@fitzzero/quickdraw-core 5.1.2 → 5.1.3

package/dist/{envelope-DzWyIXjj.d.ts → envelope-BMBaxppV.d.ts}

@@ -1,4 +1,4 @@
-import { A as AccessLevel } from './infer-BmoZsL9a.js';
+import { A as AccessLevel } from './infer-Br62cnyW.js';
 import { W as WireError } from './errors-S-bxEIBC.js';
 
 /**
@@ -58,6 +58,10 @@ declare const CLIENT_EVENTS: Readonly<{
     readonly streamUnsub: "qd:stream:unsub";
     /** A fire-and-forget channel message, sent volatile: `[s, channel, payload]`. */
     readonly channel: "qd:ch";
+    /** A peer link's signal to another socket of an app room: `{ room, to, sig }`. */
+    readonly peer: "qd:peer";
+    /** A peer link's message for the server to relay: `[room, to, label, text]`, dropped on `fast` when backed up. */
+    readonly relay: "qd:relay";
 }>;
 /** Events the server sends to a client (RFC 0003 section 8.3). */
 declare const SERVER_EVENTS: Readonly<{
@@ -81,6 +85,12 @@ declare const SERVER_EVENTS: Readonly<{
     readonly rotate: "qd:rotate";
     /** The user's service grants changed. */
     readonly access: "qd:access";
+    /** A peer link's signal from another socket of an app room: `{ room, from, userId, sig }`. */
+    readonly peer: "qd:peer";
+    /** A peer link's message the server relays: `[room, from, label, text]`. */
+    readonly relay: "qd:relay";
+    /** An app room's host (host mode): `[room, host]`, the host's socket id or `null`. */
+    readonly host: "qd:host";
 }>;
 /** The name of an event a client sends. */
 type ClientEventName = (typeof CLIENT_EVENTS)[keyof typeof CLIENT_EVENTS];
@@ -122,16 +132,31 @@ interface ProtocolMismatch {
 /** True when a `connect_error`'s `data` says the server speaks another protocol. */
 declare function isProtocolMismatch(value: unknown): value is ProtocolMismatch;
 /**
- * The `data` of the error a server refuses a connection with when
- * authenticating it failed: the app's `authenticate` threw, so the
- * credentials are bad or could not be checked. A client tells it apart from
- * {@link ProtocolMismatch} by `code`; reconnecting needs other credentials.
+ * The `data` of the error a server refuses a connection with when it refused
+ * the credentials: the app's `authenticate` threw a `QuickdrawError` with
+ * code `UNAUTHENTICATED` (or `FORBIDDEN`), or the session it recorded
+ * expired during the handshake. A client tells it apart from
+ * {@link ProtocolMismatch} by `code`; reconnecting needs other credentials,
+ * so the user is signed out. A server that could not check the credentials
+ * refuses with {@link AuthenticationUnavailable} instead.
  */
 interface AuthenticationRefused {
     readonly code: "UNAUTHENTICATED";
 }
-/** True when a `connect_error`'s `data` says authenticating the connection failed. */
+/** True when a `connect_error`'s `data` says the server refused the connection's credentials. */
 declare function isAuthenticationRefused(value: unknown): value is AuthenticationRefused;
+/**
+ * The `data` of the error a server refuses a connection with when it could
+ * not authenticate it: the app's `authenticate` (or `loadServiceAccess`)
+ * failed with anything but a refusal, its session store or database down,
+ * say. The credentials may well be good, so a client keeps the user it had
+ * and connects again later, backing off as after a lost connection.
+ */
+interface AuthenticationUnavailable {
+    readonly code: "INTERNAL";
+}
+/** True when a `connect_error`'s `data` says the server could not authenticate the connection. */
+declare function isAuthenticationUnavailable(value: unknown): value is AuthenticationUnavailable;
 /** The most rows one socket may hold entity subscriptions to at once, as `qd:hello` announces it. */
 declare const MAX_ENTITY_IDS_PER_SOCKET = 10000;
 /** The most collection scopes one socket may hold at once, as `qd:hello` announces it. */
@@ -155,6 +180,25 @@ interface HelloSubscriptionLimits {
     /** Change topics one socket may watch at once; one more is `CONFLICT`. Absent from servers up to 5.1.0, which have no such cap. */
     readonly maxTopics?: number;
 }
+/**
+ * What one socket may signal and relay over peer links (RFC 0003 section
+ * 12.5), as `qd:hello` announces it. A client keeps its relay messages
+ * within these, so a `rel` message is never dropped for its rate.
+ */
+interface HelloPeerLimits {
+    /** Peers one socket may signal at once; a signal to one more is `CONFLICT`. */
+    readonly maxLinks: number;
+    /** The longest link message, in UTF-8 bytes, on the data channel and through the relay alike. */
+    readonly maxMessageBytes: number;
+    /** Relay messages one socket may send to one peer per second; more are dropped. */
+    readonly relayRate: number;
+    /** Relay messages one socket may send to one peer at once, after a pause. */
+    readonly relayBurst: number;
+    /** Relay bytes one socket may send per second, to all its peers together; more are dropped. */
+    readonly relayBytesPerSecond: number;
+    /** Relay bytes one socket may send at once, after a pause. */
+    readonly relayBytesBurst: number;
+}
 /** The limits a server announces in `qd:hello`, so a client can stay inside them. */
 interface HelloLimits {
     /** Queries one socket may have running at once; more wait in a queue (RFC 0003 section 9). */
@@ -171,6 +215,8 @@ interface HelloLimits {
     readonly callTimeoutMs: number;
     /** The socket's lane of subscription events. */
     readonly subscriptions: HelloSubscriptionLimits;
+    /** What peer links may signal and relay. Absent from a server that serves no peer links, whose `features` lacks `"peer"`. */
+    readonly peers?: HelloPeerLimits;
 }
 /**
  * `qd:hello`: the server's answer to a v5 handshake, sent once per
@@ -191,7 +237,12 @@ interface HelloFrame {
     readonly serverId: string;
     /** What a client must stay within. */
     readonly limits: HelloLimits;
-    /** Names of optional server features that are on. Informational only. */
+    /**
+     * Names of optional server features that are on: `"binary"` (the stock
+     * parser, `createServer({ binary: true })`) and `"peer"` (peer links,
+     * `createServer({ peers: true })`). Informational: a client that finds no
+     * `"peer"` opens no peer link.
+     */
     readonly features: readonly string[];
     /** The user the socket acts for, or `null` when it is anonymous. */
     readonly userId: string | null;
@@ -513,6 +564,142 @@ interface PresenceFrame {
     /** A user who left the room: their last socket in it left or disconnected. */
     readonly left?: string;
 }
+/**
+ * A peer link's two channels: `rel`, ordered and reliable, and `fast`,
+ * unordered and never retransmitted (dropped where a connection is backed up).
+ */
+type PeerLabel = "rel" | "fast";
+/** A WebRTC session description, as `RTCSessionDescription.toJSON()` writes it. */
+interface PeerDescription {
+    readonly type: "offer" | "answer";
+    readonly sdp: string;
+}
+/** A WebRTC ICE candidate, as `RTCIceCandidate.toJSON()` writes it. */
+interface PeerCandidate {
+    readonly candidate: string;
+    readonly sdpMid?: string | null;
+    readonly sdpMLineIndex?: number | null;
+    readonly usernameFragment?: string | null;
+}
+/**
+ * What one `qd:peer` frame says about a link, in exactly one member: the
+ * offerer's `offer` or the answerer's `answer` (`sdp`), one ICE candidate
+ * (`ice`), that the sender sends the link's messages through the relay
+ * from now on (`relay`), or that the link is over (`bye`): the sender
+ * closed it or, when the server sends it, left the room or disconnected.
+ */
+interface PeerSignal {
+    readonly sdp?: PeerDescription;
+    readonly ice?: PeerCandidate;
+    readonly relay?: true;
+    readonly bye?: true;
+}
+/**
+ * `qd:peer`, from a client: a signal for socket `to` (another socket's id)
+ * about the link the two have in app room `room`, which both must be in.
+ * Acknowledged when asked: `Ok`, or `UNAUTHENTICATED`, `FORBIDDEN` (the
+ * sender is not in the room), `NOT_FOUND` (no signed-in socket `to` is in
+ * the room; behind a cluster adapter a socket on another node is not
+ * checked before the signal goes), `CONFLICT` (the sender already signals
+ * `limits.peers.maxLinks` peers), `RATE_LIMITED` or `VALIDATION`.
+ */
+interface PeerSignalFrame {
+    readonly room: string;
+    readonly to: string;
+    readonly sig: PeerSignal;
+}
+/**
+ * `qd:peer`, from the server: a signal from socket `from` about the link in
+ * app room `room`. `userId` is the sender's user, as the server knows it.
+ */
+interface PeerForwardFrame {
+    readonly room: string;
+    readonly from: string;
+    readonly userId: string;
+    readonly sig: PeerSignal;
+}
+/**
+ * `qd:relay`, from a client, never acknowledged: a link message for socket
+ * `to` in app room `room`. `text` is a `PeerMessage` as JSON, at most
+ * `limits.peers.maxMessageBytes`. The two sockets must have signalled each
+ * other in that room; a message over the rate or the byte budget of
+ * `limits.peers`, or to a socket that left the room, is dropped, and so is
+ * one on `fast` while the receiving socket's connection is backed up
+ * (`PEER_RELAY_FAST_BACKLOG`). A later revision may append elements after
+ * `text`.
+ */
+type RelayFrame = readonly [room: string, to: string, label: PeerLabel, text: string];
+/** `qd:relay`, from the server: a link message from socket `from` in app room `room`. */
+type RelayForwardFrame = readonly [
+    room: string,
+    from: string,
+    label: PeerLabel,
+    text: string
+];
+/**
+ * A peer link message: the JSON text of one data channel message or of a
+ * relayed `text`, alike on both paths. A receiver ignores a message whose
+ * first element it does not know, and elements after the ones it reads.
+ */
+type PeerMessage = PeerData | PeerPing | PeerPong | HostMessage;
+/** A link message carrying the app's `data`, any JSON value. */
+type PeerData = readonly [kind: 0, data: unknown];
+/** A clock ping: `t` is the sender's clock in milliseconds. Sent on `fast`. */
+type PeerPing = readonly [kind: 1, t: number];
+/** The pong of a ping: `t` as the ping carried it, `u` the answerer's clock as it answered. Sent on `fast`. */
+type PeerPong = readonly [kind: 2, t: number, u: number];
+/**
+ * A host mode message (section 12.5): what a peer and its room's host send
+ * each other over their link, kept apart from the app's own messages.
+ */
+type HostMessage = HostChannelMessage | HostSubscribe | HostUnsubscribe | HostSeed | HostItem | HostRefusal;
+/** A message on a host-served channel, from a peer to the host of the channel's room. Sent on `fast`. */
+type HostChannelMessage = readonly [
+    kind: 3,
+    service: string,
+    channel: string,
+    payload: unknown
+];
+/** Subscribes to a feed of a host-served stream, from a peer to the host of its room. Sent on `rel`. */
+type HostSubscribe = readonly [kind: 4, service: string, stream: string, scope: string];
+/** Leaves a feed of a host-served stream. Sent on `rel`. */
+type HostUnsubscribe = readonly [kind: 5, service: string, stream: string, scope: string];
+/**
+ * The seed of a feed a peer subscribed to, from the host: the latest items
+ * it kept (or computed), oldest first, in chunks that each fit the message
+ * limit; `last` is true on the last chunk. Sent on `rel`.
+ */
+type HostSeed = readonly [
+    kind: 6,
+    service: string,
+    stream: string,
+    scope: string,
+    items: readonly unknown[],
+    last: boolean
+];
+/** An item pushed to a feed, from the host: on `fast` for a volatile stream, else on `rel`. */
+type HostItem = readonly [
+    kind: 7,
+    service: string,
+    stream: string,
+    scope: string,
+    item: unknown
+];
+/** A subscribe the host refused (`NOT_FOUND`, `FORBIDDEN`, ...), from the host. Sent on `rel`. */
+type HostRefusal = readonly [
+    kind: 8,
+    service: string,
+    stream: string,
+    scope: string,
+    error: WireError
+];
+/**
+ * `qd:host`, from the server: the host of app room `room` (the socket that
+ * serves its host-served channels and streams), or `null` when it has none.
+ * Sent to the room's sockets on every change, and to a socket that joins a
+ * room with a host.
+ */
+type HostFrame = readonly [room: string, host: string | null];
 /** Why the server ended a subscription. */
 type RevokeReason = "access" | "anchor-deleted";
 /**
@@ -564,6 +751,8 @@ interface ClientListeners {
     streamSub: (frame: StreamSubscribe, ack: Ack<StreamSubscribeReply>) => void;
     streamUnsub: (frame: StreamSubscribe, ack?: Ack<Ok | Failure>) => void;
     channel: (frame: ChannelFrame) => void;
+    peer: (frame: PeerSignalFrame, ack?: Ack<Ok | Failure>) => void;
+    relay: (frame: RelayFrame) => void;
 }
 /** The listener of each server event, by its key in `SERVER_EVENTS`. */
 interface ServerListeners {
@@ -577,6 +766,9 @@ interface ServerListeners {
     presence: (frame: PresenceFrame) => void;
     rotate: (frame: RotateFrame) => void;
     access: (frame: AccessFrame) => void;
+    peer: (frame: PeerForwardFrame) => void;
+    relay: (frame: RelayForwardFrame) => void;
+    host: (frame: HostFrame) => void;
 }
 /**
  * The events a v5 client sends, keyed by name (`"qd:call"`, ...). The server
@@ -601,4 +793,4 @@ declare function isCallEnvelope(value: unknown): value is CallEnvelope;
 /** True when `value` has the shape of a `qd:cancel` frame. Unknown keys are ignored. */
 declare function isCancel(value: unknown): value is CancelFrame;
 
-export { type EntityUnsubscribe as $, type AuthenticationRefused as A, type ChangedFrame as B, CLIENT_EVENTS as C, type ChannelFrame as D, type ClientToServerEvents as E, type CollectionDelta as F, type CollectionFrame as G, type HandshakeAuth as H, type CollectionItemsReply as I, type CollectionItemsRequest as J, type CollectionResumed as K, type CollectionScopeRef as L, type CollectionSnapshot as M, type CollectionSubscribe as N, type CollectionSubscribeReply as O, PROTOCOL_MISMATCH as P, type QdHandshake as Q, RESERVED_ROOM_PREFIXES as R, SERVER_EVENTS as S, type EntityFrame as T, type EntityNotModified as U, type EntityPatch as V, type EntityRemove as W, type EntityResult as X, type EntityRow as Y, type EntitySubscribe as Z, type EntitySubscribeReply as _, SERVICE_TOPIC as a, type EntityUpdate as a0, type EventFrame as a1, type Failure as a2, type Ok as a3, type PresenceFrame as a4, type Revision as a5, type RevokedFrame as a6, type RevokeReason as a7, type RotateFrame as a8, type ServerToClientEvents as a9, type StreamFrame as aa, type StreamSubscribe as ab, type StreamSubscribeReply as ac, type Version as ad, type WatchFrame as ae, type WireIndexRow as af, MAX_ENTITY_IDS_PER_SOCKET as ag, MAX_SCOPES_PER_SOCKET as ah, MAX_TOPICS_PER_SOCKET as ai, collectionTopic as b, collectionRoom as c, type ClientEventName as d, entityRoom as e, type ServerEventName as f, PROTOCOL_VERSION as g, isProtocolMismatch as h, isAuthenticationRefused as i, isQdHandshake as j, type HelloFrame as k, type HelloLimits as l, type HelloSubscriptionLimits as m, type ProtocolMismatch as n, isCallEnvelope as o, isCancel as p, type AccessFrame as q, type CallEnvelope as r, streamRoom as s, topicRoom as t, userRoom as u, type CallId as v, type CallNotModified as w, type CallReply as x, type CallSuccess as y, type CancelFrame as z };
+export { type EntityRow as $, type AuthenticationRefused as A, type CallReply as B, CLIENT_EVENTS as C, type CallSuccess as D, type CancelFrame as E, type ChangedFrame as F, type ChannelFrame as G, type HandshakeAuth as H, type ClientToServerEvents as I, type CollectionDelta as J, type CollectionFrame as K, type CollectionItemsReply as L, type CollectionItemsRequest as M, type CollectionResumed as N, type CollectionScopeRef as O, PROTOCOL_MISMATCH as P, type QdHandshake as Q, RESERVED_ROOM_PREFIXES as R, SERVER_EVENTS as S, type CollectionSnapshot as T, type CollectionSubscribe as U, type CollectionSubscribeReply as V, type EntityFrame as W, type EntityNotModified as X, type EntityPatch as Y, type EntityRemove as Z, type EntityResult as _, SERVICE_TOPIC as a, type EntitySubscribe as a0, type EntitySubscribeReply as a1, type EntityUnsubscribe as a2, type EntityUpdate as a3, type EventFrame as a4, type Failure as a5, type Ok as a6, type PeerCandidate as a7, type PeerData as a8, type PeerDescription as a9, type Version as aA, type WatchFrame as aB, type WireIndexRow as aC, MAX_ENTITY_IDS_PER_SOCKET as aD, MAX_SCOPES_PER_SOCKET as aE, MAX_TOPICS_PER_SOCKET as aF, type PeerForwardFrame as aa, type PeerLabel as ab, type PeerMessage as ac, type PeerPing as ad, type PeerPong as ae, type PeerSignal as af, type PeerSignalFrame as ag, type PresenceFrame as ah, type RelayForwardFrame as ai, type HostChannelMessage as aj, type HostFrame as ak, type HostItem as al, type HostMessage as am, type HostRefusal as an, type HostSeed as ao, type HostSubscribe as ap, type HostUnsubscribe as aq, type RelayFrame as ar, type Revision as as, type RevokedFrame as at, type RevokeReason as au, type RotateFrame as av, type ServerToClientEvents as aw, type StreamFrame as ax, type StreamSubscribe as ay, type StreamSubscribeReply as az, collectionTopic as b, collectionRoom as c, type ClientEventName as d, entityRoom as e, type ServerEventName as f, PROTOCOL_VERSION as g, isAuthenticationUnavailable as h, isAuthenticationRefused as i, isProtocolMismatch as j, isQdHandshake as k, type AuthenticationUnavailable as l, type HelloFrame as m, type HelloLimits as n, type HelloPeerLimits as o, type HelloSubscriptionLimits as p, type ProtocolMismatch as q, isCallEnvelope as r, streamRoom as s, topicRoom as t, userRoom as u, isCancel as v, type AccessFrame as w, type CallEnvelope as x, type CallId as y, type CallNotModified as z };

package/dist/{http-DotQ5bj8.d.ts → http-YzLAar3w.d.ts}

@@ -1,12 +1,12 @@
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { L as Logger } from './logger-Yz93KzdV.js';
-import { J as AnyContract, A as AccessLevel } from './infer-BmoZsL9a.js';
-import { P as Principal, T as Transport, a as McpContext, D as DbOf, c as PrincipalOf, M as MaybePromise } from './types-CYliTP65.js';
-import { A as AnyService, g as ServiceMethod, R as RowLevels, k as AccessFilter, d as Caller, l as RunContext, m as RunOptions, P as Presence, n as ServerRooms, o as StreamHandle, p as AnyContext, S as StorageAdapter, U as UnitOfWorkFactory, e as FlushSink, q as AccessEngine } from './caller-BT-Mv4bD.js';
-import { ad as Version, x as CallReply } from './envelope-DzWyIXjj.js';
+import { J as AnyContract } from './infer-Br62cnyW.js';
+import { A as AnyService, g as ServiceMethod, d as Caller, R as RunContext, k as RunOptions, l as DispatcherAccess, P as Presence, m as ServerRooms, n as StreamHandle, o as AnyContext, S as StorageAdapter, U as UnitOfWorkFactory, e as FlushSink, p as AccessEngine } from './caller-BTwGl7vm.js';
+import { P as Principal, T as Transport, a as McpContext, D as DbOf, b as PrincipalOf, c as McpContextOf, M as MaybePromise } from './types-CLRCQGnO.js';
+import { aA as Version, B as CallReply } from './envelope-BMBaxppV.js';
 import { Q as QuickdrawError } from './errors-S-bxEIBC.js';
-import { C as CallRecord } from './metrics-DW80Exve.js';
-import { S as ServerAuth } from './auth-DXiSJZaf.js';
+import { C as CallRecord } from './metrics-CTVpw0gu.js';
+import { S as ServerAuth } from './auth-DtdYjrZ9.js';
 
 /** How one call ended. The dispatcher's `call` resolves with it and never rejects. */
 type DispatchResult = {
@@ -65,7 +65,9 @@ interface DispatchRequest {
     readonly v?: Version;
     /**
      * The fields the MCP bridge's `context` option produced for this call,
-     * which the handler reads as `ctx.mcp`. Only the MCP transport sets it.
+     * which the handler reads as `ctx.mcp`. The MCP transport sets it, and a
+     * call's `ctx.services` passes its own on to the calls it makes, whose
+     * transport is `"internal"`.
      */
     readonly mcp?: McpContext;
     /**
@@ -95,47 +97,6 @@ interface Registry {
     find(service: string, method: string): RegisteredMethod | undefined;
 }
 
-/**
- * A row whose access may have changed: who may now see more or less of it.
- * `id` is the row (the anchor subscriptions record); without it, any row of
- * the service. `userId` is the user whose level may have changed; without it,
- * anyone's.
- */
-interface AccessChange {
-    /** The service name. */
-    readonly service: string;
-    readonly id?: string;
-    readonly userId?: string;
-}
-/** Receives access changes; a promise it returns is awaited before the flush moves on. */
-type AccessChangeListener = (change: AccessChange) => void | PromiseLike<void>;
-
-/** The dispatcher's view of its services' access policies: `dispatcher.access`. */
-interface DispatcherAccess {
-    /**
-     * The principal's level on each of `ids` of `service`, as an `{ entry }`
-     * check counts it: the service's policy, or `Admin` on every row when the
-     * principal holds a service-wide `Admin` grant and the service keeps
-     * `adminBypass` on. A grant below `Admin` does not count. A row that is
-     * not found has no level. One batched lookup per policy.
-     */
-    levelsFor(service: AnyContract | string, principal: Principal, ids: readonly string[]): Promise<RowLevels>;
-    /**
-     * A filter for `db.<model>.findMany({ where })` matching exactly the rows of
-     * `service` on which `levelsFor` gives the principal at least `level`:
-     * `{}` (every row) for a service-wide `Admin` with `adminBypass`, or
-     * `"none"` when no row matches.
-     */
-    accessWhere(service: AnyContract | string, principal: Principal, level: AccessLevel): Promise<AccessFilter>;
-    /**
-     * Calls `listener` after each flush whose tracked writes may have changed
-     * someone's access to a row (`AccessChange`), once the cache no longer
-     * holds what they changed. A promise it returns is awaited before the
-     * dispatcher's other flush sinks run. Returns a function that removes it.
-     */
-    onAccessChanged(listener: AccessChangeListener): () => void;
-}
-
 type TypesOf<S extends readonly AnyService[]> = NonNullable<S[number]["~types"]>;
 /** The database client the services of `S` were declared with. */
 type DbOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? unknown : DbOf<TypesOf<S>>;
@@ -143,6 +104,8 @@ type DbOfServices<S extends readonly AnyService[]> = [S[number]] extends [never]
 type PrincipalOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? Principal : PrincipalOf<TypesOf<S>>;
 /** The contracts the services of `S` were defined from. */
 type ContractOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? AnyContract : S[number]["contract"];
+/** The type of `ctx.mcp` for the services of `S`: their app's `QuickdrawTypes["mcp"]`. */
+type McpContextOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? McpContext : McpContextOf<TypesOf<S>>;
 /**
  * The options `createDispatcher` and `createServer` share: the services and
  * the database client handlers receive, plus the pipeline's seams and
@@ -238,7 +201,9 @@ interface Dispatcher<S extends readonly AnyService[] = readonly AnyService[]> {
     /**
      * The handle of one of the services' streams (RFC 0003 section 12.5), whose
      * `push` appends an item: `dispatcher.stream(task, "logs").push(taskId,
-     * line)`. Throws a `TypeError` for a stream the dispatcher does not serve.
+     * line)`, and whose `subscribers(taskId)` counts the sockets that watch the
+     * feed on every node. Throws a `TypeError` for a stream the dispatcher does
+     * not serve, a host-served one included.
      */
     stream<C extends AnyContract, K extends keyof C["streams"] & string>(contract: C, name: K): StreamHandle<C, K>;
     readonly registry: Registry;
@@ -490,4 +455,4 @@ interface HttpRouterOptions<P extends Principal = Principal> extends HttpTranspo
  */
 declare function createHttpRouter<P extends Principal = Principal>(options: HttpRouterOptions<P>): HttpRouter;
 
-export { type AccessOptions as A, type ContractOfServices as C, type Dispatcher as D, type HttpRouter as H, type LimitsOptions as L, type PrincipalOfServices as P, type RegisteredMethod as R, type SharedData as S, type TrackingOptions as T, type VersionRequest as V, type DispatcherBaseOptions as a, type HttpTransportOptions as b, type DispatcherOptions as c, type DispatcherCollections as d, type ChangeLogOptions as e, createDispatcher as f, type DbOfServices as g, type Registry as h, type DispatchRequest as i, type DispatchResult as j, DEFAULT_LIMITS as k, type DispatcherLimits as l, type PipelineOptions as m, type SubscriptionLimits as n, type DispatcherAccess as o, type AccessChange as p, type AccessChangeListener as q, type VersionSource as r, createHttpRouter as s, toCallReply as t, type HttpMiddleware as u, type HttpRouterOptions as v };
+export { type AccessOptions as A, type ContractOfServices as C, type Dispatcher as D, type HttpRouter as H, type LimitsOptions as L, type McpContextOfServices as M, type PrincipalOfServices as P, type RegisteredMethod as R, type SharedData as S, type TrackingOptions as T, type VersionRequest as V, type DispatcherBaseOptions as a, type HttpTransportOptions as b, type DispatcherOptions as c, type DispatcherCollections as d, type ChangeLogOptions as e, createDispatcher as f, type DbOfServices as g, type Registry as h, type DispatchRequest as i, type DispatchResult as j, DEFAULT_LIMITS as k, type DispatcherLimits as l, type PipelineOptions as m, type SubscriptionLimits as n, type VersionSource as o, createHttpRouter as p, type HttpMiddleware as q, type HttpRouterOptions as r, toCallReply as t };

package/dist/index.d.ts

@@ -1,12 +1,13 @@
-export { a as ACE, b as ACL, A as AccessLevel, J as AnyContract, Y as CHANNEL_DEFAULT_RATE, a0 as ChannelDef, a9 as ChannelInputOf, aa as ChannelName, ab as ChannelPayloadOf, a1 as ChannelRequires, C as CollectionDef, ac as CollectionName, ad as CollectionOf, y as CollectionWhere, K as Contract, L as ContractDefinition, ae as ContractMap, D as DEFAULT_COLLECTION_LIMIT, w as DEFAULT_COLLECTION_MAX_LIMIT, af as EntityOf, E as EntityProjection, a2 as EventDef, ag as EventName, ah as EventPayloadOf, ai as FullProjectionOf, Z as GLOBAL_STREAM, aj as IndexFieldOf, R as IndexRow, ak as IndexRowOf, I as InferInput, c as InferOutput, al as InputOf, am as IsScopedStream, an as ItemOf, ao as KindOf, M as MethodDef, k as MethodKind, ap as MethodName, aq as MethodOf, o as MethodOutput, p as MutationDef, N as NullableProjection, O as OrderBy, ar as OutputOf, as as ParsedInputOf, a3 as PayloadSelector, P as ProjectionList, at as ProjectionName, au as ProjectionOf, r as ProjectionRef, Q as QueryDef, av as ReceivedRow, U as ReservedMethodName, a4 as RoomPrefix, a5 as RoomSelector, X as RowSchema, _ as STREAM_MAX_SEED, aw as ScopeOf, s as ServiceModelsWatch, ax as ServiceNameOf, u as ServiceWatch, z as SortDirection, S as StandardJSONSchemaV1, d as StandardSchemaV1, e as StandardSchemaWithJSON, f as StandardTypedV1, a6 as StreamAccess, a7 as StreamDef, ay as StreamItemOf, az as StreamName, a8 as StreamRoom, T as TODO_SCHEMA_VENDOR, g as TodoSchemaOptions, V as ValidationIssue, j as ValidationResult, B as ViaScope, aA as ViewName, G as ViewPredicate, F as Viewer, W as Watch, H as defineContract, h as hasJsonSchema, $ as isScopedStream, i as isStandardSchema, l as listOf, m as mutation, n as nullable, q as query, t as todoSchema, v as validate, x as via } from './infer-BmoZsL9a.js';
+export { a as ACE, b as ACL, A as AccessLevel, J as AnyContract, Y as CHANNEL_DEFAULT_RATE, a0 as ChannelDef, a9 as ChannelInputOf, aa as ChannelName, ab as ChannelPayloadOf, a1 as ChannelRequires, C as CollectionDef, ac as CollectionName, ad as CollectionOf, y as CollectionWhere, K as Contract, L as ContractDefinition, ae as ContractMap, D as DEFAULT_COLLECTION_LIMIT, w as DEFAULT_COLLECTION_MAX_LIMIT, af as EntityOf, E as EntityProjection, a2 as EventDef, ag as EventName, ah as EventPayloadOf, ai as FullProjectionOf, Z as GLOBAL_STREAM, aj as IndexFieldOf, R as IndexRow, ak as IndexRowOf, I as InferInput, c as InferOutput, al as InputOf, am as IsScopedStream, an as ItemOf, ao as KindOf, M as MethodDef, k as MethodKind, ap as MethodName, aq as MethodOf, o as MethodOutput, p as MutationDef, N as NullableProjection, O as OrderBy, ar as OutputOf, as as ParsedInputOf, a3 as PayloadSelector, P as ProjectionList, at as ProjectionName, au as ProjectionOf, r as ProjectionRef, Q as QueryDef, av as ReceivedRow, U as ReservedMethodName, a4 as RoomPrefix, a5 as RoomSelector, X as RowSchema, _ as STREAM_MAX_SEED, aw as ScopeOf, s as ServiceModelsWatch, ax as ServiceNameOf, u as ServiceWatch, z as SortDirection, S as StandardJSONSchemaV1, d as StandardSchemaV1, e as StandardSchemaWithJSON, f as StandardTypedV1, a6 as StreamAccess, a7 as StreamDef, ay as StreamItemOf, az as StreamName, a8 as StreamRoom, T as TODO_SCHEMA_VENDOR, g as TodoSchemaOptions, V as ValidationIssue, j as ValidationResult, B as ViaScope, aA as ViewName, G as ViewPredicate, F as Viewer, W as Watch, H as defineContract, h as hasJsonSchema, $ as isScopedStream, i as isStandardSchema, l as listOf, m as mutation, n as nullable, q as query, t as todoSchema, v as validate, x as via } from './infer-Br62cnyW.js';
 export { C as ConsoleLoggerOptions, b as LogLevel, L as Logger, c as consoleLogger, a as createConsoleLogger } from './logger-Yz93KzdV.js';
-export { A as ADMIN_METHODS, w as AdminContractOptions, x as AdminCreateDef, y as AdminDeleteDef, z as AdminGetDef, D as AdminListDef, E as AdminMetaDef, F as AdminMethodName, G as AdminMethods, H as AdminMethodsOf, J as AdminReemitDef, K as AdminSubscribersDef, M as AdminTag, O as AdminUpdateDef, B as BulkPatch, t as BulkResult, s as CRUD_MAX_IDS, C as CRUD_METHODS, a as CrudBulkDelete, b as CrudBulkUpdate, d as CrudContractOptions, e as CrudCreate, f as CrudDelete, g as CrudGet, h as CrudGetMany, i as CrudInputOptions, j as CrudList, k as CrudListOptions, l as CrudMethodName, m as CrudMethods, n as CrudReorder, o as CrudReorderOptions, p as CrudTag, q as CrudToggle, r as CrudUpdate, I as IdInput, u as IdsInput, P as KitSchema, L as ListInput, N as NumberFieldOf, R as ReorderInput, S as ScalarFieldOf, W as WithId, v as admin, c as crud } from './admin-DWWrT1h6.js';
-export { o as ADMIN_DEFAULT_PAGE_SIZE, A as ADMIN_FIELD_TYPES, p as ADMIN_MAX_PAGE, q as ADMIN_MAX_PAGE_SIZE, k as ADMIN_NEVER_WRITABLE, r as AdminCreateInput, s as AdminCreateQuery, t as AdminData, l as AdminFieldConfig, m as AdminFieldType, u as AdminListInput, v as AdminListQuery, w as AdminMetaInput, x as AdminNeverWritable, y as AdminPage, n as AdminServiceMeta, z as AdminSubscribers, B as AdminUpdateInput, C as AdminUpdateQuery, D as AdminWritable, F as FilterValue, L as LIST_DEFAULT_LIMIT, a as LIST_MAX_LIMIT, b as ListPage, c as ListQuery, d as ListSort, S as SEARCH_DEFAULT_LIMIT, e as SEARCH_DEFAULT_MIN_LENGTH, f as SEARCH_MAX_LIMIT, g as SEARCH_MAX_QUERY_LENGTH, h as SearchInput, i as SearchPage, j as SearchQuery, E as SubscriberLevel } from './adminSchemas-D4bFKsrb.js';
-export { A as AclMethodName, I as InviteByNameInput, z as InviteByNameQuery, B as InviteInput, C as InviteQuery, L as LeaveInput, D as ListMembersInput, E as ListMembersQuery, F as Member, G as MemberInput, M as MembersMethodName, H as MembersPage, y as SHARE_LEVELS, d as SHARING_METHODS, S as SearchContractOptions, a as SearchDef, b as SearchMethods, c as SearchTag, J as SetRoleInput, K as ShareByNameInput, N as ShareByNameQuery, O as ShareInput, P as ShareLevel, f as SharingByNameMethod, g as SharingContractOptions, h as SharingDefOf, i as SharingInvite, j as SharingInviteByName, k as SharingLeave, l as SharingListMembers, m as SharingListShares, n as SharingMethodName, o as SharingMethods, p as SharingMode, q as SharingRemove, r as SharingSetLevel, t as SharingSetRole, u as SharingShare, v as SharingShareByName, w as SharingTag, x as SharingUnshare, T as TextFieldOf, U as UnshareInput, Q as UserLookupInput, s as search, e as sharing } from './sharing-UDLn1049.js';
-export { q as AccessFrame, A as AuthenticationRefused, C as CLIENT_EVENTS, r as CallEnvelope, v as CallId, w as CallNotModified, x as CallReply, y as CallSuccess, z as CancelFrame, B as ChangedFrame, D as ChannelFrame, d as ClientEventName, E as ClientToServerEvents, F as CollectionDelta, G as CollectionFrame, I as CollectionItemsReply, J as CollectionItemsRequest, K as CollectionResumed, L as CollectionScopeRef, M as CollectionSnapshot, N as CollectionSubscribe, O as CollectionSubscribeReply, T as EntityFrame, U as EntityNotModified, V as EntityPatch, W as EntityRemove, X as EntityResult, Y as EntityRow, Z as EntitySubscribe, _ as EntitySubscribeReply, $ as EntityUnsubscribe, a0 as EntityUpdate, a1 as EventFrame, a2 as Failure, H as HandshakeAuth, k as HelloFrame, l as HelloLimits, m as HelloSubscriptionLimits, a3 as Ok, P as PROTOCOL_MISMATCH, g as PROTOCOL_VERSION, a4 as PresenceFrame, n as ProtocolMismatch, Q as QdHandshake, R as RESERVED_ROOM_PREFIXES, a5 as Revision, a7 as RevokeReason, a6 as RevokedFrame, a8 as RotateFrame, S as SERVER_EVENTS, a as SERVICE_TOPIC, f as ServerEventName, a9 as ServerToClientEvents, aa as StreamFrame, ab as StreamSubscribe, ac as StreamSubscribeReply, ad as Version, ae as WatchFrame, af as WireIndexRow, c as collectionRoom, b as collectionTopic, e as entityRoom, i as isAuthenticationRefused, o as isCallEnvelope, p as isCancel, h as isProtocolMismatch, j as isQdHandshake, s as streamRoom, t as topicRoom, u as userRoom } from './envelope-DzWyIXjj.js';
+export { A as ADMIN_METHODS, w as AdminContractOptions, x as AdminCreateDef, y as AdminDeleteDef, z as AdminGetDef, D as AdminListDef, E as AdminMetaDef, F as AdminMethodName, G as AdminMethods, H as AdminMethodsOf, J as AdminReemitDef, K as AdminSubscribersDef, M as AdminTag, O as AdminUpdateDef, B as BulkPatch, t as BulkResult, s as CRUD_MAX_IDS, C as CRUD_METHODS, a as CrudBulkDelete, b as CrudBulkUpdate, d as CrudContractOptions, e as CrudCreate, f as CrudDelete, g as CrudGet, h as CrudGetMany, i as CrudInputOptions, j as CrudList, k as CrudListOptions, l as CrudMethodName, m as CrudMethods, n as CrudReorder, o as CrudReorderOptions, p as CrudTag, q as CrudToggle, r as CrudUpdate, I as IdInput, u as IdsInput, P as KitSchema, L as ListInput, N as NumberFieldOf, R as ReorderInput, S as ScalarFieldOf, W as WithId, v as admin, c as crud } from './admin-CS7JB_UH.js';
+export { o as ADMIN_DEFAULT_PAGE_SIZE, A as ADMIN_FIELD_TYPES, p as ADMIN_MAX_PAGE, q as ADMIN_MAX_PAGE_SIZE, k as ADMIN_NEVER_WRITABLE, r as AdminCreateInput, s as AdminCreateQuery, t as AdminData, l as AdminFieldConfig, m as AdminFieldType, u as AdminListInput, v as AdminListQuery, w as AdminMetaInput, x as AdminNeverWritable, y as AdminPage, n as AdminServiceMeta, z as AdminSubscribers, B as AdminUpdateInput, C as AdminUpdateQuery, D as AdminWritable, F as FilterValue, L as LIST_DEFAULT_LIMIT, a as LIST_MAX_LIMIT, b as ListPage, c as ListQuery, d as ListSort, S as SEARCH_DEFAULT_LIMIT, e as SEARCH_DEFAULT_MIN_LENGTH, f as SEARCH_MAX_LIMIT, g as SEARCH_MAX_QUERY_LENGTH, h as SearchInput, i as SearchPage, j as SearchQuery, E as SubscriberLevel } from './adminSchemas-29cGgrg5.js';
+export { A as AclMethodName, I as InviteByNameInput, z as InviteByNameQuery, B as InviteInput, C as InviteQuery, L as LeaveInput, D as ListMembersInput, E as ListMembersQuery, F as Member, G as MemberInput, M as MembersMethodName, H as MembersPage, y as SHARE_LEVELS, d as SHARING_METHODS, S as SearchContractOptions, a as SearchDef, b as SearchMethods, c as SearchTag, J as SetRoleInput, K as ShareByNameInput, N as ShareByNameQuery, O as ShareInput, P as ShareLevel, f as SharingByNameMethod, g as SharingContractOptions, h as SharingDefOf, i as SharingInvite, j as SharingInviteByName, k as SharingLeave, l as SharingListMembers, m as SharingListShares, n as SharingMethodName, o as SharingMethods, p as SharingMode, q as SharingRemove, r as SharingSetLevel, t as SharingSetRole, u as SharingShare, v as SharingShareByName, w as SharingTag, x as SharingUnshare, T as TextFieldOf, U as UnshareInput, Q as UserLookupInput, s as search, e as sharing } from './sharing-BrsmlDv_.js';
+export { w as AccessFrame, A as AuthenticationRefused, l as AuthenticationUnavailable, C as CLIENT_EVENTS, x as CallEnvelope, y as CallId, z as CallNotModified, B as CallReply, D as CallSuccess, E as CancelFrame, F as ChangedFrame, G as ChannelFrame, d as ClientEventName, I as ClientToServerEvents, J as CollectionDelta, K as CollectionFrame, L as CollectionItemsReply, M as CollectionItemsRequest, N as CollectionResumed, O as CollectionScopeRef, T as CollectionSnapshot, U as CollectionSubscribe, V as CollectionSubscribeReply, W as EntityFrame, X as EntityNotModified, Y as EntityPatch, Z as EntityRemove, _ as EntityResult, $ as EntityRow, a0 as EntitySubscribe, a1 as EntitySubscribeReply, a2 as EntityUnsubscribe, a3 as EntityUpdate, a4 as EventFrame, a5 as Failure, H as HandshakeAuth, m as HelloFrame, n as HelloLimits, o as HelloPeerLimits, p as HelloSubscriptionLimits, aj as HostChannelMessage, ak as HostFrame, al as HostItem, am as HostMessage, an as HostRefusal, ao as HostSeed, ap as HostSubscribe, aq as HostUnsubscribe, a6 as Ok, P as PROTOCOL_MISMATCH, g as PROTOCOL_VERSION, a7 as PeerCandidate, a8 as PeerData, a9 as PeerDescription, aa as PeerForwardFrame, ab as PeerLabel, ac as PeerMessage, ad as PeerPing, ae as PeerPong, af as PeerSignal, ag as PeerSignalFrame, ah as PresenceFrame, q as ProtocolMismatch, Q as QdHandshake, R as RESERVED_ROOM_PREFIXES, ai as RelayForwardFrame, ar as RelayFrame, as as Revision, au as RevokeReason, at as RevokedFrame, av as RotateFrame, S as SERVER_EVENTS, a as SERVICE_TOPIC, f as ServerEventName, aw as ServerToClientEvents, ax as StreamFrame, ay as StreamSubscribe, az as StreamSubscribeReply, aA as Version, aB as WatchFrame, aC as WireIndexRow, c as collectionRoom, b as collectionTopic, e as entityRoom, i as isAuthenticationRefused, h as isAuthenticationUnavailable, r as isCallEnvelope, v as isCancel, j as isProtocolMismatch, k as isQdHandshake, s as streamRoom, t as topicRoom, u as userRoom } from './envelope-BMBaxppV.js';
+export { T as Tracked, a as TrackedTransaction } from './tracked-BR5b2O-U.js';
 export { E as ERROR_CODES, a as ErrorCode, Q as QuickdrawError, R as RateLimitedErrorData, V as ValidationErrorData, W as WireError, b as WireIssue, f as fromWire, h as httpStatus, i as isErrorCode, t as toWire } from './errors-S-bxEIBC.js';
 
 /** The published version of `@fitzzero/quickdraw-core`. Kept in step with package.json. */
-declare const QUICKDRAW_VERSION = "5.1.2";
+declare const QUICKDRAW_VERSION = "5.1.3";
 
 export { QUICKDRAW_VERSION };

package/dist/index.js

@@ -4,11 +4,31 @@ import {
   SHARING_METHODS,
   crud,
   sharing
-} from "./chunk-NMXYENH4.js";
+} from "./chunk-VZFJTKIW.js";
 import {
   isCallEnvelope,
   isCancel
-} from "./chunk-RL4VKLBX.js";
+} from "./chunk-KKQANRLG.js";
+import {
+  SEARCH_DEFAULT_LIMIT,
+  SEARCH_DEFAULT_MIN_LENGTH,
+  SEARCH_MAX_LIMIT,
+  SEARCH_MAX_QUERY_LENGTH,
+  search
+} from "./chunk-XD7SRDUY.js";
+import {
+  DEFAULT_COLLECTION_LIMIT,
+  DEFAULT_COLLECTION_MAX_LIMIT,
+  via
+} from "./chunk-4D2DOGAW.js";
+import {
+  ACCESS_LEVELS,
+  isAccessLevel
+} from "./chunk-AK23XSWD.js";
+import {
+  consoleLogger,
+  createConsoleLogger
+} from "./chunk-DKE6QO26.js";
 import {
   ADMIN_DEFAULT_PAGE_SIZE,
   ADMIN_FIELD_TYPES,
@@ -19,22 +39,19 @@ import {
   CRUD_MAX_IDS,
   LIST_DEFAULT_LIMIT,
   LIST_MAX_LIMIT,
-  SEARCH_DEFAULT_LIMIT,
-  SEARCH_DEFAULT_MIN_LENGTH,
-  SEARCH_MAX_LIMIT,
-  SEARCH_MAX_QUERY_LENGTH,
   admin,
   listOf,
   mutation,
   nullable,
-  query,
-  search
-} from "./chunk-GKH3LJ7N.js";
+  query
+} from "./chunk-MPQAT55F.js";
+import {
+  QUICKDRAW_VERSION
+} from "./chunk-A2RBQD66.js";
 import {
   CLIENT_EVENTS,
   PROTOCOL_MISMATCH,
   PROTOCOL_VERSION,
-  QUICKDRAW_VERSION,
   RESERVED_ROOM_PREFIXES,
   SERVER_EVENTS,
   SERVICE_TOPIC,
@@ -42,6 +59,7 @@ import {
   collectionTopic,
   entityRoom,
   isAuthenticationRefused,
+  isAuthenticationUnavailable,
   isProtocolMismatch,
   isQdHandshake,
   reservedRoomPrefix,
@@ -49,22 +67,13 @@ import {
   streamRoom,
   topicRoom,
   userRoom
-} from "./chunk-753VJIUP.js";
+} from "./chunk-X4ZU4QH5.js";
 import {
   CHANNEL_DEFAULT_RATE,
   GLOBAL_STREAM,
   STREAM_MAX_SEED,
   isScopedStream
-} from "./chunk-5CGO426C.js";
-import {
-  DEFAULT_COLLECTION_LIMIT,
-  DEFAULT_COLLECTION_MAX_LIMIT,
-  via
-} from "./chunk-4D2DOGAW.js";
-import {
-  ACCESS_LEVELS,
-  isAccessLevel
-} from "./chunk-AK23XSWD.js";
+} from "./chunk-GYLWEJHW.js";
 import {
   TODO_SCHEMA_VENDOR,
   hasJsonSchema,
@@ -72,10 +81,6 @@ import {
   todoSchema,
   validate
 } from "./chunk-47AEXVDM.js";
-import {
-  consoleLogger,
-  createConsoleLogger
-} from "./chunk-DKE6QO26.js";
 import {
   ERROR_CODES,
   QuickdrawError,
@@ -83,7 +88,8 @@ import {
   httpStatus,
   isErrorCode,
   toWire
-} from "./chunk-4YO5H5ON.js";
+} from "./chunk-Q4OGQM5I.js";
+import "./chunk-QSU47XEX.js";
 
 // src/contract/validateRealtime.ts
 var STREAM_KEYS = /* @__PURE__ */ new Set([
@@ -92,6 +98,7 @@ var STREAM_KEYS = /* @__PURE__ */ new Set([
   "seed",
   "volatile",
   "access",
+  "serve",
   "describe"
 ]);
 var CHANNEL_KEYS = /* @__PURE__ */ new Set([
@@ -99,6 +106,7 @@ var CHANNEL_KEYS = /* @__PURE__ */ new Set([
   "ratePerSecond",
   "burst",
   "requires",
+  "serve",
   "describe"
 ]);
 var EVENT_KEYS = /* @__PURE__ */ new Set(["payload", "describe"]);
@@ -220,14 +228,31 @@ function checkStream(name, value, fail) {
     if (problem !== void 0) {
       fail(`${owner}: access ${problem}`);
     }
-    const access = stream.access;
-    const rowForm = isRecord(access) && (access.entry !== void 0 || access.scope !== void 0);
+    const access2 = stream.access;
+    const rowForm = isRecord(access2) && (access2.entry !== void 0 || access2.scope !== void 0);
     if (rowForm && !isScopedStream(stream)) {
       fail(`${owner}: entry and scope access check the scope's row, so the stream needs a scope`);
     }
   }
+  const { access } = stream;
+  const roomOfScope = isRecord(access) && typeof access.room === "function";
+  checkServe(
+    owner,
+    stream,
+    isScopedStream(stream) && roomOfScope ? void 0 : "it has a scope, and access { room: (scope) => room }, the room whose host serves each scope",
+    fail
+  );
   return Object.freeze({ ...stream });
 }
+function checkServe(owner, member, needs, fail) {
+  const { serve } = member;
+  if (serve !== void 0 && serve !== "server" && serve !== "host") {
+    fail(`${owner}: serve must be "server" or "host"`);
+  }
+  if (serve === "host" && needs !== void 0) {
+    fail(`${owner} is served by the room's host (serve: "host"): ${needs}`);
+  }
+}
 function isSelector(value) {
   return isName(value) || typeof value === "function";
 }
@@ -312,6 +337,13 @@ function checkChannel(name, value, scope, fail) {
     fail(`${owner}: burst must be a number of messages, at least 1`);
   }
   checkRequires(owner, channel.requires, scope, fail);
+  const { requires } = channel;
+  checkServe(
+    owner,
+    channel,
+    isRecord(requires) && requires.room !== void 0 ? void 0 : "it requires { room }, the room whose host handles its messages",
+    fail
+  );
   return Object.freeze({ ...channel });
 }
 function checkRealtime(def, scope, fail) {
@@ -748,6 +780,7 @@ export {
   hasJsonSchema,
   httpStatus,
   isAuthenticationRefused,
+  isAuthenticationUnavailable,
   isCallEnvelope,
   isCancel,
   isErrorCode,