DF0036: RPC Call Rejected, Not Authorized

Message

RPC call to "{name}" was rejected: the caller is not authorized.

Cause

An authorize gate (set directly or via an auth handler) rejected the call: the session is untrusted and the method is not anonymous:-prefixed (see isAnonymousRpcMethod).

Example

// Handshake methods stay reachable before auth completes…
await client.call('anonymous:devframe:auth', { authToken: '', ua, origin })

// …but trusted methods throw until the handshake succeeds.
await client.call('some-plugin:do-something') // ✗ throws DF0036

Fix

• Complete the auth handshake before calling a trusted method.
• Connect with a static/pre-shared token (createInteractiveAuth's clientAuthTokens) for CI or shared machines.
• With a custom authorize, confirm it allows the method; it receives the method name and the session's meta.

Source

• packages/devframe/src/node/rpc-core.ts: createContextRpcServer's resolver throws this when authorize/auth.authorize rejects a call.