@cortexkit/subc-client 0.19.0 → 0.21.0

package/README.md

@@ -78,6 +78,45 @@ fails loud with an `AuthError` rather than connecting insecurely.
 - **Connection-file security.** On unix the file must be owner-only (`0600`); a
   group/world-readable file is rejected, because the key has effectively leaked.
 
+### Scoped routes
+
+Use a daemon advertising `scopes/v1` and pass a selector to `routeOpen()` or to
+managed `call()` / `callBinary()` options:
+
+```ts
+const scope = {
+  owner: { kind: "reserved", module_id: "session-owner" } as const,
+  ref: "session-1",
+  scopeEpoch: 1,
+};
+const route = await client.routeOpen(target, identity, { scope });
+await client.call("provider", "echo", {}, { scope });
+// Close only this scoped managed route, not the unscoped or another scope's route.
+await client.closeManagedRoute(target, identity, { scope });
+```
+
+The daemon checks who the caller is from its own connection record, not from the request: the caller must be the module that registered the scope (its owner), or a module the owner listed as a carrier on that scope record.
+Passing `scope` does not grant that authority: use the supervised caller's
+`consumerIdentity` (or its default environment identity) as usual. `owner` uses
+the existing `Principal` type; the reserved form above is the normal case, and
+the daemon refuses other owner kinds.
+
+The exact wire selector is
+`scope: { owner: { kind: "reserved", module_id: "session-owner" }, ref: "session-1", scope_epoch: 1 }`.
+With no selector, there is no `scope` key. A reserved owner's module id and the
+ref must be non-empty strings, and `scopeEpoch` must be present and a safe
+non-negative integer (zero is valid); invalid selectors fail locally before I/O.
+
+Managed routes are cached separately by target, bind and consumer identities,
+reverse capabilities, and the whole scope selector (owner, ref, epoch). Scoped
+and unscoped calls never share a route, nor do different scopes or daemon
+incarnations. Reconnect opens a fresh handle under the same selector.
+`scope_not_synced` and `scope_changed` refusals retain the managed path's retries
+within the caller's deadline. A scope-revocation close (such as `scope_ended` or
+`scope_carrier_removed`) is terminal: neither a later managed call nor a
+reconnect automatically reopens that cache entry. Use a new selector for a new
+session; reload and restart close reasons still permit reopens.
+
 ### Launch nonce
 
 A module the daemon spawns proves who it is with a launch nonce. On macOS and
@@ -115,7 +154,9 @@ the environment copy. The environment copy is read only when
 ## Testing
 
 ```sh
-bun test          # 75 unit/mock tests + 17 RUN_SUBC_LIVE-gated tests
+bun run typecheck
+bun test          # unit/mock suite; live tests are gated by RUN_SUBC_LIVE=1
+RUN_SUBC_LIVE=1 bun test tests/live-scoped-open.test.ts
 ```
 
 The live-handshake tests boot the real daemon binary
@@ -124,6 +165,12 @@ byte-identity authority for this client. They skip automatically when the binary
 is not built; run `cargo build -p subc-core` first (the CI lane does this; the
 package builds the `ck-subc` executable).
 
+The scope admission test uses the same supervised `fake-aft-stub` fixture as the
+Rust SDK (built by `cargo build -p subc-core --bins`) to sync an owner's scope and
+observe the real provider bind. Live helpers hard-link the daemon as
+`ckdev-subc` inside the scratch runtime directory before spawning it, and isolate
+all three XDG homes so tests cannot reach the operator's daemon data or config.
+
 ## Layout
 
 | File | Responsibility |

package/dist/client.d.ts

@@ -1,5 +1,6 @@
 import { type ConnectionInfo } from "./connection-file.js";
 import { AdmissionClass, Priority } from "./envelope.js";
+import type { Principal } from "./provider.js";
 import { ReverseRequestRegistry, RouteHandle } from "./route-handle.js";
 export declare const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
 export declare const TIMEOUT_ARBITRATION_GRACE_MS = 50;
@@ -29,7 +30,18 @@ export interface ConsumerIdentity {
     module_id: string;
     launch_nonce: string;
 }
+/** A scope selector; scopeEpoch is required even for the scope's owner. */
+export interface RouteScope {
+    /** Owner principal, passed verbatim. The daemon decides which principal kinds may own scopes. */
+    owner: Principal;
+    /** Opaque, non-empty ref within the owner. */
+    ref: string;
+    /** Safe non-negative integer, including zero; serialized as scope_epoch. */
+    scopeEpoch: number;
+}
 export interface RouteOpenOptions {
+    /** Open under this scope. The caller must be its owner or a listed carrier; use a daemon advertising scopes/v1. Serialized as { owner, ref, scope_epoch }. */
+    scope?: RouteScope;
     /** Optional override for the consumer identity; by default the SUBC_MODULE_ID environment variable and the process's launch nonce (see `launchNonce`) are used when both are non-empty; a refused launch-nonce descriptor counts as no nonce. Set null to send route.open without consumer_identity. */
     consumerIdentity?: ConsumerIdentity | null;
     /**
@@ -113,6 +125,8 @@ export interface RequestOptions {
     signal?: AbortSignal;
 }
 export interface ManagedCallOptions extends RequestOptions {
+    /** Scope for the cached route and its reconnect reopens. The caller must be the scope's owner or a listed carrier; use a daemon advertising scopes/v1. Each owner/ref/epoch has a separate cache entry. */
+    scope?: RouteScope;
     /** Overrides the per-client identity used for route.open before this call. */
     identity?: BindIdentity;
     /** Defaults to management_surface, matching the store/host management APIs. */
@@ -142,6 +156,8 @@ export interface CloseRouteOptions {
     drain?: boolean;
 }
 export interface ManagedCloseRouteOptions extends CloseRouteOptions {
+    /** Scope selector used by the cached managed route; omitted selects only an unscoped route. */
+    scope?: RouteScope;
     /** Consumer identity used by the cached managed route. */
     consumerIdentity?: ConsumerIdentity | null;
     /** The registry whose derived capability set identifies the cached route. */
@@ -187,6 +203,8 @@ export declare class SubcCallError extends Error {
      * classify on it and must not have to reach into `cause`.
      */
     get detail(): unknown;
+    /** Why the route ended. A reason never makes an in-flight call safe to resend. */
+    get closeReason(): RouteEndReason | undefined;
 }
 /**
  * A live subscription to a provider's event stream, riding a single held-open
@@ -210,6 +228,7 @@ export declare class SubcError extends Error {
      * those reasons at the transport boundary.
      */
     readonly detail?: unknown | undefined;
+    readonly closeReason?: RouteEndReason | undefined;
     constructor(message: string, code?: string | undefined, 
     /**
      * Machine-parsable payload from the wire `ErrorBody.detail` field, carried
@@ -217,7 +236,7 @@ export declare class SubcError extends Error {
      * synapse's certification-refusal reasons); dropping it here would strand
      * those reasons at the transport boundary.
      */
-    detail?: unknown | undefined);
+    detail?: unknown | undefined, closeReason?: RouteEndReason | undefined);
 }
 export interface ConnectOptions {
     connectionFile: string;
@@ -266,15 +285,11 @@ export interface ConnectOptions {
      */
     timeoutArbitrationGraceMs?: number;
     /**
-     * Observer for daemon-originated channel-0 control pushes (`route.closing`,
-     * `route.closed`, and any op added later). Purely advisory: the daemon's
-     * load-bearing route-death signal remains the GOODBYE frame, and nothing in
-     * the client's own route lifecycle consumes these. The contract is the wire
-     * contract verbatim -- unrecognized ops still arrive here (callers ignore
-     * what they don't know, per the MUST-ignore clause), a push that fails to
-     * parse as JSON is dropped without surfacing, and an observer throw is
-     * swallowed like every other caller callback so it cannot fail the read loop
-     * or unrelated requests.
+     * Observer for parsed daemon control pushes, including unrecognized ops which
+     * callers should ignore. Malformed JSON is dropped and observer exceptions are
+     * swallowed so they cannot fail unrelated requests. The client records route
+     * reasons before notifying the observer, but closes routes only on the separate
+     * GOODBYE frame, never on a control push.
      */
     onControlPush?: (push: ControlPush) => void;
 }
@@ -286,9 +301,11 @@ export interface ControlPush {
     body: Record<string, unknown>;
 }
 /** A known route-close reason, excluding forward-compatible unknown values. */
-export type KnownRouteCloseReason = "reload" | "restart" | "disable" | "crash" | "capability_denied";
+export type KnownRouteCloseReason = "reload" | "restart" | "disable" | "crash" | "capability_denied" | "scope_ended" | "scope_carrier_removed" | "scope_delegation_changed" | "scope_parent_ended";
 /** A route-close reason decoded from a daemon control push. */
 export type RouteCloseReason = KnownRouteCloseReason | "unknown";
+/** Why a route ended. Even a planned closure can leave a call's outcome unknown. */
+export type RouteEndReason = RouteCloseReason | "closed_by_caller" | "connection_lost";
 /** Whether the close reason alone permits reopening a route automatically. */
 export type RouteCloseDisposition = "may_reopen" | "must_not_reopen";
 /**
@@ -311,6 +328,9 @@ export declare class SubcClient {
     private readonly lateResponses;
     private readonly routes;
     private readonly liveRoutes;
+    private readonly routeModules;
+    private readonly routeEndReasons;
+    private readonly legacyChannelReasons;
     private connectionToken;
     private ingressEpochDropCount;
     private closedErr;
@@ -339,6 +359,7 @@ export declare class SubcClient {
      * Open a route and return its connection-bound immutable handle. At most
      * MAX_ROUTE_OPENS_IN_FLIGHT opens are outstanding at once; further calls wait
      * their turn.
+     * A scoped open requires the caller to be the scope's owner or a listed carrier.
      */
     routeOpen(target: RouteTarget, identity: BindIdentity, opts?: RouteOpenOptions): Promise<RouteHandle>;
     /** One route.open exchange. The caller holds a route-open gate slot. */
@@ -348,6 +369,8 @@ export declare class SubcClient {
     /**
      * Managed route + request convenience. Opens and caches a route for the module,
      * reconnecting and re-opening cached routes after connection drops.
+     * Scoped routes are isolated by owner/ref/epoch and require owner or carrier authority.
+     * Terminal scope close reasons prevent automatic reopens under the same selector.
      */
     call<Response = unknown>(moduleId: string, method: string, params?: unknown, opts?: ManagedCallOptions): Promise<Response>;
     /**
@@ -460,6 +483,7 @@ export declare class SubcClient {
     private reopenCachedRoutes;
     private timeoutMessage;
     private routeClosedDuringOpen;
+    private endedCachedRoute;
     private readLoop;
     private dispatch;
     /**
@@ -478,6 +502,9 @@ export declare class SubcClient {
     private sendReverseReply;
     private errorFromFrame;
     private evictRouteHandle;
+    private recordRouteEnd;
+    private preventRouteReopen;
+    private routeEndReason;
     private failHandle;
     private fail;
     private notSentCallError;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAeA,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EACL,cAAc,EAMd,QAAQ,EAGT,MAAM,eAAe,CAAC;AAEvB,OAAO,EAKL,sBAAsB,EACtB,WAAW,EAGZ,MAAM,mBAAmB,CAAC;AAc3B,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAWjD,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAuB7C,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAOnD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAM3C,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wSAAwS;IACxS,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C;;;OAGG;IACH,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,4BAA4B,EAAE,CAAC;IACzC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB;IAAE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEjC,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEpC,4EAA4E;AAC5E,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,WAAW,EAAE,mBAAmB,CAAC;IACjC,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,+EAA+E;IAC/E,YAAY,CAAC,EAAE,4BAA4B,EAAE,GAAG,IAAI,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACxC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,wSAAwS;IACxS,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,2FAA2F;IAC3F,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,6EAA6E;IAC7E,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,yBAAyB,EAAE,gBAIvC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;IAEhC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAHf,IAAI,EAAE,iBAAiB,EAChC,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,KAAK,CAAC,EAAE,OAAO,YAAA;IAM1B;;;;;OAKG;IACH,IAAI,MAAM,IAAI,OAAO,CAEpB;CACF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,WAAW,IAAI,IAAI,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,qBAAa,SAAU,SAAQ,KAAK;IAGhC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO;gBARzB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;IACtB;;;;;OAKG;IACM,MAAM,CAAC,EAAE,OAAO,YAAA;CAI5B;AA6BD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,wFAAwF;IACxF,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;CAC7C;AAED,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,GAC7B,QAAQ,GACR,SAAS,GACT,SAAS,GACT,OAAO,GACP,mBAAmB,CAAC;AAExB,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,GAAG,SAAS,CAAC;AAEjE,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,iBAAiB,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAWvE;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,qBAAqB,CAW/E;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAGhF;AAsHD,qBAAa,UAAU;IAoBnB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IArBvB,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAC3E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,qBAAqB,CAAK;IAClC,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,qBAAqB,CAA4B;IAKzD,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO;IAQP,IAAI,IAAI,IAAI,cAAc,CAEzB;IAID,OAAO,KAAK,aAAa,GAExB;IAED,gFAAgF;WACnE,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAM/D,8DAA8D;IACxD,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAS7D;;;;;OAKG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc1D,uEAAuE;IACjE,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAc7D;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;IAU/G,wEAAwE;YAC1D,aAAa;IA8C3B,0EAA0E;IACpE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB9F;;;OAGG;IACG,IAAI,CAAC,QAAQ,GAAG,OAAO,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,EAChB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,QAAQ,CAAC;IAWpB;;;;;OAKG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;YAKlB,WAAW;IA6DvB,2DAA2D;IAC7D,SAAS,CACP,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACpC,IAAI,GAAE,gBAAqB,GAC1B,YAAY;IA+Df;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAmC1B,gEAAgE;IAChE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,QAA+B,GAAG,IAAI;IAa1F,yEAAyE;IACnE,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBjF,uDAAuD;IACnD,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAelF,qEAAqE;IAC/D,iBAAiB,CACrB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,EACxD,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAgBd,+GAA+G;IAC3G,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF,KAAK,IAAI,IAAI;IAMb,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,gBAAgB;mBAqBH,cAAc;YAcrB,UAAU;IAQxB,OAAO,CAAC,IAAI;IAqDZ;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;YA2BV,cAAc;IAuB5B,OAAO,CAAC,WAAW;YAyEL,iBAAiB;IAmD/B,OAAO,CAAC,iBAAiB;YAmBX,eAAe;IA4E7B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAiB/B,OAAO,CAAC,eAAe,CAAK;IAE5B,OAAO,CAAC,aAAa,CAA8B;IAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,+EAA+E;IAC/E,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,0BAA0B;YA2CpB,yBAAyB;IAMvC,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,kBAAkB;YAWZ,kBAAkB;IAsChC,OAAO,CAAC,iBAAiB;YAgBX,kBAAkB;IAkChC,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,qBAAqB;YAIf,QAAQ;IAwBtB,OAAO,CAAC,QAAQ;IAsIhB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,sBAAsB;YAgEhB,gBAAgB;YAWhB,gBAAgB;IA4B9B,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,oBAAoB;IAM5B,qFAAqF;IACrF,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,kCAAkC;IAO1C,OAAO,CAAC,MAAM;IAId,8EAA8E;IAC9E,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;CAIlB;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAkBlE;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAc1E;AAqDD,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAExF;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOzE;AAmBD,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAYvE"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAeA,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,EACL,cAAc,EAMd,QAAQ,EAGT,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAKL,sBAAsB,EACtB,WAAW,EAGZ,MAAM,mBAAmB,CAAC;AAc3B,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAWjD,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAuB7C,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAOnD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAM3C,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,iGAAiG;IACjG,KAAK,EAAE,SAAS,CAAC;IACjB,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8JAA8J;IAC9J,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,wSAAwS;IACxS,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C;;;OAGG;IACH,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,4BAA4B,EAAE,CAAC;IACzC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB;IAAE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEjC,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEpC,4EAA4E;AAC5E,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,WAAW,EAAE,mBAAmB,CAAC;IACjC,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,+EAA+E;IAC/E,YAAY,CAAC,EAAE,4BAA4B,EAAE,GAAG,IAAI,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACxC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,2MAA2M;IAC3M,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,wSAAwS;IACxS,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,2FAA2F;IAC3F,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,+FAA+F;IAC/F,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,6EAA6E;IAC7E,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,yBAAyB,EAAE,gBAIvC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAE5E;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB;IAEhC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAHf,IAAI,EAAE,iBAAiB,EAChC,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,KAAK,CAAC,EAAE,OAAO,YAAA;IAM1B;;;;;OAKG;IACH,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,kFAAkF;IAClF,IAAI,WAAW,IAAI,cAAc,GAAG,SAAS,CAG5C;CACF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,WAAW,IAAI,IAAI,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,qBAAa,SAAU,SAAQ,KAAK;IAGhC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc;gBATrC,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;IACtB;;;;;OAKG;IACM,MAAM,CAAC,EAAE,OAAO,YAAA,EAChB,WAAW,CAAC,EAAE,cAAc,YAAA;CAIxC;AA6BD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,wFAAwF;IACxF,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;CAC7C;AAED,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,GAC7B,QAAQ,GACR,SAAS,GACT,SAAS,GACT,OAAO,GACP,mBAAmB,GACnB,aAAa,GACb,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,CAAC;AAEzB,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,GAAG,SAAS,CAAC;AAEjE,oFAAoF;AACpF,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAEvF,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,iBAAiB,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAevE;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,qBAAqB,CAe/E;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAGhF;AAyHD,qBAAa,UAAU;IAuBnB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAxBvB,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAC3E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmE;IACnG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAuC;IAC5E,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,qBAAqB,CAAK;IAClC,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,qBAAqB,CAA4B;IAKzD,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO;IAQP,IAAI,IAAI,IAAI,cAAc,CAEzB;IAID,OAAO,KAAK,aAAa,GAExB;IAED,gFAAgF;WACnE,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAM/D,8DAA8D;IACxD,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAS7D;;;;;OAKG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc1D,uEAAuE;IACjE,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAc7D;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC;IAW/G,wEAAwE;YAC1D,aAAa;IAiD3B,0EAA0E;IACpE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB9F;;;;;OAKG;IACG,IAAI,CAAC,QAAQ,GAAG,OAAO,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,EAChB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,QAAQ,CAAC;IAWpB;;;;;OAKG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;YAKlB,WAAW;IA6DvB,2DAA2D;IAC7D,SAAS,CACP,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACpC,IAAI,GAAE,gBAAqB,GAC1B,YAAY;IA+Df;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAmC1B,gEAAgE;IAChE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,QAA+B,GAAG,IAAI;IAa1F,yEAAyE;IACnE,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBjF,uDAAuD;IACnD,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAelF,qEAAqE;IAC/D,iBAAiB,CACrB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,EACxD,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAiBd,+GAA+G;IAC3G,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF,KAAK,IAAI,IAAI;IAMb,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,gBAAgB;mBAqBH,cAAc;YAcrB,UAAU;IAQxB,OAAO,CAAC,IAAI;IAuDZ;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;YA2BV,cAAc;IAuB5B,OAAO,CAAC,WAAW;YA0EL,iBAAiB;IAsD/B,OAAO,CAAC,iBAAiB;YAmBX,eAAe;IA8E7B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAiB/B,OAAO,CAAC,eAAe,CAAK;IAE5B,OAAO,CAAC,aAAa,CAA8B;IAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,+EAA+E;IAC/E,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,0BAA0B;YA2CpB,yBAAyB;IAMvC,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,kBAAkB;YAWZ,kBAAkB;IAsChC,OAAO,CAAC,iBAAiB;YAgBX,kBAAkB;IAmChC,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,gBAAgB;YAKV,QAAQ;IAwBtB,OAAO,CAAC,QAAQ;IAwIhB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,sBAAsB;YAgEhB,gBAAgB;YAWhB,gBAAgB;IA4B9B,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,cAAc;IAwBtB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,oBAAoB;IAM5B,qFAAqF;IACrF,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,kCAAkC;IAO1C,OAAO,CAAC,MAAM;IAId,8EAA8E;IAC9E,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;CAIlB;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAkBlE;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAgB1E;AAqDD,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAExF;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOzE;AAmBD,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAYvE"}

package/dist/client.js

@@ -107,10 +107,16 @@ export class SubcCallError extends Error {
     get detail() {
         return this.cause instanceof SubcError ? this.cause.detail : undefined;
     }
+    /** Why the route ended. A reason never makes an in-flight call safe to resend. */
+    get closeReason() {
+        return this.cause instanceof SubcError || this.cause instanceof SubcCallError
+            ? this.cause.closeReason : undefined;
+    }
 }
 export class SubcError extends Error {
     code;
     detail;
+    closeReason;
     constructor(message, code, 
     /**
      * Machine-parsable payload from the wire `ErrorBody.detail` field, carried
@@ -118,10 +124,11 @@ export class SubcError extends Error {
      * synapse's certification-refusal reasons); dropping it here would strand
      * those reasons at the transport boundary.
      */
-    detail) {
+    detail, closeReason) {
         super(message);
         this.code = code;
         this.detail = detail;
+        this.closeReason = closeReason;
     }
 }
 // The wire flags belong to the frame, not the public error API. Keep them with
@@ -146,6 +153,10 @@ export function parseRouteCloseReason(reason) {
         case "disable":
         case "crash":
         case "capability_denied":
+        case "scope_ended":
+        case "scope_carrier_removed":
+        case "scope_delegation_changed":
+        case "scope_parent_ended":
             return reason;
         default:
             return "unknown";
@@ -160,6 +171,10 @@ export function classifyRouteCloseReason(reason) {
         case "disable":
         case "crash":
         case "capability_denied":
+        case "scope_ended":
+        case "scope_carrier_removed":
+        case "scope_delegation_changed":
+        case "scope_parent_ended":
         case "unknown":
             return "must_not_reopen";
     }
@@ -258,6 +273,9 @@ export class SubcClient {
     lateResponses = new Map();
     routes = new Map();
     liveRoutes = new Map();
+    routeModules = new Map();
+    routeEndReasons = new Map();
+    legacyChannelReasons = new Map();
     connectionToken = newConnectionToken();
     ingressEpochDropCount = 0;
     closedErr = null;
@@ -328,12 +346,14 @@ export class SubcClient {
      * Open a route and return its connection-bound immutable handle. At most
      * MAX_ROUTE_OPENS_IN_FLIGHT opens are outstanding at once; further calls wait
      * their turn.
+     * A scoped open requires the caller to be the scope's owner or a listed carrier.
      */
     async routeOpen(target, identity, opts = {}) {
+        const scope = validatedRouteScope(opts.scope);
         // Without a timeout the gate always grants a slot eventually.
         const release = (await this.routeOpenGate.acquire());
         try {
-            return await this.sendRouteOpen(target, identity, opts);
+            return await this.sendRouteOpen(target, identity, { ...opts, scope });
         }
         finally {
             release();
@@ -341,6 +361,7 @@ export class SubcClient {
     }
     /** One route.open exchange. The caller holds a route-open gate slot. */
     async sendRouteOpen(target, identity, opts = {}) {
+        const scope = validatedRouteScope(opts.scope);
         const consumerIdentity = routeOpenConsumerIdentity(opts);
         const reverseRequests = opts.reverseRequests ?? new ReverseRequestRegistry();
         reverseRequests.seal();
@@ -351,6 +372,7 @@ export class SubcClient {
             identity,
             ...(consumerIdentity ? { consumer_identity: consumerIdentity } : {}),
             ...(consumerCapabilities.length > 0 ? { consumer_capabilities: consumerCapabilities } : {}),
+            ...(scope ? { scope: { owner: scope.owner, ref: scope.ref, scope_epoch: scope.scopeEpoch } } : {}),
         });
         let installed = null;
         const install = (frame) => {
@@ -361,6 +383,7 @@ export class SubcClient {
                 throw new SubcError(`route.open returned no route handle: ${JSON.stringify(parsed)}`);
             }
             installed = this.installRoute(parsed.route_channel, parsed.route_epoch, reverseRequests);
+            this.routeModules.set(parsed.route_channel, target.module_id);
             return true;
         };
         const closeLateRoute = (frame) => {
@@ -371,7 +394,7 @@ export class SubcClient {
                 if (typeof parsed.route_channel !== "number" || typeof parsed.route_epoch !== "number")
                     return;
                 const lateHandle = this.installRoute(parsed.route_channel, parsed.route_epoch);
-                this.failHandle(lateHandle, new SubcError("late route.open was closed", "route_closed"));
+                this.failHandle(lateHandle, new SubcError("late route.open was closed", "route_closed", undefined, "closed_by_caller"));
                 this.liveRoutes.delete(lateHandle.channel);
                 this.sendRouteGoodbye(lateHandle, true);
             }
@@ -397,6 +420,8 @@ export class SubcClient {
     /**
      * Managed route + request convenience. Opens and caches a route for the module,
      * reconnecting and re-opening cached routes after connection drops.
+     * Scoped routes are isolated by owner/ref/epoch and require owner or carrier authority.
+     * Terminal scope close reasons prevent automatic reopens under the same selector.
      */
     async call(moduleId, method, params, opts = {}) {
         if (opts.binary) {
@@ -611,14 +636,14 @@ export class SubcClient {
         }
         if (opts.drain)
             await this.drainUnaryOnHandle(handle);
-        this.failHandle(handle, new SubcError("route closed by closeRoute", "route_closed"));
+        this.failHandle(handle, new SubcError("route closed by closeRoute", "route_closed", undefined, "closed_by_caller"));
         if (this.liveRoutes.get(handle.channel) === handle)
             this.liveRoutes.delete(handle.channel);
         this.sendRouteGoodbye(handle);
     }
     /** Close a cached managed route by its route-open identity tuple. */
     async closeManagedRoute(target, identity, opts = {}) {
-        const key = routeCacheKey(target, identity, routeOpenConsumerIdentity(opts), (opts.reverseRequests ?? new ReverseRequestRegistry()).capabilities());
+        const key = routeCacheKey(target, identity, routeOpenConsumerIdentity(opts), (opts.reverseRequests ?? new ReverseRequestRegistry()).capabilities(), validatedRouteScope(opts.scope));
         const cached = this.routes.get(key);
         if (!cached)
             return;
@@ -715,13 +740,15 @@ export class SubcClient {
             };
             pending.timer = setTimeout(() => this.arbitrateTimeout(key, pending, channel, corr, ms), ms);
             this.pending.set(key, pending);
-            if (signal)
-                this.attachCancelSignal(signal, key, handle, corr, priority);
             writeBorrowed(this.sock, encodeFrame(frame), Date.now() + ms).catch((error) => {
                 const current = this.pending.get(key);
                 if (current)
                     this.rejectPending(key, current, error instanceof Error ? error : new SubcError(String(error)));
             });
+            // Queue REQUEST first: an already-aborted signal emits CANCEL immediately,
+            // and the daemon can only cancel a correlation it has already received.
+            if (signal)
+                this.attachCancelSignal(signal, key, handle, corr, priority);
         });
     }
     /**
@@ -813,8 +840,6 @@ export class SubcClient {
             };
             pending.timer = setTimeout(() => this.arbitrateTimeout(key, pending, handle.channel, corr, ms), ms);
             this.pending.set(key, pending);
-            if (signal)
-                this.attachCancelSignal(signal, key, handle, corr, priority);
             const write = writeTrackedBorrowed(this.sock, encodeFrame(frame), Date.now() + ms);
             handedToSocket = write.queued;
             write.completed.catch((error) => {
@@ -822,9 +847,13 @@ export class SubcClient {
                 if (current)
                     this.rejectPending(key, current, error instanceof Error ? error : new SubcError(String(error)));
             });
+            // Preserve REQUEST/CANCEL order even when the signal was already aborted.
+            if (signal && write.queued)
+                this.attachCancelSignal(signal, key, handle, corr, priority);
         });
     }
     async cachedRouteHandle(moduleId, opts) {
+        const scope = validatedRouteScope(opts.scope);
         const identity = opts.identity ?? this.opts.identity;
         if (!identity) {
             throw new SubcCallError("terminal", "managed call requires a BindIdentity in SubcClient.connect({ identity }) or call(..., { identity })", "missing_identity");
@@ -833,7 +862,7 @@ export class SubcClient {
         const consumerIdentity = routeOpenConsumerIdentity(opts);
         const reverseRequests = opts.reverseRequests ?? new ReverseRequestRegistry();
         reverseRequests.seal();
-        const key = routeCacheKey(target, identity, consumerIdentity, reverseRequests.capabilities());
+        const key = routeCacheKey(target, identity, consumerIdentity, reverseRequests.capabilities(), scope);
         let cached = this.routes.get(key);
         if (!cached) {
             cached = {
@@ -841,6 +870,7 @@ export class SubcClient {
                 moduleId,
                 target,
                 identity,
+                scope,
                 consumerIdentity,
                 reverseRequests,
                 handle: null,
@@ -848,6 +878,8 @@ export class SubcClient {
             };
             this.routes.set(key, cached);
         }
+        if (cached.endReason !== undefined)
+            throw this.endedCachedRoute(cached.endReason);
         if (cached.handle && this.isLiveHandle(cached.handle))
             return cached.handle;
         // The retries end at the retry deadline or at the call's own timeoutMs,
@@ -888,6 +920,8 @@ export class SubcClient {
         for (;;) {
             if (cached.closed)
                 throw this.routeClosedDuringOpen();
+            if (cached.endReason !== undefined)
+                throw this.endedCachedRoute(cached.endReason);
             try {
                 await this.ensureConnectedForManaged();
             }
@@ -904,6 +938,7 @@ export class SubcClient {
             try {
                 outcome = {
                     handle: await this.sendRouteOpen(cached.target, cached.identity, {
+                        scope: cached.scope,
                         consumerIdentity: cached.consumerIdentity ?? null,
                         reverseRequests: cached.reverseRequests,
                     }),
@@ -1149,10 +1184,11 @@ export class SubcClient {
         }
         for (const key of routeKeys) {
             const cached = this.routes.get(key);
-            if (!cached || cached.closed)
+            if (!cached || cached.closed || cached.endReason !== undefined)
                 continue;
             try {
                 const handle = await this.routeOpen(cached.target, cached.identity, {
+                    scope: cached.scope,
                     consumerIdentity: cached.consumerIdentity ?? null,
                     reverseRequests: cached.reverseRequests,
                 });
@@ -1182,7 +1218,12 @@ export class SubcClient {
         return `request on ${where} ${channel} corr ${corr} timed out after ${ms}ms`;
     }
     routeClosedDuringOpen() {
-        return new SubcCallError("not_sent", "route was closed before route.open completed", "route_closed");
+        const cause = new SubcError("route was closed before route.open completed", "route_closed", undefined, "closed_by_caller");
+        return new SubcCallError("not_sent", cause.message, cause.code, cause);
+    }
+    endedCachedRoute(reason) {
+        const cause = new SubcError(`cached route closed by subc (${reason}); must not reopen`, "route_closed", undefined, reason);
+        return this.terminalCallError(cause.message, cause);
     }
     async readLoop(sock, generation) {
         try {
@@ -1222,12 +1263,12 @@ export class SubcClient {
         if (frame.header.channel === 0 && frame.header.ty === FrameType.Push) {
             // Daemon-originated control push (route.closing / route.closed / future
             // ops). Never matches a pending (corr is daemon-chosen), never an error
-            // path: unparseable bodies and absent observers both drop silently per
-            // the wire contract's MUST-ignore clause, and an observer throw is
+            // path: unparseable bodies drop silently. Reasons are recorded even without
+            // an observer, and an observer throw is
             // swallowed for the same reason as onProgress below -- a caller callback
             // must not fail the read loop.
             const observer = this.opts.onControlPush;
-            if (observer) {
+            {
                 let parsed = null;
                 try {
                     const body = this.parseJson(frame);
@@ -1238,8 +1279,9 @@ export class SubcClient {
                     // Unparseable control push: ignored by contract.
                 }
                 if (parsed) {
+                    this.recordRouteEnd(parsed);
                     try {
-                        observer(parsed);
+                        observer?.(parsed);
                     }
                     catch {
                         // Observer's own throw, on its own stack; the stream must survive.
@@ -1320,7 +1362,8 @@ export class SubcClient {
             // so it stays kind=outcome_unknown -- the same class as a mid-flight socket
             // drop, and never the not_sent/unknown_channel class that call() retries.
             // The code says WHICH route ended, not that it is safe to send again.
-            this.failHandle(handle, new SubcError("route closed by subc (GOODBYE)", "route_closed"));
+            this.failHandle(handle, new SubcError("route closed by subc (GOODBYE)", "route_closed", undefined, this.routeEndReason(handle.channel)));
+            this.preventRouteReopen(handle.channel, this.routeEndReason(handle.channel));
             if (this.liveRoutes.get(handle.channel) === handle)
                 this.liveRoutes.delete(handle.channel);
             this.evictRouteHandle(handle);
@@ -1431,6 +1474,48 @@ export class SubcClient {
                 cached.handle = null;
         }
     }
+    recordRouteEnd(push) {
+        const reason = routeCloseReason(push);
+        if (reason === undefined)
+            return;
+        if ("channels" in push.body) {
+            if (Array.isArray(push.body.channels)) {
+                for (const channel of push.body.channels) {
+                    if (typeof channel !== "number" || !Number.isInteger(channel) || channel < 0 || channel > 65535)
+                        continue;
+                    const final = push.op === "route.closed";
+                    if (final || !this.routeEndReasons.get(channel)?.final) {
+                        this.routeEndReasons.set(channel, { reason, final });
+                        if (final)
+                            this.preventRouteReopen(channel, reason);
+                    }
+                }
+            }
+        }
+        else if (typeof push.body.module_id === "string") {
+            for (const [channel, module] of this.routeModules) {
+                if (module === push.body.module_id) {
+                    this.legacyChannelReasons.set(channel, reason);
+                    if (push.op === "route.closed")
+                        this.preventRouteReopen(channel, reason);
+                }
+            }
+        }
+    }
+    preventRouteReopen(channel, reason) {
+        if (classifyRouteCloseReason(reason) !== "must_not_reopen")
+            return;
+        for (const cached of this.routes.values()) {
+            if (cached.handle?.channel === channel)
+                cached.endReason = reason;
+        }
+    }
+    routeEndReason(channel) {
+        const specific = this.routeEndReasons.get(channel);
+        if (specific)
+            return specific.reason;
+        return this.legacyChannelReasons.get(channel) ?? "unknown";
+    }
     failHandle(handle, error) {
         for (const [key, pending] of this.pending) {
             if (pending.handle && sameRouteHandle(pending.handle, handle))
@@ -1438,10 +1523,15 @@ export class SubcClient {
         }
     }
     fail(err) {
+        const routeError = err instanceof SubcError && err.closeReason ? err
+            : new SubcError(err.message, errorCode(err), undefined, this.closeStarted ? "closed_by_caller" : "connection_lost");
         if (!this.closedErr)
             this.closedErr = err;
+        this.routeEndReasons.clear();
+        this.legacyChannelReasons.clear();
+        this.routeModules.clear();
         for (const [key, pending] of this.pending) {
-            this.rejectPending(key, pending, err);
+            this.rejectPending(key, pending, pending.handle ? routeError : err);
         }
     }
     notSentCallError(message, cause) {
@@ -1468,6 +1558,9 @@ export class SubcClient {
     }
     installRoute(channel, epoch, reverseRequests = new ReverseRequestRegistry()) {
         const handle = createRouteHandle(channel, epoch, this.connectionToken, reverseRequests);
+        this.routeEndReasons.delete(channel);
+        this.legacyChannelReasons.delete(channel);
+        this.routeModules.delete(channel);
         this.liveRoutes.set(channel, handle);
         return handle;
     }
@@ -1565,6 +1658,9 @@ export function isRetryableRouteOpenCode(code) {
     // A capability deny is policy, never a transient target-availability failure.
     if (code === "capability_forbidden")
         return false;
+    // Decoding a flow stamp alone does not promise flow behaviour.
+    if (code === "target_flow_unsupported")
+        return false;
     return (code === "module_reloading" ||
         code === "module_warming" ||
         code === "target_unavailable" ||
@@ -1681,12 +1777,36 @@ export function isValidCapabilityIdentifier(identifier) {
     const numericVersion = Number(version);
     return Number.isSafeInteger(numericVersion) && numericVersion >= 1 && numericVersion <= 0xffff_ffff;
 }
-function routeCacheKey(target, identity, consumerIdentity, consumerCapabilities) {
+function routeCacheKey(target, identity, consumerIdentity, consumerCapabilities, scope) {
     const consumerPart = consumerIdentity
         ? `${consumerIdentity.module_id}\0${consumerIdentity.launch_nonce}`
         : "";
     const capabilitiesPart = [...consumerCapabilities].sort().join("\0");
-    return `${target.kind}\0${target.module_id}\0${identity.project_root}\0${identity.harness}\0${identity.session}\0${consumerPart}\0${capabilitiesPart}`;
+    // A JSON tuple keeps opaque refs (including embedded separators) distinct.
+    const scopePart = scope
+        ? JSON.stringify([scope.owner.kind, scope.owner.kind === "reserved" ? scope.owner.module_id : null, scope.ref, scope.scopeEpoch])
+        : "";
+    return `${target.kind}\0${target.module_id}\0${identity.project_root}\0${identity.harness}\0${identity.session}\0${consumerPart}\0${capabilitiesPart}\0${scopePart}`;
+}
+/** Validate before any route-open I/O, and snapshot caller-owned mutable values for reopens. */
+function validatedRouteScope(scope) {
+    if (scope === undefined)
+        return undefined;
+    if (!scope || typeof scope.owner !== "object" || !scope.owner ||
+        !["reserved", "direct", "unverified"].includes(scope.owner.kind) ||
+        (scope.owner.kind === "reserved" && (typeof scope.owner.module_id !== "string" || scope.owner.module_id.length === 0))) {
+        throw new SubcError("scope.owner must be a Principal with a non-empty reserved module_id", "invalid_scope");
+    }
+    if (typeof scope.ref !== "string" || scope.ref.length === 0) {
+        throw new SubcError("scope.ref must be a non-empty string", "invalid_scope");
+    }
+    if (scope.scopeEpoch === undefined) {
+        throw new SubcError("scope.scopeEpoch is required", "scope_epoch_required");
+    }
+    if (!Number.isSafeInteger(scope.scopeEpoch) || scope.scopeEpoch < 0) {
+        throw new SubcError("scope.scopeEpoch must be a safe non-negative integer", "invalid_scope");
+    }
+    return { owner: { ...scope.owner }, ref: scope.ref, scopeEpoch: scope.scopeEpoch };
 }
 function routeOpenConsumerIdentity(opts = {}) {
     if (opts.consumerIdentity !== undefined)