@abloatai/transaction 0.59.2 → 0.60.0

package/dist/wire/inboundFrames.d.ts

@@ -59,27 +59,27 @@ export type InboundFrameContract =
  */
 export declare const WS_INBOUND_FRAMES: {
     readonly ping: {
-        readonly validation: 'handler';
-        readonly where: 'dispatchWsFrame — ignored, no payload';
+        readonly validation: "handler";
+        readonly where: "dispatchWsFrame — ignored, no payload";
     };
     readonly pong: {
-        readonly validation: 'handler';
-        readonly where: 'dispatchWsFrame — ignored, no payload';
+        readonly validation: "handler";
+        readonly where: "dispatchWsFrame — ignored, no payload";
     };
     readonly delta: {
-        readonly validation: 'handler';
-        readonly where: 'the materialiser parses each delta as it applies it';
+        readonly validation: "handler";
+        readonly where: "the materialiser parses each delta as it applies it";
         readonly checkedBy: z.ZodObject<{
             id: z.ZodNumber;
             actionType: z.ZodEnum<{
                 A: "A";
-                C: "C";
-                D: "D";
-                G: "G";
                 I: "I";
-                S: "S";
                 U: "U";
+                D: "D";
                 V: "V";
+                C: "C";
+                G: "G";
+                S: "S";
             }>;
             modelName: z.ZodString;
             modelId: z.ZodString;
@@ -95,16 +95,16 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly sync_response: {
-        readonly validation: 'handler';
-        readonly where: 'the reactive engine validates it while advancing its resume cursor';
+        readonly validation: "handler";
+        readonly where: "the reactive engine validates it while advancing its resume cursor";
     };
     readonly bootstrap_response: {
-        readonly validation: 'handler';
-        readonly where: 'the reactive engine validates the bootstrap payload as it applies it';
+        readonly validation: "handler";
+        readonly where: "the reactive engine validates the bootstrap payload as it applies it";
     };
     readonly mutation_result: {
-        readonly validation: 'handler';
-        readonly where: 'handleMutationResult — it validates missingIds alongside the payload before this can parse';
+        readonly validation: "handler";
+        readonly where: "handleMutationResult — it validates missingIds alongside the payload before this can parse";
         readonly checkedBy: z.ZodDiscriminatedUnion<[z.ZodObject<{
             status: z.ZodLiteral<"queued">;
             statusAt: z.ZodISODateTime;
@@ -122,11 +122,11 @@ export declare const WS_INBOUND_FRAMES: {
                 projectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 branchId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 syncGroups: z.ZodArray<z.ZodString>;
-                operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.create` | `${string}.delete` | `${string}.read` | `${string}.update`>>;
+                operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.update` | `${string}.read` | `${string}.create` | `${string}.delete`>>;
                 participantKind: z.ZodEnum<{
+                    user: "user";
                     agent: "agent";
                     system: "system";
-                    user: "user";
                 }>;
                 participantId: z.ZodString;
                 deliveryPartition: z.ZodDefault<z.ZodNullable<z.ZodObject<{
@@ -138,11 +138,11 @@ export declare const WS_INBOUND_FRAMES: {
             operationResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 transactionId: z.ZodString;
                 outcome: z.ZodEnum<{
-                    archived: "archived";
-                    created: "created";
                     deleted: "deleted";
-                    unarchived: "unarchived";
+                    created: "created";
                     updated: "updated";
+                    archived: "archived";
+                    unarchived: "unarchived";
                 }>;
                 row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
             }, z.core.$strict>>>;
@@ -163,11 +163,11 @@ export declare const WS_INBOUND_FRAMES: {
                 projectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 branchId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 syncGroups: z.ZodArray<z.ZodString>;
-                operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.create` | `${string}.delete` | `${string}.read` | `${string}.update`>>;
+                operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.update` | `${string}.read` | `${string}.create` | `${string}.delete`>>;
                 participantKind: z.ZodEnum<{
+                    user: "user";
                     agent: "agent";
                     system: "system";
-                    user: "user";
                 }>;
                 participantId: z.ZodString;
                 deliveryPartition: z.ZodDefault<z.ZodNullable<z.ZodObject<{
@@ -179,23 +179,19 @@ export declare const WS_INBOUND_FRAMES: {
             operationResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 transactionId: z.ZodString;
                 outcome: z.ZodEnum<{
-                    archived: "archived";
-                    created: "created";
                     deleted: "deleted";
-                    unarchived: "unarchived";
+                    created: "created";
                     updated: "updated";
+                    archived: "archived";
+                    unarchived: "unarchived";
                 }>;
                 row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
             }, z.core.$strict>>>;
         }, z.core.$strict>], "status">;
     };
-    readonly claim_ack: {
-        readonly validation: 'handler';
-        readonly where: 'handleClaimAck narrows field by field, because a rejection carries a typed capability error it has to re-raise as CapabilityError';
-    };
     readonly subscription_ack: {
-        readonly validation: 'handler';
-        readonly where: 'handleSubscriptionAck';
+        readonly validation: "handler";
+        readonly where: "handleSubscriptionAck";
         readonly checkedBy: z.ZodObject<{
             success: z.ZodBoolean;
             syncGroups: z.ZodArray<z.ZodString>;
@@ -208,12 +204,12 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly presence_update: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             kind: z.ZodEnum<{
                 enter: "enter";
-                leave: "leave";
                 update: "update";
+                leave: "leave";
             }>;
             userId: z.ZodString;
             syncGroups: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -234,9 +230,9 @@ export declare const WS_INBOUND_FRAMES: {
             }, z.core.$strip>>;
             isAgent: z.ZodOptional<z.ZodBoolean>;
             participantKind: z.ZodOptional<z.ZodPreprocess<z.ZodEnum<{
+                user: "user";
                 agent: "agent";
                 system: "system";
-                user: "user";
             }>>>;
             activeClaims: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 entityType: z.ZodString;
@@ -244,24 +240,24 @@ export declare const WS_INBOUND_FRAMES: {
                 field: z.ZodOptional<z.ZodString>;
                 fields: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
                 meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-                fenceToken: z.ZodOptional<z.ZodNumber>;
-                acquiredAt: z.ZodOptional<z.ZodNumber>;
                 claimId: z.ZodString;
                 description: z.ZodOptional<z.ZodString>;
                 declaredAt: z.ZodNumber;
                 expiresAt: z.ZodNumber;
                 onBehalfOfId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 onBehalfOfKind: z.ZodOptional<z.ZodNullable<z.ZodPreprocess<z.ZodEnum<{
+                    user: "user";
                     agent: "agent";
                     system: "system";
-                    user: "user";
                 }>>>>;
                 capabilityId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                fenceToken: z.ZodOptional<z.ZodNumber>;
+                acquiredAt: z.ZodOptional<z.ZodNumber>;
                 status: z.ZodOptional<z.ZodEnum<{
                     active: "active";
-                    canceled: "canceled";
                     committed: "committed";
                     expired: "expired";
+                    canceled: "canceled";
                 }>>;
                 error: z.ZodOptional<z.ZodObject<{
                     code: z.ZodString;
@@ -281,9 +277,9 @@ export declare const WS_INBOUND_FRAMES: {
                         expiresAt: z.ZodNumber;
                         onBehalfOfId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                         onBehalfOfKind: z.ZodOptional<z.ZodNullable<z.ZodPreprocess<z.ZodEnum<{
+                            user: "user";
                             agent: "agent";
                             system: "system";
-                            user: "user";
                         }>>>>;
                         capabilityId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                     }, z.core.$strip>>;
@@ -292,21 +288,15 @@ export declare const WS_INBOUND_FRAMES: {
             delegatedFrom: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$catchall<z.ZodUnknown>>;
     };
-    readonly claim_expired: {
-        readonly validation: 'schema';
-        readonly payload: z.ZodObject<{
-            claimId: z.ZodString;
-        }, z.core.$strip>;
-    };
     readonly claim_rejected: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             claimId: z.ZodString;
             reason: z.ZodPreprocess<z.ZodOptional<z.ZodEnum<{
-                capability_denied: "capability_denied";
                 conflict: "conflict";
-                coordination_unavailable: "coordination_unavailable";
                 expired: "expired";
+                coordination_unavailable: "coordination_unavailable";
+                capability_denied: "capability_denied";
                 invalid_target: "invalid_target";
                 preempted: "preempted";
             }>>>;
@@ -319,9 +309,9 @@ export declare const WS_INBOUND_FRAMES: {
             }, z.core.$strip>>;
             heldBy: z.ZodOptional<z.ZodString>;
             heldByKind: z.ZodOptional<z.ZodPreprocess<z.ZodEnum<{
+                user: "user";
                 agent: "agent";
                 system: "system";
-                user: "user";
             }>>>;
             heldByClaimId: z.ZodOptional<z.ZodString>;
             heldByExpiresAt: z.ZodOptional<z.ZodNumber>;
@@ -337,9 +327,9 @@ export declare const WS_INBOUND_FRAMES: {
                 expiresAt: z.ZodNumber;
                 onBehalfOfId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 onBehalfOfKind: z.ZodOptional<z.ZodNullable<z.ZodPreprocess<z.ZodEnum<{
+                    user: "user";
                     agent: "agent";
                     system: "system";
-                    user: "user";
                 }>>>>;
                 capabilityId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             }, z.core.$strip>>;
@@ -347,7 +337,7 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly claim_acquired: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             claimId: z.ZodString;
             fenceToken: z.ZodOptional<z.ZodNumber>;
@@ -362,7 +352,7 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly claim_queued: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             claimId: z.ZodString;
             target: z.ZodOptional<z.ZodObject<{
@@ -374,9 +364,9 @@ export declare const WS_INBOUND_FRAMES: {
             }, z.core.$strip>>;
             heldBy: z.ZodOptional<z.ZodString>;
             heldByKind: z.ZodOptional<z.ZodPreprocess<z.ZodEnum<{
+                user: "user";
                 agent: "agent";
                 system: "system";
-                user: "user";
             }>>>;
             heldByClaimId: z.ZodOptional<z.ZodString>;
             heldByExpiresAt: z.ZodOptional<z.ZodNumber>;
@@ -392,26 +382,26 @@ export declare const WS_INBOUND_FRAMES: {
                 expiresAt: z.ZodNumber;
                 onBehalfOfId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 onBehalfOfKind: z.ZodOptional<z.ZodNullable<z.ZodPreprocess<z.ZodEnum<{
+                    user: "user";
                     agent: "agent";
                     system: "system";
-                    user: "user";
                 }>>>>;
                 capabilityId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             }, z.core.$strip>>;
             message: z.ZodOptional<z.ZodString>;
             position: z.ZodNumber;
             reason: z.ZodOptional<z.ZodPreprocess<z.ZodOptional<z.ZodEnum<{
-                capability_denied: "capability_denied";
                 conflict: "conflict";
-                coordination_unavailable: "coordination_unavailable";
                 expired: "expired";
+                coordination_unavailable: "coordination_unavailable";
+                capability_denied: "capability_denied";
                 invalid_target: "invalid_target";
                 preempted: "preempted";
             }>>>>;
         }, z.core.$strip>;
     };
     readonly claim_granted: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             claimId: z.ZodString;
             fenceToken: z.ZodOptional<z.ZodNumber>;
@@ -426,7 +416,7 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly claim_lost: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             claimId: z.ZodString;
             reason: z.ZodEnum<{
@@ -443,7 +433,7 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly claim_queue: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             target: z.ZodObject<{
                 type: z.ZodString;
@@ -463,9 +453,9 @@ export declare const WS_INBOUND_FRAMES: {
                 description: z.ZodDefault<z.ZodString>;
                 heldBy: z.ZodOptional<z.ZodString>;
                 participantKind: z.ZodOptional<z.ZodPreprocess<z.ZodEnum<{
+                    user: "user";
                     agent: "agent";
                     system: "system";
-                    user: "user";
                 }>>>;
                 position: z.ZodNumber;
                 expiresAt: z.ZodNumber;
@@ -473,13 +463,13 @@ export declare const WS_INBOUND_FRAMES: {
         }, z.core.$strip>;
     };
     readonly claim_heartbeat_ack: {
-        readonly validation: 'schema';
+        readonly validation: "schema";
         readonly payload: z.ZodObject<{
             claimId: z.ZodString;
             status: z.ZodEnum<{
+                queued: "queued";
                 held: "held";
                 lost: "lost";
-                queued: "queued";
             }>;
             expiresAt: z.ZodOptional<z.ZodNumber>;
             position: z.ZodOptional<z.ZodNumber>;

package/dist/wire/inboundFrames.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inboundFrames.d.ts","sourceRoot":"","sources":["../../src/wire/inboundFrames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;kCAKZ,CAAC;AACzB,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB;AAC9B,wDAAwD;AACtD;IAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAA;CAAE;AAChE;;;;;;GAMG;GACD;IACE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;CAChC,CAAC;AAEN;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;iBAEpB,UAAU,EAAE,SAAS;iBAAE,KAAK,EAAE,uCAAuC;;;iBACrE,UAAU,EAAE,SAAS;iBAAE,KAAK,EAAE,uCAAuC;;;iBAI3E,UAAU,EAAE,SAAS;iBAIrB,KAAK,EAAE,qDAAqD;iBAC5D,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGT,UAAU,EAAE,SAAS;iBAMrB,KAAK,EAAE,oEAAoE;;;iBAG3E,UAAU,EAAE,SAAS;iBAErB,KAAK,EAAE,sEAAsE;;;iBAK7E,UAAU,EAAE,SAAS;iBACrB,KAAK,EAAE,4FAA4F;iBACnG,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKT,UAAU,EAAE,SAAS;iBACrB,KAAK,EAAE,mIAAmI;;;iBAG1I,UAAU,EAAE,SAAS;iBAIrB,KAAK,EAAE,uBAAuB;iBAC9B,SAAS;;;;;;;;;;;;iBAIQ,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAC/B,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;iBAC5B,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAC7B,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;iBAC/B,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAC5B,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;iBAChC,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;;;iBAC5B,UAAU,EAAE,QAAQ;iBAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE1C,UAAU,EAAE,QAAQ;iBACpB,OAAO;;;;;;;;;;;;CAE8C,CAAC;AAE1D,8CAA8C;AAC9C,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;KAC/B,CAAC,IAAI,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;KAC7C,GACG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GACV,KAAK;CACV,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,wBAAwB,GAAG;KACpC,CAAC,IAAI,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;KAC/B,GACG,CAAC,GACD,KAAK;CACV,CAAC,gBAAgB,CAAC,CAAC;AAEpB,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAE1E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,gBAAgB,GACrB,IAAI,IAAI,wBAAwB,CAElC"}
+{"version":3,"file":"inboundFrames.d.ts","sourceRoot":"","sources":["../../src/wire/inboundFrames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;kCAKZ,CAAC;AACzB,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB;AAC9B,wDAAwD;AACtD;IAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAA;CAAE;AAChE;;;;;;GAMG;GACD;IACE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;CAChC,CAAC;AAEN;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0D2B,CAAC;AAE1D,8CAA8C;AAC9C,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;KAC/B,CAAC,IAAI,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;KAC7C,GACG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GACV,KAAK;CACV,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,wBAAwB,GAAG;KACpC,CAAC,IAAI,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;KAC/B,GACG,CAAC,GACD,KAAK;CACV,CAAC,gBAAgB,CAAC,CAAC;AAEpB,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAE1E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,gBAAgB,GACrB,IAAI,IAAI,wBAAwB,CAElC"}

package/dist/wire/inboundFrames.js

@@ -25,7 +25,7 @@
 import { z } from 'zod';
 import { commitReceiptSchema } from '../commit/contract.js';
 import { clientSyncDeltaSchema } from '../observation/contract.js';
-import { claimAcquiredSchema, claimExpiredSchema, claimGrantedSchema, claimHeartbeatAckPayloadSchema, claimLostSchema, claimQueuedSchema, claimQueueSchema, claimRejectionSchema, presenceUpdateSchema, subscriptionAckPayloadSchema, } from '../coordination/schema.js';
+import { claimAcquiredSchema, claimGrantedSchema, claimHeartbeatAckPayloadSchema, claimLostSchema, claimQueuedSchema, claimQueueSchema, claimRejectionSchema, presenceUpdateSchema, subscriptionAckPayloadSchema, } from '../coordination/schema.js';
 /**
  * The envelope itself: a type and a payload. `catchall` keeps the extra keys,
  * because the oldest delta form puts a delta's own fields at the top level
@@ -76,10 +76,6 @@ export const WS_INBOUND_FRAMES = {
         checkedBy: commitReceiptSchema,
     },
     // ── Requests we made ───────────────────────────────────────────────────
-    claim_ack: {
-        validation: 'handler',
-        where: 'handleClaimAck narrows field by field, because a rejection carries a typed capability error it has to re-raise as CapabilityError',
-    },
     subscription_ack: {
         validation: 'handler',
         // Not parsed at dispatch because the handler must first claim the oldest
@@ -90,7 +86,6 @@ export const WS_INBOUND_FRAMES = {
     },
     // ── Coordination ───────────────────────────────────────────────────────
     presence_update: { validation: 'schema', payload: presenceUpdateSchema },
-    claim_expired: { validation: 'schema', payload: claimExpiredSchema },
     claim_rejected: { validation: 'schema', payload: claimRejectionSchema },
     claim_acquired: { validation: 'schema', payload: claimAcquiredSchema },
     claim_queued: { validation: 'schema', payload: claimQueuedSchema },

package/dist/wire/inboundFrames.js.map

@@ -1 +1 @@
-{"version":3,"file":"inboundFrames.js","sourceRoot":"","sources":["../../src/wire/inboundFrames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,8BAA8B,EAC9B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAoBzB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,0EAA0E;IAC1E,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,uCAAuC,EAAE;IAC/E,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,uCAAuC,EAAE;IAE/E,0EAA0E;IAC1E,KAAK,EAAE;QACL,UAAU,EAAE,SAAS;QACrB,2EAA2E;QAC3E,wEAAwE;QACxE,+BAA+B;QAC/B,KAAK,EAAE,qDAAqD;QAC5D,SAAS,EAAE,qBAAqB;KACjC;IACD,aAAa,EAAE;QACb,UAAU,EAAE,SAAS;QACrB,0DAA0D;QAC1D,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,+CAA+C;QAC/C,KAAK,EAAE,oEAAoE;KAC5E;IACD,kBAAkB,EAAE;QAClB,UAAU,EAAE,SAAS;QACrB,gEAAgE;QAChE,KAAK,EAAE,sEAAsE;KAC9E;IAED,0EAA0E;IAC1E,eAAe,EAAE;QACf,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,4FAA4F;QACnG,SAAS,EAAE,mBAAmB;KAC/B;IAED,0EAA0E;IAC1E,SAAS,EAAE;QACT,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,mIAAmI;KAC3I;IACD,gBAAgB,EAAE;QAChB,UAAU,EAAE,SAAS;QACrB,yEAAyE;QACzE,yEAAyE;QACzE,4EAA4E;QAC5E,KAAK,EAAE,uBAAuB;QAC9B,SAAS,EAAE,4BAA4B;KACxC;IAED,0EAA0E;IAC1E,eAAe,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACxE,aAAa,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACpE,cAAc,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACvE,cAAc,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACtE,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAClE,aAAa,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACpE,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;IAC9D,WAAW,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;IAChE,mBAAmB,EAAE;QACnB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,8BAA8B;KACxC;CACsD,CAAC;AA4B1D,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAsB;IAEtB,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;AACzD,CAAC"}
+{"version":3,"file":"inboundFrames.js","sourceRoot":"","sources":["../../src/wire/inboundFrames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,8BAA8B,EAC9B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAoBzB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,0EAA0E;IAC1E,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,uCAAuC,EAAE;IAC/E,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,uCAAuC,EAAE;IAE/E,0EAA0E;IAC1E,KAAK,EAAE;QACL,UAAU,EAAE,SAAS;QACrB,2EAA2E;QAC3E,wEAAwE;QACxE,+BAA+B;QAC/B,KAAK,EAAE,qDAAqD;QAC5D,SAAS,EAAE,qBAAqB;KACjC;IACD,aAAa,EAAE;QACb,UAAU,EAAE,SAAS;QACrB,0DAA0D;QAC1D,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,+CAA+C;QAC/C,KAAK,EAAE,oEAAoE;KAC5E;IACD,kBAAkB,EAAE;QAClB,UAAU,EAAE,SAAS;QACrB,gEAAgE;QAChE,KAAK,EAAE,sEAAsE;KAC9E;IAED,0EAA0E;IAC1E,eAAe,EAAE;QACf,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,4FAA4F;QACnG,SAAS,EAAE,mBAAmB;KAC/B;IAED,0EAA0E;IAC1E,gBAAgB,EAAE;QAChB,UAAU,EAAE,SAAS;QACrB,yEAAyE;QACzE,yEAAyE;QACzE,4EAA4E;QAC5E,KAAK,EAAE,uBAAuB;QAC9B,SAAS,EAAE,4BAA4B;KACxC;IAED,0EAA0E;IAC1E,eAAe,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACxE,cAAc,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACvE,cAAc,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACtE,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE;IAClE,aAAa,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACpE,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;IAC9D,WAAW,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;IAChE,mBAAmB,EAAE;QACnB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,8BAA8B;KACxC;CACsD,CAAC;AA4B1D,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAsB;IAEtB,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;AACzD,CAAC"}

package/dist/wire/listEnvelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"listEnvelope.js","sourceRoot":"","sources":["../../src/wire/listEnvelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAEnD,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAI,UAAwB;IAC5D,OAAO,CAAC,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;QACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC;AACL,CAAC;AAMD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAkB,EAClB,IAAI,GAAsD,EAAE;IAE5D,OAAO;QACL,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC/B,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"listEnvelope.js","sourceRoot":"","sources":["../../src/wire/listEnvelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAEnD,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAI,UAAwB;IAC5D,OAAO,CAAC,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;QACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC;AACL,CAAC;AAMD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAkB,EAClB,OAA0D,EAAE;IAE5D,OAAO;QACL,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC/B,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC"}

package/dist/wire/modelResponses.d.ts

@@ -34,15 +34,15 @@ export declare const modelReadResponseSchema: z.ZodObject<{
         id: z.ZodString;
         actor: z.ZodString;
         participantKind: z.ZodPreprocess<z.ZodEnum<{
+            user: "user";
             agent: "agent";
             system: "system";
-            user: "user";
         }>>;
         onBehalfOfId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         onBehalfOfKind: z.ZodOptional<z.ZodNullable<z.ZodPreprocess<z.ZodEnum<{
+            user: "user";
             agent: "agent";
             system: "system";
-            user: "user";
         }>>>>;
         capabilityId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         description: z.ZodOptional<z.ZodString>;

package/dist/wire/modelShape.d.ts

@@ -25,23 +25,23 @@ import { z } from 'zod';
  * narrow one of these; they do not add a member.
  */
 export declare const fieldTypeSchema: z.ZodEnum<{
+    string: "string";
+    number: "number";
     boolean: "boolean";
     date: "date";
     enum: "enum";
     json: "json";
-    number: "number";
-    string: "string";
 }>;
 export type FieldType = z.infer<typeof fieldTypeSchema>;
 /** One field of a model, as the schema artifact records it. */
 export declare const fieldMetaSchema: z.ZodObject<{
     type: z.ZodEnum<{
+        string: "string";
+        number: "number";
         boolean: "boolean";
         date: "date";
         enum: "enum";
         json: "json";
-        number: "number";
-        string: "string";
     }>;
     isOptional: z.ZodBoolean;
     isIndexed: z.ZodBoolean;

package/dist/wire/pricing.d.ts

@@ -7,9 +7,9 @@
  */
 import { z } from 'zod';
 export declare const planTierSchema: z.ZodEnum<{
-    enterprise: "enterprise";
     free: "free";
     scale: "scale";
+    enterprise: "enterprise";
 }>;
 export type PlanTier = z.infer<typeof planTierSchema>;
 /**
@@ -24,10 +24,10 @@ export type PlanTier = z.infer<typeof planTierSchema>;
  * the act of connecting.
  */
 export declare const meterEventSchema: z.ZodEnum<{
-    "api.bootstraps": "api.bootstraps";
-    "api.claim_creates": "api.claim_creates";
     "api.commit_ops": "api.commit_ops";
     "api.model_reads": "api.model_reads";
+    "api.claim_creates": "api.claim_creates";
+    "api.bootstraps": "api.bootstraps";
 }>;
 export type MeterEvent = z.infer<typeof meterEventSchema>;
 /**

package/dist/wire/protocolVersion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocolVersion.d.ts","sourceRoot":"","sources":["../../src/wire/protocolVersion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,YAAI,CAAC,CAAU,CAAC;AAExD,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,sBAAsB,GAAG,IAAI,CAO/B;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,wBAAwB,GAAG,IAAI,CAGjC;AAED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,0BAA0B,CAAC"}
+{"version":3,"file":"protocolVersion.d.ts","sourceRoot":"","sources":["../../src/wire/protocolVersion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,cAAe,CAAC;AAExD,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,sBAAsB,GAAG,IAAI,CAO/B;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,wBAAwB,GAAG,IAAI,CAGjC;AAED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,0BAA0B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abloatai/transaction",
-  "version": "0.59.2",
+  "version": "0.60.0",
   "description": "The headless Ablo transaction client and canonical contracts for reads, commits, confirmation, claims, and durable observation.",
   "license": "Apache-2.0",
   "type": "module",
@@ -97,6 +97,11 @@
       "import": "./dist/auth/*.js",
       "default": "./dist/auth/*.js"
     },
+    "./sessions": {
+      "types": "./dist/sessions/index.d.ts",
+      "import": "./dist/sessions/index.js",
+      "default": "./dist/sessions/index.js"
+    },
     "./keys": {
       "types": "./dist/keys/index.d.ts",
       "import": "./dist/keys/index.js",

package/src/auth/apiKey.ts

@@ -17,15 +17,18 @@ import { classifyCredentialKind } from './credentialKind.js';
 import { ABLO_DEFAULT_BASE_URL } from './hostedEndpoints.js';
 import { normalizeAbloBaseUrl } from './baseUrl.js';
 import type { KeyEnvironment } from '../environment.js';
-import { isCredentialEndpoint, createEndpointCredentialResolver } from './credentialEndpoint.js';
+import { isCredentialEndpoint } from './credentialEndpoint.js';
 import {
   credentialToken,
   type CredentialProvider,
+  type CredentialProviderResult,
 } from './credentialResult.js';
+import type { SessionSource } from '../sessions/contract.js';
 import {
   assertBrowserSafety,
   protectBrowserCredentialProvider,
 } from './browserCredentialSafety.js';
+import { resolveSessionCredential } from '../sessions/source.js';
 export { assertBrowserSafety };
 
 /**
@@ -40,22 +43,18 @@ export type { CredentialProvider } from './credentialResult.js';
  * The client options that decide a credential.
  *
  * This is the ONE declaration of that set. The resolvers below read it, and the
- * transport configs that accept these options derive from it rather than listing
- * the fields again — a second list is how `authEndpoint` came to be supported at
- * runtime, named in an error message, and absent from the type a caller writes
- * against.
+ * transport configs that accept these options derive from it rather than
+ * listing the fields again.
  */
 export interface AuthClientOptions {
   readonly apiKey?: string | CredentialProvider | null;
-  /** A route that mints the token, instead of a key the process holds. */
-  readonly authEndpoint?: string | CredentialProvider | null;
+  /** A scoped session, its renewal provider, or a browser session endpoint. */
+  readonly session?: SessionSource | null;
   /** A token the caller already has, used as-is. */
   readonly authToken?: string | null;
   readonly baseURL?: string | null;
   readonly dangerouslyAllowBrowser?: boolean;
   readonly fetch?: typeof globalThis.fetch;
-  readonly authTimeoutMs?: number;
-  readonly allowCrossOriginAuthEndpoint?: boolean;
 }
 
 export interface AuthResolveInput {
@@ -83,45 +82,20 @@ export function readProcessEnv(): Record<string, string | undefined> {
 export function resolveApiKey(
   input: AuthResolveInput,
 ): string | CredentialProvider | null {
-  // `authEndpoint` is the option that names a session-mint route: a URL the
-  // client exchanges for a short-lived token, or an async resolver for custom
-  // exchanges. It is resolved into a `CredentialProvider` here — the single point
-  // shared by every client variant (WebSocket, HTTP, and protocol clients) — so
-  // every downstream consumer sees the same resolver and the credential
-  // lifecycle drives renewal off it.
-  const endpoint = input.options.authEndpoint;
   const configured = input.options.apiKey;
-  if (endpoint != null) {
-    if (configured != null) {
+  const session = input.options.session;
+  if (session != null) {
+    if (configured != null || input.options.authToken != null) {
       throw new AbloValidationError(
-        'Ablo: pass either `apiKey` (a key the process holds) or `authEndpoint` ' +
-          '(a route that mints the token) — not both; the client cannot know ' +
-          'which credential to use.',
-        { code: 'invalid_options', param: 'authEndpoint' },
+        'Ablo: pass `session`, `apiKey`, or `authToken` — not more than one.',
+        { code: 'invalid_options', param: 'session' },
       );
     }
-    if (typeof endpoint === 'function') {
-      return protectBrowserCredentialProvider(
-        endpoint,
-        input.options.dangerouslyAllowBrowser,
-      );
-    }
-    if (!isCredentialEndpoint(endpoint)) {
-      throw new AbloValidationError(
-        '`authEndpoint` expects a URL or path (e.g. \'/api/ablo-session\') or an ' +
-          'async resolver — a key string belongs in `apiKey`.',
-        { code: 'invalid_options', param: 'authEndpoint' },
-      );
-    }
-    return protectBrowserCredentialProvider(createEndpointCredentialResolver(endpoint, {
-      fetch: input.options.fetch,
-      timeoutMs: input.options.authTimeoutMs,
-      allowCrossOrigin: input.options.allowCrossOriginAuthEndpoint,
-    }), input.options.dangerouslyAllowBrowser);
+    return resolveSessionCredential(session, input.options);
   }
   if (typeof configured === 'string' && isCredentialEndpoint(configured)) {
     throw new AbloValidationError(
-      '`apiKey` no longer accepts an endpoint. Move this value to `authEndpoint`.',
+      '`apiKey` does not accept an endpoint. Use `session: { endpoint }`.',
       { code: 'invalid_options', param: 'apiKey' },
     );
   }
@@ -139,8 +113,8 @@ export function resolveApiKey(
  * needs: an async `() => token | null`, or `null` when auth is static — a plain
  * long-lived key string with no refresh, which is the common case.
  *
- * The short-lived per-user browser path passes a credential provider, and the
- * SDK then drives the whole credential lifecycle
+ * A renewable session or browser session endpoint resolves to a credential
+ * provider, and the SDK then drives the whole credential lifecycle
  * from it: mint-before-connect, the proactive refresh timer with its
  * wake/online/focus re-mint, and the reactive `credential_stale` re-mint. The
  * resolver follows the provider contract end to end: resolve a token,
@@ -434,8 +408,15 @@ export function rejectRemovedDatabaseUrlOption(options: object): void {
 export async function resolveApiKeyValue(
   apiKey: string | CredentialProvider | null,
 ): Promise<string | null> {
+  return credentialToken(await resolveCredentialValue(apiKey));
+}
+
+/** Resolve without discarding session expiry metadata needed by live clients. */
+export async function resolveCredentialValue(
+  apiKey: string | CredentialProvider | null,
+): Promise<CredentialProviderResult> {
   if (apiKey == null) return null;
-  if (typeof apiKey === 'function') return credentialToken(await apiKey());
+  if (typeof apiKey === 'function') return apiKey();
   return apiKey;
 }
 

package/src/auth/browserCredentialSafety.ts

@@ -42,7 +42,7 @@ export function protectBrowserCredentialProvider(
 function throwBrowserSecretError(): never {
   throw new AbloAuthenticationError(
     'A secret `sk_` credential reached the browser. Keep it server-side and ' +
-      'configure the browser with `authEndpoint` instead.',
+      'configure the browser with `session: { endpoint }` instead.',
     { code: 'browser_apikey_blocked' },
   );
 }