@eifi1/ui-kit 0.51.7 → 0.52.0

package/dist/shell.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/shell.ts"],"sourcesContent":["// `@eifi1/ui-kit/shell` — the composable app chrome.\n//\n// A re-slicing of the main barrel, not a new API. This entry point requires\n// `react-router`: AppShell renders NavLink and TopBarActionMenu renders Link.\nexport * from \"./shell/topbar-controls\";\nexport * from \"./shell/top-bar\";\nexport * from \"./shell/app-shell\";\nexport * from \"./shell/option-switcher-menu\";\nexport * from \"./shell/role-switcher\";\nexport * from \"./shell/topbar-action-menu\";\nexport * from \"./shell/top-bar-brand\";\nexport * from \"./shell/auth-layout\";\n// 0.40.0: the list page's fill (docs/page-layout-harmonization.md §1.3).\nexport { FillHeight, FILL_HEIGHT_CLASS } from \"./shell/fill-height\";\nexport type { FillHeightProps } from \"./shell/fill-height\";\n// 0.42.0: the account menu's \"Administration\" row, as an entry and as a HoverMenu row\n// (docs/admin-harmonization.md §2.1, §6.6).\nexport { adminMenuEntry, AdminMenuRow } from \"./shell/admin-menu\";\nexport type { AdminMenuEntryOptions, AdminMenuRowProps } from \"./shell/admin-menu\";\n// 0.43.0 (kastlan): the entry with the provider's words.\nexport { useAdminMenuEntry } from \"./shell/admin-menu\";\nexport type { UseAdminMenuEntryOptions } from \"./shell/admin-menu\";\n// 0.45.0 (docs/admin-harmonization.md §9.3.4): the row's waiting pill on its own, for\n// IconButton's `badge` (kastlan's platform button); its name is `adminArea.waitingLabel`.\nexport { AdminWaitingBadge } from \"./shell/admin-menu\";\nexport type { AdminWaitingBadgeProps } from \"./shell/admin-menu\";\n// 0.31.0: the settings and admin pages' shell (docs/settings-harmonization.md §3, §5).\nexport { SettingsLayout, SETTINGS_SEARCH_THRESHOLD } from \"./settings/settings-layout\";\nexport type { SettingsLayoutProps, SettingsLayoutWidth, SettingsDocumentTitleParts } from \"./settings/settings-layout\";\nexport {\n  useSettingsRoute,\n  resolveSettingsLocation,\n  settingsFromListState,\n  SETTINGS_FROM_LIST_STATE,\n} from \"./settings/use-settings-route\";\nexport type {\n  UseSettingsRouteOptions,\n  SettingsRoute,\n  SettingsLayoutMode,\n  SettingsLocation,\n  SettingsLocationRules,\n  SettingsLocationResult,\n} from \"./settings/use-settings-route\";\nexport { useSettingsFocus, useFocusParam, SETTINGS_FOCUS_RING, SETTINGS_FOCUS_MS } from \"./settings/use-settings-focus\";\nexport { SettingsSection } from \"./settings/settings-section\";\nexport type { SettingsSectionProps } from \"./settings/settings-section\";\nexport { useSettingsLayout } from \"./settings/settings-context\";\nexport type { SettingsLayoutContextValue } from \"./settings/settings-context\";\nexport { SettingsHeadingLevel, useSettingsHeadingLevel } from \"./settings/settings-heading\";\nexport type { SettingsHeadingLevelProps, SettingsHeadingTag } from \"./settings/settings-heading\";\nexport {\n  settingsSearchEntries,\n  visibleSettingsGroups,\n  visibleSettingsEntries,\n  settingsHref,\n} from \"./settings/settings-catalogue\";\nexport type { SettingsGroup, SettingsEntry, SettingsSearchEntriesOptions } from \"./settings/settings-catalogue\";\n// 0.31.0: the public pages' header and the resume (docs/landing-demo-harmonization.md §3, §4.1).\nexport {\n  RootEntry,\n  RedirectIfAuthed,\n  useLastVisitedPage,\n  readLastVisitedPage,\n  clearLastVisitedPage,\n  safeNextPath,\n  NEXT_PARAM,\n  DEFAULT_LAST_VISITED_EXCLUDES,\n} from \"./landing/routing\";\nexport type {\n  RootEntryProps,\n  RedirectIfAuthedProps,\n  RoutingSession,\n  LastVisitedPageOptions,\n  PathPattern,\n} from \"./landing/routing\";\nexport { PublicHeader } from \"./landing/public-header\";\nexport type { PublicHeaderProps, PublicHeaderBrand } from \"./landing/public-header\";\n// 0.42.0: the top bar's shared parts (docs/top-bar-harmonization.md §3.1) — the slots in\n// §2.1's order, the account menu's language sub-list, the tours menu, the sync status, the\n// local-dev switchers, and their words.\nexport { TopBarActions, TOP_BAR_ACTION_ORDER } from \"./shell/top-bar-actions\";\nexport type { TopBarActionsProps } from \"./shell/top-bar-actions\";\nexport { AccountMenuLanguage } from \"./shell/account-menu-language\";\nexport type { AccountMenuLanguageProps, AccountMenuLanguageOption } from \"./shell/account-menu-language\";\n// 0.46.0 (keksdose live #426): A− / A+ for the text size, beside the language.\nexport { AccountMenuTextSize } from \"./shell/account-menu-text-size\";\nexport type { AccountMenuTextSizeProps } from \"./shell/account-menu-text-size\";\nexport { TourMenu } from \"./shell/tour-menu\";\nexport type { TourMenuProps, TourMenuTour } from \"./shell/tour-menu\";\nexport { SyncStatusIndicator, syncState } from \"./shell/sync-status-indicator\";\nexport type { SyncStatus, SyncState, SyncStatusScope, SyncStatusIndicatorProps } from \"./shell/sync-status-indicator\";\n// 0.51 (§2.7.1, keksdose): one flask, the kit's Account section and the app's own dev\n// sections; `DevSwitchers` is a deprecated wrapper over it until 0.52.\nexport { DevMenu, DEV_ORIGINAL_ROLE_KEY } from \"./shell/dev-menu\";\nexport type { DevMenuProps, DevMenuSection } from \"./shell/dev-menu\";\nexport { DevSwitchers } from \"./shell/dev-switchers\";\nexport type { DevSwitchersProps } from \"./shell/dev-switchers\";\nexport { DEFAULT_TOP_BAR_PARTS_LABELS, useTopBarPartsLabels } from \"./shell/top-bar-parts-labels\";\nexport type {\n  TopBarPartsLabels,\n  TourMenuLabels,\n  SyncStatusLabels,\n  DevSwitchersLabels,\n} from \"./shell/top-bar-parts-labels\";\n"],"mappings":";AAIA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AAEd,SAAS,YAAY,yBAAyB;AAI9C,SAAS,gBAAgB,oBAAoB;AAG7C,SAAS,yBAAyB;AAIlC,SAAS,yBAAyB;AAGlC,SAAS,gBAAgB,iCAAiC;AAE1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,SAAS,kBAAkB,eAAe,qBAAqB,yBAAyB;AACxF,SAAS,uBAAuB;AAEhC,SAAS,yBAAyB;AAElC,SAAS,sBAAsB,+BAA+B;AAE9D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,SAAS,oBAAoB;AAK7B,SAAS,eAAe,4BAA4B;AAEpD,SAAS,2BAA2B;AAGpC,SAAS,2BAA2B;AAEpC,SAAS,gBAAgB;AAEzB,SAAS,qBAAqB,iBAAiB;AAI/C,SAAS,SAAS,6BAA6B;AAE/C,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B,4BAA4B;","names":[]}
+{"version":3,"sources":["../src/shell.ts"],"sourcesContent":["// `@eifi1/ui-kit/shell` — the composable app chrome.\n//\n// A re-slicing of the main barrel, not a new API. This entry point requires\n// `react-router`: AppShell renders NavLink and TopBarActionMenu renders Link.\nexport * from \"./shell/topbar-controls\";\nexport * from \"./shell/top-bar\";\nexport * from \"./shell/app-shell\";\n// 0.52: the slice's share of the 55 names no app reads (refactor audit 2026-10-30, API-4,\n// decision 4), tagged on their specifiers as the barrel's are — the modules keep them.\nexport {\n  /** @deprecated 0.52 — `AppShell`, which picks its phone bar with it (API-4); removed in 0.53 */\n  pickMobileBar,\n  /** @deprecated 0.52 — `AppShell`, which splits its phone bar with it (API-4); removed in 0.53 */\n  splitMobileBar,\n} from \"./shell/app-shell\";\nexport * from \"./shell/option-switcher-menu\";\nexport * from \"./shell/role-switcher\";\nexport * from \"./shell/topbar-action-menu\";\nexport * from \"./shell/top-bar-brand\";\nexport * from \"./shell/auth-layout\";\n// 0.40.0: the list page's fill (docs/page-layout-harmonization.md §1.3).\nexport { FillHeight, FILL_HEIGHT_CLASS } from \"./shell/fill-height\";\nexport type { FillHeightProps } from \"./shell/fill-height\";\n// 0.42.0: the account menu's \"Administration\" row, as an entry and as a HoverMenu row\n// (docs/admin-harmonization.md §2.1, §6.6).\nexport { adminMenuEntry, AdminMenuRow } from \"./shell/admin-menu\";\nexport type { AdminMenuEntryOptions, AdminMenuRowProps } from \"./shell/admin-menu\";\n// 0.43.0 (kastlan): the entry with the provider's words.\nexport { useAdminMenuEntry } from \"./shell/admin-menu\";\nexport type { UseAdminMenuEntryOptions } from \"./shell/admin-menu\";\n// 0.45.0 (docs/admin-harmonization.md §9.3.4): the row's waiting pill on its own, for\n// IconButton's `badge` (kastlan's platform button); its name is `adminArea.waitingLabel`.\nexport { AdminWaitingBadge } from \"./shell/admin-menu\";\nexport type { AdminWaitingBadgeProps } from \"./shell/admin-menu\";\n// 0.31.0: the settings and admin pages' shell (docs/settings-harmonization.md §3, §5).\nexport {\n  SettingsLayout,\n  /** @deprecated 0.52 — `SettingsLayout`, which shows its search past that many entries (API-4); removed in 0.53 */\n  SETTINGS_SEARCH_THRESHOLD,\n} from \"./settings/settings-layout\";\nexport type { SettingsLayoutProps, SettingsLayoutWidth, SettingsDocumentTitleParts } from \"./settings/settings-layout\";\nexport {\n  useSettingsRoute,\n  /** @deprecated 0.52 — `useSettingsRoute`, which resolves the location with it (API-4); removed in 0.53 */\n  resolveSettingsLocation,\n  settingsFromListState,\n  /** @deprecated 0.52 — `settingsFromListState` and `useSettingsRoute`, which write and read it (API-4); removed in 0.53 */\n  SETTINGS_FROM_LIST_STATE,\n} from \"./settings/use-settings-route\";\nexport type {\n  UseSettingsRouteOptions,\n  SettingsRoute,\n  SettingsLayoutMode,\n  SettingsLocation,\n  SettingsLocationRules,\n  SettingsLocationResult,\n} from \"./settings/use-settings-route\";\nexport {\n  useSettingsFocus,\n  useFocusParam,\n  /** @deprecated 0.52 — `useSettingsFocus` / `useFocusParam`, which ring the card with it (API-4); removed in 0.53 */\n  SETTINGS_FOCUS_RING,\n  /** @deprecated 0.52 — `useSettingsFocus` / `useFocusParam`, which hold the ring that long (API-4); removed in 0.53 */\n  SETTINGS_FOCUS_MS,\n} from \"./settings/use-settings-focus\";\nexport { SettingsSection } from \"./settings/settings-section\";\nexport type { SettingsSectionProps } from \"./settings/settings-section\";\nexport { useSettingsLayout } from \"./settings/settings-context\";\nexport type { SettingsLayoutContextValue } from \"./settings/settings-context\";\nexport { SettingsHeadingLevel, useSettingsHeadingLevel } from \"./settings/settings-heading\";\nexport type { SettingsHeadingLevelProps, SettingsHeadingTag } from \"./settings/settings-heading\";\nexport {\n  settingsSearchEntries,\n  visibleSettingsGroups,\n  visibleSettingsEntries,\n  settingsHref,\n} from \"./settings/settings-catalogue\";\nexport type { SettingsGroup, SettingsEntry, SettingsSearchEntriesOptions } from \"./settings/settings-catalogue\";\n// 0.31.0: the public pages' header and the resume (docs/landing-demo-harmonization.md §3, §4.1).\nexport {\n  RootEntry,\n  RedirectIfAuthed,\n  useLastVisitedPage,\n  readLastVisitedPage,\n  clearLastVisitedPage,\n  safeNextPath,\n  NEXT_PARAM,\n  DEFAULT_LAST_VISITED_EXCLUDES,\n} from \"./landing/routing\";\nexport type {\n  RootEntryProps,\n  RedirectIfAuthedProps,\n  RoutingSession,\n  LastVisitedPageOptions,\n  PathPattern,\n} from \"./landing/routing\";\nexport { PublicHeader } from \"./landing/public-header\";\nexport type { PublicHeaderProps, PublicHeaderBrand } from \"./landing/public-header\";\n// 0.42.0: the top bar's shared parts (docs/top-bar-harmonization.md §3.1) — the slots in\n// §2.1's order, the account menu's language sub-list, the tours menu, the sync status, the\n// local-dev menu, and their words.\nexport {\n  TopBarActions,\n  /** @deprecated 0.52 — `TopBarActions`, which puts its slots in that order (API-4); removed in 0.53 */\n  TOP_BAR_ACTION_ORDER,\n} from \"./shell/top-bar-actions\";\nexport type { TopBarActionsProps } from \"./shell/top-bar-actions\";\nexport { AccountMenuLanguage } from \"./shell/account-menu-language\";\nexport type { AccountMenuLanguageProps, AccountMenuLanguageOption } from \"./shell/account-menu-language\";\n// 0.46.0 (keksdose live #426): A− / A+ for the text size, beside the language.\nexport { AccountMenuTextSize } from \"./shell/account-menu-text-size\";\nexport type { AccountMenuTextSizeProps } from \"./shell/account-menu-text-size\";\nexport { TourMenu } from \"./shell/tour-menu\";\nexport type { TourMenuProps, TourMenuTour } from \"./shell/tour-menu\";\nexport {\n  SyncStatusIndicator,\n  /** @deprecated 0.52 — `SyncStatusIndicator`, which derives its state with it (API-4); removed in 0.53 */\n  syncState,\n} from \"./shell/sync-status-indicator\";\nexport type { SyncStatus, SyncState, SyncStatusScope, SyncStatusIndicatorProps } from \"./shell/sync-status-indicator\";\n// 0.51 (§2.7.1, keksdose): one flask, the kit's Account section and the app's own dev\n// sections. 0.42's `DevSwitchers`, a DevMenu with no sections since 0.51, went in 0.52.\nexport {\n  DevMenu,\n  /** @deprecated 0.52 — `DevMenu`, which keeps the role there unless `storageKey` names another key (API-4); removed in 0.53 */\n  DEV_ORIGINAL_ROLE_KEY,\n} from \"./shell/dev-menu\";\nexport type { DevMenuProps, DevMenuSection } from \"./shell/dev-menu\";\nexport { DEFAULT_TOP_BAR_PARTS_LABELS, useTopBarPartsLabels } from \"./shell/top-bar-parts-labels\";\nexport type {\n  TopBarPartsLabels,\n  TourMenuLabels,\n  SyncStatusLabels,\n  DevSwitchersLabels,\n} from \"./shell/top-bar-parts-labels\";\n"],"mappings":";AAIA,cAAc;AACd,cAAc;AACd,cAAc;AAGd;AAAA,EAEE;AAAA,EAEA;AAAA,OACK;AACP,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AAEd,SAAS,YAAY,yBAAyB;AAI9C,SAAS,gBAAgB,oBAAoB;AAG7C,SAAS,yBAAyB;AAIlC,SAAS,yBAAyB;AAGlC;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AASP;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EAEA;AAAA,OACK;AACP,SAAS,uBAAuB;AAEhC,SAAS,yBAAyB;AAElC,SAAS,sBAAsB,+BAA+B;AAE9D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,SAAS,oBAAoB;AAK7B;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAEP,SAAS,2BAA2B;AAGpC,SAAS,2BAA2B;AAEpC,SAAS,gBAAgB;AAEzB;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EAEA;AAAA,OACK;AAEP,SAAS,8BAA8B,4BAA4B;","names":[]}

package/dist/sync/engine.d.ts

@@ -8,7 +8,8 @@ export interface SyncCounts {
 }
 export interface SyncStepContext {
     signal: AbortSignal;
-    /** False once `forget()` bumped the generation: the step writes nothing more (D15). */
+    /** False once `forget()` bumped the generation — in this tab, or (0.52) in another tab on
+     *  the same database, heard over a BroadcastChannel: the step writes nothing more (D15). */
     isCurrent(): boolean;
 }
 export interface SyncStepResult {
@@ -37,7 +38,9 @@ export interface SyncEngineState {
     nextRetryAt: number | null;
 }
 export interface SyncRoundResult {
-    /** `paused`: `paused()` held the round. `dropped`: `forget()` ran during it, its answer unused. */
+    /** `paused`: `paused()` held the round. (A round asked for while another tab's round holds
+     *  the database waits its turn, 0.52.) `dropped`: `forget()` ran during it, here or in
+     *  another tab, its answer unused. */
     outcome: "synced" | "offline" | "error" | "paused" | "dropped";
     /** Changes this round set `waiting`, `blocked` or `rejected`. */
     waiting: number;
@@ -73,19 +76,38 @@ export interface SyncEngineOptions<D extends SyncDb = SyncDb> {
     backoffMs?: readonly number[];
     /** Default `isSharedComputer`: on a computer marked shared the engine does not start (D15). */
     sharedComputer?: () => boolean;
+    /**
+     * 0.52: the backstop on one round, counted from the moment it holds the database's lock
+     * (a tab waiting behind a stuck round is not cut with it). Past it the round is cut: its
+     * requests and steps are aborted, anything they answer or write later is dropped, and the
+     * round ends `error` with a `TimeoutError` (`DOMException`), not `offline`, so the backoff
+     * starts and the lock goes to the next tab even when a request or a step ignores its
+     * signal. The app's own request timeouts come first; this only bounds what they miss.
+     * Default 10 minutes, long on purpose: kastlan's photo backlog can take minutes, and a cut
+     * round has still made progress (each photo uploaded before the cut is off the queue).
+     * `0` or `Infinity`: none.
+     */
+    roundTimeoutMs?: number;
 }
 export interface SyncEngine {
     /** Into the copy at once and into the queue, in the scope the caller names (D11). An edit
      *  merges into the row's last `pending` upsert; deleting a row that never reached the
      *  server forgets its queue; stamped with `stampAfter`. */
     write(scope: string, entity: string, id: string, op: "upsert" | "delete", data?: Record<string, unknown>): Promise<void>;
+    /** Starts the poll and the round on `online` (nothing on a computer marked shared).
+     *  An engine another tab's `forget()` stopped stays stopped through `start()`: only its
+     *  own `forget()` (the app's session end) or a new engine (`releaseSyncEngine`) re-arms
+     *  it. A start cannot tell a new sign-in from a remount in a tab whose session never
+     *  ended, and the latter would pull the signed-out account back into the wiped copy
+     *  (D15; the 0.52 code review asked, and the contract stands). */
     start(): void;
     /** Stops the poll and the timers, aborts the round in flight and drops its answer (the
      *  queue is laid back). A new engine's round on the same database waits for it. */
     stop(): void;
     /** Sync soon (debounced): after a write. */
     requestSync(): void;
-    /** "Sync now": resets the backoff, runs a round (after the one under way). */
+    /** "Sync now": resets the backoff, runs a round of its own after the one under way — another
+     *  tab's too (0.52) — and answers its result. */
     syncNow(): Promise<SyncRoundResult>;
     /** A round that sends the `blocked` changes too. */
     retryBlocked(): Promise<void>;
@@ -94,7 +116,11 @@ export interface SyncEngine {
     /** The rejected changes with their reasons, for the app's banner. */
     rejected(): Promise<OutboxChange[]>;
     /** Sign-out: bump the generation (a round in flight writes nothing more), then clear the
-     *  rows and `meta` — and the outbox and the app's tables unless `keepQueue` (D15). */
+     *  rows and `meta` — and the outbox and the app's tables unless `keepQueue` (D15). In every
+     *  tab (0.52): the clear writes a new epoch into `meta`, so a round of another tab's engine on
+     *  this database drops its answer, and that engine stops — the session it ran for has ended.
+     *  Another tab's `forget()` heard while this clear runs is decided by the epoch the copy is
+     *  left with: one that committed first was undone by this clear and stops nothing. */
     forget(opts: {
         keepQueue: boolean;
     }): Promise<void>;

package/dist/sync/engine.js

@@ -1,10 +1,14 @@
 "use client";
-import { httpStatusOf } from "../auth/auth-errors.js";
+import { listenOn, postOnce } from "../lib/broadcast.js";
+import { httpStatusOf } from "../lib/http-status.js";
 import { isOfflineError, stampAfter } from "../offline/local-first.js";
 import { isSharedComputer } from "../offline/shared-computer.js";
 const DEFAULT_SYNC_BACKOFF_MS = [5e3, 15e3, 6e4, 3e5];
 const DEFAULT_HOLD_CODES = ["billing_read_only"];
+const ROUND_TIMEOUT_MS = 10 * 6e4;
+const MAX_TIMEOUT_MS = 2147483647;
 const LAST_SYNCED_AT = "lastSyncedAt";
+const EPOCH = "epoch";
 const lastKnowledgeKey = (scope) => `lastKnowledge:${scope}`;
 const UNSENT = ["pending", "sending", "waiting", "blocked"];
 const ZERO = { pending: 0, waiting: 0, blocked: 0, rejected: 0 };
@@ -13,6 +17,15 @@ const flights = /* @__PURE__ */ new Map();
 const kept = /* @__PURE__ */ new Map();
 class Dropped extends Error {
 }
+class ForgottenElsewhere extends Dropped {
+}
+function webLocks() {
+  return typeof navigator === "undefined" ? void 0 : navigator.locks;
+}
+function freshEpoch() {
+  const uuid = globalThis.crypto?.randomUUID;
+  return uuid ? uuid.call(globalThis.crypto) : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+}
 function browserOnline() {
   return typeof navigator === "undefined" || navigator.onLine !== false;
 }
@@ -47,6 +60,8 @@ function createSyncEngine(options) {
   const soonMs = options.soonMs ?? 800;
   const backoffMs = options.backoffMs?.length ? options.backoffMs : DEFAULT_SYNC_BACKOFF_MS;
   const sharedComputer = options.sharedComputer ?? isSharedComputer;
+  const roundTimeoutMs = options.roundTimeoutMs ?? ROUND_TIMEOUT_MS;
+  const cut = /* @__PURE__ */ new WeakSet();
   let generation = 0;
   let state = {
     phase: "idle",
@@ -65,6 +80,12 @@ function createSyncEngine(options) {
   let again = false;
   let controller = null;
   let stepCounts = {};
+  const across = `eifi1-sync:${db.name}`;
+  const epochs = /* @__PURE__ */ new Set();
+  let epochRead = null;
+  let forgotten = false;
+  let forgetting = 0;
+  let unlisten = null;
   function set(next) {
     state = { ...state, ...next };
     listeners.forEach((listener) => listener());
@@ -89,8 +110,50 @@ function createSyncEngine(options) {
     }
     set({ counts, lastSyncedAt: typeof last === "string" ? last : null });
   }
-  function takeQueue(scope, withBlocked) {
-    return db.transaction("rw", db.outbox, async () => {
+  function readEpoch() {
+    return db.meta.get(EPOCH).then((entry) => typeof entry?.value === "string" ? entry.value : null);
+  }
+  function captureEpoch() {
+    if (epochRead) return epochRead;
+    const read = readEpoch().then((epoch) => void epochs.add(epoch));
+    epochRead = read;
+    read.catch(() => {
+      if (epochRead === read) epochRead = null;
+    });
+    return read;
+  }
+  function listen() {
+    unlisten ??= listenOn(across, (data) => {
+      const epoch = data?.epoch;
+      if (typeof epoch === "string" && !epochs.has(epoch)) void forgetHere();
+    });
+  }
+  function forgetHere() {
+    if (forgotten || forgetting > 0) return Promise.resolve();
+    forgotten = true;
+    if (started) halt();
+    else drop();
+    return endSession();
+  }
+  function drop() {
+    generation += 1;
+    controller?.abort();
+  }
+  function endSession() {
+    stepCounts = {};
+    failures = 0;
+    clearRetry();
+    set({ phase: "idle", lastSyncedAt: null, nextRetryAt: null });
+    return refreshCounts();
+  }
+  async function standing(gen, epoch) {
+    const now = await readEpoch();
+    if (gen !== generation) throw new Dropped();
+    if (now !== epoch) throw epochs.has(now) ? new Dropped() : new ForgottenElsewhere();
+  }
+  function takeQueue(scope, withBlocked, gen, epoch) {
+    return db.transaction("rw", db.outbox, db.meta, async () => {
+      await standing(gen, epoch);
       await db.outbox.where("scope").equals(scope).and((c) => c.status === "sending").modify({ status: "pending" });
       const take = withBlocked ? ["pending", "waiting", "blocked"] : ["pending", "waiting"];
       const queue = (await db.outbox.where("scope").equals(scope).toArray()).filter((c) => take.includes(c.status)).sort((a, b) => a.seq - b.seq);
@@ -98,15 +161,16 @@ function createSyncEngine(options) {
       return queue;
     });
   }
-  function restore(sent) {
+  function layBack(sent, signal) {
+    if (cut.has(signal)) return;
     return db.outbox.bulkUpdate(sent.map((c) => ({ key: c.seq, changes: { status: c.status } })));
   }
   function mark(changes, fields) {
     return db.outbox.bulkUpdate(changes.map((c) => ({ key: c.seq, changes: fields })));
   }
-  async function apply(scope, answer, sent, gen, lastPage) {
+  async function apply(scope, answer, sent, gen, epoch, lastPage) {
     return db.transaction("rw", db.rows, db.outbox, db.meta, async () => {
-      if (gen !== generation) throw new Dropped();
+      await standing(gen, epoch);
       const refused = answer.refused ?? null;
       const refusedIds = new Set(refused?.change_ids ?? []);
       const rejections = new Map((answer.rejections ?? []).map((r) => [r.change_id, r]));
@@ -175,8 +239,8 @@ function createSyncEngine(options) {
       return queue.length;
     });
   }
-  async function syncScope(scope, gen, signal, withBlocked) {
-    const sent = await takeQueue(scope, withBlocked);
+  async function syncScope(scope, gen, epoch, signal, withBlocked) {
+    const sent = await takeQueue(scope, withBlocked, gen, epoch);
     const last = Number((await db.meta.get(lastKnowledgeKey(scope)))?.value ?? 0) || 0;
     const body = (changes, page_cursor) => ({
       scope,
@@ -190,24 +254,26 @@ function createSyncEngine(options) {
     try {
       answer = await options.send(body(sent.map(toWire), null), signal);
     } catch (err) {
-      await restore(sent);
+      await layBack(sent, signal);
       if (gen !== generation) throw new Dropped();
       if (isOffline(err)) return { offline: true };
       const plan = planCode(err);
-      if (plan) {
-        await mark(sent, { status: "waiting", code: plan, reason: plan });
-        return { offline: false, waiting: sent.length, blocked: 0, rejected: 0 };
-      }
-      if (httpStatusOf(err) === 403)
+      if (!plan && httpStatusOf(err) !== 403) throw err;
+      return db.transaction("rw", db.outbox, db.meta, async () => {
+        await standing(gen, epoch);
+        if (plan) {
+          await mark(sent, { status: "waiting", code: plan, reason: plan });
+          return { offline: false, waiting: sent.length, blocked: 0, rejected: 0 };
+        }
         return { offline: false, waiting: 0, blocked: 0, rejected: await loseScope(scope, err) };
-      throw err;
+      });
     }
     let cursor = options.paged ? answer.page_cursor ?? null : null;
     let tally;
     try {
-      tally = { offline: false, ...await apply(scope, answer, sent, gen, cursor == null) };
+      tally = { offline: false, ...await apply(scope, answer, sent, gen, epoch, cursor == null) };
     } catch (err) {
-      if (err instanceof Dropped) await restore(sent);
+      if (err instanceof Dropped) await layBack(sent, signal);
       throw err;
     }
     while (cursor) {
@@ -220,23 +286,66 @@ function createSyncEngine(options) {
         throw err;
       }
       cursor = page.page_cursor ?? null;
-      await apply(scope, page, [], gen, cursor == null);
+      await apply(scope, page, [], gen, epoch, cursor == null);
     }
     return tally;
   }
   async function round(withBlocked, gen) {
     const result = { outcome: "synced", waiting: 0, blocked: 0, rejected: 0 };
-    if (gen !== generation) return { ...result, outcome: "dropped" };
-    if (options.paused?.()) return { ...result, outcome: "paused" };
-    if (!browserOnline()) return { ...result, outcome: "offline" };
+    if (gen !== generation || forgotten) return { ...result, outcome: "dropped" };
     const own = new AbortController();
     controller = own;
-    set({ phase: "syncing" });
     try {
+      const locks = webLocks();
+      if (!locks) return await begin(result, withBlocked, gen, own);
+      let granted = false;
+      try {
+        return await locks.request(across, { signal: own.signal }, () => {
+          granted = true;
+          return begin(result, withBlocked, gen, own);
+        });
+      } catch (err) {
+        if (granted) return { ...result, outcome: "error", error: err };
+        return await begin(result, withBlocked, gen, own);
+      }
+    } finally {
+      if (controller === own) controller = null;
+    }
+  }
+  async function begin(result, withBlocked, gen, own) {
+    if (gen !== generation || forgotten) return { ...result, outcome: "dropped" };
+    if (options.paused?.()) return { ...result, outcome: "paused" };
+    if (!browserOnline()) return { ...result, outcome: "offline" };
+    return withDeadline(locked(result, withBlocked, gen, own.signal), result, gen, own);
+  }
+  function withDeadline(round2, result, gen, own) {
+    if (!(roundTimeoutMs > 0 && Number.isFinite(roundTimeoutMs))) return round2;
+    let timer;
+    const deadline = new Promise((resolve) => {
+      timer = setTimeout(
+        () => {
+          const error = new DOMException(`The sync round ran past ${roundTimeoutMs} ms`, "TimeoutError");
+          resolve({ ...result, outcome: "error", error });
+          cut.add(own.signal);
+          if (gen === generation) generation += 1;
+          own.abort(error);
+        },
+        Math.min(roundTimeoutMs, MAX_TIMEOUT_MS)
+      );
+    });
+    return Promise.race([round2, deadline]).finally(() => clearTimeout(timer));
+  }
+  async function locked(result, withBlocked, gen, signal) {
+    try {
+      await captureEpoch();
+      const epoch = await readEpoch();
+      if (gen !== generation) throw new Dropped();
+      if (!epochs.has(epoch)) throw new ForgottenElsewhere();
+      set({ phase: "syncing" });
       for (let pass = 0; ; pass++) {
         for (const scope of options.scopes()) {
           if (gen !== generation) throw new Dropped();
-          const r = await syncScope(scope, gen, own.signal, withBlocked);
+          const r = await syncScope(scope, gen, epoch, signal, withBlocked);
           if (r.offline) return { ...result, outcome: "offline" };
           result.waiting += r.waiting;
           result.blocked += r.blocked;
@@ -246,7 +355,7 @@ function createSyncEngine(options) {
         let changed = false;
         for (const step of steps) {
           if (gen !== generation) throw new Dropped();
-          const ran = await step.run(db, { signal: own.signal, isCurrent: () => gen === generation });
+          const ran = await step.run(db, { signal, isCurrent: () => gen === generation });
           if (gen !== generation) throw new Dropped();
           if (ran.counts) stepCounts = { ...stepCounts, [step.name]: ran.counts };
           if (ran.offline) return { ...result, outcome: "offline" };
@@ -256,10 +365,9 @@ function createSyncEngine(options) {
       }
       return result;
     } catch (err) {
+      if (err instanceof ForgottenElsewhere) void forgetHere();
       if (err instanceof Dropped || gen !== generation) return { ...result, outcome: "dropped" };
       return { ...result, outcome: "error", error: err };
-    } finally {
-      if (controller === own) controller = null;
     }
   }
   function clearRetry() {
@@ -338,7 +446,7 @@ function createSyncEngine(options) {
   }
   async function runFresh(withBlocked) {
     resetBackoff();
-    if (current) {
+    while (current) {
       again = false;
       await current.catch(() => void 0);
     }
@@ -350,6 +458,23 @@ function createSyncEngine(options) {
     void run(false);
   };
   const onOffline = () => set({ online: false });
+  function halt() {
+    if (!started) return;
+    started = false;
+    drop();
+    if (running.get(db.name) === engine) running.delete(db.name);
+    if (poll) clearInterval(poll);
+    poll = null;
+    if (soon) clearTimeout(soon);
+    soon = null;
+    clearRetry();
+    if (typeof window !== "undefined") {
+      window.removeEventListener("online", onOnline);
+      window.removeEventListener("offline", onOffline);
+    }
+    unlisten?.();
+    unlisten = null;
+  }
   const engine = {
     async write(scope, entity, id, op, data = {}) {
       await db.transaction("rw", db.rows, db.outbox, async () => {
@@ -386,11 +511,13 @@ function createSyncEngine(options) {
       engine.requestSync();
     },
     start() {
-      if (started || sharedComputer()) return;
+      if (started || forgotten || sharedComputer()) return;
       const other = running.get(db.name);
       if (other && other !== engine) other.stop();
       running.set(db.name, engine);
       started = true;
+      captureEpoch().catch(() => void 0);
+      listen();
       if (typeof window !== "undefined") {
         window.addEventListener("online", onOnline);
         window.addEventListener("offline", onOffline);
@@ -399,22 +526,7 @@ function createSyncEngine(options) {
       void refreshCounts();
       void run(false);
     },
-    stop() {
-      if (!started) return;
-      started = false;
-      generation += 1;
-      controller?.abort();
-      if (running.get(db.name) === engine) running.delete(db.name);
-      if (poll) clearInterval(poll);
-      poll = null;
-      if (soon) clearTimeout(soon);
-      soon = null;
-      clearRetry();
-      if (typeof window !== "undefined") {
-        window.removeEventListener("online", onOnline);
-        window.removeEventListener("offline", onOffline);
-      }
-    },
+    stop: halt,
     requestSync() {
       void refreshCounts();
       if (!started) return;
@@ -448,15 +560,23 @@ function createSyncEngine(options) {
       return db.outbox.where("status").equals("rejected").sortBy("seq");
     },
     async forget({ keepQueue }) {
-      generation += 1;
-      controller?.abort();
+      drop();
+      forgotten = false;
+      const epoch = freshEpoch();
+      epochs.add(epoch);
       const tables = keepQueue ? [db.rows, db.meta] : db.tables;
-      await db.transaction("rw", tables, async () => {
-        for (const table of tables) await table.clear();
-      });
-      stepCounts = {};
-      set({ lastSyncedAt: null });
-      await refreshCounts();
+      forgetting += 1;
+      try {
+        await db.transaction("rw", tables, async () => {
+          for (const table of tables) await table.clear();
+          await db.meta.put({ key: EPOCH, value: epoch });
+        });
+      } finally {
+        forgetting -= 1;
+      }
+      postOnce(across, { epoch });
+      const now = await readEpoch().catch(() => epoch);
+      await (epochs.has(now) ? endSession() : forgetHere());
     },
     getState: () => state,
     subscribe(listener) {