@fitzzero/quickdraw-core 5.1.1 → 5.1.3

package/dist/{envelope-Cp3YcVxC.d.ts → envelope-BMBaxppV.d.ts}

@@ -1,4 +1,4 @@
-import { A as AccessLevel } from './infer-Teo1xpsd.js';
+import { A as AccessLevel } from './infer-Br62cnyW.js';
 import { W as WireError } from './errors-S-bxEIBC.js';
 
 /**
@@ -58,6 +58,10 @@ declare const CLIENT_EVENTS: Readonly<{
     readonly streamUnsub: "qd:stream:unsub";
     /** A fire-and-forget channel message, sent volatile: `[s, channel, payload]`. */
     readonly channel: "qd:ch";
+    /** A peer link's signal to another socket of an app room: `{ room, to, sig }`. */
+    readonly peer: "qd:peer";
+    /** A peer link's message for the server to relay: `[room, to, label, text]`, dropped on `fast` when backed up. */
+    readonly relay: "qd:relay";
 }>;
 /** Events the server sends to a client (RFC 0003 section 8.3). */
 declare const SERVER_EVENTS: Readonly<{
@@ -81,6 +85,12 @@ declare const SERVER_EVENTS: Readonly<{
     readonly rotate: "qd:rotate";
     /** The user's service grants changed. */
     readonly access: "qd:access";
+    /** A peer link's signal from another socket of an app room: `{ room, from, userId, sig }`. */
+    readonly peer: "qd:peer";
+    /** A peer link's message the server relays: `[room, from, label, text]`. */
+    readonly relay: "qd:relay";
+    /** An app room's host (host mode): `[room, host]`, the host's socket id or `null`. */
+    readonly host: "qd:host";
 }>;
 /** The name of an event a client sends. */
 type ClientEventName = (typeof CLIENT_EVENTS)[keyof typeof CLIENT_EVENTS];
@@ -122,25 +132,72 @@ interface ProtocolMismatch {
 /** True when a `connect_error`'s `data` says the server speaks another protocol. */
 declare function isProtocolMismatch(value: unknown): value is ProtocolMismatch;
 /**
- * The `data` of the error a server refuses a connection with when
- * authenticating it failed: the app's `authenticate` threw, so the
- * credentials are bad or could not be checked. A client tells it apart from
- * {@link ProtocolMismatch} by `code`; reconnecting needs other credentials.
+ * The `data` of the error a server refuses a connection with when it refused
+ * the credentials: the app's `authenticate` threw a `QuickdrawError` with
+ * code `UNAUTHENTICATED` (or `FORBIDDEN`), or the session it recorded
+ * expired during the handshake. A client tells it apart from
+ * {@link ProtocolMismatch} by `code`; reconnecting needs other credentials,
+ * so the user is signed out. A server that could not check the credentials
+ * refuses with {@link AuthenticationUnavailable} instead.
  */
 interface AuthenticationRefused {
     readonly code: "UNAUTHENTICATED";
 }
-/** True when a `connect_error`'s `data` says authenticating the connection failed. */
+/** True when a `connect_error`'s `data` says the server refused the connection's credentials. */
 declare function isAuthenticationRefused(value: unknown): value is AuthenticationRefused;
+/**
+ * The `data` of the error a server refuses a connection with when it could
+ * not authenticate it: the app's `authenticate` (or `loadServiceAccess`)
+ * failed with anything but a refusal, its session store or database down,
+ * say. The credentials may well be good, so a client keeps the user it had
+ * and connects again later, backing off as after a lost connection.
+ */
+interface AuthenticationUnavailable {
+    readonly code: "INTERNAL";
+}
+/** True when a `connect_error`'s `data` says the server could not authenticate the connection. */
+declare function isAuthenticationUnavailable(value: unknown): value is AuthenticationUnavailable;
+/** The most rows one socket may hold entity subscriptions to at once, as `qd:hello` announces it. */
+declare const MAX_ENTITY_IDS_PER_SOCKET = 10000;
+/** The most collection scopes one socket may hold at once, as `qd:hello` announces it. */
+declare const MAX_SCOPES_PER_SOCKET = 1000;
+/** The most change topics one socket may watch at once, as `qd:hello` announces it. */
+declare const MAX_TOPICS_PER_SOCKET = 1000;
 /**
  * Each socket's lane of subscription events (`qd:sub`, `qd:col:sub`,
- * `qd:col:items`, `qd:watch`; RFC 0003 section 8.2), as `qd:hello` announces it.
+ * `qd:col:items`, `qd:watch`; RFC 0003 section 8.2), and how much one
+ * socket may hold at once, as `qd:hello` announces them.
  */
 interface HelloSubscriptionLimits {
     /** Subscription events one socket may have running at once. */
     readonly maxInFlight: number;
     /** Subscription events one socket may have waiting; past that one fails with `RATE_LIMITED`. */
     readonly maxQueued: number;
+    /** Rows one socket may hold entity subscriptions to at once; one more is `CONFLICT`. Absent from servers up to 5.1.0, which have no such cap. */
+    readonly maxEntityIds?: number;
+    /** Collection scopes one socket may hold at once; one more is `CONFLICT`. Absent from servers up to 5.1.0, which have no such cap. */
+    readonly maxScopes?: number;
+    /** Change topics one socket may watch at once; one more is `CONFLICT`. Absent from servers up to 5.1.0, which have no such cap. */
+    readonly maxTopics?: number;
+}
+/**
+ * What one socket may signal and relay over peer links (RFC 0003 section
+ * 12.5), as `qd:hello` announces it. A client keeps its relay messages
+ * within these, so a `rel` message is never dropped for its rate.
+ */
+interface HelloPeerLimits {
+    /** Peers one socket may signal at once; a signal to one more is `CONFLICT`. */
+    readonly maxLinks: number;
+    /** The longest link message, in UTF-8 bytes, on the data channel and through the relay alike. */
+    readonly maxMessageBytes: number;
+    /** Relay messages one socket may send to one peer per second; more are dropped. */
+    readonly relayRate: number;
+    /** Relay messages one socket may send to one peer at once, after a pause. */
+    readonly relayBurst: number;
+    /** Relay bytes one socket may send per second, to all its peers together; more are dropped. */
+    readonly relayBytesPerSecond: number;
+    /** Relay bytes one socket may send at once, after a pause. */
+    readonly relayBytesBurst: number;
 }
 /** The limits a server announces in `qd:hello`, so a client can stay inside them. */
 interface HelloLimits {
@@ -158,6 +215,8 @@ interface HelloLimits {
     readonly callTimeoutMs: number;
     /** The socket's lane of subscription events. */
     readonly subscriptions: HelloSubscriptionLimits;
+    /** What peer links may signal and relay. Absent from a server that serves no peer links, whose `features` lacks `"peer"`. */
+    readonly peers?: HelloPeerLimits;
 }
 /**
  * `qd:hello`: the server's answer to a v5 handshake, sent once per
@@ -178,7 +237,12 @@ interface HelloFrame {
     readonly serverId: string;
     /** What a client must stay within. */
     readonly limits: HelloLimits;
-    /** Names of optional server features that are on. Informational only. */
+    /**
+     * Names of optional server features that are on: `"binary"` (the stock
+     * parser, `createServer({ binary: true })`) and `"peer"` (peer links,
+     * `createServer({ peers: true })`). Informational: a client that finds no
+     * `"peer"` opens no peer link.
+     */
     readonly features: readonly string[];
     /** The user the socket acts for, or `null` when it is anonymous. */
     readonly userId: string | null;
@@ -442,7 +506,8 @@ interface StreamSubscribe {
  * seed is the latest items the server kept, or what the service computed
  * for this subscriber (the current state the items change); a computed one
  * the server had to wait for may also reflect items that arrived as frames
- * meanwhile. A client replaces what it held with it.
+ * meanwhile. A subscribe an unsubscribe overtook answers an empty seed. A
+ * client replaces what it held with it.
  */
 type StreamSubscribeReply<Item = unknown> = {
     readonly ok: true;
@@ -499,6 +564,142 @@ interface PresenceFrame {
     /** A user who left the room: their last socket in it left or disconnected. */
     readonly left?: string;
 }
+/**
+ * A peer link's two channels: `rel`, ordered and reliable, and `fast`,
+ * unordered and never retransmitted (dropped where a connection is backed up).
+ */
+type PeerLabel = "rel" | "fast";
+/** A WebRTC session description, as `RTCSessionDescription.toJSON()` writes it. */
+interface PeerDescription {
+    readonly type: "offer" | "answer";
+    readonly sdp: string;
+}
+/** A WebRTC ICE candidate, as `RTCIceCandidate.toJSON()` writes it. */
+interface PeerCandidate {
+    readonly candidate: string;
+    readonly sdpMid?: string | null;
+    readonly sdpMLineIndex?: number | null;
+    readonly usernameFragment?: string | null;
+}
+/**
+ * What one `qd:peer` frame says about a link, in exactly one member: the
+ * offerer's `offer` or the answerer's `answer` (`sdp`), one ICE candidate
+ * (`ice`), that the sender sends the link's messages through the relay
+ * from now on (`relay`), or that the link is over (`bye`): the sender
+ * closed it or, when the server sends it, left the room or disconnected.
+ */
+interface PeerSignal {
+    readonly sdp?: PeerDescription;
+    readonly ice?: PeerCandidate;
+    readonly relay?: true;
+    readonly bye?: true;
+}
+/**
+ * `qd:peer`, from a client: a signal for socket `to` (another socket's id)
+ * about the link the two have in app room `room`, which both must be in.
+ * Acknowledged when asked: `Ok`, or `UNAUTHENTICATED`, `FORBIDDEN` (the
+ * sender is not in the room), `NOT_FOUND` (no signed-in socket `to` is in
+ * the room; behind a cluster adapter a socket on another node is not
+ * checked before the signal goes), `CONFLICT` (the sender already signals
+ * `limits.peers.maxLinks` peers), `RATE_LIMITED` or `VALIDATION`.
+ */
+interface PeerSignalFrame {
+    readonly room: string;
+    readonly to: string;
+    readonly sig: PeerSignal;
+}
+/**
+ * `qd:peer`, from the server: a signal from socket `from` about the link in
+ * app room `room`. `userId` is the sender's user, as the server knows it.
+ */
+interface PeerForwardFrame {
+    readonly room: string;
+    readonly from: string;
+    readonly userId: string;
+    readonly sig: PeerSignal;
+}
+/**
+ * `qd:relay`, from a client, never acknowledged: a link message for socket
+ * `to` in app room `room`. `text` is a `PeerMessage` as JSON, at most
+ * `limits.peers.maxMessageBytes`. The two sockets must have signalled each
+ * other in that room; a message over the rate or the byte budget of
+ * `limits.peers`, or to a socket that left the room, is dropped, and so is
+ * one on `fast` while the receiving socket's connection is backed up
+ * (`PEER_RELAY_FAST_BACKLOG`). A later revision may append elements after
+ * `text`.
+ */
+type RelayFrame = readonly [room: string, to: string, label: PeerLabel, text: string];
+/** `qd:relay`, from the server: a link message from socket `from` in app room `room`. */
+type RelayForwardFrame = readonly [
+    room: string,
+    from: string,
+    label: PeerLabel,
+    text: string
+];
+/**
+ * A peer link message: the JSON text of one data channel message or of a
+ * relayed `text`, alike on both paths. A receiver ignores a message whose
+ * first element it does not know, and elements after the ones it reads.
+ */
+type PeerMessage = PeerData | PeerPing | PeerPong | HostMessage;
+/** A link message carrying the app's `data`, any JSON value. */
+type PeerData = readonly [kind: 0, data: unknown];
+/** A clock ping: `t` is the sender's clock in milliseconds. Sent on `fast`. */
+type PeerPing = readonly [kind: 1, t: number];
+/** The pong of a ping: `t` as the ping carried it, `u` the answerer's clock as it answered. Sent on `fast`. */
+type PeerPong = readonly [kind: 2, t: number, u: number];
+/**
+ * A host mode message (section 12.5): what a peer and its room's host send
+ * each other over their link, kept apart from the app's own messages.
+ */
+type HostMessage = HostChannelMessage | HostSubscribe | HostUnsubscribe | HostSeed | HostItem | HostRefusal;
+/** A message on a host-served channel, from a peer to the host of the channel's room. Sent on `fast`. */
+type HostChannelMessage = readonly [
+    kind: 3,
+    service: string,
+    channel: string,
+    payload: unknown
+];
+/** Subscribes to a feed of a host-served stream, from a peer to the host of its room. Sent on `rel`. */
+type HostSubscribe = readonly [kind: 4, service: string, stream: string, scope: string];
+/** Leaves a feed of a host-served stream. Sent on `rel`. */
+type HostUnsubscribe = readonly [kind: 5, service: string, stream: string, scope: string];
+/**
+ * The seed of a feed a peer subscribed to, from the host: the latest items
+ * it kept (or computed), oldest first, in chunks that each fit the message
+ * limit; `last` is true on the last chunk. Sent on `rel`.
+ */
+type HostSeed = readonly [
+    kind: 6,
+    service: string,
+    stream: string,
+    scope: string,
+    items: readonly unknown[],
+    last: boolean
+];
+/** An item pushed to a feed, from the host: on `fast` for a volatile stream, else on `rel`. */
+type HostItem = readonly [
+    kind: 7,
+    service: string,
+    stream: string,
+    scope: string,
+    item: unknown
+];
+/** A subscribe the host refused (`NOT_FOUND`, `FORBIDDEN`, ...), from the host. Sent on `rel`. */
+type HostRefusal = readonly [
+    kind: 8,
+    service: string,
+    stream: string,
+    scope: string,
+    error: WireError
+];
+/**
+ * `qd:host`, from the server: the host of app room `room` (the socket that
+ * serves its host-served channels and streams), or `null` when it has none.
+ * Sent to the room's sockets on every change, and to a socket that joins a
+ * room with a host.
+ */
+type HostFrame = readonly [room: string, host: string | null];
 /** Why the server ended a subscription. */
 type RevokeReason = "access" | "anchor-deleted";
 /**
@@ -550,6 +751,8 @@ interface ClientListeners {
     streamSub: (frame: StreamSubscribe, ack: Ack<StreamSubscribeReply>) => void;
     streamUnsub: (frame: StreamSubscribe, ack?: Ack<Ok | Failure>) => void;
     channel: (frame: ChannelFrame) => void;
+    peer: (frame: PeerSignalFrame, ack?: Ack<Ok | Failure>) => void;
+    relay: (frame: RelayFrame) => void;
 }
 /** The listener of each server event, by its key in `SERVER_EVENTS`. */
 interface ServerListeners {
@@ -563,6 +766,9 @@ interface ServerListeners {
     presence: (frame: PresenceFrame) => void;
     rotate: (frame: RotateFrame) => void;
     access: (frame: AccessFrame) => void;
+    peer: (frame: PeerForwardFrame) => void;
+    relay: (frame: RelayForwardFrame) => void;
+    host: (frame: HostFrame) => void;
 }
 /**
  * The events a v5 client sends, keyed by name (`"qd:call"`, ...). The server
@@ -587,4 +793,4 @@ declare function isCallEnvelope(value: unknown): value is CallEnvelope;
 /** True when `value` has the shape of a `qd:cancel` frame. Unknown keys are ignored. */
 declare function isCancel(value: unknown): value is CancelFrame;
 
-export { type EntityUnsubscribe as $, type AuthenticationRefused as A, type ChangedFrame as B, CLIENT_EVENTS as C, type ChannelFrame as D, type ClientToServerEvents as E, type CollectionDelta as F, type CollectionFrame as G, type HandshakeAuth as H, type CollectionItemsReply as I, type CollectionItemsRequest as J, type CollectionResumed as K, type CollectionScopeRef as L, type CollectionSnapshot as M, type CollectionSubscribe as N, type CollectionSubscribeReply as O, PROTOCOL_MISMATCH as P, type QdHandshake as Q, RESERVED_ROOM_PREFIXES as R, SERVER_EVENTS as S, type EntityFrame as T, type EntityNotModified as U, type EntityPatch as V, type EntityRemove as W, type EntityResult as X, type EntityRow as Y, type EntitySubscribe as Z, type EntitySubscribeReply as _, SERVICE_TOPIC as a, type EntityUpdate as a0, type EventFrame as a1, type Failure as a2, type Ok as a3, type PresenceFrame as a4, type Revision as a5, type RevokedFrame as a6, type RevokeReason as a7, type RotateFrame as a8, type ServerToClientEvents as a9, type StreamFrame as aa, type StreamSubscribe as ab, type StreamSubscribeReply as ac, type Version as ad, type WatchFrame as ae, type WireIndexRow as af, collectionTopic as b, collectionRoom as c, type ClientEventName as d, entityRoom as e, type ServerEventName as f, PROTOCOL_VERSION as g, isProtocolMismatch as h, isAuthenticationRefused as i, isQdHandshake as j, type HelloFrame as k, type HelloLimits as l, type HelloSubscriptionLimits as m, type ProtocolMismatch as n, isCallEnvelope as o, isCancel as p, type AccessFrame as q, type CallEnvelope as r, streamRoom as s, topicRoom as t, userRoom as u, type CallId as v, type CallNotModified as w, type CallReply as x, type CallSuccess as y, type CancelFrame as z };
+export { type EntityRow as $, type AuthenticationRefused as A, type CallReply as B, CLIENT_EVENTS as C, type CallSuccess as D, type CancelFrame as E, type ChangedFrame as F, type ChannelFrame as G, type HandshakeAuth as H, type ClientToServerEvents as I, type CollectionDelta as J, type CollectionFrame as K, type CollectionItemsReply as L, type CollectionItemsRequest as M, type CollectionResumed as N, type CollectionScopeRef as O, PROTOCOL_MISMATCH as P, type QdHandshake as Q, RESERVED_ROOM_PREFIXES as R, SERVER_EVENTS as S, type CollectionSnapshot as T, type CollectionSubscribe as U, type CollectionSubscribeReply as V, type EntityFrame as W, type EntityNotModified as X, type EntityPatch as Y, type EntityRemove as Z, type EntityResult as _, SERVICE_TOPIC as a, type EntitySubscribe as a0, type EntitySubscribeReply as a1, type EntityUnsubscribe as a2, type EntityUpdate as a3, type EventFrame as a4, type Failure as a5, type Ok as a6, type PeerCandidate as a7, type PeerData as a8, type PeerDescription as a9, type Version as aA, type WatchFrame as aB, type WireIndexRow as aC, MAX_ENTITY_IDS_PER_SOCKET as aD, MAX_SCOPES_PER_SOCKET as aE, MAX_TOPICS_PER_SOCKET as aF, type PeerForwardFrame as aa, type PeerLabel as ab, type PeerMessage as ac, type PeerPing as ad, type PeerPong as ae, type PeerSignal as af, type PeerSignalFrame as ag, type PresenceFrame as ah, type RelayForwardFrame as ai, type HostChannelMessage as aj, type HostFrame as ak, type HostItem as al, type HostMessage as am, type HostRefusal as an, type HostSeed as ao, type HostSubscribe as ap, type HostUnsubscribe as aq, type RelayFrame as ar, type Revision as as, type RevokedFrame as at, type RevokeReason as au, type RotateFrame as av, type ServerToClientEvents as aw, type StreamFrame as ax, type StreamSubscribe as ay, type StreamSubscribeReply as az, collectionTopic as b, collectionRoom as c, type ClientEventName as d, entityRoom as e, type ServerEventName as f, PROTOCOL_VERSION as g, isAuthenticationUnavailable as h, isAuthenticationRefused as i, isProtocolMismatch as j, isQdHandshake as k, type AuthenticationUnavailable as l, type HelloFrame as m, type HelloLimits as n, type HelloPeerLimits as o, type HelloSubscriptionLimits as p, type ProtocolMismatch as q, isCallEnvelope as r, streamRoom as s, topicRoom as t, userRoom as u, isCancel as v, type AccessFrame as w, type CallEnvelope as x, type CallId as y, type CallNotModified as z };

package/dist/{http-Djj2Inuu.d.ts → http-YzLAar3w.d.ts}

@@ -1,12 +1,12 @@
 import { IncomingMessage, ServerResponse } from 'node:http';
-import { L as Logger } from './logger-BY28acW-.js';
-import { J as AnyContract, A as AccessLevel } from './infer-Teo1xpsd.js';
-import { P as Principal, T as Transport, a as McpContext, D as DbOf, c as PrincipalOf, M as MaybePromise } from './types-Cu0vmx7c.js';
-import { A as AnyService, g as ServiceMethod, R as RowLevels, k as AccessFilter, d as Caller, l as RunContext, m as RunOptions, P as Presence, n as ServerRooms, o as StreamHandle, p as AnyContext, S as StorageAdapter, U as UnitOfWorkFactory, e as FlushSink, q as AccessEngine } from './caller-CXTFswBO.js';
-import { ad as Version, x as CallReply } from './envelope-Cp3YcVxC.js';
+import { L as Logger } from './logger-Yz93KzdV.js';
+import { J as AnyContract } from './infer-Br62cnyW.js';
+import { A as AnyService, g as ServiceMethod, d as Caller, R as RunContext, k as RunOptions, l as DispatcherAccess, P as Presence, m as ServerRooms, n as StreamHandle, o as AnyContext, S as StorageAdapter, U as UnitOfWorkFactory, e as FlushSink, p as AccessEngine } from './caller-BTwGl7vm.js';
+import { P as Principal, T as Transport, a as McpContext, D as DbOf, b as PrincipalOf, c as McpContextOf, M as MaybePromise } from './types-CLRCQGnO.js';
+import { aA as Version, B as CallReply } from './envelope-BMBaxppV.js';
 import { Q as QuickdrawError } from './errors-S-bxEIBC.js';
-import { C as CallRecord } from './metrics-BdBu5o8G.js';
-import { S as ServerAuth } from './auth-BhWqdyb-.js';
+import { C as CallRecord } from './metrics-CTVpw0gu.js';
+import { S as ServerAuth } from './auth-DtdYjrZ9.js';
 
 /** How one call ended. The dispatcher's `call` resolves with it and never rejects. */
 type DispatchResult = {
@@ -65,7 +65,9 @@ interface DispatchRequest {
     readonly v?: Version;
     /**
      * The fields the MCP bridge's `context` option produced for this call,
-     * which the handler reads as `ctx.mcp`. Only the MCP transport sets it.
+     * which the handler reads as `ctx.mcp`. The MCP transport sets it, and a
+     * call's `ctx.services` passes its own on to the calls it makes, whose
+     * transport is `"internal"`.
      */
     readonly mcp?: McpContext;
     /**
@@ -95,47 +97,6 @@ interface Registry {
     find(service: string, method: string): RegisteredMethod | undefined;
 }
 
-/**
- * A row whose access may have changed: who may now see more or less of it.
- * `id` is the row (the anchor subscriptions record); without it, any row of
- * the service. `userId` is the user whose level may have changed; without it,
- * anyone's.
- */
-interface AccessChange {
-    /** The service name. */
-    readonly service: string;
-    readonly id?: string;
-    readonly userId?: string;
-}
-/** Receives access changes; a promise it returns is awaited before the flush moves on. */
-type AccessChangeListener = (change: AccessChange) => void | PromiseLike<void>;
-
-/** The dispatcher's view of its services' access policies: `dispatcher.access`. */
-interface DispatcherAccess {
-    /**
-     * The principal's level on each of `ids` of `service`, as an `{ entry }`
-     * check counts it: the service's policy, or `Admin` on every row when the
-     * principal holds a service-wide `Admin` grant and the service keeps
-     * `adminBypass` on. A grant below `Admin` does not count. A row that is
-     * not found has no level. One batched lookup per policy.
-     */
-    levelsFor(service: AnyContract | string, principal: Principal, ids: readonly string[]): Promise<RowLevels>;
-    /**
-     * A filter for `db.<model>.findMany({ where })` matching exactly the rows of
-     * `service` on which `levelsFor` gives the principal at least `level`:
-     * `{}` (every row) for a service-wide `Admin` with `adminBypass`, or
-     * `"none"` when no row matches.
-     */
-    accessWhere(service: AnyContract | string, principal: Principal, level: AccessLevel): Promise<AccessFilter>;
-    /**
-     * Calls `listener` after each flush whose tracked writes may have changed
-     * someone's access to a row (`AccessChange`), once the cache no longer
-     * holds what they changed. A promise it returns is awaited before the
-     * dispatcher's other flush sinks run. Returns a function that removes it.
-     */
-    onAccessChanged(listener: AccessChangeListener): () => void;
-}
-
 type TypesOf<S extends readonly AnyService[]> = NonNullable<S[number]["~types"]>;
 /** The database client the services of `S` were declared with. */
 type DbOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? unknown : DbOf<TypesOf<S>>;
@@ -143,12 +104,15 @@ type DbOfServices<S extends readonly AnyService[]> = [S[number]] extends [never]
 type PrincipalOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? Principal : PrincipalOf<TypesOf<S>>;
 /** The contracts the services of `S` were defined from. */
 type ContractOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? AnyContract : S[number]["contract"];
+/** The type of `ctx.mcp` for the services of `S`: their app's `QuickdrawTypes["mcp"]`. */
+type McpContextOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? McpContext : McpContextOf<TypesOf<S>>;
 /**
- * Options of {@link createDispatcher}: the services and the database client
- * handlers receive, plus the pipeline's seams and limits. `db` may be left
- * out only when the services declared no database type.
+ * The options `createDispatcher` and `createServer` share: the services and
+ * the database client handlers receive, plus the pipeline's seams and
+ * limits. `db` may be left out only when the services declared no database
+ * type.
  */
-type DispatcherOptions<S extends readonly AnyService[]> = PipelineOptions & {
+type DispatcherBaseOptions<S extends readonly AnyService[]> = PipelineOptions & {
     /** The services to serve. Two services with one name are an error. */
     readonly services: S;
 } & (unknown extends DbOfServices<S> ? {
@@ -156,6 +120,23 @@ type DispatcherOptions<S extends readonly AnyService[]> = PipelineOptions & {
 } : {
     readonly db: DbOfServices<S>;
 });
+/** Options of {@link createDispatcher}: the shared ones, and where users' grants are stored. */
+type DispatcherOptions<S extends readonly AnyService[]> = DispatcherBaseOptions<S> & {
+    /**
+     * Where users' service-wide grants are stored, as `{ model: "user",
+     * column: "serviceAccess" }`: the admin kit on that model treats the
+     * column as the grants field, whatever its name (hidden unless
+     * `grants: true`, and then for service-wide Admins only). `createServer`
+     * takes it as `auth.serviceAccessSource`, which also refreshes the grants
+     * it stores; a dispatcher made without `createServer` (an app that serves
+     * HTTP with `createHttpRouter`, an MCP process) names it here, or the
+     * column is an ordinary field there.
+     */
+    readonly serviceAccessSource?: {
+        readonly model: string;
+        readonly column: string;
+    };
+};
 /** `dispatcher.collections` and `qd.collections`: the services' collections (RFC 0003 section 7). */
 interface DispatcherCollections {
     /**
@@ -220,12 +201,24 @@ interface Dispatcher<S extends readonly AnyService[] = readonly AnyService[]> {
     /**
      * The handle of one of the services' streams (RFC 0003 section 12.5), whose
      * `push` appends an item: `dispatcher.stream(task, "logs").push(taskId,
-     * line)`. Throws a `TypeError` for a stream the dispatcher does not serve.
+     * line)`, and whose `subscribers(taskId)` counts the sockets that watch the
+     * feed on every node. Throws a `TypeError` for a stream the dispatcher does
+     * not serve, a host-served one included.
      */
     stream<C extends AnyContract, K extends keyof C["streams"] & string>(contract: C, name: K): StreamHandle<C, K>;
     readonly registry: Registry;
     /** The resolved limits, for a server to announce in `qd:hello`. */
     readonly limits: DispatcherLimits;
+    /**
+     * Where users' service-wide grants are stored, as the dispatcher was made
+     * with it (`serviceAccessSource`, which `createServer` takes from
+     * `auth.serviceAccessSource`): the admin kit on that model treats the
+     * column as the grants field. `undefined` without one.
+     */
+    readonly serviceAccessSource: {
+        readonly model: string;
+        readonly column: string;
+    } | undefined;
 }
 /**
  * Creates a dispatcher for `services`.
@@ -257,6 +250,12 @@ interface VersionRequest {
  * checked, for queries that declare no `version` of their own. It must take
  * the version before any row is read, so a reply is never older than the
  * version it claims.
+ *
+ * A version is a one-bit oracle: "not modified" comes before the handler
+ * runs, and tells the caller that what the version stands for exists and
+ * has not changed. Answer only for rows the method's access form let the
+ * caller read; the default answers for an `entry` form on `id`, a `rowless`
+ * method and a caller the service's `Admin` bypass passes.
  */
 interface VersionSource {
     versionOf(request: VersionRequest): MaybePromise<Version | undefined>;
@@ -334,7 +333,13 @@ type LimitsOptions = Partial<Omit<DispatcherLimits, "subscriptions">> & {
 declare const DEFAULT_LIMITS: DispatcherLimits;
 /** The pipeline's options: every seam and limit has a default. */
 interface PipelineOptions extends TrackingOptions {
-    /** Receives one entry per call, and the original error of every `INTERNAL` failure. Default: the console. */
+    /**
+     * Receives one entry per call, and the original error of every `INTERNAL`
+     * failure; a Prisma error is summarized (class, code, `meta`, frames),
+     * never its message, which renders the call's values. Default: the
+     * console (`consoleLogger`), which drops `debug` when `NODE_ENV` is
+     * "production"; `createConsoleLogger({ level })` names another level.
+     */
     readonly logger?: Logger;
     /**
      * The access options (`{ cacheMs }`), or an engine of the app's own that
@@ -346,7 +351,11 @@ interface PipelineOptions extends TrackingOptions {
      * Answers query versions for "not modified" replies, for queries that
      * declare no `version` of their own. Default: the version of the row a
      * query returns, for a query whose output is one projection row and whose
-     * input has an `id`: the service's `versionColumn`, or the change log.
+     * input has an `id`: the service's `versionColumn`, or the change log;
+     * only when the method's form checked that row (an `entry` form on `id`, a
+     * `rowless` method, or the service's `Admin` bypass). A source of the
+     * app's own must answer only for rows the form let the caller read: a
+     * version is a one-bit oracle, answered before the handler runs.
      */
     readonly versions?: VersionSource;
     /**
@@ -406,7 +415,8 @@ interface HttpTransportOptions {
      * the cookie a domain; else `"__Host-session"` on a request over HTTPS
      * (`req.secure`, `X-Forwarded-Proto: https` or an `https:` `Origin`),
      * which never reads the plain name a sibling site could plant, and
-     * `"session"` (then `"__Host-session"`) on a plain HTTP one. A name given
+     * `"session"` on a plain HTTP one, where `"__Host-session"` is read first
+     * all the same. A name given
      * here is the only one read, on any request. A name the request repeats
      * counts as no cookie.
      */
@@ -423,8 +433,14 @@ interface HttpTransportOptions {
 /** Options of {@link createHttpRouter}. */
 interface HttpRouterOptions<P extends Principal = Principal> extends HttpTransportOptions {
     /** The dispatcher whose methods the router serves. */
-    readonly dispatcher: Pick<Dispatcher, "call">;
-    /** Authenticates each request, with the same hooks as `createServer`'s `auth`. */
+    readonly dispatcher: Pick<Dispatcher, "call"> & Partial<Pick<Dispatcher, "serviceAccessSource">>;
+    /**
+     * Authenticates each request, with the same hooks as `createServer`'s
+     * `auth`. Its `serviceAccessSource` must be the dispatcher's own (made
+     * with `createDispatcher({ serviceAccessSource })`), or the router throws:
+     * the admin kit protects the grants column only where the dispatcher
+     * names it.
+     */
     readonly auth?: ServerAuth<P>;
     /** Default: the console. */
     readonly logger?: Logger;
@@ -439,4 +455,4 @@ interface HttpRouterOptions<P extends Principal = Principal> extends HttpTranspo
  */
 declare function createHttpRouter<P extends Principal = Principal>(options: HttpRouterOptions<P>): HttpRouter;
 
-export { type AccessOptions as A, type ContractOfServices as C, type Dispatcher as D, type HttpRouter as H, type LimitsOptions as L, type PrincipalOfServices as P, type RegisteredMethod as R, type SharedData as S, type TrackingOptions as T, type VersionRequest as V, type DispatcherOptions as a, type HttpTransportOptions as b, type DispatcherCollections as c, type ChangeLogOptions as d, createDispatcher as e, type DbOfServices as f, type Registry as g, type DispatchRequest as h, type DispatchResult as i, DEFAULT_LIMITS as j, type DispatcherLimits as k, type PipelineOptions as l, type SubscriptionLimits as m, type DispatcherAccess as n, type AccessChange as o, type AccessChangeListener as p, type VersionSource as q, createHttpRouter as r, type HttpMiddleware as s, toCallReply as t, type HttpRouterOptions as u };
+export { type AccessOptions as A, type ContractOfServices as C, type Dispatcher as D, type HttpRouter as H, type LimitsOptions as L, type McpContextOfServices as M, type PrincipalOfServices as P, type RegisteredMethod as R, type SharedData as S, type TrackingOptions as T, type VersionRequest as V, type DispatcherBaseOptions as a, type HttpTransportOptions as b, type DispatcherOptions as c, type DispatcherCollections as d, type ChangeLogOptions as e, createDispatcher as f, type DbOfServices as g, type Registry as h, type DispatchRequest as i, type DispatchResult as j, DEFAULT_LIMITS as k, type DispatcherLimits as l, type PipelineOptions as m, type SubscriptionLimits as n, type VersionSource as o, createHttpRouter as p, type HttpMiddleware as q, type HttpRouterOptions as r, toCallReply as t };

package/dist/index.d.ts

@@ -1,12 +1,13 @@
-export { a as ACE, b as ACL, A as AccessLevel, J as AnyContract, Y as CHANNEL_DEFAULT_RATE, a0 as ChannelDef, a9 as ChannelInputOf, aa as ChannelName, ab as ChannelPayloadOf, a1 as ChannelRequires, C as CollectionDef, ac as CollectionName, ad as CollectionOf, y as CollectionWhere, K as Contract, L as ContractDefinition, ae as ContractMap, D as DEFAULT_COLLECTION_LIMIT, w as DEFAULT_COLLECTION_MAX_LIMIT, af as EntityOf, E as EntityProjection, a2 as EventDef, ag as EventName, ah as EventPayloadOf, ai as FullProjectionOf, Z as GLOBAL_STREAM, aj as IndexFieldOf, R as IndexRow, ak as IndexRowOf, I as InferInput, c as InferOutput, al as InputOf, am as IsScopedStream, an as ItemOf, ao as KindOf, M as MethodDef, k as MethodKind, ap as MethodName, aq as MethodOf, o as MethodOutput, p as MutationDef, N as NullableProjection, O as OrderBy, ar as OutputOf, as as ParsedInputOf, a3 as PayloadSelector, P as ProjectionList, at as ProjectionName, au as ProjectionOf, r as ProjectionRef, Q as QueryDef, av as ReceivedRow, U as ReservedMethodName, a4 as RoomPrefix, a5 as RoomSelector, X as RowSchema, _ as STREAM_MAX_SEED, aw as ScopeOf, s as ServiceModelsWatch, ax as ServiceNameOf, u as ServiceWatch, z as SortDirection, S as StandardJSONSchemaV1, d as StandardSchemaV1, e as StandardSchemaWithJSON, f as StandardTypedV1, a6 as StreamAccess, a7 as StreamDef, ay as StreamItemOf, az as StreamName, a8 as StreamRoom, T as TODO_SCHEMA_VENDOR, g as TodoSchemaOptions, V as ValidationIssue, j as ValidationResult, B as ViaScope, aA as ViewName, G as ViewPredicate, F as Viewer, W as Watch, H as defineContract, h as hasJsonSchema, $ as isScopedStream, i as isStandardSchema, l as listOf, m as mutation, n as nullable, q as query, t as todoSchema, v as validate, x as via } from './infer-Teo1xpsd.js';
-export { L as Logger, c as consoleLogger } from './logger-BY28acW-.js';
-export { A as ADMIN_METHODS, w as AdminContractOptions, x as AdminCreateDef, y as AdminDeleteDef, z as AdminGetDef, D as AdminListDef, E as AdminMetaDef, F as AdminMethodName, G as AdminMethods, H as AdminMethodsOf, J as AdminReemitDef, K as AdminSubscribersDef, M as AdminTag, O as AdminUpdateDef, B as BulkPatch, t as BulkResult, s as CRUD_MAX_IDS, C as CRUD_METHODS, a as CrudBulkDelete, b as CrudBulkUpdate, d as CrudContractOptions, e as CrudCreate, f as CrudDelete, g as CrudGet, h as CrudGetMany, i as CrudInputOptions, j as CrudList, k as CrudListOptions, l as CrudMethodName, m as CrudMethods, n as CrudReorder, o as CrudReorderOptions, p as CrudTag, q as CrudToggle, r as CrudUpdate, I as IdInput, u as IdsInput, P as KitSchema, L as ListInput, N as NumberFieldOf, R as ReorderInput, S as ScalarFieldOf, W as WithId, v as admin, c as crud } from './admin-DKwkIh5i.js';
-export { o as ADMIN_DEFAULT_PAGE_SIZE, A as ADMIN_FIELD_TYPES, p as ADMIN_MAX_PAGE, q as ADMIN_MAX_PAGE_SIZE, k as ADMIN_NEVER_WRITABLE, r as AdminCreateInput, s as AdminCreateQuery, t as AdminData, l as AdminFieldConfig, m as AdminFieldType, u as AdminListInput, v as AdminListQuery, w as AdminMetaInput, x as AdminNeverWritable, y as AdminPage, n as AdminServiceMeta, z as AdminSubscribers, B as AdminUpdateInput, C as AdminUpdateQuery, D as AdminWritable, F as FilterValue, L as LIST_DEFAULT_LIMIT, a as LIST_MAX_LIMIT, b as ListPage, c as ListQuery, d as ListSort, S as SEARCH_DEFAULT_LIMIT, e as SEARCH_DEFAULT_MIN_LENGTH, f as SEARCH_MAX_LIMIT, g as SEARCH_MAX_QUERY_LENGTH, h as SearchInput, i as SearchPage, j as SearchQuery, E as SubscriberLevel } from './adminSchemas-2DUA_hZ8.js';
-export { A as AclMethodName, I as InviteByNameInput, z as InviteByNameQuery, B as InviteInput, C as InviteQuery, L as LeaveInput, D as ListMembersInput, E as ListMembersQuery, F as Member, G as MemberInput, M as MembersMethodName, H as MembersPage, y as SHARE_LEVELS, d as SHARING_METHODS, S as SearchContractOptions, a as SearchDef, b as SearchMethods, c as SearchTag, J as SetRoleInput, K as ShareByNameInput, N as ShareByNameQuery, O as ShareInput, P as ShareLevel, f as SharingByNameMethod, g as SharingContractOptions, h as SharingDefOf, i as SharingInvite, j as SharingInviteByName, k as SharingLeave, l as SharingListMembers, m as SharingListShares, n as SharingMethodName, o as SharingMethods, p as SharingMode, q as SharingRemove, r as SharingSetLevel, t as SharingSetRole, u as SharingShare, v as SharingShareByName, w as SharingTag, x as SharingUnshare, T as TextFieldOf, U as UnshareInput, Q as UserLookupInput, s as search, e as sharing } from './sharing-DVa8W-yR.js';
-export { q as AccessFrame, A as AuthenticationRefused, C as CLIENT_EVENTS, r as CallEnvelope, v as CallId, w as CallNotModified, x as CallReply, y as CallSuccess, z as CancelFrame, B as ChangedFrame, D as ChannelFrame, d as ClientEventName, E as ClientToServerEvents, F as CollectionDelta, G as CollectionFrame, I as CollectionItemsReply, J as CollectionItemsRequest, K as CollectionResumed, L as CollectionScopeRef, M as CollectionSnapshot, N as CollectionSubscribe, O as CollectionSubscribeReply, T as EntityFrame, U as EntityNotModified, V as EntityPatch, W as EntityRemove, X as EntityResult, Y as EntityRow, Z as EntitySubscribe, _ as EntitySubscribeReply, $ as EntityUnsubscribe, a0 as EntityUpdate, a1 as EventFrame, a2 as Failure, H as HandshakeAuth, k as HelloFrame, l as HelloLimits, m as HelloSubscriptionLimits, a3 as Ok, P as PROTOCOL_MISMATCH, g as PROTOCOL_VERSION, a4 as PresenceFrame, n as ProtocolMismatch, Q as QdHandshake, R as RESERVED_ROOM_PREFIXES, a5 as Revision, a7 as RevokeReason, a6 as RevokedFrame, a8 as RotateFrame, S as SERVER_EVENTS, a as SERVICE_TOPIC, f as ServerEventName, a9 as ServerToClientEvents, aa as StreamFrame, ab as StreamSubscribe, ac as StreamSubscribeReply, ad as Version, ae as WatchFrame, af as WireIndexRow, c as collectionRoom, b as collectionTopic, e as entityRoom, i as isAuthenticationRefused, o as isCallEnvelope, p as isCancel, h as isProtocolMismatch, j as isQdHandshake, s as streamRoom, t as topicRoom, u as userRoom } from './envelope-Cp3YcVxC.js';
+export { a as ACE, b as ACL, A as AccessLevel, J as AnyContract, Y as CHANNEL_DEFAULT_RATE, a0 as ChannelDef, a9 as ChannelInputOf, aa as ChannelName, ab as ChannelPayloadOf, a1 as ChannelRequires, C as CollectionDef, ac as CollectionName, ad as CollectionOf, y as CollectionWhere, K as Contract, L as ContractDefinition, ae as ContractMap, D as DEFAULT_COLLECTION_LIMIT, w as DEFAULT_COLLECTION_MAX_LIMIT, af as EntityOf, E as EntityProjection, a2 as EventDef, ag as EventName, ah as EventPayloadOf, ai as FullProjectionOf, Z as GLOBAL_STREAM, aj as IndexFieldOf, R as IndexRow, ak as IndexRowOf, I as InferInput, c as InferOutput, al as InputOf, am as IsScopedStream, an as ItemOf, ao as KindOf, M as MethodDef, k as MethodKind, ap as MethodName, aq as MethodOf, o as MethodOutput, p as MutationDef, N as NullableProjection, O as OrderBy, ar as OutputOf, as as ParsedInputOf, a3 as PayloadSelector, P as ProjectionList, at as ProjectionName, au as ProjectionOf, r as ProjectionRef, Q as QueryDef, av as ReceivedRow, U as ReservedMethodName, a4 as RoomPrefix, a5 as RoomSelector, X as RowSchema, _ as STREAM_MAX_SEED, aw as ScopeOf, s as ServiceModelsWatch, ax as ServiceNameOf, u as ServiceWatch, z as SortDirection, S as StandardJSONSchemaV1, d as StandardSchemaV1, e as StandardSchemaWithJSON, f as StandardTypedV1, a6 as StreamAccess, a7 as StreamDef, ay as StreamItemOf, az as StreamName, a8 as StreamRoom, T as TODO_SCHEMA_VENDOR, g as TodoSchemaOptions, V as ValidationIssue, j as ValidationResult, B as ViaScope, aA as ViewName, G as ViewPredicate, F as Viewer, W as Watch, H as defineContract, h as hasJsonSchema, $ as isScopedStream, i as isStandardSchema, l as listOf, m as mutation, n as nullable, q as query, t as todoSchema, v as validate, x as via } from './infer-Br62cnyW.js';
+export { C as ConsoleLoggerOptions, b as LogLevel, L as Logger, c as consoleLogger, a as createConsoleLogger } from './logger-Yz93KzdV.js';
+export { A as ADMIN_METHODS, w as AdminContractOptions, x as AdminCreateDef, y as AdminDeleteDef, z as AdminGetDef, D as AdminListDef, E as AdminMetaDef, F as AdminMethodName, G as AdminMethods, H as AdminMethodsOf, J as AdminReemitDef, K as AdminSubscribersDef, M as AdminTag, O as AdminUpdateDef, B as BulkPatch, t as BulkResult, s as CRUD_MAX_IDS, C as CRUD_METHODS, a as CrudBulkDelete, b as CrudBulkUpdate, d as CrudContractOptions, e as CrudCreate, f as CrudDelete, g as CrudGet, h as CrudGetMany, i as CrudInputOptions, j as CrudList, k as CrudListOptions, l as CrudMethodName, m as CrudMethods, n as CrudReorder, o as CrudReorderOptions, p as CrudTag, q as CrudToggle, r as CrudUpdate, I as IdInput, u as IdsInput, P as KitSchema, L as ListInput, N as NumberFieldOf, R as ReorderInput, S as ScalarFieldOf, W as WithId, v as admin, c as crud } from './admin-CS7JB_UH.js';
+export { o as ADMIN_DEFAULT_PAGE_SIZE, A as ADMIN_FIELD_TYPES, p as ADMIN_MAX_PAGE, q as ADMIN_MAX_PAGE_SIZE, k as ADMIN_NEVER_WRITABLE, r as AdminCreateInput, s as AdminCreateQuery, t as AdminData, l as AdminFieldConfig, m as AdminFieldType, u as AdminListInput, v as AdminListQuery, w as AdminMetaInput, x as AdminNeverWritable, y as AdminPage, n as AdminServiceMeta, z as AdminSubscribers, B as AdminUpdateInput, C as AdminUpdateQuery, D as AdminWritable, F as FilterValue, L as LIST_DEFAULT_LIMIT, a as LIST_MAX_LIMIT, b as ListPage, c as ListQuery, d as ListSort, S as SEARCH_DEFAULT_LIMIT, e as SEARCH_DEFAULT_MIN_LENGTH, f as SEARCH_MAX_LIMIT, g as SEARCH_MAX_QUERY_LENGTH, h as SearchInput, i as SearchPage, j as SearchQuery, E as SubscriberLevel } from './adminSchemas-29cGgrg5.js';
+export { A as AclMethodName, I as InviteByNameInput, z as InviteByNameQuery, B as InviteInput, C as InviteQuery, L as LeaveInput, D as ListMembersInput, E as ListMembersQuery, F as Member, G as MemberInput, M as MembersMethodName, H as MembersPage, y as SHARE_LEVELS, d as SHARING_METHODS, S as SearchContractOptions, a as SearchDef, b as SearchMethods, c as SearchTag, J as SetRoleInput, K as ShareByNameInput, N as ShareByNameQuery, O as ShareInput, P as ShareLevel, f as SharingByNameMethod, g as SharingContractOptions, h as SharingDefOf, i as SharingInvite, j as SharingInviteByName, k as SharingLeave, l as SharingListMembers, m as SharingListShares, n as SharingMethodName, o as SharingMethods, p as SharingMode, q as SharingRemove, r as SharingSetLevel, t as SharingSetRole, u as SharingShare, v as SharingShareByName, w as SharingTag, x as SharingUnshare, T as TextFieldOf, U as UnshareInput, Q as UserLookupInput, s as search, e as sharing } from './sharing-BrsmlDv_.js';
+export { w as AccessFrame, A as AuthenticationRefused, l as AuthenticationUnavailable, C as CLIENT_EVENTS, x as CallEnvelope, y as CallId, z as CallNotModified, B as CallReply, D as CallSuccess, E as CancelFrame, F as ChangedFrame, G as ChannelFrame, d as ClientEventName, I as ClientToServerEvents, J as CollectionDelta, K as CollectionFrame, L as CollectionItemsReply, M as CollectionItemsRequest, N as CollectionResumed, O as CollectionScopeRef, T as CollectionSnapshot, U as CollectionSubscribe, V as CollectionSubscribeReply, W as EntityFrame, X as EntityNotModified, Y as EntityPatch, Z as EntityRemove, _ as EntityResult, $ as EntityRow, a0 as EntitySubscribe, a1 as EntitySubscribeReply, a2 as EntityUnsubscribe, a3 as EntityUpdate, a4 as EventFrame, a5 as Failure, H as HandshakeAuth, m as HelloFrame, n as HelloLimits, o as HelloPeerLimits, p as HelloSubscriptionLimits, aj as HostChannelMessage, ak as HostFrame, al as HostItem, am as HostMessage, an as HostRefusal, ao as HostSeed, ap as HostSubscribe, aq as HostUnsubscribe, a6 as Ok, P as PROTOCOL_MISMATCH, g as PROTOCOL_VERSION, a7 as PeerCandidate, a8 as PeerData, a9 as PeerDescription, aa as PeerForwardFrame, ab as PeerLabel, ac as PeerMessage, ad as PeerPing, ae as PeerPong, af as PeerSignal, ag as PeerSignalFrame, ah as PresenceFrame, q as ProtocolMismatch, Q as QdHandshake, R as RESERVED_ROOM_PREFIXES, ai as RelayForwardFrame, ar as RelayFrame, as as Revision, au as RevokeReason, at as RevokedFrame, av as RotateFrame, S as SERVER_EVENTS, a as SERVICE_TOPIC, f as ServerEventName, aw as ServerToClientEvents, ax as StreamFrame, ay as StreamSubscribe, az as StreamSubscribeReply, aA as Version, aB as WatchFrame, aC as WireIndexRow, c as collectionRoom, b as collectionTopic, e as entityRoom, i as isAuthenticationRefused, h as isAuthenticationUnavailable, r as isCallEnvelope, v as isCancel, j as isProtocolMismatch, k as isQdHandshake, s as streamRoom, t as topicRoom, u as userRoom } from './envelope-BMBaxppV.js';
+export { T as Tracked, a as TrackedTransaction } from './tracked-BR5b2O-U.js';
 export { E as ERROR_CODES, a as ErrorCode, Q as QuickdrawError, R as RateLimitedErrorData, V as ValidationErrorData, W as WireError, b as WireIssue, f as fromWire, h as httpStatus, i as isErrorCode, t as toWire } from './errors-S-bxEIBC.js';
 
 /** The published version of `@fitzzero/quickdraw-core`. Kept in step with package.json. */
-declare const QUICKDRAW_VERSION = "5.1.1";
+declare const QUICKDRAW_VERSION = "5.1.3";
 
 export { QUICKDRAW_VERSION };