@ai-matrx/media 0.8.0 → 0.9.0

package/dist/files/engine/support/claimsUser.d.ts

@@ -0,0 +1,77 @@
+import { AuthError, type JWK, type JwtPayload, type SupabaseClient, type UserAppMetadata, type UserMetadata } from "@supabase/supabase-js";
+/**
+ * The verified caller, built from the access token's claims.
+ *
+ * Every field here IS a JWT claim. `id` is `sub`, restated under the name every
+ * call site already reads. `app_metadata` / `user_metadata` are defaulted to
+ * `{}` so a reader never has to null-check what `getUser()` always handed it.
+ */
+export interface ApiClaimsUser extends JwtPayload {
+    /** The `sub` claim — the user id. */
+    id: string;
+    app_metadata: UserAppMetadata;
+    user_metadata: UserMetadata;
+}
+/** Any Supabase client — the only thing this door needs is `auth.getClaims`. */
+export type ClaimsCapableClient = {
+    auth: Pick<SupabaseClient["auth"], "getClaims">;
+};
+/**
+ * `client.auth.getUser()` without the auth-server round trip.
+ *
+ * Returns the SAME envelope `getUser()` does — `{ data: { user }, error }` —
+ * with ONE deliberate distinction the round trip never drew:
+ *
+ *  - CONFIRMED SIGNED OUT (no session, no token) → `{ user: null, error: null }`.
+ *    That is a settled fact, and a route is entitled to say "sign in again"
+ *    rather than "try again later".
+ *  - COULD NOT VERIFY (auth server / JWKS unreachable, a malformed or
+ *    badly-signed token, any other verification failure, or a token that
+ *    verified but carries no `sub`) → the `error` is kept, so a retry branch
+ *    still fires and a screen never paints "signed out" over an outage.
+ *
+ * Pass `jwt` when the token is in hand (a Bearer header) rather than a cookie.
+ */
+export declare function getClaimsUser(client: ClaimsCapableClient, jwt?: string, 
+/**
+ * Known public signing keys to verify against BEFORE any JWKS fetch
+ * (`projectSigningKeys.ts`). A key not listed falls through to the fetched
+ * JWKS, so this can only remove a network call, never change a verdict.
+ */
+options?: {
+    jwks: {
+        keys: JWK[];
+    };
+}): Promise<{
+    data: {
+        user: ApiClaimsUser | null;
+    };
+    error: AuthError | null;
+}>;
+/**
+ * Is this `getClaims()` error an authority we could not REACH, as opposed to a
+ * token we could reach a verdict on?
+ *
+ * 🚨 THIS IS THE LINE `authUnavailable` DRAWS, and getting it wrong is costly in
+ * BOTH directions:
+ *
+ *  - Too NARROW (only transport, but missing a case) → a real outage reads as a
+ *    logout: signed-in people bounced to /login by a network blink.
+ *  - Too WIDE (any error at all) → a genuinely BAD token — forged, corrupted,
+ *    signed by a rotated key — reads as an outage. The person is then held on
+ *    "reload in a moment" forever and NEVER told to sign in again, while the
+ *    proxy, which draws the line correctly, bounces the same request to /login.
+ *    Two halves of the app disagreeing about one request is worse than either
+ *    answer alone. Verified live on 2026-09-21 by presenting a badly-signed
+ *    token: the proxy redirected to /login while `getServerAuth` was calling it
+ *    `authUnavailable`.
+ *
+ * This MIRRORS `isAuthTransportFailure` in `@ai-matrx/data/next`, which the
+ * package does not currently export (0.18.0). Keep the two in step; if they
+ * ever disagree, the package is right — it is what the proxy runs on.
+ */
+export declare function isAuthTransportFailure(error: AuthError): boolean;
+/** Is this `getClaims()` error the settled fact "nobody is signed in"? */
+export declare function isSignedOutError(error: AuthError): boolean;
+/** The verified claims as a `{ id, ... }` user, or `null` when there are none. */
+export declare function userFromClaims(claims: JwtPayload | undefined): ApiClaimsUser | null;

package/dist/files/engine/support/claimsUser.js

@@ -0,0 +1,48 @@
+import {
+  AuthError,
+  AuthSessionMissingError
+} from "@supabase/supabase-js";
+async function getClaimsUser(client, jwt, options) {
+  const { data, error } = options ? await client.auth.getClaims(jwt, options) : await client.auth.getClaims(jwt);
+  if (error) {
+    if (isSignedOutError(error)) return { data: { user: null }, error: null };
+    return { data: { user: null }, error };
+  }
+  if (!data?.claims) return { data: { user: null }, error: null };
+  const user = userFromClaims(data.claims);
+  if (!user) {
+    return {
+      data: { user: null },
+      error: new AuthError("Verified token carries no `sub` claim", 401, "bad_jwt")
+    };
+  }
+  return { data: { user }, error: null };
+}
+function isAuthTransportFailure(error) {
+  const name = String(error.name ?? "");
+  if (name === "AuthRetryableFetchError" || name === "TimeoutError" || name === "AbortError") {
+    return true;
+  }
+  const status = error.status;
+  if (status === 0 || status === 504 || status === 503) return true;
+  return status === 408 || error.code === "auth_budget_exhausted";
+}
+function isSignedOutError(error) {
+  return error instanceof AuthSessionMissingError || error.name === "AuthSessionMissingError" || error.code === "session_not_found";
+}
+function userFromClaims(claims) {
+  if (!claims || typeof claims.sub !== "string") return null;
+  return {
+    ...claims,
+    id: claims.sub,
+    app_metadata: claims.app_metadata ?? {},
+    user_metadata: claims.user_metadata ?? {}
+  };
+}
+export {
+  getClaimsUser,
+  isAuthTransportFailure,
+  isSignedOutError,
+  userFromClaims
+};
+//# sourceMappingURL=claimsUser.js.map

package/dist/files/engine/support/claimsUser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/files/engine/support/claimsUser.ts"],"sourcesContent":["// utils/supabase/claimsUser.ts — THE identity read every server and client\n// path shares. Verifies the access token LOCALLY (WebCrypto against the\n// project's cached JWKS; the main project signs ES256) and never asks the\n// auth server who the caller is.\n//\n// This file imports nothing from `next/headers`, so a Client Component, a\n// hook, a Server Action, a layout and an API route can all use it. The\n// server-only conveniences (`getServerAuth`, `resolveUser`) are thin wrappers\n// over this one function.\n//\n// 🚨 `getClaims()`, NEVER `getUser()`. `getUser()` is one network round trip\n// to the auth server PER CALL, with auth-js retrying a stalled refresh for up\n// to 30s. On 2026-09-20 that put `504 MIDDLEWARE_INVOCATION_TIMEOUT` in front\n// of real people; on 2026-09-21 a locked database did it again to every page\n// whose layout still called it. The whole class is closed by construction:\n// `.auth.getUser(` may exist in exactly the files `check:proxy-auth-hot-path`\n// allow-lists, and those wrap it as `fetchAuthUserRecord` — the ONE door for\n// the fields the JWT does not carry (`created_at`, `identities`,\n// `last_sign_in_at`, `*_confirmed_at`, `factors`) and for a read-after-write of\n// `auth.updateUser`.\n//\n// Contract: `common-docs/systems/platform/auth/proxy-identity/FEATURE.md`.\n\nimport {\n  AuthError,\n  AuthSessionMissingError,\n  type JWK,\n  type JwtPayload,\n  type SupabaseClient,\n  type UserAppMetadata,\n  type UserMetadata,\n} from \"@supabase/supabase-js\";\n\n/**\n * The verified caller, built from the access token's claims.\n *\n * Every field here IS a JWT claim. `id` is `sub`, restated under the name every\n * call site already reads. `app_metadata` / `user_metadata` are defaulted to\n * `{}` so a reader never has to null-check what `getUser()` always handed it.\n */\nexport interface ApiClaimsUser extends JwtPayload {\n  /** The `sub` claim — the user id. */\n  id: string;\n  app_metadata: UserAppMetadata;\n  user_metadata: UserMetadata;\n}\n\n/** Any Supabase client — the only thing this door needs is `auth.getClaims`. */\nexport type ClaimsCapableClient = {\n  auth: Pick<SupabaseClient[\"auth\"], \"getClaims\">;\n};\n\n/**\n * `client.auth.getUser()` without the auth-server round trip.\n *\n * Returns the SAME envelope `getUser()` does — `{ data: { user }, error }` —\n * with ONE deliberate distinction the round trip never drew:\n *\n *  - CONFIRMED SIGNED OUT (no session, no token) → `{ user: null, error: null }`.\n *    That is a settled fact, and a route is entitled to say \"sign in again\"\n *    rather than \"try again later\".\n *  - COULD NOT VERIFY (auth server / JWKS unreachable, a malformed or\n *    badly-signed token, any other verification failure, or a token that\n *    verified but carries no `sub`) → the `error` is kept, so a retry branch\n *    still fires and a screen never paints \"signed out\" over an outage.\n *\n * Pass `jwt` when the token is in hand (a Bearer header) rather than a cookie.\n */\nexport async function getClaimsUser(\n  client: ClaimsCapableClient,\n  jwt?: string,\n  /**\n   * Known public signing keys to verify against BEFORE any JWKS fetch\n   * (`projectSigningKeys.ts`). A key not listed falls through to the fetched\n   * JWKS, so this can only remove a network call, never change a verdict.\n   */\n  options?: { jwks: { keys: JWK[] } },\n): Promise<{ data: { user: ApiClaimsUser | null }; error: AuthError | null }> {\n  const { data, error } = options\n    ? await client.auth.getClaims(jwt, options)\n    : await client.auth.getClaims(jwt);\n  // supabase-js reports \"there is no session here\" as AuthSessionMissingError.\n  // That is an answer, not an outage.\n  if (error) {\n    if (isSignedOutError(error)) return { data: { user: null }, error: null };\n    return { data: { user: null }, error };\n  }\n\n  // No claims at all: getClaims() ran, found no token to verify, and said so.\n  if (!data?.claims) return { data: { user: null }, error: null };\n\n  const user = userFromClaims(data.claims);\n  // A token that VERIFIED but carries no subject is malformed, not signed out.\n  if (!user) {\n    return {\n      data: { user: null },\n      error: new AuthError(\"Verified token carries no `sub` claim\", 401, \"bad_jwt\"),\n    };\n  }\n  return { data: { user }, error: null };\n}\n\n/**\n * Is this `getClaims()` error an authority we could not REACH, as opposed to a\n * token we could reach a verdict on?\n *\n * 🚨 THIS IS THE LINE `authUnavailable` DRAWS, and getting it wrong is costly in\n * BOTH directions:\n *\n *  - Too NARROW (only transport, but missing a case) → a real outage reads as a\n *    logout: signed-in people bounced to /login by a network blink.\n *  - Too WIDE (any error at all) → a genuinely BAD token — forged, corrupted,\n *    signed by a rotated key — reads as an outage. The person is then held on\n *    \"reload in a moment\" forever and NEVER told to sign in again, while the\n *    proxy, which draws the line correctly, bounces the same request to /login.\n *    Two halves of the app disagreeing about one request is worse than either\n *    answer alone. Verified live on 2026-09-21 by presenting a badly-signed\n *    token: the proxy redirected to /login while `getServerAuth` was calling it\n *    `authUnavailable`.\n *\n * This MIRRORS `isAuthTransportFailure` in `@ai-matrx/data/next`, which the\n * package does not currently export (0.18.0). Keep the two in step; if they\n * ever disagree, the package is right — it is what the proxy runs on.\n */\nexport function isAuthTransportFailure(error: AuthError): boolean {\n  const name = String(error.name ?? \"\");\n  if (name === \"AuthRetryableFetchError\" || name === \"TimeoutError\" || name === \"AbortError\") {\n    return true;\n  }\n  const status = error.status;\n  if (status === 0 || status === 504 || status === 503) return true;\n  // 408 / `auth_budget_exhausted` is the synthetic answer `createAuthBudget`\n  // returns once the request's 2.5s identity budget is spent.\n  return status === 408 || error.code === \"auth_budget_exhausted\";\n}\n\n/** Is this `getClaims()` error the settled fact \"nobody is signed in\"? */\nexport function isSignedOutError(error: AuthError): boolean {\n  return (\n    error instanceof AuthSessionMissingError ||\n    error.name === \"AuthSessionMissingError\" ||\n    error.code === \"session_not_found\"\n  );\n}\n\n/** The verified claims as a `{ id, ... }` user, or `null` when there are none. */\nexport function userFromClaims(claims: JwtPayload | undefined): ApiClaimsUser | null {\n  if (!claims || typeof claims.sub !== \"string\") return null;\n  return {\n    ...claims,\n    id: claims.sub,\n    app_metadata: claims.app_metadata ?? {},\n    user_metadata: claims.user_metadata ?? {},\n  };\n}\n"],"mappings":"AAuBA;AAAA,EACE;AAAA,EACA;AAAA,OAMK;AAqCP,eAAsB,cACpB,QACA,KAMA,SAC4E;AAC5E,QAAM,EAAE,MAAM,MAAM,IAAI,UACpB,MAAM,OAAO,KAAK,UAAU,KAAK,OAAO,IACxC,MAAM,OAAO,KAAK,UAAU,GAAG;AAGnC,MAAI,OAAO;AACT,QAAI,iBAAiB,KAAK,EAAG,QAAO,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,OAAO,KAAK;AACxE,WAAO,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,MAAM;AAAA,EACvC;AAGA,MAAI,CAAC,MAAM,OAAQ,QAAO,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,OAAO,KAAK;AAE9D,QAAM,OAAO,eAAe,KAAK,MAAM;AAEvC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,MAAM,EAAE,MAAM,KAAK;AAAA,MACnB,OAAO,IAAI,UAAU,yCAAyC,KAAK,SAAS;AAAA,IAC9E;AAAA,EACF;AACA,SAAO,EAAE,MAAM,EAAE,KAAK,GAAG,OAAO,KAAK;AACvC;AAwBO,SAAS,uBAAuB,OAA2B;AAChE,QAAM,OAAO,OAAO,MAAM,QAAQ,EAAE;AACpC,MAAI,SAAS,6BAA6B,SAAS,kBAAkB,SAAS,cAAc;AAC1F,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM;AACrB,MAAI,WAAW,KAAK,WAAW,OAAO,WAAW,IAAK,QAAO;AAG7D,SAAO,WAAW,OAAO,MAAM,SAAS;AAC1C;AAGO,SAAS,iBAAiB,OAA2B;AAC1D,SACE,iBAAiB,2BACjB,MAAM,SAAS,6BACf,MAAM,SAAS;AAEnB;AAGO,SAAS,eAAe,QAAsD;AACnF,MAAI,CAAC,UAAU,OAAO,OAAO,QAAQ,SAAU,QAAO;AACtD,SAAO;AAAA,IACL,GAAG;AAAA,IACH,IAAI,OAAO;AAAA,IACX,cAAc,OAAO,gBAAgB,CAAC;AAAA,IACtC,eAAe,OAAO,iBAAiB,CAAC;AAAA,EAC1C;AACF;","names":[]}

package/dist/files/engine/support/datetime.d.ts

@@ -0,0 +1,6 @@
+import { type TimestampInput } from "@ai-matrx/kit/format";
+/**
+ * Numeric comparison helper for sorting by timestamp. Unparseable values
+ * sort LAST regardless of direction (caller multiplies the sign).
+ */
+export declare function compareTimestamps(a: TimestampInput, b: TimestampInput): number;

package/dist/files/engine/support/datetime.js

@@ -0,0 +1,15 @@
+import { parseTimestamp } from "@ai-matrx/kit/format";
+function compareTimestamps(a, b) {
+  const ta = parseTimestamp(a)?.getTime() ?? NaN;
+  const tb = parseTimestamp(b)?.getTime() ?? NaN;
+  const aNan = Number.isNaN(ta);
+  const bNan = Number.isNaN(tb);
+  if (aNan && bNan) return 0;
+  if (aNan) return 1;
+  if (bNan) return -1;
+  return ta - tb;
+}
+export {
+  compareTimestamps
+};
+//# sourceMappingURL=datetime.js.map

package/dist/files/engine/support/datetime.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/files/engine/support/datetime.ts"],"sourcesContent":["import { parseTimestamp, type TimestampInput } from \"@ai-matrx/kit/format\";\n\n/**\n * Numeric comparison helper for sorting by timestamp. Unparseable values\n * sort LAST regardless of direction (caller multiplies the sign).\n */\nexport function compareTimestamps(a: TimestampInput, b: TimestampInput): number {\n  const ta = parseTimestamp(a)?.getTime() ?? NaN;\n  const tb = parseTimestamp(b)?.getTime() ?? NaN;\n  const aNan = Number.isNaN(ta);\n  const bNan = Number.isNaN(tb);\n  if (aNan && bNan) return 0;\n  if (aNan) return 1;\n  if (bNan) return -1;\n  return ta - tb;\n}\n"],"mappings":"AAAA,SAAS,sBAA2C;AAM7C,SAAS,kBAAkB,GAAmB,GAA2B;AAC9E,QAAM,KAAK,eAAe,CAAC,GAAG,QAAQ,KAAK;AAC3C,QAAM,KAAK,eAAe,CAAC,GAAG,QAAQ,KAAK;AAC3C,QAAM,OAAO,OAAO,MAAM,EAAE;AAC5B,QAAM,OAAO,OAAO,MAAM,EAAE;AAC5B,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,KAAM,QAAO;AACjB,MAAI,KAAM,QAAO;AACjB,SAAO,KAAK;AACd;","names":[]}

package/dist/files/engine/support/document-visibility.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Document visibility primitives. A hidden tab's network is frozen or
+ * throttled by the browser, so background work that runs (or times out) while
+ * hidden is work nobody watched: defer it to the moment the person returns.
+ * SSR-safe: with no `document`, the page counts as visible.
+ */
+export declare function isDocumentHidden(): boolean;
+/**
+ * Run `run` once, the next time the tab is visible (immediately if it already
+ * is). Returns a cancel that drops a run still waiting.
+ */
+export declare function onceDocumentVisible(run: () => void): () => void;
+/** Resolves the next time the tab is visible (now, if it already is). */
+export declare function whenDocumentVisible(): Promise<void>;

package/dist/files/engine/support/document-visibility.js

@@ -0,0 +1,28 @@
+function isDocumentHidden() {
+  return typeof document !== "undefined" && document.visibilityState === "hidden";
+}
+function onceDocumentVisible(run) {
+  if (!isDocumentHidden()) {
+    run();
+    return () => {
+    };
+  }
+  const onChange = () => {
+    if (isDocumentHidden()) return;
+    document.removeEventListener("visibilitychange", onChange);
+    run();
+  };
+  document.addEventListener("visibilitychange", onChange);
+  return () => document.removeEventListener("visibilitychange", onChange);
+}
+function whenDocumentVisible() {
+  return new Promise((resolve) => {
+    onceDocumentVisible(resolve);
+  });
+}
+export {
+  isDocumentHidden,
+  onceDocumentVisible,
+  whenDocumentVisible
+};
+//# sourceMappingURL=document-visibility.js.map

package/dist/files/engine/support/document-visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/files/engine/support/document-visibility.ts"],"sourcesContent":["/**\n * Document visibility primitives. A hidden tab's network is frozen or\n * throttled by the browser, so background work that runs (or times out) while\n * hidden is work nobody watched: defer it to the moment the person returns.\n * SSR-safe: with no `document`, the page counts as visible.\n */\n\nexport function isDocumentHidden(): boolean {\n  return (\n    typeof document !== \"undefined\" && document.visibilityState === \"hidden\"\n  );\n}\n\n/**\n * Run `run` once, the next time the tab is visible (immediately if it already\n * is). Returns a cancel that drops a run still waiting.\n */\nexport function onceDocumentVisible(run: () => void): () => void {\n  if (!isDocumentHidden()) {\n    run();\n    return () => {};\n  }\n  const onChange = () => {\n    if (isDocumentHidden()) return;\n    document.removeEventListener(\"visibilitychange\", onChange);\n    run();\n  };\n  document.addEventListener(\"visibilitychange\", onChange);\n  return () => document.removeEventListener(\"visibilitychange\", onChange);\n}\n\n/** Resolves the next time the tab is visible (now, if it already is). */\nexport function whenDocumentVisible(): Promise<void> {\n  return new Promise((resolve) => {\n    onceDocumentVisible(resolve);\n  });\n}\n"],"mappings":"AAOO,SAAS,mBAA4B;AAC1C,SACE,OAAO,aAAa,eAAe,SAAS,oBAAoB;AAEpE;AAMO,SAAS,oBAAoB,KAA6B;AAC/D,MAAI,CAAC,iBAAiB,GAAG;AACvB,QAAI;AACJ,WAAO,MAAM;AAAA,IAAC;AAAA,EAChB;AACA,QAAM,WAAW,MAAM;AACrB,QAAI,iBAAiB,EAAG;AACxB,aAAS,oBAAoB,oBAAoB,QAAQ;AACzD,QAAI;AAAA,EACN;AACA,WAAS,iBAAiB,oBAAoB,QAAQ;AACtD,SAAO,MAAM,SAAS,oBAAoB,oBAAoB,QAAQ;AACxE;AAGO,SAAS,sBAAqC;AACnD,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,wBAAoB,OAAO;AAAA,EAC7B,CAAC;AACH;","names":[]}

package/dist/files/engine/support/logger.d.ts

@@ -0,0 +1,28 @@
+/**
+ * lib/sync/logger.ts
+ *
+ * Single prefixed logger for the sync engine. Silent in production unless
+ * `?sync-debug=1` is in the URL or `localStorage.getItem('matrx:sync:debug') === '1'`.
+ *
+ * Phase 12 expands this into the debug-panel feed + observability hooks (Q8).
+ */
+interface LogEvent {
+    event: string;
+    sliceName?: string;
+    ms?: number;
+    meta?: Record<string, unknown>;
+}
+declare function isDebugEnabled(): boolean;
+export declare const logger: {
+    debug: (event: string, meta?: Omit<LogEvent, "event">) => void;
+    info: (event: string, meta?: Omit<LogEvent, "event">) => void;
+    warn: (event: string, meta?: Omit<LogEvent, "event">) => void;
+    error: (event: string, meta?: Omit<LogEvent, "event">) => void;
+};
+/** Visible for tests only. */
+export declare const __internal: {
+    DEBUG_FLAG_KEY: string;
+    DEBUG_URL_PARAM: string;
+    isDebugEnabled: typeof isDebugEnabled;
+};
+export {};

package/dist/files/engine/support/logger.js

@@ -0,0 +1,36 @@
+const DEBUG_FLAG_KEY = "matrx:sync:debug";
+const DEBUG_URL_PARAM = "sync-debug";
+function isDebugEnabled() {
+  if (true) return true;
+  if (typeof window === "undefined") return false;
+  try {
+    if (window.localStorage?.getItem(DEBUG_FLAG_KEY) === "1") return true;
+    const params = new URLSearchParams(window.location.search);
+    return params.get(DEBUG_URL_PARAM) === "1";
+  } catch {
+    return false;
+  }
+}
+function emit(level, evt) {
+  if (!isDebugEnabled() && level !== "error") return;
+  const line = `[sync] ${evt.event}`;
+  const payload = {};
+  if (evt.sliceName) payload.sliceName = evt.sliceName;
+  if (evt.ms != null) payload.ms = evt.ms;
+  if (evt.meta) Object.assign(payload, evt.meta);
+  const hasPayload = Object.keys(payload).length > 0;
+  const fn = console[level] ?? console.log;
+  hasPayload ? fn(line, payload) : fn(line);
+}
+const logger = {
+  debug: (event, meta) => emit("debug", { event, ...meta }),
+  info: (event, meta) => emit("info", { event, ...meta }),
+  warn: (event, meta) => emit("warn", { event, ...meta }),
+  error: (event, meta) => emit("error", { event, ...meta })
+};
+const __internal = { DEBUG_FLAG_KEY, DEBUG_URL_PARAM, isDebugEnabled };
+export {
+  __internal,
+  logger
+};
+//# sourceMappingURL=logger.js.map

package/dist/files/engine/support/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/files/engine/support/logger.ts"],"sourcesContent":["/**\n * lib/sync/logger.ts\n *\n * Single prefixed logger for the sync engine. Silent in production unless\n * `?sync-debug=1` is in the URL or `localStorage.getItem('matrx:sync:debug') === '1'`.\n *\n * Phase 12 expands this into the debug-panel feed + observability hooks (Q8).\n */\n\ntype LogLevel = \"debug\" | \"info\" | \"warn\" | \"error\";\n\ninterface LogEvent {\n    event: string;\n    sliceName?: string;\n    ms?: number;\n    meta?: Record<string, unknown>;\n}\n\nconst DEBUG_FLAG_KEY = \"matrx:sync:debug\";\nconst DEBUG_URL_PARAM = \"sync-debug\";\n\nfunction isDebugEnabled(): boolean {\n    if (process.env.NODE_ENV !== \"production\") return true;\n    if (typeof window === \"undefined\") return false;\n    try {\n        if (window.localStorage?.getItem(DEBUG_FLAG_KEY) === \"1\") return true;\n        const params = new URLSearchParams(window.location.search);\n        return params.get(DEBUG_URL_PARAM) === \"1\";\n    } catch {\n        return false;\n    }\n}\n\nfunction emit(level: LogLevel, evt: LogEvent): void {\n    if (!isDebugEnabled() && level !== \"error\") return;\n    const line = `[sync] ${evt.event}`;\n    const payload: Record<string, unknown> = {};\n    if (evt.sliceName) payload.sliceName = evt.sliceName;\n    if (evt.ms != null) payload.ms = evt.ms;\n    if (evt.meta) Object.assign(payload, evt.meta);\n    const hasPayload = Object.keys(payload).length > 0;\n    // eslint-disable-next-line no-console\n    const fn = console[level] ?? console.log;\n    hasPayload ? fn(line, payload) : fn(line);\n}\n\nexport const logger = {\n    debug: (event: string, meta?: Omit<LogEvent, \"event\">) => emit(\"debug\", { event, ...meta }),\n    info: (event: string, meta?: Omit<LogEvent, \"event\">) => emit(\"info\", { event, ...meta }),\n    warn: (event: string, meta?: Omit<LogEvent, \"event\">) => emit(\"warn\", { event, ...meta }),\n    error: (event: string, meta?: Omit<LogEvent, \"event\">) => emit(\"error\", { event, ...meta }),\n};\n\n/** Visible for tests only. */\nexport const __internal = { DEBUG_FLAG_KEY, DEBUG_URL_PARAM, isDebugEnabled };\n"],"mappings":"AAkBA,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAExB,SAAS,iBAA0B;AAC/B,MAAI,KAAuC,QAAO;AAClD,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACA,QAAI,OAAO,cAAc,QAAQ,cAAc,MAAM,IAAK,QAAO;AACjE,UAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACzD,WAAO,OAAO,IAAI,eAAe,MAAM;AAAA,EAC3C,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAEA,SAAS,KAAK,OAAiB,KAAqB;AAChD,MAAI,CAAC,eAAe,KAAK,UAAU,QAAS;AAC5C,QAAM,OAAO,UAAU,IAAI,KAAK;AAChC,QAAM,UAAmC,CAAC;AAC1C,MAAI,IAAI,UAAW,SAAQ,YAAY,IAAI;AAC3C,MAAI,IAAI,MAAM,KAAM,SAAQ,KAAK,IAAI;AACrC,MAAI,IAAI,KAAM,QAAO,OAAO,SAAS,IAAI,IAAI;AAC7C,QAAM,aAAa,OAAO,KAAK,OAAO,EAAE,SAAS;AAEjD,QAAM,KAAK,QAAQ,KAAK,KAAK,QAAQ;AACrC,eAAa,GAAG,MAAM,OAAO,IAAI,GAAG,IAAI;AAC5C;AAEO,MAAM,SAAS;AAAA,EAClB,OAAO,CAAC,OAAe,SAAmC,KAAK,SAAS,EAAE,OAAO,GAAG,KAAK,CAAC;AAAA,EAC1F,MAAM,CAAC,OAAe,SAAmC,KAAK,QAAQ,EAAE,OAAO,GAAG,KAAK,CAAC;AAAA,EACxF,MAAM,CAAC,OAAe,SAAmC,KAAK,QAAQ,EAAE,OAAO,GAAG,KAAK,CAAC;AAAA,EACxF,OAAO,CAAC,OAAe,SAAmC,KAAK,SAAS,EAAE,OAAO,GAAG,KAAK,CAAC;AAC9F;AAGO,MAAM,aAAa,EAAE,gBAAgB,iBAAiB,eAAe;","names":[]}