@doync/client 0.1.0 → 0.1.1

package/dist/{client-CNyLMCw0.d.ts → client-OAVaC3pt.d.ts}

@@ -1,5 +1,5 @@
 import { ClientMessage, ServerMessage } from "@doync/core/internal";
-import { BoundQuery, DoyncSchema, MutationDefinition, MutationTree, SqlValue } from "@doync/core";
+import { AuthContext, AuthData, BoundQuery, DoyncSchema, MutationDefinition, MutationTree, SqlValue } from "@doync/core";
 
 //#region ../../node_modules/.pnpm/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts
 /** The Standard Typed interface. This is a base type extended by other specs. */
@@ -126,48 +126,6 @@ interface LocalDb {
 */
 declare function extractWriteTable(sql: string): string | null;
 //#endregion
-//#region src/mutations.d.ts
-/**
-* Write surface a client mutation body runs against: one parameterized
-* statement at a time inside the mutation's savepoint, returning its rows. Same
-* shape the Origin uses, so a shared body runs identically on device and
-* server.
-*/
-interface ClientMutationTx {
-  exec<T extends LocalRow = LocalRow>(query: string, ...params: SqlValue[]): T[];
-}
-/**
-* Client mutation body `(args, ctx, sql)`. Must be deterministic and DB-only
-* (may still be async for local work). Generate ids on the client and pass them
-* in `args` — the body is replayed on rebase. External I/O belongs in a server
-* override, not the client bundle.
-*/
-type ClientMutationHandler = (args: unknown, ctx: Record<string, unknown>, sql: ClientMutationTx) => void | Promise<void>;
-/**
-* A registered client mutation: body plus optional standard-schema args
-* validator applied at `mutate()` time. A bare handler is also accepted.
-*/
-interface ClientMutation {
-  readonly args?: StandardSchemaV1;
-  readonly handler: ClientMutationHandler;
-}
-/**
-* Name-keyed client mutation registry. Keys match the server's dotted names so
-* a push reaches the matching authoritative body.
-*/
-type ClientMutationRegistry = Readonly<Record<string, ClientMutation | ClientMutationHandler>>;
-/**
-* Normalize a registry entry (bare handler or `{args, handler}`) to the object
-* form.
-*/
-declare function asClientMutation(entry: ClientMutation | ClientMutationHandler): ClientMutation;
-/**
-* Validate `args` through a standard-schema synchronously (mirrors
-* `@doync/core` query-args). Async validators refuse loudly — the body is
-* deterministic on both ends. Returns validated value or throws.
-*/
-declare function validateMutationArgs(schema: StandardSchemaV1, args: unknown): unknown;
-//#endregion
 //#region src/socket.d.ts
 /**
 * Minimal transport the client engine uses to talk to its Mirror. Platform
@@ -217,6 +175,13 @@ interface SyncSocketHandlers {
 declare function readMeta(db: LocalDb, key: string): string | null;
 /** Upsert one `__doync_meta` value. Columns are `k`/`v` (ADR-0024). */
 declare function writeMeta(db: LocalDb, key: string, value: string): void;
+/**
+* Read one `__doync_prefs` value, or `null` if unset. Columns are `k`/`v`
+* (ADR-0024).
+*/
+declare function readPref(db: LocalDb, key: string): string | null;
+/** Upsert one `__doync_prefs` value. Columns are `k`/`v` (ADR-0024). */
+declare function writePref(db: LocalDb, key: string, value: string): void;
 //#endregion
 //#region src/replica/stamps.d.ts
 /**
@@ -275,8 +240,9 @@ declare function applyBundledMigrations(db: LocalDb, schema: DoyncSchema, fromVe
 * Drop every consumer (synced) table (ADR-0020's wipe fallback): the first step
 * of wipe-replica-and-resync, run with foreign keys already off so no cascade
 * fires and drop order is irrelevant (ADR-0009). `__doync_`-prefixed engine
-* tables — the pending queue, clientId, and `__doync_engine` ledger that
-* SURVIVE the wipe — are left untouched.
+* tables are left alone here; the caller drops pending / sync meta and mints a
+* fresh clientId (ADR-0037). The `__doync_engine` ledger and `__doync_prefs`
+* survive.
 */
 declare function dropConsumerTables(db: LocalDb, schema: DoyncSchema): void;
 //#endregion
@@ -299,12 +265,12 @@ interface MutationResult {
 */
 type LogoutBehavior = "keep" | "forget";
 /**
-* The `__doync_meta` key the durable {@link LogoutBehavior} lives under
+* The `__doync_prefs` key the durable {@link LogoutBehavior} lives under
 * (closeio/doync#135) — shared by the direct engine's
 * {@link ClientEngine.setLogoutBehavior} / `createClient` write and the web DB
 * worker's per-identity write + boot read, so the ends can never drift.
 */
-declare const __LOGOUT_BEHAVIOR_META_KEY = "logout_behavior";
+declare const __LOGOUT_BEHAVIOR_PREF_KEY = "logout_behavior";
 /**
 * The `__doync_meta` key the Client's durable connected-time counter lives
 * under (ADR-0014 client-half addendum / closeio/doync#223). Blob-typed
@@ -319,12 +285,17 @@ declare const __CONNECTED_CLOCK_META_KEY = "connected_clock";
 *   after deploying a matching client. Terminal until reload.
 * - `server-behind` — client is ahead of a mid-deploy Mirror; the client backs
 *   off and re-handshakes automatically.
-* - `resync` — local replica/memberships wiped and rebuilding; pending writes and
-*   clientId survive. Transient; clears when sync resumes.
+* - `resync` — local sync state wiped and rebuilding as a fresh Client under the
+*   same identity (pending writes dropped, new clientId). Transient; clears
+*   when sync resumes.
+* - `reaped` — same fresh-client rebuild as `resync`, but the Origin forgot this
+*   Client (gone past the client-state lifetime). Transient; clears when sync
+*   resumes. Distinct so the app can say "you were away too long" rather than
+*   "data refreshed".
 * - `forget` — local store erased (including identity); boots as a fresh client.
 *   Transient; clears when sync resumes.
 */
-type SchemaEventKind = "reload" | "server-behind" | "resync" | "forget";
+type SchemaEventKind = "reload" | "server-behind" | "resync" | "reaped" | "forget";
 /**
 * One schema-status transition: `kind` plus a human-readable `message` for
 * diagnostics (not a control signal). `null` on the client means nominal.
@@ -461,17 +432,18 @@ interface DoyncClient {
   */
   onSchemaChange(listener: () => void): () => void;
   /**
-  * Wipe the replica and resubscribe while keeping clientId and pending writes.
-  * Safe "my local data looks wrong" refresh. Optional on the interface —
+  * Rebuild sync state as a fresh Client under the same identity: drop pending
+  * writes, mint a new clientId, wipe the replica, and rebootstrap. Destructive
+  * to unsent work — not a harmless refresh. Optional on the interface —
   * platform clients implement it.
   */
-  resync?(): void;
+  resync(): void;
   /**
   * Erase this identity's local data (replica, pendings, identity). Privacy /
   * logout-forget path. Optional on the interface — platform clients implement
   * it.
   */
-  forget?(): void;
+  forget(identity?: string): void;
   /**
   * Durably set {@link LogoutBehavior} at runtime (e.g. a "remember me"
   * checkbox). Survives restart. Optional — platform clients implement it.
@@ -542,15 +514,15 @@ interface ClientEngineConfig {
   * Named mutation bodies resolved on `push` — deterministic, DB-only
   * (ADR-0017/0021).
   */
-  readonly mutations: ClientMutationRegistry;
+  readonly mutations: Record<string, MutationDefinition>;
   /** The Mirror socket seam (ADR-0016). */
   readonly socket: SyncSocket;
   /**
   * The asserted projected auth context (ADR-0018 addendum / closeio/doync#167)
   * queries and mutation bodies read. Consumer-owned; the library ships no
-  * decode. Anonymous `{}`.
+  * decode. `null` when anonymous.
   */
-  readonly ctx?: Record<string, unknown>;
+  readonly ctx?: AuthContext;
   /**
   * Transport credential PRESENTED as `connect{jwt}` (ADR-0016/0018) — the
   * Mirror resolves token-first. Auth must ride the HANDSHAKE, not only the
@@ -639,17 +611,17 @@ declare class ClientEngine implements DoyncClient {
   get schemaStatus(): SchemaEvent | null;
   mutate<Args = unknown>(mutation: MutationDefinition<Args>, args: Args, options?: MutationOptions): MutationResult;
   /**
-  * Adopt a refreshed SAME-USER identity triple (#167). When connected with a
-  * bearer, send in-band `updateAuth` (ADR-0018 / #85) so the Mirror extends
-  * auth without reconnect when userId matches and `issuedAt` is newer.
-  * Identity CHANGE (different `userId`, incl. anon↔user) is topology-level
-  * replica swap — SharedWorker routes only same-user refreshes here.
+  * Adopt a refreshed SAME-USER identity (#167). When connected with a bearer,
+  * send in-band `updateAuth` (ADR-0018 / #85) so the Mirror extends auth
+  * without reconnect when userId matches and `issuedAt` is newer. Identity
+  * CHANGE (different `userId`, incl. anon↔user) is topology-level replica swap
+  * — SharedWorker routes only same-user refreshes here.
   *
   * Token is stored for the next reconnect (#92: surviving SharedWorker must
   * not reuse a stale token). `ctx`/`userId` asserted, never derived. Halted
-  * engines never emit.
+  * engines never emit. Pass `ctx: null` for anonymous.
   */
-  updateAuth(token: string | null | undefined, ctx?: Record<string, unknown>, userId?: string | null): void;
+  updateAuth(token: string | null | undefined, ctx?: AuthContext, userId?: string | null): void;
   /**
   * Subscribe to a registered query (ADR-0021): resolve under args+ctx,
   * register upstream, return a reactive {@link View}. Local snapshots run
@@ -682,23 +654,25 @@ declare class ClientEngine implements DoyncClient {
   */
   local<Row extends Record<string, unknown> = Record<string, SqlValue>>(sql: string, ...params: SqlValue[]): View<Row>;
   /**
-  * Rebuild sync state (ADR-0022 resync): wipe replica/memberships/cookie, KEEP
-  * clientId + pending, rebootstrap. Same core as failed-migration and
-  * cookie-above-head heals ({@link #wipeAndResync}). Exclusive chain; offline
-  * rebootstrap rides next reconnect.
+  * Rebuild sync state as a fresh Client under the same identity (ADR-0022 /
+  * ADR-0037 resync): drop pending writes, mint a new clientId, wipe replica /
+  * memberships / cookie, rebootstrap. Same core as failed-migration,
+  * cookie-above-head, and heldAt-ahead heals ({@link #wipeAndResync}).
+  * Exclusive chain; offline rebootstrap rides next reconnect. Preferences
+  * survive (`__doync_prefs`).
   */
   resync(): void;
   /**
   * Erase this identity's local data (ADR-0022 forget): wipe replica,
-  * memberships, pending, and all meta (clientId), then fresh first-sight under
-  * a new clientId. Erases WHO, not just WHAT. Awaiters of forgotten writes are
-  * rejected. Topology can swap OPFS on active forget (#134); this resets the
-  * current store. Exclusive chain.
+  * memberships, pending, meta, and preferences, then fresh first-sight under a
+  * new clientId. Erases WHO, not just WHAT. Awaiters of forgotten writes are
+  * rejected. Topology can erase the identity's database file on active forget
+  * (#134); this resets the current store. Exclusive chain.
   */
   forget(): void;
   /**
   * Durably set {@link LogoutBehavior} at runtime ({@link
-  * DoyncClient.setLogoutBehavior}). Via {@link #sideWriteMeta} so it commits
+  * DoyncClient.setLogoutBehavior}). Via {@link #sideWritePref} so it commits
   * outside the optimistic overlay (#135 / ADR-0019). Direct engine stores for
   * RN; web DB worker reports to hub.
   */
@@ -756,7 +730,7 @@ declare function settledRejection(error: unknown): MutationResult;
 * Options for {@link createClient}. Platform adapters (`@doync/web`,
 * `@doync/mobile`) fill these; app code rarely calls `createClient` directly.
 */
-interface CreateClientOptions<TAuthData = unknown> {
+interface CreateClientOptions<TAuthContext extends AuthContext = AuthContext> {
   /** Synchronous local SQLite port (wa-sqlite / node:sqlite / op-sqlite). */
   readonly db: LocalDb;
   /** Synced schema shared with Origin and Mirror. */
@@ -769,22 +743,16 @@ interface CreateClientOptions<TAuthData = unknown> {
   /** Transport to the Mirror. */
   readonly socket: SyncSocket;
   /**
-  * Bearer credential for the handshake. Does not drive `userId` or `ctx`. Omit
-  * for cookie-session auth.
-  */
-  readonly token?: string;
-  /**
-  * Projected auth context for optimistic query/mutation resolution (mirror
-  * your server `toContext`). Defaults to `{}`.
+  * Whole client identity, or `null` for anonymous. `token` is optional inside
+  * {@link AuthData} (cookie auth); `ctx` is required when authenticated.
   */
-  readonly ctx?: TAuthData;
+  readonly authData: AuthData<TAuthContext> | null;
   /**
-  * Authenticated identity, or `null`/omit for anonymous. Never derived from
-  * `token`.
+  * Standard Schema for `authData.ctx`. When present, construction validates
+  * synchronously and throws on failure. Platform adapters pass the consumer's
+  * shared `ctxValidationSchema`.
   */
-  readonly userId?: string | null;
-  /** Pin a durable client id across restarts. */
-  readonly clientId?: string;
+  readonly ctxValidationSchema: StandardSchemaV1<unknown, TAuthContext>;
   /** Observe schema/recovery transitions. */
   readonly onSchemaEvent?: (event: SchemaEvent) => void;
   /**
@@ -799,14 +767,34 @@ interface CreateClientOptions<TAuthData = unknown> {
 * Mirror socket. App code normally goes through `@doync/web` / `@doync/mobile`
 * instead.
 */
-declare function createClient<TAuthData = unknown>(options: CreateClientOptions<TAuthData>): DoyncClient;
+declare function createClient<TAuthContext extends AuthContext = AuthContext>(options: CreateClientOptions<TAuthContext>): DoyncClient;
+/**
+* {@link CreateClientOptions} for trusted internal construction: the web DB
+* worker receives tab-validated identity over the wire and cannot hold the
+* consumer's schema (a validator is a function), so the schema is optional here
+* — absent means the caller already validated.
+*/
+type CreateClientEngineOptions<TAuthContext extends AuthContext = AuthContext> = Omit<CreateClientOptions<TAuthContext>, "ctxValidationSchema"> & {
+  readonly ctxValidationSchema?: StandardSchemaV1<unknown, TAuthContext>; /** Pin a durable client id (monorepo test/bench lanes only). */
+  readonly clientId?: string;
+};
 /**
 * Concrete-engine factory (ADR-0033 / closeio/doync#241). Same construction as
 * {@link createClient}, but typed as {@link ClientEngine} so platform adapters
 * (web DB-worker, mobile wrapper) can reach engine-only fields like `clientId`
 * without an unchecked downcast. Exported on `@doync/client/internal` only.
 */
-declare function createClientEngine<TAuthData = unknown>(options: CreateClientOptions<TAuthData>): ClientEngine;
+declare function createClientEngine<TAuthContext extends AuthContext = AuthContext>(options: CreateClientEngineOptions<TAuthContext>): ClientEngine;
+/**
+* Validate and flatten `authData` for engine slots. When a schema is present
+* and identity is non-null, `ctx` is validated synchronously (throws at the
+* call site). Anonymous (`null`) yields `userId: null`, `ctx: null`, no token.
+*/
+declare function resolveClientAuthData<TAuthContext extends AuthContext>(authData: AuthData<TAuthContext> | null, ctxValidationSchema?: StandardSchemaV1<unknown, TAuthContext>): {
+  userId: string | null;
+  token: string | undefined;
+  ctx: AuthContext;
+};
 //#endregion
-export { readMeta as A, validateMutationArgs as B, isFalsyQuery as C, createEngineTables as D, applyBundledMigrations as E, ClientMutation as F, LocalRow as H, ClientMutationHandler as I, ClientMutationRegistry as L, SeamStatus as M, SyncSocket as N, dropConsumerTables as O, SyncSocketHandlers as P, ClientMutationTx as R, __LOGOUT_BEHAVIOR_META_KEY as S, settledRejection as T, extractWriteTable as U, LocalDb as V, SchemaEventKind as _, ClientEngineConfig as a, ViewStatus as b, FalsyQuery as c, MutationResult as d, OnceView as f, SchemaEvent as g, QueryStatus as h, ClientEngine as i, writeMeta as j, replayMigrations as k, LogoutBehavior as l, PreloadOptions as m, createClient as n, ConnectionStatus as o, PreloadHandle as p, createClientEngine as r, DoyncClient as s, CreateClientOptions as t, MutationOptions as u, SubscribeOptions as v, normalizeQuerySurface as w, __CONNECTED_CLOCK_META_KEY as x, View as y, asClientMutation as z };
-//# sourceMappingURL=client-CNyLMCw0.d.ts.map
+export { replayMigrations as A, extractWriteTable as B, __LOGOUT_BEHAVIOR_PREF_KEY as C, applyBundledMigrations as D, settledRejection as E, SeamStatus as F, SyncSocket as I, SyncSocketHandlers as L, readPref as M, writeMeta as N, createEngineTables as O, writePref as P, LocalDb as R, __CONNECTED_CLOCK_META_KEY as S, normalizeQuerySurface as T, SchemaEvent as _, ClientEngine as a, View as b, DoyncClient as c, MutationOptions as d, MutationResult as f, QueryStatus as g, PreloadOptions as h, resolveClientAuthData as i, readMeta as j, dropConsumerTables as k, FalsyQuery as l, PreloadHandle as m, createClient as n, ClientEngineConfig as o, OnceView as p, createClientEngine as r, ConnectionStatus as s, CreateClientOptions as t, LogoutBehavior as u, SchemaEventKind as v, isFalsyQuery as w, ViewStatus as x, SubscribeOptions as y, LocalRow as z };
+//# sourceMappingURL=client-OAVaC3pt.d.ts.map

package/dist/client-OAVaC3pt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-OAVaC3pt.d.ts","names":["Input","Output","StandardTypedV1","Props","version","vendor","types","Types","input","output","InferInput","Schema","NonNullable","InferOutput","StandardSchemaV1","validate","value","Options","options","Result","Promise","SuccessResult","FailureResult","issues","libraryOptions","Record","ReadonlyArray","Issue","message","path","PropertyKey","PathSegment","key","StandardJSONSchemaV1","jsonSchema","Converter","Target","target"],"sources":["../../../node_modules/.pnpm/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts","../src/port.ts","../src/socket.ts","../src/replica/meta.ts","../src/replica/stamps.ts","../src/replica/index.ts","../src/engine.ts","../src/client.ts"],"x_google_ignoreList":[0],"mappings":";;;;;UACU,eAAA,2BAA0C,KAAA;;WAEvC,WAAA,EAAa,eAAA,CAAgB,KAAA,CAAM,KAAA,EAAO,MAAA;AAAA;AAAA,kBAErC,eAAA;EAJO;EAAA,UAMXG,KAAAA,2BAAgC,KAAA;IAJE;IAAA,SAM/BC,OAAAA;IANS;IAAA,SAQTC,MAAAA;IAR8B;IAAA,SAU9BC,KAAAA,GAAQ,KAAA,CAAM,KAAA,EAAO,MAAA;EAAA;EAZcN;EAAAA,UAetCO,KAAAA,2BAAgC,KAAA;IAbpBL;IAAAA,SAeTM,KAAAA,EAAO,KAAA;IAfwBR;IAAAA,SAiB/BS,MAAAA,EAAQ,MAAA;EAAA;EAjBoC;EAAA,KAoBpDC,UAAAA,gBAA0B,eAAA,IAAmB,WAAA,CAAY,MAAA;EAlBjC;EAAA,KAoBxBG,WAAAA,gBAA2B,eAAA,IAAmB,WAAA,CAAY,MAAA;AAAA;;UAGzD,gBAAA,2BAA2C,KAAA;EAf5B;EAAA,SAiBZ,WAAA,EAAa,gBAAA,CAAiB,KAAA,CAAM,KAAA,EAAO,MAAA;AAAA;AAAA,kBAEtC,gBAAA;EATiB;EAAA,UAWrBV,KAAAA,2BAAgC,KAAA,UAAe,eAAA,CAAgB,KAAA,CAAM,KAAA,EAAO,MAAA;IAXpC;IAAA,SAarCY,QAAAA,GAAWC,KAAAA,WAAgBE,OAAAA,GAAU,gBAAA,CAAiB,OAAA,iBAAwB,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,MAAA,CAAO,MAAA;EAAA;EAXxE;EAAA,KAc9CC,MAAAA,WAAiB,aAAA,CAAc,MAAA,IAAU,aAAA;EAdgB;EAAA,UAgBpDE,aAAAA;IAlCMrB;IAAAA,SAoCHgB,KAAAA,EAAO,MAAA;IApCsBhB;IAAAA,SAsC7BuB,MAAAA;EAAAA;EAAAA,UAEHN,OAAAA;IAlCWV;IAAAA,SAoCRiB,cAAAA,GAAiB,MAAA;EAAA;EAjCpBjB;EAAAA,UAoCAe,aAAAA;IApCuBrB;IAAAA,SAsCpBsB,MAAAA,EAAQ,aAAA,CAAc,KAAA;EAAA;EApCfvB;EAAAA,UAuCV2B,KAAAA;IArCW1B;IAAAA,SAuCR2B,OAAAA;IApCGjB;IAAAA,SAsCHkB,IAAAA,GAAO,aAAA,CAAc,WAAA,GAAc,WAAA;EAAA;EAtCclB;EAAAA,UAyCpDoB,WAAAA;IAvCOpB;IAAAA,SAyCJqB,GAAAA,EAAK,WAAA;EAAA;EAzC6CrB;EAAAA,UA4CrDJ,KAAAA,2BAAgC,KAAA,UAAe,eAAA,CAAgB,KAAA,CAAM,KAAA,EAAO,MAAA;EAzChF;EAAA,KA4CDG,UAAAA,gBAA0B,eAAA,IAAmB,eAAA,CAAgB,UAAA,CAAW,MAAA;EA5CvD;EAAA,KA8CjBG,WAAAA,gBAA2B,eAAA,IAAmB,eAAA,CAAgB,WAAA,CAAY,MAAA;AAAA;;;;;UCpElE,QAAA;EAAA,CACG,MAAA,WAAA,QAAA;AAAA;;;;;;UASH,OAAA;EDb8B;;;;ECkB7C,IAAA,WAAe,QAAA,GAAW,QAAA,EAAU,GAAA,aAAgB,MAAA,EAAQ,QAAA,KAAa,CAAA;;;;;EAMzE,SAAA,CAAU,MAAA;EDxBiD;AAAA;AAAA;;EC8B3D,kBAAA,IAAsB,GAAA;AAAA;;;;;;;;;;;;;;;;;;;iBAqBR,iBAAA,CAAkB,GAAA;;;;;;;UC/CjB,UAAA;;EAEf,IAAA,CAAK,OAAA,EAAS,aAAA;;;;;;EAMd,WAAA,CAAY,QAAA,EAAU,kBAAA;;;;;EAKtB,SAAA;AAAA;;;AFjB2D;AAAA;;KEyBjD,UAAA;;UAGK,kBAAA;;EAEf,OAAA,CAAQ,OAAA,EAAS,aAAA;;EAEjB,IAAA;;EAEA,KAAA;;;;;EAKA,MAAA,EAAQ,MAAA,EAAQ,UAAA;AAAA;;;;;;;iBClCF,QAAA,CAAS,EAAA,EAAI,OAAA,EAAS,GAAA;;iBAUtB,SAAA,CAAU,EAAA,EAAI,OAAA,EAAS,GAAA,UAAa,KAAA;;;;;iBAapC,QAAA,CAAS,EAAA,EAAI,OAAA,EAAS,GAAA;;iBAUtB,SAAA,CAAU,EAAA,EAAI,OAAA,EAAS,GAAA,UAAa,KAAA;;;;;;;;;;;;KC9BxC,YAAA;EAAA,SACD,QAAA,UJToC;EAAA,SIWpC,MAAA;WAEA,UAAA;;;;;WAKA,KAAA;AAAA;;;;;;;;;iBCkGK,kBAAA,CAAmB,EAAA,EAAI,OAAA;EACrC,UAAA;AAAA;;;;;;;;;;iBAcc,gBAAA,CAAiB,EAAA,EAAI,OAAA,EAAS,MAAA,EAAQ,WAAA;;;;;;;;;;;;iBAgBtC,sBAAA,CACd,EAAA,EAAI,OAAA,EACJ,MAAA,EAAQ,WAAA,EACR,WAAA,UACA,SAAA;;;;ALjIuE;AAAA;;;;iBKiJzD,kBAAA,CAAmB,EAAA,EAAI,OAAA,EAAS,MAAA,EAAQ,WAAA;;;;;;;;;UC3GvC,cAAA;EAAA,SACN,MAAA,EAAQ,OAAA;EAAA,SACR,MAAA,EAAQ,OAAA;AAAA;;;;;;;KAUP,cAAA;;ANxEiD;AAAA;;;;cMgFhD,0BAAA;;;;;;;cAQA,0BAAA;;;;;;;;;;;;;;;;;;KAoBD,eAAA;;;;;UAWK,WAAA;EAAA,SACN,IAAA,EAAM,eAAA;;WAEN,OAAA;AAAA;;UAIM,eAAA;;;;;;WAMN,GAAA;AAAA;AN9G8D;;;;;;;;;;AAAA,KM4H7D,WAAA;;;;;UAMK,UAAA;EAAA,SACN,MAAA,EAAQ,WAAA;EN9H2C;EAAA,SMgInD,KAAA,GAAQ,KAAA;AAAA;;;;;;;;;;KAaP,gBAAA;;;;;;;;;;;;;;;UAsBK,IAAA,aACH,MAAA,oBAA0B,MAAA,SAAe,QAAA;EAErD,OAAA,aAAoB,GAAA;EACpB,QAAA,CAAS,QAAA;;;;;EAKT,MAAA;;;;;EAKA,OAAA;;EAEA,MAAA,IAAU,UAAA;;;;;;WAMD,GAAA;AAAA;;;;;;;;UAWM,QAAA,aACH,MAAA,oBAA0B,MAAA,SAAe,QAAA;EAErD,OAAA,aAAoB,GAAA;EACpB,QAAA,CAAS,QAAA;EACT,OAAA;;WAES,MAAA,EAAQ,OAAA,UAAiB,GAAA;AAAA;;;;;;;;;UAWnB,WAAA;;;;;EAKf,SAAA,aAAsB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GAC7D,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,EAClC,OAAA,GAAU,gBAAA,GACT,IAAA,CAAK,GAAA;;;;;EAKR,IAAA,aAAiB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACxD,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,GACjC,QAAA,CAAS,GAAA;;;;;EAKZ,KAAA,aAAkB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACzD,GAAA,aACG,MAAA,EAAQ,QAAA,KACV,IAAA,CAAK,GAAA;;;;;;EAMR,MAAA,iBACE,QAAA,EAAU,kBAAA,CAAmB,IAAA,GAC7B,IAAA,EAAM,IAAA,EACN,OAAA,GAAU,eAAA,GACT,cAAA;;WAEM,YAAA,EAAc,WAAA;;;;;EAKvB,cAAA,CAAe,QAAA;;;;ANlNwE;;;EMyNvF,MAAA;EL7RF;;;;AACoB;EKkSlB,MAAA,CAAO,QAAA;ELzRQ;;;;EK8Rf,iBAAA,EAAmB,QAAA,EAAU,cAAA;;;;;WAKpB,MAAA;;;;;;EAMT,OAAA,CACE,KAAA,EAAO,UAAA,GAAa,UAAA,EACpB,OAAA,GAAU,cAAA,GACT,aAAA;;WAEM,gBAAA,EAAkB,gBAAA;;EAE3B,kBAAA,CAAmB,QAAA;AAAA;;AL/RG;AAqBxB;;KKiRY,UAAA;;UAGK,gBAAA;;;;AJnUjB;WIwUW,GAAA;;;;;WAKA,IAAA;AAAA;;UAIM,cAAA;;;AJpUf;AAQF;WIiUW,GAAA;AAAA;;UAIM,aAAA;EJlUjB;;;;EIuUE,OAAA;AAAA;AAAA,UAGe,kBAAA;;;;;WAKN,EAAA,EAAI,OAAA;EJpUG;AAAA;;;EAAA,SIyUP,MAAA,EAAQ,WAAA;EH3WnB;;;;EAAA,SGgXW,SAAA,EAAW,MAAA,SAAe,kBAAA;;WAE1B,MAAA,EAAQ,UAAA;EHlXmB;AAAA;AAUtC;;;EAVsC,SGwX3B,GAAA,GAAM,WAAA;;;;;;AH9WmC;AAapD;WGyWW,KAAA;;;;;;WAMA,MAAA;EH/W2B;AAUtC;;;;EAVsC,SGqX3B,QAAA;;;;;AH3WyC;WGiXzC,UAAA;;;AF/YX;;;;;;WEwZW,aAAA,IAAiB,KAAA,EAAO,WAAA;;;AF9YxB;;;;WEqZA,GAAA;AAAA;AAAA,cAsQE,YAAA,YAAwB,WAAA;EAAA;EA0KnC,WAAA,CAAY,MAAA,EAAQ,kBAAA;;;;ADluBpB;MCiwBI,cAAA;EDnvBU;;;;EC2vBd,YAAA,CAAa,QAAA,WAAmB,YAAA;;;;AD3vBoB;ECmwBpD,aAAA,IAAiB,YAAA;EDnvBH;EAAA,ICwvBV,QAAA;EDtvBI;;;;;EAAA,IC+vBJ,MAAA;;MAKA,MAAA;EDlwBJ;EAAA,ICuwBI,MAAA;EDvvBU;;;;;EAAA,ICgwBV,aAAA,IAAiB,WAAA;;MAKjB,aAAA;EDrwBkD;;;;EAAA,IC6wBlD,YAAA,IAAgB,WAAA;EAsXpB,MAAA,iBACE,QAAA,EAAU,kBAAA,CAAmB,IAAA,GAC7B,IAAA,EAAM,IAAA,EACN,OAAA,GAAU,eAAA,GACT,cAAA;;;;;;;;AAhvCc;AAUnB;;;EA23CE,UAAA,CACE,KAAA,6BACA,GAAA,GAAM,WAAA,EACN,MAAA;EA93CQ;AAQZ;;;;AAAa;AAQb;;;EAw4CE,SAAA,aAAsB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GAC7D,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,EAClC,OAAA,GAAU,gBAAA,GACT,IAAA,CAAK,GAAA;EA34CG;AAoBb;;;;AAAY;AAWZ;EAs6CE,OAAA,CACE,KAAA,EAAO,UAAA,GAAa,UAAA,EACpB,OAAA,GAAU,cAAA,GACT,aAAA;;;;;;;AAt6CM;EAwsDT,IAAA,aAAiB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACxD,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,GACjC,QAAA,CAAS,GAAA;EAtsDG;;;AAMN;EAwuDT,KAAA,aAAkB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACzD,GAAA,aACG,MAAA,EAAQ,QAAA,KACV,IAAA,CAAK,GAAA;EA7tDE;;;AAAA;AAMZ;;;;EAy4EE,MAAA;;;;;AAt4EiB;AAanB;;EAs4EE,MAAA;EAt4EU;AAAA;AAsBZ;;;;EA83EE,iBAAA,CAAkB,QAAA,EAAU,cAAA;;;;;EAgL5B,cAAA,CAAe,QAAA;;;;;;;;;;;MAuDX,gBAAA,IAAoB,gBAAA;;EAOxB,kBAAA,CAAmB,QAAA;AAAA;AAtlFV;AAWX;;;;AAXW,iBAi6FK,YAAA,CAAa,KAAA,YAAiB,KAAA,IAAS,UAAA;;;;;;;;;;;;iBAevC,qBAAA,kBACd,OAAA,oCACA,YAAA,WACA,OAAA,GAAU,OAAA;EAEV,KAAA,EAAO,UAAA;EACP,IAAA;EACA,OAAA,EAAS,OAAA;AAAA;;;;AAr6FyB;AAWpC;iBAk/FgB,gBAAA,CAAiB,KAAA,YAAiB,cAAA;;;;;;;UC5sGjC,mBAAA,sBACM,WAAA,GAAc,WAAA;EPxBU;EAAA,SO2BpC,EAAA,EAAI,OAAA;;WAEJ,MAAA,EAAQ,WAAA;;;;;WAKR,SAAA,EAAW,YAAA;EPlCuC;EAAA,SOoClD,MAAA,EAAQ,UAAA;EPpC0C;;;;EAAA,SOyClD,QAAA,EAAU,QAAA,CAAS,YAAA;;;;;;WAMnB,mBAAA,EAAqB,gBAAA,UAA0B,YAAA;;WAE/C,aAAA,IAAiB,KAAA,EAAO,WAAA;;;;;;WAMxB,cAAA,GAAiB,cAAA;AAAA;;;;;;iBAQZ,YAAA,sBAAkC,WAAA,GAAc,WAAA,EAC9D,OAAA,EAAS,mBAAA,CAAoB,YAAA,IAC5B,WAAA;;;;;;;KAUS,yBAAA,sBACW,WAAA,GAAc,WAAA,IACjC,IAAA,CAAK,mBAAA,CAAoB,YAAA;EAAA,SAClB,mBAAA,GAAsB,gBAAA,UAA0B,YAAA;WAEhD,QAAA;AAAA;;;;;;;iBASK,kBAAA,sBACO,WAAA,GAAc,WAAA,EACnC,OAAA,EAAS,yBAAA,CAA0B,YAAA,IAAgB,YAAA;;;;APrEoB;AAAA;iBOoGzD,qBAAA,sBAA2C,WAAA,EACzD,QAAA,EAAU,QAAA,CAAS,YAAA,UACnB,mBAAA,GAAsB,gBAAA,UAA0B,YAAA;EAEhD,MAAA;EACA,KAAA;EACA,GAAA,EAAK,WAAA;AAAA"}

package/dist/{client-DHXO0dbf.d.cts → client-OPt8Axyp.d.cts}

@@ -1,4 +1,4 @@
-import { BoundQuery, DoyncSchema, MutationDefinition, MutationTree, SqlValue } from "@doync/core";
+import { AuthContext, AuthData, BoundQuery, DoyncSchema, MutationDefinition, MutationTree, SqlValue } from "@doync/core";
 import { ClientMessage, ServerMessage } from "@doync/core/internal";
 
 //#region ../../node_modules/.pnpm/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts
@@ -126,48 +126,6 @@ interface LocalDb {
 */
 declare function extractWriteTable(sql: string): string | null;
 //#endregion
-//#region src/mutations.d.ts
-/**
-* Write surface a client mutation body runs against: one parameterized
-* statement at a time inside the mutation's savepoint, returning its rows. Same
-* shape the Origin uses, so a shared body runs identically on device and
-* server.
-*/
-interface ClientMutationTx {
-  exec<T extends LocalRow = LocalRow>(query: string, ...params: SqlValue[]): T[];
-}
-/**
-* Client mutation body `(args, ctx, sql)`. Must be deterministic and DB-only
-* (may still be async for local work). Generate ids on the client and pass them
-* in `args` — the body is replayed on rebase. External I/O belongs in a server
-* override, not the client bundle.
-*/
-type ClientMutationHandler = (args: unknown, ctx: Record<string, unknown>, sql: ClientMutationTx) => void | Promise<void>;
-/**
-* A registered client mutation: body plus optional standard-schema args
-* validator applied at `mutate()` time. A bare handler is also accepted.
-*/
-interface ClientMutation {
-  readonly args?: StandardSchemaV1;
-  readonly handler: ClientMutationHandler;
-}
-/**
-* Name-keyed client mutation registry. Keys match the server's dotted names so
-* a push reaches the matching authoritative body.
-*/
-type ClientMutationRegistry = Readonly<Record<string, ClientMutation | ClientMutationHandler>>;
-/**
-* Normalize a registry entry (bare handler or `{args, handler}`) to the object
-* form.
-*/
-declare function asClientMutation(entry: ClientMutation | ClientMutationHandler): ClientMutation;
-/**
-* Validate `args` through a standard-schema synchronously (mirrors
-* `@doync/core` query-args). Async validators refuse loudly — the body is
-* deterministic on both ends. Returns validated value or throws.
-*/
-declare function validateMutationArgs(schema: StandardSchemaV1, args: unknown): unknown;
-//#endregion
 //#region src/socket.d.ts
 /**
 * Minimal transport the client engine uses to talk to its Mirror. Platform
@@ -217,6 +175,13 @@ interface SyncSocketHandlers {
 declare function readMeta(db: LocalDb, key: string): string | null;
 /** Upsert one `__doync_meta` value. Columns are `k`/`v` (ADR-0024). */
 declare function writeMeta(db: LocalDb, key: string, value: string): void;
+/**
+* Read one `__doync_prefs` value, or `null` if unset. Columns are `k`/`v`
+* (ADR-0024).
+*/
+declare function readPref(db: LocalDb, key: string): string | null;
+/** Upsert one `__doync_prefs` value. Columns are `k`/`v` (ADR-0024). */
+declare function writePref(db: LocalDb, key: string, value: string): void;
 //#endregion
 //#region src/replica/stamps.d.ts
 /**
@@ -275,8 +240,9 @@ declare function applyBundledMigrations(db: LocalDb, schema: DoyncSchema, fromVe
 * Drop every consumer (synced) table (ADR-0020's wipe fallback): the first step
 * of wipe-replica-and-resync, run with foreign keys already off so no cascade
 * fires and drop order is irrelevant (ADR-0009). `__doync_`-prefixed engine
-* tables — the pending queue, clientId, and `__doync_engine` ledger that
-* SURVIVE the wipe — are left untouched.
+* tables are left alone here; the caller drops pending / sync meta and mints a
+* fresh clientId (ADR-0037). The `__doync_engine` ledger and `__doync_prefs`
+* survive.
 */
 declare function dropConsumerTables(db: LocalDb, schema: DoyncSchema): void;
 //#endregion
@@ -299,12 +265,12 @@ interface MutationResult {
 */
 type LogoutBehavior = "keep" | "forget";
 /**
-* The `__doync_meta` key the durable {@link LogoutBehavior} lives under
+* The `__doync_prefs` key the durable {@link LogoutBehavior} lives under
 * (closeio/doync#135) — shared by the direct engine's
 * {@link ClientEngine.setLogoutBehavior} / `createClient` write and the web DB
 * worker's per-identity write + boot read, so the ends can never drift.
 */
-declare const __LOGOUT_BEHAVIOR_META_KEY = "logout_behavior";
+declare const __LOGOUT_BEHAVIOR_PREF_KEY = "logout_behavior";
 /**
 * The `__doync_meta` key the Client's durable connected-time counter lives
 * under (ADR-0014 client-half addendum / closeio/doync#223). Blob-typed
@@ -319,12 +285,17 @@ declare const __CONNECTED_CLOCK_META_KEY = "connected_clock";
 *   after deploying a matching client. Terminal until reload.
 * - `server-behind` — client is ahead of a mid-deploy Mirror; the client backs
 *   off and re-handshakes automatically.
-* - `resync` — local replica/memberships wiped and rebuilding; pending writes and
-*   clientId survive. Transient; clears when sync resumes.
+* - `resync` — local sync state wiped and rebuilding as a fresh Client under the
+*   same identity (pending writes dropped, new clientId). Transient; clears
+*   when sync resumes.
+* - `reaped` — same fresh-client rebuild as `resync`, but the Origin forgot this
+*   Client (gone past the client-state lifetime). Transient; clears when sync
+*   resumes. Distinct so the app can say "you were away too long" rather than
+*   "data refreshed".
 * - `forget` — local store erased (including identity); boots as a fresh client.
 *   Transient; clears when sync resumes.
 */
-type SchemaEventKind = "reload" | "server-behind" | "resync" | "forget";
+type SchemaEventKind = "reload" | "server-behind" | "resync" | "reaped" | "forget";
 /**
 * One schema-status transition: `kind` plus a human-readable `message` for
 * diagnostics (not a control signal). `null` on the client means nominal.
@@ -461,17 +432,18 @@ interface DoyncClient {
   */
   onSchemaChange(listener: () => void): () => void;
   /**
-  * Wipe the replica and resubscribe while keeping clientId and pending writes.
-  * Safe "my local data looks wrong" refresh. Optional on the interface —
+  * Rebuild sync state as a fresh Client under the same identity: drop pending
+  * writes, mint a new clientId, wipe the replica, and rebootstrap. Destructive
+  * to unsent work — not a harmless refresh. Optional on the interface —
   * platform clients implement it.
   */
-  resync?(): void;
+  resync(): void;
   /**
   * Erase this identity's local data (replica, pendings, identity). Privacy /
   * logout-forget path. Optional on the interface — platform clients implement
   * it.
   */
-  forget?(): void;
+  forget(identity?: string): void;
   /**
   * Durably set {@link LogoutBehavior} at runtime (e.g. a "remember me"
   * checkbox). Survives restart. Optional — platform clients implement it.
@@ -542,15 +514,15 @@ interface ClientEngineConfig {
   * Named mutation bodies resolved on `push` — deterministic, DB-only
   * (ADR-0017/0021).
   */
-  readonly mutations: ClientMutationRegistry;
+  readonly mutations: Record<string, MutationDefinition>;
   /** The Mirror socket seam (ADR-0016). */
   readonly socket: SyncSocket;
   /**
   * The asserted projected auth context (ADR-0018 addendum / closeio/doync#167)
   * queries and mutation bodies read. Consumer-owned; the library ships no
-  * decode. Anonymous `{}`.
+  * decode. `null` when anonymous.
   */
-  readonly ctx?: Record<string, unknown>;
+  readonly ctx?: AuthContext;
   /**
   * Transport credential PRESENTED as `connect{jwt}` (ADR-0016/0018) — the
   * Mirror resolves token-first. Auth must ride the HANDSHAKE, not only the
@@ -639,17 +611,17 @@ declare class ClientEngine implements DoyncClient {
   get schemaStatus(): SchemaEvent | null;
   mutate<Args = unknown>(mutation: MutationDefinition<Args>, args: Args, options?: MutationOptions): MutationResult;
   /**
-  * Adopt a refreshed SAME-USER identity triple (#167). When connected with a
-  * bearer, send in-band `updateAuth` (ADR-0018 / #85) so the Mirror extends
-  * auth without reconnect when userId matches and `issuedAt` is newer.
-  * Identity CHANGE (different `userId`, incl. anon↔user) is topology-level
-  * replica swap — SharedWorker routes only same-user refreshes here.
+  * Adopt a refreshed SAME-USER identity (#167). When connected with a bearer,
+  * send in-band `updateAuth` (ADR-0018 / #85) so the Mirror extends auth
+  * without reconnect when userId matches and `issuedAt` is newer. Identity
+  * CHANGE (different `userId`, incl. anon↔user) is topology-level replica swap
+  * — SharedWorker routes only same-user refreshes here.
   *
   * Token is stored for the next reconnect (#92: surviving SharedWorker must
   * not reuse a stale token). `ctx`/`userId` asserted, never derived. Halted
-  * engines never emit.
+  * engines never emit. Pass `ctx: null` for anonymous.
   */
-  updateAuth(token: string | null | undefined, ctx?: Record<string, unknown>, userId?: string | null): void;
+  updateAuth(token: string | null | undefined, ctx?: AuthContext, userId?: string | null): void;
   /**
   * Subscribe to a registered query (ADR-0021): resolve under args+ctx,
   * register upstream, return a reactive {@link View}. Local snapshots run
@@ -682,23 +654,25 @@ declare class ClientEngine implements DoyncClient {
   */
   local<Row extends Record<string, unknown> = Record<string, SqlValue>>(sql: string, ...params: SqlValue[]): View<Row>;
   /**
-  * Rebuild sync state (ADR-0022 resync): wipe replica/memberships/cookie, KEEP
-  * clientId + pending, rebootstrap. Same core as failed-migration and
-  * cookie-above-head heals ({@link #wipeAndResync}). Exclusive chain; offline
-  * rebootstrap rides next reconnect.
+  * Rebuild sync state as a fresh Client under the same identity (ADR-0022 /
+  * ADR-0037 resync): drop pending writes, mint a new clientId, wipe replica /
+  * memberships / cookie, rebootstrap. Same core as failed-migration,
+  * cookie-above-head, and heldAt-ahead heals ({@link #wipeAndResync}).
+  * Exclusive chain; offline rebootstrap rides next reconnect. Preferences
+  * survive (`__doync_prefs`).
   */
   resync(): void;
   /**
   * Erase this identity's local data (ADR-0022 forget): wipe replica,
-  * memberships, pending, and all meta (clientId), then fresh first-sight under
-  * a new clientId. Erases WHO, not just WHAT. Awaiters of forgotten writes are
-  * rejected. Topology can swap OPFS on active forget (#134); this resets the
-  * current store. Exclusive chain.
+  * memberships, pending, meta, and preferences, then fresh first-sight under a
+  * new clientId. Erases WHO, not just WHAT. Awaiters of forgotten writes are
+  * rejected. Topology can erase the identity's database file on active forget
+  * (#134); this resets the current store. Exclusive chain.
   */
   forget(): void;
   /**
   * Durably set {@link LogoutBehavior} at runtime ({@link
-  * DoyncClient.setLogoutBehavior}). Via {@link #sideWriteMeta} so it commits
+  * DoyncClient.setLogoutBehavior}). Via {@link #sideWritePref} so it commits
   * outside the optimistic overlay (#135 / ADR-0019). Direct engine stores for
   * RN; web DB worker reports to hub.
   */
@@ -756,7 +730,7 @@ declare function settledRejection(error: unknown): MutationResult;
 * Options for {@link createClient}. Platform adapters (`@doync/web`,
 * `@doync/mobile`) fill these; app code rarely calls `createClient` directly.
 */
-interface CreateClientOptions<TAuthData = unknown> {
+interface CreateClientOptions<TAuthContext extends AuthContext = AuthContext> {
   /** Synchronous local SQLite port (wa-sqlite / node:sqlite / op-sqlite). */
   readonly db: LocalDb;
   /** Synced schema shared with Origin and Mirror. */
@@ -769,22 +743,16 @@ interface CreateClientOptions<TAuthData = unknown> {
   /** Transport to the Mirror. */
   readonly socket: SyncSocket;
   /**
-  * Bearer credential for the handshake. Does not drive `userId` or `ctx`. Omit
-  * for cookie-session auth.
-  */
-  readonly token?: string;
-  /**
-  * Projected auth context for optimistic query/mutation resolution (mirror
-  * your server `toContext`). Defaults to `{}`.
+  * Whole client identity, or `null` for anonymous. `token` is optional inside
+  * {@link AuthData} (cookie auth); `ctx` is required when authenticated.
   */
-  readonly ctx?: TAuthData;
+  readonly authData: AuthData<TAuthContext> | null;
   /**
-  * Authenticated identity, or `null`/omit for anonymous. Never derived from
-  * `token`.
+  * Standard Schema for `authData.ctx`. When present, construction validates
+  * synchronously and throws on failure. Platform adapters pass the consumer's
+  * shared `ctxValidationSchema`.
   */
-  readonly userId?: string | null;
-  /** Pin a durable client id across restarts. */
-  readonly clientId?: string;
+  readonly ctxValidationSchema: StandardSchemaV1<unknown, TAuthContext>;
   /** Observe schema/recovery transitions. */
   readonly onSchemaEvent?: (event: SchemaEvent) => void;
   /**
@@ -799,14 +767,34 @@ interface CreateClientOptions<TAuthData = unknown> {
 * Mirror socket. App code normally goes through `@doync/web` / `@doync/mobile`
 * instead.
 */
-declare function createClient<TAuthData = unknown>(options: CreateClientOptions<TAuthData>): DoyncClient;
+declare function createClient<TAuthContext extends AuthContext = AuthContext>(options: CreateClientOptions<TAuthContext>): DoyncClient;
+/**
+* {@link CreateClientOptions} for trusted internal construction: the web DB
+* worker receives tab-validated identity over the wire and cannot hold the
+* consumer's schema (a validator is a function), so the schema is optional here
+* — absent means the caller already validated.
+*/
+type CreateClientEngineOptions<TAuthContext extends AuthContext = AuthContext> = Omit<CreateClientOptions<TAuthContext>, "ctxValidationSchema"> & {
+  readonly ctxValidationSchema?: StandardSchemaV1<unknown, TAuthContext>; /** Pin a durable client id (monorepo test/bench lanes only). */
+  readonly clientId?: string;
+};
 /**
 * Concrete-engine factory (ADR-0033 / closeio/doync#241). Same construction as
 * {@link createClient}, but typed as {@link ClientEngine} so platform adapters
 * (web DB-worker, mobile wrapper) can reach engine-only fields like `clientId`
 * without an unchecked downcast. Exported on `@doync/client/internal` only.
 */
-declare function createClientEngine<TAuthData = unknown>(options: CreateClientOptions<TAuthData>): ClientEngine;
+declare function createClientEngine<TAuthContext extends AuthContext = AuthContext>(options: CreateClientEngineOptions<TAuthContext>): ClientEngine;
+/**
+* Validate and flatten `authData` for engine slots. When a schema is present
+* and identity is non-null, `ctx` is validated synchronously (throws at the
+* call site). Anonymous (`null`) yields `userId: null`, `ctx: null`, no token.
+*/
+declare function resolveClientAuthData<TAuthContext extends AuthContext>(authData: AuthData<TAuthContext> | null, ctxValidationSchema?: StandardSchemaV1<unknown, TAuthContext>): {
+  userId: string | null;
+  token: string | undefined;
+  ctx: AuthContext;
+};
 //#endregion
-export { readMeta as A, validateMutationArgs as B, isFalsyQuery as C, createEngineTables as D, applyBundledMigrations as E, ClientMutation as F, LocalRow as H, ClientMutationHandler as I, ClientMutationRegistry as L, SeamStatus as M, SyncSocket as N, dropConsumerTables as O, SyncSocketHandlers as P, ClientMutationTx as R, __LOGOUT_BEHAVIOR_META_KEY as S, settledRejection as T, extractWriteTable as U, LocalDb as V, SchemaEventKind as _, ClientEngineConfig as a, ViewStatus as b, FalsyQuery as c, MutationResult as d, OnceView as f, SchemaEvent as g, QueryStatus as h, ClientEngine as i, writeMeta as j, replayMigrations as k, LogoutBehavior as l, PreloadOptions as m, createClient as n, ConnectionStatus as o, PreloadHandle as p, createClientEngine as r, DoyncClient as s, CreateClientOptions as t, MutationOptions as u, SubscribeOptions as v, normalizeQuerySurface as w, __CONNECTED_CLOCK_META_KEY as x, View as y, asClientMutation as z };
-//# sourceMappingURL=client-DHXO0dbf.d.cts.map
+export { replayMigrations as A, extractWriteTable as B, __LOGOUT_BEHAVIOR_PREF_KEY as C, applyBundledMigrations as D, settledRejection as E, SeamStatus as F, SyncSocket as I, SyncSocketHandlers as L, readPref as M, writeMeta as N, createEngineTables as O, writePref as P, LocalDb as R, __CONNECTED_CLOCK_META_KEY as S, normalizeQuerySurface as T, SchemaEvent as _, ClientEngine as a, View as b, DoyncClient as c, MutationOptions as d, MutationResult as f, QueryStatus as g, PreloadOptions as h, resolveClientAuthData as i, readMeta as j, dropConsumerTables as k, FalsyQuery as l, PreloadHandle as m, createClient as n, ClientEngineConfig as o, OnceView as p, createClientEngine as r, ConnectionStatus as s, CreateClientOptions as t, LogoutBehavior as u, SchemaEventKind as v, isFalsyQuery as w, ViewStatus as x, SubscribeOptions as y, LocalRow as z };
+//# sourceMappingURL=client-OPt8Axyp.d.cts.map

package/dist/client-OPt8Axyp.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-OPt8Axyp.d.cts","names":["Input","Output","StandardTypedV1","Props","version","vendor","types","Types","input","output","InferInput","Schema","NonNullable","InferOutput","StandardSchemaV1","validate","value","Options","options","Result","Promise","SuccessResult","FailureResult","issues","libraryOptions","Record","ReadonlyArray","Issue","message","path","PropertyKey","PathSegment","key","StandardJSONSchemaV1","jsonSchema","Converter","Target","target"],"sources":["../../../node_modules/.pnpm/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts","../src/port.ts","../src/socket.ts","../src/replica/meta.ts","../src/replica/stamps.ts","../src/replica/index.ts","../src/engine.ts","../src/client.ts"],"x_google_ignoreList":[0],"mappings":";;;;;UACU,eAAA,2BAA0C,KAAA;;WAEvC,WAAA,EAAa,eAAA,CAAgB,KAAA,CAAM,KAAA,EAAO,MAAA;AAAA;AAAA,kBAErC,eAAA;EAJO;EAAA,UAMXG,KAAAA,2BAAgC,KAAA;IAJE;IAAA,SAM/BC,OAAAA;IANS;IAAA,SAQTC,MAAAA;IAR8B;IAAA,SAU9BC,KAAAA,GAAQ,KAAA,CAAM,KAAA,EAAO,MAAA;EAAA;EAZcN;EAAAA,UAetCO,KAAAA,2BAAgC,KAAA;IAbpBL;IAAAA,SAeTM,KAAAA,EAAO,KAAA;IAfwBR;IAAAA,SAiB/BS,MAAAA,EAAQ,MAAA;EAAA;EAjBoC;EAAA,KAoBpDC,UAAAA,gBAA0B,eAAA,IAAmB,WAAA,CAAY,MAAA;EAlBjC;EAAA,KAoBxBG,WAAAA,gBAA2B,eAAA,IAAmB,WAAA,CAAY,MAAA;AAAA;;UAGzD,gBAAA,2BAA2C,KAAA;EAf5B;EAAA,SAiBZ,WAAA,EAAa,gBAAA,CAAiB,KAAA,CAAM,KAAA,EAAO,MAAA;AAAA;AAAA,kBAEtC,gBAAA;EATiB;EAAA,UAWrBV,KAAAA,2BAAgC,KAAA,UAAe,eAAA,CAAgB,KAAA,CAAM,KAAA,EAAO,MAAA;IAXpC;IAAA,SAarCY,QAAAA,GAAWC,KAAAA,WAAgBE,OAAAA,GAAU,gBAAA,CAAiB,OAAA,iBAAwB,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,MAAA,CAAO,MAAA;EAAA;EAXxE;EAAA,KAc9CC,MAAAA,WAAiB,aAAA,CAAc,MAAA,IAAU,aAAA;EAdgB;EAAA,UAgBpDE,aAAAA;IAlCMrB;IAAAA,SAoCHgB,KAAAA,EAAO,MAAA;IApCsBhB;IAAAA,SAsC7BuB,MAAAA;EAAAA;EAAAA,UAEHN,OAAAA;IAlCWV;IAAAA,SAoCRiB,cAAAA,GAAiB,MAAA;EAAA;EAjCpBjB;EAAAA,UAoCAe,aAAAA;IApCuBrB;IAAAA,SAsCpBsB,MAAAA,EAAQ,aAAA,CAAc,KAAA;EAAA;EApCfvB;EAAAA,UAuCV2B,KAAAA;IArCW1B;IAAAA,SAuCR2B,OAAAA;IApCGjB;IAAAA,SAsCHkB,IAAAA,GAAO,aAAA,CAAc,WAAA,GAAc,WAAA;EAAA;EAtCclB;EAAAA,UAyCpDoB,WAAAA;IAvCOpB;IAAAA,SAyCJqB,GAAAA,EAAK,WAAA;EAAA;EAzC6CrB;EAAAA,UA4CrDJ,KAAAA,2BAAgC,KAAA,UAAe,eAAA,CAAgB,KAAA,CAAM,KAAA,EAAO,MAAA;EAzChF;EAAA,KA4CDG,UAAAA,gBAA0B,eAAA,IAAmB,eAAA,CAAgB,UAAA,CAAW,MAAA;EA5CvD;EAAA,KA8CjBG,WAAAA,gBAA2B,eAAA,IAAmB,eAAA,CAAgB,WAAA,CAAY,MAAA;AAAA;;;;;UCpElE,QAAA;EAAA,CACG,MAAA,WAAA,QAAA;AAAA;;;;;;UASH,OAAA;EDb8B;;;;ECkB7C,IAAA,WAAe,QAAA,GAAW,QAAA,EAAU,GAAA,aAAgB,MAAA,EAAQ,QAAA,KAAa,CAAA;;;;;EAMzE,SAAA,CAAU,MAAA;EDxBiD;AAAA;AAAA;;EC8B3D,kBAAA,IAAsB,GAAA;AAAA;;;;;;;;;;;;;;;;;;;iBAqBR,iBAAA,CAAkB,GAAA;;;;;;;UC/CjB,UAAA;;EAEf,IAAA,CAAK,OAAA,EAAS,aAAA;;;;;;EAMd,WAAA,CAAY,QAAA,EAAU,kBAAA;;;;;EAKtB,SAAA;AAAA;;;AFjB2D;AAAA;;KEyBjD,UAAA;;UAGK,kBAAA;;EAEf,OAAA,CAAQ,OAAA,EAAS,aAAA;;EAEjB,IAAA;;EAEA,KAAA;;;;;EAKA,MAAA,EAAQ,MAAA,EAAQ,UAAA;AAAA;;;;;;;iBClCF,QAAA,CAAS,EAAA,EAAI,OAAA,EAAS,GAAA;;iBAUtB,SAAA,CAAU,EAAA,EAAI,OAAA,EAAS,GAAA,UAAa,KAAA;;;;;iBAapC,QAAA,CAAS,EAAA,EAAI,OAAA,EAAS,GAAA;;iBAUtB,SAAA,CAAU,EAAA,EAAI,OAAA,EAAS,GAAA,UAAa,KAAA;;;;;;;;;;;;KC9BxC,YAAA;EAAA,SACD,QAAA,UJToC;EAAA,SIWpC,MAAA;WAEA,UAAA;;;;;WAKA,KAAA;AAAA;;;;;;;;;iBCkGK,kBAAA,CAAmB,EAAA,EAAI,OAAA;EACrC,UAAA;AAAA;;;;;;;;;;iBAcc,gBAAA,CAAiB,EAAA,EAAI,OAAA,EAAS,MAAA,EAAQ,WAAA;;;;;;;;;;;;iBAgBtC,sBAAA,CACd,EAAA,EAAI,OAAA,EACJ,MAAA,EAAQ,WAAA,EACR,WAAA,UACA,SAAA;;;;ALjIuE;AAAA;;;;iBKiJzD,kBAAA,CAAmB,EAAA,EAAI,OAAA,EAAS,MAAA,EAAQ,WAAA;;;;;;;;;UC3GvC,cAAA;EAAA,SACN,MAAA,EAAQ,OAAA;EAAA,SACR,MAAA,EAAQ,OAAA;AAAA;;;;;;;KAUP,cAAA;;ANxEiD;AAAA;;;;cMgFhD,0BAAA;;;;;;;cAQA,0BAAA;;;;;;;;;;;;;;;;;;KAoBD,eAAA;;;;;UAWK,WAAA;EAAA,SACN,IAAA,EAAM,eAAA;;WAEN,OAAA;AAAA;;UAIM,eAAA;;;;;;WAMN,GAAA;AAAA;AN9G8D;;;;;;;;;;AAAA,KM4H7D,WAAA;;;;;UAMK,UAAA;EAAA,SACN,MAAA,EAAQ,WAAA;EN9H2C;EAAA,SMgInD,KAAA,GAAQ,KAAA;AAAA;;;;;;;;;;KAaP,gBAAA;;;;;;;;;;;;;;;UAsBK,IAAA,aACH,MAAA,oBAA0B,MAAA,SAAe,QAAA;EAErD,OAAA,aAAoB,GAAA;EACpB,QAAA,CAAS,QAAA;;;;;EAKT,MAAA;;;;;EAKA,OAAA;;EAEA,MAAA,IAAU,UAAA;;;;;;WAMD,GAAA;AAAA;;;;;;;;UAWM,QAAA,aACH,MAAA,oBAA0B,MAAA,SAAe,QAAA;EAErD,OAAA,aAAoB,GAAA;EACpB,QAAA,CAAS,QAAA;EACT,OAAA;;WAES,MAAA,EAAQ,OAAA,UAAiB,GAAA;AAAA;;;;;;;;;UAWnB,WAAA;;;;;EAKf,SAAA,aAAsB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GAC7D,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,EAClC,OAAA,GAAU,gBAAA,GACT,IAAA,CAAK,GAAA;;;;;EAKR,IAAA,aAAiB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACxD,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,GACjC,QAAA,CAAS,GAAA;;;;;EAKZ,KAAA,aAAkB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACzD,GAAA,aACG,MAAA,EAAQ,QAAA,KACV,IAAA,CAAK,GAAA;;;;;;EAMR,MAAA,iBACE,QAAA,EAAU,kBAAA,CAAmB,IAAA,GAC7B,IAAA,EAAM,IAAA,EACN,OAAA,GAAU,eAAA,GACT,cAAA;;WAEM,YAAA,EAAc,WAAA;;;;;EAKvB,cAAA,CAAe,QAAA;;;;ANlNwE;;;EMyNvF,MAAA;EL7RF;;;;AACoB;EKkSlB,MAAA,CAAO,QAAA;ELzRQ;;;;EK8Rf,iBAAA,EAAmB,QAAA,EAAU,cAAA;;;;;WAKpB,MAAA;;;;;;EAMT,OAAA,CACE,KAAA,EAAO,UAAA,GAAa,UAAA,EACpB,OAAA,GAAU,cAAA,GACT,aAAA;;WAEM,gBAAA,EAAkB,gBAAA;;EAE3B,kBAAA,CAAmB,QAAA;AAAA;;AL/RG;AAqBxB;;KKiRY,UAAA;;UAGK,gBAAA;;;;AJnUjB;WIwUW,GAAA;;;;;WAKA,IAAA;AAAA;;UAIM,cAAA;;;AJpUf;AAQF;WIiUW,GAAA;AAAA;;UAIM,aAAA;EJlUjB;;;;EIuUE,OAAA;AAAA;AAAA,UAGe,kBAAA;;;;;WAKN,EAAA,EAAI,OAAA;EJpUG;AAAA;;;EAAA,SIyUP,MAAA,EAAQ,WAAA;EH3WnB;;;;EAAA,SGgXW,SAAA,EAAW,MAAA,SAAe,kBAAA;;WAE1B,MAAA,EAAQ,UAAA;EHlXmB;AAAA;AAUtC;;;EAVsC,SGwX3B,GAAA,GAAM,WAAA;;;;;;AH9WmC;AAapD;WGyWW,KAAA;;;;;;WAMA,MAAA;EH/W2B;AAUtC;;;;EAVsC,SGqX3B,QAAA;;;;;AH3WyC;WGiXzC,UAAA;;;AF/YX;;;;;;WEwZW,aAAA,IAAiB,KAAA,EAAO,WAAA;;;AF9YxB;;;;WEqZA,GAAA;AAAA;AAAA,cAsQE,YAAA,YAAwB,WAAA;EAAA;EA0KnC,WAAA,CAAY,MAAA,EAAQ,kBAAA;;;;ADluBpB;MCiwBI,cAAA;EDnvBU;;;;EC2vBd,YAAA,CAAa,QAAA,WAAmB,YAAA;;;;AD3vBoB;ECmwBpD,aAAA,IAAiB,YAAA;EDnvBH;EAAA,ICwvBV,QAAA;EDtvBI;;;;;EAAA,IC+vBJ,MAAA;;MAKA,MAAA;EDlwBJ;EAAA,ICuwBI,MAAA;EDvvBU;;;;;EAAA,ICgwBV,aAAA,IAAiB,WAAA;;MAKjB,aAAA;EDrwBkD;;;;EAAA,IC6wBlD,YAAA,IAAgB,WAAA;EAsXpB,MAAA,iBACE,QAAA,EAAU,kBAAA,CAAmB,IAAA,GAC7B,IAAA,EAAM,IAAA,EACN,OAAA,GAAU,eAAA,GACT,cAAA;;;;;;;;AAhvCc;AAUnB;;;EA23CE,UAAA,CACE,KAAA,6BACA,GAAA,GAAM,WAAA,EACN,MAAA;EA93CQ;AAQZ;;;;AAAa;AAQb;;;EAw4CE,SAAA,aAAsB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GAC7D,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,EAClC,OAAA,GAAU,gBAAA,GACT,IAAA,CAAK,GAAA;EA34CG;AAoBb;;;;AAAY;AAWZ;EAs6CE,OAAA,CACE,KAAA,EAAO,UAAA,GAAa,UAAA,EACpB,OAAA,GAAU,cAAA,GACT,aAAA;;;;;;;AAt6CM;EAwsDT,IAAA,aAAiB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACxD,KAAA,EAAO,UAAA,CAAW,GAAA,aAAgB,UAAA,GACjC,QAAA,CAAS,GAAA;EAtsDG;;;AAMN;EAwuDT,KAAA,aAAkB,MAAA,oBAA0B,MAAA,SAAe,QAAA,GACzD,GAAA,aACG,MAAA,EAAQ,QAAA,KACV,IAAA,CAAK,GAAA;EA7tDE;;;AAAA;AAMZ;;;;EAy4EE,MAAA;;;;;AAt4EiB;AAanB;;EAs4EE,MAAA;EAt4EU;AAAA;AAsBZ;;;;EA83EE,iBAAA,CAAkB,QAAA,EAAU,cAAA;;;;;EAgL5B,cAAA,CAAe,QAAA;;;;;;;;;;;MAuDX,gBAAA,IAAoB,gBAAA;;EAOxB,kBAAA,CAAmB,QAAA;AAAA;AAtlFV;AAWX;;;;AAXW,iBAi6FK,YAAA,CAAa,KAAA,YAAiB,KAAA,IAAS,UAAA;;;;;;;;;;;;iBAevC,qBAAA,kBACd,OAAA,oCACA,YAAA,WACA,OAAA,GAAU,OAAA;EAEV,KAAA,EAAO,UAAA;EACP,IAAA;EACA,OAAA,EAAS,OAAA;AAAA;;;;AAr6FyB;AAWpC;iBAk/FgB,gBAAA,CAAiB,KAAA,YAAiB,cAAA;;;;;;;UC5sGjC,mBAAA,sBACM,WAAA,GAAc,WAAA;EPxBU;EAAA,SO2BpC,EAAA,EAAI,OAAA;;WAEJ,MAAA,EAAQ,WAAA;;;;;WAKR,SAAA,EAAW,YAAA;EPlCuC;EAAA,SOoClD,MAAA,EAAQ,UAAA;EPpC0C;;;;EAAA,SOyClD,QAAA,EAAU,QAAA,CAAS,YAAA;;;;;;WAMnB,mBAAA,EAAqB,gBAAA,UAA0B,YAAA;;WAE/C,aAAA,IAAiB,KAAA,EAAO,WAAA;;;;;;WAMxB,cAAA,GAAiB,cAAA;AAAA;;;;;;iBAQZ,YAAA,sBAAkC,WAAA,GAAc,WAAA,EAC9D,OAAA,EAAS,mBAAA,CAAoB,YAAA,IAC5B,WAAA;;;;;;;KAUS,yBAAA,sBACW,WAAA,GAAc,WAAA,IACjC,IAAA,CAAK,mBAAA,CAAoB,YAAA;EAAA,SAClB,mBAAA,GAAsB,gBAAA,UAA0B,YAAA;WAEhD,QAAA;AAAA;;;;;;;iBASK,kBAAA,sBACO,WAAA,GAAc,WAAA,EACnC,OAAA,EAAS,yBAAA,CAA0B,YAAA,IAAgB,YAAA;;;;APrEoB;AAAA;iBOoGzD,qBAAA,sBAA2C,WAAA,EACzD,QAAA,EAAU,QAAA,CAAS,YAAA,UACnB,mBAAA,GAAsB,gBAAA,UAA0B,YAAA;EAEhD,MAAA;EACA,KAAA;EACA,GAAA,EAAK,WAAA;AAAA"}