@omg-dev/cloud 0.6.41

package/dist/shared-binding.js

@@ -0,0 +1,202 @@
+/**
+ * Addressing someone else's machine.
+ *
+ * A binding id identifies a machine everywhere: it keys the transport cache,
+ * the grant owner, and the persisted preference. A shared machine needs to be
+ * addressable by the same KIND of string, so it is spelled
+ * `shared:<ownerUserId>:<bindingId>`, exactly as the control plane expects it
+ * (`control-plane/lib/computer-access.ts` in BennyKok/vibes). Both halves are
+ * needed because sharing is PER MACHINE. This is a contract with the server,
+ * not a client convention. Do not change the format here alone.
+ */
+export const SHARED_BINDING_PREFIX = "shared:";
+export function sharedBindingId(ownerUserId, bindingId) {
+    return `${SHARED_BINDING_PREFIX}${ownerUserId}:${bindingId}`;
+}
+export function isSharedBindingId(bindingId) {
+    return bindingId.startsWith(SHARED_BINDING_PREFIX);
+}
+/**
+ * The (owner, machine) pair behind a shared binding id, or null for an
+ * ordinary machine.
+ *
+ * Splits on the FIRST colon only: the owner is a uuid and never contains one,
+ * while the trailing binding id is passed through untouched so it survives
+ * whatever spelling relay chooses for it.
+ */
+export function parseSharedBindingId(bindingId) {
+    if (!isSharedBindingId(bindingId))
+        return null;
+    const rest = bindingId.slice(SHARED_BINDING_PREFIX.length);
+    const split = rest.indexOf(":");
+    if (split <= 0)
+        return null;
+    const ownerUserId = rest.slice(0, split).trim();
+    const target = rest.slice(split + 1).trim();
+    if (!ownerUserId || !target)
+        return null;
+    return { ownerUserId, bindingId: target };
+}
+/**
+ * What the session-auth mint endpoint should be asked for, for any binding id
+ * this app might have selected. The mint route (control-plane
+ * `handleSessionAuthMint`, POST /__omg/session-auth) takes the RAW binding id
+ * plus an optional `ownerUserId` — it does not understand the `shared:`
+ * spelling itself, that decoding is entirely this app's job.
+ */
+export function mintTargetForBinding(bindingId) {
+    const shared = parseSharedBindingId(bindingId);
+    return shared ? { bindingId: shared.bindingId, ownerUserId: shared.ownerUserId } : { bindingId };
+}
+/**
+ * Detail for a revoked share — mint 403 or a `shared:` preference that is no
+ * longer in `listSharedComputers`. The empty-state TITLE is already
+ * "No longer available"; this line says why, instead of restating that title.
+ */
+export const SHARED_REVOKED_DETAIL = "This computer is no longer shared with you.";
+/** "Ada" / "ada@example.com" — whichever the share row actually carries. */
+export function sharedComputerOwnerLabel(computer) {
+    return computer.name?.trim() || computer.email;
+}
+export function looksLikeEmail(value) {
+    return value.includes("@");
+}
+/**
+ * First name from a real display name. Never an email — possessivizing
+ * `ada@example.com` produced "ada@example.com's computer", which is the
+ * string this helper exists to stop shipping.
+ */
+export function sharedComputerFirstName(computer) {
+    const named = computer.name?.trim() || computer.ownerName?.trim();
+    const fromName = firstNameToken(named);
+    if (fromName)
+        return fromName;
+    return firstNameToken(computer.ownerLabel?.trim());
+}
+function firstNameToken(raw) {
+    if (!raw || looksLikeEmail(raw))
+        return null;
+    const first = raw.split(/\s+/)[0] ?? "";
+    if (!first || looksLikeEmail(first))
+        return null;
+    return `${first.charAt(0).toUpperCase()}${first.slice(1)}`;
+}
+/**
+ * Which machine this share is, when the server said. Hostname first, then
+ * an explicit name, then the same URL/folder fallbacks `bindingLabel` uses
+ * for a box you own. Missing is fine — the title falls back to "computer"
+ * and collisions get a short tail.
+ */
+export function sharedComputerMachineIdentity(computer) {
+    const nested = computer.binding;
+    const candidates = [
+        computer.machineLabel,
+        computer.hostname,
+        computer.computerName,
+        computer.machineName,
+        nested?.hostname,
+        nested?.computerName,
+        nested?.machineName,
+        hostnameFromUrl(computer.computerUrl),
+        hostnameFromUrl(nested?.computerUrl),
+        folderBasename(computer.defaultFolder),
+        folderBasename(nested?.defaultFolder),
+    ];
+    for (const candidate of candidates) {
+        const trimmed = typeof candidate === "string" ? candidate.trim() : "";
+        if (trimmed && !looksLikeEmail(trimmed))
+            return trimmed;
+    }
+    return undefined;
+}
+function hostnameFromUrl(url) {
+    if (!url)
+        return undefined;
+    try {
+        const host = new URL(url).hostname.split(".")[0];
+        if (host && host !== "localhost" && !/^\d+$/.test(host))
+            return host;
+    }
+    catch {
+        /* fall through */
+    }
+    return undefined;
+}
+function folderBasename(folder) {
+    const name = folder?.split("/").filter(Boolean).pop()?.trim();
+    return name || undefined;
+}
+function ownerBindingId(computer) {
+    if (computer.ownerBindingId?.trim())
+        return computer.ownerBindingId.trim();
+    if (computer.bindingId?.trim()) {
+        const parsed = parseSharedBindingId(computer.bindingId);
+        return parsed?.bindingId ?? computer.bindingId.trim();
+    }
+    if (computer.id) {
+        const parsed = parseSharedBindingId(computer.id);
+        if (parsed)
+            return parsed.bindingId;
+    }
+    return "";
+}
+function uniqueTail(computer) {
+    const compact = ownerBindingId(computer).replace(/[^a-zA-Z0-9]/g, "");
+    if (compact.length >= 6)
+        return compact.slice(-6);
+    if (compact.length > 0)
+        return compact;
+    return "share";
+}
+/**
+ * Title for a shared machine.
+ *
+ * - Owner has a name: first-name possessive + machine identity when we have
+ *   one ("Ada's MacBook" / "Ada's studio"), else "Ada's computer".
+ * - Owner is email-only: "Shared computer". Never `"ada@example.com's computer"`.
+ * - Two rows that would otherwise match get a short unique tail.
+ *
+ * Distinct from `bindingLabel` (format.ts), which reads a machine YOU own.
+ * Never call that on a synthesized shared binding: a guest has no
+ * `computerUrl` of their own, and it would fall through to a truncated id.
+ */
+export function sharedBindingLabel(computer, siblings = []) {
+    const title = sharedBindingBaseTitle(computer);
+    const collisions = siblings.filter((other) => sharedBindingBaseTitle(other) === title);
+    if (collisions.length <= 1)
+        return title;
+    return `${title} · ${uniqueTail(computer)}`;
+}
+export function sharedBindingBaseTitle(computer) {
+    const first = sharedComputerFirstName(computer);
+    if (!first)
+        return "Shared computer";
+    const machine = sharedComputerMachineIdentity(computer);
+    return `${first}’s ${machine ?? "computer"}`;
+}
+/**
+ * Second line on the manage screen.
+ *
+ * Attribution is the section + title. A named owner gets liveness
+ * (Online / Offline). Email-only puts the email here — that is the only
+ * place the address belongs, and possessivizing it as a title is the
+ * thing this policy forbids.
+ */
+export function sharedComputerSubtitle(computer) {
+    if (!sharedComputerFirstName(computer)) {
+        const email = computer.email?.trim();
+        if (email)
+            return email;
+        const label = computer.ownerLabel?.trim();
+        if (label && looksLikeEmail(label))
+            return label;
+        return computer.online === false ? "Offline" : "Online";
+    }
+    return computer.online === false ? "Offline" : "Online";
+}
+/** Picker row: the title, plus a title-case "Offline" suffix when down. */
+export function sharedComputerPickerLabel(computer, siblings = []) {
+    const title = sharedBindingLabel(computer, siblings);
+    return computer.online === false ? `${title} — Offline` : title;
+}
+//# sourceMappingURL=shared-binding.js.map

package/dist/shared-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-binding.js","sourceRoot":"","sources":["../src/shared-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAO/C,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,SAAiB;IACpE,OAAO,GAAG,qBAAqB,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IAIpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAsDnF,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CACtC,QAAoD;IAEpD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAmC;IACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAmC;IAEnC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;IAChC,MAAM,UAAU,GAAG;QACjB,QAAQ,CAAC,YAAY;QACrB,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC,YAAY;QACrB,QAAQ,CAAC,WAAW;QACpB,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,WAAW;QACnB,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC;QACpC,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC;QACtC,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC;KACtC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,IAAI,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,GAAmB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,MAAM,IAAI,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9D,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,QAAmC;IACzD,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,OAAO,MAAM,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,QAAmC;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAmC,EACnC,QAAQ,GAAgC,EAAE;IAE1C,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;IACvF,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,GAAG,KAAK,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAmC;IACxE,MAAM,KAAK,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,iBAAiB,CAAC;IACrC,MAAM,OAAO,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,GAAG,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAmC;IACxE,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACrC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAC1C,IAAI,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CACvC,QAAmC,EACnC,QAAQ,GAAgC,EAAE;IAE1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;AAClE,CAAC"}

package/dist/transports.d.ts

@@ -0,0 +1,44 @@
+/**
+ * One grant and one transport per machine.
+ *
+ * `createGrantTransport` from @omg-dev/client already attaches the bearer
+ * grant, retries once on 401 with forceRefresh, and opens the live socket
+ * with the `lfg-bearer.<grant>` subprotocol. What this file adds is the part
+ * every host used to keep in its own code: owning exactly one grant mint in
+ * flight per binding, and one transport that every screen shares.
+ *
+ * Module scope was the bug fix, not an accident. A hook shares code, never
+ * state; several independent consumers booting at once each observed an empty
+ * cache and minted their own grant. That shipped on the web and cost five
+ * /token + five /__omg/session-auth calls on every cold open.
+ */
+import { type OmgGrant, type OmgTransport } from "@omg-dev/client";
+import { type CloudEndpoints, type FetchLike } from "./config";
+import type { MintSessionGrant } from "./grant";
+export interface TransportCacheOptions {
+    endpoints?: Partial<CloudEndpoints>;
+    mintSessionGrant: MintSessionGrant;
+    fetch?: FetchLike;
+    WebSocket?: typeof globalThis.WebSocket;
+    now?: () => number;
+}
+export interface MachineTransports {
+    /** The hosted transport for a machine, shared by every consumer of it. */
+    get(bindingId: string): OmgTransport;
+    /** Seed a binding's grant from a value the server already handed over. */
+    prime(bindingId: string, grant: OmgGrant): void;
+    /** Drop a machine's cached transport, e.g. after sign-out or unpairing. */
+    forget(bindingId: string): void;
+    forgetAll(): void;
+}
+export declare function createMachineTransports(options: TransportCacheOptions): MachineTransports;
+/**
+ * A transport for a box reachable directly on the network (`omg serve` on a
+ * laptop, over Tailscale). That server has no application-layer auth, so this
+ * is plain HTTP/WS against the given origin. The perimeter is the network.
+ */
+export declare function createDirectTransport(baseUrl: string, options?: {
+    fetch?: FetchLike;
+    WebSocket?: typeof globalThis.WebSocket;
+}): OmgTransport;
+//# sourceMappingURL=transports.d.ts.map

package/dist/transports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports.d.ts","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAyB,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AA2ChD,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,SAAS,CAAC;IACxC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,0EAA0E;IAC1E,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IAChD,2EAA2E;IAC3E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,IAAI,IAAI,CAAC;CACnB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,iBAAiB,CAgCzF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,SAAS,CAAA;CAAO,GAC3E,YAAY,CAsCd"}

package/dist/transports.js

@@ -0,0 +1,119 @@
+/**
+ * One grant and one transport per machine.
+ *
+ * `createGrantTransport` from @omg-dev/client already attaches the bearer
+ * grant, retries once on 401 with forceRefresh, and opens the live socket
+ * with the `lfg-bearer.<grant>` subprotocol. What this file adds is the part
+ * every host used to keep in its own code: owning exactly one grant mint in
+ * flight per binding, and one transport that every screen shares.
+ *
+ * Module scope was the bug fix, not an accident. A hook shares code, never
+ * state; several independent consumers booting at once each observed an empty
+ * cache and minted their own grant. That shipped on the web and cost five
+ * /token + five /__omg/session-auth calls on every cold open.
+ */
+import { createGrantTransport, } from "@omg-dev/client";
+import { resolveCloudEndpoints } from "./config";
+const GRANT_SKEW_MS = 30_000;
+function createGrantOwner(bindingId, mint, now) {
+    let cached = null;
+    let pending = null;
+    return {
+        async get({ forceRefresh }) {
+            // 30 s of slack so a grant about to die is not handed to a request
+            // that will outlive it.
+            if (!forceRefresh && cached && cached.expiresAt - now() > GRANT_SKEW_MS)
+                return cached;
+            if (!forceRefresh && pending)
+                return pending;
+            pending = mint(bindingId)
+                .then((grant) => {
+                cached = grant;
+                return grant;
+            })
+                .finally(() => {
+                pending = null;
+            });
+            return pending;
+        },
+        prime(grant) {
+            cached = grant;
+        },
+        reset() {
+            cached = null;
+            pending = null;
+        },
+    };
+}
+export function createMachineTransports(options) {
+    const endpoints = resolveCloudEndpoints(options.endpoints);
+    const now = options.now ?? Date.now;
+    const entries = new Map();
+    const entryFor = (bindingId) => {
+        const existing = entries.get(bindingId);
+        if (existing)
+            return existing;
+        const owner = createGrantOwner(bindingId, options.mintSessionGrant, now);
+        const transport = createGrantTransport({
+            baseUrl: endpoints.sessionOrigin,
+            getGrant: owner.get,
+            ...(options.fetch ? { fetch: options.fetch } : {}),
+            ...(options.WebSocket ? { WebSocket: options.WebSocket } : {}),
+        });
+        const entry = { transport, owner };
+        entries.set(bindingId, entry);
+        return entry;
+    };
+    return {
+        get: (bindingId) => entryFor(bindingId).transport,
+        prime: (bindingId, grant) => entryFor(bindingId).owner.prime(grant),
+        forget(bindingId) {
+            entries.get(bindingId)?.owner.reset();
+            entries.delete(bindingId);
+        },
+        forgetAll() {
+            for (const entry of entries.values())
+                entry.owner.reset();
+            entries.clear();
+        },
+    };
+}
+/**
+ * A transport for a box reachable directly on the network (`omg serve` on a
+ * laptop, over Tailscale). That server has no application-layer auth, so this
+ * is plain HTTP/WS against the given origin. The perimeter is the network.
+ */
+export function createDirectTransport(baseUrl, options = {}) {
+    const origin = baseUrl.trim().replace(/\/+$/, "");
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    const WebSocketImpl = options.WebSocket ?? globalThis.WebSocket;
+    const socketUrl = (path) => `${origin.replace(/^http/, "ws")}${path}`;
+    const doFetch = (path, init) => fetchImpl(`${origin}${path}`, init);
+    return {
+        fetch: doFetch,
+        async request(path, init = {}) {
+            const response = await doFetch(path, init);
+            const text = await response.text().catch(() => "");
+            let data = {};
+            try {
+                data = text ? JSON.parse(text) : {};
+            }
+            catch {
+                data = {};
+            }
+            if (!response.ok) {
+                throw new Error(data?.error ??
+                    `${init.method ?? "GET"} ${path} failed (${response.status})`);
+            }
+            return data;
+        },
+        async openSocket(path) {
+            return new WebSocketImpl(socketUrl(path));
+        },
+        async openLiveSocket(query) {
+            const suffix = query ? `?${query.replace(/^\?/, "")}` : "";
+            return new WebSocketImpl(socketUrl(`/api/live/ws${suffix}`));
+        },
+    };
+}
+//# sourceMappingURL=transports.js.map

package/dist/transports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports.js","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,qBAAqB,EAAuC,MAAM,UAAU,CAAC;AAStF,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,SAAS,gBAAgB,CACvB,SAAiB,EACjB,IAAsB,EACtB,GAAiB;IAEjB,IAAI,MAAM,GAAoB,IAAI,CAAC;IACnC,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE;YACxB,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,CAAC,YAAY,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,GAAG,aAAa;gBAAE,OAAO,MAAM,CAAC;YACvF,IAAI,CAAC,YAAY,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;iBACtB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,GAAG,KAAK,CAAC;gBACf,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC,CAAC,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,KAAK;YACH,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAoBD,MAAM,UAAU,uBAAuB,CAAC,OAA8B;IACpE,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0D,CAAC;IAElF,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,oBAAoB,CAAC;YACrC,OAAO,EAAE,SAAS,CAAC,aAAa;YAChC,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,SAAS;QACjD,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACnE,MAAM,CAAC,SAAS;YACd,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS;YACP,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1D,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAAO,GAAmE,EAAE;IAE5E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC;IAChE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAE1F,OAAO;QACL,KAAK,EAAE,OAAO;QACd,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,IAAI,GAAgB,EAAE;YACnD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,IAAI,GAAY,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACZ,IAA2B,EAAE,KAAK;oBACjC,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,YAAY,QAAQ,CAAC,MAAM,GAAG,CAChE,CAAC;YACJ,CAAC;YACD,OAAO,IAAS,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,IAAY;YAC3B,OAAO,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAEvC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAc;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,aAAa,CAAC,SAAS,CAAC,eAAe,MAAM,EAAE,CAAC,CAE1D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@omg-dev/cloud",
+  "version": "0.6.41",
+  "description": "omg Cloud account client: sign-in, machine list, session grants, and one transport per machine.",
+  "license": "MIT",
+  "homepage": "https://omg.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/BennyKok/omg.dev.git",
+    "directory": "packages/cloud"
+  },
+  "bugs": {
+    "url": "https://github.com/BennyKok/omg.dev/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@omg-dev/client": "0.6.41"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}