dexie-cloud-addon 4.0.0-beta.13 → 4.0.0-beta.16

package/dist/umd-modern/dexie-cloud-addon.js

@@ -20,7 +20,7 @@
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports, require('dexie'), require('rxjs')) :
     typeof define === 'function' && define.amd ? define(['exports', 'dexie', 'rxjs'], factory) :
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.DexieCloud = {}, global.Dexie, global.rxjs));
-}(this, (function (exports, Dexie, rxjs) { 'use strict';
+})(this, (function (exports, Dexie, rxjs) { 'use strict';
 
     function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
 
@@ -660,10 +660,12 @@
             for (var _i = 0; _i < arguments.length; _i++) {
                 args[_i] = arguments[_i];
             }
-            return (setTimeout).apply(void 0, __spreadArray([], __read(args)));
+            var delegate = timeoutProvider.delegate;
+            return ((delegate === null || delegate === void 0 ? void 0 : delegate.setTimeout) || setTimeout).apply(void 0, __spreadArray([], __read(args)));
         },
         clearTimeout: function (handle) {
-            return (clearTimeout)(handle);
+            var delegate = timeoutProvider.delegate;
+            return ((delegate === null || delegate === void 0 ? void 0 : delegate.clearTimeout) || clearTimeout)(handle);
         },
         delegate: undefined,
     };
@@ -678,11 +680,33 @@
 
     function noop() { }
 
+    var COMPLETE_NOTIFICATION = (function () { return createNotification('C', undefined, undefined); })();
+    function errorNotification(error) {
+        return createNotification('E', undefined, error);
+    }
+    function nextNotification(value) {
+        return createNotification('N', value, undefined);
+    }
+    function createNotification(kind, value, error) {
+        return {
+            kind: kind,
+            value: value,
+            error: error,
+        };
+    }
+
+    var context = null;
     function errorContext(cb) {
         {
             cb();
         }
     }
+    function captureError(err) {
+        if (config.useDeprecatedSynchronousErrorHandling && context) {
+            context.errorThrown = true;
+            context.error = err;
+        }
+    }
 
     var Subscriber = (function (_super) {
         __extends(Subscriber, _super);
@@ -704,20 +728,26 @@
             return new SafeSubscriber(next, error, complete);
         };
         Subscriber.prototype.next = function (value) {
-            if (this.isStopped) ;
+            if (this.isStopped) {
+                handleStoppedNotification(nextNotification(value), this);
+            }
             else {
                 this._next(value);
             }
         };
         Subscriber.prototype.error = function (err) {
-            if (this.isStopped) ;
+            if (this.isStopped) {
+                handleStoppedNotification(errorNotification(err), this);
+            }
             else {
                 this.isStopped = true;
                 this._error(err);
             }
         };
         Subscriber.prototype.complete = function () {
-            if (this.isStopped) ;
+            if (this.isStopped) {
+                handleStoppedNotification(COMPLETE_NOTIFICATION, this);
+            }
             else {
                 this.isStopped = true;
                 this._complete();
@@ -792,7 +822,10 @@
                 handler.apply(void 0, __spreadArray([], __read(args)));
             }
             catch (err) {
-                {
+                if (config.useDeprecatedSynchronousErrorHandling) {
+                    captureError(err);
+                }
+                else {
                     reportUnhandledError(err);
                 }
             }
@@ -801,6 +834,10 @@
     function defaultErrorHandler(err) {
         throw err;
     }
+    function handleStoppedNotification(notification, subscriber) {
+        var onStoppedNotification = config.onStoppedNotification;
+        onStoppedNotification && timeoutProvider.setTimeout(function () { return onStoppedNotification(notification, subscriber); });
+    }
     var EMPTY_OBSERVER = {
         closed: true,
         next: noop,
@@ -1176,10 +1213,12 @@
             for (var _i = 0; _i < arguments.length; _i++) {
                 args[_i] = arguments[_i];
             }
-            return (setInterval).apply(void 0, __spreadArray([], __read(args)));
+            var delegate = intervalProvider.delegate;
+            return ((delegate === null || delegate === void 0 ? void 0 : delegate.setInterval) || setInterval).apply(void 0, __spreadArray([], __read(args)));
         },
         clearInterval: function (handle) {
-            return (clearInterval)(handle);
+            var delegate = intervalProvider.delegate;
+            return ((delegate === null || delegate === void 0 ? void 0 : delegate.clearInterval) || clearInterval)(handle);
         },
         delegate: undefined,
     };
@@ -1268,7 +1307,7 @@
 
     var dateTimestampProvider = {
         now: function () {
-            return (Date).now();
+            return (dateTimestampProvider.delegate || Date).now();
         },
         delegate: undefined,
     };
@@ -1948,16 +1987,19 @@
         : (b) => btoa(String.fromCharCode.apply(null, b));
 
     function interactWithUser(userInteraction, req) {
+        let done = false;
         return new Promise((resolve, reject) => {
             const interactionProps = {
                 ...req,
                 onSubmit: (res) => {
                     userInteraction.next(undefined);
+                    done = true;
                     resolve(res);
                 },
                 onCancel: () => {
                     userInteraction.next(undefined);
-                    reject(new Dexie__default['default'].AbortError("User cancelled"));
+                    done = true;
+                    reject(new Dexie__default["default"].AbortError("User cancelled"));
                 },
             };
             userInteraction.next(interactionProps);
@@ -3187,7 +3229,7 @@
                         const rewrittenKey = JSON.stringify(key);
                         mutClone.keys[keyIndex] = rewrittenKey;
                         if (rewriteValues) {
-                            Dexie__default['default'].setByKeyPath(mutClone.values[keyIndex], primaryKey.keyPath, rewrittenKey);
+                            Dexie__default["default"].setByKeyPath(mutClone.values[keyIndex], primaryKey.keyPath, rewrittenKey);
                         }
                     }
                     else if (key[0] === '#') {
@@ -3200,7 +3242,7 @@
                         const rewrittenKey = `${key}:${currentUser.userId}`;
                         mutClone.keys[keyIndex] = rewrittenKey;
                         if (rewriteValues) {
-                            Dexie__default['default'].setByKeyPath(mutClone.values[keyIndex], primaryKey.keyPath, rewrittenKey);
+                            Dexie__default["default"].setByKeyPath(mutClone.values[keyIndex], primaryKey.keyPath, rewrittenKey);
                         }
                     }
                 });
@@ -3315,7 +3357,7 @@
 
     function throwIfCancelled(cancelToken) {
         if (cancelToken?.cancelled)
-            throw new Dexie__default['default'].AbortError(`Operation was cancelled`);
+            throw new Dexie__default["default"].AbortError(`Operation was cancelled`);
     }
 
     /* Need this because navigator.onLine seems to say "false" when it is actually online.
@@ -3361,7 +3403,7 @@
                         }
                     }
                     else {
-                        Dexie__default['default'].setByKeyPath(obj, keyPath, value);
+                        Dexie__default["default"].setByKeyPath(obj, keyPath, value);
                     }
                 }
                 resultKeys.push(key);
@@ -3374,7 +3416,7 @@
     }
 
     async function applyServerChanges(changes, db) {
-        console.debug('Applying server changes', changes, Dexie__default['default'].currentTransaction);
+        console.debug('Applying server changes', changes, Dexie__default["default"].currentTransaction);
         for (const { table: tableName, muts } of changes) {
             const table = db.table(tableName);
             if (!table)
@@ -3411,7 +3453,7 @@
                         else {
                             keys.forEach((key, i) => {
                                 // Make sure inbound keys are consistent
-                                Dexie__default['default'].setByKeyPath(mut.values[i], primaryKey.keyPath, key);
+                                Dexie__default["default"].setByKeyPath(mut.values[i], primaryKey.keyPath, key);
                             });
                             await table.bulkAdd(mut.values);
                         }
@@ -3423,7 +3465,7 @@
                         else {
                             keys.forEach((key, i) => {
                                 // Make sure inbound keys are consistent
-                                Dexie__default['default'].setByKeyPath(mut.values[i], primaryKey.keyPath, key);
+                                Dexie__default["default"].setByKeyPath(mut.values[i], primaryKey.keyPath, key);
                             });
                             await table.bulkPut(mut.values);
                         }
@@ -3872,7 +3914,7 @@
                                     return; // Ignore message
                                 }
                                 // Verify also that the message is based on the exact same set of realms
-                                const ourRealmSetHash = await Dexie__default['default'].waitFor(
+                                const ourRealmSetHash = await Dexie__default["default"].waitFor(
                                 // Keep TX in non-IDB work
                                 computeRealmSetHash(syncState));
                                 console.debug('ourRealmSetHash', ourRealmSetHash);
@@ -4056,7 +4098,7 @@
     const IS_SERVICE_WORKER = typeof self !== "undefined" && "clients" in self && !self.document;
 
     function throwVersionIncrementNeeded() {
-        throw new Dexie__default['default'].SchemaError(`Version increment needed to allow dexie-cloud change tracking`);
+        throw new Dexie__default["default"].SchemaError(`Version increment needed to allow dexie-cloud change tracking`);
     }
 
     const { toString } = {};
@@ -4173,14 +4215,14 @@
                                     if (!table.schema.primaryKey.outbound) {
                                         if (!valueClones)
                                             valueClones = req.values.slice();
-                                        valueClones[idx] = Dexie__default['default'].deepClone(valueClones[idx]);
-                                        Dexie__default['default'].setByKeyPath(valueClones[idx], table.schema.primaryKey.keyPath, keys[idx]);
+                                        valueClones[idx] = Dexie__default["default"].deepClone(valueClones[idx]);
+                                        Dexie__default["default"].setByKeyPath(valueClones[idx], table.schema.primaryKey.keyPath, keys[idx]);
                                     }
                                 }
                                 else if (typeof key !== 'string' ||
                                     (!key.startsWith(idPrefix) && !key.startsWith('#' + idPrefix))) {
                                     // Key was specified by caller. Verify it complies with id prefix.
-                                    throw new Dexie__default['default'].ConstraintError(`The ID "${key}" is not valid for table "${tableName}". ` +
+                                    throw new Dexie__default["default"].ConstraintError(`The ID "${key}" is not valid for table "${tableName}". ` +
                                         `Primary '@' keys requires the key to be prefixed with "${idPrefix}" (or "#${idPrefix}).\n` +
                                         `If you want to generate IDs programmatically, remove '@' from the schema to get rid of this constraint. Dexie Cloud supports custom IDs as long as they are random and globally unique.`);
                                 }
@@ -4210,7 +4252,7 @@
                                                     const type = Array.isArray(key)
                                                         ? key.map(toStringTag).join(',')
                                                         : toStringTag(key);
-                                                    throw new Dexie__default['default'].ConstraintError(`Invalid primary key type ${type} for table ${tableName}. Tables marked for sync has primary keys of type string or Array of string (and optional numbers)`);
+                                                    throw new Dexie__default["default"].ConstraintError(`Invalid primary key type ${type} for table ${tableName}. Tables marked for sync has primary keys of type string or Array of string (and optional numbers)`);
                                                 }
                                             });
                                         }
@@ -4728,7 +4770,7 @@
         console.debug("Done initial sync");
     }
 
-    const USER_INACTIVITY_TIMEOUT = 300000; // 300_000;
+    const USER_INACTIVITY_TIMEOUT = 180000; // 3 minutes
     const INACTIVE_WAIT_TIME = 20000;
     // This observable will be emitted to later down....
     const userIsActive = new rxjs.BehaviorSubject(true);
@@ -4742,9 +4784,13 @@
     //   for just a short time.
     const userIsReallyActive = new rxjs.BehaviorSubject(true);
     userIsActive
-        .pipe(switchMap((isActive) => isActive
-        ? rxjs.of(true)
-        : rxjs.of(false).pipe(delay(INACTIVE_WAIT_TIME))), distinctUntilChanged())
+        .pipe(switchMap((isActive) => {
+        //console.debug('SyncStatus: DUBB: isActive changed to', isActive);
+        return isActive
+            ? rxjs.of(true)
+            : rxjs.of(false).pipe(delay(INACTIVE_WAIT_TIME))
+                ;
+    }), distinctUntilChanged())
         .subscribe(userIsReallyActive);
     //
     // First create some corner-stone observables to build the flow on
@@ -4759,7 +4805,7 @@
     const documentBecomesVisible = visibilityStateIsChanged.pipe(filter(() => document.visibilityState === 'visible'));
     // Any of various user-activity-related events happen:
     const userDoesSomething = typeof window !== 'undefined'
-        ? rxjs.merge(documentBecomesVisible, rxjs.fromEvent(window, 'mousemove'), rxjs.fromEvent(window, 'keydown'), rxjs.fromEvent(window, 'wheel'), rxjs.fromEvent(window, 'touchmove'))
+        ? rxjs.merge(documentBecomesVisible, rxjs.fromEvent(window, 'mousedown'), rxjs.fromEvent(window, 'mousemove'), rxjs.fromEvent(window, 'keydown'), rxjs.fromEvent(window, 'wheel'), rxjs.fromEvent(window, 'touchmove'))
         : rxjs.of({});
     if (typeof document !== 'undefined') {
         //
@@ -4810,6 +4856,7 @@
         constructor(databaseUrl, rev, realmSetHash, clientIdentity, token, tokenExpiration, subscriber, messageProducer, webSocketStatus) {
             super(() => this.teardown());
             this.id = ++counter;
+            this.reconnecting = false;
             console.debug('New WebSocket Connection', this.id, token ? 'authorized' : 'unauthorized');
             this.databaseUrl = databaseUrl;
             this.rev = rev;
@@ -4829,7 +4876,7 @@
             this.disconnect();
         }
         disconnect() {
-            this.webSocketStatus.next("disconnected");
+            this.webSocketStatus.next('disconnected');
             if (this.pinger) {
                 clearInterval(this.pinger);
                 this.pinger = null;
@@ -4847,11 +4894,18 @@
             }
         }
         reconnect() {
-            this.disconnect();
-            this.connect();
+            if (this.reconnecting)
+                return;
+            this.reconnecting = true;
+            try {
+                this.disconnect();
+            }
+            catch { }
+            this.connect()
+                .catch(() => { })
+                .then(() => (this.reconnecting = false)); // finally()
         }
         async connect() {
-            this.webSocketStatus.next("connecting");
             this.lastServerActivity = new Date();
             if (this.pauseUntil && this.pauseUntil > new Date()) {
                 console.debug('WS not reconnecting just yet', {
@@ -4866,12 +4920,14 @@
             if (!this.databaseUrl)
                 throw new Error(`Cannot connect without a database URL`);
             if (this.closed) {
+                //console.debug('SyncStatus: DUBB: Ooops it was closed!');
                 return;
             }
             if (this.tokenExpiration && this.tokenExpiration < new Date()) {
                 this.subscriber.error(new TokenExpiredError()); // Will be handled in connectWebSocket.ts.
                 return;
             }
+            this.webSocketStatus.next('connecting');
             this.pinger = setInterval(async () => {
                 if (this.closed) {
                     console.debug('pinger check', this.id, 'CLOSED.');
@@ -4918,7 +4974,7 @@
             const searchParams = new URLSearchParams();
             if (this.subscriber.closed)
                 return;
-            searchParams.set('v', "2");
+            searchParams.set('v', '2');
             searchParams.set('rev', this.rev);
             searchParams.set('realmsHash', this.realmSetHash);
             searchParams.set('clientId', this.clientIdentity);
@@ -4957,23 +5013,30 @@
                 }
             };
             try {
+                let everConnected = false;
                 await new Promise((resolve, reject) => {
                     ws.onopen = (event) => {
                         console.debug('dexie-cloud WebSocket onopen');
+                        everConnected = true;
                         resolve(null);
                     };
                     ws.onerror = (event) => {
-                        const error = event.error || new Error('WebSocket Error');
-                        this.disconnect();
-                        this.subscriber.error(error);
-                        this.webSocketStatus.next("error");
-                        reject(error);
+                        if (!everConnected) {
+                            const error = event.error || new Error('WebSocket Error');
+                            this.subscriber.error(error);
+                            this.webSocketStatus.next('error');
+                            reject(error);
+                        }
+                        else {
+                            this.reconnect();
+                        }
                     };
                 });
-                this.messageProducerSubscription = this.messageProducer.subscribe(msg => {
+                this.messageProducerSubscription = this.messageProducer.subscribe((msg) => {
                     if (!this.closed) {
-                        if (msg.type === 'ready' && this.webSocketStatus.value !== 'connected') {
-                            this.webSocketStatus.next("connected");
+                        if (msg.type === 'ready' &&
+                            this.webSocketStatus.value !== 'connected') {
+                            this.webSocketStatus.next('connected');
                         }
                         this.ws?.send(TSON.stringify(msg));
                     }
@@ -5010,9 +5073,9 @@
             rev: syncState.serverRevision,
         })));
         function createObservable() {
-            return db.cloud.persistedSyncState.pipe(filter(syncState => syncState?.serverRevision), // Don't connect before there's no initial sync performed.
+            return db.cloud.persistedSyncState.pipe(filter((syncState) => syncState?.serverRevision), // Don't connect before there's no initial sync performed.
             take(1), // Don't continue waking up whenever syncState change
-            switchMap((syncState) => db.cloud.currentUser.pipe(map(userLogin => [userLogin, syncState]))), switchMap(([userLogin, syncState]) => userIsReallyActive.pipe(map((isActive) => [isActive ? userLogin : null, syncState]))), switchMap(async ([userLogin, syncState]) => [userLogin, await computeRealmSetHash(syncState)]), switchMap(([userLogin, realmSetHash]) => 
+            switchMap((syncState) => db.cloud.currentUser.pipe(map((userLogin) => [userLogin, syncState]))), switchMap(([userLogin, syncState]) => userIsReallyActive.pipe(map((isActive) => [isActive ? userLogin : null, syncState]))), switchMap(async ([userLogin, syncState]) => [userLogin, await computeRealmSetHash(syncState)]), switchMap(([userLogin, realmSetHash]) => 
             // Let server end query changes from last entry of same client-ID and forward.
             // If no new entries, server won't bother the client. If new entries, server sends only those
             // and the baseRev of the last from same client-ID.
@@ -5035,7 +5098,10 @@
                 else {
                     return rxjs.throwError(error);
                 }
-            }), catchError((error) => rxjs.from(waitAndReconnectWhenUserDoesSomething(error)).pipe(switchMap(() => createObservable()))));
+            }), catchError((error) => {
+                db.cloud.webSocketStatus.next("error");
+                return rxjs.from(waitAndReconnectWhenUserDoesSomething(error)).pipe(switchMap(() => createObservable()));
+            }));
         }
         return createObservable().subscribe((msg) => {
             if (msg) {
@@ -5199,18 +5265,18 @@
         for (const table of db.tables) {
             if (db.cloud.schema?.[table.name]?.markedForSync) {
                 if (table.schema.primKey.auto) {
-                    throw new Dexie__default['default'].SchemaError(`Table ${table.name} is both autoIncremented and synced. ` +
+                    throw new Dexie__default["default"].SchemaError(`Table ${table.name} is both autoIncremented and synced. ` +
                         `Use db.cloud.configure({unsyncedTables: [${JSON.stringify(table.name)}]}) to blacklist it from sync`);
                 }
                 if (!table.schema.primKey.keyPath) {
-                    throw new Dexie__default['default'].SchemaError(`Table ${table.name} cannot be both synced and outbound. ` +
+                    throw new Dexie__default["default"].SchemaError(`Table ${table.name} cannot be both synced and outbound. ` +
                         `Use db.cloud.configure({unsyncedTables: [${JSON.stringify(table.name)}]}) to blacklist it from sync`);
                 }
             }
         }
     }
 
-    var n,u$1,i$1,t$1,r$1={},f$1=[],e$1=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i;function c$1(n,l){for(var u in l)n[u]=l[u];return n}function s$1(n){var l=n.parentNode;l&&l.removeChild(n);}function a$1(n,l,u){var i,t,o,r=arguments,f={};for(o in l)"key"==o?i=l[o]:"ref"==o?t=l[o]:f[o]=l[o];if(arguments.length>3)for(u=[u],o=3;o<arguments.length;o++)u.push(r[o]);if(null!=u&&(f.children=u),"function"==typeof n&&null!=n.defaultProps)for(o in n.defaultProps)void 0===f[o]&&(f[o]=n.defaultProps[o]);return v$1(n,f,i,t,null)}function v$1(l,u,i,t,o){var r={type:l,props:u,key:i,ref:t,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,__h:null,constructor:void 0,__v:null==o?++n.__v:o};return null!=n.vnode&&n.vnode(r),r}function y(n){return n.children}function p$1(n,l){this.props=n,this.context=l;}function d$1(n,l){if(null==l)return n.__?d$1(n.__,n.__.__k.indexOf(n)+1):null;for(var u;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e)return u.__e;return "function"==typeof n.type?d$1(n):null}function _(n){var l,u;if(null!=(n=n.__)&&null!=n.__c){for(n.__e=n.__c.base=null,l=0;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e){n.__e=n.__c.base=u.__e;break}return _(n)}}function k$1(l){(!l.__d&&(l.__d=!0)&&u$1.push(l)&&!b$1.__r++||t$1!==n.debounceRendering)&&((t$1=n.debounceRendering)||i$1)(b$1);}function b$1(){for(var n;b$1.__r=u$1.length;)n=u$1.sort(function(n,l){return n.__v.__b-l.__v.__b}),u$1=[],n.some(function(n){var l,u,i,t,o,r;n.__d&&(o=(t=(l=n).__v).__e,(r=l.__P)&&(u=[],(i=c$1({},t)).__v=t.__v+1,I(r,t,i,l.__n,void 0!==r.ownerSVGElement,null!=t.__h?[o]:null,u,null==o?d$1(t):o,t.__h),T(u,t),t.__e!=o&&_(t)));});}function m$1(n,l,u,i,t,o,e,c,s,a){var h,p,_,k,b,m,w,A=i&&i.__k||f$1,P=A.length;for(u.__k=[],h=0;h<l.length;h++)if(null!=(k=u.__k[h]=null==(k=l[h])||"boolean"==typeof k?null:"string"==typeof k||"number"==typeof k||"bigint"==typeof k?v$1(null,k,null,null,k):Array.isArray(k)?v$1(y,{children:k},null,null,null):k.__b>0?v$1(k.type,k.props,k.key,null,k.__v):k)){if(k.__=u,k.__b=u.__b+1,null===(_=A[h])||_&&k.key==_.key&&k.type===_.type)A[h]=void 0;else for(p=0;p<P;p++){if((_=A[p])&&k.key==_.key&&k.type===_.type){A[p]=void 0;break}_=null;}I(n,k,_=_||r$1,t,o,e,c,s,a),b=k.__e,(p=k.ref)&&_.ref!=p&&(w||(w=[]),_.ref&&w.push(_.ref,null,k),w.push(p,k.__c||b,k)),null!=b?(null==m&&(m=b),"function"==typeof k.type&&null!=k.__k&&k.__k===_.__k?k.__d=s=g$1(k,s,n):s=x$1(n,k,_,A,b,s),a||"option"!==u.type?"function"==typeof u.type&&(u.__d=s):n.value=""):s&&_.__e==s&&s.parentNode!=n&&(s=d$1(_));}for(u.__e=m,h=P;h--;)null!=A[h]&&("function"==typeof u.type&&null!=A[h].__e&&A[h].__e==u.__d&&(u.__d=d$1(i,h+1)),L(A[h],A[h]));if(w)for(h=0;h<w.length;h++)z(w[h],w[++h],w[++h]);}function g$1(n,l,u){var i,t;for(i=0;i<n.__k.length;i++)(t=n.__k[i])&&(t.__=n,l="function"==typeof t.type?g$1(t,l,u):x$1(u,t,t,n.__k,t.__e,l));return l}function x$1(n,l,u,i,t,o){var r,f,e;if(void 0!==l.__d)r=l.__d,l.__d=void 0;else if(null==u||t!=o||null==t.parentNode)n:if(null==o||o.parentNode!==n)n.appendChild(t),r=null;else {for(f=o,e=0;(f=f.nextSibling)&&e<i.length;e+=2)if(f==t)break n;n.insertBefore(t,o),r=o;}return void 0!==r?r:t.nextSibling}function A(n,l,u,i,t){var o;for(o in u)"children"===o||"key"===o||o in l||C(n,o,null,u[o],i);for(o in l)t&&"function"!=typeof l[o]||"children"===o||"key"===o||"value"===o||"checked"===o||u[o]===l[o]||C(n,o,l[o],u[o],i);}function P(n,l,u){"-"===l[0]?n.setProperty(l,u):n[l]=null==u?"":"number"!=typeof u||e$1.test(l)?u:u+"px";}function C(n,l,u,i,t){var o;n:if("style"===l)if("string"==typeof u)n.style.cssText=u;else {if("string"==typeof i&&(n.style.cssText=i=""),i)for(l in i)u&&l in u||P(n.style,l,"");if(u)for(l in u)i&&u[l]===i[l]||P(n.style,l,u[l]);}else if("o"===l[0]&&"n"===l[1])o=l!==(l=l.replace(/Capture$/,"")),l=l.toLowerCase()in n?l.toLowerCase().slice(2):l.slice(2),n.l||(n.l={}),n.l[l+o]=u,u?i||n.addEventListener(l,o?H:$,o):n.removeEventListener(l,o?H:$,o);else if("dangerouslySetInnerHTML"!==l){if(t)l=l.replace(/xlink[H:h]/,"h").replace(/sName$/,"s");else if("href"!==l&&"list"!==l&&"form"!==l&&"tabIndex"!==l&&"download"!==l&&l in n)try{n[l]=null==u?"":u;break n}catch(n){}"function"==typeof u||(null!=u&&(!1!==u||"a"===l[0]&&"r"===l[1])?n.setAttribute(l,u):n.removeAttribute(l));}}function $(l){this.l[l.type+!1](n.event?n.event(l):l);}function H(l){this.l[l.type+!0](n.event?n.event(l):l);}function I(l,u,i,t,o,r,f,e,s){var a,v,h,d,_,k,b,g,w,x,A,P=u.type;if(void 0!==u.constructor)return null;null!=i.__h&&(s=i.__h,e=u.__e=i.__e,u.__h=null,r=[e]),(a=n.__b)&&a(u);try{n:if("function"==typeof P){if(g=u.props,w=(a=P.contextType)&&t[a.__c],x=a?w?w.props.value:a.__:t,i.__c?b=(v=u.__c=i.__c).__=v.__E:("prototype"in P&&P.prototype.render?u.__c=v=new P(g,x):(u.__c=v=new p$1(g,x),v.constructor=P,v.render=M),w&&w.sub(v),v.props=g,v.state||(v.state={}),v.context=x,v.__n=t,h=v.__d=!0,v.__h=[]),null==v.__s&&(v.__s=v.state),null!=P.getDerivedStateFromProps&&(v.__s==v.state&&(v.__s=c$1({},v.__s)),c$1(v.__s,P.getDerivedStateFromProps(g,v.__s))),d=v.props,_=v.state,h)null==P.getDerivedStateFromProps&&null!=v.componentWillMount&&v.componentWillMount(),null!=v.componentDidMount&&v.__h.push(v.componentDidMount);else {if(null==P.getDerivedStateFromProps&&g!==d&&null!=v.componentWillReceiveProps&&v.componentWillReceiveProps(g,x),!v.__e&&null!=v.shouldComponentUpdate&&!1===v.shouldComponentUpdate(g,v.__s,x)||u.__v===i.__v){v.props=g,v.state=v.__s,u.__v!==i.__v&&(v.__d=!1),v.__v=u,u.__e=i.__e,u.__k=i.__k,u.__k.forEach(function(n){n&&(n.__=u);}),v.__h.length&&f.push(v);break n}null!=v.componentWillUpdate&&v.componentWillUpdate(g,v.__s,x),null!=v.componentDidUpdate&&v.__h.push(function(){v.componentDidUpdate(d,_,k);});}v.context=x,v.props=g,v.state=v.__s,(a=n.__r)&&a(u),v.__d=!1,v.__v=u,v.__P=l,a=v.render(v.props,v.state,v.context),v.state=v.__s,null!=v.getChildContext&&(t=c$1(c$1({},t),v.getChildContext())),h||null==v.getSnapshotBeforeUpdate||(k=v.getSnapshotBeforeUpdate(d,_)),A=null!=a&&a.type===y&&null==a.key?a.props.children:a,m$1(l,Array.isArray(A)?A:[A],u,i,t,o,r,f,e,s),v.base=u.__e,u.__h=null,v.__h.length&&f.push(v),b&&(v.__E=v.__=null),v.__e=!1;}else null==r&&u.__v===i.__v?(u.__k=i.__k,u.__e=i.__e):u.__e=j$1(i.__e,u,i,t,o,r,f,s);(a=n.diffed)&&a(u);}catch(l){u.__v=null,(s||null!=r)&&(u.__e=e,u.__h=!!s,r[r.indexOf(e)]=null),n.__e(l,u,i);}}function T(l,u){n.__c&&n.__c(u,l),l.some(function(u){try{l=u.__h,u.__h=[],l.some(function(n){n.call(u);});}catch(l){n.__e(l,u.__v);}});}function j$1(n,l,u,i,t,o,e,c){var a,v,h,y,p=u.props,d=l.props,_=l.type,k=0;if("svg"===_&&(t=!0),null!=o)for(;k<o.length;k++)if((a=o[k])&&(a===n||(_?a.localName==_:3==a.nodeType))){n=a,o[k]=null;break}if(null==n){if(null===_)return document.createTextNode(d);n=t?document.createElementNS("http://www.w3.org/2000/svg",_):document.createElement(_,d.is&&d),o=null,c=!1;}if(null===_)p===d||c&&n.data===d||(n.data=d);else {if(o=o&&f$1.slice.call(n.childNodes),v=(p=u.props||r$1).dangerouslySetInnerHTML,h=d.dangerouslySetInnerHTML,!c){if(null!=o)for(p={},y=0;y<n.attributes.length;y++)p[n.attributes[y].name]=n.attributes[y].value;(h||v)&&(h&&(v&&h.__html==v.__html||h.__html===n.innerHTML)||(n.innerHTML=h&&h.__html||""));}if(A(n,d,p,t,c),h)l.__k=[];else if(k=l.props.children,m$1(n,Array.isArray(k)?k:[k],l,u,i,t&&"foreignObject"!==_,o,e,n.firstChild,c),null!=o)for(k=o.length;k--;)null!=o[k]&&s$1(o[k]);c||("value"in d&&void 0!==(k=d.value)&&(k!==n.value||"progress"===_&&!k)&&C(n,"value",k,p.value,!1),"checked"in d&&void 0!==(k=d.checked)&&k!==n.checked&&C(n,"checked",k,p.checked,!1));}return n}function z(l,u,i){try{"function"==typeof l?l(u):l.current=u;}catch(l){n.__e(l,i);}}function L(l,u,i){var t,o,r;if(n.unmount&&n.unmount(l),(t=l.ref)&&(t.current&&t.current!==l.__e||z(t,null,u)),i||"function"==typeof l.type||(i=null!=(o=l.__e)),l.__e=l.__d=void 0,null!=(t=l.__c)){if(t.componentWillUnmount)try{t.componentWillUnmount();}catch(l){n.__e(l,u);}t.base=t.__P=null;}if(t=l.__k)for(r=0;r<t.length;r++)t[r]&&L(t[r],u,i);null!=o&&s$1(o);}function M(n,l,u){return this.constructor(n,u)}function N(l,u,i){var t,o,e;n.__&&n.__(l,u),o=(t="function"==typeof i)?null:i&&i.__k||u.__k,e=[],I(u,l=(!t&&i||u).__k=a$1(y,null,[l]),o||r$1,r$1,void 0!==u.ownerSVGElement,!t&&i?[i]:o?null:u.firstChild?f$1.slice.call(u.childNodes):null,e,!t&&i?i:o?o.__e:u.firstChild,t),T(e,l);}n={__e:function(n,l){for(var u,i,t;l=l.__;)if((u=l.__c)&&!u.__)try{if((i=u.constructor)&&null!=i.getDerivedStateFromError&&(u.setState(i.getDerivedStateFromError(n)),t=u.__d),null!=u.componentDidCatch&&(u.componentDidCatch(n),t=u.__d),t)return u.__E=u}catch(l){n=l;}throw n},__v:0},p$1.prototype.setState=function(n,l){var u;u=null!=this.__s&&this.__s!==this.state?this.__s:this.__s=c$1({},this.state),"function"==typeof n&&(n=n(c$1({},u),this.props)),n&&c$1(u,n),null!=n&&this.__v&&(l&&this.__h.push(l),k$1(this));},p$1.prototype.forceUpdate=function(n){this.__v&&(this.__e=!0,n&&this.__h.push(n),k$1(this));},p$1.prototype.render=y,u$1=[],i$1="function"==typeof Promise?Promise.prototype.then.bind(Promise.resolve()):setTimeout,b$1.__r=0,0;
+    var n,u$1,i$1,t$1,r$1={},f$1=[],e$1=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i;function c$1(n,l){for(var u in l)n[u]=l[u];return n}function s$1(n){var l=n.parentNode;l&&l.removeChild(n);}function a$1(n,l,u){var i,t,o,r=arguments,f={};for(o in l)"key"==o?i=l[o]:"ref"==o?t=l[o]:f[o]=l[o];if(arguments.length>3)for(u=[u],o=3;o<arguments.length;o++)u.push(r[o]);if(null!=u&&(f.children=u),"function"==typeof n&&null!=n.defaultProps)for(o in n.defaultProps)void 0===f[o]&&(f[o]=n.defaultProps[o]);return v$1(n,f,i,t,null)}function v$1(l,u,i,t,o){var r={type:l,props:u,key:i,ref:t,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,__h:null,constructor:void 0,__v:null==o?++n.__v:o};return null!=n.vnode&&n.vnode(r),r}function y(n){return n.children}function p$1(n,l){this.props=n,this.context=l;}function d$1(n,l){if(null==l)return n.__?d$1(n.__,n.__.__k.indexOf(n)+1):null;for(var u;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e)return u.__e;return "function"==typeof n.type?d$1(n):null}function _(n){var l,u;if(null!=(n=n.__)&&null!=n.__c){for(n.__e=n.__c.base=null,l=0;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e){n.__e=n.__c.base=u.__e;break}return _(n)}}function k$1(l){(!l.__d&&(l.__d=!0)&&u$1.push(l)&&!b$1.__r++||t$1!==n.debounceRendering)&&((t$1=n.debounceRendering)||i$1)(b$1);}function b$1(){for(var n;b$1.__r=u$1.length;)n=u$1.sort(function(n,l){return n.__v.__b-l.__v.__b}),u$1=[],n.some(function(n){var l,u,i,t,o,r;n.__d&&(o=(t=(l=n).__v).__e,(r=l.__P)&&(u=[],(i=c$1({},t)).__v=t.__v+1,I(r,t,i,l.__n,void 0!==r.ownerSVGElement,null!=t.__h?[o]:null,u,null==o?d$1(t):o,t.__h),T(u,t),t.__e!=o&&_(t)));});}function m$1(n,l,u,i,t,o,e,c,s,a){var h,p,_,k,b,m,w,A=i&&i.__k||f$1,P=A.length;for(u.__k=[],h=0;h<l.length;h++)if(null!=(k=u.__k[h]=null==(k=l[h])||"boolean"==typeof k?null:"string"==typeof k||"number"==typeof k||"bigint"==typeof k?v$1(null,k,null,null,k):Array.isArray(k)?v$1(y,{children:k},null,null,null):k.__b>0?v$1(k.type,k.props,k.key,null,k.__v):k)){if(k.__=u,k.__b=u.__b+1,null===(_=A[h])||_&&k.key==_.key&&k.type===_.type)A[h]=void 0;else for(p=0;p<P;p++){if((_=A[p])&&k.key==_.key&&k.type===_.type){A[p]=void 0;break}_=null;}I(n,k,_=_||r$1,t,o,e,c,s,a),b=k.__e,(p=k.ref)&&_.ref!=p&&(w||(w=[]),_.ref&&w.push(_.ref,null,k),w.push(p,k.__c||b,k)),null!=b?(null==m&&(m=b),"function"==typeof k.type&&null!=k.__k&&k.__k===_.__k?k.__d=s=g$1(k,s,n):s=x$1(n,k,_,A,b,s),a||"option"!==u.type?"function"==typeof u.type&&(u.__d=s):n.value=""):s&&_.__e==s&&s.parentNode!=n&&(s=d$1(_));}for(u.__e=m,h=P;h--;)null!=A[h]&&("function"==typeof u.type&&null!=A[h].__e&&A[h].__e==u.__d&&(u.__d=d$1(i,h+1)),L(A[h],A[h]));if(w)for(h=0;h<w.length;h++)z(w[h],w[++h],w[++h]);}function g$1(n,l,u){var i,t;for(i=0;i<n.__k.length;i++)(t=n.__k[i])&&(t.__=n,l="function"==typeof t.type?g$1(t,l,u):x$1(u,t,t,n.__k,t.__e,l));return l}function x$1(n,l,u,i,t,o){var r,f,e;if(void 0!==l.__d)r=l.__d,l.__d=void 0;else if(null==u||t!=o||null==t.parentNode)n:if(null==o||o.parentNode!==n)n.appendChild(t),r=null;else {for(f=o,e=0;(f=f.nextSibling)&&e<i.length;e+=2)if(f==t)break n;n.insertBefore(t,o),r=o;}return void 0!==r?r:t.nextSibling}function A(n,l,u,i,t){var o;for(o in u)"children"===o||"key"===o||o in l||C(n,o,null,u[o],i);for(o in l)t&&"function"!=typeof l[o]||"children"===o||"key"===o||"value"===o||"checked"===o||u[o]===l[o]||C(n,o,l[o],u[o],i);}function P(n,l,u){"-"===l[0]?n.setProperty(l,u):n[l]=null==u?"":"number"!=typeof u||e$1.test(l)?u:u+"px";}function C(n,l,u,i,t){var o;n:if("style"===l)if("string"==typeof u)n.style.cssText=u;else {if("string"==typeof i&&(n.style.cssText=i=""),i)for(l in i)u&&l in u||P(n.style,l,"");if(u)for(l in u)i&&u[l]===i[l]||P(n.style,l,u[l]);}else if("o"===l[0]&&"n"===l[1])o=l!==(l=l.replace(/Capture$/,"")),l=l.toLowerCase()in n?l.toLowerCase().slice(2):l.slice(2),n.l||(n.l={}),n.l[l+o]=u,u?i||n.addEventListener(l,o?H:$,o):n.removeEventListener(l,o?H:$,o);else if("dangerouslySetInnerHTML"!==l){if(t)l=l.replace(/xlink[H:h]/,"h").replace(/sName$/,"s");else if("href"!==l&&"list"!==l&&"form"!==l&&"tabIndex"!==l&&"download"!==l&&l in n)try{n[l]=null==u?"":u;break n}catch(n){}"function"==typeof u||(null!=u&&(!1!==u||"a"===l[0]&&"r"===l[1])?n.setAttribute(l,u):n.removeAttribute(l));}}function $(l){this.l[l.type+!1](n.event?n.event(l):l);}function H(l){this.l[l.type+!0](n.event?n.event(l):l);}function I(l,u,i,t,o,r,f,e,s){var a,v,h,d,_,k,b,g,w,x,A,P=u.type;if(void 0!==u.constructor)return null;null!=i.__h&&(s=i.__h,e=u.__e=i.__e,u.__h=null,r=[e]),(a=n.__b)&&a(u);try{n:if("function"==typeof P){if(g=u.props,w=(a=P.contextType)&&t[a.__c],x=a?w?w.props.value:a.__:t,i.__c?b=(v=u.__c=i.__c).__=v.__E:("prototype"in P&&P.prototype.render?u.__c=v=new P(g,x):(u.__c=v=new p$1(g,x),v.constructor=P,v.render=M),w&&w.sub(v),v.props=g,v.state||(v.state={}),v.context=x,v.__n=t,h=v.__d=!0,v.__h=[]),null==v.__s&&(v.__s=v.state),null!=P.getDerivedStateFromProps&&(v.__s==v.state&&(v.__s=c$1({},v.__s)),c$1(v.__s,P.getDerivedStateFromProps(g,v.__s))),d=v.props,_=v.state,h)null==P.getDerivedStateFromProps&&null!=v.componentWillMount&&v.componentWillMount(),null!=v.componentDidMount&&v.__h.push(v.componentDidMount);else {if(null==P.getDerivedStateFromProps&&g!==d&&null!=v.componentWillReceiveProps&&v.componentWillReceiveProps(g,x),!v.__e&&null!=v.shouldComponentUpdate&&!1===v.shouldComponentUpdate(g,v.__s,x)||u.__v===i.__v){v.props=g,v.state=v.__s,u.__v!==i.__v&&(v.__d=!1),v.__v=u,u.__e=i.__e,u.__k=i.__k,u.__k.forEach(function(n){n&&(n.__=u);}),v.__h.length&&f.push(v);break n}null!=v.componentWillUpdate&&v.componentWillUpdate(g,v.__s,x),null!=v.componentDidUpdate&&v.__h.push(function(){v.componentDidUpdate(d,_,k);});}v.context=x,v.props=g,v.state=v.__s,(a=n.__r)&&a(u),v.__d=!1,v.__v=u,v.__P=l,a=v.render(v.props,v.state,v.context),v.state=v.__s,null!=v.getChildContext&&(t=c$1(c$1({},t),v.getChildContext())),h||null==v.getSnapshotBeforeUpdate||(k=v.getSnapshotBeforeUpdate(d,_)),A=null!=a&&a.type===y&&null==a.key?a.props.children:a,m$1(l,Array.isArray(A)?A:[A],u,i,t,o,r,f,e,s),v.base=u.__e,u.__h=null,v.__h.length&&f.push(v),b&&(v.__E=v.__=null),v.__e=!1;}else null==r&&u.__v===i.__v?(u.__k=i.__k,u.__e=i.__e):u.__e=j$1(i.__e,u,i,t,o,r,f,s);(a=n.diffed)&&a(u);}catch(l){u.__v=null,(s||null!=r)&&(u.__e=e,u.__h=!!s,r[r.indexOf(e)]=null),n.__e(l,u,i);}}function T(l,u){n.__c&&n.__c(u,l),l.some(function(u){try{l=u.__h,u.__h=[],l.some(function(n){n.call(u);});}catch(l){n.__e(l,u.__v);}});}function j$1(n,l,u,i,t,o,e,c){var a,v,h,y,p=u.props,d=l.props,_=l.type,k=0;if("svg"===_&&(t=!0),null!=o)for(;k<o.length;k++)if((a=o[k])&&(a===n||(_?a.localName==_:3==a.nodeType))){n=a,o[k]=null;break}if(null==n){if(null===_)return document.createTextNode(d);n=t?document.createElementNS("http://www.w3.org/2000/svg",_):document.createElement(_,d.is&&d),o=null,c=!1;}if(null===_)p===d||c&&n.data===d||(n.data=d);else {if(o=o&&f$1.slice.call(n.childNodes),v=(p=u.props||r$1).dangerouslySetInnerHTML,h=d.dangerouslySetInnerHTML,!c){if(null!=o)for(p={},y=0;y<n.attributes.length;y++)p[n.attributes[y].name]=n.attributes[y].value;(h||v)&&(h&&(v&&h.__html==v.__html||h.__html===n.innerHTML)||(n.innerHTML=h&&h.__html||""));}if(A(n,d,p,t,c),h)l.__k=[];else if(k=l.props.children,m$1(n,Array.isArray(k)?k:[k],l,u,i,t&&"foreignObject"!==_,o,e,n.firstChild,c),null!=o)for(k=o.length;k--;)null!=o[k]&&s$1(o[k]);c||("value"in d&&void 0!==(k=d.value)&&(k!==n.value||"progress"===_&&!k)&&C(n,"value",k,p.value,!1),"checked"in d&&void 0!==(k=d.checked)&&k!==n.checked&&C(n,"checked",k,p.checked,!1));}return n}function z(l,u,i){try{"function"==typeof l?l(u):l.current=u;}catch(l){n.__e(l,i);}}function L(l,u,i){var t,o,r;if(n.unmount&&n.unmount(l),(t=l.ref)&&(t.current&&t.current!==l.__e||z(t,null,u)),i||"function"==typeof l.type||(i=null!=(o=l.__e)),l.__e=l.__d=void 0,null!=(t=l.__c)){if(t.componentWillUnmount)try{t.componentWillUnmount();}catch(l){n.__e(l,u);}t.base=t.__P=null;}if(t=l.__k)for(r=0;r<t.length;r++)t[r]&&L(t[r],u,i);null!=o&&s$1(o);}function M(n,l,u){return this.constructor(n,u)}function N(l,u,i){var t,o,e;n.__&&n.__(l,u),o=(t="function"==typeof i)?null:i&&i.__k||u.__k,e=[],I(u,l=(!t&&i||u).__k=a$1(y,null,[l]),o||r$1,r$1,void 0!==u.ownerSVGElement,!t&&i?[i]:o?null:u.firstChild?f$1.slice.call(u.childNodes):null,e,!t&&i?i:o?o.__e:u.firstChild,t),T(e,l);}n={__e:function(n,l){for(var u,i,t;l=l.__;)if((u=l.__c)&&!u.__)try{if((i=u.constructor)&&null!=i.getDerivedStateFromError&&(u.setState(i.getDerivedStateFromError(n)),t=u.__d),null!=u.componentDidCatch&&(u.componentDidCatch(n),t=u.__d),t)return u.__E=u}catch(l){n=l;}throw n},__v:0},p$1.prototype.setState=function(n,l){var u;u=null!=this.__s&&this.__s!==this.state?this.__s:this.__s=c$1({},this.state),"function"==typeof n&&(n=n(c$1({},u),this.props)),n&&c$1(u,n),null!=n&&this.__v&&(l&&this.__h.push(l),k$1(this));},p$1.prototype.forceUpdate=function(n){this.__v&&(this.__e=!0,n&&this.__h.push(n),k$1(this));},p$1.prototype.render=y,u$1=[],i$1="function"==typeof Promise?Promise.prototype.then.bind(Promise.resolve()):setTimeout,b$1.__r=0;
 
     const Styles = {
         Error: {
@@ -5459,6 +5525,21 @@
         return rv;
     }
 
+    const getGlobalRolesObservable = associate((db) => {
+        return createSharedValueObservable(Dexie.liveQuery(() => db.roles
+            .where({ realmId: 'rlm-public' })
+            .toArray()
+            .then((roles) => {
+            const rv = {};
+            for (const role of roles
+                .slice()
+                .sort((a, b) => (a.sortOrder || 0) - (b.sortOrder || 0))) {
+                rv[role.name] = role;
+            }
+            return rv;
+        })), {});
+    });
+
     const getCurrentUserEmitter = associate((db) => new rxjs.BehaviorSubject(UNAUTHORIZED_USER));
 
     const getInternalAccessControlObservable = associate((db) => {
@@ -5560,18 +5641,38 @@
     }
 
     const getPermissionsLookupObservable = associate((db) => {
-        const o = getInternalAccessControlObservable(db._novip);
-        return mapValueObservable(o, ({ selfMembers, realms, userId }) => {
+        const o = createSharedValueObservable(rxjs.combineLatest([
+            getInternalAccessControlObservable(db._novip),
+            getGlobalRolesObservable(db._novip),
+        ]).pipe(map(([{ selfMembers, realms, userId }, globalRoles]) => ({
+            selfMembers,
+            realms,
+            userId,
+            globalRoles,
+        }))), {
+            selfMembers: [],
+            realms: [],
+            userId: UNAUTHORIZED_USER.userId,
+            globalRoles: {},
+        });
+        return mapValueObservable(o, ({ selfMembers, realms, userId, globalRoles }) => {
             const rv = realms
-                .map((realm) => ({
-                ...realm,
-                permissions: realm.owner === userId
-                    ? { manage: '*' }
-                    : mergePermissions(...selfMembers
-                        .filter((m) => m.realmId === realm.realmId)
-                        .map((m) => m.permissions)
-                        .filter((p) => p)),
-            }))
+                .map((realm) => {
+                const selfRealmMembers = selfMembers.filter((m) => m.realmId === realm.realmId);
+                const directPermissionSets = selfRealmMembers
+                    .map((m) => m.permissions)
+                    .filter((p) => p);
+                const rolePermissionSets = flatten(selfRealmMembers.map((m) => m.roles).filter((roleName) => roleName))
+                    .map((role) => globalRoles[role])
+                    .filter((role) => role)
+                    .map((role) => role.permissions);
+                return {
+                    ...realm,
+                    permissions: realm.owner === userId
+                        ? { manage: '*' }
+                        : mergePermissions(...directPermissionSets, ...rolePermissionSets),
+                };
+            })
                 .reduce((p, c) => ({ ...p, [c.realmId]: c }), {
                 [userId]: {
                     realmId: userId,
@@ -5655,7 +5756,7 @@
             const realm = permissionsLookup[realmId || dexie.cloud.currentUserId];
             if (!realm)
                 return new PermissionChecker({}, tableName, !owner || owner === dexie.cloud.currentUserId);
-            return new PermissionChecker(realm.permissions, tableName, !owner || owner === dexie.cloud.currentUserId);
+            return new PermissionChecker(realm.permissions, tableName, realmId === dexie.cloud.currentUserId || owner === dexie.cloud.currentUserId);
         };
         const o = source.pipe(map(mapper));
         o.getValue = () => mapper(source.getValue());
@@ -5691,6 +5792,7 @@
         //
         const currentUserEmitter = getCurrentUserEmitter(dexie);
         const subscriptions = [];
+        let configuredProgramatically = false;
         // local sync worker - used when there's no service worker.
         let localSyncWorker = null;
         dexie.on('ready', async (dexie) => {
@@ -5707,7 +5809,7 @@
         let closed = false;
         function throwIfClosed() {
             if (closed)
-                throw new Dexie__default['default'].DatabaseClosedError();
+                throw new Dexie__default["default"].DatabaseClosedError();
         }
         dbOnClosed(dexie, () => {
             subscriptions.forEach((subscription) => subscription.unsubscribe());
@@ -5738,8 +5840,10 @@
                 await login(db, hint);
             },
             invites: getInvitesObservable(dexie),
+            roles: getGlobalRolesObservable(dexie),
             configure(options) {
                 options = dexie.cloud.options = { ...dexie.cloud.options, ...options };
+                configuredProgramatically = true;
                 if (options.databaseUrl && options.nameSuffix) {
                     // @ts-ignore
                     dexie.name = `${origIdbName}-${getDbNameFromDbUrl(options.databaseUrl)}`;
@@ -5787,7 +5891,7 @@
                 return permissions(dexie._novip, obj, tableName);
             },
         };
-        dexie.Version.prototype['_parseStoresSpec'] = Dexie__default['default'].override(dexie.Version.prototype['_parseStoresSpec'], (origFunc) => overrideParseStoresSpec(origFunc, dexie));
+        dexie.Version.prototype['_parseStoresSpec'] = Dexie__default["default"].override(dexie.Version.prototype['_parseStoresSpec'], (origFunc) => overrideParseStoresSpec(origFunc, dexie));
         dexie.Table.prototype.newId = function ({ colocateWith } = {}) {
             const shardKey = colocateWith && colocateWith.substr(colocateWith.length - 3);
             return generateKey(dexie.cloud.schema[this.name].idPrefix || '', shardKey);
@@ -5826,7 +5930,7 @@
                     db.getSchema(),
                     db.getPersistedSyncState(),
                 ]);
-                if (!options) {
+                if (!configuredProgramatically) {
                     // Options not specified programatically (use case for SW!)
                     // Take persisted options:
                     db.cloud.options = persistedOptions || null;
@@ -5834,6 +5938,8 @@
                 else if (!persistedOptions ||
                     JSON.stringify(persistedOptions) !== JSON.stringify(options)) {
                     // Update persisted options:
+                    if (!options)
+                        throw new Error(`Internal error`); // options cannot be null if configuredProgramatically is set.
                     await db.$syncState.put(options, 'options');
                 }
                 if (db.cloud.options?.tryUseServiceWorker &&
@@ -5956,14 +6062,14 @@
         }
     }
     dexieCloud.version = '{version}';
-    Dexie__default['default'].Cloud = dexieCloud;
+    Dexie__default["default"].Cloud = dexieCloud;
 
-    exports.default = dexieCloud;
+    exports["default"] = dexieCloud;
     exports.dexieCloud = dexieCloud;
     exports.getTiedObjectId = getTiedObjectId;
     exports.getTiedRealmId = getTiedRealmId;
 
     Object.defineProperty(exports, '__esModule', { value: true });
 
-})));
+}));
 //# sourceMappingURL=dexie-cloud-addon.js.map