@ttt-productions/chat-react 0.13.15 → 0.13.16

package/dist/realtime/inbox-client.js

@@ -7,9 +7,9 @@
 // mirrors the latest snapshot into an observable store + a per-channel unread set.
 // Same connection lifecycle as the channel client (subprotocol auth, reconnect,
 // 4401 re-grant once, 4403 stop, auth-switch teardown).
-import { createReconnectController } from '@ttt-productions/realtime-core';
-import { ChatMarkReadResultPayloadSchema, SERVER_KINDS, } from '@ttt-productions/chat-schemas';
-import { CLIENT_FRAME, CHAT_CLOSE_CODES, buildFrame, parseFrame, isInboxSnapshot, } from './wire.js';
+import { createReconnectController, } from '@ttt-productions/realtime-core';
+import { ChatMarkReadResultPayloadSchema, SERVER_KINDS, CLIENT_KINDS, CHAT_CLOSE_CODES, } from '@ttt-productions/chat-schemas';
+import { buildFrame, parseFrame, isInboxSnapshot, } from './wire.js';
 import { defaultTimers, isChatAccessDeniedError, isTerminalErrorCode, newCorrelationId, TERMINAL_ERROR_CODE, } from './shared.js';
 import { InitialLoadBudget } from './initial-load-budget.js';
 import { createDiagnosticsEmitter, safeDiagnosticLabel, CHAT_CLIENT_DIAGNOSTIC_EVENTS as DIAG, } from './diagnostics.js';
@@ -201,10 +201,14 @@ export class InboxClient {
             hasUnread: this.state.hasUnread,
         });
         // The DO sends a snapshot on accept; a `resume` re-requests it after a reconnect gap.
-        const sent = this.sendFrame(CLIENT_FRAME.RESUME, {});
+        const sent = this.sendFrame(CLIENT_KINDS.RESUME, {});
         // The inbox resume is CURSORLESS by contract (the DO always answers with a full
         // authoritative snapshot) — there is no `afterSeq` half to record here.
-        this.diag?.(DIAG.INBOX_RESUME_REQUEST, { attempt: this.connectAttempt, cursorless: true, sent });
+        this.diag?.(DIAG.INBOX_RESUME_REQUEST, {
+            attempt: this.connectAttempt,
+            cursorless: true,
+            sent,
+        });
     }
     onClose(code, _reason) {
         this.socket = null;
@@ -285,14 +289,18 @@ export class InboxClient {
         // carries either a full snapshot or a `{ hasUnread }` dock-dot patch. Route both
         // instead of silently dropping the `unread` type (C-M2).
         if (frame.type !== 'snapshot' && frame.type !== 'unread') {
-            this.diag?.(DIAG.INBOX_FRAME_DROPPED, { kind: safeDiagnosticLabel(frame.type), reason: 'unknown-type' });
+            this.diag?.(DIAG.INBOX_FRAME_DROPPED, {
+                kind: safeDiagnosticLabel(frame.type),
+                reason: 'unknown-type',
+            });
             return;
         }
         const payload = frame.payload;
         if (isInboxSnapshot(payload)) {
             this.applySnapshot(payload, frame.type);
         }
-        else if (frame.type === 'unread' && typeof payload.hasUnread === 'boolean') {
+        else if (frame.type === 'unread' &&
+            typeof payload.hasUnread === 'boolean') {
             const hasUnread = Boolean(payload.hasUnread);
             const before = this.state.hasUnread;
             this.setState({ hasUnread });
@@ -329,7 +337,13 @@ export class InboxClient {
         const before = this.state;
         if (!before.hasLoadedInitialData)
             this.initialLoad.loaded();
-        this.setState({ registry, hasUnread, unreadChannelRefs, hasLoadedInitialData: true, initialLoadFailed: false });
+        this.setState({
+            registry,
+            hasUnread,
+            unreadChannelRefs,
+            hasLoadedInitialData: true,
+            initialLoadFailed: false,
+        });
         if (!this.diag)
             return;
         // SIZES ONLY — a channelRef names one specific conversation and never enters a
@@ -344,7 +358,8 @@ export class InboxClient {
             unreadCount: unreadChannelRefs.length,
             registryDelta: registry.length - before.registry.length,
         });
-        const unreadChanged = before.hasUnread !== hasUnread || before.unreadChannelRefs.length !== unreadChannelRefs.length;
+        const unreadChanged = before.hasUnread !== hasUnread ||
+            before.unreadChannelRefs.length !== unreadChannelRefs.length;
         if (unreadChanged) {
             this.diag(DIAG.INBOX_UNREAD_UPDATED, {
                 source: safeDiagnosticLabel(source),
@@ -377,7 +392,7 @@ export class InboxClient {
      */
     markRead(channelRef) {
         const requestId = newCorrelationId();
-        const sent = this.sendFrame(CLIENT_FRAME.MARK_READ, { channelRef, requestId });
+        const sent = this.sendFrame(CLIENT_KINDS.MARK_READ, { channelRef, requestId });
         // The ref itself is never logged — only that a mark-read was written and what the
         // unread projection looked like at that moment (the DO's snapshot is what clears it).
         this.diag?.(DIAG.INBOX_MARK_READ, { sent, unreadCount: this.state.unreadChannelRefs.length });
@@ -389,7 +404,10 @@ export class InboxClient {
     applyMarkReadResult(payload) {
         const parsed = ChatMarkReadResultPayloadSchema.safeParse(payload);
         if (!parsed.success) {
-            this.diag?.(DIAG.INBOX_FRAME_DROPPED, { kind: SERVER_KINDS.MARK_READ_RESULT, reason: 'malformed-payload' });
+            this.diag?.(DIAG.INBOX_FRAME_DROPPED, {
+                kind: SERVER_KINDS.MARK_READ_RESULT,
+                reason: 'malformed-payload',
+            });
             return;
         }
         const resolve = this.pendingMarkReads.get(parsed.data.requestId);

package/dist/realtime/inbox-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbox-client.js","sourceRoot":"","sources":["../../src/realtime/inbox-client.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,mFAAmF;AACnF,gFAAgF;AAChF,wDAAwD;AAExD,OAAO,EAAE,yBAAyB,EAA4B,MAAM,gCAAgC,CAAC;AACrG,OAAO,EACL,+BAA+B,EAC/B,YAAY,GAEb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,eAAe,GAGhB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,6BAA6B,IAAI,IAAI,GAGtC,MAAM,kBAAkB,CAAC;AA+D1B,MAAM,OAAO,GAAqB;IAChC,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,KAAK;IAChB,iBAAiB,EAAE,EAAE;IACrB,aAAa,EAAE,IAAI;IACnB,oBAAoB,EAAE,KAAK;IAC3B,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,OAAO,WAAW;IA0BO;IAzBZ,MAAM,CAAkB;IACxB,UAAU,CAAsB;IACzC,MAAM,GAA0B,IAAI,CAAC;IACrC,KAAK,GAAqB,OAAO,CAAC;IACzB,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC9D,eAAe,GAAG,KAAK,CAAC;IACxB,cAAc,GAAqD,IAAI,CAAC;IACxE,UAAU,GAAG,KAAK,CAAC;IAC3B;;;OAGG;IACK,SAAS,GAAG,CAAC,CAAC;IACL,WAAW,CAAoB;IAChD,6FAA6F;IAC5E,gBAAgB,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC9F,qFAAqF;IACpE,IAAI,CAA+B;IACpD,4EAA4E;IACpE,cAAc,GAAG,CAAC,CAAC;IAC3B,uEAAuE;IAC/D,cAAc,GAAoF,SAAS,CAAC;IACpH,gFAAgF;IACxE,aAAa,GAAkB,IAAI,CAAC;IAE5C,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,yBAAyB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,EAAiC;QACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAEO,QAAQ,CAAC,KAAgC;QAC/C,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB;gBAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,WAAoB;QAC/C,+EAA+E;QAC/E,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,6EAA6E;QAC7E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,+EAA+E;QAC/E,6EAA6E;QAC7E,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAEO,uBAAuB;QAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAAE,OAAO;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE;YACtC,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC1C,CAAC,CAAC;QACH,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO;YACzC,4EAA4E;YAC5E,gFAAgF;YAChF,+EAA+E;YAC/E,+EAA+E;YAC/E,4EAA4E;YAC5E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjF,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACjD,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;gBAAE,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QACD,gFAAgF;QAChF,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC/D,uFAAuF;QACvF,4CAA4C;QAC5C,IAAI,MAAM,GAA0B,IAAI,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;QAClE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACjC,GAAG;YACH,UAAU;YACV,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG,EAAE;oBACX,IAAI,SAAS,EAAE;wBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjC,CAAC;gBACD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;oBAClB,IAAI,SAAS,EAAE;wBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;oBACxB,IAAI,SAAS,EAAE;wBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;aACzB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAClC,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;YACzC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,sFAAsF;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrD,gFAAgF;QAChF,wEAAwE;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,CAAC;IAEO,OAAO,CAAC,IAAY,EAAE,OAAe;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,6DAA6D;QAC7D,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACpE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAC1C,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,iBAAiB,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,CAAC,aAAa,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,OAAO,EAAE,IAAI,CAAC,cAAc;SAC7B,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,IAAI,CAAC,UAAU,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO;YAC5D,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjG,4EAA4E;QAC5E,iFAAiF;QACjF,yDAAyD;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACzG,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAgE,CAAC;QACvF,IAAI,eAAe,CAAC,OAA4B,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,aAAa,CAAC,OAA4B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAQ,OAAmC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1G,MAAM,SAAS,GAAG,OAAO,CAAE,OAAkC,CAAC,SAAS,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;oBACrC,MAAM,EAAE,cAAc;oBACtB,eAAe,EAAE,MAAM;oBACvB,cAAc,EAAE,SAAS;oBACzB,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM;oBACtD,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM;oBACrD,gBAAgB,EAAE,CAAC;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,+EAA+E;YAC/E,sEAAsE;YACtE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBACpC,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrC,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAuB,EAAE,MAAc;QAC3D,oFAAoF;QACpF,gFAAgF;QAChF,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACnE,oFAAoF;QACpF,kFAAkF;QAClF,mFAAmF;QACnF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,+EAA+E;QAC/E,mBAAmB;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACrC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC9B,uEAAuE;YACvE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;YAC5D,SAAS;YACT,WAAW,EAAE,iBAAiB,CAAC,MAAM;YACrC,aAAa,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM;SACxD,CAAC,CAAC;QACH,MAAM,aAAa,GACjB,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,CAAC;QACjG,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACnC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;gBACnC,eAAe,EAAE,MAAM,CAAC,SAAS;gBACjC,cAAc,EAAE,SAAS;gBACzB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM;gBAClD,gBAAgB,EAAE,iBAAiB,CAAC,MAAM;gBAC1C,gBAAgB,EAAE,iBAAiB,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,OAAgC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,gBAAgB,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAkB;QACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,kFAAkF;QAClF,sFAAsF;QACtF,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,4FAA4F;IACpF,mBAAmB,CAAC,OAA4C;QACtE,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC5G,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAEO,sBAAsB,CAAC,OAA4B;QACzD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,kEAAkE;IAClE,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,2EAA2E;YAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACnC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;YAAE,SAAS;QAClC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["// The Inbox realtime client: a SEPARATE WebSocket (scope `inbox`) to the user's\n// inbox DO. It maintains the channel/invite registry + unread projection that\n// drives the inbox view — DOTS ONLY, no counts (Contract C / \"Unread + inbox\").\n//\n// The inbox DO pushes a full `snapshot` ({ registry, hasUnread }) on connect, on\n// `resume`, and on every live delta (a projection apply). This client just\n// mirrors the latest snapshot into an observable store + a per-channel unread set.\n// Same connection lifecycle as the channel client (subprotocol auth, reconnect,\n// 4401 re-grant once, 4403 stop, auth-switch teardown).\n\nimport { createReconnectController, type ReconnectController } from '@ttt-productions/realtime-core';\nimport {\n  ChatMarkReadResultPayloadSchema,\n  SERVER_KINDS,\n  type ChatMarkReadFailureCode,\n} from '@ttt-productions/chat-schemas';\nimport {\n  CLIENT_FRAME,\n  CHAT_CLOSE_CODES,\n  buildFrame,\n  parseFrame,\n  isInboxSnapshot,\n  type WireInboxSnapshot,\n  type WireRegistryEntry,\n} from './wire.js';\nimport type { RealtimeSocket, SocketFactory } from './socket.js';\nimport type { GrantProvider, TransportTimers, RealtimeStatus } from './shared.js';\nimport {\n  defaultTimers,\n  isChatAccessDeniedError,\n  isTerminalErrorCode,\n  newCorrelationId,\n  TERMINAL_ERROR_CODE,\n} from './shared.js';\nimport { InitialLoadBudget } from './initial-load-budget.js';\nimport {\n  createDiagnosticsEmitter,\n  safeDiagnosticLabel,\n  CHAT_CLIENT_DIAGNOSTIC_EVENTS as DIAG,\n  type ChatClientDiagnosticsEmitter,\n  type ChatClientDiagnosticsOption,\n} from './diagnostics.js';\n\nexport interface InboxClientState {\n  status: RealtimeStatus;\n  /** Active (non-tombstoned) channel/invite registry entries — inbox-view visibility. */\n  registry: WireRegistryEntry[];\n  /** True if ANY active channel/invite has unread (drives the dock dot). */\n  hasUnread: boolean;\n  /** The set of channelRefs that currently carry an unread dot (per-row dots). */\n  unreadChannelRefs: string[];\n  /**\n   * The last TERMINAL error code (mirrors `ChannelClientState.lastErrorCode`):\n   * `'access-denied'` when the inbox grant provider throws `ChatAccessDeniedError`\n   * (a genuine, terminal policy \"no\" — e.g. a banned/suspended account), and\n   * `'revoked'` on a 4403 REVOKED close. Null while healthy and across transient\n   * reconnects. The app subscribes to inbox state directly (there is no inbox React\n   * hook in this package), so this stable code is the surface — it invents no new UI.\n   */\n  lastErrorCode: string | null;\n  /**\n   * True once the first authoritative snapshot has been applied — the registry and dots\n   * are then the inbox runtime's answer, so an empty registry means \"nothing here\"\n   * rather than \"not loaded yet\". Once true it stays true.\n   */\n  hasLoadedInitialData: boolean;\n  /**\n   * True once the first open has failed for long enough to say so — the same rule as\n   * `ChannelClientState.initialLoadFailed`. Cleared by the first snapshot or `retryNow()`.\n   */\n  initialLoadFailed: boolean;\n}\n\n/**\n * How one `markRead` ended: `ok` — the inbox runtime advanced the read cursor (its\n * fresh snapshot clears the dot); otherwise `code` says why not — the runtime's own\n * reason, `not-sent` (no open socket, nothing was sent), or `connection-lost` (the\n * socket closed before the answer arrived, so the outcome is unknown and the dot stays).\n */\nexport type ChatMarkReadOutcome =\n  | { ok: true }\n  | { ok: false; code: ChatMarkReadFailureCode | 'not-sent' | 'connection-lost' };\n\nexport interface InboxClientConfig {\n  endpoint: string;\n  /** The authenticated uid (the inbox owner; the DO serves no one else's data). */\n  currentUserId: string;\n  /** Mints/refreshes an INBOX-scope grant (scope `{ kind:'inbox', uid }`). */\n  grantProvider: GrantProvider;\n  socketFactory: SocketFactory;\n  timers?: TransportTimers;\n  reconnect?: { baseDelayMs?: number; maxDelayMs?: number; maxAttempts?: number | null; random?: () => number };\n  /**\n   * OPT-IN structured client diagnostics — the SAME option type and emitter the\n   * channel client uses (one owner, `./diagnostics.ts`). Default OFF: absent or\n   * `false` changes nothing and costs one nullish check. `true` emits one\n   * single-line `console.debug` entry per decision under the stable\n   * `chat_client_inbox_*` names; a function routes them to the app's logger.\n   * Inbox payloads are SIZES ONLY — registry/unread counts and deltas, never a\n   * `channelRef` (which names one specific conversation).\n   */\n  diagnostics?: ChatClientDiagnosticsOption;\n}\n\nconst INITIAL: InboxClientState = {\n  status: 'idle',\n  registry: [],\n  hasUnread: false,\n  unreadChannelRefs: [],\n  lastErrorCode: null,\n  hasLoadedInitialData: false,\n  initialLoadFailed: false,\n};\n\nexport class InboxClient {\n  private readonly timers: TransportTimers;\n  private readonly controller: ReconnectController;\n  private socket: RealtimeSocket | null = null;\n  private state: InboxClientState = INITIAL;\n  private readonly listeners = new Set<(s: InboxClientState) => void>();\n  private reauthAttempted = false;\n  private reconnectTimer: ReturnType<TransportTimers['setTimeout']> | null = null;\n  private closedByUs = false;\n  /**\n   * The current lifecycle's number, advanced by every `connect()` and `close()`; a grant,\n   * timer, or socket callback of an older lifecycle is ignored (FRONTEND-108).\n   */\n  private lifecycle = 0;\n  private readonly initialLoad: InitialLoadBudget;\n  /** Mark-reads sent on the current socket, awaiting their correlated result, by requestId. */\n  private readonly pendingMarkReads = new Map<string, (outcome: ChatMarkReadOutcome) => void>();\n  /** Structured diagnostics emitter, or null when off (the default, zero-overhead). */\n  private readonly diag: ChatClientDiagnosticsEmitter;\n  /** Monotonic socket-open attempt counter (diagnostics correlation only). */\n  private connectAttempt = 0;\n  /** Why the CURRENT connect attempt is happening (diagnostics only). */\n  private reconnectCause: 'initial' | 'auth-expired' | 'transient-close' | 'grant-error' | 'manual-retry' = 'initial';\n  /** The last close code observed, carried into the next attempt's cause line. */\n  private lastCloseCode: number | null = null;\n\n  constructor(private readonly config: InboxClientConfig) {\n    this.timers = config.timers ?? defaultTimers;\n    this.controller = createReconnectController(config.reconnect ?? {});\n    this.diag = createDiagnosticsEmitter(config.diagnostics);\n    this.initialLoad = new InitialLoadBudget(this.timers, () => this.reportInitialLoadFailed());\n  }\n\n  getState(): InboxClientState {\n    return this.state;\n  }\n\n  subscribe(fn: (s: InboxClientState) => void): () => void {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n\n  private setState(patch: Partial<InboxClientState>): void {\n    this.state = { ...this.state, ...patch };\n    for (const fn of this.listeners) fn(this.state);\n  }\n\n  async connect(): Promise<void> {\n    return this.startLifecycle(true);\n  }\n\n  /**\n   * Retry now (the first-open failure's Retry) — the same rule as `ChannelClient.retryNow`:\n   * a reconnect waiting out its backoff opens at once; a stopped lifecycle starts again; an\n   * attempt in flight is left to finish; the first-open failure clears either way.\n   */\n  retryNow(): void {\n    if (!this.state.hasLoadedInitialData) this.initialLoad.manualRetry();\n    if (this.state.status === 'closed') {\n      void this.startLifecycle(false);\n      return;\n    }\n    if (this.reconnectTimer == null) {\n      if (this.state.initialLoadFailed) this.setState({ initialLoadFailed: false });\n      return;\n    }\n    this.timers.clearTimeout(this.reconnectTimer);\n    this.reconnectTimer = null;\n    this.controller.reset();\n    this.controller.start();\n    this.reconnectCause = 'manual-retry';\n    this.setState({ status: 'reconnecting', initialLoadFailed: false });\n    void this.openSocket();\n  }\n\n  private async startLifecycle(freshBudget: boolean): Promise<void> {\n    // Idempotency guard (mirrors ChannelClient): connect() only starts a lifecycle\n    // from a fresh (idle) or fully torn-down (closed) state. A second connect()\n    // while one is already connecting / open / reconnecting is a no-op, so a\n    // double-mounted dock cannot open a SECOND inbox socket against the per-uid\n    // cap. The reconnect path uses openSocket() / scheduleReconnect() directly\n    // (never connect()), so this never blocks a legitimate reconnect.\n    if (this.state.status !== 'idle' && this.state.status !== 'closed') return;\n    // REVIVE the controller. `controller.close()` is PERMANENT: while it is in\n    // state `closed`, `start()` and `onOpen()` no-op and every later `onClose()`\n    // returns null — so without this reset a close() → connect() client opens a\n    // socket and works normally until its FIRST transient close, then parks\n    // terminally in `closed` with reconnect disabled and no surfaced error code.\n    this.controller.reset();\n    // A terminal verdict (4403 REVOKED / ChatAccessDeniedError) is terminal WITHIN\n    // its lifecycle; an explicit connect() is a fresh attempt the authority may\n    // legitimately re-deny, so the previous lifecycle's code must not persist.\n    // The registry/unread projection is deliberately KEPT — the DO's next snapshot\n    // is authoritative, and blanking the dock on every restart is pure UI churn.\n    if (isTerminalErrorCode(this.state.lastErrorCode)) this.setState({ lastErrorCode: null });\n    this.closedByUs = false;\n    this.lifecycle += 1;\n    this.reconnectCause = 'initial';\n    if (!this.state.hasLoadedInitialData) this.initialLoad.begin(freshBudget);\n    this.controller.start();\n    this.setState({ status: 'connecting', initialLoadFailed: false });\n    await this.openSocket();\n  }\n\n  private reportInitialLoadFailed(): void {\n    if (this.state.hasLoadedInitialData || this.state.initialLoadFailed) return;\n    this.setState({ initialLoadFailed: true });\n  }\n\n  private async openSocket(): Promise<void> {\n    const lifecycle = this.lifecycle;\n    this.connectAttempt += 1;\n    this.diag?.(DIAG.INBOX_CONNECT_ATTEMPT, {\n      attempt: this.connectAttempt,\n      cause: this.reconnectCause,\n      closeCode: this.lastCloseCode,\n      registryCount: this.state.registry.length,\n    });\n    let grantToken: string;\n    try {\n      grantToken = await this.config.grantProvider();\n    } catch (err) {\n      if (lifecycle !== this.lifecycle) return;\n      // A TERMINAL access denial (the app translated an authoritative policy \"no\"\n      // — e.g. Firebase `permission-denied` for a banned/suspended account — into the\n      // package-owned ChatAccessDeniedError) must NOT reconnect: the next mint would\n      // just re-deny, reconnect-looping forever and warning every cycle. Every other\n      // mint failure (network/transient) stays retryable and backs off as before.\n      const terminal = isChatAccessDeniedError(err);\n      this.diag?.(DIAG.INBOX_GRANT_FAILED, { attempt: this.connectAttempt, terminal });\n      if (terminal) return this.denyAccessTerminally();\n      this.reconnectCause = 'grant-error';\n      if (!this.state.hasLoadedInitialData) this.initialLoad.noteFailedAttempt();\n      return this.scheduleReconnect();\n    }\n    // A grant minted for an earlier lifecycle must never open a socket in this one.\n    if (lifecycle !== this.lifecycle || this.closedByUs) return;\n    const url = `${this.config.endpoint.replace(/\\/$/, '')}/inbox`;\n    // Every callback is fenced to THIS socket: once it has been replaced or torn down, its\n    // late open, frames, and close are ignored.\n    let socket: RealtimeSocket | null = null;\n    const isCurrent = () => socket !== null && this.socket === socket;\n    socket = this.config.socketFactory({\n      url,\n      grantToken,\n      handlers: {\n        onOpen: () => {\n          if (isCurrent()) this.onOpen();\n        },\n        onMessage: (data) => {\n          if (isCurrent()) this.onMessage(data);\n        },\n        onClose: (code, reason) => {\n          if (isCurrent()) this.onClose(code, reason);\n        },\n        onError: () => undefined,\n      },\n    });\n    this.socket = socket;\n  }\n\n  private onOpen(): void {\n    this.controller.onOpen();\n    this.reauthAttempted = false;\n    this.setState({ status: 'open' });\n    this.diag?.(DIAG.INBOX_SOCKET_OPEN, {\n      attempt: this.connectAttempt,\n      cause: this.reconnectCause,\n      registryCount: this.state.registry.length,\n      hasUnread: this.state.hasUnread,\n    });\n    // The DO sends a snapshot on accept; a `resume` re-requests it after a reconnect gap.\n    const sent = this.sendFrame(CLIENT_FRAME.RESUME, {});\n    // The inbox resume is CURSORLESS by contract (the DO always answers with a full\n    // authoritative snapshot) — there is no `afterSeq` half to record here.\n    this.diag?.(DIAG.INBOX_RESUME_REQUEST, { attempt: this.connectAttempt, cursorless: true, sent });\n  }\n\n  private onClose(code: number, _reason: string): void {\n    this.socket = null;\n    this.lastCloseCode = code;\n    // A mark-read sent on this socket can no longer be answered.\n    this.settlePendingMarkReads({ ok: false, code: 'connection-lost' });\n    if (this.closedByUs) {\n      this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: true, outcome: 'closed' });\n      this.setState({ status: 'closed' });\n      return;\n    }\n    if (code === CHAT_CLOSE_CODES.AUTH_EXPIRED && !this.reauthAttempted) {\n      this.reauthAttempted = true;\n      this.reconnectCause = 'auth-expired';\n      this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: false, outcome: 're-grant' });\n      this.setState({ status: 'reconnecting' });\n      void this.openSocket();\n      return;\n    }\n    if (code === CHAT_CLOSE_CODES.REVOKED) {\n      this.closedByUs = true;\n      this.controller.close();\n      this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: false, outcome: 'revoked' });\n      this.setState({ status: 'closed', lastErrorCode: TERMINAL_ERROR_CODE.REVOKED });\n      this.reportInitialLoadFailed();\n      return;\n    }\n    this.reconnectCause = 'transient-close';\n    if (!this.state.hasLoadedInitialData) this.initialLoad.noteFailedAttempt();\n    this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: false, outcome: 'reconnect' });\n    this.scheduleReconnect();\n  }\n\n  /**\n   * Terminal access denial surfaced by the inbox grant provider\n   * (`ChatAccessDeniedError`). Same terminal posture as the 4403 REVOKED close: mark\n   * closed-by-us, close the reconnect controller, and surface the stable\n   * `access-denied` code. The inbox client tracks NO optimistic/pending sends\n   * (mark-read is fire-and-forget with no local pending state), so — unlike\n   * ChannelClient — there is nothing to fail here; only the lifecycle stops.\n   */\n  private denyAccessTerminally(): void {\n    this.closedByUs = true;\n    this.controller.close();\n    this.initialLoad.dispose();\n    this.setState({ status: 'closed', lastErrorCode: TERMINAL_ERROR_CODE.ACCESS_DENIED });\n  }\n\n  private scheduleReconnect(): void {\n    const delay = this.controller.onClose();\n    this.diag?.(DIAG.INBOX_RECONNECT_SCHEDULED, {\n      delayMs: delay,\n      cause: this.reconnectCause,\n      attempt: this.connectAttempt,\n    });\n    if (delay == null) {\n      this.setState({ status: 'closed' });\n      this.reportInitialLoadFailed();\n      return;\n    }\n    this.setState({ status: 'reconnecting' });\n    const lifecycle = this.lifecycle;\n    this.reconnectTimer = this.timers.setTimeout(() => {\n      this.reconnectTimer = null;\n      if (this.closedByUs || lifecycle !== this.lifecycle) return;\n      void this.openSocket();\n    }, delay);\n  }\n\n  private onMessage(data: string): void {\n    const frame = parseFrame(data);\n    if (!frame || !frame.payload) {\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, { kind: 'unparseable', reason: 'bad-envelope' });\n      return;\n    }\n    if (frame.type === SERVER_KINDS.MARK_READ_RESULT) return this.applyMarkReadResult(frame.payload);\n    // The inbox DO pushes a full `snapshot`; a future lightweight `unread` push\n    // carries either a full snapshot or a `{ hasUnread }` dock-dot patch. Route both\n    // instead of silently dropping the `unread` type (C-M2).\n    if (frame.type !== 'snapshot' && frame.type !== 'unread') {\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, { kind: safeDiagnosticLabel(frame.type), reason: 'unknown-type' });\n      return;\n    }\n    const payload = frame.payload as unknown as WireInboxSnapshot | { hasUnread: boolean };\n    if (isInboxSnapshot(payload as WireInboxSnapshot)) {\n      this.applySnapshot(payload as WireInboxSnapshot, frame.type);\n    } else if (frame.type === 'unread' && typeof (payload as { hasUnread?: unknown }).hasUnread === 'boolean') {\n      const hasUnread = Boolean((payload as { hasUnread: boolean }).hasUnread);\n      const before = this.state.hasUnread;\n      this.setState({ hasUnread });\n      if (before !== hasUnread) {\n        this.diag?.(DIAG.INBOX_UNREAD_UPDATED, {\n          source: 'unread-patch',\n          hasUnreadBefore: before,\n          hasUnreadAfter: hasUnread,\n          unreadCountBefore: this.state.unreadChannelRefs.length,\n          unreadCountAfter: this.state.unreadChannelRefs.length,\n          unreadCountDelta: 0,\n        });\n      }\n    } else {\n      // A stray CHANNEL snapshot ({ lastMessageSeq, readSeq }) on the inbox socket —\n      // deliberately inert, but never silently invisible under diagnostics.\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, {\n        kind: safeDiagnosticLabel(frame.type),\n        reason: 'not-an-inbox-payload',\n      });\n    }\n  }\n\n  private applySnapshot(snap: WireInboxSnapshot, source: string): void {\n    // Keep every non-tombstoned entry — including ARCHIVED rows — so the inbox view can\n    // render both the active list and the Archived toggle. `archived` is a distinct\n    // dimension from `tombstoned`; archived rows are still `state: 'active'`.\n    const registry = snap.registry.filter((e) => e.state === 'active');\n    // The DO's `hasUnread` is the authoritative dock dot. Per-row dots are derived from\n    // the same projection but exclude ARCHIVED rows (archive = done — an archived row\n    // never shows a dot). The DO clears unread on archive, so this is belt-and-braces.\n    const unreadChannelRefs = deriveUnreadRefs(snap);\n    const hasUnread = Boolean(snap.hasUnread);\n    const before = this.state;\n    if (!before.hasLoadedInitialData) this.initialLoad.loaded();\n    this.setState({ registry, hasUnread, unreadChannelRefs, hasLoadedInitialData: true, initialLoadFailed: false });\n    if (!this.diag) return;\n    // SIZES ONLY — a channelRef names one specific conversation and never enters a\n    // diagnostic line.\n    this.diag(DIAG.INBOX_SNAPSHOT_APPLIED, {\n      source: safeDiagnosticLabel(source),\n      received: snap.registry.length,\n      // `received - active` is the tombstoned count the client filtered out.\n      active: registry.length,\n      archived: registry.filter((e) => e.archived === true).length,\n      hasUnread,\n      unreadCount: unreadChannelRefs.length,\n      registryDelta: registry.length - before.registry.length,\n    });\n    const unreadChanged =\n      before.hasUnread !== hasUnread || before.unreadChannelRefs.length !== unreadChannelRefs.length;\n    if (unreadChanged) {\n      this.diag(DIAG.INBOX_UNREAD_UPDATED, {\n        source: safeDiagnosticLabel(source),\n        hasUnreadBefore: before.hasUnread,\n        hasUnreadAfter: hasUnread,\n        unreadCountBefore: before.unreadChannelRefs.length,\n        unreadCountAfter: unreadChannelRefs.length,\n        unreadCountDelta: unreadChannelRefs.length - before.unreadChannelRefs.length,\n      });\n    }\n  }\n\n  private sendFrame(type: string, payload: Record<string, unknown>): boolean {\n    if (!this.socket || !this.socket.isOpen) return false;\n    this.socket.send(buildFrame(type, payload));\n    return true;\n  }\n\n  /** True if a specific channel/invite currently carries an unread dot. */\n  channelHasUnread(channelRef: string): boolean {\n    return this.state.unreadChannelRefs.includes(channelRef);\n  }\n\n  /**\n   * Clear a channel/invite's unread WITHOUT opening it (the inbox-view mark-read\n   * controls). Sends `mark-read` with a fresh `requestId`; the inbox runtime advances the\n   * member's read cursor, pushes a fresh authoritative snapshot (which is what removes\n   * the dot — there is NO optimistic local clear), and answers with a\n   * `mark-read-result` naming the same request. The promise settles on that answer —\n   * never on a timer — or with `not-sent` when no socket is open, or `connection-lost`\n   * when the socket closes first.\n   */\n  markRead(channelRef: string): Promise<ChatMarkReadOutcome> {\n    const requestId = newCorrelationId();\n    const sent = this.sendFrame(CLIENT_FRAME.MARK_READ, { channelRef, requestId });\n    // The ref itself is never logged — only that a mark-read was written and what the\n    // unread projection looked like at that moment (the DO's snapshot is what clears it).\n    this.diag?.(DIAG.INBOX_MARK_READ, { sent, unreadCount: this.state.unreadChannelRefs.length });\n    if (!sent) return Promise.resolve({ ok: false, code: 'not-sent' });\n    return new Promise((resolve) => this.pendingMarkReads.set(requestId, resolve));\n  }\n\n  /** Settle the mark-read the result names; a result naming no pending request is ignored. */\n  private applyMarkReadResult(payload: Record<string, unknown> | undefined): void {\n    const parsed = ChatMarkReadResultPayloadSchema.safeParse(payload);\n    if (!parsed.success) {\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, { kind: SERVER_KINDS.MARK_READ_RESULT, reason: 'malformed-payload' });\n      return;\n    }\n    const resolve = this.pendingMarkReads.get(parsed.data.requestId);\n    if (!resolve) return;\n    this.pendingMarkReads.delete(parsed.data.requestId);\n    resolve(parsed.data.ok ? { ok: true } : { ok: false, code: parsed.data.code });\n  }\n\n  private settlePendingMarkReads(outcome: ChatMarkReadOutcome): void {\n    const pending = [...this.pendingMarkReads.values()];\n    this.pendingMarkReads.clear();\n    for (const resolve of pending) resolve(outcome);\n  }\n\n  /** Permanently close (auth-user switch / unmount). Idempotent. */\n  close(): void {\n    this.closedByUs = true;\n    this.lifecycle += 1;\n    this.controller.close();\n    this.initialLoad.dispose();\n    if (this.reconnectTimer != null) {\n      this.timers.clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n    if (this.socket) {\n      // Detach first: the socket's own late close is not this lifecycle's event.\n      const socket = this.socket;\n      this.socket = null;\n      socket.close(1000, 'client teardown');\n    }\n    this.settlePendingMarkReads({ ok: false, code: 'connection-lost' });\n    this.setState({ status: 'closed' });\n  }\n}\n\n/**\n * Derive the per-channel unread set from a snapshot. The inbox DO's snapshot\n * carries a per-entry `unread` boolean on every active registry entry alongside\n * the global `hasUnread` roll-up that drives the dock dot. An entry without the\n * field (a legacy/pre-per-entry row) simply carries no per-row dot — the dock dot\n * still lights off `hasUnread`.\n *\n * ARCHIVED rows are excluded from the unread roll-up (archive = done — the DO clears\n * unread on archive; the client also never counts them).\n */\nfunction deriveUnreadRefs(snap: WireInboxSnapshot): string[] {\n  const refs: string[] = [];\n  for (const e of snap.registry) {\n    if (e.state !== 'active') continue;\n    if (e.archived === true) continue;\n    if (e.unread === true) refs.push(e.channelRef);\n  }\n  return refs;\n}\n"]}
+{"version":3,"file":"inbox-client.js","sourceRoot":"","sources":["../../src/realtime/inbox-client.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,mFAAmF;AACnF,gFAAgF;AAChF,wDAAwD;AAExD,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,+BAA+B,EAC/B,YAAY,EAEZ,YAAY,EACZ,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,UAAU,EACV,UAAU,EACV,eAAe,GAGhB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,6BAA6B,IAAI,IAAI,GAGtC,MAAM,kBAAkB,CAAC;AAmE1B,MAAM,OAAO,GAAqB;IAChC,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,KAAK;IAChB,iBAAiB,EAAE,EAAE;IACrB,aAAa,EAAE,IAAI;IACnB,oBAAoB,EAAE,KAAK;IAC3B,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,OAAO,WAAW;IA2BO;IA1BZ,MAAM,CAAkB;IACxB,UAAU,CAAsB;IACzC,MAAM,GAA0B,IAAI,CAAC;IACrC,KAAK,GAAqB,OAAO,CAAC;IACzB,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC9D,eAAe,GAAG,KAAK,CAAC;IACxB,cAAc,GAAqD,IAAI,CAAC;IACxE,UAAU,GAAG,KAAK,CAAC;IAC3B;;;OAGG;IACK,SAAS,GAAG,CAAC,CAAC;IACL,WAAW,CAAoB;IAChD,6FAA6F;IAC5E,gBAAgB,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC9F,qFAAqF;IACpE,IAAI,CAA+B;IACpD,4EAA4E;IACpE,cAAc,GAAG,CAAC,CAAC;IAC3B,uEAAuE;IAC/D,cAAc,GAC8D,SAAS,CAAC;IAC9F,gFAAgF;IACxE,aAAa,GAAkB,IAAI,CAAC;IAE5C,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,yBAAyB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,EAAiC;QACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAEO,QAAQ,CAAC,KAAgC;QAC/C,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB;gBAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,WAAoB;QAC/C,+EAA+E;QAC/E,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,6EAA6E;QAC7E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,+EAA+E;QAC/E,6EAA6E;QAC7E,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAEO,uBAAuB;QAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAAE,OAAO;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE;YACtC,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC1C,CAAC,CAAC;QACH,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO;YACzC,4EAA4E;YAC5E,gFAAgF;YAChF,+EAA+E;YAC/E,+EAA+E;YAC/E,4EAA4E;YAC5E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjF,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACjD,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;gBAAE,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QACD,gFAAgF;QAChF,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC/D,uFAAuF;QACvF,4CAA4C;QAC5C,IAAI,MAAM,GAA0B,IAAI,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;QAClE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACjC,GAAG;YACH,UAAU;YACV,QAAQ,EAAE;gBACR,MAAM,EAAE,GAAG,EAAE;oBACX,IAAI,SAAS,EAAE;wBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjC,CAAC;gBACD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;oBAClB,IAAI,SAAS,EAAE;wBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;oBACxB,IAAI,SAAS,EAAE;wBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;aACzB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAClC,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;YACzC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,sFAAsF;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrD,gFAAgF;QAChF,wEAAwE;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACrC,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI;YAChB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,IAAY,EAAE,OAAe;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,6DAA6D;QAC7D,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACpE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAC1C,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,iBAAiB,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,CAAC,aAAa,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,OAAO,EAAE,IAAI,CAAC,cAAc;SAC7B,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,IAAI,CAAC,UAAU,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO;YAC5D,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,gBAAgB;YAC9C,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,4EAA4E;QAC5E,iFAAiF;QACjF,yDAAyD;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBACpC,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrC,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAgE,CAAC;QACvF,IAAI,eAAe,CAAC,OAA4B,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,aAAa,CAAC,OAA4B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;aAAM,IACL,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvB,OAAQ,OAAmC,CAAC,SAAS,KAAK,SAAS,EACnE,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAE,OAAkC,CAAC,SAAS,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;oBACrC,MAAM,EAAE,cAAc;oBACtB,eAAe,EAAE,MAAM;oBACvB,cAAc,EAAE,SAAS;oBACzB,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM;oBACtD,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM;oBACrD,gBAAgB,EAAE,CAAC;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,+EAA+E;YAC/E,sEAAsE;YACtE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBACpC,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrC,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAuB,EAAE,MAAc;QAC3D,oFAAoF;QACpF,gFAAgF;QAChF,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACnE,oFAAoF;QACpF,kFAAkF;QAClF,mFAAmF;QACnF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC;YACZ,QAAQ;YACR,SAAS;YACT,iBAAiB;YACjB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,+EAA+E;QAC/E,mBAAmB;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACrC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC9B,uEAAuE;YACvE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;YAC5D,SAAS;YACT,WAAW,EAAE,iBAAiB,CAAC,MAAM;YACrC,aAAa,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM;SACxD,CAAC,CAAC;QACH,MAAM,aAAa,GACjB,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,CAAC;QAC/D,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACnC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;gBACnC,eAAe,EAAE,MAAM,CAAC,SAAS;gBACjC,cAAc,EAAE,SAAS;gBACzB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM;gBAClD,gBAAgB,EAAE,iBAAiB,CAAC,MAAM;gBAC1C,gBAAgB,EAAE,iBAAiB,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,OAAgC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,gBAAgB,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAkB;QACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,kFAAkF;QAClF,sFAAsF;QACtF,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,4FAA4F;IACpF,mBAAmB,CAAC,OAA4C;QACtE,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBACpC,IAAI,EAAE,YAAY,CAAC,gBAAgB;gBACnC,MAAM,EAAE,mBAAmB;aAC5B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAEO,sBAAsB,CAAC,OAA4B;QACzD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,kEAAkE;IAClE,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,2EAA2E;YAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACnC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;YAAE,SAAS;QAClC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["// The Inbox realtime client: a SEPARATE WebSocket (scope `inbox`) to the user's\n// inbox DO. It maintains the channel/invite registry + unread projection that\n// drives the inbox view — DOTS ONLY, no counts (Contract C / \"Unread + inbox\").\n//\n// The inbox DO pushes a full `snapshot` ({ registry, hasUnread }) on connect, on\n// `resume`, and on every live delta (a projection apply). This client just\n// mirrors the latest snapshot into an observable store + a per-channel unread set.\n// Same connection lifecycle as the channel client (subprotocol auth, reconnect,\n// 4401 re-grant once, 4403 stop, auth-switch teardown).\n\nimport {\n  createReconnectController,\n  type ReconnectController,\n} from '@ttt-productions/realtime-core';\nimport {\n  ChatMarkReadResultPayloadSchema,\n  SERVER_KINDS,\n  type ChatMarkReadFailureCode,\n  CLIENT_KINDS,\n  CHAT_CLOSE_CODES,\n} from '@ttt-productions/chat-schemas';\nimport {\n  buildFrame,\n  parseFrame,\n  isInboxSnapshot,\n  type WireInboxSnapshot,\n  type WireRegistryEntry,\n} from './wire.js';\nimport type { RealtimeSocket, SocketFactory } from './socket.js';\nimport type { GrantProvider, TransportTimers, RealtimeStatus } from './shared.js';\nimport {\n  defaultTimers,\n  isChatAccessDeniedError,\n  isTerminalErrorCode,\n  newCorrelationId,\n  TERMINAL_ERROR_CODE,\n} from './shared.js';\nimport { InitialLoadBudget } from './initial-load-budget.js';\nimport {\n  createDiagnosticsEmitter,\n  safeDiagnosticLabel,\n  CHAT_CLIENT_DIAGNOSTIC_EVENTS as DIAG,\n  type ChatClientDiagnosticsEmitter,\n  type ChatClientDiagnosticsOption,\n} from './diagnostics.js';\n\nexport interface InboxClientState {\n  status: RealtimeStatus;\n  /** Active (non-tombstoned) channel/invite registry entries — inbox-view visibility. */\n  registry: WireRegistryEntry[];\n  /** True if ANY active channel/invite has unread (drives the dock dot). */\n  hasUnread: boolean;\n  /** The set of channelRefs that currently carry an unread dot (per-row dots). */\n  unreadChannelRefs: string[];\n  /**\n   * The last TERMINAL error code (mirrors `ChannelClientState.lastErrorCode`):\n   * `'access-denied'` when the inbox grant provider throws `ChatAccessDeniedError`\n   * (a genuine, terminal policy \"no\" — e.g. a banned/suspended account), and\n   * `'revoked'` on a 4403 REVOKED close. Null while healthy and across transient\n   * reconnects. The app subscribes to inbox state directly (there is no inbox React\n   * hook in this package), so this stable code is the surface — it invents no new UI.\n   */\n  lastErrorCode: string | null;\n  /**\n   * True once the first authoritative snapshot has been applied — the registry and dots\n   * are then the inbox runtime's answer, so an empty registry means \"nothing here\"\n   * rather than \"not loaded yet\". Once true it stays true.\n   */\n  hasLoadedInitialData: boolean;\n  /**\n   * True once the first open has failed for long enough to say so — the same rule as\n   * `ChannelClientState.initialLoadFailed`. Cleared by the first snapshot or `retryNow()`.\n   */\n  initialLoadFailed: boolean;\n}\n\n/**\n * How one `markRead` ended: `ok` — the inbox runtime advanced the read cursor (its\n * fresh snapshot clears the dot); otherwise `code` says why not — the runtime's own\n * reason, `not-sent` (no open socket, nothing was sent), or `connection-lost` (the\n * socket closed before the answer arrived, so the outcome is unknown and the dot stays).\n */\nexport type ChatMarkReadOutcome =\n  { ok: true } | { ok: false; code: ChatMarkReadFailureCode | 'not-sent' | 'connection-lost' };\n\nexport interface InboxClientConfig {\n  endpoint: string;\n  /** The authenticated uid (the inbox owner; the DO serves no one else's data). */\n  currentUserId: string;\n  /** Mints/refreshes an INBOX-scope grant (scope `{ kind:'inbox', uid }`). */\n  grantProvider: GrantProvider;\n  socketFactory: SocketFactory;\n  timers?: TransportTimers;\n  reconnect?: {\n    baseDelayMs?: number;\n    maxDelayMs?: number;\n    maxAttempts?: number | null;\n    random?: () => number;\n  };\n  /**\n   * OPT-IN structured client diagnostics — the SAME option type and emitter the\n   * channel client uses (one owner, `./diagnostics.ts`). Default OFF: absent or\n   * `false` changes nothing and costs one nullish check. `true` emits one\n   * single-line `console.debug` entry per decision under the stable\n   * `chat_client_inbox_*` names; a function routes them to the app's logger.\n   * Inbox payloads are SIZES ONLY — registry/unread counts and deltas, never a\n   * `channelRef` (which names one specific conversation).\n   */\n  diagnostics?: ChatClientDiagnosticsOption;\n}\n\nconst INITIAL: InboxClientState = {\n  status: 'idle',\n  registry: [],\n  hasUnread: false,\n  unreadChannelRefs: [],\n  lastErrorCode: null,\n  hasLoadedInitialData: false,\n  initialLoadFailed: false,\n};\n\nexport class InboxClient {\n  private readonly timers: TransportTimers;\n  private readonly controller: ReconnectController;\n  private socket: RealtimeSocket | null = null;\n  private state: InboxClientState = INITIAL;\n  private readonly listeners = new Set<(s: InboxClientState) => void>();\n  private reauthAttempted = false;\n  private reconnectTimer: ReturnType<TransportTimers['setTimeout']> | null = null;\n  private closedByUs = false;\n  /**\n   * The current lifecycle's number, advanced by every `connect()` and `close()`; a grant,\n   * timer, or socket callback of an older lifecycle is ignored (FRONTEND-108).\n   */\n  private lifecycle = 0;\n  private readonly initialLoad: InitialLoadBudget;\n  /** Mark-reads sent on the current socket, awaiting their correlated result, by requestId. */\n  private readonly pendingMarkReads = new Map<string, (outcome: ChatMarkReadOutcome) => void>();\n  /** Structured diagnostics emitter, or null when off (the default, zero-overhead). */\n  private readonly diag: ChatClientDiagnosticsEmitter;\n  /** Monotonic socket-open attempt counter (diagnostics correlation only). */\n  private connectAttempt = 0;\n  /** Why the CURRENT connect attempt is happening (diagnostics only). */\n  private reconnectCause:\n    'initial' | 'auth-expired' | 'transient-close' | 'grant-error' | 'manual-retry' = 'initial';\n  /** The last close code observed, carried into the next attempt's cause line. */\n  private lastCloseCode: number | null = null;\n\n  constructor(private readonly config: InboxClientConfig) {\n    this.timers = config.timers ?? defaultTimers;\n    this.controller = createReconnectController(config.reconnect ?? {});\n    this.diag = createDiagnosticsEmitter(config.diagnostics);\n    this.initialLoad = new InitialLoadBudget(this.timers, () => this.reportInitialLoadFailed());\n  }\n\n  getState(): InboxClientState {\n    return this.state;\n  }\n\n  subscribe(fn: (s: InboxClientState) => void): () => void {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n\n  private setState(patch: Partial<InboxClientState>): void {\n    this.state = { ...this.state, ...patch };\n    for (const fn of this.listeners) fn(this.state);\n  }\n\n  async connect(): Promise<void> {\n    return this.startLifecycle(true);\n  }\n\n  /**\n   * Retry now (the first-open failure's Retry) — the same rule as `ChannelClient.retryNow`:\n   * a reconnect waiting out its backoff opens at once; a stopped lifecycle starts again; an\n   * attempt in flight is left to finish; the first-open failure clears either way.\n   */\n  retryNow(): void {\n    if (!this.state.hasLoadedInitialData) this.initialLoad.manualRetry();\n    if (this.state.status === 'closed') {\n      void this.startLifecycle(false);\n      return;\n    }\n    if (this.reconnectTimer == null) {\n      if (this.state.initialLoadFailed) this.setState({ initialLoadFailed: false });\n      return;\n    }\n    this.timers.clearTimeout(this.reconnectTimer);\n    this.reconnectTimer = null;\n    this.controller.reset();\n    this.controller.start();\n    this.reconnectCause = 'manual-retry';\n    this.setState({ status: 'reconnecting', initialLoadFailed: false });\n    void this.openSocket();\n  }\n\n  private async startLifecycle(freshBudget: boolean): Promise<void> {\n    // Idempotency guard (mirrors ChannelClient): connect() only starts a lifecycle\n    // from a fresh (idle) or fully torn-down (closed) state. A second connect()\n    // while one is already connecting / open / reconnecting is a no-op, so a\n    // double-mounted dock cannot open a SECOND inbox socket against the per-uid\n    // cap. The reconnect path uses openSocket() / scheduleReconnect() directly\n    // (never connect()), so this never blocks a legitimate reconnect.\n    if (this.state.status !== 'idle' && this.state.status !== 'closed') return;\n    // REVIVE the controller. `controller.close()` is PERMANENT: while it is in\n    // state `closed`, `start()` and `onOpen()` no-op and every later `onClose()`\n    // returns null — so without this reset a close() → connect() client opens a\n    // socket and works normally until its FIRST transient close, then parks\n    // terminally in `closed` with reconnect disabled and no surfaced error code.\n    this.controller.reset();\n    // A terminal verdict (4403 REVOKED / ChatAccessDeniedError) is terminal WITHIN\n    // its lifecycle; an explicit connect() is a fresh attempt the authority may\n    // legitimately re-deny, so the previous lifecycle's code must not persist.\n    // The registry/unread projection is deliberately KEPT — the DO's next snapshot\n    // is authoritative, and blanking the dock on every restart is pure UI churn.\n    if (isTerminalErrorCode(this.state.lastErrorCode)) this.setState({ lastErrorCode: null });\n    this.closedByUs = false;\n    this.lifecycle += 1;\n    this.reconnectCause = 'initial';\n    if (!this.state.hasLoadedInitialData) this.initialLoad.begin(freshBudget);\n    this.controller.start();\n    this.setState({ status: 'connecting', initialLoadFailed: false });\n    await this.openSocket();\n  }\n\n  private reportInitialLoadFailed(): void {\n    if (this.state.hasLoadedInitialData || this.state.initialLoadFailed) return;\n    this.setState({ initialLoadFailed: true });\n  }\n\n  private async openSocket(): Promise<void> {\n    const lifecycle = this.lifecycle;\n    this.connectAttempt += 1;\n    this.diag?.(DIAG.INBOX_CONNECT_ATTEMPT, {\n      attempt: this.connectAttempt,\n      cause: this.reconnectCause,\n      closeCode: this.lastCloseCode,\n      registryCount: this.state.registry.length,\n    });\n    let grantToken: string;\n    try {\n      grantToken = await this.config.grantProvider();\n    } catch (err) {\n      if (lifecycle !== this.lifecycle) return;\n      // A TERMINAL access denial (the app translated an authoritative policy \"no\"\n      // — e.g. Firebase `permission-denied` for a banned/suspended account — into the\n      // package-owned ChatAccessDeniedError) must NOT reconnect: the next mint would\n      // just re-deny, reconnect-looping forever and warning every cycle. Every other\n      // mint failure (network/transient) stays retryable and backs off as before.\n      const terminal = isChatAccessDeniedError(err);\n      this.diag?.(DIAG.INBOX_GRANT_FAILED, { attempt: this.connectAttempt, terminal });\n      if (terminal) return this.denyAccessTerminally();\n      this.reconnectCause = 'grant-error';\n      if (!this.state.hasLoadedInitialData) this.initialLoad.noteFailedAttempt();\n      return this.scheduleReconnect();\n    }\n    // A grant minted for an earlier lifecycle must never open a socket in this one.\n    if (lifecycle !== this.lifecycle || this.closedByUs) return;\n    const url = `${this.config.endpoint.replace(/\\/$/, '')}/inbox`;\n    // Every callback is fenced to THIS socket: once it has been replaced or torn down, its\n    // late open, frames, and close are ignored.\n    let socket: RealtimeSocket | null = null;\n    const isCurrent = () => socket !== null && this.socket === socket;\n    socket = this.config.socketFactory({\n      url,\n      grantToken,\n      handlers: {\n        onOpen: () => {\n          if (isCurrent()) this.onOpen();\n        },\n        onMessage: (data) => {\n          if (isCurrent()) this.onMessage(data);\n        },\n        onClose: (code, reason) => {\n          if (isCurrent()) this.onClose(code, reason);\n        },\n        onError: () => undefined,\n      },\n    });\n    this.socket = socket;\n  }\n\n  private onOpen(): void {\n    this.controller.onOpen();\n    this.reauthAttempted = false;\n    this.setState({ status: 'open' });\n    this.diag?.(DIAG.INBOX_SOCKET_OPEN, {\n      attempt: this.connectAttempt,\n      cause: this.reconnectCause,\n      registryCount: this.state.registry.length,\n      hasUnread: this.state.hasUnread,\n    });\n    // The DO sends a snapshot on accept; a `resume` re-requests it after a reconnect gap.\n    const sent = this.sendFrame(CLIENT_KINDS.RESUME, {});\n    // The inbox resume is CURSORLESS by contract (the DO always answers with a full\n    // authoritative snapshot) — there is no `afterSeq` half to record here.\n    this.diag?.(DIAG.INBOX_RESUME_REQUEST, {\n      attempt: this.connectAttempt,\n      cursorless: true,\n      sent,\n    });\n  }\n\n  private onClose(code: number, _reason: string): void {\n    this.socket = null;\n    this.lastCloseCode = code;\n    // A mark-read sent on this socket can no longer be answered.\n    this.settlePendingMarkReads({ ok: false, code: 'connection-lost' });\n    if (this.closedByUs) {\n      this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: true, outcome: 'closed' });\n      this.setState({ status: 'closed' });\n      return;\n    }\n    if (code === CHAT_CLOSE_CODES.AUTH_EXPIRED && !this.reauthAttempted) {\n      this.reauthAttempted = true;\n      this.reconnectCause = 'auth-expired';\n      this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: false, outcome: 're-grant' });\n      this.setState({ status: 'reconnecting' });\n      void this.openSocket();\n      return;\n    }\n    if (code === CHAT_CLOSE_CODES.REVOKED) {\n      this.closedByUs = true;\n      this.controller.close();\n      this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: false, outcome: 'revoked' });\n      this.setState({ status: 'closed', lastErrorCode: TERMINAL_ERROR_CODE.REVOKED });\n      this.reportInitialLoadFailed();\n      return;\n    }\n    this.reconnectCause = 'transient-close';\n    if (!this.state.hasLoadedInitialData) this.initialLoad.noteFailedAttempt();\n    this.diag?.(DIAG.INBOX_SOCKET_CLOSE, { code, closedByUs: false, outcome: 'reconnect' });\n    this.scheduleReconnect();\n  }\n\n  /**\n   * Terminal access denial surfaced by the inbox grant provider\n   * (`ChatAccessDeniedError`). Same terminal posture as the 4403 REVOKED close: mark\n   * closed-by-us, close the reconnect controller, and surface the stable\n   * `access-denied` code. The inbox client tracks NO optimistic/pending sends\n   * (mark-read is fire-and-forget with no local pending state), so — unlike\n   * ChannelClient — there is nothing to fail here; only the lifecycle stops.\n   */\n  private denyAccessTerminally(): void {\n    this.closedByUs = true;\n    this.controller.close();\n    this.initialLoad.dispose();\n    this.setState({ status: 'closed', lastErrorCode: TERMINAL_ERROR_CODE.ACCESS_DENIED });\n  }\n\n  private scheduleReconnect(): void {\n    const delay = this.controller.onClose();\n    this.diag?.(DIAG.INBOX_RECONNECT_SCHEDULED, {\n      delayMs: delay,\n      cause: this.reconnectCause,\n      attempt: this.connectAttempt,\n    });\n    if (delay == null) {\n      this.setState({ status: 'closed' });\n      this.reportInitialLoadFailed();\n      return;\n    }\n    this.setState({ status: 'reconnecting' });\n    const lifecycle = this.lifecycle;\n    this.reconnectTimer = this.timers.setTimeout(() => {\n      this.reconnectTimer = null;\n      if (this.closedByUs || lifecycle !== this.lifecycle) return;\n      void this.openSocket();\n    }, delay);\n  }\n\n  private onMessage(data: string): void {\n    const frame = parseFrame(data);\n    if (!frame || !frame.payload) {\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, { kind: 'unparseable', reason: 'bad-envelope' });\n      return;\n    }\n    if (frame.type === SERVER_KINDS.MARK_READ_RESULT)\n      return this.applyMarkReadResult(frame.payload);\n    // The inbox DO pushes a full `snapshot`; a future lightweight `unread` push\n    // carries either a full snapshot or a `{ hasUnread }` dock-dot patch. Route both\n    // instead of silently dropping the `unread` type (C-M2).\n    if (frame.type !== 'snapshot' && frame.type !== 'unread') {\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, {\n        kind: safeDiagnosticLabel(frame.type),\n        reason: 'unknown-type',\n      });\n      return;\n    }\n    const payload = frame.payload as unknown as WireInboxSnapshot | { hasUnread: boolean };\n    if (isInboxSnapshot(payload as WireInboxSnapshot)) {\n      this.applySnapshot(payload as WireInboxSnapshot, frame.type);\n    } else if (\n      frame.type === 'unread' &&\n      typeof (payload as { hasUnread?: unknown }).hasUnread === 'boolean'\n    ) {\n      const hasUnread = Boolean((payload as { hasUnread: boolean }).hasUnread);\n      const before = this.state.hasUnread;\n      this.setState({ hasUnread });\n      if (before !== hasUnread) {\n        this.diag?.(DIAG.INBOX_UNREAD_UPDATED, {\n          source: 'unread-patch',\n          hasUnreadBefore: before,\n          hasUnreadAfter: hasUnread,\n          unreadCountBefore: this.state.unreadChannelRefs.length,\n          unreadCountAfter: this.state.unreadChannelRefs.length,\n          unreadCountDelta: 0,\n        });\n      }\n    } else {\n      // A stray CHANNEL snapshot ({ lastMessageSeq, readSeq }) on the inbox socket —\n      // deliberately inert, but never silently invisible under diagnostics.\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, {\n        kind: safeDiagnosticLabel(frame.type),\n        reason: 'not-an-inbox-payload',\n      });\n    }\n  }\n\n  private applySnapshot(snap: WireInboxSnapshot, source: string): void {\n    // Keep every non-tombstoned entry — including ARCHIVED rows — so the inbox view can\n    // render both the active list and the Archived toggle. `archived` is a distinct\n    // dimension from `tombstoned`; archived rows are still `state: 'active'`.\n    const registry = snap.registry.filter((e) => e.state === 'active');\n    // The DO's `hasUnread` is the authoritative dock dot. Per-row dots are derived from\n    // the same projection but exclude ARCHIVED rows (archive = done — an archived row\n    // never shows a dot). The DO clears unread on archive, so this is belt-and-braces.\n    const unreadChannelRefs = deriveUnreadRefs(snap);\n    const hasUnread = Boolean(snap.hasUnread);\n    const before = this.state;\n    if (!before.hasLoadedInitialData) this.initialLoad.loaded();\n    this.setState({\n      registry,\n      hasUnread,\n      unreadChannelRefs,\n      hasLoadedInitialData: true,\n      initialLoadFailed: false,\n    });\n    if (!this.diag) return;\n    // SIZES ONLY — a channelRef names one specific conversation and never enters a\n    // diagnostic line.\n    this.diag(DIAG.INBOX_SNAPSHOT_APPLIED, {\n      source: safeDiagnosticLabel(source),\n      received: snap.registry.length,\n      // `received - active` is the tombstoned count the client filtered out.\n      active: registry.length,\n      archived: registry.filter((e) => e.archived === true).length,\n      hasUnread,\n      unreadCount: unreadChannelRefs.length,\n      registryDelta: registry.length - before.registry.length,\n    });\n    const unreadChanged =\n      before.hasUnread !== hasUnread ||\n      before.unreadChannelRefs.length !== unreadChannelRefs.length;\n    if (unreadChanged) {\n      this.diag(DIAG.INBOX_UNREAD_UPDATED, {\n        source: safeDiagnosticLabel(source),\n        hasUnreadBefore: before.hasUnread,\n        hasUnreadAfter: hasUnread,\n        unreadCountBefore: before.unreadChannelRefs.length,\n        unreadCountAfter: unreadChannelRefs.length,\n        unreadCountDelta: unreadChannelRefs.length - before.unreadChannelRefs.length,\n      });\n    }\n  }\n\n  private sendFrame(type: string, payload: Record<string, unknown>): boolean {\n    if (!this.socket || !this.socket.isOpen) return false;\n    this.socket.send(buildFrame(type, payload));\n    return true;\n  }\n\n  /** True if a specific channel/invite currently carries an unread dot. */\n  channelHasUnread(channelRef: string): boolean {\n    return this.state.unreadChannelRefs.includes(channelRef);\n  }\n\n  /**\n   * Clear a channel/invite's unread WITHOUT opening it (the inbox-view mark-read\n   * controls). Sends `mark-read` with a fresh `requestId`; the inbox runtime advances the\n   * member's read cursor, pushes a fresh authoritative snapshot (which is what removes\n   * the dot — there is NO optimistic local clear), and answers with a\n   * `mark-read-result` naming the same request. The promise settles on that answer —\n   * never on a timer — or with `not-sent` when no socket is open, or `connection-lost`\n   * when the socket closes first.\n   */\n  markRead(channelRef: string): Promise<ChatMarkReadOutcome> {\n    const requestId = newCorrelationId();\n    const sent = this.sendFrame(CLIENT_KINDS.MARK_READ, { channelRef, requestId });\n    // The ref itself is never logged — only that a mark-read was written and what the\n    // unread projection looked like at that moment (the DO's snapshot is what clears it).\n    this.diag?.(DIAG.INBOX_MARK_READ, { sent, unreadCount: this.state.unreadChannelRefs.length });\n    if (!sent) return Promise.resolve({ ok: false, code: 'not-sent' });\n    return new Promise((resolve) => this.pendingMarkReads.set(requestId, resolve));\n  }\n\n  /** Settle the mark-read the result names; a result naming no pending request is ignored. */\n  private applyMarkReadResult(payload: Record<string, unknown> | undefined): void {\n    const parsed = ChatMarkReadResultPayloadSchema.safeParse(payload);\n    if (!parsed.success) {\n      this.diag?.(DIAG.INBOX_FRAME_DROPPED, {\n        kind: SERVER_KINDS.MARK_READ_RESULT,\n        reason: 'malformed-payload',\n      });\n      return;\n    }\n    const resolve = this.pendingMarkReads.get(parsed.data.requestId);\n    if (!resolve) return;\n    this.pendingMarkReads.delete(parsed.data.requestId);\n    resolve(parsed.data.ok ? { ok: true } : { ok: false, code: parsed.data.code });\n  }\n\n  private settlePendingMarkReads(outcome: ChatMarkReadOutcome): void {\n    const pending = [...this.pendingMarkReads.values()];\n    this.pendingMarkReads.clear();\n    for (const resolve of pending) resolve(outcome);\n  }\n\n  /** Permanently close (auth-user switch / unmount). Idempotent. */\n  close(): void {\n    this.closedByUs = true;\n    this.lifecycle += 1;\n    this.controller.close();\n    this.initialLoad.dispose();\n    if (this.reconnectTimer != null) {\n      this.timers.clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n    if (this.socket) {\n      // Detach first: the socket's own late close is not this lifecycle's event.\n      const socket = this.socket;\n      this.socket = null;\n      socket.close(1000, 'client teardown');\n    }\n    this.settlePendingMarkReads({ ok: false, code: 'connection-lost' });\n    this.setState({ status: 'closed' });\n  }\n}\n\n/**\n * Derive the per-channel unread set from a snapshot. The inbox DO's snapshot\n * carries a per-entry `unread` boolean on every active registry entry alongside\n * the global `hasUnread` roll-up that drives the dock dot. An entry without the\n * field (a legacy/pre-per-entry row) simply carries no per-row dot — the dock dot\n * still lights off `hasUnread`.\n *\n * ARCHIVED rows are excluded from the unread roll-up (archive = done — the DO clears\n * unread on archive; the client also never counts them).\n */\nfunction deriveUnreadRefs(snap: WireInboxSnapshot): string[] {\n  const refs: string[] = [];\n  for (const e of snap.registry) {\n    if (e.state !== 'active') continue;\n    if (e.archived === true) continue;\n    if (e.unread === true) refs.push(e.channelRef);\n  }\n  return refs;\n}\n"]}

package/dist/realtime/initial-load-budget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initial-load-budget.d.ts","sourceRoot":"","sources":["../../src/realtime/initial-load-budget.ts"],"names":[],"mappings":"AAMA,OAAO,EAAuC,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAExF,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,0DAA0D;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW;IAP9B,4FAA4F;IAC5F,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,KAAK,CAA0D;gBAGpD,MAAM,EAAE,eAAe;IACxC,0DAA0D;IACzC,WAAW,EAAE,MAAM,IAAI;IAG1C;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAM3B,oGAAoG;IACpG,iBAAiB,IAAI,IAAI;IAKzB;;;OAGG;IACH,WAAW,IAAI,IAAI;IAKnB,6EAA6E;IAC7E,MAAM,IAAI,IAAI;IAKd,oDAAoD;IACpD,OAAO,IAAI,IAAI;IAIf,OAAO,CAAC,GAAG;IAQX,OAAO,CAAC,UAAU;CAMnB"}
+{"version":3,"file":"initial-load-budget.d.ts","sourceRoot":"","sources":["../../src/realtime/initial-load-budget.ts"],"names":[],"mappings":"AAMA,OAAO,EAAuC,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAExF,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,0DAA0D;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW;IAP9B,4FAA4F;IAC5F,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,KAAK,CAA0D;gBAGpD,MAAM,EAAE,eAAe;IACxC,0DAA0D;IACzC,WAAW,EAAE,MAAM,IAAI;IAG1C;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAM3B,oGAAoG;IACpG,iBAAiB,IAAI,IAAI;IAMzB;;;OAGG;IACH,WAAW,IAAI,IAAI;IAKnB,6EAA6E;IAC7E,MAAM,IAAI,IAAI;IAKd,oDAAoD;IACpD,OAAO,IAAI,IAAI;IAIf,OAAO,CAAC,GAAG;IAQX,OAAO,CAAC,UAAU;CAMnB"}

package/dist/realtime/initial-load-budget.js.map

@@ -1 +1 @@
-{"version":3,"file":"initial-load-budget.js","sourceRoot":"","sources":["../../src/realtime/initial-load-budget.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mGAAmG;AACnG,iGAAiG;AACjG,gGAAgG;AAChG,oEAAoE;AAEpE,OAAO,EAAE,mCAAmC,EAAwB,MAAM,aAAa,CAAC;AAExF,MAAM,OAAO,iBAAiB;IAMT;IAEA;IAPnB,4FAA4F;IACpF,SAAS,GAAkB,IAAI,CAAC;IAChC,KAAK,GAAqD,IAAI,CAAC;IAEvE,YACmB,MAAuB;IACxC,0DAA0D;IACzC,WAAuB;QAFvB,WAAM,GAAN,MAAM,CAAiB;QAEvB,gBAAW,GAAX,WAAW,CAAY;IACvC,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAChD,CAAC;IAED,oGAAoG;IACpG,iBAAiB;QACf,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,mCAAmC;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IACpG,CAAC;IAED;;;OAGG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,oDAAoD;IACpD,OAAO;QACL,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,GAAG,CAAC,EAAU;QACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;gBAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjD,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF","sourcesContent":["// The first-open failure budget both realtime clients share: a client that has not loaded its\n// first data CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS after its first attempt started reports the first\n// open as failed — whether its attempts failed or one is still hanging (a grant mint stuck until\n// its timeout, a socket that opened but never sent a snapshot) — while it keeps retrying in the\n// background. One implementation for the channel and inbox sockets.\n\nimport { CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS, type TransportTimers } from './shared.js';\n\nexport class InitialLoadBudget {\n  /** When the first attempt of the current no-data run started; null once data has loaded. */\n  private startedAt: number | null = null;\n  private timer: ReturnType<TransportTimers['setTimeout']> | null = null;\n\n  constructor(\n    private readonly timers: TransportTimers,\n    /** Called when the budget runs out with still no data. */\n    private readonly onExhausted: () => void,\n  ) {}\n\n  /**\n   * A lifecycle is starting without data. A fresh start opens a new budget; otherwise the budget\n   * already running (or spent) is kept.\n   */\n  begin(fresh: boolean): void {\n    if (!fresh && this.startedAt != null) return;\n    this.startedAt = this.timers.now();\n    this.arm(CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS);\n  }\n\n  /** An attempt failed before any data loaded: once the budget is spent, that is reported at once. */\n  noteFailedAttempt(): void {\n    if (this.startedAt == null) return;\n    if (this.timers.now() - this.startedAt >= CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS) this.onExhausted();\n  }\n\n  /**\n   * The user asked to retry. The spent budget stays spent — a retry that fails is reported at\n   * once — and a retry that hangs is reported a full budget from now.\n   */\n  manualRetry(): void {\n    if (this.startedAt == null) this.startedAt = this.timers.now();\n    this.arm(CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS);\n  }\n\n  /** The first data loaded — there is no first-open failure left to report. */\n  loaded(): void {\n    this.clearTimer();\n    this.startedAt = null;\n  }\n\n  /** The lifecycle ended; nothing may fire for it. */\n  dispose(): void {\n    this.clearTimer();\n  }\n\n  private arm(ms: number): void {\n    this.clearTimer();\n    this.timer = this.timers.setTimeout(() => {\n      this.timer = null;\n      if (this.startedAt != null) this.onExhausted();\n    }, ms);\n  }\n\n  private clearTimer(): void {\n    if (this.timer != null) {\n      this.timers.clearTimeout(this.timer);\n      this.timer = null;\n    }\n  }\n}\n"]}
+{"version":3,"file":"initial-load-budget.js","sourceRoot":"","sources":["../../src/realtime/initial-load-budget.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mGAAmG;AACnG,iGAAiG;AACjG,gGAAgG;AAChG,oEAAoE;AAEpE,OAAO,EAAE,mCAAmC,EAAwB,MAAM,aAAa,CAAC;AAExF,MAAM,OAAO,iBAAiB;IAMT;IAEA;IAPnB,4FAA4F;IACpF,SAAS,GAAkB,IAAI,CAAC;IAChC,KAAK,GAAqD,IAAI,CAAC;IAEvE,YACmB,MAAuB;IACxC,0DAA0D;IACzC,WAAuB;QAFvB,WAAM,GAAN,MAAM,CAAiB;QAEvB,gBAAW,GAAX,WAAW,CAAY;IACvC,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAChD,CAAC;IAED,oGAAoG;IACpG,iBAAiB;QACf,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,mCAAmC;YAC3E,IAAI,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,oDAAoD;IACpD,OAAO;QACL,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,GAAG,CAAC,EAAU;QACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;gBAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjD,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF","sourcesContent":["// The first-open failure budget both realtime clients share: a client that has not loaded its\n// first data CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS after its first attempt started reports the first\n// open as failed — whether its attempts failed or one is still hanging (a grant mint stuck until\n// its timeout, a socket that opened but never sent a snapshot) — while it keeps retrying in the\n// background. One implementation for the channel and inbox sockets.\n\nimport { CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS, type TransportTimers } from './shared.js';\n\nexport class InitialLoadBudget {\n  /** When the first attempt of the current no-data run started; null once data has loaded. */\n  private startedAt: number | null = null;\n  private timer: ReturnType<TransportTimers['setTimeout']> | null = null;\n\n  constructor(\n    private readonly timers: TransportTimers,\n    /** Called when the budget runs out with still no data. */\n    private readonly onExhausted: () => void,\n  ) {}\n\n  /**\n   * A lifecycle is starting without data. A fresh start opens a new budget; otherwise the budget\n   * already running (or spent) is kept.\n   */\n  begin(fresh: boolean): void {\n    if (!fresh && this.startedAt != null) return;\n    this.startedAt = this.timers.now();\n    this.arm(CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS);\n  }\n\n  /** An attempt failed before any data loaded: once the budget is spent, that is reported at once. */\n  noteFailedAttempt(): void {\n    if (this.startedAt == null) return;\n    if (this.timers.now() - this.startedAt >= CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS)\n      this.onExhausted();\n  }\n\n  /**\n   * The user asked to retry. The spent budget stays spent — a retry that fails is reported at\n   * once — and a retry that hangs is reported a full budget from now.\n   */\n  manualRetry(): void {\n    if (this.startedAt == null) this.startedAt = this.timers.now();\n    this.arm(CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS);\n  }\n\n  /** The first data loaded — there is no first-open failure left to report. */\n  loaded(): void {\n    this.clearTimer();\n    this.startedAt = null;\n  }\n\n  /** The lifecycle ended; nothing may fire for it. */\n  dispose(): void {\n    this.clearTimer();\n  }\n\n  private arm(ms: number): void {\n    this.clearTimer();\n    this.timer = this.timers.setTimeout(() => {\n      this.timer = null;\n      if (this.startedAt != null) this.onExhausted();\n    }, ms);\n  }\n\n  private clearTimer(): void {\n    if (this.timer != null) {\n      this.timers.clearTimeout(this.timer);\n      this.timer = null;\n    }\n  }\n}\n"]}

package/dist/realtime/map.d.ts

@@ -1,7 +1,5 @@
 import type { ChatMessageV1 } from '@ttt-productions/chat-core';
-import { MODERATION_REDACTED_TEXT } from '@ttt-productions/chat-schemas';
 import type { RevisionKind, WireMessageRow } from './wire.js';
-export { MODERATION_REDACTED_TEXT };
 /** The effective moderation overlay for a message: the max-`messageRevision` kind. */
 export interface ModerationOverlay {
     kind: RevisionKind;

package/dist/realtime/map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../../src/realtime/map.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAyB,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAI9D,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAEpC,sFAAsF;AACtF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,aAAa,CAc/G;AAED,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,iBAAiB,GAAG,IAAI,CAG5E;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAcrF;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,aAAa,CAShB"}
+{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../../src/realtime/map.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE9D,sFAAsF;AACtF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC,aAAa,CAcf;AAED,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,iBAAiB,GAAG,IAAI,CAG5E;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAgBrF;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,aAAa,CAShB"}

package/dist/realtime/map.js

@@ -6,9 +6,6 @@
 // display name — names resolve at render time through the ChatNameResolver
 // context, identical to the Firestore path.
 import { CHAT_SYSTEM_SENDER_ID, MODERATION_REDACTED_TEXT } from '@ttt-productions/chat-schemas';
-// The redacted-text constant lives in the wire contract; re-export to keep this
-// module's public surface stable.
-export { MODERATION_REDACTED_TEXT };
 /**
  * Apply a moderation overlay to a mapped message so the ORIGINAL content never
  * renders for a hidden/deleted message. Pure — returns a new message; the input
@@ -65,7 +62,9 @@ export function wireRowToMessage(row, threadId) {
         senderId: row.senderUid,
         text: row.text,
         isSystemMessage: row.senderUid === CHAT_SYSTEM_SENDER_ID || undefined,
-        ...(row.referencedUids && row.referencedUids.length > 0 ? { referencedUids: [...row.referencedUids] } : {}),
+        ...(row.referencedUids && row.referencedUids.length > 0
+            ? { referencedUids: [...row.referencedUids] }
+            : {}),
         meta: {
             seq: row.seq,
             epoch: row.epoch,

package/dist/realtime/map.js.map

@@ -1 +1 @@
-{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/realtime/map.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,+EAA+E;AAC/E,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,4CAA4C;AAG5C,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGhG,gFAAgF;AAChF,kCAAkC;AAClC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAQpC;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAsB,EAAE,OAAiC;IAC9F,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;IAC1E,OAAO;QACL,GAAG,OAAO;QACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,EAAE;YACJ,GAAG,OAAO,CAAC,IAAI;YACf,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,8EAA8E;YAC9E,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS;SACtC;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,QAAgB;IACpE,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,SAAS,KAAK,qBAAqB,IAAI,SAAS;QACrE,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3G,IAAI,EAAE;YACJ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,IAMjC;IACC,OAAO;QACL,SAAS,EAAE,cAAc,IAAI,CAAC,eAAe,EAAE;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;KAClE,CAAC;AACJ,CAAC","sourcesContent":["// Map the DO wire row (`WireMessageRow`) into the UI `ChatMessageV1` shape so the\n// UI stays transport-agnostic — the MessageList renders the same shape whether\n// the bytes came from Firestore or the DO socket.\n//\n// Identity invariant: the DO stores uid references only (`senderUid`), never a\n// display name — names resolve at render time through the ChatNameResolver\n// context, identical to the Firestore path.\n\nimport type { ChatMessageV1 } from '@ttt-productions/chat-core';\nimport { CHAT_SYSTEM_SENDER_ID, MODERATION_REDACTED_TEXT } from '@ttt-productions/chat-schemas';\nimport type { RevisionKind, WireMessageRow } from './wire.js';\n\n// The redacted-text constant lives in the wire contract; re-export to keep this\n// module's public surface stable.\nexport { MODERATION_REDACTED_TEXT };\n\n/** The effective moderation overlay for a message: the max-`messageRevision` kind. */\nexport interface ModerationOverlay {\n  kind: RevisionKind;\n  messageRevision: number;\n}\n\n/**\n * Apply a moderation overlay to a mapped message so the ORIGINAL content never\n * renders for a hidden/deleted message. Pure — returns a new message; the input\n * is not mutated. The overlay state rides on `meta` (`meta` is opaque to\n * chat-core), so the renderer can branch on `meta.moderated` / `meta.moderationKind`.\n * - `delete` / `moderate` → blank/replace the text + mark moderated.\n * - `edit` → the row already carries the overlaid text (the DO rewrites `text`),\n *   so only the marker is stamped.\n * - `restore` → original content (the DO row is the original); no redaction.\n */\nexport function applyModerationOverlay(message: ChatMessageV1, overlay: ModerationOverlay | null): ChatMessageV1 {\n  if (!overlay) return message;\n  const redacted = overlay.kind === 'delete' || overlay.kind === 'moderate';\n  return {\n    ...message,\n    ...(redacted ? { text: MODERATION_REDACTED_TEXT } : {}),\n    meta: {\n      ...message.meta,\n      moderationKind: overlay.kind,\n      messageRevision: overlay.messageRevision,\n      // `restore` is the absence of active moderation — it reverts to the original.\n      moderated: overlay.kind !== 'restore',\n    },\n  };\n}\n\n/** The overlay carried inline on a DO row (the getHistory/getDeltaSince merge), or null. */\nexport function overlayFromRow(row: WireMessageRow): ModerationOverlay | null {\n  if (row.moderationKind == null) return null;\n  return { kind: row.moderationKind, messageRevision: row.messageRevision ?? 0 };\n}\n\n/** The DO `seq` is the stable per-channel message id (monotonic, epoch-spanning). */\nexport function seqToMessageId(seq: number): string {\n  return String(seq);\n}\n\n/**\n * Convert a DO message row to the UI message. `threadId` is the caller's logical\n * thread id (the UI's thread key); the DO row carries no threadId of its own.\n * - `messageId` = the server seq (string) — stable + dedup key.\n *\n * A DO row carries TEXT only. Files are not part of the message timeline — they\n * live in the conversation's Conversation Files list, published through the\n * canonical media pipeline and read from Firestore, never mapped from a chat row.\n * A legacy row's stored reply pointer is likewise NOT mapped: chat has no\n * reply-authoring affordance, so the UI has no reply renderer to feed\n * (DJ ruling 2026-07-29).\n */\nexport function wireRowToMessage(row: WireMessageRow, threadId: string): ChatMessageV1 {\n  return {\n    messageId: seqToMessageId(row.seq),\n    threadId,\n    createdAt: row.createdAt,\n    senderId: row.senderUid,\n    text: row.text,\n    isSystemMessage: row.senderUid === CHAT_SYSTEM_SENDER_ID || undefined,\n    ...(row.referencedUids && row.referencedUids.length > 0 ? { referencedUids: [...row.referencedUids] } : {}),\n    meta: {\n      seq: row.seq,\n      epoch: row.epoch,\n    },\n  };\n}\n\n/** The optimistic local echo a `send` produces before the server `ack` reconciles the seq. */\nexport function optimisticMessage(args: {\n  clientMessageId: string;\n  threadId: string;\n  senderId: string;\n  text: string;\n  createdAt: number;\n}): ChatMessageV1 {\n  return {\n    messageId: `optimistic:${args.clientMessageId}`,\n    threadId: args.threadId,\n    createdAt: args.createdAt,\n    senderId: args.senderId,\n    text: args.text,\n    meta: { clientMessageId: args.clientMessageId, optimistic: true },\n  };\n}\n"]}
+{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/realtime/map.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,+EAA+E;AAC/E,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,4CAA4C;AAG5C,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAShG;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAsB,EACtB,OAAiC;IAEjC,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;IAC1E,OAAO;QACL,GAAG,OAAO;QACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,EAAE;YACJ,GAAG,OAAO,CAAC,IAAI;YACf,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,8EAA8E;YAC9E,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS;SACtC;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,QAAgB;IACpE,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,SAAS,KAAK,qBAAqB,IAAI,SAAS;QACrE,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE;YACJ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,IAMjC;IACC,OAAO;QACL,SAAS,EAAE,cAAc,IAAI,CAAC,eAAe,EAAE;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;KAClE,CAAC;AACJ,CAAC","sourcesContent":["// Map the DO wire row (`WireMessageRow`) into the UI `ChatMessageV1` shape so the\n// UI stays transport-agnostic — the MessageList renders the same shape whether\n// the bytes came from Firestore or the DO socket.\n//\n// Identity invariant: the DO stores uid references only (`senderUid`), never a\n// display name — names resolve at render time through the ChatNameResolver\n// context, identical to the Firestore path.\n\nimport type { ChatMessageV1 } from '@ttt-productions/chat-core';\nimport { CHAT_SYSTEM_SENDER_ID, MODERATION_REDACTED_TEXT } from '@ttt-productions/chat-schemas';\nimport type { RevisionKind, WireMessageRow } from './wire.js';\n\n/** The effective moderation overlay for a message: the max-`messageRevision` kind. */\nexport interface ModerationOverlay {\n  kind: RevisionKind;\n  messageRevision: number;\n}\n\n/**\n * Apply a moderation overlay to a mapped message so the ORIGINAL content never\n * renders for a hidden/deleted message. Pure — returns a new message; the input\n * is not mutated. The overlay state rides on `meta` (`meta` is opaque to\n * chat-core), so the renderer can branch on `meta.moderated` / `meta.moderationKind`.\n * - `delete` / `moderate` → blank/replace the text + mark moderated.\n * - `edit` → the row already carries the overlaid text (the DO rewrites `text`),\n *   so only the marker is stamped.\n * - `restore` → original content (the DO row is the original); no redaction.\n */\nexport function applyModerationOverlay(\n  message: ChatMessageV1,\n  overlay: ModerationOverlay | null,\n): ChatMessageV1 {\n  if (!overlay) return message;\n  const redacted = overlay.kind === 'delete' || overlay.kind === 'moderate';\n  return {\n    ...message,\n    ...(redacted ? { text: MODERATION_REDACTED_TEXT } : {}),\n    meta: {\n      ...message.meta,\n      moderationKind: overlay.kind,\n      messageRevision: overlay.messageRevision,\n      // `restore` is the absence of active moderation — it reverts to the original.\n      moderated: overlay.kind !== 'restore',\n    },\n  };\n}\n\n/** The overlay carried inline on a DO row (the getHistory/getDeltaSince merge), or null. */\nexport function overlayFromRow(row: WireMessageRow): ModerationOverlay | null {\n  if (row.moderationKind == null) return null;\n  return { kind: row.moderationKind, messageRevision: row.messageRevision ?? 0 };\n}\n\n/** The DO `seq` is the stable per-channel message id (monotonic, epoch-spanning). */\nexport function seqToMessageId(seq: number): string {\n  return String(seq);\n}\n\n/**\n * Convert a DO message row to the UI message. `threadId` is the caller's logical\n * thread id (the UI's thread key); the DO row carries no threadId of its own.\n * - `messageId` = the server seq (string) — stable + dedup key.\n *\n * A DO row carries TEXT only. Files are not part of the message timeline — they\n * live in the conversation's Conversation Files list, published through the\n * canonical media pipeline and read from Firestore, never mapped from a chat row.\n * A legacy row's stored reply pointer is likewise NOT mapped: chat has no\n * reply-authoring affordance, so the UI has no reply renderer to feed\n * (DJ ruling 2026-07-29).\n */\nexport function wireRowToMessage(row: WireMessageRow, threadId: string): ChatMessageV1 {\n  return {\n    messageId: seqToMessageId(row.seq),\n    threadId,\n    createdAt: row.createdAt,\n    senderId: row.senderUid,\n    text: row.text,\n    isSystemMessage: row.senderUid === CHAT_SYSTEM_SENDER_ID || undefined,\n    ...(row.referencedUids && row.referencedUids.length > 0\n      ? { referencedUids: [...row.referencedUids] }\n      : {}),\n    meta: {\n      seq: row.seq,\n      epoch: row.epoch,\n    },\n  };\n}\n\n/** The optimistic local echo a `send` produces before the server `ack` reconciles the seq. */\nexport function optimisticMessage(args: {\n  clientMessageId: string;\n  threadId: string;\n  senderId: string;\n  text: string;\n  createdAt: number;\n}): ChatMessageV1 {\n  return {\n    messageId: `optimistic:${args.clientMessageId}`,\n    threadId: args.threadId,\n    createdAt: args.createdAt,\n    senderId: args.senderId,\n    text: args.text,\n    meta: { clientMessageId: args.clientMessageId, optimistic: true },\n  };\n}\n"]}

package/dist/realtime/shared.d.ts

@@ -68,7 +68,6 @@ export declare function isTerminalErrorCode(code: string | null | undefined): co
  * constant.
  */
 export declare const CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS = 15000;
-export { HEARTBEAT_MS, TYPING_COALESCE_MS, HISTORY_PAGE_MAX } from '@ttt-productions/chat-schemas';
 /**
  * Max reconnect resends of one un-acked send before its optimistic row is flipped
  * to a visible failed state (retry affordance) instead of a permanent ghost. Each

package/dist/realtime/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/realtime/shared.ts"],"names":[],"mappings":"AASA;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAElD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,QAAQ;gBACvB,OAAO,SAAuB;CAI3C;AAED,8FAA8F;AAC9F,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,qBAAqB,CAOlF;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC1E,YAAY,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;IACzD,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,aAAa,EAAE,eAI3B,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;AAExF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB;IAC9B,yEAAyE;;IAEzE,iFAAiF;;CAEzE,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAE/F,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,IAAI,iBAAiB,CAE9F;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,QAAS,CAAC;AAI1D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEnG;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/realtime/shared.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAElD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,QAAQ;gBACvB,OAAO,SAAuB;CAI3C;AAED,8FAA8F;AAC9F,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,qBAAqB,CAOlF;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC1E,YAAY,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;IACzD,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,aAAa,EAAE,eAI3B,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;AAExF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB;IAC9B,yEAAyE;;IAEzE,iFAAiF;;CAEzE,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAE/F,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,IAAI,iBAAiB,CAE9F;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,QAAS,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC"}

package/dist/realtime/shared.js

@@ -2,10 +2,9 @@
 //
 // The client-agreed limits (`HEARTBEAT_MS`, `TYPING_COALESCE_MS`,
 // `HISTORY_PAGE_MAX`) come from the one wire contract in
-// `@ttt-productions/chat-schemas`; they are re-exported here so the transport's
-// existing import sites are unchanged. The worker runtime is the authority and
+// `@ttt-productions/chat-schemas`. The worker runtime is the authority and
 // rejects anything out of bounds, but the client uses these to coalesce and
-// paginate politely. The remaining constants below are client-only retry policy.
+// paginate politely. The constants below are client-only retry policy.
 /**
  * Package-owned, Firebase-FREE terminal access-denial signal. A grant provider
  * throws this (from `GrantProvider`) when the authoritative authorization answer
@@ -73,9 +72,6 @@ export function isTerminalErrorCode(code) {
  * constant.
  */
 export const CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS = 15_000;
-// The client-agreed limits live in the wire contract; re-export to keep this
-// module's public surface stable.
-export { HEARTBEAT_MS, TYPING_COALESCE_MS, HISTORY_PAGE_MAX } from '@ttt-productions/chat-schemas';
 /**
  * Max reconnect resends of one un-acked send before its optimistic row is flipped
  * to a visible failed state (retry affordance) instead of a permanent ghost. Each

package/dist/realtime/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/realtime/shared.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,kEAAkE;AAClE,yDAAyD;AACzD,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AAWjF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,kFAAkF;IACzE,kBAAkB,GAAG,IAAI,CAAC;IACnC,YAAY,OAAO,GAAG,oBAAoB;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO,CACL,GAAG,YAAY,qBAAqB;QACpC,CAAC,OAAO,GAAG,KAAK,QAAQ;YACtB,GAAG,KAAK,IAAI;YACX,GAAwC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CACzE,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACpC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAKF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,yEAAyE;IACzE,OAAO,EAAE,SAAS;IAClB,iFAAiF;IACjF,aAAa,EAAE,eAAe;CACtB,CAAC;AAIX,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,IAA+B;IACjE,OAAO,IAAI,KAAK,mBAAmB,CAAC,OAAO,IAAI,IAAI,KAAK,mBAAmB,CAAC,aAAa,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAE1D,6EAA6E;AAC7E,kCAAkC;AAClC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEnG;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,GAAI,UAAyD,CAAC,MAAM,CAAC;IAC5E,IAAI,CAAC,EAAE,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACzC,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC","sourcesContent":["// Shared injected contracts + tunable constants for the realtime transport.\n//\n// The client-agreed limits (`HEARTBEAT_MS`, `TYPING_COALESCE_MS`,\n// `HISTORY_PAGE_MAX`) come from the one wire contract in\n// `@ttt-productions/chat-schemas`; they are re-exported here so the transport's\n// existing import sites are unchanged. The worker runtime is the authority and\n// rejects anything out of bounds, but the client uses these to coalesce and\n// paginate politely. The remaining constants below are client-only retry policy.\n\n/**\n * Mints a short-lived chat grant token for the socket's scope. The app wires this\n * to its `mintChatGrant` callable (channel grant for a ChannelClient, inbox grant\n * for an InboxClient). Called on every connect AND once on a 4401 re-grant. The\n * app owns the Firestore permission check, the scope shape, caching to a React\n * Query staleTime < grant exp, and returning a FRESH token when re-invoked.\n */\nexport type GrantProvider = () => Promise<string>;\n\n/**\n * Package-owned, Firebase-FREE terminal access-denial signal. A grant provider\n * throws this (from `GrantProvider`) when the authoritative authorization answer\n * is a genuine, terminal \"no\" — as opposed to a transient/retryable mint failure.\n *\n * The transport treats it specially: instead of the normal reconnect backoff it\n * STOPS reconnecting, closes the lifecycle, fails any pending optimistic sends,\n * and surfaces the stable `access-denied` error code (which the React hook maps to\n * `allowed: false` so the shell renders its no-access surface instead of an eternal\n * loader). Every other thrown error stays transient and reconnects as before.\n *\n * This is deliberately generic: the consuming app translates its own backend\n * denial (e.g. a Firebase `functions/permission-denied`) into this class at the\n * grant-provider boundary. The package never imports or names Firebase. Consumers\n * that cannot subclass may instead throw any error carrying `isChatAccessDenied:\n * true` — `isChatAccessDeniedError` recognizes both (also cross-realm safe).\n */\nexport class ChatAccessDeniedError extends Error {\n  /** Duck-typed marker so detection survives module-realm / re-throw boundaries. */\n  readonly isChatAccessDenied = true;\n  constructor(message = 'Chat access denied') {\n    super(message);\n    this.name = 'ChatAccessDeniedError';\n  }\n}\n\n/** True when `err` is a terminal chat access denial (class instance or duck-typed marker). */\nexport function isChatAccessDeniedError(err: unknown): err is ChatAccessDeniedError {\n  return (\n    err instanceof ChatAccessDeniedError ||\n    (typeof err === 'object' &&\n      err !== null &&\n      (err as { isChatAccessDenied?: unknown }).isChatAccessDenied === true)\n  );\n}\n\n/** Injectable timers so the transport runs deterministically under fake timers in tests. */\nexport interface TransportTimers {\n  setTimeout: (fn: () => void, ms: number) => ReturnType<typeof setTimeout>;\n  clearTimeout: (h: ReturnType<typeof setTimeout>) => void;\n  now: () => number;\n}\n\nexport const defaultTimers: TransportTimers = {\n  setTimeout: (fn, ms) => setTimeout(fn, ms),\n  clearTimeout: (h) => clearTimeout(h),\n  now: () => Date.now(),\n};\n\n/** Connection status surfaced to the UI. */\nexport type RealtimeStatus = 'idle' | 'connecting' | 'open' | 'reconnecting' | 'closed';\n\n/**\n * The TERMINAL lifecycle verdicts both realtime clients surface on\n * `lastErrorCode` — the two codes that mean \"this lifecycle stopped on an\n * authoritative NO\", as opposed to a transient/protocol code (`send-failed`,\n * `blocked-word`, …) that leaves the socket running.\n *\n * ONE declaration for both clients: each sets and clears the same two strings,\n * and `useRealtimeChatMessages` maps `access-denied` to `allowed: false`.\n * A terminal verdict is terminal WITHIN its lifecycle; a later explicit\n * `connect()` is a fresh attempt the authority may legitimately re-deny, so the\n * stale code is cleared there (never carried into the new lifecycle's state).\n */\nexport const TERMINAL_ERROR_CODE = {\n  /** A 4403 REVOKED close: access was pulled while the socket was open. */\n  REVOKED: 'revoked',\n  /** The grant provider threw `ChatAccessDeniedError` — a terminal policy \"no\". */\n  ACCESS_DENIED: 'access-denied',\n} as const;\n\nexport type TerminalErrorCode = (typeof TERMINAL_ERROR_CODE)[keyof typeof TERMINAL_ERROR_CODE];\n\n/** True when `code` is one of the terminal lifecycle verdicts above. */\nexport function isTerminalErrorCode(code: string | null | undefined): code is TerminalErrorCode {\n  return code === TERMINAL_ERROR_CODE.REVOKED || code === TERMINAL_ERROR_CODE.ACCESS_DENIED;\n}\n\n/**\n * How long a client keeps failing to open for the first time before it reports the\n * first open as failed (`initialLoadFailed`) — so a chat or inbox that cannot connect\n * shows a failure the user can retry instead of an opening state that never ends. The\n * client keeps retrying in the background after it reports. Client policy, not a wire\n * constant.\n */\nexport const CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS = 15_000;\n\n// The client-agreed limits live in the wire contract; re-export to keep this\n// module's public surface stable.\nexport { HEARTBEAT_MS, TYPING_COALESCE_MS, HISTORY_PAGE_MAX } from '@ttt-productions/chat-schemas';\n\n/**\n * Max reconnect resends of one un-acked send before its optimistic row is flipped\n * to a visible failed state (retry affordance) instead of a permanent ghost. Each\n * reconnect that resumes with the pending send still un-acked counts one attempt.\n */\nexport const MAX_PENDING_SEND_ATTEMPTS = 5;\n\n/**\n * Max wall-clock age of an un-acked pending send before it is flipped to failed on\n * the next resume, even if the attempt cap hasn't been hit (a long offline window).\n */\nexport const PENDING_SEND_MAX_AGE_MS = 60_000;\n\n/**\n * Wall-clock budget (ms) for a SERVER-DECLARED retryable send. Once the Worker has\n * rejected a send as retryable — a correlated `send-rejected` frame OR the legacy\n * uncorrelated `error{code:'membership-pending'}` — that send keeps retrying on the\n * server's own hint until this budget elapses, and is NEVER failed by the generic\n * {@link MAX_PENDING_SEND_ATTEMPTS} cap (which governs only blind reconnect\n * resends). 90 s comfortably covers the backend projection/grant-bootstrap window\n * without stranding an optimistic bubble on \"Sending…\" the way the old ~10 s\n * five-attempt cap did.\n */\nexport const SERVER_RETRYABLE_MAX_AGE_MS = 90_000;\n\n/**\n * Lower/upper clamp (ms) applied to a server `retryAfterMs` hint before scheduling a\n * resend, so a pathological (but schema-valid) hint can neither hammer the socket\n * nor park a send for minutes.\n */\nexport const SEND_RETRY_MIN_DELAY_MS = 250;\nexport const SEND_RETRY_MAX_DELAY_MS = 30_000;\n\n/**\n * A fresh client-minted id for a command the client correlates with its answer (a send's\n * `clientMessageId`, a mark-read's `requestId`). Random, so two tabs never collide.\n */\nexport function newCorrelationId(): string {\n  const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (c?.randomUUID) return c.randomUUID();\n  return `cid-${Date.now()}-${Math.random().toString(36).slice(2)}`;\n}\n"]}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/realtime/shared.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,kEAAkE;AAClE,yDAAyD;AACzD,2EAA2E;AAC3E,4EAA4E;AAC5E,uEAAuE;AAWvE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,kFAAkF;IACzE,kBAAkB,GAAG,IAAI,CAAC;IACnC,YAAY,OAAO,GAAG,oBAAoB;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO,CACL,GAAG,YAAY,qBAAqB;QACpC,CAAC,OAAO,GAAG,KAAK,QAAQ;YACtB,GAAG,KAAK,IAAI;YACX,GAAwC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CACzE,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACpC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAKF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,yEAAyE;IACzE,OAAO,EAAE,SAAS;IAClB,iFAAiF;IACjF,aAAa,EAAE,eAAe;CACtB,CAAC;AAIX,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,IAA+B;IACjE,OAAO,IAAI,KAAK,mBAAmB,CAAC,OAAO,IAAI,IAAI,KAAK,mBAAmB,CAAC,aAAa,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,GAAI,UAAyD,CAAC,MAAM,CAAC;IAC5E,IAAI,CAAC,EAAE,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACzC,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC","sourcesContent":["// Shared injected contracts + tunable constants for the realtime transport.\n//\n// The client-agreed limits (`HEARTBEAT_MS`, `TYPING_COALESCE_MS`,\n// `HISTORY_PAGE_MAX`) come from the one wire contract in\n// `@ttt-productions/chat-schemas`. The worker runtime is the authority and\n// rejects anything out of bounds, but the client uses these to coalesce and\n// paginate politely. The constants below are client-only retry policy.\n\n/**\n * Mints a short-lived chat grant token for the socket's scope. The app wires this\n * to its `mintChatGrant` callable (channel grant for a ChannelClient, inbox grant\n * for an InboxClient). Called on every connect AND once on a 4401 re-grant. The\n * app owns the Firestore permission check, the scope shape, caching to a React\n * Query staleTime < grant exp, and returning a FRESH token when re-invoked.\n */\nexport type GrantProvider = () => Promise<string>;\n\n/**\n * Package-owned, Firebase-FREE terminal access-denial signal. A grant provider\n * throws this (from `GrantProvider`) when the authoritative authorization answer\n * is a genuine, terminal \"no\" — as opposed to a transient/retryable mint failure.\n *\n * The transport treats it specially: instead of the normal reconnect backoff it\n * STOPS reconnecting, closes the lifecycle, fails any pending optimistic sends,\n * and surfaces the stable `access-denied` error code (which the React hook maps to\n * `allowed: false` so the shell renders its no-access surface instead of an eternal\n * loader). Every other thrown error stays transient and reconnects as before.\n *\n * This is deliberately generic: the consuming app translates its own backend\n * denial (e.g. a Firebase `functions/permission-denied`) into this class at the\n * grant-provider boundary. The package never imports or names Firebase. Consumers\n * that cannot subclass may instead throw any error carrying `isChatAccessDenied:\n * true` — `isChatAccessDeniedError` recognizes both (also cross-realm safe).\n */\nexport class ChatAccessDeniedError extends Error {\n  /** Duck-typed marker so detection survives module-realm / re-throw boundaries. */\n  readonly isChatAccessDenied = true;\n  constructor(message = 'Chat access denied') {\n    super(message);\n    this.name = 'ChatAccessDeniedError';\n  }\n}\n\n/** True when `err` is a terminal chat access denial (class instance or duck-typed marker). */\nexport function isChatAccessDeniedError(err: unknown): err is ChatAccessDeniedError {\n  return (\n    err instanceof ChatAccessDeniedError ||\n    (typeof err === 'object' &&\n      err !== null &&\n      (err as { isChatAccessDenied?: unknown }).isChatAccessDenied === true)\n  );\n}\n\n/** Injectable timers so the transport runs deterministically under fake timers in tests. */\nexport interface TransportTimers {\n  setTimeout: (fn: () => void, ms: number) => ReturnType<typeof setTimeout>;\n  clearTimeout: (h: ReturnType<typeof setTimeout>) => void;\n  now: () => number;\n}\n\nexport const defaultTimers: TransportTimers = {\n  setTimeout: (fn, ms) => setTimeout(fn, ms),\n  clearTimeout: (h) => clearTimeout(h),\n  now: () => Date.now(),\n};\n\n/** Connection status surfaced to the UI. */\nexport type RealtimeStatus = 'idle' | 'connecting' | 'open' | 'reconnecting' | 'closed';\n\n/**\n * The TERMINAL lifecycle verdicts both realtime clients surface on\n * `lastErrorCode` — the two codes that mean \"this lifecycle stopped on an\n * authoritative NO\", as opposed to a transient/protocol code (`send-failed`,\n * `blocked-word`, …) that leaves the socket running.\n *\n * ONE declaration for both clients: each sets and clears the same two strings,\n * and `useRealtimeChatMessages` maps `access-denied` to `allowed: false`.\n * A terminal verdict is terminal WITHIN its lifecycle; a later explicit\n * `connect()` is a fresh attempt the authority may legitimately re-deny, so the\n * stale code is cleared there (never carried into the new lifecycle's state).\n */\nexport const TERMINAL_ERROR_CODE = {\n  /** A 4403 REVOKED close: access was pulled while the socket was open. */\n  REVOKED: 'revoked',\n  /** The grant provider threw `ChatAccessDeniedError` — a terminal policy \"no\". */\n  ACCESS_DENIED: 'access-denied',\n} as const;\n\nexport type TerminalErrorCode = (typeof TERMINAL_ERROR_CODE)[keyof typeof TERMINAL_ERROR_CODE];\n\n/** True when `code` is one of the terminal lifecycle verdicts above. */\nexport function isTerminalErrorCode(code: string | null | undefined): code is TerminalErrorCode {\n  return code === TERMINAL_ERROR_CODE.REVOKED || code === TERMINAL_ERROR_CODE.ACCESS_DENIED;\n}\n\n/**\n * How long a client keeps failing to open for the first time before it reports the\n * first open as failed (`initialLoadFailed`) — so a chat or inbox that cannot connect\n * shows a failure the user can retry instead of an opening state that never ends. The\n * client keeps retrying in the background after it reports. Client policy, not a wire\n * constant.\n */\nexport const CHAT_INITIAL_LOAD_FAILURE_BUDGET_MS = 15_000;\n\n/**\n * Max reconnect resends of one un-acked send before its optimistic row is flipped\n * to a visible failed state (retry affordance) instead of a permanent ghost. Each\n * reconnect that resumes with the pending send still un-acked counts one attempt.\n */\nexport const MAX_PENDING_SEND_ATTEMPTS = 5;\n\n/**\n * Max wall-clock age of an un-acked pending send before it is flipped to failed on\n * the next resume, even if the attempt cap hasn't been hit (a long offline window).\n */\nexport const PENDING_SEND_MAX_AGE_MS = 60_000;\n\n/**\n * Wall-clock budget (ms) for a SERVER-DECLARED retryable send. Once the Worker has\n * rejected a send as retryable — a correlated `send-rejected` frame OR the legacy\n * uncorrelated `error{code:'membership-pending'}` — that send keeps retrying on the\n * server's own hint until this budget elapses, and is NEVER failed by the generic\n * {@link MAX_PENDING_SEND_ATTEMPTS} cap (which governs only blind reconnect\n * resends). 90 s comfortably covers the backend projection/grant-bootstrap window\n * without stranding an optimistic bubble on \"Sending…\" the way the old ~10 s\n * five-attempt cap did.\n */\nexport const SERVER_RETRYABLE_MAX_AGE_MS = 90_000;\n\n/**\n * Lower/upper clamp (ms) applied to a server `retryAfterMs` hint before scheduling a\n * resend, so a pathological (but schema-valid) hint can neither hammer the socket\n * nor park a send for minutes.\n */\nexport const SEND_RETRY_MIN_DELAY_MS = 250;\nexport const SEND_RETRY_MAX_DELAY_MS = 30_000;\n\n/**\n * A fresh client-minted id for a command the client correlates with its answer (a send's\n * `clientMessageId`, a mark-read's `requestId`). Random, so two tabs never collide.\n */\nexport function newCorrelationId(): string {\n  const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (c?.randomUUID) return c.randomUUID();\n  return `cid-${Date.now()}-${Math.random().toString(36).slice(2)}`;\n}\n"]}

package/dist/realtime/socket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/realtime/socket.ts"],"names":[],"mappings":"AAaA,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,2FAA2F;IAC3F,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,+FAA+F;AAC/F,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;CAC1B,KAAK,cAAc,CAAC;AAiBrB;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAuBlC,CAAC"}
+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/realtime/socket.ts"],"names":[],"mappings":"AAYA,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,2FAA2F;IAC3F,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,+FAA+F;AAC/F,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;CAC1B,KAAK,cAAc,CAAC;AAiBrB;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAyBlC,CAAC"}

package/dist/realtime/socket.js

@@ -1,14 +1,4 @@
-// The minimal socket abstraction the realtime clients drive, plus the default
-// browser-WebSocket factory. Injectable so unit tests pass a MOCK socket and no
-// real network is touched.
-//
-// Contract A transport: the grant token is offered as the SECOND WebSocket
-// subprotocol — `Sec-WebSocket-Protocol: <CHAT_SUBPROTOCOL>, <grant-token>` —
-// never in the URL (tokens never appear in URLs; Contract A). The browser sets
-// that header from `new WebSocket(url, [CHAT_SUBPROTOCOL, grantToken])`. The
-// worker validates cookie + grant + Origin BEFORE accept and echoes back only
-// CHAT_SUBPROTOCOL.
-import { CHAT_SUBPROTOCOL } from './wire.js';
+import { CHAT_SUBPROTOCOL } from '@ttt-productions/chat-schemas';
 const WS_OPEN = 1;
 /**
  * The default browser socket factory. Offers `[CHAT_SUBPROTOCOL, grantToken]` as the

package/dist/realtime/socket.js.map

@@ -1 +1 @@
-{"version":3,"file":"socket.js","sourceRoot":"","sources":["../../src/realtime/socket.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,2BAA2B;AAC3B,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,oBAAoB;AAEpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AA6C7C,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnF,MAAM,IAAI,GAAI,UAA4C,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACpG,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;IACzD,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACpC,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACnG,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1D,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO;QACL,IAAI,CAAC,IAAY;YACf,IAAI,EAAE,CAAC,UAAU,KAAK,OAAO;gBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,IAAa,EAAE,MAAe;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YACR,OAAO,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["// The minimal socket abstraction the realtime clients drive, plus the default\n// browser-WebSocket factory. Injectable so unit tests pass a MOCK socket and no\n// real network is touched.\n//\n// Contract A transport: the grant token is offered as the SECOND WebSocket\n// subprotocol — `Sec-WebSocket-Protocol: <CHAT_SUBPROTOCOL>, <grant-token>` —\n// never in the URL (tokens never appear in URLs; Contract A). The browser sets\n// that header from `new WebSocket(url, [CHAT_SUBPROTOCOL, grantToken])`. The\n// worker validates cookie + grant + Origin BEFORE accept and echoes back only\n// CHAT_SUBPROTOCOL.\n\nimport { CHAT_SUBPROTOCOL } from './wire.js';\n\n/** Lifecycle events a socket surfaces to its owning client. */\nexport interface SocketHandlers {\n  onOpen: () => void;\n  onMessage: (data: string) => void;\n  /** code/reason from the close frame (4401/4403/4408/4413/4429/1013 or transport codes). */\n  onClose: (code: number, reason: string) => void;\n  onError: () => void;\n}\n\n/** The transport-neutral socket the clients use. A mock implements the same shape in tests. */\nexport interface RealtimeSocket {\n  /** Queue/send a text frame. No-op if not open. */\n  send(data: string): void;\n  /** Close the socket with an optional app code + reason. Idempotent. */\n  close(code?: number, reason?: string): void;\n  /** True once the underlying transport is OPEN (ready to send). */\n  readonly isOpen: boolean;\n}\n\n/**\n * A factory that opens a socket to `url`, offering the chat subprotocol + the\n * grant token, and wires the handlers. Injected into the transport so tests\n * substitute a mock. The default factory uses the global `WebSocket`.\n */\nexport type SocketFactory = (args: {\n  url: string;\n  grantToken: string;\n  handlers: SocketHandlers;\n}) => RealtimeSocket;\n\n/** A WebSocket-like minimal surface (so we don't hard-depend on lib.dom in node-safe builds). */\ninterface MinimalWebSocket {\n  send(data: string): void;\n  close(code?: number, reason?: string): void;\n  readyState: number;\n  onopen: ((ev: unknown) => void) | null;\n  onmessage: ((ev: { data: unknown }) => void) | null;\n  onclose: ((ev: { code: number; reason: string }) => void) | null;\n  onerror: ((ev: unknown) => void) | null;\n}\n\ntype WebSocketCtor = new (url: string, protocols?: string | string[]) => MinimalWebSocket;\n\nconst WS_OPEN = 1;\n\n/**\n * The default browser socket factory. Offers `[CHAT_SUBPROTOCOL, grantToken]` as the\n * subprotocol list so the grant rides in `Sec-WebSocket-Protocol`, never the URL.\n */\nexport const browserSocketFactory: SocketFactory = ({ url, grantToken, handlers }) => {\n  const Ctor = (globalThis as { WebSocket?: WebSocketCtor }).WebSocket;\n  if (!Ctor) throw new Error('[chat-realtime] no global WebSocket available; inject a SocketFactory');\n  const ws = new Ctor(url, [CHAT_SUBPROTOCOL, grantToken]);\n  ws.onopen = () => handlers.onOpen();\n  ws.onmessage = (ev) => handlers.onMessage(typeof ev.data === 'string' ? ev.data : String(ev.data));\n  ws.onclose = (ev) => handlers.onClose(ev.code, ev.reason);\n  ws.onerror = () => handlers.onError();\n  return {\n    send(data: string) {\n      if (ws.readyState === WS_OPEN) ws.send(data);\n    },\n    close(code?: number, reason?: string) {\n      try {\n        ws.close(code, reason);\n      } catch {\n        /* already closing/closed */\n      }\n    },\n    get isOpen() {\n      return ws.readyState === WS_OPEN;\n    },\n  };\n};\n"]}
+{"version":3,"file":"socket.js","sourceRoot":"","sources":["../../src/realtime/socket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAuDjE,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnF,MAAM,IAAI,GAAI,UAA4C,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,IAAI;QACP,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;IACzD,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACpC,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,CACpB,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1D,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO;QACL,IAAI,CAAC,IAAY;YACf,IAAI,EAAE,CAAC,UAAU,KAAK,OAAO;gBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,IAAa,EAAE,MAAe;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YACR,OAAO,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { CHAT_SUBPROTOCOL } from '@ttt-productions/chat-schemas';\n// The minimal socket abstraction the realtime clients drive, plus the default\n// browser-WebSocket factory. Injectable so unit tests pass a MOCK socket and no\n// real network is touched.\n//\n// Contract A transport: the grant token is offered as the SECOND WebSocket\n// subprotocol — `Sec-WebSocket-Protocol: <CHAT_SUBPROTOCOL>, <grant-token>` —\n// never in the URL (tokens never appear in URLs; Contract A). The browser sets\n// that header from `new WebSocket(url, [CHAT_SUBPROTOCOL, grantToken])`. The\n// worker validates cookie + grant + Origin BEFORE accept and echoes back only\n// CHAT_SUBPROTOCOL.\n\n/** Lifecycle events a socket surfaces to its owning client. */\nexport interface SocketHandlers {\n  onOpen: () => void;\n  onMessage: (data: string) => void;\n  /** code/reason from the close frame (4401/4403/4408/4413/4429/1013 or transport codes). */\n  onClose: (code: number, reason: string) => void;\n  onError: () => void;\n}\n\n/** The transport-neutral socket the clients use. A mock implements the same shape in tests. */\nexport interface RealtimeSocket {\n  /** Queue/send a text frame. No-op if not open. */\n  send(data: string): void;\n  /** Close the socket with an optional app code + reason. Idempotent. */\n  close(code?: number, reason?: string): void;\n  /** True once the underlying transport is OPEN (ready to send). */\n  readonly isOpen: boolean;\n}\n\n/**\n * A factory that opens a socket to `url`, offering the chat subprotocol + the\n * grant token, and wires the handlers. Injected into the transport so tests\n * substitute a mock. The default factory uses the global `WebSocket`.\n */\nexport type SocketFactory = (args: {\n  url: string;\n  grantToken: string;\n  handlers: SocketHandlers;\n}) => RealtimeSocket;\n\n/** A WebSocket-like minimal surface (so we don't hard-depend on lib.dom in node-safe builds). */\ninterface MinimalWebSocket {\n  send(data: string): void;\n  close(code?: number, reason?: string): void;\n  readyState: number;\n  onopen: ((ev: unknown) => void) | null;\n  onmessage: ((ev: { data: unknown }) => void) | null;\n  onclose: ((ev: { code: number; reason: string }) => void) | null;\n  onerror: ((ev: unknown) => void) | null;\n}\n\ntype WebSocketCtor = new (url: string, protocols?: string | string[]) => MinimalWebSocket;\n\nconst WS_OPEN = 1;\n\n/**\n * The default browser socket factory. Offers `[CHAT_SUBPROTOCOL, grantToken]` as the\n * subprotocol list so the grant rides in `Sec-WebSocket-Protocol`, never the URL.\n */\nexport const browserSocketFactory: SocketFactory = ({ url, grantToken, handlers }) => {\n  const Ctor = (globalThis as { WebSocket?: WebSocketCtor }).WebSocket;\n  if (!Ctor)\n    throw new Error('[chat-realtime] no global WebSocket available; inject a SocketFactory');\n  const ws = new Ctor(url, [CHAT_SUBPROTOCOL, grantToken]);\n  ws.onopen = () => handlers.onOpen();\n  ws.onmessage = (ev) =>\n    handlers.onMessage(typeof ev.data === 'string' ? ev.data : String(ev.data));\n  ws.onclose = (ev) => handlers.onClose(ev.code, ev.reason);\n  ws.onerror = () => handlers.onError();\n  return {\n    send(data: string) {\n      if (ws.readyState === WS_OPEN) ws.send(data);\n    },\n    close(code?: number, reason?: string) {\n      try {\n        ws.close(code, reason);\n      } catch {\n        /* already closing/closed */\n      }\n    },\n    get isOpen() {\n      return ws.readyState === WS_OPEN;\n    },\n  };\n};\n"]}

package/dist/realtime/transport.d.ts

@@ -1,5 +1,5 @@
 import { ChannelClient, type ChannelClientConfig, type ChannelClientState } from './channel-client.js';
-import { InboxClient, type InboxClientConfig, type InboxClientState } from './inbox-client.js';
+import { InboxClient, type InboxClientConfig } from './inbox-client.js';
 import { type SocketFactory } from './socket.js';
 import type { GrantProvider, TransportTimers } from './shared.js';
 import type { ChatClientDiagnosticsOption } from './diagnostics.js';
@@ -58,5 +58,4 @@ export declare function createInboxClient(config: {
     /** OPT-IN structured diagnostics, forwarded to the InboxClient (default OFF). */
     diagnostics?: ChatClientDiagnosticsOption;
 }): InboxClient;
-export type { ChannelClientState, InboxClientState };
 //# sourceMappingURL=transport.d.ts.map

package/dist/realtime/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/realtime/transport.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,UAAU,EAAE,mBAAmB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,2BAA2B,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,gGAAgG;IAChG,KAAK,IAAI,IAAI,CAAC;IACd,uEAAuE;IACvE,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,IAAI,kBAAkB,CAAC;IAC/B,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC5D;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,uBAAuB,GAAG,kBAAkB,CAsB5F;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,iFAAiF;IACjF,WAAW,CAAC,EAAE,2BAA2B,CAAC;CAC3C,GAAG,WAAW,CAUd;AAED,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/realtime/transport.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,UAAU,EAAE,mBAAmB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,2BAA2B,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,gGAAgG;IAChG,KAAK,IAAI,IAAI,CAAC;IACd,uEAAuE;IACvE,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,IAAI,kBAAkB,CAAC;IAC/B,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC5D;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,uBAAuB,GAAG,kBAAkB,CAsB5F;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,iFAAiF;IACjF,WAAW,CAAC,EAAE,2BAA2B,CAAC;CAC3C,GAAG,WAAW,CAUd"}

package/dist/realtime/transport.js

@@ -9,7 +9,7 @@
 // lifetime (mount it once at the dock, not per ChatShell). This keeps the channel
 // transport (per-thread) and the inbox transport (per-user) cleanly split, exactly
 // as the worker splits Channel DOs from the Inbox DO.
-import { ChannelClient } from './channel-client.js';
+import { ChannelClient, } from './channel-client.js';
 import { InboxClient } from './inbox-client.js';
 import { browserSocketFactory } from './socket.js';
 /** Create the per-thread realtime client (the value placed on `config.realtime.client`). */