@eventuras/oratio-core 0.1.0

package/LICENSE

@@ -0,0 +1,382 @@
+oratio — a chat client for Matrix
+Copyright (c) 2026 Losol AS.
+
+oratio is licensed under the Mozilla Public License, Version 2.0 (MPL-2.0).
+The full license text is reproduced below and is also available at
+https://mozilla.org/MPL/2.0/.
+
+--------------------------------------------------------------------------------
+
+Mozilla Public License Version 2.0
+==================================
+
+1. Definitions
+--------------
+
+1.1. "Contributor"
+    means each individual or legal entity that creates, contributes to
+    the creation of, or owns Covered Software.
+
+1.2. "Contributor Version"
+    means the combination of the Contributions of others (if any) used
+    by a Contributor and that particular Contributor's Contribution.
+
+1.3. "Contribution"
+    means Covered Software of a particular Contributor.
+
+1.4. "Covered Software"
+    means Source Code Form to which the initial Contributor has attached
+    the notice in Exhibit A, the Executable Form of such Source Code
+    Form, and Modifications of such Source Code Form, in each case
+    including portions thereof.
+
+1.5. "Incompatible With Secondary Licenses"
+    means
+
+    (a) that the initial Contributor has attached the notice described
+        in Exhibit B to the Covered Software; or
+
+    (b) that the Covered Software was made available under the terms of
+        version 1.1 or earlier of the License, but not also under the
+        terms of a Secondary License.
+
+1.6. "Executable Form"
+    means any form of the work other than Source Code Form.
+
+1.7. "Larger Work"
+    means a work that combines Covered Software with other material, in
+    a separate file or files, that is not Covered Software.
+
+1.8. "License"
+    means this document.
+
+1.9. "Licensable"
+    means having the right to grant, to the maximum extent possible,
+    whether at the time of the initial grant or subsequently, any and
+    all of the rights conveyed by this License.
+
+1.10. "Modifications"
+    means any of the following:
+
+    (a) any file in Source Code Form that results from an addition to,
+        deletion from, or modification of the contents of Covered
+        Software; or
+
+    (b) any new file in Source Code Form that contains any Covered
+        Software.
+
+1.11. "Patent Claims" of a Contributor
+    means any patent claim(s), including without limitation, method,
+    process, and apparatus claims, in any patent Licensable by such
+    Contributor that would be infringed, but for the grant of the
+    License, by the making, using, selling, offering for sale, having
+    made, import, or transfer of either its Contributions or its
+    Contributor Version.
+
+1.12. "Secondary License"
+    means either the GNU General Public License, Version 2.0, the GNU
+    Lesser General Public License, Version 2.1, the GNU Affero General
+    Public License, Version 3.0, or any later versions of those
+    licenses.
+
+1.13. "Source Code Form"
+    means the form of the work preferred for making modifications.
+
+1.14. "You" (or "Your")
+    means an individual or a legal entity exercising rights under this
+    License. For legal entities, "You" includes any entity that
+    controls, is controlled by, or is under common control with You. For
+    purposes of this definition, "control" means (a) the power, direct
+    or indirect, to cause the direction or management of such entity,
+    whether by contract or otherwise, or (b) ownership of more than
+    fifty percent (50%) of the outstanding shares or beneficial
+    ownership of such entity.
+
+2. License Grants and Conditions
+--------------------------------
+
+2.1. Grants
+
+Each Contributor hereby grants You a world-wide, royalty-free,
+non-exclusive license:
+
+(a) under intellectual property rights (other than patent or trademark)
+    Licensable by such Contributor to use, reproduce, make available,
+    modify, display, perform, distribute, and otherwise exploit its
+    Contributions, either on an unmodified basis, with Modifications, or
+    as part of a Larger Work; and
+
+(b) under Patent Claims of such Contributor to make, use, sell, offer
+    for sale, have made, import, and otherwise transfer either its
+    Contributions or its Contributor Version.
+
+2.2. Effective Date
+
+The licenses granted in Section 2.1 with respect to any Contribution
+become effective for each Contribution on the date the Contributor first
+distributes such Contribution.
+
+2.3. Limitations on Grant Scope
+
+The licenses granted in this Section 2 are the only rights granted under
+this License. No additional rights or licenses will be implied from the
+distribution or licensing of Covered Software under this License.
+Notwithstanding Section 2.1(b) above, no patent license is granted by a
+Contributor:
+
+(a) for any code that a Contributor has removed from Covered Software;
+    or
+
+(b) for infringements caused by: (i) Your and any other third party's
+    modifications of Covered Software, or (ii) the combination of its
+    Contributions with other software (except as part of its Contributor
+    Version); or
+
+(c) under Patent Claims infringed by Covered Software in the absence of
+    its Contributions.
+
+This License does not grant any rights in the trademarks, service marks,
+or logos of any Contributor (except as may be necessary to comply with
+the notice requirements in Section 3.4).
+
+2.4. Subsequent Licenses
+
+No Contributor makes additional grants as a result of Your choice to
+distribute the Covered Software under a subsequent version of this
+License (see Section 10.2) or under the terms of a Secondary License (if
+permitted under the terms of Section 3.3).
+
+2.5. Representation
+
+Each Contributor represents that the Contributor believes its
+Contributions are its original creation(s) or it has sufficient rights
+to grant the rights to its Contributions conveyed by this License.
+
+2.6. Fair Use
+
+This License is not intended to limit any rights You have under
+applicable copyright doctrines of fair use, fair dealing, or other
+equivalents.
+
+2.7. Conditions
+
+Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
+in Section 2.1.
+
+3. Responsibilities
+-------------------
+
+3.1. Distribution of Source Form
+
+All distribution of Covered Software in Source Code Form, including any
+Modifications that You create or to which You contribute, must be under
+the terms of this License. You must inform recipients that the Source
+Code Form of the Covered Software is governed by the terms of this
+License, and how they can obtain a copy of this License. You may not
+attempt to alter or restrict the recipients' rights in the Source Code
+Form.
+
+3.2. Distribution of Executable Form
+
+If You distribute Covered Software in Executable Form then:
+
+(a) such Covered Software must also be made available in Source Code
+    Form, as described in Section 3.1, and You must inform recipients of
+    the Executable Form how they can obtain a copy of such Source Code
+    Form by reasonable means in a timely manner, at a charge no more
+    than the cost of distribution to the recipient; and
+
+(b) You may distribute such Executable Form under the terms of this
+    License, or sublicense it under different terms, provided that the
+    license for the Executable Form does not attempt to limit or alter
+    the recipients' rights in the Source Code Form under this License.
+
+3.3. Distribution of a Larger Work
+
+You may create and distribute a Larger Work under terms of Your choice,
+provided that You also comply with the requirements of this License for
+the Covered Software. If the Larger Work is a combination of Covered
+Software with a work governed by one or more Secondary Licenses, and the
+Covered Software is not Incompatible With Secondary Licenses, this
+License permits You to additionally distribute such Covered Software
+under the terms of such Secondary License(s), so that the recipient of
+the Larger Work may, at their option, further distribute the Covered
+Software under the terms of either this License or such Secondary
+License(s).
+
+3.4. Notices
+
+You may not remove or alter the substance of any license notices
+(including copyright notices, patent notices, disclaimers of warranty,
+or limitations of liability) contained within the Source Code Form of
+the Covered Software, except that You may alter any license notices to
+the extent required to remedy known factual inaccuracies.
+
+3.5. Application of Additional Terms
+
+You may choose to offer, and to charge a fee for, warranty, support,
+indemnity or liability obligations to one or more recipients of Covered
+Software. However, You may do so only on Your own behalf, and not on
+behalf of any Contributor. You must make it absolutely clear that any
+such warranty, support, indemnity, or liability obligation is offered by
+You alone, and You hereby agree to indemnify every Contributor for any
+liability incurred by such Contributor as a result of warranty, support,
+indemnity or liability terms You offer. You may include additional
+disclaimers of warranty and limitations of liability specific to any
+jurisdiction.
+
+4. Inability to Comply Due to Statute or Regulation
+---------------------------------------------------
+
+If it is impossible for You to comply with any of the terms of this
+License with respect to some or all of the Covered Software due to
+statute, judicial order, or regulation then You must: (a) comply with
+the terms of this License to the maximum extent possible; and (b)
+describe the limitations and the code they affect. Such description must
+be placed in a text file included with all distributions of the Covered
+Software under this License. Except to the extent prohibited by statute
+or regulation, such description must be sufficiently detailed for a
+recipient of ordinary skill to be able to understand it.
+
+5. Termination
+--------------
+
+5.1. The rights granted under this License will terminate automatically
+if You fail to comply with any of its terms. However, if You become
+compliant, then the rights granted under this License from a particular
+Contributor are reinstated (a) provisionally, unless and until such
+Contributor explicitly and finally terminates Your grants, and (b) on an
+ongoing basis, if such Contributor fails to notify You of the
+non-compliance by some reasonable means prior to 60 days after You have
+come back into compliance. Moreover, Your grants from a particular
+Contributor are reinstated on an ongoing basis if such Contributor
+notifies You of the non-compliance by some reasonable means, this is the
+first time You have received notice of non-compliance with this License
+from such Contributor, and You become compliant prior to 30 days after
+Your receipt of the notice.
+
+5.2. If You initiate litigation against any entity by asserting a patent
+infringement claim (excluding declaratory judgment actions,
+counter-claims, and cross-claims) alleging that a Contributor Version
+directly or indirectly infringes any patent, then the rights granted to
+You by any and all Contributors for the Covered Software under Section
+2.1 of this License shall terminate.
+
+5.3. In the event of termination under Sections 5.1 or 5.2 above, all
+end user license agreements (excluding distributors and resellers) which
+have been validly granted by You or Your distributors under this License
+prior to termination shall survive termination.
+
+************************************************************************
+*                                                                      *
+*  6. Disclaimer of Warranty                                           *
+*  -------------------------                                           *
+*                                                                      *
+*  Covered Software is provided under this License on an "as is"       *
+*  basis, without warranty of any kind, either expressed, implied, or  *
+*  statutory, including, without limitation, warranties that the       *
+*  Covered Software is free of defects, merchantable, fit for a        *
+*  particular purpose or non-infringing. The entire risk as to the     *
+*  quality and performance of the Covered Software is with You.        *
+*  Should any Covered Software prove defective in any respect, You     *
+*  (not any Contributor) assume the cost of any necessary servicing,   *
+*  repair, or correction. This disclaimer of warranty constitutes an   *
+*  essential part of this License. No use of any Covered Software is   *
+*  authorized under this License except under this disclaimer.         *
+*                                                                      *
+************************************************************************
+
+************************************************************************
+*                                                                      *
+*  7. Limitation of Liability                                          *
+*  --------------------------                                          *
+*                                                                      *
+*  Under no circumstances and under no legal theory, whether tort      *
+*  (including negligence), contract, or otherwise, shall any           *
+*  Contributor, or anyone who distributes Covered Software as          *
+*  permitted above, be liable to You for any direct, indirect,         *
+*  special, incidental, or consequential damages of any character      *
+*  including, without limitation, damages for lost profits, loss of    *
+*  goodwill, work stoppage, computer failure or malfunction, or any    *
+*  and all other commercial damages or losses, even if such party      *
+*  shall have been informed of the possibility of such damages. This   *
+*  limitation of liability shall not apply to liability for death or   *
+*  personal injury resulting from such party's negligence to the       *
+*  extent applicable law prohibits such limitation. Some               *
+*  jurisdictions do not allow the exclusion or limitation of           *
+*  incidental or consequential damages, so this exclusion and          *
+*  limitation may not apply to You.                                    *
+*                                                                      *
+************************************************************************
+
+8. Litigation
+-------------
+
+Any litigation relating to this License may be brought only in the
+courts of a jurisdiction where the defendant maintains its principal
+place of business and such litigation shall be governed by laws of that
+jurisdiction, without reference to its conflict-of-law provisions.
+Nothing in this Section shall prevent a party's ability to bring
+cross-claims or counter-claims.
+
+9. Miscellaneous
+----------------
+
+This License represents the complete agreement concerning the subject
+matter hereof. If any provision of this License is held to be
+unenforceable, such provision shall be reformed only to the extent
+necessary to make it enforceable. Any law or regulation which provides
+that the language of a contract shall be construed against the drafter
+shall not be used to construe this License against a Contributor.
+
+10. Versions of the License
+---------------------------
+
+10.1. New Versions
+
+Mozilla Foundation is the license steward. Except as provided in Section
+10.3, no one other than the license steward has the right to modify or
+publish new versions of this License. Each version will be given a
+distinguishing version number.
+
+10.2. Effect of New Versions
+
+You may distribute the Covered Software under the terms of the version
+of the License under which You originally received the Covered Software,
+or under the terms of any subsequent version published by the license
+steward.
+
+10.3. Modified Versions
+
+If you create software not governed by this License, and you want to
+create a new license for such software, you may create and use a
+modified version of this License if you rename the license and remove
+any references to the name of the license steward (except to note that
+such modified license differs from this License).
+
+10.4. Distributing Source Code Form that is Incompatible With Secondary
+Licenses
+
+If You choose to distribute Source Code Form that is Incompatible With
+Secondary Licenses under the terms of this version of the License, the
+notice described in Exhibit B of this License must be attached.
+
+Exhibit A - Source Code Form License Notice
+-------------------------------------------
+
+  This Source Code Form is subject to the terms of the Mozilla Public
+  License, v. 2.0. If a copy of the MPL was not distributed with this
+  file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
+If it is not possible or desirable to put the notice in a particular
+file, then You may include the notice in a location (such as a LICENSE
+file in a relevant directory) where a recipient would be likely to look
+for such a notice.
+
+You may add additional accurate notices of copyright ownership.
+
+Exhibit B - "Incompatible With Secondary Licenses" Notice
+---------------------------------------------------------
+
+  This Source Code Form is "Incompatible With Secondary Licenses", as
+  defined by the Mozilla Public License, v. 2.0.

package/README.md

@@ -0,0 +1,31 @@
+# @eventuras/oratio-core
+
+Framework-agnostic core of the oratio Matrix client. Wraps
+[matrix-js-sdk](https://github.com/matrix-org/matrix-js-sdk) and maps rooms,
+timelines and members to the shapes that `@eventuras/ratio-ui/chat` renders.
+
+No DOM dependencies: storage and other platform services are injected, so the
+package can serve a web app, a Capacitor shell or React Native.
+
+## Install
+
+```sh
+pnpm add @eventuras/oratio-core
+```
+
+## Status
+
+Early, 0.x: the API may change between minor versions. Signs in with a
+password or through the homeserver's OIDC (MSC3861), syncs with token refresh,
+and maps rooms and timelines. No end-to-end encryption.
+
+## Development
+
+```sh
+pnpm --filter @eventuras/oratio-core build
+pnpm --filter @eventuras/oratio-core test
+```
+
+## License
+
+MPL-2.0

package/dist/ids.d.ts

@@ -0,0 +1,12 @@
+/** A Matrix user ID, `@localpart:server.name`, split into its parts. */
+export interface MatrixUserId {
+    localpart: string;
+    serverName: string;
+}
+/**
+ * Splits a Matrix user ID into localpart and server name.
+ * The server name may carry a port (`localhost:8008`), so the first colon
+ * after `@` is the separator. Returns null when the input is not a user ID.
+ */
+export declare function parseUserId(userId: string): MatrixUserId | null;
+//# sourceMappingURL=ids.d.ts.map

package/dist/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../src/ids.ts"],"names":[],"mappings":"AAIA,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAS/D"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { ClientEvent, EventType, type MatrixClient, Preset, RoomEvent } from 'matrix-js-sdk';
+export { type MatrixUserId, parseUserId } from './ids';
+export { beginOidcLogin, completeOidcLogin, type OidcLoginOptions, type PendingOidcLogin, } from './oidc';
+export { directRoomIds, joinedRooms, type OratioRoom, type RoomLike, toOratioRoom, } from './rooms';
+export { loginWithPassword, logout, type OratioSession, type PasswordLogin, type StartClientOptions, startClient, } from './session';
+export { type EventLike, type OratioMessage, type TimelineOptions, toOratioMessages, } from './timeline';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,KAAK,YAAY,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACvD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,aAAa,EACb,WAAW,EACX,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,MAAM,EACN,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,199 @@
+import { ClientEvent, EventType, EventType as EventType$1, KnownMembership, MsgType, NotificationCountType, OAuth2, Preset, RoomEvent, TokenRefresher, createClient } from "matrix-js-sdk";
+//#region src/ids.ts
+/**
+* Splits a Matrix user ID into localpart and server name.
+* The server name may carry a port (`localhost:8008`), so the first colon
+* after `@` is the separator. Returns null when the input is not a user ID.
+*/
+function parseUserId(userId) {
+	if (!userId.startsWith("@")) return null;
+	const colon = userId.indexOf(":", 1);
+	if (colon < 2 || colon === userId.length - 1) return null;
+	return {
+		localpart: userId.slice(1, colon),
+		serverName: userId.slice(colon + 1)
+	};
+}
+//#endregion
+//#region src/oidc.ts
+async function authMetadata(homeserverUrl) {
+	return createClient({ baseUrl: homeserverUrl }).getAuthMetadata();
+}
+/** Registers the app with the homeserver and returns the URL to send the user to. */
+async function beginOidcLogin(options) {
+	const metadata = await authMetadata(options.homeserverUrl);
+	const start = async (clientId) => {
+		const oauth = new OAuth2(metadata, {
+			clientId,
+			redirectUri: options.redirectUri
+		});
+		const state = crypto.randomUUID();
+		return {
+			url: await oauth.generateAuthorizationCodeGrantUrl(state),
+			pending: {
+				...oauth.context,
+				homeserverUrl: options.homeserverUrl,
+				state
+			}
+		};
+	};
+	if (options.clientId) {
+		const attempt = await start(options.clientId);
+		if ((await fetch(attempt.url, { redirect: "manual" }).catch(() => null))?.status !== 404) return attempt;
+	}
+	return start(await OAuth2.registerClient(metadata, {
+		client_name: options.clientName ?? "oratio",
+		client_uri: options.clientUri,
+		redirect_uris: [options.redirectUri],
+		application_type: "web"
+	}));
+}
+/**
+* Finishes sign-in from the URL the homeserver redirected to. The code comes in
+* the fragment by default; the query string is read as a fallback.
+*/
+async function completeOidcLogin(pending, callbackUrl) {
+	const url = new URL(callbackUrl);
+	const params = new URLSearchParams(url.hash.slice(1) || url.search);
+	const error = params.get("error");
+	if (error) throw new Error(params.get("error_description") ?? error);
+	if (params.get("state") !== pending.state) throw new Error("Sign-in state does not match. Start again.");
+	const code = params.get("code");
+	if (!code) throw new Error("The homeserver sent no authorization code.");
+	const metadata = await authMetadata(pending.homeserverUrl);
+	const tokens = await new OAuth2(metadata, pending).completeAuthorizationCodeGrant(code);
+	const { user_id } = await createClient({
+		baseUrl: pending.homeserverUrl,
+		accessToken: tokens.access_token
+	}).whoami();
+	return {
+		homeserverUrl: pending.homeserverUrl,
+		userId: user_id,
+		accessToken: tokens.access_token,
+		deviceId: pending.deviceId,
+		refreshToken: tokens.refresh_token,
+		oauthClientId: pending.clientId
+	};
+}
+/** An OAuth2 helper for a signed-in OIDC session, for token refresh and revocation. */
+async function oauthForSession(session) {
+	if (!session.oauthClientId) return null;
+	const metadata = await authMetadata(session.homeserverUrl);
+	return new OAuth2(metadata, {
+		clientId: session.oauthClientId,
+		deviceId: session.deviceId,
+		redirectUri: ""
+	});
+}
+//#endregion
+//#region src/rooms.ts
+/**
+* Maps a Matrix room to a room-list entry. `directRoomIds` comes from the
+* user's `m.direct` account data: those rooms are direct messages.
+*/
+function toOratioRoom(room, directRoomIds) {
+	const unread = room.getUnreadNotificationCount(NotificationCountType.Total);
+	const highlights = room.getUnreadNotificationCount(NotificationCountType.Highlight);
+	return {
+		id: room.roomId,
+		kind: directRoomIds.has(room.roomId) ? "dm" : "channel",
+		name: room.name,
+		...unread > 0 && { unread },
+		...highlights > 0 && { mention: true },
+		members: room.getJoinedMemberCount(),
+		...room.hasEncryptionStateEvent() && { encrypted: true }
+	};
+}
+/** The room IDs listed in `m.direct`, which maps each user ID to their DM rooms. */
+function directRoomIds(mDirect) {
+	return new Set(Object.values(mDirect ?? {}).flat());
+}
+/** Rooms the user has joined, sorted by name. Invites and left rooms are not listed yet. */
+function joinedRooms(rooms) {
+	return rooms.filter((room) => room.getMyMembership() === KnownMembership.Join).sort((a, b) => a.name.localeCompare(b.name));
+}
+//#endregion
+//#region src/session.ts
+/** Signs in with a password and returns a new session. For development and password-only servers. */
+async function loginWithPassword(login) {
+	const response = await createClient({ baseUrl: login.homeserverUrl }).loginRequest({
+		type: "m.login.password",
+		identifier: {
+			type: "m.id.user",
+			user: login.username
+		},
+		password: login.password,
+		initial_device_display_name: login.deviceName ?? "oratio"
+	});
+	return {
+		homeserverUrl: login.homeserverUrl,
+		userId: response.user_id,
+		accessToken: response.access_token,
+		deviceId: response.device_id
+	};
+}
+/**
+* Creates a client for a session and starts syncing. OIDC sessions refresh
+* their access token as it expires. No end-to-end encryption: encrypted rooms
+* show up, but their messages cannot be read.
+*/
+async function startClient(session, options = {}) {
+	let current = session;
+	const oauth = session.refreshToken ? await oauthForSession(session) : null;
+	const refresher = oauth ? new TokenRefresher(oauth, async ({ accessToken, refreshToken }) => {
+		current = {
+			...current,
+			accessToken,
+			refreshToken
+		};
+		options.onSessionChange?.(current);
+	}) : null;
+	const client = createClient({
+		baseUrl: session.homeserverUrl,
+		userId: session.userId,
+		accessToken: session.accessToken,
+		deviceId: session.deviceId,
+		refreshToken: session.refreshToken,
+		tokenRefreshFunction: refresher?.tokenRefreshFunction,
+		disableVoip: true
+	});
+	await client.startClient({ initialSyncLimit: 50 });
+	return client;
+}
+/** Stops syncing and invalidates the access token on the server. */
+async function logout(client) {
+	client.stopClient();
+	await client.logout(true);
+}
+//#endregion
+//#region src/timeline.ts
+/**
+* Maps timeline events to log rows: text messages, notices and `/me` emotes.
+* Everything else (state changes, reactions, encrypted events) is skipped for now.
+*/
+function toOratioMessages(events, options = {}) {
+	const time = new Intl.DateTimeFormat(options.locale, {
+		hour: "2-digit",
+		minute: "2-digit"
+	});
+	const messages = [];
+	for (const event of events) {
+		const id = event.getId();
+		if (!id || event.getType() !== EventType$1.RoomMessage || event.isRedacted()) continue;
+		const content = event.getContent();
+		if (typeof content.body !== "string") continue;
+		const sender = event.getSender() ?? "";
+		messages.push({
+			id,
+			type: content.msgtype === MsgType.Emote ? "action" : "msg",
+			time: time.format(event.getTs()),
+			nick: event.sender?.name ?? parseUserId(sender)?.localpart ?? sender,
+			text: content.body
+		});
+	}
+	return messages;
+}
+//#endregion
+export { ClientEvent, EventType, Preset, RoomEvent, beginOidcLogin, completeOidcLogin, directRoomIds, joinedRooms, loginWithPassword, logout, parseUserId, startClient, toOratioMessages, toOratioRoom };
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../src/ids.ts","../src/oidc.ts","../src/rooms.ts","../src/session.ts","../src/timeline.ts"],"sourcesContent":["// oratio · a chat client for Matrix\n// SPDX-FileCopyrightText: 2026 Losol AS\n// SPDX-License-Identifier: MPL-2.0\n\n/** A Matrix user ID, `@localpart:server.name`, split into its parts. */\nexport interface MatrixUserId {\n  localpart: string;\n  serverName: string;\n}\n\n/**\n * Splits a Matrix user ID into localpart and server name.\n * The server name may carry a port (`localhost:8008`), so the first colon\n * after `@` is the separator. Returns null when the input is not a user ID.\n */\nexport function parseUserId(userId: string): MatrixUserId | null {\n  if (!userId.startsWith('@')) {\n    return null;\n  }\n  const colon = userId.indexOf(':', 1);\n  if (colon < 2 || colon === userId.length - 1) {\n    return null;\n  }\n  return { localpart: userId.slice(1, colon), serverName: userId.slice(colon + 1) };\n}\n","// oratio · a chat client for Matrix\n// SPDX-FileCopyrightText: 2026 Losol AS\n// SPDX-License-Identifier: MPL-2.0\n\nimport { createClient, OAuth2 } from 'matrix-js-sdk';\nimport type { OratioSession } from './session';\n\n/**\n * Sign-in through the homeserver's OAuth 2.0 API (next-gen auth, MSC3861).\n * The homeserver hands the actual login to its identity provider, e.g. Keycloak.\n * Two halves, because a browser leaves the page in between:\n * {@link beginOidcLogin} before the redirect, {@link completeOidcLogin} after.\n */\nexport interface OidcLoginOptions {\n  homeserverUrl: string;\n  /** The app's https home page. Redirect URIs must share its host. */\n  clientUri: string;\n  /** Where the homeserver sends the user back, e.g. `https://chat.example/auth/callback`. */\n  redirectUri: string;\n  /** Shown to the user by the homeserver. @default 'oratio' */\n  clientName?: string;\n  /**\n   * A client ID this app registered earlier with the same homeserver and\n   * redirect URI. Reusing it means the user approves the app once, not at\n   * every sign-in. Registers a new client when omitted or no longer known.\n   */\n  clientId?: string;\n}\n\n/** What {@link completeOidcLogin} needs. Keep it until the user comes back, then drop it. */\nexport interface PendingOidcLogin {\n  homeserverUrl: string;\n  clientId: string;\n  deviceId: string;\n  codeVerifier: string;\n  redirectUri: string;\n  state: string;\n}\n\nasync function authMetadata(homeserverUrl: string) {\n  return createClient({ baseUrl: homeserverUrl }).getAuthMetadata();\n}\n\n/** Registers the app with the homeserver and returns the URL to send the user to. */\nexport async function beginOidcLogin(\n  options: OidcLoginOptions,\n): Promise<{ url: string; pending: PendingOidcLogin }> {\n  const metadata = await authMetadata(options.homeserverUrl);\n  const start = async (clientId: string) => {\n    const oauth = new OAuth2(metadata, { clientId, redirectUri: options.redirectUri });\n    const state = crypto.randomUUID();\n    const url = await oauth.generateAuthorizationCodeGrantUrl(state);\n    return { url, pending: { ...oauth.context, homeserverUrl: options.homeserverUrl, state } };\n  };\n\n  if (options.clientId) {\n    const attempt = await start(options.clientId);\n    // A client the homeserver forgot, e.g. after a database reset, gets 404\n    // here before any redirect. A known one redirects on to the identity\n    // provider, which a manual-redirect fetch sees as an opaque response.\n    const probe = await fetch(attempt.url, { redirect: 'manual' }).catch(() => null);\n    if (probe?.status !== 404) {\n      return attempt;\n    }\n  }\n\n  const clientId = await OAuth2.registerClient(metadata, {\n    client_name: options.clientName ?? 'oratio',\n    client_uri: options.clientUri,\n    redirect_uris: [options.redirectUri],\n    application_type: 'web',\n  });\n  return start(clientId);\n}\n\n/**\n * Finishes sign-in from the URL the homeserver redirected to. The code comes in\n * the fragment by default; the query string is read as a fallback.\n */\nexport async function completeOidcLogin(\n  pending: PendingOidcLogin,\n  callbackUrl: string,\n): Promise<OratioSession> {\n  const url = new URL(callbackUrl);\n  const params = new URLSearchParams(url.hash.slice(1) || url.search);\n  const error = params.get('error');\n  if (error) {\n    throw new Error(params.get('error_description') ?? error);\n  }\n  if (params.get('state') !== pending.state) {\n    throw new Error('Sign-in state does not match. Start again.');\n  }\n  const code = params.get('code');\n  if (!code) {\n    throw new Error('The homeserver sent no authorization code.');\n  }\n\n  const metadata = await authMetadata(pending.homeserverUrl);\n  const oauth = new OAuth2(metadata, pending);\n  const tokens = await oauth.completeAuthorizationCodeGrant(code);\n  const client = createClient({ baseUrl: pending.homeserverUrl, accessToken: tokens.access_token });\n  const { user_id } = await client.whoami();\n  return {\n    homeserverUrl: pending.homeserverUrl,\n    userId: user_id,\n    accessToken: tokens.access_token,\n    deviceId: pending.deviceId,\n    refreshToken: tokens.refresh_token,\n    oauthClientId: pending.clientId,\n  };\n}\n\n/** An OAuth2 helper for a signed-in OIDC session, for token refresh and revocation. */\nexport async function oauthForSession(session: OratioSession): Promise<OAuth2 | null> {\n  if (!session.oauthClientId) {\n    return null;\n  }\n  const metadata = await authMetadata(session.homeserverUrl);\n  return new OAuth2(metadata, {\n    clientId: session.oauthClientId,\n    deviceId: session.deviceId,\n    redirectUri: '',\n  });\n}\n","// oratio · a chat client for Matrix\n// SPDX-FileCopyrightText: 2026 Losol AS\n// SPDX-License-Identifier: MPL-2.0\n\nimport { KnownMembership, NotificationCountType, type Room } from 'matrix-js-sdk';\n\n/**\n * A room as the room list shows it, seen by the signed-in user: `unread`,\n * `mention` and a DM's `name` are that user's own, computed by the homeserver.\n * Same shape as `ChatRoom` in `@eventuras/ratio-ui/chat`, without depending on it.\n */\nexport interface OratioRoom {\n  id: string;\n  kind: 'channel' | 'group' | 'dm';\n  name: string;\n  /** Unread messages for this user, from the server's notification counts. */\n  unread?: number;\n  /** This user was mentioned or otherwise highlighted in an unread message. */\n  mention?: boolean;\n  members?: number;\n  /** End-to-end encrypted. oratio cannot read or send in these rooms yet. */\n  encrypted?: boolean;\n}\n\n/** The parts of a matrix-js-sdk `Room` the mapping reads. */\nexport type RoomLike = Pick<\n  Room,\n  | 'roomId'\n  | 'name'\n  | 'getJoinedMemberCount'\n  | 'getUnreadNotificationCount'\n  | 'hasEncryptionStateEvent'\n>;\n\n/**\n * Maps a Matrix room to a room-list entry. `directRoomIds` comes from the\n * user's `m.direct` account data: those rooms are direct messages.\n */\nexport function toOratioRoom(room: RoomLike, directRoomIds: ReadonlySet<string>): OratioRoom {\n  const unread = room.getUnreadNotificationCount(NotificationCountType.Total);\n  const highlights = room.getUnreadNotificationCount(NotificationCountType.Highlight);\n  return {\n    id: room.roomId,\n    kind: directRoomIds.has(room.roomId) ? 'dm' : 'channel',\n    name: room.name,\n    ...(unread > 0 && { unread }),\n    ...(highlights > 0 && { mention: true }),\n    members: room.getJoinedMemberCount(),\n    ...(room.hasEncryptionStateEvent() && { encrypted: true }),\n  };\n}\n\n/** The room IDs listed in `m.direct`, which maps each user ID to their DM rooms. */\nexport function directRoomIds(mDirect: Record<string, string[]> | undefined): Set<string> {\n  return new Set(Object.values(mDirect ?? {}).flat());\n}\n\n/** Rooms the user has joined, sorted by name. Invites and left rooms are not listed yet. */\nexport function joinedRooms(rooms: Room[]): Room[] {\n  return rooms\n    .filter((room) => room.getMyMembership() === KnownMembership.Join)\n    .sort((a, b) => a.name.localeCompare(b.name));\n}\n","// oratio · a chat client for Matrix\n// SPDX-FileCopyrightText: 2026 Losol AS\n// SPDX-License-Identifier: MPL-2.0\n\nimport { createClient, type MatrixClient, TokenRefresher } from 'matrix-js-sdk';\nimport { oauthForSession } from './oidc';\n\n/** What it takes to resume a signed-in client. The caller decides where it is kept. */\nexport interface OratioSession {\n  homeserverUrl: string;\n  userId: string;\n  accessToken: string;\n  deviceId: string;\n  /** Set for OIDC sign-ins: access tokens expire and are renewed with this. */\n  refreshToken?: string;\n  /** The client ID the homeserver registered for us, for OIDC sign-ins. */\n  oauthClientId?: string;\n}\n\nexport interface PasswordLogin {\n  homeserverUrl: string;\n  /** Localpart (`ole`) or full user ID (`@ole:losol.no`). */\n  username: string;\n  password: string;\n  /** Shown in the user's device list. @default 'oratio' */\n  deviceName?: string;\n}\n\n/** Signs in with a password and returns a new session. For development and password-only servers. */\nexport async function loginWithPassword(login: PasswordLogin): Promise<OratioSession> {\n  const client = createClient({ baseUrl: login.homeserverUrl });\n  const response = await client.loginRequest({\n    type: 'm.login.password',\n    identifier: { type: 'm.id.user', user: login.username },\n    password: login.password,\n    initial_device_display_name: login.deviceName ?? 'oratio',\n  });\n  return {\n    homeserverUrl: login.homeserverUrl,\n    userId: response.user_id,\n    accessToken: response.access_token,\n    deviceId: response.device_id,\n  };\n}\n\nexport interface StartClientOptions {\n  /** Called with the updated session when tokens are refreshed. Store it. */\n  onSessionChange?: (session: OratioSession) => void;\n}\n\n/**\n * Creates a client for a session and starts syncing. OIDC sessions refresh\n * their access token as it expires. No end-to-end encryption: encrypted rooms\n * show up, but their messages cannot be read.\n */\nexport async function startClient(\n  session: OratioSession,\n  options: StartClientOptions = {},\n): Promise<MatrixClient> {\n  let current = session;\n  const oauth = session.refreshToken ? await oauthForSession(session) : null;\n  const refresher = oauth\n    ? new TokenRefresher(oauth, async ({ accessToken, refreshToken }) => {\n        current = { ...current, accessToken, refreshToken };\n        options.onSessionChange?.(current);\n      })\n    : null;\n  const client = createClient({\n    baseUrl: session.homeserverUrl,\n    userId: session.userId,\n    accessToken: session.accessToken,\n    deviceId: session.deviceId,\n    refreshToken: session.refreshToken,\n    tokenRefreshFunction: refresher?.tokenRefreshFunction,\n    // No voice or video: skip the TURN server lookup that calls need.\n    disableVoip: true,\n  });\n  await client.startClient({ initialSyncLimit: 50 });\n  return client;\n}\n\n/** Stops syncing and invalidates the access token on the server. */\nexport async function logout(client: MatrixClient): Promise<void> {\n  client.stopClient();\n  await client.logout(true);\n}\n","// oratio · a chat client for Matrix\n// SPDX-FileCopyrightText: 2026 Losol AS\n// SPDX-License-Identifier: MPL-2.0\n\nimport { EventType, type MatrixEvent, MsgType } from 'matrix-js-sdk';\nimport { parseUserId } from './ids';\n\n/**\n * A timeline row. Same shape as `ChatLogMessage` in\n * `@eventuras/ratio-ui/chat`, without depending on it.\n */\nexport interface OratioMessage {\n  id: string;\n  type: 'msg' | 'action';\n  time: string;\n  nick: string;\n  text: string;\n}\n\n/** The parts of a matrix-js-sdk `MatrixEvent` the mapping reads. */\nexport type EventLike = Pick<\n  MatrixEvent,\n  'getId' | 'getType' | 'getContent' | 'getSender' | 'getTs' | 'isRedacted'\n> & { sender?: { name: string } | null };\n\nexport interface TimelineOptions {\n  /** BCP 47 locale for message times. @default the runtime's */\n  locale?: string;\n}\n\n/**\n * Maps timeline events to log rows: text messages, notices and `/me` emotes.\n * Everything else (state changes, reactions, encrypted events) is skipped for now.\n */\nexport function toOratioMessages(\n  events: readonly EventLike[],\n  options: TimelineOptions = {},\n): OratioMessage[] {\n  const time = new Intl.DateTimeFormat(options.locale, { hour: '2-digit', minute: '2-digit' });\n  const messages: OratioMessage[] = [];\n  for (const event of events) {\n    const id = event.getId();\n    if (!id || event.getType() !== EventType.RoomMessage || event.isRedacted()) {\n      continue;\n    }\n    const content = event.getContent<{ msgtype?: string; body?: unknown }>();\n    if (typeof content.body !== 'string') {\n      continue;\n    }\n    const sender = event.getSender() ?? '';\n    messages.push({\n      id,\n      type: content.msgtype === MsgType.Emote ? 'action' : 'msg',\n      time: time.format(event.getTs()),\n      nick: event.sender?.name ?? parseUserId(sender)?.localpart ?? sender,\n      text: content.body,\n    });\n  }\n  return messages;\n}\n"],"mappings":";;;;;;;AAeA,SAAgB,YAAY,QAAqC;CAC/D,IAAI,CAAC,OAAO,WAAW,GAAG,GACxB,OAAO;CAET,MAAM,QAAQ,OAAO,QAAQ,KAAK,CAAC;CACnC,IAAI,QAAQ,KAAK,UAAU,OAAO,SAAS,GACzC,OAAO;CAET,OAAO;EAAE,WAAW,OAAO,MAAM,GAAG,KAAK;EAAG,YAAY,OAAO,MAAM,QAAQ,CAAC;CAAE;AAClF;;;ACeA,eAAe,aAAa,eAAuB;CACjD,OAAO,aAAa,EAAE,SAAS,cAAc,CAAC,CAAC,CAAC,gBAAgB;AAClE;;AAGA,eAAsB,eACpB,SACqD;CACrD,MAAM,WAAW,MAAM,aAAa,QAAQ,aAAa;CACzD,MAAM,QAAQ,OAAO,aAAqB;EACxC,MAAM,QAAQ,IAAI,OAAO,UAAU;GAAE;GAAU,aAAa,QAAQ;EAAY,CAAC;EACjF,MAAM,QAAQ,OAAO,WAAW;EAEhC,OAAO;GAAE,KAAA,MADS,MAAM,kCAAkC,KAAK;GACjD,SAAS;IAAE,GAAG,MAAM;IAAS,eAAe,QAAQ;IAAe;GAAM;EAAE;CAC3F;CAEA,IAAI,QAAQ,UAAU;EACpB,MAAM,UAAU,MAAM,MAAM,QAAQ,QAAQ;EAK5C,KAAI,MADgB,MAAM,QAAQ,KAAK,EAAE,UAAU,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,EAAA,EACpE,WAAW,KACpB,OAAO;CAEX;CAQA,OAAO,MAAM,MANU,OAAO,eAAe,UAAU;EACrD,aAAa,QAAQ,cAAc;EACnC,YAAY,QAAQ;EACpB,eAAe,CAAC,QAAQ,WAAW;EACnC,kBAAkB;CACpB,CAAC,CACoB;AACvB;;;;;AAMA,eAAsB,kBACpB,SACA,aACwB;CACxB,MAAM,MAAM,IAAI,IAAI,WAAW;CAC/B,MAAM,SAAS,IAAI,gBAAgB,IAAI,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM;CAClE,MAAM,QAAQ,OAAO,IAAI,OAAO;CAChC,IAAI,OACF,MAAM,IAAI,MAAM,OAAO,IAAI,mBAAmB,KAAK,KAAK;CAE1D,IAAI,OAAO,IAAI,OAAO,MAAM,QAAQ,OAClC,MAAM,IAAI,MAAM,4CAA4C;CAE9D,MAAM,OAAO,OAAO,IAAI,MAAM;CAC9B,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,4CAA4C;CAG9D,MAAM,WAAW,MAAM,aAAa,QAAQ,aAAa;CAEzD,MAAM,SAAS,MAAM,IADH,OAAO,UAAU,OACd,CAAA,CAAM,+BAA+B,IAAI;CAE9D,MAAM,EAAE,YAAY,MADL,aAAa;EAAE,SAAS,QAAQ;EAAe,aAAa,OAAO;CAAa,CACrE,CAAA,CAAO,OAAO;CACxC,OAAO;EACL,eAAe,QAAQ;EACvB,QAAQ;EACR,aAAa,OAAO;EACpB,UAAU,QAAQ;EAClB,cAAc,OAAO;EACrB,eAAe,QAAQ;CACzB;AACF;;AAGA,eAAsB,gBAAgB,SAAgD;CACpF,IAAI,CAAC,QAAQ,eACX,OAAO;CAET,MAAM,WAAW,MAAM,aAAa,QAAQ,aAAa;CACzD,OAAO,IAAI,OAAO,UAAU;EAC1B,UAAU,QAAQ;EAClB,UAAU,QAAQ;EAClB,aAAa;CACf,CAAC;AACH;;;;;;;ACrFA,SAAgB,aAAa,MAAgB,eAAgD;CAC3F,MAAM,SAAS,KAAK,2BAA2B,sBAAsB,KAAK;CAC1E,MAAM,aAAa,KAAK,2BAA2B,sBAAsB,SAAS;CAClF,OAAO;EACL,IAAI,KAAK;EACT,MAAM,cAAc,IAAI,KAAK,MAAM,IAAI,OAAO;EAC9C,MAAM,KAAK;EACX,GAAI,SAAS,KAAK,EAAE,OAAO;EAC3B,GAAI,aAAa,KAAK,EAAE,SAAS,KAAK;EACtC,SAAS,KAAK,qBAAqB;EACnC,GAAI,KAAK,wBAAwB,KAAK,EAAE,WAAW,KAAK;CAC1D;AACF;;AAGA,SAAgB,cAAc,SAA4D;CACxF,OAAO,IAAI,IAAI,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpD;;AAGA,SAAgB,YAAY,OAAuB;CACjD,OAAO,MACJ,QAAQ,SAAS,KAAK,gBAAgB,MAAM,gBAAgB,IAAI,CAAC,CACjE,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;;;;ACjCA,eAAsB,kBAAkB,OAA8C;CAEpF,MAAM,WAAW,MADF,aAAa,EAAE,SAAS,MAAM,cAAc,CACpC,CAAA,CAAO,aAAa;EACzC,MAAM;EACN,YAAY;GAAE,MAAM;GAAa,MAAM,MAAM;EAAS;EACtD,UAAU,MAAM;EAChB,6BAA6B,MAAM,cAAc;CACnD,CAAC;CACD,OAAO;EACL,eAAe,MAAM;EACrB,QAAQ,SAAS;EACjB,aAAa,SAAS;EACtB,UAAU,SAAS;CACrB;AACF;;;;;;AAYA,eAAsB,YACpB,SACA,UAA8B,CAAC,GACR;CACvB,IAAI,UAAU;CACd,MAAM,QAAQ,QAAQ,eAAe,MAAM,gBAAgB,OAAO,IAAI;CACtE,MAAM,YAAY,QACd,IAAI,eAAe,OAAO,OAAO,EAAE,aAAa,mBAAmB;EACjE,UAAU;GAAE,GAAG;GAAS;GAAa;EAAa;EAClD,QAAQ,kBAAkB,OAAO;CACnC,CAAC,IACD;CACJ,MAAM,SAAS,aAAa;EAC1B,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,aAAa,QAAQ;EACrB,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,sBAAsB,WAAW;EAEjC,aAAa;CACf,CAAC;CACD,MAAM,OAAO,YAAY,EAAE,kBAAkB,GAAG,CAAC;CACjD,OAAO;AACT;;AAGA,eAAsB,OAAO,QAAqC;CAChE,OAAO,WAAW;CAClB,MAAM,OAAO,OAAO,IAAI;AAC1B;;;;;;;ACnDA,SAAgB,iBACd,QACA,UAA2B,CAAC,GACX;CACjB,MAAM,OAAO,IAAI,KAAK,eAAe,QAAQ,QAAQ;EAAE,MAAM;EAAW,QAAQ;CAAU,CAAC;CAC3F,MAAM,WAA4B,CAAC;CACnC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,KAAK,MAAM,MAAM;EACvB,IAAI,CAAC,MAAM,MAAM,QAAQ,MAAM,YAAU,eAAe,MAAM,WAAW,GACvE;EAEF,MAAM,UAAU,MAAM,WAAiD;EACvE,IAAI,OAAO,QAAQ,SAAS,UAC1B;EAEF,MAAM,SAAS,MAAM,UAAU,KAAK;EACpC,SAAS,KAAK;GACZ;GACA,MAAM,QAAQ,YAAY,QAAQ,QAAQ,WAAW;GACrD,MAAM,KAAK,OAAO,MAAM,MAAM,CAAC;GAC/B,MAAM,MAAM,QAAQ,QAAQ,YAAY,MAAM,CAAC,EAAE,aAAa;GAC9D,MAAM,QAAQ;EAChB,CAAC;CACH;CACA,OAAO;AACT"}

package/dist/oidc.d.ts

@@ -0,0 +1,45 @@
+import { OAuth2 } from 'matrix-js-sdk';
+import type { OratioSession } from './session';
+/**
+ * Sign-in through the homeserver's OAuth 2.0 API (next-gen auth, MSC3861).
+ * The homeserver hands the actual login to its identity provider, e.g. Keycloak.
+ * Two halves, because a browser leaves the page in between:
+ * {@link beginOidcLogin} before the redirect, {@link completeOidcLogin} after.
+ */
+export interface OidcLoginOptions {
+    homeserverUrl: string;
+    /** The app's https home page. Redirect URIs must share its host. */
+    clientUri: string;
+    /** Where the homeserver sends the user back, e.g. `https://chat.example/auth/callback`. */
+    redirectUri: string;
+    /** Shown to the user by the homeserver. @default 'oratio' */
+    clientName?: string;
+    /**
+     * A client ID this app registered earlier with the same homeserver and
+     * redirect URI. Reusing it means the user approves the app once, not at
+     * every sign-in. Registers a new client when omitted or no longer known.
+     */
+    clientId?: string;
+}
+/** What {@link completeOidcLogin} needs. Keep it until the user comes back, then drop it. */
+export interface PendingOidcLogin {
+    homeserverUrl: string;
+    clientId: string;
+    deviceId: string;
+    codeVerifier: string;
+    redirectUri: string;
+    state: string;
+}
+/** Registers the app with the homeserver and returns the URL to send the user to. */
+export declare function beginOidcLogin(options: OidcLoginOptions): Promise<{
+    url: string;
+    pending: PendingOidcLogin;
+}>;
+/**
+ * Finishes sign-in from the URL the homeserver redirected to. The code comes in
+ * the fragment by default; the query string is read as a fallback.
+ */
+export declare function completeOidcLogin(pending: PendingOidcLogin, callbackUrl: string): Promise<OratioSession>;
+/** An OAuth2 helper for a signed-in OIDC session, for token refresh and revocation. */
+export declare function oauthForSession(session: OratioSession): Promise<OAuth2 | null>;
+//# sourceMappingURL=oidc.d.ts.map

package/dist/oidc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../src/oidc.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,MAAM,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,6FAA6F;AAC7F,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,qFAAqF;AACrF,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC,CA2BrD;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,aAAa,CAAC,CA4BxB;AAED,uFAAuF;AACvF,wBAAsB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUpF"}

package/dist/rooms.d.ts

@@ -0,0 +1,30 @@
+import { type Room } from 'matrix-js-sdk';
+/**
+ * A room as the room list shows it, seen by the signed-in user: `unread`,
+ * `mention` and a DM's `name` are that user's own, computed by the homeserver.
+ * Same shape as `ChatRoom` in `@eventuras/ratio-ui/chat`, without depending on it.
+ */
+export interface OratioRoom {
+    id: string;
+    kind: 'channel' | 'group' | 'dm';
+    name: string;
+    /** Unread messages for this user, from the server's notification counts. */
+    unread?: number;
+    /** This user was mentioned or otherwise highlighted in an unread message. */
+    mention?: boolean;
+    members?: number;
+    /** End-to-end encrypted. oratio cannot read or send in these rooms yet. */
+    encrypted?: boolean;
+}
+/** The parts of a matrix-js-sdk `Room` the mapping reads. */
+export type RoomLike = Pick<Room, 'roomId' | 'name' | 'getJoinedMemberCount' | 'getUnreadNotificationCount' | 'hasEncryptionStateEvent'>;
+/**
+ * Maps a Matrix room to a room-list entry. `directRoomIds` comes from the
+ * user's `m.direct` account data: those rooms are direct messages.
+ */
+export declare function toOratioRoom(room: RoomLike, directRoomIds: ReadonlySet<string>): OratioRoom;
+/** The room IDs listed in `m.direct`, which maps each user ID to their DM rooms. */
+export declare function directRoomIds(mDirect: Record<string, string[]> | undefined): Set<string>;
+/** Rooms the user has joined, sorted by name. Invites and left rooms are not listed yet. */
+export declare function joinedRooms(rooms: Room[]): Room[];
+//# sourceMappingURL=rooms.d.ts.map

package/dist/rooms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rooms.d.ts","sourceRoot":"","sources":["../src/rooms.ts"],"names":[],"mappings":"AAIA,OAAO,EAA0C,KAAK,IAAI,EAAE,MAAM,eAAe,CAAC;AAElF;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,6DAA6D;AAC7D,MAAM,MAAM,QAAQ,GAAG,IAAI,CACzB,IAAI,EACF,QAAQ,GACR,MAAM,GACN,sBAAsB,GACtB,4BAA4B,GAC5B,yBAAyB,CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,UAAU,CAY3F;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAExF;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAIjD"}

package/dist/session.d.ts

@@ -0,0 +1,35 @@
+import { type MatrixClient } from 'matrix-js-sdk';
+/** What it takes to resume a signed-in client. The caller decides where it is kept. */
+export interface OratioSession {
+    homeserverUrl: string;
+    userId: string;
+    accessToken: string;
+    deviceId: string;
+    /** Set for OIDC sign-ins: access tokens expire and are renewed with this. */
+    refreshToken?: string;
+    /** The client ID the homeserver registered for us, for OIDC sign-ins. */
+    oauthClientId?: string;
+}
+export interface PasswordLogin {
+    homeserverUrl: string;
+    /** Localpart (`ole`) or full user ID (`@ole:losol.no`). */
+    username: string;
+    password: string;
+    /** Shown in the user's device list. @default 'oratio' */
+    deviceName?: string;
+}
+/** Signs in with a password and returns a new session. For development and password-only servers. */
+export declare function loginWithPassword(login: PasswordLogin): Promise<OratioSession>;
+export interface StartClientOptions {
+    /** Called with the updated session when tokens are refreshed. Store it. */
+    onSessionChange?: (session: OratioSession) => void;
+}
+/**
+ * Creates a client for a session and starts syncing. OIDC sessions refresh
+ * their access token as it expires. No end-to-end encryption: encrypted rooms
+ * show up, but their messages cannot be read.
+ */
+export declare function startClient(session: OratioSession, options?: StartClientOptions): Promise<MatrixClient>;
+/** Stops syncing and invalidates the access token on the server. */
+export declare function logout(client: MatrixClient): Promise<void>;
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,KAAK,YAAY,EAAkB,MAAM,eAAe,CAAC;AAGhF,uFAAuF;AACvF,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qGAAqG;AACrG,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAcpF;AAED,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;CACpD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAED,oEAAoE;AACpE,wBAAsB,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhE"}

package/dist/timeline.d.ts

@@ -0,0 +1,28 @@
+import { type MatrixEvent } from 'matrix-js-sdk';
+/**
+ * A timeline row. Same shape as `ChatLogMessage` in
+ * `@eventuras/ratio-ui/chat`, without depending on it.
+ */
+export interface OratioMessage {
+    id: string;
+    type: 'msg' | 'action';
+    time: string;
+    nick: string;
+    text: string;
+}
+/** The parts of a matrix-js-sdk `MatrixEvent` the mapping reads. */
+export type EventLike = Pick<MatrixEvent, 'getId' | 'getType' | 'getContent' | 'getSender' | 'getTs' | 'isRedacted'> & {
+    sender?: {
+        name: string;
+    } | null;
+};
+export interface TimelineOptions {
+    /** BCP 47 locale for message times. @default the runtime's */
+    locale?: string;
+}
+/**
+ * Maps timeline events to log rows: text messages, notices and `/me` emotes.
+ * Everything else (state changes, reactions, encrypted events) is skipped for now.
+ */
+export declare function toOratioMessages(events: readonly EventLike[], options?: TimelineOptions): OratioMessage[];
+//# sourceMappingURL=timeline.d.ts.map

package/dist/timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.d.ts","sourceRoot":"","sources":["../src/timeline.ts"],"names":[],"mappings":"AAIA,OAAO,EAAa,KAAK,WAAW,EAAW,MAAM,eAAe,CAAC;AAGrE;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oEAAoE;AACpE,MAAM,MAAM,SAAS,GAAG,IAAI,CAC1B,WAAW,EACX,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,GAAG,YAAY,CAC1E,GAAG;IAAE,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,OAAO,GAAE,eAAoB,GAC5B,aAAa,EAAE,CAsBjB"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@eventuras/oratio-core",
+  "version": "0.1.0",
+  "description": "Framework-agnostic Matrix client core for oratio, on matrix-js-sdk",
+  "license": "MPL-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/losol/oratio.git",
+    "directory": "packages/oratio-core"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "devDependencies": {
+    "@eventuras/typescript-config": "^1.1.0",
+    "@eventuras/vite-config": "^0.4.0",
+    "typescript": "^6.0.2",
+    "vite": "^8.2.1",
+    "vitest": "^4.1.10"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "matrix-js-sdk": "^42.4.0"
+  },
+  "scripts": {
+    "build": "vite build && tsc --emitDeclarationOnly",
+    "dev": "vite build --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}