on-zero 0.6.2 → 0.6.4

package/src/helpers/recoverZeroClient.ts

@@ -7,9 +7,59 @@ import type { Context, LogLevel, LogSink } from '@rocicorp/logger'
 // surfaced as fatal instead of reload-storming on something the reload can't fix.
 const RECOVER_GUARD_MS = 60_000
 
+// if the scheduled reload never actually takes the page down (a consumer's
+// scheduleReload deferred it, a native reload no-oped, or reload() threw) the
+// module latch would stay set and kill EVERY later recovery for the page's
+// life. time it out so recovery can try again — a real reload tears down the
+// context long before this fires, so it only matters when the reload didn't
+// land.
+const RELOAD_LATCH_TIMEOUT_MS = 15_000
+
 // the fatal local-store-loss signature Zero logs when the IndexedDB it expects
 // is gone (evicted, or deleted by another tab).
 const LOCAL_STORE_LOST = 'Expected IndexedDB not found'
+const SQLITE_ERROR_NAME = 'SqliteError'
+const SQLITE_STATEMENT_FINALIZED = 'This statement has been finalized'
+const STORE_CLOSED = 'Store is closed'
+const STORE_CLOSED_REPEAT_MIN_MS = 2_000
+const STORE_CLOSED_REPEAT_MAX_MS = 60_000
+
+export type ZeroRecoveryLogReason =
+  | 'indexeddb-not-found'
+  | 'sqlite-statement-finalized'
+  | 'store-closed-repeat'
+  | 'mutation-desync'
+  | 'connection-cookie-invalid'
+  | 'client-not-found'
+  | 'connection-userid-mismatch'
+
+export type ZeroRecoveryLogClassification = {
+  reason: ZeroRecoveryLogReason
+  reasonKey: string
+  message: string
+  dropLocalState: boolean
+}
+
+// a minimal synchronous key/value store the cross-reload guard persists into.
+// web defaults to sessionStorage; native (Hermes) has none, so a consumer can
+// inject an MMKV/sqlite-backed store to get cross-reload loop protection — the
+// in-memory guard already covers within-a-page-load.
+export type RecoveryGuardStorage = {
+  getItem: (key: string) => string | null
+  setItem: (key: string, value: string) => void
+}
+
+// what a scheduleReload consumer receives so it can gate/annotate the reload
+// (soot: IDE-active gate + countdown toast + background-mutation fence; mobile:
+// expo-updates reload) while still driving the SAME deletes-then-reload work.
+export type ScheduleReloadContext = {
+  reason: string
+  reasonKey: string
+  dropLocalState: boolean
+  // deletes every affected instance's local store, awaits beforeReload, then
+  // reloads. idempotent — safe to call once the consumer decides to proceed.
+  performReload: () => Promise<void>
+}
 
 export type ZeroRecoveryDeps = {
   // delete THIS client's local persistent state (its own scoped IDB). pass the
@@ -21,32 +71,140 @@ export type ZeroRecoveryDeps = {
   // awaited before the reload — e.g. wait for the dev origin to come back so the
   // reload doesn't land on a restarting server. optional.
   beforeReload?: () => Promise<void>
+  // take over WHEN/HOW the recovery reload happens. default: immediate guarded
+  // reload. the consumer decides (defer until safe, show a countdown, reload
+  // natively) but still calls ctx.performReload to run the real work.
+  scheduleReload?: (ctx: ScheduleReloadContext) => void
+  // cross-reload guard backing store (defaults to sessionStorage on web). inject
+  // a native KV so Hermes gets real cross-reload loop protection.
+  guardStorage?: RecoveryGuardStorage
+  // called with the joined log text for a classified recovery signature; return
+  // true to treat it as benign and NOT recover (soot's cf cold-boot timeout).
+  benignLogFilter?: (message: string) => boolean
   // injectable for tests; defaults to a real page reload.
   reload?: () => void
 }
 
 // one reload per page-load. the local-state deletes that must precede it are
 // collected here so EVERY affected instance (a combined client has several) drops
-// its own store before we reload — not just whichever instance fired first.
+// its own store before we reload — not just whichever instance fired first. they
+// are thunks (not started promises) so a deferred reload can't leave the app
+// running on an already-deleted store: the deletes run only when the reload
+// actually proceeds.
 let reloadScheduled = false
-const pendingDeletes: Array<Promise<unknown>> = []
+let reloadInProgress = false
+let reloadLatchTimer: ReturnType<typeof setTimeout> | undefined
+const pendingDeletes: Array<() => Promise<unknown>> = []
 
-// cross-page-load, per-reason guard: distinct keys mean a NewClientGroup recovery
-// never suppresses a later SchemaVersionNotSupported one. it survives the reload
-// (sessionStorage), so a reason that reloaded then immediately re-fires is caught
-// as a genuine fatal instead of reload-storming across loads.
-function recoveryGuardOpen(reasonKey: string): boolean {
+// within-a-page-load per-reason guard: real loop protection everywhere,
+// including Hermes (no storage needed). a reload wipes it, which is why the
+// injectable storage below survives across reloads.
+const inMemoryGuard = new Map<string, number>()
+
+function defaultGuardStorage(): RecoveryGuardStorage | undefined {
   try {
-    const key = `on-zero-recover-${reasonKey}`
-    const last = Number(window.sessionStorage.getItem(key) || 0)
-    if (Date.now() - last < RECOVER_GUARD_MS) return false
-    window.sessionStorage.setItem(key, String(Date.now()))
+    if (typeof window === 'undefined' || !window.sessionStorage) return undefined
+    return window.sessionStorage
   } catch {
-    // no sessionStorage (private mode) — fall back to the in-memory latch.
+    // sessionStorage access throws in some sandboxes / Hermes — no web store.
+    return undefined
   }
+}
+
+// cross-page-load, per-reason guard: distinct keys mean a NewClientGroup recovery
+// never suppresses a later SchemaVersionNotSupported one. the in-memory tier
+// catches re-fires within a page-load (works on Hermes); the storage tier
+// survives the reload, so a reason that reloaded then immediately re-fires is
+// caught as a genuine fatal instead of reload-storming across loads.
+function recoveryGuardOpen(
+  reasonKey: string,
+  guardStorage: RecoveryGuardStorage | undefined,
+): boolean {
+  const key = `on-zero-recover-${reasonKey}`
+  const now = Date.now()
+
+  const memLast = inMemoryGuard.get(key) ?? 0
+  if (memLast > 0 && now - memLast < RECOVER_GUARD_MS) return false
+
+  const storage = guardStorage ?? defaultGuardStorage()
+  if (storage) {
+    try {
+      const rawLast = storage.getItem(key)
+      const last = rawLast ? Number(rawLast) : 0
+      if (last > 0 && now - last < RECOVER_GUARD_MS) return false
+      storage.setItem(key, String(now))
+    } catch {
+      // storage unavailable mid-flight — the in-memory tier is the floor.
+    }
+  }
+
+  inMemoryGuard.set(key, now)
   return true
 }
 
+// "Store is closed" is noisy during intentional instance replacement. One log is
+// teardown noise; repeated logs seconds apart mean a live client is stuck using a
+// closed local store and needs fresh local state.
+let lastStoreClosedAtMs = 0
+
+function armReloadLatchTimeout() {
+  if (typeof setTimeout !== 'function') return
+  if (reloadLatchTimer) clearTimeout(reloadLatchTimer)
+  reloadLatchTimer = setTimeout(() => {
+    reloadLatchTimer = undefined
+    // re-open SCHEDULING only. a reload that never landed (still deferred behind
+    // a consumer's IDE gate / countdown, which can hold for minutes) must not
+    // kill future recovery — but the deferred performReload still owns the
+    // pending delete thunks and, if it is already mid-flight (a slow
+    // beforeReload can exceed this timeout), reloadInProgress must stay set so a
+    // second recovery can't double-drive the reload. so touch neither
+    // pendingDeletes nor reloadInProgress here.
+    reloadScheduled = false
+  }, RELOAD_LATCH_TIMEOUT_MS)
+  // don't hold the event loop open (node/native) waiting on this defense timer.
+  if (
+    reloadLatchTimer &&
+    typeof reloadLatchTimer === 'object' &&
+    'unref' in reloadLatchTimer
+  ) {
+    reloadLatchTimer.unref()
+  }
+}
+
+function disarmReloadLatchTimeout() {
+  if (reloadLatchTimer) {
+    clearTimeout(reloadLatchTimer)
+    reloadLatchTimer = undefined
+  }
+}
+
+// deletes every collected instance's local store, awaits beforeReload, then
+// reloads. deferred a microtask so sibling instances failing in the same tick
+// enqueue their deletes first. idempotent: a consumer that calls performReload
+// twice (or after the latch timeout) only runs one reload.
+function performReload(deps: ZeroRecoveryDeps): Promise<void> {
+  if (reloadInProgress) return Promise.resolve()
+  reloadInProgress = true
+  // the consumer has committed to reloading, so the un-latch timeout has no job
+  // now — disarm it before the (possibly slow) delete/beforeReload chain so it
+  // can't fire mid-flight and re-open scheduling under an in-progress reload.
+  disarmReloadLatchTimeout()
+  // resolve the reload exactly as @rocicorp/zero does internally
+  // (`getBrowserGlobal('location')?.reload()`, zero.js): read location off the
+  // global and optional-chain through it. a non-DOM host with a `window` shim
+  // but no real `location` (the sootsim tenant render-worker hides `location`
+  // for isolation) then drops its stale IDB and no-ops the reload — letting the
+  // host remount — instead of throwing "reading 'reload'" on undefined.
+  const doReload = deps.reload ?? (() => globalThis.location?.reload?.())
+  return Promise.resolve()
+    .then(() => Promise.allSettled(pendingDeletes.splice(0).map((run) => run())))
+    .then(() => deps.beforeReload?.())
+    .catch(() => {})
+    .then(() => {
+      doReload()
+    })
+}
+
 function recover(
   deps: ZeroRecoveryDeps,
   reasonKey: string,
@@ -58,36 +216,31 @@ function recover(
   // already queued — otherwise a sibling's store survives the reload and
   // fatal-loops on the next boot. the single scheduled reload awaits these.
   if (dropLocalState) {
-    pendingDeletes.push(
-      Promise.resolve()
-        .then(deps.deleteLocalState)
-        .catch(() => {}),
-    )
+    pendingDeletes.push(() => Promise.resolve().then(deps.deleteLocalState))
   }
   // only ONE reload per page-load; a later trigger just contributes its delete.
   if (reloadScheduled) return
-  if (!recoveryGuardOpen(reasonKey)) {
+  if (!recoveryGuardOpen(reasonKey, deps.guardStorage)) {
     console.error(`[on-zero] ${message} — already recovered once, not reloading`)
     deps.zeroEvents.emit({ type: 'fatal', reason: message })
     return
   }
   reloadScheduled = true
+  armReloadLatchTimeout()
   console.warn(`[on-zero] ${message} — recovering`)
   deps.zeroEvents.emit({ type: 'recovering', reason: message })
-  // resolve the reload exactly as @rocicorp/zero does internally
-  // (`getBrowserGlobal('location')?.reload()`, zero.js): read location off the
-  // global and optional-chain through it. a non-DOM host with a `window` shim
-  // but no real `location` (the sootsim tenant render-worker hides `location`
-  // for isolation) then drops its stale IDB and no-ops the reload — letting the
-  // host remount — instead of throwing "reading 'reload'" on undefined.
-  const doReload = deps.reload ?? (() => globalThis.location?.reload?.())
-  // defer one microtask so sibling instances failing in the same tick enqueue
-  // their deletes first, then await them all before reloading.
-  Promise.resolve()
-    .then(() => Promise.allSettled(pendingDeletes))
-    .then(() => deps.beforeReload?.())
-    .catch(() => {})
-    .finally(doReload)
+
+  const runReload = () => performReload(deps)
+  if (deps.scheduleReload) {
+    deps.scheduleReload({
+      reason: message,
+      reasonKey,
+      dropLocalState,
+      performReload: runReload,
+    })
+  } else {
+    void runReload()
+  }
 }
 
 // passing our own onUpdateNeeded/onClientStateNotFound DISABLES Zero's built-in
@@ -137,10 +290,139 @@ function logToConsole(
   console[method](...(prefix ? [prefix] : []), ...args)
 }
 
-// watch error-level logs for the local-store-lost signature (the one fatal Zero
-// surfaces only through the log, not the structured callbacks) and trigger the
-// same recovery. forwards to the consumer sink, or to the console when there is
-// none. wire this ONLY when the consumer didn't pass their own logSink, so a
+function logArgText(arg: unknown): string {
+  if (typeof arg === 'string') return arg
+  if (arg instanceof Error) return `${arg.name} ${arg.message} ${arg.stack || ''}`
+  if (arg && typeof arg === 'object') {
+    const message = 'message' in arg ? (arg as { message?: unknown }).message : undefined
+    const name = 'name' in arg ? (arg as { name?: unknown }).name : undefined
+    if (typeof message === 'string')
+      return `${typeof name === 'string' ? name : ''} ${message}`
+  }
+  return ''
+}
+
+function isBenignStoreClosedLog(text: string): boolean {
+  if (/Mutator\s+".*"\s+error on server/i.test(text)) return true
+  if (/Mutator\s+".*"\s+app error on client/i.test(text)) return true
+  return false
+}
+
+// the mutation/connection desync class: the local client group is out of sync
+// with the server's last-mutation-id / cookie / client record, so the store is
+// unusable and must be dropped + recovered. these surface only through the error
+// log, never the structured onClientStateNotFound callback. genuinely app-infra
+// signatures (a consumer's synthesized ack-timeout marker, a cold-boot connect
+// timeout) are NOT here — a consumer keeps those with benignLogFilter / its own
+// handling.
+function classifyMutationDesync(
+  text: string,
+): { reason: ZeroRecoveryLogReason; reasonKey: string; message: string } | undefined {
+  if (text.includes('sent mutation ID') && text.includes('but expected')) {
+    return {
+      reason: 'mutation-desync',
+      reasonKey: 'mutation-desync',
+      message: 'mutation id desync',
+    }
+  }
+  if (
+    text.includes('oooMutation') ||
+    text.includes('Server reported an out-of-order mutation')
+  ) {
+    return {
+      reason: 'mutation-desync',
+      reasonKey: 'mutation-desync',
+      message: 'out-of-order mutation',
+    }
+  }
+  if (text.includes('already processed')) {
+    return {
+      reason: 'mutation-desync',
+      reasonKey: 'mutation-desync',
+      message: 'mutation already processed',
+    }
+  }
+  if (text.includes('InvalidConnectionRequestLastMutationID')) {
+    return {
+      reason: 'mutation-desync',
+      reasonKey: 'mutation-desync',
+      message: 'invalid connection last mutation id',
+    }
+  }
+  if (text.includes('InvalidConnectionRequestBaseCookie')) {
+    return {
+      reason: 'connection-cookie-invalid',
+      reasonKey: 'connection-cookie-invalid',
+      message: 'invalid connection base cookie',
+    }
+  }
+  if (text.includes('ClientNotFound') || text.includes('Client not found')) {
+    return {
+      reason: 'client-not-found',
+      reasonKey: 'client-not-found',
+      message: 'client not found',
+    }
+  }
+  if (text.includes('connection userID mismatch')) {
+    return {
+      reason: 'connection-userid-mismatch',
+      reasonKey: 'connection-userid-mismatch',
+      message: 'connection user id mismatch',
+    }
+  }
+  return undefined
+}
+
+export function classifyZeroRecoveryLog(
+  level: LogLevel | string,
+  args: readonly unknown[],
+  nowMs = Date.now(),
+): ZeroRecoveryLogClassification | undefined {
+  if (level !== 'error') return undefined
+  const text = args.map(logArgText).join(' ')
+  if (text.includes(LOCAL_STORE_LOST)) {
+    return {
+      reason: 'indexeddb-not-found',
+      reasonKey: 'local-store',
+      message: 'local store lost',
+      dropLocalState: true,
+    }
+  }
+  if (text.includes(SQLITE_ERROR_NAME) && text.includes(SQLITE_STATEMENT_FINALIZED)) {
+    return {
+      reason: 'sqlite-statement-finalized',
+      reasonKey: 'sqlite-statement-finalized',
+      message: 'sqlite statement finalized',
+      dropLocalState: true,
+    }
+  }
+  const desync = classifyMutationDesync(text)
+  if (desync) {
+    return { ...desync, dropLocalState: true }
+  }
+  if (text.includes(STORE_CLOSED) && !isBenignStoreClosedLog(text)) {
+    const prevMs = lastStoreClosedAtMs
+    lastStoreClosedAtMs = nowMs
+    if (
+      prevMs > 0 &&
+      nowMs - prevMs >= STORE_CLOSED_REPEAT_MIN_MS &&
+      nowMs - prevMs <= STORE_CLOSED_REPEAT_MAX_MS
+    ) {
+      return {
+        reason: 'store-closed-repeat',
+        reasonKey: 'store-closed-repeat',
+        message: 'local store closed repeatedly',
+        dropLocalState: true,
+      }
+    }
+  }
+  return undefined
+}
+
+// watch error-level logs for the local-store-lost / desync signatures (the ones
+// Zero surfaces only through the log, not the structured callbacks) and trigger
+// the same recovery. forwards to the consumer sink, or to the console when there
+// is none. wire this ONLY when the consumer didn't pass their own logSink, so a
 // consumer that owns log-based recovery isn't double-fired.
 export function composeRecoveryLogSink(
   deps: ZeroRecoveryDeps,
@@ -151,19 +433,13 @@ export function composeRecoveryLogSink(
     log(level: LogLevel, context: Context | undefined, ...args: unknown[]): void {
       if (consumerLogSink) consumerLogSink.log(level, context, ...args)
       else logToConsole(level, context, ...args)
-      if (level !== 'error') return
-      const text = args
-        .map((arg) =>
-          typeof arg === 'string'
-            ? arg
-            : arg && typeof arg === 'object' && 'message' in arg
-              ? String((arg as { message: unknown }).message)
-              : '',
-        )
-        .join(' ')
-      if (text.includes(LOCAL_STORE_LOST)) {
-        recover(deps, 'local-store', 'local store lost', true)
+      const recovery = classifyZeroRecoveryLog(level, args)
+      if (!recovery) return
+      if (deps.benignLogFilter) {
+        const text = args.map(logArgText).join(' ')
+        if (deps.benignLogFilter(text)) return
       }
+      recover(deps, recovery.reasonKey, recovery.message, recovery.dropLocalState)
     },
     // call through the consumer sink so a class-based sink keeps its `this`,
     // rather than handing Zero a detached method reference.
@@ -171,9 +447,30 @@ export function composeRecoveryLogSink(
   }
 }
 
-// test-only: the reload latch + pending deletes are in-memory (a real page reload
-// clears them); tests simulate that reset between successive "page loads".
+// generic Zero stale-poke / stale-cookie signatures: the client's view is behind
+// the server's snapshot cookie, which a plain reconnect resolves — this is not a
+// fatal store-loss, so ConnectionMonitor reconnects instead of recovering.
+export function isRecoverableZeroStalePokeMessage(message: string): boolean {
+  return (
+    message.includes('Server returned unexpected base cookie during sync') ||
+    (message.includes('Received cookie') &&
+      message.includes('is < than last snapshot cookie') &&
+      message.includes('ignoring client view'))
+  )
+}
+
+// test-only: the reload latch + pending deletes + in-memory guard are in-memory
+// (a real page reload clears them); tests simulate that reset between successive
+// "page loads". the injectable/sessionStorage guard is NOT cleared here — like a
+// real reload, it survives, which is what catches an immediate re-fire.
 export function resetRecoveryStateForTests() {
   reloadScheduled = false
+  reloadInProgress = false
+  if (reloadLatchTimer) {
+    clearTimeout(reloadLatchTimer)
+    reloadLatchTimer = undefined
+  }
   pendingDeletes.length = 0
+  lastStoreClosedAtMs = 0
+  inMemoryGuard.clear()
 }

package/src/index.ts

@@ -42,7 +42,13 @@ export {
   type ZeroClientErrorInfo,
 } from './helpers/showZeroClientError'
 export {
+  classifyZeroRecoveryLog,
   makeZeroRecovery,
   composeRecoveryLogSink,
+  isRecoverableZeroStalePokeMessage,
+  type ZeroRecoveryLogClassification,
+  type ZeroRecoveryLogReason,
   type ZeroRecoveryDeps,
+  type ScheduleReloadContext,
+  type RecoveryGuardStorage,
 } from './helpers/recoverZeroClient'

package/src/multi.ts

@@ -22,3 +22,36 @@ export function createZeroClientWithDirectQueries<
     createDirectUseQuery,
   })
 }
+
+// fail loud when a generated namespace drifts out of a multi-instance partition.
+// multi-instance consumers (control + project, control + server, …) hand-split
+// the generated query/model namespaces across instances; a namespace that ends
+// up in NEITHER partition silently un-registers its queries (its useQuery throws
+// "query not registered" at runtime, error-boundarying a whole screen — the soot
+// `planGrant` regression). run this at module-eval over each partitioned group so
+// the drift is a build/boot throw instead. also catches a namespace listed in
+// MORE than one partition (an ambiguous owner), which the hand-rolled loops did
+// not. `partitions` maps a label (e.g. 'control'/'project') to that instance's
+// namespace table; every key in `entries` must appear in exactly one.
+export function assertZeroInstancePartition(
+  kind: string,
+  entries: Record<string, unknown>,
+  partitions: Record<string, Record<string, unknown>>,
+): void {
+  const labels = Object.keys(partitions)
+  for (const name of Object.keys(entries)) {
+    const owners = labels.filter((label) => name in partitions[label])
+    if (owners.length === 0) {
+      throw new Error(
+        `[on-zero] generated ${kind} "${name}" is missing from the instance partition ` +
+          `(${labels.join(' / ')}) — add it to exactly one partition table.`,
+      )
+    }
+    if (owners.length > 1) {
+      throw new Error(
+        `[on-zero] generated ${kind} "${name}" is claimed by more than one instance partition ` +
+          `(${owners.join(', ')}) — it must belong to exactly one.`,
+      )
+    }
+  }
+}

package/src/multiPartition.test.ts

@@ -0,0 +1,38 @@
+import { describe, expect, test } from 'vitest'
+
+import { assertZeroInstancePartition } from './multi'
+
+describe('assertZeroInstancePartition', () => {
+  const control = { user: 1, workspace: 1 }
+  const project = { message: 1, thread: 1 }
+
+  test('passes when every namespace belongs to exactly one partition', () => {
+    expect(() =>
+      assertZeroInstancePartition(
+        'query namespace',
+        { user: {}, workspace: {}, message: {}, thread: {} },
+        { control, project },
+      ),
+    ).not.toThrow()
+  })
+
+  test('throws on a namespace missing from every partition (the planGrant drift)', () => {
+    expect(() =>
+      assertZeroInstancePartition(
+        'query namespace',
+        { user: {}, planGrant: {} },
+        { control, project },
+      ),
+    ).toThrow(/planGrant.*missing from the instance partition/)
+  })
+
+  test('throws on a namespace claimed by more than one partition', () => {
+    expect(() =>
+      assertZeroInstancePartition(
+        'query namespace',
+        { user: {} },
+        { control, project: { user: 1 } },
+      ),
+    ).toThrow(/user.*more than one instance partition/)
+  })
+})

package/types/createZeroClient.connection.test.d.ts

@@ -0,0 +1,5 @@
+declare global {
+    var IS_REACT_ACT_ENVIRONMENT: boolean | undefined;
+}
+export {};
+//# sourceMappingURL=createZeroClient.connection.test.d.ts.map

package/types/createZeroClient.connection.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createZeroClient.connection.test.d.ts","sourceRoot":"","sources":["../src/createZeroClient.connection.test.tsx"],"names":[],"mappings":"AAuDA,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,wBAAwB,EAAE,OAAO,GAAG,SAAS,CAAA;CAClD"}

package/types/createZeroClient.d.ts

@@ -2,6 +2,7 @@ import { Zero as ZeroClient } from '@rocicorp/zero';
 import { type Emitter } from '@take-out/helpers';
 import { type Context, type ReactNode } from 'react';
 import { type QueryControlMode, type UseQueryHook } from './createUseQuery';
+import { type RecoveryGuardStorage, type ScheduleReloadContext } from './helpers/recoverZeroClient';
 import { resolveQuery, type PlainQueryFn } from './resolveQuery';
 import type { AuthData, GenericModels, GetZeroMutators, ZeroEvent } from './types';
 import type { AnyQueryRegistry, Query, Row, ZeroOptions, Schema as ZeroSchema } from '@rocicorp/zero';
@@ -33,6 +34,11 @@ export declare function createZeroClient<Schema extends ZeroSchema, Models exten
         transport?: "http-pull";
         pullIntervalMs?: number;
         beforeReload?: (() => Promise<void>) | undefined;
+        scheduleReload?: ((ctx: ScheduleReloadContext) => void) | undefined;
+        guardStorage?: RecoveryGuardStorage;
+        benignLogFilter?: ((message: string) => boolean) | undefined;
+        refreshAuth?: (() => Promise<string | undefined>) | undefined;
+        connectionDataset?: boolean;
     }) => import("react/jsx-runtime").JSX.Element;
     ControlQueries: ({ children, action, whenDisabled, }: {
         children: ReactNode;
@@ -58,6 +64,9 @@ export declare function createZeroClient<Schema extends ZeroSchema, Models exten
         <TArg, TTable extends keyof Schema["tables"] & string, TReturn>(fn: PlainQueryFn<TArg, Query<TTable, Schema, TReturn>>, params: TArg): ReturnType<typeof resolveQuery<Schema>>;
         <TTable extends keyof Schema["tables"] & string, TReturn>(fn: PlainQueryFn<void, Query<TTable, Schema, TReturn>>): ReturnType<typeof resolveQuery<Schema>>;
     };
+    remint: (opts?: {
+        dropLocalState?: boolean;
+    }) => Promise<boolean>;
 };
 export declare function createZeroClientInternal<Schema extends ZeroSchema, Models extends GenericModels>({ schema, models, groupedQueries, permissionStrategy, instanceName, createDirectUseQuery, }: CreateZeroClientOptions<Schema, Models> & {
     createDirectUseQuery?: DirectQueryAdapter<Schema>;
@@ -71,6 +80,11 @@ export declare function createZeroClientInternal<Schema extends ZeroSchema, Mode
         transport?: "http-pull";
         pullIntervalMs?: number;
         beforeReload?: () => Promise<void>;
+        scheduleReload?: (ctx: ScheduleReloadContext) => void;
+        guardStorage?: RecoveryGuardStorage;
+        benignLogFilter?: (message: string) => boolean;
+        refreshAuth?: () => Promise<string | undefined>;
+        connectionDataset?: boolean;
     }) => import("react/jsx-runtime").JSX.Element;
     ControlQueries: ({ children, action, whenDisabled, }: {
         children: ReactNode;
@@ -96,6 +110,9 @@ export declare function createZeroClientInternal<Schema extends ZeroSchema, Mode
         <TArg, TTable extends keyof Schema["tables"] & string, TReturn>(fn: PlainQueryFn<TArg, Query<TTable, Schema, TReturn>>, params: TArg): ReturnType<typeof resolveQuery<Schema>>;
         <TTable extends keyof Schema["tables"] & string, TReturn>(fn: PlainQueryFn<void, Query<TTable, Schema, TReturn>>): ReturnType<typeof resolveQuery<Schema>>;
     };
+    remint: (opts?: {
+        dropLocalState?: boolean;
+    }) => Promise<boolean>;
 };
 export {};
 //# sourceMappingURL=createZeroClient.d.ts.map

package/types/createZeroClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createZeroClient.d.ts","sourceRoot":"","sources":["../src/createZeroClient.tsx"],"names":[],"mappings":"AAAA,OAAO,EAA8B,IAAI,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAO/E,OAAO,EAAoC,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAClF,OAAO,EAQL,KAAK,OAAO,EACZ,KAAK,SAAS,EACf,MAAM,OAAO,CAAA;AAId,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAA;AAWzB,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAOhE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,KAAK,EACV,gBAAgB,EAChB,KAAK,EACL,GAAG,EAEH,WAAW,EACX,MAAM,IAAI,UAAU,EACrB,MAAM,gBAAgB,CAAA;AAEvB,KAAK,cAAc,GAAG;IAAE,GAAG,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,CAAA;AAEvE,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;AAMpF,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAEtF,MAAM,MAAM,uBAAuB,CACjC,MAAM,SAAS,UAAU,EACzB,MAAM,SAAS,aAAa,IAC1B;IACF,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,cAAc,CAAA;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IAIvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,kBAAkB,CAAC,MAAM,SAAS,UAAU,IAAI,CAAC,KAAK,EAAE;IAClE,eAAe,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC1C,aAAa,EAAE,gBAAgB,CAAA;IAC/B,OAAO,EAAE,MAAM,GAAG,CAAA;IAClB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;CAC7B,KAAK,YAAY,CAAC,MAAM,CAAC,CAAA;AA+B1B,wBAAgB,gBAAgB,CAAC,MAAM,SAAS,UAAU,EAAE,MAAM,SAAS,aAAa,EACtF,OAAO,EAAE,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC;;;;kBAqUpC,SAAS;;kBAUT,OAAO;oBAIL,WAAW;yBAGN,MAAM;8BAGF,OAAO,CAAC,IAAI,CAAC;;;kBA6SxB,SAAS;iBACV,QAAQ,GAAG,SAAS;uBACd,OAAO,GAAG,YAAY;;;;uFAncxB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;6FAHR,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;;;SAuZN,IAAI,EAAE,MAAM,0CAA0C,OAAO,kFAGlE,cAAc;2BACN,IAAI;sBAAY,OAAO,CAAC,IAAI,CAAC;;SAChC,MAAM,0CAA0C,OAAO,oEAE5D,cAAc;2BACN,IAAI;sBAAY,OAAO,CAAC,IAAI,CAAC;;;;SAe/B,IAAI,EAAE,MAAM,0CAA0C,OAAO,yEAG5E,UAAU,CAAC,OAAO,YAAY,QAAQ,CAAC;SACxB,MAAM,0CAA0C,OAAO,2DAEtE,UAAU,CAAC,OAAO,YAAY,QAAQ,CAAC;;EAznB3C;AAED,wBAAgB,wBAAwB,CACtC,MAAM,SAAS,UAAU,EACzB,MAAM,SAAS,aAAa,EAC5B,EACA,MAAM,EACN,MAAM,EACN,cAAc,EACd,kBAAiC,EACjC,YAAwB,EACxB,oBAAoB,GACrB,EAAE,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAC3C,oBAAoB,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAA;CAClD;;;;kBAoTa,SAAS;mBACR,QAAQ,GAAG,IAAI;kBAShB,OAAO;oBAIL,WAAW;yBAGN,MAAM;uBAGR,MAAM,OAAO,CAAC,IAAI,CAAC;;0DA4SjC;QACD,QAAQ,EAAE,SAAS,CAAA;QACnB,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;QAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,YAAY,CAAA;KACtC;;;2BArcY,oCAAY,CAAC,MAAM,GAAG,EAAE,CAAC,WACvB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;iCAJV,oCAAY,CAAC,MAAM,GAAG,EAAE,CAAC,WACvB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;;;SAuZN,IAAI,EAAE,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MACxE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,UAC9C,IAAI,YACF,cAAc,GACvB;YAAE,OAAO,EAAE,MAAM,IAAI,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE;SAClC,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MAClE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,YAC5C,cAAc,GACvB;YAAE,OAAO,EAAE,MAAM,IAAI,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE;;;SAejC,IAAI,EAAE,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MACzE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,UAC9C,IAAI,GACX,UAAU,CAAC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;SACxB,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MACnE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,GACrD,UAAU,CAAC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;;EA+B3C"}
+{"version":3,"file":"createZeroClient.d.ts","sourceRoot":"","sources":["../src/createZeroClient.tsx"],"names":[],"mappings":"AAAA,OAAO,EAA8B,IAAI,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAO/E,OAAO,EAAoC,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAClF,OAAO,EAQL,KAAK,OAAO,EACZ,KAAK,SAAS,EACf,MAAM,OAAO,CAAA;AAId,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE3B,MAAM,6BAA6B,CAAA;AAIpC,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAOhE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,KAAK,EACV,gBAAgB,EAChB,KAAK,EACL,GAAG,EAEH,WAAW,EACX,MAAM,IAAI,UAAU,EACrB,MAAM,gBAAgB,CAAA;AAEvB,KAAK,cAAc,GAAG;IAAE,GAAG,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,CAAA;AAEvE,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;AAMpF,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAEtF,MAAM,MAAM,uBAAuB,CACjC,MAAM,SAAS,UAAU,EACzB,MAAM,SAAS,aAAa,IAC1B;IACF,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,cAAc,CAAA;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IAIvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,kBAAkB,CAAC,MAAM,SAAS,UAAU,IAAI,CAAC,KAAK,EAAE;IAClE,eAAe,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC1C,aAAa,EAAE,gBAAgB,CAAA;IAC/B,OAAO,EAAE,MAAM,GAAG,CAAA;IAClB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;CAC7B,KAAK,YAAY,CAAC,MAAM,CAAC,CAAA;AA+B1B,wBAAgB,gBAAgB,CAAC,MAAM,SAAS,UAAU,EAAE,MAAM,SAAS,aAAa,EACtF,OAAO,EAAE,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC;;;;kBA+WpC,SAAS;;kBAUT,OAAO;oBAIL,WAAW;yBAGN,MAAM;8BAGF,OAAO,CAAC,IAAI,CAAC;gCAIX,qBAAqB,KAAK,IAAI;uBAGtC,oBAAoB;qCAGP,MAAM,KAAK,OAAO;6BAG1B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;4BAI3B,OAAO;;;kBAgYjB,SAAS;iBACV,QAAQ,GAAG,SAAS;uBACd,OAAO,GAAG,YAAY;;;;uFAjlBxB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;6FAHR,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;;;SAqiBN,IAAI,EAAE,MAAM,0CAA0C,OAAO,kFAGlE,cAAc;2BACN,IAAI;sBAAY,OAAO,CAAC,IAAI,CAAC;;SAChC,MAAM,0CAA0C,OAAO,oEAE5D,cAAc;2BACN,IAAI;sBAAY,OAAO,CAAC,IAAI,CAAC;;;;SAe/B,IAAI,EAAE,MAAM,0CAA0C,OAAO,yEAG5E,UAAU,CAAC,OAAO,YAAY,QAAQ,CAAC;SACxB,MAAM,0CAA0C,OAAO,2DAEtE,UAAU,CAAC,OAAO,YAAY,QAAQ,CAAC;;;yBAldK,OAAO;UAAU,OAAO,CAAC,OAAO,CAAC;EArTjF;AAED,wBAAgB,wBAAwB,CACtC,MAAM,SAAS,UAAU,EACzB,MAAM,SAAS,aAAa,EAC5B,EACA,MAAM,EACN,MAAM,EACN,cAAc,EACd,kBAAiC,EACjC,YAAwB,EACxB,oBAAoB,GACrB,EAAE,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAC3C,oBAAoB,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAA;CAClD;;;;kBA8Va,SAAS;mBACR,QAAQ,GAAG,IAAI;kBAShB,OAAO;oBAIL,WAAW;yBAGN,MAAM;uBAGR,MAAM,OAAO,CAAC,IAAI,CAAC;yBAIjB,CAAC,GAAG,EAAE,qBAAqB,KAAK,IAAI;uBAGtC,oBAAoB;0BAGjB,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO;sBAGhC,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;4BAI3B,OAAO;;0DA+X1B;QACD,QAAQ,EAAE,SAAS,CAAA;QACnB,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;QAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,YAAY,CAAA;KACtC;;;2BAnlBY,oCAAY,CAAC,MAAM,GAAG,EAAE,CAAC,WACvB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;iCAJV,oCAAY,CAAC,MAAM,GAAG,EAAE,CAAC,WACvB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,YACrC,OAAO,UACT,OAAO,KACZ,OAAO,GAAG,IAAI;;;SAqiBN,IAAI,EAAE,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MACxE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,UAC9C,IAAI,YACF,cAAc,GACvB;YAAE,OAAO,EAAE,MAAM,IAAI,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE;SAClC,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MAClE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,YAC5C,cAAc,GACvB;YAAE,OAAO,EAAE,MAAM,IAAI,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE;;;SAejC,IAAI,EAAE,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MACzE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,UAC9C,IAAI,GACX,UAAU,CAAC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;SACxB,MAAM,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,OAAO,MACnE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,GACrD,UAAU,CAAC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;;oBAldd;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,KAAQ,OAAO,CAAC,OAAO,CAAC;EAkfjF"}