@q9labsai/chalk-client 4.1.12 → 4.1.14

package/dist/access/manager.d.ts

@@ -10,6 +10,7 @@ export declare class ConnectionAccessFailure extends ConnectionAccessFailure_bas
 }> {
 }
 export type ConnectionAccessEffectProvider = (request: ConnectionAccessRequest) => Effect.Effect<ParsedAccessGrant, ConnectionAccessFailure>;
+export type AutomaticMediaReplacementListener = (access: ParsedAccessGrant) => void;
 export type ConnectionAccessEffectService = {
     readonly current: Effect.Effect<ParsedAccessGrant | null>;
     readonly currentUnsafe: () => ParsedAccessGrant | null;
@@ -19,6 +20,7 @@ export type ConnectionAccessEffectService = {
     readonly refreshAfterRejection: () => Effect.Effect<ParsedAccessGrant, ConnectionAccessFailure>;
     readonly getSyncToken: (reason?: ConnectionAccessReason) => Effect.Effect<ParticipantSyncCredential, ConnectionAccessFailure>;
     readonly getMediaToken: () => Effect.Effect<ParticipantMediaCredential, ConnectionAccessFailure>;
+    readonly subscribeAutomaticMediaReplacement: (listener: AutomaticMediaReplacementListener) => Effect.Effect<() => void>;
     readonly requiresRefresh: Effect.Effect<boolean>;
     readonly millisecondsUntilRefresh: Effect.Effect<number | null>;
     readonly clear: Effect.Effect<void>;

package/dist/access/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/access/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAmB,MAAM,QAAQ,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AACxG,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;;;;AAIlG,qBAAa,uBAAwB,SAAQ,6BAA4C;IACvF,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;CAAG;AAEL,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,EAAE,uBAAuB,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;AAE7I,MAAM,MAAM,6BAA6B,GAAG;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrH,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,sBAAsB,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrH,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,sBAAsB,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAClK,QAAQ,CAAC,qBAAqB,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAChG,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,sBAAsB,KAAK,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;IAC9H,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,CAAC;IACjG,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACrC,CAAC;;AAEF,qBAAa,uBAAwB,SAAQ,4BAA2G;CAAG;AAI3J;;;GAGG;AACH,eAAO,MAAM,yBAAyB,aAAc,8BAA8B,iFAqD/E,CAAC;AAEJ,eAAO,MAAM,6BAA6B,aAvDU,8BAA8B,iFAuDZ,CAAC"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/access/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAmB,MAAM,QAAQ,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AACxG,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;;;;AAIlG,qBAAa,uBAAwB,SAAQ,6BAA4C;IACvF,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;CAAG;AAEL,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,EAAE,uBAAuB,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;AAC7I,MAAM,MAAM,iCAAiC,GAAG,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAEpF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrH,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,sBAAsB,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrH,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,sBAAsB,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAClK,QAAQ,CAAC,qBAAqB,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAChG,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,sBAAsB,KAAK,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;IAC9H,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,CAAC;IACjG,QAAQ,CAAC,kCAAkC,EAAE,CAAC,QAAQ,EAAE,iCAAiC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACxH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACrC,CAAC;;AAEF,qBAAa,uBAAwB,SAAQ,4BAA2G;CAAG;AAY3J;;;GAGG;AACH,eAAO,MAAM,yBAAyB,aAAc,8BAA8B,iFAuC/E,CAAC;AAEJ,eAAO,MAAM,6BAA6B,aAzCU,8BAA8B,iFAyCZ,CAAC"}

package/dist/{chunk-DFLTEYWX.js → chunk-2NUTY2VP.js}

@@ -1,7 +1,7 @@
 import {
   createChalkEffectClient,
   parseAccessGrant
-} from "./chunk-JPNE4K2L.js";
+} from "./chunk-HE6CLPZM.js";
 
 // src/public-invites/client.ts
 import { Effect } from "effect";
@@ -59,7 +59,7 @@ function createChalkPublicClient(options) {
     const response = await Effect.runPromise(
       client.spaces.refreshSpacePublicInviteAccess({
         headers: { "X-Chalk-Arrival-Handle": normalized.arrivalHandle },
-        payload: { media_proof: required(normalized.mediaProof, "mediaProof") }
+        payload: { media_proof: required(normalized.mediaProof, "mediaProof"), replace_media_connection: normalized.replaceMediaConnection ?? false }
       })
     );
     return parseAccessGrant(response);
@@ -109,7 +109,7 @@ function arrivalReference(reference) {
   return { arrivalHandle: required(reference.arrivalHandle, "arrivalHandle"), guestCredential: reference.guestCredential };
 }
 function refreshInput(input, arrival) {
-  const values = typeof input === "string" ? { arrivalHandle: arrival?.arrivalHandle, guestCredential: arrival?.guestCredential, mediaProof: input } : { arrivalHandle: input.arrivalHandle ?? arrival?.arrivalHandle, guestCredential: input.guestCredential ?? arrival?.guestCredential, mediaProof: input.mediaProof };
+  const values = typeof input === "string" ? { arrivalHandle: arrival?.arrivalHandle, guestCredential: arrival?.guestCredential, mediaProof: input } : { arrivalHandle: input.arrivalHandle ?? arrival?.arrivalHandle, guestCredential: input.guestCredential ?? arrival?.guestCredential, mediaProof: input.mediaProof, replaceMediaConnection: input.replaceMediaConnection };
   return {
     ...values,
     arrivalHandle: required(values.arrivalHandle ?? "", "arrivalHandle")

package/dist/{chunk-JPNE4K2L.js → chunk-HE6CLPZM.js}

@@ -1,6 +1,6 @@
 import {
   journeyHeaders
-} from "./chunk-QVHR3RMB.js";
+} from "./chunk-NKOKY2AE.js";
 
 // src/generated/schemas.ts
 import { Schema, SchemaGetter } from "effect";
@@ -757,7 +757,8 @@ var RecordingReservationSchema = Schema.Struct({
   updated_at: DateTimeStringSchema
 });
 var RefreshSpacePublicInviteAccessRequestSchema = Schema.Struct({
-  media_proof: Schema.String.check(Schema.isMinLength(1))
+  media_proof: Schema.String.check(Schema.isMinLength(1)),
+  replace_media_connection: Schema.Boolean
 });
 var RegionsSchema = Schema.Struct({
   regions: Schema.Array(
@@ -2149,6 +2150,44 @@ var AccessInvalidPasswordErrorSchema = AccessInvalidPasswordErrorWireSchema.pipe
     encode: SchemaGetter.transform((error) => ({ error: error.error }))
   })
 );
+var AccessMediaProofExpiredError = class extends Schema.TaggedErrorClass()("AccessMediaProofExpiredError", {
+  error: Schema.Struct({
+    code: Schema.Literal("access.media_proof_expired"),
+    message: Schema.String
+  })
+}) {
+};
+var AccessMediaProofExpiredErrorWireSchema = Schema.Struct({
+  error: Schema.Struct({
+    code: Schema.Literal("access.media_proof_expired"),
+    message: Schema.String
+  })
+});
+var AccessMediaProofExpiredErrorSchema = AccessMediaProofExpiredErrorWireSchema.pipe(
+  Schema.decodeTo(AccessMediaProofExpiredError, {
+    decode: SchemaGetter.transform((wire) => ({ _tag: "AccessMediaProofExpiredError", ...wire })),
+    encode: SchemaGetter.transform((error) => ({ error: error.error }))
+  })
+);
+var AccessMediaProofRejectedError = class extends Schema.TaggedErrorClass()("AccessMediaProofRejectedError", {
+  error: Schema.Struct({
+    code: Schema.Literal("access.media_proof_rejected"),
+    message: Schema.String
+  })
+}) {
+};
+var AccessMediaProofRejectedErrorWireSchema = Schema.Struct({
+  error: Schema.Struct({
+    code: Schema.Literal("access.media_proof_rejected"),
+    message: Schema.String
+  })
+});
+var AccessMediaProofRejectedErrorSchema = AccessMediaProofRejectedErrorWireSchema.pipe(
+  Schema.decodeTo(AccessMediaProofRejectedError, {
+    decode: SchemaGetter.transform((wire) => ({ _tag: "AccessMediaProofRejectedError", ...wire })),
+    encode: SchemaGetter.transform((error) => ({ error: error.error }))
+  })
+);
 var AccessRecentAuthRequiredError = class extends Schema.TaggedErrorClass()("AccessRecentAuthRequiredError", {
   error: Schema.Struct({
     code: Schema.Literal("access.recent_auth_required"),
@@ -5367,6 +5406,8 @@ var RefreshIntegrationConnectionErrorSchema = Schema.Union([
   TenantInvalidIdErrorSchema
 ]);
 var RefreshSpacePublicInviteAccessErrorSchema = Schema.Union([
+  AccessMediaProofExpiredErrorSchema,
+  AccessMediaProofRejectedErrorSchema,
   ArrivalInvalidHandleErrorSchema,
   ArrivalUnavailableErrorSchema,
   EpisodeCapacityExceededErrorSchema,
@@ -7374,8 +7415,10 @@ var spacesGroup = HttpApiGroup.make("spaces").add(
       ArrivalInvalidHandleErrorSchema.pipe(HttpApiSchema.status(400)),
       RequestInvalidErrorSchema.pipe(HttpApiSchema.status(400)),
       RequestInvalidIdempotencyKeyErrorSchema.pipe(HttpApiSchema.status(400)),
+      AccessMediaProofRejectedErrorSchema.pipe(HttpApiSchema.status(401)),
       ArrivalUnavailableErrorSchema.pipe(HttpApiSchema.status(404)),
       SpacePublicInviteUnavailableErrorSchema.pipe(HttpApiSchema.status(404)),
+      AccessMediaProofExpiredErrorSchema.pipe(HttpApiSchema.status(409)),
       EpisodeCapacityExceededErrorSchema.pipe(HttpApiSchema.status(409)),
       RequestIdempotencyConflictErrorSchema.pipe(HttpApiSchema.status(409)),
       RequestPayloadTooLargeErrorSchema.pipe(HttpApiSchema.status(413)),
@@ -8421,6 +8464,12 @@ export {
   AccessInvalidPasswordError,
   AccessInvalidPasswordErrorWireSchema,
   AccessInvalidPasswordErrorSchema,
+  AccessMediaProofExpiredError,
+  AccessMediaProofExpiredErrorWireSchema,
+  AccessMediaProofExpiredErrorSchema,
+  AccessMediaProofRejectedError,
+  AccessMediaProofRejectedErrorWireSchema,
+  AccessMediaProofRejectedErrorSchema,
   AccessRecentAuthRequiredError,
   AccessRecentAuthRequiredErrorWireSchema,
   AccessRecentAuthRequiredErrorSchema,

package/dist/{chunk-D6W4ON4A.js → chunk-JCNUF3DP.js}

@@ -2,21 +2,21 @@ import {
   CloudflareRTKClient,
   CloudflareSFUClient,
   createCloudflareSFUHTTPTransport
-} from "./chunk-C4BIONCP.js";
+} from "./chunk-S5OUHFGC.js";
 import {
   AccessGrantError,
   requireParsedAccessGrant,
   validEpisodeDiagnosticCredential
-} from "./chunk-JPNE4K2L.js";
+} from "./chunk-HE6CLPZM.js";
+import {
+  createTraceContext,
+  parseTraceparent
+} from "./chunk-NKOKY2AE.js";
 import {
   createBrowserSyncLifecycle,
   createBrowserWebSocketFactory,
   createV1SyncClient
-} from "./chunk-5VXGLI3T.js";
-import {
-  createTraceContext,
-  parseTraceparent
-} from "./chunk-QVHR3RMB.js";
+} from "./chunk-PWUU6T3R.js";
 
 // src/access/manager.ts
 import { Clock, Context, Data, Effect, Layer, SynchronizedRef } from "effect";
@@ -29,28 +29,10 @@ var makeConnectionAccessLayer = (provider, refreshWindowMs = DEFAULT_REFRESH_WIN
   ConnectionAccessService,
   Effect.gen(function* () {
     const state = yield* SynchronizedRef.make({ access: null });
-    const fetch = (reason, replaceMediaConnection, force) => SynchronizedRef.modifyEffect(
-      state,
-      (current) => Effect.gen(function* () {
-        const now = yield* Clock.currentTimeMillis;
-        if (!force && current.access && millisecondsUntil(current.access, now, refreshWindowMs) > 0) return [current.access, current];
-        const request = Object.freeze({
-          reason,
-          replaceMediaConnection,
-          ...current.access ? {
-            currentMediaToken: current.access.media.token,
-            expectedParticipantGeneration: current.access.subject.participantGeneration
-          } : {}
-        });
-        const next = yield* provider(request);
-        try {
-          validateExpiration(next, now);
-          if (current.access) validateRefresh(current.access, next, replaceMediaConnection);
-        } catch (cause) {
-          return yield* Effect.fail(new ConnectionAccessFailure({ code: "access.invalid", cause }));
-        }
-        return [next, { access: next }];
-      })
+    const automaticMediaReplacementListeners = /* @__PURE__ */ new Set();
+    const fetch = (reason, replaceMediaConnection, force) => SynchronizedRef.modifyEffect(state, (current) => fetchAccessGrant(provider, { current, reason, replaceMediaConnection, force, refreshWindowMs })).pipe(
+      Effect.tap((result) => Effect.sync(() => notifyAutomaticMediaReplacement(automaticMediaReplacementListeners, result))),
+      Effect.map((result) => result.access)
     );
     const initialize = (reason = "join") => fetch(reason, false, false).pipe(Effect.catchTag("ConnectionAccessFailure", (failure2) => failure2.code === "access.invalid" && SynchronizedRef.getUnsafe(state).access === null ? fetch(reason, false, true) : Effect.fail(failure2)));
     const millisecondsUntilRefresh = Effect.gen(function* () {
@@ -68,6 +50,10 @@ var makeConnectionAccessLayer = (provider, refreshWindowMs = DEFAULT_REFRESH_WIN
       refreshAfterRejection: () => fetch("access_retry", true, true),
       getSyncToken: (reason = "sync_recovery") => ensureFresh(reason).pipe(Effect.map((access) => access.sync.token)),
       getMediaToken: () => ensureFresh("scheduled_refresh").pipe(Effect.map((access) => access.media.token)),
+      subscribeAutomaticMediaReplacement: (listener) => Effect.sync(() => {
+        automaticMediaReplacementListeners.add(listener);
+        return () => automaticMediaReplacementListeners.delete(listener);
+      }),
       requiresRefresh: millisecondsUntilRefresh.pipe(Effect.map((milliseconds) => milliseconds === null || milliseconds === 0)),
       millisecondsUntilRefresh,
       clear: SynchronizedRef.set(state, { access: null })
@@ -75,6 +61,46 @@ var makeConnectionAccessLayer = (provider, refreshWindowMs = DEFAULT_REFRESH_WIN
   })
 );
 var makeFakeConnectionAccessLayer = makeConnectionAccessLayer;
+function fetchAccessGrant(provider, input) {
+  return Effect.gen(function* () {
+    const now = yield* Clock.currentTimeMillis;
+    const currentAccess = input.current.access;
+    if (!input.force && currentAccess && millisecondsUntil(currentAccess, now, input.refreshWindowMs) > 0) {
+      return [{ access: currentAccess, automaticMediaReplacement: false }, input.current];
+    }
+    const mediaExpired = currentAccess !== null && expiresAt(currentAccess.media.expiresAt) <= now;
+    const shouldReplaceMediaConnection = input.replaceMediaConnection || mediaExpired;
+    const next = yield* provider(connectionAccessRequest(input, shouldReplaceMediaConnection));
+    yield* Effect.try({
+      try: () => validateFetchedAccess(currentAccess, next, now, shouldReplaceMediaConnection),
+      catch: (cause) => new ConnectionAccessFailure({ code: "access.invalid", cause })
+    });
+    return [{ access: next, automaticMediaReplacement: mediaExpired && !input.replaceMediaConnection }, { access: next }];
+  });
+}
+function connectionAccessRequest(input, replaceMediaConnection) {
+  return Object.freeze({
+    reason: input.reason,
+    replaceMediaConnection,
+    ...input.current.access ? {
+      currentMediaToken: input.current.access.media.token,
+      expectedParticipantGeneration: input.current.access.subject.participantGeneration
+    } : {}
+  });
+}
+function validateFetchedAccess(previous, next, now, replaceMediaConnection) {
+  validateExpiration(next, now);
+  if (previous) validateRefresh(previous, next, replaceMediaConnection);
+}
+function notifyAutomaticMediaReplacement(listeners, result) {
+  if (!result.automaticMediaReplacement) return;
+  for (const listener of listeners) {
+    try {
+      listener(result.access);
+    } catch {
+    }
+  }
+}
 function millisecondsUntil(access, now, refreshWindowMs) {
   return Math.max(0, Math.min(expiresAt(access.sync.expiresAt), expiresAt(access.media.expiresAt)) - now - refreshWindowMs);
 }
@@ -82,12 +108,15 @@ function validateExpiration(access, now) {
   if (expiresAt(access.sync.expiresAt) <= now || expiresAt(access.media.expiresAt) <= now) throw new TypeError("Access grant is expired");
 }
 function validateRefresh(previous, next, replaceMediaConnection) {
+  if (!hasSameSubject(previous, next)) throw new TypeError("Access grant refresh changed its subject");
+  const mediaConnectionChanged = previous.media.provider !== next.media.provider || mediaBinding(previous) !== mediaBinding(next);
+  if (replaceMediaConnection === mediaConnectionChanged) return;
+  throw new TypeError(replaceMediaConnection ? "Access grant replacement did not change its media binding" : "Access grant refresh unexpectedly replaced its media connection");
+}
+function hasSameSubject(previous, next) {
   const left = previous.subject;
   const right = next.subject;
-  if (left.tenantId !== right.tenantId || left.spaceId !== right.spaceId || left.episodeId !== right.episodeId || left.participantId !== right.participantId || left.participantGeneration !== right.participantGeneration) {
-    throw new TypeError("Access grant refresh changed its subject");
-  }
-  if (!replaceMediaConnection && (previous.media.provider !== next.media.provider || mediaBinding(previous) !== mediaBinding(next))) throw new TypeError("Access grant refresh unexpectedly replaced its media connection");
+  return left.tenantId === right.tenantId && left.spaceId === right.spaceId && left.episodeId === right.episodeId && left.participantId === right.participantId && left.participantGeneration === right.participantGeneration;
 }
 function mediaBinding(access) {
   switch (access.media.provider) {
@@ -879,12 +908,15 @@ var CLIENT_RESTART_CLOSE_CODE = 4e3;
 var DEPENDENCY_UNAVAILABLE_CLOSE_CODE = 1012;
 var HEARTBEAT_INTERVAL_MS = 2e4;
 var MAX_MISSED_HEARTBEATS = 2;
+var DEFAULT_RECONNECT_DELAY_MS = 250;
+var MAX_RECONNECT_DELAY_MS = 5e3;
 var encoder2 = new TextEncoder();
 var ChalkWhiteboardV1Client = class {
   files;
   #options;
   #store;
   #listeners = /* @__PURE__ */ new Set();
+  #summaryListeners = /* @__PURE__ */ new Set();
   #operations = /* @__PURE__ */ new Map();
   #reservedOperationIds = /* @__PURE__ */ new Set();
   #awaitingOperationIds = /* @__PURE__ */ new Set();
@@ -913,6 +945,7 @@ var ChalkWhiteboardV1Client = class {
   #stopPromise = null;
   #waitingForOperations = false;
   #reconnectTimer;
+  #reconnectAttempt = 0;
   #heartbeatTimer;
   #missedHeartbeats = 0;
   #lastCursorAt = Number.NEGATIVE_INFINITY;
@@ -989,6 +1022,11 @@ var ChalkWhiteboardV1Client = class {
     if (this.#snapshots.size === 0 && !this.#waitingForOperations) void this.#requestSnapshot().catch(() => void 0);
     return () => this.#listeners.delete(listener);
   }
+  subscribeSummary(listener) {
+    this.#summaryListeners.add(listener);
+    this.#notifySummaryListener(listener, this.#summary());
+    return () => this.#summaryListeners.delete(listener);
+  }
   submitUpdate(input) {
     this.#assertLive("submit_update");
     if (!this.#canDraw || !this.#capabilities.includes("drawWhiteboard")) {
@@ -1113,7 +1151,7 @@ var ChalkWhiteboardV1Client = class {
       const cursor = this.#sceneId && this.#revision ? { scene_id: this.#sceneId, revision: this.#revision } : null;
       this.#send(this.#useLegacyHello ? { type: "hello", protocol: "whiteboard-v1", token, cursor } : { type: "hello", protocol: "whiteboard-v1", token, cursor, extensions: [{ name: "presentation_v1" }] });
     } catch {
-      socket.close(1008, "whiteboard authentication failed");
+      socket.close(CLIENT_RESTART_CLOSE_CODE, "whiteboard authentication failed");
     }
   }
   async #receive(socket, data) {
@@ -1225,6 +1263,7 @@ var ChalkWhiteboardV1Client = class {
   #welcome(frame) {
     if (this.#phase !== "authenticating") throw new Error("unexpected whiteboard welcome");
     this.#phase = "live";
+    this.#reconnectAttempt = 0;
     this.#participantId = frame.participant_id;
     this.#sceneId = frame.scene_id;
     this.#revision = frame.revision;
@@ -1437,10 +1476,13 @@ var ChalkWhiteboardV1Client = class {
   }
   #scheduleReconnect() {
     this.#clearReconnect();
+    const configuredDelay = this.#options.reconnectDelayMs;
+    const delay = configuredDelay === 0 ? 0 : Math.min(MAX_RECONNECT_DELAY_MS, (configuredDelay ?? DEFAULT_RECONNECT_DELAY_MS) * 2 ** Math.min(this.#reconnectAttempt, 5));
+    this.#reconnectAttempt += 1;
     this.#reconnectTimer = this.#clock().setTimeout(() => {
       this.#reconnectTimer = void 0;
       this.#connect();
-    }, this.#options.reconnectDelayMs ?? 250);
+    }, delay);
   }
   #handleLifecycle(event) {
     if (event === "online" || event === "offline") this.#online = event === "online";
@@ -1480,7 +1522,15 @@ var ChalkWhiteboardV1Client = class {
   #publishSummary(status, summaryError) {
     this.#summaryStatus = status;
     this.#summaryError = summaryError;
-    const summary = {
+    const summary = this.#summary();
+    try {
+      this.#options.onSummary?.(summary);
+    } catch {
+    }
+    for (const listener of this.#summaryListeners) this.#notifySummaryListener(listener, summary);
+  }
+  #summary() {
+    return {
       status: this.#summaryStatus,
       sceneId: this.#sceneId,
       revision: this.#revision,
@@ -1490,8 +1540,10 @@ var ChalkWhiteboardV1Client = class {
       presenting: this.#presenting,
       error: this.#summaryError
     };
+  }
+  #notifySummaryListener(listener, summary) {
     try {
-      this.#options.onSummary?.(summary);
+      listener(summary);
     } catch {
     }
   }
@@ -1739,9 +1791,15 @@ function createMediaClient(apiBaseURL, input) {
     );
   }
   const { subject } = input.access;
+  const replaceMediaConnection = input.replaceMediaConnection;
   const client = new CloudflareSFUClient({
     bootstrap: input.access.media.clientPayload,
     participantId: subject.participantId,
+    replaceMediaConnection: replaceMediaConnection ? async () => {
+      const replacement = await replaceMediaConnection();
+      if (replacement.provider !== "cloudflare_sfu") throw new TypeError("The Cloudflare SFU adapter requires a Cloudflare SFU access grant");
+      return replacement.clientPayload;
+    } : void 0,
     transport: createCloudflareSFUHTTPTransport({
       apiBaseURL,
       credential: input.credential,
@@ -1751,6 +1809,7 @@ function createMediaClient(apiBaseURL, input) {
       participantId: subject.participantId
     }),
     onError: input.onFailure,
+    ...input.recordRtcSummary ? { onRtcSummary: input.recordRtcSummary } : {},
     onScreenEnded: input.onScreenEnded
   });
   return createSFUConnectionMediaClient(client);
@@ -2135,6 +2194,8 @@ var makeConnectionLifecycleLayerFromServices = (options) => Layer3.effect(
             try: () => platform.createMediaClient({
               access: grant,
               credential: () => toPromise(access.getMediaToken()),
+              replaceMediaConnection: () => toPromise(access.refresh("media_recovery", true)).then((replacement) => replacement.media),
+              ...options.recordRtcSummary ? { recordRtcSummary: options.recordRtcSummary } : {},
               onFailure: () => enqueueBackground(handleMediaFailure()),
               onScreenEnded: () => enqueueBackground(notifyScreenEnded())
             }),
@@ -2327,6 +2388,18 @@ var makeConnectionLifecycleLayerFromServices = (options) => Layer3.effect(
       yield* publish();
     });
     const handleMediaFailure = () => model.media ? handleMediaSnapshot(model.media, model.media.getSnapshot()) : Effect2.void;
+    const applyAutomaticMediaReplacement = (grant) => Effect2.gen(function* () {
+      const media = model.media;
+      if (!media || !active(model)) return;
+      const restartInput = grant.media.provider === "cloudflare_sfu" ? grant.media.clientPayload : grant.media;
+      const restarted = yield* Effect2.exit(foreign6(() => media.restart(restartInput), "media_start_failed", "The media client could not apply a replacement access grant"));
+      if (restarted._tag === "Failure") {
+        yield* recover("media");
+        return;
+      }
+      model.mediaSnapshot = media.getSnapshot();
+      yield* publish();
+    });
     const notifyScreenEnded = () => Effect2.sync(() => {
       if (!active(model)) return;
       for (const listener of screenEndedListeners) {
@@ -2345,10 +2418,12 @@ var makeConnectionLifecycleLayerFromServices = (options) => Layer3.effect(
       yield* Deferred.done(work.deferred, exit);
     }) : Deferred.complete(work.deferred, work.effect).pipe(Effect2.asVoid);
     yield* Effect2.forkScoped(Queue.take(queue).pipe(Effect2.flatMap(process), Effect2.forever));
+    const accessReplacementUnsubscribe = yield* access.subscribeAutomaticMediaReplacement((grant) => enqueueBackground(applyAutomaticMediaReplacement(grant)));
     const foregroundUnsubscribe = platform.subscribeForeground?.(() => enqueueBackground(refreshAccess())) ?? null;
     yield* Effect2.addFinalizer(
       () => Effect2.gen(function* () {
         model.closed = true;
+        accessReplacementUnsubscribe();
         foregroundUnsubscribe?.();
         if (activeJoin) yield* Fiber.interrupt(activeJoin);
         yield* performLeave().pipe(Effect2.ignore);
@@ -4806,7 +4881,7 @@ var makeSpaceClientCoreLayer = (options, platform = {}) => {
     now: baseDependencies.clock.now,
     setTimeout: baseDependencies.clock.setTimeout,
     clearTimeout: baseDependencies.clock.clearTimeout,
-    release: { id: "chalk-client@4.1.12" }
+    release: { id: "chalk-client@4.1.14" }
   });
   const diagnosticSyncClients = /* @__PURE__ */ new Set();
   const dependencies = {
@@ -4827,6 +4902,7 @@ var makeSpaceClientCoreLayer = (options, platform = {}) => {
     initialMicrophoneEnabled: platform.initialMicrophoneEnabled,
     initialCameraEnabled: platform.initialCameraEnabled,
     telemetry: platform.telemetry,
+    recordRtcSummary: platform.recordRtcSummary,
     dependencies,
     diagnostics: {
       onEvent: (event) => {
@@ -4870,7 +4946,6 @@ var SpaceClientCore = class {
   #previous;
   #unsubscribeConnection = null;
   #unsubscribeStore = null;
-  #unsupportedReported = false;
   #leaveOperation;
   #participantJoinOperation;
   #syncConnectOperation;
@@ -5007,11 +5082,6 @@ var SpaceClientCore = class {
   #publishConnectionDiagnostics() {
     const snapshot = this.#connection.getSnapshot();
     if (!this.#episodeDiagnostics || snapshot.state !== "live") return;
-    if (!this.#unsupportedReported) {
-      this.#unsupportedReported = true;
-      const unsupported = this.#episodeDiagnostics.startOperation("whiteboard.unsupported");
-      unsupported?.succeed({ status: "unsupported" });
-    }
     if (!this.#participantJoinOperation) {
       this.#participantJoinOperation = this.#episodeDiagnostics.startOperation("participant.join");
       this.#participantJoinOperation?.succeed({ status: "live" });
@@ -5082,7 +5152,7 @@ async function resolveAccessGrant(input) {
   const { operationName: operationName2, reason } = diagnosticAccessOperation(input.request);
   const operationBeforeRotation = input.diagnostics.activeContext() ? input.diagnostics.startOperation(operationName2, { reason }) : void 0;
   try {
-    const grant = await requireParsedAccessGrant(await fetchAccessGrant(input));
+    const grant = await requireParsedAccessGrant(await fetchAccessGrant2(input));
     input.diagnostics.rotateCredential(grant.diagnostics ?? null);
     (operationBeforeRotation ?? input.diagnostics.startOperation(operationName2, { reason }))?.succeed({ result: "bound" });
     return grant;
@@ -5095,7 +5165,7 @@ function diagnosticAccessOperation(request) {
   const reason = request?.reason ?? "join";
   return { operationName: reason === "join" ? "access.request" : "access.refresh", reason };
 }
-async function fetchAccessGrant(input) {
+async function fetchAccessGrant2(input) {
   if (input.platform.connectionAccess) return input.platform.connectionAccess(input.request);
   return input.options.getAccess({ space: input.options.space.trim(), reason: accessReason(input.request?.reason) });
 }

package/dist/{chunk-QVHR3RMB.js → chunk-NKOKY2AE.js}

@@ -22,6 +22,8 @@ var TELEMETRY_BUILT_IN_ATTRIBUTE_KEYS = [
   "connection_state",
   "ice_connection_state",
   "signaling_state",
+  "dtls_state",
+  "selected_candidate_pair_state",
   "bytes_received",
   "bytes_sent",
   "frames_dropped",
@@ -615,7 +617,9 @@ function summarizeRtcStats(stats) {
     packetsReceived: 0,
     packetsSent: 0,
     roundTripTimeSamples: [],
-    transportEntries: 0
+    transportEntries: 0,
+    dtlsStates: [],
+    selectedCandidatePairStates: []
   };
   for (const stat of stats) {
     statHandlers[stat.type ?? ""]?.(accumulator, stat);
@@ -634,6 +638,8 @@ function rtcSummaryAttributes(connection, stats) {
     packets_received: summary.packetsReceived,
     packets_sent: summary.packetsSent,
     transport_entries: summary.transportEntries,
+    ...summary.dtlsState !== void 0 ? { dtls_state: summary.dtlsState } : {},
+    ...summary.selectedCandidatePairState !== void 0 ? { selected_candidate_pair_state: summary.selectedCandidatePairState } : {},
     ...connection.connectionState !== void 0 ? { connection_state: connection.connectionState } : {},
     ...connection.iceConnectionState !== void 0 ? { ice_connection_state: connection.iceConnectionState } : {},
     ...summary.jitterMs !== void 0 ? { jitter_ms: summary.jitterMs } : {},
@@ -663,6 +669,13 @@ function accumulateOutbound(accumulator, stat) {
 function accumulateTransport(accumulator, stat) {
   accumulator.transportEntries += 1;
   appendFinite(accumulator.roundTripTimeSamples, stat.roundTripTime);
+  appendRtcState(accumulator.dtlsStates, stat.dtlsState, ["new", "connecting", "connected", "closed", "failed"]);
+  if (stat.type === "candidate-pair" && (stat.selected === true || stat.nominated === true)) {
+    appendRtcState(accumulator.selectedCandidatePairStates, stat.state, ["frozen", "waiting", "in-progress", "failed", "succeeded"]);
+  }
+}
+function appendRtcState(states, value, allowed) {
+  if (value !== void 0 && allowed.includes(value) && !states.includes(value)) states.push(value);
 }
 function appendFinite(samples, value) {
   if (isFiniteNumber(value)) samples.push(value);
@@ -670,6 +683,8 @@ function appendFinite(samples, value) {
 function finalizeAccumulator(accumulator) {
   const jitterMs = averageMilliseconds(accumulator.jitterSamples);
   const roundTripTimeMs = averageMilliseconds(accumulator.roundTripTimeSamples);
+  const dtlsState = lastValue(accumulator.dtlsStates);
+  const selectedCandidatePairState = lastValue(accumulator.selectedCandidatePairStates);
   return {
     bytesReceived: accumulator.bytesReceived,
     bytesSent: accumulator.bytesSent,
@@ -680,10 +695,15 @@ function finalizeAccumulator(accumulator) {
     packetsReceived: accumulator.packetsReceived,
     packetsSent: accumulator.packetsSent,
     transportEntries: accumulator.transportEntries,
+    ...dtlsState !== void 0 ? { dtlsState } : {},
+    ...selectedCandidatePairState !== void 0 ? { selectedCandidatePairState } : {},
     ...jitterMs !== void 0 ? { jitterMs } : {},
     ...roundTripTimeMs !== void 0 ? { roundTripTimeMs } : {}
   };
 }
+function lastValue(values) {
+  return values.at(-1);
+}
 function averageMilliseconds(samples) {
   if (samples.length === 0) return void 0;
   return Math.round(samples.reduce((total, sample) => total + sample, 0) / samples.length * 1e3);

package/dist/{chunk-5VXGLI3T.js → chunk-PWUU6T3R.js}

@@ -1916,6 +1916,8 @@ var MAX_LIVE_TARGET_RETRY_DELAY_MS = 1e3;
 var MAX_PROJECTION_EVENT_EVIDENCE = 256;
 var OPERATION_PENDING_POLL_INTERVAL_MS = 1e3;
 var CLIENT_RESTART_CLOSE_CODE = 4e3;
+var DEFAULT_RECONNECT_DELAY_MS = 250;
+var MAX_RECONNECT_DELAY_MS = 5e3;
 var MAX_COLLABORATION_REQUESTS_IN_FLIGHT = 64;
 var V1SyncError = class extends Error {
   constructor(message, code) {
@@ -1962,6 +1964,7 @@ var V1SyncClient = class {
   #startupGeneration = 0;
   #connectionGeneration = 0;
   #reconnectTimer;
+  #reconnectAttempt = 0;
   #heartbeatTimer;
   #missedHeartbeats = 0;
   #unsubscribeLifecycle;
@@ -2855,6 +2858,7 @@ var V1SyncClient = class {
     if (!this.#recovery?.controlComplete || !this.#media || !this.#presence) return;
     this.#recovery = null;
     this.#phase = { phase: "live" };
+    this.#reconnectAttempt = 0;
     this.#missedHeartbeats = 0;
     for (const pending of this.#commands.values()) {
       pending.retries = 0;
@@ -2936,10 +2940,13 @@ var V1SyncClient = class {
     this.#phase = { phase: "connecting" };
     this.#emit();
     this.#clearReconnect();
+    const configuredDelay = this.#options.reconnectDelayMs;
+    const delay = configuredDelay === 0 ? 0 : Math.min(MAX_RECONNECT_DELAY_MS, (configuredDelay ?? DEFAULT_RECONNECT_DELAY_MS) * 2 ** Math.min(this.#reconnectAttempt, 5));
+    this.#reconnectAttempt += 1;
     this.#reconnectTimer = this.#clock().setTimeout(() => {
       this.#reconnectTimer = void 0;
       this.#connect();
-    }, this.#options.reconnectDelayMs ?? 250);
+    }, delay);
   }
   #recover(reason) {
     const socket = this.#socket;