@omg-dev/cloud 0.6.41

package/dist/control-plane.js

@@ -0,0 +1,163 @@
+/**
+ * The account's machines, as the control plane reports them.
+ *
+ * Every dashboard read goes through `POST <controlPlane>/api/computer/<name>`
+ * with the account JWT as a bearer. The names are the control plane's own
+ * function names, so a new one needs no client change beyond a call.
+ */
+import { CLOUD_BINDING_ID, resolveCloudEndpoints } from "./config";
+import { sharedBindingId, sharedComputerMachineIdentity, sharedComputerOwnerLabel, } from "./shared-binding";
+export function toSharedBinding(computer) {
+    const ownerName = computer.name?.trim();
+    return {
+        id: sharedBindingId(computer.ownerUserId, computer.bindingId),
+        online: computer.online ?? true,
+        lastSeenAt: null,
+        defaultFolder: computer.defaultFolder ?? computer.binding?.defaultFolder ?? null,
+        computerUrl: null,
+        shared: true,
+        ownerUserId: computer.ownerUserId,
+        ownerBindingId: computer.bindingId,
+        ownerLabel: sharedComputerOwnerLabel(computer),
+        ownerName: ownerName && !ownerName.includes("@") ? ownerName : undefined,
+        email: computer.email,
+        machineLabel: sharedComputerMachineIdentity(computer),
+    };
+}
+const BLOCKED_CLOUD_STATUSES = new Set(["upgrade_required", "recycled"]);
+/** A cloud Computer that the session proxy would answer with a permanent 425. */
+export function isCloudComputerBlocked(cloud) {
+    return BLOCKED_CLOUD_STATUSES.has(cloud?.status ?? "");
+}
+export function createControlPlaneClient(options) {
+    const endpoints = resolveCloudEndpoints(options.endpoints);
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    async function call(name, body = {}) {
+        const token = await options.getAuthToken();
+        if (!token)
+            throw new Error("Please sign in again.");
+        const response = await fetchImpl(`${endpoints.controlPlaneOrigin}/api/computer/${name}`, {
+            method: "POST",
+            headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+        });
+        const text = await response.text().catch(() => "");
+        let data = {};
+        try {
+            data = text ? JSON.parse(text) : {};
+        }
+        catch {
+            data = {};
+        }
+        if (!response.ok) {
+            throw new Error(data?.error ?? `${name} failed (${response.status})`);
+        }
+        return data;
+    }
+    const listBindings = async () => (await call("listComputerBindings")).bindings ?? [];
+    const listSharedComputers = async () => ((await call("listSharedComputers")).computers ?? []).map(toSharedBinding);
+    const getCloudComputer = async () => (await call("getCloudComputer")) ?? null;
+    return {
+        call,
+        listBindings,
+        listSharedComputers,
+        getCloudComputer,
+        getOrProvisionCloudComputer: async () => (await call("getOrProvisionCloudComputer")) ?? null,
+        setComputerPreference: async (value) => {
+            await call("setComputerPreference", { value });
+        },
+        async listMachines() {
+            const [bindings, cloud, shared] = await Promise.allSettled([
+                listBindings(),
+                getCloudComputer(),
+                listSharedComputers(),
+            ]);
+            const error = bindings.status === "rejected" && cloud.status === "rejected"
+                ? bindings.reason instanceof Error
+                    ? bindings.reason.message
+                    : "Couldn't load your computers."
+                : null;
+            return {
+                bindings: bindings.status === "fulfilled" ? bindings.value : [],
+                cloud: cloud.status === "fulfilled" ? cloud.value : null,
+                sharedComputers: shared.status === "fulfilled" ? shared.value : [],
+                error,
+            };
+        },
+    };
+}
+/**
+ * Auto-select when there is no real choice to make. An account with exactly
+ * one online machine should not be asked which one; an account whose cloud
+ * Computer is plan-blocked should not have it silently chosen either.
+ * Returns null when a person has to choose.
+ */
+export function autoSelectBinding(list) {
+    const online = list.bindings.find((b) => b.online);
+    if (online)
+        return online.id;
+    if (list.cloud && !isCloudComputerBlocked(list.cloud) && list.bindings.length === 0) {
+        return CLOUD_BINDING_ID;
+    }
+    return null;
+}
+/**
+ * A machine's own name: what to call the COMPUTER, not the work it is pointed
+ * at. The hostname is the machine's real identity, so it goes first. The
+ * folder stays as a fallback; a folder name beats a truncated uuid.
+ */
+export function bindingLabel(binding) {
+    if (binding.computerUrl) {
+        try {
+            const host = new URL(binding.computerUrl).hostname.split(".")[0];
+            if (host && host !== "localhost" && !/^\d+$/.test(host))
+                return host;
+        }
+        catch {
+            /* fall through */
+        }
+    }
+    const boxId = binding.boxId?.trim();
+    if (boxId && !UUID_PATTERN.test(boxId))
+        return boxId;
+    const folder = binding.defaultFolder?.split("/").filter(Boolean).pop();
+    if (folder)
+        return folder;
+    return `${binding.id.slice(0, 8)}…`;
+}
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+/** Turn a cloud status code into something a person can act on. */
+export function cloudStatusLabel(status, blockedReason) {
+    switch (status) {
+        case "upgrade_required":
+            return blockedReason === "plan_downgraded"
+                ? "Your plan no longer covers this computer"
+                : "Included computer time is used up";
+        case "provisioning":
+            return "Setting up…";
+        case "paused":
+            return "Paused";
+        case "recycled":
+            return "Removed";
+        case "ready":
+        case "running":
+        case "live":
+            return "Ready";
+        default:
+            return status ? status.replace(/_/g, " ") : "Unknown";
+    }
+}
+/** Machine spec line, e.g. "4 vCPU · 8 GB RAM · 64 GB disk". */
+export function machineSpec(machine) {
+    if (!machine)
+        return null;
+    const parts = [];
+    if (machine.vcpus)
+        parts.push(`${machine.vcpus} vCPU`);
+    if (machine.memoryMib)
+        parts.push(`${Math.round(machine.memoryMib / 1024)} GB RAM`);
+    if (machine.diskGib)
+        parts.push(`${machine.diskGib} GB disk`);
+    return parts.length ? parts.join(" · ") : null;
+}
+//# sourceMappingURL=control-plane.js.map

package/dist/control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.js","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAA0D,MAAM,UAAU,CAAC;AAC3H,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,wBAAwB,GAEzB,MAAM,kBAAkB,CAAC;AAiC1B,MAAM,UAAU,eAAe,CAAC,QAA4B;IAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO;QACL,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;QAC7D,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI;QAC/B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI;QAChF,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,cAAc,EAAE,QAAQ,CAAC,SAAS;QAClC,UAAU,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAC9C,SAAS,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACxE,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,YAAY,EAAE,6BAA6B,CAAC,QAAQ,CAAC;KACtD,CAAC;AACJ,CAAC;AAsBD,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC;AAE9F,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,KAAuC;IAC5E,OAAO,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAoCD,MAAM,UAAU,wBAAwB,CAAC,OAA4B;IACnE,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAEpD,KAAK,UAAU,IAAI,CAAI,IAAY,EAAE,IAAI,GAAY,EAAE;QACrD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,SAAS,CAAC,kBAAkB,iBAAiB,IAAI,EAAE,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,GAAY,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAE,IAA2B,EAAE,KAAK,IAAI,GAAG,IAAI,YAAY,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE,CAC9B,CAAC,MAAM,IAAI,CAAmC,sBAAsB,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxF,MAAM,mBAAmB,GAAG,KAAK,IAAI,EAAE,CACrC,CAAC,CAAC,MAAM,IAAI,CAAuC,qBAAqB,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAC7F,eAAe,CAChB,CAAC;IACJ,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAuB,kBAAkB,CAAC,CAAC,IAAI,IAAI,CAAC;IAEpG,OAAO;QACL,IAAI;QACJ,YAAY;QACZ,mBAAmB;QACnB,gBAAgB;QAChB,2BAA2B,EAAE,KAAK,IAAI,EAAE,CACtC,CAAC,MAAM,IAAI,CAAuB,6BAA6B,CAAC,CAAC,IAAI,IAAI;QAC3E,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACzD,YAAY,EAAE;gBACd,gBAAgB,EAAE;gBAClB,mBAAmB,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;gBAC3D,CAAC,CAAC,QAAQ,CAAC,MAAM,YAAY,KAAK;oBAChC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;oBACzB,CAAC,CAAC,+BAA+B;gBACnC,CAAC,CAAC,IAAI,CAAC;YACX,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC/D,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACxD,eAAe,EAAE,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAClE,KAAK;aACN,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA6C;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAK5B;IACC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,IAAI,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,YAAY,GAChB,4EAA4E,CAAC;AAE/E,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,aAA6B;IAC7E,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,kBAAkB;YACrB,OAAO,aAAa,KAAK,iBAAiB;gBACxC,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,mCAAmC,CAAC;QAC1C,KAAK,cAAc;YACjB,OAAO,aAAa,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,SAAS,CAAC;QACnB,KAAK,OAAO,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,OAIpB;IACN,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,UAAU,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC"}

package/dist/grant.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Trade the account JWT for a signed, short-lived grant scoped to one machine.
+ *
+ * The session origin hands back a `cookie` field AND a Set-Cookie header. A
+ * browser gets the header for free; every client here uses the field as a
+ * bearer token, which the proxy's readSessionGrant() accepts precisely so
+ * non-browser clients do not have to care about cookie policy.
+ */
+import type { OmgGrant } from "@omg-dev/client";
+import { type CloudEndpoints, type FetchLike, type GetAuthToken } from "./config";
+export type ComputerGrantErrorCode = "unauthorized" | "forbidden" | "upgrade_required" | "unreachable" | "unavailable";
+export declare class ComputerGrantError extends Error {
+    readonly code: ComputerGrantErrorCode;
+    constructor(message: string, code?: ComputerGrantErrorCode);
+    /**
+     * A 403 is never transient: the mint's authorization check failed for this
+     * exact (owner, machine) pair, and retrying with the same account will 403
+     * forever. Readiness reads this to say "pick another machine" instead of
+     * "try again".
+     */
+    get forbidden(): boolean;
+}
+export interface GrantMinterOptions {
+    endpoints?: Partial<CloudEndpoints>;
+    getAuthToken: GetAuthToken;
+    fetch?: FetchLike;
+    now?: () => number;
+}
+export type MintSessionGrant = (bindingId: string) => Promise<OmgGrant>;
+/**
+ * `bindingId` may be the `shared:<ownerUserId>:<bindingId>` spelling. The
+ * mint endpoint only understands the raw pair, so decoding is this call's job.
+ */
+export declare function createGrantMinter(options: GrantMinterOptions): MintSessionGrant;
+//# sourceMappingURL=grant.d.ts.map

package/dist/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../src/grant.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAGlB,MAAM,MAAM,sBAAsB,GAC9B,cAAc,GACd,WAAW,GACX,kBAAkB,GAClB,aAAa,GACb,aAAa,CAAC;AAElB,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,YAAY,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,sBAAsC,EAIxE;IACD;;;;;OAKG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAExE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,gBAAgB,CAyE/E"}

package/dist/grant.js

@@ -0,0 +1,85 @@
+/**
+ * Trade the account JWT for a signed, short-lived grant scoped to one machine.
+ *
+ * The session origin hands back a `cookie` field AND a Set-Cookie header. A
+ * browser gets the header for free; every client here uses the field as a
+ * bearer token, which the proxy's readSessionGrant() accepts precisely so
+ * non-browser clients do not have to care about cookie policy.
+ */
+import { SESSION_AUTH_PATH, resolveCloudEndpoints, } from "./config";
+import { SHARED_REVOKED_DETAIL, isSharedBindingId, mintTargetForBinding } from "./shared-binding";
+export class ComputerGrantError extends Error {
+    code;
+    constructor(message, code = "unavailable") {
+        super(message);
+        this.name = "ComputerGrantError";
+        this.code = code;
+    }
+    /**
+     * A 403 is never transient: the mint's authorization check failed for this
+     * exact (owner, machine) pair, and retrying with the same account will 403
+     * forever. Readiness reads this to say "pick another machine" instead of
+     * "try again".
+     */
+    get forbidden() {
+        return this.code === "forbidden";
+    }
+}
+/**
+ * `bindingId` may be the `shared:<ownerUserId>:<bindingId>` spelling. The
+ * mint endpoint only understands the raw pair, so decoding is this call's job.
+ */
+export function createGrantMinter(options) {
+    const endpoints = resolveCloudEndpoints(options.endpoints);
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    const now = options.now ?? Date.now;
+    return async function mintSessionGrant(bindingId) {
+        const authToken = await options.getAuthToken();
+        if (!authToken)
+            throw new ComputerGrantError("Please sign in again.", "unauthorized");
+        let response;
+        try {
+            response = await fetchImpl(`${endpoints.sessionOrigin}${SESSION_AUTH_PATH}`, {
+                method: "POST",
+                credentials: "include",
+                headers: {
+                    Authorization: `Bearer ${authToken}`,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify(mintTargetForBinding(bindingId)),
+            });
+        }
+        catch {
+            throw new ComputerGrantError("Couldn't reach your Computer. Try again in a moment.", "unreachable");
+        }
+        if (response.status === 401) {
+            throw new ComputerGrantError("Please sign in again.", "unauthorized");
+        }
+        if (response.status === 403) {
+            throw new ComputerGrantError(isSharedBindingId(bindingId)
+                ? SHARED_REVOKED_DETAIL
+                : "This computer isn't available to your account anymore.", "forbidden");
+        }
+        // Billing wall: stop mint retries. Re-minting only spams session-auth.
+        if (response.status === 402) {
+            throw new ComputerGrantError("Your included computer time is used up.", "upgrade_required");
+        }
+        if (!response.ok) {
+            throw new ComputerGrantError("Couldn't open this Computer. Try again in a moment.", "unavailable");
+        }
+        const body = (await response.json().catch(() => null));
+        if (!body?.cookie) {
+            throw new ComputerGrantError("Your Computer is updating. Try again in a moment.");
+        }
+        // Relative lifetime wins: client and server clocks differ, and an absolute
+        // `exp` against a skewed clock either expires a fresh grant instantly or
+        // trusts a dead one. `exp` stays as the fallback for a server mid-rollout.
+        const expiresAt = typeof body.expiresInMs === "number"
+            ? now() + body.expiresInMs
+            : typeof body.exp === "number"
+                ? body.exp
+                : now();
+        return { token: body.cookie, expiresAt };
+    };
+}
+//# sourceMappingURL=grant.js.map

package/dist/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../src/grant.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GAItB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AASlG,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAyB;IACtC,YAAY,OAAe,EAAE,IAAI,GAA2B,aAAa;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IACD;;;;;OAKG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;IACnC,CAAC;CACF;AAWD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEpC,OAAO,KAAK,UAAU,gBAAgB,CAAC,SAAS;QAC9C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;QAEtF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,SAAS,CAAC,aAAa,GAAG,iBAAiB,EAAE,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,SAAS,EAAE;oBACpC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,kBAAkB,CAC1B,sDAAsD,EACtD,aAAa,CACd,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,SAAS,CAAC;gBAC1B,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,wDAAwD,EAC5D,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAC1B,yCAAyC,EACzC,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAC1B,qDAAqD,EACrD,aAAa,CACd,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAI7C,CAAC;QACT,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;QACpF,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YAClC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW;YAC1B,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;gBAC5B,CAAC,CAAC,IAAI,CAAC,GAAG;gBACV,CAAC,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { AUTH_APP_ID, CLOUD_BINDING_ID, DEFAULT_CLOUD_ENDPOINTS, SESSION_AUTH_PATH, resolveCloudEndpoints, type CloudEndpoints, type FetchLike, type GetAuthToken, } from "./config";
+export { OmgAuthError, SignOutFailedError, createCloudAuth, type CloudAuth, type CloudAuthOptions, type SignedInUser, type SocialProvider, } from "./auth";
+export * from "./shared-binding";
+export { ComputerGrantError, createGrantMinter, type ComputerGrantErrorCode, type GrantMinterOptions, type MintSessionGrant, } from "./grant";
+export { createDirectTransport, createMachineTransports, type MachineTransports, type TransportCacheOptions, } from "./transports";
+export { probeReadiness, waitForReady, type BootstrapRoster, type ComputerReadiness, } from "./readiness";
+export { autoSelectBinding, bindingLabel, cloudStatusLabel, createControlPlaneClient, isCloudComputerBlocked, machineSpec, toSharedBinding, type CloudComputer, type CloudComputerStatus, type ComputerBinding, type ControlPlaneClient, type ControlPlaneOptions, type MachineList, type SharedComputerBinding, } from "./control-plane";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,YAAY,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,QAAQ,CAAC;AAChB,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,WAAW,EACX,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { AUTH_APP_ID, CLOUD_BINDING_ID, DEFAULT_CLOUD_ENDPOINTS, SESSION_AUTH_PATH, resolveCloudEndpoints, } from "./config";
+export { OmgAuthError, SignOutFailedError, createCloudAuth, } from "./auth";
+export * from "./shared-binding";
+export { ComputerGrantError, createGrantMinter, } from "./grant";
+export { createDirectTransport, createMachineTransports, } from "./transports";
+export { probeReadiness, waitForReady, } from "./readiness";
+export { autoSelectBinding, bindingLabel, cloudStatusLabel, createControlPlaneClient, isCloudComputerBlocked, machineSpec, toSharedBinding, } from "./control-plane";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,GAItB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAKhB,MAAM,QAAQ,CAAC;AAChB,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAIlB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,YAAY,GAGb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAQhB,MAAM,iBAAiB,CAAC"}

package/dist/readiness.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Is the Computer actually ready to answer, and if not, why?
+ *
+ * `GET /api/bootstrap` is the readiness authority for the whole surface. The
+ * status codes are not interchangeable and collapsing them into "error" is
+ * what turns a machine that is merely cold into a machine that looks broken.
+ *
+ * 425 in particular is not a failure. A reaped sandbox hibernates and wakes on
+ * connect; the proxy answers 425 while that is in flight and the only correct
+ * client behaviour is to wait and ask again.
+ */
+import type { OmgTransport } from "@omg-dev/client";
+export type BootstrapRoster = {
+    agents: {
+        key: string;
+        label: string;
+        visible?: boolean;
+        status?: {
+            configured?: boolean;
+            accountConnected?: boolean;
+        };
+    }[];
+    repos: {
+        name: string;
+        cwd: string;
+    }[];
+};
+export type ComputerReadiness = 
+/** The roster rides along: one fetch, one owner, no second source of truth. */
+{
+    status: "ready";
+    version?: string;
+    sessions: unknown[];
+    roster: BootstrapRoster;
+}
+/** Asked and not yet heard. Not "waking": that is something the machine says. */
+ | {
+    status: "connecting";
+}
+/** Cold sandbox resuming, the proxy said 425. Retry, do not show an error. */
+ | {
+    status: "waking";
+}
+/** Too many live agents for this plan (429) or this box's local cap. */
+ | {
+    status: "agent-limit";
+    message: string;
+}
+/** The runtime behind the proxy is down (502/503/504). */
+ | {
+    status: "unavailable";
+    message: string;
+}
+/** The mint 403'd. Needs a different machine, not a retry loop. */
+ | {
+    status: "unauthorized";
+    message: string;
+} | {
+    status: "error";
+    message: string;
+};
+export declare function probeReadiness(transport: OmgTransport): Promise<ComputerReadiness>;
+/**
+ * Wait out a wake. Bounded on purpose: a cold resume is sub-second and a cold
+ * provision is seconds, so a minute of 425s means something is wrong.
+ */
+export declare function waitForReady(transport: OmgTransport, { timeoutMs, intervalMs, onWaking, sleep, now, }?: {
+    timeoutMs?: number;
+    intervalMs?: number;
+    onWaking?: (attempt: number) => void;
+    sleep?: (ms: number) => Promise<void>;
+    now?: () => number;
+}): Promise<ComputerReadiness>;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAIpD,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,OAAO,CAAC;YAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KAC/D,EAAE,CAAC;IACJ,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,iBAAiB;AAC3B,+EAA+E;AAC7E;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE;AACrF,iFAAiF;GAC/E;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE;AAC1B,8EAA8E;GAC5E;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE;AACtB,wEAAwE;GACtE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,0DAA0D;GACxD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,mEAAmE;GACjE;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,wBAAsB,cAAc,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiDxF;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,YAAY,EACvB,EACE,SAAkB,EAClB,UAAkB,EAClB,QAAQ,EACR,KAA+E,EAC/E,GAAc,GACf,GAAE;IACD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACf,GACL,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}

package/dist/readiness.js

@@ -0,0 +1,82 @@
+/**
+ * Is the Computer actually ready to answer, and if not, why?
+ *
+ * `GET /api/bootstrap` is the readiness authority for the whole surface. The
+ * status codes are not interchangeable and collapsing them into "error" is
+ * what turns a machine that is merely cold into a machine that looks broken.
+ *
+ * 425 in particular is not a failure. A reaped sandbox hibernates and wakes on
+ * connect; the proxy answers 425 while that is in flight and the only correct
+ * client behaviour is to wait and ask again.
+ */
+import { ComputerGrantError } from "./grant";
+export async function probeReadiness(transport) {
+    let response;
+    try {
+        response = await transport.fetch("/api/bootstrap");
+    }
+    catch (error) {
+        if (error instanceof ComputerGrantError && error.forbidden) {
+            return { status: "unauthorized", message: error.message };
+        }
+        return {
+            status: "unavailable",
+            message: error instanceof Error ? error.message : "Couldn't reach your Computer.",
+        };
+    }
+    const text = await response.text().catch(() => "");
+    let body = {};
+    try {
+        body = text ? JSON.parse(text) : {};
+    }
+    catch {
+        body = {};
+    }
+    const errorText = typeof body.error === "string" ? body.error : undefined;
+    if (response.ok) {
+        return {
+            status: "ready",
+            version: typeof body.version === "string" ? body.version : undefined,
+            sessions: Array.isArray(body.sessions) ? body.sessions : [],
+            roster: {
+                // `codingAgents` is the launchable roster. `agents` on the same body
+                // is AUTO agents, a different feature with a similar name.
+                agents: Array.isArray(body.codingAgents)
+                    ? body.codingAgents
+                    : [],
+                repos: Array.isArray(body.repos) ? body.repos : [],
+            },
+        };
+    }
+    if (response.status === 425 || errorText === "sandbox waking")
+        return { status: "waking" };
+    if (response.status === 429) {
+        return { status: "agent-limit", message: errorText ?? "Too many agents running." };
+    }
+    if (response.status === 502 || response.status === 503 || response.status === 504) {
+        return { status: "unavailable", message: errorText ?? "Your Computer isn't responding." };
+    }
+    return {
+        status: "error",
+        message: errorText ?? `Couldn't open your Computer (${response.status})`,
+    };
+}
+/**
+ * Wait out a wake. Bounded on purpose: a cold resume is sub-second and a cold
+ * provision is seconds, so a minute of 425s means something is wrong.
+ */
+export async function waitForReady(transport, { timeoutMs = 60_000, intervalMs = 1_500, onWaking, sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)), now = Date.now, } = {}) {
+    const deadline = now() + timeoutMs;
+    let attempt = 0;
+    for (;;) {
+        const readiness = await probeReadiness(transport);
+        if (readiness.status !== "waking")
+            return readiness;
+        attempt += 1;
+        onWaking?.(attempt);
+        if (now() + intervalMs >= deadline)
+            return readiness;
+        await sleep(intervalMs);
+    }
+}
+//# sourceMappingURL=readiness.js.map

package/dist/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA2B7C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAuB;IAC1D,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;SAClF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC3D,MAAM,EAAE;gBACN,qEAAqE;gBACrE,2DAA2D;gBAC3D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;oBACtC,CAAC,CAAE,IAAI,CAAC,YAA0C;oBAClD,CAAC,CAAC,EAAE;gBACN,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAkC,CAAC,CAAC,CAAC,EAAE;aACjF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,IAAI,0BAA0B,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,IAAI,iCAAiC,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS,IAAI,gCAAgC,QAAQ,CAAC,MAAM,GAAG;KACzE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAuB,EACvB,EACE,SAAS,GAAG,MAAM,EAClB,UAAU,GAAG,KAAK,EAClB,QAAQ,EACR,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAC/E,GAAG,GAAG,IAAI,CAAC,GAAG,GACf,GAMG,EAAE;IAEN,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,SAAS,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpD,OAAO,IAAI,CAAC,CAAC;QACb,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,GAAG,EAAE,GAAG,UAAU,IAAI,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/shared-binding.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Addressing someone else's machine.
+ *
+ * A binding id identifies a machine everywhere: it keys the transport cache,
+ * the grant owner, and the persisted preference. A shared machine needs to be
+ * addressable by the same KIND of string, so it is spelled
+ * `shared:<ownerUserId>:<bindingId>`, exactly as the control plane expects it
+ * (`control-plane/lib/computer-access.ts` in BennyKok/vibes). Both halves are
+ * needed because sharing is PER MACHINE. This is a contract with the server,
+ * not a client convention. Do not change the format here alone.
+ */
+export declare const SHARED_BINDING_PREFIX = "shared:";
+export interface SharedBindingTarget {
+    ownerUserId: string;
+    bindingId: string;
+}
+export declare function sharedBindingId(ownerUserId: string, bindingId: string): string;
+export declare function isSharedBindingId(bindingId: string): boolean;
+/**
+ * The (owner, machine) pair behind a shared binding id, or null for an
+ * ordinary machine.
+ *
+ * Splits on the FIRST colon only: the owner is a uuid and never contains one,
+ * while the trailing binding id is passed through untouched so it survives
+ * whatever spelling relay chooses for it.
+ */
+export declare function parseSharedBindingId(bindingId: string): SharedBindingTarget | null;
+/**
+ * What the session-auth mint endpoint should be asked for, for any binding id
+ * this app might have selected. The mint route (control-plane
+ * `handleSessionAuthMint`, POST /__omg/session-auth) takes the RAW binding id
+ * plus an optional `ownerUserId` — it does not understand the `shared:`
+ * spelling itself, that decoding is entirely this app's job.
+ */
+export declare function mintTargetForBinding(bindingId: string): {
+    bindingId: string;
+    ownerUserId?: string;
+};
+/**
+ * Detail for a revoked share — mint 403 or a `shared:` preference that is no
+ * longer in `listSharedComputers`. The empty-state TITLE is already
+ * "No longer available"; this line says why, instead of restating that title.
+ */
+export declare const SHARED_REVOKED_DETAIL = "This computer is no longer shared with you.";
+/**
+ * Optional machine identity the share row may carry. A guest never gets the
+ * owner's live `computerUrl` for transport, but the list payload can still
+ * name the box so two shares from one person are not the same string.
+ */
+export type SharedComputerIdentity = {
+    hostname?: string;
+    computerName?: string;
+    machineName?: string;
+    machineLabel?: string;
+    defaultFolder?: string | null;
+    computerUrl?: string | null;
+    binding?: {
+        hostname?: string;
+        computerName?: string;
+        machineName?: string;
+        computerUrl?: string | null;
+        defaultFolder?: string | null;
+    };
+};
+/** What `listSharedComputers` returns for one machine shared with the signed-in account. */
+export type SharedComputerView = SharedComputerIdentity & {
+    ownerUserId: string;
+    bindingId: string;
+    email: string;
+    name?: string;
+    image?: string;
+    sharedAt: number;
+    /**
+     * Liveness of the OWNER's machine, resolved server-side. This app cannot
+     * ask relay itself — relay only answers "which machines are YOURS", and a
+     * shared one never is. Undefined means the server could not resolve it
+     * either; treat that as reachable rather than rendering a false "offline",
+     * same as the web dashboard does.
+     */
+    online?: boolean;
+};
+/** Fields the label helpers read — a list row or the synthesized binding. */
+export type SharedComputerLabelSource = SharedComputerIdentity & {
+    ownerUserId?: string;
+    bindingId?: string;
+    id?: string;
+    email?: string;
+    name?: string;
+    ownerName?: string;
+    ownerLabel?: string;
+    ownerBindingId?: string;
+    online?: boolean;
+};
+/** "Ada" / "ada@example.com" — whichever the share row actually carries. */
+export declare function sharedComputerOwnerLabel(computer: Pick<SharedComputerView, "name" | "email">): string;
+export declare function looksLikeEmail(value: string): boolean;
+/**
+ * First name from a real display name. Never an email — possessivizing
+ * `ada@example.com` produced "ada@example.com's computer", which is the
+ * string this helper exists to stop shipping.
+ */
+export declare function sharedComputerFirstName(computer: SharedComputerLabelSource): string | null;
+/**
+ * Which machine this share is, when the server said. Hostname first, then
+ * an explicit name, then the same URL/folder fallbacks `bindingLabel` uses
+ * for a box you own. Missing is fine — the title falls back to "computer"
+ * and collisions get a short tail.
+ */
+export declare function sharedComputerMachineIdentity(computer: SharedComputerLabelSource): string | undefined;
+/**
+ * Title for a shared machine.
+ *
+ * - Owner has a name: first-name possessive + machine identity when we have
+ *   one ("Ada's MacBook" / "Ada's studio"), else "Ada's computer".
+ * - Owner is email-only: "Shared computer". Never `"ada@example.com's computer"`.
+ * - Two rows that would otherwise match get a short unique tail.
+ *
+ * Distinct from `bindingLabel` (format.ts), which reads a machine YOU own.
+ * Never call that on a synthesized shared binding: a guest has no
+ * `computerUrl` of their own, and it would fall through to a truncated id.
+ */
+export declare function sharedBindingLabel(computer: SharedComputerLabelSource, siblings?: SharedComputerLabelSource[]): string;
+export declare function sharedBindingBaseTitle(computer: SharedComputerLabelSource): string;
+/**
+ * Second line on the manage screen.
+ *
+ * Attribution is the section + title. A named owner gets liveness
+ * (Online / Offline). Email-only puts the email here — that is the only
+ * place the address belongs, and possessivizing it as a title is the
+ * thing this policy forbids.
+ */
+export declare function sharedComputerSubtitle(computer: SharedComputerLabelSource): string;
+/** Picker row: the title, plus a title-case "Offline" suffix when down. */
+export declare function sharedComputerPickerLabel(computer: SharedComputerLabelSource, siblings?: SharedComputerLabelSource[]): string;
+//# sourceMappingURL=shared-binding.d.ts.map

package/dist/shared-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-binding.d.ts","sourceRoot":"","sources":["../src/shared-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CASlF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAGA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,gDAAgD,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC;CACH,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,GAAG;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,GACnD,MAAM,CAER;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,GAAG,IAAI,CAK1F;AASD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,yBAAyB,GAClC,MAAM,GAAG,SAAS,CAoBpB;AAsCD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,GAAE,yBAAyB,EAAO,GACzC,MAAM,CAKR;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,CAKlF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,CASlF;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,yBAAyB,EACnC,QAAQ,GAAE,yBAAyB,EAAO,GACzC,MAAM,CAGR"}