fix: un second doc_subscribe tuait le premier, et les inbox n'étaient lues qu'à la connexion

packages/polyfill/src/emulated-verifier/open-repo.ts

@@ -74,7 +74,7 @@
 import { mustNotAttempt } from "./reach";
 import { fetchReadCap } from "./public-store";
 import { getConfig, getStoreRegistryDeps } from "../shared-wallet/bootstrap";
-import { subscribeDocUnguarded, type Unsubscribe } from "../surface/subscribe";
+import { resubscribeDocs, subscribeDocUnguarded, type Unsubscribe } from "../surface/subscribe";
 import { logStage, shortNuri } from "../shared-wallet/access-log";
 import type { Nuri } from "../model/types";
 
@@ -137,6 +137,15 @@ export function resetOpenedRepos(): void {
   syncState.clear();
   boundSessionId = null;
   OPEN_TIMEOUT_MS = 8000;
+  // Whatever ELSE was still subscribed to a document — a `watchShape` following a scope,
+  // an inbox observation — belongs to the session that just went away too. One real
+  // subscription now serves all of them (`surface/subscribe.ts`), so dropping the bootstrap
+  // ones above no longer closes those channels; they are re-opened against the new session,
+  // with their barrier forgotten. Without this a bootstrap open would join a surviving
+  // fan-out, be handed the PREVIOUS session's `State`, and call a repo the new session has
+  // never synced "synced". After the held teardown, so a document nobody else follows is
+  // simply released.
+  resubscribeDocs();
 }
 
 /**