@lunora/client 1.0.0-alpha.35 → 1.0.0-alpha.37

package/dist/auth/index.d.mts

@@ -1,4 +1,5 @@
-import { U as User, L as LunoraClient } from "../packem_shared/lunora-client.d-DLcz4GRz.mjs";
+import { L as LunoraClient } from "../packem_shared/lunora-client.d-yDX6HUZv.mjs";
+import { U as User } from "../packem_shared/types.d-CxmbJf0E.mjs";
 import '@lunora/runtime';
 interface IdentityStore {
   /** Read the current resolved user, or `null` when signed out / not yet resolved. */

package/dist/auth/index.d.ts

@@ -1,4 +1,5 @@
-import { U as User, L as LunoraClient } from "../packem_shared/lunora-client.d-DLcz4GRz.js";
+import { L as LunoraClient } from "../packem_shared/lunora-client.d-BkfH0Zom.js";
+import { U as User } from "../packem_shared/types.d-CxmbJf0E.js";
 import '@lunora/runtime';
 interface IdentityStore {
   /** Read the current resolved user, or `null` when signed out / not yet resolved. */

package/dist/index.d.mts

@@ -1,6 +1,8 @@
-import { c as PersistenceAdapter, B as BookmarkStorage, S as SubscriptionError, H as HttpStreamRef, d as HttpStreamArgsOf, e as HttpStreamChunkOf, f as StreamIterable, F as FunctionReference, A as ArgsOf, M as MutationCallOptions, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, g as ReconnectOptions, L as LunoraClient } from "./packem_shared/lunora-client.d-DLcz4GRz.mjs";
-export { type h as BatchSlot, C as CONFLICT_ERROR_CODE, type i as CachedQuery, type j as ClientDebugShard, type k as ClientDebugSnapshot, type l as ClientDebugSubscription, type m as ClientMessage, type n as ClientQueryRef, type o as ClientShapeSubscribeMessage, type p as ClientShapeUnsubscribeMessage, type q as ConnectionStatus, D as DEFAULT_MAX_BUFFER, type r as FunctionArgumentDescriptor, type s as FunctionDescriptor, type G as GlobalFacetResult, type t as GlobalFacetValue, type u as GlobalFilterClause, type v as GlobalTableInfo, type w as GlobalTablePage, type x as HttpStreamCallArgs, type y as LunoraClientError, type z as LunoraClientOptions, type E as LunoraErrorCode, type I as MutationSettledEvent, type J as OptimisticLocalStore, type K as OptimisticUpdate, type N as OutboxMutation, type T as OutboxSink, type V as PersistedMutation, type P as Preloaded, type W as RowOp, type X as RpcEnvelope, type Y as RpcResponseBody, type Z as ScheduleRecord, type _ as SchedulerPoolStatus, type $ as SchedulerStatus, type a0 as ServerMessage, type a1 as ServerPokeEndMessage, type a2 as ServerPokePartMessage, type a3 as ServerPokeStartMessage, type a4 as ShardTrafficEntry, type a5 as ShardTrafficResult, type a6 as StorageListPage, type a7 as StorageObject, type a8 as StreamHandle, type a9 as SubscriptionCallback, type b as SubscriptionErrorCallback, aa as SubscriptionRegistry, type ab as SubscriptionState, type ac as SyncWatermark, type a as Unsubscribe, type U as User, type ad as WorkflowInstanceAction, type ae as WorkflowInstanceDetail, type af as WorkflowInstancePage, type ag as WorkflowInstanceStatus, type ah as WorkflowInstanceSummary, type ai as WorkflowStepDetail, type aj as WsTokenProvider, ak as createClientQuery, al as createLocalStore, am as createStream, an as getErrorCode, ao as getRetryAfterMs, ap as isConflictError, aq as isForbiddenError, ar as isRateLimitedError, as as isUnauthorizedError } from "./packem_shared/lunora-client.d-DLcz4GRz.mjs";
-export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-C1M_N5mE.mjs";
+import { o as PersistenceAdapter, B as BookmarkStorage, H as HttpStreamRef, m as HttpStreamArgsOf, n as HttpStreamChunkOf, F as FunctionReference, A as ArgsOf, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, p as ReconnectOptions } from "./packem_shared/types.d-CxmbJf0E.mjs";
+export type { C as CachedQuery, q as ClientMessage, r as ClientShapeSubscribeMessage, s as ClientShapeUnsubscribeMessage, t as FunctionArgumentDescriptor, h as FunctionDescriptor, l as GlobalFacetResult, u as GlobalFacetValue, j as GlobalFilterClause, G as GlobalTableInfo, k as GlobalTablePage, v as HttpStreamCallArgs, L as LunoraClientOptions, w as OutboxMutation, x as OutboxSink, y as PersistedMutation, P as Preloaded, z as RowOp, D as RpcEnvelope, E as RpcResponseBody, b as ScheduleRecord, I as SchedulerPoolStatus, c as SchedulerStatus, J as ServerMessage, K as ServerPokeEndMessage, M as ServerPokePartMessage, N as ServerPokeStartMessage, T as ShardTrafficEntry, S as ShardTrafficResult, i as StorageListPage, V as StorageObject, a as Unsubscribe, U as User, g as WorkflowInstanceAction, f as WorkflowInstanceDetail, e as WorkflowInstancePage, d as WorkflowInstanceStatus, X as WorkflowInstanceSummary, Y as WorkflowStepDetail, W as WsTokenProvider } from "./packem_shared/types.d-CxmbJf0E.mjs";
+import { C as ConnectionStatus, S as SubscriptionError, b as StreamIterable, M as MutationCallOptions, L as LunoraClient } from "./packem_shared/lunora-client.d-yDX6HUZv.mjs";
+export { type B as BatchSlot, c as CONFLICT_ERROR_CODE, type d as ClientDebugShard, type e as ClientDebugSnapshot, type f as ClientDebugSubscription, type g as ClientQueryRef, D as DEFAULT_MAX_BUFFER, type h as LunoraClientError, type i as LunoraErrorCode, type j as MutationSettledEvent, type O as OptimisticLocalStore, type k as OptimisticUpdate, type l as StreamHandle, type m as SubscriptionCallback, type a as SubscriptionErrorCallback, n as SubscriptionRegistry, type o as SubscriptionState, type p as SyncWatermark, q as createClientQuery, r as createLocalStore, s as createStream, t as getErrorCode, u as getRetryAfterMs, v as isConflictError, w as isForbiddenError, x as isRateLimitedError, y as isUnauthorizedError } from "./packem_shared/lunora-client.d-yDX6HUZv.mjs";
+export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-DbtqnQ4C.mjs";
 export type { AuthCapabilities, AuthConfigInfo, AuthImpersonation, AuthPage, AuthSession, AuthUser, AuthUserFieldSpec, CronJobInfo, KvKeyEntry, KvKeyListResult, KvNamespaceSummary, KvValueResult, PipelineLogColumnMap, PipelineLogCursor, PipelineLogField, PipelineLogPage, PipelineLogQuery, PipelineLogRow, VectorIndexSummary, VectorQueryMatch } from '@lunora/runtime';
 declare const anyApi: Record<string, Record<string, unknown>>;
 /**
@@ -140,18 +142,69 @@ interface TabCoordinatorOptions {
    * Called when this tab becomes the leader (should open WS connections).
    */
   onBecomeLeader?: () => void;
+  /**
+   * Called when the leader broadcasts its aggregate `ConnectionStatus`
+   * (see `LunoraClient.emitConnectionStatus`) — a follower owns no socket
+   * of its own, so this is its only truthful signal for a status indicator
+   * or the offline-queue gate. Sent on every leader-side status change and
+   * once more right after a new leader takes over, so a follower already
+   * mid-mirroring isn't stuck on a stale value from the PREVIOUS leader.
+   *
+   * `identity` is the leader's own `identityFingerprint()` (`null` = signed
+   * out) — the channel-name scoping (see `LunoraClient.createTabCoordinator`)
+   * is the primary defence against a stale frame from a since-changed
+   * identity, but `setAuthToken` in one tab can move it to a new channel
+   * while this frame is already queued in another tab's message task queue.
+   * A follower drops the frame when `identity` is present and doesn't match
+   * its own; an **absent** `identity` (mixed-version leader) is accepted —
+   * today's behavior, and the channel split already separates version groups.
+   */
+  onConnectionStatus?: (status: ConnectionStatus, identity?: string | null) => void;
   /**
    * Called when this tab loses leadership (should close WS connections).
    */
   onStopBeingLeader?: () => void;
   /**
-   * Called when the leader broadcasts subscription data.
+   * Called when the leader broadcasts subscription data. `cursor`/`epoch`
+   * ride along when the leader is CLIENT-01-aware, so the follower can drop
+   * its own confirmed optimistic layers instead of just displaying the raw
+   * value; both are absent on a mixed-version leader that hasn't shipped the
+   * cursor yet (the follower falls back to its historical behavior — see
+   * `lunora-client.ts`'s `onSubscriptionData` wiring).
+   *
+   * `identity` is the leader's `identityFingerprint()` (see
+   * `onConnectionStatus`'s docblock for the full rationale and the
+   * absent-field mixed-version rule — identical here).
    */
-  onSubscriptionData?: (key: string, data: unknown) => void;
+  onSubscriptionData?: (key: string, data: unknown, cursor?: number, epoch?: string, identity?: string | null) => void;
   /**
    * Called when the leader broadcasts a subscription error.
    */
   onSubscriptionError?: (key: string, error: SubscriptionError) => void;
+  /**
+   * Called when the leader broadcasts a `settled` frame's checkpoint advance
+   * (no value change, but the resume cursor moved). A follower needs this
+   * too — otherwise a `setQuery`/per-call optimistic overlay that a
+   * byte-identical write just confirmed stays masked on follower tabs until
+   * the next VISIBLE data frame arrives, even though the leader already
+   * dropped it.
+   *
+   * `lastMutationId` is the LEADER's own per-client `__client_watermark` —
+   * scoped server-side to the socket's announced `clientId` — so it only
+   * means anything to a follower whose `clientId` matches the leader's
+   * (`clientId` rides along for exactly that comparison; see
+   * `LunoraClient`'s wiring). An **absent** `clientId` (a mixed-version
+   * leader that hasn't shipped this field yet) also skips the
+   * `mutationId` half — safe, because the follower's own gates still
+   * resolve via its own RPC-ack watermark path and the `CheckpointRegistry`
+   * bounded fallback. The checkpoint (cursor) half of this callback fires
+   * unconditionally regardless of `clientId` — only the `mutationId` half
+   * is scoped.
+   *
+   * `identity` is the leader's `identityFingerprint()` — see
+   * `onConnectionStatus`'s docblock for the drop rule (identical here).
+   */
+  onSubscriptionSettled?: (key: string, cursor?: number, epoch?: string, lastMutationId?: number, clientId?: string, identity?: string | null) => void;
 }
 declare class TabCoordinator {
   private readonly bc;
@@ -164,6 +217,12 @@ declare class TabCoordinator {
   private leader;
   /** `true` once `start()` has been called. */
   private running;
+  /**
+   * `true` while a `claimAndPromote()` claim window is open. Guards the yield
+   * handler and `checkLeaderHealth`'s belt-and-braces else-branch so the two
+   * promotion paths can't both arm a `becomeLeader` timeout for the same gap.
+   */
+  private promotionPending;
   /** Timestamp of the most recent leader heartbeat. */
   private lastHeartbeat;
   private heartbeatTimer;
@@ -171,8 +230,10 @@ declare class TabCoordinator {
   /** Callbacks set via constructor options. */
   private readonly onBecomeLeader;
   private readonly onStopBeingLeader;
+  private readonly onConnectionStatus;
   private readonly onSubscriptionData;
   private readonly onSubscriptionError;
+  private readonly onSubscriptionSettled;
   constructor(options?: TabCoordinatorOptions);
   /**
    * Start the coordinator: attempt to claim leadership and begin the
@@ -186,6 +247,23 @@ declare class TabCoordinator {
   stop(): void;
   /** `true` when this tab is the current WebSocket leader. */
   isLeader(): boolean;
+  /**
+   * Force this (freshly `start()`-ed) tab to become leader immediately,
+   * skipping the normal claim-then-`leaderTimeout` dance. Safe to call
+   * right after `start()` when the caller already knows this tab was the
+   * SOLE leader of the group it's replacing (e.g. `LunoraClient`'s
+   * identity-change coordinator restart — waiting out the full
+   * `leaderTimeout` there would freeze every live query for no reason,
+   * since this tab is overwhelmingly likely to be alone on the freshly
+   * derived channel). A sibling tab going through the normal `start()`
+   * dance for the SAME transition observes this tab's `becomeLeader`
+   * heartbeat and defers before its own claim-timeout fires; if another
+   * tab ALSO force-promotes at the same moment (e.g. two tabs both
+   * transitioning to the same new identity), the existing
+   * `resolveLeaderVsLeaderTieBreak` resolves the rare double-promotion
+   * the same way it resolves any other split-brain.
+   */
+  promoteImmediately(): void;
   /** The tab id of the current leader, or `undefined` if unknown / no leader. */
   get leaderTabId(): string | undefined;
   /** The id of this tab. */
@@ -194,14 +272,42 @@ declare class TabCoordinator {
   get isRunning(): boolean;
   /**
    * Broadcast subscription data to all follower tabs. Only the leader should
-   * call this.
+   * call this. `cursor`/`epoch` are omitted from the wire frame when
+   * `undefined` (e.g. a CDC-off shard) — a follower on ANY version treats a
+   * missing `cursor` as "no confirmed-layer drop this frame", so omitting it
+   * here is equivalent to sending it as `undefined`. `identity` is this
+   * (leader) tab's own `identityFingerprint()` (`null` = signed out) —
+   * stamped so a follower can drop a frame from a since-changed identity
+   * (see the `onSubscriptionData` docblock); spread-included whenever
+   * supplied, since a fixed leader always knows its own identity (never
+   * omits it) and `null` must round-trip distinctly from "field absent".
    */
-  broadcastSubscriptionData(key: string, data: unknown): void;
+  broadcastSubscriptionData(key: string, data: unknown, cursor?: number, epoch?: string, identity?: string | null): void;
   /**
    * Broadcast a subscription error to all follower tabs. Only the leader
    * should call this.
    */
   broadcastSubscriptionError(key: string, error: SubscriptionError): void;
+  /**
+   * Broadcast a `settled` frame's checkpoint advance to all follower tabs
+   * (no value change, but the resume cursor/epoch moved — see
+   * `LunoraClient.handleSettledMessage`). `clientId` is this (leader) tab's
+   * own client id, stamped so a follower can tell whether the echoed
+   * `lastMutationId` watermark is genuinely its own (see the
+   * `onSubscriptionSettled` docblock). `identity` is this tab's own
+   * `identityFingerprint()` — see `broadcastSubscriptionData`'s docblock for
+   * the same round-tripping rule. Only the leader should call this.
+   */
+  broadcastSubscriptionSettled(key: string, cursor?: number, epoch?: string, lastMutationId?: number, clientId?: string, identity?: string | null): void;
+  /**
+   * Broadcast this tab's aggregate `ConnectionStatus` to follower tabs, so
+   * they can mirror a truthful status without a socket of their own (see
+   * `LunoraClient.computeStatus`/`emitConnectionStatus`). `identity` is this
+   * tab's own `identityFingerprint()` — see `broadcastSubscriptionData`'s
+   * docblock for the same round-tripping rule. Only the leader should call
+   * this.
+   */
+  broadcastConnectionStatus(status: ConnectionStatus, identity?: string | null): void;
   private broadcast;
   private handleMessage;
   private handleClaimLeadership;
@@ -222,6 +328,14 @@ declare class TabCoordinator {
   private becomeLeader;
   private sendHeartbeat;
   private checkLeaderHealth;
+  /**
+   * Broadcast a leadership claim and arm a `becomeLeader` fallback: if no
+   * other tab has asserted itself as leader by the time the window elapses,
+   * self-promote. Shared by `checkLeaderHealth`'s stale-leader path and the
+   * `yield-leadership` handler so both promotion triggers use one claim
+   * window instead of each arming its own timeout.
+   */
+  private claimAndPromote;
 }
 /**
  * Client-side incremental merging of structured mutation deltas.
@@ -533,6 +647,15 @@ declare class OfflineQueue {
    */
   drainConflict(): QueuedMutation[];
   clear(): void;
+  /**
+   * Evict entries from the FRONT of `items` (the oldest — FIFO order) until
+   * the queue is at or under `maxItems`, rejecting each with
+   * `OFFLINE_QUEUE_OVERFLOW`, un-persisting it, and firing `onEvict`. Shared
+   * by `enqueue` (a live write pushes past capacity) and `hydrate` (a durable
+   * store restored more than `maxItems` records — CLIENT-03) so an overflow
+   * always drops the same way regardless of which caller triggered it.
+   */
+  private evictOverflow;
   /** Notify the size observer (the client's pending-sync count) after any change. */
   private notifySize;
 }
@@ -719,4 +842,4 @@ declare const sendToSw: (sw: ServiceWorker | null, message: ClientToSwMessage, e
  * Create a reply for a client message (call from inside the SW).
  */
 declare const createReply: (original: ClientToSwMessage, payload?: unknown) => SwToClientMessage;
-export { type ArgsOf, type AsyncStorageLike, type AsyncStoragePersistenceOptions, type BookmarkStorage, ClientServiceWorker, type ClientSwOptions, type ClientToSwMessage, type FunctionReference, type HttpStreamArgsOf, type HttpStreamChunkOf, type HttpStreamOptions, type HttpStreamRef, type IndexedDbPersistenceOptions, type IndexedDbQueryCacheOptions, LunoraClient, type MutationCallOptions, type MutationDelta, type MutationRunnerSinks, type MutatorHandle, type MutatorRunnerSinks, type MutatorTransaction, OfflineQueue, type OfflineQueueOptions, type OptimisticMessage, type PersistenceAdapter, type QueryCacheAdapter, type QueuedMutation, RETIRE_AFTER_DURABLE_SEQ_ADVANCE, type ReconcileDurableMessage, type ReconnectCalculator, type ReconnectOptions, type ReturnOf, type ServiceWorkerStatus, type StreamIterable, type SubscriptionError, type SwToClientMessage, TabCoordinator, anyApi, applyDelta, createAsyncStoragePersistence, createInMemoryBookmarkStorage, createInMemoryPersistence, createInMemoryQueryCache, createIndexedDbPersistence, createIndexedDbQueryCache, createMutationRunner, createMutatorRunner, createReconnect, createReply, createSnapshotPrecondition, httpStream, isMutationDelta, maxSeq, queryCacheKey, reconcileOptimistic, sendToSw };
+export { type ArgsOf, type AsyncStorageLike, type AsyncStoragePersistenceOptions, type BookmarkStorage, ClientServiceWorker, type ClientSwOptions, type ClientToSwMessage, type ConnectionStatus, type FunctionReference, type HttpStreamArgsOf, type HttpStreamChunkOf, type HttpStreamOptions, type HttpStreamRef, type IndexedDbPersistenceOptions, type IndexedDbQueryCacheOptions, LunoraClient, type MutationCallOptions, type MutationDelta, type MutationRunnerSinks, type MutatorHandle, type MutatorRunnerSinks, type MutatorTransaction, OfflineQueue, type OfflineQueueOptions, type OptimisticMessage, type PersistenceAdapter, type QueryCacheAdapter, type QueuedMutation, RETIRE_AFTER_DURABLE_SEQ_ADVANCE, type ReconcileDurableMessage, type ReconnectCalculator, type ReconnectOptions, type ReturnOf, type ServiceWorkerStatus, type StreamIterable, type SubscriptionError, type SwToClientMessage, TabCoordinator, anyApi, applyDelta, createAsyncStoragePersistence, createInMemoryBookmarkStorage, createInMemoryPersistence, createInMemoryQueryCache, createIndexedDbPersistence, createIndexedDbQueryCache, createMutationRunner, createMutatorRunner, createReconnect, createReply, createSnapshotPrecondition, httpStream, isMutationDelta, maxSeq, queryCacheKey, reconcileOptimistic, sendToSw };

package/dist/index.d.ts

@@ -1,6 +1,8 @@
-import { c as PersistenceAdapter, B as BookmarkStorage, S as SubscriptionError, H as HttpStreamRef, d as HttpStreamArgsOf, e as HttpStreamChunkOf, f as StreamIterable, F as FunctionReference, A as ArgsOf, M as MutationCallOptions, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, g as ReconnectOptions, L as LunoraClient } from "./packem_shared/lunora-client.d-DLcz4GRz.js";
-export { type h as BatchSlot, C as CONFLICT_ERROR_CODE, type i as CachedQuery, type j as ClientDebugShard, type k as ClientDebugSnapshot, type l as ClientDebugSubscription, type m as ClientMessage, type n as ClientQueryRef, type o as ClientShapeSubscribeMessage, type p as ClientShapeUnsubscribeMessage, type q as ConnectionStatus, D as DEFAULT_MAX_BUFFER, type r as FunctionArgumentDescriptor, type s as FunctionDescriptor, type G as GlobalFacetResult, type t as GlobalFacetValue, type u as GlobalFilterClause, type v as GlobalTableInfo, type w as GlobalTablePage, type x as HttpStreamCallArgs, type y as LunoraClientError, type z as LunoraClientOptions, type E as LunoraErrorCode, type I as MutationSettledEvent, type J as OptimisticLocalStore, type K as OptimisticUpdate, type N as OutboxMutation, type T as OutboxSink, type V as PersistedMutation, type P as Preloaded, type W as RowOp, type X as RpcEnvelope, type Y as RpcResponseBody, type Z as ScheduleRecord, type _ as SchedulerPoolStatus, type $ as SchedulerStatus, type a0 as ServerMessage, type a1 as ServerPokeEndMessage, type a2 as ServerPokePartMessage, type a3 as ServerPokeStartMessage, type a4 as ShardTrafficEntry, type a5 as ShardTrafficResult, type a6 as StorageListPage, type a7 as StorageObject, type a8 as StreamHandle, type a9 as SubscriptionCallback, type b as SubscriptionErrorCallback, aa as SubscriptionRegistry, type ab as SubscriptionState, type ac as SyncWatermark, type a as Unsubscribe, type U as User, type ad as WorkflowInstanceAction, type ae as WorkflowInstanceDetail, type af as WorkflowInstancePage, type ag as WorkflowInstanceStatus, type ah as WorkflowInstanceSummary, type ai as WorkflowStepDetail, type aj as WsTokenProvider, ak as createClientQuery, al as createLocalStore, am as createStream, an as getErrorCode, ao as getRetryAfterMs, ap as isConflictError, aq as isForbiddenError, ar as isRateLimitedError, as as isUnauthorizedError } from "./packem_shared/lunora-client.d-DLcz4GRz.js";
-export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d-hkFC0Uno.js";
+import { o as PersistenceAdapter, B as BookmarkStorage, H as HttpStreamRef, m as HttpStreamArgsOf, n as HttpStreamChunkOf, F as FunctionReference, A as ArgsOf, R as ReturnOf, O as OfflineQueueOptions, Q as QueryCacheAdapter, p as ReconnectOptions } from "./packem_shared/types.d-CxmbJf0E.js";
+export type { C as CachedQuery, q as ClientMessage, r as ClientShapeSubscribeMessage, s as ClientShapeUnsubscribeMessage, t as FunctionArgumentDescriptor, h as FunctionDescriptor, l as GlobalFacetResult, u as GlobalFacetValue, j as GlobalFilterClause, G as GlobalTableInfo, k as GlobalTablePage, v as HttpStreamCallArgs, L as LunoraClientOptions, w as OutboxMutation, x as OutboxSink, y as PersistedMutation, P as Preloaded, z as RowOp, D as RpcEnvelope, E as RpcResponseBody, b as ScheduleRecord, I as SchedulerPoolStatus, c as SchedulerStatus, J as ServerMessage, K as ServerPokeEndMessage, M as ServerPokePartMessage, N as ServerPokeStartMessage, T as ShardTrafficEntry, S as ShardTrafficResult, i as StorageListPage, V as StorageObject, a as Unsubscribe, U as User, g as WorkflowInstanceAction, f as WorkflowInstanceDetail, e as WorkflowInstancePage, d as WorkflowInstanceStatus, X as WorkflowInstanceSummary, Y as WorkflowStepDetail, W as WsTokenProvider } from "./packem_shared/types.d-CxmbJf0E.js";
+import { C as ConnectionStatus, S as SubscriptionError, b as StreamIterable, M as MutationCallOptions, L as LunoraClient } from "./packem_shared/lunora-client.d-BkfH0Zom.js";
+export { type B as BatchSlot, c as CONFLICT_ERROR_CODE, type d as ClientDebugShard, type e as ClientDebugSnapshot, type f as ClientDebugSubscription, type g as ClientQueryRef, D as DEFAULT_MAX_BUFFER, type h as LunoraClientError, type i as LunoraErrorCode, type j as MutationSettledEvent, type O as OptimisticLocalStore, type k as OptimisticUpdate, type l as StreamHandle, type m as SubscriptionCallback, type a as SubscriptionErrorCallback, n as SubscriptionRegistry, type o as SubscriptionState, type p as SyncWatermark, q as createClientQuery, r as createLocalStore, s as createStream, t as getErrorCode, u as getRetryAfterMs, v as isConflictError, w as isForbiddenError, x as isRateLimitedError, y as isUnauthorizedError } from "./packem_shared/lunora-client.d-BkfH0Zom.js";
+export { p as preloadQuery, a as preloadedQueryResult } from "./packem_shared/preload.d--OibiIK_.js";
 export type { AuthCapabilities, AuthConfigInfo, AuthImpersonation, AuthPage, AuthSession, AuthUser, AuthUserFieldSpec, CronJobInfo, KvKeyEntry, KvKeyListResult, KvNamespaceSummary, KvValueResult, PipelineLogColumnMap, PipelineLogCursor, PipelineLogField, PipelineLogPage, PipelineLogQuery, PipelineLogRow, VectorIndexSummary, VectorQueryMatch } from '@lunora/runtime';
 declare const anyApi: Record<string, Record<string, unknown>>;
 /**
@@ -140,18 +142,69 @@ interface TabCoordinatorOptions {
    * Called when this tab becomes the leader (should open WS connections).
    */
   onBecomeLeader?: () => void;
+  /**
+   * Called when the leader broadcasts its aggregate `ConnectionStatus`
+   * (see `LunoraClient.emitConnectionStatus`) — a follower owns no socket
+   * of its own, so this is its only truthful signal for a status indicator
+   * or the offline-queue gate. Sent on every leader-side status change and
+   * once more right after a new leader takes over, so a follower already
+   * mid-mirroring isn't stuck on a stale value from the PREVIOUS leader.
+   *
+   * `identity` is the leader's own `identityFingerprint()` (`null` = signed
+   * out) — the channel-name scoping (see `LunoraClient.createTabCoordinator`)
+   * is the primary defence against a stale frame from a since-changed
+   * identity, but `setAuthToken` in one tab can move it to a new channel
+   * while this frame is already queued in another tab's message task queue.
+   * A follower drops the frame when `identity` is present and doesn't match
+   * its own; an **absent** `identity` (mixed-version leader) is accepted —
+   * today's behavior, and the channel split already separates version groups.
+   */
+  onConnectionStatus?: (status: ConnectionStatus, identity?: string | null) => void;
   /**
    * Called when this tab loses leadership (should close WS connections).
    */
   onStopBeingLeader?: () => void;
   /**
-   * Called when the leader broadcasts subscription data.
+   * Called when the leader broadcasts subscription data. `cursor`/`epoch`
+   * ride along when the leader is CLIENT-01-aware, so the follower can drop
+   * its own confirmed optimistic layers instead of just displaying the raw
+   * value; both are absent on a mixed-version leader that hasn't shipped the
+   * cursor yet (the follower falls back to its historical behavior — see
+   * `lunora-client.ts`'s `onSubscriptionData` wiring).
+   *
+   * `identity` is the leader's `identityFingerprint()` (see
+   * `onConnectionStatus`'s docblock for the full rationale and the
+   * absent-field mixed-version rule — identical here).
    */
-  onSubscriptionData?: (key: string, data: unknown) => void;
+  onSubscriptionData?: (key: string, data: unknown, cursor?: number, epoch?: string, identity?: string | null) => void;
   /**
    * Called when the leader broadcasts a subscription error.
    */
   onSubscriptionError?: (key: string, error: SubscriptionError) => void;
+  /**
+   * Called when the leader broadcasts a `settled` frame's checkpoint advance
+   * (no value change, but the resume cursor moved). A follower needs this
+   * too — otherwise a `setQuery`/per-call optimistic overlay that a
+   * byte-identical write just confirmed stays masked on follower tabs until
+   * the next VISIBLE data frame arrives, even though the leader already
+   * dropped it.
+   *
+   * `lastMutationId` is the LEADER's own per-client `__client_watermark` —
+   * scoped server-side to the socket's announced `clientId` — so it only
+   * means anything to a follower whose `clientId` matches the leader's
+   * (`clientId` rides along for exactly that comparison; see
+   * `LunoraClient`'s wiring). An **absent** `clientId` (a mixed-version
+   * leader that hasn't shipped this field yet) also skips the
+   * `mutationId` half — safe, because the follower's own gates still
+   * resolve via its own RPC-ack watermark path and the `CheckpointRegistry`
+   * bounded fallback. The checkpoint (cursor) half of this callback fires
+   * unconditionally regardless of `clientId` — only the `mutationId` half
+   * is scoped.
+   *
+   * `identity` is the leader's `identityFingerprint()` — see
+   * `onConnectionStatus`'s docblock for the drop rule (identical here).
+   */
+  onSubscriptionSettled?: (key: string, cursor?: number, epoch?: string, lastMutationId?: number, clientId?: string, identity?: string | null) => void;
 }
 declare class TabCoordinator {
   private readonly bc;
@@ -164,6 +217,12 @@ declare class TabCoordinator {
   private leader;
   /** `true` once `start()` has been called. */
   private running;
+  /**
+   * `true` while a `claimAndPromote()` claim window is open. Guards the yield
+   * handler and `checkLeaderHealth`'s belt-and-braces else-branch so the two
+   * promotion paths can't both arm a `becomeLeader` timeout for the same gap.
+   */
+  private promotionPending;
   /** Timestamp of the most recent leader heartbeat. */
   private lastHeartbeat;
   private heartbeatTimer;
@@ -171,8 +230,10 @@ declare class TabCoordinator {
   /** Callbacks set via constructor options. */
   private readonly onBecomeLeader;
   private readonly onStopBeingLeader;
+  private readonly onConnectionStatus;
   private readonly onSubscriptionData;
   private readonly onSubscriptionError;
+  private readonly onSubscriptionSettled;
   constructor(options?: TabCoordinatorOptions);
   /**
    * Start the coordinator: attempt to claim leadership and begin the
@@ -186,6 +247,23 @@ declare class TabCoordinator {
   stop(): void;
   /** `true` when this tab is the current WebSocket leader. */
   isLeader(): boolean;
+  /**
+   * Force this (freshly `start()`-ed) tab to become leader immediately,
+   * skipping the normal claim-then-`leaderTimeout` dance. Safe to call
+   * right after `start()` when the caller already knows this tab was the
+   * SOLE leader of the group it's replacing (e.g. `LunoraClient`'s
+   * identity-change coordinator restart — waiting out the full
+   * `leaderTimeout` there would freeze every live query for no reason,
+   * since this tab is overwhelmingly likely to be alone on the freshly
+   * derived channel). A sibling tab going through the normal `start()`
+   * dance for the SAME transition observes this tab's `becomeLeader`
+   * heartbeat and defers before its own claim-timeout fires; if another
+   * tab ALSO force-promotes at the same moment (e.g. two tabs both
+   * transitioning to the same new identity), the existing
+   * `resolveLeaderVsLeaderTieBreak` resolves the rare double-promotion
+   * the same way it resolves any other split-brain.
+   */
+  promoteImmediately(): void;
   /** The tab id of the current leader, or `undefined` if unknown / no leader. */
   get leaderTabId(): string | undefined;
   /** The id of this tab. */
@@ -194,14 +272,42 @@ declare class TabCoordinator {
   get isRunning(): boolean;
   /**
    * Broadcast subscription data to all follower tabs. Only the leader should
-   * call this.
+   * call this. `cursor`/`epoch` are omitted from the wire frame when
+   * `undefined` (e.g. a CDC-off shard) — a follower on ANY version treats a
+   * missing `cursor` as "no confirmed-layer drop this frame", so omitting it
+   * here is equivalent to sending it as `undefined`. `identity` is this
+   * (leader) tab's own `identityFingerprint()` (`null` = signed out) —
+   * stamped so a follower can drop a frame from a since-changed identity
+   * (see the `onSubscriptionData` docblock); spread-included whenever
+   * supplied, since a fixed leader always knows its own identity (never
+   * omits it) and `null` must round-trip distinctly from "field absent".
    */
-  broadcastSubscriptionData(key: string, data: unknown): void;
+  broadcastSubscriptionData(key: string, data: unknown, cursor?: number, epoch?: string, identity?: string | null): void;
   /**
    * Broadcast a subscription error to all follower tabs. Only the leader
    * should call this.
    */
   broadcastSubscriptionError(key: string, error: SubscriptionError): void;
+  /**
+   * Broadcast a `settled` frame's checkpoint advance to all follower tabs
+   * (no value change, but the resume cursor/epoch moved — see
+   * `LunoraClient.handleSettledMessage`). `clientId` is this (leader) tab's
+   * own client id, stamped so a follower can tell whether the echoed
+   * `lastMutationId` watermark is genuinely its own (see the
+   * `onSubscriptionSettled` docblock). `identity` is this tab's own
+   * `identityFingerprint()` — see `broadcastSubscriptionData`'s docblock for
+   * the same round-tripping rule. Only the leader should call this.
+   */
+  broadcastSubscriptionSettled(key: string, cursor?: number, epoch?: string, lastMutationId?: number, clientId?: string, identity?: string | null): void;
+  /**
+   * Broadcast this tab's aggregate `ConnectionStatus` to follower tabs, so
+   * they can mirror a truthful status without a socket of their own (see
+   * `LunoraClient.computeStatus`/`emitConnectionStatus`). `identity` is this
+   * tab's own `identityFingerprint()` — see `broadcastSubscriptionData`'s
+   * docblock for the same round-tripping rule. Only the leader should call
+   * this.
+   */
+  broadcastConnectionStatus(status: ConnectionStatus, identity?: string | null): void;
   private broadcast;
   private handleMessage;
   private handleClaimLeadership;
@@ -222,6 +328,14 @@ declare class TabCoordinator {
   private becomeLeader;
   private sendHeartbeat;
   private checkLeaderHealth;
+  /**
+   * Broadcast a leadership claim and arm a `becomeLeader` fallback: if no
+   * other tab has asserted itself as leader by the time the window elapses,
+   * self-promote. Shared by `checkLeaderHealth`'s stale-leader path and the
+   * `yield-leadership` handler so both promotion triggers use one claim
+   * window instead of each arming its own timeout.
+   */
+  private claimAndPromote;
 }
 /**
  * Client-side incremental merging of structured mutation deltas.
@@ -533,6 +647,15 @@ declare class OfflineQueue {
    */
   drainConflict(): QueuedMutation[];
   clear(): void;
+  /**
+   * Evict entries from the FRONT of `items` (the oldest — FIFO order) until
+   * the queue is at or under `maxItems`, rejecting each with
+   * `OFFLINE_QUEUE_OVERFLOW`, un-persisting it, and firing `onEvict`. Shared
+   * by `enqueue` (a live write pushes past capacity) and `hydrate` (a durable
+   * store restored more than `maxItems` records — CLIENT-03) so an overflow
+   * always drops the same way regardless of which caller triggered it.
+   */
+  private evictOverflow;
   /** Notify the size observer (the client's pending-sync count) after any change. */
   private notifySize;
 }
@@ -719,4 +842,4 @@ declare const sendToSw: (sw: ServiceWorker | null, message: ClientToSwMessage, e
  * Create a reply for a client message (call from inside the SW).
  */
 declare const createReply: (original: ClientToSwMessage, payload?: unknown) => SwToClientMessage;
-export { type ArgsOf, type AsyncStorageLike, type AsyncStoragePersistenceOptions, type BookmarkStorage, ClientServiceWorker, type ClientSwOptions, type ClientToSwMessage, type FunctionReference, type HttpStreamArgsOf, type HttpStreamChunkOf, type HttpStreamOptions, type HttpStreamRef, type IndexedDbPersistenceOptions, type IndexedDbQueryCacheOptions, LunoraClient, type MutationCallOptions, type MutationDelta, type MutationRunnerSinks, type MutatorHandle, type MutatorRunnerSinks, type MutatorTransaction, OfflineQueue, type OfflineQueueOptions, type OptimisticMessage, type PersistenceAdapter, type QueryCacheAdapter, type QueuedMutation, RETIRE_AFTER_DURABLE_SEQ_ADVANCE, type ReconcileDurableMessage, type ReconnectCalculator, type ReconnectOptions, type ReturnOf, type ServiceWorkerStatus, type StreamIterable, type SubscriptionError, type SwToClientMessage, TabCoordinator, anyApi, applyDelta, createAsyncStoragePersistence, createInMemoryBookmarkStorage, createInMemoryPersistence, createInMemoryQueryCache, createIndexedDbPersistence, createIndexedDbQueryCache, createMutationRunner, createMutatorRunner, createReconnect, createReply, createSnapshotPrecondition, httpStream, isMutationDelta, maxSeq, queryCacheKey, reconcileOptimistic, sendToSw };
+export { type ArgsOf, type AsyncStorageLike, type AsyncStoragePersistenceOptions, type BookmarkStorage, ClientServiceWorker, type ClientSwOptions, type ClientToSwMessage, type ConnectionStatus, type FunctionReference, type HttpStreamArgsOf, type HttpStreamChunkOf, type HttpStreamOptions, type HttpStreamRef, type IndexedDbPersistenceOptions, type IndexedDbQueryCacheOptions, LunoraClient, type MutationCallOptions, type MutationDelta, type MutationRunnerSinks, type MutatorHandle, type MutatorRunnerSinks, type MutatorTransaction, OfflineQueue, type OfflineQueueOptions, type OptimisticMessage, type PersistenceAdapter, type QueryCacheAdapter, type QueuedMutation, RETIRE_AFTER_DURABLE_SEQ_ADVANCE, type ReconcileDurableMessage, type ReconnectCalculator, type ReconnectOptions, type ReturnOf, type ServiceWorkerStatus, type StreamIterable, type SubscriptionError, type SwToClientMessage, TabCoordinator, anyApi, applyDelta, createAsyncStoragePersistence, createInMemoryBookmarkStorage, createInMemoryPersistence, createInMemoryQueryCache, createIndexedDbPersistence, createIndexedDbQueryCache, createMutationRunner, createMutatorRunner, createReconnect, createReply, createSnapshotPrecondition, httpStream, isMutationDelta, maxSeq, queryCacheKey, reconcileOptimistic, sendToSw };

package/dist/index.mjs

@@ -1 +1 @@
-import{anyApi as o}from"./packem_shared/anyApi-BD4dgvDY.mjs";import{RETIRE_AFTER_DURABLE_SEQ_ADVANCE as a,maxSeq as c,reconcileOptimistic as n}from"./packem_shared/RETIRE_AFTER_DURABLE_SEQ_ADVANCE-D96iRJDY.mjs";import{createAsyncStoragePersistence as m}from"./packem_shared/createAsyncStoragePersistence-BRLqeXsC.mjs";import{default as f}from"./packem_shared/createInMemoryBookmarkStorage-DCd5Ej-t.mjs";import{createClientQuery as s}from"./packem_shared/createClientQuery-CrdRoicO.mjs";import{TabCoordinator as d}from"./packem_shared/TabCoordinator-ijLic02x.mjs";import{applyDelta as y,isMutationDelta as R}from"./packem_shared/applyDelta-DXqQORbM.mjs";import{CONFLICT_ERROR_CODE as C,getErrorCode as S,getRetryAfterMs as A,isConflictError as D,isForbiddenError as M,isRateLimitedError as _,isUnauthorizedError as I}from"./packem_shared/CONFLICT_ERROR_CODE-B2SU0CaJ.mjs";import{httpStream as h}from"./packem_shared/httpStream-Cz4_QyjV.mjs";import{c as L}from"./packem_shared/local-store-C53xDvEr.mjs";import{LunoraClient as b}from"./packem_shared/LunoraClient-DRo2LNe9.mjs";import{createMutationRunner as O}from"./packem_shared/createMutationRunner-lQXH8Amk.mjs";import{createMutatorRunner as U}from"./packem_shared/createMutatorRunner-BVzo0FBZ.mjs";import{c as B}from"./packem_shared/offline-queue-b-v6bWWd.mjs";import{createInMemoryPersistence as N,createIndexedDbPersistence as v}from"./packem_shared/createInMemoryPersistence-CQYXy8UP.mjs";import{preloadQuery as z,preloadedQueryResult as K}from"./packem_shared/preloadQuery-DjwSjFwt.mjs";import{createInMemoryQueryCache as W,createIndexedDbQueryCache as X,queryCacheKey as j}from"./packem_shared/createInMemoryQueryCache-DjCKrLjk.mjs";import{createReconnect as H}from"./packem_shared/createReconnect-CFT7YRSR.mjs";import{default as Y}from"./packem_shared/createSnapshotPrecondition-DOKRAJ4b.mjs";import{DEFAULT_MAX_BUFFER as $,createStream as ee}from"./packem_shared/DEFAULT_MAX_BUFFER-TBn2s7Rz.mjs";import{SubscriptionRegistry as oe}from"./packem_shared/SubscriptionRegistry-CdrOD7sZ.mjs";import{ClientServiceWorker as ae}from"./packem_shared/ClientServiceWorker-CRQ5yl7-.mjs";import{createReply as ne,sendToSw as pe}from"./packem_shared/createReply-DF0jRsv-.mjs";export{C as CONFLICT_ERROR_CODE,ae as ClientServiceWorker,$ as DEFAULT_MAX_BUFFER,b as LunoraClient,B as OfflineQueue,a as RETIRE_AFTER_DURABLE_SEQ_ADVANCE,oe as SubscriptionRegistry,d as TabCoordinator,o as anyApi,y as applyDelta,m as createAsyncStoragePersistence,s as createClientQuery,f as createInMemoryBookmarkStorage,N as createInMemoryPersistence,W as createInMemoryQueryCache,v as createIndexedDbPersistence,X as createIndexedDbQueryCache,L as createLocalStore,O as createMutationRunner,U as createMutatorRunner,H as createReconnect,ne as createReply,Y as createSnapshotPrecondition,ee as createStream,S as getErrorCode,A as getRetryAfterMs,h as httpStream,D as isConflictError,M as isForbiddenError,R as isMutationDelta,_ as isRateLimitedError,I as isUnauthorizedError,c as maxSeq,z as preloadQuery,K as preloadedQueryResult,j as queryCacheKey,n as reconcileOptimistic,pe as sendToSw};
+import{anyApi as o}from"./packem_shared/anyApi-BD4dgvDY.mjs";import{RETIRE_AFTER_DURABLE_SEQ_ADVANCE as a,maxSeq as n,reconcileOptimistic as p}from"./packem_shared/RETIRE_AFTER_DURABLE_SEQ_ADVANCE-D96iRJDY.mjs";import{createAsyncStoragePersistence as m}from"./packem_shared/createAsyncStoragePersistence-BRLqeXsC.mjs";import{default as f}from"./packem_shared/createInMemoryBookmarkStorage-DCd5Ej-t.mjs";import{createClientQuery as s}from"./packem_shared/createClientQuery-CrdRoicO.mjs";import{TabCoordinator as d}from"./packem_shared/TabCoordinator-CMFYQCL-.mjs";import{applyDelta as y,isMutationDelta as R}from"./packem_shared/applyDelta-DXqQORbM.mjs";import{CONFLICT_ERROR_CODE as C,getErrorCode as S,getRetryAfterMs as A,isConflictError as D,isForbiddenError as M,isRateLimitedError as _,isUnauthorizedError as h}from"./packem_shared/CONFLICT_ERROR_CODE-B2SU0CaJ.mjs";import{httpStream as Q}from"./packem_shared/httpStream-Cz4_QyjV.mjs";import{c as L}from"./packem_shared/local-store-Di_y1q4e.mjs";import{LunoraClient as b}from"./packem_shared/LunoraClient-BzVeQ8ub.mjs";import{createMutationRunner as O}from"./packem_shared/createMutationRunner-lQXH8Amk.mjs";import{createMutatorRunner as U}from"./packem_shared/createMutatorRunner-BVzo0FBZ.mjs";import{h as B}from"./packem_shared/offline-queue-BeWay5u5.mjs";import{createInMemoryPersistence as N,createIndexedDbPersistence as v}from"./packem_shared/createInMemoryPersistence-CQYXy8UP.mjs";import{preloadQuery as z,preloadedQueryResult as K}from"./packem_shared/preloadQuery-DjwSjFwt.mjs";import{createInMemoryQueryCache as W,createIndexedDbQueryCache as X,queryCacheKey as j}from"./packem_shared/createInMemoryQueryCache-DjCKrLjk.mjs";import{createReconnect as H}from"./packem_shared/createReconnect-CFT7YRSR.mjs";import{default as Y}from"./packem_shared/createSnapshotPrecondition-9rTzUURM.mjs";import{DEFAULT_MAX_BUFFER as $,createStream as ee}from"./packem_shared/DEFAULT_MAX_BUFFER-TBn2s7Rz.mjs";import{SubscriptionRegistry as oe}from"./packem_shared/SubscriptionRegistry-Dr5H2kVT.mjs";import{ClientServiceWorker as ae}from"./packem_shared/ClientServiceWorker-CRQ5yl7-.mjs";import{createReply as pe,sendToSw as ce}from"./packem_shared/createReply-DF0jRsv-.mjs";export{C as CONFLICT_ERROR_CODE,ae as ClientServiceWorker,$ as DEFAULT_MAX_BUFFER,b as LunoraClient,B as OfflineQueue,a as RETIRE_AFTER_DURABLE_SEQ_ADVANCE,oe as SubscriptionRegistry,d as TabCoordinator,o as anyApi,y as applyDelta,m as createAsyncStoragePersistence,s as createClientQuery,f as createInMemoryBookmarkStorage,N as createInMemoryPersistence,W as createInMemoryQueryCache,v as createIndexedDbPersistence,X as createIndexedDbQueryCache,L as createLocalStore,O as createMutationRunner,U as createMutatorRunner,H as createReconnect,pe as createReply,Y as createSnapshotPrecondition,ee as createStream,S as getErrorCode,A as getRetryAfterMs,Q as httpStream,D as isConflictError,M as isForbiddenError,R as isMutationDelta,_ as isRateLimitedError,h as isUnauthorizedError,n as maxSeq,z as preloadQuery,K as preloadedQueryResult,j as queryCacheKey,p as reconcileOptimistic,ce as sendToSw};