@spine-event-engine/auth 2.0.0-snapshot.25 → 2.0.0-snapshot.28

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EACV,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,MAAM,EACP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,KAAK,EACX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IAGtC;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAC/C,uBAAuB,EACvB,WAAW,GAAG,eAAe,CAC9B;IAGC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAG9B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAG5B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IAGnC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAG7C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAG/C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,sBAAsB;IAGrC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAGhC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAEnC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IAGzD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IAGzD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAG9B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAE3C;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAG5B;;;;OAIG;IACH,YAAY,CAAC,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;CAC1F;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAG9B;;;;OAIG;IACH,OAAO,CAAC,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;CAC9E;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAGlC;;;;;OAKG;IACH,SAAS,CAAC,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IAGvC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAG9B;;;;;;OAMG;IACH,OAAO,CACL,SAAS,EAAE,sBAAsB,EACjC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAErC;;;;;OAKG;IACH,cAAc,CACZ,SAAS,EAAE,sBAAsB,EACjC,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IAGpB;;;OAGG;IACH,GAAG,IAAI,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAG7B;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAGlC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAE5C;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,UAAU,iBAAiB;IACzB;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,uBAAuB,CAAC;CAC3D;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAwBrD,CAAC;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAiBtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,6BAA6B,EAC7B,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,eAAe,EACf,6BAA6B,EAC7B,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,KAAK,EACV,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,MAAM,EACP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,KAAK,EACV,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,KAAK,EACX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IAGtC;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAC/C,uBAAuB,EACvB,WAAW,GAAG,eAAe,CAC9B;IAGC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAG9B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAG5B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAG/B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IAGnC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAG7C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAG/C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,eAAe,GACf,aAAa,GACb,gBAAgB,GAChB,oBAAoB,GACpB,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,sBAAsB;IAGrC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAGhC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAEnC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IAGzD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IAGzD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAG9B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAE3C;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAG5B;;;;OAIG;IACH,YAAY,CAAC,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;CAC1F;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAG9B;;;;;OAKG;IACH,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;CACtG;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAGlC;;;;;OAKG;IACH,SAAS,CAAC,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IAGvC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAE7B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;CACnE;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAG9B;;;;;;OAMG;IACH,OAAO,CACL,SAAS,EAAE,sBAAsB,EACjC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAErC;;;;;OAKG;IACH,cAAc,CACZ,SAAS,EAAE,sBAAsB,EACjC,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IAGpB;;;OAGG;IACH,GAAG,IAAI,SAAS,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAG7B;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,GACD;IAGE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAGlC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAE5C;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED;;GAEG;AACH,UAAU,iBAAiB;IACzB;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,uBAAuB,CAAC;CAC3D;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAwBrD,CAAC;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAiBtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,YAAY,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,YAAY,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,YAAY,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,6BAA6B,EAC7B,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,eAAe,EACf,6BAA6B,EAC7B,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC"}

package/dist/index.js

@@ -51,6 +51,10 @@ const TransportFactsValues = Object.freeze({
 export { UnaryGateway } from "./gateway/index.js";
 export { OpaqueSessionCookies } from "./sessions/cookies.js";
 export { OpaqueSessions } from "./sessions/opaque.js";
+export { MemoryOpaqueSessionStore } from "./sessions/opaque-session-store.js";
+export { PersistentOpaqueSessionStore } from "./sessions/persistent-opaque-session-store.js";
+export { PersistentOidcFlowStore } from "./oidc/persistent-flow-store.js";
+export { PersistentTokenRevocations } from "./sessions/persistent-token-revocations.js";
 export { SignedSessions } from "./sessions/signed.js";
 export { OidcFlow } from "./oidc/index.js";
 export { createGitHubProvider, createGoogleProvider, createOidcProvider, discoverOidcProvider, } from "./providers/index.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,OAAO,EAKN,MAAM,kCAAkC,CAAC;AAsiB1C;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgC,MAAM,CAAC,MAAM,CAAC;IACvE,kBAAkB;IAElB;;;;OAIG;IACH,IAAI,CAAC,KAA0B;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;aAChC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACpE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CACvD,CAAC;QACF,OAAO,oBAAoB,CAAC,OAAO,CAAC;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC;YAClC,aAAa,EAAE,OAAO,CAAC,kBAAkB,CAAC;YAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC;;;;OAIG;IACH,OAAO,CACL,OACqD;QAErD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC7B,CAAC;IAC1C,CAAC;CACF,CAAC,CAAC;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAoF3B,OAAO,EACL,qBAAqB,GAGtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAaH,OAAO,EAMN,MAAM,kCAAkC,CAAC;AAmmB1C;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgC,MAAM,CAAC,MAAM,CAAC;IACvE,kBAAkB;IAElB;;;;OAIG;IACH,IAAI,CAAC,KAA0B;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;aAChC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACpE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CACvD,CAAC;QACF,OAAO,oBAAoB,CAAC,OAAO,CAAC;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC;YAClC,aAAa,EAAE,OAAO,CAAC,kBAAkB,CAAC;YAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC;;;;OAIG;IACH,OAAO,CACL,OACqD;QAErD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC7B,CAAC;IAC1C,CAAC;CACF,CAAC,CAAC;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAE7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAoF3B,OAAO,EACL,qBAAqB,GAGtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC"}

package/dist/native/index.d.ts

@@ -1,6 +1,8 @@
 import { type HandlerContext, type ServiceImpl, type Transport } from "@connectrpc/connect";
 import { CommandService, QueryService, SubscriptionService, type SubscriptionUpdate } from "@spine-event-engine/proto/client";
 import { AuthenticationService } from "@spine-event-engine/proto/auth";
+import { type ReaderProofIssuer } from "@spine-event-engine/core/spi/reader-forwarding";
+import type { TrustedReaderContext } from "@spine-event-engine/core/spi/trusted-reader";
 import type { UnaryForwarder, UnaryGateway } from "../gateway/index.js";
 import type { RequestCredential, TransportRequestContext } from "../index.js";
 import type { BackendSubscriptionEnvelope, PublicSubscriptionWire, SubscriptionAbortSignal, SubscriptionCreator, SubscriptionUpdateSink, SubscriptionUpdateWire, SubscriptionGateway } from "../subscriptions/index.js";
@@ -25,12 +27,14 @@ export declare class SubscriptionUpdateRelay implements AsyncIterable<Subscripti
     #private;
     /**
      * Creates a bounded FIFO relay.
+     *
      * @param limits The optional message and byte bounds.
      */
     constructor(limits?: SubscriptionRelayLimits);
     /**
      * Copies and validates an update before FIFO admission. Count precedes bytes;
      * either bound rejects with `ResourceExhausted`.
+     *
      * @param update The update bytes to admit.
      * @returns Completes after the update is admitted or rejected.
      */
@@ -41,11 +45,13 @@ export declare class SubscriptionUpdateRelay implements AsyncIterable<Subscripti
     close(): void;
     /**
      * Throws queued and future consumers, purging bytes.
+     *
      * @param reason The terminal failure reason.
      */
     fail(reason: unknown): void;
     /**
      * Returns the public iterator; `return()` cancels it and purges queued bytes, while `throw()` fails it.
+     *
      * @returns The single public update iterator.
      */
     [Symbol.asyncIterator](): AsyncIterator<SubscriptionUpdate>;
@@ -53,18 +59,26 @@ export declare class SubscriptionUpdateRelay implements AsyncIterable<Subscripti
 /**
  * Native Connect adapter. Post/Read use their matching Command/Query descriptors;
  * Subscribe/Activate/Cancel/Dispose use the shared Subscription descriptors.
- * Every call receives only an admitted AbortSignal, never browser credentials or facts.
+ * Native requests carry the admitted cancellation signal and, when an issuer is
+ * configured, operation-bound internal headers with detached verified reader
+ * facts. Browser credentials and raw transport facts are not forwarded.
  */
 export declare class NativeSubscriptionCreator implements SubscriptionCreator, UnaryForwarder {
     #private;
     /**
      * Creates a native adapter over one Connect transport.
+     *
      * @param transport The native Connect transport.
+     * @param forwarding Configured peer proof issuer and existing request-size bound.
      */
-    constructor(transport: Transport);
+    constructor(transport: Transport, forwarding?: {
+        readonly issuer: ReaderProofIssuer;
+        readonly maxBytes: number;
+    });
     /**
      * Sends an admitted Post or Read envelope through its matching native descriptor.
      * Removes the backend transport's media type from errors before a gateway serializes them.
+     *
      * @param request The admitted unary request envelope.
      * @returns The encoded native response.
      */
@@ -72,10 +86,24 @@ export declare class NativeSubscriptionCreator implements SubscriptionCreator, U
         readonly service: string;
         readonly method: string;
         readonly value: Uint8Array;
+        readonly reader?: TrustedReaderContext;
         readonly signal?: AbortSignal;
     }): Promise<Uint8Array>;
+    /**
+     * Builds peer-authenticated metadata for an admitted unary request.
+     *
+     * @param request Admitted operation and trusted reader facts.
+     * @returns Headers for the configured native forwarding peer.
+     */
+    readerHeaders(request: {
+        readonly service: string;
+        readonly method: string;
+        readonly value: Uint8Array;
+        readonly reader?: TrustedReaderContext | undefined;
+    }): Promise<Readonly<Record<string, string>> | undefined>;
     /**
      * Creates a native subscription with the supplied admitted cancellation signal.
+     *
      * @param request The admitted canonical subscription definition.
      * @param signal The admitted cancellation signal.
      * @returns The private backend subscription envelope.
@@ -83,6 +111,7 @@ export declare class NativeSubscriptionCreator implements SubscriptionCreator, U
     subscribe(request: PublicSubscriptionWire, signal: SubscriptionAbortSignal): Promise<BackendSubscriptionEnvelope>;
     /**
      * Streams native Activate updates through the supplied asynchronous public-update sink.
+     *
      * @param request The private native subscription envelope and update sink.
      * @param signal The admitted cancellation signal.
      * @returns Completes after native activation ends.
@@ -91,8 +120,16 @@ export declare class NativeSubscriptionCreator implements SubscriptionCreator, U
         readonly wire: BackendSubscriptionEnvelope;
         readonly updates: SubscriptionUpdateSink;
     }, signal: SubscriptionAbortSignal): Promise<void>;
+    /**
+     * Rejects a child update from a different subscription or Topic.
+     *
+     * @param subscription The subscription definition being processed.
+     * @param update Native subscription update.
+     */
+    private checkUpdate;
     /**
      * Cancels the native subscription represented by the canonical definition.
+     *
      * @param request The canonical subscription definition.
      * @param signal The admitted cancellation signal.
      * @returns Completes after native cancellation ends.
@@ -102,6 +139,7 @@ export declare class NativeSubscriptionCreator implements SubscriptionCreator, U
     }, signal: SubscriptionAbortSignal): Promise<void>;
     /**
      * Performs mandatory native cancellation/disposal compensation for a private envelope.
+     *
      * @param envelope The private backend subscription envelope.
      * @param signal The admitted cancellation signal.
      * @returns Completes after native disposal ends.
@@ -114,12 +152,14 @@ export declare class NativeSubscriptionCreator implements SubscriptionCreator, U
 export interface NativeGatewayRequestContext {
     /**
      * Reads credentials for the gateway only; they are never forwarded to native services.
+     *
      * @param context The incoming Connect handler context.
      * @returns The extracted request credential.
      */
     credential(context: HandlerContext): RequestCredential | undefined;
     /**
      * Reads the allowlisted authorization and diagnostic transport view for the gateway only.
+     *
      * @param context The incoming Connect handler context.
      * @returns The allowed transport facts.
      */
@@ -169,13 +209,13 @@ export interface NativeGatewayServicesOptions {
 }
 /**
  * Creates native handlers without exposing private envelopes.
- *
  * Unauthenticated requests map to `Unauthenticated`; forbidden or denied requests to
  * `PermissionDenied`; request/capacity limits to `ResourceExhausted`; busy bindings to `Aborted`;
  * and unknown operations to `Unimplemented`. Malformed, stale-context, backend-envelope, and other
  * validation rejections map to `InvalidArgument`. Terminal context/iterator paths abort native
  * work. Natural completion drains FIFO updates, whereas failure or iterator cancellation purges
  * them.
+ *
  * @param options The unary, subscription, context, and relay dependencies.
  * @returns The native Connect service implementations.
  */

package/dist/native/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,YAAY,EAIZ,mBAAmB,EAInB,KAAK,kBAAkB,EACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAsB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EAEpB,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IAGtC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAOD;;GAEG;AACH,qBAAa,uBAAwB,YAAW,aAAa,CAAC,kBAAkB,CAAC;;IAgB/E;;;OAGG;gBACS,MAAM,GAAE,uBAA4B;IAIhD;;;;;OAKG;IACH,IAAI,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCnD;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;OAGG;IACH,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAI3B;;;OAGG;IACH,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,kBAAkB,CAAC;CAiE5D;AAmBD;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,mBAAmB,EAAE,cAAc;;IAGnF;;;OAGG;gBACS,SAAS,EAAE,SAAS;IAIhC;;;;;OAKG;IACG,OAAO,CAAC,OAAO,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,GAAG,OAAO,CAAC,UAAU,CAAC;IAwBvB;;;;;OAKG;IACG,SAAS,CACb,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,2BAA2B,CAAC;IAYvC;;;;;OAKG;IACG,QAAQ,CACZ,OAAO,EAAE;QACP,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;QAC3C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;KAC1C,EACD,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA0BhB;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;KAAE,EAClD,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,OAAO,CACX,QAAQ,EAAE,2BAA2B,EACrC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC;CAUjB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAG1C;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAEnE;;;;OAIG;IACH,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,uBAAuB,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAGpC;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC;IAEnE;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;IAErD;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,YAAY,CAAC,CAAC;IAEjD;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAChE;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAG3C;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAE5C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAE/C;;OAEG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,qBAAqB,CA0CvB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,YAAY,EAOZ,mBAAmB,EAInB,KAAK,kBAAkB,EACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAsB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EAEpB,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IAGtC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAOD;;GAEG;AACH,qBAAa,uBAAwB,YAAW,aAAa,CAAC,kBAAkB,CAAC;;IAgB/E;;;;OAIG;gBACS,MAAM,GAAE,uBAA4B;IAIhD;;;;;;OAMG;IACH,IAAI,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCnD;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;OAIG;IACH,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAI3B;;;;OAIG;IACH,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,kBAAkB,CAAC;CA+E5D;AAmBD;;;;;;GAMG;AACH,qBAAa,yBAA0B,YAAW,mBAAmB,EAAE,cAAc;;IAOnF;;;;;OAKG;gBAED,SAAS,EAAE,SAAS,EACpB,UAAU,CAAC,EAAE;QACX,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B;IAOH;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,GAAG,OAAO,CAAC,UAAU,CAAC;IAmDvB;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;KACpD,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAiBzD;;;;;;OAMG;IACG,SAAS,CACb,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,2BAA2B,CAAC;IAuBvC;;;;;;OAMG;IACG,QAAQ,CACZ,OAAO,EAAE;QACP,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;QAC3C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;KAC1C,EACD,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC;IAwBhB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAYnB;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;KAAE,EAClD,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC;IAkBhB;;;;;;OAMG;IACG,OAAO,CACX,QAAQ,EAAE,2BAA2B,EACrC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC;CAiBjB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAG1C;;;;;OAKG;IACH,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAEnE;;;;;OAKG;IACH,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,uBAAuB,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAGpC;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC;IAEnE;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;IAErD;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,YAAY,CAAC,CAAC;IAEjD;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAChE;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAG3C;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAE5C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAE/C;;OAEG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,qBAAqB,CAkBvB"}

package/dist/native/index.js

@@ -13,8 +13,9 @@
  */
 import { clone, create, equals, fromBinary, toBinary } from "@bufbuild/protobuf";
 import { Code, ConnectError, createClient, } from "@connectrpc/connect";
-import { CommandService, QueryService, SubscriptionSchema, SubscriptionService, SubscriptionUpdateSchema, TopicSchema, } from "@spine-event-engine/proto/client";
+import { CommandService, QueryService, AppQuerySchema, SubscriptionSchema, SubscriptionService, SubscriptionUpdateSchema, TopicSchema, } from "@spine-event-engine/proto/client";
 import { AuthenticationService } from "@spine-event-engine/proto/auth";
+import { ReaderForwarding, } from "@spine-event-engine/core/spi/reader-forwarding";
 const relayDefaults = {
     maxMessages: 64,
     maxBytes: 1_048_576,
@@ -31,6 +32,7 @@ export class SubscriptionUpdateRelay {
     #closed = false;
     /**
      * Creates a bounded FIFO relay.
+     *
      * @param limits The optional message and byte bounds.
      */
     constructor(limits = {}) {
@@ -39,6 +41,7 @@ export class SubscriptionUpdateRelay {
     /**
      * Copies and validates an update before FIFO admission. Count precedes bytes;
      * either bound rejects with `ResourceExhausted`.
+     *
      * @param update The update bytes to admit.
      * @returns Completes after the update is admitted or rejected.
      */
@@ -86,6 +89,7 @@ export class SubscriptionUpdateRelay {
     }
     /**
      * Throws queued and future consumers, purging bytes.
+     *
      * @param reason The terminal failure reason.
      */
     fail(reason) {
@@ -93,6 +97,7 @@ export class SubscriptionUpdateRelay {
     }
     /**
      * Returns the public iterator; `return()` cancels it and purges queued bytes, while `throw()` fails it.
+     *
      * @returns The single public update iterator.
      */
     [Symbol.asyncIterator]() {
@@ -108,7 +113,11 @@ export class SubscriptionUpdateRelay {
             },
         };
     }
-    async #next() {
+    /**
+     * Dequeues the next native update or waits for stream progress.
+     *
+     * @returns The next iterator result.
+     */ async #next() {
         const bytes = this.#queue.shift();
         if (bytes !== undefined) {
             this.#bytes -= bytes.byteLength;
@@ -129,12 +138,22 @@ export class SubscriptionUpdateRelay {
         }
         return new Promise((resolve, reject) => this.#waiters.push({ resolve, reject }));
     }
-    #failOverflow(dimension, limit, observed) {
+    /**
+     * Fails a native update stream after its queue limit is exceeded.
+     *
+     * @param dimension Subscription limit dimension being checked.
+     * @param limit Configured operation bound.
+     * @param observed Observed subscription or lifecycle state.
+     */ #failOverflow(dimension, limit, observed) {
         const error = new ConnectError(`subscription relay ${dimension} limit ${String(limit)} exceeded by ${String(observed)}`, Code.ResourceExhausted);
         this.#finish(error);
         throw error;
     }
-    #finish(reason) {
+    /**
+     * Completes a native update stream and releases queued listeners.
+     *
+     * @param reason Failure reason returned to the caller.
+     */ #finish(reason) {
         if (this.#closed) {
             if (this.#terminal !== undefined || reason === undefined)
                 return;
@@ -181,45 +200,102 @@ const NativeRelayValues = Object.freeze({
 /**
  * Native Connect adapter. Post/Read use their matching Command/Query descriptors;
  * Subscribe/Activate/Cancel/Dispose use the shared Subscription descriptors.
- * Every call receives only an admitted AbortSignal, never browser credentials or facts.
+ * Native requests carry the admitted cancellation signal and, when an issuer is
+ * configured, operation-bound internal headers with detached verified reader
+ * facts. Browser credentials and raw transport facts are not forwarded.
  */
 export class NativeSubscriptionCreator {
     #transport;
+    #issuer;
+    #maxBytes;
     /**
      * Creates a native adapter over one Connect transport.
+     *
      * @param transport The native Connect transport.
+     * @param forwarding Configured peer proof issuer and existing request-size bound.
      */
-    constructor(transport) {
+    constructor(transport, forwarding) {
         this.#transport = transport;
+        this.#issuer = forwarding?.issuer;
+        this.#maxBytes = forwarding?.maxBytes ?? 4 * 1024 * 1024;
     }
     /**
      * Sends an admitted Post or Read envelope through its matching native descriptor.
      * Removes the backend transport's media type from errors before a gateway serializes them.
+     *
      * @param request The admitted unary request envelope.
      * @returns The encoded native response.
      */
     async forward(request) {
         try {
-            if (request.service === "spine.client.CommandService" && request.method === "Post")
-                return toBinary(CommandService.method.post.output, await createClient(CommandService, this.#transport).post(fromBinary(CommandService.method.post.input, request.value), ...(request.signal === undefined ? [] : [{ signal: request.signal }])));
-            if (request.service === "spine.client.QueryService" && request.method === "Read")
-                return toBinary(QueryService.method.read.output, await createClient(QueryService, this.#transport).read(fromBinary(QueryService.method.read.input, request.value), ...(request.signal === undefined ? [] : [{ signal: request.signal }])));
-            throw new ConnectError("unsupported native unary operation", Code.Unimplemented);
+            const headers = request.reader === undefined ? undefined : await this.readerHeaders(request);
+            return await this.#forwardResponse(request, headers);
         }
         catch (error) {
             throw NativeGatewayValues.publicError(error);
         }
     }
+    /**
+     * Invokes the selected native unary descriptor using admitted headers and cancellation.
+     *
+     * @param request The canonical operation and wire bytes.
+     * @param headers Forwarded verified-reader proof, when configured.
+     * @returns Serialized native response bytes.
+     */
+    async #forwardResponse(request, headers) {
+        const options = {
+            ...(request.signal === undefined ? {} : { signal: request.signal }),
+            ...(headers === undefined ? {} : { headers }),
+        };
+        if (request.service === "spine.client.CommandService" && request.method === "Post")
+            return toBinary(CommandService.method.post.output, await createClient(CommandService, this.#transport).post(fromBinary(CommandService.method.post.input, request.value), options));
+        if (request.service === "spine.client.QueryService" && request.method === "Read")
+            return toBinary(QueryService.method.read.output, await createClient(QueryService, this.#transport).read(fromBinary(QueryService.method.read.input, request.value), options));
+        if (request.service === "spine.client.QueryService" && request.method === "Execute")
+            return toBinary(QueryService.method.execute.output, await createClient(QueryService, this.#transport).execute(fromBinary(QueryService.method.execute.input, request.value), options));
+        throw new ConnectError("unsupported native unary operation", Code.Unimplemented);
+    }
+    /**
+     * Builds peer-authenticated metadata for an admitted unary request.
+     *
+     * @param request Admitted operation and trusted reader facts.
+     * @returns Headers for the configured native forwarding peer.
+     */
+    async readerHeaders(request) {
+        if (request.reader === undefined)
+            return undefined;
+        if (this.#issuer === undefined) {
+            if (request.reader.principal !== undefined || request.reader.authorityFacts !== undefined)
+                throw new Error("Authenticated forwarding requires a configured proof issuer.");
+            return undefined;
+        }
+        return ReaderForwarding.seal(request.service, request.method, request.value, request.reader, this.#issuer, this.#maxBytes);
+    }
     /**
      * Creates a native subscription with the supplied admitted cancellation signal.
+     *
      * @param request The admitted canonical subscription definition.
      * @param signal The admitted cancellation signal.
      * @returns The private backend subscription envelope.
      */
     async subscribe(request, signal) {
         try {
-            const result = await createClient(SubscriptionService, this.#transport).subscribe(fromBinary(SubscriptionSchema, request.bytes).topic ?? create(TopicSchema), { signal });
-            return { kind: "backend-subscription-envelope", bytes: toBinary(SubscriptionSchema, result) };
+            const topic = fromBinary(SubscriptionSchema, request.bytes).topic ?? create(TopicSchema);
+            const headers = await this.readerHeaders({
+                service: "spine.client.SubscriptionService",
+                method: "Subscribe",
+                value: toBinary(TopicSchema, topic),
+                reader: request.reader,
+            });
+            const result = await createClient(SubscriptionService, this.#transport).subscribe(topic, {
+                signal,
+                ...(headers === undefined ? {} : { headers }),
+            });
+            return {
+                kind: "backend-subscription-envelope",
+                bytes: toBinary(SubscriptionSchema, result),
+                ...(request.reader === undefined ? {} : { reader: request.reader }),
+            };
         }
         catch (error) {
             throw NativeGatewayValues.publicError(error);
@@ -227,6 +303,7 @@ export class NativeSubscriptionCreator {
     }
     /**
      * Streams native Activate updates through the supplied asynchronous public-update sink.
+     *
      * @param request The private native subscription envelope and update sink.
      * @param signal The admitted cancellation signal.
      * @returns Completes after native activation ends.
@@ -234,14 +311,14 @@ export class NativeSubscriptionCreator {
     async activate(request, signal) {
         const subscription = fromBinary(SubscriptionSchema, request.wire.bytes);
         try {
-            for await (const update of createClient(SubscriptionService, this.#transport).activate(subscription, { signal })) {
-                const topic = subscription.topic;
-                const updateTopic = update.subscription?.topic;
-                if (update.subscription?.id?.value !== subscription.id?.value ||
-                    topic === undefined ||
-                    updateTopic === undefined ||
-                    !equals(TopicSchema, updateTopic, topic))
-                    throw new Error("Backend child update does not match its subscription.");
+            const headers = await this.readerHeaders({
+                service: "spine.client.SubscriptionService",
+                method: "Activate",
+                value: toBinary(SubscriptionSchema, subscription),
+                reader: request.wire.reader,
+            });
+            for await (const update of createClient(SubscriptionService, this.#transport).activate(subscription, { signal, ...(headers === undefined ? {} : { headers }) })) {
+                this.checkUpdate(subscription, update);
                 await request.updates({
                     kind: "subscription-update",
                     bytes: toBinary(SubscriptionUpdateSchema, update),
@@ -252,15 +329,41 @@ export class NativeSubscriptionCreator {
             throw NativeGatewayValues.publicError(error);
         }
     }
+    /**
+     * Rejects a child update from a different subscription or Topic.
+     *
+     * @param subscription The subscription definition being processed.
+     * @param update Native subscription update.
+     */
+    checkUpdate(subscription, update) {
+        const topic = subscription.topic;
+        const updateTopic = update.subscription?.topic;
+        if (update.subscription?.id?.value !== subscription.id?.value ||
+            topic === undefined ||
+            updateTopic === undefined ||
+            !equals(TopicSchema, updateTopic, topic))
+            throw new Error("Backend child update does not match its subscription.");
+    }
     /**
      * Cancels the native subscription represented by the canonical definition.
+     *
      * @param request The canonical subscription definition.
      * @param signal The admitted cancellation signal.
      * @returns Completes after native cancellation ends.
      */
     async cancel(request, signal) {
         try {
-            await createClient(SubscriptionService, this.#transport).cancel(fromBinary(SubscriptionSchema, request.wire.bytes), { signal });
+            const subscription = fromBinary(SubscriptionSchema, request.wire.bytes);
+            const headers = await this.readerHeaders({
+                service: "spine.client.SubscriptionService",
+                method: "Cancel",
+                value: toBinary(SubscriptionSchema, subscription),
+                reader: request.wire.reader,
+            });
+            await createClient(SubscriptionService, this.#transport).cancel(subscription, {
+                signal,
+                ...(headers === undefined ? {} : { headers }),
+            });
         }
         catch (error) {
             throw NativeGatewayValues.publicError(error);
@@ -268,13 +371,24 @@ export class NativeSubscriptionCreator {
     }
     /**
      * Performs mandatory native cancellation/disposal compensation for a private envelope.
+     *
      * @param envelope The private backend subscription envelope.
      * @param signal The admitted cancellation signal.
      * @returns Completes after native disposal ends.
      */
     async dispose(envelope, signal) {
         try {
-            await createClient(SubscriptionService, this.#transport).cancel(fromBinary(SubscriptionSchema, envelope.bytes), { signal });
+            const subscription = fromBinary(SubscriptionSchema, envelope.bytes);
+            const headers = await this.readerHeaders({
+                service: "spine.client.SubscriptionService",
+                method: "Cancel",
+                value: toBinary(SubscriptionSchema, subscription),
+                reader: envelope.reader,
+            });
+            await createClient(SubscriptionService, this.#transport).cancel(subscription, {
+                signal,
+                ...(headers === undefined ? {} : { headers }),
+            });
         }
         catch (error) {
             throw NativeGatewayValues.publicError(error);
@@ -283,13 +397,13 @@ export class NativeSubscriptionCreator {
 }
 /**
  * Creates native handlers without exposing private envelopes.
- *
  * Unauthenticated requests map to `Unauthenticated`; forbidden or denied requests to
  * `PermissionDenied`; request/capacity limits to `ResourceExhausted`; busy bindings to `Aborted`;
  * and unknown operations to `Unimplemented`. Malformed, stale-context, backend-envelope, and other
  * validation rejections map to `InvalidArgument`. Terminal context/iterator paths abort native
  * work. Natural completion drains FIFO updates, whereas failure or iterator cancellation purges
  * them.
+ *
  * @param options The unary, subscription, context, and relay dependencies.
  * @returns The native Connect service implementations.
  */
@@ -303,8 +417,23 @@ export function createNativeGatewayServices(options) {
         },
         query: {
             read: async (request, context) => NativeGatewayValues.queryResponse(options, request, context),
+            execute: async (request, context) => NativeGatewayValues.appQueryResponse(options, request, context),
         },
-        subscription: {
+        subscription: NativeGatewayValues.subscriptionService(options),
+    };
+}
+/**
+ * Converts native Connect gateway inputs, responses, and errors.
+ */
+const NativeGatewayValues = Object.freeze({
+    /**
+     * Binds native subscription handlers to the existing gateway policy.
+     *
+     * @param options Subscription gateway and request facts.
+     * @returns Connect implementation for subscription lifecycle methods.
+     */
+    subscriptionService(options) {
+        return {
             subscribe: async (request, context) => {
                 const result = await options.subscriptions.handle(NativeGatewayValues.subscriptionRequest("Subscribe", toBinary(TopicSchema, request), context, options.requests));
                 if (result.kind !== "subscribed")
@@ -318,15 +447,11 @@ export function createNativeGatewayServices(options) {
                     throw NativeGatewayValues.gatewayResultError(result);
                 return create(SubscriptionService.method.cancel.output);
             },
-        },
-    };
-}
-/**
- * Converts native Connect gateway inputs, responses, and errors.
- */
-const NativeGatewayValues = Object.freeze({
+        };
+    },
     /**
      * Removes backend transport headers before another Connect server serializes the error.
+     *
      * @param error The native RPC failure.
      * @returns The original failure with application metadata and details retained.
      */
@@ -406,6 +531,27 @@ const NativeGatewayValues = Object.freeze({
             throw NativeGatewayValues.unaryError(result);
         return fromBinary(QueryService.method.read.output, result.value);
     },
+    /**
+     * Maps a forwarded application request to its public Execute response.
+     *
+     * @param options Gateway collaborators for this operation.
+     * @param request Complete App Query envelope.
+     * @param context Authenticated native request context.
+     * @returns The app-node's packed paired response.
+     */
+    async appQueryResponse(options, request, context) {
+        const result = await options.unary.handle({
+            service: "spine.client.QueryService",
+            method: "Execute",
+            value: toBinary(AppQuerySchema, request),
+            credential: options.requests.credential(context),
+            transport: options.requests.transport(context),
+            signal: context.signal,
+        });
+        if (result.kind === "rejected")
+            throw NativeGatewayValues.unaryError(result);
+        return fromBinary(QueryService.method.execute.output, result.value);
+    },
     /**
      * Activates the authenticated subscription stream.
      *