@mdbase-dev/sdk 0.1.0-beta.178 → 0.1.0-beta.179

package/dist/application/worker.js

@@ -15691,12 +15691,12 @@ function appReleaseTrust() {
 // src/application/asset-pins.json
 var asset_pins_default = {
   runtime: {
-    sha256: "5f296cb57d8c1da1a9710f91a893efece2340ff893583b088feb531a16ced2ef",
-    bytes: 3849226,
-    maxBytes: 3849226,
+    sha256: "be17475e2ca164642fb5b29b4bf003c03ad9a8dbacd8aebc135dad7e91b73585",
+    bytes: 3849256,
+    maxBytes: 3849256,
     source: {
       repository: "mdbase-dev/mdbase-connect",
-      commit: "61dd7650312f04e942de51536b6441142c79ec48"
+      commit: "323d30aff40fc6f3f172d44f60cd7e67bb17d977"
     }
   },
   sqlite: {
@@ -17790,6 +17790,23 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
   }
   /** Current approved/member cloud-copy metadata only; never readiness, keying,
    * or permission inferred from this response or retained consent snapshots. */
+  /** The kept listing narrowed to this installation's consent. File actions
+   * are never kept, so every row has none until the next read. */
+  keptCollections() {
+    if (this.state.collectionListing === void 0) return null;
+    return Object.freeze(collectionListing(this.state.collectionListing).filter((c) => this.state.collectionIds.includes(c.collectionId) && this.modeConsented(c)).map((c) => Object.freeze({ ...c, fileActions: Object.freeze([]) })));
+  }
+  /** The approved collections as this installation last read them, or null
+   * when no listing is kept. No request. It can be out of date in every way a
+   * list can; `listApprovedCollections` is still the authority. */
+  cachedApprovedCollections(installation) {
+    this.consentGuard(installation)();
+    try {
+      return this.keptCollections();
+    } catch {
+      return null;
+    }
+  }
   listApprovedCollections(installation) {
     const check3 = this.consentGuard(installation);
     return this.exclusive(async () => {
@@ -17806,7 +17823,7 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
       } catch (error4) {
         check3();
         if (error4 instanceof AppInstallationSignInError && error4.reason === "unavailable" && !error4.server && !nonOkResponses.has(error4) && this.state.collectionListing !== void 0)
-          return Object.freeze(collectionListing(this.state.collectionListing).filter((c) => this.state.collectionIds.includes(c.collectionId) && this.modeConsented(c)).map((c) => Object.freeze({ ...c, fileActions: Object.freeze([]) })));
+          return this.keptCollections();
         if (error4 instanceof AppInstallationSignInError && (error4.server || nonOkResponses.has(error4)) && this.state.collectionListing !== void 0) {
           const state2 = { ...this.state };
           delete state2.collectionListing;
@@ -36932,6 +36949,15 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
       return null;
     }
   }
+  /** For a collection opened before its log: has the reopened replica its
+   * keys back from the log's control prefix? `failed` is what a waited open
+   * refuses as `recovery_required`. */
+  keyringSettled() {
+    if (!this.native) throw fail15("binding");
+    const observation = this.native.observations();
+    if (observation.requiresReopen || observation.keyringRebuildFailed) return "failed";
+    return observation.keyringRebuilding ? "pending" : "settled";
+  }
   /** Local writes not yet confirmed by the log (native sync status). */
   pendingWrites() {
     try {
@@ -37016,16 +37042,16 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
    * behind can finish its catch-up turn; without a pump it is fixed.
    * No status-based admission, write retry, key override or private grant. */
   waitForVerifiedRead(options) {
-    const { timeoutMs = 15e3, cold = false } = options;
+    const { timeoutMs = 15e3, cold = false, local = false } = options;
     const signal = this.operationSignal(options.signal);
     this.checkCollection(signal);
-    if (!this.native || !this.collectionScope || this.adoptedEndpoint === null || !Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 15e3 || typeof cold !== "boolean" || cold && !this.pump)
+    if (!this.native || !this.collectionScope || this.adoptedEndpoint === null || !Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 15e3 || typeof cold !== "boolean" || typeof local !== "boolean" || cold && (local || !this.pump))
       throw fail15("binding");
     if (this.readWork)
       return this.readWork.then(() => {
         this.checkCollection(signal);
       });
-    const work2 = this.verifyRead(signal, timeoutMs, cold, options.onProgress);
+    const work2 = this.verifyRead(signal, timeoutMs, cold, local, options.onProgress);
     this.readWork = work2;
     void work2.finally(() => {
       if (this.readWork === work2) this.readWork = null;
@@ -37033,8 +37059,9 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
     });
     return work2;
   }
-  async verifyRead(signal, timeoutMs, cold, onProgress) {
+  async verifyRead(signal, timeoutMs, cold, local, onProgress) {
     const ctrl = new AbortController(), abort = () => ctrl.abort();
+    const pump = () => local ? null : this.pump;
     this.readAbort = ctrl;
     signal.addEventListener("abort", abort, { once: true });
     let timer = null;
@@ -37057,7 +37084,7 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
     };
     const observe = () => {
       this.checkCollection(signal);
-      const refusal2 = cold ? this.pump.terminalProblem : null;
+      const refusal2 = cold ? pump().terminalProblem : null;
       if (isAppServerProblem(refusal2))
         throw new AppHttpLogError(appServerOutcome(refusal2) ?? "unavailable", refusal2);
       const observation = this.native.observations();
@@ -37068,14 +37095,14 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
     };
     this.readVerified = false;
     try {
-      if (this.pump) {
+      if (pump()) {
         const progress2 = () => {
           const observation = observe();
           return [
             observation.status.confirmedThrough,
             observation.status.installing?.done ?? 0,
             observation.status.installing?.total ?? 0,
-            this.pump.readProgress
+            pump().readProgress
           ];
         };
         let high = progress2(), lastProgress = Date.now();
@@ -37089,7 +37116,7 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
               deferred2 = null;
             }
             high = next.map((value2, i) => Math.max(value2, high[i]));
-            const active = this.pump.responseProgress();
+            const active = pump().responseProgress();
             const ids = new Set(active.map((body) => body.id));
             for (const id4 of bodies.keys()) if (!ids.has(id4)) bodies.delete(id4);
             for (const body of active) {
@@ -37134,7 +37161,8 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
       let delay = 250;
       while (!ctrl.signal.aborted) {
         this.native.tick();
-        if (this.pump) await Promise.race([this.pump.pump(), aborted]);
+        const turn = pump();
+        if (turn) await Promise.race([turn.pump(), aborted]);
         this.checkCollection(signal);
         const observation = observe();
         if (cold && initialSyncWait(observation.status) !== null) {
@@ -37153,7 +37181,7 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
           return;
         } catch (error4) {
           this.checkCollection(signal);
-          if (!(error4 instanceof MdbaseError) || error4.code !== "unavailable" || !this.pump || ctrl.signal.aborted)
+          if (!(error4 instanceof MdbaseError) || error4.code !== "unavailable" || !pump() || ctrl.signal.aborted)
             throw error4;
         }
         await waitForOpenRetry(delay, ctrl.signal);
@@ -37787,6 +37815,7 @@ var AppWebSignInSession = class {
   attested = false;
   acknowledged = false;
   consentPending = false;
+  listCached = false;
   fileAccess = null;
   freshApproval = false;
   /** The window this session's approval (or file access request) is shown in. */
@@ -37980,7 +38009,15 @@ var AppWebSignInSession = class {
         if (this.flow.collectionConsentView()?.state === "pending") {
           this.consentPending = true;
           this.publish({ status: "authorizing" });
-        } else await this.refreshCollections();
+        } else {
+          let kept = null;
+          try {
+            kept = this.flow.cachedApprovedCollections(this.installation);
+          } catch {
+            kept = null;
+          }
+          await this.refreshCollections(kept);
+        }
       } else this.publish({ status: view.state === "pending" ? "signed_out" : "authorizing" });
       return this.getSnapshot();
     });
@@ -38338,10 +38375,15 @@ var AppWebSignInSession = class {
       this.acknowledged = true;
     }
   }
-  async refreshCollections() {
-    const collections = await this.flow.listApprovedCollections(this.installation);
+  /** `kept`: this installation's last listing instead of a read. It is not an
+   * accepted inventory, so an approval missing from it is not a removal. */
+  async refreshCollections(kept = null) {
+    const collections = kept ?? await this.flow.listApprovedCollections(this.installation);
     this.check();
-    for (const id4 of this.flow.view().collectionIds) if (!collections.some((c) => c.collectionId === id4)) this.removedScopes.add(id4);
+    this.listCached = kept !== null;
+    if (!kept) {
+      for (const id4 of this.flow.view().collectionIds) if (!collections.some((c) => c.collectionId === id4)) this.removedScopes.add(id4);
+    }
     const visible = Object.freeze(collections.filter((c) => !this.forgotten.has(c.collectionId)));
     for (const slot of this.slots.values()) {
       if (slot.usable && slot.selected && !visible.some((c) => c.collectionId === slot.id)) {
@@ -38549,14 +38591,24 @@ var AppWebSignInSession = class {
     if (this.openingSlot === slot) this.openingSlot = null;
     slot.stopAssessment = selected.subscribe?.(() => {
       if (this.closing || this.slots.get(slot.id) !== slot || !slot.usable || slot.selected !== selected || slot.lifetime?.signal.aborted || !this.sameScope(slot.scope, slot.leaseScope) || slot.scope?.collection !== slot.id) return;
-      let ended = null;
+      let ended2 = null;
+      try {
+        ended2 = selected.ended ?? null;
+      } catch {
+        ended2 = null;
+      }
+      if (ended2) {
+        this.accessEnded(slot, selected, ended2);
+        return;
+      }
+      let failed2 = null;
       try {
-        ended = selected.ended ?? null;
+        failed2 = selected.failure ?? null;
       } catch {
-        ended = null;
+        failed2 = null;
       }
-      if (ended) {
-        this.accessEnded(slot, selected, ended);
+      if (failed2 !== null) {
+        this.openFailedLate(slot, selected, failed2);
         return;
       }
       let next;
@@ -38567,6 +38619,26 @@ var AppWebSignInSession = class {
       }
       this.publishSlot(slot, next.status === "needs_unlock" ? { ...next, problem: null, transport: null, live: null } : { ...next, ...this.liveProblem(slot, selected) });
     }) ?? null;
+    let ended = null;
+    try {
+      ended = selected.ended ?? null;
+    } catch {
+      ended = null;
+    }
+    let failed = null;
+    try {
+      failed = selected.failure ?? null;
+    } catch {
+      failed = null;
+    }
+    if (ended) {
+      this.accessEnded(slot, selected, ended);
+      return;
+    }
+    if (failed !== null) {
+      this.openFailedLate(slot, selected, failed);
+      return;
+    }
     this.publishSlot(slot, { ...first, transport: null, live: null, openingProgress: null });
   }
   /** The adapter's own state, validated: `needs_unlock` only with its lock
@@ -38654,6 +38726,35 @@ var AppWebSignInSession = class {
     };
     stop();
   }
+  /** A collection opened from its replica, whose log was then refused. The
+   * same block and detail as a failed open; stopping it fences every page's
+   * data ports. Local data, unsent edits included, stays on this device. */
+  openFailedLate(slot, selected, error4) {
+    if (slot.selected !== selected || !slot.usable) return;
+    const { problem: problem4, detail } = webSignInProblem(error4);
+    if (problem4 === "open_failed") {
+      try {
+        console.error("mdbase web sign-in open failed", detail.name, detail.code);
+      } catch {
+      }
+    }
+    slot.usable = false;
+    this.publishSlot(slot, { status: "blocked", problem: problem4, problemDetail: detail, transport: null, live: null });
+    const stop = () => {
+      if (this.closing || this.options.signal.aborted || slot.selected !== selected || this.slots.get(slot.id) !== slot) return;
+      if (this.pending) {
+        void this.pending.catch(() => {
+        }).then(stop);
+        return;
+      }
+      void this.operation(async () => {
+        await this.closeSlot(slot);
+        this.publishSlot(slot, { status: "blocked", problem: problem4, problemDetail: detail });
+      }, true).catch(() => {
+      });
+    };
+    stop();
+  }
   /** Live problem of an open collection: shown while it lasts, cleared after. */
   liveProblem(slot, selected) {
     let server = null;
@@ -38729,6 +38830,12 @@ var AppWebSignInSession = class {
       return this.getSnapshot();
     }, true);
   }
+  /** The published list is the one this installation kept, shown by a
+   * signed-in start; Connect's has not been read since. The owner calls
+   * `refreshCollectionList` once, when that read can no longer delay a page. */
+  collectionListCached() {
+    return this.listCached;
+  }
   /** Accepted COMPLETE inventory omission or terminal native/log refusal only.
    * Local Forget, failed GETs and transient transport failures do not qualify. */
   scopeWasRemoved(collectionId) {
@@ -39184,6 +39291,10 @@ var AppScopedSignInSession = class {
     await session.pollFileAccess(requestId);
     return this.getSnapshot();
   }
+  /** Any of the sessions still shows the list it kept (a signed-in start). */
+  collectionListCached() {
+    return this.original.collectionListCached() || [...this.scoped.values()].some((actor) => actor.session.collectionListCached());
+  }
   async refreshCollectionList() {
     await this.original.refreshCollectionList();
     for (const actor of this.scoped.values()) {
@@ -39919,6 +40030,7 @@ function createAppCollectionSql(source) {
 var PAUSED_AFTER_MS = 1e4;
 var BACKGROUND_FLUSH_MS = 12e4;
 var WARM_SYNC_MS = 2e3;
+var LOCAL_READ_MS = 5e3;
 var INITIAL_LOG_RETRY_MS = 15e3;
 var INITIAL_LOG_ATTEMPTS = 3;
 var AppWebCollectionError = class extends Error {
@@ -39959,6 +40071,10 @@ function createAppWebCollectionAdapter(source) {
     let assessment = "setup_required";
     let locked = null;
     let started = false;
+    let logBound = false;
+    let early = null;
+    let failure2 = null;
+    let keys2 = "settled";
     let push = null, paused = false, pausing = null, kicked = false;
     let ended = null;
     const attached = /* @__PURE__ */ new Map();
@@ -40119,6 +40235,79 @@ function createAppWebCollectionAdapter(source) {
         return false;
       }
     };
+    const startLog = () => host.startCollectionLog({ signal: life.signal, fetch: options.fetch, allowLoopbackHttp: options.allowLoopbackHttp });
+    const openPush = () => {
+      try {
+        push = typeof host.openLogPush === "function" ? host.openLogPush({
+          push: (frame) => {
+            if (!current2()) return;
+            host.pushLog(frame);
+            kick();
+          },
+          live: onLive,
+          // Access ended: the replica has the `closed` push; drive so it
+          // settles, then the session stops this collection in every tab.
+          ended: (reason) => {
+            ended = reason;
+            kick();
+            onLive(false);
+            settleInitial?.();
+            changed();
+          }
+        }) : null;
+      } catch {
+        push = null;
+      }
+      if (push) {
+        push.start();
+        onLive(false);
+      } else setPaused(true);
+    };
+    const bindLog = async () => {
+      const first = early;
+      early = null;
+      await (first ?? startLog());
+      check3();
+      logBound = true;
+      openPush();
+    };
+    const settleKeys = () => {
+      if (keys2 !== "pending" || !logBound) return;
+      try {
+        keys2 = host.keyringSettled?.() ?? "settled";
+      } catch {
+        return;
+      }
+      if (keys2 === "failed") refuse(new AppCloudCopyHostError("recovery_required"));
+    };
+    const refuse = (error4) => {
+      failure2 = error4;
+      started = false;
+      if (timer !== null) clearTimeout(timer);
+      timer = null;
+      changed();
+    };
+    const bindFailed = (error4) => {
+      let server = null;
+      try {
+        server = error4.server;
+      } catch {
+        server = null;
+      }
+      const outcome = isAppServerProblem(server) && appServerOutcome(server) !== null ? server : null;
+      const foreign = !isAppServerProblem(server) && error4 instanceof AppCpAuthorityError && error4.reason === "response";
+      const next = outcome ? null : foreign ? { kind: "unreachable" } : appLogHealth(error4);
+      if (!outcome && (next === null || next.kind === "auth")) {
+        refuse(error4);
+        return;
+      }
+      unhealthy = next ? unhealthy + 1 : 0;
+      if (outcome !== problem4 || JSON.stringify(next) !== JSON.stringify(health)) {
+        problem4 = outcome;
+        health = next;
+        changed();
+      }
+    };
     const schedule = () => {
       if (!started || !current2()) return;
       if (!foreground && !flushing() && !kicked) {
@@ -40134,13 +40323,16 @@ function createAppWebCollectionAdapter(source) {
         if (!current2()) return;
         const wake = foreground && Date.now() >= wakeAt;
         if (wake) wakeAt = Number.POSITIVE_INFINITY;
-        const work2 = driving = wake ? host.wakeCollectionLog({ signal: life.signal }) : host.driveCollection({ signal: life.signal });
+        const work2 = driving = !logBound ? bindLog().then(() => host.driveCollection({ signal: life.signal })) : wake ? host.wakeCollectionLog({ signal: life.signal }) : host.driveCollection({ signal: life.signal });
         void work2.then(
           () => {
             if (driving === work2) driving = null;
             failures = 0;
             turned = true;
-            if (current2()) observe();
+            if (current2()) {
+              observe();
+              settleKeys();
+            }
             settleInitial?.();
             schedule();
           },
@@ -40149,7 +40341,12 @@ function createAppWebCollectionAdapter(source) {
           (error4) => {
             if (driving === work2) driving = null;
             failures++;
-            if (current2()) observe();
+            if (current2()) {
+              if (logBound) {
+                observe();
+                settleKeys();
+              } else bindFailed(error4);
+            }
             turnFailed(error4);
             settleInitial?.();
             schedule();
@@ -40301,24 +40498,34 @@ function createAppWebCollectionAdapter(source) {
       report("opening_store");
       await host.openCollectionSql({ signal: life.signal, replicaId: receipt3.deviceId, endpoint: 0, openSql: openLedgerSql });
       check3();
-      report("connecting_log");
-      const retryUntil = Date.now() + INITIAL_LOG_RETRY_MS;
-      for (let attempt = 0; ; attempt++) {
-        try {
-          await host.startCollectionLog({ signal: life.signal, fetch: options.fetch, allowLoopbackHttp: options.allowLoopbackHttp });
-          check3();
-          break;
-        } catch (error4) {
-          check3();
-          const server = error4 instanceof AppCpAuthorityError && error4.reason === "unavailable" ? error4.server : null;
-          if (!isAppServerProblem(server) || server.status !== 503 || server.code !== "busy" || appServerOutcome(server) !== null || attempt + 1 >= INITIAL_LOG_ATTEMPTS) throw error4;
-          const wait2 = server.retryAfterMs ?? 1e3 * 2 ** attempt;
-          if (Date.now() + wait2 >= retryUntil) throw error4;
-          await waitForOpenRetry(wait2, life.signal);
-          check3();
-          if (Date.now() >= retryUntil) throw error4;
+      const localFirst = !isPrivate && await ledger.syncedBefore({ signal: life.signal });
+      check3();
+      const connectLog = async () => {
+        report("connecting_log");
+        const retryUntil = Date.now() + INITIAL_LOG_RETRY_MS;
+        for (let attempt = 0; ; attempt++) {
+          try {
+            await startLog();
+            check3();
+            break;
+          } catch (error4) {
+            check3();
+            const server = error4 instanceof AppCpAuthorityError && error4.reason === "unavailable" ? error4.server : null;
+            if (!isAppServerProblem(server) || server.status !== 503 || server.code !== "busy" || appServerOutcome(server) !== null || attempt + 1 >= INITIAL_LOG_ATTEMPTS) throw error4;
+            const wait2 = server.retryAfterMs ?? 1e3 * 2 ** attempt;
+            if (Date.now() + wait2 >= retryUntil) throw error4;
+            await waitForOpenRetry(wait2, life.signal);
+            check3();
+            if (Date.now() >= retryUntil) throw error4;
+          }
         }
-      }
+        logBound = true;
+      };
+      if (localFirst) {
+        early = startLog();
+        void early.catch(() => {
+        });
+      } else await connectLog();
       const generation = crypto.randomUUID();
       let attachOpened = null;
       let detachOpened = null;
@@ -40333,44 +40540,48 @@ function createAppWebCollectionAdapter(source) {
         }
       }
       const finishOpen = async () => {
-        const warm = await ledger.syncedBefore({ signal: life.signal });
+        const warm = isPrivate ? await ledger.syncedBefore({ signal: life.signal }) : localFirst;
         check3();
-        report("syncing");
-        await host.waitForVerifiedRead({ signal: life.signal, cold: !warm, onProgress: report });
-        check3();
-        started = true;
-        host.onLogWork?.(kick);
-        schedule();
-        try {
-          push = typeof host.openLogPush === "function" ? host.openLogPush({
-            push: (frame) => {
-              if (!current2()) return;
-              host.pushLog(frame);
-              kick();
-            },
-            live: onLive,
-            // Access ended: the replica has the `closed` push; drive so it
-            // settles, then the session stops this collection in every tab.
-            ended: (reason) => {
-              ended = reason;
-              kick();
-              onLive(false);
-              settleInitial?.();
-              changed();
-            }
-          }) : null;
-        } catch {
-          push = null;
+        let local = false;
+        if (localFirst && !logBound) {
+          try {
+            await host.waitForVerifiedRead({ signal: life.signal, local: true, timeoutMs: LOCAL_READ_MS, onProgress: report });
+            check3();
+            local = true;
+          } catch {
+            check3();
+            const first = early;
+            early = null;
+            const bound = first ? await first.then(() => true, () => false) : false;
+            check3();
+            if (bound) logBound = true;
+            else await connectLog();
+          }
         }
-        if (push) {
-          push.start();
-          onLive(false);
-        } else paused = true;
-        if (warm) {
+        if (!local) {
           report("syncing");
-          await waitForWarmSync();
+          await host.waitForVerifiedRead({ signal: life.signal, cold: !warm, onProgress: report });
+          check3();
+        }
+        started = true;
+        host.onLogWork?.(kick);
+        if (local) {
+          keys2 = "pending";
+          kicked = true;
+          schedule();
+          pausing = setTimeout(() => {
+            pausing = null;
+            if (current2() && !push?.live) setPaused(true);
+          }, PAUSED_AFTER_MS);
+        } else {
+          schedule();
+          openPush();
+          if (warm) {
+            report("syncing");
+            await waitForWarmSync();
+          }
+          check3();
         }
-        check3();
         report("checking_setup");
         void ledger.markSynced({ signal: life.signal }).catch(() => {
         });
@@ -40557,6 +40768,9 @@ function createAppWebCollectionAdapter(source) {
         get ended() {
           return current2() ? ended : null;
         },
+        get failure() {
+          return current2() ? failure2 : null;
+        },
         connection,
         close,
         subscribe(listener) {
@@ -41280,6 +41494,8 @@ function wipeUnlockSecret(request3) {
   }
 }
 var APPLICATION_WORKER_MAX_CLIENTS = 32;
+var LIST_CONFIRM_MS = 2e3;
+var LIST_CONFIRM_TRIES = 3;
 var ApplicationWorkerHost = class {
   session;
   lifetime = new AbortController();
@@ -41293,6 +41509,10 @@ var ApplicationWorkerHost = class {
   sessionForeground = null;
   collecting = false;
   revalidationQueued = false;
+  /** A signed-in start showed the kept collection list; Connect's is read once. */
+  listConfirm = "idle";
+  listTimer = null;
+  listAttempts = 0;
   nativeRpc = 0;
   nativeWait = null;
   /** The latest proxy portal's person-closed report (page `approvalClosed`). */
@@ -41697,18 +41917,55 @@ var ApplicationWorkerHost = class {
   /** One inventory read, in the SAME queue as lifecycle actions. Visibility and
    * native transport wake immediately; metadata cannot make a tab's start/select
    * fail busy or overlap an original consent/receipt operation. */
-  revalidateForeground() {
+  revalidateForeground(shown = true) {
     if (this.stopping || this.revalidationQueued) return;
     this.revalidationQueued = true;
     this.queue.push({ client: null, request: null, job: async () => {
       try {
-        if (this.foreground && this.session.getSnapshot().signIn?.state === "paired") await this.session.refreshCollectionList();
+        if ((this.foreground || !shown) && this.session.getSnapshot().signIn?.state === "paired") await this.session.refreshCollectionList();
       } finally {
         this.revalidationQueued = false;
       }
     } });
     this.pump();
   }
+  /** A signed-in start published the collection list this installation kept
+   * and did not wait for Connect. Read Connect's list once, in the same queue,
+   * where it cannot delay the page: after the page's next request (opening its
+   * remembered collection), at once when a collection is already open, or
+   * shortly after when no request comes (the chooser is showing). */
+  confirmListing(after) {
+    if (this.stopping || this.listConfirm === "done") return;
+    if (after === "start") {
+      if (this.listConfirm !== "idle" || !this.session.collectionListCached()) return;
+      this.listConfirm = "armed";
+      if (this.session.heldCollections().length === 0) {
+        this.listTimer = setTimeout(() => {
+          this.listTimer = null;
+          this.confirmListing("timer");
+        }, LIST_CONFIRM_MS);
+        return;
+      }
+    } else if (this.listConfirm !== "armed") return;
+    if (this.listTimer !== null) clearTimeout(this.listTimer);
+    this.listTimer = null;
+    this.listConfirm = "done";
+    if (!this.session.collectionListCached()) return;
+    const attempt = ++this.listAttempts;
+    this.queue.push({ client: null, request: null, job: async () => {
+      try {
+        if (this.session.getSnapshot().signIn?.state === "paired") await this.session.refreshCollectionList();
+      } catch {
+      }
+      if (this.stopping || !this.session.collectionListCached() || attempt >= LIST_CONFIRM_TRIES) return;
+      this.listConfirm = "armed";
+      this.listTimer = setTimeout(() => {
+        this.listTimer = null;
+        this.confirmListing("timer");
+      }, LIST_CONFIRM_MS);
+    } });
+    this.pump();
+  }
   /** `wake`: a page reported visible/focus/online, so a visible connection
    * syncs now even if it was already in the foreground. `report`: a tab told
    * us, so the session hears it even when the aggregate did not change. */
@@ -41848,6 +42105,7 @@ var ApplicationWorkerHost = class {
         this.active = null;
         this.reconcile();
         this.applyForeground();
+        if (next.client !== null) this.confirmListing(next.request[3] === "start" ? "start" : "request");
         this.pump();
       }
     };
@@ -41992,6 +42250,8 @@ var ApplicationWorkerHost = class {
    * original SDK leases; a subsequent call returns the SAME rejection. */
   stop(detach = true) {
     if (this.stopping) return this.stopping;
+    if (this.listTimer !== null) clearTimeout(this.listTimer);
+    this.listTimer = null;
     const pending = this.pending;
     for (const item of this.queue) wipeUnlockSecret(item.request);
     this.queue.length = 0;