cross-tab-worker-databus 0.21.3 → 0.21.5

package/CHANGELOG.md

@@ -1,5 +1,58 @@
 ## [Unreleased]
 
+## [0.21.5] - 2026-09-22
+
+### Changed
+- The last two "hunt this for a test" items on the `data-bus.ts` arm ledger turned out to be unreachable by their own call sites, and now say so. `getQueuedStartReady()`'s `if (!queued)` rejection and `queueStartAfterStop()`'s `if (this.queuedStart) return this.queuedStart` dedupe each sit behind an *identical* check performed one statement earlier by the only caller (`ready()` and `start()` respectively), synchronously, with nothing in between that could run user code. Neither was deleted, for the asymmetric-failure reason: dropping the first replaces a documented `"No queued start is in flight."` rejection with `TypeError: Cannot read properties of null` for any future second caller, and dropping the second lets one burst of operations behind a single stop queue several restarts, which is exactly the contract that line states. Zero coverage movement, measured after rebasing onto #177: `data-bus.ts` stays at 14 uncovered branch arms and 2 uncovered functions, 37 files / 874 tests.
+- Two `openTransport()` conditions with permanently false arms, one of which had a comment describing a case that cannot happen. The `this.pendingStop === chainedPendingStop` check explained itself by "a stop created concurrently (e.g. by `suspendTransport()`) is a different promise", and the `!this.suspended && !this.stopping` guard below it explained nothing at all; the enumeration that rules both out is the same one. `pendingStop` is written in four places — this line, the failed-open cleanup, `performStop()`'s finally and `suspendTransport()`'s chained stop — and of those, the three that could change it out from under this continuation all run behind a `lifecycleEpoch` increment, while `suspended` has one writer and `stopping` two and each raises its flag only after bumping the epoch. An opening whose captured epoch is still current therefore cannot observe either condition false. Both stay uncovered by construction, so this moves no number; both are kept, because the asymmetric failure is the one worth guarding — an unconditional `pendingStop = null` would drop a live stop and let `stop()` issue a second `transport.stop()` the moment any transition suspends without superseding, and a dropped ready-guard would mark a hidden transport ready.
+- A comment in `createStopPromise()` that asserted the opposite of the truth: it claimed `performStop()` "never rejects", which had turned the rejection arm of the teardown gate's `.then(f, g)` into prose-evidenced defensive filler. It can reject. Its `catch` reports through `reportError()` → `notifyError()` → `invokeHandlers(errorHandlers, …, ERROR_HANDLER)`, and that leg absorbs a throwing error subscriber only by writing to `console.warn` — so a subscriber that throws *and* a `console.warn` that throws escape the `catch` and reject the teardown. The comment now names that chain, and names which half of the arm is load-bearing: `resolveGate()` is the only thing that ever settles `await bus.stop()` on this path (the transport shutdown has already finished, so nothing else can wake the caller), while the `stopPromise = null` beside it is defensive for the reason `stop()`'s own comment already gives — `stopping` is authoritative and a settled gate is stale — which is measured, not argued: deleting that line changes no assertion in the file.
+- One redundant rejection handler deleted from `reopenTransport()`, on a proof that needs no enumeration: the `opening.then(onFulfilled, onRejected)` a few lines above passes an `onRejected`, which registers *that* as a handler of `opening` — so `opening` can never surface as an unhandled rejection on that path whatever it rejects with, and the trailing `void opening.catch(() => undefined)` could only ever duplicate a handler that was already installed. Unlike the `0.21.2` / `0.21.3` deletions this argument rests on Promise semantics rather than on a list of assignment sites, which is also why it does not depend on `reportError` staying total.
+- The two rejection swallows that remain in that method are now each labelled with what they actually are, because they are two different kinds of leg and only one of them is deletable. The early-return arm's `void opening.catch(...)` is the *only* handler that opening ever gets on that path (`resumeTransport()` calls with `void`, and the `.then(f, g)` below is unreachable from the arm), so it is a guard, not a gap. The one at the top of the method is dominated — `pending` provably resolves — but is deliberately kept, and the reason is recorded with a measurement: forcing `pending` to reject fails exactly one test whether the line is present or deleted, so nothing asserts the premise; with the absorb a superseded resume still reopens, without it the bus silently stays closed after a pageshow. A guard whose deletion turns "degraded" into "stuck" is worth its uncovered function.
+- Corrects a claim this pass initially made about itself: the deleted handler was **not** one of `data-bus.ts`'s three uncovered functions — its callback ran in existing tests, so the module's uncovered-function count stays at three and its uncovered-line count is unchanged. What was removed was a handler that executed and could not matter. Coverage movement here is zero, and saying so is the point: the change is justified by the proof, not by a number. (That count of three is the state *at that change*; the `createStopPromise()` arm below is what actually moved it.)
+
+### Fixed
+- A control frame can no longer rename the channel its recipient owns. `topicKey` is a pure function of `topic`, so every frame this library sends has the two agreeing — but `handleControlMessage` checked only `targetWorkerId` and the durable route, both keyed by `topicKey`, and then used the frame's `topic` as the plaintext to remember, assign, and hand to the transport. A `BroadcastChannel` is unauthenticated: any same-origin script can post into it, and one frame carrying a real `topicKey` next to an arbitrary `topic` would have that worker take ownership *under the substituted name*, because the route authorization passed. Incoming control frames are now rejected when `createOpaqueKey(topic) !== topicKey`. Legitimate peers are unaffected — measured on the full suite, including the coordination fuzzer, which forges frames with the two fields deliberately consistent — and the new test fails without the guard as `expected "vi.fn()" to not be called at all, but actually been called 1 times`.
+- The seeded fuzzers' wall-clock fuse could not fire on exactly the runner it was written for. Both harnesses bounded depth with `if (completed >= MIN_SEEDS && elapsed > SEED_BUDGET_MS) break`, so a host too slow to clear the depth floor inside the budget never became eligible to stop: the sweep ran as long as the machine was slow and then died on the test's own 120s ceiling reporting nothing but `Test timed out`. Reproduced on `main` (1,046/5,000 seeds after 509s against a 60s fuse, no invariant violation) and twice on a PR that turned out not to be the cause. The budget is now unconditional and the floor stays an assertion, so a slow runner degrades depth and says so in ~60s instead of hanging for ~8 minutes; demonstrated locally by setting the budget to 0 — the gated form still ran 100 seeds and passed, the unconditional one stops at once and fails with `explored only 0 seeds`.
+- The budget clock had a single source whose immunity was contextual rather than inherent. `realNowMs()` trusted `node:perf_hooks`' `performance`, which survives fake timers only because the global binding and that export are different objects in some Node contexts; a worker thread makes them the same object, so a fake-timer configuration that includes `performance` freezes the budget at 0 elapsed. It now takes the max of that source and `process.uptime()`, which no fake-timer toolbox replaces — measured by blocking 250ms of real time inside a fake window with `Atomics.wait`: `node:perf_hooks` 260, `process.uptime()` 260, and global `performance.now()`, `Date.now()` and `process.hrtime.bigint()` all 0.
+- The clock's own pin asserted only the harmless direction. "60 simulated seconds must not cost 60 measured ones" passes trivially when the clock is frozen, so it could not have caught the bug above; the pin now also requires that real blocked time inside a fake window still measures as having passed. Verified against a mutant returning a constant: it passes the original assertion and fails only the new one.
+- A truncated sweep now logs its slowest seed next to the depth reached. A fuse sampled between iterations cannot bound an iteration, so a seed that wedges on an `await` needing a timer the fake clock never advances was previously visible only as an unexplained total.
+
+### Coverage
+- `src/core/data-bus.ts` goes from 17 uncovered branch arms to 16 by pinning the right operand of `return this.stopPromise ?? Promise.resolve()` in `start()`'s superseded-resume arm. Only a re-entered `stop()` ever assigns `stopPromise`, and the re-entry that reaches *this* line is a re-entered `start()`, which bumps the epoch with no stop in flight and leaves it null — so the fallback had never been taken in any test. The contract it protects is `start()`'s declared `Promise<void>`: replacing the line with `return this.stopPromise!` makes the new assertion fail as `expected null to be an instance of Promise`, which is the shape a caller would meet at `bus.start(c).then(...)`. The count is re-measured on this branch rather than inherited from the `0.21.4` entry, since `reopenTransport()` changed the same file in between.
+- Whole-suite 98.84 / 96.46 / 99.08 / 99.57 over 37 files / 872 tests, against unchanged ceilings of 96 / 92 / 96 / 97.
+- `data-bus.ts` then goes 16 uncovered branch arms → 15 and, for the first time in this ledger, three uncovered functions → 2, because the leg that closed is a handler *function* that had never been entered: `createStopPromise()`'s rejection arm. Driving it needs the double failure that its corrected comment rules out — an error subscriber that throws plus a `console.warn` that throws — and its remaining half is the fall-through of `if (this.stopPromise === stopGate)`, i.e. a stop whose gate had already been replaced by a newer one. Module totals move 97.9 / 96.32 / 97.43 / 98.86 → 98.38 / 96.55 / 98.29 / 99.24 with the whole suite at 98.94 / 96.52 / 99.26 / 99.65 over 37 files / 873 tests. Teeth were checked on the load-bearing statement, not on the arm: deleting `resolveGate()` from that arm fails the new test as `expected 'hung' to be 'settled'` in 250ms, and deleting the `stopPromise = null` next to it leaves all 184 tests in the file passing, which is why the comment calls one a contract and the other defensive.
+- `data-bus.ts` goes 15 uncovered branch arms → 14 (functions stay at 2) by pinning the second conjunct of `invokeHandlers()`' logging guard. A throwing error subscriber is absorbed by writing to `console.warn`, and that write is conditional on `typeof console.warn === 'function'`; with a console that has no `warn`, an unguarded call would raise `TypeError: console.warn is not a function` from inside the handler meant to contain the failure — out through `reportError()`, out of the dispatch loop, into the transport's message callback. The new test stubs such a console and asserts the publication dispatch does not throw and the dispatch failure still lands in the unified ledger. Mutation-checked: dropping the conjunct fails it as `expected [Function] to not throw an error but 'TypeError: console.warn is not a func…' was thrown`. Whole-suite branch coverage 96.52 → 96.57, statements/functions/lines unchanged, 37 files / 874 tests.
+- One arm was *not* closed, and the attempt is recorded so it is not re-attempted blind: `if (!this.recoveryExhausted)` inside the exhausted-recovery branch still has no test that takes its false arm. The first hypothesis — that the existing `caps automatic recovery attempts` test never really reached the second exhaustion because its environment clock was a constant — was measured with a scratch probe against the unmodified test and was **false**: `attempt` reaches 3 and exactly one `exhausted` event is emitted even with the frozen clock, so the assertions there are not vacuous and the speculative rewrite of that test was reverted rather than shipped with its (now disproved) comments. What the probe did establish is that a fourth `setStatus('error')` does not advance the attempt counter at all, for reasons the ledger does not yet explain, and that making the guard unconditional emits no second event — so no current assertion depends on that leg either way.
+
+- `data-bus.ts` goes 14 uncovered branch arms → 13 by pinning the `default:` arm of the cluster's `onControl` handler, which is a live leg rather than a defensive one: the BroadcastChannel a cluster listens on is unauthenticated, and `handleControlMessage` forwards `message.action` straight through — its own `switch` has a `default: break` that *falls through to the same call*, then runs load accounting because the verb is not `PUBLISH`. So the handler's `default: break` is the only thing preventing an unknown verb from being acted upon as one of the three known ones. The new test posts a `CONTROL` frame with `action: 'DESTROY'` at the bus's own worker id over the cluster channel and asserts no publication handler ran, no transport subscribe/unsubscribe/publish call appeared, and the bus still reports healthy. Teeth verified by mutation: making the arm act on the topic fails the test as `expected [ 'topic' ] to deeply equal []`. Suite is 37 files / 875 tests.
+
+### Tests
+- Both seeded fuzzers now announce their depth *while* sweeping, not only after: the first five seeds and then every fiftieth print `starting seed N at <elapsed>ms (depth D)`. This exists because a runner killed by the test's own 120s ceiling produces `Error: Test timed out in 120000ms` and nothing else — the truncation log the fuse writes sits after the loop, so it never runs on exactly the failure it was written to explain. With the heartbeat the same log says whether the sweep was merely slow (depth climbing, elapsed growing) or wedged inside one seed (last line `starting seed 7`, no successor), and those two have different fixes.
+
+### Documentation
+- `AGENTS.md` corrects the claim that the budget clock "is immune wherever it is called" to what was measured, records that the depth floor must never gate the fuse, and adds the rule that a clock guard has to be pinned in both directions — with `blockRealTimeMs()` as the way to do it, since a `while (Date.now() < stop)` busy wait never terminates inside a fake window where `Date` is frozen.
+- `AGENTS.md` gains the tier distinction these two legs demonstrate (a guard that is dominated, a guard that is the only handler, and a handler that runs but is redundant are three different verdicts, and only the middle one is a coverage gap), and the stale cross-reference from `reopenTransport()`'s `activeConfig` guard to `performStop()`'s absorber — deleted in `0.21.2` — now points at the live comparison in the same method.
+- `AGENTS.md` gains the rule this pass was written by: a comment that a promise "never rejects" is a claim about every path through the handler it runs, not about the happy path, and when such a leg is the only thing that settles an `await`, construct the throw instead of trusting the prose. It also records the shape to prefer for that pin — race the promise against a short real-timer watchdog, so deleting the leg fails as `expected 'hung' to be 'settled'` rather than as a test timeout that names nothing.
+- `AGENTS.md` adds the discipline this pass's discarded change was bought with: measure a "this test passes vacuously" theory against the *unmodified* test before rewriting it, because the rewrite brings a comment that the next reader will trust. is a claim about every path through the handler it runs, not about the happy path, and when such a leg is the only thing that settles an `await`, construct the throw instead of trusting the prose. It also records the shape to prefer for that pin — race the promise against a short real-timer watchdog, so deleting the leg fails as `expected 'hung' to be 'settled'` rather than as a test timeout that names nothing.
+
+
+
+## [0.21.4] - 2026-09-22
+
+### Fixed
+- Reporting a failure can no longer throw. `recordError()` rendered the rejection reason with `String(error)`, and that coercion is not total: `String(Object.create(null))` throws `TypeError: Cannot convert object to primitive value`, and any object can carry a `toString` that throws. Since a transport may reject with any value — `DataBusTransport` is a public, application-implemented port — one class of transport failure used to produce a second, unrelated failure from inside the code reporting the first. The same unguarded coercion also sat in `getRecoveryStats()`, so `getHealthSummary()` threw for a bus whose last failure was unstringifiable: the probe that is supposed to explain an outage refused to answer during one.
+- Concretely, a retry after a failed open whose cleanup *also* failed never reopened the transport. `createStopPromise()`'s terminal `.catch(error => this.reportError(error))` ran the thrower, so `pendingStop` rejected, `start()`'s chained `.then()` was skipped, `transport.start()` was never reached, and the caller got `TypeError: Cannot convert object to primitive value` — a message about the formatter's limits rather than about their transport. Failure messages now go through `describeFailure()`, which is total and renders such a value as `[unstringifiable object]`; both ledgers are guaranteed to describe the same failure identically.
+- This also restores the premise that `0.21.2` and `0.21.3` were built on. Both removed rejection-absorbers by enumerating `pendingStop`'s assignment sites and concluding each chain "ends in a terminal `.catch(error => this.reportError(error))`, therefore resolves". The enumeration was right; the last step silently assumed `reportError` cannot throw. It is now stated as what it is, in the comments at both sites and with a test that drives the double-failed-open chain end to end, so the removals rest on something checked rather than assumed.
+- The same defect shape was fixed one layer out, in the option validators: `assertPositiveSafeInteger()`, `assertPruneStrategy()` and `assertHeartbeatInterval()` interpolated caller input with `String(value)`, so constructing a bus with a null-prototype option failed with the formatter's `TypeError` instead of the documented complaint about the option — and in `assertPruneStrategy()` the coercion is the membership test itself.
+
+### Added
+- `describeFailure(error)` in `src/utils/error-utils.ts`, alongside the `serializeError()` that already avoided this trap. Internal helper; no public export changed.
+- `FakeTransport.stopRejection` selects the *reason* a failing `stop()` rejects with, where `stopShouldFail` only selected the fact. `toThrow(TypeError)` could not have caught this bug — the formatter's error is also a `TypeError` — so the new assertions check the message, and one of them asserts the pre-existing `toThrow(TypeError)` shape would have passed either way.
+
+### Coverage
+- Whole-suite 98.85 / 96.41 / 99.08 / 99.57 over 37 files / 871 tests, against unchanged ceilings of 96 / 92 / 96 / 97. `src/utils/error-utils.ts` is now clear at both tiers (zero uncovered lines, arms and functions); `src/core/data-bus.ts` keeps 17 uncovered branch arms, which is a different claim and is recorded as such.
+
+
 ## [0.21.3] - 2026-09-22
 
 ### Changed

package/dist/centrifuge.js

@@ -2,10 +2,12 @@ import {
   CrossTabDataBus,
   assertHeartbeatInterval,
   assertStructuredCloneable,
+  deserializeWorkerError,
   parseDataBusPublication,
   publicationMetadata,
-  selectWorkerBackend
-} from "./chunk-CFFSSIUO.js";
+  selectWorkerBackend,
+  serializeError
+} from "./chunk-RWUDSL24.js";
 import {
   CENTRIFUGE_INPUT_TYPE,
   CENTRIFUGE_OUTPUT_TYPE,
@@ -17,41 +19,6 @@ import {
 
 // src/centrifuge-session.ts
 import { Centrifuge } from "centrifuge";
-
-// src/utils/error-utils.ts
-function serializeError(error) {
-  if (error instanceof Error) {
-    return {
-      name: error.name,
-      message: error.message,
-      ...error.stack ? { stack: error.stack } : {}
-    };
-  }
-  const context = error === void 0 ? void 0 : error;
-  return {
-    name: "CentrifugeError",
-    message: typeof error === "string" ? error : "Centrifuge worker operation failed.",
-    ...context === void 0 || !isStructuredCloneable(context) ? {} : { context }
-  };
-}
-function isStructuredCloneable(value) {
-  if (typeof structuredClone !== "function") return true;
-  try {
-    structuredClone(value);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function deserializeWorkerError(error) {
-  const result = new Error(error.message);
-  result.name = error.name;
-  if (error.stack) result.stack = error.stack;
-  if (error.context !== void 0) Object.assign(result, { context: error.context });
-  return result;
-}
-
-// src/centrifuge-session.ts
 var CentrifugeSession = class {
   constructor(sink) {
     this.sink = sink;

package/dist/centrifuge.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/centrifuge-session.ts", "../src/utils/error-utils.ts", "../src/centrifuge-protocol.ts", "../src/centrifuge.ts"],
-  "sourcesContent": ["/**\n * CentrifugeSession \u2014 a reusable wrapper around a single Centrifuge client.\n *\n * Provides a structured-clone-safe message protocol (INIT/SUBSCRIBE/UNSUBSCRIBE/\n * PUBLISH/STOP) so the same session class can run inside a Dedicated Worker,\n * a SharedWorker port, or directly on the main thread as a local fallback.\n */\nimport { Centrifuge } from 'centrifuge';\nimport { parseDataBusPublication } from './core/publication';\nimport type {\n  PublicationContext,\n  StateContext,\n  Subscription,\n  SubscriptionErrorContext\n} from 'centrifuge';\nimport type {\n  CentrifugeWorkerConfig,\n  CentrifugeWorkerInput,\n  CentrifugeWorkerOutput\n} from './centrifuge-protocol';\nimport { CENTRIFUGE_INPUT_TYPE, CENTRIFUGE_OUTPUT_TYPE, WORKER_STATUS } from './utils/constants';\nimport { publicationMetadata } from './utils/metadata';\nimport { deserializeWorkerError, serializeError } from './utils/error-utils';\n\n/** Callback interface for posting messages back to the transport layer. */\nexport interface CentrifugeSessionSink<TData = unknown> {\n  post(message: CentrifugeWorkerOutput<TData>, transfer?: ArrayBuffer[]): void;\n}\n\n/** A pending getToken/getChannelToken request awaiting a main-thread response. */\ninterface PendingTokenRequest {\n  resolve: (token: string) => void;\n  reject: (error: unknown) => void;\n}\n\n/** Centrifuge client options for token-bridge mode: the structured-clone-safe\n * subset plus the two function-valued hooks that Centrifuge invokes for fresh\n * credentials. Used only inside the session, never across the Worker boundary. */\ntype CentrifugeBridgedOptions = Omit<CentrifugeWorkerConfig, 'getToken' | 'getChannelToken'> & {\n  getToken: () => Promise<string>;\n  getChannelToken: (channel: string) => Promise<string>;\n};\n\n/**\n * Stateful Centrifuge client wrapper shared by Dedicated Worker, SharedWorker\n * ports and the main-thread local fallback. Each session owns one connection.\n */\nexport class CentrifugeSession<TData = unknown> {\n  private client: Centrifuge | null = null;\n  private readonly subscriptions = new Map<string, Subscription>();\n  private transferable = false;\n  private tokenBridge = false;\n  private nextRequestId = 1;\n  // Bumped on every initialize/stop. Async client callbacks capture the value\n  // from the connection that created them so a stopped client cannot emit into\n  // a later session instance (including the main-thread local fallback).\n  private lifecycle = 0;\n  private readonly pendingTokenRequests = new Map<number, PendingTokenRequest>();\n\n  constructor(private readonly sink: CentrifugeSessionSink<TData>) {}\n\n  /** Dispatch an incoming Worker message to the matching operation.\n   * Unknown message types are ignored rather than thrown, so a future protocol\n   * extension adding a new variant cannot crash an older session. */\n  handle(message: CentrifugeWorkerInput): void {\n    switch (message.type) {\n      case CENTRIFUGE_INPUT_TYPE.INIT:\n        this.initialize(message.url, message.config, message.transferable === true, message.tokenBridge === true);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.SUBSCRIBE:\n        this.subscribe(message.topic);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.UNSUBSCRIBE:\n        this.unsubscribe(message.topic);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.PUBLISH:\n      case CENTRIFUGE_INPUT_TYPE.PUBLISH_BIN:\n        // Binary and JSON publish share the same Centrifuge client call; the\n        // transport layer decides whether to transfer the ArrayBuffer.\n        this.publish(message.topic, message.data, message.messageId, message.timestamp);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.STOP:\n        this.stop();\n        return;\n      case CENTRIFUGE_INPUT_TYPE.TOKEN_RESPONSE:\n        this.resolveToken(message.requestId, message.token);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR:\n        this.rejectToken(message.requestId, deserializeWorkerError(message.error));\n        return;\n      default:\n        return;\n    }\n  }\n\n  /** Create the Centrifuge client, wire up lifecycle listeners, and connect. */\n  private initialize(url: string, config: CentrifugeWorkerConfig, transferable: boolean, tokenBridge: boolean): void {\n    if (this.client) return;\n    const lifecycle = ++this.lifecycle;\n    this.transferable = transferable;\n    this.tokenBridge = tokenBridge;\n    const clientOptions: CentrifugeWorkerConfig | CentrifugeBridgedOptions = tokenBridge\n      ? {\n          ...config,\n          // Route credential fetches back to the main thread, where the\n          // application's credentialProvider lives (config must stay\n          // structured-cloneable, so functions cannot cross the boundary).\n          getToken: () => this.requestToken('token', lifecycle),\n          getChannelToken: (channel: string) => this.requestToken('channelToken', lifecycle, channel)\n        }\n      : config;\n    const client = new Centrifuge(url, clientOptions);\n    this.client = client;\n    client.on('state', (context: StateContext) => {\n      if (this.lifecycle !== lifecycle) return;\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: normalizeStatus(context.newState) });\n    });\n    client.on('connected', () => {\n      if (this.lifecycle !== lifecycle) return;\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: WORKER_STATUS.CONNECTED });\n    });\n    client.on('disconnected', () => {\n      if (this.lifecycle !== lifecycle) return;\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: WORKER_STATUS.DISCONNECTED });\n    });\n    client.on('error', context => {\n      if (this.lifecycle !== lifecycle) return;\n      this.postError(context);\n    });\n    // Client-level publications are only for server-side subscriptions (where\n    // no client Subscription object exists). For topics we have an active\n    // subscription for, the subscription-level 'publication' listener handles\n    // dispatch \u2014 skip here to avoid delivering the same message twice.\n    client.on('publication', (context: PublicationContext) => {\n      if (this.lifecycle !== lifecycle) return;\n      const topic = context.channel || getPayloadTopic(context.data);\n      if (!topic || this.subscriptions.has(topic)) return;\n      this.postPublication(topic, context.data);\n    });\n    client.connect();\n  }\n\n  /** Subscribe to a Centrifuge channel. Reuses an existing subscription if one exists.\n   * Listeners are only registered once per subscription object \u2014 a repeated\n   * SUBSCRIBE for an already-tracked topic skips the listener wiring entirely,\n   * avoiding the removeAllListeners + re-on churn on every duplicate message. */\n  private subscribe(topic: string): void {\n    if (!this.client) return this.postError(new Error('Centrifuge client is not initialized.'));\n    const lifecycle = this.lifecycle;\n    // If we already track this subscription, it already has our listeners \u2014\n    // a duplicate SUBSCRIBE is a no-op (idempotent), matching the transport\n    // contract. Only a fresh subscription needs listener wiring.\n    const existing = this.subscriptions.get(topic);\n    if (existing) {\n      existing.subscribe();\n      return;\n    }\n    let subscription = this.client.getSubscription(topic);\n    if (!subscription) subscription = this.client.newSubscription(topic);\n    // Remove only our own listeners so that any Centrifuge internal listeners\n    // on the subscription object are preserved. Each subscription event carries\n    // a single listener so removeAllListeners(\u2026) is safe here.\n    subscription.removeAllListeners('publication');\n    subscription.removeAllListeners('error');\n    subscription.removeAllListeners('unsubscribed');\n    this.subscriptions.set(topic, subscription);\n    subscription.on('publication', context => {\n      if (this.lifecycle !== lifecycle) return;\n      this.postPublication(topic, context.data);\n    });\n    subscription.on('error', (context: SubscriptionErrorContext) => {\n      if (this.lifecycle !== lifecycle) return;\n      this.postError(context);\n    });\n    subscription.on('unsubscribed', () => {\n      if (this.lifecycle === lifecycle) this.subscriptions.delete(topic);\n    });\n    subscription.subscribe();\n  }\n\n  /** Unsubscribe from a Centrifuge channel and clean up the local reference.\n   * Listeners are removed before unsubscribing so a late `unsubscribed` event\n   * cannot delete a subscription that a subsequent `subscribe()` re-added. */\n  private unsubscribe(topic: string): void {\n    const subscription = this.subscriptions.get(topic) ?? this.client?.getSubscription(topic);\n    if (!subscription) return;\n    subscription.removeAllListeners('publication');\n    subscription.removeAllListeners('error');\n    subscription.removeAllListeners('unsubscribed');\n    this.subscriptions.delete(topic);\n    subscription.unsubscribe();\n  }\n\n  /** Publish a message to the Centrifuge channel. */\n  private publish(topic: string, data: unknown, messageId?: string, timestamp?: number): void {\n    if (!this.client) return this.postError(new Error('Centrifuge client is not initialized.'));\n    const lifecycle = this.lifecycle;\n    // Centrifuge's payload is application-defined. Preserve legacy payloads;\n    // when an ID is requested, send a small metadata envelope that compatible\n    // servers can echo back for end-to-end deduplication.\n    const hasMetadata = messageId !== undefined || timestamp !== undefined;\n    const payload = hasMetadata\n      ? {\n          data,\n          ...(messageId === undefined ? {} : { messageId }),\n          ...(timestamp === undefined ? {} : { timestamp })\n        }\n      : data;\n    void this.client.publish(topic, payload).catch(error => {\n      if (this.lifecycle === lifecycle) this.postError(error);\n    });\n  }\n\n  /** Forward a publication to the transport. Binary payloads take the\n   * zero-copy `MESSAGE_BIN` path when `transferable` is enabled; everything\n   * else is structured-cloned via `MESSAGE`. An empty topic means the\n   * publication carried no channel info and is silently dropped. */\n  private postPublication(topic: string, data: unknown): void {\n    if (!topic) return;\n    if (this.transferable && data instanceof ArrayBuffer) {\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.MESSAGE_BIN, topic, data }, [data]);\n      return;\n    }\n    const publication = parseDataBusPublication<TData>(data, topic);\n    if (!publication) return;\n    this.post({\n      type: CENTRIFUGE_OUTPUT_TYPE.MESSAGE,\n      topic: publication.topic,\n      data: publication.data,\n      ...publicationMetadata(publication.messageId, publication.timestamp)\n    });\n  }\n\n  /** Disconnect the client and clear all subscriptions. */\n  private stop(): void {\n    // Invalidate callbacks from the connection being stopped before disconnect\n    // so its synchronous or queued events cannot leak into a later session.\n    this.lifecycle += 1;\n    // Settle every in-flight credential request so a stop cannot leave the\n    // Worker awaiting a main-thread response forever.\n    for (const [, pending] of this.pendingTokenRequests) {\n      pending.reject(new Error('Centrifuge session stopped before the credential was resolved.'));\n    }\n    this.pendingTokenRequests.clear();\n    this.client?.disconnect();\n    this.subscriptions.clear();\n    this.client = null;\n    this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: WORKER_STATUS.DISCONNECTED });\n  }\n\n  /** Issue a credential request to the main thread and await the response.\n   * Used as Centrifuge's `getToken` / `getChannelToken` when token bridging is\n   * enabled; resolved or rejected by a matching TOKEN_RESPONSE / TOKEN_ERROR. */\n  private requestToken(kind: 'token' | 'channelToken', lifecycle: number, channel?: string): Promise<string> {\n    // The provider is installed on a specific Centrifuge client. An old client\n    // must not be able to route a late credential request into a replacement\n    // session merely because it retained the callback closure.\n    if (this.lifecycle !== lifecycle) {\n      return Promise.reject(new Error('Centrifuge client lifecycle has ended before the credential was requested.'));\n    }\n    const requestId = this.nextRequestId;\n    this.nextRequestId += 1;\n    return new Promise<string>((resolve, reject) => {\n      this.pendingTokenRequests.set(requestId, { resolve, reject });\n      this.post({\n        type: CENTRIFUGE_OUTPUT_TYPE.TOKEN_REQUEST,\n        requestId,\n        kind,\n        ...(channel === undefined ? {} : { channel })\n      });\n    });\n  }\n\n  private resolveToken(requestId: number, token: string): void {\n    const pending = this.pendingTokenRequests.get(requestId);\n    if (!pending) return;\n    this.pendingTokenRequests.delete(requestId);\n    pending.resolve(token);\n  }\n\n  private rejectToken(requestId: number, error: unknown): void {\n    const pending = this.pendingTokenRequests.get(requestId);\n    if (!pending) return;\n    this.pendingTokenRequests.delete(requestId);\n    pending.reject(error);\n  }\n\n  /** Forward a message to the sink (the transport layer). */\n  private post(message: CentrifugeWorkerOutput<TData>, transfer?: ArrayBuffer[]): void {\n    this.sink.post(message, transfer);\n  }\n\n  /** Serialise and report an error. The Centrifuge client handles reconnection\n   * internally, so a transient error should not trigger a `STATUS: error` that\n   * would cause `selectActiveWorkers()` to exclude this worker from routing.\n   * Fatal errors are distinguished by the client eventually emitting\n   * `disconnected` without a subsequent `connected`. */\n  private postError(error: unknown): void {\n    this.post({ type: CENTRIFUGE_OUTPUT_TYPE.ERROR, error: serializeError(error) });\n  }\n}\n\n/** Extract a topic from a Centrifuge publication payload if one is present.\n * Handles both direct `channel` fields and the nested `push.channel` shape\n * that Centrifugo uses for some server-side push types. */\nfunction getPayloadTopic(data: unknown): string {\n  if (!data || typeof data !== 'object') return '';\n  const payload = data as Record<string, unknown>;\n  // Prefer nested push.channel (server-side push) then fall back to top-level channel.\n  const push = payload.push;\n  const nested = typeof push === 'object' && push !== null ? (push as Record<string, unknown>).channel : undefined;\n  const topic = nested ?? payload.channel;\n  return typeof topic === 'string' ? topic : '';\n}\n\n/** Map a Centrifuge state string to the DataBus's status vocabulary.\n * 'connecting' and 'connected' pass through; anything else (e.g. 'reconnecting',\n * 'disconnected') maps to 'disconnected'. */\nconst LIVE_STATES = new Set<string>([WORKER_STATUS.CONNECTING, WORKER_STATUS.CONNECTED]);\nfunction normalizeStatus(status: string): 'connecting' | 'connected' | 'disconnected' {\n  return LIVE_STATES.has(status) ? (status as 'connecting' | 'connected') : 'disconnected';\n}\n", "/**\n * \u9519\u8BEF\u5E8F\u5217\u5316\u5DE5\u5177 \u2014\u2014 \u5728 Worker \u8FB9\u754C\u5F80\u8FD4\u4F20\u8F93 Error\u3002\n *\n * Error \u5B9E\u4F8B\u65E0\u6CD5\u901A\u8FC7 postMessage \u7ED3\u6784\u5316\u514B\u9686\uFF0C\u6240\u4EE5 CentrifugeSession \u4FA7\u7528\n * serializeError \u628A\u5B83\u538B\u6210 plain object\uFF0C\u4E3B\u7EBF\u7A0B\u4FA7\u7528 deserializeWorkerError\n * \u8FD8\u539F\u6210\u771F Error\uFF08\u5E26 name/stack\uFF09\u3002\u6B64\u524D\u4E24\u4E2A\u51FD\u6570\u5206\u522B\u5185\u8054\u5728 centrifuge-session.ts\n * \u4E0E centrifuge.ts\uFF0C\u6B64\u5904\u7EDF\u4E00\u5B9A\u4E49\u5E76\u4ECE\u4E24\u5904\u5F15\u7528\u3002\n */\n\n/** Error object serialized for cross-thread transfer. */\nexport interface SerializedWorkerError {\n  /** The Error's `name` (e.g. 'TypeError', 'CentrifugeError'). */\n  name: string;\n  /** The Error's `message`. */\n  message: string;\n  /** The Error's `stack` if available (for debugging). */\n  stack?: string;\n  /** Arbitrary context attached by the Worker (e.g. the failing operation). */\n  context?: unknown;\n}\n\n/** Convert an arbitrary error into a structured-cloneable form for postMessage.\n * A non-Error value is attached as `context`, but only when it is itself\n * structured-cloneable: a function, symbol, or an object/map holding one would\n * otherwise make the serialised error unserializable, so `postMessage` would\n * throw `DataCloneError` while reporting the original failure. */\nexport function serializeError(error: unknown): SerializedWorkerError {\n  if (error instanceof Error) {\n    return {\n      name: error.name,\n      message: error.message,\n      ...(error.stack ? { stack: error.stack } : {})\n    };\n  }\n  const context = error === undefined ? undefined : error;\n  return {\n    name: 'CentrifugeError',\n    message: typeof error === 'string' ? error : 'Centrifuge worker operation failed.',\n    ...(context === undefined || !isStructuredCloneable(context) ? {} : { context })\n  };\n}\n\n/** True when `value` survives a structured clone. When the runtime has no\n * `structuredClone`, cloneability cannot be checked and the value is kept\n * (best effort); the eventual postMessage would fail either way. */\nfunction isStructuredCloneable(value: unknown): boolean {\n  if (typeof structuredClone !== 'function') return true;\n  try {\n    structuredClone(value);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** Reconstruct an Error instance from its serialised form. */\nexport function deserializeWorkerError(error: SerializedWorkerError): Error {\n  const result = new Error(error.message);\n  result.name = error.name;\n  if (error.stack) result.stack = error.stack;\n  if (error.context !== undefined) Object.assign(result, { context: error.context });\n  return result;\n}\n", "/**\n * Worker-thread protocol for Centrifuge WebSocket transport.\n *\n * Defines the message types exchanged between the main thread and a Web Worker\n * (dedicated or shared) that runs a centrifuge client. The worker is isolated\n * from the main thread so that WebSocket lifecycle, token refresh, and binary\n * data handling never block the UI.\n *\n * The message `type` discriminant values are derived from the constants in\n * `utils/constants.ts` so main-thread and Worker sides reference the same\n * values and can never drift apart.\n */\nimport type { Options } from 'centrifuge';\nimport type { CENTRIFUGE_INPUT_TYPE, CENTRIFUGE_OUTPUT_TYPE } from './utils/constants';\nimport type { WorkerStatus } from './core/types';\nimport type { SerializedWorkerError } from './utils/error-utils';\n\nexport type { SerializedWorkerError } from './utils/error-utils';\n\n/**\n * Default interval between main-thread PING heartbeats to a SharedWorker. The\n * SharedWorker reaps a silent port after `SESSION_TIMEOUT_MULTIPLIER` intervals.\n * Shared here so the main thread (heartbeat sender) and the SharedWorker (reaper)\n * always agree on the cadence.\n */\nexport const DEFAULT_HEARTBEAT_INTERVAL_MS = 10_000;\n/** SharedWorker per-port session timeout, expressed as a multiple of that port's\n * heartbeat interval. A live port PINGs every heartbeat interval, so a timeout of\n * several intervals tolerates throttled tabs without reaping healthy sessions. */\nexport const DEFAULT_SESSION_TIMEOUT_MULTIPLIER = 3;\n/** Default per-port session timeout in ms, derived from the heartbeat interval\n * and the multiplier. Used as the fallback when a port sends no INIT config. */\nexport const DEFAULT_SESSION_TIMEOUT_MS =\n  DEFAULT_HEARTBEAT_INTERVAL_MS * DEFAULT_SESSION_TIMEOUT_MULTIPLIER;\n\n// Centrifuge Options that reference browser APIs (WebSocket, EventSource, etc.)\n// are unavailable inside a Worker \u2014 the worker uses its own WebSocket import.\n// These are stripped from the config sent to the worker so the type system\n// prevents accidentally passing a main-thread-only function (which would fail\n// structured cloning and throw a DataCloneError).\ntype WorkerUnsafeOption =\n  | 'eventsource'\n  | 'fetch'\n  | 'getData'\n  | 'getToken'\n  | 'networkEventTarget'\n  | 'readableStream'\n  | 'sockjs'\n  | 'websocket';\n\n/** Centrifuge options safe to pass into a Worker; unsafe options are explicitly\n * excluded and set to `never` so the compiler rejects them at the call site. */\nexport type CentrifugeWorkerConfig = Omit<Partial<Options>, WorkerUnsafeOption> & {\n  [Key in WorkerUnsafeOption]?: never;\n};\n\n/**\n * Async credential provider run on the main thread. Centrifuge client options\n * are structured-cloned into the Worker, so function-valued `getToken` /\n * `getChannelToken` cannot travel with the config. When a provider is set, the\n * Worker asks the main thread for each fresh token over a TOKEN_REQUEST /\n * TOKEN_RESPONSE exchange and this provider supplies it from application\n * context (async token endpoints, SecureStorage, etc.).\n */\nexport interface CentrifugeCredentialProvider {\n  /** Return a fresh top-level connection token. Called on connect and refresh. */\n  getToken: () => MaybePromise<string | null | undefined>;\n  /** Return a channel token for a channel. Centrifuge falls back to `getToken`\n   * when channel tokens are not configured by the server. */\n  getChannelToken?: (channel: string) => MaybePromise<string | null | undefined>;\n}\n\n/** A value or a promise of a value. */\nexport type MaybePromise<T> = T | Promise<T>;\n\n/** Messages sent from the main thread to the Worker. All variants are\n * structured-cloneable; `PUBLISH_BIN` carries an ArrayBuffer (transferable). */\nexport type CentrifugeWorkerInput =\n  /** Initial connection: URL + config. Sent once per backend creation.\n   * `transferable` enables ArrayBuffer zero-copy for subsequent PUBLISH_BIN.\n   * `heartbeatIntervalMs` overrides the SharedWorker PING cadence.\n   * `tokenBridge` asks the Worker to route getToken/getChannelToken back to\n   * the main thread instead of holding function-valued config. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.INIT; url: string; config: CentrifugeWorkerConfig; transferable?: boolean; heartbeatIntervalMs?: number; tokenBridge?: boolean }\n  /** Subscribe to a channel. Idempotent \u2014 re-subscribing is a no-op. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.SUBSCRIBE; topic: string }\n  /** Unsubscribe from a channel. Idempotent. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.UNSUBSCRIBE; topic: string }\n  /** Publish a structured-cloneable payload to a channel. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.PUBLISH; topic: string; data: unknown; messageId?: string; timestamp?: number }\n  /** Publish an ArrayBuffer via Transferable (zero-copy when `transferable` is on). */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.PUBLISH_BIN; topic: string; data: ArrayBuffer; messageId?: string; timestamp?: number }\n  /** Heartbeat from the main thread; the SharedWorker reaps silent ports. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.PING }\n  /** Disconnect the client and clear all subscriptions. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.STOP }\n  /** Fresh credential for an earlier TOKEN_REQUEST, resolved by requestId. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.TOKEN_RESPONSE; requestId: number; token: string }\n  /** A credential request failed (provider rejected or returned no token). */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR; requestId: number; error: SerializedWorkerError };\n\n/** Messages sent from the Worker back to the main thread. The main thread\n * routes these to the DataBusTransportHandlers via handleOutput(). */\nexport type CentrifugeWorkerOutput<TData = unknown> =\n  /** Connection status changed. Maps Centrifuge states to the DataBus vocabulary. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.STATUS; status: WorkerStatus }\n  /** A JSON publication arrived. Routed to onMessage via handleOutput. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.MESSAGE; topic: string; data: TData; messageId?: string; timestamp?: number }\n  /** A binary publication arrived (Transferable). Routed to onMessage with the ArrayBuffer. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.MESSAGE_BIN; topic: string; data: ArrayBuffer; messageId?: string; timestamp?: number }\n  /** A non-fatal error occurred. Does not imply disconnection (the client retries internally). */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.ERROR; error: SerializedWorkerError }\n  /** The Worker needs a fresh credential. The main thread resolves it via a\n   * matching TOKEN_RESPONSE / TOKEN_ERROR carrying the same `requestId`. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.TOKEN_REQUEST; requestId: number; kind: 'token' | 'channelToken'; channel?: string };\n", "/**\n * Centrifuge WebSocket transport that runs inside a Web Worker.\n *\n * Supports three backends, selected in order of preference:\n * 1. SharedWorker \u2014 one WebSocket per tab session, hosted in a shared process\n * 2. Dedicated Worker \u2014 one WebSocket per tab\n * 3. In-process (local) \u2014 Centrifuge runs on the main thread (fallback when\n *    neither Worker type is available, e.g. in non-browser environments)\n *\n * Binary data (ArrayBuffer) can be transferred via Transferable when the\n * `transferable` option is enabled, avoiding structured-clone overhead.\n */\n\nimport { CrossTabDataBus } from './core/data-bus';\nimport type { CrossTabDataBusOptions } from './core/data-bus';\nimport type { DataBusTransport, DataBusTransportHandlers } from './core/types';\nimport { CentrifugeSession } from './centrifuge-session';\nimport { selectWorkerBackend } from './worker-mode';\nimport type { WorkerBackend, WorkerMode } from './worker-mode';\nimport type {\n  CentrifugeCredentialProvider,\n  CentrifugeWorkerConfig,\n  CentrifugeWorkerInput,\n  CentrifugeWorkerOutput\n} from './centrifuge-protocol';\nimport type { DataBusPublishOptions } from './core/types';\nimport { DEFAULT_HEARTBEAT_INTERVAL_MS } from './centrifuge-protocol';\nimport { CENTRIFUGE_INPUT_TYPE, CENTRIFUGE_OUTPUT_TYPE, DEFAULT_STORAGE_PREFIX, WORKER_BACKEND, WORKER_MODE, WORKER_STATUS } from './utils/constants';\nimport { deserializeWorkerError, serializeError } from './utils/error-utils';\nimport { publicationMetadata } from './utils/metadata';\nimport { assertHeartbeatInterval, assertStructuredCloneable } from './utils/validation';\n\nexport type { CentrifugeCredentialProvider, CentrifugeWorkerConfig, SerializedWorkerError } from './centrifuge-protocol';\nexport type { WorkerBackend, WorkerMode } from './worker-mode';\n\n/** WebSocket connection parameters passed to the Centrifuge Worker. */\nexport interface CentrifugeDataBusConfig {\n  /** Centrifuge server WebSocket URL. */\n  url: string;\n  /** Centrifuge client options (token, channel params, etc.). */\n  options?: CentrifugeWorkerConfig;\n}\n\n/** Options for configuring the Worker backend (dedicated, shared, or local). */\nexport interface CentrifugeWorkerTransportOptions {\n  /** Custom dedicated Worker factory. Used for testing or bundler integration. */\n  workerFactory?: () => Worker;\n  /** Custom SharedWorker factory. */\n  sharedWorkerFactory?: () => SharedWorker;\n  /** Preferred Worker mode: 'dedicated', 'shared', or 'auto'. */\n  workerMode?: WorkerMode;\n  /** Enable transferable (ArrayBuffer) support for binary data. */\n  transferable?: boolean;\n  /** Interval (ms) between PING heartbeats sent to the SharedWorker. The\n   * SharedWorker reaps a silent port after `DEFAULT_SESSION_TIMEOUT_MULTIPLIER`\n   * \u00D7 this interval. Pass `Infinity` to disable heartbeats entirely. Defaults\n   * to `DEFAULT_HEARTBEAT_INTERVAL_MS`. */\n  heartbeatIntervalMs?: number;\n  /** Async credential provider. Runs on the main thread: the Worker cannot\n   * hold function-valued Centrifuge options (they are not structured-cloneable),\n   * so when a provider is set the Worker asks for each fresh token over a\n   * TOKEN_REQUEST / TOKEN_RESPONSE bridge and this provider supplies it. */\n  credentialProvider?: CentrifugeCredentialProvider;\n}\n\n/** Options for creating a fully-configured CrossTabDataBus with a Centrifuge transport. */\nexport interface CreateCentrifugeDataBusOptions<TData = unknown>\n  extends Omit<\n      CrossTabDataBusOptions<CentrifugeDataBusConfig, TData>,\n      'autoStart' | 'clusterKey' | 'initialConfig' | 'transport'\n    >,\n    CentrifugeWorkerTransportOptions {\n  /** Centrifuge connection configuration. */\n  connection: CentrifugeDataBusConfig;\n  /** Cluster key for cross-tab coordination. Defaults to the connection URL. */\n  clusterKey?: string;\n}\n\n/**\n * Transport layer that runs a Centrifuge WebSocket client inside a Web Worker.\n *\n * Delegates the actual WebSocket connection to a Worker (dedicated or shared)\n * or falls back to an in-process CentrifugeSession. The Worker is isolated from\n * the main thread so that WebSocket lifecycle, token refresh, and binary data\n * handling never block the UI.\n */\nexport class CentrifugeWorkerTransport<TData = unknown>\n  implements DataBusTransport<CentrifugeDataBusConfig, TData>\n{\n  readonly diagnosticsName = 'centrifuge';\n  private readonly workerMode: WorkerMode;\n  private readonly transferable: boolean;\n  private readonly heartbeatIntervalMs: number;\n  private readonly workerFactory: (() => Worker) | undefined;\n  private readonly sharedWorkerFactory: (() => SharedWorker) | undefined;\n  private readonly credentialProvider: CentrifugeCredentialProvider | undefined;\n  private backend: WorkerBackend | null = null;\n  private worker: Worker | null = null;\n  private sharedWorker: SharedWorker | null = null;\n  private port: MessagePort | null = null;\n  private heartbeatHandle: ReturnType<typeof setInterval> | null = null;\n  private localSession: CentrifugeSession<TData> | null = null;\n  private handlers: DataBusTransportHandlers<TData> | null = null;\n  // Monotonically increasing counter, bumped each time a backend is created or\n  // the transport stops. Only the asynchronous credential bridge compares it:\n  // a provider may settle after the Worker it was answering is gone. Worker\n  // error events need no such check \u2014 stop() and onWorkerFailed() remove those\n  // listeners before the generation moves on, so a superseded backend can no\n  // longer reach this object at all.\n  private generation = 0;\n\n  get diagnosticsBackend(): string {\n    return this.backend ?? 'uninitialized';\n  }\n\n  constructor(options: CentrifugeWorkerTransportOptions = {}) {\n    this.workerMode = options.workerMode ?? WORKER_MODE.DEDICATED;\n    this.transferable = options.transferable ?? false;\n    this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;\n    assertHeartbeatInterval(this.heartbeatIntervalMs);\n    this.workerFactory = options.workerFactory;\n    this.sharedWorkerFactory = options.sharedWorkerFactory;\n    this.credentialProvider = options.credentialProvider;\n  }\n\n  /**\n   * Start the transport: select a backend, initialise the Worker (or local\n   * session), and send the INIT message with connection parameters.\n   */\n  start(config: CentrifugeDataBusConfig, handlers: DataBusTransportHandlers<TData>): void {\n    if (this.backend) return;\n    assertStructuredCloneable(config.options ?? {});\n    this.handlers = handlers;\n    // Runtime capability OR an injected factory counts as availability; a\n    // factory-less browser must use the bundled default Workers instead of\n    // silently degrading to the local session.\n    const backend = selectWorkerBackend(this.workerMode, {\n      worker: this.workerFactory !== undefined || typeof Worker !== 'undefined',\n      sharedWorker: this.sharedWorkerFactory !== undefined || typeof SharedWorker !== 'undefined'\n    });\n    const input = this.buildInitInput(config);\n    if (backend === WORKER_BACKEND.SHARED) {\n      this.startSharedWorker(input);\n      this.backend = WORKER_BACKEND.SHARED;\n      return;\n    }\n    if (backend === WORKER_BACKEND.DEDICATED) {\n      this.startDedicatedWorker(input);\n      this.backend = WORKER_BACKEND.DEDICATED;\n      return;\n    }\n    this.localSession = new CentrifugeSession<TData>({ post: this.handleSessionOutput });\n    this.localSession.handle(input);\n    this.backend = WORKER_BACKEND.LOCAL;\n  }\n\n  subscribe(topic: string): void {\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.SUBSCRIBE, topic });\n  }\n\n  unsubscribe(topic: string): void {\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.UNSUBSCRIBE, topic });\n  }\n\n  /**\n   * Publish data to `topic`. Binary data (ArrayBuffer) is sent via Transferable\n   * when `transferable` is enabled, avoiding a structured-clone cycle.\n   */\n  publish(topic: string, data: unknown, options?: DataBusPublishOptions): void {\n    if (this.transferable && data instanceof ArrayBuffer) {\n      this.post({ type: CENTRIFUGE_INPUT_TYPE.PUBLISH_BIN, topic, data, ...publicationMetadata(options?.messageId, options?.timestamp) }, [data]);\n      return;\n    }\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.PUBLISH, topic, data, ...publicationMetadata(options?.messageId, options?.timestamp) });\n  }\n\n  /**\n   * Gracefully stop the transport: send STOP, clean up event listeners, and\n   * terminate the Worker (or close the SharedWorker port).\n   */\n  stop(): void {\n    if (!this.backend) return;\n    this.generation++;\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.STOP });\n    this.clearHeartbeat();\n    if (this.worker) {\n      this.worker.removeEventListener('message', this.handleMessage);\n      this.worker.removeEventListener('error', this.handleWorkerError);\n      this.worker.terminate();\n    }\n    if (this.sharedWorker) {\n      this.detachSharedWorkerListeners();\n      this.port?.close();\n    }\n    this.resetBackend();\n    this.handlers = null;\n  }\n\n  /** Build the INIT payload sent to the Worker / local session. Optional fields\n   * are only included when they deviate from the defaults, so the Worker's own\n   * default-resolution logic kicks in for the common case. */\n  private buildInitInput(config: CentrifugeDataBusConfig): CentrifugeWorkerInput {\n    return {\n      type: CENTRIFUGE_INPUT_TYPE.INIT,\n      url: config.url,\n      config: config.options ?? {},\n      ...(this.transferable ? { transferable: true } : {}),\n      ...(this.credentialProvider ? { tokenBridge: true } : {}),\n      ...(this.heartbeatIntervalMs !== DEFAULT_HEARTBEAT_INTERVAL_MS\n        ? { heartbeatIntervalMs: this.heartbeatIntervalMs }\n        : {})\n    };\n  }\n\n  /** Create and initialise a dedicated Worker, then send the INIT message. */\n  private startDedicatedWorker(input: CentrifugeWorkerInput): void {\n    this.generation += 1;\n    const worker = (this.workerFactory ?? createDefaultWorker)();\n    this.worker = worker;\n    worker.addEventListener('message', this.handleMessage);\n    worker.addEventListener('error', this.handleWorkerError);\n    worker.postMessage(input);\n  }\n\n  /** Create and initialise a SharedWorker, open the MessagePort, and send the INIT message. */\n  private startSharedWorker(input: CentrifugeWorkerInput): void {\n    this.generation += 1;\n    const shared = (this.sharedWorkerFactory ?? createDefaultSharedWorker)();\n    this.sharedWorker = shared;\n    const port = shared.port;\n    this.port = port;\n    port.addEventListener('message', this.handleMessage);\n    port.addEventListener('messageerror', this.handlePortError);\n    shared.addEventListener('error', this.handleSharedWorkerError);\n    port.start();\n    port.postMessage(input);\n    this.startHeartbeat();\n  }\n\n  /** Handle a message event from the Worker (dedicated or shared). */\n  private readonly handleMessage = (event: MessageEvent<CentrifugeWorkerOutput<TData>>) => {\n    this.handleOutput(event.data);\n  };\n\n  /** Handle a message from the in-process CentrifugeSession (local fallback). */\n  private readonly handleSessionOutput = (message: CentrifugeWorkerOutput<TData>) => {\n    this.handleOutput(message);\n  };\n\n  /** Route a Worker output message to the appropriate handler callback.\n   * Shared by the Worker message listener, the SharedWorker port listener,\n   * and the local-session sink \u2014 all three feed into this single dispatcher. */\n  private handleOutput(message: CentrifugeWorkerOutput<TData>): void {\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.STATUS) this.handlers?.onStatus(message.status);\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.MESSAGE) this.handlers?.onMessage({ topic: message.topic, data: message.data, ...publicationMetadata(message.messageId, message.timestamp) });\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.MESSAGE_BIN) this.handlers?.onMessage({ topic: message.topic, data: message.data as TData, ...publicationMetadata(message.messageId, message.timestamp) });\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.ERROR) this.handlers?.onError(deserializeWorkerError(message.error));\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.TOKEN_REQUEST) this.resolveTokenRequest(message.requestId, message.kind, message.channel);\n  }\n\n  /** Resolve a Worker credential request from the main thread: call the\n   * credentialProvider, then post the fresh token (or a serialized failure)\n   * back to the session that issued the request. */\n  private resolveTokenRequest(requestId: number, kind: 'token' | 'channelToken', channel: string | undefined): void {\n    // Credential providers may be asynchronous. Capture the backend identity\n    // before awaiting so a stop/start that replaces the Worker cannot receive\n    // a late token (or error) belonging to the superseded session. Request IDs\n    // restart at 1 for a fresh CentrifugeSession, so without this guard a stale\n    // reply can incorrectly satisfy the replacement session's request.\n    const generation = this.generation;\n    const worker = this.worker;\n    const port = this.port;\n    const localSession = this.localSession;\n    const isCurrentBackend = () =>\n      this.generation === generation &&\n      this.worker === worker &&\n      this.port === port &&\n      this.localSession === localSession;\n    const provider = this.credentialProvider;\n    let value: string | null | Promise<string | null | undefined> | undefined;\n    try {\n      value = kind === 'channelToken' && provider?.getChannelToken\n        ? provider.getChannelToken(channel ?? '')\n        : provider?.getToken?.();\n    } catch (error) {\n      // This arm never yields, but the provider is application code and can\n      // stop or replace the transport synchronously before throwing. Without\n      // the check `post()` then addresses a backend that no longer exists.\n      if (isCurrentBackend()) {\n        this.post({ type: CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR, requestId, error: serializeError(error) });\n      }\n      return;\n    }\n    Promise.resolve(value).then(\n      token => {\n        if (!isCurrentBackend()) return;\n        if (typeof token !== 'string' || token.length === 0) {\n          this.post({\n            type: CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR,\n            requestId,\n            error: serializeError(new Error(`The credential provider returned no ${kind}.`))\n          });\n          return;\n        }\n        this.post({ type: CENTRIFUGE_INPUT_TYPE.TOKEN_RESPONSE, requestId, token });\n      },\n      error => {\n        if (!isCurrentBackend()) return;\n        this.post({ type: CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR, requestId, error: serializeError(error) });\n      }\n    );\n  }\n\n  /** Handle a Worker-level failure (crash, message decode error). Discards the\n   * dead backend so a later start()/reopen can rebuild from scratch, and\n   * signals an error status so the DataBus can trigger recovery. A superseded\n   * backend cannot reach this: its listeners are removed before the transport\n   * moves on, which is what keeps late Worker errors from tearing down a fresh\n   * session (pinned by 'ignores error events from a superseded worker'). */\n  private onWorkerFailed(message: string): void {\n    // Remove the message listener and release the old backend before recovery\n    // reopens, so late messages from the failed Worker/port cannot be routed\n    // into the freshly started session.\n    this.worker?.removeEventListener('message', this.handleMessage);\n    this.worker?.removeEventListener('error', this.handleWorkerError);\n    this.worker?.terminate();\n    this.detachSharedWorkerListeners();\n    this.port?.close();\n    this.clearHeartbeat();\n    this.resetBackend();\n    this.handlers?.onError(new Error(message));\n    this.handlers?.onStatus(WORKER_STATUS.ERROR);\n  }\n\n  /** Remove every listener attached to the current SharedWorker and its port. */\n  private detachSharedWorkerListeners(): void {\n    this.port?.removeEventListener('message', this.handleMessage);\n    this.port?.removeEventListener('messageerror', this.handlePortError);\n    this.sharedWorker?.removeEventListener('error', this.handleSharedWorkerError);\n  }\n\n  /** Periodically ping the SharedWorker so its session reaper can detect a dead tab. */\n  private startHeartbeat(): void {\n    if (this.heartbeatHandle !== null) return;\n    // Infinite disables the heartbeat (e.g. for environment where the\n    // SharedWorker reaper is not needed).\n    if (this.heartbeatIntervalMs === Infinity) return;\n    this.heartbeatHandle = setInterval(() => {\n      this.post({ type: CENTRIFUGE_INPUT_TYPE.PING });\n    }, this.heartbeatIntervalMs);\n  }\n\n  private clearHeartbeat(): void {\n    if (this.heartbeatHandle !== null) clearInterval(this.heartbeatHandle);\n    this.heartbeatHandle = null;\n  }\n\n  private readonly handleWorkerError = () => {\n    this.onWorkerFailed('Centrifuge worker failed.');\n  };\n\n  private readonly handlePortError = () => {\n    this.onWorkerFailed('Centrifuge shared worker message decoding failed.');\n  };\n\n  private readonly handleSharedWorkerError = () => {\n    this.onWorkerFailed('Centrifuge shared worker failed.');\n  };\n\n  /** Clear the Worker/port/backend references after a failure or stop. */\n  private resetBackend(): void {\n    this.worker = null;\n    this.sharedWorker = null;\n    this.port = null;\n    this.backend = null;\n    this.localSession = null;\n  }\n\n  /**\n   * Post a message to the active backend. Accepts optional Transferable buffers\n   * for zero-copy ArrayBuffer transfer.\n   */\n  private post(message: CentrifugeWorkerInput, transfer?: ArrayBuffer[]): void {\n    if (this.worker) {\n      postToPortLike(this.worker, message, transfer);\n      return;\n    }\n    if (this.port) {\n      postToPortLike(this.port, message, transfer);\n      return;\n    }\n    if (this.localSession) {\n      this.localSession.handle(message);\n      return;\n    }\n    throw new Error('CentrifugeWorkerTransport.start() must be called first.');\n  }\n}\n\n/**\n * Create a fully-configured CrossTabDataBus with a Centrifuge WebSocket transport.\n *\n * This is the primary entry point for consumers. It wires up the transport,\n * cluster coordination, and lifecycle management:\n *\n * ```ts\n * const bus = createCentrifugeDataBus({\n *   connection: { url: 'wss://example.com/connection/websocket', options: { token: '\u2026' } },\n *   trace: { enabled: true, sink: event => console.log(event) },\n * });\n * ```\n */\nexport function createCentrifugeDataBus<TData = unknown>(\n  options: CreateCentrifugeDataBusOptions<TData>\n): CrossTabDataBus<CentrifugeDataBusConfig, TData> {\n  const {\n    clusterKey,\n    connection,\n    credentialProvider,\n    heartbeatIntervalMs,\n    sharedWorkerFactory,\n    transferable,\n    workerFactory,\n    workerMode,\n    ...dataBusOptions\n  } = options;\n  return new CrossTabDataBus({\n    ...dataBusOptions,\n    autoStart: true,\n    clusterKey: clusterKey ?? connection.url,\n    initialConfig: connection,\n    transport: new CentrifugeWorkerTransport<TData>({\n      ...(workerFactory ? { workerFactory } : {}),\n      ...(sharedWorkerFactory ? { sharedWorkerFactory } : {}),\n      ...(transferable === undefined ? {} : { transferable }),\n      ...(workerMode ? { workerMode } : {}),\n      ...(heartbeatIntervalMs === undefined ? {} : { heartbeatIntervalMs }),\n      ...(credentialProvider ? { credentialProvider } : {})\n    })\n  });\n}\n\n/** Create the default dedicated Worker hosting the Centrifuge client. There is\n * no `typeof Worker` guard: `start()` asks `selectWorkerBackend` with\n * `worker: workerFactory !== undefined || typeof Worker !== 'undefined'`, that\n * function never returns a Worker backend its availability flags deny, and these\n * factories are only reached for a backend it did return. The degradation is\n * pinned where it is decided \u2014 `tests/worker-mode.test.ts` on the selector, and\n * \"falls back to the local session when the platform lacks both Worker APIs\" on\n * the transport \u2014 so a guard here could only ever re-check a fact the caller has\n * already established, and no runtime can reach it with the global missing. */\nfunction createDefaultWorker(): Worker {\n  let workerUrl: URL;\n  try {\n    workerUrl = new URL('./centrifuge.worker.js', import.meta.url);\n  } catch {\n    throw new Error(\n      'The default Centrifuge Worker URL is unavailable in this module format; provide workerFactory explicitly.'\n    );\n  }\n  return new Worker(workerUrl, {\n    name: DEFAULT_STORAGE_PREFIX,\n    type: 'module'\n  });\n}\n\n/** Create the default SharedWorker. Each connecting port within the SharedWorker\n * creates its own CentrifugeSession with an independent WebSocket connection,\n * so refreshing or stopping one tab does not affect the others. Like its\n * dedicated twin it carries no `typeof SharedWorker` guard \u2014 the availability\n * flag in `start()` is what decides this is reachable. */\nfunction createDefaultSharedWorker(): SharedWorker {\n  let workerUrl: URL;\n  try {\n    workerUrl = new URL('./centrifuge.shared.worker.js', import.meta.url);\n  } catch {\n    throw new Error(\n      'The default Centrifuge SharedWorker URL is unavailable in this module format; provide sharedWorkerFactory explicitly.'\n    );\n  }\n  return new SharedWorker(workerUrl, {\n    name: `${DEFAULT_STORAGE_PREFIX}-shared`,\n    type: 'module'\n  });\n}\n\n/** Post `message` to a Worker or MessagePort, forwarding `transfer` buffers\n * when present. Both targets share the `postMessage(message, transfer?)`\n * signature, so a single helper eliminates the duplicated if/else at each\n * call site. */\nfunction postToPortLike(\n  target: Pick<Worker, 'postMessage'>,\n  message: CentrifugeWorkerInput,\n  transfer?: ArrayBuffer[]\n): void {\n  if (transfer) target.postMessage(message, transfer as Transferable[]);\n  else target.postMessage(message);\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAOA,SAAS,kBAAkB;;;ACmBpB,SAAS,eAAe,OAAuC;AACpE,MAAI,iBAAiB,OAAO;AAC1B,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AACA,QAAM,UAAU,UAAU,SAAY,SAAY;AAClD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS,OAAO,UAAU,WAAW,QAAQ;AAAA,IAC7C,GAAI,YAAY,UAAa,CAAC,sBAAsB,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ;AAAA,EAChF;AACF;AAKA,SAAS,sBAAsB,OAAyB;AACtD,MAAI,OAAO,oBAAoB,WAAY,QAAO;AAClD,MAAI;AACF,oBAAgB,KAAK;AACrB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,uBAAuB,OAAqC;AAC1E,QAAM,SAAS,IAAI,MAAM,MAAM,OAAO;AACtC,SAAO,OAAO,MAAM;AACpB,MAAI,MAAM,MAAO,QAAO,QAAQ,MAAM;AACtC,MAAI,MAAM,YAAY,OAAW,QAAO,OAAO,QAAQ,EAAE,SAAS,MAAM,QAAQ,CAAC;AACjF,SAAO;AACT;;;ADfO,IAAM,oBAAN,MAAyC;AAAA,EAY9C,YAA6B,MAAoC;AAApC;AAAA,EAAqC;AAAA,EAArC;AAAA,EAXrB,SAA4B;AAAA,EACnB,gBAAgB,oBAAI,IAA0B;AAAA,EACvD,eAAe;AAAA,EACf,cAAc;AAAA,EACd,gBAAgB;AAAA;AAAA;AAAA;AAAA,EAIhB,YAAY;AAAA,EACH,uBAAuB,oBAAI,IAAiC;AAAA;AAAA;AAAA;AAAA,EAO7E,OAAO,SAAsC;AAC3C,YAAQ,QAAQ,MAAM;AAAA,MACpB,KAAK,sBAAsB;AACzB,aAAK,WAAW,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,iBAAiB,MAAM,QAAQ,gBAAgB,IAAI;AACxG;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,UAAU,QAAQ,KAAK;AAC5B;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,YAAY,QAAQ,KAAK;AAC9B;AAAA,MACF,KAAK,sBAAsB;AAAA,MAC3B,KAAK,sBAAsB;AAGzB,aAAK,QAAQ,QAAQ,OAAO,QAAQ,MAAM,QAAQ,WAAW,QAAQ,SAAS;AAC9E;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,KAAK;AACV;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,aAAa,QAAQ,WAAW,QAAQ,KAAK;AAClD;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,YAAY,QAAQ,WAAW,uBAAuB,QAAQ,KAAK,CAAC;AACzE;AAAA,MACF;AACE;AAAA,IACJ;AAAA,EACF;AAAA;AAAA,EAGQ,WAAW,KAAa,QAAgC,cAAuB,aAA4B;AACjH,QAAI,KAAK,OAAQ;AACjB,UAAM,YAAY,EAAE,KAAK;AACzB,SAAK,eAAe;AACpB,SAAK,cAAc;AACnB,UAAM,gBAAmE,cACrE;AAAA,MACE,GAAG;AAAA;AAAA;AAAA;AAAA,MAIH,UAAU,MAAM,KAAK,aAAa,SAAS,SAAS;AAAA,MACpD,iBAAiB,CAAC,YAAoB,KAAK,aAAa,gBAAgB,WAAW,OAAO;AAAA,IAC5F,IACA;AACJ,UAAM,SAAS,IAAI,WAAW,KAAK,aAAa;AAChD,SAAK,SAAS;AACd,WAAO,GAAG,SAAS,CAAC,YAA0B;AAC5C,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,gBAAgB,QAAQ,QAAQ,EAAE,CAAC;AAAA,IAC9F,CAAC;AACD,WAAO,GAAG,aAAa,MAAM;AAC3B,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,cAAc,UAAU,CAAC;AAAA,IACpF,CAAC;AACD,WAAO,GAAG,gBAAgB,MAAM;AAC9B,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,cAAc,aAAa,CAAC;AAAA,IACvF,CAAC;AACD,WAAO,GAAG,SAAS,aAAW;AAC5B,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,UAAU,OAAO;AAAA,IACxB,CAAC;AAKD,WAAO,GAAG,eAAe,CAAC,YAAgC;AACxD,UAAI,KAAK,cAAc,UAAW;AAClC,YAAM,QAAQ,QAAQ,WAAW,gBAAgB,QAAQ,IAAI;AAC7D,UAAI,CAAC,SAAS,KAAK,cAAc,IAAI,KAAK,EAAG;AAC7C,WAAK,gBAAgB,OAAO,QAAQ,IAAI;AAAA,IAC1C,CAAC;AACD,WAAO,QAAQ;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,UAAU,OAAqB;AACrC,QAAI,CAAC,KAAK,OAAQ,QAAO,KAAK,UAAU,IAAI,MAAM,uCAAuC,CAAC;AAC1F,UAAM,YAAY,KAAK;AAIvB,UAAM,WAAW,KAAK,cAAc,IAAI,KAAK;AAC7C,QAAI,UAAU;AACZ,eAAS,UAAU;AACnB;AAAA,IACF;AACA,QAAI,eAAe,KAAK,OAAO,gBAAgB,KAAK;AACpD,QAAI,CAAC,aAAc,gBAAe,KAAK,OAAO,gBAAgB,KAAK;AAInE,iBAAa,mBAAmB,aAAa;AAC7C,iBAAa,mBAAmB,OAAO;AACvC,iBAAa,mBAAmB,cAAc;AAC9C,SAAK,cAAc,IAAI,OAAO,YAAY;AAC1C,iBAAa,GAAG,eAAe,aAAW;AACxC,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,gBAAgB,OAAO,QAAQ,IAAI;AAAA,IAC1C,CAAC;AACD,iBAAa,GAAG,SAAS,CAAC,YAAsC;AAC9D,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,UAAU,OAAO;AAAA,IACxB,CAAC;AACD,iBAAa,GAAG,gBAAgB,MAAM;AACpC,UAAI,KAAK,cAAc,UAAW,MAAK,cAAc,OAAO,KAAK;AAAA,IACnE,CAAC;AACD,iBAAa,UAAU;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,OAAqB;AACvC,UAAM,eAAe,KAAK,cAAc,IAAI,KAAK,KAAK,KAAK,QAAQ,gBAAgB,KAAK;AACxF,QAAI,CAAC,aAAc;AACnB,iBAAa,mBAAmB,aAAa;AAC7C,iBAAa,mBAAmB,OAAO;AACvC,iBAAa,mBAAmB,cAAc;AAC9C,SAAK,cAAc,OAAO,KAAK;AAC/B,iBAAa,YAAY;AAAA,EAC3B;AAAA;AAAA,EAGQ,QAAQ,OAAe,MAAe,WAAoB,WAA0B;AAC1F,QAAI,CAAC,KAAK,OAAQ,QAAO,KAAK,UAAU,IAAI,MAAM,uCAAuC,CAAC;AAC1F,UAAM,YAAY,KAAK;AAIvB,UAAM,cAAc,cAAc,UAAa,cAAc;AAC7D,UAAM,UAAU,cACZ;AAAA,MACE;AAAA,MACA,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU;AAAA,MAC/C,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU;AAAA,IACjD,IACA;AACJ,SAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,EAAE,MAAM,WAAS;AACtD,UAAI,KAAK,cAAc,UAAW,MAAK,UAAU,KAAK;AAAA,IACxD,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,OAAe,MAAqB;AAC1D,QAAI,CAAC,MAAO;AACZ,QAAI,KAAK,gBAAgB,gBAAgB,aAAa;AACpD,WAAK,KAAK,EAAE,MAAM,uBAAuB,aAAa,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC;AAC3E;AAAA,IACF;AACA,UAAM,cAAc,wBAA+B,MAAM,KAAK;AAC9D,QAAI,CAAC,YAAa;AAClB,SAAK,KAAK;AAAA,MACR,MAAM,uBAAuB;AAAA,MAC7B,OAAO,YAAY;AAAA,MACnB,MAAM,YAAY;AAAA,MAClB,GAAG,oBAAoB,YAAY,WAAW,YAAY,SAAS;AAAA,IACrE,CAAC;AAAA,EACH;AAAA;AAAA,EAGQ,OAAa;AAGnB,SAAK,aAAa;AAGlB,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,sBAAsB;AACnD,cAAQ,OAAO,IAAI,MAAM,gEAAgE,CAAC;AAAA,IAC5F;AACA,SAAK,qBAAqB,MAAM;AAChC,SAAK,QAAQ,WAAW;AACxB,SAAK,cAAc,MAAM;AACzB,SAAK,SAAS;AACd,SAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,cAAc,aAAa,CAAC;AAAA,EACvF;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,MAAgC,WAAmB,SAAmC;AAIzG,QAAI,KAAK,cAAc,WAAW;AAChC,aAAO,QAAQ,OAAO,IAAI,MAAM,4EAA4E,CAAC;AAAA,IAC/G;AACA,UAAM,YAAY,KAAK;AACvB,SAAK,iBAAiB;AACtB,WAAO,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC9C,WAAK,qBAAqB,IAAI,WAAW,EAAE,SAAS,OAAO,CAAC;AAC5D,WAAK,KAAK;AAAA,QACR,MAAM,uBAAuB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAAA,MAC7C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEQ,aAAa,WAAmB,OAAqB;AAC3D,UAAM,UAAU,KAAK,qBAAqB,IAAI,SAAS;AACvD,QAAI,CAAC,QAAS;AACd,SAAK,qBAAqB,OAAO,SAAS;AAC1C,YAAQ,QAAQ,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAY,WAAmB,OAAsB;AAC3D,UAAM,UAAU,KAAK,qBAAqB,IAAI,SAAS;AACvD,QAAI,CAAC,QAAS;AACd,SAAK,qBAAqB,OAAO,SAAS;AAC1C,YAAQ,OAAO,KAAK;AAAA,EACtB;AAAA;AAAA,EAGQ,KAAK,SAAwC,UAAgC;AACnF,SAAK,KAAK,KAAK,SAAS,QAAQ;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UAAU,OAAsB;AACtC,SAAK,KAAK,EAAE,MAAM,uBAAuB,OAAO,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,EAChF;AACF;AAKA,SAAS,gBAAgB,MAAuB;AAC9C,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,UAAU;AAEhB,QAAM,OAAO,QAAQ;AACrB,QAAM,SAAS,OAAO,SAAS,YAAY,SAAS,OAAQ,KAAiC,UAAU;AACvG,QAAM,QAAQ,UAAU,QAAQ;AAChC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAKA,IAAM,cAAc,oBAAI,IAAY,CAAC,cAAc,YAAY,cAAc,SAAS,CAAC;AACvF,SAAS,gBAAgB,QAA6D;AACpF,SAAO,YAAY,IAAI,MAAM,IAAK,SAAwC;AAC5E;;;AExSO,IAAM,gCAAgC;AAItC,IAAM,qCAAqC;AAG3C,IAAM,6BACX,gCAAgC;;;ACqD3B,IAAM,4BAAN,MAEP;AAAA,EACW,kBAAkB;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,UAAgC;AAAA,EAChC,SAAwB;AAAA,EACxB,eAAoC;AAAA,EACpC,OAA2B;AAAA,EAC3B,kBAAyD;AAAA,EACzD,eAAgD;AAAA,EAChD,WAAmD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOnD,aAAa;AAAA,EAErB,IAAI,qBAA6B;AAC/B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,YAAY,UAA4C,CAAC,GAAG;AAC1D,SAAK,aAAa,QAAQ,cAAc,YAAY;AACpD,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,sBAAsB,QAAQ,uBAAuB;AAC1D,4BAAwB,KAAK,mBAAmB;AAChD,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,sBAAsB,QAAQ;AACnC,SAAK,qBAAqB,QAAQ;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAiC,UAAiD;AACtF,QAAI,KAAK,QAAS;AAClB,8BAA0B,OAAO,WAAW,CAAC,CAAC;AAC9C,SAAK,WAAW;AAIhB,UAAM,UAAU,oBAAoB,KAAK,YAAY;AAAA,MACnD,QAAQ,KAAK,kBAAkB,UAAa,OAAO,WAAW;AAAA,MAC9D,cAAc,KAAK,wBAAwB,UAAa,OAAO,iBAAiB;AAAA,IAClF,CAAC;AACD,UAAM,QAAQ,KAAK,eAAe,MAAM;AACxC,QAAI,YAAY,eAAe,QAAQ;AACrC,WAAK,kBAAkB,KAAK;AAC5B,WAAK,UAAU,eAAe;AAC9B;AAAA,IACF;AACA,QAAI,YAAY,eAAe,WAAW;AACxC,WAAK,qBAAqB,KAAK;AAC/B,WAAK,UAAU,eAAe;AAC9B;AAAA,IACF;AACA,SAAK,eAAe,IAAI,kBAAyB,EAAE,MAAM,KAAK,oBAAoB,CAAC;AACnF,SAAK,aAAa,OAAO,KAAK;AAC9B,SAAK,UAAU,eAAe;AAAA,EAChC;AAAA,EAEA,UAAU,OAAqB;AAC7B,SAAK,KAAK,EAAE,MAAM,sBAAsB,WAAW,MAAM,CAAC;AAAA,EAC5D;AAAA,EAEA,YAAY,OAAqB;AAC/B,SAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,MAAM,CAAC;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAe,MAAe,SAAuC;AAC3E,QAAI,KAAK,gBAAgB,gBAAgB,aAAa;AACpD,WAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,OAAO,MAAM,GAAG,oBAAoB,SAAS,WAAW,SAAS,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;AAC1I;AAAA,IACF;AACA,SAAK,KAAK,EAAE,MAAM,sBAAsB,SAAS,OAAO,MAAM,GAAG,oBAAoB,SAAS,WAAW,SAAS,SAAS,EAAE,CAAC;AAAA,EAChI;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAa;AACX,QAAI,CAAC,KAAK,QAAS;AACnB,SAAK;AACL,SAAK,KAAK,EAAE,MAAM,sBAAsB,KAAK,CAAC;AAC9C,SAAK,eAAe;AACpB,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,oBAAoB,WAAW,KAAK,aAAa;AAC7D,WAAK,OAAO,oBAAoB,SAAS,KAAK,iBAAiB;AAC/D,WAAK,OAAO,UAAU;AAAA,IACxB;AACA,QAAI,KAAK,cAAc;AACrB,WAAK,4BAA4B;AACjC,WAAK,MAAM,MAAM;AAAA,IACnB;AACA,SAAK,aAAa;AAClB,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKQ,eAAe,QAAwD;AAC7E,WAAO;AAAA,MACL,MAAM,sBAAsB;AAAA,MAC5B,KAAK,OAAO;AAAA,MACZ,QAAQ,OAAO,WAAW,CAAC;AAAA,MAC3B,GAAI,KAAK,eAAe,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MAClD,GAAI,KAAK,qBAAqB,EAAE,aAAa,KAAK,IAAI,CAAC;AAAA,MACvD,GAAI,KAAK,wBAAwB,gCAC7B,EAAE,qBAAqB,KAAK,oBAAoB,IAChD,CAAC;AAAA,IACP;AAAA,EACF;AAAA;AAAA,EAGQ,qBAAqB,OAAoC;AAC/D,SAAK,cAAc;AACnB,UAAM,UAAU,KAAK,iBAAiB,qBAAqB;AAC3D,SAAK,SAAS;AACd,WAAO,iBAAiB,WAAW,KAAK,aAAa;AACrD,WAAO,iBAAiB,SAAS,KAAK,iBAAiB;AACvD,WAAO,YAAY,KAAK;AAAA,EAC1B;AAAA;AAAA,EAGQ,kBAAkB,OAAoC;AAC5D,SAAK,cAAc;AACnB,UAAM,UAAU,KAAK,uBAAuB,2BAA2B;AACvE,SAAK,eAAe;AACpB,UAAM,OAAO,OAAO;AACpB,SAAK,OAAO;AACZ,SAAK,iBAAiB,WAAW,KAAK,aAAa;AACnD,SAAK,iBAAiB,gBAAgB,KAAK,eAAe;AAC1D,WAAO,iBAAiB,SAAS,KAAK,uBAAuB;AAC7D,SAAK,MAAM;AACX,SAAK,YAAY,KAAK;AACtB,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA,EAGiB,gBAAgB,CAAC,UAAuD;AACvF,SAAK,aAAa,MAAM,IAAI;AAAA,EAC9B;AAAA;AAAA,EAGiB,sBAAsB,CAAC,YAA2C;AACjF,SAAK,aAAa,OAAO;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,SAA8C;AACjE,QAAI,QAAQ,SAAS,uBAAuB,OAAQ,MAAK,UAAU,SAAS,QAAQ,MAAM;AAC1F,QAAI,QAAQ,SAAS,uBAAuB,QAAS,MAAK,UAAU,UAAU,EAAE,OAAO,QAAQ,OAAO,MAAM,QAAQ,MAAM,GAAG,oBAAoB,QAAQ,WAAW,QAAQ,SAAS,EAAE,CAAC;AACxL,QAAI,QAAQ,SAAS,uBAAuB,YAAa,MAAK,UAAU,UAAU,EAAE,OAAO,QAAQ,OAAO,MAAM,QAAQ,MAAe,GAAG,oBAAoB,QAAQ,WAAW,QAAQ,SAAS,EAAE,CAAC;AACrM,QAAI,QAAQ,SAAS,uBAAuB,MAAO,MAAK,UAAU,QAAQ,uBAAuB,QAAQ,KAAK,CAAC;AAC/G,QAAI,QAAQ,SAAS,uBAAuB,cAAe,MAAK,oBAAoB,QAAQ,WAAW,QAAQ,MAAM,QAAQ,OAAO;AAAA,EACtI;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAAoB,WAAmB,MAAgC,SAAmC;AAMhH,UAAM,aAAa,KAAK;AACxB,UAAM,SAAS,KAAK;AACpB,UAAM,OAAO,KAAK;AAClB,UAAM,eAAe,KAAK;AAC1B,UAAM,mBAAmB,MACvB,KAAK,eAAe,cACpB,KAAK,WAAW,UAChB,KAAK,SAAS,QACd,KAAK,iBAAiB;AACxB,UAAM,WAAW,KAAK;AACtB,QAAI;AACJ,QAAI;AACF,cAAQ,SAAS,kBAAkB,UAAU,kBACzC,SAAS,gBAAgB,WAAW,EAAE,IACtC,UAAU,WAAW;AAAA,IAC3B,SAAS,OAAO;AAId,UAAI,iBAAiB,GAAG;AACtB,aAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,WAAW,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,MAChG;AACA;AAAA,IACF;AACA,YAAQ,QAAQ,KAAK,EAAE;AAAA,MACrB,WAAS;AACP,YAAI,CAAC,iBAAiB,EAAG;AACzB,YAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,eAAK,KAAK;AAAA,YACR,MAAM,sBAAsB;AAAA,YAC5B;AAAA,YACA,OAAO,eAAe,IAAI,MAAM,uCAAuC,IAAI,GAAG,CAAC;AAAA,UACjF,CAAC;AACD;AAAA,QACF;AACA,aAAK,KAAK,EAAE,MAAM,sBAAsB,gBAAgB,WAAW,MAAM,CAAC;AAAA,MAC5E;AAAA,MACA,WAAS;AACP,YAAI,CAAC,iBAAiB,EAAG;AACzB,aAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,WAAW,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,MAChG;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,eAAe,SAAuB;AAI5C,SAAK,QAAQ,oBAAoB,WAAW,KAAK,aAAa;AAC9D,SAAK,QAAQ,oBAAoB,SAAS,KAAK,iBAAiB;AAChE,SAAK,QAAQ,UAAU;AACvB,SAAK,4BAA4B;AACjC,SAAK,MAAM,MAAM;AACjB,SAAK,eAAe;AACpB,SAAK,aAAa;AAClB,SAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,CAAC;AACzC,SAAK,UAAU,SAAS,cAAc,KAAK;AAAA,EAC7C;AAAA;AAAA,EAGQ,8BAAoC;AAC1C,SAAK,MAAM,oBAAoB,WAAW,KAAK,aAAa;AAC5D,SAAK,MAAM,oBAAoB,gBAAgB,KAAK,eAAe;AACnE,SAAK,cAAc,oBAAoB,SAAS,KAAK,uBAAuB;AAAA,EAC9E;AAAA;AAAA,EAGQ,iBAAuB;AAC7B,QAAI,KAAK,oBAAoB,KAAM;AAGnC,QAAI,KAAK,wBAAwB,SAAU;AAC3C,SAAK,kBAAkB,YAAY,MAAM;AACvC,WAAK,KAAK,EAAE,MAAM,sBAAsB,KAAK,CAAC;AAAA,IAChD,GAAG,KAAK,mBAAmB;AAAA,EAC7B;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,KAAK,oBAAoB,KAAM,eAAc,KAAK,eAAe;AACrE,SAAK,kBAAkB;AAAA,EACzB;AAAA,EAEiB,oBAAoB,MAAM;AACzC,SAAK,eAAe,2BAA2B;AAAA,EACjD;AAAA,EAEiB,kBAAkB,MAAM;AACvC,SAAK,eAAe,mDAAmD;AAAA,EACzE;AAAA,EAEiB,0BAA0B,MAAM;AAC/C,SAAK,eAAe,kCAAkC;AAAA,EACxD;AAAA;AAAA,EAGQ,eAAqB;AAC3B,SAAK,SAAS;AACd,SAAK,eAAe;AACpB,SAAK,OAAO;AACZ,SAAK,UAAU;AACf,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,KAAK,SAAgC,UAAgC;AAC3E,QAAI,KAAK,QAAQ;AACf,qBAAe,KAAK,QAAQ,SAAS,QAAQ;AAC7C;AAAA,IACF;AACA,QAAI,KAAK,MAAM;AACb,qBAAe,KAAK,MAAM,SAAS,QAAQ;AAC3C;AAAA,IACF;AACA,QAAI,KAAK,cAAc;AACrB,WAAK,aAAa,OAAO,OAAO;AAChC;AAAA,IACF;AACA,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACF;AAeO,SAAS,wBACd,SACiD;AACjD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AACJ,SAAO,IAAI,gBAAgB;AAAA,IACzB,GAAG;AAAA,IACH,WAAW;AAAA,IACX,YAAY,cAAc,WAAW;AAAA,IACrC,eAAe;AAAA,IACf,WAAW,IAAI,0BAAiC;AAAA,MAC9C,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,MACzC,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACrD,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,aAAa;AAAA,MACrD,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,MACnC,GAAI,wBAAwB,SAAY,CAAC,IAAI,EAAE,oBAAoB;AAAA,MACnE,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AACH;AAWA,SAAS,sBAA8B;AACrC,MAAI;AACJ,MAAI;AACF,gBAAY,IAAI,IAAI,0BAA0B,YAAY,GAAG;AAAA,EAC/D,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,OAAO,WAAW;AAAA,IAC3B,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AACH;AAOA,SAAS,4BAA0C;AACjD,MAAI;AACJ,MAAI;AACF,gBAAY,IAAI,IAAI,iCAAiC,YAAY,GAAG;AAAA,EACtE,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,aAAa,WAAW;AAAA,IACjC,MAAM,GAAG,sBAAsB;AAAA,IAC/B,MAAM;AAAA,EACR,CAAC;AACH;AAMA,SAAS,eACP,QACA,SACA,UACM;AACN,MAAI,SAAU,QAAO,YAAY,SAAS,QAA0B;AAAA,MAC/D,QAAO,YAAY,OAAO;AACjC;",
+  "sources": ["../src/centrifuge-session.ts", "../src/centrifuge-protocol.ts", "../src/centrifuge.ts"],
+  "sourcesContent": ["/**\n * CentrifugeSession \u2014 a reusable wrapper around a single Centrifuge client.\n *\n * Provides a structured-clone-safe message protocol (INIT/SUBSCRIBE/UNSUBSCRIBE/\n * PUBLISH/STOP) so the same session class can run inside a Dedicated Worker,\n * a SharedWorker port, or directly on the main thread as a local fallback.\n */\nimport { Centrifuge } from 'centrifuge';\nimport { parseDataBusPublication } from './core/publication';\nimport type {\n  PublicationContext,\n  StateContext,\n  Subscription,\n  SubscriptionErrorContext\n} from 'centrifuge';\nimport type {\n  CentrifugeWorkerConfig,\n  CentrifugeWorkerInput,\n  CentrifugeWorkerOutput\n} from './centrifuge-protocol';\nimport { CENTRIFUGE_INPUT_TYPE, CENTRIFUGE_OUTPUT_TYPE, WORKER_STATUS } from './utils/constants';\nimport { publicationMetadata } from './utils/metadata';\nimport { deserializeWorkerError, serializeError } from './utils/error-utils';\n\n/** Callback interface for posting messages back to the transport layer. */\nexport interface CentrifugeSessionSink<TData = unknown> {\n  post(message: CentrifugeWorkerOutput<TData>, transfer?: ArrayBuffer[]): void;\n}\n\n/** A pending getToken/getChannelToken request awaiting a main-thread response. */\ninterface PendingTokenRequest {\n  resolve: (token: string) => void;\n  reject: (error: unknown) => void;\n}\n\n/** Centrifuge client options for token-bridge mode: the structured-clone-safe\n * subset plus the two function-valued hooks that Centrifuge invokes for fresh\n * credentials. Used only inside the session, never across the Worker boundary. */\ntype CentrifugeBridgedOptions = Omit<CentrifugeWorkerConfig, 'getToken' | 'getChannelToken'> & {\n  getToken: () => Promise<string>;\n  getChannelToken: (channel: string) => Promise<string>;\n};\n\n/**\n * Stateful Centrifuge client wrapper shared by Dedicated Worker, SharedWorker\n * ports and the main-thread local fallback. Each session owns one connection.\n */\nexport class CentrifugeSession<TData = unknown> {\n  private client: Centrifuge | null = null;\n  private readonly subscriptions = new Map<string, Subscription>();\n  private transferable = false;\n  private tokenBridge = false;\n  private nextRequestId = 1;\n  // Bumped on every initialize/stop. Async client callbacks capture the value\n  // from the connection that created them so a stopped client cannot emit into\n  // a later session instance (including the main-thread local fallback).\n  private lifecycle = 0;\n  private readonly pendingTokenRequests = new Map<number, PendingTokenRequest>();\n\n  constructor(private readonly sink: CentrifugeSessionSink<TData>) {}\n\n  /** Dispatch an incoming Worker message to the matching operation.\n   * Unknown message types are ignored rather than thrown, so a future protocol\n   * extension adding a new variant cannot crash an older session. */\n  handle(message: CentrifugeWorkerInput): void {\n    switch (message.type) {\n      case CENTRIFUGE_INPUT_TYPE.INIT:\n        this.initialize(message.url, message.config, message.transferable === true, message.tokenBridge === true);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.SUBSCRIBE:\n        this.subscribe(message.topic);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.UNSUBSCRIBE:\n        this.unsubscribe(message.topic);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.PUBLISH:\n      case CENTRIFUGE_INPUT_TYPE.PUBLISH_BIN:\n        // Binary and JSON publish share the same Centrifuge client call; the\n        // transport layer decides whether to transfer the ArrayBuffer.\n        this.publish(message.topic, message.data, message.messageId, message.timestamp);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.STOP:\n        this.stop();\n        return;\n      case CENTRIFUGE_INPUT_TYPE.TOKEN_RESPONSE:\n        this.resolveToken(message.requestId, message.token);\n        return;\n      case CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR:\n        this.rejectToken(message.requestId, deserializeWorkerError(message.error));\n        return;\n      default:\n        return;\n    }\n  }\n\n  /** Create the Centrifuge client, wire up lifecycle listeners, and connect. */\n  private initialize(url: string, config: CentrifugeWorkerConfig, transferable: boolean, tokenBridge: boolean): void {\n    if (this.client) return;\n    const lifecycle = ++this.lifecycle;\n    this.transferable = transferable;\n    this.tokenBridge = tokenBridge;\n    const clientOptions: CentrifugeWorkerConfig | CentrifugeBridgedOptions = tokenBridge\n      ? {\n          ...config,\n          // Route credential fetches back to the main thread, where the\n          // application's credentialProvider lives (config must stay\n          // structured-cloneable, so functions cannot cross the boundary).\n          getToken: () => this.requestToken('token', lifecycle),\n          getChannelToken: (channel: string) => this.requestToken('channelToken', lifecycle, channel)\n        }\n      : config;\n    const client = new Centrifuge(url, clientOptions);\n    this.client = client;\n    client.on('state', (context: StateContext) => {\n      if (this.lifecycle !== lifecycle) return;\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: normalizeStatus(context.newState) });\n    });\n    client.on('connected', () => {\n      if (this.lifecycle !== lifecycle) return;\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: WORKER_STATUS.CONNECTED });\n    });\n    client.on('disconnected', () => {\n      if (this.lifecycle !== lifecycle) return;\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: WORKER_STATUS.DISCONNECTED });\n    });\n    client.on('error', context => {\n      if (this.lifecycle !== lifecycle) return;\n      this.postError(context);\n    });\n    // Client-level publications are only for server-side subscriptions (where\n    // no client Subscription object exists). For topics we have an active\n    // subscription for, the subscription-level 'publication' listener handles\n    // dispatch \u2014 skip here to avoid delivering the same message twice.\n    client.on('publication', (context: PublicationContext) => {\n      if (this.lifecycle !== lifecycle) return;\n      const topic = context.channel || getPayloadTopic(context.data);\n      if (!topic || this.subscriptions.has(topic)) return;\n      this.postPublication(topic, context.data);\n    });\n    client.connect();\n  }\n\n  /** Subscribe to a Centrifuge channel. Reuses an existing subscription if one exists.\n   * Listeners are only registered once per subscription object \u2014 a repeated\n   * SUBSCRIBE for an already-tracked topic skips the listener wiring entirely,\n   * avoiding the removeAllListeners + re-on churn on every duplicate message. */\n  private subscribe(topic: string): void {\n    if (!this.client) return this.postError(new Error('Centrifuge client is not initialized.'));\n    const lifecycle = this.lifecycle;\n    // If we already track this subscription, it already has our listeners \u2014\n    // a duplicate SUBSCRIBE is a no-op (idempotent), matching the transport\n    // contract. Only a fresh subscription needs listener wiring.\n    const existing = this.subscriptions.get(topic);\n    if (existing) {\n      existing.subscribe();\n      return;\n    }\n    let subscription = this.client.getSubscription(topic);\n    if (!subscription) subscription = this.client.newSubscription(topic);\n    // Remove only our own listeners so that any Centrifuge internal listeners\n    // on the subscription object are preserved. Each subscription event carries\n    // a single listener so removeAllListeners(\u2026) is safe here.\n    subscription.removeAllListeners('publication');\n    subscription.removeAllListeners('error');\n    subscription.removeAllListeners('unsubscribed');\n    this.subscriptions.set(topic, subscription);\n    subscription.on('publication', context => {\n      if (this.lifecycle !== lifecycle) return;\n      this.postPublication(topic, context.data);\n    });\n    subscription.on('error', (context: SubscriptionErrorContext) => {\n      if (this.lifecycle !== lifecycle) return;\n      this.postError(context);\n    });\n    subscription.on('unsubscribed', () => {\n      if (this.lifecycle === lifecycle) this.subscriptions.delete(topic);\n    });\n    subscription.subscribe();\n  }\n\n  /** Unsubscribe from a Centrifuge channel and clean up the local reference.\n   * Listeners are removed before unsubscribing so a late `unsubscribed` event\n   * cannot delete a subscription that a subsequent `subscribe()` re-added. */\n  private unsubscribe(topic: string): void {\n    const subscription = this.subscriptions.get(topic) ?? this.client?.getSubscription(topic);\n    if (!subscription) return;\n    subscription.removeAllListeners('publication');\n    subscription.removeAllListeners('error');\n    subscription.removeAllListeners('unsubscribed');\n    this.subscriptions.delete(topic);\n    subscription.unsubscribe();\n  }\n\n  /** Publish a message to the Centrifuge channel. */\n  private publish(topic: string, data: unknown, messageId?: string, timestamp?: number): void {\n    if (!this.client) return this.postError(new Error('Centrifuge client is not initialized.'));\n    const lifecycle = this.lifecycle;\n    // Centrifuge's payload is application-defined. Preserve legacy payloads;\n    // when an ID is requested, send a small metadata envelope that compatible\n    // servers can echo back for end-to-end deduplication.\n    const hasMetadata = messageId !== undefined || timestamp !== undefined;\n    const payload = hasMetadata\n      ? {\n          data,\n          ...(messageId === undefined ? {} : { messageId }),\n          ...(timestamp === undefined ? {} : { timestamp })\n        }\n      : data;\n    void this.client.publish(topic, payload).catch(error => {\n      if (this.lifecycle === lifecycle) this.postError(error);\n    });\n  }\n\n  /** Forward a publication to the transport. Binary payloads take the\n   * zero-copy `MESSAGE_BIN` path when `transferable` is enabled; everything\n   * else is structured-cloned via `MESSAGE`. An empty topic means the\n   * publication carried no channel info and is silently dropped. */\n  private postPublication(topic: string, data: unknown): void {\n    if (!topic) return;\n    if (this.transferable && data instanceof ArrayBuffer) {\n      this.post({ type: CENTRIFUGE_OUTPUT_TYPE.MESSAGE_BIN, topic, data }, [data]);\n      return;\n    }\n    const publication = parseDataBusPublication<TData>(data, topic);\n    if (!publication) return;\n    this.post({\n      type: CENTRIFUGE_OUTPUT_TYPE.MESSAGE,\n      topic: publication.topic,\n      data: publication.data,\n      ...publicationMetadata(publication.messageId, publication.timestamp)\n    });\n  }\n\n  /** Disconnect the client and clear all subscriptions. */\n  private stop(): void {\n    // Invalidate callbacks from the connection being stopped before disconnect\n    // so its synchronous or queued events cannot leak into a later session.\n    this.lifecycle += 1;\n    // Settle every in-flight credential request so a stop cannot leave the\n    // Worker awaiting a main-thread response forever.\n    for (const [, pending] of this.pendingTokenRequests) {\n      pending.reject(new Error('Centrifuge session stopped before the credential was resolved.'));\n    }\n    this.pendingTokenRequests.clear();\n    this.client?.disconnect();\n    this.subscriptions.clear();\n    this.client = null;\n    this.post({ type: CENTRIFUGE_OUTPUT_TYPE.STATUS, status: WORKER_STATUS.DISCONNECTED });\n  }\n\n  /** Issue a credential request to the main thread and await the response.\n   * Used as Centrifuge's `getToken` / `getChannelToken` when token bridging is\n   * enabled; resolved or rejected by a matching TOKEN_RESPONSE / TOKEN_ERROR. */\n  private requestToken(kind: 'token' | 'channelToken', lifecycle: number, channel?: string): Promise<string> {\n    // The provider is installed on a specific Centrifuge client. An old client\n    // must not be able to route a late credential request into a replacement\n    // session merely because it retained the callback closure.\n    if (this.lifecycle !== lifecycle) {\n      return Promise.reject(new Error('Centrifuge client lifecycle has ended before the credential was requested.'));\n    }\n    const requestId = this.nextRequestId;\n    this.nextRequestId += 1;\n    return new Promise<string>((resolve, reject) => {\n      this.pendingTokenRequests.set(requestId, { resolve, reject });\n      this.post({\n        type: CENTRIFUGE_OUTPUT_TYPE.TOKEN_REQUEST,\n        requestId,\n        kind,\n        ...(channel === undefined ? {} : { channel })\n      });\n    });\n  }\n\n  private resolveToken(requestId: number, token: string): void {\n    const pending = this.pendingTokenRequests.get(requestId);\n    if (!pending) return;\n    this.pendingTokenRequests.delete(requestId);\n    pending.resolve(token);\n  }\n\n  private rejectToken(requestId: number, error: unknown): void {\n    const pending = this.pendingTokenRequests.get(requestId);\n    if (!pending) return;\n    this.pendingTokenRequests.delete(requestId);\n    pending.reject(error);\n  }\n\n  /** Forward a message to the sink (the transport layer). */\n  private post(message: CentrifugeWorkerOutput<TData>, transfer?: ArrayBuffer[]): void {\n    this.sink.post(message, transfer);\n  }\n\n  /** Serialise and report an error. The Centrifuge client handles reconnection\n   * internally, so a transient error should not trigger a `STATUS: error` that\n   * would cause `selectActiveWorkers()` to exclude this worker from routing.\n   * Fatal errors are distinguished by the client eventually emitting\n   * `disconnected` without a subsequent `connected`. */\n  private postError(error: unknown): void {\n    this.post({ type: CENTRIFUGE_OUTPUT_TYPE.ERROR, error: serializeError(error) });\n  }\n}\n\n/** Extract a topic from a Centrifuge publication payload if one is present.\n * Handles both direct `channel` fields and the nested `push.channel` shape\n * that Centrifugo uses for some server-side push types. */\nfunction getPayloadTopic(data: unknown): string {\n  if (!data || typeof data !== 'object') return '';\n  const payload = data as Record<string, unknown>;\n  // Prefer nested push.channel (server-side push) then fall back to top-level channel.\n  const push = payload.push;\n  const nested = typeof push === 'object' && push !== null ? (push as Record<string, unknown>).channel : undefined;\n  const topic = nested ?? payload.channel;\n  return typeof topic === 'string' ? topic : '';\n}\n\n/** Map a Centrifuge state string to the DataBus's status vocabulary.\n * 'connecting' and 'connected' pass through; anything else (e.g. 'reconnecting',\n * 'disconnected') maps to 'disconnected'. */\nconst LIVE_STATES = new Set<string>([WORKER_STATUS.CONNECTING, WORKER_STATUS.CONNECTED]);\nfunction normalizeStatus(status: string): 'connecting' | 'connected' | 'disconnected' {\n  return LIVE_STATES.has(status) ? (status as 'connecting' | 'connected') : 'disconnected';\n}\n", "/**\n * Worker-thread protocol for Centrifuge WebSocket transport.\n *\n * Defines the message types exchanged between the main thread and a Web Worker\n * (dedicated or shared) that runs a centrifuge client. The worker is isolated\n * from the main thread so that WebSocket lifecycle, token refresh, and binary\n * data handling never block the UI.\n *\n * The message `type` discriminant values are derived from the constants in\n * `utils/constants.ts` so main-thread and Worker sides reference the same\n * values and can never drift apart.\n */\nimport type { Options } from 'centrifuge';\nimport type { CENTRIFUGE_INPUT_TYPE, CENTRIFUGE_OUTPUT_TYPE } from './utils/constants';\nimport type { WorkerStatus } from './core/types';\nimport type { SerializedWorkerError } from './utils/error-utils';\n\nexport type { SerializedWorkerError } from './utils/error-utils';\n\n/**\n * Default interval between main-thread PING heartbeats to a SharedWorker. The\n * SharedWorker reaps a silent port after `SESSION_TIMEOUT_MULTIPLIER` intervals.\n * Shared here so the main thread (heartbeat sender) and the SharedWorker (reaper)\n * always agree on the cadence.\n */\nexport const DEFAULT_HEARTBEAT_INTERVAL_MS = 10_000;\n/** SharedWorker per-port session timeout, expressed as a multiple of that port's\n * heartbeat interval. A live port PINGs every heartbeat interval, so a timeout of\n * several intervals tolerates throttled tabs without reaping healthy sessions. */\nexport const DEFAULT_SESSION_TIMEOUT_MULTIPLIER = 3;\n/** Default per-port session timeout in ms, derived from the heartbeat interval\n * and the multiplier. Used as the fallback when a port sends no INIT config. */\nexport const DEFAULT_SESSION_TIMEOUT_MS =\n  DEFAULT_HEARTBEAT_INTERVAL_MS * DEFAULT_SESSION_TIMEOUT_MULTIPLIER;\n\n// Centrifuge Options that reference browser APIs (WebSocket, EventSource, etc.)\n// are unavailable inside a Worker \u2014 the worker uses its own WebSocket import.\n// These are stripped from the config sent to the worker so the type system\n// prevents accidentally passing a main-thread-only function (which would fail\n// structured cloning and throw a DataCloneError).\ntype WorkerUnsafeOption =\n  | 'eventsource'\n  | 'fetch'\n  | 'getData'\n  | 'getToken'\n  | 'networkEventTarget'\n  | 'readableStream'\n  | 'sockjs'\n  | 'websocket';\n\n/** Centrifuge options safe to pass into a Worker; unsafe options are explicitly\n * excluded and set to `never` so the compiler rejects them at the call site. */\nexport type CentrifugeWorkerConfig = Omit<Partial<Options>, WorkerUnsafeOption> & {\n  [Key in WorkerUnsafeOption]?: never;\n};\n\n/**\n * Async credential provider run on the main thread. Centrifuge client options\n * are structured-cloned into the Worker, so function-valued `getToken` /\n * `getChannelToken` cannot travel with the config. When a provider is set, the\n * Worker asks the main thread for each fresh token over a TOKEN_REQUEST /\n * TOKEN_RESPONSE exchange and this provider supplies it from application\n * context (async token endpoints, SecureStorage, etc.).\n */\nexport interface CentrifugeCredentialProvider {\n  /** Return a fresh top-level connection token. Called on connect and refresh. */\n  getToken: () => MaybePromise<string | null | undefined>;\n  /** Return a channel token for a channel. Centrifuge falls back to `getToken`\n   * when channel tokens are not configured by the server. */\n  getChannelToken?: (channel: string) => MaybePromise<string | null | undefined>;\n}\n\n/** A value or a promise of a value. */\nexport type MaybePromise<T> = T | Promise<T>;\n\n/** Messages sent from the main thread to the Worker. All variants are\n * structured-cloneable; `PUBLISH_BIN` carries an ArrayBuffer (transferable). */\nexport type CentrifugeWorkerInput =\n  /** Initial connection: URL + config. Sent once per backend creation.\n   * `transferable` enables ArrayBuffer zero-copy for subsequent PUBLISH_BIN.\n   * `heartbeatIntervalMs` overrides the SharedWorker PING cadence.\n   * `tokenBridge` asks the Worker to route getToken/getChannelToken back to\n   * the main thread instead of holding function-valued config. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.INIT; url: string; config: CentrifugeWorkerConfig; transferable?: boolean; heartbeatIntervalMs?: number; tokenBridge?: boolean }\n  /** Subscribe to a channel. Idempotent \u2014 re-subscribing is a no-op. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.SUBSCRIBE; topic: string }\n  /** Unsubscribe from a channel. Idempotent. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.UNSUBSCRIBE; topic: string }\n  /** Publish a structured-cloneable payload to a channel. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.PUBLISH; topic: string; data: unknown; messageId?: string; timestamp?: number }\n  /** Publish an ArrayBuffer via Transferable (zero-copy when `transferable` is on). */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.PUBLISH_BIN; topic: string; data: ArrayBuffer; messageId?: string; timestamp?: number }\n  /** Heartbeat from the main thread; the SharedWorker reaps silent ports. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.PING }\n  /** Disconnect the client and clear all subscriptions. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.STOP }\n  /** Fresh credential for an earlier TOKEN_REQUEST, resolved by requestId. */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.TOKEN_RESPONSE; requestId: number; token: string }\n  /** A credential request failed (provider rejected or returned no token). */\n  | { type: typeof CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR; requestId: number; error: SerializedWorkerError };\n\n/** Messages sent from the Worker back to the main thread. The main thread\n * routes these to the DataBusTransportHandlers via handleOutput(). */\nexport type CentrifugeWorkerOutput<TData = unknown> =\n  /** Connection status changed. Maps Centrifuge states to the DataBus vocabulary. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.STATUS; status: WorkerStatus }\n  /** A JSON publication arrived. Routed to onMessage via handleOutput. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.MESSAGE; topic: string; data: TData; messageId?: string; timestamp?: number }\n  /** A binary publication arrived (Transferable). Routed to onMessage with the ArrayBuffer. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.MESSAGE_BIN; topic: string; data: ArrayBuffer; messageId?: string; timestamp?: number }\n  /** A non-fatal error occurred. Does not imply disconnection (the client retries internally). */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.ERROR; error: SerializedWorkerError }\n  /** The Worker needs a fresh credential. The main thread resolves it via a\n   * matching TOKEN_RESPONSE / TOKEN_ERROR carrying the same `requestId`. */\n  | { type: typeof CENTRIFUGE_OUTPUT_TYPE.TOKEN_REQUEST; requestId: number; kind: 'token' | 'channelToken'; channel?: string };\n", "/**\n * Centrifuge WebSocket transport that runs inside a Web Worker.\n *\n * Supports three backends, selected in order of preference:\n * 1. SharedWorker \u2014 one WebSocket per tab session, hosted in a shared process\n * 2. Dedicated Worker \u2014 one WebSocket per tab\n * 3. In-process (local) \u2014 Centrifuge runs on the main thread (fallback when\n *    neither Worker type is available, e.g. in non-browser environments)\n *\n * Binary data (ArrayBuffer) can be transferred via Transferable when the\n * `transferable` option is enabled, avoiding structured-clone overhead.\n */\n\nimport { CrossTabDataBus } from './core/data-bus';\nimport type { CrossTabDataBusOptions } from './core/data-bus';\nimport type { DataBusTransport, DataBusTransportHandlers } from './core/types';\nimport { CentrifugeSession } from './centrifuge-session';\nimport { selectWorkerBackend } from './worker-mode';\nimport type { WorkerBackend, WorkerMode } from './worker-mode';\nimport type {\n  CentrifugeCredentialProvider,\n  CentrifugeWorkerConfig,\n  CentrifugeWorkerInput,\n  CentrifugeWorkerOutput\n} from './centrifuge-protocol';\nimport type { DataBusPublishOptions } from './core/types';\nimport { DEFAULT_HEARTBEAT_INTERVAL_MS } from './centrifuge-protocol';\nimport { CENTRIFUGE_INPUT_TYPE, CENTRIFUGE_OUTPUT_TYPE, DEFAULT_STORAGE_PREFIX, WORKER_BACKEND, WORKER_MODE, WORKER_STATUS } from './utils/constants';\nimport { deserializeWorkerError, serializeError } from './utils/error-utils';\nimport { publicationMetadata } from './utils/metadata';\nimport { assertHeartbeatInterval, assertStructuredCloneable } from './utils/validation';\n\nexport type { CentrifugeCredentialProvider, CentrifugeWorkerConfig, SerializedWorkerError } from './centrifuge-protocol';\nexport type { WorkerBackend, WorkerMode } from './worker-mode';\n\n/** WebSocket connection parameters passed to the Centrifuge Worker. */\nexport interface CentrifugeDataBusConfig {\n  /** Centrifuge server WebSocket URL. */\n  url: string;\n  /** Centrifuge client options (token, channel params, etc.). */\n  options?: CentrifugeWorkerConfig;\n}\n\n/** Options for configuring the Worker backend (dedicated, shared, or local). */\nexport interface CentrifugeWorkerTransportOptions {\n  /** Custom dedicated Worker factory. Used for testing or bundler integration. */\n  workerFactory?: () => Worker;\n  /** Custom SharedWorker factory. */\n  sharedWorkerFactory?: () => SharedWorker;\n  /** Preferred Worker mode: 'dedicated', 'shared', or 'auto'. */\n  workerMode?: WorkerMode;\n  /** Enable transferable (ArrayBuffer) support for binary data. */\n  transferable?: boolean;\n  /** Interval (ms) between PING heartbeats sent to the SharedWorker. The\n   * SharedWorker reaps a silent port after `DEFAULT_SESSION_TIMEOUT_MULTIPLIER`\n   * \u00D7 this interval. Pass `Infinity` to disable heartbeats entirely. Defaults\n   * to `DEFAULT_HEARTBEAT_INTERVAL_MS`. */\n  heartbeatIntervalMs?: number;\n  /** Async credential provider. Runs on the main thread: the Worker cannot\n   * hold function-valued Centrifuge options (they are not structured-cloneable),\n   * so when a provider is set the Worker asks for each fresh token over a\n   * TOKEN_REQUEST / TOKEN_RESPONSE bridge and this provider supplies it. */\n  credentialProvider?: CentrifugeCredentialProvider;\n}\n\n/** Options for creating a fully-configured CrossTabDataBus with a Centrifuge transport. */\nexport interface CreateCentrifugeDataBusOptions<TData = unknown>\n  extends Omit<\n      CrossTabDataBusOptions<CentrifugeDataBusConfig, TData>,\n      'autoStart' | 'clusterKey' | 'initialConfig' | 'transport'\n    >,\n    CentrifugeWorkerTransportOptions {\n  /** Centrifuge connection configuration. */\n  connection: CentrifugeDataBusConfig;\n  /** Cluster key for cross-tab coordination. Defaults to the connection URL. */\n  clusterKey?: string;\n}\n\n/**\n * Transport layer that runs a Centrifuge WebSocket client inside a Web Worker.\n *\n * Delegates the actual WebSocket connection to a Worker (dedicated or shared)\n * or falls back to an in-process CentrifugeSession. The Worker is isolated from\n * the main thread so that WebSocket lifecycle, token refresh, and binary data\n * handling never block the UI.\n */\nexport class CentrifugeWorkerTransport<TData = unknown>\n  implements DataBusTransport<CentrifugeDataBusConfig, TData>\n{\n  readonly diagnosticsName = 'centrifuge';\n  private readonly workerMode: WorkerMode;\n  private readonly transferable: boolean;\n  private readonly heartbeatIntervalMs: number;\n  private readonly workerFactory: (() => Worker) | undefined;\n  private readonly sharedWorkerFactory: (() => SharedWorker) | undefined;\n  private readonly credentialProvider: CentrifugeCredentialProvider | undefined;\n  private backend: WorkerBackend | null = null;\n  private worker: Worker | null = null;\n  private sharedWorker: SharedWorker | null = null;\n  private port: MessagePort | null = null;\n  private heartbeatHandle: ReturnType<typeof setInterval> | null = null;\n  private localSession: CentrifugeSession<TData> | null = null;\n  private handlers: DataBusTransportHandlers<TData> | null = null;\n  // Monotonically increasing counter, bumped each time a backend is created or\n  // the transport stops. Only the asynchronous credential bridge compares it:\n  // a provider may settle after the Worker it was answering is gone. Worker\n  // error events need no such check \u2014 stop() and onWorkerFailed() remove those\n  // listeners before the generation moves on, so a superseded backend can no\n  // longer reach this object at all.\n  private generation = 0;\n\n  get diagnosticsBackend(): string {\n    return this.backend ?? 'uninitialized';\n  }\n\n  constructor(options: CentrifugeWorkerTransportOptions = {}) {\n    this.workerMode = options.workerMode ?? WORKER_MODE.DEDICATED;\n    this.transferable = options.transferable ?? false;\n    this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;\n    assertHeartbeatInterval(this.heartbeatIntervalMs);\n    this.workerFactory = options.workerFactory;\n    this.sharedWorkerFactory = options.sharedWorkerFactory;\n    this.credentialProvider = options.credentialProvider;\n  }\n\n  /**\n   * Start the transport: select a backend, initialise the Worker (or local\n   * session), and send the INIT message with connection parameters.\n   */\n  start(config: CentrifugeDataBusConfig, handlers: DataBusTransportHandlers<TData>): void {\n    if (this.backend) return;\n    assertStructuredCloneable(config.options ?? {});\n    this.handlers = handlers;\n    // Runtime capability OR an injected factory counts as availability; a\n    // factory-less browser must use the bundled default Workers instead of\n    // silently degrading to the local session.\n    const backend = selectWorkerBackend(this.workerMode, {\n      worker: this.workerFactory !== undefined || typeof Worker !== 'undefined',\n      sharedWorker: this.sharedWorkerFactory !== undefined || typeof SharedWorker !== 'undefined'\n    });\n    const input = this.buildInitInput(config);\n    if (backend === WORKER_BACKEND.SHARED) {\n      this.startSharedWorker(input);\n      this.backend = WORKER_BACKEND.SHARED;\n      return;\n    }\n    if (backend === WORKER_BACKEND.DEDICATED) {\n      this.startDedicatedWorker(input);\n      this.backend = WORKER_BACKEND.DEDICATED;\n      return;\n    }\n    this.localSession = new CentrifugeSession<TData>({ post: this.handleSessionOutput });\n    this.localSession.handle(input);\n    this.backend = WORKER_BACKEND.LOCAL;\n  }\n\n  subscribe(topic: string): void {\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.SUBSCRIBE, topic });\n  }\n\n  unsubscribe(topic: string): void {\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.UNSUBSCRIBE, topic });\n  }\n\n  /**\n   * Publish data to `topic`. Binary data (ArrayBuffer) is sent via Transferable\n   * when `transferable` is enabled, avoiding a structured-clone cycle.\n   */\n  publish(topic: string, data: unknown, options?: DataBusPublishOptions): void {\n    if (this.transferable && data instanceof ArrayBuffer) {\n      this.post({ type: CENTRIFUGE_INPUT_TYPE.PUBLISH_BIN, topic, data, ...publicationMetadata(options?.messageId, options?.timestamp) }, [data]);\n      return;\n    }\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.PUBLISH, topic, data, ...publicationMetadata(options?.messageId, options?.timestamp) });\n  }\n\n  /**\n   * Gracefully stop the transport: send STOP, clean up event listeners, and\n   * terminate the Worker (or close the SharedWorker port).\n   */\n  stop(): void {\n    if (!this.backend) return;\n    this.generation++;\n    this.post({ type: CENTRIFUGE_INPUT_TYPE.STOP });\n    this.clearHeartbeat();\n    if (this.worker) {\n      this.worker.removeEventListener('message', this.handleMessage);\n      this.worker.removeEventListener('error', this.handleWorkerError);\n      this.worker.terminate();\n    }\n    if (this.sharedWorker) {\n      this.detachSharedWorkerListeners();\n      this.port?.close();\n    }\n    this.resetBackend();\n    this.handlers = null;\n  }\n\n  /** Build the INIT payload sent to the Worker / local session. Optional fields\n   * are only included when they deviate from the defaults, so the Worker's own\n   * default-resolution logic kicks in for the common case. */\n  private buildInitInput(config: CentrifugeDataBusConfig): CentrifugeWorkerInput {\n    return {\n      type: CENTRIFUGE_INPUT_TYPE.INIT,\n      url: config.url,\n      config: config.options ?? {},\n      ...(this.transferable ? { transferable: true } : {}),\n      ...(this.credentialProvider ? { tokenBridge: true } : {}),\n      ...(this.heartbeatIntervalMs !== DEFAULT_HEARTBEAT_INTERVAL_MS\n        ? { heartbeatIntervalMs: this.heartbeatIntervalMs }\n        : {})\n    };\n  }\n\n  /** Create and initialise a dedicated Worker, then send the INIT message. */\n  private startDedicatedWorker(input: CentrifugeWorkerInput): void {\n    this.generation += 1;\n    const worker = (this.workerFactory ?? createDefaultWorker)();\n    this.worker = worker;\n    worker.addEventListener('message', this.handleMessage);\n    worker.addEventListener('error', this.handleWorkerError);\n    worker.postMessage(input);\n  }\n\n  /** Create and initialise a SharedWorker, open the MessagePort, and send the INIT message. */\n  private startSharedWorker(input: CentrifugeWorkerInput): void {\n    this.generation += 1;\n    const shared = (this.sharedWorkerFactory ?? createDefaultSharedWorker)();\n    this.sharedWorker = shared;\n    const port = shared.port;\n    this.port = port;\n    port.addEventListener('message', this.handleMessage);\n    port.addEventListener('messageerror', this.handlePortError);\n    shared.addEventListener('error', this.handleSharedWorkerError);\n    port.start();\n    port.postMessage(input);\n    this.startHeartbeat();\n  }\n\n  /** Handle a message event from the Worker (dedicated or shared). */\n  private readonly handleMessage = (event: MessageEvent<CentrifugeWorkerOutput<TData>>) => {\n    this.handleOutput(event.data);\n  };\n\n  /** Handle a message from the in-process CentrifugeSession (local fallback). */\n  private readonly handleSessionOutput = (message: CentrifugeWorkerOutput<TData>) => {\n    this.handleOutput(message);\n  };\n\n  /** Route a Worker output message to the appropriate handler callback.\n   * Shared by the Worker message listener, the SharedWorker port listener,\n   * and the local-session sink \u2014 all three feed into this single dispatcher. */\n  private handleOutput(message: CentrifugeWorkerOutput<TData>): void {\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.STATUS) this.handlers?.onStatus(message.status);\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.MESSAGE) this.handlers?.onMessage({ topic: message.topic, data: message.data, ...publicationMetadata(message.messageId, message.timestamp) });\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.MESSAGE_BIN) this.handlers?.onMessage({ topic: message.topic, data: message.data as TData, ...publicationMetadata(message.messageId, message.timestamp) });\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.ERROR) this.handlers?.onError(deserializeWorkerError(message.error));\n    if (message.type === CENTRIFUGE_OUTPUT_TYPE.TOKEN_REQUEST) this.resolveTokenRequest(message.requestId, message.kind, message.channel);\n  }\n\n  /** Resolve a Worker credential request from the main thread: call the\n   * credentialProvider, then post the fresh token (or a serialized failure)\n   * back to the session that issued the request. */\n  private resolveTokenRequest(requestId: number, kind: 'token' | 'channelToken', channel: string | undefined): void {\n    // Credential providers may be asynchronous. Capture the backend identity\n    // before awaiting so a stop/start that replaces the Worker cannot receive\n    // a late token (or error) belonging to the superseded session. Request IDs\n    // restart at 1 for a fresh CentrifugeSession, so without this guard a stale\n    // reply can incorrectly satisfy the replacement session's request.\n    const generation = this.generation;\n    const worker = this.worker;\n    const port = this.port;\n    const localSession = this.localSession;\n    const isCurrentBackend = () =>\n      this.generation === generation &&\n      this.worker === worker &&\n      this.port === port &&\n      this.localSession === localSession;\n    const provider = this.credentialProvider;\n    let value: string | null | Promise<string | null | undefined> | undefined;\n    try {\n      value = kind === 'channelToken' && provider?.getChannelToken\n        ? provider.getChannelToken(channel ?? '')\n        : provider?.getToken?.();\n    } catch (error) {\n      // This arm never yields, but the provider is application code and can\n      // stop or replace the transport synchronously before throwing. Without\n      // the check `post()` then addresses a backend that no longer exists.\n      if (isCurrentBackend()) {\n        this.post({ type: CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR, requestId, error: serializeError(error) });\n      }\n      return;\n    }\n    Promise.resolve(value).then(\n      token => {\n        if (!isCurrentBackend()) return;\n        if (typeof token !== 'string' || token.length === 0) {\n          this.post({\n            type: CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR,\n            requestId,\n            error: serializeError(new Error(`The credential provider returned no ${kind}.`))\n          });\n          return;\n        }\n        this.post({ type: CENTRIFUGE_INPUT_TYPE.TOKEN_RESPONSE, requestId, token });\n      },\n      error => {\n        if (!isCurrentBackend()) return;\n        this.post({ type: CENTRIFUGE_INPUT_TYPE.TOKEN_ERROR, requestId, error: serializeError(error) });\n      }\n    );\n  }\n\n  /** Handle a Worker-level failure (crash, message decode error). Discards the\n   * dead backend so a later start()/reopen can rebuild from scratch, and\n   * signals an error status so the DataBus can trigger recovery. A superseded\n   * backend cannot reach this: its listeners are removed before the transport\n   * moves on, which is what keeps late Worker errors from tearing down a fresh\n   * session (pinned by 'ignores error events from a superseded worker'). */\n  private onWorkerFailed(message: string): void {\n    // Remove the message listener and release the old backend before recovery\n    // reopens, so late messages from the failed Worker/port cannot be routed\n    // into the freshly started session.\n    this.worker?.removeEventListener('message', this.handleMessage);\n    this.worker?.removeEventListener('error', this.handleWorkerError);\n    this.worker?.terminate();\n    this.detachSharedWorkerListeners();\n    this.port?.close();\n    this.clearHeartbeat();\n    this.resetBackend();\n    this.handlers?.onError(new Error(message));\n    this.handlers?.onStatus(WORKER_STATUS.ERROR);\n  }\n\n  /** Remove every listener attached to the current SharedWorker and its port. */\n  private detachSharedWorkerListeners(): void {\n    this.port?.removeEventListener('message', this.handleMessage);\n    this.port?.removeEventListener('messageerror', this.handlePortError);\n    this.sharedWorker?.removeEventListener('error', this.handleSharedWorkerError);\n  }\n\n  /** Periodically ping the SharedWorker so its session reaper can detect a dead tab. */\n  private startHeartbeat(): void {\n    if (this.heartbeatHandle !== null) return;\n    // Infinite disables the heartbeat (e.g. for environment where the\n    // SharedWorker reaper is not needed).\n    if (this.heartbeatIntervalMs === Infinity) return;\n    this.heartbeatHandle = setInterval(() => {\n      this.post({ type: CENTRIFUGE_INPUT_TYPE.PING });\n    }, this.heartbeatIntervalMs);\n  }\n\n  private clearHeartbeat(): void {\n    if (this.heartbeatHandle !== null) clearInterval(this.heartbeatHandle);\n    this.heartbeatHandle = null;\n  }\n\n  private readonly handleWorkerError = () => {\n    this.onWorkerFailed('Centrifuge worker failed.');\n  };\n\n  private readonly handlePortError = () => {\n    this.onWorkerFailed('Centrifuge shared worker message decoding failed.');\n  };\n\n  private readonly handleSharedWorkerError = () => {\n    this.onWorkerFailed('Centrifuge shared worker failed.');\n  };\n\n  /** Clear the Worker/port/backend references after a failure or stop. */\n  private resetBackend(): void {\n    this.worker = null;\n    this.sharedWorker = null;\n    this.port = null;\n    this.backend = null;\n    this.localSession = null;\n  }\n\n  /**\n   * Post a message to the active backend. Accepts optional Transferable buffers\n   * for zero-copy ArrayBuffer transfer.\n   */\n  private post(message: CentrifugeWorkerInput, transfer?: ArrayBuffer[]): void {\n    if (this.worker) {\n      postToPortLike(this.worker, message, transfer);\n      return;\n    }\n    if (this.port) {\n      postToPortLike(this.port, message, transfer);\n      return;\n    }\n    if (this.localSession) {\n      this.localSession.handle(message);\n      return;\n    }\n    throw new Error('CentrifugeWorkerTransport.start() must be called first.');\n  }\n}\n\n/**\n * Create a fully-configured CrossTabDataBus with a Centrifuge WebSocket transport.\n *\n * This is the primary entry point for consumers. It wires up the transport,\n * cluster coordination, and lifecycle management:\n *\n * ```ts\n * const bus = createCentrifugeDataBus({\n *   connection: { url: 'wss://example.com/connection/websocket', options: { token: '\u2026' } },\n *   trace: { enabled: true, sink: event => console.log(event) },\n * });\n * ```\n */\nexport function createCentrifugeDataBus<TData = unknown>(\n  options: CreateCentrifugeDataBusOptions<TData>\n): CrossTabDataBus<CentrifugeDataBusConfig, TData> {\n  const {\n    clusterKey,\n    connection,\n    credentialProvider,\n    heartbeatIntervalMs,\n    sharedWorkerFactory,\n    transferable,\n    workerFactory,\n    workerMode,\n    ...dataBusOptions\n  } = options;\n  return new CrossTabDataBus({\n    ...dataBusOptions,\n    autoStart: true,\n    clusterKey: clusterKey ?? connection.url,\n    initialConfig: connection,\n    transport: new CentrifugeWorkerTransport<TData>({\n      ...(workerFactory ? { workerFactory } : {}),\n      ...(sharedWorkerFactory ? { sharedWorkerFactory } : {}),\n      ...(transferable === undefined ? {} : { transferable }),\n      ...(workerMode ? { workerMode } : {}),\n      ...(heartbeatIntervalMs === undefined ? {} : { heartbeatIntervalMs }),\n      ...(credentialProvider ? { credentialProvider } : {})\n    })\n  });\n}\n\n/** Create the default dedicated Worker hosting the Centrifuge client. There is\n * no `typeof Worker` guard: `start()` asks `selectWorkerBackend` with\n * `worker: workerFactory !== undefined || typeof Worker !== 'undefined'`, that\n * function never returns a Worker backend its availability flags deny, and these\n * factories are only reached for a backend it did return. The degradation is\n * pinned where it is decided \u2014 `tests/worker-mode.test.ts` on the selector, and\n * \"falls back to the local session when the platform lacks both Worker APIs\" on\n * the transport \u2014 so a guard here could only ever re-check a fact the caller has\n * already established, and no runtime can reach it with the global missing.\n *\n * The `catch` below reads as uncovered in `pnpm test:coverage` and is not: it is\n * the CommonJS half of the module-format pair, and the report's `include` is\n * `src/**`, while the artifact that actually has no usable `import.meta.url` is\n * `dist/cjs/centrifuge.cjs`. `tests/dual-format.test.ts` asserts both sides \u2014\n * this message under CJS and a constructed Worker under ESM \u2014 so the leg is\n * pinned through the built output rather than missing. Treat that test as its\n * coverage. */\nfunction createDefaultWorker(): Worker {\n  let workerUrl: URL;\n  try {\n    workerUrl = new URL('./centrifuge.worker.js', import.meta.url);\n  } catch {\n    throw new Error(\n      'The default Centrifuge Worker URL is unavailable in this module format; provide workerFactory explicitly.'\n    );\n  }\n  return new Worker(workerUrl, {\n    name: DEFAULT_STORAGE_PREFIX,\n    type: 'module'\n  });\n}\n\n/** Create the default SharedWorker. Each connecting port within the SharedWorker\n * creates its own CentrifugeSession with an independent WebSocket connection,\n * so refreshing or stopping one tab does not affect the others. Like its\n * dedicated twin it carries no `typeof SharedWorker` guard \u2014 the availability\n * flag in `start()` is what decides this is reachable \u2014 and like its twin the\n * `catch` below is pinned through the built artifacts (the CJS half of\n * `tests/dual-format.test.ts`) rather than being uncovered. */\nfunction createDefaultSharedWorker(): SharedWorker {\n  let workerUrl: URL;\n  try {\n    workerUrl = new URL('./centrifuge.shared.worker.js', import.meta.url);\n  } catch {\n    throw new Error(\n      'The default Centrifuge SharedWorker URL is unavailable in this module format; provide sharedWorkerFactory explicitly.'\n    );\n  }\n  return new SharedWorker(workerUrl, {\n    name: `${DEFAULT_STORAGE_PREFIX}-shared`,\n    type: 'module'\n  });\n}\n\n/** Post `message` to a Worker or MessagePort, forwarding `transfer` buffers\n * when present. Both targets share the `postMessage(message, transfer?)`\n * signature, so a single helper eliminates the duplicated if/else at each\n * call site. */\nfunction postToPortLike(\n  target: Pick<Worker, 'postMessage'>,\n  message: CentrifugeWorkerInput,\n  transfer?: ArrayBuffer[]\n): void {\n  if (transfer) target.postMessage(message, transfer as Transferable[]);\n  else target.postMessage(message);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;AAOA,SAAS,kBAAkB;AAwCpB,IAAM,oBAAN,MAAyC;AAAA,EAY9C,YAA6B,MAAoC;AAApC;AAAA,EAAqC;AAAA,EAArC;AAAA,EAXrB,SAA4B;AAAA,EACnB,gBAAgB,oBAAI,IAA0B;AAAA,EACvD,eAAe;AAAA,EACf,cAAc;AAAA,EACd,gBAAgB;AAAA;AAAA;AAAA;AAAA,EAIhB,YAAY;AAAA,EACH,uBAAuB,oBAAI,IAAiC;AAAA;AAAA;AAAA;AAAA,EAO7E,OAAO,SAAsC;AAC3C,YAAQ,QAAQ,MAAM;AAAA,MACpB,KAAK,sBAAsB;AACzB,aAAK,WAAW,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,iBAAiB,MAAM,QAAQ,gBAAgB,IAAI;AACxG;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,UAAU,QAAQ,KAAK;AAC5B;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,YAAY,QAAQ,KAAK;AAC9B;AAAA,MACF,KAAK,sBAAsB;AAAA,MAC3B,KAAK,sBAAsB;AAGzB,aAAK,QAAQ,QAAQ,OAAO,QAAQ,MAAM,QAAQ,WAAW,QAAQ,SAAS;AAC9E;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,KAAK;AACV;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,aAAa,QAAQ,WAAW,QAAQ,KAAK;AAClD;AAAA,MACF,KAAK,sBAAsB;AACzB,aAAK,YAAY,QAAQ,WAAW,uBAAuB,QAAQ,KAAK,CAAC;AACzE;AAAA,MACF;AACE;AAAA,IACJ;AAAA,EACF;AAAA;AAAA,EAGQ,WAAW,KAAa,QAAgC,cAAuB,aAA4B;AACjH,QAAI,KAAK,OAAQ;AACjB,UAAM,YAAY,EAAE,KAAK;AACzB,SAAK,eAAe;AACpB,SAAK,cAAc;AACnB,UAAM,gBAAmE,cACrE;AAAA,MACE,GAAG;AAAA;AAAA;AAAA;AAAA,MAIH,UAAU,MAAM,KAAK,aAAa,SAAS,SAAS;AAAA,MACpD,iBAAiB,CAAC,YAAoB,KAAK,aAAa,gBAAgB,WAAW,OAAO;AAAA,IAC5F,IACA;AACJ,UAAM,SAAS,IAAI,WAAW,KAAK,aAAa;AAChD,SAAK,SAAS;AACd,WAAO,GAAG,SAAS,CAAC,YAA0B;AAC5C,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,gBAAgB,QAAQ,QAAQ,EAAE,CAAC;AAAA,IAC9F,CAAC;AACD,WAAO,GAAG,aAAa,MAAM;AAC3B,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,cAAc,UAAU,CAAC;AAAA,IACpF,CAAC;AACD,WAAO,GAAG,gBAAgB,MAAM;AAC9B,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,cAAc,aAAa,CAAC;AAAA,IACvF,CAAC;AACD,WAAO,GAAG,SAAS,aAAW;AAC5B,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,UAAU,OAAO;AAAA,IACxB,CAAC;AAKD,WAAO,GAAG,eAAe,CAAC,YAAgC;AACxD,UAAI,KAAK,cAAc,UAAW;AAClC,YAAM,QAAQ,QAAQ,WAAW,gBAAgB,QAAQ,IAAI;AAC7D,UAAI,CAAC,SAAS,KAAK,cAAc,IAAI,KAAK,EAAG;AAC7C,WAAK,gBAAgB,OAAO,QAAQ,IAAI;AAAA,IAC1C,CAAC;AACD,WAAO,QAAQ;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,UAAU,OAAqB;AACrC,QAAI,CAAC,KAAK,OAAQ,QAAO,KAAK,UAAU,IAAI,MAAM,uCAAuC,CAAC;AAC1F,UAAM,YAAY,KAAK;AAIvB,UAAM,WAAW,KAAK,cAAc,IAAI,KAAK;AAC7C,QAAI,UAAU;AACZ,eAAS,UAAU;AACnB;AAAA,IACF;AACA,QAAI,eAAe,KAAK,OAAO,gBAAgB,KAAK;AACpD,QAAI,CAAC,aAAc,gBAAe,KAAK,OAAO,gBAAgB,KAAK;AAInE,iBAAa,mBAAmB,aAAa;AAC7C,iBAAa,mBAAmB,OAAO;AACvC,iBAAa,mBAAmB,cAAc;AAC9C,SAAK,cAAc,IAAI,OAAO,YAAY;AAC1C,iBAAa,GAAG,eAAe,aAAW;AACxC,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,gBAAgB,OAAO,QAAQ,IAAI;AAAA,IAC1C,CAAC;AACD,iBAAa,GAAG,SAAS,CAAC,YAAsC;AAC9D,UAAI,KAAK,cAAc,UAAW;AAClC,WAAK,UAAU,OAAO;AAAA,IACxB,CAAC;AACD,iBAAa,GAAG,gBAAgB,MAAM;AACpC,UAAI,KAAK,cAAc,UAAW,MAAK,cAAc,OAAO,KAAK;AAAA,IACnE,CAAC;AACD,iBAAa,UAAU;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,OAAqB;AACvC,UAAM,eAAe,KAAK,cAAc,IAAI,KAAK,KAAK,KAAK,QAAQ,gBAAgB,KAAK;AACxF,QAAI,CAAC,aAAc;AACnB,iBAAa,mBAAmB,aAAa;AAC7C,iBAAa,mBAAmB,OAAO;AACvC,iBAAa,mBAAmB,cAAc;AAC9C,SAAK,cAAc,OAAO,KAAK;AAC/B,iBAAa,YAAY;AAAA,EAC3B;AAAA;AAAA,EAGQ,QAAQ,OAAe,MAAe,WAAoB,WAA0B;AAC1F,QAAI,CAAC,KAAK,OAAQ,QAAO,KAAK,UAAU,IAAI,MAAM,uCAAuC,CAAC;AAC1F,UAAM,YAAY,KAAK;AAIvB,UAAM,cAAc,cAAc,UAAa,cAAc;AAC7D,UAAM,UAAU,cACZ;AAAA,MACE;AAAA,MACA,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU;AAAA,MAC/C,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU;AAAA,IACjD,IACA;AACJ,SAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,EAAE,MAAM,WAAS;AACtD,UAAI,KAAK,cAAc,UAAW,MAAK,UAAU,KAAK;AAAA,IACxD,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,OAAe,MAAqB;AAC1D,QAAI,CAAC,MAAO;AACZ,QAAI,KAAK,gBAAgB,gBAAgB,aAAa;AACpD,WAAK,KAAK,EAAE,MAAM,uBAAuB,aAAa,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC;AAC3E;AAAA,IACF;AACA,UAAM,cAAc,wBAA+B,MAAM,KAAK;AAC9D,QAAI,CAAC,YAAa;AAClB,SAAK,KAAK;AAAA,MACR,MAAM,uBAAuB;AAAA,MAC7B,OAAO,YAAY;AAAA,MACnB,MAAM,YAAY;AAAA,MAClB,GAAG,oBAAoB,YAAY,WAAW,YAAY,SAAS;AAAA,IACrE,CAAC;AAAA,EACH;AAAA;AAAA,EAGQ,OAAa;AAGnB,SAAK,aAAa;AAGlB,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,sBAAsB;AACnD,cAAQ,OAAO,IAAI,MAAM,gEAAgE,CAAC;AAAA,IAC5F;AACA,SAAK,qBAAqB,MAAM;AAChC,SAAK,QAAQ,WAAW;AACxB,SAAK,cAAc,MAAM;AACzB,SAAK,SAAS;AACd,SAAK,KAAK,EAAE,MAAM,uBAAuB,QAAQ,QAAQ,cAAc,aAAa,CAAC;AAAA,EACvF;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,MAAgC,WAAmB,SAAmC;AAIzG,QAAI,KAAK,cAAc,WAAW;AAChC,aAAO,QAAQ,OAAO,IAAI,MAAM,4EAA4E,CAAC;AAAA,IAC/G;AACA,UAAM,YAAY,KAAK;AACvB,SAAK,iBAAiB;AACtB,WAAO,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC9C,WAAK,qBAAqB,IAAI,WAAW,EAAE,SAAS,OAAO,CAAC;AAC5D,WAAK,KAAK;AAAA,QACR,MAAM,uBAAuB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAAA,MAC7C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEQ,aAAa,WAAmB,OAAqB;AAC3D,UAAM,UAAU,KAAK,qBAAqB,IAAI,SAAS;AACvD,QAAI,CAAC,QAAS;AACd,SAAK,qBAAqB,OAAO,SAAS;AAC1C,YAAQ,QAAQ,KAAK;AAAA,EACvB;AAAA,EAEQ,YAAY,WAAmB,OAAsB;AAC3D,UAAM,UAAU,KAAK,qBAAqB,IAAI,SAAS;AACvD,QAAI,CAAC,QAAS;AACd,SAAK,qBAAqB,OAAO,SAAS;AAC1C,YAAQ,OAAO,KAAK;AAAA,EACtB;AAAA;AAAA,EAGQ,KAAK,SAAwC,UAAgC;AACnF,SAAK,KAAK,KAAK,SAAS,QAAQ;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UAAU,OAAsB;AACtC,SAAK,KAAK,EAAE,MAAM,uBAAuB,OAAO,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,EAChF;AACF;AAKA,SAAS,gBAAgB,MAAuB;AAC9C,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,UAAU;AAEhB,QAAM,OAAO,QAAQ;AACrB,QAAM,SAAS,OAAO,SAAS,YAAY,SAAS,OAAQ,KAAiC,UAAU;AACvG,QAAM,QAAQ,UAAU,QAAQ;AAChC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAKA,IAAM,cAAc,oBAAI,IAAY,CAAC,cAAc,YAAY,cAAc,SAAS,CAAC;AACvF,SAAS,gBAAgB,QAA6D;AACpF,SAAO,YAAY,IAAI,MAAM,IAAK,SAAwC;AAC5E;;;ACxSO,IAAM,gCAAgC;AAItC,IAAM,qCAAqC;AAG3C,IAAM,6BACX,gCAAgC;;;ACqD3B,IAAM,4BAAN,MAEP;AAAA,EACW,kBAAkB;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,UAAgC;AAAA,EAChC,SAAwB;AAAA,EACxB,eAAoC;AAAA,EACpC,OAA2B;AAAA,EAC3B,kBAAyD;AAAA,EACzD,eAAgD;AAAA,EAChD,WAAmD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOnD,aAAa;AAAA,EAErB,IAAI,qBAA6B;AAC/B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,YAAY,UAA4C,CAAC,GAAG;AAC1D,SAAK,aAAa,QAAQ,cAAc,YAAY;AACpD,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,sBAAsB,QAAQ,uBAAuB;AAC1D,4BAAwB,KAAK,mBAAmB;AAChD,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,sBAAsB,QAAQ;AACnC,SAAK,qBAAqB,QAAQ;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAiC,UAAiD;AACtF,QAAI,KAAK,QAAS;AAClB,8BAA0B,OAAO,WAAW,CAAC,CAAC;AAC9C,SAAK,WAAW;AAIhB,UAAM,UAAU,oBAAoB,KAAK,YAAY;AAAA,MACnD,QAAQ,KAAK,kBAAkB,UAAa,OAAO,WAAW;AAAA,MAC9D,cAAc,KAAK,wBAAwB,UAAa,OAAO,iBAAiB;AAAA,IAClF,CAAC;AACD,UAAM,QAAQ,KAAK,eAAe,MAAM;AACxC,QAAI,YAAY,eAAe,QAAQ;AACrC,WAAK,kBAAkB,KAAK;AAC5B,WAAK,UAAU,eAAe;AAC9B;AAAA,IACF;AACA,QAAI,YAAY,eAAe,WAAW;AACxC,WAAK,qBAAqB,KAAK;AAC/B,WAAK,UAAU,eAAe;AAC9B;AAAA,IACF;AACA,SAAK,eAAe,IAAI,kBAAyB,EAAE,MAAM,KAAK,oBAAoB,CAAC;AACnF,SAAK,aAAa,OAAO,KAAK;AAC9B,SAAK,UAAU,eAAe;AAAA,EAChC;AAAA,EAEA,UAAU,OAAqB;AAC7B,SAAK,KAAK,EAAE,MAAM,sBAAsB,WAAW,MAAM,CAAC;AAAA,EAC5D;AAAA,EAEA,YAAY,OAAqB;AAC/B,SAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,MAAM,CAAC;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAe,MAAe,SAAuC;AAC3E,QAAI,KAAK,gBAAgB,gBAAgB,aAAa;AACpD,WAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,OAAO,MAAM,GAAG,oBAAoB,SAAS,WAAW,SAAS,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;AAC1I;AAAA,IACF;AACA,SAAK,KAAK,EAAE,MAAM,sBAAsB,SAAS,OAAO,MAAM,GAAG,oBAAoB,SAAS,WAAW,SAAS,SAAS,EAAE,CAAC;AAAA,EAChI;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAa;AACX,QAAI,CAAC,KAAK,QAAS;AACnB,SAAK;AACL,SAAK,KAAK,EAAE,MAAM,sBAAsB,KAAK,CAAC;AAC9C,SAAK,eAAe;AACpB,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,oBAAoB,WAAW,KAAK,aAAa;AAC7D,WAAK,OAAO,oBAAoB,SAAS,KAAK,iBAAiB;AAC/D,WAAK,OAAO,UAAU;AAAA,IACxB;AACA,QAAI,KAAK,cAAc;AACrB,WAAK,4BAA4B;AACjC,WAAK,MAAM,MAAM;AAAA,IACnB;AACA,SAAK,aAAa;AAClB,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKQ,eAAe,QAAwD;AAC7E,WAAO;AAAA,MACL,MAAM,sBAAsB;AAAA,MAC5B,KAAK,OAAO;AAAA,MACZ,QAAQ,OAAO,WAAW,CAAC;AAAA,MAC3B,GAAI,KAAK,eAAe,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MAClD,GAAI,KAAK,qBAAqB,EAAE,aAAa,KAAK,IAAI,CAAC;AAAA,MACvD,GAAI,KAAK,wBAAwB,gCAC7B,EAAE,qBAAqB,KAAK,oBAAoB,IAChD,CAAC;AAAA,IACP;AAAA,EACF;AAAA;AAAA,EAGQ,qBAAqB,OAAoC;AAC/D,SAAK,cAAc;AACnB,UAAM,UAAU,KAAK,iBAAiB,qBAAqB;AAC3D,SAAK,SAAS;AACd,WAAO,iBAAiB,WAAW,KAAK,aAAa;AACrD,WAAO,iBAAiB,SAAS,KAAK,iBAAiB;AACvD,WAAO,YAAY,KAAK;AAAA,EAC1B;AAAA;AAAA,EAGQ,kBAAkB,OAAoC;AAC5D,SAAK,cAAc;AACnB,UAAM,UAAU,KAAK,uBAAuB,2BAA2B;AACvE,SAAK,eAAe;AACpB,UAAM,OAAO,OAAO;AACpB,SAAK,OAAO;AACZ,SAAK,iBAAiB,WAAW,KAAK,aAAa;AACnD,SAAK,iBAAiB,gBAAgB,KAAK,eAAe;AAC1D,WAAO,iBAAiB,SAAS,KAAK,uBAAuB;AAC7D,SAAK,MAAM;AACX,SAAK,YAAY,KAAK;AACtB,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA,EAGiB,gBAAgB,CAAC,UAAuD;AACvF,SAAK,aAAa,MAAM,IAAI;AAAA,EAC9B;AAAA;AAAA,EAGiB,sBAAsB,CAAC,YAA2C;AACjF,SAAK,aAAa,OAAO;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,SAA8C;AACjE,QAAI,QAAQ,SAAS,uBAAuB,OAAQ,MAAK,UAAU,SAAS,QAAQ,MAAM;AAC1F,QAAI,QAAQ,SAAS,uBAAuB,QAAS,MAAK,UAAU,UAAU,EAAE,OAAO,QAAQ,OAAO,MAAM,QAAQ,MAAM,GAAG,oBAAoB,QAAQ,WAAW,QAAQ,SAAS,EAAE,CAAC;AACxL,QAAI,QAAQ,SAAS,uBAAuB,YAAa,MAAK,UAAU,UAAU,EAAE,OAAO,QAAQ,OAAO,MAAM,QAAQ,MAAe,GAAG,oBAAoB,QAAQ,WAAW,QAAQ,SAAS,EAAE,CAAC;AACrM,QAAI,QAAQ,SAAS,uBAAuB,MAAO,MAAK,UAAU,QAAQ,uBAAuB,QAAQ,KAAK,CAAC;AAC/G,QAAI,QAAQ,SAAS,uBAAuB,cAAe,MAAK,oBAAoB,QAAQ,WAAW,QAAQ,MAAM,QAAQ,OAAO;AAAA,EACtI;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAAoB,WAAmB,MAAgC,SAAmC;AAMhH,UAAM,aAAa,KAAK;AACxB,UAAM,SAAS,KAAK;AACpB,UAAM,OAAO,KAAK;AAClB,UAAM,eAAe,KAAK;AAC1B,UAAM,mBAAmB,MACvB,KAAK,eAAe,cACpB,KAAK,WAAW,UAChB,KAAK,SAAS,QACd,KAAK,iBAAiB;AACxB,UAAM,WAAW,KAAK;AACtB,QAAI;AACJ,QAAI;AACF,cAAQ,SAAS,kBAAkB,UAAU,kBACzC,SAAS,gBAAgB,WAAW,EAAE,IACtC,UAAU,WAAW;AAAA,IAC3B,SAAS,OAAO;AAId,UAAI,iBAAiB,GAAG;AACtB,aAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,WAAW,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,MAChG;AACA;AAAA,IACF;AACA,YAAQ,QAAQ,KAAK,EAAE;AAAA,MACrB,WAAS;AACP,YAAI,CAAC,iBAAiB,EAAG;AACzB,YAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,eAAK,KAAK;AAAA,YACR,MAAM,sBAAsB;AAAA,YAC5B;AAAA,YACA,OAAO,eAAe,IAAI,MAAM,uCAAuC,IAAI,GAAG,CAAC;AAAA,UACjF,CAAC;AACD;AAAA,QACF;AACA,aAAK,KAAK,EAAE,MAAM,sBAAsB,gBAAgB,WAAW,MAAM,CAAC;AAAA,MAC5E;AAAA,MACA,WAAS;AACP,YAAI,CAAC,iBAAiB,EAAG;AACzB,aAAK,KAAK,EAAE,MAAM,sBAAsB,aAAa,WAAW,OAAO,eAAe,KAAK,EAAE,CAAC;AAAA,MAChG;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,eAAe,SAAuB;AAI5C,SAAK,QAAQ,oBAAoB,WAAW,KAAK,aAAa;AAC9D,SAAK,QAAQ,oBAAoB,SAAS,KAAK,iBAAiB;AAChE,SAAK,QAAQ,UAAU;AACvB,SAAK,4BAA4B;AACjC,SAAK,MAAM,MAAM;AACjB,SAAK,eAAe;AACpB,SAAK,aAAa;AAClB,SAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,CAAC;AACzC,SAAK,UAAU,SAAS,cAAc,KAAK;AAAA,EAC7C;AAAA;AAAA,EAGQ,8BAAoC;AAC1C,SAAK,MAAM,oBAAoB,WAAW,KAAK,aAAa;AAC5D,SAAK,MAAM,oBAAoB,gBAAgB,KAAK,eAAe;AACnE,SAAK,cAAc,oBAAoB,SAAS,KAAK,uBAAuB;AAAA,EAC9E;AAAA;AAAA,EAGQ,iBAAuB;AAC7B,QAAI,KAAK,oBAAoB,KAAM;AAGnC,QAAI,KAAK,wBAAwB,SAAU;AAC3C,SAAK,kBAAkB,YAAY,MAAM;AACvC,WAAK,KAAK,EAAE,MAAM,sBAAsB,KAAK,CAAC;AAAA,IAChD,GAAG,KAAK,mBAAmB;AAAA,EAC7B;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,KAAK,oBAAoB,KAAM,eAAc,KAAK,eAAe;AACrE,SAAK,kBAAkB;AAAA,EACzB;AAAA,EAEiB,oBAAoB,MAAM;AACzC,SAAK,eAAe,2BAA2B;AAAA,EACjD;AAAA,EAEiB,kBAAkB,MAAM;AACvC,SAAK,eAAe,mDAAmD;AAAA,EACzE;AAAA,EAEiB,0BAA0B,MAAM;AAC/C,SAAK,eAAe,kCAAkC;AAAA,EACxD;AAAA;AAAA,EAGQ,eAAqB;AAC3B,SAAK,SAAS;AACd,SAAK,eAAe;AACpB,SAAK,OAAO;AACZ,SAAK,UAAU;AACf,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,KAAK,SAAgC,UAAgC;AAC3E,QAAI,KAAK,QAAQ;AACf,qBAAe,KAAK,QAAQ,SAAS,QAAQ;AAC7C;AAAA,IACF;AACA,QAAI,KAAK,MAAM;AACb,qBAAe,KAAK,MAAM,SAAS,QAAQ;AAC3C;AAAA,IACF;AACA,QAAI,KAAK,cAAc;AACrB,WAAK,aAAa,OAAO,OAAO;AAChC;AAAA,IACF;AACA,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACF;AAeO,SAAS,wBACd,SACiD;AACjD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AACJ,SAAO,IAAI,gBAAgB;AAAA,IACzB,GAAG;AAAA,IACH,WAAW;AAAA,IACX,YAAY,cAAc,WAAW;AAAA,IACrC,eAAe;AAAA,IACf,WAAW,IAAI,0BAAiC;AAAA,MAC9C,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,MACzC,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACrD,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,aAAa;AAAA,MACrD,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,MACnC,GAAI,wBAAwB,SAAY,CAAC,IAAI,EAAE,oBAAoB;AAAA,MACnE,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AACH;AAmBA,SAAS,sBAA8B;AACrC,MAAI;AACJ,MAAI;AACF,gBAAY,IAAI,IAAI,0BAA0B,YAAY,GAAG;AAAA,EAC/D,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,OAAO,WAAW;AAAA,IAC3B,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC;AACH;AASA,SAAS,4BAA0C;AACjD,MAAI;AACJ,MAAI;AACF,gBAAY,IAAI,IAAI,iCAAiC,YAAY,GAAG;AAAA,EACtE,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,aAAa,WAAW;AAAA,IACjC,MAAM,GAAG,sBAAsB;AAAA,IAC/B,MAAM;AAAA,EACR,CAAC;AACH;AAMA,SAAS,eACP,QACA,SACA,UACM;AACN,MAAI,SAAU,QAAO,YAAY,SAAS,QAA0B;AAAA,MAC/D,QAAO,YAAY,OAAO;AACjC;",
   "names": []
 }