v0.1.5

[0.1.5] - 2026-07-29

Added

• activeRevalidate() — forced, 60 s-debounced revalidation for active use.
  Call it when the user brings the app forward (window focus, popover open,
  route change) so a dashboard revoke lands within a minute instead of waiting
  for the next launch. It bypasses refreshIfNeeded's staleness gates
  (5 min / 6 h / 24 h) and shares checkOnLaunch's reconciliation: a definitive
  server rejection downgrades immediately, a network blip never downgrades a
  live session, and it never throws. The debounce is held in memory only, so a
  process restart or page reload always revalidates. Mirrors the Swift SDK's
  activeRevalidate().

Fixed

• The activeRevalidate() debounce no longer follows the wall clock. It now
  measures elapsed time with performance.now(). Because the debounce
  suppresses revalidation, a system clock moved backwards previously
  suppressed revocation enforcement for the size of the jump — indefinitely, if
  the clock stayed back. Falls back to the previous behaviour only where
  performance is unavailable.