gemi 0.191.0 → 0.193.0

package/dist/{chunk-pjjwbs2f.js → chunk-z8dxdqzm.js}

@@ -1,5 +1,5 @@
 // @bun
-import{Nl as s}from"./chunk-80kpxp4m.js";var i=s((t,e)=>{e.exports={name:"@aws-sdk/nested-clients",version:"3.996.14",description:"Nested clients for AWS SDK packages.",main:"./dist-cjs/index.js",module:"./dist-es/index.js",types:"./dist-types/index.d.ts",scripts:{build:"yarn lint && concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs","build:cjs":"node ../../scripts/compilation/inline nested-clients","build:es":"tsc -p tsconfig.es.json","build:include:deps":'yarn g:turbo run build -F="$npm_package_name"',"build:types":"tsc -p tsconfig.types.json","build:types:downlevel":"downlevel-dts dist-types dist-types/ts3.4",clean:"premove dist-cjs dist-es dist-types tsconfig.cjs.tsbuildinfo tsconfig.es.tsbuildinfo tsconfig.types.tsbuildinfo",lint:"node ../../scripts/validation/submodules-linter.js --pkg nested-clients",test:"yarn g:vitest run","test:watch":"yarn g:vitest watch"},engines:{node:">=20.0.0"},sideEffects:!1,author:{name:"AWS SDK for JavaScript Team",url:"https://aws.amazon.com/javascript/"},license:"Apache-2.0",dependencies:{"@aws-crypto/sha256-browser":"5.2.0","@aws-crypto/sha256-js":"5.2.0","@aws-sdk/core":"^3.973.24","@aws-sdk/middleware-host-header":"^3.972.8","@aws-sdk/middleware-logger":"^3.972.8","@aws-sdk/middleware-recursion-detection":"^3.972.8","@aws-sdk/middleware-user-agent":"^3.972.25","@aws-sdk/region-config-resolver":"^3.972.9","@aws-sdk/types":"^3.973.6","@aws-sdk/util-endpoints":"^3.996.5","@aws-sdk/util-user-agent-browser":"^3.972.8","@aws-sdk/util-user-agent-node":"^3.973.11","@smithy/config-resolver":"^4.4.13","@smithy/core":"^3.23.12","@smithy/fetch-http-handler":"^5.3.15","@smithy/hash-node":"^4.2.12","@smithy/invalid-dependency":"^4.2.12","@smithy/middleware-content-length":"^4.2.12","@smithy/middleware-endpoint":"^4.4.27","@smithy/middleware-retry":"^4.4.44","@smithy/middleware-serde":"^4.2.15","@smithy/middleware-stack":"^4.2.12","@smithy/node-config-provider":"^4.3.12","@smithy/node-http-handler":"^4.5.0","@smithy/protocol-http":"^5.3.12","@smithy/smithy-client":"^4.12.7","@smithy/types":"^4.13.1","@smithy/url-parser":"^4.2.12","@smithy/util-base64":"^4.3.2","@smithy/util-body-length-browser":"^4.2.2","@smithy/util-body-length-node":"^4.2.3","@smithy/util-defaults-mode-browser":"^4.3.43","@smithy/util-defaults-mode-node":"^4.2.47","@smithy/util-endpoints":"^3.3.3","@smithy/util-middleware":"^4.2.12","@smithy/util-retry":"^4.2.12","@smithy/util-utf8":"^4.2.2",tslib:"^2.6.2"},devDependencies:{concurrently:"7.0.0","downlevel-dts":"0.10.1",premove:"4.0.0",typescript:"~5.8.3"},typesVersions:{"<4.5":{"dist-types/*":["dist-types/ts3.4/*"]}},files:["./cognito-identity.d.ts","./cognito-identity.js","./signin.d.ts","./signin.js","./sso-oidc.d.ts","./sso-oidc.js","./sso.d.ts","./sso.js","./sts.d.ts","./sts.js","dist-*/**"],browser:{"./dist-es/submodules/cognito-identity/runtimeConfig":"./dist-es/submodules/cognito-identity/runtimeConfig.browser","./dist-es/submodules/signin/runtimeConfig":"./dist-es/submodules/signin/runtimeConfig.browser","./dist-es/submodules/sso-oidc/runtimeConfig":"./dist-es/submodules/sso-oidc/runtimeConfig.browser","./dist-es/submodules/sso/runtimeConfig":"./dist-es/submodules/sso/runtimeConfig.browser","./dist-es/submodules/sts/runtimeConfig":"./dist-es/submodules/sts/runtimeConfig.browser"},"react-native":{},homepage:"https://github.com/aws/aws-sdk-js-v3/tree/main/packages/nested-clients",repository:{type:"git",url:"https://github.com/aws/aws-sdk-js-v3.git",directory:"packages/nested-clients"},exports:{"./package.json":"./package.json","./sso-oidc":{types:"./dist-types/submodules/sso-oidc/index.d.ts",module:"./dist-es/submodules/sso-oidc/index.js",node:"./dist-cjs/submodules/sso-oidc/index.js",import:"./dist-es/submodules/sso-oidc/index.js",require:"./dist-cjs/submodules/sso-oidc/index.js"},"./sts":{types:"./dist-types/submodules/sts/index.d.ts",module:"./dist-es/submodules/sts/index.js",node:"./dist-cjs/submodules/sts/index.js",import:"./dist-es/submodules/sts/index.js",require:"./dist-cjs/submodules/sts/index.js"},"./signin":{types:"./dist-types/submodules/signin/index.d.ts",module:"./dist-es/submodules/signin/index.js",node:"./dist-cjs/submodules/signin/index.js",import:"./dist-es/submodules/signin/index.js",require:"./dist-cjs/submodules/signin/index.js"},"./cognito-identity":{types:"./dist-types/submodules/cognito-identity/index.d.ts",module:"./dist-es/submodules/cognito-identity/index.js",node:"./dist-cjs/submodules/cognito-identity/index.js",import:"./dist-es/submodules/cognito-identity/index.js",require:"./dist-cjs/submodules/cognito-identity/index.js"},"./sso":{types:"./dist-types/submodules/sso/index.d.ts",module:"./dist-es/submodules/sso/index.js",node:"./dist-cjs/submodules/sso/index.js",import:"./dist-es/submodules/sso/index.js",require:"./dist-cjs/submodules/sso/index.js"}}}});
+import{Ol as s}from"./chunk-k1c0xd8r.js";var i=s((t,e)=>{e.exports={name:"@aws-sdk/nested-clients",version:"3.996.14",description:"Nested clients for AWS SDK packages.",main:"./dist-cjs/index.js",module:"./dist-es/index.js",types:"./dist-types/index.d.ts",scripts:{build:"yarn lint && concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs","build:cjs":"node ../../scripts/compilation/inline nested-clients","build:es":"tsc -p tsconfig.es.json","build:include:deps":'yarn g:turbo run build -F="$npm_package_name"',"build:types":"tsc -p tsconfig.types.json","build:types:downlevel":"downlevel-dts dist-types dist-types/ts3.4",clean:"premove dist-cjs dist-es dist-types tsconfig.cjs.tsbuildinfo tsconfig.es.tsbuildinfo tsconfig.types.tsbuildinfo",lint:"node ../../scripts/validation/submodules-linter.js --pkg nested-clients",test:"yarn g:vitest run","test:watch":"yarn g:vitest watch"},engines:{node:">=20.0.0"},sideEffects:!1,author:{name:"AWS SDK for JavaScript Team",url:"https://aws.amazon.com/javascript/"},license:"Apache-2.0",dependencies:{"@aws-crypto/sha256-browser":"5.2.0","@aws-crypto/sha256-js":"5.2.0","@aws-sdk/core":"^3.973.24","@aws-sdk/middleware-host-header":"^3.972.8","@aws-sdk/middleware-logger":"^3.972.8","@aws-sdk/middleware-recursion-detection":"^3.972.8","@aws-sdk/middleware-user-agent":"^3.972.25","@aws-sdk/region-config-resolver":"^3.972.9","@aws-sdk/types":"^3.973.6","@aws-sdk/util-endpoints":"^3.996.5","@aws-sdk/util-user-agent-browser":"^3.972.8","@aws-sdk/util-user-agent-node":"^3.973.11","@smithy/config-resolver":"^4.4.13","@smithy/core":"^3.23.12","@smithy/fetch-http-handler":"^5.3.15","@smithy/hash-node":"^4.2.12","@smithy/invalid-dependency":"^4.2.12","@smithy/middleware-content-length":"^4.2.12","@smithy/middleware-endpoint":"^4.4.27","@smithy/middleware-retry":"^4.4.44","@smithy/middleware-serde":"^4.2.15","@smithy/middleware-stack":"^4.2.12","@smithy/node-config-provider":"^4.3.12","@smithy/node-http-handler":"^4.5.0","@smithy/protocol-http":"^5.3.12","@smithy/smithy-client":"^4.12.7","@smithy/types":"^4.13.1","@smithy/url-parser":"^4.2.12","@smithy/util-base64":"^4.3.2","@smithy/util-body-length-browser":"^4.2.2","@smithy/util-body-length-node":"^4.2.3","@smithy/util-defaults-mode-browser":"^4.3.43","@smithy/util-defaults-mode-node":"^4.2.47","@smithy/util-endpoints":"^3.3.3","@smithy/util-middleware":"^4.2.12","@smithy/util-retry":"^4.2.12","@smithy/util-utf8":"^4.2.2",tslib:"^2.6.2"},devDependencies:{concurrently:"7.0.0","downlevel-dts":"0.10.1",premove:"4.0.0",typescript:"~5.8.3"},typesVersions:{"<4.5":{"dist-types/*":["dist-types/ts3.4/*"]}},files:["./cognito-identity.d.ts","./cognito-identity.js","./signin.d.ts","./signin.js","./sso-oidc.d.ts","./sso-oidc.js","./sso.d.ts","./sso.js","./sts.d.ts","./sts.js","dist-*/**"],browser:{"./dist-es/submodules/cognito-identity/runtimeConfig":"./dist-es/submodules/cognito-identity/runtimeConfig.browser","./dist-es/submodules/signin/runtimeConfig":"./dist-es/submodules/signin/runtimeConfig.browser","./dist-es/submodules/sso-oidc/runtimeConfig":"./dist-es/submodules/sso-oidc/runtimeConfig.browser","./dist-es/submodules/sso/runtimeConfig":"./dist-es/submodules/sso/runtimeConfig.browser","./dist-es/submodules/sts/runtimeConfig":"./dist-es/submodules/sts/runtimeConfig.browser"},"react-native":{},homepage:"https://github.com/aws/aws-sdk-js-v3/tree/main/packages/nested-clients",repository:{type:"git",url:"https://github.com/aws/aws-sdk-js-v3.git",directory:"packages/nested-clients"},exports:{"./package.json":"./package.json","./sso-oidc":{types:"./dist-types/submodules/sso-oidc/index.d.ts",module:"./dist-es/submodules/sso-oidc/index.js",node:"./dist-cjs/submodules/sso-oidc/index.js",import:"./dist-es/submodules/sso-oidc/index.js",require:"./dist-cjs/submodules/sso-oidc/index.js"},"./sts":{types:"./dist-types/submodules/sts/index.d.ts",module:"./dist-es/submodules/sts/index.js",node:"./dist-cjs/submodules/sts/index.js",import:"./dist-es/submodules/sts/index.js",require:"./dist-cjs/submodules/sts/index.js"},"./signin":{types:"./dist-types/submodules/signin/index.d.ts",module:"./dist-es/submodules/signin/index.js",node:"./dist-cjs/submodules/signin/index.js",import:"./dist-es/submodules/signin/index.js",require:"./dist-cjs/submodules/signin/index.js"},"./cognito-identity":{types:"./dist-types/submodules/cognito-identity/index.d.ts",module:"./dist-es/submodules/cognito-identity/index.js",node:"./dist-cjs/submodules/cognito-identity/index.js",import:"./dist-es/submodules/cognito-identity/index.js",require:"./dist-cjs/submodules/cognito-identity/index.js"},"./sso":{types:"./dist-types/submodules/sso/index.d.ts",module:"./dist-es/submodules/sso/index.js",node:"./dist-cjs/submodules/sso/index.js",import:"./dist-es/submodules/sso/index.js",require:"./dist-cjs/submodules/sso/index.js"}}}});
 export{i as h};
 
-//# debugId=E22FB7C30D5F827064756E2164756E21
+//# debugId=4294979C199DDE4564756E2164756E21

package/dist/{chunk-pjjwbs2f.js.map → chunk-z8dxdqzm.js.map}

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "E22FB7C30D5F827064756E2164756E21",
+  "debugId": "4294979C199DDE4564756E2164756E21",
   "names": []
 }

package/dist/{chunk-9q5g3a9t.js → chunk-z9pq557m.js}

@@ -1,5 +1,5 @@
 // @bun
-import{Aj as F,Cj as R,Dj as T,uj as $}from"./chunk-epb0qfce.js";import{xk as A,zk as B}from"./chunk-fgk1e5xe.js";async function K(O,L={}){let P=typeof O==="string"?$(O):O,C=P.$schema,M=[...F(C)];if(M.length===0)throw Error(`${C.name} has no encrypted columns (mark a String field /// @gemi.encrypted).`);let D=C.primaryKey;if(D.length===0)throw Error(`${C.name} has no primary key, so its rows cannot be rewritten one by one.`);let N=R(),V=Math.max(1,Math.floor(L.batchSize??500)),j={model:C.name,fields:M,scanned:0,rotated:0,skipped:0,plaintext:0},X=T({}),W=Object.fromEntries([...D,...M].map((q)=>[q,!0])),k=D.map((q)=>({[q]:"asc"})),J=D.length===1?D[0]:void 0;return await A(()=>B(C.name,"with",async()=>{let q=void 0,Y=0;for(;;){let G=await P.$exec("findMany",{select:W,orderBy:k,take:V,...J!==void 0&&q!==void 0?{where:{[J]:{gt:q}}}:{},...J===void 0?{skip:Y}:{}},X);if(G.length===0)break;for(let Z of G){j.scanned+=1;let Q={},U={};for(let H of D)U[H]=Z[H];for(let H of M){let I=Z[H];if(typeof I!=="string"||!N.needsReencryption(I))continue;let _=N.isEncrypted(I);if(!_&&!L.encryptPlaintext){j.plaintext+=1;continue}let z=_?N.decrypt(I):I;Q[H]=N.encrypt(z),U[H]=I}if(Object.keys(Q).length===0)continue;if(L.dryRun){j.rotated+=1;continue}let{count:x}=await P.$exec("updateMany",{where:U,data:Q},X);if(x===1)j.rotated+=1;else j.skipped+=1}if(L.onBatch?.({...j}),G.length<V)break;if(J!==void 0)q=G[G.length-1][J];else Y+=G.length}})),j}
+import{Bj as F,Dj as R,Ej as T,vj as $}from"./chunk-5zx4e2wa.js";import{Ak as B,yk as A}from"./chunk-4s7st9y4.js";async function K(O,L={}){let P=typeof O==="string"?$(O):O,C=P.$schema,M=[...F(C)];if(M.length===0)throw Error(`${C.name} has no encrypted columns (mark a String field /// @gemi.encrypted).`);let D=C.primaryKey;if(D.length===0)throw Error(`${C.name} has no primary key, so its rows cannot be rewritten one by one.`);let N=R(),V=Math.max(1,Math.floor(L.batchSize??500)),j={model:C.name,fields:M,scanned:0,rotated:0,skipped:0,plaintext:0},X=T({}),W=Object.fromEntries([...D,...M].map((q)=>[q,!0])),k=D.map((q)=>({[q]:"asc"})),J=D.length===1?D[0]:void 0;return await A(()=>B(C.name,"with",async()=>{let q=void 0,Y=0;for(;;){let G=await P.$exec("findMany",{select:W,orderBy:k,take:V,...J!==void 0&&q!==void 0?{where:{[J]:{gt:q}}}:{},...J===void 0?{skip:Y}:{}},X);if(G.length===0)break;for(let Z of G){j.scanned+=1;let Q={},U={};for(let H of D)U[H]=Z[H];for(let H of M){let I=Z[H];if(typeof I!=="string"||!N.needsReencryption(I))continue;let _=N.isEncrypted(I);if(!_&&!L.encryptPlaintext){j.plaintext+=1;continue}let z=_?N.decrypt(I):I;Q[H]=N.encrypt(z),U[H]=I}if(Object.keys(Q).length===0)continue;if(L.dryRun){j.rotated+=1;continue}let{count:x}=await P.$exec("updateMany",{where:U,data:Q},X);if(x===1)j.rotated+=1;else j.skipped+=1}if(L.onBatch?.({...j}),G.length<V)break;if(J!==void 0)q=G[G.length-1][J];else Y+=G.length}})),j}
 export{K as ca};
 
-//# debugId=A2255DE869EC370264756E2164756E21
+//# debugId=6C04604185BA346B64756E2164756E21

package/dist/{chunk-9q5g3a9t.js.map → chunk-z9pq557m.js.map}

@@ -5,6 +5,6 @@
     "import { runAsSystem, runWithTrashed } from \"./context\";\nimport { currentEncrypter, encryptedFields, markEncryptionRaw } from \"./encryption\";\nimport type { Model } from \"./Model\";\nimport * as registry from \"./registry\";\nimport type { ModelSchema } from \"./schema\";\n\nexport interface RotateEncryptionOptions {\n  /** Rows read and rewritten per round trip. Default 500. */\n  batchSize?: number;\n  /** Count what would be re-encrypted, and write nothing. */\n  dryRun?: boolean;\n  /**\n   * Also encrypt values that are not encrypted at all — the rows a column held\n   * before it was marked `@gemi.encrypted`. Off by default, so a value that is\n   * not an envelope is reported rather than silently treated as plaintext.\n   */\n  encryptPlaintext?: boolean;\n  /** Called after each batch, for progress output. */\n  onBatch?: (report: RotateEncryptionReport) => void;\n}\n\nexport interface RotateEncryptionReport {\n  model: string;\n  fields: string[];\n  /** Rows read. */\n  scanned: number;\n  /** Rows rewritten (or, on a dry run, that would be). */\n  rotated: number;\n  /** Rows a concurrent write changed between the read and the rewrite; already current. */\n  skipped: number;\n  /** Values that are not envelopes, left alone because `encryptPlaintext` is off. */\n  plaintext: number;\n}\n\n/**\n * Re-encrypts `model`'s encrypted columns under the current key: every value\n * still under an older key and, with `encryptPlaintext`, every value not\n * encrypted yet. What `gemi run encryption:rotate` runs.\n *\n * Walks the table in primary-key order in batches, so it can run against a\n * live database and be re-run safely: each row is rewritten with a\n * compare-and-swap on the values it read, so a row written concurrently (and\n * therefore already under the current key) is skipped rather than\n * overwritten. Runs as the system (no policies) and includes soft-deleted\n * rows — they are still encrypted with the old key.\n *\n * Remove the old key from `encryption.keys` only after this reports nothing\n * left to rotate.\n */\nexport async function rotateEncryptedColumns(\n  model: string | typeof Model,\n  options: RotateEncryptionOptions = {},\n): Promise<RotateEncryptionReport> {\n  const target = (typeof model === \"string\" ? registry.get<typeof Model>(model) : model) as typeof Model & {\n    $exec: typeof Model.$exec;\n  };\n  const schema: ModelSchema = target.$schema;\n  const fields = [...encryptedFields(schema)];\n  if (fields.length === 0) {\n    throw new Error(`${schema.name} has no encrypted columns (mark a String field /// @gemi.encrypted).`);\n  }\n  const primaryKey = schema.primaryKey;\n  if (primaryKey.length === 0) {\n    throw new Error(`${schema.name} has no primary key, so its rows cannot be rewritten one by one.`);\n  }\n\n  const encrypter = currentEncrypter();\n  const batchSize = Math.max(1, Math.floor(options.batchSize ?? 500));\n  const report: RotateEncryptionReport = {\n    model: schema.name,\n    fields,\n    scanned: 0,\n    rotated: 0,\n    skipped: 0,\n    plaintext: 0,\n  };\n\n  const raw = markEncryptionRaw({});\n  const select = Object.fromEntries([...primaryKey, ...fields].map((name) => [name, true]));\n  const orderBy = primaryKey.map((name) => ({ [name]: \"asc\" }));\n  const single = primaryKey.length === 1 ? primaryKey[0] : undefined;\n\n  await runAsSystem(() =>\n    runWithTrashed(schema.name, \"with\", async () => {\n      let after: unknown = undefined;\n      let offset = 0;\n\n      for (;;) {\n        // Keyset pagination on a single-column key, so a rewrite never moves a\n        // row across a page boundary. A compound key pages by offset, which is\n        // stable here because rewriting a column does not change the key.\n        const rows = (await target.$exec(\n          \"findMany\",\n          {\n            select,\n            orderBy,\n            take: batchSize,\n            ...(single !== undefined && after !== undefined ? { where: { [single]: { gt: after } } } : {}),\n            ...(single === undefined ? { skip: offset } : {}),\n          },\n          raw,\n        )) as Record<string, unknown>[];\n        if (rows.length === 0) break;\n\n        for (const row of rows) {\n          report.scanned += 1;\n          const data: Record<string, string> = {};\n          const where: Record<string, unknown> = {};\n          for (const name of primaryKey) where[name] = row[name];\n\n          for (const field of fields) {\n            const value = row[field];\n            if (typeof value !== \"string\" || !encrypter.needsReencryption(value)) continue;\n            const isEnvelope = encrypter.isEncrypted(value);\n            if (!isEnvelope && !options.encryptPlaintext) {\n              report.plaintext += 1;\n              continue;\n            }\n            const plaintext = isEnvelope ? encrypter.decrypt(value) : value;\n            data[field] = encrypter.encrypt(plaintext);\n            where[field] = value;\n          }\n\n          if (Object.keys(data).length === 0) continue;\n          if (options.dryRun) {\n            report.rotated += 1;\n            continue;\n          }\n          const { count } = (await target.$exec(\"updateMany\", { where, data }, raw)) as {\n            count: number;\n          };\n          if (count === 1) report.rotated += 1;\n          else report.skipped += 1;\n        }\n\n        options.onBatch?.({ ...report });\n        if (rows.length < batchSize) break;\n        if (single !== undefined) after = rows[rows.length - 1][single];\n        else offset += rows.length;\n      }\n    }),\n  );\n\n  return report;\n}\n\n"
   ],
   "mappings": ";wHAiDA,SAAsB,CAAsB,CAC1C,EACA,EAAmC,CAAC,EACH,CACjC,IAAM,EAAU,OAAO,IAAU,SAAoB,EAAkB,CAAK,EAAI,EAG1E,EAAsB,EAAO,QAC7B,EAAS,CAAC,GAAG,EAAgB,CAAM,CAAC,EAC1C,GAAI,EAAO,SAAW,EACpB,MAAU,MAAM,GAAG,EAAO,0EAA0E,EAEtG,IAAM,EAAa,EAAO,WAC1B,GAAI,EAAW,SAAW,EACxB,MAAU,MAAM,GAAG,EAAO,sEAAsE,EAGlG,IAAM,EAAY,EAAiB,EAC7B,EAAY,KAAK,IAAI,EAAG,KAAK,MAAM,EAAQ,WAAa,GAAG,CAAC,EAC5D,EAAiC,CACrC,MAAO,EAAO,KACd,SACA,QAAS,EACT,QAAS,EACT,QAAS,EACT,UAAW,CACb,EAEM,EAAM,EAAkB,CAAC,CAAC,EAC1B,EAAS,OAAO,YAAY,CAAC,GAAG,EAAY,GAAG,CAAM,EAAE,IAAI,CAAC,IAAS,CAAC,EAAM,EAAI,CAAC,CAAC,EAClF,EAAU,EAAW,IAAI,CAAC,KAAU,EAAG,GAAO,KAAM,EAAE,EACtD,EAAS,EAAW,SAAW,EAAI,EAAW,GAAK,OA+DzD,OA7DA,MAAM,EAAY,IAChB,EAAe,EAAO,KAAM,OAAQ,SAAY,CAC9C,IAAI,EAAiB,OACjB,EAAS,EAEb,OAAS,CAIP,IAAM,EAAQ,MAAM,EAAO,MACzB,WACA,CACE,SACA,UACA,KAAM,KACF,IAAW,QAAa,IAAU,OAAY,CAAE,MAAO,EAAG,GAAS,CAAE,GAAI,CAAM,CAAE,CAAE,EAAI,CAAC,KACxF,IAAW,OAAY,CAAE,KAAM,CAAO,EAAI,CAAC,CACjD,EACA,CACF,EACA,GAAI,EAAK,SAAW,EAAG,MAEvB,QAAW,KAAO,EAAM,CACtB,EAAO,SAAW,EAClB,IAAM,EAA+B,CAAC,EAChC,EAAiC,CAAC,EACxC,QAAW,KAAQ,EAAY,EAAM,GAAQ,EAAI,GAEjD,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAQ,EAAI,GAClB,GAAI,OAAO,IAAU,UAAY,CAAC,EAAU,kBAAkB,CAAK,EAAG,SACtE,IAAM,EAAa,EAAU,YAAY,CAAK,EAC9C,GAAI,CAAC,GAAc,CAAC,EAAQ,iBAAkB,CAC5C,EAAO,WAAa,EACpB,SAEF,IAAM,EAAY,EAAa,EAAU,QAAQ,CAAK,EAAI,EAC1D,EAAK,GAAS,EAAU,QAAQ,CAAS,EACzC,EAAM,GAAS,EAGjB,GAAI,OAAO,KAAK,CAAI,EAAE,SAAW,EAAG,SACpC,GAAI,EAAQ,OAAQ,CAClB,EAAO,SAAW,EAClB,SAEF,IAAQ,SAAW,MAAM,EAAO,MAAM,aAAc,CAAE,QAAO,MAAK,EAAG,CAAG,EAGxE,GAAI,IAAU,EAAG,EAAO,SAAW,EAC9B,OAAO,SAAW,EAIzB,GADA,EAAQ,UAAU,IAAK,CAAO,CAAC,EAC3B,EAAK,OAAS,EAAW,MAC7B,GAAI,IAAW,OAAW,EAAQ,EAAK,EAAK,OAAS,GAAG,GACnD,QAAU,EAAK,QAEvB,CACH,EAEO",
-  "debugId": "A2255DE869EC370264756E2164756E21",
+  "debugId": "6C04604185BA346B64756E2164756E21",
   "names": []
 }

package/dist/{chunk-dhwxcedm.js → chunk-zcrhagx5.js}

@@ -1,4 +1,4 @@
 // @bun
-import{U as C}from"./chunk-hv6nbbty.js";import{V as A}from"./chunk-n415vvxw.js";import{Ml as _}from"./chunk-80kpxp4m.js";var S=_(C(),1),p=_(A(),1),N="AWS_ACCESS_KEY_ID",a="AWS_SECRET_ACCESS_KEY",i="AWS_SESSION_TOKEN",I="AWS_CREDENTIAL_EXPIRATION",d="AWS_CREDENTIAL_SCOPE",v="AWS_ACCOUNT_ID",T=(e)=>async()=>{e?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");let o=process.env[N],r=process.env[a],n=process.env[i],s=process.env[I],t=process.env[d],E=process.env[v];if(o&&r){let c={accessKeyId:o,secretAccessKey:r,...n&&{sessionToken:n},...s&&{expiration:new Date(s)},...t&&{credentialScope:t},...E&&{accountId:E}};return S.setCredentialFeature(c,"CREDENTIALS_ENV_VARS","g"),c}throw new p.CredentialsProviderError("Unable to find environment variable credentials.",{logger:e?.logger})};export{N as a,a as b,i as c,I as d,d as e,v as f,T as g};
+import{U as C}from"./chunk-etzd00a8.js";import{V as A}from"./chunk-tt5qk0xt.js";import{Nl as _}from"./chunk-k1c0xd8r.js";var S=_(C(),1),p=_(A(),1),N="AWS_ACCESS_KEY_ID",a="AWS_SECRET_ACCESS_KEY",i="AWS_SESSION_TOKEN",I="AWS_CREDENTIAL_EXPIRATION",d="AWS_CREDENTIAL_SCOPE",v="AWS_ACCOUNT_ID",T=(e)=>async()=>{e?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");let o=process.env[N],r=process.env[a],n=process.env[i],s=process.env[I],t=process.env[d],E=process.env[v];if(o&&r){let c={accessKeyId:o,secretAccessKey:r,...n&&{sessionToken:n},...s&&{expiration:new Date(s)},...t&&{credentialScope:t},...E&&{accountId:E}};return S.setCredentialFeature(c,"CREDENTIALS_ENV_VARS","g"),c}throw new p.CredentialsProviderError("Unable to find environment variable credentials.",{logger:e?.logger})};export{N as a,a as b,i as c,I as d,d as e,v as f,T as g};
 
-//# debugId=B91BD858CA4CA99864756E2164756E21
+//# debugId=995AF9BF71F58B6264756E2164756E21

package/dist/{chunk-dhwxcedm.js.map → chunk-zcrhagx5.js.map}

@@ -5,6 +5,6 @@
     "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError } from \"@smithy/property-provider\";\nexport const ENV_KEY = \"AWS_ACCESS_KEY_ID\";\nexport const ENV_SECRET = \"AWS_SECRET_ACCESS_KEY\";\nexport const ENV_SESSION = \"AWS_SESSION_TOKEN\";\nexport const ENV_EXPIRATION = \"AWS_CREDENTIAL_EXPIRATION\";\nexport const ENV_CREDENTIAL_SCOPE = \"AWS_CREDENTIAL_SCOPE\";\nexport const ENV_ACCOUNT_ID = \"AWS_ACCOUNT_ID\";\nexport const fromEnv = (init) => async () => {\n    init?.logger?.debug(\"@aws-sdk/credential-provider-env - fromEnv\");\n    const accessKeyId = process.env[ENV_KEY];\n    const secretAccessKey = process.env[ENV_SECRET];\n    const sessionToken = process.env[ENV_SESSION];\n    const expiry = process.env[ENV_EXPIRATION];\n    const credentialScope = process.env[ENV_CREDENTIAL_SCOPE];\n    const accountId = process.env[ENV_ACCOUNT_ID];\n    if (accessKeyId && secretAccessKey) {\n        const credentials = {\n            accessKeyId,\n            secretAccessKey,\n            ...(sessionToken && { sessionToken }),\n            ...(expiry && { expiration: new Date(expiry) }),\n            ...(credentialScope && { credentialScope }),\n            ...(accountId && { accountId }),\n        };\n        setCredentialFeature(credentials, \"CREDENTIALS_ENV_VARS\", \"g\");\n        return credentials;\n    }\n    throw new CredentialsProviderError(\"Unable to find environment variable credentials.\", { logger: init?.logger });\n};\n"
   ],
   "mappings": ";qIAAA,SACA,KACa,EAAU,oBACV,EAAa,wBACb,EAAc,oBACd,EAAiB,4BACjB,EAAuB,uBACvB,EAAiB,iBACjB,EAAU,CAAC,IAAS,SAAY,CACzC,GAAM,QAAQ,MAAM,4CAA4C,EAChE,IAAM,EAAc,QAAQ,IAAI,GAC1B,EAAkB,QAAQ,IAAI,GAC9B,EAAe,QAAQ,IAAI,GAC3B,EAAS,QAAQ,IAAI,GACrB,EAAkB,QAAQ,IAAI,GAC9B,EAAY,QAAQ,IAAI,GAC9B,GAAI,GAAe,EAAiB,CAChC,IAAM,EAAc,CAChB,cACA,qBACI,GAAgB,CAAE,cAAa,KAC/B,GAAU,CAAE,WAAY,IAAI,KAAK,CAAM,CAAE,KACzC,GAAmB,CAAE,iBAAgB,KACrC,GAAa,CAAE,WAAU,CACjC,EAEA,OADA,uBAAqB,EAAa,uBAAwB,GAAG,EACtD,EAEX,MAAM,IAAI,2BAAyB,mDAAoD,CAAE,OAAQ,GAAM,MAAO,CAAC",
-  "debugId": "B91BD858CA4CA99864756E2164756E21",
+  "debugId": "995AF9BF71F58B6264756E2164756E21",
   "names": []
 }

package/dist/chunks/{RealtimeClient-CyGWZr6p.js → RealtimeClient-bPI28SVg.js}

@@ -1,4 +1,4 @@
-import { G as realtime } from "./ThemeProvider-BnmnRvEc.js";
+import { G as realtime } from "./ThemeProvider-BstCYMfV.js";
 import { t as channelKey } from "./channelKey-CIhHpX6x.js";
 //#region services/broadcast/protocol.ts
 /**
@@ -550,4 +550,4 @@ function tabClient() {
 //#endregion
 export { IDLE_CLOSE_MS, MAX_LIMIT_RETRIES, RELEASE_LINGER_MS, RESYNC_COALESCE_MS, RealtimeClient, backoffDelay, tabClient };
 
-//# sourceMappingURL=RealtimeClient-CyGWZr6p.js.map
+//# sourceMappingURL=RealtimeClient-bPI28SVg.js.map

package/dist/chunks/{RealtimeClient-CyGWZr6p.js.map → RealtimeClient-bPI28SVg.js.map}

@@ -1 +1 @@
-{"version":3,"file":"RealtimeClient-CyGWZr6p.js","names":[],"sources":["../../services/broadcast/protocol.ts","../../client/realtime/RealtimeClient.ts"],"sourcesContent":["/**\n * The `gemi.v1` WebSocket protocol, shared by the server transport\n * (`SocketHub`) and the browser client (`gemi/client`'s connection manager).\n * Types and constants only: this module is imported by the browser bundle, so\n * it must never import a server module.\n *\n * Every frame is a JSON text frame. Binary frames are refused.\n *\n * From the client:\n *\n * - `{op:\"sub\", id, ch, p?}`: subscribe `id` (chosen by the client, unique per\n *   socket) to the channel pattern `ch` with params `p`. The server builds\n *   the topic and authorizes it.\n * - `{op:\"unsub\", id}`\n * - `{op:\"ping\"}`: answered with `pong`. The client sends one every\n *   `heartbeatMs` and reconnects when it hears nothing for twice that.\n *\n * From the server:\n *\n * - `{op:\"hello\", socketId, tag, heartbeatMs}`: the first frame. `socketId`\n *   goes in the `X-Gemi-Socket` header of the client's own requests (for\n *   `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what\n *   an event frame's `x` carries when it skips this socket.\n * - `{op:\"subscribed\", id, t}`: `id` joined topic `t`. Sent only once this\n *   process receives the topic's events, so the resync the client runs on it\n *   cannot miss one.\n * - `{op:\"denied\", id, code}`: `id` was refused, or later revoked.\n * - `{op:\"ev\", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket\n *   whose `tag` is `x`.\n * - `{op:\"gap\"}`: events may have been lost for this socket; resync all.\n * - `{op:\"pong\"}`\n * - `{op:\"bye\", code, retryAfter}`: the server is going away (a restart).\n *   Reconnect after `retryAfter` ms.\n */\n\n/** The WebSocket subprotocol. */\nexport const BROADCAST_PROTOCOL = \"gemi.v1\";\n\n/** The default endpoint, `defineBroadcastConfig({ path })`. */\nexport const DEFAULT_SOCKET_PATH = \"/__gemi/socket\";\n\nexport { SOCKET_ID_HEADER } from \"./socketHeader\";\n\n/** What a subscription id may look like. */\nexport const SUBSCRIPTION_ID = /^[A-Za-z0-9_-]{1,32}$/;\n\n/**\n * Close codes the server uses. 1012 and 1013 are the standard \"restart\" and\n * \"try again later\"; the 4xxx ones are gemi's own.\n */\nexport const CloseCode = {\n  /** The client went away (tab closed, socket released). */\n  Normal: 1000,\n  /** A frame that was not JSON text, or not a known op. */\n  UnsupportedData: 1003,\n  /** Too many frames, or a frame over the size limit. */\n  PolicyViolation: 1008,\n  /** The server is restarting; `bye` said when to come back. */\n  Restart: 1012,\n  /** The socket fell too far behind; reconnect and resync. */\n  TryAgainLater: 1013,\n  /** The socket's user was signed out or its access revoked. */\n  Revoked: 4001,\n} as const;\n\n/** Why a subscription was refused. */\nexport type DeniedCode =\n  /** No channel with that pattern. Permanent. */\n  | \"unknown_channel\"\n  /** Missing, extra or malformed params. Permanent. */\n  | \"invalid_params\"\n  /** The channel's authorization said no. */\n  | \"denied\"\n  /** Authorization failed (a session store outage, a bug). Retryable. */\n  | \"error\"\n  /** The socket has `maxChannelsPerSocket` subscriptions already. */\n  | \"limit\"\n  /** Too many `sub`/`unsub` frames; retry later. */\n  | \"rate_limited\"\n  /** The subscription was revoked by `Broadcast.revoke`. */\n  | \"revoked\"\n  /** The frame was malformed, or the id is already in use. */\n  | \"invalid\";\n\nexport type ClientFrame =\n  | { op: \"sub\"; id: string; ch: string; p?: Record<string, string | number> }\n  | { op: \"unsub\"; id: string }\n  | { op: \"ping\" };\n\nexport type ServerFrame =\n  | { op: \"hello\"; socketId: string; tag: string; heartbeatMs: number }\n  | { op: \"subscribed\"; id: string; t: string }\n  | { op: \"denied\"; id: string; code: DeniedCode }\n  | { op: \"ev\"; t: string; ev: string; d?: unknown; x?: string }\n  | { op: \"gap\" }\n  | { op: \"pong\" }\n  | { op: \"bye\"; code: number; retryAfter: number };\n\n/**\n * Whether a refusal is final for this socket's session: resubscribing will\n * get the same answer, so the client does not retry it on its own.\n */\nexport function isPermanentDenial(code: DeniedCode): boolean {\n  return code === \"unknown_channel\" || code === \"invalid_params\" || code === \"invalid\";\n}\n","import {\n  BROADCAST_PROTOCOL,\n  CloseCode,\n  DEFAULT_SOCKET_PATH,\n  isPermanentDenial,\n  type ClientFrame,\n  type DeniedCode,\n  type ServerFrame,\n} from \"../../services/broadcast/protocol\";\nimport { channelKey } from \"./channelKey\";\nimport { realtime } from \"./loader\";\n\n/**\n * Where a channel subscription stands, as the hooks report it.\n *\n * - `idle`: the hook is disabled (`enabled: false`).\n * - `connecting`: the socket is opening, or the `sub` awaits its answer.\n * - `open`: subscribed; events arrive.\n * - `denied`: the server refused (or revoked) it; `code` says why.\n * - `closed`: no socket, on the server, before the first effect, or while\n *   waiting to reconnect.\n */\nexport type ChannelStatus = \"idle\" | \"connecting\" | \"open\" | \"denied\" | \"closed\";\n\nexport type ChannelParamValues = Record<string, string | number>;\n\n/** What a hook hands the socket for one channel. */\nexport interface ChannelListener {\n  onEvent?(event: string, data: unknown): void;\n  /** Events may have been missed: refetch what the channel describes. */\n  onResync?(): void;\n  onStatus?(status: ChannelStatus, code: DeniedCode | null): void;\n}\n\n/**\n * What the hooks subscribe through: the tab's `RealtimeClient`, or a\n * `FakeSocket` in tests. Returns the release function.\n */\nexport interface RealtimeSocket {\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void;\n}\n\nexport interface RealtimeOptions {\n  /** The socket endpoint, `defineBroadcastConfig({ path })`. Default `/__gemi/socket`. */\n  path?: string;\n  /**\n   * How long a hidden tab keeps its socket, in ms, before disconnecting. On\n   * becoming visible again it reconnects and resyncs. Default 60 000.\n   */\n  hiddenDisconnectMs?: number;\n}\n\ninterface ClientInternals {\n  /** Test seam: the WebSocket class. */\n  WebSocket?: typeof WebSocket;\n  /** Test seam: the full URL, instead of the page's origin + `path`. */\n  url?: string;\n  random?: () => number;\n}\n\n/** The minimum gap between two resyncs of one subscription. */\nexport const RESYNC_COALESCE_MS = 2_000;\n/** How long the socket stays open after its last subscription goes. */\nexport const IDLE_CLOSE_MS = 5_000;\n/**\n * How long a subscription outlives its last listener. A hook that remounts\n * within it (StrictMode's double mount, a route change back, a list that\n * re-renders its rows) picks the same subscription up again: no `unsub`, no\n * new `sub`, nothing counted against the server's rate limit.\n */\nexport const RELEASE_LINGER_MS = 1_500;\n/** The least wait before resending a `sub` denied with `rate_limited`. */\nconst RATE_LIMITED_RETRY_MS = 5_000;\n/**\n * How often a `sub` denied with `limit` is resent on one socket. The socket\n * holds as many channels as the server allows, so only a released one makes\n * room: worth a few tries with backoff, not a retry for as long as the socket\n * lives. Past it the subscription waits for the next connection.\n */\nexport const MAX_LIMIT_RETRIES = 5;\nconst MIN_BACKOFF_MS = 1_000;\nconst MAX_BACKOFF_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 25_000;\nconst DEFAULT_HIDDEN_DISCONNECT_MS = 60_000;\n\ninterface Entry {\n  key: string;\n  id: string;\n  pattern: string;\n  params: ChannelParamValues;\n  listeners: Set<ChannelListener>;\n  status: ChannelStatus;\n  code: DeniedCode | null;\n  /** Refused for good: not resent on a reconnect. */\n  permanent: boolean;\n  topic: string | null;\n  lastResyncAt: number;\n  resyncTimer: ReturnType<typeof setTimeout> | null;\n  /** Set while the entry outlives its last listener; see `RELEASE_LINGER_MS`. */\n  lingerTimer: ReturnType<typeof setTimeout> | null;\n  /** A transient denial's resend, on the same socket. */\n  retryTimer: ReturnType<typeof setTimeout> | null;\n  retries: number;\n}\n\n/**\n * The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel\n * the mounted hooks subscribe to.\n *\n * Opened by the first subscription and closed a few seconds after the last\n * one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the\n * server's `bye.retryAfter`, at once on `online`; resubscribes everything\n * then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects\n * when shown. Every `subscribed` ack and every `gap` resyncs the\n * subscription (coalesced to one per 2 s), because events are volatile: a\n * client that may have missed one refetches over HTTP.\n *\n * Loaded on first use (#891): import this module as a type only, and reach\n * the tab's instance through `./loader`, or it lands in every route's entry\n * chunk.\n */\nexport class RealtimeClient implements RealtimeSocket {\n  private options: Required<RealtimeOptions>;\n  private readonly internals: ClientInternals;\n  private ws: WebSocket | null = null;\n  private entries = new Map<string, Entry>();\n  private byId = new Map<string, Entry>();\n  private topics = new Map<string, Set<string>>();\n  private nextId = 1;\n  private attempt = 0;\n  private tag: string | null = null;\n  private socketIdValue: string | null = null;\n  private heartbeatMs = DEFAULT_HEARTBEAT_MS;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private idleTimer: ReturnType<typeof setTimeout> | null = null;\n  private hiddenTimer: ReturnType<typeof setTimeout> | null = null;\n  private pingTimer: ReturnType<typeof setInterval> | null = null;\n  private livenessTimer: ReturnType<typeof setTimeout> | null = null;\n  private retryAfter: number | null = null;\n  private revoked = false;\n  private pausedWhileHidden = false;\n  private listening = false;\n\n  constructor(options: RealtimeOptions = {}, internals: ClientInternals = {}) {\n    this.options = withDefaults(options);\n    this.internals = internals;\n  }\n\n  configure(options: RealtimeOptions) {\n    this.options = withDefaults({ ...this.options, ...options });\n  }\n\n  /** The id to send as `X-Gemi-Socket`, while the socket is open. */\n  get socketId(): string | null {\n    return this.socketIdValue;\n  }\n\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void {\n    const key = channelKey(pattern, params);\n    let entry = this.entries.get(key);\n    if (!entry) {\n      entry = {\n        key,\n        id: String(this.nextId++),\n        pattern,\n        params: { ...params },\n        listeners: new Set(),\n        status: \"closed\",\n        code: null,\n        permanent: false,\n        topic: null,\n        lastResyncAt: 0,\n        resyncTimer: null,\n        lingerTimer: null,\n        retryTimer: null,\n        retries: 0,\n      };\n      this.entries.set(key, entry);\n      this.byId.set(entry.id, entry);\n      if (this.isOpen()) {\n        this.sendSub(entry);\n      }\n    }\n    if (entry.lingerTimer) {\n      clearTimeout(entry.lingerTimer);\n      entry.lingerTimer = null;\n    }\n    entry.listeners.add(listener);\n    listener.onStatus?.(entry.status, entry.code);\n    this.cancelIdleClose();\n    this.listen();\n    if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) {\n      this.connect();\n    }\n\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      this.release(entry!, listener);\n    };\n  }\n\n  private release(entry: Entry, listener: ChannelListener) {\n    entry.listeners.delete(listener);\n    if (entry.listeners.size > 0 || entry.lingerTimer) return;\n    entry.lingerTimer = setTimeout(() => {\n      entry.lingerTimer = null;\n      if (entry.listeners.size === 0) this.drop(entry);\n    }, RELEASE_LINGER_MS);\n  }\n\n  private drop(entry: Entry) {\n    if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n    this.clearRetry(entry);\n    this.entries.delete(entry.key);\n    this.byId.delete(entry.id);\n    this.dropTopic(entry);\n    if (this.isOpen() && (entry.status === \"open\" || entry.status === \"connecting\")) {\n      this.send({ op: \"unsub\", id: entry.id });\n    }\n    if (this.entries.size === 0) this.scheduleIdleClose();\n  }\n\n  private isOpen() {\n    return this.ws !== null && this.ws.readyState === 1;\n  }\n\n  private connect() {\n    if (typeof window === \"undefined\") return;\n    if (this.entries.size === 0) return;\n    const Impl = this.internals.WebSocket ?? globalThis.WebSocket;\n    if (!Impl) return;\n    this.clearReconnect();\n    let ws: WebSocket;\n    try {\n    ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);\n    } catch {\n      this.scheduleReconnect();\n      return;\n    }\n    this.ws = ws;\n    for (const entry of this.entries.values()) {\n      if (!entry.permanent) this.setStatus(entry, \"connecting\", null);\n    }\n    ws.onopen = () => {\n      if (this.ws !== ws) return;\n      this.touch();\n      for (const entry of this.entries.values()) {\n        if (entry.permanent) continue;\n        // A new socket starts every transient denial's count over.\n        entry.retries = 0;\n        this.sendSub(entry);\n      }\n    };\n    ws.onmessage = (event: MessageEvent) => {\n      if (this.ws !== ws) return;\n      this.touch();\n      let frame: ServerFrame;\n      try {\n        frame = JSON.parse(String(event.data));\n      } catch {\n        return;\n      }\n      this.handle(frame);\n    };\n    ws.onclose = (event: CloseEvent) => {\n      if (this.ws !== ws) return;\n      this.onClosed(event.code);\n    };\n    ws.onerror = () => {\n      // A `close` follows.\n    };\n  }\n\n  private url(): string {\n    if (this.internals.url) return this.internals.url;\n    const { protocol, host } = window.location;\n    return `${protocol === \"https:\" ? \"wss:\" : \"ws:\"}//${host}${this.options.path}`;\n  }\n\n  private sendSub(entry: Entry) {\n    this.setStatus(entry, \"connecting\", null);\n    const frame: ClientFrame = { op: \"sub\", id: entry.id, ch: entry.pattern };\n    if (Object.keys(entry.params).length > 0) frame.p = entry.params;\n    this.send(frame);\n  }\n\n  private send(frame: ClientFrame) {\n    if (!this.isOpen()) return;\n    try {\n      this.ws!.send(JSON.stringify(frame));\n    } catch {\n      // The close handler takes over.\n    }\n  }\n\n  private handle(frame: ServerFrame) {\n    switch (frame.op) {\n      case \"hello\":\n        this.socketIdValue = frame.socketId;\n        this.tag = frame.tag;\n        this.attempt = 0;\n        this.revoked = false;\n        if (frame.heartbeatMs > 0) {\n          this.heartbeatMs = frame.heartbeatMs;\n        }\n        this.startHeartbeat();\n        return;\n      case \"subscribed\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.topic = frame.t;\n        let ids = this.topics.get(frame.t);\n        if (!ids) this.topics.set(frame.t, (ids = new Set()));\n        ids.add(entry.id);\n        this.clearRetry(entry);\n        entry.retries = 0;\n        this.setStatus(entry, \"open\", null);\n        // The window between the view rendering and this ack, or the time\n        // the socket was down, may have carried events this tab missed.\n        this.resync(entry);\n        return;\n      }\n      case \"denied\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.permanent = isPermanentDenial(frame.code);\n        this.setStatus(entry, \"denied\", frame.code);\n        this.scheduleRetry(entry, frame.code);\n        return;\n      }\n      case \"ev\": {\n        if (frame.x !== undefined && frame.x === this.tag) return;\n        const ids = this.topics.get(frame.t);\n        if (!ids) return;\n        for (const id of Array.from(ids)) {\n          const entry = this.byId.get(id);\n          if (!entry) continue;\n          for (const listener of Array.from(entry.listeners)) {\n            try {\n              listener.onEvent?.(frame.ev, frame.d);\n            } catch (error) {\n              reportListenerError(error);\n            }\n          }\n        }\n        return;\n      }\n      case \"gap\":\n        for (const entry of this.entries.values()) {\n          if (entry.status === \"open\") this.resync(entry);\n        }\n        return;\n      case \"bye\":\n        this.retryAfter = Math.max(0, Number(frame.retryAfter) || 0);\n        return;\n      case \"pong\":\n        return;\n    }\n  }\n\n  private onClosed(code: number) {\n    this.ws = null;\n    this.socketIdValue = null;\n    this.tag = null;\n    this.stopHeartbeat();\n    this.topics.clear();\n    for (const entry of this.entries.values()) {\n      entry.topic = null;\n      // The reconnect resends it.\n      this.clearRetry(entry);\n      if (!entry.permanent) this.setStatus(entry, \"closed\", null);\n    }\n    if (code === CloseCode.Revoked) this.revoked = true;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();\n  }\n\n  private scheduleReconnect() {\n    this.clearReconnect();\n    let delay: number;\n    if (this.retryAfter !== null) {\n      delay = this.retryAfter;\n      this.retryAfter = null;\n    } else if (this.revoked) {\n      // Signed out or access revoked: come back promptly, as whoever we are now.\n      this.revoked = false;\n      delay = Math.floor(this.random() * 500);\n    } else {\n      delay = backoffDelay(this.attempt, this.random());\n    }\n    this.attempt++;\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = null;\n      this.connect();\n    }, delay);\n  }\n\n  private clearReconnect() {\n    if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n    this.reconnectTimer = null;\n  }\n\n  private random() {\n    return (this.internals.random ?? Math.random)();\n  }\n\n  private startHeartbeat() {\n    this.stopHeartbeat();\n    this.pingTimer = setInterval(() => this.send({ op: \"ping\" }), this.heartbeatMs);\n    this.touch();\n  }\n\n  private stopHeartbeat() {\n    if (this.pingTimer) clearInterval(this.pingTimer);\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    this.pingTimer = null;\n    this.livenessTimer = null;\n  }\n\n  /** Anything from the server proves the socket alive. */\n  private touch() {\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    const ws = this.ws;\n    this.livenessTimer = setTimeout(() => {\n      if (this.ws !== ws || !ws) return;\n      // Silent for two heartbeats: a dead connection a proxy never closed.\n      try {\n        ws.close();\n      } catch {}\n      this.onClosed(1006);\n    }, this.heartbeatMs * 2);\n  }\n\n  private setStatus(entry: Entry, status: ChannelStatus, code: DeniedCode | null) {\n    if (entry.status === status && entry.code === code) return;\n    entry.status = status;\n    entry.code = code;\n    for (const listener of Array.from(entry.listeners)) {\n      try {\n        listener.onStatus?.(status, code);\n      } catch (error) {\n        reportListenerError(error);\n      }\n    }\n  }\n\n  /** At most one resync per subscription per 2 s; a later one is deferred, not dropped. */\n  private resync(entry: Entry) {\n    if (entry.resyncTimer) return;\n    const now = Date.now();\n    const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;\n    const fire = () => {\n      entry.resyncTimer = null;\n      entry.lastResyncAt = Date.now();\n      for (const listener of Array.from(entry.listeners)) {\n        try {\n          listener.onResync?.();\n        } catch (error) {\n          reportListenerError(error);\n        }\n      }\n    };\n    if (entry.lastResyncAt === 0 || wait <= 0) fire();\n    else entry.resyncTimer = setTimeout(fire, wait);\n  }\n\n  /**\n   * A transient denial (`rate_limited`, `error`, `limit`) is retried on the\n   * same socket, with backoff: a healthy socket may never reconnect. `denied`\n   * and `revoked` are the channel's answer for this session, so they wait for\n   * the next connection (a sign-in reconnects), and a permanent one is never\n   * resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.\n   */\n  private scheduleRetry(entry: Entry, code: DeniedCode) {\n    if (code !== \"rate_limited\" && code !== \"error\" && code !== \"limit\") return;\n    if (code === \"limit\" && entry.retries >= MAX_LIMIT_RETRIES) return;\n    this.clearRetry(entry);\n    const floor = code === \"rate_limited\" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS;\n    const delay = Math.max(floor, backoffDelay(entry.retries, this.random()));\n    entry.retries++;\n    entry.retryTimer = setTimeout(() => {\n      entry.retryTimer = null;\n      if (this.entries.get(entry.key) !== entry || entry.status !== \"denied\") return;\n      if (this.isOpen()) this.sendSub(entry);\n    }, delay);\n  }\n\n  private clearRetry(entry: Entry) {\n    if (entry.retryTimer) clearTimeout(entry.retryTimer);\n    entry.retryTimer = null;\n  }\n\n  private dropTopic(entry: Entry) {\n    if (!entry.topic) return;\n    const ids = this.topics.get(entry.topic);\n    ids?.delete(entry.id);\n    if (ids && ids.size === 0) this.topics.delete(entry.topic);\n    entry.topic = null;\n  }\n\n  private scheduleIdleClose() {\n    this.cancelIdleClose();\n    this.idleTimer = setTimeout(() => {\n      this.idleTimer = null;\n      if (this.entries.size > 0) return;\n      this.clearReconnect();\n      this.close();\n    }, IDLE_CLOSE_MS);\n  }\n\n  private cancelIdleClose() {\n    if (this.idleTimer) clearTimeout(this.idleTimer);\n    this.idleTimer = null;\n  }\n\n  /** Closes the socket without reconnecting. */\n  private close() {\n    const ws = this.ws;\n    if (!ws) return;\n    this.ws = null;\n    try {\n      ws.close(CloseCode.Normal);\n    } catch {}\n    this.onClosed(CloseCode.Normal);\n  }\n\n  private listen() {\n    if (this.listening || typeof window === \"undefined\") return;\n    this.listening = true;\n    window.addEventListener(\"online\", this.onOnline);\n    if (typeof document !== \"undefined\") {\n      document.addEventListener(\"visibilitychange\", this.onVisibility);\n    }\n  }\n\n  private onOnline = () => {\n    if (this.entries.size === 0 || this.ws || this.pausedWhileHidden) return;\n    this.attempt = 0;\n    this.connect();\n  };\n\n  private onVisibility = () => {\n    if (document.visibilityState === \"hidden\") {\n      if (this.hiddenTimer) return;\n      this.hiddenTimer = setTimeout(() => {\n        this.hiddenTimer = null;\n        if (document.visibilityState !== \"hidden\") return;\n        this.pausedWhileHidden = true;\n        this.clearReconnect();\n        this.close();\n      }, this.options.hiddenDisconnectMs);\n      return;\n    }\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    this.hiddenTimer = null;\n    if (this.pausedWhileHidden) {\n      this.pausedWhileHidden = false;\n      this.attempt = 0;\n      // The `subscribed` acks resync every subscription.\n      this.connect();\n    }\n  };\n\n  /**\n   * Drops the socket and opens a new one at once, when anything is\n   * subscribed. A socket keeps the session it was opened with (the upgrade's\n   * cookies), so signing in or out in this tab reconnects it: every channel\n   * is then authorized as the new session, and the acks resync.\n   */\n  reconnect() {\n    this.close();\n    this.clearReconnect();\n    this.attempt = 0;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();\n  }\n\n  /** For tests: drops the socket, timers and listeners. */\n  dispose() {\n    this.clearReconnect();\n    this.cancelIdleClose();\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    for (const entry of this.entries.values()) {\n      if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n      if (entry.lingerTimer) clearTimeout(entry.lingerTimer);\n      this.clearRetry(entry);\n    }\n    this.entries.clear();\n    this.byId.clear();\n    this.close();\n    if (this.listening && typeof window !== \"undefined\") {\n      window.removeEventListener(\"online\", this.onOnline);\n      document?.removeEventListener(\"visibilitychange\", this.onVisibility);\n      this.listening = false;\n    }\n  }\n}\n\n/** Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. */\nexport function backoffDelay(attempt: number, random: number): number {\n  const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS * 2 ** Math.min(attempt, 10));\n  return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));\n}\n\nfunction withDefaults(options: RealtimeOptions): Required<RealtimeOptions> {\n  return {\n    path: options.path ?? DEFAULT_SOCKET_PATH,\n    hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS,\n  };\n}\n\nfunction reportListenerError(error: unknown) {\n  setTimeout(() => {\n    throw error;\n  });\n}\n\n/**\n * The tab's client, created on first use with the options `configureRealtime`\n * set. `loadRealtimeClient` in `./loader` calls it once this module is loaded.\n */\nexport function tabClient(): RealtimeClient {\n  return (realtime.client ??= new RealtimeClient(realtime.options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAqB;;;;;AAclC,IAAa,YAAY;;CAEvB,QAAQ;;CAER,iBAAiB;;CAEjB,iBAAiB;;CAEjB,SAAS;;CAET,eAAe;;CAEf,SAAS;AACX;;;;;AAuCA,SAAgB,kBAAkB,MAA2B;CAC3D,OAAO,SAAS,qBAAqB,SAAS,oBAAoB,SAAS;AAC7E;;;;AC3CA,IAAa,qBAAqB;;AAElC,IAAa,gBAAgB;;;;;;;AAO7B,IAAa,oBAAoB;;AAEjC,IAAM,wBAAwB;;;;;;;AAO9B,IAAa,oBAAoB;AACjC,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;;;;;;;;;;;;;;;;;AAsCrC,IAAa,iBAAb,MAAsD;CACpD;CACA;CACA,KAA+B;CAC/B,0BAAkB,IAAI,IAAmB;CACzC,uBAAe,IAAI,IAAmB;CACtC,yBAAiB,IAAI,IAAyB;CAC9C,SAAiB;CACjB,UAAkB;CAClB,MAA6B;CAC7B,gBAAuC;CACvC,cAAsB;CACtB,iBAA+D;CAC/D,YAA0D;CAC1D,cAA4D;CAC5D,YAA2D;CAC3D,gBAA8D;CAC9D,aAAoC;CACpC,UAAkB;CAClB,oBAA4B;CAC5B,YAAoB;CAEpB,YAAY,UAA2B,CAAC,GAAG,YAA6B,CAAC,GAAG;EAC1E,KAAK,UAAU,aAAa,OAAO;EACnC,KAAK,YAAY;CACnB;CAEA,UAAU,SAA0B;EAClC,KAAK,UAAU,aAAa;GAAE,GAAG,KAAK;GAAS,GAAG;EAAQ,CAAC;CAC7D;;CAGA,IAAI,WAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,SAAiB,QAA4B,UAAuC;EAC5F,MAAM,MAAM,WAAW,SAAS,MAAM;EACtC,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAChC,IAAI,CAAC,OAAO;GACV,QAAQ;IACN;IACA,IAAI,OAAO,KAAK,QAAQ;IACxB;IACA,QAAQ,EAAE,GAAG,OAAO;IACpB,2BAAW,IAAI,IAAI;IACnB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;GACX;GACA,KAAK,QAAQ,IAAI,KAAK,KAAK;GAC3B,KAAK,KAAK,IAAI,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,OAAO,GACd,KAAK,QAAQ,KAAK;EAEtB;EACA,IAAI,MAAM,aAAa;GACrB,aAAa,MAAM,WAAW;GAC9B,MAAM,cAAc;EACtB;EACA,MAAM,UAAU,IAAI,QAAQ;EAC5B,SAAS,WAAW,MAAM,QAAQ,MAAM,IAAI;EAC5C,KAAK,gBAAgB;EACrB,KAAK,OAAO;EACZ,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,mBAC5C,KAAK,QAAQ;EAGf,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX,KAAK,QAAQ,OAAQ,QAAQ;EAC/B;CACF;CAEA,QAAgB,OAAc,UAA2B;EACvD,MAAM,UAAU,OAAO,QAAQ;EAC/B,IAAI,MAAM,UAAU,OAAO,KAAK,MAAM,aAAa;EACnD,MAAM,cAAc,iBAAiB;GACnC,MAAM,cAAc;GACpB,IAAI,MAAM,UAAU,SAAS,GAAG,KAAK,KAAK,KAAK;EACjD,GAAG,iBAAiB;CACtB;CAEA,KAAa,OAAc;EACzB,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;EACrD,KAAK,WAAW,KAAK;EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG;EAC7B,KAAK,KAAK,OAAO,MAAM,EAAE;EACzB,KAAK,UAAU,KAAK;EACpB,IAAI,KAAK,OAAO,MAAM,MAAM,WAAW,UAAU,MAAM,WAAW,eAChE,KAAK,KAAK;GAAE,IAAI;GAAS,IAAI,MAAM;EAAG,CAAC;EAEzC,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,kBAAkB;CACtD;CAEA,SAAiB;EACf,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG,eAAe;CACpD;CAEA,UAAkB;EAChB,IAAI,OAAO,WAAW,aAAa;EACnC,IAAI,KAAK,QAAQ,SAAS,GAAG;EAC7B,MAAM,OAAO,KAAK,UAAU,aAAa,WAAW;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI;GACJ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,kBAAkB,CAAC;EAC9C,QAAQ;GACN,KAAK,kBAAkB;GACvB;EACF;EACA,KAAK,KAAK;EACV,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,IAAI;EAEhE,GAAG,eAAe;GAChB,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;IACzC,IAAI,MAAM,WAAW;IAErB,MAAM,UAAU;IAChB,KAAK,QAAQ,KAAK;GACpB;EACF;EACA,GAAG,aAAa,UAAwB;GACtC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,CAAC;GACvC,QAAQ;IACN;GACF;GACA,KAAK,OAAO,KAAK;EACnB;EACA,GAAG,WAAW,UAAsB;GAClC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,SAAS,MAAM,IAAI;EAC1B;EACA,GAAG,gBAAgB,CAEnB;CACF;CAEA,MAAsB;EACpB,IAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU;EAC9C,MAAM,EAAE,UAAU,SAAS,OAAO;EAClC,OAAO,GAAG,aAAa,WAAW,SAAS,MAAM,IAAI,OAAO,KAAK,QAAQ;CAC3E;CAEA,QAAgB,OAAc;EAC5B,KAAK,UAAU,OAAO,cAAc,IAAI;EACxC,MAAM,QAAqB;GAAE,IAAI;GAAO,IAAI,MAAM;GAAI,IAAI,MAAM;EAAQ;EACxE,IAAI,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM;EAC1D,KAAK,KAAK,KAAK;CACjB;CAEA,KAAa,OAAoB;EAC/B,IAAI,CAAC,KAAK,OAAO,GAAG;EACpB,IAAI;GACF,KAAK,GAAI,KAAK,KAAK,UAAU,KAAK,CAAC;EACrC,QAAQ,CAER;CACF;CAEA,OAAe,OAAoB;EACjC,QAAQ,MAAM,IAAd;GACE,KAAK;IACH,KAAK,gBAAgB,MAAM;IAC3B,KAAK,MAAM,MAAM;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,MAAM,cAAc,GACtB,KAAK,cAAc,MAAM;IAE3B,KAAK,eAAe;IACpB;GACF,KAAK,cAAc;IACjB,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,QAAQ,MAAM;IACpB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,GAAI,sBAAM,IAAI,IAAI,CAAE;IACpD,IAAI,IAAI,MAAM,EAAE;IAChB,KAAK,WAAW,KAAK;IACrB,MAAM,UAAU;IAChB,KAAK,UAAU,OAAO,QAAQ,IAAI;IAGlC,KAAK,OAAO,KAAK;IACjB;GACF;GACA,KAAK,UAAU;IACb,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,YAAY,kBAAkB,MAAM,IAAI;IAC9C,KAAK,UAAU,OAAO,UAAU,MAAM,IAAI;IAC1C,KAAK,cAAc,OAAO,MAAM,IAAI;IACpC;GACF;GACA,KAAK,MAAM;IACT,IAAI,MAAM,MAAM,KAAA,KAAa,MAAM,MAAM,KAAK,KAAK;IACnD,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK;IACV,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,GAAG;KAChC,MAAM,QAAQ,KAAK,KAAK,IAAI,EAAE;KAC9B,IAAI,CAAC,OAAO;KACZ,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;MACF,SAAS,UAAU,MAAM,IAAI,MAAM,CAAC;KACtC,SAAS,OAAO;MACd,oBAAoB,KAAK;KAC3B;IAEJ;IACA;GACF;GACA,KAAK;IACH,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,MAAM,WAAW,QAAQ,KAAK,OAAO,KAAK;IAEhD;GACF,KAAK;IACH,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,MAAM,UAAU,KAAK,CAAC;IAC3D;GACF,KAAK,QACH;EACJ;CACF;CAEA,SAAiB,MAAc;EAC7B,KAAK,KAAK;EACV,KAAK,gBAAgB;EACrB,KAAK,MAAM;EACX,KAAK,cAAc;EACnB,KAAK,OAAO,MAAM;EAClB,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,MAAM,QAAQ;GAEd,KAAK,WAAW,KAAK;GACrB,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,UAAU,IAAI;EAC5D;EACA,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,kBAAkB;CAC/E;CAEA,oBAA4B;EAC1B,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI,KAAK,eAAe,MAAM;GAC5B,QAAQ,KAAK;GACb,KAAK,aAAa;EACpB,OAAO,IAAI,KAAK,SAAS;GAEvB,KAAK,UAAU;GACf,QAAQ,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;EACxC,OACE,QAAQ,aAAa,KAAK,SAAS,KAAK,OAAO,CAAC;EAElD,KAAK;EACL,KAAK,iBAAiB,iBAAiB;GACrC,KAAK,iBAAiB;GACtB,KAAK,QAAQ;EACf,GAAG,KAAK;CACV;CAEA,iBAAyB;EACvB,IAAI,KAAK,gBAAgB,aAAa,KAAK,cAAc;EACzD,KAAK,iBAAiB;CACxB;CAEA,SAAiB;EACf,QAAQ,KAAK,UAAU,UAAU,KAAK,OAAA,CAAQ;CAChD;CAEA,iBAAyB;EACvB,KAAK,cAAc;EACnB,KAAK,YAAY,kBAAkB,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;EAC9E,KAAK,MAAM;CACb;CAEA,gBAAwB;EACtB,IAAI,KAAK,WAAW,cAAc,KAAK,SAAS;EAChD,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,KAAK,YAAY;EACjB,KAAK,gBAAgB;CACvB;;CAGA,QAAgB;EACd,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,MAAM,KAAK,KAAK;EAChB,KAAK,gBAAgB,iBAAiB;GACpC,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;GAE3B,IAAI;IACF,GAAG,MAAM;GACX,QAAQ,CAAC;GACT,KAAK,SAAS,IAAI;EACpB,GAAG,KAAK,cAAc,CAAC;CACzB;CAEA,UAAkB,OAAc,QAAuB,MAAyB;EAC9E,IAAI,MAAM,WAAW,UAAU,MAAM,SAAS,MAAM;EACpD,MAAM,SAAS;EACf,MAAM,OAAO;EACb,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;GACF,SAAS,WAAW,QAAQ,IAAI;EAClC,SAAS,OAAO;GACd,oBAAoB,KAAK;EAC3B;CAEJ;;CAGA,OAAe,OAAc;EAC3B,IAAI,MAAM,aAAa;EACvB,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,MAAM,eAAe,qBAAqB;EACvD,MAAM,aAAa;GACjB,MAAM,cAAc;GACpB,MAAM,eAAe,KAAK,IAAI;GAC9B,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;IACF,SAAS,WAAW;GACtB,SAAS,OAAO;IACd,oBAAoB,KAAK;GAC3B;EAEJ;EACA,IAAI,MAAM,iBAAiB,KAAK,QAAQ,GAAG,KAAK;OAC3C,MAAM,cAAc,WAAW,MAAM,IAAI;CAChD;;;;;;;;CASA,cAAsB,OAAc,MAAkB;EACpD,IAAI,SAAS,kBAAkB,SAAS,WAAW,SAAS,SAAS;EACrE,IAAI,SAAS,WAAW,MAAM,WAAA,GAA8B;EAC5D,KAAK,WAAW,KAAK;EAErB,MAAM,QAAQ,KAAK,IADL,SAAS,iBAAiB,wBAAwB,gBAClC,aAAa,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC;EACxE,MAAM;EACN,MAAM,aAAa,iBAAiB;GAClC,MAAM,aAAa;GACnB,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,SAAS,MAAM,WAAW,UAAU;GACxE,IAAI,KAAK,OAAO,GAAG,KAAK,QAAQ,KAAK;EACvC,GAAG,KAAK;CACV;CAEA,WAAmB,OAAc;EAC/B,IAAI,MAAM,YAAY,aAAa,MAAM,UAAU;EACnD,MAAM,aAAa;CACrB;CAEA,UAAkB,OAAc;EAC9B,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK;EACvC,KAAK,OAAO,MAAM,EAAE;EACpB,IAAI,OAAO,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,MAAM,KAAK;EACzD,MAAM,QAAQ;CAChB;CAEA,oBAA4B;EAC1B,KAAK,gBAAgB;EACrB,KAAK,YAAY,iBAAiB;GAChC,KAAK,YAAY;GACjB,IAAI,KAAK,QAAQ,OAAO,GAAG;GAC3B,KAAK,eAAe;GACpB,KAAK,MAAM;EACb,GAAG,aAAa;CAClB;CAEA,kBAA0B;EACxB,IAAI,KAAK,WAAW,aAAa,KAAK,SAAS;EAC/C,KAAK,YAAY;CACnB;;CAGA,QAAgB;EACd,MAAM,KAAK,KAAK;EAChB,IAAI,CAAC,IAAI;EACT,KAAK,KAAK;EACV,IAAI;GACF,GAAG,MAAM,UAAU,MAAM;EAC3B,QAAQ,CAAC;EACT,KAAK,SAAS,UAAU,MAAM;CAChC;CAEA,SAAiB;EACf,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;EACrD,KAAK,YAAY;EACjB,OAAO,iBAAiB,UAAU,KAAK,QAAQ;EAC/C,IAAI,OAAO,aAAa,aACtB,SAAS,iBAAiB,oBAAoB,KAAK,YAAY;CAEnE;CAEA,iBAAyB;EACvB,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK,MAAM,KAAK,mBAAmB;EAClE,KAAK,UAAU;EACf,KAAK,QAAQ;CACf;CAEA,qBAA6B;EAC3B,IAAI,SAAS,oBAAoB,UAAU;GACzC,IAAI,KAAK,aAAa;GACtB,KAAK,cAAc,iBAAiB;IAClC,KAAK,cAAc;IACnB,IAAI,SAAS,oBAAoB,UAAU;IAC3C,KAAK,oBAAoB;IACzB,KAAK,eAAe;IACpB,KAAK,MAAM;GACb,GAAG,KAAK,QAAQ,kBAAkB;GAClC;EACF;EACA,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,cAAc;EACnB,IAAI,KAAK,mBAAmB;GAC1B,KAAK,oBAAoB;GACzB,KAAK,UAAU;GAEf,KAAK,QAAQ;EACf;CACF;;;;;;;CAQA,YAAY;EACV,KAAK,MAAM;EACX,KAAK,eAAe;EACpB,KAAK,UAAU;EACf,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,QAAQ;CACrE;;CAGA,UAAU;EACR,KAAK,eAAe;EACpB,KAAK,gBAAgB;EACrB,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,KAAK,WAAW,KAAK;EACvB;EACA,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,MAAM;EAChB,KAAK,MAAM;EACX,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;GACnD,OAAO,oBAAoB,UAAU,KAAK,QAAQ;GAClD,UAAU,oBAAoB,oBAAoB,KAAK,YAAY;GACnE,KAAK,YAAY;EACnB;CACF;AACF;;AAGA,SAAgB,aAAa,SAAiB,QAAwB;CACpE,MAAM,MAAM,KAAK,IAAI,gBAAgB,iBAAiB,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;CAChF,OAAO,KAAK,IAAI,gBAAgB,KAAK,MAAM,SAAS,GAAG,CAAC;AAC1D;AAEA,SAAS,aAAa,SAAqD;CACzE,OAAO;EACL,MAAM,QAAQ,QAAA;EACd,oBAAoB,QAAQ,sBAAsB;CACpD;AACF;AAEA,SAAS,oBAAoB,OAAgB;CAC3C,iBAAiB;EACf,MAAM;CACR,CAAC;AACH;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAQ,SAAS,WAAW,IAAI,eAAe,SAAS,OAAO;AACjE"}
+{"version":3,"file":"RealtimeClient-bPI28SVg.js","names":[],"sources":["../../services/broadcast/protocol.ts","../../client/realtime/RealtimeClient.ts"],"sourcesContent":["/**\n * The `gemi.v1` WebSocket protocol, shared by the server transport\n * (`SocketHub`) and the browser client (`gemi/client`'s connection manager).\n * Types and constants only: this module is imported by the browser bundle, so\n * it must never import a server module.\n *\n * Every frame is a JSON text frame. Binary frames are refused.\n *\n * From the client:\n *\n * - `{op:\"sub\", id, ch, p?}`: subscribe `id` (chosen by the client, unique per\n *   socket) to the channel pattern `ch` with params `p`. The server builds\n *   the topic and authorizes it.\n * - `{op:\"unsub\", id}`\n * - `{op:\"ping\"}`: answered with `pong`. The client sends one every\n *   `heartbeatMs` and reconnects when it hears nothing for twice that.\n *\n * From the server:\n *\n * - `{op:\"hello\", socketId, tag, heartbeatMs}`: the first frame. `socketId`\n *   goes in the `X-Gemi-Socket` header of the client's own requests (for\n *   `Broadcast.toOthers`); it is never shown to anyone else. `tag` is what\n *   an event frame's `x` carries when it skips this socket.\n * - `{op:\"subscribed\", id, t}`: `id` joined topic `t`. Sent only once this\n *   process receives the topic's events, so the resync the client runs on it\n *   cannot miss one.\n * - `{op:\"denied\", id, code}`: `id` was refused, or later revoked.\n * - `{op:\"ev\", t, ev, d?, x?}`: an event on topic `t`. Dropped by the socket\n *   whose `tag` is `x`.\n * - `{op:\"gap\"}`: events may have been lost for this socket; resync all.\n * - `{op:\"pong\"}`\n * - `{op:\"bye\", code, retryAfter}`: the server is going away (a restart).\n *   Reconnect after `retryAfter` ms.\n */\n\n/** The WebSocket subprotocol. */\nexport const BROADCAST_PROTOCOL = \"gemi.v1\";\n\n/** The default endpoint, `defineBroadcastConfig({ path })`. */\nexport const DEFAULT_SOCKET_PATH = \"/__gemi/socket\";\n\nexport { SOCKET_ID_HEADER } from \"./socketHeader\";\n\n/** What a subscription id may look like. */\nexport const SUBSCRIPTION_ID = /^[A-Za-z0-9_-]{1,32}$/;\n\n/**\n * Close codes the server uses. 1012 and 1013 are the standard \"restart\" and\n * \"try again later\"; the 4xxx ones are gemi's own.\n */\nexport const CloseCode = {\n  /** The client went away (tab closed, socket released). */\n  Normal: 1000,\n  /** A frame that was not JSON text, or not a known op. */\n  UnsupportedData: 1003,\n  /** Too many frames, or a frame over the size limit. */\n  PolicyViolation: 1008,\n  /** The server is restarting; `bye` said when to come back. */\n  Restart: 1012,\n  /** The socket fell too far behind; reconnect and resync. */\n  TryAgainLater: 1013,\n  /** The socket's user was signed out or its access revoked. */\n  Revoked: 4001,\n} as const;\n\n/** Why a subscription was refused. */\nexport type DeniedCode =\n  /** No channel with that pattern. Permanent. */\n  | \"unknown_channel\"\n  /** Missing, extra or malformed params. Permanent. */\n  | \"invalid_params\"\n  /** The channel's authorization said no. */\n  | \"denied\"\n  /** Authorization failed (a session store outage, a bug). Retryable. */\n  | \"error\"\n  /** The socket has `maxChannelsPerSocket` subscriptions already. */\n  | \"limit\"\n  /** Too many `sub`/`unsub` frames; retry later. */\n  | \"rate_limited\"\n  /** The subscription was revoked by `Broadcast.revoke`. */\n  | \"revoked\"\n  /** The frame was malformed, or the id is already in use. */\n  | \"invalid\";\n\nexport type ClientFrame =\n  | { op: \"sub\"; id: string; ch: string; p?: Record<string, string | number> }\n  | { op: \"unsub\"; id: string }\n  | { op: \"ping\" };\n\nexport type ServerFrame =\n  | { op: \"hello\"; socketId: string; tag: string; heartbeatMs: number }\n  | { op: \"subscribed\"; id: string; t: string }\n  | { op: \"denied\"; id: string; code: DeniedCode }\n  | { op: \"ev\"; t: string; ev: string; d?: unknown; x?: string }\n  | { op: \"gap\" }\n  | { op: \"pong\" }\n  | { op: \"bye\"; code: number; retryAfter: number };\n\n/**\n * Whether a refusal is final for this socket's session: resubscribing will\n * get the same answer, so the client does not retry it on its own.\n */\nexport function isPermanentDenial(code: DeniedCode): boolean {\n  return code === \"unknown_channel\" || code === \"invalid_params\" || code === \"invalid\";\n}\n","import {\n  BROADCAST_PROTOCOL,\n  CloseCode,\n  DEFAULT_SOCKET_PATH,\n  isPermanentDenial,\n  type ClientFrame,\n  type DeniedCode,\n  type ServerFrame,\n} from \"../../services/broadcast/protocol\";\nimport { channelKey } from \"./channelKey\";\nimport { realtime } from \"./loader\";\n\n/**\n * Where a channel subscription stands, as the hooks report it.\n *\n * - `idle`: the hook is disabled (`enabled: false`).\n * - `connecting`: the socket is opening, or the `sub` awaits its answer.\n * - `open`: subscribed; events arrive.\n * - `denied`: the server refused (or revoked) it; `code` says why.\n * - `closed`: no socket, on the server, before the first effect, or while\n *   waiting to reconnect.\n */\nexport type ChannelStatus = \"idle\" | \"connecting\" | \"open\" | \"denied\" | \"closed\";\n\nexport type ChannelParamValues = Record<string, string | number>;\n\n/** What a hook hands the socket for one channel. */\nexport interface ChannelListener {\n  onEvent?(event: string, data: unknown): void;\n  /** Events may have been missed: refetch what the channel describes. */\n  onResync?(): void;\n  onStatus?(status: ChannelStatus, code: DeniedCode | null): void;\n}\n\n/**\n * What the hooks subscribe through: the tab's `RealtimeClient`, or a\n * `FakeSocket` in tests. Returns the release function.\n */\nexport interface RealtimeSocket {\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void;\n}\n\nexport interface RealtimeOptions {\n  /** The socket endpoint, `defineBroadcastConfig({ path })`. Default `/__gemi/socket`. */\n  path?: string;\n  /**\n   * How long a hidden tab keeps its socket, in ms, before disconnecting. On\n   * becoming visible again it reconnects and resyncs. Default 60 000.\n   */\n  hiddenDisconnectMs?: number;\n}\n\ninterface ClientInternals {\n  /** Test seam: the WebSocket class. */\n  WebSocket?: typeof WebSocket;\n  /** Test seam: the full URL, instead of the page's origin + `path`. */\n  url?: string;\n  random?: () => number;\n}\n\n/** The minimum gap between two resyncs of one subscription. */\nexport const RESYNC_COALESCE_MS = 2_000;\n/** How long the socket stays open after its last subscription goes. */\nexport const IDLE_CLOSE_MS = 5_000;\n/**\n * How long a subscription outlives its last listener. A hook that remounts\n * within it (StrictMode's double mount, a route change back, a list that\n * re-renders its rows) picks the same subscription up again: no `unsub`, no\n * new `sub`, nothing counted against the server's rate limit.\n */\nexport const RELEASE_LINGER_MS = 1_500;\n/** The least wait before resending a `sub` denied with `rate_limited`. */\nconst RATE_LIMITED_RETRY_MS = 5_000;\n/**\n * How often a `sub` denied with `limit` is resent on one socket. The socket\n * holds as many channels as the server allows, so only a released one makes\n * room: worth a few tries with backoff, not a retry for as long as the socket\n * lives. Past it the subscription waits for the next connection.\n */\nexport const MAX_LIMIT_RETRIES = 5;\nconst MIN_BACKOFF_MS = 1_000;\nconst MAX_BACKOFF_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 25_000;\nconst DEFAULT_HIDDEN_DISCONNECT_MS = 60_000;\n\ninterface Entry {\n  key: string;\n  id: string;\n  pattern: string;\n  params: ChannelParamValues;\n  listeners: Set<ChannelListener>;\n  status: ChannelStatus;\n  code: DeniedCode | null;\n  /** Refused for good: not resent on a reconnect. */\n  permanent: boolean;\n  topic: string | null;\n  lastResyncAt: number;\n  resyncTimer: ReturnType<typeof setTimeout> | null;\n  /** Set while the entry outlives its last listener; see `RELEASE_LINGER_MS`. */\n  lingerTimer: ReturnType<typeof setTimeout> | null;\n  /** A transient denial's resend, on the same socket. */\n  retryTimer: ReturnType<typeof setTimeout> | null;\n  retries: number;\n}\n\n/**\n * The tab's one WebSocket to the app (`gemi.v1`), multiplexing every channel\n * the mounted hooks subscribe to.\n *\n * Opened by the first subscription and closed a few seconds after the last\n * one goes. Reconnects with full-jitter backoff (1 to 30 s), or after the\n * server's `bye.retryAfter`, at once on `online`; resubscribes everything\n * then. A tab hidden for `hiddenDisconnectMs` disconnects, and reconnects\n * when shown. Every `subscribed` ack and every `gap` resyncs the\n * subscription (coalesced to one per 2 s), because events are volatile: a\n * client that may have missed one refetches over HTTP.\n *\n * Loaded on first use (#891): import this module as a type only, and reach\n * the tab's instance through `./loader`, or it lands in every route's entry\n * chunk.\n */\nexport class RealtimeClient implements RealtimeSocket {\n  private options: Required<RealtimeOptions>;\n  private readonly internals: ClientInternals;\n  private ws: WebSocket | null = null;\n  private entries = new Map<string, Entry>();\n  private byId = new Map<string, Entry>();\n  private topics = new Map<string, Set<string>>();\n  private nextId = 1;\n  private attempt = 0;\n  private tag: string | null = null;\n  private socketIdValue: string | null = null;\n  private heartbeatMs = DEFAULT_HEARTBEAT_MS;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private idleTimer: ReturnType<typeof setTimeout> | null = null;\n  private hiddenTimer: ReturnType<typeof setTimeout> | null = null;\n  private pingTimer: ReturnType<typeof setInterval> | null = null;\n  private livenessTimer: ReturnType<typeof setTimeout> | null = null;\n  private retryAfter: number | null = null;\n  private revoked = false;\n  private pausedWhileHidden = false;\n  private listening = false;\n\n  constructor(options: RealtimeOptions = {}, internals: ClientInternals = {}) {\n    this.options = withDefaults(options);\n    this.internals = internals;\n  }\n\n  configure(options: RealtimeOptions) {\n    this.options = withDefaults({ ...this.options, ...options });\n  }\n\n  /** The id to send as `X-Gemi-Socket`, while the socket is open. */\n  get socketId(): string | null {\n    return this.socketIdValue;\n  }\n\n  subscribe(pattern: string, params: ChannelParamValues, listener: ChannelListener): () => void {\n    const key = channelKey(pattern, params);\n    let entry = this.entries.get(key);\n    if (!entry) {\n      entry = {\n        key,\n        id: String(this.nextId++),\n        pattern,\n        params: { ...params },\n        listeners: new Set(),\n        status: \"closed\",\n        code: null,\n        permanent: false,\n        topic: null,\n        lastResyncAt: 0,\n        resyncTimer: null,\n        lingerTimer: null,\n        retryTimer: null,\n        retries: 0,\n      };\n      this.entries.set(key, entry);\n      this.byId.set(entry.id, entry);\n      if (this.isOpen()) {\n        this.sendSub(entry);\n      }\n    }\n    if (entry.lingerTimer) {\n      clearTimeout(entry.lingerTimer);\n      entry.lingerTimer = null;\n    }\n    entry.listeners.add(listener);\n    listener.onStatus?.(entry.status, entry.code);\n    this.cancelIdleClose();\n    this.listen();\n    if (!this.ws && !this.reconnectTimer && !this.pausedWhileHidden) {\n      this.connect();\n    }\n\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      this.release(entry!, listener);\n    };\n  }\n\n  private release(entry: Entry, listener: ChannelListener) {\n    entry.listeners.delete(listener);\n    if (entry.listeners.size > 0 || entry.lingerTimer) return;\n    entry.lingerTimer = setTimeout(() => {\n      entry.lingerTimer = null;\n      if (entry.listeners.size === 0) this.drop(entry);\n    }, RELEASE_LINGER_MS);\n  }\n\n  private drop(entry: Entry) {\n    if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n    this.clearRetry(entry);\n    this.entries.delete(entry.key);\n    this.byId.delete(entry.id);\n    this.dropTopic(entry);\n    if (this.isOpen() && (entry.status === \"open\" || entry.status === \"connecting\")) {\n      this.send({ op: \"unsub\", id: entry.id });\n    }\n    if (this.entries.size === 0) this.scheduleIdleClose();\n  }\n\n  private isOpen() {\n    return this.ws !== null && this.ws.readyState === 1;\n  }\n\n  private connect() {\n    if (typeof window === \"undefined\") return;\n    if (this.entries.size === 0) return;\n    const Impl = this.internals.WebSocket ?? globalThis.WebSocket;\n    if (!Impl) return;\n    this.clearReconnect();\n    let ws: WebSocket;\n    try {\n    ws = new Impl(this.url(), [BROADCAST_PROTOCOL]);\n    } catch {\n      this.scheduleReconnect();\n      return;\n    }\n    this.ws = ws;\n    for (const entry of this.entries.values()) {\n      if (!entry.permanent) this.setStatus(entry, \"connecting\", null);\n    }\n    ws.onopen = () => {\n      if (this.ws !== ws) return;\n      this.touch();\n      for (const entry of this.entries.values()) {\n        if (entry.permanent) continue;\n        // A new socket starts every transient denial's count over.\n        entry.retries = 0;\n        this.sendSub(entry);\n      }\n    };\n    ws.onmessage = (event: MessageEvent) => {\n      if (this.ws !== ws) return;\n      this.touch();\n      let frame: ServerFrame;\n      try {\n        frame = JSON.parse(String(event.data));\n      } catch {\n        return;\n      }\n      this.handle(frame);\n    };\n    ws.onclose = (event: CloseEvent) => {\n      if (this.ws !== ws) return;\n      this.onClosed(event.code);\n    };\n    ws.onerror = () => {\n      // A `close` follows.\n    };\n  }\n\n  private url(): string {\n    if (this.internals.url) return this.internals.url;\n    const { protocol, host } = window.location;\n    return `${protocol === \"https:\" ? \"wss:\" : \"ws:\"}//${host}${this.options.path}`;\n  }\n\n  private sendSub(entry: Entry) {\n    this.setStatus(entry, \"connecting\", null);\n    const frame: ClientFrame = { op: \"sub\", id: entry.id, ch: entry.pattern };\n    if (Object.keys(entry.params).length > 0) frame.p = entry.params;\n    this.send(frame);\n  }\n\n  private send(frame: ClientFrame) {\n    if (!this.isOpen()) return;\n    try {\n      this.ws!.send(JSON.stringify(frame));\n    } catch {\n      // The close handler takes over.\n    }\n  }\n\n  private handle(frame: ServerFrame) {\n    switch (frame.op) {\n      case \"hello\":\n        this.socketIdValue = frame.socketId;\n        this.tag = frame.tag;\n        this.attempt = 0;\n        this.revoked = false;\n        if (frame.heartbeatMs > 0) {\n          this.heartbeatMs = frame.heartbeatMs;\n        }\n        this.startHeartbeat();\n        return;\n      case \"subscribed\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.topic = frame.t;\n        let ids = this.topics.get(frame.t);\n        if (!ids) this.topics.set(frame.t, (ids = new Set()));\n        ids.add(entry.id);\n        this.clearRetry(entry);\n        entry.retries = 0;\n        this.setStatus(entry, \"open\", null);\n        // The window between the view rendering and this ack, or the time\n        // the socket was down, may have carried events this tab missed.\n        this.resync(entry);\n        return;\n      }\n      case \"denied\": {\n        const entry = this.byId.get(frame.id);\n        if (!entry) return;\n        this.dropTopic(entry);\n        entry.permanent = isPermanentDenial(frame.code);\n        this.setStatus(entry, \"denied\", frame.code);\n        this.scheduleRetry(entry, frame.code);\n        return;\n      }\n      case \"ev\": {\n        if (frame.x !== undefined && frame.x === this.tag) return;\n        const ids = this.topics.get(frame.t);\n        if (!ids) return;\n        for (const id of Array.from(ids)) {\n          const entry = this.byId.get(id);\n          if (!entry) continue;\n          for (const listener of Array.from(entry.listeners)) {\n            try {\n              listener.onEvent?.(frame.ev, frame.d);\n            } catch (error) {\n              reportListenerError(error);\n            }\n          }\n        }\n        return;\n      }\n      case \"gap\":\n        for (const entry of this.entries.values()) {\n          if (entry.status === \"open\") this.resync(entry);\n        }\n        return;\n      case \"bye\":\n        this.retryAfter = Math.max(0, Number(frame.retryAfter) || 0);\n        return;\n      case \"pong\":\n        return;\n    }\n  }\n\n  private onClosed(code: number) {\n    this.ws = null;\n    this.socketIdValue = null;\n    this.tag = null;\n    this.stopHeartbeat();\n    this.topics.clear();\n    for (const entry of this.entries.values()) {\n      entry.topic = null;\n      // The reconnect resends it.\n      this.clearRetry(entry);\n      if (!entry.permanent) this.setStatus(entry, \"closed\", null);\n    }\n    if (code === CloseCode.Revoked) this.revoked = true;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.scheduleReconnect();\n  }\n\n  private scheduleReconnect() {\n    this.clearReconnect();\n    let delay: number;\n    if (this.retryAfter !== null) {\n      delay = this.retryAfter;\n      this.retryAfter = null;\n    } else if (this.revoked) {\n      // Signed out or access revoked: come back promptly, as whoever we are now.\n      this.revoked = false;\n      delay = Math.floor(this.random() * 500);\n    } else {\n      delay = backoffDelay(this.attempt, this.random());\n    }\n    this.attempt++;\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = null;\n      this.connect();\n    }, delay);\n  }\n\n  private clearReconnect() {\n    if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n    this.reconnectTimer = null;\n  }\n\n  private random() {\n    return (this.internals.random ?? Math.random)();\n  }\n\n  private startHeartbeat() {\n    this.stopHeartbeat();\n    this.pingTimer = setInterval(() => this.send({ op: \"ping\" }), this.heartbeatMs);\n    this.touch();\n  }\n\n  private stopHeartbeat() {\n    if (this.pingTimer) clearInterval(this.pingTimer);\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    this.pingTimer = null;\n    this.livenessTimer = null;\n  }\n\n  /** Anything from the server proves the socket alive. */\n  private touch() {\n    if (this.livenessTimer) clearTimeout(this.livenessTimer);\n    const ws = this.ws;\n    this.livenessTimer = setTimeout(() => {\n      if (this.ws !== ws || !ws) return;\n      // Silent for two heartbeats: a dead connection a proxy never closed.\n      try {\n        ws.close();\n      } catch {}\n      this.onClosed(1006);\n    }, this.heartbeatMs * 2);\n  }\n\n  private setStatus(entry: Entry, status: ChannelStatus, code: DeniedCode | null) {\n    if (entry.status === status && entry.code === code) return;\n    entry.status = status;\n    entry.code = code;\n    for (const listener of Array.from(entry.listeners)) {\n      try {\n        listener.onStatus?.(status, code);\n      } catch (error) {\n        reportListenerError(error);\n      }\n    }\n  }\n\n  /** At most one resync per subscription per 2 s; a later one is deferred, not dropped. */\n  private resync(entry: Entry) {\n    if (entry.resyncTimer) return;\n    const now = Date.now();\n    const wait = entry.lastResyncAt + RESYNC_COALESCE_MS - now;\n    const fire = () => {\n      entry.resyncTimer = null;\n      entry.lastResyncAt = Date.now();\n      for (const listener of Array.from(entry.listeners)) {\n        try {\n          listener.onResync?.();\n        } catch (error) {\n          reportListenerError(error);\n        }\n      }\n    };\n    if (entry.lastResyncAt === 0 || wait <= 0) fire();\n    else entry.resyncTimer = setTimeout(fire, wait);\n  }\n\n  /**\n   * A transient denial (`rate_limited`, `error`, `limit`) is retried on the\n   * same socket, with backoff: a healthy socket may never reconnect. `denied`\n   * and `revoked` are the channel's answer for this session, so they wait for\n   * the next connection (a sign-in reconnects), and a permanent one is never\n   * resent. `limit` gives up after `MAX_LIMIT_RETRIES` on one socket.\n   */\n  private scheduleRetry(entry: Entry, code: DeniedCode) {\n    if (code !== \"rate_limited\" && code !== \"error\" && code !== \"limit\") return;\n    if (code === \"limit\" && entry.retries >= MAX_LIMIT_RETRIES) return;\n    this.clearRetry(entry);\n    const floor = code === \"rate_limited\" ? RATE_LIMITED_RETRY_MS : MIN_BACKOFF_MS;\n    const delay = Math.max(floor, backoffDelay(entry.retries, this.random()));\n    entry.retries++;\n    entry.retryTimer = setTimeout(() => {\n      entry.retryTimer = null;\n      if (this.entries.get(entry.key) !== entry || entry.status !== \"denied\") return;\n      if (this.isOpen()) this.sendSub(entry);\n    }, delay);\n  }\n\n  private clearRetry(entry: Entry) {\n    if (entry.retryTimer) clearTimeout(entry.retryTimer);\n    entry.retryTimer = null;\n  }\n\n  private dropTopic(entry: Entry) {\n    if (!entry.topic) return;\n    const ids = this.topics.get(entry.topic);\n    ids?.delete(entry.id);\n    if (ids && ids.size === 0) this.topics.delete(entry.topic);\n    entry.topic = null;\n  }\n\n  private scheduleIdleClose() {\n    this.cancelIdleClose();\n    this.idleTimer = setTimeout(() => {\n      this.idleTimer = null;\n      if (this.entries.size > 0) return;\n      this.clearReconnect();\n      this.close();\n    }, IDLE_CLOSE_MS);\n  }\n\n  private cancelIdleClose() {\n    if (this.idleTimer) clearTimeout(this.idleTimer);\n    this.idleTimer = null;\n  }\n\n  /** Closes the socket without reconnecting. */\n  private close() {\n    const ws = this.ws;\n    if (!ws) return;\n    this.ws = null;\n    try {\n      ws.close(CloseCode.Normal);\n    } catch {}\n    this.onClosed(CloseCode.Normal);\n  }\n\n  private listen() {\n    if (this.listening || typeof window === \"undefined\") return;\n    this.listening = true;\n    window.addEventListener(\"online\", this.onOnline);\n    if (typeof document !== \"undefined\") {\n      document.addEventListener(\"visibilitychange\", this.onVisibility);\n    }\n  }\n\n  private onOnline = () => {\n    if (this.entries.size === 0 || this.ws || this.pausedWhileHidden) return;\n    this.attempt = 0;\n    this.connect();\n  };\n\n  private onVisibility = () => {\n    if (document.visibilityState === \"hidden\") {\n      if (this.hiddenTimer) return;\n      this.hiddenTimer = setTimeout(() => {\n        this.hiddenTimer = null;\n        if (document.visibilityState !== \"hidden\") return;\n        this.pausedWhileHidden = true;\n        this.clearReconnect();\n        this.close();\n      }, this.options.hiddenDisconnectMs);\n      return;\n    }\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    this.hiddenTimer = null;\n    if (this.pausedWhileHidden) {\n      this.pausedWhileHidden = false;\n      this.attempt = 0;\n      // The `subscribed` acks resync every subscription.\n      this.connect();\n    }\n  };\n\n  /**\n   * Drops the socket and opens a new one at once, when anything is\n   * subscribed. A socket keeps the session it was opened with (the upgrade's\n   * cookies), so signing in or out in this tab reconnects it: every channel\n   * is then authorized as the new session, and the acks resync.\n   */\n  reconnect() {\n    this.close();\n    this.clearReconnect();\n    this.attempt = 0;\n    if (this.entries.size > 0 && !this.pausedWhileHidden) this.connect();\n  }\n\n  /** For tests: drops the socket, timers and listeners. */\n  dispose() {\n    this.clearReconnect();\n    this.cancelIdleClose();\n    if (this.hiddenTimer) clearTimeout(this.hiddenTimer);\n    for (const entry of this.entries.values()) {\n      if (entry.resyncTimer) clearTimeout(entry.resyncTimer);\n      if (entry.lingerTimer) clearTimeout(entry.lingerTimer);\n      this.clearRetry(entry);\n    }\n    this.entries.clear();\n    this.byId.clear();\n    this.close();\n    if (this.listening && typeof window !== \"undefined\") {\n      window.removeEventListener(\"online\", this.onOnline);\n      document?.removeEventListener(\"visibilitychange\", this.onVisibility);\n      this.listening = false;\n    }\n  }\n}\n\n/** Full jitter, 1 to 30 s: `max(1 s, random × min(30 s, 1 s × 2^attempt))`. */\nexport function backoffDelay(attempt: number, random: number): number {\n  const cap = Math.min(MAX_BACKOFF_MS, MIN_BACKOFF_MS * 2 ** Math.min(attempt, 10));\n  return Math.max(MIN_BACKOFF_MS, Math.floor(random * cap));\n}\n\nfunction withDefaults(options: RealtimeOptions): Required<RealtimeOptions> {\n  return {\n    path: options.path ?? DEFAULT_SOCKET_PATH,\n    hiddenDisconnectMs: options.hiddenDisconnectMs ?? DEFAULT_HIDDEN_DISCONNECT_MS,\n  };\n}\n\nfunction reportListenerError(error: unknown) {\n  setTimeout(() => {\n    throw error;\n  });\n}\n\n/**\n * The tab's client, created on first use with the options `configureRealtime`\n * set. `loadRealtimeClient` in `./loader` calls it once this module is loaded.\n */\nexport function tabClient(): RealtimeClient {\n  return (realtime.client ??= new RealtimeClient(realtime.options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAqB;;;;;AAclC,IAAa,YAAY;;CAEvB,QAAQ;;CAER,iBAAiB;;CAEjB,iBAAiB;;CAEjB,SAAS;;CAET,eAAe;;CAEf,SAAS;AACX;;;;;AAuCA,SAAgB,kBAAkB,MAA2B;CAC3D,OAAO,SAAS,qBAAqB,SAAS,oBAAoB,SAAS;AAC7E;;;;AC3CA,IAAa,qBAAqB;;AAElC,IAAa,gBAAgB;;;;;;;AAO7B,IAAa,oBAAoB;;AAEjC,IAAM,wBAAwB;;;;;;;AAO9B,IAAa,oBAAoB;AACjC,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;;;;;;;;;;;;;;;;;AAsCrC,IAAa,iBAAb,MAAsD;CACpD;CACA;CACA,KAA+B;CAC/B,0BAAkB,IAAI,IAAmB;CACzC,uBAAe,IAAI,IAAmB;CACtC,yBAAiB,IAAI,IAAyB;CAC9C,SAAiB;CACjB,UAAkB;CAClB,MAA6B;CAC7B,gBAAuC;CACvC,cAAsB;CACtB,iBAA+D;CAC/D,YAA0D;CAC1D,cAA4D;CAC5D,YAA2D;CAC3D,gBAA8D;CAC9D,aAAoC;CACpC,UAAkB;CAClB,oBAA4B;CAC5B,YAAoB;CAEpB,YAAY,UAA2B,CAAC,GAAG,YAA6B,CAAC,GAAG;EAC1E,KAAK,UAAU,aAAa,OAAO;EACnC,KAAK,YAAY;CACnB;CAEA,UAAU,SAA0B;EAClC,KAAK,UAAU,aAAa;GAAE,GAAG,KAAK;GAAS,GAAG;EAAQ,CAAC;CAC7D;;CAGA,IAAI,WAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,UAAU,SAAiB,QAA4B,UAAuC;EAC5F,MAAM,MAAM,WAAW,SAAS,MAAM;EACtC,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAChC,IAAI,CAAC,OAAO;GACV,QAAQ;IACN;IACA,IAAI,OAAO,KAAK,QAAQ;IACxB;IACA,QAAQ,EAAE,GAAG,OAAO;IACpB,2BAAW,IAAI,IAAI;IACnB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,SAAS;GACX;GACA,KAAK,QAAQ,IAAI,KAAK,KAAK;GAC3B,KAAK,KAAK,IAAI,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,OAAO,GACd,KAAK,QAAQ,KAAK;EAEtB;EACA,IAAI,MAAM,aAAa;GACrB,aAAa,MAAM,WAAW;GAC9B,MAAM,cAAc;EACtB;EACA,MAAM,UAAU,IAAI,QAAQ;EAC5B,SAAS,WAAW,MAAM,QAAQ,MAAM,IAAI;EAC5C,KAAK,gBAAgB;EACrB,KAAK,OAAO;EACZ,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,mBAC5C,KAAK,QAAQ;EAGf,IAAI,WAAW;EACf,aAAa;GACX,IAAI,UAAU;GACd,WAAW;GACX,KAAK,QAAQ,OAAQ,QAAQ;EAC/B;CACF;CAEA,QAAgB,OAAc,UAA2B;EACvD,MAAM,UAAU,OAAO,QAAQ;EAC/B,IAAI,MAAM,UAAU,OAAO,KAAK,MAAM,aAAa;EACnD,MAAM,cAAc,iBAAiB;GACnC,MAAM,cAAc;GACpB,IAAI,MAAM,UAAU,SAAS,GAAG,KAAK,KAAK,KAAK;EACjD,GAAG,iBAAiB;CACtB;CAEA,KAAa,OAAc;EACzB,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;EACrD,KAAK,WAAW,KAAK;EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG;EAC7B,KAAK,KAAK,OAAO,MAAM,EAAE;EACzB,KAAK,UAAU,KAAK;EACpB,IAAI,KAAK,OAAO,MAAM,MAAM,WAAW,UAAU,MAAM,WAAW,eAChE,KAAK,KAAK;GAAE,IAAI;GAAS,IAAI,MAAM;EAAG,CAAC;EAEzC,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,kBAAkB;CACtD;CAEA,SAAiB;EACf,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG,eAAe;CACpD;CAEA,UAAkB;EAChB,IAAI,OAAO,WAAW,aAAa;EACnC,IAAI,KAAK,QAAQ,SAAS,GAAG;EAC7B,MAAM,OAAO,KAAK,UAAU,aAAa,WAAW;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI;GACJ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,kBAAkB,CAAC;EAC9C,QAAQ;GACN,KAAK,kBAAkB;GACvB;EACF;EACA,KAAK,KAAK;EACV,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,IAAI;EAEhE,GAAG,eAAe;GAChB,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;IACzC,IAAI,MAAM,WAAW;IAErB,MAAM,UAAU;IAChB,KAAK,QAAQ,KAAK;GACpB;EACF;EACA,GAAG,aAAa,UAAwB;GACtC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,OAAO,MAAM,IAAI,CAAC;GACvC,QAAQ;IACN;GACF;GACA,KAAK,OAAO,KAAK;EACnB;EACA,GAAG,WAAW,UAAsB;GAClC,IAAI,KAAK,OAAO,IAAI;GACpB,KAAK,SAAS,MAAM,IAAI;EAC1B;EACA,GAAG,gBAAgB,CAEnB;CACF;CAEA,MAAsB;EACpB,IAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU;EAC9C,MAAM,EAAE,UAAU,SAAS,OAAO;EAClC,OAAO,GAAG,aAAa,WAAW,SAAS,MAAM,IAAI,OAAO,KAAK,QAAQ;CAC3E;CAEA,QAAgB,OAAc;EAC5B,KAAK,UAAU,OAAO,cAAc,IAAI;EACxC,MAAM,QAAqB;GAAE,IAAI;GAAO,IAAI,MAAM;GAAI,IAAI,MAAM;EAAQ;EACxE,IAAI,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM;EAC1D,KAAK,KAAK,KAAK;CACjB;CAEA,KAAa,OAAoB;EAC/B,IAAI,CAAC,KAAK,OAAO,GAAG;EACpB,IAAI;GACF,KAAK,GAAI,KAAK,KAAK,UAAU,KAAK,CAAC;EACrC,QAAQ,CAER;CACF;CAEA,OAAe,OAAoB;EACjC,QAAQ,MAAM,IAAd;GACE,KAAK;IACH,KAAK,gBAAgB,MAAM;IAC3B,KAAK,MAAM,MAAM;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,MAAM,cAAc,GACtB,KAAK,cAAc,MAAM;IAE3B,KAAK,eAAe;IACpB;GACF,KAAK,cAAc;IACjB,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,QAAQ,MAAM;IACpB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,GAAI,sBAAM,IAAI,IAAI,CAAE;IACpD,IAAI,IAAI,MAAM,EAAE;IAChB,KAAK,WAAW,KAAK;IACrB,MAAM,UAAU;IAChB,KAAK,UAAU,OAAO,QAAQ,IAAI;IAGlC,KAAK,OAAO,KAAK;IACjB;GACF;GACA,KAAK,UAAU;IACb,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM,EAAE;IACpC,IAAI,CAAC,OAAO;IACZ,KAAK,UAAU,KAAK;IACpB,MAAM,YAAY,kBAAkB,MAAM,IAAI;IAC9C,KAAK,UAAU,OAAO,UAAU,MAAM,IAAI;IAC1C,KAAK,cAAc,OAAO,MAAM,IAAI;IACpC;GACF;GACA,KAAK,MAAM;IACT,IAAI,MAAM,MAAM,KAAA,KAAa,MAAM,MAAM,KAAK,KAAK;IACnD,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC,KAAK;IACV,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,GAAG;KAChC,MAAM,QAAQ,KAAK,KAAK,IAAI,EAAE;KAC9B,IAAI,CAAC,OAAO;KACZ,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;MACF,SAAS,UAAU,MAAM,IAAI,MAAM,CAAC;KACtC,SAAS,OAAO;MACd,oBAAoB,KAAK;KAC3B;IAEJ;IACA;GACF;GACA,KAAK;IACH,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GACtC,IAAI,MAAM,WAAW,QAAQ,KAAK,OAAO,KAAK;IAEhD;GACF,KAAK;IACH,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,MAAM,UAAU,KAAK,CAAC;IAC3D;GACF,KAAK,QACH;EACJ;CACF;CAEA,SAAiB,MAAc;EAC7B,KAAK,KAAK;EACV,KAAK,gBAAgB;EACrB,KAAK,MAAM;EACX,KAAK,cAAc;EACnB,KAAK,OAAO,MAAM;EAClB,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,MAAM,QAAQ;GAEd,KAAK,WAAW,KAAK;GACrB,IAAI,CAAC,MAAM,WAAW,KAAK,UAAU,OAAO,UAAU,IAAI;EAC5D;EACA,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,kBAAkB;CAC/E;CAEA,oBAA4B;EAC1B,KAAK,eAAe;EACpB,IAAI;EACJ,IAAI,KAAK,eAAe,MAAM;GAC5B,QAAQ,KAAK;GACb,KAAK,aAAa;EACpB,OAAO,IAAI,KAAK,SAAS;GAEvB,KAAK,UAAU;GACf,QAAQ,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;EACxC,OACE,QAAQ,aAAa,KAAK,SAAS,KAAK,OAAO,CAAC;EAElD,KAAK;EACL,KAAK,iBAAiB,iBAAiB;GACrC,KAAK,iBAAiB;GACtB,KAAK,QAAQ;EACf,GAAG,KAAK;CACV;CAEA,iBAAyB;EACvB,IAAI,KAAK,gBAAgB,aAAa,KAAK,cAAc;EACzD,KAAK,iBAAiB;CACxB;CAEA,SAAiB;EACf,QAAQ,KAAK,UAAU,UAAU,KAAK,OAAA,CAAQ;CAChD;CAEA,iBAAyB;EACvB,KAAK,cAAc;EACnB,KAAK,YAAY,kBAAkB,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;EAC9E,KAAK,MAAM;CACb;CAEA,gBAAwB;EACtB,IAAI,KAAK,WAAW,cAAc,KAAK,SAAS;EAChD,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,KAAK,YAAY;EACjB,KAAK,gBAAgB;CACvB;;CAGA,QAAgB;EACd,IAAI,KAAK,eAAe,aAAa,KAAK,aAAa;EACvD,MAAM,KAAK,KAAK;EAChB,KAAK,gBAAgB,iBAAiB;GACpC,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;GAE3B,IAAI;IACF,GAAG,MAAM;GACX,QAAQ,CAAC;GACT,KAAK,SAAS,IAAI;EACpB,GAAG,KAAK,cAAc,CAAC;CACzB;CAEA,UAAkB,OAAc,QAAuB,MAAyB;EAC9E,IAAI,MAAM,WAAW,UAAU,MAAM,SAAS,MAAM;EACpD,MAAM,SAAS;EACf,MAAM,OAAO;EACb,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;GACF,SAAS,WAAW,QAAQ,IAAI;EAClC,SAAS,OAAO;GACd,oBAAoB,KAAK;EAC3B;CAEJ;;CAGA,OAAe,OAAc;EAC3B,IAAI,MAAM,aAAa;EACvB,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,OAAO,MAAM,eAAe,qBAAqB;EACvD,MAAM,aAAa;GACjB,MAAM,cAAc;GACpB,MAAM,eAAe,KAAK,IAAI;GAC9B,KAAK,MAAM,YAAY,MAAM,KAAK,MAAM,SAAS,GAC/C,IAAI;IACF,SAAS,WAAW;GACtB,SAAS,OAAO;IACd,oBAAoB,KAAK;GAC3B;EAEJ;EACA,IAAI,MAAM,iBAAiB,KAAK,QAAQ,GAAG,KAAK;OAC3C,MAAM,cAAc,WAAW,MAAM,IAAI;CAChD;;;;;;;;CASA,cAAsB,OAAc,MAAkB;EACpD,IAAI,SAAS,kBAAkB,SAAS,WAAW,SAAS,SAAS;EACrE,IAAI,SAAS,WAAW,MAAM,WAAA,GAA8B;EAC5D,KAAK,WAAW,KAAK;EAErB,MAAM,QAAQ,KAAK,IADL,SAAS,iBAAiB,wBAAwB,gBAClC,aAAa,MAAM,SAAS,KAAK,OAAO,CAAC,CAAC;EACxE,MAAM;EACN,MAAM,aAAa,iBAAiB;GAClC,MAAM,aAAa;GACnB,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,SAAS,MAAM,WAAW,UAAU;GACxE,IAAI,KAAK,OAAO,GAAG,KAAK,QAAQ,KAAK;EACvC,GAAG,KAAK;CACV;CAEA,WAAmB,OAAc;EAC/B,IAAI,MAAM,YAAY,aAAa,MAAM,UAAU;EACnD,MAAM,aAAa;CACrB;CAEA,UAAkB,OAAc;EAC9B,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK;EACvC,KAAK,OAAO,MAAM,EAAE;EACpB,IAAI,OAAO,IAAI,SAAS,GAAG,KAAK,OAAO,OAAO,MAAM,KAAK;EACzD,MAAM,QAAQ;CAChB;CAEA,oBAA4B;EAC1B,KAAK,gBAAgB;EACrB,KAAK,YAAY,iBAAiB;GAChC,KAAK,YAAY;GACjB,IAAI,KAAK,QAAQ,OAAO,GAAG;GAC3B,KAAK,eAAe;GACpB,KAAK,MAAM;EACb,GAAG,aAAa;CAClB;CAEA,kBAA0B;EACxB,IAAI,KAAK,WAAW,aAAa,KAAK,SAAS;EAC/C,KAAK,YAAY;CACnB;;CAGA,QAAgB;EACd,MAAM,KAAK,KAAK;EAChB,IAAI,CAAC,IAAI;EACT,KAAK,KAAK;EACV,IAAI;GACF,GAAG,MAAM,UAAU,MAAM;EAC3B,QAAQ,CAAC;EACT,KAAK,SAAS,UAAU,MAAM;CAChC;CAEA,SAAiB;EACf,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;EACrD,KAAK,YAAY;EACjB,OAAO,iBAAiB,UAAU,KAAK,QAAQ;EAC/C,IAAI,OAAO,aAAa,aACtB,SAAS,iBAAiB,oBAAoB,KAAK,YAAY;CAEnE;CAEA,iBAAyB;EACvB,IAAI,KAAK,QAAQ,SAAS,KAAK,KAAK,MAAM,KAAK,mBAAmB;EAClE,KAAK,UAAU;EACf,KAAK,QAAQ;CACf;CAEA,qBAA6B;EAC3B,IAAI,SAAS,oBAAoB,UAAU;GACzC,IAAI,KAAK,aAAa;GACtB,KAAK,cAAc,iBAAiB;IAClC,KAAK,cAAc;IACnB,IAAI,SAAS,oBAAoB,UAAU;IAC3C,KAAK,oBAAoB;IACzB,KAAK,eAAe;IACpB,KAAK,MAAM;GACb,GAAG,KAAK,QAAQ,kBAAkB;GAClC;EACF;EACA,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,cAAc;EACnB,IAAI,KAAK,mBAAmB;GAC1B,KAAK,oBAAoB;GACzB,KAAK,UAAU;GAEf,KAAK,QAAQ;EACf;CACF;;;;;;;CAQA,YAAY;EACV,KAAK,MAAM;EACX,KAAK,eAAe;EACpB,KAAK,UAAU;EACf,IAAI,KAAK,QAAQ,OAAO,KAAK,CAAC,KAAK,mBAAmB,KAAK,QAAQ;CACrE;;CAGA,UAAU;EACR,KAAK,eAAe;EACpB,KAAK,gBAAgB;EACrB,IAAI,KAAK,aAAa,aAAa,KAAK,WAAW;EACnD,KAAK,MAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;GACzC,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,IAAI,MAAM,aAAa,aAAa,MAAM,WAAW;GACrD,KAAK,WAAW,KAAK;EACvB;EACA,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,MAAM;EAChB,KAAK,MAAM;EACX,IAAI,KAAK,aAAa,OAAO,WAAW,aAAa;GACnD,OAAO,oBAAoB,UAAU,KAAK,QAAQ;GAClD,UAAU,oBAAoB,oBAAoB,KAAK,YAAY;GACnE,KAAK,YAAY;EACnB;CACF;AACF;;AAGA,SAAgB,aAAa,SAAiB,QAAwB;CACpE,MAAM,MAAM,KAAK,IAAI,gBAAgB,iBAAiB,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;CAChF,OAAO,KAAK,IAAI,gBAAgB,KAAK,MAAM,SAAS,GAAG,CAAC;AAC1D;AAEA,SAAS,aAAa,SAAqD;CACzE,OAAO;EACL,MAAM,QAAQ,QAAA;EACd,oBAAoB,QAAQ,sBAAsB;CACpD;AACF;AAEA,SAAS,oBAAoB,OAAgB;CAC3C,iBAAiB;EACf,MAAM;CACR,CAAC;AACH;;;;;AAMA,SAAgB,YAA4B;CAC1C,OAAQ,SAAS,WAAW,IAAI,eAAe,SAAS,OAAO;AACjE"}

package/dist/chunks/{ThemeProvider-BnmnRvEc.js → ThemeProvider-BstCYMfV.js}

@@ -1053,7 +1053,7 @@ function loadedRealtimeClient() {
 }
 var loading = null;
 /** The lazily loaded client. Replaceable in tests, to simulate a failed load. */
-var lazyModules = { client: () => import("./RealtimeClient-CyGWZr6p.js") };
+var lazyModules = { client: () => import("./RealtimeClient-bPI28SVg.js") };
 /**
 * `./live`, loaded by the first live query. `<Page>` in `gemi/testing` sets
 * `current` up front, so a live query on a provided socket subscribes during
@@ -1061,7 +1061,7 @@ var lazyModules = { client: () => import("./RealtimeClient-CyGWZr6p.js") };
 */
 var liveModule = {
 	current: null,
-	load: () => import("./live-B4RW02g2.js").then((n) => n.n)
+	load: () => import("./live-DYLCi077.js").then((n) => n.n)
 };
 /**
 * The tab's client, loading its module and creating it on first use. `null`
@@ -3244,6 +3244,8 @@ function flattenComponentTree(componentTree) {
 * inside the cooldown is left to the route's error boundary. Per URL rather
 * than per tab (#1056): while two releases serve at once every navigation can
 * miss, and a tab-wide cooldown sent the second one to the error boundary.
+* Where `sessionStorage` cannot be used, the marker lives in `window.name`
+* instead (#1186); see `chunkReloadGuard`.
 *
 * The same guard covers a navigation whose data came from another build
 * (`recoverFromBuildMismatch`).
@@ -3389,46 +3391,116 @@ function cooldownMs() {
 }
 function reloadBlock(url) {
 	if (typeof navigator !== "undefined" && navigator.onLine === false) return "offline";
-	let raw;
-	try {
-		raw = window.sessionStorage.getItem(CHUNK_RELOAD_MARKER);
-	} catch {
-		return "storage";
-	}
-	const at = parseMarker(raw)[url];
-	return at !== void 0 && withinCooldown(Date.now() - at, cooldownMs()) ? "cooldown" : null;
+	const verdict = chunkReloadGuard(CHUNK_RELOAD_MARKER, url, cooldownMs(), false);
+	return verdict === "ok" ? null : verdict;
 }
 function withinCooldown(elapsed, cooldownMs) {
 	return elapsed >= 0 && elapsed < cooldownMs;
 }
+function markReload(url) {
+	return chunkReloadGuard(CHUNK_RELOAD_MARKER, url, cooldownMs(), true) === "ok";
+}
 /**
-* The marker: when each URL was last reloaded onto, `{ [url]: at }`. Anything
-* else in it (a marker written by an earlier gemi as `{ url, at }`) is ignored.
+* The cross-document guard, shared by the client and the server's reload stub
+* (which embeds this function's source, so it uses nothing but globals and its
+* arguments). With `claim` false it only reads: `"cooldown"` when a reload
+* onto `url` was recorded inside `cooldownMs`, `"storage"` when no marker can
+* be read at all, otherwise `"ok"`. With `claim` true it also records the
+* reload, and answers `"ok"` only once the record was written and read back
+* unchanged; a caller navigates on nothing less.
+*
+* Two places can hold the marker:
+*
+* - `sessionStorage[key]`: `{ [url]: at }`, the format earlier releases read
+*   and write, so a page from one and a stub from another share the guard.
+* - `window.name`, when `sessionStorage` throws or will not take the write
+*   (#1186). It survives a load in the same tab, but it is shared state: the
+*   page may use it, and another origin the tab goes to can read it. So it is
+*   used only while it is empty or already holds gemi's marker — a value of
+*   anyone else's is left exactly as it is, and the guard then fails closed —
+*   and it holds no URL: `key + ":" + { o: hash(origin), m: { [hash(origin +
+*   pathname)]: at } }`. A marker written by another origin (`o` differs) or
+*   one that does not parse holds no reloads and is replaced on the next
+*   write. Two paths whose hashes collide share one cooldown, which only ever
+*   refuses a reload.
+*
+* A reload recorded in either place counts. Entries past the cooldown — and
+* from the future, after the clock was set back — are dropped as a new one is
+* written, so the marker holds only the reloads it still guards.
 */
-function parseMarker(raw) {
-	let parsed;
+function chunkReloadGuard(key, url, cooldownMs, claim) {
+	const now = Date.now();
+	const fresh = function(at) {
+		return typeof at === "number" && now - at >= 0 && now - at < cooldownMs;
+	};
+	const parse = function(raw) {
+		try {
+			const value = raw ? JSON.parse(raw) : null;
+			return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+		} catch {
+			return {};
+		}
+	};
+	const live = function(marker) {
+		const kept = {};
+		for (const k in marker) if (fresh(marker[k])) kept[k] = marker[k];
+		return kept;
+	};
+	const hash = function(text) {
+		let h = 2166136261;
+		for (let i = 0; i < text.length; i++) h = Math.imul(h ^ text.charCodeAt(i), 16777619);
+		return (h >>> 0).toString(36);
+	};
+	let storage = null;
+	let stored = {};
 	try {
-		parsed = raw ? JSON.parse(raw) : null;
+		storage = window.sessionStorage;
+		stored = parse(storage.getItem(key));
 	} catch {
-		return {};
+		storage = null;
 	}
-	const marker = {};
-	if (parsed && typeof parsed === "object") {
-		for (const [url, at] of Object.entries(parsed)) if (typeof at === "number") marker[url] = at;
-	}
-	return marker;
-}
-function markReload(url) {
+	const prefix = key + ":";
+	let origin = "";
+	let page = "";
 	try {
-		const now = Date.now();
-		const marker = {};
-		for (const [other, at] of Object.entries(parseMarker(window.sessionStorage.getItem(CHUNK_RELOAD_MARKER)))) if (withinCooldown(now - at, cooldownMs())) marker[other] = at;
-		marker[url] = now;
-		window.sessionStorage.setItem(CHUNK_RELOAD_MARKER, JSON.stringify(marker));
-		return true;
+		const target = new URL(url, window.location.href);
+		origin = hash(new URL(window.location.href).origin);
+		page = hash(target.origin + target.pathname);
+	} catch {}
+	let named = null;
+	try {
+		const name = window.name;
+		if (!page) named = null;
+		else if (name === "") named = {};
+		else if (name.indexOf(prefix) === 0) {
+			const held = parse(name.slice(prefix.length));
+			const entries = held.m;
+			named = held.o === origin && entries && typeof entries === "object" && !Array.isArray(entries) ? entries : {};
+		}
 	} catch {
-		return false;
-	}
+		named = null;
+	}
+	if (fresh(stored[url]) || named && fresh(named[page])) return "cooldown";
+	if (!storage && !named) return "storage";
+	if (!claim) return "ok";
+	if (storage) try {
+		const nextStored = live(stored);
+		nextStored[url] = now;
+		const serialised = JSON.stringify(nextStored);
+		storage.setItem(key, serialised);
+		if (storage.getItem(key) === serialised) return "ok";
+	} catch {}
+	if (named) try {
+		const nextNamed = live(named);
+		nextNamed[page] = now;
+		const value = prefix + JSON.stringify({
+			o: origin,
+			m: nextNamed
+		});
+		window.name = value;
+		if (window.name === value) return "ok";
+	} catch {}
+	return "storage";
 }
 //#endregion
 //#region client/ComponentContext.tsx
@@ -4055,4 +4127,4 @@ function useTheme() {
 //#endregion
 export { QueryManagerProvider as $, useNavigate as A, createMemoryHistory as B, loadDictionaryForRender as C, routeDataUrl as D, readRoutePayload as E, useLocation as F, realtime as G, configureRealtime as H, domainUrl as I, loadedModule as J, reconnectRealtime as K, isAbsoluteUrl as L, I18nProvider as M, ServerDataContext as N, useRoute as O, ServerDataProvider as P, QueryManagerContext as Q, ProgressManager as R, loadDictionary as S, setActiveLocale as T, followLive as U, RealtimeContext as V, liveModule as W, applyParams as X, toVariantKey as Y, QueryConfigContext as Z, isChunkLoadError as _, Subject as _t, useRouteTransition as a, resetAuthenticationIncident as at, recoverFromBuildMismatch as b, ClientRouterContext as c, isExternalRedirect as ct, ComponentsProvider as d, equalJitter as dt, USER_QUERY_CONFIG_KEYS as et, initialViewModulesReady as f, isRetryableQueryError as ft, configureChunkLoadRecovery as g, QueryError as gt, CHUNK_RELOAD_MARKER as h, shouldRetryQuery as ht, RouteTransitionProvider as i, reportAuthenticationRefusal as it, I18nContext as j, useSearchParams as k, ClientRouterProvider as l, safeRedirectPath as lt, subscribeViewModules as m, retryDelayFor as mt, useTheme as n, DEFAULT_STALE_TIME as nt, useChannelSubscription as o, setAuthenticationNavigator as ot, loadViewModule as p, parseRetryAfter as pt, loadLazy as q, m as r, configureAuthenticationErrors as rt, useCoalesced as s, INTENDED_URL_PARAM as st, ThemeProvider as t, pickDefined as tt, ComponentsContext as u, readResponseBody as ut, navigationStarted as v, registerDictionary as w, recoverFromChunkLoadError as x, otherBuild as y, Action as z };
 
-//# sourceMappingURL=ThemeProvider-BnmnRvEc.js.map
+//# sourceMappingURL=ThemeProvider-BstCYMfV.js.map