@owlmeans/client-planning 0.1.18-rc.3 → 0.1.18-rc.30

package/README.md

@@ -1,15 +1,15 @@
 # @owlmeans/client-planning
 
 The client half of OwlMeans planning: a `PlanningFacade` over the protocol tree a server mounted
-with [`@owlmeans/server-planning`](../server-planning), an optional state mirror of cards, links and
-commits, and a commit wait that subscribes first and then long-polls. It is React-free, so the same
+with [`@owlmeans/server-planning`](../server-planning), optional state mirrors of cards, links,
+commits, assignees, teams, comments and mentions, and a commit wait that subscribes first and then long-polls. It is React-free, so the same
 code runs in a browser app and in a Node client. Use `@owlmeans/server-planning` instead wherever the
 planning service runs in-process.
 
 ## Installation
 
 ```bash
-bun add @owlmeans/client-planning@^0.1.18-rc.3
+bun add @owlmeans/client-planning@^0.1.18-rc.29
 ```
 
 ## Concepts
@@ -17,14 +17,46 @@ bun add @owlmeans/client-planning@^0.1.18-rc.3
 - **Remote facade** — the same `PlanningFacade` interface the server answers; every method is one
   entrypoint call, and `modelOf(record, facade)` models behave identically on both sides.
 - **One id space** — projects, cards and specifications share ONE card store; a list reaches it
-  through `syncCards(store, items, where)`, never `replace()`.
+  through `syncHelper.syncCards(store, items, where)`, never `replace()`.
 - **Commit** — `execute()` returns a receipt for a pending transition; `receipt.committed()` /
   `commits.wait()` resolve with the folded card, or throw `CommitTimeout` / `CommitFailed`.
 - **Socket seam** — the commit socket is opened by an injected `PlanningSocketOpener`; without one
   the client long-polls.
-- **`head > seq`** — a card with a transition allocated and not yet folded; `applyReceipt` marks it
+- **`head > seq`** — a card with a transition allocated and not yet folded; the mirror's `applyReceipt` marks it
   the moment the server answers.
 
+## Forms under a strict Content Security Policy
+
+Use the exact resolved card or assignee type's field schema:
+
+```typescript
+import { makePlanningFieldValidator } from '@owlmeans/client-planning'
+
+const form = makePlanningFieldValidator(resolvedType.fields)
+const checked = form.validateFields(fields)
+if (checked.valid) {
+  // Submit this same fields object through the stock planning facade.
+}
+```
+
+The runtime interpreter supports dynamic organization and project definitions without `eval` or
+`new Function`. It preserves the schema and payload, nested objects, required fields, enum/const,
+dates, references, compositions and AJV nullable semantics; string formats use native
+`ajv-formats` full-mode predicates. Errors contain field `path`, `keyword`, `schemaPath` and a
+bounded message without submitted values. The server's authoritative AJV validates every write.
+
+The schema contract is Draft 7 plus `$defs` and `nullable`, with native AJV reference-sibling
+semantics. References must resolve within the supplied schema. Malformed schemas, missing
+references, same-instance reference cycles, other drafts/custom validation keywords, unknown or
+numeric formats, format-limit extensions and `multipleOf` throw `SchemaInvalid` at preparation.
+The interpreter's floating tolerance and native AJV's multiple semantics differ, so that keyword
+is explicitly refused. JSON fields cannot contain dot/dollar keys or non-JSON values. Standard
+annotations and `x-` metadata remain annotations. At most 64 validation errors are returned.
+
+Surface preparation errors and keep save disabled. Do not remove constraints, choose another
+schema or relax CSP. Registry `validator` / `assigneeValidator` compile with native AJV and need
+code generation; browser forms under strict CSP use this API instead.
+
 ## Usage
 
 Wire the client into a context with the server's own tree:
@@ -36,9 +68,14 @@ import { appendPlanningClient, appendPlanningStores } from '@owlmeans/client-pla
 const planningProtocols = makePlanningProtocols({
   base: { alias: 'app:api:planning', path: '/planning', service: API },
   guards: DEFAULT_GUARD,
+  resources: true,
+  definitions: true,
 })
 
-appendPlanningClient(context, { protocols: planningProtocols, poll: 20 })
+appendPlanningClient(context, {
+  protocols: planningProtocols, poll: 20,
+  scopeKey: () => `${currentEntitySlug}:${currentSessionId}`,
+})
 appendPlanningStores(context)
 ```
 
@@ -77,18 +114,61 @@ Give a browser its commit socket through the host's own opener:
 ```typescript
 appendPlanningClient(context, {
   protocols: planningProtocols,
-  socket: async (protocol, request) => await ws(context.entrypoint(protocol), request),
+  socket: async (protocol, request) => await socketClientHelper.ws(context.entrypoint(protocol), request),
+})
+```
+
+## Auxiliary resources and session lifecycle
+
+The remote facade supports the same `assignees`, `teams`, `comments` and `mentions` methods as
+the server, including compare-and-set writes, canonical team membership/project attachment,
+effective project assignees and mention-cache rebuilding. `definitions` supports assignee types
+when the server mounts writable schemas. Relationships include endpoint resource kinds and named
+inverse views; models resolve schemas through their nearest primary project.
+
+`appendPlanningStores` registers four auxiliary mirrors beside cards, links and commits. Reads
+and writes through the facade update those mirrors without replacing newer versions. A resource
+feed refreshes the requested subsets through the stock API:
+
+```ts
+import { makePlanningResourceFeed } from '@owlmeans/client-planning'
+
+const resources = makePlanningResourceFeed(context, {
+  assignees: { retired: false, size: 0 }, teams: { size: 0 },
+  comments: { card: cardId, size: 0 }, mentions: { card: cardId, size: 0 },
+  refresh: 5_000,
 })
+await resources.ready
+// Read context.planningStores().assignees, teams, comments and mentions.
+await resources.stop()
 ```
 
+`scopeKey` identifies the current organization slug and authenticated session. A changed key
+cancels old requests and feeds, drains local mutations and clears mirrors; capture a new facade
+and feed for the new session. `await context.planning().close()` releases feeds, subscriptions,
+commit waits and sockets, including carriers that open late. Stopped requests cannot repopulate
+cleared mirrors, even when a transport ignores cancellation.
+
+The server derives authorization scope from credentials. Wire records omit native organization
+`entityId`; the client hydrates empty advisory metadata for the shared record shape. Never use
+that placeholder to authorize a request, and never send an organization record id on the wire.
+
 ## API
 
 - `appendPlanningClient(context, options)`, `makePlanningClientService(context, options)`
 - `makeRemoteFacade(context, protocols, scope, opts)`, `makeRemoteCommitSource(context, protocols, opts?)`
-- `appendPlanningStores(context, aliases?)`, `planningStoresOf(context)`, `syncCards`, `syncLinks`
-- `applyCommitEvent(stores, event, facade?)`, `applyReceipt(stores, view)`, `applyCards(stores, cards)`
+- `appendPlanningStores(context, aliases?)`
+- `syncHelper` — `.syncCards(store, items, where?, opts?)`, `.syncLinks(store, items, where?, opts?)`
+- `planningMirrorOf(stores)` (`makePlanningMirror`) — `.applyCommitEvent(event, facade?)`,
+  `.applyReceipt(view)`, `.applyCards(cards)`
 - `makePlanningFeed(context, opts?)`
-- `planningOf(context, scope?)`, `planningModelOf(context, card, scope?)`
+- `makePlanningResourceFeed(context, opts?)`, `PlanningResourceFeedOptions`
+- `makePlanningFieldValidator(schema)`, `PlanningFieldValidator`, `PlanningFieldValidation`, `PlanningFieldError`
+- `makePlanningClientLifecycle`, `PlanningClientLifecycle`; service `close()` and `scopeKey`
+- `planningContextOf(context)` (`makePlanningContextHelper`) — `.facade(scope?)`, `.model(card, scope?)`,
+  `.stores()`
+- The former plain functions (`syncCards`, `applyCards`, `planningOf`, …) remain as deprecated
+  delegates.
 - `CARDS`, `LINKS`, `COMMITS`, `DEFAULT_STORE_ALIASES`, `LONG_POLL_GRACE`, `EARLY_POLL_LADDER`, `EARLY_POLL_MS`
 - Types: `PlanningClientOptions`, `PlanningClientService`, `WithPlanningClient`,
   `PlanningSocketOpener`, `RemoteCommitSource`, `RemoteCommitSourceOptions`, `RemoteFacadeOptions`,
@@ -103,6 +183,9 @@ appendPlanningClient(context, {
 - `CommitTimeout` leaves the transition pending — re-wait or re-read, do not re-execute without a `key`.
 - A client refuses `store()`, `committed()` and plugins carrying hooks with `PlanningUnsupported`.
 - Mount one feed per screen; every other reader uses the store.
+- Auxiliary updates/removals require `{ version: record.version }`. Their `fields` replace the
+  previous object; card `changes.fields` merge.
+- After a scope/session change, acquire new facades and feeds. Old ones are deliberately stale.
 
 ## Related packages
 
@@ -119,7 +202,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.31
+npx @owlmeans/agent-skills@^0.1.18-rc.53
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/client-planning",
-  "version": "0.1.18-rc.3",
-  "generatedAt": "2026-09-21T21:54:22.962Z",
+  "version": "0.1.18-rc.30",
+  "generatedAt": "2026-10-10T00:34:44.458Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/client-planning/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: client-planning
-description: How to use @owlmeans/client-planning — appendPlanningClient for the remote planning facade, appendPlanningStores and applyCommitEvent for the state mirror, makePlanningFeed, commits.wait (subscribe then long-poll), and the models that are the same objects the server uses. Auto-invoked when reading planning data in a browser or a Node client, mounting the commit feed, or wiring optimistic transitions.
+description: How to use @owlmeans/client-planning — appendPlanningClient for the remote planning facade, appendPlanningStores and planningMirrorOf for the state mirror, makePlanningFeed, commits.wait (subscribe then long-poll), and the models that are the same objects the server uses. Auto-invoked when reading planning data in a browser or a Node client, mounting the commit feed, or wiring optimistic transitions.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/client-planning
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-planning": "^0.1.18-rc.3"` in `dependencies`
+**Install:** `"@owlmeans/client-planning": "^0.1.18-rc.30"` in `dependencies`
 
 The client half of OwlMeans planning. It answers the `PlanningFacade` interface of
 `@owlmeans/planning` over the protocol tree a server mounted with `@owlmeans/server-planning`, keeps
@@ -24,13 +24,15 @@ CLI). React hooks over the mirror are `useStoreModel` / `useStoreList` from `@ow
 | `makePlanningClientService(context, options)` | The service itself, for a host that registers it on its own |
 | `makeRemoteFacade(context, protocols, scope, opts)` | One facade — every method is one entrypoint call |
 | `makeRemoteCommitSource(context, protocols, opts?)` | `status` / `subscribe` / `wait` over `commit.get` and `commit.events` |
-| `appendPlanningStores(context, aliases?)` / `planningStoresOf(context)` | The state mirror, and a lookup that answers `null` without one |
-| `syncCards(store, items, where?, opts?)` / `syncLinks(...)` | Make the mirror agree with a list WITHIN a scope |
-| `applyCommitEvent(stores, event, facade?)` / `applyReceipt(stores, view)` / `applyCards(stores, cards)` | The folds |
+| `makeRemoteDefinitions(context, protocols, opts?)` | Data-defined types and flows over a tree declared with `definitions: true` |
+| `appendPlanningStores(context, aliases?)` / `planningContextOf(context).stores()` | The state mirror, and a lookup that answers `null` without one |
+| `syncHelper.syncCards(store, items, where?, opts?)` / `syncHelper.syncLinks(...)` | Make the mirror agree with a list WITHIN a scope |
+| `planningMirrorOf(stores).applyCommitEvent(event, facade?)` / `.applyReceipt(view)` / `.applyCards(cards)` | The folds |
 | `makePlanningFeed(context, opts?)` | Subscribe, seed, fold, refresh — `{ connected, seeded, error, ready, refresh, stop }` |
-| `planningOf(context, scope?)` / `planningModelOf(context, card, scope?)` | The facade / a model with the schemas loaded |
+| `planningContextOf(context).facade(scope?)` / `.model(card, scope?)` | The facade / a model with the schemas loaded |
+| `makePlanningFieldValidator(schema)` | CSP-safe validation of an exact served field schema; `{ validateFields }` |
 | `CARDS`, `LINKS`, `COMMITS` | Store aliases (`planning-card-state`, `planning-link-state`, `planning-commit-state`) |
-| Types | `PlanningClientOptions`, `PlanningClientService`, `WithPlanningClient`, `PlanningSocketOpener`, `RemoteCommitSource`, `PlanningStores`, `PlanningStoreAliases`, `WithPlanningStores`, `PlanningCommitRecord`, `PlanningFeed`, `PlanningFeedOptions`, `PlanningFeedState`, `SyncOptions` |
+| Types | `PlanningClientOptions`, `PlanningClientService`, `WithPlanningClient`, `PlanningSocketOpener`, `RemoteCommitSource`, `RemoteDefinitions`, `RemoteDefinitionsOptions`, `PlanningStores`, `PlanningStoreAliases`, `WithPlanningStores`, `PlanningCommitRecord`, `PlanningFeed`, `PlanningFeedOptions`, `PlanningFeedState`, `SyncOptions`, `PlanningContextHelper`, `PlanningMirror`, `SyncHelper` |
 
 ## Wiring
 
@@ -59,8 +61,8 @@ appendPlanningStores(context)        // a browser mirror; a Node client usually
 - `bind: false` when the host already bound the tree.
 - The service answers under `PLANNING_SERVICE`, the alias the server's service uses, so
   `context.planning().for(scope)` is the same call in a handler and in a screen. The scope is
-  **advisory**: the server takes the entity and the actor from the credential. The execution's own
-  `actor` is never sent.
+  **advisory** — it changes nothing the server decides: the server takes the entity and the actor
+  from the credential. The execution's own `actor` is never sent.
 - A client runs no middleware and folds nothing: `store()`, `committed()` and a plugin carrying
   `before`/`after`/`store`/`mintCode` answer `PlanningUnsupported`. `use()` accepts a schemas-only
   plugin, layered over the server's bundle.
@@ -75,20 +77,78 @@ there is swallowed — a browser that is not signed in yet cannot read it, and a
 fail or wait over it. `model()` and `service.loadSchemas()` load it on first use regardless, and a
 failed load is retried by the next caller. `schemas: false` skips the background load.
 
+### Data-defined types and flows
+
+A tree declared with `definitions: true` (the server's store holds data-defined schemas) gives the
+service and every facade `definitions`: `registry(project?)` / `bundle(project?)` read
+`schema.list?project=` and are cached per project; `putType`/`putFlow` (compare-and-set on the
+declaration's `version`), `define`, `seed` and `retire` go through `schema.define` and drop the
+whole cache — an organization-wide write reaches every project's layer — and make the next
+`model()` reload the service's own bundle. `records` is the server's alone (`PlanningUnsupported`).
+`model(card)` of a card resolves its type in its project's layer (a project's own id, a card's
+nearest primary project ancestor); a specification's type is always code's. A tree without `definitions` has none of this.
+
+## Browser field validation under CSP
+
+Bind `makePlanningFieldValidator(type.fields)` to the exact definition returned by the resolved
+organization or project bundle. Its `validateFields(fields)` returns `{ valid, errors }`; errors
+carry decoded `path`, `keyword`, `schemaPath` and a bounded value-free `message`. Construct one JSON
+fields object, validate it and send that same object. No coercion, defaults or property removal
+occurs, and the schema is left unchanged. Preserve nested money objects and calendar date strings.
+The native server validates every write again.
+
+The validator interprets schemas with `@cfworker/json-schema`, with no `eval`, `new Function` or
+network reference loading. Do not call `makeSchemaRegistry(...).validator()` or
+`.assigneeValidator()` in a browser with strict `script-src`: those remain native AJV compilers.
+Static AJV standalone compilation is suitable only when the schema cannot change after building;
+organization and project definitions require the runtime interpreter.
+
+The supported contract is Draft 7's object/array/scalar, required, enum/const, ranges, string
+length/pattern, dependencies, boolean, composition and conditional keywords; `$defs`, local/nested
+`$id` references and AJV's `nullable` are also supported. `$ref` sibling constraints are enforced as
+by native planning AJV. String formats use the same `ajv-formats` full-mode predicates, including
+real calendar dates and timezone-aware times. `nullable` adds null to the declared type while
+leaving enum and const constraints intact. All references must resolve inside the supplied field
+schema; productive recursive schemas are supported, same-instance reference cycles are refused.
+Plain JSON values and field names without dot or dollar characters are required.
+
+Preparation throws `SchemaInvalid` for malformed schemas, unresolved references, unsupported
+drafts/keywords/formats, numeric formats, `formatMinimum`/`formatMaximum` extensions and
+`multipleOf`. The latter is refused because the interpreter's epsilon and native AJV's quotient
+semantics disagree for fractional and very large numbers. Standard annotation keywords and `x-`
+annotations do not add validation. Never discard a refused constraint, invent a substitute schema,
+enable `unsafe-eval` or proceed with a ready form after preparation fails. Show the error and retain
+disabled save controls. Validation reports at most 64 errors, with paths bounded to 512 characters.
+
+## Mounting in a target
+
+The web half of the target mount (`planning` → Mounting in a target).
+
+- `appendPlanningClient(context, { protocols, bind: false, schemas: false })` — the target binds
+  its whole api tree itself, and a signed-out visitor may read nothing, so the bundle loads on
+  first use — plus `appendPlanningStores(context)`. No `socket`: the target serves no commit socket,
+  so `commits.wait` long-polls.
+- Screens read the mirror with `useStoreList` / `useStoreModel` (`@owlmeans/client`), never a
+  fetched array kept in component state; lists reach the store through `syncHelper.syncCards` or
+  `makePlanningFeed` (with `refresh`), NEVER `replace()` — the one card store holds every kind.
+- Every write is `facade.execute(...)` with a `key` (a retried click or a double submit answers
+  the first receipt) and `{ wait: true }` where the screen shows the result.
+- Never call a route with an empty id; a picker offers no archived parent (`intrinsic: closed`).
+
 ## Reading
 
 ```typescript
 const planning = context.planning().for()
 
-const stories = await planning.cards.list({ parent: projectId, type: STORY, sort: ['order'], size: 0 })
-const board = await planning.cards.summary([projectId])
-const brief = await planning.specifications.current(projectId, 'specification')
-const story = await planning.model(storyId)
-story.available().map(rule => rule.name)
+const tools = await planning.cards.list({ parent: shedId, type: 'shed:tool', sort: ['order'], size: 0 })
+const board = await planning.cards.summary([shedId])
+const rules = await planning.specifications.current(shedId, 'house-rules')
+const drill = await planning.model(drillId)
+drill.available().map(rule => rule.name)
 ```
 
 - The facade takes the rich `WorkcardQuery`; it encodes the scalar wire shape itself
-  (`encodeWorkcardQuery` and its twins). Never pass a wire shape to the facade.
+  (`wireHelper.encodeWorkcardQuery` and its twins). Never pass a wire shape to the facade.
 - `cards.load(id)` answers `null` for a missing card — and for another entity's card, which the
   server deliberately reports the same way.
 - `cards.count(query)` is a one-row list read for its `total`; the tree declares no count route.
@@ -102,13 +162,14 @@ story.available().map(rule => rule.name)
 share an id space on the server, so they share one store here: a store per kind lets a card list
 that reloads drop the projects beside it.
 
-That is also why a list reaches the store through **`syncCards(store, items, where)`, never
-`replace()`**: every card given is written, every card matching `where` that the list does not name
-is dropped, and everything outside `where` is left alone. An unchanged card is not rewritten, so a
+That is also why a list reaches the store through **`syncHelper.syncCards(store, items, where)`,
+never `replace()`**: every card given is written, every card matching `where` that the list does not
+name is dropped, and everything outside `where` is left alone. An unchanged card is not rewritten, so a
 periodic re-seed wakes no subscriber. `opts.keep` protects ids a commit wrote while the list was in
 flight.
 
-The fold rules, shared by `syncCards`, `applyCards`, `applyCommitEvent` and `commits.wait`:
+The fold rules, shared by `syncHelper.syncCards`, the mirror's `applyCards` and `applyCommitEvent`, and
+`commits.wait`:
 
 - an OLDER `seq` never overwrites a newer record — frames and list answers race;
 - a committed `delete` removes the row and every link touching it; a project's delete also drops
@@ -124,8 +185,8 @@ The fold rules, shared by `syncCards`, `applyCards`, `applyCommitEvent` and `com
 
 ```typescript
 const feed = makePlanningFeed(context, {
-  query: { parent: projectId, type: STORY },
-  filter: { project: projectId },
+  query: { parent: shedId, type: 'shed:tool' },
+  filter: { project: shedId },
   refresh: 15_000,
   onChange: state => setState(state),
 })
@@ -135,11 +196,11 @@ await feed.stop()         // stops folding; the shared socket stays open
 ```
 
 1. Subscribes to commits FIRST (the socket, when an opener exists).
-2. Seeds: `cards.list` (unpaged unless the query pages) → `syncCards` over `where`
-   (`criteriaOf(query)` by default). A PAGED seed only writes — a page cannot say what does not
-   exist.
-3. Folds every frame with `applyCommitEvent`, and re-seeds every `refresh` ms — the authoritative
-   backstop to a socket that can drop frames.
+2. Seeds: `cards.list` (unpaged unless the query pages) → `syncHelper.syncCards` over `where`
+   (`queryHelper.criteriaOf(query)` by default). A PAGED seed only writes — a page cannot say what
+   does not exist.
+3. Folds every frame with `planningMirrorOf(stores).applyCommitEvent`, and re-seeds every `refresh`
+   ms — the authoritative backstop to a socket that can drop frames.
 
 `connected` reports whether a socket was open when the feed subscribed; `seeded` tells "nothing
 there" from "not loaded yet". A React hook wraps the feed in an effect and stops it on unmount.
@@ -181,22 +242,18 @@ A Node client passes no opener and relies on the long poll.
 
 ## Optimistic writes and `head > seq`
 
-`seq` is the last transition folded into a card, `head` the highest allocated. `applyReceipt`
-(run by `execute` whenever stores are registered) raises the stored card's `head` to the new
-transition's `seq`, so `model.pending()` is true before any frame arrives; the commit's fold brings
-`seq` up to it. The mirror only ever grows `head`, so a list fetched before the append does not
-clear the marker. A model's writes default `expectSeq` to `record.head ?? record.seq`; a stale model
-gets `WorkcardConflict` — reload and retry.
+`seq` is the last transition folded into a card, `head` the highest allocated. The mirror's
+`applyReceipt` (run by `execute` whenever stores are registered) raises the stored card's `head` to
+the new transition's `seq`, so `model.pending()` is true before any frame arrives; the commit's fold
+brings `seq` up to it. The mirror only ever grows `head`, so a list fetched before the append does not
+clear the marker. A model's `expectSeq` default and its `WorkcardConflict` are `planning` → Models.
 
 ## Gotchas
 
 - Mount a feed once per screen; read the store everywhere else.
-- Do not `replace()` the card store — it holds every kind. Use `syncCards` with a `where`.
 - A refusal crosses the hop as its class (`IllegalTransition`, `WorkcardConflict`,
   `FieldsInvalid`, a plugin's own class) — branch on `instanceof`, never on message text.
 - `CommitTimeout` is not a failure of the transition; re-wait or re-read the card.
-- The scope passed to `for()` changes nothing the server decides; it exists so code written against
-  `PlanningFacade` reads the same on both sides.
 
 ## Depends On
 
@@ -204,9 +261,64 @@ gets `WorkcardConflict` — reload and retry.
 - `@owlmeans/client-entrypoint` — `bindAll`, the typed `call()`
 - `@owlmeans/state` — the mirror; `@owlmeans/socket` — `Connection`
 
+## Auxiliary mirrors and authenticated scope lifecycle
+
+With `resources: true` in the shared protocol tree, every remote facade exposes the complete
+assignee/team/comment/mention API, including versioned writes, team membership and project
+attachment. `appendPlanningStores` registers separate stock typed mirrors for all four resources.
+`makePlanningResourceFeed` seeds and polls selected resource queries; use it with the stock stores
+and `useStoreList` / `useStoreModel`. Auxiliary writes update the mirror only after success.
+Comments use trusted server authors; mentions are read-only derived cache commands.
+
+Supply `PlanningClientOptions.scopeKey` from authenticated organization entity slug, profile/user
+id, session id and authorization revision; return undefined when signed out. Before switching
+organization or signing out, **await** `service.close()` before adopting the credential. It cancels
+requests and commit waits, invalidates receipts (including already-settled receipts), stops every
+registered feed, removes socket subscriptions, closes the carrier and rejects late socket openers.
+A stale operation answers `client:scope-changed`; cancellation never rolls back an accepted server
+write. A new subscription opens a fresh carrier after close.
+
+Close drains admitted **local** mirror writes before clearing every stock store and schema cache.
+New calls during an explicit close are refused, including hosts without `scopeKey`. Concurrent
+closes share the boundary. If clearing fails, close rejects and fresh work stays blocked; retain
+the old credential and retry close explicitly. An observed identity change also cancels old work
+and queues clearing before the new identity's mirror writes. Reload schemas and create fresh feeds
+after credential adoption. Feed query scope alone is insufficient for this lifecycle.
+
+The service's `lifecycle` coordinates stock facades, receipts, feeds and schema writes. A custom
+mirror integration captures an operation with `lifecycle.run`, performs remote reads through
+`operation.wait` with `operation.signal`, then uses `lifecycle.mutate(operation, write)` for local
+writes; never hold or nest that queue over a request, socket opener or another queued mutation.
+`planningMirrorOf(stores)` accepts `{ lifecycle, operation }` as its optional last argument and
+fetches missing frame records/links before entering the queue. Direct mirror/sync helpers without
+that option are local primitives: their caller owns isolation and cleanup.
+
+Planning protocols return `PlanningReply<T>` without storage organization identifiers. Stock
+facades hydrate records, receipts, schema scopes and socket frames with `entityId: ''` only to
+preserve the shared facade shape. That value is an advisory placeholder, never an organization
+identity or a credential. Use `scopeKey` and the authenticated organization entity slug for
+identity changes and access isolation; native server records keep their verified stable scope.
+
+Resource feed reconciliation snapshots mirror versions before requesting a list. Only unchanged
+snapshot rows absent from that response are removed, so a new local write or a newer version
+survives an older in-flight poll. Stopped feeds cannot publish. Track custom feeds through
+`registerFeed` when their lifecycle must end with the planning service. Card feeds use the same
+identity fence and stop registration; component cleanup awaits `stop()` when it must observe a
+completed boundary. Stop cancels unresolved seeds and drains admitted local changes without waiting
+for the network; neither late callbacks nor authoritative deletion passes may publish afterward.
+A schema write from an old generation cannot invalidate a newer generation's cached registry.
+
+
 ## Related
 
 - `planning` — records, flows, the fold, the models
 - `server-planning` — the handlers this addresses, the executor, the commit hub
 - `client-job` — the same seed-then-fold shape for safe application-job views
-- `state` — `syncCards` is built on its criteria engine and `purge`
+- `state` — `syncHelper.syncCards` is built on its criteria engine and `purge`
+
+## External docs
+
+- https://ajv.js.org/security.html#content-security-policy — runtime AJV requires unsafe-eval; standalone build compilation preserves strict CSP for static schemas.
+- https://www.npmjs.com/package/@cfworker/json-schema/v/4.1.1 — the interpreter supports dynamic schemas without code generation; select an explicit vocabulary and check its known limitations (4.1.1).
+- https://github.com/ajv-validator/ajv-formats#full-and-fast-validation-modes — full-mode predicates validate formats completely and are reusable through the plugin's `get` API (3.0.1).
+- https://ajv.js.org/json-schema.html#nullable-openapi — nullable expands the declared type without adding null to enum or const.

package/build/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,kBAAkB,EAClF,MAAM,YAAY,CAAA;AAEnB;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WACrE,CAAC,WAAW,qBAAqB,KACzC,qBAoFF,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WAChE,CAAC,WAAW,qBAAqB,KACzC,CAAC,GAAG,kBA0BN,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,kBAAkB,EAClF,MAAM,YAAY,CAAA;AAEnB;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WACrE,CAAC,WAAW,qBAAqB,KACzC,qBAoHF,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WAChE,CAAC,WAAW,qBAAqB,KACzC,CAAC,GAAG,kBA0BN,CAAA"}

package/build/client.js

@@ -2,8 +2,10 @@ import { bindAll } from '@owlmeans/client-entrypoint';
 import { createLazyService, MiddlewareStage, MiddlewareType } from '@owlmeans/context';
 import { DEFAULT_PLUGIN_ORDER, makeSchemaRegistry, PLANNING_SERVICE, PlanningUnsupported, } from '@owlmeans/planning';
 import { makeRemoteCommitSource } from './commits.js';
+import { makeRemoteDefinitions } from './definitions.js';
 import { makeRemoteFacade } from './facade.js';
-import { planningStoresOf } from './stores.js';
+import { planningContextOf } from './helper.js';
+import { makePlanningClientLifecycle } from './lifecycle.js';
 /**
  * The client planning service: a remote facade factory under the SAME alias the server registers
  * its service under, so `context.planning().for(scope)` is one call on both sides.
@@ -14,30 +16,51 @@ import { planningStoresOf } from './stores.js';
  * bundle.
  */
 export const makePlanningClientService = (context, options) => {
+    const feeds = new Set();
     const registry = makeSchemaRegistry();
     const plugins = [];
-    const stores = () => planningStoresOf(context);
+    const stores = () => planningContextOf(context).stores();
+    const lifecycle = makePlanningClientLifecycle({ scopeKey: options.scopeKey, clear: async () => {
+            const mirrors = stores();
+            if (mirrors != null)
+                for (const resource of Object.values(mirrors)) {
+                    const rows = await resource.list({}, { size: 0 });
+                    for (const row of rows.items)
+                        await resource.delete(row.id);
+                }
+        } });
+    const scopeKey = lifecycle.key;
     const commits = makeRemoteCommitSource(context, options.protocols, {
-        socket: options.socket, poll: options.poll, timeout: options.timeout, stores,
+        socket: options.socket, poll: options.poll, timeout: options.timeout, stores, lifecycle,
     });
     const layerPlugins = () => plugins.forEach(plugin => {
+        plugin.schemas?.assigneeTypes?.forEach(registry.registerAssigneeType);
         plugin.schemas?.flows?.forEach(registry.registerFlow);
         plugin.schemas?.types?.forEach(registry.registerType);
     });
+    let loadedKey = scopeKey();
     let loaded = false;
     let loading = null;
     const loadSchemas = async (opts) => {
+        const key = scopeKey();
+        if (loadedKey !== key) {
+            loaded = false;
+            loading = null;
+            definitions?.invalidate();
+            loadedKey = key;
+        }
         if (loaded && opts?.force !== true) {
             return registry;
         }
         if (loading == null || opts?.force === true) {
-            const attempt = (async () => {
-                const bundle = await context.entrypoint(options.protocols.schema.list).call({ timeout: options.timeout });
+            const attempt = lifecycle.run(async (operation) => {
+                const bundle = await operation.wait(context.entrypoint(options.protocols.schema.list).call({ timeout: options.timeout, signal: operation.signal }));
+                operation.check();
                 registry.load(bundle);
                 layerPlugins();
                 loaded = true;
                 return registry;
-            })();
+            });
             loading = attempt;
             // A failed load is forgotten, so the next caller asks again instead of inheriting the error.
             attempt.catch(() => {
@@ -48,13 +71,31 @@ export const makePlanningClientService = (context, options) => {
         }
         return await loading;
     };
+    // A write of data-defined schemas moves the organization's bundle too: the next `model()` reloads it.
+    const definitions = options.protocols.schema.define == null
+        ? undefined
+        : makeRemoteDefinitions(context, options.protocols, { lifecycle, timeout: options.timeout, onWrite: () => { loaded = false; loading = null; } });
     const facadeFor = (scope) => makeRemoteFacade(context, options.protocols, { ...options.scope, ...scope }, {
-        commits, schemas: registry, loadSchemas, timeout: options.timeout, stores,
+        commits, schemas: registry, loadSchemas, scopeKey, lifecycle, timeout: options.timeout, stores,
+        ...(definitions != null ? { definitions } : {}),
     });
     let fallback = null;
+    lifecycle.onInvalidate(async () => {
+        const stopping = [...feeds];
+        feeds.clear();
+        loaded = false;
+        loading = null;
+        definitions?.invalidate();
+        registry.load({ version: 1, types: [], flows: [] });
+        layerPlugins();
+        await Promise.all(stopping.map(async (feed) => await feed.stop()));
+    });
     // Lazy, like the server's host: `context.planning()` answers before the context initializes.
     return createLazyService(PLANNING_SERVICE, {
         schemas: registry,
+        lifecycle,
+        scopeKey,
+        registerFeed: feed => { feeds.add(feed); return () => { feeds.delete(feed); }; },
         commits,
         loadSchemas,
         use: plugin => {
@@ -77,7 +118,8 @@ export const makePlanningClientService = (context, options) => {
         committed: async () => {
             throw new PlanningUnsupported('client:committed');
         },
-        close: async () => await commits.close(),
+        close: lifecycle.close,
+        ...(definitions != null ? { definitions } : {}),
     });
 };
 /**

package/build/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEtF,OAAO,EACL,oBAAoB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,GAChF,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAK9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,OAAU,EAAE,OAA8B,EACnB,EAAE;IACzB,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAA;IACrC,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAE9C,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE;QACjE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM;KAC7E,CAAC,CAAA;IAEF,MAAM,YAAY,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACxD,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QACrD,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,OAAO,GAA2C,IAAI,CAAA;IAE1D,MAAM,WAAW,GAAyC,KAAK,EAAC,IAAI,EAAC,EAAE;QACrE,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACnC,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC1B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;gBACzG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACrB,YAAY,EAAE,CAAA;gBACd,MAAM,GAAG,IAAI,CAAA;gBAEb,OAAO,QAAQ,CAAA;YACjB,CAAC,CAAC,EAAE,CAAA;YACJ,OAAO,GAAG,OAAO,CAAA;YACjB,6FAA6F;YAC7F,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;oBACxB,OAAO,GAAG,IAAI,CAAA;gBAChB,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,MAAM,OAAO,CAAA;IACtB,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,KAAkD,EAAkB,EAAE,CACvF,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE;QAC3E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM;KAC1E,CAAC,CAAA;IAEJ,IAAI,QAAQ,GAA0B,IAAI,CAAA;IAE1C,6FAA6F;IAC7F,OAAO,iBAAiB,CAAwB,gBAAgB,EAAE;QAChE,OAAO,EAAE,QAAQ;QAEjB,OAAO;QAEP,WAAW;QAEX,GAAG,EAAE,MAAM,CAAC,EAAE;YACZ,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrG,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAA;YAC/E,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC7B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC,CAAA;YAC3G,YAAY,EAAE,CAAA;QAChB,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC;QAE3B,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,IAAI,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAC/C,CAAC;QAED,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAE7E,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;QAED,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE;KACzC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAU,EAAE,OAA8B,EAClB,EAAE;IAC1B,MAAM,GAAG,GAAG,OAAiC,CAAA;IAE7C,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAsC,CAAC,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAO,OAAO,EAAE,OAAO,CAAC,CAAA;IACjE,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC5B,GAAG,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAwB,gBAAgB,CAAC,CAAA;IAEzE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,GAAG,CAAC,kBAAkB,CAAC;YACrB,IAAI,EAAE,cAAc,CAAC,OAAO;YAC5B,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAA;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;YACH,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEtF,OAAO,EACL,oBAAoB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,GAChF,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAA;AAK5D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,OAAU,EAAE,OAA8B,EACnB,EAAE;IACzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqC,CAAA;IAC1D,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAA;IACrC,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAA;IACxD,MAAM,SAAS,GAAG,2BAA2B,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YAC5F,MAAM,OAAO,GAAG,MAAM,EAAE,CAAA;YACxB,IAAI,OAAO,IAAI,IAAI;gBAAE,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;oBACjD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK;wBAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAG,CAAC,CAAA;gBAC9D,CAAC;QACH,CAAC,EAAE,CAAC,CAAA;IACJ,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAA;IAE9B,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE;QACjE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS;KACxF,CAAC,CAAA;IAEF,MAAM,YAAY,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACxD,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;QACrE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QACrD,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAA;IAC1B,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,OAAO,GAA2C,IAAI,CAAA;IAE1D,MAAM,WAAW,GAAyC,KAAK,EAAC,IAAI,EAAC,EAAE;QACrE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAA;QACtB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,WAAW,EAAE,UAAU,EAAE,CAAC;YAAC,SAAS,GAAG,GAAG,CAAA;QAAC,CAAC;QACrG,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACnC,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAC,SAAS,EAAC,EAAE;gBAC9C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;gBACnJ,SAAS,CAAC,KAAK,EAAE,CAAA;gBACjB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACrB,YAAY,EAAE,CAAA;gBACd,MAAM,GAAG,IAAI,CAAA;gBAEb,OAAO,QAAQ,CAAA;YACjB,CAAC,CAAC,CAAA;YACF,OAAO,GAAG,OAAO,CAAA;YACjB,6FAA6F;YAC7F,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;oBACxB,OAAO,GAAG,IAAI,CAAA;gBAChB,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,MAAM,OAAO,CAAA;IACtB,CAAC,CAAA;IAED,sGAAsG;IACtG,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI;QACzD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,GAAG,IAAI,CAAA,CAAC,CAAC,EAAE,CAAC,CAAA;IAEjJ,MAAM,SAAS,GAAG,CAAC,KAAkD,EAAkB,EAAE,CACvF,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE;QAC3E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM;QAC9F,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAA;IAEJ,IAAI,QAAQ,GAA0B,IAAI,CAAA;IAC1C,SAAS,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAA;QAC3B,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,GAAG,KAAK,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,UAAU,EAAE,CAAA;QACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAAC,YAAY,EAAE,CAAA;QACnE,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,6FAA6F;IAC7F,OAAO,iBAAiB,CAAwB,gBAAgB,EAAE;QAChE,OAAO,EAAE,QAAQ;QACjB,SAAS;QACT,QAAQ;QACR,YAAY,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC,CAAC;QAE9E,OAAO;QAEP,WAAW;QAEX,GAAG,EAAE,MAAM,CAAC,EAAE;YACZ,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrG,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAA;YAC/E,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC7B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC,CAAA;YAC3G,YAAY,EAAE,CAAA;QAChB,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC;QAE3B,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,IAAI,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAC/C,CAAC;QAED,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAE7E,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;QAED,KAAK,EAAE,SAAS,CAAC,KAAK;QAEtB,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAU,EAAE,OAA8B,EAClB,EAAE;IAC1B,MAAM,GAAG,GAAG,OAAiC,CAAA;IAE7C,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAsC,CAAC,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAO,OAAO,EAAE,OAAO,CAAC,CAAA;IACjE,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC5B,GAAG,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAwB,gBAAgB,CAAC,CAAA;IAEzE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,GAAG,CAAC,kBAAkB,CAAC;YACrB,IAAI,EAAE,cAAc,CAAC,OAAO;YAC5B,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAA;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;YACH,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/build/commits.d.ts

@@ -1,17 +1,6 @@
 import type { BasicConfig, BasicContext } from '@owlmeans/context';
-import type { PlanningProtocols } from '@owlmeans/planning';
+import { type PlanningProtocols } from '@owlmeans/planning';
 import type { RemoteCommitSource, RemoteCommitSourceOptions } from './types.js';
-/**
- * The commit source of a remote facade: the `commit.get` long poll and, when the host injects a
- * socket opener, the `commit.events` feed.
- *
- * `wait` SUBSCRIBES FIRST and only then reads the status — a commit landing between a read and a
- * subscription would otherwise be missed until the deadline. It then long-polls in holds of
- * `min(poll, remaining)` seconds, so a client with no socket (a Node connector) still learns of a
- * commit within one round trip of it landing, and a client with one learns from whichever arrives
- * first. The deadline is a {@link CommitTimeout}; the transition stays pending — nothing is undone.
- *
- * ONE socket serves every subscription of the source; releasing a subscription never closes it.
- */
+/** Subscribe before reading, then race the shared socket against bounded HTTP holds. */
 export declare const makeRemoteCommitSource: <C extends BasicConfig, T extends BasicContext<C>>(context: T, protocols: PlanningProtocols, opts?: RemoteCommitSourceOptions) => RemoteCommitSource;
 //# sourceMappingURL=commits.d.ts.map

package/build/commits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commits.d.ts","sourceRoot":"","sources":["../src/commits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAKlE,OAAO,KAAK,EAC+B,iBAAiB,EAC3D,MAAM,oBAAoB,CAAA;AAG3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAuB/E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,GAAI,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,YAAY,CAAC,CAAC,CAAC,WAC5E,CAAC,aAAa,iBAAiB,SAAS,yBAAyB,KACzE,kBAuMF,CAAA"}
+{"version":3,"file":"commits.d.ts","sourceRoot":"","sources":["../src/commits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAElE,OAAO,EAA2O,KAAK,iBAAiB,EAAmC,MAAM,oBAAoB,CAAA;AAKrU,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAM/E,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,GAAI,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,YAAY,CAAC,CAAC,CAAC,WAC5E,CAAC,aAAa,iBAAiB,SAAS,yBAAyB,KACzE,kBAsMF,CAAA"}