@cosyte/mllp 0.0.1 → 0.0.3

package/dist/index.mjs

@@ -25,13 +25,13 @@ var MllpFramingError = class _MllpFramingError extends Error {
   /**
    * Up to 64 bytes copied from around the anomaly.
    *
-   * This is a **copied** Buffer — isolated from the source buffer so it remains
+   * This is a **copied** Buffer, isolated from the source buffer so it remains
    * valid after the underlying buffer is reused or overwritten.
    *
-   * **PHI contract (MLLP-9):** the decoder only ever populates this with the single
+   * **PHI contract:** the decoder only ever populates this with the single
    * framing-boundary byte that violated the frame structure (whose hex value the
-   * `message` already discloses) — never a run of payload content bytes. For anomalies
-   * whose fault is not a specific byte (`MLLP_FRAME_TOO_LARGE` — the accumulated size),
+   * `message` already discloses), never a run of payload content bytes. For anomalies
+   * whose fault is not a specific byte (`MLLP_FRAME_TOO_LARGE`, the accumulated size),
    * the snippet is **empty**: a payload slice on a public error field would leak a
    * field-body slice of clinical content. Callers constructing this directly are
    * responsible for the same discipline.
@@ -104,19 +104,19 @@ var FrameReader = class {
   _opts;
   _maxFrameSize;
   _state = "SCANNING_FOR_VT";
-  /** Reusable accumulator buffer — grown by doubling as needed. */
+  /** Reusable accumulator buffer, grown by doubling as needed. */
   _accumulator = Buffer.allocUnsafe(INITIAL_ACCUMULATOR_SIZE);
   /** Number of payload bytes written to accumulator in current frame. */
   _writePos = 0;
   /** Monotonic absolute stream byte offset across the entire connection lifetime. */
   _byteOffset = 0;
-  /** Byte offset where current leading-whitespace run started (FRAME-10). */
+  /** Byte offset where current leading-whitespace run started. */
   _wsStart = 0;
-  /** Count of leading whitespace bytes accumulated in current run (FRAME-10). */
+  /** Count of leading whitespace bytes accumulated in current run. */
   _wsCount = 0;
   /** Byte offset of the VT byte that started the current frame. */
   _frameStartOffset = 0;
-  /** Per-frame warning accumulator — cleared after each _deliverFrame(). */
+  /** Per-frame warning accumulator, cleared after each _deliverFrame(). */
   _frameWarnings = [];
   /**
    * Construct a chunked MLLP frame reader.
@@ -147,7 +147,7 @@ var FrameReader = class {
   /**
    * Clear internal accumulator state and reset byte offset to 0.
    *
-   * Call on reconnect / connection reuse to start fresh without allocating a new reader (D-03).
+   * Call on reconnect / connection reuse to start fresh without allocating a new reader.
    * Pending partial frame state is discarded silently.
    *
    * @example
@@ -240,7 +240,7 @@ var FrameReader = class {
       this._emitWarning(
         "MLLP_MISSING_LEADING_VT",
         this._byteOffset,
-        `Missing leading VT (0x0B) \u2014 treating byte 0x${byte.toString(16).padStart(2, "0")} at offset ${this._byteOffset} as payload start`
+        `Missing leading VT (0x0B), treating byte 0x${byte.toString(16).padStart(2, "0")} at offset ${this._byteOffset} as payload start`
       );
       this._frameStartOffset = this._byteOffset;
       this._state = "READING_PAYLOAD";
@@ -388,7 +388,7 @@ var FrameReader = class {
   }
   /**
    * Copy accumulated payload bytes into a new Buffer and deliver via `onFrame`.
-   * The copy isolates callers from internal accumulator reuse (T-02-03-03).
+   * The copy isolates callers from internal accumulator reuse.
    */
   _deliverFrame() {
     const payload = Buffer.from(this._accumulator.subarray(0, this._writePos));
@@ -398,7 +398,7 @@ var FrameReader = class {
     this._frameWarnings = [];
     this._opts.onFrame(payload, frameStart, frameWarnings);
   }
-  /** Emit a warning via the `onWarning` callback, swallowing any handler exceptions (WARN-06). */
+  /** Emit a warning via the `onWarning` callback, swallowing any handler exceptions. */
   _emitWarning(code, byteOffset, message) {
     const warning = createWarning(code, byteOffset, message);
     this._frameWarnings.push(warning);
@@ -485,8 +485,8 @@ var TlsTransport = class {
     this._socket.on("data", fn);
   }
   /**
-   * See {@link Transport.onConnect}. Armed on `'secureConnect'` — the TLS
-   * handshake-complete event — not the raw TCP `'connect'` event.
+   * See {@link Transport.onConnect}. Armed on `'secureConnect'`, the TLS
+   * handshake-complete event, not the raw TCP `'connect'` event.
    */
   onConnect(fn) {
     this._socket.removeAllListeners("secureConnect");
@@ -552,7 +552,7 @@ var LEGAL_TRANSITIONS = /* @__PURE__ */ new Map([
   ["CLOSED", /* @__PURE__ */ new Set()]
 ]);
 var Connection = class extends EventEmitter {
-  /** Stable UUIDv4 identifier for this connection (D-11). */
+  /** Stable UUIDv4 identifier for this connection. */
   connectionId;
   _state = "CONNECTING";
   _transport;
@@ -565,20 +565,19 @@ var Connection = class extends EventEmitter {
   _bytesOut = 0;
   _lastByteInAt = null;
   _lastByteOutAt = null;
-  /** Ring buffer: last MAX_WARNINGS entries (OBS-05). */
+  /** Ring buffer: last MAX_WARNINGS entries. */
   _warningBuffer = [];
-  /** Accurate total counts per code — unaffected by ring buffer truncation (OBS-05). */
+  /** Accurate total counts per code, unaffected by ring buffer truncation. */
   _warningsByCode = /* @__PURE__ */ new Map();
-  /** Set to true once the ring buffer overflows (OBS-05). */
+  /** Set to true once the ring buffer overflows. */
   _warningsTruncated = false;
   _onWarningFn = null;
   _drainPromise = null;
   /**
-   * beforeClose hook — no-op default that resolves immediately.
+   * beforeClose hook, no-op default that resolves immediately.
    *
-   * Phase 4 (Server) and Phase 5 (Client) override this instance property to
-   * register ACK-drain and send-queue drain logic respectively (D-07/D-08).
-   * Connection calls this during `close()`, racing against `drainTimeoutMs`.
+   * An owner may replace this instance property to run work before the socket
+   * closes. Connection calls it during `close()`, racing against `drainTimeoutMs`.
    */
   beforeClose = () => Promise.resolve();
   /**
@@ -625,7 +624,7 @@ var Connection = class extends EventEmitter {
     });
   }
   /**
-   * Current FSM state. One of the 6 `ConnectionState` values (LIFE-01).
+   * Current FSM state. One of the 6 `ConnectionState` values.
    *
    * Subscribe to `'stateChange'` events for reactive state monitoring.
    */
@@ -633,10 +632,10 @@ var Connection = class extends EventEmitter {
     return this._state;
   }
   /**
-   * Register or replace the per-connection warning subscriber (WARN-10).
+   * Register or replace the per-connection warning subscriber.
    *
    * Subsequent calls replace the previous handler (set-once semantics prevent leaks).
-   * The handler is called synchronously and any exception it throws is swallowed (WARN-06).
+   * The handler is called synchronously and any exception it throws is swallowed.
    *
    * @example
    * ```typescript
@@ -674,7 +673,7 @@ var Connection = class extends EventEmitter {
   /**
    * Write raw bytes to the transport (no framing applied).
    *
-   * Phase 4 (Server) and Phase 5 (Client) wrap this with `encodeFrame()` to add MLLP framing.
+   * The server and the client wrap this with `encodeFrame()` to add MLLP framing.
    * Returns `false` if the connection is CLOSED or DISCONNECTED (no bytes written).
    *
    * @returns `true` if bytes flushed immediately; `false` if buffered (backpressure) or not writable.
@@ -696,7 +695,7 @@ var Connection = class extends EventEmitter {
    * Initiate graceful close of the connection.
    *
    * - If `CONNECTING` or `RECONNECTING`: cancels the pending attempt, transitions
-   *   directly to `CLOSED`, and calls `transport.destroy()` (LIFE-05).
+   *   directly to `CLOSED`, and calls `transport.destroy()`.
    * - If `CONNECTED`: transitions to `DRAINING`, calls `beforeClose(drainTimeoutMs)`,
    *   then `DRAINING → DISCONNECTED` once the hook resolves, or `DRAINING → CLOSED`
    *   if the drain timeout elapses first.
@@ -731,7 +730,7 @@ var Connection = class extends EventEmitter {
    * Race `beforeClose()` against the drain timeout.
    *
    * On normal completion: `DRAINING → DISCONNECTED` + `transport.close()`.
-   * On timeout: `DRAINING → CLOSED` + `transport.destroy()` (T-03-04-01).
+   * On timeout: `DRAINING → CLOSED` + `transport.destroy()`.
    */
   async _drainWithTimeout(timeoutMs) {
     const drainPromise = this.beforeClose(timeoutMs);
@@ -758,7 +757,7 @@ var Connection = class extends EventEmitter {
    * Abruptly destroy the connection, discarding any pending writes.
    *
    * Transitions from any non-terminal state directly to `CLOSED` and calls
-   * `transport.destroy(reason)`. Emits `'close'` event. Idempotent — safe to
+   * `transport.destroy(reason)`. Emits `'close'` event. Idempotent, safe to
    * call multiple times.
    *
    * @param reason - Optional error to propagate to the transport.
@@ -774,7 +773,7 @@ var Connection = class extends EventEmitter {
     this._transport.destroy(reason);
   }
   /**
-   * Return a JSON-serializable observability snapshot (OBS-03/04/05).
+   * Return a JSON-serializable observability snapshot.
    *
    * All timestamp fields are `Date | null` (not epoch milliseconds). `JSON.stringify()`
    * serialises them to ISO 8601 strings with no information loss.
@@ -858,12 +857,12 @@ var Connection = class extends EventEmitter {
    * Node throws `ERR_UNHANDLED_ERROR` when `'error'` is emitted on an `EventEmitter` with no
    * listener. Every `'error'` emission in this class is reached from inside a transport callback
    * (the socket's `'data'`/`'error'` listener), so an unguarded emit would become an **uncaught
-   * exception that kills the process** — the exact failure the containment above exists to
+   * exception that kills the process**, the exact failure the containment above exists to
    * prevent, merely relocated one frame up the stack.
    *
    * `Connection` is a public export and can legitimately be driven with no `'error'` listener
    * (`MllpServer` and `MllpClient` each attach one; a bare `Connection` need not). The connection
-   * is still torn down and `'stateChange'`/`'close'` still fire, so a caller is never blind —
+   * is still torn down and `'stateChange'`/`'close'` still fire, so a caller is never blind,
    * they simply do not get the typed error object they never asked for. Mirrors
    * `MllpServer._emitErrorIfListened`.
    */
@@ -882,7 +881,7 @@ var Connection = class extends EventEmitter {
    * consumers keep the stable `code` and `byteOffset`), then **destroy this connection only**.
    *
    * Why destroy rather than resynchronize: once `push` has thrown, the reader's position within
-   * the byte stream is no longer trustworthy — the next bytes could be the middle of a message.
+   * the byte stream is no longer trustworthy, the next bytes could be the middle of a message.
    * Guessing where the next frame starts is how a clinical message gets silently mis-split, so
    * the connection is dropped instead. A server drops that one peer and keeps serving everyone
    * else.
@@ -894,7 +893,7 @@ var Connection = class extends EventEmitter {
    * engine that is already unwell. A compatibility failure is not a network blip.
    *
    * If a peer's quirk is *expected* (trailing junk, keepalive bytes, a missing leading VT), the
-   * decoder's tolerance opt-ins are the supported answer — they turn the throw into a warning.
+   * decoder's tolerance opt-ins are the supported answer, they turn the throw into a warning.
    */
   _onFatalFramingError(err) {
     if (this._state === "CLOSED") return;
@@ -908,13 +907,13 @@ var Connection = class extends EventEmitter {
     this.destroy(err);
   }
   /**
-   * Backstop for a NON-framing throw escaping `FrameReader.push` — i.e. our own bug, or a
+   * Backstop for a NON-framing throw escaping `FrameReader.push`, i.e. our own bug, or a
    * subscriber's, rather than the peer's bytes.
    *
    * `_onFrameDecoded` already contains subscriber throws at the dispatch site, so this should be
    * unreachable. It exists because "unreachable" and "cannot kill the process from inside a
    * socket `'data'` handler" are different claims, and only the second one is safe to bet a
-   * clinical interface on. Reported honestly as an internal receive error — never dressed up as
+   * clinical interface on. Reported honestly as an internal receive error, never dressed up as
    * a peer framing fault.
    */
   _onInternalReceiveError(err) {
@@ -990,9 +989,9 @@ var UNSAFE_FIELD_SEPARATORS = /* @__PURE__ */ new Set([
   SEGMENT_SEPARATOR_CR,
   SEGMENT_SEPARATOR_LF,
   11,
-  // VT — MLLP start block
+  // VT, MLLP start block
   28
-  // FS — MLLP end block
+  // FS, MLLP end block
 ]);
 function isMshSegmentAt(buf, i) {
   return i + 3 < buf.length && buf[i] === ASCII_M && buf[i + 1] === ASCII_S && buf[i + 2] === ASCII_H && !UNSAFE_FIELD_SEPARATORS.has(buf[i + 3]);
@@ -1225,13 +1224,13 @@ var MllpServer = class extends EventEmitter {
   _netServer;
   _connections = /* @__PURE__ */ new Set();
   _opts;
-  /** `true` when `ServerOptions.tls` is set — `_netServer` is actually a `tls.Server`. */
+  /** `true` when `ServerOptions.tls` is set, `_netServer` is actually a `tls.Server`. */
   _isTls;
   _listening = false;
-  /** Phase 8 — single-flight guard: `true` while a `listen()` call is settling. */
+  /** Single-flight guard: `true` while a `listen()` call is settling. */
   _listenInFlight = false;
   /**
-   * Phase 8 — settle hook for an in-flight `listen()`. Non-null only while a
+   * Settle hook for an in-flight `listen()`. Non-null only while a
    * `listen()` is in flight; invoked by `close()` so a close racing startup
    * rejects the pending `listen()` (typed) instead of leaving it hung with
    * the single-flight guard stuck. Cleared on every settle path.
@@ -1241,7 +1240,7 @@ var MllpServer = class extends EventEmitter {
   _host = null;
   _acceptedTotal = 0;
   _closedTotal = 0;
-  /** Phase 8 — count of `'tlsClientError'` events since listen(). */
+  /** Count of `'tlsClientError'` events since listen(). */
   _tlsClientErrorsTotal = 0;
   /**
    * Construct an MLLP server. Created idle; call `listen()` (or use
@@ -1304,23 +1303,23 @@ var MllpServer = class extends EventEmitter {
    * `Object.freeze({ port: actualPort, host: actualHost })`.
    *
    * **Single-flight:** one `listen()` per server lifecycle at a time. A call
-   * while the server is already listening — or while another `listen()` is
-   * still in flight — rejects with a typed `MllpConnectionError` (concurrent
+   * while the server is already listening, or while another `listen()` is
+   * still in flight, rejects with a typed `MllpConnectionError` (concurrent
    * binds raced each other's post-bind safety checks). Call `close()` before
    * re-listening; sequential `listen()` → `close()` → `listen()` is fine.
    *
    * **`close()` during an in-flight `listen()`** rejects that `listen()` with
    * a typed `MllpConnectionError` (never a hang) and clears the single-flight
-   * guard — a subsequent `listen()` on the same server works. This makes
+   * guard, a subsequent `listen()` on the same server works. This makes
    * `Symbol.asyncDispose` (which delegates to `close()`) safe even before a
    * `listen()` has settled. (Exception: `close({ signal })` with an
-   * already-aborted signal is a no-op AbortError rejection — the in-flight
+   * already-aborted signal is a no-op AbortError rejection, the in-flight
    * `listen()` is left to settle on its own bind outcome; see `close()`.)
    *
    * @param port - TCP port to bind. Use `0` to let the OS assign an ephemeral port.
    * @param hostOrOpts - Host string or object with `host` and optional `signal`.
-   *   Default host: `'127.0.0.1'` (Phase 8 bind-safety hardening). Wildcard hosts
-   *   are rejected unless `ServerOptions.allowWildcardBind: true` — literal
+   *   Default host: `'127.0.0.1'` (bind-safety hardening). Wildcard hosts
+   *   are rejected unless `ServerOptions.allowWildcardBind: true`, literal
    *   spellings pre-bind, resolver-only shorthands post-bind via the
    *   OS-normalized bound address.
    *
@@ -1340,7 +1339,7 @@ var MllpServer = class extends EventEmitter {
     if (this._listening || this._listenInFlight) {
       return Promise.reject(
         new MllpConnectionError(
-          this._listening ? "listen() rejected: server is already listening \u2014 call close() before re-listening" : "listen() rejected: another listen() is already in flight on this server",
+          this._listening ? "listen() rejected: server is already listening, call close() before re-listening" : "listen() rejected: another listen() is already in flight on this server",
           {
             cause: new Error("listen already listening or in flight"),
             phase: "connect"
@@ -1351,7 +1350,7 @@ var MllpServer = class extends EventEmitter {
     if (isWildcardHost(host) && this._opts.allowWildcardBind !== true) {
       return Promise.reject(
         new MllpConnectionError(
-          `refusing to bind wildcard host '${host}' \u2014 set ServerOptions.allowWildcardBind: true to bind all interfaces`,
+          `refusing to bind wildcard host '${host}', set ServerOptions.allowWildcardBind: true to bind all interfaces`,
           {
             cause: new Error("wildcard bind requires allowWildcardBind"),
             phase: "connect"
@@ -1430,7 +1429,7 @@ var MllpServer = class extends EventEmitter {
             {
               ok: false,
               error: new MllpConnectionError(
-                `refusing to bind wildcard host '${host}' (bound address '${actualHost}') \u2014 set ServerOptions.allowWildcardBind: true to bind all interfaces`,
+                `refusing to bind wildcard host '${host}' (bound address '${actualHost}'), set ServerOptions.allowWildcardBind: true to bind all interfaces`,
                 {
                   cause: new Error("wildcard bind requires allowWildcardBind"),
                   phase: "connect"
@@ -1457,7 +1456,7 @@ var MllpServer = class extends EventEmitter {
           }
         };
         const wildcardBound = isWildcardHost(actualHost);
-        const wildcardMessage = `MLLP server is bound to ALL network interfaces (host='${actualHost}') \u2014 set a specific bind address unless this is intentional.`;
+        const wildcardMessage = `MLLP server is bound to ALL network interfaces (host='${actualHost}'), set a specific bind address unless this is intentional.`;
         if (wildcardBound) {
           process.emitWarning(wildcardMessage, { code: MLLP_BIND_ALL_INTERFACES });
         }
@@ -1485,19 +1484,19 @@ var MllpServer = class extends EventEmitter {
   /**
    * Stop accepting new connections and gracefully close all active connections.
    *
-   * Sequence (D-06):
-   * 1. `net.Server.close()` — stops accepting new connections immediately
+   * Sequence:
+   * 1. `net.Server.close()`, stops accepting new connections immediately
    * 2. If `_connections` is empty: resolves immediately (no drain needed)
-   * 3. Calls `_drainAll(drainTimeoutMs)` — Promise.all + side-effect setTimeout
+   * 3. Calls `_drainAll(drainTimeoutMs)`, Promise.all + side-effect setTimeout
    *    that force-destroys stragglers after the drain window
    *
    * Calling `close()` while a `listen()` is still in flight proactively
    * settles that `listen()` with a typed `MllpConnectionError` rejection
-   * and clears the single-flight guard — the server is immediately
+   * and clears the single-flight guard, the server is immediately
    * re-listenable. `Symbol.asyncDispose` (which delegates here) is
    * therefore safe before `listen()` settles. **Qualification:** a
    * `close({ signal })` whose signal is **already aborted** rejects
-   * immediately with `AbortError` and performs no work — it does NOT close
+   * immediately with `AbortError` and performs no work, it does NOT close
    * the server and does NOT settle the in-flight `listen()`, which simply
    * continues and settles on its own bind outcome.
    *
@@ -1549,7 +1548,7 @@ var MllpServer = class extends EventEmitter {
   /**
    * Drain all active connections with a shared timeout.
    *
-   * Uses Promise.all (not Promise.race) for coordination — the timeout is a
+   * Uses Promise.all (not Promise.race) for coordination, the timeout is a
    * side effect that calls `conn.destroy()` on stragglers after `drainTimeoutMs`.
    * Promise.all resolves when all `conn.close()` promises settle (which happens
    * because `conn.destroy()` transitions connections to CLOSED).
@@ -1572,7 +1571,7 @@ var MllpServer = class extends EventEmitter {
     }
   }
   /**
-   * Async disposal — delegates to `close()` for `await using` support.
+   * Async disposal, delegates to `close()` for `await using` support.
    *
    * @example
    * ```typescript
@@ -1585,10 +1584,9 @@ var MllpServer = class extends EventEmitter {
     return this.close();
   }
   /**
-   * Return a JSON-serializable observability snapshot (OBS-02).
+   * Return a JSON-serializable observability snapshot.
    *
    * `totalBytesIn` and `totalBytesOut` aggregate from live connections at call time.
-   * Plan 04 adds full aggregation; at Plan 01 scope they return 0.
    *
    * @example
    * ```typescript
@@ -1619,7 +1617,7 @@ var MllpServer = class extends EventEmitter {
     };
   }
   /**
-   * Emit on `'error'` only when a listener is attached — an unlistened
+   * Emit on `'error'` only when a listener is attached, an unlistened
    * `EventEmitter` `'error'` emission throws (see the class JSDoc error
    * contract). The single guard shared by the optional-tap forwarding sites
    * in this class; the constructor's net.Server forwarder deliberately does
@@ -1629,7 +1627,7 @@ var MllpServer = class extends EventEmitter {
   /**
    * Emit a server event, containing a throwing subscriber.
    *
-   * Every event this server emits is reachable from a callback we do not own — the `net.Server`
+   * Every event this server emits is reachable from a callback we do not own, the `net.Server`
    * `'connection'` listener, the `tls.Server` `'tlsClientError'` listener, a socket's `'data'`
    * listener (via `Connection`), or the `catch` block of a `void`-ed async ACK task. A throwing
    * subscriber would therefore unwind into that callback and kill the process (or reject a void-ed
@@ -1734,8 +1732,8 @@ var MllpServer = class extends EventEmitter {
     );
   }
   /**
-   * Extract a minimal, content-free peer-certificate summary (Phase 8, ATNA
-   * ITI-19 mutual authentication) — CN strings, expiry, and the verification
+   * Extract a minimal, content-free peer-certificate summary (ATNA ITI-19
+   * mutual authentication), CN strings, expiry, and the verification
    * outcome (`authorized`) only; never the full certificate object. Returns
    * `null` when no peer certificate was presented (e.g. `clientAuth: 'WANT'`
    * with no client cert).
@@ -1753,7 +1751,7 @@ var MllpServer = class extends EventEmitter {
       subjectCN: asCn(cert.subject?.CN),
       issuerCN: asCn(cert.issuer?.CN),
       validTo: cert.valid_to ?? null,
-      // Verification outcome — under 'WANT' a certificate can be present yet
+      // Verification outcome, under 'WANT' a certificate can be present yet
       // UNVERIFIED (see PeerCertificateSummary.authorized JSDoc).
       authorized: socket.authorized === true
     });
@@ -1765,12 +1763,12 @@ var MllpServer = class extends EventEmitter {
    * then dispatches: resolve ⇒ `AA`; throw/reject ⇒ a negative ACK (`AE` by default,
    * `AR` via {@link MllpAckError}). A positive ACK can never precede a successful commit.
    *
-   * Without an `onMessage` handler, `'AA'` degrades to a **transport-accept** — `AA`
+   * Without an `onMessage` handler, `'AA'` degrades to a **transport-accept**, `AA`
    * meaning "bytes received and framed", not "application-processed".
    *
    * A handler failure is **expected flow**, not a server error: it produces a negative
    * ACK and a `'nack'` event. The thrown error's message is never placed on the wire or
-   * in the event (it may carry PHI) — only the static `ackCode` and the inbound control
+   * in the event (it may carry PHI), only the static `ackCode` and the inbound control
    * metadata reach the peer.
    */
   async _sendCommitAck(payload, meta, conn) {
@@ -1802,18 +1800,18 @@ var MllpServer = class extends EventEmitter {
   }
   /**
    * Resolve the auto-ACK code for a message the server would otherwise acknowledge
-   * **positively** (`AA`) — the no-handler transport-accept and the post-commit success
+   * **positively** (`AA`), the no-handler transport-accept and the post-commit success
    * paths. Fail-safe: downgrade to `AE` and emit a PHI-safe `'nack'` whenever the message
    * cannot carry a correlatable positive ACK, so `AA` never names a control ID the sender
    * cannot match (→ timeout → resend → **duplicate clinical message**).
    *
    * Two independent disqualifiers, one from the bytes and one from the frame:
    *
-   *   - **`rawAckUncorrelatable(payload)`** — no readable `MSH`, an empty MSH-10, or a
+   *   - **`rawAckUncorrelatable(payload)`**, no readable `MSH`, an empty MSH-10, or a
    *     batch/concatenated-message shape. This is the SAME predicate `buildRawAck` enforces
    *     on the wire; it is re-checked here so the downgrade is **observable** (a `'nack'`
    *     event) rather than a silent code change inside the builder.
-   *   - **`MLLP_TRAILING_BYTES`** in the frame's warnings — a mid-payload `VT` made the
+   *   - **`MLLP_TRAILING_BYTES`** in the frame's warnings, a mid-payload `VT` made the
    *     decoder discard accumulated bytes and deliver only the fragment after it. The
    *     clinical message was destroyed in transit, so even a fragment that happens to carry
    *     a readable MSH must not be positively acknowledged. This condition is invisible to
@@ -1822,7 +1820,7 @@ var MllpServer = class extends EventEmitter {
    *     accumulating the delivered frame, so it is frame-scoped: it names *this* payload's own
    *     discard, never a neighbouring frame's trailing junk.
    *
-   * `'discarded-bytes'` takes precedence in the reason when both hold — it is the root cause.
+   * `'discarded-bytes'` takes precedence in the reason when both hold, it is the root cause.
    */
   _resolveAutoAckPositive(payload, meta, conn) {
     const discarded = meta.warnings.some((w) => w.code === "MLLP_TRAILING_BYTES");
@@ -1843,7 +1841,7 @@ var MllpServer = class extends EventEmitter {
    * Run `onMessage` for its side effects only (custom-ACK and manual modes), guarding
    * against a synchronous throw or a rejected promise. In these modes the handler does
    * **not** gate the ACK, so a failure is re-emitted as a PHI-safe `'error'` on the
-   * connection (D-04: a handler error never crashes the server) rather than escaping as
+   * connection (a handler error never crashes the server) rather than escaping as
    * an unhandled rejection. The error text is never placed on the wire.
    */
   _observeMessage(payload, meta, conn) {
@@ -1857,7 +1855,7 @@ var MllpServer = class extends EventEmitter {
   /**
    * The custom-builder path for `autoAck: fn`. Awaits the builder and dispatches its
    * Buffer as the ACK; the caller owns MSA-1. A builder error is re-emitted as `'error'`
-   * on the connection — the server never crashes (D-04).
+   * on the connection, the server never crashes.
    */
   async _sendCustomAck(fn, payload, meta, conn) {
     try {
@@ -1871,7 +1869,7 @@ var MllpServer = class extends EventEmitter {
   /**
    * Frame an ACK payload and write it to the connection. `Connection.send()` returns
    * `false` under backpressure (socket write buffer full); that drops the ACK and emits
-   * a `MllpConnectionError({ phase: 'send' })` on the connection (D-04) — the peer will
+   * a `MllpConnectionError({ phase: 'send' })` on the connection, the peer will
    * time out waiting and may retry. The server never crashes.
    */
   _dispatchAck(conn, ackPayload) {
@@ -1936,7 +1934,7 @@ var Correlator = class {
   _sendSeq = 0;
   _queueBytes = 0;
   /**
-   * PLAN-06 — count of pending entries with `sentAt !== null` (D-26 / B-01).
+   * Count of pending entries with `sentAt !== null`.
    * Maintained at every site that mutates `entry.sentAt` or removes a
    * flushed entry: `markFlushed`, `remove`, `matchAck`, `expireDue`, `clear`.
    */
@@ -1972,7 +1970,7 @@ var Correlator = class {
   /**
    * Enqueue a new send awaiting its ACK. Returns the assigned
    * `correlationKey`, or `null` if `maxInFlight` is reached (caller awaits
-   * drain — PLAN-05's `pipeline:false`).
+   * drain, `pipeline:false`).
    */
   enqueue(frame, controlIdOrNull, resolve, reject) {
     if (this._pending.size >= this._opts.maxInFlight) return null;
@@ -1991,7 +1989,7 @@ var Correlator = class {
     return key;
   }
   /**
-   * Record write-flush timestamp (CLIENT-04 — clock starts at flush, NOT
+   * Record write-flush timestamp (the clock starts at flush, NOT
    * at `send()` call). No-op if key is unknown (e.g. removed by abort).
    */
   markFlushed(key, now) {
@@ -2007,16 +2005,16 @@ var Correlator = class {
    *   removed from live store. Caller calls `entry.resolve(ackPayload)`.
    * - controlId: keyed lookup by `controlIdFromAck`. Live-store hit returns
    *   the entry; graveyard hit fires `MLLP_ACK_AFTER_TIMEOUT` warning
-   *   (CLIENT-16, D-04) and returns `null`; otherwise fires
-   *   `onUnmatchedAck(controlIdFromAck)` (CLIENT-15, D-05) and returns `null`.
+   *   and returns `null`; otherwise fires
+   *   `onUnmatchedAck(controlIdFromAck)` and returns `null`.
    *
-   * Triggers lazy graveyard eviction (D-04).
+   * Triggers lazy graveyard eviction.
    *
    * @param _payload Inbound ACK bytes (framing stripped). MSA-2 extraction
    *   happens at MllpClient's `_onAckPayload` hook; this method takes the
    *   already-extracted control ID as a parameter.
    * @param controlIdFromAck MSA-2 extracted from ACK (controlId mode only).
-   * @param byteOffsetFromAck Stream offset; forwarded to `onWarning` (W-05).
+   * @param byteOffsetFromAck Stream offset; forwarded to `onWarning`.
    */
   matchAck(_payload, controlIdFromAck = null, byteOffsetFromAck = 0) {
     this._evictGraveyardDue(this._opts.now());
@@ -2060,9 +2058,9 @@ var Correlator = class {
   }
   /**
    * Sweep live entries; expire those past `sentAt + ackTimeoutMs`.
-   * Fires `onTimeout(entry, elapsedMs)`; entries move to graveyard (D-04).
-   * Driven externally by `MllpClient`'s periodic sweep tick — Correlator
-   * itself owns no timers (D-03).
+   * Fires `onTimeout(entry, elapsedMs)`; entries move to graveyard.
+   * Driven externally by `MllpClient`'s periodic sweep tick, Correlator
+   * itself owns no timers.
    */
   expireDue(now) {
     const t = now ?? this._opts.now();
@@ -2084,8 +2082,7 @@ var Correlator = class {
   /**
    * Reject every live entry with `reason` (insertion order) and clear
    * the live store. Graveyard is left intact (ages out via lazy eviction).
-   * Used by FIFO reconnect-reject (D-07 — PLAN-04 wraps in MllpConnectionError)
-   * and `MllpClient.close()` to cancel pending sends.
+   * Used by `MllpClient`'s correlator teardown to cancel pending sends.
    */
   clear(reason) {
     for (const entry of this._pending.values()) entry.reject(reason);
@@ -2093,14 +2090,14 @@ var Correlator = class {
     this._queueBytes = 0;
     this._inFlight = 0;
   }
-  /** Iterate live entries in insertion order (PLAN-04 reconnect-resend, D-07). */
+  /** Iterate live entries in insertion order (reconnect-resend). */
   *liveEntries() {
     for (const entry of this._pending.values()) yield entry;
   }
   /**
    * Remove a live entry by key WITHOUT resolving/rejecting. Returns the
    * removed entry, or `null` if no entry with that key exists.
-   * Used by `MllpClient.send()` for AbortSignal cleanup and PLAN-04's
+   * Used by `MllpClient.send()` for AbortSignal cleanup and by the
    * reconnect-reject FSM walk.
    */
   remove(key) {
@@ -2121,7 +2118,7 @@ var Correlator = class {
       inFlight: this._inFlight
     };
   }
-  /** Lazy graveyard eviction (D-04): drop entries past `timedOutAt + 2 * ackTimeoutMs`. */
+  /** Lazy graveyard eviction: drop entries past `timedOutAt + 2 * ackTimeoutMs`. */
   _evictGraveyardDue(now) {
     const threshold = 2 * this._opts.ackTimeoutMs;
     for (const [key, entry] of this._graveyard) {
@@ -2214,7 +2211,7 @@ var MllpBackpressureError = class _MllpBackpressureError extends Error {
   queueDepth;
   /** Total bytes of in-flight + queued frames at the moment of rejection. */
   queueBytes;
-  /** The high-water-mark configuration that was triggered (D-23). */
+  /** The high-water-mark configuration that was triggered. */
   highWaterMark;
   /**
    * Construct an MLLP backpressure error.
@@ -2244,15 +2241,15 @@ var MllpClient = class extends EventEmitter {
    * is attached, `state` mirrors `_connection.state`.
    */
   _state = "DISCONNECTED";
-  /** Per-message ACK timeout in ms (CLIENT-04). Resolved at construction. */
+  /** Per-message ACK timeout in ms. Resolved at construction. */
   _ackTimeoutMs;
-  /** controlId-mode flag (CLIENT-03 branch). `false` → FIFO. */
+  /** controlId-mode flag. `false` → FIFO. */
   _correlateByControlId;
-  /** Unified ACK correlator (D-03/A1). Built during `_attachConnection`. */
+  /** Unified ACK correlator. Built during `_attachConnection`. */
   _correlator = null;
   /**
    * Periodic ACK-timeout sweep timer. Drives `_correlator.expireDue()` because
-   * the Correlator is timer-free per D-03. Cleared on close/destroy.
+   * the Correlator is timer-free. Cleared on close/destroy.
    */
   _ackSweepTimer = null;
   // ── Reconnect state (Plan 04, CLIENT-05/06/12/17/18) ─────────────────────
@@ -2265,12 +2262,12 @@ var MllpClient = class extends EventEmitter {
   /** 0-indexed attempt counter for the current reconnect cycle. */
   _attempt = 0;
   /**
-   * W-02 — total reconnect attempts since construction. Read by PLAN-06 for
+   * Total reconnect attempts since construction, surfaced as
    * `getStats().reconnectAttempts`. Incremented at the entry of every
    * `_handleDisconnect` invocation that proceeds to schedule a backoff.
    */
   _reconnectAttempts = 0;
-  /** Epoch ms of the last successful ACK. Drives W-01 backoff-reset. */
+  /** Epoch ms of the last successful ACK. Drives backoff-reset. */
   _lastSuccessAt = null;
   /** Epoch ms when the current reconnect cycle began. `null` outside a cycle. */
   _reconnectCycleStartedAt = null;
@@ -2287,12 +2284,12 @@ var MllpClient = class extends EventEmitter {
   _onBackpressure;
   /** Pipeline flag; default `true` (parallel up to highWaterMark). */
   _pipeline;
-  /** Dead-peer idle timer (Plan 05 — D-11). `null` when not armed. */
+  /** Dead-peer idle timer. `null` when not armed. */
   _deadPeerTimer = null;
   /** True once the self-'ack' listener that resets the dead-peer timer
    * has been attached. Guards against duplicate listeners on reconnect. */
   _ackResetWired = false;
-  /** Most recently bound `connect()` signal. Reread on every RetryContext build (W-07). */
+  /** Most recently bound `connect()` signal. Reread on every RetryContext build. */
   _connectSignal;
   /** Set when close()/destroy()/abort fires; reconnect handler short-circuits. */
   _userClosed = false;
@@ -2301,13 +2298,13 @@ var MllpClient = class extends EventEmitter {
   /** Listener-removal handle for the abort listener bound in connect(). */
   _abortListener = null;
   /**
-   * Test-only seam — when set, `_beginReconnectAttempt` builds the new
+   * Test-only seam, when set, `_beginReconnectAttempt` builds the new
    * Connection through this factory instead of opening a real net.Socket.
    *
    * @internal
    */
   _reconnectFactory = null;
-  // ── PLAN-06 — observability counters for getStats (OBS-01, D-26) ─────────
+  // ── PLAN-06, observability counters for getStats (OBS-01, D-26) ─────────
   /** Total successful `conn.send()` flushes since construction. */
   _sentTotal = 0;
   /** Total ACKs resolved since construction. */
@@ -2321,7 +2318,7 @@ var MllpClient = class extends EventEmitter {
   /**
    * Aggregated Correlator-emitted warning counts (MLLP_ACK_*). Connection-level
    * warnings are read directly from `_connection.getStats().warningsByCode`
-   * at observation time and merged into the snapshot (D-26).
+   * at observation time and merged into the snapshot.
    */
   _aggregatedWarningsByCode = {};
   /**
@@ -2361,9 +2358,9 @@ var MllpClient = class extends EventEmitter {
     return this._connection?.state ?? this._state;
   }
   /**
-   * Open a TCP (or TLS — Phase 8) connection to the configured `host:port`
-   * and attach a Phase 3 {@link Connection} to it. Resolves once the FSM
-   * enters `CONNECTED` — for TLS, on `'secureConnect'` (handshake complete,
+   * Open a TCP (or TLS) connection to the configured `host:port`
+   * and attach a {@link Connection} to it. Resolves once the FSM
+   * enters `CONNECTED`, for TLS, on `'secureConnect'` (handshake complete,
    * including certificate verification when it is on).
    *
    * Rejects with:
@@ -2383,11 +2380,11 @@ var MllpClient = class extends EventEmitter {
    *
    * **TLS 1.3 + mutual TLS caveat (RFC 8446 §4.4.2):** `connect()` resolving
    * does NOT guarantee that a `clientAuth: 'MUST'` server accepted your
-   * client certificate. Under TLS 1.3 the client's handshake — and its
-   * `'secureConnect'` — can complete before the server finishes validating
+   * client certificate. Under TLS 1.3 the client's handshake, and its
+   * `'secureConnect'`, can complete before the server finishes validating
    * the certificate; a rejection then surfaces moments later as a typed
    * post-connect error (`'error'` event with an `ERR_SSL_*`/alert cause,
-   * classified **permanent** — no auto-reconnect loop). ACK correlation via
+   * classified **permanent**, no auto-reconnect loop). ACK correlation via
    * {@link MllpClient.send} remains the delivery guarantee: no send resolves
    * without its ACK, so a rejected session can never silently "deliver".
    *
@@ -2470,8 +2467,8 @@ var MllpClient = class extends EventEmitter {
    * Build the raw socket + `Transport` pair for a connect / reconnect attempt.
    *
    * Plaintext (`ClientOptions.tls` unset): a `net.Socket` wrapped in
-   * `NetTransport`. TLS (Phase 8): a `tls.TLSSocket` wrapped in
-   * `TlsTransport` — verification defaults **on**
+   * `NetTransport`. TLS: a `tls.TLSSocket` wrapped in
+   * `TlsTransport`, verification defaults **on**
    * (`rejectUnauthorized: !allowUnverified`), floor `minVersion: 'TLSv1.2'`
    * (the IHE ATNA ITI-19 BCP195 floor), `servername` defaulting to
    * `ClientOptions.host`.
@@ -2500,14 +2497,14 @@ var MllpClient = class extends EventEmitter {
   }
   /**
    * Wrap a connect-phase socket error as `MllpConnectionError`, classifying
-   * TLS failures (Phase 8) into the additive `connectionCause`:
+   * TLS failures into the additive `connectionCause`:
    *
-   * - `'tls-verify'` — certificate-verification failures
+   * - `'tls-verify'`, certificate-verification failures
    *   ({@link isTlsVerificationErrorCode}).
-   * - `'tls-handshake'` — TLS-**protocol**-shaped failures only
+   * - `'tls-handshake'`, TLS-**protocol**-shaped failures only
    *   ({@link isTlsProtocolError}): `ERR_SSL_*`, `EPROTO`, OpenSSL
    *   alert-bearing errors.
-   * - **No `connectionCause`** — pure TCP-level failures (`ECONNREFUSED`,
+   * - **No `connectionCause`**, pure TCP-level failures (`ECONNREFUSED`,
    *   `ETIMEDOUT`, …) even on a TLS-configured connection; these carry the
    *   same shape as plaintext connect failures.
    */
@@ -2535,7 +2532,7 @@ var MllpClient = class extends EventEmitter {
   /**
    * Emit a client event, containing a throwing subscriber.
    *
-   * Every event this client emits is reached from a callback we do not own — a socket's
+   * Every event this client emits is reached from a callback we do not own, a socket's
    * `'connect'`/`'secureConnect'`/`'data'`/`'error'` listener, or a backoff timer. A throwing
    * subscriber would unwind into it and kill the process, and on several paths it would also skip
    * the work queued after the emit (the `resolve()` of `connect()`, the backoff scheduling).
@@ -2548,8 +2545,8 @@ var MllpClient = class extends EventEmitter {
     });
   }
   /**
-   * Emit the per-connection insecure-TLS warning (Phase 8) when
-   * `tls.allowUnverified === true` — fires on EVERY successful
+   * Emit the per-connection insecure-TLS warning when
+   * `tls.allowUnverified === true`, fires on EVERY successful
    * `secureConnect`, initial connect and every reconnect. Emits both a frozen
    * `'securityWarning'` event and `process.emitWarning`. No-op for plaintext
    * connections or when verification is on.
@@ -2558,7 +2555,7 @@ var MllpClient = class extends EventEmitter {
     const tlsOpt = this._opts.tls;
     if (tlsOpt === void 0 || tlsOpt === true) return;
     if (tlsOpt.allowUnverified !== true) return;
-    const message = "MLLP TLS certificate verification is DISABLED (allowUnverified: true) \u2014 this connection does not authenticate the peer.";
+    const message = "MLLP TLS certificate verification is DISABLED (allowUnverified: true), this connection does not authenticate the peer.";
     const warning = Object.freeze({
       code: MLLP_TLS_VERIFY_DISABLED,
       message,
@@ -2571,11 +2568,11 @@ var MllpClient = class extends EventEmitter {
   }
   /**
    * Wire a Connection's events through to this MllpClient. Every re-emitted
-   * payload is `Object.freeze`'d before emission (D-25), even though the
-   * Connection layer already freezes — defense-in-depth, harmless on
+   * payload is `Object.freeze`'d before emission, even though the
+   * Connection layer already freezes, defense-in-depth, harmless on
    * already-frozen objects.
    *
-   * Builds the unified `Correlator` (D-03/A1) bound to this Connection and
+   * Builds the unified `Correlator` bound to this Connection and
    * arms the periodic ACK-timeout sweep. The Correlator is teardown-aware:
    * `close()` / `destroy()` clear the sweep timer and reject pending sends.
    *
@@ -2586,7 +2583,7 @@ var MllpClient = class extends EventEmitter {
       this._correlator = new Correlator({
         mode: this._correlateByControlId ? "controlId" : "fifo",
         ackTimeoutMs: this._ackTimeoutMs,
-        // Plan 05 — pipeline:false collapses the in-flight set to ≤1 (D-06).
+        // Plan 05, pipeline:false collapses the in-flight set to ≤1 (D-06).
         maxInFlight: this._pipeline ? Number.POSITIVE_INFINITY : 1,
         onWarning: (code, ctx) => {
           this._aggregatedWarningsByCode[code] = (this._aggregatedWarningsByCode[code] ?? 0) + 1;
@@ -2685,7 +2682,7 @@ var MllpClient = class extends EventEmitter {
     }
   }
   /**
-   * Arm (or re-arm) the dead-peer idle timer (Plan 05 — CLIENT-08, D-11).
+   * Arm (or re-arm) the dead-peer idle timer.
    * No-op when `deadPeerTimeoutMs` is unset.
    */
   _armDeadPeerTimer() {
@@ -2699,8 +2696,7 @@ var MllpClient = class extends EventEmitter {
     this._deadPeerTimer.unref();
   }
   /**
-   * Clear the dead-peer idle timer (Plan 05 — D-14 timer cleanup on
-   * every transition out of CONNECTED).
+   * Clear the dead-peer idle timer on every transition out of CONNECTED.
    */
   _clearDeadPeerTimer() {
     if (this._deadPeerTimer !== null) {
@@ -2709,22 +2705,22 @@ var MllpClient = class extends EventEmitter {
     }
   }
   /**
-   * Disconnect handler — Plan 04 reconnect FSM core.
+   * Disconnect handler, reconnect FSM core.
    *
    * Implements:
-   * - CLIENT-17 hybrid in-flight handling (D-08): controlId mode preserves
+   * - Hybrid in-flight handling: controlId mode preserves
    *   pending sends for resend; FIFO mode rejects in-flight with
    *   `connectionCause: 'in-flight-orphan'` and queued with `'fifo-unsafe'`.
-   * - CLIENT-18 classifier-first (Composition A — D-16): permanent errors
+   * - Classifier-first: permanent errors
    *   transition straight to CLOSED without invoking `retryStrategy`.
-   * - W-01 backoff-reset on recent success: first disconnect after a
+   * - Backoff-reset on recent success: first disconnect after a
    *   successful ACK on the prior session resets `_attempt` to 0.
-   * - W-02 `_reconnectAttempts` counter increment.
-   * - D-15 frozen RetryContext + D-17 null-return halts.
-   * - D-19 default exponential strategy.
+   * - `_reconnectAttempts` counter increment.
+   * - Frozen RetryContext; a `null` return from the strategy halts reconnection.
+   * - Default exponential strategy.
    *
-   * Invoked from the SINGLE `_onStateChange` hook — no parallel listener
-   * (B-04). Idempotent across same-cycle re-entry: cycle-start flag
+   * Invoked from the SINGLE `_onStateChange` hook, no parallel listener.
+   * Idempotent across same-cycle re-entry: cycle-start flag
    * coordinates first-disconnect vs subsequent-within-cycle behavior.
    */
   _handleDisconnect(err) {
@@ -2824,7 +2820,7 @@ var MllpClient = class extends EventEmitter {
     this._backoffTimer.unref();
   }
   /**
-   * Default retry strategy (D-19): `min(maxDelay, initialDelay * multiplier^attempt)`
+   * Default retry strategy: `min(maxDelay, initialDelay * multiplier^attempt)`
    * with ±jitter applied.
    */
   _defaultRetryStrategy = (ctx) => {
@@ -2912,7 +2908,7 @@ var MllpClient = class extends EventEmitter {
     this._reconnectCycleStartedAt = null;
   }
   /**
-   * Test seam — install a factory that produces the next reconnect Connection.
+   * Test seam, install a factory that produces the next reconnect Connection.
    *
    * @internal
    */
@@ -2920,7 +2916,7 @@ var MllpClient = class extends EventEmitter {
     this._reconnectFactory = factory;
   }
   /**
-   * Test seam — capture or rebind the connect-signal mid-flight (W-07).
+   * Test seam, capture or rebind the connect-signal mid-flight.
    *
    * @internal
    */
@@ -2946,12 +2942,11 @@ var MllpClient = class extends EventEmitter {
    *
    * - FIFO mode: passes `null` controlId so `matchAck` returns the head of
    *   the live store.
-   * - controlId mode: extracts MSA-2 at the `HOOK_EXTENSION_POINT: ack-payload`
-   *   anchor and passes it to `matchAck` for keyed lookup.
+   * - controlId mode: extracts MSA-2 and passes it to `matchAck` for keyed
+   *   lookup.
    *
    * Called from the SINGLE `'message'` listener registered in `_attachConnection`.
-   * No parallel listener is registered — downstream plans extend at the named
-   * anchor (B-04).
+   * No parallel listener is registered.
    */
   _onAckPayload(ackPayload, byteOffset) {
     if (this._correlator === null) return;
@@ -2964,10 +2959,8 @@ var MllpClient = class extends EventEmitter {
   /**
    * Single source-of-truth for a successfully matched ACK (live-store hit).
    *
-   * PLAN-02: emit frozen 'ack' event, call matched.resolve().
-   * Plan 04 extends at HOOK_EXTENSION_POINT: ack-matched to update _lastSuccessAt.
-   * PLAN-06 extends at HOOK_EXTENSION_POINT: ack-matched to bump _ackedTotal and
-   *   set _lastAckAt.
+   * Emits the frozen 'ack' event and resolves the pending send. Updates
+   * `_lastSuccessAt`, `_ackedTotal` and `_lastAckAt`.
    *
    * Called from _onAckPayload when matchAck() returns a non-null PendingAck.
    */
@@ -2989,9 +2982,9 @@ var MllpClient = class extends EventEmitter {
   }
   /**
    * Emit a frozen `'drain'` event when the queue depth and bytes fall below
-   * both configured caps (Plan 05 — D-24). Called from `_onAckMatched`
+   * both configured caps. Called from `_onAckMatched`
    * (every successful ACK) and from the Correlator's `onTimeout` callback
-   * (every expired send) — both code paths free a live-store slot.
+   * (every expired send), both code paths free a live-store slot.
    */
   _maybeEmitDrain() {
     const corr = this._correlator;
@@ -3011,12 +3004,9 @@ var MllpClient = class extends EventEmitter {
   /**
    * Single source-of-truth for Connection FSM transitions.
    *
-   * PLAN-02: re-emit frozen 'stateChange' (was inline in PLAN-01; centralized
-   * here so Plan 04 / Plan 05 can extend at named anchors).
-   * Plan 04 extends at HOOK_EXTENSION_POINT: state-change to detect
-   *   CONNECTED → DISCONNECTED|RECONNECTING and trigger _handleDisconnect.
-   * Plan 05 extends at HOOK_EXTENSION_POINT: state-change to clear/arm
-   *   dead-peer timer on transitions out of / into CONNECTED.
+   * Re-emits a frozen 'stateChange' event, detects
+   * CONNECTED → DISCONNECTED|RECONNECTING to trigger `_handleDisconnect`, and
+   * clears or arms the dead-peer timer on transitions out of / into CONNECTED.
    *
    * Called from the SINGLE 'stateChange' listener registered in _attachConnection.
    */
@@ -3047,17 +3037,16 @@ var MllpClient = class extends EventEmitter {
     }
   }
   /**
-   * Send an MLLP-framed payload and await the inbound ACK (CLIENT-02).
+   * Send an MLLP-framed payload and await the inbound ACK.
    *
    * Resolves with the ACK Buffer (framing stripped). Rejects with:
-   * - `DOMException('Aborted', 'AbortError')` if `signal` aborts before ACK
-   *   (CLIENT-11 send branch).
-   * - `MllpTimeoutError` if no ACK arrives within `ackTimeoutMs` (ERR-02).
+   * - `DOMException('Aborted', 'AbortError')` if `signal` aborts before the ACK.
+   * - `MllpTimeoutError` if no ACK arrives within `ackTimeoutMs`.
    *   The clock starts at the underlying `write()` flush callback, NOT at
-   *   the `send()` call (CLIENT-04, D-19).
+   *   the `send()` call.
    * - `MllpConnectionError({ phase: 'send' })` if the client is not connected.
    *
-   * Emits a frozen `'ack'` event on every successful match (D-25 + Specifics).
+   * Emits a frozen `'ack'` event on every successful match.
    *
    * @example
    * ```typescript
@@ -3066,7 +3055,7 @@ var MllpClient = class extends EventEmitter {
    * ```
    *
    * @param payload Raw bytes; MLLP framing is added internally via `encodeFrame`.
-   * @param opts.signal AbortSignal — aborting cancels the ACK wait (CLIENT-11).
+   * @param opts.signal AbortSignal, aborting cancels the ACK wait.
    */
   send(payload, opts) {
     const signal = opts?.signal;
@@ -3154,12 +3143,12 @@ var MllpClient = class extends EventEmitter {
     });
   }
   /**
-   * 'wait'-mode backpressure handler (Plan 05 — CLIENT-07/CLIENT-11).
+   * 'wait'-mode backpressure handler.
    *
    * Awaits one of three terminating signals, in order:
    * - `'drain'` event → re-enter `send()` (the gate will now pass).
    * - `ackTimeoutMs` elapses → reject with `MllpTimeoutError`.
-   * - Caller's `signal` aborts → reject with `AbortError` (B-06). Cleanup
+   * - Caller's `signal` aborts → reject with `AbortError`. Cleanup
    *   removes the drain listener AND the abort listener AND clears the
    *   timer to prevent leaks.
    */
@@ -3216,7 +3205,7 @@ var MllpClient = class extends EventEmitter {
     this._clearDeadPeerTimer();
   }
   /**
-   * **Test seam** — attach an externally-built {@link Connection} directly,
+   * **Test seam**, attach an externally-built {@link Connection} directly,
    * bypassing the `net.createConnection` + `NetTransport` path. Used by
    * lifecycle tests driving `InMemoryTransport.pair()` for determinism.
    *
@@ -3295,7 +3284,7 @@ var MllpClient = class extends EventEmitter {
     }
   }
   /**
-   * Abruptly destroy the client — force-transitions the underlying Connection
+   * Abruptly destroy the client, force-transitions the underlying Connection
    * to `CLOSED` immediately. No-op if no Connection is attached. Idempotent.
    *
    * @example
@@ -3319,9 +3308,9 @@ var MllpClient = class extends EventEmitter {
     conn.destroy(reason);
   }
   /**
-   * Returns a JSON-serializable observability snapshot (OBS-01, D-26).
+   * Returns a JSON-serializable observability snapshot.
    *
-   * All fields are plain values — no Buffers, no class instances, no Maps,
+   * All fields are plain values, no Buffers, no class instances, no Maps,
    * no circular refs. Safe to `JSON.stringify` directly.
    *
    * `inFlight` is the count of correlator entries with `sentAt !== null`
@@ -3365,7 +3354,7 @@ var MllpClient = class extends EventEmitter {
     };
   }
   /**
-   * Async disposal — delegates to {@link MllpClient.close} for `await using` support.
+   * Async disposal, delegates to {@link MllpClient.close} for `await using` support.
    *
    * @example
    * ```typescript
@@ -3421,7 +3410,7 @@ async function createStarterClient(opts) {
 }
 
 // src/index.ts
-var VERSION = "0.0.1";
+var VERSION = "0.0.3";
 
 export { Connection, FrameReader, MLLP_BIND_ALL_INTERFACES, MLLP_TLS_VERIFY_DISABLED, MllpAckError, MllpBackpressureError, MllpClient, MllpConnectionError, MllpFramingError, MllpServer, MllpTimeoutError, NetTransport, TlsTransport, VERSION, buildRawAck, createClient, createServer, createStarterClient, createStarterServer, createWarning, encodeFrame, isTlsProtocolError, isTlsVerificationErrorCode, isTransientConnectionError, rawAckUncorrelatable, resolveNackCode };
 //# sourceMappingURL=index.mjs.map