@rindle/remote 0.4.4 → 0.6.3

package/dist/transport.d.ts

@@ -23,6 +23,11 @@ export interface Transport {
  *  it reopens and fires `onReconnect` so the source rebuilds its subscriptions. */
 export declare class WsTransport implements Transport {
     private readonly url;
+    /** Reads the subprotocols to offer at each (re)connect — in affinity mode, `["rindle.v1", "aff.…"]`
+     *  with the CURRENT ticket (FOLLOWER-AFFINITY-DESIGN.md §5). Undefined ⇒ offer none (today's
+     *  single-daemon behavior, byte-identical). Evaluated per connect so a reconnect presents the
+     *  freshest (or freshly cleared) ticket. */
+    private readonly subprotocols?;
     private ws;
     private handler;
     private reconnectHandler;
@@ -41,6 +46,7 @@ export declare class WsTransport implements Transport {
     private downFired;
     constructor(url: string, opts?: {
         downThreshold?: number;
+        subprotocols?: () => string[];
     });
     private connect;
     private scheduleReconnect;

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,WAAW,SAAS;IACxB,uCAAuC;IACvC,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC3B,gEAAgE;IAChE,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAC;IACnD;;wEAEoE;IACpE,WAAW,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACxC;;;;wCAIoC;IACpC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACnC,gCAAgC;IAChC,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;mFAGmF;AACnF,qBAAa,WAAY,YAAW,SAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,EAAE,CAAY;IACtB,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,gBAAgB,CAAwB;IAChD,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,cAAc,CAA4C;IAClE,gGAAgG;IAChG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC;;2CAEuC;IACvC,OAAO,CAAC,SAAS,CAAS;gBAEd,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAO;IAM9D,OAAO,CAAC,OAAO;IA8Bf,OAAO,CAAC,iBAAiB;IAiBzB,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI;IAK1B,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI;IAIlD,WAAW,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAItC,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAIjC,KAAK,IAAI,IAAI;CAQd"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,WAAW,SAAS;IACxB,uCAAuC;IACvC,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC3B,gEAAgE;IAChE,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAC;IACnD;;wEAEoE;IACpE,WAAW,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACxC;;;;wCAIoC;IACpC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACnC,gCAAgC;IAChC,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;mFAGmF;AACnF,qBAAa,WAAY,YAAW,SAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B;;;gDAG4C;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAiB;IAC/C,OAAO,CAAC,EAAE,CAAY;IACtB,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,gBAAgB,CAAwB;IAChD,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,cAAc,CAA4C;IAClE,gGAAgG;IAChG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC;;2CAEuC;IACvC,OAAO,CAAC,SAAS,CAAS;gBAEd,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,MAAM,EAAE,CAAA;KAAO;IAO7F,OAAO,CAAC,OAAO;IAiCf,OAAO,CAAC,iBAAiB;IAiBzB,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI;IAK1B,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI;IAIlD,WAAW,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAItC,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAIjC,KAAK,IAAI,IAAI;CAQd"}

package/dist/transport.js

@@ -7,6 +7,11 @@
  *  it reopens and fires `onReconnect` so the source rebuilds its subscriptions. */
 export class WsTransport {
     url;
+    /** Reads the subprotocols to offer at each (re)connect — in affinity mode, `["rindle.v1", "aff.…"]`
+     *  with the CURRENT ticket (FOLLOWER-AFFINITY-DESIGN.md §5). Undefined ⇒ offer none (today's
+     *  single-daemon behavior, byte-identical). Evaluated per connect so a reconnect presents the
+     *  freshest (or freshly cleared) ticket. */
+    subprotocols;
     ws;
     handler = () => { };
     reconnectHandler = () => { };
@@ -26,10 +31,14 @@ export class WsTransport {
     constructor(url, opts = {}) {
         this.url = url;
         this.downThreshold = opts.downThreshold ?? 4;
+        this.subprotocols = opts.subprotocols;
         this.ws = this.connect();
     }
     connect() {
-        const ws = new WebSocket(this.url);
+        // Offer the affinity subprotocols (base + current ticket) when configured; otherwise open bare,
+        // exactly as before. An empty list is treated as bare (never send `Sec-WebSocket-Protocol: `).
+        const protocols = this.subprotocols?.();
+        const ws = protocols && protocols.length > 0 ? new WebSocket(this.url, protocols) : new WebSocket(this.url);
         ws.addEventListener("open", () => {
             this.open = true;
             this.attempt = 0;

package/dist/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,2FAA2F;AAC3F,gFAAgF;AAuBhF;;;mFAGmF;AACnF,MAAM,OAAO,WAAW;IACL,GAAG,CAAS;IACrB,EAAE,CAAY;IACd,OAAO,GAA6B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7C,gBAAgB,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACxC,WAAW,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1B,OAAO,GAAgB,EAAE,CAAC;IACnC,IAAI,GAAG,KAAK,CAAC;IACb,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC;IACZ,cAAc,CAA4C;IAClE,gGAAgG;IAC/E,aAAa,CAAS;IACvC;;2CAEuC;IAC/B,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,GAAW,EAAE,OAAmC,EAAE;QAC5D,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,OAAO;QACb,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;YAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,6CAA6C;YACrE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,6EAA6E;gBAC7E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;oBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,qFAAqF;gBACrF,wEAAwE;gBACxE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,EAAgB,EAAE,EAAE;YAClD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAc,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YAChC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,gGAAgG;QAChG,wFAAwF;QACxF,uFAAuF;QACvF,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,GAAc;QACjB,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,OAAiC;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,WAAW,CAAC,OAAmB;QAC7B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,OAAmB;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,2FAA2F;AAC3F,gFAAgF;AAuBhF;;;mFAGmF;AACnF,MAAM,OAAO,WAAW;IACL,GAAG,CAAS;IAC7B;;;gDAG4C;IAC3B,YAAY,CAAkB;IACvC,EAAE,CAAY;IACd,OAAO,GAA6B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7C,gBAAgB,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACxC,WAAW,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1B,OAAO,GAAgB,EAAE,CAAC;IACnC,IAAI,GAAG,KAAK,CAAC;IACb,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC;IACZ,cAAc,CAA4C;IAClE,gGAAgG;IAC/E,aAAa,CAAS;IACvC;;2CAEuC;IAC/B,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,GAAW,EAAE,OAAkE,EAAE;QAC3F,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,OAAO;QACb,gGAAgG;QAChG,+FAA+F;QAC/F,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5G,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;YAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,6CAA6C;YACrE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,6EAA6E;gBAC7E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;oBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,qFAAqF;gBACrF,wEAAwE;gBACxE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,EAAgB,EAAE,EAAE;YAClD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAc,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YAChC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,gGAAgG;QAChG,wFAAwF;QACxF,uFAAuF;QACvF,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,GAAc;QACjB,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,OAAiC;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,WAAW,CAAC,OAAmB;QAC7B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,OAAmB;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rindle/remote",
-  "version": "0.4.4",
+  "version": "0.6.3",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -25,7 +25,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@rindle/client": "0.4.4"
+    "@rindle/client": "0.6.3"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",

package/src/affinity.ts

@@ -0,0 +1,137 @@
+// Browser-side follower-affinity ticket transport (FOLLOWER-AFFINITY-DESIGN.md §3, §5). The ticket
+// is OPAQUE here — the browser never mints or verifies it (placement, not authorization; §3, §9),
+// so this module carries no crypto. It is the thin seam three pieces share:
+//
+//   - {@link WsTransport} offers the held ticket as a ws subprotocol at each connect (so the Fly
+//     edge `fly-replay`s to the pinned follower);
+//   - {@link RemoteOptimisticSource} writes the follower's minted ticket from the `{t:"affinity"}`
+//     frame, and CLEARS it on a sustained outage (the pinned follower is gone → the next reconnect
+//     anycasts to a live one and re-pins, §8);
+//   - the lease POST forwards the held ticket as `affinity`, sequenced AFTER a fresh connect's mint
+//     frame ({@link AffinityTicketStore.waitForTicket}) so both legs land on the same follower (§4.1).
+
+/** The base ws subprotocol the browser offers alongside its `aff.*` ticket; the fleet follower
+ *  echoes it on the 101 (a strict browser closes a socket whose selected subprotocol it never
+ *  offered, so the base is always offered in affinity mode). Inlined — NOT imported from
+ *  `@rindle/affinity`'s `WS_SUBPROTOCOL` — to keep that crate's `node:crypto` out of the browser
+ *  bundle (the same duplicate-to-stay-bundle-clean discipline the lease wire types use). Keep the
+ *  two spellings in lock-step. */
+export const WS_SUBPROTOCOL = "rindle.v1";
+
+/** A mutable holder for the current opaque affinity ticket, shared by the transport, the source,
+ *  and the lease POST (see the module header). */
+export interface AffinityTicketStore {
+  /** The ticket to offer on the next ws handshake, or undefined — ticketless, so the edge
+   *  anycasts + mints a fresh one. A persisted/previous-connection ticket may be returned here
+   *  even while it is NOT yet safe for a lease; see {@link leaseTicket}. */
+  get(): string | undefined;
+  /** Record a freshly minted/refreshed ticket (from a connection's `{t:"affinity"}` frame). */
+  set(ticket: string): void;
+  /** Drop the ticket so the next connect goes ticketless (the pinned follower is gone, §8). */
+  clear(): void;
+  /** Mark the held ticket handshake-only until this connection emits a fresh mint frame. Called
+   *  before the first connection and every reconnect, after the held ticket was already selected
+   *  for the ws subprotocol offer. This prevents a restored/rotated/expired persisted ticket from
+   *  racing an HTTP lease onto an independently-anycast follower. */
+  connectionPending(): void;
+  /** Resolve with a ticket minted/refreshed on the CURRENT connection, or the next one
+   *  {@link set}. A persisted ticket deliberately does not resolve this wait. */
+  waitForTicket(): Promise<string>;
+  /** Obtain the current connection's ticket for an HTTP lease. The first missing-ticket wait is
+   *  bounded; its timeout removes the waiter and latches ticketless fallback, so later leases
+   *  return immediately until a mint frame arrives. Concurrent callers share the one timer.
+   *  `timedOut` is true only for that transition, allowing one warning per fallback episode. */
+  leaseTicket(timeoutMs: number): Promise<{ ticket?: string; timedOut: boolean }>;
+}
+
+/** Where a store persists the ticket across reloads. The browser backs this with sessionStorage
+ *  (per-TAB, so two tabs can pin two regions — design §13); tests pass none (pure in-memory). */
+export interface TicketPersistence {
+  load(): string | undefined;
+  save(ticket: string): void;
+  clear(): void;
+}
+
+/** Build an {@link AffinityTicketStore}, optionally persisted. Pure/in-memory when `persist` is
+ *  omitted. */
+export function createAffinityTicketStore(persist?: TicketPersistence): AffinityTicketStore {
+  let current = persist?.load();
+  // A loaded ticket is useful for the ws handshake, but is not lease-safe until the follower on
+  // THIS connection confirms it by minting a fresh frame. The same distinction is re-armed on
+  // every reconnect via `connectionPending`.
+  let currentConnectionFresh = false;
+  let ticketlessFallback = false;
+  let waiters: Array<(ticket: string) => void> = [];
+  let leaseWait:
+    | {
+        promise: Promise<{ ticket?: string; timedOut: boolean }>;
+        resolve: (result: { ticket?: string; timedOut: boolean }) => void;
+        timer: ReturnType<typeof setTimeout>;
+      }
+    | undefined;
+
+  const finishLeaseWait = (result: { ticket?: string; timedOut: boolean }): void => {
+    const pending = leaseWait;
+    if (!pending) return;
+    clearTimeout(pending.timer);
+    leaseWait = undefined;
+    pending.resolve(result);
+  };
+
+  return {
+    get: () => current,
+    set: (ticket) => {
+      current = ticket;
+      currentConnectionFresh = true;
+      ticketlessFallback = false;
+      persist?.save(ticket);
+      // Resolve everyone waiting for the (now-arrived) ticket, in FIFO order.
+      const pending = waiters;
+      waiters = [];
+      for (const resolve of pending) resolve(ticket);
+      finishLeaseWait({ ticket, timedOut: false });
+    },
+    clear: () => {
+      // Drop the ticket but leave any waiters pending — the next connect's mint frame resolves them
+      // (a dead-follower reassignment must still be able to lease once the new ticket arrives).
+      current = undefined;
+      currentConnectionFresh = false;
+      persist?.clear();
+    },
+    connectionPending: () => {
+      currentConnectionFresh = false;
+    },
+    waitForTicket: () =>
+      currentConnectionFresh && current !== undefined
+        ? Promise.resolve(current)
+        : new Promise<string>((resolve) => waiters.push(resolve)),
+    leaseTicket: (timeoutMs) => {
+      if (currentConnectionFresh && current !== undefined) {
+        return Promise.resolve({ ticket: current, timedOut: false });
+      }
+      if (ticketlessFallback) return Promise.resolve({ timedOut: false });
+      if (leaseWait) return leaseWait.promise;
+
+      let resolve!: (result: { ticket?: string; timedOut: boolean }) => void;
+      const promise = new Promise<{ ticket?: string; timedOut: boolean }>((r) => {
+        resolve = r;
+      });
+      const timer = setTimeout(() => {
+        // Clear the shared waiter before resolving callers. A later mint starts a new, fresh
+        // episode; no abandoned resolver accumulates per lease while affinity is off.
+        leaseWait = undefined;
+        ticketlessFallback = true;
+        resolve({ timedOut: true });
+      }, Math.max(0, timeoutMs));
+      leaseWait = { promise, resolve, timer };
+      return promise;
+    },
+  };
+}
+
+/** The subprotocol list to offer for one connection: the base protocol always, plus the held ticket
+ *  (already an `aff.<…>` token) when one exists. */
+export function offerSubprotocols(store: AffinityTicketStore): string[] {
+  const ticket = store.get();
+  return ticket ? [WS_SUBPROTOCOL, ticket] : [WS_SUBPROTOCOL];
+}

package/src/backend.ts

@@ -20,6 +20,7 @@ import {
   type SubscribeResolver,
 } from "./subscribe.ts";
 import { WsTransport } from "./transport.ts";
+import { retryDelayMs } from "./query-error.ts";
 import type { Transport } from "./transport.ts";
 
 interface QState {
@@ -31,6 +32,10 @@ interface QState {
   resubscribing: boolean;
   /** Monotonic token that cancels stale async lease resolutions. */
   subscribeTicket: number;
+  /** Pending retryable-error re-subscribe timer (FOLLOWER-LAG-SHED §6.3), if any. */
+  retryTimer: ReturnType<typeof setTimeout> | undefined;
+  /** Consecutive retryable errors without a successful hello — the backoff exponent. */
+  retryAttempt: number;
 }
 
 export interface RemoteBackendOptions {
@@ -60,11 +65,13 @@ export class RemoteBackend implements Backend {
       console.error(`[rindle-remote] flat query ${qid} has no named remote identity`);
       return;
     }
-    this.subs.set(qid, { remote, subscriber: null, epoch: 0, resubscribing: false, subscribeTicket: 0 });
+    this.subs.set(qid, { remote, subscriber: null, epoch: 0, resubscribing: false, subscribeTicket: 0, retryTimer: undefined, retryAttempt: 0 });
     this.subscribe(qid, remote);
   }
 
   unregisterQuery(qid: QueryId): void {
+    const s = this.subs.get(qid);
+    if (s?.retryTimer !== undefined) clearTimeout(s.retryTimer);
     this.subs.delete(qid);
     this.transport.send({ t: "unsubscribe", queryId: qid });
   }
@@ -93,6 +100,12 @@ export class RemoteBackend implements Backend {
   private subscribe(qid: QueryId, remote: RemoteQuery): void {
     const s = this.subs.get(qid);
     if (!s) return;
+    // A fresh subscribe (gap recovery, the retry timer itself) supersedes any scheduled
+    // retryable-error retry — never leave two subscribe paths racing for one query.
+    if (s.retryTimer !== undefined) {
+      clearTimeout(s.retryTimer);
+      s.retryTimer = undefined;
+    }
     const request = { queryId: qid, remote, mode: "flat" as const };
     const ticket = ++s.subscribeTicket;
     const send = (target: ReturnType<typeof defaultSubscribeTarget>) => {
@@ -117,8 +130,7 @@ export class RemoteBackend implements Backend {
 
   private onServerMsg(msg: ServerMsg): void {
     if (msg.t === "queryError") {
-      this.subs.delete(msg.queryId);
-      console.error(`[rindle-remote] query ${msg.queryId} subscription rejected: ${msg.message}`);
+      this.onQueryError(msg.queryId, msg);
       return;
     }
     // This backend is flat-only; it ignores normalized frames (`nhello`/`nbatch`).
@@ -129,6 +141,36 @@ export class RemoteBackend implements Backend {
     else this.applyBatch(msg.queryId, s, msg.batch);
   }
 
+  /** Route a `queryError` by its 101 §5 classification: retryable ⇒ keep the QState (and the
+   *  rows already folded downstream — 101 §6) and re-subscribe after a jittered backoff
+   *  honoring `retryAfterMs`; terminal (or pre-classification servers) ⇒ drop the
+   *  subscription, exactly as before (FOLLOWER-LAG-SHED §6.3). */
+  private onQueryError(qid: QueryId, err: { message: string; code?: string; retryable?: boolean; retryAfterMs?: number }): void {
+    const s = this.subs.get(qid);
+    if (!s) return;
+    if (err.retryable !== true) {
+      if (s.retryTimer !== undefined) clearTimeout(s.retryTimer);
+      this.subs.delete(qid);
+      console.error(`[rindle-remote] query ${qid} subscription rejected: ${err.message}`);
+      return;
+    }
+    if (s.retryTimer !== undefined) return; // a retry is already scheduled — don't stack them
+    s.subscriber = null; // stop validating the dead epoch; recovery is a fresh seq-0 hydrate
+    s.resubscribing = true;
+    const delay = retryDelayMs(s.retryAttempt++, err.retryAfterMs);
+    console.warn(
+      `[rindle-remote] query ${qid} ${err.code ?? "error"} (retryable): re-subscribing in ${delay}ms: ${err.message}`,
+    );
+    const timer = setTimeout(() => {
+      const cur = this.subs.get(qid);
+      if (cur !== s) return;
+      s.retryTimer = undefined;
+      this.subscribe(qid, s.remote);
+    }, delay);
+    (timer as { unref?: () => void }).unref?.();
+    s.retryTimer = timer;
+  }
+
   private openSubscriber(qid: QueryId, s: QState, hello: Hello): void {
     try {
       // The Subscriber ctor validates the comparator + fingerprint and emits the `hello`
@@ -136,6 +178,7 @@ export class RemoteBackend implements Backend {
       s.subscriber = new Subscriber(hello, (ev) => this.emitServerEvent(qid, ev));
       s.epoch = hello.epoch;
       s.resubscribing = false;
+      s.retryAttempt = 0; // a successful hello resets the retryable-error backoff
     } catch (e) {
       // A comparator/schema mismatch at hello is unrecoverable (a code-contract divergence) —
       // leave the view pending and report it; do not loop.

package/src/index.ts

@@ -9,6 +9,10 @@ export { RemoteBackend, createRemoteStore } from "./backend.ts";
 export type { RemoteBackendOptions } from "./backend.ts";
 export { WsTransport } from "./transport.ts";
 export type { Transport } from "./transport.ts";
+
+// Browser-side follower-affinity ticket transport (FOLLOWER-AFFINITY-DESIGN.md §3, §5).
+export { WS_SUBPROTOCOL, createAffinityTicketStore, offerSubprotocols } from "./affinity.ts";
+export type { AffinityTicketStore, TicketPersistence } from "./affinity.ts";
 export type {
   MutationEnvelopeSender,
   RawMutationSender,