tempest-react-sdk 0.75.0 → 0.77.0

package/dist/sw/background-sync.cjs

@@ -1,2 +1,2 @@
-function e(){return globalThis}var t=`requests`;function n(e){return new Promise((n,r)=>{let i=indexedDB.open(e,1);i.onupgradeneeded=()=>{i.result.createObjectStore(t,{keyPath:`id`,autoIncrement:!0})},i.onsuccess=()=>n(i.result),i.onerror=()=>r(i.error)})}function r(e){return new Promise((t,n)=>{e.oncomplete=()=>t(),e.onerror=()=>n(e.error),e.onabort=()=>n(e.error)})}async function i(e,i){let a=await n(e),o=a.transaction(t,`readwrite`);o.objectStore(t).add(i),await r(o),a.close()}async function a(e){let r=await n(e),i=r.transaction(t,`readonly`),a=await new Promise((e,n)=>{let r=i.objectStore(t).getAll();r.onsuccess=()=>e(r.result),r.onerror=()=>n(r.error)});return r.close(),a}async function o(e,i){let a=await n(e),o=a.transaction(t,`readwrite`);o.objectStore(t).delete(i),await r(o),a.close()}async function s(e,t){let n=await e.clone().arrayBuffer();return{url:e.url,method:e.method,headers:[...e.headers.entries()],body:n.byteLength>0?n:null,timestamp:t}}function c(e){return new Request(e.url,{method:e.method,headers:e.headers,body:e.body??void 0})}async function l(e,t,n){let r=await a(e),i=0;for(let a of r)if(a.id!==void 0){if(n-a.timestamp>t){await o(e,a.id);continue}try{let t=await fetch(c(a));t.ok||t.status>=400&&t.status<500?await o(e,a.id):i+=1}catch{i+=1}}if(i>0)throw Error(`background-sync: ${i} request(s) still pending`)}function u(e,t,n){return e?typeof e==`function`?e(t,n):e.test(t.href):!0}function d(t={}){let n=e(),{match:r,queueName:a=`tempest-bg-sync`,maxRetentionMinutes:o=1440,periodicSyncTag:c=`${t.queueName??`tempest-bg-sync`}-periodic`}=t,d=o*60*1e3;n.addEventListener(`fetch`,e=>{let t=e.request;if(t.method===`GET`||t.method===`HEAD`)return;let o=new URL(t.url);u(r,o,t)&&e.respondWith(fetch(t.clone()).catch(async e=>{let r=await s(t,Date.now());await i(a,r);try{await n.registration.sync?.register(a)}catch{}throw e}))}),n.addEventListener(`sync`,e=>{e.tag===a&&e.waitUntil(l(a,d,Date.now()))}),n.addEventListener(`periodicsync`,e=>{e.tag===c&&e.waitUntil(l(a,d,Date.now()).catch(()=>void 0))}),n.addEventListener(`fetch`,e=>{n.registration.sync||e.request.method===`GET`&&e.waitUntil(l(a,d,Date.now()).catch(()=>void 0))})}exports.installBackgroundSync=d;
+const e=require("../utils/dev-mode.cjs"),t=require("./credential-headers.cjs");function n(){return globalThis}var r=`tempest-bg-sync`,i=2,a=`requests`,o=`meta`,s=`epoch`,c=`tempest:bg-sync-credentials`,l=3e3,u=l*2;function d(e,t){let n=[],r=[];for(let[i,a]of e)t.has(i.toLowerCase())?r.push(i.toLowerCase()):n.push([i,a]);return{kept:n,stripped:r}}function f(e,t){let n=e.openCursor();n.onsuccess=()=>{let e=n.result;if(!e)return;let r=e.value,{kept:i,stripped:a}=d(r.headers,t);e.update({...r,headers:i,strippedHeaders:[...new Set([...r.strippedHeaders??[],...a])],ownerState:r.ownerState??`unknown`}),e.continue()}}function p(e,n=t.credentialHeaderSet()){return new Promise((t,r)=>{let s=indexedDB.open(e,i);s.onupgradeneeded=e=>{let t=s.result;t.objectStoreNames.contains(a)?e.oldVersion<2&&s.transaction&&f(s.transaction.objectStore(a),n):t.createObjectStore(a,{keyPath:`id`,autoIncrement:!0}),t.objectStoreNames.contains(o)||t.createObjectStore(o)},s.onsuccess=()=>{let e=s.result;e.onversionchange=()=>e.close(),t(e)},s.onerror=()=>r(s.error)})}function m(e){return new Promise((t,n)=>{e.oncomplete=()=>t(),e.onerror=()=>n(e.error),e.onabort=()=>n(e.error)})}async function h(e,t){let n=await p(e,t),r=n.transaction(o,`readonly`),i=r.objectStore(o).get(s);return await m(r),n.close(),i.result??0}async function g(e,t,n,r){let i=await p(e,r),c=i.transaction([a,o],`readwrite`),l,u=c.objectStore(o).get(s);return u.onsuccess=()=>{if((u.result??0)!==n)return;let e=c.objectStore(a).add(t);e.onsuccess=()=>{l=e.result}},await m(c),i.close(),l}async function _(e,t,n,r){let i=await p(e),o=i.transaction(a,`readwrite`),s=o.objectStore(a),c=s.get(t);c.onsuccess=()=>{let e=c.result;e&&(e.ownerState=n,n===`bound`&&(e.owner=r??null),s.put(e))},await m(o),i.close()}async function v(e,t){let n=await p(e,t),r=n.transaction(a,`readonly`),i=await new Promise((e,t)=>{let n=r.objectStore(a).getAll();n.onsuccess=()=>e(n.result),n.onerror=()=>t(n.error)});return n.close(),i}async function y(e,t){let n=await p(e),r=n.transaction(a,`readonly`),i=r.objectStore(a).count(t);return await m(r),n.close(),i.result>0}async function b(e,t){let n=await p(e),r=n.transaction(a,`readwrite`);r.objectStore(a).delete(t),await m(r),n.close()}async function x(e,t,n,r){let i=await e.clone().arrayBuffer(),{kept:a,stripped:o}=d(e.headers.entries(),n);return{url:e.url,method:e.method,headers:a,body:i.byteLength>0?i:null,timestamp:t,credentials:e.credentials,strippedHeaders:o,ownerState:r}}function S(e,t){let{kept:n,stripped:r}=d(e.headers,t);return{request:new Request(e.url,{method:e.method,headers:n,body:e.body??void 0,credentials:e.credentials}),strippedHeaders:[...new Set([...e.strippedHeaders??[],...r])]}}async function C(e,t,n){let r=new MessageChannel,i=await Promise.race([new Promise(n=>{r.port1.onmessage=e=>n(e.data),e.postMessage({type:c,...t},[r.port2])}),n.then(()=>void 0)]);if(r.port1.close(),typeof i!=`object`||!i||!(`headers`in i))return;let{headers:a,owner:o}=i,s=`owner`in i;if(!(s&&typeof o!=`string`&&o!==null))return{headers:typeof a==`object`&&a?a:null,hasPrincipal:s,owner:s?o:null}}function w(){let e;return{promise:new Promise(t=>{e=setTimeout(t,l)}),cancel:()=>clearTimeout(e)}}async function T(e,t){let n=await e.clients?.matchAll({type:`window`})??[];if(n.length===0)return[];let r=w(),i=await Promise.all(n.map(e=>C(e,t,r.promise)));return r.cancel(),i.filter(e=>e!==void 0)}function E(t){let n=new Map,r=!1;return{ask(e){let r=`${e.method} ${e.url}`,i=n.get(r);return i||(i=T(t,{url:e.url,method:e.method,phase:`replay`}),n.set(r,i)),i},warnNoAnswer(){!r&&e.isDevBuild()&&(r=!0,console.warn(`[tempest-react-sdk/sw] background-sync: a queued request needs the current credentials, and no open page answered. Call provideBackgroundSyncCredentials() in the page; the entry stays pending.`))}}}function D(e,t){switch(t.ownerState){case`bound`:return e.find(e=>e.hasPrincipal&&e.owner===t.owner);case`unknown`:return e.find(e=>!e.hasPrincipal);case`unbound`:return e.find(e=>!e.hasPrincipal)??e[0]}}async function O(e,t,n){let r=n.strippedHeaders.length>0;if(!r&&n.ownerState!==`bound`)return t;let i=await e.ask(t);if(i.length===0)throw e.warnNoAnswer(),Error(`background-sync: no client answered`);let a=D(i,n);if(!a)return null;if(!r)return t;if(a.headers===null)return null;let o=new Map(Object.entries(a.headers).map(([e,t])=>[e.toLowerCase(),t]));if(n.strippedHeaders.some(e=>!o.has(e)))throw Error(`background-sync: the answer lacks a stripped credential header`);let s=new Headers(t.headers);for(let e of n.strippedHeaders)s.set(e,o.get(e));return new Request(t,{headers:s})}async function k(e,t){let{sw:n,name:r,maxRetentionMs:i,credentialHeaders:a,beforeReplay:o}=e,s=E(n),c=o??((e,t)=>O(s,e,t)),l=await v(r,a),d=0;for(let e of l){if(e.id===void 0)continue;if(t-e.timestamp>i){await b(r,e.id);continue}let n=e.ownerState??`unknown`;if(n===`pending`&&t-e.timestamp<u){d+=1;continue}let o=n===`pending`?`unknown`:n;try{let{request:t,strippedHeaders:n}=S(e,a),i=await c(t,{queuedAt:e.timestamp,strippedHeaders:n,ownerState:o,owner:o===`bound`?e.owner??null:void 0});if(!await y(r,e.id))continue;if(i===null){await b(r,e.id);continue}let s=await fetch(i);s.ok||s.status>=400&&s.status<500?await b(r,e.id):d+=1}catch{d+=1}}if(d>0)throw Error(`background-sync: ${d} request(s) still pending`)}var A=new Map;function j(e){let t=A.get(e.name);if(t)return t;let n=k(e,Date.now()).finally(()=>{A.delete(e.name)});return A.set(e.name,n),n}function M(e,t,n){return e?typeof e==`function`?e(t,n):e.test(t.href):!0}async function N(e,t,n,r){let i=w(),a=await C(n,{url:r.url,method:r.method,phase:`enqueue`},i.promise);i.cancel(),await _(e,t,a?a.hasPrincipal?`bound`:`unbound`:`unknown`,a?.owner)}function P(e={}){let i=n(),{match:a,queueName:o=r,maxRetentionMinutes:s=1440,periodicSyncTag:c=`${e.queueName??r}-periodic`,credentialHeaders:l=t.DEFAULT_CREDENTIAL_HEADERS,beforeReplay:u}=e,d=t.credentialHeaderSet(l),f={sw:i,name:o,maxRetentionMs:s*60*1e3,credentialHeaders:d,beforeReplay:u};i.addEventListener(`fetch`,e=>{let t=e.request;if(t.method===`GET`||t.method===`HEAD`)return;let n=new URL(t.url);if(!M(a,n,t))return;let r=h(o,d);r.catch(()=>void 0);let s=fetch(t.clone()),c=s.then(()=>void 0,async()=>{let n=e.clientId?await i.clients?.get(e.clientId):void 0,a=await x(t,Date.now(),d,n?`pending`:`unknown`),s=await g(o,a,await r,d);if(s!==void 0){try{await i.registration.sync?.register(o)}catch{}return n?{id:s,issuer:n}:void 0}});e.respondWith(s.catch(async e=>{throw await c,e})),e.waitUntil(c.then(e=>e?N(o,e.id,e.issuer,t):void 0).catch(()=>void 0))}),i.addEventListener(`sync`,e=>{e.tag===o&&e.waitUntil(j(f))}),i.addEventListener(`periodicsync`,e=>{e.tag===c&&e.waitUntil(j(f).catch(()=>void 0))}),i.addEventListener(`fetch`,e=>{i.registration.sync||e.request.method===`GET`&&e.waitUntil(j(f).catch(()=>void 0))})}async function F(e=r){if(typeof indexedDB>`u`)return!1;let t=await p(e),n=t.transaction([a,o],`readwrite`);n.objectStore(a).clear();let i=n.objectStore(o),c=i.get(s);return c.onsuccess=()=>{i.put((c.result??0)+1,s)},await m(n),t.close(),!0}async function I(e){if(e==null||e===``)return null;let t=await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(`tempest-bg-sync:${e}`));return[...new Uint8Array(t)].map(e=>e.toString(16).padStart(2,`0`)).join(``)}function L(e,t={}){if(typeof navigator>`u`||!navigator.serviceWorker)return()=>void 0;let n=navigator.serviceWorker,{getPrincipal:r}=t,i=t=>{let n=t.data,i=t.ports[0];if(n?.type!==`tempest:bg-sync-credentials`||!i)return;let a={url:String(n.url),method:String(n.method),phase:n.phase===`enqueue`?`enqueue`:`replay`};(async()=>{try{let t={headers:a.phase===`enqueue`?null:await e(a)};r&&(t.owner=await I(await r())),i.postMessage(t)}catch{i.postMessage({error:!0})}})()};return n.addEventListener(`message`,i),()=>n.removeEventListener(`message`,i)}exports.BACKGROUND_SYNC_CREDENTIALS_MESSAGE=c,exports.clearBackgroundSyncQueue=F,exports.installBackgroundSync=P,exports.provideBackgroundSyncCredentials=L;
 //# sourceMappingURL=background-sync.cjs.map

package/dist/sw/background-sync.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"background-sync.cjs","names":[],"sources":["../../src/sw/background-sync.ts"],"sourcesContent":["/**\n * Background-sync helper: queue failed mutating requests (POST/PUT/PATCH/DELETE)\n * while offline and replay them when connectivity returns. A dependency-free\n * take on Workbox's `BackgroundSyncPlugin`, backed by a tiny IndexedDB queue.\n *\n * Import inside your `sw.ts`. Uses the Background Sync API (`registration.sync`)\n * when available, and also replays opportunistically on the next request as a\n * fallback for browsers without it (e.g. Safari).\n *\n * @example\n *   import { installBackgroundSync } from \"tempest-react-sdk/sw\";\n *\n *   installBackgroundSync({ match: (url) => url.pathname.startsWith(\"/api/\") });\n */\n\ninterface SyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface BgFetchEventLike {\n    request: Request;\n    respondWith(response: Response | Promise<Response>): void;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface PeriodicSyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface BgSwGlobal {\n    registration: { sync?: { register(tag: string): Promise<void> } };\n    addEventListener(type: \"sync\", listener: (event: SyncEventLike) => void): void;\n    addEventListener(type: \"fetch\", listener: (event: BgFetchEventLike) => void): void;\n    addEventListener(type: \"periodicsync\", listener: (event: PeriodicSyncEventLike) => void): void;\n}\n\nfunction getSwScope(): BgSwGlobal {\n    return globalThis as unknown as BgSwGlobal;\n}\n\n/** A serialized request stored in the queue. */\ninterface QueuedRequest {\n    id?: number;\n    url: string;\n    method: string;\n    headers: [string, string][];\n    body: ArrayBuffer | null;\n    timestamp: number;\n}\n\n/** Options for {@link installBackgroundSync}. */\nexport interface InstallBackgroundSyncOptions {\n    /**\n     * Which requests to queue on failure. A `RegExp` against the URL or a\n     * predicate. Only non-`GET` requests are ever considered. Default: all\n     * non-`GET` requests.\n     */\n    match?: RegExp | ((url: URL, request: Request) => boolean);\n    /** IndexedDB database name, also used as the sync tag. Default `tempest-bg-sync`. */\n    queueName?: string;\n    /** Drop queued requests older than this (minutes) on replay. Default `1440` (24h). */\n    maxRetentionMinutes?: number;\n    /**\n     * Also drain the queue on the `periodicsync` event carrying this tag,\n     * complementing the one-off `sync` replay so long-pending mutations retry\n     * even without a fresh navigation. Register the periodic sync from the main\n     * thread with {@link registerPeriodicSync}. Default `${queueName}-periodic`.\n     */\n    periodicSyncTag?: string;\n}\n\nconst STORE = \"requests\";\n\nfunction openQueueDb(name: string): Promise<IDBDatabase> {\n    return new Promise((resolve, reject) => {\n        const request = indexedDB.open(name, 1);\n        request.onupgradeneeded = () => {\n            request.result.createObjectStore(STORE, { keyPath: \"id\", autoIncrement: true });\n        };\n        request.onsuccess = () => resolve(request.result);\n        request.onerror = () => reject(request.error);\n    });\n}\n\nfunction txDone(tx: IDBTransaction): Promise<void> {\n    return new Promise((resolve, reject) => {\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n        tx.onabort = () => reject(tx.error);\n    });\n}\n\nasync function enqueue(name: string, entry: QueuedRequest): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    tx.objectStore(STORE).add(entry);\n    await txDone(tx);\n    db.close();\n}\n\nasync function readAll(name: string): Promise<QueuedRequest[]> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readonly\");\n    const all = await new Promise<QueuedRequest[]>((resolve, reject) => {\n        const req = tx.objectStore(STORE).getAll();\n        req.onsuccess = () => resolve(req.result as QueuedRequest[]);\n        req.onerror = () => reject(req.error);\n    });\n    db.close();\n    return all;\n}\n\nasync function remove(name: string, id: number): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    tx.objectStore(STORE).delete(id);\n    await txDone(tx);\n    db.close();\n}\n\nasync function serializeRequest(request: Request, timestamp: number): Promise<QueuedRequest> {\n    const buffer = await request.clone().arrayBuffer();\n    return {\n        url: request.url,\n        method: request.method,\n        headers: [...request.headers.entries()],\n        body: buffer.byteLength > 0 ? buffer : null,\n        timestamp,\n    };\n}\n\nfunction deserializeRequest(entry: QueuedRequest): Request {\n    return new Request(entry.url, {\n        method: entry.method,\n        headers: entry.headers,\n        body: entry.body ?? undefined,\n    });\n}\n\n/**\n * Replay every queued request once. Successful (or stale) entries are removed;\n * entries that fail again are kept for the next attempt. Throws if any entry\n * still fails, so a `sync` handler keeps the sync pending.\n */\nasync function replayQueue(name: string, maxRetentionMs: number, now: number): Promise<void> {\n    const entries = await readAll(name);\n    let pending = 0;\n\n    for (const entry of entries) {\n        if (entry.id === undefined) continue;\n        if (now - entry.timestamp > maxRetentionMs) {\n            await remove(name, entry.id);\n            continue;\n        }\n        try {\n            const response = await fetch(deserializeRequest(entry));\n            if (response.ok || (response.status >= 400 && response.status < 500)) {\n                // 2xx = done; 4xx = client error that won't fix itself → drop it.\n                await remove(name, entry.id);\n            } else {\n                pending += 1;\n            }\n        } catch {\n            pending += 1;\n        }\n    }\n\n    if (pending > 0) throw new Error(`background-sync: ${pending} request(s) still pending`);\n}\n\nfunction matches(\n    match: InstallBackgroundSyncOptions[\"match\"],\n    url: URL,\n    request: Request,\n): boolean {\n    if (!match) return true;\n    return typeof match === \"function\" ? match(url, request) : match.test(url.href);\n}\n\n/**\n * Install the background-sync queue: on a failed mutating request, the request\n * is serialized to IndexedDB and a sync is registered; the original fetch still\n * rejects (so your app can show an offline state), and the request is replayed\n * later when the network returns.\n *\n * @tempest-limits empty-catch — `registration.sync.register` is unavailable on\n * every non-Chromium browser and fails on a revoked background-sync permission.\n * The entry is already durable in IndexedDB at that point, and the queue is also\n * drained opportunistically on the next successful request, so losing the OS-level\n * wakeup degrades *when* the replay happens, not *whether* it happens.\n */\nexport function installBackgroundSync(options: InstallBackgroundSyncOptions = {}): void {\n    const sw = getSwScope();\n    const {\n        match,\n        queueName = \"tempest-bg-sync\",\n        maxRetentionMinutes = 1440,\n        periodicSyncTag = `${options.queueName ?? \"tempest-bg-sync\"}-periodic`,\n    } = options;\n    const maxRetentionMs = maxRetentionMinutes * 60 * 1000;\n\n    sw.addEventListener(\"fetch\", (event) => {\n        const request = event.request;\n        if (request.method === \"GET\" || request.method === \"HEAD\") return;\n\n        const url = new URL(request.url);\n        if (!matches(match, url, request)) return;\n\n        event.respondWith(\n            fetch(request.clone()).catch(async (error) => {\n                const entry = await serializeRequest(request, Date.now());\n                await enqueue(queueName, entry);\n                try {\n                    await sw.registration.sync?.register(queueName);\n                } catch {\n                    /* empty */\n                }\n                throw error;\n            }),\n        );\n    });\n\n    sw.addEventListener(\"sync\", (event) => {\n        if (event.tag !== queueName) return;\n        event.waitUntil(replayQueue(queueName, maxRetentionMs, Date.now()));\n    });\n\n    sw.addEventListener(\"periodicsync\", (event) => {\n        if (event.tag !== periodicSyncTag) return;\n        event.waitUntil(replayQueue(queueName, maxRetentionMs, Date.now()).catch(() => undefined));\n    });\n\n    // Fallback for browsers without the Background Sync API: whenever a GET\n    // succeeds (a sign we're online), drain the queue opportunistically.\n    sw.addEventListener(\"fetch\", (event) => {\n        if (sw.registration.sync) return; // native sync will handle it\n        if (event.request.method !== \"GET\") return;\n        event.waitUntil(replayQueue(queueName, maxRetentionMs, Date.now()).catch(() => undefined));\n    });\n}\n"],"mappings":"AAsCA,SAAS,GAAyB,CAC9B,OAAO,UACX,CAiCA,IAAM,EAAQ,WAEd,SAAS,EAAY,EAAoC,CACrD,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,IAAM,EAAU,UAAU,KAAK,EAAM,CAAC,EACtC,EAAQ,oBAAwB,CAC5B,EAAQ,OAAO,kBAAkB,EAAO,CAAE,QAAS,KAAM,cAAe,EAAK,CAAC,CAClF,EACA,EAAQ,cAAkB,EAAQ,EAAQ,MAAM,EAChD,EAAQ,YAAgB,EAAO,EAAQ,KAAK,CAChD,CAAC,CACL,CAEA,SAAS,EAAO,EAAmC,CAC/C,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,EAAG,eAAmB,EAAQ,EAC9B,EAAG,YAAgB,EAAO,EAAG,KAAK,EAClC,EAAG,YAAgB,EAAO,EAAG,KAAK,CACtC,CAAC,CACL,CAEA,eAAe,EAAQ,EAAc,EAAqC,CACtE,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,WAAW,EAC5C,EAAG,YAAY,CAAK,CAAC,CAAC,IAAI,CAAK,EAC/B,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,CACb,CAEA,eAAe,EAAQ,EAAwC,CAC3D,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,UAAU,EACrC,EAAM,MAAM,IAAI,SAA0B,EAAS,IAAW,CAChE,IAAM,EAAM,EAAG,YAAY,CAAK,CAAC,CAAC,OAAO,EACzC,EAAI,cAAkB,EAAQ,EAAI,MAAyB,EAC3D,EAAI,YAAgB,EAAO,EAAI,KAAK,CACxC,CAAC,EAED,OADA,EAAG,MAAM,EACF,CACX,CAEA,eAAe,EAAO,EAAc,EAA2B,CAC3D,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,WAAW,EAC5C,EAAG,YAAY,CAAK,CAAC,CAAC,OAAO,CAAE,EAC/B,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,CACb,CAEA,eAAe,EAAiB,EAAkB,EAA2C,CACzF,IAAM,EAAS,MAAM,EAAQ,MAAM,CAAC,CAAC,YAAY,EACjD,MAAO,CACH,IAAK,EAAQ,IACb,OAAQ,EAAQ,OAChB,QAAS,CAAC,GAAG,EAAQ,QAAQ,QAAQ,CAAC,EACtC,KAAM,EAAO,WAAa,EAAI,EAAS,KACvC,WACJ,CACJ,CAEA,SAAS,EAAmB,EAA+B,CACvD,OAAO,IAAI,QAAQ,EAAM,IAAK,CAC1B,OAAQ,EAAM,OACd,QAAS,EAAM,QACf,KAAM,EAAM,MAAQ,IAAA,EACxB,CAAC,CACL,CAOA,eAAe,EAAY,EAAc,EAAwB,EAA4B,CACzF,IAAM,EAAU,MAAM,EAAQ,CAAI,EAC9B,EAAU,EAEd,IAAK,IAAM,KAAS,EACZ,KAAM,KAAO,IAAA,GACjB,IAAI,EAAM,EAAM,UAAY,EAAgB,CACxC,MAAM,EAAO,EAAM,EAAM,EAAE,EAC3B,QACJ,CACA,GAAI,CACA,IAAM,EAAW,MAAM,MAAM,EAAmB,CAAK,CAAC,EAClD,EAAS,IAAO,EAAS,QAAU,KAAO,EAAS,OAAS,IAE5D,MAAM,EAAO,EAAM,EAAM,EAAE,EAE3B,GAAW,CAEnB,MAAQ,CACJ,GAAW,CACf,CAXA,CAcJ,GAAI,EAAU,EAAG,MAAU,MAAM,oBAAoB,EAAQ,0BAA0B,CAC3F,CAEA,SAAS,EACL,EACA,EACA,EACO,CAEP,OADK,EACE,OAAO,GAAU,WAAa,EAAM,EAAK,CAAO,EAAI,EAAM,KAAK,EAAI,IAAI,EAD3D,EAEvB,CAcA,SAAgB,EAAsB,EAAwC,CAAC,EAAS,CACpF,IAAM,EAAK,EAAW,EAChB,CACF,QACA,YAAY,kBACZ,sBAAsB,KACtB,kBAAkB,GAAG,EAAQ,WAAa,kBAAkB,YAC5D,EACE,EAAiB,EAAsB,GAAK,IAElD,EAAG,iBAAiB,QAAU,GAAU,CACpC,IAAM,EAAU,EAAM,QACtB,GAAI,EAAQ,SAAW,OAAS,EAAQ,SAAW,OAAQ,OAE3D,IAAM,EAAM,IAAI,IAAI,EAAQ,GAAG,EAC1B,EAAQ,EAAO,EAAK,CAAO,GAEhC,EAAM,YACF,MAAM,EAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,KAAO,IAAU,CAC1C,IAAM,EAAQ,MAAM,EAAiB,EAAS,KAAK,IAAI,CAAC,EACxD,MAAM,EAAQ,EAAW,CAAK,EAC9B,GAAI,CACA,MAAM,EAAG,aAAa,MAAM,SAAS,CAAS,CAClD,MAAQ,CAER,CACA,MAAM,CACV,CAAC,CACL,CACJ,CAAC,EAED,EAAG,iBAAiB,OAAS,GAAU,CAC/B,EAAM,MAAQ,GAClB,EAAM,UAAU,EAAY,EAAW,EAAgB,KAAK,IAAI,CAAC,CAAC,CACtE,CAAC,EAED,EAAG,iBAAiB,eAAiB,GAAU,CACvC,EAAM,MAAQ,GAClB,EAAM,UAAU,EAAY,EAAW,EAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7F,CAAC,EAID,EAAG,iBAAiB,QAAU,GAAU,CAChC,EAAG,aAAa,MAChB,EAAM,QAAQ,SAAW,OAC7B,EAAM,UAAU,EAAY,EAAW,EAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7F,CAAC,CACL"}
+{"version":3,"file":"background-sync.cjs","names":[],"sources":["../../src/sw/background-sync.ts"],"sourcesContent":["/**\n * Background-sync helper: queue failed mutating requests (POST/PUT/PATCH/DELETE)\n * while offline and replay them when connectivity returns. A dependency-free\n * take on Workbox's `BackgroundSyncPlugin`, backed by a tiny IndexedDB queue.\n *\n * Import inside your `sw.ts`. Uses the Background Sync API (`registration.sync`)\n * when available, and also replays opportunistically on the next request as a\n * fallback for browsers without it (e.g. Safari).\n *\n * Credential headers (`Authorization` and the rest of\n * {@link DEFAULT_CREDENTIAL_HEADERS}) are never written to IndexedDB: the queue\n * outlives the session, and a stored bearer stayed readable after logout and was\n * replayed with the old identity (reproduced in Chromium 153, 11/10/2026). On\n * replay the worker asks the open pages for the *current* credentials — see\n * {@link provideBackgroundSyncCredentials} — or a custom `beforeReplay` hook.\n * Credentials carried in the URL or the body are out of reach and are stored\n * as sent.\n *\n * @example\n *   import { installBackgroundSync } from \"tempest-react-sdk/sw\";\n *\n *   installBackgroundSync({ match: (url) => url.pathname.startsWith(\"/api/\") });\n */\nimport { isDevBuild } from \"../utils/dev-mode\";\nimport { DEFAULT_CREDENTIAL_HEADERS, credentialHeaderSet } from \"./credential-headers\";\n\ninterface SyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface BgFetchEventLike {\n    request: Request;\n    /** Id of the window client that issued the request, when there is one. */\n    clientId?: string;\n    respondWith(response: Response | Promise<Response>): void;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface PeriodicSyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\n/** Minimal shape of a window client the worker can message. */\ninterface WindowClientLike {\n    postMessage(message: unknown, transfer: Transferable[]): void;\n}\n\ninterface BgSwGlobal {\n    registration: { sync?: { register(tag: string): Promise<void> } };\n    clients?: {\n        matchAll(options: { type: \"window\" }): Promise<readonly WindowClientLike[]>;\n        get(id: string): Promise<WindowClientLike | undefined>;\n    };\n    addEventListener(type: \"sync\", listener: (event: SyncEventLike) => void): void;\n    addEventListener(type: \"fetch\", listener: (event: BgFetchEventLike) => void): void;\n    addEventListener(type: \"periodicsync\", listener: (event: PeriodicSyncEventLike) => void): void;\n}\n\nfunction getSwScope(): BgSwGlobal {\n    return globalThis as unknown as BgSwGlobal;\n}\n\n/**\n * How an entry is tied to whoever queued it:\n * - `\"bound\"`: the issuing page reported a principal (or `null` for nobody);\n *   the entry only goes out while the same one is signed in.\n * - `\"unbound\"`: the issuing page answered without `getPrincipal`.\n * - `\"unknown\"`: nobody could say — no issuing tab, no answer, an error, or an\n *   entry written before owners existed. Fails closed.\n *\n * While the worker is still asking, the stored state is `\"pending\"`, which a\n * replay never sees: it waits, then reads a stamp that never came as `\"unknown\"`.\n */\nexport type BackgroundSyncOwnerState = \"bound\" | \"unbound\" | \"unknown\";\n\n/** A serialized request stored in the queue. */\ninterface QueuedRequest {\n    id?: number;\n    url: string;\n    method: string;\n    headers: [string, string][];\n    body: ArrayBuffer | null;\n    timestamp: number;\n    /** The original `credentials` mode, so cookie-based APIs replay with cookies. */\n    credentials?: RequestCredentials;\n    /** Lower-cased names of the credential headers removed before persisting. */\n    strippedHeaders?: string[];\n    /** Absent on entries written before 0.77 — read as `\"unknown\"`. */\n    ownerState?: BackgroundSyncOwnerState | \"pending\";\n    /** Fingerprint of the principal under `\"bound\"`; `null` for \"nobody signed in\". */\n    owner?: string | null;\n}\n\n/** Default IndexedDB database name (and sync tag) of the background-sync queue. */\nconst DEFAULT_QUEUE_NAME = \"tempest-bg-sync\";\n\n/**\n * Schema version of the queue database. Version 2 adds the `meta` store (the\n * clear epoch) and migrates version-1 entries, scrubbing their plaintext\n * credential headers on first open.\n */\nconst DB_VERSION = 2;\nconst STORE = \"requests\";\nconst META = \"meta\";\nconst EPOCH_KEY = \"epoch\";\n\n/**\n * `type` of the message the worker posts to window clients to ask about a queued\n * request. Answered by {@link provideBackgroundSyncCredentials}.\n */\nexport const BACKGROUND_SYNC_CREDENTIALS_MESSAGE = \"tempest:bg-sync-credentials\";\n\n/** How long the worker waits for the window clients to answer, in milliseconds. */\nconst CREDENTIALS_TIMEOUT_MS = 3000;\n\n/**\n * How long a replay waits on an entry whose owner is still being stamped. Past\n * it (the worker died mid-question), the owner is read as `\"unknown\"`.\n */\nconst OWNER_STAMP_GRACE_MS = CREDENTIALS_TIMEOUT_MS * 2;\n\n/** What a queued request looked like when it was stored, passed to `beforeReplay`. */\nexport interface BackgroundSyncReplayContext {\n    /** Epoch milliseconds of the original failed attempt. */\n    queuedAt: number;\n    /** Lower-cased credential header names stripped before the entry was stored. */\n    strippedHeaders: readonly string[];\n    /** How the entry is tied to its owner. */\n    ownerState: BackgroundSyncOwnerState;\n    /** Owner fingerprint under `\"bound\"` (`null` for nobody); `undefined` otherwise. */\n    owner: string | null | undefined;\n}\n\n/** The request a window client is asked about, as sent by the worker. */\nexport interface BackgroundSyncCredentialsRequest {\n    /** Absolute URL of the queued request. */\n    url: string;\n    /** HTTP method of the queued request. */\n    method: string;\n    /**\n     * `\"enqueue\"` when the worker only wants the owner of a request that just\n     * failed; `\"replay\"` when it is about to send it and needs the credentials.\n     */\n    phase: \"enqueue\" | \"replay\";\n}\n\n/**\n * Resolve the credentials for a queued request: a header record to apply, or\n * `null` when there is no session (the entry is then dropped).\n */\nexport type BackgroundSyncCredentialsProvider = (\n    request: BackgroundSyncCredentialsRequest,\n) => Record<string, string> | null | Promise<Record<string, string> | null>;\n\n/** Options for {@link provideBackgroundSyncCredentials}. */\nexport interface ProvideBackgroundSyncCredentialsOptions {\n    /**\n     * Who is signed in right now — a stable, non-secret id such as the user id;\n     * `null`/`undefined` when nobody is. Read when a request is queued and again\n     * when it is replayed: an entry is only sent while the same principal is\n     * signed in, and dropped otherwise, so a mutation queued by one account is\n     * never sent with another account's credentials even when the app forgets\n     * `clearSessionData()` on logout. Only a SHA-256 fingerprint reaches the\n     * queue, never the value itself. A throw is answered as an explicit error,\n     * which leaves the owner unknown (fail closed).\n     */\n    getPrincipal?: () => string | null | undefined | Promise<string | null | undefined>;\n}\n\n/** Options for {@link installBackgroundSync}. */\nexport interface InstallBackgroundSyncOptions {\n    /**\n     * Which requests to queue on failure. A `RegExp` against the URL or a\n     * predicate. Only non-`GET` requests are ever considered. Default: all\n     * non-`GET` requests.\n     */\n    match?: RegExp | ((url: URL, request: Request) => boolean);\n    /** IndexedDB database name, also used as the sync tag. Default `tempest-bg-sync`. */\n    queueName?: string;\n    /** Drop queued requests older than this (minutes) on replay. Default `1440` (24h). */\n    maxRetentionMinutes?: number;\n    /**\n     * Also drain the queue on the `periodicsync` event carrying this tag,\n     * complementing the one-off `sync` replay so long-pending mutations retry\n     * even without a fresh navigation. Register the periodic sync from the main\n     * thread with {@link registerPeriodicSync}. Default `${queueName}-periodic`.\n     */\n    periodicSyncTag?: string;\n    /**\n     * Header names stripped before a request is persisted — and stripped again on\n     * replay, so entries written by an older version never go out with the\n     * credential they stored. Default {@link DEFAULT_CREDENTIAL_HEADERS}; extend it\n     * for a custom credential header (`[...DEFAULT_CREDENTIAL_HEADERS,\n     * \"x-tenant-key\"]`). Passing `[]` restores the pre-0.77 behavior of\n     * persisting and replaying every header, credentials included.\n     */\n    credentialHeaders?: readonly string[];\n    /**\n     * Prepare each queued request right before it is replayed: return the\n     * request to send (typically with the current credentials applied) or\n     * `null` to drop the entry for good. A thrown error keeps the entry pending.\n     * The context carries the entry's owner, so a custom hook can apply the\n     * same rule as the default.\n     *\n     * Default: an entry with no stripped credentials and no bound owner is\n     * replayed as-is. The others ask every open window client in parallel (see\n     * {@link provideBackgroundSyncCredentials}) and pick the answer that fits:\n     * - `\"bound\"`: the answer whose owner matches; none among valid answers →\n     *   dropped, never sent anonymously or as somebody else;\n     * - `\"unknown\"`: only an answer without a principal (an app that does not use\n     *   `getPrincipal`); every answer has one → dropped;\n     * - `\"unbound\"`: any answer, preferring one without a principal.\n     * Then `null` headers drop a credentialed entry, an answer that lacks one of\n     * the stripped headers keeps it pending, and only the stripped names are\n     * re-applied. No valid answer at all keeps it pending until\n     * `maxRetentionMinutes` (and warns once per replay in development builds).\n     */\n    beforeReplay?: (\n        request: Request,\n        context: BackgroundSyncReplayContext,\n    ) => Request | null | Promise<Request | null>;\n}\n\n/**\n * Move credential headers out of a header list.\n *\n * @returns The remaining headers and the lower-cased names removed.\n */\nfunction splitHeaders(\n    headers: Iterable<[string, string]>,\n    credentialHeaders: ReadonlySet<string>,\n): { kept: [string, string][]; stripped: string[] } {\n    const kept: [string, string][] = [];\n    const stripped: string[] = [];\n    for (const [name, value] of headers) {\n        if (credentialHeaders.has(name.toLowerCase())) stripped.push(name.toLowerCase());\n        else kept.push([name, value]);\n    }\n    return { kept, stripped };\n}\n\n/**\n * Scrub version-1 entries during the upgrade: their credential headers were\n * stored in plaintext, so they are removed from disk on the first open, recorded\n * as stripped, and the owner is marked unknown.\n */\nfunction migrateLegacyEntries(store: IDBObjectStore, credentialHeaders: ReadonlySet<string>): void {\n    const cursorRequest = store.openCursor();\n    cursorRequest.onsuccess = () => {\n        const cursor = cursorRequest.result;\n        if (!cursor) return;\n        const entry = cursor.value as QueuedRequest;\n        const { kept, stripped } = splitHeaders(entry.headers, credentialHeaders);\n        cursor.update({\n            ...entry,\n            headers: kept,\n            strippedHeaders: [...new Set([...(entry.strippedHeaders ?? []), ...stripped])],\n            ownerState: entry.ownerState ?? \"unknown\",\n        });\n        cursor.continue();\n    };\n}\n\nfunction openQueueDb(\n    name: string,\n    credentialHeaders: ReadonlySet<string> = credentialHeaderSet(),\n): Promise<IDBDatabase> {\n    return new Promise((resolve, reject) => {\n        const request = indexedDB.open(name, DB_VERSION);\n        request.onupgradeneeded = (event) => {\n            const db = request.result;\n            if (!db.objectStoreNames.contains(STORE)) {\n                db.createObjectStore(STORE, { keyPath: \"id\", autoIncrement: true });\n            } else if (event.oldVersion < 2 && request.transaction) {\n                migrateLegacyEntries(request.transaction.objectStore(STORE), credentialHeaders);\n            }\n            if (!db.objectStoreNames.contains(META)) db.createObjectStore(META);\n        };\n        request.onsuccess = () => {\n            const db = request.result;\n            db.onversionchange = () => db.close();\n            resolve(db);\n        };\n        request.onerror = () => reject(request.error);\n    });\n}\n\nfunction txDone(tx: IDBTransaction): Promise<void> {\n    return new Promise((resolve, reject) => {\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n        tx.onabort = () => reject(tx.error);\n    });\n}\n\n/** The current clear epoch: bumped by every {@link clearBackgroundSyncQueue}. */\nasync function readEpoch(name: string, credentialHeaders: ReadonlySet<string>): Promise<number> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction(META, \"readonly\");\n    const get = tx.objectStore(META).get(EPOCH_KEY);\n    await txDone(tx);\n    db.close();\n    return (get.result as number | undefined) ?? 0;\n}\n\n/**\n * Add an entry unless the queue was cleared since `epoch` was read — checked in\n * the same transaction as the write, so a logout that lands while the request\n * is still failing never lets it into the next session's queue.\n *\n * @returns The new entry's key, or `undefined` when the clear won.\n */\nasync function enqueue(\n    name: string,\n    entry: QueuedRequest,\n    epoch: number,\n    credentialHeaders: ReadonlySet<string>,\n): Promise<number | undefined> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction([STORE, META], \"readwrite\");\n    let id: number | undefined;\n    const current = tx.objectStore(META).get(EPOCH_KEY);\n    current.onsuccess = () => {\n        if (((current.result as number | undefined) ?? 0) !== epoch) return;\n        const add = tx.objectStore(STORE).add(entry);\n        add.onsuccess = () => {\n            id = add.result as number;\n        };\n    };\n    await txDone(tx);\n    db.close();\n    return id;\n}\n\n/**\n * Record how an entry is owned. A no-op when the entry is already gone\n * (replayed, or the queue was cleared).\n */\nasync function stampOwner(\n    name: string,\n    id: number,\n    ownerState: BackgroundSyncOwnerState,\n    owner: string | null | undefined,\n): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    const store = tx.objectStore(STORE);\n    const get = store.get(id);\n    get.onsuccess = () => {\n        const entry = get.result as QueuedRequest | undefined;\n        if (!entry) return;\n        entry.ownerState = ownerState;\n        if (ownerState === \"bound\") entry.owner = owner ?? null;\n        store.put(entry);\n    };\n    await txDone(tx);\n    db.close();\n}\n\nasync function readAll(\n    name: string,\n    credentialHeaders: ReadonlySet<string>,\n): Promise<QueuedRequest[]> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction(STORE, \"readonly\");\n    const all = await new Promise<QueuedRequest[]>((resolve, reject) => {\n        const req = tx.objectStore(STORE).getAll();\n        req.onsuccess = () => resolve(req.result as QueuedRequest[]);\n        req.onerror = () => reject(req.error);\n    });\n    db.close();\n    return all;\n}\n\n/** Whether an entry is still in the queue — `false` once it was cleared. */\nasync function stillQueued(name: string, id: number): Promise<boolean> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readonly\");\n    const count = tx.objectStore(STORE).count(id);\n    await txDone(tx);\n    db.close();\n    return count.result > 0;\n}\n\nasync function remove(name: string, id: number): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    tx.objectStore(STORE).delete(id);\n    await txDone(tx);\n    db.close();\n}\n\n/**\n * Serialize a request for the queue, leaving out every credential header and\n * recording which ones were present.\n */\nasync function serializeRequest(\n    request: Request,\n    timestamp: number,\n    credentialHeaders: ReadonlySet<string>,\n    ownerState: QueuedRequest[\"ownerState\"],\n): Promise<QueuedRequest> {\n    const buffer = await request.clone().arrayBuffer();\n    const { kept, stripped } = splitHeaders(request.headers.entries(), credentialHeaders);\n    return {\n        url: request.url,\n        method: request.method,\n        headers: kept,\n        body: buffer.byteLength > 0 ? buffer : null,\n        timestamp,\n        credentials: request.credentials,\n        strippedHeaders: stripped,\n        ownerState,\n    };\n}\n\n/**\n * Rebuild a stored request, stripping credential headers once more so an entry\n * that still holds one (a custom `credentialHeaders` the migration did not know)\n * never replays it.\n */\nfunction deserializeRequest(\n    entry: QueuedRequest,\n    credentialHeaders: ReadonlySet<string>,\n): { request: Request; strippedHeaders: string[] } {\n    const { kept, stripped } = splitHeaders(entry.headers, credentialHeaders);\n    return {\n        request: new Request(entry.url, {\n            method: entry.method,\n            headers: kept,\n            body: entry.body ?? undefined,\n            credentials: entry.credentials,\n        }),\n        strippedHeaders: [...new Set([...(entry.strippedHeaders ?? []), ...stripped])],\n    };\n}\n\n/** A window client's parsed answer. */\ninterface ClientAnswer {\n    headers: Record<string, string> | null;\n    /** Whether the page has `getPrincipal`. */\n    hasPrincipal: boolean;\n    owner: string | null;\n}\n\n/**\n * Ask one window client about a queued request over a `MessageChannel`.\n *\n * @returns The parsed answer, or `undefined` when the client stayed silent until\n *   `deadline`, answered `{ error: true }`, or answered something unrecognizable.\n */\nasync function askClient(\n    client: WindowClientLike,\n    request: BackgroundSyncCredentialsRequest,\n    deadline: Promise<void>,\n): Promise<ClientAnswer | undefined> {\n    const channel = new MessageChannel();\n    const answer = await Promise.race([\n        new Promise<unknown>((resolve) => {\n            channel.port1.onmessage = (event: MessageEvent) => resolve(event.data);\n            client.postMessage({ type: BACKGROUND_SYNC_CREDENTIALS_MESSAGE, ...request }, [\n                channel.port2,\n            ]);\n        }),\n        deadline.then(() => undefined),\n    ]);\n    channel.port1.close();\n    if (answer === null || typeof answer !== \"object\" || !(\"headers\" in answer)) return undefined;\n    const { headers, owner } = answer as { headers: unknown; owner?: unknown };\n    const hasPrincipal = \"owner\" in answer;\n    if (hasPrincipal && typeof owner !== \"string\" && owner !== null) return undefined;\n    return {\n        headers:\n            headers !== null && typeof headers === \"object\"\n                ? (headers as Record<string, string>)\n                : null,\n        hasPrincipal,\n        owner: hasPrincipal ? (owner as string | null) : null,\n    };\n}\n\n/** A deadline shared by every client asked in one round. */\nfunction startDeadline(): { promise: Promise<void>; cancel: () => void } {\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    const promise = new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, CREDENTIALS_TIMEOUT_MS);\n    });\n    return { promise, cancel: () => clearTimeout(timer) };\n}\n\n/**\n * Ask every open window client in parallel, under one shared deadline.\n *\n * @returns Every valid answer; empty when nobody answered.\n */\nasync function askAllClients(\n    sw: BgSwGlobal,\n    request: BackgroundSyncCredentialsRequest,\n): Promise<ClientAnswer[]> {\n    const clients = (await sw.clients?.matchAll({ type: \"window\" })) ?? [];\n    if (clients.length === 0) return [];\n    const deadline = startDeadline();\n    const answers = await Promise.all(\n        clients.map((client) => askClient(client, request, deadline.promise)),\n    );\n    deadline.cancel();\n    return answers.filter((answer): answer is ClientAnswer => answer !== undefined);\n}\n\n/** State of one replay pass: answers cached per URL + method, and the warning flag. */\ninterface ReplayRun {\n    ask(request: Request): Promise<ClientAnswer[]>;\n    warnNoAnswer(): void;\n}\n\nfunction createReplayRun(sw: BgSwGlobal): ReplayRun {\n    const answers = new Map<string, Promise<ClientAnswer[]>>();\n    let warned = false;\n    return {\n        ask(request) {\n            const key = `${request.method} ${request.url}`;\n            let pending = answers.get(key);\n            if (!pending) {\n                pending = askAllClients(sw, {\n                    url: request.url,\n                    method: request.method,\n                    phase: \"replay\",\n                });\n                answers.set(key, pending);\n            }\n            return pending;\n        },\n        warnNoAnswer() {\n            if (warned || !isDevBuild()) return;\n            warned = true;\n            console.warn(\n                \"[tempest-react-sdk/sw] background-sync: a queued request needs the current \" +\n                    \"credentials, and no open page answered. Call \" +\n                    \"provideBackgroundSyncCredentials() in the page; the entry stays pending.\",\n            );\n        },\n    };\n}\n\n/** Pick the answer an entry may be replayed with, per its owner state. */\nfunction chooseAnswer(\n    answers: readonly ClientAnswer[],\n    context: BackgroundSyncReplayContext,\n): ClientAnswer | undefined {\n    switch (context.ownerState) {\n        case \"bound\":\n            return answers.find((answer) => answer.hasPrincipal && answer.owner === context.owner);\n        case \"unknown\":\n            return answers.find((answer) => !answer.hasPrincipal);\n        case \"unbound\":\n            return answers.find((answer) => !answer.hasPrincipal) ?? answers[0];\n    }\n}\n\n/**\n * The default `beforeReplay` (rules on {@link InstallBackgroundSyncOptions}).\n *\n * @throws {Error} When no page answered, or the chosen answer lacks a stripped\n *   header — the entry stays pending.\n */\nasync function defaultBeforeReplay(\n    run: ReplayRun,\n    request: Request,\n    context: BackgroundSyncReplayContext,\n): Promise<Request | null> {\n    const credentialed = context.strippedHeaders.length > 0;\n    if (!credentialed && context.ownerState !== \"bound\") return request;\n    const answers = await run.ask(request);\n    if (answers.length === 0) {\n        run.warnNoAnswer();\n        throw new Error(\"background-sync: no client answered\");\n    }\n    const chosen = chooseAnswer(answers, context);\n    if (!chosen) return null;\n    if (!credentialed) return request;\n    if (chosen.headers === null) return null;\n    const provided = new Map(\n        Object.entries(chosen.headers).map(([name, value]) => [name.toLowerCase(), value]),\n    );\n    if (context.strippedHeaders.some((name) => !provided.has(name))) {\n        throw new Error(\"background-sync: the answer lacks a stripped credential header\");\n    }\n    const headers = new Headers(request.headers);\n    for (const name of context.strippedHeaders) headers.set(name, provided.get(name) as string);\n    return new Request(request, { headers });\n}\n\n/** Everything {@link replayQueue} needs besides the clock. */\ninterface ReplayConfig {\n    sw: BgSwGlobal;\n    name: string;\n    maxRetentionMs: number;\n    credentialHeaders: ReadonlySet<string>;\n    beforeReplay?: InstallBackgroundSyncOptions[\"beforeReplay\"];\n}\n\n/**\n * Replay every queued request once. Entries that succeed, are stale, get a 4xx\n * (a client error that will not fix itself) or that the preparation rejects with\n * `null` are removed; entries that fail again — network error, 5xx, or a\n * preparation that throws — are kept, and so is an entry whose owner is still\n * being stamped (for up to {@link OWNER_STAMP_GRACE_MS}). Each entry is checked\n * against the store right before it is sent, so a queue cleared mid-replay stops\n * the replay. Throws if any entry is still pending, so a `sync` handler keeps\n * the sync registered.\n */\nasync function replayQueue(config: ReplayConfig, now: number): Promise<void> {\n    const { sw, name, maxRetentionMs, credentialHeaders, beforeReplay } = config;\n    const run = createReplayRun(sw);\n    const prepare =\n        beforeReplay ??\n        ((request: Request, context: BackgroundSyncReplayContext) =>\n            defaultBeforeReplay(run, request, context));\n    const entries = await readAll(name, credentialHeaders);\n    let pending = 0;\n\n    for (const entry of entries) {\n        if (entry.id === undefined) continue;\n        if (now - entry.timestamp > maxRetentionMs) {\n            await remove(name, entry.id);\n            continue;\n        }\n        const state = entry.ownerState ?? \"unknown\";\n        if (state === \"pending\" && now - entry.timestamp < OWNER_STAMP_GRACE_MS) {\n            pending += 1;\n            continue;\n        }\n        const ownerState: BackgroundSyncOwnerState = state === \"pending\" ? \"unknown\" : state;\n        try {\n            const { request: stored, strippedHeaders } = deserializeRequest(\n                entry,\n                credentialHeaders,\n            );\n            const request = await prepare(stored, {\n                queuedAt: entry.timestamp,\n                strippedHeaders,\n                ownerState,\n                owner: ownerState === \"bound\" ? (entry.owner ?? null) : undefined,\n            });\n            if (!(await stillQueued(name, entry.id))) continue;\n            if (request === null) {\n                await remove(name, entry.id);\n                continue;\n            }\n            const response = await fetch(request);\n            if (response.ok || (response.status >= 400 && response.status < 500)) {\n                await remove(name, entry.id);\n            } else {\n                pending += 1;\n            }\n        } catch {\n            pending += 1;\n        }\n    }\n\n    if (pending > 0) throw new Error(`background-sync: ${pending} request(s) still pending`);\n}\n\n/**\n * The replay in flight per queue. `sync`, `periodicsync` and the Safari fallback\n * can fire together; sharing one pass keeps a mutation from being sent twice.\n */\nconst replaysInFlight = new Map<string, Promise<void>>();\n\nfunction drainQueue(config: ReplayConfig): Promise<void> {\n    const running = replaysInFlight.get(config.name);\n    if (running) return running;\n    const pass = replayQueue(config, Date.now()).finally(() => {\n        replaysInFlight.delete(config.name);\n    });\n    replaysInFlight.set(config.name, pass);\n    return pass;\n}\n\nfunction matches(\n    match: InstallBackgroundSyncOptions[\"match\"],\n    url: URL,\n    request: Request,\n): boolean {\n    if (!match) return true;\n    return typeof match === \"function\" ? match(url, request) : match.test(url.href);\n}\n\n/**\n * Ask the issuing page who owns a just-queued entry and record it.\n *\n * @returns Resolves once the owner is stamped; never rejects.\n */\nasync function stampFromIssuer(\n    name: string,\n    id: number,\n    issuer: WindowClientLike,\n    request: Request,\n): Promise<void> {\n    const deadline = startDeadline();\n    const answer = await askClient(\n        issuer,\n        { url: request.url, method: request.method, phase: \"enqueue\" },\n        deadline.promise,\n    );\n    deadline.cancel();\n    const state: BackgroundSyncOwnerState = !answer\n        ? \"unknown\"\n        : answer.hasPrincipal\n          ? \"bound\"\n          : \"unbound\";\n    await stampOwner(name, id, state, answer?.owner);\n}\n\n/**\n * Install the background-sync queue: on a failed mutating request, the request\n * is serialized to IndexedDB (without its credential headers) and a sync is\n * registered; the original fetch still rejects (so your app can show an offline\n * state), and the request is replayed later when the network returns.\n *\n * Right after queueing, the worker asks the page that issued the request who is\n * signed in (`getPrincipal` on {@link provideBackgroundSyncCredentials}) and\n * stamps the entry with that owner, without delaying the rejection. The work is\n * handed to `event.waitUntil` synchronously, so the worker stays alive for it\n * in every engine. Without the Background Sync API (every non-Chromium\n * browser), the queue is drained opportunistically whenever a `GET` goes\n * through the worker.\n *\n * @tempest-limits empty-catch — `registration.sync.register` is unavailable on\n * every non-Chromium browser and fails on a revoked background-sync permission.\n * The entry is already durable in IndexedDB at that point, and the queue is also\n * drained opportunistically on the next successful request, so losing the OS-level\n * wakeup degrades *when* the replay happens, not *whether* it happens.\n */\nexport function installBackgroundSync(options: InstallBackgroundSyncOptions = {}): void {\n    const sw = getSwScope();\n    const {\n        match,\n        queueName = DEFAULT_QUEUE_NAME,\n        maxRetentionMinutes = 1440,\n        periodicSyncTag = `${options.queueName ?? DEFAULT_QUEUE_NAME}-periodic`,\n        credentialHeaders = DEFAULT_CREDENTIAL_HEADERS,\n        beforeReplay,\n    } = options;\n    const stripped = credentialHeaderSet(credentialHeaders);\n    const replay: ReplayConfig = {\n        sw,\n        name: queueName,\n        maxRetentionMs: maxRetentionMinutes * 60 * 1000,\n        credentialHeaders: stripped,\n        beforeReplay,\n    };\n\n    sw.addEventListener(\"fetch\", (event) => {\n        const request = event.request;\n        if (request.method === \"GET\" || request.method === \"HEAD\") return;\n\n        const url = new URL(request.url);\n        if (!matches(match, url, request)) return;\n\n        const epoch = readEpoch(queueName, stripped);\n        epoch.catch(() => undefined);\n        const attempt = fetch(request.clone());\n        const queued = attempt.then(\n            () => undefined,\n            async () => {\n                const issuer = event.clientId ? await sw.clients?.get(event.clientId) : undefined;\n                const entry = await serializeRequest(\n                    request,\n                    Date.now(),\n                    stripped,\n                    issuer ? \"pending\" : \"unknown\",\n                );\n                const id = await enqueue(queueName, entry, await epoch, stripped);\n                if (id === undefined) return undefined;\n                try {\n                    await sw.registration.sync?.register(queueName);\n                } catch {\n                    /* empty */\n                }\n                return issuer ? { id, issuer } : undefined;\n            },\n        );\n        event.respondWith(\n            attempt.catch(async (error: unknown) => {\n                await queued;\n                throw error;\n            }),\n        );\n        event.waitUntil(\n            queued\n                .then((stamp) =>\n                    stamp ? stampFromIssuer(queueName, stamp.id, stamp.issuer, request) : undefined,\n                )\n                .catch(() => undefined),\n        );\n    });\n\n    sw.addEventListener(\"sync\", (event) => {\n        if (event.tag !== queueName) return;\n        event.waitUntil(drainQueue(replay));\n    });\n\n    sw.addEventListener(\"periodicsync\", (event) => {\n        if (event.tag !== periodicSyncTag) return;\n        event.waitUntil(drainQueue(replay).catch(() => undefined));\n    });\n\n    sw.addEventListener(\"fetch\", (event) => {\n        if (sw.registration.sync) return;\n        if (event.request.method !== \"GET\") return;\n        event.waitUntil(drainQueue(replay).catch(() => undefined));\n    });\n}\n\n/**\n * Empty the background-sync queue — every request still waiting to be replayed —\n * and bump its clear epoch. Call it on logout (or use `clearSessionData()`, which\n * also clears the runtime caches) so mutations made under one session are never\n * replayed under the next.\n *\n * Works from the page and from the worker, and reaches work already in flight\n * in the worker: a replay checks each entry right before sending it, and a\n * request still failing when the queue is cleared is not written afterwards.\n *\n * @param queueName - The `queueName` given to {@link installBackgroundSync}.\n *   Default `tempest-bg-sync`.\n * @returns `true` once the queue is empty; `false` when IndexedDB is\n *   unavailable (SSR, old browsers).\n *\n * @example\n * import { clearBackgroundSyncQueue } from \"tempest-react-sdk/sw\";\n *\n * await clearBackgroundSyncQueue();\n */\nexport async function clearBackgroundSyncQueue(\n    queueName: string = DEFAULT_QUEUE_NAME,\n): Promise<boolean> {\n    if (typeof indexedDB === \"undefined\") return false;\n    const db = await openQueueDb(queueName);\n    const tx = db.transaction([STORE, META], \"readwrite\");\n    tx.objectStore(STORE).clear();\n    const meta = tx.objectStore(META);\n    const current = meta.get(EPOCH_KEY);\n    current.onsuccess = () => {\n        meta.put(((current.result as number | undefined) ?? 0) + 1, EPOCH_KEY);\n    };\n    await txDone(tx);\n    db.close();\n    return true;\n}\n\n/**\n * One-way fingerprint of a principal: hex SHA-256, so the queue can compare\n * owners without ever holding the id itself.\n *\n * @returns The fingerprint, or `null` when nobody is signed in.\n */\nasync function ownerFingerprint(principal: string | null | undefined): Promise<string | null> {\n    if (principal === null || principal === undefined || principal === \"\") return null;\n    const digest = await crypto.subtle.digest(\n        \"SHA-256\",\n        new TextEncoder().encode(`tempest-bg-sync:${principal}`),\n    );\n    return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Answer the worker's questions about queued requests (see `beforeReplay` on\n * {@link installBackgroundSync}). Install it once in every page, next to your\n * auth setup; it reads the token at replay time, so the queue never has to store\n * it. Without it, a queued request that carried a credential header is never\n * replayed.\n *\n * `getHeaders` must return **every** credential header the app sends (the worker\n * keeps an entry pending when one it stripped is missing), or `null` when there\n * is no session — the worker then drops the entry instead of replaying it\n * anonymously. A throw from `getHeaders` or `getPrincipal` is answered as an\n * explicit `{ error: true }`. The worker only applies headers whose names the\n * original request carried, so returning `Authorization` for every URL never\n * leaks it to a URL that did not receive it in the first place.\n *\n * Pass `getPrincipal` to bind each entry to whoever queued it: the worker asks\n * the issuing tab right after queueing, asks every tab again before replaying,\n * and drops the entry when no signed-in tab is its owner.\n *\n * @param getHeaders - Resolves the headers for one queued request at replay.\n * @param options - `getPrincipal` binds entries to their owner.\n * @returns A function that removes the listener. A no-op outside the browser.\n *\n * @example\n * import { provideBackgroundSyncCredentials } from \"tempest-react-sdk/sw\";\n *\n * const stop = provideBackgroundSyncCredentials(\n *     () => {\n *         const token = localStorage.getItem(\"token\");\n *         return token ? { Authorization: `Bearer ${token}` } : null;\n *     },\n *     { getPrincipal: () => localStorage.getItem(\"userId\") },\n * );\n */\nexport function provideBackgroundSyncCredentials(\n    getHeaders: BackgroundSyncCredentialsProvider,\n    options: ProvideBackgroundSyncCredentialsOptions = {},\n): () => void {\n    if (typeof navigator === \"undefined\" || !navigator.serviceWorker) return () => undefined;\n    const container = navigator.serviceWorker;\n    const { getPrincipal } = options;\n    const onMessage = (event: MessageEvent): void => {\n        const data = event.data as Partial<BackgroundSyncCredentialsRequest> & { type?: unknown };\n        const port = event.ports[0];\n        if (data?.type !== BACKGROUND_SYNC_CREDENTIALS_MESSAGE || !port) return;\n        const request: BackgroundSyncCredentialsRequest = {\n            url: String(data.url),\n            method: String(data.method),\n            phase: data.phase === \"enqueue\" ? \"enqueue\" : \"replay\",\n        };\n        void (async () => {\n            try {\n                const headers = request.phase === \"enqueue\" ? null : await getHeaders(request);\n                const answer: { headers: Record<string, string> | null; owner?: string | null } = {\n                    headers,\n                };\n                if (getPrincipal) answer.owner = await ownerFingerprint(await getPrincipal());\n                port.postMessage(answer);\n            } catch {\n                port.postMessage({ error: true });\n            }\n        })();\n    };\n    container.addEventListener(\"message\", onMessage);\n    return () => container.removeEventListener(\"message\", onMessage);\n}\n"],"mappings":"+EA4DA,SAAS,GAAyB,CAC9B,OAAO,UACX,CAkCA,IAAM,EAAqB,kBAOrB,EAAa,EACb,EAAQ,WACR,EAAO,OACP,EAAY,QAML,EAAsC,8BAG7C,EAAyB,IAMzB,EAAuB,EAAyB,EA6GtD,SAAS,EACL,EACA,EACgD,CAChD,IAAM,EAA2B,CAAC,EAC5B,EAAqB,CAAC,EAC5B,IAAK,GAAM,CAAC,EAAM,KAAU,EACpB,EAAkB,IAAI,EAAK,YAAY,CAAC,EAAG,EAAS,KAAK,EAAK,YAAY,CAAC,EAC1E,EAAK,KAAK,CAAC,EAAM,CAAK,CAAC,EAEhC,MAAO,CAAE,OAAM,UAAS,CAC5B,CAOA,SAAS,EAAqB,EAAuB,EAA8C,CAC/F,IAAM,EAAgB,EAAM,WAAW,EACvC,EAAc,cAAkB,CAC5B,IAAM,EAAS,EAAc,OAC7B,GAAI,CAAC,EAAQ,OACb,IAAM,EAAQ,EAAO,MACf,CAAE,OAAM,YAAa,EAAa,EAAM,QAAS,CAAiB,EACxE,EAAO,OAAO,CACV,GAAG,EACH,QAAS,EACT,gBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAI,EAAM,iBAAmB,CAAC,EAAI,GAAG,CAAQ,CAAC,CAAC,EAC7E,WAAY,EAAM,YAAc,SACpC,CAAC,EACD,EAAO,SAAS,CACpB,CACJ,CAEA,SAAS,EACL,EACA,EAAyC,EAAA,oBAAoB,EACzC,CACpB,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,IAAM,EAAU,UAAU,KAAK,EAAM,CAAU,EAC/C,EAAQ,gBAAmB,GAAU,CACjC,IAAM,EAAK,EAAQ,OACd,EAAG,iBAAiB,SAAS,CAAK,EAE5B,EAAM,WAAa,GAAK,EAAQ,aACvC,EAAqB,EAAQ,YAAY,YAAY,CAAK,EAAG,CAAiB,EAF9E,EAAG,kBAAkB,EAAO,CAAE,QAAS,KAAM,cAAe,EAAK,CAAC,EAIjE,EAAG,iBAAiB,SAAS,CAAI,GAAG,EAAG,kBAAkB,CAAI,CACtE,EACA,EAAQ,cAAkB,CACtB,IAAM,EAAK,EAAQ,OACnB,EAAG,oBAAwB,EAAG,MAAM,EACpC,EAAQ,CAAE,CACd,EACA,EAAQ,YAAgB,EAAO,EAAQ,KAAK,CAChD,CAAC,CACL,CAEA,SAAS,EAAO,EAAmC,CAC/C,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,EAAG,eAAmB,EAAQ,EAC9B,EAAG,YAAgB,EAAO,EAAG,KAAK,EAClC,EAAG,YAAgB,EAAO,EAAG,KAAK,CACtC,CAAC,CACL,CAGA,eAAe,EAAU,EAAc,EAAyD,CAC5F,IAAM,EAAK,MAAM,EAAY,EAAM,CAAiB,EAC9C,EAAK,EAAG,YAAY,EAAM,UAAU,EACpC,EAAM,EAAG,YAAY,CAAI,CAAC,CAAC,IAAI,CAAS,EAG9C,OAFA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACD,EAAI,QAAiC,CACjD,CASA,eAAe,EACX,EACA,EACA,EACA,EAC2B,CAC3B,IAAM,EAAK,MAAM,EAAY,EAAM,CAAiB,EAC9C,EAAK,EAAG,YAAY,CAAC,EAAO,CAAI,EAAG,WAAW,EAChD,EACE,EAAU,EAAG,YAAY,CAAI,CAAC,CAAC,IAAI,CAAS,EAUlD,MATA,GAAQ,cAAkB,CACtB,IAAM,EAAQ,QAAiC,KAAO,EAAO,OAC7D,IAAM,EAAM,EAAG,YAAY,CAAK,CAAC,CAAC,IAAI,CAAK,EAC3C,EAAI,cAAkB,CAClB,EAAK,EAAI,MACb,CACJ,EACA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACF,CACX,CAMA,eAAe,EACX,EACA,EACA,EACA,EACa,CACb,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,WAAW,EACtC,EAAQ,EAAG,YAAY,CAAK,EAC5B,EAAM,EAAM,IAAI,CAAE,EACxB,EAAI,cAAkB,CAClB,IAAM,EAAQ,EAAI,OACb,IACL,EAAM,WAAa,EACf,IAAe,UAAS,EAAM,MAAQ,GAAS,MACnD,EAAM,IAAI,CAAK,EACnB,EACA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,CACb,CAEA,eAAe,EACX,EACA,EACwB,CACxB,IAAM,EAAK,MAAM,EAAY,EAAM,CAAiB,EAC9C,EAAK,EAAG,YAAY,EAAO,UAAU,EACrC,EAAM,MAAM,IAAI,SAA0B,EAAS,IAAW,CAChE,IAAM,EAAM,EAAG,YAAY,CAAK,CAAC,CAAC,OAAO,EACzC,EAAI,cAAkB,EAAQ,EAAI,MAAyB,EAC3D,EAAI,YAAgB,EAAO,EAAI,KAAK,CACxC,CAAC,EAED,OADA,EAAG,MAAM,EACF,CACX,CAGA,eAAe,EAAY,EAAc,EAA8B,CACnE,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,UAAU,EACrC,EAAQ,EAAG,YAAY,CAAK,CAAC,CAAC,MAAM,CAAE,EAG5C,OAFA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACF,EAAM,OAAS,CAC1B,CAEA,eAAe,EAAO,EAAc,EAA2B,CAC3D,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,WAAW,EAC5C,EAAG,YAAY,CAAK,CAAC,CAAC,OAAO,CAAE,EAC/B,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,CACb,CAMA,eAAe,EACX,EACA,EACA,EACA,EACsB,CACtB,IAAM,EAAS,MAAM,EAAQ,MAAM,CAAC,CAAC,YAAY,EAC3C,CAAE,OAAM,YAAa,EAAa,EAAQ,QAAQ,QAAQ,EAAG,CAAiB,EACpF,MAAO,CACH,IAAK,EAAQ,IACb,OAAQ,EAAQ,OAChB,QAAS,EACT,KAAM,EAAO,WAAa,EAAI,EAAS,KACvC,YACA,YAAa,EAAQ,YACrB,gBAAiB,EACjB,YACJ,CACJ,CAOA,SAAS,EACL,EACA,EAC+C,CAC/C,GAAM,CAAE,OAAM,YAAa,EAAa,EAAM,QAAS,CAAiB,EACxE,MAAO,CACH,QAAS,IAAI,QAAQ,EAAM,IAAK,CAC5B,OAAQ,EAAM,OACd,QAAS,EACT,KAAM,EAAM,MAAQ,IAAA,GACpB,YAAa,EAAM,WACvB,CAAC,EACD,gBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAI,EAAM,iBAAmB,CAAC,EAAI,GAAG,CAAQ,CAAC,CAAC,CACjF,CACJ,CAgBA,eAAe,EACX,EACA,EACA,EACiC,CACjC,IAAM,EAAU,IAAI,eACd,EAAS,MAAM,QAAQ,KAAK,CAC9B,IAAI,QAAkB,GAAY,CAC9B,EAAQ,MAAM,UAAa,GAAwB,EAAQ,EAAM,IAAI,EACrE,EAAO,YAAY,CAAE,KAAM,EAAqC,GAAG,CAAQ,EAAG,CAC1E,EAAQ,KACZ,CAAC,CACL,CAAC,EACD,EAAS,SAAW,IAAA,EAAS,CACjC,CAAC,EAED,GADA,EAAQ,MAAM,MAAM,EACG,OAAO,GAAW,WAArC,GAAiD,EAAE,YAAa,GAAS,OAC7E,GAAM,CAAE,UAAS,SAAU,EACrB,EAAe,UAAW,EAC5B,QAAgB,OAAO,GAAU,UAAY,IAAU,MAC3D,MAAO,CACH,QACwB,OAAO,GAAY,UAAvC,EACO,EACD,KACV,eACA,MAAO,EAAgB,EAA0B,IACrD,CACJ,CAGA,SAAS,GAAgE,CACrE,IAAI,EAIJ,MAAO,CAAE,QAAA,IAHW,QAAe,GAAY,CAC3C,EAAQ,WAAW,EAAS,CAAsB,CACtD,CACS,EAAS,WAAc,aAAa,CAAK,CAAE,CACxD,CAOA,eAAe,EACX,EACA,EACuB,CACvB,IAAM,EAAW,MAAM,EAAG,SAAS,SAAS,CAAE,KAAM,QAAS,CAAC,GAAM,CAAC,EACrE,GAAI,EAAQ,SAAW,EAAG,MAAO,CAAC,EAClC,IAAM,EAAW,EAAc,EACzB,EAAU,MAAM,QAAQ,IAC1B,EAAQ,IAAK,GAAW,EAAU,EAAQ,EAAS,EAAS,OAAO,CAAC,CACxE,EAEA,OADA,EAAS,OAAO,EACT,EAAQ,OAAQ,GAAmC,IAAW,IAAA,EAAS,CAClF,CAQA,SAAS,EAAgB,EAA2B,CAChD,IAAM,EAAU,IAAI,IAChB,EAAS,GACb,MAAO,CACH,IAAI,EAAS,CACT,IAAM,EAAM,GAAG,EAAQ,OAAO,GAAG,EAAQ,MACrC,EAAU,EAAQ,IAAI,CAAG,EAS7B,OARK,IACD,EAAU,EAAc,EAAI,CACxB,IAAK,EAAQ,IACb,OAAQ,EAAQ,OAChB,MAAO,QACX,CAAC,EACD,EAAQ,IAAI,EAAK,CAAO,GAErB,CACX,EACA,cAAe,CACP,IAAW,EAAA,WAAW,IAC1B,EAAS,GACT,QAAQ,KACJ,kMAGJ,EACJ,CACJ,CACJ,CAGA,SAAS,EACL,EACA,EACwB,CACxB,OAAQ,EAAQ,WAAhB,CACI,IAAK,QACD,OAAO,EAAQ,KAAM,GAAW,EAAO,cAAgB,EAAO,QAAU,EAAQ,KAAK,EACzF,IAAK,UACD,OAAO,EAAQ,KAAM,GAAW,CAAC,EAAO,YAAY,EACxD,IAAK,UACD,OAAO,EAAQ,KAAM,GAAW,CAAC,EAAO,YAAY,GAAK,EAAQ,EACzE,CACJ,CAQA,eAAe,EACX,EACA,EACA,EACuB,CACvB,IAAM,EAAe,EAAQ,gBAAgB,OAAS,EACtD,GAAI,CAAC,GAAgB,EAAQ,aAAe,QAAS,OAAO,EAC5D,IAAM,EAAU,MAAM,EAAI,IAAI,CAAO,EACrC,GAAI,EAAQ,SAAW,EAEnB,MADA,EAAI,aAAa,EACP,MAAM,qCAAqC,EAEzD,IAAM,EAAS,EAAa,EAAS,CAAO,EAC5C,GAAI,CAAC,EAAQ,OAAO,KACpB,GAAI,CAAC,EAAc,OAAO,EAC1B,GAAI,EAAO,UAAY,KAAM,OAAO,KACpC,IAAM,EAAW,IAAI,IACjB,OAAO,QAAQ,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC,EAAM,KAAW,CAAC,EAAK,YAAY,EAAG,CAAK,CAAC,CACrF,EACA,GAAI,EAAQ,gBAAgB,KAAM,GAAS,CAAC,EAAS,IAAI,CAAI,CAAC,EAC1D,MAAU,MAAM,gEAAgE,EAEpF,IAAM,EAAU,IAAI,QAAQ,EAAQ,OAAO,EAC3C,IAAK,IAAM,KAAQ,EAAQ,gBAAiB,EAAQ,IAAI,EAAM,EAAS,IAAI,CAAI,CAAW,EAC1F,OAAO,IAAI,QAAQ,EAAS,CAAE,SAAQ,CAAC,CAC3C,CAqBA,eAAe,EAAY,EAAsB,EAA4B,CACzE,GAAM,CAAE,KAAI,OAAM,iBAAgB,oBAAmB,gBAAiB,EAChE,EAAM,EAAgB,CAAE,EACxB,EACF,KACE,EAAkB,IAChB,EAAoB,EAAK,EAAS,CAAO,GAC3C,EAAU,MAAM,EAAQ,EAAM,CAAiB,EACjD,EAAU,EAEd,IAAK,IAAM,KAAS,EAAS,CACzB,GAAI,EAAM,KAAO,IAAA,GAAW,SAC5B,GAAI,EAAM,EAAM,UAAY,EAAgB,CACxC,MAAM,EAAO,EAAM,EAAM,EAAE,EAC3B,QACJ,CACA,IAAM,EAAQ,EAAM,YAAc,UAClC,GAAI,IAAU,WAAa,EAAM,EAAM,UAAY,EAAsB,CACrE,GAAW,EACX,QACJ,CACA,IAAM,EAAuC,IAAU,UAAY,UAAY,EAC/E,GAAI,CACA,GAAM,CAAE,QAAS,EAAQ,mBAAoB,EACzC,EACA,CACJ,EACM,EAAU,MAAM,EAAQ,EAAQ,CAClC,SAAU,EAAM,UAChB,kBACA,aACA,MAAO,IAAe,QAAW,EAAM,OAAS,KAAQ,IAAA,EAC5D,CAAC,EACD,GAAI,CAAE,MAAM,EAAY,EAAM,EAAM,EAAE,EAAI,SAC1C,GAAI,IAAY,KAAM,CAClB,MAAM,EAAO,EAAM,EAAM,EAAE,EAC3B,QACJ,CACA,IAAM,EAAW,MAAM,MAAM,CAAO,EAChC,EAAS,IAAO,EAAS,QAAU,KAAO,EAAS,OAAS,IAC5D,MAAM,EAAO,EAAM,EAAM,EAAE,EAE3B,GAAW,CAEnB,MAAQ,CACJ,GAAW,CACf,CACJ,CAEA,GAAI,EAAU,EAAG,MAAU,MAAM,oBAAoB,EAAQ,0BAA0B,CAC3F,CAMA,IAAM,EAAkB,IAAI,IAE5B,SAAS,EAAW,EAAqC,CACrD,IAAM,EAAU,EAAgB,IAAI,EAAO,IAAI,EAC/C,GAAI,EAAS,OAAO,EACpB,IAAM,EAAO,EAAY,EAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAc,CACvD,EAAgB,OAAO,EAAO,IAAI,CACtC,CAAC,EAED,OADA,EAAgB,IAAI,EAAO,KAAM,CAAI,EAC9B,CACX,CAEA,SAAS,EACL,EACA,EACA,EACO,CAEP,OADK,EACE,OAAO,GAAU,WAAa,EAAM,EAAK,CAAO,EAAI,EAAM,KAAK,EAAI,IAAI,EAD3D,EAEvB,CAOA,eAAe,EACX,EACA,EACA,EACA,EACa,CACb,IAAM,EAAW,EAAc,EACzB,EAAS,MAAM,EACjB,EACA,CAAE,IAAK,EAAQ,IAAK,OAAQ,EAAQ,OAAQ,MAAO,SAAU,EAC7D,EAAS,OACb,EACA,EAAS,OAAO,EAMhB,MAAM,EAAW,EAAM,EALkB,EAEnC,EAAO,aACL,QACA,UAHF,UAI4B,GAAQ,KAAK,CACnD,CAsBA,SAAgB,EAAsB,EAAwC,CAAC,EAAS,CACpF,IAAM,EAAK,EAAW,EAChB,CACF,QACA,YAAY,EACZ,sBAAsB,KACtB,kBAAkB,GAAG,EAAQ,WAAa,EAAmB,WAC7D,oBAAoB,EAAA,2BACpB,gBACA,EACE,EAAW,EAAA,oBAAoB,CAAiB,EAChD,EAAuB,CACzB,KACA,KAAM,EACN,eAAgB,EAAsB,GAAK,IAC3C,kBAAmB,EACnB,cACJ,EAEA,EAAG,iBAAiB,QAAU,GAAU,CACpC,IAAM,EAAU,EAAM,QACtB,GAAI,EAAQ,SAAW,OAAS,EAAQ,SAAW,OAAQ,OAE3D,IAAM,EAAM,IAAI,IAAI,EAAQ,GAAG,EAC/B,GAAI,CAAC,EAAQ,EAAO,EAAK,CAAO,EAAG,OAEnC,IAAM,EAAQ,EAAU,EAAW,CAAQ,EAC3C,EAAM,UAAY,IAAA,EAAS,EAC3B,IAAM,EAAU,MAAM,EAAQ,MAAM,CAAC,EAC/B,EAAS,EAAQ,SACb,IAAA,GACN,SAAY,CACR,IAAM,EAAS,EAAM,SAAW,MAAM,EAAG,SAAS,IAAI,EAAM,QAAQ,EAAI,IAAA,GAClE,EAAQ,MAAM,EAChB,EACA,KAAK,IAAI,EACT,EACA,EAAS,UAAY,SACzB,EACM,EAAK,MAAM,EAAQ,EAAW,EAAO,MAAM,EAAO,CAAQ,EAC5D,OAAO,IAAA,GACX,IAAI,CACA,MAAM,EAAG,aAAa,MAAM,SAAS,CAAS,CAClD,MAAQ,CAER,CACA,OAAO,EAAS,CAAE,KAAI,QAAO,EAAI,IAAA,EADjC,CAEJ,CACJ,EACA,EAAM,YACF,EAAQ,MAAM,KAAO,IAAmB,CAEpC,MADA,MAAM,EACA,CACV,CAAC,CACL,EACA,EAAM,UACF,EACK,KAAM,GACH,EAAQ,EAAgB,EAAW,EAAM,GAAI,EAAM,OAAQ,CAAO,EAAI,IAAA,EAC1E,CAAC,CACA,UAAY,IAAA,EAAS,CAC9B,CACJ,CAAC,EAED,EAAG,iBAAiB,OAAS,GAAU,CAC/B,EAAM,MAAQ,GAClB,EAAM,UAAU,EAAW,CAAM,CAAC,CACtC,CAAC,EAED,EAAG,iBAAiB,eAAiB,GAAU,CACvC,EAAM,MAAQ,GAClB,EAAM,UAAU,EAAW,CAAM,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7D,CAAC,EAED,EAAG,iBAAiB,QAAU,GAAU,CAChC,EAAG,aAAa,MAChB,EAAM,QAAQ,SAAW,OAC7B,EAAM,UAAU,EAAW,CAAM,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7D,CAAC,CACL,CAsBA,eAAsB,EAClB,EAAoB,EACJ,CAChB,GAAI,OAAO,UAAc,IAAa,MAAO,GAC7C,IAAM,EAAK,MAAM,EAAY,CAAS,EAChC,EAAK,EAAG,YAAY,CAAC,EAAO,CAAI,EAAG,WAAW,EACpD,EAAG,YAAY,CAAK,CAAC,CAAC,MAAM,EAC5B,IAAM,EAAO,EAAG,YAAY,CAAI,EAC1B,EAAU,EAAK,IAAI,CAAS,EAMlC,MALA,GAAQ,cAAkB,CACtB,EAAK,KAAM,EAAQ,QAAiC,GAAK,EAAG,CAAS,CACzE,EACA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACF,EACX,CAQA,eAAe,EAAiB,EAA8D,CAC1F,GAAI,GAAc,MAAmC,IAAc,GAAI,OAAO,KAC9E,IAAM,EAAS,MAAM,OAAO,OAAO,OAC/B,UACA,IAAI,YAAY,CAAC,CAAC,OAAO,mBAAmB,GAAW,CAC3D,EACA,MAAO,CAAC,GAAG,IAAI,WAAW,CAAM,CAAC,CAAC,CAAC,IAAK,GAAS,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAChG,CAoCA,SAAgB,EACZ,EACA,EAAmD,CAAC,EAC1C,CACV,GAAI,OAAO,UAAc,KAAe,CAAC,UAAU,cAAe,UAAa,IAAA,GAC/E,IAAM,EAAY,UAAU,cACtB,CAAE,gBAAiB,EACnB,EAAa,GAA8B,CAC7C,IAAM,EAAO,EAAM,KACb,EAAO,EAAM,MAAM,GACzB,GAAI,GAAM,OAAA,+BAAgD,CAAC,EAAM,OACjE,IAAM,EAA4C,CAC9C,IAAK,OAAO,EAAK,GAAG,EACpB,OAAQ,OAAO,EAAK,MAAM,EAC1B,MAAO,EAAK,QAAU,UAAY,UAAY,QAClD,GACM,SAAY,CACd,GAAI,CAEA,IAAM,EAA4E,CAC9E,QAFY,EAAQ,QAAU,UAAY,KAAO,MAAM,EAAW,CAAO,CAG7E,EACI,IAAc,EAAO,MAAQ,MAAM,EAAiB,MAAM,EAAa,CAAC,GAC5E,EAAK,YAAY,CAAM,CAC3B,MAAQ,CACJ,EAAK,YAAY,CAAE,MAAO,EAAK,CAAC,CACpC,CACJ,EAAA,CAAG,CACP,EAEA,OADA,EAAU,iBAAiB,UAAW,CAAS,MAClC,EAAU,oBAAoB,UAAW,CAAS,CACnE"}

package/dist/sw/background-sync.js

@@ -1,98 +1,309 @@
+import { isDevBuild as e } from "../utils/dev-mode.js";
+import { DEFAULT_CREDENTIAL_HEADERS as t, credentialHeaderSet as n } from "./credential-headers.js";
 //#region src/sw/background-sync.ts
-function e() {
+function r() {
 	return globalThis;
 }
-var t = "requests";
-function n(e) {
+var i = "tempest-bg-sync", a = 2, o = "requests", s = "meta", c = "epoch", l = "tempest:bg-sync-credentials", u = 3e3, d = u * 2;
+function f(e, t) {
+	let n = [], r = [];
+	for (let [i, a] of e) t.has(i.toLowerCase()) ? r.push(i.toLowerCase()) : n.push([i, a]);
+	return {
+		kept: n,
+		stripped: r
+	};
+}
+function p(e, t) {
+	let n = e.openCursor();
+	n.onsuccess = () => {
+		let e = n.result;
+		if (!e) return;
+		let r = e.value, { kept: i, stripped: a } = f(r.headers, t);
+		e.update({
+			...r,
+			headers: i,
+			strippedHeaders: [.../* @__PURE__ */ new Set([...r.strippedHeaders ?? [], ...a])],
+			ownerState: r.ownerState ?? "unknown"
+		}), e.continue();
+	};
+}
+function m(e, t = n()) {
 	return new Promise((n, r) => {
-		let i = indexedDB.open(e, 1);
-		i.onupgradeneeded = () => {
-			i.result.createObjectStore(t, {
+		let i = indexedDB.open(e, a);
+		i.onupgradeneeded = (e) => {
+			let n = i.result;
+			n.objectStoreNames.contains(o) ? e.oldVersion < 2 && i.transaction && p(i.transaction.objectStore(o), t) : n.createObjectStore(o, {
 				keyPath: "id",
 				autoIncrement: !0
-			});
-		}, i.onsuccess = () => n(i.result), i.onerror = () => r(i.error);
+			}), n.objectStoreNames.contains(s) || n.createObjectStore(s);
+		}, i.onsuccess = () => {
+			let e = i.result;
+			e.onversionchange = () => e.close(), n(e);
+		}, i.onerror = () => r(i.error);
 	});
 }
-function r(e) {
+function h(e) {
 	return new Promise((t, n) => {
 		e.oncomplete = () => t(), e.onerror = () => n(e.error), e.onabort = () => n(e.error);
 	});
 }
-async function i(e, i) {
-	let a = await n(e), o = a.transaction(t, "readwrite");
-	o.objectStore(t).add(i), await r(o), a.close();
+async function g(e, t) {
+	let n = await m(e, t), r = n.transaction(s, "readonly"), i = r.objectStore(s).get(c);
+	return await h(r), n.close(), i.result ?? 0;
+}
+async function _(e, t, n, r) {
+	let i = await m(e, r), a = i.transaction([o, s], "readwrite"), l, u = a.objectStore(s).get(c);
+	return u.onsuccess = () => {
+		if ((u.result ?? 0) !== n) return;
+		let e = a.objectStore(o).add(t);
+		e.onsuccess = () => {
+			l = e.result;
+		};
+	}, await h(a), i.close(), l;
+}
+async function v(e, t, n, r) {
+	let i = await m(e), a = i.transaction(o, "readwrite"), s = a.objectStore(o), c = s.get(t);
+	c.onsuccess = () => {
+		let e = c.result;
+		e && (e.ownerState = n, n === "bound" && (e.owner = r ?? null), s.put(e));
+	}, await h(a), i.close();
 }
-async function a(e) {
-	let r = await n(e), i = r.transaction(t, "readonly"), a = await new Promise((e, n) => {
-		let r = i.objectStore(t).getAll();
-		r.onsuccess = () => e(r.result), r.onerror = () => n(r.error);
+async function y(e, t) {
+	let n = await m(e, t), r = n.transaction(o, "readonly"), i = await new Promise((e, t) => {
+		let n = r.objectStore(o).getAll();
+		n.onsuccess = () => e(n.result), n.onerror = () => t(n.error);
 	});
-	return r.close(), a;
+	return n.close(), i;
 }
-async function o(e, i) {
-	let a = await n(e), o = a.transaction(t, "readwrite");
-	o.objectStore(t).delete(i), await r(o), a.close();
+async function b(e, t) {
+	let n = await m(e), r = n.transaction(o, "readonly"), i = r.objectStore(o).count(t);
+	return await h(r), n.close(), i.result > 0;
 }
-async function s(e, t) {
-	let n = await e.clone().arrayBuffer();
+async function x(e, t) {
+	let n = await m(e), r = n.transaction(o, "readwrite");
+	r.objectStore(o).delete(t), await h(r), n.close();
+}
+async function S(e, t, n, r) {
+	let i = await e.clone().arrayBuffer(), { kept: a, stripped: o } = f(e.headers.entries(), n);
 	return {
 		url: e.url,
 		method: e.method,
-		headers: [...e.headers.entries()],
-		body: n.byteLength > 0 ? n : null,
-		timestamp: t
+		headers: a,
+		body: i.byteLength > 0 ? i : null,
+		timestamp: t,
+		credentials: e.credentials,
+		strippedHeaders: o,
+		ownerState: r
 	};
 }
-function c(e) {
-	return new Request(e.url, {
-		method: e.method,
-		headers: e.headers,
-		body: e.body ?? void 0
-	});
+function C(e, t) {
+	let { kept: n, stripped: r } = f(e.headers, t);
+	return {
+		request: new Request(e.url, {
+			method: e.method,
+			headers: n,
+			body: e.body ?? void 0,
+			credentials: e.credentials
+		}),
+		strippedHeaders: [.../* @__PURE__ */ new Set([...e.strippedHeaders ?? [], ...r])]
+	};
+}
+async function w(e, t, n) {
+	let r = new MessageChannel(), i = await Promise.race([new Promise((n) => {
+		r.port1.onmessage = (e) => n(e.data), e.postMessage({
+			type: l,
+			...t
+		}, [r.port2]);
+	}), n.then(() => void 0)]);
+	if (r.port1.close(), typeof i != "object" || !i || !("headers" in i)) return;
+	let { headers: a, owner: o } = i, s = "owner" in i;
+	if (!(s && typeof o != "string" && o !== null)) return {
+		headers: typeof a == "object" && a ? a : null,
+		hasPrincipal: s,
+		owner: s ? o : null
+	};
 }
-async function l(e, t, n) {
-	let r = await a(e), i = 0;
-	for (let a of r) if (a.id !== void 0) {
-		if (n - a.timestamp > t) {
-			await o(e, a.id);
+function T() {
+	let e;
+	return {
+		promise: new Promise((t) => {
+			e = setTimeout(t, u);
+		}),
+		cancel: () => clearTimeout(e)
+	};
+}
+async function E(e, t) {
+	let n = await e.clients?.matchAll({ type: "window" }) ?? [];
+	if (n.length === 0) return [];
+	let r = T(), i = await Promise.all(n.map((e) => w(e, t, r.promise)));
+	return r.cancel(), i.filter((e) => e !== void 0);
+}
+function D(t) {
+	let n = /* @__PURE__ */ new Map(), r = !1;
+	return {
+		ask(e) {
+			let r = `${e.method} ${e.url}`, i = n.get(r);
+			return i || (i = E(t, {
+				url: e.url,
+				method: e.method,
+				phase: "replay"
+			}), n.set(r, i)), i;
+		},
+		warnNoAnswer() {
+			!r && e() && (r = !0, console.warn("[tempest-react-sdk/sw] background-sync: a queued request needs the current credentials, and no open page answered. Call provideBackgroundSyncCredentials() in the page; the entry stays pending."));
+		}
+	};
+}
+function O(e, t) {
+	switch (t.ownerState) {
+		case "bound": return e.find((e) => e.hasPrincipal && e.owner === t.owner);
+		case "unknown": return e.find((e) => !e.hasPrincipal);
+		case "unbound": return e.find((e) => !e.hasPrincipal) ?? e[0];
+	}
+}
+async function k(e, t, n) {
+	let r = n.strippedHeaders.length > 0;
+	if (!r && n.ownerState !== "bound") return t;
+	let i = await e.ask(t);
+	if (i.length === 0) throw e.warnNoAnswer(), Error("background-sync: no client answered");
+	let a = O(i, n);
+	if (!a) return null;
+	if (!r) return t;
+	if (a.headers === null) return null;
+	let o = new Map(Object.entries(a.headers).map(([e, t]) => [e.toLowerCase(), t]));
+	if (n.strippedHeaders.some((e) => !o.has(e))) throw Error("background-sync: the answer lacks a stripped credential header");
+	let s = new Headers(t.headers);
+	for (let e of n.strippedHeaders) s.set(e, o.get(e));
+	return new Request(t, { headers: s });
+}
+async function A(e, t) {
+	let { sw: n, name: r, maxRetentionMs: i, credentialHeaders: a, beforeReplay: o } = e, s = D(n), c = o ?? ((e, t) => k(s, e, t)), l = await y(r, a), u = 0;
+	for (let e of l) {
+		if (e.id === void 0) continue;
+		if (t - e.timestamp > i) {
+			await x(r, e.id);
+			continue;
+		}
+		let n = e.ownerState ?? "unknown";
+		if (n === "pending" && t - e.timestamp < d) {
+			u += 1;
 			continue;
 		}
+		let o = n === "pending" ? "unknown" : n;
 		try {
-			let t = await fetch(c(a));
-			t.ok || t.status >= 400 && t.status < 500 ? await o(e, a.id) : i += 1;
+			let { request: t, strippedHeaders: n } = C(e, a), i = await c(t, {
+				queuedAt: e.timestamp,
+				strippedHeaders: n,
+				ownerState: o,
+				owner: o === "bound" ? e.owner ?? null : void 0
+			});
+			if (!await b(r, e.id)) continue;
+			if (i === null) {
+				await x(r, e.id);
+				continue;
+			}
+			let s = await fetch(i);
+			s.ok || s.status >= 400 && s.status < 500 ? await x(r, e.id) : u += 1;
 		} catch {
-			i += 1;
+			u += 1;
 		}
 	}
-	if (i > 0) throw Error(`background-sync: ${i} request(s) still pending`);
+	if (u > 0) throw Error(`background-sync: ${u} request(s) still pending`);
 }
-function u(e, t, n) {
+var j = /* @__PURE__ */ new Map();
+function M(e) {
+	let t = j.get(e.name);
+	if (t) return t;
+	let n = A(e, Date.now()).finally(() => {
+		j.delete(e.name);
+	});
+	return j.set(e.name, n), n;
+}
+function N(e, t, n) {
 	return e ? typeof e == "function" ? e(t, n) : e.test(t.href) : !0;
 }
-function d(t = {}) {
-	let n = e(), { match: r, queueName: a = "tempest-bg-sync", maxRetentionMinutes: o = 1440, periodicSyncTag: c = `${t.queueName ?? "tempest-bg-sync"}-periodic` } = t, d = o * 60 * 1e3;
-	n.addEventListener("fetch", (e) => {
+async function P(e, t, n, r) {
+	let i = T(), a = await w(n, {
+		url: r.url,
+		method: r.method,
+		phase: "enqueue"
+	}, i.promise);
+	i.cancel(), await v(e, t, a ? a.hasPrincipal ? "bound" : "unbound" : "unknown", a?.owner);
+}
+function F(e = {}) {
+	let a = r(), { match: o, queueName: s = i, maxRetentionMinutes: c = 1440, periodicSyncTag: l = `${e.queueName ?? i}-periodic`, credentialHeaders: u = t, beforeReplay: d } = e, f = n(u), p = {
+		sw: a,
+		name: s,
+		maxRetentionMs: c * 60 * 1e3,
+		credentialHeaders: f,
+		beforeReplay: d
+	};
+	a.addEventListener("fetch", (e) => {
 		let t = e.request;
 		if (t.method === "GET" || t.method === "HEAD") return;
-		let o = new URL(t.url);
-		u(r, o, t) && e.respondWith(fetch(t.clone()).catch(async (e) => {
-			let r = await s(t, Date.now());
-			await i(a, r);
-			try {
-				await n.registration.sync?.register(a);
-			} catch {}
-			throw e;
-		}));
-	}), n.addEventListener("sync", (e) => {
-		e.tag === a && e.waitUntil(l(a, d, Date.now()));
-	}), n.addEventListener("periodicsync", (e) => {
-		e.tag === c && e.waitUntil(l(a, d, Date.now()).catch(() => void 0));
-	}), n.addEventListener("fetch", (e) => {
-		n.registration.sync || e.request.method === "GET" && e.waitUntil(l(a, d, Date.now()).catch(() => void 0));
+		let n = new URL(t.url);
+		if (!N(o, n, t)) return;
+		let r = g(s, f);
+		r.catch(() => void 0);
+		let i = fetch(t.clone()), c = i.then(() => void 0, async () => {
+			let n = e.clientId ? await a.clients?.get(e.clientId) : void 0, i = await S(t, Date.now(), f, n ? "pending" : "unknown"), o = await _(s, i, await r, f);
+			if (o !== void 0) {
+				try {
+					await a.registration.sync?.register(s);
+				} catch {}
+				return n ? {
+					id: o,
+					issuer: n
+				} : void 0;
+			}
+		});
+		e.respondWith(i.catch(async (e) => {
+			throw await c, e;
+		})), e.waitUntil(c.then((e) => e ? P(s, e.id, e.issuer, t) : void 0).catch(() => void 0));
+	}), a.addEventListener("sync", (e) => {
+		e.tag === s && e.waitUntil(M(p));
+	}), a.addEventListener("periodicsync", (e) => {
+		e.tag === l && e.waitUntil(M(p).catch(() => void 0));
+	}), a.addEventListener("fetch", (e) => {
+		a.registration.sync || e.request.method === "GET" && e.waitUntil(M(p).catch(() => void 0));
 	});
 }
+async function I(e = i) {
+	if (typeof indexedDB > "u") return !1;
+	let t = await m(e), n = t.transaction([o, s], "readwrite");
+	n.objectStore(o).clear();
+	let r = n.objectStore(s), a = r.get(c);
+	return a.onsuccess = () => {
+		r.put((a.result ?? 0) + 1, c);
+	}, await h(n), t.close(), !0;
+}
+async function L(e) {
+	if (e == null || e === "") return null;
+	let t = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(`tempest-bg-sync:${e}`));
+	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}
+function R(e, t = {}) {
+	if (typeof navigator > "u" || !navigator.serviceWorker) return () => void 0;
+	let n = navigator.serviceWorker, { getPrincipal: r } = t, i = (t) => {
+		let n = t.data, i = t.ports[0];
+		if (n?.type !== "tempest:bg-sync-credentials" || !i) return;
+		let a = {
+			url: String(n.url),
+			method: String(n.method),
+			phase: n.phase === "enqueue" ? "enqueue" : "replay"
+		};
+		(async () => {
+			try {
+				let t = { headers: a.phase === "enqueue" ? null : await e(a) };
+				r && (t.owner = await L(await r())), i.postMessage(t);
+			} catch {
+				i.postMessage({ error: !0 });
+			}
+		})();
+	};
+	return n.addEventListener("message", i), () => n.removeEventListener("message", i);
+}
 //#endregion
-export { d as installBackgroundSync };
+export { l as BACKGROUND_SYNC_CREDENTIALS_MESSAGE, I as clearBackgroundSyncQueue, F as installBackgroundSync, R as provideBackgroundSyncCredentials };
 
 //# sourceMappingURL=background-sync.js.map