@cosyte/mllp 0.0.2 → 0.0.4

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { T as Transport } from './index-DAZ4BvJE.js';
+import { T as Transport } from './index-CD8V2Mtk.js';
 import { EventEmitter } from 'node:events';
 import { Socket } from 'node:net';
 import { TLSSocket } from 'node:tls';
@@ -32,8 +32,8 @@ type WarningCode = "MLLP_MISSING_LEADING_VT" | "MLLP_FS_WITHOUT_CR" | "MLLP_LF_A
 /**
  * A frozen warning object emitted when the decoder tolerates a framing deviation.
  *
- * `connectionId` is `undefined` when emitted by a standalone `FrameReader` (Phase 2).
- * Phase 3 `Connection` enriches it to the real UUIDv4 before forwarding upstream.
+ * `connectionId` is `undefined` when emitted by a standalone `FrameReader`.
+ * `Connection` enriches it to the real UUIDv4 before forwarding upstream.
  *
  * @example
  * ```typescript
@@ -52,7 +52,7 @@ interface MllpWarning {
     readonly byteOffset: number;
     /**
      * Connection identifier. `undefined` at the framing layer;
-     * enriched by Phase 3 `Connection` before emitting upstream.
+     * enriched by `Connection` before emitting upstream.
      */
     readonly connectionId: string | undefined;
     /** Wall-clock time at point of emission. */
@@ -62,8 +62,8 @@ interface MllpWarning {
  * Create a frozen `MllpWarning` object. The returned object is `Object.freeze()`'d
  * so subscribers cannot mutate shared warning state.
  *
- * `connectionId` is always `undefined` here, Phase 3 enriches via
- * `{ ...w, connectionId: this.connectionId }` then re-freezes (D-08).
+ * `connectionId` is always `undefined` here; `Connection` enriches it via
+ * `{ ...w, connectionId: this.connectionId }` then re-freezes.
  *
  * @example
  * ```typescript
@@ -118,7 +118,7 @@ declare class MllpFramingError extends Error {
      * This is a **copied** Buffer, isolated from the source buffer so it remains
      * valid after the underlying buffer is reused or overwritten.
      *
-     * **PHI contract (MLLP-9):** the decoder only ever populates this with the single
+     * **PHI contract:** the decoder only ever populates this with the single
      * framing-boundary byte that violated the frame structure (whose hex value the
      * `message` already discloses), never a run of payload content bytes. For anomalies
      * whose fault is not a specific byte (`MLLP_FRAME_TOO_LARGE`, the accumulated size),
@@ -180,7 +180,7 @@ interface EncoderOptions {
     allowDelimiterBytesInPayload?: boolean;
     /**
      * Called for each offending delimiter byte when `allowDelimiterBytesInPayload` is `true`.
-     * Invocation is wrapped in try/catch, a throwing handler does not interrupt encoding (WARN-06).
+     * Invocation is wrapped in try/catch, a throwing handler does not interrupt encoding.
      *
      * @example
      * ```typescript
@@ -254,7 +254,7 @@ declare function encodeFrame(payload: Buffer, opts?: EncoderOptions): Buffer;
  *
  * All tolerance opts default to `false`, every framing deviation throws unless
  * explicitly enabled. Server-level defaults (allowFsOnly, allowLfAfterFs, allowLeadingWhitespace)
- * are applied by Phase 4 when constructing readers per SERVER-12.
+ * are applied by the server when constructing readers.
  *
  * @example
  * ```typescript
@@ -279,27 +279,27 @@ interface FrameReaderOptions {
      */
     onFrame: (payload: Buffer, byteOffset: number, warnings: readonly MllpWarning[]) => void;
     /**
-     * Called for each tolerated framing deviation. Wrapped in try/catch per WARN-06.
+     * Called for each tolerated framing deviation. Wrapped in try/catch.
      * A throwing handler will not corrupt FSM state.
      */
     onWarning?: (w: MllpWarning) => void;
     /**
      * Maximum accumulated payload bytes before `MllpFramingError('MLLP_FRAME_TOO_LARGE')`.
-     * Default: 16 MiB (FRAME-11 DoS prevention).
+     * Default: 16 MiB (DoS prevention).
      */
     maxFrameSizeBytes?: number;
-    /** FRAME-07: Tolerate FS without trailing CR; emits `MLLP_FS_WITHOUT_CR`. */
+    /** Tolerate FS without trailing CR; emits `MLLP_FS_WITHOUT_CR`. */
     allowFsOnly?: boolean;
-    /** FRAME-08: Tolerate FS+LF instead of FS+CR; emits `MLLP_LF_AFTER_FS`. */
+    /** Tolerate FS+LF instead of FS+CR; emits `MLLP_LF_AFTER_FS`. */
     allowLfAfterFs?: boolean;
-    /** FRAME-09: Tolerate missing leading VT; emits `MLLP_MISSING_LEADING_VT`. */
+    /** Tolerate missing leading VT; emits `MLLP_MISSING_LEADING_VT`. */
     allowMissingLeadingVt?: boolean;
-    /** FRAME-10: Tolerate SP/TAB/LF/CR before VT; emits `MLLP_LEADING_WHITESPACE`. */
+    /** Tolerate SP/TAB/LF/CR before VT; emits `MLLP_LEADING_WHITESPACE`. */
     allowLeadingWhitespace?: boolean;
     /**
      * When `true`, escalates the following tolerances to thrown `MllpFramingError`
      * even if individual opt-ins (`allowFsOnly`, `allowLfAfterFs`, `allowMissingLeadingVt`,
-     * `allowLeadingWhitespace`) are enabled (WARN-08):
+     * `allowLeadingWhitespace`) are enabled:
      * - `MLLP_MISSING_LEADING_VT`
      * - `MLLP_FS_WITHOUT_CR`
      * - `MLLP_LF_AFTER_FS`
@@ -343,9 +343,9 @@ declare class FrameReader {
     private _writePos;
     /** Monotonic absolute stream byte offset across the entire connection lifetime. */
     private _byteOffset;
-    /** Byte offset where current leading-whitespace run started (FRAME-10). */
+    /** Byte offset where current leading-whitespace run started. */
     private _wsStart;
-    /** Count of leading whitespace bytes accumulated in current run (FRAME-10). */
+    /** Count of leading whitespace bytes accumulated in current run. */
     private _wsCount;
     /** Byte offset of the VT byte that started the current frame. */
     private _frameStartOffset;
@@ -371,7 +371,7 @@ declare class FrameReader {
     /**
      * Clear internal accumulator state and reset byte offset to 0.
      *
-     * Call on reconnect / connection reuse to start fresh without allocating a new reader (D-03).
+     * Call on reconnect / connection reuse to start fresh without allocating a new reader.
      * Pending partial frame state is discarded silently.
      *
      * @example
@@ -388,10 +388,10 @@ declare class FrameReader {
     private _appendByte;
     /**
      * Copy accumulated payload bytes into a new Buffer and deliver via `onFrame`.
-     * The copy isolates callers from internal accumulator reuse (T-02-03-03).
+     * The copy isolates callers from internal accumulator reuse.
      */
     private _deliverFrame;
-    /** Emit a warning via the `onWarning` callback, swallowing any handler exceptions (WARN-06). */
+    /** Emit a warning via the `onWarning` callback, swallowing any handler exceptions. */
     private _emitWarning;
 }
 
@@ -455,7 +455,7 @@ declare class NetTransport implements Transport {
 }
 
 /**
- * TlsTransport, `Transport` implementation wrapping a `tls.TLSSocket` (Phase 8).
+ * TlsTransport, `Transport` implementation wrapping a `tls.TLSSocket`.
  *
  * Identical wiring to `NetTransport` with one deliberate difference: `onConnect`
  * maps to the socket's `'secureConnect'` event (fires once the TLS handshake
@@ -522,7 +522,7 @@ declare class TlsTransport implements Transport {
 }
 
 /**
- * Security-warning codes and payload shape shared by the client and server (Phase 8).
+ * Security-warning codes and payload shape shared by the client and server.
  *
  * These codes are a **public API**, they appear in `'securityWarning'` event
  * handlers, log pipelines, and monitoring dashboards. Renaming or removing a
@@ -608,7 +608,7 @@ interface SecurityWarning {
 }
 
 /**
- * TLS (MLLPS) option types for the client and server (Phase 8).
+ * TLS (MLLPS) option types for the client and server.
  *
  * Spec anchor: IHE ATNA, ITI-19 Authenticate Node
  * (https://profiles.ihe.net/ITI/TF/Volume2/ITI-19.html), the "STX: TLS 1.2
@@ -642,7 +642,7 @@ interface SecurityWarning {
  */
 type PemInput = string | Buffer | Array<string | Buffer>;
 /**
- * Client-side TLS options (Phase 8, `ClientOptions.tls`).
+ * Client-side TLS options (`ClientOptions.tls`).
  *
  * Passing `true` for `ClientOptions.tls` is equivalent to `{}`, TLS enabled
  * with all defaults, including certificate verification **on**.
@@ -728,7 +728,7 @@ interface TlsOptions {
  */
 type ClientAuth = "NONE" | "WANT" | "MUST";
 /**
- * Server-side TLS options (Phase 8, `ServerOptions.tls`).
+ * Server-side TLS options (`ServerOptions.tls`).
  *
  * @example
  * ```typescript
@@ -795,9 +795,9 @@ interface ServerTlsOptions {
  */
 
 /**
- * The 6 connection states from LIFE-01.
+ * The 6 connection states.
  *
- * Transitions are validated against the LIFE-02 edge graph. Illegal transitions
+ * Transitions are validated against the legal-transition edge graph. Illegal transitions
  * are silently ignored to preserve FSM integrity.
  */
 type ConnectionState = "CONNECTING" | "CONNECTED" | "DRAINING" | "RECONNECTING" | "DISCONNECTED" | "CLOSED";
@@ -819,8 +819,8 @@ interface StateChangeEvent {
 /**
  * Payload for the 'reconnecting' event. Always `Object.freeze`'d.
  *
- * Phase 5 will populate `attempt` and `delayMs` once the reconnect backoff loop
- * is implemented. For now only `connectionId` is present at the point of emission.
+ * `attempt` and `delayMs` are populated by `MllpClient` when it schedules a
+ * reconnect. A `Connection` emitting on its own supplies `connectionId` only.
  *
  * @example
  * ```typescript
@@ -835,7 +835,7 @@ interface ReconnectingEvent {
     readonly delayMs?: number;
 }
 /**
- * Return type of `connection.getStats()`, JSON-serializable per OBS-04.
+ * Return type of `connection.getStats()`, JSON-serializable.
  *
  * All timestamps are `Date | null` (not epoch milliseconds). `JSON.stringify()`
  * serialises them to ISO 8601 strings by default with no information loss.
@@ -877,9 +877,9 @@ interface ConnectionOptions {
     transport: Transport;
     /** Called for each decoded MLLP frame (raw payload bytes, framing stripped). */
     onMessage?: (payload: Buffer) => void;
-    /** Per-connection warning subscriber (WARN-10). Replaces previous subscription. */
+    /** Per-connection warning subscriber. Replaces previous subscription. */
     onWarning?: (w: MllpWarning) => void;
-    /** Drain timeout used by close() in Phase 4/5 (default: 30_000 ms). */
+    /** Drain timeout used by close() (default: 30_000 ms). */
     drainTimeoutMs?: number;
     /** FrameReader options (tolerance, maxFrameSizeBytes). onFrame/onWarning are managed internally. */
     framing?: Omit<FrameReaderOptions, "onFrame" | "onWarning">;
@@ -906,7 +906,7 @@ interface ConnectionOptions {
  * ```
  */
 declare class Connection extends EventEmitter {
-    /** Stable UUIDv4 identifier for this connection (D-11). */
+    /** Stable UUIDv4 identifier for this connection. */
     readonly connectionId: string;
     private _state;
     private readonly _transport;
@@ -919,20 +919,19 @@ declare class Connection extends EventEmitter {
     private _bytesOut;
     private _lastByteInAt;
     private _lastByteOutAt;
-    /** Ring buffer: last MAX_WARNINGS entries (OBS-05). */
+    /** Ring buffer: last MAX_WARNINGS entries. */
     private _warningBuffer;
-    /** Accurate total counts per code, unaffected by ring buffer truncation (OBS-05). */
+    /** Accurate total counts per code, unaffected by ring buffer truncation. */
     private readonly _warningsByCode;
-    /** Set to true once the ring buffer overflows (OBS-05). */
+    /** Set to true once the ring buffer overflows. */
     private _warningsTruncated;
     private _onWarningFn;
     private _drainPromise;
     /**
      * beforeClose hook, no-op default that resolves immediately.
      *
-     * Phase 4 (Server) and Phase 5 (Client) override this instance property to
-     * register ACK-drain and send-queue drain logic respectively (D-07/D-08).
-     * Connection calls this during `close()`, racing against `drainTimeoutMs`.
+     * An owner may replace this instance property to run work before the socket
+     * closes. Connection calls it during `close()`, racing against `drainTimeoutMs`.
      */
     beforeClose: (drainTimeoutMs: number) => Promise<void>;
     /**
@@ -943,16 +942,16 @@ declare class Connection extends EventEmitter {
      */
     constructor(opts: ConnectionOptions);
     /**
-     * Current FSM state. One of the 6 `ConnectionState` values (LIFE-01).
+     * Current FSM state. One of the 6 `ConnectionState` values.
      *
      * Subscribe to `'stateChange'` events for reactive state monitoring.
      */
     get state(): ConnectionState;
     /**
-     * Register or replace the per-connection warning subscriber (WARN-10).
+     * Register or replace the per-connection warning subscriber.
      *
      * Subsequent calls replace the previous handler (set-once semantics prevent leaks).
-     * The handler is called synchronously and any exception it throws is swallowed (WARN-06).
+     * The handler is called synchronously and any exception it throws is swallowed.
      *
      * @example
      * ```typescript
@@ -980,7 +979,7 @@ declare class Connection extends EventEmitter {
     /**
      * Write raw bytes to the transport (no framing applied).
      *
-     * Phase 4 (Server) and Phase 5 (Client) wrap this with `encodeFrame()` to add MLLP framing.
+     * The server and the client wrap this with `encodeFrame()` to add MLLP framing.
      * Returns `false` if the connection is CLOSED or DISCONNECTED (no bytes written).
      *
      * @returns `true` if bytes flushed immediately; `false` if buffered (backpressure) or not writable.
@@ -996,7 +995,7 @@ declare class Connection extends EventEmitter {
      * Initiate graceful close of the connection.
      *
      * - If `CONNECTING` or `RECONNECTING`: cancels the pending attempt, transitions
-     *   directly to `CLOSED`, and calls `transport.destroy()` (LIFE-05).
+     *   directly to `CLOSED`, and calls `transport.destroy()`.
      * - If `CONNECTED`: transitions to `DRAINING`, calls `beforeClose(drainTimeoutMs)`,
      *   then `DRAINING → DISCONNECTED` once the hook resolves, or `DRAINING → CLOSED`
      *   if the drain timeout elapses first.
@@ -1017,7 +1016,7 @@ declare class Connection extends EventEmitter {
      * Race `beforeClose()` against the drain timeout.
      *
      * On normal completion: `DRAINING → DISCONNECTED` + `transport.close()`.
-     * On timeout: `DRAINING → CLOSED` + `transport.destroy()` (T-03-04-01).
+     * On timeout: `DRAINING → CLOSED` + `transport.destroy()`.
      */
     private _drainWithTimeout;
     /**
@@ -1036,7 +1035,7 @@ declare class Connection extends EventEmitter {
      */
     destroy(reason?: Error): void;
     /**
-     * Return a JSON-serializable observability snapshot (OBS-03/04/05).
+     * Return a JSON-serializable observability snapshot.
      *
      * All timestamp fields are `Date | null` (not epoch milliseconds). `JSON.stringify()`
      * serialises them to ISO 8601 strings with no information loss.
@@ -1133,9 +1132,9 @@ declare class Connection extends EventEmitter {
 /**
  * Connection lifecycle phase where the error occurred.
  *
- * All 5 phases are defined in Phase 3 even though `'reconnect'` is only
- * exercised in Phase 5 (CLIENT-17). Locking the full union now prevents a
- * breaking type change later (ERR-03).
+ * All 5 phases are defined even though `'reconnect'` is only
+ * exercised by the client. Locking the full union now prevents a
+ * breaking type change later.
  */
 type ConnectionErrorPhase = "connect" | "send" | "receive" | "close" | "reconnect";
 /**
@@ -1146,18 +1145,18 @@ type ConnectionErrorPhase = "connect" | "send" | "receive" | "close" | "reconnec
  * removing a member is a breaking change.
  *
  * - `'fifo-unsafe'`, A queued send was rejected during reconnect because
- *   FIFO ordering cannot be safely resumed across sessions (CLIENT-17).
+ *   FIFO ordering cannot be safely resumed across sessions.
  * - `'in-flight-orphan'`, An in-flight send (already write-flushed,
  *   ACK timer started) was rejected during reconnect in FIFO mode because
  *   the at-most-once delivery contract cannot be preserved across a
- *   socket drop (D-08, healthcare medication/orders semantics).
- * - `'tls-verify'` (Phase 8), The TLS handshake failed certificate
+ *   socket drop (healthcare medication/orders semantics).
+ * - `'tls-verify'`, The TLS handshake failed certificate
  *   verification (untrusted chain, expired/not-yet-valid cert, hostname
  *   mismatch, revocation, …). See {@link isTlsVerificationErrorCode} for the
  *   exact underlying error codes. Classified **permanent** by
  *   `isTransientConnectionError`, never auto-reconnect-looped into a
  *   misconfigured or MITM'd endpoint.
- * - `'tls-handshake'` (Phase 8), A TLS-**protocol**-shaped handshake
+ * - `'tls-handshake'`, A TLS-**protocol**-shaped handshake
  *   failure observed before `'secureConnect'`: `ERR_SSL_*` codes, `EPROTO`,
  *   or an OpenSSL alert-bearing error (protocol version mismatch, no shared
  *   cipher, a required mutual-TLS client certificate rejected by the
@@ -1352,8 +1351,8 @@ declare function resolveNackCode(err: unknown): NegativeAckCode;
  *   3. **A batch or concatenated messages.** An `FHS`/`BHS`/`BTS`/`FTS` envelope (§2.10.3)
  *      or a second `MSH` in the same frame: a single MSA-2 can echo only ONE control ID, so
  *      a positive ACK naming the first silently drops the rest (see
- *      {@link containsBatchOrExtraMessage}). Batch ACK is its own feature (`MLLP-BATCH`),
- *      until it is designed, a batch must stay a **loud non-positive** answer.
+ *      {@link containsBatchOrExtraMessage}). Batch ACK is its own feature; until it is
+ *      designed, a batch must stay a **loud non-positive** answer.
  *
  * This is a **refusal**, not a tolerance widening: it never makes an unreadable message
  * readable, never re-bases on a located `MSH`, never parses a batch. It only recognizes
@@ -1477,7 +1476,7 @@ declare function buildRawAck(payload: Buffer, code: AckCode): Buffer;
  */
 
 /**
- * Metadata attached to each decoded MLLP message (SERVER-03).
+ * Metadata attached to each decoded MLLP message.
  *
  * All fields are `readonly`, the object is `Object.freeze()`'d before emission.
  *
@@ -1541,10 +1540,10 @@ interface NackEvent {
     readonly reason: NackReason;
 }
 /**
- * Observability snapshot returned by `server.getStats()` (OBS-02).
+ * Observability snapshot returned by `server.getStats()`.
  *
  * All fields are JSON-serializable. `connections` and `activeConnections` both
- * reflect the current live connection count (ROADMAP SC-5 / OBS-02).
+ * reflect the current live connection count.
  *
  * @example
  * ```typescript
@@ -1560,7 +1559,7 @@ interface ServerStats {
     /** Bound host, or `null` before listen(). */
     readonly host: string | null;
     /**
-     * Current live connection count (OBS-02, ROADMAP SC-5).
+     * Current live connection count.
      * Same value as `activeConnections`.
      */
     readonly connections: number;
@@ -1574,9 +1573,9 @@ interface ServerStats {
     readonly acceptedTotal: number;
     /** Total connections closed since listen() (monotonically increasing). */
     readonly closedTotal: number;
-    /** Whether this server is configured for TLS (Phase 8). Mirrors `ServerOptions.tls` being set. */
+    /** Whether this server is configured for TLS. Mirrors `ServerOptions.tls` being set. */
     readonly tls: boolean;
-    /** Total `'tlsClientError'` events (failed TLS handshakes, incl. rejected client certs) since listen() (Phase 8). */
+    /** Total `'tlsClientError'` events (failed TLS handshakes, incl. rejected client certs) since listen(). */
     readonly tlsClientErrorsTotal: number;
 }
 /**
@@ -1616,7 +1615,7 @@ interface ServerOptions {
      */
     onMessage?: (payload: Buffer, meta: MessageMeta, conn: Connection) => void | Promise<void>;
     /**
-     * FrameReader tolerance options applied to every accepted connection (SERVER-12).
+     * FrameReader tolerance options applied to every accepted connection.
      * Merged with SERVER_DEFAULT_FRAMING, caller-supplied values override defaults.
      * `onFrame` and `onWarning` are managed internally and must not be supplied here.
      */
@@ -1641,31 +1640,31 @@ interface ServerOptions {
      * - **`fn`**, `fn(payload, meta, conn)` builds the ACK bytes the server sends; the
      *   caller fully owns MSA-1 (e.g. to emit enhanced-mode `CA`/`CE`/`CR`).
      *
-     * The `'message'` event always fires BEFORE the ACK is sent (D-03). Do NOT call
+     * The `'message'` event always fires BEFORE the ACK is sent. Do NOT call
      * `conn.send()` in `onMessage` when `autoAck` is set, this results in two ACKs.
      */
     autoAck?: "AA" | ((payload: Buffer, meta: MessageMeta, conn: Connection) => Buffer | Promise<Buffer>);
     /**
-     * TCP keepalive probe interval in ms (D-10).
+     * TCP keepalive probe interval in ms.
      * Calls `socket.setKeepAlive(true, ms)` on each accepted socket.
      * Uses OS TCP stack to detect dead peers (half-open, network partitions).
      * Distinct from `deadPeerTimeoutMs` (application-level idle close).
      */
     keepaliveIntervalMs?: number;
     /**
-     * Application-level idle close timeout in ms (D-11, ROADMAP SC-5).
+     * Application-level idle close timeout in ms.
      * If no HL7 messages are received on a connection for this interval, the connection
      * is destroyed via `conn.destroy(new Error('idle timeout'))`.
      * Resets on every `'message'` event. Distinct from `keepaliveIntervalMs` (OS TCP probe).
      */
     deadPeerTimeoutMs?: number;
     /**
-     * Graceful drain timeout passed to `conn.close()` during `server.close()` (D-06).
+     * Graceful drain timeout passed to `conn.close()` during `server.close()`.
      * Default: 30 000 ms.
      */
     drainTimeoutMs?: number;
     /**
-     * Enable TLS (MLLPS) for this server (Phase 8). When set, the server binds a
+     * Enable TLS (MLLPS) for this server. When set, the server binds a
      * `tls.Server` instead of a plain `net.Server`, consumes `'secureConnection'`
      * (post-handshake sockets) instead of `'connection'`, and surfaces failed
      * handshakes via the `'tlsClientError'` event rather than crashing.
@@ -1676,8 +1675,8 @@ interface ServerOptions {
      */
     tls?: ServerTlsOptions;
     /**
-     * Opt-in required to bind a wildcard host, a bind-safety guardrail
-     * (Phase 8). Without this flag, `listen()` rejects a wildcard host in
+     * Opt-in required to bind a wildcard host, a bind-safety guardrail.
+     * Without this flag, `listen()` rejects a wildcard host in
      * two tiers: **literal spellings** (`'0.0.0.0'`, `'::'`, `''`, `'::0'`,
      * `'0:0:0:0:0:0:0:0'`, `'::ffff:0.0.0.0'`, …) reject **pre-bind** (fast
      * path, nothing is ever bound); **resolver-only shorthands** (`'0'`,
@@ -1694,7 +1693,7 @@ interface ServerOptions {
     allowWildcardBind?: boolean;
 }
 /**
- * Options for `createStarterServer()`, the "three lines of code" factory (SERVER-08).
+ * Options for `createStarterServer()`, the "three lines of code" factory.
  *
  * Extends `ServerOptions` with `port`, `host`, and `handleSignals`. Defaults:
  * `autoAck: 'AA'`, `drainTimeoutMs: 30_000`, `Symbol.asyncDispose` wired.
@@ -1705,7 +1704,9 @@ interface ServerOptions {
  *
  * const server = await createStarterServer({
  *   port: 2575,
- *   onMessage: (buf) => buildAckBuffer(buf),
+ *   onMessage: async (payload) => {
+ *     await db.commit(payload); // the durable-commit step; a throw answers a negative ACK
+ *   },
  * });
  * // server is listening, auto-ACK enabled, Symbol.asyncDispose wired
  * await using _ = server; // closes on scope exit
@@ -1715,14 +1716,14 @@ interface StarterServerOptions extends ServerOptions {
     /** Port to listen on. */
     port: number;
     /**
-     * Host to bind to. Default `'127.0.0.1'` (Phase 8 bind-safety hardening,
+     * Host to bind to. Default `'127.0.0.1'` (bind-safety hardening,
      * was `'0.0.0.0'`; binding all interfaces now requires
      * `ServerOptions.allowWildcardBind: true`).
      */
     host?: string;
     /**
      * Register `process.once('SIGTERM')` and `process.once('SIGINT')` handlers that
-     * call `server.close()` then `process.exit(0)` (D-09). Default: `false`.
+     * call `server.close()` then `process.exit(0)`. Default: `false`.
      *
      * Handlers are automatically removed when `server.close()` is called, so
      * `process.listenerCount('SIGTERM') === 0` after close() completes, preventing
@@ -1731,7 +1732,7 @@ interface StarterServerOptions extends ServerOptions {
     handleSignals?: boolean;
 }
 /**
- * MLLP TCP server, wraps `net.Server` without extending it (D-02).
+ * MLLP TCP server, wraps `net.Server` without extending it.
  *
  * Each accepted socket is wrapped in a `NetTransport`, connected to a `Connection`
  * with server-level framing options, and added to `_connections`. Messages are
@@ -1756,10 +1757,10 @@ interface StarterServerOptions extends ServerOptions {
  * during the bind window changes the `listen()` rejection from the bind error to the typed
  * close-during-listen `MllpConnectionError`, match on the `'error'` event payload, not the
  * rejection, if you do that.
- * Phase 8 (TLS/MLLPS) adds two more: `'tlsClientError'` (a failed TLS handshake, the
+ * TLS (MLLPS) adds two more: `'tlsClientError'` (a failed TLS handshake, the
  * server logs it and keeps serving other connections) and `'securityWarning'` (loud,
  * one-time notice when a wildcard host is bound via `allowWildcardBind: true`).
- * All event payloads are `Object.freeze()`'d before emission (SERVER-10).
+ * All event payloads are `Object.freeze()`'d before emission.
  *
  * @example
  * ```typescript
@@ -1781,10 +1782,10 @@ declare class MllpServer extends EventEmitter {
     /** `true` when `ServerOptions.tls` is set, `_netServer` is actually a `tls.Server`. */
     private readonly _isTls;
     private _listening;
-    /** Phase 8, single-flight guard: `true` while a `listen()` call is settling. */
+    /** Single-flight guard: `true` while a `listen()` call is settling. */
     private _listenInFlight;
     /**
-     * Phase 8, settle hook for an in-flight `listen()`. Non-null only while a
+     * Settle hook for an in-flight `listen()`. Non-null only while a
      * `listen()` is in flight; invoked by `close()` so a close racing startup
      * rejects the pending `listen()` (typed) instead of leaving it hung with
      * the single-flight guard stuck. Cleared on every settle path.
@@ -1794,7 +1795,7 @@ declare class MllpServer extends EventEmitter {
     private _host;
     private _acceptedTotal;
     private _closedTotal;
-    /** Phase 8, count of `'tlsClientError'` events since listen(). */
+    /** Count of `'tlsClientError'` events since listen(). */
     private _tlsClientErrorsTotal;
     /**
      * Construct an MLLP server. Created idle; call `listen()` (or use
@@ -1825,7 +1826,7 @@ declare class MllpServer extends EventEmitter {
      *
      * @param port - TCP port to bind. Use `0` to let the OS assign an ephemeral port.
      * @param hostOrOpts - Host string or object with `host` and optional `signal`.
-     *   Default host: `'127.0.0.1'` (Phase 8 bind-safety hardening). Wildcard hosts
+     *   Default host: `'127.0.0.1'` (bind-safety hardening). Wildcard hosts
      *   are rejected unless `ServerOptions.allowWildcardBind: true`, literal
      *   spellings pre-bind, resolver-only shorthands post-bind via the
      *   OS-normalized bound address.
@@ -1844,7 +1845,7 @@ declare class MllpServer extends EventEmitter {
     /**
      * Stop accepting new connections and gracefully close all active connections.
      *
-     * Sequence (D-06):
+     * Sequence:
      * 1. `net.Server.close()`, stops accepting new connections immediately
      * 2. If `_connections` is empty: resolves immediately (no drain needed)
      * 3. Calls `_drainAll(drainTimeoutMs)`, Promise.all + side-effect setTimeout
@@ -1896,10 +1897,9 @@ declare class MllpServer extends EventEmitter {
      */
     [Symbol.asyncDispose](): Promise<void>;
     /**
-     * Return a JSON-serializable observability snapshot (OBS-02).
+     * Return a JSON-serializable observability snapshot.
      *
      * `totalBytesIn` and `totalBytesOut` aggregate from live connections at call time.
-     * Plan 04 adds full aggregation; at Plan 01 scope they return 0.
      *
      * @example
      * ```typescript
@@ -1931,8 +1931,8 @@ declare class MllpServer extends EventEmitter {
     private _emitErrorIfListened;
     private _onSocketAccepted;
     /**
-     * Extract a minimal, content-free peer-certificate summary (Phase 8, ATNA
-     * ITI-19 mutual authentication), CN strings, expiry, and the verification
+     * Extract a minimal, content-free peer-certificate summary (ATNA ITI-19
+     * mutual authentication), CN strings, expiry, and the verification
      * outcome (`authorized`) only; never the full certificate object. Returns
      * `null` when no peer certificate was presented (e.g. `clientAuth: 'WANT'`
      * with no client cert).
@@ -1983,20 +1983,20 @@ declare class MllpServer extends EventEmitter {
      * Run `onMessage` for its side effects only (custom-ACK and manual modes), guarding
      * against a synchronous throw or a rejected promise. In these modes the handler does
      * **not** gate the ACK, so a failure is re-emitted as a PHI-safe `'error'` on the
-     * connection (D-04: a handler error never crashes the server) rather than escaping as
+     * connection (a handler error never crashes the server) rather than escaping as
      * an unhandled rejection. The error text is never placed on the wire.
      */
     private _observeMessage;
     /**
      * The custom-builder path for `autoAck: fn`. Awaits the builder and dispatches its
      * Buffer as the ACK; the caller owns MSA-1. A builder error is re-emitted as `'error'`
-     * on the connection, the server never crashes (D-04).
+     * on the connection, the server never crashes.
      */
     private _sendCustomAck;
     /**
      * Frame an ACK payload and write it to the connection. `Connection.send()` returns
      * `false` under backpressure (socket write buffer full); that drops the ACK and emits
-     * a `MllpConnectionError({ phase: 'send' })` on the connection (D-04), the peer will
+     * a `MllpConnectionError({ phase: 'send' })` on the connection, the peer will
      * time out waiting and may retry. The server never crashes.
      */
     private _dispatchAck;
@@ -2025,15 +2025,15 @@ declare function createServer(opts?: ServerOptions): MllpServer;
  * Provides the "three lines of code" north-star experience with sensible defaults:
  * `autoAck: 'AA'`, `drainTimeoutMs: 30_000`, `Symbol.asyncDispose` wired.
  *
- * NOTE: Stub at Plan 01 scope, Plan 04 fills in the full implementation.
- *
  * @example
  * ```typescript
  * import { createStarterServer } from '@cosyte/mllp';
  *
  * const server = await createStarterServer({
  *   port: 2575,
- *   onMessage: (payload) => buildAck(payload),
+ *   onMessage: async (payload) => {
+ *     await db.commit(payload); // the durable-commit step; a throw answers a negative ACK
+ *   },
  * });
  * ```
  */
@@ -2047,11 +2047,8 @@ declare function createStarterServer(opts: StarterServerOptions): Promise<MllpSe
  * events with frozen payloads. Supports `AbortSignal` cancellation on every
  * awaitable and `Symbol.asyncDispose` for `await using` ergonomics.
  *
- * Phase 5 PLAN-01 shipped the lifecycle scaffolding, `connect()`, `close()`,
- * `destroy()`, event re-emission. PLAN-02 added `send()` + `MllpTimeoutError`.
- * The `correlateByControlId` option (MSH-10 → MSA-2 ACK matching) lights up
- * out-of-order ACK handling. Subsequent plans add auto-reconnect (Plan 04),
- * backpressure (Plan 05), and `createStarterClient` + `getStats()` (PLAN-06).
+ * The `correlateByControlId` option (MSH-10 → MSA-2 ACK matching) enables
+ * out-of-order ACK handling.
  *
  * @example
  * ```typescript
@@ -2059,7 +2056,7 @@ declare function createStarterServer(opts: StarterServerOptions): Promise<MllpSe
  *
  * const client = createClient({ host: 'localhost', port: 2575 });
  * await client.connect();
- * // PLAN-02 will add: const ack = await client.send(payloadBuffer);
+ * const ack = await client.send(payloadBuffer);
  * await client.close();
  * ```
  *
@@ -2067,11 +2064,9 @@ declare function createStarterServer(opts: StarterServerOptions): Promise<MllpSe
  */
 
 /**
- * Context passed to a custom `retryStrategy` hook on each reconnect attempt
- * (CLIENT-12, D-15).
+ * Context passed to a custom `retryStrategy` hook on each reconnect attempt.
  *
- * Frozen via `Object.freeze` before invocation, handlers cannot mutate
- * (T-05-04-04 mitigation).
+ * Frozen via `Object.freeze` before invocation, handlers cannot mutate.
  *
  * @example
  * ```typescript
@@ -2093,22 +2088,22 @@ interface RetryContext {
     readonly totalElapsedMs: number;
     /** Ms since the last successful ACK. `Infinity` if no success seen. */
     readonly sinceLastSuccessMs: number;
-    /** CLIENT-18 classification (Composition A, D-16). */
+    /** How the failure that triggered this reconnect attempt was classified. */
     readonly classifiedAs: "transient" | "permanent";
     /**
      * The same `AbortSignal` passed into `connect()`. If no signal was
      * supplied, the module-level `NEVER_ABORTING_SIGNAL` sentinel is provided
-     * so handlers always have a real `AbortSignal` to inspect. (D-18, W-07)
+     * so handlers always have a real `AbortSignal` to inspect.
      */
     readonly signal: AbortSignal;
 }
 /**
- * Custom reconnect-backoff hook (CLIENT-12). Return `null` to halt
- * reconnection (D-17), the FSM transitions to `CLOSED`.
+ * Custom reconnect-backoff hook. Return `null` to halt
+ * reconnection, the FSM transitions to `CLOSED`.
  */
 type RetryStrategy = (ctx: RetryContext) => number | null;
 /**
- * Combined count + byte-based queue cap. Stricter-of-two wins (D-23).
+ * Combined count + byte-based queue cap. Stricter-of-two wins.
  *
  * - `number`, count cap only (default 64).
  * - `{ bytes }`, byte cap only.
@@ -2129,8 +2124,6 @@ type HighWaterMark = number | {
 /**
  * Options for {@link createClient} and the {@link MllpClient} constructor.
  *
- * Phase 5 plans extend this incrementally, new fields are additive and optional.
- *
  * @example
  * ```typescript
  * const opts: ClientOptions = { host: 'localhost', port: 2575, drainTimeoutMs: 10_000 };
@@ -2146,54 +2139,54 @@ interface ClientOptions {
     /** Drain timeout for {@link MllpClient.close} (default: `30_000` ms). */
     readonly drainTimeoutMs?: number;
     /**
-     * Per-message ACK timeout in milliseconds (CLIENT-04). The clock starts at
+     * Per-message ACK timeout in milliseconds. The clock starts at
      * the underlying `write()` flush callback, NOT at the `send()` call,
      * pre-flush queue time is not charged to the peer. Default: `30_000`.
      */
     readonly ackTimeoutMs?: number;
     /**
-     * If `true`, ACKs are matched against outgoing sends by MSH-10 → MSA-2
-     * (CLIENT-03 controlId branch). Default `false` (FIFO mode).
+     * If `true`, ACKs are matched against outgoing sends by MSH-10 → MSA-2.
+     * Default `false` (FIFO mode).
      *
      * Out-of-order ACKs from the peer are supported in this mode. MSH-10 is
      * extracted from the outbound payload before send; MSA-2 is extracted from
      * the inbound ACK payload. An ACK whose MSA-2 matches no pending send
      * (and is not in the late-ACK graveyard) emits a frozen
-     * `MllpFramingError('MLLP_ACK_UNMATCHED_CONTROL_ID')` to the `'error'` event
-     * (CLIENT-15). A late ACK whose MSA-2 matches a graveyard entry emits a
-     * `MLLP_ACK_AFTER_TIMEOUT` warning (CLIENT-16) and is dropped.
+     * `MllpFramingError('MLLP_ACK_UNMATCHED_CONTROL_ID')` to the `'error'` event.
+     * A late ACK whose MSA-2 matches a graveyard entry emits a
+     * `MLLP_ACK_AFTER_TIMEOUT` warning and is dropped.
      *
      * @default false
      */
     readonly correlateByControlId?: boolean;
     /**
-     * Auto-reconnect on transient disconnect (CLIENT-05). Default `false`.
+     * Auto-reconnect on transient disconnect. Default `false`.
      *
      * When `true`, dropped connections caused by transient errors (per
      * {@link isTransientConnectionError}) trigger the FSM cycle
      * `CONNECTED → DISCONNECTED → RECONNECTING → CONNECTING → CONNECTED`
-     * with exponential backoff per D-19 unless overridden by
+     * with exponential backoff unless overridden by
      * {@link ClientOptions.retryStrategy}. Permanent errors halt and
-     * transition directly to `CLOSED` (Composition A, D-16).
+     * transition directly to `CLOSED`.
      */
     readonly autoReconnect?: boolean;
     /**
-     * Custom reconnect-backoff hook (CLIENT-12, D-15). Return `null` to halt
-     * reconnection (D-17). Receives a frozen {@link RetryContext}. Defaults
-     * to the exponential strategy described in D-19.
+     * Custom reconnect-backoff hook. Return `null` to halt
+     * reconnection. Receives a frozen {@link RetryContext}. Defaults
+     * to the exponential strategy.
      */
     readonly retryStrategy?: RetryStrategy;
-    /** First delay (ms) on auto-reconnect; default 100. (CLIENT-05, D-19) */
+    /** First delay (ms) on auto-reconnect; default 100. */
     readonly initialDelayMs?: number;
-    /** Maximum backoff cap (ms); default 30_000. (CLIENT-05, D-19) */
+    /** Maximum backoff cap (ms); default 30_000. */
     readonly maxDelayMs?: number;
-    /** Backoff multiplier; default 2. (CLIENT-05, D-19) */
+    /** Backoff multiplier; default 2. */
     readonly multiplier?: number;
-    /** Jitter fraction, e.g. 0.2 = ±20%; default 0.2. (CLIENT-05, D-19) */
+    /** Jitter fraction, e.g. 0.2 = ±20%; default 0.2. */
     readonly jitter?: number;
     /**
-     * Application-level high-water mark on the in-flight + queued send set
-     * (CLIENT-07, D-23). `number` configures a count cap (default 64);
+     * Application-level high-water mark on the in-flight + queued send set.
+     * `number` configures a count cap (default 64);
      * `{ bytes }` configures a byte cap; `{ count, bytes }` configures
      * both, with the stricter-of-two trigger winning.
      *
@@ -2204,17 +2197,17 @@ interface ClientOptions {
      */
     readonly highWaterMark?: HighWaterMark;
     /**
-     * Behavior when the high-water mark is exceeded (CLIENT-07).
+     * Behavior when the high-water mark is exceeded.
      *
      * - `'reject'` (default), `send()` rejects with `MllpBackpressureError`.
      * - `'wait'`, `send()` awaits the `'drain'` event OR the per-message
-     *   `ackTimeoutMs` OR `signal` abort, whichever fires first (CLIENT-11).
+     *   `ackTimeoutMs` OR `signal` abort, whichever fires first.
      *
      * @default 'reject'
      */
     readonly onBackpressure?: "reject" | "wait";
     /**
-     * Strict serialization send → await-ACK → send (CLIENT-19, D-06).
+     * Strict serialization send → await-ACK → send.
      *
      * - `true` (default), concurrent in-flight sends up to
      *   {@link ClientOptions.highWaterMark}.
@@ -2229,23 +2222,23 @@ interface ClientOptions {
      * TCP keepalive interval (ms). Sets `socket.setKeepAlive(true, ms)` on
      * the underlying `net.Socket` BEFORE wrapping in `NetTransport`. OS-level
      * half-open detection (network partitions, NAT-table eviction). Independent
-     * of {@link ClientOptions.deadPeerTimeoutMs} (CLIENT-08, D-11/A3).
+     * of {@link ClientOptions.deadPeerTimeoutMs}.
      *
      * @default undefined (off)
      */
     readonly keepaliveIntervalMs?: number;
     /**
-     * Application-idle timeout (ms) keyed on last inbound bytes / ACK / warning
-     * (CLIENT-08, D-11). On trip, calls `connection.destroy(new Error('dead
+     * Application-idle timeout (ms) keyed on last inbound bytes / ACK / warning.
+     * On trip, calls `connection.destroy(new Error('dead
      * peer timeout'))` which surfaces as `MllpConnectionError({ phase: 'receive' })`.
-     * Trip honors {@link ClientOptions.autoReconnect} (D-13). Independent of
-     * {@link ClientOptions.keepaliveIntervalMs} (D-11/A3).
+     * Trip honors {@link ClientOptions.autoReconnect}. Independent of
+     * {@link ClientOptions.keepaliveIntervalMs}.
      *
      * @default undefined (off)
      */
     readonly deadPeerTimeoutMs?: number;
     /**
-     * Enable TLS (MLLPS) for this connection (Phase 8). `true` enables TLS with
+     * Enable TLS (MLLPS) for this connection. `true` enables TLS with
      * all defaults, including certificate verification **on**. Pass a
      * {@link TlsOptions} object to customize (`ca`/`cert`/`key`, minimum
      * version, ciphers, `allowUnverified`, …).
@@ -2257,16 +2250,16 @@ interface ClientOptions {
     readonly tls?: TlsOptions | true;
 }
 /**
- * Observability snapshot returned by {@link MllpClient.getStats} (OBS-01, D-26).
+ * Observability snapshot returned by {@link MllpClient.getStats}.
  *
- * All fields are JSON-serializable (OBS-04), no Buffers, no class instances,
+ * All fields are JSON-serializable, no Buffers, no class instances,
  * no Maps, no circular references. `lastConnectedAt` and `lastAckAt` are
  * **epoch milliseconds** (numbers), NOT `Date` instances, log-pipeline
- * friendly per D-26.
+ * friendly.
  *
  * `warningsByCode` keys are constrained to the public {@link WarningCode}
  * union, adding/removing a code is a breaking change (CLAUDE.md
- * stable-codes guardrail enforced at the type boundary, B-05).
+ * stable-codes guardrail enforced at the type boundary).
  *
  * @example
  * ```typescript
@@ -2288,7 +2281,7 @@ interface ClientStats {
     readonly inFlight: number;
     /**
      * Aggregated warning counts. Keys are constrained to the public
-     * {@link WarningCode} union (B-05). Connection-level warnings + Correlator
+     * {@link WarningCode} union. Connection-level warnings + Correlator
      * `MLLP_ACK_*` warnings are merged.
      */
     readonly warningsByCode: Partial<Record<WarningCode, number>>;
@@ -2302,28 +2295,28 @@ interface ClientStats {
     readonly ackedTotal: number;
     /** Total ACK timeouts since construction. */
     readonly timedOutTotal: number;
-    /** Total reconnect attempts since construction (W-02). */
+    /** Total reconnect attempts since construction. */
     readonly reconnectAttempts: number;
     /** Epoch ms of the last `CONNECTED` transition. `null` until first connect. */
     readonly lastConnectedAt: number | null;
     /** Epoch ms of the most recent successful ACK. `null` until first ACK. */
     readonly lastAckAt: number | null;
-    /** Whether this client is configured for TLS (Phase 8). Mirrors `ClientOptions.tls` being set. */
+    /** Whether this client is configured for TLS. Mirrors `ClientOptions.tls` being set. */
     readonly tls: boolean;
 }
 /**
- * MLLP client, composes a single Phase 3 {@link Connection} over a {@link NetTransport}
+ * MLLP client, composes a single {@link Connection} over a {@link NetTransport}
  * (production) or any other `Transport` (testing via {@link InMemoryTransport}).
  *
- * Public events, every payload `Object.freeze`'d before emission (D-25):
+ * Public events, every payload `Object.freeze`'d before emission:
  * - `'stateChange'`, `{ from, to, reason? }` from the underlying Connection FSM
  * - `'connect'`, `{ connectionId }` once the FSM enters `CONNECTED`
  * - `'disconnect'`, `{ connectionId }` once the FSM enters `DISCONNECTED`
- * - `'reconnecting'`, `{ connectionId, attempt?, delayMs? }` (Plan 04 populates)
+ * - `'reconnecting'`, `{ connectionId, attempt?, delayMs? }`
  * - `'close'`, `{ connectionId }` once the FSM enters terminal `CLOSED`
  * - `'message'`, `{ payload, connectionId, byteOffset, warnings }` for every inbound frame
  * - `'warning'`, `MllpWarning` enriched with `connectionId` from the Connection layer
- * - `'securityWarning'`, `SecurityWarning` (Phase 8). Emitted on every successful
+ * - `'securityWarning'`, `SecurityWarning`. Emitted on every successful
  *   `secureConnect` (initial + every reconnect) when `tls.allowUnverified` is `true`
  *   with code `MLLP_TLS_VERIFY_DISABLED`. Also mirrored to `process.emitWarning`.
  * - `'error'`, re-emitted from Connection. Guarded by `listenerCount('error') > 0` so
@@ -2335,7 +2328,7 @@ interface ClientStats {
  * client.on('stateChange', ({ from, to }) => logger.info({ from, to }));
  * client.on('message', ({ payload }) => logger.info({ bytes: payload.length }));
  * await client.connect();
- * // PLAN-02 will add: const ack = await client.send(payloadBuffer);
+ * const ack = await client.send(payloadBuffer);
  * await client.close();
  * ```
  */
@@ -2348,15 +2341,15 @@ declare class MllpClient extends EventEmitter {
      * is attached, `state` mirrors `_connection.state`.
      */
     private _state;
-    /** Per-message ACK timeout in ms (CLIENT-04). Resolved at construction. */
+    /** Per-message ACK timeout in ms. Resolved at construction. */
     private readonly _ackTimeoutMs;
-    /** controlId-mode flag (CLIENT-03 branch). `false` → FIFO. */
+    /** controlId-mode flag. `false` → FIFO. */
     private readonly _correlateByControlId;
-    /** Unified ACK correlator (D-03/A1). Built during `_attachConnection`. */
+    /** Unified ACK correlator. Built during `_attachConnection`. */
     private _correlator;
     /**
      * Periodic ACK-timeout sweep timer. Drives `_correlator.expireDue()` because
-     * the Correlator is timer-free per D-03. Cleared on close/destroy.
+     * the Correlator is timer-free. Cleared on close/destroy.
      */
     private _ackSweepTimer;
     private readonly _autoReconnect;
@@ -2368,12 +2361,12 @@ declare class MllpClient extends EventEmitter {
     /** 0-indexed attempt counter for the current reconnect cycle. */
     private _attempt;
     /**
-     * W-02, total reconnect attempts since construction. Read by PLAN-06 for
+     * Total reconnect attempts since construction, surfaced as
      * `getStats().reconnectAttempts`. Incremented at the entry of every
      * `_handleDisconnect` invocation that proceeds to schedule a backoff.
      */
     private _reconnectAttempts;
-    /** Epoch ms of the last successful ACK. Drives W-01 backoff-reset. */
+    /** Epoch ms of the last successful ACK. Drives backoff-reset. */
     private _lastSuccessAt;
     /** Epoch ms when the current reconnect cycle began. `null` outside a cycle. */
     private _reconnectCycleStartedAt;
@@ -2389,12 +2382,12 @@ declare class MllpClient extends EventEmitter {
     private readonly _onBackpressure;
     /** Pipeline flag; default `true` (parallel up to highWaterMark). */
     private readonly _pipeline;
-    /** Dead-peer idle timer (Plan 05, D-11). `null` when not armed. */
+    /** Dead-peer idle timer. `null` when not armed. */
     private _deadPeerTimer;
     /** True once the self-'ack' listener that resets the dead-peer timer
      * has been attached. Guards against duplicate listeners on reconnect. */
     private _ackResetWired;
-    /** Most recently bound `connect()` signal. Reread on every RetryContext build (W-07). */
+    /** Most recently bound `connect()` signal. Reread on every RetryContext build. */
     private _connectSignal;
     /** Set when close()/destroy()/abort fires; reconnect handler short-circuits. */
     private _userClosed;
@@ -2422,7 +2415,7 @@ declare class MllpClient extends EventEmitter {
     /**
      * Aggregated Correlator-emitted warning counts (MLLP_ACK_*). Connection-level
      * warnings are read directly from `_connection.getStats().warningsByCode`
-     * at observation time and merged into the snapshot (D-26).
+     * at observation time and merged into the snapshot.
      */
     private _aggregatedWarningsByCode;
     /**
@@ -2439,8 +2432,8 @@ declare class MllpClient extends EventEmitter {
      */
     get state(): ConnectionState;
     /**
-     * Open a TCP (or TLS, Phase 8) connection to the configured `host:port`
-     * and attach a Phase 3 {@link Connection} to it. Resolves once the FSM
+     * Open a TCP (or TLS) connection to the configured `host:port`
+     * and attach a {@link Connection} to it. Resolves once the FSM
      * enters `CONNECTED`, for TLS, on `'secureConnect'` (handshake complete,
      * including certificate verification when it is on).
      *
@@ -2483,7 +2476,7 @@ declare class MllpClient extends EventEmitter {
      * Build the raw socket + `Transport` pair for a connect / reconnect attempt.
      *
      * Plaintext (`ClientOptions.tls` unset): a `net.Socket` wrapped in
-     * `NetTransport`. TLS (Phase 8): a `tls.TLSSocket` wrapped in
+     * `NetTransport`. TLS: a `tls.TLSSocket` wrapped in
      * `TlsTransport`, verification defaults **on**
      * (`rejectUnauthorized: !allowUnverified`), floor `minVersion: 'TLSv1.2'`
      * (the IHE ATNA ITI-19 BCP195 floor), `servername` defaulting to
@@ -2492,7 +2485,7 @@ declare class MllpClient extends EventEmitter {
     private _createSocketAndTransport;
     /**
      * Wrap a connect-phase socket error as `MllpConnectionError`, classifying
-     * TLS failures (Phase 8) into the additive `connectionCause`:
+     * TLS failures into the additive `connectionCause`:
      *
      * - `'tls-verify'`, certificate-verification failures
      *   ({@link isTlsVerificationErrorCode}).
@@ -2516,7 +2509,7 @@ declare class MllpClient extends EventEmitter {
      */
     private _emitContained;
     /**
-     * Emit the per-connection insecure-TLS warning (Phase 8) when
+     * Emit the per-connection insecure-TLS warning when
      * `tls.allowUnverified === true`, fires on EVERY successful
      * `secureConnect`, initial connect and every reconnect. Emits both a frozen
      * `'securityWarning'` event and `process.emitWarning`. No-op for plaintext
@@ -2525,11 +2518,11 @@ declare class MllpClient extends EventEmitter {
     private _emitInsecureWarningIfNeeded;
     /**
      * Wire a Connection's events through to this MllpClient. Every re-emitted
-     * payload is `Object.freeze`'d before emission (D-25), even though the
+     * payload is `Object.freeze`'d before emission, even though the
      * Connection layer already freezes, defense-in-depth, harmless on
      * already-frozen objects.
      *
-     * Builds the unified `Correlator` (D-03/A1) bound to this Connection and
+     * Builds the unified `Correlator` bound to this Connection and
      * arms the periodic ACK-timeout sweep. The Correlator is teardown-aware:
      * `close()` / `destroy()` clear the sweep timer and reject pending sends.
      *
@@ -2537,37 +2530,36 @@ declare class MllpClient extends EventEmitter {
      */
     private _attachConnection;
     /**
-     * Arm (or re-arm) the dead-peer idle timer (Plan 05, CLIENT-08, D-11).
+     * Arm (or re-arm) the dead-peer idle timer.
      * No-op when `deadPeerTimeoutMs` is unset.
      */
     private _armDeadPeerTimer;
     /**
-     * Clear the dead-peer idle timer (Plan 05, D-14 timer cleanup on
-     * every transition out of CONNECTED).
+     * Clear the dead-peer idle timer on every transition out of CONNECTED.
      */
     private _clearDeadPeerTimer;
     /**
-     * Disconnect handler, Plan 04 reconnect FSM core.
+     * Disconnect handler, reconnect FSM core.
      *
      * Implements:
-     * - CLIENT-17 hybrid in-flight handling (D-08): controlId mode preserves
+     * - Hybrid in-flight handling: controlId mode preserves
      *   pending sends for resend; FIFO mode rejects in-flight with
      *   `connectionCause: 'in-flight-orphan'` and queued with `'fifo-unsafe'`.
-     * - CLIENT-18 classifier-first (Composition A, D-16): permanent errors
+     * - Classifier-first: permanent errors
      *   transition straight to CLOSED without invoking `retryStrategy`.
-     * - W-01 backoff-reset on recent success: first disconnect after a
+     * - Backoff-reset on recent success: first disconnect after a
      *   successful ACK on the prior session resets `_attempt` to 0.
-     * - W-02 `_reconnectAttempts` counter increment.
-     * - D-15 frozen RetryContext + D-17 null-return halts.
-     * - D-19 default exponential strategy.
+     * - `_reconnectAttempts` counter increment.
+     * - Frozen RetryContext; a `null` return from the strategy halts reconnection.
+     * - Default exponential strategy.
      *
-     * Invoked from the SINGLE `_onStateChange` hook, no parallel listener
-     * (B-04). Idempotent across same-cycle re-entry: cycle-start flag
+     * Invoked from the SINGLE `_onStateChange` hook, no parallel listener.
+     * Idempotent across same-cycle re-entry: cycle-start flag
      * coordinates first-disconnect vs subsequent-within-cycle behavior.
      */
     private _handleDisconnect;
     /**
-     * Default retry strategy (D-19): `min(maxDelay, initialDelay * multiplier^attempt)`
+     * Default retry strategy: `min(maxDelay, initialDelay * multiplier^attempt)`
      * with ±jitter applied.
      */
     private _defaultRetryStrategy;
@@ -2603,7 +2595,7 @@ declare class MllpClient extends EventEmitter {
         arm: () => void;
     }): void;
     /**
-     * Test seam, capture or rebind the connect-signal mid-flight (W-07).
+     * Test seam, capture or rebind the connect-signal mid-flight.
      *
      * @internal
      */
@@ -2613,28 +2605,25 @@ declare class MllpClient extends EventEmitter {
      *
      * - FIFO mode: passes `null` controlId so `matchAck` returns the head of
      *   the live store.
-     * - controlId mode: extracts MSA-2 at the `HOOK_EXTENSION_POINT: ack-payload`
-     *   anchor and passes it to `matchAck` for keyed lookup.
+     * - controlId mode: extracts MSA-2 and passes it to `matchAck` for keyed
+     *   lookup.
      *
      * Called from the SINGLE `'message'` listener registered in `_attachConnection`.
-     * No parallel listener is registered, downstream plans extend at the named
-     * anchor (B-04).
+     * No parallel listener is registered.
      */
     private _onAckPayload;
     /**
      * Single source-of-truth for a successfully matched ACK (live-store hit).
      *
-     * PLAN-02: emit frozen 'ack' event, call matched.resolve().
-     * Plan 04 extends at HOOK_EXTENSION_POINT: ack-matched to update _lastSuccessAt.
-     * PLAN-06 extends at HOOK_EXTENSION_POINT: ack-matched to bump _ackedTotal and
-     *   set _lastAckAt.
+     * Emits the frozen 'ack' event and resolves the pending send. Updates
+     * `_lastSuccessAt`, `_ackedTotal` and `_lastAckAt`.
      *
      * Called from _onAckPayload when matchAck() returns a non-null PendingAck.
      */
     private _onAckMatched;
     /**
      * Emit a frozen `'drain'` event when the queue depth and bytes fall below
-     * both configured caps (Plan 05, D-24). Called from `_onAckMatched`
+     * both configured caps. Called from `_onAckMatched`
      * (every successful ACK) and from the Correlator's `onTimeout` callback
      * (every expired send), both code paths free a live-store slot.
      */
@@ -2642,28 +2631,24 @@ declare class MllpClient extends EventEmitter {
     /**
      * Single source-of-truth for Connection FSM transitions.
      *
-     * PLAN-02: re-emit frozen 'stateChange' (was inline in PLAN-01; centralized
-     * here so Plan 04 / Plan 05 can extend at named anchors).
-     * Plan 04 extends at HOOK_EXTENSION_POINT: state-change to detect
-     *   CONNECTED → DISCONNECTED|RECONNECTING and trigger _handleDisconnect.
-     * Plan 05 extends at HOOK_EXTENSION_POINT: state-change to clear/arm
-     *   dead-peer timer on transitions out of / into CONNECTED.
+     * Re-emits a frozen 'stateChange' event, detects
+     * CONNECTED → DISCONNECTED|RECONNECTING to trigger `_handleDisconnect`, and
+     * clears or arms the dead-peer timer on transitions out of / into CONNECTED.
      *
      * Called from the SINGLE 'stateChange' listener registered in _attachConnection.
      */
     private _onStateChange;
     /**
-     * Send an MLLP-framed payload and await the inbound ACK (CLIENT-02).
+     * Send an MLLP-framed payload and await the inbound ACK.
      *
      * Resolves with the ACK Buffer (framing stripped). Rejects with:
-     * - `DOMException('Aborted', 'AbortError')` if `signal` aborts before ACK
-     *   (CLIENT-11 send branch).
-     * - `MllpTimeoutError` if no ACK arrives within `ackTimeoutMs` (ERR-02).
+     * - `DOMException('Aborted', 'AbortError')` if `signal` aborts before the ACK.
+     * - `MllpTimeoutError` if no ACK arrives within `ackTimeoutMs`.
      *   The clock starts at the underlying `write()` flush callback, NOT at
-     *   the `send()` call (CLIENT-04, D-19).
+     *   the `send()` call.
      * - `MllpConnectionError({ phase: 'send' })` if the client is not connected.
      *
-     * Emits a frozen `'ack'` event on every successful match (D-25 + Specifics).
+     * Emits a frozen `'ack'` event on every successful match.
      *
      * @example
      * ```typescript
@@ -2672,19 +2657,19 @@ declare class MllpClient extends EventEmitter {
      * ```
      *
      * @param payload Raw bytes; MLLP framing is added internally via `encodeFrame`.
-     * @param opts.signal AbortSignal, aborting cancels the ACK wait (CLIENT-11).
+     * @param opts.signal AbortSignal, aborting cancels the ACK wait.
      */
     send(payload: Buffer, opts?: {
         signal?: AbortSignal;
         ackTimeoutMs?: number;
     }): Promise<Buffer>;
     /**
-     * 'wait'-mode backpressure handler (Plan 05, CLIENT-07/CLIENT-11).
+     * 'wait'-mode backpressure handler.
      *
      * Awaits one of three terminating signals, in order:
      * - `'drain'` event → re-enter `send()` (the gate will now pass).
      * - `ackTimeoutMs` elapses → reject with `MllpTimeoutError`.
-     * - Caller's `signal` aborts → reject with `AbortError` (B-06). Cleanup
+     * - Caller's `signal` aborts → reject with `AbortError`. Cleanup
      *   removes the drain listener AND the abort listener AND clears the
      *   timer to prevent leaks.
      */
@@ -2732,7 +2717,7 @@ declare class MllpClient extends EventEmitter {
      */
     destroy(reason?: Error): void;
     /**
-     * Returns a JSON-serializable observability snapshot (OBS-01, D-26).
+     * Returns a JSON-serializable observability snapshot.
      *
      * All fields are plain values, no Buffers, no class instances, no Maps,
      * no circular refs. Safe to `JSON.stringify` directly.
@@ -2769,15 +2754,15 @@ declare class MllpClient extends EventEmitter {
  *
  * const client = createClient({ host: 'localhost', port: 2575 });
  * await client.connect();
- * // PLAN-02 will add: const ack = await client.send(payloadBuffer);
+ * const ack = await client.send(payloadBuffer);
  * await client.close();
  * ```
  */
 declare function createClient(opts: ClientOptions): MllpClient;
 /**
- * Options for {@link createStarterClient} (PLAN-06, CLIENT-10).
+ * Options for {@link createStarterClient}.
  *
- * The starter applies opinionated D-22 defaults on top of `ClientOptions`,
+ * The starter applies opinionated defaults on top of `ClientOptions`,
  * so every override here is optional except `host` + `port`. The
  * starter-specific addition is `handleSignals` (mirrors `createStarterServer`).
  *
@@ -2814,31 +2799,30 @@ interface StarterClientOptions {
     readonly onBackpressure?: "reject" | "wait";
     /** Override default `true` (auto-reconnect on transient errors). */
     readonly autoReconnect?: boolean;
-    /** Custom reconnect-backoff hook (CLIENT-12). */
+    /** Custom reconnect-backoff hook. */
     readonly retryStrategy?: RetryStrategy;
     /** Drain timeout for `close()` (default `30_000`). */
     readonly drainTimeoutMs?: number;
     /** FrameReader options (passthrough). */
     readonly framing?: ClientOptions["framing"];
-    /** TCP keepalive interval ms (CLIENT-08). */
+    /** TCP keepalive interval ms. */
     readonly keepaliveIntervalMs?: number;
-    /** Application-idle dead-peer timeout ms (CLIENT-08). */
+    /** Application-idle dead-peer timeout ms. */
     readonly deadPeerTimeoutMs?: number;
-    /** Enable TLS (MLLPS) for this connection (Phase 8). Passthrough to `ClientOptions.tls`. */
+    /** Enable TLS (MLLPS) for this connection. Passthrough to `ClientOptions.tls`. */
     readonly tls?: TlsOptions | true;
     /**
      * Register process SIGTERM/SIGINT handlers that close the client. Default
-     * `false` (D-22). When `true`, SIGTERM/SIGINT both call `client.close()`
-     * and exit the process. Handlers self-deregister on `'close'` (T-05-06-01).
+     * `false`. When `true`, SIGTERM/SIGINT both call `client.close()`
+     * and exit the process. Handlers self-deregister on `'close'`.
      */
     readonly handleSignals?: boolean;
 }
 /**
- * Three-line MLLP client with batteries-included defaults (PLAN-06,
- * CLIENT-10, D-22). The returned client is already CONNECTED, `connect()`
- * has been awaited.
+ * Three-line MLLP client with batteries-included defaults. The returned
+ * client is already CONNECTED, `connect()` has been awaited.
  *
- * D-22 defaults:
+ * Defaults:
  * - `autoReconnect: true`
  * - `ackTimeoutMs: 30_000`
  * - `correlateByControlId: false` (FIFO mode, simplest mental model)
@@ -2865,9 +2849,9 @@ declare function createStarterClient(opts: StarterClientOptions): Promise<MllpCl
  * MLLP Client typed errors and classifiers.
  *
  * Exports:
- * - `MllpTimeoutError` (PLAN-02), ACK timeout (ERR-02)
- * - `MllpBackpressureError`, high-water mark exceeded (ERR-04, plan 05)
- * - `isTransientConnectionError` (PLAN-04), transient/permanent classifier (CLIENT-18)
+ * - `MllpTimeoutError`, ACK timeout
+ * - `MllpBackpressureError`, high-water mark exceeded
+ * - `isTransientConnectionError`, transient/permanent classifier
  *
  * Re-exported from `src/client/index.ts` and `src/index.ts`.
  *
@@ -2875,11 +2859,10 @@ declare function createStarterClient(opts: StarterClientOptions): Promise<MllpCl
  */
 /**
  * Thrown (or rejects the `send()` promise) when an ACK does not arrive within
- * the configured `ackTimeoutMs` (ERR-02).
+ * the configured `ackTimeoutMs`.
  *
  * The timeout clock starts at the underlying `write()` flush callback, NOT
- * at the `send()` call, pre-flush queue time is not charged to the peer
- * (CLIENT-04).
+ * at the `send()` call, pre-flush queue time is not charged to the peer.
  *
  * @example
  * ```typescript
@@ -2917,7 +2900,7 @@ declare class MllpTimeoutError extends Error {
  * failure (as opposed to some other TLS handshake failure), untrusted chain,
  * expired/not-yet-valid certificate, hostname mismatch, revocation, etc.
  *
- * Used by `MllpClient` (Phase 8) to classify a TLS connect failure's
+ * Used by `MllpClient` to classify a TLS connect failure's
  * `connectionCause` as `'tls-verify'` (this set) vs `'tls-handshake'`
  * (everything else observed before `'secureConnect'`). Exported so callers
  * can apply the same classification to their own error handling.
@@ -2933,7 +2916,7 @@ declare class MllpTimeoutError extends Error {
 declare function isTlsVerificationErrorCode(code: string): boolean;
 /**
  * Detects **TLS-protocol-shaped** errors, failures of the TLS protocol
- * itself, as opposed to plain TCP-level network failures (Phase 8).
+ * itself, as opposed to plain TCP-level network failures.
  *
  * Apply this only to errors raised on a **TLS** connection; `MllpClient`
  * does exactly that (the predicate is consulted only when `ClientOptions.tls`
@@ -2986,27 +2969,27 @@ declare function isTlsProtocolError(err: unknown): boolean;
  * Classifies a connection error as transient (eligible for auto-reconnect)
  * or permanent (halts auto-reconnect, transitions to CLOSED).
  *
- * Used internally by `MllpClient` BEFORE invoking `retryStrategy` (Composition A
- * see `RetryContext.classifiedAs`). Re-exported so callers can implement
+ * Used internally by `MllpClient` BEFORE invoking `retryStrategy`
+ * (see `RetryContext.classifiedAs`). Re-exported so callers can implement
  * their own retry policies.
  *
- * Classification table (CLIENT-18, D-16):
+ * Classification table:
  * - `ENOTFOUND`, `EACCES` → **permanent** (`false`)
  * - `ECONNREFUSED`, `ECONNRESET`, `ETIMEDOUT`, `EHOSTUNREACH`,
  *   `ENETUNREACH`, `EPIPE` → **transient** (`true`)
  * - `CERT_*` and `UNABLE_TO_VERIFY_LEAF_SIGNATURE` /
  *   `DEPTH_ZERO_SELF_SIGNED_CERT` / `SELF_SIGNED_CERT_IN_CHAIN`
  *   (any {@link isTlsVerificationErrorCode} code) → **permanent** (`false`),
- *   never auto-reconnect-loop into a misconfigured or MITM'd endpoint (Phase 8).
+ *   never auto-reconnect-loop into a misconfigured or MITM'd endpoint.
  * - `ERR_SSL_*` (Node TLS alert codes) → **permanent** (`false`), a TLS
  *   protocol failure such as a `clientAuth: 'MUST'` server rejecting the
- *   client certificate recurs on every attempt (Phase 8). On TLS-configured
+ *   client certificate recurs on every attempt. On TLS-configured
  *   connections `MllpClient` additionally consults {@link isTlsProtocolError},
  *   which also catches `EPROTO`/alert-bearing OpenSSL errors that this
  *   generic classifier (which cannot know the connection was TLS) leaves
  *   transient.
  * - `MLLP_*` (any {@link MllpFramingError} code, a fatal decoder throw, surfaced with
- *   `connectionCause: 'framing-fatal'`) → **permanent** (`false`) (MLLP-10). The peer is not
+ *   `connectionCause: 'framing-fatal'`) → **permanent** (`false`). The peer is not
  *   speaking MLLP, an HTTP probe, a health check, a wrong-port misconfiguration, or is emitting
  *   frames past `maxFrameSizeBytes`. Every reconnect meets the same bytes, so retrying is an
  *   unbounded storm against a peer that is already misconfigured. If a peer's quirk is *expected*,
@@ -3030,11 +3013,10 @@ declare function isTlsProtocolError(err: unknown): boolean;
 declare function isTransientConnectionError(err: unknown): boolean;
 /**
  * Thrown (or rejects the `send()` promise) when the in-flight queue exceeds
- * the configured high-water mark and `onBackpressure: 'reject'` is set
- * (CLIENT-07, ERR-04).
+ * the configured high-water mark and `onBackpressure: 'reject'` is set.
  *
  * `highWaterMark` accepts a count cap, a byte cap, or both, when both are
- * present, the stricter-of-two trigger wins (D-23).
+ * present, the stricter-of-two trigger wins.
  *
  * @example
  * ```typescript
@@ -3057,7 +3039,7 @@ declare class MllpBackpressureError extends Error {
     readonly queueDepth: number;
     /** Total bytes of in-flight + queued frames at the moment of rejection. */
     readonly queueBytes: number;
-    /** The high-water-mark configuration that was triggered (D-23). */
+    /** The high-water-mark configuration that was triggered. */
     readonly highWaterMark: {
         readonly count?: number;
         readonly bytes?: number;