@makaio/framework 1.0.0-dev-1789178369476 → 1.0.0-dev-1789234461336

package/dist/{namespace-C_tttgJ8.d.mts → namespace-DlOQmhgX.d.mts}

@@ -585,8 +585,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -611,8 +611,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -967,8 +967,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -993,8 +993,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -1339,8 +1339,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -1365,8 +1365,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -1719,8 +1719,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -1745,8 +1745,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -2087,8 +2087,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -2113,8 +2113,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -2469,8 +2469,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -2495,8 +2495,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -2841,8 +2841,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -2867,8 +2867,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -3221,8 +3221,8 @@ declare const SessionEventStorageNamespace$1: {
           type: _$zod.ZodLiteral<"locality.degraded">;
           payload: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"degrade">;
             reason: _$zod.ZodEnum<{
@@ -3247,8 +3247,8 @@ declare const SessionEventStorageNamespace$1: {
             turnId: _$zod.ZodOptional<_$zod.ZodString>;
           }, _$zod_v4_core0.$strip>, _$zod.ZodObject<{
             intent: _$zod.ZodEnum<{
-              resume: "resume";
               fork: "fork";
+              resume: "resume";
             }>;
             verdictKind: _$zod.ZodLiteral<"foreign">;
             foreignMachineId: _$zod.ZodString;
@@ -3537,14 +3537,14 @@ declare const SessionEventStorageNamespace$1: {
       timestamp: number;
       type: "locality.degraded";
       payload: {
-        intent: "resume" | "fork";
+        intent: "fork" | "resume";
         verdictKind: "degrade";
         reason: "adapter-unsupported" | "adapter-mismatch" | "no-adapter-session" | "missing-machine-id" | "machine-mismatch" | "cwd-mismatch" | "transforms-present" | "compression-present" | "connector-swap" | "mid-history-unsupported" | "hybrid-imported-orchestrated" | "native-attempt-failed" | "agent-already-started" | "fork-point-unresolvable" | "adapter-session-moved";
         agentId?: string | undefined;
         adapterId?: string | undefined;
         turnId?: string | undefined;
       } | {
-        intent: "resume" | "fork";
+        intent: "fork" | "resume";
         verdictKind: "foreign";
         foreignMachineId: string;
         agentId?: string | undefined;

package/dist/{namespace-CPGTaFqO.d.mts → namespace-Phxf0Lep.d.mts}

@@ -47,8 +47,8 @@ declare const AdapterRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"a
   teardownCompleted: _$zod.ZodObject<{
     evidence: _$zod.ZodEnum<{
       unknown: "unknown";
-      closed: "closed";
       exited: "exited";
+      closed: "closed";
       released: "released";
       detached: "detached";
     }>;
@@ -100,8 +100,8 @@ declare const AdapterRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core
   teardownCompleted: _$zod.ZodObject<{
     evidence: _$zod.ZodEnum<{
       unknown: "unknown";
-      closed: "closed";
       exited: "exited";
+      closed: "closed";
       released: "released";
       detached: "detached";
     }>;

package/dist/{namespace-LSHmxtMn.d.mts → namespace-uCaKZm89.d.mts}

@@ -335,8 +335,8 @@ declare const MessageStorageNamespace$1: {
             isError: _$zod.ZodOptional<_$zod.ZodBoolean>;
           }, _$zod_v4_core0.$strip>], "type">>;
           agentId: _$zod.ZodOptional<_$zod.ZodString>;
-          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           turnId: _$zod.ZodNullable<_$zod.ZodString>;
+          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           timestamp: _$zod.ZodNumber;
           contentText: _$zod.ZodString;
           adapterMessageId: _$zod.ZodOptional<_$zod.ZodString>;
@@ -1120,8 +1120,8 @@ declare const MessageStorageNamespace$1: {
             isError: _$zod.ZodOptional<_$zod.ZodBoolean>;
           }, _$zod_v4_core0.$strip>], "type">>;
           agentId: _$zod.ZodOptional<_$zod.ZodString>;
-          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           turnId: _$zod.ZodNullable<_$zod.ZodString>;
+          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           timestamp: _$zod.ZodNumber;
           contentText: _$zod.ZodString;
           adapterMessageId: _$zod.ZodOptional<_$zod.ZodString>;
@@ -2030,10 +2030,10 @@ declare const MessageStorageNamespace$1: {
     })[];
     messageId: string;
     agentId: never;
-    adapterSessionId: never;
     turnId: string | null;
-    limit: never;
+    adapterSessionId: never;
     timestamp: number;
+    limit: never;
     query: string;
     contentText: string;
     adapterMessageId: string;

package/dist/node/transports/index.d.mts

@@ -358,15 +358,27 @@ interface HmacIdentitySecretRegistrationOptions {
    */
   readonly claims?: Readonly<Record<string, unknown>>;
   /**
-   * Optional subject restriction list for this identity.
+   * Optional subjects this identity may use for requests and events.
    *
-   * When provided, the server message handler rejects any inbound request,
-   * event, or broadcast whose full subject (`namespace.subject`) is not in
-   * this list. Identities without this field are unrestricted.
+   * If either directional subject option is provided, an omitted direction is
+   * denied by default. Identities without both fields are unrestricted.
+   */
+  readonly allowedMessageSubjects?: readonly string[];
+  /**
+   * Optional subjects this identity may advertise as subscriptions.
+   *
+   * If either directional subject option is provided, an omitted direction is
+   * denied by default. Identities without both fields are unrestricted.
+   */
+  readonly allowedSubscriptionSubjects?: readonly string[];
+  /**
+   * Trusted payload filters imposed on every matching outbound delivery.
    *
-   * Exact string match only; no wildcard support.
+   * Keys must be exact full subjects, never wildcard patterns. These filters
+   * are live server metadata, never cached in peer subscription state. Both
+   * the current policy and any peer-advertised filter must match.
    */
-  readonly allowedSubjects?: readonly string[];
+  readonly requiredSubscriptionFilters?: Readonly<Record<string, PayloadFilter>>;
 }
 /**
  * Register an HMAC secret for a transport identity.
@@ -434,14 +446,23 @@ declare function resolveHmacIdentitySecret(identityId: string): string | null;
  */
 declare function resolveHmacIdentityPeer(identityId: string): TransportPeerContext | null;
 /**
- * Resolve the subject restriction set for an identity claim.
+ * Resolve the message subject restriction set for an identity claim.
  *
- * Returns the allowed subjects set when the identity has a subject
+ * Returns the allowed message subjects set when the identity has a subject
  * restriction, or `null` when the identity is unrestricted or unknown.
  * @param identityId - Claimed transport identity.
- * @returns Allowed subjects set, or null when unrestricted/unknown.
+ * @returns Allowed message subjects set, or null when unrestricted/unknown.
+ */
+declare function resolveHmacIdentityAllowedMessageSubjects(identityId: string): ReadonlySet<string> | null;
+/**
+ * Resolve the subscription subject restriction set for an identity claim.
+ *
+ * Returns the allowed subscription subjects set when the identity has a
+ * subject restriction, or `null` when the identity is unrestricted or unknown.
+ * @param identityId - Claimed transport identity.
+ * @returns Allowed subscription subjects set, or null when unrestricted/unknown.
  */
-declare function resolveHmacIdentityAllowedSubjects(identityId: string): ReadonlySet<string> | null;
+declare function resolveHmacIdentityAllowedSubscriptionSubjects(identityId: string): ReadonlySet<string> | null;
 /**
  * Add exact subjects to an existing restricted HMAC identity without rotating
  * its secret or replacing its peer metadata.
@@ -2132,4 +2153,4 @@ declare module '@makaio/framework/bus' {
   }
 }
 //#endregion
-export { type ClientTransportCodec, DispatchingAuth, E2EAuth, E2ERelayAuth, type E2ERelayAuthOptions, HmacAuth, type HmacIdentitySecretRegistrationOptions, type HmacIdentitySecretRotationOptions, type RelayControlBusMessage, type RelayControlEnvelopeMessage, type RelayControlHelpers, type RelayControlRegistry, ServerTransport, type TransportAuth, WebSocketClientTransport, type WebSocketClientTransportHeartbeatOptions, type WebSocketClientTransportOptions, type WebSocketClientTransportReconnectOptions, type WebSocketCloseEvent, WebSocketConnectionError, type WebSocketConnectionErrorCode, type WebSocketLike, type WebSocketServerLike, captureHmacIdentitySecretCleanup, clearHmacIdentitySecretsForTesting, createE2EClientTransport, createE2ERelayClientTransport, createE2ERelayCodec, createRelayControlHelpers, createRelayControlRegistry, createWebSocketCloseEvent, createWebSocketTransport, index_d_exports as crypto, extractSocketErrorMessage, registerHmacIdentitySecret, resolveHmacIdentityAllowedSubjects, resolveHmacIdentityPeer, resolveHmacIdentitySecret, rotateHmacIdentitySecret };
+export { type ClientTransportCodec, DispatchingAuth, E2EAuth, E2ERelayAuth, type E2ERelayAuthOptions, HmacAuth, type HmacIdentitySecretRegistrationOptions, type HmacIdentitySecretRotationOptions, type RelayControlBusMessage, type RelayControlEnvelopeMessage, type RelayControlHelpers, type RelayControlRegistry, ServerTransport, type TransportAuth, WebSocketClientTransport, type WebSocketClientTransportHeartbeatOptions, type WebSocketClientTransportOptions, type WebSocketClientTransportReconnectOptions, type WebSocketCloseEvent, WebSocketConnectionError, type WebSocketConnectionErrorCode, type WebSocketLike, type WebSocketServerLike, captureHmacIdentitySecretCleanup, clearHmacIdentitySecretsForTesting, createE2EClientTransport, createE2ERelayClientTransport, createE2ERelayCodec, createRelayControlHelpers, createRelayControlRegistry, createWebSocketCloseEvent, createWebSocketTransport, index_d_exports as crypto, extractSocketErrorMessage, registerHmacIdentitySecret, resolveHmacIdentityAllowedMessageSubjects, resolveHmacIdentityAllowedSubscriptionSubjects, resolveHmacIdentityPeer, resolveHmacIdentitySecret, rotateHmacIdentitySecret };