@omega.js/desktop 0.52.0 → 0.53.0

package/docs/windows.md

@@ -1,6 +1,6 @@
 # Windows
 
-**Lazy named-window registry.** @omega.js/desktop does NOT auto-create any window. Your `main.js` calls `manager.windows.create('main', { show: !startup.isLaunchHidden() })` from inside `manager.initialize().then(() => { ... })`. Always create `main` — its presence in the registry is what lets @omega.js/desktop's `app.on('activate')` (macOS dock click) and `app.on('second-instance')` (win/linux re-launch) handlers surface UI when the user double-clicks the running app. In hidden launches, pass `show: false` to keep the window invisible until something explicitly calls `windows.show('main')`. Use the registry for the common case (named, persistent, integrated windows). For one-off windows (a toast, a print preview), use `new BrowserWindow()` directly — `window-manager` doesn't get in the way.
+**Lazy named-window registry.** @omega.js/desktop does NOT auto-create any window. Your `main.js` calls `omega.windows.create('main', { show: !startup.isLaunchHidden() })` from inside `omega.initialize().then(() => { ... })`. Always create `main`: its presence in the registry is what lets @omega.js/desktop's `app.on('activate')` (macOS dock click) and `app.on('second-instance')` (win/linux re-launch) handlers surface UI when the user double-clicks the running app. In hidden launches, pass `show: false` to keep the window invisible until something explicitly calls `windows.show('main')`. Use the registry for the common case (named, persistent, integrated windows). For one-off windows (a toast, a print preview), use `new BrowserWindow()` directly, `window-manager` doesn't get in the way.
 
 ## Re-surface on user re-launch
 
@@ -14,20 +14,20 @@ Both handlers are no-ops if `main` isn't in the registry. So consumers who genui
 ## API
 
 ```js
-await manager.windows.create('main', overrides?)        // canonical entry point
-await manager.windows.createNamed('main', mgr, opts?)   // identical; .create() is sugar
-manager.windows.get('main')                              // BrowserWindow | null
-manager.windows.show('main')                             // show + focus + auto app.dock.show()
-manager.windows.hide('main')
-manager.windows.close('main')                            // force-close (bypasses hideOnClose)
-manager.windows.list()                                   // string[] of currently-open names
+await omega.windows.create('main', overrides?)        // canonical entry point
+await omega.windows.createNamed('main', mgr, opts?)   // identical; .create() is sugar
+omega.windows.get('main')                              // BrowserWindow | null
+omega.windows.show('main')                             // show + focus + auto app.dock.show()
+omega.windows.hide('main')
+omega.windows.close('main')                            // force-close (bypasses hideOnClose)
+omega.windows.list()                                   // string[] of currently-open names
 ```
 
 `create()` is single-instance: a second call with the same name returns the existing window and focuses it (no double-create).
 
 ## Defaults
 
-No JSON config required. @omega.js/desktop bakes in sensible defaults so `manager.windows.create('main')` "just works":
+No JSON config required. @omega.js/desktop bakes in sensible defaults so `omega.windows.create('main')` "just works":
 
 | Window | Defaults |
 |---|---|
@@ -37,8 +37,8 @@ No JSON config required. @omega.js/desktop bakes in sensible defaults so `manage
 Override at the call site:
 
 ```js
-manager.windows.create('main',     { width: 1280, height: 800 });
-manager.windows.create('settings', { width: 600,  height: 480 });
+omega.windows.create('main',     { width: 1280, height: 800 });
+omega.windows.create('settings', { width: 600,  height: 480 });
 ```
 
 ## Config (optional)
@@ -60,7 +60,7 @@ Per-window keys:
 | `view` | `main` | `<name>` | Folder under `src/views/`. Loads `dist/views/<view>/index.html`. |
 | `width` / `height` | 1024 / 720 | 800 / 600 | Initial size (overridden by saved bounds if `persistBounds: true`). |
 | `minWidth` / `minHeight` | 400 / 300 | 400 / 300 | |
-| `show` | `true` | `true` | Auto-show on `ready-to-show`. `false` keeps the window hidden until `manager.windows.show()`. |
+| `show` | `true` | `true` | Auto-show on `ready-to-show`. `false` keeps the window hidden until `omega.windows.show()`. |
 | `hideOnClose` | `true` | `false` | Discord-style: X click hides instead of closes. See "Hide-on-close" below. |
 | `title` | `app.productName` | `app.productName` | Window title. |
 | `backgroundColor` | `#ffffff` | `#ffffff` | Background color before the page loads. |
@@ -96,15 +96,15 @@ The `main` window's X button **hides instead of closes** by default. Real quit o
 - Menu Quit (`main/quit` on mac, `file/quit` on win/linux)
 - Tray Quit (`quit` item)
 - Auto-updater install (`autoUpdater.installNow()`)
-- Programmatic `manager.quit({ force: true })`
+- Programmatic `omega.quit({ force: true })`
 
 The window-manager close handler checks three flags before deciding to swallow vs let through:
 
 | Flag | Set by | Means |
 |---|---|---|
-| `manager._allowQuit` | `manager.quit({ force: true })`, `autoUpdater.installNow()` | Programmatic force — let the close go through. |
-| `manager._isQuitting` | `app.on('before-quit')` (every quit path Electron knows about) | App is quitting — let close events flow naturally. |
-| `win._emForceClose` | `manager.windows.close(name)` | Per-window override. |
+| `omega._allowQuit` | `omega.quit({ force: true })`, `autoUpdater.installNow()` | Programmatic force: let the close go through. |
+| `omega._isQuitting` | `app.on('before-quit')` (every quit path Electron knows about) | App is quitting: let close events flow naturally. |
+| `win._emForceClose` | `omega.windows.close(name)` | Per-window override. |
 
 Other named windows default to `hideOnClose: false` (X actually closes). Override per window via config or call-site overrides.
 
@@ -121,27 +121,27 @@ Every named window's position and size persist to storage on resize / move / max
 
 ## macOS dock auto-show
 
-When `LSUIElement: true` is baked at build time (`startup.mode: 'hidden'`), the app launches with **no dock icon, no Cmd+Tab, no taskbar**. The first time `manager.windows.create()` or `manager.windows.show()` runs, @omega.js/desktop calls `app.dock.show()` automatically — the dock icon appears alongside the window.
+When `LSUIElement: true` is baked at build time (`startup.mode: 'hidden'`), the app launches with **no dock icon, no Cmd+Tab, no taskbar**. The first time `omega.windows.create()` or `omega.windows.show()` runs, @omega.js/desktop calls `app.dock.show()` automatically: the dock icon appears alongside the window.
 
-**And the inverse**: for `startup.mode: 'hidden'` apps, when the LAST visible named window hides (hide-on-close X, `windows.hide()`, any consumer `win.hide()`), @omega.js/desktop calls `app.dock.hide()` again — the app returns to its fully-invisible posture, dock and UI appearing and vanishing together. Normal-mode apps keep their dock icon for life; quit paths are untouched (`manager._isQuitting` guard).
+**And the inverse**: for `startup.mode: 'hidden'` apps, when the LAST visible named window hides (hide-on-close X, `windows.hide()`, any consumer `win.hide()`), @omega.js/desktop calls `app.dock.hide()` again: the app returns to its fully-invisible posture, dock and UI appearing and vanishing together. Normal-mode apps keep their dock icon for life; quit paths are untouched (`omega._isQuitting` guard).
 
 This means agent / menubar apps can stay completely invisible until the user explicitly asks for UI:
 
 ```js
-manager.initialize().then(() => {
+omega.initialize().then(() => {
   // Don't call windows.create() here — app stays invisible.
   // Surface UI later when something warrants it:
-  manager.tray.update('open', { click: () => manager.windows.create('main') });
+  omega.tray.update('open', { click: () => omega.windows.create('main') });
 });
 ```
 
 ## Auto-attach context-menu
 
-Every window created via `manager.windows.create()` is automatically wired up with the consumer's `src/integrations/context-menu/index.js` (see [context-menu.md](context-menu.md)). Idempotent per webContents (uses a WeakSet). For windows you create directly with `new BrowserWindow()`, call `manager.contextMenu.attach(win.webContents)` manually.
+Every window created via `omega.windows.create()` is automatically wired up with the consumer's `src/integrations/context-menu/index.js` (see [context-menu.md](context-menu.md)). Idempotent per webContents (uses a WeakSet). For windows you create directly with `new BrowserWindow()`, call `omega.contextMenu.attach(win.webContents)` manually.
 
 ## Testing mode: stealth surfacing
 
-When `manager.isTesting()` (i.e. under `npx omega test`), every surfacing path in this lib — `ready-to-show`, `windows.show()`, the create-dedup focus — goes **stealth** instead of `win.show()`: `_surface()` applies the shared recipe from `src/utils/stealth-window.js` and surfaces via `showInactive()`, with no `win.focus()`/dock surfacing. **The full stealth story lives in [test-framework.md](test-framework.md) (SSOT)** — the recipe and why it's not `hide()`/`minimize()`, the raw-window `browser-window-created` hook, `webContents.focus()` suppression, macOS app-level activation suppression, and the **`OMEGA_TEST_SHOW=1`** opt-out. Covered by `suites/main/stealth-window.test.js`.
+When `omega.isTesting()` (i.e. under `npx omega test`), every surfacing path in this lib (`ready-to-show`, `windows.show()`, the create-dedup focus) goes **stealth** instead of `win.show()`: `_surface()` applies the shared recipe from `src/utils/stealth-window.js` and surfaces via `showInactive()`, with no `win.focus()`/dock surfacing. **The full stealth story lives in [test-framework.md](test-framework.md) (SSOT)**: the recipe and why it's not `hide()`/`minimize()`, the raw-window `browser-window-created` hook, `webContents.focus()` suppression, macOS app-level activation suppression, and the **`OMEGA_TEST_SHOW=1`** opt-out. Covered by `suites/main/stealth-window.test.js`.
 
 ## Platform behavior
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omega.js/desktop",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "description": "OMEGA desktop framework — build, test, and package Electron apps for macOS, Windows, and Linux",
   "private": false,
   "publishConfig": {
@@ -23,7 +23,6 @@
     "./lib/context-menu": "./dist/lib/context-menu.js",
     "./lib/deep-link": "./dist/lib/deep-link.js",
     "./lib/ipc": "./dist/lib/ipc.js",
-    "./lib/logger": "./dist/lib/logger.js",
     "./lib/logger-lite": "./dist/lib/logger-lite.js",
     "./lib/menu": "./dist/lib/menu.js",
     "./lib/protocol": "./dist/lib/protocol.js",
@@ -33,7 +32,7 @@
     "./lib/storage": "./dist/lib/storage.js",
     "./lib/templating": "./dist/lib/templating.js",
     "./lib/tray": "./dist/lib/tray.js",
-    "./lib/client-bridge": "./dist/lib/client-bridge.js",
+    "./lib/auth": "./dist/lib/auth.js",
     "./lib/window-manager": "./dist/lib/window-manager.js",
     "./cli": "./dist/cli-run.js",
     "./ensure-target": "./dist/commands/lib/ensure-target.js",
@@ -155,7 +154,7 @@
     "@fortawesome/fontawesome-free": "^7.3.0",
     "@inquirer/prompts": "^8.5.2",
     "@octokit/rest": "^22.0.1",
-    "@omega.js/client": "0.52.0",
+    "@omega.js/client": "0.53.0",
     "@popperjs/core": "^2.11.8",
     "@sentry/electron": "^7.13.0",
     "chalk": "^5.6.2",

package/dist/lib/client-bridge.js

@@ -1,374 +0,0 @@
-// Client bridge — main-process Firebase Auth, source of truth for renderers.
-//
-// This is @omega.js/desktop's analogue of BXM's background-service-worker auth role. The pattern:
-//
-//   1. Main runs its own Firebase Auth instance and is the source of truth.
-//   2. When a deep-link auth/token arrives, main calls signInWithCustomToken with that token,
-//      then BROADCASTS the token to all renderer windows so their @omega.js/client Firebase
-//      instances can sign in with the SAME token.
-//   3. On every renderer load, the renderer asks main "I'm at UID X (or null)" via the
-//      desktop:auth:sync-request IPC. Main compares with its own UID and either does nothing,
-//      tells the renderer to sign out, or fetches a fresh custom token from /omega
-//      and sends it to the renderer.
-//   4. Sign-out: any renderer can request sign-out via desktop:auth:sign-out. Main signs out
-//      its own Firebase + broadcasts desktop:auth:sign-out to all renderers.
-//
-// Firebase is BUNDLED by esbuild from @omega.js/desktop's module context (@omega.js/client owns it in @omega.js/desktop's
-// tree). If loading fails, the bridge stays in no-op mode and logs the reason.
-
-const LoggerLite = require('./logger-lite.js');
-const authPersistence = require('./auth-persistence.js');
-const { requiredPort } = require('../utils/url-helpers.js');
-
-const logger = new LoggerLite('client-bridge');
-
-const FIREBASE_APP_NAME = 'omega-auth';
-
-const bridge = {
-  _initialized:    false,
-  _manager:        null,
-  _firebase:       null,    // firebase/app
-  _firebaseAuth:   null,    // auth instance
-  _firebaseModule: null,    // firebase/auth namespace (signInWithCustomToken, signOut, ...)
-  _stateSubs:      new Set(), // main-side subscribers fn(user)
-  _ipcRegistered:  false,
-  _resolvedPlan:   null,    // renderer-resolved subscription { plan, active, trialing, cancelling }
-  _resolvedRoles:  null,    // renderer-resolved account roles { admin, betaTester, ... }
-
-  async initialize(manager) {
-    if (bridge._initialized) {
-      return;
-    }
-
-    bridge._manager = manager;
-
-    // Try to load firebase. If it's not installed, run in no-op mode.
-    const ok = await bridge._tryLoadFirebase();
-    if (!ok) {
-      logger.warn('firebase not installed — client-bridge running in no-op mode. `npm i firebase` to enable auth.');
-    }
-
-    bridge._registerIpc();
-
-    if (ok) {
-      // Boot Firebase Auth. With a persistence strategy active (lib/auth-persistence.js,
-      // default safeStorage), the session survives restarts — the restore lands async
-      // via onAuthStateChanged shortly after boot.
-      try {
-        const strategy = await authPersistence.resolve(manager);
-        bridge._firebaseAuth = bridge._getFirebaseAuth(strategy);
-        // onAuthStateChanged is the source of truth listener.
-        bridge._firebaseModule.onAuthStateChanged(bridge._firebaseAuth, (user) => {
-          bridge._handleAuthStateChange(user);
-        });
-        logger.log(`initialize — firebase loaded (persistence: ${strategy ? strategy.name : 'in-memory'})`);
-      } catch (e) {
-        logger.error('firebase init failed:', e.message);
-      }
-    }
-
-    bridge._initialized = true;
-  },
-
-  // Load firebase. Returns true on success. BUNDLED by esbuild from @omega.js/desktop's module context
-  // (@omega.js/client owns firebase in @omega.js/desktop's tree) — same treatment as json5 in main.js. In the
-  // webpack era it was a webpackIgnore'd runtime import(), which resolves relative to the CONSUMER's
-  // main.bundle.js: that walk never reaches @omega.js/desktop's node_modules when @omega.js/desktop is symlinked
-  // (`mgr install dev`) and depends on npm hoisting when installed — every dev app silently
-  // ran the bridge in no-op mode. Interop guards handle both namespace shapes (json5 precedent).
-  async _tryLoadFirebase() {
-    try {
-      const appMod  = require('firebase/app');
-      const authMod = require('firebase/auth');
-
-      bridge._firebase       = appMod.initializeApp ? appMod : (appMod.default || appMod);
-      bridge._firebaseModule = authMod.getAuth      ? authMod : (authMod.default || authMod);
-      return true;
-    } catch (e) {
-      logger.warn('firebase load failed:', e.message);
-      return false;
-    }
-  },
-
-  _getFirebaseAuth(strategy) {
-    if (bridge._firebaseAuth) return bridge._firebaseAuth;
-
-    const firebaseConfig = bridge._manager.config.cloud?.config;
-    if (!firebaseConfig || !Object.keys(firebaseConfig).length) {
-      throw new Error('cloud.config is empty — cannot initialize auth.');
-    }
-
-    const { initializeApp, getApp } = bridge._firebase;
-    const { getAuth, initializeAuth } = bridge._firebaseModule;
-
-    let app;
-    try { app = getApp(FIREBASE_APP_NAME); }
-    catch (e) { app = initializeApp(firebaseConfig, FIREBASE_APP_NAME); }
-
-    // With a storage strategy, boot auth on OUR persistence (session survives
-    // restarts); without one, firebase's Node default (in-memory) applies.
-    if (strategy && initializeAuth) {
-      bridge._firebaseAuth = initializeAuth(app, {
-        persistence: [authPersistence.buildFirebasePersistence(strategy)],
-      });
-    } else {
-      bridge._firebaseAuth = getAuth(app);
-    }
-
-    // A TESTING run talks to the LOCAL stack, never real auth — the same move
-    // getApiUrl() makes when it maps testing to localhost, and the same one
-    // @omega.js/extension's background SW makes for its emulator runs. Only an
-    // OMEGA_ENVIRONMENT=testing run reaches here; dev and production are untouched.
-    if (bridge._manager.isTesting()) {
-      const { connectAuthEmulator } = bridge._firebaseModule;
-      const port = bridge._authEmulatorPort();
-      logger.log(`testing run — connecting auth to the emulator on :${port}`);
-      connectAuthEmulator(bridge._firebaseAuth, `http://localhost:${port}`, { disableWarnings: true });
-    }
-
-    return bridge._firebaseAuth;
-  },
-
-  // The auth emulator's port, on the same chain getApiUrl() walks: the
-  // resolved-port env channel (N7), then the `dev.ports` map the bundle baked
-  // into OMEGA_BUILD_JSON
-  // ([#745](https://github.com/Omega-JS-Stack/omega/issues/745)). The classic
-  // 9099 used to sit under those two as a last resort; it is gone (#834),
-  // because nothing identity-checks what answers on it and a neighbouring
-  // project's emulator reads as an auth mystery rather than a port problem.
-  _authEmulatorPort() {
-    return requiredPort(bridge._manager, 'OMEGA_AUTH_PORT', 'auth');
-  },
-
-  _registerIpc() {
-    if (bridge._ipcRegistered) return;
-    const ipc = bridge._manager.ipc;
-
-    // Renderer asks main: "I'm at UID X (or null). Are we in sync?"
-    ipc.handle('desktop:auth:sync-request', async ({ contextUid }) => {
-      return bridge._handleSyncRequest(contextUid);
-    });
-
-    // Renderer asks main to sign out.
-    ipc.handle('desktop:auth:sign-out', async () => {
-      return bridge._handleSignOut();
-    });
-
-    // Renderer asks main for the current user (uid + email + displayName, no token).
-    ipc.handle('desktop:auth:get-user', () => {
-      const u = bridge._firebaseAuth?.currentUser;
-      return u ? bridge._snapshotUser(u) : null;
-    });
-
-    // Renderer pushes its @omega.js/client account resolution (auth().listen() settled:
-    // Firestore account fetched, subscription resolved). Main can't run Firestore,
-    // so this is how main-side plan gates learn the REAL plan — BXM's "browser
-    // contexts resolve, authority caches" split. UID-guarded: a stale push from a
-    // renderer that hasn't synced yet is dropped.
-    ipc.handle('desktop:auth:account-resolved', ({ uid, resolved, roles } = {}) => {
-      const mainUid = bridge._firebaseAuth?.currentUser?.uid || null;
-      if (!uid || uid !== mainUid) {
-        return { accepted: false };
-      }
-
-      const changed = JSON.stringify(resolved) !== JSON.stringify(bridge._resolvedPlan)
-        || JSON.stringify(roles || null) !== JSON.stringify(bridge._resolvedRoles);
-      bridge._resolvedPlan  = resolved || null;
-      bridge._resolvedRoles = roles || null;
-
-      if (changed) {
-        logger.log(`account resolved — plan=${resolved?.plan || '(none)'} active=${!!resolved?.active}`);
-        bridge._manager.ipc.broadcast('desktop:auth:plan-changed', { resolved: bridge._resolvedPlan, roles: bridge._resolvedRoles });
-        // Main-side subscribers see the same user snapshot again with plan now known.
-        const u = bridge._firebaseAuth?.currentUser;
-        bridge._stateSubs.forEach((fn) => {
-          try { fn(u ? bridge._snapshotUser(u) : null); } catch (e) { logger.error('onAuthChange subscriber threw:', e); }
-        });
-      }
-      return { accepted: true };
-    });
-
-    bridge._ipcRegistered = true;
-  },
-
-  _handleAuthStateChange(user) {
-    logger.log(`auth state → ${user ? user.email : 'signed out'}`);
-
-    // Sign-out (or a different user signing in) invalidates the cached resolution —
-    // renderers re-resolve and push fresh via desktop:auth:account-resolved.
-    if (!user) {
-      bridge._resolvedPlan = null;
-      bridge._resolvedRoles = null;
-    }
-
-    // Notify any main-side subscribers (consumer code that called manager.omega.onAuthChange).
-    const snap = user ? bridge._snapshotUser(user) : null;
-    bridge._stateSubs.forEach((fn) => {
-      try { fn(snap); } catch (e) { logger.error('onAuthChange subscriber threw:', e); }
-    });
-
-    // Tell renderers about the change so they can update UI / refresh menu items.
-    bridge._manager.ipc.broadcast('desktop:auth:state-changed', snap);
-
-    // Attribute Sentry events to the signed-in user (or clear on sign-out). When
-    // sentry is disabled (no DSN, dev mode, etc.) setUser is a documented no-op.
-    bridge._manager.sentry.setUser(snap);
-  },
-
-  // BXM's syncAuth pattern, ported to Electron.
-  async _handleSyncRequest(contextUid) {
-    if (!bridge._firebaseAuth) {
-      return { needsSync: false, reason: 'firebase-not-loaded' };
-    }
-
-    const bgUser = bridge._firebaseAuth.currentUser;
-    const bgUid = bgUser?.uid || null;
-
-    // Already in sync.
-    if (contextUid === bgUid) {
-      return { needsSync: false };
-    }
-
-    // Renderer signed in but main signed out → tell renderer to sign out.
-    if (!bgUser && contextUid) {
-      return { needsSync: true, signOut: true };
-    }
-
-    // Main signed in, renderer not (or different user) → fetch a fresh custom token + send.
-    try {
-      const token = await bridge._fetchCustomToken(bgUser);
-      return {
-        needsSync: true,
-        customToken: token,
-        user: bridge._snapshotUser(bgUser),
-      };
-    } catch (e) {
-      logger.error('sync-request: failed to fetch custom token:', e.message);
-      return { needsSync: false, error: e.message };
-    }
-  },
-
-  async _handleSignOut() {
-    try {
-      if (bridge._firebaseAuth?.currentUser) {
-        await bridge._firebaseModule.signOut(bridge._firebaseAuth);
-      }
-      bridge._manager.ipc.broadcast('desktop:auth:sign-out', {});
-      return { success: true };
-    } catch (e) {
-      logger.error('sign-out failed:', e.message);
-      return { success: false, error: e.message };
-    }
-  },
-
-  // Public API ──────────────────────────────────────────────────────────────────
-
-  // Called by lib/deep-link's auth/token built-in.
-  async handleAuthToken(token) {
-    if (!bridge._firebaseAuth) {
-      logger.warn('handleAuthToken called but firebase not loaded — ignoring.');
-      return { success: false, reason: 'firebase-not-loaded' };
-    }
-    if (!token) {
-      logger.warn('handleAuthToken called with no token — ignoring.');
-      return { success: false, reason: 'no-token' };
-    }
-
-    try {
-      const cred = await bridge._firebaseModule.signInWithCustomToken(bridge._firebaseAuth, token);
-      logger.log(`signed in: ${cred.user.email || cred.user.uid}`);
-
-      // Broadcast the token to renderers so they can sign in with the SAME token.
-      // Tokens expire in 1 hour and aren't stored.
-      bridge._manager.ipc.broadcast('desktop:auth:sign-in-with-token', { token });
-
-      return { success: true, user: bridge._snapshotUser(cred.user) };
-    } catch (e) {
-      logger.error('signInWithCustomToken failed:', e.message);
-      return { success: false, error: e.message };
-    }
-  },
-
-  // Subscribe to auth state changes on the main side (e.g. for menu/tray refresh).
-  onAuthChange(fn) {
-    bridge._stateSubs.add(fn);
-    return () => bridge._stateSubs.delete(fn);
-  },
-
-  // Snapshot of the current user (sync), or null.
-  getCurrentUser() {
-    const u = bridge._firebaseAuth?.currentUser;
-    return u ? bridge._snapshotUser(u) : null;
-  },
-
-  // The renderer-resolved subscription ({ plan, active, trialing, cancelling }) or null
-  // while no renderer has resolved yet. THE main-side plan source — consumer plan gates
-  // read this (@omega.js/client's resolveSubscription output, pushed via desktop:auth:account-resolved).
-  getResolvedPlan() {
-    return bridge._resolvedPlan;
-  },
-
-  // The renderer-resolved account roles ({ admin, betaTester, ... }) or null.
-  getResolvedRoles() {
-    return bridge._resolvedRoles;
-  },
-
-  // Fresh Firebase ID token for the signed-in user (async), or null when
-  // signed out / Firebase absent. For consumer main code calling
-  // authenticated backend routes (`Authorization: Bearer <token>`).
-  async getIdToken() {
-    const u = bridge._firebaseAuth?.currentUser;
-    return u ? u.getIdToken() : null;
-  },
-
-  // Force sign-out from main code.
-  async signOut() {
-    return bridge._handleSignOut();
-  },
-
-  // ─── Internals ────────────────────────────────────────────────────────────
-
-  _snapshotUser(user) {
-    return {
-      uid:           user.uid,
-      email:         user.email,
-      displayName:   user.displayName,
-      photoURL:      user.photoURL,
-      emailVerified: user.emailVerified,
-    };
-  },
-
-  // Fetch a fresh custom token for the currently-signed-in user via the shared
-  // @omega.js/client request layer. Mirrors BXM: POST <apiUrl>/omega/user/token —
-  // the route defaults uid to the authenticated caller and responds { token }
-  // at the top level.
-  async _fetchCustomToken(user) {
-    const { createRequest } = require('@omega.js/client/modules/request.js');
-
-    const request = createRequest({
-      getApiUrl: () => bridge._manager.getApiUrl(),
-      getIdToken: (force) => user.getIdToken(force),
-    });
-
-    const data = await request('/omega/user/token', { method: 'POST', body: {} });
-
-    const token = data?.token;
-    if (!token) {
-      throw new Error('@omega.js/backend response missing token.');
-    }
-    return token;
-  },
-
-  // Tear-down used by tests — wipes state but keeps registered IPC handlers
-  // (they're idempotent via `ipc.handle` duplicate-detection).
-  async _resetForTests() {
-    try {
-      if (bridge._firebaseAuth?.currentUser && bridge._firebaseModule?.signOut) {
-        await bridge._firebaseModule.signOut(bridge._firebaseAuth);
-      }
-    } catch (e) { /* ignore */ }
-    bridge._stateSubs.clear();
-  },
-};
-
-module.exports = bridge;

package/dist/lib/logger.js

@@ -1,4 +0,0 @@
-// Shared devkit module — vendored into dist/vendor/devkit at prepare time by the
-// preparePackage `after` hook. This shim keeps the framework's internal require
-// paths stable while the implementation lives in @omega.js/devkit.
-module.exports = require('../vendor/devkit/logger.js');