getThe connection engine behind the folded surface — the agent’s single protocol server: one authorization policy, one watcher set, one broadcast path. The defaultprotectedconnectionEngine():AgentSocketServer<State>
webSocket runs every socket
through this engine, and implicit publication (setState, this.messages appends, this.events emits) fans out from
it. Reading it here hands the SAME instance to another front door, so an
agent can serve more transports without a second server, a second policy,
or a second set of watchers to keep in sync. The canonical use is the
HTTP front door — Server-Sent Events over GET and RPC over POST:
webSocket() stays
gated on its own seams (authorize /
onAttach / a webSocket override), because the
runtime hands an agent sockets unbidden — whereas a front door built over
this engine only ever receives what the subclass routes into it. An agent
that wires HTTP and overrides no seam therefore serves HTTP and still
refuses sockets with AgentSocketsNotEnabledError.
Whatever policy the seams express applies identically on every front door
built over the engine: an unoverridden authorize
admits HTTP callers as read-only watchers too, and never grants "rpc".
Added with SDK 0.12 — a new inherited member, so a subclass that already
declares connectionEngine must rename it (or align it to override this
accessor).
Returns
AgentSocketServer<State>
The agent’s connection engine — the same instance on every read.