@oxyhq/services 23.0.2 → 23.0.3

package/lib/module/ui/context/passkeyFlow.js

@@ -0,0 +1,111 @@
+"use strict";
+
+/**
+ * Pure passkey (WebAuthn) sign-in / registration orchestration.
+ *
+ * Extracted from `OxyContext` so the fixed `options → ceremony → verify → commit`
+ * ordering is unit-testable with injected deps — the exact pattern
+ * `commitSessionFlow.ts` (`commitDeviceSetAndResolve`) uses. The context methods
+ * (`signInWithPasskey` / `registerWithPasskey` / `addPasskey`) are thin wrappers
+ * that supply the real deps: the core `webauthn*` methods, the platform ceremony
+ * client (`webauthn/passkeyClient`), and the internal `commitSession` funnel.
+ *
+ * All three GATE on `isSupported()` first (the platform client returns `false`
+ * off the web) so an unsupported surface fails loudly before touching a ceremony.
+ */
+
+/**
+ * The result of `OxyServices.webauthnRegisterVerify` — either the LINK branch
+ * (`{ success, message }`, bearer present, no session) or the SIGNUP branch (a
+ * full {@link LoginResult}, which carries a `sessionId` on its session arm).
+ */
+
+/** Thrown when a passkey flow is attempted on a surface that cannot run WebAuthn. */
+export const PASSKEY_UNSUPPORTED_MESSAGE = 'Passkeys are not available in this environment. Use another sign-in method.';
+
+/** Project a session-arm login result onto the internal `commitSession` input. */
+function toCommitInput(result) {
+  return {
+    sessionId: result.sessionId,
+    accessToken: result.accessToken,
+    deviceSecret: result.deviceSecret,
+    deviceId: result.deviceId,
+    expiresAt: result.expiresAt,
+    userId: result.user.id,
+    user: result.user
+  };
+}
+
+/** Injected dependencies for {@link runPasskeyLogin}. */
+
+/**
+ * Passkey SIGN-IN. With no `username` this is the usernameless
+ * (discoverable-credential) flow; with a `username` it is username-first —
+ * the server scopes `allowCredentials` to that user's passkeys so a
+ * non-discoverable hardware key (U2F/security key) can be selected. Either way:
+ * request login options, run the authentication ceremony, verify, then commit
+ * the session. A passkey assertion is itself the strong factor — sign-in always
+ * resolves to a completed session.
+ */
+export async function runPasskeyLogin(deps) {
+  if (!deps.isSupported()) {
+    throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+  }
+  const options = await deps.getLoginOptions(deps.username);
+  const response = await deps.runCeremony(options);
+  const result = await deps.loginVerify(response, {
+    deviceName: deps.deviceName,
+    deviceFingerprint: deps.deviceFingerprint,
+    deviceId: deps.deviceId
+  });
+  await deps.commit(toCommitInput(result));
+}
+
+/** Injected dependencies for {@link runPasskeyRegister}. */
+
+/**
+ * Passkey SIGNUP: create a brand-new account whose first auth method is a
+ * passkey. The verify signup branch mints a session (a {@link LoginSessionResult}
+ * carrying `sessionId`), which is committed exactly like a password signup.
+ */
+export async function runPasskeyRegister(deps) {
+  if (!deps.isSupported()) {
+    throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+  }
+  const options = await deps.getRegisterOptions(deps.username);
+  const response = await deps.runCeremony(options);
+  const result = await deps.registerVerify(response, {
+    username: deps.username,
+    deviceName: deps.deviceName
+  });
+  // Only the signup session arm carries `sessionId`; the link branch
+  // (`{ success, message }`) does not.
+  if (!('sessionId' in result)) {
+    throw new Error('Passkey registration did not establish a session.');
+  }
+  await deps.commit(toCommitInput(result));
+}
+
+/** Injected dependencies for {@link runPasskeyAdd}. */
+
+/**
+ * ADD a passkey to the already-signed-in account (bearer present). The verify
+ * link branch returns `{ success, message }` with NO session — so this never
+ * commits a session; it just fires `onLinked` (which invalidates the
+ * auth-methods query). A session arm here would be a server contract violation.
+ */
+export async function runPasskeyAdd(deps) {
+  if (!deps.isSupported()) {
+    throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+  }
+  const options = await deps.getRegisterOptions();
+  const response = await deps.runCeremony(options);
+  const result = await deps.registerVerify(response, {
+    deviceName: deps.deviceName
+  });
+  if ('sessionId' in result) {
+    throw new Error('addPasskey unexpectedly minted a new session instead of linking.');
+  }
+  deps.onLinked();
+}
+//# sourceMappingURL=passkeyFlow.js.map

package/lib/module/ui/context/passkeyFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["PASSKEY_UNSUPPORTED_MESSAGE","toCommitInput","result","sessionId","accessToken","deviceSecret","deviceId","expiresAt","userId","user","id","runPasskeyLogin","deps","isSupported","Error","options","getLoginOptions","username","response","runCeremony","loginVerify","deviceName","deviceFingerprint","commit","runPasskeyRegister","getRegisterOptions","registerVerify","runPasskeyAdd","onLinked"],"sourceRoot":"../../../../src","sources":["ui/context/passkeyFlow.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACA,OAAO,MAAMA,2BAA2B,GACtC,6EAA6E;;AAE/E;AACA,SAASC,aAAaA,CAACC,MAA0B,EAAe;EAC9D,OAAO;IACLC,SAAS,EAAED,MAAM,CAACC,SAAS;IAC3BC,WAAW,EAAEF,MAAM,CAACE,WAAW;IAC/BC,YAAY,EAAEH,MAAM,CAACG,YAAY;IACjCC,QAAQ,EAAEJ,MAAM,CAACI,QAAQ;IACzBC,SAAS,EAAEL,MAAM,CAACK,SAAS;IAC3BC,MAAM,EAAEN,MAAM,CAACO,IAAI,CAACC,EAAE;IACtBD,IAAI,EAAEP,MAAM,CAACO;EACf,CAAC;AACH;;AAEA;;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeE,eAAeA,CAACC,IAAyB,EAAiB;EAC9E,IAAI,CAACA,IAAI,CAACC,WAAW,CAAC,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAACd,2BAA2B,CAAC;EAC9C;EACA,MAAMe,OAAO,GAAG,MAAMH,IAAI,CAACI,eAAe,CAACJ,IAAI,CAACK,QAAQ,CAAC;EACzD,MAAMC,QAAQ,GAAG,MAAMN,IAAI,CAACO,WAAW,CAACJ,OAAO,CAAC;EAChD,MAAMb,MAAM,GAAG,MAAMU,IAAI,CAACQ,WAAW,CAACF,QAAQ,EAAE;IAC9CG,UAAU,EAAET,IAAI,CAACS,UAAU;IAC3BC,iBAAiB,EAAEV,IAAI,CAACU,iBAAiB;IACzChB,QAAQ,EAAEM,IAAI,CAACN;EACjB,CAAC,CAAC;EACF,MAAMM,IAAI,CAACW,MAAM,CAACtB,aAAa,CAACC,MAAM,CAAC,CAAC;AAC1C;;AAEA;;AAcA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAesB,kBAAkBA,CAACZ,IAA4B,EAAiB;EACpF,IAAI,CAACA,IAAI,CAACC,WAAW,CAAC,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAACd,2BAA2B,CAAC;EAC9C;EACA,MAAMe,OAAO,GAAG,MAAMH,IAAI,CAACa,kBAAkB,CAACb,IAAI,CAACK,QAAQ,CAAC;EAC5D,MAAMC,QAAQ,GAAG,MAAMN,IAAI,CAACO,WAAW,CAACJ,OAAO,CAAC;EAChD,MAAMb,MAAM,GAAG,MAAMU,IAAI,CAACc,cAAc,CAACR,QAAQ,EAAE;IACjDD,QAAQ,EAAEL,IAAI,CAACK,QAAQ;IACvBI,UAAU,EAAET,IAAI,CAACS;EACnB,CAAC,CAAC;EACF;EACA;EACA,IAAI,EAAE,WAAW,IAAInB,MAAM,CAAC,EAAE;IAC5B,MAAM,IAAIY,KAAK,CAAC,mDAAmD,CAAC;EACtE;EACA,MAAMF,IAAI,CAACW,MAAM,CAACtB,aAAa,CAACC,MAAM,CAAC,CAAC;AAC1C;;AAEA;;AAaA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeyB,aAAaA,CAACf,IAAuB,EAAiB;EAC1E,IAAI,CAACA,IAAI,CAACC,WAAW,CAAC,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAACd,2BAA2B,CAAC;EAC9C;EACA,MAAMe,OAAO,GAAG,MAAMH,IAAI,CAACa,kBAAkB,CAAC,CAAC;EAC/C,MAAMP,QAAQ,GAAG,MAAMN,IAAI,CAACO,WAAW,CAACJ,OAAO,CAAC;EAChD,MAAMb,MAAM,GAAG,MAAMU,IAAI,CAACc,cAAc,CAACR,QAAQ,EAAE;IAAEG,UAAU,EAAET,IAAI,CAACS;EAAW,CAAC,CAAC;EACnF,IAAI,WAAW,IAAInB,MAAM,EAAE;IACzB,MAAM,IAAIY,KAAK,CAAC,kEAAkE,CAAC;EACrF;EACAF,IAAI,CAACgB,QAAQ,CAAC,CAAC;AACjB","ignoreList":[]}

package/lib/module/ui/context/useOxyAccountGraph.js

@@ -0,0 +1,107 @@
+"use strict";
+
+import { useCallback, useEffect, useState } from 'react';
+import { logger as loggerUtil } from '@oxyhq/core';
+import { isUnauthorizedStatus } from "./oxyContextHelpers.js";
+import { resetSessionScopedStores } from "../stores/resetSessionScopedStores.js";
+import { ASSET_DOWNLOAD_URLS_QUERY_KEY } from "../hooks/useResolvedFileUrls.js";
+import { IdentityBoundSessionError } from "../session/index.js";
+export function useOxyAccountGraph({
+  isAuthenticated,
+  tokenReady,
+  initialized,
+  identityBound,
+  oxyServices,
+  sessionClient,
+  syncFromClient,
+  commitSession,
+  queryClient,
+  accountDialogControllerRef,
+  clearSessionStateRef
+}) {
+  const [accounts, setAccounts] = useState([]);
+  const refreshAccounts = useCallback(async () => {
+    if (identityBound || !isAuthenticated || !tokenReady || !oxyServices.getAccessToken()) {
+      setAccounts([]);
+      return;
+    }
+    try {
+      const list = await oxyServices.listAccounts();
+      setAccounts(list);
+    } catch (err) {
+      if (isUnauthorizedStatus(err)) {
+        setAccounts([]);
+        await clearSessionStateRef.current();
+        return;
+      }
+      if (__DEV__) {
+        loggerUtil.debug('Failed to load accounts', {
+          component: 'OxyContext'
+        }, err);
+      }
+    }
+  }, [identityBound, isAuthenticated, oxyServices, tokenReady, clearSessionStateRef]);
+  useEffect(() => {
+    if (!identityBound && isAuthenticated && initialized && tokenReady) {
+      refreshAccounts();
+      void accountDialogControllerRef.current?.refresh();
+    }
+  }, [identityBound, isAuthenticated, initialized, tokenReady, refreshAccounts, accountDialogControllerRef]);
+  const runPostAccountSwitchSideEffects = useCallback(async () => {
+    resetSessionScopedStores();
+    // Scoped media tokens are per-viewer — drop any cached URLs immediately so
+    // `keepPreviousData`-style placeholders cannot flash the prior account's
+    // private thumbnails while the new bearer mint lands.
+    queryClient.removeQueries({
+      queryKey: [ASSET_DOWNLOAD_URLS_QUERY_KEY]
+    });
+    await refreshAccounts();
+    queryClient.invalidateQueries();
+  }, [refreshAccounts, queryClient]);
+  const switchToAccount = useCallback(async accountId => {
+    if (identityBound) {
+      // Loud rejection, never a silent no-op: a resolved promise here would
+      // read to the caller as a completed switch that simply left the user
+      // unchanged, which is exactly the confusion this mode must avoid.
+      throw new IdentityBoundSessionError('switchToAccount');
+    }
+    const deviceState = sessionClient.getState();
+    if (deviceState?.accounts.some(account => account.accountId === accountId)) {
+      await sessionClient.switchAccount(accountId);
+      await syncFromClient();
+      await runPostAccountSwitchSideEffects();
+      return;
+    }
+    const result = await oxyServices.switchToAccount(accountId);
+    if (!result?.user || !result?.sessionId) {
+      throw new Error('Account switch did not return a valid session');
+    }
+    await commitSession({
+      sessionId: result.sessionId,
+      accessToken: result.accessToken,
+      deviceSecret: result.deviceSecret,
+      deviceId: result.deviceId,
+      expiresAt: result.expiresAt,
+      userId: result.user.id,
+      user: result.user
+    },
+    // A switch is IN-PLACE. Cross-tab/app propagation rides the
+    // `session_state` socket.
+    {
+      activate: true
+    });
+    await runPostAccountSwitchSideEffects();
+  }, [identityBound, oxyServices, sessionClient, syncFromClient, commitSession, runPostAccountSwitchSideEffects]);
+  const createAccount = useCallback(async data => {
+    const account = await oxyServices.createAccount(data);
+    await refreshAccounts();
+    return account;
+  }, [oxyServices, refreshAccounts]);
+  return {
+    accounts,
+    refreshAccounts,
+    switchToAccount,
+    createAccount
+  };
+}
+//# sourceMappingURL=useOxyAccountGraph.js.map

package/lib/module/ui/context/useOxyAccountGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useCallback","useEffect","useState","logger","loggerUtil","isUnauthorizedStatus","resetSessionScopedStores","ASSET_DOWNLOAD_URLS_QUERY_KEY","IdentityBoundSessionError","useOxyAccountGraph","isAuthenticated","tokenReady","initialized","identityBound","oxyServices","sessionClient","syncFromClient","commitSession","queryClient","accountDialogControllerRef","clearSessionStateRef","accounts","setAccounts","refreshAccounts","getAccessToken","list","listAccounts","err","current","__DEV__","debug","component","refresh","runPostAccountSwitchSideEffects","removeQueries","queryKey","invalidateQueries","switchToAccount","accountId","deviceState","getState","some","account","switchAccount","result","user","sessionId","Error","accessToken","deviceSecret","deviceId","expiresAt","userId","id","activate","createAccount","data"],"sourceRoot":"../../../../src","sources":["ui/context/useOxyAccountGraph.ts"],"mappings":";;AAAA,SAASA,WAAW,EAAEC,SAAS,EAAEC,QAAQ,QAAwB,OAAO;AAGxE,SAASC,MAAM,IAAIC,UAAU,QAAQ,aAAa;AAElD,SAASC,oBAAoB,QAAQ,wBAAqB;AAC1D,SAASC,wBAAwB,QAAQ,uCAAoC;AAC7E,SAASC,6BAA6B,QAAQ,iCAA8B;AAC5E,SAASC,yBAAyB,QAAQ,qBAAY;AAsBtD,OAAO,SAASC,kBAAkBA,CAAC;EACjCC,eAAe;EACfC,UAAU;EACVC,WAAW;EACXC,aAAa;EACbC,WAAW;EACXC,aAAa;EACbC,cAAc;EACdC,aAAa;EACbC,WAAW;EACXC,0BAA0B;EAC1BC;AACwB,CAAC,EAAE;EAC3B,MAAM,CAACC,QAAQ,EAAEC,WAAW,CAAC,GAAGpB,QAAQ,CAAgB,EAAE,CAAC;EAE3D,MAAMqB,eAAe,GAAGvB,WAAW,CAAC,YAA2B;IAC7D,IAAIa,aAAa,IAAI,CAACH,eAAe,IAAI,CAACC,UAAU,IAAI,CAACG,WAAW,CAACU,cAAc,CAAC,CAAC,EAAE;MACrFF,WAAW,CAAC,EAAE,CAAC;MACf;IACF;IACA,IAAI;MACF,MAAMG,IAAI,GAAG,MAAMX,WAAW,CAACY,YAAY,CAAC,CAAC;MAC7CJ,WAAW,CAACG,IAAI,CAAC;IACnB,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZ,IAAItB,oBAAoB,CAACsB,GAAG,CAAC,EAAE;QAC7BL,WAAW,CAAC,EAAE,CAAC;QACf,MAAMF,oBAAoB,CAACQ,OAAO,CAAC,CAAC;QACpC;MACF;MACA,IAAIC,OAAO,EAAE;QACXzB,UAAU,CAAC0B,KAAK,CAAC,yBAAyB,EAAE;UAAEC,SAAS,EAAE;QAAa,CAAC,EAAEJ,GAAc,CAAC;MAC1F;IACF;EACF,CAAC,EAAE,CAACd,aAAa,EAAEH,eAAe,EAAEI,WAAW,EAAEH,UAAU,EAAES,oBAAoB,CAAC,CAAC;EAEnFnB,SAAS,CAAC,MAAM;IACd,IAAI,CAACY,aAAa,IAAIH,eAAe,IAAIE,WAAW,IAAID,UAAU,EAAE;MAClEY,eAAe,CAAC,CAAC;MACjB,KAAKJ,0BAA0B,CAACS,OAAO,EAAEI,OAAO,CAAC,CAAC;IACpD;EACF,CAAC,EAAE,CAACnB,aAAa,EAAEH,eAAe,EAAEE,WAAW,EAAED,UAAU,EAAEY,eAAe,EAAEJ,0BAA0B,CAAC,CAAC;EAE1G,MAAMc,+BAA+B,GAAGjC,WAAW,CAAC,YAA2B;IAC7EM,wBAAwB,CAAC,CAAC;IAC1B;IACA;IACA;IACAY,WAAW,CAACgB,aAAa,CAAC;MAAEC,QAAQ,EAAE,CAAC5B,6BAA6B;IAAE,CAAC,CAAC;IACxE,MAAMgB,eAAe,CAAC,CAAC;IACvBL,WAAW,CAACkB,iBAAiB,CAAC,CAAC;EACjC,CAAC,EAAE,CAACb,eAAe,EAAEL,WAAW,CAAC,CAAC;EAElC,MAAMmB,eAAe,GAAGrC,WAAW,CACjC,MAAOsC,SAAiB,IAAoB;IAC1C,IAAIzB,aAAa,EAAE;MACjB;MACA;MACA;MACA,MAAM,IAAIL,yBAAyB,CAAC,iBAAiB,CAAC;IACxD;IACA,MAAM+B,WAAW,GAAGxB,aAAa,CAACyB,QAAQ,CAAC,CAAC;IAC5C,IAAID,WAAW,EAAElB,QAAQ,CAACoB,IAAI,CAAEC,OAAO,IAAKA,OAAO,CAACJ,SAAS,KAAKA,SAAS,CAAC,EAAE;MAC5E,MAAMvB,aAAa,CAAC4B,aAAa,CAACL,SAAS,CAAC;MAC5C,MAAMtB,cAAc,CAAC,CAAC;MACtB,MAAMiB,+BAA+B,CAAC,CAAC;MACvC;IACF;IAEA,MAAMW,MAAM,GAAG,MAAM9B,WAAW,CAACuB,eAAe,CAACC,SAAS,CAAC;IAC3D,IAAI,CAACM,MAAM,EAAEC,IAAI,IAAI,CAACD,MAAM,EAAEE,SAAS,EAAE;MACvC,MAAM,IAAIC,KAAK,CAAC,+CAA+C,CAAC;IAClE;IACA,MAAM9B,aAAa,CACjB;MACE6B,SAAS,EAAEF,MAAM,CAACE,SAAS;MAC3BE,WAAW,EAAEJ,MAAM,CAACI,WAAW;MAC/BC,YAAY,EAAEL,MAAM,CAACK,YAAY;MACjCC,QAAQ,EAAEN,MAAM,CAACM,QAAQ;MACzBC,SAAS,EAAEP,MAAM,CAACO,SAAS;MAC3BC,MAAM,EAAER,MAAM,CAACC,IAAI,CAACQ,EAAE;MACtBR,IAAI,EAAED,MAAM,CAACC;IACf,CAAC;IACD;IACA;IACA;MAAES,QAAQ,EAAE;IAAK,CACnB,CAAC;IACD,MAAMrB,+BAA+B,CAAC,CAAC;EACzC,CAAC,EACD,CAACpB,aAAa,EAAEC,WAAW,EAAEC,aAAa,EAAEC,cAAc,EAAEC,aAAa,EAAEgB,+BAA+B,CAC5G,CAAC;EAED,MAAMsB,aAAa,GAAGvD,WAAW,CAC/B,MAAOwD,IAAwB,IAA2B;IACxD,MAAMd,OAAO,GAAG,MAAM5B,WAAW,CAACyC,aAAa,CAACC,IAAI,CAAC;IACrD,MAAMjC,eAAe,CAAC,CAAC;IACvB,OAAOmB,OAAO;EAChB,CAAC,EACD,CAAC5B,WAAW,EAAES,eAAe,CAC/B,CAAC;EAED,OAAO;IACLF,QAAQ;IACRE,eAAe;IACfc,eAAe;IACfkB;EACF,CAAC;AACH","ignoreList":[]}

package/lib/module/ui/hooks/mutations/mutationFactory.js

@@ -0,0 +1,178 @@
+"use strict";
+
+/**
+ * Mutation Factory - Creates standardized mutations with optimistic updates
+ *
+ * This factory reduces boilerplate code for mutations that follow the common pattern:
+ * 1. Cancel outgoing queries
+ * 2. Snapshot previous data
+ * 3. Apply optimistic update
+ * 4. On error: rollback and show toast
+ * 5. On success: update cache, stores, and invalidate queries
+ */
+
+import { queryKeys, invalidateAccountQueries, invalidateUserQueries } from "../queries/queryKeys.js";
+import { toast } from '@oxyhq/bloom';
+import { useAuthStore } from "../../stores/authStore.js";
+
+/**
+ * Configuration for creating a standard profile mutation
+ */
+
+/**
+ * Creates a standard profile mutation with optimistic updates
+ *
+ * @example
+ * ```ts
+ * const updateProfile = createProfileMutation({
+ *   mutationKey: mutationKeys.account.updateProfile,
+ *   mutationFn: (updates) => oxyServices.updateProfile(updates),
+ *   optimisticUpdate: (user, updates) => updates,
+ *   errorMessage: 'Failed to update profile',
+ * });
+ * ```
+ */
+export function createProfileMutation(config, queryClient, activeSessionId) {
+  const {
+    mutationFn,
+    mutationKey,
+    cancelQueryKeys = [],
+    optimisticUpdate,
+    errorMessage = 'Operation failed',
+    successMessage,
+    updateAuthStore = true,
+    invalidateUserQueries: shouldInvalidateUserQueries = true,
+    invalidateAccountQueries: shouldInvalidateAccountQueries = true,
+    onSuccess: customOnSuccess
+  } = config;
+  return {
+    mutationKey: [...mutationKey],
+    mutationFn,
+    onMutate: async variables => {
+      // Cancel queries that might conflict
+      await queryClient.cancelQueries({
+        queryKey: queryKeys.accounts.current(activeSessionId)
+      });
+      for (const key of cancelQueryKeys) {
+        await queryClient.cancelQueries({
+          queryKey: key
+        });
+      }
+
+      // Snapshot previous user data
+      const previousUser = queryClient.getQueryData(queryKeys.accounts.current(activeSessionId));
+
+      // Apply optimistic update if provided
+      if (previousUser && optimisticUpdate) {
+        const updates = optimisticUpdate(previousUser, variables);
+        const optimisticUser = {
+          ...previousUser,
+          ...updates
+        };
+        queryClient.setQueryData(queryKeys.accounts.current(activeSessionId), optimisticUser);
+        if (activeSessionId) {
+          queryClient.setQueryData(queryKeys.users.profile(activeSessionId), optimisticUser);
+        }
+      }
+      return {
+        previousUser
+      };
+    },
+    onError: (error, _variables, context) => {
+      // Rollback optimistic update
+      if (context?.previousUser) {
+        queryClient.setQueryData(queryKeys.accounts.current(activeSessionId), context.previousUser);
+        if (activeSessionId) {
+          queryClient.setQueryData(queryKeys.users.profile(activeSessionId), context.previousUser);
+        }
+      }
+
+      // Show error toast
+      const message = typeof errorMessage === 'function' ? errorMessage(error) : error instanceof Error ? error.message : errorMessage;
+      toast.error(message);
+    },
+    onSuccess: (data, variables) => {
+      // Update cache with server response
+      queryClient.setQueryData(queryKeys.accounts.current(activeSessionId), data);
+      if (activeSessionId) {
+        queryClient.setQueryData(queryKeys.users.profile(activeSessionId), data);
+      }
+
+      // Update authStore for immediate UI updates
+      if (updateAuthStore) {
+        useAuthStore.getState().setUser(data);
+      }
+
+      // Invalidate related queries
+      if (shouldInvalidateUserQueries) {
+        invalidateUserQueries(queryClient);
+      }
+      if (shouldInvalidateAccountQueries) {
+        invalidateAccountQueries(queryClient);
+      }
+
+      // Show success toast if configured
+      if (successMessage) {
+        toast.success(successMessage);
+      }
+
+      // Call custom onSuccess handler
+      if (customOnSuccess) {
+        customOnSuccess(data, variables, queryClient);
+      }
+    }
+  };
+}
+
+/**
+ * Configuration for creating a generic mutation (non-profile)
+ */
+
+/**
+ * Creates a generic mutation with optimistic updates
+ */
+export function createGenericMutation(config, queryClient) {
+  const {
+    mutationFn,
+    mutationKey,
+    queryKey,
+    optimisticData,
+    errorMessage = 'Operation failed',
+    successMessage,
+    invalidateQueries = []
+  } = config;
+  return {
+    mutationKey: [...mutationKey],
+    mutationFn,
+    onMutate: async variables => {
+      await queryClient.cancelQueries({
+        queryKey
+      });
+      const previous = queryClient.getQueryData(queryKey);
+      if (optimisticData) {
+        queryClient.setQueryData(queryKey, optimisticData(previous, variables));
+      }
+      return {
+        previous
+      };
+    },
+    onError: (error, _variables, context) => {
+      if (context?.previous !== undefined) {
+        queryClient.setQueryData(queryKey, context.previous);
+      }
+      toast.error(error instanceof Error ? error.message : errorMessage);
+    },
+    onSuccess: data => {
+      queryClient.setQueryData(queryKey, data);
+      for (const key of invalidateQueries) {
+        queryClient.invalidateQueries({
+          queryKey: key
+        });
+      }
+      if (successMessage) {
+        toast.success(successMessage);
+      }
+    }
+  };
+}
+//# sourceMappingURL=mutationFactory.js.map

package/lib/module/ui/hooks/mutations/mutationFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["queryKeys","invalidateAccountQueries","invalidateUserQueries","toast","useAuthStore","createProfileMutation","config","queryClient","activeSessionId","mutationFn","mutationKey","cancelQueryKeys","optimisticUpdate","errorMessage","successMessage","updateAuthStore","shouldInvalidateUserQueries","shouldInvalidateAccountQueries","onSuccess","customOnSuccess","onMutate","variables","cancelQueries","queryKey","accounts","current","key","previousUser","getQueryData","updates","optimisticUser","setQueryData","users","profile","onError","error","_variables","context","message","Error","data","getState","setUser","success","createGenericMutation","optimisticData","invalidateQueries","previous","undefined"],"sourceRoot":"../../../../../src","sources":["ui/hooks/mutations/mutationFactory.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,SAASA,SAAS,EAAEC,wBAAwB,EAAEC,qBAAqB,QAAQ,yBAAsB;AACjG,SAASC,KAAK,QAAQ,cAAc;AACpC,SAASC,YAAY,QAAQ,2BAAwB;;AAErD;AACA;AACA;;AA2BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,MAA+C,EAC/CC,WAAwB,EACxBC,eAA8B,EACwC;EACtE,MAAM;IACJC,UAAU;IACVC,WAAW;IACXC,eAAe,GAAG,EAAE;IACpBC,gBAAgB;IAChBC,YAAY,GAAG,kBAAkB;IACjCC,cAAc;IACdC,eAAe,GAAG,IAAI;IACtBb,qBAAqB,EAAEc,2BAA2B,GAAG,IAAI;IACzDf,wBAAwB,EAAEgB,8BAA8B,GAAG,IAAI;IAC/DC,SAAS,EAAEC;EACb,CAAC,GAAGb,MAAM;EAEV,OAAO;IACLI,WAAW,EAAE,CAAC,GAAGA,WAAW,CAAC;IAC7BD,UAAU;IAEVW,QAAQ,EAAE,MAAOC,SAAS,IAAK;MAC7B;MACA,MAAMd,WAAW,CAACe,aAAa,CAAC;QAAEC,QAAQ,EAAEvB,SAAS,CAACwB,QAAQ,CAACC,OAAO,CAACjB,eAAe;MAAE,CAAC,CAAC;MAC1F,KAAK,MAAMkB,GAAG,IAAIf,eAAe,EAAE;QACjC,MAAMJ,WAAW,CAACe,aAAa,CAAC;UAAEC,QAAQ,EAAEG;QAAI,CAAC,CAAC;MACpD;;MAEA;MACA,MAAMC,YAAY,GAAGpB,WAAW,CAACqB,YAAY,CAAO5B,SAAS,CAACwB,QAAQ,CAACC,OAAO,CAACjB,eAAe,CAAC,CAAC;;MAEhG;MACA,IAAImB,YAAY,IAAIf,gBAAgB,EAAE;QACpC,MAAMiB,OAAO,GAAGjB,gBAAgB,CAACe,YAAY,EAAEN,SAAS,CAAC;QACzD,MAAMS,cAAc,GAAG;UAAE,GAAGH,YAAY;UAAE,GAAGE;QAAQ,CAAC;QAEtDtB,WAAW,CAACwB,YAAY,CAAO/B,SAAS,CAACwB,QAAQ,CAACC,OAAO,CAACjB,eAAe,CAAC,EAAEsB,cAAc,CAAC;QAE3F,IAAItB,eAAe,EAAE;UACnBD,WAAW,CAACwB,YAAY,CAAO/B,SAAS,CAACgC,KAAK,CAACC,OAAO,CAACzB,eAAe,CAAC,EAAEsB,cAAc,CAAC;QAC1F;MACF;MAEA,OAAO;QAAEH;MAAa,CAAC;IACzB,CAAC;IAEDO,OAAO,EAAEA,CAACC,KAAK,EAAEC,UAAU,EAAEC,OAAO,KAAK;MACvC;MACA,IAAIA,OAAO,EAAEV,YAAY,EAAE;QACzBpB,WAAW,CAACwB,YAAY,CAAC/B,SAAS,CAACwB,QAAQ,CAACC,OAAO,CAACjB,eAAe,CAAC,EAAE6B,OAAO,CAACV,YAAY,CAAC;QAC3F,IAAInB,eAAe,EAAE;UACnBD,WAAW,CAACwB,YAAY,CAAC/B,SAAS,CAACgC,KAAK,CAACC,OAAO,CAACzB,eAAe,CAAC,EAAE6B,OAAO,CAACV,YAAY,CAAC;QAC1F;MACF;;MAEA;MACA,MAAMW,OAAO,GAAG,OAAOzB,YAAY,KAAK,UAAU,GAC9CA,YAAY,CAACsB,KAAK,CAAC,GAClBA,KAAK,YAAYI,KAAK,GAAGJ,KAAK,CAACG,OAAO,GAAGzB,YAAa;MAC3DV,KAAK,CAACgC,KAAK,CAACG,OAAO,CAAC;IACtB,CAAC;IAEDpB,SAAS,EAAEA,CAACsB,IAAI,EAAEnB,SAAS,KAAK;MAC9B;MACAd,WAAW,CAACwB,YAAY,CAAC/B,SAAS,CAACwB,QAAQ,CAACC,OAAO,CAACjB,eAAe,CAAC,EAAEgC,IAAI,CAAC;MAC3E,IAAIhC,eAAe,EAAE;QACnBD,WAAW,CAACwB,YAAY,CAAC/B,SAAS,CAACgC,KAAK,CAACC,OAAO,CAACzB,eAAe,CAAC,EAAEgC,IAAI,CAAC;MAC1E;;MAEA;MACA,IAAIzB,eAAe,EAAE;QACnBX,YAAY,CAACqC,QAAQ,CAAC,CAAC,CAACC,OAAO,CAACF,IAAI,CAAC;MACvC;;MAEA;MACA,IAAIxB,2BAA2B,EAAE;QAC/Bd,qBAAqB,CAACK,WAAW,CAAC;MACpC;MACA,IAAIU,8BAA8B,EAAE;QAClChB,wBAAwB,CAACM,WAAW,CAAC;MACvC;;MAEA;MACA,IAAIO,cAAc,EAAE;QAClBX,KAAK,CAACwC,OAAO,CAAC7B,cAAc,CAAC;MAC/B;;MAEA;MACA,IAAIK,eAAe,EAAE;QACnBA,eAAe,CAACqB,IAAI,EAAEnB,SAAS,EAAEd,WAAW,CAAC;MAC/C;IACF;EACF,CAAC;AACH;;AAEA;AACA;AACA;;AAqBA;AACA;AACA;AACA,OAAO,SAASqC,qBAAqBA,CACnCtC,MAAsE,EACtEC,WAAwB,EAC4C;EACpE,MAAM;IACJE,UAAU;IACVC,WAAW;IACXa,QAAQ;IACRsB,cAAc;IACdhC,YAAY,GAAG,kBAAkB;IACjCC,cAAc;IACdgC,iBAAiB,GAAG;EACtB,CAAC,GAAGxC,MAAM;EAEV,OAAO;IACLI,WAAW,EAAE,CAAC,GAAGA,WAAW,CAAC;IAC7BD,UAAU;IAEVW,QAAQ,EAAE,MAAOC,SAAS,IAAK;MAC7B,MAAMd,WAAW,CAACe,aAAa,CAAC;QAAEC;MAAS,CAAC,CAAC;MAC7C,MAAMwB,QAAQ,GAAGxC,WAAW,CAACqB,YAAY,CAAQL,QAAQ,CAAC;MAE1D,IAAIsB,cAAc,EAAE;QAClBtC,WAAW,CAACwB,YAAY,CAAQR,QAAQ,EAAEsB,cAAc,CAACE,QAAQ,EAAE1B,SAAS,CAAC,CAAC;MAChF;MAEA,OAAO;QAAE0B;MAAS,CAAC;IACrB,CAAC;IAEDb,OAAO,EAAEA,CAACC,KAAK,EAAEC,UAAU,EAAEC,OAAO,KAAK;MACvC,IAAIA,OAAO,EAAEU,QAAQ,KAAKC,SAAS,EAAE;QACnCzC,WAAW,CAACwB,YAAY,CAACR,QAAQ,EAAEc,OAAO,CAACU,QAAQ,CAAC;MACtD;MACA5C,KAAK,CAACgC,KAAK,CAACA,KAAK,YAAYI,KAAK,GAAGJ,KAAK,CAACG,OAAO,GAAGzB,YAAY,CAAC;IACpE,CAAC;IAEDK,SAAS,EAAGsB,IAAI,IAAK;MACnBjC,WAAW,CAACwB,YAAY,CAACR,QAAQ,EAAEiB,IAAI,CAAC;MAExC,KAAK,MAAMd,GAAG,IAAIoB,iBAAiB,EAAE;QACnCvC,WAAW,CAACuC,iBAAiB,CAAC;UAAEvB,QAAQ,EAAEG;QAAI,CAAC,CAAC;MAClD;MAEA,IAAIZ,cAAc,EAAE;QAClBX,KAAK,CAACwC,OAAO,CAAC7B,cAAc,CAAC;MAC/B;IACF;EACF,CAAC;AACH","ignoreList":[]}

package/lib/module/ui/hooks/mutations/mutationKeys.js

@@ -0,0 +1,36 @@
+"use strict";
+
+/**
+ * Stable mutation key factories.
+ *
+ * Mutations that may be queued while offline MUST declare a stable
+ * `mutationKey`. When the network comes back, TanStack Query resumes
+ * paused mutations grouped by key — so the keys here should be stable
+ * across renders and across reloads when persistence is enabled.
+ */
+
+export const mutationKeys = {
+  // Account-related writes
+  account: {
+    updateProfile: ['mutation', 'account', 'updateProfile'],
+    uploadAvatar: ['mutation', 'account', 'uploadAvatar'],
+    updateSettings: ['mutation', 'account', 'updateSettings'],
+    updatePrivacySettings: ['mutation', 'account', 'updatePrivacySettings'],
+    updateNotificationPreferences: ['mutation', 'account', 'updateNotificationPreferences'],
+    updateUserPreferences: ['mutation', 'account', 'updateUserPreferences'],
+    uploadFile: ['mutation', 'account', 'uploadFile']
+  },
+  // Session / device writes
+  session: {
+    switch: ['mutation', 'session', 'switch'],
+    logout: ['mutation', 'session', 'logout'],
+    logoutAll: ['mutation', 'session', 'logoutAll'],
+    updateDeviceName: ['mutation', 'session', 'updateDeviceName'],
+    removeDevice: ['mutation', 'session', 'removeDevice']
+  },
+  // Connected apps (OAuth grants)
+  connectedApps: {
+    revoke: ['mutation', 'connectedApps', 'revoke']
+  }
+};
+//# sourceMappingURL=mutationKeys.js.map

package/lib/module/ui/hooks/mutations/mutationKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mutationKeys","account","updateProfile","uploadAvatar","updateSettings","updatePrivacySettings","updateNotificationPreferences","updateUserPreferences","uploadFile","session","switch","logout","logoutAll","updateDeviceName","removeDevice","connectedApps","revoke"],"sourceRoot":"../../../../../src","sources":["ui/hooks/mutations/mutationKeys.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAMA,YAAY,GAAG;EAC1B;EACAC,OAAO,EAAE;IACPC,aAAa,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAU;IAChEC,YAAY,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,CAAU;IAC9DC,cAAc,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAU;IAClEC,qBAAqB,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,uBAAuB,CAAU;IAChFC,6BAA6B,EAAE,CAC7B,UAAU,EACV,SAAS,EACT,+BAA+B,CACvB;IACVC,qBAAqB,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,uBAAuB,CAAU;IAChFC,UAAU,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY;EAClD,CAAC;EAED;EACAC,OAAO,EAAE;IACPC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAU;IAClDC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAU;IAClDC,SAAS,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAU;IACxDC,gBAAgB,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAU;IACtEC,YAAY,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc;EACtD,CAAC;EAED;EACAC,aAAa,EAAE;IACbC,MAAM,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ;EAChD;AACF,CAAU","ignoreList":[]}