@fairfox/polly 0.20.1 → 0.22.0

package/dist/src/shared/lib/resource.js.map

@@ -2,12 +2,12 @@
   "version": 3,
   "sources": ["../src/shared/lib/storage-adapter.ts", "../src/shared/lib/sync-adapter.ts", "../src/shared/lib/state.ts", "../src/shared/lib/resource.ts"],
   "sourcesContent": [
-    "// Storage adapters for different execution contexts\n// Automatically chooses the right storage mechanism based on environment\n\n/**\n * Universal storage adapter interface\n */\nexport interface StorageAdapter {\n  get<T = unknown>(keys: string[]): Promise<Record<string, T>>;\n  set(items: Record<string, unknown>): Promise<void>;\n  remove(keys: string[]): Promise<void>;\n}\n\n/**\n * IndexedDB adapter for web apps\n */\nexport class IndexedDBAdapter implements StorageAdapter {\n  private dbName: string;\n  private storeName = \"state\";\n  private dbPromise: Promise<IDBDatabase> | null = null;\n\n  constructor(dbName = \"polly-state\") {\n    this.dbName = dbName;\n  }\n\n  private getDB(): Promise<IDBDatabase> {\n    if (this.dbPromise) return this.dbPromise;\n\n    this.dbPromise = new Promise((resolve, reject) => {\n      const request = indexedDB.open(this.dbName, 1);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve(request.result);\n\n      request.onupgradeneeded = (event) => {\n        const db = (event.target as IDBOpenDBRequest).result;\n        if (!db.objectStoreNames.contains(this.storeName)) {\n          db.createObjectStore(this.storeName);\n        }\n      };\n    });\n\n    return this.dbPromise;\n  }\n\n  async get<T = unknown>(keys: string[]): Promise<Record<string, T>> {\n    try {\n      const db = await this.getDB();\n      const result: Record<string, T> = {};\n\n      await Promise.all(\n        keys.map(\n          (key) =>\n            new Promise<void>((resolve, reject) => {\n              const transaction = db.transaction([this.storeName], \"readonly\");\n              const store = transaction.objectStore(this.storeName);\n              const request = store.get(key);\n\n              request.onerror = () => reject(request.error);\n              request.onsuccess = () => {\n                if (request.result !== undefined) {\n                  result[key] = request.result as T;\n                }\n                resolve();\n              };\n            })\n        )\n      );\n\n      return result;\n    } catch (error) {\n      console.warn(\"[Polly] IndexedDB get failed:\", error);\n      return {};\n    }\n  }\n\n  async set(items: Record<string, unknown>): Promise<void> {\n    try {\n      const db = await this.getDB();\n      await Promise.all(\n        Object.entries(items).map(\n          ([key, value]) =>\n            new Promise<void>((resolve, reject) => {\n              const transaction = db.transaction([this.storeName], \"readwrite\");\n              const store = transaction.objectStore(this.storeName);\n              const request = store.put(value, key);\n\n              request.onerror = () => reject(request.error);\n              request.onsuccess = () => resolve();\n            })\n        )\n      );\n    } catch (error) {\n      console.warn(\"[Polly] IndexedDB set failed:\", error);\n    }\n  }\n\n  async remove(keys: string[]): Promise<void> {\n    try {\n      const db = await this.getDB();\n      await Promise.all(\n        keys.map(\n          (key) =>\n            new Promise<void>((resolve, reject) => {\n              const transaction = db.transaction([this.storeName], \"readwrite\");\n              const store = transaction.objectStore(this.storeName);\n              const request = store.delete(key);\n\n              request.onerror = () => reject(request.error);\n              request.onsuccess = () => resolve();\n            })\n        )\n      );\n    } catch (error) {\n      console.warn(\"[Polly] IndexedDB remove failed:\", error);\n    }\n  }\n}\n\n/**\n * Chrome storage adapter for extensions\n */\nexport class ChromeStorageAdapter implements StorageAdapter {\n  async get<T = unknown>(keys: string[]): Promise<Record<string, T>> {\n    if (typeof chrome === \"undefined\" || !chrome.storage) {\n      return {};\n    }\n\n    try {\n      return (await chrome.storage.local.get(keys)) as Record<string, T>;\n    } catch (error) {\n      console.warn(\"[Polly] Chrome storage get failed:\", error);\n      return {};\n    }\n  }\n\n  async set(items: Record<string, unknown>): Promise<void> {\n    if (typeof chrome === \"undefined\" || !chrome.storage) {\n      return;\n    }\n\n    try {\n      await chrome.storage.local.set(items);\n    } catch (error) {\n      console.warn(\"[Polly] Chrome storage set failed:\", error);\n    }\n  }\n\n  async remove(keys: string[]): Promise<void> {\n    if (typeof chrome === \"undefined\" || !chrome.storage) {\n      return;\n    }\n\n    try {\n      await chrome.storage.local.remove(keys);\n    } catch (error) {\n      console.warn(\"[Polly] Chrome storage remove failed:\", error);\n    }\n  }\n}\n\n/**\n * In-memory adapter (no persistence) for testing or server contexts\n */\nexport class MemoryStorageAdapter implements StorageAdapter {\n  private storage = new Map<string, unknown>();\n\n  async get<T = unknown>(keys: string[]): Promise<Record<string, T>> {\n    const result: Record<string, T> = {};\n    for (const key of keys) {\n      const value = this.storage.get(key);\n      if (value !== undefined) {\n        result[key] = value as T;\n      }\n    }\n    return result;\n  }\n\n  async set(items: Record<string, unknown>): Promise<void> {\n    for (const [key, value] of Object.entries(items)) {\n      this.storage.set(key, value);\n    }\n  }\n\n  async remove(keys: string[]): Promise<void> {\n    for (const key of keys) {\n      this.storage.delete(key);\n    }\n  }\n}\n\n/**\n * Detect execution context and return appropriate storage adapter\n */\nexport function createStorageAdapter(): StorageAdapter {\n  // Chrome extension context\n  if (typeof chrome !== \"undefined\" && chrome.storage && chrome.runtime) {\n    return new ChromeStorageAdapter();\n  }\n\n  // Web app context (has IndexedDB)\n  if (typeof indexedDB !== \"undefined\") {\n    return new IndexedDBAdapter();\n  }\n\n  // Server/test context (no persistent storage available)\n  return new MemoryStorageAdapter();\n}\n",
-    "// Sync adapter interface for cross-context state synchronization\n// Abstracts the transport mechanism (chrome.runtime, BroadcastChannel, etc.)\n//\n// Architecture Decision: BroadcastChannel vs SharedWorker\n// ------------------------------------------------------\n// We currently use BroadcastChannel for web app sync because:\n// - Simpler API with no lifecycle management complexity\n// - Decentralized (aligns with local-first/offline-first architecture)\n// - Better browser support (especially Safari and mobile)\n// - Perfect for message-passing with Lamport clock conflict resolution\n// - No single point of failure\n//\n// Future Consideration: SharedWorker Support\n// ------------------------------------------\n// SharedWorker could be added as an optional adapter for use cases requiring:\n// - Central coordination point for complex multi-tab workflows\n// - Shared WebSocket connections (one connection for all tabs)\n// - Heavy computation done once and shared across tabs\n// - Persistent background work when tabs are closed\n// - Transaction coordination across tabs\n//\n// For most Polly use cases, BroadcastChannel's peer-to-peer model is preferred,\n// but SharedWorker support could be valuable for advanced scenarios.\n\n/**\n * Message format for state synchronization\n */\nexport interface StateSyncMessage<T = unknown> {\n  key: string;\n  value: T;\n  clock: number;\n}\n\n/**\n * Sync adapter interface - abstracts the transport mechanism for state sync\n *\n * Different contexts use different transports:\n * - Chrome extensions: chrome.runtime messaging\n * - Web apps (multi-tab): BroadcastChannel\n * - PWAs: BroadcastChannel + Service Worker messaging\n * - Single-context: NoOp (no sync needed)\n */\nexport interface SyncAdapter {\n  /**\n   * Broadcast a state update to other contexts\n   */\n  broadcast<T>(message: StateSyncMessage<T>): void;\n\n  /**\n   * Register a callback for incoming state updates\n   */\n  onMessage<T>(callback: (message: StateSyncMessage<T>) => void): () => void;\n\n  /**\n   * Optional: Connect to the sync mechanism\n   * Some transports require explicit connection setup\n   */\n  connect?(): Promise<void>;\n\n  /**\n   * Optional: Disconnect from the sync mechanism\n   */\n  disconnect?(): void;\n\n  /**\n   * Optional: Check if connected\n   */\n  isConnected?(): boolean;\n}\n\n/**\n * NoOp sync adapter for single-context scenarios (no sync needed)\n */\nexport class NoOpSyncAdapter implements SyncAdapter {\n  broadcast<T>(_message: StateSyncMessage<T>): void {\n    // No-op: single context, no need to sync\n  }\n\n  onMessage<T>(_callback: (message: StateSyncMessage<T>) => void): () => void {\n    // No-op: no messages will ever arrive\n    return () => {\n      // Empty cleanup function - nothing to clean up for null adapter\n    };\n  }\n}\n\n/**\n * Chrome runtime sync adapter for Chrome extensions\n * Uses chrome.runtime.sendMessage for cross-context messaging\n */\nexport class ChromeRuntimeSyncAdapter implements SyncAdapter {\n  private listeners: Array<(message: StateSyncMessage<unknown>) => void> = [];\n  private port: chrome.runtime.Port | null = null;\n\n  constructor() {\n    // Set up listener for incoming messages\n    if (typeof chrome !== \"undefined\" && chrome.runtime) {\n      chrome.runtime.onMessage.addListener((message, _sender, _sendResponse) => {\n        if (message.type === \"STATE_SYNC\") {\n          this.listeners.forEach((listener) => {\n            listener(message);\n          });\n        }\n      });\n    }\n  }\n\n  broadcast<T>(message: StateSyncMessage<T>): void {\n    if (typeof chrome === \"undefined\" || !chrome.runtime) {\n      console.warn(\"[SyncAdapter] chrome.runtime not available\");\n      return;\n    }\n\n    try {\n      chrome.runtime.sendMessage({\n        type: \"STATE_SYNC\",\n        key: message.key,\n        value: message.value,\n        clock: message.clock,\n      });\n    } catch (error) {\n      console.warn(\"[SyncAdapter] Failed to broadcast state update:\", error);\n    }\n  }\n\n  onMessage<T>(callback: (message: StateSyncMessage<T>) => void): () => void {\n    this.listeners.push(callback as (message: StateSyncMessage<unknown>) => void);\n\n    // Return cleanup function\n    return () => {\n      const index = this.listeners.indexOf(\n        callback as (message: StateSyncMessage<unknown>) => void\n      );\n      if (index > -1) {\n        this.listeners.splice(index, 1);\n      }\n    };\n  }\n\n  connect(): Promise<void> {\n    // Chrome runtime is always connected\n    return Promise.resolve();\n  }\n\n  disconnect(): void {\n    this.listeners = [];\n    if (this.port) {\n      this.port.disconnect();\n      this.port = null;\n    }\n  }\n\n  isConnected(): boolean {\n    return typeof chrome !== \"undefined\" && !!chrome.runtime;\n  }\n}\n\n/**\n * BroadcastChannel sync adapter for web apps (multi-tab)\n * Uses BroadcastChannel API for cross-tab messaging\n */\nexport class BroadcastChannelSyncAdapter implements SyncAdapter {\n  private channel: BroadcastChannel | null = null;\n  private listeners: Array<(message: StateSyncMessage<unknown>) => void> = [];\n\n  constructor(channelName = \"polly-sync\") {\n    if (typeof BroadcastChannel === \"undefined\") {\n      console.warn(\"[SyncAdapter] BroadcastChannel not available\");\n    } else {\n      this.channel = new BroadcastChannel(channelName);\n\n      this.channel.onmessage = (event) => {\n        if (event.data.type === \"STATE_SYNC\") {\n          this.listeners.forEach((listener) => {\n            listener(event.data);\n          });\n        }\n      };\n    }\n  }\n\n  broadcast<T>(message: StateSyncMessage<T>): void {\n    if (!this.channel) {\n      console.warn(\"[SyncAdapter] BroadcastChannel not initialized\");\n      return;\n    }\n\n    try {\n      this.channel.postMessage({\n        type: \"STATE_SYNC\",\n        key: message.key,\n        value: message.value,\n        clock: message.clock,\n      });\n    } catch (error) {\n      console.warn(\"[SyncAdapter] Failed to broadcast state update:\", error);\n    }\n  }\n\n  onMessage<T>(callback: (message: StateSyncMessage<T>) => void): () => void {\n    this.listeners.push(callback as (message: StateSyncMessage<unknown>) => void);\n\n    // Return cleanup function\n    return () => {\n      const index = this.listeners.indexOf(\n        callback as (message: StateSyncMessage<unknown>) => void\n      );\n      if (index > -1) {\n        this.listeners.splice(index, 1);\n      }\n    };\n  }\n\n  connect(): Promise<void> {\n    // BroadcastChannel connects immediately on construction\n    return Promise.resolve();\n  }\n\n  disconnect(): void {\n    this.listeners = [];\n    if (this.channel) {\n      this.channel.close();\n      this.channel = null;\n    }\n  }\n\n  isConnected(): boolean {\n    return this.channel !== null;\n  }\n}\n\n/**\n * Detect available sync mechanisms and create appropriate adapter\n */\nexport function createSyncAdapter(): SyncAdapter {\n  // Chrome extension context - use chrome.runtime\n  if (typeof chrome !== \"undefined\" && chrome.runtime) {\n    return new ChromeRuntimeSyncAdapter();\n  }\n\n  // Web app with multi-tab support - use BroadcastChannel\n  if (typeof BroadcastChannel !== \"undefined\") {\n    return new BroadcastChannelSyncAdapter();\n  }\n\n  // Single context or no sync available - use NoOp\n  return new NoOpSyncAdapter();\n}\n",
-    "// State primitives with optional sync and persistence\n\nimport { effect, type Signal, signal } from \"@preact/signals\";\nimport type { MessageBus } from \"./message-bus\";\nimport { createStorageAdapter, type StorageAdapter } from \"./storage-adapter\";\nimport { createSyncAdapter, type SyncAdapter } from \"./sync-adapter\";\n\n/**\n * Signal extended with .loaded promise for hydration control\n */\ntype SignalWithLoaded<T> = Signal<T> & { loaded: Promise<void> };\n\n/**\n * Signal extended with .loaded and .verify properties for verification tracking\n */\ntype SignalWithVerify<T> = Signal<T> & { loaded: Promise<void>; verify: T };\n\ntype StateEntry<T> = {\n  signal: Signal<T>;\n  clock: number; // Lamport clock for causal ordering\n  loaded: Promise<void>;\n  updating: boolean;\n};\n\ntype StateOptions<T = unknown> = {\n  // Legacy MessageBus support (deprecated, will be removed in v2.0)\n  bus?: MessageBus;\n\n  // New adapter system (recommended)\n  storage?: StorageAdapter; // Custom storage adapter\n  sync?: SyncAdapter; // Custom sync adapter\n\n  // Behavior options\n  debounceMs?: number; // Debounce storage writes\n  validator?: (value: unknown) => value is T; // Runtime type validation\n  verify?: boolean; // Enable verification tracking (creates plain object mirror)\n};\n\nconst stateRegistry = new Map<string, StateEntry<unknown>>();\n\n/**\n * Shared state: synced across all contexts AND persisted to storage\n *\n * Uses Lamport clock for conflict resolution. State is automatically:\n * - Loaded from chrome.storage on initialization\n * - Synced to other contexts via broadcast messages\n * - Persisted to chrome.storage on every change\n *\n * Available in: background, popup, options, devtools, content scripts\n * ⚠️ NOT available in page scripts (use content script state instead)\n *\n * @param key - Unique identifier for this state (e.g., \"app-settings\")\n * @param initialValue - Default value if nothing is in storage\n * @param options - Optional configuration (bus, debounceMs)\n * @returns Reactive signal that stays in sync across all contexts\n *\n * @example\n * ```typescript\n * // Define once, use everywhere\n * const settings = $sharedState(\"settings\", { theme: \"dark\" })\n *\n * // Changes automatically sync\n * settings.value = { theme: \"light\" }\n * ```\n */\nexport function $sharedState<T>(\n  key: string,\n  initialValue: T,\n  options: StateOptions<T> = {}\n): Signal<T> & { loaded: Promise<void>; verify?: T } {\n  const sig = createState(key, initialValue, {\n    ...options,\n    enableSync: true,\n    enablePersist: true,\n  });\n\n  // Expose loaded promise for awaiting hydration\n  const entry = stateRegistry.get(key);\n  if (entry) {\n    (sig as SignalWithLoaded<T>).loaded = entry.loaded;\n  }\n\n  return sig as Signal<T> & { loaded: Promise<void> };\n}\n\n/**\n * Synced state: synced across all contexts but NOT persisted\n *\n * State is broadcast to all contexts in real-time but resets on extension reload.\n *\n * Available in: background, popup, options, devtools, content scripts\n * ⚠️ NOT available in page scripts\n *\n * @param key - Unique identifier for this state\n * @param initialValue - Default value\n * @param options - Optional configuration\n * @returns Reactive signal synced across contexts (but not persisted)\n *\n * @example\n * ```typescript\n * // Temporary shared state\n * const activeTabId = $syncedState(\"active-tab\", null)\n * ```\n */\nexport function $syncedState<T>(\n  key: string,\n  initialValue: T,\n  options: StateOptions<T> = {}\n): Signal<T> {\n  return createState(key, initialValue, {\n    ...options,\n    enableSync: true,\n    enablePersist: false,\n  });\n}\n\n/**\n * Persisted state: persisted to storage but NOT synced across contexts\n *\n * Each context has its own copy of the state, persisted independently.\n *\n * Available in: background, popup, options, devtools, content scripts\n * ⚠️ NOT available in page scripts\n *\n * @param key - Unique identifier (use prefix like \"popup:state\" to avoid collisions)\n * @param initialValue - Default value\n * @param options - Optional configuration\n * @returns Reactive signal persisted to storage (but not synced)\n *\n * @example\n * ```typescript\n * // Each context has its own persisted state\n * const popupState = $persistedState(\"popup:last-panel\", \"home\")\n * const devtoolsState = $persistedState(\"devtools:expanded\", true)\n * ```\n */\nexport function $persistedState<T>(\n  key: string,\n  initialValue: T,\n  options: StateOptions<T> = {}\n): Signal<T> & { loaded: Promise<void> } {\n  const sig = createState(key, initialValue, {\n    ...options,\n    enableSync: false,\n    enablePersist: true,\n  });\n\n  // Expose loaded promise for awaiting hydration\n  const entry = stateRegistry.get(key);\n  if (entry) {\n    (sig as SignalWithLoaded<T>).loaded = entry.loaded;\n  }\n\n  return sig as Signal<T> & { loaded: Promise<void> };\n}\n\n/**\n * Local state: not synced, not persisted (like regular Preact signal)\n *\n * Simple reactive state that lives only in the current context.\n * Resets on reload or context restart.\n *\n * Available in: all contexts (including page scripts)\n *\n * @param initialValue - Default value\n * @returns Reactive signal (local only)\n *\n * @example\n * ```typescript\n * // Local UI state\n * const isLoading = $state(false)\n * const error = $state<string | null>(null)\n * ```\n */\nexport function $state<T>(initialValue: T): Signal<T> {\n  return signal(initialValue);\n}\n\ntype InternalStateOptions<T = unknown> = StateOptions<T> & {\n  enableSync: boolean; // Whether to enable sync (avoid collision with sync?: SyncAdapter)\n  enablePersist: boolean; // Whether to enable persistence\n};\n\n// Deep equality check to prevent redundant updates\nexport function deepEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (a == null || b == null) return false;\n  if (typeof a !== \"object\" || typeof b !== \"object\") return false;\n\n  const keysA = Object.keys(a);\n  const keysB = Object.keys(b);\n\n  if (keysA.length !== keysB.length) return false;\n\n  for (const key of keysA) {\n    if (!keysB.includes(key)) return false;\n    if (!deepEqual((a as Record<string, unknown>)[key], (b as Record<string, unknown>)[key]))\n      return false;\n  }\n\n  return true;\n}\n\n/**\n * Resolve storage and sync adapters with three-tier priority:\n * 1. Explicit adapters from options (highest priority)\n * 2. MessageBus adapters (legacy, deprecated)\n * 3. Auto-detected adapters (default behavior)\n */\nfunction resolveAdapters(options: InternalStateOptions): {\n  storage: StorageAdapter | null;\n  sync: SyncAdapter | null;\n} {\n  // Priority 1: Explicit adapters (partial or full)\n  if (options.storage || options.sync) {\n    return {\n      storage: options.storage || (options.enablePersist ? createStorageAdapter() : null),\n      sync: options.sync || (options.enableSync ? createSyncAdapter() : null),\n    };\n  }\n\n  // Priority 2: MessageBus (legacy support)\n  // Note: MessageBus doesn't provide sync adapter, only Chrome storage\n  if (options.bus) {\n    return {\n      storage: options.bus.adapters.storage,\n      sync: options.enableSync ? createSyncAdapter() : null,\n    };\n  }\n\n  // Priority 3: Auto-detect based on enableSync and enablePersist flags\n  return {\n    storage: options.enablePersist ? createStorageAdapter() : null,\n    sync: options.enableSync ? createSyncAdapter() : null,\n  };\n}\n\nfunction createState<T>(key: string, initialValue: T, options: InternalStateOptions<T>): Signal<T> {\n  // Return existing signal if already registered\n  if (stateRegistry.has(key)) {\n    return stateRegistry.get(key)?.signal as Signal<T>;\n  }\n\n  const sig = signal(initialValue);\n\n  // Create verification mirror if requested\n  if (options.verify) {\n    // Create plain object mirror for verification\n    const mirror = JSON.parse(JSON.stringify(initialValue)) as T;\n    (sig as SignalWithVerify<T>).verify = mirror;\n  }\n\n  const entry: StateEntry<T> = {\n    signal: sig,\n    clock: 0,\n    loaded: Promise.resolve(),\n    updating: false,\n  };\n\n  // Resolve adapters (explicit, MessageBus, or auto-detect)\n  const adapters = resolveAdapters(options);\n\n  // Load from storage if persist is enabled\n  if (options.enablePersist && adapters.storage) {\n    entry.loaded = loadFromStorage(key, sig, entry, adapters.storage, options.validator);\n  }\n\n  // Watch for changes after initial load\n  entry.loaded.then(() => {\n    let debounceTimer: NodeJS.Timeout | null = null;\n    let previousValue = sig.value;\n    let isFirstRun = true;\n\n    // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: Sync effect requires coordination of multiple state change scenarios\n    effect(() => {\n      // Skip if update in progress (from incoming message)\n      if (entry.updating) return;\n\n      const value = sig.value;\n\n      // Skip first run (effect fires immediately on registration)\n      if (isFirstRun) {\n        isFirstRun = false;\n        return;\n      }\n\n      // Skip if value hasn't changed (deep equality check)\n      if (deepEqual(value, previousValue)) {\n        return;\n      }\n\n      previousValue = value;\n\n      // Update verification mirror if enabled\n      if (options.verify) {\n        const verifySignal = sig as SignalWithVerify<T>;\n        if (verifySignal.verify) {\n          Object.assign(verifySignal.verify, JSON.parse(JSON.stringify(value)));\n        }\n      }\n\n      // Increment clock monotonically\n      entry.clock++;\n\n      const doUpdate = () => {\n        // Persist to storage\n        if (options.enablePersist && adapters.storage) {\n          persistToStorage(key, value, entry.clock, adapters.storage);\n        }\n\n        // Broadcast to other contexts\n        if (options.enableSync && adapters.sync) {\n          broadcastUpdate(key, value, entry.clock, adapters.sync);\n        }\n      };\n\n      // Debounce if specified\n      if (options.debounceMs) {\n        if (debounceTimer) clearTimeout(debounceTimer);\n        debounceTimer = setTimeout(doUpdate, options.debounceMs);\n      } else {\n        doUpdate();\n      }\n    });\n  });\n\n  // Listen for updates from other contexts (only if sync enabled)\n  if (options.enableSync && adapters.sync) {\n    // Connect if needed (some adapters require explicit connection)\n    if (adapters.sync.connect) {\n      adapters.sync.connect();\n    }\n\n    // Register sync message listener\n    adapters.sync.onMessage<T>((message) => {\n      if (message.key !== key) return;\n\n      const oldClock = entry.clock;\n\n      // Lamport clock rule: Always update to max(local, received)\n      // This maintains causal ordering even when rejecting updates\n      entry.clock = Math.max(entry.clock, message.clock);\n\n      // Only accept value updates if received clock is strictly greater than old local clock\n      // This ensures we only apply causally newer updates\n      if (message.clock > oldClock) {\n        // Validate incoming value if validator provided\n        if (options.validator && !options.validator(message.value)) {\n          console.warn(\n            `[Polly] State \"${key}\": Received invalid value from sync (clock: ${message.clock})`,\n            message.value\n          );\n          return;\n        }\n\n        // Skip redundant updates (deep equality check)\n        if (deepEqual(entry.signal.value, message.value)) {\n          return;\n        }\n\n        applyUpdate(entry, message.value as T, message.clock);\n      }\n    });\n  }\n\n  stateRegistry.set(key, entry as StateEntry<unknown>);\n  return sig;\n}\n\nasync function loadFromStorage<T>(\n  key: string,\n  sig: Signal<T>,\n  entry: StateEntry<T>,\n  storage: StorageAdapter,\n  validator?: (value: unknown) => value is T\n): Promise<void> {\n  try {\n    const result = await storage.get([key, `${key}:clock`]);\n\n    if (result[key] !== undefined) {\n      const storedValue = result[key];\n\n      // Validate stored value if validator provided\n      if (validator) {\n        if (validator(storedValue)) {\n          sig.value = storedValue;\n        } else {\n          console.warn(\n            `[Polly] State \"${key}\": Stored value failed validation, using initial value`,\n            storedValue\n          );\n        }\n      } else {\n        sig.value = storedValue as T;\n      }\n    }\n\n    if (result[`${key}:clock`] !== undefined) {\n      entry.clock = result[`${key}:clock`] as number;\n    }\n  } catch (error) {\n    console.warn(`[Polly] Failed to load state from storage: ${key}`, error);\n  }\n}\n\nfunction persistToStorage<T>(key: string, value: T, clock: number, storage: StorageAdapter): void {\n  try {\n    storage.set({\n      [key]: value,\n      [`${key}:clock`]: clock,\n    });\n  } catch (error) {\n    console.warn(`[Polly] Failed to persist state to storage: ${key}`, error);\n  }\n}\n\nfunction broadcastUpdate<T>(key: string, value: T, clock: number, sync: SyncAdapter): void {\n  try {\n    sync.broadcast({\n      key,\n      value,\n      clock,\n    });\n  } catch (error) {\n    console.warn(`[Polly] Failed to broadcast state update: ${key}`, error);\n  }\n}\n\nfunction applyUpdate<T>(entry: StateEntry<T>, value: T, clock: number): void {\n  entry.updating = true;\n  entry.signal.value = value;\n  entry.clock = clock;\n  entry.updating = false;\n}\n\n/**\n * Get state by key (useful for retrieving state without re-creating)\n */\nexport function getStateByKey<T>(key: string): Signal<T> | undefined {\n  const entry = stateRegistry.get(key);\n  return entry?.signal as Signal<T> | undefined;\n}\n\n/**\n * Clear state registry (useful for testing)\n */\nexport function clearStateRegistry(): void {\n  stateRegistry.clear();\n}\n",
+    "// Storage adapters for different execution contexts\n// Automatically chooses the right storage mechanism based on environment\n\n/**\n * Universal storage adapter interface\n */\nexport interface StorageAdapter {\n  get<T = unknown>(keys: string[]): Promise<Record<string, T>>;\n  set(items: Record<string, unknown>): Promise<void>;\n  remove(keys: string[]): Promise<void>;\n}\n\n/**\n * IndexedDB adapter for web apps\n */\nexport class IndexedDBAdapter implements StorageAdapter {\n  private dbName: string;\n  private storeName = \"state\";\n  private dbPromise: Promise<IDBDatabase> | null = null;\n\n  constructor(dbName = \"polly-state\") {\n    this.dbName = dbName;\n  }\n\n  private getDB(): Promise<IDBDatabase> {\n    if (this.dbPromise) return this.dbPromise;\n\n    this.dbPromise = new Promise((resolve, reject) => {\n      const request = indexedDB.open(this.dbName, 1);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve(request.result);\n\n      request.onupgradeneeded = (event) => {\n        const db = (event.target as unknown as IDBOpenDBRequest).result;\n        if (!db.objectStoreNames.contains(this.storeName)) {\n          db.createObjectStore(this.storeName);\n        }\n      };\n    });\n\n    return this.dbPromise;\n  }\n\n  async get<T = unknown>(keys: string[]): Promise<Record<string, T>> {\n    try {\n      const db = await this.getDB();\n      const result: Record<string, T> = {};\n\n      await Promise.all(\n        keys.map(\n          (key) =>\n            new Promise<void>((resolve, reject) => {\n              const transaction = db.transaction([this.storeName], \"readonly\");\n              const store = transaction.objectStore(this.storeName);\n              const request = store.get(key);\n\n              request.onerror = () => reject(request.error);\n              request.onsuccess = () => {\n                if (request.result !== undefined) {\n                  result[key] = request.result as unknown as T;\n                }\n                resolve();\n              };\n            })\n        )\n      );\n\n      return result;\n    } catch (error) {\n      console.warn(\"[Polly] IndexedDB get failed:\", error);\n      return {};\n    }\n  }\n\n  async set(items: Record<string, unknown>): Promise<void> {\n    try {\n      const db = await this.getDB();\n      await Promise.all(\n        Object.entries(items).map(\n          ([key, value]) =>\n            new Promise<void>((resolve, reject) => {\n              const transaction = db.transaction([this.storeName], \"readwrite\");\n              const store = transaction.objectStore(this.storeName);\n              const request = store.put(value, key);\n\n              request.onerror = () => reject(request.error);\n              request.onsuccess = () => resolve();\n            })\n        )\n      );\n    } catch (error) {\n      console.warn(\"[Polly] IndexedDB set failed:\", error);\n    }\n  }\n\n  async remove(keys: string[]): Promise<void> {\n    try {\n      const db = await this.getDB();\n      await Promise.all(\n        keys.map(\n          (key) =>\n            new Promise<void>((resolve, reject) => {\n              const transaction = db.transaction([this.storeName], \"readwrite\");\n              const store = transaction.objectStore(this.storeName);\n              const request = store.delete(key);\n\n              request.onerror = () => reject(request.error);\n              request.onsuccess = () => resolve();\n            })\n        )\n      );\n    } catch (error) {\n      console.warn(\"[Polly] IndexedDB remove failed:\", error);\n    }\n  }\n}\n\n/**\n * Chrome storage adapter for extensions\n */\nexport class ChromeStorageAdapter implements StorageAdapter {\n  async get<T = unknown>(keys: string[]): Promise<Record<string, T>> {\n    if (typeof chrome === \"undefined\" || !chrome.storage) {\n      return {};\n    }\n\n    try {\n      return (await chrome.storage.local.get(keys)) as Record<string, T>;\n    } catch (error) {\n      console.warn(\"[Polly] Chrome storage get failed:\", error);\n      return {};\n    }\n  }\n\n  async set(items: Record<string, unknown>): Promise<void> {\n    if (typeof chrome === \"undefined\" || !chrome.storage) {\n      return;\n    }\n\n    try {\n      await chrome.storage.local.set(items);\n    } catch (error) {\n      console.warn(\"[Polly] Chrome storage set failed:\", error);\n    }\n  }\n\n  async remove(keys: string[]): Promise<void> {\n    if (typeof chrome === \"undefined\" || !chrome.storage) {\n      return;\n    }\n\n    try {\n      await chrome.storage.local.remove(keys);\n    } catch (error) {\n      console.warn(\"[Polly] Chrome storage remove failed:\", error);\n    }\n  }\n}\n\n/**\n * In-memory adapter (no persistence) for testing or server contexts\n */\nexport class MemoryStorageAdapter implements StorageAdapter {\n  private storage = new Map<string, unknown>();\n\n  async get<T = unknown>(keys: string[]): Promise<Record<string, T>> {\n    const result: Record<string, T> = {};\n    for (const key of keys) {\n      const value = this.storage.get(key);\n      if (value !== undefined) {\n        result[key] = value as unknown as T;\n      }\n    }\n    return result;\n  }\n\n  async set(items: Record<string, unknown>): Promise<void> {\n    for (const [key, value] of Object.entries(items)) {\n      this.storage.set(key, value);\n    }\n  }\n\n  async remove(keys: string[]): Promise<void> {\n    for (const key of keys) {\n      this.storage.delete(key);\n    }\n  }\n}\n\n/**\n * Detect execution context and return appropriate storage adapter\n */\nexport function createStorageAdapter(): StorageAdapter {\n  // Chrome extension context\n  if (typeof chrome !== \"undefined\" && chrome.storage && chrome.runtime) {\n    return new ChromeStorageAdapter();\n  }\n\n  // Web app context (has IndexedDB)\n  if (typeof indexedDB !== \"undefined\") {\n    return new IndexedDBAdapter();\n  }\n\n  // Server/test context (no persistent storage available)\n  return new MemoryStorageAdapter();\n}\n",
+    "// Sync adapter interface for cross-context state synchronization\n// Abstracts the transport mechanism (chrome.runtime, BroadcastChannel, etc.)\n//\n// Architecture Decision: BroadcastChannel vs SharedWorker\n// ------------------------------------------------------\n// We currently use BroadcastChannel for web app sync because:\n// - Simpler API with no lifecycle management complexity\n// - Decentralized (aligns with local-first/offline-first architecture)\n// - Better browser support (especially Safari and mobile)\n// - Perfect for message-passing with Lamport clock conflict resolution\n// - No single point of failure\n//\n// Future Consideration: SharedWorker Support\n// ------------------------------------------\n// SharedWorker could be added as an optional adapter for use cases requiring:\n// - Central coordination point for complex multi-tab workflows\n// - Shared WebSocket connections (one connection for all tabs)\n// - Heavy computation done once and shared across tabs\n// - Persistent background work when tabs are closed\n// - Transaction coordination across tabs\n//\n// For most Polly use cases, BroadcastChannel's peer-to-peer model is preferred,\n// but SharedWorker support could be valuable for advanced scenarios.\n\n/**\n * Message format for state synchronization\n */\nexport interface StateSyncMessage<T = unknown> {\n  key: string;\n  value: T;\n  clock: number;\n}\n\n/**\n * Sync adapter interface - abstracts the transport mechanism for state sync\n *\n * Different contexts use different transports:\n * - Chrome extensions: chrome.runtime messaging\n * - Web apps (multi-tab): BroadcastChannel\n * - PWAs: BroadcastChannel + Service Worker messaging\n * - Single-context: NoOp (no sync needed)\n */\nexport interface SyncAdapter {\n  /**\n   * Broadcast a state update to other contexts\n   */\n  broadcast<T>(message: StateSyncMessage<T>): void;\n\n  /**\n   * Register a callback for incoming state updates\n   */\n  onMessage<T>(callback: (message: StateSyncMessage<T>) => void): () => void;\n\n  /**\n   * Optional: Connect to the sync mechanism\n   * Some transports require explicit connection setup\n   */\n  connect?(): Promise<void>;\n\n  /**\n   * Optional: Disconnect from the sync mechanism\n   */\n  disconnect?(): void;\n\n  /**\n   * Optional: Check if connected\n   */\n  isConnected?(): boolean;\n}\n\n/**\n * NoOp sync adapter for single-context scenarios (no sync needed)\n */\nexport class NoOpSyncAdapter implements SyncAdapter {\n  broadcast<T>(_message: StateSyncMessage<T>): void {\n    // No-op: single context, no need to sync\n  }\n\n  onMessage<T>(_callback: (message: StateSyncMessage<T>) => void): () => void {\n    // No-op: no messages will ever arrive\n    return () => {\n      // Empty cleanup function - nothing to clean up for null adapter\n    };\n  }\n}\n\n/**\n * Chrome runtime sync adapter for Chrome extensions\n * Uses chrome.runtime.sendMessage for cross-context messaging\n */\nexport class ChromeRuntimeSyncAdapter implements SyncAdapter {\n  private listeners: Array<(message: StateSyncMessage<unknown>) => void> = [];\n  private port: chrome.runtime.Port | null = null;\n\n  constructor() {\n    // Set up listener for incoming messages\n    if (typeof chrome !== \"undefined\" && chrome.runtime) {\n      chrome.runtime.onMessage.addListener((message, _sender, _sendResponse) => {\n        if (message.type === \"STATE_SYNC\") {\n          this.listeners.forEach((listener) => {\n            listener(message);\n          });\n        }\n      });\n    }\n  }\n\n  broadcast<T>(message: StateSyncMessage<T>): void {\n    if (typeof chrome === \"undefined\" || !chrome.runtime) {\n      console.warn(\"[SyncAdapter] chrome.runtime not available\");\n      return;\n    }\n\n    try {\n      chrome.runtime.sendMessage({\n        type: \"STATE_SYNC\",\n        key: message.key,\n        value: message.value,\n        clock: message.clock,\n      });\n    } catch (error) {\n      console.warn(\"[SyncAdapter] Failed to broadcast state update:\", error);\n    }\n  }\n\n  onMessage<T>(callback: (message: StateSyncMessage<T>) => void): () => void {\n    this.listeners.push(callback as unknown as (message: StateSyncMessage<unknown>) => void);\n\n    // Return cleanup function\n    return () => {\n      const index = this.listeners.indexOf(\n        callback as unknown as (message: StateSyncMessage<unknown>) => void\n      );\n      if (index > -1) {\n        this.listeners.splice(index, 1);\n      }\n    };\n  }\n\n  connect(): Promise<void> {\n    // Chrome runtime is always connected\n    return Promise.resolve();\n  }\n\n  disconnect(): void {\n    this.listeners = [];\n    if (this.port) {\n      this.port.disconnect();\n      this.port = null;\n    }\n  }\n\n  isConnected(): boolean {\n    return typeof chrome !== \"undefined\" && !!chrome.runtime;\n  }\n}\n\n/**\n * BroadcastChannel sync adapter for web apps (multi-tab)\n * Uses BroadcastChannel API for cross-tab messaging\n */\nexport class BroadcastChannelSyncAdapter implements SyncAdapter {\n  private channel: BroadcastChannel | null = null;\n  private listeners: Array<(message: StateSyncMessage<unknown>) => void> = [];\n\n  constructor(channelName = \"polly-sync\") {\n    if (typeof BroadcastChannel === \"undefined\") {\n      console.warn(\"[SyncAdapter] BroadcastChannel not available\");\n    } else {\n      this.channel = new BroadcastChannel(channelName);\n\n      this.channel.onmessage = (event) => {\n        if (event.data.type === \"STATE_SYNC\") {\n          this.listeners.forEach((listener) => {\n            listener(event.data);\n          });\n        }\n      };\n    }\n  }\n\n  broadcast<T>(message: StateSyncMessage<T>): void {\n    if (!this.channel) {\n      console.warn(\"[SyncAdapter] BroadcastChannel not initialized\");\n      return;\n    }\n\n    try {\n      this.channel.postMessage({\n        type: \"STATE_SYNC\",\n        key: message.key,\n        value: message.value,\n        clock: message.clock,\n      });\n    } catch (error) {\n      console.warn(\"[SyncAdapter] Failed to broadcast state update:\", error);\n    }\n  }\n\n  onMessage<T>(callback: (message: StateSyncMessage<T>) => void): () => void {\n    this.listeners.push(callback as unknown as (message: StateSyncMessage<unknown>) => void);\n\n    // Return cleanup function\n    return () => {\n      const index = this.listeners.indexOf(\n        callback as unknown as (message: StateSyncMessage<unknown>) => void\n      );\n      if (index > -1) {\n        this.listeners.splice(index, 1);\n      }\n    };\n  }\n\n  connect(): Promise<void> {\n    // BroadcastChannel connects immediately on construction\n    return Promise.resolve();\n  }\n\n  disconnect(): void {\n    this.listeners = [];\n    if (this.channel) {\n      this.channel.close();\n      this.channel = null;\n    }\n  }\n\n  isConnected(): boolean {\n    return this.channel !== null;\n  }\n}\n\n/**\n * Detect available sync mechanisms and create appropriate adapter\n */\nexport function createSyncAdapter(): SyncAdapter {\n  // Chrome extension context - use chrome.runtime\n  if (typeof chrome !== \"undefined\" && chrome.runtime) {\n    return new ChromeRuntimeSyncAdapter();\n  }\n\n  // Web app with multi-tab support - use BroadcastChannel\n  if (typeof BroadcastChannel !== \"undefined\") {\n    return new BroadcastChannelSyncAdapter();\n  }\n\n  // Single context or no sync available - use NoOp\n  return new NoOpSyncAdapter();\n}\n",
+    "// State primitives with optional sync and persistence\n\nimport { effect, type Signal, signal } from \"@preact/signals\";\nimport type { MessageBus } from \"./message-bus\";\nimport { createStorageAdapter, type StorageAdapter } from \"./storage-adapter\";\nimport { createSyncAdapter, type SyncAdapter } from \"./sync-adapter\";\n\n/**\n * Signal extended with .loaded promise for hydration control\n */\ntype SignalWithLoaded<T> = Signal<T> & { loaded: Promise<void> };\n\n/**\n * Signal extended with .loaded and .verify properties for verification tracking\n */\ntype SignalWithVerify<T> = Signal<T> & { loaded: Promise<void>; verify: T };\n\ntype StateEntry<T> = {\n  signal: Signal<T>;\n  clock: number; // Lamport clock for causal ordering\n  loaded: Promise<void>;\n  updating: boolean;\n};\n\ntype StateOptions<T = unknown> = {\n  // Legacy MessageBus support (deprecated, will be removed in v2.0)\n  bus?: MessageBus;\n\n  // New adapter system (recommended)\n  storage?: StorageAdapter; // Custom storage adapter\n  sync?: SyncAdapter; // Custom sync adapter\n\n  // Behavior options\n  debounceMs?: number; // Debounce storage writes\n  validator?: (value: unknown) => value is T; // Runtime type validation\n  verify?: boolean; // Enable verification tracking (creates plain object mirror)\n};\n\nconst stateRegistry = new Map<string, StateEntry<unknown>>();\n\n/**\n * Shared state: synced across all contexts AND persisted to storage\n *\n * Uses Lamport clock for conflict resolution. State is automatically:\n * - Loaded from chrome.storage on initialization\n * - Synced to other contexts via broadcast messages\n * - Persisted to chrome.storage on every change\n *\n * Available in: background, popup, options, devtools, content scripts\n * ⚠️ NOT available in page scripts (use content script state instead)\n *\n * @param key - Unique identifier for this state (e.g., \"app-settings\")\n * @param initialValue - Default value if nothing is in storage\n * @param options - Optional configuration (bus, debounceMs)\n * @returns Reactive signal that stays in sync across all contexts\n *\n * @example\n * ```typescript\n * // Define once, use everywhere\n * const settings = $sharedState(\"settings\", { theme: \"dark\" })\n *\n * // Changes automatically sync\n * settings.value = { theme: \"light\" }\n * ```\n */\nexport function $sharedState<T>(\n  key: string,\n  initialValue: T,\n  options: StateOptions<T> = {}\n): Signal<T> & { loaded: Promise<void>; verify?: T } {\n  const sig = createState(key, initialValue, {\n    ...options,\n    enableSync: true,\n    enablePersist: true,\n  });\n\n  // Expose loaded promise for awaiting hydration\n  const entry = stateRegistry.get(key);\n  if (entry) {\n    (sig as unknown as SignalWithLoaded<T>).loaded = entry.loaded;\n  }\n\n  return sig as unknown as Signal<T> & { loaded: Promise<void> };\n}\n\n/**\n * Synced state: synced across all contexts but NOT persisted\n *\n * State is broadcast to all contexts in real-time but resets on extension reload.\n *\n * Available in: background, popup, options, devtools, content scripts\n * ⚠️ NOT available in page scripts\n *\n * @param key - Unique identifier for this state\n * @param initialValue - Default value\n * @param options - Optional configuration\n * @returns Reactive signal synced across contexts (but not persisted)\n *\n * @example\n * ```typescript\n * // Temporary shared state\n * const activeTabId = $syncedState(\"active-tab\", null)\n * ```\n */\nexport function $syncedState<T>(\n  key: string,\n  initialValue: T,\n  options: StateOptions<T> = {}\n): Signal<T> {\n  return createState(key, initialValue, {\n    ...options,\n    enableSync: true,\n    enablePersist: false,\n  });\n}\n\n/**\n * Persisted state: persisted to storage but NOT synced across contexts\n *\n * Each context has its own copy of the state, persisted independently.\n *\n * Available in: background, popup, options, devtools, content scripts\n * ⚠️ NOT available in page scripts\n *\n * @param key - Unique identifier (use prefix like \"popup:state\" to avoid collisions)\n * @param initialValue - Default value\n * @param options - Optional configuration\n * @returns Reactive signal persisted to storage (but not synced)\n *\n * @example\n * ```typescript\n * // Each context has its own persisted state\n * const popupState = $persistedState(\"popup:last-panel\", \"home\")\n * const devtoolsState = $persistedState(\"devtools:expanded\", true)\n * ```\n */\nexport function $persistedState<T>(\n  key: string,\n  initialValue: T,\n  options: StateOptions<T> = {}\n): Signal<T> & { loaded: Promise<void> } {\n  const sig = createState(key, initialValue, {\n    ...options,\n    enableSync: false,\n    enablePersist: true,\n  });\n\n  // Expose loaded promise for awaiting hydration\n  const entry = stateRegistry.get(key);\n  if (entry) {\n    (sig as unknown as SignalWithLoaded<T>).loaded = entry.loaded;\n  }\n\n  return sig as unknown as Signal<T> & { loaded: Promise<void> };\n}\n\n/**\n * Local state: not synced, not persisted (like regular Preact signal)\n *\n * Simple reactive state that lives only in the current context.\n * Resets on reload or context restart.\n *\n * Available in: all contexts (including page scripts)\n *\n * @param initialValue - Default value\n * @returns Reactive signal (local only)\n *\n * @example\n * ```typescript\n * // Local UI state\n * const isLoading = $state(false)\n * const error = $state<string | null>(null)\n * ```\n */\nexport function $state<T>(initialValue: T): Signal<T> {\n  return signal(initialValue);\n}\n\ntype InternalStateOptions<T = unknown> = StateOptions<T> & {\n  enableSync: boolean; // Whether to enable sync (avoid collision with sync?: SyncAdapter)\n  enablePersist: boolean; // Whether to enable persistence\n};\n\n// Deep equality check to prevent redundant updates\nexport function deepEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (a == null || b == null) return false;\n  if (typeof a !== \"object\" || typeof b !== \"object\") return false;\n\n  const keysA = Object.keys(a);\n  const keysB = Object.keys(b);\n\n  if (keysA.length !== keysB.length) return false;\n\n  for (const key of keysA) {\n    if (!keysB.includes(key)) return false;\n    if (\n      !deepEqual(\n        (a as unknown as Record<string, unknown>)[key],\n        (b as unknown as Record<string, unknown>)[key]\n      )\n    )\n      return false;\n  }\n\n  return true;\n}\n\n/**\n * Resolve storage and sync adapters with three-tier priority:\n * 1. Explicit adapters from options (highest priority)\n * 2. MessageBus adapters (legacy, deprecated)\n * 3. Auto-detected adapters (default behavior)\n */\nfunction resolveAdapters(options: InternalStateOptions): {\n  storage: StorageAdapter | null;\n  sync: SyncAdapter | null;\n} {\n  // Priority 1: Explicit adapters (partial or full)\n  if (options.storage || options.sync) {\n    return {\n      storage: options.storage || (options.enablePersist ? createStorageAdapter() : null),\n      sync: options.sync || (options.enableSync ? createSyncAdapter() : null),\n    };\n  }\n\n  // Priority 2: MessageBus (legacy support)\n  // Note: MessageBus doesn't provide sync adapter, only Chrome storage\n  if (options.bus) {\n    return {\n      storage: options.bus.adapters.storage,\n      sync: options.enableSync ? createSyncAdapter() : null,\n    };\n  }\n\n  // Priority 3: Auto-detect based on enableSync and enablePersist flags\n  return {\n    storage: options.enablePersist ? createStorageAdapter() : null,\n    sync: options.enableSync ? createSyncAdapter() : null,\n  };\n}\n\nfunction createState<T>(key: string, initialValue: T, options: InternalStateOptions<T>): Signal<T> {\n  // Return existing signal if already registered\n  if (stateRegistry.has(key)) {\n    return stateRegistry.get(key)?.signal as unknown as Signal<T>;\n  }\n\n  const sig = signal(initialValue);\n\n  // Create verification mirror if requested\n  if (options.verify) {\n    // Create plain object mirror for verification\n    const mirror = JSON.parse(JSON.stringify(initialValue)) as T;\n    (sig as unknown as SignalWithVerify<T>).verify = mirror;\n  }\n\n  const entry: StateEntry<T> = {\n    signal: sig,\n    clock: 0,\n    loaded: Promise.resolve(),\n    updating: false,\n  };\n\n  // Resolve adapters (explicit, MessageBus, or auto-detect)\n  const adapters = resolveAdapters(options);\n\n  // Load from storage if persist is enabled\n  if (options.enablePersist && adapters.storage) {\n    entry.loaded = loadFromStorage(key, sig, entry, adapters.storage, options.validator);\n  }\n\n  // Watch for changes after initial load\n  entry.loaded.then(() => {\n    let debounceTimer: NodeJS.Timeout | null = null;\n    let previousValue = sig.value;\n    let isFirstRun = true;\n\n    // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: Sync effect requires coordination of multiple state change scenarios\n    effect(() => {\n      // Skip if update in progress (from incoming message)\n      if (entry.updating) return;\n\n      const value = sig.value;\n\n      // Skip first run (effect fires immediately on registration)\n      if (isFirstRun) {\n        isFirstRun = false;\n        return;\n      }\n\n      // Skip if value hasn't changed (deep equality check)\n      if (deepEqual(value, previousValue)) {\n        return;\n      }\n\n      previousValue = value;\n\n      // Update verification mirror if enabled\n      if (options.verify) {\n        const verifySignal = sig as unknown as SignalWithVerify<T>;\n        if (verifySignal.verify) {\n          Object.assign(verifySignal.verify, JSON.parse(JSON.stringify(value)));\n        }\n      }\n\n      // Increment clock monotonically\n      entry.clock++;\n\n      const doUpdate = () => {\n        // Persist to storage\n        if (options.enablePersist && adapters.storage) {\n          persistToStorage(key, value, entry.clock, adapters.storage);\n        }\n\n        // Broadcast to other contexts\n        if (options.enableSync && adapters.sync) {\n          broadcastUpdate(key, value, entry.clock, adapters.sync);\n        }\n      };\n\n      // Debounce if specified\n      if (options.debounceMs) {\n        if (debounceTimer) clearTimeout(debounceTimer);\n        debounceTimer = setTimeout(doUpdate, options.debounceMs);\n      } else {\n        doUpdate();\n      }\n    });\n  });\n\n  // Listen for updates from other contexts (only if sync enabled)\n  if (options.enableSync && adapters.sync) {\n    // Connect if needed (some adapters require explicit connection)\n    if (adapters.sync.connect) {\n      adapters.sync.connect();\n    }\n\n    // Register sync message listener\n    adapters.sync.onMessage<T>((message) => {\n      if (message.key !== key) return;\n\n      const oldClock = entry.clock;\n\n      // Lamport clock rule: Always update to max(local, received)\n      // This maintains causal ordering even when rejecting updates\n      entry.clock = Math.max(entry.clock, message.clock);\n\n      // Only accept value updates if received clock is strictly greater than old local clock\n      // This ensures we only apply causally newer updates\n      if (message.clock > oldClock) {\n        // Validate incoming value if validator provided\n        if (options.validator && !options.validator(message.value)) {\n          console.warn(\n            `[Polly] State \"${key}\": Received invalid value from sync (clock: ${message.clock})`,\n            message.value\n          );\n          return;\n        }\n\n        // Skip redundant updates (deep equality check)\n        if (deepEqual(entry.signal.value, message.value)) {\n          return;\n        }\n\n        applyUpdate(entry, message.value as unknown as T, message.clock);\n      }\n    });\n  }\n\n  stateRegistry.set(key, entry as unknown as StateEntry<unknown>);\n  return sig;\n}\n\nasync function loadFromStorage<T>(\n  key: string,\n  sig: Signal<T>,\n  entry: StateEntry<T>,\n  storage: StorageAdapter,\n  validator?: (value: unknown) => value is T\n): Promise<void> {\n  try {\n    const result = await storage.get([key, `${key}:clock`]);\n\n    if (result[key] !== undefined) {\n      const storedValue = result[key];\n\n      // Validate stored value if validator provided\n      if (validator) {\n        if (validator(storedValue)) {\n          sig.value = storedValue;\n        } else {\n          console.warn(\n            `[Polly] State \"${key}\": Stored value failed validation, using initial value`,\n            storedValue\n          );\n        }\n      } else {\n        sig.value = storedValue as unknown as T;\n      }\n    }\n\n    if (result[`${key}:clock`] !== undefined) {\n      entry.clock = result[`${key}:clock`] as unknown as number;\n    }\n  } catch (error) {\n    console.warn(`[Polly] Failed to load state from storage: ${key}`, error);\n  }\n}\n\nfunction persistToStorage<T>(key: string, value: T, clock: number, storage: StorageAdapter): void {\n  try {\n    storage.set({\n      [key]: value,\n      [`${key}:clock`]: clock,\n    });\n  } catch (error) {\n    console.warn(`[Polly] Failed to persist state to storage: ${key}`, error);\n  }\n}\n\nfunction broadcastUpdate<T>(key: string, value: T, clock: number, sync: SyncAdapter): void {\n  try {\n    sync.broadcast({\n      key,\n      value,\n      clock,\n    });\n  } catch (error) {\n    console.warn(`[Polly] Failed to broadcast state update: ${key}`, error);\n  }\n}\n\nfunction applyUpdate<T>(entry: StateEntry<T>, value: T, clock: number): void {\n  entry.updating = true;\n  entry.signal.value = value;\n  entry.clock = clock;\n  entry.updating = false;\n}\n\n/**\n * Get state by key (useful for retrieving state without re-creating)\n */\nexport function getStateByKey<T>(key: string): Signal<T> | undefined {\n  const entry = stateRegistry.get(key);\n  return entry?.signal as unknown as Signal<T> | undefined;\n}\n\n/**\n * Clear state registry (useful for testing)\n */\nexport function clearStateRegistry(): void {\n  stateRegistry.clear();\n}\n",
     "/**\n * $resource — Async signal primitive that separates sync dependency tracking from async work.\n *\n * Reactive signal dependency tracking breaks at `await` boundaries. When a `computed()` or\n * `effect()` hits an `await`, JavaScript suspends the function and the tracking context is\n * lost. Signal reads after the `await` are silently dropped from the dependency graph.\n *\n * `$resource` solves this by splitting the problem:\n * - `source` is a synchronous function whose signal reads are fully tracked\n * - `fetcher` is an async function that receives source output — no signal access needed\n *\n * For verification, `$resource` emits three synthetic state machine transitions:\n * - `{name}_FetchStart`: source deps available, triggers loading\n * - `{name}_FetchSuccess`: fetch resolved, data updated\n * - `{name}_FetchError`: fetch rejected, error captured\n *\n * @example\n * ```ts\n * const todos = $resource(\"todos\", {\n *   source: () => ({ userId: authState.value.userId }),\n *   fetcher: async ({ userId }) => {\n *     const res = await fetch(`/api/todos?userId=${userId}`);\n *     return await res.json();\n *   },\n *   initialValue: [],\n * });\n *\n * todos.data    // Signal<Todo[]>\n * todos.status  // Signal<\"idle\" | \"loading\" | \"success\" | \"error\">\n * todos.error   // Signal<Error | undefined>\n * todos.refetch()\n * ```\n */\n\nimport { effect, type Signal, signal } from \"@preact/signals\";\nimport { deepEqual } from \"./state\";\n\nexport type ResourceStatus = \"idle\" | \"loading\" | \"success\" | \"error\";\n\nexport type ResourceOptions<TSource, TData> = {\n  /** Synchronous function that reads signals. Fully tracked by the reactivity system. */\n  source: () => TSource;\n  /** Async function that receives source output. Must not read any signals. */\n  fetcher: (source: TSource) => Promise<TData>;\n  /** Initial data value before first fetch completes. */\n  initialValue: TData;\n};\n\nexport type Resource<TData> = {\n  /** The fetched data (or initialValue before first successful fetch). */\n  data: Signal<TData>;\n  /** Current lifecycle status: idle → loading → success | error. */\n  status: Signal<ResourceStatus>;\n  /** The error from the most recent failed fetch, or undefined. */\n  error: Signal<Error | undefined>;\n  /** Re-run the fetcher with the current source values. */\n  refetch: () => void;\n};\n\nexport function $resource<TSource, TData>(\n  _name: string,\n  options: ResourceOptions<TSource, TData>\n): Resource<TData> {\n  const { source, fetcher, initialValue } = options;\n\n  const data = signal<TData>(initialValue);\n  const status = signal<ResourceStatus>(\"idle\");\n  const error = signal<Error | undefined>(undefined);\n\n  let generation = 0;\n  let lastSource: TSource | undefined;\n\n  function runFetch(sourceValue: TSource) {\n    const thisGeneration = ++generation;\n    status.value = \"loading\";\n    error.value = undefined;\n\n    fetcher(sourceValue).then(\n      (result) => {\n        if (thisGeneration !== generation) return; // stale\n        data.value = result;\n        status.value = \"success\";\n        error.value = undefined;\n      },\n      (err) => {\n        if (thisGeneration !== generation) return; // stale\n        status.value = \"error\";\n        error.value = err instanceof Error ? err : new Error(String(err));\n      }\n    );\n  }\n\n  // Track source synchronously — when source output changes, call fetcher\n  effect(() => {\n    const sourceValue = source();\n\n    if (lastSource !== undefined && deepEqual(lastSource, sourceValue)) {\n      return;\n    }\n    lastSource = sourceValue;\n    runFetch(sourceValue);\n  });\n\n  function refetch() {\n    if (lastSource !== undefined) {\n      runFetch(lastSource);\n    }\n  }\n\n  return { data, status, error, refetch };\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeO,MAAM,iBAA2C;AAAA,EAC9C;AAAA,EACA,YAAY;AAAA,EACZ,YAAyC;AAAA,EAEjD,WAAW,CAAC,SAAS,eAAe;AAAA,IAClC,KAAK,SAAS;AAAA;AAAA,EAGR,KAAK,GAAyB;AAAA,IACpC,IAAI,KAAK;AAAA,MAAW,OAAO,KAAK;AAAA,IAEhC,KAAK,YAAY,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MAChD,MAAM,UAAU,UAAU,KAAK,KAAK,QAAQ,CAAC;AAAA,MAE7C,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAAA,MAEhD,QAAQ,kBAAkB,CAAC,UAAU;AAAA,QACnC,MAAM,KAAM,MAAM,OAA4B;AAAA,QAC9C,IAAI,CAAC,GAAG,iBAAiB,SAAS,KAAK,SAAS,GAAG;AAAA,UACjD,GAAG,kBAAkB,KAAK,SAAS;AAAA,QACrC;AAAA;AAAA,KAEH;AAAA,IAED,OAAO,KAAK;AAAA;AAAA,OAGR,IAAgB,CAAC,MAA4C;AAAA,IACjE,IAAI;AAAA,MACF,MAAM,KAAK,MAAM,KAAK,MAAM;AAAA,MAC5B,MAAM,SAA4B,CAAC;AAAA,MAEnC,MAAM,QAAQ,IACZ,KAAK,IACH,CAAC,QACC,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,QACrC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,SAAS,GAAG,UAAU;AAAA,QAC/D,MAAM,QAAQ,YAAY,YAAY,KAAK,SAAS;AAAA,QACpD,MAAM,UAAU,MAAM,IAAI,GAAG;AAAA,QAE7B,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,QAC5C,QAAQ,YAAY,MAAM;AAAA,UACxB,IAAI,QAAQ,WAAW,WAAW;AAAA,YAChC,OAAO,OAAO,QAAQ;AAAA,UACxB;AAAA,UACA,QAAQ;AAAA;AAAA,OAEX,CACL,CACF;AAAA,MAEA,OAAO;AAAA,MACP,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,iCAAiC,KAAK;AAAA,MACnD,OAAO,CAAC;AAAA;AAAA;AAAA,OAIN,IAAG,CAAC,OAA+C;AAAA,IACvD,IAAI;AAAA,MACF,MAAM,KAAK,MAAM,KAAK,MAAM;AAAA,MAC5B,MAAM,QAAQ,IACZ,OAAO,QAAQ,KAAK,EAAE,IACpB,EAAE,KAAK,WACL,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,QACrC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,SAAS,GAAG,WAAW;AAAA,QAChE,MAAM,QAAQ,YAAY,YAAY,KAAK,SAAS;AAAA,QACpD,MAAM,UAAU,MAAM,IAAI,OAAO,GAAG;AAAA,QAEpC,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,QAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,OACnC,CACL,CACF;AAAA,MACA,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,iCAAiC,KAAK;AAAA;AAAA;AAAA,OAIjD,OAAM,CAAC,MAA+B;AAAA,IAC1C,IAAI;AAAA,MACF,MAAM,KAAK,MAAM,KAAK,MAAM;AAAA,MAC5B,MAAM,QAAQ,IACZ,KAAK,IACH,CAAC,QACC,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,QACrC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,SAAS,GAAG,WAAW;AAAA,QAChE,MAAM,QAAQ,YAAY,YAAY,KAAK,SAAS;AAAA,QACpD,MAAM,UAAU,MAAM,OAAO,GAAG;AAAA,QAEhC,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,QAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,OACnC,CACL,CACF;AAAA,MACA,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,oCAAoC,KAAK;AAAA;AAAA;AAG5D;AAAA;AAKO,MAAM,qBAA+C;AAAA,OACpD,IAAgB,CAAC,MAA4C;AAAA,IACjE,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD,OAAO,CAAC;AAAA,IACV;AAAA,IAEA,IAAI;AAAA,MACF,OAAQ,MAAM,OAAO,QAAQ,MAAM,IAAI,IAAI;AAAA,MAC3C,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,sCAAsC,KAAK;AAAA,MACxD,OAAO,CAAC;AAAA;AAAA;AAAA,OAIN,IAAG,CAAC,OAA+C;AAAA,IACvD,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,OAAO,QAAQ,MAAM,IAAI,KAAK;AAAA,MACpC,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,sCAAsC,KAAK;AAAA;AAAA;AAAA,OAItD,OAAM,CAAC,MAA+B;AAAA,IAC1C,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,OAAO,QAAQ,MAAM,OAAO,IAAI;AAAA,MACtC,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,yCAAyC,KAAK;AAAA;AAAA;AAGjE;AAAA;AAKO,MAAM,qBAA+C;AAAA,EAClD,UAAU,IAAI;AAAA,OAEhB,IAAgB,CAAC,MAA4C;AAAA,IACjE,MAAM,SAA4B,CAAC;AAAA,IACnC,WAAW,OAAO,MAAM;AAAA,MACtB,MAAM,QAAQ,KAAK,QAAQ,IAAI,GAAG;AAAA,MAClC,IAAI,UAAU,WAAW;AAAA,QACvB,OAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAAA,IACA,OAAO;AAAA;AAAA,OAGH,IAAG,CAAC,OAA+C;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAChD,KAAK,QAAQ,IAAI,KAAK,KAAK;AAAA,IAC7B;AAAA;AAAA,OAGI,OAAM,CAAC,MAA+B;AAAA,IAC1C,WAAW,OAAO,MAAM;AAAA,MACtB,KAAK,QAAQ,OAAO,GAAG;AAAA,IACzB;AAAA;AAEJ;AAKO,SAAS,oBAAoB,GAAmB;AAAA,EAErD,IAAI,OAAO,WAAW,eAAe,OAAO,WAAW,OAAO,SAAS;AAAA,IACrE,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,IAAI,OAAO,cAAc,aAAa;AAAA,IACpC,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,OAAO,IAAI;AAAA;;;;;;;;;;;ACpIN,MAAM,gBAAuC;AAAA,EAClD,SAAY,CAAC,UAAqC;AAAA,EAIlD,SAAY,CAAC,WAA+D;AAAA,IAE1E,OAAO,MAAM;AAAA;AAIjB;AAAA;AAMO,MAAM,yBAAgD;AAAA,EACnD,YAAiE,CAAC;AAAA,EAClE,OAAmC;AAAA,EAE3C,WAAW,GAAG;AAAA,IAEZ,IAAI,OAAO,WAAW,eAAe,OAAO,SAAS;AAAA,MACnD,OAAO,QAAQ,UAAU,YAAY,CAAC,SAAS,SAAS,kBAAkB;AAAA,QACxE,IAAI,QAAQ,SAAS,cAAc;AAAA,UACjC,KAAK,UAAU,QAAQ,CAAC,aAAa;AAAA,YACnC,SAAS,OAAO;AAAA,WACjB;AAAA,QACH;AAAA,OACD;AAAA,IACH;AAAA;AAAA,EAGF,SAAY,CAAC,SAAoC;AAAA,IAC/C,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD,QAAQ,KAAK,4CAA4C;AAAA,MACzD;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,OAAO,QAAQ,YAAY;AAAA,QACzB,MAAM;AAAA,QACN,KAAK,QAAQ;AAAA,QACb,OAAO,QAAQ;AAAA,QACf,OAAO,QAAQ;AAAA,MACjB,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,mDAAmD,KAAK;AAAA;AAAA;AAAA,EAIzE,SAAY,CAAC,UAA8D;AAAA,IACzE,KAAK,UAAU,KAAK,QAAwD;AAAA,IAG5E,OAAO,MAAM;AAAA,MACX,MAAM,QAAQ,KAAK,UAAU,QAC3B,QACF;AAAA,MACA,IAAI,QAAQ,IAAI;AAAA,QACd,KAAK,UAAU,OAAO,OAAO,CAAC;AAAA,MAChC;AAAA;AAAA;AAAA,EAIJ,OAAO,GAAkB;AAAA,IAEvB,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAGzB,UAAU,GAAS;AAAA,IACjB,KAAK,YAAY,CAAC;AAAA,IAClB,IAAI,KAAK,MAAM;AAAA,MACb,KAAK,KAAK,WAAW;AAAA,MACrB,KAAK,OAAO;AAAA,IACd;AAAA;AAAA,EAGF,WAAW,GAAY;AAAA,IACrB,OAAO,OAAO,WAAW,eAAe,CAAC,CAAC,OAAO;AAAA;AAErD;AAAA;AAMO,MAAM,4BAAmD;AAAA,EACtD,UAAmC;AAAA,EACnC,YAAiE,CAAC;AAAA,EAE1E,WAAW,CAAC,cAAc,cAAc;AAAA,IACtC,IAAI,OAAO,qBAAqB,aAAa;AAAA,MAC3C,QAAQ,KAAK,8CAA8C;AAAA,IAC7D,EAAO;AAAA,MACL,KAAK,UAAU,IAAI,iBAAiB,WAAW;AAAA,MAE/C,KAAK,QAAQ,YAAY,CAAC,UAAU;AAAA,QAClC,IAAI,MAAM,KAAK,SAAS,cAAc;AAAA,UACpC,KAAK,UAAU,QAAQ,CAAC,aAAa;AAAA,YACnC,SAAS,MAAM,IAAI;AAAA,WACpB;AAAA,QACH;AAAA;AAAA;AAAA;AAAA,EAKN,SAAY,CAAC,SAAoC;AAAA,IAC/C,IAAI,CAAC,KAAK,SAAS;AAAA,MACjB,QAAQ,KAAK,gDAAgD;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,KAAK,QAAQ,YAAY;AAAA,QACvB,MAAM;AAAA,QACN,KAAK,QAAQ;AAAA,QACb,OAAO,QAAQ;AAAA,QACf,OAAO,QAAQ;AAAA,MACjB,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,mDAAmD,KAAK;AAAA;AAAA;AAAA,EAIzE,SAAY,CAAC,UAA8D;AAAA,IACzE,KAAK,UAAU,KAAK,QAAwD;AAAA,IAG5E,OAAO,MAAM;AAAA,MACX,MAAM,QAAQ,KAAK,UAAU,QAC3B,QACF;AAAA,MACA,IAAI,QAAQ,IAAI;AAAA,QACd,KAAK,UAAU,OAAO,OAAO,CAAC;AAAA,MAChC;AAAA;AAAA;AAAA,EAIJ,OAAO,GAAkB;AAAA,IAEvB,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAGzB,UAAU,GAAS;AAAA,IACjB,KAAK,YAAY,CAAC;AAAA,IAClB,IAAI,KAAK,SAAS;AAAA,MAChB,KAAK,QAAQ,MAAM;AAAA,MACnB,KAAK,UAAU;AAAA,IACjB;AAAA;AAAA,EAGF,WAAW,GAAY;AAAA,IACrB,OAAO,KAAK,YAAY;AAAA;AAE5B;AAKO,SAAS,iBAAiB,GAAgB;AAAA,EAE/C,IAAI,OAAO,WAAW,eAAe,OAAO,SAAS;AAAA,IACnD,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,IAAI,OAAO,qBAAqB,aAAa;AAAA,IAC3C,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,OAAO,IAAI;AAAA;;;ACpPb;AAoCA,IAAM,gBAAgB,IAAI;AA2BnB,SAAS,YAAe,CAC7B,KACA,cACA,UAA2B,CAAC,GACuB;AAAA,EACnD,MAAM,MAAM,YAAY,KAAK,cAAc;AAAA,OACtC;AAAA,IACH,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAAA,EAGD,MAAM,QAAQ,cAAc,IAAI,GAAG;AAAA,EACnC,IAAI,OAAO;AAAA,IACR,IAA4B,SAAS,MAAM;AAAA,EAC9C;AAAA,EAEA,OAAO;AAAA;AAsBF,SAAS,YAAe,CAC7B,KACA,cACA,UAA2B,CAAC,GACjB;AAAA,EACX,OAAO,YAAY,KAAK,cAAc;AAAA,OACjC;AAAA,IACH,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAAA;AAuBI,SAAS,eAAkB,CAChC,KACA,cACA,UAA2B,CAAC,GACW;AAAA,EACvC,MAAM,MAAM,YAAY,KAAK,cAAc;AAAA,OACtC;AAAA,IACH,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAAA,EAGD,MAAM,QAAQ,cAAc,IAAI,GAAG;AAAA,EACnC,IAAI,OAAO;AAAA,IACR,IAA4B,SAAS,MAAM;AAAA,EAC9C;AAAA,EAEA,OAAO;AAAA;AAqBF,SAAS,MAAS,CAAC,cAA4B;AAAA,EACpD,OAAO,OAAO,YAAY;AAAA;AASrB,SAAS,SAAS,CAAC,GAAY,GAAqB;AAAA,EACzD,IAAI,MAAM;AAAA,IAAG,OAAO;AAAA,EACpB,IAAI,KAAK,QAAQ,KAAK;AAAA,IAAM,OAAO;AAAA,EACnC,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM;AAAA,IAAU,OAAO;AAAA,EAE3D,MAAM,QAAQ,OAAO,KAAK,CAAC;AAAA,EAC3B,MAAM,QAAQ,OAAO,KAAK,CAAC;AAAA,EAE3B,IAAI,MAAM,WAAW,MAAM;AAAA,IAAQ,OAAO;AAAA,EAE1C,WAAW,OAAO,OAAO;AAAA,IACvB,IAAI,CAAC,MAAM,SAAS,GAAG;AAAA,MAAG,OAAO;AAAA,IACjC,IAAI,CAAC,UAAW,EAA8B,MAAO,EAA8B,IAAI;AAAA,MACrF,OAAO;AAAA,EACX;AAAA,EAEA,OAAO;AAAA;AAST,SAAS,eAAe,CAAC,SAGvB;AAAA,EAEA,IAAI,QAAQ,WAAW,QAAQ,MAAM;AAAA,IACnC,OAAO;AAAA,MACL,SAAS,QAAQ,YAAY,QAAQ,gBAAgB,qBAAqB,IAAI;AAAA,MAC9E,MAAM,QAAQ,SAAS,QAAQ,aAAa,kBAAkB,IAAI;AAAA,IACpE;AAAA,EACF;AAAA,EAIA,IAAI,QAAQ,KAAK;AAAA,IACf,OAAO;AAAA,MACL,SAAS,QAAQ,IAAI,SAAS;AAAA,MAC9B,MAAM,QAAQ,aAAa,kBAAkB,IAAI;AAAA,IACnD;AAAA,EACF;AAAA,EAGA,OAAO;AAAA,IACL,SAAS,QAAQ,gBAAgB,qBAAqB,IAAI;AAAA,IAC1D,MAAM,QAAQ,aAAa,kBAAkB,IAAI;AAAA,EACnD;AAAA;AAGF,SAAS,WAAc,CAAC,KAAa,cAAiB,SAA6C;AAAA,EAEjG,IAAI,cAAc,IAAI,GAAG,GAAG;AAAA,IAC1B,OAAO,cAAc,IAAI,GAAG,GAAG;AAAA,EACjC;AAAA,EAEA,MAAM,MAAM,OAAO,YAAY;AAAA,EAG/B,IAAI,QAAQ,QAAQ;AAAA,IAElB,MAAM,SAAS,KAAK,MAAM,KAAK,UAAU,YAAY,CAAC;AAAA,IACrD,IAA4B,SAAS;AAAA,EACxC;AAAA,EAEA,MAAM,QAAuB;AAAA,IAC3B,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,QAAQ,QAAQ,QAAQ;AAAA,IACxB,UAAU;AAAA,EACZ;AAAA,EAGA,MAAM,WAAW,gBAAgB,OAAO;AAAA,EAGxC,IAAI,QAAQ,iBAAiB,SAAS,SAAS;AAAA,IAC7C,MAAM,SAAS,gBAAgB,KAAK,KAAK,OAAO,SAAS,SAAS,QAAQ,SAAS;AAAA,EACrF;AAAA,EAGA,MAAM,OAAO,KAAK,MAAM;AAAA,IACtB,IAAI,gBAAuC;AAAA,IAC3C,IAAI,gBAAgB,IAAI;AAAA,IACxB,IAAI,aAAa;AAAA,IAGjB,OAAO,MAAM;AAAA,MAEX,IAAI,MAAM;AAAA,QAAU;AAAA,MAEpB,MAAM,QAAQ,IAAI;AAAA,MAGlB,IAAI,YAAY;AAAA,QACd,aAAa;AAAA,QACb;AAAA,MACF;AAAA,MAGA,IAAI,UAAU,OAAO,aAAa,GAAG;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,gBAAgB;AAAA,MAGhB,IAAI,QAAQ,QAAQ;AAAA,QAClB,MAAM,eAAe;AAAA,QACrB,IAAI,aAAa,QAAQ;AAAA,UACvB,OAAO,OAAO,aAAa,QAAQ,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,QACtE;AAAA,MACF;AAAA,MAGA,MAAM;AAAA,MAEN,MAAM,WAAW,MAAM;AAAA,QAErB,IAAI,QAAQ,iBAAiB,SAAS,SAAS;AAAA,UAC7C,iBAAiB,KAAK,OAAO,MAAM,OAAO,SAAS,OAAO;AAAA,QAC5D;AAAA,QAGA,IAAI,QAAQ,cAAc,SAAS,MAAM;AAAA,UACvC,gBAAgB,KAAK,OAAO,MAAM,OAAO,SAAS,IAAI;AAAA,QACxD;AAAA;AAAA,MAIF,IAAI,QAAQ,YAAY;AAAA,QACtB,IAAI;AAAA,UAAe,aAAa,aAAa;AAAA,QAC7C,gBAAgB,WAAW,UAAU,QAAQ,UAAU;AAAA,MACzD,EAAO;AAAA,QACL,SAAS;AAAA;AAAA,KAEZ;AAAA,GACF;AAAA,EAGD,IAAI,QAAQ,cAAc,SAAS,MAAM;AAAA,IAEvC,IAAI,SAAS,KAAK,SAAS;AAAA,MACzB,SAAS,KAAK,QAAQ;AAAA,IACxB;AAAA,IAGA,SAAS,KAAK,UAAa,CAAC,YAAY;AAAA,MACtC,IAAI,QAAQ,QAAQ;AAAA,QAAK;AAAA,MAEzB,MAAM,WAAW,MAAM;AAAA,MAIvB,MAAM,QAAQ,KAAK,IAAI,MAAM,OAAO,QAAQ,KAAK;AAAA,MAIjD,IAAI,QAAQ,QAAQ,UAAU;AAAA,QAE5B,IAAI,QAAQ,aAAa,CAAC,QAAQ,UAAU,QAAQ,KAAK,GAAG;AAAA,UAC1D,QAAQ,KACN,kBAAkB,kDAAkD,QAAQ,UAC5E,QAAQ,KACV;AAAA,UACA;AAAA,QACF;AAAA,QAGA,IAAI,UAAU,MAAM,OAAO,OAAO,QAAQ,KAAK,GAAG;AAAA,UAChD;AAAA,QACF;AAAA,QAEA,YAAY,OAAO,QAAQ,OAAY,QAAQ,KAAK;AAAA,MACtD;AAAA,KACD;AAAA,EACH;AAAA,EAEA,cAAc,IAAI,KAAK,KAA4B;AAAA,EACnD,OAAO;AAAA;AAGT,eAAe,eAAkB,CAC/B,KACA,KACA,OACA,SACA,WACe;AAAA,EACf,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,QAAQ,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;AAAA,IAEtD,IAAI,OAAO,SAAS,WAAW;AAAA,MAC7B,MAAM,cAAc,OAAO;AAAA,MAG3B,IAAI,WAAW;AAAA,QACb,IAAI,UAAU,WAAW,GAAG;AAAA,UAC1B,IAAI,QAAQ;AAAA,QACd,EAAO;AAAA,UACL,QAAQ,KACN,kBAAkB,6DAClB,WACF;AAAA;AAAA,MAEJ,EAAO;AAAA,QACL,IAAI,QAAQ;AAAA;AAAA,IAEhB;AAAA,IAEA,IAAI,OAAO,GAAG,iBAAiB,WAAW;AAAA,MACxC,MAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAAA,IACA,OAAO,OAAO;AAAA,IACd,QAAQ,KAAK,8CAA8C,OAAO,KAAK;AAAA;AAAA;AAI3E,SAAS,gBAAmB,CAAC,KAAa,OAAU,OAAe,SAA+B;AAAA,EAChG,IAAI;AAAA,IACF,QAAQ,IAAI;AAAA,OACT,MAAM;AAAA,OACN,GAAG,cAAc;AAAA,IACpB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,QAAQ,KAAK,+CAA+C,OAAO,KAAK;AAAA;AAAA;AAI5E,SAAS,eAAkB,CAAC,KAAa,OAAU,OAAe,MAAyB;AAAA,EACzF,IAAI;AAAA,IACF,KAAK,UAAU;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,QAAQ,KAAK,6CAA6C,OAAO,KAAK;AAAA;AAAA;AAI1E,SAAS,WAAc,CAAC,OAAsB,OAAU,OAAqB;AAAA,EAC3E,MAAM,WAAW;AAAA,EACjB,MAAM,OAAO,QAAQ;AAAA,EACrB,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW;AAAA;AAMZ,SAAS,aAAgB,CAAC,KAAoC;AAAA,EACnE,MAAM,QAAQ,cAAc,IAAI,GAAG;AAAA,EACnC,OAAO,OAAO;AAAA;AAMT,SAAS,kBAAkB,GAAS;AAAA,EACzC,cAAc,MAAM;AAAA;;;AC7ZtB,mBAAS,mBAAqB;AAyBvB,SAAS,SAAyB,CACvC,OACA,SACiB;AAAA,EACjB,QAAQ,QAAQ,SAAS,iBAAiB;AAAA,EAE1C,MAAM,OAAO,QAAc,YAAY;AAAA,EACvC,MAAM,SAAS,QAAuB,MAAM;AAAA,EAC5C,MAAM,QAAQ,QAA0B,SAAS;AAAA,EAEjD,IAAI,aAAa;AAAA,EACjB,IAAI;AAAA,EAEJ,SAAS,QAAQ,CAAC,aAAsB;AAAA,IACtC,MAAM,iBAAiB,EAAE;AAAA,IACzB,OAAO,QAAQ;AAAA,IACf,MAAM,QAAQ;AAAA,IAEd,QAAQ,WAAW,EAAE,KACnB,CAAC,WAAW;AAAA,MACV,IAAI,mBAAmB;AAAA,QAAY;AAAA,MACnC,KAAK,QAAQ;AAAA,MACb,OAAO,QAAQ;AAAA,MACf,MAAM,QAAQ;AAAA,OAEhB,CAAC,QAAQ;AAAA,MACP,IAAI,mBAAmB;AAAA,QAAY;AAAA,MACnC,OAAO,QAAQ;AAAA,MACf,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,KAEpE;AAAA;AAAA,EAIF,QAAO,MAAM;AAAA,IACX,MAAM,cAAc,OAAO;AAAA,IAE3B,IAAI,eAAe,aAAa,UAAU,YAAY,WAAW,GAAG;AAAA,MAClE;AAAA,IACF;AAAA,IACA,aAAa;AAAA,IACb,SAAS,WAAW;AAAA,GACrB;AAAA,EAED,SAAS,OAAO,GAAG;AAAA,IACjB,IAAI,eAAe,WAAW;AAAA,MAC5B,SAAS,UAAU;AAAA,IACrB;AAAA;AAAA,EAGF,OAAO,EAAE,MAAM,QAAQ,OAAO,QAAQ;AAAA;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeO,MAAM,iBAA2C;AAAA,EAC9C;AAAA,EACA,YAAY;AAAA,EACZ,YAAyC;AAAA,EAEjD,WAAW,CAAC,SAAS,eAAe;AAAA,IAClC,KAAK,SAAS;AAAA;AAAA,EAGR,KAAK,GAAyB;AAAA,IACpC,IAAI,KAAK;AAAA,MAAW,OAAO,KAAK;AAAA,IAEhC,KAAK,YAAY,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MAChD,MAAM,UAAU,UAAU,KAAK,KAAK,QAAQ,CAAC;AAAA,MAE7C,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAAA,MAEhD,QAAQ,kBAAkB,CAAC,UAAU;AAAA,QACnC,MAAM,KAAM,MAAM,OAAuC;AAAA,QACzD,IAAI,CAAC,GAAG,iBAAiB,SAAS,KAAK,SAAS,GAAG;AAAA,UACjD,GAAG,kBAAkB,KAAK,SAAS;AAAA,QACrC;AAAA;AAAA,KAEH;AAAA,IAED,OAAO,KAAK;AAAA;AAAA,OAGR,IAAgB,CAAC,MAA4C;AAAA,IACjE,IAAI;AAAA,MACF,MAAM,KAAK,MAAM,KAAK,MAAM;AAAA,MAC5B,MAAM,SAA4B,CAAC;AAAA,MAEnC,MAAM,QAAQ,IACZ,KAAK,IACH,CAAC,QACC,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,QACrC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,SAAS,GAAG,UAAU;AAAA,QAC/D,MAAM,QAAQ,YAAY,YAAY,KAAK,SAAS;AAAA,QACpD,MAAM,UAAU,MAAM,IAAI,GAAG;AAAA,QAE7B,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,QAC5C,QAAQ,YAAY,MAAM;AAAA,UACxB,IAAI,QAAQ,WAAW,WAAW;AAAA,YAChC,OAAO,OAAO,QAAQ;AAAA,UACxB;AAAA,UACA,QAAQ;AAAA;AAAA,OAEX,CACL,CACF;AAAA,MAEA,OAAO;AAAA,MACP,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,iCAAiC,KAAK;AAAA,MACnD,OAAO,CAAC;AAAA;AAAA;AAAA,OAIN,IAAG,CAAC,OAA+C;AAAA,IACvD,IAAI;AAAA,MACF,MAAM,KAAK,MAAM,KAAK,MAAM;AAAA,MAC5B,MAAM,QAAQ,IACZ,OAAO,QAAQ,KAAK,EAAE,IACpB,EAAE,KAAK,WACL,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,QACrC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,SAAS,GAAG,WAAW;AAAA,QAChE,MAAM,QAAQ,YAAY,YAAY,KAAK,SAAS;AAAA,QACpD,MAAM,UAAU,MAAM,IAAI,OAAO,GAAG;AAAA,QAEpC,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,QAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,OACnC,CACL,CACF;AAAA,MACA,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,iCAAiC,KAAK;AAAA;AAAA;AAAA,OAIjD,OAAM,CAAC,MAA+B;AAAA,IAC1C,IAAI;AAAA,MACF,MAAM,KAAK,MAAM,KAAK,MAAM;AAAA,MAC5B,MAAM,QAAQ,IACZ,KAAK,IACH,CAAC,QACC,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,QACrC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,SAAS,GAAG,WAAW;AAAA,QAChE,MAAM,QAAQ,YAAY,YAAY,KAAK,SAAS;AAAA,QACpD,MAAM,UAAU,MAAM,OAAO,GAAG;AAAA,QAEhC,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,QAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,OACnC,CACL,CACF;AAAA,MACA,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,oCAAoC,KAAK;AAAA;AAAA;AAG5D;AAAA;AAKO,MAAM,qBAA+C;AAAA,OACpD,IAAgB,CAAC,MAA4C;AAAA,IACjE,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD,OAAO,CAAC;AAAA,IACV;AAAA,IAEA,IAAI;AAAA,MACF,OAAQ,MAAM,OAAO,QAAQ,MAAM,IAAI,IAAI;AAAA,MAC3C,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,sCAAsC,KAAK;AAAA,MACxD,OAAO,CAAC;AAAA;AAAA;AAAA,OAIN,IAAG,CAAC,OAA+C;AAAA,IACvD,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,OAAO,QAAQ,MAAM,IAAI,KAAK;AAAA,MACpC,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,sCAAsC,KAAK;AAAA;AAAA;AAAA,OAItD,OAAM,CAAC,MAA+B;AAAA,IAC1C,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,OAAO,QAAQ,MAAM,OAAO,IAAI;AAAA,MACtC,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,yCAAyC,KAAK;AAAA;AAAA;AAGjE;AAAA;AAKO,MAAM,qBAA+C;AAAA,EAClD,UAAU,IAAI;AAAA,OAEhB,IAAgB,CAAC,MAA4C;AAAA,IACjE,MAAM,SAA4B,CAAC;AAAA,IACnC,WAAW,OAAO,MAAM;AAAA,MACtB,MAAM,QAAQ,KAAK,QAAQ,IAAI,GAAG;AAAA,MAClC,IAAI,UAAU,WAAW;AAAA,QACvB,OAAO,OAAO;AAAA,MAChB;AAAA,IACF;AAAA,IACA,OAAO;AAAA;AAAA,OAGH,IAAG,CAAC,OAA+C;AAAA,IACvD,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAChD,KAAK,QAAQ,IAAI,KAAK,KAAK;AAAA,IAC7B;AAAA;AAAA,OAGI,OAAM,CAAC,MAA+B;AAAA,IAC1C,WAAW,OAAO,MAAM;AAAA,MACtB,KAAK,QAAQ,OAAO,GAAG;AAAA,IACzB;AAAA;AAEJ;AAKO,SAAS,oBAAoB,GAAmB;AAAA,EAErD,IAAI,OAAO,WAAW,eAAe,OAAO,WAAW,OAAO,SAAS;AAAA,IACrE,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,IAAI,OAAO,cAAc,aAAa;AAAA,IACpC,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,OAAO,IAAI;AAAA;;;;;;;;;;;ACpIN,MAAM,gBAAuC;AAAA,EAClD,SAAY,CAAC,UAAqC;AAAA,EAIlD,SAAY,CAAC,WAA+D;AAAA,IAE1E,OAAO,MAAM;AAAA;AAIjB;AAAA;AAMO,MAAM,yBAAgD;AAAA,EACnD,YAAiE,CAAC;AAAA,EAClE,OAAmC;AAAA,EAE3C,WAAW,GAAG;AAAA,IAEZ,IAAI,OAAO,WAAW,eAAe,OAAO,SAAS;AAAA,MACnD,OAAO,QAAQ,UAAU,YAAY,CAAC,SAAS,SAAS,kBAAkB;AAAA,QACxE,IAAI,QAAQ,SAAS,cAAc;AAAA,UACjC,KAAK,UAAU,QAAQ,CAAC,aAAa;AAAA,YACnC,SAAS,OAAO;AAAA,WACjB;AAAA,QACH;AAAA,OACD;AAAA,IACH;AAAA;AAAA,EAGF,SAAY,CAAC,SAAoC;AAAA,IAC/C,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,SAAS;AAAA,MACpD,QAAQ,KAAK,4CAA4C;AAAA,MACzD;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,OAAO,QAAQ,YAAY;AAAA,QACzB,MAAM;AAAA,QACN,KAAK,QAAQ;AAAA,QACb,OAAO,QAAQ;AAAA,QACf,OAAO,QAAQ;AAAA,MACjB,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,mDAAmD,KAAK;AAAA;AAAA;AAAA,EAIzE,SAAY,CAAC,UAA8D;AAAA,IACzE,KAAK,UAAU,KAAK,QAAmE;AAAA,IAGvF,OAAO,MAAM;AAAA,MACX,MAAM,QAAQ,KAAK,UAAU,QAC3B,QACF;AAAA,MACA,IAAI,QAAQ,IAAI;AAAA,QACd,KAAK,UAAU,OAAO,OAAO,CAAC;AAAA,MAChC;AAAA;AAAA;AAAA,EAIJ,OAAO,GAAkB;AAAA,IAEvB,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAGzB,UAAU,GAAS;AAAA,IACjB,KAAK,YAAY,CAAC;AAAA,IAClB,IAAI,KAAK,MAAM;AAAA,MACb,KAAK,KAAK,WAAW;AAAA,MACrB,KAAK,OAAO;AAAA,IACd;AAAA;AAAA,EAGF,WAAW,GAAY;AAAA,IACrB,OAAO,OAAO,WAAW,eAAe,CAAC,CAAC,OAAO;AAAA;AAErD;AAAA;AAMO,MAAM,4BAAmD;AAAA,EACtD,UAAmC;AAAA,EACnC,YAAiE,CAAC;AAAA,EAE1E,WAAW,CAAC,cAAc,cAAc;AAAA,IACtC,IAAI,OAAO,qBAAqB,aAAa;AAAA,MAC3C,QAAQ,KAAK,8CAA8C;AAAA,IAC7D,EAAO;AAAA,MACL,KAAK,UAAU,IAAI,iBAAiB,WAAW;AAAA,MAE/C,KAAK,QAAQ,YAAY,CAAC,UAAU;AAAA,QAClC,IAAI,MAAM,KAAK,SAAS,cAAc;AAAA,UACpC,KAAK,UAAU,QAAQ,CAAC,aAAa;AAAA,YACnC,SAAS,MAAM,IAAI;AAAA,WACpB;AAAA,QACH;AAAA;AAAA;AAAA;AAAA,EAKN,SAAY,CAAC,SAAoC;AAAA,IAC/C,IAAI,CAAC,KAAK,SAAS;AAAA,MACjB,QAAQ,KAAK,gDAAgD;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,MACF,KAAK,QAAQ,YAAY;AAAA,QACvB,MAAM;AAAA,QACN,KAAK,QAAQ;AAAA,QACb,OAAO,QAAQ;AAAA,QACf,OAAO,QAAQ;AAAA,MACjB,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,QAAQ,KAAK,mDAAmD,KAAK;AAAA;AAAA;AAAA,EAIzE,SAAY,CAAC,UAA8D;AAAA,IACzE,KAAK,UAAU,KAAK,QAAmE;AAAA,IAGvF,OAAO,MAAM;AAAA,MACX,MAAM,QAAQ,KAAK,UAAU,QAC3B,QACF;AAAA,MACA,IAAI,QAAQ,IAAI;AAAA,QACd,KAAK,UAAU,OAAO,OAAO,CAAC;AAAA,MAChC;AAAA;AAAA;AAAA,EAIJ,OAAO,GAAkB;AAAA,IAEvB,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAGzB,UAAU,GAAS;AAAA,IACjB,KAAK,YAAY,CAAC;AAAA,IAClB,IAAI,KAAK,SAAS;AAAA,MAChB,KAAK,QAAQ,MAAM;AAAA,MACnB,KAAK,UAAU;AAAA,IACjB;AAAA;AAAA,EAGF,WAAW,GAAY;AAAA,IACrB,OAAO,KAAK,YAAY;AAAA;AAE5B;AAKO,SAAS,iBAAiB,GAAgB;AAAA,EAE/C,IAAI,OAAO,WAAW,eAAe,OAAO,SAAS;AAAA,IACnD,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,IAAI,OAAO,qBAAqB,aAAa;AAAA,IAC3C,OAAO,IAAI;AAAA,EACb;AAAA,EAGA,OAAO,IAAI;AAAA;;;ACpPb;AAoCA,IAAM,gBAAgB,IAAI;AA2BnB,SAAS,YAAe,CAC7B,KACA,cACA,UAA2B,CAAC,GACuB;AAAA,EACnD,MAAM,MAAM,YAAY,KAAK,cAAc;AAAA,OACtC;AAAA,IACH,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAAA,EAGD,MAAM,QAAQ,cAAc,IAAI,GAAG;AAAA,EACnC,IAAI,OAAO;AAAA,IACR,IAAuC,SAAS,MAAM;AAAA,EACzD;AAAA,EAEA,OAAO;AAAA;AAsBF,SAAS,YAAe,CAC7B,KACA,cACA,UAA2B,CAAC,GACjB;AAAA,EACX,OAAO,YAAY,KAAK,cAAc;AAAA,OACjC;AAAA,IACH,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAAA;AAuBI,SAAS,eAAkB,CAChC,KACA,cACA,UAA2B,CAAC,GACW;AAAA,EACvC,MAAM,MAAM,YAAY,KAAK,cAAc;AAAA,OACtC;AAAA,IACH,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAAA,EAGD,MAAM,QAAQ,cAAc,IAAI,GAAG;AAAA,EACnC,IAAI,OAAO;AAAA,IACR,IAAuC,SAAS,MAAM;AAAA,EACzD;AAAA,EAEA,OAAO;AAAA;AAqBF,SAAS,MAAS,CAAC,cAA4B;AAAA,EACpD,OAAO,OAAO,YAAY;AAAA;AASrB,SAAS,SAAS,CAAC,GAAY,GAAqB;AAAA,EACzD,IAAI,MAAM;AAAA,IAAG,OAAO;AAAA,EACpB,IAAI,KAAK,QAAQ,KAAK;AAAA,IAAM,OAAO;AAAA,EACnC,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM;AAAA,IAAU,OAAO;AAAA,EAE3D,MAAM,QAAQ,OAAO,KAAK,CAAC;AAAA,EAC3B,MAAM,QAAQ,OAAO,KAAK,CAAC;AAAA,EAE3B,IAAI,MAAM,WAAW,MAAM;AAAA,IAAQ,OAAO;AAAA,EAE1C,WAAW,OAAO,OAAO;AAAA,IACvB,IAAI,CAAC,MAAM,SAAS,GAAG;AAAA,MAAG,OAAO;AAAA,IACjC,IACE,CAAC,UACE,EAAyC,MACzC,EAAyC,IAC5C;AAAA,MAEA,OAAO;AAAA,EACX;AAAA,EAEA,OAAO;AAAA;AAST,SAAS,eAAe,CAAC,SAGvB;AAAA,EAEA,IAAI,QAAQ,WAAW,QAAQ,MAAM;AAAA,IACnC,OAAO;AAAA,MACL,SAAS,QAAQ,YAAY,QAAQ,gBAAgB,qBAAqB,IAAI;AAAA,MAC9E,MAAM,QAAQ,SAAS,QAAQ,aAAa,kBAAkB,IAAI;AAAA,IACpE;AAAA,EACF;AAAA,EAIA,IAAI,QAAQ,KAAK;AAAA,IACf,OAAO;AAAA,MACL,SAAS,QAAQ,IAAI,SAAS;AAAA,MAC9B,MAAM,QAAQ,aAAa,kBAAkB,IAAI;AAAA,IACnD;AAAA,EACF;AAAA,EAGA,OAAO;AAAA,IACL,SAAS,QAAQ,gBAAgB,qBAAqB,IAAI;AAAA,IAC1D,MAAM,QAAQ,aAAa,kBAAkB,IAAI;AAAA,EACnD;AAAA;AAGF,SAAS,WAAc,CAAC,KAAa,cAAiB,SAA6C;AAAA,EAEjG,IAAI,cAAc,IAAI,GAAG,GAAG;AAAA,IAC1B,OAAO,cAAc,IAAI,GAAG,GAAG;AAAA,EACjC;AAAA,EAEA,MAAM,MAAM,OAAO,YAAY;AAAA,EAG/B,IAAI,QAAQ,QAAQ;AAAA,IAElB,MAAM,SAAS,KAAK,MAAM,KAAK,UAAU,YAAY,CAAC;AAAA,IACrD,IAAuC,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,QAAuB;AAAA,IAC3B,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,QAAQ,QAAQ,QAAQ;AAAA,IACxB,UAAU;AAAA,EACZ;AAAA,EAGA,MAAM,WAAW,gBAAgB,OAAO;AAAA,EAGxC,IAAI,QAAQ,iBAAiB,SAAS,SAAS;AAAA,IAC7C,MAAM,SAAS,gBAAgB,KAAK,KAAK,OAAO,SAAS,SAAS,QAAQ,SAAS;AAAA,EACrF;AAAA,EAGA,MAAM,OAAO,KAAK,MAAM;AAAA,IACtB,IAAI,gBAAuC;AAAA,IAC3C,IAAI,gBAAgB,IAAI;AAAA,IACxB,IAAI,aAAa;AAAA,IAGjB,OAAO,MAAM;AAAA,MAEX,IAAI,MAAM;AAAA,QAAU;AAAA,MAEpB,MAAM,QAAQ,IAAI;AAAA,MAGlB,IAAI,YAAY;AAAA,QACd,aAAa;AAAA,QACb;AAAA,MACF;AAAA,MAGA,IAAI,UAAU,OAAO,aAAa,GAAG;AAAA,QACnC;AAAA,MACF;AAAA,MAEA,gBAAgB;AAAA,MAGhB,IAAI,QAAQ,QAAQ;AAAA,QAClB,MAAM,eAAe;AAAA,QACrB,IAAI,aAAa,QAAQ;AAAA,UACvB,OAAO,OAAO,aAAa,QAAQ,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,QACtE;AAAA,MACF;AAAA,MAGA,MAAM;AAAA,MAEN,MAAM,WAAW,MAAM;AAAA,QAErB,IAAI,QAAQ,iBAAiB,SAAS,SAAS;AAAA,UAC7C,iBAAiB,KAAK,OAAO,MAAM,OAAO,SAAS,OAAO;AAAA,QAC5D;AAAA,QAGA,IAAI,QAAQ,cAAc,SAAS,MAAM;AAAA,UACvC,gBAAgB,KAAK,OAAO,MAAM,OAAO,SAAS,IAAI;AAAA,QACxD;AAAA;AAAA,MAIF,IAAI,QAAQ,YAAY;AAAA,QACtB,IAAI;AAAA,UAAe,aAAa,aAAa;AAAA,QAC7C,gBAAgB,WAAW,UAAU,QAAQ,UAAU;AAAA,MACzD,EAAO;AAAA,QACL,SAAS;AAAA;AAAA,KAEZ;AAAA,GACF;AAAA,EAGD,IAAI,QAAQ,cAAc,SAAS,MAAM;AAAA,IAEvC,IAAI,SAAS,KAAK,SAAS;AAAA,MACzB,SAAS,KAAK,QAAQ;AAAA,IACxB;AAAA,IAGA,SAAS,KAAK,UAAa,CAAC,YAAY;AAAA,MACtC,IAAI,QAAQ,QAAQ;AAAA,QAAK;AAAA,MAEzB,MAAM,WAAW,MAAM;AAAA,MAIvB,MAAM,QAAQ,KAAK,IAAI,MAAM,OAAO,QAAQ,KAAK;AAAA,MAIjD,IAAI,QAAQ,QAAQ,UAAU;AAAA,QAE5B,IAAI,QAAQ,aAAa,CAAC,QAAQ,UAAU,QAAQ,KAAK,GAAG;AAAA,UAC1D,QAAQ,KACN,kBAAkB,kDAAkD,QAAQ,UAC5E,QAAQ,KACV;AAAA,UACA;AAAA,QACF;AAAA,QAGA,IAAI,UAAU,MAAM,OAAO,OAAO,QAAQ,KAAK,GAAG;AAAA,UAChD;AAAA,QACF;AAAA,QAEA,YAAY,OAAO,QAAQ,OAAuB,QAAQ,KAAK;AAAA,MACjE;AAAA,KACD;AAAA,EACH;AAAA,EAEA,cAAc,IAAI,KAAK,KAAuC;AAAA,EAC9D,OAAO;AAAA;AAGT,eAAe,eAAkB,CAC/B,KACA,KACA,OACA,SACA,WACe;AAAA,EACf,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,QAAQ,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;AAAA,IAEtD,IAAI,OAAO,SAAS,WAAW;AAAA,MAC7B,MAAM,cAAc,OAAO;AAAA,MAG3B,IAAI,WAAW;AAAA,QACb,IAAI,UAAU,WAAW,GAAG;AAAA,UAC1B,IAAI,QAAQ;AAAA,QACd,EAAO;AAAA,UACL,QAAQ,KACN,kBAAkB,6DAClB,WACF;AAAA;AAAA,MAEJ,EAAO;AAAA,QACL,IAAI,QAAQ;AAAA;AAAA,IAEhB;AAAA,IAEA,IAAI,OAAO,GAAG,iBAAiB,WAAW;AAAA,MACxC,MAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAAA,IACA,OAAO,OAAO;AAAA,IACd,QAAQ,KAAK,8CAA8C,OAAO,KAAK;AAAA;AAAA;AAI3E,SAAS,gBAAmB,CAAC,KAAa,OAAU,OAAe,SAA+B;AAAA,EAChG,IAAI;AAAA,IACF,QAAQ,IAAI;AAAA,OACT,MAAM;AAAA,OACN,GAAG,cAAc;AAAA,IACpB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,QAAQ,KAAK,+CAA+C,OAAO,KAAK;AAAA;AAAA;AAI5E,SAAS,eAAkB,CAAC,KAAa,OAAU,OAAe,MAAyB;AAAA,EACzF,IAAI;AAAA,IACF,KAAK,UAAU;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,QAAQ,KAAK,6CAA6C,OAAO,KAAK;AAAA;AAAA;AAI1E,SAAS,WAAc,CAAC,OAAsB,OAAU,OAAqB;AAAA,EAC3E,MAAM,WAAW;AAAA,EACjB,MAAM,OAAO,QAAQ;AAAA,EACrB,MAAM,QAAQ;AAAA,EACd,MAAM,WAAW;AAAA;AAMZ,SAAS,aAAgB,CAAC,KAAoC;AAAA,EACnE,MAAM,QAAQ,cAAc,IAAI,GAAG;AAAA,EACnC,OAAO,OAAO;AAAA;AAMT,SAAS,kBAAkB,GAAS;AAAA,EACzC,cAAc,MAAM;AAAA;;;AClatB,mBAAS,mBAAqB;AAyBvB,SAAS,SAAyB,CACvC,OACA,SACiB;AAAA,EACjB,QAAQ,QAAQ,SAAS,iBAAiB;AAAA,EAE1C,MAAM,OAAO,QAAc,YAAY;AAAA,EACvC,MAAM,SAAS,QAAuB,MAAM;AAAA,EAC5C,MAAM,QAAQ,QAA0B,SAAS;AAAA,EAEjD,IAAI,aAAa;AAAA,EACjB,IAAI;AAAA,EAEJ,SAAS,QAAQ,CAAC,aAAsB;AAAA,IACtC,MAAM,iBAAiB,EAAE;AAAA,IACzB,OAAO,QAAQ;AAAA,IACf,MAAM,QAAQ;AAAA,IAEd,QAAQ,WAAW,EAAE,KACnB,CAAC,WAAW;AAAA,MACV,IAAI,mBAAmB;AAAA,QAAY;AAAA,MACnC,KAAK,QAAQ;AAAA,MACb,OAAO,QAAQ;AAAA,MACf,MAAM,QAAQ;AAAA,OAEhB,CAAC,QAAQ;AAAA,MACP,IAAI,mBAAmB;AAAA,QAAY;AAAA,MACnC,OAAO,QAAQ;AAAA,MACf,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,KAEpE;AAAA;AAAA,EAIF,QAAO,MAAM;AAAA,IACX,MAAM,cAAc,OAAO;AAAA,IAE3B,IAAI,eAAe,aAAa,UAAU,YAAY,WAAW,GAAG;AAAA,MAClE;AAAA,IACF;AAAA,IACA,aAAa;AAAA,IACb,SAAS,WAAW;AAAA,GACrB;AAAA,EAED,SAAS,OAAO,GAAG;AAAA,IACjB,IAAI,eAAe,WAAW;AAAA,MAC5B,SAAS,UAAU;AAAA,IACrB;AAAA;AAAA,EAGF,OAAO,EAAE,MAAM,QAAQ,OAAO,QAAQ;AAAA;",
   "debugId": "CA95E0087865A45C64756E2164756E21",
   "names": []
 }

package/dist/src/shared/lib/revocation.d.ts

@@ -0,0 +1,126 @@
+/**
+ * revocation — Phase 2 key-revocation flow for $meshState.
+ *
+ * A $meshState deployment is only as secure as the keys it trusts. When a
+ * device is lost, stolen, or compromised, its public key needs to be
+ * removed from every other peer's trust set so that any operations signed
+ * by that key are refused. This module provides the primitive pieces for
+ * that flow: a signed revocation record that names the revoked peer id,
+ * carries the issuer's identity, and travels between peers through the
+ * same channels as any other signed message.
+ *
+ * A RevocationRecord is produced by a peer that has decided to revoke
+ * another peer (typically because the user told their device to do so).
+ * It is then serialised to a binary envelope, broadcast to other peers
+ * through whatever transport is available, and applied to each receiving
+ * keyring via {@link applyRevocation}. Applying a revocation adds the
+ * target peer id to the keyring's {@link MeshKeyring.revokedPeers} set;
+ * the MeshNetworkAdapter then drops all further messages from that peer,
+ * even though the public key is still present in the knownPeers map.
+ *
+ * Signature layer: every revocation is signed by the *issuer's* key. The
+ * receiver verifies the signature against the issuer's public key before
+ * applying. This prevents a peer with no authority from forging a
+ * revocation, at least in the signature-level threat model — a compromised
+ * peer could still forge revocations naming any other peer, which is why
+ * production deployments layer an access-set check on top ("who is
+ * authorised to revoke whom"). That layer is a follow-up; the first cut
+ * is signature-only, and any signed revocation from a known peer is
+ * accepted.
+ *
+ * Why revocations are signed but not encrypted: revocations are public
+ * in the sense that they name "peer X is no longer trusted." There is no
+ * confidentiality requirement — anyone seeing a revocation learns only
+ * that someone has been kicked out, which is already observable from
+ * the absence of their operations. Encrypting them would add cost without
+ * adding security, so the wire format is signed-only.
+ */
+import type { MeshKeyring } from "./mesh-network-adapter";
+import { type SigningKeyPair } from "./signing";
+/** Current revocation-record format version. */
+export declare const REVOCATION_RECORD_VERSION = 1;
+/** Magic header bytes for sanity-checking parsed revocations. ASCII "PRV1". */
+export declare const REVOCATION_MAGIC: Uint8Array<ArrayBuffer>;
+/**
+ * The payload carried inside a signed revocation envelope.
+ */
+export interface RevocationRecord {
+    /** Format version. */
+    version: number;
+    /** The peer id doing the revoking. Becomes the `senderId` of the signed
+     * envelope when the record is serialised. */
+    issuerPeerId: string;
+    /** The peer id being revoked. After a receiver applies this record, its
+     * MeshNetworkAdapter will drop all further messages from this peer. */
+    revokedPeerId: string;
+    /** Unix timestamp (milliseconds) when the revocation was issued. Carried
+     * for audit and for tie-breaking in case an issuer issues multiple
+     * revocations targeting the same peer. */
+    issuedAt: number;
+    /** Optional human-readable reason. Not used by the enforcement layer;
+     * applications can surface it in audit logs. */
+    reason?: string;
+}
+/** Errors thrown by the revocation subsystem. */
+export declare class RevocationError extends Error {
+    readonly code: "unknown-issuer" | "unauthorised-issuer" | "signature-invalid" | "truncated" | "wrong-magic" | "unknown-version" | "not-signed-by-issuer";
+    constructor(message: string, code: RevocationError["code"]);
+}
+/** Options for {@link createRevocation}. */
+export interface CreateRevocationOptions {
+    /** Signing keypair of the issuer. The private key signs the record; the
+     * public key is looked up by the receiver via `issuerPeerId`. */
+    issuer: SigningKeyPair;
+    /** Stable peer id of the issuer. */
+    issuerPeerId: string;
+    /** Peer id to revoke. */
+    revokedPeerId: string;
+    /** Optional human-readable reason. */
+    reason?: string;
+    /** Override the current time. Intended for tests. */
+    now?: () => number;
+}
+/**
+ * Build a fresh {@link RevocationRecord}. The returned record is plain
+ * data; use {@link encodeRevocation} to wrap it in a signed envelope
+ * suitable for transport.
+ */
+export declare function createRevocation(options: CreateRevocationOptions): RevocationRecord;
+/**
+ * Apply a verified revocation to a keyring. Mutates the keyring in place:
+ * adds the target peer id to {@link MeshKeyring.revokedPeers}. The caller
+ * must verify the revocation (via {@link decodeRevocation}) before
+ * applying; this function does not revalidate the signature.
+ */
+export declare function applyRevocation(record: RevocationRecord, keyring: MeshKeyring): void;
+/**
+ * Revoke a peer locally without producing a transportable record. Useful
+ * for the common case where an application decides to drop a peer on this
+ * device without propagating the decision elsewhere (tests, single-device
+ * setups). Peers that want the revocation to spread to other devices
+ * should use {@link createRevocation} + {@link encodeRevocation}.
+ */
+export declare function revokePeerLocally(peerId: string, keyring: MeshKeyring): void;
+/**
+ * Produce a signed, transportable binary blob from a revocation record.
+ * Wraps the serialised payload in a {@link SignedEnvelope} signed by the
+ * issuer's keypair, then encodes the envelope to bytes.
+ */
+export declare function encodeRevocation(record: RevocationRecord, issuer: SigningKeyPair): Uint8Array;
+/**
+ * Parse and verify a signed revocation blob. Returns the decoded record
+ * on success; throws {@link RevocationError} on any failure.
+ *
+ * Verification requires the keyring to already know the issuer's public
+ * key (because Polly does not have a global PKI). If the issuer is
+ * unknown, the caller receives `unknown-issuer` and can decide whether
+ * to cache the revocation for later verification or drop it outright.
+ *
+ * Authorisation: when the keyring has a non-empty
+ * {@link MeshKeyring.revocationAuthority} set, only issuers inside that
+ * set can have their revocations accepted. An issuer outside the set
+ * produces `unauthorised-issuer`. When the authority set is undefined
+ * or empty, any signed revocation from a known peer is accepted — that
+ * is the Phase 2 first-cut default, preserved for backward compatibility.
+ */
+export declare function decodeRevocation(bytes: Uint8Array, keyring: MeshKeyring): RevocationRecord;

package/dist/src/shared/lib/schema-version.d.ts

@@ -0,0 +1,129 @@
+/**
+ * schema-version — plumbing for the shared schema-version migration protocol
+ * used by $peerState and $meshState documents.
+ *
+ * Every peer-first document carries a reserved schema-version field. When a
+ * client loads a document whose stored version is lower than the application's
+ * declared target version, Polly walks the registered migrations in sequence,
+ * mutating the document from one version to the next, and stamps the new
+ * version on the way through. When the stored version is higher, Polly refuses
+ * to load and surfaces a structured error: the application is older than the
+ * document and should be upgraded.
+ *
+ * For concurrent writes across mixed client versions, every op also carries
+ * the schema version under which it was produced. Ops whose version is lower
+ * than the document's current version are rejected at sync time; the peer
+ * producing them needs to upgrade its local replica through the migration
+ * runner before retrying. Ops whose version is higher mean the current peer
+ * is behind the application that produced them; rejecting them prevents
+ * corruption while still surfacing the mismatch to the user.
+ *
+ * This module provides only the plumbing — the reserved field name, the
+ * reader and writer for the version field, the migration runner, and the
+ * op-version compatibility check. Phase 1 and Phase 2 primitives will consume
+ * these helpers; nothing in this file depends on Automerge or any transport.
+ */
+/**
+ * The reserved field name used to store the schema version on every peer-first
+ * document. Applications must not use this field for their own data; the
+ * primitive constructors reserve it at the document boundary.
+ */
+export declare const SCHEMA_VERSION_FIELD: "__schemaVersion";
+/**
+ * The minimal shape every peer-first document satisfies. Applications layer
+ * their own fields on top of this; the reserved {@link SCHEMA_VERSION_FIELD}
+ * is the only required key.
+ */
+export type VersionedDoc = {
+    [SCHEMA_VERSION_FIELD]?: number;
+    [otherField: string]: unknown;
+};
+/**
+ * A single migration step. Mutates the document in place, transforming it
+ * from version (target - 1) to version target. The implementation must be
+ * total (accept any valid v(target-1) document) and deterministic (running
+ * it twice produces the same result). Applications that want return-a-new-doc
+ * semantics should copy inside the migration body rather than returning.
+ */
+export type Migration = (doc: Record<string, unknown>) => void;
+/**
+ * A map from target schema version to the migration that produces it. The
+ * keys must be contiguous from 1 upward through the application's target
+ * version, with no gaps. Gaps throw at migration time.
+ *
+ * @example
+ * ```ts
+ * const migrations: Migrations = {
+ *   1: (doc) => { doc["title"] = ""; },                    // v0 → v1
+ *   2: (doc) => { doc["tags"] = []; },                     // v1 → v2
+ *   3: (doc) => { doc["archived"] = false; delete doc["deleted"]; }, // v2 → v3
+ * };
+ * ```
+ */
+export type Migrations = Record<number, Migration>;
+/**
+ * Error thrown by the schema-version subsystem. The `code` field distinguishes
+ * the failure modes so that callers (primitive constructors, application error
+ * handlers) can decide whether to surface the error to the user, prompt an
+ * upgrade, or drop the offending op.
+ */
+export declare class SchemaVersionError extends Error {
+    readonly code: "doc-ahead-of-app" | "missing-migration" | "op-older-than-doc" | "op-newer-than-doc";
+    readonly docVersion?: number;
+    readonly targetVersion?: number;
+    readonly opVersion?: number;
+    readonly missingVersion?: number;
+    constructor(message: string, code: SchemaVersionError["code"], details?: {
+        docVersion?: number;
+        targetVersion?: number;
+        opVersion?: number;
+        missingVersion?: number;
+    });
+}
+/**
+ * Read the schema version stored on a document. Returns 0 for documents that
+ * have never been stamped (undefined field), which is the canonical "pre-v1"
+ * sentinel — the first migration in a registry is always keyed at 1 and
+ * handles the undefined-to-1 transition.
+ */
+export declare function getDocVersion(doc: unknown): number;
+/**
+ * Stamp a schema version onto a document in place. Primitive constructors call
+ * this after each migration step and once on document creation.
+ */
+export declare function setDocVersion(doc: Record<string, unknown>, version: number): void;
+/**
+ * Run any pending migrations on a document. Mutates the document in place.
+ *
+ * @throws {SchemaVersionError} with code `doc-ahead-of-app` if the document is
+ *   already at a version higher than the application's target.
+ * @throws {SchemaVersionError} with code `missing-migration` if an intermediate
+ *   migration is missing from the registry.
+ */
+export declare function runMigrations(doc: Record<string, unknown>, targetVersion: number, migrations: Migrations): void;
+/**
+ * Result of an op-version compatibility check. Discriminated by the {@link compatible}
+ * field so callers can switch cleanly.
+ */
+export type OpVersionCheck = {
+    compatible: true;
+} | {
+    compatible: false;
+    reason: "op-older-than-doc" | "op-newer-than-doc";
+    opVersion: number;
+    docVersion: number;
+};
+/**
+ * Check whether an incoming op's declared schema version is compatible with
+ * the document's current version. Ops that match are applied; ops that are
+ * older are rejected (the producing peer is behind and should migrate); ops
+ * that are newer are also rejected (the current peer is behind and should
+ * upgrade).
+ */
+export declare function checkOpVersion(opVersion: number, docVersion: number): OpVersionCheck;
+/**
+ * Convenience wrapper around {@link checkOpVersion} that throws a structured
+ * {@link SchemaVersionError} on incompatibility. Useful inside sync handlers
+ * that want to surface the mismatch through their normal error pipeline.
+ */
+export declare function assertOpVersion(opVersion: number, docVersion: number): void;

package/dist/src/shared/lib/signing.d.ts

@@ -0,0 +1,118 @@
+/**
+ * signing — Ed25519 signing and verification for Polly's $meshState
+ * primitive (Phase 2). Wraps tweetnacl with a small Polly-flavoured API
+ * so the rest of the codebase never imports tweetnacl directly.
+ *
+ * Every operation that flows through a $meshState transport is signed by
+ * the originating peer's private key before transmission and verified by
+ * every receiving peer against a known public-key set before being applied.
+ * This is the Byzantine-tolerance mechanism: a peer whose private key is
+ * compromised can be revoked through a further signed operation, after
+ * which honest peers reject anything signed by the revoked key.
+ *
+ * tweetnacl uses the Ed25519 curve. Public keys and signatures are 32 and
+ * 64 bytes respectively, which keeps the per-op overhead small enough that
+ * signing every Automerge sync message is feasible even on mobile.
+ *
+ * The shape of the wrapper:
+ *
+ *   - {@link generateSigningKeyPair} produces a new Ed25519 keypair. The
+ *     private key never leaves the device that generated it; the public
+ *     key is gossiped through the access set.
+ *
+ *   - {@link sign} produces a 64-byte detached signature over a payload.
+ *
+ *   - {@link verify} checks a payload against a signature and a public
+ *     key. Returns boolean rather than throwing so call sites can handle
+ *     verification failure as a normal control-flow case.
+ *
+ *   - {@link signEnvelope} and {@link openEnvelope} package payload + sender
+ *     id + signature into a single binary envelope, which is what the mesh
+ *     network adapter actually puts on the wire.
+ */
+/** Length in bytes of an Ed25519 public key. */
+export declare const PUBLIC_KEY_BYTES = 32;
+/** Length in bytes of an Ed25519 secret (private) key. */
+export declare const SECRET_KEY_BYTES = 64;
+/** Length in bytes of an Ed25519 detached signature. */
+export declare const SIGNATURE_BYTES = 64;
+/**
+ * An Ed25519 keypair. The {@link publicKey} is safe to share with peers;
+ * the {@link secretKey} must never leave the device.
+ */
+export interface SigningKeyPair {
+    publicKey: Uint8Array;
+    secretKey: Uint8Array;
+}
+/**
+ * A signed envelope. The wire format is the concatenation of the sender id
+ * length, the sender id bytes, the signature, and the payload. Callers
+ * shouldn't rely on the exact layout — use {@link signEnvelope} and
+ * {@link openEnvelope} to round-trip.
+ */
+export interface SignedEnvelope {
+    /** Stable sender peer identifier (UTF-8 string). The receiving side uses
+     * this to look up the sender's public key in the document's access set. */
+    senderId: string;
+    /** The original payload bytes, untouched. */
+    payload: Uint8Array;
+    /** 64-byte Ed25519 signature over the payload. */
+    signature: Uint8Array;
+}
+/** Errors thrown by the signing subsystem. */
+export declare class SigningError extends Error {
+    readonly code: "invalid-secret-key" | "invalid-public-key" | "invalid-signature-length" | "envelope-malformed";
+    constructor(message: string, code: SigningError["code"]);
+}
+/**
+ * Generate a fresh Ed25519 keypair. Calls into tweetnacl's CSPRNG.
+ */
+export declare function generateSigningKeyPair(): SigningKeyPair;
+/**
+ * Reconstruct a keypair from an existing 64-byte secret key. Useful for
+ * loading keys from persistent storage. Throws if the key is the wrong size.
+ */
+export declare function signingKeyPairFromSecret(secretKey: Uint8Array): SigningKeyPair;
+/**
+ * Produce a 64-byte detached signature over the given payload using the
+ * supplied secret key.
+ */
+export declare function sign(payload: Uint8Array, secretKey: Uint8Array): Uint8Array;
+/**
+ * Verify a detached signature against a payload and a public key. Returns
+ * true if the signature is valid, false otherwise. Wrong-length keys or
+ * signatures throw {@link SigningError} so callers can distinguish a bad
+ * signature from a misshapen input.
+ */
+export declare function verify(payload: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): boolean;
+/**
+ * Sign a payload and pack it into a {@link SignedEnvelope} along with the
+ * sender id. The mesh network adapter calls this on every outgoing message
+ * before handing it to the transport.
+ */
+export declare function signEnvelope(payload: Uint8Array, senderId: string, secretKey: Uint8Array): SignedEnvelope;
+/**
+ * Verify a {@link SignedEnvelope} against the sender's known public key.
+ * Returns the inner payload on success, throws on failure. The mesh
+ * network adapter calls this on every incoming message before forwarding
+ * the payload to the underlying Automerge sync subsystem.
+ */
+export declare function openEnvelope(envelope: SignedEnvelope, publicKey: Uint8Array): Uint8Array;
+/**
+ * Serialise a {@link SignedEnvelope} to a single binary blob suitable for
+ * transmission over a network adapter. Wire format:
+ *
+ *   [4 bytes BE: senderId byte length]
+ *   [N bytes:    senderId UTF-8]
+ *   [64 bytes:   signature]
+ *   [remaining:  payload]
+ *
+ * Callers should not depend on the exact bytes — they should round-trip
+ * through {@link encodeSignedEnvelope} / {@link decodeSignedEnvelope}.
+ */
+export declare function encodeSignedEnvelope(envelope: SignedEnvelope): Uint8Array;
+/**
+ * Deserialise a binary envelope produced by {@link encodeSignedEnvelope}.
+ * Throws on malformed input.
+ */
+export declare function decodeSignedEnvelope(bytes: Uint8Array): SignedEnvelope;