@fuzdev/fuz_app 0.27.0 → 0.29.0

package/dist/actions/action_peer.d.ts

@@ -7,28 +7,29 @@
  * @module
  */
 import { JsonrpcMessageFromServerToClient, JsonrpcNotification, JsonrpcRequest, JsonrpcResponseOrError, JsonrpcErrorResponse } from '../http/jsonrpc.js';
-import { Transports, type TransportName } from './transports.js';
+import { Transports, type TransportName, type TransportSendOptions } from './transports.js';
 import type { ActionEventEnvironment } from './action_event_types.js';
-export interface ActionPeerSendOptions {
+/**
+ * Per-call options for `ActionPeer.send`. Extends `TransportSendOptions`
+ * with `transport_name` for per-call transport selection. The peer-wide
+ * default for any field lives on `ActionPeerOptions.default_send_options` —
+ * set `queue: true` there once for client-authoritative peers and override
+ * per-call for exceptions (e.g. high-frequency position sync where stale
+ * replays are wrong).
+ */
+export interface ActionPeerSendOptions extends TransportSendOptions {
     transport_name?: TransportName;
-    /**
-     * Per-call `AbortSignal`. Forwarded into the chosen transport's `send`,
-     * which bottoms out at `FrontendWebsocketClient.request({signal})` for WS
-     * (sends the shared `cancel` notification on abort) and at
-     * `fetch({signal})` for HTTP. Backend transport ignores it.
-     */
-    signal?: AbortSignal;
 }
 export interface ActionPeerOptions {
     environment: ActionEventEnvironment;
     transports?: Transports;
-    default_send_options?: Partial<ActionPeerSendOptions>;
+    default_send_options?: Omit<ActionPeerSendOptions, 'signal'>;
 }
 export declare class ActionPeer {
     #private;
     readonly environment: ActionEventEnvironment;
     readonly transports: Transports;
-    default_send_options: ActionPeerSendOptions;
+    default_send_options: Omit<ActionPeerSendOptions, 'signal'>;
     constructor(options: ActionPeerOptions);
     send(message: JsonrpcRequest, options?: ActionPeerSendOptions): Promise<JsonrpcResponseOrError>;
     send(message: JsonrpcNotification, options?: ActionPeerSendOptions): Promise<JsonrpcErrorResponse | null>;

package/dist/actions/action_peer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action_peer.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/action_peer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEN,gCAAgC,EAChC,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAU5B,OAAO,EAAC,UAAU,EAAE,KAAK,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAC/D,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAOpE,MAAM,WAAW,qBAAqB;IACrC,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IACjC,WAAW,EAAE,sBAAsB,CAAC;IAGpC,UAAU,CAAC,EAAE,UAAU,CAAC;IAGxB,oBAAoB,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACtD;AAED,qBAAa,UAAU;;IACtB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAMhC,oBAAoB,EAAE,qBAAqB,CAAC;gBAEhC,OAAO,EAAE,iBAAiB;IAOhC,IAAI,CACT,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAC5B,IAAI,CACT,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA2CjC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,gCAAgC,GAAG,IAAI,CAAC;CAyIjF"}
+{"version":3,"file":"action_peer.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/action_peer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEN,gCAAgC,EAChC,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAU5B,OAAO,EAAC,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAC1F,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAOpE;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAsB,SAAQ,oBAAoB;IAClE,cAAc,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IACjC,WAAW,EAAE,sBAAsB,CAAC;IAGpC,UAAU,CAAC,EAAE,UAAU,CAAC;IAKxB,oBAAoB,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;CAC7D;AAED,qBAAa,UAAU;;IACtB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAMhC,oBAAoB,EAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;gBAEhD,OAAO,EAAE,iBAAiB;IAOhC,IAAI,CACT,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAC5B,IAAI,CACT,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA8CjC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,gCAAgC,GAAG,IAAI,CAAC;CAyIjF"}

package/dist/actions/action_peer.js

@@ -33,7 +33,10 @@ export class ActionPeer {
             }
             const message_type = is_jsonrpc_request(message) ? 'request' : 'notification';
             this.environment.log?.debug(`[peer] send ${message_type}:`, message.method, `via ${transport.transport_name}`);
-            const result = await transport.send(message, { signal: options?.signal });
+            const result = await transport.send(message, {
+                signal: options?.signal,
+                queue: options?.queue ?? this.default_send_options.queue,
+            });
             if (result && 'error' in result) {
                 this.environment.log?.error(`[peer] send ${message_type} failed:`, message.method, result.error.message);
             }

package/dist/actions/register_action_ws.d.ts

@@ -1,5 +1,11 @@
 /**
- * WebSocket JSON-RPC dispatch — the canonical WS transport binding.
+ * WebSocket JSON-RPC dispatch — the low-level WS transport binding.
+ *
+ * Most consumers should mount WS endpoints via `register_ws_endpoint`
+ * (`./register_ws_endpoint.js`), which wraps this function with the standard
+ * upgrade stack (origin check + auth + optional role). This module stays
+ * exported as the lower-level entry point for tests that drive the
+ * dispatcher directly via `create_ws_test_harness`.
  *
  * Symmetric to `create_rpc_endpoint` (from `actions/action_rpc.ts`):
  * consumer supplies action specs + a handler map, the dispatcher parses the
@@ -15,9 +21,10 @@
  * ## Auth expectations
  *
  * The consumer is responsible for rejecting unauthenticated upgrades *before*
- * routing to this handler (fuz_app's `require_auth` middleware). Inside the
- * dispatcher, `get_request_context(c)` is treated as guaranteed non-null and
- * per-action auth is enforced on each message.
+ * routing to this handler (fuz_app's `require_auth` middleware, or
+ * `register_ws_endpoint` which wires it for you). Inside the dispatcher,
+ * `get_request_context(c)` is treated as guaranteed non-null and per-action
+ * auth is enforced on each message.
  *
  * @module
  */

package/dist/actions/register_action_ws.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register_action_ws.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/register_action_ws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAC,OAAO,EAAE,IAAI,EAAC,MAAM,MAAM,CAAC;AACxC,OAAO,KAAK,EAAC,gBAAgB,EAAE,SAAS,EAAC,MAAM,SAAS,CAAC;AAEzD,OAAO,EAAS,KAAK,MAAM,IAAI,UAAU,EAAC,MAAM,yBAAyB,CAAC;AAgB1E,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,YAAY,CAAC;AAErC,OAAO,EAAC,KAAK,MAAM,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAC,MAAM,mBAAmB,CAAC;AAG7F,OAAO,EAAC,yBAAyB,EAAE,KAAK,kBAAkB,EAAC,MAAM,4BAA4B,CAAC;AAE9F,YAAY,EAAC,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAC,CAAC;AAE1D,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IACjC,qFAAqF;IACrF,EAAE,EAAE,SAAS,CAAC;IACd,4EAA4E;IAC5E,aAAa,EAAE,IAAI,CAAC;IACpB,oDAAoD;IACpD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B;;;OAGG;IACH,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAClD,wFAAwF;IACxF,MAAM,EAAE,WAAW,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAClC,+CAA+C;IAC/C,EAAE,EAAE,SAAS,CAAC;IACd,2CAA2C;IAC3C,aAAa,EAAE,IAAI,CAAC;IACpB,kGAAkG;IAClG,QAAQ,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACtC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wCAAwC;AACxC,MAAM,WAAW,uBAAuB,CAAC,IAAI,SAAS,kBAAkB;IACvE,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,EAAE,IAAI,CAAC;IACV,iEAAiE;IACjE,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;;;;;OAMG;IACH,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/D;;;;OAIG;IACH,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,sBAAsB,CAAC;IAC7C,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACtC,yEAAyE;IACzE,SAAS,EAAE,yBAAyB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,kBAAkB,GAAI,IAAI,SAAS,kBAAkB,EACjE,SAAS,uBAAuB,CAAC,IAAI,CAAC,KACpC,sBA8WF,CAAC"}
+{"version":3,"file":"register_action_ws.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/register_action_ws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAC,OAAO,EAAE,IAAI,EAAC,MAAM,MAAM,CAAC;AACxC,OAAO,KAAK,EAAC,gBAAgB,EAAE,SAAS,EAAC,MAAM,SAAS,CAAC;AAEzD,OAAO,EAAS,KAAK,MAAM,IAAI,UAAU,EAAC,MAAM,yBAAyB,CAAC;AAgB1E,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,YAAY,CAAC;AAErC,OAAO,EAAC,KAAK,MAAM,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAC,MAAM,mBAAmB,CAAC;AAG7F,OAAO,EAAC,yBAAyB,EAAE,KAAK,kBAAkB,EAAC,MAAM,4BAA4B,CAAC;AAE9F,YAAY,EAAC,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAC,CAAC;AAE1D,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IACjC,qFAAqF;IACrF,EAAE,EAAE,SAAS,CAAC;IACd,4EAA4E;IAC5E,aAAa,EAAE,IAAI,CAAC;IACpB,oDAAoD;IACpD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B;;;OAGG;IACH,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAClD,wFAAwF;IACxF,MAAM,EAAE,WAAW,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAClC,+CAA+C;IAC/C,EAAE,EAAE,SAAS,CAAC;IACd,2CAA2C;IAC3C,aAAa,EAAE,IAAI,CAAC;IACpB,kGAAkG;IAClG,QAAQ,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACtC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wCAAwC;AACxC,MAAM,WAAW,uBAAuB,CAAC,IAAI,SAAS,kBAAkB;IACvE,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,EAAE,IAAI,CAAC;IACV,iEAAiE;IACjE,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;;;;;OAMG;IACH,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/D;;;;OAIG;IACH,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,sBAAsB,CAAC;IAC7C,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACtC,yEAAyE;IACzE,SAAS,EAAE,yBAAyB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,kBAAkB,GAAI,IAAI,SAAS,kBAAkB,EACjE,SAAS,uBAAuB,CAAC,IAAI,CAAC,KACpC,sBA8WF,CAAC"}

package/dist/actions/register_action_ws.js

@@ -1,5 +1,11 @@
 /**
- * WebSocket JSON-RPC dispatch — the canonical WS transport binding.
+ * WebSocket JSON-RPC dispatch — the low-level WS transport binding.
+ *
+ * Most consumers should mount WS endpoints via `register_ws_endpoint`
+ * (`./register_ws_endpoint.js`), which wraps this function with the standard
+ * upgrade stack (origin check + auth + optional role). This module stays
+ * exported as the lower-level entry point for tests that drive the
+ * dispatcher directly via `create_ws_test_harness`.
  *
  * Symmetric to `create_rpc_endpoint` (from `actions/action_rpc.ts`):
  * consumer supplies action specs + a handler map, the dispatcher parses the
@@ -15,9 +21,10 @@
  * ## Auth expectations
  *
  * The consumer is responsible for rejecting unauthenticated upgrades *before*
- * routing to this handler (fuz_app's `require_auth` middleware). Inside the
- * dispatcher, `get_request_context(c)` is treated as guaranteed non-null and
- * per-action auth is enforced on each message.
+ * routing to this handler (fuz_app's `require_auth` middleware, or
+ * `register_ws_endpoint` which wires it for you). Inside the dispatcher,
+ * `get_request_context(c)` is treated as guaranteed non-null and per-action
+ * auth is enforced on each message.
  *
  * @module
  */

package/dist/actions/register_ws_endpoint.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Composed WebSocket endpoint registration — the idiomatic consumer entry
+ * point for mounting a fuz_app WS endpoint.
+ *
+ * Wraps the standard upgrade stack every consumer writes by hand:
+ *
+ * 1. `verify_request_source(allowed_origins)` — reject disallowed origins
+ *    before the upgrade handshake runs.
+ * 2. `require_auth` — reject unauthenticated upgrades.
+ * 3. Optional `require_role(required_role)` — for endpoints gated to a
+ *    specific role.
+ *
+ * Then delegates to {@link register_action_ws} for per-message JSON-RPC
+ * dispatch.
+ *
+ * @module
+ */
+import type { RoleName } from '../auth/role_schema.js';
+import { type RegisterActionWsOptions, type RegisterActionWsResult } from './register_action_ws.js';
+import type { BaseHandlerContext } from './action_types.js';
+/** Options for {@link register_ws_endpoint}. */
+export interface RegisterWsEndpointOptions<TCtx extends BaseHandlerContext> extends RegisterActionWsOptions<TCtx> {
+    /**
+     * Origin allowlist regexes — typically parsed from the `ALLOWED_ORIGINS`
+     * env var via `parse_allowed_origins`. Passed straight to
+     * `verify_request_source`.
+     */
+    allowed_origins: Array<RegExp>;
+    /**
+     * Role required to upgrade. Omit for any authenticated account (`require_auth`
+     * alone); set to e.g. `ROLE_ADMIN` to gate the endpoint behind a role. The
+     * per-action `auth` in each spec still applies at dispatch time — this is
+     * a coarse upgrade-time gate.
+     */
+    required_role?: RoleName;
+}
+/**
+ * Mount a WebSocket endpoint with the standard upgrade stack (origin check
+ * + auth + optional role) and JSON-RPC dispatch.
+ *
+ * Returns the {@link BackendWebsocketTransport} (supplied or freshly
+ * created), same as {@link register_action_ws} — retain it to wire
+ * `create_ws_auth_guard` on `on_audit_event` or to broadcast.
+ */
+export declare const register_ws_endpoint: <TCtx extends BaseHandlerContext>(options: RegisterWsEndpointOptions<TCtx>) => RegisterActionWsResult;
+//# sourceMappingURL=register_ws_endpoint.d.ts.map

package/dist/actions/register_ws_endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register_ws_endpoint.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/register_ws_endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAEN,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,mBAAmB,CAAC;AAE1D,gDAAgD;AAChD,MAAM,WAAW,yBAAyB,CACzC,IAAI,SAAS,kBAAkB,CAC9B,SAAQ,uBAAuB,CAAC,IAAI,CAAC;IACtC;;;;OAIG;IACH,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,QAAQ,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,GAAI,IAAI,SAAS,kBAAkB,EACnE,SAAS,yBAAyB,CAAC,IAAI,CAAC,KACtC,sBAUF,CAAC"}

package/dist/actions/register_ws_endpoint.js

@@ -0,0 +1,38 @@
+/**
+ * Composed WebSocket endpoint registration — the idiomatic consumer entry
+ * point for mounting a fuz_app WS endpoint.
+ *
+ * Wraps the standard upgrade stack every consumer writes by hand:
+ *
+ * 1. `verify_request_source(allowed_origins)` — reject disallowed origins
+ *    before the upgrade handshake runs.
+ * 2. `require_auth` — reject unauthenticated upgrades.
+ * 3. Optional `require_role(required_role)` — for endpoints gated to a
+ *    specific role.
+ *
+ * Then delegates to {@link register_action_ws} for per-message JSON-RPC
+ * dispatch.
+ *
+ * @module
+ */
+import { Logger } from '@fuzdev/fuz_util/log.js';
+import { require_auth, require_role } from '../auth/request_context.js';
+import { verify_request_source } from '../http/origin.js';
+import { register_action_ws, } from './register_action_ws.js';
+/**
+ * Mount a WebSocket endpoint with the standard upgrade stack (origin check
+ * + auth + optional role) and JSON-RPC dispatch.
+ *
+ * Returns the {@link BackendWebsocketTransport} (supplied or freshly
+ * created), same as {@link register_action_ws} — retain it to wire
+ * `create_ws_auth_guard` on `on_audit_event` or to broadcast.
+ */
+export const register_ws_endpoint = (options) => {
+    const { app, path, allowed_origins, required_role, log = new Logger('[ws]'), ...rest } = options;
+    app.use(path, verify_request_source(allowed_origins));
+    app.use(path, require_auth);
+    if (required_role !== undefined) {
+        app.use(path, require_role(required_role));
+    }
+    return register_action_ws({ app, path, log, ...rest });
+};

package/dist/actions/rpc_client.d.ts

@@ -10,7 +10,7 @@
  * @module
  */
 import type { ActionEventEnvironment } from './action_event_types.js';
-import type { ActionPeer } from './action_peer.js';
+import type { ActionPeer, ActionPeerSendOptions } from './action_peer.js';
 import type { ActionEventDataUnion } from './action_event_data.js';
 import type { TransportName } from './transports.js';
 /**
@@ -58,13 +58,11 @@ export interface CreateRpcClientOptions {
  */
 export declare const create_rpc_client: (options: CreateRpcClientOptions) => Record<string, (...args: Array<any>) => any>;
 /**
- * Per-call options accepted by every typed Proxy method. `signal` lets the
- * caller cancel an in-flight request (sends the shared `cancel` notification
- * on the WS path, aborts `fetch` on HTTP). `transport_name` overrides the
- * per-method `transport_for_method` selector for this call.
+ * Per-call options accepted by every typed Proxy method. Same shape as
+ * `ActionPeerSendOptions` — the client threads these through unchanged
+ * to the underlying peer. `transport_name` overrides the per-method
+ * `transport_for_method` selector for this call.
  */
-export interface RpcClientCallOptions {
-    signal?: AbortSignal;
-    transport_name?: TransportName;
+export interface RpcClientCallOptions extends ActionPeerSendOptions {
 }
 //# sourceMappingURL=rpc_client.d.ts.map

package/dist/actions/rpc_client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc_client.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/rpc_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAOpE,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAGnD;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,aAAa,GAAG,SAAS,CAAC;AAM/E,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACtC,aAAa,EAAE,CAAC,IAAI,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,oBAAoB,CAAA;KAAC,KAC5E;QACA,sBAAsB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,CAAC;KAC5C,GACD,SAAS,CAAC;CACb;AAED,uCAAuC;AACvC,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,sBAAsB,CAAC;IACpC,kEAAkE;IAClE,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,SAAS,sBAAsB,KAC7B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAgB7C,CAAC;AA2DF;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,aAAa,CAAC;CAC/B"}
+{"version":3,"file":"rpc_client.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/rpc_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAOpE,OAAO,KAAK,EAAC,UAAU,EAAE,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAGnD;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,aAAa,GAAG,SAAS,CAAC;AAM/E,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACtC,aAAa,EAAE,CAAC,IAAI,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,oBAAoB,CAAA;KAAC,KAC5E;QACA,sBAAsB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,CAAC;KAC5C,GACD,SAAS,CAAC;CACb;AAED,uCAAuC;AACvC,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,sBAAsB,CAAC;IACpC,kEAAkE;IAClE,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,SAAS,sBAAsB,KAC7B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAgB7C,CAAC;AA2DF;;;;;GAKG;AACH,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;CAAG"}

package/dist/actions/rpc_client.js

@@ -127,6 +127,7 @@ const create_request_response_method = (peer, environment, spec, actions, transp
         const response = await peer.send(event.data.request, {
             transport_name: options?.transport_name ?? transport_for_method?.(spec.method),
             signal: options?.signal,
+            queue: options?.queue,
         });
         event.transition('receive_response');
         // TODO @api shouldn't this happen in the peer like the other method calls?
@@ -155,6 +156,7 @@ const create_remote_notification_method = (peer, environment, spec, actions, tra
             const send_result = await peer.send(event.data.notification, {
                 transport_name: options?.transport_name ?? transport_for_method?.(spec.method),
                 signal: options?.signal,
+                queue: options?.queue,
             });
             // Check if notification failed to send
             if (send_result !== null) {

package/dist/actions/socket.svelte.d.ts

@@ -24,6 +24,7 @@
  * @module
  */
 import type { Logger } from '@fuzdev/fuz_util/log.js';
+import type { AsyncStatus } from '@fuzdev/fuz_util/async.js';
 import { type JsonrpcRequestId } from '../http/jsonrpc.js';
 import type { WebsocketConnection } from './transports_ws.js';
 /** Default WebSocket close code (normal closure). */
@@ -91,11 +92,11 @@ export interface FrontendWebsocketClientOptions {
      */
     reconnect?: boolean | FrontendWebsocketReconnectOptions | null;
     /**
-     * Activity-aware heartbeat. `true` or omit for defaults; `false` disables
+     * Activity-aware heartbeat. `true`/`null`/omit for defaults; `false` disables
      * the timer entirely (only do this if the server side is also running
      * without heartbeat); pass an object to tune `interval` / `receive_timeout`.
      */
-    heartbeat?: boolean | FrontendWebsocketHeartbeatOptions;
+    heartbeat?: boolean | FrontendWebsocketHeartbeatOptions | null;
     /**
      * Durable queue for {@link FrontendWebsocketClient.request}. `true` or omit
      * for defaults; `false` disables buffering (requests while disconnected
@@ -163,6 +164,33 @@ export declare class FrontendWebsocketClient implements WebsocketConnection, Dis
      * does not synthesize a reconnect — wait for the next close.
      */
     set_reconnect(reconnect?: boolean | FrontendWebsocketReconnectOptions | null): void;
+    /**
+     * Swap the heartbeat policy in place. Accepts the same shape as the
+     * constructor's `heartbeat` option: `false` disables the timer, `true` or
+     * `null`/omitted restores the defaults, or a config object customizes
+     * specific fields (missing fields fall back to defaults, not "keep
+     * current" — each call defines the whole policy atomically, same as the
+     * constructor and {@link set_reconnect}).
+     *
+     * When connected, the live timer is restarted immediately so the new
+     * `interval` / `receive_timeout` take effect without a reconnect; when
+     * disconnected, just stashes the policy for the next open.
+     */
+    set_heartbeat(heartbeat?: boolean | FrontendWebsocketHeartbeatOptions | null): void;
+    /**
+     * Cancel a scheduled reconnect without closing the client or disabling
+     * auto-reconnect. Transitions status from `reconnecting` → `closed` and
+     * resets the backoff counters — the next close still triggers a fresh
+     * reconnect cycle under the current policy. No-op when no reconnect is
+     * pending.
+     *
+     * Use this when UI state asks "stop trying for now" without the finality
+     * of {@link disconnect} (which also rejects pending/queued requests and
+     * clears heartbeat) or the policy change of `set_reconnect(false)`
+     * (which disables future reconnects). The queue stays intact so that
+     * calling {@link connect} later flushes buffered work.
+     */
+    cancel_reconnect(): void;
     get url(): string;
     /**
      * Whether the server has permanently closed the session. Once `true`, all
@@ -190,8 +218,7 @@ export declare class FrontendWebsocketClient implements WebsocketConnection, Dis
      * id (or uses an explicit one supplied via `options.id` — used by
      * `FrontendWebsocketTransport` which delegates to this method and has its
      * own peer-minted UUID), tracks the pending promise, and resolves when the
-     * server sends a matching response (or rejects on error frame, socket
-     * close, or aborted signal).
+     * server sends a matching response.
      *
      * Callers supplying an explicit `options.id` are responsible for
      * uniqueness — the pending map is keyed by id, and a duplicate silently
@@ -206,10 +233,22 @@ export declare class FrontendWebsocketClient implements WebsocketConnection, Dis
      * disconnect-detection slot.
      *
      * On `AbortSignal` fire: rejects the local promise *and* sends the shared
-     * `cancel` notification (`CANCEL_METHOD`) so the server-side dispatcher
-     * can abort the matching handler's `ctx.signal`. Suppressed for
-     * queued-but-never-sent (server doesn't know about it) and
+     * `cancel` notification ({@link CANCEL_METHOD}) so the server-side
+     * dispatcher can abort the matching handler's `ctx.signal`. Suppressed
+     * for queued-but-never-sent (server doesn't know about it) and
      * response-beat-cancel races.
+     *
+     * Rejections throw `ThrownJsonrpcError` with a specific code so
+     * `FrontendWebsocketTransport` can preserve the code verbatim in its
+     * error envelope rather than collapsing every rejection to
+     * `internal_error`:
+     * - `unauthenticated` — session revoked (entry check or close code);
+     * - `request_cancelled` — caller's `AbortSignal` fired;
+     * - `queue_overflow` — durable queue full;
+     * - `service_unavailable` — socket not connected / closed / torn down
+     *   mid-flight;
+     * - `internal_error` — `ws.send` threw (serialization, buffer full);
+     * - server's wire code verbatim — JSON-RPC error frame from peer.
      */
     request<R = unknown>(method: string, params?: unknown, options?: {
         signal?: AbortSignal;
@@ -219,4 +258,17 @@ export declare class FrontendWebsocketClient implements WebsocketConnection, Dis
     add_message_handler(handler: SocketMessageHandler): () => void;
     add_error_handler(handler: SocketErrorHandler): () => void;
 }
+/**
+ * Project {@link SocketStatus} onto fuz_util's {@link AsyncStatus} — the
+ * 5-way → 4-way mapping every consumer re-derives to surface connection state
+ * to UI (loading indicators, retry banners). Collapses `reconnecting` into
+ * `failure` (UI shows "lost, retrying") and splits `closed` by `revoked` so
+ * a terminal session-revocation read as `failure` while a clean client-
+ * initiated close reads as `initial` (the "not connected, not trying" state).
+ *
+ * @param status - the socket's current {@link SocketStatus}
+ * @param revoked - whether the session has been permanently revoked
+ *   (typically `FrontendWebsocketClient.revoked`)
+ */
+export declare const socket_status_to_async_status: (status: SocketStatus, revoked: boolean) => AsyncStatus;
 //# sourceMappingURL=socket.svelte.d.ts.map

package/dist/actions/socket.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/socket.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EAAkB,KAAK,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AAI1E,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AAE5D,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC,kCAAkC;AAClC,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,8DAA8D;AAC9D,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,8FAA8F;AAC9F,eAAO,MAAM,iCAAiC,QAAS,CAAC;AACxD,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE9F,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;AACjE,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;AAExD,MAAM,WAAW,iCAAiC;IACjD,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC9C;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,iCAAiC,GAAG,IAAI,CAAC;IAC/D;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,iCAAiC,CAAC;IACxD;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,6BAA6B,CAAC;IAChD,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAiBD;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,YAAW,mBAAmB,EAAE,UAAU;;IA0B9E,EAAE,EAAE,SAAS,GAAG,IAAI,CAAoB;IACxC,MAAM,EAAE,YAAY,CAAyB;IAE7C,eAAe,EAAE,MAAM,CAAiB;IACxC,uBAAuB,EAAE,MAAM,CAAiB;IAChD,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAoB;IACpD,yEAAyE;IACzE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAoB;IAClD,kFAAkF;IAClF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAoB;IAClD,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAoB;IACpD;;;;;;;;OAQG;IACH,eAAe,EAAE,KAAK,GAAG,IAAI,CAAoB;IASjD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAyC;gBAExD,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,8BAAmC;IAwBrE;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,SAAS,GAAE,OAAO,GAAG,iCAAiC,GAAG,IAAW,GAAG,IAAI;IA4CzF,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED;;;;OAIG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACH,OAAO,IAAI,IAAI;IA2Bf;;;;OAIG;IACH,UAAU,CAAC,IAAI,GAAE,MAA2B,GAAG,IAAI;IAUnD,sGAAsG;IACtG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI;IAIxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAc3B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,CAAC,GAAG,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,OAAY,EACpB,OAAO,GAAE;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,gBAAgB,CAAA;KAAM,GAC1E,OAAO,CAAC,CAAC,CAAC;IA2Eb,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAK9D,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI;CAmT1D"}
+{"version":3,"file":"socket.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/socket.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AACpD,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAyC,KAAK,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AAKjG,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AAE5D,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC,kCAAkC;AAClC,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,8DAA8D;AAC9D,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,8FAA8F;AAC9F,eAAO,MAAM,iCAAiC,QAAS,CAAC;AACxD,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE9F,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;AACjE,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;AAExD,MAAM,WAAW,iCAAiC;IACjD,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC9C;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,iCAAiC,GAAG,IAAI,CAAC;IAC/D;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,iCAAiC,GAAG,IAAI,CAAC;IAC/D;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,6BAA6B,CAAC;IAChD,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAiBD;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,YAAW,mBAAmB,EAAE,UAAU;;IA0B9E,EAAE,EAAE,SAAS,GAAG,IAAI,CAAoB;IACxC,MAAM,EAAE,YAAY,CAAyB;IAE7C,eAAe,EAAE,MAAM,CAAiB;IACxC,uBAAuB,EAAE,MAAM,CAAiB;IAChD,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAoB;IACpD,yEAAyE;IACzE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAoB;IAClD,kFAAkF;IAClF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAoB;IAClD,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAoB;IACpD;;;;;;;;OAQG;IACH,eAAe,EAAE,KAAK,GAAG,IAAI,CAAoB;IASjD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAyC;gBAExD,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,8BAAmC;IAwBrE;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,SAAS,GAAE,OAAO,GAAG,iCAAiC,GAAG,IAAW,GAAG,IAAI;IA2CzF;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,SAAS,GAAE,OAAO,GAAG,iCAAiC,GAAG,IAAW,GAAG,IAAI;IAazF;;;;;;;;;;;;OAYG;IACH,gBAAgB,IAAI,IAAI;IAOxB,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED;;;;OAIG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACH,OAAO,IAAI,IAAI;IA2Bf;;;;OAIG;IACH,UAAU,CAAC,IAAI,GAAE,MAA2B,GAAG,IAAI;IASnD,sGAAsG;IACtG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI;IAIxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAc3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,OAAO,CAAC,CAAC,GAAG,OAAO,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,OAAY,EACpB,OAAO,GAAE;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,gBAAgB,CAAA;KAAM,GAC1E,OAAO,CAAC,CAAC,CAAC;IA2Eb,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAK9D,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI;CAyU1D;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,6BAA6B,GACzC,QAAQ,YAAY,EACpB,SAAS,OAAO,KACd,WAaF,CAAC"}

package/dist/actions/socket.svelte.js

@@ -25,6 +25,7 @@
  */
 import { BROWSER } from 'esm-env';
 import { JSONRPC_VERSION } from '../http/jsonrpc.js';
+import { JSONRPC_ERROR_CODES, ThrownJsonrpcError, jsonrpc_errors } from '../http/jsonrpc_errors.js';
 import { WS_CLOSE_CLIENT_HEARTBEAT_TIMEOUT, WS_CLOSE_SESSION_REVOKED } from './transports.js';
 import { CANCEL_METHOD } from './cancel.js';
 import { HEARTBEAT_METHOD } from './heartbeat.js';
@@ -111,7 +112,7 @@ export class FrontendWebsocketClient {
         this.#backoff_factor = config.factor ?? DEFAULT_BACKOFF_FACTOR;
         const heartbeat = options.heartbeat;
         this.#heartbeat_enabled = heartbeat !== false;
-        const heartbeat_config = typeof heartbeat === 'object' ? heartbeat : {};
+        const heartbeat_config = typeof heartbeat === 'object' && heartbeat !== null ? heartbeat : {};
         this.#heartbeat_interval = heartbeat_config.interval ?? DEFAULT_HEARTBEAT_INTERVAL;
         this.#heartbeat_receive_timeout =
             heartbeat_config.receive_timeout ?? DEFAULT_HEARTBEAT_RECEIVE_TIMEOUT;
@@ -152,8 +153,7 @@ export class FrontendWebsocketClient {
         if (!next_auto) {
             this.#cancel_reconnect();
             this.status = 'closed';
-            this.reconnect_count = 0;
-            this.current_reconnect_delay = 0;
+            this.#reset_reconnect_counters();
             return;
         }
         // Auto-reconnect still on: monotonically shorten the pending wait if
@@ -176,6 +176,50 @@ export class FrontendWebsocketClient {
             this.connect();
         }, new_remaining);
     }
+    /**
+     * Swap the heartbeat policy in place. Accepts the same shape as the
+     * constructor's `heartbeat` option: `false` disables the timer, `true` or
+     * `null`/omitted restores the defaults, or a config object customizes
+     * specific fields (missing fields fall back to defaults, not "keep
+     * current" — each call defines the whole policy atomically, same as the
+     * constructor and {@link set_reconnect}).
+     *
+     * When connected, the live timer is restarted immediately so the new
+     * `interval` / `receive_timeout` take effect without a reconnect; when
+     * disconnected, just stashes the policy for the next open.
+     */
+    set_heartbeat(heartbeat = null) {
+        this.#heartbeat_enabled = heartbeat !== false;
+        const config = typeof heartbeat === 'object' && heartbeat !== null ? heartbeat : {};
+        this.#heartbeat_interval = config.interval ?? DEFAULT_HEARTBEAT_INTERVAL;
+        this.#heartbeat_receive_timeout = config.receive_timeout ?? DEFAULT_HEARTBEAT_RECEIVE_TIMEOUT;
+        if (this.connected) {
+            this.#start_heartbeat();
+        }
+        else {
+            this.#cancel_heartbeat();
+        }
+    }
+    /**
+     * Cancel a scheduled reconnect without closing the client or disabling
+     * auto-reconnect. Transitions status from `reconnecting` → `closed` and
+     * resets the backoff counters — the next close still triggers a fresh
+     * reconnect cycle under the current policy. No-op when no reconnect is
+     * pending.
+     *
+     * Use this when UI state asks "stop trying for now" without the finality
+     * of {@link disconnect} (which also rejects pending/queued requests and
+     * clears heartbeat) or the policy change of `set_reconnect(false)`
+     * (which disables future reconnects). The queue stays intact so that
+     * calling {@link connect} later flushes buffered work.
+     */
+    cancel_reconnect() {
+        if (this.#reconnect_timeout === null)
+            return;
+        this.#cancel_reconnect();
+        this.status = 'closed';
+        this.#reset_reconnect_counters();
+    }
     get url() {
         return this.#url;
     }
@@ -229,9 +273,8 @@ export class FrontendWebsocketClient {
         this.#cancel_heartbeat();
         this.#teardown(code);
         this.status = 'closed';
-        this.reconnect_count = 0;
-        this.current_reconnect_delay = 0;
-        this.#reject_all('client disconnected');
+        this.#reset_reconnect_counters();
+        this.#reject_all('client disconnected', jsonrpc_errors.service_unavailable);
     }
     /** Explicit-resource-management hook — supports `using client = new FrontendWebsocketClient(url)`. */
     [Symbol.dispose]() {
@@ -257,8 +300,7 @@ export class FrontendWebsocketClient {
      * id (or uses an explicit one supplied via `options.id` — used by
      * `FrontendWebsocketTransport` which delegates to this method and has its
      * own peer-minted UUID), tracks the pending promise, and resolves when the
-     * server sends a matching response (or rejects on error frame, socket
-     * close, or aborted signal).
+     * server sends a matching response.
      *
      * Callers supplying an explicit `options.id` are responsible for
      * uniqueness — the pending map is keyed by id, and a duplicate silently
@@ -273,17 +315,29 @@ export class FrontendWebsocketClient {
      * disconnect-detection slot.
      *
      * On `AbortSignal` fire: rejects the local promise *and* sends the shared
-     * `cancel` notification (`CANCEL_METHOD`) so the server-side dispatcher
-     * can abort the matching handler's `ctx.signal`. Suppressed for
-     * queued-but-never-sent (server doesn't know about it) and
+     * `cancel` notification ({@link CANCEL_METHOD}) so the server-side
+     * dispatcher can abort the matching handler's `ctx.signal`. Suppressed
+     * for queued-but-never-sent (server doesn't know about it) and
      * response-beat-cancel races.
+     *
+     * Rejections throw `ThrownJsonrpcError` with a specific code so
+     * `FrontendWebsocketTransport` can preserve the code verbatim in its
+     * error envelope rather than collapsing every rejection to
+     * `internal_error`:
+     * - `unauthenticated` — session revoked (entry check or close code);
+     * - `request_cancelled` — caller's `AbortSignal` fired;
+     * - `queue_overflow` — durable queue full;
+     * - `service_unavailable` — socket not connected / closed / torn down
+     *   mid-flight;
+     * - `internal_error` — `ws.send` threw (serialization, buffer full);
+     * - server's wire code verbatim — JSON-RPC error frame from peer.
      */
     request(method, params = {}, options = {}) {
         return new Promise((resolve, reject) => {
             const resolve_typed = resolve;
             const reject_typed = reject;
             if (this.#revoked) {
-                reject_typed(new Error('[socket] session revoked'));
+                reject_typed(jsonrpc_errors.unauthenticated('[socket] session revoked'));
                 return;
             }
             const { signal = null } = options;
@@ -336,7 +390,7 @@ export class FrontendWebsocketClient {
                     return;
                 }
                 this.#detach_signal(pending);
-                reject_typed(new Error(`[socket] send failed for ${method}`));
+                reject_typed(jsonrpc_errors.internal_error(`[socket] send failed for ${method}`));
                 return;
             }
             if (should_queue) {
@@ -344,7 +398,7 @@ export class FrontendWebsocketClient {
                 return;
             }
             this.#detach_signal(pending);
-            reject_typed(new Error(`[socket] not connected (method=${method})`));
+            reject_typed(jsonrpc_errors.service_unavailable(`[socket] not connected (method=${method})`));
         });
     }
     add_message_handler(handler) {
@@ -356,7 +410,7 @@ export class FrontendWebsocketClient {
         return () => this.#error_handlers.delete(handler);
     }
     #build_abort_error(method) {
-        return new Error(`[socket] request aborted (method=${method})`);
+        return jsonrpc_errors.request_cancelled(`[socket] request aborted (method=${method})`);
     }
     /**
      * Fire-and-forget cancel notification to the server. The dispatcher
@@ -379,7 +433,7 @@ export class FrontendWebsocketClient {
     #enqueue(queued) {
         if (this.#queue.length >= this.#queue_max_size) {
             this.#detach_signal(queued);
-            queued.reject(new Error(`[socket] request queue overflow (method=${queued.method}, max=${this.#queue_max_size})`));
+            queued.reject(jsonrpc_errors.queue_overflow(`[socket] request queue overflow (method=${queued.method}, max=${this.#queue_max_size})`));
             return;
         }
         this.#queue.push(queued);
@@ -412,25 +466,25 @@ export class FrontendWebsocketClient {
             }
             else {
                 this.#detach_signal(q);
-                q.reject(new Error(`[socket] queued request send failed (method=${q.method})`));
+                q.reject(jsonrpc_errors.internal_error(`[socket] queued request send failed (method=${q.method})`));
             }
         }
     }
-    #reject_all(reason) {
+    #reject_all(reason, make_error) {
         const pending = this.#pending;
         this.#pending = new Map();
         for (const [id, p] of pending) {
             this.#detach_signal(p);
-            p.reject(new Error(`[socket] ${reason} (method=${p.method}, id=${id})`));
+            p.reject(make_error(`[socket] ${reason} (method=${p.method}, id=${id})`));
         }
         const queued = this.#queue;
         this.#queue = [];
         for (const q of queued) {
             this.#detach_signal(q);
-            q.reject(new Error(`[socket] ${reason} (method=${q.method})`));
+            q.reject(make_error(`[socket] ${reason} (method=${q.method})`));
         }
     }
-    #reject_pending_only(reason) {
+    #reject_pending_only(reason, make_error) {
         // Socket closed but auto-reconnect will try again — pending requests were
         // in flight on the old socket so we can't correlate them after reopen;
         // queued requests haven't been sent yet and stay buffered for the flush.
@@ -438,7 +492,7 @@ export class FrontendWebsocketClient {
         this.#pending = new Map();
         for (const [id, p] of pending) {
             this.#detach_signal(p);
-            p.reject(new Error(`[socket] ${reason} (method=${p.method}, id=${id})`));
+            p.reject(make_error(`[socket] ${reason} (method=${p.method}, id=${id})`));
         }
     }
     #start_heartbeat() {
@@ -505,7 +559,7 @@ export class FrontendWebsocketClient {
             // record it here so the client-initiated close is still observable,
             // and reject any pending requests that can never resolve now.
             this.#record_close(close_code, '');
-            this.#reject_pending_only(`socket torn down (code ${close_code})`);
+            this.#reject_pending_only(`socket torn down (code ${close_code})`, jsonrpc_errors.service_unavailable);
         }
         this.ws = null;
     }
@@ -535,10 +589,14 @@ export class FrontendWebsocketClient {
         }
         this.#reconnect_scheduled_at = null;
     }
-    #handle_open = (_event) => {
-        this.status = 'connected';
+    /** Reset the reactive reconnect counters — the pair always travels together. */
+    #reset_reconnect_counters() {
         this.reconnect_count = 0;
         this.current_reconnect_delay = 0;
+    }
+    #handle_open = (_event) => {
+        this.status = 'connected';
+        this.#reset_reconnect_counters();
         this.last_connect_time = Date.now();
         this.#cancel_reconnect();
         this.#start_heartbeat();
@@ -556,14 +614,13 @@ export class FrontendWebsocketClient {
             this.#revoked = true;
             this.status = 'closed';
             this.#cancel_reconnect();
-            this.reconnect_count = 0;
-            this.current_reconnect_delay = 0;
-            this.#reject_all('session revoked');
+            this.#reset_reconnect_counters();
+            this.#reject_all('session revoked', jsonrpc_errors.unauthenticated);
             return;
         }
         // Pending in-flight requests can't be correlated post-reconnect; reject
         // them. Queue stays so the flush on reopen replays unsent work.
-        this.#reject_pending_only(`connection closed (code ${event.code})`);
+        this.#reject_pending_only(`connection closed (code ${event.code})`, jsonrpc_errors.service_unavailable);
         // Let `#schedule_reconnect` set `status: 'reconnecting'` directly to avoid
         // a transient `'closed'` flicker; only set `'closed'` when reconnect is off.
         if (this.#auto_reconnect) {
@@ -571,7 +628,7 @@ export class FrontendWebsocketClient {
         }
         else {
             this.status = 'closed';
-            this.#reject_all('connection closed, auto-reconnect disabled');
+            this.#reject_all('connection closed, auto-reconnect disabled', jsonrpc_errors.service_unavailable);
         }
     };
     #handle_error = (event) => {
@@ -611,7 +668,16 @@ export class FrontendWebsocketClient {
                     this.#detach_signal(pending);
                     if ('error' in json && json.error) {
                         const err = json.error;
-                        pending.reject(new Error(`[rpc ${pending.method} #${id}] ${err.code ?? '?'} ${err.message ?? 'unknown error'}`));
+                        // Preserve the server's wire code verbatim so the transport's
+                        // catch block re-emits the same code in its envelope. Fall
+                        // back to `internal_error` only when the frame is malformed.
+                        const wire_code = typeof err.code === 'number'
+                            ? err.code
+                            : JSONRPC_ERROR_CODES.internal_error;
+                        const wire_message = typeof err.message === 'string' && err.message.length > 0
+                            ? err.message
+                            : 'unknown error';
+                        pending.reject(new ThrownJsonrpcError(wire_code, wire_message, err.data));
                     }
                     else {
                         pending.resolve(json.result);
@@ -630,3 +696,29 @@ export class FrontendWebsocketClient {
         }
     };
 }
+/**
+ * Project {@link SocketStatus} onto fuz_util's {@link AsyncStatus} — the
+ * 5-way → 4-way mapping every consumer re-derives to surface connection state
+ * to UI (loading indicators, retry banners). Collapses `reconnecting` into
+ * `failure` (UI shows "lost, retrying") and splits `closed` by `revoked` so
+ * a terminal session-revocation read as `failure` while a clean client-
+ * initiated close reads as `initial` (the "not connected, not trying" state).
+ *
+ * @param status - the socket's current {@link SocketStatus}
+ * @param revoked - whether the session has been permanently revoked
+ *   (typically `FrontendWebsocketClient.revoked`)
+ */
+export const socket_status_to_async_status = (status, revoked) => {
+    switch (status) {
+        case 'initial':
+            return 'initial';
+        case 'connecting':
+            return 'pending';
+        case 'connected':
+            return 'success';
+        case 'reconnecting':
+            return 'failure';
+        case 'closed':
+            return revoked ? 'failure' : 'initial';
+    }
+};

package/dist/actions/transports.d.ts

@@ -18,14 +18,31 @@ export declare const TransportName: z.ZodString;
 export type TransportName = z.infer<typeof TransportName>;
 /**
  * Per-call options accepted by every transport's `send`. Optional and
- * extensible — adding a field is non-breaking. Today: an `AbortSignal`
- * for cancellation that bottoms out at `FrontendWebsocketClient.request`
- * (which sends the shared `cancel` notification on abort) and at
- * `fetch({signal})` for HTTP. Backend transport receives the option but
- * has no per-call abort surface to honor.
+ * extensible — adding a field is non-breaking. Source of truth for the
+ * shared option shape; `ActionPeerSendOptions` and `RpcClientCallOptions`
+ * extend it.
  */
 export interface TransportSendOptions {
+    /**
+     * Per-call cancellation. Bottoms out at
+     * `FrontendWebsocketClient.request({signal})` on the WS path (sends the
+     * shared `cancel` notification on abort) and at `fetch({signal})` on
+     * HTTP. Backend transport has no per-call abort surface to honor.
+     */
     signal?: AbortSignal;
+    /**
+     * Per-call durable-queue opt-in. Names the **client-authoritative vs
+     * server-authoritative** distinction — server-authoritative consumers
+     * (e.g. zzz completion calls) fail fast with `service_unavailable` when
+     * the transport is down; client-authoritative consumers (games,
+     * real-time apps) buffer and replay on reconnect because the user
+     * already committed to the action at click time. Honored only by
+     * `FrontendWebsocketTransport` on the `request_response` path (default
+     * `false`). HTTP and backend transports ignore it; WS notifications
+     * also ignore it and always fail-fast when disconnected (fire-and-forget
+     * `connection.send` has no queue semantic).
+     */
+    queue?: boolean;
 }
 export interface Transport {
     transport_name: TransportName;

package/dist/actions/transports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transports.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EACX,gCAAgC,EAChC,gCAAgC,EAChC,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAE5B,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iCAAiC,OAAO,CAAC;AACtD,yEAAyE;AACzE,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAKtD,eAAO,MAAM,aAAa,aAAa,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACzB,cAAc,EAAE,aAAa,CAAC;IAE9B,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/F,IAAI,CACH,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACxC,IAAI,CACH,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,gCAAgC,GAAG,IAAI,CAAC,CAAC;IACpD,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,qBAAa,UAAU;;IAItB;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAQ;IAE/B;;OAEG;IACH,kBAAkB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAS9C,qBAAqB,CAAC,cAAc,EAAE,aAAa,GAAG,IAAI;IAM1D;;;;;OAKG;IACH,aAAa,CAAC,cAAc,CAAC,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI;IAO/D,QAAQ,IAAI,OAAO,GAAG,IAAI;IAM1B,qBAAqB,IAAI,SAAS,GAAG,IAAI;IAIzC,0BAA0B,IAAI,aAAa,GAAG,IAAI;IAIlD,qBAAqB,CAAC,cAAc,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI;CAqDtE"}
+{"version":3,"file":"transports.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EACX,gCAAgC,EAChC,gCAAgC,EAChC,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAE5B,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iCAAiC,OAAO,CAAC;AACtD,yEAAyE;AACzE,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAKtD,eAAO,MAAM,aAAa,aAAa,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACzB,cAAc,EAAE,aAAa,CAAC;IAE9B,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/F,IAAI,CACH,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACxC,IAAI,CACH,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,gCAAgC,GAAG,IAAI,CAAC,CAAC;IACpD,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,qBAAa,UAAU;;IAItB;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAQ;IAE/B;;OAEG;IACH,kBAAkB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAS9C,qBAAqB,CAAC,cAAc,EAAE,aAAa,GAAG,IAAI;IAM1D;;;;;OAKG;IACH,aAAa,CAAC,cAAc,CAAC,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI;IAO/D,QAAQ,IAAI,OAAO,GAAG,IAAI;IAM1B,qBAAqB,IAAI,SAAS,GAAG,IAAI;IAIzC,0BAA0B,IAAI,aAAa,GAAG,IAAI;IAIlD,qBAAqB,CAAC,cAAc,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI;CAqDtE"}

package/dist/actions/transports_ws.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transports_ws.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports_ws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,OAAO,KAAK,EAGX,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,SAAS,EAAE,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAIrE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC5E,iBAAiB,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;CACnE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IAClE,OAAO,EAAE,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,gBAAgB,CAAA;KAAC,KACpE,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,qBAAa,0BAA2B,YAAW,SAAS;;IAC3D,QAAQ,CAAC,cAAc,EAAG,wBAAwB,CAAU;gBAOhD,UAAU,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;IAyBtF,IAAI,CACT,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAC5B,IAAI,CACT,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAoDvC,QAAQ,IAAI,OAAO;IAInB,OAAO,IAAI,IAAI;CAUf"}
+{"version":3,"file":"transports_ws.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports_ws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,OAAO,KAAK,EAGX,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,SAAS,EAAE,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAIrE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC5E,iBAAiB,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;CACnE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IAClE,OAAO,EAAE,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,gBAAgB,CAAA;KAAC,KACpE,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,qBAAa,0BAA2B,YAAW,SAAS;;IAC3D,QAAQ,CAAC,cAAc,EAAG,wBAAwB,CAAU;gBAOhD,UAAU,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;IAyBtF,IAAI,CACT,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAC5B,IAAI,CACT,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA4DvC,QAAQ,IAAI,OAAO;IAInB,OAAO,IAAI,IAAI;CAUf"}

package/dist/actions/transports_ws.js

@@ -42,11 +42,19 @@ export class FrontendWebsocketTransport {
         });
     }
     async send(message, options) {
-        // Fail-fast at the transport boundary. The connection's own queue
-        // would buffer the request and flush on reconnect; that's the right
-        // default for direct `client.request()` callers but the typed Proxy
-        // path expects "service unavailable" semantics when the WS is down.
-        if (!this.is_ready()) {
+        // Notifications fail-fast when disconnected regardless of `queue` —
+        // `connection.send()` is fire-and-forget with no queue semantic, so
+        // silently dropping would masquerade as success at the rpc_client
+        // layer (caller would see `{ok: true}` for a lost message).
+        //
+        // Requests have no such gate here: `connection.request()` throws
+        // `ThrownJsonrpcError` with the right code (`service_unavailable`
+        // when not connected, `queue_overflow` when the durable queue is
+        // full, `request_cancelled` on abort, server's wire code for peer
+        // error frames), and the catch block below preserves that code
+        // verbatim in the error envelope. Queuing is routed via `queue`.
+        const queue = options?.queue ?? false;
+        if (is_jsonrpc_notification(message) && !this.is_ready()) {
             return create_jsonrpc_error_response(to_jsonrpc_message_id(message), jsonrpc_error_messages.service_unavailable('WebSocket not connected'));
         }
         if (is_jsonrpc_request(message)) {
@@ -54,7 +62,7 @@ export class FrontendWebsocketTransport {
                 const result = await this.#connection.request(message.method, message.params, {
                     id: message.id,
                     signal: options?.signal,
-                    queue: false,
+                    queue,
                 });
                 return create_jsonrpc_response(message.id, to_jsonrpc_result(result));
             }

package/dist/http/jsonrpc_errors.d.ts

@@ -3,7 +3,7 @@
  *
  * Provides error types, named constructors, and HTTP status mapping
  * for the throw/catch error pattern used by `apply_route_specs`.
- * Core error codes (5 standard + 8 general application). Domain-specific
+ * Core error codes (5 standard + 10 general application). Domain-specific
  * codes stay in consumers — add by casting `as JsonrpcErrorCode`.
  *
  * `JsonrpcErrorCode` and `JsonrpcErrorObject` types are Zod-inferred
@@ -20,9 +20,9 @@ import { type JsonrpcErrorCode, type JsonrpcErrorObject } from './jsonrpc.js';
 /** Default message for unknown errors. */
 export declare const UNKNOWN_ERROR_MESSAGE = "unknown error";
 /** Names of standard and general application JSON-RPC error codes. */
-export type JsonrpcErrorName = 'parse_error' | 'invalid_request' | 'method_not_found' | 'invalid_params' | 'internal_error' | 'unauthenticated' | 'forbidden' | 'not_found' | 'conflict' | 'validation_error' | 'rate_limited' | 'service_unavailable' | 'timeout';
+export type JsonrpcErrorName = 'parse_error' | 'invalid_request' | 'method_not_found' | 'invalid_params' | 'internal_error' | 'unauthenticated' | 'forbidden' | 'not_found' | 'conflict' | 'validation_error' | 'rate_limited' | 'service_unavailable' | 'timeout' | 'queue_overflow' | 'request_cancelled';
 /**
- * Standard JSON-RPC error codes (5) plus general application codes (8).
+ * Standard JSON-RPC error codes (5) plus general application codes (10).
  *
  * Extensible — consumers add domain-specific codes to their own objects
  * by casting `as JsonrpcErrorCode`. Application codes use the -32000 to
@@ -55,6 +55,18 @@ export declare const JSONRPC_ERROR_CODES: {
     readonly rate_limited: JsonrpcErrorCode;
     readonly service_unavailable: JsonrpcErrorCode;
     readonly timeout: JsonrpcErrorCode;
+    /**
+     * Client-side backpressure — an outbound buffer (e.g. `FrontendWebsocketClient`'s
+     * disconnected request queue) refused a new request because it was full.
+     * Distinct from `rate_limited`, which signals a server-side policy.
+     */
+    readonly queue_overflow: JsonrpcErrorCode;
+    /**
+     * Caller-initiated cancellation (e.g. `AbortSignal` fired). Cooperative,
+     * not a failure — the request did not complete because the caller asked
+     * for it to stop.
+     */
+    readonly request_cancelled: JsonrpcErrorCode;
 };
 /**
  * Named constructors for `JsonrpcErrorObject` values.
@@ -77,6 +89,8 @@ export declare const jsonrpc_error_messages: {
     readonly rate_limited: (message?: string, data?: unknown) => JsonrpcErrorObject;
     readonly service_unavailable: (message?: string, data?: unknown) => JsonrpcErrorObject;
     readonly timeout: (message?: string, data?: unknown) => JsonrpcErrorObject;
+    readonly queue_overflow: (message?: string, data?: unknown) => JsonrpcErrorObject;
+    readonly request_cancelled: (message?: string, data?: unknown) => JsonrpcErrorObject;
 };
 /**
  * Error class carrying a JSON-RPC error code — thrown by handlers,
@@ -108,6 +122,8 @@ export declare const jsonrpc_errors: {
     readonly rate_limited: (message?: string | undefined, data?: unknown) => ThrownJsonrpcError;
     readonly service_unavailable: (message?: string | undefined, data?: unknown) => ThrownJsonrpcError;
     readonly timeout: (message?: string | undefined, data?: unknown) => ThrownJsonrpcError;
+    readonly queue_overflow: (message?: string | undefined, data?: unknown) => ThrownJsonrpcError;
+    readonly request_cancelled: (message?: string | undefined, data?: unknown) => ThrownJsonrpcError;
 };
 /**
  * Maps JSON-RPC error codes to HTTP status codes.

package/dist/http/jsonrpc_errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsonrpc_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/jsonrpc_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAMN,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,0CAA0C;AAC1C,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAErD,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GACzB,aAAa,GACb,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,cAAc,GACd,qBAAqB,GACrB,SAAS,CAAC;AAEb;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;0BAEK,gBAAgB;8BACR,gBAAgB;+BACd,gBAAgB;6BACpB,gBAAgB;6BAChB,gBAAgB;IAG1D;;;;OAIG;8BACwB,gBAAgB;IAC3C;;;OAGG;wBACkB,gBAAgB;wBAChB,gBAAgB;uBACjB,gBAAgB;IACpC;;;OAGG;+BACyB,gBAAgB;2BACpB,gBAAgB;kCACT,gBAAgB;sBAC5B,gBAAgB;CAC2B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;kCACb,OAAO,KAAG,kBAAkB;sCAMxB,OAAO,KAAG,kBAAkB;yCAMzB,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAM5C,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAO5D,MAAM,SACR,OAAO,KACZ,kBAAkB;yCAMM,MAAM,SAA6B,OAAO,KAAG,kBAAkB;mCAMrE,MAAM,SAAuB,OAAO,KAAG,kBAAkB;oCAMvD,MAAM,SAAS,OAAO,KAAG,kBAAkB;kCAM9C,MAAM,SAAsB,OAAO,KAAG,kBAAkB;0CAMhD,MAAM,SAA8B,OAAO,KAAG,kBAAkB;sCAMpE,MAAM,SAA0B,OAAO,KAAG,kBAAkB;6CAO1E,MAAM,SACR,OAAO,KACZ,kBAAkB;iCAMF,MAAM,SAAqB,OAAO,KAAG,kBAAkB;CAKe,CAAC;AAE3F;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEH,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY;CAK3F;AAWD;;;;GAIG;AACH,eAAO,MAAM,cAAc;8CAXQ,kBAAkB;kDAAlB,kBAAkB;gFAAlB,kBAAkB;+EAAlB,kBAAkB;+EAAlB,kBAAkB;gFAAlB,kBAAkB;0EAAlB,kBAAkB;2EAAlB,kBAAkB;yEAAlB,kBAAkB;iFAAlB,kBAAkB;6EAAlB,kBAAkB;oFAAlB,kBAAkB;wEAAlB,kBAAkB;CAyBqC,CAAC;AAI3F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAcpE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAMzC,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,iCAAiC,GAAI,MAAM,gBAAgB,KAAG,MAClB,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,GAAI,QAAQ,MAAM,KAAG,gBACa,CAAC"}
+{"version":3,"file":"jsonrpc_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/jsonrpc_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAMN,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,0CAA0C;AAC1C,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAErD,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GACzB,aAAa,GACb,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,cAAc,GACd,qBAAqB,GACrB,SAAS,GACT,gBAAgB,GAChB,mBAAmB,CAAC;AAEvB;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;0BAEK,gBAAgB;8BACR,gBAAgB;+BACd,gBAAgB;6BACpB,gBAAgB;6BAChB,gBAAgB;IAG1D;;;;OAIG;8BACwB,gBAAgB;IAC3C;;;OAGG;wBACkB,gBAAgB;wBAChB,gBAAgB;uBACjB,gBAAgB;IACpC;;;OAGG;+BACyB,gBAAgB;2BACpB,gBAAgB;kCACT,gBAAgB;sBAC5B,gBAAgB;IACnC;;;;OAIG;6BACuB,gBAAgB;IAC1C;;;;OAIG;gCAC0B,gBAAgB;CACiB,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;kCACb,OAAO,KAAG,kBAAkB;sCAMxB,OAAO,KAAG,kBAAkB;yCAMzB,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAM5C,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAO5D,MAAM,SACR,OAAO,KACZ,kBAAkB;yCAMM,MAAM,SAA6B,OAAO,KAAG,kBAAkB;mCAMrE,MAAM,SAAuB,OAAO,KAAG,kBAAkB;oCAMvD,MAAM,SAAS,OAAO,KAAG,kBAAkB;kCAM9C,MAAM,SAAsB,OAAO,KAAG,kBAAkB;0CAMhD,MAAM,SAA8B,OAAO,KAAG,kBAAkB;sCAMpE,MAAM,SAA0B,OAAO,KAAG,kBAAkB;6CAO1E,MAAM,SACR,OAAO,KACZ,kBAAkB;iCAMF,MAAM,SAAqB,OAAO,KAAG,kBAAkB;wCAMhD,MAAM,SAA4B,OAAO,KAAG,kBAAkB;2CAO9E,MAAM,SACR,OAAO,KACZ,kBAAkB;CAKoE,CAAC;AAE3F;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEH,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY;CAK3F;AAWD;;;;GAIG;AACH,eAAO,MAAM,cAAc;8CAXQ,kBAAkB;kDAAlB,kBAAkB;gFAAlB,kBAAkB;+EAAlB,kBAAkB;+EAAlB,kBAAkB;gFAAlB,kBAAkB;0EAAlB,kBAAkB;2EAAlB,kBAAkB;yEAAlB,kBAAkB;iFAAlB,kBAAkB;6EAAlB,kBAAkB;oFAAlB,kBAAkB;wEAAlB,kBAAkB;+EAAlB,kBAAkB;kFAAlB,kBAAkB;CA2BqC,CAAC;AAI3F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAkBpE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAMzC,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,iCAAiC,GAAI,MAAM,gBAAgB,KAAG,MAClB,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,GAAI,QAAQ,MAAM,KAAG,gBACa,CAAC"}

package/dist/http/jsonrpc_errors.js

@@ -3,7 +3,7 @@
  *
  * Provides error types, named constructors, and HTTP status mapping
  * for the throw/catch error pattern used by `apply_route_specs`.
- * Core error codes (5 standard + 8 general application). Domain-specific
+ * Core error codes (5 standard + 10 general application). Domain-specific
  * codes stay in consumers — add by casting `as JsonrpcErrorCode`.
  *
  * `JsonrpcErrorCode` and `JsonrpcErrorObject` types are Zod-inferred
@@ -20,7 +20,7 @@ import { JSONRPC_PARSE_ERROR, JSONRPC_INVALID_REQUEST, JSONRPC_METHOD_NOT_FOUND,
 /** Default message for unknown errors. */
 export const UNKNOWN_ERROR_MESSAGE = 'unknown error';
 /**
- * Standard JSON-RPC error codes (5) plus general application codes (8).
+ * Standard JSON-RPC error codes (5) plus general application codes (10).
  *
  * Extensible — consumers add domain-specific codes to their own objects
  * by casting `as JsonrpcErrorCode`. Application codes use the -32000 to
@@ -55,6 +55,18 @@ export const JSONRPC_ERROR_CODES = {
     rate_limited: -32006,
     service_unavailable: -32007,
     timeout: -32008,
+    /**
+     * Client-side backpressure — an outbound buffer (e.g. `FrontendWebsocketClient`'s
+     * disconnected request queue) refused a new request because it was full.
+     * Distinct from `rate_limited`, which signals a server-side policy.
+     */
+    queue_overflow: -32009,
+    /**
+     * Caller-initiated cancellation (e.g. `AbortSignal` fired). Cooperative,
+     * not a failure — the request did not complete because the caller asked
+     * for it to stop.
+     */
+    request_cancelled: -32010,
 };
 /**
  * Named constructors for `JsonrpcErrorObject` values.
@@ -129,6 +141,16 @@ export const jsonrpc_error_messages = {
         message,
         data,
     }),
+    queue_overflow: (message = 'queue overflow', data) => ({
+        code: JSONRPC_ERROR_CODES.queue_overflow,
+        message,
+        data,
+    }),
+    request_cancelled: (message = 'request cancelled', data) => ({
+        code: JSONRPC_ERROR_CODES.request_cancelled,
+        message,
+        data,
+    }),
 };
 /**
  * Error class carrying a JSON-RPC error code — thrown by handlers,
@@ -168,6 +190,8 @@ export const jsonrpc_errors = {
     rate_limited: create_error_thrower(jsonrpc_error_messages.rate_limited),
     service_unavailable: create_error_thrower(jsonrpc_error_messages.service_unavailable),
     timeout: create_error_thrower(jsonrpc_error_messages.timeout),
+    queue_overflow: create_error_thrower(jsonrpc_error_messages.queue_overflow),
+    request_cancelled: create_error_thrower(jsonrpc_error_messages.request_cancelled),
 };
 // --- HTTP status mapping ---
 /**
@@ -187,9 +211,13 @@ export const JSONRPC_ERROR_CODE_TO_HTTP_STATUS = {
     [-32003]: 404, // not_found
     [-32004]: 409, // conflict
     [-32005]: 422, // validation_error
+    // queue_overflow shares 429 with rate_limited — listed first so reverse
+    // map wins with rate_limited (server-side) rather than client-side overflow.
+    [-32009]: 429, // queue_overflow (client-side backpressure)
     [-32006]: 429, // rate_limited
     [-32007]: 503, // service_unavailable
     [-32008]: 504, // timeout
+    [-32010]: 499, // request_cancelled (nginx "client closed request")
 };
 /**
  * Maps HTTP status codes to JSON-RPC error codes (reverse mapping).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.27.0",
+  "version": "0.29.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -45,9 +45,9 @@
     "@fuzdev/blake3_wasm": "^0.1.0",
     "@fuzdev/fuz_code": "^0.45.1",
     "@fuzdev/fuz_css": "^0.58.0",
-    "@fuzdev/fuz_ui": "^0.191.2",
-    "@fuzdev/fuz_util": "^0.56.0",
-    "@fuzdev/gro": "^0.197.3",
+    "@fuzdev/fuz_ui": "^0.191.4",
+    "@fuzdev/fuz_util": "^0.57.0",
+    "@fuzdev/gro": "^0.198.0",
     "@jridgewell/trace-mapping": "^0.3.31",
     "@node-rs/argon2": "^2.0.2",
     "@ryanatkn/eslint-config": "^0.11.0",