@molecule/app-http 1.2.0 → 1.3.0

package/README.md

@@ -3,7 +3,7 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-10-18T09:50:54.298Z
+Generated: 2026-10-18T22:39:03.959Z
 -->
 
 # @molecule/app-http
@@ -219,11 +219,15 @@ interface RequestConfig {
   /**
    * Send this request WITHOUT waiting for the session restore (the auth gate).
    *
-   * A request the gate itself depends on must set this. A gate registered with
-   * `setAuthGate` that waits for a session restore whose own request goes through this
-   * client otherwise waits on itself: the gate holds the restore's request, the restore's
-   * promise never settles, and every request on the page stalls until the gate times out —
-   * so pass `skipAuthGate: true` on the restore's own request:
+   * A request the gate's restore issues from a LATER continuation must set this. The gate
+   * recognizes a request the settle function issues while it runs and never holds it — this
+   * package's client awaits the gate before anything else, so a `restoreSession()` that calls
+   * it directly does not deadlock. But a restore that awaits something else first
+   * (`await storage.get()`), then calls the client, reaches `awaitAuthGate` after that window:
+   * the gate then waits on itself, and every request on the page stalls until the gate times
+   * out (3 s) — so pass `skipAuthGate: true` on that request. A provider that awaits the gate
+   * inside a scheduled interceptor (the Axios bond) also reaches it after the window, so its
+   * restore's request needs the opt-out.
    *
    * ```typescript
    * // the request the gate's restore makes, through the same client the gate holds back
@@ -232,7 +236,8 @@ interface RequestConfig {
    *
    * `@molecule/app-auth`'s own restore does not need it — it sends its request with
    * `fetch`, not through this client. An app with its own session store that registers a
-   * gate with `setAuthGate` does.
+   * gate with `setAuthGate` does not need it either when its restore calls the client
+   * directly.
    */
   skipAuthGate?: boolean
 
@@ -396,14 +401,38 @@ type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'HEAD' | 'OPTION
 
 HTTP error with response details.
 
+**`status` is an HTTP status when the server answered, and `0` when it did not.**
+A `0` means NO response exists: the request was aborted (an `AbortController`, a
+component's effect cleanup, a route change tearing the request down) or the
+network failed before anything came back. It is not an HTTP status at all, so it
+says nothing about the session — an app must never treat `status < 500` as
+"signed out", because every aborted request on a route change would clear the
+session. The correct check is {@link isAuthFailure} (`status === 401 || status === 403`);
+`isNoResponse` (`status === 0`) identifies this case.
+
 ```typescript
 class HttpError extends Error {
+  /**
+   * Builds a failed-request error.
+   *
+   * @param message - Human-readable message (already translated where a key exists).
+   * @param status - HTTP status, or `0` when no response was received (aborted / network failure).
+   * @param response - Parsed response when the server answered, otherwise undefined.
+   * @param config - The request config that failed.
+   * @param errorKey - Translation key for the failure (`http.error.aborted` for an
+   *   aborted request, `http.error.networkError` for a real network failure).
+   * @param aborted - Whether the request was aborted before a response: an
+   *   `AbortController` signal (component cleanup, a cancelled request) or the
+   *   browser tearing the fetch down during a navigation. Distinguishes an abort
+   *   from a network outage on the same `status === 0`, without parsing the message.
+   */
   constructor(
     message: string,
     public status: number,
     public response?: HttpResponse,
     public config?: FullRequestConfig,
     public errorKey?: string,
+    public aborted = false,
   ) {
     super(message)
     this.name = 'HttpError'
@@ -423,10 +452,20 @@ template auth that is `() => authClient.whenRestored()`, which resolves
 immediately when no restore is in flight, so registering it never makes a
 request wait longer than the restore it was about to race anyway.
 
-A gate whose restore sends its OWN request through the gated client deadlocks — the
-gate holds the request it is waiting for. That request must pass `skipAuthGate: true`
-(see `RequestConfig.skipAuthGate`); `@molecule/app-auth`'s own restore does not
-need it because it uses `fetch` rather than the bonded client.
+Waiting for the restore does NOT attach its token: a separately created HTTP
+client needs `createDefaultHttpClientWithAuthBearer({ baseURL,
+getToken: () => authClient.getAccessToken(), authScheme })` from
+`@molecule/app-bonds-default-react` (or the auth client built with
+`createDefaultAuthClientWithHttpSync`, which mirrors the token into the
+bonded client) plus `setAuthGate(() => authClient.whenRestored())`.
+
+The restore's own requests are never held: a request the settle function issues while it
+runs goes out immediately, so `setAuthGate(() => restoreSession())` cannot deadlock even
+when `restoreSession` calls the gated client. A restore that awaits something else first
+(a storage read, a `Promise.resolve()`) issues its request from a later continuation, which
+the gate cannot recognize — that request needs `skipAuthGate: true` (see
+`RequestConfig.skipAuthGate`). `@molecule/app-auth`'s own restore needs neither because it
+uses `fetch` rather than the bonded client.
 
 ```typescript
 function setAuthGate(next: (() => Promise<void>) | null): void
@@ -453,6 +492,66 @@ function awaitAuthGate(request?: AuthGateRequest): Promise<void>
 
 **Returns:** A promise that settles when the gate has released the request.
 
+#### `isHttpError(err)`
+
+Whether `err` is an {@link HttpError} from this package.
+
+```typescript
+function isHttpError(err: unknown): boolean
+```
+
+- `err` — Any thrown value.
+
+**Returns:** True for an `HttpError`.
+
+#### `isAuthFailure(err)`
+
+Whether the server REJECTED the request's credential — the only failure that
+justifies clearing a session.
+
+`401` (unauthenticated/expired token) and `403` (authenticated but refused) are
+the two statuses that say "this credential no longer authorizes this session".
+Everything else — `0` (aborted or offline), `404` (wrong endpoint), `5xx` (server
+fault), a rate limit — says nothing about the credential.
+
+```typescript
+function isAuthFailure(err: unknown): boolean
+```
+
+- `err` — Any thrown value.
+
+**Returns:** True only when `err` is an `HttpError` with status 401 or 403.
+
+#### `isNoResponse(err)`
+
+Whether no response was received at all: the request was aborted or the network
+failed. `status === 0` is not an HTTP status — it must never be read as
+"the user is not signed in".
+
+```typescript
+function isNoResponse(err: unknown): boolean
+```
+
+- `err` — Any thrown value.
+
+**Returns:** True when `err` is an `HttpError` with status `0`.
+
+#### `isAborted(err)`
+
+Whether the request was ABORTED (an `AbortController` signal, or the browser
+cancelling the fetch during a navigation) rather than failing on the network.
+
+Both arrive as `status === 0`; this distinguishes them, so a UI can stay silent
+for a cancelled request while still reporting a real outage.
+
+```typescript
+function isAborted(err: unknown): boolean
+```
+
+- `err` — Any thrown value.
+
+**Returns:** True when `err` is an `HttpError` flagged `aborted`.
+
 #### `createFetchClient(config)`
 
 Creates a fetch-based HTTP client using the native Fetch API.
@@ -726,13 +825,26 @@ authScheme })` from `@molecule/app-bonds-default-react` (or an auth client built
 `createDefaultAuthClientWithHttpSync`, which mirrors the token into the bonded client), because
 `setAuthGate` alone sends no `Authorization` header.
 
-**A request the gate itself depends on must opt out of it: pass `skipAuthGate: true`.** A gate
-that waits for a session restore whose own request goes through this client waits on itself —
-that request is held by the gate waiting for it, so the restore never settles and every request
-the gate holds stalls until it times out (3 s). The request that restores the session for a gate
-you registered yourself is therefore written
-`http.get(currentUserEndpoint, { skipAuthGate: true })`; `@molecule/app-auth`'s own restore does
-not need it (it calls `fetch`, not this client).
+**The gate never holds its own restore's request.** A request the settle function issues
+while it runs (its call reaches this client before the function awaits anything) is part of
+the restore it is waiting for, so it goes out immediately — `setAuthGate(() =>
+restoreSession())` does not deadlock even when `restoreSession` uses this client. A restore
+that awaits something else first and only then calls the client reaches it after that
+window, and that request must opt out of the gate: `http.get(currentUserEndpoint, {
+skipAuthGate: true })`. Without the opt-out the gate waits on itself, the restore never
+settles, and every request the gate holds stalls until it times out (3 s).
+`@molecule/app-auth`'s own restore does not need it (it calls `fetch`, not this client).
+
+**A failed request's `status` is `0` when NO response arrived — never read it as
+"signed out".** An aborted request (an `AbortController` signal, a component's
+effect cleanup, a route change tearing the fetch down) and a network outage both
+throw an `HttpError` with `status === 0`; the aborted ones also carry
+`aborted: true` and the `http.error.aborted` key, the rest `http.error.networkError`.
+Neither says anything about the session. To decide whether a session ended, use
+`isAuthFailure(err)` (401/403 only); `isNoResponse(err)` identifies the no-response
+case so a caller can stay silent instead of reporting an outage. **Do not write
+`err instanceof HttpError && err.status < 500` as a sign-out check** — it clears
+the session on every aborted navigation request.
 
 ## Translations
 

package/dist/auth-gate.d.ts

@@ -27,24 +27,28 @@
  * `setupHttpDefault()`), and a gate installed on the throwaway client the auth
  * bond saw would be silently lost.
  *
- * ## A request the gate is waiting for must opt out
- *
- * `awaitAuthGate` holds every request while the gate is pending — including one the gate
- * itself depends on. A gate that waits for a session restore whose own request goes through
- * the SAME client waits on itself: the restore's `GET /users/me` is held by the gate, the
- * restore's promise cannot settle, and nothing but the timeout releases anything (X1
- * xr-molecule-flash-m97 lost ~4 min to exactly this — an app registering
- * `setAuthGate(() => whenSettled())` over a restore that fetched through its own client, with
- * every request stalling the full bound and only a console warning to show for it). So a
- * request the gate's restore makes must pass `skipAuthGate: true`
- * (`RequestConfig.skipAuthGate`).
- *
- * Which held request is the gate's own is NOT detectable here: the gate is arbitrary code
- * returning a promise, so a request cannot be attributed to the async chain that awaits it —
- * and browsers have no async-context API (`AsyncContext` is not shipped) to ask. Releasing
- * requests merely because the gate is pending and they carry no token would drop exactly the
- * first-paint requests the gate exists to hold. The opt-out is therefore the fix, and a
- * timeout with requests held is reported as an error naming it.
+ * ## The gate's own restore requests are never held
+ *
+ * `awaitAuthGate` holds every request while the gate is pending — except the ones the gate's
+ * settle function issues itself. Those are part of the restore it is waiting for; holding them
+ * makes the gate wait on itself, and nothing but the timeout releases anything (X1
+ * xr-molecule-flash-m97 and xr-molecule-flash-m173 both lost minutes to this: an app
+ * registering `setAuthGate(() => restoreSession())` over a restore that fetched through the
+ * same client, every page held for the full bound, and 917 `GET /api/user` requests named by
+ * one console line). So `setAuthGate(() => restoreSession())` works as written when
+ * `restoreSession` calls the gated client.
+ *
+ * "Issued by the gate" means issued while the settle function is running: this package's
+ * fetch client awaits the gate before anything else, so a restore's call is made in the settle
+ * function's own synchronous execution. A restore that awaits something else first (a storage
+ * read, a `Promise.resolve()`) and only then calls the client issues its request from a later
+ * continuation, which nothing can attribute to the gate — browsers ship no async-context API
+ * (`AsyncContext`/`AsyncLocalStorage`) to ask, and releasing requests merely because the gate is
+ * pending would drop exactly the first-paint requests the gate exists to hold (m95). A provider
+ * whose request pipeline awaits the gate in a scheduled interceptor (the Axios bond) reaches it
+ * a microtask after the settle function returns, outside the window, for the same reason. Such a
+ * request must pass `skipAuthGate: true` (`RequestConfig.skipAuthGate`), and a timeout with
+ * requests held is reported at error level naming it.
  *
  * @module
  */
@@ -58,10 +62,20 @@ import type { AuthGateRequest } from './types.js';
  * immediately when no restore is in flight, so registering it never makes a
  * request wait longer than the restore it was about to race anyway.
  *
- * A gate whose restore sends its OWN request through the gated client deadlocks — the
- * gate holds the request it is waiting for. That request must pass `skipAuthGate: true`
- * (see `RequestConfig.skipAuthGate`); `@molecule/app-auth`'s own restore does not
- * need it because it uses `fetch` rather than the bonded client.
+ * Waiting for the restore does NOT attach its token: a separately created HTTP
+ * client needs `createDefaultHttpClientWithAuthBearer({ baseURL,
+ * getToken: () => authClient.getAccessToken(), authScheme })` from
+ * `@molecule/app-bonds-default-react` (or the auth client built with
+ * `createDefaultAuthClientWithHttpSync`, which mirrors the token into the
+ * bonded client) plus `setAuthGate(() => authClient.whenRestored())`.
+ *
+ * The restore's own requests are never held: a request the settle function issues while it
+ * runs goes out immediately, so `setAuthGate(() => restoreSession())` cannot deadlock even
+ * when `restoreSession` calls the gated client. A restore that awaits something else first
+ * (a storage read, a `Promise.resolve()`) issues its request from a later continuation, which
+ * the gate cannot recognize — that request needs `skipAuthGate: true` (see
+ * `RequestConfig.skipAuthGate`). `@molecule/app-auth`'s own restore needs neither because it
+ * uses `fetch` rather than the bonded client.
  *
  * @param next - The gate, or `null` to clear a previously registered one.
  *

package/dist/auth-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-gate.d.ts","sourceRoot":"","sources":["../src/auth-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AA6CjD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAG,IAGhE,CAAA;AA6BD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,aAAa,GAAU,UAAU,eAAe,KAAG,OAAO,CAAC,IAAI,CAuC3E,CAAA"}
+{"version":3,"file":"auth-gate.d.ts","sourceRoot":"","sources":["../src/auth-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAkEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAG,IAIhE,CAAA;AA8ED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,aAAa,GAAU,UAAU,eAAe,KAAG,OAAO,CAAC,IAAI,CAwC3E,CAAA"}

package/dist/auth-gate.js

@@ -27,24 +27,28 @@
  * `setupHttpDefault()`), and a gate installed on the throwaway client the auth
  * bond saw would be silently lost.
  *
- * ## A request the gate is waiting for must opt out
- *
- * `awaitAuthGate` holds every request while the gate is pending — including one the gate
- * itself depends on. A gate that waits for a session restore whose own request goes through
- * the SAME client waits on itself: the restore's `GET /users/me` is held by the gate, the
- * restore's promise cannot settle, and nothing but the timeout releases anything (X1
- * xr-molecule-flash-m97 lost ~4 min to exactly this — an app registering
- * `setAuthGate(() => whenSettled())` over a restore that fetched through its own client, with
- * every request stalling the full bound and only a console warning to show for it). So a
- * request the gate's restore makes must pass `skipAuthGate: true`
- * (`RequestConfig.skipAuthGate`).
- *
- * Which held request is the gate's own is NOT detectable here: the gate is arbitrary code
- * returning a promise, so a request cannot be attributed to the async chain that awaits it —
- * and browsers have no async-context API (`AsyncContext` is not shipped) to ask. Releasing
- * requests merely because the gate is pending and they carry no token would drop exactly the
- * first-paint requests the gate exists to hold. The opt-out is therefore the fix, and a
- * timeout with requests held is reported as an error naming it.
+ * ## The gate's own restore requests are never held
+ *
+ * `awaitAuthGate` holds every request while the gate is pending — except the ones the gate's
+ * settle function issues itself. Those are part of the restore it is waiting for; holding them
+ * makes the gate wait on itself, and nothing but the timeout releases anything (X1
+ * xr-molecule-flash-m97 and xr-molecule-flash-m173 both lost minutes to this: an app
+ * registering `setAuthGate(() => restoreSession())` over a restore that fetched through the
+ * same client, every page held for the full bound, and 917 `GET /api/user` requests named by
+ * one console line). So `setAuthGate(() => restoreSession())` works as written when
+ * `restoreSession` calls the gated client.
+ *
+ * "Issued by the gate" means issued while the settle function is running: this package's
+ * fetch client awaits the gate before anything else, so a restore's call is made in the settle
+ * function's own synchronous execution. A restore that awaits something else first (a storage
+ * read, a `Promise.resolve()`) and only then calls the client issues its request from a later
+ * continuation, which nothing can attribute to the gate — browsers ship no async-context API
+ * (`AsyncContext`/`AsyncLocalStorage`) to ask, and releasing requests merely because the gate is
+ * pending would drop exactly the first-paint requests the gate exists to hold (m95). A provider
+ * whose request pipeline awaits the gate in a scheduled interceptor (the Axios bond) reaches it
+ * a microtask after the settle function returns, outside the window, for the same reason. Such a
+ * request must pass `skipAuthGate: true` (`RequestConfig.skipAuthGate`), and a timeout with
+ * requests held is reported at error level naming it.
  *
  * @module
  */
@@ -66,6 +70,25 @@ const heldRequests = new Map();
  * gates. Cleared when the same gate later releases a request normally.
  */
 let reportedStall = null;
+/**
+ * The settle-function invocation requests are currently waiting on, shared by every request
+ * that arrives while the gate is pending.
+ *
+ * Without it each held request re-invokes the gate, and a gate that issues a request on every
+ * call floods the network: the m97 shape measured 855 `fetch` calls for one page (`task-auth-
+ * gate-deadlock.report.md`). `null` when no invocation is in flight; `setAuthGate` clears it
+ * so a re-registered gate is never shared with the old one's waiters.
+ */
+let inFlightGate = null;
+/**
+ * True only while the gate's settle function is executing synchronously.
+ *
+ * A request that reaches `awaitAuthGate` in this window was issued BY the restore — the fetch
+ * client's `request()` awaits the gate before anything else, so the call is made in the settle
+ * function's own execution. Holding it would make the gate wait on itself (see the module
+ * doc); requests issued after the function awaits something else are held as usual.
+ */
+let gateSettling = false;
 /**
  * How long a request may be held by the gate before it is sent anyway.
  *
@@ -96,10 +119,20 @@ const GATE_TIMEOUT_MS = 3_000;
  * immediately when no restore is in flight, so registering it never makes a
  * request wait longer than the restore it was about to race anyway.
  *
- * A gate whose restore sends its OWN request through the gated client deadlocks — the
- * gate holds the request it is waiting for. That request must pass `skipAuthGate: true`
- * (see `RequestConfig.skipAuthGate`); `@molecule/app-auth`'s own restore does not
- * need it because it uses `fetch` rather than the bonded client.
+ * Waiting for the restore does NOT attach its token: a separately created HTTP
+ * client needs `createDefaultHttpClientWithAuthBearer({ baseURL,
+ * getToken: () => authClient.getAccessToken(), authScheme })` from
+ * `@molecule/app-bonds-default-react` (or the auth client built with
+ * `createDefaultAuthClientWithHttpSync`, which mirrors the token into the
+ * bonded client) plus `setAuthGate(() => authClient.whenRestored())`.
+ *
+ * The restore's own requests are never held: a request the settle function issues while it
+ * runs goes out immediately, so `setAuthGate(() => restoreSession())` cannot deadlock even
+ * when `restoreSession` calls the gated client. A restore that awaits something else first
+ * (a storage read, a `Promise.resolve()`) issues its request from a later continuation, which
+ * the gate cannot recognize — that request needs `skipAuthGate: true` (see
+ * `RequestConfig.skipAuthGate`). `@molecule/app-auth`'s own restore needs neither because it
+ * uses `fetch` rather than the bonded client.
  *
  * @param next - The gate, or `null` to clear a previously registered one.
  *
@@ -112,6 +145,7 @@ const GATE_TIMEOUT_MS = 3_000;
  */
 export const setAuthGate = (next) => {
     gate = next;
+    inFlightGate = null;
     reportedStall = null;
 };
 /**
@@ -121,21 +155,69 @@ export const setAuthGate = (next) => {
 const describeRequest = (request) => request?.method || request?.url
     ? `${request?.method ?? 'GET'} ${request?.url ?? ''}`.trim()
     : 'a request';
+/**
+ * How many held request names the stalled-gate report prints before summarizing the rest.
+ *
+ * The report is console output, and every reader of it truncates: molecule-dev's route walk
+ * keeps the first 200 characters of a console error, so the sentence naming the fix has to
+ * come first — and the request list is capped so the message stays readable when a deadlocked
+ * gate has held hundreds of requests (xr-molecule-flash-m173: 917 `GET /api/user`).
+ */
+const MAX_NAMED_HELD_REQUESTS = 5;
 /**
  * Reports a gate that timed out while holding requests: once per stuck gate, at error level
  * so it reaches the page's error console and any error transport — a console warning on a
  * deployed URL reads as "the site is slow", which is what the gate itself was added for.
+ *
+ * Leads with the cause and the fix, then names at most `MAX_NAMED_HELD_REQUESTS` distinct
+ * requests and counts the rest: an unbounded join buried the fix clause behind 900 names in
+ * xr-molecule-flash-m173, and no reader of the line ever reached it.
  */
 const reportStalledGate = (stuck) => {
     if (reportedStall === stuck)
         return;
     reportedStall = stuck;
-    const held = [...heldRequests.values()].join(', ');
-    logger.error(`The auth gate has not settled after ${GATE_TIMEOUT_MS}ms and ${heldRequests.size} request(s) ` +
-        `were held by it (${held}); sending them without waiting. If the gate waits for a session ` +
-        `restore that makes its own request through this HTTP client, that request is being held by ` +
-        `the gate waiting for it: send it with \`skipAuthGate: true\`, or clear the gate with ` +
-        `\`setAuthGate(null)\` if nothing restores a session.`);
+    const names = [...new Set(heldRequests.values())];
+    const shown = names.slice(0, MAX_NAMED_HELD_REQUESTS);
+    const more = heldRequests.size - shown.length;
+    logger.error(`The auth gate is waiting on itself: its restore's request is held by it. Send that ` +
+        `request with \`skipAuthGate: true\`, or clear the gate with \`setAuthGate(null)\` if ` +
+        `nothing restores a session. Held ${heldRequests.size} request(s) for ` +
+        `${GATE_TIMEOUT_MS}ms${shown.length ? `: ${shown.join(', ')}` : ''}` +
+        `${more > 0 ? ` (and ${more} more)` : ''}.`);
+};
+/**
+ * Starts the gate's settle function — once, shared by every request that arrives while it is
+ * pending — turning a rejection (or a synchronous throw) into a logged warning so a failed
+ * restore releases its waiters instead of rejecting them.
+ *
+ * `gateSettling` is true only for the function's synchronous execution: the IIFE runs
+ * `current()` up to its first `await` before this call returns, and any request the restore
+ * issues there (the gated client's `request()` awaits the gate before anything else) bypasses
+ * the gate instead of waiting on the invocation it belongs to.
+ */
+const invokeGate = (current) => {
+    if (inFlightGate)
+        return inFlightGate;
+    let invocation;
+    gateSettling = true;
+    try {
+        invocation = (async () => current())();
+    }
+    finally {
+        gateSettling = false;
+    }
+    const shared = invocation.catch((error) => {
+        logger.warn('The auth gate rejected; sending the request without waiting for it', {
+            error,
+        });
+    });
+    inFlightGate = shared;
+    void shared.then(() => {
+        if (inFlightGate === shared)
+            inFlightGate = null;
+    });
+    return shared;
 };
 /**
  * Awaits the registered gate, if any. Every HTTP provider calls this before it
@@ -160,19 +242,20 @@ export const awaitAuthGate = async (request) => {
     const current = gate;
     if (!current)
         return;
+    // Issued while the gate's settle function is running: part of the restore it is settling,
+    // never held by it. See `invokeGate` and the module doc.
+    if (gateSettling)
+        return;
     const token = Symbol('held-request');
     heldRequests.set(token, describeRequest(request));
     let timer;
     let timedOut = false;
     try {
         await Promise.race([
-            // `(async () => current())()` also turns a gate that throws SYNCHRONOUSLY into a rejection:
-            // a gate is someone else's code, and no shape of it may reject the request it was holding.
-            (async () => current())().catch((error) => {
-                logger.warn('The auth gate rejected; sending the request without waiting for it', {
-                    error,
-                });
-            }),
+            // One invocation, shared: `invokeGate` also turns a gate that throws SYNCHRONOUSLY into
+            // a rejection — a gate is someone else's code, and no shape of it may reject the
+            // request it was holding.
+            invokeGate(current),
             new Promise((resolve) => {
                 timer = setTimeout(() => {
                     timedOut = true;

package/dist/auth-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-gate.js","sourceRoot":"","sources":["../src/auth-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAIhD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;AAEhC,iFAAiF;AACjF,IAAI,IAAI,GAAiC,IAAI,CAAA;AAE7C;;;GAGG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE9C;;;;;;;GAOG;AACH,IAAI,aAAa,GAAiC,IAAI,CAAA;AAEtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,eAAe,GAAG,KAAK,CAAA;AAE7B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAkC,EAAQ,EAAE;IACtE,IAAI,GAAG,IAAI,CAAA;IACX,aAAa,GAAG,IAAI,CAAA;AACtB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,OAAyB,EAAU,EAAE,CAC5D,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,GAAG;IAC7B,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;IAC5D,CAAC,CAAC,WAAW,CAAA;AAEjB;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,KAA0B,EAAQ,EAAE;IAC7D,IAAI,aAAa,KAAK,KAAK;QAAE,OAAM;IACnC,aAAa,GAAG,KAAK,CAAA;IACrB,MAAM,IAAI,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,CAAC,KAAK,CACV,uCAAuC,eAAe,UAAU,YAAY,CAAC,IAAI,cAAc;QAC7F,oBAAoB,IAAI,mEAAmE;QAC3F,6FAA6F;QAC7F,uFAAuF;QACvF,sDAAsD,CACzD,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAyB,EAAiB,EAAE;IAC9E,wFAAwF;IACxF,gDAAgD;IAChD,IAAI,OAAO,EAAE,YAAY;QAAE,OAAM;IAEjC,MAAM,OAAO,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,OAAO;QAAE,OAAM;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;IACpC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IAEjD,IAAI,KAAgD,CAAA;IACpD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,MAAM,CAAC,IAAI,CAAC,oEAAoE,EAAE;oBAChF,KAAK;iBACN,CAAC,CAAA;YACJ,CAAC,CAAC;YACF,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,QAAQ,GAAG,IAAI,CAAA;oBACf,mFAAmF;oBACnF,iBAAiB,CAAC,OAAO,CAAC,CAAA;oBAC1B,OAAO,EAAE,CAAA;gBACX,CAAC,EAAE,eAAe,CAAC,CAAA;YACrB,CAAC,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAED,yFAAyF;IACzF,8EAA8E;IAC9E,IAAI,CAAC,QAAQ,IAAI,aAAa,KAAK,OAAO;QAAE,aAAa,GAAG,IAAI,CAAA;AAClE,CAAC,CAAA"}
+{"version":3,"file":"auth-gate.js","sourceRoot":"","sources":["../src/auth-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAIhD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;AAEhC,iFAAiF;AACjF,IAAI,IAAI,GAAiC,IAAI,CAAA;AAE7C;;;GAGG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE9C;;;;;;;GAOG;AACH,IAAI,aAAa,GAAiC,IAAI,CAAA;AAEtD;;;;;;;;GAQG;AACH,IAAI,YAAY,GAAyB,IAAI,CAAA;AAE7C;;;;;;;GAOG;AACH,IAAI,YAAY,GAAG,KAAK,CAAA;AAExB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,eAAe,GAAG,KAAK,CAAA;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAkC,EAAQ,EAAE;IACtE,IAAI,GAAG,IAAI,CAAA;IACX,YAAY,GAAG,IAAI,CAAA;IACnB,aAAa,GAAG,IAAI,CAAA;AACtB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,OAAyB,EAAU,EAAE,CAC5D,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,GAAG;IAC7B,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;IAC5D,CAAC,CAAC,WAAW,CAAA;AAEjB;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAA;AAEjC;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,CAAC,KAA0B,EAAQ,EAAE;IAC7D,IAAI,aAAa,KAAK,KAAK;QAAE,OAAM;IACnC,aAAa,GAAG,KAAK,CAAA;IACrB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAA;IACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAA;IAC7C,MAAM,CAAC,KAAK,CACV,qFAAqF;QACnF,uFAAuF;QACvF,oCAAoC,YAAY,CAAC,IAAI,kBAAkB;QACvE,GAAG,eAAe,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACpE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAC9C,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,GAAG,CAAC,OAA4B,EAAiB,EAAE;IACjE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAA;IAErC,IAAI,UAAyB,CAAA;IAC7B,YAAY,GAAG,IAAI,CAAA;IACnB,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAA;IACxC,CAAC;YAAS,CAAC;QACT,YAAY,GAAG,KAAK,CAAA;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,oEAAoE,EAAE;YAChF,KAAK;SACN,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,YAAY,GAAG,MAAM,CAAA;IACrB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACpB,IAAI,YAAY,KAAK,MAAM;YAAE,YAAY,GAAG,IAAI,CAAA;IAClD,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAyB,EAAiB,EAAE;IAC9E,wFAAwF;IACxF,gDAAgD;IAChD,IAAI,OAAO,EAAE,YAAY;QAAE,OAAM;IAEjC,MAAM,OAAO,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,OAAO;QAAE,OAAM;IAEpB,0FAA0F;IAC1F,yDAAyD;IACzD,IAAI,YAAY;QAAE,OAAM;IAExB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;IACpC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IAEjD,IAAI,KAAgD,CAAA;IACpD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,wFAAwF;YACxF,iFAAiF;YACjF,0BAA0B;YAC1B,UAAU,CAAC,OAAO,CAAC;YACnB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,QAAQ,GAAG,IAAI,CAAA;oBACf,mFAAmF;oBACnF,iBAAiB,CAAC,OAAO,CAAC,CAAA;oBAC1B,OAAO,EAAE,CAAA;gBACX,CAAC,EAAE,eAAe,CAAC,CAAA;YACrB,CAAC,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAED,yFAAyF;IACzF,8EAA8E;IAC9E,IAAI,CAAC,QAAQ,IAAI,aAAa,KAAK,OAAO;QAAE,aAAa,GAAG,IAAI,CAAA;AAClE,CAAC,CAAA"}

package/dist/errors.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Classify a failed request instead of reading its `status` by hand.
+ *
+ * A failure from this package is an {@link HttpError} whose `status` is either an
+ * HTTP status (the server answered) or `0` (it did not — the request was aborted or
+ * the network failed). Code that clears a session must ask "did the server REJECT
+ * the credential?", which is `status === 401 || status === 403` and nothing else:
+ *
+ * ```typescript
+ * try {
+ *   await http.get('/projects')
+ * } catch (err) {
+ *   if (isAuthFailure(err)) clearSession()
+ *   else if (isNoResponse(err)) return // aborted / offline — keep the session
+ *   else showError(err)
+ * }
+ * ```
+ *
+ * `err instanceof HttpError && err.status < 500` is the trap these helpers exist to
+ * replace: an aborted request (a component unmounting, a route change cancelling an
+ * in-flight fetch) and a network outage both arrive with `status === 0`, so that
+ * check signs the user out on every navigation that cancels a request.
+ *
+ * @module
+ */
+import { HttpError } from './types.js';
+/**
+ * Whether `err` is an {@link HttpError} from this package.
+ *
+ * @param err - Any thrown value.
+ * @returns True for an `HttpError`.
+ */
+export declare function isHttpError(err: unknown): err is HttpError;
+/**
+ * Whether the server REJECTED the request's credential — the only failure that
+ * justifies clearing a session.
+ *
+ * `401` (unauthenticated/expired token) and `403` (authenticated but refused) are
+ * the two statuses that say "this credential no longer authorizes this session".
+ * Everything else — `0` (aborted or offline), `404` (wrong endpoint), `5xx` (server
+ * fault), a rate limit — says nothing about the credential.
+ *
+ * @param err - Any thrown value.
+ * @returns True only when `err` is an `HttpError` with status 401 or 403.
+ */
+export declare function isAuthFailure(err: unknown): boolean;
+/**
+ * Whether no response was received at all: the request was aborted or the network
+ * failed. `status === 0` is not an HTTP status — it must never be read as
+ * "the user is not signed in".
+ *
+ * @param err - Any thrown value.
+ * @returns True when `err` is an `HttpError` with status `0`.
+ */
+export declare function isNoResponse(err: unknown): boolean;
+/**
+ * Whether the request was ABORTED (an `AbortController` signal, or the browser
+ * cancelling the fetch during a navigation) rather than failing on the network.
+ *
+ * Both arrive as `status === 0`; this distinguishes them, so a UI can stay silent
+ * for a cancelled request while still reporting a real outage.
+ *
+ * @param err - Any thrown value.
+ * @returns True when `err` is an `HttpError` flagged `aborted`.
+ */
+export declare function isAborted(err: unknown): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEnD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAElD;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE/C"}

package/dist/errors.js

@@ -0,0 +1,75 @@
+/**
+ * Classify a failed request instead of reading its `status` by hand.
+ *
+ * A failure from this package is an {@link HttpError} whose `status` is either an
+ * HTTP status (the server answered) or `0` (it did not — the request was aborted or
+ * the network failed). Code that clears a session must ask "did the server REJECT
+ * the credential?", which is `status === 401 || status === 403` and nothing else:
+ *
+ * ```typescript
+ * try {
+ *   await http.get('/projects')
+ * } catch (err) {
+ *   if (isAuthFailure(err)) clearSession()
+ *   else if (isNoResponse(err)) return // aborted / offline — keep the session
+ *   else showError(err)
+ * }
+ * ```
+ *
+ * `err instanceof HttpError && err.status < 500` is the trap these helpers exist to
+ * replace: an aborted request (a component unmounting, a route change cancelling an
+ * in-flight fetch) and a network outage both arrive with `status === 0`, so that
+ * check signs the user out on every navigation that cancels a request.
+ *
+ * @module
+ */
+import { HttpError } from './types.js';
+/**
+ * Whether `err` is an {@link HttpError} from this package.
+ *
+ * @param err - Any thrown value.
+ * @returns True for an `HttpError`.
+ */
+export function isHttpError(err) {
+    return err instanceof HttpError;
+}
+/**
+ * Whether the server REJECTED the request's credential — the only failure that
+ * justifies clearing a session.
+ *
+ * `401` (unauthenticated/expired token) and `403` (authenticated but refused) are
+ * the two statuses that say "this credential no longer authorizes this session".
+ * Everything else — `0` (aborted or offline), `404` (wrong endpoint), `5xx` (server
+ * fault), a rate limit — says nothing about the credential.
+ *
+ * @param err - Any thrown value.
+ * @returns True only when `err` is an `HttpError` with status 401 or 403.
+ */
+export function isAuthFailure(err) {
+    return isHttpError(err) && (err.status === 401 || err.status === 403);
+}
+/**
+ * Whether no response was received at all: the request was aborted or the network
+ * failed. `status === 0` is not an HTTP status — it must never be read as
+ * "the user is not signed in".
+ *
+ * @param err - Any thrown value.
+ * @returns True when `err` is an `HttpError` with status `0`.
+ */
+export function isNoResponse(err) {
+    return isHttpError(err) && err.status === 0;
+}
+/**
+ * Whether the request was ABORTED (an `AbortController` signal, or the browser
+ * cancelling the fetch during a navigation) rather than failing on the network.
+ *
+ * Both arrive as `status === 0`; this distinguishes them, so a UI can stay silent
+ * for a cancelled request while still reporting a real outage.
+ *
+ * @param err - Any thrown value.
+ * @returns True when `err` is an `HttpError` flagged `aborted`.
+ */
+export function isAborted(err) {
+    return isHttpError(err) && err.aborted;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,GAAG,YAAY,SAAS,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAA;AACxC,CAAC"}

package/dist/index.d.ts

@@ -78,18 +78,32 @@
  * `createDefaultAuthClientWithHttpSync`, which mirrors the token into the bonded client), because
  * `setAuthGate` alone sends no `Authorization` header.
  *
- * **A request the gate itself depends on must opt out of it: pass `skipAuthGate: true`.** A gate
- * that waits for a session restore whose own request goes through this client waits on itself —
- * that request is held by the gate waiting for it, so the restore never settles and every request
- * the gate holds stalls until it times out (3 s). The request that restores the session for a gate
- * you registered yourself is therefore written
- * `http.get(currentUserEndpoint, { skipAuthGate: true })`; `@molecule/app-auth`'s own restore does
- * not need it (it calls `fetch`, not this client).
+ * **The gate never holds its own restore's request.** A request the settle function issues
+ * while it runs (its call reaches this client before the function awaits anything) is part of
+ * the restore it is waiting for, so it goes out immediately — `setAuthGate(() =>
+ * restoreSession())` does not deadlock even when `restoreSession` uses this client. A restore
+ * that awaits something else first and only then calls the client reaches it after that
+ * window, and that request must opt out of the gate: `http.get(currentUserEndpoint, {
+ * skipAuthGate: true })`. Without the opt-out the gate waits on itself, the restore never
+ * settles, and every request the gate holds stalls until it times out (3 s).
+ * `@molecule/app-auth`'s own restore does not need it (it calls `fetch`, not this client).
+ *
+ * **A failed request's `status` is `0` when NO response arrived — never read it as
+ * "signed out".** An aborted request (an `AbortController` signal, a component's
+ * effect cleanup, a route change tearing the fetch down) and a network outage both
+ * throw an `HttpError` with `status === 0`; the aborted ones also carry
+ * `aborted: true` and the `http.error.aborted` key, the rest `http.error.networkError`.
+ * Neither says anything about the session. To decide whether a session ended, use
+ * `isAuthFailure(err)` (401/403 only); `isNoResponse(err)` identifies the no-response
+ * case so a caller can stay silent instead of reporting an outage. **Do not write
+ * `err instanceof HttpError && err.status < 500` as a sign-out check** — it clears
+ * the session on every aborted navigation request.
  *
  * @module
  */
 export * from './auth-gate.js';
 export * from './client.js';
+export * from './errors.js';
 export * from './interceptors.js';
 export * from './provider.js';
 export * from './types.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsGG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}

package/dist/index.js

@@ -78,18 +78,32 @@
  * `createDefaultAuthClientWithHttpSync`, which mirrors the token into the bonded client), because
  * `setAuthGate` alone sends no `Authorization` header.
  *
- * **A request the gate itself depends on must opt out of it: pass `skipAuthGate: true`.** A gate
- * that waits for a session restore whose own request goes through this client waits on itself —
- * that request is held by the gate waiting for it, so the restore never settles and every request
- * the gate holds stalls until it times out (3 s). The request that restores the session for a gate
- * you registered yourself is therefore written
- * `http.get(currentUserEndpoint, { skipAuthGate: true })`; `@molecule/app-auth`'s own restore does
- * not need it (it calls `fetch`, not this client).
+ * **The gate never holds its own restore's request.** A request the settle function issues
+ * while it runs (its call reaches this client before the function awaits anything) is part of
+ * the restore it is waiting for, so it goes out immediately — `setAuthGate(() =>
+ * restoreSession())` does not deadlock even when `restoreSession` uses this client. A restore
+ * that awaits something else first and only then calls the client reaches it after that
+ * window, and that request must opt out of the gate: `http.get(currentUserEndpoint, {
+ * skipAuthGate: true })`. Without the opt-out the gate waits on itself, the restore never
+ * settles, and every request the gate holds stalls until it times out (3 s).
+ * `@molecule/app-auth`'s own restore does not need it (it calls `fetch`, not this client).
+ *
+ * **A failed request's `status` is `0` when NO response arrived — never read it as
+ * "signed out".** An aborted request (an `AbortController` signal, a component's
+ * effect cleanup, a route change tearing the fetch down) and a network outage both
+ * throw an `HttpError` with `status === 0`; the aborted ones also carry
+ * `aborted: true` and the `http.error.aborted` key, the rest `http.error.networkError`.
+ * Neither says anything about the session. To decide whether a session ended, use
+ * `isAuthFailure(err)` (401/403 only); `isNoResponse(err)` identifies the no-response
+ * case so a caller can stay silent instead of reporting an outage. **Do not write
+ * `err instanceof HttpError && err.status < 500` as a sign-out check** — it clears
+ * the session on every aborted navigation request.
  *
  * @module
  */
 export * from './auth-gate.js';
 export * from './client.js';
+export * from './errors.js';
 export * from './interceptors.js';
 export * from './provider.js';
 export * from './types.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsGG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAQ/D;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,GAAI,SAAQ,gBAAqB,KAAG,UAwXjE,CAAA"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAQ/D;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,GAAI,SAAQ,gBAAqB,KAAG,UAiYjE,CAAA"}

package/dist/provider.js

@@ -257,9 +257,17 @@ export const createFetchClient = (config = {}) => {
                 else {
                     logger.error('Network error', finalConfig.method, url, err);
                 }
+                // An abort and a navigation cancellation are the SAME fact to a caller —
+                // the request was cancelled before any response — and neither is a network
+                // outage. Flag it (`aborted`) and give it its own errorKey so app code does
+                // not have to parse the message, and so a session-clearing check can tell
+                // it apart from a real failure without treating `status === 0` as a 4xx.
+                const aborted = isAbort || isNavCancel;
                 const error = new HttpError(err instanceof Error
                     ? err.message
-                    : t('http.error.networkError', undefined, { defaultValue: 'Network error' }), 0, undefined, finalConfig, 'http.error.networkError');
+                    : t(aborted ? 'http.error.aborted' : 'http.error.networkError', undefined, {
+                        defaultValue: aborted ? 'Request aborted' : 'Network error',
+                    }), 0, undefined, finalConfig, aborted ? 'http.error.aborted' : 'http.error.networkError', aborted);
                 // Apply error interceptors
                 let finalError = error;
                 for (const interceptor of errorInterceptors) {

package/dist/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAI9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC,2DAA2D;AAC3D,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAE1C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAA2B,EAAE,EAAc,EAAE;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,SAAS,GAAkB,IAAI,CAAA;IACnC,MAAM,mBAAmB,GAAyB,EAAE,CAAA;IACpD,MAAM,oBAAoB,GAA0B,EAAE,CAAA;IACtD,MAAM,iBAAiB,GAAuB,EAAE,CAAA;IAChD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAc,CAAA;IAE/C,kEAAkE;IAClE,0DAA0D;IAC1D,kEAAkE;IAClE,uEAAuE;IACvE,oEAAoE;IACpE,2CAA2C;IAC3C,IAAI,oBAAoB,GAAG,KAAK,CAAA;IAChC,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,oBAAoB,GAAG,IAAI,CAAA;YAC3B,gEAAgE;YAChE,8DAA8D;YAC9D,2DAA2D;YAC3D,UAAU,CAAC,GAAG,EAAE;gBACd,oBAAoB,GAAG,KAAK,CAAA;YAC9B,CAAC,EAAE,IAAI,CAAC,CAAA;QACV,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAChD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;QAE3C,KAAK,CAAC,OAAO,CAAc,aAAgC;YACzD,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,sFAAsF;YACtF,6DAA6D;YAC7D,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;YAElC,6BAA6B;YAC7B,IAAI,WAAW,GAAG,EAAE,GAAG,aAAa,EAAE,CAAA;YACtC,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;gBAC9C,WAAW,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;YAC9C,CAAC;YAED,YAAY;YACZ,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,CAAA;YACzB,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,4EAA4E;gBAC5E,4EAA4E;gBAC5E,qEAAqE;gBACrE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAA;gBACnF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBACtD,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,GAAG,CAAA;gBAC5B,CAAC;YACH,CAAC;YAED,mBAAmB;YACnB,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;gBACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBACnC,CAAC;gBACH,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;gBACrC,IAAI,WAAW,EAAE,CAAC;oBAChB,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,WAAW,CAAA;gBACtD,CAAC;YACH,CAAC;YAED,gBAAgB;YAChB,MAAM,OAAO,GAA2B;gBACtC,GAAG,MAAM,CAAC,cAAc;gBACxB,GAAG,WAAW,CAAC,OAAO;aACvB,CAAA;YAED,iBAAiB;YACjB,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC,eAAe,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAA;YAC5E,CAAC;YAED,4BAA4B;YAC5B,IAAI,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;YAC9C,CAAC;YAED,sBAAsB;YACtB,MAAM,YAAY,GAAgB;gBAChC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO;gBACP,WAAW,EACT,CAAC,WAAW,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;gBACrF,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAA;YAED,WAAW;YACX,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACrB,IAAI,WAAW,CAAC,IAAI,YAAY,QAAQ,IAAI,WAAW,CAAC,IAAI,YAAY,IAAI,EAAE,CAAC;oBAC7E,YAAY,CAAC,IAAI,GAAG,WAAW,CAAC,IAAgB,CAAA;oBAChD,mEAAmE;oBACnE,IAAI,WAAW,CAAC,IAAI,YAAY,QAAQ,EAAE,CAAC;wBACzC,OAAO,OAAO,CAAC,cAAc,CAAC,CAAA;oBAChC,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBACtD,CAAC;YACH,CAAC;YAED,sCAAsC;YACtC,IAAI,SAAoD,CAAA;YACxD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAA;YACrD,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;gBACxC,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;gBACvC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;YAC3D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;gBAEpD,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;gBAED,yBAAyB;gBACzB,MAAM,eAAe,GAA2B,EAAE,CAAA;gBAClD,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC3C,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBAC9B,CAAC,CAAC,CAAA;gBAEF,sBAAsB;gBACtB,IAAI,IAAO,CAAA;gBACX,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,IAAI,MAAM,CAAA;gBAEvD,QAAQ,YAAY,EAAE,CAAC;oBACrB,KAAK,MAAM;wBACT,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAM,CAAA;wBACxC,MAAK;oBACP,KAAK,MAAM;wBACT,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAM,CAAA;wBACxC,MAAK;oBACP,KAAK,aAAa;wBAChB,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAM,CAAA;wBAC/C,MAAK;oBACP,KAAK,MAAM,CAAC;oBACZ,OAAO,CAAC,CAAC,CAAC;wBACR,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAA;wBACvC,IAAI,CAAC;4BACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;wBACvC,CAAC;wBAAC,OAAO,MAAM,EAAE,CAAC;4BAChB,kEAAkE;4BAClE,sEAAsE;4BACtE,wCAAwC;4BACxC,EAAE;4BACF,sEAAsE;4BACtE,wEAAwE;4BACxE,0EAA0E;4BAC1E,yEAAyE;4BACzE,sEAAsE;4BACtE,6DAA6D;4BAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;4BACnE,IAAI,aAAa,CAAC,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gCAC5D,MAAM,IAAI,SAAS,CACjB,GAAG,WAAW,CAAC,MAAM,IAAI,GAAG,aAAa,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc;oCAC9E,8EAA8E;oCAC9E,4EAA4E,EAC9E,aAAa,CAAC,MAAM,EACpB;oCACE,IAAI,EAAE,IAAS;oCACf,MAAM,EAAE,aAAa,CAAC,MAAM;oCAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;oCACpC,OAAO,EAAE,eAAe;oCACxB,MAAM,EAAE,WAAW;iCACpB,EACD,WAAW,EACX,0BAA0B,CAC3B,CAAA;4BACH,CAAC;4BACD,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAA;4BACzD,IAAI,GAAG,IAAS,CAAA;wBAClB,CAAC;wBACD,MAAK;oBACP,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,GAAoB;oBAC9B,IAAI;oBACJ,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;oBACpC,OAAO,EAAE,eAAe;oBACxB,MAAM,EAAE,WAAW;iBACpB,CAAA;gBAED,4BAA4B;gBAC5B,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;oBACxE,MAAM,KAAK,GAAG,IAAI,SAAS,CACzB,CAAC,CACC,0BAA0B,EAC1B,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,EAChC,EAAE,YAAY,EAAE,8BAA8B,aAAa,CAAC,MAAM,EAAE,EAAE,CACvE,EACD,aAAa,CAAC,MAAM,EACpB,QAAQ,EACR,WAAW,EACX,0BAA0B,CAC3B,CAAA;oBAED,qBAAqB;oBACrB,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACjC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;oBACnD,CAAC;oBAED,2BAA2B;oBAC3B,IAAI,UAAU,GAAG,KAAK,CAAA;oBACtB,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;wBAC5C,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;oBAC5C,CAAC;oBAED,MAAM,UAAU,CAAA;gBAClB,CAAC;gBAED,8BAA8B;gBAC9B,KAAK,MAAM,WAAW,IAAI,oBAAoB,EAAE,CAAC;oBAC/C,QAAQ,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAoB,CAAA;gBAC7D,CAAC;gBAED,OAAO,QAAQ,CAAA;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;gBAED,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;oBAC7B,MAAM,GAAG,CAAA;gBACX,CAAC;gBAED,8DAA8D;gBAC9D,+DAA+D;gBAC/D,8BAA8B;gBAC9B,EAAE;gBACF,gDAAgD;gBAChD,2DAA2D;gBAC3D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,gEAAgE;gBAChE,8DAA8D;gBAC9D,8CAA8C;gBAC9C,EAAE;gBACF,+DAA+D;gBAC/D,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;gBACtD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;gBACpD,MAAM,OAAO,GACX,OAAO,KAAK,YAAY;oBACxB,CAAC,OAAO,YAAY,KAAK,WAAW;wBAClC,GAAG,YAAY,YAAY;wBAC3B,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;oBAC5B,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBAE5C,MAAM,SAAS,GACb,OAAO,QAAQ,KAAK,WAAW;oBAC/B,CAAC,QAAQ,CAAC,eAAe,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAA;gBACrE,MAAM,WAAW,GACf,CAAC,OAAO;oBACR,OAAO,KAAK,WAAW;oBACvB,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC1D,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAA;gBAErC,IAAI,OAAO,EAAE,CAAC;oBACZ,2BAA2B;gBAC7B,CAAC;qBAAM,IAAI,WAAW,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBACjF,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBAC7D,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,SAAS,CACzB,GAAG,YAAY,KAAK;oBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,EAC9E,CAAC,EACD,SAAS,EACT,WAAW,EACX,yBAAyB,CAC1B,CAAA;gBAED,2BAA2B;gBAC3B,IAAI,UAAU,GAAG,KAAK,CAAA;gBACtB,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;oBAC5C,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;gBAC5C,CAAC;gBAED,MAAM,UAAU,CAAA;YAClB,CAAC;QACH,CAAC;QAED,GAAG,CAAc,GAAW,EAAE,aAA6B;YACzD,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QACpE,CAAC;QAED,IAAI,CACF,GAAW,EACX,IAAc,EACd,aAA6B;YAE7B,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,CAAC;QAED,GAAG,CACD,GAAW,EACX,IAAc,EACd,aAA6B;YAE7B,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,CAAC;QAED,KAAK,CACH,GAAW,EACX,IAAc,EACd,aAA6B;YAE7B,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,CAAc,GAAW,EAAE,aAA6B;YAC5D,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,qBAAqB,CAAC,WAA+B;YACnD,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACrC,OAAO,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACtD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAED,sBAAsB,CAAC,WAAgC;YACrD,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACtC,OAAO,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACvD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACvC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAED,mBAAmB,CAAC,WAA6B;YAC/C,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACnC,OAAO,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACpD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAED,YAAY,CAAC,KAAoB;YAC/B,SAAS,GAAG,KAAK,CAAA;QACnB,CAAC;QAED,YAAY;YACV,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,WAAW,CAAC,OAAmB;YAC7B,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC9B,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChD,CAAC;KACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAI9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC,2DAA2D;AAC3D,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAE1C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAA2B,EAAE,EAAc,EAAE;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,SAAS,GAAkB,IAAI,CAAA;IACnC,MAAM,mBAAmB,GAAyB,EAAE,CAAA;IACpD,MAAM,oBAAoB,GAA0B,EAAE,CAAA;IACtD,MAAM,iBAAiB,GAAuB,EAAE,CAAA;IAChD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAc,CAAA;IAE/C,kEAAkE;IAClE,0DAA0D;IAC1D,kEAAkE;IAClE,uEAAuE;IACvE,oEAAoE;IACpE,2CAA2C;IAC3C,IAAI,oBAAoB,GAAG,KAAK,CAAA;IAChC,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,oBAAoB,GAAG,IAAI,CAAA;YAC3B,gEAAgE;YAChE,8DAA8D;YAC9D,2DAA2D;YAC3D,UAAU,CAAC,GAAG,EAAE;gBACd,oBAAoB,GAAG,KAAK,CAAA;YAC9B,CAAC,EAAE,IAAI,CAAC,CAAA;QACV,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAChD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;QAE3C,KAAK,CAAC,OAAO,CAAc,aAAgC;YACzD,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,sFAAsF;YACtF,6DAA6D;YAC7D,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;YAElC,6BAA6B;YAC7B,IAAI,WAAW,GAAG,EAAE,GAAG,aAAa,EAAE,CAAA;YACtC,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;gBAC9C,WAAW,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;YAC9C,CAAC;YAED,YAAY;YACZ,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,CAAA;YACzB,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,4EAA4E;gBAC5E,4EAA4E;gBAC5E,qEAAqE;gBACrE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAA;gBACnF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBACtD,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,GAAG,CAAA;gBAC5B,CAAC;YACH,CAAC;YAED,mBAAmB;YACnB,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;gBACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBACnC,CAAC;gBACH,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;gBACrC,IAAI,WAAW,EAAE,CAAC;oBAChB,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,WAAW,CAAA;gBACtD,CAAC;YACH,CAAC;YAED,gBAAgB;YAChB,MAAM,OAAO,GAA2B;gBACtC,GAAG,MAAM,CAAC,cAAc;gBACxB,GAAG,WAAW,CAAC,OAAO;aACvB,CAAA;YAED,iBAAiB;YACjB,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC,eAAe,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAA;YAC5E,CAAC;YAED,4BAA4B;YAC5B,IAAI,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;YAC9C,CAAC;YAED,sBAAsB;YACtB,MAAM,YAAY,GAAgB;gBAChC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO;gBACP,WAAW,EACT,CAAC,WAAW,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;gBACrF,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAA;YAED,WAAW;YACX,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACrB,IAAI,WAAW,CAAC,IAAI,YAAY,QAAQ,IAAI,WAAW,CAAC,IAAI,YAAY,IAAI,EAAE,CAAC;oBAC7E,YAAY,CAAC,IAAI,GAAG,WAAW,CAAC,IAAgB,CAAA;oBAChD,mEAAmE;oBACnE,IAAI,WAAW,CAAC,IAAI,YAAY,QAAQ,EAAE,CAAC;wBACzC,OAAO,OAAO,CAAC,cAAc,CAAC,CAAA;oBAChC,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBACtD,CAAC;YACH,CAAC;YAED,sCAAsC;YACtC,IAAI,SAAoD,CAAA;YACxD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAA;YACrD,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;gBACxC,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;gBACvC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;YAC3D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;gBAEpD,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;gBAED,yBAAyB;gBACzB,MAAM,eAAe,GAA2B,EAAE,CAAA;gBAClD,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC3C,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBAC9B,CAAC,CAAC,CAAA;gBAEF,sBAAsB;gBACtB,IAAI,IAAO,CAAA;gBACX,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,IAAI,MAAM,CAAA;gBAEvD,QAAQ,YAAY,EAAE,CAAC;oBACrB,KAAK,MAAM;wBACT,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAM,CAAA;wBACxC,MAAK;oBACP,KAAK,MAAM;wBACT,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAM,CAAA;wBACxC,MAAK;oBACP,KAAK,aAAa;wBAChB,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAM,CAAA;wBAC/C,MAAK;oBACP,KAAK,MAAM,CAAC;oBACZ,OAAO,CAAC,CAAC,CAAC;wBACR,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAA;wBACvC,IAAI,CAAC;4BACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;wBACvC,CAAC;wBAAC,OAAO,MAAM,EAAE,CAAC;4BAChB,kEAAkE;4BAClE,sEAAsE;4BACtE,wCAAwC;4BACxC,EAAE;4BACF,sEAAsE;4BACtE,wEAAwE;4BACxE,0EAA0E;4BAC1E,yEAAyE;4BACzE,sEAAsE;4BACtE,6DAA6D;4BAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;4BACnE,IAAI,aAAa,CAAC,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gCAC5D,MAAM,IAAI,SAAS,CACjB,GAAG,WAAW,CAAC,MAAM,IAAI,GAAG,aAAa,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc;oCAC9E,8EAA8E;oCAC9E,4EAA4E,EAC9E,aAAa,CAAC,MAAM,EACpB;oCACE,IAAI,EAAE,IAAS;oCACf,MAAM,EAAE,aAAa,CAAC,MAAM;oCAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;oCACpC,OAAO,EAAE,eAAe;oCACxB,MAAM,EAAE,WAAW;iCACpB,EACD,WAAW,EACX,0BAA0B,CAC3B,CAAA;4BACH,CAAC;4BACD,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAA;4BACzD,IAAI,GAAG,IAAS,CAAA;wBAClB,CAAC;wBACD,MAAK;oBACP,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,GAAoB;oBAC9B,IAAI;oBACJ,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,UAAU,EAAE,aAAa,CAAC,UAAU;oBACpC,OAAO,EAAE,eAAe;oBACxB,MAAM,EAAE,WAAW;iBACpB,CAAA;gBAED,4BAA4B;gBAC5B,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;oBACxE,MAAM,KAAK,GAAG,IAAI,SAAS,CACzB,CAAC,CACC,0BAA0B,EAC1B,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,EAChC,EAAE,YAAY,EAAE,8BAA8B,aAAa,CAAC,MAAM,EAAE,EAAE,CACvE,EACD,aAAa,CAAC,MAAM,EACpB,QAAQ,EACR,WAAW,EACX,0BAA0B,CAC3B,CAAA;oBAED,qBAAqB;oBACrB,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACjC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;oBACnD,CAAC;oBAED,2BAA2B;oBAC3B,IAAI,UAAU,GAAG,KAAK,CAAA;oBACtB,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;wBAC5C,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;oBAC5C,CAAC;oBAED,MAAM,UAAU,CAAA;gBAClB,CAAC;gBAED,8BAA8B;gBAC9B,KAAK,MAAM,WAAW,IAAI,oBAAoB,EAAE,CAAC;oBAC/C,QAAQ,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAoB,CAAA;gBAC7D,CAAC;gBAED,OAAO,QAAQ,CAAA;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;gBAED,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;oBAC7B,MAAM,GAAG,CAAA;gBACX,CAAC;gBAED,8DAA8D;gBAC9D,+DAA+D;gBAC/D,8BAA8B;gBAC9B,EAAE;gBACF,gDAAgD;gBAChD,2DAA2D;gBAC3D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,gEAAgE;gBAChE,8DAA8D;gBAC9D,8CAA8C;gBAC9C,EAAE;gBACF,+DAA+D;gBAC/D,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;gBACtD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;gBACpD,MAAM,OAAO,GACX,OAAO,KAAK,YAAY;oBACxB,CAAC,OAAO,YAAY,KAAK,WAAW;wBAClC,GAAG,YAAY,YAAY;wBAC3B,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;oBAC5B,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBAE5C,MAAM,SAAS,GACb,OAAO,QAAQ,KAAK,WAAW;oBAC/B,CAAC,QAAQ,CAAC,eAAe,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAA;gBACrE,MAAM,WAAW,GACf,CAAC,OAAO;oBACR,OAAO,KAAK,WAAW;oBACvB,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC1D,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAA;gBAErC,IAAI,OAAO,EAAE,CAAC;oBACZ,2BAA2B;gBAC7B,CAAC;qBAAM,IAAI,WAAW,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBACjF,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBAC7D,CAAC;gBACD,yEAAyE;gBACzE,2EAA2E;gBAC3E,4EAA4E;gBAC5E,0EAA0E;gBAC1E,yEAAyE;gBACzE,MAAM,OAAO,GAAG,OAAO,IAAI,WAAW,CAAA;gBACtC,MAAM,KAAK,GAAG,IAAI,SAAS,CACzB,GAAG,YAAY,KAAK;oBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,EAAE,SAAS,EAAE;wBACvE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;qBAC5D,CAAC,EACN,CAAC,EACD,SAAS,EACT,WAAW,EACX,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,EAC1D,OAAO,CACR,CAAA;gBAED,2BAA2B;gBAC3B,IAAI,UAAU,GAAG,KAAK,CAAA;gBACtB,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;oBAC5C,UAAU,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;gBAC5C,CAAC;gBAED,MAAM,UAAU,CAAA;YAClB,CAAC;QACH,CAAC;QAED,GAAG,CAAc,GAAW,EAAE,aAA6B;YACzD,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QACpE,CAAC;QAED,IAAI,CACF,GAAW,EACX,IAAc,EACd,aAA6B;YAE7B,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,CAAC;QAED,GAAG,CACD,GAAW,EACX,IAAc,EACd,aAA6B;YAE7B,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,CAAC;QAED,KAAK,CACH,GAAW,EACX,IAAc,EACd,aAA6B;YAE7B,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,CAAc,GAAW,EAAE,aAA6B;YAC5D,OAAO,MAAM,CAAC,OAAO,CAAI,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,qBAAqB,CAAC,WAA+B;YACnD,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACrC,OAAO,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACtD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAED,sBAAsB,CAAC,WAAgC;YACrD,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACtC,OAAO,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACvD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACvC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAED,mBAAmB,CAAC,WAA6B;YAC/C,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACnC,OAAO,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACpD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAED,YAAY,CAAC,KAAoB;YAC/B,SAAS,GAAG,KAAK,CAAA;QACnB,CAAC;QAED,YAAY;YACV,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,WAAW,CAAC,OAAmB;YAC7B,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC9B,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChD,CAAC;KACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA"}

package/dist/types.d.ts

@@ -30,11 +30,15 @@ export interface RequestConfig {
     /**
      * Send this request WITHOUT waiting for the session restore (the auth gate).
      *
-     * A request the gate itself depends on must set this. A gate registered with
-     * `setAuthGate` that waits for a session restore whose own request goes through this
-     * client otherwise waits on itself: the gate holds the restore's request, the restore's
-     * promise never settles, and every request on the page stalls until the gate times out —
-     * so pass `skipAuthGate: true` on the restore's own request:
+     * A request the gate's restore issues from a LATER continuation must set this. The gate
+     * recognizes a request the settle function issues while it runs and never holds it — this
+     * package's client awaits the gate before anything else, so a `restoreSession()` that calls
+     * it directly does not deadlock. But a restore that awaits something else first
+     * (`await storage.get()`), then calls the client, reaches `awaitAuthGate` after that window:
+     * the gate then waits on itself, and every request on the page stalls until the gate times
+     * out (3 s) — so pass `skipAuthGate: true` on that request. A provider that awaits the gate
+     * inside a scheduled interceptor (the Axios bond) also reaches it after the window, so its
+     * restore's request needs the opt-out.
      *
      * ```typescript
      * // the request the gate's restore makes, through the same client the gate holds back
@@ -43,7 +47,8 @@ export interface RequestConfig {
      *
      * `@molecule/app-auth`'s own restore does not need it — it sends its request with
      * `fetch`, not through this client. An app with its own session store that registers a
-     * gate with `setAuthGate` does.
+     * gate with `setAuthGate` does not need it either when its restore calls the client
+     * directly.
      */
     skipAuthGate?: boolean;
     /**
@@ -134,12 +139,47 @@ export interface HttpResponse<T = unknown> {
 }
 /**
  * HTTP error with response details.
+ *
+ * **`status` is an HTTP status when the server answered, and `0` when it did not.**
+ * A `0` means NO response exists: the request was aborted (an `AbortController`, a
+ * component's effect cleanup, a route change tearing the request down) or the
+ * network failed before anything came back. It is not an HTTP status at all, so it
+ * says nothing about the session — an app must never treat `status < 500` as
+ * "signed out", because every aborted request on a route change would clear the
+ * session. The correct check is {@link isAuthFailure} (`status === 401 || status === 403`);
+ * `isNoResponse` (`status === 0`) identifies this case.
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await http.get('/projects')
+ * } catch (err) {
+ *   if (isAuthFailure(err)) clearSession()      // 401/403: the server rejected the credential
+ *   else if (isNoResponse(err)) return           // aborted or offline — not a session decision
+ *   else showError(err)
+ * }
+ * ```
  */
 export declare class HttpError extends Error {
     status: number;
     response?: HttpResponse | undefined;
     config?: FullRequestConfig | undefined;
     errorKey?: string | undefined;
-    constructor(message: string, status: number, response?: HttpResponse | undefined, config?: FullRequestConfig | undefined, errorKey?: string | undefined);
+    aborted: boolean;
+    /**
+     * Builds a failed-request error.
+     *
+     * @param message - Human-readable message (already translated where a key exists).
+     * @param status - HTTP status, or `0` when no response was received (aborted / network failure).
+     * @param response - Parsed response when the server answered, otherwise undefined.
+     * @param config - The request config that failed.
+     * @param errorKey - Translation key for the failure (`http.error.aborted` for an
+     *   aborted request, `http.error.networkError` for a real network failure).
+     * @param aborted - Whether the request was aborted before a response: an
+     *   `AbortController` signal (component cleanup, a cancelled request) or the
+     *   browser tearing the fetch down during a navigation. Distinguishes an abort
+     *   from a network outage on the same `status === 0`, without parsing the message.
+     */
+    constructor(message: string, status: number, response?: HttpResponse | undefined, config?: FullRequestConfig | undefined, errorKey?: string | undefined, aborted?: boolean);
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAEzF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEhC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;IAE9D;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAA;IAEvD;;OAEG;IACH,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IAEd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;OAEG;IACH,MAAM,EAAE,UAAU,CAAA;IAElB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IAEX;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC;;OAEG;IACH,IAAI,EAAE,CAAC,CAAA;IAEP;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IAEd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE/B;;OAEG;IACH,MAAM,EAAE,iBAAiB,CAAA;CAC1B;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAGzB,MAAM,EAAE,MAAM;IACd,QAAQ,CAAC,EAAE,YAAY;IACvB,MAAM,CAAC,EAAE,iBAAiB;IAC1B,QAAQ,CAAC,EAAE,MAAM;gBAJxB,OAAO,EAAE,MAAM,EACR,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,YAAY,YAAA,EACvB,MAAM,CAAC,EAAE,iBAAiB,YAAA,EAC1B,QAAQ,CAAC,EAAE,MAAM,YAAA;CAK3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAEzF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEhC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;IAE9D;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAA;IAEvD;;OAEG;IACH,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IAEd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;OAEG;IACH,MAAM,EAAE,UAAU,CAAA;IAElB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IAEX;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC;;OAEG;IACH,IAAI,EAAE,CAAC,CAAA;IAEP;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IAEd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE/B;;OAEG;IACH,MAAM,EAAE,iBAAiB,CAAA;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAiBzB,MAAM,EAAE,MAAM;IACd,QAAQ,CAAC,EAAE,YAAY;IACvB,MAAM,CAAC,EAAE,iBAAiB;IAC1B,QAAQ,CAAC,EAAE,MAAM;IACjB,OAAO;IApBhB;;;;;;;;;;;;;OAaG;gBAED,OAAO,EAAE,MAAM,EACR,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,YAAY,YAAA,EACvB,MAAM,CAAC,EAAE,iBAAiB,YAAA,EAC1B,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,OAAO,UAAQ;CAKzB"}

package/dist/types.js

@@ -5,18 +5,54 @@
  */
 /**
  * HTTP error with response details.
+ *
+ * **`status` is an HTTP status when the server answered, and `0` when it did not.**
+ * A `0` means NO response exists: the request was aborted (an `AbortController`, a
+ * component's effect cleanup, a route change tearing the request down) or the
+ * network failed before anything came back. It is not an HTTP status at all, so it
+ * says nothing about the session — an app must never treat `status < 500` as
+ * "signed out", because every aborted request on a route change would clear the
+ * session. The correct check is {@link isAuthFailure} (`status === 401 || status === 403`);
+ * `isNoResponse` (`status === 0`) identifies this case.
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await http.get('/projects')
+ * } catch (err) {
+ *   if (isAuthFailure(err)) clearSession()      // 401/403: the server rejected the credential
+ *   else if (isNoResponse(err)) return           // aborted or offline — not a session decision
+ *   else showError(err)
+ * }
+ * ```
  */
 export class HttpError extends Error {
     status;
     response;
     config;
     errorKey;
-    constructor(message, status, response, config, errorKey) {
+    aborted;
+    /**
+     * Builds a failed-request error.
+     *
+     * @param message - Human-readable message (already translated where a key exists).
+     * @param status - HTTP status, or `0` when no response was received (aborted / network failure).
+     * @param response - Parsed response when the server answered, otherwise undefined.
+     * @param config - The request config that failed.
+     * @param errorKey - Translation key for the failure (`http.error.aborted` for an
+     *   aborted request, `http.error.networkError` for a real network failure).
+     * @param aborted - Whether the request was aborted before a response: an
+     *   `AbortController` signal (component cleanup, a cancelled request) or the
+     *   browser tearing the fetch down during a navigation. Distinguishes an abort
+     *   from a network outage on the same `status === 0`, without parsing the message.
+     */
+    constructor(message, status, response, config, errorKey, aborted = false) {
         super(message);
         this.status = status;
         this.response = response;
         this.config = config;
         this.errorKey = errorKey;
+        this.aborted = aborted;
         this.name = 'HttpError';
     }
 }

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwJH;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAGzB;IACA;IACA;IACA;IALT,YACE,OAAe,EACR,MAAc,EACd,QAAuB,EACvB,MAA0B,EAC1B,QAAiB;QAExB,KAAK,CAAC,OAAO,CAAC,CAAA;QALP,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAe;QACvB,WAAM,GAAN,MAAM,CAAoB;QAC1B,aAAQ,GAAR,QAAQ,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;IACzB,CAAC;CACF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6JH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAiBzB;IACA;IACA;IACA;IACA;IApBT;;;;;;;;;;;;;OAaG;IACH,YACE,OAAe,EACR,MAAc,EACd,QAAuB,EACvB,MAA0B,EAC1B,QAAiB,EACjB,UAAU,KAAK;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAA;QANP,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAe;QACvB,WAAM,GAAN,MAAM,CAAoB;QAC1B,aAAQ,GAAR,QAAQ,CAAS;QACjB,YAAO,GAAP,OAAO,CAAQ;QAGtB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;IACzB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/app-http",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Client HTTP interface for molecule.dev",
   "type": "module",
   "main": "dist/index.js",