@substrat-run/contracts 0.135.0 → 0.137.0

package/dist/tenancy.d.ts

@@ -66,6 +66,115 @@ export declare const scopeStatus: z.ZodEnum<{
     suspended: "suspended";
 }>;
 export type ScopeStatus = z.infer<typeof scopeStatus>;
+/**
+ * The directory's revision of a scope's lifecycle (#1713), compared in order:
+ *
+ * - `epoch`: which history of the directory this is. Every directory restore mints a newer one,
+ *   so a restored directory, whose counters went back with it, still outranks everything the
+ *   history it replaced delivered. 0 for a directory never restored.
+ * - `scope` counts the scope's status transitions and `tenant` its tenant's status changes, each
+ *   bumped in the same directory transaction as the change it counts.
+ *
+ * A deployment keeps a delivery from a newer epoch whatever its counters; within one epoch, only
+ * one strictly newer on one counter and older on neither. Never a clock.
+ */
+export declare const lifecycleRevision: z.ZodObject<{
+    epoch: z.ZodNumber;
+    scope: z.ZodNumber;
+    tenant: z.ZodNumber;
+}, z.core.$strip>;
+export type LifecycleRevision = z.infer<typeof lifecycleRevision>;
+/**
+ * A scope's lifecycle as the directory holds it, delivered to the deployment that serves it
+ * (#1713). A CP-less vertical has no directory to read, so the platform pushes this on every
+ * transition and its heal sweep re-pushes any scope whose last delivered state differs. It is a
+ * STATE, never a toggle, ordered by `revision`: the deployment keeps only a delivery strictly
+ * newer than the one it holds, so a late delivery cannot undo a later one. `at` is when the
+ * platform read the directory, kept for the reader and never compared.
+ */
+export declare const scopeLifecycle: z.ZodObject<{
+    scope: z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        archiving: "archiving";
+        provisioning: "provisioning";
+        reaped: "reaped";
+        suspended: "suspended";
+    }>;
+    tenant: z.ZodEnum<{
+        active: "active";
+        deleting: "deleting";
+        reaped: "reaped";
+        suspended: "suspended";
+    }>;
+    at: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    revision: z.ZodObject<{
+        epoch: z.ZodNumber;
+        scope: z.ZodNumber;
+        tenant: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ScopeLifecycle = z.infer<typeof scopeLifecycle>;
+/**
+ * A lifecycle as a scope may HOLD it: one delivered before revisions existed carries none, and is
+ * older than any delivery that does. Its statuses still hold the scope.
+ */
+export declare const storedScopeLifecycle: z.ZodObject<{
+    scope: z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        archiving: "archiving";
+        provisioning: "provisioning";
+        reaped: "reaped";
+        suspended: "suspended";
+    }>;
+    tenant: z.ZodEnum<{
+        active: "active";
+        deleting: "deleting";
+        reaped: "reaped";
+        suspended: "suspended";
+    }>;
+    at: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    revision: z.ZodOptional<z.ZodObject<{
+        epoch: z.ZodNumber;
+        scope: z.ZodNumber;
+        tenant: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type StoredScopeLifecycle = z.infer<typeof storedScopeLifecycle>;
+/**
+ * What a deployment answers a lifecycle delivery with (#1713). `applied`: the delivery is now the
+ * stored state (false when the scope already held one as new or newer). `changed`: whether the
+ * scope's work is held now moved with it. `lifecycle`: what the scope holds after the call.
+ */
+export declare const lifecycleDelivery: z.ZodObject<{
+    applied: z.ZodBoolean;
+    changed: z.ZodBoolean;
+    lifecycle: z.ZodObject<{
+        scope: z.ZodEnum<{
+            active: "active";
+            archived: "archived";
+            archiving: "archiving";
+            provisioning: "provisioning";
+            reaped: "reaped";
+            suspended: "suspended";
+        }>;
+        tenant: z.ZodEnum<{
+            active: "active";
+            deleting: "deleting";
+            reaped: "reaped";
+            suspended: "suspended";
+        }>;
+        at: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+        revision: z.ZodOptional<z.ZodObject<{
+            epoch: z.ZodNumber;
+            scope: z.ZodNumber;
+            tenant: z.ZodNumber;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    tenantRecorded: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type LifecycleDelivery = z.infer<typeof lifecycleDelivery>;
 export declare const storageShape: z.ZodEnum<{
     A: "A";
     B: "B";

package/dist/tenancy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenancy.d.ts","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,YAAY;;;;;EAevB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,MAAM;;;;;;;;;;;;;iBAiBjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAM5C,eAAO,MAAM,iBAAiB;;;;;iBAEoC,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,GAAG;;;;;;iBAMd,CAAC;AACH,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;AAGtC,eAAO,MAAM,cAAc;;;;;iBAAiE,CAAC;AAC7F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,WAAW;;;;;;;EAYtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY;;;EAAqB,CAAC;AAC/C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAcxD,eAAO,MAAM,YAAY;;;;EAAiC,CAAC;AAC3D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAUxD,eAAO,MAAM,yBAAyB;;EAAqB,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,eAAO,MAAM,gBAAgB;;;;;kBAAoC,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAS7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgFhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC"}
+{"version":3,"file":"tenancy.d.ts","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,YAAY;;;;;EAevB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,MAAM;;;;;;;;;;;;;iBAiBjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAM5C,eAAO,MAAM,iBAAiB;;;;;iBAEoC,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,GAAG;;;;;;iBAMd,CAAC;AACH,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;AAGtC,eAAO,MAAM,cAAc;;;;;iBAAiE,CAAC;AAC7F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,WAAW;;;;;;;EAYtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;iBAAoE,CAAC;AACtG,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAU5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAGlE,eAAO,MAAM,YAAY;;;EAAqB,CAAC;AAC/C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAcxD,eAAO,MAAM,YAAY;;;;EAAiC,CAAC;AAC3D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAUxD,eAAO,MAAM,yBAAyB;;EAAqB,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,eAAO,MAAM,gBAAgB;;;;;kBAAoC,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAS7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgFhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC"}

package/dist/tenancy.js

@@ -77,6 +77,58 @@ export const scopeStatus = z.enum([
     // missing scope. Reached only from `archived` via the audited `reapScope` action.
     'reaped',
 ]);
+/**
+ * The directory's revision of a scope's lifecycle (#1713), compared in order:
+ *
+ * - `epoch`: which history of the directory this is. Every directory restore mints a newer one,
+ *   so a restored directory, whose counters went back with it, still outranks everything the
+ *   history it replaced delivered. 0 for a directory never restored.
+ * - `scope` counts the scope's status transitions and `tenant` its tenant's status changes, each
+ *   bumped in the same directory transaction as the change it counts.
+ *
+ * A deployment keeps a delivery from a newer epoch whatever its counters; within one epoch, only
+ * one strictly newer on one counter and older on neither. Never a clock.
+ */
+export const lifecycleRevision = z.object({
+    epoch: z.number().int().nonnegative(),
+    scope: z.number().int().nonnegative(),
+    tenant: z.number().int().nonnegative(),
+});
+/**
+ * A scope's lifecycle as the directory holds it, delivered to the deployment that serves it
+ * (#1713). A CP-less vertical has no directory to read, so the platform pushes this on every
+ * transition and its heal sweep re-pushes any scope whose last delivered state differs. It is a
+ * STATE, never a toggle, ordered by `revision`: the deployment keeps only a delivery strictly
+ * newer than the one it holds, so a late delivery cannot undo a later one. `at` is when the
+ * platform read the directory, kept for the reader and never compared.
+ */
+export const scopeLifecycle = z.object({
+    scope: scopeStatus,
+    tenant: tenantStatus,
+    at: instant,
+    revision: lifecycleRevision,
+});
+/**
+ * A lifecycle as a scope may HOLD it: one delivered before revisions existed carries none, and is
+ * older than any delivery that does. Its statuses still hold the scope.
+ */
+export const storedScopeLifecycle = scopeLifecycle.extend({ revision: lifecycleRevision.optional() });
+/**
+ * What a deployment answers a lifecycle delivery with (#1713). `applied`: the delivery is now the
+ * stored state (false when the scope already held one as new or newer). `changed`: whether the
+ * scope's work is held now moved with it. `lifecycle`: what the scope holds after the call.
+ */
+export const lifecycleDelivery = z.object({
+    applied: z.boolean(),
+    changed: z.boolean(),
+    lifecycle: storedScopeLifecycle,
+    /**
+     * #2016: whether the scope holds a record of its tenant (`provisioned_for`) after the call. The
+     * platform keeps delivering to a scope that answers false until it answers true. Absent from a
+     * deployment built before it, which reads as not recorded.
+     */
+    tenantRecorded: z.boolean().optional(),
+});
 // §5.2 of the design doc: A = DO-embedded SQLite is primary; B = DO control plane + D1
 export const storageShape = z.enum(['A', 'B']);
 // Fixed at provisioning; a DO can never relocate (design K-7). `global` is the

package/dist/tenancy.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenancy.js","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC;IACjC,QAAQ;IACR,WAAW;IACX,sFAAsF;IACtF,oFAAoF;IACpF,qFAAqF;IACrF,sFAAsF;IACtF,UAAU;IACV,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,mFAAmF;IACnF,uFAAuF;IACvF,4EAA4E;IAC5E,QAAQ;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,QAAQ;IACZ,IAAI;IACJ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,OAAO;IAClB,qFAAqF;IACrF,gFAAgF;IAChF,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,oFAAoF;IACpF,sFAAsF;IACtF,qFAAqF;IACrF,kFAAkF;IAClF,gFAAgF;IAChF,qFAAqF;IACrF,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAGH,sFAAsF;AACtF,sFAAsF;AACtF,qFAAqF;AACrF,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM;KACpC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;KAC1C,MAAM,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAGnE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,EAAE,EAAE,KAAK;IACT,QAAQ;IACR,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC;AAGH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAG7F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,cAAc;IACd,QAAQ;IACR,WAAW;IACX,WAAW;IACX,UAAU;IACV,8EAA8E;IAC9E,oFAAoF;IACpF,kFAAkF;IAClF,sFAAsF;IACtF,kFAAkF;IAClF,QAAQ;CACT,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAG/C,+EAA+E;AAC/E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,6EAA6E;AAC7E,kFAAkF;AAClF,6EAA6E;AAC7E,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3D,gFAAgF;AAChF,8EAA8E;AAC9E,kFAAkF;AAClF,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,iFAAiF;AACjF,sBAAsB;AACtB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kCAAkC;IAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,6CAA6C;IACpF,aAAa,EAAE,OAAO;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,EAAE,CAAC;AAGlE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ;IACR,OAAO;IACP,IAAI;IACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,EAAE,gBAAgB,EAAE,uCAAuC;IAClE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,OAAO,EAAE,6EAA6E;IAC1F,QAAQ;IACR,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,4DAA4D;IAC/F,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qEAAqE;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW;IACnB,YAAY;IACZ,YAAY;IACZ,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,4DAA4D;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC;;;;;;;OAOG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;;;;;;;;;;;;OAeG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,6EAA6E;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,+EAA+E;IAC/E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,gBAAgB;IAChB;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC5B;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC7B;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;IACvC;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC"}
+{"version":3,"file":"tenancy.js","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC;IACjC,QAAQ;IACR,WAAW;IACX,sFAAsF;IACtF,oFAAoF;IACpF,qFAAqF;IACrF,sFAAsF;IACtF,UAAU;IACV,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,mFAAmF;IACnF,uFAAuF;IACvF,4EAA4E;IAC5E,QAAQ;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,QAAQ;IACZ,IAAI;IACJ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,OAAO;IAClB,qFAAqF;IACrF,gFAAgF;IAChF,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,oFAAoF;IACpF,sFAAsF;IACtF,qFAAqF;IACrF,kFAAkF;IAClF,gFAAgF;IAChF,qFAAqF;IACrF,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAGH,sFAAsF;AACtF,sFAAsF;AACtF,qFAAqF;AACrF,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM;KACpC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;KAC1C,MAAM,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAGnE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,EAAE,EAAE,KAAK;IACT,QAAQ;IACR,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC;AAGH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAG7F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,cAAc;IACd,QAAQ;IACR,WAAW;IACX,WAAW;IACX,UAAU;IACV,8EAA8E;IAC9E,oFAAoF;IACpF,kFAAkF;IAClF,sFAAsF;IACtF,kFAAkF;IAClF,QAAQ;CACT,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACvC,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,YAAY;IACpB,EAAE,EAAE,OAAO;IACX,QAAQ,EAAE,iBAAiB;CAC5B,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAGtG;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,oBAAoB;IAC/B;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAG/C,+EAA+E;AAC/E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,6EAA6E;AAC7E,kFAAkF;AAClF,6EAA6E;AAC7E,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3D,gFAAgF;AAChF,8EAA8E;AAC9E,kFAAkF;AAClF,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,iFAAiF;AACjF,sBAAsB;AACtB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kCAAkC;IAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,6CAA6C;IACpF,aAAa,EAAE,OAAO;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,EAAE,CAAC;AAGlE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ;IACR,OAAO;IACP,IAAI;IACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,EAAE,gBAAgB,EAAE,uCAAuC;IAClE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,OAAO,EAAE,6EAA6E;IAC1F,QAAQ;IACR,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,4DAA4D;IAC/F,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qEAAqE;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW;IACnB,YAAY;IACZ,YAAY;IACZ,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,4DAA4D;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC;;;;;;;OAOG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;;;;;;;;;;;;OAeG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,6EAA6E;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,+EAA+E;IAC/E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,gBAAgB;IAChB;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC5B;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC7B;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;IACvC;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC"}

package/dist/wire-headers.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Wire names shared by the router, the platform and a vertical: the headers a request or a
+ * response carries between them (#1978).
+ *
+ * Constants rather than code, so they sit in the shared vocabulary rather than in the
+ * kernel, and every end that has to spell one imports it from here. This module imports
+ * nothing, which is what lets the platform's entry bundle (`withInvocationLog`) reach it
+ * through `@substrat-run/contracts/wire-headers` without pulling the rest of this package,
+ * and zod, in behind it.
+ */
+/** The header the platform presents. */
+export declare const PLATFORM_SECRET_HEADER = "x-substrat-platform";
+/**
+ * The RESPONSE header carrying an attachment's metadata record when the vertical
+ * hands its bytes back over the connector seam (#711).
+ *
+ * The bytes are the body — a rendered contract is megabytes, and base64 in a JSON
+ * envelope would inflate and re-encode it on both ends for nothing. The record is
+ * small, fixed-shape and needs no streaming, so it rides a header. Not a secret and
+ * not a privilege: the caller has already passed the platform-secret gate, and the
+ * far end has already run the permission check that decided it may see any of this.
+ */
+export declare const CONNECTOR_ATTACHMENT_RECORD_HEADER = "x-substrat-attachment";
+/**
+ * The RESPONSE header a vertical sets when the operation it just ran enqueued
+ * platform requests (`ctx.requestPlatform`). The router — the one hop that sees
+ * every response — reads it and kicks an immediate drain of that scope (#381),
+ * so provisioning settles in seconds instead of at the sweep. Carries no payload
+ * and no privilege: a forged or spurious flag costs the platform one wasted
+ * pull, nothing more. Fed by `ScopeStubOptions.onPlatformRequests` (#458).
+ */
+export declare const PLATFORM_REQUEST_HEADER = "x-substrat-platform-request";
+/**
+ * The RESPONSE header a vertical sets when the operation it just ran committed an event of a
+ * type this deployment EXPORTS to other verticals (#1705). The router reads it beside
+ * {@link PLATFORM_REQUEST_HEADER} and asks the control plane to run this producer's outgoing
+ * edges now, so a consumer in another vertical receives the event in seconds rather than at
+ * the next sweep. Like its sibling it carries no payload and no privilege: the control plane
+ * takes the tenant and scope from the route the router resolved, never from the response, and a
+ * spurious flag costs one pass over that producer's own edges. The router strips every
+ * `x-substrat-*` header from an inbound request, so only a response can raise it. Fed by
+ * `ScopeStubOptions.onExportedEvents`.
+ */
+export declare const EXPORTED_EVENTS_HEADER = "x-substrat-exported-events";
+/**
+ * Set on every refusal a live-read door returns, so a client can tell "no push here,
+ * poll" from "your request was wrong" without parsing a body or guessing from a status.
+ *
+ * Here rather than in the hosted adapter because both ends of a refusal need to spell it
+ * the same way: the hosted adapter sets it on its own refusals, and a vertical's mount
+ * sets it on the pure host's `501` (the ask-don't-assume recipe on `ScopeHost.liveReads`).
+ * A dev server should not have to import the Cloudflare adapter to say "poll".
+ */
+export declare const LIVE_MODE_HEADER = "x-substrat-live";
+/** Why a subscription was refused — the value of `LIVE_MODE_HEADER` on a refusal. */
+export type LiveRefusal = 
+/** This host or connection cannot carry a WebSocket; the client should keep polling. */
+'poll'
+/** The request was not an upgrade at all — a programming error at the caller. */
+ | 'not-an-upgrade';
+/**
+ * The RESPONSE header on `/internal/export` carrying the scope store's load stamp, read in the
+ * same call as the dump it rides beside (#1722). A carry's fenced wipe of the copy it leaves
+ * behind expects exactly this stamp, so the wipe is refused when anything was loaded into the
+ * store since. The stamp itself never travels inside a dump.
+ */
+export declare const LOAD_STAMP_HEADER = "x-substrat-load-stamp";
+/**
+ * The RESPONSE header on `/internal/export` carrying the scope store's write revision, read in
+ * the same call as the dump and the load stamp (#1722). The carry's fenced wipe of the copy it
+ * leaves expects it too, so a write that reached the old copy after the export (a request still
+ * routed there before the bind) refuses the wipe and the copy is kept for recovery.
+ */
+export declare const WRITE_REVISION_HEADER = "x-substrat-write-revision";
+//# sourceMappingURL=wire-headers.d.ts.map

package/dist/wire-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-headers.d.ts","sourceRoot":"","sources":["../src/wire-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,wCAAwC;AACxC,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,0BAA0B,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAErE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AAEnE;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAElD,qFAAqF;AACrF,MAAM,MAAM,WAAW;AACrB,wFAAwF;AACtF,MAAM;AACR,iFAAiF;GAC/E,gBAAgB,CAAC;AAErB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC"}

package/dist/wire-headers.js

@@ -0,0 +1,69 @@
+/**
+ * Wire names shared by the router, the platform and a vertical: the headers a request or a
+ * response carries between them (#1978).
+ *
+ * Constants rather than code, so they sit in the shared vocabulary rather than in the
+ * kernel, and every end that has to spell one imports it from here. This module imports
+ * nothing, which is what lets the platform's entry bundle (`withInvocationLog`) reach it
+ * through `@substrat-run/contracts/wire-headers` without pulling the rest of this package,
+ * and zod, in behind it.
+ */
+/** The header the platform presents. */
+export const PLATFORM_SECRET_HEADER = 'x-substrat-platform';
+/**
+ * The RESPONSE header carrying an attachment's metadata record when the vertical
+ * hands its bytes back over the connector seam (#711).
+ *
+ * The bytes are the body — a rendered contract is megabytes, and base64 in a JSON
+ * envelope would inflate and re-encode it on both ends for nothing. The record is
+ * small, fixed-shape and needs no streaming, so it rides a header. Not a secret and
+ * not a privilege: the caller has already passed the platform-secret gate, and the
+ * far end has already run the permission check that decided it may see any of this.
+ */
+export const CONNECTOR_ATTACHMENT_RECORD_HEADER = 'x-substrat-attachment';
+/**
+ * The RESPONSE header a vertical sets when the operation it just ran enqueued
+ * platform requests (`ctx.requestPlatform`). The router — the one hop that sees
+ * every response — reads it and kicks an immediate drain of that scope (#381),
+ * so provisioning settles in seconds instead of at the sweep. Carries no payload
+ * and no privilege: a forged or spurious flag costs the platform one wasted
+ * pull, nothing more. Fed by `ScopeStubOptions.onPlatformRequests` (#458).
+ */
+export const PLATFORM_REQUEST_HEADER = 'x-substrat-platform-request';
+/**
+ * The RESPONSE header a vertical sets when the operation it just ran committed an event of a
+ * type this deployment EXPORTS to other verticals (#1705). The router reads it beside
+ * {@link PLATFORM_REQUEST_HEADER} and asks the control plane to run this producer's outgoing
+ * edges now, so a consumer in another vertical receives the event in seconds rather than at
+ * the next sweep. Like its sibling it carries no payload and no privilege: the control plane
+ * takes the tenant and scope from the route the router resolved, never from the response, and a
+ * spurious flag costs one pass over that producer's own edges. The router strips every
+ * `x-substrat-*` header from an inbound request, so only a response can raise it. Fed by
+ * `ScopeStubOptions.onExportedEvents`.
+ */
+export const EXPORTED_EVENTS_HEADER = 'x-substrat-exported-events';
+/**
+ * Set on every refusal a live-read door returns, so a client can tell "no push here,
+ * poll" from "your request was wrong" without parsing a body or guessing from a status.
+ *
+ * Here rather than in the hosted adapter because both ends of a refusal need to spell it
+ * the same way: the hosted adapter sets it on its own refusals, and a vertical's mount
+ * sets it on the pure host's `501` (the ask-don't-assume recipe on `ScopeHost.liveReads`).
+ * A dev server should not have to import the Cloudflare adapter to say "poll".
+ */
+export const LIVE_MODE_HEADER = 'x-substrat-live';
+/**
+ * The RESPONSE header on `/internal/export` carrying the scope store's load stamp, read in the
+ * same call as the dump it rides beside (#1722). A carry's fenced wipe of the copy it leaves
+ * behind expects exactly this stamp, so the wipe is refused when anything was loaded into the
+ * store since. The stamp itself never travels inside a dump.
+ */
+export const LOAD_STAMP_HEADER = 'x-substrat-load-stamp';
+/**
+ * The RESPONSE header on `/internal/export` carrying the scope store's write revision, read in
+ * the same call as the dump and the load stamp (#1722). The carry's fenced wipe of the copy it
+ * leaves expects it too, so a write that reached the old copy after the export (a request still
+ * routed there before the bind) refuses the wipe and the copy is kept for recovery.
+ */
+export const WRITE_REVISION_HEADER = 'x-substrat-write-revision';
+//# sourceMappingURL=wire-headers.js.map

package/dist/wire-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-headers.js","sourceRoot":"","sources":["../src/wire-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,wCAAwC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,uBAAuB,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAErE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AASlD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/contracts",
-  "version": "0.135.0",
+  "version": "0.137.0",
   "description": "Substrat kernel contract schemas — Zod is the source of truth (master plan D-22); OAS/JSON Schema are emitted artifacts",
   "license": "Apache-2.0",
   "repository": {
@@ -20,6 +20,10 @@
     "./invocation-record": {
       "types": "./dist/invocation-record.d.ts",
       "default": "./dist/invocation-record.js"
+    },
+    "./wire-headers": {
+      "types": "./dist/wire-headers.d.ts",
+      "default": "./dist/wire-headers.js"
     }
   },
   "files": [