@interop/was-react 0.20.0 → 0.21.0

package/dist/storage/syncController.js

@@ -1,45 +1,24 @@
-import { createWasReplication, createWasSyncPort, withFeedMasterRead, WasSyncAuthError } from '../sync/index.js';
+import { createSyncController } from '@interop/was-sync/rxdb';
 import { DEFAULT_SYNC_POLL_MS } from '../config.js';
+export { isAuthError } from '@interop/was-sync/rxdb';
 /**
- * Whether a replication error signals expired/revoked storage access. Every WAS
- * request the replication makes funnels through the sync port, which maps a
- * `401` / `403` to a typed {@link WasSyncAuthError} at the boundary. RxDB then
- * wraps that thrown error inside an RxError (nested under `cause` / `errors` /
- * `parameters.errors`), so this walks the error graph looking for a
- * `WasSyncAuthError` rather than re-extracting raw status codes. RxDB's
- * wrapping serializes the handler's thrown error to plain JSON (name, message,
- * stack -- `errorToPlainJson`), so the walk matches the serialized `name`
- * alongside a live instance; an instance only ever appears when a caller hands
- * the port error over directly.
+ * The browser reachability source the core polls and subscribes through. An
+ * `isOnline` that cannot answer reports `true`, since a platform with no
+ * reachability signal must still poll.
  *
- * @param err {unknown}
- * @returns {boolean}
+ * @returns {object}   the core's `onlineSource` port
  */
-export function isAuthError(err) {
-    const seen = new Set();
-    const queue = [err];
-    while (queue.length > 0) {
-        const current = queue.shift();
-        if (current === null || typeof current !== 'object' || seen.has(current)) {
-            continue;
-        }
-        seen.add(current);
-        if (current instanceof WasSyncAuthError ||
-            current.name === 'WasSyncAuthError') {
-            return true;
-        }
-        const candidate = current;
-        if (candidate.cause) {
-            queue.push(candidate.cause);
-        }
-        if (Array.isArray(candidate.errors)) {
-            queue.push(...candidate.errors);
-        }
-        if (Array.isArray(candidate.parameters?.errors)) {
-            queue.push(...candidate.parameters.errors);
+function browserOnlineSource() {
+    return {
+        isOnline: () => typeof navigator === 'undefined' || navigator.onLine !== false,
+        subscribe: onOnline => {
+            if (typeof window === 'undefined') {
+                return () => { };
+            }
+            window.addEventListener('online', onOnline);
+            return () => window.removeEventListener('online', onOnline);
         }
-    }
-    return false;
+    };
 }
 /**
  * A per-session controller around background replication.
@@ -48,10 +27,7 @@ export class SyncController {
     #collections;
     #sync;
     #syncStatus;
-    #replications = [];
-    #onlineHandler;
-    #pollTimer;
-    #started = false;
+    #core;
     #stopped = false;
     /**
      * @param options {object}
@@ -67,7 +43,12 @@ export class SyncController {
     }
     /**
      * Starts background replication for every entity collection covered by the
-     * grant set. Idempotent (a no-op if already running).
+     * grant set. Idempotent (a no-op if already running, or if `stop()` has
+     * already run: `stop()` is terminal, so a logout that raced an in-flight
+     * session bootstrap never spins up replications against a closed database).
+     *
+     * A failed bring-up rethrows, with every collection's status left at `error`,
+     * so the caller's bootstrap can surface it.
      *
      * @param options {object}
      * @param options.remoteStore {WasRemoteStore}
@@ -80,123 +61,72 @@ export class SyncController {
      * @returns {Promise<void>}
      */
     async start({ remoteStore, localStore, onRemoteChange, onAuthError }) {
-        // `stop()` is terminal: a controller stopped before `start()` ran (a logout
-        // that raced an in-flight session bootstrap) must never spin up
-        // replications against the now-closed database.
-        if (this.#started || this.#stopped) {
+        if (this.#core || this.#stopped) {
             return;
         }
-        this.#started = true;
         const setStatus = this.#syncStatus.getState().setStatus;
-        const batchSize = this.#sync.batchSize;
-        const retryMs = this.#sync.retryMs;
-        const pollMs = this.#sync.pollMs ?? DEFAULT_SYNC_POLL_MS;
-        try {
-            for (const { key, id } of this.#collections) {
-                const capability = remoteStore.collectionCapability(id);
-                // A collection the grant set does not cover would otherwise sync with no
-                // capability and draw a fail-closed 403, tripping the session-wide
-                // "storage access expired" banner. Skip it (and flag it) instead so an
-                // uncovered collection never masquerades as expired access.
-                if (!capability) {
-                    console.warn(`Skipping sync for "${id}": no delegated capability covers it.`);
-                    setStatus(key, 'error');
-                    continue;
-                }
-                setStatus(key, 'idle');
-                // Wrap the verbatim port so the 412 conflict re-read resolves `version`
-                // from the changes-feed body (CORS hides the `GET` ETag cross-origin).
-                const wasPort = withFeedMasterRead(createWasSyncPort({
-                    was: remoteStore.was,
-                    spaceId: remoteStore.spaceId,
-                    collectionId: id,
-                    capability
-                }));
-                const state = createWasReplication({
-                    rxCollection: localStore.rxCollection(key),
-                    wasPort,
-                    replicationIdentifier: `was-sync:${remoteStore.serverUrl}:${remoteStore.spaceId}:${id}`,
-                    ...(batchSize !== undefined && { batchSize }),
-                    ...(retryMs !== undefined && { retryTime: retryMs })
-                });
-                const subscriptions = [
-                    state.active$.subscribe(active => {
-                        setStatus(key, active ? 'syncing' : 'synced');
-                    }),
-                    state.error$.subscribe(err => {
-                        console.error(`Sync error for "${id}":`, err);
-                        setStatus(key, 'error');
-                        if (onAuthError && isAuthError(err)) {
-                            onAuthError();
-                        }
-                    })
-                ];
-                if (onRemoteChange) {
-                    subscriptions.push(localStore
-                        .rxCollection(key)
-                        .$.subscribe(event => onRemoteChange(key, event)));
-                }
-                this.#replications.push({ state, subscriptions });
+        // A collection the grant set does not cover would otherwise sync with no
+        // capability and draw a fail-closed 403, tripping the session-wide
+        // "storage access expired" banner. Flag it and keep it out of the port
+        // instead, so an uncovered collection never masquerades as expired access.
+        // The core makes the same call, but only for a port whose OTHER entries
+        // carry a capability: it cannot tell an all-uncovered delegated port from
+        // a wallet's root-capability port, and every session here is delegated.
+        const covered = [];
+        for (const { key, id } of this.#collections) {
+            const capability = remoteStore.collectionCapability(id);
+            if (!capability) {
+                console.warn(`Skipping sync for "${id}": no delegated capability covers it.`);
+                setStatus(key, 'error');
+                continue;
             }
-            this.#onlineHandler = () => this.reSync();
-            window.addEventListener('online', this.#onlineHandler);
-            // The pull side has no server-side live stream, so an already-open session
-            // would otherwise never see another device's edits. A low-frequency
-            // periodic reSync polls the changes feed so multi-device edits converge
-            // live (the change subscriptions above then patch the stores).
-            if (pollMs > 0) {
-                this.#pollTimer = setInterval(() => this.reSync(), pollMs);
+            covered.push({ key, id, capability });
+        }
+        this.#core = createSyncController({
+            port: {
+                wasClient: remoteStore.was,
+                spaceId: remoteStore.spaceId,
+                serverUrl: remoteStore.serverUrl,
+                collections: covered,
+                rxCollection: key => localStore.rxCollection(key),
+                // The 412 conflict re-read resolves `version` from the changes-feed
+                // body: CORS hides the `GET` ETag cross-origin, which is this
+                // library's deployment shape.
+                feedPrimaryRead: true,
+                // A `401` / `403` / the server's masked `404` must arrive typed, or
+                // `onAuthError` could never fire.
+                mapAuthErrors: true,
+                ...(this.#sync.batchSize !== undefined && {
+                    batchSize: this.#sync.batchSize
+                }),
+                ...(this.#sync.retryMs !== undefined && {
+                    retryTime: this.#sync.retryMs
+                })
+            },
+            // The core delivers the logical key first and the WAS id second; the
+            // status store is keyed on the logical key, since two registry entries
+            // may share one WAS id.
+            onStatus: (key, _collectionId, status) => setStatus(key, status),
+            ...(onAuthError && { onAuthError }),
+            ...(onRemoteChange && { onRemoteChange }),
+            onlineSource: browserOnlineSource(),
+            pollMs: this.#sync.pollMs ?? DEFAULT_SYNC_POLL_MS,
+            log: {
+                warn: (message, meta) => console.warn(message, meta),
+                error: (message, meta) => console.error(message, meta)
             }
+        });
+        try {
+            await this.#core.start();
         }
         catch (err) {
-            console.error('Failed to start sync controller:', err);
-            // Unwind the partial bring-up WITHOUT `stop()`: its terminal `#stopped`
-            // latch would permanently prevent a later `start()` on this session, and
-            // its status reset would leave the rollup reporting "Local only" over a
-            // wallet-connected session that failed to start replicating. Instead the
-            // per-collection statuses are left at `error` (visible in the rollup)
-            // and the error RETHROWS so the caller's bootstrap promise rejects and
-            // the session can surface it.
-            await this.#teardownReplications();
-            this.#started = false;
-            for (const { key } of this.#collections) {
-                setStatus(key, 'error');
-            }
+            // The core already unwound and flagged every collection; drop the
+            // instance so this session's controller is not left holding a core it
+            // can neither start nor usefully stop, and rethrow.
+            this.#core = undefined;
             throw err;
         }
     }
-    /**
-     * The shared release path behind the failed-bring-up unwind and {@link stop}:
-     * drops the `online` listener, clears the poll timer, unsubscribes every
-     * per-collection subscription, and cancels every replication. What each caller
-     * does AFTER this differs (the unwind leaves the per-collection statuses at
-     * `error` and rethrows; `stop()` resets the status store behind its terminal
-     * latch), so the divergence stays at the call sites.
-     *
-     * @returns {Promise<void>}
-     */
-    async #teardownReplications() {
-        if (this.#onlineHandler) {
-            window.removeEventListener('online', this.#onlineHandler);
-            this.#onlineHandler = undefined;
-        }
-        if (this.#pollTimer) {
-            clearInterval(this.#pollTimer);
-            this.#pollTimer = undefined;
-        }
-        for (const { state, subscriptions } of this.#replications) {
-            for (const subscription of subscriptions) {
-                subscription.unsubscribe();
-            }
-            try {
-                await state.cancel();
-            }
-            catch (err) {
-                console.error('Error cancelling replication:', err);
-            }
-        }
-        this.#replications = [];
-    }
     /**
      * Triggers an immediate replication cycle on every running collection, rather
      * than waiting for RxDB's next scheduled tick. Fire-and-forget.
@@ -204,23 +134,20 @@ export class SyncController {
      * @returns {void}
      */
     reSync() {
-        for (const { state } of this.#replications) {
-            state.reSync();
-        }
+        this.#core?.reSync();
     }
     /**
      * Stops replication and releases resources (the database is owned by the
-     * caller). Idempotent.
+     * caller). Idempotent, and terminal: a later `start()` is refused.
      *
      * @returns {Promise<void>}
      */
     async stop() {
-        // Latch first so a concurrent `start()` (a logout racing the session
-        // bootstrap) sees the controller as terminally stopped and bails.
         this.#stopped = true;
-        await this.#teardownReplications();
+        const core = this.#core;
+        this.#core = undefined;
+        await core?.stop();
         this.#syncStatus.getState().reset();
-        this.#started = false;
     }
 }
 //# sourceMappingURL=syncController.js.map

package/dist/storage/syncController.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncController.js","sourceRoot":"","sources":["../../src/storage/syncController.ts"],"names":[],"mappings":"AAgCA,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAGjB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,oBAAoB,EAGrB,MAAM,cAAc,CAAA;AAUrB;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAA;IAC/B,MAAM,KAAK,GAAc,CAAC,GAAG,CAAC,CAAA;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC7B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjB,IACE,OAAO,YAAY,gBAAgB;YAClC,OAA8B,CAAC,IAAI,KAAK,kBAAkB,EAC3D,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,SAAS,GAAG,OAIjB,CAAA;QACD,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IACzB,YAAY,CAAuB;IACnC,KAAK,CAAe;IACpB,WAAW,CAAiB;IAC5B,aAAa,GAGR,EAAE,CAAA;IACP,cAAc,CAAa;IAC3B,UAAU,CAAiC;IAC3C,QAAQ,GAAG,KAAK,CAAA;IAChB,QAAQ,GAAG,KAAK,CAAA;IAEhB;;;;;;OAMG;IACH,YAAY,EACV,WAAW,EACX,UAAU,EACV,IAAI,EAKL;QACC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAA;QAC/B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,KAAK,CAAC,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,WAAW,EASZ;QACC,4EAA4E;QAC5E,gEAAgE;QAChE,gDAAgD;QAChD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,OAAM;QACR,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAA;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAA;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAA;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,oBAAoB,CAAA;QAExD,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAA;gBACvD,yEAAyE;gBACzE,mEAAmE;gBACnE,uEAAuE;gBACvE,4DAA4D;gBAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,CAAC,IAAI,CACV,sBAAsB,EAAE,uCAAuC,CAChE,CAAA;oBACD,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;oBACvB,SAAQ;gBACV,CAAC;gBACD,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;gBACtB,wEAAwE;gBACxE,uEAAuE;gBACvE,MAAM,OAAO,GAAG,kBAAkB,CAChC,iBAAiB,CAAC;oBAChB,GAAG,EAAE,WAAW,CAAC,GAAG;oBACpB,OAAO,EAAE,WAAW,CAAC,OAAO;oBAC5B,YAAY,EAAE,EAAE;oBAChB,UAAU;iBACX,CAAC,CACH,CAAA;gBACD,MAAM,KAAK,GAAG,oBAAoB,CAAC;oBACjC,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC;oBAC1C,OAAO;oBACP,qBAAqB,EAAE,YAAY,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,OAAO,IAAI,EAAE,EAAE;oBACvF,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;oBAC7C,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;iBACrD,CAAC,CAAA;gBAEF,MAAM,aAAa,GAAqB;oBACtC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;wBAC/B,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;oBAC/C,CAAC,CAAC;oBACF,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;wBAC3B,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;wBAC7C,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;wBACvB,IAAI,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;4BACpC,WAAW,EAAE,CAAA;wBACf,CAAC;oBACH,CAAC,CAAC;iBACH,CAAA;gBACD,IAAI,cAAc,EAAE,CAAC;oBACnB,aAAa,CAAC,IAAI,CAChB,UAAU;yBACP,YAAY,CAAC,GAAG,CAAC;yBACjB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CACpD,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;YACnD,CAAC;YAED,IAAI,CAAC,cAAc,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;YACzC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;YAEtD,2EAA2E;YAC3E,oEAAoE;YACpE,wEAAwE;YACxE,+DAA+D;YAC/D,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAA;YACtD,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,8BAA8B;YAC9B,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAA;YAClC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;YACrB,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACxC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YACzB,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,qBAAqB;QACzB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;YACzD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC7B,CAAC;QACD,KAAK,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;gBACzC,YAAY,CAAC,WAAW,EAAE,CAAA;YAC5B,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,EAAE,CAAA;IACzB,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3C,KAAK,CAAC,MAAM,EAAE,CAAA;QAChB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI;QACR,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAA;QAClC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;IACvB,CAAC;CACF"}
+{"version":3,"file":"syncController.js","sourceRoot":"","sources":["../../src/storage/syncController.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAI7D,OAAO,EACL,oBAAoB,EAGrB,MAAM,cAAc,CAAA;AAKrB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAEpD;;;;;;GAMG;AACH,SAAS,mBAAmB;IAI1B,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CACb,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK;QAChE,SAAS,EAAE,QAAQ,CAAC,EAAE;YACpB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,OAAO,GAAG,EAAE,GAAE,CAAC,CAAA;YACjB,CAAC;YACD,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC3C,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC7D,CAAC;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IACzB,YAAY,CAAuB;IACnC,KAAK,CAAe;IACpB,WAAW,CAAiB;IAC5B,KAAK,CAAqB;IAC1B,QAAQ,GAAG,KAAK,CAAA;IAEhB;;;;;;OAMG;IACH,YAAY,EACV,WAAW,EACX,UAAU,EACV,IAAI,EAKL;QACC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAA;QAC/B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,KAAK,CAAC,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,WAAW,EASZ;QACC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAM;QACR,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAA;QACvD,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,OAAO,GAA0D,EAAE,CAAA;QACzE,KAAK,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAA;YACvD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CACV,sBAAsB,EAAE,uCAAuC,CAChE,CAAA;gBACD,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBACvB,SAAQ;YACV,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;QACvC,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC;YAChC,IAAI,EAAE;gBACJ,SAAS,EAAE,WAAW,CAAC,GAAG;gBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,WAAW,EAAE,OAAO;gBACpB,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC;gBACjD,oEAAoE;gBACpE,8DAA8D;gBAC9D,8BAA8B;gBAC9B,eAAe,EAAE,IAAI;gBACrB,oEAAoE;gBACpE,kCAAkC;gBAClC,aAAa,EAAE,IAAI;gBACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI;oBACxC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;iBAChC,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI;oBACtC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;iBAC9B,CAAC;aACH;YACD,qEAAqE;YACrE,uEAAuE;YACvE,wBAAwB;YACxB,QAAQ,EAAE,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC;YAChE,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;YACnC,GAAG,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC;YACzC,YAAY,EAAE,mBAAmB,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,oBAAoB;YACjD,GAAG,EAAE;gBACH,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;gBACpD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;aACvD;SACF,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kEAAkE;YAClE,sEAAsE;YACtE,oDAAoD;YACpD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;YACtB,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAA;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;QACtB,MAAM,IAAI,EAAE,IAAI,EAAE,CAAA;QAClB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAA;IACrC,CAAC;CACF"}

package/dist/storage/syncStatusStore.d.ts

@@ -10,14 +10,16 @@
  * provider. In-memory only, like the session -- reset on logout.
  */
 import { type StoreApi } from 'zustand/vanilla';
+import type { SyncStatus } from '@interop/was-client/sync';
 /**
- * A single collection's replication status:
- * - `idle`    -- configured but no cycle has run yet
- * - `syncing` -- a pull/push cycle is in flight
- * - `synced`  -- last cycle completed without error
- * - `error`   -- last cycle failed (RxDB is backing off / will retry)
+ * A single collection's replication status, re-exported from the client's
+ * closed vocabulary (`idle` -- configured but no cycle has run yet; `syncing`
+ * -- a pull/push cycle is in flight; `synced` -- last cycle completed without
+ * error; `error` -- last cycle failed and RxDB is backing off). The client owns
+ * the type so the replication driver and the wallets' own sync engine report
+ * the same four strings.
  */
-export type SyncStatus = 'idle' | 'syncing' | 'synced' | 'error';
+export type { SyncStatus };
 interface SyncStatusState {
     /**
      * Keyed by the registry's LOGICAL collection key (`WasCollectionConfig.key`,
@@ -61,5 +63,4 @@ export declare function deriveSyncRollup(statuses: SyncStatus[]): {
     label: string;
     title: string;
 };
-export {};
 //# sourceMappingURL=syncStatusStore.d.ts.map

package/dist/storage/syncStatusStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncStatusStore.d.ts","sourceRoot":"","sources":["../../src/storage/syncStatusStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE5D;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA;AAEhE,UAAU,eAAe;IACvB;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACpC,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IAC9D,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAA;AAEvD;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,CASvD;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEnE;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG;IACxD,KAAK,EAAE,UAAU,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd,CA2BA"}
+{"version":3,"file":"syncStatusStore.d.ts","sourceRoot":"","sources":["../../src/storage/syncStatusStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAE1D;;;;;;;GAOG;AACH,YAAY,EAAE,UAAU,EAAE,CAAA;AAE1B,UAAU,eAAe;IACvB;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACpC,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IAC9D,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAA;AAEvD;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,CASvD;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEnE;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG;IACxD,KAAK,EAAE,UAAU,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd,CA2BA"}

package/dist/storage/syncStatusStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncStatusStore.js","sourceRoot":"","sources":["../../src/storage/syncStatusStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAiB,MAAM,iBAAiB,CAAA;AA0B5D;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,WAAW,EAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CACnC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACZ,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE;SACzD,CAAC,CAAC;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;KACnC,CAAC,CAAC,CAAA;AACL,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB;IAKrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,mDAAmD;SAC3D,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,+DAA+D;SACvE,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,sDAAsD;SAC9D,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,oDAAoD;KAC5D,CAAA;AACH,CAAC"}
+{"version":3,"file":"syncStatusStore.js","sourceRoot":"","sources":["../../src/storage/syncStatusStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAiB,MAAM,iBAAiB,CAAA;AA4B5D;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,WAAW,EAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CACnC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACZ,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE;SACzD,CAAC,CAAC;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;KACnC,CAAC,CAAC,CAAA;AACL,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB;IAKrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,mDAAmD;SAC3D,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,+DAA+D;SACvE,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,sDAAsD;SAC9D,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,oDAAoD;KAC5D,CAAA;AACH,CAAC"}

package/dist/storage/wasRemoteStore.d.ts

@@ -120,10 +120,16 @@ export declare class WasRemoteStore {
      * Reads one collection's `encryption` descriptor from its Collection Description,
      * invoked with that collection's delegated zcap. Returns the
      * {@link CollectionEncryption} block (a multi-recipient descriptor carries key
-     * epochs) or `undefined` when the collection carries no descriptor. Non-fatal like
-     * the descriptor PUTs: returns `undefined` rather than throwing when no capability
-     * covers the collection or the read fails (offline, unauthorized), so a caller
-     * can fall back to its cached copy.
+     * epochs), or `undefined` only when the answer is genuinely "no descriptor":
+     * no capability covers the collection, the collection is not found (which is
+     * also how WAS answers an unauthorized read), or the description carries no
+     * `encryption` member.
+     *
+     * Any other failure (a dropped connection, a 5xx) is thrown, wrapped with
+     * the collection id. It must NOT read as "no descriptor": a caller that takes
+     * it for one opens the collection under the fail-closed placeholder cipher,
+     * and a correctly provisioned collection then fails its first write or
+     * decrypt for a network hiccup.
      *
      * @param collectionId {string}   the WAS collection id
      * @returns {Promise<CollectionEncryption | undefined>}
@@ -138,9 +144,13 @@ export declare class WasRemoteStore {
      * NOT `Collection.meta()`: that one DECODES `custom` to plaintext, which
      * `applyMeta` cannot consume.
      *
-     * Non-fatal like the descriptor read: answers `undefined` rather than
-     * throwing when no capability covers the collection, the read is unauthorized,
-     * the app is offline, or the backend has no metadata support.
+     * Answers `undefined` for exactly the outcomes that mean "no metadata": no
+     * capability covers the collection, the read answered not-found (which is
+     * also how WAS answers an unauthorized read), or the backend has no metadata
+     * support (`501`). Any other failure is thrown, wrapped with the collection
+     * id, like {@link readCollectionEncryption}: a dropped connection is an
+     * unknown answer, not an absent one, and a caller that took it for "no
+     * schema" would skip the blinded-index install over a guess.
      *
      * @param collectionId {string}   the WAS collection id
      * @returns {Promise<{ custom?: unknown } | undefined>}
@@ -301,9 +311,13 @@ export declare class WasRemoteStore {
  * Deliberately NOT `wasDescriptorSource` from the same subpath: that one
  * describes through the client's root capability, which a relying-party app
  * never holds. Every read here must invoke the per-collection grant, which is
- * exactly what {@link WasRemoteStore.readCollectionEncryption} does (and, like
- * the rest of the descriptor plumbing, it answers `undefined` rather than
- * throwing when the read is unauthorized or the app is offline).
+ * exactly what {@link WasRemoteStore.readCollectionEncryption} does.
+ *
+ * A read that fails for a transient reason is warned about and answered as
+ * `undefined` here: the refresh guard is already spent by the time the source
+ * is consulted, so the decrypt retry fails the same way it would under no
+ * refresh at all, and the caller sees the envelope's own unknown-epoch error
+ * rather than a network one.
  *
  * @param options {object}
  * @param options.remoteStore {WasRemoteStore}

package/dist/storage/wasRemoteStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wasRemoteStore.d.ts","sourceRoot":"","sources":["../../src/storage/wasRemoteStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,KAAK,EACN,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE/D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAA;AASlF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAA;IACpB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAClE,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAwBD,qBAAa,cAAc;;IACzB,SAAgB,GAAG,EAAE,SAAS,CAAA;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAA;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAA;IAS/B,OAAO;IAmBP;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CAAC,UAAU,CAAC,EAChB,MAAM,EACN,UAAU,EACV,WAAgB,EAChB,IAAI,EACL,EAAE;QACD,MAAM,EAAE,YAAY,CAAA;QACpB,UAAU,EAAE,UAAU,CAAA;QACtB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAA;QACnC,IAAI,CAAC,EAAE;YACL,eAAe,EAAE,gBAAgB,CAAA;YACjC,WAAW,EAAE,YAAY,CAAA;SAC1B,CAAA;KACF,GAAG,cAAc;IAyBlB;;;;;;;OAOG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAI7D;;;;;;;;;;;OAWG;IACG,wBAAwB,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAmB5C;;;;;;;;;;;;;;;OAeG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IAkB5C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,uBAAuB,CAC3B,YAAY,EAAE,MAAM,EACpB,EAAE,UAAU,EAAE,EAAE;QAAE,UAAU,EAAE,oBAAoB,GAAG,SAAS,CAAA;KAAE,GAC/D,OAAO,CAAC,iBAAiB,CAAC;IAa7B;;;;;;;;;;;;OAYG;IACG,wBAAwB,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC;IAe7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,qBAAqB,CACzB,YAAY,EAAE,MAAM,EACpB,EAAE,UAAU,EAAE,EAAE;QAAE,UAAU,EAAE,oBAAoB,GAAG,SAAS,CAAA;KAAE,GAC/D,OAAO,CAAC,iBAAiB,CAAC;IAwD7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACG,yBAAyB,CAAC,EAC9B,YAAY,EACZ,MAAM,EACN,KAAK,EACL,MAAM,EACP,EAAE;QACD,YAAY,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyE9B;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EACX,YAAY,EACZ,EAAE,EACH,EAAE;QACD,YAAY,EAAE,MAAM,CAAA;QACpB,EAAE,EAAE,MAAM,CAAA;KACX,GAAG,MAAM;CAiHX;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,cAAc,CAAA;CAC5B,GAAG,0BAA0B,CAM7B"}
+{"version":3,"file":"wasRemoteStore.d.ts","sourceRoot":"","sources":["../../src/storage/wasRemoteStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,KAAK,EACN,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAGL,SAAS,EAEV,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE/D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAA;AASlF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAA;IACpB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAClE,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AA8DD,qBAAa,cAAc;;IACzB,SAAgB,GAAG,EAAE,SAAS,CAAA;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAA;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAA;IAS/B,OAAO;IAmBP;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CAAC,UAAU,CAAC,EAChB,MAAM,EACN,UAAU,EACV,WAAgB,EAChB,IAAI,EACL,EAAE;QACD,MAAM,EAAE,YAAY,CAAA;QACpB,UAAU,EAAE,UAAU,CAAA;QACtB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAA;QACnC,IAAI,CAAC,EAAE;YACL,eAAe,EAAE,gBAAgB,CAAA;YACjC,WAAW,EAAE,YAAY,CAAA;SAC1B,CAAA;KACF,GAAG,cAAc;IAyBlB;;;;;;;OAOG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAI7D;;;;;;;;;;;;;;;;;OAiBG;IACG,wBAAwB,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAwB5C;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IAqB5C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,uBAAuB,CAC3B,YAAY,EAAE,MAAM,EACpB,EAAE,UAAU,EAAE,EAAE;QAAE,UAAU,EAAE,oBAAoB,GAAG,SAAS,CAAA;KAAE,GAC/D,OAAO,CAAC,iBAAiB,CAAC;IAa7B;;;;;;;;;;;;OAYG;IACG,wBAAwB,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC;IAe7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,qBAAqB,CACzB,YAAY,EAAE,MAAM,EACpB,EAAE,UAAU,EAAE,EAAE;QAAE,UAAU,EAAE,oBAAoB,GAAG,SAAS,CAAA;KAAE,GAC/D,OAAO,CAAC,iBAAiB,CAAC;IAwD7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACG,yBAAyB,CAAC,EAC9B,YAAY,EACZ,MAAM,EACN,KAAK,EACL,MAAM,EACP,EAAE;QACD,YAAY,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyE9B;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EACX,YAAY,EACZ,EAAE,EACH,EAAE;QACD,YAAY,EAAE,MAAM,CAAA;QACpB,EAAE,EAAE,MAAM,CAAA;KACX,GAAG,MAAM;CAiHX;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,cAAc,CAAA;CAC5B,GAAG,0BAA0B,CAc7B"}

package/dist/storage/wasRemoteStore.js

@@ -1,7 +1,7 @@
-import { WasClient } from '@interop/was-client';
+import { NotFoundError, NotImplementedError, WasClient, mapError } from '@interop/was-client';
 import { createEdvEncryption } from '@interop/was-client/edv';
 import { collectionItems, collectionMeta, collectionPath, resourcePath, toUrl } from '@interop/was-client/paths';
-import { errorStatus, errorMessage } from '../sync/index.js';
+import { errorStatus, errorMessage } from '@interop/was-client/sync';
 /**
  * Maps one configured index attribute name to the blinded-index attribute path
  * the EDV codec addresses it by. The codec walks the path from the stored
@@ -14,6 +14,36 @@ import { errorStatus, errorMessage } from '../sync/index.js';
 function blindedAttribute(name) {
     return `content.${name}`;
 }
+/**
+ * Runs one read whose failure may mean "absent" rather than "unknown". An
+ * error `isAbsent` accepts answers `undefined`; any other failure is rethrown,
+ * wrapped with `description`, so the caller cannot mistake an unknown answer
+ * (a dropped connection, a 5xx) for an absent one. Retrying is not this
+ * layer's job: the HTTP client underneath already retries the transient
+ * status codes and network errors on every GET.
+ *
+ * @param options {object}
+ * @param options.read {() => Promise<T>}
+ * @param options.isAbsent {(err: Error) => boolean}   which mapped errors mean
+ *   "absent"
+ * @param options.description {string}   what was being read, for the wrap
+ * @returns {Promise<T | undefined>}
+ */
+async function readOrAbsent({ read, isAbsent, description }) {
+    try {
+        return await read();
+    }
+    catch (err) {
+        const mapped = mapError(err);
+        if (isAbsent(mapped)) {
+            return undefined;
+        }
+        // The mapped (typed) error carries the caught one as its own `cause`, so
+        // the chain is intact; the typed one is what callers match on.
+        // eslint-disable-next-line preserve-caught-error
+        throw new Error(`Failed to read ${description}.`, { cause: mapped });
+    }
+}
 export class WasRemoteStore {
     was;
     serverUrl;
@@ -95,10 +125,16 @@ export class WasRemoteStore {
      * Reads one collection's `encryption` descriptor from its Collection Description,
      * invoked with that collection's delegated zcap. Returns the
      * {@link CollectionEncryption} block (a multi-recipient descriptor carries key
-     * epochs) or `undefined` when the collection carries no descriptor. Non-fatal like
-     * the descriptor PUTs: returns `undefined` rather than throwing when no capability
-     * covers the collection or the read fails (offline, unauthorized), so a caller
-     * can fall back to its cached copy.
+     * epochs), or `undefined` only when the answer is genuinely "no descriptor":
+     * no capability covers the collection, the collection is not found (which is
+     * also how WAS answers an unauthorized read), or the description carries no
+     * `encryption` member.
+     *
+     * Any other failure (a dropped connection, a 5xx) is thrown, wrapped with
+     * the collection id. It must NOT read as "no descriptor": a caller that takes
+     * it for one opens the collection under the fail-closed placeholder cipher,
+     * and a correctly provisioned collection then fails its first write or
+     * decrypt for a network hiccup.
      *
      * @param collectionId {string}   the WAS collection id
      * @returns {Promise<CollectionEncryption | undefined>}
@@ -108,18 +144,22 @@ export class WasRemoteStore {
         if (!capability) {
             return undefined;
         }
-        try {
-            const response = await this.was.request({
-                capability,
-                path: collectionPath(this.spaceId, collectionId),
-                method: 'GET'
-            });
-            const description = response.data;
-            return description?.encryption;
-        }
-        catch {
-            return undefined;
-        }
+        return await readOrAbsent({
+            read: async () => {
+                const response = await this.was.request({
+                    capability,
+                    path: collectionPath(this.spaceId, collectionId),
+                    method: 'GET'
+                });
+                const description = response.data;
+                return description?.encryption;
+            },
+            // A not-found (which is also how WAS answers an unauthorized read) is
+            // the one outcome that genuinely means "no descriptor visible to this
+            // app".
+            isAbsent: err => err instanceof NotFoundError,
+            description: `the encryption descriptor of collection "${collectionId}"`
+        });
     }
     /**
      * Reads one collection's stored `/meta` value RAW, invoked with that
@@ -130,9 +170,13 @@ export class WasRemoteStore {
      * NOT `Collection.meta()`: that one DECODES `custom` to plaintext, which
      * `applyMeta` cannot consume.
      *
-     * Non-fatal like the descriptor read: answers `undefined` rather than
-     * throwing when no capability covers the collection, the read is unauthorized,
-     * the app is offline, or the backend has no metadata support.
+     * Answers `undefined` for exactly the outcomes that mean "no metadata": no
+     * capability covers the collection, the read answered not-found (which is
+     * also how WAS answers an unauthorized read), or the backend has no metadata
+     * support (`501`). Any other failure is thrown, wrapped with the collection
+     * id, like {@link readCollectionEncryption}: a dropped connection is an
+     * unknown answer, not an absent one, and a caller that took it for "no
+     * schema" would skip the blinded-index install over a guess.
      *
      * @param collectionId {string}   the WAS collection id
      * @returns {Promise<{ custom?: unknown } | undefined>}
@@ -142,18 +186,19 @@ export class WasRemoteStore {
         if (!capability) {
             return undefined;
         }
-        try {
-            const response = await this.was.request({
-                capability,
-                path: collectionMeta(this.spaceId, collectionId),
-                method: 'GET'
-            });
-            const stored = response.data;
-            return { custom: stored?.custom };
-        }
-        catch {
-            return undefined;
-        }
+        return await readOrAbsent({
+            read: async () => {
+                const response = await this.was.request({
+                    capability,
+                    path: collectionMeta(this.spaceId, collectionId),
+                    method: 'GET'
+                });
+                const stored = response.data;
+                return { custom: stored?.custom };
+            },
+            isAbsent: err => err instanceof NotFoundError || err instanceof NotImplementedError,
+            description: `the metadata of collection "${collectionId}"`
+        });
     }
     /**
      * Best-effort declaration of the `{ encryption: { scheme: 'edv' } }` descriptor on
@@ -508,9 +553,13 @@ export class WasRemoteStore {
  * Deliberately NOT `wasDescriptorSource` from the same subpath: that one
  * describes through the client's root capability, which a relying-party app
  * never holds. Every read here must invoke the per-collection grant, which is
- * exactly what {@link WasRemoteStore.readCollectionEncryption} does (and, like
- * the rest of the descriptor plumbing, it answers `undefined` rather than
- * throwing when the read is unauthorized or the app is offline).
+ * exactly what {@link WasRemoteStore.readCollectionEncryption} does.
+ *
+ * A read that fails for a transient reason is warned about and answered as
+ * `undefined` here: the refresh guard is already spent by the time the source
+ * is consulted, so the decrypt retry fails the same way it would under no
+ * refresh at all, and the caller sees the envelope's own unknown-epoch error
+ * rather than a network one.
  *
  * @param options {object}
  * @param options.remoteStore {WasRemoteStore}
@@ -519,7 +568,13 @@ export class WasRemoteStore {
 export function remoteDescriptorSource({ remoteStore }) {
     return {
         async collectionEncryption({ collectionId }) {
-            return await remoteStore.readCollectionEncryption(collectionId);
+            try {
+                return await remoteStore.readCollectionEncryption(collectionId);
+            }
+            catch (err) {
+                console.warn(`Descriptor refresh for collection "${collectionId}" failed:`, err);
+                return undefined;
+            }
         }
     };
 }