@mdbase-dev/sdk 0.1.0-beta.173 → 0.1.0-beta.175

package/dist/browser/mdbase-sdk.js

@@ -12501,6 +12501,7 @@ var MdbaseSDK = (() => {
     if (names.includes("collection_not_yet_migrated")) return "collection_not_yet_migrated";
     if (names.includes("collection_migrating")) return "collection_migrating";
     if (names.includes("account_suspended")) return "account_suspended";
+    if (problem7.status === 403 && problem7.code === "installation_private_device_not_allowed") return "private_device_not_allowed";
     if (names.some((n) => n === "moved_to_next_runtime" || n === "collection_moved" || n === "client_update_required") || problem7.status === 426) return "update_required";
     return null;
   }
@@ -12782,7 +12783,8 @@ var MdbaseSDK = (() => {
         "unlock_strict",
         "unlock_unavailable",
         "unlock_failed",
-        "private_device_limit"
+        "private_device_limit",
+        "private_device_not_allowed"
       ];
       GENERIC = ["Something went wrong", "An unexpected problem occurred. Reload the app, and contact support if it keeps happening.", "reload", "error"];
       BUSY = ["Another step hasn't finished", "The app couldn't finish this step yet. Try again, or reload if it keeps happening.", "retry", "warning", true];
@@ -12910,7 +12912,8 @@ var MdbaseSDK = (() => {
         unlock_strict: ["Can't be unlocked here", "This account approves each device from another device instead of using an encryption password, and this app can't do that yet. Use the mdbase desktop app on a computer that has this collection.", "none", "info"],
         unlock_unavailable: ["This app can't unlock yet", "This version of the app can't unlock Private collections. Update the app, then try again.", "update_app", "warning"],
         unlock_failed: ["Couldn't unlock this collection", "Your password or recovery key is right, but this collection didn't give this device its key. Try again. If it keeps happening, open the mdbase desktop app on a computer that has this collection.", "retry", "warning"],
-        private_device_limit: ["One Private collection per app", "This app already keeps another Private collection on this device, and it can keep only one. Open that collection, or sign out of mdbase in this app to switch.", "choose_collection", "warning"]
+        private_device_limit: ["One Private collection per app", "This app already keeps another Private collection on this device, and it can keep only one. Open that collection, or sign out of mdbase in this app to switch.", "choose_collection", "warning"],
+        private_device_not_allowed: ["This app can't keep this collection", "Access to this Private collection can't be restored in this app on this server. Open it in the mdbase desktop app on a computer that has it.", "none", "warning"]
       };
       ALIASES = Object.assign(/* @__PURE__ */ Object.create(null), {
         no_device_online: "device_offline",
@@ -13024,6 +13027,7 @@ var MdbaseSDK = (() => {
         sync_required: "Collection availability sync_required: the grant no longer matches the collection's membership; run authorize() again.",
         no_device_registered: "Collection availability no_device_registered: Connect has no device that can serve this collection (none registered with sync on, or its device was revoked).",
         installation_scope_removed: "The original installation lost this collection scope. Only explicit approval of a fresh scoped installation can regain access.",
+        private_device_not_allowed: "Connect refused a recovery sign-in's Private device access (403 installation_private_device_not_allowed): MDBASE_NEXT_PRIVATE_APP_DEVICES is off, or the registered manifest does not declare offline.replica.",
         access_removed: "Collection availability access_removed: the grant's account is no longer a member of the collection.",
         collection_deleted: "Collection availability collection_deleted: the owner deleted the collection.",
         collection_unavailable: "Connect problem collection_unavailable without a known reason: the collection is not offered to this app or client.",
@@ -29987,7 +29991,7 @@ ${end.comment}` : end.comment;
               const binding2 = object5(p.recoveryFor, "accountId,collectionId");
               id2(binding2.accountId);
               id2(binding2.collectionId);
-              if (!p.owner || p.requestedCreateCollections === true || p.freshRequestedCreateCollections === true || p.freshRequestedPrivateDevice === true) throw fail3("binding");
+              if (!p.owner || p.requestedCreateCollections === true || p.freshRequestedCreateCollections === true) throw fail3("binding");
             }
             if (selection !== void 0) {
               if (!isAppEnvironmentSelection(selection) || selection.environment !== p.environment || selection.appOrigin !== p.origin || selection.cpOrigin !== p.cpOrigin || p.allowLoopbackHttp === true && !selection.allowLoopbackHttp) throw fail3("binding");
@@ -30025,7 +30029,7 @@ ${end.comment}` : end.comment;
           if (s.requestedPrivateDevice !== void 0 && s.requestedPrivateDevice !== true) throw fail3("recovery_required");
           if (s.privateDeviceCollectionIds !== void 0) {
             const scopes = this.collectionIds(s.privateDeviceCollectionIds);
-            if (!scopes.length || !s.token || s.recoveryFor !== void 0 || scopes.some((c) => !s.collectionIds.includes(c))) throw fail3("recovery_required");
+            if (!scopes.length || !s.token || scopes.some((c) => !s.collectionIds.includes(c))) throw fail3("recovery_required");
             s.privateDeviceCollectionIds = scopes;
           }
           if (s.recoveryFor !== void 0) {
@@ -30033,7 +30037,7 @@ ${end.comment}` : end.comment;
             id2(binding2.accountId);
             id2(binding2.collectionId);
           }
-          if (s.recoveryFor === void 0 !== (p.recoveryFor === void 0) || s.recoveryFor?.accountId !== p.recoveryFor?.accountId || s.recoveryFor?.collectionId !== p.recoveryFor?.collectionId || s.recoveryFor && (s.requestedCreateCollections || s.createCollections || s.selection && s.selection.accountId !== s.recoveryFor.accountId || s.token && (s.nativeSelection ? s.collectionIds.length !== 0 || s.nativeSelection.collectionId !== s.recoveryFor.collectionId : s.collectionIds.length !== 1 || s.collectionIds[0] !== s.recoveryFor.collectionId || s.collectionSelection?.selectedCollectionId !== s.recoveryFor.collectionId))) throw fail3("recovery_required");
+          if (s.recoveryFor === void 0 !== (p.recoveryFor === void 0) || s.recoveryFor?.accountId !== p.recoveryFor?.accountId || s.recoveryFor?.collectionId !== p.recoveryFor?.collectionId || s.recoveryFor && (s.requestedCreateCollections || s.createCollections || s.selection && s.selection.accountId !== s.recoveryFor.accountId || s.token && (s.nativeSelection ? s.collectionIds.length !== 0 || s.nativeSelection.collectionId !== s.recoveryFor.collectionId : !_AppProtectedInstallationSignIn.recovered(s.recoveryFor.collectionId, s.collectionIds, s.privateDeviceCollectionIds ?? [], s.collectionSelection)))) throw fail3("recovery_required");
           if (s.consentRequest !== null) {
             const c = object5(s.consentRequest, `requestId,secret,requestedCreateCollections,challenge,completed,addedCollectionIds,approvedCreateCollections${Object.hasOwn(s.consentRequest, "requestedPrivateDevice") ? ",requestedPrivateDevice" : ""}${portalKeys(s.consentRequest, true)}`);
             if (c.requestedPrivateDevice !== void 0 && c.requestedPrivateDevice !== true) throw fail3("recovery_required");
@@ -30335,7 +30339,7 @@ ${end.comment}` : end.comment;
             const { status, value: v } = await this.json(`/v1/pairing-requests/${this.state.requestId}/exchange`, true);
             if (v.status === "pending") {
               object5(v, "status");
-              if (status !== 202 || this.state.selection) throw fail3("response");
+              if (status !== 202 || this.state.selection && !this.state.renewal) throw fail3("response");
               return this.view();
             }
             const keys2 = `status,request_id,account_id,connector_id,device_id,installation_id,kind,challenge,approval_mode,app_id,app_origin,expires_at${portalKeys(v)}${this.recoveryTargetKeys()}`;
@@ -30364,7 +30368,7 @@ ${end.comment}` : end.comment;
             const nativeSelection = native ? this.parseNativeSelection(v.native_selection, this.state.requestId) : void 0;
             if (native && (!scoped || picked || createCollections || collectionIds.length !== 0 || v.timer_consent === true)) throw fail3("response");
             if (this.state.recoveryFor && nativeSelection && nativeSelection.collectionId !== this.state.recoveryFor.collectionId) throw fail3("binding");
-            if (this.state.recoveryFor && !nativeSelection && (createCollections || collectionIds.length !== 1 || collectionIds[0] !== this.state.recoveryFor.collectionId || collectionSelection?.selectedCollectionId !== this.state.recoveryFor.collectionId || collectionSelection.createdCollectionIds.length !== 0)) throw fail3("binding");
+            if (this.state.recoveryFor && !nativeSelection && (createCollections || !_AppProtectedInstallationSignIn.recovered(this.state.recoveryFor.collectionId, collectionIds, privateDeviceCollectionIds, collectionSelection))) throw fail3("binding");
             if (v.timer_consent === true && !collectionSelection) throw fail3("response");
             const deviceOnly = !collectionSelection && privateDeviceCollectionIds.length > 0;
             const reminder = timerConsent(v, this.state.requestId, collectionIds, selection.portalConfirmed === true, collectionSelection?.selectedCollectionId);
@@ -30373,6 +30377,12 @@ ${end.comment}` : end.comment;
             return this.view();
           });
         }
+        /** A recovery slot holds exactly its one collection: the selected cloud copy,
+         * or the one Private device scope (which Connect never names as a selection). */
+        static recovered(collection2, ids, device, selection) {
+          if (ids.length !== 1 || ids[0] !== collection2) return false;
+          return device.length ? device.length === 1 && device[0] === collection2 && selection === void 0 : selection?.selectedCollectionId === collection2 && selection.createdCollectionIds.length === 0;
+        }
         parseNativeSelection(value2, requestId) {
           const n = object5(value2, "authorization_request_id,collection_id"), a = this.state.nativeAuthorization;
           if (!a || a.requestId !== requestId || id2(n.authorization_request_id) !== a.authorizationId) throw fail3("binding");
@@ -30951,6 +30961,49 @@ ${end.comment}` : end.comment;
     }
   });
 
+  // src/app-host/spare-nonces.ts
+  function nonceFromHex(text9) {
+    return /^[0-9a-f]{64}$/.test(text9) ? Uint8Array.from(text9.match(/../g).map((v) => parseInt(v, 16))) : null;
+  }
+  function nonceRefusal(response2) {
+    if (!(response2 instanceof Map)) return false;
+    const e = response2.get(3);
+    if (!(e instanceof Map)) return false;
+    return e.get(0) === "unauthenticated" && (e.get(1) === "nonce" || e.get(1) === "replay");
+  }
+  var NEXT_NONCE_HEADER, SPARE_NONCE_MS, SPARE_NONCES, SpareNonces;
+  var init_spare_nonces = __esm({
+    "src/app-host/spare-nonces.ts"() {
+      "use strict";
+      NEXT_NONCE_HEADER = "x-mdbase-next-nonce";
+      SPARE_NONCE_MS = 4e4;
+      SPARE_NONCES = 6;
+      SpareNonces = class {
+        constructor(now = Date.now) {
+          this.now = now;
+        }
+        now;
+        spares = [];
+        /** The newest fresh spare, removed from the pool (single use), or null. */
+        take() {
+          for (let spare = this.spares.pop(); spare; spare = this.spares.pop()) {
+            const age = this.now() - spare.at;
+            if (age >= 0 && age < SPARE_NONCE_MS) return spare.nonce;
+            spare.nonce.fill(0);
+          }
+          return null;
+        }
+        /** Keep a response's piggybacked nonce, if it carries a well-formed one. */
+        keep(headers) {
+          const next = nonceFromHex(headers.get(NEXT_NONCE_HEADER) ?? "");
+          if (!next) return;
+          this.spares.push({ nonce: next, at: this.now() });
+          while (this.spares.length > SPARE_NONCES) this.spares.shift().nonce.fill(0);
+        }
+      };
+    }
+  });
+
   // src/app-host/http-log.ts
   function uint64(v) {
     if ((typeof v !== "number" || !Number.isSafeInteger(v)) && typeof v !== "bigint") throw error2("shape");
@@ -31016,20 +31069,7 @@ ${end.comment}` : end.comment;
     pre.fill(0);
     return Object.freeze({ endpoint: endpoint2, originalCallId, frame: frame.slice(), token, method, path: "/v1/rpc", collection: collection2, nonce: nonce.slice(), bodyHash, tokenHash, digest: digest2 });
   }
-  function nonceBytes(text9) {
-    return /^[0-9a-f]{64}$/.test(text9) ? Uint8Array.from(text9.match(/../g).map((v) => parseInt(v, 16))) : null;
-  }
-  function nonceRefused(reply) {
-    try {
-      const e = decode(reply).get(3);
-      if (!(e instanceof Map)) return false;
-      const m2 = e;
-      return m2.get(0) === "unauthenticated" && (m2.get(1) === "nonce" || m2.get(1) === "replay");
-    } catch {
-      return false;
-    }
-  }
-  var MAX_FRAME2, MAX_OBJECT, METHODS, FORBIDDEN, utf82, AppHttpLogError, error2, SPARE_NONCE_MS, SPARE_NONCES, NEXT_NONCE, AppHttpLogTransport;
+  var MAX_FRAME2, MAX_OBJECT, METHODS, FORBIDDEN, utf82, AppHttpLogError, error2, AppHttpLogTransport;
   var init_http_log = __esm({
     "src/app-host/http-log.ts"() {
       "use strict";
@@ -31038,6 +31078,7 @@ ${end.comment}` : end.comment;
       init_cbor();
       init_codec();
       init_cp_problem();
+      init_spare_nonces();
       MAX_FRAME2 = 16 * 1024 * 1024;
       MAX_OBJECT = 9 * 1024 * 1024;
       METHODS = /* @__PURE__ */ new Set(["append", "read", "head", "subscribe", "unsubscribe", "put_object", "get_object", "has_objects", "put_snapshot", "get_snapshot", "endorse_snapshot", "stream_join", "stream_leave", "stream_send"]);
@@ -31054,9 +31095,6 @@ ${end.comment}` : end.comment;
         server;
       };
       error2 = (reason) => new AppHttpLogError(reason);
-      SPARE_NONCE_MS = 4e4;
-      SPARE_NONCES = 6;
-      NEXT_NONCE = "x-mdbase-next-nonce";
       AppHttpLogTransport = class {
         constructor(authority, options = {}) {
           this.authority = authority;
@@ -31071,6 +31109,7 @@ ${end.comment}` : end.comment;
             this.approved = /* @__PURE__ */ new Set([this.base, ...authority.directOrigins.map((v) => origin2(v, this.loopback))]);
             this.fetchImpl = options.fetch ?? globalThis.fetch;
             this.now = options.now ?? Date.now;
+            this.spares = new SpareNonces(this.now);
           } catch {
             throw error2("binding");
           }
@@ -31086,9 +31125,8 @@ ${end.comment}` : end.comment;
         now;
         loopback;
         commitId = (1n << 64n) - 1n;
-        /** Unused piggybacked nonces (one per reply, a few kept for concurrent RPCs);
-         * each is taken (never shared) by exactly one later RPC. */
-        spares = [];
+        /** Unused piggybacked nonces; each is taken (never shared) by exactly one later RPC. */
+        spares;
         responseId = 0;
         receiving = /* @__PURE__ */ new Map();
         /** Only active logical sends, with bytes admitted under the existing body /
@@ -31207,28 +31245,13 @@ ${end.comment}` : end.comment;
           const server = appServerProblem(r.status, body, r.headers);
           return new AppHttpLogError(appServerOutcome(server) ?? "unavailable", server);
         }
-        /** Take the newest fresh spare nonce; it is single use, so never hand it out twice. */
-        takeSpare() {
-          for (let spare = this.spares.pop(); spare; spare = this.spares.pop()) {
-            const age = this.now() - spare.at;
-            if (age >= 0 && age < SPARE_NONCE_MS) return spare.nonce;
-            spare.nonce.fill(0);
-          }
-          return null;
-        }
-        keepSpare(r) {
-          const next = nonceBytes(r.headers.get(NEXT_NONCE) ?? "");
-          if (!next) return;
-          this.spares.push({ nonce: next, at: this.now() });
-          while (this.spares.length > SPARE_NONCES) this.spares.shift().nonce.fill(0);
-        }
         async freshNonce(signal, receive) {
           const nr = await this.fetch(`${this.base}/v1/nonce`, {}, signal, 15e3);
           if (!nr.ok) throw await this.refusal(nr, signal, receive);
           const raw = await this.read(nr, 128, signal, receive);
           try {
             this.check(signal);
-            const nonce = nonceBytes(new TextDecoder("utf-8", { fatal: true }).decode(raw).trim());
+            const nonce = nonceFromHex(new TextDecoder("utf-8", { fatal: true }).decode(raw).trim());
             if (!nonce) throw error2("shape");
             return nonce;
           } finally {
@@ -31240,7 +31263,7 @@ ${end.comment}` : end.comment;
           const token = await this.authority.accessToken({ signal });
           this.check(signal);
           if (typeof token !== "string" || !token || token.length > 16 * 1024 || /[\r\n]/.test(token)) throw error2("shape");
-          const spare = allowSpare ? this.takeSpare() : null;
+          const spare = allowSpare ? this.spares.take() : null;
           const nonce = spare ?? await this.freshNonce(signal, receive);
           this.check(signal);
           const p = proof(this.endpoint, originalId, method, this.collection, token, frame, nonce);
@@ -31251,18 +31274,19 @@ ${end.comment}` : end.comment;
             this.check(signal);
             if (!(signature instanceof Uint8Array) || signature.length !== 64) throw error2("shape");
             const r = await this.fetch(`${this.base}/v1/rpc`, { method: "POST", headers: { authorization: `Bearer ${token}`, "content-type": "application/cbor", "x-mdbase-nonce": hex3(p.nonce), "x-mdbase-sig": hex3(signature) }, body: frame }, signal, 15e3);
-            this.keepSpare(r);
+            this.spares.keep(r.headers);
             if (r.status === 401) this.authority.invalidateToken?.(token);
             if (!r.ok) throw await this.refusal(r, signal, receive);
             const reply = await this.read(r, method === "append" ? 64 * 1024 : MAX_FRAME2, signal, receive);
+            let refused5;
             try {
               this.check(signal);
-              this.response(reply, id6);
+              refused5 = nonceRefusal(this.response(reply, id6));
             } catch (e) {
               reply.fill(0);
               throw e;
             }
-            if (spare && nonceRefused(reply)) {
+            if (spare && refused5) {
               reply.fill(0);
               return await this.rpc(frame, method, id6, signal, receive, originalId, false);
             }
@@ -43939,6 +43963,7 @@ ${end.comment}` : end.comment;
           if (portal) {
             if (!["authorize", "renewExpiredPairing", "requestFileAccess"].includes(action)) return Promise.reject(new ApplicationWorkerError("application_worker_binding"));
             this.portal?.life.abort();
+            if (this.portal) this.closedPortal = this.portal.id;
             try {
               this.portal?.value.close();
             } catch {
@@ -44040,7 +44065,7 @@ ${end.comment}` : end.comment;
             }
             if (kind === "nativeAuthorization") {
               const call2 = nativeAuthorizationCall(value2), held = this.portal;
-              if (!held && id6 === this.closedPortal) {
+              if (id6 === this.closedPortal && held?.id !== id6) {
                 if (call2.action !== "cancel") this.port.postMessage([APPLICATION_WORKER_PROTOCOL, this.binding, "nativeAuthorizationReply", id6, { rpc: call2.rpc, ok: false }]);
                 return;
               }
@@ -44948,8 +44973,10 @@ ${end.comment}` : end.comment;
         if (!route2) {
           throw mdbaseError("unavailable", "no device of this collection is online", "no_device_online");
         }
+        const prologue = clientPrologue(collection2, grant, uuidToBytes(route2.targetDevice));
         return {
-          prologue: clientPrologue(collection2, grant, uuidToBytes(route2.targetDevice)),
+          prologue,
+          ...route2.prologueFirst && !route2.pipe ? { preamble: prologue } : {},
           remoteStatic: route2.noisePublicKey,
           device: route2.targetDevice,
           openCarrier: (signal) => route2.pipe ? relayPipeCarrier(
@@ -45238,6 +45265,7 @@ ${end.comment}` : end.comment;
       if (!/^[0-9a-f]{64}$/i.test(t.noise_pk) || !t.url || !t.device) continue;
       const route2 = { url: t.url, targetDevice: t.device, noisePublicKey: fromHex(t.noise_pk) };
       if (t.relay_collection) route2.pipe = { collection: t.relay_collection, accessToken };
+      else if (t.kind === "hosted") route2.prologueFirst = true;
       return route2;
     }
     return null;
@@ -45641,6 +45669,7 @@ ${end.comment}` : end.comment;
       const name3 = s.collections.find((c) => c.collectionId === id6)?.displayName ?? requested?.displayName ?? null;
       return { kind: "opening", collectionId: id6, displayName: name3, slow: !!o.slow };
     }
+    if (o.startPending && paired && s.status === "unselected" && !s.problem && sel?.state === "none") return { kind: "starting" };
     return { kind: "choosing", lastApproval: sel?.lastApproval ?? null };
   }
   function hold2(next, s, o) {
@@ -45814,12 +45843,12 @@ ${end.comment}` : end.comment;
   // src/application/asset-pins.json
   var asset_pins_default = {
     runtime: {
-      sha256: "a046b77ae1319049910766e2d6f393b2f9116ab0a15af4ca77bd8744386fc71e",
-      bytes: 3846571,
-      maxBytes: 3846571,
+      sha256: "8b4e96047bdaeb6df873e7f33368509de6bfa5d3427542dae7be05430f519f5a",
+      bytes: 3849226,
+      maxBytes: 3849226,
       source: {
         repository: "mdbase-dev/mdbase-connect",
-        commit: "d92cc4ca4b1c83ff68643c3d4e3a3f5ccb74988b"
+        commit: "5ca14dd53e24941411cce2f6bc793fe1736a69a9"
       }
     },
     sqlite: {
@@ -46089,6 +46118,12 @@ ${end.comment}` : end.comment;
     key = "";
     startTarget = null;
     startApplied = false;
+    /** Still deciding the start request, with nothing left to wait for but this object. */
+    startHeld = true;
+    /** The request whose open the session reported as failed (blocked). */
+    failed = null;
+    /** The session snapshot when the current attempt began. */
+    before = null;
     /** Last request auto-opened (null = auto-cleared); undefined = none yet. */
     attempted = void 0;
     lastRequested = null;
@@ -46109,7 +46144,15 @@ ${end.comment}` : end.comment;
         setTimeout(task, 0);
       });
       this.value = this.derive();
-      this.key = JSON.stringify(this.value);
+      this.key = this.keyOf(this.value);
+    }
+    /** True until the start request (URL, or the remembered collection) has been
+     * decided: a settled session with nothing requested is not yet a chooser. */
+    startPending() {
+      return this.startHeld;
+    }
+    keyOf(value2) {
+      return JSON.stringify(value2) + (this.startHeld ? "|start" : "");
     }
     getSnapshot() {
       return this.value;
@@ -46221,6 +46264,7 @@ ${end.comment}` : end.comment;
     resync() {
       if (this.closed) return;
       this.attempted = void 0;
+      this.failed = null;
       this.approval = null;
       this.changed();
     }
@@ -46256,9 +46300,14 @@ ${end.comment}` : end.comment;
       if (id6 !== this.lastRequested) {
         this.lastRequested = id6;
         this.attempted = void 0;
+        this.failed = null;
         if (this.declined !== id6) this.declined = null;
       }
-      const next = this.derive(), key3 = JSON.stringify(next);
+      if (id6 !== null && this.attempted === id6) {
+        const s = this.session.getSnapshot();
+        if (s !== this.before && (s.status === "blocked" ? s.selectedCollectionId === id6 : s.status === "unselected" && s.problem !== null)) this.failed = id6;
+      }
+      const next = this.derive(), key3 = this.keyOf(next);
       if (next.state === "usable") this.remember(next.usable.collectionId);
       if (key3 === this.key) return;
       this.key = key3;
@@ -46311,6 +46360,8 @@ ${end.comment}` : end.comment;
     }
     run(id6, options = {}, explicit = false) {
       this.attempted = id6;
+      this.failed = null;
+      this.before = this.session.getSnapshot();
       const request3 = options.signal ? { signal: options.signal } : {};
       const raw = Promise.resolve().then(() => id6 === null ? this.session.clear(request3) : this.session.open(id6, request3));
       const op2 = raw.then(() => {
@@ -46350,15 +46401,20 @@ ${end.comment}` : end.comment;
             storedId = this.memory?.read() ?? null;
           } catch {
           }
-          if (storedId !== null && !approved(s, storedId) && this.session.listing?.()) return;
+          if (storedId !== null && !approved(s, storedId) && this.session.listing?.()) {
+            this.startHeld = false;
+            this.refresh();
+            return;
+          }
           this.startApplied = true;
           const target2 = applicationStartTarget(this.browser.getSnapshot(), { storedId, preferredId: this.preferredId, collections: s.collections });
           if (target2.requestedCollectionId !== null && !target2.problem) {
             this.browser.select(target2.requestedCollectionId, { history: "replace" });
             this.startTarget = target2;
-            this.refresh();
           }
         } else this.startApplied = true;
+        this.startHeld = false;
+        this.refresh();
       }
       const r = this.requested(), id6 = r.requestedCollectionId;
       if (r.problem) return;
@@ -46368,9 +46424,16 @@ ${end.comment}` : end.comment;
       }
       if (s.selectedCollectionId === id6 && (isOpen(s) || isLocked(s) || s.status === "opening")) {
         this.attempted = id6;
+        this.failed = null;
+        return;
+      }
+      if (s.selectedCollectionId === id6 && s.status === "blocked") {
+        this.failed = id6;
         return;
       }
-      if (!approved(s, id6) || this.attempted === id6) return;
+      if (!approved(s, id6)) return;
+      if (this.attempted === id6 && (this.failed !== id6 || s.status !== "unselected" || s.problem !== null)) return;
+      this.failed = null;
       void this.run(id6);
     }
     finishApproval(s) {
@@ -48142,7 +48205,7 @@ ${end.comment}` : end.comment;
       const base = hidden?.size && shown.collections.some((c) => hidden.has(c.collectionId) && c.collectionId !== shown.selectedCollectionId) ? Object.freeze({ ...shown, collections: Object.freeze(shown.collections.filter((c) => !hidden.has(c.collectionId) || c.collectionId === shown.selectedCollectionId)) }) : shown;
       const id6 = base.selectedCollectionId, connection = id6 && !this.closed ? this.privates?.connection(id6) ?? this.runtime?.connection(id6) ?? null : null;
       const openingUnsynced = this.unsyncedOpening > 0 && !base.unsynced && !base.signOutResult && selection.requested.collectionId === null;
-      let phase = applicationPhase({ ...base, selection }, { connection, previous: last?.value.phase ?? null, openingUnsynced, ...this.cpOrigin ? { cpOrigin: this.cpOrigin } : {} });
+      let phase = applicationPhase({ ...base, selection }, { connection, previous: last?.value.phase ?? null, openingUnsynced, startPending: this.selection?.startPending() ?? false, ...this.cpOrigin ? { cpOrigin: this.cpOrigin } : {} });
       phase = this.trackOpening(phase);
       this.timing.observe(phase);
       const sync = this.trackSync(phase, base.problem, base.transport ?? null, base.live ?? null);
@@ -53145,7 +53208,7 @@ ${end.comment}` : end.comment;
   init_account_key_host();
   init_owner();
   init_cp_problem();
-  var reasons = /* @__PURE__ */ new Set(["binding", "fenced", "busy", "open_in_another_tab", "account_confirmation_required", "recovery_account_mismatch", "outcome_unknown", "response", "refused", "expired", "recovery_required", "unavailable", "collection_migrating", "collection_not_yet_migrated", "account_suspended", "update_required", "private_device_limit"]);
+  var reasons = /* @__PURE__ */ new Set(["binding", "fenced", "busy", "open_in_another_tab", "account_confirmation_required", "recovery_account_mismatch", "outcome_unknown", "response", "refused", "expired", "recovery_required", "unavailable", "collection_migrating", "collection_not_yet_migrated", "account_suspended", "update_required", "private_device_limit", "private_device_not_allowed"]);
   var domCodes = /* @__PURE__ */ new Set(["AbortError", "ConstraintError", "DataCloneError", "InvalidStateError", "NotAllowedError", "NotFoundError", "NotReadableError", "OperationError", "QuotaExceededError", "SecurityError", "TimeoutError", "TransactionInactiveError", "UnknownError", "VersionError"]);
   var result = (problem7, name3, code, server) => Object.freeze({ problem: problem7, detail: Object.freeze({ name: name3, code, ...server ? { server } : {} }) });
   function webSignInProblem(error5) {