@glyphteck/veyl 0.60.0 → 0.61.0

package/dist/account.js

@@ -10287,6 +10287,10 @@ function epochChatSettingsId(epochState) {
 "use client";
 var CHAT_ENTRY_VERSION = 4;
 var CHAT_OWNER_EPOCH_ENTRY_VERSION = 2;
+var CHAT_OWNER_RETIREMENT_KINDS = Object.freeze({
+  LEAVE: "leave",
+  REMOVED: "removed"
+});
 function ownChatEntryId(chatPrivateKey, chatId) {
   const key = deriveKey(toBytes32(chatPrivateKey, "chat private key"), "user-chat-entry-id-v4", [cleanChatHex(chatId, "chat id")], 16);
   try {
@@ -10360,6 +10364,20 @@ function normalizeCurrentEpoch(value) {
     settings: normalizeChatSettingsProjection(value.settings)
   };
 }
+function normalizeOwnerRetirement(value, current) {
+  if (value == null)
+    return null;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("invalid chat owner retirement");
+  }
+  const kind = cleanText(value.kind);
+  const epochVersion = value.epochVersion;
+  if (!Object.values(CHAT_OWNER_RETIREMENT_KINDS).includes(kind) || !Number.isSafeInteger(epochVersion) || epochVersion < current.manifest.epochVersion) {
+    throw new Error("invalid chat owner retirement");
+  }
+  const proposalId = kind === CHAT_OWNER_RETIREMENT_KINDS.LEAVE ? cleanTransitionMessageId(value.proposalId) : null;
+  return { kind, epochVersion, proposalId };
+}
 function normalizeOwnerEntry(value) {
   if (!value || typeof value !== "object" || Array.isArray(value) || value.v !== CHAT_ENTRY_VERSION || value.protocol !== CHAT_PROTOCOL_VERSION) {
     throw new Error("invalid chat entry");
@@ -10380,7 +10398,8 @@ function normalizeOwnerEntry(value) {
     saved: value.saved || null,
     startMs: Number.isFinite(value.startMs) ? value.startMs : null,
     deliveryRegistered: value.deliveryRegistered === true,
-    notificationTag: cleanText(value.notificationTag) || null
+    notificationTag: cleanText(value.notificationTag) || null,
+    retirement: normalizeOwnerRetirement(value.retirement, current)
   };
 }
 async function sealOwnChatEntry(chatPrivateKey, entryId, entry) {
@@ -10421,7 +10440,8 @@ function makeOwnChatEntry(epoch, fields = {}) {
     saved: fields.saved || null,
     startMs: Number.isFinite(fields.startMs) ? fields.startMs : null,
     deliveryRegistered: fields.deliveryRegistered === true,
-    notificationTag: cleanText(fields.notificationTag) || null
+    notificationTag: cleanText(fields.notificationTag) || null,
+    retirement: fields.retirement || null
   });
 }
 function normalizeOwnerEpochRecord(value) {
@@ -10429,6 +10449,7 @@ function normalizeOwnerEpochRecord(value) {
     throw new Error("invalid owner epoch entry");
   }
   const manifest = normalizeEpochManifest(value.manifest);
+  const leaveProposalId = value.leaveProposalId == null ? null : cleanTransitionMessageId(value.leaveProposalId);
   return {
     v: CHAT_OWNER_EPOCH_ENTRY_VERSION,
     protocol: CHAT_PROTOCOL_VERSION,
@@ -10438,8 +10459,9 @@ function normalizeOwnerEpochRecord(value) {
     manifest,
     epochSecret: cleanChatHex(value.epochSecret, "epoch secret"),
     cutoffMs: Number.isFinite(value.cutoffMs) ? value.cutoffMs : null,
-    successorTransitionCommitment: cleanTransitionCommitment(value.successorTransitionCommitment),
-    successorTransitionMessageId: cleanTransitionMessageId(value.successorTransitionMessageId)
+    successorTransitionCommitment: leaveProposalId ? null : cleanTransitionCommitment(value.successorTransitionCommitment),
+    successorTransitionMessageId: leaveProposalId ? null : cleanTransitionMessageId(value.successorTransitionMessageId),
+    leaveProposalId
   };
 }
 function makeOwnerEpochRecord(manifest, epochSecret, fields = {}) {
@@ -10450,7 +10472,8 @@ function makeOwnerEpochRecord(manifest, epochSecret, fields = {}) {
     epochSecret: secretHex(epochSecret, "epoch secret"),
     cutoffMs: Number.isFinite(fields.cutoffMs) ? fields.cutoffMs : null,
     successorTransitionCommitment: fields.successorTransitionCommitment,
-    successorTransitionMessageId: fields.successorTransitionMessageId
+    successorTransitionMessageId: fields.successorTransitionMessageId,
+    leaveProposalId: fields.leaveProposalId
   });
 }
 async function sealOwnerEpochRecord(chatPrivateKey, entryId, epochEntryId, record) {
@@ -10602,6 +10625,32 @@ async function mutateOwnChatEntry(cloud, identity, entryId, current, update) {
   const committed = await cloud.user.chats.mutate(identity.uid, entryId, mutation);
   return committed?.result ?? mutation.result ?? null;
 }
+async function retireOwnChatEntry(cloud, identity, entryId, current, fields = {}) {
+  const expectedEpochVersion = fields.expectedEpochVersion;
+  const retirement = fields.retirement;
+  if (!Number.isSafeInteger(expectedEpochVersion) || expectedEpochVersion < 1 || !retirement?.kind || !Number.isSafeInteger(retirement.epochVersion)) {
+    throw new Error("chat owner retirement required");
+  }
+  return mutateOwnChatEntry(cloud, identity, entryId, current, (latest) => {
+    if (latest?.retirement?.kind === retirement.kind && latest.retirement.epochVersion >= retirement.epochVersion) {
+      return { result: latest };
+    }
+    if (latest?.retirement || latest?.current?.manifest?.epochVersion !== expectedEpochVersion) {
+      throw new Error("chat owner epoch changed");
+    }
+    return {
+      entry: {
+        ...latest,
+        routes: {},
+        deliveryRegistered: false,
+        notificationTag: null,
+        retirement
+      },
+      epochs: fields.epoch ? [fields.epoch] : [],
+      mlsDeletes: fields.mlsStateId ? [fields.mlsStateId] : []
+    };
+  });
+}
 async function openOwnChatMutationEntry(identity, entryId, record) {
   if (!record)
     return null;
@@ -11289,48 +11338,6 @@ function cleanFrontier(value) {
     throw new Error("chat receipt checkpoint frontier time required");
   return Object.freeze({ id, at: value.at, seenAt: value.seenAt });
 }
-function maskBytes(memberCount2) {
-  return Math.ceil(memberCount2 / 8);
-}
-function cleanMask(value, memberCount2, label) {
-  const mask = cleanText(value).toLowerCase();
-  const size = maskBytes(memberCount2);
-  if (!new RegExp(`^[0-9a-f]{${size * 2}}$`, "u").test(mask)) {
-    throw new Error(`${label} invalid`);
-  }
-  const unused = size * 8 - memberCount2;
-  if (unused > 0 && Number.parseInt(mask.slice(-2), 16) & (1 << unused) - 1 << 8 - unused) {
-    throw new Error(`${label} overflow`);
-  }
-  return mask;
-}
-function makeMask(indices, memberCount2) {
-  const bytes = new Uint8Array(maskBytes(memberCount2));
-  for (const index of indices)
-    bytes[Math.floor(index / 8)] |= 1 << index % 8;
-  return [...bytes].map((value) => value.toString(16).padStart(2, "0")).join("");
-}
-function maskHas(mask, index) {
-  const offset = Math.floor(index / 8) * 2;
-  return (Number.parseInt(mask.slice(offset, offset + 2), 16) & 1 << index % 8) !== 0;
-}
-function maskCount(mask, memberCount2) {
-  let count = 0;
-  for (let index = 0;index < memberCount2; index += 1) {
-    if (maskHas(mask, index))
-      count += 1;
-  }
-  return count;
-}
-function frontierWithSeenAt(frontier, states) {
-  if (!frontier)
-    return null;
-  return {
-    id: frontier.id,
-    at: frontier.at,
-    seenAt: Math.max(frontier.seenAt, ...states.map((state) => Number(state?.readFrontier?.seenAt) || 0))
-  };
-}
 function normalizeChatReceiptProjection(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("chat receipt checkpoint projection required");
@@ -11339,41 +11346,13 @@ function normalizeChatReceiptProjection(value) {
   if (!Array.isArray(value.revisions) || value.revisions.length !== memberCount2) {
     throw new Error("chat receipt checkpoint revisions invalid");
   }
-  const lowFrontier = cleanFrontier(value.lowFrontier);
-  const nextLowFrontier = cleanFrontier(value.nextLowFrontier);
-  const highFrontier = cleanFrontier(value.highFrontier);
-  const nextHighFrontier = cleanFrontier(value.nextHighFrontier);
-  const lowMask = cleanMask(value.lowMask, memberCount2, "chat receipt checkpoint low mask");
-  const highMask = cleanMask(value.highMask, memberCount2, "chat receipt checkpoint high mask");
-  const nextHighMask = cleanMask(value.nextHighMask, memberCount2, "chat receipt checkpoint next high mask");
-  if (!highFrontier && maskCount(highMask, memberCount2) !== 0) {
-    throw new Error("chat receipt checkpoint high frontier missing");
-  }
-  if (highFrontier && maskCount(highMask, memberCount2) === 0) {
-    throw new Error("chat receipt checkpoint high readers missing");
-  }
-  if (!nextHighFrontier && maskCount(nextHighMask, memberCount2) !== 0) {
-    throw new Error("chat receipt checkpoint next high frontier missing");
-  }
-  if (nextHighFrontier && maskCount(nextHighMask, memberCount2) === 0) {
-    throw new Error("chat receipt checkpoint next high readers missing");
-  }
-  if (lowFrontier && compareReadFrontiers(lowFrontier, highFrontier) > 0) {
-    throw new Error("chat receipt checkpoint frontier order invalid");
-  }
-  if (nextLowFrontier && compareReadFrontiers(nextLowFrontier, highFrontier) > 0) {
-    throw new Error("chat receipt checkpoint next frontier order invalid");
+  if (!Array.isArray(value.frontiers) || value.frontiers.length !== memberCount2) {
+    throw new Error("chat receipt checkpoint frontiers invalid");
   }
   return Object.freeze({
     memberCount: memberCount2,
     revisions: Object.freeze(value.revisions.map(cleanRevision3)),
-    lowFrontier,
-    lowMask,
-    nextLowFrontier,
-    highFrontier,
-    highMask,
-    nextHighFrontier,
-    nextHighMask
+    frontiers: Object.freeze(value.frontiers.map(cleanFrontier))
   });
 }
 function buildChatReceiptProjection(manifest, states) {
@@ -11381,36 +11360,66 @@ function buildChatReceiptProjection(manifest, states) {
   const memberCount2 = cleanCount(members.length);
   const values = members.map((member) => states?.get?.(member.chatPK) || null);
   const revisions = values.map((state) => Math.max(0, Number(state?.revision) || 0));
-  const missing = [];
-  const present = [];
-  values.forEach((state, index) => {
-    if (state?.readFrontier)
-      present.push({ index, state, frontier: state.readFrontier });
-    else
-      missing.push(index);
-  });
-  present.sort((left, right) => compareReadFrontiers(left.frontier, right.frontier));
-  const minimum = present[0]?.frontier || null;
-  const maximum = present.at(-1)?.frontier || null;
-  const lowIndices = missing.length ? missing : present.filter((item) => compareReadFrontiers(item.frontier, minimum) === 0).map((item) => item.index);
-  const nextLowItems = missing.length ? present : present.filter((item) => compareReadFrontiers(item.frontier, minimum) > 0);
-  const nextLow = nextLowItems[0]?.frontier || null;
-  const highItems = maximum ? present.filter((item) => compareReadFrontiers(item.frontier, maximum) === 0) : [];
-  const belowHigh = maximum ? present.filter((item) => compareReadFrontiers(item.frontier, maximum) < 0) : [];
-  const nextHigh = belowHigh.at(-1)?.frontier || null;
-  const nextHighItems = nextHigh ? belowHigh.filter((item) => compareReadFrontiers(item.frontier, nextHigh) === 0) : [];
   return normalizeChatReceiptProjection({
     memberCount: memberCount2,
     revisions,
-    lowFrontier: missing.length ? null : frontierWithSeenAt(minimum, values.filter(Boolean)),
-    lowMask: makeMask(lowIndices, memberCount2),
-    nextLowFrontier: frontierWithSeenAt(nextLow, nextLowItems.map((item) => item.state)),
-    highFrontier: frontierWithSeenAt(maximum, highItems.map((item) => item.state)),
-    highMask: makeMask(highItems.map((item) => item.index), memberCount2),
-    nextHighFrontier: frontierWithSeenAt(nextHigh, nextHighItems.map((item) => item.state)),
-    nextHighMask: makeMask(nextHighItems.map((item) => item.index), memberCount2)
+    frontiers: values.map((state) => state?.readFrontier || null)
   });
 }
+function mergeChatReceiptProjections(current, incoming) {
+  if (!current)
+    return normalizeChatReceiptProjection(incoming);
+  if (!incoming)
+    return normalizeChatReceiptProjection(current);
+  const left = normalizeChatReceiptProjection(current);
+  const right = normalizeChatReceiptProjection(incoming);
+  if (left.memberCount !== right.memberCount) {
+    throw new Error("chat receipt checkpoint member count mismatch");
+  }
+  return normalizeChatReceiptProjection({
+    memberCount: left.memberCount,
+    revisions: left.revisions.map((revision, index) => Math.max(revision, right.revisions[index])),
+    frontiers: left.frontiers.map((frontier, index) => {
+      const other = right.frontiers[index];
+      const comparison = compareReadFrontiers(frontier, other);
+      if (comparison > 0)
+        return frontier;
+      if (comparison < 0)
+        return other;
+      if (!frontier)
+        return null;
+      return {
+        ...frontier,
+        seenAt: Math.max(frontier.seenAt, other.seenAt)
+      };
+    })
+  });
+}
+function mergeChatReceiptCheckpointsByEpoch(current, incoming) {
+  if (!(incoming instanceof Map) || !incoming.size) {
+    return current instanceof Map ? current : new Map;
+  }
+  if (!(current instanceof Map) || !current.size)
+    return new Map(incoming);
+  const merged = new Map(current instanceof Map ? current : []);
+  let changed = false;
+  for (const [epochId, value] of incoming instanceof Map ? incoming : []) {
+    const existing = merged.get(epochId);
+    if (existing === value)
+      continue;
+    const exact = isChatReceiptCheckpoint(existing) && isChatReceiptCheckpoint(value) && existing.epochId === value.epochId && existing.memberChatPKs.length === value.memberChatPKs.length && existing.memberChatPKs.every((chatPK, index) => chatPK === value.memberChatPKs[index]);
+    const next = exact ? Object.freeze({
+      ...value,
+      publishedAt: Math.max(Number(existing.publishedAt) || 0, Number(value.publishedAt) || 0) || null,
+      projection: mergeChatReceiptProjections(existing.projection, value.projection)
+    }) : value;
+    if (exact && sameChatReceiptCheckpoint(existing, next) && existing.publishedAt === next.publishedAt)
+      continue;
+    merged.set(epochId, next);
+    changed = true;
+  }
+  return changed ? merged : current;
+}
 function projectChatReceiptCheckpoint(manifest, value) {
   const projection = normalizeChatReceiptProjection(value?.projection || value);
   if (projection.memberCount !== manifest?.members?.length) {
@@ -11443,13 +11452,14 @@ function chatReceiptCheckpointCoversState(checkpoint, manifest, state) {
 function chatReceiptAllSeenFrontier(checkpoint, authorChatPK) {
   if (!isChatReceiptCheckpoint(checkpoint))
     return null;
-  const { lowFrontier, lowMask, nextLowFrontier, memberCount: memberCount2 } = checkpoint.projection;
-  const authorIndex = checkpoint.memberChatPKs?.indexOf?.(authorChatPK) ?? -1;
-  const lowCount = maskCount(lowMask, memberCount2);
-  if (authorIndex >= 0 && lowCount === 1 && maskHas(lowMask, authorIndex)) {
-    return nextLowFrontier;
-  }
-  return lowFrontier;
+  const readers = checkpoint.projection.frontiers.filter((_frontier, index) => checkpoint.memberChatPKs[index] !== authorChatPK);
+  if (!readers.length || readers.some((frontier) => !frontier))
+    return null;
+  const minimum = readers.reduce((current, frontier) => !current || compareReadFrontiers(frontier, current) < 0 ? frontier : current, null);
+  return Object.freeze({
+    ...minimum,
+    seenAt: Math.max(...readers.map((frontier) => frontier.seenAt))
+  });
 }
 function chatReceiptProjectionFingerprint(value) {
   return JSON.stringify(normalizeChatReceiptProjection(value));
@@ -13563,10 +13573,6 @@ async function prepareOwnerChatMlsSnapshot(identity, entryId, epochState, snapsh
 function ownerChatMlsSnapshotId(identity, entryId, epochState) {
   return stateAddress(identity, entryId, epochState).stateId;
 }
-async function discardOwnerChatMlsSnapshot(cloud, identity, entryId, epochState) {
-  const address = stateAddress(identity, entryId, epochState);
-  await cloud.user.chats.mls.delete(identity.uid, entryId, address.stateId).catch(() => false);
-}
 
 // ../../core/chat/epochs/membership.js
 "use client";
@@ -15162,7 +15168,45 @@ function reviveMarker(marker) {
 function serializeKeys(keys) {
   return [...keySet(keys)].filter(Boolean).sort();
 }
-function serializeBatch(batch, { expiredKeys, deletedKeys } = {}) {
+function cleanReceiptCheckpoint(value) {
+  if (!isChatReceiptCheckpoint(value))
+    return null;
+  const epochId = cleanText(value.epochId);
+  const memberChatPKs = (value.memberChatPKs || []).map(cleanText).filter(Boolean);
+  if (!epochId || memberChatPKs.length !== value.memberChatPKs?.length)
+    return null;
+  try {
+    return projectChatReceiptCheckpoint({
+      epochId,
+      members: memberChatPKs.map((chatPK) => ({ chatPK }))
+    }, value);
+  } catch {
+    return null;
+  }
+}
+function serializeReceiptCheckpoints(statesByEpoch, epochIds) {
+  const allowed = new Set(epochIds || []);
+  const checkpoints = [];
+  for (const [epochId, value] of statesByEpoch instanceof Map ? statesByEpoch : []) {
+    if (allowed.size && !allowed.has(epochId))
+      continue;
+    const checkpoint = cleanReceiptCheckpoint(value);
+    if (checkpoint)
+      checkpoints.push(checkpoint);
+  }
+  return checkpoints.sort((left, right) => left.epochId.localeCompare(right.epochId));
+}
+function reviveReceiptCheckpoints(values) {
+  return new Map((Array.isArray(values) ? values : []).map((value) => cleanReceiptCheckpoint(value)).filter(Boolean).map((checkpoint) => [checkpoint.epochId, checkpoint]));
+}
+function receiptEpochIds(messages, fallbackEpochId = "") {
+  const ids = new Set((messages || []).map((message) => cleanText(message?.epochId)).filter(Boolean));
+  const fallback = cleanText(fallbackEpochId);
+  if (fallback)
+    ids.add(fallback);
+  return ids;
+}
+function serializeBatch(batch, { expiredKeys, deletedKeys, epochIds } = {}) {
   if (!batch && !expiredKeys?.size && !deletedKeys?.size) {
     return null;
   }
@@ -15172,14 +15216,16 @@ function serializeBatch(batch, { expiredKeys, deletedKeys } = {}) {
     ...Number.isSafeInteger(batch?.epochVersion) ? { epochVersion: batch.epochVersion } : {},
     ...Number.isFinite(batch?.firstMs) ? { firstMs: batch.firstMs } : {},
     ...Number.isFinite(batch?.lastMs) ? { lastMs: batch.lastMs } : {},
+    receiptCheckpoints: serializeReceiptCheckpoints(batch?.memberStatesByEpoch, epochIds),
     expiredKeys: serializeKeys(expiredKeys || batch?.expiredKeys),
     deletedKeys: serializeKeys(deletedKeys || batch?.deletedKeys)
   };
 }
-function batchFromLive(latestMessages, expiredKeys, deletedKeys, fallback) {
+function batchFromLive(latestMessages, expiredKeys, deletedKeys, fallback, receiptMessages = latestMessages) {
   const source = latestMessages || [];
+  const epochIds = receiptEpochIds(receiptMessages, fallback?.epochId);
   if (!source.length) {
-    return serializeBatch(fallback, { expiredKeys, deletedKeys });
+    return serializeBatch(fallback, { expiredKeys, deletedKeys, epochIds });
   }
   const firstMs = getMessageOrderMs(source[0]);
   const lastMs = getMessageOrderMs(source[source.length - 1]);
@@ -15187,8 +15233,9 @@ function batchFromLive(latestMessages, expiredKeys, deletedKeys, fallback) {
     firstMs,
     lastMs,
     epochId: fallback?.epochId,
-    epochVersion: fallback?.epochVersion
-  } : fallback, { expiredKeys, deletedKeys });
+    epochVersion: fallback?.epochVersion,
+    memberStatesByEpoch: fallback?.memberStatesByEpoch
+  } : fallback, { expiredKeys, deletedKeys, epochIds });
 }
 function reviveBatch(batch, expiredKeys, deletedKeys) {
   const hasRange = Number.isFinite(batch?.firstMs) && Number.isFinite(batch?.lastMs);
@@ -15200,6 +15247,7 @@ function reviveBatch(batch, expiredKeys, deletedKeys) {
     ...cleanText(batch?.epochId) ? { epochId: cleanText(batch.epochId) } : {},
     ...Number.isSafeInteger(batch?.epochVersion) ? { epochVersion: batch.epochVersion } : {},
     ...hasRange ? { firstMs: batch.firstMs, lastMs: batch.lastMs } : {},
+    memberStatesByEpoch: reviveReceiptCheckpoints(batch?.receiptCheckpoints),
     expiredKeys,
     deletedKeys
   };
@@ -15216,6 +15264,7 @@ function mergeBatches(left, right) {
     ...Number.isSafeInteger(right?.epochVersion ?? left?.epochVersion) ? { epochVersion: right?.epochVersion ?? left?.epochVersion } : {},
     ...firstValues.length ? { firstMs: Math.min(...firstValues) } : {},
     ...lastValues.length ? { lastMs: Math.max(...lastValues) } : {},
+    memberStatesByEpoch: mergeChatReceiptCheckpointsByEpoch(left?.memberStatesByEpoch, right?.memberStatesByEpoch),
     expiredKeys: keySet([...left?.expiredKeys || [], ...right?.expiredKeys || []]),
     deletedKeys: keySet([...left?.deletedKeys || [], ...right?.deletedKeys || []])
   };
@@ -15558,7 +15607,7 @@ function writeCachedMessageState(cache, { stateVersion = null, chatId, selfChatP
       historyStartReached: nextHistoryStartReached === true,
       olderThan: serializeMarker(storedOlderThan),
       olderLoaded: nextOlderLoaded === true || compacted.historyMessages.length > 0,
-      latestServerPage: batchFromLive(compacted.latestMessages, expiredKeys, deletedKeys, nextServerBatch),
+      latestServerPage: batchFromLive(compacted.latestMessages, expiredKeys, deletedKeys, nextServerBatch, compacted.all),
       deletedKeys: serializeKeys(deletedKeys),
       expiredKeys: serializeKeys(expiredKeys),
       historyMessages: compacted.historyMessages,
@@ -17778,10 +17827,16 @@ function createChatLive({
     onActivity?.(entry.chatId, EMPTY_ACTIVITY);
   };
   const enterChatActivity = async (chatId) => {
-    if (!enabled || !chatId || rooms.has(chatId))
+    if (!enabled || !chatId)
       return false;
+    const current = rooms.get(chatId);
+    if (current && !current.closed) {
+      current.retainers += 1;
+      return true;
+    }
     const entry = {
       chatId,
+      retainers: 1,
       epochId: "",
       material: null,
       connection: null,
@@ -17857,6 +17912,9 @@ function createChatLive({
     const entry = rooms.get(chatId);
     if (!entry)
       return false;
+    entry.retainers -= 1;
+    if (entry.retainers > 0)
+      return true;
     rooms.delete(chatId);
     destroy(entry);
     return true;
@@ -17904,13 +17962,26 @@ function createChatLive({
     publish(entry);
     return scheduleReadSnapshot(entry);
   };
+  const flushChatReadFrontier = async (chatId) => {
+    const entry = rooms.get(chatId);
+    if (!entry || entry.closed || !entry.connected || !entry.readFrontier)
+      return false;
+    if (!sendSnapshot(entry))
+      return false;
+    const pending = entry.sendChain;
+    await pending;
+    return !entry.closed;
+  };
   const leaveAllChatActivity = () => {
-    for (const chatId of [...rooms.keys()])
-      leaveChatActivity(chatId);
+    for (const [chatId, entry] of [...rooms]) {
+      rooms.delete(chatId);
+      destroy(entry);
+    }
   };
   return Object.freeze({
     close: leaveAllChatActivity,
     enterChatActivity,
+    flushChatReadFrontier,
     leaveChatActivity,
     leaveAllChatActivity,
     markChatReadFrontier,
@@ -21311,12 +21382,12 @@ function chatConversationStateKey({ chatId, selfChatPublicKey, unlocked, startMs
 
 // ../../core/crypto/chatreceipt.js
 "use client";
-var CHAT_RECEIPT_CHECKPOINT_VERSION = 1;
-var CHAT_RECEIPT_CHECKPOINT_MAX_BYTES = 4096;
+var CHAT_RECEIPT_CHECKPOINT_VERSION = 2;
+var CHAT_RECEIPT_CHECKPOINT_MAX_BYTES = 16 * 1024;
 var CHECKPOINT_BODY_VERSION = 1;
 var CHECKPOINT_BODY_SUITE = 1;
 var CHECKPOINT_HEADER_BYTES = 2 + BOX_NONCE_BYTES;
-var CHECKPOINT_SIGN_SCOPE = encoder.encode("veyl-chat-receipt-checkpoint-v3-sign");
+var CHECKPOINT_SIGN_SCOPE = encoder.encode("veyl-chat-receipt-checkpoint-v4-sign");
 function cleanPositiveInteger(value, label) {
   if (!Number.isSafeInteger(value) || value <= 0)
     throw new Error(`${label} required`);
@@ -21529,6 +21600,7 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
   let closed = false;
   let closing = false;
   let checkpoint = null;
+  let displayedProjection = null;
   let sourceProjection = null;
   let sourceStop = null;
   let sourceLeaseTimer = null;
@@ -21594,8 +21666,10 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
     checkpoint = next;
     if (closing || closed)
       return;
-    if (next)
-      onUpdate?.(projected(next));
+    if (next) {
+      displayedProjection = mergeChatReceiptProjections(displayedProjection, next.projection);
+      onUpdate?.(projected({ ...next, projection: displayedProjection }));
+    }
     if (coversDesired(next)) {
       desiredState = null;
       clearStalledClaimTimer();
@@ -21608,10 +21682,10 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
     else
       armSourceExpiry();
   };
-  const writeCheckpoint = async (mode, expectedVersion = null) => {
-    if (closed || closing)
+  const writeCheckpoint = async (mode, expectedVersion = null, projectionOverride = null) => {
+    if (closed || closing && mode !== "release")
       return false;
-    const desiredProjection = mode === "publish" ? sourceProjection : null;
+    const desiredProjection = mode === "publish" || mode === "release" ? projectionOverride || sourceProjection : null;
     const result = await cloud.chat.memberState.write({
       epochId: epoch.epochId,
       lane: address.lane,
@@ -21622,19 +21696,22 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
         const current = record ? await openChatReceiptCheckpoint(epoch, record).catch(() => null) : null;
         const heldByOther = !holdsLease(current, now) && Number(current?.leaseUntil) > now;
         const stalledTakeover = mode === "claim" && expectedVersion && checkpointVersion(current) === expectedVersion && !coversDesired(current);
+        if (mode === "release" && !holdsLease(current, now)) {
+          return { result: { won: false, checkpoint: current } };
+        }
         if (heldByOther && !stalledTakeover)
           return { result: { won: false, checkpoint: current } };
-        const projection = desiredProjection || current?.projection || buildChatReceiptProjection(epoch.manifest, new Map);
+        const projection = desiredProjection ? mergeChatReceiptProjections(current?.projection, desiredProjection) : current?.projection || buildChatReceiptProjection(epoch.manifest, new Map);
         if (mode === "publish" && holdsLease(current, now) && chatReceiptProjectionFingerprint(current.projection) === chatReceiptProjectionFingerprint(projection)) {
           return { result: { won: true, checkpoint: current } };
         }
         const term = current ? current.term + (!holdsLease(current, now) || Number(current.leaseUntil) <= now ? 1 : 0) : 1;
         const sealed = await sealChatReceiptCheckpoint(epoch, {
-          v: 1,
+          v: CHAT_RECEIPT_CHECKPOINT_VERSION,
           coordinator: epoch.actor.chatPK,
           holder,
           term,
-          leaseUntil: now + RECEIPT_COORDINATOR_LEASE_MS,
+          leaseUntil: mode === "release" ? now : now + RECEIPT_COORDINATOR_LEASE_MS,
           publishedAt: now,
           projection
         });
@@ -21684,10 +21761,10 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
     sourceStop = watchChatMemberStateEvidence(cloud, epochState, ({ states }) => {
       if (closed || closing || !holdsLease(checkpoint))
         return;
-      const nextProjection = buildChatReceiptProjection(epoch.manifest, states);
-      sourceProjection = nextProjection;
+      sourceProjection = mergeChatReceiptProjections(checkpoint?.projection, buildChatReceiptProjection(epoch.manifest, states));
+      displayedProjection = mergeChatReceiptProjections(displayedProjection, sourceProjection);
       onUpdate?.(projectChatReceiptCheckpoint(epoch.manifest, {
-        projection: sourceProjection,
+        projection: displayedProjection,
         publishedAt: Date.now()
       }));
       schedulePublish();
@@ -21777,6 +21854,8 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
       if (closed || closing)
         return;
       closing = true;
+      const finalProjection = sourceProjection;
+      const release = holdsLease(checkpoint) ? track(writeCheckpoint("release", null, finalProjection)) : null;
       watchRun += 1;
       clearClaimTimer();
       clearStalledClaimTimer();
@@ -21790,7 +21869,7 @@ function createChatReceiptSession({ cloud, epochState, identity, onUpdate, onErr
         closing = false;
         closeReceiptEpoch(opened);
       };
-      Promise.allSettled([...operations]).finally(finish);
+      Promise.allSettled([...operations, release].filter(Boolean)).finally(finish);
     }
   };
 }
@@ -22835,6 +22914,55 @@ function createChatMessageBatches({ cloud, media = {}, chatPK, chatSigningPK, ch
   };
 }
 
+// ../../core/chat/retirement.js
+var CHAT_RETIREMENT_ACTIONS = Object.freeze({
+  DELETE: "delete",
+  LEAVE: "leave"
+});
+function planChatRetirement(chat, selfChatPK) {
+  const self = cleanText(selfChatPK);
+  const members = Array.isArray(chat?.members) ? chat.members : [];
+  const remaining = members.filter((member) => cleanText(member?.chatPK) !== self);
+  const direct = chat?.lineage === CHAT_LINEAGES.DIRECT && members.length === 2;
+  return {
+    action: direct || !remaining.length ? CHAT_RETIREMENT_ACTIONS.DELETE : CHAT_RETIREMENT_ACTIONS.LEAVE,
+    remaining
+  };
+}
+async function retireChatMembershipOwner(cloud, identity, entry, fields = {}) {
+  const parent = entry?.current?.manifest;
+  const kind = fields.kind;
+  const epochVersion = fields.epochVersion;
+  if (!parent?.chatId || !identity?.uid || !identity?.chatPrivateKey || !Object.values(CHAT_OWNER_RETIREMENT_KINDS).includes(kind) || !Number.isSafeInteger(epochVersion)) {
+    throw new Error("chat membership retirement required");
+  }
+  const entryId = ownChatEntryId(identity.chatPrivateKey, parent.chatId);
+  const historyId = ownEpochEntryId(identity.chatPrivateKey, parent.chatId, parent.epochId);
+  const cutoffMs = Number.isFinite(fields.cutoffMs) ? fields.cutoffMs : Date.now();
+  const history = makeOwnerEpochRecord(parent, entry.current.epochSecret, {
+    cutoffMs,
+    successorTransitionCommitment: fields.successorTransitionCommitment,
+    successorTransitionMessageId: fields.successorTransitionMessageId,
+    leaveProposalId: fields.leaveProposalId
+  });
+  return retireOwnChatEntry(cloud, identity, entryId, entry, {
+    expectedEpochVersion: parent.epochVersion,
+    retirement: {
+      kind,
+      epochVersion,
+      ...kind === CHAT_OWNER_RETIREMENT_KINDS.LEAVE ? { proposalId: fields.leaveProposalId } : {}
+    },
+    epoch: {
+      id: historyId,
+      record: {
+        body: await sealOwnerEpochRecord(identity.chatPrivateKey, entryId, historyId, history),
+        tsMs: cutoffMs
+      }
+    },
+    mlsStateId: ownerChatMlsSnapshotId(identity, entryId, entry.current)
+  });
+}
+
 // ../../core/chat/inbox.js
 "use client";
 function normalizeChatPreview(record, message) {
@@ -23138,7 +23266,7 @@ function sameRoutes(left, right) {
   return leftKeys.length === rightKeys.length && leftKeys.every((key) => sameRoute(left[key], right[key]));
 }
 function sameStableEntry(left, right) {
-  return !!left && !!right && left.current?.manifest?.epochId === right.current?.manifest?.epochId && left.current?.settings?.digest === right.current?.settings?.digest && sameRoutes(left.routes, right.routes) && left.deliveryRegistered === right.deliveryRegistered && left.notificationTag === right.notificationTag;
+  return !!left && !!right && left.current?.manifest?.epochId === right.current?.manifest?.epochId && left.current?.settings?.digest === right.current?.settings?.digest && sameRoutes(left.routes, right.routes) && left.deliveryRegistered === right.deliveryRegistered && left.notificationTag === right.notificationTag && left.retirement?.kind === right.retirement?.kind && left.retirement?.epochVersion === right.retirement?.epochVersion;
 }
 function projectOwnChatEntry(entry, entryId, userChatPK, ts, activity = {}) {
   const manifest = entry.current.manifest;
@@ -23188,13 +23316,17 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
   }
   let knownMember = entry?.current?.manifest?.members?.find((member) => member.chatPK === payload.senderChatPK) || null;
   const senderProfile = openedProfile || (knownMember ? { ...knownMember, uid: knownMember.uid } : null) || await resolveSenderProfile(cloud, payload);
-  if (entry && payload.epochVersion === entry.current.manifest.epochVersion && cleanText(payload.messageId) && cleanText(currentChat?.inboxMessageId) === cleanText(payload.messageId)) {
+  let restoringMembership = !!entry?.retirement;
+  if (restoringMembership && (payload.kind !== "welcome" || payload.epochVersion <= entry.retirement.epochVersion)) {
+    return "stale";
+  }
+  if (entry && !restoringMembership && payload.epochVersion === entry.current.manifest.epochVersion && cleanText(payload.messageId) && cleanText(currentChat?.inboxMessageId) === cleanText(payload.messageId)) {
     return "duplicate";
   }
-  if (entry && payload.epochVersion < entry.current.manifest.epochVersion) {
+  if (entry && !restoringMembership && payload.epochVersion < entry.current.manifest.epochVersion) {
     return "stale";
   }
-  if (entry && payload.epochVersion > entry.current.manifest.epochVersion) {
+  if (entry && !restoringMembership && payload.epochVersion > entry.current.manifest.epochVersion) {
     let advanced;
     try {
       advanced = await advanceEntryToEpoch(cloud, uid, identity, entry, payload.epochVersion, options);
@@ -23211,11 +23343,16 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
       }
     }
     if (advanced?.removed) {
-      options.onPingDelete?.(payload.chatId);
-      return "deleted";
+      if (payload.kind !== "welcome" || payload.epochVersion <= advanced.entry?.retirement?.epochVersion) {
+        options.onPingDelete?.(payload.chatId);
+        return "deleted";
+      }
+      entry = advanced.entry;
+      restoringMembership = true;
+    } else {
+      entry = advanced;
+      knownMember = entry.current.manifest.members.find((member) => member.chatPK === payload.senderChatPK) || null;
     }
-    entry = advanced;
-    knownMember = entry.current.manifest.members.find((member) => member.chatPK === payload.senderChatPK) || null;
   }
   if (payload.kind === "chat_deleted") {
     if (!entry || entry.current.manifest.epochId !== payload.epochId || entry.current.manifest.epochVersion !== payload.epochVersion || !knownMember) {
@@ -23235,7 +23372,7 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
     return "deleted";
   }
   let epochState = entry?.current || null;
-  if (!entry && payload.kind === "welcome") {
+  if ((!entry || restoringMembership) && payload.kind === "welcome") {
     epochState = await welcomedEpochFromPing(cloud, identity, senderProfile, payload, options);
   } else if (!entry) {
     throw new Error("chat mls welcome required");
@@ -23283,7 +23420,7 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
   const routes = withSenderRoute(entry, payload, senderProfile, epochState);
   const preview = nextPreview(currentChat, record, message, payload);
   const nowMs2 = timestampMs(record?.ts, null) ?? timestampMs(payload.ts, Date.now()) ?? Date.now();
-  const membershipWelcome = !entry && payload.kind === "welcome";
+  const membershipWelcome = (!entry || restoringMembership) && payload.kind === "welcome";
   const projectedTsMs = membershipWelcome ? Date.now() : nowMs2;
   let deliveryRegistered = entry?.deliveryRegistered === true;
   if (!deliveryRegistered)
@@ -23301,7 +23438,8 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
     },
     routes,
     deliveryRegistered,
-    notificationTag: notificationChatTag(epochState.stateCapability, payload.chatId, identity.chatPK)
+    notificationTag: notificationChatTag(epochState.stateCapability, payload.chatId, identity.chatPK),
+    retirement: null
   } : makeOwnChatEntry(epochState, {
     routes,
     startMs: nowMs2,
@@ -23317,6 +23455,9 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
         ...welcomeMlsState ? { mlsWrites: [{ id: welcomeMlsState.stateId, value: welcomeMlsState.value }] } : {}
       };
     }
+    if (membershipWelcome && current.retirement && epochState.manifest.epochVersion <= current.retirement.epochVersion) {
+      throw new Error("chat welcome is not newer than retirement");
+    }
     if (current.current.manifest.epochVersion > epochState.manifest.epochVersion) {
       return { result: current };
     }
@@ -23325,7 +23466,8 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
       current: nextEntry.current,
       routes: withSenderRoute(current, payload, senderProfile, epochState),
       deliveryRegistered: current.deliveryRegistered || nextEntry.deliveryRegistered,
-      notificationTag: nextEntry.notificationTag
+      notificationTag: nextEntry.notificationTag,
+      retirement: membershipWelcome ? null : current.retirement
     };
     if (sameStableEntry(current, candidate) && !welcomeMlsState)
       return { result: current };
@@ -23335,6 +23477,9 @@ async function processOpenedPing(cloud, uid, identity, ping, openedProfile, hint
       ...welcomeMlsState ? { mlsWrites: [{ id: welcomeMlsState.stateId, value: welcomeMlsState.value }] } : {}
     };
   }) : entry;
+  if (committedEntry?.retirement) {
+    throw new Error("chat membership remains retired");
+  }
   if (membershipWelcome && epochState.mlsSnapshot) {
     if (!epochState.mlsKeyPackageLastResort) {
       await cloud.user.mls.keyPackages.deleteState(identity.uid, epochState.mlsKeyPackageId).catch(() => false);
@@ -23439,15 +23584,19 @@ async function applyEpochTransitionAction(cloud, uid, identityValue, entry, acti
         });
         await cloud.delivery.revoke(capability).catch(() => false);
       }
-      if (options.wasRemoved?.(parent.chatId) !== true) {
-        markDiag(options.diag, "chat.owner.unlink", { reason: "membership" });
-        await cloud.user.chats.unlink(uid, entryId);
-      }
+      markDiag(options.diag, "chat.owner.retire", { reason: "membership" });
+      const retiredEntry = await retireChatMembershipOwner(cloud, identity, entry, {
+        kind: CHAT_OWNER_RETIREMENT_KINDS.REMOVED,
+        epochVersion: confirmed.nextEpochVersion,
+        cutoffMs: Date.now(),
+        successorTransitionCommitment: confirmed.transitionCommitment,
+        successorTransitionMessageId: messageId
+      });
       if (leaveProposalId) {
         options.leaveProposalObservedAt?.delete(`${parent.chatId}:${leaveProposalId}`);
       }
       options.onRemoved?.(parent.chatId, confirmed.nextEpochVersion);
-      return { removed: true, chatId: parent.chatId };
+      return { removed: true, chatId: parent.chatId, entry: retiredEntry };
     }
     openStage = "mls-package-open";
     const opened = await openChatMlsEpochPackage(processed, packageRecord, {
@@ -24110,6 +24259,9 @@ async function decryptChatEntry(entryRecord, userChatPK, userPrivKey) {
   if (entry.ownerRevision !== data?.revision) {
     throw new Error("chat owner revision mismatch");
   }
+  if (entry.retirement) {
+    return null;
+  }
   if (entry.protocol !== CHAT_PROTOCOL_VERSION) {
     return null;
   }
@@ -25188,22 +25340,6 @@ function createChatList({
   };
 }
 
-// ../../core/chat/retirement.js
-var CHAT_RETIREMENT_ACTIONS = Object.freeze({
-  DELETE: "delete",
-  LEAVE: "leave"
-});
-function planChatRetirement(chat, selfChatPK) {
-  const self = cleanText(selfChatPK);
-  const members = Array.isArray(chat?.members) ? chat.members : [];
-  const remaining = members.filter((member) => cleanText(member?.chatPK) !== self);
-  const direct = chat?.lineage === CHAT_LINEAGES.DIRECT && members.length === 2;
-  return {
-    action: direct || !remaining.length ? CHAT_RETIREMENT_ACTIONS.DELETE : CHAT_RETIREMENT_ACTIONS.LEAVE,
-    remaining
-  };
-}
-
 // ../../core/utils/appstate.js
 function isForegroundAppState(state) {
   const value = String(state || "").trim().toLowerCase();
@@ -25431,6 +25567,7 @@ function createChatSession({
       deleteAllChats,
       restoreDeletedChat,
       enterChatActivity,
+      flushChatReadFrontier,
       leaveChatActivity,
       markChatReadState,
       markChatRead,
@@ -26357,9 +26494,13 @@ function createChatSession({
           recipientChatPK: chatPK,
           generation: chat.epochVersion
         });
+        await retireChatMembershipOwner(cloud, transitionIdentity(), chat.ownEntry, {
+          kind: CHAT_OWNER_RETIREMENT_KINDS.LEAVE,
+          epochVersion: chat.epochVersion,
+          cutoffMs: Date.now(),
+          leaveProposalId: proposal.message.cid
+        });
         await cloud.delivery.revoke(capability).catch(() => false);
-        await discardOwnerChatMlsSnapshot(cloud, transitionIdentity(), chat.entryId, chat.epochState);
-        await cloud.user.chats.unlink(uid, chat.entryId);
         if (retirementStarted) {
           deleteActions.commitRemovedRetirement(chatId, chat.epochVersion + 1);
           retirementStarted = false;
@@ -26716,11 +26857,12 @@ function createChatSession({
   const dropChat = (...args) => deleteActions.dropChat(...args);
   const dropUnavailableChat = (...args) => deleteActions.dropUnavailableChat(...args);
   const deleteChat = (...args) => deleteActions.deleteChat(...args);
-  const retireChats = async (affected) => {
+  const purgePeerChats = async (affected) => {
     for (const chat of affected) {
       const retirement = planChatRetirement(chat, chatPK);
       if (retirement.action === CHAT_RETIREMENT_ACTIONS.LEAVE) {
         await leaveOwnedChat(chat, { optimistic: false });
+        await cloud.user.chats.unlink(uid, chat.entryId);
       } else {
         await deleteChat(chat, { cleanup: false });
       }
@@ -26730,7 +26872,7 @@ function createChatSession({
   const retirePeerChat = async (peerChatPK, options = {}) => {
     const allChats = await loadAllChats(cloud, uid, chatPK, chatPrivateKey);
     const affected = allChats.filter((chat) => chat?.members?.some((member) => member.chatPK === peerChatPK));
-    await retireChats(affected);
+    await purgePeerChats(affected);
     await options.onDeliveryRevoked?.();
     return affected.length > 0;
   };
@@ -26739,7 +26881,7 @@ function createChatSession({
       return 0;
     const allChats = await loadAllChats(cloud, uid, chatPK, chatPrivateKey);
     const affected = allChats.filter((chat) => chat?.members?.some((member) => member.chatPK !== chatPK && blockedUids.has(member.uid)));
-    return retireChats(affected);
+    return purgePeerChats(affected);
   };
   const restoreDeletedChat = (...args) => deleteActions.restoreDeletedChat(...args);
   const wasChatDeletedLocally = (...args) => deleteActions.wasChatDeletedLocally(...args);
@@ -26753,6 +26895,7 @@ function createChatSession({
     });
     return liveActions.enterChatActivity(chatId);
   };
+  const flushChatReadFrontier = (chatId) => liveActions.flushChatReadFrontier(chatId);
   const leaveChatActivity = (chatId) => {
     const flush = seenActions.flushChatRead(chatId);
     liveActions.leaveChatActivity(chatId);