@eifi1/ui-kit 0.51.7 → 0.52.0

package/dist/notifications/quiet-hours-setting.d.ts

@@ -20,7 +20,9 @@ export interface QuietHoursSettingProps extends Omit<ComponentPropsWithRef<"div"
     held?: boolean;
     /**
      * Save one change — `PATCH /notifications/settings`: a time, or `null` when cleared.
-     * Never a zone. The field shows the new value while the call runs and goes back if it
+     * Never a zone. Called when a time is ENTERED — the field left, or Enter, or the card
+     * unmounted with a time still typed — never per keystroke, and one call per field at a
+     * time (0.52). The field shows the new value while the call runs and goes back if it
      * rejects.
      */
     onChange: (patch: NotificationSettingsPatch) => Promise<unknown> | void;
@@ -45,8 +47,13 @@ export interface QuietHoursSettingProps extends Omit<ComponentPropsWithRef<"div"
  * only** — the zone of the device last used, else `Europe/Zurich`. The card names it
  * read-only and never sends one; there is no picker and no "Use it".
  *
- * - **Two times**, each saved as it is entered; a cleared time sends `null`. While only
- *   one is set the card says so: the window fails open until both are.
+ * - **Two times**, each saved when it is entered — on leaving the field or on Enter, or
+ *   when the card goes while it is still typed — and a cleared time sends `null`. While
+ *   only one is set the card says so: the window fails open until both are.
+ * - **One request per field at a time** (0.52): a time entered while that field's save
+ *   runs waits for it, and only the latest waiting one is sent. Each input event used to
+ *   PATCH — typing "30" over 22:00's minutes sent 22:03 and 22:30, and whichever answer
+ *   landed last stayed on the server (refactor audit 2026-10-30, FLW-4).
  * - **The zone** shows while a time is set: `zone`, else `fallbackZone`.
  *
  * Under a write lock the fields are `commit` controls exempt from billing.

package/dist/notifications/quiet-hours-setting.js

@@ -1,13 +1,13 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { useId, useState } from "react";
+import { useEffect, useId, useRef, useState } from "react";
 import { cn } from "../lib/cn.js";
 import { Card } from "../components/card.js";
 import { TimeInput } from "../components/time-input.js";
 import { COMMIT_EXCEPT_BILLING } from "../components/write-lock.js";
 import { CARD_DESCRIPTION_CLASS } from "../settings/settings-card-classes.js";
 import { SettingsCardTitle } from "../settings/settings-heading.js";
-import { settle, useMounted } from "../account/account-parts.js";
+import { settle, useMounted } from "../hooks/use-mounted.js";
 import { describeFailure, FailureLine, useNotificationsLabels, useWriteOverlay } from "./notification-parts.js";
 const DEFAULT_FALLBACK_ZONE = "Europe/Zurich";
 function zoneName(zone, regions) {
@@ -36,29 +36,64 @@ function QuietHoursSetting({
   const [failure, setFailure] = useState(null);
   const mounted = useMounted();
   const id = useId();
-  const shown = (field, server) => overlay.has(field) ? overlay.get(field) ?? null : server;
-  const startShown = shown("quiet_hours_start", start);
-  const endShown = shown("quiet_hours_end", end);
+  const [drafts, setDrafts] = useState({});
+  const running = useRef({});
+  const waiting = useRef({});
+  const server = (field) => field === "quiet_hours_start" ? start : end;
+  const saved = (field) => overlay.has(field) ? overlay.get(field) ?? null : server(field);
+  const shown = (field) => drafts[field] ?? saved(field) ?? "";
+  const startShown = shown("quiet_hours_start");
+  const endShown = shown("quiet_hours_end");
   const accountZone = zone ?? fallbackZone;
-  const save = (patch) => {
-    const fields = Object.keys(patch);
-    setFailure(null);
-    for (const field of fields) overlay.set(field, patch[field] ?? null);
-    settle(() => onChange(patch)).then(
-      () => {
-        if (mounted.current) for (const field of fields) overlay.settle(field, true);
-      },
-      (error) => {
-        if (!mounted.current) return;
-        for (const field of fields) overlay.settle(field, false);
-        setFailure(describeFailure(describeError?.(error), labels.failed));
-      }
+  const send = (field, value) => {
+    running.current[field] = true;
+    if (mounted.current) setFailure(null);
+    settle(() => onChange({ [field]: value })).then(
+      () => done(field, true),
+      (error) => done(field, false, error)
     );
   };
-  const saveTime = (field, value) => {
-    const next = value || null;
-    if (next === shown(field, field === "quiet_hours_start" ? start : end)) return;
-    save({ [field]: next });
+  const done = (field, ok, error) => {
+    running.current[field] = false;
+    if (Object.prototype.hasOwnProperty.call(waiting.current, field)) {
+      const next = waiting.current[field] ?? null;
+      delete waiting.current[field];
+      send(field, next);
+      return;
+    }
+    if (!mounted.current) return;
+    overlay.settle(field, ok);
+    if (!ok) setFailure(describeFailure(describeError?.(error), labels.failed));
+  };
+  const save = (field, draft) => {
+    const next = draft || null;
+    if (next === saved(field)) return void 0;
+    if (running.current[field]) waiting.current[field] = next;
+    else send(field, next);
+    return next;
+  };
+  const enter = (field) => {
+    const draft = drafts[field];
+    if (draft === void 0) return;
+    setDrafts((current) => {
+      const rest2 = { ...current };
+      delete rest2[field];
+      return rest2;
+    });
+    const next = save(field, draft);
+    if (next !== void 0) overlay.set(field, next);
+  };
+  const leave = useRef(() => {
+  });
+  useEffect(() => {
+    leave.current = () => {
+      for (const [field, draft] of Object.entries(drafts)) save(field, draft);
+    };
+  });
+  useEffect(() => () => leave.current(), []);
+  const type = (field, value) => setDrafts((current) => ({ ...current, [field]: value }));
+  const enterOnEnter = (field, event) => {
+    if (event.key === "Enter") enter(field);
   };
   const anySet = Boolean(startShown || endShown);
   const halfSet = Boolean(startShown) !== Boolean(endShown);
@@ -73,10 +108,12 @@ function QuietHoursSetting({
         {
           id: `${id}-start`,
           label: labels.quietFrom,
-          value: startShown ?? "",
+          value: startShown,
+          onValueChange: (value) => type("quiet_hours_start", value),
+          onBlur: () => enter("quiet_hours_start"),
+          onKeyDown: (event) => enterOnEnter("quiet_hours_start", event),
           disabled,
           commit: COMMIT_EXCEPT_BILLING,
-          onValueChange: (value) => saveTime("quiet_hours_start", value),
           className: "w-36"
         }
       ),
@@ -85,10 +122,12 @@ function QuietHoursSetting({
         {
           id: `${id}-end`,
           label: labels.quietUntil,
-          value: endShown ?? "",
+          value: endShown,
+          onValueChange: (value) => type("quiet_hours_end", value),
+          onBlur: () => enter("quiet_hours_end"),
+          onKeyDown: (event) => enterOnEnter("quiet_hours_end", event),
           disabled,
           commit: COMMIT_EXCEPT_BILLING,
-          onValueChange: (value) => saveTime("quiet_hours_end", value),
           className: "w-36"
         }
       )

package/dist/notifications/quiet-hours-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/notifications/quiet-hours-setting.tsx"],"sourcesContent":["import { useId, useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\n\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { Card } from \"../components/card\";\nimport { TimeInput } from \"../components/time-input\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { CARD_DESCRIPTION_CLASS } from \"../settings/settings-card-classes\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { settle, useMounted } from \"../account/account-parts\";\nimport { describeFailure, FailureLine, useNotificationsLabels, useWriteOverlay } from \"./notification-parts\";\nimport type { NotificationRegionLabels, NotificationsLabels } from \"./notifications-labels\";\nimport type { NotificationSettingsPatch } from \"./notification-types\";\n\n/** The zone the server applies while no device ever reported one (§10.3): every app's. */\nconst DEFAULT_FALLBACK_ZONE = \"Europe/Zurich\";\n\n/** A zone for a sentence: \"Europe / Zurich\", the region in the kit's words (`labels.regions`);\n *  a region the labels do not know keeps its IANA name, a zone with none (\"UTC\") is itself. */\nfunction zoneName(zone: string, regions: NotificationRegionLabels): string {\n  const slash = zone.indexOf(\"/\");\n  if (slash < 0) return zone;\n  const region = zone.slice(0, slash);\n  const named = Object.prototype.hasOwnProperty.call(regions, region)\n    ? regions[region as keyof NotificationRegionLabels]\n    : region;\n  return `${named} / ${zone\n    .slice(slash + 1)\n    .replace(/_/g, \" \")\n    .replace(/\\//g, \" / \")}`;\n}\n\nexport interface QuietHoursSettingProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"onChange\"> {\n  /** The `GET`'s `quiet_hours_start`, `\"HH:MM\"`, or `null`. */\n  start: string | null;\n  /** The `GET`'s `quiet_hours_end`. */\n  end: string | null;\n  /**\n   * 0.46 (§10.3, amended 2026-10-20: automatic only): the account's zone — `/auth/me`'s\n   * `device_timezone`, the zone of the device last used; `null` while no device has\n   * reported one, and the card then names `fallbackZone`, the zone the server applies.\n   * Shown read-only once a time is set (\"In your time zone (Europe / Zurich), which follows\n   * the device you last used.\"). No picker: the zone is never chosen.\n   */\n  zone?: string | null;\n  /** 0.46 (§10.4): the app queues a held push and sends it when the window ends (it runs\n   *  the notifications tick); the description says so. Default `false`: dropped. */\n  held?: boolean;\n  /**\n   * Save one change — `PATCH /notifications/settings`: a time, or `null` when cleared.\n   * Never a zone. The field shows the new value while the call runs and goes back if it\n   * rejects.\n   */\n  onChange: (patch: NotificationSettingsPatch) => Promise<unknown> | void;\n  /** The zone named while `zone` names none: the one the server\n   *  applies. Default `\"Europe/Zurich\"`, every app's. */\n  fallbackZone?: string;\n  /** The app keeps an inbox, and the description says a held push still reaches it. */\n  inbox?: boolean;\n  disabled?: boolean;\n  /** The app's own words for a failed save, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: LabelOverride<NotificationsLabels>;\n}\n\ntype QuietField = \"quiet_hours_start\" | \"quiet_hours_end\";\n\n/**\n * Quiet hours (docs/notifications-harmonization.md §2.4, §2.6, §4.2): a window of local\n * times in the account's zone, which may cross midnight, when no push of a machine-sent\n * type is sent. A held push is dropped — or, with `held` (0.46, §10.4), sent when the\n * window ends; the inbox row and the mail go as usual. keksdose's block, as a card of its\n * own.\n *\n * **0.46 (§10.3, amended 2026-10-20, Marcel): the zone is the account's, automatic\n * only** — the zone of the device last used, else `Europe/Zurich`. The card names it\n * read-only and never sends one; there is no picker and no \"Use it\".\n *\n * - **Two times**, each saved as it is entered; a cleared time sends `null`. While only\n *   one is set the card says so: the window fails open until both are.\n * - **The zone** shows while a time is set: `zone`, else `fallbackZone`.\n *\n * Under a write lock the fields are `commit` controls exempt from billing.\n */\nexport function QuietHoursSetting({\n  start,\n  end,\n  zone,\n  held = false,\n  onChange,\n  fallbackZone = DEFAULT_FALLBACK_ZONE,\n  inbox = false,\n  disabled = false,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: QuietHoursSettingProps) {\n  const labels = useNotificationsLabels(labelsProp);\n  const overlay = useWriteOverlay<string | null>(`${start}|${end}`);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n  const id = useId();\n\n  const shown = (field: QuietField, server: string | null) =>\n    overlay.has(field) ? (overlay.get(field) ?? null) : server;\n  const startShown = shown(\"quiet_hours_start\", start);\n  const endShown = shown(\"quiet_hours_end\", end);\n  const accountZone = zone ?? fallbackZone;\n\n  const save = (patch: NotificationSettingsPatch) => {\n    const fields = Object.keys(patch) as QuietField[];\n    setFailure(null);\n    for (const field of fields) overlay.set(field, patch[field] ?? null);\n    settle(() => onChange(patch)).then(\n      () => {\n        if (mounted.current) for (const field of fields) overlay.settle(field, true);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        for (const field of fields) overlay.settle(field, false);\n        setFailure(describeFailure(describeError?.(error), labels.failed));\n      },\n    );\n  };\n\n  const saveTime = (field: \"quiet_hours_start\" | \"quiet_hours_end\", value: string) => {\n    const next = value || null;\n    if (next === shown(field, field === \"quiet_hours_start\" ? start : end)) return;\n    save({ [field]: next });\n  };\n\n  const anySet = Boolean(startShown || endShown);\n  const halfSet = Boolean(startShown) !== Boolean(endShown);\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.quietTitle}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.quietDescription(inbox, held)}</div>\n      </div>\n      <div className=\"flex flex-wrap items-end gap-3\">\n        <TimeInput\n          id={`${id}-start`}\n          label={labels.quietFrom}\n          value={startShown ?? \"\"}\n          disabled={disabled}\n          commit={COMMIT_EXCEPT_BILLING}\n          onValueChange={(value) => saveTime(\"quiet_hours_start\", value)}\n          className=\"w-36\"\n        />\n        <TimeInput\n          id={`${id}-end`}\n          label={labels.quietUntil}\n          value={endShown ?? \"\"}\n          disabled={disabled}\n          commit={COMMIT_EXCEPT_BILLING}\n          onValueChange={(value) => saveTime(\"quiet_hours_end\", value)}\n          className=\"w-36\"\n        />\n      </div>\n      {halfSet && (\n        <p className=\"text-xs text-warning\" data-quiet-incomplete=\"\">\n          {labels.quietIncomplete}\n        </p>\n      )}\n      {anySet && (\n        <p className={CARD_DESCRIPTION_CLASS} data-quiet-zone=\"\">\n          {labels.quietZone(zoneName(accountZone, labels.regions))}\n        </p>\n      )}\n      <FailureLine>{failure}</FailureLine>\n    </Card>\n  );\n}\n"],"mappings":";AA0IM,SACE,KADF;AA1IN,SAAS,OAAO,gBAAgB;AAIhC,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,6BAA6B;AACtC,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC,SAAS,QAAQ,kBAAkB;AACnC,SAAS,iBAAiB,aAAa,wBAAwB,uBAAuB;AAKtF,MAAM,wBAAwB;AAI9B,SAAS,SAAS,MAAc,SAA2C;AACzE,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,SAAS,KAAK,MAAM,GAAG,KAAK;AAClC,QAAM,QAAQ,OAAO,UAAU,eAAe,KAAK,SAAS,MAAM,IAC9D,QAAQ,MAAwC,IAChD;AACJ,SAAO,GAAG,KAAK,MAAM,KAClB,MAAM,QAAQ,CAAC,EACf,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,KAAK,CAAC;AAC1B;AAsDO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,WAAW;AAAA,EACX;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,uBAAuB,UAAU;AAChD,QAAM,UAAU,gBAA+B,GAAG,KAAK,IAAI,GAAG,EAAE;AAChE,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAC3B,QAAM,KAAK,MAAM;AAEjB,QAAM,QAAQ,CAAC,OAAmB,WAChC,QAAQ,IAAI,KAAK,IAAK,QAAQ,IAAI,KAAK,KAAK,OAAQ;AACtD,QAAM,aAAa,MAAM,qBAAqB,KAAK;AACnD,QAAM,WAAW,MAAM,mBAAmB,GAAG;AAC7C,QAAM,cAAc,QAAQ;AAE5B,QAAM,OAAO,CAAC,UAAqC;AACjD,UAAM,SAAS,OAAO,KAAK,KAAK;AAChC,eAAW,IAAI;AACf,eAAW,SAAS,OAAQ,SAAQ,IAAI,OAAO,MAAM,KAAK,KAAK,IAAI;AACnE,WAAO,MAAM,SAAS,KAAK,CAAC,EAAE;AAAA,MAC5B,MAAM;AACJ,YAAI,QAAQ,QAAS,YAAW,SAAS,OAAQ,SAAQ,OAAO,OAAO,IAAI;AAAA,MAC7E;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,mBAAW,SAAS,OAAQ,SAAQ,OAAO,OAAO,KAAK;AACvD,mBAAW,gBAAgB,gBAAgB,KAAK,GAAG,OAAO,MAAM,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,CAAC,OAAgD,UAAkB;AAClF,UAAM,OAAO,SAAS;AACtB,QAAI,SAAS,MAAM,OAAO,UAAU,sBAAsB,QAAQ,GAAG,EAAG;AACxE,SAAK,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC;AAAA,EACxB;AAEA,QAAM,SAAS,QAAQ,cAAc,QAAQ;AAC7C,QAAM,UAAU,QAAQ,UAAU,MAAM,QAAQ,QAAQ;AAExD,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,YAAW;AAAA,MACtC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,iBAAiB,OAAO,IAAI,GAAE;AAAA,OAChF;AAAA,IACA,qBAAC,SAAI,WAAU,kCACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,IAAI,GAAG,EAAE;AAAA,UACT,OAAO,OAAO;AAAA,UACd,OAAO,cAAc;AAAA,UACrB;AAAA,UACA,QAAQ;AAAA,UACR,eAAe,CAAC,UAAU,SAAS,qBAAqB,KAAK;AAAA,UAC7D,WAAU;AAAA;AAAA,MACZ;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAI,GAAG,EAAE;AAAA,UACT,OAAO,OAAO;AAAA,UACd,OAAO,YAAY;AAAA,UACnB;AAAA,UACA,QAAQ;AAAA,UACR,eAAe,CAAC,UAAU,SAAS,mBAAmB,KAAK;AAAA,UAC3D,WAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IACC,WACC,oBAAC,OAAE,WAAU,wBAAuB,yBAAsB,IACvD,iBAAO,iBACV;AAAA,IAED,UACC,oBAAC,OAAE,WAAW,wBAAwB,mBAAgB,IACnD,iBAAO,UAAU,SAAS,aAAa,OAAO,OAAO,CAAC,GACzD;AAAA,IAEF,oBAAC,eAAa,mBAAQ;AAAA,KACxB;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/notifications/quiet-hours-setting.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, KeyboardEvent, ReactNode } from \"react\";\n\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { Card } from \"../components/card\";\nimport { TimeInput } from \"../components/time-input\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { CARD_DESCRIPTION_CLASS } from \"../settings/settings-card-classes\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport { settle, useMounted } from \"../hooks/use-mounted\";\nimport { describeFailure, FailureLine, useNotificationsLabels, useWriteOverlay } from \"./notification-parts\";\nimport type { NotificationRegionLabels, NotificationsLabels } from \"./notifications-labels\";\nimport type { NotificationSettingsPatch } from \"./notification-types\";\n\n/** The zone the server applies while no device ever reported one (§10.3): every app's. */\nconst DEFAULT_FALLBACK_ZONE = \"Europe/Zurich\";\n\n/** A zone for a sentence: \"Europe / Zurich\", the region in the kit's words (`labels.regions`);\n *  a region the labels do not know keeps its IANA name, a zone with none (\"UTC\") is itself. */\nfunction zoneName(zone: string, regions: NotificationRegionLabels): string {\n  const slash = zone.indexOf(\"/\");\n  if (slash < 0) return zone;\n  const region = zone.slice(0, slash);\n  const named = Object.prototype.hasOwnProperty.call(regions, region)\n    ? regions[region as keyof NotificationRegionLabels]\n    : region;\n  return `${named} / ${zone\n    .slice(slash + 1)\n    .replace(/_/g, \" \")\n    .replace(/\\//g, \" / \")}`;\n}\n\nexport interface QuietHoursSettingProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"onChange\"> {\n  /** The `GET`'s `quiet_hours_start`, `\"HH:MM\"`, or `null`. */\n  start: string | null;\n  /** The `GET`'s `quiet_hours_end`. */\n  end: string | null;\n  /**\n   * 0.46 (§10.3, amended 2026-10-20: automatic only): the account's zone — `/auth/me`'s\n   * `device_timezone`, the zone of the device last used; `null` while no device has\n   * reported one, and the card then names `fallbackZone`, the zone the server applies.\n   * Shown read-only once a time is set (\"In your time zone (Europe / Zurich), which follows\n   * the device you last used.\"). No picker: the zone is never chosen.\n   */\n  zone?: string | null;\n  /** 0.46 (§10.4): the app queues a held push and sends it when the window ends (it runs\n   *  the notifications tick); the description says so. Default `false`: dropped. */\n  held?: boolean;\n  /**\n   * Save one change — `PATCH /notifications/settings`: a time, or `null` when cleared.\n   * Never a zone. Called when a time is ENTERED — the field left, or Enter, or the card\n   * unmounted with a time still typed — never per keystroke, and one call per field at a\n   * time (0.52). The field shows the new value while the call runs and goes back if it\n   * rejects.\n   */\n  onChange: (patch: NotificationSettingsPatch) => Promise<unknown> | void;\n  /** The zone named while `zone` names none: the one the server\n   *  applies. Default `\"Europe/Zurich\"`, every app's. */\n  fallbackZone?: string;\n  /** The app keeps an inbox, and the description says a held push still reaches it. */\n  inbox?: boolean;\n  disabled?: boolean;\n  /** The app's own words for a failed save, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: LabelOverride<NotificationsLabels>;\n}\n\ntype QuietField = \"quiet_hours_start\" | \"quiet_hours_end\";\n\n/**\n * Quiet hours (docs/notifications-harmonization.md §2.4, §2.6, §4.2): a window of local\n * times in the account's zone, which may cross midnight, when no push of a machine-sent\n * type is sent. A held push is dropped — or, with `held` (0.46, §10.4), sent when the\n * window ends; the inbox row and the mail go as usual. keksdose's block, as a card of its\n * own.\n *\n * **0.46 (§10.3, amended 2026-10-20, Marcel): the zone is the account's, automatic\n * only** — the zone of the device last used, else `Europe/Zurich`. The card names it\n * read-only and never sends one; there is no picker and no \"Use it\".\n *\n * - **Two times**, each saved when it is entered — on leaving the field or on Enter, or\n *   when the card goes while it is still typed — and a cleared time sends `null`. While\n *   only one is set the card says so: the window fails open until both are.\n * - **One request per field at a time** (0.52): a time entered while that field's save\n *   runs waits for it, and only the latest waiting one is sent. Each input event used to\n *   PATCH — typing \"30\" over 22:00's minutes sent 22:03 and 22:30, and whichever answer\n *   landed last stayed on the server (refactor audit 2026-10-30, FLW-4).\n * - **The zone** shows while a time is set: `zone`, else `fallbackZone`.\n *\n * Under a write lock the fields are `commit` controls exempt from billing.\n */\nexport function QuietHoursSetting({\n  start,\n  end,\n  zone,\n  held = false,\n  onChange,\n  fallbackZone = DEFAULT_FALLBACK_ZONE,\n  inbox = false,\n  disabled = false,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: QuietHoursSettingProps) {\n  const labels = useNotificationsLabels(labelsProp);\n  const overlay = useWriteOverlay<string | null>(`${start}|${end}`);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n  const id = useId();\n\n  // What is typed and not yet entered, per field: the field shows it, nothing is sent.\n  const [drafts, setDrafts] = useState<Partial<Record<QuietField, string>>>({});\n  // Per field: whether a save runs, and the latest time entered while it did (own key =\n  // one is waiting). Refs: a save's answer reads them after renders it did not see.\n  const running = useRef<Partial<Record<QuietField, boolean>>>({});\n  const waiting = useRef<Partial<Record<QuietField, string | null>>>({});\n\n  const server = (field: QuietField) => (field === \"quiet_hours_start\" ? start : end);\n  const saved = (field: QuietField) => (overlay.has(field) ? (overlay.get(field) ?? null) : server(field));\n  const shown = (field: QuietField) => drafts[field] ?? saved(field) ?? \"\";\n  const startShown = shown(\"quiet_hours_start\");\n  const endShown = shown(\"quiet_hours_end\");\n  const accountZone = zone ?? fallbackZone;\n\n  const send = (field: QuietField, value: string | null) => {\n    running.current[field] = true;\n    if (mounted.current) setFailure(null);\n    settle(() => onChange({ [field]: value })).then(\n      () => done(field, true),\n      (error: unknown) => done(field, false, error),\n    );\n  };\n\n  /** A save answered: the waiting time goes next — even after an unmount, it is what the\n   *  person entered last — and supersedes this answer, a failure included. */\n  const done = (field: QuietField, ok: boolean, error?: unknown) => {\n    running.current[field] = false;\n    if (Object.prototype.hasOwnProperty.call(waiting.current, field)) {\n      const next = waiting.current[field] ?? null;\n      delete waiting.current[field];\n      send(field, next);\n      return;\n    }\n    if (!mounted.current) return;\n    overlay.settle(field, ok);\n    if (!ok) setFailure(describeFailure(describeError?.(error), labels.failed));\n  };\n\n  /** `draft` entered: the time it names, or `undefined` when that is what the field\n   *  already holds and nothing is to be sent. Queued behind the field's running save. */\n  const save = (field: QuietField, draft: string): string | null | undefined => {\n    const next = draft || null;\n    if (next === saved(field)) return undefined;\n    if (running.current[field]) waiting.current[field] = next;\n    else send(field, next);\n    return next;\n  };\n\n  /** The typed time, entered: saved unless it is what the field already holds. */\n  const enter = (field: QuietField) => {\n    const draft = drafts[field];\n    if (draft === undefined) return;\n    setDrafts((current) => {\n      const rest = { ...current };\n      delete rest[field];\n      return rest;\n    });\n    const next = save(field, draft);\n    if (next !== undefined) overlay.set(field, next);\n  };\n\n  // Leaving the card is leaving the field. A focused input removed with its card fires no\n  // blur — Escape on the settings sheet, a shortcut that navigates — and the time it showed\n  // as typed was dropped (0.52 code review, quiet-hours-setting.tsx; save-on-blur is FLW-4's\n  // decision). So whatever is still typed is entered as the card goes. A ref to this\n  // render's drafts and saved values, assigned in an effect, never during render.\n  const leave = useRef<() => void>(() => {});\n  useEffect(() => {\n    leave.current = () => {\n      for (const [field, draft] of Object.entries(drafts) as [QuietField, string][]) save(field, draft);\n    };\n  });\n  useEffect(() => () => leave.current(), []);\n\n  const type = (field: QuietField, value: string) => setDrafts((current) => ({ ...current, [field]: value }));\n  const enterOnEnter = (field: QuietField, event: KeyboardEvent<HTMLInputElement>) => {\n    if (event.key === \"Enter\") enter(field);\n  };\n\n  const anySet = Boolean(startShown || endShown);\n  const halfSet = Boolean(startShown) !== Boolean(endShown);\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.quietTitle}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.quietDescription(inbox, held)}</div>\n      </div>\n      <div className=\"flex flex-wrap items-end gap-3\">\n        <TimeInput\n          id={`${id}-start`}\n          label={labels.quietFrom}\n          value={startShown}\n          onValueChange={(value) => type(\"quiet_hours_start\", value)}\n          onBlur={() => enter(\"quiet_hours_start\")}\n          onKeyDown={(event) => enterOnEnter(\"quiet_hours_start\", event)}\n          disabled={disabled}\n          commit={COMMIT_EXCEPT_BILLING}\n          className=\"w-36\"\n        />\n        <TimeInput\n          id={`${id}-end`}\n          label={labels.quietUntil}\n          value={endShown}\n          onValueChange={(value) => type(\"quiet_hours_end\", value)}\n          onBlur={() => enter(\"quiet_hours_end\")}\n          onKeyDown={(event) => enterOnEnter(\"quiet_hours_end\", event)}\n          disabled={disabled}\n          commit={COMMIT_EXCEPT_BILLING}\n          className=\"w-36\"\n        />\n      </div>\n      {halfSet && (\n        <p className=\"text-xs text-warning\" data-quiet-incomplete=\"\">\n          {labels.quietIncomplete}\n        </p>\n      )}\n      {anySet && (\n        <p className={CARD_DESCRIPTION_CLASS} data-quiet-zone=\"\">\n          {labels.quietZone(zoneName(accountZone, labels.regions))}\n        </p>\n      )}\n      <FailureLine>{failure}</FailureLine>\n    </Card>\n  );\n}\n"],"mappings":";AAoMM,SACE,KADF;AApMN,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAInD,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,6BAA6B;AACtC,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC,SAAS,QAAQ,kBAAkB;AACnC,SAAS,iBAAiB,aAAa,wBAAwB,uBAAuB;AAKtF,MAAM,wBAAwB;AAI9B,SAAS,SAAS,MAAc,SAA2C;AACzE,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,SAAS,KAAK,MAAM,GAAG,KAAK;AAClC,QAAM,QAAQ,OAAO,UAAU,eAAe,KAAK,SAAS,MAAM,IAC9D,QAAQ,MAAwC,IAChD;AACJ,SAAO,GAAG,KAAK,MAAM,KAClB,MAAM,QAAQ,CAAC,EACf,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,KAAK,CAAC;AAC1B;AA6DO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,WAAW;AAAA,EACX;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,uBAAuB,UAAU;AAChD,QAAM,UAAU,gBAA+B,GAAG,KAAK,IAAI,GAAG,EAAE;AAChE,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAC3B,QAAM,KAAK,MAAM;AAGjB,QAAM,CAAC,QAAQ,SAAS,IAAI,SAA8C,CAAC,CAAC;AAG5E,QAAM,UAAU,OAA6C,CAAC,CAAC;AAC/D,QAAM,UAAU,OAAmD,CAAC,CAAC;AAErE,QAAM,SAAS,CAAC,UAAuB,UAAU,sBAAsB,QAAQ;AAC/E,QAAM,QAAQ,CAAC,UAAuB,QAAQ,IAAI,KAAK,IAAK,QAAQ,IAAI,KAAK,KAAK,OAAQ,OAAO,KAAK;AACtG,QAAM,QAAQ,CAAC,UAAsB,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK;AACtE,QAAM,aAAa,MAAM,mBAAmB;AAC5C,QAAM,WAAW,MAAM,iBAAiB;AACxC,QAAM,cAAc,QAAQ;AAE5B,QAAM,OAAO,CAAC,OAAmB,UAAyB;AACxD,YAAQ,QAAQ,KAAK,IAAI;AACzB,QAAI,QAAQ,QAAS,YAAW,IAAI;AACpC,WAAO,MAAM,SAAS,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,EAAE;AAAA,MACzC,MAAM,KAAK,OAAO,IAAI;AAAA,MACtB,CAAC,UAAmB,KAAK,OAAO,OAAO,KAAK;AAAA,IAC9C;AAAA,EACF;AAIA,QAAM,OAAO,CAAC,OAAmB,IAAa,UAAoB;AAChE,YAAQ,QAAQ,KAAK,IAAI;AACzB,QAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,SAAS,KAAK,GAAG;AAChE,YAAM,OAAO,QAAQ,QAAQ,KAAK,KAAK;AACvC,aAAO,QAAQ,QAAQ,KAAK;AAC5B,WAAK,OAAO,IAAI;AAChB;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,QAAS;AACtB,YAAQ,OAAO,OAAO,EAAE;AACxB,QAAI,CAAC,GAAI,YAAW,gBAAgB,gBAAgB,KAAK,GAAG,OAAO,MAAM,CAAC;AAAA,EAC5E;AAIA,QAAM,OAAO,CAAC,OAAmB,UAA6C;AAC5E,UAAM,OAAO,SAAS;AACtB,QAAI,SAAS,MAAM,KAAK,EAAG,QAAO;AAClC,QAAI,QAAQ,QAAQ,KAAK,EAAG,SAAQ,QAAQ,KAAK,IAAI;AAAA,QAChD,MAAK,OAAO,IAAI;AACrB,WAAO;AAAA,EACT;AAGA,QAAM,QAAQ,CAAC,UAAsB;AACnC,UAAM,QAAQ,OAAO,KAAK;AAC1B,QAAI,UAAU,OAAW;AACzB,cAAU,CAAC,YAAY;AACrB,YAAMA,QAAO,EAAE,GAAG,QAAQ;AAC1B,aAAOA,MAAK,KAAK;AACjB,aAAOA;AAAA,IACT,CAAC;AACD,UAAM,OAAO,KAAK,OAAO,KAAK;AAC9B,QAAI,SAAS,OAAW,SAAQ,IAAI,OAAO,IAAI;AAAA,EACjD;AAOA,QAAM,QAAQ,OAAmB,MAAM;AAAA,EAAC,CAAC;AACzC,YAAU,MAAM;AACd,UAAM,UAAU,MAAM;AACpB,iBAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAM,EAA6B,MAAK,OAAO,KAAK;AAAA,IAClG;AAAA,EACF,CAAC;AACD,YAAU,MAAM,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEzC,QAAM,OAAO,CAAC,OAAmB,UAAkB,UAAU,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,KAAK,GAAG,MAAM,EAAE;AAC1G,QAAM,eAAe,CAAC,OAAmB,UAA2C;AAClF,QAAI,MAAM,QAAQ,QAAS,OAAM,KAAK;AAAA,EACxC;AAEA,QAAM,SAAS,QAAQ,cAAc,QAAQ;AAC7C,QAAM,UAAU,QAAQ,UAAU,MAAM,QAAQ,QAAQ;AAExD,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,YAAW;AAAA,MACtC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,iBAAiB,OAAO,IAAI,GAAE;AAAA,OAChF;AAAA,IACA,qBAAC,SAAI,WAAU,kCACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,IAAI,GAAG,EAAE;AAAA,UACT,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,eAAe,CAAC,UAAU,KAAK,qBAAqB,KAAK;AAAA,UACzD,QAAQ,MAAM,MAAM,mBAAmB;AAAA,UACvC,WAAW,CAAC,UAAU,aAAa,qBAAqB,KAAK;AAAA,UAC7D;AAAA,UACA,QAAQ;AAAA,UACR,WAAU;AAAA;AAAA,MACZ;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAI,GAAG,EAAE;AAAA,UACT,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,eAAe,CAAC,UAAU,KAAK,mBAAmB,KAAK;AAAA,UACvD,QAAQ,MAAM,MAAM,iBAAiB;AAAA,UACrC,WAAW,CAAC,UAAU,aAAa,mBAAmB,KAAK;AAAA,UAC3D;AAAA,UACA,QAAQ;AAAA,UACR,WAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IACC,WACC,oBAAC,OAAE,WAAU,wBAAuB,yBAAsB,IACvD,iBAAO,iBACV;AAAA,IAED,UACC,oBAAC,OAAE,WAAW,wBAAwB,mBAAgB,IACnD,iBAAO,UAAU,SAAS,aAAa,OAAO,OAAO,CAAC,GACzD;AAAA,IAEF,oBAAC,eAAa,mBAAQ;AAAA,KACxB;AAEJ;","names":["rest"]}

package/dist/notifications/unsubscribe-panel.js

@@ -3,11 +3,12 @@ import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { useRef, useState } from "react";
 import { CheckCircle2, Link2Off } from "lucide-react";
 import { cn } from "../lib/cn.js";
-import { errorBodyWithCode, httpStatusOf } from "../auth/auth-errors.js";
+import { errorBodyWithCode } from "../auth/auth-errors.js";
+import { httpStatusOf } from "../lib/http-status.js";
 import { INTRO_CLASS, OUTCOME_CLASS, STATUS_HEADING_CLASS, useFocusWhen } from "../auth/status-parts.js";
 import { Button } from "../components/button.js";
 import { EmptyState } from "../components/empty-state.js";
-import { useMounted } from "../account/account-parts.js";
+import { useMounted } from "../hooks/use-mounted.js";
 import { FailureLine, useNotificationsLabels } from "./notification-parts.js";
 const TYPE_ID = /^[a-z][a-z0-9_]{1,39}$/;
 const BASE64URL = /^[A-Za-z0-9_-]+$/;
@@ -87,11 +88,7 @@ function UnsubscribePanel({
         tone: "success",
         icon: /* @__PURE__ */ jsx(CheckCircle2, {}),
         title: shown === "stopped-these" ? labels.stoppedThese : labels.stoppedAll(appName),
-        hint: /* @__PURE__ */ jsxs(Fragment, { children: [
-          labels.accountMail,
-          " ",
-          labels.turnBackOn
-        ] }),
+        hint: labels.stoppedHint(labels.accountMail, labels.turnBackOn),
         action: settingsLink,
         className: OUTCOME_CLASS
       }

package/dist/notifications/unsubscribe-panel.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/notifications/unsubscribe-panel.tsx"],"sourcesContent":["import { useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { CheckCircle2, Link2Off } from \"lucide-react\";\n\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { errorBodyWithCode, httpStatusOf } from \"../auth/auth-errors\";\nimport { INTRO_CLASS, OUTCOME_CLASS, STATUS_HEADING_CLASS, useFocusWhen } from \"../auth/status-parts\";\nimport type { AuthHeadingLevel } from \"../auth/status-parts\";\nimport { Button } from \"../components/button\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { useMounted } from \"../account/account-parts\";\nimport { FailureLine, useNotificationsLabels } from \"./notification-parts\";\nimport type { NotificationsLabels } from \"./notifications-labels\";\n\n/** A type id, as the server's registry allows it (§2.1). */\nconst TYPE_ID = /^[a-z][a-z0-9_]{1,39}$/;\n/** base64url, unpadded, as the token's `<data>` is written (§3.6). */\nconst BASE64URL = /^[A-Za-z0-9_-]+$/;\n\n/**\n * The notification type an unsubscribe token names, read from its `<data>` half —\n * `v1.<base64url(\"<user_id>:<type id>\")>.<mac>` (docs/notifications-harmonization.md\n * §3.6) — or `null` for a token that does not parse. Only the claim is read: the MAC is\n * the server's to check, so a forged token still names a type here and the server\n * refuses it. For the page's words (\"You get e-mails about: Overdue invoices\").\n */\nexport function unsubscribeTokenType(token: string): string | null {\n  const parts = token.split(\".\");\n  if (parts.length !== 3) return null;\n  const [version, data, mac] = parts;\n  if (version !== \"v1\" || !BASE64URL.test(data) || !BASE64URL.test(mac) || data.length % 4 === 1) return null;\n  let claim: string;\n  try {\n    claim = atob(data.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"=\".repeat((4 - (data.length % 4)) % 4));\n  } catch {\n    return null;\n  }\n  const colon = claim.indexOf(\":\");\n  if (colon < 1) return null;\n  const type = claim.slice(colon + 1);\n  return TYPE_ID.test(type) ? type : null;\n}\n\n/** server-kit's `UnsubscribeTokenError`: 400 `{code: \"unsubscribe_invalid\"}`. A body\n *  thrown as it came, with no status, counts on its code. */\nfunction defaultIsInvalid(error: unknown): boolean {\n  const coded = errorBodyWithCode(error, (code) => code === \"unsubscribe_invalid\") !== undefined;\n  const status = httpStatusOf(error);\n  return coded && (status === undefined || status === 400);\n}\n\nexport interface UnsubscribePanelProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"title\"> {\n  /** The `token` from the page's query (`/unsubscribe?token=…`). */\n  token: string;\n  /** The app's name, for \"Stop all notification e-mails from {app}\". */\n  appName: string;\n  /** The type's name in the app's words, from {@link unsubscribeTokenType}. Without it\n   *  the page says only that notification mail comes. */\n  typeLabel?: string;\n  /** `POST /notifications/unsubscribe/{token}`: that type's e-mail off. */\n  onStop: (token: string) => Promise<unknown>;\n  /** `POST /notifications/unsubscribe/{token}/all`: every e-mail switch off. */\n  onStopAll: (token: string) => Promise<unknown>;\n  /** Settings → Notifications, through the provider's link component. */\n  settingsHref: string;\n  /** Whether a rejection means the link is no good. Default: a 400 with\n   *  `code: \"unsubscribe_invalid\"`. Anything else is \"try again\". */\n  isInvalid?: (error: unknown) => boolean;\n  /** The heading. Default `labels.unsubscribeTitle`; `null` draws none, for a page that\n   *  puts it in `AuthLayout`'s `title`. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<NotificationsLabels>;\n}\n\ntype Phase = \"ready\" | \"these\" | \"all\" | \"stopped-these\" | \"stopped-all\" | \"invalid\" | \"failed\";\n\n/**\n * The body of an app's signed-out `/unsubscribe` page (docs/notifications-harmonization.md\n * §3.6, §4.2) — the page a notification mail's footer links to. It works signed in or\n * out (auth §7), and is not a card.\n *\n * **Nothing happens on a GET**: link scanners fetch every URL, so the page asks first —\n * \"Stop these e-mails\", or \"Stop all notification e-mails from {app}\" — and only a press\n * POSTs. A mail client's one-click POST goes to the server's route directly, without\n * this page. Account mail is not a notification and keeps coming; the page says so, and\n * then how to turn the mail back on (Settings → Notifications).\n *\n * A token that does not parse is \"this link doesn't work\" at once, with no request; the\n * server's refusal (`unsubscribe_invalid`) says the same. Any other failure is \"try\n * again\", the buttons still there. A valid token always answers 200 — also when the\n * switch was already off or the account is gone — so the done state reveals nothing.\n */\nexport function UnsubscribePanel({\n  token,\n  appName,\n  typeLabel,\n  onStop,\n  onStopAll,\n  settingsHref,\n  isInvalid = defaultIsInvalid,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: UnsubscribePanelProps) {\n  const labels = useNotificationsLabels(labelsProp);\n  const parses = unsubscribeTokenType(token) !== null;\n  const [phase, setPhase] = useState<Phase>(\"ready\");\n  const mounted = useMounted();\n  const outcomeRef = useRef<HTMLDivElement>(null);\n  const shown: Phase = parses ? phase : \"invalid\";\n  const done = shown === \"stopped-these\" || shown === \"stopped-all\";\n  useFocusWhen(done, outcomeRef);\n\n  const stop = (which: \"these\" | \"all\") => {\n    if (shown !== \"ready\" && shown !== \"failed\") return;\n    setPhase(which);\n    const call = which === \"these\" ? onStop : onStopAll;\n    call(token).then(\n      () => {\n        if (mounted.current) setPhase(which === \"these\" ? \"stopped-these\" : \"stopped-all\");\n      },\n      (error: unknown) => {\n        if (mounted.current) setPhase(isInvalid(error) ? \"invalid\" : \"failed\");\n      },\n    );\n  };\n\n  const settingsLink = (\n    <Button href={settingsHref} variant=\"secondary\">\n      {labels.openSettings}\n    </Button>\n  );\n\n  let body: ReactNode;\n  if (shown === \"invalid\") {\n    body = (\n      <EmptyState\n        tone=\"danger\"\n        icon={<Link2Off />}\n        title={labels.invalidLink}\n        action={settingsLink}\n        className={OUTCOME_CLASS}\n      />\n    );\n  } else if (done) {\n    body = (\n      <div ref={outcomeRef} tabIndex={-1} className=\"outline-none\">\n        <EmptyState\n          tone=\"success\"\n          icon={<CheckCircle2 />}\n          title={shown === \"stopped-these\" ? labels.stoppedThese : labels.stoppedAll(appName)}\n          hint={\n            <>\n              {labels.accountMail} {labels.turnBackOn}\n            </>\n          }\n          action={settingsLink}\n          className={OUTCOME_CLASS}\n        />\n      </div>\n    );\n  } else {\n    const working = shown === \"these\" || shown === \"all\";\n    body = (\n      <>\n        <p className={INTRO_CLASS}>{typeLabel ? labels.unsubscribeAbout(typeLabel) : labels.unsubscribeGeneric}</p>\n        <p className={INTRO_CLASS}>{labels.accountMail}</p>\n        <div className=\"flex flex-col gap-2 sm:flex-row sm:flex-wrap\">\n          <Button\n            type=\"button\"\n            pending={shown === \"these\"}\n            disabled={working && shown !== \"these\"}\n            onClick={() => stop(\"these\")}\n          >\n            {labels.stopThese}\n          </Button>\n          <Button\n            type=\"button\"\n            variant=\"secondary\"\n            pending={shown === \"all\"}\n            disabled={working && shown !== \"all\"}\n            onClick={() => stop(\"all\")}\n          >\n            {labels.stopAll(appName)}\n          </Button>\n        </div>\n        {shown === \"failed\" && <FailureLine>{labels.failed}</FailureLine>}\n      </>\n    );\n  }\n\n  return (\n    <div {...rest} data-state={shown} className={cn(\"space-y-3\", className)}>\n      {title === null ? null : <Heading className={STATUS_HEADING_CLASS}>{title ?? labels.unsubscribeTitle}</Heading>}\n      {body}\n    </div>\n  );\n}\n"],"mappings":";AAqII,SAwBQ,UAxBR,KAwBQ,YAxBR;AArIJ,SAAS,QAAQ,gBAAgB;AAEjC,SAAS,cAAc,gBAAgB;AAGvC,SAAS,UAAU;AACnB,SAAS,mBAAmB,oBAAoB;AAChD,SAAS,aAAa,eAAe,sBAAsB,oBAAoB;AAE/E,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAAS,aAAa,8BAA8B;AAIpD,MAAM,UAAU;AAEhB,MAAM,YAAY;AASX,SAAS,qBAAqB,OAA8B;AACjE,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,SAAS,MAAM,GAAG,IAAI;AAC7B,MAAI,YAAY,QAAQ,CAAC,UAAU,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,KAAK,KAAK,SAAS,MAAM,EAAG,QAAO;AACvG,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAK,SAAS,KAAM,CAAC,CAAC;AAAA,EACnG,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,OAAO,MAAM,MAAM,QAAQ,CAAC;AAClC,SAAO,QAAQ,KAAK,IAAI,IAAI,OAAO;AACrC;AAIA,SAAS,iBAAiB,OAAyB;AACjD,QAAM,QAAQ,kBAAkB,OAAO,CAAC,SAAS,SAAS,qBAAqB,MAAM;AACrF,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,UAAU,WAAW,UAAa,WAAW;AACtD;AA6CO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA0B;AACxB,QAAM,SAAS,uBAAuB,UAAU;AAChD,QAAM,SAAS,qBAAqB,KAAK,MAAM;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAgB,OAAO;AACjD,QAAM,UAAU,WAAW;AAC3B,QAAM,aAAa,OAAuB,IAAI;AAC9C,QAAM,QAAe,SAAS,QAAQ;AACtC,QAAM,OAAO,UAAU,mBAAmB,UAAU;AACpD,eAAa,MAAM,UAAU;AAE7B,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,UAAU,WAAW,UAAU,SAAU;AAC7C,aAAS,KAAK;AACd,UAAM,OAAO,UAAU,UAAU,SAAS;AAC1C,SAAK,KAAK,EAAE;AAAA,MACV,MAAM;AACJ,YAAI,QAAQ,QAAS,UAAS,UAAU,UAAU,kBAAkB,aAAa;AAAA,MACnF;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,QAAQ,QAAS,UAAS,UAAU,KAAK,IAAI,YAAY,QAAQ;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eACJ,oBAAC,UAAO,MAAM,cAAc,SAAQ,aACjC,iBAAO,cACV;AAGF,MAAI;AACJ,MAAI,UAAU,WAAW;AACvB,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,YAAS;AAAA,QAChB,OAAO,OAAO;AAAA,QACd,QAAQ;AAAA,QACR,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ,WAAW,MAAM;AACf,WACE,oBAAC,SAAI,KAAK,YAAY,UAAU,IAAI,WAAU,gBAC5C;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,gBAAa;AAAA,QACpB,OAAO,UAAU,kBAAkB,OAAO,eAAe,OAAO,WAAW,OAAO;AAAA,QAClF,MACE,iCACG;AAAA,iBAAO;AAAA,UAAY;AAAA,UAAE,OAAO;AAAA,WAC/B;AAAA,QAEF,QAAQ;AAAA,QACR,WAAW;AAAA;AAAA,IACb,GACF;AAAA,EAEJ,OAAO;AACL,UAAM,UAAU,UAAU,WAAW,UAAU;AAC/C,WACE,iCACE;AAAA,0BAAC,OAAE,WAAW,aAAc,sBAAY,OAAO,iBAAiB,SAAS,IAAI,OAAO,oBAAmB;AAAA,MACvG,oBAAC,OAAE,WAAW,aAAc,iBAAO,aAAY;AAAA,MAC/C,qBAAC,SAAI,WAAU,gDACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,UAAU;AAAA,YACnB,UAAU,WAAW,UAAU;AAAA,YAC/B,SAAS,MAAM,KAAK,OAAO;AAAA,YAE1B,iBAAO;AAAA;AAAA,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,SAAS,UAAU;AAAA,YACnB,UAAU,WAAW,UAAU;AAAA,YAC/B,SAAS,MAAM,KAAK,KAAK;AAAA,YAExB,iBAAO,QAAQ,OAAO;AAAA;AAAA,QACzB;AAAA,SACF;AAAA,MACC,UAAU,YAAY,oBAAC,eAAa,iBAAO,QAAO;AAAA,OACrD;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,cAAY,OAAO,WAAW,GAAG,aAAa,SAAS,GACnE;AAAA,cAAU,OAAO,OAAO,oBAAC,WAAQ,WAAW,sBAAuB,mBAAS,OAAO,kBAAiB;AAAA,IACpG;AAAA,KACH;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/notifications/unsubscribe-panel.tsx"],"sourcesContent":["import { useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { CheckCircle2, Link2Off } from \"lucide-react\";\n\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { errorBodyWithCode } from \"../auth/auth-errors\";\nimport { httpStatusOf } from \"../lib/http-status\";\nimport { INTRO_CLASS, OUTCOME_CLASS, STATUS_HEADING_CLASS, useFocusWhen } from \"../auth/status-parts\";\nimport type { AuthHeadingLevel } from \"../auth/status-parts\";\nimport { Button } from \"../components/button\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { useMounted } from \"../hooks/use-mounted\";\nimport { FailureLine, useNotificationsLabels } from \"./notification-parts\";\nimport type { NotificationsLabels } from \"./notifications-labels\";\n\n/** A type id, as the server's registry allows it (§2.1). */\nconst TYPE_ID = /^[a-z][a-z0-9_]{1,39}$/;\n/** base64url, unpadded, as the token's `<data>` is written (§3.6). */\nconst BASE64URL = /^[A-Za-z0-9_-]+$/;\n\n/**\n * The notification type an unsubscribe token names, read from its `<data>` half —\n * `v1.<base64url(\"<user_id>:<type id>\")>.<mac>` (docs/notifications-harmonization.md\n * §3.6) — or `null` for a token that does not parse. Only the claim is read: the MAC is\n * the server's to check, so a forged token still names a type here and the server\n * refuses it. For the page's words (\"You get e-mails about: Overdue invoices\").\n */\nexport function unsubscribeTokenType(token: string): string | null {\n  const parts = token.split(\".\");\n  if (parts.length !== 3) return null;\n  const [version, data, mac] = parts;\n  if (version !== \"v1\" || !BASE64URL.test(data) || !BASE64URL.test(mac) || data.length % 4 === 1) return null;\n  let claim: string;\n  try {\n    claim = atob(data.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"=\".repeat((4 - (data.length % 4)) % 4));\n  } catch {\n    return null;\n  }\n  const colon = claim.indexOf(\":\");\n  if (colon < 1) return null;\n  const type = claim.slice(colon + 1);\n  return TYPE_ID.test(type) ? type : null;\n}\n\n/** server-kit's `UnsubscribeTokenError`: 400 `{code: \"unsubscribe_invalid\"}`. A body\n *  thrown as it came, with no status, counts on its code. */\nfunction defaultIsInvalid(error: unknown): boolean {\n  const coded = errorBodyWithCode(error, (code) => code === \"unsubscribe_invalid\") !== undefined;\n  const status = httpStatusOf(error);\n  return coded && (status === undefined || status === 400);\n}\n\nexport interface UnsubscribePanelProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"title\"> {\n  /** The `token` from the page's query (`/unsubscribe?token=…`). */\n  token: string;\n  /** The app's name, for \"Stop all notification e-mails from {app}\". */\n  appName: string;\n  /** The type's name in the app's words, from {@link unsubscribeTokenType}. Without it\n   *  the page says only that notification mail comes. */\n  typeLabel?: string;\n  /** `POST /notifications/unsubscribe/{token}`: that type's e-mail off. */\n  onStop: (token: string) => Promise<unknown>;\n  /** `POST /notifications/unsubscribe/{token}/all`: every e-mail switch off. */\n  onStopAll: (token: string) => Promise<unknown>;\n  /** Settings → Notifications, through the provider's link component. */\n  settingsHref: string;\n  /** Whether a rejection means the link is no good. Default: a 400 with\n   *  `code: \"unsubscribe_invalid\"`. Anything else is \"try again\". */\n  isInvalid?: (error: unknown) => boolean;\n  /** The heading. Default `labels.unsubscribeTitle`; `null` draws none, for a page that\n   *  puts it in `AuthLayout`'s `title`. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<NotificationsLabels>;\n}\n\ntype Phase = \"ready\" | \"these\" | \"all\" | \"stopped-these\" | \"stopped-all\" | \"invalid\" | \"failed\";\n\n/**\n * The body of an app's signed-out `/unsubscribe` page (docs/notifications-harmonization.md\n * §3.6, §4.2) — the page a notification mail's footer links to. It works signed in or\n * out (auth §7), and is not a card.\n *\n * **Nothing happens on a GET**: link scanners fetch every URL, so the page asks first —\n * \"Stop these e-mails\", or \"Stop all notification e-mails from {app}\" — and only a press\n * POSTs. A mail client's one-click POST goes to the server's route directly, without\n * this page. Account mail is not a notification and keeps coming; the page says so, and\n * then how to turn the mail back on (Settings → Notifications).\n *\n * A token that does not parse is \"this link doesn't work\" at once, with no request; the\n * server's refusal (`unsubscribe_invalid`) says the same. Any other failure is \"try\n * again\", the buttons still there. A valid token always answers 200 — also when the\n * switch was already off or the account is gone — so the done state reveals nothing.\n */\nexport function UnsubscribePanel({\n  token,\n  appName,\n  typeLabel,\n  onStop,\n  onStopAll,\n  settingsHref,\n  isInvalid = defaultIsInvalid,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: UnsubscribePanelProps) {\n  const labels = useNotificationsLabels(labelsProp);\n  const parses = unsubscribeTokenType(token) !== null;\n  const [phase, setPhase] = useState<Phase>(\"ready\");\n  const mounted = useMounted();\n  const outcomeRef = useRef<HTMLDivElement>(null);\n  const shown: Phase = parses ? phase : \"invalid\";\n  const done = shown === \"stopped-these\" || shown === \"stopped-all\";\n  useFocusWhen(done, outcomeRef);\n\n  const stop = (which: \"these\" | \"all\") => {\n    if (shown !== \"ready\" && shown !== \"failed\") return;\n    setPhase(which);\n    const call = which === \"these\" ? onStop : onStopAll;\n    call(token).then(\n      () => {\n        if (mounted.current) setPhase(which === \"these\" ? \"stopped-these\" : \"stopped-all\");\n      },\n      (error: unknown) => {\n        if (mounted.current) setPhase(isInvalid(error) ? \"invalid\" : \"failed\");\n      },\n    );\n  };\n\n  const settingsLink = (\n    <Button href={settingsHref} variant=\"secondary\">\n      {labels.openSettings}\n    </Button>\n  );\n\n  let body: ReactNode;\n  if (shown === \"invalid\") {\n    body = (\n      <EmptyState\n        tone=\"danger\"\n        icon={<Link2Off />}\n        title={labels.invalidLink}\n        action={settingsLink}\n        className={OUTCOME_CLASS}\n      />\n    );\n  } else if (done) {\n    body = (\n      <div ref={outcomeRef} tabIndex={-1} className=\"outline-none\">\n        <EmptyState\n          tone=\"success\"\n          icon={<CheckCircle2 />}\n          title={shown === \"stopped-these\" ? labels.stoppedThese : labels.stoppedAll(appName)}\n          hint={labels.stoppedHint(labels.accountMail, labels.turnBackOn)}\n          action={settingsLink}\n          className={OUTCOME_CLASS}\n        />\n      </div>\n    );\n  } else {\n    const working = shown === \"these\" || shown === \"all\";\n    body = (\n      <>\n        <p className={INTRO_CLASS}>{typeLabel ? labels.unsubscribeAbout(typeLabel) : labels.unsubscribeGeneric}</p>\n        <p className={INTRO_CLASS}>{labels.accountMail}</p>\n        <div className=\"flex flex-col gap-2 sm:flex-row sm:flex-wrap\">\n          <Button\n            type=\"button\"\n            pending={shown === \"these\"}\n            disabled={working && shown !== \"these\"}\n            onClick={() => stop(\"these\")}\n          >\n            {labels.stopThese}\n          </Button>\n          <Button\n            type=\"button\"\n            variant=\"secondary\"\n            pending={shown === \"all\"}\n            disabled={working && shown !== \"all\"}\n            onClick={() => stop(\"all\")}\n          >\n            {labels.stopAll(appName)}\n          </Button>\n        </div>\n        {shown === \"failed\" && <FailureLine>{labels.failed}</FailureLine>}\n      </>\n    );\n  }\n\n  return (\n    <div {...rest} data-state={shown} className={cn(\"space-y-3\", className)}>\n      {title === null ? null : <Heading className={STATUS_HEADING_CLASS}>{title ?? labels.unsubscribeTitle}</Heading>}\n      {body}\n    </div>\n  );\n}\n"],"mappings":";AAsII,SAgCE,UAhCF,KAmCI,YAnCJ;AAtIJ,SAAS,QAAQ,gBAAgB;AAEjC,SAAS,cAAc,gBAAgB;AAGvC,SAAS,UAAU;AACnB,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,aAAa,eAAe,sBAAsB,oBAAoB;AAE/E,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAAS,aAAa,8BAA8B;AAIpD,MAAM,UAAU;AAEhB,MAAM,YAAY;AASX,SAAS,qBAAqB,OAA8B;AACjE,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,SAAS,MAAM,GAAG,IAAI;AAC7B,MAAI,YAAY,QAAQ,CAAC,UAAU,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,KAAK,KAAK,SAAS,MAAM,EAAG,QAAO;AACvG,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAK,SAAS,KAAM,CAAC,CAAC;AAAA,EACnG,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,OAAO,MAAM,MAAM,QAAQ,CAAC;AAClC,SAAO,QAAQ,KAAK,IAAI,IAAI,OAAO;AACrC;AAIA,SAAS,iBAAiB,OAAyB;AACjD,QAAM,QAAQ,kBAAkB,OAAO,CAAC,SAAS,SAAS,qBAAqB,MAAM;AACrF,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,UAAU,WAAW,UAAa,WAAW;AACtD;AA6CO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA0B;AACxB,QAAM,SAAS,uBAAuB,UAAU;AAChD,QAAM,SAAS,qBAAqB,KAAK,MAAM;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAgB,OAAO;AACjD,QAAM,UAAU,WAAW;AAC3B,QAAM,aAAa,OAAuB,IAAI;AAC9C,QAAM,QAAe,SAAS,QAAQ;AACtC,QAAM,OAAO,UAAU,mBAAmB,UAAU;AACpD,eAAa,MAAM,UAAU;AAE7B,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,UAAU,WAAW,UAAU,SAAU;AAC7C,aAAS,KAAK;AACd,UAAM,OAAO,UAAU,UAAU,SAAS;AAC1C,SAAK,KAAK,EAAE;AAAA,MACV,MAAM;AACJ,YAAI,QAAQ,QAAS,UAAS,UAAU,UAAU,kBAAkB,aAAa;AAAA,MACnF;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,QAAQ,QAAS,UAAS,UAAU,KAAK,IAAI,YAAY,QAAQ;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eACJ,oBAAC,UAAO,MAAM,cAAc,SAAQ,aACjC,iBAAO,cACV;AAGF,MAAI;AACJ,MAAI,UAAU,WAAW;AACvB,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,YAAS;AAAA,QAChB,OAAO,OAAO;AAAA,QACd,QAAQ;AAAA,QACR,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ,WAAW,MAAM;AACf,WACE,oBAAC,SAAI,KAAK,YAAY,UAAU,IAAI,WAAU,gBAC5C;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,gBAAa;AAAA,QACpB,OAAO,UAAU,kBAAkB,OAAO,eAAe,OAAO,WAAW,OAAO;AAAA,QAClF,MAAM,OAAO,YAAY,OAAO,aAAa,OAAO,UAAU;AAAA,QAC9D,QAAQ;AAAA,QACR,WAAW;AAAA;AAAA,IACb,GACF;AAAA,EAEJ,OAAO;AACL,UAAM,UAAU,UAAU,WAAW,UAAU;AAC/C,WACE,iCACE;AAAA,0BAAC,OAAE,WAAW,aAAc,sBAAY,OAAO,iBAAiB,SAAS,IAAI,OAAO,oBAAmB;AAAA,MACvG,oBAAC,OAAE,WAAW,aAAc,iBAAO,aAAY;AAAA,MAC/C,qBAAC,SAAI,WAAU,gDACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,UAAU;AAAA,YACnB,UAAU,WAAW,UAAU;AAAA,YAC/B,SAAS,MAAM,KAAK,OAAO;AAAA,YAE1B,iBAAO;AAAA;AAAA,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,SAAS,UAAU;AAAA,YACnB,UAAU,WAAW,UAAU;AAAA,YAC/B,SAAS,MAAM,KAAK,KAAK;AAAA,YAExB,iBAAO,QAAQ,OAAO;AAAA;AAAA,QACzB;AAAA,SACF;AAAA,MACC,UAAU,YAAY,oBAAC,eAAa,iBAAO,QAAO;AAAA,OACrD;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,cAAY,OAAO,WAAW,GAAG,aAAa,SAAS,GACnE;AAAA,cAAU,OAAO,OAAO,oBAAC,WAAQ,WAAW,sBAAuB,mBAAS,OAAO,kBAAiB;AAAA,IACpG;AAAA,KACH;AAEJ;","names":[]}

package/dist/notifications/use-push-device.d.ts

@@ -74,7 +74,8 @@ export interface PushDevice {
      *  the permission was not granted or push is off on the server; rejects with a
      *  {@link PushDeviceError} or the app's request's error. */
     enable: () => Promise<boolean>;
-    /** Tell the server first, then the browser, so a dropped device stops at once. */
+    /** Tell the server first, then the browser, so a dropped device stops at once. At a
+     *  sign-out, with no card mounted: {@link releaseThisDevicePush}. */
     disable: () => Promise<void>;
     sendTest: () => Promise<{
         sent: number;
@@ -85,6 +86,43 @@ export declare function notifyPushSubscriptionChanged(): void;
 /** Whether this browser has the APIs push needs. iOS exposes them only to an INSTALLED
  *  app (Add to Home Screen). */
 export declare function pushSupported(): boolean;
+/**
+ * Release this browser's push at an EXPLICIT sign-out (0.52, docs/notifications-
+ * harmonization.md §10.6; refactor audit 2026-10-30, FLW-2) — without the settings card
+ * mounted, which `usePushDevice().disable` needs.
+ *
+ * A sign-out left the subscription registered to the account, so the device went on
+ * showing that account's notifications, title and body (keksdose: invoices, bookings,
+ * shares), to whoever used it next — while the same sign-out wiped the mirror, the outbox
+ * and the query cache "for the next person on this device".
+ *
+ * Call it with the app's `unregister` (`POST /notifications/devices/unregister
+ * {endpoint}`) BEFORE the session is cleared, while the token is still valid:
+ *
+ *     async function logOut() {
+ *       await releaseThisDevicePush(api.unregisterDevice).catch(() => undefined);
+ *       clear();
+ *     }
+ *
+ * The server first, then the browser — and the browser EVEN WHEN THE SERVER REFUSED (0.52
+ * code review, this file): `disable`'s order left a sign-out on a flaky network, or one
+ * that met a 5xx, with the device still subscribed. Unsubscribed, the push service answers
+ * the server's next send with 410 and the server prunes the row. The browser's unsubscribe
+ * is cut at 15 s (`PushDeviceError("push_timeout")`). Then it tells every mounted
+ * {@link usePushDevice} ({@link PUSH_SUBSCRIPTION_CHANGED}).
+ *
+ * Resolves whether this browser held a subscription; `false` at once where push is
+ * unsupported or was never set up — no service worker registration, or none ever active
+ * (0.52 code review: most devices, which used to reject with `no_service_worker`, after
+ * 10 s for a worker stuck installing). It asks the registration, not `ready`: a
+ * subscription belongs to the registration, and a sign-out waits for no worker. Rejects
+ * as the app's request did — once the browser has let go — or with `push_timeout`. Best
+ * effort at a sign-out: catch it, a sign-out must not stop on push.
+ *
+ * Only an explicit sign-out (Marcel's decision 2 of the 2026-10-30 audit): a session that
+ * merely expired keeps its device, and whoever signs back in turns push on again.
+ */
+export declare function releaseThisDevicePush(unregister: (endpoint: string) => Promise<unknown>): Promise<boolean>;
 /**
  * This browser's push for the signed-in account. Hand it one function per endpoint
  * (§3.8); {@link PushDeviceSetting} draws it, and an app's own card may use it too.

package/dist/notifications/use-push-device.js

@@ -1,7 +1,7 @@
 "use client";
 import { useCallback, useEffect, useRef, useState } from "react";
 import { useMediaQuery } from "../hooks/use-media-query.js";
-import { httpStatusOf } from "../auth/auth-errors.js";
+import { httpStatusOf } from "../lib/http-status.js";
 import { PUSH_SUBSCRIPTION_CHANGED, keyBytes, pushSubscriptionInput as inputOf } from "./push-worker.js";
 class PushDeviceError extends Error {
   code;
@@ -39,6 +39,31 @@ async function activeRegistration() {
   return within(navigator.serviceWorker.ready, READY_TIMEOUT_MS, "no_service_worker");
 }
 const defaultEndpointTaken = (error) => httpStatusOf(error) === 409;
+async function releaseSubscription(unregister) {
+  const registration = await activeRegistration();
+  const subscription = await registration.pushManager.getSubscription();
+  if (!subscription) return false;
+  await unregister(subscription.endpoint);
+  await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, "push_timeout");
+  return true;
+}
+async function releaseThisDevicePush(unregister) {
+  if (!pushSupported()) return false;
+  try {
+    const registration = await navigator.serviceWorker.getRegistration();
+    if (!registration?.active) return false;
+    const subscription = await registration.pushManager.getSubscription();
+    if (!subscription) return false;
+    try {
+      await unregister(subscription.endpoint);
+    } finally {
+      await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, "push_timeout");
+    }
+    return true;
+  } finally {
+    notifyPushSubscriptionChanged();
+  }
+}
 function usePushDevice(options) {
   const latest = useRef(options);
   useEffect(() => {
@@ -183,12 +208,7 @@ function usePushDevice(options) {
     if (!supported) return;
     setBusy(true);
     try {
-      const registration = await activeRegistration();
-      const subscription = await registration.pushManager.getSubscription();
-      if (subscription) {
-        await latest.current.unregister(subscription.endpoint);
-        await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, "push_timeout");
-      }
+      await releaseSubscription((endpoint) => latest.current.unregister(endpoint));
       if (mounted.current) {
         setSubscribed(false);
         setForeignSubscription(false);
@@ -220,6 +240,7 @@ export {
   PushDeviceError,
   notifyPushSubscriptionChanged,
   pushSupported,
+  releaseThisDevicePush,
   usePushDevice
 };
 //# sourceMappingURL=use-push-device.js.map

package/dist/notifications/use-push-device.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/notifications/use-push-device.ts"],"sourcesContent":["import { useCallback, useEffect, useRef, useState } from \"react\";\n\nimport { useMediaQuery } from \"../hooks/use-media-query\";\nimport { httpStatusOf } from \"../auth/auth-errors\";\nimport { PUSH_SUBSCRIPTION_CHANGED, keyBytes, pushSubscriptionInput as inputOf } from \"./push-worker\";\nimport type { PushSubscriptionInput } from \"./push-worker\";\n\nexport { PUSH_SUBSCRIPTION_CHANGED };\nexport type { PushSubscriptionInput };\n\n/**\n * This browser's Web Push subscription for the signed-in account\n * (docs/notifications-harmonization.md §2.7, §3.5, §4.2) — keksdose's\n * `shared/push/use-push.ts`, lifted. The service worker with its `push` and\n * `notificationclick` handlers stays the app's; this hook owns the browser's side:\n * permission, subscribe with the server's VAPID key, register the subscription, and\n * unsubscribe. The kit makes no request of its own: the app hands it one function per\n * endpoint.\n */\n\n/** The browser's notification permission, or `\"unsupported\"` where it has no push. */\nexport type PushPermission = NotificationPermission | \"unsupported\";\n\n/** Why turning push on or off could not finish — a {@link PushDeviceError}'s `code`. */\nexport type PushDeviceErrorCode = \"no_service_worker\" | \"push_timeout\";\n\n/**\n * The two failures the card has words of its own for: no service worker registered (or\n * one not ready in 10 s) — \"reload and try again\" — and a browser push service that did\n * not answer in 15 s — \"check your connection\". Anything else is the app's request\n * failing, rejected as it came.\n */\nexport class PushDeviceError extends Error {\n  readonly code: PushDeviceErrorCode;\n  constructor(code: PushDeviceErrorCode) {\n    super(code);\n    this.name = \"PushDeviceError\";\n    this.code = code;\n  }\n}\n\nexport interface UsePushDeviceOptions {\n  /** `GET /notifications/push-key` → its `key`; `\"\"` when push is off on the server. */\n  pushKey: () => Promise<string>;\n  /** `POST /notifications/devices`. A 409 (another account's endpoint) is recovered\n   *  once: the hook unsubscribes and registers a fresh endpoint. */\n  register: (subscription: PushSubscriptionInput) => Promise<unknown>;\n  /** `POST /notifications/devices/unregister {endpoint}` — the endpoint never goes in a\n   *  URL. */\n  unregister: (endpoint: string) => Promise<unknown>;\n  /** `GET /notifications/devices`: the account's own list, which says whether THIS\n   *  account holds this browser's subscription. */\n  devices: () => Promise<readonly { endpoint: string }[]>;\n  /** `POST /notifications/test` → how many devices the push service accepted it for. */\n  test: () => Promise<{ sent: number }>;\n  /** Whether `register` refused another account's endpoint. Default: HTTP 409. */\n  isEndpointTaken?: (error: unknown) => boolean;\n  /** After an enable or a disable: the app refreshes its device queries. */\n  onChange?: () => void;\n}\n\n/** What {@link usePushDevice} answers. */\nexport interface PushDevice {\n  /** The browser exposes service workers, `PushManager` and `Notification`. */\n  supported: boolean;\n  /** The server has VAPID keys; `undefined` until `pushKey` answered (or when it failed). */\n  configured: boolean | undefined;\n  /** Running as an installed app: `display-mode: standalone`, or iOS's\n   *  `navigator.standalone`. */\n  installed: boolean;\n  /** iPhone or iPad — where push reaches only the installed app. */\n  ios: boolean;\n  permission: PushPermission;\n  /** THIS account holds this browser's subscription. An unreachable device list falls\n   *  back to the browser's own answer. */\n  subscribed: boolean;\n  /** This browser holds a subscription that belongs to another account (two accounts in\n   *  one browser profile): `subscribed` is false, and turning on mints a fresh one. */\n  foreignSubscription: boolean;\n  /** This browser's subscription endpoint, or `null` — marks \"This device\" in a list. */\n  currentEndpoint: string | null;\n  /** An enable or a disable is running. */\n  busy: boolean;\n  /** Ask for permission (the browser's one prompt), subscribe and register. `false` when\n   *  the permission was not granted or push is off on the server; rejects with a\n   *  {@link PushDeviceError} or the app's request's error. */\n  enable: () => Promise<boolean>;\n  /** Tell the server first, then the browser, so a dropped device stops at once. */\n  disable: () => Promise<void>;\n  sendTest: () => Promise<{ sent: number }>;\n}\n\n/*\n * PUSH_SUBSCRIPTION_CHANGED (push-worker.ts): the window event every mounted\n * {@link usePushDevice} re-reads its state on. Fired by every enable and disable, and by\n * `PushDevicesSetting` when it removes this device — so an app's own card on the same\n * hook (keksdose's check-up) stays in step. The hook that fires it does not re-read: it\n * knows what it changed. Since 0.46 also the message a service worker posts after a\n * rotated subscription was re-registered (`handlePushSubscriptionChange`). Namespaced\n * for the kit; keksdose's was `\"keksdose:push-subscription-changed\"`.\n */\n\n/** Tell every {@link usePushDevice} that this browser's subscription changed. */\nexport function notifyPushSubscriptionChanged(): void {\n  if (typeof window !== \"undefined\") window.dispatchEvent(new Event(PUSH_SUBSCRIPTION_CHANGED));\n}\n\n/** Whether this browser has the APIs push needs. iOS exposes them only to an INSTALLED\n *  app (Add to Home Screen). */\nexport function pushSupported(): boolean {\n  return (\n    typeof window !== \"undefined\" &&\n    typeof navigator !== \"undefined\" &&\n    \"serviceWorker\" in navigator &&\n    \"PushManager\" in window &&\n    \"Notification\" in window\n  );\n}\n\n/** iPhone or iPad. iPadOS 13+ reports itself as a Mac; the touch points tell it apart. */\nfunction isIos(): boolean {\n  if (typeof navigator === \"undefined\") return false;\n  const ua = navigator.userAgent;\n  return /iphone|ipad|ipod/i.test(ua) || (/Macintosh/.test(ua) && navigator.maxTouchPoints > 1);\n}\n\nconst READY_TIMEOUT_MS = 10_000;\nconst PUSH_TIMEOUT_MS = 15_000;\n\n/** `promise`, or a {@link PushDeviceError} after `ms`. The timer is cleared either way. */\nfunction within<T>(promise: Promise<T>, ms: number, code: PushDeviceErrorCode): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  return Promise.race([\n    promise,\n    new Promise<never>((_, reject) => {\n      timer = setTimeout(() => reject(new PushDeviceError(code)), ms);\n    }),\n  ]).finally(() => clearTimeout(timer));\n}\n\n/**\n * The active registration. `navigator.serviceWorker.ready` never settles while the origin\n * has no registration, so a missing one fails at once, and one stuck installing fails\n * after 10 s (keksdose: enable() hung with the button latched before its worker was\n * served).\n */\nasync function activeRegistration(): Promise<ServiceWorkerRegistration> {\n  const existing = await navigator.serviceWorker.getRegistration();\n  if (!existing) throw new PushDeviceError(\"no_service_worker\");\n  return within(navigator.serviceWorker.ready, READY_TIMEOUT_MS, \"no_service_worker\");\n}\n\nconst defaultEndpointTaken = (error: unknown) => httpStatusOf(error) === 409;\n\n/**\n * This browser's push for the signed-in account. Hand it one function per endpoint\n * (§3.8); {@link PushDeviceSetting} draws it, and an app's own card may use it too.\n *\n * **\"Subscribed\" means this account**, not \"this browser holds a subscription\": a\n * browser profile's subscription has no account in it, so a second account in the same\n * profile would read the first's as its own (keksdose). The endpoint is checked against\n * the account's own `devices()`; when that list cannot be read (offline), the browser's\n * answer stands — a wrong \"on\" costs what it did before the check, a wrong \"off\" invites\n * re-subscribing a device that is fine.\n *\n * **A 409 from `register`** — the endpoint belongs to another account, and the server\n * will not re-home what it cannot prove this browser holds — unsubscribes and registers\n * a fresh endpoint, once.\n *\n * **Timeouts:** no registration fails at once and a worker not ready in 10 s fails, both\n * `PushDeviceError(\"no_service_worker\")`; the browser's subscribe and unsubscribe are cut\n * at 15 s, `PushDeviceError(\"push_timeout\")` — so `busy` can never latch.\n *\n * Every mounted hook re-reads its state on {@link PUSH_SUBSCRIPTION_CHANGED}.\n */\nexport function usePushDevice(options: UsePushDeviceOptions): PushDevice {\n  // The app's functions are usually new on every render; the effects read the latest.\n  const latest = useRef(options);\n  useEffect(() => {\n    latest.current = options;\n  });\n\n  const supported = pushSupported();\n  const ios = isIos();\n  const standalone = useMediaQuery(\"(display-mode: standalone)\", false);\n  const installed =\n    standalone ||\n    (typeof navigator !== \"undefined\" && (navigator as Navigator & { standalone?: boolean }).standalone === true);\n\n  const [permission, setPermission] = useState<PushPermission>(() =>\n    supported ? Notification.permission : \"unsupported\",\n  );\n  const [configured, setConfigured] = useState<boolean | undefined>(undefined);\n  const [subscribed, setSubscribed] = useState(false);\n  const [foreignSubscription, setForeignSubscription] = useState(false);\n  const [currentEndpoint, setCurrentEndpoint] = useState<string | null>(null);\n  const [busy, setBusy] = useState(false);\n  const mounted = useRef(true);\n  // Set while this hook fires the event itself: it already knows what changed, and a\n  // re-read could only be worse — an app whose `devices()` answers from a cache would\n  // hand back the list from before the change.\n  const announcing = useRef(false);\n  const announce = useCallback(() => {\n    announcing.current = true;\n    try {\n      notifyPushSubscriptionChanged();\n    } finally {\n      announcing.current = false;\n    }\n    latest.current.onChange?.();\n  }, []);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // Whether the server has keys (\"\" → push is off there). Once per mount.\n  useEffect(() => {\n    if (!supported) return;\n    let cancelled = false;\n    latest.current.pushKey().then(\n      (key) => {\n        if (!cancelled) setConfigured(key !== \"\");\n      },\n      () => {\n        /* unknown: the card shows the ordinary states */\n      },\n    );\n    return () => {\n      cancelled = true;\n    };\n  }, [supported]);\n\n  // What this browser holds, and whether it is this account's — at mount, and whenever\n  // a subscription changes anywhere in the app.\n  useEffect(() => {\n    if (!supported) return;\n    let cancelled = false;\n    const sync = async () => {\n      try {\n        const registration = await activeRegistration();\n        const existing = await registration.pushManager.getSubscription();\n        if (cancelled) return;\n        // Read again: the person may have changed it in the browser's settings.\n        setPermission(Notification.permission);\n        if (!existing) {\n          setSubscribed(false);\n          setForeignSubscription(false);\n          setCurrentEndpoint(null);\n          return;\n        }\n        let mine: boolean;\n        try {\n          const devices = await latest.current.devices();\n          mine = devices.some((device) => device.endpoint === existing.endpoint);\n        } catch {\n          mine = true;\n        }\n        if (cancelled) return;\n        setCurrentEndpoint(existing.endpoint);\n        setSubscribed(mine);\n        setForeignSubscription(!mine);\n      } catch {\n        /* no active service worker yet: not subscribed */\n      }\n    };\n    const heard = () => {\n      if (!announcing.current) void sync();\n    };\n    // The worker's word after it re-registered a rotated subscription (0.46).\n    const fromWorker = (event: MessageEvent) => {\n      if ((event.data as { type?: unknown } | null)?.type === PUSH_SUBSCRIPTION_CHANGED) void sync();\n    };\n    const worker = navigator.serviceWorker as ServiceWorkerContainer | undefined;\n    void sync();\n    window.addEventListener(PUSH_SUBSCRIPTION_CHANGED, heard);\n    worker?.addEventListener?.(\"message\", fromWorker);\n    return () => {\n      cancelled = true;\n      window.removeEventListener(PUSH_SUBSCRIPTION_CHANGED, heard);\n      worker?.removeEventListener?.(\"message\", fromWorker);\n    };\n  }, [supported]);\n\n  const enable = useCallback(async (): Promise<boolean> => {\n    if (!supported) return false;\n    const { pushKey, register, isEndpointTaken = defaultEndpointTaken } = latest.current;\n    setBusy(true);\n    try {\n      const granted = await Notification.requestPermission();\n      if (mounted.current) setPermission(granted);\n      if (granted !== \"granted\") return false;\n\n      const key = await pushKey();\n      if (!key) {\n        if (mounted.current) setConfigured(false);\n        return false;\n      }\n      if (mounted.current) setConfigured(true);\n\n      const registration = await activeRegistration();\n      // The one place the browser is asked for a subscription, so the timeout and the\n      // `{userVisibleOnly, applicationServerKey}` literal are on both paths.\n      const subscribe = (reuse: boolean) =>\n        within(\n          (async () =>\n            (reuse ? await registration.pushManager.getSubscription() : null) ??\n            (await registration.pushManager.subscribe({\n              userVisibleOnly: true,\n              applicationServerKey: keyBytes(key),\n            })))(),\n          PUSH_TIMEOUT_MS,\n          \"push_timeout\",\n        );\n\n      let subscription = await subscribe(true);\n      let input = inputOf(subscription);\n      if (!input) return false;\n      try {\n        await register(input);\n      } catch (error) {\n        if (!isEndpointTaken(error)) throw error;\n        await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, \"push_timeout\");\n        subscription = await subscribe(false);\n        input = inputOf(subscription);\n        if (!input) return false;\n        await register(input);\n      }\n      if (mounted.current) {\n        setSubscribed(true);\n        setForeignSubscription(false);\n        setCurrentEndpoint(input.endpoint);\n      }\n      announce();\n      return true;\n    } finally {\n      if (mounted.current) setBusy(false);\n    }\n  }, [supported, announce]);\n\n  const disable = useCallback(async (): Promise<void> => {\n    if (!supported) return;\n    setBusy(true);\n    try {\n      const registration = await activeRegistration();\n      const subscription = await registration.pushManager.getSubscription();\n      if (subscription) {\n        // The server first: a dropped device stops receiving even if the browser's\n        // unsubscribe below fails.\n        await latest.current.unregister(subscription.endpoint);\n        await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, \"push_timeout\");\n      }\n      if (mounted.current) {\n        setSubscribed(false);\n        setForeignSubscription(false);\n        setCurrentEndpoint(null);\n      }\n      announce();\n    } finally {\n      if (mounted.current) setBusy(false);\n    }\n  }, [supported, announce]);\n\n  const sendTest = useCallback(() => latest.current.test(), []);\n\n  return {\n    supported,\n    configured,\n    installed,\n    ios,\n    permission,\n    subscribed,\n    foreignSubscription,\n    currentEndpoint,\n    busy,\n    enable,\n    disable,\n    sendTest,\n  };\n}\n"],"mappings":";AAAA,SAAS,aAAa,WAAW,QAAQ,gBAAgB;AAEzD,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B,UAAU,yBAAyB,eAAe;AA4B/E,MAAM,wBAAwB,MAAM;AAAA,EAChC;AAAA,EACT,YAAY,MAA2B;AACrC,UAAM,IAAI;AACV,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAgEO,SAAS,gCAAsC;AACpD,MAAI,OAAO,WAAW,YAAa,QAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC;AAC9F;AAIO,SAAS,gBAAyB;AACvC,SACE,OAAO,WAAW,eAClB,OAAO,cAAc,eACrB,mBAAmB,aACnB,iBAAiB,UACjB,kBAAkB;AAEtB;AAGA,SAAS,QAAiB;AACxB,MAAI,OAAO,cAAc,YAAa,QAAO;AAC7C,QAAM,KAAK,UAAU;AACrB,SAAO,oBAAoB,KAAK,EAAE,KAAM,YAAY,KAAK,EAAE,KAAK,UAAU,iBAAiB;AAC7F;AAEA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AAGxB,SAAS,OAAU,SAAqB,IAAY,MAAuC;AACzF,MAAI;AACJ,SAAO,QAAQ,KAAK;AAAA,IAClB;AAAA,IACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,cAAQ,WAAW,MAAM,OAAO,IAAI,gBAAgB,IAAI,CAAC,GAAG,EAAE;AAAA,IAChE,CAAC;AAAA,EACH,CAAC,EAAE,QAAQ,MAAM,aAAa,KAAK,CAAC;AACtC;AAQA,eAAe,qBAAyD;AACtE,QAAM,WAAW,MAAM,UAAU,cAAc,gBAAgB;AAC/D,MAAI,CAAC,SAAU,OAAM,IAAI,gBAAgB,mBAAmB;AAC5D,SAAO,OAAO,UAAU,cAAc,OAAO,kBAAkB,mBAAmB;AACpF;AAEA,MAAM,uBAAuB,CAAC,UAAmB,aAAa,KAAK,MAAM;AAuBlE,SAAS,cAAc,SAA2C;AAEvE,QAAM,SAAS,OAAO,OAAO;AAC7B,YAAU,MAAM;AACd,WAAO,UAAU;AAAA,EACnB,CAAC;AAED,QAAM,YAAY,cAAc;AAChC,QAAM,MAAM,MAAM;AAClB,QAAM,aAAa,cAAc,8BAA8B,KAAK;AACpE,QAAM,YACJ,cACC,OAAO,cAAc,eAAgB,UAAmD,eAAe;AAE1G,QAAM,CAAC,YAAY,aAAa,IAAI;AAAA,IAAyB,MAC3D,YAAY,aAAa,aAAa;AAAA,EACxC;AACA,QAAM,CAAC,YAAY,aAAa,IAAI,SAA8B,MAAS;AAC3E,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,qBAAqB,sBAAsB,IAAI,SAAS,KAAK;AACpE,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,SAAwB,IAAI;AAC1E,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,UAAU,OAAO,IAAI;AAI3B,QAAM,aAAa,OAAO,KAAK;AAC/B,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,UAAU;AACrB,QAAI;AACF,oCAA8B;AAAA,IAChC,UAAE;AACA,iBAAW,UAAU;AAAA,IACvB;AACA,WAAO,QAAQ,WAAW;AAAA,EAC5B,GAAG,CAAC,CAAC;AACL,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAGL,YAAU,MAAM;AACd,QAAI,CAAC,UAAW;AAChB,QAAI,YAAY;AAChB,WAAO,QAAQ,QAAQ,EAAE;AAAA,MACvB,CAAC,QAAQ;AACP,YAAI,CAAC,UAAW,eAAc,QAAQ,EAAE;AAAA,MAC1C;AAAA,MACA,MAAM;AAAA,MAEN;AAAA,IACF;AACA,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAId,YAAU,MAAM;AACd,QAAI,CAAC,UAAW;AAChB,QAAI,YAAY;AAChB,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,eAAe,MAAM,mBAAmB;AAC9C,cAAM,WAAW,MAAM,aAAa,YAAY,gBAAgB;AAChE,YAAI,UAAW;AAEf,sBAAc,aAAa,UAAU;AACrC,YAAI,CAAC,UAAU;AACb,wBAAc,KAAK;AACnB,iCAAuB,KAAK;AAC5B,6BAAmB,IAAI;AACvB;AAAA,QACF;AACA,YAAI;AACJ,YAAI;AACF,gBAAM,UAAU,MAAM,OAAO,QAAQ,QAAQ;AAC7C,iBAAO,QAAQ,KAAK,CAAC,WAAW,OAAO,aAAa,SAAS,QAAQ;AAAA,QACvE,QAAQ;AACN,iBAAO;AAAA,QACT;AACA,YAAI,UAAW;AACf,2BAAmB,SAAS,QAAQ;AACpC,sBAAc,IAAI;AAClB,+BAAuB,CAAC,IAAI;AAAA,MAC9B,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,QAAQ,MAAM;AAClB,UAAI,CAAC,WAAW,QAAS,MAAK,KAAK;AAAA,IACrC;AAEA,UAAM,aAAa,CAAC,UAAwB;AAC1C,UAAK,MAAM,MAAoC,SAAS,0BAA2B,MAAK,KAAK;AAAA,IAC/F;AACA,UAAM,SAAS,UAAU;AACzB,SAAK,KAAK;AACV,WAAO,iBAAiB,2BAA2B,KAAK;AACxD,YAAQ,mBAAmB,WAAW,UAAU;AAChD,WAAO,MAAM;AACX,kBAAY;AACZ,aAAO,oBAAoB,2BAA2B,KAAK;AAC3D,cAAQ,sBAAsB,WAAW,UAAU;AAAA,IACrD;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAEd,QAAM,SAAS,YAAY,YAA8B;AACvD,QAAI,CAAC,UAAW,QAAO;AACvB,UAAM,EAAE,SAAS,UAAU,kBAAkB,qBAAqB,IAAI,OAAO;AAC7E,YAAQ,IAAI;AACZ,QAAI;AACF,YAAM,UAAU,MAAM,aAAa,kBAAkB;AACrD,UAAI,QAAQ,QAAS,eAAc,OAAO;AAC1C,UAAI,YAAY,UAAW,QAAO;AAElC,YAAM,MAAM,MAAM,QAAQ;AAC1B,UAAI,CAAC,KAAK;AACR,YAAI,QAAQ,QAAS,eAAc,KAAK;AACxC,eAAO;AAAA,MACT;AACA,UAAI,QAAQ,QAAS,eAAc,IAAI;AAEvC,YAAM,eAAe,MAAM,mBAAmB;AAG9C,YAAM,YAAY,CAAC,UACjB;AAAA,SACG,aACE,QAAQ,MAAM,aAAa,YAAY,gBAAgB,IAAI,SAC3D,MAAM,aAAa,YAAY,UAAU;AAAA,UACxC,iBAAiB;AAAA,UACjB,sBAAsB,SAAS,GAAG;AAAA,QACpC,CAAC,GAAI;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAEF,UAAI,eAAe,MAAM,UAAU,IAAI;AACvC,UAAI,QAAQ,QAAQ,YAAY;AAChC,UAAI,CAAC,MAAO,QAAO;AACnB,UAAI;AACF,cAAM,SAAS,KAAK;AAAA,MACtB,SAAS,OAAO;AACd,YAAI,CAAC,gBAAgB,KAAK,EAAG,OAAM;AACnC,cAAM,OAAO,aAAa,YAAY,GAAG,iBAAiB,cAAc;AACxE,uBAAe,MAAM,UAAU,KAAK;AACpC,gBAAQ,QAAQ,YAAY;AAC5B,YAAI,CAAC,MAAO,QAAO;AACnB,cAAM,SAAS,KAAK;AAAA,MACtB;AACA,UAAI,QAAQ,SAAS;AACnB,sBAAc,IAAI;AAClB,+BAAuB,KAAK;AAC5B,2BAAmB,MAAM,QAAQ;AAAA,MACnC;AACA,eAAS;AACT,aAAO;AAAA,IACT,UAAE;AACA,UAAI,QAAQ,QAAS,SAAQ,KAAK;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,WAAW,QAAQ,CAAC;AAExB,QAAM,UAAU,YAAY,YAA2B;AACrD,QAAI,CAAC,UAAW;AAChB,YAAQ,IAAI;AACZ,QAAI;AACF,YAAM,eAAe,MAAM,mBAAmB;AAC9C,YAAM,eAAe,MAAM,aAAa,YAAY,gBAAgB;AACpE,UAAI,cAAc;AAGhB,cAAM,OAAO,QAAQ,WAAW,aAAa,QAAQ;AACrD,cAAM,OAAO,aAAa,YAAY,GAAG,iBAAiB,cAAc;AAAA,MAC1E;AACA,UAAI,QAAQ,SAAS;AACnB,sBAAc,KAAK;AACnB,+BAAuB,KAAK;AAC5B,2BAAmB,IAAI;AAAA,MACzB;AACA,eAAS;AAAA,IACX,UAAE;AACA,UAAI,QAAQ,QAAS,SAAQ,KAAK;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,WAAW,QAAQ,CAAC;AAExB,QAAM,WAAW,YAAY,MAAM,OAAO,QAAQ,KAAK,GAAG,CAAC,CAAC;AAE5D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/notifications/use-push-device.ts"],"sourcesContent":["import { useCallback, useEffect, useRef, useState } from \"react\";\n\nimport { useMediaQuery } from \"../hooks/use-media-query\";\nimport { httpStatusOf } from \"../lib/http-status\";\nimport { PUSH_SUBSCRIPTION_CHANGED, keyBytes, pushSubscriptionInput as inputOf } from \"./push-worker\";\nimport type { PushSubscriptionInput } from \"./push-worker\";\n\nexport { PUSH_SUBSCRIPTION_CHANGED };\nexport type { PushSubscriptionInput };\n\n/**\n * This browser's Web Push subscription for the signed-in account\n * (docs/notifications-harmonization.md §2.7, §3.5, §4.2) — keksdose's\n * `shared/push/use-push.ts`, lifted. The service worker with its `push` and\n * `notificationclick` handlers stays the app's; this hook owns the browser's side:\n * permission, subscribe with the server's VAPID key, register the subscription, and\n * unsubscribe. The kit makes no request of its own: the app hands it one function per\n * endpoint.\n */\n\n/** The browser's notification permission, or `\"unsupported\"` where it has no push. */\nexport type PushPermission = NotificationPermission | \"unsupported\";\n\n/** Why turning push on or off could not finish — a {@link PushDeviceError}'s `code`. */\nexport type PushDeviceErrorCode = \"no_service_worker\" | \"push_timeout\";\n\n/**\n * The two failures the card has words of its own for: no service worker registered (or\n * one not ready in 10 s) — \"reload and try again\" — and a browser push service that did\n * not answer in 15 s — \"check your connection\". Anything else is the app's request\n * failing, rejected as it came.\n */\nexport class PushDeviceError extends Error {\n  readonly code: PushDeviceErrorCode;\n  constructor(code: PushDeviceErrorCode) {\n    super(code);\n    this.name = \"PushDeviceError\";\n    this.code = code;\n  }\n}\n\nexport interface UsePushDeviceOptions {\n  /** `GET /notifications/push-key` → its `key`; `\"\"` when push is off on the server. */\n  pushKey: () => Promise<string>;\n  /** `POST /notifications/devices`. A 409 (another account's endpoint) is recovered\n   *  once: the hook unsubscribes and registers a fresh endpoint. */\n  register: (subscription: PushSubscriptionInput) => Promise<unknown>;\n  /** `POST /notifications/devices/unregister {endpoint}` — the endpoint never goes in a\n   *  URL. */\n  unregister: (endpoint: string) => Promise<unknown>;\n  /** `GET /notifications/devices`: the account's own list, which says whether THIS\n   *  account holds this browser's subscription. */\n  devices: () => Promise<readonly { endpoint: string }[]>;\n  /** `POST /notifications/test` → how many devices the push service accepted it for. */\n  test: () => Promise<{ sent: number }>;\n  /** Whether `register` refused another account's endpoint. Default: HTTP 409. */\n  isEndpointTaken?: (error: unknown) => boolean;\n  /** After an enable or a disable: the app refreshes its device queries. */\n  onChange?: () => void;\n}\n\n/** What {@link usePushDevice} answers. */\nexport interface PushDevice {\n  /** The browser exposes service workers, `PushManager` and `Notification`. */\n  supported: boolean;\n  /** The server has VAPID keys; `undefined` until `pushKey` answered (or when it failed). */\n  configured: boolean | undefined;\n  /** Running as an installed app: `display-mode: standalone`, or iOS's\n   *  `navigator.standalone`. */\n  installed: boolean;\n  /** iPhone or iPad — where push reaches only the installed app. */\n  ios: boolean;\n  permission: PushPermission;\n  /** THIS account holds this browser's subscription. An unreachable device list falls\n   *  back to the browser's own answer. */\n  subscribed: boolean;\n  /** This browser holds a subscription that belongs to another account (two accounts in\n   *  one browser profile): `subscribed` is false, and turning on mints a fresh one. */\n  foreignSubscription: boolean;\n  /** This browser's subscription endpoint, or `null` — marks \"This device\" in a list. */\n  currentEndpoint: string | null;\n  /** An enable or a disable is running. */\n  busy: boolean;\n  /** Ask for permission (the browser's one prompt), subscribe and register. `false` when\n   *  the permission was not granted or push is off on the server; rejects with a\n   *  {@link PushDeviceError} or the app's request's error. */\n  enable: () => Promise<boolean>;\n  /** Tell the server first, then the browser, so a dropped device stops at once. At a\n   *  sign-out, with no card mounted: {@link releaseThisDevicePush}. */\n  disable: () => Promise<void>;\n  sendTest: () => Promise<{ sent: number }>;\n}\n\n/*\n * PUSH_SUBSCRIPTION_CHANGED (push-worker.ts): the window event every mounted\n * {@link usePushDevice} re-reads its state on. Fired by every enable and disable, and by\n * `PushDevicesSetting` when it removes this device — so an app's own card on the same\n * hook (keksdose's check-up) stays in step. The hook that fires it does not re-read: it\n * knows what it changed. Since 0.46 also the message a service worker posts after a\n * rotated subscription was re-registered (`handlePushSubscriptionChange`). Namespaced\n * for the kit; keksdose's was `\"keksdose:push-subscription-changed\"`.\n */\n\n/** Tell every {@link usePushDevice} that this browser's subscription changed. */\nexport function notifyPushSubscriptionChanged(): void {\n  if (typeof window !== \"undefined\") window.dispatchEvent(new Event(PUSH_SUBSCRIPTION_CHANGED));\n}\n\n/** Whether this browser has the APIs push needs. iOS exposes them only to an INSTALLED\n *  app (Add to Home Screen). */\nexport function pushSupported(): boolean {\n  return (\n    typeof window !== \"undefined\" &&\n    typeof navigator !== \"undefined\" &&\n    \"serviceWorker\" in navigator &&\n    \"PushManager\" in window &&\n    \"Notification\" in window\n  );\n}\n\n/** iPhone or iPad. iPadOS 13+ reports itself as a Mac; the touch points tell it apart. */\nfunction isIos(): boolean {\n  if (typeof navigator === \"undefined\") return false;\n  const ua = navigator.userAgent;\n  return /iphone|ipad|ipod/i.test(ua) || (/Macintosh/.test(ua) && navigator.maxTouchPoints > 1);\n}\n\nconst READY_TIMEOUT_MS = 10_000;\nconst PUSH_TIMEOUT_MS = 15_000;\n\n/** `promise`, or a {@link PushDeviceError} after `ms`. The timer is cleared either way. */\nfunction within<T>(promise: Promise<T>, ms: number, code: PushDeviceErrorCode): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  return Promise.race([\n    promise,\n    new Promise<never>((_, reject) => {\n      timer = setTimeout(() => reject(new PushDeviceError(code)), ms);\n    }),\n  ]).finally(() => clearTimeout(timer));\n}\n\n/**\n * The active registration. `navigator.serviceWorker.ready` never settles while the origin\n * has no registration, so a missing one fails at once, and one stuck installing fails\n * after 10 s (keksdose: enable() hung with the button latched before its worker was\n * served).\n */\nasync function activeRegistration(): Promise<ServiceWorkerRegistration> {\n  const existing = await navigator.serviceWorker.getRegistration();\n  if (!existing) throw new PushDeviceError(\"no_service_worker\");\n  return within(navigator.serviceWorker.ready, READY_TIMEOUT_MS, \"no_service_worker\");\n}\n\nconst defaultEndpointTaken = (error: unknown) => httpStatusOf(error) === 409;\n\n/**\n * Drop this browser's subscription when the person turns push off: the server first, so a\n * dropped device stops receiving even if the browser's unsubscribe fails, then the\n * browser, cut at 15 s. Whether there was one. A refused server keeps the browser's\n * subscription: the card says the turn-off failed, still reads on, and the person tries\n * again. {@link usePushDevice}'s `disable`; a sign-out has its own\n * ({@link releaseThisDevicePush}).\n */\nasync function releaseSubscription(unregister: (endpoint: string) => Promise<unknown>): Promise<boolean> {\n  const registration = await activeRegistration();\n  const subscription = await registration.pushManager.getSubscription();\n  if (!subscription) return false;\n  await unregister(subscription.endpoint);\n  await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, \"push_timeout\");\n  return true;\n}\n\n/**\n * Release this browser's push at an EXPLICIT sign-out (0.52, docs/notifications-\n * harmonization.md §10.6; refactor audit 2026-10-30, FLW-2) — without the settings card\n * mounted, which `usePushDevice().disable` needs.\n *\n * A sign-out left the subscription registered to the account, so the device went on\n * showing that account's notifications, title and body (keksdose: invoices, bookings,\n * shares), to whoever used it next — while the same sign-out wiped the mirror, the outbox\n * and the query cache \"for the next person on this device\".\n *\n * Call it with the app's `unregister` (`POST /notifications/devices/unregister\n * {endpoint}`) BEFORE the session is cleared, while the token is still valid:\n *\n *     async function logOut() {\n *       await releaseThisDevicePush(api.unregisterDevice).catch(() => undefined);\n *       clear();\n *     }\n *\n * The server first, then the browser — and the browser EVEN WHEN THE SERVER REFUSED (0.52\n * code review, this file): `disable`'s order left a sign-out on a flaky network, or one\n * that met a 5xx, with the device still subscribed. Unsubscribed, the push service answers\n * the server's next send with 410 and the server prunes the row. The browser's unsubscribe\n * is cut at 15 s (`PushDeviceError(\"push_timeout\")`). Then it tells every mounted\n * {@link usePushDevice} ({@link PUSH_SUBSCRIPTION_CHANGED}).\n *\n * Resolves whether this browser held a subscription; `false` at once where push is\n * unsupported or was never set up — no service worker registration, or none ever active\n * (0.52 code review: most devices, which used to reject with `no_service_worker`, after\n * 10 s for a worker stuck installing). It asks the registration, not `ready`: a\n * subscription belongs to the registration, and a sign-out waits for no worker. Rejects\n * as the app's request did — once the browser has let go — or with `push_timeout`. Best\n * effort at a sign-out: catch it, a sign-out must not stop on push.\n *\n * Only an explicit sign-out (Marcel's decision 2 of the 2026-10-30 audit): a session that\n * merely expired keeps its device, and whoever signs back in turns push on again.\n */\nexport async function releaseThisDevicePush(unregister: (endpoint: string) => Promise<unknown>): Promise<boolean> {\n  if (!pushSupported()) return false;\n  try {\n    const registration = await navigator.serviceWorker.getRegistration();\n    // A worker never active holds no subscription: `subscribe` needs an active one.\n    if (!registration?.active) return false;\n    const subscription = await registration.pushManager.getSubscription();\n    if (!subscription) return false;\n    try {\n      await unregister(subscription.endpoint);\n    } finally {\n      await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, \"push_timeout\");\n    }\n    return true;\n  } finally {\n    notifyPushSubscriptionChanged();\n  }\n}\n\n/**\n * This browser's push for the signed-in account. Hand it one function per endpoint\n * (§3.8); {@link PushDeviceSetting} draws it, and an app's own card may use it too.\n *\n * **\"Subscribed\" means this account**, not \"this browser holds a subscription\": a\n * browser profile's subscription has no account in it, so a second account in the same\n * profile would read the first's as its own (keksdose). The endpoint is checked against\n * the account's own `devices()`; when that list cannot be read (offline), the browser's\n * answer stands — a wrong \"on\" costs what it did before the check, a wrong \"off\" invites\n * re-subscribing a device that is fine.\n *\n * **A 409 from `register`** — the endpoint belongs to another account, and the server\n * will not re-home what it cannot prove this browser holds — unsubscribes and registers\n * a fresh endpoint, once.\n *\n * **Timeouts:** no registration fails at once and a worker not ready in 10 s fails, both\n * `PushDeviceError(\"no_service_worker\")`; the browser's subscribe and unsubscribe are cut\n * at 15 s, `PushDeviceError(\"push_timeout\")` — so `busy` can never latch.\n *\n * Every mounted hook re-reads its state on {@link PUSH_SUBSCRIPTION_CHANGED}.\n */\nexport function usePushDevice(options: UsePushDeviceOptions): PushDevice {\n  // The app's functions are usually new on every render; the effects read the latest.\n  const latest = useRef(options);\n  useEffect(() => {\n    latest.current = options;\n  });\n\n  const supported = pushSupported();\n  const ios = isIos();\n  const standalone = useMediaQuery(\"(display-mode: standalone)\", false);\n  const installed =\n    standalone ||\n    (typeof navigator !== \"undefined\" && (navigator as Navigator & { standalone?: boolean }).standalone === true);\n\n  const [permission, setPermission] = useState<PushPermission>(() =>\n    supported ? Notification.permission : \"unsupported\",\n  );\n  const [configured, setConfigured] = useState<boolean | undefined>(undefined);\n  const [subscribed, setSubscribed] = useState(false);\n  const [foreignSubscription, setForeignSubscription] = useState(false);\n  const [currentEndpoint, setCurrentEndpoint] = useState<string | null>(null);\n  const [busy, setBusy] = useState(false);\n  const mounted = useRef(true);\n  // Set while this hook fires the event itself: it already knows what changed, and a\n  // re-read could only be worse — an app whose `devices()` answers from a cache would\n  // hand back the list from before the change.\n  const announcing = useRef(false);\n  const announce = useCallback(() => {\n    announcing.current = true;\n    try {\n      notifyPushSubscriptionChanged();\n    } finally {\n      announcing.current = false;\n    }\n    latest.current.onChange?.();\n  }, []);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // Whether the server has keys (\"\" → push is off there). Once per mount.\n  useEffect(() => {\n    if (!supported) return;\n    let cancelled = false;\n    latest.current.pushKey().then(\n      (key) => {\n        if (!cancelled) setConfigured(key !== \"\");\n      },\n      () => {\n        /* unknown: the card shows the ordinary states */\n      },\n    );\n    return () => {\n      cancelled = true;\n    };\n  }, [supported]);\n\n  // What this browser holds, and whether it is this account's — at mount, and whenever\n  // a subscription changes anywhere in the app.\n  useEffect(() => {\n    if (!supported) return;\n    let cancelled = false;\n    const sync = async () => {\n      try {\n        const registration = await activeRegistration();\n        const existing = await registration.pushManager.getSubscription();\n        if (cancelled) return;\n        // Read again: the person may have changed it in the browser's settings.\n        setPermission(Notification.permission);\n        if (!existing) {\n          setSubscribed(false);\n          setForeignSubscription(false);\n          setCurrentEndpoint(null);\n          return;\n        }\n        let mine: boolean;\n        try {\n          const devices = await latest.current.devices();\n          mine = devices.some((device) => device.endpoint === existing.endpoint);\n        } catch {\n          mine = true;\n        }\n        if (cancelled) return;\n        setCurrentEndpoint(existing.endpoint);\n        setSubscribed(mine);\n        setForeignSubscription(!mine);\n      } catch {\n        /* no active service worker yet: not subscribed */\n      }\n    };\n    const heard = () => {\n      if (!announcing.current) void sync();\n    };\n    // The worker's word after it re-registered a rotated subscription (0.46).\n    const fromWorker = (event: MessageEvent) => {\n      if ((event.data as { type?: unknown } | null)?.type === PUSH_SUBSCRIPTION_CHANGED) void sync();\n    };\n    const worker = navigator.serviceWorker as ServiceWorkerContainer | undefined;\n    void sync();\n    window.addEventListener(PUSH_SUBSCRIPTION_CHANGED, heard);\n    worker?.addEventListener?.(\"message\", fromWorker);\n    return () => {\n      cancelled = true;\n      window.removeEventListener(PUSH_SUBSCRIPTION_CHANGED, heard);\n      worker?.removeEventListener?.(\"message\", fromWorker);\n    };\n  }, [supported]);\n\n  const enable = useCallback(async (): Promise<boolean> => {\n    if (!supported) return false;\n    const { pushKey, register, isEndpointTaken = defaultEndpointTaken } = latest.current;\n    setBusy(true);\n    try {\n      const granted = await Notification.requestPermission();\n      if (mounted.current) setPermission(granted);\n      if (granted !== \"granted\") return false;\n\n      const key = await pushKey();\n      if (!key) {\n        if (mounted.current) setConfigured(false);\n        return false;\n      }\n      if (mounted.current) setConfigured(true);\n\n      const registration = await activeRegistration();\n      // The one place the browser is asked for a subscription, so the timeout and the\n      // `{userVisibleOnly, applicationServerKey}` literal are on both paths.\n      const subscribe = (reuse: boolean) =>\n        within(\n          (async () =>\n            (reuse ? await registration.pushManager.getSubscription() : null) ??\n            (await registration.pushManager.subscribe({\n              userVisibleOnly: true,\n              applicationServerKey: keyBytes(key),\n            })))(),\n          PUSH_TIMEOUT_MS,\n          \"push_timeout\",\n        );\n\n      let subscription = await subscribe(true);\n      let input = inputOf(subscription);\n      if (!input) return false;\n      try {\n        await register(input);\n      } catch (error) {\n        if (!isEndpointTaken(error)) throw error;\n        await within(subscription.unsubscribe(), PUSH_TIMEOUT_MS, \"push_timeout\");\n        subscription = await subscribe(false);\n        input = inputOf(subscription);\n        if (!input) return false;\n        await register(input);\n      }\n      if (mounted.current) {\n        setSubscribed(true);\n        setForeignSubscription(false);\n        setCurrentEndpoint(input.endpoint);\n      }\n      announce();\n      return true;\n    } finally {\n      if (mounted.current) setBusy(false);\n    }\n  }, [supported, announce]);\n\n  const disable = useCallback(async (): Promise<void> => {\n    if (!supported) return;\n    setBusy(true);\n    try {\n      await releaseSubscription((endpoint) => latest.current.unregister(endpoint));\n      if (mounted.current) {\n        setSubscribed(false);\n        setForeignSubscription(false);\n        setCurrentEndpoint(null);\n      }\n      announce();\n    } finally {\n      if (mounted.current) setBusy(false);\n    }\n  }, [supported, announce]);\n\n  const sendTest = useCallback(() => latest.current.test(), []);\n\n  return {\n    supported,\n    configured,\n    installed,\n    ios,\n    permission,\n    subscribed,\n    foreignSubscription,\n    currentEndpoint,\n    busy,\n    enable,\n    disable,\n    sendTest,\n  };\n}\n"],"mappings":";AAAA,SAAS,aAAa,WAAW,QAAQ,gBAAgB;AAEzD,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B,UAAU,yBAAyB,eAAe;AA4B/E,MAAM,wBAAwB,MAAM;AAAA,EAChC;AAAA,EACT,YAAY,MAA2B;AACrC,UAAM,IAAI;AACV,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAiEO,SAAS,gCAAsC;AACpD,MAAI,OAAO,WAAW,YAAa,QAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC;AAC9F;AAIO,SAAS,gBAAyB;AACvC,SACE,OAAO,WAAW,eAClB,OAAO,cAAc,eACrB,mBAAmB,aACnB,iBAAiB,UACjB,kBAAkB;AAEtB;AAGA,SAAS,QAAiB;AACxB,MAAI,OAAO,cAAc,YAAa,QAAO;AAC7C,QAAM,KAAK,UAAU;AACrB,SAAO,oBAAoB,KAAK,EAAE,KAAM,YAAY,KAAK,EAAE,KAAK,UAAU,iBAAiB;AAC7F;AAEA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AAGxB,SAAS,OAAU,SAAqB,IAAY,MAAuC;AACzF,MAAI;AACJ,SAAO,QAAQ,KAAK;AAAA,IAClB;AAAA,IACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,cAAQ,WAAW,MAAM,OAAO,IAAI,gBAAgB,IAAI,CAAC,GAAG,EAAE;AAAA,IAChE,CAAC;AAAA,EACH,CAAC,EAAE,QAAQ,MAAM,aAAa,KAAK,CAAC;AACtC;AAQA,eAAe,qBAAyD;AACtE,QAAM,WAAW,MAAM,UAAU,cAAc,gBAAgB;AAC/D,MAAI,CAAC,SAAU,OAAM,IAAI,gBAAgB,mBAAmB;AAC5D,SAAO,OAAO,UAAU,cAAc,OAAO,kBAAkB,mBAAmB;AACpF;AAEA,MAAM,uBAAuB,CAAC,UAAmB,aAAa,KAAK,MAAM;AAUzE,eAAe,oBAAoB,YAAsE;AACvG,QAAM,eAAe,MAAM,mBAAmB;AAC9C,QAAM,eAAe,MAAM,aAAa,YAAY,gBAAgB;AACpE,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,WAAW,aAAa,QAAQ;AACtC,QAAM,OAAO,aAAa,YAAY,GAAG,iBAAiB,cAAc;AACxE,SAAO;AACT;AAsCA,eAAsB,sBAAsB,YAAsE;AAChH,MAAI,CAAC,cAAc,EAAG,QAAO;AAC7B,MAAI;AACF,UAAM,eAAe,MAAM,UAAU,cAAc,gBAAgB;AAEnE,QAAI,CAAC,cAAc,OAAQ,QAAO;AAClC,UAAM,eAAe,MAAM,aAAa,YAAY,gBAAgB;AACpE,QAAI,CAAC,aAAc,QAAO;AAC1B,QAAI;AACF,YAAM,WAAW,aAAa,QAAQ;AAAA,IACxC,UAAE;AACA,YAAM,OAAO,aAAa,YAAY,GAAG,iBAAiB,cAAc;AAAA,IAC1E;AACA,WAAO;AAAA,EACT,UAAE;AACA,kCAA8B;AAAA,EAChC;AACF;AAuBO,SAAS,cAAc,SAA2C;AAEvE,QAAM,SAAS,OAAO,OAAO;AAC7B,YAAU,MAAM;AACd,WAAO,UAAU;AAAA,EACnB,CAAC;AAED,QAAM,YAAY,cAAc;AAChC,QAAM,MAAM,MAAM;AAClB,QAAM,aAAa,cAAc,8BAA8B,KAAK;AACpE,QAAM,YACJ,cACC,OAAO,cAAc,eAAgB,UAAmD,eAAe;AAE1G,QAAM,CAAC,YAAY,aAAa,IAAI;AAAA,IAAyB,MAC3D,YAAY,aAAa,aAAa;AAAA,EACxC;AACA,QAAM,CAAC,YAAY,aAAa,IAAI,SAA8B,MAAS;AAC3E,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,qBAAqB,sBAAsB,IAAI,SAAS,KAAK;AACpE,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,SAAwB,IAAI;AAC1E,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,UAAU,OAAO,IAAI;AAI3B,QAAM,aAAa,OAAO,KAAK;AAC/B,QAAM,WAAW,YAAY,MAAM;AACjC,eAAW,UAAU;AACrB,QAAI;AACF,oCAA8B;AAAA,IAChC,UAAE;AACA,iBAAW,UAAU;AAAA,IACvB;AACA,WAAO,QAAQ,WAAW;AAAA,EAC5B,GAAG,CAAC,CAAC;AACL,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAGL,YAAU,MAAM;AACd,QAAI,CAAC,UAAW;AAChB,QAAI,YAAY;AAChB,WAAO,QAAQ,QAAQ,EAAE;AAAA,MACvB,CAAC,QAAQ;AACP,YAAI,CAAC,UAAW,eAAc,QAAQ,EAAE;AAAA,MAC1C;AAAA,MACA,MAAM;AAAA,MAEN;AAAA,IACF;AACA,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAId,YAAU,MAAM;AACd,QAAI,CAAC,UAAW;AAChB,QAAI,YAAY;AAChB,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,eAAe,MAAM,mBAAmB;AAC9C,cAAM,WAAW,MAAM,aAAa,YAAY,gBAAgB;AAChE,YAAI,UAAW;AAEf,sBAAc,aAAa,UAAU;AACrC,YAAI,CAAC,UAAU;AACb,wBAAc,KAAK;AACnB,iCAAuB,KAAK;AAC5B,6BAAmB,IAAI;AACvB;AAAA,QACF;AACA,YAAI;AACJ,YAAI;AACF,gBAAM,UAAU,MAAM,OAAO,QAAQ,QAAQ;AAC7C,iBAAO,QAAQ,KAAK,CAAC,WAAW,OAAO,aAAa,SAAS,QAAQ;AAAA,QACvE,QAAQ;AACN,iBAAO;AAAA,QACT;AACA,YAAI,UAAW;AACf,2BAAmB,SAAS,QAAQ;AACpC,sBAAc,IAAI;AAClB,+BAAuB,CAAC,IAAI;AAAA,MAC9B,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,QAAQ,MAAM;AAClB,UAAI,CAAC,WAAW,QAAS,MAAK,KAAK;AAAA,IACrC;AAEA,UAAM,aAAa,CAAC,UAAwB;AAC1C,UAAK,MAAM,MAAoC,SAAS,0BAA2B,MAAK,KAAK;AAAA,IAC/F;AACA,UAAM,SAAS,UAAU;AACzB,SAAK,KAAK;AACV,WAAO,iBAAiB,2BAA2B,KAAK;AACxD,YAAQ,mBAAmB,WAAW,UAAU;AAChD,WAAO,MAAM;AACX,kBAAY;AACZ,aAAO,oBAAoB,2BAA2B,KAAK;AAC3D,cAAQ,sBAAsB,WAAW,UAAU;AAAA,IACrD;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAEd,QAAM,SAAS,YAAY,YAA8B;AACvD,QAAI,CAAC,UAAW,QAAO;AACvB,UAAM,EAAE,SAAS,UAAU,kBAAkB,qBAAqB,IAAI,OAAO;AAC7E,YAAQ,IAAI;AACZ,QAAI;AACF,YAAM,UAAU,MAAM,aAAa,kBAAkB;AACrD,UAAI,QAAQ,QAAS,eAAc,OAAO;AAC1C,UAAI,YAAY,UAAW,QAAO;AAElC,YAAM,MAAM,MAAM,QAAQ;AAC1B,UAAI,CAAC,KAAK;AACR,YAAI,QAAQ,QAAS,eAAc,KAAK;AACxC,eAAO;AAAA,MACT;AACA,UAAI,QAAQ,QAAS,eAAc,IAAI;AAEvC,YAAM,eAAe,MAAM,mBAAmB;AAG9C,YAAM,YAAY,CAAC,UACjB;AAAA,SACG,aACE,QAAQ,MAAM,aAAa,YAAY,gBAAgB,IAAI,SAC3D,MAAM,aAAa,YAAY,UAAU;AAAA,UACxC,iBAAiB;AAAA,UACjB,sBAAsB,SAAS,GAAG;AAAA,QACpC,CAAC,GAAI;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAEF,UAAI,eAAe,MAAM,UAAU,IAAI;AACvC,UAAI,QAAQ,QAAQ,YAAY;AAChC,UAAI,CAAC,MAAO,QAAO;AACnB,UAAI;AACF,cAAM,SAAS,KAAK;AAAA,MACtB,SAAS,OAAO;AACd,YAAI,CAAC,gBAAgB,KAAK,EAAG,OAAM;AACnC,cAAM,OAAO,aAAa,YAAY,GAAG,iBAAiB,cAAc;AACxE,uBAAe,MAAM,UAAU,KAAK;AACpC,gBAAQ,QAAQ,YAAY;AAC5B,YAAI,CAAC,MAAO,QAAO;AACnB,cAAM,SAAS,KAAK;AAAA,MACtB;AACA,UAAI,QAAQ,SAAS;AACnB,sBAAc,IAAI;AAClB,+BAAuB,KAAK;AAC5B,2BAAmB,MAAM,QAAQ;AAAA,MACnC;AACA,eAAS;AACT,aAAO;AAAA,IACT,UAAE;AACA,UAAI,QAAQ,QAAS,SAAQ,KAAK;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,WAAW,QAAQ,CAAC;AAExB,QAAM,UAAU,YAAY,YAA2B;AACrD,QAAI,CAAC,UAAW;AAChB,YAAQ,IAAI;AACZ,QAAI;AACF,YAAM,oBAAoB,CAAC,aAAa,OAAO,QAAQ,WAAW,QAAQ,CAAC;AAC3E,UAAI,QAAQ,SAAS;AACnB,sBAAc,KAAK;AACnB,+BAAuB,KAAK;AAC5B,2BAAmB,IAAI;AAAA,MACzB;AACA,eAAS;AAAA,IACX,UAAE;AACA,UAAI,QAAQ,QAAS,SAAQ,KAAK;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,WAAW,QAAQ,CAAC;AAExB,QAAM,WAAW,YAAY,MAAM,OAAO,QAAQ,KAAK,GAAG,CAAC,CAAC;AAE5D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/offline/query-persistence.d.ts

@@ -88,7 +88,9 @@ export interface QueryPersistence {
     /** Everything `<PersistQueryClientProvider persistOptions>` needs. */
     persistOptions: Omit<PersistQueryClientOptions, "queryClient">;
     /** Sign-out: stops writing under this key, empties the in-memory cache and deletes this
-     *  key's persisted copy. Best-effort; never throws. */
+     *  key's persisted copy. In every tab (0.52): the persistences of this key in the other tabs
+     *  stop writing too, and delete the key once more after any save of theirs under way.
+     *  Best-effort; never throws. */
     clear: (queryClient: QueryClient) => Promise<void>;
     /** The company switch (or any change of key without a sign-out): stops writing under this
      *  key — a save already scheduled is dropped too — and empties the in-memory cache, so

package/dist/offline/query-persistence.js

@@ -1,6 +1,7 @@
 "use client";
 import { createAsyncStoragePersister } from "@tanstack/query-async-storage-persister";
 import { del, get, keys, set } from "idb-keyval";
+import { listenOn, postOnce } from "../lib/broadcast.js";
 const DEFAULT_SCRUB_FIELDS = Object.freeze([
   "iban",
   "qr_iban",
@@ -78,6 +79,20 @@ function createQueryPersistence({
   const key = `${prefix}${user}${company === void 0 || company === null || company === "" ? "" : `-${company}`}`;
   const denied = new Set(denyRoots);
   let retired = false;
+  const across = `eifi1-query-cache:${key}`;
+  let unlisten = null;
+  const retire = () => {
+    retired = true;
+    unlisten?.();
+    unlisten = null;
+  };
+  const listen = () => {
+    unlisten ??= listenOn(across, (data) => {
+      if (data !== "clear") return;
+      retire();
+      Promise.resolve().then(() => storage.removeItem(key)).catch(() => void 0);
+    });
+  };
   const keyAllowed = (queryKey) => !denied.has(String(queryKey[0])) && (shouldPersistKey ? shouldPersistKey(queryKey) : true);
   const shouldDehydrateQuery = (query) => {
     if (query.state.status !== "success" || !keyAllowed(query.queryKey)) return false;
@@ -136,6 +151,7 @@ function createQueryPersistence({
       // Only the provider's restore reads: mounting this persistence again re-arms it.
       getItem: async (k) => {
         retired = false;
+        listen();
         return await storage.getItem(k) ?? null;
       },
       setItem: async (k, v) => {
@@ -151,14 +167,15 @@ function createQueryPersistence({
     deserialize
   });
   const leave = async (queryClient) => {
-    retired = true;
+    retire();
     try {
       queryClient.clear();
     } catch {
     }
   };
   const clear = async (queryClient) => {
-    retired = true;
+    retire();
+    postOnce(across, "clear");
     try {
       queryClient.clear();
       await persister.removeClient();