@blotout/qinto-cli 0.1.30 → 0.1.31

package/dist/worker-artifact/main/index.js

@@ -21071,6 +21071,7 @@ var endpointSchema = external_exports.object({
 var eventsSchema = external_exports.object({
   publishes: external_exports.array(external_exports.string().min(1).max(MAX_EVENT_TOPIC_LENGTH).regex(EVENT_TOPIC)).max(MAX_PUBLISHED_TOPICS).default([])
 }).strict();
+var dependenciesSchema = external_exports.array(external_exports.object({ app: external_exports.string().regex(APP_SLUG_PATTERN), description: renderableText(1, 200).optional() }).strict()).max(10);
 var rpcSchema = external_exports.object({
   exposes: external_exports.array(external_exports.object({ name: external_exports.string().regex(FUNCTION_NAME).max(64), visibility: external_exports.enum(["public", "private"]) }).strict()).max(32).optional(),
   calls: external_exports.array(external_exports.object({ app: external_exports.string().regex(APP_SLUG_PATTERN), fn: external_exports.string().regex(FUNCTION_NAME).max(64) }).strict()).max(64).optional()
@@ -21114,6 +21115,9 @@ var baseSchema = external_exports.object({
     description: "The app's browser surface: an optional entry for the bundle that ships inside the site's q.js, and the query params and cookies it declares for capture."
   }),
   resources: external_exports.array(resourceSchema).max(32).default([]).meta({ description: "The Cloudflare bindings the app worker is given." }),
+  dependencies: dependenciesSchema.optional().meta({
+    description: "The apps this app needs on the same site. Every app it calls over RPC must be listed."
+  }),
   rpc: rpcSchema.optional().meta({ description: "The functions this app exposes to other apps, and the ones it calls on them." }),
   events: eventsSchema.optional().meta({
     description: "The push topics this app broadcasts to every app on the site. Requires the `sharedContext` data capability; a topic left out reaches only this app\u2019s own browser code."
@@ -21430,12 +21434,33 @@ var validateRpc = /* @__PURE__ */ __name((manifest, ctx) => {
     ["rpc", "exposes"],
     "function"
   );
+  const dependencies = new Set((manifest.dependencies ?? []).map((dependency) => dependency.app));
   for (const [index, call] of (manifest.rpc?.calls ?? []).entries()) {
     if (call.app === manifest.slug) {
       ctx.addIssue({ code: "custom", path: ["rpc", "calls", index, "app"], message: "An app cannot declare an RPC call to itself" });
+    } else if (!dependencies.has(call.app)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["rpc", "calls", index, "app"],
+        message: `${call.app} is called over RPC, so it must be in dependencies. Add { "app": "${call.app}" } to dependencies; if your Qinto CLI rejects that field, upgrade it.`
+      });
     }
   }
 }, "validateRpc");
+var validateDependencies = /* @__PURE__ */ __name((manifest, ctx) => {
+  const dependencies = manifest.dependencies ?? [];
+  uniqueOrIssue(
+    ctx,
+    dependencies.map((dependency) => dependency.app),
+    ["dependencies"],
+    "dependency"
+  );
+  for (const [index, dependency] of dependencies.entries()) {
+    if (dependency.app === manifest.slug) {
+      ctx.addIssue({ code: "custom", path: ["dependencies", index, "app"], message: "An app cannot depend on itself" });
+    }
+  }
+}, "validateDependencies");
 var validateServer = /* @__PURE__ */ __name((manifest, ctx) => {
   uniqueOrIssue(ctx, manifest.server.hooks.transform, ["server", "hooks", "transform"], "transform hook");
   uniqueOrIssue(ctx, manifest.server.hooks.onEvent, ["server", "hooks", "onEvent"], "event hook");
@@ -21483,6 +21508,7 @@ var appManifestSchema = baseSchema.superRefine((manifest, ctx) => {
   validateEndpoints(manifest, ctx);
   validateCapture(manifest, ctx);
   validateBrowserHooks(manifest, ctx);
+  validateDependencies(manifest, ctx);
   validateRpc(manifest, ctx);
   validateEvents(manifest, ctx);
   validateOauth(manifest, ctx);
@@ -21511,6 +21537,44 @@ var storageLinkBindingName = /* @__PURE__ */ __name((domainId) => {
 }, "storageLinkBindingName");
 var MAX_APPS_Q_BYTES = 4 * 1024 * 1024;
 
+// ../../libs/app-envelope/src/geo.ts
+var cfString = external_exports.string().optional().catch(void 0);
+var requestGeoSchema = external_exports.object({
+  country: cfString,
+  city: cfString,
+  region: cfString,
+  regionCode: cfString,
+  timezone: cfString,
+  postalCode: cfString,
+  continent: cfString,
+  latitude: cfString,
+  longitude: cfString,
+  isEUCountry: cfString,
+  botManagement: external_exports.object({
+    ja4: cfString,
+    ja3Hash: cfString,
+    score: external_exports.number().optional().catch(void 0),
+    verifiedBot: external_exports.boolean().optional().catch(void 0)
+  }).optional().catch(void 0)
+});
+var userGeoSchema = external_exports.object({
+  ip: external_exports.string().optional(),
+  userAgent: external_exports.string().optional(),
+  timezone: external_exports.string().optional(),
+  city: external_exports.string().optional(),
+  postalCode: external_exports.string().optional(),
+  region: external_exports.string().optional(),
+  regionCode: external_exports.string().optional(),
+  country: external_exports.string().optional(),
+  continent: external_exports.string().optional(),
+  isEUCountry: external_exports.string().optional(),
+  latitude: external_exports.string().optional(),
+  longitude: external_exports.string().optional(),
+  ja4: external_exports.string().optional(),
+  ja3: external_exports.string().optional(),
+  botScore: external_exports.string().optional()
+});
+
 // ../../libs/app-envelope/src/envelope.ts
 var ENVELOPE_VERSION = 3;
 var ENVELOPE_ERROR_CODES = ["invalid_arguments"];
@@ -21588,11 +21652,21 @@ var envelopeRequestSchema = external_exports.object({
     anonId: external_exports.string().min(1).max(64),
     globalId: external_exports.string().min(1).max(64).nullable(),
     createdAt: external_exports.number().int().optional(),
-    properties: external_exports.record(external_exports.string(), external_exports.unknown()),
-    geo: external_exports.record(external_exports.string(), external_exports.string()).optional()
+    properties: external_exports.record(external_exports.string(), external_exports.string()),
+    geo: userGeoSchema.optional()
+  }).strict().optional(),
+  consent: external_exports.object({
+    enabled: external_exports.boolean(),
+    categories: external_exports.object({
+      necessary: external_exports.literal(true),
+      functional: external_exports.boolean(),
+      analytics: external_exports.boolean(),
+      marketing: external_exports.boolean(),
+      salesOfData: external_exports.boolean()
+    }),
+    apps: external_exports.record(external_exports.string(), external_exports.boolean())
   }).strict().optional(),
-  consent: external_exports.object({ enabled: external_exports.boolean(), categories: external_exports.record(external_exports.string(), external_exports.boolean()), apps: external_exports.record(external_exports.string(), external_exports.boolean()) }).strict().optional(),
-  geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  geo: requestGeoSchema.optional(),
   // Connect envelopes only: the page the visitor's socket opened from, and the visit session it joined.
   page: pageSchema.optional(),
   session: sessionSchema.optional(),
@@ -21900,7 +21974,7 @@ var endpointContextSchema = external_exports.object({
   method: external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
   mode: external_exports.enum(["webhook", "api"]),
   version: external_exports.string().min(1).max(32),
-  geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  geo: requestGeoSchema.optional(),
   installs: external_exports.array(installSchema3).min(1).max(15),
   user: external_exports.object({ anonId: external_exports.string().min(1).max(64) }).strict().optional()
 }).strict().refine((context) => {
@@ -26665,6 +26739,26 @@ var siteRefOf = /* @__PURE__ */ __name(({ domainId, fingerprint }) => {
 
 // ../../libs/cf-data/src/cf-data.ts
 var CF_DATA_HEADER = "x-cf-data";
+var cfDataFrom = /* @__PURE__ */ __name((cf) => {
+  return {
+    country: cf?.country,
+    city: cf?.city,
+    region: cf?.region,
+    regionCode: cf?.regionCode,
+    timezone: cf?.timezone,
+    postalCode: cf?.postalCode,
+    continent: cf?.continent,
+    longitude: cf?.longitude,
+    latitude: cf?.latitude,
+    isEUCountry: cf?.isEUCountry,
+    botManagement: {
+      ja4: cf?.botManagement?.ja4,
+      ja3Hash: cf?.botManagement?.ja3Hash,
+      score: cf?.botManagement?.score,
+      verifiedBot: cf?.botManagement?.verifiedBot
+    }
+  };
+}, "cfDataFrom");
 var parseCfData = /* @__PURE__ */ __name((raw2) => {
   if (raw2 === null) {
     return void 0;
@@ -28125,7 +28219,7 @@ var BOT_SCORE_MIN = 1;
 var BOT_SCORE_MAX = 99;
 
 // ../../libs/bot-protection/src/config.ts
-var NO_PROTECTION = { minBotScore: null, countries: null };
+var NO_PROTECTION = { minBotScore: null, countries: null, blockVerifiedBots: false };
 var normalizeScore = /* @__PURE__ */ __name((value, problems) => {
   if (value === void 0 || value === null) {
     return null;
@@ -28159,6 +28253,13 @@ var normalizeCountries = /* @__PURE__ */ __name((value, problems) => {
   }
   return list.length === 0 ? null : { mode: record2.mode, list };
 }, "normalizeCountries");
+var normalizeBlockVerifiedBots = /* @__PURE__ */ __name((value, problems) => {
+  if (value === void 0 || typeof value === "boolean") {
+    return value ?? false;
+  }
+  problems.push("has a non-boolean blockVerifiedBots");
+  return false;
+}, "normalizeBlockVerifiedBots");
 var parseBotProtection = /* @__PURE__ */ __name((raw2) => {
   if (raw2.trim() === "") {
     return { config: NO_PROTECTION };
@@ -28176,15 +28277,19 @@ var parseBotProtection = /* @__PURE__ */ __name((raw2) => {
   const problems = [];
   const config2 = {
     minBotScore: normalizeScore(record2.minBotScore, problems),
-    countries: normalizeCountries(record2.countries, problems)
+    countries: normalizeCountries(record2.countries, problems),
+    blockVerifiedBots: normalizeBlockVerifiedBots(record2.blockVerifiedBots, problems)
   };
   return problems.length > 0 ? { config: config2, error: `BOT_PROTECTION ${problems.join("; ")}` } : { config: config2 };
 }, "parseBotProtection");
 var isRequestBlocked = /* @__PURE__ */ __name((config2, signal) => {
-  if (config2.minBotScore !== null && signal.botScore !== void 0 && signal.botScore < config2.minBotScore) {
+  if (isCountryBlocked(signal.country, signal.isEU ?? false, config2.countries)) {
     return true;
   }
-  return isCountryBlocked(signal.country, signal.isEU ?? false, config2.countries);
+  if (signal.verifiedBot === true) {
+    return config2.blockVerifiedBots;
+  }
+  return config2.minBotScore !== null && signal.botScore !== void 0 && signal.botScore < config2.minBotScore;
 }, "isRequestBlocked");
 
 // ../../libs/geo-filter/src/us-states.ts
@@ -28583,7 +28688,7 @@ var buildEnvelope = /* @__PURE__ */ __name((target, trigger, snapshot, context)
       ...geoAllowed ? { geo: snapshot.userGeo } : {}
     },
     ...buckets.includes("consentState") ? { consent: { enabled: context.consentEnforced, categories: snapshot.consent.categories, apps: snapshot.consent.apps } } : {},
-    ...geoAllowed && currentGeo !== void 0 ? { geo: currentGeo } : {},
+    ...geoAllowed && currentGeo !== void 0 ? { geo: cfDataFrom(currentGeo) } : {},
     ...trigger.kind === "connect" && buckets.includes("eventContext") ? connectContext(trigger) : {},
     // Not gated on a capabilities.data bucket: an app only ever sees what it captured or wrote.
     ...captures === void 0 ? {} : { captures },
@@ -29765,7 +29870,7 @@ var streamWithDeadlines = /* @__PURE__ */ __name((source, { idleMs, totalMs }) =
 }, "streamWithDeadlines");
 
 // src/helpers/bot-check.ts
-var botRejected = /* @__PURE__ */ __name((env, geo) => {
+var botRejected = /* @__PURE__ */ __name((env, request, geo) => {
   return traced("bot.check", {}, () => {
     const { config: protection, error: error61 } = parseBotProtection(env.BOT_PROTECTION);
     if (error61 !== void 0) {
@@ -29774,8 +29879,19 @@ var botRejected = /* @__PURE__ */ __name((env, geo) => {
         attrs: { error: String(error61) }
       });
     }
-    const rejected = isRequestBlocked(protection, { botScore: geo.botScore, country: geo.country, isEU: geo.isEUCountry === "yes" });
-    setSpanAttributes({ "bot.blocked": rejected, ...geo.botScore === void 0 ? {} : { "bot.score": geo.botScore } });
+    const cf = request.cf;
+    const verifiedBot = cf?.botManagement?.verifiedBot;
+    const rejected = isRequestBlocked(protection, {
+      botScore: geo.botScore,
+      verifiedBot,
+      country: geo.country,
+      isEU: geo.isEUCountry === "yes"
+    });
+    setSpanAttributes({
+      "bot.blocked": rejected,
+      ...geo.botScore === void 0 ? {} : { "bot.score": geo.botScore },
+      ...verifiedBot === void 0 ? {} : { "bot.verified": verifiedBot }
+    });
     return rejected;
   });
 }, "botRejected");
@@ -29865,7 +29981,7 @@ var withCors = /* @__PURE__ */ __name((response, request, method) => {
 }, "withCors");
 var authorize = /* @__PURE__ */ __name(async (c, { slug, app: app2 }) => {
   const geo = geoFromRequest(c.req.raw);
-  if (await botRejected(c.env, geo)) {
+  if (await botRejected(c.env, c.req.raw, geo)) {
     return refuse(403, "traffic_rejected");
   }
   const anonId = getCookie(c, COOKIE_NAME2);
@@ -30064,7 +30180,7 @@ var runForwardToApp = /* @__PURE__ */ __name(async (c, input2) => {
       method: endpoint.method,
       mode: endpoint.mode,
       version: app2.version,
-      ...app2.data.includes("geo") && requestGeo !== void 0 ? { geo: requestGeo } : {},
+      ...app2.data.includes("geo") && requestGeo !== void 0 ? { geo: cfDataFrom(requestGeo) } : {},
       installs: installs.map((install) => ({ id: install.id, ord: install.ord, label: install.label })),
       ...anonId === void 0 ? {} : { user: { anonId } }
     })
@@ -30660,6 +30776,7 @@ var createApiRouter = /* @__PURE__ */ __name(() => new OpenAPIHono({ defaultHook
 var CONNECTION_CF_HEADER = "x-connection-cf";
 var SESSION_HEADER = "x-session";
 var GPC_HEADER = "x-gpc";
+var RECONNECT_HEADER = "x-reconnect";
 var OPEN_PAGE_PARAMS = ["url", "referrer"];
 var MAX_HOST_USER_AGENT_LENGTH = 512;
 var MAX_HOST_LOCALE_LENGTH = 64;
@@ -30671,6 +30788,7 @@ var INTERNAL_HEADERS = /* @__PURE__ */ new Set([
   CONNECTION_CF_HEADER,
   SESSION_HEADER,
   GPC_HEADER,
+  RECONNECT_HEADER,
   TRACE_HEADER,
   CF_DATA_HEADER
 ]);
@@ -30759,7 +30877,7 @@ var boundedHost = /* @__PURE__ */ __name((request) => {
   };
   return bounded.ip === void 0 && bounded.userAgent === void 0 && bounded.locale === void 0 ? void 0 : bounded;
 }, "boundedHost");
-var connectionAttachment = /* @__PURE__ */ __name((request, geo, siteId) => {
+var connectionAttachment = /* @__PURE__ */ __name((request, geo, { siteId, anonId }) => {
   const userAgent = request.headers.get("user-agent");
   const attrs = {
     "url.full": withoutQuery(request.url),
@@ -30775,7 +30893,7 @@ var connectionAttachment = /* @__PURE__ */ __name((request, geo, siteId) => {
   const sessionBytes = attachmentFieldBytes("session", session2);
   const gpc = request.headers.get(GPC_HEADER) === "1";
   const gpcBytes = attachmentFieldBytes("gpc", gpc ? true : void 0);
-  const siteBytes = attachmentFieldBytes("siteId", siteId);
+  const siteBytes = attachmentFieldBytes("siteId", siteId) + attachmentFieldBytes("anonId", anonId);
   const cf = forwardedCf(request);
   const cfSuffix = cf === void 0 ? "" : `,"cf":${JSON.stringify(cf)}`;
   const cfBytes = new TextEncoder().encode(cfSuffix).length;
@@ -30786,6 +30904,7 @@ var connectionAttachment = /* @__PURE__ */ __name((request, geo, siteId) => {
   return {
     ...budgeted,
     siteId,
+    anonId,
     ...session2 === void 0 ? {} : { session: session2 },
     ...browserGeo === void 0 ? {} : { browserGeo },
     ...includedCf === void 0 ? {} : { cf: includedCf },
@@ -30793,6 +30912,14 @@ var connectionAttachment = /* @__PURE__ */ __name((request, geo, siteId) => {
     ...gpc ? { gpc: true } : {}
   };
 }, "connectionAttachment");
+var attachmentGeo = /* @__PURE__ */ __name((attachment) => {
+  return {
+    // `cf` is the forwarded `request.cf`, kept as plain JSON on the socket.
+    ...geoFromCf(attachment.cf),
+    ip: attachment.host?.ip,
+    userAgent: attachment.host?.userAgent
+  };
+}, "attachmentGeo");
 
 // src/helpers/request-span.ts
 var OMITTED_HEADERS = /* @__PURE__ */ new Set(["authorization", DISPATCH_HEADER, CF_DATA_HEADER]);
@@ -31192,6 +31319,29 @@ var withSetCookie = /* @__PURE__ */ __name((res, cookies) => {
   }
   return out;
 }, "withSetCookie");
+var connectCookies = /* @__PURE__ */ __name(async (c, userId, session2) => {
+  const root = c.env.ROOT_DOMAIN;
+  const hostname3 = new URL(c.req.url).hostname;
+  const domain2 = root !== void 0 && root !== "" && (hostname3 === root || hostname3.endsWith(`.${root}`)) ? root : void 0;
+  const attributes = {
+    httpOnly: true,
+    // `wrangler types` narrows COOKIE_SAME_SITE to its dev default; deploys also set none.
+    sameSite: c.env.COOKIE_SAME_SITE,
+    secure: true,
+    path: "/",
+    maxAge: COOKIE_MAX_AGE
+  };
+  const cookies = [
+    generateCookie(COOKIE_NAME2, userId, { ...attributes, ...domain2 === void 0 ? {} : { domain: domain2 } }),
+    // Re-issued on every connect, which is what makes the session expire after 30 idle minutes.
+    generateCookie(SESSION_COOKIE_NAME, `${session2.id}.${session2.startedAt}`, { ...attributes, maxAge: SESSION_MAX_AGE })
+  ];
+  const signature = await signVisitor(c.env, userId);
+  if (signature !== void 0) {
+    cookies.push(generateCookie(VISITOR_SIGNATURE_COOKIE, signature, attributes));
+  }
+  return cookies;
+}, "connectCookies");
 var open2 = /* @__PURE__ */ __name(async (c) => {
   if (c.req.header("upgrade")?.toLowerCase() !== "websocket") {
     return c.text("expected websocket", 426);
@@ -31204,13 +31354,14 @@ var open2 = /* @__PURE__ */ __name(async (c) => {
     });
     return enriched;
   });
-  if (await botRejected(c.env, geo)) {
+  if (await botRejected(c.env, c.req.raw, geo)) {
     return c.text("traffic rejected", 403);
   }
   const existing = getCookie(c, COOKIE_NAME2);
+  const canonical = existing !== void 0 && isCanonicalId(existing);
   let isNewUser = false;
   let userId;
-  if (existing !== void 0 && isCanonicalId(existing)) {
+  if (canonical) {
     userId = existing;
   } else {
     const adopted = edgeTagUserId(c);
@@ -31236,6 +31387,10 @@ var open2 = /* @__PURE__ */ __name(async (c) => {
     headers.set(GPC_HEADER, "1");
     setSpanAttributes({ "qinto.gpc": true });
   }
+  headers.delete(RECONNECT_HEADER);
+  if (canonical && c.req.query("reconnect") === "1") {
+    headers.set(RECONNECT_HEADER, "1");
+  }
   const res = await traced("rpc anon.connect", {}, () => {
     headers.delete(TRACE_HEADER);
     const trace = currentTraceContext();
@@ -31244,27 +31399,7 @@ var open2 = /* @__PURE__ */ __name(async (c) => {
     }
     return anonStub(c.env, userId).fetch(new Request(c.req.url, { method: "GET", headers }));
   });
-  const root = c.env.ROOT_DOMAIN;
-  const hostname3 = new URL(c.req.url).hostname;
-  const domain2 = root !== void 0 && root !== "" && (hostname3 === root || hostname3.endsWith(`.${root}`)) ? root : void 0;
-  const attributes = {
-    httpOnly: true,
-    // `wrangler types` narrows COOKIE_SAME_SITE to its dev default; deploys also set none.
-    sameSite: c.env.COOKIE_SAME_SITE,
-    secure: true,
-    path: "/",
-    maxAge: COOKIE_MAX_AGE
-  };
-  const cookies = [
-    generateCookie(COOKIE_NAME2, userId, { ...attributes, ...domain2 === void 0 ? {} : { domain: domain2 } }),
-    // Re-issued on every connect, which is what makes the session expire after 30 idle minutes.
-    generateCookie(SESSION_COOKIE_NAME, `${session2.id}.${session2.startedAt}`, { ...attributes, maxAge: SESSION_MAX_AGE })
-  ];
-  const signature = await signVisitor(c.env, userId);
-  if (signature !== void 0) {
-    cookies.push(generateCookie(VISITOR_SIGNATURE_COOKIE, signature, attributes));
-  }
-  return withSetCookie(res, cookies);
+  return withSetCookie(res, await connectCookies(c, userId, session2));
 }, "open");
 
 // browser-artifact/meta.json
@@ -32476,13 +32611,15 @@ var cachedKv = /* @__PURE__ */ __name((kv) => {
 var VERSION_KEY = "schemaVersion";
 var applyMigrations = /* @__PURE__ */ __name((storage, migrations) => {
   const applied = storage.kv.get(VERSION_KEY) ?? 0;
-  for (const [index, migration] of migrations.entries()) {
-    if (index < applied) {
-      continue;
-    }
-    storage.sql.exec(migration);
-    storage.kv.put(VERSION_KEY, index + 1);
+  if (applied >= migrations.length) {
+    return;
   }
+  storage.transactionSync(() => {
+    for (const migration of migrations.slice(applied)) {
+      storage.sql.exec(migration);
+    }
+    storage.kv.put(VERSION_KEY, migrations.length);
+  });
 }, "applyMigrations");
 
 // src/id-graph/retention.ts
@@ -32768,15 +32905,15 @@ var seedMeta = /* @__PURE__ */ __name((kv, anonId, createdAt) => {
   kv.put(META_KEY, { anonId, linkedGlobalId: null, linkedAt: null, createdAt });
   return true;
 }, "seedMeta");
+var lastActivityAt = /* @__PURE__ */ __name((kv) => {
+  return kv.get(LAST_ACTIVITY_KEY) ?? kv.get(META_KEY)?.createdAt ?? null;
+}, "lastActivityAt");
 var touchActivity = /* @__PURE__ */ __name((kv, receivedAt) => {
-  const last = kv.get(LAST_ACTIVITY_KEY);
-  if (last === void 0 || receivedAt - last >= CLEANUP_INTERVAL_MS) {
+  const last = lastActivityAt(kv);
+  if (last === null || receivedAt - last >= CLEANUP_INTERVAL_MS) {
     kv.put(LAST_ACTIVITY_KEY, receivedAt);
   }
 }, "touchActivity");
-var lastActivityAt = /* @__PURE__ */ __name((kv) => {
-  return kv.get(LAST_ACTIVITY_KEY) ?? null;
-}, "lastActivityAt");
 var linkedGlobalId = /* @__PURE__ */ __name((kv) => {
   return kv.get(META_KEY)?.linkedGlobalId ?? null;
 }, "linkedGlobalId");
@@ -33010,7 +33147,7 @@ var standsDown = /* @__PURE__ */ __name(async (storage, staleActivity) => {
   if (lastActivity === staleActivity) {
     return false;
   }
-  await storage.setAlarm(cleanupTarget(storage, Date.now(), lastActivity ?? Date.now()));
+  await storage.setAlarm(cleanupTarget(storage, Date.now(), lastActivity));
   return true;
 }, "standsDown");
 var relink = /* @__PURE__ */ __name(async (storage, env, anonId, globalId) => {
@@ -33029,7 +33166,7 @@ var relink = /* @__PURE__ */ __name(async (storage, env, anonId, globalId) => {
     addSpanEvent("expiry relink failed", { level: "warn", attrs: { "anon.id": anonId, "global.id": globalId, error: String(error61) } });
   }
   if (mutated) {
-    await storage.setAlarm(cleanupTarget(storage, Date.now(), lastActivityAt(storage.kv) ?? Date.now()));
+    await storage.setAlarm(cleanupTarget(storage, Date.now(), lastActivityAt(storage.kv)));
   }
 }, "relink");
 var unlinkFromPerson = /* @__PURE__ */ __name((env, anonId, globalId) => {
@@ -33588,10 +33725,9 @@ var AnonDO = class extends DurableObject2 {
   // In memory on purpose: a hibernated socket sent nothing, so a fresh bucket on wake is the right one.
   frameBuckets = /* @__PURE__ */ new WeakMap();
   emitBudget = createTokenBucket(EMIT_BURST, EMITS_PER_SECOND);
-  // deleteAll removes the live schema; only a later write recreates it.
+  stored;
+  // This instance deleted the visitor's storage; only a later write recreates it.
   wiped = false;
-  // True while processAction holds ingestQueue, including the transform await.
-  ingestTurn = false;
   // Warm write-through mirrors reset together after an expiry or an erase.
   kvCache;
   cachedStorage;
@@ -33607,7 +33743,6 @@ var AnonDO = class extends DurableObject2 {
   sites;
   constructor(ctx, env) {
     super(ctx, env);
-    applyMigrations(ctx.storage, ANON_MIGRATIONS);
     this.kvCache = cachedKv(ctx.storage.kv);
     this.cachedStorage = { kv: this.kvCache, sql: ctx.storage.sql };
     this.graph = ownGraphEnv(ctx, env);
@@ -33630,32 +33765,29 @@ var AnonDO = class extends DurableObject2 {
     const trace = parseTraceContext(request.headers.get(TRACE_HEADER));
     return runInvocation({ name: "do.anon.connect", trace, attrs: connectAttrs(request, geo) }, async () => {
       const context = await this.sites.resolve({ domainId: siteId }, Date.now());
-      this.revive();
-      const now = Date.now();
-      this.cleanupAlarm = await seedCleanupAlarm(this.ctx.storage, now, lastActivityAt(this.kv) ?? now, this.cleanupAlarm);
-      seedMeta(this.kv, userId, now);
-      touchActivity(this.kv, now);
-      if (geo !== void 0 && !hasGeoRecord(this.kv)) {
-        this.seedGeoOnConnect(userId, geo, now);
+      if (this.isStored()) {
+        touchActivity(this.kv, Date.now());
       }
       const { 0: client, 1: server } = new WebSocketPair();
       this.ctx.acceptWebSocket(server, [siteId]);
-      const attachment = connectionAttachment(request, geo, siteId);
+      const attachment = connectionAttachment(request, geo, { siteId, anonId: userId });
       server.serializeAttachment(attachment);
       this.sendSharedContext([server], context);
-      const page = connectPage(request);
-      this.appFanOut(
-        {
-          kind: "connect",
-          ...attachment.cf === void 0 ? {} : { geo: attachment.cf },
-          host: attachment.host,
-          ...page === void 0 ? {} : { page },
-          ...attachment.session === void 0 ? {} : { session: attachment.session },
-          gpc: attachment.gpc
-        },
-        userId,
-        context
-      );
+      if (request.headers.get(RECONNECT_HEADER) !== "1") {
+        const page = connectPage(request);
+        this.appFanOut(
+          {
+            kind: "connect",
+            ...attachment.cf === void 0 ? {} : { geo: attachment.cf },
+            host: attachment.host,
+            ...page === void 0 ? {} : { page },
+            ...attachment.session === void 0 ? {} : { session: attachment.session },
+            gpc: attachment.gpc
+          },
+          userId,
+          context
+        );
+      }
       return new Response(null, { status: 101, webSocket: client });
     });
   }
@@ -33693,7 +33825,7 @@ var AnonDO = class extends DurableObject2 {
     }
     if (frame.t === "capture") {
       const { accepted } = await this.capture(
-        { apps: frame.apps, location: socketLocation(attachment.cf), gpc: attachment.gpc === true },
+        { anonId: userId, apps: frame.apps, location: socketLocation(attachment.cf), gpc: attachment.gpc === true },
         site
       );
       this.respond(ws, { t: "captureAck", ref, anonId: userId, accepted });
@@ -33738,7 +33870,8 @@ var AnonDO = class extends DurableObject2 {
   syncFromGlobal(snapshot, trace) {
     return runInvocation({ name: "do.anon.sync_from_global", trace, attrs: { "global.id": snapshot.globalId } }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        const anonId = storedAnonId(this.kv);
+        if (anonId === null) {
           addSpanEvent("snapshot dropped: no visitor state", { level: "warn", attrs: { "global.id": snapshot.globalId } });
           return;
         }
@@ -33746,7 +33879,7 @@ var AnonDO = class extends DurableObject2 {
           addSpanEvent("foreign snapshot dropped", { level: "warn", attrs: { "global.id": snapshot.globalId } });
           return;
         }
-        this.cleanupAlarm = await seedCleanupAlarm(this.ctx.storage, Date.now(), lastActivityAt(this.kv) ?? Date.now(), this.cleanupAlarm);
+        await this.storeVisitor(anonId, Date.now());
         await this.applyOutcome(applySnapshot(this.cachedStorage, snapshot, this.snapshotCaches()));
       });
     });
@@ -33763,7 +33896,7 @@ var AnonDO = class extends DurableObject2 {
         this.respond(ws, { t: "error", ref: parsed.ref, message: "invalid message" });
         return;
       }
-      const userId = storedAnonId(this.kv);
+      const userId = attachment?.anonId ?? null;
       setSpanAttributes(frameSpanAttrs(parsed.frame, userId));
       if (parsed.frame.t === "getConsent") {
         this.respond(ws, this.consentReply(parsed.ref, userId));
@@ -33813,10 +33946,6 @@ var AnonDO = class extends DurableObject2 {
     };
     return runInvocation({ name: "do.anon.app_push", trace, attrs }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
-          addSpanEvent("app push dropped: no visitor state", { level: "warn", attrs: { app: push.slug } });
-          return;
-        }
         this.deliverAppPush(push, await this.sites.resolve(site, Date.now()));
       });
     });
@@ -33836,26 +33965,19 @@ var AnonDO = class extends DurableObject2 {
   // so a value the caps refused must never be reported as stored.
   capture(input2, site, trace) {
     return runInvocation({ name: "do.anon.capture", trace }, () => {
-      return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
-          addSpanEvent("capture dropped: no visitor state", { level: "warn" });
-          return { accepted: {} };
-        }
-        return this.runCaptures(input2.apps, site, { location: input2.location, gpc: input2.gpc });
+      return this.enqueue(() => {
+        return this.runCaptures(input2.anonId, input2.apps, site, { location: input2.location, gpc: input2.gpc });
       });
     });
   }
-  // The server door. There is no connect to have seeded the visitor, and a migrated visitor can
-  // carry click ids before any identify, so unlike the socket this one creates the profile.
+  // A migrated visitor can carry click ids before any identify, so this door creates the profile.
   serverCapture(input2, site, trace) {
     return runInvocation({ name: "do.anon.server_capture", trace }, () => {
       return this.enqueue(async () => {
-        this.revive();
         const now = Date.now();
-        this.cleanupAlarm = await seedCleanupAlarm(this.ctx.storage, now, lastActivityAt(this.kv) ?? now, this.cleanupAlarm);
-        seedMeta(this.kv, input2.anonId, now);
+        await this.storeVisitor(input2.anonId, now);
         touchActivity(this.kv, now);
-        return this.runCaptures(input2.apps, site, { location: null, gpc: false });
+        return this.runCaptures(input2.anonId, input2.apps, site, { location: null, gpc: false });
       });
     });
   }
@@ -33864,7 +33986,8 @@ var AnonDO = class extends DurableObject2 {
   appCaptures(input2, site, trace) {
     return runInvocation({ name: "do.anon.app_captures", trace, attrs: { "app.slug": input2.slug } }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        const anonId = this.visitorId();
+        if (anonId === null) {
           addSpanEvent("capture dropped: no visitor state", { level: "warn", attrs: { app: input2.slug } });
           return;
         }
@@ -33877,7 +34000,8 @@ var AnonDO = class extends DurableObject2 {
         })) {
           return;
         }
-        this.storeCaptures(
+        await this.storeCaptures(
+          anonId,
           input2.writes.map((write) => {
             return { ...write, appId: input2.slug, source: "app", ttlMs: declaredTtlMs(context.registry, input2.slug, write.key) };
           })
@@ -33885,7 +34009,7 @@ var AnonDO = class extends DurableObject2 {
       });
     });
   }
-  async runCaptures(apps, site, { location, gpc }) {
+  async runCaptures(anonId, apps, site, { location, gpc }) {
     const context = await this.sites.resolve(site, Date.now());
     const writes = acceptedCaptures(context.registry, apps, {
       consent: consentState2(this.kv),
@@ -33893,13 +34017,13 @@ var AnonDO = class extends DurableObject2 {
       gpc,
       location
     });
-    return { accepted: this.storeCaptures(writes) };
+    return { accepted: await this.storeCaptures(anonId, writes) };
   }
-  storeCaptures(writes) {
+  async storeCaptures(anonId, writes) {
     if (writes.length === 0) {
       return {};
     }
-    this.revive();
+    await this.storeVisitor(anonId, Date.now());
     const accepted = {};
     const stored = writeCaptures(this.sql, writes, Date.now(), this.captureMirror);
     for (const write of stored) {
@@ -33915,7 +34039,8 @@ var AnonDO = class extends DurableObject2 {
   appContext(input2, site, trace) {
     return runInvocation({ name: "do.anon.app_context", trace, attrs: { "app.slug": input2.slug } }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        const anonId = this.visitorId();
+        if (anonId === null) {
           addSpanEvent("context dropped: no visitor state", { level: "warn", attrs: { app: input2.slug } });
           return [];
         }
@@ -33940,15 +34065,18 @@ var AnonDO = class extends DurableObject2 {
           }
           return true;
         });
-        return this.storeContext(writes.map((write) => ({ ...write, appId: input2.slug })));
+        return this.storeContext(
+          anonId,
+          writes.map((write) => ({ ...write, appId: input2.slug }))
+        );
       });
     });
   }
-  async storeContext(writes) {
+  async storeContext(anonId, writes) {
     if (writes.length === 0) {
       return [];
     }
-    this.revive();
+    await this.storeVisitor(anonId, Date.now());
     const stored = [];
     for (const write of writes) {
       if (writeContext(this.sql, [write], Date.now(), this.contextMirror).length === 0) {
@@ -33966,7 +34094,7 @@ var AnonDO = class extends DurableObject2 {
     return stored;
   }
   hasSharedContext() {
-    return !this.wiped && Object.keys(allContext(this.sql, "shared", this.contextMirror)).length > 0;
+    return this.isStored() && Object.keys(allContext(this.sql, "shared", this.contextMirror)).length > 0;
   }
   // Shared context is the level every app may read, so the browser gets it too — the connecting
   // socket on open, every socket on a change. Private never leaves the server. The connect frame is
@@ -33974,7 +34102,7 @@ var AnonDO = class extends DurableObject2 {
   // context from one that has not arrived yet.
   sendSharedContext(sockets, context) {
     const consent2 = consentState2(this.kv);
-    const stored = allContext(this.sql, "shared", this.contextMirror);
+    const stored = this.isStored() ? allContext(this.sql, "shared", this.contextMirror) : {};
     for (const socket of sockets) {
       const { gpc } = socket.deserializeAttachment();
       sendFrame(socket, sharedContextFrame(context, consent2, stored, gpc === true));
@@ -34002,12 +34130,10 @@ var AnonDO = class extends DurableObject2 {
       }
     }
   }
-  // A read must not resurrect a visitor: an rpc or workflow asking about an expired or unknown anon
-  // would otherwise leave an empty object behind that no cleanup alarm collects.
   getAppContext(slug, site, trace) {
     return runInvocation({ name: "do.anon.get_app_context", trace, attrs: { "app.slug": slug } }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        if (!this.isStored()) {
           return readableContext(void 0, {});
         }
         const context = await this.sites.resolve(site, Date.now());
@@ -34026,20 +34152,18 @@ var AnonDO = class extends DurableObject2 {
       });
     });
   }
-  // Committed projection: must not join ingestQueue (a transform that lists facts holds that slot)
-  // and must not discardIfUnused during an ingest turn (meta is seeded after the transform).
+  // Must not join ingestQueue: a transform that lists facts holds that slot.
   getAppFacts(slug, query, site, trace) {
     return runInvocation({ name: "do.anon.get_app_facts", trace, attrs: { "app.slug": slug } }, async () => {
       const context = await this.sites.resolve(site, Date.now());
-      const unused = this.ingestTurn ? false : await this.discardIfUnused();
       const app2 = context.registry.apps[slug];
-      if (unused || app2 === void 0 || !app2.data.includes("facts")) {
+      if (app2 === void 0 || !app2.data.includes("facts")) {
         return null;
       }
       if (!consentAllows(consentState2(this.kv), slug, app2.consent.category, { enforced: context.consentEnforced, gpc: false })) {
         return null;
       }
-      if (this.wiped) {
+      if (!this.isStored()) {
         return { items: [], next: null };
       }
       return listAppFacts(this.sql, query, Date.now());
@@ -34074,8 +34198,7 @@ var AnonDO = class extends DurableObject2 {
       }
     }
   }
-  // A getConsent can arrive before the session is seeded, so the visitor is named only when there
-  // is one — the tag treats its absence as "cannot vouch for the memo" rather than as a match.
+  // No anonId tells the tag "cannot vouch for the memo", not a match.
   consentReply(ref, userId) {
     return { t: "consentState", ref, ...userId === null ? {} : { anonId: userId }, ...consentState2(this.kv) };
   }
@@ -34108,7 +34231,6 @@ var AnonDO = class extends DurableObject2 {
     return run;
   }
   async processAction(action, context) {
-    this.ingestTurn = true;
     let recorded = action;
     try {
       if (isNoopAction(action)) {
@@ -34122,12 +34244,15 @@ var AnonDO = class extends DurableObject2 {
       await this.runAction(transformed.action, transformed.releaseEmissions, context);
     } finally {
       this.recordActionBlocks(recorded, context);
-      this.ingestTurn = false;
     }
   }
   recordActionBlocks(action, context) {
     setSpanAttributes(
-      actionBlocks(action, this.appsSnapshot(action.userId, context), this.wiped ? [] : allIdentifiers(this.sql, this.identifiersMirror))
+      actionBlocks(
+        action,
+        this.appsSnapshot(action.userId, context),
+        this.isStored() ? allIdentifiers(this.sql, this.identifiersMirror) : []
+      )
     );
   }
   async runAction(current, releaseEmissions, context) {
@@ -34136,14 +34261,7 @@ var AnonDO = class extends DurableObject2 {
       this.releaseTransformEmissions(releaseEmissions);
       return;
     }
-    this.revive();
-    this.cleanupAlarm = await seedCleanupAlarm(
-      this.ctx.storage,
-      Date.now(),
-      lastActivityAt(this.kv) ?? current.receivedAt,
-      this.cleanupAlarm
-    );
-    seedMeta(this.kv, current.userId, current.receivedAt);
+    await this.storeVisitor(current.userId, current.receivedAt);
     touchActivity(this.kv, current.receivedAt);
     const novelIdentifier = this.recordIdentifiers(current);
     if (novelIdentifier && linkedGlobalId(this.kv) !== null) {
@@ -34200,16 +34318,15 @@ var AnonDO = class extends DurableObject2 {
   }
   appsSnapshot(anonId, context) {
     const meta3 = storedMeta(this.kv);
+    const stored = this.isStored();
     return {
       anonId,
       globalId: meta3?.linkedGlobalId ?? null,
-      createdAt: meta3?.createdAt ?? null,
+      createdAt: meta3?.createdAt ?? Date.now(),
       pii: userProperties(this.kv),
-      // A wipe dropped the sql tables, so reading them would throw — and reviving for a transform
-      // snapshot would strand recreated storage when the chain fails or drops.
-      custom: this.wiped ? {} : customProperties(this.sql, this.customPropsMirror),
-      captures: this.wiped ? {} : allCaptures(this.sql, Date.now(), this.captureMirror),
-      context: this.wiped ? { private: {}, shared: {} } : {
+      custom: stored ? customProperties(this.sql, this.customPropsMirror) : {},
+      captures: stored ? allCaptures(this.sql, Date.now(), this.captureMirror) : {},
+      context: !stored ? { private: {}, shared: {} } : {
         private: allContext(this.sql, "private", this.contextMirror),
         shared: readableSharedContext(
           context.registry,
@@ -34244,7 +34361,7 @@ var AnonDO = class extends DurableObject2 {
   getProperties(trace) {
     return runInvocation({ name: "do.anon.get_properties", trace }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        if (!this.isStored()) {
           return {};
         }
         return { ...userProperties(this.kv), ...customProperties(this.sql, this.customPropsMirror) };
@@ -34254,16 +34371,15 @@ var AnonDO = class extends DurableObject2 {
   getConsent(trace) {
     return runInvocation({ name: "do.anon.get_consent", trace }, () => {
       return this.enqueue(async () => {
-        await this.discardIfUnused();
         return consentState2(this.kv);
       });
     });
   }
-  // Null means no session: the id was never seeded or its profile expired, and the object it addressed is discarded.
+  // Null means no session: the id stored nothing yet or its profile expired.
   getPersonLink(trace) {
     return runInvocation({ name: "do.anon.get_person_link", trace }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        if (!this.isStored()) {
           return null;
         }
         return { globalId: linkedGlobalId(this.kv) };
@@ -34273,7 +34389,7 @@ var AnonDO = class extends DurableObject2 {
   getGlobalId(trace) {
     return runInvocation({ name: "do.anon.get_global_id", trace }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        if (!this.isStored()) {
           return null;
         }
         return linkedGlobalId(this.kv);
@@ -34283,8 +34399,8 @@ var AnonDO = class extends DurableObject2 {
   erasable(trace) {
     return runInvocation({ name: "do.anon.erasable", trace }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
-          return null;
+        if (!this.isStored()) {
+          return this.ctx.getWebSockets().length === 0 ? null : { globalId: null, identifiers: [] };
         }
         const identifiers = allIdentifiers(this.sql, this.identifiersMirror).map(({ type, value }) => ({ type, value }));
         return { globalId: linkedGlobalId(this.kv), identifiers };
@@ -34294,7 +34410,7 @@ var AnonDO = class extends DurableObject2 {
   inspect(trace) {
     return runInvocation({ name: "do.anon.inspect", trace }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        if (!this.isStored()) {
           return { exists: false };
         }
         return { exists: true, objectId: this.ctx.id.toString(), ...dumpStorage(this.ctx.storage) };
@@ -34304,7 +34420,7 @@ var AnonDO = class extends DurableObject2 {
   inspectTable(table, offset, limit, trace) {
     return runInvocation({ name: "do.anon.inspect_table", trace, attrs: { "inspect.table": table } }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        if (!this.isStored()) {
           return null;
         }
         return readTable(this.ctx.storage, table, offset, limit);
@@ -34314,13 +34430,16 @@ var AnonDO = class extends DurableObject2 {
   erase(trace) {
     return runInvocation({ name: "do.anon.erase", trace }, () => {
       return this.enqueue(async () => {
-        if (await this.discardIfUnused()) {
+        const stored = this.isStored();
+        if (!stored && this.ctx.getWebSockets().length === 0) {
           return false;
         }
-        try {
-          await eraseAnon(this.ctx.storage, this.graph);
-        } finally {
-          this.resetMirrors();
+        if (stored) {
+          try {
+            await eraseAnon(this.ctx.storage, this.graph);
+          } finally {
+            this.resetMirrors();
+          }
         }
         this.wiped = true;
         for (const socket of this.ctx.getWebSockets()) {
@@ -34330,19 +34449,24 @@ var AnonDO = class extends DurableObject2 {
       });
     });
   }
-  // Addressing an object runs the constructor's schema exec, so a call that never writes — a read, an
-  // inspect, a push or a snapshot for an id that was never used — would otherwise leave an empty object
-  // behind that no cleanup alarm ever collects. Every write path seeds meta before it stores anything,
-  // so a missing meta record means there is nothing to lose.
-  async discardIfUnused() {
-    if (storedAnonId(this.kv) !== null) {
-      return false;
+  // Every write seeds meta through storeVisitor first, so an object without it has no schema to read.
+  isStored() {
+    if (this.stored === void 0) {
+      this.stored = storedMeta(this.kv) !== void 0;
+      if (this.stored) {
+        applyMigrations(this.ctx.storage, ANON_MIGRATIONS);
+      }
     }
-    if (!this.wiped) {
-      await this.ctx.storage.deleteAll();
-      this.wiped = true;
+    return this.stored;
+  }
+  // Stubs address this object by anon id, but an app may name any user, so only a canonical id counts.
+  visitorId() {
+    const anonId = storedAnonId(this.kv);
+    if (anonId !== null || this.wiped) {
+      return anonId;
     }
-    return true;
+    const name = this.ctx.id.name;
+    return name !== void 0 && isCanonicalId(name) ? name : null;
   }
   appendProjectionHistory(outcomes, source) {
     for (const { entry } of outcomes) {
@@ -34551,6 +34675,7 @@ var AnonDO = class extends DurableObject2 {
   }
   async alarm() {
     return runInvocation({ name: "do.anon.cleanup" }, async () => {
+      applyMigrations(this.ctx.storage, ANON_MIGRATIONS);
       this.cleanupAlarm = void 0;
       const now = Date.now();
       const lastActivity = lastActivityAt(this.kv) ?? now;
@@ -34575,6 +34700,7 @@ var AnonDO = class extends DurableObject2 {
   }
   resetMirrors() {
     this.kvCache.clear();
+    this.stored = void 0;
     this.cleanupAlarm = void 0;
     this.identifiersMirror.reset();
     this.conversionsMirror.reset();
@@ -34582,14 +34708,22 @@ var AnonDO = class extends DurableObject2 {
     this.captureMirror.reset();
     this.contextMirror.reset();
   }
-  revive() {
-    if (this.wiped) {
+  // Callers run in ingestQueue and nothing awaits between the stored check and the seeds.
+  async storeVisitor(anonId, at) {
+    this.cleanupAlarm = await seedCleanupAlarm(this.ctx.storage, Date.now(), lastActivityAt(this.kv) ?? at, this.cleanupAlarm);
+    if (!this.isStored()) {
       applyMigrations(this.ctx.storage, ANON_MIGRATIONS);
+      seedMeta(this.kv, anonId, at);
+      this.stored = true;
       this.wiped = false;
     }
+    const socket = hasGeoRecord(this.kv) ? void 0 : this.ctx.getWebSockets()[0]?.deserializeAttachment();
+    if (socket !== void 0) {
+      updateGeo(this.cachedStorage, attachmentGeo(socket), at);
+    }
   }
   async retargetCleanupAlarm(now) {
-    const target = cleanupTarget(this.cachedStorage, now, lastActivityAt(this.kv) ?? now);
+    const target = cleanupTarget(this.cachedStorage, now, lastActivityAt(this.kv));
     if (this.cleanupAlarm === target) {
       return;
     }
@@ -34599,14 +34733,6 @@ var AnonDO = class extends DurableObject2 {
     await this.ctx.storage.setAlarm(target);
     this.cleanupAlarm = target;
   }
-  seedGeoOnConnect(anonId, geo, observedAt) {
-    const run = this.enqueue(async () => {
-      this.revive();
-      updateGeo(this.cachedStorage, geo, observedAt);
-      await this.retargetCleanupAlarm(Date.now());
-    });
-    this.ctx.waitUntil(run.catch((error61) => console.warn("geo seed failed", { anonId, error: error61 })));
-  }
 };
 
 // src/id-graph/global/do.ts