@lunora/client 1.0.0-alpha.20 → 1.0.0-alpha.21

package/dist/auth/index.d.mts

@@ -1,4 +1,4 @@
-import { U as User, L as LunoraClient } from "../packem_shared/lunora-client.d-DVdVtJV8.mjs";
+import { U as User, L as LunoraClient } from "../packem_shared/lunora-client.d-BYkEjCEJ.mjs";
 import '@lunora/runtime';
 interface IdentityStore {
   /** Read the current resolved user, or `null` when signed out / not yet resolved. */

package/dist/auth/index.d.ts

@@ -1,4 +1,4 @@
-import { U as User, L as LunoraClient } from "../packem_shared/lunora-client.d-DVdVtJV8.js";
+import { U as User, L as LunoraClient } from "../packem_shared/lunora-client.d-BYkEjCEJ.js";
 import '@lunora/runtime';
 interface IdentityStore {
   /** Read the current resolved user, or `null` when signed out / not yet resolved. */

package/dist/index.d.mts

@@ -1,6 +1,6 @@
-import { c as PersistenceAdapter, B as BookmarkStorage, F as FunctionReference, A as ArgsOf, M as MutationCallOptions, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, d as ReconnectOptions } from "./packem_shared/lunora-client.d-DVdVtJV8.mjs";
-export { type e as BatchSlot, C as CONFLICT_ERROR_CODE, type f as CachedQuery, type g as ClientMessage, type h as ClientShapeSubscribeMessage, type i as ClientShapeUnsubscribeMessage, type j as ConnectionStatus, D as DEFAULT_MAX_BUFFER, type k as FunctionArgumentDescriptor, type l as FunctionDescriptor, type G as GlobalFacetResult, type m as GlobalFacetValue, type n as GlobalFilterClause, type o as GlobalTableInfo, type p as GlobalTablePage, L as LunoraClient, type q as LunoraClientError, type r as LunoraClientOptions, type s as LunoraErrorCode, type t as MutationSettledEvent, type u as OptimisticLocalStore, type v as OptimisticUpdate, type w as OutboxMutation, type x as OutboxSink, type y as PersistedMutation, type P as Preloaded, type z as RowOp, type E as RpcEnvelope, type H as RpcResponseBody, type I as ScheduleRecord, type J as SchedulerPoolStatus, type K as SchedulerStatus, type N as ServerMessage, type T as ServerPokeEndMessage, type V as ServerPokePartMessage, type W as ServerPokeStartMessage, type X as ShardTrafficEntry, type Y as ShardTrafficResult, type Z as StorageListPage, type _ as StorageObject, type $ as StreamHandle, type a0 as StreamIterable, type a1 as SubscriptionCallback, type S as SubscriptionError, type b as SubscriptionErrorCallback, a2 as SubscriptionRegistry, type a3 as SubscriptionState, type a4 as SyncWatermark, type a as Unsubscribe, type U as User, type a5 as WorkflowInstanceAction, type a6 as WorkflowInstanceDetail, type a7 as WorkflowInstancePage, type a8 as WorkflowInstanceStatus, type a9 as WorkflowInstanceSummary, type aa as WorkflowStepDetail, ab as createLocalStore, ac as createStream, ad as getErrorCode, ae as getRetryAfterMs, af as isConflictError, ag as isForbiddenError, ah as isRateLimitedError, ai as isUnauthorizedError } from "./packem_shared/lunora-client.d-DVdVtJV8.mjs";
-export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-BXFvxpiv.mjs";
+import { c as PersistenceAdapter, B as BookmarkStorage, F as FunctionReference, A as ArgsOf, M as MutationCallOptions, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, d as ReconnectOptions } from "./packem_shared/lunora-client.d-BYkEjCEJ.mjs";
+export { type e as BatchSlot, C as CONFLICT_ERROR_CODE, type f as CachedQuery, type g as ClientMessage, type h as ClientShapeSubscribeMessage, type i as ClientShapeUnsubscribeMessage, type j as ConnectionStatus, D as DEFAULT_MAX_BUFFER, type k as FunctionArgumentDescriptor, type l as FunctionDescriptor, type G as GlobalFacetResult, type m as GlobalFacetValue, type n as GlobalFilterClause, type o as GlobalTableInfo, type p as GlobalTablePage, L as LunoraClient, type q as LunoraClientError, type r as LunoraClientOptions, type s as LunoraErrorCode, type t as MutationSettledEvent, type u as OptimisticLocalStore, type v as OptimisticUpdate, type w as OutboxMutation, type x as OutboxSink, type y as PersistedMutation, type P as Preloaded, type z as RowOp, type E as RpcEnvelope, type H as RpcResponseBody, type I as ScheduleRecord, type J as SchedulerPoolStatus, type K as SchedulerStatus, type N as ServerMessage, type T as ServerPokeEndMessage, type V as ServerPokePartMessage, type W as ServerPokeStartMessage, type X as ShardTrafficEntry, type Y as ShardTrafficResult, type Z as StorageListPage, type _ as StorageObject, type $ as StreamHandle, type a0 as StreamIterable, type a1 as SubscriptionCallback, type S as SubscriptionError, type b as SubscriptionErrorCallback, a2 as SubscriptionRegistry, type a3 as SubscriptionState, type a4 as SyncWatermark, type a as Unsubscribe, type U as User, type a5 as WorkflowInstanceAction, type a6 as WorkflowInstanceDetail, type a7 as WorkflowInstancePage, type a8 as WorkflowInstanceStatus, type a9 as WorkflowInstanceSummary, type aa as WorkflowStepDetail, ab as createLocalStore, ac as createStream, ad as getErrorCode, ae as getRetryAfterMs, af as isConflictError, ag as isForbiddenError, ah as isRateLimitedError, ai as isUnauthorizedError } from "./packem_shared/lunora-client.d-BYkEjCEJ.mjs";
+export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-DrfuisCE.mjs";
 export type { AuthCapabilities, AuthConfigInfo, AuthImpersonation, AuthPage, AuthSession, AuthUser, AuthUserFieldSpec, CronJobInfo, KvKeyEntry, KvKeyListResult, KvNamespaceSummary, KvValueResult, VectorIndexSummary, VectorQueryMatch } from '@lunora/runtime';
 /**
 * The slice of React Native's `AsyncStorage` (or any async key/value store —

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { c as PersistenceAdapter, B as BookmarkStorage, F as FunctionReference, A as ArgsOf, M as MutationCallOptions, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, d as ReconnectOptions } from "./packem_shared/lunora-client.d-DVdVtJV8.js";
-export { type e as BatchSlot, C as CONFLICT_ERROR_CODE, type f as CachedQuery, type g as ClientMessage, type h as ClientShapeSubscribeMessage, type i as ClientShapeUnsubscribeMessage, type j as ConnectionStatus, D as DEFAULT_MAX_BUFFER, type k as FunctionArgumentDescriptor, type l as FunctionDescriptor, type G as GlobalFacetResult, type m as GlobalFacetValue, type n as GlobalFilterClause, type o as GlobalTableInfo, type p as GlobalTablePage, L as LunoraClient, type q as LunoraClientError, type r as LunoraClientOptions, type s as LunoraErrorCode, type t as MutationSettledEvent, type u as OptimisticLocalStore, type v as OptimisticUpdate, type w as OutboxMutation, type x as OutboxSink, type y as PersistedMutation, type P as Preloaded, type z as RowOp, type E as RpcEnvelope, type H as RpcResponseBody, type I as ScheduleRecord, type J as SchedulerPoolStatus, type K as SchedulerStatus, type N as ServerMessage, type T as ServerPokeEndMessage, type V as ServerPokePartMessage, type W as ServerPokeStartMessage, type X as ShardTrafficEntry, type Y as ShardTrafficResult, type Z as StorageListPage, type _ as StorageObject, type $ as StreamHandle, type a0 as StreamIterable, type a1 as SubscriptionCallback, type S as SubscriptionError, type b as SubscriptionErrorCallback, a2 as SubscriptionRegistry, type a3 as SubscriptionState, type a4 as SyncWatermark, type a as Unsubscribe, type U as User, type a5 as WorkflowInstanceAction, type a6 as WorkflowInstanceDetail, type a7 as WorkflowInstancePage, type a8 as WorkflowInstanceStatus, type a9 as WorkflowInstanceSummary, type aa as WorkflowStepDetail, ab as createLocalStore, ac as createStream, ad as getErrorCode, ae as getRetryAfterMs, af as isConflictError, ag as isForbiddenError, ah as isRateLimitedError, ai as isUnauthorizedError } from "./packem_shared/lunora-client.d-DVdVtJV8.js";
-export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-Bb69VRgE.js";
+import { c as PersistenceAdapter, B as BookmarkStorage, F as FunctionReference, A as ArgsOf, M as MutationCallOptions, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, d as ReconnectOptions } from "./packem_shared/lunora-client.d-BYkEjCEJ.js";
+export { type e as BatchSlot, C as CONFLICT_ERROR_CODE, type f as CachedQuery, type g as ClientMessage, type h as ClientShapeSubscribeMessage, type i as ClientShapeUnsubscribeMessage, type j as ConnectionStatus, D as DEFAULT_MAX_BUFFER, type k as FunctionArgumentDescriptor, type l as FunctionDescriptor, type G as GlobalFacetResult, type m as GlobalFacetValue, type n as GlobalFilterClause, type o as GlobalTableInfo, type p as GlobalTablePage, L as LunoraClient, type q as LunoraClientError, type r as LunoraClientOptions, type s as LunoraErrorCode, type t as MutationSettledEvent, type u as OptimisticLocalStore, type v as OptimisticUpdate, type w as OutboxMutation, type x as OutboxSink, type y as PersistedMutation, type P as Preloaded, type z as RowOp, type E as RpcEnvelope, type H as RpcResponseBody, type I as ScheduleRecord, type J as SchedulerPoolStatus, type K as SchedulerStatus, type N as ServerMessage, type T as ServerPokeEndMessage, type V as ServerPokePartMessage, type W as ServerPokeStartMessage, type X as ShardTrafficEntry, type Y as ShardTrafficResult, type Z as StorageListPage, type _ as StorageObject, type $ as StreamHandle, type a0 as StreamIterable, type a1 as SubscriptionCallback, type S as SubscriptionError, type b as SubscriptionErrorCallback, a2 as SubscriptionRegistry, type a3 as SubscriptionState, type a4 as SyncWatermark, type a as Unsubscribe, type U as User, type a5 as WorkflowInstanceAction, type a6 as WorkflowInstanceDetail, type a7 as WorkflowInstancePage, type a8 as WorkflowInstanceStatus, type a9 as WorkflowInstanceSummary, type aa as WorkflowStepDetail, ab as createLocalStore, ac as createStream, ad as getErrorCode, ae as getRetryAfterMs, af as isConflictError, ag as isForbiddenError, ah as isRateLimitedError, ai as isUnauthorizedError } from "./packem_shared/lunora-client.d-BYkEjCEJ.js";
+export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-B-vyHnml.js";
 export type { AuthCapabilities, AuthConfigInfo, AuthImpersonation, AuthPage, AuthSession, AuthUser, AuthUserFieldSpec, CronJobInfo, KvKeyEntry, KvKeyListResult, KvNamespaceSummary, KvValueResult, VectorIndexSummary, VectorQueryMatch } from '@lunora/runtime';
 /**
 * The slice of React Native's `AsyncStorage` (or any async key/value store —

package/dist/index.mjs

@@ -1,15 +1,15 @@
 export { createAsyncStoragePersistence } from './packem_shared/createAsyncStoragePersistence-1Z5BZ8RC.mjs';
 export { default as createInMemoryBookmarkStorage } from './packem_shared/createInMemoryBookmarkStorage-BoN7a7TH.mjs';
-export { applyDelta, isMutationDelta } from './packem_shared/applyDelta-4jFGTPA3.mjs';
+export { applyDelta, isMutationDelta } from './packem_shared/applyDelta-CRKZ1PBt.mjs';
 export { CONFLICT_ERROR_CODE, getErrorCode, getRetryAfterMs, isConflictError, isForbiddenError, isRateLimitedError, isUnauthorizedError } from './packem_shared/CONFLICT_ERROR_CODE-B8gQ8tyU.mjs';
-export { c as createLocalStore } from './packem_shared/local-store-BNgN3Dw3.mjs';
-export { LunoraClient } from './packem_shared/LunoraClient-hrmLXEHd.mjs';
+export { c as createLocalStore } from './packem_shared/local-store-BveBeFEo.mjs';
+export { LunoraClient } from './packem_shared/LunoraClient-kXpHNyaE.mjs';
 export { createMutationRunner } from './packem_shared/createMutationRunner-BqsavzvG.mjs';
 export { createMutatorRunner } from './packem_shared/createMutatorRunner-BETvCd0p.mjs';
 export { O as OfflineQueue } from './packem_shared/offline-queue-B9vfdSqp.mjs';
-export { createInMemoryPersistence, createIndexedDbPersistence } from './packem_shared/createInMemoryPersistence-Ds7z8n8d.mjs';
+export { createInMemoryPersistence, createIndexedDbPersistence } from './packem_shared/createInMemoryPersistence-DZ2VHWgm.mjs';
 export { preloadQuery, preloadedQueryResult } from './packem_shared/preloadQuery-lobFkD2Z.mjs';
-export { createInMemoryQueryCache, createIndexedDbQueryCache, queryCacheKey } from './packem_shared/createInMemoryQueryCache-iWtKPrid.mjs';
+export { createInMemoryQueryCache, createIndexedDbQueryCache, queryCacheKey } from './packem_shared/createInMemoryQueryCache-DiaGZkA2.mjs';
 export { createReconnect } from './packem_shared/createReconnect-Di_-oHH7.mjs';
 export { DEFAULT_MAX_BUFFER, createStream } from './packem_shared/DEFAULT_MAX_BUFFER-7hFnzNk9.mjs';
-export { S as SubscriptionRegistry } from './packem_shared/subscription-DoyO04-2.mjs';
+export { S as SubscriptionRegistry } from './packem_shared/subscription-BjynOXCU.mjs';

package/dist/packem_shared/{LunoraClient-hrmLXEHd.mjs → LunoraClient-kXpHNyaE.mjs}

@@ -1,16 +1,26 @@
 import { LunoraError } from '@lunora/errors';
-import { S as SubscriptionRegistry, s as stableStringify } from './subscription-DoyO04-2.mjs';
+import { S as SubscriptionRegistry, s as stableStringify } from './subscription-BjynOXCU.mjs';
 import createInMemoryBookmarkStorage from './createInMemoryBookmarkStorage-BoN7a7TH.mjs';
-import { isMutationDelta, applyDelta } from './applyDelta-4jFGTPA3.mjs';
-import { a as applyOptimisticLayer, d as dropConfirmedLayers, n as notifySubscription, f as foldOptimistic, c as createLocalStore } from './local-store-BNgN3Dw3.mjs';
+import { isMutationDelta, applyDelta } from './applyDelta-CRKZ1PBt.mjs';
+import { a as applyOptimisticLayer, d as dropConfirmedLayers, n as notifySubscription, f as foldOptimistic, c as createLocalStore } from './local-store-BveBeFEo.mjs';
 import { O as OfflineQueue, n as nextId, i as isStaleVersion, r as reportPersistenceError } from './offline-queue-B9vfdSqp.mjs';
-import { resolvePersistenceAdapter } from './createInMemoryPersistence-Ds7z8n8d.mjs';
-import { resolveQueryCacheAdapter, queryCacheKey } from './createInMemoryQueryCache-iWtKPrid.mjs';
+import { resolvePersistenceAdapter } from './createInMemoryPersistence-DZ2VHWgm.mjs';
+import { resolveQueryCacheAdapter, queryCacheKey } from './createInMemoryQueryCache-DiaGZkA2.mjs';
 import { createReconnect } from './createReconnect-Di_-oHH7.mjs';
 import { createStream } from './DEFAULT_MAX_BUFFER-7hFnzNk9.mjs';
 
 const MAX_BATCH_ENTRIES = 500;
 
+const evictOldestEntry = (map, capacity) => {
+  if (map.size < capacity) {
+    return;
+  }
+  const oldest = map.keys().next().value;
+  if (oldest !== void 0) {
+    map.delete(oldest);
+  }
+};
+
 const TAG = "$lunora.wire$";
 const MAX_DEPTH = 64;
 const MAX_BIGINT_DIGITS = 1024;
@@ -2380,7 +2390,7 @@ class LunoraClient {
    * mutation or leave a partial patch live.
    */
   applyOptimisticUpdate(optimisticUpdate, args, shardKey, optimisticRollbacks, optimisticConfirms) {
-    const { confirms, rollbacks, store } = createLocalStore(this.subscriptions, shardKey, stableStringify);
+    const { confirms, rollbacks, store } = createLocalStore(this.subscriptions, shardKey);
     try {
       optimisticUpdate(store, args);
     } catch {
@@ -2709,6 +2719,13 @@ class LunoraClient {
     conn.wsState = "idle";
     this.emitConnectionStatus();
     this.markShardPendingAck(conn.shardKey);
+    const pendingStreamIds = new Set((conn.pendingStreams ?? []).map((message) => message.id));
+    for (const [id, stream] of this.streams) {
+      if (connectionKey(stream.shardKey) === connectionKey(conn.shardKey) && !pendingStreamIds.has(id)) {
+        stream.handle.fail(new LunoraError("STREAM_DISCONNECTED", "stream terminated: WebSocket disconnected"));
+        this.streams.delete(id);
+      }
+    }
     if (this.WebSocketImpl === void 0) {
       return;
     }
@@ -2881,12 +2898,7 @@ class LunoraClient {
     }
   }
   handlePokeStart(message) {
-    if (this.pokeBuffers.size >= LunoraClient.MAX_POKE_BUFFERS) {
-      const oldest = this.pokeBuffers.keys().next().value;
-      if (oldest !== void 0) {
-        this.pokeBuffers.delete(oldest);
-      }
-    }
+    evictOldestEntry(this.pokeBuffers, LunoraClient.MAX_POKE_BUFFERS);
     this.pokeBuffers.set(message.pokeId, { baseCheckpoint: message.baseCheckpoint, epoch: message.epoch, lastMutationId: /* @__PURE__ */ new Map(), parts: /* @__PURE__ */ new Map() });
   }
   handlePokePart(message) {
@@ -3108,6 +3120,24 @@ class LunoraClient {
     if (token === null) {
       return null;
     }
+    return this.hashToken(token);
+  }
+  /**
+   * Stable token-hash fingerprint of a bearer token (the `&lt;len>:&lt;fnv>:&lt;djb2>`
+   * format a token-stamped queued write carries). Extracted so the replay gate
+   * can recompute the hash of the current credential and recognise a write
+   * stamped under it — even after the fingerprint was relabelled to a subject.
+   *
+   * Two independent 32-bit passes (FNV-1a + djb2) give a ~64-bit digest, so
+   * two distinct equal-length tokens are astronomically unlikely to share a
+   * fingerprint. A single 32-bit hash collides ~1-in-4e9 per equal-length
+   * pair — enough that, on a shared device, user B could hydrate A's cached
+   * reads. Different algorithms (not the same FNV with a different seed, which
+   * would be affine-related) keep the two passes genuinely independent.
+   * Still synchronous (no crypto) and stable across surrogate pairs.
+   */
+  // eslint-disable-next-line class-methods-use-this -- pure helper; a method for locality with identityFingerprint, reads no shared state
+  hashToken(token) {
     let fnv = 2166136261;
     let djb2 = 5381;
     for (let index = 0; index < token.length; index += 1) {
@@ -3118,6 +3148,25 @@ class LunoraClient {
     }
     return `${token.length.toString(36)}:${(fnv >>> 0).toString(36)}:${(djb2 >>> 0).toString(36)}`;
   }
+  /**
+   * True when `stamped` is a token-hash of the SAME credential still held now,
+   * even though the live identity has since been relabelled to a subject. Covers
+   * `setAuthToken(token, userId)` where the subject resolved a tick after the
+   * token was set: a write persisted (or requeued) under the token hash must
+   * still replay — the credential never changed, only its label — instead of
+   * being dropped as an identity mismatch. This is the durable counterpart to
+   * {@link restampQueuedIdentity}, which only relabels the in-memory live stamp
+   * (consumed on the first flush) and never touches `item.identity` or the
+   * persisted record, so a reload or a transient-failure requeue would otherwise
+   * fall back to the stale token-hash and wrongly reject the same user's write.
+   */
+  isSameCredentialUnderTokenHash(stamped) {
+    if (stamped === null || stamped.startsWith("subj:")) {
+      return false;
+    }
+    const token = this.authToken;
+    return token === null ? false : this.hashToken(token) === stamped;
+  }
   /**
    * Drain every in-memory offline write and reject it because the auth
    * identity changed. Durable entries are also dropped from persistence so a
@@ -3246,7 +3295,7 @@ class LunoraClient {
   passesReplayIdentityGate(item, currentIdentity) {
     const liveStamp = item.id === void 0 ? void 0 : this.queuedIdentities.get(item.id);
     const stamped = liveStamp === void 0 ? item.identity : liveStamp;
-    if (stamped !== void 0 && stamped !== currentIdentity) {
+    if (stamped !== void 0 && stamped !== currentIdentity && !this.isSameCredentialUnderTokenHash(stamped)) {
       this.queuedIdentities.delete(item.id ?? "");
       this.unpersist(item.id);
       const error = new Error("offline mutation skipped: auth identity changed before replay");

package/dist/packem_shared/SubscriptionRegistry-DjGKZsqq.mjs

@@ -0,0 +1 @@
+export { S as SubscriptionRegistry } from './subscription-BjynOXCU.mjs';

package/dist/packem_shared/{applyDelta-4jFGTPA3.mjs → applyDelta-CRKZ1PBt.mjs}

@@ -7,14 +7,34 @@ const rowId = (row) => {
   const id = row[ID_FIELD];
   return typeof id === "string" ? id : void 0;
 };
+const isDescending = (list) => {
+  let previous;
+  for (const existingRow of list) {
+    const existing = existingRow[CREATION_FIELD];
+    if (typeof existing !== "number") {
+      continue;
+    }
+    if (previous !== void 0) {
+      if (existing < previous) {
+        return true;
+      }
+      if (existing > previous) {
+        return false;
+      }
+    }
+    previous = existing;
+  }
+  return false;
+};
 const insertionIndex = (list, row) => {
   const creation = row[CREATION_FIELD];
   if (typeof creation !== "number") {
     return list.length;
   }
+  const descending = isDescending(list);
   for (const [index, existingRow] of list.entries()) {
     const existing = existingRow[CREATION_FIELD];
-    if (typeof existing === "number" && existing > creation) {
+    if (typeof existing === "number" && (descending ? existing < creation : existing > creation)) {
       return index;
     }
   }

package/dist/packem_shared/{createInMemoryPersistence-Ds7z8n8d.mjs → createInMemoryPersistence-DZ2VHWgm.mjs}

@@ -1,4 +1,5 @@
 import { LunoraError } from '@lunora/errors';
+import { p as promisifyRequest, c as createWithStore, a as createDatabaseOpener } from './idb-utility-DrSVX43Q.mjs';
 
 const createInMemoryPersistence = () => {
   const entries = /* @__PURE__ */ new Map();
@@ -30,14 +31,6 @@ const createInMemoryPersistence = () => {
 const DEFAULT_DATABASE = "lunora-outbox";
 const DEFAULT_STORE = "offline-mutations";
 const ID_INDEX = "by_id";
-const promisifyRequest = (request) => new Promise((resolve, reject) => {
-  request.addEventListener("success", () => {
-    resolve(request.result);
-  });
-  request.addEventListener("error", () => {
-    reject(request.error ?? new Error("IndexedDB request failed"));
-  });
-});
 const createIndexedDbPersistence = (options = {}) => {
   const factory = options.indexedDB ?? (typeof indexedDB === "undefined" ? void 0 : indexedDB);
   if (!factory) {
@@ -45,46 +38,13 @@ const createIndexedDbPersistence = (options = {}) => {
   }
   const databaseName = options.databaseName ?? DEFAULT_DATABASE;
   const storeName = options.storeName ?? DEFAULT_STORE;
-  let databasePromise;
-  const openDatabase = () => {
-    if (databasePromise) {
-      return databasePromise;
+  const openDatabase = createDatabaseOpener(factory, databaseName, 1, (database) => {
+    if (!database.objectStoreNames.contains(storeName)) {
+      const store = database.createObjectStore(storeName, { autoIncrement: true });
+      store.createIndex(ID_INDEX, "id", { unique: true });
     }
-    databasePromise = new Promise((resolve, reject) => {
-      const request = factory.open(databaseName, 1);
-      request.addEventListener("upgradeneeded", () => {
-        const database = request.result;
-        if (!database.objectStoreNames.contains(storeName)) {
-          const store = database.createObjectStore(storeName, { autoIncrement: true });
-          store.createIndex(ID_INDEX, "id", { unique: true });
-        }
-      });
-      request.addEventListener("success", () => {
-        resolve(request.result);
-      });
-      request.addEventListener("error", () => {
-        reject(request.error ?? new Error("IndexedDB open failed"));
-      });
-    });
-    return databasePromise;
-  };
-  const withStore = async (mode, run) => {
-    const database = await openDatabase();
-    const transaction = database.transaction(storeName, mode);
-    const result = await run(transaction.objectStore(storeName));
-    await new Promise((resolve, reject) => {
-      transaction.addEventListener("complete", () => {
-        resolve();
-      });
-      transaction.addEventListener("error", () => {
-        reject(transaction.error ?? new Error("IndexedDB transaction failed"));
-      });
-      transaction.addEventListener("abort", () => {
-        reject(transaction.error ?? new Error("IndexedDB transaction aborted"));
-      });
-    });
-    return result;
-  };
+  });
+  const withStore = createWithStore(openDatabase, storeName);
   return {
     append: async (mutation) => {
       await withStore("readwrite", (store) => promisifyRequest(store.add(mutation)));

package/dist/packem_shared/{createInMemoryQueryCache-iWtKPrid.mjs → createInMemoryQueryCache-DiaGZkA2.mjs}

@@ -1,4 +1,5 @@
 import { LunoraError } from '@lunora/errors';
+import { p as promisifyRequest, c as createWithStore, a as createDatabaseOpener } from './idb-utility-DrSVX43Q.mjs';
 
 const queryCacheKey = (functionPath, argsKey, shardKey) => `${functionPath}::${argsKey}::${shardKey ?? ""}`;
 const DEFAULT_MAX_ENTRIES = 500;
@@ -41,14 +42,6 @@ const DEFAULT_DATABASE = "lunora-query-cache";
 const DEFAULT_STORE = "query-cache";
 const TS_INDEX = "by_ts";
 const DATABASE_VERSION = 1;
-const promisifyRequest = (request) => new Promise((resolve, reject) => {
-  request.addEventListener("success", () => {
-    resolve(request.result);
-  });
-  request.addEventListener("error", () => {
-    reject(request.error ?? new Error("IndexedDB request failed"));
-  });
-});
 const createIndexedDbQueryCache = (options = {}) => {
   const factory = options.indexedDB ?? (typeof indexedDB === "undefined" ? void 0 : indexedDB);
   if (!factory) {
@@ -57,46 +50,13 @@ const createIndexedDbQueryCache = (options = {}) => {
   const databaseName = options.databaseName ?? DEFAULT_DATABASE;
   const storeName = options.storeName ?? DEFAULT_STORE;
   const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES;
-  let databasePromise;
-  const openDatabase = () => {
-    if (databasePromise) {
-      return databasePromise;
+  const openDatabase = createDatabaseOpener(factory, databaseName, DATABASE_VERSION, (database) => {
+    if (!database.objectStoreNames.contains(storeName)) {
+      const store = database.createObjectStore(storeName, { keyPath: "key" });
+      store.createIndex(TS_INDEX, "ts", { unique: false });
     }
-    databasePromise = new Promise((resolve, reject) => {
-      const request = factory.open(databaseName, DATABASE_VERSION);
-      request.addEventListener("upgradeneeded", () => {
-        const database = request.result;
-        if (!database.objectStoreNames.contains(storeName)) {
-          const store = database.createObjectStore(storeName, { keyPath: "key" });
-          store.createIndex(TS_INDEX, "ts", { unique: false });
-        }
-      });
-      request.addEventListener("success", () => {
-        resolve(request.result);
-      });
-      request.addEventListener("error", () => {
-        reject(request.error ?? new Error("IndexedDB open failed"));
-      });
-    });
-    return databasePromise;
-  };
-  const withStore = async (mode, run) => {
-    const database = await openDatabase();
-    const transaction = database.transaction(storeName, mode);
-    const result = await run(transaction.objectStore(storeName));
-    await new Promise((resolve, reject) => {
-      transaction.addEventListener("complete", () => {
-        resolve();
-      });
-      transaction.addEventListener("error", () => {
-        reject(transaction.error ?? new Error("IndexedDB transaction failed"));
-      });
-      transaction.addEventListener("abort", () => {
-        reject(transaction.error ?? new Error("IndexedDB transaction aborted"));
-      });
-    });
-    return result;
-  };
+  });
+  const withStore = createWithStore(openDatabase, storeName);
   const evict = async (store) => {
     const count = await promisifyRequest(store.count());
     let overflow = count - maxEntries;

package/dist/packem_shared/createLocalStore-jRoqmazl.mjs

@@ -0,0 +1,2 @@
+export { c as createLocalStore } from './local-store-BveBeFEo.mjs';
+import './subscription-BjynOXCU.mjs';

package/dist/packem_shared/{createServerClient-CKKZrXLc.mjs → createServerClient-DF-3mLmb.mjs}

@@ -1,4 +1,4 @@
-import { LunoraClient } from './LunoraClient-hrmLXEHd.mjs';
+import { LunoraClient } from './LunoraClient-kXpHNyaE.mjs';
 
 const createServerClient = (options) => {
   const client = new LunoraClient({ fetch: options.fetch, url: options.url });

package/dist/packem_shared/idb-utility-DrSVX43Q.mjs

@@ -0,0 +1,48 @@
+const promisifyRequest = (request) => new Promise((resolve, reject) => {
+  request.addEventListener("success", () => {
+    resolve(request.result);
+  });
+  request.addEventListener("error", () => {
+    reject(request.error ?? new Error("IndexedDB request failed"));
+  });
+});
+const createDatabaseOpener = (factory, databaseName, version, upgrade) => {
+  let databasePromise;
+  return () => {
+    if (databasePromise) {
+      return databasePromise;
+    }
+    databasePromise = new Promise((resolve, reject) => {
+      const request = factory.open(databaseName, version);
+      request.addEventListener("upgradeneeded", () => {
+        upgrade(request.result);
+      });
+      request.addEventListener("success", () => {
+        resolve(request.result);
+      });
+      request.addEventListener("error", () => {
+        reject(request.error ?? new Error("IndexedDB open failed"));
+      });
+    });
+    return databasePromise;
+  };
+};
+const createWithStore = (open, storeName) => async (mode, run) => {
+  const database = await open();
+  const transaction = database.transaction(storeName, mode);
+  const result = await run(transaction.objectStore(storeName));
+  await new Promise((resolve, reject) => {
+    transaction.addEventListener("complete", () => {
+      resolve();
+    });
+    transaction.addEventListener("error", () => {
+      reject(transaction.error ?? new Error("IndexedDB transaction failed"));
+    });
+    transaction.addEventListener("abort", () => {
+      reject(transaction.error ?? new Error("IndexedDB transaction aborted"));
+    });
+  });
+  return result;
+};
+
+export { createDatabaseOpener as a, createWithStore as c, promisifyRequest as p };

package/dist/packem_shared/{local-store-BNgN3Dw3.mjs → local-store-BveBeFEo.mjs}

@@ -1,3 +1,5 @@
+import { S as SubscriptionRegistry } from './subscription-BjynOXCU.mjs';
+
 const foldOptimistic = (base, layers) => {
   let value = base;
   for (const layer of layers) {
@@ -68,33 +70,26 @@ const dropConfirmedLayers = (state, cursor) => {
   return state.optimisticLayers.length !== before;
 };
 
-const createLocalStore = (subscriptions, shardKey, stableStringify) => {
+const createLocalStore = (subscriptions, shardKey) => {
   const confirms = [];
   const rollbacks = [];
-  const findState = (functionRef, argsKey) => {
-    for (const state of subscriptions.all()) {
-      if (state.fn.__lunoraRef === functionRef && state.shardKey === shardKey && state.argsKey === argsKey) {
-        return state;
-      }
-    }
-    return void 0;
-  };
+  const findState = (functionRef, args) => subscriptions.get(SubscriptionRegistry.key(functionRef, args, shardKey));
   const store = {
     getAllQueries: (function_) => {
       const matches = [];
       for (const state of subscriptions.all()) {
-        if (state.fn.__lunoraRef === function_.__lunoraRef && state.shardKey === shardKey) {
+        if (state.fn.__lunoraRef === function_.__lunoraRef && (state.shardKey ?? "") === (shardKey ?? "")) {
           matches.push({ args: state.args, value: state.lastValue });
         }
       }
       return matches;
     },
     getQuery: (function_, args) => {
-      const state = findState(function_.__lunoraRef, stableStringify(args ?? {}));
+      const state = findState(function_.__lunoraRef, args ?? {});
       return state?.lastValue;
     },
     setQuery: (function_, args, value) => {
-      const state = findState(function_.__lunoraRef, stableStringify(args ?? {}));
+      const state = findState(function_.__lunoraRef, args ?? {});
       if (!state) {
         return;
       }

package/dist/packem_shared/{lunora-client.d-DVdVtJV8.d.mts → lunora-client.d-BYkEjCEJ.d.mts}

@@ -1076,7 +1076,7 @@ type OptimisticUpdate<Args> = (localStore: OptimisticLocalStore, args: Args) =>
 * `confirm` (success) and `rollback` (failure) closures every `setQuery` produced,
 * so the caller settles the whole batch when the mutation does.
 */
-declare const createLocalStore: (subscriptions: SubscriptionRegistry, shardKey: string | undefined, stableStringify: (value: unknown) => string) => {
+declare const createLocalStore: (subscriptions: SubscriptionRegistry, shardKey: string | undefined) => {
   confirms: ((commitCursor: number | undefined) => void)[];
   rollbacks: (() => void)[];
   store: OptimisticLocalStore;
@@ -2412,6 +2412,34 @@ declare class LunoraClient {
   */
   private identityFingerprint;
   /**
+  * Stable token-hash fingerprint of a bearer token (the `&lt;len>:&lt;fnv>:&lt;djb2>`
+  * format a token-stamped queued write carries). Extracted so the replay gate
+  * can recompute the hash of the current credential and recognise a write
+  * stamped under it — even after the fingerprint was relabelled to a subject.
+  *
+  * Two independent 32-bit passes (FNV-1a + djb2) give a ~64-bit digest, so
+  * two distinct equal-length tokens are astronomically unlikely to share a
+  * fingerprint. A single 32-bit hash collides ~1-in-4e9 per equal-length
+  * pair — enough that, on a shared device, user B could hydrate A's cached
+  * reads. Different algorithms (not the same FNV with a different seed, which
+  * would be affine-related) keep the two passes genuinely independent.
+  * Still synchronous (no crypto) and stable across surrogate pairs.
+  */
+  private hashToken;
+  /**
+  * True when `stamped` is a token-hash of the SAME credential still held now,
+  * even though the live identity has since been relabelled to a subject. Covers
+  * `setAuthToken(token, userId)` where the subject resolved a tick after the
+  * token was set: a write persisted (or requeued) under the token hash must
+  * still replay — the credential never changed, only its label — instead of
+  * being dropped as an identity mismatch. This is the durable counterpart to
+  * {@link restampQueuedIdentity}, which only relabels the in-memory live stamp
+  * (consumed on the first flush) and never touches `item.identity` or the
+  * persisted record, so a reload or a transient-failure requeue would otherwise
+  * fall back to the stale token-hash and wrongly reject the same user's write.
+  */
+  private isSameCredentialUnderTokenHash;
+  /**
   * Drain every in-memory offline write and reject it because the auth
   * identity changed. Durable entries are also dropped from persistence so a
   * later `hydrate` can't resurrect another user's writes. Stamps are cleared

package/dist/packem_shared/{lunora-client.d-DVdVtJV8.d.ts → lunora-client.d-BYkEjCEJ.d.ts}

@@ -1076,7 +1076,7 @@ type OptimisticUpdate<Args> = (localStore: OptimisticLocalStore, args: Args) =>
 * `confirm` (success) and `rollback` (failure) closures every `setQuery` produced,
 * so the caller settles the whole batch when the mutation does.
 */
-declare const createLocalStore: (subscriptions: SubscriptionRegistry, shardKey: string | undefined, stableStringify: (value: unknown) => string) => {
+declare const createLocalStore: (subscriptions: SubscriptionRegistry, shardKey: string | undefined) => {
   confirms: ((commitCursor: number | undefined) => void)[];
   rollbacks: (() => void)[];
   store: OptimisticLocalStore;
@@ -2412,6 +2412,34 @@ declare class LunoraClient {
   */
   private identityFingerprint;
   /**
+  * Stable token-hash fingerprint of a bearer token (the `&lt;len>:&lt;fnv>:&lt;djb2>`
+  * format a token-stamped queued write carries). Extracted so the replay gate
+  * can recompute the hash of the current credential and recognise a write
+  * stamped under it — even after the fingerprint was relabelled to a subject.
+  *
+  * Two independent 32-bit passes (FNV-1a + djb2) give a ~64-bit digest, so
+  * two distinct equal-length tokens are astronomically unlikely to share a
+  * fingerprint. A single 32-bit hash collides ~1-in-4e9 per equal-length
+  * pair — enough that, on a shared device, user B could hydrate A's cached
+  * reads. Different algorithms (not the same FNV with a different seed, which
+  * would be affine-related) keep the two passes genuinely independent.
+  * Still synchronous (no crypto) and stable across surrogate pairs.
+  */
+  private hashToken;
+  /**
+  * True when `stamped` is a token-hash of the SAME credential still held now,
+  * even though the live identity has since been relabelled to a subject. Covers
+  * `setAuthToken(token, userId)` where the subject resolved a tick after the
+  * token was set: a write persisted (or requeued) under the token hash must
+  * still replay — the credential never changed, only its label — instead of
+  * being dropped as an identity mismatch. This is the durable counterpart to
+  * {@link restampQueuedIdentity}, which only relabels the in-memory live stamp
+  * (consumed on the first flush) and never touches `item.identity` or the
+  * persisted record, so a reload or a transient-failure requeue would otherwise
+  * fall back to the stale token-hash and wrongly reject the same user's write.
+  */
+  private isSameCredentialUnderTokenHash;
+  /**
   * Drain every in-memory offline write and reject it because the auth
   * identity changed. Durable entries are also dropped from persistence so a
   * later `hydrate` can't resurrect another user's writes. Stamps are cleared

package/dist/packem_shared/{preload.d-Bb69VRgE.d.ts → preload.d-B-vyHnml.d.ts}

@@ -1,4 +1,4 @@
-import { F as FunctionReference, L as LunoraClient, A as ArgsOf, R as ReturnOf, P as Preloaded } from "./lunora-client.d-DVdVtJV8.js";
+import { F as FunctionReference, L as LunoraClient, A as ArgsOf, R as ReturnOf, P as Preloaded } from "./lunora-client.d-BYkEjCEJ.js";
 /**
 * Run a query once on the server (during SSR) and capture its result in a
 * serializable {@link Preloaded} token. Embed the token in the rendered HTML and

package/dist/packem_shared/{preload.d-BXFvxpiv.d.mts → preload.d-DrfuisCE.d.mts}

@@ -1,4 +1,4 @@
-import { F as FunctionReference, L as LunoraClient, A as ArgsOf, R as ReturnOf, P as Preloaded } from "./lunora-client.d-DVdVtJV8.mjs";
+import { F as FunctionReference, L as LunoraClient, A as ArgsOf, R as ReturnOf, P as Preloaded } from "./lunora-client.d-BYkEjCEJ.mjs";
 /**
 * Run a query once on the server (during SSR) and capture its result in a
 * serializable {@link Preloaded} token. Embed the token in the rendered HTML and

package/dist/packem_shared/{subscription-DoyO04-2.mjs → subscription-BjynOXCU.mjs}

@@ -54,7 +54,10 @@ class SubscriptionRegistry {
     this.byId.set(state.id, state);
   }
   remove(state) {
-    this.byKey.delete(SubscriptionRegistry.key(state.fn.__lunoraRef, state.args, state.shardKey));
+    const key = SubscriptionRegistry.key(state.fn.__lunoraRef, state.args, state.shardKey);
+    if (this.byKey.get(key) === state) {
+      this.byKey.delete(key);
+    }
     this.byId.delete(state.id);
   }
   all() {

package/dist/query/index.d.mts

@@ -1,5 +1,5 @@
-import { S as SubscriptionError, F as FunctionReference, A as ArgsOf, R as ReturnOf, L as LunoraClient, a as Unsubscribe } from "../packem_shared/lunora-client.d-DVdVtJV8.mjs";
-export type { b as SubscriptionErrorCallback } from "../packem_shared/lunora-client.d-DVdVtJV8.mjs";
+import { S as SubscriptionError, F as FunctionReference, A as ArgsOf, R as ReturnOf, L as LunoraClient, a as Unsubscribe } from "../packem_shared/lunora-client.d-BYkEjCEJ.mjs";
+export type { b as SubscriptionErrorCallback } from "../packem_shared/lunora-client.d-BYkEjCEJ.mjs";
 import '@lunora/runtime';
 /**
 * The sentinel a framework adapter resolves its reactive args to when it wants

package/dist/query/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SubscriptionError, F as FunctionReference, A as ArgsOf, R as ReturnOf, L as LunoraClient, a as Unsubscribe } from "../packem_shared/lunora-client.d-DVdVtJV8.js";
-export type { b as SubscriptionErrorCallback } from "../packem_shared/lunora-client.d-DVdVtJV8.js";
+import { S as SubscriptionError, F as FunctionReference, A as ArgsOf, R as ReturnOf, L as LunoraClient, a as Unsubscribe } from "../packem_shared/lunora-client.d-BYkEjCEJ.js";
+export type { b as SubscriptionErrorCallback } from "../packem_shared/lunora-client.d-BYkEjCEJ.js";
 import '@lunora/runtime';
 /**
 * The sentinel a framework adapter resolves its reactive args to when it wants

package/dist/ssr/index.d.mts

@@ -1,6 +1,6 @@
-import { P as Preloaded, L as LunoraClient } from "../packem_shared/lunora-client.d-DVdVtJV8.mjs";
-export type { A as ArgsOf, F as FunctionReference, R as ReturnOf } from "../packem_shared/lunora-client.d-DVdVtJV8.mjs";
-export { p as preloadQuery, a as preloadedQueryResult } from "../packem_shared/preload.d-BXFvxpiv.mjs";
+import { P as Preloaded, L as LunoraClient } from "../packem_shared/lunora-client.d-BYkEjCEJ.mjs";
+export type { A as ArgsOf, F as FunctionReference, R as ReturnOf } from "../packem_shared/lunora-client.d-BYkEjCEJ.mjs";
+export { p as preloadQuery, a as preloadedQueryResult } from "../packem_shared/preload.d-DrfuisCE.mjs";
 import '@lunora/runtime';
 /**
 * Structural shape of a better-auth `getSession` call's resolved value.

package/dist/ssr/index.d.ts

@@ -1,6 +1,6 @@
-import { P as Preloaded, L as LunoraClient } from "../packem_shared/lunora-client.d-DVdVtJV8.js";
-export type { A as ArgsOf, F as FunctionReference, R as ReturnOf } from "../packem_shared/lunora-client.d-DVdVtJV8.js";
-export { p as preloadQuery, a as preloadedQueryResult } from "../packem_shared/preload.d-Bb69VRgE.js";
+import { P as Preloaded, L as LunoraClient } from "../packem_shared/lunora-client.d-BYkEjCEJ.js";
+export type { A as ArgsOf, F as FunctionReference, R as ReturnOf } from "../packem_shared/lunora-client.d-BYkEjCEJ.js";
+export { p as preloadQuery, a as preloadedQueryResult } from "../packem_shared/preload.d-B-vyHnml.js";
 import '@lunora/runtime';
 /**
 * Structural shape of a better-auth `getSession` call's resolved value.

package/dist/ssr/index.mjs

@@ -1,4 +1,4 @@
 export { getServerSession } from '../packem_shared/getServerSession-8jXewqxd.mjs';
 export { deserializePreloaded, serializePreloaded } from '../packem_shared/deserializePreloaded-C0eJTY_W.mjs';
-export { createServerClient } from '../packem_shared/createServerClient-CKKZrXLc.mjs';
+export { createServerClient } from '../packem_shared/createServerClient-DF-3mLmb.mjs';
 export { preloadQuery, preloadedQueryResult } from '../packem_shared/preloadQuery-lobFkD2Z.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/client",
-  "version": "1.0.0-alpha.20",
+  "version": "1.0.0-alpha.21",
   "description": "Lunora browser SDK: WebSocket transport, optimistic updates, and an offline mutation queue",
   "keywords": [
     "cloudflare",
@@ -62,7 +62,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.3"
+    "@lunora/errors": "1.0.0-alpha.4"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"

package/dist/packem_shared/SubscriptionRegistry-Cxr70og-.mjs

@@ -1 +0,0 @@
-export { S as SubscriptionRegistry } from './subscription-DoyO04-2.mjs';

package/dist/packem_shared/createLocalStore-IOur0jHF.mjs

@@ -1 +0,0 @@
-export { c as createLocalStore } from './local-store-BNgN3Dw3.mjs';