gemi 0.122.0 → 0.124.0

package/dist/{chunk-sx340k85.js → chunk-zsfwcdqn.js}

@@ -1,4 +1,4 @@
 // @bun
-import{Q as I}from"./chunk-0ejjgzwc.js";import{_ as A}from"./chunk-zrcd9hxr.js";import"./chunk-s5k3yq6t.js";import{aa as f}from"./chunk-32n8t8x6.js";import{ij as t,mj as T}from"./chunk-tewhms9w.js";var N=t(I(),1),a=t(f(),1),d=t(A(),1);import{readFileSync as g}from"fs";var c=(e)=>async(s)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:i,providerId:n,policyArns:m,policy:S,durationSeconds:l}=e,{roleAssumerWithWebIdentity:E}=e;if(!E){let{getDefaultRoleAssumerWithWebIdentity:p}=await import("./chunk-jaa6xkeh.js").then((m)=>t(m.default,1));E=p({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...s?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return E({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:i,ProviderId:n,PolicyArns:m,Policy:S,DurationSeconds:l})};var _="AWS_WEB_IDENTITY_TOKEN_FILE",O="AWS_ROLE_ARN",k="AWS_ROLE_SESSION_NAME",L=(e={})=>async(s)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[_],r=e?.roleArn??process.env[O],i=e?.roleSessionName??process.env[k];if(!o||!r)throw new a.CredentialsProviderError("Web identity configuration not specified",{logger:e.logger});let n=await c({...e,webIdentityToken:d.externalDataInterceptor?.getTokenRecord?.()[o]??g(o,{encoding:"ascii"}),roleArn:r,roleSessionName:i})(s);if(o===process.env[_])N.setCredentialFeature(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return n};export{c as fromWebToken,L as fromTokenFile};
+import{Q as I}from"./chunk-fn2qfwgx.js";import{_ as A}from"./chunk-b5afy6k9.js";import"./chunk-121p4g9j.js";import{aa as f}from"./chunk-kzsjyvvc.js";import{Jj as t,Nj as T}from"./chunk-17dndh5z.js";var N=t(I(),1),a=t(f(),1),d=t(A(),1);import{readFileSync as g}from"fs";var c=(e)=>async(s)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:i,providerId:n,policyArns:m,policy:S,durationSeconds:l}=e,{roleAssumerWithWebIdentity:E}=e;if(!E){let{getDefaultRoleAssumerWithWebIdentity:p}=await import("./chunk-qdj8ek8z.js").then((m)=>t(m.default,1));E=p({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...s?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return E({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:i,ProviderId:n,PolicyArns:m,Policy:S,DurationSeconds:l})};var _="AWS_WEB_IDENTITY_TOKEN_FILE",O="AWS_ROLE_ARN",k="AWS_ROLE_SESSION_NAME",L=(e={})=>async(s)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[_],r=e?.roleArn??process.env[O],i=e?.roleSessionName??process.env[k];if(!o||!r)throw new a.CredentialsProviderError("Web identity configuration not specified",{logger:e.logger});let n=await c({...e,webIdentityToken:d.externalDataInterceptor?.getTokenRecord?.()[o]??g(o,{encoding:"ascii"}),roleArn:r,roleSessionName:i})(s);if(o===process.env[_])N.setCredentialFeature(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return n};export{c as fromWebToken,L as fromTokenFile};
 
-//# debugId=FE3397C062FD3E1564756E2164756E21
+//# debugId=3E5A0D44A9F1FE0F64756E2164756E21

package/dist/{chunk-sx340k85.js.map → chunk-zsfwcdqn.js.map}

@@ -6,6 +6,6 @@
     "export const fromWebToken = (init) => async (awsIdentityProperties) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromWebToken\");\n    const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;\n    let { roleAssumerWithWebIdentity } = init;\n    if (!roleAssumerWithWebIdentity) {\n        const { getDefaultRoleAssumerWithWebIdentity } = await import(\"@aws-sdk/nested-clients/sts\");\n        roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({\n            ...init.clientConfig,\n            credentialProviderLogger: init.logger,\n            parentClientConfig: {\n                ...awsIdentityProperties?.callerClientConfig,\n                ...init.parentClientConfig,\n            },\n        }, init.clientPlugins);\n    }\n    return roleAssumerWithWebIdentity({\n        RoleArn: roleArn,\n        RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,\n        WebIdentityToken: webIdentityToken,\n        ProviderId: providerId,\n        PolicyArns: policyArns,\n        Policy: policy,\n        DurationSeconds: durationSeconds,\n    });\n};\n"
   ],
   "mappings": ";8NAAA,SACA,KACA,KACA,iBAAS,WCHF,IAAM,EAAe,CAAC,IAAS,MAAO,IAA0B,CACnE,EAAK,QAAQ,MAAM,0DAA0D,EAC7E,IAAQ,UAAS,kBAAiB,mBAAkB,aAAY,aAAY,SAAQ,mBAAoB,GAClG,8BAA+B,EACrC,GAAI,CAAC,EAA4B,CAC7B,IAAQ,wCAAyC,KAAa,yDAC9D,EAA6B,EAAqC,IAC3D,EAAK,aACR,yBAA0B,EAAK,OAC/B,mBAAoB,IACb,GAAuB,sBACvB,EAAK,kBACZ,CACJ,EAAG,EAAK,aAAa,EAEzB,OAAO,EAA2B,CAC9B,QAAS,EACT,gBAAiB,GAAmB,sBAAsB,KAAK,IAAI,IACnE,iBAAkB,EAClB,WAAY,EACZ,WAAY,EACZ,OAAQ,EACR,gBAAiB,CACrB,CAAC,GDlBL,IAAM,EAAiB,8BACjB,EAAe,eACf,EAAwB,wBACjB,EAAgB,CAAC,EAAO,CAAC,IAAM,MAAO,IAA0B,CACzE,EAAK,QAAQ,MAAM,2DAA2D,EAC9E,IAAM,EAAuB,GAAM,sBAAwB,QAAQ,IAAI,GACjE,EAAU,GAAM,SAAW,QAAQ,IAAI,GACvC,EAAkB,GAAM,iBAAmB,QAAQ,IAAI,GAC7D,GAAI,CAAC,GAAwB,CAAC,EAC1B,MAAM,IAAI,2BAAyB,2CAA4C,CAC3E,OAAQ,EAAK,MACjB,CAAC,EAEL,IAAM,EAAc,MAAM,EAAa,IAChC,EACH,iBAAkB,2BAAyB,iBAAiB,EAAE,IAC1D,EAAa,EAAsB,CAAE,SAAU,OAAQ,CAAC,EAC5D,UACA,iBACJ,CAAC,EAAE,CAAqB,EACxB,GAAI,IAAyB,QAAQ,IAAI,GACrC,uBAAqB,EAAa,wCAAyC,GAAG,EAElF,OAAO",
-  "debugId": "FE3397C062FD3E1564756E2164756E21",
+  "debugId": "3E5A0D44A9F1FE0F64756E2164756E21",
   "names": []
 }

package/dist/{chunk-4fx8p02c.js → chunk-zsvav1dk.js}

@@ -1,5 +1,5 @@
 // @bun
 class A extends Error{constructor(p,q){super(`Target [${p}] is not bound in the container.`+(q.length>0?` Bound tokens: ${q.join(", ")}.`:" No tokens are bound \u2014 was the application booted?"));this.name="BindingResolutionError"}}class C{bindings=new Map;instances=new Map;bind(p,q){this.bindings.set(p.token,{factory:q,shared:!1}),this.instances.delete(p.token)}singleton(p,q){this.bindings.set(p.token,{factory:q,shared:!0}),this.instances.delete(p.token)}instance(p,q){return this.instances.set(p.token,q),q}bound(p){return this.bindings.has(p.token)||this.instances.has(p.token)}resolved(p){return this.instances.has(p.token)}make(p){let q=p.token;if(this.instances.has(q))return this.instances.get(q);let v=this.bindings.get(q);if(!v)throw new A(q,this.keys());let x=v.factory(this);if(v.shared)this.instances.set(q,x);return x}forget(p){this.instances.delete(p.token)}keys(){return[...new Set([...this.bindings.keys(),...this.instances.keys()])]}flush(){this.bindings.clear(),this.instances.clear()}}
-export{A as Qi,C as Ri};
+export{A as pj,C as qj};
 
-//# debugId=03048F32BC0020A364756E2164756E21
+//# debugId=E4DACAD868710DAF64756E2164756E21

package/dist/{chunk-4fx8p02c.js.map → chunk-zsvav1dk.js.map}

@@ -5,6 +5,6 @@
     "/**\n * Tokens are the service classes themselves, so `make(MailManager)` is typed\n * `MailManager` without a cast. The container keys its bindings off the class's\n * `static token` string rather than the constructor object: the built binary\n * (`dist/bin/gemi.js`) bundles its own copy of gemi while the app resolves\n * `gemi/*` to source, so the same service is two distinct class objects across\n * that boundary. A string survives it. Laravel binds both `'mail'` and\n * `MailManager::class` for the same reason.\n */\nexport type ServiceToken<T> = (abstract new (...args: any[]) => T) & {\n  token: string;\n};\n\nexport type Factory<T> = (app: Container) => T;\n\ninterface Binding {\n  factory: Factory<any>;\n  shared: boolean;\n}\n\nexport class BindingResolutionError extends Error {\n  constructor(token: string, known: string[]) {\n    super(\n      `Target [${token}] is not bound in the container.` +\n        (known.length > 0\n          ? ` Bound tokens: ${known.join(\", \")}.`\n          : \" No tokens are bound — was the application booted?\"),\n    );\n    this.name = \"BindingResolutionError\";\n  }\n}\n\nexport class Container {\n  private bindings = new Map<string, Binding>();\n  private instances = new Map<string, any>();\n\n  bind<T>(token: ServiceToken<T>, factory: Factory<T>) {\n    this.bindings.set(token.token, { factory, shared: false });\n    this.instances.delete(token.token);\n  }\n\n  /**\n   * Lazy by design — `factory` is not called until the first `make()`.\n   */\n  singleton<T>(token: ServiceToken<T>, factory: Factory<T>) {\n    this.bindings.set(token.token, { factory, shared: true });\n    this.instances.delete(token.token);\n  }\n\n  instance<T>(token: ServiceToken<T>, object: T): T {\n    this.instances.set(token.token, object);\n    return object;\n  }\n\n  bound<T>(token: ServiceToken<T>): boolean {\n    return (\n      this.bindings.has(token.token) || this.instances.has(token.token)\n    );\n  }\n\n  resolved<T>(token: ServiceToken<T>): boolean {\n    return this.instances.has(token.token);\n  }\n\n  make<T>(token: ServiceToken<T>): T {\n    const key = token.token;\n\n    if (this.instances.has(key)) {\n      return this.instances.get(key) as T;\n    }\n\n    const binding = this.bindings.get(key);\n    if (!binding) {\n      throw new BindingResolutionError(key, this.keys());\n    }\n\n    const object = binding.factory(this) as T;\n    if (binding.shared) {\n      this.instances.set(key, object);\n    }\n    return object;\n  }\n\n  forget<T>(token: ServiceToken<T>) {\n    this.instances.delete(token.token);\n  }\n\n  keys(): string[] {\n    return [\n      ...new Set([...this.bindings.keys(), ...this.instances.keys()]),\n    ];\n  }\n\n  flush() {\n    this.bindings.clear();\n    this.instances.clear();\n  }\n}\n"
   ],
   "mappings": ";AAoBO,MAAM,UAA+B,KAAM,CAChD,WAAW,CAAC,EAAe,EAAiB,CAC1C,MACE,WAAW,qCACR,EAAM,OAAS,EACZ,kBAAkB,EAAM,KAAK,IAAI,KACjC,0DACR,EACA,KAAK,KAAO,yBAEhB,CAEO,MAAM,CAAU,CACb,SAAW,IAAI,IACf,UAAY,IAAI,IAExB,IAAO,CAAC,EAAwB,EAAqB,CACnD,KAAK,SAAS,IAAI,EAAM,MAAO,CAAE,UAAS,OAAQ,EAAM,CAAC,EACzD,KAAK,UAAU,OAAO,EAAM,KAAK,EAMnC,SAAY,CAAC,EAAwB,EAAqB,CACxD,KAAK,SAAS,IAAI,EAAM,MAAO,CAAE,UAAS,OAAQ,EAAK,CAAC,EACxD,KAAK,UAAU,OAAO,EAAM,KAAK,EAGnC,QAAW,CAAC,EAAwB,EAAc,CAEhD,OADA,KAAK,UAAU,IAAI,EAAM,MAAO,CAAM,EAC/B,EAGT,KAAQ,CAAC,EAAiC,CACxC,OACE,KAAK,SAAS,IAAI,EAAM,KAAK,GAAK,KAAK,UAAU,IAAI,EAAM,KAAK,EAIpE,QAAW,CAAC,EAAiC,CAC3C,OAAO,KAAK,UAAU,IAAI,EAAM,KAAK,EAGvC,IAAO,CAAC,EAA2B,CACjC,IAAM,EAAM,EAAM,MAElB,GAAI,KAAK,UAAU,IAAI,CAAG,EACxB,OAAO,KAAK,UAAU,IAAI,CAAG,EAG/B,IAAM,EAAU,KAAK,SAAS,IAAI,CAAG,EACrC,GAAI,CAAC,EACH,MAAM,IAAI,EAAuB,EAAK,KAAK,KAAK,CAAC,EAGnD,IAAM,EAAS,EAAQ,QAAQ,IAAI,EACnC,GAAI,EAAQ,OACV,KAAK,UAAU,IAAI,EAAK,CAAM,EAEhC,OAAO,EAGT,MAAS,CAAC,EAAwB,CAChC,KAAK,UAAU,OAAO,EAAM,KAAK,EAGnC,IAAI,EAAa,CACf,MAAO,CACL,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,KAAK,EAAG,GAAG,KAAK,UAAU,KAAK,CAAC,CAAC,CAChE,EAGF,KAAK,EAAG,CACN,KAAK,SAAS,MAAM,EACpB,KAAK,UAAU,MAAM,EAEzB",
-  "debugId": "03048F32BC0020A364756E2164756E21",
+  "debugId": "E4DACAD868710DAF64756E2164756E21",
   "names": []
 }

package/dist/chunks/{ThemeProvider-BLI4zpLu.js → ThemeProvider-CbOx8IRl.js}

@@ -726,6 +726,585 @@ function toVariantKey(search) {
 	return searchParams.toString();
 }
 //#endregion
+//#region services/broadcast/protocol.ts
+/**
+* The `gemi.v1` WebSocket protocol, shared by the server transport
+* (`SocketHub`) and the browser client (`gemi/client`'s connection manager).
+* Types and constants only: this module is imported by the browser bundle, so
+* it must never import a server module.
+*
+* Every frame is a JSON text frame. Binary frames are refused.
+*
+* From the client:
+*
+* - `{op:"sub", id, ch, p?}`: subscribe `id` (chosen by the client, unique per
+*   socket) to the channel pattern `ch` with params `p`. The server builds
+*   the topic and authorizes it.
+* - `{op:"unsub", id}`
+* - `{op:"ping"}`: answered with `pong`. The client sends one every
+*   `heartbeatMs` and reconnects when it hears nothing for twice that.
+*
+* From the server:
+*
+* - `{op:"hello", socketId, tag, heartbeatMs}`: the first frame. `socketId`
+*   goes in the `X-Gemi-Socket` header of the client's own requests (for
+*   `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what
+*   an event frame's `x` carries when it skips this socket.
+* - `{op:"subscribed", id, t}`: `id` joined topic `t`. Sent only once this
+*   process receives the topic's events, so the resync the client runs on it
+*   cannot miss one.
+* - `{op:"denied", id, code}`: `id` was refused, or later revoked.
+* - `{op:"ev", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket
+*   whose `tag` is `x`.
+* - `{op:"gap"}`: events may have been lost for this socket; resync all.
+* - `{op:"pong"}`
+* - `{op:"bye", code, retryAfter}`: the server is going away (a restart).
+*   Reconnect after `retryAfter` ms.
+*/
+/** The WebSocket subprotocol. */
+var BROADCAST_PROTOCOL = "gemi.v1";
+/** The request header a client sends its socket id in, for `toOthers`. */
+var SOCKET_ID_HEADER = "x-gemi-socket";
+/**
+* Close codes the server uses. 1012 and 1013 are the standard "restart" and
+* "try again later"; the 4xxx ones are gemi's own.
+*/
+var CloseCode = {
+	/** The client went away (tab closed, socket released). */
+	Normal: 1e3,
+	/** A frame that was not JSON text, or not a known op. */
+	UnsupportedData: 1003,
+	/** Too many frames, or a frame over the size limit. */
+	PolicyViolation: 1008,
+	/** The server is restarting; `bye` said when to come back. */
+	Restart: 1012,
+	/** The socket fell too far behind; reconnect and resync. */
+	TryAgainLater: 1013,
+	/** The socket's user was signed out or its access revoked. */
+	Revoked: 4001
+};
+/**
+* Whether a refusal is final for this socket's session: resubscribing will
+* get the same answer, so the client does not retry it on its own.
+*/
+function isPermanentDenial(code) {
+	return code === "unknown_channel" || code === "invalid_params" || code === "invalid";
+}
+//#endregion
+//#region client/realtime/RealtimeClient.ts
+/** The minimum gap between two resyncs of one subscription. */
+var RESYNC_COALESCE_MS = 2e3;
+/** How long the socket stays open after its last subscription goes. */
+var IDLE_CLOSE_MS = 5e3;
+/**
+* How long a subscription outlives its last listener. A hook that remounts
+* within it (StrictMode's double mount, a route change back, a list that
+* re-renders its rows) picks the same subscription up again: no `unsub`, no
+* new `sub`, nothing counted against the server's rate limit.
+*/
+var RELEASE_LINGER_MS = 1500;
+/** The least wait before resending a `sub` denied with `rate_limited`. */
+var RATE_LIMITED_RETRY_MS = 5e3;
+var MIN_BACKOFF_MS = 1e3;
+var MAX_BACKOFF_MS = 3e4;
+var DEFAULT_HEARTBEAT_MS = 25e3;
+var DEFAULT_HIDDEN_DISCONNECT_MS = 6e4;
+/** `pattern` and its params, canonical: two hooks on one channel share a `sub`. */
+function channelKey(pattern, params) {
+	const sorted = Object.keys(params).sort().map((key) => [key, String(params[key])]);
+	return `${pattern}\u0000${JSON.stringify(sorted)}`;
+}
+/**
+* The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel
+* the mounted hooks subscribe to.
+*
+* Opened by the first subscription and closed a few seconds after the last
+* one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the
+* server's `bye.retryAfter`, at once on `online`; resubscribes everything
+* then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects
+* when shown. Every `subscribed` ack and every `gap` resyncs the
+* subscription (coalesced to one per 2 s), because events are volatile: a
+* client that may have missed one refetches over HTTP.
+*/
+var RealtimeClient = class {
+	options;
+	internals;
+	ws = null;
+	entries = /* @__PURE__ */ new Map();
+	byId = /* @__PURE__ */ new Map();
+	topics = /* @__PURE__ */ new Map();
+	nextId = 1;
+	attempt = 0;
+	tag = null;
+	socketIdValue = null;
+	heartbeatMs = DEFAULT_HEARTBEAT_MS;
+	reconnectTimer = null;
+	idleTimer = null;
+	hiddenTimer = null;
+	pingTimer = null;
+	livenessTimer = null;
+	retryAfter = null;
+	revoked = false;
+	pausedWhileHidden = false;
+	listening = false;
+	constructor(options = {}, internals = {}) {
+		this.options = withDefaults(options);
+		this.internals = internals;
+	}
+	configure(options) {
+		this.options = withDefaults({
+			...this.options,
+			...options
+		});
+	}
+	/** The id to send as `X-Gemi-Socket`, while the socket is open. */
+	get socketId() {
+		return this.socketIdValue;
+	}
+	subscribe(pattern, params, listener) {
+		const key = channelKey(pattern, params);
+		let entry = this.entries.get(key);
+		if (!entry) {
+			entry = {
+				key,
+				id: String(this.nextId++),
+				pattern,
+				params: { ...params },
+				listeners: /* @__PURE__ */ new Set(),
+				status: "closed",
+				code: null,
+				permanent: false,
+				topic: null,
+				lastResyncAt: 0,
+				resyncTimer: null,
+				lingerTimer: null,
+				retryTimer: null,
+				retries: 0
+			};
+			this.entries.set(key, entry);
+			this.byId.set(entry.id, entry);
+			if (this.isOpen()) this.sendSub(entry);
+		}
+		if (entry.lingerTimer) {
+			clearTimeout(entry.lingerTimer);
+			entry.lingerTimer = null;
+		}
+		entry.listeners.add(listener);
+		listener.onStatus?.(entry.status, entry.code);
+		this.cancelIdleClose();
+		this.listen();
+		if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) this.connect();
+		let released = false;
+		return () => {
+			if (released) return;
+			released = true;
+			this.release(entry, listener);
+		};
+	}
+	release(entry, listener) {
+		entry.listeners.delete(listener);
+		if (entry.listeners.size > 0 || entry.lingerTimer) return;
+		entry.lingerTimer = setTimeout(() => {
+			entry.lingerTimer = null;
+			if (entry.listeners.size === 0) this.drop(entry);
+		}, RELEASE_LINGER_MS);
+	}
+	drop(entry) {
+		if (entry.resyncTimer) clearTimeout(entry.resyncTimer);
+		this.clearRetry(entry);
+		this.entries.delete(entry.key);
+		this.byId.delete(entry.id);
+		this.dropTopic(entry);
+		if (this.isOpen() && (entry.status === "open" || entry.status === "connecting")) this.send({
+			op: "unsub",
+			id: entry.id
+		});
+		if (this.entries.size === 0) this.scheduleIdleClose();
+	}
+	isOpen() {
+		return this.ws !== null && this.ws.readyState === 1;
+	}
+	connect() {
+		if (typeof window === "undefined") return;
+		if (this.entries.size === 0) return;
+		const Impl = this.internals.WebSocket ?? globalThis.WebSocket;
+		if (!Impl) return;
+		this.clearReconnect();
+		let ws;
+		try {
+			ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);
+		} catch {
+			this.scheduleReconnect();
+			return;
+		}
+		this.ws = ws;
+		for (const entry of this.entries.values()) if (!entry.permanent) this.setStatus(entry, "connecting", null);
+		ws.onopen = () => {
+			if (this.ws !== ws) return;
+			this.touch();
+			for (const entry of this.entries.values()) {
+				if (entry.permanent) continue;
+				entry.retries = 0;
+				this.sendSub(entry);
+			}
+		};
+		ws.onmessage = (event) => {
+			if (this.ws !== ws) return;
+			this.touch();
+			let frame;
+			try {
+				frame = JSON.parse(String(event.data));
+			} catch {
+				return;
+			}
+			this.handle(frame);
+		};
+		ws.onclose = (event) => {
+			if (this.ws !== ws) return;
+			this.onClosed(event.code);
+		};
+		ws.onerror = () => {};
+	}
+	url() {
+		if (this.internals.url) return this.internals.url;
+		const { protocol, host } = window.location;
+		return `${protocol === "https:" ? "wss:" : "ws:"}//${host}${this.options.path}`;
+	}
+	sendSub(entry) {
+		this.setStatus(entry, "connecting", null);
+		const frame = {
+			op: "sub",
+			id: entry.id,
+			ch: entry.pattern
+		};
+		if (Object.keys(entry.params).length > 0) frame.p = entry.params;
+		this.send(frame);
+	}
+	send(frame) {
+		if (!this.isOpen()) return;
+		try {
+			this.ws.send(JSON.stringify(frame));
+		} catch {}
+	}
+	handle(frame) {
+		switch (frame.op) {
+			case "hello":
+				this.socketIdValue = frame.socketId;
+				this.tag = frame.tag;
+				this.attempt = 0;
+				this.revoked = false;
+				if (frame.heartbeatMs > 0) this.heartbeatMs = frame.heartbeatMs;
+				this.startHeartbeat();
+				return;
+			case "subscribed": {
+				const entry = this.byId.get(frame.id);
+				if (!entry) return;
+				this.dropTopic(entry);
+				entry.topic = frame.t;
+				let ids = this.topics.get(frame.t);
+				if (!ids) this.topics.set(frame.t, ids = /* @__PURE__ */ new Set());
+				ids.add(entry.id);
+				this.clearRetry(entry);
+				entry.retries = 0;
+				this.setStatus(entry, "open", null);
+				this.resync(entry);
+				return;
+			}
+			case "denied": {
+				const entry = this.byId.get(frame.id);
+				if (!entry) return;
+				this.dropTopic(entry);
+				entry.permanent = isPermanentDenial(frame.code);
+				this.setStatus(entry, "denied", frame.code);
+				this.scheduleRetry(entry, frame.code);
+				return;
+			}
+			case "ev": {
+				if (frame.x !== void 0 && frame.x === this.tag) return;
+				const ids = this.topics.get(frame.t);
+				if (!ids) return;
+				for (const id of Array.from(ids)) {
+					const entry = this.byId.get(id);
+					if (!entry) continue;
+					for (const listener of Array.from(entry.listeners)) try {
+						listener.onEvent?.(frame.ev, frame.d);
+					} catch (error) {
+						reportListenerError(error);
+					}
+				}
+				return;
+			}
+			case "gap":
+				for (const entry of this.entries.values()) if (entry.status === "open") this.resync(entry);
+				return;
+			case "bye":
+				this.retryAfter = Math.max(0, Number(frame.retryAfter) || 0);
+				return;
+			case "pong": return;
+		}
+	}
+	onClosed(code) {
+		this.ws = null;
+		this.socketIdValue = null;
+		this.tag = null;
+		this.stopHeartbeat();
+		this.topics.clear();
+		for (const entry of this.entries.values()) {
+			entry.topic = null;
+			this.clearRetry(entry);
+			if (!entry.permanent) this.setStatus(entry, "closed", null);
+		}
+		if (code === CloseCode.Revoked) this.revoked = true;
+		if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();
+	}
+	scheduleReconnect() {
+		this.clearReconnect();
+		let delay;
+		if (this.retryAfter !== null) {
+			delay = this.retryAfter;
+			this.retryAfter = null;
+		} else if (this.revoked) {
+			this.revoked = false;
+			delay = Math.floor(this.random() * 500);
+		} else delay = backoffDelay(this.attempt, this.random());
+		this.attempt++;
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = null;
+			this.connect();
+		}, delay);
+	}
+	clearReconnect() {
+		if (this.reconnectTimer) clearTimeout(this.reconnectTimer);
+		this.reconnectTimer = null;
+	}
+	random() {
+		return (this.internals.random ?? Math.random)();
+	}
+	startHeartbeat() {
+		this.stopHeartbeat();
+		this.pingTimer = setInterval(() => this.send({ op: "ping" }), this.heartbeatMs);
+		this.touch();
+	}
+	stopHeartbeat() {
+		if (this.pingTimer) clearInterval(this.pingTimer);
+		if (this.livenessTimer) clearTimeout(this.livenessTimer);
+		this.pingTimer = null;
+		this.livenessTimer = null;
+	}
+	/** Anything from the server proves the socket alive. */
+	touch() {
+		if (this.livenessTimer) clearTimeout(this.livenessTimer);
+		const ws = this.ws;
+		this.livenessTimer = setTimeout(() => {
+			if (this.ws !== ws || !ws) return;
+			try {
+				ws.close();
+			} catch {}
+			this.onClosed(1006);
+		}, this.heartbeatMs * 2);
+	}
+	setStatus(entry, status, code) {
+		if (entry.status === status && entry.code === code) return;
+		entry.status = status;
+		entry.code = code;
+		for (const listener of Array.from(entry.listeners)) try {
+			listener.onStatus?.(status, code);
+		} catch (error) {
+			reportListenerError(error);
+		}
+	}
+	/** At most one resync per subscription per 2 s; a later one is deferred, not dropped. */
+	resync(entry) {
+		if (entry.resyncTimer) return;
+		const now = Date.now();
+		const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;
+		const fire = () => {
+			entry.resyncTimer = null;
+			entry.lastResyncAt = Date.now();
+			for (const listener of Array.from(entry.listeners)) try {
+				listener.onResync?.();
+			} catch (error) {
+				reportListenerError(error);
+			}
+		};
+		if (entry.lastResyncAt === 0 || wait <= 0) fire();
+		else entry.resyncTimer = setTimeout(fire, wait);
+	}
+	/**
+	* A transient denial (`rate_limited`, `error`, `limit`) is retried on the
+	* same socket, with backoff: a healthy socket may never reconnect. `denied`
+	* and `revoked` are the channel's answer for this session, so they wait for
+	* the next connection (a sign-in reconnects), and a permanent one is never
+	* resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.
+	*/
+	scheduleRetry(entry, code) {
+		if (code !== "rate_limited" && code !== "error" && code !== "limit") return;
+		if (code === "limit" && entry.retries >= 5) return;
+		this.clearRetry(entry);
+		const delay = Math.max(code === "rate_limited" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS, backoffDelay(entry.retries, this.random()));
+		entry.retries++;
+		entry.retryTimer = setTimeout(() => {
+			entry.retryTimer = null;
+			if (this.entries.get(entry.key) !== entry || entry.status !== "denied") return;
+			if (this.isOpen()) this.sendSub(entry);
+		}, delay);
+	}
+	clearRetry(entry) {
+		if (entry.retryTimer) clearTimeout(entry.retryTimer);
+		entry.retryTimer = null;
+	}
+	dropTopic(entry) {
+		if (!entry.topic) return;
+		const ids = this.topics.get(entry.topic);
+		ids?.delete(entry.id);
+		if (ids && ids.size === 0) this.topics.delete(entry.topic);
+		entry.topic = null;
+	}
+	scheduleIdleClose() {
+		this.cancelIdleClose();
+		this.idleTimer = setTimeout(() => {
+			this.idleTimer = null;
+			if (this.entries.size > 0) return;
+			this.clearReconnect();
+			this.close();
+		}, IDLE_CLOSE_MS);
+	}
+	cancelIdleClose() {
+		if (this.idleTimer) clearTimeout(this.idleTimer);
+		this.idleTimer = null;
+	}
+	/** Closes the socket without reconnecting. */
+	close() {
+		const ws = this.ws;
+		if (!ws) return;
+		this.ws = null;
+		try {
+			ws.close(CloseCode.Normal);
+		} catch {}
+		this.onClosed(CloseCode.Normal);
+	}
+	listen() {
+		if (this.listening || typeof window === "undefined") return;
+		this.listening = true;
+		window.addEventListener("online", this.onOnline);
+		if (typeof document !== "undefined") document.addEventListener("visibilitychange", this.onVisibility);
+	}
+	onOnline = () => {
+		if (this.entries.size === 0 || this.ws || this.pausedWhileHidden) return;
+		this.attempt = 0;
+		this.connect();
+	};
+	onVisibility = () => {
+		if (document.visibilityState === "hidden") {
+			if (this.hiddenTimer) return;
+			this.hiddenTimer = setTimeout(() => {
+				this.hiddenTimer = null;
+				if (document.visibilityState !== "hidden") return;
+				this.pausedWhileHidden = true;
+				this.clearReconnect();
+				this.close();
+			}, this.options.hiddenDisconnectMs);
+			return;
+		}
+		if (this.hiddenTimer) clearTimeout(this.hiddenTimer);
+		this.hiddenTimer = null;
+		if (this.pausedWhileHidden) {
+			this.pausedWhileHidden = false;
+			this.attempt = 0;
+			this.connect();
+		}
+	};
+	/**
+	* Drops the socket and opens a new one at once, when anything is
+	* subscribed. A socket keeps the session it was opened with (the upgrade's
+	* cookies), so signing in or out in this tab reconnects it: every channel
+	* is then authorized as the new session, and the acks resync.
+	*/
+	reconnect() {
+		this.close();
+		this.clearReconnect();
+		this.attempt = 0;
+		if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();
+	}
+	/** For tests: drops the socket, timers and listeners. */
+	dispose() {
+		this.clearReconnect();
+		this.cancelIdleClose();
+		if (this.hiddenTimer) clearTimeout(this.hiddenTimer);
+		for (const entry of this.entries.values()) {
+			if (entry.resyncTimer) clearTimeout(entry.resyncTimer);
+			if (entry.lingerTimer) clearTimeout(entry.lingerTimer);
+			this.clearRetry(entry);
+		}
+		this.entries.clear();
+		this.byId.clear();
+		this.close();
+		if (this.listening && typeof window !== "undefined") {
+			window.removeEventListener("online", this.onOnline);
+			document?.removeEventListener("visibilitychange", this.onVisibility);
+			this.listening = false;
+		}
+	}
+};
+/** Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. */
+function backoffDelay(attempt, random) {
+	const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS * 2 ** Math.min(attempt, 10));
+	return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));
+}
+function withDefaults(options) {
+	return {
+		path: options.path ?? "/__gemi/socket",
+		hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS
+	};
+}
+function reportListenerError(error) {
+	setTimeout(() => {
+		throw error;
+	});
+}
+var configured = {};
+var instance = null;
+/**
+* Sets the socket options (`init({ realtime })` calls it). Takes effect on
+* the next connection.
+*/
+function configureRealtime(options = {}) {
+	configured = {
+		...configured,
+		...options
+	};
+	instance?.configure(configured);
+}
+/** The tab's client, created on first use. `null` on the server. */
+function getRealtimeClient() {
+	if (typeof window === "undefined") return null;
+	instance ??= new RealtimeClient(configured);
+	return instance;
+}
+/**
+* Reconnects the tab's socket, if it has one, so its channels are authorized
+* as the current session. The auth hooks call it after signing in or out.
+* Never creates the client.
+*/
+function reconnectRealtime() {
+	instance?.reconnect();
+}
+/**
+* The open socket's id, for the `X-Gemi-Socket` header, or `null`. Never
+* creates the client.
+*/
+function currentSocketId() {
+	return instance?.socketId ?? null;
+}
+//#endregion
+//#region client/realtime/RealtimeContext.ts
+/**
+* The socket the channel hooks subscribe through. `null` (the default) is the
+* tab's own `RealtimeClient`, created on first use in the browser; `<Page>`
+* in `gemi/testing` provides a `FakeSocket`.
+*/
+var RealtimeContext = createContext(null);
+//#endregion
 //#region ../../node_modules/.bun/@babel+runtime@7.29.2/node_modules/@babel/runtime/helpers/esm/extends.js
 function _extends() {
 	return _extends = Object.assign ? Object.assign.bind() : function(n) {
@@ -3408,6 +3987,6 @@ function useTheme() {
 	return context;
 }
 //#endregion
-export { useLocation as A, QueryManagerProvider as B, useRoute as C, I18nProvider as D, I18nContext as E, createMemoryHistory as F, retryDelayFor as G, pickDefined as H, toVariantKey as I, Subject as J, shouldRetryQuery as K, applyParams as L, isAbsoluteUrl as M, ProgressManager as N, ServerDataContext as O, Action as P, QueryConfigContext as R, routeDataUrl as S, useNavigate as T, DEFAULT_STALE_TIME as U, USER_QUERY_CONFIG_KEYS as V, isRetryableQueryError as W, loadDictionary as _, useRouteTransition as a, setActiveLocale as b, ComponentsContext as c, loadViewModule as d, subscribeViewModules as f, recoverFromChunkLoadError as g, isChunkLoadError as h, RouteTransitionProvider as i, domainUrl as j, ServerDataProvider as k, ComponentsProvider as l, configureChunkLoadRecovery as m, useTheme as n, ClientRouterContext as o, CHUNK_RELOAD_MARKER as p, QueryError as q, m as r, ClientRouterProvider as s, ThemeProvider as t, initialViewModulesReady as u, loadDictionaryForRender as v, useSearchParams as w, readRoutePayload as x, registerDictionary as y, QueryManagerContext as z };
+export { shouldRetryQuery as $, useLocation as A, getRealtimeClient as B, useRoute as C, I18nProvider as D, I18nContext as E, createMemoryHistory as F, QueryConfigContext as G, SOCKET_ID_HEADER as H, RealtimeContext as I, USER_QUERY_CONFIG_KEYS as J, QueryManagerContext as K, channelKey as L, isAbsoluteUrl as M, ProgressManager as N, ServerDataContext as O, Action as P, retryDelayFor as Q, configureRealtime as R, routeDataUrl as S, useNavigate as T, toVariantKey as U, reconnectRealtime as V, applyParams as W, DEFAULT_STALE_TIME as X, pickDefined as Y, isRetryableQueryError as Z, loadDictionary as _, useRouteTransition as a, setActiveLocale as b, ComponentsContext as c, loadViewModule as d, QueryError as et, subscribeViewModules as f, recoverFromChunkLoadError as g, isChunkLoadError as h, RouteTransitionProvider as i, domainUrl as j, ServerDataProvider as k, ComponentsProvider as l, configureChunkLoadRecovery as m, useTheme as n, ClientRouterContext as o, CHUNK_RELOAD_MARKER as p, QueryManagerProvider as q, m as r, ClientRouterProvider as s, ThemeProvider as t, Subject as tt, initialViewModulesReady as u, loadDictionaryForRender as v, useSearchParams as w, readRoutePayload as x, registerDictionary as y, currentSocketId as z };
 
-//# sourceMappingURL=ThemeProvider-BLI4zpLu.js.map
+//# sourceMappingURL=ThemeProvider-CbOx8IRl.js.map