deepspace 0.7.0 → 0.8.1

package/dist/index.js

@@ -9,6 +9,16 @@ var DEV_CONFIG = {
   mainAppUrl: "http://localhost:5173",
   dashboardUrl: "http://localhost:5174"
 };
+var STAGING_CONFIG = {
+  name: "staging",
+  apiUrl: "https://api.deepspacesites.com",
+  platformWorkerUrl: "https://platform.deepspacesites.com",
+  authUrl: "https://auth.deepspacesites.com",
+  authSignInUrl: "https://auth.deepspacesites.com/login/social",
+  authSignUpUrl: "https://auth.deepspacesites.com/login/social",
+  mainAppUrl: "https://spacestest.com",
+  dashboardUrl: "https://dashboard.deepspacesites.com"
+};
 var PROD_CONFIG = {
   name: "prod",
   apiUrl: "https://api-worker.deep.space",
@@ -24,6 +34,7 @@ function parseEnv(value) {
   if (!value) return null;
   const v = value.toLowerCase();
   if (v === "dev" || v === "development") return "dev";
+  if (v === "staging") return "staging";
   if (v === "prod" || v === "production") return "prod";
   return null;
 }
@@ -64,6 +75,10 @@ function detectEnvironment() {
       cachedEnvironment = "dev";
       return "dev";
     }
+    if (hostname === "spacestest.com" || hostname.endsWith(".spacestest.com") || hostname === "deepspacesites.com" || hostname.endsWith(".deepspacesites.com")) {
+      cachedEnvironment = "staging";
+      return "staging";
+    }
     if (hostname === "app.space" || hostname.endsWith(".app.space") || hostname === "deep.space" || hostname.endsWith(".deep.space")) {
       cachedEnvironment = "prod";
       return "prod";
@@ -74,7 +89,7 @@ function detectEnvironment() {
 }
 function getEnvironmentConfig() {
   const env = detectEnvironment();
-  return env === "dev" ? DEV_CONFIG : PROD_CONFIG;
+  return env === "dev" ? DEV_CONFIG : env === "staging" ? STAGING_CONFIG : PROD_CONFIG;
 }
 function getApiUrl() {
   return getEnvironmentConfig().apiUrl;
@@ -371,6 +386,14 @@ var Awareness = class {
       this.emit({ added: [], updated: [], removed });
     }
   }
+  /** Release all state and listeners owned by this awareness instance. */
+  destroy() {
+    this.setLocalState(null);
+    this.states.clear();
+    this.meta.clear();
+    this.updateListeners.clear();
+    this.changeListeners.clear();
+  }
 };
 function encodeAwarenessMessage(awareness, clientIds) {
   const encoder = createEncoder();
@@ -1156,6 +1179,229 @@ import {
   useMemo as useMemo2
 } from "react";
 
+// src/client/storage/ScopeRegistry.tsx
+import { createContext, useContext, useCallback, useRef as useRef3, useMemo } from "react";
+import { jsx as jsx5 } from "react/jsx-runtime";
+var ScopeRegistryContext = createContext(null);
+function useScopeRegistry() {
+  return useContext(ScopeRegistryContext);
+}
+function ScopeRegistryProvider({ children }) {
+  const mapRef = useRef3(/* @__PURE__ */ new Map());
+  const register = useCallback((scopeId, collections, entry) => {
+    for (const name of collections) {
+      mapRef.current.set(name, { scopeId, entry });
+    }
+  }, []);
+  const unregister = useCallback((scopeId, collections) => {
+    for (const name of collections) {
+      const existing = mapRef.current.get(name);
+      if (existing?.scopeId === scopeId) {
+        mapRef.current.delete(name);
+      }
+    }
+  }, []);
+  const resolve = useCallback((collection) => {
+    return mapRef.current.get(collection)?.entry ?? null;
+  }, []);
+  const value = useMemo(() => ({ register, unregister, resolve }), [register, unregister, resolve]);
+  return /* @__PURE__ */ jsx5(ScopeRegistryContext.Provider, { value, children });
+}
+
+// src/client/storage/context.tsx
+import { Fragment as Fragment5, jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
+var RecordContext = createContext2(null);
+function useRecordContext() {
+  const ctx = useContext2(RecordContext);
+  if (!ctx) {
+    throw new Error("useRecordContext must be used within a RecordScope");
+  }
+  return ctx;
+}
+var RecordAuthContext = createContext2(null);
+function useRecordAuth() {
+  return useContext2(RecordAuthContext);
+}
+function RecordProviderState({
+  children,
+  fetchUser,
+  allowAnonymous = false,
+  getAuthToken: getAuthTokenProp,
+  onPermissionError: onPermissionErrorProp,
+  onValidationError: onValidationErrorProp
+}) {
+  const [userProfile, setUserProfile] = useState3(null);
+  const [userProfileLoading, setUserProfileLoading] = useState3(true);
+  const onPermissionErrorRef = useRef4(onPermissionErrorProp);
+  onPermissionErrorRef.current = onPermissionErrorProp;
+  const onValidationErrorRef = useRef4(onValidationErrorProp);
+  onValidationErrorRef.current = onValidationErrorProp;
+  const onPermissionError = useCallback2((title, detail) => {
+    onPermissionErrorRef.current?.(title, detail);
+  }, []);
+  const onValidationError = useCallback2((title, detail) => {
+    onValidationErrorRef.current?.(title, detail);
+  }, []);
+  const refetchUserProfile = useCallback2(async () => {
+    try {
+      const profile = await fetchUser();
+      setUserProfile(profile);
+    } catch (err) {
+      console.error("[RecordProvider] Failed to refetch user profile:", err);
+    }
+  }, [fetchUser]);
+  useEffect4(() => {
+    let mounted = true;
+    setUserProfileLoading(true);
+    fetchUser().then((profile) => {
+      if (mounted) setUserProfile(profile);
+    }).finally(() => {
+      if (mounted) setUserProfileLoading(false);
+    });
+    const interval = setInterval(() => {
+      if (mounted) {
+        fetchUser().then((p) => {
+          if (mounted) setUserProfile(p);
+        }).catch(() => {
+        });
+      }
+    }, 3e4);
+    return () => {
+      mounted = false;
+      clearInterval(interval);
+    };
+  }, [fetchUser]);
+  const authValue = useMemo2(
+    () => ({
+      userProfile,
+      userProfileLoading,
+      refetchUserProfile,
+      allowAnonymous,
+      getAuthToken: getAuthTokenProp,
+      onPermissionError,
+      onValidationError
+    }),
+    [
+      userProfile,
+      userProfileLoading,
+      refetchUserProfile,
+      allowAnonymous,
+      getAuthTokenProp,
+      onPermissionError,
+      onValidationError
+    ]
+  );
+  return /* @__PURE__ */ jsx6(RecordAuthContext.Provider, { value: authValue, children: /* @__PURE__ */ jsx6(ScopeRegistryProvider, { children }) });
+}
+var seenWriteErrors = /* @__PURE__ */ new Set();
+function defaultOnWriteError(error) {
+  const key = JSON.stringify([error.kind, error.title, error.detail]);
+  if (seenWriteErrors.has(key)) return;
+  if (seenWriteErrors.size >= 100) seenWriteErrors.clear();
+  seenWriteErrors.add(key);
+  console.error(
+    `[deepspace] Write rejected \u2014 ${error.title}: ${error.detail}
+This error reached no UI. Pass onWriteError to <RecordProvider> (e.g. wire it to a toast) so users see rejected writes. (Further repeats of this error are suppressed.)`
+  );
+}
+var warnedSignedOutNull = false;
+function SignedOutDiagnostic() {
+  return /* @__PURE__ */ jsxs4(
+    "div",
+    {
+      role: "alert",
+      "data-deepspace-diagnostic": "signed-out",
+      style: {
+        margin: "24px auto",
+        maxWidth: 560,
+        padding: "16px 20px",
+        border: "1px solid #d97706",
+        borderRadius: 8,
+        background: "#fffbeb",
+        color: "#78350f",
+        fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
+        fontSize: 13,
+        lineHeight: 1.5
+      },
+      children: [
+        /* @__PURE__ */ jsx6("strong", { children: "DeepSpace: nothing rendered because you're signed out." }),
+        /* @__PURE__ */ jsxs4("p", { style: { margin: "8px 0 0" }, children: [
+          "This page is inside a ",
+          "<RecordProvider>",
+          " without ",
+          /* @__PURE__ */ jsx6("code", { children: "allowAnonymous" }),
+          ", which renders nothing for signed-out visitors. Either add",
+          " ",
+          /* @__PURE__ */ jsx6("code", { children: "<RecordProvider allowAnonymous>" }),
+          " to show the page publicly, or require sign-in before this point (e.g. a protected route / AuthGate)."
+        ] }),
+        /* @__PURE__ */ jsx6("p", { style: { margin: "8px 0 0", opacity: 0.8 }, children: "This notice only appears on localhost \u2014 a deployed app renders nothing here." })
+      ]
+    }
+  );
+}
+function RecordProvider({
+  children,
+  allowAnonymous = false,
+  getAuthToken: getAuthTokenProp,
+  onWriteError = defaultOnWriteError
+}) {
+  const { isLoaded, isSignedIn } = useAuth();
+  const fetchUser = useCallback2(async () => {
+    if (!isSignedIn) return null;
+    const token = await getAuthToken();
+    if (!token) return null;
+    try {
+      const parts = token.split(".");
+      const payload = JSON.parse(atob(parts[1].replace(/-/g, "+").replace(/_/g, "/")));
+      return {
+        id: payload.sub,
+        name: payload.name ?? "",
+        email: payload.email ?? "",
+        imageUrl: payload.image ?? void 0
+      };
+    } catch {
+      return null;
+    }
+  }, [isSignedIn]);
+  const getAuthTokenFn = useCallback2(async () => {
+    if (getAuthTokenProp) return getAuthTokenProp();
+    if (!isSignedIn) return null;
+    return getAuthToken();
+  }, [getAuthTokenProp, isSignedIn]);
+  if (!isLoaded) {
+    return /* @__PURE__ */ jsx6(Fragment5, { children: null });
+  }
+  if (!isSignedIn && !allowAnonymous) {
+    if (isLocalDevHost()) {
+      if (!warnedSignedOutNull) {
+        warnedSignedOutNull = true;
+        console.warn(
+          "[deepspace] RecordProvider rendered nothing: signed out and allowAnonymous is off. Add `allowAnonymous` to show this page to signed-out visitors, or require sign-in before this point."
+        );
+      }
+      return /* @__PURE__ */ jsx6(SignedOutDiagnostic, {});
+    }
+    return /* @__PURE__ */ jsx6(Fragment5, { children: null });
+  }
+  const onPermissionError = (title, detail) => onWriteError({ kind: "permission", title, detail });
+  const onValidationError = (title, detail) => onWriteError({ kind: "validation", title, detail });
+  return /* @__PURE__ */ jsx6(
+    RecordProviderState,
+    {
+      fetchUser,
+      allowAnonymous,
+      getAuthToken: getAuthTokenFn,
+      onPermissionError,
+      onValidationError,
+      children
+    }
+  );
+}
+
+// src/client/storage/RecordScope.tsx
+import { useEffect as useEffect5, useState as useState4, useCallback as useCallback3, useRef as useRef5, useMemo as useMemo3 } from "react";
+
 // src/client/storage/store.ts
 var EMPTY_RECORDS = [];
 var EMPTY_SNAPSHOT = { status: "loading", records: EMPTY_RECORDS };
@@ -1457,9 +1703,6 @@ var RecordSocket = class {
     } catch {
     }
     if (this.connectToken !== myToken || this.destroyed) return;
-    for (const [key, value] of Object.entries(config.extraParams ?? {})) {
-      params.set(key, value);
-    }
     if (identityTag !== void 0) this.identityTag = identityTag;
     const protocol = typeof window !== "undefined" && window.location.protocol === "https:" ? "wss:" : "ws:";
     const baseUrl = config.wsUrl?.replace(/^http/, "ws") ?? `${protocol}//${typeof window !== "undefined" ? window.location.host : ""}`;
@@ -1590,588 +1833,111 @@ var RecordSocket = class {
       }
     };
   }
-  // ── message dispatch ──────────────────────────────────────────────────────
-  resubscribeAll(ws) {
-    for (const [subscriptionId, queryKey] of this.subscriptions) {
-      try {
-        const query = JSON.parse(queryKey);
-        ws.send(JSON.stringify({ type: MSG.SUBSCRIBE, payload: { subscriptionId, query } }));
-      } catch {
-      }
-    }
-  }
-  handleMessage(event) {
-    if (event.data instanceof ArrayBuffer) {
-      this.binaryHandlers.forEach((h) => h(event.data));
-      return;
-    }
-    let msg;
-    try {
-      msg = JSON.parse(event.data);
-    } catch {
-      console.error("[RecordSocket] Failed to parse message");
-      return;
-    }
-    const { type, payload } = msg;
-    const { store, listeners } = this.config;
-    switch (type) {
-      case MSG.USER_INFO: {
-        const { role } = payload;
-        listeners.onRole(role);
-        listeners.onReady(true);
-        this.reconnectAttempt = 0;
-        this.sendMessage({ type: MSG.USER_LIST, payload: {} });
-        break;
-      }
-      case MSG.USER_LIST:
-        listeners.onUsers(payload.users);
-        break;
-      case MSG.QUERY_RESULT: {
-        const { subscriptionId, records } = payload;
-        const queryKey = this.subscriptions.get(subscriptionId);
-        if (queryKey !== void 0) store.setQueryResult(queryKey, records);
-        break;
-      }
-      case MSG.RECORD_CHANGE: {
-        const { collection, record, changeType } = payload;
-        for (const queryKey of this.subscriptions.values()) {
-          try {
-            const query = JSON.parse(queryKey);
-            if (query.collection !== collection) continue;
-            const matches = recordMatchesWhere(record, query.where);
-            const exists = store.hasRecord(queryKey, record.recordId);
-            if (changeType === "delete") {
-              if (exists) store.applyChange(queryKey, record, "delete");
-            } else if (changeType === "create") {
-              if (matches) store.applyChange(queryKey, record, "create");
-            } else {
-              if (matches && exists) store.applyChange(queryKey, record, "update");
-              else if (matches && !exists) store.applyChange(queryKey, record, "create");
-              else if (!matches && exists) store.applyChange(queryKey, record, "delete");
-            }
-          } catch {
-          }
-        }
-        break;
-      }
-      case MSG.ERROR: {
-        const { subscriptionId, error } = payload;
-        if (subscriptionId) {
-          const queryKey = this.subscriptions.get(subscriptionId);
-          if (queryKey !== void 0) store.setError(queryKey, error);
-        } else {
-          const parsed = parseServerError(error);
-          if (parsed.isPermissionError) listeners.onPermissionError?.(parsed.title, parsed.detail);
-          else listeners.onValidationError?.(parsed.title, parsed.detail);
-        }
-        break;
-      }
-      case MSG.YJS_JOIN: {
-        const { collection, recordId, fieldName, canWrite } = payload;
-        const docKey = `${collection}:${recordId}:${fieldName}`;
-        this.yjsJoinHandlers.get(docKey)?.forEach((h) => h(canWrite));
-        break;
-      }
-      case MSG.ACK: {
-        const { requestId, success, error, ...rest } = payload;
-        const pending = this.pendingRequests.get(requestId);
-        if (pending) {
-          clearTimeout(pending.timer);
-          this.pendingRequests.delete(requestId);
-          if (success) pending.resolve(rest);
-          else pending.reject(new Error(error || "Mutation rejected"));
-        }
-        break;
-      }
-      case MSG.LIST_SCHEMAS: {
-        const { schemas } = payload;
-        listeners.onSchemas?.(schemas ?? []);
-        break;
-      }
-      case MSG.RESUBSCRIBE: {
-        if (this.ws?.readyState === WS_OPEN) this.resubscribeAll(this.ws);
-        break;
-      }
-    }
-  }
-};
-
-// src/client/storage/ScopeRegistry.tsx
-import { createContext, useContext, useCallback, useRef as useRef3, useMemo } from "react";
-import { jsx as jsx5 } from "react/jsx-runtime";
-var ScopeRegistryContext = createContext(null);
-function useScopeRegistry() {
-  return useContext(ScopeRegistryContext);
-}
-function ScopeRegistryProvider({ children }) {
-  const mapRef = useRef3(/* @__PURE__ */ new Map());
-  const register = useCallback((scopeId, collections, entry) => {
-    for (const name of collections) {
-      mapRef.current.set(name, { scopeId, entry });
-    }
-  }, []);
-  const unregister = useCallback((scopeId, collections) => {
-    for (const name of collections) {
-      const existing = mapRef.current.get(name);
-      if (existing?.scopeId === scopeId) {
-        mapRef.current.delete(name);
-      }
-    }
-  }, []);
-  const resolve = useCallback((collection) => {
-    return mapRef.current.get(collection)?.entry ?? null;
-  }, []);
-  const value = useMemo(() => ({ register, unregister, resolve }), [register, unregister, resolve]);
-  return /* @__PURE__ */ jsx5(ScopeRegistryContext.Provider, { value, children });
-}
-
-// src/client/storage/context.tsx
-import { Fragment as Fragment5, jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
-var RecordContext = createContext2(null);
-function useRecordContext() {
-  const ctx = useContext2(RecordContext);
-  if (!ctx) {
-    throw new Error("useRecordContext must be used within a RecordProvider");
-  }
-  return ctx;
-}
-var RecordAuthContext = createContext2(null);
-function useRecordAuth() {
-  return useContext2(RecordAuthContext);
-}
-function RecordProviderCore({
-  roomId,
-  wsUrl,
-  children,
-  fetchUser,
-  allowAnonymous = false,
-  getAuthToken: getAuthTokenProp,
-  onPermissionError: onPermissionErrorProp,
-  onValidationError: onValidationErrorProp
-}) {
-  const [userProfile, setUserProfile] = useState3(null);
-  const [userProfileLoading, setUserProfileLoading] = useState3(true);
-  const [roomRole, setRoomRole] = useState3(null);
-  const [allUsers, setAllUsers] = useState3([]);
-  const [usersLoaded, setUsersLoaded] = useState3(false);
-  const [status, setStatus] = useState3("connecting");
-  const [ready, setReady] = useState3(false);
-  const onPermissionErrorRef = useRef4(
-    void 0
-  );
-  const onValidationErrorRef = useRef4(
-    void 0
-  );
-  onPermissionErrorRef.current = onPermissionErrorProp;
-  onValidationErrorRef.current = onValidationErrorProp;
-  const storeRef = useRef4(new RecordStore());
-  const socketRef = useRef4(null);
-  const subscriptionsRef = useRef4(/* @__PURE__ */ new Map());
-  const binaryHandlersRef = useRef4(/* @__PURE__ */ new Set());
-  const yjsJoinHandlersRef = useRef4(/* @__PURE__ */ new Map());
-  const userProfileRef = useRef4(null);
-  userProfileRef.current = userProfile;
-  const getAuthTokenRef = useRef4(getAuthTokenProp);
-  getAuthTokenRef.current = getAuthTokenProp;
-  const refetchUserProfile = useCallback2(async () => {
-    try {
-      const profile = await fetchUser();
-      setUserProfile(profile);
-    } catch (err) {
-      console.error("[RecordProvider] Failed to refetch user profile:", err);
-    }
-  }, [fetchUser]);
-  useEffect4(() => {
-    let mounted = true;
-    setUserProfileLoading(true);
-    fetchUser().then((profile) => {
-      if (mounted) setUserProfile(profile);
-    }).finally(() => {
-      if (mounted) setUserProfileLoading(false);
-    });
-    const interval = setInterval(() => {
-      if (mounted)
-        fetchUser().then((p) => {
-          if (mounted) setUserProfile(p);
-        }).catch(() => {
-        });
-    }, 3e4);
-    return () => {
-      mounted = false;
-      clearInterval(interval);
-    };
-  }, [fetchUser]);
-  const userProfileId = userProfile?.id ?? null;
-  useEffect4(() => {
-    if (userProfileLoading) return;
-    const socket = new RecordSocket({
-      roomId,
-      store: storeRef.current,
-      subscriptions: subscriptionsRef.current,
-      binaryHandlers: binaryHandlersRef.current,
-      yjsJoinHandlers: yjsJoinHandlersRef.current,
-      getToken: () => (getAuthTokenRef.current ?? getAuthToken)(),
-      wsUrl,
-      log: (event, detail) => debugLog(`[WS] ${event}`, detail),
-      listeners: {
-        onStatus: setStatus,
-        onReady: setReady,
-        onRole: setRoomRole,
-        onUsers: (users) => {
-          setAllUsers(users);
-          setUsersLoaded(true);
-        },
-        onPermissionError: (title, detail) => onPermissionErrorRef.current?.(title, detail),
-        onValidationError: (title, detail) => onValidationErrorRef.current?.(title, detail)
-      }
-    });
-    socketRef.current = socket;
-    if (userProfileId || allowAnonymous) {
-      void socket.connect(userProfileId ?? "");
-    }
-    return () => {
-      socketRef.current = null;
-      socket.destroy();
-      setStatus("connecting");
-      setReady(false);
-    };
-  }, [roomId, wsUrl, userProfileId, userProfileLoading, allowAnonymous]);
-  useEffect4(() => {
-    const onVisible = () => {
-      if (document.visibilityState === "visible" && !socketRef.current?.isOpen) {
-        debugLog("[WS] Reconnecting after visibility change");
-        socketRef.current?.resetBackoff();
-        void socketRef.current?.connect();
-      }
-    };
-    document.addEventListener("visibilitychange", onVisible);
-    return () => document.removeEventListener("visibilitychange", onVisible);
-  }, []);
-  const sendMessage = useCallback2((message) => {
-    socketRef.current?.sendMessage(message);
-  }, []);
-  const setUserRole = useCallback2(
-    (userId, role) => {
-      sendMessage({ type: MSG.SET_ROLE, payload: { userId, role } });
-    },
-    [sendMessage]
-  );
-  const requestUserList = useCallback2(() => {
-    sendMessage({ type: MSG.USER_LIST, payload: {} });
-  }, [sendMessage]);
-  const registerSubscription = useCallback2((subscriptionId, queryKey) => {
-    subscriptionsRef.current.set(subscriptionId, queryKey);
-  }, []);
-  const unregisterSubscription = useCallback2((subscriptionId) => {
-    subscriptionsRef.current.delete(subscriptionId);
-  }, []);
-  const sendBinary = useCallback2((data) => {
-    socketRef.current?.sendBinary(data);
-  }, []);
-  const onBinaryMessage = useCallback2((handler) => {
-    binaryHandlersRef.current.add(handler);
-    return () => {
-      binaryHandlersRef.current.delete(handler);
-    };
-  }, []);
-  const registerYjsJoinHandler = useCallback2(
-    (docKey, handler) => {
-      const handlers = yjsJoinHandlersRef.current;
-      if (!handlers.has(docKey)) handlers.set(docKey, /* @__PURE__ */ new Set());
-      handlers.get(docKey).add(handler);
-      return () => {
-        const set = handlers.get(docKey);
-        if (set) {
-          set.delete(handler);
-          if (set.size === 0) handlers.delete(docKey);
-        }
-      };
-    },
-    []
-  );
-  const sendConfirmed = useCallback2(
-    (message, timeoutMs = 1e4) => {
-      const socket = socketRef.current;
-      if (!socket) return Promise.reject(new Error("WebSocket not connected"));
-      return socket.sendConfirmed(message, timeoutMs);
-    },
-    []
-  );
-  const value = useMemo2(
-    () => ({
-      store: storeRef.current,
-      roomId,
-      userProfile,
-      userProfileLoading,
-      refetchUserProfile,
-      roomRole,
-      allUsers,
-      usersLoaded,
-      status,
-      ready,
-      setUserRole,
-      requestUserList,
-      registerSubscription,
-      unregisterSubscription,
-      sendMessage,
-      sendBinary,
-      onBinaryMessage,
-      registerYjsJoinHandler,
-      sendConfirmed
-    }),
-    [
-      roomId,
-      userProfile,
-      userProfileLoading,
-      refetchUserProfile,
-      roomRole,
-      allUsers,
-      usersLoaded,
-      status,
-      ready,
-      setUserRole,
-      requestUserList,
-      registerSubscription,
-      unregisterSubscription,
-      sendMessage,
-      sendBinary,
-      onBinaryMessage,
-      registerYjsJoinHandler,
-      sendConfirmed
-    ]
-  );
-  const onPermissionError = useCallback2((title, detail) => {
-    onPermissionErrorRef.current?.(title, detail);
-  }, []);
-  const onValidationError = useCallback2((title, detail) => {
-    onValidationErrorRef.current?.(title, detail);
-  }, []);
-  const authValue = useMemo2(
-    () => ({
-      userProfile,
-      userProfileLoading,
-      refetchUserProfile,
-      allowAnonymous,
-      getAuthToken: getAuthTokenProp,
-      onPermissionError,
-      onValidationError
-    }),
-    [
-      userProfile,
-      userProfileLoading,
-      refetchUserProfile,
-      allowAnonymous,
-      getAuthTokenProp,
-      onPermissionError,
-      onValidationError
-    ]
-  );
-  return /* @__PURE__ */ jsx6(RecordAuthContext.Provider, { value: authValue, children: /* @__PURE__ */ jsx6(ScopeRegistryProvider, { children: /* @__PURE__ */ jsx6(RecordContext.Provider, { value, children }) }) });
-}
-function RecordProviderAuthOnly({
-  children,
-  fetchUser,
-  allowAnonymous = false,
-  getAuthToken: getAuthTokenProp,
-  onPermissionError: onPermissionErrorProp,
-  onValidationError: onValidationErrorProp
-}) {
-  const [userProfile, setUserProfile] = useState3(null);
-  const [userProfileLoading, setUserProfileLoading] = useState3(true);
-  const onPermissionErrorRef = useRef4(onPermissionErrorProp);
-  onPermissionErrorRef.current = onPermissionErrorProp;
-  const onValidationErrorRef = useRef4(onValidationErrorProp);
-  onValidationErrorRef.current = onValidationErrorProp;
-  const onPermissionError = useCallback2((title, detail) => {
-    onPermissionErrorRef.current?.(title, detail);
-  }, []);
-  const onValidationError = useCallback2((title, detail) => {
-    onValidationErrorRef.current?.(title, detail);
-  }, []);
-  const refetchUserProfile = useCallback2(async () => {
-    try {
-      const profile = await fetchUser();
-      setUserProfile(profile);
-    } catch (err) {
-      console.error("[RecordProvider] Failed to refetch user profile:", err);
-    }
-  }, [fetchUser]);
-  useEffect4(() => {
-    let mounted = true;
-    setUserProfileLoading(true);
-    fetchUser().then((profile) => {
-      if (mounted) setUserProfile(profile);
-    }).finally(() => {
-      if (mounted) setUserProfileLoading(false);
-    });
-    const interval = setInterval(() => {
-      if (mounted) {
-        fetchUser().then((p) => {
-          if (mounted) setUserProfile(p);
-        }).catch(() => {
-        });
-      }
-    }, 3e4);
-    return () => {
-      mounted = false;
-      clearInterval(interval);
-    };
-  }, [fetchUser]);
-  const authValue = useMemo2(
-    () => ({
-      userProfile,
-      userProfileLoading,
-      refetchUserProfile,
-      allowAnonymous,
-      getAuthToken: getAuthTokenProp,
-      onPermissionError,
-      onValidationError
-    }),
-    [
-      userProfile,
-      userProfileLoading,
-      refetchUserProfile,
-      allowAnonymous,
-      getAuthTokenProp,
-      onPermissionError,
-      onValidationError
-    ]
-  );
-  return /* @__PURE__ */ jsx6(RecordAuthContext.Provider, { value: authValue, children: /* @__PURE__ */ jsx6(ScopeRegistryProvider, { children }) });
-}
-var seenWriteErrors = /* @__PURE__ */ new Set();
-function defaultOnWriteError(error) {
-  const key = JSON.stringify([error.kind, error.title, error.detail]);
-  if (seenWriteErrors.has(key)) return;
-  if (seenWriteErrors.size >= 100) seenWriteErrors.clear();
-  seenWriteErrors.add(key);
-  console.error(
-    `[deepspace] Write rejected \u2014 ${error.title}: ${error.detail}
-This error reached no UI. Pass onWriteError to <RecordProvider> (e.g. wire it to a toast) so users see rejected writes. (Further repeats of this error are suppressed.)`
-  );
-}
-var warnedIgnoredSchemas = false;
-var warnedSignedOutNull = false;
-function SignedOutDiagnostic() {
-  return /* @__PURE__ */ jsxs4(
-    "div",
-    {
-      role: "alert",
-      "data-deepspace-diagnostic": "signed-out",
-      style: {
-        margin: "24px auto",
-        maxWidth: 560,
-        padding: "16px 20px",
-        border: "1px solid #d97706",
-        borderRadius: 8,
-        background: "#fffbeb",
-        color: "#78350f",
-        fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
-        fontSize: 13,
-        lineHeight: 1.5
-      },
-      children: [
-        /* @__PURE__ */ jsx6("strong", { children: "DeepSpace: nothing rendered because you're signed out." }),
-        /* @__PURE__ */ jsxs4("p", { style: { margin: "8px 0 0" }, children: [
-          "This page is inside a ",
-          "<RecordProvider>",
-          " without ",
-          /* @__PURE__ */ jsx6("code", { children: "allowAnonymous" }),
-          ", which renders nothing for signed-out visitors. Either add",
-          " ",
-          /* @__PURE__ */ jsx6("code", { children: "<RecordProvider allowAnonymous>" }),
-          " to show the page publicly, or require sign-in before this point (e.g. a protected route / AuthGate)."
-        ] }),
-        /* @__PURE__ */ jsx6("p", { style: { margin: "8px 0 0", opacity: 0.8 }, children: "This notice only appears on localhost \u2014 a deployed app renders nothing here." })
-      ]
+  // ── message dispatch ──────────────────────────────────────────────────────
+  resubscribeAll(ws) {
+    for (const [subscriptionId, queryKey] of this.subscriptions) {
+      try {
+        const query = JSON.parse(queryKey);
+        ws.send(JSON.stringify({ type: MSG.SUBSCRIBE, payload: { subscriptionId, query } }));
+      } catch {
+      }
     }
-  );
-}
-function RecordProvider({
-  roomId,
-  schemas,
-  wsUrl,
-  children,
-  allowAnonymous = false,
-  getAuthToken: getAuthTokenProp,
-  onWriteError = defaultOnWriteError
-}) {
-  const { isLoaded, isSignedIn } = useAuth();
-  if (schemas && roomId && isLocalDevHost() && !warnedIgnoredSchemas) {
-    warnedIgnoredSchemas = true;
-    console.warn(
-      "[deepspace] RecordProvider received a `schemas` prop alongside `roomId`, but the single-scope provider ignores it \u2014 schemas are resolved server-side in this mode. Remove the `schemas` prop, or adopt the multi-scope shape and pass schemas to <RecordScope>."
-    );
   }
-  const fetchUser = useCallback2(async () => {
-    if (!isSignedIn) return null;
-    const token = await getAuthToken();
-    if (!token) return null;
+  handleMessage(event) {
+    if (event.data instanceof ArrayBuffer) {
+      this.binaryHandlers.forEach((h) => h(event.data));
+      return;
+    }
+    let msg;
     try {
-      const parts = token.split(".");
-      const payload = JSON.parse(atob(parts[1].replace(/-/g, "+").replace(/_/g, "/")));
-      return {
-        id: payload.sub,
-        name: payload.name ?? "",
-        email: payload.email ?? "",
-        imageUrl: payload.image ?? void 0
-      };
+      msg = JSON.parse(event.data);
     } catch {
-      return null;
+      console.error("[RecordSocket] Failed to parse message");
+      return;
     }
-  }, [isSignedIn]);
-  const getAuthTokenFn = useCallback2(async () => {
-    if (getAuthTokenProp) return getAuthTokenProp();
-    if (!isSignedIn) return null;
-    return getAuthToken();
-  }, [getAuthTokenProp, isSignedIn]);
-  if (!isLoaded) {
-    return /* @__PURE__ */ jsx6(Fragment5, { children: null });
-  }
-  if (!isSignedIn && !allowAnonymous) {
-    if (isLocalDevHost()) {
-      if (!warnedSignedOutNull) {
-        warnedSignedOutNull = true;
-        console.warn(
-          "[deepspace] RecordProvider rendered nothing: signed out and allowAnonymous is off. Add `allowAnonymous` to show this page to signed-out visitors, or require sign-in before this point."
-        );
+    const { type, payload } = msg;
+    const { store, listeners } = this.config;
+    switch (type) {
+      case MSG.USER_INFO: {
+        const { role } = payload;
+        listeners.onRole(role);
+        listeners.onReady(true);
+        this.reconnectAttempt = 0;
+        this.sendMessage({ type: MSG.USER_LIST, payload: {} });
+        break;
       }
-      return /* @__PURE__ */ jsx6(SignedOutDiagnostic, {});
-    }
-    return /* @__PURE__ */ jsx6(Fragment5, { children: null });
-  }
-  const onPermissionError = (title, detail) => onWriteError({ kind: "permission", title, detail });
-  const onValidationError = (title, detail) => onWriteError({ kind: "validation", title, detail });
-  if (roomId) {
-    return /* @__PURE__ */ jsx6(
-      RecordProviderCore,
-      {
-        roomId,
-        wsUrl,
-        fetchUser,
-        allowAnonymous,
-        getAuthToken: getAuthTokenFn,
-        onPermissionError,
-        onValidationError,
-        children
+      case MSG.USER_LIST:
+        listeners.onUsers(payload.users);
+        break;
+      case MSG.QUERY_RESULT: {
+        const { subscriptionId, records } = payload;
+        const queryKey = this.subscriptions.get(subscriptionId);
+        if (queryKey !== void 0) store.setQueryResult(queryKey, records);
+        break;
+      }
+      case MSG.RECORD_CHANGE: {
+        const { collection, record, changeType } = payload;
+        for (const queryKey of this.subscriptions.values()) {
+          try {
+            const query = JSON.parse(queryKey);
+            if (query.collection !== collection) continue;
+            const matches = recordMatchesWhere(record, query.where);
+            const exists = store.hasRecord(queryKey, record.recordId);
+            if (changeType === "delete") {
+              if (exists) store.applyChange(queryKey, record, "delete");
+            } else if (changeType === "create") {
+              if (matches) store.applyChange(queryKey, record, "create");
+            } else {
+              if (matches && exists) store.applyChange(queryKey, record, "update");
+              else if (matches && !exists) store.applyChange(queryKey, record, "create");
+              else if (!matches && exists) store.applyChange(queryKey, record, "delete");
+            }
+          } catch {
+          }
+        }
+        break;
+      }
+      case MSG.ERROR: {
+        const { subscriptionId, error } = payload;
+        if (subscriptionId) {
+          const queryKey = this.subscriptions.get(subscriptionId);
+          if (queryKey !== void 0) store.setError(queryKey, error);
+        } else {
+          const parsed = parseServerError(error);
+          if (parsed.isPermissionError) listeners.onPermissionError?.(parsed.title, parsed.detail);
+          else listeners.onValidationError?.(parsed.title, parsed.detail);
+        }
+        break;
+      }
+      case MSG.YJS_JOIN: {
+        const { collection, recordId, fieldName, canWrite } = payload;
+        const docKey = `${collection}:${recordId}:${fieldName}`;
+        this.yjsJoinHandlers.get(docKey)?.forEach((h) => h(canWrite));
+        break;
+      }
+      case MSG.ACK: {
+        const { requestId, success, error, ...rest } = payload;
+        const pending = this.pendingRequests.get(requestId);
+        if (pending) {
+          clearTimeout(pending.timer);
+          this.pendingRequests.delete(requestId);
+          if (success) pending.resolve(rest);
+          else pending.reject(new Error(error || "Mutation rejected"));
+        }
+        break;
+      }
+      case MSG.LIST_SCHEMAS: {
+        const { schemas } = payload;
+        listeners.onSchemas?.(schemas ?? []);
+        break;
+      }
+      case MSG.RESUBSCRIBE: {
+        if (this.ws?.readyState === WS_OPEN) this.resubscribeAll(this.ws);
+        break;
       }
-    );
-  }
-  return /* @__PURE__ */ jsx6(
-    RecordProviderAuthOnly,
-    {
-      fetchUser,
-      allowAnonymous,
-      getAuthToken: getAuthTokenFn,
-      onPermissionError,
-      onValidationError,
-      children
     }
-  );
-}
-
-// src/client/storage/RecordScope.tsx
-import { useEffect as useEffect5, useState as useState4, useCallback as useCallback3, useRef as useRef5, useMemo as useMemo3 } from "react";
+  }
+};
 
 // src/client/storage/ws-log.ts
 var activeCount = 0;
@@ -2186,25 +1952,14 @@ import { Fragment as Fragment6, jsx as jsx7, jsxs as jsxs5 } from "react/jsx-run
 function HeadlessScope({
   roomId,
   schemas,
-  appId,
   wsUrl,
   wsPathPrefix
 }) {
-  return /* @__PURE__ */ jsx7(
-    ScopeConnection,
-    {
-      roomId,
-      schemas,
-      appId,
-      wsUrl,
-      wsPathPrefix
-    }
-  );
+  return /* @__PURE__ */ jsx7(ScopeConnection, { roomId, schemas, wsUrl, wsPathPrefix });
 }
 function ScopeConnection({
   roomId,
   schemas,
-  appId,
   children,
   wsUrl,
   wsPathPrefix = "/ws",
@@ -2248,7 +2003,6 @@ function ScopeConnection({
       getToken: () => (getAuthTokenRef.current ?? getAuthToken)(),
       wsUrl,
       wsPathPrefix,
-      extraParams: { appId },
       log: (event) => wsLog(event, roomId),
       listeners: {
         onStatus: setStatus,
@@ -2273,7 +2027,7 @@ function ScopeConnection({
       setStatus("connecting");
       setReady(false);
     };
-  }, [roomId, wsUrl, wsPathPrefix, appId, userProfileId, userProfileLoading, allowAnonymous]);
+  }, [roomId, wsUrl, wsPathPrefix, userProfileId, userProfileLoading, allowAnonymous]);
   useEffect5(() => {
     const onVisible = () => {
       if (document.visibilityState === "visible" && !socketRef.current?.isOpen) {
@@ -2430,7 +2184,6 @@ function RecordScope({
   roomId,
   schemas,
   children,
-  appId,
   sharedScopes,
   wsUrl,
   wsPathPrefix = "/ws",
@@ -2442,7 +2195,6 @@ function RecordScope({
       {
         roomId: shared.roomId,
         schemas: shared.schemas,
-        appId,
         wsUrl,
         wsPathPrefix
       },
@@ -2453,7 +2205,6 @@ function RecordScope({
       {
         roomId,
         schemas,
-        appId,
         wsUrl,
         wsPathPrefix,
         isolated,
@@ -2491,7 +2242,7 @@ function useQuery(collection, options) {
   const unregisterSub = preferLocal ? recordCtx.unregisterSubscription : scopeEntry?.unregisterSubscription ?? recordCtx?.unregisterSubscription;
   if (!store || !sendMessage || !registerSub || !unregisterSub) {
     throw new Error(
-      `useQuery('${collection}'): No scope found. Wrap in a RecordProvider (with roomId) or a RecordScope that registers this collection.`
+      `useQuery('${collection}'): No scope found. Wrap this hook in a RecordScope that registers the collection.`
     );
   }
   const optionsKey = JSON.stringify(options ?? null);
@@ -2552,7 +2303,7 @@ function useMutations(collection) {
   const sendConfirmed = preferLocal ? recordCtx.sendConfirmed : scopeEntry?.sendConfirmed ?? recordCtx?.sendConfirmed;
   if (!sendMessage || !sendConfirmed) {
     throw new Error(
-      `useMutations('${collection}'): No scope found. Wrap in a RecordProvider (with roomId) or a RecordScope that registers this collection.`
+      `useMutations('${collection}'): No scope found. Wrap this hook in a RecordScope that registers the collection.`
     );
   }
   const create = useCallback5(
@@ -2619,7 +2370,7 @@ function useUsers() {
 }
 
 // src/client/storage/hooks/useYjs.ts
-import { useState as useState5, useEffect as useEffect8, useCallback as useCallback6, useRef as useRef7 } from "react";
+import { useState as useState5, useEffect as useEffect8, useLayoutEffect, useCallback as useCallback6, useRef as useRef7, useMemo as useMemo8 } from "react";
 import * as Y2 from "yjs";
 function useYjsField(collection, recordId, fieldName) {
   const { sendMessage, sendBinary, onBinaryMessage, registerYjsJoinHandler, ready } = useRecordContext();
@@ -2627,17 +2378,23 @@ function useYjsField(collection, recordId, fieldName) {
   const [canWrite, setCanWrite] = useState5(false);
   const [updateCount, setUpdateCount] = useState5(0);
   const canWriteRef = useRef7(false);
-  const docRef = useRef7(null);
-  if (!docRef.current) {
-    docRef.current = new Y2.Doc();
-  }
-  const doc = docRef.current;
-  const awarenessRef = useRef7(null);
-  if (!awarenessRef.current) {
-    awarenessRef.current = new Awareness(doc);
-  }
-  const awareness = awarenessRef.current;
   const docKey = `${collection}:${recordId}:${fieldName}`;
+  const { doc, awareness } = useMemo8(() => {
+    const nextDoc = new Y2.Doc();
+    return { doc: nextDoc, awareness: new Awareness(nextDoc) };
+  }, [docKey]);
+  useEffect8(() => {
+    return () => {
+      awareness.destroy();
+      doc.destroy();
+    };
+  }, [awareness, doc]);
+  useLayoutEffect(() => {
+    setSynced(false);
+    setCanWrite(false);
+    setUpdateCount(0);
+    canWriteRef.current = false;
+  }, [docKey]);
   useEffect8(() => {
     canWriteRef.current = canWrite;
   }, [canWrite]);
@@ -2740,40 +2497,38 @@ function useYjsField(collection, recordId, fieldName) {
 }
 function useYjsText(collection, recordId, fieldName) {
   const { doc, synced, canWrite, updateCount } = useYjsField(collection, recordId, fieldName);
-  const [text, setTextState] = useState5("");
-  const yTextRef = useRef7(null);
-  const isLocalUpdateRef = useRef7(false);
+  const yText = useMemo8(() => doc.getText(fieldName), [doc, fieldName]);
+  const [textState, setTextState] = useState5(() => ({ doc, value: "" }));
+  const text = textState.doc === doc ? textState.value : "";
   useEffect8(() => {
-    yTextRef.current = doc.getText(fieldName);
-  }, [doc, fieldName]);
-  useEffect8(() => {
-    if (yTextRef.current && synced && !isLocalUpdateRef.current) {
-      setTextState(yTextRef.current.toString());
-    }
-    isLocalUpdateRef.current = false;
-  }, [synced, updateCount]);
+    if (!synced) return;
+    const value = yText.toString();
+    setTextState(
+      (current) => current.doc === doc && current.value === value ? current : { doc, value }
+    );
+  }, [doc, yText, synced, updateCount]);
   const setText = useCallback6(
     (value) => {
-      setTextState(value);
-      if (yTextRef.current && canWrite) {
-        isLocalUpdateRef.current = true;
+      setTextState(
+        (current) => current.doc === doc && current.value === value ? current : { doc, value }
+      );
+      if (canWrite) {
         doc.transact(() => {
-          const yText = yTextRef.current;
           yText.delete(0, yText.length);
           yText.insert(0, value);
         });
       }
     },
-    [doc, canWrite]
+    [doc, yText, canWrite]
   );
   return { text, setText, synced, canWrite };
 }
 
 // src/client/storage/hooks/useUserLookup.ts
-import { useMemo as useMemo8, useCallback as useCallback7 } from "react";
+import { useMemo as useMemo9, useCallback as useCallback7 } from "react";
 function useUserLookup() {
   const { users, usersLoaded } = useUsers();
-  const userMap = useMemo8(() => {
+  const userMap = useMemo9(() => {
     const map = /* @__PURE__ */ new Map();
     for (const user of users) {
       map.set(user.id, {
@@ -2855,23 +2610,50 @@ function usePresence(opts) {
 }
 
 // src/client/storage/hooks/useYjsRoom.ts
-import { useState as useState7, useEffect as useEffect10, useCallback as useCallback9, useRef as useRef8, useMemo as useMemo9 } from "react";
+import { useState as useState7, useEffect as useEffect10, useLayoutEffect as useLayoutEffect2, useCallback as useCallback9, useRef as useRef8, useMemo as useMemo10 } from "react";
 import * as Y3 from "yjs";
+var UPDATE_BATCH_DELAY_MS = 16;
 function useYjsRoom(docId, fieldName) {
-  const [synced, setSynced] = useState7(false);
+  const [syncedDocId, setSyncedDocId] = useState7(null);
   const [canWrite, setCanWrite] = useState7(false);
+  const [writeAuthResolved, setWriteAuthResolved] = useState7(false);
   const [text, setTextState] = useState7("");
   const [, setUpdateCount] = useState7(0);
-  const docRef = useRef8(null);
-  if (!docRef.current) docRef.current = new Y3.Doc();
-  const doc = docRef.current;
-  const awarenessRef = useRef8(null);
-  if (!awarenessRef.current) awarenessRef.current = new Awareness(doc);
-  const awareness = awarenessRef.current;
+  const synced = syncedDocId === docId;
+  const { doc, awareness } = useMemo10(() => {
+    const nextDoc = new Y3.Doc();
+    return { doc: nextDoc, awareness: new Awareness(nextDoc) };
+  }, [docId]);
   const wsRef = useRef8(null);
   const isLocalRef = useRef8(false);
   const applyingRemoteAwarenessRef = useRef8(false);
-  const yText = useMemo9(() => doc.getText(fieldName), [doc, fieldName]);
+  const pendingUpdateRef = useRef8(null);
+  const updateBatchTimerRef = useRef8(null);
+  const yText = useMemo10(() => doc.getText(fieldName), [doc, fieldName]);
+  const flushPendingUpdate = useCallback9((socket = wsRef.current) => {
+    if (updateBatchTimerRef.current) clearTimeout(updateBatchTimerRef.current);
+    updateBatchTimerRef.current = null;
+    const update = pendingUpdateRef.current;
+    pendingUpdateRef.current = null;
+    if (!update || !socket || socket.readyState !== WebSocket.OPEN) return;
+    const enc = createEncoder();
+    writeVarUint(enc, MSG_SYNC);
+    writeVarUint(enc, MSG_SYNC_UPDATE);
+    writeVarUint8Array(enc, update);
+    socket.send(toUint8Array(enc).buffer);
+  }, []);
+  useEffect10(() => {
+    return () => {
+      awareness.destroy();
+      doc.destroy();
+    };
+  }, [awareness, doc]);
+  useLayoutEffect2(() => {
+    setSyncedDocId(null);
+    setCanWrite(false);
+    setWriteAuthResolved(false);
+    setTextState("");
+  }, [docId]);
   useEffect10(() => {
     const observer = () => {
       if (isLocalRef.current) return;
@@ -2884,8 +2666,15 @@ function useYjsRoom(docId, fieldName) {
     let ws = null;
     let reconnectTimer = null;
     let alive = true;
+    const renewLocalAwareness = () => {
+      const localState = awareness.getLocalState();
+      if (localState) awareness.setLocalState(localState);
+    };
     const connect = async () => {
       if (!alive) return;
+      setCanWrite(false);
+      setWriteAuthResolved(false);
+      renewLocalAwareness();
       const token = await getAuthToken();
       if (!alive) return;
       const protocol = window.location.protocol === "https:" ? "wss:" : "ws:";
@@ -2898,13 +2687,17 @@ function useYjsRoom(docId, fieldName) {
       wsRef.current = ws;
       ws.onopen = () => {
         wsLog("connected", `yjs:${docId}`);
-        setSynced(false);
+        setSyncedDocId(null);
+        renewLocalAwareness();
       };
       ws.onmessage = (event) => {
         if (typeof event.data === "string") {
           try {
             const msg = JSON.parse(event.data);
-            if (msg.type === "auth" && typeof msg.canWrite === "boolean") setCanWrite(msg.canWrite);
+            if (msg.type === "auth" && typeof msg.canWrite === "boolean") {
+              setCanWrite(msg.canWrite);
+              setWriteAuthResolved(true);
+            }
           } catch {
           }
           return;
@@ -2923,13 +2716,13 @@ function useYjsRoom(docId, fieldName) {
               writeVarUint(enc, MSG_SYNC_STEP2);
               writeVarUint8Array(enc, diff);
               ws?.send(toUint8Array(enc).buffer);
-              setSynced(true);
+              setSyncedDocId(docId);
               break;
             }
             case MSG_SYNC_STEP2: {
               Y3.applyUpdate(doc, payload, "server");
               setTextState(yText.toString());
-              setSynced(true);
+              setSyncedDocId(docId);
               break;
             }
             case MSG_SYNC_UPDATE: {
@@ -2944,6 +2737,7 @@ function useYjsRoom(docId, fieldName) {
           applyingRemoteAwarenessRef.current = true;
           try {
             handleAwarenessMessage(awareness, data);
+          } catch {
           } finally {
             applyingRemoteAwarenessRef.current = false;
           }
@@ -2952,7 +2746,9 @@ function useYjsRoom(docId, fieldName) {
       ws.onclose = () => {
         wsLog("disconnected", `yjs:${docId}`);
         wsRef.current = null;
-        setSynced(false);
+        setSyncedDocId(null);
+        setCanWrite(false);
+        setWriteAuthResolved(false);
         if (alive) reconnectTimer = setTimeout(connect, 1e3);
       };
       ws.onerror = () => ws?.close();
@@ -2962,6 +2758,7 @@ function useYjsRoom(docId, fieldName) {
       wsLog("closing", `yjs:${docId}`);
       alive = false;
       if (reconnectTimer) clearTimeout(reconnectTimer);
+      flushPendingUpdate(ws);
       if (ws) {
         ws.onclose = null;
         ws.onmessage = null;
@@ -2970,7 +2767,7 @@ function useYjsRoom(docId, fieldName) {
       }
       wsRef.current = null;
     };
-  }, [doc, awareness, docId, yText]);
+  }, [doc, awareness, docId, flushPendingUpdate, yText]);
   useEffect10(() => {
     const handler = ({
       added,
@@ -2995,17 +2792,15 @@ function useYjsRoom(docId, fieldName) {
       if (origin === "server") return;
       const ws = wsRef.current;
       if (!ws || ws.readyState !== WebSocket.OPEN) return;
-      const enc = createEncoder();
-      writeVarUint(enc, MSG_SYNC);
-      writeVarUint(enc, MSG_SYNC_UPDATE);
-      writeVarUint8Array(enc, update);
-      ws.send(toUint8Array(enc).buffer);
+      pendingUpdateRef.current = pendingUpdateRef.current ? Y3.mergeUpdates([pendingUpdateRef.current, update]) : update;
+      updateBatchTimerRef.current ??= setTimeout(flushPendingUpdate, UPDATE_BATCH_DELAY_MS);
     };
     doc.on("update", handler);
     return () => {
       doc.off("update", handler);
+      flushPendingUpdate();
     };
-  }, [doc]);
+  }, [doc, flushPendingUpdate]);
   const setText = useCallback9(
     (value) => {
       setTextState(value);
@@ -3019,7 +2814,7 @@ function useYjsRoom(docId, fieldName) {
     },
     [doc, yText, canWrite]
   );
-  return { doc, awareness, text, setText, synced, canWrite };
+  return { doc, awareness, text, setText, synced, canWrite, writeAuthResolved };
 }
 
 // src/client/storage/hooks/useGameRoom.ts
@@ -3568,17 +3363,20 @@ function toConnectionStatus(queryStatus) {
 }
 
 // src/client/storage/useR2Files.ts
-import { useCallback as useCallback15, useState as useState13, useMemo as useMemo10 } from "react";
+import { useCallback as useCallback15, useState as useState13, useMemo as useMemo11 } from "react";
 function resolveFile(fileOrKey) {
   if (typeof fileOrKey === "string") {
     return { key: fileOrKey, name: void 0 };
   }
   return { key: fileOrKey.key, name: fileOrKey.originalName };
 }
+function encodeKeyPath(key) {
+  return key.split("/").map(encodeURIComponent).join("/");
+}
 function useR2Files(options) {
   const [isUploading, setIsUploading] = useState13(false);
   const scope = options?.scope ?? "self";
-  const scopeParams = useMemo10(() => {
+  const scopeParams = useMemo11(() => {
     const params = new URLSearchParams();
     params.set("scope", scope);
     return params.toString();
@@ -3590,104 +3388,128 @@ function useR2Files(options) {
     }
     return {};
   }, []);
-  const upload = useCallback15(async (file, name) => {
-    setIsUploading(true);
-    try {
-      const headers = await authHeaders();
-      const formData = new FormData();
-      formData.append("file", file);
-      if (name) formData.append("name", name);
-      const response = await fetch(`/api/files/upload?${scopeParams}`, {
-        method: "POST",
-        headers,
-        body: formData
-      });
-      return await response.json();
-    } catch (err) {
-      return { success: false, error: err instanceof Error ? err.message : "Upload failed" };
-    } finally {
-      setIsUploading(false);
-    }
-  }, [scopeParams, authHeaders]);
-  const uploadBase64 = useCallback15(async (base64Data, name, mimeType) => {
-    setIsUploading(true);
-    try {
-      const headers = await authHeaders();
-      const response = await fetch(`/api/files/upload?${scopeParams}`, {
-        method: "POST",
-        headers: { ...headers, "Content-Type": "application/json" },
-        body: JSON.stringify({ data: base64Data, name, mimeType })
-      });
-      return await response.json();
-    } catch (err) {
-      return { success: false, error: err instanceof Error ? err.message : "Upload failed" };
-    } finally {
-      setIsUploading(false);
-    }
-  }, [scopeParams, authHeaders]);
-  const deleteFile = useCallback15(async (fileOrKey) => {
-    const { key } = resolveFile(fileOrKey);
-    try {
-      const headers = await authHeaders();
-      const response = await fetch(`/api/files/${key}?${scopeParams}`, { method: "DELETE", headers });
-      return await response.json();
-    } catch (err) {
-      return { success: false, error: err instanceof Error ? err.message : "Delete failed" };
-    }
-  }, [scopeParams, authHeaders]);
-  const list = useCallback15(async (prefix) => {
-    try {
-      const headers = await authHeaders();
-      const params = new URLSearchParams(scopeParams);
-      if (prefix) params.set("prefix", prefix);
-      const response = await fetch(`/api/files?${params.toString()}`, { headers });
-      const result = await response.json();
-      return result.files || [];
-    } catch {
-      return [];
-    }
-  }, [scopeParams, authHeaders]);
-  const downloadFile = useCallback15(async (fileOrKey, fileName) => {
-    const { key, name: infoName } = resolveFile(fileOrKey);
-    try {
+  const upload = useCallback15(
+    async (file, name) => {
+      setIsUploading(true);
+      try {
+        const headers = await authHeaders();
+        const formData = new FormData();
+        formData.append("file", file);
+        if (name) formData.append("name", name);
+        const response = await fetch(`/api/files/upload?${scopeParams}`, {
+          method: "POST",
+          headers,
+          body: formData
+        });
+        return await response.json();
+      } catch (err) {
+        return { success: false, error: err instanceof Error ? err.message : "Upload failed" };
+      } finally {
+        setIsUploading(false);
+      }
+    },
+    [scopeParams, authHeaders]
+  );
+  const uploadBase64 = useCallback15(
+    async (base64Data, name, mimeType) => {
+      setIsUploading(true);
+      try {
+        const headers = await authHeaders();
+        const response = await fetch(`/api/files/upload?${scopeParams}`, {
+          method: "POST",
+          headers: { ...headers, "Content-Type": "application/json" },
+          body: JSON.stringify({ data: base64Data, name, mimeType })
+        });
+        return await response.json();
+      } catch (err) {
+        return { success: false, error: err instanceof Error ? err.message : "Upload failed" };
+      } finally {
+        setIsUploading(false);
+      }
+    },
+    [scopeParams, authHeaders]
+  );
+  const deleteFile = useCallback15(
+    async (fileOrKey) => {
+      const { key } = resolveFile(fileOrKey);
+      try {
+        const headers = await authHeaders();
+        const response = await fetch(`/api/files/${encodeKeyPath(key)}?${scopeParams}`, {
+          method: "DELETE",
+          headers
+        });
+        return await response.json();
+      } catch (err) {
+        return { success: false, error: err instanceof Error ? err.message : "Delete failed" };
+      }
+    },
+    [scopeParams, authHeaders]
+  );
+  const list = useCallback15(
+    async (prefix) => {
+      try {
+        const headers = await authHeaders();
+        const params = new URLSearchParams(scopeParams);
+        if (prefix) params.set("prefix", prefix);
+        const response = await fetch(`/api/files?${params.toString()}`, { headers });
+        const result = await response.json();
+        return result.files || [];
+      } catch {
+        return [];
+      }
+    },
+    [scopeParams, authHeaders]
+  );
+  const downloadFile = useCallback15(
+    async (fileOrKey, fileName) => {
+      const { key, name: infoName } = resolveFile(fileOrKey);
+      try {
+        const headers = await authHeaders();
+        const response = await fetch(`/api/files/${encodeKeyPath(key)}?${scopeParams}`, { headers });
+        if (!response.ok) {
+          const body = await response.json().catch(() => null);
+          return { success: false, error: body?.error ?? `Download failed (${response.status})` };
+        }
+        const disposition = response.headers.get("Content-Disposition");
+        const dispositionName = disposition?.match(/filename="(.+?)"/)?.[1];
+        const fallbackName = key.split("/").pop() ?? "download";
+        const resolvedName = fileName ?? infoName ?? dispositionName ?? fallbackName;
+        const blob = await response.blob();
+        const blobUrl = URL.createObjectURL(blob);
+        const anchor = document.createElement("a");
+        anchor.href = blobUrl;
+        anchor.download = resolvedName;
+        document.body.appendChild(anchor);
+        anchor.click();
+        document.body.removeChild(anchor);
+        URL.revokeObjectURL(blobUrl);
+        return { success: true };
+      } catch (err) {
+        return { success: false, error: err instanceof Error ? err.message : "Download failed" };
+      }
+    },
+    [scopeParams, authHeaders]
+  );
+  const readFile = useCallback15(
+    async (fileOrKey) => {
+      const { key } = resolveFile(fileOrKey);
       const headers = await authHeaders();
-      const response = await fetch(`/api/files/${key}?${scopeParams}`, { headers });
+      const response = await fetch(`/api/files/${encodeKeyPath(key)}?${scopeParams}`, { headers });
       if (!response.ok) {
-        const body = await response.json().catch(() => null);
-        return { success: false, error: body?.error ?? `Download failed (${response.status})` };
+        const body = await response.text().catch(() => "");
+        throw new Error(`Failed to read file (${response.status}): ${body}`);
       }
-      const disposition = response.headers.get("Content-Disposition");
-      const dispositionName = disposition?.match(/filename="(.+?)"/)?.[1];
-      const fallbackName = key.split("/").pop() ?? "download";
-      const resolvedName = fileName ?? infoName ?? dispositionName ?? fallbackName;
-      const blob = await response.blob();
-      const blobUrl = URL.createObjectURL(blob);
-      const anchor = document.createElement("a");
-      anchor.href = blobUrl;
-      anchor.download = resolvedName;
-      document.body.appendChild(anchor);
-      anchor.click();
-      document.body.removeChild(anchor);
-      URL.revokeObjectURL(blobUrl);
-      return { success: true };
-    } catch (err) {
-      return { success: false, error: err instanceof Error ? err.message : "Download failed" };
-    }
-  }, [scopeParams, authHeaders]);
-  const readFile = useCallback15(async (fileOrKey) => {
-    const { key } = resolveFile(fileOrKey);
-    const headers = await authHeaders();
-    const response = await fetch(`/api/files/${key}?${scopeParams}`, { headers });
-    if (!response.ok) {
-      const body = await response.text().catch(() => "");
-      throw new Error(`Failed to read file (${response.status}): ${body}`);
-    }
-    return response;
-  }, [scopeParams, authHeaders]);
-  const getUrl = useCallback15((fileOrKey) => {
-    const { key } = resolveFile(fileOrKey);
-    return `/api/files/${key}?${scopeParams}`;
-  }, [scopeParams]);
+      return response;
+    },
+    [scopeParams, authHeaders]
+  );
+  const getUrl = useCallback15(
+    (fileOrKey) => {
+      const { key } = resolveFile(fileOrKey);
+      return `/api/files/${encodeKeyPath(key)}?${scopeParams}`;
+    },
+    [scopeParams]
+  );
   return { upload, uploadBase64, deleteFile, downloadFile, readFile, list, getUrl, isUploading };
 }
 
@@ -3727,9 +3549,9 @@ function getUserColor(userId, palette = DEFAULT_USER_COLORS) {
 }
 
 // src/client/messaging/useMessages.ts
-import { useCallback as useCallback16, useMemo as useMemo11 } from "react";
+import { useCallback as useCallback16, useMemo as useMemo12 } from "react";
 function useMessages(channelId, options) {
-  const where = useMemo11(() => {
+  const where = useMemo12(() => {
     if (!channelId) return { channelId: "__none__" };
     const w = { channelId };
     if (options?.parentMessageId !== void 0) {
@@ -3925,7 +3747,7 @@ function useReadReceipts() {
 }
 
 // src/client/messaging/useConversation.ts
-import { useCallback as useCallback21, useMemo as useMemo12 } from "react";
+import { useCallback as useCallback21, useMemo as useMemo13 } from "react";
 function useConversation(opts) {
   const { user } = useUser();
   const { ready } = useRecordContext();
@@ -3983,7 +3805,7 @@ function useConversation(opts) {
     },
     [reactionMut, allReactions, user?.id]
   );
-  return useMemo12(
+  return useMemo13(
     () => ({
       messages: allMessages,
       reactions: allReactions,
@@ -4103,7 +3925,7 @@ function parseMessageMetadata(raw) {
 }
 
 // src/client/directory/useConversations.ts
-import { useCallback as useCallback22, useMemo as useMemo13, useRef as useRef14 } from "react";
+import { useCallback as useCallback22, useMemo as useMemo14, useRef as useRef14 } from "react";
 var defaultConvFields = {
   Visibility: "public",
   Status: "active",
@@ -4124,19 +3946,19 @@ function useConversations() {
       recentCreationsRef.current.delete(id);
     }
   }
-  const readStateMap = useMemo13(
+  const readStateMap = useMemo14(
     () => new Map(stateRecords.map((r) => [r.data.ConversationId, r.data.LastReadAt])),
     [stateRecords]
   );
-  const readMessageCountMap = useMemo13(
+  const readMessageCountMap = useMemo14(
     () => new Map(stateRecords.map((r) => [r.data.ConversationId, r.data.LastReadMessageCount ?? 0])),
     [stateRecords]
   );
-  const starredSet = useMemo13(
+  const starredSet = useMemo14(
     () => new Set(stateRecords.filter((r) => r.data.Starred).map((r) => r.data.ConversationId)),
     [stateRecords]
   );
-  const archivedSet = useMemo13(
+  const archivedSet = useMemo14(
     () => new Set(stateRecords.filter((r) => r.data.Archived).map((r) => r.data.ConversationId)),
     [stateRecords]
   );
@@ -4338,7 +4160,7 @@ function useConversations() {
 }
 
 // src/client/directory/useCommunities.ts
-import { useCallback as useCallback23, useMemo as useMemo14 } from "react";
+import { useCallback as useCallback23, useMemo as useMemo15 } from "react";
 function useCommunities() {
   const { records: communities, status } = useQuery("communities");
   const communityMut = useMutations("communities");
@@ -4346,7 +4168,7 @@ function useCommunities() {
   const membershipMut = useMutations("memberships");
   const { user } = useUser();
   const ready = status === "ready";
-  const membershipMap = useMemo14(() => {
+  const membershipMap = useMemo15(() => {
     const map = /* @__PURE__ */ new Map();
     for (const m of memberships) {
       const list = map.get(m.data.CommunityId) ?? [];
@@ -4355,7 +4177,7 @@ function useCommunities() {
     }
     return map;
   }, [memberships]);
-  const myMemberships = useMemo14(
+  const myMemberships = useMemo15(
     () => new Set(
       memberships.filter((m) => m.data.UserId === user?.id).map((m) => m.data.CommunityId)
     ),
@@ -5024,22 +4846,29 @@ function usePlatformWS(options) {
   return { state, send };
 }
 
-// src/client/integration/index.ts
+// src/client/integration.ts
 var ENDPOINT_PREFIX = "/api/integrations";
 var DEFAULT_TIMEOUT_MS2 = 12e4;
+var ENDPOINT_RE = /^[a-z0-9][a-z0-9._~-]*(?:\/[a-z0-9][a-z0-9._~-]*)*$/i;
 function resolveUrl(endpoint) {
-  if (endpoint.startsWith("http://") || endpoint.startsWith("https://")) {
-    return endpoint;
+  if (endpoint !== "" && !ENDPOINT_RE.test(endpoint)) {
+    throw new TypeError(
+      'Integration endpoints must be relative route segments, for example "openai/chat-completion".'
+    );
   }
-  const path = endpoint.startsWith("/") ? endpoint : endpoint ? `${ENDPOINT_PREFIX}/${endpoint}` : ENDPOINT_PREFIX;
+  const path = endpoint ? `${ENDPOINT_PREFIX}/${endpoint}` : ENDPOINT_PREFIX;
   if (typeof window !== "undefined") {
     return `${window.location.origin}${path}`;
   }
   return path;
 }
-async function request(method, endpoint, body, options) {
-  const url = resolveUrl(endpoint);
+async function request(method, endpoint, body, options, query) {
+  const queryString = query?.toString();
+  const url = `${resolveUrl(endpoint)}${queryString ? `?${queryString}` : ""}`;
   const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
+  if (options?.signal?.aborted) {
+    return { success: false, error: "Request cancelled" };
+  }
   const headers = {
     "Content-Type": "application/json",
     ...options?.headers
@@ -5051,9 +4880,12 @@ async function request(method, endpoint, body, options) {
   }
   const controller = new AbortController();
   const abortFromCaller = () => controller.abort();
-  if (options?.signal?.aborted) controller.abort();
-  else options?.signal?.addEventListener("abort", abortFromCaller, { once: true });
-  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  options?.signal?.addEventListener("abort", abortFromCaller, { once: true });
+  let timedOut = false;
+  const timeout = setTimeout(() => {
+    timedOut = true;
+    controller.abort();
+  }, timeoutMs);
   try {
     const res = await fetch(url, {
       method,
@@ -5082,7 +4914,10 @@ async function request(method, endpoint, body, options) {
     return { success: true, data: rest };
   } catch (err) {
     if (err instanceof DOMException && err.name === "AbortError") {
-      return { success: false, error: `Request timed out after ${timeoutMs}ms` };
+      return {
+        success: false,
+        error: timedOut ? `Request timed out after ${timeoutMs}ms` : "Request cancelled"
+      };
     }
     return {
       success: false,
@@ -5098,16 +4933,14 @@ var integration = {
     return request("POST", endpoint, data, options);
   },
   get(endpoint, params, options) {
-    let url = endpoint;
+    let searchParams;
     if (params) {
-      const searchParams = new URLSearchParams();
+      searchParams = new URLSearchParams();
       for (const [k, v] of Object.entries(params)) {
         if (v != null) searchParams.set(k, String(v));
       }
-      const qs = searchParams.toString();
-      if (qs) url = `${endpoint}?${qs}`;
     }
-    return request("GET", url, void 0, options);
+    return request("GET", endpoint, void 0, options, searchParams);
   },
   put(endpoint, data, options) {
     return request("PUT", endpoint, data, options);
@@ -5415,7 +5248,7 @@ function decodeAiStreamChunk(chunk) {
 }
 
 // src/client/status.ts
-import { useCallback as useCallback27, useEffect as useEffect21, useMemo as useMemo15, useRef as useRef18, useState as useState18 } from "react";
+import { useCallback as useCallback27, useEffect as useEffect21, useMemo as useMemo16, useRef as useRef18, useState as useState18 } from "react";
 
 // src/client/status-core.ts
 var ASYNC_RESOURCE_DEFAULTS = {
@@ -5493,7 +5326,6 @@ function useAuthProfileReady(options = {}) {
     isReady: status === "ready"
   };
 }
-var useAuthReady = useAuthProfileReady;
 function useAsyncResource(fetcher, deps, options = {}) {
   const enabled = options.enabled ?? true;
   const keepPreviousData = options.keepPreviousData ?? true;
@@ -5590,7 +5422,7 @@ function useAsyncResource(fetcher, deps, options = {}) {
       controller.abort();
     };
   }, [enabled, keepPreviousData, retry, retryDelayMs, slowAfterMs, reloadTick, ...deps]);
-  return useMemo15(() => ({ ...state, reload }), [state, reload]);
+  return useMemo16(() => ({ ...state, reload }), [state, reload]);
 }
 function usePagedResource(fetchPage, deps, options = {}) {
   const enabled = options.enabled ?? true;
@@ -5762,7 +5594,7 @@ function usePagedResource(fetchPage, deps, options = {}) {
       loadingRef.current = false;
     };
   }, [enabled, pageSize, maxItemsPerPage, keepPreviousData, autoRetryOnError, retryDelayMs, maxRetryDelayMs, ...deps]);
-  return useMemo15(() => ({
+  return useMemo16(() => ({
     ...state,
     loadMore,
     retry,
@@ -5940,7 +5772,7 @@ function PricingTable(props) {
 }
 
 // src/client/charges/useCheckout.ts
-import { useCallback as useCallback29, useEffect as useEffect23, useMemo as useMemo16, useState as useState20 } from "react";
+import { useCallback as useCallback29, useEffect as useEffect23, useMemo as useMemo17, useState as useState20 } from "react";
 async function authedJson2(path, init) {
   const token = await getAuthToken();
   const res = await fetch(path, {
@@ -6017,7 +5849,7 @@ function useCheckout(opts) {
     (productId) => purchases.some((p) => p.productId === productId),
     [purchases]
   );
-  const owned = useMemo16(
+  const owned = useMemo17(
     () => !!opts?.productId && purchases.some((p) => p.productId === opts.productId),
     [opts?.productId, purchases]
   );
@@ -6270,7 +6102,6 @@ export {
   useAsyncResource,
   useAuth,
   useAuthProfileReady,
-  useAuthReady,
   useAuthStatus,
   useAuthUser,
   useCanvas,