smoodly 0.0.51 → 0.0.52

package/dist/admin/shell/MediaScreen.js

@@ -8,8 +8,9 @@ import { useCallback, useEffect, useState } from "react";
 import { useAssets } from "../forms/assets-context.js";
 import { uploadFile } from "../forms/upload.js";
 import { MediaGrid } from "../forms/MediaGrid.js";
-import { Banner, Button, Field, Segmented, TopBar } from "../ui/primitives.js";
+import { Banner, Button, Field, Segmented, TopBar, UploadProgress } from "../ui/primitives.js";
 import { confirm } from "../ui/confirm.js";
+import { adminImageSrc } from "../forms/crop-editor.js";
 import { RouteLink } from "./RouteLink.js";
 import { KIND_FILTERS, acceptFor, formatBytes, kindOfFilter, usageLabel } from "./media-list.js";
 const META = ["title", "alt", "caption", "credit"];
@@ -23,7 +24,9 @@ export function MediaScreen({ initialItems = [], initialSelected = null, initial
     const [meta, setMeta] = useState({
         title: initialSelected?.title ?? "", alt: initialSelected?.alt ?? "", caption: initialSelected?.caption ?? "", credit: initialSelected?.credit ?? "",
     });
-    const [busy, setBusy] = useState(false);
+    /** The fraction sent while a file uploads; null when none is. */
+    const [progress, setProgress] = useState(null);
+    const busy = progress !== null;
     const [error, setError] = useState(null);
     const load = useCallback(() => {
         assets.ops.list({ kind: kindOfFilter(filter), search: search || undefined })
@@ -58,10 +61,10 @@ export function MediaScreen({ initialItems = [], initialSelected = null, initial
         const file = files?.[0];
         if (!file)
             return;
-        setBusy(true);
+        setProgress(0);
         setError(null);
-        const r = await uploadFile(assets.ops, file, assets.upload);
-        setBusy(false);
+        const r = await uploadFile(assets.upload.send, file, assets.upload.measure, setProgress);
+        setProgress(null);
         if (!r.ok) {
             setError(r.message);
             return;
@@ -90,7 +93,7 @@ export function MediaScreen({ initialItems = [], initialSelected = null, initial
         setSelected(null);
         load();
     };
-    return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsxs(_Fragment, { children: [_jsx("span", { className: "sm-title", children: "Media" }), _jsx("span", { className: "sm-count", children: items.length })] }), right: _jsxs("div", { className: "sm-picker-bar", children: [_jsx("input", { className: "sm-input", placeholder: "Search media", value: search, onChange: (e) => setSearch(e.target.value), style: { width: 220 } }), _jsx(Segmented, { options: KIND_FILTERS, value: filter, onChange: setFilter }), _jsxs("label", { className: "sm-btn sm-btn--primary", children: [busy ? "Uploading…" : "Upload", _jsx("input", { type: "file", accept: acceptFor(["image", "video", "file"], assets.media.accept), hidden: true, disabled: busy, onChange: (e) => { void onFiles(e.target.files); } })] })] }) }), error && _jsx(Banner, { tone: "error", onDismiss: () => setError(null), children: error }), _jsxs("div", { className: "sm-mediascreen", style: selected ? undefined : { gridTemplateColumns: "1fr" }, children: [_jsx("div", { className: "sm-mediascreen__grid", children: _jsx(MediaGrid, { items: items, selectedId: selected?.id, onSelect: (a) => setSelected(a.id === selected?.id ? null : a) }) }), selected && (_jsxs("aside", { className: "sm-mediascreen__inspector", children: [_jsx("div", { className: "sm-media__thumb", style: { aspectRatio: selected.width && selected.height ? `${selected.width} / ${selected.height}` : "4 / 3" }, children: selected.kind === "image" && _jsx("img", { src: selected.url, alt: "", style: { left: 0, top: 0, width: "100%", height: "100%" } }) }), META.map((key) => (_jsx(Field, { label: key === "alt" ? "Alt text" : key[0].toUpperCase() + key.slice(1), children: _jsx("input", { className: "sm-input", value: meta[key], onChange: (e) => setMeta((m) => ({ ...m, [key]: e.target.value })), onBlur: () => { void saveMeta(key); } }) }, key))), _jsxs("div", { className: "sm-facts", children: [_jsx("span", { children: "File" }), _jsx("span", { children: selected.filename }), _jsx("span", { children: "Type" }), _jsx("span", { children: selected.mime }), _jsx("span", { children: "Size" }), _jsx("span", { children: formatBytes(selected.size) }), selected.width && selected.height && _jsxs(_Fragment, { children: [_jsx("span", { children: "Dimensions" }), _jsxs("span", { children: [selected.width, "\u00D7", selected.height] })] }), selected.duration !== null && _jsxs(_Fragment, { children: [_jsx("span", { children: "Duration" }), _jsxs("span", { children: [Math.round(selected.duration), " s"] })] })] }), _jsxs("div", { className: "sm-usage", children: [_jsx("span", { className: "sm-label", children: usageLabel(usage.length) }), usage.map((u, i) => u.href
+    return (_jsxs(_Fragment, { children: [_jsx(TopBar, { left: _jsxs(_Fragment, { children: [_jsx("span", { className: "sm-title", children: "Media" }), _jsx("span", { className: "sm-count", children: items.length })] }), right: _jsxs("div", { className: "sm-picker-bar", children: [_jsx("input", { className: "sm-input", placeholder: "Search media", value: search, onChange: (e) => setSearch(e.target.value), style: { width: 220 } }), _jsx(Segmented, { options: KIND_FILTERS, value: filter, onChange: setFilter }), _jsxs("label", { className: "sm-btn sm-btn--primary", children: [busy ? "Uploading…" : "Upload", _jsx("input", { type: "file", accept: acceptFor(["image", "video", "file"], assets.media.accept), hidden: true, disabled: busy, onChange: (e) => { void onFiles(e.target.files); } })] })] }) }), error && _jsx(Banner, { tone: "error", onDismiss: () => setError(null), children: error }), progress !== null && _jsx("div", { className: "sm-mediascreen__upload", children: _jsx(UploadProgress, { fraction: progress }) }), _jsxs("div", { className: "sm-mediascreen", style: selected ? undefined : { gridTemplateColumns: "1fr" }, children: [_jsx("div", { className: "sm-mediascreen__grid", children: _jsx(MediaGrid, { items: items, selectedId: selected?.id, onSelect: (a) => setSelected(a.id === selected?.id ? null : a) }) }), selected && (_jsxs("aside", { className: "sm-mediascreen__inspector", children: [_jsx("div", { className: "sm-media__thumb", style: { aspectRatio: selected.width && selected.height ? `${selected.width} / ${selected.height}` : "4 / 3" }, children: selected.kind === "image" && _jsx("img", { src: adminImageSrc(selected, 640), alt: "", style: { left: 0, top: 0, width: "100%", height: "100%" } }) }), META.map((key) => (_jsx(Field, { label: key === "alt" ? "Alt text" : key[0].toUpperCase() + key.slice(1), children: _jsx("input", { className: "sm-input", value: meta[key], onChange: (e) => setMeta((m) => ({ ...m, [key]: e.target.value })), onBlur: () => { void saveMeta(key); } }) }, key))), _jsxs("div", { className: "sm-facts", children: [_jsx("span", { children: "File" }), _jsx("span", { children: selected.filename }), _jsx("span", { children: "Type" }), _jsx("span", { children: selected.mime }), _jsx("span", { children: "Size" }), _jsx("span", { children: formatBytes(selected.size) }), selected.width && selected.height && _jsxs(_Fragment, { children: [_jsx("span", { children: "Dimensions" }), _jsxs("span", { children: [selected.width, "\u00D7", selected.height] })] }), selected.duration !== null && _jsxs(_Fragment, { children: [_jsx("span", { children: "Duration" }), _jsxs("span", { children: [Math.round(selected.duration), " s"] })] })] }), _jsxs("div", { className: "sm-usage", children: [_jsx("span", { className: "sm-label", children: usageLabel(usage.length) }), usage.map((u, i) => u.href
                                         ? _jsxs(RouteLink, { href: u.href, children: [u.title, " \u00B7 ", u.sourceField] }, `${u.sourceId}-${i}`)
                                         : _jsxs("span", { children: [u.title, " \u00B7 ", u.sourceField] }, `${u.sourceId}-${i}`))] }), _jsx(Button, { variant: "secondary", disabled: usage.length > 0, title: usage.length > 0 ? "Remove it from those places first." : undefined, onClick: () => { void remove(); }, children: "Delete" })] }))] })] }));
 }

package/dist/admin/shell/MembersPage.d.ts

@@ -1,6 +1,5 @@
 import type { AdminOps, MembersListResult } from "../ops.ts";
-export declare function MembersPage({ ops, userId, initial }: {
+export declare function MembersPage({ ops, initial }: {
     ops: AdminOps;
-    userId: string;
     initial?: MembersListResult | null;
 }): import("react").JSX.Element;

package/dist/admin/shell/MembersPage.js

@@ -1,101 +1,30 @@
 "use client";
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // packages/smoodly/src/admin/shell/MembersPage.tsx
-// The Members page (spec 2026-09-25 §7; management §4): the admission
-// table with Invite, the role as a badge and a row menu with Change role
-// (to the other role, after a confirm) and Remove member (2026-09-26; the
-// in-place pills before) — all off when the control plane manages the
-// space (the console URL banner stays). Own row and the last admin render
-// their menu disabled with the guard's reason, so the rule is visible
-// before it is hit.
+// The Members page (spec 2026-09-25 §7; spec 2026-10-16 sign-in and the dashboard §6): a read-only list of the space's
+// members with their roles, and "Manage members at smoodly.io" opening the project's Members tab. Every space is
+// managed at smoodly.io, so the admin has no invite, role change or removal of its own.
 import { useEffect, useState } from "react";
-import { ActionMenu } from "../ui/ActionMenu.js";
-import { Banner, Button, StatusBadge } from "../ui/primitives.js";
-import { confirm } from "../ui/confirm.js";
+import { Banner, StatusBadge } from "../ui/primitives.js";
+import { consoleLinks } from "./console-links.js";
 import { ErrorPane } from "./ErrorPane.js";
-import { InviteModal } from "./InviteModal.js";
 import { ListView } from "./ListView.js";
-import { GUARD_TITLE, ROLE_DESCRIPTION, memberRows, roleLabel } from "./members-list.js";
-export function MembersPage({ ops, userId, initial = null }) {
+import { memberRows } from "./members-list.js";
+export function MembersPage({ ops, initial = null }) {
     const [data, setData] = useState(initial);
     const [error, setError] = useState(null);
-    const [notice, setNotice] = useState(null);
-    const [inviting, setInviting] = useState(false);
-    const load = () => ops.members.list()
-        .then((r) => (r.ok ? setData(r.data) : setError(r.message)))
-        .catch(() => setError("Couldn't reach the server."));
-    useEffect(() => { if (!initial)
-        void load(); }, [ops, initial]); // eslint-disable-line react-hooks/exhaustive-deps
-    const invite = async (input) => {
-        // The admin's own origin and mount: /settings/… stripped, so the invite lands on the shell.
-        const redirectTo = window.location.origin + window.location.pathname.replace(/\/settings(\/.*)?$/, "");
-        const r = await ops.members.invite({ ...input, redirectTo });
-        if (!r.ok)
-            return r.message;
-        setInviting(false);
-        setNotice({
-            tone: "ok",
-            text: r.data.invited ? `Invite sent to ${input.email}.` : `${input.email} added — they can sign in with their existing account.`,
-        });
-        void load();
-        return null;
-    };
-    /** Two roles: the change is to the other one, confirmed with what it may do. */
-    const changeRole = async (row) => {
-        const role = row.value === "admin" ? "editor" : "admin";
-        const ok = await confirm({
-            title: `Change role to ${roleLabel(role).toLowerCase()}?`,
-            body: `${roleLabel(role)}: ${ROLE_DESCRIPTION[role]}`,
-            confirmLabel: "Change role",
-            subject: { name: row.email },
-        });
-        if (!ok)
+    useEffect(() => {
+        if (initial)
             return;
-        const r = await ops.members.setRole(row.key, role);
-        if (!r.ok) {
-            setNotice({ tone: "error", text: r.message });
-            return;
-        }
-        setData((d) => d && { ...d, members: d.members.map((m) => (m.userId === row.key ? r.data : m)) });
-    };
-    const remove = async (row) => {
-        const ok = await confirm({
-            title: "Remove this member?",
-            body: "They keep their account and lose access to this site's admin. You can invite them again later.",
-            confirmLabel: "Remove member",
-            destructive: true,
-            subject: { name: row.email },
-        });
-        if (!ok)
-            return;
-        const r = await ops.members.remove(row.key);
-        if (!r.ok) {
-            setNotice({ tone: "error", text: r.message });
-            return;
-        }
-        void load();
-    };
+        ops.members.list()
+            .then((r) => (r.ok ? setData(r.data) : setError(r.message)))
+            .catch(() => setError("Couldn't reach the server."));
+    }, [ops, initial]);
     if (error)
         return _jsx(ErrorPane, { message: error });
-    const managed = Boolean(data?.consoleUrl);
-    const rows = data ? memberRows(data.members, { me: userId }) : [];
-    const guardTitle = (r) => (r.own ? GUARD_TITLE.own : r.lastAdmin ? GUARD_TITLE.lastAdmin : undefined);
-    return (_jsxs(_Fragment, { children: [_jsx(ListView, { title: "Members", actions: !managed && data && _jsx(Button, { onClick: () => setInviting(true), children: "Invite" }), notice: _jsxs(_Fragment, { children: [data?.consoleUrl && (_jsxs(Banner, { tone: "ok", children: ["Members are managed at smoodly.io.", " ", _jsx("a", { href: data.consoleUrl, target: "_blank", rel: "noreferrer", children: "Open the console" })] })), notice && _jsx(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: notice.text })] }), columns: [
-                    { label: "Email", width: "minmax(200px,1fr)" },
-                    { label: "Role", width: "120px" },
-                    ...(managed ? [] : [{ label: "", width: "48px" }]),
-                ], rows: rows.map((r) => ({
-                    key: r.key,
-                    cells: [
-                        r.fallback ? _jsx("span", { style: { color: "var(--text-muted)" }, children: r.email }) : r.email,
-                        _jsx(StatusBadge, { status: r.role }),
-                        ...(managed ? [] : [
-                            // ActionMenu has no title of its own when disabled: the span carries the guard's reason.
-                            _jsx("span", { title: guardTitle(r), children: _jsx(ActionMenu, { label: "Member actions", small: true, disabled: r.own || r.lastAdmin, items: [
-                                        { label: "Change role", run: () => void changeRole(r) },
-                                        { label: "Remove member", danger: true, run: () => void remove(r) },
-                                    ] }) }),
-                        ]),
-                    ],
-                })), empty: "No members yet" }), inviting && _jsx(InviteModal, { onClose: () => setInviting(false), onInvite: invite })] }));
+    const rows = data ? memberRows(data.members) : [];
+    return (_jsx(ListView, { title: "Members", notice: _jsxs(Banner, { tone: "ok", children: ["Members are managed at smoodly.io.", " ", _jsx("a", { href: consoleLinks().members, target: "_blank", rel: "noreferrer", children: "Manage members at smoodly.io" })] }), columns: [{ label: "Email", width: "minmax(200px,1fr)" }, { label: "Role", width: "120px" }], rows: rows.map((r) => ({
+            key: r.key,
+            cells: [r.fallback ? _jsx("span", { style: { color: "var(--text-muted)" }, children: r.email }) : r.email, _jsx(StatusBadge, { status: r.role })],
+        })), empty: "No members yet" }));
 }

package/dist/admin/shell/SettingsView.d.ts

@@ -1,11 +1,10 @@
 import type { MemberRole } from "../../permissions.ts";
 import type { AdminOps } from "../ops.ts";
 import type { AdminRegistry } from "../serialize.ts";
-export declare function SettingsView({ ops, registry, tail, role, userId }: {
+export declare function SettingsView({ ops, registry, tail, role }: {
     ops: AdminOps;
     registry: AdminRegistry;
     tail: string | undefined;
     /** The caller's role from `members.me`; null while it loads. */
     role: MemberRole | null;
-    userId: string;
 }): import("react").JSX.Element;

package/dist/admin/shell/SettingsView.js

@@ -20,7 +20,7 @@ import { RedirectsPage } from "./RedirectsPage.js";
 import { RouteLink } from "./RouteLink.js";
 import { navigate } from "./router.js";
 import { defaultSettingsPage, settingsPage, visibleSettingsPages } from "./settings.js";
-export function SettingsView({ ops, registry, tail, role, userId }) {
+export function SettingsView({ ops, registry, tail, role }) {
     const adminHref = useAdminHref();
     const page = settingsPage(tail);
     useEffect(() => {
@@ -36,7 +36,7 @@ export function SettingsView({ ops, registry, tail, role, userId }) {
         return _jsx(ErrorPane, { message: "Not found." });
     if (!visible.some((p) => p.id === page))
         return _jsx(ErrorPane, { message: "Settings are for admins." });
-    return (_jsxs("div", { className: "sm-settings", children: [_jsx("nav", { className: "sm-settings__nav", "aria-label": "Settings", children: visible.map((p) => (_jsx(RouteLink, { className: "sm-settings__link", href: adminHref(`/settings/${p.id}`), "aria-current": p.id === page ? "page" : undefined, children: p.title }, p.id))) }), _jsx("section", { className: "sm-settings__page", children: page === "members" ? _jsx(MembersPage, { ops: ops, userId: userId })
+    return (_jsxs("div", { className: "sm-settings", children: [_jsx("nav", { className: "sm-settings__nav", "aria-label": "Settings", children: visible.map((p) => (_jsx(RouteLink, { className: "sm-settings__link", href: adminHref(`/settings/${p.id}`), "aria-current": p.id === page ? "page" : undefined, children: p.title }, p.id))) }), _jsx("section", { className: "sm-settings__page", children: page === "members" ? _jsx(MembersPage, { ops: ops })
                     : page === "redirects" ? _jsx(RedirectsPage, { ops: ops, registry: registry })
                         : _jsx(ContentHealthPage, { ops: ops, registry: registry }) })] }));
 }

package/dist/admin/shell/SignedOutView.d.ts

@@ -0,0 +1,5 @@
+export declare function SignedOutView({ host, message, onSignIn }: {
+    host: string;
+    message?: string;
+    onSignIn: () => void;
+}): import("react").JSX.Element;

package/dist/admin/shell/SignedOutView.js

@@ -0,0 +1,9 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// After Sign out, or a sign-in the space refused (spec 2026-10-16 sign-in and the dashboard §2, §6): a page, never a
+// redirect, since a redirect would sign the person straight back in while their smoodly.io session lives. Sign in
+// sends them to sign in again.
+import { Button, Logo } from "../ui/primitives.js";
+export function SignedOutView({ host, message, onSignIn }) {
+    return (_jsx("div", { style: { height: "100vh", display: "grid", placeItems: "center", padding: 24 }, children: _jsxs("div", { style: { maxWidth: 380, display: "grid", gap: 16, justifyItems: "center", textAlign: "center" }, children: [_jsx("p", { style: { margin: 0, fontSize: 16 }, children: message ? message.replace(/^smoodly:\s*/, "") : `You're signed out of ${host}.` }), _jsx(Button, { onClick: onSignIn, children: "Sign in" }), _jsx("span", { style: { color: "var(--text-muted)" }, children: _jsx(Logo, { height: 12 }) })] }) }));
+}

package/dist/admin/shell/console-links.d.ts

@@ -0,0 +1,5 @@
+export declare function setConsole(url: string, spaceId: string): void;
+export declare const consoleLinks: () => {
+    sites: string;
+    members: string;
+};

package/dist/admin/shell/console-links.js

@@ -0,0 +1,11 @@
+// Where the admin points at smoodly.io (spec 2026-10-16 sign-in and the dashboard §5, §6): the account menu's "Your
+// sites at smoodly.io" and the Members page's "Manage members at smoodly.io", deep links into the dashboard the
+// service names (`GET /v1/auth`'s consoleUrl). Set once by the entry from the page's data.
+let console = { url: "https://smoodly.io", spaceId: "" };
+export function setConsole(url, spaceId) {
+    console = { url: url.replace(/\/+$/, ""), spaceId };
+}
+export const consoleLinks = () => ({
+    sites: `${console.url}/projects`,
+    members: `${console.url}/spaces/${encodeURIComponent(console.spaceId)}/members`,
+});

package/dist/admin/shell/members-list.d.ts

@@ -1,23 +1,10 @@
 import type { MemberRecord } from "../../member-store.ts";
-import { type MemberRole } from "../../permissions.ts";
 export type MemberRow = {
     key: string;
     email: string;
     fallback: boolean;
     /** Display label. */
     role: string;
-    /** The normalized role, what the control holds. */
-    value: MemberRole;
-    own: boolean;
-    lastAdmin: boolean;
 };
 export declare const roleLabel: (role: string) => string;
-/** What each role may do, in one line — the invite modal's radio descriptions (permissions.ts decides). */
-export declare const ROLE_DESCRIPTION: Record<MemberRole, string>;
-export declare function memberRows(members: MemberRecord[], opts: {
-    me: string;
-}): MemberRow[];
-export declare const GUARD_TITLE: {
-    readonly own: "You cannot change your own membership.";
-    readonly lastAdmin: "This site needs at least one admin.";
-};
+export declare function memberRows(members: MemberRecord[]): MemberRow[];

package/dist/admin/shell/members-list.js

@@ -1,26 +1,5 @@
 import { normalizeRole } from "../../permissions.js";
 export const roleLabel = (role) => (role ? role[0].toUpperCase() + role.slice(1) : "");
-/** What each role may do, in one line — the invite modal's radio descriptions (permissions.ts decides). */
-export const ROLE_DESCRIPTION = {
-    editor: "Edits, publishes and deletes content and media, and manages redirects.",
-    admin: "Everything an editor can, and Settings: invites, re-roles and removes members.",
-};
-export function memberRows(members, opts) {
-    const admins = members.filter((m) => normalizeRole(m.role) === "admin").length;
-    return members.map((m) => {
-        const value = normalizeRole(m.role);
-        return {
-            key: m.userId,
-            email: m.email ?? m.userId,
-            fallback: m.email === null,
-            role: roleLabel(value),
-            value,
-            own: m.userId === opts.me,
-            lastAdmin: value === "admin" && admins <= 1,
-        };
-    });
+export function memberRows(members) {
+    return members.map((m) => ({ key: m.userId, email: m.email ?? m.userId, fallback: m.email === null, role: roleLabel(normalizeRole(m.role)) }));
 }
-export const GUARD_TITLE = {
-    own: "You cannot change your own membership.",
-    lastAdmin: "This site needs at least one admin.",
-};

package/dist/admin/shell/pages-tree.d.ts

@@ -66,8 +66,6 @@ export type TreeProjection = Projection;
  *  them any deeper slot, the move op refuses any other parent. A record
  *  no longer in code does not move at all: deleting it is all that is open. */
 export declare const canDragRow: (row: PagesTreeRow) => boolean;
-/** Whether a row may only reorder among the root siblings. */
-export declare const rootOnly: (row: PagesTreeRow) => boolean;
 /** Levels below a node: 0 for a leaf. From the records, because the
  *  dragged node's rows are collapsed away during the drag. */
 export declare function subtreeHeight(records: {

package/dist/admin/shell/pages-tree.js

@@ -135,7 +135,7 @@ export function pagesTreeRows(records, registry, locale, collapsed) {
  *  no longer in code does not move at all: deleting it is all that is open. */
 export const canDragRow = (row) => !row.orphan;
 /** Whether a row may only reorder among the root siblings. */
-export const rootOnly = (row) => row.fixed || row.isHome;
+const rootOnly = (row) => row.fixed || row.isHome;
 /** Levels below a node: 0 for a leaf. From the records, because the
  *  dragged node's rows are collapsed away during the drag. */
 export function subtreeHeight(records, id) {

package/dist/admin/shell/presence-socket.d.ts

@@ -0,0 +1,10 @@
+import type { PresenceConfig } from "../../env.ts";
+import { type PresenceChannel } from "./presence.ts";
+/** What the channel asks of the admin's session: the current pass, and a renewal (true when a fresh pass is in hand). */
+export type SocketSession = {
+    pass: () => string | null;
+    renew: () => Promise<boolean>;
+    fetch?: typeof fetch;
+};
+/** `email` is the caller's shape: the object knows the editor from the verified ticket. */
+export declare function connectSocket(config: PresenceConfig, _email: string, session: SocketSession, make?: (url: string) => WebSocket): PresenceChannel;

package/dist/admin/shell/presence-socket.js

@@ -0,0 +1,191 @@
+"use client";
+import { isTarget } from "./presence.js";
+const PING_MS = 15000;
+const RETRY_MS = [1000, 2000, 4000, 8000, 15000, 30000];
+/** After this many closes without a sync the service is taken to refuse (a misconfigured deployment): no more tries
+ *  until the next renewal. */
+const MAX_RETRIES = RETRY_MS.length;
+/** The object's close codes: the pass expired or the session ended (renew, then reconnect); the session signed out and
+ *  the account removed (both final). */
+const PASS_ENDED = 4001, SIGNED_OUT = 4002, REMOVED = 4003;
+const OPEN = 1;
+/** `email` is the caller's shape: the object knows the editor from the verified ticket. */
+export function connectSocket(config, _email, session, make = (url) => new WebSocket(url)) {
+    const api = config.apiUrl.replace(/\/+$/, "");
+    const space = encodeURIComponent(config.spaceId);
+    const address = (ticket) => `${api.replace(/^http/, "ws")}/v1/spaces/${space}/admin/presence?ticket=${encodeURIComponent(ticket)}`;
+    /** A ticket for the current pass; null when the service refuses it (an expired pass, an ended session). Throws when
+     *  the service cannot be reached. */
+    const ticketFor = async (pass) => {
+        const res = await (session.fetch ?? fetch)(`${api}/v1/spaces/${space}/admin/presence/ticket`, { method: "POST", headers: { authorization: `Bearer ${pass}` } });
+        const body = (await res.json().catch(() => null));
+        return res.ok && body?.ok && typeof body.data?.ticket === "string" ? body.data.ticket : null;
+    };
+    let socket = null;
+    /** Bumped by every open and by unsubscribe: an answer that arrives for an older attempt is dropped. */
+    let attempt = 0;
+    let target = null;
+    let onStatus = null;
+    let state = {};
+    let retry = null;
+    let failures = 0;
+    let stopped = false;
+    const syncListeners = [];
+    const broadcastListeners = {};
+    const send = (m) => { if (socket && socket.readyState === OPEN)
+        socket.send(JSON.stringify(m)); };
+    const cancelRetry = () => { if (retry) {
+        clearTimeout(retry);
+        retry = null;
+    } };
+    /** Ends a socket without reporting it. */
+    const end = (ws) => { try {
+        ws?.close(1000);
+    }
+    catch { /* already gone */ } };
+    /** A connection that never opened (no ticket, the service unreachable): CLOSED and the backoff, as a drop. */
+    const failedBeforeOpen = (previous) => {
+        end(previous);
+        state = {};
+        onStatus?.("CLOSED");
+        scheduleRetry();
+    };
+    const scheduleRetry = () => {
+        if (stopped || failures >= MAX_RETRIES)
+            return;
+        const delay = RETRY_MS[Math.min(failures, RETRY_MS.length - 1)];
+        failures++;
+        retry = setTimeout(() => { retry = null; if (!stopped && !socket)
+            open(); }, delay);
+    };
+    /** Asks a ticket with the current pass, renewing once when it is refused, then opens the socket. `previous` (a
+     *  renewal's old socket) stays until the new one is open, so the others never see the editor leave and come back. */
+    const open = (previous = null, renewed = false) => {
+        const mine = ++attempt;
+        const pass = session.pass();
+        const asked = pass ? ticketFor(pass) : Promise.resolve(null);
+        void asked.then(async (ticket) => {
+            if (stopped || mine !== attempt)
+                return;
+            if (ticket) {
+                connect(ticket, previous);
+                return;
+            }
+            if (!renewed && (await session.renew().catch(() => false)) && !stopped && mine === attempt) {
+                open(previous, true);
+                return;
+            }
+            if (!stopped && mine === attempt) {
+                end(previous);
+                state = {};
+                onStatus?.("CLOSED");
+            }
+        }, () => { if (!stopped && mine === attempt)
+            failedBeforeOpen(previous); });
+    };
+    const connect = (ticket, previous) => {
+        let ws;
+        try {
+            ws = make(address(ticket));
+        }
+        catch {
+            // A constructor refusal (mixed content, a bad address) does not fix itself: presence is off, the admin is not.
+            socket = null;
+            end(previous);
+            onStatus?.("CHANNEL_ERROR");
+            return;
+        }
+        socket = ws;
+        let ping = null;
+        ws.addEventListener("open", () => {
+            if (socket !== ws)
+                return;
+            end(previous);
+            previous = null;
+            onStatus?.("SUBSCRIBED");
+            if (target)
+                send({ type: "track", target });
+            ping = setInterval(() => { if (socket === ws)
+                send({ type: "ping" }); }, PING_MS);
+        });
+        ws.addEventListener("message", (e) => {
+            if (socket !== ws)
+                return;
+            let m;
+            try {
+                m = JSON.parse(String(e.data));
+            }
+            catch {
+                return;
+            }
+            if (m.type === "sync" && Array.isArray(m.others)) {
+                // A sync proves the connection: the backoff starts over only now, not on a socket closed right after opening.
+                failures = 0;
+                const next = {};
+                for (const o of m.others) {
+                    const email = o.email;
+                    if (isTarget(o) && typeof email === "string")
+                        (next[email] ?? (next[email] = [])).push({ kind: o.kind, id: o.id, locale: o.locale });
+                }
+                state = next;
+                for (const l of syncListeners)
+                    l();
+            }
+            else if (m.type === "saved") {
+                const { type: _type, ...payload } = m;
+                for (const l of broadcastListeners.saved ?? [])
+                    l(payload);
+            }
+        });
+        ws.addEventListener("close", (e) => {
+            if (ping) {
+                clearInterval(ping);
+                ping = null;
+            }
+            if (socket !== ws || stopped)
+                return;
+            socket = null;
+            end(previous);
+            previous = null;
+            state = {};
+            onStatus?.("CLOSED");
+            const code = e.code;
+            if (code === REMOVED || code === SIGNED_OUT)
+                return;
+            // The pass expired or the session ended: renew, then reconnect with a ticket from the fresh pass.
+            if (code === PASS_ENDED) {
+                if (failures >= MAX_RETRIES)
+                    return;
+                failures++;
+                void session.renew().catch(() => false).then((ok) => { if (ok && !stopped && !socket)
+                    open(); });
+                return;
+            }
+            scheduleRetry();
+        });
+    };
+    return {
+        subscribe(cb) { onStatus = cb; open(); },
+        async setAuth() {
+            if (stopped || !onStatus)
+                return;
+            cancelRetry();
+            failures = 0;
+            const old = socket;
+            socket = null;
+            open(old);
+        },
+        async track(s) { target = isTarget(s) ? { kind: s.kind, id: s.id, locale: s.locale } : null; send(target ? { type: "track", target } : { type: "untrack" }); },
+        async untrack() { target = null; send({ type: "untrack" }); },
+        async send(message) {
+            const p = message.payload, savedAt = p.savedAt;
+            if (message.event !== "saved" || !isTarget(p))
+                return;
+            send({ type: "saved", target: { kind: p.kind, id: p.id, locale: p.locale }, savedAt: typeof savedAt === "string" ? savedAt : null });
+        },
+        onSync(l) { syncListeners.push(l); },
+        presenceState: () => state,
+        onBroadcast(event, l) { (broadcastListeners[event] ?? (broadcastListeners[event] = [])).push(l); },
+        async unsubscribe() { stopped = true; attempt++; cancelRetry(); const old = socket; socket = null; end(old); },
+    };
+}

package/dist/admin/shell/presence.d.ts

@@ -15,10 +15,11 @@ export type PresenceState = {
     status: PresenceStatus;
     others: PresenceEntry[];
 };
-/** The slice of a Realtime channel presence uses. */
+/** The channel presence uses: once a Realtime channel's slice, now the service's socket (presence-socket.ts). */
 export type PresenceChannel = {
     subscribe(onStatus: (status: string) => void): void;
-    /** A session token for the socket (spec 2026-09-26 security pass §1): the channel policies admit by auth.uid(). */
+    /** The session renewed (its new pass): reconnect with a fresh ticket. The space's object admits a live session of a
+     *  member only. */
     setAuth(token: string): Promise<unknown>;
     track(state: Record<string, unknown>): Promise<unknown>;
     untrack(): Promise<unknown>;
@@ -39,31 +40,18 @@ export type Presence = {
     track(target: PresenceTarget | null): void;
     /** After a guarded op acked: tell the others. */
     announce(target: PresenceTarget, savedAt: string | null): void;
-    /** The session token was refreshed: re-authenticate the socket so the channel outlives the old token. No-op unless joined. */
+    /** The session renewed: reconnect the socket with a fresh ticket so the channel outlives the old pass. No-op unless joined. */
     setAuth(token: string): void;
     onSaved(listener: (event: SavedEvent) => void): () => void;
     getState(): PresenceState;
     subscribe(listener: () => void): () => void;
     dispose(): void;
 };
-export declare const shortName: (email: string) => string;
 /** The short names editing `target`, other than me, sorted and deduped. */
 export declare function editorsOf(others: PresenceEntry[], target: PresenceTarget): string[];
+/** A target as the channel carries it: one of the three kinds, a string id and locale. The service's object reads it too. */
+export declare const isTarget: (v: unknown) => v is PresenceTarget;
 export declare function createPresence(opts: {
     email: string;
     connect: () => PresenceChannel;
 }): Presence;
-/** What the shell needs from the auth client to follow refreshes — supabase-js's `auth` satisfies it. */
-export type RefreshSource = {
-    onAuthStateChange(cb: (event: string, session: {
-        access_token: string;
-    } | null) => void): {
-        data: {
-            subscription: {
-                unsubscribe(): void;
-            };
-        };
-    };
-};
-/** Re-send every refreshed session token to the socket (spec 2026-09-26 security pass §1). Returns the stop function. */
-export declare function followTokenRefresh(auth: RefreshSource, presence: Pick<Presence, "setAuth">): () => void;

package/dist/admin/shell/presence.js

@@ -1,15 +1,16 @@
 // Editing presence (spec 2026-09-26 concurrency §5): who has what open, and a
 // "saved" announcement, over ONE channel per space. Framework-free: the channel
-// is injected (presence-realtime.ts builds the supabase-js one; tests fake it),
+// is injected (presence-socket.ts builds the one over the service's socket; tests fake it),
 // the React glue is presence-context.tsx. Never awaited by anything — a failed
 // join leaves the admin exactly as without presence.
 const sameTarget = (a, b) => a.kind === b.kind && a.id === b.id && a.locale === b.locale;
-export const shortName = (email) => email.split("@")[0];
+const shortName = (email) => email.split("@")[0];
 /** The short names editing `target`, other than me, sorted and deduped. */
 export function editorsOf(others, target) {
     return [...new Set(others.filter((o) => sameTarget(o, target)).map((o) => shortName(o.email)))].sort();
 }
-const isTarget = (v) => typeof v === "object" && v !== null
+/** A target as the channel carries it: one of the three kinds, a string id and locale. The service's object reads it too. */
+export const isTarget = (v) => typeof v === "object" && v !== null
     && ["page", "entry", "global"].includes(v.kind)
     && typeof v.id === "string" && typeof v.locale === "string";
 export function createPresence(opts) {
@@ -93,11 +94,3 @@ export function createPresence(opts) {
         },
     };
 }
-/** Re-send every refreshed session token to the socket (spec 2026-09-26 security pass §1). Returns the stop function. */
-export function followTokenRefresh(auth, presence) {
-    const { data } = auth.onAuthStateChange((event, session) => {
-        if (event === "TOKEN_REFRESHED" && session)
-            presence.setAuth(session.access_token);
-    });
-    return () => data.subscription.unsubscribe();
-}