@greensecurity/javascript-sdk 0.46.0-beta.1 → 0.46.0-beta.11

package/dist/esm/apps/runtime/sandbox.js

@@ -0,0 +1,192 @@
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * The worker-side implementation of C0's `SandboxExports`: one React root per mount, each
+ * rendered into a `remote-root` element connected to the host's `RemoteConnection`.
+ */
+import { remoteWindow } from "./polyfill.js";
+import { BatchingRemoteConnection } from "@remote-dom/core/elements";
+import { createElement } from "react";
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { PROTOCOL_VERSION } from "../context.js";
+import { COMPONENT_NAME_PATTERN } from "../manifest.js";
+import { forwardConsole } from "./console.js";
+import { defineRemoteElements, REMOTE_ROOT_TAG } from "./elements.js";
+import { ExtensionContextProvider, ViewErrorBoundary } from "./provider.js";
+import { activateSession, AppSession, deactivateSession } from "./session.js";
+/** Milliseconds between mutation flushes to the host (about one frame). */
+export const MUTATION_BATCH_MS = 16;
+const defaultBatch = (flush) => {
+    setTimeout(flush, MUTATION_BATCH_MS);
+};
+export function validateViews(views) {
+    const pattern = new RegExp(COMPONENT_NAME_PATTERN);
+    for (const [name, view] of Object.entries(views)) {
+        if (!pattern.test(name))
+            throw new TypeError(`View name "${name}" is not a valid component identifier`);
+        if (typeof view !== "function" && (typeof view !== "object" || view === null)) {
+            throw new TypeError(`View "${name}" is not a React component`);
+        }
+    }
+}
+export function createSandboxExports(definition, options = {}) {
+    validateViews(definition.views);
+    defineRemoteElements();
+    const batch = options.batch ?? defaultBatch;
+    const mounts = new Map();
+    let restoreConsole;
+    const report = (error, mountId, phase) => {
+        if (options.onError)
+            options.onError(error, { mountId, phase });
+        else
+            console.error(`[green-app] ${phase} error in view ${mountId}:`, error);
+    };
+    const render = (mount) => {
+        const { session } = mount;
+        // The provider hands `requested` to the session only when this render commits, so a
+        // suspended or failed render leaves committed clients and console forwarding alone.
+        flushSync(() => {
+            mount.root.render(createElement(ViewErrorBoundary, {
+                onError: (error) => {
+                    mount.renderError ?? (mount.renderError = error);
+                    report(error, session.mountId, "render");
+                },
+            }, createElement(ExtensionContextProvider, { context: mount.requested, host: session.host, session, onCommit: () => syncConsoleForwarding() }, createElement(mount.View))));
+        });
+        // Send the committed tree now rather than on the next batch tick, so a resolved
+        // mount/updateContext means the host already has it.
+        mount.connection.flush();
+    };
+    // Read on every forwarded line, so refreshed and pushed tokens are redacted too.
+    const currentAccessTokens = function* () {
+        for (const { session } of mounts.values()) {
+            const { user, installation } = session.tokens.tokens;
+            yield user.accessToken;
+            yield installation.accessToken;
+        }
+    };
+    // `console` is forwarded while at least one mounted view is in a dev session, and only then.
+    const syncConsoleForwarding = () => {
+        const wanted = options.postLog !== undefined &&
+            [...mounts.values()].some((m) => Boolean(m.session.context.environment.devSessionId));
+        if (wanted && !restoreConsole) {
+            restoreConsole = forwardConsole(options.postLog, console, { secrets: currentAccessTokens });
+        }
+        else if (!wanted && restoreConsole) {
+            restoreConsole();
+            restoreConsole = undefined;
+        }
+    };
+    /** Unmounts a view whose render threw, and rethrows its error. */
+    const failIfCrashed = (mount) => {
+        if (mount.renderError === undefined)
+            return;
+        const error = mount.renderError;
+        unmountOne(mount);
+        throw error instanceof Error ? error : new Error(String(error));
+    };
+    const unmountOne = (mount) => {
+        mounts.delete(mount.session.mountId);
+        deactivateSession(mount.session);
+        mount.root.unmount();
+        mount.connection.flush();
+        syncConsoleForwarding();
+    };
+    return {
+        async mount({ mountId, viewComponent, connection, context, host }) {
+            if (typeof mountId !== "string" || mountId === "")
+                throw new TypeError("mountId must be a non-empty string");
+            if (context?.protocolVersion !== PROTOCOL_VERSION) {
+                throw new Error(`Unsupported protocol version ${String(context?.protocolVersion)}; this SDK speaks ${PROTOCOL_VERSION}`);
+            }
+            if (!Object.prototype.hasOwnProperty.call(definition.views, viewComponent)) {
+                throw new Error(`This app does not export a view named "${viewComponent}"`);
+            }
+            const View = definition.views[viewComponent];
+            // A host that remounts an id (after a reconnect, say) replaces the old view.
+            const existing = mounts.get(mountId);
+            if (existing)
+                unmountOne(existing);
+            const element = remoteWindow.document.createElement(REMOTE_ROOT_TAG);
+            const batching = new BatchingRemoteConnection(safeConnection(connection, (e) => report(e, mountId, "connection")), { batch });
+            element.connect(batching);
+            const session = new AppSession(mountId, context, host);
+            const mount = {
+                session,
+                requested: context,
+                root: createRoot(element),
+                element,
+                connection: batching,
+                View,
+                renderError: undefined,
+            };
+            mounts.set(mountId, mount);
+            activateSession(session);
+            syncConsoleForwarding();
+            render(mount);
+            failIfCrashed(mount);
+        },
+        async unmount(mountId) {
+            const mount = mounts.get(mountId);
+            if (mount)
+                unmountOne(mount);
+        },
+        async updateContext(mountId, patch) {
+            const mount = mounts.get(mountId);
+            if (!mount)
+                throw new Error(`No view is mounted with id "${mountId}"`);
+            if (patch.protocolVersion !== undefined && patch.protocolVersion !== PROTOCOL_VERSION) {
+                throw new Error("updateContext cannot change protocolVersion");
+            }
+            // Patched onto the newest requested context, so a patch sent while an earlier render is
+            // suspended is not lost. The session and console forwarding follow once it commits.
+            mount.requested = { ...mount.requested, ...patch, protocolVersion: PROTOCOL_VERSION };
+            render(mount);
+            // A view that threw is showing the error boundary's empty tree: tear it down and reject,
+            // as a failed mount does, so the host knows to remount rather than trust a blank view.
+            failIfCrashed(mount);
+        },
+        async ping() {
+            return "pong";
+        },
+        mountIds() {
+            return [...mounts.keys()];
+        },
+    };
+}
+/** Host calls return promises across the thread; a closed thread must not surface as an unhandled rejection. */
+function safeConnection(connection, onError) {
+    return {
+        mutate(records) {
+            try {
+                const result = connection.mutate(records);
+                if (isPromiseLike(result))
+                    result.then(undefined, onError);
+            }
+            catch (error) {
+                onError(error);
+            }
+        },
+        call(id, method, ...args) {
+            let result;
+            try {
+                result = connection.call(id, method, ...args);
+            }
+            catch (error) {
+                // Reported like an async failure, and rethrown: unlike `mutate`, the caller is waiting
+                // for this call's result and must see it fail.
+                onError(error);
+                throw error;
+            }
+            if (isPromiseLike(result))
+                result.then(undefined, onError);
+            return result;
+        },
+    };
+}
+function isPromiseLike(value) {
+    return typeof value === "object" && value !== null && typeof value.then === "function";
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/esm/apps/runtime/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../src/apps/runtime/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAA0B,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAsB,MAAM,OAAO,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAyB,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,EAAE,cAAc,EAAoB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAE9E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAsCpC,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAE,EAAE;IACzC,UAAU,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,KAAoC;IAChE,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,IAAI,uCAAuC,CAAC,CAAC;QACxG,IAAI,OAAO,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,SAAS,IAAI,4BAA4B,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAyB,EAAE,UAAiC,EAAE;IACjG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,oBAAoB,EAAE,CAAC;IAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,IAAI,cAAwC,CAAC;IAE7C,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,OAAe,EAAE,KAA8B,EAAE,EAAE;QACjF,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;;YAC3D,OAAO,CAAC,KAAK,CAAC,eAAe,KAAK,kBAAkB,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,KAAY,EAAE,EAAE;QAC9B,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1B,oFAAoF;QACpF,oFAAoF;QACpF,SAAS,CAAC,GAAG,EAAE;YACb,KAAK,CAAC,IAAI,CAAC,MAAM,CACf,aAAa,CACX,iBAAiB,EACjB;gBACE,OAAO,EAAE,CAAC,KAAc,EAAE,EAAE;oBAC1B,KAAK,CAAC,WAAW,KAAjB,KAAK,CAAC,WAAW,GAAK,KAAK,EAAC;oBAC5B,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3C,CAAC;aACF,EACD,aAAa,CACX,wBAAwB,EACxB,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,qBAAqB,EAAE,EAAE,EAClG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAC1B,CACF,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,gFAAgF;QAChF,qDAAqD;QACrD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,iFAAiF;IACjF,MAAM,mBAAmB,GAAG,QAAQ,CAAC;QACnC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,MAAM,IAAI,CAAC,WAAW,CAAC;YACvB,MAAM,YAAY,CAAC,WAAW,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IAEF,6FAA6F;IAC7F,MAAM,qBAAqB,GAAG,GAAG,EAAE;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS;YAC1C,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;QACxF,IAAI,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,OAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC/F,CAAC;aAAM,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;YACrC,cAAc,EAAE,CAAC;YACjB,cAAc,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,kEAAkE;IAClE,MAAM,aAAa,GAAG,CAAC,KAAY,EAAE,EAAE;QACrC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,KAAY,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,qBAAqB,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;YAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAC7G,IAAI,OAAO,EAAE,eAAe,KAAK,gBAAgB,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,qBAAqB,gBAAgB,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,0CAA0C,aAAa,GAAG,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,CAAE,CAAC;YAE9C,6EAA6E;YAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,QAAQ;gBAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAEnC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,eAAe,CAAiC,CAAC;YACrG,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9H,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAE1B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAe,CAAC,CAAC;YAClE,MAAM,KAAK,GAAU;gBACnB,OAAO;gBACP,SAAS,EAAE,OAAO;gBAClB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC;gBACzB,OAAO;gBACP,UAAU,EAAE,QAAQ;gBACpB,IAAI;gBACJ,WAAW,EAAE,SAAS;aACvB,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3B,eAAe,CAAC,OAAO,CAAC,CAAC;YAEzB,qBAAqB,EAAE,CAAC;YAExB,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK;gBAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,GAAG,CAAC,CAAC;YACvE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,gBAAgB,EAAE,CAAC;gBACtF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YAED,wFAAwF;YACxF,oFAAoF;YACpF,KAAK,CAAC,SAAS,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC;YACtF,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,yFAAyF;YACzF,uFAAuF;YACvF,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,IAAI;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,QAAQ;YACN,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,SAAS,cAAc,CAAC,UAA4B,EAAE,OAAiC;IACrF,OAAO;QACL,MAAM,CAAC,OAAO;YACZ,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,aAAa,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI;YACtB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uFAAuF;gBACvF,+CAA+C;gBAC/C,OAAO,CAAC,KAAK,CAAC,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,UAAU,CAAC;AACjH,CAAC"}

package/dist/esm/apps/runtime/session.d.ts

@@ -0,0 +1,58 @@
+import { type AppTokens, type ExtensionContext } from "../context.js";
+import type { HostApi } from "../protocol.js";
+export type TokenKind = keyof AppTokens;
+/** Anything that can hand out a current bearer token for one of the two app identities. */
+export interface TokenSource {
+    accessToken(kind: TokenKind): Promise<string>;
+}
+/**
+ * Holds the tokens for one context and refreshes them through the host. Concurrent callers
+ * share one `refreshTokens()` round trip.
+ *
+ * Tokens can arrive two ways at once: a refresh this store started, and a push from the host
+ * (`updateContext({ auth })` → `setTokens`). A refresh result therefore never replaces a token
+ * that expires later than the one it brings, and every read after a refresh, successful or not,
+ * looks at the store's current token rather than the one it started with.
+ */
+export declare class TokenStore implements TokenSource {
+    #private;
+    constructor(tokens: AppTokens, host?: Pick<HostApi, "refreshTokens">);
+    get tokens(): AppTokens;
+    /** Replaces the tokens, e.g. when the host pushes a context patch carrying `auth`. */
+    setTokens(tokens: AppTokens): void;
+    /** Sets (or replaces) the host used for refreshes; a later caller may know one an earlier did not. */
+    setHost(host: Pick<HostApi, "refreshTokens">): void;
+    accessToken(kind: TokenKind): Promise<string>;
+    refresh(): Promise<AppTokens>;
+}
+export declare class AppSession {
+    #private;
+    readonly mountId: string;
+    readonly tokens: TokenStore;
+    constructor(mountId: string, context: ExtensionContext, host: HostApi);
+    get context(): ExtensionContext;
+    get host(): HostApi;
+    /** Replaces the host, for hooks and for token refreshes alike. */
+    setHost(host: HostApi): void;
+    setContext(next: ExtensionContext): void;
+}
+export declare function sessionForContext(context: ExtensionContext): AppSession | undefined;
+/**
+ * Maps `context` to `session` without changing the session's context, host or tokens. Safe
+ * during render: it only lets `createAppClient(context)` find the session, whose tokens are
+ * whatever was last committed.
+ */
+export declare function registerContext(context: ExtensionContext, session: AppSession): void;
+export declare function activateSession(session: AppSession): void;
+export declare function deactivateSession(session: AppSession): void;
+export declare function currentSession(): AppSession | undefined;
+export interface AppSessionValue {
+    session: AppSession;
+    /** The context this render was made with; a new object after each `updateContext`. */
+    context: ExtensionContext;
+    /** The host this render was made with. */
+    host: HostApi;
+}
+/** React context carrying the session of the view being rendered. */
+export declare const AppSessionContext: import("react").Context<AppSessionValue | null>;
+//# sourceMappingURL=session.d.ts.map

package/dist/esm/apps/runtime/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/apps/runtime/session.ts"],"names":[],"mappings":"AAWA,OAAO,EAAqB,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC;AAExC,2FAA2F;AAC3F,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;;;;GAQG;AACH,qBAAa,UAAW,YAAW,WAAW;;gBAKhC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC;IAKpE,IAAI,MAAM,IAAI,SAAS,CAEtB;IAED,sFAAsF;IACtF,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAIlC,sGAAsG;IACtG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,IAAI;IAI7C,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAqBnD,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;CAkB9B;AAOD,qBAAa,UAAU;;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;gBAIhB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO;IAQrE,IAAI,OAAO,IAAI,gBAAgB,CAE9B;IAED,IAAI,IAAI,IAAI,OAAO,CAElB;IAED,kEAAkE;IAClE,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAK5B,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI;CAKzC;AAKD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAEnF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,CAEpF;AAKD,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAGzD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAG3D;AAED,wBAAgB,cAAc,IAAI,UAAU,GAAG,SAAS,CAEvD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,sFAAsF;IACtF,OAAO,EAAE,gBAAgB,CAAC;IAC1B,0CAA0C;IAC1C,IAAI,EAAE,OAAO,CAAC;CACf;AAED,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,iDAA8C,CAAC"}

package/dist/esm/apps/runtime/session.js

@@ -0,0 +1,157 @@
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * An `AppSession` is the worker-side state of one mounted view: its latest context, the host
+ * API proxy it was mounted with, and the tokens. React components read it through
+ * `ExtensionContextProvider`; `createAppClient` finds it from the context object so API calls
+ * always use the newest token, including one the host pushed with `updateContext`.
+ */
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _TokenStore_tokens, _TokenStore_host, _TokenStore_refreshing, _AppSession_context, _AppSession_host;
+import { createContext } from "react";
+import { tokenNeedsRefresh } from "../context.js";
+/**
+ * Holds the tokens for one context and refreshes them through the host. Concurrent callers
+ * share one `refreshTokens()` round trip.
+ *
+ * Tokens can arrive two ways at once: a refresh this store started, and a push from the host
+ * (`updateContext({ auth })` → `setTokens`). A refresh result therefore never replaces a token
+ * that expires later than the one it brings, and every read after a refresh, successful or not,
+ * looks at the store's current token rather than the one it started with.
+ */
+export class TokenStore {
+    constructor(tokens, host) {
+        _TokenStore_tokens.set(this, void 0);
+        _TokenStore_host.set(this, void 0);
+        _TokenStore_refreshing.set(this, void 0);
+        __classPrivateFieldSet(this, _TokenStore_tokens, tokens, "f");
+        __classPrivateFieldSet(this, _TokenStore_host, host, "f");
+    }
+    get tokens() {
+        return __classPrivateFieldGet(this, _TokenStore_tokens, "f");
+    }
+    /** Replaces the tokens, e.g. when the host pushes a context patch carrying `auth`. */
+    setTokens(tokens) {
+        __classPrivateFieldSet(this, _TokenStore_tokens, tokens, "f");
+    }
+    /** Sets (or replaces) the host used for refreshes; a later caller may know one an earlier did not. */
+    setHost(host) {
+        __classPrivateFieldSet(this, _TokenStore_host, host, "f");
+    }
+    async accessToken(kind) {
+        const current = __classPrivateFieldGet(this, _TokenStore_tokens, "f")[kind];
+        if (!tokenNeedsRefresh(current))
+            return current.accessToken;
+        if (!__classPrivateFieldGet(this, _TokenStore_host, "f")) {
+            if (current.expiresAt > Date.now())
+                return current.accessToken;
+            throw new Error(`The ${kind} token has expired and no host is available to refresh it`);
+        }
+        try {
+            await this.refresh();
+            return __classPrivateFieldGet(this, _TokenStore_tokens, "f")[kind].accessToken;
+        }
+        catch (error) {
+            // Look again: the host may have pushed a fresh token while the refresh was failing, and
+            // a token that is close to expiry but still valid is better than failing the request.
+            const latest = __classPrivateFieldGet(this, _TokenStore_tokens, "f")[kind];
+            if (latest.expiresAt > Date.now())
+                return latest.accessToken;
+            throw error;
+        }
+    }
+    refresh() {
+        const host = __classPrivateFieldGet(this, _TokenStore_host, "f");
+        if (!host)
+            return Promise.reject(new Error("No host is available to refresh tokens"));
+        __classPrivateFieldSet(this, _TokenStore_refreshing, __classPrivateFieldGet(this, _TokenStore_refreshing, "f") ?? Promise.resolve()
+            .then(() => host.refreshTokens())
+            .then((fresh) => {
+            __classPrivateFieldSet(this, _TokenStore_tokens, {
+                user: newer(__classPrivateFieldGet(this, _TokenStore_tokens, "f").user, fresh.user),
+                installation: newer(__classPrivateFieldGet(this, _TokenStore_tokens, "f").installation, fresh.installation),
+            }, "f");
+            return __classPrivateFieldGet(this, _TokenStore_tokens, "f");
+        })
+            .finally(() => {
+            __classPrivateFieldSet(this, _TokenStore_refreshing, undefined, "f");
+        }), "f");
+        return __classPrivateFieldGet(this, _TokenStore_refreshing, "f");
+    }
+}
+_TokenStore_tokens = new WeakMap(), _TokenStore_host = new WeakMap(), _TokenStore_refreshing = new WeakMap();
+/** The token that expires later; `current` wins a tie, so a concurrent push is kept. */
+function newer(current, candidate) {
+    return candidate.expiresAt > current.expiresAt ? candidate : current;
+}
+export class AppSession {
+    constructor(mountId, context, host) {
+        _AppSession_context.set(this, void 0);
+        _AppSession_host.set(this, void 0);
+        this.mountId = mountId;
+        __classPrivateFieldSet(this, _AppSession_host, host, "f");
+        __classPrivateFieldSet(this, _AppSession_context, context, "f");
+        this.tokens = new TokenStore(context.auth, host);
+        SESSIONS_BY_CONTEXT.set(context, this);
+    }
+    get context() {
+        return __classPrivateFieldGet(this, _AppSession_context, "f");
+    }
+    get host() {
+        return __classPrivateFieldGet(this, _AppSession_host, "f");
+    }
+    /** Replaces the host, for hooks and for token refreshes alike. */
+    setHost(host) {
+        __classPrivateFieldSet(this, _AppSession_host, host, "f");
+        this.tokens.setHost(host);
+    }
+    setContext(next) {
+        if (next.auth !== __classPrivateFieldGet(this, _AppSession_context, "f").auth)
+            this.tokens.setTokens(next.auth);
+        __classPrivateFieldSet(this, _AppSession_context, next, "f");
+        SESSIONS_BY_CONTEXT.set(next, this);
+    }
+}
+_AppSession_context = new WeakMap(), _AppSession_host = new WeakMap();
+/** Every context object the runtime has handed to a view, mapped to its session. */
+const SESSIONS_BY_CONTEXT = new WeakMap();
+export function sessionForContext(context) {
+    return SESSIONS_BY_CONTEXT.get(context);
+}
+/**
+ * Maps `context` to `session` without changing the session's context, host or tokens. Safe
+ * during render: it only lets `createAppClient(context)` find the session, whose tokens are
+ * whatever was last committed.
+ */
+export function registerContext(context, session) {
+    SESSIONS_BY_CONTEXT.set(context, session);
+}
+/** Mounted sessions, oldest first. `showToast` and `navigate` use the newest one's host. */
+const ACTIVE_SESSIONS = [];
+export function activateSession(session) {
+    deactivateSession(session);
+    ACTIVE_SESSIONS.push(session);
+}
+export function deactivateSession(session) {
+    const index = ACTIVE_SESSIONS.indexOf(session);
+    if (index >= 0)
+        ACTIVE_SESSIONS.splice(index, 1);
+}
+export function currentSession() {
+    return ACTIVE_SESSIONS[ACTIVE_SESSIONS.length - 1];
+}
+/** React context carrying the session of the view being rendered. */
+export const AppSessionContext = createContext(null);
+AppSessionContext.displayName = "GreenSecurityAppSession";
+//# sourceMappingURL=session.js.map

package/dist/esm/apps/runtime/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../src/apps/runtime/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;;;;;;;;;;;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAyC,MAAM,eAAe,CAAC;AAUzF;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IAKrB,YAAY,MAAiB,EAAE,IAAqC;QAJpE,qCAAmB;QACnB,mCAAkD;QAClD,yCAA4C;QAG1C,uBAAA,IAAI,sBAAW,MAAM,MAAA,CAAC;QACtB,uBAAA,IAAI,oBAAS,IAAI,MAAA,CAAC;IACpB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,uBAAA,IAAI,0BAAQ,CAAC;IACtB,CAAC;IAED,sFAAsF;IACtF,SAAS,CAAC,MAAiB;QACzB,uBAAA,IAAI,sBAAW,MAAM,MAAA,CAAC;IACxB,CAAC;IAED,sGAAsG;IACtG,OAAO,CAAC,IAAoC;QAC1C,uBAAA,IAAI,oBAAS,IAAI,MAAA,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAe;QAC/B,MAAM,OAAO,GAAG,uBAAA,IAAI,0BAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC,WAAW,CAAC;QAE5D,IAAI,CAAC,uBAAA,IAAI,wBAAM,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,OAAO,CAAC,WAAW,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,2DAA2D,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,uBAAA,IAAI,0BAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wFAAwF;YACxF,sFAAsF;YACtF,MAAM,MAAM,GAAG,uBAAA,IAAI,0BAAQ,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,MAAM,CAAC,WAAW,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,IAAI,GAAG,uBAAA,IAAI,wBAAM,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAEtF,kHAAqB,OAAO,CAAC,OAAO,EAAE;aACnC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;aAChC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,uBAAA,IAAI,sBAAW;gBACb,IAAI,EAAE,KAAK,CAAC,uBAAA,IAAI,0BAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;gBAC1C,YAAY,EAAE,KAAK,CAAC,uBAAA,IAAI,0BAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC;aACnE,MAAA,CAAC;YACF,OAAO,uBAAA,IAAI,0BAAQ,CAAC;QACtB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,uBAAA,IAAI,0BAAe,SAAS,MAAA,CAAC;QAC/B,CAAC,CAAC,MAAA,CAAC;QACL,OAAO,uBAAA,IAAI,8BAAY,CAAC;IAC1B,CAAC;CACF;;AAED,wFAAwF;AACxF,SAAS,KAAK,CAAkC,OAAU,EAAE,SAAY;IACtE,OAAO,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,MAAM,OAAO,UAAU;IAMrB,YAAY,OAAe,EAAE,OAAyB,EAAE,IAAa;QAHrE,sCAA2B;QAC3B,mCAAe;QAGb,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,uBAAA,IAAI,oBAAS,IAAI,MAAA,CAAC;QAClB,uBAAA,IAAI,uBAAY,OAAO,MAAA,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,uBAAA,IAAI,2BAAS,CAAC;IACvB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,uBAAA,IAAI,wBAAM,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,OAAO,CAAC,IAAa;QACnB,uBAAA,IAAI,oBAAS,IAAI,MAAA,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,UAAU,CAAC,IAAsB;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAA,IAAI,2BAAS,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,uBAAA,IAAI,uBAAY,IAAI,MAAA,CAAC;QACrB,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;CACF;;AAED,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAgC,CAAC;AAExE,MAAM,UAAU,iBAAiB,CAAC,OAAyB;IACzD,OAAO,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE,OAAmB;IAC5E,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,4FAA4F;AAC5F,MAAM,eAAe,GAAiB,EAAE,CAAC;AAEzC,MAAM,UAAU,eAAe,CAAC,OAAmB;IACjD,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAmB;IACnD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,KAAK,IAAI,CAAC;QAAE,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAUD,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAyB,IAAI,CAAC,CAAC;AAC7E,iBAAiB,CAAC,WAAW,GAAG,yBAAyB,CAAC"}

package/dist/esm/apps/runtime/transport.d.ts

@@ -0,0 +1,52 @@
+import type { Thread, ThreadFunctions, ThreadMessageTarget } from "@quilted/threads";
+import type { SandboxExports } from "../protocol.js";
+import type { LogEnvelope } from "./console.js";
+/** Message a bootstrap posts, with a `MessagePort` in `event.ports[0]`, to move the thread onto it. */
+export declare const PORT_HANDOFF_KIND: "gs-apps:port";
+export interface PortHandoffMessage {
+    kind: typeof PORT_HANDOFF_KIND;
+}
+/** The parts of a worker global scope or `MessagePort` the runtime uses. */
+export interface MessageEndpoint {
+    postMessage(message: unknown, transfer: Transferable[]): void;
+    addEventListener(type: "message", listener: (event: MessageEvent) => void): void;
+    start?(): void;
+}
+/**
+ * A thread target over a worker scope (or port) that can switch to a handed-off port. It
+ * listens from construction and holds messages until the thread attaches, so nothing the host
+ * sends while `@quilted/threads` loads is lost.
+ */
+export declare class RuntimeChannel implements ThreadMessageTarget {
+    #private;
+    constructor(endpoint: MessageEndpoint);
+    /** Whether traffic has moved to a handed-off port. */
+    get usingHandoffPort(): boolean;
+    send(message: unknown, transferables?: Transferable[]): void;
+    listen(listener: (value: unknown) => void, { signal }: {
+        signal?: AbortSignal;
+    }): void;
+    /** Posts a non-thread envelope (dev-session logs) next to the thread traffic. */
+    postLog(envelope: LogEnvelope): void;
+}
+type ThreadsModule = typeof import("@quilted/threads");
+export declare function defaultThreadFunctions(threads: ThreadsModule): ThreadFunctions;
+/** True inside a real Web Worker (the remote-dom polyfill does not fake this). */
+export declare function isWorkerGlobalScope(): boolean;
+export interface ExposedSandbox {
+    thread: Thread<Record<string, never>, SandboxExports>;
+    channel: RuntimeChannel;
+}
+/**
+ * Serves `exports` over `endpoint` (default: the worker's global scope). `defineApp` calls
+ * this for you inside a worker; call it yourself only for a custom transport or a test.
+ *
+ * The channel starts listening immediately (messages are held); the returned promise resolves
+ * once `@quilted/threads` has loaded and the thread is answering.
+ */
+export declare function exposeSandbox(exports: SandboxExports, options?: {
+    endpoint?: MessageEndpoint | RuntimeChannel;
+    signal?: AbortSignal;
+}): Promise<ExposedSandbox>;
+export {};
+//# sourceMappingURL=transport.d.ts.map

package/dist/esm/apps/runtime/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/apps/runtime/transport.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,EAAG,cAAuB,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,iBAAiB,CAAC;CAChC;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9D,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAC;IACjF,KAAK,CAAC,IAAI,IAAI,CAAC;CAChB;AASD;;;;GAIG;AACH,qBAAa,cAAe,YAAW,mBAAmB;;gBAM5C,QAAQ,EAAE,eAAe;IAYrC,sDAAsD;IACtD,IAAI,gBAAgB,IAAI,OAAO,CAE9B;IAED,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,YAAY,EAAE,GAAG,IAAI;IAI5D,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,IAAI;IAkBtF,iFAAiF;IACjF,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;CAiBrC;AAED,KAAK,aAAa,GAAG,cAAc,kBAAkB,CAAC,CAAC;AAEvD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,GAAG,eAAe,CAI9E;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,IAAI,OAAO,CAG7C;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IACtD,OAAO,EAAE,cAAc,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAClF,OAAO,CAAC,cAAc,CAAC,CAiBzB"}

package/dist/esm/apps/runtime/transport.js

@@ -0,0 +1,148 @@
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * How the worker talks to the host. These are the assumptions C5's bootstrap has to match:
+ *
+ * 1. The app bundle runs in a dedicated Web Worker the bootstrap creates from a blob URL. The
+ *    worker's global scope is the thread endpoint: `@quilted/threads` messages go out with
+ *    `self.postMessage` and come in as `message` events on `self`.
+ * 2. Optionally, the bootstrap may hand the worker a dedicated `MessagePort` instead (for a
+ *    `MessageChannel` relay): it posts `{ kind: PORT_HANDOFF_KIND }` with the port in
+ *    `event.ports[0]`, before or after startup. From then on all traffic uses that port.
+ * 3. Thread messages are the raw `@quilted/threads` arrays. The bootstrap wraps each one it
+ *    receives from the worker in C0's `{ kind: "thread", data }` envelope for the host, and
+ *    unwraps the host's `thread` envelopes for the worker.
+ * 4. Serialization is `ThreadSerializationJSON` on both ends, so every message is plain JSON
+ *    and survives both `postMessage` and the React Native WebView string bridge unchanged.
+ *    The host must use `ThreadSerializationJSON` too, on web as well as native.
+ * 5. Functions are proxied with `ThreadFunctionsAutomatic` when the worker has
+ *    `FinalizationRegistry` and `WeakRef`, else with `ThreadFunctionsManualMemoryManagement`.
+ * 6. Dev sessions only: the worker also posts C0's `BootstrapToHost` `log` envelope
+ *    (`{ kind: "log", level, message }`) on the same channel. It is not a thread array, so the
+ *    thread layer ignores it; the bootstrap forwards it to the host as its own `log` envelope.
+ */
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _RuntimeChannel_instances, _RuntimeChannel_endpoint, _RuntimeChannel_port, _RuntimeChannel_listeners, _RuntimeChannel_pending, _RuntimeChannel_adopt, _RuntimeChannel_deliver;
+/** Message a bootstrap posts, with a `MessagePort` in `event.ports[0]`, to move the thread onto it. */
+export const PORT_HANDOFF_KIND = "gs-apps:port";
+function isPortHandoff(event) {
+    const data = event.data;
+    return typeof data === "object" && data !== null &&
+        data.kind === PORT_HANDOFF_KIND &&
+        event.ports.length > 0;
+}
+/**
+ * A thread target over a worker scope (or port) that can switch to a handed-off port. It
+ * listens from construction and holds messages until the thread attaches, so nothing the host
+ * sends while `@quilted/threads` loads is lost.
+ */
+export class RuntimeChannel {
+    constructor(endpoint) {
+        _RuntimeChannel_instances.add(this);
+        _RuntimeChannel_endpoint.set(this, void 0);
+        _RuntimeChannel_port.set(this, void 0);
+        _RuntimeChannel_listeners.set(this, new Set());
+        _RuntimeChannel_pending.set(this, []);
+        __classPrivateFieldSet(this, _RuntimeChannel_endpoint, endpoint, "f");
+        endpoint.addEventListener("message", (event) => {
+            if (isPortHandoff(event)) {
+                __classPrivateFieldGet(this, _RuntimeChannel_instances, "m", _RuntimeChannel_adopt).call(this, event.ports[0]);
+                return;
+            }
+            if (!__classPrivateFieldGet(this, _RuntimeChannel_port, "f"))
+                __classPrivateFieldGet(this, _RuntimeChannel_instances, "m", _RuntimeChannel_deliver).call(this, event.data);
+        });
+        endpoint.start?.();
+    }
+    /** Whether traffic has moved to a handed-off port. */
+    get usingHandoffPort() {
+        return __classPrivateFieldGet(this, _RuntimeChannel_port, "f") !== undefined;
+    }
+    send(message, transferables) {
+        (__classPrivateFieldGet(this, _RuntimeChannel_port, "f") ?? __classPrivateFieldGet(this, _RuntimeChannel_endpoint, "f")).postMessage(message, transferables ?? []);
+    }
+    listen(listener, { signal }) {
+        // Like `addEventListener(..., { signal })`: an aborted signal never fires `abort` again, so
+        // registering would leave the listener (and a closed thread) receiving messages for good.
+        // Held messages stay held for the next live listener.
+        if (signal?.aborted)
+            return;
+        __classPrivateFieldGet(this, _RuntimeChannel_listeners, "f").add(listener);
+        signal?.addEventListener("abort", () => __classPrivateFieldGet(this, _RuntimeChannel_listeners, "f").delete(listener), { once: true });
+        const pending = __classPrivateFieldGet(this, _RuntimeChannel_pending, "f");
+        if (pending) {
+            __classPrivateFieldSet(this, _RuntimeChannel_pending, undefined, "f");
+            // After the caller (the Thread constructor) has finished setting up.
+            queueMicrotask(() => {
+                for (const data of pending)
+                    __classPrivateFieldGet(this, _RuntimeChannel_instances, "m", _RuntimeChannel_deliver).call(this, data);
+            });
+        }
+    }
+    /** Posts a non-thread envelope (dev-session logs) next to the thread traffic. */
+    postLog(envelope) {
+        this.send(envelope);
+    }
+}
+_RuntimeChannel_endpoint = new WeakMap(), _RuntimeChannel_port = new WeakMap(), _RuntimeChannel_listeners = new WeakMap(), _RuntimeChannel_pending = new WeakMap(), _RuntimeChannel_instances = new WeakSet(), _RuntimeChannel_adopt = function _RuntimeChannel_adopt(port) {
+    __classPrivateFieldSet(this, _RuntimeChannel_port, port, "f");
+    port.addEventListener("message", (event) => __classPrivateFieldGet(this, _RuntimeChannel_instances, "m", _RuntimeChannel_deliver).call(this, event.data));
+    port.start();
+}, _RuntimeChannel_deliver = function _RuntimeChannel_deliver(data) {
+    if (__classPrivateFieldGet(this, _RuntimeChannel_pending, "f")) {
+        __classPrivateFieldGet(this, _RuntimeChannel_pending, "f").push(data);
+        return;
+    }
+    for (const listener of __classPrivateFieldGet(this, _RuntimeChannel_listeners, "f"))
+        listener(data);
+};
+export function defaultThreadFunctions(threads) {
+    return typeof FinalizationRegistry === "function" && typeof WeakRef === "function"
+        ? new threads.ThreadFunctionsAutomatic()
+        : new threads.ThreadFunctionsManualMemoryManagement();
+}
+/** True inside a real Web Worker (the remote-dom polyfill does not fake this). */
+export function isWorkerGlobalScope() {
+    const ctor = globalThis.WorkerGlobalScope;
+    return typeof ctor === "function" && globalThis instanceof ctor;
+}
+/**
+ * Serves `exports` over `endpoint` (default: the worker's global scope). `defineApp` calls
+ * this for you inside a worker; call it yourself only for a custom transport or a test.
+ *
+ * The channel starts listening immediately (messages are held); the returned promise resolves
+ * once `@quilted/threads` has loaded and the thread is answering.
+ */
+export function exposeSandbox(exports, options = {}) {
+    const { endpoint, signal } = options;
+    let channel;
+    if (endpoint instanceof RuntimeChannel)
+        channel = endpoint;
+    else if (endpoint)
+        channel = new RuntimeChannel(endpoint);
+    else if (isWorkerGlobalScope())
+        channel = new RuntimeChannel(globalThis);
+    else
+        return Promise.reject(new Error("exposeSandbox() needs an endpoint outside a Web Worker"));
+    return import("@quilted/threads").then((threads) => {
+        const thread = new threads.Thread(channel, {
+            exports,
+            serialization: new threads.ThreadSerializationJSON(),
+            functions: defaultThreadFunctions(threads),
+            ...(signal ? { signal } : {}),
+        });
+        return { thread, channel };
+    });
+}
+//# sourceMappingURL=transport.js.map

package/dist/esm/apps/runtime/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../src/apps/runtime/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;;;;;;;;AAWH,uGAAuG;AACvG,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAuB,CAAC;AAazD,SAAS,aAAa,CAAC,KAAmB;IACxC,MAAM,IAAI,GAAY,KAAK,CAAC,IAAI,CAAC;IACjC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAC7C,IAA2B,CAAC,IAAI,KAAK,iBAAiB;QACvD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAMzB,YAAY,QAAyB;;QAL5B,2CAA2B;QACpC,uCAA+B;QACtB,oCAAa,IAAI,GAAG,EAA4B,EAAC;QAC1D,kCAAkC,EAAE,EAAC;QAGnC,uBAAA,IAAI,4BAAa,QAAQ,MAAA,CAAC;QAC1B,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7C,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,uBAAA,IAAI,wDAAO,MAAX,IAAI,EAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,IAAI,CAAC,uBAAA,IAAI,4BAAM;gBAAE,uBAAA,IAAI,0DAAS,MAAb,IAAI,EAAU,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,IAAI,gBAAgB;QAClB,OAAO,uBAAA,IAAI,4BAAM,KAAK,SAAS,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,OAAgB,EAAE,aAA8B;QACnD,CAAC,uBAAA,IAAI,4BAAM,IAAI,uBAAA,IAAI,gCAAU,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,QAAkC,EAAE,EAAE,MAAM,EAA4B;QAC7E,4FAA4F;QAC5F,0FAA0F;QAC1F,sDAAsD;QACtD,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO;QAC5B,uBAAA,IAAI,iCAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,uBAAA,IAAI,iCAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1F,MAAM,OAAO,GAAG,uBAAA,IAAI,+BAAS,CAAC;QAC9B,IAAI,OAAO,EAAE,CAAC;YACZ,uBAAA,IAAI,2BAAY,SAAS,MAAA,CAAC;YAC1B,qEAAqE;YACrE,cAAc,CAAC,GAAG,EAAE;gBAClB,KAAK,MAAM,IAAI,IAAI,OAAO;oBAAE,uBAAA,IAAI,0DAAS,MAAb,IAAI,EAAU,IAAI,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,OAAO,CAAC,QAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;CAeF;sQAbQ,IAAiB;IACtB,uBAAA,IAAI,wBAAS,IAAI,MAAA,CAAC;IAClB,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAA,IAAI,0DAAS,MAAb,IAAI,EAAU,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;AACf,CAAC,6DAEQ,IAAa;IACpB,IAAI,uBAAA,IAAI,+BAAS,EAAE,CAAC;QAClB,uBAAA,IAAI,+BAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,uBAAA,IAAI,iCAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAKH,MAAM,UAAU,sBAAsB,CAAC,OAAsB;IAC3D,OAAO,OAAO,oBAAoB,KAAK,UAAU,IAAI,OAAO,OAAO,KAAK,UAAU;QAChF,CAAC,CAAC,IAAI,OAAO,CAAC,wBAAwB,EAAE;QACxC,CAAC,CAAC,IAAI,OAAO,CAAC,qCAAqC,EAAE,CAAC;AAC1D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB;IACjC,MAAM,IAAI,GAAI,UAA8C,CAAC,iBAAiB,CAAC;IAC/E,OAAO,OAAO,IAAI,KAAK,UAAU,IAAI,UAAU,YAAa,IAAkC,CAAC;AACjG,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuB,EACvB,UAAiF,EAAE;IAEnF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrC,IAAI,OAAuB,CAAC;IAC5B,IAAI,QAAQ,YAAY,cAAc;QAAE,OAAO,GAAG,QAAQ,CAAC;SACtD,IAAI,QAAQ;QAAE,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;SACrD,IAAI,mBAAmB,EAAE;QAAE,OAAO,GAAG,IAAI,cAAc,CAAC,UAAwC,CAAC,CAAC;;QAClG,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC,CAAC;IAEhG,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAwC,OAAO,EAAE;YAChF,OAAO;YACP,aAAa,EAAE,IAAI,OAAO,CAAC,uBAAuB,EAAE;YACpD,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}