@substrat-run/adapter-cloudflare 0.137.0 → 0.139.0

package/dist/live-reads.d.ts

@@ -9,7 +9,8 @@
  *
  * Nothing in this module reaches the network or the database. It is names and shapes.
  */
-import type { PrincipalId, ScopeId, TenantId } from '@substrat-run/contracts';
+import { type EntityRef, type PrincipalId, type ScopeId, type TenantId } from '@substrat-run/contracts';
+import { type VouchedWithin } from '@substrat-run/kernel';
 /**
  * The path the coordinator fetches on the scope stub to open a subscription.
  *
@@ -31,6 +32,41 @@ export declare const LIVE_SUBSCRIBE_PATH = "/_substrat/live";
 export declare const LIVE_PRINCIPAL_HEADER = "x-substrat-live-principal";
 export declare const LIVE_TENANT_HEADER = "x-substrat-live-tenant";
 export declare const LIVE_SCOPE_HEADER = "x-substrat-live-scope";
+/**
+ * The `within` root a subscription is narrowed to (#1853), and whether the vertical
+ * vouched for it — `encodeLiveWithin`'s output, asserted by the coordinator exactly as
+ * the principal is. Absent means an unnarrowed feed.
+ */
+export declare const LIVE_WITHIN_HEADER = "x-substrat-live-within";
+/** A subscription's narrowing, as it is carried on the header and kept on the socket. */
+export interface LiveWithin {
+    readonly entityType: string;
+    readonly entityId: string;
+    /**
+     * Set when the vertical vouched for the root (`vouchedWithin`): its stated reason, and
+     * the principal's own check is then NOT applied. Absent: the check is ANDed with the walk.
+     */
+    readonly vouched?: string;
+}
+/** Header-safe: a reason may carry any character, and a header value may not. */
+export declare function encodeLiveWithin(within: LiveWithin): string;
+/**
+ * Read a narrowing back — from the header, or from a socket's attachment. `undefined`
+ * for a value that is not one, so the caller can refuse it rather than open the feed
+ * wider than was asked: a malformed narrowing is never read as "no narrowing".
+ */
+export declare function readLiveWithin(value: unknown): LiveWithin | undefined;
+/**
+ * What `subscribe`'s `within` argument asks for, as the narrowing the scope keeps.
+ *
+ * Only two shapes are accepted: a value `vouchedWithin` built, and a plain `EntityRef`.
+ * Anything else throws — in particular an object that LOOKS vouched (`{ entity, because }`)
+ * but was not built by `vouchedWithin`: read as a plain ref it has no type or id, and the
+ * only other reading would drop the principal's check on the caller's say-so.
+ */
+export declare function liveWithinOf(within: EntityRef | VouchedWithin | undefined): LiveWithin | undefined;
+/** `readLiveWithin` over the header's encoding. */
+export declare function decodeLiveWithin(header: string): LiveWithin | undefined;
 /**
  * Set on every refusal this surface returns, so a client can tell "no push here, poll"
  * from "your request was wrong" without parsing a body or guessing from a status.
@@ -78,6 +114,8 @@ export interface LiveSubscription {
     readonly scopeId: ScopeId;
     /** When the subscription was accepted (ISO 8601) — for the roster read, and for logs. */
     readonly since: string;
+    /** The root the feed is narrowed to (#1853). Absent on an unnarrowed one, and on every socket opened before it existed. */
+    readonly within?: LiveWithin;
 }
 /**
  * Read a socket's subscription back, or `null` if it does not have a usable one.

package/dist/live-reads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-reads.d.ts","sourceRoot":"","sources":["../src/live-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAE9E;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AACjE,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAC3D,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAa7E;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,2FAA2F;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE1D"}
+{"version":3,"file":"live-reads.d.ts","sourceRoot":"","sources":["../src/live-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACvH,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE3E;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AACjE,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAC3D,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAE3D,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAWrE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAalG;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAMvE;AAED;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2HAA2H;IAC3H,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAkB7E;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,2FAA2F;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE1D"}

package/dist/live-reads.js

@@ -1,3 +1,16 @@
+/**
+ * Live reads (#938) — the wire between the coordinator and the scope's Durable Object.
+ *
+ * The two halves of the live-read path live in different files for different reasons:
+ * `host.ts` owns the door (who is asking, and whether this connection can carry a push
+ * at all) and `scope-do.ts` owns the subscription and the fan-out (which committed
+ * events this subscriber may be told about). Everything they must agree on is here, so
+ * neither end can drift from the other by editing its own file.
+ *
+ * Nothing in this module reaches the network or the database. It is names and shapes.
+ */
+import { substratError } from '@substrat-run/contracts';
+import { isVouchedWithin } from '@substrat-run/kernel';
 /**
  * The path the coordinator fetches on the scope stub to open a subscription.
  *
@@ -19,6 +32,66 @@ export const LIVE_SUBSCRIBE_PATH = '/_substrat/live';
 export const LIVE_PRINCIPAL_HEADER = 'x-substrat-live-principal';
 export const LIVE_TENANT_HEADER = 'x-substrat-live-tenant';
 export const LIVE_SCOPE_HEADER = 'x-substrat-live-scope';
+/**
+ * The `within` root a subscription is narrowed to (#1853), and whether the vertical
+ * vouched for it — `encodeLiveWithin`'s output, asserted by the coordinator exactly as
+ * the principal is. Absent means an unnarrowed feed.
+ */
+export const LIVE_WITHIN_HEADER = 'x-substrat-live-within';
+/** Header-safe: a reason may carry any character, and a header value may not. */
+export function encodeLiveWithin(within) {
+    return encodeURIComponent(JSON.stringify(within));
+}
+/**
+ * Read a narrowing back — from the header, or from a socket's attachment. `undefined`
+ * for a value that is not one, so the caller can refuse it rather than open the feed
+ * wider than was asked: a malformed narrowing is never read as "no narrowing".
+ */
+export function readLiveWithin(value) {
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const w = value;
+    if (typeof w.entityType !== 'string' || w.entityType === '')
+        return undefined;
+    if (typeof w.entityId !== 'string' || w.entityId === '')
+        return undefined;
+    if (w.vouched !== undefined && (typeof w.vouched !== 'string' || w.vouched.trim() === ''))
+        return undefined;
+    return {
+        entityType: w.entityType,
+        entityId: w.entityId,
+        ...(w.vouched !== undefined ? { vouched: w.vouched } : {}),
+    };
+}
+/**
+ * What `subscribe`'s `within` argument asks for, as the narrowing the scope keeps.
+ *
+ * Only two shapes are accepted: a value `vouchedWithin` built, and a plain `EntityRef`.
+ * Anything else throws — in particular an object that LOOKS vouched (`{ entity, because }`)
+ * but was not built by `vouchedWithin`: read as a plain ref it has no type or id, and the
+ * only other reading would drop the principal's check on the caller's say-so.
+ */
+export function liveWithinOf(within) {
+    if (within === undefined)
+        return undefined;
+    if (isVouchedWithin(within)) {
+        return { entityType: within.entity.entityType, entityId: within.entity.entityId, vouched: within.because };
+    }
+    const plain = readLiveWithin(within);
+    if (!plain || 'vouched' in within) {
+        throw substratError('validation_failed', 'live reads: `within` must be an EntityRef, or a value built by vouchedWithin()');
+    }
+    return { entityType: plain.entityType, entityId: plain.entityId };
+}
+/** `readLiveWithin` over the header's encoding. */
+export function decodeLiveWithin(header) {
+    try {
+        return readLiveWithin(JSON.parse(decodeURIComponent(header)));
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * Set on every refusal this surface returns, so a client can tell "no push here, poll"
  * from "your request was wrong" without parsing a body or guessing from a status.
@@ -72,11 +145,17 @@ export function readSubscription(attachment) {
         return null;
     if (typeof a.since !== 'string')
         return null;
+    // Present but unreadable is NOT "unnarrowed": that would widen the feed past what was
+    // asked for, and a vouched one past anything the principal could read.
+    const within = a.within === undefined ? undefined : readLiveWithin(a.within);
+    if (a.within !== undefined && !within)
+        return null;
     return {
         principal: a.principal,
         tenantId: a.tenantId,
         scopeId: a.scopeId,
         since: a.since,
+        ...(within ? { within } : {}),
     };
 }
 /**

package/dist/live-reads.js.map

@@ -1 +1 @@
-{"version":3,"file":"live-reads.js","sourceRoot":"","sources":["../src/live-reads.ts"],"names":[],"mappings":"AAaA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAEzD;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,gBAAgB,EAAoB,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAmB9C;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,CAAC,GAAG,UAA8D,CAAC;IACzE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAwB;QACrC,QAAQ,EAAE,CAAC,CAAC,QAAoB;QAChC,OAAO,EAAE,CAAC,CAAC,OAAkB;QAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,2FAA2F;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;AACjD,CAAC"}
+{"version":3,"file":"live-reads.js","sourceRoot":"","sources":["../src/live-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,aAAa,EAAiE,MAAM,yBAAyB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAsB,MAAM,sBAAsB,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAa3D,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,CAAC,GAAG,KAAmD,CAAC;IAC9D,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1E,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAA6C;IACxE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,SAAS,IAAK,MAAiB,EAAE,CAAC;QAC9C,MAAM,aAAa,CACjB,mBAAmB,EACnB,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;AACpE,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,gBAAgB,EAAoB,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAqB9C;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,CAAC,GAAG,UAA8D,CAAC;IACzE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,sFAAsF;IACtF,uEAAuE;IACvE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAwB;QACrC,QAAQ,EAAE,CAAC,CAAC,QAAoB;QAChC,OAAO,EAAE,CAAC,CAAC,OAAkB;QAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,2FAA2F;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;AACjD,CAAC"}

package/dist/scope-do.d.ts

@@ -1,6 +1,6 @@
 import { DurableObject } from 'cloudflare:workers';
-import { type WireFailure } from '@substrat-run/contracts';
 import { type SwitchSql, type ModuleRegistration, type OperationHandler } from '@substrat-run/kernel';
+import { type DoReply } from './do-reply.js';
 /**
  * `defineScopeDO` — one Durable Object per scope, the CF analogue of a single
  * `SqliteScopeHost` scope runtime (D-14). It closes over a CODE-TIME module set
@@ -38,12 +38,7 @@ export type TenantVerdict = 'recorded' | 'inferred' | 'foreign' | 'unknown';
  * What a capability attachment verb (#1686) answers: its value, or its failure as DATA —
  * `invoke`'s envelope discipline, since a throw across the RPC keeps only its message.
  */
-export type CapabilityAttachmentReply<T> = {
-    value: T;
-    failure?: undefined;
-} | {
-    failure: WireFailure;
-};
+export type CapabilityAttachmentReply<T> = DoReply<T>;
 /**
  * The kernel's two-method SQL handle (`SwitchSql`) over a Durable Object's storage — what the
  * shared switch rules (#1666) and the directory's switch record (#1674) run through. One

package/dist/scope-do.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-do.d.ts","sourceRoot":"","sources":["../src/scope-do.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAcL,KAAK,WAAW,EAyCjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAuCL,KAAK,SAAS,EAsBd,KAAK,kBAAkB,EAEvB,KAAK,gBAAgB,EAsFtB,MAAM,sBAAsB,CAAC;AAgG9B;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAwED,oFAAoF;AACpF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAqhB5E;;;GAGG;AACH,MAAM,MAAM,yBAAyB,CAAC,CAAC,IAAI;IAAE,KAAK,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAgDxG;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAOxD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAwDxD;AAkBD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,GACxD,KAAK,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,KAAK,aAAa,CAs2LjE"}
+{"version":3,"file":"scope-do.d.ts","sourceRoot":"","sources":["../src/scope-do.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAyDnD,OAAO,EAoDL,KAAK,SAAS,EAsBd,KAAK,kBAAkB,EAEvB,KAAK,gBAAgB,EA8FtB,MAAM,sBAAsB,CAAC;AAwC9B,OAAO,EAAW,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AA8EtD;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAwED,oFAAoF;AACpF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAyhB5E;;;GAGG;AACH,MAAM,MAAM,yBAAyB,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;AAgDtD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAOxD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAwDxD;AAkBD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,GACxD,KAAK,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,KAAK,aAAa,CAotMjE"}