@interop/was-react 0.1.0

package/dist/session/appReadyStore.js

@@ -0,0 +1,22 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The app-ready gate: a tiny shared zustand store the auth store flips once the
+ * session seed has opened the local store and hydrated every entity store. The
+ * router gate (`ProtectedRoute` / the `useAppReady` hook) waits on it before
+ * rendering the app.
+ *
+ * This is only the ready-flag store extracted from the app-side bootstrap; the
+ * dev-mode `initApp` open/hydrate driver stays app-side. In wallet mode the auth
+ * store owns the open/hydrate ordering and reuses this same gate.
+ */
+import { create } from 'zustand';
+export const useAppReady = create(set => ({
+    ready: false,
+    error: null,
+    setReady: () => set({ ready: true, error: null }),
+    setError: message => set({ error: message }),
+    reset: () => set({ ready: false, error: null })
+}));
+//# sourceMappingURL=appReadyStore.js.map

package/dist/session/appReadyStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appReadyStore.js","sourceRoot":"","sources":["../../src/session/appReadyStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAUhC,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAgB,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjD,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5C,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;CAChD,CAAC,CAAC,CAAA"}

package/dist/session/authStore.d.ts

@@ -0,0 +1,71 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The wallet-mode auth store (zustand): owns the session lifecycle -- hot
+ * restore (zero popups), Login With Wallet, logout, and the expired-access
+ * reconnect -- plus the open/hydrate/sync ordering.
+ *
+ * On a successful login/restore it opens the encrypted {@link LocalStore} from
+ * the session seed (a per-controller database name, so two wallet users on one
+ * browser never collide), hydrates the entity stores, flips the shared
+ * `useAppReady` gate, and starts WAS replication from the granted zcaps.
+ *
+ * `status` is the router gate: `ProtectedRoute` waits for the restore attempt to
+ * settle before deciding between the app and the login page.
+ *
+ * The library cannot bind a module-level store to app config, so this is a
+ * FACTORY: {@link createAuthStore} captures the app's {@link WasAppConfig} and
+ * {@link StoreRegistry} once (the React provider calls it once) and returns a
+ * vanilla zustand store the hooks consume through context.
+ */
+import { type StoreApi } from 'zustand/vanilla';
+import type { RxStorage } from 'rxdb/plugins/core';
+import { type StoreRegistry, type WasAppConfig } from '../config.js';
+import { type SeedStore } from '../identity/seedStore.js';
+import { type LoginPhase } from '../auth/loginFlow.js';
+export type AuthStatus = 'idle' | 'restoring' | 'unauthenticated' | 'authenticating' | 'authenticated';
+export interface AuthState {
+    status: AuthStatus;
+    /** The current login phase, for the login page's progress line. */
+    phase: LoginPhase | null;
+    error: string | null;
+    controllerDid: string | null;
+    /** ISO expiry of the current grant set (earliest zcap expiry). */
+    expires: string | null;
+    /** A live 401/403 was seen mid-session: show the reconnect banner. */
+    accessExpired: boolean;
+    reconnecting: boolean;
+    /** Hot restore from the persisted session; falls to `unauthenticated`. */
+    restore: () => Promise<void>;
+    /** Full Login With Wallet (first-run or returning). */
+    login: () => Promise<void>;
+    /** Re-run the grants flow with the existing seed (expired access). */
+    reconnect: () => Promise<void>;
+    logout: () => Promise<void>;
+    notifyAccessExpired: () => void;
+}
+/** The vanilla zustand store returned by {@link createAuthStore}. */
+export type WasAuthStore = StoreApi<AuthState>;
+/**
+ * Builds the wallet-mode auth store bound to an app's config and store registry.
+ * Call once (the React provider does) and share the returned store through
+ * context; the hooks read it via `useStore`.
+ *
+ * @param options {object}
+ * @param options.config {WasAppConfig}   the app-wide configuration
+ * @param options.registry {StoreRegistry}   the per-collection hydrate/patch
+ *   handlers the rehydrate mechanism drives
+ * @param [options.seedStore] {SeedStore}   the session IndexedDB persistence
+ *   (defaults to one bound to `<dbName>-session`; inject a fake for tests)
+ * @param [options.storage] {RxStorage}   the RxDB storage for the local store
+ *   (defaults to Dexie/IndexedDB; inject a fake for tests)
+ * @returns {WasAuthStore}
+ */
+export declare function createAuthStore({ config, registry, seedStore, storage }: {
+    config: WasAppConfig;
+    registry: StoreRegistry;
+    seedStore?: SeedStore;
+    storage?: RxStorage<unknown, unknown>;
+}): WasAuthStore;
+//# sourceMappingURL=authStore.d.ts.map

package/dist/session/authStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authStore.d.ts","sourceRoot":"","sources":["../../src/session/authStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,cAAc,CAAA;AAIrB,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAO1E,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAA;AAsB7B,MAAM,MAAM,UAAU,GACpB,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,CAAA;AAU/E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAA;IAClB,mEAAmE;IACnE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,kEAAkE;IAClE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sEAAsE;IACtE,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,OAAO,CAAA;IACrB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,uDAAuD;IACvD,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,sEAAsE;IACtE,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,mBAAmB,EAAE,MAAM,IAAI,CAAA;CAChC;AAED,qEAAqE;AACrE,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;AAE9C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EACR,SAAS,EACT,OAAO,EACR,EAAE;IACD,MAAM,EAAE,YAAY,CAAA;IACpB,QAAQ,EAAE,aAAa,CAAA;IACvB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CACtC,GAAG,YAAY,CAkUf"}

package/dist/session/authStore.js

@@ -0,0 +1,347 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The wallet-mode auth store (zustand): owns the session lifecycle -- hot
+ * restore (zero popups), Login With Wallet, logout, and the expired-access
+ * reconnect -- plus the open/hydrate/sync ordering.
+ *
+ * On a successful login/restore it opens the encrypted {@link LocalStore} from
+ * the session seed (a per-controller database name, so two wallet users on one
+ * browser never collide), hydrates the entity stores, flips the shared
+ * `useAppReady` gate, and starts WAS replication from the granted zcaps.
+ *
+ * `status` is the router gate: `ProtectedRoute` waits for the restore attempt to
+ * settle before deciding between the app and the login page.
+ *
+ * The library cannot bind a module-level store to app config, so this is a
+ * FACTORY: {@link createAuthStore} captures the app's {@link WasAppConfig} and
+ * {@link StoreRegistry} once (the React provider calls it once) and returns a
+ * vanilla zustand store the hooks consume through context.
+ */
+import { createStore } from 'zustand/vanilla';
+import { DEFAULT_DB_NAME, DEFAULT_EXPIRY_WARNING_MS, DEFAULT_EXPIRY_WATCH_MS } from '../config.js';
+import { createDocumentLoader } from '../identity/documentLoader.js';
+import { initAppSession } from '../identity/initAppSession.js';
+import { createSeedStore } from '../identity/seedStore.js';
+import { clearAppSession, persistAppSession, restoreAppSession, isNearExpiry } from '../identity/appSession.js';
+import { loginWithWallet, requestGrants, LoginCancelledError } from '../auth/loginFlow.js';
+import { parseGrants } from '../grants.js';
+import { LocalStore } from '../storage/localStore.js';
+import { clearLocalStore, hasStore, requireStore, setLocalStore } from '../storage/storageManager.js';
+import { clearAllEntityStores, hydrateAll, patchFromChange } from '../storage/rehydrate.js';
+import { startWasSync } from '../storage/wasSync.js';
+import { createSyncController } from '../storage/syncController.js';
+import { useSyncStatusStore } from '../storage/syncStatusStore.js';
+import { useAppReady } from './appReadyStore.js';
+/**
+ * Builds the wallet-mode auth store bound to an app's config and store registry.
+ * Call once (the React provider does) and share the returned store through
+ * context; the hooks read it via `useStore`.
+ *
+ * @param options {object}
+ * @param options.config {WasAppConfig}   the app-wide configuration
+ * @param options.registry {StoreRegistry}   the per-collection hydrate/patch
+ *   handlers the rehydrate mechanism drives
+ * @param [options.seedStore] {SeedStore}   the session IndexedDB persistence
+ *   (defaults to one bound to `<dbName>-session`; inject a fake for tests)
+ * @param [options.storage] {RxStorage}   the RxDB storage for the local store
+ *   (defaults to Dexie/IndexedDB; inject a fake for tests)
+ * @returns {WasAuthStore}
+ */
+export function createAuthStore({ config, registry, seedStore, storage }) {
+    const dbName = config.dbName ?? DEFAULT_DB_NAME;
+    const sessionStore = seedStore ?? createSeedStore({ dbName: `${dbName}-session` });
+    const documentLoader = createDocumentLoader(config.wasServerUrl !== undefined
+        ? { wasServerUrl: config.wasServerUrl }
+        : {});
+    // The login flow consumes only the WAS collection ids; this config layer owns
+    // the `{ key, id }` registry.
+    const loginConfig = {
+        appOrigin: config.appOrigin,
+        appName: config.appName,
+        collections: config.collections.map(collection => collection.id),
+        credential: config.credential,
+        documentLoader,
+        ...(config.wasServerUrl !== undefined && {
+            wasServerUrl: config.wasServerUrl
+        }),
+        ...(config.mediatorBase !== undefined && {
+            mediatorBase: config.mediatorBase
+        })
+    };
+    /**
+     * How close to grant expiry the reconnect banner is raised proactively (so the
+     * user re-grants before a live request fails). Wallet grants default to a long
+     * TTL, so a short lead time never fires spuriously mid-session.
+     */
+    const warningMs = config.expiry?.warningMs ?? DEFAULT_EXPIRY_WARNING_MS;
+    /** Poll interval for the near-expiry watch (grant expiry is coarse-grained). */
+    const watchMs = config.expiry?.watchMs ?? DEFAULT_EXPIRY_WATCH_MS;
+    let expiryTimer;
+    // The per-session controller: single-use, stopped on logout and replaced on a
+    // reconnect (started once per grant set).
+    let controller = null;
+    /** Stops the near-expiry watch (logout / re-grant). */
+    function disarmExpiryWatch() {
+        if (expiryTimer) {
+            clearInterval(expiryTimer);
+            expiryTimer = undefined;
+        }
+    }
+    /**
+     * Watches the session's earliest grant expiry and raises the reconnect banner
+     * once it is within `warningMs` (or already past). Checks immediately, then on
+     * a coarse interval; re-armed with the fresh expiry after a reconnect.
+     */
+    function armExpiryWatch(expires) {
+        disarmExpiryWatch();
+        const check = () => {
+            if (isNearExpiry(expires, warningMs)) {
+                store.getState().notifyAccessExpired();
+            }
+        };
+        check();
+        expiryTimer = setInterval(check, watchMs);
+    }
+    /** A stable, RxDB-safe database name per controller DID (FNV-1a hex). */
+    function dbNameForController(controllerDid) {
+        let hash = 0x811c9dc5;
+        for (let i = 0; i < controllerDid.length; i++) {
+            hash ^= controllerDid.charCodeAt(i);
+            hash = Math.imul(hash, 0x01000193) >>> 0;
+        }
+        return `${dbName}-${hash.toString(16).padStart(8, '0')}`;
+    }
+    /**
+     * Starts a fresh per-session controller replicating the granted collections,
+     * wiring reactive per-doc store patching and the auth-error (401/403) signal.
+     */
+    function beginSync({ parsed, zcapClient }) {
+        controller = createSyncController({
+            collections: config.collections,
+            ...(config.sync && { sync: config.sync })
+        });
+        return startWasSync({
+            parsed,
+            zcapClient,
+            localStore: requireStore(),
+            syncController: controller,
+            onRemoteChange: (key, event) => void patchFromChange(registry, key, event),
+            onAuthError: () => store.getState().notifyAccessExpired()
+        });
+    }
+    /**
+     * Opens storage + hydrates + starts sync for a validated session, persists it,
+     * and flips the ready gate. Shared by login and restore.
+     */
+    async function activateSession(session) {
+        if (!hasStore()) {
+            const local = await LocalStore.init({
+                seed: session.seed,
+                collections: config.collections,
+                dbName: dbNameForController(session.identity.controllerDid),
+                ...(storage && { storage })
+            });
+            setLocalStore(local);
+        }
+        await hydrateAll(registry);
+        useAppReady.getState().setReady();
+        await persistAppSession({
+            session: {
+                seed: session.seed,
+                controllerDid: session.identity.controllerDid,
+                serverUrl: session.parsed.serverUrl,
+                spaceId: session.parsed.spaceId,
+                grants: session.grants,
+                expires: session.expires
+            },
+            store: sessionStore
+        });
+        // Replication starts in the background; a down server never blocks entry.
+        void beginSync({
+            parsed: session.parsed,
+            zcapClient: session.identity.zcapClient
+        }).catch(err => console.warn('WAS sync failed to start:', err));
+        armExpiryWatch(session.expires);
+    }
+    /** Tears down storage + sync + entity stores (logout and re-login paths). */
+    async function deactivateSession() {
+        disarmExpiryWatch();
+        if (controller) {
+            await controller.stop();
+            controller = null;
+        }
+        if (hasStore()) {
+            try {
+                await requireStore().close();
+            }
+            catch (err) {
+                console.warn('Error closing the local store:', err);
+            }
+            clearLocalStore();
+        }
+        clearAllEntityStores(registry);
+        useSyncStatusStore.getState().reset();
+        useAppReady.getState().reset();
+    }
+    // Declared last so `prefer-const` is satisfied; the lifecycle closures above
+    // only dereference `store` at call time, by which point it is assigned.
+    const store = createStore()((set, get) => ({
+        status: 'idle',
+        phase: null,
+        error: null,
+        controllerDid: null,
+        expires: null,
+        accessExpired: false,
+        reconnecting: false,
+        restore: async () => {
+            if (get().status !== 'idle') {
+                return;
+            }
+            set({ status: 'restoring' });
+            try {
+                const restored = await restoreAppSession({ store: sessionStore });
+                if (!restored) {
+                    set({ status: 'unauthenticated' });
+                    return;
+                }
+                const identity = await initAppSession({ seed: restored.seed });
+                if (identity.controllerDid !== restored.controllerDid) {
+                    // A corrupt record; treat as logged out.
+                    await clearAppSession({ store: sessionStore });
+                    set({ status: 'unauthenticated' });
+                    return;
+                }
+                const parsed = parseGrants(restored.grants);
+                if (config.wasServerUrl !== undefined &&
+                    parsed.serverUrl !== config.wasServerUrl) {
+                    await clearAppSession({ store: sessionStore });
+                    set({ status: 'unauthenticated' });
+                    return;
+                }
+                await activateSession({
+                    seed: restored.seed,
+                    identity,
+                    parsed,
+                    grants: restored.grants,
+                    expires: restored.expires
+                });
+                set({
+                    status: 'authenticated',
+                    controllerDid: identity.controllerDid,
+                    expires: restored.expires,
+                    error: null
+                });
+            }
+            catch (err) {
+                console.warn('Session restore failed:', err);
+                set({ status: 'unauthenticated' });
+            }
+        },
+        login: async () => {
+            const { status } = get();
+            if (status === 'authenticating' || status === 'authenticated') {
+                return;
+            }
+            set({ status: 'authenticating', error: null, phase: 'probing' });
+            try {
+                const outcome = await loginWithWallet({
+                    config: loginConfig,
+                    onPhase: phase => set({ phase })
+                });
+                await activateSession({
+                    seed: outcome.seed,
+                    identity: outcome.identity,
+                    parsed: outcome.parsed,
+                    grants: outcome.grants,
+                    expires: outcome.expires
+                });
+                set({
+                    status: 'authenticated',
+                    controllerDid: outcome.identity.controllerDid,
+                    expires: outcome.expires,
+                    phase: null,
+                    error: null,
+                    accessExpired: false
+                });
+            }
+            catch (err) {
+                const message = err instanceof LoginCancelledError
+                    ? err.message
+                    : err instanceof Error
+                        ? `Login failed: ${err.message}`
+                        : 'Login failed.';
+                set({ status: 'unauthenticated', phase: null, error: message });
+            }
+        },
+        reconnect: async () => {
+            const { reconnecting, status } = get();
+            if (reconnecting || status !== 'authenticated') {
+                return;
+            }
+            set({ reconnecting: true, error: null });
+            try {
+                const restored = await restoreAppSession({ store: sessionStore });
+                // The seed survives grant expiry; only the grants need renewing. A
+                // missing seed means the session is unrecoverable in place.
+                const seed = restored?.seed;
+                if (!seed) {
+                    await get().logout();
+                    return;
+                }
+                const identity = await initAppSession({ seed });
+                const checked = await requestGrants({ identity, config: loginConfig });
+                if (controller) {
+                    await controller.stop();
+                    controller = null;
+                }
+                await persistAppSession({
+                    session: {
+                        seed,
+                        controllerDid: identity.controllerDid,
+                        serverUrl: checked.parsed.serverUrl,
+                        spaceId: checked.parsed.spaceId,
+                        grants: checked.grants,
+                        expires: checked.expires
+                    },
+                    store: sessionStore
+                });
+                void beginSync({
+                    parsed: checked.parsed,
+                    zcapClient: identity.zcapClient
+                }).catch(err => console.warn('WAS sync failed to restart:', err));
+                armExpiryWatch(checked.expires);
+                set({
+                    accessExpired: false,
+                    expires: checked.expires,
+                    reconnecting: false
+                });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : 'Reconnect failed.';
+                set({ reconnecting: false, error: message });
+            }
+        },
+        logout: async () => {
+            await deactivateSession();
+            await clearAppSession({ store: sessionStore });
+            set({
+                status: 'unauthenticated',
+                phase: null,
+                error: null,
+                controllerDid: null,
+                expires: null,
+                accessExpired: false,
+                reconnecting: false
+            });
+        },
+        notifyAccessExpired: () => {
+            if (!get().accessExpired) {
+                set({ accessExpired: true });
+            }
+        }
+    }));
+    return store;
+}
+//# sourceMappingURL=authStore.js.map

package/dist/session/authStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authStore.js","sourceRoot":"","sources":["../../src/session/authStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,WAAW,EAAiB,MAAM,iBAAiB,CAAA;AAG5D,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,uBAAuB,EAGxB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAE9D,OAAO,EAAE,eAAe,EAAkB,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACb,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,eAAe,EACf,aAAa,EACb,mBAAmB,EAGpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EACL,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,aAAa,EACd,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,eAAe,EAChB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EACL,oBAAoB,EAErB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAqChD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EACR,SAAS,EACT,OAAO,EAMR;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAA;IAC/C,MAAM,YAAY,GAChB,SAAS,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,cAAc,GAAG,oBAAoB,CACzC,MAAM,CAAC,YAAY,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;QACvC,CAAC,CAAC,EAAE,CACP,CAAA;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,MAAM,WAAW,GAAgB;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc;QACd,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI;YACvC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI;YACvC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;KACH,CAAA;IAED;;;;OAIG;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,yBAAyB,CAAA;IACvE,gFAAgF;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,uBAAuB,CAAA;IAEjE,IAAI,WAAuD,CAAA;IAC3D,8EAA8E;IAC9E,0CAA0C;IAC1C,IAAI,UAAU,GAA0B,IAAI,CAAA;IAE5C,uDAAuD;IACvD,SAAS,iBAAiB;QACxB,IAAI,WAAW,EAAE,CAAC;YAChB,aAAa,CAAC,WAAW,CAAC,CAAA;YAC1B,WAAW,GAAG,SAAS,CAAA;QACzB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,cAAc,CAAC,OAAe;QACrC,iBAAiB,EAAE,CAAA;QACnB,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,QAAQ,EAAE,CAAC,mBAAmB,EAAE,CAAA;YACxC,CAAC;QACH,CAAC,CAAA;QACD,KAAK,EAAE,CAAA;QACP,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;IAED,yEAAyE;IACzE,SAAS,mBAAmB,CAAC,aAAqB;QAChD,IAAI,IAAI,GAAG,UAAU,CAAA;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,IAAI,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;YACnC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;IAC1D,CAAC;IAED;;;OAGG;IACH,SAAS,SAAS,CAAC,EACjB,MAAM,EACN,UAAU,EAIX;QACC,UAAU,GAAG,oBAAoB,CAAC;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,OAAO,YAAY,CAAC;YAClB,MAAM;YACN,UAAU;YACV,UAAU,EAAE,YAAY,EAAE;YAC1B,cAAc,EAAE,UAAU;YAC1B,cAAc,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAC7B,KAAK,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC;YAC5C,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,mBAAmB,EAAE;SAC1D,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,eAAe,CAAC,OAAsB;QACnD,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;gBAClC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC3D,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;aAC5B,CAAC,CAAA;YACF,aAAa,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;QACD,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC1B,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAA;QAEjC,MAAM,iBAAiB,CAAC;YACtB,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAC7C,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;gBACnC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB;YACD,KAAK,EAAE,YAAY;SACpB,CAAC,CAAA;QAEF,0EAA0E;QAC1E,KAAK,SAAS,CAAC;YACb,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;SACxC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC,CAAA;QAE/D,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IAED,6EAA6E;IAC7E,KAAK,UAAU,iBAAiB;QAC9B,iBAAiB,EAAE,CAAA;QACnB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,IAAI,EAAE,CAAA;YACvB,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;QACD,IAAI,QAAQ,EAAE,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,YAAY,EAAE,CAAC,KAAK,EAAE,CAAA;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAA;YACrD,CAAC;YACD,eAAe,EAAE,CAAA;QACnB,CAAC;QACD,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QAC9B,kBAAkB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAA;QACrC,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAA;IAChC,CAAC;IAED,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,KAAK,GAAiB,WAAW,EAAa,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,KAAK;QACpB,YAAY,EAAE,KAAK;QAEnB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,GAAG,EAAE,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,OAAM;YACR,CAAC;YACD,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;gBACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;oBAClC,OAAM;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC9D,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;oBACtD,yCAAyC;oBACzC,MAAM,eAAe,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;oBAC9C,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;oBAClC,OAAM;gBACR,CAAC;gBACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC3C,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;oBACjC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,YAAY,EACxC,CAAC;oBACD,MAAM,eAAe,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;oBAC9C,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;oBAClC,OAAM;gBACR,CAAC;gBACD,MAAM,eAAe,CAAC;oBACpB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ;oBACR,MAAM;oBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC,CAAA;gBACF,GAAG,CAAC;oBACF,MAAM,EAAE,eAAe;oBACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAA;gBAC5C,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QAED,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAA;YACxB,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC9D,OAAM;YACR,CAAC;YACD,GAAG,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;oBACpC,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;iBACjC,CAAC,CAAA;gBACF,MAAM,eAAe,CAAC;oBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAA;gBACF,GAAG,CAAC;oBACF,MAAM,EAAE,eAAe;oBACvB,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;oBAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,IAAI;oBACX,aAAa,EAAE,KAAK;iBACrB,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GACX,GAAG,YAAY,mBAAmB;oBAChC,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,GAAG,YAAY,KAAK;wBACpB,CAAC,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE;wBAChC,CAAC,CAAC,eAAe,CAAA;gBACvB,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;QAED,SAAS,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAA;YACtC,IAAI,YAAY,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/C,OAAM;YACR,CAAC;YACD,GAAG,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACxC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;gBACjE,mEAAmE;gBACnE,4DAA4D;gBAC5D,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAA;gBAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,CAAA;oBACpB,OAAM;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC/C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;gBACtE,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC,IAAI,EAAE,CAAA;oBACvB,UAAU,GAAG,IAAI,CAAA;gBACnB,CAAC;gBACD,MAAM,iBAAiB,CAAC;oBACtB,OAAO,EAAE;wBACP,IAAI;wBACJ,aAAa,EAAE,QAAQ,CAAC,aAAa;wBACrC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;wBACnC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;wBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB;oBACD,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAA;gBACF,KAAK,SAAS,CAAC;oBACb,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,QAAQ,CAAC,UAAU;iBAChC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAA;gBACjE,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;gBAC/B,GAAG,CAAC;oBACF,aAAa,EAAE,KAAK;oBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,YAAY,EAAE,KAAK;iBACpB,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAA;gBACxE,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,iBAAiB,EAAE,CAAA;YACzB,MAAM,eAAe,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;YAC9C,GAAG,CAAC;gBACF,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,KAAK;gBACpB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;QACJ,CAAC;QAED,mBAAmB,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;gBACzB,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;KACF,CAAC,CAAC,CAAA;IAEH,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/session/index.d.ts

@@ -0,0 +1,10 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The session lifecycle layer: the wallet-mode auth store factory and the shared
+ * app-ready gate.
+ */
+export { createAuthStore, type AuthStatus, type AuthState, type WasAuthStore } from './authStore.js';
+export { useAppReady } from './appReadyStore.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;GAGG;AACH,OAAO,EACL,eAAe,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/session/index.js

@@ -0,0 +1,10 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The session lifecycle layer: the wallet-mode auth store factory and the shared
+ * app-ready gate.
+ */
+export { createAuthStore } from './authStore.js';
+export { useAppReady } from './appReadyStore.js';
+//# sourceMappingURL=index.js.map

package/dist/session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;GAGG;AACH,OAAO,EACL,eAAe,EAIhB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/storage/entityStore.d.ts

@@ -0,0 +1,51 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * A generic zustand store over one localStore collection. Holds the decrypted
+ * payloads as a `Map<uuid, Doc>` and exposes the CRUD verbs that (1) persist
+ * through the encrypted {@link LocalStore} and (2) patch the in-memory Map. UI
+ * reads through selectors and applies the app's own comparators/filters; this
+ * layer stays domain-agnostic so every entity shares it.
+ *
+ * Reactivity note: local writes patch the Map optimistically after the localStore
+ * write resolves. Pulled remote changes are applied per-doc by the sync layer
+ * through `patch` / `drop` (no whole-collection re-hydrate), keeping multi-device
+ * edits and tombstones live without re-hydrate storms.
+ */
+import { type UseBoundStore, type StoreApi } from 'zustand';
+export interface EntityStore<T extends {
+    id: string;
+}> {
+    /** Decrypted payloads keyed by logical uuid. */
+    byId: Map<string, T>;
+    hydrated: boolean;
+    /** Decrypt every live row of the collection into the Map. */
+    hydrate: () => Promise<void>;
+    /** Encrypt+insert a new doc, then add it to the Map. */
+    insert: (doc: T) => Promise<void>;
+    /** Re-encrypt a doc in place (sequence+1), then replace it in the Map. */
+    update: (doc: T) => Promise<void>;
+    /** Tombstone a doc, then drop it from the Map. */
+    remove: (uuid: string) => Promise<void>;
+    /** Replace the whole Map (used by hydrate and, later, the sync stream). */
+    replaceAll: (docs: T[]) => void;
+    /**
+     * Upsert one already-decrypted doc into the Map WITHOUT persisting (the sync
+     * stream owns the persisted row already). Used for per-doc reactive patching
+     * of pulled/conflict-resolved remote changes.
+     */
+    patch: (doc: T) => void;
+    /** Drop one doc from the Map WITHOUT persisting (remote tombstone patch). */
+    drop: (uuid: string) => void;
+}
+/**
+ * Builds a zustand hook for the collection whose localStore key is `collectionKey`.
+ *
+ * @param collectionKey {string}
+ * @returns {UseBoundStore<StoreApi<EntityStore<T>>>}
+ */
+export declare function createEntityStore<T extends {
+    id: string;
+}>(collectionKey: string): UseBoundStore<StoreApi<EntityStore<T>>>;
+//# sourceMappingURL=entityStore.d.ts.map

package/dist/storage/entityStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entityStore.d.ts","sourceRoot":"","sources":["../../src/storage/entityStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAU,KAAK,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAA;AAGnE,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE;IACnD,gDAAgD;IAChD,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACpB,QAAQ,EAAE,OAAO,CAAA;IACjB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,wDAAwD;IACxD,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,0EAA0E;IAC1E,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,kDAAkD;IAClD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,2EAA2E;IAC3E,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,CAAA;IAC/B;;;;OAIG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAA;IACvB,6EAA6E;IAC7E,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACxD,aAAa,EAAE,MAAM,GACpB,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAqDzC"}

package/dist/storage/entityStore.js

@@ -0,0 +1,78 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * A generic zustand store over one localStore collection. Holds the decrypted
+ * payloads as a `Map<uuid, Doc>` and exposes the CRUD verbs that (1) persist
+ * through the encrypted {@link LocalStore} and (2) patch the in-memory Map. UI
+ * reads through selectors and applies the app's own comparators/filters; this
+ * layer stays domain-agnostic so every entity shares it.
+ *
+ * Reactivity note: local writes patch the Map optimistically after the localStore
+ * write resolves. Pulled remote changes are applied per-doc by the sync layer
+ * through `patch` / `drop` (no whole-collection re-hydrate), keeping multi-device
+ * edits and tombstones live without re-hydrate storms.
+ */
+import { create } from 'zustand';
+import { requireStore } from './storageManager.js';
+/**
+ * Builds a zustand hook for the collection whose localStore key is `collectionKey`.
+ *
+ * @param collectionKey {string}
+ * @returns {UseBoundStore<StoreApi<EntityStore<T>>>}
+ */
+export function createEntityStore(collectionKey) {
+    return create(set => ({
+        byId: new Map(),
+        hydrated: false,
+        hydrate: async () => {
+            const docs = await requireStore().listEntities(collectionKey);
+            set({ byId: new Map(docs.map(d => [d.id, d])), hydrated: true });
+        },
+        insert: async (doc) => {
+            await requireStore().insertEntity(collectionKey, doc);
+            set(state => {
+                const byId = new Map(state.byId);
+                byId.set(doc.id, doc);
+                return { byId };
+            });
+        },
+        update: async (doc) => {
+            await requireStore().updateEntity(collectionKey, doc);
+            set(state => {
+                const byId = new Map(state.byId);
+                byId.set(doc.id, doc);
+                return { byId };
+            });
+        },
+        remove: async (uuid) => {
+            await requireStore().deleteEntity(collectionKey, uuid);
+            set(state => {
+                const byId = new Map(state.byId);
+                byId.delete(uuid);
+                return { byId };
+            });
+        },
+        replaceAll: docs => {
+            set({ byId: new Map(docs.map(d => [d.id, d])), hydrated: true });
+        },
+        patch: doc => {
+            set(state => {
+                const byId = new Map(state.byId);
+                byId.set(doc.id, doc);
+                return { byId };
+            });
+        },
+        drop: uuid => {
+            set(state => {
+                if (!state.byId.has(uuid)) {
+                    return state;
+                }
+                const byId = new Map(state.byId);
+                byId.delete(uuid);
+                return { byId };
+            });
+        }
+    }));
+}
+//# sourceMappingURL=entityStore.js.map

package/dist/storage/entityStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entityStore.js","sourceRoot":"","sources":["../../src/storage/entityStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,EAAqC,MAAM,SAAS,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AA0BlD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAAqB;IAErB,OAAO,MAAM,CAAiB,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,IAAI,GAAG,EAAa;QAC1B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC,YAAY,CAAI,aAAa,CAAC,CAAA;YAChE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YAClB,MAAM,YAAY,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;YACrD,GAAG,CAAC,KAAK,CAAC,EAAE;gBACV,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBACrB,OAAO,EAAE,IAAI,EAAE,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YAClB,MAAM,YAAY,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;YACrD,GAAG,CAAC,KAAK,CAAC,EAAE;gBACV,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBACrB,OAAO,EAAE,IAAI,EAAE,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;YACnB,MAAM,YAAY,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;YACtD,GAAG,CAAC,KAAK,CAAC,EAAE;gBACV,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACjB,OAAO,EAAE,IAAI,EAAE,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,UAAU,EAAE,IAAI,CAAC,EAAE;YACjB,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,KAAK,EAAE,GAAG,CAAC,EAAE;YACX,GAAG,CAAC,KAAK,CAAC,EAAE;gBACV,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBACrB,OAAO,EAAE,IAAI,EAAE,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,IAAI,CAAC,EAAE;YACX,GAAG,CAAC,KAAK,CAAC,EAAE;gBACV,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,OAAO,KAAK,CAAA;gBACd,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACjB,OAAO,EAAE,IAAI,EAAE,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAC,CAAA;AACL,CAAC"}