;YACf,kBAAkB,EAAE,IAAI,CAAC,eAAe,CAAC,kBAAkB;SAC5D;KACF,CAAC;AACJ,CAAC"}

dist/socket.d.ts

+export declare class SocketClosedError extends Error {
+}
+export declare class SocketTimeoutError extends Error {
+}
+export declare class SocketWriteNotQueuedError extends Error {
+    readonly cause?: Error | undefined;
+    constructor(message: string, cause?: Error | undefined);
+}
+export declare class SocketWriteQueuedError extends Error {
+    readonly cause?: Error | undefined;
+    constructor(message: string, cause?: Error | undefined);
+}
+export interface SocketWriteResult {
+    /** True once bytes were handed to Node's net.Socket.write. This is not a delivery guarantee. */
+    queued: boolean;
+    /** Resolves when Node reports the write complete; rejects with a classified write error. */
+    completed: Promise<void>;
+}
+export declare class SubcSocket {
+    private readonly sock;
+    private chunks;
+    private buffered;
+    private waiter;
+    private closedErr;
+    /** Bytes currently buffered but not yet consumed by a reader. A timeout
+     * arbitration uses this to tell "a reply already arrived, keep draining" from
+     * "nothing is here, settle the timeout". */
+    bufferedBytes(): number;
+    private constructor();
+    /**
+     * The OS-assigned local TCP port of this connection, or null if not yet
+     * connected/closed. Used to correlate a client-side timeout with a specific
+     * socket in a packet capture when diagnosing reply-delivery issues.
+     */
+    localPort(): number | null;
+    static connect(host: string, port: number, deadlineMs: number): Promise<SubcSocket>;
+    /** Read exactly `n` bytes, rejecting if `deadlineMs` (epoch ms) passes first. */
+    readExact(n: number, deadlineMs: number): Promise<Uint8Array>;
+    write(bytes: Uint8Array, deadlineMs: number): Promise<void>;
+    writeTracked(bytes: Uint8Array, deadlineMs: number): SocketWriteResult;
+    close(): void;
+    private tryServe;
+    private take;
+}
+//# sourceMappingURL=socket.d.ts.map

dist/socket.d.ts.map

+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../src/socket.ts"],"names":[],"mappings":"AAQA,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAC/C,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,qBAAa,yBAA0B,SAAQ,KAAK;IAGhD,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK;gBADtB,OAAO,EAAE,MAAM,EACN,KAAK,CAAC,EAAE,KAAK,YAAA;CAIzB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAG7C,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK;gBADtB,OAAO,EAAE,MAAM,EACN,KAAK,CAAC,EAAE,KAAK,YAAA;CAIzB;AAED,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,MAAM,EAAE,OAAO,CAAC;IAChB,4FAA4F;IAC5F,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AASD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,SAAS,CAAsB;IAEvC;;gDAE4C;IAC5C,aAAa,IAAI,MAAM;IAIvB,OAAO;IAgBP;;;;OAIG;IACH,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmBnF,iFAAiF;IACjF,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBvD,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjE,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB;IA4EtE,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,QAAQ;IAiBhB,OAAO,CAAC,IAAI;CAmBb"}

dist/socket.js

+// A pull-based buffered wrapper over a node TCP socket. Node sockets are
+// event-driven; the handshake and frame loop want "give me exactly N bytes, but
+// don't exceed this absolute deadline". readExact provides that, draining an
+// internal buffer and parking a single waiter until enough bytes arrive, the
+// deadline passes, or the socket ends.
+import net from "node:net";
+export class SocketClosedError extends Error {
+}
+export class SocketTimeoutError extends Error {
+}
+export class SocketWriteNotQueuedError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+    }
+}
+export class SocketWriteQueuedError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+    }
+}
+export class SubcSocket {
+    sock;
+    chunks = [];
+    buffered = 0;
+    waiter = null;
+    closedErr = null;
+    /** Bytes currently buffered but not yet consumed by a reader. A timeout
+     * arbitration uses this to tell "a reply already arrived, keep draining" from
+     * "nothing is here, settle the timeout". */
+    bufferedBytes() {
+        return this.buffered;
+    }
+    constructor(sock) {
+        this.sock = sock;
+        sock.on("data", (chunk) => {
+            this.chunks.push(chunk);
+            this.buffered += chunk.length;
+            this.tryServe();
+        });
+        const fail = (err) => {
+            if (!this.closedErr)
+                this.closedErr = err;
+            this.tryServe();
+        };
+        sock.on("error", (err) => fail(err instanceof Error ? err : new Error(String(err))));
+        sock.on("end", () => fail(new SocketClosedError("subc closed the connection")));
+        sock.on("close", () => fail(new SocketClosedError("subc connection closed")));
+    }
+    /**
+     * The OS-assigned local TCP port of this connection, or null if not yet
+     * connected/closed. Used to correlate a client-side timeout with a specific
+     * socket in a packet capture when diagnosing reply-delivery issues.
+     */
+    localPort() {
+        return this.sock.localPort ?? null;
+    }
+    static connect(host, port, deadlineMs) {
+        return new Promise((resolve, reject) => {
+            const sock = net.connect({ host, port });
+            sock.setNoDelay(true);
+            const timer = setTimeout(() => {
+                sock.destroy();
+                reject(new SocketTimeoutError(`timed out connecting to ${host}:${port}`));
+            }, Math.max(0, deadlineMs - Date.now()));
+            sock.once("connect", () => {
+                clearTimeout(timer);
+                resolve(new SubcSocket(sock));
+            });
+            sock.once("error", (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+    /** Read exactly `n` bytes, rejecting if `deadlineMs` (epoch ms) passes first. */
+    readExact(n, deadlineMs) {
+        if (this.waiter) {
+            return Promise.reject(new Error("concurrent readExact is not supported"));
+        }
+        if (n === 0)
+            return Promise.resolve(new Uint8Array(0));
+        return new Promise((resolve, reject) => {
+            // A non-finite deadline means "wait indefinitely" (the background frame
+            // loop relies on this; per-request timeouts live on the request waiters).
+            let timer = null;
+            if (Number.isFinite(deadlineMs)) {
+                const remaining = deadlineMs - Date.now();
+                if (remaining <= 0) {
+                    reject(new SocketTimeoutError(`timed out waiting for ${n} bytes`));
+                    return;
+                }
+                timer = setTimeout(() => {
+                    this.waiter = null;
+                    reject(new SocketTimeoutError(`timed out waiting for ${n} bytes`));
+                }, remaining);
+            }
+            this.waiter = { need: n, resolve, reject, timer };
+            this.tryServe();
+        });
+    }
+    async write(bytes, deadlineMs) {
+        try {
+            await this.writeTracked(bytes, deadlineMs).completed;
+        }
+        catch (err) {
+            if (err instanceof SocketWriteNotQueuedError || err instanceof SocketWriteQueuedError) {
+                throw err.cause ?? err;
+            }
+            throw err;
+        }
+    }
+    writeTracked(bytes, deadlineMs) {
+        if (this.closedErr) {
+            return {
+                queued: false,
+                completed: Promise.reject(new SocketWriteNotQueuedError("subc socket was closed before bytes could be queued", this.closedErr)),
+            };
+        }
+        let queued = false;
+        let settled = false;
+        let timer = null;
+        const completed = new Promise((resolve, reject) => {
+            const settle = (run) => {
+                if (settled)
+                    return;
+                settled = true;
+                if (timer)
+                    clearTimeout(timer);
+                run();
+            };
+            const remaining = deadlineMs - Date.now();
+            if (remaining <= 0) {
+                settle(() => reject(new SocketWriteNotQueuedError("timed out before bytes could be queued to subc", new SocketTimeoutError("timed out writing to subc"))));
+                return;
+            }
+            timer = setTimeout(() => {
+                const timeout = new SocketTimeoutError("timed out writing to subc");
+                settle(() => reject(queued
+                    ? new SocketWriteQueuedError("timed out after bytes were handed to the subc socket", timeout)
+                    : new SocketWriteNotQueuedError("timed out before bytes could be queued to subc", timeout)));
+            }, remaining);
+            try {
+                this.sock.write(Buffer.from(bytes), (err) => {
+                    settle(() => {
+                        if (err) {
+                            reject(new SocketWriteQueuedError("subc socket reported a write error after bytes were handed to the socket", err instanceof Error ? err : new Error(String(err))));
+                        }
+                        else {
+                            resolve();
+                        }
+                    });
+                });
+                queued = true;
+            }
+            catch (err) {
+                settle(() => reject(new SocketWriteNotQueuedError("subc socket write threw before bytes could be queued", err instanceof Error ? err : new Error(String(err)))));
+            }
+        });
+        return { queued, completed };
+    }
+    close() {
+        this.sock.destroy();
+    }
+    tryServe() {
+        const w = this.waiter;
+        if (!w)
+            return;
+        if (this.buffered >= w.need) {
+            const out = this.take(w.need);
+            this.waiter = null;
+            if (w.timer)
+                clearTimeout(w.timer);
+            w.resolve(out);
+            return;
+        }
+        if (this.closedErr) {
+            this.waiter = null;
+            if (w.timer)
+                clearTimeout(w.timer);
+            w.reject(this.closedErr);
+        }
+    }
+    take(n) {
+        const out = Buffer.allocUnsafe(n);
+        let off = 0;
+        while (off < n) {
+            const head = this.chunks[0];
+            const want = n - off;
+            if (head.length <= want) {
+                head.copy(out, off);
+                off += head.length;
+                this.chunks.shift();
+            }
+            else {
+                head.copy(out, off, 0, want);
+                this.chunks[0] = head.subarray(want);
+                off += want;
+            }
+        }
+        this.buffered -= n;
+        return out;
+    }
+}
+//# sourceMappingURL=socket.js.map

dist/socket.js.map

+{"version":3,"file":"socket.js","sourceRoot":"","sources":["../src/socket.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,uCAAuC;AAEvC,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAC/C,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGvC;IAFX,YACE,OAAe,EACN,KAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,UAAK,GAAL,KAAK,CAAQ;IAGxB,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAGpC;IAFX,YACE,OAAe,EACN,KAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,UAAK,GAAL,KAAK,CAAQ;IAGxB,CAAC;CACF;AAgBD,MAAM,OAAO,UAAU;IACJ,IAAI,CAAa;IAC1B,MAAM,GAAa,EAAE,CAAC;IACtB,QAAQ,GAAG,CAAC,CAAC;IACb,MAAM,GAAkB,IAAI,CAAC;IAC7B,SAAS,GAAiB,IAAI,CAAC;IAEvC;;gDAE4C;IAC5C,aAAa;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,YAAoB,IAAgB;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAU,EAAE,EAAE;YAC1B,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,UAAkB;QAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,kBAAkB,CAAC,2BAA2B,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5E,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACjF,SAAS,CAAC,CAAS,EAAE,UAAkB;QACrC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,KAAK,GAAyC,IAAI,CAAC;YACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBACD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,MAAM,CAAC,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACrE,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB,EAAE,UAAkB;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;gBACtF,MAAM,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC;YACzB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,YAAY,CAAC,KAAiB,EAAE,UAAkB;QAChD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,OAAO,CAAC,MAAM,CACvB,IAAI,yBAAyB,CAAC,qDAAqD,EAAE,IAAI,CAAC,SAAS,CAAC,CACrG;aACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,GAAyC,IAAI,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,CAAC,GAAe,EAAQ,EAAE;gBACvC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,GAAG,EAAE,CAAC;YACR,CAAC,CAAC;YAEF,MAAM,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,yBAAyB,CAC3B,gDAAgD,EAChD,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CACpD,CACF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;gBACpE,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,MAAM;oBACJ,CAAC,CAAC,IAAI,sBAAsB,CAAC,sDAAsD,EAAE,OAAO,CAAC;oBAC7F,CAAC,CAAC,IAAI,yBAAyB,CAAC,gDAAgD,EAAE,OAAO,CAAC,CAC7F,CACF,CAAC;YACJ,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC1C,MAAM,CAAC,GAAG,EAAE;wBACV,IAAI,GAAG,EAAE,CAAC;4BACR,MAAM,CACJ,IAAI,sBAAsB,CACxB,0EAA0E,EAC1E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpD,CACF,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,OAAO,EAAE,CAAC;wBACZ,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,yBAAyB,CAC3B,sDAAsD,EACtD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpD,CACF,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IAEO,QAAQ;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,CAAC,KAAK;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,CAAC,KAAK;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,CAAS;QACpB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC;YACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpB,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACrC,GAAG,IAAI,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package.json

 {
   "name": "@cortexkit/subc-client",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "TypeScript client for the subc daemon. Wire-compatible (byte-for-byte) with the Rust subc-transport handshake and subc-protocol envelope.",
@@ -8,7 +8,8 @@ "type": "module",
     ".": {
-      "types": "./src/index.ts",
-      "import": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     }
   },
   "files": [
+    "dist",
     "src",
@@ -18,2 +19,4 @@ "README.md"
   "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run build",
     "test": "bun test",
@@ -20,0 +23,0 @@ "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json --noEmit"

No alert changes

Improved metrics

Total package byte prevSize

317848

190.02%

Number of package files

37

311.11%

Lines of code

5397

101.91%

Worsened metrics

Number of low supply chain risk alerts

12

71.43%

Number of medium supply chain risk alerts

2

100%

No dependency changes