@oxyhq/services 30.0.0 → 30.1.0

package/lib/module/ui/oauth/oauthPopupMessages.js

@@ -0,0 +1,144 @@
+"use strict";
+
+/**
+ * Runtime validation for the popup OAuth `postMessage` channel.
+ *
+ * Everything arriving on `window`'s `message` event is untrusted: any frame on
+ * the page, any other popup, and any browser extension can post to us. This
+ * module is the ONLY place that decides whether an incoming event is a genuine
+ * authorization response, and it answers with a value — never a thrown error.
+ *
+ * A message is accepted only when ALL of these hold:
+ *   1. `event.origin` is EXACTLY the authorize endpoint's origin,
+ *   2. `event.source` is the exact `Window` reference we opened,
+ *   3. `event.data` matches one of the two frozen message shapes,
+ *   4. the `state` it carries matches the one this RP sent.
+ *
+ * Failing (1)–(3) is indistinguishable from unrelated page traffic, so the
+ * message is IGNORED and the flow keeps waiting. Failing (4) means our own
+ * popup answered a different request than the one in flight, which is terminal:
+ * it is reported as a mismatch rather than left to hang until the timeout.
+ */
+
+import { logger } from '@oxyhq/core';
+/** `postMessage` discriminator for a successful authorization. */
+export const OXY_OAUTH_CODE_MESSAGE_TYPE = 'oxy:oauth:code';
+
+/** `postMessage` discriminator for a typed OAuth failure. */
+export const OXY_OAUTH_ERROR_MESSAGE_TYPE = 'oxy:oauth:error';
+
+/** Verdict for one incoming `message` event. */
+
+/** What {@link readOAuthPopupMessage} validates an event against. */
+
+function isNonEmptyString(value) {
+  return typeof value === 'string' && value.length > 0;
+}
+
+/**
+ * Reference equality across two `unknown` values.
+ *
+ * `event.source` is a `WindowProxy` and {@link OAuthPopupHandle} is a narrow
+ * structural type, so comparing them directly is a type error. Widening both to
+ * `unknown` keeps the check a plain identity comparison — which is exactly the
+ * security property we want — without a cast.
+ */
+function isSameWindowReference(a, b) {
+  return a === b;
+}
+
+/**
+ * Parse untrusted `event.data` into one of the two frozen message shapes, or
+ * `null` when it is anything else (including `null`, primitives, arrays, and
+ * objects with missing/wrong-typed fields).
+ *
+ * Unknown extra properties are tolerated but never read: only the fields below
+ * are ever surfaced, so a hostile sender cannot smuggle values past this point.
+ */
+export function parseOAuthPopupMessage(data) {
+  if (typeof data !== 'object' || data === null || Array.isArray(data)) return null;
+  const record = data;
+  if (record.type === OXY_OAUTH_CODE_MESSAGE_TYPE) {
+    if (!isNonEmptyString(record.code) || !isNonEmptyString(record.state)) return null;
+    return {
+      type: OXY_OAUTH_CODE_MESSAGE_TYPE,
+      code: record.code,
+      state: record.state
+    };
+  }
+  if (record.type === OXY_OAUTH_ERROR_MESSAGE_TYPE) {
+    if (!isNonEmptyString(record.error)) return null;
+    return {
+      type: OXY_OAUTH_ERROR_MESSAGE_TYPE,
+      error: record.error,
+      ...(isNonEmptyString(record.errorDescription) ? {
+        errorDescription: record.errorDescription
+      } : {}),
+      ...(isNonEmptyString(record.state) ? {
+        state: record.state
+      } : {})
+    };
+  }
+  return null;
+}
+
+/**
+ * Classify one `message` event against the in-flight authorize request.
+ *
+ * Never throws. See the module header for the acceptance rules.
+ */
+export function readOAuthPopupMessage(event, context) {
+  // These two are a PAIR, and the source check is load-bearing rather than
+  // belt-and-braces. `expectedOrigin` is `new URL(authorizeUrl).origin`, and
+  // `authorizeBaseUrl` is app-configurable — a non-http(s) value makes that
+  // expression the literal string `"null"`, the opaque origin, which is also
+  // what a browser reports as `event.origin` for EVERY sandboxed iframe,
+  // `data:` document and `file:` page. The origin check stops discriminating at
+  // that point and the source check is the only thing still refusing them.
+  // Do not collapse them into one, and do not drop the source check as
+  // redundant with the origin check: it is not, in the one case that matters.
+  if (event.origin !== context.expectedOrigin) return {
+    kind: 'ignore'
+  };
+  if (!isSameWindowReference(event.source, context.popup)) return {
+    kind: 'ignore'
+  };
+  const message = parseOAuthPopupMessage(event.data);
+  if (!message) {
+    // Origin and source matched, so this came from the IdP window we opened —
+    // a shape we cannot read is worth a breadcrumb, unlike ordinary page noise.
+    logger.debug('Ignored an unrecognised message from the OAuth popup', {
+      component: 'oauthPopupMessages'
+    });
+    return {
+      kind: 'ignore'
+    };
+  }
+  if (message.type === OXY_OAUTH_CODE_MESSAGE_TYPE) {
+    if (message.state !== context.expectedState) return {
+      kind: 'state-mismatch'
+    };
+    return {
+      kind: 'code',
+      code: message.code,
+      state: message.state
+    };
+  }
+
+  // An error MAY carry `state` (the IdP omits it when the request never got far
+  // enough to bind one). When present it must match: a foreign error must not be
+  // able to end an unrelated in-flight sign-in.
+  if (message.state !== undefined && message.state !== context.expectedState) {
+    return {
+      kind: 'state-mismatch'
+    };
+  }
+  return {
+    kind: 'oauth-error',
+    error: message.error,
+    ...(message.errorDescription ? {
+      errorDescription: message.errorDescription
+    } : {})
+  };
+}
+//# sourceMappingURL=oauthPopupMessages.js.map

package/lib/module/ui/oauth/oauthPopupMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["logger","OXY_OAUTH_CODE_MESSAGE_TYPE","OXY_OAUTH_ERROR_MESSAGE_TYPE","isNonEmptyString","value","length","isSameWindowReference","a","b","parseOAuthPopupMessage","data","Array","isArray","record","type","code","state","error","errorDescription","readOAuthPopupMessage","event","context","origin","expectedOrigin","kind","source","popup","message","debug","component","expectedState","undefined"],"sourceRoot":"../../../../src","sources":["ui/oauth/oauthPopupMessages.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,MAAM,QAAQ,aAAa;AAGpC;AACA,OAAO,MAAMC,2BAA2B,GAAG,gBAAgB;;AAE3D;AACA,OAAO,MAAMC,4BAA4B,GAAG,iBAAiB;;AAE7D;;AASA;;AAUA,SAASC,gBAAgBA,CAACC,KAAc,EAAmB;EACzD,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACC,MAAM,GAAG,CAAC;AACtD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,qBAAqBA,CAACC,CAAU,EAAEC,CAAU,EAAW;EAC9D,OAAOD,CAAC,KAAKC,CAAC;AAChB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CAACC,IAAa,EAA0B;EAC5E,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAIA,IAAI,KAAK,IAAI,IAAIC,KAAK,CAACC,OAAO,CAACF,IAAI,CAAC,EAAE,OAAO,IAAI;EACjF,MAAMG,MAAM,GAAGH,IAA+B;EAE9C,IAAIG,MAAM,CAACC,IAAI,KAAKb,2BAA2B,EAAE;IAC/C,IAAI,CAACE,gBAAgB,CAACU,MAAM,CAACE,IAAI,CAAC,IAAI,CAACZ,gBAAgB,CAACU,MAAM,CAACG,KAAK,CAAC,EAAE,OAAO,IAAI;IAClF,OAAO;MAAEF,IAAI,EAAEb,2BAA2B;MAAEc,IAAI,EAAEF,MAAM,CAACE,IAAI;MAAEC,KAAK,EAAEH,MAAM,CAACG;IAAM,CAAC;EACtF;EAEA,IAAIH,MAAM,CAACC,IAAI,KAAKZ,4BAA4B,EAAE;IAChD,IAAI,CAACC,gBAAgB,CAACU,MAAM,CAACI,KAAK,CAAC,EAAE,OAAO,IAAI;IAChD,OAAO;MACLH,IAAI,EAAEZ,4BAA4B;MAClCe,KAAK,EAAEJ,MAAM,CAACI,KAAK;MACnB,IAAId,gBAAgB,CAACU,MAAM,CAACK,gBAAgB,CAAC,GACzC;QAAEA,gBAAgB,EAAEL,MAAM,CAACK;MAAiB,CAAC,GAC7C,CAAC,CAAC,CAAC;MACP,IAAIf,gBAAgB,CAACU,MAAM,CAACG,KAAK,CAAC,GAAG;QAAEA,KAAK,EAAEH,MAAM,CAACG;MAAM,CAAC,GAAG,CAAC,CAAC;IACnE,CAAC;EACH;EAEA,OAAO,IAAI;AACb;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,qBAAqBA,CACnCC,KAAmB,EACnBC,OAAiC,EACP;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,IAAID,KAAK,CAACE,MAAM,KAAKD,OAAO,CAACE,cAAc,EAAE,OAAO;IAAEC,IAAI,EAAE;EAAS,CAAC;EACtE,IAAI,CAAClB,qBAAqB,CAACc,KAAK,CAACK,MAAM,EAAEJ,OAAO,CAACK,KAAK,CAAC,EAAE,OAAO;IAAEF,IAAI,EAAE;EAAS,CAAC;EAElF,MAAMG,OAAO,GAAGlB,sBAAsB,CAACW,KAAK,CAACV,IAAI,CAAC;EAClD,IAAI,CAACiB,OAAO,EAAE;IACZ;IACA;IACA3B,MAAM,CAAC4B,KAAK,CACV,sDAAsD,EACtD;MAAEC,SAAS,EAAE;IAAqB,CACpC,CAAC;IACD,OAAO;MAAEL,IAAI,EAAE;IAAS,CAAC;EAC3B;EAEA,IAAIG,OAAO,CAACb,IAAI,KAAKb,2BAA2B,EAAE;IAChD,IAAI0B,OAAO,CAACX,KAAK,KAAKK,OAAO,CAACS,aAAa,EAAE,OAAO;MAAEN,IAAI,EAAE;IAAiB,CAAC;IAC9E,OAAO;MAAEA,IAAI,EAAE,MAAM;MAAET,IAAI,EAAEY,OAAO,CAACZ,IAAI;MAAEC,KAAK,EAAEW,OAAO,CAACX;IAAM,CAAC;EACnE;;EAEA;EACA;EACA;EACA,IAAIW,OAAO,CAACX,KAAK,KAAKe,SAAS,IAAIJ,OAAO,CAACX,KAAK,KAAKK,OAAO,CAACS,aAAa,EAAE;IAC1E,OAAO;MAAEN,IAAI,EAAE;IAAiB,CAAC;EACnC;EACA,OAAO;IACLA,IAAI,EAAE,aAAa;IACnBP,KAAK,EAAEU,OAAO,CAACV,KAAK;IACpB,IAAIU,OAAO,CAACT,gBAAgB,GAAG;MAAEA,gBAAgB,EAAES,OAAO,CAACT;IAAiB,CAAC,GAAG,CAAC,CAAC;EACpF,CAAC;AACH","ignoreList":[]}

package/lib/module/ui/oauth/types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=types.js.map

package/lib/module/ui/oauth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["ui/oauth/types.ts"],"mappings":"","ignoreList":[]}

package/lib/module/ui/runtime/createOxyRuntime.js

@@ -0,0 +1,430 @@
+"use strict";
+
+import { accountIdsOf, activeSessionIdOf, activeUserOf, deviceStateToClientSessions, mergeSessions as mergeSessionLists, normalizeAndSortSessions, normalizeUserIdentity, resolveActiveContext, sessionsArraysEqual } from '@oxyhq/core';
+
+/**
+ * A change of SUBJECT — the account the session acts as.
+ *
+ * `previous === null` is an initial sign-in (nothing account-scoped is cached
+ * yet); `next === null` is a sign-out; both non-null and different is a switch,
+ * the only case that must invalidate a warm cache.
+ */
+
+/**
+ * The three seams the runtime reads, declared STRUCTURALLY rather than as the
+ * concrete `OxyServices` / `SessionClient` / `SessionClientHost` types.
+ *
+ * The real classes satisfy them, so nothing changes at the call site — but a
+ * test can hand the runtime three plain objects instead of casting a stub
+ * through `unknown`, which is how a stub silently drifts from the interface it
+ * pretends to implement.
+ */
+
+/**
+ * The headless session runtime (ADR 0004).
+ *
+ * It owns the session facts and the ORDER in which they become visible. React
+ * is an adapter: the provider hands components this object and they subscribe
+ * with selectors, so an unrelated change (a locale, a dialog opening) cannot
+ * rebuild an auth consumer's view.
+ */
+
+const EMPTY_SESSIONS = [];
+function deriveStatus(facts) {
+  if (!facts.authResolved) {
+    return 'booting';
+  }
+  if (facts.account !== null) {
+    return 'authenticated';
+  }
+  return facts.error !== null ? 'error' : 'signed_out';
+}
+function deriveTokenStatus(facts) {
+  if (facts.hasAccessToken && facts.tokenReady) {
+    return 'ready';
+  }
+  if (facts.account !== null || facts.hasAccessToken) {
+    return 'refreshing';
+  }
+  return 'missing';
+}
+
+/**
+ * The actor behind the active context, resolved to a full `User`.
+ *
+ * Falls back to the subject: on a device with no directory, and on any
+ * non-delegated context, the two ARE the same person, and saying so is more
+ * useful than a `null` every caller would have to special-case.
+ */
+function derivePrincipal(activeContext, profiles, account) {
+  if (activeContext === null) {
+    return account;
+  }
+  return profiles.get(activeContext.actor.userId) ?? account;
+}
+export function createOxyRuntime(config) {
+  const {
+    oxyServices,
+    sessionClient,
+    sessionClientHost,
+    identity,
+    onSubjectChange,
+    onDeviceEmpty,
+    onSessionsProjected,
+    onIdentityUnbound,
+    logger
+  } = config;
+  const facts = {
+    deviceState: null,
+    directory: null,
+    profiles: new Map(),
+    sessions: EMPTY_SESSIONS,
+    activeSessionId: null,
+    account: null,
+    pinnedAccountId: null,
+    isLoading: false,
+    error: null,
+    storageReady: false,
+    tokenReady: true,
+    hasAccessToken: Boolean(oxyServices.getAccessToken()),
+    authResolved: false,
+    switching: false
+  };
+  const listeners = new Set();
+  let snapshot = buildSnapshot();
+  /**
+   * Depth of the current transition. Nested mutations publish ONCE, at the
+   * outermost boundary — a projection that sets sessions, the active id and the
+   * account must not wake React three times with two of them half-applied.
+   */
+  let depth = 0;
+  let dirty = false;
+  /** The subject as it stood when the OUTERMOST transition opened. */
+  let subjectAtEntry = null;
+  function buildSnapshot() {
+    const activeContext = resolveActiveContext(facts.directory);
+    return Object.freeze({
+      status: deriveStatus(facts),
+      device: facts.directory,
+      deviceState: facts.deviceState,
+      activeContext,
+      principal: derivePrincipal(activeContext, facts.profiles, facts.account),
+      account: facts.account,
+      tokenStatus: deriveTokenStatus(facts),
+      authResolved: facts.authResolved,
+      switching: facts.switching,
+      error: facts.error === null ? null : {
+        message: facts.error,
+        code: 'oxy_runtime_error'
+      },
+      sessions: facts.sessions,
+      activeSessionId: facts.activeSessionId,
+      isLoading: facts.isLoading,
+      storageReady: facts.storageReady,
+      hasAccessToken: facts.hasAccessToken,
+      tokenReady: facts.tokenReady
+    });
+  }
+  function notify() {
+    for (const listener of [...listeners]) {
+      try {
+        listener();
+      } catch (error) {
+        logger('An OxyRuntime subscriber threw', error);
+      }
+    }
+  }
+
+  /**
+   * The ONE ordered transition. Every fact change goes through here, so the
+   * sequence ADR 0002 mandates holds for a local switch, a socket push, a cold
+   * boot and a cross-tab wake alike:
+   *
+   *   the bearer is already committed (SessionClient awaits its mint before it
+   *   calls us) → reset account-scoped caches → publish the snapshot → notify.
+   *
+   * Publishing before the reset would let a woken component read a cache entry
+   * belonging to the previous subject while holding the new subject's bearer,
+   * which is the account-switch race in its quietest form: no error, just the
+   * wrong person's data.
+   */
+  function transition(mutate) {
+    if (depth === 0) {
+      subjectAtEntry = facts.account?.id ?? null;
+    }
+    depth += 1;
+    try {
+      mutate();
+    } finally {
+      depth -= 1;
+    }
+    if (depth > 0) {
+      // A nested transition publishes nothing and fires no reset: the subject
+      // is compared once, at the outermost boundary, so a projection that
+      // touches the account twice cannot reset the caches twice.
+      return;
+    }
+    const nextSubject = facts.account?.id ?? null;
+    if (nextSubject !== subjectAtEntry) {
+      dirty = true;
+      onSubjectChange?.({
+        previous: subjectAtEntry,
+        next: nextSubject
+      });
+    }
+    if (!dirty) {
+      return;
+    }
+    dirty = false;
+    snapshot = buildSnapshot();
+    notify();
+  }
+
+  /** Mark the snapshot stale from inside a transition. */
+  function touch() {
+    dirty = true;
+  }
+  function setSessions(next) {
+    if (sessionsArraysEqual(facts.sessions, next)) {
+      return;
+    }
+    facts.sessions = next;
+    touch();
+  }
+  function setActiveSessionIdFact(sessionId) {
+    if (facts.activeSessionId === sessionId) {
+      return;
+    }
+    facts.activeSessionId = sessionId;
+    touch();
+  }
+
+  /**
+   * The one place a `User` becomes THE subject — and the one place identity is
+   * normalised, so a profile arriving as `_id` from one lane and `id` from
+   * another can never produce two accounts that are the same person.
+   */
+  function setAccountFact(user) {
+    if (user === null) {
+      if (facts.account === null) {
+        return;
+      }
+      facts.account = null;
+      touch();
+      return;
+    }
+    if (facts.account === user) {
+      return;
+    }
+    facts.account = normalizeUserIdentity(user);
+    touch();
+  }
+
+  // ── Projection ───────────────────────────────────────────────────────────
+
+  async function reconcileFromClient() {
+    const state = sessionClient.getState();
+    if (state === null) {
+      return;
+    }
+    if (state.accounts.length === 0) {
+      sessionClientHost.setCurrentAccountId(null);
+      await onDeviceEmpty();
+      return;
+    }
+    // Capture the revision this projection is for, then bail after the async
+    // profile fetch if a fresher state has landed — last-writer-wins, so two
+    // overlapping projections can never publish in the wrong order.
+    const capturedRevision = state.revision;
+    // Resolve the pin BEFORE the fetch (memoised: one storage + keychain read
+    // per boot) so the first pass over a freshly applied state is already bound.
+    // Deferring it would let a sibling app's switch render once as this
+    // client's user before the pin corrected it.
+    const pinnedAccountId = identity ? await identity.ensurePinnedAccountId() : null;
+    const ids = accountIdsOf(state);
+    let users = [];
+    try {
+      users = ids.length > 0 ? await oxyServices.getUsersByIds(ids) : [];
+    } catch (fetchError) {
+      logger('Failed to resolve account profiles during the device projection', fetchError);
+      return;
+    }
+    const latest = sessionClient.getState();
+    if (!latest || latest.revision !== capturedRevision) {
+      return;
+    }
+    if (identity && (pinnedAccountId === null || activeSessionIdOf(latest, pinnedAccountId) === null)) {
+      // Either no verified pin, or the pinned account left this device's session
+      // set. Leave the current projection untouched and re-derive from the key.
+      onIdentityUnbound?.(identity, latest.revision);
+      return;
+    }
+    const directory = sessionClient.getDirectory();
+    transition(() => {
+      facts.pinnedAccountId = pinnedAccountId;
+      if (facts.deviceState !== latest) {
+        facts.deviceState = latest;
+        touch();
+      }
+      if (facts.directory !== directory) {
+        facts.directory = directory;
+        touch();
+      }
+      for (const resolved of users) {
+        facts.profiles.set(resolved.id, resolved);
+      }
+      const projected = normalizeAndSortSessions(deviceStateToClientSessions(latest, facts.profiles, pinnedAccountId), facts.activeSessionId, false);
+      setSessions(projected);
+      onSessionsProjected?.(projected.map(session => session.sessionId));
+      setActiveSessionIdFact(activeSessionIdOf(latest, pinnedAccountId));
+      const activeUser = activeUserOf(latest, facts.profiles, pinnedAccountId);
+      if (activeUser) {
+        setAccountFact(activeUser);
+      }
+    });
+    // The host's current account feeds the socket handshake and the bearer's
+    // token-account comparisons, so it tracks the PIN — never the account
+    // another app switched the device to.
+    sessionClientHost.setCurrentAccountId(pinnedAccountId ?? latest.activeAccountId);
+  }
+  return {
+    getSnapshot: () => snapshot,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    start() {
+      return sessionClient.subscribe(() => {
+        void reconcileFromClient().catch(error => {
+          logger('Failed to project a device-state transition', error);
+        });
+      });
+    },
+    reconcileFromClient,
+    batch(mutate) {
+      transition(mutate);
+    },
+    async activateContext(contextId) {
+      // `switching` is published BEFORE the request so a switcher can disable
+      // its rows for the whole round trip, and cleared in `finally` so a
+      // refused activation does not strand it on.
+      this.setSwitching(true);
+      try {
+        await sessionClient.activateContext(contextId);
+        await reconcileFromClient();
+      } finally {
+        this.setSwitching(false);
+      }
+    },
+    async signOutContext(contextId) {
+      await sessionClient.signOutContext(contextId);
+      await reconcileFromClient();
+    },
+    async signOutPrincipal(principalId) {
+      await sessionClient.signOutPrincipal(principalId);
+      await reconcileFromClient();
+    },
+    async refreshDirectory() {
+      await sessionClient.refreshDirectory();
+      const directory = sessionClient.getDirectory();
+      transition(() => {
+        if (facts.directory === directory) {
+          return;
+        }
+        facts.directory = directory;
+        touch();
+      });
+    },
+    setAccount(user) {
+      transition(() => {
+        setAccountFact(user);
+        if (facts.isLoading) {
+          facts.isLoading = false;
+          touch();
+        }
+        if (facts.error !== null) {
+          facts.error = null;
+          touch();
+        }
+        facts.profiles.set(user.id, user);
+      });
+    },
+    setLoading(loading) {
+      transition(() => {
+        if (facts.isLoading === loading) return;
+        facts.isLoading = loading;
+        touch();
+      });
+    },
+    setError(error) {
+      transition(() => {
+        if (facts.error === error) return;
+        facts.error = error;
+        touch();
+      });
+    },
+    setStorageReady(ready) {
+      transition(() => {
+        if (facts.storageReady === ready) return;
+        facts.storageReady = ready;
+        touch();
+      });
+    },
+    setTokenReady(ready) {
+      transition(() => {
+        if (facts.tokenReady === ready) return;
+        facts.tokenReady = ready;
+        touch();
+      });
+    },
+    setHasAccessToken(has) {
+      transition(() => {
+        if (facts.hasAccessToken === has) return;
+        facts.hasAccessToken = has;
+        touch();
+      });
+    },
+    setSwitching(switching) {
+      transition(() => {
+        if (facts.switching === switching) return;
+        facts.switching = switching;
+        touch();
+      });
+    },
+    markAuthResolved() {
+      transition(() => {
+        if (facts.authResolved) return;
+        facts.authResolved = true;
+        facts.tokenReady = true;
+        touch();
+      });
+    },
+    mergeSessions(incoming, options = {}) {
+      transition(() => {
+        const processed = options.merge ? mergeSessionLists(facts.sessions, incoming, facts.activeSessionId, false) : normalizeAndSortSessions(incoming, facts.activeSessionId, false);
+        onSessionsProjected?.([...processed.map(session => session.sessionId), ...(options.preserveSessionIds ?? [])]);
+        setSessions(processed);
+      });
+    },
+    setActiveSessionId(sessionId) {
+      transition(() => {
+        setActiveSessionIdFact(sessionId);
+      });
+    },
+    clearSession() {
+      transition(() => {
+        setSessions(EMPTY_SESSIONS);
+        setActiveSessionIdFact(null);
+        setAccountFact(null);
+        facts.deviceState = null;
+        facts.directory = null;
+        facts.profiles = new Map();
+        facts.pinnedAccountId = null;
+        touch();
+      });
+    }
+  };
+}
+//# sourceMappingURL=createOxyRuntime.js.map

package/lib/module/ui/runtime/createOxyRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["accountIdsOf","activeSessionIdOf","activeUserOf","deviceStateToClientSessions","mergeSessions","mergeSessionLists","normalizeAndSortSessions","normalizeUserIdentity","resolveActiveContext","sessionsArraysEqual","EMPTY_SESSIONS","deriveStatus","facts","authResolved","account","error","deriveTokenStatus","hasAccessToken","tokenReady","derivePrincipal","activeContext","profiles","get","actor","userId","createOxyRuntime","config","oxyServices","sessionClient","sessionClientHost","identity","onSubjectChange","onDeviceEmpty","onSessionsProjected","onIdentityUnbound","logger","deviceState","directory","Map","sessions","activeSessionId","pinnedAccountId","isLoading","storageReady","Boolean","getAccessToken","switching","listeners","Set","snapshot","buildSnapshot","depth","dirty","subjectAtEntry","Object","freeze","status","device","principal","tokenStatus","message","code","notify","listener","transition","mutate","id","nextSubject","previous","next","touch","setSessions","setActiveSessionIdFact","sessionId","setAccountFact","user","reconcileFromClient","state","getState","accounts","length","setCurrentAccountId","capturedRevision","revision","ensurePinnedAccountId","ids","users","getUsersByIds","fetchError","latest","getDirectory","resolved","set","projected","map","session","activeUser","activeAccountId","getSnapshot","subscribe","add","delete","start","catch","batch","activateContext","contextId","setSwitching","signOutContext","signOutPrincipal","principalId","refreshDirectory","setAccount","setLoading","loading","setError","setStorageReady","ready","setTokenReady","setHasAccessToken","has","markAuthResolved","incoming","options","processed","merge","preserveSessionIds","setActiveSessionId","clearSession"],"sourceRoot":"../../../../src","sources":["ui/runtime/createOxyRuntime.ts"],"mappings":";;AAEA,SACEA,YAAY,EACZC,iBAAiB,EACjBC,YAAY,EACZC,2BAA2B,EAC3BC,aAAa,IAAIC,iBAAiB,EAClCC,wBAAwB,EACxBC,qBAAqB,EACrBC,oBAAoB,EACpBC,mBAAmB,QACd,aAAa;;AAIpB;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAuDA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AA2FA,MAAMC,cAA+B,GAAG,EAAE;AAE1C,SAASC,YAAYA,CAACC,KAAmB,EAAoB;EAC3D,IAAI,CAACA,KAAK,CAACC,YAAY,EAAE;IACvB,OAAO,SAAS;EAClB;EACA,IAAID,KAAK,CAACE,OAAO,KAAK,IAAI,EAAE;IAC1B,OAAO,eAAe;EACxB;EACA,OAAOF,KAAK,CAACG,KAAK,KAAK,IAAI,GAAG,OAAO,GAAG,YAAY;AACtD;AAEA,SAASC,iBAAiBA,CAACJ,KAAmB,EAAkB;EAC9D,IAAIA,KAAK,CAACK,cAAc,IAAIL,KAAK,CAACM,UAAU,EAAE;IAC5C,OAAO,OAAO;EAChB;EACA,IAAIN,KAAK,CAACE,OAAO,KAAK,IAAI,IAAIF,KAAK,CAACK,cAAc,EAAE;IAClD,OAAO,YAAY;EACrB;EACA,OAAO,SAAS;AAClB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASE,eAAeA,CACtBC,aAAmC,EACnCC,QAA2B,EAC3BP,OAAoB,EACP;EACb,IAAIM,aAAa,KAAK,IAAI,EAAE;IAC1B,OAAON,OAAO;EAChB;EACA,OAAOO,QAAQ,CAACC,GAAG,CAACF,aAAa,CAACG,KAAK,CAACC,MAAM,CAAC,IAAIV,OAAO;AAC5D;AAEA,OAAO,SAASW,gBAAgBA,CAACC,MAAwB,EAAc;EACrE,MAAM;IACJC,WAAW;IACXC,aAAa;IACbC,iBAAiB;IACjBC,QAAQ;IACRC,eAAe;IACfC,aAAa;IACbC,mBAAmB;IACnBC,iBAAiB;IACjBC;EACF,CAAC,GAAGT,MAAM;EAEV,MAAMd,KAAmB,GAAG;IAC1BwB,WAAW,EAAE,IAAI;IACjBC,SAAS,EAAE,IAAI;IACfhB,QAAQ,EAAE,IAAIiB,GAAG,CAAC,CAAC;IACnBC,QAAQ,EAAE7B,cAAc;IACxB8B,eAAe,EAAE,IAAI;IACrB1B,OAAO,EAAE,IAAI;IACb2B,eAAe,EAAE,IAAI;IACrBC,SAAS,EAAE,KAAK;IAChB3B,KAAK,EAAE,IAAI;IACX4B,YAAY,EAAE,KAAK;IACnBzB,UAAU,EAAE,IAAI;IAChBD,cAAc,EAAE2B,OAAO,CAACjB,WAAW,CAACkB,cAAc,CAAC,CAAC,CAAC;IACrDhC,YAAY,EAAE,KAAK;IACnBiC,SAAS,EAAE;EACb,CAAC;EAED,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAAa,CAAC;EACvC,IAAIC,QAAQ,GAAGC,aAAa,CAAC,CAAC;EAC9B;AACF;AACA;AACA;AACA;EACE,IAAIC,KAAK,GAAG,CAAC;EACb,IAAIC,KAAK,GAAG,KAAK;EACjB;EACA,IAAIC,cAA6B,GAAG,IAAI;EAExC,SAASH,aAAaA,CAAA,EAAuB;IAC3C,MAAM9B,aAAa,GAAGZ,oBAAoB,CAACI,KAAK,CAACyB,SAAS,CAAC;IAC3D,OAAOiB,MAAM,CAACC,MAAM,CAAC;MACnBC,MAAM,EAAE7C,YAAY,CAACC,KAAK,CAAC;MAC3B6C,MAAM,EAAE7C,KAAK,CAACyB,SAAS;MACvBD,WAAW,EAAExB,KAAK,CAACwB,WAAW;MAC9BhB,aAAa;MACbsC,SAAS,EAAEvC,eAAe,CAACC,aAAa,EAAER,KAAK,CAACS,QAAQ,EAAET,KAAK,CAACE,OAAO,CAAC;MACxEA,OAAO,EAAEF,KAAK,CAACE,OAAO;MACtB6C,WAAW,EAAE3C,iBAAiB,CAACJ,KAAK,CAAC;MACrCC,YAAY,EAAED,KAAK,CAACC,YAAY;MAChCiC,SAAS,EAAElC,KAAK,CAACkC,SAAS;MAC1B/B,KAAK,EAAEH,KAAK,CAACG,KAAK,KAAK,IAAI,GAAG,IAAI,GAAG;QAAE6C,OAAO,EAAEhD,KAAK,CAACG,KAAK;QAAE8C,IAAI,EAAE;MAAoB,CAAC;MACxFtB,QAAQ,EAAE3B,KAAK,CAAC2B,QAAQ;MACxBC,eAAe,EAAE5B,KAAK,CAAC4B,eAAe;MACtCE,SAAS,EAAE9B,KAAK,CAAC8B,SAAS;MAC1BC,YAAY,EAAE/B,KAAK,CAAC+B,YAAY;MAChC1B,cAAc,EAAEL,KAAK,CAACK,cAAc;MACpCC,UAAU,EAAEN,KAAK,CAACM;IACpB,CAAC,CAAC;EACJ;EAEA,SAAS4C,MAAMA,CAAA,EAAS;IACtB,KAAK,MAAMC,QAAQ,IAAI,CAAC,GAAGhB,SAAS,CAAC,EAAE;MACrC,IAAI;QACFgB,QAAQ,CAAC,CAAC;MACZ,CAAC,CAAC,OAAOhD,KAAK,EAAE;QACdoB,MAAM,CAAC,gCAAgC,EAAEpB,KAAK,CAAC;MACjD;IACF;EACF;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,SAASiD,UAAUA,CAACC,MAAkB,EAAQ;IAC5C,IAAId,KAAK,KAAK,CAAC,EAAE;MACfE,cAAc,GAAGzC,KAAK,CAACE,OAAO,EAAEoD,EAAE,IAAI,IAAI;IAC5C;IACAf,KAAK,IAAI,CAAC;IACV,IAAI;MACFc,MAAM,CAAC,CAAC;IACV,CAAC,SAAS;MACRd,KAAK,IAAI,CAAC;IACZ;IACA,IAAIA,KAAK,GAAG,CAAC,EAAE;MACb;MACA;MACA;MACA;IACF;IACA,MAAMgB,WAAW,GAAGvD,KAAK,CAACE,OAAO,EAAEoD,EAAE,IAAI,IAAI;IAC7C,IAAIC,WAAW,KAAKd,cAAc,EAAE;MAClCD,KAAK,GAAG,IAAI;MACZrB,eAAe,GAAG;QAAEqC,QAAQ,EAAEf,cAAc;QAAEgB,IAAI,EAAEF;MAAY,CAAC,CAAC;IACpE;IACA,IAAI,CAACf,KAAK,EAAE;MACV;IACF;IACAA,KAAK,GAAG,KAAK;IACbH,QAAQ,GAAGC,aAAa,CAAC,CAAC;IAC1BY,MAAM,CAAC,CAAC;EACV;;EAEA;EACA,SAASQ,KAAKA,CAAA,EAAS;IACrBlB,KAAK,GAAG,IAAI;EACd;EAEA,SAASmB,WAAWA,CAACF,IAAqB,EAAQ;IAChD,IAAI5D,mBAAmB,CAACG,KAAK,CAAC2B,QAAQ,EAAE8B,IAAI,CAAC,EAAE;MAC7C;IACF;IACAzD,KAAK,CAAC2B,QAAQ,GAAG8B,IAAI;IACrBC,KAAK,CAAC,CAAC;EACT;EAEA,SAASE,sBAAsBA,CAACC,SAAwB,EAAQ;IAC9D,IAAI7D,KAAK,CAAC4B,eAAe,KAAKiC,SAAS,EAAE;MACvC;IACF;IACA7D,KAAK,CAAC4B,eAAe,GAAGiC,SAAS;IACjCH,KAAK,CAAC,CAAC;EACT;;EAEA;AACF;AACA;AACA;AACA;EACE,SAASI,cAAcA,CAACC,IAAiB,EAAQ;IAC/C,IAAIA,IAAI,KAAK,IAAI,EAAE;MACjB,IAAI/D,KAAK,CAACE,OAAO,KAAK,IAAI,EAAE;QAC1B;MACF;MACAF,KAAK,CAACE,OAAO,GAAG,IAAI;MACpBwD,KAAK,CAAC,CAAC;MACP;IACF;IACA,IAAI1D,KAAK,CAACE,OAAO,KAAK6D,IAAI,EAAE;MAC1B;IACF;IACA/D,KAAK,CAACE,OAAO,GAAGP,qBAAqB,CAACoE,IAAI,CAAC;IAC3CL,KAAK,CAAC,CAAC;EACT;;EAEA;;EAEA,eAAeM,mBAAmBA,CAAA,EAAkB;IAClD,MAAMC,KAAK,GAAGjD,aAAa,CAACkD,QAAQ,CAAC,CAAC;IACtC,IAAID,KAAK,KAAK,IAAI,EAAE;MAClB;IACF;IACA,IAAIA,KAAK,CAACE,QAAQ,CAACC,MAAM,KAAK,CAAC,EAAE;MAC/BnD,iBAAiB,CAACoD,mBAAmB,CAAC,IAAI,CAAC;MAC3C,MAAMjD,aAAa,CAAC,CAAC;MACrB;IACF;IACA;IACA;IACA;IACA,MAAMkD,gBAAgB,GAAGL,KAAK,CAACM,QAAQ;IACvC;IACA;IACA;IACA;IACA,MAAM1C,eAAe,GAAGX,QAAQ,GAAG,MAAMA,QAAQ,CAACsD,qBAAqB,CAAC,CAAC,GAAG,IAAI;IAChF,MAAMC,GAAG,GAAGrF,YAAY,CAAC6E,KAAK,CAAC;IAC/B,IAAIS,KAAa,GAAG,EAAE;IACtB,IAAI;MACFA,KAAK,GAAGD,GAAG,CAACL,MAAM,GAAG,CAAC,GAAG,MAAMrD,WAAW,CAAC4D,aAAa,CAACF,GAAG,CAAC,GAAG,EAAE;IACpE,CAAC,CAAC,OAAOG,UAAU,EAAE;MACnBrD,MAAM,CAAC,iEAAiE,EAAEqD,UAAU,CAAC;MACrF;IACF;IACA,MAAMC,MAAM,GAAG7D,aAAa,CAACkD,QAAQ,CAAC,CAAC;IACvC,IAAI,CAACW,MAAM,IAAIA,MAAM,CAACN,QAAQ,KAAKD,gBAAgB,EAAE;MACnD;IACF;IACA,IAAIpD,QAAQ,KAAKW,eAAe,KAAK,IAAI,IAAIxC,iBAAiB,CAACwF,MAAM,EAAEhD,eAAe,CAAC,KAAK,IAAI,CAAC,EAAE;MACjG;MACA;MACAP,iBAAiB,GAAGJ,QAAQ,EAAE2D,MAAM,CAACN,QAAQ,CAAC;MAC9C;IACF;IACA,MAAM9C,SAAS,GAAGT,aAAa,CAAC8D,YAAY,CAAC,CAAC;IAC9C1B,UAAU,CAAC,MAAM;MACfpD,KAAK,CAAC6B,eAAe,GAAGA,eAAe;MACvC,IAAI7B,KAAK,CAACwB,WAAW,KAAKqD,MAAM,EAAE;QAChC7E,KAAK,CAACwB,WAAW,GAAGqD,MAAM;QAC1BnB,KAAK,CAAC,CAAC;MACT;MACA,IAAI1D,KAAK,CAACyB,SAAS,KAAKA,SAAS,EAAE;QACjCzB,KAAK,CAACyB,SAAS,GAAGA,SAAS;QAC3BiC,KAAK,CAAC,CAAC;MACT;MACA,KAAK,MAAMqB,QAAQ,IAAIL,KAAK,EAAE;QAC5B1E,KAAK,CAACS,QAAQ,CAACuE,GAAG,CAACD,QAAQ,CAACzB,EAAE,EAAEyB,QAAQ,CAAC;MAC3C;MACA,MAAME,SAAS,GAAGvF,wBAAwB,CACxCH,2BAA2B,CAACsF,MAAM,EAAE7E,KAAK,CAACS,QAAQ,EAAEoB,eAAe,CAAC,EACpE7B,KAAK,CAAC4B,eAAe,EACrB,KACF,CAAC;MACD+B,WAAW,CAACsB,SAAS,CAAC;MACtB5D,mBAAmB,GAAG4D,SAAS,CAACC,GAAG,CAAEC,OAAO,IAAKA,OAAO,CAACtB,SAAS,CAAC,CAAC;MACpED,sBAAsB,CAACvE,iBAAiB,CAACwF,MAAM,EAAEhD,eAAe,CAAC,CAAC;MAClE,MAAMuD,UAAU,GAAG9F,YAAY,CAACuF,MAAM,EAAE7E,KAAK,CAACS,QAAQ,EAAEoB,eAAe,CAAC;MACxE,IAAIuD,UAAU,EAAE;QACdtB,cAAc,CAACsB,UAAU,CAAC;MAC5B;IACF,CAAC,CAAC;IACF;IACA;IACA;IACAnE,iBAAiB,CAACoD,mBAAmB,CAACxC,eAAe,IAAIgD,MAAM,CAACQ,eAAe,CAAC;EAClF;EAEA,OAAO;IACLC,WAAW,EAAEA,CAAA,KAAMjD,QAAQ;IAE3BkD,SAASA,CAACpC,QAAQ,EAAE;MAClBhB,SAAS,CAACqD,GAAG,CAACrC,QAAQ,CAAC;MACvB,OAAO,MAAM;QACXhB,SAAS,CAACsD,MAAM,CAACtC,QAAQ,CAAC;MAC5B,CAAC;IACH,CAAC;IAEDuC,KAAKA,CAAA,EAAG;MACN,OAAO1E,aAAa,CAACuE,SAAS,CAAC,MAAM;QACnC,KAAKvB,mBAAmB,CAAC,CAAC,CAAC2B,KAAK,CAAExF,KAAK,IAAK;UAC1CoB,MAAM,CAAC,6CAA6C,EAAEpB,KAAK,CAAC;QAC9D,CAAC,CAAC;MACJ,CAAC,CAAC;IACJ,CAAC;IAED6D,mBAAmB;IAEnB4B,KAAKA,CAACvC,MAAM,EAAE;MACZD,UAAU,CAACC,MAAM,CAAC;IACpB,CAAC;IAED,MAAMwC,eAAeA,CAACC,SAAS,EAAE;MAC/B;MACA;MACA;MACA,IAAI,CAACC,YAAY,CAAC,IAAI,CAAC;MACvB,IAAI;QACF,MAAM/E,aAAa,CAAC6E,eAAe,CAACC,SAAS,CAAC;QAC9C,MAAM9B,mBAAmB,CAAC,CAAC;MAC7B,CAAC,SAAS;QACR,IAAI,CAAC+B,YAAY,CAAC,KAAK,CAAC;MAC1B;IACF,CAAC;IAED,MAAMC,cAAcA,CAACF,SAAS,EAAE;MAC9B,MAAM9E,aAAa,CAACgF,cAAc,CAACF,SAAS,CAAC;MAC7C,MAAM9B,mBAAmB,CAAC,CAAC;IAC7B,CAAC;IAED,MAAMiC,gBAAgBA,CAACC,WAAW,EAAE;MAClC,MAAMlF,aAAa,CAACiF,gBAAgB,CAACC,WAAW,CAAC;MACjD,MAAMlC,mBAAmB,CAAC,CAAC;IAC7B,CAAC;IAED,MAAMmC,gBAAgBA,CAAA,EAAG;MACvB,MAAMnF,aAAa,CAACmF,gBAAgB,CAAC,CAAC;MACtC,MAAM1E,SAAS,GAAGT,aAAa,CAAC8D,YAAY,CAAC,CAAC;MAC9C1B,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAACyB,SAAS,KAAKA,SAAS,EAAE;UACjC;QACF;QACAzB,KAAK,CAACyB,SAAS,GAAGA,SAAS;QAC3BiC,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAED0C,UAAUA,CAACrC,IAAI,EAAE;MACfX,UAAU,CAAC,MAAM;QACfU,cAAc,CAACC,IAAI,CAAC;QACpB,IAAI/D,KAAK,CAAC8B,SAAS,EAAE;UACnB9B,KAAK,CAAC8B,SAAS,GAAG,KAAK;UACvB4B,KAAK,CAAC,CAAC;QACT;QACA,IAAI1D,KAAK,CAACG,KAAK,KAAK,IAAI,EAAE;UACxBH,KAAK,CAACG,KAAK,GAAG,IAAI;UAClBuD,KAAK,CAAC,CAAC;QACT;QACA1D,KAAK,CAACS,QAAQ,CAACuE,GAAG,CAACjB,IAAI,CAACT,EAAE,EAAES,IAAI,CAAC;MACnC,CAAC,CAAC;IACJ,CAAC;IAEDsC,UAAUA,CAACC,OAAO,EAAE;MAClBlD,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAAC8B,SAAS,KAAKwE,OAAO,EAAE;QACjCtG,KAAK,CAAC8B,SAAS,GAAGwE,OAAO;QACzB5C,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAED6C,QAAQA,CAACpG,KAAK,EAAE;MACdiD,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAACG,KAAK,KAAKA,KAAK,EAAE;QAC3BH,KAAK,CAACG,KAAK,GAAGA,KAAK;QACnBuD,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAED8C,eAAeA,CAACC,KAAK,EAAE;MACrBrD,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAAC+B,YAAY,KAAK0E,KAAK,EAAE;QAClCzG,KAAK,CAAC+B,YAAY,GAAG0E,KAAK;QAC1B/C,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAEDgD,aAAaA,CAACD,KAAK,EAAE;MACnBrD,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAACM,UAAU,KAAKmG,KAAK,EAAE;QAChCzG,KAAK,CAACM,UAAU,GAAGmG,KAAK;QACxB/C,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAEDiD,iBAAiBA,CAACC,GAAG,EAAE;MACrBxD,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAACK,cAAc,KAAKuG,GAAG,EAAE;QAClC5G,KAAK,CAACK,cAAc,GAAGuG,GAAG;QAC1BlD,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAEDqC,YAAYA,CAAC7D,SAAS,EAAE;MACtBkB,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAACkC,SAAS,KAAKA,SAAS,EAAE;QACnClC,KAAK,CAACkC,SAAS,GAAGA,SAAS;QAC3BwB,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAEDmD,gBAAgBA,CAAA,EAAG;MACjBzD,UAAU,CAAC,MAAM;QACf,IAAIpD,KAAK,CAACC,YAAY,EAAE;QACxBD,KAAK,CAACC,YAAY,GAAG,IAAI;QACzBD,KAAK,CAACM,UAAU,GAAG,IAAI;QACvBoD,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ,CAAC;IAEDlE,aAAaA,CAACsH,QAAQ,EAAEC,OAAO,GAAG,CAAC,CAAC,EAAE;MACpC3D,UAAU,CAAC,MAAM;QACf,MAAM4D,SAAS,GAAGD,OAAO,CAACE,KAAK,GAC3BxH,iBAAiB,CAACO,KAAK,CAAC2B,QAAQ,EAAEmF,QAAQ,EAAE9G,KAAK,CAAC4B,eAAe,EAAE,KAAK,CAAC,GACzElC,wBAAwB,CAACoH,QAAQ,EAAE9G,KAAK,CAAC4B,eAAe,EAAE,KAAK,CAAC;QACpEP,mBAAmB,GAAG,CACpB,GAAG2F,SAAS,CAAC9B,GAAG,CAAEC,OAAO,IAAKA,OAAO,CAACtB,SAAS,CAAC,EAChD,IAAIkD,OAAO,CAACG,kBAAkB,IAAI,EAAE,CAAC,CACtC,CAAC;QACFvD,WAAW,CAACqD,SAAS,CAAC;MACxB,CAAC,CAAC;IACJ,CAAC;IAEDG,kBAAkBA,CAACtD,SAAS,EAAE;MAC5BT,UAAU,CAAC,MAAM;QACfQ,sBAAsB,CAACC,SAAS,CAAC;MACnC,CAAC,CAAC;IACJ,CAAC;IAEDuD,YAAYA,CAAA,EAAG;MACbhE,UAAU,CAAC,MAAM;QACfO,WAAW,CAAC7D,cAAc,CAAC;QAC3B8D,sBAAsB,CAAC,IAAI,CAAC;QAC5BE,cAAc,CAAC,IAAI,CAAC;QACpB9D,KAAK,CAACwB,WAAW,GAAG,IAAI;QACxBxB,KAAK,CAACyB,SAAS,GAAG,IAAI;QACtBzB,KAAK,CAACS,QAAQ,GAAG,IAAIiB,GAAG,CAAC,CAAC;QAC1B1B,KAAK,CAAC6B,eAAe,GAAG,IAAI;QAC5B6B,KAAK,CAAC,CAAC;MACT,CAAC,CAAC;IACJ;EACF,CAAC;AACH","ignoreList":[]}

package/lib/module/ui/runtime/index.js

@@ -0,0 +1,15 @@
+"use strict";
+
+/**
+ * The headless session runtime (ADR 0004).
+ *
+ * `createOxyRuntime` owns the session facts and the order in which they become
+ * visible; `useRuntimeSnapshot` / `useRuntimeSelector` are the React adapter
+ * over it. Nothing here imports React except the adapter, and nothing in the
+ * runtime reads React state — which is what lets the provider hold ONE stable
+ * reference and stop rebuilding a 58-field context value on every keystroke.
+ */
+export { createOxyRuntime } from "./createOxyRuntime.js";
+export { useRuntimeSnapshot, useRuntimeSelector } from "./useRuntimeSnapshot.js";
+export { OxyRuntimeHandleProvider, OxyRuntimeMissingError, useActiveAccount, useDeviceDirectory, useOxyRuntime, useOxySnapshot } from "./runtimeContext.js";
+//# sourceMappingURL=index.js.map

package/lib/module/ui/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createOxyRuntime","useRuntimeSnapshot","useRuntimeSelector","OxyRuntimeHandleProvider","OxyRuntimeMissingError","useActiveAccount","useDeviceDirectory","useOxyRuntime","useOxySnapshot"],"sourceRoot":"../../../../src","sources":["ui/runtime/index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,gBAAgB,QAAQ,uBAAoB;AASrD,SAASC,kBAAkB,EAAEC,kBAAkB,QAAQ,yBAAsB;AAC7E,SACEC,wBAAwB,EACxBC,sBAAsB,EACtBC,gBAAgB,EAChBC,kBAAkB,EAClBC,aAAa,EACbC,cAAc,QACT,qBAAkB","ignoreList":[]}