@reticlehq/browser 2.1.0 → 2.2.0

package/dist/security/serialization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../src/security/serialization.ts"],"names":[],"mappings":"AAkBA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AASD,yGAAyG;AACzG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAmFD,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMpD"}
+{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../src/security/serialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,EACd,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAwNzB;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6FAA6F;IAC7F,YAAY,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,eAAe,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAsBA;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMpD;AAID,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/security/serialization.js

@@ -1,4 +1,4 @@
-import { REDACTED_VALUE, TRANSPORT_LIMITS } from '@reticlehq/core';
+import { REDACTED_VALUE, TRANSPORT_LIMITS, isSensitiveKey, scrubKnownSecrets, } from '@reticlehq/core';
 const TRUNCATED_VALUE = '[TRUNCATED]';
 const UNSERIALIZABLE_VALUE = '[UNSERIALIZABLE]';
 const OMIT_VALUE = Symbol('omit');
@@ -7,29 +7,16 @@ const MAX_KEY_LENGTH = 256;
 // exceeds the byte budget — /8 was ~1/8 of the real 1MiB wire budget and truncated legitimate state.
 const MAX_TOTAL_CHARACTERS = Math.floor(TRANSPORT_LIMITS.MAX_MESSAGE_BYTES / 4);
 const MAX_TOTAL_NODES = TRANSPORT_LIMITS.MAX_COLLECTION_ITEMS * 5;
-// `token` must match auth CREDENTIALS, not compound design fields. Bare/separated `token(s)` and
-// auth-prefixed tokens (accessToken, auth_token, sessionToken, …) are redacted; `colorToken`,
-// `backgroundToken`, `tokenCount`, `designToken` are NOT — they were false-positives that redacted
-// legitimate reticle_inspect/reticle_state output.
-const SENSITIVE_KEY = /password|passwd|passcode|secret|(?:(?:access|refresh|auth|bearer|api|id|session|csrf|client)[-_]?tokens?|(?:^|[-_])tokens?(?=$|[-_]))|session[-_]?id|(?:^|[-_])(?:sid|pwd|jwt)(?=$|[-_])|authorization|api[-_]?key|access[-_]?key|private[-_]?key|client[-_]?secret|credit[-_]?card|card[-_]?number|cvv|cvc|ssn/i;
-export function isSensitiveKey(key) {
-    return SENSITIVE_KEY.test(key);
-}
-// High-confidence credential SHAPES, redacted regardless of key name — for scanning body/value text where
-// a secret can sit under a benign key (`{"note":"<jwt>"}`, `<meta content="sk_live_…">`). Deliberately
-// narrow (JWT, known provider prefixes) so it never corrupts legitimate prose the way a broad
-// entropy/length heuristic would.
-const KNOWN_SECRET = /eyJ[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}|(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{10,}|AKIA[0-9A-Z]{16}|gh[pousr]_[A-Za-z0-9]{20,}|xox[baprs]-[A-Za-z0-9-]{10,}|ya29\.[A-Za-z0-9._-]{20,}/g;
-/** Redact high-confidence secret shapes anywhere in a text/value, independent of any surrounding key. */
-export function scrubKnownSecrets(text) {
-    return text.replace(KNOWN_SECRET, REDACTED_VALUE);
-}
 function boundedString(value, state, max) {
     const allowed = Math.max(0, Math.min(max, state.remainingCharacters));
     if (value.length <= allowed) {
         state.remainingCharacters -= value.length;
         return value;
     }
+    // Count the cut. A silently shortened string is the same false green the collection caps were made
+    // to report: a caller comparing a 500k-char value against expected data sees 65k and concludes the
+    // app dropped the rest, with no marker saying WE did. The report interface exists for exactly this.
+    state.truncatedValues += 1;
     const truncated = allowed <= TRUNCATED_VALUE.length
         ? TRUNCATED_VALUE.slice(0, allowed)
         : `${value.slice(0, allowed - TRUNCATED_VALUE.length)}${TRUNCATED_VALUE}`;
@@ -40,6 +27,7 @@ function sanitize(value, state, depth, key) {
     if (key !== undefined && isSensitiveKey(key))
         return REDACTED_VALUE;
     if (depth > TRANSPORT_LIMITS.MAX_SERIALIZE_DEPTH || state.nodes >= MAX_TOTAL_NODES) {
+        state.truncatedValues += 1;
         return TRUNCATED_VALUE;
     }
     state.nodes += 1;
@@ -57,8 +45,67 @@ function sanitize(value, state, depth, key) {
     if (typeof value === 'undefined' || typeof value === 'function' || typeof value === 'symbol') {
         return OMIT_VALUE;
     }
+    // An invalid Date (`new Date(NaN)` / `new Date(undefined)`, easy to land in app state) throws
+    // RangeError on toISOString — and only safeStringify catches it, so a direct sanitize caller
+    // (readStoresWithTruncation, the state observer) crashed the WHOLE state read over one bad Date.
+    // Degrade to null, the same way a non-finite number does two branches up.
     if (value instanceof Date)
-        return value.toISOString();
+        return Number.isNaN(value.getTime()) ? null : value.toISOString();
+    // Map and Set are common enough in app state (a normalized store keyed by id, a set of selected
+    // ids) that serializing them to `{}` — which is what the plain-object branch below does, since they
+    // have no enumerable own keys — is a false green: an agent reads empty and concludes the state is
+    // empty, when really it was unrepresentable. Convert to a readable shape, bounded by the same caps.
+    if (value instanceof Map) {
+        const out = Object.create(null);
+        let n = 0;
+        for (const [k, v] of value) {
+            if (state.nodes >= MAX_TOTAL_NODES || n >= TRANSPORT_LIMITS.MAX_COLLECTION_ITEMS) {
+                // Budget spent — STOP. `continue` iterated a million-entry Map to the end just to count drops
+                // one at a time; size-n records the remainder in one shot (like the typed-array branch).
+                state.droppedItems += value.size - n;
+                break;
+            }
+            const sk = boundedString(typeof k === 'string' ? k : String(k), state, MAX_KEY_LENGTH);
+            const sv = sanitize(v, state, depth + 1, sk);
+            if (sv !== OMIT_VALUE)
+                out[sk] = sv;
+            n += 1;
+        }
+        return out;
+    }
+    if (value instanceof Set) {
+        const out = [];
+        let n = 0;
+        for (const item of value) {
+            if (state.nodes >= MAX_TOTAL_NODES || n >= TRANSPORT_LIMITS.MAX_COLLECTION_ITEMS) {
+                state.droppedItems += value.size - n; // stop; record the remainder at once, don't walk the rest
+                break;
+            }
+            const sv = sanitize(item, state, depth + 1);
+            out.push(sv === OMIT_VALUE ? null : sv);
+            n += 1;
+        }
+        return out;
+    }
+    // A typed array (Uint8Array, Float32Array, …) is array-like DATA, not a plain object. The
+    // plain-object branch below turned it into index-keyed keys ({"0":1,"1":2,…}) — a shape lie: an
+    // agent reading a tensor/binary field saw an object where an array lives, and a big one blew the key
+    // cap silently. Emit its numbers as a bounded array like a Set. DataView is opaque bytes — leave it.
+    if (ArrayBuffer.isView(value) && !(value instanceof DataView)) {
+        const len = value.length;
+        const out = [];
+        let n = 0;
+        for (const item of value) {
+            if (state.nodes >= MAX_TOTAL_NODES || n >= TRANSPORT_LIMITS.MAX_COLLECTION_ITEMS) {
+                state.droppedItems += len - n;
+                break;
+            }
+            out.push(item);
+            state.nodes += 1;
+            n += 1;
+        }
+        return out;
+    }
     if (value instanceof Error) {
         return {
             name: boundedString(value.name, state, 256),
@@ -70,16 +117,79 @@ function sanitize(value, state, depth, key) {
     state.seen.add(value);
     try {
         if (Array.isArray(value)) {
-            return value.slice(0, TRANSPORT_LIMITS.MAX_COLLECTION_ITEMS).map((item) => {
+            // Truncate by dropping whole ITEMS, never by corrupting them.
+            //
+            // The node budget used to run out mid-collection, so later items kept their shape while
+            // individual fields became the string "[TRUNCATED]" — an array field turned into a string, a
+            // boolean into a string. Consumers declare output schemas over these payloads, so that was not
+            // a degraded answer: validation rejected the whole message and the caller received NOTHING. On
+            // a page with thousands of matches that is a total loss of the query tool, in exactly the
+            // conditions where it matters most.
+            //
+            // Stopping BEFORE an item that will not fit keeps every survivor whole and type-correct. The
+            // collection's true size travels separately as a scalar (serialized first), so "how many" stays
+            // exact while the sample shrinks.
+            const out = [];
+            const considered = value.slice(0, TRANSPORT_LIMITS.MAX_COLLECTION_ITEMS);
+            // Items beyond the collection cap are dropped before the loop even sees them; count them here
+            // so the report covers BOTH reasons a caller is holding a short list.
+            state.droppedItems += Math.max(0, value.length - considered.length);
+            for (const item of considered) {
+                if (state.nodes >= MAX_TOTAL_NODES) {
+                    state.droppedItems += 1;
+                    continue;
+                }
+                // Checking only BEFORE the item is not enough: one that starts under the budget can cross it
+                // partway through and come back with its tail replaced by placeholders. Serialize, then keep
+                // it only if it fitted — otherwise discard it and stop, so what ships is always whole.
                 const sanitized = sanitize(item, state, depth + 1);
-                return sanitized === OMIT_VALUE ? null : sanitized;
-            });
+                // `>=`, not `>`: sanitize stops AT the ceiling rather than passing it, so the budget never
+                // reads as exceeded. Reaching it during this item means some field inside was replaced by a
+                // placeholder, which makes the item schema-invalid — drop it and stop.
+                if (state.nodes >= MAX_TOTAL_NODES) {
+                    state.droppedItems += 1;
+                    continue;
+                }
+                out.push(sanitized === OMIT_VALUE ? null : sanitized);
+            }
+            return out;
         }
         const out = Object.create(null);
-        for (const rawKey of Object.keys(value).slice(0, TRANSPORT_LIMITS.MAX_OBJECT_KEYS)) {
-            const safeKey = boundedString(rawKey, state, MAX_KEY_LENGTH);
+        // Scalars first, collections second. The node budget is spent in iteration order, so a large
+        // array sitting earlier in the object would consume the whole budget and turn the scalars after
+        // it into "[TRUNCATED]". Those scalars are the summary fields — a match `count`, a `total`, a
+        // status — and a summary that degrades to a placeholder while its own sample survives is the
+        // worst trade available: the caller keeps a partial list and loses the number that says the list
+        // is partial. Ordering by cost makes that impossible regardless of how a producer writes its
+        // object literal, so no caller has to know this rule to stay correct.
+        const allKeys = Object.keys(value);
+        const keys = allKeys.slice(0, TRANSPORT_LIMITS.MAX_OBJECT_KEYS);
+        // Keys past the cap are dropped — count them, like the array/Map/Set paths do, so a 5,000-key
+        // store reported as 200 keys carries a droppedItems marker instead of reading as complete.
+        state.droppedItems += Math.max(0, allKeys.length - keys.length);
+        // Read each key's value ONCE, inside the guard. A property getter can throw — MobX strict mode,
+        // a Vue reactive trap read outside a reactive context, any hostile Proxy — and that throw must
+        // cost only its own key, not the whole object read. The earlier code dereferenced the getter in
+        // an unguarded `isScalar` (and again in the sanitize call: two invocations, doubling side
+        // effects), so one bad property lost the entire STATE_READ — the exact silent-loss shape the Date
+        // guard above was written to prevent. Snapshot first, then partition scalars-before-collections.
+        const read = keys.map((key) => {
             try {
-                const sanitized = sanitize(value[rawKey], state, depth + 1, rawKey);
+                const v = value[key];
+                return { key, value: v, scalar: v === null || typeof v !== 'object', ok: true };
+            }
+            catch {
+                return { key, value: undefined, scalar: true, ok: false };
+            }
+        });
+        for (const entry of [...read.filter((e) => e.scalar), ...read.filter((e) => !e.scalar)]) {
+            const safeKey = boundedString(entry.key, state, MAX_KEY_LENGTH);
+            if (!entry.ok) {
+                out[safeKey] = UNSERIALIZABLE_VALUE;
+                continue;
+            }
+            try {
+                const sanitized = sanitize(entry.value, state, depth + 1, entry.key);
                 if (sanitized !== OMIT_VALUE)
                     out[safeKey] = sanitized;
             }
@@ -95,12 +205,40 @@ function sanitize(value, state, depth, key) {
 }
 /** Convert arbitrary app state into a bounded, redacted JSON-compatible value. */
 export function sanitizeForTransport(value) {
-    const sanitized = sanitize(value, {
+    return sanitizeWithReport(value).value;
+}
+/**
+ * As `sanitizeForTransport`, but also reports what the caps removed.
+ *
+ * Returned as a separate field rather than embedded in the value: the value has to keep the exact
+ * shape the consumer's schema declares, so a marker spliced inside it would break validation on the
+ * very payloads that are already under pressure.
+ */
+export function sanitizeWithReport(value) {
+    const state = {
         seen: new WeakSet(),
         remainingCharacters: MAX_TOTAL_CHARACTERS,
         nodes: 0,
-    }, 0);
-    return sanitized === OMIT_VALUE ? null : sanitized;
+        droppedItems: 0,
+        truncatedValues: 0,
+    };
+    const sanitized = sanitize(value, state, 0);
+    const out = sanitized === OMIT_VALUE ? null : sanitized;
+    if (state.droppedItems === 0 && state.truncatedValues === 0)
+        return { value: out };
+    const parts = [];
+    if (state.droppedItems > 0)
+        parts.push(`${state.droppedItems} item(s) dropped`);
+    if (state.truncatedValues > 0)
+        parts.push(`${state.truncatedValues} value(s) truncated`);
+    return {
+        value: out,
+        truncation: {
+            droppedItems: state.droppedItems,
+            truncatedValues: state.truncatedValues,
+            note: `partial — ${parts.join(', ')}; this is NOT the whole value. Scope the read with \`path\`/\`depth\` to see the rest.`,
+        },
+    };
 }
 /** Serialize without allowing cycles, BigInt, getters, or secrets to break the transport. */
 export function safeStringify(value) {
@@ -111,4 +249,7 @@ export function safeStringify(value) {
         return JSON.stringify(UNSERIALIZABLE_VALUE);
     }
 }
+// Re-exported: these moved to @reticlehq/core (they are wire rules, not DOM rules).
+// Kept on this module's surface so every existing importer inside the SDK is unaffected.
+export { isSensitiveKey, scrubKnownSecrets };
 //# sourceMappingURL=serialization.js.map

package/dist/security/serialization.js.map

@@ -1 +1 @@
-{"version":3,"file":"serialization.js","sourceRoot":"","sources":["../../src/security/serialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnE,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAChD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAClC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,sGAAsG;AACtG,qGAAqG;AACrG,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;AAChF,MAAM,eAAe,GAAG,gBAAgB,CAAC,oBAAoB,GAAG,CAAC,CAAC;AAElE,iGAAiG;AACjG,8FAA8F;AAC9F,mGAAmG;AACnG,mDAAmD;AACnD,MAAM,aAAa,GACjB,kTAAkT,CAAC;AAErT,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,0GAA0G;AAC1G,uGAAuG;AACvG,8FAA8F;AAC9F,kCAAkC;AAClC,MAAM,YAAY,GAChB,yMAAyM,CAAC;AAE5M,yGAAyG;AACzG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAQD,SAAS,aAAa,CAAC,KAAa,EAAE,KAAoB,EAAE,GAAW;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,eAAe,CAAC,MAAM;QAC/B,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;QACnC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC9E,KAAK,CAAC,mBAAmB,IAAI,SAAS,CAAC,MAAM,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAoB,EAAE,KAAa,EAAE,GAAY;IACjF,IAAI,GAAG,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IACpE,IAAI,KAAK,GAAG,gBAAgB,CAAC,mBAAmB,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;QACnF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IAEjB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAClB,KAAK,EACL,KAAK,EACL,GAAG,EAAE,WAAW,EAAE,KAAK,OAAO;YAC5B,CAAC,CAAC,gBAAgB,CAAC,gBAAgB;YACnC,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CACvC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;YAC3C,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;SAChF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAE/C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACxE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACnD,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACrD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QAC3D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAAE,CAAC;YACnF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,QAAQ,CACvB,KAAiC,CAAC,MAAM,CAAC,EAC1C,KAAK,EACL,KAAK,GAAG,CAAC,EACT,MAAM,CACP,CAAC;gBACF,IAAI,SAAS,KAAK,UAAU;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,GAAG,oBAAoB,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,SAAS,GAAG,QAAQ,CACxB,KAAK,EACL;QACE,IAAI,EAAE,IAAI,OAAO,EAAE;QACnB,mBAAmB,EAAE,oBAAoB;QACzC,KAAK,EAAE,CAAC;KACT,EACD,CAAC,CACF,CAAC;IACF,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}
+{"version":3,"file":"serialization.js","sourceRoot":"","sources":["../../src/security/serialization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAChD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAClC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,sGAAsG;AACtG,qGAAqG;AACrG,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;AAChF,MAAM,eAAe,GAAG,gBAAgB,CAAC,oBAAoB,GAAG,CAAC,CAAC;AAYlE,SAAS,aAAa,CAAC,KAAa,EAAE,KAAoB,EAAE,GAAW;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,mGAAmG;IACnG,mGAAmG;IACnG,oGAAoG;IACpG,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;IAC3B,MAAM,SAAS,GACb,OAAO,IAAI,eAAe,CAAC,MAAM;QAC/B,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;QACnC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC9E,KAAK,CAAC,mBAAmB,IAAI,SAAS,CAAC,MAAM,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAoB,EAAE,KAAa,EAAE,GAAY;IACjF,IAAI,GAAG,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IACpE,IAAI,KAAK,GAAG,gBAAgB,CAAC,mBAAmB,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;QACnF,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;QAC3B,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IAEjB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAClB,KAAK,EACL,KAAK,EACL,GAAG,EAAE,WAAW,EAAE,KAAK,OAAO;YAC5B,CAAC,CAAC,gBAAgB,CAAC,gBAAgB;YACnC,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CACvC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,8FAA8F;IAC9F,6FAA6F;IAC7F,iGAAiG;IACjG,0EAA0E;IAC1E,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7F,gGAAgG;IAChG,oGAAoG;IACpG,kGAAkG;IAClG,oGAAoG;IACpG,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;QACzB,MAAM,GAAG,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,IAAI,CAAC,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;gBACjF,8FAA8F;gBAC9F,yFAAyF;gBACzF,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;gBACrC,MAAM;YACR,CAAC;YACD,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YACvF,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,KAAK,UAAU;gBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;YACpC,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;QACzB,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,IAAI,CAAC,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;gBACjF,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,0DAA0D;gBAChG,MAAM;YACR,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,0FAA0F;IAC1F,gGAAgG;IAChG,qGAAqG;IACrG,qGAAqG;IACrG,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAI,KAAuC,CAAC,MAAM,CAAC;QAC5D,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,KAAoC,EAAE,CAAC;YACxD,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,IAAI,CAAC,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;gBACjF,KAAK,CAAC,YAAY,IAAI,GAAG,GAAG,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;YAC3C,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;SAChF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAE/C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,8DAA8D;YAC9D,EAAE;YACF,wFAAwF;YACxF,6FAA6F;YAC7F,+FAA+F;YAC/F,+FAA+F;YAC/F,0FAA0F;YAC1F,oCAAoC;YACpC,EAAE;YACF,6FAA6F;YAC7F,gGAAgG;YAChG,kCAAkC;YAClC,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;YACzE,8FAA8F;YAC9F,sEAAsE;YACtE,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACpE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;oBACnC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,6FAA6F;gBAC7F,6FAA6F;gBAC7F,uFAAuF;gBACvF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACnD,2FAA2F;gBAC3F,4FAA4F;gBAC5F,uEAAuE;gBACvE,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;oBACnC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QAC3D,6FAA6F;QAC7F,gGAAgG;QAChG,8FAA8F;QAC9F,6FAA6F;QAC7F,iGAAiG;QACjG,6FAA6F;QAC7F,sEAAsE;QACtE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAChE,8FAA8F;QAC9F,2FAA2F;QAC3F,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAChE,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,0FAA0F;QAC1F,kGAAkG;QAClG,iGAAiG;QACjG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,CAAC,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;gBAClD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,GAAG,CAAC,OAAO,CAAC,GAAG,oBAAoB,CAAC;gBACpC,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrE,IAAI,SAAS,KAAK,UAAU;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,GAAG,oBAAoB,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAmBD,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAI/C,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,IAAI,OAAO,EAAE;QACnB,mBAAmB,EAAE,oBAAoB;QACzC,KAAK,EAAE,CAAC;QACR,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;KACnB,CAAC;IACF,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACnF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,kBAAkB,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,eAAe,qBAAqB,CAAC,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,GAAG;QACV,UAAU,EAAE;YACV,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,IAAI,EAAE,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wFAAwF;SAC5H;KACF,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,yFAAyF;AACzF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/timers/clock.d.ts

@@ -2,5 +2,18 @@ export declare function isClockFrozen(): boolean;
 export declare function freezeClock(): void;
 /** Run all timers due within the next `ms` of virtual time, in order. */
 export declare function advanceClock(ms: number): void;
+/**
+ * Restore the real timers AND hand back everything the app queued while frozen.
+ *
+ * The queue used to be discarded (`tasks = []`). Restoring the native functions is only half the job:
+ * the callbacks the app scheduled during the freeze live in the virtual queue, and dropping them leaves
+ * the app quietly broken in a new way — a toast that never dismisses, a retry that never fires, a
+ * session-expiry check that never runs. `Date.now()` and future timers look healthy, so nothing points
+ * at the cause. That matters most on the path this is called from: an agent freezes the clock, the
+ * bridge dies, and the developer is left with an app that was never un-frozen deliberately.
+ *
+ * Pending work is re-scheduled onto REAL timers with its remaining virtual delay (a 5s toast frozen 2s
+ * in still has ~3s to go), and the ids the app is holding keep working — see the translation note.
+ */
 export declare function resetClock(): void;
 //# sourceMappingURL=clock.d.ts.map

package/dist/timers/clock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clock.d.ts","sourceRoot":"","sources":["../../src/timers/clock.ts"],"names":[],"mappings":"AA2BA,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,wBAAgB,WAAW,IAAI,IAAI,CAgClC;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAkB7C;AAED,wBAAgB,UAAU,IAAI,IAAI,CAWjC"}
+{"version":3,"file":"clock.d.ts","sourceRoot":"","sources":["../../src/timers/clock.ts"],"names":[],"mappings":"AA2BA,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,wBAAgB,WAAW,IAAI,IAAI,CAgClC;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAqB7C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAkDjC"}

package/dist/timers/clock.js

@@ -59,22 +59,92 @@ export function advanceClock(ms) {
         virtualNow = next.time;
         next.cb();
         if (next.interval !== undefined) {
-            tasks.push({ ...next, id: seq++, time: virtualNow + next.interval });
+            // Reschedule under the SAME id — a real setInterval keeps one id for its whole life. Minting a
+            // fresh id here (an earlier `id: seq++`) meant the app still held the original id, so its own
+            // clearInterval(id) after the first tick matched nothing and the interval fired forever.
+            tasks.push({ ...next, time: virtualNow + next.interval });
         }
     }
     virtualNow = target;
 }
+/**
+ * Restore the real timers AND hand back everything the app queued while frozen.
+ *
+ * The queue used to be discarded (`tasks = []`). Restoring the native functions is only half the job:
+ * the callbacks the app scheduled during the freeze live in the virtual queue, and dropping them leaves
+ * the app quietly broken in a new way — a toast that never dismisses, a retry that never fires, a
+ * session-expiry check that never runs. `Date.now()` and future timers look healthy, so nothing points
+ * at the cause. That matters most on the path this is called from: an agent freezes the clock, the
+ * bridge dies, and the developer is left with an app that was never un-frozen deliberately.
+ *
+ * Pending work is re-scheduled onto REAL timers with its remaining virtual delay (a 5s toast frozen 2s
+ * in still has ~3s to go), and the ids the app is holding keep working — see the translation note.
+ */
 export function resetClock() {
     if (!installed || originals === null)
         return;
-    window.setTimeout = originals.setTimeout;
-    window.clearTimeout = originals.clearTimeout;
-    window.setInterval = originals.setInterval;
-    window.clearInterval = originals.clearInterval;
-    Date.now = originals.dateNow;
+    const natives = originals;
+    const pending = tasks;
+    window.setTimeout = natives.setTimeout;
+    window.clearTimeout = natives.clearTimeout;
+    window.setInterval = natives.setInterval;
+    window.clearInterval = natives.clearInterval;
+    Date.now = natives.dateNow;
+    const resumeFrom = virtualNow;
     originals = null;
     tasks = [];
     installed = false;
     virtualNow = 0;
+    if (pending.length === 0)
+        return;
+    // Re-arm the app's pending work onto REAL timers, translating ids as we go.
+    //
+    // The app is still holding the VIRTUAL id it was handed while frozen; a native re-arm returns a
+    // different one. Without translation the app's own `clearTimeout(id)` would fail to cancel the
+    // re-armed callback AND would cancel whichever unrelated native timer happens to hold that id — both
+    // id spaces start at 1, so the collision is likely, not theoretical. An earlier version dropped
+    // intervals to dodge this and re-armed timeouts anyway, which has the identical hazard: a component
+    // that does `const t = setTimeout(hide, 5000); return () => clearTimeout(t)` cannot cancel `hide`,
+    // so it fires on an unmounted component.
+    //
+    // So keep a translation map and a clear-shim for exactly as long as re-armed work is outstanding.
+    // Nothing is dropped, and the app's handles keep working.
+    const reArmed = new Map();
+    const done = (virtualId) => {
+        reArmed.delete(virtualId);
+        if (reArmed.size === 0)
+            restoreRawClears(natives);
+    };
+    for (const task of pending) {
+        if (task.interval !== undefined) {
+            reArmed.set(task.id, natives.setInterval(task.cb, task.interval));
+        }
+        else {
+            reArmed.set(task.id, natives.setTimeout(() => {
+                done(task.id);
+                task.cb();
+            }, Math.max(0, task.time - resumeFrom)));
+        }
+    }
+    installTranslatingClears(reArmed, natives, done);
+}
+/** Route a clear() for a re-armed virtual id to its real native id; everything else passes through. */
+function installTranslatingClears(reArmed, natives, done) {
+    const translate = (rawClear) => ((id) => {
+        const nativeId = reArmed.get(id);
+        if (nativeId === undefined) {
+            rawClear(id);
+            return;
+        }
+        rawClear(nativeId);
+        done(id);
+    });
+    window.clearTimeout = translate(natives.clearTimeout);
+    window.clearInterval = translate(natives.clearInterval);
+}
+/** Drop the shim once no re-armed work is outstanding — it costs nothing to remove and one hop to keep. */
+function restoreRawClears(natives) {
+    window.clearTimeout = natives.clearTimeout;
+    window.clearInterval = natives.clearInterval;
 }
 //# sourceMappingURL=clock.js.map

package/dist/timers/clock.js.map

@@ -1 +1 @@
-{"version":3,"file":"clock.js","sourceRoot":"","sources":["../../src/timers/clock.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,wFAAwF;AACxF,6FAA6F;AAC7F,yEAAyE;AAiBzE,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,IAAI,GAAG,GAAG,CAAC,CAAC;AACZ,IAAI,KAAK,GAAW,EAAE,CAAC;AACvB,IAAI,SAAS,GAAqB,IAAI,CAAC;AAEvC,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,SAAS,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IACvD,SAAS,GAAG,IAAI,CAAC;IACjB,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,SAAS,GAAG;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,IAAI,CAAC,GAAG;KAClB,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,EAAc,EAAE,KAAa,EAAE,QAAiB,EAAU,EAAE;QAC5E,MAAM,EAAE,GAAG,GAAG,CAAC;QACf,GAAG,IAAI,CAAC,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,EAAU,EAAQ,EAAE;QAClC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,EAAc,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CACjD,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAwC,CAAC;IAC9D,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAA0C,CAAC;IAC5F,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,EAAc,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAClD,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAyC,CAAC;IACnF,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAA2C,CAAC;IAC9F,uFAAuF;IACvF,0FAA0F;IAC1F,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,QAAQ,GAAG,UAAU,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,MAAM;YAAE,MAAM;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM;QAC9B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACxC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,EAAE,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,UAAU,GAAG,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO;IAC7C,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACzC,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;IAC7C,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC3C,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC;IAC7B,SAAS,GAAG,IAAI,CAAC;IACjB,KAAK,GAAG,EAAE,CAAC;IACX,SAAS,GAAG,KAAK,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;AACjB,CAAC"}
+{"version":3,"file":"clock.js","sourceRoot":"","sources":["../../src/timers/clock.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,wFAAwF;AACxF,6FAA6F;AAC7F,yEAAyE;AAiBzE,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,IAAI,GAAG,GAAG,CAAC,CAAC;AACZ,IAAI,KAAK,GAAW,EAAE,CAAC;AACvB,IAAI,SAAS,GAAqB,IAAI,CAAC;AAEvC,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,SAAS,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IACvD,SAAS,GAAG,IAAI,CAAC;IACjB,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,SAAS,GAAG;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,IAAI,CAAC,GAAG;KAClB,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,EAAc,EAAE,KAAa,EAAE,QAAiB,EAAU,EAAE;QAC5E,MAAM,EAAE,GAAG,GAAG,CAAC;QACf,GAAG,IAAI,CAAC,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,EAAU,EAAQ,EAAE;QAClC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,EAAc,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CACjD,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAwC,CAAC;IAC9D,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAA0C,CAAC;IAC5F,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,EAAc,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAClD,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAyC,CAAC;IACnF,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAA2C,CAAC;IAC9F,uFAAuF;IACvF,0FAA0F;IAC1F,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,QAAQ,GAAG,UAAU,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,MAAM;YAAE,MAAM;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM;QAC9B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACxC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,EAAE,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,+FAA+F;YAC/F,8FAA8F;YAC9F,yFAAyF;YACzF,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,UAAU,GAAG,MAAM,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC;IACtB,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAC3B,MAAM,UAAU,GAAG,UAAU,CAAC;IAC9B,SAAS,GAAG,IAAI,CAAC;IACjB,KAAK,GAAG,EAAE,CAAC;IACX,SAAS,GAAG,KAAK,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,4EAA4E;IAC5E,EAAE;IACF,gGAAgG;IAChG,+FAA+F;IAC/F,qGAAqG;IACrG,gGAAgG;IAChG,oGAAoG;IACpG,mGAAmG;IACnG,yCAAyC;IACzC,EAAE;IACF,kGAAkG;IAClG,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACvC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,EAAE,EACP,OAAO,CAAC,UAAU,CAChB,GAAG,EAAE;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACd,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,CACpC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,uGAAuG;AACvG,SAAS,wBAAwB,CAC/B,OAA4B,EAC5B,OAAkB,EAClB,IAAiC;IAEjC,MAAM,SAAS,GAAG,CAAC,QAA+B,EAAE,EAAE,CACpD,CAAC,CAAC,EAAU,EAAQ,EAAE;QACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,EAAE,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnB,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAA0C,CAAC;IAC9C,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED,2GAA2G;AAC3G,SAAS,gBAAgB,CAAC,OAAkB;IAC1C,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;AAC/C,CAAC"}

package/dist/transport/transport.d.ts

@@ -14,7 +14,7 @@ interface TransportDeps {
     onConnected?: () => void;
     /**
      * Liveness fallback: fired once when the bridge has been unreachable for SESSION_LIFECYCLE
-     * .BRIDGE_LOST_MS — i.e. the server/agent process is gone, so no server-pushed end can arrive and
+     *.BRIDGE_LOST_MS — i.e. the server/agent process is gone, so no server-pushed end can arrive and
      * the SDK must end the session itself instead of showing a forever-"running" HUD.
      */
     onConnectionLost?: () => void;

package/dist/transport/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/transport/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,YAAY,CAAC;IAC1B,aAAa,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACpE,oGAAoG;IACpG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CACjD;AAiBD,4FAA4F;AAC5F,qBAAa,SAAS;;gBAoBR,IAAI,EAAE,aAAa;IAK/B,OAAO,IAAI,IAAI;IAqHf,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAoBpC,KAAK,IAAI,IAAI;CAOd"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/transport/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,YAAY,CAAC;IAC1B,aAAa,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACpE,oGAAoG;IACpG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CACjD;AAyBD,4FAA4F;AAC5F,qBAAa,SAAS;;gBAuBR,IAAI,EAAE,aAAa;IAK/B,OAAO,IAAI,IAAI;IA8If,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAoBpC,KAAK,IAAI,IAAI;CAOd"}

package/dist/transport/transport.js

@@ -14,6 +14,14 @@ function subscribeDocumentVisible(handler) {
 }
 const RECONNECT_DELAY_MS = 1000;
 const MAX_QUEUE = 500;
+/**
+ * Standard WebSocket close code 1008 ("policy violation") — the bridge sends it for TERMINAL refusals:
+ * a protocol-version mismatch (the browser package is older than the bridge and must be upgraded),
+ * auth failure, or a duplicate/invalid handshake. Reconnecting cannot fix any of those, so a blind
+ * retry loop just hammers the bridge every second forever and buries the actionable reason. 1013
+ * ("try again later" — rate/session limits) and transport-level closes stay retryable.
+ */
+const WS_POLICY_VIOLATION = 1008;
 /** Warn that the bridge is unreachable after this many consecutive failed INITIAL connects (~3s). */
 const UNREACHABLE_WARN_AFTER = 3;
 /** WebSocket client to the bridge. Reconnects across reloads; buffers events while down. */
@@ -32,6 +40,9 @@ export class Transport {
     /** Whether the unreachable warning has fired (fire-once). */
     #warnedUnreachable = false;
     #overflowCount = 0;
+    /** Session id, cached from the first hello(). Stable for a Transport's life — no need to rebuild the
+     * whole HelloMessage (url/title/adapters) on every inbound command just to read it. */
+    #sessionId;
     /** Teardown for the visibility subscription (foreground-triggered reconnect), while connected. */
     #unsubscribeVisible;
     #deps;
@@ -58,7 +69,23 @@ export class Transport {
         this.#open();
     }
     #open() {
-        const ws = new WebSocket(this.#deps.url);
+        let ws;
+        try {
+            ws = new WebSocket(this.#deps.url);
+        }
+        catch {
+            // `new WebSocket()` throws SYNCHRONOUSLY on a mixed-content SecurityError — a ws:// URL from an
+            // https page, which Safari does not exempt for localhost the way Chrome does. Unguarded, that
+            // exception propagates out of connect() into the host app's bootstrap (the SDK's cardinal sin:
+            // it must never break the app it observes) AND leaves connect() half-run, so #connected never
+            // flips true and disconnect() can't remove the monkeypatches. Treat it like any failed open:
+            // note the outage and schedule the normal retry.
+            this.#noteOutage();
+            this.#noteInitialFailure();
+            if (!this.#closed)
+                nativeSetTimeout(() => this.#reopen(), RECONNECT_DELAY_MS);
+            return;
+        }
         this.#ws = ws;
         ws.onopen = () => {
             this.#disconnectedSince = undefined; // healthy again — reset the loss timer
@@ -76,8 +103,19 @@ export class Transport {
             const data = event.data;
             void this.#onMessage(typeof data === 'string' ? data : String(data));
         };
-        ws.onclose = () => {
+        ws.onclose = (event) => {
             this.#ws = undefined;
+            // A 1008 is the bridge saying "don't come back as you are" — a version mismatch, a rejected
+            // handshake. Retrying every second cannot change the outcome; stop and surface the reason (the
+            // bridge puts an actionable message there, e.g. "upgrade @reticlehq/browser") instead of a
+            // silent reconnect storm. End the session cleanly so the HUD doesn't hang on "running".
+            if (event.code === WS_POLICY_VIOLATION) {
+                this.#closed = true;
+                const reason = event.reason.length > 0 ? event.reason : 'policy violation';
+                console.warn(`[reticle] bridge refused the connection: ${reason} — not retrying.`);
+                this.#deps.onConnectionLost?.();
+                return;
+            }
             this.#noteOutage();
             this.#noteInitialFailure();
             if (!this.#closed)
@@ -135,8 +173,8 @@ export class Transport {
         if (!result.success)
             return;
         const command = result.data;
-        const currentSessionId = this.#deps.hello().sessionId;
-        if (command.sessionId !== undefined && command.sessionId !== currentSessionId)
+        this.#sessionId ??= this.#deps.hello().sessionId;
+        if (command.sessionId !== undefined && command.sessionId !== this.#sessionId)
             return;
         let outcome;
         try {

package/dist/transport/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/transport/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,iBAAiB,GAIlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AA4C7D,iGAAiG;AACjG,SAAS,wBAAwB,CAAC,OAAmB;IACnD,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;IACxD,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,qGAAqG;AACrG,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,4FAA4F;AAC5F,MAAM,OAAO,SAAS;IACpB,GAAG,CAAwB;IAC3B,MAAM,GAAa,EAAE,CAAC;IACtB,OAAO,GAAG,KAAK,CAAC;IAChB,0FAA0F;IAC1F,kBAAkB,CAAqB;IACvC,qFAAqF;IACrF,KAAK,GAAG,KAAK,CAAC;IACd,qGAAqG;IACrG,cAAc,GAAG,KAAK,CAAC;IACvB,gEAAgE;IAChE,gBAAgB,GAAG,CAAC,CAAC;IACrB,6DAA6D;IAC7D,kBAAkB,GAAG,KAAK,CAAC;IAC3B,cAAc,GAAG,CAAC,CAAC;IACnB,kGAAkG;IAClG,mBAAmB,CAA2B;IACrC,KAAK,CAAgB;IACrB,IAAI,CAAe;IAE5B,YAAY,IAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;IACpC,CAAC;IAED,OAAO;QACL,IAAI,OAAO,SAAS,KAAK,WAAW;YAAE,OAAO;QAC7C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC,GAAG,EAAE,CACnF,IAAI,CAAC,UAAU,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,KAAK;QACH,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,EAAE,CAAC,MAAM,GAAG,GAAS,EAAE;YACrB,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC,uCAAuC;YAC5E,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,wDAAwD;YACpF,oFAAoF;YACpF,2EAA2E;YAC3E,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM;gBAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,CAAC,CAAC;QACF,EAAE,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAQ,EAAE;YAC3C,MAAM,IAAI,GAAY,KAAK,CAAC,IAAI,CAAC;YACjC,KAAK,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,GAAS,EAAE;YACtB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;YACrB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAChF,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,GAAS,EAAE;YACtB,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,mBAAmB;QACjB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO;QAC3D,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,gBAAgB,IAAI,sBAAsB,EAAE,CAAC;YACpD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,kBAAkB,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC;YACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC;QACtD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,gBAAgB;YAAE,OAAO;QACtF,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG;gBACR,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CACX,aAAa,CAAC;YACZ,IAAI,EAAE,WAAW,CAAC,cAAc;YAChC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,KAAmB;QAC3B,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACpC,+FAA+F;YAC/F,yFAAyF;YACzF,6CAA6C;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/transport/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,iBAAiB,GAIlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AA4C7D,iGAAiG;AACjG,SAAS,wBAAwB,CAAC,OAAmB;IACnD,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;IACxD,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,qGAAqG;AACrG,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,4FAA4F;AAC5F,MAAM,OAAO,SAAS;IACpB,GAAG,CAAwB;IAC3B,MAAM,GAAa,EAAE,CAAC;IACtB,OAAO,GAAG,KAAK,CAAC;IAChB,0FAA0F;IAC1F,kBAAkB,CAAqB;IACvC,qFAAqF;IACrF,KAAK,GAAG,KAAK,CAAC;IACd,qGAAqG;IACrG,cAAc,GAAG,KAAK,CAAC;IACvB,gEAAgE;IAChE,gBAAgB,GAAG,CAAC,CAAC;IACrB,6DAA6D;IAC7D,kBAAkB,GAAG,KAAK,CAAC;IAC3B,cAAc,GAAG,CAAC,CAAC;IACnB;2FACuF;IACvF,UAAU,CAAqB;IAC/B,kGAAkG;IAClG,mBAAmB,CAA2B;IACrC,KAAK,CAAgB;IACrB,IAAI,CAAe;IAE5B,YAAY,IAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;IACpC,CAAC;IAED,OAAO;QACL,IAAI,OAAO,SAAS,KAAK,WAAW;YAAE,OAAO;QAC7C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC,GAAG,EAAE,CACnF,IAAI,CAAC,UAAU,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,KAAK;QACH,IAAI,EAAa,CAAC;QAClB,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,gGAAgG;YAChG,8FAA8F;YAC9F,+FAA+F;YAC/F,8FAA8F;YAC9F,6FAA6F;YAC7F,iDAAiD;YACjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,EAAE,CAAC,MAAM,GAAG,GAAS,EAAE;YACrB,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC,uCAAuC;YAC5E,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,wDAAwD;YACpF,oFAAoF;YACpF,2EAA2E;YAC3E,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM;gBAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,CAAC,CAAC;QACF,EAAE,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAQ,EAAE;YAC3C,MAAM,IAAI,GAAY,KAAK,CAAC,IAAI,CAAC;YACjC,KAAK,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,CAAC,KAAiB,EAAQ,EAAE;YACvC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;YACrB,4FAA4F;YAC5F,+FAA+F;YAC/F,2FAA2F;YAC3F,wFAAwF;YACxF,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,4CAA4C,MAAM,kBAAkB,CAAC,CAAC;gBACnF,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAChF,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,GAAS,EAAE;YACtB,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,mBAAmB;QACjB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO;QAC3D,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,gBAAgB,IAAI,sBAAsB,EAAE,CAAC;YACpD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,kBAAkB,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC;YACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC;QACjD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO;QACrF,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG;gBACR,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CACX,aAAa,CAAC;YACZ,IAAI,EAAE,WAAW,CAAC,cAAc;YAChC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,KAAmB;QAC3B,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACpC,+FAA+F;YAC/F,yFAAyF;YACzF,6CAA6C;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;IACvB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reticlehq/browser",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Reticle browser SDK — installs observers, builds semantic snapshots, executes actions, talks to the bridge.",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,7 +13,7 @@
   },
   "dependencies": {
     "@testing-library/dom": "^10.4.1",
-    "@reticlehq/core": "2.1.0"
+    "@reticlehq/core": "2.2.0"
   },
   "devDependencies": {
     "@types/jsdom": "^28.0.3",
@@ -30,7 +30,8 @@
   "bugs": "https://github.com/reticlehq/reticle/issues",
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "NOTICE"
   ],
   "sideEffects": false,
   "keywords": [
@@ -43,6 +44,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "engines": {
+    "node": ">=20.0.0"
+  },
   "scripts": {
     "build": "tsc -b",
     "typecheck": "tsc -b",