@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.153

package/dist/app-host/device-registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-registration.js","sourceRoot":"","sources":["../../src/app-host/device-registration.ts"],"names":[],"mappings":"AAAA;6EAC6E;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe1C,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC9B;IAArB,YAAqB,MAAyD;QAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAAzG,WAAM,GAAN,MAAM,CAAmD;QAAiD,IAAI,CAAC,IAAI,GAAC,4BAA4B,CAAC;IAAC,CAAC;CACzK;AACD,MAAM,IAAI,GAAC,CAAC,CAAsC,EAAC,EAAE,CAAA,IAAI,0BAA0B,CAAC,CAAC,CAAC,CAAC;AACvF,MAAM,GAAG,GAAC,CAAC,CAAY,EAAC,EAAE,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnF;;mFAEmF;AACnF,MAAM,OAAO,uBAAuB;IASL;IAAwC;IAA0E;IARvI,SAAS,GAAC,KAAK,CAAC;IACP,QAAQ,GAAC,IAAI,eAAe,EAAE,CAAC;IAC/B,MAAM,CAAQ;IACd,SAAS,CAAQ;IACjB,KAAK,CAAkG;IACvG,OAAO,CAAuB;IAC9B,GAAG,CAAY;IACf,SAAS,CAAyB;IACnD,YAA6B,OAAsB,EAAkB,OAA0B,EAAC,OAA6B,EAAkB,WAAuC,EAAC,UAAoF,EAAE;QAAhP,YAAO,GAAP,OAAO,CAAe;QAAkB,YAAO,GAAP,OAAO,CAAmB;QAAgD,gBAAW,GAAX,WAAW,CAA4B;QACpL,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,WAAW,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,cAAc,EAAC,OAAO,CAAC,cAAc,EAAC,IAAI,EAAC,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC;YAC9I,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC;oBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACpJ,IAAI,OAAO,CAAC,IAAI,KAAG,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAG,aAAa;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,CAAC,SAAS,GAAC,OAAO,CAAC,QAAQ,CAAC;YAAA,MAAM,CAAC,GAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAG,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,KAAG,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACzM,IAAI,CAAC,MAAM,GAAC,CAAC,CAAC,MAAM,CAAC;YAAA,IAAI,CAAC,GAAG,GAAC,OAAO,CAAC,GAAG,IAAE,IAAI,CAAC,GAAG,CAAC;YAAA,IAAI,CAAC,SAAS,GAAC,OAAO,CAAC,KAAK,IAAE,UAAU,CAAC,KAAK,CAAC;YACnG,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAC,IAAI;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACjI,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,EAAC,YAAY,EAAC,IAAI,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAC,cAAc,EAAC,IAAI,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,EAAC,QAAQ,EAAC,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;YACpO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YAAA,OAAO,CAAC,SAAS,EAAE,CAAC;YAAA,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC;IACtD,CAAC;IACO,OAAO;QACb,IAAI,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAG,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,KAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,KAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,OAAO,KAAK,CAAC;QAAA,CAAC;IACtZ,CAAC;IACO,KAAK,CAAC,MAAkB,IAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAAA,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAAA,CAAC,CAAA,CAAC;IAC5G,KAAK,CAAC,IAAI,CAAC,IAAoD,EAAC,MAAa,EAAC,IAAqB,EAAC,MAAkB;QAC5H,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,IAAI,GAAC,IAAI,eAAe,EAAE,EAAC,KAAK,GAAC,GAAE,EAAE,CAAA,IAAI,CAAC,KAAK,EAAE,EAAC,KAAK,GAAC,UAAU,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC;QAAC,KAA2B,CAAC,KAAK,EAAE,EAAE,CAAC;QACjJ,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QACpH,MAAM,KAAK,GAAC,IAAI,UAAU,CAAC,EAAE,GAAC,IAAI,CAAC,CAAC;QAAA,IAAI,KAAK,GAAC,CAAC,EAAC,QAAQ,GAAe,IAAI,EAAC,MAAM,GAA8C,IAAI,CAAC;QACrI,IAAI,CAAC;YACH,MAAM,SAAS,GAAC,IAAI,CAAC,SAAS,CAAC;YAAA,QAAQ,GAAC,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,UAAU,MAAM,EAAE,EAAC,GAAG,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,cAAc,EAAC,kBAAkB,EAAC,CAAC,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,KAAK,EAAC,SAAS,EAAC,cAAc,EAAC,aAAa,EAAC,CAAC,CAAC;YAClT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;YACtF,wEAAwE;YACxE,MAAM,MAAM,GAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAAA,IAAI,MAAM,KAAG,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAAA,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAA,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,CAAC;YAChL,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,MAAM,GAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5E,SAAS,CAAC;gBAAA,MAAM,EAAC,IAAI,EAAC,KAAK,EAAC,GAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAAA,IAAI,CAAC;oBAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;oBAAA,IAAI,IAAI;wBAAE,MAAM;oBAAA,IAAI,KAAK,GAAC,KAAK,CAAC,MAAM,GAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBAAA,IAAI,CAAC,KAAK,EAAE,CAAC;wBAAA,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;oBAAA,CAAC;oBAAA,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,CAAC,CAAC;oBAAA,KAAK,IAAE,KAAK,CAAC,MAAM,CAAC;gBAAA,CAAC;wBAAS,CAAC;oBAAA,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAA,CAAC;YAAA,CAAC;YAC9R,MAAM,KAAK,GAAS,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,OAAO,KAA+B,CAAC;QAC/H,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,YAAY,0BAA0B;gBAAE,MAAM,CAAC,CAAC;YAAA,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAAA,CAAC;gBACxG,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;YAAA,MAAM,EAAE,WAAW,EAAE,CAAC;YAAA,YAAY,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;IACvO,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAA4B;QACzC,IAAI,SAAS,GAAiB,IAAI,EAAC,SAAS,GAAiB,IAAI,CAAC;QAClE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAA,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC;YACxF,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzG,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpF,IAAI,OAAO,MAAM,KAAG,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAC,EAAE,GAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACvH,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtH,IAAI,OAAO,MAAM,CAAC,SAAS,KAAG,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,IAAI,MAAM,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,EAAE,GAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9Q,SAAS,GAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,QAAQ,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM,KAAK,GAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,SAAS,GAAC,KAAK,CAAC,SAAS,CAAC;YACtL,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAC,MAAM,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,YAAY,EAAC,CAAC,2BAA2B,CAAC,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,OAAO,EAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,MAAM,EAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAC,QAAQ,EAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAC,GAAG,EAAC,GAAG,CAAC,SAAS,CAAC,EAAC,CAAC,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACnW,IAAI,MAAM,CAAC,SAAS,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YACnE,MAAM,OAAO,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,cAAc,EAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,YAAY,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,EAAC,cAAc,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,EAAC,CAAC,CAAC;YAC9R,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,EAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9E,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;YAAA,OAAO,OAAO,CAAC;QACrE,CAAC;QAAC,OAAM,CAAC,EAAE,CAAC;YAAA,IAAI,CAAC,KAAK,EAAE,CAAC;YAAA,IAAI,CAAC,YAAY,0BAA0B;gBAAE,MAAM,CAAC,CAAC;YAAA,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAAA,CAAC;gBACjG,CAAC;YAAA,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,CAAC;IAClD,CAAC;IACD,KAAK,KAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,CAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA,CAAC;CACtI"}

package/dist/app-host/foreground-wake.d.ts

@@ -0,0 +1,43 @@
+/** Host lifecycle hints -> existing authenticated native unary reconnect/head.
+ * No remote push decoding, new auth/signing API, keyed/Saved or lease authority.
+ * Optional/unexported. Host retains Worker/installation/collection ownership. */
+import type { AppCpLogAuthority } from "./cp-authority.js";
+import type { AppWasmRuntime } from "./wasm-runtime.js";
+export declare class AppForegroundWakeError extends Error {
+    readonly reason: "binding" | "fenced" | "unavailable";
+    constructor(reason: "binding" | "fenced" | "unavailable");
+}
+type Runtime = Pick<AppWasmRuntime, "reconnectLogTransport" | "tick">;
+type Authority = Pick<AppCpLogAuthority, "accessToken" | "logTransport" | "isCurrent" | "endpoint" | "collection" | "origin">;
+export declare class AppForegroundLogWake {
+    private readonly runtime;
+    private readonly authority;
+    private readonly options;
+    private readonly pins;
+    private readonly lifetime;
+    private readonly period;
+    private visible;
+    private closed;
+    private timer;
+    private running;
+    constructor(runtime: Runtime, authority: Authority, options?: {
+        periodMs?: number;
+        onUnavailable?: () => void;
+    });
+    private check;
+    /** First-party host forwards visibility/Capacitor resume, never a remote
+     * Reconnected push. CP access is admitted before native session replacement. */
+    foreground(): Promise<boolean>;
+    hidden(): void;
+    /** CP notify is only a coalesced hint for THIS collection. Hidden hints need
+     * no queue: next foreground/head learns the actual authenticated prefix. */
+    notificationHint(collection: string): Promise<boolean>;
+    private request;
+    private perform;
+    private clearTimer;
+    private schedule;
+    /** Scheduler shutdown only: NOT native retirement or lease release. Hung
+     * native IO requires host Worker termination BEFORE lease release. */
+    close(): Promise<void>;
+}
+export {};

package/dist/app-host/foreground-wake.js

@@ -0,0 +1,113 @@
+export class AppForegroundWakeError extends Error {
+    reason;
+    constructor(reason) {
+        super(`app foreground wake: ${reason}`);
+        this.reason = reason;
+        this.name = "AppForegroundWakeError";
+    }
+}
+export class AppForegroundLogWake {
+    runtime;
+    authority;
+    options;
+    pins;
+    lifetime = new AbortController();
+    period;
+    visible = false;
+    closed = false;
+    timer = null;
+    running = null;
+    constructor(runtime, authority, options = {}) {
+        this.runtime = runtime;
+        this.authority = authority;
+        this.options = options;
+        this.period = options.periodMs ?? 60_000;
+        if (!Number.isSafeInteger(this.period) || this.period < 5_000 || this.period > 300_000 || !authority.isCurrent())
+            throw new AppForegroundWakeError("binding");
+        this.pins = Object.freeze({ endpoint: authority.endpoint, collection: authority.collection, origin: authority.origin });
+    }
+    check() {
+        try {
+            if (this.closed || this.lifetime.signal.aborted || !this.authority.isCurrent() || this.authority.endpoint !== this.pins.endpoint ||
+                this.authority.collection !== this.pins.collection || this.authority.origin !== this.pins.origin)
+                throw new AppForegroundWakeError("fenced");
+        }
+        catch {
+            throw new AppForegroundWakeError("fenced");
+        }
+    }
+    /** First-party host forwards visibility/Capacitor resume, never a remote
+     * Reconnected push. CP access is admitted before native session replacement. */
+    foreground() { this.check(); this.visible = true; return this.request(); }
+    hidden() { this.visible = false; this.clearTimer(); }
+    /** CP notify is only a coalesced hint for THIS collection. Hidden hints need
+     * no queue: next foreground/head learns the actual authenticated prefix. */
+    notificationHint(collection) {
+        this.check();
+        if (collection !== this.pins.collection || !this.visible)
+            return Promise.resolve(false);
+        return this.request();
+    }
+    request() {
+        this.check();
+        if (!this.visible)
+            return Promise.resolve(false);
+        if (this.running)
+            return this.running;
+        this.clearTimer();
+        const run = this.perform().finally(() => { this.running = null; this.schedule(); });
+        this.running = run;
+        return run;
+    }
+    async perform() {
+        try {
+            this.check();
+            await this.authority.accessToken({ signal: this.lifetime.signal });
+            this.check();
+            if (!this.visible)
+                return false;
+            // Existing replacement aborts/drains old IO; retains SAME original native
+            // owners/lease and classifies originals unknown. No fresh/reset fallback.
+            const pump = await this.runtime.reconnectLogTransport(this.authority.logTransport());
+            this.check();
+            if (!this.visible)
+                return false;
+            this.runtime.tick();
+            await pump.pump();
+            this.check();
+            return true;
+        }
+        catch (error) {
+            if (error instanceof AppForegroundWakeError)
+                throw error;
+            this.check(); // Offline CP failure does NOT destroy verified local owners.
+            throw new AppForegroundWakeError("unavailable");
+        }
+    }
+    clearTimer() { if (this.timer !== null) {
+        clearTimeout(this.timer);
+        this.timer = null;
+    } }
+    schedule() {
+        if (!this.visible || this.closed)
+            return;
+        this.timer = setTimeout(() => { this.timer = null; void Promise.resolve().then(() => this.request()).catch(() => { try {
+            this.options.onUnavailable?.();
+        }
+        catch { /* content-free host notification only */ } }); }, this.period);
+        this.timer.unref?.();
+    }
+    /** Scheduler shutdown only: NOT native retirement or lease release. Hung
+     * native IO requires host Worker termination BEFORE lease release. */
+    async close() {
+        this.closed = true;
+        this.visible = false;
+        this.clearTimer();
+        this.lifetime.abort();
+        try {
+            await this.running;
+        }
+        catch { /* fenced or unavailable; no state reset */ }
+    }
+}
+//# sourceMappingURL=foreground-wake.js.map

package/dist/app-host/foreground-wake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreground-wake.js","sourceRoot":"","sources":["../../src/app-host/foreground-wake.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B;IAArB,YAAqB,MAA4C;QAAI,KAAK,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAAxF,WAAM,GAAN,MAAM,CAAsC;QAA6C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IAAC,CAAC;CACtJ;AAGD,MAAM,OAAO,oBAAoB;IAQF;IAAmC;IAC7C;IARF,IAAI,CAAqE;IACzE,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,CAAS;IACxB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IACf,KAAK,GAAyC,IAAI,CAAC;IACnD,OAAO,GAA4B,IAAI,CAAC;IAChD,YAA6B,OAAgB,EAAmB,SAAoB,EACjE,UAA6D,EAAE;QADrD,YAAO,GAAP,OAAO,CAAS;QAAmB,cAAS,GAAT,SAAS,CAAW;QACjE,YAAO,GAAP,OAAO,CAAwD;QAChF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;YAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC9J,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1H,CAAC;IACO,KAAK;QACX,IAAI,CAAC;YAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ;gBACpI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QACjJ,MAAM,CAAC;YAAC,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;IACvD,CAAC;IACD;oFACgF;IAChF,UAAU,KAAuB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAW,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3D;gFAC4E;IAC5E,gBAAgB,CAAC,UAAkB;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/H,CAAC;IACO,OAAO;QACb,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QAAC,OAAO,GAAG,CAAC;IACjC,CAAC;IACO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/F,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAChC,0EAA0E;YAC1E,0EAA0E;YAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACnG,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB;gBAAE,MAAM,KAAK,CAAC;YACzD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,6DAA6D;YAC3E,MAAM,IAAI,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACO,UAAU,KAAW,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IAAC,CAAC,CAAC,CAAC;IAChG,QAAQ;QACd,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClO,IAAI,CAAC,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;IACnD,CAAC;IACD;0EACsE;IACtE,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnF,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,OAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IACnF,CAAC;CACF"}

package/dist/app-host/handover.d.ts

@@ -0,0 +1,27 @@
+/** Hosted-first handover candidate. No guessed keys, witness decoding-as-trust,
+ * current-generation substitution or Saved/physical durability implication. */
+import type { MdbaseClient } from "../client.js";
+import type { FramePort } from "../transport/port.js";
+import type { ConfirmedHead } from "../wire.js";
+import type { AppHandoverSource, AppWasmRuntime } from "./wasm-runtime.js";
+export interface AppHandoverOptions {
+    runtime: AppWasmRuntime;
+    /** EXACT same runtime port backing localClient, after its authorized hello. */
+    localPort: FramePort;
+    localClient: Pick<MdbaseClient, "hello" | "appliedPrefix">;
+    hostedClient: Pick<MdbaseClient, "hello" | "authenticatedDevice">;
+    source: AppHandoverSource;
+    /** Account/install/selection/authority generation, NOT online status. */
+    isCurrent(): boolean;
+}
+export interface AppVerifiedHandover {
+    readonly head: Readonly<ConfirmedHead>;
+    readonly appliedThrough: number;
+    /** Revalidates local session/policy/retained prefix/owner scope. Hosted
+     * connectivity is no longer required after capture; offline reads stay local. */
+    isCurrent(): boolean;
+    dispose(): void;
+}
+/** One explicit attempt, no hidden reconnect/retry or automatic provider switch.
+ * Return null on any absence/fault/stale/signature/readiness/history failure. */
+export declare function verifyAppHandover(options: AppHandoverOptions, signal: AbortSignal): Promise<AppVerifiedHandover | null>;

package/dist/app-host/handover.js

@@ -0,0 +1,82 @@
+function equal(a, b) {
+    return a.seq === b.seq && a.chain === b.chain && a.policyGeneration === b.policyGeneration && a.catalogGeneration === b.catalogGeneration;
+}
+/** One explicit attempt, no hidden reconnect/retry or automatic provider switch.
+ * Return null on any absence/fault/stale/signature/readiness/history failure. */
+export async function verifyAppHandover(options, signal) {
+    let witness = null;
+    try {
+        const { runtime, localPort, localClient, hostedClient, source } = options;
+        const hosted = hostedClient.hello, local = localClient.hello;
+        const collection = source.collection, deviceId = source.deviceId;
+        const authenticatedDevice = hostedClient.authenticatedDevice;
+        const sameDevice = (id) => typeof id === "string" && id.replace(/-/g, "").toLowerCase() === deviceId.replace(/-/g, "").toLowerCase();
+        if (!sameDevice(authenticatedDevice))
+            return null;
+        const fact = hosted.status.confirmedHead;
+        const captured = fact ? Object.freeze({ ...fact }) : undefined;
+        if (!captured || !hosted.headWitness || hosted.headWitness.length > 64 * 1024 || captured.seq === 0 || hosted.collection !== collection || local.collection !== collection)
+            return null;
+        witness = new Uint8Array(hosted.headWitness);
+        const owned = witness;
+        const current = () => {
+            try {
+                return !signal.aborted && options.isCurrent() === true && source.isCurrent() === true && local.collection === collection && source.collection === collection && source.deviceId === deviceId && localClient.hello === local;
+            }
+            catch {
+                return false;
+            }
+        };
+        const ready = () => {
+            try {
+                const o = runtime.observations();
+                return !o.requiresReopen && !o.keyringRebuilding && !o.keyringRebuildFailed && o.status.mode === "synced" && o.status.confirmedHead !== undefined && o.status.confirmedHead.seq >= captured.seq;
+            }
+            catch {
+                return false;
+            }
+        };
+        const native = () => {
+            if (!current() || !ready())
+                return false;
+            const verified = runtime.verifyHandover(localPort, source, owned);
+            return verified !== null && equal(verified, captured);
+        };
+        const candidateCurrent = () => {
+            try {
+                return !signal.aborted && current() && hostedClient.hello === hosted && hostedClient.authenticatedDevice === authenticatedDevice;
+            }
+            catch {
+                return false;
+            }
+        };
+        if (!candidateCurrent() || !native())
+            return null;
+        const prefix = await localClient.appliedPrefix(captured.seq, signal); // current READ, SDK retry:false.
+        if (!candidateCurrent() || !native() || prefix.seq !== captured.seq || prefix.appliedThrough < captured.seq || prefix.chain !== captured.chain)
+            return null;
+        // Copy/freeze tuple: caller mutation of status/hello must not rewrite proof.
+        const head = Object.freeze({ ...captured });
+        let disposed = false;
+        const evidence = {
+            head, appliedThrough: prefix.appliedThrough,
+            isCurrent: () => { if (disposed)
+                return false; try {
+                return native() && equal(head, captured);
+            }
+            catch {
+                return false;
+            } },
+            dispose: () => { disposed = true; owned.fill(0); },
+        };
+        witness = null; // evidence owns only bounded public signed bytes, never keys.
+        return evidence;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        witness?.fill(0);
+    }
+}
+//# sourceMappingURL=handover.js.map

package/dist/app-host/handover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handover.js","sourceRoot":"","sources":["../../src/app-host/handover.ts"],"names":[],"mappings":"AAyBA,SAAS,KAAK,CAAC,CAAgB,EAAE,CAAgB;IAC/C,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,iBAAiB,CAAC;AAC5I,CAAC;AACD;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA2B,EAAE,MAAmB;IACtF,IAAI,OAAO,GAAsB,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC1E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjE,MAAM,mBAAmB,GAAG,YAAY,CAAC,mBAAmB,CAAC;QAC7D,MAAM,UAAU,GAAG,CAAC,EAAsB,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACzJ,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACxL,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,KAAK,KAAK,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC9P,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;YAClM,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAC;YACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAClE,OAAO,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC5B,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,EAAE,IAAI,YAAY,CAAC,KAAK,KAAK,MAAM,IAAI,YAAY,CAAC,mBAAmB,KAAK,mBAAmB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACnK,CAAC,CAAC;QACF,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,iCAAiC;QACvG,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC5J,6EAA6E;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAAC,IAAI,QAAQ,GAAG,KAAK,CAAC;QAClE,MAAM,QAAQ,GAAwB;YACpC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;YAC3C,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC;gBAAC,OAAO,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC,CAAC,CAAC;YAC1H,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACnD,CAAC;QACF,OAAO,GAAG,IAAI,CAAC,CAAC,8DAA8D;QAC9E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;YAChB,CAAC;QAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/B,CAAC"}

package/dist/app-host/http-log.d.ts

@@ -0,0 +1,96 @@
+import type { AppLogCall, AppLogTransport } from "./log-pump.js";
+import { type AppServerOutcome, type AppServerProblem } from "./cp-problem.js";
+export declare class AppHttpLogError extends Error {
+    readonly reason: "binding" | "fenced" | "shape" | "unavailable" | "integrity" | AppServerOutcome;
+    readonly server?: AppServerProblem | undefined;
+    constructor(reason: "binding" | "fenced" | "shape" | "unavailable" | "integrity" | AppServerOutcome, server?: AppServerProblem | undefined);
+}
+/** A domain-specific proof, never a generic device signer reachable by grant clients. */
+export interface AppLogHttpProof {
+    readonly endpoint: number | bigint;
+    readonly originalCallId: number | bigint;
+    /** Exact frame and bearer needed for the fixed WASM transcript, not a digest signer. */
+    readonly frame: Uint8Array;
+    readonly token: string;
+    readonly method: string;
+    readonly path: "/v1/rpc";
+    readonly collection: string;
+    readonly nonce: Uint8Array;
+    readonly bodyHash: Uint8Array;
+    readonly tokenHash: Uint8Array;
+    readonly digest: Uint8Array;
+}
+/** Supplied by authenticated account/device selection and protected signing custody. */
+export interface AppLogHttpAuthority {
+    readonly endpoint: number | bigint;
+    readonly collection: string;
+    readonly origin: string;
+    /** Approved first-party object-store origins besides `origin` itself (always
+     * approved: the log mints direct URLs there), captured before any send. */
+    readonly directOrigins: readonly string[];
+    isCurrent(): boolean;
+    accessToken(options: {
+        signal: AbortSignal;
+    }): Promise<string>;
+    /** The log refused this token: do not offer it again. */
+    invalidateToken?(token: string): void;
+    signLogProof(proof: AppLogHttpProof, options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array>;
+}
+export interface AppLogHttpOptions {
+    fetch?: typeof globalThis.fetch;
+    now?: () => number;
+    /** Explicit local harness only. Production requires HTTPS for every origin. */
+    allowLoopbackHttp?: boolean;
+}
+/** All operations are bound to ONE immutable authenticated generation. A throw is
+ * unknown outcome; AppLogPump feeds NoResponse, never an invented rejection/save. */
+export declare class AppHttpLogTransport implements AppLogTransport {
+    private readonly authority;
+    readonly endpoint: number | bigint;
+    readonly collection: string;
+    private readonly endpointId;
+    private readonly collectionBytes;
+    private readonly base;
+    private readonly approved;
+    private readonly fetchImpl;
+    private readonly now;
+    private readonly loopback;
+    private commitId;
+    /** Unused piggybacked nonces (one per reply, a few kept for concurrent RPCs);
+     * each is taken (never shared) by exactly one later RPC. */
+    private spares;
+    private responseId;
+    private readonly receiving;
+    /** Only active logical sends, with bytes admitted under the existing body /
+     * range caps. Provisional network activity, never authenticated sync progress. */
+    responseProgress(): readonly {
+        id: number;
+        bytes: number;
+    }[];
+    constructor(authority: AppLogHttpAuthority, options?: AppLogHttpOptions);
+    isCurrent(): boolean;
+    private check;
+    private request;
+    private response;
+    private fetch;
+    private cleanups;
+    private withCleanup;
+    private release;
+    private read;
+    /** Bounded, sanitized server problem (code/reason/retry only). */
+    private refusal;
+    /** Take the newest fresh spare nonce; it is single use, so never hand it out twice. */
+    private takeSpare;
+    private keepSpare;
+    private freshNonce;
+    private rpc;
+    private direct;
+    private timeout;
+    private upload;
+    private download;
+    send(call: AppLogCall, options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array>;
+}