@polyester/sdk 0.23.1 → 0.24.1

package/dist/realtime/client.js

@@ -29,7 +29,6 @@ function loadCentrifuge() {
 var RealtimeClient = class {
 	#publicClient = null;
 	#privateClient = null;
-	#connectionHandlers = /* @__PURE__ */ new Set();
 	#sharedSubs = /* @__PURE__ */ new Map();
 	#pendingTeardowns = /* @__PURE__ */ new Map();
 	#config;
@@ -83,13 +82,10 @@ var RealtimeClient = class {
 	#createPublicClient(Centrifuge) {
 		const client = new Centrifuge(this.#config.wsUrl);
 		this.#publicClient = client;
-		client.on("connected", () => {
-			if (this.#publicClient !== client) return;
-			for (const h of this.#connectionHandlers) h.onConnected?.();
-		});
-		client.on("disconnected", () => {
-			if (this.#publicClient !== client) return;
-			for (const h of this.#connectionHandlers) h.onDisconnected?.();
+		client.on("disconnected", (ctx) => {
+			if (this.#publicClient !== client || ctx.code <= 1) return;
+			this.#publicClient = null;
+			this.#terminateSubscriptions([...this.#sharedSubs.values(), ...this.#pendingTeardowns.values()].filter((shared) => shared.client === client), "disconnected", ctx);
 		});
 		client.connect();
 		return client;
@@ -114,13 +110,10 @@ var RealtimeClient = class {
 			}
 		} });
 		this.#privateClient = client;
-		client.on("connected", () => {
-			if (this.#privateClient !== client) return;
-			for (const h of this.#connectionHandlers) h.onConnected?.();
-		});
-		client.on("disconnected", () => {
-			if (this.#privateClient !== client) return;
-			for (const h of this.#connectionHandlers) h.onDisconnected?.();
+		client.on("disconnected", (ctx) => {
+			if (this.#privateClient !== client || ctx.code <= 1) return;
+			this.#privateClient = null;
+			this.#terminateSubscriptions([...this.#sharedSubs.values(), ...this.#pendingTeardowns.values()].filter((shared) => shared.client === client), "disconnected", ctx);
 		});
 		client.connect();
 		return client;
@@ -128,16 +121,11 @@ var RealtimeClient = class {
 	#ensurePublicClient(Centrifuge) {
 		return this.#publicClient ?? this.#createPublicClient(Centrifuge);
 	}
-	#ensurePrivateClient(Centrifuge) {
-		if (!this.#hasAuth()) throw new AuthenticationError("Cannot create authenticated realtime client without authentication");
-		return this.#privateClient ?? this.#createPrivateClient(Centrifuge);
-	}
 	#assertChannelAuth(channel) {
 		if (this.#channelKind(channel) === "private" && !this.#hasAuth()) throw new AuthenticationError(`Cannot subscribe to private channel "${channel}" without authentication`);
 	}
 	#ensureClientForChannel(Centrifuge, channel) {
-		this.#assertChannelAuth(channel);
-		if (this.#channelKind(channel) === "private") return this.#ensurePrivateClient(Centrifuge);
+		if (this.#channelKind(channel) === "private") return this.#privateClient ?? this.#createPrivateClient(Centrifuge);
 		return this.#ensurePublicClient(Centrifuge);
 	}
 	#attachSubscription(shared) {
@@ -164,6 +152,7 @@ var RealtimeClient = class {
 		if (shared.attachmentEpoch !== attachmentEpoch || shared.sub) return;
 		if (this.#sharedSubs.get(shared.channel) !== shared) return;
 		try {
+			this.#assertChannelAuth(shared.channel);
 			this.#attachSubscriptionNow(Centrifuge, shared, attachmentEpoch);
 		} catch (error) {
 			this.#sharedSubs.delete(shared.channel);
@@ -184,8 +173,12 @@ var RealtimeClient = class {
 			const subscriptionEpoch = ++shared.subscriptionEpoch;
 			for (const handler of shared.subscribedHandlers) handler(subscriptionEpoch);
 		});
-		sub.on("unsubscribed", () => {
+		sub.on("unsubscribed", (ctx) => {
 			if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;
+			if (ctx.code >= 2e3 && ctx.code < 2500) {
+				this.#terminateSubscriptions([shared], "unsubscribed", ctx);
+				return;
+			}
 			for (const handler of shared.unsubscribedHandlers) handler();
 		});
 		sub.on("error", (ctx) => {
@@ -240,6 +233,29 @@ var RealtimeClient = class {
 			this.#callErrorHandler(onError, createSdkSubscriptionErrorContext(channel, type, error));
 		}
 	}
+	#terminateSubscriptions(subscriptions, type, ctx) {
+		const notifications = subscriptions.map((shared) => ({
+			error: createSdkSubscriptionErrorContext(shared.channel, type, {
+				code: ctx.code,
+				message: ctx.reason
+			}),
+			errorHandlers: [...shared.errorHandlers],
+			closeHandlers: [...shared.unsubscribedHandlers]
+		}));
+		for (const shared of subscriptions) {
+			if (this.#sharedSubs.get(shared.channel) === shared) this.#sharedSubs.delete(shared.channel);
+			if (this.#pendingTeardowns.get(shared.channel) === shared) this.#pendingTeardowns.delete(shared.channel);
+			this.#teardownSubscription(shared);
+			shared.publicationHandlers.clear();
+			shared.subscribedHandlers.clear();
+			shared.unsubscribedHandlers.clear();
+			shared.errorHandlers.clear();
+		}
+		for (const { error, errorHandlers, closeHandlers } of notifications) {
+			for (const handler of errorHandlers) handler(error);
+			for (const handler of closeHandlers) handler();
+		}
+	}
 	#teardownSubscription(shared) {
 		const sub = shared.sub;
 		const client = shared.client;
@@ -283,7 +299,6 @@ var RealtimeClient = class {
 		try {
 			privateClient?.disconnect();
 		} catch {}
-		this.#connectionHandlers.clear();
 	}
 	#disconnectPrivate() {
 		const privateClient = this.#privateClient;
@@ -339,9 +354,13 @@ var RealtimeClient = class {
 		if (onSubscribed) shared.subscribedHandlers.add(onSubscribed);
 		if (onUnsubscribed) shared.unsubscribedHandlers.add(onUnsubscribed);
 		if (onError) shared.errorHandlers.add(onError);
-		if (this.#channelKind(channel) === "private" && this.#hasAuth()) {
-			if (shared.client?.state === "disconnected") shared.client.connect();
-			if (shared.sub?.state === "unsubscribed") shared.sub.subscribe();
+		if (this.#channelKind(channel) === "private") {
+			const reconnect = shared.client?.state === "disconnected";
+			const resubscribe = shared.sub?.state === "unsubscribed";
+			if ((reconnect || resubscribe) && this.#hasAuth()) {
+				if (reconnect) shared.client?.connect();
+				if (resubscribe) shared.sub?.subscribe();
+			}
 		}
 		let closed = false;
 		if (onSubscribed && shared.sub?.state === "subscribed") {

package/dist/realtime/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":["#config","#getAuthHeaders","#sharedSubs","#channelKind","#emitSubscriptionError","#publicClient","#connectionHandlers","#privateClient","#emitConnectionTokenError","#createPublicClient","#hasAuth","#createPrivateClient","#assertChannelAuth","#ensurePrivateClient","#ensurePublicClient","#attachSubscriptionNow","#attachSubscriptionWhenLoaded","#ensureClientForChannel","#subscriptionOpts","#pendingTeardowns","#attachSubscription","#callErrorHandler","#disconnectClientIfIdle","#hasChannelsForKind","#teardownSubscription","#getOrCreateSubscription","#callConsumerHandler","#disconnect","#disconnectPrivate"],"sources":["../../src/realtime/client.ts"],"sourcesContent":["import { fromBinary, type DescMessage, type MessageShape } from \"@bufbuild/protobuf\";\nimport type {\n    Centrifuge,\n    SubscriptionErrorContext,\n    PublicationContext,\n    Subscription,\n} from \"centrifuge/build/protobuf\";\nimport type * as CentrifugeModule from \"centrifuge/build/protobuf\";\nimport {\n    createSdkSubscriptionErrorContext,\n    fromCentrifugeSubscriptionError,\n    type SdkSubscriptionErrorContext,\n} from \"../shared/subscription-errors.js\";\nimport {\n    AuthenticationError,\n    errorFromHttpStatus,\n    InternalServerError,\n    PolyesterError,\n} from \"../shared/errors.js\";\nimport { makeFetch } from \"../shared/transports.js\";\nimport { decodeProtoFrame } from \"../utils/streams.js\";\nimport type { ConnectChannelParams, PolyesterRealtime, SubscribeHandlers } from \"./types.js\";\n\nconst realtimeFetch = makeFetch();\n\ntype CentrifugeCtor = typeof CentrifugeModule.Centrifuge;\ntype CentrifugeModuleLoader = () => Promise<typeof CentrifugeModule>;\n\nconst defaultCentrifugeModuleLoader: CentrifugeModuleLoader = () =>\n    import(\"centrifuge/build/protobuf\");\n\n// Centrifuge's protobuf build embeds the protobuf.js runtime (~300 KB minified).\n// Loading it lazily keeps it out of the eager module graph on both the server\n// (Cloudflare isolate cold start — SSR never opens a websocket) and the client\n// app shell; it is only fetched when the first subscription attaches.\nlet centrifugeCtorPromise: Promise<CentrifugeCtor> | null = null;\nlet loadedCentrifugeCtor: CentrifugeCtor | null = null;\nlet centrifugeModuleLoader = defaultCentrifugeModuleLoader;\nexport function __setRealtimeCentrifugeForTests(Centrifuge: CentrifugeCtor | null): void {\n    loadedCentrifugeCtor = Centrifuge;\n    centrifugeCtorPromise = Centrifuge ? Promise.resolve(Centrifuge) : null;\n}\n\n/** Replaces the lazy Centrifuge module loader for isolated transport-load tests. */\nexport function __setRealtimeCentrifugeLoaderForTests(loader: CentrifugeModuleLoader | null): void {\n    centrifugeModuleLoader = loader ?? defaultCentrifugeModuleLoader;\n    loadedCentrifugeCtor = null;\n    centrifugeCtorPromise = null;\n}\n\nfunction loadCentrifuge(): Promise<CentrifugeCtor> {\n    if (\n        centrifugeModuleLoader === defaultCentrifugeModuleLoader &&\n        (import.meta as { env?: { SSR?: boolean } }).env?.SSR\n    ) {\n        return Promise.reject(new Error(\"Realtime subscriptions are browser-only during SSR.\"));\n    }\n\n    if (!centrifugeCtorPromise) {\n        const loadAttempt = Promise.resolve().then(centrifugeModuleLoader);\n        const retryableLoad = loadAttempt.then(\n            (mod) => {\n                loadedCentrifugeCtor = mod.Centrifuge;\n                return mod.Centrifuge;\n            },\n            (error) => {\n                if (centrifugeCtorPromise === retryableLoad) centrifugeCtorPromise = null;\n                throw error;\n            },\n        );\n        centrifugeCtorPromise = retryableLoad;\n    }\n    return centrifugeCtorPromise;\n}\n\nexport interface RealtimeAuthRequest {\n    url: string | URL;\n    method: string;\n}\n\nexport interface RealtimeConfig {\n    wsUrl: string;\n    tokenEndpoint: string;\n    subscribeEndpoint: string;\n    getAuthHeaders?: (request: RealtimeAuthRequest) => Promise<HeadersInit> | HeadersInit;\n    hasAuth?: () => boolean;\n}\n\ntype ResolvedRealtimeConfig = Pick<\n    RealtimeConfig,\n    \"wsUrl\" | \"tokenEndpoint\" | \"subscribeEndpoint\"\n> & {\n    getAuthHeaders: (request: RealtimeAuthRequest) => Promise<HeadersInit> | HeadersInit;\n    hasAuth: () => boolean;\n};\n\nexport type { ConnectChannelParams, PolyesterRealtime, SubscribeHandlers } from \"./types.js\";\n\ntype ConnectionHandler = { onConnected?: () => void; onDisconnected?: () => void };\ntype PublicationHandler<T = unknown> = (data: T) => void;\ntype ErrorHandler = (ctx: SdkSubscriptionErrorContext) => void;\ntype RealtimeClientKind = \"public\" | \"private\";\n\ninterface SharedSubscription {\n    channel: string;\n    sub: Subscription | null;\n    client: Centrifuge | null;\n    attachmentEpoch: number;\n    consumers: number;\n    subscriptionEpoch: number;\n    publicationHandlers: Set<PublicationHandler>;\n    subscribedHandlers: Set<(epoch: number) => void>;\n    unsubscribedHandlers: Set<() => void>;\n    errorHandlers: Set<ErrorHandler>;\n}\n\n/**\n * Shared Centrifuge realtime client that multiplexes public and private protobuf subscriptions across SDK services.\n */\nexport class RealtimeClient implements PolyesterRealtime {\n    #publicClient: Centrifuge | null = null;\n    #privateClient: Centrifuge | null = null;\n    #connectionHandlers = new Set<ConnectionHandler>();\n    #sharedSubs = new Map<string, SharedSubscription>();\n    #pendingTeardowns = new Map<string, SharedSubscription>();\n    readonly #config: ResolvedRealtimeConfig;\n\n    constructor(config: RealtimeConfig) {\n        this.#config = {\n            wsUrl: config.wsUrl,\n            tokenEndpoint: config.tokenEndpoint,\n            subscribeEndpoint: config.subscribeEndpoint,\n            getAuthHeaders: config.getAuthHeaders ?? (() => ({})),\n            hasAuth: config.hasAuth ?? (() => false),\n        };\n    }\n\n    async #getAuthHeaders(request: RealtimeAuthRequest): Promise<HeadersInit> {\n        return this.#config.getAuthHeaders(request);\n    }\n\n    #emitSubscriptionError(shared: SharedSubscription, type: string, error: unknown): void {\n        const ctx = createSdkSubscriptionErrorContext(shared.channel, type, error);\n        for (const handler of shared.errorHandlers) {\n            handler(ctx);\n        }\n    }\n\n    #emitConnectionTokenError(error: unknown): void {\n        for (const shared of this.#sharedSubs.values()) {\n            if (this.#channelKind(shared.channel) === \"private\") {\n                this.#emitSubscriptionError(shared, \"connection_token\", error);\n            }\n        }\n    }\n\n    #subscriptionOpts(\n        Centrifuge: CentrifugeCtor,\n        shared: SharedSubscription,\n        attachmentEpoch: number,\n    ) {\n        if (this.#channelKind(shared.channel) !== \"private\") return undefined;\n        return {\n            getToken: async () => {\n                try {\n                    const url = new URL(this.#config.subscribeEndpoint);\n                    url.searchParams.set(\"channel\", shared.channel);\n                    const headers = await this.#getAuthHeaders({ url, method: \"GET\" });\n                    const res = await realtimeFetch(url, { headers });\n                    if (!res.ok) {\n                        throw errorFromHttpStatus(\n                            res.status,\n                            `Failed to fetch subscription token: ${res.status}`,\n                        );\n                    }\n                    const json = (await res.json()) as { token?: string };\n                    if (!json?.token) {\n                        throw new InternalServerError(\"Subscription token response had no token\");\n                    }\n                    return json.token;\n                } catch (error) {\n                    if (shared.attachmentEpoch === attachmentEpoch) {\n                        this.#emitSubscriptionError(shared, \"subscription_token\", error);\n                    }\n                    if (error instanceof PolyesterError && !error.retryable) {\n                        throw new Centrifuge.UnauthorizedError(error.message);\n                    }\n                    throw error;\n                }\n            },\n        };\n    }\n\n    #hasAuth(): boolean {\n        return this.#config.hasAuth();\n    }\n\n    #channelKind(channel: string): RealtimeClientKind {\n        return channel.startsWith(\"private:\") ? \"private\" : \"public\";\n    }\n\n    #createPublicClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        const client = new Centrifuge(this.#config.wsUrl);\n        this.#publicClient = client;\n\n        client.on(\"connected\", () => {\n            if (this.#publicClient !== client) return;\n            for (const h of this.#connectionHandlers) h.onConnected?.();\n        });\n        client.on(\"disconnected\", () => {\n            if (this.#publicClient !== client) return;\n            for (const h of this.#connectionHandlers) h.onDisconnected?.();\n        });\n\n        client.connect();\n        return client;\n    }\n\n    #createPrivateClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        let client: Centrifuge;\n        const opts = {\n            getToken: async () => {\n                try {\n                    const headers = await this.#getAuthHeaders({\n                        url: this.#config.tokenEndpoint,\n                        method: \"GET\",\n                    });\n                    const res = await realtimeFetch(this.#config.tokenEndpoint, {\n                        headers,\n                    });\n                    if (!res.ok) {\n                        throw errorFromHttpStatus(\n                            res.status,\n                            `Failed to fetch connection token: ${res.status}`,\n                        );\n                    }\n                    const json = (await res.json()) as { token?: string };\n                    if (!json?.token) {\n                        throw new InternalServerError(\"Connection token response had no token\");\n                    }\n                    return json.token;\n                } catch (error) {\n                    if (this.#privateClient === client) {\n                        this.#emitConnectionTokenError(error);\n                    }\n                    if (error instanceof PolyesterError && !error.retryable) {\n                        throw new Centrifuge.UnauthorizedError(error.message);\n                    }\n                    throw error;\n                }\n            },\n        };\n\n        client = new Centrifuge(this.#config.wsUrl, opts);\n        this.#privateClient = client;\n\n        client.on(\"connected\", () => {\n            if (this.#privateClient !== client) return;\n            for (const h of this.#connectionHandlers) h.onConnected?.();\n        });\n        client.on(\"disconnected\", () => {\n            if (this.#privateClient !== client) return;\n            for (const h of this.#connectionHandlers) h.onDisconnected?.();\n        });\n\n        client.connect();\n        return client;\n    }\n\n    #ensurePublicClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        return this.#publicClient ?? this.#createPublicClient(Centrifuge);\n    }\n\n    #ensurePrivateClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        if (!this.#hasAuth()) {\n            throw new AuthenticationError(\n                \"Cannot create authenticated realtime client without authentication\",\n            );\n        }\n        return this.#privateClient ?? this.#createPrivateClient(Centrifuge);\n    }\n\n    #assertChannelAuth(channel: string): void {\n        if (this.#channelKind(channel) === \"private\" && !this.#hasAuth()) {\n            throw new AuthenticationError(\n                `Cannot subscribe to private channel \"${channel}\" without authentication`,\n            );\n        }\n    }\n\n    #ensureClientForChannel(Centrifuge: CentrifugeCtor, channel: string): Centrifuge {\n        this.#assertChannelAuth(channel);\n        if (this.#channelKind(channel) === \"private\") {\n            return this.#ensurePrivateClient(Centrifuge);\n        }\n\n        return this.#ensurePublicClient(Centrifuge);\n    }\n\n    #attachSubscription(shared: SharedSubscription): void {\n        if (shared.sub) return;\n\n        // Auth failures must surface synchronously to subscribe() callers, as\n        // they did when centrifuge was imported statically.\n        this.#assertChannelAuth(shared.channel);\n\n        const attachmentEpoch = shared.attachmentEpoch + 1;\n        shared.attachmentEpoch = attachmentEpoch;\n\n        // Once the transport module is loaded, attachment stays fully\n        // synchronous — only the very first attach pays the dynamic import.\n        if (loadedCentrifugeCtor) {\n            this.#attachSubscriptionNow(loadedCentrifugeCtor, shared, attachmentEpoch);\n            return;\n        }\n        void this.#attachSubscriptionWhenLoaded(shared, attachmentEpoch);\n    }\n\n    async #attachSubscriptionWhenLoaded(\n        shared: SharedSubscription,\n        attachmentEpoch: number,\n    ): Promise<void> {\n        let Centrifuge: CentrifugeCtor;\n        try {\n            Centrifuge = await loadCentrifuge();\n        } catch (error) {\n            if (shared.attachmentEpoch !== attachmentEpoch) return;\n            if (this.#sharedSubs.get(shared.channel) === shared) {\n                this.#sharedSubs.delete(shared.channel);\n            }\n            this.#emitSubscriptionError(shared, \"transport_load\", error);\n            return;\n        }\n\n        // The subscription may have been torn down or re-attached while the\n        // transport module was loading.\n        if (shared.attachmentEpoch !== attachmentEpoch || shared.sub) return;\n        if (this.#sharedSubs.get(shared.channel) !== shared) return;\n\n        try {\n            this.#attachSubscriptionNow(Centrifuge, shared, attachmentEpoch);\n        } catch (error) {\n            this.#sharedSubs.delete(shared.channel);\n            this.#emitSubscriptionError(shared, \"auth\", error);\n        }\n    }\n\n    #attachSubscriptionNow(\n        Centrifuge: CentrifugeCtor,\n        shared: SharedSubscription,\n        attachmentEpoch: number,\n    ): void {\n        const client = this.#ensureClientForChannel(Centrifuge, shared.channel);\n\n        const sub = client.newSubscription(\n            shared.channel,\n            this.#subscriptionOpts(Centrifuge, shared, attachmentEpoch),\n        );\n        shared.sub = sub;\n        shared.client = client;\n\n        sub.on(\"publication\", (ctx: PublicationContext) => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            for (const handler of shared.publicationHandlers) handler(ctx.data);\n        });\n        sub.on(\"subscribed\", () => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            const subscriptionEpoch = ++shared.subscriptionEpoch;\n            for (const handler of shared.subscribedHandlers) handler(subscriptionEpoch);\n        });\n        sub.on(\"unsubscribed\", () => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            for (const handler of shared.unsubscribedHandlers) handler();\n        });\n        sub.on(\"error\", (ctx: SubscriptionErrorContext) => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            const sdkCtx = fromCentrifugeSubscriptionError(ctx);\n            for (const handler of shared.errorHandlers) handler(sdkCtx);\n        });\n\n        sub.subscribe();\n    }\n\n    #getOrCreateSubscription(channel: string): SharedSubscription {\n        const existing = this.#sharedSubs.get(channel);\n        if (existing) return existing;\n\n        const pending = this.#pendingTeardowns.get(channel);\n        if (pending) {\n            this.#pendingTeardowns.delete(channel);\n            this.#sharedSubs.set(channel, pending);\n            if (!pending.sub) {\n                this.#attachSubscription(pending);\n            } else if (pending.sub.state !== \"subscribed\") {\n                pending.sub.subscribe();\n            }\n            return pending;\n        }\n\n        const shared: SharedSubscription = {\n            channel,\n            sub: null,\n            client: null,\n            attachmentEpoch: 0,\n            consumers: 0,\n            subscriptionEpoch: 0,\n            publicationHandlers: new Set(),\n            subscribedHandlers: new Set(),\n            unsubscribedHandlers: new Set(),\n            errorHandlers: new Set(),\n        };\n\n        this.#sharedSubs.set(channel, shared);\n        try {\n            this.#attachSubscription(shared);\n        } catch (error) {\n            this.#sharedSubs.delete(channel);\n            throw error;\n        }\n        return shared;\n    }\n\n    #callErrorHandler(handler: ErrorHandler | undefined, ctx: SdkSubscriptionErrorContext): void {\n        if (!handler) return;\n\n        try {\n            handler(ctx);\n        } catch {\n            // Keep error reporting isolated from other subscription consumers.\n        }\n    }\n\n    #callConsumerHandler(\n        channel: string,\n        type: string,\n        handler: () => void,\n        onError?: ErrorHandler,\n    ): void {\n        try {\n            handler();\n        } catch (error) {\n            this.#callErrorHandler(\n                onError,\n                createSdkSubscriptionErrorContext(channel, type, error),\n            );\n        }\n    }\n\n    #teardownSubscription(shared: SharedSubscription): void {\n        const sub = shared.sub;\n        const client = shared.client;\n        const kind = this.#channelKind(shared.channel);\n        shared.sub = null;\n        shared.client = null;\n        shared.attachmentEpoch++;\n        if (!sub) return;\n\n        try {\n            if (sub.state !== \"unsubscribed\") {\n                sub.unsubscribe();\n            }\n        } catch {\n            // noop\n        }\n        try {\n            client?.removeSubscription?.(sub);\n        } catch {\n            // noop\n        }\n        this.#disconnectClientIfIdle(kind);\n    }\n\n    #hasChannelsForKind(kind: RealtimeClientKind): boolean {\n        for (const shared of this.#sharedSubs.values()) {\n            if (this.#channelKind(shared.channel) === kind) return true;\n        }\n        for (const shared of this.#pendingTeardowns.values()) {\n            if (this.#channelKind(shared.channel) === kind) return true;\n        }\n        return false;\n    }\n\n    #disconnectClientIfIdle(kind: RealtimeClientKind): void {\n        if (this.#hasChannelsForKind(kind)) return;\n\n        const client = kind === \"private\" ? this.#privateClient : this.#publicClient;\n        if (kind === \"private\") {\n            this.#privateClient = null;\n        } else {\n            this.#publicClient = null;\n        }\n\n        try {\n            client?.disconnect();\n        } catch {\n            // noop\n        }\n    }\n\n    #disconnect(): void {\n        const publicClient = this.#publicClient;\n        const privateClient = this.#privateClient;\n\n        this.#pendingTeardowns.clear();\n        this.#sharedSubs.clear();\n        this.#publicClient = null;\n        this.#privateClient = null;\n\n        try {\n            publicClient?.disconnect();\n        } catch {\n            // noop\n        }\n        try {\n            privateClient?.disconnect();\n        } catch {\n            // noop\n        }\n        this.#connectionHandlers.clear();\n    }\n\n    #disconnectPrivate(): void {\n        const privateClient = this.#privateClient;\n        this.#privateClient = null;\n\n        for (const [channel, shared] of this.#sharedSubs) {\n            if (this.#channelKind(channel) !== \"private\") continue;\n            this.#sharedSubs.delete(channel);\n            this.#teardownSubscription(shared);\n        }\n        for (const [channel, shared] of this.#pendingTeardowns) {\n            if (this.#channelKind(channel) !== \"private\") continue;\n            this.#pendingTeardowns.delete(channel);\n            this.#teardownSubscription(shared);\n        }\n\n        try {\n            privateClient?.disconnect();\n        } catch {\n            // noop\n        }\n    }\n\n    /**\n     * Subscribes to a realtime channel and returns an unsubscribe function. Missing\n     * authentication is reported to `onError`, or thrown synchronously when no error\n     * observer is provided. Non-retryable token failures stop automatic retries;\n     * calling subscribe again after correcting the failure restarts private realtime.\n     */\n    subscribe<T>(channel: string, handlers: SubscribeHandlers<T>): () => void {\n        let shared: SharedSubscription;\n        try {\n            shared = this.#getOrCreateSubscription(channel);\n        } catch (error) {\n            if (!(error instanceof AuthenticationError)) throw error;\n            if (!handlers.onError) throw error;\n\n            const ctx = createSdkSubscriptionErrorContext(channel, \"auth\", error);\n            queueMicrotask(() => this.#callErrorHandler(handlers.onError, ctx));\n            return () => {};\n        }\n        shared.consumers++;\n\n        const publicationHandler = handlers.onPublication;\n        const errorHandler = handlers.onError;\n        const subscribedHandler = handlers.onSubscribed;\n        const unsubscribedHandler = handlers.onUnsubscribed;\n\n        const onError: ErrorHandler | undefined = errorHandler\n            ? (ctx) => this.#callErrorHandler(errorHandler, ctx)\n            : undefined;\n        const onPub: PublicationHandler = (data) => {\n            this.#callConsumerHandler(\n                channel,\n                \"publication_handler\",\n                () => publicationHandler(data as T),\n                onError,\n            );\n        };\n        let lastSubscribedEpoch = -1;\n        const onSubscribed = subscribedHandler\n            ? (subscriptionEpoch: number) => {\n                  if (subscriptionEpoch <= lastSubscribedEpoch) return;\n                  lastSubscribedEpoch = subscriptionEpoch;\n                  this.#callConsumerHandler(\n                      channel,\n                      \"subscribed_handler\",\n                      subscribedHandler,\n                      onError,\n                  );\n              }\n            : undefined;\n        const onUnsubscribed = unsubscribedHandler\n            ? () =>\n                  this.#callConsumerHandler(\n                      channel,\n                      \"unsubscribed_handler\",\n                      unsubscribedHandler,\n                      onError,\n                  )\n            : undefined;\n\n        shared.publicationHandlers.add(onPub);\n\n        if (onSubscribed) shared.subscribedHandlers.add(onSubscribed);\n        if (onUnsubscribed) shared.unsubscribedHandlers.add(onUnsubscribed);\n        if (onError) shared.errorHandlers.add(onError);\n\n        // Only an explicit subscribe restarts terminal private token failures.\n        if (this.#channelKind(channel) === \"private\" && this.#hasAuth()) {\n            if (shared.client?.state === \"disconnected\") shared.client.connect();\n            if (shared.sub?.state === \"unsubscribed\") shared.sub.subscribe();\n        }\n\n        let closed = false;\n        if (onSubscribed && shared.sub?.state === \"subscribed\") {\n            const subscriptionEpoch = shared.subscriptionEpoch;\n            queueMicrotask(() => {\n                if (closed || shared.sub?.state !== \"subscribed\") return;\n                onSubscribed(subscriptionEpoch);\n            });\n        }\n\n        return () => {\n            if (closed) return;\n            closed = true;\n\n            shared.publicationHandlers.delete(onPub);\n            if (onSubscribed) shared.subscribedHandlers.delete(onSubscribed);\n            if (onUnsubscribed) shared.unsubscribedHandlers.delete(onUnsubscribed);\n            if (onError) shared.errorHandlers.delete(onError);\n\n            shared.consumers--;\n            if (shared.consumers <= 0) {\n                const currentShared = this.#sharedSubs.get(channel);\n                if (currentShared !== shared) return;\n\n                this.#sharedSubs.delete(channel);\n                this.#pendingTeardowns.set(channel, shared);\n\n                queueMicrotask(() => {\n                    if (this.#pendingTeardowns.get(channel) !== shared) return;\n                    this.#pendingTeardowns.delete(channel);\n\n                    this.#teardownSubscription(shared);\n\n                    if (this.#sharedSubs.size === 0 && this.#pendingTeardowns.size === 0) {\n                        this.#disconnect();\n                    }\n                });\n            }\n        };\n    }\n\n    /**\n     * Connects to a realtime channel with a custom message decoder.\n     */\n    connectChannel<T extends DescMessage>(params: ConnectChannelParams<T>): () => void {\n        return this.subscribe<Uint8Array>(params.channel, {\n            onPublication: (data) => {\n                let decoded: MessageShape<T>;\n                try {\n                    decoded = fromBinary(params.schema, data);\n                } catch (error) {\n                    this.#callErrorHandler(\n                        params.onError,\n                        createSdkSubscriptionErrorContext(params.channel, \"decode\", error),\n                    );\n                    return;\n                }\n                params.onPublication(decoded);\n            },\n            onSubscribed: params.onConnected,\n            onUnsubscribed: params.onDisconnected,\n            onError: params.onError,\n        });\n    }\n\n    /**\n     * Connects to a realtime channel that emits protobuf messages.\n     */\n    connectProtoChannel<T extends DescMessage>(params: ConnectChannelParams<T>): () => void {\n        return this.subscribe<Uint8Array | MessageShape<T>>(params.channel, {\n            onPublication: (data) => {\n                let msg: MessageShape<T> | null;\n                try {\n                    msg = decodeProtoFrame(params.schema, data);\n                } catch (error) {\n                    this.#callErrorHandler(\n                        params.onError,\n                        createSdkSubscriptionErrorContext(params.channel, \"decode\", error),\n                    );\n                    return;\n                }\n                if (!msg) {\n                    this.#callErrorHandler(\n                        params.onError,\n                        createSdkSubscriptionErrorContext(\n                            params.channel,\n                            \"decode\",\n                            \"Unable to decode protobuf frame\",\n                        ),\n                    );\n                    return;\n                }\n                params.onPublication(msg);\n            },\n            onSubscribed: params.onConnected,\n            onUnsubscribed: params.onDisconnected,\n            onError: params.onError,\n        });\n    }\n\n    /**\n     * Disconnects the realtime client from all active channels.\n     */\n    disconnect(): void {\n        this.#disconnect();\n    }\n\n    /**\n     * Disconnects authenticated realtime state without touching public channels.\n     */\n    disconnectPrivate(): void {\n        this.#disconnectPrivate();\n    }\n\n    get isConnected(): boolean {\n        return this.#publicClient !== null || this.#privateClient !== null;\n    }\n\n    get activeChannels(): number {\n        return this.#sharedSubs.size;\n    }\n\n    get totalConsumers(): number {\n        let total = 0;\n        for (const shared of this.#sharedSubs.values()) {\n            total += shared.consumers;\n        }\n        return total;\n    }\n}\n"],"mappings":";;;;;;AAuBA,MAAM,gBAAgB,UAAU;AAKhC,MAAM,sCACF,OAAO;AAMX,IAAI,wBAAwD;AAC5D,IAAI,uBAA8C;AAClD,IAAI,yBAAyB;AAa7B,SAAS,iBAA0C;CAC/C,IACI,2BAA2B,iCAC1B,YAA4C,KAAK,KAElD,OAAO,QAAQ,uBAAO,IAAI,MAAM,qDAAqD,CAAC;CAG1F,IAAI,CAAC,uBAAuB;EAExB,MAAM,gBADc,QAAQ,QAAQ,CAAC,CAAC,KAAK,sBACX,CAAC,CAAC,MAC7B,QAAQ;GACL,uBAAuB,IAAI;GAC3B,OAAO,IAAI;EACf,IACC,UAAU;GACP,IAAI,0BAA0B,eAAe,wBAAwB;GACrE,MAAM;EACV,CACJ;EACA,wBAAwB;CAC5B;CACA,OAAO;AACX;;;;AA8CA,IAAa,iBAAb,MAAyD;CACrD,gBAAmC;CACnC,iBAAoC;CACpC,sCAAsB,IAAI,IAAuB;CACjD,8BAAc,IAAI,IAAgC;CAClD,oCAAoB,IAAI,IAAgC;CACxD;CAEA,YAAY,QAAwB;EAChC,KAAKA,UAAU;GACX,OAAO,OAAO;GACd,eAAe,OAAO;GACtB,mBAAmB,OAAO;GAC1B,gBAAgB,OAAO,0BAA0B,CAAC;GAClD,SAAS,OAAO,kBAAkB;EACtC;CACJ;CAEA,MAAMC,gBAAgB,SAAoD;EACtE,OAAO,KAAKD,QAAQ,eAAe,OAAO;CAC9C;CAEA,uBAAuB,QAA4B,MAAc,OAAsB;EACnF,MAAM,MAAM,kCAAkC,OAAO,SAAS,MAAM,KAAK;EACzE,KAAK,MAAM,WAAW,OAAO,eACzB,QAAQ,GAAG;CAEnB;CAEA,0BAA0B,OAAsB;EAC5C,KAAK,MAAM,UAAU,KAAKE,YAAY,OAAO,GACzC,IAAI,KAAKC,aAAa,OAAO,OAAO,MAAM,WACtC,KAAKC,uBAAuB,QAAQ,oBAAoB,KAAK;CAGzE;CAEA,kBACI,YACA,QACA,iBACF;EACE,IAAI,KAAKD,aAAa,OAAO,OAAO,MAAM,WAAW,OAAO,KAAA;EAC5D,OAAO,EACH,UAAU,YAAY;GAClB,IAAI;IACA,MAAM,MAAM,IAAI,IAAI,KAAKH,QAAQ,iBAAiB;IAClD,IAAI,aAAa,IAAI,WAAW,OAAO,OAAO;IAC9C,MAAM,UAAU,MAAM,KAAKC,gBAAgB;KAAE;KAAK,QAAQ;IAAM,CAAC;IACjE,MAAM,MAAM,MAAM,cAAc,KAAK,EAAE,QAAQ,CAAC;IAChD,IAAI,CAAC,IAAI,IACL,MAAM,oBACF,IAAI,QACJ,uCAAuC,IAAI,QAC/C;IAEJ,MAAM,OAAQ,MAAM,IAAI,KAAK;IAC7B,IAAI,CAAC,MAAM,OACP,MAAM,IAAI,oBAAoB,0CAA0C;IAE5E,OAAO,KAAK;GAChB,SAAS,OAAO;IACZ,IAAI,OAAO,oBAAoB,iBAC3B,KAAKG,uBAAuB,QAAQ,sBAAsB,KAAK;IAEnE,IAAI,iBAAiB,kBAAkB,CAAC,MAAM,WAC1C,MAAM,IAAI,WAAW,kBAAkB,MAAM,OAAO;IAExD,MAAM;GACV;EACJ,EACJ;CACJ;CAEA,WAAoB;EAChB,OAAO,KAAKJ,QAAQ,QAAQ;CAChC;CAEA,aAAa,SAAqC;EAC9C,OAAO,QAAQ,WAAW,UAAU,IAAI,YAAY;CACxD;CAEA,oBAAoB,YAAwC;EACxD,MAAM,SAAS,IAAI,WAAW,KAAKA,QAAQ,KAAK;EAChD,KAAKK,gBAAgB;EAErB,OAAO,GAAG,mBAAmB;GACzB,IAAI,KAAKA,kBAAkB,QAAQ;GACnC,KAAK,MAAM,KAAK,KAAKC,qBAAqB,EAAE,cAAc;EAC9D,CAAC;EACD,OAAO,GAAG,sBAAsB;GAC5B,IAAI,KAAKD,kBAAkB,QAAQ;GACnC,KAAK,MAAM,KAAK,KAAKC,qBAAqB,EAAE,iBAAiB;EACjE,CAAC;EAED,OAAO,QAAQ;EACf,OAAO;CACX;CAEA,qBAAqB,YAAwC;EACzD,IAAI;EAkCJ,SAAS,IAAI,WAAW,KAAKN,QAAQ,OAAO,EAhCxC,UAAU,YAAY;GAClB,IAAI;IACA,MAAM,UAAU,MAAM,KAAKC,gBAAgB;KACvC,KAAK,KAAKD,QAAQ;KAClB,QAAQ;IACZ,CAAC;IACD,MAAM,MAAM,MAAM,cAAc,KAAKA,QAAQ,eAAe,EACxD,QACJ,CAAC;IACD,IAAI,CAAC,IAAI,IACL,MAAM,oBACF,IAAI,QACJ,qCAAqC,IAAI,QAC7C;IAEJ,MAAM,OAAQ,MAAM,IAAI,KAAK;IAC7B,IAAI,CAAC,MAAM,OACP,MAAM,IAAI,oBAAoB,wCAAwC;IAE1E,OAAO,KAAK;GAChB,SAAS,OAAO;IACZ,IAAI,KAAKO,mBAAmB,QACxB,KAAKC,0BAA0B,KAAK;IAExC,IAAI,iBAAiB,kBAAkB,CAAC,MAAM,WAC1C,MAAM,IAAI,WAAW,kBAAkB,MAAM,OAAO;IAExD,MAAM;GACV;EACJ,EAG2C,CAAC;EAChD,KAAKD,iBAAiB;EAEtB,OAAO,GAAG,mBAAmB;GACzB,IAAI,KAAKA,mBAAmB,QAAQ;GACpC,KAAK,MAAM,KAAK,KAAKD,qBAAqB,EAAE,cAAc;EAC9D,CAAC;EACD,OAAO,GAAG,sBAAsB;GAC5B,IAAI,KAAKC,mBAAmB,QAAQ;GACpC,KAAK,MAAM,KAAK,KAAKD,qBAAqB,EAAE,iBAAiB;EACjE,CAAC;EAED,OAAO,QAAQ;EACf,OAAO;CACX;CAEA,oBAAoB,YAAwC;EACxD,OAAO,KAAKD,iBAAiB,KAAKI,oBAAoB,UAAU;CACpE;CAEA,qBAAqB,YAAwC;EACzD,IAAI,CAAC,KAAKC,SAAS,GACf,MAAM,IAAI,oBACN,oEACJ;EAEJ,OAAO,KAAKH,kBAAkB,KAAKI,qBAAqB,UAAU;CACtE;CAEA,mBAAmB,SAAuB;EACtC,IAAI,KAAKR,aAAa,OAAO,MAAM,aAAa,CAAC,KAAKO,SAAS,GAC3D,MAAM,IAAI,oBACN,wCAAwC,QAAQ,yBACpD;CAER;CAEA,wBAAwB,YAA4B,SAA6B;EAC7E,KAAKE,mBAAmB,OAAO;EAC/B,IAAI,KAAKT,aAAa,OAAO,MAAM,WAC/B,OAAO,KAAKU,qBAAqB,UAAU;EAG/C,OAAO,KAAKC,oBAAoB,UAAU;CAC9C;CAEA,oBAAoB,QAAkC;EAClD,IAAI,OAAO,KAAK;EAIhB,KAAKF,mBAAmB,OAAO,OAAO;EAEtC,MAAM,kBAAkB,OAAO,kBAAkB;EACjD,OAAO,kBAAkB;EAIzB,IAAI,sBAAsB;GACtB,KAAKG,uBAAuB,sBAAsB,QAAQ,eAAe;GACzE;EACJ;EACA,KAAUC,8BAA8B,QAAQ,eAAe;CACnE;CAEA,MAAMA,8BACF,QACA,iBACa;EACb,IAAI;EACJ,IAAI;GACA,aAAa,MAAM,eAAe;EACtC,SAAS,OAAO;GACZ,IAAI,OAAO,oBAAoB,iBAAiB;GAChD,IAAI,KAAKd,YAAY,IAAI,OAAO,OAAO,MAAM,QACzC,KAAKA,YAAY,OAAO,OAAO,OAAO;GAE1C,KAAKE,uBAAuB,QAAQ,kBAAkB,KAAK;GAC3D;EACJ;EAIA,IAAI,OAAO,oBAAoB,mBAAmB,OAAO,KAAK;EAC9D,IAAI,KAAKF,YAAY,IAAI,OAAO,OAAO,MAAM,QAAQ;EAErD,IAAI;GACA,KAAKa,uBAAuB,YAAY,QAAQ,eAAe;EACnE,SAAS,OAAO;GACZ,KAAKb,YAAY,OAAO,OAAO,OAAO;GACtC,KAAKE,uBAAuB,QAAQ,QAAQ,KAAK;EACrD;CACJ;CAEA,uBACI,YACA,QACA,iBACI;EACJ,MAAM,SAAS,KAAKa,wBAAwB,YAAY,OAAO,OAAO;EAEtE,MAAM,MAAM,OAAO,gBACf,OAAO,SACP,KAAKC,kBAAkB,YAAY,QAAQ,eAAe,CAC9D;EACA,OAAO,MAAM;EACb,OAAO,SAAS;EAEhB,IAAI,GAAG,gBAAgB,QAA4B;GAC/C,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,KAAK,MAAM,WAAW,OAAO,qBAAqB,QAAQ,IAAI,IAAI;EACtE,CAAC;EACD,IAAI,GAAG,oBAAoB;GACvB,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,MAAM,oBAAoB,EAAE,OAAO;GACnC,KAAK,MAAM,WAAW,OAAO,oBAAoB,QAAQ,iBAAiB;EAC9E,CAAC;EACD,IAAI,GAAG,sBAAsB;GACzB,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,KAAK,MAAM,WAAW,OAAO,sBAAsB,QAAQ;EAC/D,CAAC;EACD,IAAI,GAAG,UAAU,QAAkC;GAC/C,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,MAAM,SAAS,gCAAgC,GAAG;GAClD,KAAK,MAAM,WAAW,OAAO,eAAe,QAAQ,MAAM;EAC9D,CAAC;EAED,IAAI,UAAU;CAClB;CAEA,yBAAyB,SAAqC;EAC1D,MAAM,WAAW,KAAKhB,YAAY,IAAI,OAAO;EAC7C,IAAI,UAAU,OAAO;EAErB,MAAM,UAAU,KAAKiB,kBAAkB,IAAI,OAAO;EAClD,IAAI,SAAS;GACT,KAAKA,kBAAkB,OAAO,OAAO;GACrC,KAAKjB,YAAY,IAAI,SAAS,OAAO;GACrC,IAAI,CAAC,QAAQ,KACT,KAAKkB,oBAAoB,OAAO;QAC7B,IAAI,QAAQ,IAAI,UAAU,cAC7B,QAAQ,IAAI,UAAU;GAE1B,OAAO;EACX;EAEA,MAAM,SAA6B;GAC/B;GACA,KAAK;GACL,QAAQ;GACR,iBAAiB;GACjB,WAAW;GACX,mBAAmB;GACnB,qCAAqB,IAAI,IAAI;GAC7B,oCAAoB,IAAI,IAAI;GAC5B,sCAAsB,IAAI,IAAI;GAC9B,+BAAe,IAAI,IAAI;EAC3B;EAEA,KAAKlB,YAAY,IAAI,SAAS,MAAM;EACpC,IAAI;GACA,KAAKkB,oBAAoB,MAAM;EACnC,SAAS,OAAO;GACZ,KAAKlB,YAAY,OAAO,OAAO;GAC/B,MAAM;EACV;EACA,OAAO;CACX;CAEA,kBAAkB,SAAmC,KAAwC;EACzF,IAAI,CAAC,SAAS;EAEd,IAAI;GACA,QAAQ,GAAG;EACf,QAAQ,CAER;CACJ;CAEA,qBACI,SACA,MACA,SACA,SACI;EACJ,IAAI;GACA,QAAQ;EACZ,SAAS,OAAO;GACZ,KAAKmB,kBACD,SACA,kCAAkC,SAAS,MAAM,KAAK,CAC1D;EACJ;CACJ;CAEA,sBAAsB,QAAkC;EACpD,MAAM,MAAM,OAAO;EACnB,MAAM,SAAS,OAAO;EACtB,MAAM,OAAO,KAAKlB,aAAa,OAAO,OAAO;EAC7C,OAAO,MAAM;EACb,OAAO,SAAS;EAChB,OAAO;EACP,IAAI,CAAC,KAAK;EAEV,IAAI;GACA,IAAI,IAAI,UAAU,gBACd,IAAI,YAAY;EAExB,QAAQ,CAER;EACA,IAAI;GACA,QAAQ,qBAAqB,GAAG;EACpC,QAAQ,CAER;EACA,KAAKmB,wBAAwB,IAAI;CACrC;CAEA,oBAAoB,MAAmC;EACnD,KAAK,MAAM,UAAU,KAAKpB,YAAY,OAAO,GACzC,IAAI,KAAKC,aAAa,OAAO,OAAO,MAAM,MAAM,OAAO;EAE3D,KAAK,MAAM,UAAU,KAAKgB,kBAAkB,OAAO,GAC/C,IAAI,KAAKhB,aAAa,OAAO,OAAO,MAAM,MAAM,OAAO;EAE3D,OAAO;CACX;CAEA,wBAAwB,MAAgC;EACpD,IAAI,KAAKoB,oBAAoB,IAAI,GAAG;EAEpC,MAAM,SAAS,SAAS,YAAY,KAAKhB,iBAAiB,KAAKF;EAC/D,IAAI,SAAS,WACT,KAAKE,iBAAiB;OAEtB,KAAKF,gBAAgB;EAGzB,IAAI;GACA,QAAQ,WAAW;EACvB,QAAQ,CAER;CACJ;CAEA,cAAoB;EAChB,MAAM,eAAe,KAAKA;EAC1B,MAAM,gBAAgB,KAAKE;EAE3B,KAAKY,kBAAkB,MAAM;EAC7B,KAAKjB,YAAY,MAAM;EACvB,KAAKG,gBAAgB;EACrB,KAAKE,iBAAiB;EAEtB,IAAI;GACA,cAAc,WAAW;EAC7B,QAAQ,CAER;EACA,IAAI;GACA,eAAe,WAAW;EAC9B,QAAQ,CAER;EACA,KAAKD,oBAAoB,MAAM;CACnC;CAEA,qBAA2B;EACvB,MAAM,gBAAgB,KAAKC;EAC3B,KAAKA,iBAAiB;EAEtB,KAAK,MAAM,CAAC,SAAS,WAAW,KAAKL,aAAa;GAC9C,IAAI,KAAKC,aAAa,OAAO,MAAM,WAAW;GAC9C,KAAKD,YAAY,OAAO,OAAO;GAC/B,KAAKsB,sBAAsB,MAAM;EACrC;EACA,KAAK,MAAM,CAAC,SAAS,WAAW,KAAKL,mBAAmB;GACpD,IAAI,KAAKhB,aAAa,OAAO,MAAM,WAAW;GAC9C,KAAKgB,kBAAkB,OAAO,OAAO;GACrC,KAAKK,sBAAsB,MAAM;EACrC;EAEA,IAAI;GACA,eAAe,WAAW;EAC9B,QAAQ,CAER;CACJ;;;;;;;CAQA,UAAa,SAAiB,UAA4C;EACtE,IAAI;EACJ,IAAI;GACA,SAAS,KAAKC,yBAAyB,OAAO;EAClD,SAAS,OAAO;GACZ,IAAI,EAAE,iBAAiB,sBAAsB,MAAM;GACnD,IAAI,CAAC,SAAS,SAAS,MAAM;GAE7B,MAAM,MAAM,kCAAkC,SAAS,QAAQ,KAAK;GACpE,qBAAqB,KAAKJ,kBAAkB,SAAS,SAAS,GAAG,CAAC;GAClE,aAAa,CAAC;EAClB;EACA,OAAO;EAEP,MAAM,qBAAqB,SAAS;EACpC,MAAM,eAAe,SAAS;EAC9B,MAAM,oBAAoB,SAAS;EACnC,MAAM,sBAAsB,SAAS;EAErC,MAAM,UAAoC,gBACnC,QAAQ,KAAKA,kBAAkB,cAAc,GAAG,IACjD,KAAA;EACN,MAAM,SAA6B,SAAS;GACxC,KAAKK,qBACD,SACA,6BACM,mBAAmB,IAAS,GAClC,OACJ;EACJ;EACA,IAAI,sBAAsB;EAC1B,MAAM,eAAe,qBACd,sBAA8B;GAC3B,IAAI,qBAAqB,qBAAqB;GAC9C,sBAAsB;GACtB,KAAKA,qBACD,SACA,sBACA,mBACA,OACJ;EACJ,IACA,KAAA;EACN,MAAM,iBAAiB,4BAEb,KAAKA,qBACD,SACA,wBACA,qBACA,OACJ,IACJ,KAAA;EAEN,OAAO,oBAAoB,IAAI,KAAK;EAEpC,IAAI,cAAc,OAAO,mBAAmB,IAAI,YAAY;EAC5D,IAAI,gBAAgB,OAAO,qBAAqB,IAAI,cAAc;EAClE,IAAI,SAAS,OAAO,cAAc,IAAI,OAAO;EAG7C,IAAI,KAAKvB,aAAa,OAAO,MAAM,aAAa,KAAKO,SAAS,GAAG;GAC7D,IAAI,OAAO,QAAQ,UAAU,gBAAgB,OAAO,OAAO,QAAQ;GACnE,IAAI,OAAO,KAAK,UAAU,gBAAgB,OAAO,IAAI,UAAU;EACnE;EAEA,IAAI,SAAS;EACb,IAAI,gBAAgB,OAAO,KAAK,UAAU,cAAc;GACpD,MAAM,oBAAoB,OAAO;GACjC,qBAAqB;IACjB,IAAI,UAAU,OAAO,KAAK,UAAU,cAAc;IAClD,aAAa,iBAAiB;GAClC,CAAC;EACL;EAEA,aAAa;GACT,IAAI,QAAQ;GACZ,SAAS;GAET,OAAO,oBAAoB,OAAO,KAAK;GACvC,IAAI,cAAc,OAAO,mBAAmB,OAAO,YAAY;GAC/D,IAAI,gBAAgB,OAAO,qBAAqB,OAAO,cAAc;GACrE,IAAI,SAAS,OAAO,cAAc,OAAO,OAAO;GAEhD,OAAO;GACP,IAAI,OAAO,aAAa,GAAG;IAEvB,IADsB,KAAKR,YAAY,IAAI,OAC3B,MAAM,QAAQ;IAE9B,KAAKA,YAAY,OAAO,OAAO;IAC/B,KAAKiB,kBAAkB,IAAI,SAAS,MAAM;IAE1C,qBAAqB;KACjB,IAAI,KAAKA,kBAAkB,IAAI,OAAO,MAAM,QAAQ;KACpD,KAAKA,kBAAkB,OAAO,OAAO;KAErC,KAAKK,sBAAsB,MAAM;KAEjC,IAAI,KAAKtB,YAAY,SAAS,KAAK,KAAKiB,kBAAkB,SAAS,GAC/D,KAAKQ,YAAY;IAEzB,CAAC;GACL;EACJ;CACJ;;;;CAKA,eAAsC,QAA6C;EAC/E,OAAO,KAAK,UAAsB,OAAO,SAAS;GAC9C,gBAAgB,SAAS;IACrB,IAAI;IACJ,IAAI;KACA,UAAU,WAAW,OAAO,QAAQ,IAAI;IAC5C,SAAS,OAAO;KACZ,KAAKN,kBACD,OAAO,SACP,kCAAkC,OAAO,SAAS,UAAU,KAAK,CACrE;KACA;IACJ;IACA,OAAO,cAAc,OAAO;GAChC;GACA,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,SAAS,OAAO;EACpB,CAAC;CACL;;;;CAKA,oBAA2C,QAA6C;EACpF,OAAO,KAAK,UAAwC,OAAO,SAAS;GAChE,gBAAgB,SAAS;IACrB,IAAI;IACJ,IAAI;KACA,MAAM,iBAAiB,OAAO,QAAQ,IAAI;IAC9C,SAAS,OAAO;KACZ,KAAKA,kBACD,OAAO,SACP,kCAAkC,OAAO,SAAS,UAAU,KAAK,CACrE;KACA;IACJ;IACA,IAAI,CAAC,KAAK;KACN,KAAKA,kBACD,OAAO,SACP,kCACI,OAAO,SACP,UACA,iCACJ,CACJ;KACA;IACJ;IACA,OAAO,cAAc,GAAG;GAC5B;GACA,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,SAAS,OAAO;EACpB,CAAC;CACL;;;;CAKA,aAAmB;EACf,KAAKM,YAAY;CACrB;;;;CAKA,oBAA0B;EACtB,KAAKC,mBAAmB;CAC5B;CAEA,IAAI,cAAuB;EACvB,OAAO,KAAKvB,kBAAkB,QAAQ,KAAKE,mBAAmB;CAClE;CAEA,IAAI,iBAAyB;EACzB,OAAO,KAAKL,YAAY;CAC5B;CAEA,IAAI,iBAAyB;EACzB,IAAI,QAAQ;EACZ,KAAK,MAAM,UAAU,KAAKA,YAAY,OAAO,GACzC,SAAS,OAAO;EAEpB,OAAO;CACX;AACJ"}
+{"version":3,"file":"client.js","names":["#config","#getAuthHeaders","#sharedSubs","#channelKind","#emitSubscriptionError","#publicClient","#terminateSubscriptions","#pendingTeardowns","#privateClient","#emitConnectionTokenError","#createPublicClient","#hasAuth","#createPrivateClient","#ensurePublicClient","#assertChannelAuth","#attachSubscriptionNow","#attachSubscriptionWhenLoaded","#ensureClientForChannel","#subscriptionOpts","#attachSubscription","#callErrorHandler","#teardownSubscription","#disconnectClientIfIdle","#hasChannelsForKind","#getOrCreateSubscription","#callConsumerHandler","#disconnect","#disconnectPrivate"],"sources":["../../src/realtime/client.ts"],"sourcesContent":["import { fromBinary, type DescMessage, type MessageShape } from \"@bufbuild/protobuf\";\nimport type {\n    Centrifuge,\n    SubscriptionErrorContext,\n    PublicationContext,\n    Subscription,\n} from \"centrifuge/build/protobuf\";\nimport type * as CentrifugeModule from \"centrifuge/build/protobuf\";\nimport {\n    createSdkSubscriptionErrorContext,\n    fromCentrifugeSubscriptionError,\n    type SdkSubscriptionErrorContext,\n} from \"../shared/subscription-errors.js\";\nimport {\n    AuthenticationError,\n    errorFromHttpStatus,\n    InternalServerError,\n    PolyesterError,\n} from \"../shared/errors.js\";\nimport { makeFetch } from \"../shared/transports.js\";\nimport { decodeProtoFrame } from \"../utils/streams.js\";\nimport type { ConnectChannelParams, PolyesterRealtime, SubscribeHandlers } from \"./types.js\";\n\nconst realtimeFetch = makeFetch();\n\ntype CentrifugeCtor = typeof CentrifugeModule.Centrifuge;\ntype CentrifugeModuleLoader = () => Promise<typeof CentrifugeModule>;\n\nconst defaultCentrifugeModuleLoader: CentrifugeModuleLoader = () =>\n    import(\"centrifuge/build/protobuf\");\n\n// Centrifuge's protobuf build embeds the protobuf.js runtime (~300 KB minified).\n// Loading it lazily keeps it out of the eager module graph on both the server\n// (Cloudflare isolate cold start — SSR never opens a websocket) and the client\n// app shell; it is only fetched when the first subscription attaches.\nlet centrifugeCtorPromise: Promise<CentrifugeCtor> | null = null;\nlet loadedCentrifugeCtor: CentrifugeCtor | null = null;\nlet centrifugeModuleLoader = defaultCentrifugeModuleLoader;\nexport function __setRealtimeCentrifugeForTests(Centrifuge: CentrifugeCtor | null): void {\n    loadedCentrifugeCtor = Centrifuge;\n    centrifugeCtorPromise = Centrifuge ? Promise.resolve(Centrifuge) : null;\n}\n\n/** Replaces the lazy Centrifuge module loader for isolated transport-load tests. */\nexport function __setRealtimeCentrifugeLoaderForTests(loader: CentrifugeModuleLoader | null): void {\n    centrifugeModuleLoader = loader ?? defaultCentrifugeModuleLoader;\n    loadedCentrifugeCtor = null;\n    centrifugeCtorPromise = null;\n}\n\nfunction loadCentrifuge(): Promise<CentrifugeCtor> {\n    if (\n        centrifugeModuleLoader === defaultCentrifugeModuleLoader &&\n        (import.meta as { env?: { SSR?: boolean } }).env?.SSR\n    ) {\n        return Promise.reject(new Error(\"Realtime subscriptions are browser-only during SSR.\"));\n    }\n\n    if (!centrifugeCtorPromise) {\n        const loadAttempt = Promise.resolve().then(centrifugeModuleLoader);\n        const retryableLoad = loadAttempt.then(\n            (mod) => {\n                loadedCentrifugeCtor = mod.Centrifuge;\n                return mod.Centrifuge;\n            },\n            (error) => {\n                if (centrifugeCtorPromise === retryableLoad) centrifugeCtorPromise = null;\n                throw error;\n            },\n        );\n        centrifugeCtorPromise = retryableLoad;\n    }\n    return centrifugeCtorPromise;\n}\n\nexport interface RealtimeAuthRequest {\n    url: string | URL;\n    method: string;\n}\n\nexport interface RealtimeConfig {\n    wsUrl: string;\n    tokenEndpoint: string;\n    subscribeEndpoint: string;\n    getAuthHeaders?: (request: RealtimeAuthRequest) => Promise<HeadersInit> | HeadersInit;\n    hasAuth?: () => boolean;\n}\n\ntype ResolvedRealtimeConfig = Pick<\n    RealtimeConfig,\n    \"wsUrl\" | \"tokenEndpoint\" | \"subscribeEndpoint\"\n> & {\n    getAuthHeaders: (request: RealtimeAuthRequest) => Promise<HeadersInit> | HeadersInit;\n    hasAuth: () => boolean;\n};\n\nexport type { ConnectChannelParams, PolyesterRealtime, SubscribeHandlers } from \"./types.js\";\n\ntype PublicationHandler<T = unknown> = (data: T) => void;\ntype ErrorHandler = (ctx: SdkSubscriptionErrorContext) => void;\ntype RealtimeClientKind = \"public\" | \"private\";\n\ninterface SharedSubscription {\n    channel: string;\n    sub: Subscription | null;\n    client: Centrifuge | null;\n    attachmentEpoch: number;\n    consumers: number;\n    subscriptionEpoch: number;\n    publicationHandlers: Set<PublicationHandler>;\n    subscribedHandlers: Set<(epoch: number) => void>;\n    unsubscribedHandlers: Set<() => void>;\n    errorHandlers: Set<ErrorHandler>;\n}\n\n/**\n * Shared Centrifuge realtime client that multiplexes public and private protobuf subscriptions across SDK services.\n */\nexport class RealtimeClient implements PolyesterRealtime {\n    #publicClient: Centrifuge | null = null;\n    #privateClient: Centrifuge | null = null;\n    #sharedSubs = new Map<string, SharedSubscription>();\n    #pendingTeardowns = new Map<string, SharedSubscription>();\n    readonly #config: ResolvedRealtimeConfig;\n\n    constructor(config: RealtimeConfig) {\n        this.#config = {\n            wsUrl: config.wsUrl,\n            tokenEndpoint: config.tokenEndpoint,\n            subscribeEndpoint: config.subscribeEndpoint,\n            getAuthHeaders: config.getAuthHeaders ?? (() => ({})),\n            hasAuth: config.hasAuth ?? (() => false),\n        };\n    }\n\n    async #getAuthHeaders(request: RealtimeAuthRequest): Promise<HeadersInit> {\n        return this.#config.getAuthHeaders(request);\n    }\n\n    #emitSubscriptionError(shared: SharedSubscription, type: string, error: unknown): void {\n        const ctx = createSdkSubscriptionErrorContext(shared.channel, type, error);\n        for (const handler of shared.errorHandlers) {\n            handler(ctx);\n        }\n    }\n\n    #emitConnectionTokenError(error: unknown): void {\n        for (const shared of this.#sharedSubs.values()) {\n            if (this.#channelKind(shared.channel) === \"private\") {\n                this.#emitSubscriptionError(shared, \"connection_token\", error);\n            }\n        }\n    }\n\n    #subscriptionOpts(\n        Centrifuge: CentrifugeCtor,\n        shared: SharedSubscription,\n        attachmentEpoch: number,\n    ) {\n        if (this.#channelKind(shared.channel) !== \"private\") return undefined;\n        return {\n            getToken: async () => {\n                try {\n                    const url = new URL(this.#config.subscribeEndpoint);\n                    url.searchParams.set(\"channel\", shared.channel);\n                    const headers = await this.#getAuthHeaders({ url, method: \"GET\" });\n                    const res = await realtimeFetch(url, { headers });\n                    if (!res.ok) {\n                        throw errorFromHttpStatus(\n                            res.status,\n                            `Failed to fetch subscription token: ${res.status}`,\n                        );\n                    }\n                    const json = (await res.json()) as { token?: string };\n                    if (!json?.token) {\n                        throw new InternalServerError(\"Subscription token response had no token\");\n                    }\n                    return json.token;\n                } catch (error) {\n                    if (shared.attachmentEpoch === attachmentEpoch) {\n                        this.#emitSubscriptionError(shared, \"subscription_token\", error);\n                    }\n                    if (error instanceof PolyesterError && !error.retryable) {\n                        throw new Centrifuge.UnauthorizedError(error.message);\n                    }\n                    throw error;\n                }\n            },\n        };\n    }\n\n    #hasAuth(): boolean {\n        return this.#config.hasAuth();\n    }\n\n    #channelKind(channel: string): RealtimeClientKind {\n        return channel.startsWith(\"private:\") ? \"private\" : \"public\";\n    }\n\n    #createPublicClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        const client = new Centrifuge(this.#config.wsUrl);\n        this.#publicClient = client;\n\n        client.on(\"disconnected\", (ctx) => {\n            // Codes 0 (disconnectCalled) and 1 (unauthorized) are handled elsewhere;\n            // every other disconnected event is terminal.\n            if (this.#publicClient !== client || ctx.code <= 1) return;\n            this.#publicClient = null;\n            this.#terminateSubscriptions(\n                [...this.#sharedSubs.values(), ...this.#pendingTeardowns.values()].filter(\n                    (shared) => shared.client === client,\n                ),\n                \"disconnected\",\n                ctx,\n            );\n        });\n\n        client.connect();\n        return client;\n    }\n\n    #createPrivateClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        let client: Centrifuge;\n        const opts = {\n            getToken: async () => {\n                try {\n                    const headers = await this.#getAuthHeaders({\n                        url: this.#config.tokenEndpoint,\n                        method: \"GET\",\n                    });\n                    const res = await realtimeFetch(this.#config.tokenEndpoint, {\n                        headers,\n                    });\n                    if (!res.ok) {\n                        throw errorFromHttpStatus(\n                            res.status,\n                            `Failed to fetch connection token: ${res.status}`,\n                        );\n                    }\n                    const json = (await res.json()) as { token?: string };\n                    if (!json?.token) {\n                        throw new InternalServerError(\"Connection token response had no token\");\n                    }\n                    return json.token;\n                } catch (error) {\n                    if (this.#privateClient === client) {\n                        this.#emitConnectionTokenError(error);\n                    }\n                    if (error instanceof PolyesterError && !error.retryable) {\n                        throw new Centrifuge.UnauthorizedError(error.message);\n                    }\n                    throw error;\n                }\n            },\n        };\n\n        client = new Centrifuge(this.#config.wsUrl, opts);\n        this.#privateClient = client;\n\n        client.on(\"disconnected\", (ctx) => {\n            // Codes 0 (disconnectCalled) and 1 (unauthorized) are handled elsewhere;\n            // every other disconnected event is terminal.\n            if (this.#privateClient !== client || ctx.code <= 1) return;\n            this.#privateClient = null;\n            this.#terminateSubscriptions(\n                [...this.#sharedSubs.values(), ...this.#pendingTeardowns.values()].filter(\n                    (shared) => shared.client === client,\n                ),\n                \"disconnected\",\n                ctx,\n            );\n        });\n\n        client.connect();\n        return client;\n    }\n\n    #ensurePublicClient(Centrifuge: CentrifugeCtor): Centrifuge {\n        return this.#publicClient ?? this.#createPublicClient(Centrifuge);\n    }\n\n    #assertChannelAuth(channel: string): void {\n        if (this.#channelKind(channel) === \"private\" && !this.#hasAuth()) {\n            throw new AuthenticationError(\n                `Cannot subscribe to private channel \"${channel}\" without authentication`,\n            );\n        }\n    }\n\n    #ensureClientForChannel(Centrifuge: CentrifugeCtor, channel: string): Centrifuge {\n        if (this.#channelKind(channel) === \"private\") {\n            return this.#privateClient ?? this.#createPrivateClient(Centrifuge);\n        }\n\n        return this.#ensurePublicClient(Centrifuge);\n    }\n\n    #attachSubscription(shared: SharedSubscription): void {\n        if (shared.sub) return;\n\n        // Auth failures must surface synchronously to subscribe() callers, as\n        // they did when centrifuge was imported statically.\n        this.#assertChannelAuth(shared.channel);\n\n        const attachmentEpoch = shared.attachmentEpoch + 1;\n        shared.attachmentEpoch = attachmentEpoch;\n\n        // Once the transport module is loaded, attachment stays fully\n        // synchronous — only the very first attach pays the dynamic import.\n        if (loadedCentrifugeCtor) {\n            this.#attachSubscriptionNow(loadedCentrifugeCtor, shared, attachmentEpoch);\n            return;\n        }\n        void this.#attachSubscriptionWhenLoaded(shared, attachmentEpoch);\n    }\n\n    async #attachSubscriptionWhenLoaded(\n        shared: SharedSubscription,\n        attachmentEpoch: number,\n    ): Promise<void> {\n        let Centrifuge: CentrifugeCtor;\n        try {\n            Centrifuge = await loadCentrifuge();\n        } catch (error) {\n            if (shared.attachmentEpoch !== attachmentEpoch) return;\n            if (this.#sharedSubs.get(shared.channel) === shared) {\n                this.#sharedSubs.delete(shared.channel);\n            }\n            this.#emitSubscriptionError(shared, \"transport_load\", error);\n            return;\n        }\n\n        // The subscription may have been torn down or re-attached while the\n        // transport module was loading.\n        if (shared.attachmentEpoch !== attachmentEpoch || shared.sub) return;\n        if (this.#sharedSubs.get(shared.channel) !== shared) return;\n\n        try {\n            this.#assertChannelAuth(shared.channel);\n            this.#attachSubscriptionNow(Centrifuge, shared, attachmentEpoch);\n        } catch (error) {\n            this.#sharedSubs.delete(shared.channel);\n            this.#emitSubscriptionError(shared, \"auth\", error);\n        }\n    }\n\n    #attachSubscriptionNow(\n        Centrifuge: CentrifugeCtor,\n        shared: SharedSubscription,\n        attachmentEpoch: number,\n    ): void {\n        const client = this.#ensureClientForChannel(Centrifuge, shared.channel);\n\n        const sub = client.newSubscription(\n            shared.channel,\n            this.#subscriptionOpts(Centrifuge, shared, attachmentEpoch),\n        );\n        shared.sub = sub;\n        shared.client = client;\n\n        sub.on(\"publication\", (ctx: PublicationContext) => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            for (const handler of shared.publicationHandlers) handler(ctx.data);\n        });\n        sub.on(\"subscribed\", () => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            const subscriptionEpoch = ++shared.subscriptionEpoch;\n            for (const handler of shared.subscribedHandlers) handler(subscriptionEpoch);\n        });\n        sub.on(\"unsubscribed\", (ctx) => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            if (ctx.code >= 2000 && ctx.code < 2500) {\n                this.#terminateSubscriptions([shared], \"unsubscribed\", ctx);\n                return;\n            }\n            for (const handler of shared.unsubscribedHandlers) handler();\n        });\n        sub.on(\"error\", (ctx: SubscriptionErrorContext) => {\n            if (shared.sub !== sub || shared.attachmentEpoch !== attachmentEpoch) return;\n            const sdkCtx = fromCentrifugeSubscriptionError(ctx);\n            for (const handler of shared.errorHandlers) handler(sdkCtx);\n        });\n\n        sub.subscribe();\n    }\n\n    #getOrCreateSubscription(channel: string): SharedSubscription {\n        const existing = this.#sharedSubs.get(channel);\n        if (existing) return existing;\n\n        const pending = this.#pendingTeardowns.get(channel);\n        if (pending) {\n            this.#pendingTeardowns.delete(channel);\n            this.#sharedSubs.set(channel, pending);\n            if (!pending.sub) {\n                this.#attachSubscription(pending);\n            } else if (pending.sub.state !== \"subscribed\") {\n                pending.sub.subscribe();\n            }\n            return pending;\n        }\n\n        const shared: SharedSubscription = {\n            channel,\n            sub: null,\n            client: null,\n            attachmentEpoch: 0,\n            consumers: 0,\n            subscriptionEpoch: 0,\n            publicationHandlers: new Set(),\n            subscribedHandlers: new Set(),\n            unsubscribedHandlers: new Set(),\n            errorHandlers: new Set(),\n        };\n\n        this.#sharedSubs.set(channel, shared);\n        try {\n            this.#attachSubscription(shared);\n        } catch (error) {\n            this.#sharedSubs.delete(channel);\n            throw error;\n        }\n        return shared;\n    }\n\n    #callErrorHandler(handler: ErrorHandler | undefined, ctx: SdkSubscriptionErrorContext): void {\n        if (!handler) return;\n\n        try {\n            handler(ctx);\n        } catch {\n            // Keep error reporting isolated from other subscription consumers.\n        }\n    }\n\n    #callConsumerHandler(\n        channel: string,\n        type: string,\n        handler: () => void,\n        onError?: ErrorHandler,\n    ): void {\n        try {\n            handler();\n        } catch (error) {\n            this.#callErrorHandler(\n                onError,\n                createSdkSubscriptionErrorContext(channel, type, error),\n            );\n        }\n    }\n\n    #terminateSubscriptions(\n        subscriptions: SharedSubscription[],\n        type: \"disconnected\" | \"unsubscribed\",\n        ctx: { code: number; reason: string },\n    ): void {\n        const notifications = subscriptions.map((shared) => ({\n            error: createSdkSubscriptionErrorContext(shared.channel, type, {\n                code: ctx.code,\n                message: ctx.reason,\n            }),\n            errorHandlers: [...shared.errorHandlers],\n            closeHandlers: [...shared.unsubscribedHandlers],\n        }));\n\n        // Finish cleanup for every affected channel before callbacks can resubscribe.\n        for (const shared of subscriptions) {\n            if (this.#sharedSubs.get(shared.channel) === shared) {\n                this.#sharedSubs.delete(shared.channel);\n            }\n            if (this.#pendingTeardowns.get(shared.channel) === shared) {\n                this.#pendingTeardowns.delete(shared.channel);\n            }\n            this.#teardownSubscription(shared);\n            shared.publicationHandlers.clear();\n            shared.subscribedHandlers.clear();\n            shared.unsubscribedHandlers.clear();\n            shared.errorHandlers.clear();\n        }\n\n        for (const { error, errorHandlers, closeHandlers } of notifications) {\n            for (const handler of errorHandlers) handler(error);\n            for (const handler of closeHandlers) handler();\n        }\n    }\n\n    #teardownSubscription(shared: SharedSubscription): void {\n        const sub = shared.sub;\n        const client = shared.client;\n        const kind = this.#channelKind(shared.channel);\n        shared.sub = null;\n        shared.client = null;\n        shared.attachmentEpoch++;\n        if (!sub) return;\n\n        try {\n            if (sub.state !== \"unsubscribed\") {\n                sub.unsubscribe();\n            }\n        } catch {\n            // noop\n        }\n        try {\n            client?.removeSubscription?.(sub);\n        } catch {\n            // noop\n        }\n        this.#disconnectClientIfIdle(kind);\n    }\n\n    #hasChannelsForKind(kind: RealtimeClientKind): boolean {\n        for (const shared of this.#sharedSubs.values()) {\n            if (this.#channelKind(shared.channel) === kind) return true;\n        }\n        for (const shared of this.#pendingTeardowns.values()) {\n            if (this.#channelKind(shared.channel) === kind) return true;\n        }\n        return false;\n    }\n\n    #disconnectClientIfIdle(kind: RealtimeClientKind): void {\n        if (this.#hasChannelsForKind(kind)) return;\n\n        const client = kind === \"private\" ? this.#privateClient : this.#publicClient;\n        if (kind === \"private\") {\n            this.#privateClient = null;\n        } else {\n            this.#publicClient = null;\n        }\n\n        try {\n            client?.disconnect();\n        } catch {\n            // noop\n        }\n    }\n\n    #disconnect(): void {\n        const publicClient = this.#publicClient;\n        const privateClient = this.#privateClient;\n\n        this.#pendingTeardowns.clear();\n        this.#sharedSubs.clear();\n        this.#publicClient = null;\n        this.#privateClient = null;\n\n        try {\n            publicClient?.disconnect();\n        } catch {\n            // noop\n        }\n        try {\n            privateClient?.disconnect();\n        } catch {\n            // noop\n        }\n    }\n\n    #disconnectPrivate(): void {\n        const privateClient = this.#privateClient;\n        this.#privateClient = null;\n\n        for (const [channel, shared] of this.#sharedSubs) {\n            if (this.#channelKind(channel) !== \"private\") continue;\n            this.#sharedSubs.delete(channel);\n            this.#teardownSubscription(shared);\n        }\n        for (const [channel, shared] of this.#pendingTeardowns) {\n            if (this.#channelKind(channel) !== \"private\") continue;\n            this.#pendingTeardowns.delete(channel);\n            this.#teardownSubscription(shared);\n        }\n\n        try {\n            privateClient?.disconnect();\n        } catch {\n            // noop\n        }\n    }\n\n    /**\n     * Subscribes to a realtime channel and returns an unsubscribe function. Missing\n     * authentication is reported to `onError`, or thrown synchronously when no error\n     * observer is provided. Non-retryable token failures stop automatic retries;\n     * calling subscribe again after correcting the failure restarts private realtime.\n     */\n    subscribe<T>(channel: string, handlers: SubscribeHandlers<T>): () => void {\n        let shared: SharedSubscription;\n        try {\n            shared = this.#getOrCreateSubscription(channel);\n        } catch (error) {\n            if (!(error instanceof AuthenticationError)) throw error;\n            if (!handlers.onError) throw error;\n\n            const ctx = createSdkSubscriptionErrorContext(channel, \"auth\", error);\n            queueMicrotask(() => this.#callErrorHandler(handlers.onError, ctx));\n            return () => {};\n        }\n        shared.consumers++;\n\n        const publicationHandler = handlers.onPublication;\n        const errorHandler = handlers.onError;\n        const subscribedHandler = handlers.onSubscribed;\n        const unsubscribedHandler = handlers.onUnsubscribed;\n\n        const onError: ErrorHandler | undefined = errorHandler\n            ? (ctx) => this.#callErrorHandler(errorHandler, ctx)\n            : undefined;\n        const onPub: PublicationHandler = (data) => {\n            this.#callConsumerHandler(\n                channel,\n                \"publication_handler\",\n                () => publicationHandler(data as T),\n                onError,\n            );\n        };\n        let lastSubscribedEpoch = -1;\n        const onSubscribed = subscribedHandler\n            ? (subscriptionEpoch: number) => {\n                  if (subscriptionEpoch <= lastSubscribedEpoch) return;\n                  lastSubscribedEpoch = subscriptionEpoch;\n                  this.#callConsumerHandler(\n                      channel,\n                      \"subscribed_handler\",\n                      subscribedHandler,\n                      onError,\n                  );\n              }\n            : undefined;\n        const onUnsubscribed = unsubscribedHandler\n            ? () =>\n                  this.#callConsumerHandler(\n                      channel,\n                      \"unsubscribed_handler\",\n                      unsubscribedHandler,\n                      onError,\n                  )\n            : undefined;\n\n        shared.publicationHandlers.add(onPub);\n\n        if (onSubscribed) shared.subscribedHandlers.add(onSubscribed);\n        if (onUnsubscribed) shared.unsubscribedHandlers.add(onUnsubscribed);\n        if (onError) shared.errorHandlers.add(onError);\n\n        // Only an explicit subscribe restarts terminal private token failures.\n        if (this.#channelKind(channel) === \"private\") {\n            const reconnect = shared.client?.state === \"disconnected\";\n            const resubscribe = shared.sub?.state === \"unsubscribed\";\n            // hasAuth() reads the token provider, so only call it when a restart is possible.\n            if ((reconnect || resubscribe) && this.#hasAuth()) {\n                if (reconnect) shared.client?.connect();\n                if (resubscribe) shared.sub?.subscribe();\n            }\n        }\n\n        let closed = false;\n        if (onSubscribed && shared.sub?.state === \"subscribed\") {\n            const subscriptionEpoch = shared.subscriptionEpoch;\n            queueMicrotask(() => {\n                if (closed || shared.sub?.state !== \"subscribed\") return;\n                onSubscribed(subscriptionEpoch);\n            });\n        }\n\n        return () => {\n            if (closed) return;\n            closed = true;\n\n            shared.publicationHandlers.delete(onPub);\n            if (onSubscribed) shared.subscribedHandlers.delete(onSubscribed);\n            if (onUnsubscribed) shared.unsubscribedHandlers.delete(onUnsubscribed);\n            if (onError) shared.errorHandlers.delete(onError);\n\n            shared.consumers--;\n            if (shared.consumers <= 0) {\n                const currentShared = this.#sharedSubs.get(channel);\n                if (currentShared !== shared) return;\n\n                this.#sharedSubs.delete(channel);\n                this.#pendingTeardowns.set(channel, shared);\n\n                queueMicrotask(() => {\n                    if (this.#pendingTeardowns.get(channel) !== shared) return;\n                    this.#pendingTeardowns.delete(channel);\n\n                    this.#teardownSubscription(shared);\n\n                    if (this.#sharedSubs.size === 0 && this.#pendingTeardowns.size === 0) {\n                        this.#disconnect();\n                    }\n                });\n            }\n        };\n    }\n\n    /**\n     * Connects to a realtime channel with a custom message decoder.\n     */\n    connectChannel<T extends DescMessage>(params: ConnectChannelParams<T>): () => void {\n        return this.subscribe<Uint8Array>(params.channel, {\n            onPublication: (data) => {\n                let decoded: MessageShape<T>;\n                try {\n                    decoded = fromBinary(params.schema, data);\n                } catch (error) {\n                    this.#callErrorHandler(\n                        params.onError,\n                        createSdkSubscriptionErrorContext(params.channel, \"decode\", error),\n                    );\n                    return;\n                }\n                params.onPublication(decoded);\n            },\n            onSubscribed: params.onConnected,\n            onUnsubscribed: params.onDisconnected,\n            onError: params.onError,\n        });\n    }\n\n    /**\n     * Connects to a realtime channel that emits protobuf messages.\n     */\n    connectProtoChannel<T extends DescMessage>(params: ConnectChannelParams<T>): () => void {\n        return this.subscribe<Uint8Array | MessageShape<T>>(params.channel, {\n            onPublication: (data) => {\n                let msg: MessageShape<T> | null;\n                try {\n                    msg = decodeProtoFrame(params.schema, data);\n                } catch (error) {\n                    this.#callErrorHandler(\n                        params.onError,\n                        createSdkSubscriptionErrorContext(params.channel, \"decode\", error),\n                    );\n                    return;\n                }\n                if (!msg) {\n                    this.#callErrorHandler(\n                        params.onError,\n                        createSdkSubscriptionErrorContext(\n                            params.channel,\n                            \"decode\",\n                            \"Unable to decode protobuf frame\",\n                        ),\n                    );\n                    return;\n                }\n                params.onPublication(msg);\n            },\n            onSubscribed: params.onConnected,\n            onUnsubscribed: params.onDisconnected,\n            onError: params.onError,\n        });\n    }\n\n    /**\n     * Disconnects the realtime client from all active channels.\n     */\n    disconnect(): void {\n        this.#disconnect();\n    }\n\n    /**\n     * Disconnects authenticated realtime state without touching public channels.\n     */\n    disconnectPrivate(): void {\n        this.#disconnectPrivate();\n    }\n\n    get isConnected(): boolean {\n        return this.#publicClient !== null || this.#privateClient !== null;\n    }\n\n    get activeChannels(): number {\n        return this.#sharedSubs.size;\n    }\n\n    get totalConsumers(): number {\n        let total = 0;\n        for (const shared of this.#sharedSubs.values()) {\n            total += shared.consumers;\n        }\n        return total;\n    }\n}\n"],"mappings":";;;;;;AAuBA,MAAM,gBAAgB,UAAU;AAKhC,MAAM,sCACF,OAAO;AAMX,IAAI,wBAAwD;AAC5D,IAAI,uBAA8C;AAClD,IAAI,yBAAyB;AAa7B,SAAS,iBAA0C;CAC/C,IACI,2BAA2B,iCAC1B,YAA4C,KAAK,KAElD,OAAO,QAAQ,uBAAO,IAAI,MAAM,qDAAqD,CAAC;CAG1F,IAAI,CAAC,uBAAuB;EAExB,MAAM,gBADc,QAAQ,QAAQ,CAAC,CAAC,KAAK,sBACX,CAAC,CAAC,MAC7B,QAAQ;GACL,uBAAuB,IAAI;GAC3B,OAAO,IAAI;EACf,IACC,UAAU;GACP,IAAI,0BAA0B,eAAe,wBAAwB;GACrE,MAAM;EACV,CACJ;EACA,wBAAwB;CAC5B;CACA,OAAO;AACX;;;;AA6CA,IAAa,iBAAb,MAAyD;CACrD,gBAAmC;CACnC,iBAAoC;CACpC,8BAAc,IAAI,IAAgC;CAClD,oCAAoB,IAAI,IAAgC;CACxD;CAEA,YAAY,QAAwB;EAChC,KAAKA,UAAU;GACX,OAAO,OAAO;GACd,eAAe,OAAO;GACtB,mBAAmB,OAAO;GAC1B,gBAAgB,OAAO,0BAA0B,CAAC;GAClD,SAAS,OAAO,kBAAkB;EACtC;CACJ;CAEA,MAAMC,gBAAgB,SAAoD;EACtE,OAAO,KAAKD,QAAQ,eAAe,OAAO;CAC9C;CAEA,uBAAuB,QAA4B,MAAc,OAAsB;EACnF,MAAM,MAAM,kCAAkC,OAAO,SAAS,MAAM,KAAK;EACzE,KAAK,MAAM,WAAW,OAAO,eACzB,QAAQ,GAAG;CAEnB;CAEA,0BAA0B,OAAsB;EAC5C,KAAK,MAAM,UAAU,KAAKE,YAAY,OAAO,GACzC,IAAI,KAAKC,aAAa,OAAO,OAAO,MAAM,WACtC,KAAKC,uBAAuB,QAAQ,oBAAoB,KAAK;CAGzE;CAEA,kBACI,YACA,QACA,iBACF;EACE,IAAI,KAAKD,aAAa,OAAO,OAAO,MAAM,WAAW,OAAO,KAAA;EAC5D,OAAO,EACH,UAAU,YAAY;GAClB,IAAI;IACA,MAAM,MAAM,IAAI,IAAI,KAAKH,QAAQ,iBAAiB;IAClD,IAAI,aAAa,IAAI,WAAW,OAAO,OAAO;IAC9C,MAAM,UAAU,MAAM,KAAKC,gBAAgB;KAAE;KAAK,QAAQ;IAAM,CAAC;IACjE,MAAM,MAAM,MAAM,cAAc,KAAK,EAAE,QAAQ,CAAC;IAChD,IAAI,CAAC,IAAI,IACL,MAAM,oBACF,IAAI,QACJ,uCAAuC,IAAI,QAC/C;IAEJ,MAAM,OAAQ,MAAM,IAAI,KAAK;IAC7B,IAAI,CAAC,MAAM,OACP,MAAM,IAAI,oBAAoB,0CAA0C;IAE5E,OAAO,KAAK;GAChB,SAAS,OAAO;IACZ,IAAI,OAAO,oBAAoB,iBAC3B,KAAKG,uBAAuB,QAAQ,sBAAsB,KAAK;IAEnE,IAAI,iBAAiB,kBAAkB,CAAC,MAAM,WAC1C,MAAM,IAAI,WAAW,kBAAkB,MAAM,OAAO;IAExD,MAAM;GACV;EACJ,EACJ;CACJ;CAEA,WAAoB;EAChB,OAAO,KAAKJ,QAAQ,QAAQ;CAChC;CAEA,aAAa,SAAqC;EAC9C,OAAO,QAAQ,WAAW,UAAU,IAAI,YAAY;CACxD;CAEA,oBAAoB,YAAwC;EACxD,MAAM,SAAS,IAAI,WAAW,KAAKA,QAAQ,KAAK;EAChD,KAAKK,gBAAgB;EAErB,OAAO,GAAG,iBAAiB,QAAQ;GAG/B,IAAI,KAAKA,kBAAkB,UAAU,IAAI,QAAQ,GAAG;GACpD,KAAKA,gBAAgB;GACrB,KAAKC,wBACD,CAAC,GAAG,KAAKJ,YAAY,OAAO,GAAG,GAAG,KAAKK,kBAAkB,OAAO,CAAC,CAAC,CAAC,QAC9D,WAAW,OAAO,WAAW,MAClC,GACA,gBACA,GACJ;EACJ,CAAC;EAED,OAAO,QAAQ;EACf,OAAO;CACX;CAEA,qBAAqB,YAAwC;EACzD,IAAI;EAkCJ,SAAS,IAAI,WAAW,KAAKP,QAAQ,OAAO,EAhCxC,UAAU,YAAY;GAClB,IAAI;IACA,MAAM,UAAU,MAAM,KAAKC,gBAAgB;KACvC,KAAK,KAAKD,QAAQ;KAClB,QAAQ;IACZ,CAAC;IACD,MAAM,MAAM,MAAM,cAAc,KAAKA,QAAQ,eAAe,EACxD,QACJ,CAAC;IACD,IAAI,CAAC,IAAI,IACL,MAAM,oBACF,IAAI,QACJ,qCAAqC,IAAI,QAC7C;IAEJ,MAAM,OAAQ,MAAM,IAAI,KAAK;IAC7B,IAAI,CAAC,MAAM,OACP,MAAM,IAAI,oBAAoB,wCAAwC;IAE1E,OAAO,KAAK;GAChB,SAAS,OAAO;IACZ,IAAI,KAAKQ,mBAAmB,QACxB,KAAKC,0BAA0B,KAAK;IAExC,IAAI,iBAAiB,kBAAkB,CAAC,MAAM,WAC1C,MAAM,IAAI,WAAW,kBAAkB,MAAM,OAAO;IAExD,MAAM;GACV;EACJ,EAG2C,CAAC;EAChD,KAAKD,iBAAiB;EAEtB,OAAO,GAAG,iBAAiB,QAAQ;GAG/B,IAAI,KAAKA,mBAAmB,UAAU,IAAI,QAAQ,GAAG;GACrD,KAAKA,iBAAiB;GACtB,KAAKF,wBACD,CAAC,GAAG,KAAKJ,YAAY,OAAO,GAAG,GAAG,KAAKK,kBAAkB,OAAO,CAAC,CAAC,CAAC,QAC9D,WAAW,OAAO,WAAW,MAClC,GACA,gBACA,GACJ;EACJ,CAAC;EAED,OAAO,QAAQ;EACf,OAAO;CACX;CAEA,oBAAoB,YAAwC;EACxD,OAAO,KAAKF,iBAAiB,KAAKK,oBAAoB,UAAU;CACpE;CAEA,mBAAmB,SAAuB;EACtC,IAAI,KAAKP,aAAa,OAAO,MAAM,aAAa,CAAC,KAAKQ,SAAS,GAC3D,MAAM,IAAI,oBACN,wCAAwC,QAAQ,yBACpD;CAER;CAEA,wBAAwB,YAA4B,SAA6B;EAC7E,IAAI,KAAKR,aAAa,OAAO,MAAM,WAC/B,OAAO,KAAKK,kBAAkB,KAAKI,qBAAqB,UAAU;EAGtE,OAAO,KAAKC,oBAAoB,UAAU;CAC9C;CAEA,oBAAoB,QAAkC;EAClD,IAAI,OAAO,KAAK;EAIhB,KAAKC,mBAAmB,OAAO,OAAO;EAEtC,MAAM,kBAAkB,OAAO,kBAAkB;EACjD,OAAO,kBAAkB;EAIzB,IAAI,sBAAsB;GACtB,KAAKC,uBAAuB,sBAAsB,QAAQ,eAAe;GACzE;EACJ;EACA,KAAUC,8BAA8B,QAAQ,eAAe;CACnE;CAEA,MAAMA,8BACF,QACA,iBACa;EACb,IAAI;EACJ,IAAI;GACA,aAAa,MAAM,eAAe;EACtC,SAAS,OAAO;GACZ,IAAI,OAAO,oBAAoB,iBAAiB;GAChD,IAAI,KAAKd,YAAY,IAAI,OAAO,OAAO,MAAM,QACzC,KAAKA,YAAY,OAAO,OAAO,OAAO;GAE1C,KAAKE,uBAAuB,QAAQ,kBAAkB,KAAK;GAC3D;EACJ;EAIA,IAAI,OAAO,oBAAoB,mBAAmB,OAAO,KAAK;EAC9D,IAAI,KAAKF,YAAY,IAAI,OAAO,OAAO,MAAM,QAAQ;EAErD,IAAI;GACA,KAAKY,mBAAmB,OAAO,OAAO;GACtC,KAAKC,uBAAuB,YAAY,QAAQ,eAAe;EACnE,SAAS,OAAO;GACZ,KAAKb,YAAY,OAAO,OAAO,OAAO;GACtC,KAAKE,uBAAuB,QAAQ,QAAQ,KAAK;EACrD;CACJ;CAEA,uBACI,YACA,QACA,iBACI;EACJ,MAAM,SAAS,KAAKa,wBAAwB,YAAY,OAAO,OAAO;EAEtE,MAAM,MAAM,OAAO,gBACf,OAAO,SACP,KAAKC,kBAAkB,YAAY,QAAQ,eAAe,CAC9D;EACA,OAAO,MAAM;EACb,OAAO,SAAS;EAEhB,IAAI,GAAG,gBAAgB,QAA4B;GAC/C,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,KAAK,MAAM,WAAW,OAAO,qBAAqB,QAAQ,IAAI,IAAI;EACtE,CAAC;EACD,IAAI,GAAG,oBAAoB;GACvB,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,MAAM,oBAAoB,EAAE,OAAO;GACnC,KAAK,MAAM,WAAW,OAAO,oBAAoB,QAAQ,iBAAiB;EAC9E,CAAC;EACD,IAAI,GAAG,iBAAiB,QAAQ;GAC5B,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,IAAI,IAAI,QAAQ,OAAQ,IAAI,OAAO,MAAM;IACrC,KAAKZ,wBAAwB,CAAC,MAAM,GAAG,gBAAgB,GAAG;IAC1D;GACJ;GACA,KAAK,MAAM,WAAW,OAAO,sBAAsB,QAAQ;EAC/D,CAAC;EACD,IAAI,GAAG,UAAU,QAAkC;GAC/C,IAAI,OAAO,QAAQ,OAAO,OAAO,oBAAoB,iBAAiB;GACtE,MAAM,SAAS,gCAAgC,GAAG;GAClD,KAAK,MAAM,WAAW,OAAO,eAAe,QAAQ,MAAM;EAC9D,CAAC;EAED,IAAI,UAAU;CAClB;CAEA,yBAAyB,SAAqC;EAC1D,MAAM,WAAW,KAAKJ,YAAY,IAAI,OAAO;EAC7C,IAAI,UAAU,OAAO;EAErB,MAAM,UAAU,KAAKK,kBAAkB,IAAI,OAAO;EAClD,IAAI,SAAS;GACT,KAAKA,kBAAkB,OAAO,OAAO;GACrC,KAAKL,YAAY,IAAI,SAAS,OAAO;GACrC,IAAI,CAAC,QAAQ,KACT,KAAKiB,oBAAoB,OAAO;QAC7B,IAAI,QAAQ,IAAI,UAAU,cAC7B,QAAQ,IAAI,UAAU;GAE1B,OAAO;EACX;EAEA,MAAM,SAA6B;GAC/B;GACA,KAAK;GACL,QAAQ;GACR,iBAAiB;GACjB,WAAW;GACX,mBAAmB;GACnB,qCAAqB,IAAI,IAAI;GAC7B,oCAAoB,IAAI,IAAI;GAC5B,sCAAsB,IAAI,IAAI;GAC9B,+BAAe,IAAI,IAAI;EAC3B;EAEA,KAAKjB,YAAY,IAAI,SAAS,MAAM;EACpC,IAAI;GACA,KAAKiB,oBAAoB,MAAM;EACnC,SAAS,OAAO;GACZ,KAAKjB,YAAY,OAAO,OAAO;GAC/B,MAAM;EACV;EACA,OAAO;CACX;CAEA,kBAAkB,SAAmC,KAAwC;EACzF,IAAI,CAAC,SAAS;EAEd,IAAI;GACA,QAAQ,GAAG;EACf,QAAQ,CAER;CACJ;CAEA,qBACI,SACA,MACA,SACA,SACI;EACJ,IAAI;GACA,QAAQ;EACZ,SAAS,OAAO;GACZ,KAAKkB,kBACD,SACA,kCAAkC,SAAS,MAAM,KAAK,CAC1D;EACJ;CACJ;CAEA,wBACI,eACA,MACA,KACI;EACJ,MAAM,gBAAgB,cAAc,KAAK,YAAY;GACjD,OAAO,kCAAkC,OAAO,SAAS,MAAM;IAC3D,MAAM,IAAI;IACV,SAAS,IAAI;GACjB,CAAC;GACD,eAAe,CAAC,GAAG,OAAO,aAAa;GACvC,eAAe,CAAC,GAAG,OAAO,oBAAoB;EAClD,EAAE;EAGF,KAAK,MAAM,UAAU,eAAe;GAChC,IAAI,KAAKlB,YAAY,IAAI,OAAO,OAAO,MAAM,QACzC,KAAKA,YAAY,OAAO,OAAO,OAAO;GAE1C,IAAI,KAAKK,kBAAkB,IAAI,OAAO,OAAO,MAAM,QAC/C,KAAKA,kBAAkB,OAAO,OAAO,OAAO;GAEhD,KAAKc,sBAAsB,MAAM;GACjC,OAAO,oBAAoB,MAAM;GACjC,OAAO,mBAAmB,MAAM;GAChC,OAAO,qBAAqB,MAAM;GAClC,OAAO,cAAc,MAAM;EAC/B;EAEA,KAAK,MAAM,EAAE,OAAO,eAAe,mBAAmB,eAAe;GACjE,KAAK,MAAM,WAAW,eAAe,QAAQ,KAAK;GAClD,KAAK,MAAM,WAAW,eAAe,QAAQ;EACjD;CACJ;CAEA,sBAAsB,QAAkC;EACpD,MAAM,MAAM,OAAO;EACnB,MAAM,SAAS,OAAO;EACtB,MAAM,OAAO,KAAKlB,aAAa,OAAO,OAAO;EAC7C,OAAO,MAAM;EACb,OAAO,SAAS;EAChB,OAAO;EACP,IAAI,CAAC,KAAK;EAEV,IAAI;GACA,IAAI,IAAI,UAAU,gBACd,IAAI,YAAY;EAExB,QAAQ,CAER;EACA,IAAI;GACA,QAAQ,qBAAqB,GAAG;EACpC,QAAQ,CAER;EACA,KAAKmB,wBAAwB,IAAI;CACrC;CAEA,oBAAoB,MAAmC;EACnD,KAAK,MAAM,UAAU,KAAKpB,YAAY,OAAO,GACzC,IAAI,KAAKC,aAAa,OAAO,OAAO,MAAM,MAAM,OAAO;EAE3D,KAAK,MAAM,UAAU,KAAKI,kBAAkB,OAAO,GAC/C,IAAI,KAAKJ,aAAa,OAAO,OAAO,MAAM,MAAM,OAAO;EAE3D,OAAO;CACX;CAEA,wBAAwB,MAAgC;EACpD,IAAI,KAAKoB,oBAAoB,IAAI,GAAG;EAEpC,MAAM,SAAS,SAAS,YAAY,KAAKf,iBAAiB,KAAKH;EAC/D,IAAI,SAAS,WACT,KAAKG,iBAAiB;OAEtB,KAAKH,gBAAgB;EAGzB,IAAI;GACA,QAAQ,WAAW;EACvB,QAAQ,CAER;CACJ;CAEA,cAAoB;EAChB,MAAM,eAAe,KAAKA;EAC1B,MAAM,gBAAgB,KAAKG;EAE3B,KAAKD,kBAAkB,MAAM;EAC7B,KAAKL,YAAY,MAAM;EACvB,KAAKG,gBAAgB;EACrB,KAAKG,iBAAiB;EAEtB,IAAI;GACA,cAAc,WAAW;EAC7B,QAAQ,CAER;EACA,IAAI;GACA,eAAe,WAAW;EAC9B,QAAQ,CAER;CACJ;CAEA,qBAA2B;EACvB,MAAM,gBAAgB,KAAKA;EAC3B,KAAKA,iBAAiB;EAEtB,KAAK,MAAM,CAAC,SAAS,WAAW,KAAKN,aAAa;GAC9C,IAAI,KAAKC,aAAa,OAAO,MAAM,WAAW;GAC9C,KAAKD,YAAY,OAAO,OAAO;GAC/B,KAAKmB,sBAAsB,MAAM;EACrC;EACA,KAAK,MAAM,CAAC,SAAS,WAAW,KAAKd,mBAAmB;GACpD,IAAI,KAAKJ,aAAa,OAAO,MAAM,WAAW;GAC9C,KAAKI,kBAAkB,OAAO,OAAO;GACrC,KAAKc,sBAAsB,MAAM;EACrC;EAEA,IAAI;GACA,eAAe,WAAW;EAC9B,QAAQ,CAER;CACJ;;;;;;;CAQA,UAAa,SAAiB,UAA4C;EACtE,IAAI;EACJ,IAAI;GACA,SAAS,KAAKG,yBAAyB,OAAO;EAClD,SAAS,OAAO;GACZ,IAAI,EAAE,iBAAiB,sBAAsB,MAAM;GACnD,IAAI,CAAC,SAAS,SAAS,MAAM;GAE7B,MAAM,MAAM,kCAAkC,SAAS,QAAQ,KAAK;GACpE,qBAAqB,KAAKJ,kBAAkB,SAAS,SAAS,GAAG,CAAC;GAClE,aAAa,CAAC;EAClB;EACA,OAAO;EAEP,MAAM,qBAAqB,SAAS;EACpC,MAAM,eAAe,SAAS;EAC9B,MAAM,oBAAoB,SAAS;EACnC,MAAM,sBAAsB,SAAS;EAErC,MAAM,UAAoC,gBACnC,QAAQ,KAAKA,kBAAkB,cAAc,GAAG,IACjD,KAAA;EACN,MAAM,SAA6B,SAAS;GACxC,KAAKK,qBACD,SACA,6BACM,mBAAmB,IAAS,GAClC,OACJ;EACJ;EACA,IAAI,sBAAsB;EAC1B,MAAM,eAAe,qBACd,sBAA8B;GAC3B,IAAI,qBAAqB,qBAAqB;GAC9C,sBAAsB;GACtB,KAAKA,qBACD,SACA,sBACA,mBACA,OACJ;EACJ,IACA,KAAA;EACN,MAAM,iBAAiB,4BAEb,KAAKA,qBACD,SACA,wBACA,qBACA,OACJ,IACJ,KAAA;EAEN,OAAO,oBAAoB,IAAI,KAAK;EAEpC,IAAI,cAAc,OAAO,mBAAmB,IAAI,YAAY;EAC5D,IAAI,gBAAgB,OAAO,qBAAqB,IAAI,cAAc;EAClE,IAAI,SAAS,OAAO,cAAc,IAAI,OAAO;EAG7C,IAAI,KAAKtB,aAAa,OAAO,MAAM,WAAW;GAC1C,MAAM,YAAY,OAAO,QAAQ,UAAU;GAC3C,MAAM,cAAc,OAAO,KAAK,UAAU;GAE1C,KAAK,aAAa,gBAAgB,KAAKQ,SAAS,GAAG;IAC/C,IAAI,WAAW,OAAO,QAAQ,QAAQ;IACtC,IAAI,aAAa,OAAO,KAAK,UAAU;GAC3C;EACJ;EAEA,IAAI,SAAS;EACb,IAAI,gBAAgB,OAAO,KAAK,UAAU,cAAc;GACpD,MAAM,oBAAoB,OAAO;GACjC,qBAAqB;IACjB,IAAI,UAAU,OAAO,KAAK,UAAU,cAAc;IAClD,aAAa,iBAAiB;GAClC,CAAC;EACL;EAEA,aAAa;GACT,IAAI,QAAQ;GACZ,SAAS;GAET,OAAO,oBAAoB,OAAO,KAAK;GACvC,IAAI,cAAc,OAAO,mBAAmB,OAAO,YAAY;GAC/D,IAAI,gBAAgB,OAAO,qBAAqB,OAAO,cAAc;GACrE,IAAI,SAAS,OAAO,cAAc,OAAO,OAAO;GAEhD,OAAO;GACP,IAAI,OAAO,aAAa,GAAG;IAEvB,IADsB,KAAKT,YAAY,IAAI,OAC3B,MAAM,QAAQ;IAE9B,KAAKA,YAAY,OAAO,OAAO;IAC/B,KAAKK,kBAAkB,IAAI,SAAS,MAAM;IAE1C,qBAAqB;KACjB,IAAI,KAAKA,kBAAkB,IAAI,OAAO,MAAM,QAAQ;KACpD,KAAKA,kBAAkB,OAAO,OAAO;KAErC,KAAKc,sBAAsB,MAAM;KAEjC,IAAI,KAAKnB,YAAY,SAAS,KAAK,KAAKK,kBAAkB,SAAS,GAC/D,KAAKmB,YAAY;IAEzB,CAAC;GACL;EACJ;CACJ;;;;CAKA,eAAsC,QAA6C;EAC/E,OAAO,KAAK,UAAsB,OAAO,SAAS;GAC9C,gBAAgB,SAAS;IACrB,IAAI;IACJ,IAAI;KACA,UAAU,WAAW,OAAO,QAAQ,IAAI;IAC5C,SAAS,OAAO;KACZ,KAAKN,kBACD,OAAO,SACP,kCAAkC,OAAO,SAAS,UAAU,KAAK,CACrE;KACA;IACJ;IACA,OAAO,cAAc,OAAO;GAChC;GACA,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,SAAS,OAAO;EACpB,CAAC;CACL;;;;CAKA,oBAA2C,QAA6C;EACpF,OAAO,KAAK,UAAwC,OAAO,SAAS;GAChE,gBAAgB,SAAS;IACrB,IAAI;IACJ,IAAI;KACA,MAAM,iBAAiB,OAAO,QAAQ,IAAI;IAC9C,SAAS,OAAO;KACZ,KAAKA,kBACD,OAAO,SACP,kCAAkC,OAAO,SAAS,UAAU,KAAK,CACrE;KACA;IACJ;IACA,IAAI,CAAC,KAAK;KACN,KAAKA,kBACD,OAAO,SACP,kCACI,OAAO,SACP,UACA,iCACJ,CACJ;KACA;IACJ;IACA,OAAO,cAAc,GAAG;GAC5B;GACA,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,SAAS,OAAO;EACpB,CAAC;CACL;;;;CAKA,aAAmB;EACf,KAAKM,YAAY;CACrB;;;;CAKA,oBAA0B;EACtB,KAAKC,mBAAmB;CAC5B;CAEA,IAAI,cAAuB;EACvB,OAAO,KAAKtB,kBAAkB,QAAQ,KAAKG,mBAAmB;CAClE;CAEA,IAAI,iBAAyB;EACzB,OAAO,KAAKN,YAAY;CAC5B;CAEA,IAAI,iBAAyB;EACzB,IAAI,QAAQ;EACZ,KAAK,MAAM,UAAU,KAAKA,YAAY,OAAO,GACzC,SAAS,OAAO;EAEpB,OAAO;CACX;AACJ"}

package/dist/services/auth/account-signer-auth.js

@@ -70,7 +70,7 @@ var AccountSignerAuthService = class extends AuthService {
 		const uri = resolveChallengeUri(options.uri ?? this.#challengeUri);
 		const { message } = await this.createWalletChallenge({
 			smartAccountAddress,
-			signerAddress: accountSigner.accountAddress,
+			signerAddress: ownerAddress,
 			uri,
 			purpose: "login"
 		});

package/dist/services/auth/account-signer-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-signer-auth.js","names":["#accountSignerConfig","#environmentFingerprint","#subaccounts","#tokenStorage","#realtime","#sessionStore","#assertAccountSignerEnvironment","#accountSigner","#accountIdentity","#identityFromSigner","#notifyStateChange","#login","#resolveAccountSigner","#challengeUri","#getEnvironmentSession","#loginMethod","#isAuthenticated","#mainAccountId","#activeAccountId","#walletProvider","#getEnvironmentBoundToken","#clearExpiredSessionState","#getCurrentTokenStorageOptions","#resolveRefreshProvider"],"sources":["../../../src/services/auth/account-signer-auth.ts"],"sourcesContent":["import { AuthService } from \"./auth.js\";\nimport { AuthenticationError, ConfigurationError } from \"../../shared/errors.js\";\nimport { AuthSessionStore } from \"./session.js\";\nimport type { AccountSigner, AccountSignerConfig, HexAddress } from \"../../account-signer/types.js\";\nimport { assertAccountSigner, resolveAccountSigner } from \"../../account-signer/types.js\";\nimport { EventEmitter } from \"../../utils/event-emitter.js\";\nimport { isJwtValid, getJwtTimeToExpiry } from \"../../utils/jwt.js\";\nimport type { SubaccountsService } from \"../subaccounts/index.js\";\nimport type {\n    AuthState,\n    AuthHydrationData,\n    AuthLoginMethod,\n    SessionData,\n    ActiveAccountInfo,\n} from \"./session.types.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport type { PolyesterEnvironment } from \"../../environment.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\nimport {\n    createAuthTokenStorageSetOptions,\n    type AuthTokenStorage,\n    type AuthTokenStorageSetOptions,\n} from \"./token-storage.js\";\n\nexport interface AccountSignerAuthEvents {\n    authenticated: { accountId: string; username: string };\n    loggedOut: void;\n    error: { code: string; message: string };\n    servicesReady: void;\n    stateChange: AuthState;\n}\n\nexport interface LoginResult {\n    accountId: string;\n    username: string;\n    expiresAt: Date;\n}\n\nexport interface LoginOptions {\n    /**\n     * The wallet provider to use for login.\n     */\n    provider: \"metamask\" | \"turnkey\" | \"other\";\n    /** Browser origin requesting the signature; defaults to location.origin in browsers. Required outside browsers. */\n    uri?: string;\n    loginMethod?: AuthLoginMethod | null;\n}\n\nexport interface CreateSubaccountParams {\n    /** The account signer for the new subaccount (caller derives this, e.g. via Turnkey saltNonce) */\n    accountSigner: AccountSigner;\n    /** Optional human-readable label for this subaccount */\n    label?: string;\n    /** Browser origin requesting the signature; defaults to location.origin in browsers. Required outside browsers. */\n    uri?: string;\n}\n\nexport interface CreateSubaccountResult {\n    subaccountId: string;\n    smartAccountSaltNonce: number;\n    revision: string;\n}\n\ninterface AccountIdentity {\n    accountAddress: HexAddress;\n    ownerAddress?: HexAddress;\n}\n\n/**\n * Coordinates wallet/account-signer authentication, session storage, subaccount selection, and session refresh.\n */\nexport class AccountSignerAuthService extends AuthService {\n    readonly events = new EventEmitter<AccountSignerAuthEvents>();\n\n    #accountSignerConfig: AccountSignerConfig | undefined;\n    #accountSigner: AccountSigner | null = null;\n    #accountIdentity: AccountIdentity | null = null;\n    #isAuthenticated = false;\n    #mainAccountId: string | null = null;\n    #activeAccountId: string | null = null;\n    #subaccounts: SubaccountsService;\n    #walletProvider: \"metamask\" | \"turnkey\" | \"other\" | undefined = undefined;\n    #loginMethod: AuthLoginMethod | null = null;\n    #challengeUri: string | undefined = undefined;\n    #environmentFingerprint: string;\n    #tokenStorage: AuthTokenStorage;\n    #sessionStore: AuthSessionStore;\n    #realtime: PolyesterRealtime;\n\n    constructor({\n        transports,\n        accountSignerConfig,\n        environment,\n        subaccounts,\n        realtime,\n        tokenStorage,\n        sessionStore,\n    }: {\n        transports: AuthAndPublicApiTransports;\n        accountSignerConfig?: AccountSignerConfig;\n        environment: PolyesterEnvironment;\n        subaccounts: SubaccountsService;\n        realtime: PolyesterRealtime;\n        tokenStorage: AuthTokenStorage;\n        sessionStore?: AuthSessionStore;\n    }) {\n        super(transports, realtime);\n\n        this.#accountSignerConfig = accountSignerConfig;\n        this.#environmentFingerprint = environment.fingerprint;\n        this.#subaccounts = subaccounts;\n        this.#tokenStorage = tokenStorage;\n        this.#realtime = realtime;\n        this.#sessionStore =\n            sessionStore ??\n            new AuthSessionStore({\n                environmentFingerprint: environment.fingerprint,\n            });\n    }\n\n    /**\n     * Attaches the subaccounts service used when creating a subaccount during authenticated flows.\n     */\n    setSubaccountsService(subaccounts: SubaccountsService): void {\n        this.#subaccounts = subaccounts;\n    }\n\n    /**\n     * Sets the account signer used to sign login and account-switch challenges.\n     */\n    setAccountSigner(accountSigner: AccountSigner | null): void {\n        if (accountSigner) this.#assertAccountSignerEnvironment(accountSigner);\n        this.#accountSigner = accountSigner;\n        this.#accountIdentity = accountSigner ? this.#identityFromSigner(accountSigner) : null;\n        this.#notifyStateChange();\n    }\n\n    /**\n     * Returns the active account signer, throwing if one has not been configured.\n     */\n    getAccountSigner(): AccountSigner | null {\n        return this.#accountSigner;\n    }\n\n    /**\n     * Signs a server-issued SIWE message with the configured account signer, exchanges it for a session token, and stores the hydrated account/subaccount session state.\n     */\n    async login(options: LoginOptions): Promise<LoginResult> {\n        return this.#login(options);\n    }\n\n    async #login(\n        options: LoginOptions,\n        previousActiveAccount?: ActiveAccountInfo,\n    ): Promise<LoginResult> {\n        const { provider, loginMethod } = options;\n\n        const accountSigner = await this.#resolveAccountSigner();\n\n        if (!accountSigner) {\n            throw new ConfigurationError(\n                \"No account signer configured. Call setAccountSigner() or pass accountSigner in config.\",\n            );\n        }\n\n        const smartAccountAddress = accountSigner.accountAddress;\n        const ownerAddress = accountSigner.ownerAddress ?? accountSigner.accountAddress;\n\n        const uri = resolveChallengeUri(options.uri ?? this.#challengeUri);\n        const { message } = await this.createWalletChallenge({\n            smartAccountAddress,\n            signerAddress: accountSigner.accountAddress,\n            uri,\n            purpose: \"login\",\n        });\n        const signature = await accountSigner.signMessage(message);\n\n        const response = await this.loginWithWallet({\n            smartAccountAddress,\n            message,\n            signature,\n            walletProvider: provider,\n        });\n\n        const environmentSession = this.#getEnvironmentSession();\n        const resolvedLoginMethod =\n            loginMethod ??\n            this.#loginMethod ??\n            environmentSession?.loginMethod ??\n            (provider === \"metamask\" ? \"metamask\" : null);\n\n        const tokenOptions = createAuthTokenStorageSetOptions(response.accessToken);\n        const activeAccount =\n            previousActiveAccount?.mainAccountId === response.accountId\n                ? previousActiveAccount\n                : undefined;\n        this.#sessionStore.commitLogin(\n            {\n                accessToken: response.accessToken,\n                tokenOptions,\n                provider,\n                loginMethod: resolvedLoginMethod,\n                primaryWallet: ownerAddress,\n                smartAccount: smartAccountAddress,\n                accountId: response.accountId,\n                activeAccount,\n                username: response.username ?? undefined,\n            },\n            this.#tokenStorage,\n        );\n        this.#isAuthenticated = true;\n        this.#mainAccountId = response.accountId;\n        this.#activeAccountId = activeAccount?.accountId ?? response.accountId;\n        this.#walletProvider = provider;\n        this.#loginMethod = resolvedLoginMethod;\n        this.#challengeUri = uri;\n        this.#accountIdentity = this.#identityFromSigner(accountSigner);\n\n        this.#notifyStateChange();\n\n        this.events.emit(\"authenticated\", {\n            accountId: response.accountId,\n            username: response.username,\n        });\n\n        const expiresAt = response.expiresAt\n            ? new Date(\n                  Number(response.expiresAt.seconds) * 1000 +\n                      (response.expiresAt.nanos ?? 0) / 1_000_000,\n              )\n            : new Date();\n\n        return {\n            accountId: response.accountId,\n            username: response.username,\n            expiresAt,\n        };\n    }\n\n    /**\n     * Builds auth state from a session token and optional active account override.\n     */\n    hydrateAuthState(state: AuthHydrationData): void {\n        const existingToken = this.#getEnvironmentBoundToken();\n        if (!existingToken || !isJwtValid(existingToken)) return;\n\n        const existingSession = this.#getEnvironmentSession();\n        this.#walletProvider = existingSession?.provider ?? this.#walletProvider;\n        this.#loginMethod = existingSession?.loginMethod ?? this.#loginMethod;\n\n        this.#isAuthenticated = true;\n        this.#mainAccountId = state.mainAccountId;\n        this.#activeAccountId = state.activeAccountId ?? state.mainAccountId;\n        this.#accountIdentity = state.smartAccountAddress\n            ? {\n                  accountAddress: state.smartAccountAddress,\n                  ownerAddress: state.ownerAddress,\n              }\n            : null;\n\n        this.#notifyStateChange();\n    }\n\n    /**\n     * Loads the stored token, validates that it still belongs to this environment, and restores auth state when possible.\n     */\n    async restoreSession(): Promise<{ accountId: string; username: string } | null> {\n        const existingToken = this.#getEnvironmentBoundToken();\n\n        if (!existingToken || !isJwtValid(existingToken)) {\n            this.#clearExpiredSessionState();\n            return null;\n        }\n\n        try {\n            const me = await this.me();\n            this.#isAuthenticated = true;\n            this.#mainAccountId = me.accountId;\n\n            // preserve active account if already set (e.g. via hydration), otherwise use main\n            const existingSession = this.#getEnvironmentSession();\n            this.#walletProvider = existingSession?.provider ?? this.#walletProvider;\n            this.#loginMethod = existingSession?.loginMethod ?? this.#loginMethod;\n            if (!this.#activeAccountId) {\n                this.#activeAccountId = existingSession?.activeAccount?.accountId ?? me.accountId;\n            }\n\n            // use existing account signer if set, otherwise try to resolve from config\n            if (!this.#accountSigner) {\n                this.#accountSigner = await resolveAccountSigner(this.#accountSignerConfig);\n                if (this.#accountSigner) {\n                    this.#assertAccountSignerEnvironment(this.#accountSigner);\n                    this.#accountIdentity = this.#identityFromSigner(this.#accountSigner);\n                }\n            }\n\n            // keep the display session available for SSR hydration\n            if (this.#accountSigner?.accountAddress) {\n                const session = this.#sessionStore.ensureSession(\n                    {\n                        provider: this.#walletProvider ? this.#walletProvider : \"other\",\n                        loginMethod:\n                            this.#loginMethod ??\n                            (this.#walletProvider === \"metamask\" ? \"metamask\" : null),\n                        primaryWallet:\n                            this.#accountSigner.ownerAddress ?? this.#accountSigner.accountAddress,\n                        smartAccount: this.#accountSigner.accountAddress,\n                        accountId: me.accountId,\n                        username: me.username ?? undefined,\n                    },\n                    { maxAgeSeconds: this.#getCurrentTokenStorageOptions().maxAgeSeconds },\n                );\n                this.#walletProvider = session.provider;\n                this.#loginMethod = session.loginMethod ?? this.#loginMethod;\n            }\n\n            this.#notifyStateChange();\n            return { accountId: me.accountId, username: me.username };\n        } catch {\n            this.#clearExpiredSessionState();\n            return null;\n        }\n    }\n\n    /**\n     * Clears stored auth state and removes the persisted auth token.\n     */\n    async logout(): Promise<void> {\n        this.#realtime.disconnectPrivate();\n        this.#tokenStorage.clear();\n        this.#isAuthenticated = false;\n        this.#mainAccountId = null;\n        this.#activeAccountId = null;\n        this.#loginMethod = null;\n        this.#challengeUri = undefined;\n        this.#accountIdentity = null;\n\n        this.#sessionStore.clear();\n\n        this.#notifyStateChange();\n        this.events.emit(\"loggedOut\", undefined);\n    }\n\n    #clearExpiredSessionState(): void {\n        const shouldEmitLoggedOut = this.#isAuthenticated;\n        this.#realtime.disconnectPrivate();\n        this.#tokenStorage.clear();\n        this.#sessionStore.clear();\n        this.#isAuthenticated = false;\n        this.#mainAccountId = null;\n        this.#activeAccountId = null;\n        this.#loginMethod = null;\n        this.#challengeUri = undefined;\n        this.#accountIdentity = null;\n        this.#notifyStateChange();\n        if (shouldEmitLoggedOut) {\n            this.events.emit(\"loggedOut\", undefined);\n        }\n    }\n\n    /**\n     * Returns the remaining lifetime of the stored session token in milliseconds.\n     */\n    getSessionTimeToExpiry(): number {\n        const token = this.#getEnvironmentBoundToken();\n        if (!token) return 0;\n        return getJwtTimeToExpiry(token);\n    }\n\n    /**\n     * Refreshes the active account-signer session and updates persisted auth state.\n     */\n    async refreshSession(params?: {\n        /** Overrides the origin remembered from login. */\n        uri?: string;\n        provider?: \"metamask\" | \"turnkey\" | \"other\";\n        loginMethod?: AuthLoginMethod | null;\n    }): Promise<LoginResult> {\n        if (!this.#isAuthenticated) {\n            throw new AuthenticationError(\"Must be authenticated to refresh session\");\n        }\n\n        const currentSession = this.#getEnvironmentSession();\n        return this.#login(\n            {\n                provider: this.#resolveRefreshProvider(params?.provider),\n                uri: params?.uri,\n                loginMethod: params?.loginMethod ?? this.#loginMethod,\n            },\n            currentSession?.activeAccount,\n        );\n    }\n\n    /**\n     * Switches the active account/subaccount by signing the required account switch flow.\n     */\n    switchAccount(\n        accountId: string,\n        options?: { smartAccountAddress?: string; label?: string },\n    ): { accountId: string; isMain: boolean } {\n        if (!this.#isAuthenticated || !this.#mainAccountId) {\n            throw new AuthenticationError(\"Must be authenticated to switch accounts\");\n        }\n\n        this.#activeAccountId = accountId;\n        const isMain = accountId === this.#mainAccountId;\n\n        this.#sessionStore.setActiveAccount(\n            {\n                accountId,\n                isMain,\n                smartAccountAddress: options?.smartAccountAddress,\n                label: options?.label,\n            },\n            { maxAgeSeconds: this.#getCurrentTokenStorageOptions().maxAgeSeconds },\n        );\n        this.#notifyStateChange();\n\n        return { accountId, isMain };\n    }\n\n    /** Keeps the display-session identity current for the next server render. */\n    syncSessionUsername(username: string | null): void {\n        this.#sessionStore.setUsername(username, {\n            maxAgeSeconds: this.#getCurrentTokenStorageOptions().maxAgeSeconds,\n        });\n    }\n\n    /**\n     * Creates a subaccount for the authenticated account and makes it available to the session state.\n     */\n    async createSubaccount(params: CreateSubaccountParams): Promise<CreateSubaccountResult> {\n        if (!this.#isAuthenticated) {\n            throw new AuthenticationError(\"Must be authenticated to create subaccounts\");\n        }\n\n        if (!this.#subaccounts) {\n            throw new ConfigurationError(\n                \"SubaccountsService not configured. Pass it to constructor or call setSubaccountsService().\",\n            );\n        }\n\n        const { accountSigner, label = \"\" } = params;\n        this.#assertAccountSignerEnvironment(accountSigner);\n\n        const { message } = await this.createWalletChallenge({\n            smartAccountAddress: accountSigner.accountAddress,\n            signerAddress: accountSigner.accountAddress,\n            uri: resolveChallengeUri(params.uri ?? this.#challengeUri),\n            purpose: \"create_subaccount\",\n        });\n        const signature = await accountSigner.signMessage(message);\n\n        const response = await this.#subaccounts.create({\n            label,\n            smartAccountAddress: accountSigner.accountAddress,\n            message,\n            signature,\n        });\n\n        return {\n            subaccountId: response.subaccountId,\n            smartAccountSaltNonce: response.smartAccountSaltNonce,\n            revision: response.revision,\n        };\n    }\n\n    /**\n     * Returns the current account-signer auth state snapshot.\n     */\n    getState(): AuthState {\n        const accountIdentity = this.#accountSigner ?? this.#accountIdentity;\n\n        return {\n            isAuthenticated: this.#isAuthenticated,\n            accountAddress: accountIdentity?.accountAddress ?? null,\n            ownerAddress: accountIdentity?.ownerAddress ?? null,\n            mainAccountId: this.#mainAccountId,\n            activeAccount:\n                this.#activeAccountId && this.#mainAccountId\n                    ? {\n                          accountId: this.#activeAccountId,\n                          isMain: this.#activeAccountId === this.#mainAccountId,\n                          mainAccountId: this.#mainAccountId,\n                          smartAccountAddress: accountIdentity?.accountAddress,\n                      }\n                    : null,\n        };\n    }\n\n    async #resolveAccountSigner(): Promise<AccountSigner | null> {\n        if (this.#accountSigner) {\n            this.#assertAccountSignerEnvironment(this.#accountSigner);\n            return this.#accountSigner;\n        }\n\n        const resolved = await resolveAccountSigner(this.#accountSignerConfig);\n        if (resolved) {\n            this.#assertAccountSignerEnvironment(resolved);\n            this.#accountSigner = resolved;\n            this.#accountIdentity = this.#identityFromSigner(resolved);\n        }\n        return this.#accountSigner;\n    }\n\n    #notifyStateChange(): void {\n        this.events.emit(\"stateChange\", this.getState());\n    }\n\n    #getEnvironmentBoundToken(): string | null {\n        return this.#sessionStore.getEnvironmentBoundToken(this.#tokenStorage);\n    }\n\n    #getCurrentTokenStorageOptions(): AuthTokenStorageSetOptions {\n        const token = this.#tokenStorage.get();\n        if (!token) return { expiresAt: null, maxAgeSeconds: null };\n        return createAuthTokenStorageSetOptions(token);\n    }\n\n    #resolveRefreshProvider(\n        provider?: \"metamask\" | \"turnkey\" | \"other\",\n    ): \"metamask\" | \"turnkey\" | \"other\" {\n        return (\n            provider ?? this.#walletProvider ?? this.#getEnvironmentSession()?.provider ?? \"other\"\n        );\n    }\n\n    #assertAccountSignerEnvironment(accountSigner: AccountSigner): void {\n        assertAccountSigner(accountSigner);\n        if (accountSigner.environmentFingerprint !== this.#environmentFingerprint) {\n            throw new ConfigurationError(\n                \"Account signer environment does not match client environment.\",\n            );\n        }\n    }\n\n    #identityFromSigner(accountSigner: AccountSigner): AccountIdentity {\n        return {\n            accountAddress: accountSigner.accountAddress,\n            ownerAddress: accountSigner.ownerAddress,\n        };\n    }\n\n    #getEnvironmentSession(): SessionData | null {\n        return this.#sessionStore.get();\n    }\n}\n\nfunction resolveChallengeUri(uri: string | undefined): string {\n    const resolved = uri ?? (typeof location === \"undefined\" ? undefined : location.origin);\n    if (!resolved)\n        throw new ConfigurationError(\n            \"Wallet authentication requires a browser origin URI. Pass uri outside a browser.\",\n        );\n    return resolved;\n}\n"],"mappings":";;;;;;;;;;;AAuEA,IAAa,2BAAb,cAA8C,YAAY;CACtD,SAAkB,IAAI,aAAsC;CAE5D;CACA,iBAAuC;CACvC,mBAA2C;CAC3C,mBAAmB;CACnB,iBAAgC;CAChC,mBAAkC;CAClC;CACA,kBAAgE,KAAA;CAChE,eAAuC;CACvC,gBAAoC,KAAA;CACpC;CACA;CACA;CACA;CAEA,YAAY,EACR,YACA,qBACA,aACA,aACA,UACA,cACA,gBASD;EACC,MAAM,YAAY,QAAQ;EAE1B,KAAKA,uBAAuB;EAC5B,KAAKC,0BAA0B,YAAY;EAC3C,KAAKC,eAAe;EACpB,KAAKC,gBAAgB;EACrB,KAAKC,YAAY;EACjB,KAAKC,gBACD,gBACA,IAAI,iBAAiB,EACjB,wBAAwB,YAAY,YACxC,CAAC;CACT;;;;CAKA,sBAAsB,aAAuC;EACzD,KAAKH,eAAe;CACxB;;;;CAKA,iBAAiB,eAA2C;EACxD,IAAI,eAAe,KAAKI,gCAAgC,aAAa;EACrE,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB,gBAAgB,KAAKC,oBAAoB,aAAa,IAAI;EAClF,KAAKC,mBAAmB;CAC5B;;;;CAKA,mBAAyC;EACrC,OAAO,KAAKH;CAChB;;;;CAKA,MAAM,MAAM,SAA6C;EACrD,OAAO,KAAKI,OAAO,OAAO;CAC9B;CAEA,MAAMA,OACF,SACA,uBACoB;EACpB,MAAM,EAAE,UAAU,gBAAgB;EAElC,MAAM,gBAAgB,MAAM,KAAKC,sBAAsB;EAEvD,IAAI,CAAC,eACD,MAAM,IAAI,mBACN,wFACJ;EAGJ,MAAM,sBAAsB,cAAc;EAC1C,MAAM,eAAe,cAAc,gBAAgB,cAAc;EAEjE,MAAM,MAAM,oBAAoB,QAAQ,OAAO,KAAKC,aAAa;EACjE,MAAM,EAAE,YAAY,MAAM,KAAK,sBAAsB;GACjD;GACA,eAAe,cAAc;GAC7B;GACA,SAAS;EACb,CAAC;EACD,MAAM,YAAY,MAAM,cAAc,YAAY,OAAO;EAEzD,MAAM,WAAW,MAAM,KAAK,gBAAgB;GACxC;GACA;GACA;GACA,gBAAgB;EACpB,CAAC;EAED,MAAM,qBAAqB,KAAKC,uBAAuB;EACvD,MAAM,sBACF,eACA,KAAKC,gBACL,oBAAoB,gBACnB,aAAa,aAAa,aAAa;EAE5C,MAAM,eAAe,iCAAiC,SAAS,WAAW;EAC1E,MAAM,gBACF,uBAAuB,kBAAkB,SAAS,YAC5C,wBACA,KAAA;EACV,KAAKV,cAAc,YACf;GACI,aAAa,SAAS;GACtB;GACA;GACA,aAAa;GACb,eAAe;GACf,cAAc;GACd,WAAW,SAAS;GACpB;GACA,UAAU,SAAS,YAAY,KAAA;EACnC,GACA,KAAKF,aACT;EACA,KAAKa,mBAAmB;EACxB,KAAKC,iBAAiB,SAAS;EAC/B,KAAKC,mBAAmB,eAAe,aAAa,SAAS;EAC7D,KAAKC,kBAAkB;EACvB,KAAKJ,eAAe;EACpB,KAAKF,gBAAgB;EACrB,KAAKL,mBAAmB,KAAKC,oBAAoB,aAAa;EAE9D,KAAKC,mBAAmB;EAExB,KAAK,OAAO,KAAK,iBAAiB;GAC9B,WAAW,SAAS;GACpB,UAAU,SAAS;EACvB,CAAC;EAED,MAAM,YAAY,SAAS,4BACrB,IAAI,KACA,OAAO,SAAS,UAAU,OAAO,IAAI,OAChC,SAAS,UAAU,SAAS,KAAK,GAC1C,oBACA,IAAI,KAAK;EAEf,OAAO;GACH,WAAW,SAAS;GACpB,UAAU,SAAS;GACnB;EACJ;CACJ;;;;CAKA,iBAAiB,OAAgC;EAC7C,MAAM,gBAAgB,KAAKU,0BAA0B;EACrD,IAAI,CAAC,iBAAiB,CAAC,WAAW,aAAa,GAAG;EAElD,MAAM,kBAAkB,KAAKN,uBAAuB;EACpD,KAAKK,kBAAkB,iBAAiB,YAAY,KAAKA;EACzD,KAAKJ,eAAe,iBAAiB,eAAe,KAAKA;EAEzD,KAAKC,mBAAmB;EACxB,KAAKC,iBAAiB,MAAM;EAC5B,KAAKC,mBAAmB,MAAM,mBAAmB,MAAM;EACvD,KAAKV,mBAAmB,MAAM,sBACxB;GACI,gBAAgB,MAAM;GACtB,cAAc,MAAM;EACxB,IACA;EAEN,KAAKE,mBAAmB;CAC5B;;;;CAKA,MAAM,iBAA0E;EAC5E,MAAM,gBAAgB,KAAKU,0BAA0B;EAErD,IAAI,CAAC,iBAAiB,CAAC,WAAW,aAAa,GAAG;GAC9C,KAAKC,0BAA0B;GAC/B,OAAO;EACX;EAEA,IAAI;GACA,MAAM,KAAK,MAAM,KAAK,GAAG;GACzB,KAAKL,mBAAmB;GACxB,KAAKC,iBAAiB,GAAG;GAGzB,MAAM,kBAAkB,KAAKH,uBAAuB;GACpD,KAAKK,kBAAkB,iBAAiB,YAAY,KAAKA;GACzD,KAAKJ,eAAe,iBAAiB,eAAe,KAAKA;GACzD,IAAI,CAAC,KAAKG,kBACN,KAAKA,mBAAmB,iBAAiB,eAAe,aAAa,GAAG;GAI5E,IAAI,CAAC,KAAKX,gBAAgB;IACtB,KAAKA,iBAAiB,MAAM,qBAAqB,KAAKP,oBAAoB;IAC1E,IAAI,KAAKO,gBAAgB;KACrB,KAAKD,gCAAgC,KAAKC,cAAc;KACxD,KAAKC,mBAAmB,KAAKC,oBAAoB,KAAKF,cAAc;IACxE;GACJ;GAGA,IAAI,KAAKA,gBAAgB,gBAAgB;IACrC,MAAM,UAAU,KAAKF,cAAc,cAC/B;KACI,UAAU,KAAKc,kBAAkB,KAAKA,kBAAkB;KACxD,aACI,KAAKJ,iBACJ,KAAKI,oBAAoB,aAAa,aAAa;KACxD,eACI,KAAKZ,eAAe,gBAAgB,KAAKA,eAAe;KAC5D,cAAc,KAAKA,eAAe;KAClC,WAAW,GAAG;KACd,UAAU,GAAG,YAAY,KAAA;IAC7B,GACA,EAAE,eAAe,KAAKe,+BAA+B,CAAC,CAAC,cAAc,CACzE;IACA,KAAKH,kBAAkB,QAAQ;IAC/B,KAAKJ,eAAe,QAAQ,eAAe,KAAKA;GACpD;GAEA,KAAKL,mBAAmB;GACxB,OAAO;IAAE,WAAW,GAAG;IAAW,UAAU,GAAG;GAAS;EAC5D,QAAQ;GACJ,KAAKW,0BAA0B;GAC/B,OAAO;EACX;CACJ;;;;CAKA,MAAM,SAAwB;EAC1B,KAAKjB,UAAU,kBAAkB;EACjC,KAAKD,cAAc,MAAM;EACzB,KAAKa,mBAAmB;EACxB,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKH,eAAe;EACpB,KAAKF,gBAAgB,KAAA;EACrB,KAAKL,mBAAmB;EAExB,KAAKH,cAAc,MAAM;EAEzB,KAAKK,mBAAmB;EACxB,KAAK,OAAO,KAAK,aAAa,KAAA,CAAS;CAC3C;CAEA,4BAAkC;EAC9B,MAAM,sBAAsB,KAAKM;EACjC,KAAKZ,UAAU,kBAAkB;EACjC,KAAKD,cAAc,MAAM;EACzB,KAAKE,cAAc,MAAM;EACzB,KAAKW,mBAAmB;EACxB,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKH,eAAe;EACpB,KAAKF,gBAAgB,KAAA;EACrB,KAAKL,mBAAmB;EACxB,KAAKE,mBAAmB;EACxB,IAAI,qBACA,KAAK,OAAO,KAAK,aAAa,KAAA,CAAS;CAE/C;;;;CAKA,yBAAiC;EAC7B,MAAM,QAAQ,KAAKU,0BAA0B;EAC7C,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO,mBAAmB,KAAK;CACnC;;;;CAKA,MAAM,eAAe,QAKI;EACrB,IAAI,CAAC,KAAKJ,kBACN,MAAM,IAAI,oBAAoB,0CAA0C;EAG5E,MAAM,iBAAiB,KAAKF,uBAAuB;EACnD,OAAO,KAAKH,OACR;GACI,UAAU,KAAKY,wBAAwB,QAAQ,QAAQ;GACvD,KAAK,QAAQ;GACb,aAAa,QAAQ,eAAe,KAAKR;EAC7C,GACA,gBAAgB,aACpB;CACJ;;;;CAKA,cACI,WACA,SACsC;EACtC,IAAI,CAAC,KAAKC,oBAAoB,CAAC,KAAKC,gBAChC,MAAM,IAAI,oBAAoB,0CAA0C;EAG5E,KAAKC,mBAAmB;EACxB,MAAM,SAAS,cAAc,KAAKD;EAElC,KAAKZ,cAAc,iBACf;GACI;GACA;GACA,qBAAqB,SAAS;GAC9B,OAAO,SAAS;EACpB,GACA,EAAE,eAAe,KAAKiB,+BAA+B,CAAC,CAAC,cAAc,CACzE;EACA,KAAKZ,mBAAmB;EAExB,OAAO;GAAE;GAAW;EAAO;CAC/B;;CAGA,oBAAoB,UAA+B;EAC/C,KAAKL,cAAc,YAAY,UAAU,EACrC,eAAe,KAAKiB,+BAA+B,CAAC,CAAC,cACzD,CAAC;CACL;;;;CAKA,MAAM,iBAAiB,QAAiE;EACpF,IAAI,CAAC,KAAKN,kBACN,MAAM,IAAI,oBAAoB,6CAA6C;EAG/E,IAAI,CAAC,KAAKd,cACN,MAAM,IAAI,mBACN,4FACJ;EAGJ,MAAM,EAAE,eAAe,QAAQ,OAAO;EACtC,KAAKI,gCAAgC,aAAa;EAElD,MAAM,EAAE,YAAY,MAAM,KAAK,sBAAsB;GACjD,qBAAqB,cAAc;GACnC,eAAe,cAAc;GAC7B,KAAK,oBAAoB,OAAO,OAAO,KAAKO,aAAa;GACzD,SAAS;EACb,CAAC;EACD,MAAM,YAAY,MAAM,cAAc,YAAY,OAAO;EAEzD,MAAM,WAAW,MAAM,KAAKX,aAAa,OAAO;GAC5C;GACA,qBAAqB,cAAc;GACnC;GACA;EACJ,CAAC;EAED,OAAO;GACH,cAAc,SAAS;GACvB,uBAAuB,SAAS;GAChC,UAAU,SAAS;EACvB;CACJ;;;;CAKA,WAAsB;EAClB,MAAM,kBAAkB,KAAKK,kBAAkB,KAAKC;EAEpD,OAAO;GACH,iBAAiB,KAAKQ;GACtB,gBAAgB,iBAAiB,kBAAkB;GACnD,cAAc,iBAAiB,gBAAgB;GAC/C,eAAe,KAAKC;GACpB,eACI,KAAKC,oBAAoB,KAAKD,iBACxB;IACI,WAAW,KAAKC;IAChB,QAAQ,KAAKA,qBAAqB,KAAKD;IACvC,eAAe,KAAKA;IACpB,qBAAqB,iBAAiB;GAC1C,IACA;EACd;CACJ;CAEA,MAAML,wBAAuD;EACzD,IAAI,KAAKL,gBAAgB;GACrB,KAAKD,gCAAgC,KAAKC,cAAc;GACxD,OAAO,KAAKA;EAChB;EAEA,MAAM,WAAW,MAAM,qBAAqB,KAAKP,oBAAoB;EACrE,IAAI,UAAU;GACV,KAAKM,gCAAgC,QAAQ;GAC7C,KAAKC,iBAAiB;GACtB,KAAKC,mBAAmB,KAAKC,oBAAoB,QAAQ;EAC7D;EACA,OAAO,KAAKF;CAChB;CAEA,qBAA2B;EACvB,KAAK,OAAO,KAAK,eAAe,KAAK,SAAS,CAAC;CACnD;CAEA,4BAA2C;EACvC,OAAO,KAAKF,cAAc,yBAAyB,KAAKF,aAAa;CACzE;CAEA,iCAA6D;EACzD,MAAM,QAAQ,KAAKA,cAAc,IAAI;EACrC,IAAI,CAAC,OAAO,OAAO;GAAE,WAAW;GAAM,eAAe;EAAK;EAC1D,OAAO,iCAAiC,KAAK;CACjD;CAEA,wBACI,UACgC;EAChC,OACI,YAAY,KAAKgB,mBAAmB,KAAKL,uBAAuB,CAAC,EAAE,YAAY;CAEvF;CAEA,gCAAgC,eAAoC;EAChE,oBAAoB,aAAa;EACjC,IAAI,cAAc,2BAA2B,KAAKb,yBAC9C,MAAM,IAAI,mBACN,+DACJ;CAER;CAEA,oBAAoB,eAA+C;EAC/D,OAAO;GACH,gBAAgB,cAAc;GAC9B,cAAc,cAAc;EAChC;CACJ;CAEA,yBAA6C;EACzC,OAAO,KAAKI,cAAc,IAAI;CAClC;AACJ;AAEA,SAAS,oBAAoB,KAAiC;CAC1D,MAAM,WAAW,QAAQ,OAAO,aAAa,cAAc,KAAA,IAAY,SAAS;CAChF,IAAI,CAAC,UACD,MAAM,IAAI,mBACN,kFACJ;CACJ,OAAO;AACX"}
+{"version":3,"file":"account-signer-auth.js","names":["#accountSignerConfig","#environmentFingerprint","#subaccounts","#tokenStorage","#realtime","#sessionStore","#assertAccountSignerEnvironment","#accountSigner","#accountIdentity","#identityFromSigner","#notifyStateChange","#login","#resolveAccountSigner","#challengeUri","#getEnvironmentSession","#loginMethod","#isAuthenticated","#mainAccountId","#activeAccountId","#walletProvider","#getEnvironmentBoundToken","#clearExpiredSessionState","#getCurrentTokenStorageOptions","#resolveRefreshProvider"],"sources":["../../../src/services/auth/account-signer-auth.ts"],"sourcesContent":["import { AuthService } from \"./auth.js\";\nimport { AuthenticationError, ConfigurationError } from \"../../shared/errors.js\";\nimport { AuthSessionStore } from \"./session.js\";\nimport type { AccountSigner, AccountSignerConfig, HexAddress } from \"../../account-signer/types.js\";\nimport { assertAccountSigner, resolveAccountSigner } from \"../../account-signer/types.js\";\nimport { EventEmitter } from \"../../utils/event-emitter.js\";\nimport { isJwtValid, getJwtTimeToExpiry } from \"../../utils/jwt.js\";\nimport type { SubaccountsService } from \"../subaccounts/index.js\";\nimport type {\n    AuthState,\n    AuthHydrationData,\n    AuthLoginMethod,\n    SessionData,\n    ActiveAccountInfo,\n} from \"./session.types.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport type { PolyesterEnvironment } from \"../../environment.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\nimport {\n    createAuthTokenStorageSetOptions,\n    type AuthTokenStorage,\n    type AuthTokenStorageSetOptions,\n} from \"./token-storage.js\";\n\nexport interface AccountSignerAuthEvents {\n    authenticated: { accountId: string; username: string };\n    loggedOut: void;\n    error: { code: string; message: string };\n    servicesReady: void;\n    stateChange: AuthState;\n}\n\nexport interface LoginResult {\n    accountId: string;\n    username: string;\n    expiresAt: Date;\n}\n\nexport interface LoginOptions {\n    /**\n     * The wallet provider to use for login.\n     */\n    provider: \"metamask\" | \"turnkey\" | \"other\";\n    /** Browser origin requesting the signature; defaults to location.origin in browsers. Required outside browsers. */\n    uri?: string;\n    loginMethod?: AuthLoginMethod | null;\n}\n\nexport interface CreateSubaccountParams {\n    /** The account signer for the new subaccount (caller derives this, e.g. via Turnkey saltNonce) */\n    accountSigner: AccountSigner;\n    /** Optional human-readable label for this subaccount */\n    label?: string;\n    /** Browser origin requesting the signature; defaults to location.origin in browsers. Required outside browsers. */\n    uri?: string;\n}\n\nexport interface CreateSubaccountResult {\n    subaccountId: string;\n    smartAccountSaltNonce: number;\n    revision: string;\n}\n\ninterface AccountIdentity {\n    accountAddress: HexAddress;\n    ownerAddress?: HexAddress;\n}\n\n/**\n * Coordinates wallet/account-signer authentication, session storage, subaccount selection, and session refresh.\n */\nexport class AccountSignerAuthService extends AuthService {\n    readonly events = new EventEmitter<AccountSignerAuthEvents>();\n\n    #accountSignerConfig: AccountSignerConfig | undefined;\n    #accountSigner: AccountSigner | null = null;\n    #accountIdentity: AccountIdentity | null = null;\n    #isAuthenticated = false;\n    #mainAccountId: string | null = null;\n    #activeAccountId: string | null = null;\n    #subaccounts: SubaccountsService;\n    #walletProvider: \"metamask\" | \"turnkey\" | \"other\" | undefined = undefined;\n    #loginMethod: AuthLoginMethod | null = null;\n    #challengeUri: string | undefined = undefined;\n    #environmentFingerprint: string;\n    #tokenStorage: AuthTokenStorage;\n    #sessionStore: AuthSessionStore;\n    #realtime: PolyesterRealtime;\n\n    constructor({\n        transports,\n        accountSignerConfig,\n        environment,\n        subaccounts,\n        realtime,\n        tokenStorage,\n        sessionStore,\n    }: {\n        transports: AuthAndPublicApiTransports;\n        accountSignerConfig?: AccountSignerConfig;\n        environment: PolyesterEnvironment;\n        subaccounts: SubaccountsService;\n        realtime: PolyesterRealtime;\n        tokenStorage: AuthTokenStorage;\n        sessionStore?: AuthSessionStore;\n    }) {\n        super(transports, realtime);\n\n        this.#accountSignerConfig = accountSignerConfig;\n        this.#environmentFingerprint = environment.fingerprint;\n        this.#subaccounts = subaccounts;\n        this.#tokenStorage = tokenStorage;\n        this.#realtime = realtime;\n        this.#sessionStore =\n            sessionStore ??\n            new AuthSessionStore({\n                environmentFingerprint: environment.fingerprint,\n            });\n    }\n\n    /**\n     * Attaches the subaccounts service used when creating a subaccount during authenticated flows.\n     */\n    setSubaccountsService(subaccounts: SubaccountsService): void {\n        this.#subaccounts = subaccounts;\n    }\n\n    /**\n     * Sets the account signer used to sign login and account-switch challenges.\n     */\n    setAccountSigner(accountSigner: AccountSigner | null): void {\n        if (accountSigner) this.#assertAccountSignerEnvironment(accountSigner);\n        this.#accountSigner = accountSigner;\n        this.#accountIdentity = accountSigner ? this.#identityFromSigner(accountSigner) : null;\n        this.#notifyStateChange();\n    }\n\n    /**\n     * Returns the active account signer, throwing if one has not been configured.\n     */\n    getAccountSigner(): AccountSigner | null {\n        return this.#accountSigner;\n    }\n\n    /**\n     * Signs a server-issued SIWE message with the configured account signer, exchanges it for a session token, and stores the hydrated account/subaccount session state.\n     */\n    async login(options: LoginOptions): Promise<LoginResult> {\n        return this.#login(options);\n    }\n\n    async #login(\n        options: LoginOptions,\n        previousActiveAccount?: ActiveAccountInfo,\n    ): Promise<LoginResult> {\n        const { provider, loginMethod } = options;\n\n        const accountSigner = await this.#resolveAccountSigner();\n\n        if (!accountSigner) {\n            throw new ConfigurationError(\n                \"No account signer configured. Call setAccountSigner() or pass accountSigner in config.\",\n            );\n        }\n\n        const smartAccountAddress = accountSigner.accountAddress;\n        const ownerAddress = accountSigner.ownerAddress ?? accountSigner.accountAddress;\n\n        const uri = resolveChallengeUri(options.uri ?? this.#challengeUri);\n        const { message } = await this.createWalletChallenge({\n            smartAccountAddress,\n            signerAddress: ownerAddress,\n            uri,\n            purpose: \"login\",\n        });\n        const signature = await accountSigner.signMessage(message);\n\n        const response = await this.loginWithWallet({\n            smartAccountAddress,\n            message,\n            signature,\n            walletProvider: provider,\n        });\n\n        const environmentSession = this.#getEnvironmentSession();\n        const resolvedLoginMethod =\n            loginMethod ??\n            this.#loginMethod ??\n            environmentSession?.loginMethod ??\n            (provider === \"metamask\" ? \"metamask\" : null);\n\n        const tokenOptions = createAuthTokenStorageSetOptions(response.accessToken);\n        const activeAccount =\n            previousActiveAccount?.mainAccountId === response.accountId\n                ? previousActiveAccount\n                : undefined;\n        this.#sessionStore.commitLogin(\n            {\n                accessToken: response.accessToken,\n                tokenOptions,\n                provider,\n                loginMethod: resolvedLoginMethod,\n                primaryWallet: ownerAddress,\n                smartAccount: smartAccountAddress,\n                accountId: response.accountId,\n                activeAccount,\n                username: response.username ?? undefined,\n            },\n            this.#tokenStorage,\n        );\n        this.#isAuthenticated = true;\n        this.#mainAccountId = response.accountId;\n        this.#activeAccountId = activeAccount?.accountId ?? response.accountId;\n        this.#walletProvider = provider;\n        this.#loginMethod = resolvedLoginMethod;\n        this.#challengeUri = uri;\n        this.#accountIdentity = this.#identityFromSigner(accountSigner);\n\n        this.#notifyStateChange();\n\n        this.events.emit(\"authenticated\", {\n            accountId: response.accountId,\n            username: response.username,\n        });\n\n        const expiresAt = response.expiresAt\n            ? new Date(\n                  Number(response.expiresAt.seconds) * 1000 +\n                      (response.expiresAt.nanos ?? 0) / 1_000_000,\n              )\n            : new Date();\n\n        return {\n            accountId: response.accountId,\n            username: response.username,\n            expiresAt,\n        };\n    }\n\n    /**\n     * Builds auth state from a session token and optional active account override.\n     */\n    hydrateAuthState(state: AuthHydrationData): void {\n        const existingToken = this.#getEnvironmentBoundToken();\n        if (!existingToken || !isJwtValid(existingToken)) return;\n\n        const existingSession = this.#getEnvironmentSession();\n        this.#walletProvider = existingSession?.provider ?? this.#walletProvider;\n        this.#loginMethod = existingSession?.loginMethod ?? this.#loginMethod;\n\n        this.#isAuthenticated = true;\n        this.#mainAccountId = state.mainAccountId;\n        this.#activeAccountId = state.activeAccountId ?? state.mainAccountId;\n        this.#accountIdentity = state.smartAccountAddress\n            ? {\n                  accountAddress: state.smartAccountAddress,\n                  ownerAddress: state.ownerAddress,\n              }\n            : null;\n\n        this.#notifyStateChange();\n    }\n\n    /**\n     * Loads the stored token, validates that it still belongs to this environment, and restores auth state when possible.\n     */\n    async restoreSession(): Promise<{ accountId: string; username: string } | null> {\n        const existingToken = this.#getEnvironmentBoundToken();\n\n        if (!existingToken || !isJwtValid(existingToken)) {\n            this.#clearExpiredSessionState();\n            return null;\n        }\n\n        try {\n            const me = await this.me();\n            this.#isAuthenticated = true;\n            this.#mainAccountId = me.accountId;\n\n            // preserve active account if already set (e.g. via hydration), otherwise use main\n            const existingSession = this.#getEnvironmentSession();\n            this.#walletProvider = existingSession?.provider ?? this.#walletProvider;\n            this.#loginMethod = existingSession?.loginMethod ?? this.#loginMethod;\n            if (!this.#activeAccountId) {\n                this.#activeAccountId = existingSession?.activeAccount?.accountId ?? me.accountId;\n            }\n\n            // use existing account signer if set, otherwise try to resolve from config\n            if (!this.#accountSigner) {\n                this.#accountSigner = await resolveAccountSigner(this.#accountSignerConfig);\n                if (this.#accountSigner) {\n                    this.#assertAccountSignerEnvironment(this.#accountSigner);\n                    this.#accountIdentity = this.#identityFromSigner(this.#accountSigner);\n                }\n            }\n\n            // keep the display session available for SSR hydration\n            if (this.#accountSigner?.accountAddress) {\n                const session = this.#sessionStore.ensureSession(\n                    {\n                        provider: this.#walletProvider ? this.#walletProvider : \"other\",\n                        loginMethod:\n                            this.#loginMethod ??\n                            (this.#walletProvider === \"metamask\" ? \"metamask\" : null),\n                        primaryWallet:\n                            this.#accountSigner.ownerAddress ?? this.#accountSigner.accountAddress,\n                        smartAccount: this.#accountSigner.accountAddress,\n                        accountId: me.accountId,\n                        username: me.username ?? undefined,\n                    },\n                    { maxAgeSeconds: this.#getCurrentTokenStorageOptions().maxAgeSeconds },\n                );\n                this.#walletProvider = session.provider;\n                this.#loginMethod = session.loginMethod ?? this.#loginMethod;\n            }\n\n            this.#notifyStateChange();\n            return { accountId: me.accountId, username: me.username };\n        } catch {\n            this.#clearExpiredSessionState();\n            return null;\n        }\n    }\n\n    /**\n     * Clears stored auth state and removes the persisted auth token.\n     */\n    async logout(): Promise<void> {\n        this.#realtime.disconnectPrivate();\n        this.#tokenStorage.clear();\n        this.#isAuthenticated = false;\n        this.#mainAccountId = null;\n        this.#activeAccountId = null;\n        this.#loginMethod = null;\n        this.#challengeUri = undefined;\n        this.#accountIdentity = null;\n\n        this.#sessionStore.clear();\n\n        this.#notifyStateChange();\n        this.events.emit(\"loggedOut\", undefined);\n    }\n\n    #clearExpiredSessionState(): void {\n        const shouldEmitLoggedOut = this.#isAuthenticated;\n        this.#realtime.disconnectPrivate();\n        this.#tokenStorage.clear();\n        this.#sessionStore.clear();\n        this.#isAuthenticated = false;\n        this.#mainAccountId = null;\n        this.#activeAccountId = null;\n        this.#loginMethod = null;\n        this.#challengeUri = undefined;\n        this.#accountIdentity = null;\n        this.#notifyStateChange();\n        if (shouldEmitLoggedOut) {\n            this.events.emit(\"loggedOut\", undefined);\n        }\n    }\n\n    /**\n     * Returns the remaining lifetime of the stored session token in milliseconds.\n     */\n    getSessionTimeToExpiry(): number {\n        const token = this.#getEnvironmentBoundToken();\n        if (!token) return 0;\n        return getJwtTimeToExpiry(token);\n    }\n\n    /**\n     * Refreshes the active account-signer session and updates persisted auth state.\n     */\n    async refreshSession(params?: {\n        /** Overrides the origin remembered from login. */\n        uri?: string;\n        provider?: \"metamask\" | \"turnkey\" | \"other\";\n        loginMethod?: AuthLoginMethod | null;\n    }): Promise<LoginResult> {\n        if (!this.#isAuthenticated) {\n            throw new AuthenticationError(\"Must be authenticated to refresh session\");\n        }\n\n        const currentSession = this.#getEnvironmentSession();\n        return this.#login(\n            {\n                provider: this.#resolveRefreshProvider(params?.provider),\n                uri: params?.uri,\n                loginMethod: params?.loginMethod ?? this.#loginMethod,\n            },\n            currentSession?.activeAccount,\n        );\n    }\n\n    /**\n     * Switches the active account/subaccount by signing the required account switch flow.\n     */\n    switchAccount(\n        accountId: string,\n        options?: { smartAccountAddress?: string; label?: string },\n    ): { accountId: string; isMain: boolean } {\n        if (!this.#isAuthenticated || !this.#mainAccountId) {\n            throw new AuthenticationError(\"Must be authenticated to switch accounts\");\n        }\n\n        this.#activeAccountId = accountId;\n        const isMain = accountId === this.#mainAccountId;\n\n        this.#sessionStore.setActiveAccount(\n            {\n                accountId,\n                isMain,\n                smartAccountAddress: options?.smartAccountAddress,\n                label: options?.label,\n            },\n            { maxAgeSeconds: this.#getCurrentTokenStorageOptions().maxAgeSeconds },\n        );\n        this.#notifyStateChange();\n\n        return { accountId, isMain };\n    }\n\n    /** Keeps the display-session identity current for the next server render. */\n    syncSessionUsername(username: string | null): void {\n        this.#sessionStore.setUsername(username, {\n            maxAgeSeconds: this.#getCurrentTokenStorageOptions().maxAgeSeconds,\n        });\n    }\n\n    /**\n     * Creates a subaccount for the authenticated account and makes it available to the session state.\n     */\n    async createSubaccount(params: CreateSubaccountParams): Promise<CreateSubaccountResult> {\n        if (!this.#isAuthenticated) {\n            throw new AuthenticationError(\"Must be authenticated to create subaccounts\");\n        }\n\n        if (!this.#subaccounts) {\n            throw new ConfigurationError(\n                \"SubaccountsService not configured. Pass it to constructor or call setSubaccountsService().\",\n            );\n        }\n\n        const { accountSigner, label = \"\" } = params;\n        this.#assertAccountSignerEnvironment(accountSigner);\n\n        const { message } = await this.createWalletChallenge({\n            smartAccountAddress: accountSigner.accountAddress,\n            signerAddress: accountSigner.accountAddress,\n            uri: resolveChallengeUri(params.uri ?? this.#challengeUri),\n            purpose: \"create_subaccount\",\n        });\n        const signature = await accountSigner.signMessage(message);\n\n        const response = await this.#subaccounts.create({\n            label,\n            smartAccountAddress: accountSigner.accountAddress,\n            message,\n            signature,\n        });\n\n        return {\n            subaccountId: response.subaccountId,\n            smartAccountSaltNonce: response.smartAccountSaltNonce,\n            revision: response.revision,\n        };\n    }\n\n    /**\n     * Returns the current account-signer auth state snapshot.\n     */\n    getState(): AuthState {\n        const accountIdentity = this.#accountSigner ?? this.#accountIdentity;\n\n        return {\n            isAuthenticated: this.#isAuthenticated,\n            accountAddress: accountIdentity?.accountAddress ?? null,\n            ownerAddress: accountIdentity?.ownerAddress ?? null,\n            mainAccountId: this.#mainAccountId,\n            activeAccount:\n                this.#activeAccountId && this.#mainAccountId\n                    ? {\n                          accountId: this.#activeAccountId,\n                          isMain: this.#activeAccountId === this.#mainAccountId,\n                          mainAccountId: this.#mainAccountId,\n                          smartAccountAddress: accountIdentity?.accountAddress,\n                      }\n                    : null,\n        };\n    }\n\n    async #resolveAccountSigner(): Promise<AccountSigner | null> {\n        if (this.#accountSigner) {\n            this.#assertAccountSignerEnvironment(this.#accountSigner);\n            return this.#accountSigner;\n        }\n\n        const resolved = await resolveAccountSigner(this.#accountSignerConfig);\n        if (resolved) {\n            this.#assertAccountSignerEnvironment(resolved);\n            this.#accountSigner = resolved;\n            this.#accountIdentity = this.#identityFromSigner(resolved);\n        }\n        return this.#accountSigner;\n    }\n\n    #notifyStateChange(): void {\n        this.events.emit(\"stateChange\", this.getState());\n    }\n\n    #getEnvironmentBoundToken(): string | null {\n        return this.#sessionStore.getEnvironmentBoundToken(this.#tokenStorage);\n    }\n\n    #getCurrentTokenStorageOptions(): AuthTokenStorageSetOptions {\n        const token = this.#tokenStorage.get();\n        if (!token) return { expiresAt: null, maxAgeSeconds: null };\n        return createAuthTokenStorageSetOptions(token);\n    }\n\n    #resolveRefreshProvider(\n        provider?: \"metamask\" | \"turnkey\" | \"other\",\n    ): \"metamask\" | \"turnkey\" | \"other\" {\n        return (\n            provider ?? this.#walletProvider ?? this.#getEnvironmentSession()?.provider ?? \"other\"\n        );\n    }\n\n    #assertAccountSignerEnvironment(accountSigner: AccountSigner): void {\n        assertAccountSigner(accountSigner);\n        if (accountSigner.environmentFingerprint !== this.#environmentFingerprint) {\n            throw new ConfigurationError(\n                \"Account signer environment does not match client environment.\",\n            );\n        }\n    }\n\n    #identityFromSigner(accountSigner: AccountSigner): AccountIdentity {\n        return {\n            accountAddress: accountSigner.accountAddress,\n            ownerAddress: accountSigner.ownerAddress,\n        };\n    }\n\n    #getEnvironmentSession(): SessionData | null {\n        return this.#sessionStore.get();\n    }\n}\n\nfunction resolveChallengeUri(uri: string | undefined): string {\n    const resolved = uri ?? (typeof location === \"undefined\" ? undefined : location.origin);\n    if (!resolved)\n        throw new ConfigurationError(\n            \"Wallet authentication requires a browser origin URI. Pass uri outside a browser.\",\n        );\n    return resolved;\n}\n"],"mappings":";;;;;;;;;;;AAuEA,IAAa,2BAAb,cAA8C,YAAY;CACtD,SAAkB,IAAI,aAAsC;CAE5D;CACA,iBAAuC;CACvC,mBAA2C;CAC3C,mBAAmB;CACnB,iBAAgC;CAChC,mBAAkC;CAClC;CACA,kBAAgE,KAAA;CAChE,eAAuC;CACvC,gBAAoC,KAAA;CACpC;CACA;CACA;CACA;CAEA,YAAY,EACR,YACA,qBACA,aACA,aACA,UACA,cACA,gBASD;EACC,MAAM,YAAY,QAAQ;EAE1B,KAAKA,uBAAuB;EAC5B,KAAKC,0BAA0B,YAAY;EAC3C,KAAKC,eAAe;EACpB,KAAKC,gBAAgB;EACrB,KAAKC,YAAY;EACjB,KAAKC,gBACD,gBACA,IAAI,iBAAiB,EACjB,wBAAwB,YAAY,YACxC,CAAC;CACT;;;;CAKA,sBAAsB,aAAuC;EACzD,KAAKH,eAAe;CACxB;;;;CAKA,iBAAiB,eAA2C;EACxD,IAAI,eAAe,KAAKI,gCAAgC,aAAa;EACrE,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB,gBAAgB,KAAKC,oBAAoB,aAAa,IAAI;EAClF,KAAKC,mBAAmB;CAC5B;;;;CAKA,mBAAyC;EACrC,OAAO,KAAKH;CAChB;;;;CAKA,MAAM,MAAM,SAA6C;EACrD,OAAO,KAAKI,OAAO,OAAO;CAC9B;CAEA,MAAMA,OACF,SACA,uBACoB;EACpB,MAAM,EAAE,UAAU,gBAAgB;EAElC,MAAM,gBAAgB,MAAM,KAAKC,sBAAsB;EAEvD,IAAI,CAAC,eACD,MAAM,IAAI,mBACN,wFACJ;EAGJ,MAAM,sBAAsB,cAAc;EAC1C,MAAM,eAAe,cAAc,gBAAgB,cAAc;EAEjE,MAAM,MAAM,oBAAoB,QAAQ,OAAO,KAAKC,aAAa;EACjE,MAAM,EAAE,YAAY,MAAM,KAAK,sBAAsB;GACjD;GACA,eAAe;GACf;GACA,SAAS;EACb,CAAC;EACD,MAAM,YAAY,MAAM,cAAc,YAAY,OAAO;EAEzD,MAAM,WAAW,MAAM,KAAK,gBAAgB;GACxC;GACA;GACA;GACA,gBAAgB;EACpB,CAAC;EAED,MAAM,qBAAqB,KAAKC,uBAAuB;EACvD,MAAM,sBACF,eACA,KAAKC,gBACL,oBAAoB,gBACnB,aAAa,aAAa,aAAa;EAE5C,MAAM,eAAe,iCAAiC,SAAS,WAAW;EAC1E,MAAM,gBACF,uBAAuB,kBAAkB,SAAS,YAC5C,wBACA,KAAA;EACV,KAAKV,cAAc,YACf;GACI,aAAa,SAAS;GACtB;GACA;GACA,aAAa;GACb,eAAe;GACf,cAAc;GACd,WAAW,SAAS;GACpB;GACA,UAAU,SAAS,YAAY,KAAA;EACnC,GACA,KAAKF,aACT;EACA,KAAKa,mBAAmB;EACxB,KAAKC,iBAAiB,SAAS;EAC/B,KAAKC,mBAAmB,eAAe,aAAa,SAAS;EAC7D,KAAKC,kBAAkB;EACvB,KAAKJ,eAAe;EACpB,KAAKF,gBAAgB;EACrB,KAAKL,mBAAmB,KAAKC,oBAAoB,aAAa;EAE9D,KAAKC,mBAAmB;EAExB,KAAK,OAAO,KAAK,iBAAiB;GAC9B,WAAW,SAAS;GACpB,UAAU,SAAS;EACvB,CAAC;EAED,MAAM,YAAY,SAAS,4BACrB,IAAI,KACA,OAAO,SAAS,UAAU,OAAO,IAAI,OAChC,SAAS,UAAU,SAAS,KAAK,GAC1C,oBACA,IAAI,KAAK;EAEf,OAAO;GACH,WAAW,SAAS;GACpB,UAAU,SAAS;GACnB;EACJ;CACJ;;;;CAKA,iBAAiB,OAAgC;EAC7C,MAAM,gBAAgB,KAAKU,0BAA0B;EACrD,IAAI,CAAC,iBAAiB,CAAC,WAAW,aAAa,GAAG;EAElD,MAAM,kBAAkB,KAAKN,uBAAuB;EACpD,KAAKK,kBAAkB,iBAAiB,YAAY,KAAKA;EACzD,KAAKJ,eAAe,iBAAiB,eAAe,KAAKA;EAEzD,KAAKC,mBAAmB;EACxB,KAAKC,iBAAiB,MAAM;EAC5B,KAAKC,mBAAmB,MAAM,mBAAmB,MAAM;EACvD,KAAKV,mBAAmB,MAAM,sBACxB;GACI,gBAAgB,MAAM;GACtB,cAAc,MAAM;EACxB,IACA;EAEN,KAAKE,mBAAmB;CAC5B;;;;CAKA,MAAM,iBAA0E;EAC5E,MAAM,gBAAgB,KAAKU,0BAA0B;EAErD,IAAI,CAAC,iBAAiB,CAAC,WAAW,aAAa,GAAG;GAC9C,KAAKC,0BAA0B;GAC/B,OAAO;EACX;EAEA,IAAI;GACA,MAAM,KAAK,MAAM,KAAK,GAAG;GACzB,KAAKL,mBAAmB;GACxB,KAAKC,iBAAiB,GAAG;GAGzB,MAAM,kBAAkB,KAAKH,uBAAuB;GACpD,KAAKK,kBAAkB,iBAAiB,YAAY,KAAKA;GACzD,KAAKJ,eAAe,iBAAiB,eAAe,KAAKA;GACzD,IAAI,CAAC,KAAKG,kBACN,KAAKA,mBAAmB,iBAAiB,eAAe,aAAa,GAAG;GAI5E,IAAI,CAAC,KAAKX,gBAAgB;IACtB,KAAKA,iBAAiB,MAAM,qBAAqB,KAAKP,oBAAoB;IAC1E,IAAI,KAAKO,gBAAgB;KACrB,KAAKD,gCAAgC,KAAKC,cAAc;KACxD,KAAKC,mBAAmB,KAAKC,oBAAoB,KAAKF,cAAc;IACxE;GACJ;GAGA,IAAI,KAAKA,gBAAgB,gBAAgB;IACrC,MAAM,UAAU,KAAKF,cAAc,cAC/B;KACI,UAAU,KAAKc,kBAAkB,KAAKA,kBAAkB;KACxD,aACI,KAAKJ,iBACJ,KAAKI,oBAAoB,aAAa,aAAa;KACxD,eACI,KAAKZ,eAAe,gBAAgB,KAAKA,eAAe;KAC5D,cAAc,KAAKA,eAAe;KAClC,WAAW,GAAG;KACd,UAAU,GAAG,YAAY,KAAA;IAC7B,GACA,EAAE,eAAe,KAAKe,+BAA+B,CAAC,CAAC,cAAc,CACzE;IACA,KAAKH,kBAAkB,QAAQ;IAC/B,KAAKJ,eAAe,QAAQ,eAAe,KAAKA;GACpD;GAEA,KAAKL,mBAAmB;GACxB,OAAO;IAAE,WAAW,GAAG;IAAW,UAAU,GAAG;GAAS;EAC5D,QAAQ;GACJ,KAAKW,0BAA0B;GAC/B,OAAO;EACX;CACJ;;;;CAKA,MAAM,SAAwB;EAC1B,KAAKjB,UAAU,kBAAkB;EACjC,KAAKD,cAAc,MAAM;EACzB,KAAKa,mBAAmB;EACxB,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKH,eAAe;EACpB,KAAKF,gBAAgB,KAAA;EACrB,KAAKL,mBAAmB;EAExB,KAAKH,cAAc,MAAM;EAEzB,KAAKK,mBAAmB;EACxB,KAAK,OAAO,KAAK,aAAa,KAAA,CAAS;CAC3C;CAEA,4BAAkC;EAC9B,MAAM,sBAAsB,KAAKM;EACjC,KAAKZ,UAAU,kBAAkB;EACjC,KAAKD,cAAc,MAAM;EACzB,KAAKE,cAAc,MAAM;EACzB,KAAKW,mBAAmB;EACxB,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKH,eAAe;EACpB,KAAKF,gBAAgB,KAAA;EACrB,KAAKL,mBAAmB;EACxB,KAAKE,mBAAmB;EACxB,IAAI,qBACA,KAAK,OAAO,KAAK,aAAa,KAAA,CAAS;CAE/C;;;;CAKA,yBAAiC;EAC7B,MAAM,QAAQ,KAAKU,0BAA0B;EAC7C,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO,mBAAmB,KAAK;CACnC;;;;CAKA,MAAM,eAAe,QAKI;EACrB,IAAI,CAAC,KAAKJ,kBACN,MAAM,IAAI,oBAAoB,0CAA0C;EAG5E,MAAM,iBAAiB,KAAKF,uBAAuB;EACnD,OAAO,KAAKH,OACR;GACI,UAAU,KAAKY,wBAAwB,QAAQ,QAAQ;GACvD,KAAK,QAAQ;GACb,aAAa,QAAQ,eAAe,KAAKR;EAC7C,GACA,gBAAgB,aACpB;CACJ;;;;CAKA,cACI,WACA,SACsC;EACtC,IAAI,CAAC,KAAKC,oBAAoB,CAAC,KAAKC,gBAChC,MAAM,IAAI,oBAAoB,0CAA0C;EAG5E,KAAKC,mBAAmB;EACxB,MAAM,SAAS,cAAc,KAAKD;EAElC,KAAKZ,cAAc,iBACf;GACI;GACA;GACA,qBAAqB,SAAS;GAC9B,OAAO,SAAS;EACpB,GACA,EAAE,eAAe,KAAKiB,+BAA+B,CAAC,CAAC,cAAc,CACzE;EACA,KAAKZ,mBAAmB;EAExB,OAAO;GAAE;GAAW;EAAO;CAC/B;;CAGA,oBAAoB,UAA+B;EAC/C,KAAKL,cAAc,YAAY,UAAU,EACrC,eAAe,KAAKiB,+BAA+B,CAAC,CAAC,cACzD,CAAC;CACL;;;;CAKA,MAAM,iBAAiB,QAAiE;EACpF,IAAI,CAAC,KAAKN,kBACN,MAAM,IAAI,oBAAoB,6CAA6C;EAG/E,IAAI,CAAC,KAAKd,cACN,MAAM,IAAI,mBACN,4FACJ;EAGJ,MAAM,EAAE,eAAe,QAAQ,OAAO;EACtC,KAAKI,gCAAgC,aAAa;EAElD,MAAM,EAAE,YAAY,MAAM,KAAK,sBAAsB;GACjD,qBAAqB,cAAc;GACnC,eAAe,cAAc;GAC7B,KAAK,oBAAoB,OAAO,OAAO,KAAKO,aAAa;GACzD,SAAS;EACb,CAAC;EACD,MAAM,YAAY,MAAM,cAAc,YAAY,OAAO;EAEzD,MAAM,WAAW,MAAM,KAAKX,aAAa,OAAO;GAC5C;GACA,qBAAqB,cAAc;GACnC;GACA;EACJ,CAAC;EAED,OAAO;GACH,cAAc,SAAS;GACvB,uBAAuB,SAAS;GAChC,UAAU,SAAS;EACvB;CACJ;;;;CAKA,WAAsB;EAClB,MAAM,kBAAkB,KAAKK,kBAAkB,KAAKC;EAEpD,OAAO;GACH,iBAAiB,KAAKQ;GACtB,gBAAgB,iBAAiB,kBAAkB;GACnD,cAAc,iBAAiB,gBAAgB;GAC/C,eAAe,KAAKC;GACpB,eACI,KAAKC,oBAAoB,KAAKD,iBACxB;IACI,WAAW,KAAKC;IAChB,QAAQ,KAAKA,qBAAqB,KAAKD;IACvC,eAAe,KAAKA;IACpB,qBAAqB,iBAAiB;GAC1C,IACA;EACd;CACJ;CAEA,MAAML,wBAAuD;EACzD,IAAI,KAAKL,gBAAgB;GACrB,KAAKD,gCAAgC,KAAKC,cAAc;GACxD,OAAO,KAAKA;EAChB;EAEA,MAAM,WAAW,MAAM,qBAAqB,KAAKP,oBAAoB;EACrE,IAAI,UAAU;GACV,KAAKM,gCAAgC,QAAQ;GAC7C,KAAKC,iBAAiB;GACtB,KAAKC,mBAAmB,KAAKC,oBAAoB,QAAQ;EAC7D;EACA,OAAO,KAAKF;CAChB;CAEA,qBAA2B;EACvB,KAAK,OAAO,KAAK,eAAe,KAAK,SAAS,CAAC;CACnD;CAEA,4BAA2C;EACvC,OAAO,KAAKF,cAAc,yBAAyB,KAAKF,aAAa;CACzE;CAEA,iCAA6D;EACzD,MAAM,QAAQ,KAAKA,cAAc,IAAI;EACrC,IAAI,CAAC,OAAO,OAAO;GAAE,WAAW;GAAM,eAAe;EAAK;EAC1D,OAAO,iCAAiC,KAAK;CACjD;CAEA,wBACI,UACgC;EAChC,OACI,YAAY,KAAKgB,mBAAmB,KAAKL,uBAAuB,CAAC,EAAE,YAAY;CAEvF;CAEA,gCAAgC,eAAoC;EAChE,oBAAoB,aAAa;EACjC,IAAI,cAAc,2BAA2B,KAAKb,yBAC9C,MAAM,IAAI,mBACN,+DACJ;CAER;CAEA,oBAAoB,eAA+C;EAC/D,OAAO;GACH,gBAAgB,cAAc;GAC9B,cAAc,cAAc;EAChC;CACJ;CAEA,yBAA6C;EACzC,OAAO,KAAKI,cAAc,IAAI;CAClC;AACJ;AAEA,SAAS,oBAAoB,KAAiC;CAC1D,MAAM,WAAW,QAAQ,OAAO,aAAa,cAAc,KAAA,IAAY,SAAS;CAChF,IAAI,CAAC,UACD,MAAM,IAAI,mBACN,kFACJ;CACJ,OAAO;AACX"}

package/dist/services/candles/candles.schemas.d.ts

@@ -11,7 +11,7 @@ type TimestampInit = {
 };
 declare function createCandleRowSchema(scales: SdkScales): v.SchemaWithPipe<readonly [v.ObjectSchema<{
   readonly symbolId: v.NumberSchema<undefined>;
-  readonly timeframe: v.SchemaWithPipe<readonly [v.EnumSchema<typeof Timeframe$1, undefined>, v.TransformAction<Timeframe$1, DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">>]>;
+  readonly timeframe: v.SchemaWithPipe<readonly [v.EnumSchema<typeof Timeframe$1, undefined>, v.TransformAction<Timeframe$1, DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">>]>;
   readonly tsSec: v.BigintSchema<undefined>;
   readonly open: v.BigintSchema<undefined>;
   readonly high: v.BigintSchema<undefined>;
@@ -22,7 +22,7 @@ declare function createCandleRowSchema(scales: SdkScales): v.SchemaWithPipe<read
   readonly isClosed: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
 }, undefined>, v.TransformAction<{
   symbolId: number;
-  timeframe: DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">;
+  timeframe: DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">;
   tsSec: bigint;
   open: bigint;
   high: bigint;
@@ -33,7 +33,7 @@ declare function createCandleRowSchema(scales: SdkScales): v.SchemaWithPipe<read
   isClosed: boolean;
 }, {
   symbolId: number;
-  timeframe: DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">;
+  timeframe: DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">;
   time: number;
   open: string;
   high: string;
@@ -46,7 +46,7 @@ declare function createCandleRowSchema(scales: SdkScales): v.SchemaWithPipe<read
 declare const createCandleRowIntSchema: typeof createCandleRowSchema;
 declare function createCandleColumnarSchema(scales: SdkScales): v.SchemaWithPipe<readonly [v.ObjectSchema<{
   readonly symbolId: v.NumberSchema<undefined>;
-  readonly timeframe: v.SchemaWithPipe<readonly [v.EnumSchema<typeof Timeframe$1, undefined>, v.TransformAction<Timeframe$1, DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">>]>;
+  readonly timeframe: v.SchemaWithPipe<readonly [v.EnumSchema<typeof Timeframe$1, undefined>, v.TransformAction<Timeframe$1, DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">>]>;
   readonly tsSec: v.ArraySchema<v.BigintSchema<undefined>, undefined>;
   readonly open: v.ArraySchema<v.BigintSchema<undefined>, undefined>;
   readonly high: v.ArraySchema<v.BigintSchema<undefined>, undefined>;
@@ -63,7 +63,7 @@ declare function createCandleColumnarSchema(scales: SdkScales): v.SchemaWithPipe
   readonly nextPageToken: v.OptionalSchema<v.StringSchema<undefined>, "">;
 }, undefined>, v.TransformAction<{
   symbolId: number;
-  timeframe: DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">;
+  timeframe: DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">;
   tsSec: bigint[];
   open: bigint[];
   high: bigint[];
@@ -80,7 +80,7 @@ declare function createCandleColumnarSchema(scales: SdkScales): v.SchemaWithPipe
   nextPageToken: string;
 }, {
   symbolId: number;
-  timeframe: DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">;
+  timeframe: DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">;
   time: number[];
   open: string[];
   high: string[];
@@ -100,7 +100,7 @@ declare function createCandleColumnarSchema(scales: SdkScales): v.SchemaWithPipe
 }>]>;
 declare function createCandleColumnarIntSchema(scales: SdkScales): v.SchemaWithPipe<readonly [v.ObjectSchema<{
   readonly symbolId: v.NumberSchema<undefined>;
-  readonly timeframe: v.SchemaWithPipe<readonly [v.EnumSchema<typeof Timeframe$1, undefined>, v.TransformAction<Timeframe$1, DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">>]>;
+  readonly timeframe: v.SchemaWithPipe<readonly [v.EnumSchema<typeof Timeframe$1, undefined>, v.TransformAction<Timeframe$1, DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">>]>;
   readonly tsSec: v.ArraySchema<v.BigintSchema<undefined>, undefined>;
   readonly open: v.ArraySchema<v.BigintSchema<undefined>, undefined>;
   readonly high: v.ArraySchema<v.BigintSchema<undefined>, undefined>;
@@ -117,7 +117,7 @@ declare function createCandleColumnarIntSchema(scales: SdkScales): v.SchemaWithP
   readonly nextPageToken: v.OptionalSchema<v.StringSchema<undefined>, "">;
 }, undefined>, v.TransformAction<{
   symbolId: number;
-  timeframe: DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">;
+  timeframe: DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">;
   tsSec: bigint[];
   open: bigint[];
   high: bigint[];
@@ -134,7 +134,7 @@ declare function createCandleColumnarIntSchema(scales: SdkScales): v.SchemaWithP
   nextPageToken: string;
 }, {
   symbolId: number;
-  timeframe: DecodedEnum<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo">;
+  timeframe: DecodedEnum<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo">;
   tsSec: number[];
   open: string[];
   high: string[];
@@ -158,7 +158,7 @@ type CandleColumnar = v.InferOutput<ReturnType<typeof createCandleColumnarSchema
 type CandleColumnarInt = v.InferOutput<ReturnType<typeof createCandleColumnarIntSchema>>;
 declare function createListCandlesInputSchema(): v.SchemaWithPipe<readonly [v.ObjectSchema<{
   readonly symbolId: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.GtValueAction<number, 0, undefined>, v.MaxValueAction<number, 4294967295, undefined>]>;
-  readonly timeframe: v.SchemaWithPipe<readonly [v.PicklistSchema<readonly ["1s", "1m", "5m", "15m", "30m", "1h", "4h", "12h", "1d", "1w", "1mo"], undefined>, v.TransformAction<"1d" | "1s" | "1m" | "5m" | "15m" | "30m" | "1h" | "4h" | "12h" | "1w" | "1mo", Timeframe$1.SEC_1 | Timeframe$1.MIN_1 | Timeframe$1.MIN_5 | Timeframe$1.MIN_15 | Timeframe$1.MIN_30 | Timeframe$1.HOUR_1 | Timeframe$1.HOUR_4 | Timeframe$1.DAY_1 | Timeframe$1.HOUR_12 | Timeframe$1.WEEK_1 | Timeframe$1.MONTH_1>]>;
+  readonly timeframe: v.SchemaWithPipe<readonly [v.PicklistSchema<readonly ["1s", "1m", "5m", "15m", "30m", "1h", "4h", "12h", "1d", "1w", "1mo"], undefined>, v.TransformAction<"1d" | "1h" | "1w" | "1m" | "1s" | "5m" | "15m" | "30m" | "4h" | "12h" | "1mo", Timeframe$1.SEC_1 | Timeframe$1.MIN_1 | Timeframe$1.MIN_5 | Timeframe$1.MIN_15 | Timeframe$1.MIN_30 | Timeframe$1.HOUR_1 | Timeframe$1.HOUR_4 | Timeframe$1.DAY_1 | Timeframe$1.HOUR_12 | Timeframe$1.WEEK_1 | Timeframe$1.MONTH_1>]>;
   readonly limit: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.GtValueAction<number, 0, undefined>, v.MaxValueAction<number, 10000, undefined>]>, undefined>;
   readonly includeIncomplete: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
   readonly includeReference: v.OptionalSchema<v.BooleanSchema<undefined>, false>;