npm - gemi - Versions diffs - 0.179.0 → 0.181.0 - Mend

gemi 0.179.0 → 0.181.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (249) hide show

package/dist/chunks/{RealtimeClient-DpAJYcF5.js.map → RealtimeClient-CHNbqDr7.js.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"RealtimeClient-DpAJYcF5.js","names":[],"sources":["../../services/broadcast/protocol.ts","../../client/realtime/RealtimeClient.ts"],"sourcesContent":["/*\n The `gemi.v1` WebSocket protocol, shared by the server transport\n * (`SocketHub`) and the browser client (`gemi/client`'s connection manager).\n * Types and constants only: this module is imported by the browser bundle, so\n * it must never import a server module.\n \n Every frame is a JSON text frame. Binary frames are refused.\n \n From the client:\n \n - `{op:\"sub\", id, ch, p?}`: subscribe `id` (chosen by the client, unique per\n * socket) to the channel pattern `ch` with params `p`. The server builds\n * the topic and authorizes it.\n * - `{op:\"unsub\", id}`\n * - `{op:\"ping\"}`: answered with `pong`. The client sends one every\n * `heartbeatMs` and reconnects when it hears nothing for twice that.\n \n From the server:\n \n - `{op:\"hello\", socketId, tag, heartbeatMs}`: the first frame. `socketId`\n * goes in the `X-Gemi-Socket` header of the client's own requests (for\n * `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what\n * an event frame's `x` carries when it skips this socket.\n * - `{op:\"subscribed\", id, t}`: `id` joined topic `t`. Sent only once this\n * process receives the topic's events, so the resync the client runs on it\n * cannot miss one.\n * - `{op:\"denied\", id, code}`: `id` was refused, or later revoked.\n * - `{op:\"ev\", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket\n * whose `tag` is `x`.\n * - `{op:\"gap\"}`: events may have been lost for this socket; resync all.\n * - `{op:\"pong\"}`\n * - `{op:\"bye\", code, retryAfter}`: the server is going away (a restart).\n * Reconnect after `retryAfter` ms.\n /\n\n/* The WebSocket subprotocol. /\nexport const BROADCAST_PROTOCOL = \"gemi.v1\";\n\n/* The default endpoint, `defineBroadcastConfig({ path })`. /\nexport const DEFAULT_SOCKET_PATH = \"/__gemi/socket\";\n\nexport { SOCKET_ID_HEADER } from \"./socketHeader\";\n\n/* What a subscription id may look like. /\nexport const SUBSCRIPTION_ID = /^[A-Za-z0-9_-]{1,32}$/;\n\n/\n Close codes the server uses. 1012 and 1013 are the standard \"restart\" and\n * \"try again later\"; the 4xxx ones are gemi's own.\n /\nexport const CloseCode = {\n /* The client went away (tab closed, socket released). /\n Normal: 1000,\n /* A frame that was not JSON text, or not a known op. /\n UnsupportedData: 1003,\n /* Too many frames, or a frame over the size limit. /\n PolicyViolation: 1008,\n /* The server is restarting; `bye` said when to come back. /\n Restart: 1012,\n /* The socket fell too far behind; reconnect and resync. /\n TryAgainLater: 1013,\n /* The socket's user was signed out or its access revoked. /\n Revoked: 4001,\n} as const;\n\n/* Why a subscription was refused. /\nexport type DeniedCode =\n /* No channel with that pattern. Permanent. /\n \| \"unknown_channel\"\n /* Missing, extra or malformed params. Permanent. /\n \| \"invalid_params\"\n /* The channel's authorization said no. /\n \| \"denied\"\n /* Authorization failed (a session store outage, a bug). Retryable. /\n \| \"error\"\n /* The socket has `maxChannelsPerSocket` subscriptions already. /\n \| \"limit\"\n /* Too many `sub`/`unsub` frames; retry later. /\n \| \"rate_limited\"\n /* The subscription was revoked by `Broadcast.revoke`. /\n \| \"revoked\"\n /* The frame was malformed, or the id is already in use. /\n \| \"invalid\";\n\nexport type ClientFrame =\n \| { op: \"sub\"; id: string; ch: string; p?: Record<string, string \| number> }\n \| { op: \"unsub\"; id: string }\n \| { op: \"ping\" };\n\nexport type ServerFrame =\n \| { op: \"hello\"; socketId: string; tag: string; heartbeatMs: number }\n \| { op: \"subscribed\"; id: string; t: string }\n \| { op: \"denied\"; id: string; code: DeniedCode }\n \| { op: \"ev\"; t: string; ev: string; d?: unknown; x?: string }\n \| { op: \"gap\" }\n \| { op: \"pong\" }\n \| { op: \"bye\"; code: number; retryAfter: number };\n\n/\n Whether a refusal is final for this socket's session: resubscribing will\n * get the same answer, so the client does not retry it on its own.\n /\nexport function isPermanentDenial(code: DeniedCode): boolean {\n return code === \"unknown_channel\" \|\| code === \"invalid_params\" \|\| code === \"invalid\";\n}\n","import {\n BROADCAST_PROTOCOL,\n CloseCode,\n DEFAULT_SOCKET_PATH,\n isPermanentDenial,\n type ClientFrame,\n type DeniedCode,\n type ServerFrame,\n} from \"../../services/broadcast/protocol\";\nimport { channelKey } from \"./channelKey\";\nimport { realtime } from \"./loader\";\n\n/\n Where a channel subscription stands, as the hooks report it.\n \n - `idle`: the hook is disabled (`enabled: false`).\n * - `connecting`: the socket is opening, or the `sub` awaits its answer.\n * - `open`: subscribed; events arrive.\n * - `denied`: the server refused (or revoked) it; `code` says why.\n * - `closed`: no socket, on the server, before the first effect, or while\n * waiting to reconnect.\n /\nexport type ChannelStatus = \"idle\" \| \"connecting\" \| \"open\" \| \"denied\" \| \"closed\";\n\nexport type ChannelParamValues = Record<string, string \| number>;\n\n/* What a hook hands the socket for one channel. /\nexport interface ChannelListener {\n onEvent?(event: string, data: unknown): void;\n /* Events may have been missed: refetch what the channel describes. /\n onResync?(): void;\n onStatus?(status: ChannelStatus, code: DeniedCode \| null): void;\n}\n\n/\n What the hooks subscribe through: the tab's `RealtimeClient`, or a\n * `FakeSocket` in tests. Returns the release function.\n /\nexport interface RealtimeSocket {\n subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void;\n}\n\nexport interface RealtimeOptions {\n /* The socket endpoint, `defineBroadcastConfig({ path })`. Default `/__gemi/socket`. /\n path?: string;\n /\n How long a hidden tab keeps its socket, in ms, before disconnecting. On\n * becoming visible again it reconnects and resyncs. Default 60 000.\n /\n hiddenDisconnectMs?: number;\n}\n\ninterface ClientInternals {\n /* Test seam: the WebSocket class. /\n WebSocket?: typeof WebSocket;\n /* Test seam: the full URL, instead of the page's origin + `path`. /\n url?: string;\n random?: () => number;\n}\n\n/* The minimum gap between two resyncs of one subscription. /\nexport const RESYNC_COALESCE_MS = 2_000;\n/* How long the socket stays open after its last subscription goes. /\nexport const IDLE_CLOSE_MS = 5_000;\n/\n How long a subscription outlives its last listener. A hook that remounts\n * within it (StrictMode's double mount, a route change back, a list that\n * re-renders its rows) picks the same subscription up again: no `unsub`, no\n * new `sub`, nothing counted against the server's rate limit.\n /\nexport const RELEASE_LINGER_MS = 1_500;\n/* The least wait before resending a `sub` denied with `rate_limited`. /\nconst RATE_LIMITED_RETRY_MS = 5_000;\n/\n How often a `sub` denied with `limit` is resent on one socket. The socket\n * holds as many channels as the server allows, so only a released one makes\n * room: worth a few tries with backoff, not a retry for as long as the socket\n * lives. Past it the subscription waits for the next connection.\n /\nexport const MAX_LIMIT_RETRIES = 5;\nconst MIN_BACKOFF_MS = 1_000;\nconst MAX_BACKOFF_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 25_000;\nconst DEFAULT_HIDDEN_DISCONNECT_MS = 60_000;\n\ninterface Entry {\n key: string;\n id: string;\n pattern: string;\n params: ChannelParamValues;\n listeners: Set<ChannelListener>;\n status: ChannelStatus;\n code: DeniedCode \| null;\n /* Refused for good: not resent on a reconnect. /\n permanent: boolean;\n topic: string \| null;\n lastResyncAt: number;\n resyncTimer: ReturnType<typeof setTimeout> \| null;\n /* Set while the entry outlives its last listener; see `RELEASE_LINGER_MS`. /\n lingerTimer: ReturnType<typeof setTimeout> \| null;\n /* A transient denial's resend, on the same socket. /\n retryTimer: ReturnType<typeof setTimeout> \| null;\n retries: number;\n}\n\n/\n The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel\n * the mounted hooks subscribe to.\n \n Opened by the first subscription and closed a few seconds after the last\n * one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the\n * server's `bye.retryAfter`, at once on `online`; resubscribes everything\n * then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects\n * when shown. Every `subscribed` ack and every `gap` resyncs the\n * subscription (coalesced to one per 2 s), because events are volatile: a\n * client that may have missed one refetches over HTTP.\n \n Loaded on first use (#891): import this module as a type only, and reach\n * the tab's instance through `./loader`, or it lands in every route's entry\n * chunk.\n /\nexport class RealtimeClient implements RealtimeSocket {\n private options: Required<RealtimeOptions>;\n private readonly internals: ClientInternals;\n private ws: WebSocket \| null = null;\n private entries = new Map<string, Entry>();\n private byId = new Map<string, Entry>();\n private topics = new Map<string, Set<string>>();\n private nextId = 1;\n private attempt = 0;\n private tag: string \| null = null;\n private socketIdValue: string \| null = null;\n private heartbeatMs = DEFAULT_HEARTBEAT_MS;\n private reconnectTimer: ReturnType<typeof setTimeout> \| null = null;\n private idleTimer: ReturnType<typeof setTimeout> \| null = null;\n private hiddenTimer: ReturnType<typeof setTimeout> \| null = null;\n private pingTimer: ReturnType<typeof setInterval> \| null = null;\n private livenessTimer: ReturnType<typeof setTimeout> \| null = null;\n private retryAfter: number \| null = null;\n private revoked = false;\n private pausedWhileHidden = false;\n private listening = false;\n\n constructor(options: RealtimeOptions = {}, internals: ClientInternals = {}) {\n this.options = withDefaults(options);\n this.internals = internals;\n }\n\n configure(options: RealtimeOptions) {\n this.options = withDefaults({ ...this.options, ...options });\n }\n\n /* The id to send as `X-Gemi-Socket`, while the socket is open. /\n get socketId(): string \| null {\n return this.socketIdValue;\n }\n\n subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void {\n const key = channelKey(pattern, params);\n let entry = this.entries.get(key);\n if (!entry) {\n entry = {\n key,\n id: String(this.nextId++),\n pattern,\n params: { ...params },\n listeners: new Set(),\n status: \"closed\",\n code: null,\n permanent: false,\n topic: null,\n lastResyncAt: 0,\n resyncTimer: null,\n lingerTimer: null,\n retryTimer: null,\n retries: 0,\n };\n this.entries.set(key, entry);\n this.byId.set(entry.id, entry);\n if (this.isOpen()) {\n this.sendSub(entry);\n }\n }\n if (entry.lingerTimer) {\n clearTimeout(entry.lingerTimer);\n entry.lingerTimer = null;\n }\n entry.listeners.add(listener);\n listener.onStatus?.(entry.status, entry.code);\n this.cancelIdleClose();\n this.listen();\n if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) {\n this.connect();\n }\n\n let released = false;\n return () => {\n if (released) return;\n released = true;\n this.release(entry!, listener);\n };\n }\n\n private release(entry: Entry, listener: ChannelListener) {\n entry.listeners.delete(listener);\n if (entry.listeners.size > 0 \|\| entry.lingerTimer) return;\n entry.lingerTimer = setTimeout(() => {\n entry.lingerTimer = null;\n if (entry.listeners.size === 0) this.drop(entry);\n }, RELEASE_LINGER_MS);\n }\n\n private drop(entry: Entry) {\n if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n this.clearRetry(entry);\n this.entries.delete(entry.key);\n this.byId.delete(entry.id);\n this.dropTopic(entry);\n if (this.isOpen() && (entry.status === \"open\" \|\| entry.status === \"connecting\")) {\n this.send({ op: \"unsub\", id: entry.id });\n }\n if (this.entries.size === 0) this.scheduleIdleClose();\n }\n\n private isOpen() {\n return this.ws !== null && this.ws.readyState === 1;\n }\n\n private connect() {\n if (typeof window === \"undefined\") return;\n if (this.entries.size === 0) return;\n const Impl = this.internals.WebSocket ?? globalThis.WebSocket;\n if (!Impl) return;\n this.clearReconnect();\n let ws: WebSocket;\n try {\n ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);\n } catch {\n this.scheduleReconnect();\n return;\n }\n this.ws = ws;\n for (const entry of this.entries.values()) {\n if (!entry.permanent) this.setStatus(entry, \"connecting\", null);\n }\n ws.onopen = () => {\n if (this.ws !== ws) return;\n this.touch();\n for (const entry of this.entries.values()) {\n if (entry.permanent) continue;\n // A new socket starts every transient denial's count over.\n entry.retries = 0;\n this.sendSub(entry);\n }\n };\n ws.onmessage = (event: MessageEvent) => {\n if (this.ws !== ws) return;\n this.touch();\n let frame: ServerFrame;\n try {\n frame = JSON.parse(String(event.data));\n } catch {\n return;\n }\n this.handle(frame);\n };\n ws.onclose = (event: CloseEvent) => {\n if (this.ws !== ws) return;\n this.onClosed(event.code);\n };\n ws.onerror = () => {\n // A `close` follows.\n };\n }\n\n private url(): string {\n if (this.internals.url) return this.internals.url;\n const { protocol, host } = window.location;\n return `${protocol === \"https:\" ? \"wss:\" : \"ws:\"}//${host}${this.options.path}`;\n }\n\n private sendSub(entry: Entry) {\n this.setStatus(entry, \"connecting\", null);\n const frame: ClientFrame = { op: \"sub\", id: entry.id, ch: entry.pattern };\n if (Object.keys(entry.params).length > 0) frame.p = entry.params;\n this.send(frame);\n }\n\n private send(frame: ClientFrame) {\n if (!this.isOpen()) return;\n try {\n this.ws!.send(JSON.stringify(frame));\n } catch {\n // The close handler takes over.\n }\n }\n\n private handle(frame: ServerFrame) {\n switch (frame.op) {\n case \"hello\":\n this.socketIdValue = frame.socketId;\n this.tag = frame.tag;\n this.attempt = 0;\n this.revoked = false;\n if (frame.heartbeatMs > 0) {\n this.heartbeatMs = frame.heartbeatMs;\n }\n this.startHeartbeat();\n return;\n case \"subscribed\": {\n const entry = this.byId.get(frame.id);\n if (!entry) return;\n this.dropTopic(entry);\n entry.topic = frame.t;\n let ids = this.topics.get(frame.t);\n if (!ids) this.topics.set(frame.t, (ids = new Set()));\n ids.add(entry.id);\n this.clearRetry(entry);\n entry.retries = 0;\n this.setStatus(entry, \"open\", null);\n // The window between the view rendering and this ack, or the time\n // the socket was down, may have carried events this tab missed.\n this.resync(entry);\n return;\n }\n case \"denied\": {\n const entry = this.byId.get(frame.id);\n if (!entry) return;\n this.dropTopic(entry);\n entry.permanent = isPermanentDenial(frame.code);\n this.setStatus(entry, \"denied\", frame.code);\n this.scheduleRetry(entry, frame.code);\n return;\n }\n case \"ev\": {\n if (frame.x !== undefined && frame.x === this.tag) return;\n const ids = this.topics.get(frame.t);\n if (!ids) return;\n for (const id of Array.from(ids)) {\n const entry = this.byId.get(id);\n if (!entry) continue;\n for (const listener of Array.from(entry.listeners)) {\n try {\n listener.onEvent?.(frame.ev, frame.d);\n } catch (error) {\n reportListenerError(error);\n }\n }\n }\n return;\n }\n case \"gap\":\n for (const entry of this.entries.values()) {\n if (entry.status === \"open\") this.resync(entry);\n }\n return;\n case \"bye\":\n this.retryAfter = Math.max(0, Number(frame.retryAfter) \|\| 0);\n return;\n case \"pong\":\n return;\n }\n }\n\n private onClosed(code: number) {\n this.ws = null;\n this.socketIdValue = null;\n this.tag = null;\n this.stopHeartbeat();\n this.topics.clear();\n for (const entry of this.entries.values()) {\n entry.topic = null;\n // The reconnect resends it.\n this.clearRetry(entry);\n if (!entry.permanent) this.setStatus(entry, \"closed\", null);\n }\n if (code === CloseCode.Revoked) this.revoked = true;\n if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();\n }\n\n private scheduleReconnect() {\n this.clearReconnect();\n let delay: number;\n if (this.retryAfter !== null) {\n delay = this.retryAfter;\n this.retryAfter = null;\n } else if (this.revoked) {\n // Signed out or access revoked: come back promptly, as whoever we are now.\n this.revoked = false;\n delay = Math.floor(this.random() 500);\n } else {\n delay = backoffDelay(this.attempt, this.random());\n }\n this.attempt++;\n this.reconnectTimer = setTimeout(() => {\n this.reconnectTimer = null;\n this.connect();\n }, delay);\n }\n\n private clearReconnect() {\n if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n this.reconnectTimer = null;\n }\n\n private random() {\n return (this.internals.random ?? Math.random)();\n }\n\n private startHeartbeat() {\n this.stopHeartbeat();\n this.pingTimer = setInterval(() => this.send({ op: \"ping\" }), this.heartbeatMs);\n this.touch();\n }\n\n private stopHeartbeat() {\n if (this.pingTimer) clearInterval(this.pingTimer);\n if (this.livenessTimer) clearTimeout(this.livenessTimer);\n this.pingTimer = null;\n this.livenessTimer = null;\n }\n\n /** Anything from the server proves the socket alive. /\n private touch() {\n if (this.livenessTimer) clearTimeout(this.livenessTimer);\n const ws = this.ws;\n this.livenessTimer = setTimeout(() => {\n if (this.ws !== ws \|\| !ws) return;\n // Silent for two heartbeats: a dead connection a proxy never closed.\n try {\n ws.close();\n } catch {}\n this.onClosed(1006);\n }, this.heartbeatMs 2);\n }\n\n private setStatus(entry: Entry, status: ChannelStatus, code: DeniedCode \| null) {\n if (entry.status === status && entry.code === code) return;\n entry.status = status;\n entry.code = code;\n for (const listener of Array.from(entry.listeners)) {\n try {\n listener.onStatus?.(status, code);\n } catch (error) {\n reportListenerError(error);\n }\n }\n }\n\n /** At most one resync per subscription per 2 s; a later one is deferred, not dropped. /\n private resync(entry: Entry) {\n if (entry.resyncTimer) return;\n const now = Date.now();\n const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;\n const fire = () => {\n entry.resyncTimer = null;\n entry.lastResyncAt = Date.now();\n for (const listener of Array.from(entry.listeners)) {\n try {\n listener.onResync?.();\n } catch (error) {\n reportListenerError(error);\n }\n }\n };\n if (entry.lastResyncAt === 0 \|\| wait <= 0) fire();\n else entry.resyncTimer = setTimeout(fire, wait);\n }\n\n /\n A transient denial (`rate_limited`, `error`, `limit`) is retried on the\n * same socket, with backoff: a healthy socket may never reconnect. `denied`\n * and `revoked` are the channel's answer for this session, so they wait for\n * the next connection (a sign-in reconnects), and a permanent one is never\n * resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.\n /\n private scheduleRetry(entry: Entry, code: DeniedCode) {\n if (code !== \"rate_limited\" && code !== \"error\" && code !== \"limit\") return;\n if (code === \"limit\" && entry.retries >= MAX_LIMIT_RETRIES) return;\n this.clearRetry(entry);\n const floor = code === \"rate_limited\" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS;\n const delay = Math.max(floor, backoffDelay(entry.retries, this.random()));\n entry.retries++;\n entry.retryTimer = setTimeout(() => {\n entry.retryTimer = null;\n if (this.entries.get(entry.key) !== entry \|\| entry.status !== \"denied\") return;\n if (this.isOpen()) this.sendSub(entry);\n }, delay);\n }\n\n private clearRetry(entry: Entry) {\n if (entry.retryTimer) clearTimeout(entry.retryTimer);\n entry.retryTimer = null;\n }\n\n private dropTopic(entry: Entry) {\n if (!entry.topic) return;\n const ids = this.topics.get(entry.topic);\n ids?.delete(entry.id);\n if (ids && ids.size === 0) this.topics.delete(entry.topic);\n entry.topic = null;\n }\n\n private scheduleIdleClose() {\n this.cancelIdleClose();\n this.idleTimer = setTimeout(() => {\n this.idleTimer = null;\n if (this.entries.size > 0) return;\n this.clearReconnect();\n this.close();\n }, IDLE_CLOSE_MS);\n }\n\n private cancelIdleClose() {\n if (this.idleTimer) clearTimeout(this.idleTimer);\n this.idleTimer = null;\n }\n\n /* Closes the socket without reconnecting. /\n private close() {\n const ws = this.ws;\n if (!ws) return;\n this.ws = null;\n try {\n ws.close(CloseCode.Normal);\n } catch {}\n this.onClosed(CloseCode.Normal);\n }\n\n private listen() {\n if (this.listening \|\| typeof window === \"undefined\") return;\n this.listening = true;\n window.addEventListener(\"online\", this.onOnline);\n if (typeof document !== \"undefined\") {\n document.addEventListener(\"visibilitychange\", this.onVisibility);\n }\n }\n\n private onOnline = () => {\n if (this.entries.size === 0 \|\| this.ws \|\| this.pausedWhileHidden) return;\n this.attempt = 0;\n this.connect();\n };\n\n private onVisibility = () => {\n if (document.visibilityState === \"hidden\") {\n if (this.hiddenTimer) return;\n this.hiddenTimer = setTimeout(() => {\n this.hiddenTimer = null;\n if (document.visibilityState !== \"hidden\") return;\n this.pausedWhileHidden = true;\n this.clearReconnect();\n this.close();\n }, this.options.hiddenDisconnectMs);\n return;\n }\n if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n this.hiddenTimer = null;\n if (this.pausedWhileHidden) {\n this.pausedWhileHidden = false;\n this.attempt = 0;\n // The `subscribed` acks resync every subscription.\n this.connect();\n }\n };\n\n /\n Drops the socket and opens a new one at once, when anything is\n * subscribed. A socket keeps the session it was opened with (the upgrade's\n * cookies), so signing in or out in this tab reconnects it: every channel\n * is then authorized as the new session, and the acks resync.\n /\n reconnect() {\n this.close();\n this.clearReconnect();\n this.attempt = 0;\n if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();\n }\n\n /* For tests: drops the socket, timers and listeners. /\n dispose() {\n this.clearReconnect();\n this.cancelIdleClose();\n if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n for (const entry of this.entries.values()) {\n if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n if (entry.lingerTimer) clearTimeout(entry.lingerTimer);\n this.clearRetry(entry);\n }\n this.entries.clear();\n this.byId.clear();\n this.close();\n if (this.listening && typeof window !== \"undefined\") {\n window.removeEventListener(\"online\", this.onOnline);\n document?.removeEventListener(\"visibilitychange\", this.onVisibility);\n this.listening = false;\n }\n }\n}\n\n/* Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. /\nexport function backoffDelay(attempt: number, random: number): number {\n const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS 2 ** Math.min(attempt, 10));\n return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));\n}\n\nfunction withDefaults(options: RealtimeOptions): Required<RealtimeOptions> {\n return {\n path: options.path ?? DEFAULT_SOCKET_PATH,\n hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS,\n };\n}\n\nfunction reportListenerError(error: unknown) {\n setTimeout(() => {\n throw error;\n });\n}\n\n/*\n The tab's client, created on first use with the options `configureRealtime`\n * set. `loadRealtimeClient` in `./loader` calls it once this module is loaded.\n */\nexport function tabClient(): RealtimeClient {\n return (realtime.client ??= new RealtimeClient(realtime.options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAqB;;;;;AAclC,IAAa,YAAY;;CAEvB,QAAQ;;CAER,iBAAiB;;CAEjB,iBAAiB;;CAEjB,SAAS;;CAET,eAAe;;CAEf,SAAS;AACX;;;;;AAuCA,SAAgB,kBAAkB,MAA2B;CAC3D,OAAO,SAAS,qBAAqB,SAAS,oBAAoB,SAAS;AAC7E;;;;AC3CA,IAAa,qBAAqB;;AAElC,IAAa,gBAAgB;;;;;;;AAO7B,IAAa,oBAAoB;;AAEjC,IAAM,wBAAwB;;;;;;;AAO9B,IAAa,oBAAoB;AACjC,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;;;;;;;;;;;;;;;;;AAsCrC,IAAa,iBAAb,MAAsD;CACpD;CACA;CACA,KAA+B;CAC/B,0BAAkB,IAAI,IAAmB;CACzC,uBAAe,IAAI,IAAmB;CACtC,yBAAiB,IAAI,IAAyB;CAC9C,SAAiB;CACjB,UAAkB;CAClB,MAA6B;CAC7B,gBAAuC;CACvC,cAAsB;CACtB,iBAA+D;CAC/D,YAA0D;CAC1D,cAA4D;CAC5D,YAA2D;CAC3D,gBAA8D;CAC9D,aAAoC;CACpC,UAAkB;CAClB,oBAA4B;CAC5B,YAAoB;CAEpB,YAAY,UAA2B,CAAC,GAAG,YAA6B,CAAC,GAAG;EAC1E,KAAK,UAAU,aAAa,OAAO;EACnC,KAAK,YAAY;CACnB;CAEA,UAAU,SAA0B;EAClC,KAAK,UAAU,aAAa;GAAE,GAAG,KAAK;GAAS,GAAG;EAAQ,CAAC;CAC7D;;CAGA,IAAI,WAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,SAAiB,QAA4B,UAAuC;EAC5F,MAAM,MAAM,WAAW,SAAS,MAAM;EACtC,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAChC,IAAI,CAAC,OAAO;GACV,QAAQ;IACN;IACA,IAAI,OAAO,KAAK,QAAQ;IACxB;IACA,QAAQ,EAAE,GAAG,OAAO;IACpB,2BAAW,IAAI,IAAI;IACnB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;GACX;GACA,KAAK,QAAQ,IAAI,KAAK,KAAK;GAC3B,KAAK,KAAK,IAAI,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,OAAO,GACd,KAAK,QAAQ,KAAK;EAEtB;EACA,IAAI,MAAM,aAAa;GACrB,aAAa,MAAM,WAAW;GAC9B,MAAM,cAAc;EACtB;EACA,MAAM,UAAU,IAAI,QAAQ;EAC5B,SAAS,WAAW,MAAM,QAAQ,MAAM,IAAI;EAC5C,KAAK,gBAAgB;EACrB,KAAK,OAAO;EACZ,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,mBAC5C,KAAK,QAAQ;EAGf,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX,KAAK,QAAQ,OAAQ,QAAQ;EAC/B;CACF;CAEA,QAAgB,OAAc,UAA2B;EACvD,MAAM,UAAU,OAAO,QAAQ;EAC/B,IAAI,MAAM,UAAU,OAAO,KAAK,MAAM,aAAa;EACnD,MAAM,cAAc,iBAAiB;GACnC,MAAM,cAAc;GACpB,IAAI,MAAM,UAAU,SAAS,GAAG,KAAK,KAAK,KAAK;EACjD,GAAG,iBAAiB;CACtB;CAEA,KAAa,OAAc;EACzB,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;EACrD,KAAK,WAAW,KAAK;EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG;EAC7B,KAAK,KAAK,OAAO,MAAM,EAAE;EACzB,KAAK,UAAU,KAAK;EACpB,IAAI,KAAK,OAAO,MAAM,MAAM,WAAW,UAAU,MAAM,WAAW,eAChE,KAAK,KAAK;GAAE,IAAI;GAAS,IAAI,MAAM;EAAG,CAAC;EAEzC,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,kBAAkB;CACtD;CAEA,SAAiB;EACf,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG,eAAe;CACpD;CAEA,UAAkB;EAChB,IAAI,OAAO,WAAW,aAAa;EACnC,IAAI,KAAK,QAAQ,SAAS,GAAG;EAC7B,MAAM,OAAO,KAAK,UAAU,aAAa,WAAW;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI;GACJ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,kBAAkB,CAAC;EAC9C,QAAQ;GACN,KAAK,kBAAkB;GACvB;EACF;EACA,KAAK,KAAK;EACV,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,IAAI;EAEhE,GAAG,eAAe;GAChB,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;IACzC,IAAI,MAAM,WAAW;IAErB,MAAM,UAAU;IAChB,KAAK,QAAQ,KAAK;GACpB;EACF;EACA,GAAG,aAAa,UAAwB;GACtC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,CAAC;GACvC,QAAQ;IACN;GACF;GACA,KAAK,OAAO,KAAK;EACnB;EACA,GAAG,WAAW,UAAsB;GAClC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,SAAS,MAAM,IAAI;EAC1B;EACA,GAAG,gBAAgB,CAEnB;CACF;CAEA,MAAsB;EACpB,IAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU;EAC9C,MAAM,EAAE,UAAU,SAAS,OAAO;EAClC,OAAO,GAAG,aAAa,WAAW,SAAS,MAAM,IAAI,OAAO,KAAK,QAAQ;CAC3E;CAEA,QAAgB,OAAc;EAC5B,KAAK,UAAU,OAAO,cAAc,IAAI;EACxC,MAAM,QAAqB;GAAE,IAAI;GAAO,IAAI,MAAM;GAAI,IAAI,MAAM;EAAQ;EACxE,IAAI,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM;EAC1D,KAAK,KAAK,KAAK;CACjB;CAEA,KAAa,OAAoB;EAC/B,IAAI,CAAC,KAAK,OAAO,GAAG;EACpB,IAAI;GACF,KAAK,GAAI,KAAK,KAAK,UAAU,KAAK,CAAC;EACrC,QAAQ,CAER;CACF;CAEA,OAAe,OAAoB;EACjC,QAAQ,MAAM,IAAd;GACE,KAAK;IACH,KAAK,gBAAgB,MAAM;IAC3B,KAAK,MAAM,MAAM;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,MAAM,cAAc,GACtB,KAAK,cAAc,MAAM;IAE3B,KAAK,eAAe;IACpB;GACF,KAAK,cAAc;IACjB,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,QAAQ,MAAM;IACpB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,GAAI,sBAAM,IAAI,IAAI,CAAE;IACpD,IAAI,IAAI,MAAM,EAAE;IAChB,KAAK,WAAW,KAAK;IACrB,MAAM,UAAU;IAChB,KAAK,UAAU,OAAO,QAAQ,IAAI;IAGlC,KAAK,OAAO,KAAK;IACjB;GACF;GACA,KAAK,UAAU;IACb,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,YAAY,kBAAkB,MAAM,IAAI;IAC9C,KAAK,UAAU,OAAO,UAAU,MAAM,IAAI;IAC1C,KAAK,cAAc,OAAO,MAAM,IAAI;IACpC;GACF;GACA,KAAK,MAAM;IACT,IAAI,MAAM,MAAM,KAAA,KAAa,MAAM,MAAM,KAAK,KAAK;IACnD,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK;IACV,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,GAAG;KAChC,MAAM,QAAQ,KAAK,KAAK,IAAI,EAAE;KAC9B,IAAI,CAAC,OAAO;KACZ,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;MACF,SAAS,UAAU,MAAM,IAAI,MAAM,CAAC;KACtC,SAAS,OAAO;MACd,oBAAoB,KAAK;KAC3B;IAEJ;IACA;GACF;GACA,KAAK;IACH,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,MAAM,WAAW,QAAQ,KAAK,OAAO,KAAK;IAEhD;GACF,KAAK;IACH,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,MAAM,UAAU,KAAK,CAAC;IAC3D;GACF,KAAK,QACH;EACJ;CACF;CAEA,SAAiB,MAAc;EAC7B,KAAK,KAAK;EACV,KAAK,gBAAgB;EACrB,KAAK,MAAM;EACX,KAAK,cAAc;EACnB,KAAK,OAAO,MAAM;EAClB,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,MAAM,QAAQ;GAEd,KAAK,WAAW,KAAK;GACrB,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,UAAU,IAAI;EAC5D;EACA,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,kBAAkB;CAC/E;CAEA,oBAA4B;EAC1B,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI,KAAK,eAAe,MAAM;GAC5B,QAAQ,KAAK;GACb,KAAK,aAAa;EACpB,OAAO,IAAI,KAAK,SAAS;GAEvB,KAAK,UAAU;GACf,QAAQ,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;EACxC,OACE,QAAQ,aAAa,KAAK,SAAS,KAAK,OAAO,CAAC;EAElD,KAAK;EACL,KAAK,iBAAiB,iBAAiB;GACrC,KAAK,iBAAiB;GACtB,KAAK,QAAQ;EACf,GAAG,KAAK;CACV;CAEA,iBAAyB;EACvB,IAAI,KAAK,gBAAgB,aAAa,KAAK,cAAc;EACzD,KAAK,iBAAiB;CACxB;CAEA,SAAiB;EACf,QAAQ,KAAK,UAAU,UAAU,KAAK,OAAA,CAAQ;CAChD;CAEA,iBAAyB;EACvB,KAAK,cAAc;EACnB,KAAK,YAAY,kBAAkB,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;EAC9E,KAAK,MAAM;CACb;CAEA,gBAAwB;EACtB,IAAI,KAAK,WAAW,cAAc,KAAK,SAAS;EAChD,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,KAAK,YAAY;EACjB,KAAK,gBAAgB;CACvB;;CAGA,QAAgB;EACd,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,MAAM,KAAK,KAAK;EAChB,KAAK,gBAAgB,iBAAiB;GACpC,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;GAE3B,IAAI;IACF,GAAG,MAAM;GACX,QAAQ,CAAC;GACT,KAAK,SAAS,IAAI;EACpB,GAAG,KAAK,cAAc,CAAC;CACzB;CAEA,UAAkB,OAAc,QAAuB,MAAyB;EAC9E,IAAI,MAAM,WAAW,UAAU,MAAM,SAAS,MAAM;EACpD,MAAM,SAAS;EACf,MAAM,OAAO;EACb,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;GACF,SAAS,WAAW,QAAQ,IAAI;EAClC,SAAS,OAAO;GACd,oBAAoB,KAAK;EAC3B;CAEJ;;CAGA,OAAe,OAAc;EAC3B,IAAI,MAAM,aAAa;EACvB,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,MAAM,eAAe,qBAAqB;EACvD,MAAM,aAAa;GACjB,MAAM,cAAc;GACpB,MAAM,eAAe,KAAK,IAAI;GAC9B,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;IACF,SAAS,WAAW;GACtB,SAAS,OAAO;IACd,oBAAoB,KAAK;GAC3B;EAEJ;EACA,IAAI,MAAM,iBAAiB,KAAK,QAAQ,GAAG,KAAK;OAC3C,MAAM,cAAc,WAAW,MAAM,IAAI;CAChD;;;;;;;;CASA,cAAsB,OAAc,MAAkB;EACpD,IAAI,SAAS,kBAAkB,SAAS,WAAW,SAAS,SAAS;EACrE,IAAI,SAAS,WAAW,MAAM,WAAA,GAA8B;EAC5D,KAAK,WAAW,KAAK;EAErB,MAAM,QAAQ,KAAK,IADL,SAAS,iBAAiB,wBAAwB,gBAClC,aAAa,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC;EACxE,MAAM;EACN,MAAM,aAAa,iBAAiB;GAClC,MAAM,aAAa;GACnB,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,SAAS,MAAM,WAAW,UAAU;GACxE,IAAI,KAAK,OAAO,GAAG,KAAK,QAAQ,KAAK;EACvC,GAAG,KAAK;CACV;CAEA,WAAmB,OAAc;EAC/B,IAAI,MAAM,YAAY,aAAa,MAAM,UAAU;EACnD,MAAM,aAAa;CACrB;CAEA,UAAkB,OAAc;EAC9B,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK;EACvC,KAAK,OAAO,MAAM,EAAE;EACpB,IAAI,OAAO,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,MAAM,KAAK;EACzD,MAAM,QAAQ;CAChB;CAEA,oBAA4B;EAC1B,KAAK,gBAAgB;EACrB,KAAK,YAAY,iBAAiB;GAChC,KAAK,YAAY;GACjB,IAAI,KAAK,QAAQ,OAAO,GAAG;GAC3B,KAAK,eAAe;GACpB,KAAK,MAAM;EACb,GAAG,aAAa;CAClB;CAEA,kBAA0B;EACxB,IAAI,KAAK,WAAW,aAAa,KAAK,SAAS;EAC/C,KAAK,YAAY;CACnB;;CAGA,QAAgB;EACd,MAAM,KAAK,KAAK;EAChB,IAAI,CAAC,IAAI;EACT,KAAK,KAAK;EACV,IAAI;GACF,GAAG,MAAM,UAAU,MAAM;EAC3B,QAAQ,CAAC;EACT,KAAK,SAAS,UAAU,MAAM;CAChC;CAEA,SAAiB;EACf,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;EACrD,KAAK,YAAY;EACjB,OAAO,iBAAiB,UAAU,KAAK,QAAQ;EAC/C,IAAI,OAAO,aAAa,aACtB,SAAS,iBAAiB,oBAAoB,KAAK,YAAY;CAEnE;CAEA,iBAAyB;EACvB,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK,MAAM,KAAK,mBAAmB;EAClE,KAAK,UAAU;EACf,KAAK,QAAQ;CACf;CAEA,qBAA6B;EAC3B,IAAI,SAAS,oBAAoB,UAAU;GACzC,IAAI,KAAK,aAAa;GACtB,KAAK,cAAc,iBAAiB;IAClC,KAAK,cAAc;IACnB,IAAI,SAAS,oBAAoB,UAAU;IAC3C,KAAK,oBAAoB;IACzB,KAAK,eAAe;IACpB,KAAK,MAAM;GACb,GAAG,KAAK,QAAQ,kBAAkB;GAClC;EACF;EACA,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,cAAc;EACnB,IAAI,KAAK,mBAAmB;GAC1B,KAAK,oBAAoB;GACzB,KAAK,UAAU;GAEf,KAAK,QAAQ;EACf;CACF;;;;;;;CAQA,YAAY;EACV,KAAK,MAAM;EACX,KAAK,eAAe;EACpB,KAAK,UAAU;EACf,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,QAAQ;CACrE;;CAGA,UAAU;EACR,KAAK,eAAe;EACpB,KAAK,gBAAgB;EACrB,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,KAAK,WAAW,KAAK;EACvB;EACA,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,MAAM;EAChB,KAAK,MAAM;EACX,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;GACnD,OAAO,oBAAoB,UAAU,KAAK,QAAQ;GAClD,UAAU,oBAAoB,oBAAoB,KAAK,YAAY;GACnE,KAAK,YAAY;EACnB;CACF;AACF;;AAGA,SAAgB,aAAa,SAAiB,QAAwB;CACpE,MAAM,MAAM,KAAK,IAAI,gBAAgB,iBAAiB,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;CAChF,OAAO,KAAK,IAAI,gBAAgB,KAAK,MAAM,SAAS,GAAG,CAAC;AAC1D;AAEA,SAAS,aAAa,SAAqD;CACzE,OAAO;EACL,MAAM,QAAQ,QAAA;EACd,oBAAoB,QAAQ,sBAAsB;CACpD;AACF;AAEA,SAAS,oBAAoB,OAAgB;CAC3C,iBAAiB;EACf,MAAM;CACR,CAAC;AACH;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAQ,SAAS,WAAW,IAAI,eAAe,SAAS,OAAO;AACjE"}
1	+ {"version":3,"file":"RealtimeClient-CHNbqDr7.js","names":[],"sources":["../../services/broadcast/protocol.ts","../../client/realtime/RealtimeClient.ts"],"sourcesContent":["/*\n The `gemi.v1` WebSocket protocol, shared by the server transport\n * (`SocketHub`) and the browser client (`gemi/client`'s connection manager).\n * Types and constants only: this module is imported by the browser bundle, so\n * it must never import a server module.\n \n Every frame is a JSON text frame. Binary frames are refused.\n \n From the client:\n \n - `{op:\"sub\", id, ch, p?}`: subscribe `id` (chosen by the client, unique per\n * socket) to the channel pattern `ch` with params `p`. The server builds\n * the topic and authorizes it.\n * - `{op:\"unsub\", id}`\n * - `{op:\"ping\"}`: answered with `pong`. The client sends one every\n * `heartbeatMs` and reconnects when it hears nothing for twice that.\n \n From the server:\n \n - `{op:\"hello\", socketId, tag, heartbeatMs}`: the first frame. `socketId`\n * goes in the `X-Gemi-Socket` header of the client's own requests (for\n * `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what\n * an event frame's `x` carries when it skips this socket.\n * - `{op:\"subscribed\", id, t}`: `id` joined topic `t`. Sent only once this\n * process receives the topic's events, so the resync the client runs on it\n * cannot miss one.\n * - `{op:\"denied\", id, code}`: `id` was refused, or later revoked.\n * - `{op:\"ev\", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket\n * whose `tag` is `x`.\n * - `{op:\"gap\"}`: events may have been lost for this socket; resync all.\n * - `{op:\"pong\"}`\n * - `{op:\"bye\", code, retryAfter}`: the server is going away (a restart).\n * Reconnect after `retryAfter` ms.\n /\n\n/* The WebSocket subprotocol. /\nexport const BROADCAST_PROTOCOL = \"gemi.v1\";\n\n/* The default endpoint, `defineBroadcastConfig({ path })`. /\nexport const DEFAULT_SOCKET_PATH = \"/__gemi/socket\";\n\nexport { SOCKET_ID_HEADER } from \"./socketHeader\";\n\n/* What a subscription id may look like. /\nexport const SUBSCRIPTION_ID = /^[A-Za-z0-9_-]{1,32}$/;\n\n/\n Close codes the server uses. 1012 and 1013 are the standard \"restart\" and\n * \"try again later\"; the 4xxx ones are gemi's own.\n /\nexport const CloseCode = {\n /* The client went away (tab closed, socket released). /\n Normal: 1000,\n /* A frame that was not JSON text, or not a known op. /\n UnsupportedData: 1003,\n /* Too many frames, or a frame over the size limit. /\n PolicyViolation: 1008,\n /* The server is restarting; `bye` said when to come back. /\n Restart: 1012,\n /* The socket fell too far behind; reconnect and resync. /\n TryAgainLater: 1013,\n /* The socket's user was signed out or its access revoked. /\n Revoked: 4001,\n} as const;\n\n/* Why a subscription was refused. /\nexport type DeniedCode =\n /* No channel with that pattern. Permanent. /\n \| \"unknown_channel\"\n /* Missing, extra or malformed params. Permanent. /\n \| \"invalid_params\"\n /* The channel's authorization said no. /\n \| \"denied\"\n /* Authorization failed (a session store outage, a bug). Retryable. /\n \| \"error\"\n /* The socket has `maxChannelsPerSocket` subscriptions already. /\n \| \"limit\"\n /* Too many `sub`/`unsub` frames; retry later. /\n \| \"rate_limited\"\n /* The subscription was revoked by `Broadcast.revoke`. /\n \| \"revoked\"\n /* The frame was malformed, or the id is already in use. /\n \| \"invalid\";\n\nexport type ClientFrame =\n \| { op: \"sub\"; id: string; ch: string; p?: Record<string, string \| number> }\n \| { op: \"unsub\"; id: string }\n \| { op: \"ping\" };\n\nexport type ServerFrame =\n \| { op: \"hello\"; socketId: string; tag: string; heartbeatMs: number }\n \| { op: \"subscribed\"; id: string; t: string }\n \| { op: \"denied\"; id: string; code: DeniedCode }\n \| { op: \"ev\"; t: string; ev: string; d?: unknown; x?: string }\n \| { op: \"gap\" }\n \| { op: \"pong\" }\n \| { op: \"bye\"; code: number; retryAfter: number };\n\n/\n Whether a refusal is final for this socket's session: resubscribing will\n * get the same answer, so the client does not retry it on its own.\n /\nexport function isPermanentDenial(code: DeniedCode): boolean {\n return code === \"unknown_channel\" \|\| code === \"invalid_params\" \|\| code === \"invalid\";\n}\n","import {\n BROADCAST_PROTOCOL,\n CloseCode,\n DEFAULT_SOCKET_PATH,\n isPermanentDenial,\n type ClientFrame,\n type DeniedCode,\n type ServerFrame,\n} from \"../../services/broadcast/protocol\";\nimport { channelKey } from \"./channelKey\";\nimport { realtime } from \"./loader\";\n\n/\n Where a channel subscription stands, as the hooks report it.\n \n - `idle`: the hook is disabled (`enabled: false`).\n * - `connecting`: the socket is opening, or the `sub` awaits its answer.\n * - `open`: subscribed; events arrive.\n * - `denied`: the server refused (or revoked) it; `code` says why.\n * - `closed`: no socket, on the server, before the first effect, or while\n * waiting to reconnect.\n /\nexport type ChannelStatus = \"idle\" \| \"connecting\" \| \"open\" \| \"denied\" \| \"closed\";\n\nexport type ChannelParamValues = Record<string, string \| number>;\n\n/* What a hook hands the socket for one channel. /\nexport interface ChannelListener {\n onEvent?(event: string, data: unknown): void;\n /* Events may have been missed: refetch what the channel describes. /\n onResync?(): void;\n onStatus?(status: ChannelStatus, code: DeniedCode \| null): void;\n}\n\n/\n What the hooks subscribe through: the tab's `RealtimeClient`, or a\n * `FakeSocket` in tests. Returns the release function.\n /\nexport interface RealtimeSocket {\n subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void;\n}\n\nexport interface RealtimeOptions {\n /* The socket endpoint, `defineBroadcastConfig({ path })`. Default `/__gemi/socket`. /\n path?: string;\n /\n How long a hidden tab keeps its socket, in ms, before disconnecting. On\n * becoming visible again it reconnects and resyncs. Default 60 000.\n /\n hiddenDisconnectMs?: number;\n}\n\ninterface ClientInternals {\n /* Test seam: the WebSocket class. /\n WebSocket?: typeof WebSocket;\n /* Test seam: the full URL, instead of the page's origin + `path`. /\n url?: string;\n random?: () => number;\n}\n\n/* The minimum gap between two resyncs of one subscription. /\nexport const RESYNC_COALESCE_MS = 2_000;\n/* How long the socket stays open after its last subscription goes. /\nexport const IDLE_CLOSE_MS = 5_000;\n/\n How long a subscription outlives its last listener. A hook that remounts\n * within it (StrictMode's double mount, a route change back, a list that\n * re-renders its rows) picks the same subscription up again: no `unsub`, no\n * new `sub`, nothing counted against the server's rate limit.\n /\nexport const RELEASE_LINGER_MS = 1_500;\n/* The least wait before resending a `sub` denied with `rate_limited`. /\nconst RATE_LIMITED_RETRY_MS = 5_000;\n/\n How often a `sub` denied with `limit` is resent on one socket. The socket\n * holds as many channels as the server allows, so only a released one makes\n * room: worth a few tries with backoff, not a retry for as long as the socket\n * lives. Past it the subscription waits for the next connection.\n /\nexport const MAX_LIMIT_RETRIES = 5;\nconst MIN_BACKOFF_MS = 1_000;\nconst MAX_BACKOFF_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 25_000;\nconst DEFAULT_HIDDEN_DISCONNECT_MS = 60_000;\n\ninterface Entry {\n key: string;\n id: string;\n pattern: string;\n params: ChannelParamValues;\n listeners: Set<ChannelListener>;\n status: ChannelStatus;\n code: DeniedCode \| null;\n /* Refused for good: not resent on a reconnect. /\n permanent: boolean;\n topic: string \| null;\n lastResyncAt: number;\n resyncTimer: ReturnType<typeof setTimeout> \| null;\n /* Set while the entry outlives its last listener; see `RELEASE_LINGER_MS`. /\n lingerTimer: ReturnType<typeof setTimeout> \| null;\n /* A transient denial's resend, on the same socket. /\n retryTimer: ReturnType<typeof setTimeout> \| null;\n retries: number;\n}\n\n/\n The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel\n * the mounted hooks subscribe to.\n \n Opened by the first subscription and closed a few seconds after the last\n * one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the\n * server's `bye.retryAfter`, at once on `online`; resubscribes everything\n * then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects\n * when shown. Every `subscribed` ack and every `gap` resyncs the\n * subscription (coalesced to one per 2 s), because events are volatile: a\n * client that may have missed one refetches over HTTP.\n \n Loaded on first use (#891): import this module as a type only, and reach\n * the tab's instance through `./loader`, or it lands in every route's entry\n * chunk.\n /\nexport class RealtimeClient implements RealtimeSocket {\n private options: Required<RealtimeOptions>;\n private readonly internals: ClientInternals;\n private ws: WebSocket \| null = null;\n private entries = new Map<string, Entry>();\n private byId = new Map<string, Entry>();\n private topics = new Map<string, Set<string>>();\n private nextId = 1;\n private attempt = 0;\n private tag: string \| null = null;\n private socketIdValue: string \| null = null;\n private heartbeatMs = DEFAULT_HEARTBEAT_MS;\n private reconnectTimer: ReturnType<typeof setTimeout> \| null = null;\n private idleTimer: ReturnType<typeof setTimeout> \| null = null;\n private hiddenTimer: ReturnType<typeof setTimeout> \| null = null;\n private pingTimer: ReturnType<typeof setInterval> \| null = null;\n private livenessTimer: ReturnType<typeof setTimeout> \| null = null;\n private retryAfter: number \| null = null;\n private revoked = false;\n private pausedWhileHidden = false;\n private listening = false;\n\n constructor(options: RealtimeOptions = {}, internals: ClientInternals = {}) {\n this.options = withDefaults(options);\n this.internals = internals;\n }\n\n configure(options: RealtimeOptions) {\n this.options = withDefaults({ ...this.options, ...options });\n }\n\n /* The id to send as `X-Gemi-Socket`, while the socket is open. /\n get socketId(): string \| null {\n return this.socketIdValue;\n }\n\n subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void {\n const key = channelKey(pattern, params);\n let entry = this.entries.get(key);\n if (!entry) {\n entry = {\n key,\n id: String(this.nextId++),\n pattern,\n params: { ...params },\n listeners: new Set(),\n status: \"closed\",\n code: null,\n permanent: false,\n topic: null,\n lastResyncAt: 0,\n resyncTimer: null,\n lingerTimer: null,\n retryTimer: null,\n retries: 0,\n };\n this.entries.set(key, entry);\n this.byId.set(entry.id, entry);\n if (this.isOpen()) {\n this.sendSub(entry);\n }\n }\n if (entry.lingerTimer) {\n clearTimeout(entry.lingerTimer);\n entry.lingerTimer = null;\n }\n entry.listeners.add(listener);\n listener.onStatus?.(entry.status, entry.code);\n this.cancelIdleClose();\n this.listen();\n if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) {\n this.connect();\n }\n\n let released = false;\n return () => {\n if (released) return;\n released = true;\n this.release(entry!, listener);\n };\n }\n\n private release(entry: Entry, listener: ChannelListener) {\n entry.listeners.delete(listener);\n if (entry.listeners.size > 0 \|\| entry.lingerTimer) return;\n entry.lingerTimer = setTimeout(() => {\n entry.lingerTimer = null;\n if (entry.listeners.size === 0) this.drop(entry);\n }, RELEASE_LINGER_MS);\n }\n\n private drop(entry: Entry) {\n if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n this.clearRetry(entry);\n this.entries.delete(entry.key);\n this.byId.delete(entry.id);\n this.dropTopic(entry);\n if (this.isOpen() && (entry.status === \"open\" \|\| entry.status === \"connecting\")) {\n this.send({ op: \"unsub\", id: entry.id });\n }\n if (this.entries.size === 0) this.scheduleIdleClose();\n }\n\n private isOpen() {\n return this.ws !== null && this.ws.readyState === 1;\n }\n\n private connect() {\n if (typeof window === \"undefined\") return;\n if (this.entries.size === 0) return;\n const Impl = this.internals.WebSocket ?? globalThis.WebSocket;\n if (!Impl) return;\n this.clearReconnect();\n let ws: WebSocket;\n try {\n ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);\n } catch {\n this.scheduleReconnect();\n return;\n }\n this.ws = ws;\n for (const entry of this.entries.values()) {\n if (!entry.permanent) this.setStatus(entry, \"connecting\", null);\n }\n ws.onopen = () => {\n if (this.ws !== ws) return;\n this.touch();\n for (const entry of this.entries.values()) {\n if (entry.permanent) continue;\n // A new socket starts every transient denial's count over.\n entry.retries = 0;\n this.sendSub(entry);\n }\n };\n ws.onmessage = (event: MessageEvent) => {\n if (this.ws !== ws) return;\n this.touch();\n let frame: ServerFrame;\n try {\n frame = JSON.parse(String(event.data));\n } catch {\n return;\n }\n this.handle(frame);\n };\n ws.onclose = (event: CloseEvent) => {\n if (this.ws !== ws) return;\n this.onClosed(event.code);\n };\n ws.onerror = () => {\n // A `close` follows.\n };\n }\n\n private url(): string {\n if (this.internals.url) return this.internals.url;\n const { protocol, host } = window.location;\n return `${protocol === \"https:\" ? \"wss:\" : \"ws:\"}//${host}${this.options.path}`;\n }\n\n private sendSub(entry: Entry) {\n this.setStatus(entry, \"connecting\", null);\n const frame: ClientFrame = { op: \"sub\", id: entry.id, ch: entry.pattern };\n if (Object.keys(entry.params).length > 0) frame.p = entry.params;\n this.send(frame);\n }\n\n private send(frame: ClientFrame) {\n if (!this.isOpen()) return;\n try {\n this.ws!.send(JSON.stringify(frame));\n } catch {\n // The close handler takes over.\n }\n }\n\n private handle(frame: ServerFrame) {\n switch (frame.op) {\n case \"hello\":\n this.socketIdValue = frame.socketId;\n this.tag = frame.tag;\n this.attempt = 0;\n this.revoked = false;\n if (frame.heartbeatMs > 0) {\n this.heartbeatMs = frame.heartbeatMs;\n }\n this.startHeartbeat();\n return;\n case \"subscribed\": {\n const entry = this.byId.get(frame.id);\n if (!entry) return;\n this.dropTopic(entry);\n entry.topic = frame.t;\n let ids = this.topics.get(frame.t);\n if (!ids) this.topics.set(frame.t, (ids = new Set()));\n ids.add(entry.id);\n this.clearRetry(entry);\n entry.retries = 0;\n this.setStatus(entry, \"open\", null);\n // The window between the view rendering and this ack, or the time\n // the socket was down, may have carried events this tab missed.\n this.resync(entry);\n return;\n }\n case \"denied\": {\n const entry = this.byId.get(frame.id);\n if (!entry) return;\n this.dropTopic(entry);\n entry.permanent = isPermanentDenial(frame.code);\n this.setStatus(entry, \"denied\", frame.code);\n this.scheduleRetry(entry, frame.code);\n return;\n }\n case \"ev\": {\n if (frame.x !== undefined && frame.x === this.tag) return;\n const ids = this.topics.get(frame.t);\n if (!ids) return;\n for (const id of Array.from(ids)) {\n const entry = this.byId.get(id);\n if (!entry) continue;\n for (const listener of Array.from(entry.listeners)) {\n try {\n listener.onEvent?.(frame.ev, frame.d);\n } catch (error) {\n reportListenerError(error);\n }\n }\n }\n return;\n }\n case \"gap\":\n for (const entry of this.entries.values()) {\n if (entry.status === \"open\") this.resync(entry);\n }\n return;\n case \"bye\":\n this.retryAfter = Math.max(0, Number(frame.retryAfter) \|\| 0);\n return;\n case \"pong\":\n return;\n }\n }\n\n private onClosed(code: number) {\n this.ws = null;\n this.socketIdValue = null;\n this.tag = null;\n this.stopHeartbeat();\n this.topics.clear();\n for (const entry of this.entries.values()) {\n entry.topic = null;\n // The reconnect resends it.\n this.clearRetry(entry);\n if (!entry.permanent) this.setStatus(entry, \"closed\", null);\n }\n if (code === CloseCode.Revoked) this.revoked = true;\n if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();\n }\n\n private scheduleReconnect() {\n this.clearReconnect();\n let delay: number;\n if (this.retryAfter !== null) {\n delay = this.retryAfter;\n this.retryAfter = null;\n } else if (this.revoked) {\n // Signed out or access revoked: come back promptly, as whoever we are now.\n this.revoked = false;\n delay = Math.floor(this.random() 500);\n } else {\n delay = backoffDelay(this.attempt, this.random());\n }\n this.attempt++;\n this.reconnectTimer = setTimeout(() => {\n this.reconnectTimer = null;\n this.connect();\n }, delay);\n }\n\n private clearReconnect() {\n if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n this.reconnectTimer = null;\n }\n\n private random() {\n return (this.internals.random ?? Math.random)();\n }\n\n private startHeartbeat() {\n this.stopHeartbeat();\n this.pingTimer = setInterval(() => this.send({ op: \"ping\" }), this.heartbeatMs);\n this.touch();\n }\n\n private stopHeartbeat() {\n if (this.pingTimer) clearInterval(this.pingTimer);\n if (this.livenessTimer) clearTimeout(this.livenessTimer);\n this.pingTimer = null;\n this.livenessTimer = null;\n }\n\n /** Anything from the server proves the socket alive. /\n private touch() {\n if (this.livenessTimer) clearTimeout(this.livenessTimer);\n const ws = this.ws;\n this.livenessTimer = setTimeout(() => {\n if (this.ws !== ws \|\| !ws) return;\n // Silent for two heartbeats: a dead connection a proxy never closed.\n try {\n ws.close();\n } catch {}\n this.onClosed(1006);\n }, this.heartbeatMs 2);\n }\n\n private setStatus(entry: Entry, status: ChannelStatus, code: DeniedCode \| null) {\n if (entry.status === status && entry.code === code) return;\n entry.status = status;\n entry.code = code;\n for (const listener of Array.from(entry.listeners)) {\n try {\n listener.onStatus?.(status, code);\n } catch (error) {\n reportListenerError(error);\n }\n }\n }\n\n /** At most one resync per subscription per 2 s; a later one is deferred, not dropped. /\n private resync(entry: Entry) {\n if (entry.resyncTimer) return;\n const now = Date.now();\n const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;\n const fire = () => {\n entry.resyncTimer = null;\n entry.lastResyncAt = Date.now();\n for (const listener of Array.from(entry.listeners)) {\n try {\n listener.onResync?.();\n } catch (error) {\n reportListenerError(error);\n }\n }\n };\n if (entry.lastResyncAt === 0 \|\| wait <= 0) fire();\n else entry.resyncTimer = setTimeout(fire, wait);\n }\n\n /\n A transient denial (`rate_limited`, `error`, `limit`) is retried on the\n * same socket, with backoff: a healthy socket may never reconnect. `denied`\n * and `revoked` are the channel's answer for this session, so they wait for\n * the next connection (a sign-in reconnects), and a permanent one is never\n * resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.\n /\n private scheduleRetry(entry: Entry, code: DeniedCode) {\n if (code !== \"rate_limited\" && code !== \"error\" && code !== \"limit\") return;\n if (code === \"limit\" && entry.retries >= MAX_LIMIT_RETRIES) return;\n this.clearRetry(entry);\n const floor = code === \"rate_limited\" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS;\n const delay = Math.max(floor, backoffDelay(entry.retries, this.random()));\n entry.retries++;\n entry.retryTimer = setTimeout(() => {\n entry.retryTimer = null;\n if (this.entries.get(entry.key) !== entry \|\| entry.status !== \"denied\") return;\n if (this.isOpen()) this.sendSub(entry);\n }, delay);\n }\n\n private clearRetry(entry: Entry) {\n if (entry.retryTimer) clearTimeout(entry.retryTimer);\n entry.retryTimer = null;\n }\n\n private dropTopic(entry: Entry) {\n if (!entry.topic) return;\n const ids = this.topics.get(entry.topic);\n ids?.delete(entry.id);\n if (ids && ids.size === 0) this.topics.delete(entry.topic);\n entry.topic = null;\n }\n\n private scheduleIdleClose() {\n this.cancelIdleClose();\n this.idleTimer = setTimeout(() => {\n this.idleTimer = null;\n if (this.entries.size > 0) return;\n this.clearReconnect();\n this.close();\n }, IDLE_CLOSE_MS);\n }\n\n private cancelIdleClose() {\n if (this.idleTimer) clearTimeout(this.idleTimer);\n this.idleTimer = null;\n }\n\n /* Closes the socket without reconnecting. /\n private close() {\n const ws = this.ws;\n if (!ws) return;\n this.ws = null;\n try {\n ws.close(CloseCode.Normal);\n } catch {}\n this.onClosed(CloseCode.Normal);\n }\n\n private listen() {\n if (this.listening \|\| typeof window === \"undefined\") return;\n this.listening = true;\n window.addEventListener(\"online\", this.onOnline);\n if (typeof document !== \"undefined\") {\n document.addEventListener(\"visibilitychange\", this.onVisibility);\n }\n }\n\n private onOnline = () => {\n if (this.entries.size === 0 \|\| this.ws \|\| this.pausedWhileHidden) return;\n this.attempt = 0;\n this.connect();\n };\n\n private onVisibility = () => {\n if (document.visibilityState === \"hidden\") {\n if (this.hiddenTimer) return;\n this.hiddenTimer = setTimeout(() => {\n this.hiddenTimer = null;\n if (document.visibilityState !== \"hidden\") return;\n this.pausedWhileHidden = true;\n this.clearReconnect();\n this.close();\n }, this.options.hiddenDisconnectMs);\n return;\n }\n if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n this.hiddenTimer = null;\n if (this.pausedWhileHidden) {\n this.pausedWhileHidden = false;\n this.attempt = 0;\n // The `subscribed` acks resync every subscription.\n this.connect();\n }\n };\n\n /\n Drops the socket and opens a new one at once, when anything is\n * subscribed. A socket keeps the session it was opened with (the upgrade's\n * cookies), so signing in or out in this tab reconnects it: every channel\n * is then authorized as the new session, and the acks resync.\n /\n reconnect() {\n this.close();\n this.clearReconnect();\n this.attempt = 0;\n if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();\n }\n\n /* For tests: drops the socket, timers and listeners. /\n dispose() {\n this.clearReconnect();\n this.cancelIdleClose();\n if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n for (const entry of this.entries.values()) {\n if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n if (entry.lingerTimer) clearTimeout(entry.lingerTimer);\n this.clearRetry(entry);\n }\n this.entries.clear();\n this.byId.clear();\n this.close();\n if (this.listening && typeof window !== \"undefined\") {\n window.removeEventListener(\"online\", this.onOnline);\n document?.removeEventListener(\"visibilitychange\", this.onVisibility);\n this.listening = false;\n }\n }\n}\n\n/* Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. /\nexport function backoffDelay(attempt: number, random: number): number {\n const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS 2 ** Math.min(attempt, 10));\n return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));\n}\n\nfunction withDefaults(options: RealtimeOptions): Required<RealtimeOptions> {\n return {\n path: options.path ?? DEFAULT_SOCKET_PATH,\n hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS,\n };\n}\n\nfunction reportListenerError(error: unknown) {\n setTimeout(() => {\n throw error;\n });\n}\n\n/*\n The tab's client, created on first use with the options `configureRealtime`\n * set. `loadRealtimeClient` in `./loader` calls it once this module is loaded.\n */\nexport function tabClient(): RealtimeClient {\n return (realtime.client ??= new RealtimeClient(realtime.options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAqB;;;;;AAclC,IAAa,YAAY;;CAEvB,QAAQ;;CAER,iBAAiB;;CAEjB,iBAAiB;;CAEjB,SAAS;;CAET,eAAe;;CAEf,SAAS;AACX;;;;;AAuCA,SAAgB,kBAAkB,MAA2B;CAC3D,OAAO,SAAS,qBAAqB,SAAS,oBAAoB,SAAS;AAC7E;;;;AC3CA,IAAa,qBAAqB;;AAElC,IAAa,gBAAgB;;;;;;;AAO7B,IAAa,oBAAoB;;AAEjC,IAAM,wBAAwB;;;;;;;AAO9B,IAAa,oBAAoB;AACjC,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;;;;;;;;;;;;;;;;;AAsCrC,IAAa,iBAAb,MAAsD;CACpD;CACA;CACA,KAA+B;CAC/B,0BAAkB,IAAI,IAAmB;CACzC,uBAAe,IAAI,IAAmB;CACtC,yBAAiB,IAAI,IAAyB;CAC9C,SAAiB;CACjB,UAAkB;CAClB,MAA6B;CAC7B,gBAAuC;CACvC,cAAsB;CACtB,iBAA+D;CAC/D,YAA0D;CAC1D,cAA4D;CAC5D,YAA2D;CAC3D,gBAA8D;CAC9D,aAAoC;CACpC,UAAkB;CAClB,oBAA4B;CAC5B,YAAoB;CAEpB,YAAY,UAA2B,CAAC,GAAG,YAA6B,CAAC,GAAG;EAC1E,KAAK,UAAU,aAAa,OAAO;EACnC,KAAK,YAAY;CACnB;CAEA,UAAU,SAA0B;EAClC,KAAK,UAAU,aAAa;GAAE,GAAG,KAAK;GAAS,GAAG;EAAQ,CAAC;CAC7D;;CAGA,IAAI,WAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,SAAiB,QAA4B,UAAuC;EAC5F,MAAM,MAAM,WAAW,SAAS,MAAM;EACtC,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAChC,IAAI,CAAC,OAAO;GACV,QAAQ;IACN;IACA,IAAI,OAAO,KAAK,QAAQ;IACxB;IACA,QAAQ,EAAE,GAAG,OAAO;IACpB,2BAAW,IAAI,IAAI;IACnB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;GACX;GACA,KAAK,QAAQ,IAAI,KAAK,KAAK;GAC3B,KAAK,KAAK,IAAI,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,OAAO,GACd,KAAK,QAAQ,KAAK;EAEtB;EACA,IAAI,MAAM,aAAa;GACrB,aAAa,MAAM,WAAW;GAC9B,MAAM,cAAc;EACtB;EACA,MAAM,UAAU,IAAI,QAAQ;EAC5B,SAAS,WAAW,MAAM,QAAQ,MAAM,IAAI;EAC5C,KAAK,gBAAgB;EACrB,KAAK,OAAO;EACZ,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,mBAC5C,KAAK,QAAQ;EAGf,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX,KAAK,QAAQ,OAAQ,QAAQ;EAC/B;CACF;CAEA,QAAgB,OAAc,UAA2B;EACvD,MAAM,UAAU,OAAO,QAAQ;EAC/B,IAAI,MAAM,UAAU,OAAO,KAAK,MAAM,aAAa;EACnD,MAAM,cAAc,iBAAiB;GACnC,MAAM,cAAc;GACpB,IAAI,MAAM,UAAU,SAAS,GAAG,KAAK,KAAK,KAAK;EACjD,GAAG,iBAAiB;CACtB;CAEA,KAAa,OAAc;EACzB,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;EACrD,KAAK,WAAW,KAAK;EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG;EAC7B,KAAK,KAAK,OAAO,MAAM,EAAE;EACzB,KAAK,UAAU,KAAK;EACpB,IAAI,KAAK,OAAO,MAAM,MAAM,WAAW,UAAU,MAAM,WAAW,eAChE,KAAK,KAAK;GAAE,IAAI;GAAS,IAAI,MAAM;EAAG,CAAC;EAEzC,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,kBAAkB;CACtD;CAEA,SAAiB;EACf,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG,eAAe;CACpD;CAEA,UAAkB;EAChB,IAAI,OAAO,WAAW,aAAa;EACnC,IAAI,KAAK,QAAQ,SAAS,GAAG;EAC7B,MAAM,OAAO,KAAK,UAAU,aAAa,WAAW;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI;GACJ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,kBAAkB,CAAC;EAC9C,QAAQ;GACN,KAAK,kBAAkB;GACvB;EACF;EACA,KAAK,KAAK;EACV,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,IAAI;EAEhE,GAAG,eAAe;GAChB,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;IACzC,IAAI,MAAM,WAAW;IAErB,MAAM,UAAU;IAChB,KAAK,QAAQ,KAAK;GACpB;EACF;EACA,GAAG,aAAa,UAAwB;GACtC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,CAAC;GACvC,QAAQ;IACN;GACF;GACA,KAAK,OAAO,KAAK;EACnB;EACA,GAAG,WAAW,UAAsB;GAClC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,SAAS,MAAM,IAAI;EAC1B;EACA,GAAG,gBAAgB,CAEnB;CACF;CAEA,MAAsB;EACpB,IAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU;EAC9C,MAAM,EAAE,UAAU,SAAS,OAAO;EAClC,OAAO,GAAG,aAAa,WAAW,SAAS,MAAM,IAAI,OAAO,KAAK,QAAQ;CAC3E;CAEA,QAAgB,OAAc;EAC5B,KAAK,UAAU,OAAO,cAAc,IAAI;EACxC,MAAM,QAAqB;GAAE,IAAI;GAAO,IAAI,MAAM;GAAI,IAAI,MAAM;EAAQ;EACxE,IAAI,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM;EAC1D,KAAK,KAAK,KAAK;CACjB;CAEA,KAAa,OAAoB;EAC/B,IAAI,CAAC,KAAK,OAAO,GAAG;EACpB,IAAI;GACF,KAAK,GAAI,KAAK,KAAK,UAAU,KAAK,CAAC;EACrC,QAAQ,CAER;CACF;CAEA,OAAe,OAAoB;EACjC,QAAQ,MAAM,IAAd;GACE,KAAK;IACH,KAAK,gBAAgB,MAAM;IAC3B,KAAK,MAAM,MAAM;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,MAAM,cAAc,GACtB,KAAK,cAAc,MAAM;IAE3B,KAAK,eAAe;IACpB;GACF,KAAK,cAAc;IACjB,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,QAAQ,MAAM;IACpB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,GAAI,sBAAM,IAAI,IAAI,CAAE;IACpD,IAAI,IAAI,MAAM,EAAE;IAChB,KAAK,WAAW,KAAK;IACrB,MAAM,UAAU;IAChB,KAAK,UAAU,OAAO,QAAQ,IAAI;IAGlC,KAAK,OAAO,KAAK;IACjB;GACF;GACA,KAAK,UAAU;IACb,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,YAAY,kBAAkB,MAAM,IAAI;IAC9C,KAAK,UAAU,OAAO,UAAU,MAAM,IAAI;IAC1C,KAAK,cAAc,OAAO,MAAM,IAAI;IACpC;GACF;GACA,KAAK,MAAM;IACT,IAAI,MAAM,MAAM,KAAA,KAAa,MAAM,MAAM,KAAK,KAAK;IACnD,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK;IACV,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,GAAG;KAChC,MAAM,QAAQ,KAAK,KAAK,IAAI,EAAE;KAC9B,IAAI,CAAC,OAAO;KACZ,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;MACF,SAAS,UAAU,MAAM,IAAI,MAAM,CAAC;KACtC,SAAS,OAAO;MACd,oBAAoB,KAAK;KAC3B;IAEJ;IACA;GACF;GACA,KAAK;IACH,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,MAAM,WAAW,QAAQ,KAAK,OAAO,KAAK;IAEhD;GACF,KAAK;IACH,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,MAAM,UAAU,KAAK,CAAC;IAC3D;GACF,KAAK,QACH;EACJ;CACF;CAEA,SAAiB,MAAc;EAC7B,KAAK,KAAK;EACV,KAAK,gBAAgB;EACrB,KAAK,MAAM;EACX,KAAK,cAAc;EACnB,KAAK,OAAO,MAAM;EAClB,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,MAAM,QAAQ;GAEd,KAAK,WAAW,KAAK;GACrB,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,UAAU,IAAI;EAC5D;EACA,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,kBAAkB;CAC/E;CAEA,oBAA4B;EAC1B,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI,KAAK,eAAe,MAAM;GAC5B,QAAQ,KAAK;GACb,KAAK,aAAa;EACpB,OAAO,IAAI,KAAK,SAAS;GAEvB,KAAK,UAAU;GACf,QAAQ,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;EACxC,OACE,QAAQ,aAAa,KAAK,SAAS,KAAK,OAAO,CAAC;EAElD,KAAK;EACL,KAAK,iBAAiB,iBAAiB;GACrC,KAAK,iBAAiB;GACtB,KAAK,QAAQ;EACf,GAAG,KAAK;CACV;CAEA,iBAAyB;EACvB,IAAI,KAAK,gBAAgB,aAAa,KAAK,cAAc;EACzD,KAAK,iBAAiB;CACxB;CAEA,SAAiB;EACf,QAAQ,KAAK,UAAU,UAAU,KAAK,OAAA,CAAQ;CAChD;CAEA,iBAAyB;EACvB,KAAK,cAAc;EACnB,KAAK,YAAY,kBAAkB,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;EAC9E,KAAK,MAAM;CACb;CAEA,gBAAwB;EACtB,IAAI,KAAK,WAAW,cAAc,KAAK,SAAS;EAChD,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,KAAK,YAAY;EACjB,KAAK,gBAAgB;CACvB;;CAGA,QAAgB;EACd,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,MAAM,KAAK,KAAK;EAChB,KAAK,gBAAgB,iBAAiB;GACpC,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;GAE3B,IAAI;IACF,GAAG,MAAM;GACX,QAAQ,CAAC;GACT,KAAK,SAAS,IAAI;EACpB,GAAG,KAAK,cAAc,CAAC;CACzB;CAEA,UAAkB,OAAc,QAAuB,MAAyB;EAC9E,IAAI,MAAM,WAAW,UAAU,MAAM,SAAS,MAAM;EACpD,MAAM,SAAS;EACf,MAAM,OAAO;EACb,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;GACF,SAAS,WAAW,QAAQ,IAAI;EAClC,SAAS,OAAO;GACd,oBAAoB,KAAK;EAC3B;CAEJ;;CAGA,OAAe,OAAc;EAC3B,IAAI,MAAM,aAAa;EACvB,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,MAAM,eAAe,qBAAqB;EACvD,MAAM,aAAa;GACjB,MAAM,cAAc;GACpB,MAAM,eAAe,KAAK,IAAI;GAC9B,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;IACF,SAAS,WAAW;GACtB,SAAS,OAAO;IACd,oBAAoB,KAAK;GAC3B;EAEJ;EACA,IAAI,MAAM,iBAAiB,KAAK,QAAQ,GAAG,KAAK;OAC3C,MAAM,cAAc,WAAW,MAAM,IAAI;CAChD;;;;;;;;CASA,cAAsB,OAAc,MAAkB;EACpD,IAAI,SAAS,kBAAkB,SAAS,WAAW,SAAS,SAAS;EACrE,IAAI,SAAS,WAAW,MAAM,WAAA,GAA8B;EAC5D,KAAK,WAAW,KAAK;EAErB,MAAM,QAAQ,KAAK,IADL,SAAS,iBAAiB,wBAAwB,gBAClC,aAAa,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC;EACxE,MAAM;EACN,MAAM,aAAa,iBAAiB;GAClC,MAAM,aAAa;GACnB,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,SAAS,MAAM,WAAW,UAAU;GACxE,IAAI,KAAK,OAAO,GAAG,KAAK,QAAQ,KAAK;EACvC,GAAG,KAAK;CACV;CAEA,WAAmB,OAAc;EAC/B,IAAI,MAAM,YAAY,aAAa,MAAM,UAAU;EACnD,MAAM,aAAa;CACrB;CAEA,UAAkB,OAAc;EAC9B,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK;EACvC,KAAK,OAAO,MAAM,EAAE;EACpB,IAAI,OAAO,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,MAAM,KAAK;EACzD,MAAM,QAAQ;CAChB;CAEA,oBAA4B;EAC1B,KAAK,gBAAgB;EACrB,KAAK,YAAY,iBAAiB;GAChC,KAAK,YAAY;GACjB,IAAI,KAAK,QAAQ,OAAO,GAAG;GAC3B,KAAK,eAAe;GACpB,KAAK,MAAM;EACb,GAAG,aAAa;CAClB;CAEA,kBAA0B;EACxB,IAAI,KAAK,WAAW,aAAa,KAAK,SAAS;EAC/C,KAAK,YAAY;CACnB;;CAGA,QAAgB;EACd,MAAM,KAAK,KAAK;EAChB,IAAI,CAAC,IAAI;EACT,KAAK,KAAK;EACV,IAAI;GACF,GAAG,MAAM,UAAU,MAAM;EAC3B,QAAQ,CAAC;EACT,KAAK,SAAS,UAAU,MAAM;CAChC;CAEA,SAAiB;EACf,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;EACrD,KAAK,YAAY;EACjB,OAAO,iBAAiB,UAAU,KAAK,QAAQ;EAC/C,IAAI,OAAO,aAAa,aACtB,SAAS,iBAAiB,oBAAoB,KAAK,YAAY;CAEnE;CAEA,iBAAyB;EACvB,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK,MAAM,KAAK,mBAAmB;EAClE,KAAK,UAAU;EACf,KAAK,QAAQ;CACf;CAEA,qBAA6B;EAC3B,IAAI,SAAS,oBAAoB,UAAU;GACzC,IAAI,KAAK,aAAa;GACtB,KAAK,cAAc,iBAAiB;IAClC,KAAK,cAAc;IACnB,IAAI,SAAS,oBAAoB,UAAU;IAC3C,KAAK,oBAAoB;IACzB,KAAK,eAAe;IACpB,KAAK,MAAM;GACb,GAAG,KAAK,QAAQ,kBAAkB;GAClC;EACF;EACA,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,cAAc;EACnB,IAAI,KAAK,mBAAmB;GAC1B,KAAK,oBAAoB;GACzB,KAAK,UAAU;GAEf,KAAK,QAAQ;EACf;CACF;;;;;;;CAQA,YAAY;EACV,KAAK,MAAM;EACX,KAAK,eAAe;EACpB,KAAK,UAAU;EACf,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,QAAQ;CACrE;;CAGA,UAAU;EACR,KAAK,eAAe;EACpB,KAAK,gBAAgB;EACrB,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,KAAK,WAAW,KAAK;EACvB;EACA,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,MAAM;EAChB,KAAK,MAAM;EACX,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;GACnD,OAAO,oBAAoB,UAAU,KAAK,QAAQ;GAClD,UAAU,oBAAoB,oBAAoB,KAAK,YAAY;GACnE,KAAK,YAAY;EACnB;CACF;AACF;;AAGA,SAAgB,aAAa,SAAiB,QAAwB;CACpE,MAAM,MAAM,KAAK,IAAI,gBAAgB,iBAAiB,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;CAChF,OAAO,KAAK,IAAI,gBAAgB,KAAK,MAAM,SAAS,GAAG,CAAC;AAC1D;AAEA,SAAS,aAAa,SAAqD;CACzE,OAAO;EACL,MAAM,QAAQ,QAAA;EACd,oBAAoB,QAAQ,sBAAsB;CACpD;AACF;AAEA,SAAS,oBAAoB,OAAgB;CAC3C,iBAAiB;EACf,MAAM;CACR,CAAC;AACH;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAQ,SAAS,WAAW,IAAI,eAAe,SAAS,OAAO;AACjE"}

package/dist/chunks/{ThemeProvider-DAbL-cqC.js → ThemeProvider-Bkc6A9Nn.js} RENAMED Viewed

@@ -72,14 +72,26 @@ function shouldRetryQuery(failureCount, error, retry = 3) {
 	return failureCount <= retry;
 }
 /**
-* `baseDelay * 2^(failureCount - 1)`, capped at 30s: 1s, 2s, 4s, … by default.
-* A `Retry-After` the server sent (a 429 or 503) is honoured as is.
+* The wait before a retry. The default is exponential backoff with "equal
+* jitter": the step `baseDelay * 2^(failureCount - 1)`, capped at 30s, of
+* which half is fixed and half random — 0.5–1s, 1–2s, 2–4s, … by default.
+*
+* The jitter is there for failures many clients see at once. A database blip
+* fails every open tab's queries in the same second, and an exact schedule
+* would bring them all back in the same second, retry after retry. The fixed
+* half keeps a floor, so a retry never lands right on top of the failure.
+*
+* Only the default is jittered. A `retryDelay` the caller set (a number or a
+* function) and a `Retry-After` the server sent are honoured exactly.
+*
+* `random` is `Math.random` unless a test passes its own.
 */
-function retryDelayFor(failureCount, error, retryDelay, baseDelay = DEFAULT_RETRY_BASE_DELAY) {
+function retryDelayFor(failureCount, error, retryDelay, baseDelay = DEFAULT_RETRY_BASE_DELAY, random = Math.random) {
 	if (error instanceof QueryError && error.retryAfter !== void 0) return error.retryAfter;
 	if (typeof retryDelay === "function") return retryDelay(failureCount, error);
 	if (typeof retryDelay === "number") return retryDelay;
-	return Math.min(baseDelay * 2 ** Math.max(0, failureCount - 1), Math.max(MAX_RETRY_DELAY, baseDelay));
+	const step = Math.min(baseDelay * 2 ** Math.max(0, failureCount - 1), Math.max(MAX_RETRY_DELAY, baseDelay));
+	return Math.round(step / 2 + step / 2 * random());
 }
 /**
 * A `Retry-After` header value in ms: delta-seconds or an HTTP date.
@@ -112,6 +124,213 @@ function readResponseBody(response) {
 	return response.json();
 }
 //#endregion
+//#region http/signInHeader.ts
+/**
+* The response header an `authentication` refusal to an `/api` request
+* carries: the sign-in page the request would have been sent to as a page —
+* `auth.signInPath`, or the route's own from `"auth:/admin/sign-in"` — without
+* an intended-URL parameter, since an API request is not a page to return to.
+* The web client reads it to build the sign-in URL it hands
+* `onAuthenticationError`, so the path is never hardcoded there (#1119).
+*
+* A module of its own, importing nothing: the client's copy lands in the
+* entry chunk, and sharing a module with `MutationError` would pull the two
+* chunks together ("needs no chunk besides the entry" in `packaging.test.ts`).
+*/
+var SIGN_IN_HEADER = "x-gemi-sign-in";
+//#endregion
+//#region utils/intendedUrl.ts
+/**
+* The search parameter carrying the page a signed-out visitor was trying to
+* reach. `AuthenticationMiddleware` writes it onto the sign-in redirect —
+* `/auth/sign-in?redirect=%2Finvoices%3Fpage%3D2` — and `Auth.intendedUrl()` /
+* `useIntendedUrl()` read it back after sign-in.
+*/
+var INTENDED_URL_PARAM = "redirect";
+var PROBE_ORIGIN = "http://gemi.invalid";
+/**
+* `value` if it is a path on this origin, `fallback` otherwise.
+*
+* The intended URL arrives in a query string anybody can write, so reading it
+* back unchecked is an open redirect: `?redirect=https://evil.example` signs
+* the user in and hands them to a look-alike. Only a same-origin path passes:
+* `//evil.example` and `/\evil.example` are protocol-relative to a browser and
+* are refused, as is anything a browser would strip control characters out of
+* before resolving.
+*
+* Returns path, search and hash — never an origin — so the result is safe to
+* hand to `push`, `Redirect.to` or a `Location` header alike.
+*/
+function safeRedirectPath(value, fallback = "/") {
+	if (typeof value !== "string" || !value.startsWith("/")) return fallback;
+	if (/[\u0000-\u001f\u007f\\]/.test(value) || value.startsWith("//")) return fallback;
+	try {
+		const url = new URL(value, PROBE_ORIGIN);
+		if (url.origin !== PROBE_ORIGIN) return fallback;
+		const tail = `${url.search}${url.hash}`.replaceAll("/", "%2F");
+		const path = `${url.pathname}${tail}`.replaceAll(":", "%3A");
+		return path.startsWith("//") ? fallback : path;
+	} catch {
+		return fallback;
+	}
+}
+/**
+* Whether a `Redirect` directive names somewhere outside the router — an
+* absolute http(s) URL or a protocol-relative one — and so has to leave the
+* page rather than be looked up as a route.
+*
+* Only those two shapes. The value goes to `location.replace`, and *any*
+* scheme that parses would include `javascript:`, which runs in this document
+* rather than navigating away from it: an app passing a user-influenced value
+* to `Redirect.external` would be handing out same-origin script execution.
+* Anything else falls through to the router, which cannot leave the origin.
+*/
+function isExternalRedirect(path) {
+	return /^(https?:\/\/|\/\/)/i.test(path ?? "");
+}
+//#endregion
+//#region client/authenticationErrors.ts
+/** Where an older server, which sends no sign-in header, would have sent pages. */
+var DEFAULT_SIGN_IN_PATH = "/auth/sign-in";
+/** How long after the refusal `/auth/me` is asked. */
+var AUTHENTICATION_RECHECK_DELAY_MS = 1e3;
+var handler;
+var navigator$1 = null;
+var state$1 = "idle";
+var rechecks = 0;
+var refetches = [];
+/** Called by `init()`. `undefined` turns it off, which is the default. */
+function configureAuthenticationErrors(option) {
+	handler = option;
+}
+/** Called by the client router; returns the unregister function. */
+function setAuthenticationNavigator(next) {
+	navigator$1 = next;
+	return () => {
+		if (navigator$1 === next) navigator$1 = null;
+	};
+}
+/**
+* The page changed: a new incident may start. A check under way finishes on
+* its own, since its answer is still about this session.
+*/
+function resetAuthenticationIncident() {
+	if (state$1 === "handled") state$1 = "idle";
+	rechecks = 0;
+}
+/**
+* Whether a response is an `authentication` refusal: a 401 whose `error` is
+* `{ kind: "authentication" }`, or the bare `"Authentication error"` a server
+* under `RequestBreakerError.legacyStringPayload` sends. An `AuthorizationError`
+* is a 401 too, and is told apart by its kind (or, as a string, by its
+* message: an `AuthenticationError` always says "Authentication error").
+*/
+function isAuthenticationRefusal(status, body) {
+	if (status !== 401) return false;
+	const error = body && typeof body === "object" ? body.error : void 0;
+	if (typeof error === "string") return error === "Authentication error";
+	return !!error && typeof error === "object" && error.kind === "authentication";
+}
+function signInPathFrom(headers) {
+	const value = headers?.get?.(SIGN_IN_HEADER);
+	if (typeof value !== "string" || value === "") return DEFAULT_SIGN_IN_PATH;
+	if (/^https?:\/\//i.test(value)) return value;
+	if (value.startsWith("/") && !value.startsWith("//") && !value.includes("\\")) return value;
+	return DEFAULT_SIGN_IN_PATH;
+}
+function currentPage() {
+	const fromRouter = navigator$1?.current();
+	if (fromRouter) return fromRouter;
+	if (typeof window === "undefined") return null;
+	return {
+		pathname: window.location.pathname,
+		search: window.location.search
+	};
+}
+var trim = (path) => path.replace(/\/+$/, "") || "/";
+/**
+* The sign-in URL for the page on screen, or `null` when that page is the
+* sign-in page itself — sending it back to itself would only be a loop.
+*/
+function signInUrlFor(signInPath, page) {
+	const external = isExternalRedirect(signInPath);
+	const target = new URL(signInPath, "http://gemi.invalid");
+	if (!external && trim(target.pathname) === trim(page.pathname)) return null;
+	target.searchParams.set(INTENDED_URL_PARAM, external ? page.pathname : `${page.pathname}${page.search}`);
+	return external ? target.href : `${target.pathname}${target.search}`;
+}
+function go(url) {
+	if (!isExternalRedirect(url) && navigator$1) navigator$1.replace(url);
+	else window.location.replace(url);
+}
+/**
+* Reports a refused `/api` request. Returns at once; the check and the hook
+* run later. A no-op unless `onAuthenticationError` is set, outside a browser,
+* and for anything but an `authentication` refusal.
+*
+* `refetch` (queries) runs when the check finds the session alive.
+*/
+function reportAuthenticationRefusal(report) {
+	if (!handler || typeof window === "undefined") return;
+	if (!isAuthenticationRefusal(report.status, report.body)) return;
+	if (report.path.split("?")[0] === "/auth/me") return;
+	if (state$1 === "handled") return;
+	if (state$1 === "idle" && rechecks >= 2) return;
+	if (report.refetch) refetches.push(report.refetch);
+	if (state$1 === "checking") return;
+	state$1 = "checking";
+	rechecks++;
+	const first = report;
+	setTimeout(() => {
+		confirm(first);
+	}, AUTHENTICATION_RECHECK_DELAY_MS);
+}
+async function confirm(first) {
+	let signedOut = false;
+	let headers = first.headers?.get?.("x-gemi-sign-in") ? first.headers : null;
+	try {
+		const response = await fetch("/api/auth/me", {
+			cache: "no-store",
+			headers: { Accept: "application/json" }
+		});
+		let body = null;
+		try {
+			body = await response.json();
+		} catch {}
+		signedOut = isAuthenticationRefusal(response.status, body);
+		if (signedOut && !headers) headers = response.headers;
+	} catch {}
+	const pending = refetches;
+	refetches = [];
+	if (!signedOut) {
+		state$1 = "idle";
+		for (const refetch of pending) try {
+			refetch();
+		} catch (error) {
+			console.error(error);
+		}
+		return;
+	}
+	state$1 = "handled";
+	const page = currentPage();
+	if (!page) return;
+	const signInUrl = signInUrlFor(signInPathFrom(headers), page);
+	if (!signInUrl) return;
+	const context = {
+		source: first.source,
+		path: first.path,
+		error: first.error,
+		signInUrl,
+		redirect: () => go(signInUrl)
+	};
+	try {
+		if (handler === "redirect") context.redirect();
+		else handler?.(context);
+	} catch (error) {
+		console.error(error);
+	}
+}
+//#endregion
 //#region client/QueryResource.ts
 var DEFAULT_STALE_TIME = 5e3;
 var MAX_TIMEOUT = 2 ** 31 - 1;
@@ -586,7 +805,19 @@ var QueryResource = class {
 				this.staleVariants.delete(variantKey);
 				this.lastFetchRecord.set(variantKey, Date.now());
 				this.failures.delete(variantKey);
-			} else writeError(new QueryError(this.key, variantKey, response.status, data, parseRetryAfter(response.headers?.get?.("retry-after"))));
+			} else {
+				const error = new QueryError(this.key, variantKey, response.status, data, parseRetryAfter(response.headers?.get?.("retry-after")));
+				writeError(error);
+				if (isLatest()) reportAuthenticationRefusal({
+					source: "query",
+					path: this.key,
+					status: response.status,
+					body: data,
+					headers: response.headers,
+					error,
+					refetch: () => this.resolveVariant(variantKey, true, false)
+				});
+			}
 		} finally {
 			if (controller) {
 				const set = this.controllers.get(variantKey);
@@ -796,7 +1027,7 @@ function loadedRealtimeClient() {
 }
 var loading = null;
 /** The lazily loaded client. Replaceable in tests, to simulate a failed load. */
-var lazyModules = { client: () => import("./RealtimeClient-DpAJYcF5.js") };
+var lazyModules = { client: () => import("./RealtimeClient-CHNbqDr7.js") };
 /**
 * `./live`, loaded by the first live query. `<Page>` in `gemi/testing` sets
 * `current` up front, so a live query on a provided socket subscribes during
@@ -804,7 +1035,7 @@ var lazyModules = { client: () => import("./RealtimeClient-DpAJYcF5.js") };
 */
 var liveModule = {
 	current: null,
-	load: () => import("./live-BvhWo-yY.js").then((n) => n.n)
+	load: () => import("./live-l4vtaqXd.js").then((n) => n.n)
 };
 /**
 * The tab's client, loading its module and creating it on first use. `null`
@@ -3790,6 +4021,6 @@ function useTheme() {
 	return useContext(ThemeContext);
 }
 //#endregion
-export { QueryManagerProvider as $, useNavigate as A, createMemoryHistory as B, loadDictionaryForRender as C, routeDataUrl as D, readRoutePayload as E, useLocation as F, realtime as G, configureRealtime as H, domainUrl as I, loadedModule as J, reconnectRealtime as K, isAbsoluteUrl as L, I18nProvider as M, ServerDataContext as N, useRoute as O, ServerDataProvider as P, QueryManagerContext as Q, ProgressManager as R, loadDictionary as S, setActiveLocale as T, followLive as U, RealtimeContext as V, liveModule as W, applyParams as X, toVariantKey as Y, QueryConfigContext as Z, isChunkLoadError as _, useRouteTransition as a, parseRetryAfter as at, recoverFromBuildMismatch as b, ClientRouterContext as c, QueryError as ct, ComponentsProvider as d, USER_QUERY_CONFIG_KEYS as et, initialViewModulesReady as f, configureChunkLoadRecovery as g, CHUNK_RELOAD_MARKER as h, RouteTransitionProvider as i, isRetryableQueryError as it, I18nContext as j, useSearchParams as k, ClientRouterProvider as l, Subject as lt, subscribeViewModules as m, useTheme as n, DEFAULT_STALE_TIME as nt, useChannelSubscription as o, retryDelayFor as ot, loadViewModule as p, loadLazy as q, m as r, readResponseBody as rt, useCoalesced as s, shouldRetryQuery as st, ThemeProvider as t, pickDefined as tt, ComponentsContext as u, navigationStarted as v, registerDictionary as w, recoverFromChunkLoadError as x, otherBuild as y, Action as z };
+export { QueryManagerProvider as $, useNavigate as A, createMemoryHistory as B, loadDictionaryForRender as C, routeDataUrl as D, readRoutePayload as E, useLocation as F, realtime as G, configureRealtime as H, domainUrl as I, loadedModule as J, reconnectRealtime as K, isAbsoluteUrl as L, I18nProvider as M, ServerDataContext as N, useRoute as O, ServerDataProvider as P, QueryManagerContext as Q, ProgressManager as R, loadDictionary as S, setActiveLocale as T, followLive as U, RealtimeContext as V, liveModule as W, applyParams as X, toVariantKey as Y, QueryConfigContext as Z, isChunkLoadError as _, useRouteTransition as a, resetAuthenticationIncident as at, recoverFromBuildMismatch as b, ClientRouterContext as c, isExternalRedirect as ct, ComponentsProvider as d, isRetryableQueryError as dt, USER_QUERY_CONFIG_KEYS as et, initialViewModulesReady as f, parseRetryAfter as ft, configureChunkLoadRecovery as g, Subject as gt, CHUNK_RELOAD_MARKER as h, QueryError as ht, RouteTransitionProvider as i, reportAuthenticationRefusal as it, I18nContext as j, useSearchParams as k, ClientRouterProvider as l, safeRedirectPath as lt, subscribeViewModules as m, shouldRetryQuery as mt, useTheme as n, DEFAULT_STALE_TIME as nt, useChannelSubscription as o, setAuthenticationNavigator as ot, loadViewModule as p, retryDelayFor as pt, loadLazy as q, m as r, configureAuthenticationErrors as rt, useCoalesced as s, INTENDED_URL_PARAM as st, ThemeProvider as t, pickDefined as tt, ComponentsContext as u, readResponseBody as ut, navigationStarted as v, registerDictionary as w, recoverFromChunkLoadError as x, otherBuild as y, Action as z };
-//# sourceMappingURL=ThemeProvider-DAbL-cqC.js.map
+//# sourceMappingURL=ThemeProvider-Bkc6A9Nn.js.map