tempest-react-sdk 0.78.0 → 0.79.0

package/dist/share/share.js.map

@@ -1 +1 @@
-{"version":3,"file":"share.js","names":[],"sources":["../../src/share/share.ts"],"sourcesContent":["export interface SharePayload {\n    title?: string;\n    text?: string;\n    url?: string;\n    /** Files to share (supported only on a subset of browsers). */\n    files?: File[];\n}\n\nexport interface ShareResult {\n    /** True when `navigator.share` resolved successfully. */\n    shared: boolean;\n    /** True when the platform did not support the requested payload. */\n    unsupported: boolean;\n    /** True when the user cancelled the share dialog. */\n    cancelled: boolean;\n    error?: unknown;\n}\n\n/**\n * Wrap the Web Share API with a uniform result object. Falls through to\n * `unsupported: true` when the browser lacks `navigator.share`, leaving the\n * caller free to render a custom fallback (copy-link, social buttons).\n */\nexport async function share(payload: SharePayload): Promise<ShareResult> {\n    if (typeof navigator === \"undefined\" || !(\"share\" in navigator)) {\n        return { shared: false, unsupported: true, cancelled: false };\n    }\n    if (payload.files && !navigator.canShare?.({ files: payload.files })) {\n        return { shared: false, unsupported: true, cancelled: false };\n    }\n    try {\n        await navigator.share(payload);\n        return { shared: true, unsupported: false, cancelled: false };\n    } catch (error) {\n        if (error instanceof DOMException && error.name === \"AbortError\") {\n            return { shared: false, unsupported: false, cancelled: true };\n        }\n        return { shared: false, unsupported: false, cancelled: false, error };\n    }\n}\n\n/** True when the Web Share API is available in this environment. */\nexport function isShareSupported(): boolean {\n    return typeof navigator !== \"undefined\" && \"share\" in navigator;\n}\n"],"mappings":";AAuBA,eAAsB,EAAM,GAA6C;CAIrE,IAHI,OAAO,YAAc,OAAe,EAAE,WAAW,cAGjD,EAAQ,SAAS,CAAC,UAAU,WAAW,EAAE,OAAO,EAAQ,MAAM,CAAC,GAC/D,OAAO;EAAE,QAAQ;EAAO,aAAa;EAAM,WAAW;CAAM;CAEhE,IAAI;EAEA,OADA,MAAM,UAAU,MAAM,CAAO,GACtB;GAAE,QAAQ;GAAM,aAAa;GAAO,WAAW;EAAM;CAChE,SAAS,GAAO;EAIZ,OAHI,aAAiB,gBAAgB,EAAM,SAAS,eACzC;GAAE,QAAQ;GAAO,aAAa;GAAO,WAAW;EAAK,IAEzD;GAAE,QAAQ;GAAO,aAAa;GAAO,WAAW;GAAO;EAAM;CACxE;AACJ;AAGA,SAAgB,IAA4B;CACxC,OAAO,OAAO,YAAc,OAAe,WAAW;AAC1D"}
+{"version":3,"file":"share.js","names":["share","payload","error","isShareSupported"],"sources":["../../src/share/share.ts"],"sourcesContent":["export interface SharePayload {\n    title?: string;\n    text?: string;\n    url?: string;\n    /** Files to share (supported only on a subset of browsers). */\n    files?: File[];\n}\n\nexport interface ShareResult {\n    /** True when `navigator.share` resolved successfully. */\n    shared: boolean;\n    /** True when the platform did not support the requested payload. */\n    unsupported: boolean;\n    /** True when the user cancelled the share dialog. */\n    cancelled: boolean;\n    error?: unknown;\n}\n\n/**\n * Wrap the Web Share API with a uniform result object. Falls through to\n * `unsupported: true` when the browser lacks `navigator.share`, leaving the\n * caller free to render a custom fallback (copy-link, social buttons).\n */\nexport async function share(payload: SharePayload): Promise<ShareResult> {\n    if (typeof navigator === \"undefined\" || !(\"share\" in navigator)) {\n        return { shared: false, unsupported: true, cancelled: false };\n    }\n    if (payload.files && !navigator.canShare?.({ files: payload.files })) {\n        return { shared: false, unsupported: true, cancelled: false };\n    }\n    try {\n        await navigator.share(payload);\n        return { shared: true, unsupported: false, cancelled: false };\n    } catch (error) {\n        if (error instanceof DOMException && error.name === \"AbortError\") {\n            return { shared: false, unsupported: false, cancelled: true };\n        }\n        return { shared: false, unsupported: false, cancelled: false, error };\n    }\n}\n\n/** True when the Web Share API is available in this environment. */\nexport function isShareSupported(): boolean {\n    return typeof navigator !== \"undefined\" && \"share\" in navigator;\n}\n"],"mappings":";AAuBA,eAAsBA,EAAM,GAA6C;CAIrE,IAHI,OAAO,YAAc,OAAe,EAAE,WAAW,cAGjDC,EAAQ,SAAS,CAAC,UAAU,WAAW,EAAE,OAAOA,EAAQ,MAAM,CAAC,GAC/D,OAAO;EAAE,QAAQ;EAAO,aAAa;EAAM,WAAW;CAAM;CAEhE,IAAI;EAEA,OADA,MAAM,UAAU,MAAMA,CAAO,GACtB;GAAE,QAAQ;GAAM,aAAa;GAAO,WAAW;EAAM;CAChE,SAASC,GAAO;EAIZ,OAHIA,aAAiB,gBAAgBA,EAAM,SAAS,eACzC;GAAE,QAAQ;GAAO,aAAa;GAAO,WAAW;EAAK,IAEzD;GAAE,QAAQ;GAAO,aAAa;GAAO,WAAW;GAAO;EAAM;CACxE;AACJ;AAGA,SAAgBC,IAA4B;CACxC,OAAO,OAAO,YAAc,OAAe,WAAW;AAC1D"}

package/dist/sse/create-event-stream.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"create-event-stream.cjs","names":[],"sources":["../../src/sse/create-event-stream.ts"],"sourcesContent":["/**\n * @tempest-limits function-lines — the body is the SSE line protocol — accumulate\n * `data:` lines until a blank line, track `id:` for Last-Event-ID, honour `retry:` —\n * plus the reconnect that uses the id it just tracked.\n */\nimport { decodeFrame } from \"../utils/json-frame\";\nimport type { SchemaIssue, SchemaLike } from \"../utils/schema-like\";\nexport type EventStreamStatus = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport interface EventStreamMessage<T> {\n    /** Server-named event (default `\"message\"`). */\n    event: string;\n    /** Parsed payload — validated when `schema` is set, JSON-decoded when possible, raw string otherwise. */\n    data: T;\n    /** Server-supplied id, if any. */\n    id?: string;\n    /** Raw `MessageEvent` for advanced cases. */\n    raw: MessageEvent;\n}\n\nexport interface CreateEventStreamOptions<T> {\n    /** Send cookies with the EventSource handshake. Default: false. */\n    withCredentials?: boolean;\n    /** Subscribe to named events in addition to `message`. */\n    namedEvents?: readonly string[];\n    /** Treat these named events as heartbeat-only (no callback). Default: `[\"ping\"]`. */\n    heartbeatEvents?: readonly string[];\n    /** Max reconnect attempts. Default: 10. Pass 0 to disable reconnect. */\n    maxRetries?: number;\n    /** Initial backoff in ms; doubles per attempt, capped at `maxBackoff`. Default: 1000. */\n    initialBackoff?: number;\n    /** Maximum backoff in ms. Default: 30000. */\n    maxBackoff?: number;\n    /** Parse `event.data`. Defaults to JSON with raw-string fallback. */\n    parser?: (raw: string) => T;\n    /**\n     * A frame arrived that is not valid JSON, and no `parser` was supplied.\n     *\n     * Registering this drops the frame instead of delivering it: the previous\n     * behaviour handed `onMessage` the raw `string` announced as your message\n     * type, so the failure surfaced later, at the first property access, with\n     * nothing left pointing at the parse. Leave it out and that behaviour is\n     * kept, with a one-time warning in development builds.\n     */\n    onParseError?: (error: unknown, raw: string) => void;\n    /**\n     * Schema every decoded frame must satisfy, from zod, valibot, arktype or\n     * anything else exposing `~standard` or `.safeParse`.\n     *\n     * Without it nothing changes: the payload reaches `onMessage` announced as\n     * `T` on the strength of the type argument alone, which is a promise about\n     * the server that TypeScript cannot keep. With it, a frame that does not\n     * match is **not** delivered — the same rule `onParseError` already follows —\n     * and `onValidationError` hears why. The value delivered is the schema's\n     * output, so coercions and defaults are honoured.\n     *\n     * When `parser` is also supplied, it decodes first and the schema validates\n     * what it returned.\n     *\n     * The validation must be synchronous. A frame is decoded inside the\n     * `message` handler and delivered from it, so an async schema would deliver\n     * frames in whatever order their validations settled; that case is reported\n     * through `onValidationError` instead of awaited.\n     */\n    schema?: SchemaLike<T>;\n    /**\n     * A frame was decoded but the `schema` refused it, so it was dropped.\n     *\n     * The one signal that does not depend on how the app's bundler resolves\n     * `process`: the one-time development warning behind `onParseError` needs\n     * `isDevBuild()` to be able to answer, and this callback is the app's own.\n     */\n    onValidationError?: (issues: SchemaIssue[], raw: string) => void;\n    onOpen?: () => void;\n    onMessage?: (message: EventStreamMessage<T>) => void;\n    onError?: (error: Event) => void;\n    onStatusChange?: (status: EventStreamStatus) => void;\n}\n\nexport interface EventStreamController {\n    close: () => void;\n    /** Force an immediate reconnect, resetting the retry counter. */\n    reconnect: () => void;\n    /** Current connection status. */\n    readonly status: EventStreamStatus;\n}\n\n/**\n * Open a Server-Sent Events stream with automatic exponential-backoff reconnect.\n *\n * Heartbeat events (default `\"ping\"`) keep the socket alive without firing\n * `onMessage`. Pass `withCredentials: true` when the backend authenticates via\n * cookies. Call `close()` from the returned controller to tear down.\n *\n * @param url - Full SSE endpoint URL.\n * @param options - Stream configuration and callbacks.\n * @returns A controller exposing `close`, `reconnect` and the current `status`.\n */\nexport function createEventStream<T = unknown>(\n    url: string,\n    options: CreateEventStreamOptions<T> = {},\n): EventStreamController {\n    const {\n        withCredentials = false,\n        namedEvents = [],\n        heartbeatEvents = [\"ping\"],\n        maxRetries = 10,\n        initialBackoff = 1000,\n        maxBackoff = 30000,\n        parser,\n        onOpen,\n        onMessage,\n        onError,\n        onParseError,\n        schema,\n        onValidationError,\n        onStatusChange,\n    } = options;\n\n    let source: EventSource | null = null;\n    let retryTimer: ReturnType<typeof setTimeout> | null = null;\n    let retries = 0;\n    let status: EventStreamStatus = \"idle\";\n    let closed = false;\n\n    function setStatus(next: EventStreamStatus): void {\n        if (status === next) return;\n        status = next;\n        onStatusChange?.(next);\n    }\n\n    function emit(eventName: string, event: MessageEvent): void {\n        if (heartbeatEvents.includes(eventName)) return;\n        const decoded = decodeFrame<T>(\n            typeof event.data === \"string\" ? event.data : \"\",\n            \"createEventStream\",\n            { parser, onParseError, schema, onValidationError },\n        );\n        if (!decoded.delivered) return;\n        onMessage?.({\n            event: eventName,\n            data: decoded.data,\n            id: event.lastEventId || undefined,\n            raw: event,\n        });\n    }\n\n    function scheduleReconnect(): void {\n        if (closed) return;\n        if (retries >= maxRetries) {\n            setStatus(\"error\");\n            return;\n        }\n        const delay = Math.min(initialBackoff * 2 ** retries, maxBackoff);\n        retries += 1;\n        retryTimer = setTimeout(connect, delay);\n    }\n\n    function connect(): void {\n        if (closed) return;\n        if (source) source.close();\n        setStatus(\"connecting\");\n\n        const es = new EventSource(url, { withCredentials });\n        source = es;\n\n        es.onopen = () => {\n            retries = 0;\n            setStatus(\"open\");\n            onOpen?.();\n        };\n\n        es.onmessage = (event) => emit(\"message\", event);\n        for (const name of namedEvents) {\n            es.addEventListener(name, (event) => emit(name, event as MessageEvent));\n        }\n        for (const name of heartbeatEvents) {\n            es.addEventListener(name, () => {\n                /* heartbeat — keep socket alive */\n            });\n        }\n\n        es.onerror = (event) => {\n            onError?.(event);\n            es.close();\n            source = null;\n            setStatus(\"closed\");\n            scheduleReconnect();\n        };\n    }\n\n    function close(): void {\n        closed = true;\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        if (source) {\n            source.close();\n            source = null;\n        }\n        setStatus(\"closed\");\n    }\n\n    function reconnect(): void {\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        closed = false;\n        connect();\n    }\n\n    connect();\n\n    return {\n        close,\n        reconnect,\n        get status() {\n            return status;\n        },\n    };\n}\n"],"mappings":"2CAkGA,SAAgB,EACZ,EACA,EAAuC,CAAC,EACnB,CACrB,GAAM,CACF,kBAAkB,GAClB,cAAc,CAAC,EACf,kBAAkB,CAAC,MAAM,EACzB,aAAa,GACb,iBAAiB,IACjB,aAAa,IACb,SACA,SACA,YACA,UACA,eACA,SACA,oBACA,kBACA,EAEA,EAA6B,KAC7B,EAAmD,KACnD,EAAU,EACV,EAA4B,OAC5B,EAAS,GAEb,SAAS,EAAU,EAA+B,CAC1C,IAAW,IACf,EAAS,EACT,IAAiB,CAAI,EACzB,CAEA,SAAS,EAAK,EAAmB,EAA2B,CACxD,GAAI,EAAgB,SAAS,CAAS,EAAG,OACzC,IAAM,EAAU,EAAA,YACZ,OAAO,EAAM,MAAS,SAAW,EAAM,KAAO,GAC9C,oBACA,CAAE,SAAQ,eAAc,SAAQ,mBAAkB,CACtD,EACK,EAAQ,WACb,IAAY,CACR,MAAO,EACP,KAAM,EAAQ,KACd,GAAI,EAAM,aAAe,IAAA,GACzB,IAAK,CACT,CAAC,CACL,CAEA,SAAS,GAA0B,CAC/B,GAAI,EAAQ,OACZ,GAAI,GAAW,EAAY,CACvB,EAAU,OAAO,EACjB,MACJ,CACA,IAAM,EAAQ,KAAK,IAAI,EAAiB,GAAK,EAAS,CAAU,EAChE,GAAW,EACX,EAAa,WAAW,EAAS,CAAK,CAC1C,CAEA,SAAS,GAAgB,CACrB,GAAI,EAAQ,OACR,GAAQ,EAAO,MAAM,EACzB,EAAU,YAAY,EAEtB,IAAM,EAAK,IAAI,YAAY,EAAK,CAAE,iBAAgB,CAAC,EACnD,EAAS,EAET,EAAG,WAAe,CACd,EAAU,EACV,EAAU,MAAM,EAChB,IAAS,CACb,EAEA,EAAG,UAAa,GAAU,EAAK,UAAW,CAAK,EAC/C,IAAK,IAAM,KAAQ,EACf,EAAG,iBAAiB,EAAO,GAAU,EAAK,EAAM,CAAqB,CAAC,EAE1E,IAAK,IAAM,KAAQ,EACf,EAAG,iBAAiB,MAAY,CAEhC,CAAC,EAGL,EAAG,QAAW,GAAU,CACpB,IAAU,CAAK,EACf,EAAG,MAAM,EACT,EAAS,KACT,EAAU,QAAQ,EAClB,EAAkB,CACtB,CACJ,CAEA,SAAS,GAAc,CACnB,EAAS,GACT,AAEI,KADA,aAAa,CAAU,EACV,MAEjB,EAAU,EACV,AAEI,KADA,EAAO,MAAM,EACJ,MAEb,EAAU,QAAQ,CACtB,CAEA,SAAS,GAAkB,CACvB,AAEI,KADA,aAAa,CAAU,EACV,MAEjB,EAAU,EACV,EAAS,GACT,EAAQ,CACZ,CAIA,OAFA,EAAQ,EAED,CACH,QACA,YACA,IAAI,QAAS,CACT,OAAO,CACX,CACJ,CACJ"}
+{"version":3,"file":"create-event-stream.cjs","names":["decodeFrame","require_json_frame","createEventStream","options","source","retryTimer","retries","status","closed","setStatus","next","onStatusChange","emit","heartbeatEvents","eventName","decoded","event","onMessage","scheduleReconnect","maxRetries","delay","initialBackoff","maxBackoff","connect","es","url","onOpen","name","namedEvents","onError","close","reconnect"],"sources":["../../src/sse/create-event-stream.ts"],"sourcesContent":["/**\n * @tempest-limits function-lines — the body is the SSE line protocol — accumulate\n * `data:` lines until a blank line, track `id:` for Last-Event-ID, honour `retry:` —\n * plus the reconnect that uses the id it just tracked.\n */\nimport { decodeFrame } from \"../utils/json-frame\";\nimport type { SchemaIssue, SchemaLike } from \"../utils/schema-like\";\nexport type EventStreamStatus = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport interface EventStreamMessage<T> {\n    /** Server-named event (default `\"message\"`). */\n    event: string;\n    /** Parsed payload — validated when `schema` is set, JSON-decoded when possible, raw string otherwise. */\n    data: T;\n    /** Server-supplied id, if any. */\n    id?: string;\n    /** Raw `MessageEvent` for advanced cases. */\n    raw: MessageEvent;\n}\n\nexport interface CreateEventStreamOptions<T> {\n    /** Send cookies with the EventSource handshake. Default: false. */\n    withCredentials?: boolean;\n    /** Subscribe to named events in addition to `message`. */\n    namedEvents?: readonly string[];\n    /** Treat these named events as heartbeat-only (no callback). Default: `[\"ping\"]`. */\n    heartbeatEvents?: readonly string[];\n    /** Max reconnect attempts. Default: 10. Pass 0 to disable reconnect. */\n    maxRetries?: number;\n    /** Initial backoff in ms; doubles per attempt, capped at `maxBackoff`. Default: 1000. */\n    initialBackoff?: number;\n    /** Maximum backoff in ms. Default: 30000. */\n    maxBackoff?: number;\n    /** Parse `event.data`. Defaults to JSON with raw-string fallback. */\n    parser?: (raw: string) => T;\n    /**\n     * A frame arrived that is not valid JSON, and no `parser` was supplied.\n     *\n     * Registering this drops the frame instead of delivering it: the previous\n     * behaviour handed `onMessage` the raw `string` announced as your message\n     * type, so the failure surfaced later, at the first property access, with\n     * nothing left pointing at the parse. Leave it out and that behaviour is\n     * kept, with a one-time warning in development builds.\n     */\n    onParseError?: (error: unknown, raw: string) => void;\n    /**\n     * Schema every decoded frame must satisfy, from zod, valibot, arktype or\n     * anything else exposing `~standard` or `.safeParse`.\n     *\n     * Without it nothing changes: the payload reaches `onMessage` announced as\n     * `T` on the strength of the type argument alone, which is a promise about\n     * the server that TypeScript cannot keep. With it, a frame that does not\n     * match is **not** delivered — the same rule `onParseError` already follows —\n     * and `onValidationError` hears why. The value delivered is the schema's\n     * output, so coercions and defaults are honoured.\n     *\n     * When `parser` is also supplied, it decodes first and the schema validates\n     * what it returned.\n     *\n     * The validation must be synchronous. A frame is decoded inside the\n     * `message` handler and delivered from it, so an async schema would deliver\n     * frames in whatever order their validations settled; that case is reported\n     * through `onValidationError` instead of awaited.\n     */\n    schema?: SchemaLike<T>;\n    /**\n     * A frame was decoded but the `schema` refused it, so it was dropped.\n     *\n     * The one signal that does not depend on how the app's bundler resolves\n     * `process`: the one-time development warning behind `onParseError` needs\n     * `isDevBuild()` to be able to answer, and this callback is the app's own.\n     */\n    onValidationError?: (issues: SchemaIssue[], raw: string) => void;\n    onOpen?: () => void;\n    onMessage?: (message: EventStreamMessage<T>) => void;\n    onError?: (error: Event) => void;\n    onStatusChange?: (status: EventStreamStatus) => void;\n}\n\nexport interface EventStreamController {\n    close: () => void;\n    /** Force an immediate reconnect, resetting the retry counter. */\n    reconnect: () => void;\n    /** Current connection status. */\n    readonly status: EventStreamStatus;\n}\n\n/**\n * Open a Server-Sent Events stream with automatic exponential-backoff reconnect.\n *\n * Heartbeat events (default `\"ping\"`) keep the socket alive without firing\n * `onMessage`. Pass `withCredentials: true` when the backend authenticates via\n * cookies. Call `close()` from the returned controller to tear down.\n *\n * @param url - Full SSE endpoint URL.\n * @param options - Stream configuration and callbacks.\n * @returns A controller exposing `close`, `reconnect` and the current `status`.\n */\nexport function createEventStream<T = unknown>(\n    url: string,\n    options: CreateEventStreamOptions<T> = {},\n): EventStreamController {\n    const {\n        withCredentials = false,\n        namedEvents = [],\n        heartbeatEvents = [\"ping\"],\n        maxRetries = 10,\n        initialBackoff = 1000,\n        maxBackoff = 30000,\n        parser,\n        onOpen,\n        onMessage,\n        onError,\n        onParseError,\n        schema,\n        onValidationError,\n        onStatusChange,\n    } = options;\n\n    let source: EventSource | null = null;\n    let retryTimer: ReturnType<typeof setTimeout> | null = null;\n    let retries = 0;\n    let status: EventStreamStatus = \"idle\";\n    let closed = false;\n\n    function setStatus(next: EventStreamStatus): void {\n        if (status === next) return;\n        status = next;\n        onStatusChange?.(next);\n    }\n\n    function emit(eventName: string, event: MessageEvent): void {\n        if (heartbeatEvents.includes(eventName)) return;\n        const decoded = decodeFrame<T>(\n            typeof event.data === \"string\" ? event.data : \"\",\n            \"createEventStream\",\n            { parser, onParseError, schema, onValidationError },\n        );\n        if (!decoded.delivered) return;\n        onMessage?.({\n            event: eventName,\n            data: decoded.data,\n            id: event.lastEventId || undefined,\n            raw: event,\n        });\n    }\n\n    function scheduleReconnect(): void {\n        if (closed) return;\n        if (retries >= maxRetries) {\n            setStatus(\"error\");\n            return;\n        }\n        const delay = Math.min(initialBackoff * 2 ** retries, maxBackoff);\n        retries += 1;\n        retryTimer = setTimeout(connect, delay);\n    }\n\n    function connect(): void {\n        if (closed) return;\n        if (source) source.close();\n        setStatus(\"connecting\");\n\n        const es = new EventSource(url, { withCredentials });\n        source = es;\n\n        es.onopen = () => {\n            retries = 0;\n            setStatus(\"open\");\n            onOpen?.();\n        };\n\n        es.onmessage = (event) => emit(\"message\", event);\n        for (const name of namedEvents) {\n            es.addEventListener(name, (event) => emit(name, event as MessageEvent));\n        }\n        for (const name of heartbeatEvents) {\n            es.addEventListener(name, () => {\n                /* heartbeat — keep socket alive */\n            });\n        }\n\n        es.onerror = (event) => {\n            onError?.(event);\n            es.close();\n            source = null;\n            setStatus(\"closed\");\n            scheduleReconnect();\n        };\n    }\n\n    function close(): void {\n        closed = true;\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        if (source) {\n            source.close();\n            source = null;\n        }\n        setStatus(\"closed\");\n    }\n\n    function reconnect(): void {\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        closed = false;\n        connect();\n    }\n\n    connect();\n\n    return {\n        close,\n        reconnect,\n        get status() {\n            return status;\n        },\n    };\n}\n"],"mappings":"A,2CAkGA,SAAgBE,EACZ,EACA,EAAuC,CAAC,EACnB,CACrB,GAAM,CACF,kBAAkB,GAClB,cAAc,CAAC,EACf,kBAAkB,CAAC,MAAM,EACzB,aAAa,GACb,iBAAiB,IACjB,aAAa,IACb,SACA,SACA,YACA,UACA,eACA,SACA,oBACA,kBACAC,EAEAC,EAA6B,KAC7BC,EAAmD,KACnDC,EAAU,EACVC,EAA4B,OAC5BC,EAAS,GAEb,SAASC,EAAU,EAA+B,CAC1CF,IAAWG,IACf,EAASA,EACTC,IAAiBD,CAAI,EACzB,CAEA,SAASE,EAAK,EAAmB,EAA2B,CACxD,GAAIC,EAAgB,SAASC,CAAS,EAAG,OACzC,IAAMC,EAAUf,EAAAA,YACZ,OAAOgB,EAAM,MAAS,SAAWA,EAAM,KAAO,GAC9C,oBACA,CAAE,SAAQ,eAAc,SAAQ,mBAAkB,CACtD,EACKD,EAAQ,WACbE,IAAY,CACR,MAAOH,EACP,KAAMC,EAAQ,KACd,GAAIC,EAAM,aAAe,IAAA,GACzB,IAAKA,CACT,CAAC,CACL,CAEA,SAASE,GAA0B,CAC/B,GAAIV,EAAQ,OACZ,GAAIF,GAAWa,EAAY,CACvBV,EAAU,OAAO,EACjB,MACJ,CACA,IAAMW,EAAQ,KAAK,IAAIC,EAAiB,GAAKf,EAASgB,CAAU,EAChE,GAAW,EACX,EAAa,WAAWC,EAASH,CAAK,CAC1C,CAEA,SAASG,GAAgB,CACrB,GAAIf,EAAQ,OACRJ,GAAQA,EAAO,MAAM,EACzBK,EAAU,YAAY,EAEtB,IAAMe,EAAK,IAAI,YAAYC,EAAK,CAAE,iBAAgB,CAAC,EACnD,EAASD,EAET,EAAG,WAAe,CACd,EAAU,EACVf,EAAU,MAAM,EAChBiB,IAAS,CACb,EAEA,EAAG,UAAa,GAAUd,EAAK,UAAWI,CAAK,EAC/C,IAAK,IAAMW,KAAQC,EACfJ,EAAG,iBAAiBG,EAAO,GAAUf,EAAKe,EAAMX,CAAqB,CAAC,EAE1E,IAAK,IAAMW,KAAQd,EACfW,EAAG,iBAAiBG,MAAY,CAEhC,CAAC,EAGL,EAAG,QAAW,GAAU,CACpBE,IAAUb,CAAK,EACfQ,EAAG,MAAM,EACT,EAAS,KACTf,EAAU,QAAQ,EAClBS,EAAkB,CACtB,CACJ,CAEA,SAASY,GAAc,CACnB,EAAS,GACT,AAEIzB,KADA,aAAaA,CAAU,EACV,MAEjB,EAAU,EACV,AAEID,KADAA,EAAO,MAAM,EACJ,MAEbK,EAAU,QAAQ,CACtB,CAEA,SAASsB,GAAkB,CACvB,AAEI1B,KADA,aAAaA,CAAU,EACV,MAEjB,EAAU,EACV,EAAS,GACTkB,EAAQ,CACZ,CAIA,OAFAA,EAAQ,EAED,CACH,QACA,YACA,IAAI,QAAS,CACT,OAAOhB,CACX,CACJ,CACJ,C"}

package/dist/sse/create-event-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-event-stream.js","names":[],"sources":["../../src/sse/create-event-stream.ts"],"sourcesContent":["/**\n * @tempest-limits function-lines — the body is the SSE line protocol — accumulate\n * `data:` lines until a blank line, track `id:` for Last-Event-ID, honour `retry:` —\n * plus the reconnect that uses the id it just tracked.\n */\nimport { decodeFrame } from \"../utils/json-frame\";\nimport type { SchemaIssue, SchemaLike } from \"../utils/schema-like\";\nexport type EventStreamStatus = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport interface EventStreamMessage<T> {\n    /** Server-named event (default `\"message\"`). */\n    event: string;\n    /** Parsed payload — validated when `schema` is set, JSON-decoded when possible, raw string otherwise. */\n    data: T;\n    /** Server-supplied id, if any. */\n    id?: string;\n    /** Raw `MessageEvent` for advanced cases. */\n    raw: MessageEvent;\n}\n\nexport interface CreateEventStreamOptions<T> {\n    /** Send cookies with the EventSource handshake. Default: false. */\n    withCredentials?: boolean;\n    /** Subscribe to named events in addition to `message`. */\n    namedEvents?: readonly string[];\n    /** Treat these named events as heartbeat-only (no callback). Default: `[\"ping\"]`. */\n    heartbeatEvents?: readonly string[];\n    /** Max reconnect attempts. Default: 10. Pass 0 to disable reconnect. */\n    maxRetries?: number;\n    /** Initial backoff in ms; doubles per attempt, capped at `maxBackoff`. Default: 1000. */\n    initialBackoff?: number;\n    /** Maximum backoff in ms. Default: 30000. */\n    maxBackoff?: number;\n    /** Parse `event.data`. Defaults to JSON with raw-string fallback. */\n    parser?: (raw: string) => T;\n    /**\n     * A frame arrived that is not valid JSON, and no `parser` was supplied.\n     *\n     * Registering this drops the frame instead of delivering it: the previous\n     * behaviour handed `onMessage` the raw `string` announced as your message\n     * type, so the failure surfaced later, at the first property access, with\n     * nothing left pointing at the parse. Leave it out and that behaviour is\n     * kept, with a one-time warning in development builds.\n     */\n    onParseError?: (error: unknown, raw: string) => void;\n    /**\n     * Schema every decoded frame must satisfy, from zod, valibot, arktype or\n     * anything else exposing `~standard` or `.safeParse`.\n     *\n     * Without it nothing changes: the payload reaches `onMessage` announced as\n     * `T` on the strength of the type argument alone, which is a promise about\n     * the server that TypeScript cannot keep. With it, a frame that does not\n     * match is **not** delivered — the same rule `onParseError` already follows —\n     * and `onValidationError` hears why. The value delivered is the schema's\n     * output, so coercions and defaults are honoured.\n     *\n     * When `parser` is also supplied, it decodes first and the schema validates\n     * what it returned.\n     *\n     * The validation must be synchronous. A frame is decoded inside the\n     * `message` handler and delivered from it, so an async schema would deliver\n     * frames in whatever order their validations settled; that case is reported\n     * through `onValidationError` instead of awaited.\n     */\n    schema?: SchemaLike<T>;\n    /**\n     * A frame was decoded but the `schema` refused it, so it was dropped.\n     *\n     * The one signal that does not depend on how the app's bundler resolves\n     * `process`: the one-time development warning behind `onParseError` needs\n     * `isDevBuild()` to be able to answer, and this callback is the app's own.\n     */\n    onValidationError?: (issues: SchemaIssue[], raw: string) => void;\n    onOpen?: () => void;\n    onMessage?: (message: EventStreamMessage<T>) => void;\n    onError?: (error: Event) => void;\n    onStatusChange?: (status: EventStreamStatus) => void;\n}\n\nexport interface EventStreamController {\n    close: () => void;\n    /** Force an immediate reconnect, resetting the retry counter. */\n    reconnect: () => void;\n    /** Current connection status. */\n    readonly status: EventStreamStatus;\n}\n\n/**\n * Open a Server-Sent Events stream with automatic exponential-backoff reconnect.\n *\n * Heartbeat events (default `\"ping\"`) keep the socket alive without firing\n * `onMessage`. Pass `withCredentials: true` when the backend authenticates via\n * cookies. Call `close()` from the returned controller to tear down.\n *\n * @param url - Full SSE endpoint URL.\n * @param options - Stream configuration and callbacks.\n * @returns A controller exposing `close`, `reconnect` and the current `status`.\n */\nexport function createEventStream<T = unknown>(\n    url: string,\n    options: CreateEventStreamOptions<T> = {},\n): EventStreamController {\n    const {\n        withCredentials = false,\n        namedEvents = [],\n        heartbeatEvents = [\"ping\"],\n        maxRetries = 10,\n        initialBackoff = 1000,\n        maxBackoff = 30000,\n        parser,\n        onOpen,\n        onMessage,\n        onError,\n        onParseError,\n        schema,\n        onValidationError,\n        onStatusChange,\n    } = options;\n\n    let source: EventSource | null = null;\n    let retryTimer: ReturnType<typeof setTimeout> | null = null;\n    let retries = 0;\n    let status: EventStreamStatus = \"idle\";\n    let closed = false;\n\n    function setStatus(next: EventStreamStatus): void {\n        if (status === next) return;\n        status = next;\n        onStatusChange?.(next);\n    }\n\n    function emit(eventName: string, event: MessageEvent): void {\n        if (heartbeatEvents.includes(eventName)) return;\n        const decoded = decodeFrame<T>(\n            typeof event.data === \"string\" ? event.data : \"\",\n            \"createEventStream\",\n            { parser, onParseError, schema, onValidationError },\n        );\n        if (!decoded.delivered) return;\n        onMessage?.({\n            event: eventName,\n            data: decoded.data,\n            id: event.lastEventId || undefined,\n            raw: event,\n        });\n    }\n\n    function scheduleReconnect(): void {\n        if (closed) return;\n        if (retries >= maxRetries) {\n            setStatus(\"error\");\n            return;\n        }\n        const delay = Math.min(initialBackoff * 2 ** retries, maxBackoff);\n        retries += 1;\n        retryTimer = setTimeout(connect, delay);\n    }\n\n    function connect(): void {\n        if (closed) return;\n        if (source) source.close();\n        setStatus(\"connecting\");\n\n        const es = new EventSource(url, { withCredentials });\n        source = es;\n\n        es.onopen = () => {\n            retries = 0;\n            setStatus(\"open\");\n            onOpen?.();\n        };\n\n        es.onmessage = (event) => emit(\"message\", event);\n        for (const name of namedEvents) {\n            es.addEventListener(name, (event) => emit(name, event as MessageEvent));\n        }\n        for (const name of heartbeatEvents) {\n            es.addEventListener(name, () => {\n                /* heartbeat — keep socket alive */\n            });\n        }\n\n        es.onerror = (event) => {\n            onError?.(event);\n            es.close();\n            source = null;\n            setStatus(\"closed\");\n            scheduleReconnect();\n        };\n    }\n\n    function close(): void {\n        closed = true;\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        if (source) {\n            source.close();\n            source = null;\n        }\n        setStatus(\"closed\");\n    }\n\n    function reconnect(): void {\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        closed = false;\n        connect();\n    }\n\n    connect();\n\n    return {\n        close,\n        reconnect,\n        get status() {\n            return status;\n        },\n    };\n}\n"],"mappings":";;AAkGA,SAAgB,EACZ,GACA,IAAuC,CAAC,GACnB;CACrB,IAAM,EACF,qBAAkB,IAClB,iBAAc,CAAC,GACf,qBAAkB,CAAC,MAAM,GACzB,gBAAa,IACb,oBAAiB,KACjB,gBAAa,KACb,WACA,WACA,cACA,YACA,iBACA,WACA,sBACA,sBACA,GAEA,IAA6B,MAC7B,IAAmD,MACnD,IAAU,GACV,IAA4B,QAC5B,IAAS;CAEb,SAAS,EAAU,GAA+B;EAC1C,MAAW,MACf,IAAS,GACT,IAAiB,CAAI;CACzB;CAEA,SAAS,EAAK,GAAmB,GAA2B;EACxD,IAAI,EAAgB,SAAS,CAAS,GAAG;EACzC,IAAM,IAAU,EACZ,OAAO,EAAM,QAAS,WAAW,EAAM,OAAO,IAC9C,qBACA;GAAE;GAAQ;GAAc;GAAQ;EAAkB,CACtD;EACK,EAAQ,aACb,IAAY;GACR,OAAO;GACP,MAAM,EAAQ;GACd,IAAI,EAAM,eAAe,KAAA;GACzB,KAAK;EACT,CAAC;CACL;CAEA,SAAS,IAA0B;EAC/B,IAAI,GAAQ;EACZ,IAAI,KAAW,GAAY;GACvB,EAAU,OAAO;GACjB;EACJ;EACA,IAAM,IAAQ,KAAK,IAAI,IAAiB,KAAK,GAAS,CAAU;EAEhE,AADA,KAAW,GACX,IAAa,WAAW,GAAS,CAAK;CAC1C;CAEA,SAAS,IAAgB;EACrB,IAAI,GAAQ;EAEZ,AADI,KAAQ,EAAO,MAAM,GACzB,EAAU,YAAY;EAEtB,IAAM,IAAK,IAAI,YAAY,GAAK,EAAE,mBAAgB,CAAC;EASnD,AARA,IAAS,GAET,EAAG,eAAe;GAGd,AAFA,IAAU,GACV,EAAU,MAAM,GAChB,IAAS;EACb,GAEA,EAAG,aAAa,MAAU,EAAK,WAAW,CAAK;EAC/C,KAAK,IAAM,KAAQ,GACf,EAAG,iBAAiB,IAAO,MAAU,EAAK,GAAM,CAAqB,CAAC;EAE1E,KAAK,IAAM,KAAQ,GACf,EAAG,iBAAiB,SAAY,CAEhC,CAAC;EAGL,EAAG,WAAW,MAAU;GAKpB,AAJA,IAAU,CAAK,GACf,EAAG,MAAM,GACT,IAAS,MACT,EAAU,QAAQ,GAClB,EAAkB;EACtB;CACJ;CAEA,SAAS,IAAc;EAWnB,AAVA,IAAS,IACT,AAEI,OADA,aAAa,CAAU,GACV,OAEjB,IAAU,GACV,AAEI,OADA,EAAO,MAAM,GACJ,OAEb,EAAU,QAAQ;CACtB;CAEA,SAAS,IAAkB;EAOvB,AANA,AAEI,OADA,aAAa,CAAU,GACV,OAEjB,IAAU,GACV,IAAS,IACT,EAAQ;CACZ;CAIA,OAFA,EAAQ,GAED;EACH;EACA;EACA,IAAI,SAAS;GACT,OAAO;EACX;CACJ;AACJ"}
+{"version":3,"file":"create-event-stream.js","names":["createEventStream","options","source","retryTimer","retries","status","closed","setStatus","next","onStatusChange","emit","heartbeatEvents","eventName","decoded","decodeFrame","event","onMessage","scheduleReconnect","maxRetries","delay","initialBackoff","maxBackoff","connect","es","url","onOpen","name","namedEvents","onError","close","reconnect"],"sources":["../../src/sse/create-event-stream.ts"],"sourcesContent":["/**\n * @tempest-limits function-lines — the body is the SSE line protocol — accumulate\n * `data:` lines until a blank line, track `id:` for Last-Event-ID, honour `retry:` —\n * plus the reconnect that uses the id it just tracked.\n */\nimport { decodeFrame } from \"../utils/json-frame\";\nimport type { SchemaIssue, SchemaLike } from \"../utils/schema-like\";\nexport type EventStreamStatus = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport interface EventStreamMessage<T> {\n    /** Server-named event (default `\"message\"`). */\n    event: string;\n    /** Parsed payload — validated when `schema` is set, JSON-decoded when possible, raw string otherwise. */\n    data: T;\n    /** Server-supplied id, if any. */\n    id?: string;\n    /** Raw `MessageEvent` for advanced cases. */\n    raw: MessageEvent;\n}\n\nexport interface CreateEventStreamOptions<T> {\n    /** Send cookies with the EventSource handshake. Default: false. */\n    withCredentials?: boolean;\n    /** Subscribe to named events in addition to `message`. */\n    namedEvents?: readonly string[];\n    /** Treat these named events as heartbeat-only (no callback). Default: `[\"ping\"]`. */\n    heartbeatEvents?: readonly string[];\n    /** Max reconnect attempts. Default: 10. Pass 0 to disable reconnect. */\n    maxRetries?: number;\n    /** Initial backoff in ms; doubles per attempt, capped at `maxBackoff`. Default: 1000. */\n    initialBackoff?: number;\n    /** Maximum backoff in ms. Default: 30000. */\n    maxBackoff?: number;\n    /** Parse `event.data`. Defaults to JSON with raw-string fallback. */\n    parser?: (raw: string) => T;\n    /**\n     * A frame arrived that is not valid JSON, and no `parser` was supplied.\n     *\n     * Registering this drops the frame instead of delivering it: the previous\n     * behaviour handed `onMessage` the raw `string` announced as your message\n     * type, so the failure surfaced later, at the first property access, with\n     * nothing left pointing at the parse. Leave it out and that behaviour is\n     * kept, with a one-time warning in development builds.\n     */\n    onParseError?: (error: unknown, raw: string) => void;\n    /**\n     * Schema every decoded frame must satisfy, from zod, valibot, arktype or\n     * anything else exposing `~standard` or `.safeParse`.\n     *\n     * Without it nothing changes: the payload reaches `onMessage` announced as\n     * `T` on the strength of the type argument alone, which is a promise about\n     * the server that TypeScript cannot keep. With it, a frame that does not\n     * match is **not** delivered — the same rule `onParseError` already follows —\n     * and `onValidationError` hears why. The value delivered is the schema's\n     * output, so coercions and defaults are honoured.\n     *\n     * When `parser` is also supplied, it decodes first and the schema validates\n     * what it returned.\n     *\n     * The validation must be synchronous. A frame is decoded inside the\n     * `message` handler and delivered from it, so an async schema would deliver\n     * frames in whatever order their validations settled; that case is reported\n     * through `onValidationError` instead of awaited.\n     */\n    schema?: SchemaLike<T>;\n    /**\n     * A frame was decoded but the `schema` refused it, so it was dropped.\n     *\n     * The one signal that does not depend on how the app's bundler resolves\n     * `process`: the one-time development warning behind `onParseError` needs\n     * `isDevBuild()` to be able to answer, and this callback is the app's own.\n     */\n    onValidationError?: (issues: SchemaIssue[], raw: string) => void;\n    onOpen?: () => void;\n    onMessage?: (message: EventStreamMessage<T>) => void;\n    onError?: (error: Event) => void;\n    onStatusChange?: (status: EventStreamStatus) => void;\n}\n\nexport interface EventStreamController {\n    close: () => void;\n    /** Force an immediate reconnect, resetting the retry counter. */\n    reconnect: () => void;\n    /** Current connection status. */\n    readonly status: EventStreamStatus;\n}\n\n/**\n * Open a Server-Sent Events stream with automatic exponential-backoff reconnect.\n *\n * Heartbeat events (default `\"ping\"`) keep the socket alive without firing\n * `onMessage`. Pass `withCredentials: true` when the backend authenticates via\n * cookies. Call `close()` from the returned controller to tear down.\n *\n * @param url - Full SSE endpoint URL.\n * @param options - Stream configuration and callbacks.\n * @returns A controller exposing `close`, `reconnect` and the current `status`.\n */\nexport function createEventStream<T = unknown>(\n    url: string,\n    options: CreateEventStreamOptions<T> = {},\n): EventStreamController {\n    const {\n        withCredentials = false,\n        namedEvents = [],\n        heartbeatEvents = [\"ping\"],\n        maxRetries = 10,\n        initialBackoff = 1000,\n        maxBackoff = 30000,\n        parser,\n        onOpen,\n        onMessage,\n        onError,\n        onParseError,\n        schema,\n        onValidationError,\n        onStatusChange,\n    } = options;\n\n    let source: EventSource | null = null;\n    let retryTimer: ReturnType<typeof setTimeout> | null = null;\n    let retries = 0;\n    let status: EventStreamStatus = \"idle\";\n    let closed = false;\n\n    function setStatus(next: EventStreamStatus): void {\n        if (status === next) return;\n        status = next;\n        onStatusChange?.(next);\n    }\n\n    function emit(eventName: string, event: MessageEvent): void {\n        if (heartbeatEvents.includes(eventName)) return;\n        const decoded = decodeFrame<T>(\n            typeof event.data === \"string\" ? event.data : \"\",\n            \"createEventStream\",\n            { parser, onParseError, schema, onValidationError },\n        );\n        if (!decoded.delivered) return;\n        onMessage?.({\n            event: eventName,\n            data: decoded.data,\n            id: event.lastEventId || undefined,\n            raw: event,\n        });\n    }\n\n    function scheduleReconnect(): void {\n        if (closed) return;\n        if (retries >= maxRetries) {\n            setStatus(\"error\");\n            return;\n        }\n        const delay = Math.min(initialBackoff * 2 ** retries, maxBackoff);\n        retries += 1;\n        retryTimer = setTimeout(connect, delay);\n    }\n\n    function connect(): void {\n        if (closed) return;\n        if (source) source.close();\n        setStatus(\"connecting\");\n\n        const es = new EventSource(url, { withCredentials });\n        source = es;\n\n        es.onopen = () => {\n            retries = 0;\n            setStatus(\"open\");\n            onOpen?.();\n        };\n\n        es.onmessage = (event) => emit(\"message\", event);\n        for (const name of namedEvents) {\n            es.addEventListener(name, (event) => emit(name, event as MessageEvent));\n        }\n        for (const name of heartbeatEvents) {\n            es.addEventListener(name, () => {\n                /* heartbeat — keep socket alive */\n            });\n        }\n\n        es.onerror = (event) => {\n            onError?.(event);\n            es.close();\n            source = null;\n            setStatus(\"closed\");\n            scheduleReconnect();\n        };\n    }\n\n    function close(): void {\n        closed = true;\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        if (source) {\n            source.close();\n            source = null;\n        }\n        setStatus(\"closed\");\n    }\n\n    function reconnect(): void {\n        if (retryTimer) {\n            clearTimeout(retryTimer);\n            retryTimer = null;\n        }\n        retries = 0;\n        closed = false;\n        connect();\n    }\n\n    connect();\n\n    return {\n        close,\n        reconnect,\n        get status() {\n            return status;\n        },\n    };\n}\n"],"mappings":";;AAkGA,SAAgBA,EACZ,GACA,IAAuC,CAAC,GACnB;CACrB,IAAM,EACF,qBAAkB,IAClB,iBAAc,CAAC,GACf,qBAAkB,CAAC,MAAM,GACzB,gBAAa,IACb,oBAAiB,KACjB,gBAAa,KACb,WACA,WACA,cACA,YACA,iBACA,WACA,sBACA,sBACAC,GAEAC,IAA6B,MAC7BC,IAAmD,MACnDC,IAAU,GACVC,IAA4B,QAC5BC,IAAS;CAEb,SAASC,EAAU,GAA+B;EAC9C,AAAIF,MAAWG,MACf,IAASA,GACTC,IAAiBD,CAAI;CACzB;CAEA,SAASE,EAAK,GAAmB,GAA2B;EACxD,IAAIC,EAAgB,SAASC,CAAS,GAAG;EACzC,IAAMC,IAAUC,EACZ,OAAOC,EAAM,QAAS,WAAWA,EAAM,OAAO,IAC9C,qBACA;GAAE;GAAQ;GAAc;GAAQ;EAAkB,CACtD;EACA,AAAKF,EAAQ,aACbG,IAAY;GACR,OAAOJ;GACP,MAAMC,EAAQ;GACd,IAAIE,EAAM,eAAe,KAAA;GACzB,KAAKA;EACT,CAAC;CACL;CAEA,SAASE,IAA0B;EAC/B,IAAIX,GAAQ;EACZ,IAAIF,KAAWc,GAAY;GACvB,EAAU,OAAO;GACjB;EACJ;EACA,IAAMC,IAAQ,KAAK,IAAIC,IAAiB,KAAKhB,GAASiB,CAAU;EAEhE,AADA,KAAW,GACX,IAAa,WAAWC,GAASH,CAAK;CAC1C;CAEA,SAASG,IAAgB;EACrB,IAAIhB,GAAQ;EAEZ,AADIJ,KAAQA,EAAO,MAAM,GACzBK,EAAU,YAAY;EAEtB,IAAMgB,IAAK,IAAI,YAAYC,GAAK,EAAE,mBAAgB,CAAC;EASnD,AARA,IAASD,GAET,EAAG,eAAe;GAGd,AAFA,IAAU,GACVhB,EAAU,MAAM,GAChBkB,IAAS;EACb,GAEA,EAAG,aAAa,MAAUf,EAAK,WAAWK,CAAK;EAC/C,KAAK,IAAMW,KAAQC,GACf,EAAG,iBAAiBD,IAAO,MAAUhB,EAAKgB,GAAMX,CAAqB,CAAC;EAE1E,KAAK,IAAMW,KAAQf,GACf,EAAG,iBAAiBe,SAAY,CAEhC,CAAC;EAGL,EAAG,WAAW,MAAU;GAKpB,AAJAE,IAAUb,CAAK,GACfQ,EAAG,MAAM,GACT,IAAS,MACThB,EAAU,QAAQ,GAClBU,EAAkB;EACtB;CACJ;CAEA,SAASY,IAAc;EAWnB,AAVA,IAAS,IACT,AAEI1B,OADA,aAAaA,CAAU,GACV,OAEjB,IAAU,GACV,AAEID,OADAA,EAAO,MAAM,GACJ,OAEbK,EAAU,QAAQ;CACtB;CAEA,SAASuB,IAAkB;EAOvB,AANA,AAEI3B,OADA,aAAaA,CAAU,GACV,OAEjB,IAAU,GACV,IAAS,IACTmB,EAAQ;CACZ;CAIA,OAFAA,EAAQ,GAED;EACH;EACA;EACA,IAAI,SAAS;GACT,OAAOjB;EACX;CACJ;AACJ"}

package/dist/sse/use-event-stream.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-event-stream.cjs","names":[],"sources":["../../src/sse/use-event-stream.ts"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport { useLatestRef } from \"@/hooks/use-latest-ref\";\nimport {\n    createEventStream,\n    type CreateEventStreamOptions,\n    type EventStreamMessage,\n    type EventStreamStatus,\n} from \"./create-event-stream\";\n\nexport interface UseEventStreamOptions<T> extends Omit<\n    CreateEventStreamOptions<T>,\n    \"onStatusChange\"\n> {\n    /** When false, the stream is not opened. Useful for \"wait for auth\". Default: true. */\n    enabled?: boolean;\n}\n\nexport interface UseEventStreamResult<T> {\n    status: EventStreamStatus;\n    /** Last message received (excluding heartbeats). */\n    lastMessage: EventStreamMessage<T> | null;\n    /** Force a reconnect. */\n    reconnect: () => void;\n}\n\n/**\n * React hook wrapper around {@link createEventStream}. Connection lifecycle is\n * tied to the component (and the `url`/`enabled` dependencies); the stream\n * closes on unmount.\n *\n * Pass `schema` to have every frame validated before it reaches `onMessage`,\n * instead of trusting the type argument: without it `data` is announced as `T`\n * on the strength of the generic alone, which is a promise about the server\n * that TypeScript cannot keep. It is read when the stream opens, so declare it\n * outside the component rather than building one inline per render.\n *\n * @example\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     enabled: !!user,\n *     withCredentials: true,\n *     onMessage: ({ data }) => addNotification(data),\n * });\n *\n * @example\n * // Validated: a frame that does not match never reaches `onMessage`\n * const notificationSchema = z.object({ id: z.string(), message: z.string() });\n *\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     schema: notificationSchema,\n *     onValidationError: (issues) => logger.warn(\"stream drift\", { issues }),\n *     onMessage: ({ data }) => addNotification(data),\n * });\n */\nexport function useEventStream<T = unknown>(\n    url: string,\n    options: UseEventStreamOptions<T> = {},\n): UseEventStreamResult<T> {\n    const { enabled = true, onMessage, ...rest } = options;\n    const [status, setStatus] = useState<EventStreamStatus>(\"idle\");\n    const [lastMessage, setLastMessage] = useState<EventStreamMessage<T> | null>(null);\n    const reconnectRef = useRef<(() => void) | null>(null);\n\n    const onMessageRef = useLatestRef(onMessage);\n\n    useEffect(() => {\n        if (!enabled || !url) {\n            setStatus(\"idle\");\n            return;\n        }\n\n        const controller = createEventStream<T>(url, {\n            ...rest,\n            onStatusChange: setStatus,\n            onMessage: (message) => {\n                setLastMessage(message);\n                onMessageRef.current?.(message);\n            },\n        });\n        reconnectRef.current = controller.reconnect;\n\n        return () => {\n            controller.close();\n            reconnectRef.current = null;\n        };\n        // eslint-disable-next-line react-hooks/exhaustive-deps\n    }, [url, enabled]);\n\n    return {\n        status,\n        lastMessage,\n        reconnect: () => reconnectRef.current?.(),\n    };\n}\n"],"mappings":"6GAqDA,SAAgB,EACZ,EACA,EAAoC,CAAC,EACd,CACvB,GAAM,CAAE,UAAU,GAAM,YAAW,GAAG,GAAS,EACzC,CAAC,EAAQ,IAAA,EAAa,EAAA,SAAA,CAA4B,MAAM,EACxD,CAAC,EAAa,IAAA,EAAkB,EAAA,SAAA,CAAuC,IAAI,EAC3E,GAAA,EAAe,EAAA,OAAA,CAA4B,IAAI,EAE/C,EAAe,EAAA,aAAa,CAAS,EAyB3C,OAvBA,EAAA,EAAA,UAAA,KAAgB,CACZ,GAAI,CAAC,GAAW,CAAC,EAAK,CAClB,EAAU,MAAM,EAChB,MACJ,CAEA,IAAM,EAAa,EAAA,kBAAqB,EAAK,CACzC,GAAG,EACH,eAAgB,EAChB,UAAY,GAAY,CACpB,EAAe,CAAO,EACtB,EAAa,UAAU,CAAO,CAClC,CACJ,CAAC,EAGD,MAFA,GAAa,QAAU,EAAW,cAErB,CACT,EAAW,MAAM,EACjB,EAAa,QAAU,IAC3B,CAEJ,EAAG,CAAC,EAAK,CAAO,CAAC,EAEV,CACH,SACA,cACA,cAAiB,EAAa,UAAU,CAC5C,CACJ"}
+{"version":3,"file":"use-event-stream.cjs","names":["useState","useRef","useLatestRef","createEventStream","require_use_latest_ref","require_create_event_stream","react","useEventStream","rest","options","status","setStatus","lastMessage","setLastMessage","reconnectRef","onMessageRef","onMessage","enabled","url","controller","message"],"sources":["../../src/sse/use-event-stream.ts"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport { useLatestRef } from \"@/hooks/use-latest-ref\";\nimport {\n    createEventStream,\n    type CreateEventStreamOptions,\n    type EventStreamMessage,\n    type EventStreamStatus,\n} from \"./create-event-stream\";\n\nexport interface UseEventStreamOptions<T> extends Omit<\n    CreateEventStreamOptions<T>,\n    \"onStatusChange\"\n> {\n    /** When false, the stream is not opened. Useful for \"wait for auth\". Default: true. */\n    enabled?: boolean;\n}\n\nexport interface UseEventStreamResult<T> {\n    status: EventStreamStatus;\n    /** Last message received (excluding heartbeats). */\n    lastMessage: EventStreamMessage<T> | null;\n    /** Force a reconnect. */\n    reconnect: () => void;\n}\n\n/**\n * React hook wrapper around {@link createEventStream}. Connection lifecycle is\n * tied to the component (and the `url`/`enabled` dependencies); the stream\n * closes on unmount.\n *\n * Pass `schema` to have every frame validated before it reaches `onMessage`,\n * instead of trusting the type argument: without it `data` is announced as `T`\n * on the strength of the generic alone, which is a promise about the server\n * that TypeScript cannot keep. It is read when the stream opens, so declare it\n * outside the component rather than building one inline per render.\n *\n * @example\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     enabled: !!user,\n *     withCredentials: true,\n *     onMessage: ({ data }) => addNotification(data),\n * });\n *\n * @example\n * // Validated: a frame that does not match never reaches `onMessage`\n * const notificationSchema = z.object({ id: z.string(), message: z.string() });\n *\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     schema: notificationSchema,\n *     onValidationError: (issues) => logger.warn(\"stream drift\", { issues }),\n *     onMessage: ({ data }) => addNotification(data),\n * });\n */\nexport function useEventStream<T = unknown>(\n    url: string,\n    options: UseEventStreamOptions<T> = {},\n): UseEventStreamResult<T> {\n    const { enabled = true, onMessage, ...rest } = options;\n    const [status, setStatus] = useState<EventStreamStatus>(\"idle\");\n    const [lastMessage, setLastMessage] = useState<EventStreamMessage<T> | null>(null);\n    const reconnectRef = useRef<(() => void) | null>(null);\n\n    const onMessageRef = useLatestRef(onMessage);\n\n    useEffect(() => {\n        if (!enabled || !url) {\n            setStatus(\"idle\");\n            return;\n        }\n\n        const controller = createEventStream<T>(url, {\n            ...rest,\n            onStatusChange: setStatus,\n            onMessage: (message) => {\n                setLastMessage(message);\n                onMessageRef.current?.(message);\n            },\n        });\n        reconnectRef.current = controller.reconnect;\n\n        return () => {\n            controller.close();\n            reconnectRef.current = null;\n        };\n        // eslint-disable-next-line react-hooks/exhaustive-deps\n    }, [url, enabled]);\n\n    return {\n        status,\n        lastMessage,\n        reconnect: () => reconnectRef.current?.(),\n    };\n}\n"],"mappings":"A,6GAqDA,SAAgBO,EACZ,EACA,EAAoC,CAAC,EACd,CACvB,GAAM,CAAE,UAAU,GAAM,YAAW,GAAGC,GAASC,EACzC,CAACC,EAAQC,IAAA,EAAaX,EAAAA,SAAAA,CAA4B,MAAM,EACxD,CAACY,EAAaC,IAAA,EAAkBb,EAAAA,SAAAA,CAAuC,IAAI,EAC3Ec,GAAA,EAAeb,EAAAA,OAAAA,CAA4B,IAAI,EAE/Cc,EAAeb,EAAAA,aAAac,CAAS,EAyB3C,OAvBA,EAAAV,EAAA,UAAA,KAAgB,CACZ,GAAI,CAACW,GAAW,CAACC,EAAK,CAClBP,EAAU,MAAM,EAChB,MACJ,CAEA,IAAMQ,EAAahB,EAAAA,kBAAqBe,EAAK,CACzC,GAAGV,EACH,eAAgBG,EAChB,UAAY,GAAY,CACpBE,EAAeO,CAAO,EACtBL,EAAa,UAAUK,CAAO,CAClC,CACJ,CAAC,EAGD,MAFA,GAAa,QAAUD,EAAW,cAErB,CACTA,EAAW,MAAM,EACjB,EAAa,QAAU,IAC3B,CAEJ,EAAG,CAACD,EAAKD,CAAO,CAAC,EAEV,CACH,SACA,cACA,cAAiBH,EAAa,UAAU,CAC5C,CACJ,C"}

package/dist/sse/use-event-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-event-stream.js","names":[],"sources":["../../src/sse/use-event-stream.ts"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport { useLatestRef } from \"@/hooks/use-latest-ref\";\nimport {\n    createEventStream,\n    type CreateEventStreamOptions,\n    type EventStreamMessage,\n    type EventStreamStatus,\n} from \"./create-event-stream\";\n\nexport interface UseEventStreamOptions<T> extends Omit<\n    CreateEventStreamOptions<T>,\n    \"onStatusChange\"\n> {\n    /** When false, the stream is not opened. Useful for \"wait for auth\". Default: true. */\n    enabled?: boolean;\n}\n\nexport interface UseEventStreamResult<T> {\n    status: EventStreamStatus;\n    /** Last message received (excluding heartbeats). */\n    lastMessage: EventStreamMessage<T> | null;\n    /** Force a reconnect. */\n    reconnect: () => void;\n}\n\n/**\n * React hook wrapper around {@link createEventStream}. Connection lifecycle is\n * tied to the component (and the `url`/`enabled` dependencies); the stream\n * closes on unmount.\n *\n * Pass `schema` to have every frame validated before it reaches `onMessage`,\n * instead of trusting the type argument: without it `data` is announced as `T`\n * on the strength of the generic alone, which is a promise about the server\n * that TypeScript cannot keep. It is read when the stream opens, so declare it\n * outside the component rather than building one inline per render.\n *\n * @example\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     enabled: !!user,\n *     withCredentials: true,\n *     onMessage: ({ data }) => addNotification(data),\n * });\n *\n * @example\n * // Validated: a frame that does not match never reaches `onMessage`\n * const notificationSchema = z.object({ id: z.string(), message: z.string() });\n *\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     schema: notificationSchema,\n *     onValidationError: (issues) => logger.warn(\"stream drift\", { issues }),\n *     onMessage: ({ data }) => addNotification(data),\n * });\n */\nexport function useEventStream<T = unknown>(\n    url: string,\n    options: UseEventStreamOptions<T> = {},\n): UseEventStreamResult<T> {\n    const { enabled = true, onMessage, ...rest } = options;\n    const [status, setStatus] = useState<EventStreamStatus>(\"idle\");\n    const [lastMessage, setLastMessage] = useState<EventStreamMessage<T> | null>(null);\n    const reconnectRef = useRef<(() => void) | null>(null);\n\n    const onMessageRef = useLatestRef(onMessage);\n\n    useEffect(() => {\n        if (!enabled || !url) {\n            setStatus(\"idle\");\n            return;\n        }\n\n        const controller = createEventStream<T>(url, {\n            ...rest,\n            onStatusChange: setStatus,\n            onMessage: (message) => {\n                setLastMessage(message);\n                onMessageRef.current?.(message);\n            },\n        });\n        reconnectRef.current = controller.reconnect;\n\n        return () => {\n            controller.close();\n            reconnectRef.current = null;\n        };\n        // eslint-disable-next-line react-hooks/exhaustive-deps\n    }, [url, enabled]);\n\n    return {\n        status,\n        lastMessage,\n        reconnect: () => reconnectRef.current?.(),\n    };\n}\n"],"mappings":";;;;AAqDA,SAAgB,EACZ,GACA,IAAoC,CAAC,GACd;CACvB,IAAM,EAAE,aAAU,IAAM,cAAW,GAAG,MAAS,GACzC,CAAC,GAAQ,KAAa,EAA4B,MAAM,GACxD,CAAC,GAAa,KAAkB,EAAuC,IAAI,GAC3E,IAAe,EAA4B,IAAI,GAE/C,IAAe,EAAa,CAAS;CAyB3C,OAvBA,QAAgB;EACZ,IAAI,CAAC,KAAW,CAAC,GAAK;GAClB,EAAU,MAAM;GAChB;EACJ;EAEA,IAAM,IAAa,EAAqB,GAAK;GACzC,GAAG;GACH,gBAAgB;GAChB,YAAY,MAAY;IAEpB,AADA,EAAe,CAAO,GACtB,EAAa,UAAU,CAAO;GAClC;EACJ,CAAC;EAGD,OAFA,EAAa,UAAU,EAAW,iBAErB;GAET,AADA,EAAW,MAAM,GACjB,EAAa,UAAU;EAC3B;CAEJ,GAAG,CAAC,GAAK,CAAO,CAAC,GAEV;EACH;EACA;EACA,iBAAiB,EAAa,UAAU;CAC5C;AACJ"}
+{"version":3,"file":"use-event-stream.js","names":["useEventStream","rest","options","status","setStatus","useState","lastMessage","setLastMessage","reconnectRef","useRef","onMessageRef","useLatestRef","onMessage","useEffect","enabled","url","controller","createEventStream","message"],"sources":["../../src/sse/use-event-stream.ts"],"sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport { useLatestRef } from \"@/hooks/use-latest-ref\";\nimport {\n    createEventStream,\n    type CreateEventStreamOptions,\n    type EventStreamMessage,\n    type EventStreamStatus,\n} from \"./create-event-stream\";\n\nexport interface UseEventStreamOptions<T> extends Omit<\n    CreateEventStreamOptions<T>,\n    \"onStatusChange\"\n> {\n    /** When false, the stream is not opened. Useful for \"wait for auth\". Default: true. */\n    enabled?: boolean;\n}\n\nexport interface UseEventStreamResult<T> {\n    status: EventStreamStatus;\n    /** Last message received (excluding heartbeats). */\n    lastMessage: EventStreamMessage<T> | null;\n    /** Force a reconnect. */\n    reconnect: () => void;\n}\n\n/**\n * React hook wrapper around {@link createEventStream}. Connection lifecycle is\n * tied to the component (and the `url`/`enabled` dependencies); the stream\n * closes on unmount.\n *\n * Pass `schema` to have every frame validated before it reaches `onMessage`,\n * instead of trusting the type argument: without it `data` is announced as `T`\n * on the strength of the generic alone, which is a promise about the server\n * that TypeScript cannot keep. It is read when the stream opens, so declare it\n * outside the component rather than building one inline per render.\n *\n * @example\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     enabled: !!user,\n *     withCredentials: true,\n *     onMessage: ({ data }) => addNotification(data),\n * });\n *\n * @example\n * // Validated: a frame that does not match never reaches `onMessage`\n * const notificationSchema = z.object({ id: z.string(), message: z.string() });\n *\n * useEventStream<Notification>(`${API}/notifications/stream`, {\n *     schema: notificationSchema,\n *     onValidationError: (issues) => logger.warn(\"stream drift\", { issues }),\n *     onMessage: ({ data }) => addNotification(data),\n * });\n */\nexport function useEventStream<T = unknown>(\n    url: string,\n    options: UseEventStreamOptions<T> = {},\n): UseEventStreamResult<T> {\n    const { enabled = true, onMessage, ...rest } = options;\n    const [status, setStatus] = useState<EventStreamStatus>(\"idle\");\n    const [lastMessage, setLastMessage] = useState<EventStreamMessage<T> | null>(null);\n    const reconnectRef = useRef<(() => void) | null>(null);\n\n    const onMessageRef = useLatestRef(onMessage);\n\n    useEffect(() => {\n        if (!enabled || !url) {\n            setStatus(\"idle\");\n            return;\n        }\n\n        const controller = createEventStream<T>(url, {\n            ...rest,\n            onStatusChange: setStatus,\n            onMessage: (message) => {\n                setLastMessage(message);\n                onMessageRef.current?.(message);\n            },\n        });\n        reconnectRef.current = controller.reconnect;\n\n        return () => {\n            controller.close();\n            reconnectRef.current = null;\n        };\n        // eslint-disable-next-line react-hooks/exhaustive-deps\n    }, [url, enabled]);\n\n    return {\n        status,\n        lastMessage,\n        reconnect: () => reconnectRef.current?.(),\n    };\n}\n"],"mappings":";;;;AAqDA,SAAgBA,EACZ,GACA,IAAoC,CAAC,GACd;CACvB,IAAM,EAAE,aAAU,IAAM,cAAW,GAAGC,MAASC,GACzC,CAACC,GAAQC,KAAaC,EAA4B,MAAM,GACxD,CAACC,GAAaC,KAAkBF,EAAuC,IAAI,GAC3EG,IAAeC,EAA4B,IAAI,GAE/CC,IAAeC,EAAaC,CAAS;CAyB3C,OAvBAC,QAAgB;EACZ,IAAI,CAACC,KAAW,CAACC,GAAK;GAClB,EAAU,MAAM;GAChB;EACJ;EAEA,IAAMC,IAAaC,EAAqBF,GAAK;GACzC,GAAGd;GACH,gBAAgBG;GAChB,YAAY,MAAY;IAEpB,AADAG,EAAeW,CAAO,GACtBR,EAAa,UAAUQ,CAAO;GAClC;EACJ,CAAC;EAGD,OAFA,EAAa,UAAUF,EAAW,iBAErB;GAET,AADAA,EAAW,MAAM,GACjB,EAAa,UAAU;EAC3B;CAEJ,GAAG,CAACD,GAAKD,CAAO,CAAC,GAEV;EACH;EACA;EACA,iBAAiBN,EAAa,UAAU;CAC5C;AACJ"}

package/dist/store/create-selectors.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"create-selectors.cjs","names":[],"sources":["../../src/store/create-selectors.ts"],"sourcesContent":["import type { StoreApi, UseBoundStore } from \"zustand\";\n\n/**\n * A bound Zustand hook augmented with auto-generated per-field selector hooks\n * under `.use`. Reading a single field via `store.use.field()` subscribes the\n * component only to that field, avoiding re-renders when unrelated slices change.\n */\nexport type WithSelectors<S> = S extends { getState: () => infer T }\n    ? S & { use: { [K in keyof T]: () => T[K] } }\n    : never;\n\n/**\n * Attach auto-generated selector hooks to a Zustand store. Instead of writing\n * `useStore((s) => s.user)` at every call site, you get `useStore.use.user()`\n * — one memoized selector per top-level state key.\n *\n * @typeParam S - The bound store hook type returned by `create`/{@link createStore}.\n * @param store - The bound Zustand hook.\n * @returns The same hook with a `.use` namespace of field selectors.\n *\n * @example\n * const useCart = createSelectors(\n *     createStore<CartState>((set) => ({ items: [], add: (id) => ... })),\n * );\n * const items = useCart.use.items(); // subscribes only to `items`\n */\nexport function createSelectors<S extends UseBoundStore<StoreApi<object>>>(\n    store: S,\n): WithSelectors<S> {\n    const bound = store as WithSelectors<S>;\n    bound.use = {} as WithSelectors<S>[\"use\"];\n    for (const key of Object.keys(store.getState())) {\n        (bound.use as Record<string, () => unknown>)[key] = () =>\n            store((state) => (state as Record<string, unknown>)[key]);\n    }\n    return bound;\n}\n"],"mappings":"AA0BA,SAAgB,EACZ,EACgB,CAChB,IAAM,EAAQ,EACd,EAAM,IAAM,CAAC,EACb,IAAK,IAAM,KAAO,OAAO,KAAK,EAAM,SAAS,CAAC,EAC1C,EAAO,IAAsC,OACzC,EAAO,GAAW,EAAkC,EAAI,EAEhE,OAAO,CACX"}
+{"version":3,"file":"create-selectors.cjs","names":["createSelectors","bound","store","key","state"],"sources":["../../src/store/create-selectors.ts"],"sourcesContent":["import type { StoreApi, UseBoundStore } from \"zustand\";\n\n/**\n * A bound Zustand hook augmented with auto-generated per-field selector hooks\n * under `.use`. Reading a single field via `store.use.field()` subscribes the\n * component only to that field, avoiding re-renders when unrelated slices change.\n */\nexport type WithSelectors<S> = S extends { getState: () => infer T }\n    ? S & { use: { [K in keyof T]: () => T[K] } }\n    : never;\n\n/**\n * Attach auto-generated selector hooks to a Zustand store. Instead of writing\n * `useStore((s) => s.user)` at every call site, you get `useStore.use.user()`\n * — one memoized selector per top-level state key.\n *\n * @typeParam S - The bound store hook type returned by `create`/{@link createStore}.\n * @param store - The bound Zustand hook.\n * @returns The same hook with a `.use` namespace of field selectors.\n *\n * @example\n * const useCart = createSelectors(\n *     createStore<CartState>((set) => ({ items: [], add: (id) => ... })),\n * );\n * const items = useCart.use.items(); // subscribes only to `items`\n */\nexport function createSelectors<S extends UseBoundStore<StoreApi<object>>>(\n    store: S,\n): WithSelectors<S> {\n    const bound = store as WithSelectors<S>;\n    bound.use = {} as WithSelectors<S>[\"use\"];\n    for (const key of Object.keys(store.getState())) {\n        (bound.use as Record<string, () => unknown>)[key] = () =>\n            store((state) => (state as Record<string, unknown>)[key]);\n    }\n    return bound;\n}\n"],"mappings":"AA0BA,SAAgBA,EACZ,EACgB,CAChB,IAAMC,EAAQC,EACd,EAAM,IAAM,CAAC,EACb,IAAK,IAAMC,KAAO,OAAO,KAAKD,EAAM,SAAS,CAAC,EAC1C,EAAO,IAAsCC,OACzCD,EAAO,GAAWE,EAAkCD,EAAI,EAEhE,OAAOF,CACX,C"}

package/dist/store/create-selectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-selectors.js","names":[],"sources":["../../src/store/create-selectors.ts"],"sourcesContent":["import type { StoreApi, UseBoundStore } from \"zustand\";\n\n/**\n * A bound Zustand hook augmented with auto-generated per-field selector hooks\n * under `.use`. Reading a single field via `store.use.field()` subscribes the\n * component only to that field, avoiding re-renders when unrelated slices change.\n */\nexport type WithSelectors<S> = S extends { getState: () => infer T }\n    ? S & { use: { [K in keyof T]: () => T[K] } }\n    : never;\n\n/**\n * Attach auto-generated selector hooks to a Zustand store. Instead of writing\n * `useStore((s) => s.user)` at every call site, you get `useStore.use.user()`\n * — one memoized selector per top-level state key.\n *\n * @typeParam S - The bound store hook type returned by `create`/{@link createStore}.\n * @param store - The bound Zustand hook.\n * @returns The same hook with a `.use` namespace of field selectors.\n *\n * @example\n * const useCart = createSelectors(\n *     createStore<CartState>((set) => ({ items: [], add: (id) => ... })),\n * );\n * const items = useCart.use.items(); // subscribes only to `items`\n */\nexport function createSelectors<S extends UseBoundStore<StoreApi<object>>>(\n    store: S,\n): WithSelectors<S> {\n    const bound = store as WithSelectors<S>;\n    bound.use = {} as WithSelectors<S>[\"use\"];\n    for (const key of Object.keys(store.getState())) {\n        (bound.use as Record<string, () => unknown>)[key] = () =>\n            store((state) => (state as Record<string, unknown>)[key]);\n    }\n    return bound;\n}\n"],"mappings":";AA0BA,SAAgB,EACZ,GACgB;CAChB,IAAM,IAAQ;CACd,EAAM,MAAM,CAAC;CACb,KAAK,IAAM,KAAO,OAAO,KAAK,EAAM,SAAS,CAAC,GAC1C,EAAO,IAAsC,WACzC,GAAO,MAAW,EAAkC,EAAI;CAEhE,OAAO;AACX"}
+{"version":3,"file":"create-selectors.js","names":["createSelectors","bound","store","key","state"],"sources":["../../src/store/create-selectors.ts"],"sourcesContent":["import type { StoreApi, UseBoundStore } from \"zustand\";\n\n/**\n * A bound Zustand hook augmented with auto-generated per-field selector hooks\n * under `.use`. Reading a single field via `store.use.field()` subscribes the\n * component only to that field, avoiding re-renders when unrelated slices change.\n */\nexport type WithSelectors<S> = S extends { getState: () => infer T }\n    ? S & { use: { [K in keyof T]: () => T[K] } }\n    : never;\n\n/**\n * Attach auto-generated selector hooks to a Zustand store. Instead of writing\n * `useStore((s) => s.user)` at every call site, you get `useStore.use.user()`\n * — one memoized selector per top-level state key.\n *\n * @typeParam S - The bound store hook type returned by `create`/{@link createStore}.\n * @param store - The bound Zustand hook.\n * @returns The same hook with a `.use` namespace of field selectors.\n *\n * @example\n * const useCart = createSelectors(\n *     createStore<CartState>((set) => ({ items: [], add: (id) => ... })),\n * );\n * const items = useCart.use.items(); // subscribes only to `items`\n */\nexport function createSelectors<S extends UseBoundStore<StoreApi<object>>>(\n    store: S,\n): WithSelectors<S> {\n    const bound = store as WithSelectors<S>;\n    bound.use = {} as WithSelectors<S>[\"use\"];\n    for (const key of Object.keys(store.getState())) {\n        (bound.use as Record<string, () => unknown>)[key] = () =>\n            store((state) => (state as Record<string, unknown>)[key]);\n    }\n    return bound;\n}\n"],"mappings":";AA0BA,SAAgBA,EACZ,GACgB;CAChB,IAAMC,IAAQC;CACd,EAAM,MAAM,CAAC;CACb,KAAK,IAAMC,KAAO,OAAO,KAAKD,EAAM,SAAS,CAAC,GAC1C,EAAO,IAAsCC,WACzCD,GAAO,MAAWE,EAAkCD,EAAI;CAEhE,OAAOF;AACX"}

package/dist/store/create-store.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"create-store.cjs","names":[],"sources":["../../src/store/create-store.ts"],"sourcesContent":["import { create } from \"zustand\";\nimport type { StateCreator, StoreApi, UseBoundStore } from \"zustand\";\nimport { persist, createJSONStorage } from \"zustand/middleware\";\nimport type { PersistOptions } from \"zustand/middleware\";\n\n/**\n * Persistence options for {@link createStore}. Mirrors the subset of Zustand's\n * `persist` middleware that apps usually need, with sensible Tempest defaults.\n */\nexport interface CreateStorePersistOptions<T> {\n    /** Storage key (required to enable persistence). */\n    name: string;\n    /** Which Web Storage to use (default: `\"local\"`). */\n    storage?: \"local\" | \"session\";\n    /**\n     * Pick the slice of state to persist. Defaults to persisting the whole\n     * state. Use this to avoid writing transient/derived fields.\n     */\n    partialize?: PersistOptions<T, Partial<T>>[\"partialize\"];\n    /** Persisted schema version, forwarded to Zustand for migrations. */\n    version?: number;\n    /** Migration function forwarded to Zustand's `persist` middleware. */\n    migrate?: PersistOptions<T, Partial<T>>[\"migrate\"];\n}\n\n/**\n * Options accepted by {@link createStore}.\n */\nexport interface CreateStoreOptions<T> {\n    /** Enable `localStorage`/`sessionStorage` persistence for the store. */\n    persist?: CreateStorePersistOptions<T>;\n}\n\n/**\n * Create a typed Zustand store with optional `persist` middleware, wired with\n * Tempest defaults. This is the generic counterpart to `createAuthStore`: use\n * it for any domain slice (cart, preferences, wizard state, …) without\n * re-writing the persistence boilerplate in every app.\n *\n * @typeParam T - The store state shape (state + actions).\n * @param initializer - Standard Zustand `StateCreator` (`(set, get) => state`).\n * @param options - Optional persistence configuration.\n * @returns A bound Zustand hook (`useStore`) with the usual `getState`/`setState`/`subscribe` API.\n *\n * @example\n * interface CartState {\n *     items: string[];\n *     add: (id: string) => void;\n *     clear: () => void;\n * }\n *\n * const useCart = createStore<CartState>(\n *     (set) => ({\n *         items: [],\n *         add: (id) => set((s) => ({ items: [...s.items, id] })),\n *         clear: () => set({ items: [] }),\n *     }),\n *     { persist: { name: \"cart\", partialize: (s) => ({ items: s.items }) } },\n * );\n */\nexport function createStore<T>(\n    initializer: StateCreator<T, [], []>,\n    options: CreateStoreOptions<T> = {},\n): UseBoundStore<StoreApi<T>> {\n    if (!options.persist) {\n        return create<T>()(initializer);\n    }\n\n    const { name, storage = \"local\", partialize, version, migrate } = options.persist;\n    const storageImpl = storage === \"session\" ? () => sessionStorage : () => localStorage;\n\n    return create<T>()(\n        persist(initializer, {\n            name,\n            storage: createJSONStorage(storageImpl),\n            ...(partialize ? { partialize } : {}),\n            ...(version !== undefined ? { version } : {}),\n            ...(migrate ? { migrate } : {}),\n        }),\n    );\n}\n"],"mappings":"yDA4DA,SAAgB,EACZ,EACA,EAAiC,CAAC,EACR,CAC1B,GAAI,CAAC,EAAQ,QACT,OAAA,EAAO,EAAA,OAAA,CAAU,CAAC,CAAC,CAAW,EAGlC,GAAM,CAAE,OAAM,UAAU,QAAS,aAAY,UAAS,WAAY,EAAQ,QACpE,EAAc,IAAY,cAAkB,mBAAuB,aAEzE,OAAA,EAAO,EAAA,OAAA,CAAU,CAAC,EAAA,EACd,EAAA,QAAA,CAAQ,EAAa,CACjB,OACA,SAAA,EAAS,EAAA,kBAAA,CAAkB,CAAW,EACtC,GAAI,EAAa,CAAE,YAAW,EAAI,CAAC,EACnC,GAAI,IAAY,IAAA,GAA0B,CAAC,EAAf,CAAE,SAAQ,EACtC,GAAI,EAAU,CAAE,SAAQ,EAAI,CAAC,CACjC,CAAC,CACL,CACJ"}
+{"version":3,"file":"create-store.cjs","names":["create","persist","createJSONStorage","zustand","zustand_middleware","createStore","options","initializer","storageImpl","storage","partialize","version","migrate"],"sources":["../../src/store/create-store.ts"],"sourcesContent":["import { create } from \"zustand\";\nimport type { StateCreator, StoreApi, UseBoundStore } from \"zustand\";\nimport { persist, createJSONStorage } from \"zustand/middleware\";\nimport type { PersistOptions } from \"zustand/middleware\";\n\n/**\n * Persistence options for {@link createStore}. Mirrors the subset of Zustand's\n * `persist` middleware that apps usually need, with sensible Tempest defaults.\n */\nexport interface CreateStorePersistOptions<T> {\n    /** Storage key (required to enable persistence). */\n    name: string;\n    /** Which Web Storage to use (default: `\"local\"`). */\n    storage?: \"local\" | \"session\";\n    /**\n     * Pick the slice of state to persist. Defaults to persisting the whole\n     * state. Use this to avoid writing transient/derived fields.\n     */\n    partialize?: PersistOptions<T, Partial<T>>[\"partialize\"];\n    /** Persisted schema version, forwarded to Zustand for migrations. */\n    version?: number;\n    /** Migration function forwarded to Zustand's `persist` middleware. */\n    migrate?: PersistOptions<T, Partial<T>>[\"migrate\"];\n}\n\n/**\n * Options accepted by {@link createStore}.\n */\nexport interface CreateStoreOptions<T> {\n    /** Enable `localStorage`/`sessionStorage` persistence for the store. */\n    persist?: CreateStorePersistOptions<T>;\n}\n\n/**\n * Create a typed Zustand store with optional `persist` middleware, wired with\n * Tempest defaults. This is the generic counterpart to `createAuthStore`: use\n * it for any domain slice (cart, preferences, wizard state, …) without\n * re-writing the persistence boilerplate in every app.\n *\n * @typeParam T - The store state shape (state + actions).\n * @param initializer - Standard Zustand `StateCreator` (`(set, get) => state`).\n * @param options - Optional persistence configuration.\n * @returns A bound Zustand hook (`useStore`) with the usual `getState`/`setState`/`subscribe` API.\n *\n * @example\n * interface CartState {\n *     items: string[];\n *     add: (id: string) => void;\n *     clear: () => void;\n * }\n *\n * const useCart = createStore<CartState>(\n *     (set) => ({\n *         items: [],\n *         add: (id) => set((s) => ({ items: [...s.items, id] })),\n *         clear: () => set({ items: [] }),\n *     }),\n *     { persist: { name: \"cart\", partialize: (s) => ({ items: s.items }) } },\n * );\n */\nexport function createStore<T>(\n    initializer: StateCreator<T, [], []>,\n    options: CreateStoreOptions<T> = {},\n): UseBoundStore<StoreApi<T>> {\n    if (!options.persist) {\n        return create<T>()(initializer);\n    }\n\n    const { name, storage = \"local\", partialize, version, migrate } = options.persist;\n    const storageImpl = storage === \"session\" ? () => sessionStorage : () => localStorage;\n\n    return create<T>()(\n        persist(initializer, {\n            name,\n            storage: createJSONStorage(storageImpl),\n            ...(partialize ? { partialize } : {}),\n            ...(version !== undefined ? { version } : {}),\n            ...(migrate ? { migrate } : {}),\n        }),\n    );\n}\n"],"mappings":"A,yDA4DA,SAAgBK,EACZ,EACA,EAAiC,CAAC,EACR,CAC1B,GAAI,CAACC,EAAQ,QACT,OAAA,EAAON,EAAAA,OAAAA,CAAU,CAAC,CAACO,CAAW,EAGlC,GAAM,CAAE,OAAM,UAAU,QAAS,aAAY,UAAS,WAAYD,EAAQ,QACpEE,EAAcC,IAAY,cAAkB,mBAAuB,aAEzE,OAAA,EAAOT,EAAAA,OAAAA,CAAU,CAAC,EAAA,EACdC,EAAAA,QAAAA,CAAQM,EAAa,CACjB,OACA,SAAA,EAASL,EAAAA,kBAAAA,CAAkBM,CAAW,EACtC,GAAIE,EAAa,CAAE,YAAW,EAAI,CAAC,EACnC,GAAIC,IAAY,IAAA,GAA0B,CAAC,EAAf,CAAE,SAAQ,EACtC,GAAIC,EAAU,CAAE,SAAQ,EAAI,CAAC,CACjC,CAAC,CACL,CACJ,C"}

package/dist/store/create-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-store.js","names":[],"sources":["../../src/store/create-store.ts"],"sourcesContent":["import { create } from \"zustand\";\nimport type { StateCreator, StoreApi, UseBoundStore } from \"zustand\";\nimport { persist, createJSONStorage } from \"zustand/middleware\";\nimport type { PersistOptions } from \"zustand/middleware\";\n\n/**\n * Persistence options for {@link createStore}. Mirrors the subset of Zustand's\n * `persist` middleware that apps usually need, with sensible Tempest defaults.\n */\nexport interface CreateStorePersistOptions<T> {\n    /** Storage key (required to enable persistence). */\n    name: string;\n    /** Which Web Storage to use (default: `\"local\"`). */\n    storage?: \"local\" | \"session\";\n    /**\n     * Pick the slice of state to persist. Defaults to persisting the whole\n     * state. Use this to avoid writing transient/derived fields.\n     */\n    partialize?: PersistOptions<T, Partial<T>>[\"partialize\"];\n    /** Persisted schema version, forwarded to Zustand for migrations. */\n    version?: number;\n    /** Migration function forwarded to Zustand's `persist` middleware. */\n    migrate?: PersistOptions<T, Partial<T>>[\"migrate\"];\n}\n\n/**\n * Options accepted by {@link createStore}.\n */\nexport interface CreateStoreOptions<T> {\n    /** Enable `localStorage`/`sessionStorage` persistence for the store. */\n    persist?: CreateStorePersistOptions<T>;\n}\n\n/**\n * Create a typed Zustand store with optional `persist` middleware, wired with\n * Tempest defaults. This is the generic counterpart to `createAuthStore`: use\n * it for any domain slice (cart, preferences, wizard state, …) without\n * re-writing the persistence boilerplate in every app.\n *\n * @typeParam T - The store state shape (state + actions).\n * @param initializer - Standard Zustand `StateCreator` (`(set, get) => state`).\n * @param options - Optional persistence configuration.\n * @returns A bound Zustand hook (`useStore`) with the usual `getState`/`setState`/`subscribe` API.\n *\n * @example\n * interface CartState {\n *     items: string[];\n *     add: (id: string) => void;\n *     clear: () => void;\n * }\n *\n * const useCart = createStore<CartState>(\n *     (set) => ({\n *         items: [],\n *         add: (id) => set((s) => ({ items: [...s.items, id] })),\n *         clear: () => set({ items: [] }),\n *     }),\n *     { persist: { name: \"cart\", partialize: (s) => ({ items: s.items }) } },\n * );\n */\nexport function createStore<T>(\n    initializer: StateCreator<T, [], []>,\n    options: CreateStoreOptions<T> = {},\n): UseBoundStore<StoreApi<T>> {\n    if (!options.persist) {\n        return create<T>()(initializer);\n    }\n\n    const { name, storage = \"local\", partialize, version, migrate } = options.persist;\n    const storageImpl = storage === \"session\" ? () => sessionStorage : () => localStorage;\n\n    return create<T>()(\n        persist(initializer, {\n            name,\n            storage: createJSONStorage(storageImpl),\n            ...(partialize ? { partialize } : {}),\n            ...(version !== undefined ? { version } : {}),\n            ...(migrate ? { migrate } : {}),\n        }),\n    );\n}\n"],"mappings":";;;AA4DA,SAAgB,EACZ,GACA,IAAiC,CAAC,GACR;CAC1B,IAAI,CAAC,EAAQ,SACT,OAAO,EAAU,CAAC,CAAC,CAAW;CAGlC,IAAM,EAAE,SAAM,aAAU,SAAS,eAAY,YAAS,eAAY,EAAQ,SACpE,IAAc,MAAY,kBAAkB,uBAAuB;CAEzE,OAAO,EAAU,CAAC,CACd,EAAQ,GAAa;EACjB;EACA,SAAS,EAAkB,CAAW;EACtC,GAAI,IAAa,EAAE,cAAW,IAAI,CAAC;EACnC,GAAI,MAAY,KAAA,IAA0B,CAAC,IAAf,EAAE,WAAQ;EACtC,GAAI,IAAU,EAAE,WAAQ,IAAI,CAAC;CACjC,CAAC,CACL;AACJ"}
+{"version":3,"file":"create-store.js","names":["createStore","options","create","initializer","storageImpl","storage","persist","createJSONStorage","partialize","version","migrate"],"sources":["../../src/store/create-store.ts"],"sourcesContent":["import { create } from \"zustand\";\nimport type { StateCreator, StoreApi, UseBoundStore } from \"zustand\";\nimport { persist, createJSONStorage } from \"zustand/middleware\";\nimport type { PersistOptions } from \"zustand/middleware\";\n\n/**\n * Persistence options for {@link createStore}. Mirrors the subset of Zustand's\n * `persist` middleware that apps usually need, with sensible Tempest defaults.\n */\nexport interface CreateStorePersistOptions<T> {\n    /** Storage key (required to enable persistence). */\n    name: string;\n    /** Which Web Storage to use (default: `\"local\"`). */\n    storage?: \"local\" | \"session\";\n    /**\n     * Pick the slice of state to persist. Defaults to persisting the whole\n     * state. Use this to avoid writing transient/derived fields.\n     */\n    partialize?: PersistOptions<T, Partial<T>>[\"partialize\"];\n    /** Persisted schema version, forwarded to Zustand for migrations. */\n    version?: number;\n    /** Migration function forwarded to Zustand's `persist` middleware. */\n    migrate?: PersistOptions<T, Partial<T>>[\"migrate\"];\n}\n\n/**\n * Options accepted by {@link createStore}.\n */\nexport interface CreateStoreOptions<T> {\n    /** Enable `localStorage`/`sessionStorage` persistence for the store. */\n    persist?: CreateStorePersistOptions<T>;\n}\n\n/**\n * Create a typed Zustand store with optional `persist` middleware, wired with\n * Tempest defaults. This is the generic counterpart to `createAuthStore`: use\n * it for any domain slice (cart, preferences, wizard state, …) without\n * re-writing the persistence boilerplate in every app.\n *\n * @typeParam T - The store state shape (state + actions).\n * @param initializer - Standard Zustand `StateCreator` (`(set, get) => state`).\n * @param options - Optional persistence configuration.\n * @returns A bound Zustand hook (`useStore`) with the usual `getState`/`setState`/`subscribe` API.\n *\n * @example\n * interface CartState {\n *     items: string[];\n *     add: (id: string) => void;\n *     clear: () => void;\n * }\n *\n * const useCart = createStore<CartState>(\n *     (set) => ({\n *         items: [],\n *         add: (id) => set((s) => ({ items: [...s.items, id] })),\n *         clear: () => set({ items: [] }),\n *     }),\n *     { persist: { name: \"cart\", partialize: (s) => ({ items: s.items }) } },\n * );\n */\nexport function createStore<T>(\n    initializer: StateCreator<T, [], []>,\n    options: CreateStoreOptions<T> = {},\n): UseBoundStore<StoreApi<T>> {\n    if (!options.persist) {\n        return create<T>()(initializer);\n    }\n\n    const { name, storage = \"local\", partialize, version, migrate } = options.persist;\n    const storageImpl = storage === \"session\" ? () => sessionStorage : () => localStorage;\n\n    return create<T>()(\n        persist(initializer, {\n            name,\n            storage: createJSONStorage(storageImpl),\n            ...(partialize ? { partialize } : {}),\n            ...(version !== undefined ? { version } : {}),\n            ...(migrate ? { migrate } : {}),\n        }),\n    );\n}\n"],"mappings":";;;AA4DA,SAAgBA,EACZ,GACA,IAAiC,CAAC,GACR;CAC1B,IAAI,CAACC,EAAQ,SACT,OAAOC,EAAU,CAAC,CAACC,CAAW;CAGlC,IAAM,EAAE,SAAM,aAAU,SAAS,eAAY,YAAS,eAAYF,EAAQ,SACpEG,IAAcC,MAAY,kBAAkB,uBAAuB;CAEzE,OAAOH,EAAU,CAAC,CACdI,EAAQH,GAAa;EACjB;EACA,SAASI,EAAkBH,CAAW;EACtC,GAAII,IAAa,EAAE,cAAW,IAAI,CAAC;EACnC,GAAIC,MAAY,KAAA,IAA0B,CAAC,IAAf,EAAE,WAAQ;EACtC,GAAIC,IAAU,EAAE,WAAQ,IAAI,CAAC;CACjC,CAAC,CACL;AACJ"}

package/dist/sw/background-sync.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"background-sync.cjs","names":[],"sources":["../../src/sw/background-sync.ts"],"sourcesContent":["/**\n * Background-sync helper: queue failed mutating requests (POST/PUT/PATCH/DELETE)\n * while offline and replay them when connectivity returns. A dependency-free\n * take on Workbox's `BackgroundSyncPlugin`, backed by a tiny IndexedDB queue.\n *\n * Import inside your `sw.ts`. Uses the Background Sync API (`registration.sync`)\n * when available, and also replays opportunistically on the next request as a\n * fallback for browsers without it (e.g. Safari).\n *\n * Credential headers (`Authorization` and the rest of\n * {@link DEFAULT_CREDENTIAL_HEADERS}) are never written to IndexedDB: the queue\n * outlives the session, and a stored bearer stayed readable after logout and was\n * replayed with the old identity (reproduced in Chromium 153, 11/10/2026). On\n * replay the worker asks the open pages for the *current* credentials — see\n * {@link provideBackgroundSyncCredentials} — or a custom `beforeReplay` hook.\n * Credentials carried in the URL or the body are out of reach and are stored\n * as sent.\n *\n * @example\n *   import { installBackgroundSync } from \"tempest-react-sdk/sw\";\n *\n *   installBackgroundSync({ match: (url) => url.pathname.startsWith(\"/api/\") });\n */\nimport { isDevBuild } from \"../utils/dev-mode\";\nimport { DEFAULT_CREDENTIAL_HEADERS, credentialHeaderSet } from \"./credential-headers\";\n\ninterface SyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface BgFetchEventLike {\n    request: Request;\n    /** Id of the window client that issued the request, when there is one. */\n    clientId?: string;\n    respondWith(response: Response | Promise<Response>): void;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface PeriodicSyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\n/** Minimal shape of a window client the worker can message. */\ninterface WindowClientLike {\n    postMessage(message: unknown, transfer: Transferable[]): void;\n}\n\ninterface BgSwGlobal {\n    registration: { sync?: { register(tag: string): Promise<void> } };\n    clients?: {\n        matchAll(options: { type: \"window\" }): Promise<readonly WindowClientLike[]>;\n        get(id: string): Promise<WindowClientLike | undefined>;\n    };\n    addEventListener(type: \"sync\", listener: (event: SyncEventLike) => void): void;\n    addEventListener(type: \"fetch\", listener: (event: BgFetchEventLike) => void): void;\n    addEventListener(type: \"periodicsync\", listener: (event: PeriodicSyncEventLike) => void): void;\n}\n\nfunction getSwScope(): BgSwGlobal {\n    return globalThis as unknown as BgSwGlobal;\n}\n\n/**\n * How an entry is tied to whoever queued it:\n * - `\"bound\"`: the issuing page reported a principal (or `null` for nobody);\n *   the entry only goes out while the same one is signed in.\n * - `\"unbound\"`: the issuing page answered without `getPrincipal`.\n * - `\"unknown\"`: nobody could say — no issuing tab, no answer, an error, or an\n *   entry written before owners existed. Fails closed, with or without stripped\n *   credentials: a cookie session rides along on the replay, so an entry with no\n *   credential header is checked like any other.\n *\n * While the worker is still asking, the stored state is `\"pending\"`, which a\n * replay never sees: it waits, then reads a stamp that never came as `\"unknown\"`.\n */\nexport type BackgroundSyncOwnerState = \"bound\" | \"unbound\" | \"unknown\";\n\n/**\n * How the default `beforeReplay` treats an `\"unknown\"` owner on an entry that\n * carried no credential header:\n * - `\"strict\"` (default): it asks the open pages like any other entry — replayed\n *   only when every answer lacks a principal, dropped as soon as one answer has\n *   one, pending while nobody answers.\n * - `\"lenient\"`: it is replayed as-is, without asking (the behavior up to 0.77.0).\n *\n * An entry with stripped credentials always asks, under either policy.\n */\nexport type BackgroundSyncOwnerPolicy = \"strict\" | \"lenient\";\n\n/** A serialized request stored in the queue. */\ninterface QueuedRequest {\n    id?: number;\n    url: string;\n    method: string;\n    headers: [string, string][];\n    body: ArrayBuffer | null;\n    timestamp: number;\n    /** The original `credentials` mode, so cookie-based APIs replay with cookies. */\n    credentials?: RequestCredentials;\n    /** Lower-cased names of the credential headers removed before persisting. */\n    strippedHeaders?: string[];\n    /** Absent on entries written before 0.77 — read as `\"unknown\"`. */\n    ownerState?: BackgroundSyncOwnerState | \"pending\";\n    /** Fingerprint of the principal under `\"bound\"`; `null` for \"nobody signed in\". */\n    owner?: string | null;\n}\n\n/** Default IndexedDB database name (and sync tag) of the background-sync queue. */\nconst DEFAULT_QUEUE_NAME = \"tempest-bg-sync\";\n\n/**\n * Schema version of the queue database. Version 2 adds the `meta` store (the\n * clear epoch) and migrates version-1 entries, scrubbing their plaintext\n * credential headers on first open.\n */\nconst DB_VERSION = 2;\nconst STORE = \"requests\";\nconst META = \"meta\";\nconst EPOCH_KEY = \"epoch\";\n\n/**\n * `type` of the message the worker posts to window clients to ask about a queued\n * request. Answered by {@link provideBackgroundSyncCredentials}.\n */\nexport const BACKGROUND_SYNC_CREDENTIALS_MESSAGE = \"tempest:bg-sync-credentials\";\n\n/** How long the worker waits for the window clients to answer, in milliseconds. */\nconst CREDENTIALS_TIMEOUT_MS = 3000;\n\n/**\n * How long a replay waits on an entry whose owner is still being stamped. Past\n * it (the worker died mid-question), the owner is read as `\"unknown\"`.\n */\nconst OWNER_STAMP_GRACE_MS = CREDENTIALS_TIMEOUT_MS * 2;\n\n/** What a queued request looked like when it was stored, passed to `beforeReplay`. */\nexport interface BackgroundSyncReplayContext {\n    /** Epoch milliseconds of the original failed attempt. */\n    queuedAt: number;\n    /** Lower-cased credential header names stripped before the entry was stored. */\n    strippedHeaders: readonly string[];\n    /** How the entry is tied to its owner. */\n    ownerState: BackgroundSyncOwnerState;\n    /** Owner fingerprint under `\"bound\"` (`null` for nobody); `undefined` otherwise. */\n    owner: string | null | undefined;\n}\n\n/** The request a window client is asked about, as sent by the worker. */\nexport interface BackgroundSyncCredentialsRequest {\n    /** Absolute URL of the queued request. */\n    url: string;\n    /** HTTP method of the queued request. */\n    method: string;\n    /**\n     * `\"enqueue\"` when the worker only wants the owner of a request that just\n     * failed; `\"replay\"` when it is about to send it and needs the credentials.\n     */\n    phase: \"enqueue\" | \"replay\";\n}\n\n/**\n * Resolve the credentials for a queued request: a header record to apply, or\n * `null` when there is no session (the entry is then dropped).\n */\nexport type BackgroundSyncCredentialsProvider = (\n    request: BackgroundSyncCredentialsRequest,\n) => Record<string, string> | null | Promise<Record<string, string> | null>;\n\n/** Options for {@link provideBackgroundSyncCredentials}. */\nexport interface ProvideBackgroundSyncCredentialsOptions {\n    /**\n     * Who is signed in right now — a stable, non-secret id such as the user id;\n     * `null`/`undefined` when nobody is. Read when a request is queued and again\n     * when it is replayed: an entry is only sent while the same principal is\n     * signed in, and dropped otherwise, so a mutation queued by one account is\n     * never sent with another account's credentials even when the app forgets\n     * `clearSessionData()` on logout. Only a SHA-256 fingerprint reaches the\n     * queue, never the value itself. A throw is answered as an explicit error,\n     * which leaves the owner unknown (fail closed).\n     */\n    getPrincipal?: () => string | null | undefined | Promise<string | null | undefined>;\n}\n\n/** Options for {@link installBackgroundSync}. */\nexport interface InstallBackgroundSyncOptions {\n    /**\n     * Which requests to queue on failure. A `RegExp` against the URL or a\n     * predicate. Only non-`GET` requests are ever considered. Default: all\n     * non-`GET` requests.\n     */\n    match?: RegExp | ((url: URL, request: Request) => boolean);\n    /** IndexedDB database name, also used as the sync tag. Default `tempest-bg-sync`. */\n    queueName?: string;\n    /** Drop queued requests older than this (minutes) on replay. Default `1440` (24h). */\n    maxRetentionMinutes?: number;\n    /**\n     * Also drain the queue on the `periodicsync` event carrying this tag,\n     * complementing the one-off `sync` replay so long-pending mutations retry\n     * even without a fresh navigation. Register the periodic sync from the main\n     * thread with {@link registerPeriodicSync}. Default `${queueName}-periodic`.\n     */\n    periodicSyncTag?: string;\n    /**\n     * Header names stripped before a request is persisted — and stripped again on\n     * replay, so entries written by an older version never go out with the\n     * credential they stored. Default {@link DEFAULT_CREDENTIAL_HEADERS}; extend it\n     * for a custom credential header (`[...DEFAULT_CREDENTIAL_HEADERS,\n     * \"x-tenant-key\"]`). Passing `[]` restores the pre-0.77 behavior of\n     * persisting and replaying every header, credentials included.\n     */\n    credentialHeaders?: readonly string[];\n    /**\n     * Prepare each queued request right before it is replayed: return the\n     * request to send (typically with the current credentials applied) or\n     * `null` to drop the entry for good. A thrown error keeps the entry pending.\n     * The context carries the entry's owner, so a custom hook can apply the\n     * same rule as the default.\n     *\n     * Default: only an `\"unbound\"` entry with no stripped credentials (and, under\n     * `ownerPolicy: \"lenient\"`, an `\"unknown\"` one) is replayed as-is, without\n     * asking. Every other entry — credentialed or not —\n     * asks every open window client in parallel (see\n     * {@link provideBackgroundSyncCredentials}) and picks the answer that fits:\n     * - `\"bound\"`: the answer whose owner matches; none among valid answers →\n     *   dropped, never sent anonymously or as somebody else;\n     * - `\"unknown\"`: only when every answer lacks a principal (an app that does\n     *   not use `getPrincipal`); a single answer with one → dropped, since a\n     *   stale tab without `getPrincipal` says nothing about who is signed in\n     *   next to it. This holds for an entry\n     *   with no credential header too, since the browser attaches the cookies of\n     *   whoever is signed in at replay time;\n     * - `\"unbound\"`: any answer, preferring one without a principal.\n     * Then `null` headers drop a credentialed entry, an answer that lacks one of\n     * the stripped headers keeps it pending, and only the stripped names are\n     * re-applied. No valid answer at all keeps it pending until\n     * `maxRetentionMinutes` (and warns once per replay in development builds) —\n     * so a page that never calls {@link provideBackgroundSyncCredentials} leaves\n     * every entry it queued `\"unknown\"`, and none of them is replayed.\n     */\n    /**\n     * How an `\"unknown\"` owner is handled on an entry with no stripped\n     * credentials (see {@link BackgroundSyncOwnerPolicy}). Default `\"strict\"`.\n     *\n     * `\"lenient\"` restores the replay-as-is of 0.77.0 and earlier for an app without sign-in,\n     * where no page ever reports a principal. Do not use it with a cookie\n     * session: the browser attaches on replay the cookie of whoever is signed in\n     * at that moment, so a mutation queued by A whose owner was never stamped\n     * (issuing tab closed, empty `clientId`, stamp lost, legacy entry) goes out\n     * with B's session. Entries with stripped credentials ask the pages either\n     * way. Ignored when a custom `beforeReplay` is given.\n     */\n    ownerPolicy?: BackgroundSyncOwnerPolicy;\n    beforeReplay?: (\n        request: Request,\n        context: BackgroundSyncReplayContext,\n    ) => Request | null | Promise<Request | null>;\n}\n\n/**\n * Move credential headers out of a header list.\n *\n * @returns The remaining headers and the lower-cased names removed.\n */\nfunction splitHeaders(\n    headers: Iterable<[string, string]>,\n    credentialHeaders: ReadonlySet<string>,\n): { kept: [string, string][]; stripped: string[] } {\n    const kept: [string, string][] = [];\n    const stripped: string[] = [];\n    for (const [name, value] of headers) {\n        if (credentialHeaders.has(name.toLowerCase())) stripped.push(name.toLowerCase());\n        else kept.push([name, value]);\n    }\n    return { kept, stripped };\n}\n\n/**\n * Scrub version-1 entries during the upgrade: their credential headers were\n * stored in plaintext, so they are removed from disk on the first open, recorded\n * as stripped, and the owner is marked unknown.\n */\nfunction migrateLegacyEntries(store: IDBObjectStore, credentialHeaders: ReadonlySet<string>): void {\n    const cursorRequest = store.openCursor();\n    cursorRequest.onsuccess = () => {\n        const cursor = cursorRequest.result;\n        if (!cursor) return;\n        const entry = cursor.value as QueuedRequest;\n        const { kept, stripped } = splitHeaders(entry.headers, credentialHeaders);\n        cursor.update({\n            ...entry,\n            headers: kept,\n            strippedHeaders: [...new Set([...(entry.strippedHeaders ?? []), ...stripped])],\n            ownerState: entry.ownerState ?? \"unknown\",\n        });\n        cursor.continue();\n    };\n}\n\nfunction openQueueDb(\n    name: string,\n    credentialHeaders: ReadonlySet<string> = credentialHeaderSet(),\n): Promise<IDBDatabase> {\n    return new Promise((resolve, reject) => {\n        const request = indexedDB.open(name, DB_VERSION);\n        request.onupgradeneeded = (event) => {\n            const db = request.result;\n            if (!db.objectStoreNames.contains(STORE)) {\n                db.createObjectStore(STORE, { keyPath: \"id\", autoIncrement: true });\n            } else if (event.oldVersion < 2 && request.transaction) {\n                migrateLegacyEntries(request.transaction.objectStore(STORE), credentialHeaders);\n            }\n            if (!db.objectStoreNames.contains(META)) db.createObjectStore(META);\n        };\n        request.onsuccess = () => {\n            const db = request.result;\n            db.onversionchange = () => db.close();\n            resolve(db);\n        };\n        request.onerror = () => reject(request.error);\n    });\n}\n\nfunction txDone(tx: IDBTransaction): Promise<void> {\n    return new Promise((resolve, reject) => {\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n        tx.onabort = () => reject(tx.error);\n    });\n}\n\n/** The current clear epoch: bumped by every {@link clearBackgroundSyncQueue}. */\nasync function readEpoch(name: string, credentialHeaders: ReadonlySet<string>): Promise<number> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction(META, \"readonly\");\n    const get = tx.objectStore(META).get(EPOCH_KEY);\n    await txDone(tx);\n    db.close();\n    return (get.result as number | undefined) ?? 0;\n}\n\n/**\n * Add an entry unless the queue was cleared since `epoch` was read — checked in\n * the same transaction as the write, so a logout that lands while the request\n * is still failing never lets it into the next session's queue.\n *\n * @returns The new entry's key, or `undefined` when the clear won.\n */\nasync function enqueue(\n    name: string,\n    entry: QueuedRequest,\n    epoch: number,\n    credentialHeaders: ReadonlySet<string>,\n): Promise<number | undefined> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction([STORE, META], \"readwrite\");\n    let id: number | undefined;\n    const current = tx.objectStore(META).get(EPOCH_KEY);\n    current.onsuccess = () => {\n        if (((current.result as number | undefined) ?? 0) !== epoch) return;\n        const add = tx.objectStore(STORE).add(entry);\n        add.onsuccess = () => {\n            id = add.result as number;\n        };\n    };\n    await txDone(tx);\n    db.close();\n    return id;\n}\n\n/**\n * Record how an entry is owned. A no-op when the entry is already gone\n * (replayed, or the queue was cleared).\n */\nasync function stampOwner(\n    name: string,\n    id: number,\n    ownerState: BackgroundSyncOwnerState,\n    owner: string | null | undefined,\n): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    const store = tx.objectStore(STORE);\n    const get = store.get(id);\n    get.onsuccess = () => {\n        const entry = get.result as QueuedRequest | undefined;\n        if (!entry) return;\n        entry.ownerState = ownerState;\n        if (ownerState === \"bound\") entry.owner = owner ?? null;\n        store.put(entry);\n    };\n    await txDone(tx);\n    db.close();\n}\n\nasync function readAll(\n    name: string,\n    credentialHeaders: ReadonlySet<string>,\n): Promise<QueuedRequest[]> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction(STORE, \"readonly\");\n    const all = await new Promise<QueuedRequest[]>((resolve, reject) => {\n        const req = tx.objectStore(STORE).getAll();\n        req.onsuccess = () => resolve(req.result as QueuedRequest[]);\n        req.onerror = () => reject(req.error);\n    });\n    db.close();\n    return all;\n}\n\n/** Whether an entry is still in the queue — `false` once it was cleared. */\nasync function stillQueued(name: string, id: number): Promise<boolean> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readonly\");\n    const count = tx.objectStore(STORE).count(id);\n    await txDone(tx);\n    db.close();\n    return count.result > 0;\n}\n\nasync function remove(name: string, id: number): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    tx.objectStore(STORE).delete(id);\n    await txDone(tx);\n    db.close();\n}\n\n/**\n * Serialize a request for the queue, leaving out every credential header and\n * recording which ones were present.\n */\nasync function serializeRequest(\n    request: Request,\n    timestamp: number,\n    credentialHeaders: ReadonlySet<string>,\n    ownerState: QueuedRequest[\"ownerState\"],\n): Promise<QueuedRequest> {\n    const buffer = await request.clone().arrayBuffer();\n    const { kept, stripped } = splitHeaders(request.headers.entries(), credentialHeaders);\n    return {\n        url: request.url,\n        method: request.method,\n        headers: kept,\n        body: buffer.byteLength > 0 ? buffer : null,\n        timestamp,\n        credentials: request.credentials,\n        strippedHeaders: stripped,\n        ownerState,\n    };\n}\n\n/**\n * Rebuild a stored request, stripping credential headers once more so an entry\n * that still holds one (a custom `credentialHeaders` the migration did not know)\n * never replays it.\n */\nfunction deserializeRequest(\n    entry: QueuedRequest,\n    credentialHeaders: ReadonlySet<string>,\n): { request: Request; strippedHeaders: string[] } {\n    const { kept, stripped } = splitHeaders(entry.headers, credentialHeaders);\n    return {\n        request: new Request(entry.url, {\n            method: entry.method,\n            headers: kept,\n            body: entry.body ?? undefined,\n            credentials: entry.credentials,\n        }),\n        strippedHeaders: [...new Set([...(entry.strippedHeaders ?? []), ...stripped])],\n    };\n}\n\n/** A window client's parsed answer. */\ninterface ClientAnswer {\n    headers: Record<string, string> | null;\n    /** Whether the page has `getPrincipal`. */\n    hasPrincipal: boolean;\n    owner: string | null;\n}\n\n/**\n * Ask one window client about a queued request over a `MessageChannel`.\n *\n * @returns The parsed answer, or `undefined` when the client stayed silent until\n *   `deadline`, answered `{ error: true }`, or answered something unrecognizable.\n */\nasync function askClient(\n    client: WindowClientLike,\n    request: BackgroundSyncCredentialsRequest,\n    deadline: Promise<void>,\n): Promise<ClientAnswer | undefined> {\n    const channel = new MessageChannel();\n    const answer = await Promise.race([\n        new Promise<unknown>((resolve) => {\n            channel.port1.onmessage = (event: MessageEvent) => resolve(event.data);\n            client.postMessage({ type: BACKGROUND_SYNC_CREDENTIALS_MESSAGE, ...request }, [\n                channel.port2,\n            ]);\n        }),\n        deadline.then(() => undefined),\n    ]);\n    channel.port1.close();\n    if (answer === null || typeof answer !== \"object\" || !(\"headers\" in answer)) return undefined;\n    const { headers, owner } = answer as { headers: unknown; owner?: unknown };\n    const hasPrincipal = \"owner\" in answer;\n    if (hasPrincipal && typeof owner !== \"string\" && owner !== null) return undefined;\n    return {\n        headers:\n            headers !== null && typeof headers === \"object\"\n                ? (headers as Record<string, string>)\n                : null,\n        hasPrincipal,\n        owner: hasPrincipal ? (owner as string | null) : null,\n    };\n}\n\n/** A deadline shared by every client asked in one round. */\nfunction startDeadline(): { promise: Promise<void>; cancel: () => void } {\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    const promise = new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, CREDENTIALS_TIMEOUT_MS);\n    });\n    return { promise, cancel: () => clearTimeout(timer) };\n}\n\n/**\n * Ask every open window client in parallel, under one shared deadline.\n *\n * @returns Every valid answer; empty when nobody answered.\n */\nasync function askAllClients(\n    sw: BgSwGlobal,\n    request: BackgroundSyncCredentialsRequest,\n): Promise<ClientAnswer[]> {\n    const clients = (await sw.clients?.matchAll({ type: \"window\" })) ?? [];\n    if (clients.length === 0) return [];\n    const deadline = startDeadline();\n    const answers = await Promise.all(\n        clients.map((client) => askClient(client, request, deadline.promise)),\n    );\n    deadline.cancel();\n    return answers.filter((answer): answer is ClientAnswer => answer !== undefined);\n}\n\n/** State of one replay pass: answers cached per URL + method, and the warning flag. */\ninterface ReplayRun {\n    ask(request: Request): Promise<ClientAnswer[]>;\n    warnNoAnswer(): void;\n}\n\nfunction createReplayRun(sw: BgSwGlobal): ReplayRun {\n    const answers = new Map<string, Promise<ClientAnswer[]>>();\n    let warned = false;\n    return {\n        ask(request) {\n            const key = `${request.method} ${request.url}`;\n            let pending = answers.get(key);\n            if (!pending) {\n                pending = askAllClients(sw, {\n                    url: request.url,\n                    method: request.method,\n                    phase: \"replay\",\n                });\n                answers.set(key, pending);\n            }\n            return pending;\n        },\n        warnNoAnswer() {\n            if (warned || !isDevBuild()) return;\n            warned = true;\n            console.warn(\n                \"[tempest-react-sdk/sw] background-sync: a queued request needs an open page \" +\n                    \"to confirm who is signed in or to supply the current credentials, and no \" +\n                    \"open page answered. Call \" +\n                    \"provideBackgroundSyncCredentials() in the page; the entry stays pending.\",\n            );\n        },\n    };\n}\n\n/**\n * Pick the answer an entry may be replayed with, per its owner state.\n *\n * An `\"unknown\"` owner replays only when every valid answer lacks a principal:\n * one tab reporting a principal (even `null`) is enough to drop it, because a\n * principal-less answer — say a tab still running a bundle from before the app\n * adopted `getPrincipal` — says nothing about whose cookie the replay carries.\n */\nfunction chooseAnswer(\n    answers: readonly ClientAnswer[],\n    context: BackgroundSyncReplayContext,\n): ClientAnswer | undefined {\n    switch (context.ownerState) {\n        case \"bound\":\n            return answers.find((answer) => answer.hasPrincipal && answer.owner === context.owner);\n        case \"unknown\":\n            return answers.every((answer) => !answer.hasPrincipal) ? answers[0] : undefined;\n        case \"unbound\":\n            return answers.find((answer) => !answer.hasPrincipal) ?? answers[0];\n    }\n}\n\n/**\n * The default `beforeReplay` (rules on {@link InstallBackgroundSyncOptions}).\n *\n * @throws {Error} When no page answered, or the chosen answer lacks a stripped\n *   header — the entry stays pending.\n */\nasync function defaultBeforeReplay(\n    run: ReplayRun,\n    request: Request,\n    context: BackgroundSyncReplayContext,\n    ownerPolicy: BackgroundSyncOwnerPolicy,\n): Promise<Request | null> {\n    const credentialed = context.strippedHeaders.length > 0;\n    const unchecked =\n        context.ownerState === \"unbound\" ||\n        (ownerPolicy === \"lenient\" && context.ownerState === \"unknown\");\n    if (!credentialed && unchecked) return request;\n    const answers = await run.ask(request);\n    if (answers.length === 0) {\n        run.warnNoAnswer();\n        throw new Error(\"background-sync: no client answered\");\n    }\n    const chosen = chooseAnswer(answers, context);\n    if (!chosen) return null;\n    if (!credentialed) return request;\n    if (chosen.headers === null) return null;\n    const provided = new Map(\n        Object.entries(chosen.headers).map(([name, value]) => [name.toLowerCase(), value]),\n    );\n    if (context.strippedHeaders.some((name) => !provided.has(name))) {\n        throw new Error(\"background-sync: the answer lacks a stripped credential header\");\n    }\n    const headers = new Headers(request.headers);\n    for (const name of context.strippedHeaders) headers.set(name, provided.get(name) as string);\n    return new Request(request, { headers });\n}\n\n/** Everything {@link replayQueue} needs besides the clock. */\ninterface ReplayConfig {\n    sw: BgSwGlobal;\n    name: string;\n    maxRetentionMs: number;\n    credentialHeaders: ReadonlySet<string>;\n    beforeReplay?: InstallBackgroundSyncOptions[\"beforeReplay\"];\n    ownerPolicy: BackgroundSyncOwnerPolicy;\n}\n\n/**\n * Replay every queued request once. Entries that succeed, are stale, get a 4xx\n * (a client error that will not fix itself) or that the preparation rejects with\n * `null` are removed; entries that fail again — network error, 5xx, or a\n * preparation that throws — are kept, and so is an entry whose owner is still\n * being stamped (for up to {@link OWNER_STAMP_GRACE_MS}). Each entry is checked\n * against the store right before it is sent, so a queue cleared mid-replay stops\n * the replay. Throws if any entry is still pending, so a `sync` handler keeps\n * the sync registered.\n */\nasync function replayQueue(config: ReplayConfig, now: number): Promise<void> {\n    const { sw, name, maxRetentionMs, credentialHeaders, beforeReplay, ownerPolicy } = config;\n    const run = createReplayRun(sw);\n    const prepare =\n        beforeReplay ??\n        ((request: Request, context: BackgroundSyncReplayContext) =>\n            defaultBeforeReplay(run, request, context, ownerPolicy));\n    const entries = await readAll(name, credentialHeaders);\n    let pending = 0;\n\n    for (const entry of entries) {\n        if (entry.id === undefined) continue;\n        if (now - entry.timestamp > maxRetentionMs) {\n            await remove(name, entry.id);\n            continue;\n        }\n        const state = entry.ownerState ?? \"unknown\";\n        if (state === \"pending\" && now - entry.timestamp < OWNER_STAMP_GRACE_MS) {\n            pending += 1;\n            continue;\n        }\n        const ownerState: BackgroundSyncOwnerState = state === \"pending\" ? \"unknown\" : state;\n        try {\n            const { request: stored, strippedHeaders } = deserializeRequest(\n                entry,\n                credentialHeaders,\n            );\n            const request = await prepare(stored, {\n                queuedAt: entry.timestamp,\n                strippedHeaders,\n                ownerState,\n                owner: ownerState === \"bound\" ? (entry.owner ?? null) : undefined,\n            });\n            if (!(await stillQueued(name, entry.id))) continue;\n            if (request === null) {\n                await remove(name, entry.id);\n                continue;\n            }\n            const response = await fetch(request);\n            if (response.ok || (response.status >= 400 && response.status < 500)) {\n                await remove(name, entry.id);\n            } else {\n                pending += 1;\n            }\n        } catch {\n            pending += 1;\n        }\n    }\n\n    if (pending > 0) throw new Error(`background-sync: ${pending} request(s) still pending`);\n}\n\n/**\n * The replay in flight per queue. `sync`, `periodicsync` and the Safari fallback\n * can fire together; sharing one pass keeps a mutation from being sent twice.\n */\nconst replaysInFlight = new Map<string, Promise<void>>();\n\nfunction drainQueue(config: ReplayConfig): Promise<void> {\n    const running = replaysInFlight.get(config.name);\n    if (running) return running;\n    const pass = replayQueue(config, Date.now()).finally(() => {\n        replaysInFlight.delete(config.name);\n    });\n    replaysInFlight.set(config.name, pass);\n    return pass;\n}\n\nfunction matches(\n    match: InstallBackgroundSyncOptions[\"match\"],\n    url: URL,\n    request: Request,\n): boolean {\n    if (!match) return true;\n    return typeof match === \"function\" ? match(url, request) : match.test(url.href);\n}\n\n/**\n * Ask the issuing page who owns a just-queued entry and record it.\n *\n * @returns Resolves once the owner is stamped; never rejects.\n */\nasync function stampFromIssuer(\n    name: string,\n    id: number,\n    issuer: WindowClientLike,\n    request: Request,\n): Promise<void> {\n    const deadline = startDeadline();\n    const answer = await askClient(\n        issuer,\n        { url: request.url, method: request.method, phase: \"enqueue\" },\n        deadline.promise,\n    );\n    deadline.cancel();\n    const state: BackgroundSyncOwnerState = !answer\n        ? \"unknown\"\n        : answer.hasPrincipal\n          ? \"bound\"\n          : \"unbound\";\n    await stampOwner(name, id, state, answer?.owner);\n}\n\n/**\n * Install the background-sync queue: on a failed mutating request, the request\n * is serialized to IndexedDB (without its credential headers) and a sync is\n * registered; the original fetch still rejects (so your app can show an offline\n * state), and the request is replayed later when the network returns.\n *\n * Right after queueing, the worker asks the page that issued the request who is\n * signed in (`getPrincipal` on {@link provideBackgroundSyncCredentials}) and\n * stamps the entry with that owner, without delaying the rejection. The work is\n * handed to `event.waitUntil` synchronously, so the worker stays alive for it\n * in every engine. Without the Background Sync API (every non-Chromium\n * browser), the queue is drained opportunistically whenever a `GET` goes\n * through the worker.\n *\n * @tempest-limits empty-catch — `registration.sync.register` is unavailable on\n * every non-Chromium browser and fails on a revoked background-sync permission.\n * The entry is already durable in IndexedDB at that point, and the queue is also\n * drained opportunistically on the next successful request, so losing the OS-level\n * wakeup degrades *when* the replay happens, not *whether* it happens.\n */\nexport function installBackgroundSync(options: InstallBackgroundSyncOptions = {}): void {\n    const sw = getSwScope();\n    const {\n        match,\n        queueName = DEFAULT_QUEUE_NAME,\n        maxRetentionMinutes = 1440,\n        periodicSyncTag = `${options.queueName ?? DEFAULT_QUEUE_NAME}-periodic`,\n        credentialHeaders = DEFAULT_CREDENTIAL_HEADERS,\n        beforeReplay,\n        ownerPolicy = \"strict\",\n    } = options;\n    const stripped = credentialHeaderSet(credentialHeaders);\n    const replay: ReplayConfig = {\n        sw,\n        name: queueName,\n        maxRetentionMs: maxRetentionMinutes * 60 * 1000,\n        credentialHeaders: stripped,\n        beforeReplay,\n        ownerPolicy,\n    };\n\n    sw.addEventListener(\"fetch\", (event) => {\n        const request = event.request;\n        if (request.method === \"GET\" || request.method === \"HEAD\") return;\n\n        const url = new URL(request.url);\n        if (!matches(match, url, request)) return;\n\n        const epoch = readEpoch(queueName, stripped);\n        epoch.catch(() => undefined);\n        const attempt = fetch(request.clone());\n        const queued = attempt.then(\n            () => undefined,\n            async () => {\n                const issuer = event.clientId ? await sw.clients?.get(event.clientId) : undefined;\n                const entry = await serializeRequest(\n                    request,\n                    Date.now(),\n                    stripped,\n                    issuer ? \"pending\" : \"unknown\",\n                );\n                const id = await enqueue(queueName, entry, await epoch, stripped);\n                if (id === undefined) return undefined;\n                try {\n                    await sw.registration.sync?.register(queueName);\n                } catch {\n                    /* empty */\n                }\n                return issuer ? { id, issuer } : undefined;\n            },\n        );\n        event.respondWith(\n            attempt.catch(async (error: unknown) => {\n                await queued;\n                throw error;\n            }),\n        );\n        event.waitUntil(\n            queued\n                .then((stamp) =>\n                    stamp ? stampFromIssuer(queueName, stamp.id, stamp.issuer, request) : undefined,\n                )\n                .catch(() => undefined),\n        );\n    });\n\n    sw.addEventListener(\"sync\", (event) => {\n        if (event.tag !== queueName) return;\n        event.waitUntil(drainQueue(replay));\n    });\n\n    sw.addEventListener(\"periodicsync\", (event) => {\n        if (event.tag !== periodicSyncTag) return;\n        event.waitUntil(drainQueue(replay).catch(() => undefined));\n    });\n\n    sw.addEventListener(\"fetch\", (event) => {\n        if (sw.registration.sync) return;\n        if (event.request.method !== \"GET\") return;\n        event.waitUntil(drainQueue(replay).catch(() => undefined));\n    });\n}\n\n/**\n * Empty the background-sync queue — every request still waiting to be replayed —\n * and bump its clear epoch. Call it on logout (or use `clearSessionData()`, which\n * also clears the runtime caches) so mutations made under one session are never\n * replayed under the next.\n *\n * Works from the page and from the worker, and reaches work already in flight\n * in the worker: a replay checks each entry right before sending it, and a\n * request still failing when the queue is cleared is not written afterwards.\n *\n * @param queueName - The `queueName` given to {@link installBackgroundSync}.\n *   Default `tempest-bg-sync`.\n * @returns `true` once the queue is empty; `false` when IndexedDB is\n *   unavailable (SSR, old browsers).\n *\n * @example\n * import { clearBackgroundSyncQueue } from \"tempest-react-sdk/sw\";\n *\n * await clearBackgroundSyncQueue();\n */\nexport async function clearBackgroundSyncQueue(\n    queueName: string = DEFAULT_QUEUE_NAME,\n): Promise<boolean> {\n    if (typeof indexedDB === \"undefined\") return false;\n    const db = await openQueueDb(queueName);\n    const tx = db.transaction([STORE, META], \"readwrite\");\n    tx.objectStore(STORE).clear();\n    const meta = tx.objectStore(META);\n    const current = meta.get(EPOCH_KEY);\n    current.onsuccess = () => {\n        meta.put(((current.result as number | undefined) ?? 0) + 1, EPOCH_KEY);\n    };\n    await txDone(tx);\n    db.close();\n    return true;\n}\n\n/**\n * One-way fingerprint of a principal: hex SHA-256, so the queue can compare\n * owners without ever holding the id itself.\n *\n * @returns The fingerprint, or `null` when nobody is signed in.\n */\nasync function ownerFingerprint(principal: string | null | undefined): Promise<string | null> {\n    if (principal === null || principal === undefined || principal === \"\") return null;\n    const digest = await crypto.subtle.digest(\n        \"SHA-256\",\n        new TextEncoder().encode(`tempest-bg-sync:${principal}`),\n    );\n    return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Answer the worker's questions about queued requests (see `beforeReplay` on\n * {@link installBackgroundSync}). Install it once in every page, next to your\n * auth setup; it reads the token at replay time, so the queue never has to store\n * it. Without it, a queued request that carried a credential header is never\n * replayed.\n *\n * `getHeaders` must return **every** credential header the app sends (the worker\n * keeps an entry pending when one it stripped is missing), or `null` when there\n * is no session — the worker then drops the entry instead of replaying it\n * anonymously. A throw from `getHeaders` or `getPrincipal` is answered as an\n * explicit `{ error: true }`. The worker only applies headers whose names the\n * original request carried, so returning `Authorization` for every URL never\n * leaks it to a URL that did not receive it in the first place.\n *\n * Pass `getPrincipal` to bind each entry to whoever queued it: the worker asks\n * the issuing tab right after queueing, asks every tab again before replaying,\n * and drops the entry when no signed-in tab is its owner.\n *\n * @param getHeaders - Resolves the headers for one queued request at replay.\n * @param options - `getPrincipal` binds entries to their owner.\n * @returns A function that removes the listener. A no-op outside the browser.\n *\n * @example\n * import { provideBackgroundSyncCredentials } from \"tempest-react-sdk/sw\";\n *\n * const stop = provideBackgroundSyncCredentials(\n *     () => {\n *         const token = localStorage.getItem(\"token\");\n *         return token ? { Authorization: `Bearer ${token}` } : null;\n *     },\n *     { getPrincipal: () => localStorage.getItem(\"userId\") },\n * );\n */\nexport function provideBackgroundSyncCredentials(\n    getHeaders: BackgroundSyncCredentialsProvider,\n    options: ProvideBackgroundSyncCredentialsOptions = {},\n): () => void {\n    if (typeof navigator === \"undefined\" || !navigator.serviceWorker) return () => undefined;\n    const container = navigator.serviceWorker;\n    const { getPrincipal } = options;\n    const onMessage = (event: MessageEvent): void => {\n        const data = event.data as Partial<BackgroundSyncCredentialsRequest> & { type?: unknown };\n        const port = event.ports[0];\n        if (data?.type !== BACKGROUND_SYNC_CREDENTIALS_MESSAGE || !port) return;\n        const request: BackgroundSyncCredentialsRequest = {\n            url: String(data.url),\n            method: String(data.method),\n            phase: data.phase === \"enqueue\" ? \"enqueue\" : \"replay\",\n        };\n        void (async () => {\n            try {\n                const headers = request.phase === \"enqueue\" ? null : await getHeaders(request);\n                const answer: { headers: Record<string, string> | null; owner?: string | null } = {\n                    headers,\n                };\n                if (getPrincipal) answer.owner = await ownerFingerprint(await getPrincipal());\n                port.postMessage(answer);\n            } catch {\n                port.postMessage({ error: true });\n            }\n        })();\n    };\n    container.addEventListener(\"message\", onMessage);\n    return () => container.removeEventListener(\"message\", onMessage);\n}\n"],"mappings":"+EA4DA,SAAS,GAAyB,CAC9B,OAAO,UACX,CAgDA,IAAM,EAAqB,kBAOrB,EAAa,EACb,EAAQ,WACR,EAAO,OACP,EAAY,QAML,EAAsC,8BAG7C,EAAyB,IAMzB,EAAuB,EAAyB,EAkItD,SAAS,EACL,EACA,EACgD,CAChD,IAAM,EAA2B,CAAC,EAC5B,EAAqB,CAAC,EAC5B,IAAK,GAAM,CAAC,EAAM,KAAU,EACpB,EAAkB,IAAI,EAAK,YAAY,CAAC,EAAG,EAAS,KAAK,EAAK,YAAY,CAAC,EAC1E,EAAK,KAAK,CAAC,EAAM,CAAK,CAAC,EAEhC,MAAO,CAAE,OAAM,UAAS,CAC5B,CAOA,SAAS,EAAqB,EAAuB,EAA8C,CAC/F,IAAM,EAAgB,EAAM,WAAW,EACvC,EAAc,cAAkB,CAC5B,IAAM,EAAS,EAAc,OAC7B,GAAI,CAAC,EAAQ,OACb,IAAM,EAAQ,EAAO,MACf,CAAE,OAAM,YAAa,EAAa,EAAM,QAAS,CAAiB,EACxE,EAAO,OAAO,CACV,GAAG,EACH,QAAS,EACT,gBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAI,EAAM,iBAAmB,CAAC,EAAI,GAAG,CAAQ,CAAC,CAAC,EAC7E,WAAY,EAAM,YAAc,SACpC,CAAC,EACD,EAAO,SAAS,CACpB,CACJ,CAEA,SAAS,EACL,EACA,EAAyC,EAAA,oBAAoB,EACzC,CACpB,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,IAAM,EAAU,UAAU,KAAK,EAAM,CAAU,EAC/C,EAAQ,gBAAmB,GAAU,CACjC,IAAM,EAAK,EAAQ,OACd,EAAG,iBAAiB,SAAS,CAAK,EAE5B,EAAM,WAAa,GAAK,EAAQ,aACvC,EAAqB,EAAQ,YAAY,YAAY,CAAK,EAAG,CAAiB,EAF9E,EAAG,kBAAkB,EAAO,CAAE,QAAS,KAAM,cAAe,EAAK,CAAC,EAIjE,EAAG,iBAAiB,SAAS,CAAI,GAAG,EAAG,kBAAkB,CAAI,CACtE,EACA,EAAQ,cAAkB,CACtB,IAAM,EAAK,EAAQ,OACnB,EAAG,oBAAwB,EAAG,MAAM,EACpC,EAAQ,CAAE,CACd,EACA,EAAQ,YAAgB,EAAO,EAAQ,KAAK,CAChD,CAAC,CACL,CAEA,SAAS,EAAO,EAAmC,CAC/C,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,EAAG,eAAmB,EAAQ,EAC9B,EAAG,YAAgB,EAAO,EAAG,KAAK,EAClC,EAAG,YAAgB,EAAO,EAAG,KAAK,CACtC,CAAC,CACL,CAGA,eAAe,EAAU,EAAc,EAAyD,CAC5F,IAAM,EAAK,MAAM,EAAY,EAAM,CAAiB,EAC9C,EAAK,EAAG,YAAY,EAAM,UAAU,EACpC,EAAM,EAAG,YAAY,CAAI,CAAC,CAAC,IAAI,CAAS,EAG9C,OAFA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACD,EAAI,QAAiC,CACjD,CASA,eAAe,EACX,EACA,EACA,EACA,EAC2B,CAC3B,IAAM,EAAK,MAAM,EAAY,EAAM,CAAiB,EAC9C,EAAK,EAAG,YAAY,CAAC,EAAO,CAAI,EAAG,WAAW,EAChD,EACE,EAAU,EAAG,YAAY,CAAI,CAAC,CAAC,IAAI,CAAS,EAUlD,MATA,GAAQ,cAAkB,CACtB,IAAM,EAAQ,QAAiC,KAAO,EAAO,OAC7D,IAAM,EAAM,EAAG,YAAY,CAAK,CAAC,CAAC,IAAI,CAAK,EAC3C,EAAI,cAAkB,CAClB,EAAK,EAAI,MACb,CACJ,EACA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACF,CACX,CAMA,eAAe,EACX,EACA,EACA,EACA,EACa,CACb,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,WAAW,EACtC,EAAQ,EAAG,YAAY,CAAK,EAC5B,EAAM,EAAM,IAAI,CAAE,EACxB,EAAI,cAAkB,CAClB,IAAM,EAAQ,EAAI,OACb,IACL,EAAM,WAAa,EACf,IAAe,UAAS,EAAM,MAAQ,GAAS,MACnD,EAAM,IAAI,CAAK,EACnB,EACA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,CACb,CAEA,eAAe,EACX,EACA,EACwB,CACxB,IAAM,EAAK,MAAM,EAAY,EAAM,CAAiB,EAC9C,EAAK,EAAG,YAAY,EAAO,UAAU,EACrC,EAAM,MAAM,IAAI,SAA0B,EAAS,IAAW,CAChE,IAAM,EAAM,EAAG,YAAY,CAAK,CAAC,CAAC,OAAO,EACzC,EAAI,cAAkB,EAAQ,EAAI,MAAyB,EAC3D,EAAI,YAAgB,EAAO,EAAI,KAAK,CACxC,CAAC,EAED,OADA,EAAG,MAAM,EACF,CACX,CAGA,eAAe,EAAY,EAAc,EAA8B,CACnE,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,UAAU,EACrC,EAAQ,EAAG,YAAY,CAAK,CAAC,CAAC,MAAM,CAAE,EAG5C,OAFA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACF,EAAM,OAAS,CAC1B,CAEA,eAAe,EAAO,EAAc,EAA2B,CAC3D,IAAM,EAAK,MAAM,EAAY,CAAI,EAC3B,EAAK,EAAG,YAAY,EAAO,WAAW,EAC5C,EAAG,YAAY,CAAK,CAAC,CAAC,OAAO,CAAE,EAC/B,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,CACb,CAMA,eAAe,EACX,EACA,EACA,EACA,EACsB,CACtB,IAAM,EAAS,MAAM,EAAQ,MAAM,CAAC,CAAC,YAAY,EAC3C,CAAE,OAAM,YAAa,EAAa,EAAQ,QAAQ,QAAQ,EAAG,CAAiB,EACpF,MAAO,CACH,IAAK,EAAQ,IACb,OAAQ,EAAQ,OAChB,QAAS,EACT,KAAM,EAAO,WAAa,EAAI,EAAS,KACvC,YACA,YAAa,EAAQ,YACrB,gBAAiB,EACjB,YACJ,CACJ,CAOA,SAAS,EACL,EACA,EAC+C,CAC/C,GAAM,CAAE,OAAM,YAAa,EAAa,EAAM,QAAS,CAAiB,EACxE,MAAO,CACH,QAAS,IAAI,QAAQ,EAAM,IAAK,CAC5B,OAAQ,EAAM,OACd,QAAS,EACT,KAAM,EAAM,MAAQ,IAAA,GACpB,YAAa,EAAM,WACvB,CAAC,EACD,gBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAI,EAAM,iBAAmB,CAAC,EAAI,GAAG,CAAQ,CAAC,CAAC,CACjF,CACJ,CAgBA,eAAe,EACX,EACA,EACA,EACiC,CACjC,IAAM,EAAU,IAAI,eACd,EAAS,MAAM,QAAQ,KAAK,CAC9B,IAAI,QAAkB,GAAY,CAC9B,EAAQ,MAAM,UAAa,GAAwB,EAAQ,EAAM,IAAI,EACrE,EAAO,YAAY,CAAE,KAAM,EAAqC,GAAG,CAAQ,EAAG,CAC1E,EAAQ,KACZ,CAAC,CACL,CAAC,EACD,EAAS,SAAW,IAAA,EAAS,CACjC,CAAC,EAED,GADA,EAAQ,MAAM,MAAM,EACG,OAAO,GAAW,WAArC,GAAiD,EAAE,YAAa,GAAS,OAC7E,GAAM,CAAE,UAAS,SAAU,EACrB,EAAe,UAAW,EAC5B,QAAgB,OAAO,GAAU,UAAY,IAAU,MAC3D,MAAO,CACH,QACwB,OAAO,GAAY,UAAvC,EACO,EACD,KACV,eACA,MAAO,EAAgB,EAA0B,IACrD,CACJ,CAGA,SAAS,GAAgE,CACrE,IAAI,EAIJ,MAAO,CAAE,QAAA,IAHW,QAAe,GAAY,CAC3C,EAAQ,WAAW,EAAS,CAAsB,CACtD,CACS,EAAS,WAAc,aAAa,CAAK,CAAE,CACxD,CAOA,eAAe,EACX,EACA,EACuB,CACvB,IAAM,EAAW,MAAM,EAAG,SAAS,SAAS,CAAE,KAAM,QAAS,CAAC,GAAM,CAAC,EACrE,GAAI,EAAQ,SAAW,EAAG,MAAO,CAAC,EAClC,IAAM,EAAW,EAAc,EACzB,EAAU,MAAM,QAAQ,IAC1B,EAAQ,IAAK,GAAW,EAAU,EAAQ,EAAS,EAAS,OAAO,CAAC,CACxE,EAEA,OADA,EAAS,OAAO,EACT,EAAQ,OAAQ,GAAmC,IAAW,IAAA,EAAS,CAClF,CAQA,SAAS,EAAgB,EAA2B,CAChD,IAAM,EAAU,IAAI,IAChB,EAAS,GACb,MAAO,CACH,IAAI,EAAS,CACT,IAAM,EAAM,GAAG,EAAQ,OAAO,GAAG,EAAQ,MACrC,EAAU,EAAQ,IAAI,CAAG,EAS7B,OARK,IACD,EAAU,EAAc,EAAI,CACxB,IAAK,EAAQ,IACb,OAAQ,EAAQ,OAChB,MAAO,QACX,CAAC,EACD,EAAQ,IAAI,EAAK,CAAO,GAErB,CACX,EACA,cAAe,CACP,IAAW,EAAA,WAAW,IAC1B,EAAS,GACT,QAAQ,KACJ,wPAIJ,EACJ,CACJ,CACJ,CAUA,SAAS,EACL,EACA,EACwB,CACxB,OAAQ,EAAQ,WAAhB,CACI,IAAK,QACD,OAAO,EAAQ,KAAM,GAAW,EAAO,cAAgB,EAAO,QAAU,EAAQ,KAAK,EACzF,IAAK,UACD,OAAO,EAAQ,MAAO,GAAW,CAAC,EAAO,YAAY,EAAI,EAAQ,GAAK,IAAA,GAC1E,IAAK,UACD,OAAO,EAAQ,KAAM,GAAW,CAAC,EAAO,YAAY,GAAK,EAAQ,EACzE,CACJ,CAQA,eAAe,EACX,EACA,EACA,EACA,EACuB,CACvB,IAAM,EAAe,EAAQ,gBAAgB,OAAS,EAChD,EACF,EAAQ,aAAe,WACtB,IAAgB,WAAa,EAAQ,aAAe,UACzD,GAAI,CAAC,GAAgB,EAAW,OAAO,EACvC,IAAM,EAAU,MAAM,EAAI,IAAI,CAAO,EACrC,GAAI,EAAQ,SAAW,EAEnB,MADA,EAAI,aAAa,EACP,MAAM,qCAAqC,EAEzD,IAAM,EAAS,EAAa,EAAS,CAAO,EAC5C,GAAI,CAAC,EAAQ,OAAO,KACpB,GAAI,CAAC,EAAc,OAAO,EAC1B,GAAI,EAAO,UAAY,KAAM,OAAO,KACpC,IAAM,EAAW,IAAI,IACjB,OAAO,QAAQ,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC,EAAM,KAAW,CAAC,EAAK,YAAY,EAAG,CAAK,CAAC,CACrF,EACA,GAAI,EAAQ,gBAAgB,KAAM,GAAS,CAAC,EAAS,IAAI,CAAI,CAAC,EAC1D,MAAU,MAAM,gEAAgE,EAEpF,IAAM,EAAU,IAAI,QAAQ,EAAQ,OAAO,EAC3C,IAAK,IAAM,KAAQ,EAAQ,gBAAiB,EAAQ,IAAI,EAAM,EAAS,IAAI,CAAI,CAAW,EAC1F,OAAO,IAAI,QAAQ,EAAS,CAAE,SAAQ,CAAC,CAC3C,CAsBA,eAAe,EAAY,EAAsB,EAA4B,CACzE,GAAM,CAAE,KAAI,OAAM,iBAAgB,oBAAmB,eAAc,eAAgB,EAC7E,EAAM,EAAgB,CAAE,EACxB,EACF,KACE,EAAkB,IAChB,EAAoB,EAAK,EAAS,EAAS,CAAW,GACxD,EAAU,MAAM,EAAQ,EAAM,CAAiB,EACjD,EAAU,EAEd,IAAK,IAAM,KAAS,EAAS,CACzB,GAAI,EAAM,KAAO,IAAA,GAAW,SAC5B,GAAI,EAAM,EAAM,UAAY,EAAgB,CACxC,MAAM,EAAO,EAAM,EAAM,EAAE,EAC3B,QACJ,CACA,IAAM,EAAQ,EAAM,YAAc,UAClC,GAAI,IAAU,WAAa,EAAM,EAAM,UAAY,EAAsB,CACrE,GAAW,EACX,QACJ,CACA,IAAM,EAAuC,IAAU,UAAY,UAAY,EAC/E,GAAI,CACA,GAAM,CAAE,QAAS,EAAQ,mBAAoB,EACzC,EACA,CACJ,EACM,EAAU,MAAM,EAAQ,EAAQ,CAClC,SAAU,EAAM,UAChB,kBACA,aACA,MAAO,IAAe,QAAW,EAAM,OAAS,KAAQ,IAAA,EAC5D,CAAC,EACD,GAAI,CAAE,MAAM,EAAY,EAAM,EAAM,EAAE,EAAI,SAC1C,GAAI,IAAY,KAAM,CAClB,MAAM,EAAO,EAAM,EAAM,EAAE,EAC3B,QACJ,CACA,IAAM,EAAW,MAAM,MAAM,CAAO,EAChC,EAAS,IAAO,EAAS,QAAU,KAAO,EAAS,OAAS,IAC5D,MAAM,EAAO,EAAM,EAAM,EAAE,EAE3B,GAAW,CAEnB,MAAQ,CACJ,GAAW,CACf,CACJ,CAEA,GAAI,EAAU,EAAG,MAAU,MAAM,oBAAoB,EAAQ,0BAA0B,CAC3F,CAMA,IAAM,EAAkB,IAAI,IAE5B,SAAS,EAAW,EAAqC,CACrD,IAAM,EAAU,EAAgB,IAAI,EAAO,IAAI,EAC/C,GAAI,EAAS,OAAO,EACpB,IAAM,EAAO,EAAY,EAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAc,CACvD,EAAgB,OAAO,EAAO,IAAI,CACtC,CAAC,EAED,OADA,EAAgB,IAAI,EAAO,KAAM,CAAI,EAC9B,CACX,CAEA,SAAS,EACL,EACA,EACA,EACO,CAEP,OADK,EACE,OAAO,GAAU,WAAa,EAAM,EAAK,CAAO,EAAI,EAAM,KAAK,EAAI,IAAI,EAD3D,EAEvB,CAOA,eAAe,EACX,EACA,EACA,EACA,EACa,CACb,IAAM,EAAW,EAAc,EACzB,EAAS,MAAM,EACjB,EACA,CAAE,IAAK,EAAQ,IAAK,OAAQ,EAAQ,OAAQ,MAAO,SAAU,EAC7D,EAAS,OACb,EACA,EAAS,OAAO,EAMhB,MAAM,EAAW,EAAM,EALkB,EAEnC,EAAO,aACL,QACA,UAHF,UAI4B,GAAQ,KAAK,CACnD,CAsBA,SAAgB,EAAsB,EAAwC,CAAC,EAAS,CACpF,IAAM,EAAK,EAAW,EAChB,CACF,QACA,YAAY,EACZ,sBAAsB,KACtB,kBAAkB,GAAG,EAAQ,WAAa,EAAmB,WAC7D,oBAAoB,EAAA,2BACpB,eACA,cAAc,UACd,EACE,EAAW,EAAA,oBAAoB,CAAiB,EAChD,EAAuB,CACzB,KACA,KAAM,EACN,eAAgB,EAAsB,GAAK,IAC3C,kBAAmB,EACnB,eACA,aACJ,EAEA,EAAG,iBAAiB,QAAU,GAAU,CACpC,IAAM,EAAU,EAAM,QACtB,GAAI,EAAQ,SAAW,OAAS,EAAQ,SAAW,OAAQ,OAE3D,IAAM,EAAM,IAAI,IAAI,EAAQ,GAAG,EAC/B,GAAI,CAAC,EAAQ,EAAO,EAAK,CAAO,EAAG,OAEnC,IAAM,EAAQ,EAAU,EAAW,CAAQ,EAC3C,EAAM,UAAY,IAAA,EAAS,EAC3B,IAAM,EAAU,MAAM,EAAQ,MAAM,CAAC,EAC/B,EAAS,EAAQ,SACb,IAAA,GACN,SAAY,CACR,IAAM,EAAS,EAAM,SAAW,MAAM,EAAG,SAAS,IAAI,EAAM,QAAQ,EAAI,IAAA,GAClE,EAAQ,MAAM,EAChB,EACA,KAAK,IAAI,EACT,EACA,EAAS,UAAY,SACzB,EACM,EAAK,MAAM,EAAQ,EAAW,EAAO,MAAM,EAAO,CAAQ,EAC5D,OAAO,IAAA,GACX,IAAI,CACA,MAAM,EAAG,aAAa,MAAM,SAAS,CAAS,CAClD,MAAQ,CAER,CACA,OAAO,EAAS,CAAE,KAAI,QAAO,EAAI,IAAA,EADjC,CAEJ,CACJ,EACA,EAAM,YACF,EAAQ,MAAM,KAAO,IAAmB,CAEpC,MADA,MAAM,EACA,CACV,CAAC,CACL,EACA,EAAM,UACF,EACK,KAAM,GACH,EAAQ,EAAgB,EAAW,EAAM,GAAI,EAAM,OAAQ,CAAO,EAAI,IAAA,EAC1E,CAAC,CACA,UAAY,IAAA,EAAS,CAC9B,CACJ,CAAC,EAED,EAAG,iBAAiB,OAAS,GAAU,CAC/B,EAAM,MAAQ,GAClB,EAAM,UAAU,EAAW,CAAM,CAAC,CACtC,CAAC,EAED,EAAG,iBAAiB,eAAiB,GAAU,CACvC,EAAM,MAAQ,GAClB,EAAM,UAAU,EAAW,CAAM,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7D,CAAC,EAED,EAAG,iBAAiB,QAAU,GAAU,CAChC,EAAG,aAAa,MAChB,EAAM,QAAQ,SAAW,OAC7B,EAAM,UAAU,EAAW,CAAM,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7D,CAAC,CACL,CAsBA,eAAsB,EAClB,EAAoB,EACJ,CAChB,GAAI,OAAO,UAAc,IAAa,MAAO,GAC7C,IAAM,EAAK,MAAM,EAAY,CAAS,EAChC,EAAK,EAAG,YAAY,CAAC,EAAO,CAAI,EAAG,WAAW,EACpD,EAAG,YAAY,CAAK,CAAC,CAAC,MAAM,EAC5B,IAAM,EAAO,EAAG,YAAY,CAAI,EAC1B,EAAU,EAAK,IAAI,CAAS,EAMlC,MALA,GAAQ,cAAkB,CACtB,EAAK,KAAM,EAAQ,QAAiC,GAAK,EAAG,CAAS,CACzE,EACA,MAAM,EAAO,CAAE,EACf,EAAG,MAAM,EACF,EACX,CAQA,eAAe,EAAiB,EAA8D,CAC1F,GAAI,GAAc,MAAmC,IAAc,GAAI,OAAO,KAC9E,IAAM,EAAS,MAAM,OAAO,OAAO,OAC/B,UACA,IAAI,YAAY,CAAC,CAAC,OAAO,mBAAmB,GAAW,CAC3D,EACA,MAAO,CAAC,GAAG,IAAI,WAAW,CAAM,CAAC,CAAC,CAAC,IAAK,GAAS,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAChG,CAoCA,SAAgB,EACZ,EACA,EAAmD,CAAC,EAC1C,CACV,GAAI,OAAO,UAAc,KAAe,CAAC,UAAU,cAAe,UAAa,IAAA,GAC/E,IAAM,EAAY,UAAU,cACtB,CAAE,gBAAiB,EACnB,EAAa,GAA8B,CAC7C,IAAM,EAAO,EAAM,KACb,EAAO,EAAM,MAAM,GACzB,GAAI,GAAM,OAAA,+BAAgD,CAAC,EAAM,OACjE,IAAM,EAA4C,CAC9C,IAAK,OAAO,EAAK,GAAG,EACpB,OAAQ,OAAO,EAAK,MAAM,EAC1B,MAAO,EAAK,QAAU,UAAY,UAAY,QAClD,GACM,SAAY,CACd,GAAI,CAEA,IAAM,EAA4E,CAC9E,QAFY,EAAQ,QAAU,UAAY,KAAO,MAAM,EAAW,CAAO,CAG7E,EACI,IAAc,EAAO,MAAQ,MAAM,EAAiB,MAAM,EAAa,CAAC,GAC5E,EAAK,YAAY,CAAM,CAC3B,MAAQ,CACJ,EAAK,YAAY,CAAE,MAAO,EAAK,CAAC,CACpC,CACJ,EAAA,CAAG,CACP,EAEA,OADA,EAAU,iBAAiB,UAAW,CAAS,MAClC,EAAU,oBAAoB,UAAW,CAAS,CACnE"}
+{"version":3,"file":"background-sync.cjs","names":["credentialHeaderSet","isDevBuild","DEFAULT_CREDENTIAL_HEADERS","require_dev_mode","require_credential_headers","getSwScope","DEFAULT_QUEUE_NAME","DB_VERSION","STORE","META","EPOCH_KEY","BACKGROUND_SYNC_CREDENTIALS_MESSAGE","CREDENTIALS_TIMEOUT_MS","OWNER_STAMP_GRACE_MS","splitHeaders","kept","stripped","name","value","headers","credentialHeaders","migrateLegacyEntries","cursorRequest","store","cursor","entry","openQueueDb","request","db","event","resolve","reject","txDone","tx","readEpoch","get","enqueue","id","current","epoch","add","stampOwner","ownerState","owner","readAll","all","req","stillQueued","count","remove","serializeRequest","buffer","deserializeRequest","askClient","channel","answer","client","deadline","hasPrincipal","startDeadline","timer","askAllClients","clients","sw","answers","createReplayRun","warned","key","pending","chooseAnswer","context","defaultBeforeReplay","credentialed","unchecked","ownerPolicy","run","chosen","provided","replayQueue","config","prepare","beforeReplay","entries","now","maxRetentionMs","state","stored","response","replaysInFlight","drainQueue","running","pass","matches","match","url","stampFromIssuer","issuer","installBackgroundSync","options","replay","queueName","maxRetentionMinutes","attempt","queued","error","stamp","periodicSyncTag","clearBackgroundSyncQueue","meta","ownerFingerprint","principal","digest","byte","provideBackgroundSyncCredentials","container","onMessage","data","port","getHeaders","getPrincipal"],"sources":["../../src/sw/background-sync.ts"],"sourcesContent":["/**\n * Background-sync helper: queue failed mutating requests (POST/PUT/PATCH/DELETE)\n * while offline and replay them when connectivity returns. A dependency-free\n * take on Workbox's `BackgroundSyncPlugin`, backed by a tiny IndexedDB queue.\n *\n * Import inside your `sw.ts`. Uses the Background Sync API (`registration.sync`)\n * when available, and also replays opportunistically on the next request as a\n * fallback for browsers without it (e.g. Safari).\n *\n * Credential headers (`Authorization` and the rest of\n * {@link DEFAULT_CREDENTIAL_HEADERS}) are never written to IndexedDB: the queue\n * outlives the session, and a stored bearer stayed readable after logout and was\n * replayed with the old identity (reproduced in Chromium 153, 11/10/2026). On\n * replay the worker asks the open pages for the *current* credentials — see\n * {@link provideBackgroundSyncCredentials} — or a custom `beforeReplay` hook.\n * Credentials carried in the URL or the body are out of reach and are stored\n * as sent.\n *\n * @example\n *   import { installBackgroundSync } from \"tempest-react-sdk/sw\";\n *\n *   installBackgroundSync({ match: (url) => url.pathname.startsWith(\"/api/\") });\n */\nimport { isDevBuild } from \"../utils/dev-mode\";\nimport { DEFAULT_CREDENTIAL_HEADERS, credentialHeaderSet } from \"./credential-headers\";\n\ninterface SyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface BgFetchEventLike {\n    request: Request;\n    /** Id of the window client that issued the request, when there is one. */\n    clientId?: string;\n    respondWith(response: Response | Promise<Response>): void;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\ninterface PeriodicSyncEventLike {\n    tag: string;\n    waitUntil(promise: Promise<unknown>): void;\n}\n\n/** Minimal shape of a window client the worker can message. */\ninterface WindowClientLike {\n    postMessage(message: unknown, transfer: Transferable[]): void;\n}\n\ninterface BgSwGlobal {\n    registration: { sync?: { register(tag: string): Promise<void> } };\n    clients?: {\n        matchAll(options: { type: \"window\" }): Promise<readonly WindowClientLike[]>;\n        get(id: string): Promise<WindowClientLike | undefined>;\n    };\n    addEventListener(type: \"sync\", listener: (event: SyncEventLike) => void): void;\n    addEventListener(type: \"fetch\", listener: (event: BgFetchEventLike) => void): void;\n    addEventListener(type: \"periodicsync\", listener: (event: PeriodicSyncEventLike) => void): void;\n}\n\nfunction getSwScope(): BgSwGlobal {\n    return globalThis as unknown as BgSwGlobal;\n}\n\n/**\n * How an entry is tied to whoever queued it:\n * - `\"bound\"`: the issuing page reported a principal (or `null` for nobody);\n *   the entry only goes out while the same one is signed in.\n * - `\"unbound\"`: the issuing page answered without `getPrincipal`.\n * - `\"unknown\"`: nobody could say — no issuing tab, no answer, an error, or an\n *   entry written before owners existed. Fails closed, with or without stripped\n *   credentials: a cookie session rides along on the replay, so an entry with no\n *   credential header is checked like any other.\n *\n * While the worker is still asking, the stored state is `\"pending\"`, which a\n * replay never sees: it waits, then reads a stamp that never came as `\"unknown\"`.\n */\nexport type BackgroundSyncOwnerState = \"bound\" | \"unbound\" | \"unknown\";\n\n/**\n * How the default `beforeReplay` treats an `\"unknown\"` owner on an entry that\n * carried no credential header:\n * - `\"strict\"` (default): it asks the open pages like any other entry — replayed\n *   only when every answer lacks a principal, dropped as soon as one answer has\n *   one, pending while nobody answers.\n * - `\"lenient\"`: it is replayed as-is, without asking (the behavior up to 0.77.0).\n *\n * An entry with stripped credentials always asks, under either policy.\n */\nexport type BackgroundSyncOwnerPolicy = \"strict\" | \"lenient\";\n\n/** A serialized request stored in the queue. */\ninterface QueuedRequest {\n    id?: number;\n    url: string;\n    method: string;\n    headers: [string, string][];\n    body: ArrayBuffer | null;\n    timestamp: number;\n    /** The original `credentials` mode, so cookie-based APIs replay with cookies. */\n    credentials?: RequestCredentials;\n    /** Lower-cased names of the credential headers removed before persisting. */\n    strippedHeaders?: string[];\n    /** Absent on entries written before 0.77 — read as `\"unknown\"`. */\n    ownerState?: BackgroundSyncOwnerState | \"pending\";\n    /** Fingerprint of the principal under `\"bound\"`; `null` for \"nobody signed in\". */\n    owner?: string | null;\n}\n\n/** Default IndexedDB database name (and sync tag) of the background-sync queue. */\nconst DEFAULT_QUEUE_NAME = \"tempest-bg-sync\";\n\n/**\n * Schema version of the queue database. Version 2 adds the `meta` store (the\n * clear epoch) and migrates version-1 entries, scrubbing their plaintext\n * credential headers on first open.\n */\nconst DB_VERSION = 2;\nconst STORE = \"requests\";\nconst META = \"meta\";\nconst EPOCH_KEY = \"epoch\";\n\n/**\n * `type` of the message the worker posts to window clients to ask about a queued\n * request. Answered by {@link provideBackgroundSyncCredentials}.\n */\nexport const BACKGROUND_SYNC_CREDENTIALS_MESSAGE = \"tempest:bg-sync-credentials\";\n\n/** How long the worker waits for the window clients to answer, in milliseconds. */\nconst CREDENTIALS_TIMEOUT_MS = 3000;\n\n/**\n * How long a replay waits on an entry whose owner is still being stamped. Past\n * it (the worker died mid-question), the owner is read as `\"unknown\"`.\n */\nconst OWNER_STAMP_GRACE_MS = CREDENTIALS_TIMEOUT_MS * 2;\n\n/** What a queued request looked like when it was stored, passed to `beforeReplay`. */\nexport interface BackgroundSyncReplayContext {\n    /** Epoch milliseconds of the original failed attempt. */\n    queuedAt: number;\n    /** Lower-cased credential header names stripped before the entry was stored. */\n    strippedHeaders: readonly string[];\n    /** How the entry is tied to its owner. */\n    ownerState: BackgroundSyncOwnerState;\n    /** Owner fingerprint under `\"bound\"` (`null` for nobody); `undefined` otherwise. */\n    owner: string | null | undefined;\n}\n\n/** The request a window client is asked about, as sent by the worker. */\nexport interface BackgroundSyncCredentialsRequest {\n    /** Absolute URL of the queued request. */\n    url: string;\n    /** HTTP method of the queued request. */\n    method: string;\n    /**\n     * `\"enqueue\"` when the worker only wants the owner of a request that just\n     * failed; `\"replay\"` when it is about to send it and needs the credentials.\n     */\n    phase: \"enqueue\" | \"replay\";\n}\n\n/**\n * Resolve the credentials for a queued request: a header record to apply, or\n * `null` when there is no session (the entry is then dropped).\n */\nexport type BackgroundSyncCredentialsProvider = (\n    request: BackgroundSyncCredentialsRequest,\n) => Record<string, string> | null | Promise<Record<string, string> | null>;\n\n/** Options for {@link provideBackgroundSyncCredentials}. */\nexport interface ProvideBackgroundSyncCredentialsOptions {\n    /**\n     * Who is signed in right now — a stable, non-secret id such as the user id;\n     * `null`/`undefined` when nobody is. Read when a request is queued and again\n     * when it is replayed: an entry is only sent while the same principal is\n     * signed in, and dropped otherwise, so a mutation queued by one account is\n     * never sent with another account's credentials even when the app forgets\n     * `clearSessionData()` on logout. Only a SHA-256 fingerprint reaches the\n     * queue, never the value itself. A throw is answered as an explicit error,\n     * which leaves the owner unknown (fail closed).\n     */\n    getPrincipal?: () => string | null | undefined | Promise<string | null | undefined>;\n}\n\n/** Options for {@link installBackgroundSync}. */\nexport interface InstallBackgroundSyncOptions {\n    /**\n     * Which requests to queue on failure. A `RegExp` against the URL or a\n     * predicate. Only non-`GET` requests are ever considered. Default: all\n     * non-`GET` requests.\n     */\n    match?: RegExp | ((url: URL, request: Request) => boolean);\n    /** IndexedDB database name, also used as the sync tag. Default `tempest-bg-sync`. */\n    queueName?: string;\n    /** Drop queued requests older than this (minutes) on replay. Default `1440` (24h). */\n    maxRetentionMinutes?: number;\n    /**\n     * Also drain the queue on the `periodicsync` event carrying this tag,\n     * complementing the one-off `sync` replay so long-pending mutations retry\n     * even without a fresh navigation. Register the periodic sync from the main\n     * thread with {@link registerPeriodicSync}. Default `${queueName}-periodic`.\n     */\n    periodicSyncTag?: string;\n    /**\n     * Header names stripped before a request is persisted — and stripped again on\n     * replay, so entries written by an older version never go out with the\n     * credential they stored. Default {@link DEFAULT_CREDENTIAL_HEADERS}; extend it\n     * for a custom credential header (`[...DEFAULT_CREDENTIAL_HEADERS,\n     * \"x-tenant-key\"]`). Passing `[]` restores the pre-0.77 behavior of\n     * persisting and replaying every header, credentials included.\n     */\n    credentialHeaders?: readonly string[];\n    /**\n     * Prepare each queued request right before it is replayed: return the\n     * request to send (typically with the current credentials applied) or\n     * `null` to drop the entry for good. A thrown error keeps the entry pending.\n     * The context carries the entry's owner, so a custom hook can apply the\n     * same rule as the default.\n     *\n     * Default: only an `\"unbound\"` entry with no stripped credentials (and, under\n     * `ownerPolicy: \"lenient\"`, an `\"unknown\"` one) is replayed as-is, without\n     * asking. Every other entry — credentialed or not —\n     * asks every open window client in parallel (see\n     * {@link provideBackgroundSyncCredentials}) and picks the answer that fits:\n     * - `\"bound\"`: the answer whose owner matches; none among valid answers →\n     *   dropped, never sent anonymously or as somebody else;\n     * - `\"unknown\"`: only when every answer lacks a principal (an app that does\n     *   not use `getPrincipal`); a single answer with one → dropped, since a\n     *   stale tab without `getPrincipal` says nothing about who is signed in\n     *   next to it. This holds for an entry\n     *   with no credential header too, since the browser attaches the cookies of\n     *   whoever is signed in at replay time;\n     * - `\"unbound\"`: any answer, preferring one without a principal.\n     * Then `null` headers drop a credentialed entry, an answer that lacks one of\n     * the stripped headers keeps it pending, and only the stripped names are\n     * re-applied. No valid answer at all keeps it pending until\n     * `maxRetentionMinutes` (and warns once per replay in development builds) —\n     * so a page that never calls {@link provideBackgroundSyncCredentials} leaves\n     * every entry it queued `\"unknown\"`, and none of them is replayed.\n     */\n    /**\n     * How an `\"unknown\"` owner is handled on an entry with no stripped\n     * credentials (see {@link BackgroundSyncOwnerPolicy}). Default `\"strict\"`.\n     *\n     * `\"lenient\"` restores the replay-as-is of 0.77.0 and earlier for an app without sign-in,\n     * where no page ever reports a principal. Do not use it with a cookie\n     * session: the browser attaches on replay the cookie of whoever is signed in\n     * at that moment, so a mutation queued by A whose owner was never stamped\n     * (issuing tab closed, empty `clientId`, stamp lost, legacy entry) goes out\n     * with B's session. Entries with stripped credentials ask the pages either\n     * way. Ignored when a custom `beforeReplay` is given.\n     */\n    ownerPolicy?: BackgroundSyncOwnerPolicy;\n    beforeReplay?: (\n        request: Request,\n        context: BackgroundSyncReplayContext,\n    ) => Request | null | Promise<Request | null>;\n}\n\n/**\n * Move credential headers out of a header list.\n *\n * @returns The remaining headers and the lower-cased names removed.\n */\nfunction splitHeaders(\n    headers: Iterable<[string, string]>,\n    credentialHeaders: ReadonlySet<string>,\n): { kept: [string, string][]; stripped: string[] } {\n    const kept: [string, string][] = [];\n    const stripped: string[] = [];\n    for (const [name, value] of headers) {\n        if (credentialHeaders.has(name.toLowerCase())) stripped.push(name.toLowerCase());\n        else kept.push([name, value]);\n    }\n    return { kept, stripped };\n}\n\n/**\n * Scrub version-1 entries during the upgrade: their credential headers were\n * stored in plaintext, so they are removed from disk on the first open, recorded\n * as stripped, and the owner is marked unknown.\n */\nfunction migrateLegacyEntries(store: IDBObjectStore, credentialHeaders: ReadonlySet<string>): void {\n    const cursorRequest = store.openCursor();\n    cursorRequest.onsuccess = () => {\n        const cursor = cursorRequest.result;\n        if (!cursor) return;\n        const entry = cursor.value as QueuedRequest;\n        const { kept, stripped } = splitHeaders(entry.headers, credentialHeaders);\n        cursor.update({\n            ...entry,\n            headers: kept,\n            strippedHeaders: [...new Set([...(entry.strippedHeaders ?? []), ...stripped])],\n            ownerState: entry.ownerState ?? \"unknown\",\n        });\n        cursor.continue();\n    };\n}\n\nfunction openQueueDb(\n    name: string,\n    credentialHeaders: ReadonlySet<string> = credentialHeaderSet(),\n): Promise<IDBDatabase> {\n    return new Promise((resolve, reject) => {\n        const request = indexedDB.open(name, DB_VERSION);\n        request.onupgradeneeded = (event) => {\n            const db = request.result;\n            if (!db.objectStoreNames.contains(STORE)) {\n                db.createObjectStore(STORE, { keyPath: \"id\", autoIncrement: true });\n            } else if (event.oldVersion < 2 && request.transaction) {\n                migrateLegacyEntries(request.transaction.objectStore(STORE), credentialHeaders);\n            }\n            if (!db.objectStoreNames.contains(META)) db.createObjectStore(META);\n        };\n        request.onsuccess = () => {\n            const db = request.result;\n            db.onversionchange = () => db.close();\n            resolve(db);\n        };\n        request.onerror = () => reject(request.error);\n    });\n}\n\nfunction txDone(tx: IDBTransaction): Promise<void> {\n    return new Promise((resolve, reject) => {\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n        tx.onabort = () => reject(tx.error);\n    });\n}\n\n/** The current clear epoch: bumped by every {@link clearBackgroundSyncQueue}. */\nasync function readEpoch(name: string, credentialHeaders: ReadonlySet<string>): Promise<number> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction(META, \"readonly\");\n    const get = tx.objectStore(META).get(EPOCH_KEY);\n    await txDone(tx);\n    db.close();\n    return (get.result as number | undefined) ?? 0;\n}\n\n/**\n * Add an entry unless the queue was cleared since `epoch` was read — checked in\n * the same transaction as the write, so a logout that lands while the request\n * is still failing never lets it into the next session's queue.\n *\n * @returns The new entry's key, or `undefined` when the clear won.\n */\nasync function enqueue(\n    name: string,\n    entry: QueuedRequest,\n    epoch: number,\n    credentialHeaders: ReadonlySet<string>,\n): Promise<number | undefined> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction([STORE, META], \"readwrite\");\n    let id: number | undefined;\n    const current = tx.objectStore(META).get(EPOCH_KEY);\n    current.onsuccess = () => {\n        if (((current.result as number | undefined) ?? 0) !== epoch) return;\n        const add = tx.objectStore(STORE).add(entry);\n        add.onsuccess = () => {\n            id = add.result as number;\n        };\n    };\n    await txDone(tx);\n    db.close();\n    return id;\n}\n\n/**\n * Record how an entry is owned. A no-op when the entry is already gone\n * (replayed, or the queue was cleared).\n */\nasync function stampOwner(\n    name: string,\n    id: number,\n    ownerState: BackgroundSyncOwnerState,\n    owner: string | null | undefined,\n): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    const store = tx.objectStore(STORE);\n    const get = store.get(id);\n    get.onsuccess = () => {\n        const entry = get.result as QueuedRequest | undefined;\n        if (!entry) return;\n        entry.ownerState = ownerState;\n        if (ownerState === \"bound\") entry.owner = owner ?? null;\n        store.put(entry);\n    };\n    await txDone(tx);\n    db.close();\n}\n\nasync function readAll(\n    name: string,\n    credentialHeaders: ReadonlySet<string>,\n): Promise<QueuedRequest[]> {\n    const db = await openQueueDb(name, credentialHeaders);\n    const tx = db.transaction(STORE, \"readonly\");\n    const all = await new Promise<QueuedRequest[]>((resolve, reject) => {\n        const req = tx.objectStore(STORE).getAll();\n        req.onsuccess = () => resolve(req.result as QueuedRequest[]);\n        req.onerror = () => reject(req.error);\n    });\n    db.close();\n    return all;\n}\n\n/** Whether an entry is still in the queue — `false` once it was cleared. */\nasync function stillQueued(name: string, id: number): Promise<boolean> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readonly\");\n    const count = tx.objectStore(STORE).count(id);\n    await txDone(tx);\n    db.close();\n    return count.result > 0;\n}\n\nasync function remove(name: string, id: number): Promise<void> {\n    const db = await openQueueDb(name);\n    const tx = db.transaction(STORE, \"readwrite\");\n    tx.objectStore(STORE).delete(id);\n    await txDone(tx);\n    db.close();\n}\n\n/**\n * Serialize a request for the queue, leaving out every credential header and\n * recording which ones were present.\n */\nasync function serializeRequest(\n    request: Request,\n    timestamp: number,\n    credentialHeaders: ReadonlySet<string>,\n    ownerState: QueuedRequest[\"ownerState\"],\n): Promise<QueuedRequest> {\n    const buffer = await request.clone().arrayBuffer();\n    const { kept, stripped } = splitHeaders(request.headers.entries(), credentialHeaders);\n    return {\n        url: request.url,\n        method: request.method,\n        headers: kept,\n        body: buffer.byteLength > 0 ? buffer : null,\n        timestamp,\n        credentials: request.credentials,\n        strippedHeaders: stripped,\n        ownerState,\n    };\n}\n\n/**\n * Rebuild a stored request, stripping credential headers once more so an entry\n * that still holds one (a custom `credentialHeaders` the migration did not know)\n * never replays it.\n */\nfunction deserializeRequest(\n    entry: QueuedRequest,\n    credentialHeaders: ReadonlySet<string>,\n): { request: Request; strippedHeaders: string[] } {\n    const { kept, stripped } = splitHeaders(entry.headers, credentialHeaders);\n    return {\n        request: new Request(entry.url, {\n            method: entry.method,\n            headers: kept,\n            body: entry.body ?? undefined,\n            credentials: entry.credentials,\n        }),\n        strippedHeaders: [...new Set([...(entry.strippedHeaders ?? []), ...stripped])],\n    };\n}\n\n/** A window client's parsed answer. */\ninterface ClientAnswer {\n    headers: Record<string, string> | null;\n    /** Whether the page has `getPrincipal`. */\n    hasPrincipal: boolean;\n    owner: string | null;\n}\n\n/**\n * Ask one window client about a queued request over a `MessageChannel`.\n *\n * @returns The parsed answer, or `undefined` when the client stayed silent until\n *   `deadline`, answered `{ error: true }`, or answered something unrecognizable.\n */\nasync function askClient(\n    client: WindowClientLike,\n    request: BackgroundSyncCredentialsRequest,\n    deadline: Promise<void>,\n): Promise<ClientAnswer | undefined> {\n    const channel = new MessageChannel();\n    const answer = await Promise.race([\n        new Promise<unknown>((resolve) => {\n            channel.port1.onmessage = (event: MessageEvent) => resolve(event.data);\n            client.postMessage({ type: BACKGROUND_SYNC_CREDENTIALS_MESSAGE, ...request }, [\n                channel.port2,\n            ]);\n        }),\n        deadline.then(() => undefined),\n    ]);\n    channel.port1.close();\n    if (answer === null || typeof answer !== \"object\" || !(\"headers\" in answer)) return undefined;\n    const { headers, owner } = answer as { headers: unknown; owner?: unknown };\n    const hasPrincipal = \"owner\" in answer;\n    if (hasPrincipal && typeof owner !== \"string\" && owner !== null) return undefined;\n    return {\n        headers:\n            headers !== null && typeof headers === \"object\"\n                ? (headers as Record<string, string>)\n                : null,\n        hasPrincipal,\n        owner: hasPrincipal ? (owner as string | null) : null,\n    };\n}\n\n/** A deadline shared by every client asked in one round. */\nfunction startDeadline(): { promise: Promise<void>; cancel: () => void } {\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    const promise = new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, CREDENTIALS_TIMEOUT_MS);\n    });\n    return { promise, cancel: () => clearTimeout(timer) };\n}\n\n/**\n * Ask every open window client in parallel, under one shared deadline.\n *\n * @returns Every valid answer; empty when nobody answered.\n */\nasync function askAllClients(\n    sw: BgSwGlobal,\n    request: BackgroundSyncCredentialsRequest,\n): Promise<ClientAnswer[]> {\n    const clients = (await sw.clients?.matchAll({ type: \"window\" })) ?? [];\n    if (clients.length === 0) return [];\n    const deadline = startDeadline();\n    const answers = await Promise.all(\n        clients.map((client) => askClient(client, request, deadline.promise)),\n    );\n    deadline.cancel();\n    return answers.filter((answer): answer is ClientAnswer => answer !== undefined);\n}\n\n/** State of one replay pass: answers cached per URL + method, and the warning flag. */\ninterface ReplayRun {\n    ask(request: Request): Promise<ClientAnswer[]>;\n    warnNoAnswer(): void;\n}\n\nfunction createReplayRun(sw: BgSwGlobal): ReplayRun {\n    const answers = new Map<string, Promise<ClientAnswer[]>>();\n    let warned = false;\n    return {\n        ask(request) {\n            const key = `${request.method} ${request.url}`;\n            let pending = answers.get(key);\n            if (!pending) {\n                pending = askAllClients(sw, {\n                    url: request.url,\n                    method: request.method,\n                    phase: \"replay\",\n                });\n                answers.set(key, pending);\n            }\n            return pending;\n        },\n        warnNoAnswer() {\n            if (warned || !isDevBuild()) return;\n            warned = true;\n            console.warn(\n                \"[tempest-react-sdk/sw] background-sync: a queued request needs an open page \" +\n                    \"to confirm who is signed in or to supply the current credentials, and no \" +\n                    \"open page answered. Call \" +\n                    \"provideBackgroundSyncCredentials() in the page; the entry stays pending.\",\n            );\n        },\n    };\n}\n\n/**\n * Pick the answer an entry may be replayed with, per its owner state.\n *\n * An `\"unknown\"` owner replays only when every valid answer lacks a principal:\n * one tab reporting a principal (even `null`) is enough to drop it, because a\n * principal-less answer — say a tab still running a bundle from before the app\n * adopted `getPrincipal` — says nothing about whose cookie the replay carries.\n */\nfunction chooseAnswer(\n    answers: readonly ClientAnswer[],\n    context: BackgroundSyncReplayContext,\n): ClientAnswer | undefined {\n    switch (context.ownerState) {\n        case \"bound\":\n            return answers.find((answer) => answer.hasPrincipal && answer.owner === context.owner);\n        case \"unknown\":\n            return answers.every((answer) => !answer.hasPrincipal) ? answers[0] : undefined;\n        case \"unbound\":\n            return answers.find((answer) => !answer.hasPrincipal) ?? answers[0];\n    }\n}\n\n/**\n * The default `beforeReplay` (rules on {@link InstallBackgroundSyncOptions}).\n *\n * @throws {Error} When no page answered, or the chosen answer lacks a stripped\n *   header — the entry stays pending.\n */\nasync function defaultBeforeReplay(\n    run: ReplayRun,\n    request: Request,\n    context: BackgroundSyncReplayContext,\n    ownerPolicy: BackgroundSyncOwnerPolicy,\n): Promise<Request | null> {\n    const credentialed = context.strippedHeaders.length > 0;\n    const unchecked =\n        context.ownerState === \"unbound\" ||\n        (ownerPolicy === \"lenient\" && context.ownerState === \"unknown\");\n    if (!credentialed && unchecked) return request;\n    const answers = await run.ask(request);\n    if (answers.length === 0) {\n        run.warnNoAnswer();\n        throw new Error(\"background-sync: no client answered\");\n    }\n    const chosen = chooseAnswer(answers, context);\n    if (!chosen) return null;\n    if (!credentialed) return request;\n    if (chosen.headers === null) return null;\n    const provided = new Map(\n        Object.entries(chosen.headers).map(([name, value]) => [name.toLowerCase(), value]),\n    );\n    if (context.strippedHeaders.some((name) => !provided.has(name))) {\n        throw new Error(\"background-sync: the answer lacks a stripped credential header\");\n    }\n    const headers = new Headers(request.headers);\n    for (const name of context.strippedHeaders) headers.set(name, provided.get(name) as string);\n    return new Request(request, { headers });\n}\n\n/** Everything {@link replayQueue} needs besides the clock. */\ninterface ReplayConfig {\n    sw: BgSwGlobal;\n    name: string;\n    maxRetentionMs: number;\n    credentialHeaders: ReadonlySet<string>;\n    beforeReplay?: InstallBackgroundSyncOptions[\"beforeReplay\"];\n    ownerPolicy: BackgroundSyncOwnerPolicy;\n}\n\n/**\n * Replay every queued request once. Entries that succeed, are stale, get a 4xx\n * (a client error that will not fix itself) or that the preparation rejects with\n * `null` are removed; entries that fail again — network error, 5xx, or a\n * preparation that throws — are kept, and so is an entry whose owner is still\n * being stamped (for up to {@link OWNER_STAMP_GRACE_MS}). Each entry is checked\n * against the store right before it is sent, so a queue cleared mid-replay stops\n * the replay. Throws if any entry is still pending, so a `sync` handler keeps\n * the sync registered.\n */\nasync function replayQueue(config: ReplayConfig, now: number): Promise<void> {\n    const { sw, name, maxRetentionMs, credentialHeaders, beforeReplay, ownerPolicy } = config;\n    const run = createReplayRun(sw);\n    const prepare =\n        beforeReplay ??\n        ((request: Request, context: BackgroundSyncReplayContext) =>\n            defaultBeforeReplay(run, request, context, ownerPolicy));\n    const entries = await readAll(name, credentialHeaders);\n    let pending = 0;\n\n    for (const entry of entries) {\n        if (entry.id === undefined) continue;\n        if (now - entry.timestamp > maxRetentionMs) {\n            await remove(name, entry.id);\n            continue;\n        }\n        const state = entry.ownerState ?? \"unknown\";\n        if (state === \"pending\" && now - entry.timestamp < OWNER_STAMP_GRACE_MS) {\n            pending += 1;\n            continue;\n        }\n        const ownerState: BackgroundSyncOwnerState = state === \"pending\" ? \"unknown\" : state;\n        try {\n            const { request: stored, strippedHeaders } = deserializeRequest(\n                entry,\n                credentialHeaders,\n            );\n            const request = await prepare(stored, {\n                queuedAt: entry.timestamp,\n                strippedHeaders,\n                ownerState,\n                owner: ownerState === \"bound\" ? (entry.owner ?? null) : undefined,\n            });\n            if (!(await stillQueued(name, entry.id))) continue;\n            if (request === null) {\n                await remove(name, entry.id);\n                continue;\n            }\n            const response = await fetch(request);\n            if (response.ok || (response.status >= 400 && response.status < 500)) {\n                await remove(name, entry.id);\n            } else {\n                pending += 1;\n            }\n        } catch {\n            pending += 1;\n        }\n    }\n\n    if (pending > 0) throw new Error(`background-sync: ${pending} request(s) still pending`);\n}\n\n/**\n * The replay in flight per queue. `sync`, `periodicsync` and the Safari fallback\n * can fire together; sharing one pass keeps a mutation from being sent twice.\n */\nconst replaysInFlight = new Map<string, Promise<void>>();\n\nfunction drainQueue(config: ReplayConfig): Promise<void> {\n    const running = replaysInFlight.get(config.name);\n    if (running) return running;\n    const pass = replayQueue(config, Date.now()).finally(() => {\n        replaysInFlight.delete(config.name);\n    });\n    replaysInFlight.set(config.name, pass);\n    return pass;\n}\n\nfunction matches(\n    match: InstallBackgroundSyncOptions[\"match\"],\n    url: URL,\n    request: Request,\n): boolean {\n    if (!match) return true;\n    return typeof match === \"function\" ? match(url, request) : match.test(url.href);\n}\n\n/**\n * Ask the issuing page who owns a just-queued entry and record it.\n *\n * @returns Resolves once the owner is stamped; never rejects.\n */\nasync function stampFromIssuer(\n    name: string,\n    id: number,\n    issuer: WindowClientLike,\n    request: Request,\n): Promise<void> {\n    const deadline = startDeadline();\n    const answer = await askClient(\n        issuer,\n        { url: request.url, method: request.method, phase: \"enqueue\" },\n        deadline.promise,\n    );\n    deadline.cancel();\n    const state: BackgroundSyncOwnerState = !answer\n        ? \"unknown\"\n        : answer.hasPrincipal\n          ? \"bound\"\n          : \"unbound\";\n    await stampOwner(name, id, state, answer?.owner);\n}\n\n/**\n * Install the background-sync queue: on a failed mutating request, the request\n * is serialized to IndexedDB (without its credential headers) and a sync is\n * registered; the original fetch still rejects (so your app can show an offline\n * state), and the request is replayed later when the network returns.\n *\n * Right after queueing, the worker asks the page that issued the request who is\n * signed in (`getPrincipal` on {@link provideBackgroundSyncCredentials}) and\n * stamps the entry with that owner, without delaying the rejection. The work is\n * handed to `event.waitUntil` synchronously, so the worker stays alive for it\n * in every engine. Without the Background Sync API (every non-Chromium\n * browser), the queue is drained opportunistically whenever a `GET` goes\n * through the worker.\n *\n * @tempest-limits empty-catch — `registration.sync.register` is unavailable on\n * every non-Chromium browser and fails on a revoked background-sync permission.\n * The entry is already durable in IndexedDB at that point, and the queue is also\n * drained opportunistically on the next successful request, so losing the OS-level\n * wakeup degrades *when* the replay happens, not *whether* it happens.\n */\nexport function installBackgroundSync(options: InstallBackgroundSyncOptions = {}): void {\n    const sw = getSwScope();\n    const {\n        match,\n        queueName = DEFAULT_QUEUE_NAME,\n        maxRetentionMinutes = 1440,\n        periodicSyncTag = `${options.queueName ?? DEFAULT_QUEUE_NAME}-periodic`,\n        credentialHeaders = DEFAULT_CREDENTIAL_HEADERS,\n        beforeReplay,\n        ownerPolicy = \"strict\",\n    } = options;\n    const stripped = credentialHeaderSet(credentialHeaders);\n    const replay: ReplayConfig = {\n        sw,\n        name: queueName,\n        maxRetentionMs: maxRetentionMinutes * 60 * 1000,\n        credentialHeaders: stripped,\n        beforeReplay,\n        ownerPolicy,\n    };\n\n    sw.addEventListener(\"fetch\", (event) => {\n        const request = event.request;\n        if (request.method === \"GET\" || request.method === \"HEAD\") return;\n\n        const url = new URL(request.url);\n        if (!matches(match, url, request)) return;\n\n        const epoch = readEpoch(queueName, stripped);\n        epoch.catch(() => undefined);\n        const attempt = fetch(request.clone());\n        const queued = attempt.then(\n            () => undefined,\n            async () => {\n                const issuer = event.clientId ? await sw.clients?.get(event.clientId) : undefined;\n                const entry = await serializeRequest(\n                    request,\n                    Date.now(),\n                    stripped,\n                    issuer ? \"pending\" : \"unknown\",\n                );\n                const id = await enqueue(queueName, entry, await epoch, stripped);\n                if (id === undefined) return undefined;\n                try {\n                    await sw.registration.sync?.register(queueName);\n                } catch {\n                    /* empty */\n                }\n                return issuer ? { id, issuer } : undefined;\n            },\n        );\n        event.respondWith(\n            attempt.catch(async (error: unknown) => {\n                await queued;\n                throw error;\n            }),\n        );\n        event.waitUntil(\n            queued\n                .then((stamp) =>\n                    stamp ? stampFromIssuer(queueName, stamp.id, stamp.issuer, request) : undefined,\n                )\n                .catch(() => undefined),\n        );\n    });\n\n    sw.addEventListener(\"sync\", (event) => {\n        if (event.tag !== queueName) return;\n        event.waitUntil(drainQueue(replay));\n    });\n\n    sw.addEventListener(\"periodicsync\", (event) => {\n        if (event.tag !== periodicSyncTag) return;\n        event.waitUntil(drainQueue(replay).catch(() => undefined));\n    });\n\n    sw.addEventListener(\"fetch\", (event) => {\n        if (sw.registration.sync) return;\n        if (event.request.method !== \"GET\") return;\n        event.waitUntil(drainQueue(replay).catch(() => undefined));\n    });\n}\n\n/**\n * Empty the background-sync queue — every request still waiting to be replayed —\n * and bump its clear epoch. Call it on logout (or use `clearSessionData()`, which\n * also clears the runtime caches) so mutations made under one session are never\n * replayed under the next.\n *\n * Works from the page and from the worker, and reaches work already in flight\n * in the worker: a replay checks each entry right before sending it, and a\n * request still failing when the queue is cleared is not written afterwards.\n *\n * @param queueName - The `queueName` given to {@link installBackgroundSync}.\n *   Default `tempest-bg-sync`.\n * @returns `true` once the queue is empty; `false` when IndexedDB is\n *   unavailable (SSR, old browsers).\n *\n * @example\n * import { clearBackgroundSyncQueue } from \"tempest-react-sdk/sw\";\n *\n * await clearBackgroundSyncQueue();\n */\nexport async function clearBackgroundSyncQueue(\n    queueName: string = DEFAULT_QUEUE_NAME,\n): Promise<boolean> {\n    if (typeof indexedDB === \"undefined\") return false;\n    const db = await openQueueDb(queueName);\n    const tx = db.transaction([STORE, META], \"readwrite\");\n    tx.objectStore(STORE).clear();\n    const meta = tx.objectStore(META);\n    const current = meta.get(EPOCH_KEY);\n    current.onsuccess = () => {\n        meta.put(((current.result as number | undefined) ?? 0) + 1, EPOCH_KEY);\n    };\n    await txDone(tx);\n    db.close();\n    return true;\n}\n\n/**\n * One-way fingerprint of a principal: hex SHA-256, so the queue can compare\n * owners without ever holding the id itself.\n *\n * @returns The fingerprint, or `null` when nobody is signed in.\n */\nasync function ownerFingerprint(principal: string | null | undefined): Promise<string | null> {\n    if (principal === null || principal === undefined || principal === \"\") return null;\n    const digest = await crypto.subtle.digest(\n        \"SHA-256\",\n        new TextEncoder().encode(`tempest-bg-sync:${principal}`),\n    );\n    return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Answer the worker's questions about queued requests (see `beforeReplay` on\n * {@link installBackgroundSync}). Install it once in every page, next to your\n * auth setup; it reads the token at replay time, so the queue never has to store\n * it. Without it, a queued request that carried a credential header is never\n * replayed.\n *\n * `getHeaders` must return **every** credential header the app sends (the worker\n * keeps an entry pending when one it stripped is missing), or `null` when there\n * is no session — the worker then drops the entry instead of replaying it\n * anonymously. A throw from `getHeaders` or `getPrincipal` is answered as an\n * explicit `{ error: true }`. The worker only applies headers whose names the\n * original request carried, so returning `Authorization` for every URL never\n * leaks it to a URL that did not receive it in the first place.\n *\n * Pass `getPrincipal` to bind each entry to whoever queued it: the worker asks\n * the issuing tab right after queueing, asks every tab again before replaying,\n * and drops the entry when no signed-in tab is its owner.\n *\n * @param getHeaders - Resolves the headers for one queued request at replay.\n * @param options - `getPrincipal` binds entries to their owner.\n * @returns A function that removes the listener. A no-op outside the browser.\n *\n * @example\n * import { provideBackgroundSyncCredentials } from \"tempest-react-sdk/sw\";\n *\n * const stop = provideBackgroundSyncCredentials(\n *     () => {\n *         const token = localStorage.getItem(\"token\");\n *         return token ? { Authorization: `Bearer ${token}` } : null;\n *     },\n *     { getPrincipal: () => localStorage.getItem(\"userId\") },\n * );\n */\nexport function provideBackgroundSyncCredentials(\n    getHeaders: BackgroundSyncCredentialsProvider,\n    options: ProvideBackgroundSyncCredentialsOptions = {},\n): () => void {\n    if (typeof navigator === \"undefined\" || !navigator.serviceWorker) return () => undefined;\n    const container = navigator.serviceWorker;\n    const { getPrincipal } = options;\n    const onMessage = (event: MessageEvent): void => {\n        const data = event.data as Partial<BackgroundSyncCredentialsRequest> & { type?: unknown };\n        const port = event.ports[0];\n        if (data?.type !== BACKGROUND_SYNC_CREDENTIALS_MESSAGE || !port) return;\n        const request: BackgroundSyncCredentialsRequest = {\n            url: String(data.url),\n            method: String(data.method),\n            phase: data.phase === \"enqueue\" ? \"enqueue\" : \"replay\",\n        };\n        void (async () => {\n            try {\n                const headers = request.phase === \"enqueue\" ? null : await getHeaders(request);\n                const answer: { headers: Record<string, string> | null; owner?: string | null } = {\n                    headers,\n                };\n                if (getPrincipal) answer.owner = await ownerFingerprint(await getPrincipal());\n                port.postMessage(answer);\n            } catch {\n                port.postMessage({ error: true });\n            }\n        })();\n    };\n    container.addEventListener(\"message\", onMessage);\n    return () => container.removeEventListener(\"message\", onMessage);\n}\n"],"mappings":"A,+EA4DA,SAASK,GAAyB,CAC9B,OAAO,UACX,CAgDA,IAAMC,EAAqB,kBAOrBC,EAAa,EACbC,EAAQ,WACRC,EAAO,OACPC,EAAY,QAMLC,EAAsC,8BAG7CC,EAAyB,IAMzBC,EAAuBD,EAAyB,EAkItD,SAASE,EACL,EACA,EACgD,CAChD,IAAMC,EAA2B,CAAC,EAC5BC,EAAqB,CAAC,EAC5B,IAAK,GAAM,CAACC,EAAMC,KAAUC,EACpBC,EAAkB,IAAIH,EAAK,YAAY,CAAC,EAAGD,EAAS,KAAKC,EAAK,YAAY,CAAC,EAC1EF,EAAK,KAAK,CAACE,EAAMC,CAAK,CAAC,EAEhC,MAAO,CAAE,OAAM,UAAS,CAC5B,CAOA,SAASG,EAAqB,EAAuB,EAA8C,CAC/F,IAAMC,EAAgBC,EAAM,WAAW,EACvC,EAAc,cAAkB,CAC5B,IAAMC,EAASF,EAAc,OAC7B,GAAI,CAACE,EAAQ,OACb,IAAMC,EAAQD,EAAO,MACf,CAAE,OAAM,YAAaV,EAAaW,EAAM,QAASL,CAAiB,EACxEI,EAAO,OAAO,CACV,GAAGC,EACH,QAASV,EACT,gBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAIU,EAAM,iBAAmB,CAAC,EAAI,GAAGT,CAAQ,CAAC,CAAC,EAC7E,WAAYS,EAAM,YAAc,SACpC,CAAC,EACDD,EAAO,SAAS,CACpB,CACJ,CAEA,SAASE,EACL,EACA,EAAyC1B,EAAAA,oBAAoB,EACzC,CACpB,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,IAAM2B,EAAU,UAAU,KAAKV,EAAMV,CAAU,EAC/C,EAAQ,gBAAmB,GAAU,CACjC,IAAMqB,EAAKD,EAAQ,OACdC,EAAG,iBAAiB,SAASpB,CAAK,EAE5BqB,EAAM,WAAa,GAAKF,EAAQ,aACvCN,EAAqBM,EAAQ,YAAY,YAAYnB,CAAK,EAAGY,CAAiB,EAF9EQ,EAAG,kBAAkBpB,EAAO,CAAE,QAAS,KAAM,cAAe,EAAK,CAAC,EAIjEoB,EAAG,iBAAiB,SAASnB,CAAI,GAAGmB,EAAG,kBAAkBnB,CAAI,CACtE,EACA,EAAQ,cAAkB,CACtB,IAAMmB,EAAKD,EAAQ,OACnB,EAAG,oBAAwBC,EAAG,MAAM,EACpCE,EAAQF,CAAE,CACd,EACA,EAAQ,YAAgBG,EAAOJ,EAAQ,KAAK,CAChD,CAAC,CACL,CAEA,SAASK,EAAO,EAAmC,CAC/C,OAAO,IAAI,SAAS,EAAS,IAAW,CACpC,EAAG,eAAmBF,EAAQ,EAC9B,EAAG,YAAgBC,EAAOE,EAAG,KAAK,EAClC,EAAG,YAAgBF,EAAOE,EAAG,KAAK,CACtC,CAAC,CACL,CAGA,eAAeC,EAAU,EAAc,EAAyD,CAC5F,IAAMN,EAAK,MAAMF,EAAYT,EAAMG,CAAiB,EAC9Ca,EAAKL,EAAG,YAAYnB,EAAM,UAAU,EACpC0B,EAAMF,EAAG,YAAYxB,CAAI,CAAC,CAAC,IAAIC,CAAS,EAG9C,OAFA,MAAMsB,EAAOC,CAAE,EACfL,EAAG,MAAM,EACDO,EAAI,QAAiC,CACjD,CASA,eAAeC,EACX,EACA,EACA,EACA,EAC2B,CAC3B,IAAMR,EAAK,MAAMF,EAAYT,EAAMG,CAAiB,EAC9Ca,EAAKL,EAAG,YAAY,CAACpB,EAAOC,CAAI,EAAG,WAAW,EAChD4B,EACEC,EAAUL,EAAG,YAAYxB,CAAI,CAAC,CAAC,IAAIC,CAAS,EAUlD,MATA,GAAQ,cAAkB,CACtB,IAAM4B,EAAQ,QAAiC,KAAOC,EAAO,OAC7D,IAAMC,EAAMP,EAAG,YAAYzB,CAAK,CAAC,CAAC,IAAIiB,CAAK,EAC3C,EAAI,cAAkB,CAClB,EAAKe,EAAI,MACb,CACJ,EACA,MAAMR,EAAOC,CAAE,EACfL,EAAG,MAAM,EACFS,CACX,CAMA,eAAeI,EACX,EACA,EACA,EACA,EACa,CACb,IAAMb,EAAK,MAAMF,EAAYT,CAAI,EAC3BgB,EAAKL,EAAG,YAAYpB,EAAO,WAAW,EACtCe,EAAQU,EAAG,YAAYzB,CAAK,EAC5B2B,EAAMZ,EAAM,IAAIc,CAAE,EACxB,EAAI,cAAkB,CAClB,IAAMZ,EAAQU,EAAI,OACbV,IACL,EAAM,WAAaiB,EACfA,IAAe,UAAS,EAAM,MAAQC,GAAS,MACnDpB,EAAM,IAAIE,CAAK,EACnB,EACA,MAAMO,EAAOC,CAAE,EACfL,EAAG,MAAM,CACb,CAEA,eAAegB,EACX,EACA,EACwB,CACxB,IAAMhB,EAAK,MAAMF,EAAYT,EAAMG,CAAiB,EAC9Ca,EAAKL,EAAG,YAAYpB,EAAO,UAAU,EACrCqC,EAAM,MAAM,IAAI,SAA0B,EAAS,IAAW,CAChE,IAAMC,EAAMb,EAAG,YAAYzB,CAAK,CAAC,CAAC,OAAO,EACzC,EAAI,cAAkBsB,EAAQgB,EAAI,MAAyB,EAC3D,EAAI,YAAgBf,EAAOe,EAAI,KAAK,CACxC,CAAC,EAED,OADAlB,EAAG,MAAM,EACFiB,CACX,CAGA,eAAeE,EAAY,EAAc,EAA8B,CACnE,IAAMnB,EAAK,MAAMF,EAAYT,CAAI,EAC3BgB,EAAKL,EAAG,YAAYpB,EAAO,UAAU,EACrCwC,EAAQf,EAAG,YAAYzB,CAAK,CAAC,CAAC,MAAM6B,CAAE,EAG5C,OAFA,MAAML,EAAOC,CAAE,EACfL,EAAG,MAAM,EACFoB,EAAM,OAAS,CAC1B,CAEA,eAAeC,EAAO,EAAc,EAA2B,CAC3D,IAAMrB,EAAK,MAAMF,EAAYT,CAAI,EAC3BgB,EAAKL,EAAG,YAAYpB,EAAO,WAAW,EAC5CyB,EAAG,YAAYzB,CAAK,CAAC,CAAC,OAAO6B,CAAE,EAC/B,MAAML,EAAOC,CAAE,EACfL,EAAG,MAAM,CACb,CAMA,eAAesB,EACX,EACA,EACA,EACA,EACsB,CACtB,IAAMC,EAAS,MAAMxB,EAAQ,MAAM,CAAC,CAAC,YAAY,EAC3C,CAAE,OAAM,YAAab,EAAaa,EAAQ,QAAQ,QAAQ,EAAGP,CAAiB,EACpF,MAAO,CACH,IAAKO,EAAQ,IACb,OAAQA,EAAQ,OAChB,QAASZ,EACT,KAAMoC,EAAO,WAAa,EAAIA,EAAS,KACvC,YACA,YAAaxB,EAAQ,YACrB,gBAAiBX,EACjB,YACJ,CACJ,CAOA,SAASoC,EACL,EACA,EAC+C,CAC/C,GAAM,CAAE,OAAM,YAAatC,EAAaW,EAAM,QAASL,CAAiB,EACxE,MAAO,CACH,QAAS,IAAI,QAAQK,EAAM,IAAK,CAC5B,OAAQA,EAAM,OACd,QAASV,EACT,KAAMU,EAAM,MAAQ,IAAA,GACpB,YAAaA,EAAM,WACvB,CAAC,EACD,gBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAIA,EAAM,iBAAmB,CAAC,EAAI,GAAGT,CAAQ,CAAC,CAAC,CACjF,CACJ,CAgBA,eAAeqC,EACX,EACA,EACA,EACiC,CACjC,IAAMC,EAAU,IAAI,eACdC,EAAS,MAAM,QAAQ,KAAK,CAC9B,IAAI,QAAkB,GAAY,CAC9B,EAAQ,MAAM,UAAa,GAAwBzB,EAAQD,EAAM,IAAI,EACrE2B,EAAO,YAAY,CAAE,KAAM7C,EAAqC,GAAGgB,CAAQ,EAAG,CAC1E2B,EAAQ,KACZ,CAAC,CACL,CAAC,EACDG,EAAS,SAAW,IAAA,EAAS,CACjC,CAAC,EAED,GADAH,EAAQ,MAAM,MAAM,EACG,OAAOC,GAAW,WAArCA,GAAiD,EAAE,YAAaA,GAAS,OAC7E,GAAM,CAAE,UAAS,SAAUA,EACrBG,EAAe,UAAWH,EAChC,GAAI,KAAgB,OAAOZ,GAAU,UAAYA,IAAU,MAC3D,MAAO,CACH,QACwB,OAAOxB,GAAY,UAAvCA,EACOA,EACD,KACV,eACA,MAAOuC,EAAgBf,EAA0B,IACrD,CACJ,CAGA,SAASgB,GAAgE,CACrE,IAAIC,EAIJ,MAAO,CAAE,QAAA,IAHW,QAAe,GAAY,CAC3C,EAAQ,WAAW9B,EAASlB,CAAsB,CACtD,CACS,EAAS,WAAc,aAAagD,CAAK,CAAE,CACxD,CAOA,eAAeC,EACX,EACA,EACuB,CACvB,IAAMC,EAAW,MAAMC,EAAG,SAAS,SAAS,CAAE,KAAM,QAAS,CAAC,GAAM,CAAC,EACrE,GAAID,EAAQ,SAAW,EAAG,MAAO,CAAC,EAClC,IAAML,EAAWE,EAAc,EACzBK,EAAU,MAAM,QAAQ,IAC1BF,EAAQ,IAAK,GAAWT,EAAUG,EAAQ7B,EAAS8B,EAAS,OAAO,CAAC,CACxE,EAEA,OADAA,EAAS,OAAO,EACTO,EAAQ,OAAQ,GAAmCT,IAAW,IAAA,EAAS,CAClF,CAQA,SAASU,EAAgB,EAA2B,CAChD,IAAMD,EAAU,IAAI,IAChBE,EAAS,GACb,MAAO,CACH,IAAI,EAAS,CACT,IAAMC,EAAM,GAAGxC,EAAQ,OAAO,GAAGA,EAAQ,MACrCyC,EAAUJ,EAAQ,IAAIG,CAAG,EAS7B,OARKC,IACD,EAAUP,EAAcE,EAAI,CACxB,IAAKpC,EAAQ,IACb,OAAQA,EAAQ,OAChB,MAAO,QACX,CAAC,EACDqC,EAAQ,IAAIG,EAAKC,CAAO,GAErBA,CACX,EACA,cAAe,CACP,IAAWnE,EAAAA,WAAW,IAC1B,EAAS,GACT,QAAQ,KACJ,wPAIJ,EACJ,CACJ,CACJ,CAUA,SAASoE,EACL,EACA,EACwB,CACxB,OAAQC,EAAQ,WAAhB,CACI,IAAK,QACD,OAAON,EAAQ,KAAM,GAAWT,EAAO,cAAgBA,EAAO,QAAUe,EAAQ,KAAK,EACzF,IAAK,UACD,OAAON,EAAQ,MAAO,GAAW,CAACT,EAAO,YAAY,EAAIS,EAAQ,GAAK,IAAA,GAC1E,IAAK,UACD,OAAOA,EAAQ,KAAM,GAAW,CAACT,EAAO,YAAY,GAAKS,EAAQ,EACzE,CACJ,CAQA,eAAeO,EACX,EACA,EACA,EACA,EACuB,CACvB,IAAMC,EAAeF,EAAQ,gBAAgB,OAAS,EAChDG,EACFH,EAAQ,aAAe,WACtBI,IAAgB,WAAaJ,EAAQ,aAAe,UACzD,GAAI,CAACE,GAAgBC,EAAW,OAAO9C,EACvC,IAAMqC,EAAU,MAAMW,EAAI,IAAIhD,CAAO,EACrC,GAAIqC,EAAQ,SAAW,EAEnB,MADAW,EAAI,aAAa,EACP,MAAM,qCAAqC,EAEzD,IAAMC,EAASP,EAAaL,EAASM,CAAO,EAC5C,GAAI,CAACM,EAAQ,OAAO,KACpB,GAAI,CAACJ,EAAc,OAAO7C,EAC1B,GAAIiD,EAAO,UAAY,KAAM,OAAO,KACpC,IAAMC,EAAW,IAAI,IACjB,OAAO,QAAQD,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC3D,EAAMC,KAAW,CAACD,EAAK,YAAY,EAAGC,CAAK,CAAC,CACrF,EACA,GAAIoD,EAAQ,gBAAgB,KAAM,GAAS,CAACO,EAAS,IAAI5D,CAAI,CAAC,EAC1D,MAAU,MAAM,gEAAgE,EAEpF,IAAME,EAAU,IAAI,QAAQQ,EAAQ,OAAO,EAC3C,IAAK,IAAMV,KAAQqD,EAAQ,gBAAiBnD,EAAQ,IAAIF,EAAM4D,EAAS,IAAI5D,CAAI,CAAW,EAC1F,OAAO,IAAI,QAAQU,EAAS,CAAE,SAAQ,CAAC,CAC3C,CAsBA,eAAemD,EAAY,EAAsB,EAA4B,CACzE,GAAM,CAAE,KAAI,OAAM,iBAAgB,oBAAmB,eAAc,eAAgBC,EAC7EJ,EAAMV,EAAgBF,CAAE,EACxBiB,EACFC,KACE,EAAkB,IAChBV,EAAoBI,EAAKhD,EAAS2C,EAASI,CAAW,GACxDQ,EAAU,MAAMtC,EAAQ3B,EAAMG,CAAiB,EACjDgD,EAAU,EAEd,IAAK,IAAM3C,KAASyD,EAAS,CACzB,GAAIzD,EAAM,KAAO,IAAA,GAAW,SAC5B,GAAI0D,EAAM1D,EAAM,UAAY2D,EAAgB,CACxC,MAAMnC,EAAOhC,EAAMQ,EAAM,EAAE,EAC3B,QACJ,CACA,IAAM4D,EAAQ5D,EAAM,YAAc,UAClC,GAAI4D,IAAU,WAAaF,EAAM1D,EAAM,UAAYZ,EAAsB,CACrE,GAAW,EACX,QACJ,CACA,IAAM6B,EAAuC2C,IAAU,UAAY,UAAYA,EAC/E,GAAI,CACA,GAAM,CAAE,QAASC,EAAQ,mBAAoBlC,EACzC3B,EACAL,CACJ,EACMO,EAAU,MAAMqD,EAAQM,EAAQ,CAClC,SAAU7D,EAAM,UAChB,kBACA,aACA,MAAOiB,IAAe,QAAWjB,EAAM,OAAS,KAAQ,IAAA,EAC5D,CAAC,EACD,GAAI,CAAE,MAAMsB,EAAY9B,EAAMQ,EAAM,EAAE,EAAI,SAC1C,GAAIE,IAAY,KAAM,CAClB,MAAMsB,EAAOhC,EAAMQ,EAAM,EAAE,EAC3B,QACJ,CACA,IAAM8D,EAAW,MAAM,MAAM5D,CAAO,EAChC4D,EAAS,IAAOA,EAAS,QAAU,KAAOA,EAAS,OAAS,IAC5D,MAAMtC,EAAOhC,EAAMQ,EAAM,EAAE,EAE3B,GAAW,CAEnB,MAAQ,CACJ,GAAW,CACf,CACJ,CAEA,GAAI2C,EAAU,EAAG,MAAU,MAAM,oBAAoBA,EAAQ,0BAA0B,CAC3F,CAMA,IAAMoB,EAAkB,IAAI,IAE5B,SAASC,EAAW,EAAqC,CACrD,IAAMC,EAAUF,EAAgB,IAAIT,EAAO,IAAI,EAC/C,GAAIW,EAAS,OAAOA,EACpB,IAAMC,EAAOb,EAAYC,EAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAc,CACvDS,EAAgB,OAAOT,EAAO,IAAI,CACtC,CAAC,EAED,OADAS,EAAgB,IAAIT,EAAO,KAAMY,CAAI,EAC9BA,CACX,CAEA,SAASC,EACL,EACA,EACA,EACO,CAEP,OADKC,EACE,OAAOA,GAAU,WAAaA,EAAMC,EAAKnE,CAAO,EAAIkE,EAAM,KAAKC,EAAI,IAAI,EAD3D,EAEvB,CAOA,eAAeC,EACX,EACA,EACA,EACA,EACa,CACb,IAAMtC,EAAWE,EAAc,EACzBJ,EAAS,MAAMF,EACjB2C,EACA,CAAE,IAAKrE,EAAQ,IAAK,OAAQA,EAAQ,OAAQ,MAAO,SAAU,EAC7D8B,EAAS,OACb,EACAA,EAAS,OAAO,EAMhB,MAAMhB,EAAWxB,EAAMoB,EALkBkB,EAEnCA,EAAO,aACL,QACA,UAHF,UAI4BA,GAAQ,KAAK,CACnD,CAsBA,SAAgB0C,EAAsB,EAAwC,CAAC,EAAS,CACpF,IAAMlC,EAAK1D,EAAW,EAChB,CACF,QACA,YAAYC,EACZ,sBAAsB,KACtB,kBAAkB,GAAG4F,EAAQ,WAAa5F,EAAmB,WAC7D,oBAAoBJ,EAAAA,2BACpB,eACA,cAAc,UACdgG,EACElF,EAAWhB,EAAAA,oBAAoBoB,CAAiB,EAChD+E,EAAuB,CACzB,KACA,KAAMC,EACN,eAAgBC,EAAsB,GAAK,IAC3C,kBAAmBrF,EACnB,eACA,aACJ,EAEA+C,EAAG,iBAAiB,QAAU,GAAU,CACpC,IAAMpC,EAAUE,EAAM,QACtB,GAAIF,EAAQ,SAAW,OAASA,EAAQ,SAAW,OAAQ,OAE3D,IAAMmE,EAAM,IAAI,IAAInE,EAAQ,GAAG,EAC/B,GAAI,CAACiE,EAAQC,EAAOC,EAAKnE,CAAO,EAAG,OAEnC,IAAMY,EAAQL,EAAUkE,EAAWpF,CAAQ,EAC3CuB,EAAM,UAAY,IAAA,EAAS,EAC3B,IAAM+D,EAAU,MAAM3E,EAAQ,MAAM,CAAC,EAC/B4E,EAASD,EAAQ,SACb,IAAA,GACN,SAAY,CACR,IAAMN,EAASnE,EAAM,SAAW,MAAMkC,EAAG,SAAS,IAAIlC,EAAM,QAAQ,EAAI,IAAA,GAClEJ,EAAQ,MAAMyB,EAChBvB,EACA,KAAK,IAAI,EACTX,EACAgF,EAAS,UAAY,SACzB,EACM3D,EAAK,MAAMD,EAAQgE,EAAW3E,EAAO,MAAMc,EAAOvB,CAAQ,EAChE,GAAIqB,IAAO,IAAA,GACX,IAAI,CACA,MAAM0B,EAAG,aAAa,MAAM,SAASqC,CAAS,CAClD,MAAQ,CAER,CACA,OAAOJ,EAAS,CAAE,KAAI,QAAO,EAAI,IAAA,EADjC,CAEJ,CACJ,EACAnE,EAAM,YACFyE,EAAQ,MAAM,KAAO,IAAmB,CAEpC,MADA,MAAMC,EACAC,CACV,CAAC,CACL,EACA3E,EAAM,UACF0E,EACK,KAAM,GACHE,EAAQV,EAAgBK,EAAWK,EAAM,GAAIA,EAAM,OAAQ9E,CAAO,EAAI,IAAA,EAC1E,CAAC,CACA,UAAY,IAAA,EAAS,CAC9B,CACJ,CAAC,EAEDoC,EAAG,iBAAiB,OAAS,GAAU,CAC/BlC,EAAM,MAAQuE,GAClBvE,EAAM,UAAU4D,EAAWU,CAAM,CAAC,CACtC,CAAC,EAEDpC,EAAG,iBAAiB,eAAiB,GAAU,CACvClC,EAAM,MAAQ6E,GAClB7E,EAAM,UAAU4D,EAAWU,CAAM,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7D,CAAC,EAEDpC,EAAG,iBAAiB,QAAU,GAAU,CAChCA,EAAG,aAAa,MAChBlC,EAAM,QAAQ,SAAW,OAC7BA,EAAM,UAAU4D,EAAWU,CAAM,CAAC,CAAC,UAAY,IAAA,EAAS,CAAC,CAC7D,CAAC,CACL,CAsBA,eAAsBQ,EAClB,EAAoBrG,EACJ,CAChB,GAAI,OAAO,UAAc,IAAa,MAAO,GAC7C,IAAMsB,EAAK,MAAMF,EAAY0E,CAAS,EAChCnE,EAAKL,EAAG,YAAY,CAACpB,EAAOC,CAAI,EAAG,WAAW,EACpDwB,EAAG,YAAYzB,CAAK,CAAC,CAAC,MAAM,EAC5B,IAAMoG,EAAO3E,EAAG,YAAYxB,CAAI,EAC1B6B,EAAUsE,EAAK,IAAIlG,CAAS,EAMlC,MALA,GAAQ,cAAkB,CACtBkG,EAAK,KAAMtE,EAAQ,QAAiC,GAAK,EAAG5B,CAAS,CACzE,EACA,MAAMsB,EAAOC,CAAE,EACfL,EAAG,MAAM,EACF,EACX,CAQA,eAAeiF,EAAiB,EAA8D,CAC1F,GAAIC,GAAc,MAAmCA,IAAc,GAAI,OAAO,KAC9E,IAAMC,EAAS,MAAM,OAAO,OAAO,OAC/B,UACA,IAAI,YAAY,CAAC,CAAC,OAAO,mBAAmBD,GAAW,CAC3D,EACA,MAAO,CAAC,GAAG,IAAI,WAAWC,CAAM,CAAC,CAAC,CAAC,IAAK,GAASC,EAAK,SAAS,EAAE,CAAC,CAAC,SAAS,EAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAChG,CAoCA,SAAgBC,EACZ,EACA,EAAmD,CAAC,EAC1C,CACV,GAAI,OAAO,UAAc,KAAe,CAAC,UAAU,cAAe,UAAa,IAAA,GAC/E,IAAMC,EAAY,UAAU,cACtB,CAAE,gBAAiBhB,EACnBiB,EAAa,GAA8B,CAC7C,IAAMC,EAAOvF,EAAM,KACbwF,EAAOxF,EAAM,MAAM,GACzB,GAAIuF,GAAM,OAAA,+BAAgD,CAACC,EAAM,OACjE,IAAM1F,EAA4C,CAC9C,IAAK,OAAOyF,EAAK,GAAG,EACpB,OAAQ,OAAOA,EAAK,MAAM,EAC1B,MAAOA,EAAK,QAAU,UAAY,UAAY,QAClD,GACM,SAAY,CACd,GAAI,CAEA,IAAM7D,EAA4E,CAC9E,QAFY5B,EAAQ,QAAU,UAAY,KAAO,MAAM2F,EAAW3F,CAAO,CAG7E,EACI4F,IAAc,EAAO,MAAQ,MAAMV,EAAiB,MAAMU,EAAa,CAAC,GAC5EF,EAAK,YAAY9D,CAAM,CAC3B,MAAQ,CACJ8D,EAAK,YAAY,CAAE,MAAO,EAAK,CAAC,CACpC,CACJ,EAAA,CAAG,CACP,EAEA,OADAH,EAAU,iBAAiB,UAAWC,CAAS,MAClCD,EAAU,oBAAoB,UAAWC,CAAS,CACnE,C"}