@oxyhq/services 30.0.0 → 30.1.0

package/lib/commonjs/ui/context/passkeyFlow.js

@@ -0,0 +1,118 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PASSKEY_UNSUPPORTED_MESSAGE = void 0;
+exports.runPasskeyAdd = runPasskeyAdd;
+exports.runPasskeyLogin = runPasskeyLogin;
+exports.runPasskeyRegister = runPasskeyRegister;
+/**
+ * Pure passkey (WebAuthn) sign-in / registration orchestration.
+ *
+ * Extracted from `OxyContext` so the fixed `options → ceremony → verify → commit`
+ * ordering is unit-testable with injected deps — the exact pattern
+ * `commitSessionFlow.ts` (`commitDeviceSetAndResolve`) uses. The context methods
+ * (`signInWithPasskey` / `registerWithPasskey` / `addPasskey`) are thin wrappers
+ * that supply the real deps: the core `webauthn*` methods, the platform ceremony
+ * client (`webauthn/passkeyClient`), and the internal `commitSession` funnel.
+ *
+ * All three GATE on `isSupported()` first (the platform client returns `false`
+ * off the web) so an unsupported surface fails loudly before touching a ceremony.
+ */
+
+/**
+ * The result of `OxyServices.webauthnRegisterVerify` — either the LINK branch
+ * (`{ success, message }`, bearer present, no session) or the SIGNUP branch (a
+ * full {@link LoginResult}, which carries a `sessionId` on its session arm).
+ */
+
+/** Thrown when a passkey flow is attempted on a surface that cannot run WebAuthn. */
+const PASSKEY_UNSUPPORTED_MESSAGE = exports.PASSKEY_UNSUPPORTED_MESSAGE = 'Passkeys are not available in this environment. Use another sign-in method.';
+
+/** Project a session-arm login result onto the internal `commitSession` input. */
+function toCommitInput(result) {
+  return {
+    sessionId: result.sessionId,
+    accessToken: result.accessToken,
+    deviceSecret: result.deviceSecret,
+    deviceId: result.deviceId,
+    expiresAt: result.expiresAt,
+    userId: result.user.id,
+    user: result.user
+  };
+}
+
+/** Injected dependencies for {@link runPasskeyLogin}. */
+
+/**
+ * Passkey SIGN-IN. With no `username` this is the usernameless
+ * (discoverable-credential) flow; with a `username` it is username-first —
+ * the server scopes `allowCredentials` to that user's passkeys so a
+ * non-discoverable hardware key (U2F/security key) can be selected. Either way:
+ * request login options, run the authentication ceremony, verify, then commit
+ * the session. A passkey assertion is itself the strong factor — sign-in always
+ * resolves to a completed session.
+ */
+async function runPasskeyLogin(deps) {
+  if (!deps.isSupported()) {
+    throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+  }
+  const options = await deps.getLoginOptions(deps.username);
+  const response = await deps.runCeremony(options);
+  const result = await deps.loginVerify(response, {
+    deviceName: deps.deviceName,
+    deviceFingerprint: deps.deviceFingerprint,
+    deviceId: deps.deviceId
+  });
+  await deps.commit(toCommitInput(result));
+}
+
+/** Injected dependencies for {@link runPasskeyRegister}. */
+
+/**
+ * Passkey SIGNUP: create a brand-new account whose first auth method is a
+ * passkey. The verify signup branch mints a session (a {@link LoginSessionResult}
+ * carrying `sessionId`), which is committed exactly like a password signup.
+ */
+async function runPasskeyRegister(deps) {
+  if (!deps.isSupported()) {
+    throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+  }
+  const options = await deps.getRegisterOptions(deps.username);
+  const response = await deps.runCeremony(options);
+  const result = await deps.registerVerify(response, {
+    username: deps.username,
+    deviceName: deps.deviceName
+  });
+  // Only the signup session arm carries `sessionId`; the link branch
+  // (`{ success, message }`) does not.
+  if (!('sessionId' in result)) {
+    throw new Error('Passkey registration did not establish a session.');
+  }
+  await deps.commit(toCommitInput(result));
+}
+
+/** Injected dependencies for {@link runPasskeyAdd}. */
+
+/**
+ * ADD a passkey to the already-signed-in account (bearer present). The verify
+ * link branch returns `{ success, message }` with NO session — so this never
+ * commits a session; it just fires `onLinked` (which invalidates the
+ * auth-methods query). A session arm here would be a server contract violation.
+ */
+async function runPasskeyAdd(deps) {
+  if (!deps.isSupported()) {
+    throw new Error(PASSKEY_UNSUPPORTED_MESSAGE);
+  }
+  const options = await deps.getRegisterOptions();
+  const response = await deps.runCeremony(options);
+  const result = await deps.registerVerify(response, {
+    deviceName: deps.deviceName
+  });
+  if ('sessionId' in result) {
+    throw new Error('addPasskey unexpectedly minted a new session instead of linking.');
+  }
+  deps.onLinked();
+}
+//# sourceMappingURL=passkeyFlow.js.map

package/lib/commonjs/ui/context/passkeyFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["PASSKEY_UNSUPPORTED_MESSAGE","exports","toCommitInput","result","sessionId","accessToken","deviceSecret","deviceId","expiresAt","userId","user","id","runPasskeyLogin","deps","isSupported","Error","options","getLoginOptions","username","response","runCeremony","loginVerify","deviceName","deviceFingerprint","commit","runPasskeyRegister","getRegisterOptions","registerVerify","runPasskeyAdd","onLinked"],"sourceRoot":"../../../../src","sources":["ui/context/passkeyFlow.ts"],"mappings":";;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACO,MAAMA,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GACtC,6EAA6E;;AAE/E;AACA,SAASE,aAAaA,CAACC,MAA0B,EAAe;EAC9D,OAAO;IACLC,SAAS,EAAED,MAAM,CAACC,SAAS;IAC3BC,WAAW,EAAEF,MAAM,CAACE,WAAW;IAC/BC,YAAY,EAAEH,MAAM,CAACG,YAAY;IACjCC,QAAQ,EAAEJ,MAAM,CAACI,QAAQ;IACzBC,SAAS,EAAEL,MAAM,CAACK,SAAS;IAC3BC,MAAM,EAAEN,MAAM,CAACO,IAAI,CAACC,EAAE;IACtBD,IAAI,EAAEP,MAAM,CAACO;EACf,CAAC;AACH;;AAEA;;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeE,eAAeA,CAACC,IAAyB,EAAiB;EAC9E,IAAI,CAACA,IAAI,CAACC,WAAW,CAAC,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAACf,2BAA2B,CAAC;EAC9C;EACA,MAAMgB,OAAO,GAAG,MAAMH,IAAI,CAACI,eAAe,CAACJ,IAAI,CAACK,QAAQ,CAAC;EACzD,MAAMC,QAAQ,GAAG,MAAMN,IAAI,CAACO,WAAW,CAACJ,OAAO,CAAC;EAChD,MAAMb,MAAM,GAAG,MAAMU,IAAI,CAACQ,WAAW,CAACF,QAAQ,EAAE;IAC9CG,UAAU,EAAET,IAAI,CAACS,UAAU;IAC3BC,iBAAiB,EAAEV,IAAI,CAACU,iBAAiB;IACzChB,QAAQ,EAAEM,IAAI,CAACN;EACjB,CAAC,CAAC;EACF,MAAMM,IAAI,CAACW,MAAM,CAACtB,aAAa,CAACC,MAAM,CAAC,CAAC;AAC1C;;AAEA;;AAcA;AACA;AACA;AACA;AACA;AACO,eAAesB,kBAAkBA,CAACZ,IAA4B,EAAiB;EACpF,IAAI,CAACA,IAAI,CAACC,WAAW,CAAC,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAACf,2BAA2B,CAAC;EAC9C;EACA,MAAMgB,OAAO,GAAG,MAAMH,IAAI,CAACa,kBAAkB,CAACb,IAAI,CAACK,QAAQ,CAAC;EAC5D,MAAMC,QAAQ,GAAG,MAAMN,IAAI,CAACO,WAAW,CAACJ,OAAO,CAAC;EAChD,MAAMb,MAAM,GAAG,MAAMU,IAAI,CAACc,cAAc,CAACR,QAAQ,EAAE;IACjDD,QAAQ,EAAEL,IAAI,CAACK,QAAQ;IACvBI,UAAU,EAAET,IAAI,CAACS;EACnB,CAAC,CAAC;EACF;EACA;EACA,IAAI,EAAE,WAAW,IAAInB,MAAM,CAAC,EAAE;IAC5B,MAAM,IAAIY,KAAK,CAAC,mDAAmD,CAAC;EACtE;EACA,MAAMF,IAAI,CAACW,MAAM,CAACtB,aAAa,CAACC,MAAM,CAAC,CAAC;AAC1C;;AAEA;;AAaA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeyB,aAAaA,CAACf,IAAuB,EAAiB;EAC1E,IAAI,CAACA,IAAI,CAACC,WAAW,CAAC,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAACf,2BAA2B,CAAC;EAC9C;EACA,MAAMgB,OAAO,GAAG,MAAMH,IAAI,CAACa,kBAAkB,CAAC,CAAC;EAC/C,MAAMP,QAAQ,GAAG,MAAMN,IAAI,CAACO,WAAW,CAACJ,OAAO,CAAC;EAChD,MAAMb,MAAM,GAAG,MAAMU,IAAI,CAACc,cAAc,CAACR,QAAQ,EAAE;IAAEG,UAAU,EAAET,IAAI,CAACS;EAAW,CAAC,CAAC;EACnF,IAAI,WAAW,IAAInB,MAAM,EAAE;IACzB,MAAM,IAAIY,KAAK,CAAC,kEAAkE,CAAC;EACrF;EACAF,IAAI,CAACgB,QAAQ,CAAC,CAAC;AACjB","ignoreList":[]}

package/lib/commonjs/ui/context/useOxyAccountGraph.js

@@ -0,0 +1,100 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.useOxyAccountGraph = useOxyAccountGraph;
+var _react = require("react");
+var _core = require("@oxyhq/core");
+var _oxyContextHelpers = require("./oxyContextHelpers.js");
+var _index = require("../session/index.js");
+function useOxyAccountGraph({
+  isAuthenticated,
+  tokenReady,
+  initialized,
+  identityBound,
+  oxyServices,
+  sessionClient,
+  syncFromClient,
+  commitSession,
+  accountDialogControllerRef,
+  clearSessionStateRef
+}) {
+  const [accounts, setAccounts] = (0, _react.useState)([]);
+  const refreshAccounts = (0, _react.useCallback)(async () => {
+    if (identityBound || !isAuthenticated || !tokenReady || !oxyServices.getAccessToken()) {
+      setAccounts([]);
+      return;
+    }
+    try {
+      const list = await oxyServices.listAccounts();
+      setAccounts(list);
+    } catch (err) {
+      if ((0, _oxyContextHelpers.isUnauthorizedStatus)(err)) {
+        setAccounts([]);
+        await clearSessionStateRef.current();
+        return;
+      }
+      if (__DEV__) {
+        _core.logger.debug('Failed to load accounts', {
+          component: 'OxyContext'
+        }, err);
+      }
+    }
+  }, [identityBound, isAuthenticated, oxyServices, tokenReady, clearSessionStateRef]);
+  (0, _react.useEffect)(() => {
+    if (!identityBound && isAuthenticated && initialized && tokenReady) {
+      refreshAccounts();
+      void accountDialogControllerRef.current?.refresh();
+    }
+  }, [identityBound, isAuthenticated, initialized, tokenReady, refreshAccounts, accountDialogControllerRef]);
+  const switchToAccount = (0, _react.useCallback)(async accountId => {
+    if (identityBound) {
+      // Loud rejection, never a silent no-op: a resolved promise here would
+      // read to the caller as a completed switch that simply left the user
+      // unchanged, which is exactly the confusion this mode must avoid.
+      throw new _index.IdentityBoundSessionError('switchToAccount');
+    }
+    const deviceState = sessionClient.getState();
+    if (deviceState?.accounts.some(account => account.accountId === accountId)) {
+      await sessionClient.switchAccount(accountId);
+      await syncFromClient();
+      return;
+    }
+    const result = await oxyServices.switchToAccount(accountId);
+    if (!result?.user || !result?.sessionId) {
+      throw new Error('Account switch did not return a valid session');
+    }
+    await commitSession({
+      sessionId: result.sessionId,
+      accessToken: result.accessToken,
+      deviceSecret: result.deviceSecret,
+      deviceId: result.deviceId,
+      expiresAt: result.expiresAt,
+      userId: result.user.id,
+      user: result.user
+    },
+    // A switch is IN-PLACE. Cross-tab/app propagation rides the
+    // `session_state` socket.
+    {
+      activate: true
+    });
+  },
+  // The account-scoped cache reset that used to trail both branches here now
+  // runs inside the runtime's subject transition, BEFORE any subscriber is
+  // woken — so a socket-pushed switch (which never reached this function at
+  // all) gets it too.
+  [identityBound, oxyServices, sessionClient, syncFromClient, commitSession]);
+  const createAccount = (0, _react.useCallback)(async data => {
+    const account = await oxyServices.createAccount(data);
+    await refreshAccounts();
+    return account;
+  }, [oxyServices, refreshAccounts]);
+  return {
+    accounts,
+    refreshAccounts,
+    switchToAccount,
+    createAccount
+  };
+}
+//# sourceMappingURL=useOxyAccountGraph.js.map

package/lib/commonjs/ui/context/useOxyAccountGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_core","_oxyContextHelpers","_index","useOxyAccountGraph","isAuthenticated","tokenReady","initialized","identityBound","oxyServices","sessionClient","syncFromClient","commitSession","accountDialogControllerRef","clearSessionStateRef","accounts","setAccounts","useState","refreshAccounts","useCallback","getAccessToken","list","listAccounts","err","isUnauthorizedStatus","current","__DEV__","loggerUtil","debug","component","useEffect","refresh","switchToAccount","accountId","IdentityBoundSessionError","deviceState","getState","some","account","switchAccount","result","user","sessionId","Error","accessToken","deviceSecret","deviceId","expiresAt","userId","id","activate","createAccount","data"],"sourceRoot":"../../../../src","sources":["ui/context/useOxyAccountGraph.ts"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAEA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,kBAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAqBO,SAASI,kBAAkBA,CAAC;EACjCC,eAAe;EACfC,UAAU;EACVC,WAAW;EACXC,aAAa;EACbC,WAAW;EACXC,aAAa;EACbC,cAAc;EACdC,aAAa;EACbC,0BAA0B;EAC1BC;AACwB,CAAC,EAAE;EAC3B,MAAM,CAACC,QAAQ,EAAEC,WAAW,CAAC,GAAG,IAAAC,eAAQ,EAAgB,EAAE,CAAC;EAE3D,MAAMC,eAAe,GAAG,IAAAC,kBAAW,EAAC,YAA2B;IAC7D,IAAIX,aAAa,IAAI,CAACH,eAAe,IAAI,CAACC,UAAU,IAAI,CAACG,WAAW,CAACW,cAAc,CAAC,CAAC,EAAE;MACrFJ,WAAW,CAAC,EAAE,CAAC;MACf;IACF;IACA,IAAI;MACF,MAAMK,IAAI,GAAG,MAAMZ,WAAW,CAACa,YAAY,CAAC,CAAC;MAC7CN,WAAW,CAACK,IAAI,CAAC;IACnB,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZ,IAAI,IAAAC,uCAAoB,EAACD,GAAG,CAAC,EAAE;QAC7BP,WAAW,CAAC,EAAE,CAAC;QACf,MAAMF,oBAAoB,CAACW,OAAO,CAAC,CAAC;QACpC;MACF;MACA,IAAIC,OAAO,EAAE;QACXC,YAAU,CAACC,KAAK,CAAC,yBAAyB,EAAE;UAAEC,SAAS,EAAE;QAAa,CAAC,EAAEN,GAAc,CAAC;MAC1F;IACF;EACF,CAAC,EAAE,CAACf,aAAa,EAAEH,eAAe,EAAEI,WAAW,EAAEH,UAAU,EAAEQ,oBAAoB,CAAC,CAAC;EAEnF,IAAAgB,gBAAS,EAAC,MAAM;IACd,IAAI,CAACtB,aAAa,IAAIH,eAAe,IAAIE,WAAW,IAAID,UAAU,EAAE;MAClEY,eAAe,CAAC,CAAC;MACjB,KAAKL,0BAA0B,CAACY,OAAO,EAAEM,OAAO,CAAC,CAAC;IACpD;EACF,CAAC,EAAE,CAACvB,aAAa,EAAEH,eAAe,EAAEE,WAAW,EAAED,UAAU,EAAEY,eAAe,EAAEL,0BAA0B,CAAC,CAAC;EAE1G,MAAMmB,eAAe,GAAG,IAAAb,kBAAW,EACjC,MAAOc,SAAiB,IAAoB;IAC1C,IAAIzB,aAAa,EAAE;MACjB;MACA;MACA;MACA,MAAM,IAAI0B,gCAAyB,CAAC,iBAAiB,CAAC;IACxD;IACA,MAAMC,WAAW,GAAGzB,aAAa,CAAC0B,QAAQ,CAAC,CAAC;IAC5C,IAAID,WAAW,EAAEpB,QAAQ,CAACsB,IAAI,CAAEC,OAAO,IAAKA,OAAO,CAACL,SAAS,KAAKA,SAAS,CAAC,EAAE;MAC5E,MAAMvB,aAAa,CAAC6B,aAAa,CAACN,SAAS,CAAC;MAC5C,MAAMtB,cAAc,CAAC,CAAC;MACtB;IACF;IAEA,MAAM6B,MAAM,GAAG,MAAM/B,WAAW,CAACuB,eAAe,CAACC,SAAS,CAAC;IAC3D,IAAI,CAACO,MAAM,EAAEC,IAAI,IAAI,CAACD,MAAM,EAAEE,SAAS,EAAE;MACvC,MAAM,IAAIC,KAAK,CAAC,+CAA+C,CAAC;IAClE;IACA,MAAM/B,aAAa,CACjB;MACE8B,SAAS,EAAEF,MAAM,CAACE,SAAS;MAC3BE,WAAW,EAAEJ,MAAM,CAACI,WAAW;MAC/BC,YAAY,EAAEL,MAAM,CAACK,YAAY;MACjCC,QAAQ,EAAEN,MAAM,CAACM,QAAQ;MACzBC,SAAS,EAAEP,MAAM,CAACO,SAAS;MAC3BC,MAAM,EAAER,MAAM,CAACC,IAAI,CAACQ,EAAE;MACtBR,IAAI,EAAED,MAAM,CAACC;IACf,CAAC;IACD;IACA;IACA;MAAES,QAAQ,EAAE;IAAK,CACnB,CAAC;EACH,CAAC;EACD;EACA;EACA;EACA;EACA,CAAC1C,aAAa,EAAEC,WAAW,EAAEC,aAAa,EAAEC,cAAc,EAAEC,aAAa,CAC3E,CAAC;EAED,MAAMuC,aAAa,GAAG,IAAAhC,kBAAW,EAC/B,MAAOiC,IAAwB,IAA2B;IACxD,MAAMd,OAAO,GAAG,MAAM7B,WAAW,CAAC0C,aAAa,CAACC,IAAI,CAAC;IACrD,MAAMlC,eAAe,CAAC,CAAC;IACvB,OAAOoB,OAAO;EAChB,CAAC,EACD,CAAC7B,WAAW,EAAES,eAAe,CAC/B,CAAC;EAED,OAAO;IACLH,QAAQ;IACRG,eAAe;IACfc,eAAe;IACfmB;EACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/ui/hooks/accountDialogSnapshot.js

@@ -0,0 +1,42 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.EMPTY_ACCOUNT_DIALOG_SNAPSHOT = void 0;
+/**
+ * The snapshot `useSyncExternalStore` reads before a controller exists.
+ *
+ * `useSyncExternalStore` calls `getSnapshot` several times per commit and
+ * compares by identity, so the no-controller answer has to be one constant
+ * reference — a fresh object literal loops.
+ *
+ * It is ONE constant because there were three, byte-identical, in the hook and
+ * both dialog surfaces. Adding a field to `AccountDialogSnapshot` broke all
+ * three at once and would have gone on doing so; a shared constant makes the
+ * compiler point at one place.
+ */
+const EMPTY_ACCOUNT_DIALOG_SNAPSHOT = exports.EMPTY_ACCOUNT_DIALOG_SNAPSHOT = {
+  view: 'accounts',
+  directory: null,
+  activeContext: null,
+  activatingContextId: null,
+  removingContextId: null,
+  removingPrincipalId: null,
+  loading: false,
+  error: null,
+  signIn: {
+    phase: 'idle',
+    authorizeCode: null,
+    qrPayload: null,
+    expiresAt: null,
+    error: null,
+    route: null,
+    routeFailed: false,
+    pushSentAt: null,
+    openedAt: null,
+    progress: 'idle'
+  },
+  commonsAvailability: 'unknown'
+};
+//# sourceMappingURL=accountDialogSnapshot.js.map

package/lib/commonjs/ui/hooks/accountDialogSnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["EMPTY_ACCOUNT_DIALOG_SNAPSHOT","exports","view","directory","activeContext","activatingContextId","removingContextId","removingPrincipalId","loading","error","signIn","phase","authorizeCode","qrPayload","expiresAt","route","routeFailed","pushSentAt","openedAt","progress","commonsAvailability"],"sourceRoot":"../../../../src","sources":["ui/hooks/accountDialogSnapshot.ts"],"mappings":";;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMA,6BAAoD,GAAAC,OAAA,CAAAD,6BAAA,GAAG;EAClEE,IAAI,EAAE,UAAU;EAChBC,SAAS,EAAE,IAAI;EACfC,aAAa,EAAE,IAAI;EACnBC,mBAAmB,EAAE,IAAI;EACzBC,iBAAiB,EAAE,IAAI;EACvBC,mBAAmB,EAAE,IAAI;EACzBC,OAAO,EAAE,KAAK;EACdC,KAAK,EAAE,IAAI;EACXC,MAAM,EAAE;IACNC,KAAK,EAAE,MAAM;IACbC,aAAa,EAAE,IAAI;IACnBC,SAAS,EAAE,IAAI;IACfC,SAAS,EAAE,IAAI;IACfL,KAAK,EAAE,IAAI;IACXM,KAAK,EAAE,IAAI;IACXC,WAAW,EAAE,KAAK;IAClBC,UAAU,EAAE,IAAI;IAChBC,QAAQ,EAAE,IAAI;IACdC,QAAQ,EAAE;EACZ,CAAC;EACDC,mBAAmB,EAAE;AACvB,CAAC","ignoreList":[]}

package/lib/commonjs/ui/hooks/mutations/mutationFactory.js

@@ -0,0 +1,182 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createGenericMutation = createGenericMutation;
+exports.createProfileMutation = createProfileMutation;
+var _queryKeys = require("../queries/queryKeys.js");
+var _toast = require("@oxyhq/bloom/toast");
+var _authStore = require("../../stores/authStore.js");
+/**
+ * Mutation Factory - Creates standardized mutations with optimistic updates
+ *
+ * This factory reduces boilerplate code for mutations that follow the common pattern:
+ * 1. Cancel outgoing queries
+ * 2. Snapshot previous data
+ * 3. Apply optimistic update
+ * 4. On error: rollback and show toast
+ * 5. On success: update cache, stores, and invalidate queries
+ */
+
+/**
+ * Configuration for creating a standard profile mutation
+ */
+
+/**
+ * Creates a standard profile mutation with optimistic updates
+ *
+ * @example
+ * ```ts
+ * const updateProfile = createProfileMutation({
+ *   mutationKey: mutationKeys.account.updateProfile,
+ *   mutationFn: (updates) => oxyServices.updateProfile(updates),
+ *   optimisticUpdate: (user, updates) => updates,
+ *   errorMessage: 'Failed to update profile',
+ * });
+ * ```
+ */
+function createProfileMutation(config, queryClient, activeSessionId) {
+  const {
+    mutationFn,
+    mutationKey,
+    cancelQueryKeys = [],
+    optimisticUpdate,
+    errorMessage = 'Operation failed',
+    successMessage,
+    updateAuthStore = true,
+    invalidateUserQueries: shouldInvalidateUserQueries = true,
+    invalidateAccountQueries: shouldInvalidateAccountQueries = true,
+    onSuccess: customOnSuccess
+  } = config;
+  return {
+    mutationKey: [...mutationKey],
+    mutationFn,
+    onMutate: async variables => {
+      // Cancel queries that might conflict
+      await queryClient.cancelQueries({
+        queryKey: _queryKeys.queryKeys.accounts.current(activeSessionId)
+      });
+      for (const key of cancelQueryKeys) {
+        await queryClient.cancelQueries({
+          queryKey: key
+        });
+      }
+
+      // Snapshot previous user data
+      const previousUser = queryClient.getQueryData(_queryKeys.queryKeys.accounts.current(activeSessionId));
+
+      // Apply optimistic update if provided
+      if (previousUser && optimisticUpdate) {
+        const updates = optimisticUpdate(previousUser, variables);
+        const optimisticUser = {
+          ...previousUser,
+          ...updates
+        };
+        queryClient.setQueryData(_queryKeys.queryKeys.accounts.current(activeSessionId), optimisticUser);
+        if (activeSessionId) {
+          queryClient.setQueryData(_queryKeys.queryKeys.users.profile(activeSessionId), optimisticUser);
+        }
+      }
+      return {
+        previousUser
+      };
+    },
+    onError: (error, _variables, context) => {
+      // Rollback optimistic update
+      if (context?.previousUser) {
+        queryClient.setQueryData(_queryKeys.queryKeys.accounts.current(activeSessionId), context.previousUser);
+        if (activeSessionId) {
+          queryClient.setQueryData(_queryKeys.queryKeys.users.profile(activeSessionId), context.previousUser);
+        }
+      }
+
+      // Show error toast
+      const message = typeof errorMessage === 'function' ? errorMessage(error) : error instanceof Error ? error.message : errorMessage;
+      _toast.toast.error(message);
+    },
+    onSuccess: (data, variables) => {
+      // Update cache with server response
+      queryClient.setQueryData(_queryKeys.queryKeys.accounts.current(activeSessionId), data);
+      if (activeSessionId) {
+        queryClient.setQueryData(_queryKeys.queryKeys.users.profile(activeSessionId), data);
+      }
+
+      // Update authStore for immediate UI updates
+      if (updateAuthStore) {
+        _authStore.useAuthStore.getState().setUser(data);
+      }
+
+      // Invalidate related queries
+      if (shouldInvalidateUserQueries) {
+        (0, _queryKeys.invalidateUserQueries)(queryClient);
+      }
+      if (shouldInvalidateAccountQueries) {
+        (0, _queryKeys.invalidateAccountQueries)(queryClient);
+      }
+
+      // Show success toast if configured
+      if (successMessage) {
+        _toast.toast.success(successMessage);
+      }
+
+      // Call custom onSuccess handler
+      if (customOnSuccess) {
+        customOnSuccess(data, variables, queryClient);
+      }
+    }
+  };
+}
+
+/**
+ * Configuration for creating a generic mutation (non-profile)
+ */
+
+/**
+ * Creates a generic mutation with optimistic updates
+ */
+function createGenericMutation(config, queryClient) {
+  const {
+    mutationFn,
+    mutationKey,
+    queryKey,
+    optimisticData,
+    errorMessage = 'Operation failed',
+    successMessage,
+    invalidateQueries = []
+  } = config;
+  return {
+    mutationKey: [...mutationKey],
+    mutationFn,
+    onMutate: async variables => {
+      await queryClient.cancelQueries({
+        queryKey
+      });
+      const previous = queryClient.getQueryData(queryKey);
+      if (optimisticData) {
+        queryClient.setQueryData(queryKey, optimisticData(previous, variables));
+      }
+      return {
+        previous
+      };
+    },
+    onError: (error, _variables, context) => {
+      if (context?.previous !== undefined) {
+        queryClient.setQueryData(queryKey, context.previous);
+      }
+      _toast.toast.error(error instanceof Error ? error.message : errorMessage);
+    },
+    onSuccess: data => {
+      queryClient.setQueryData(queryKey, data);
+      for (const key of invalidateQueries) {
+        queryClient.invalidateQueries({
+          queryKey: key
+        });
+      }
+      if (successMessage) {
+        _toast.toast.success(successMessage);
+      }
+    }
+  };
+}
+//# sourceMappingURL=mutationFactory.js.map

package/lib/commonjs/ui/hooks/mutations/mutationFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_queryKeys","require","_toast","_authStore","createProfileMutation","config","queryClient","activeSessionId","mutationFn","mutationKey","cancelQueryKeys","optimisticUpdate","errorMessage","successMessage","updateAuthStore","invalidateUserQueries","shouldInvalidateUserQueries","invalidateAccountQueries","shouldInvalidateAccountQueries","onSuccess","customOnSuccess","onMutate","variables","cancelQueries","queryKey","queryKeys","accounts","current","key","previousUser","getQueryData","updates","optimisticUser","setQueryData","users","profile","onError","error","_variables","context","message","Error","toast","data","useAuthStore","getState","setUser","success","createGenericMutation","optimisticData","invalidateQueries","previous","undefined"],"sourceRoot":"../../../../../src","sources":["ui/hooks/mutations/mutationFactory.ts"],"mappings":";;;;;;;AAaA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQA;AACA;AACA;;AA2BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,qBAAqBA,CACnCC,MAA+C,EAC/CC,WAAwB,EACxBC,eAA8B,EACwC;EACtE,MAAM;IACJC,UAAU;IACVC,WAAW;IACXC,eAAe,GAAG,EAAE;IACpBC,gBAAgB;IAChBC,YAAY,GAAG,kBAAkB;IACjCC,cAAc;IACdC,eAAe,GAAG,IAAI;IACtBC,qBAAqB,EAAEC,2BAA2B,GAAG,IAAI;IACzDC,wBAAwB,EAAEC,8BAA8B,GAAG,IAAI;IAC/DC,SAAS,EAAEC;EACb,CAAC,GAAGf,MAAM;EAEV,OAAO;IACLI,WAAW,EAAE,CAAC,GAAGA,WAAW,CAAC;IAC7BD,UAAU;IAEVa,QAAQ,EAAE,MAAOC,SAAS,IAAK;MAC7B;MACA,MAAMhB,WAAW,CAACiB,aAAa,CAAC;QAAEC,QAAQ,EAAEC,oBAAS,CAACC,QAAQ,CAACC,OAAO,CAACpB,eAAe;MAAE,CAAC,CAAC;MAC1F,KAAK,MAAMqB,GAAG,IAAIlB,eAAe,EAAE;QACjC,MAAMJ,WAAW,CAACiB,aAAa,CAAC;UAAEC,QAAQ,EAAEI;QAAI,CAAC,CAAC;MACpD;;MAEA;MACA,MAAMC,YAAY,GAAGvB,WAAW,CAACwB,YAAY,CAAOL,oBAAS,CAACC,QAAQ,CAACC,OAAO,CAACpB,eAAe,CAAC,CAAC;;MAEhG;MACA,IAAIsB,YAAY,IAAIlB,gBAAgB,EAAE;QACpC,MAAMoB,OAAO,GAAGpB,gBAAgB,CAACkB,YAAY,EAAEP,SAAS,CAAC;QACzD,MAAMU,cAAc,GAAG;UAAE,GAAGH,YAAY;UAAE,GAAGE;QAAQ,CAAC;QAEtDzB,WAAW,CAAC2B,YAAY,CAAOR,oBAAS,CAACC,QAAQ,CAACC,OAAO,CAACpB,eAAe,CAAC,EAAEyB,cAAc,CAAC;QAE3F,IAAIzB,eAAe,EAAE;UACnBD,WAAW,CAAC2B,YAAY,CAAOR,oBAAS,CAACS,KAAK,CAACC,OAAO,CAAC5B,eAAe,CAAC,EAAEyB,cAAc,CAAC;QAC1F;MACF;MAEA,OAAO;QAAEH;MAAa,CAAC;IACzB,CAAC;IAEDO,OAAO,EAAEA,CAACC,KAAK,EAAEC,UAAU,EAAEC,OAAO,KAAK;MACvC;MACA,IAAIA,OAAO,EAAEV,YAAY,EAAE;QACzBvB,WAAW,CAAC2B,YAAY,CAACR,oBAAS,CAACC,QAAQ,CAACC,OAAO,CAACpB,eAAe,CAAC,EAAEgC,OAAO,CAACV,YAAY,CAAC;QAC3F,IAAItB,eAAe,EAAE;UACnBD,WAAW,CAAC2B,YAAY,CAACR,oBAAS,CAACS,KAAK,CAACC,OAAO,CAAC5B,eAAe,CAAC,EAAEgC,OAAO,CAACV,YAAY,CAAC;QAC1F;MACF;;MAEA;MACA,MAAMW,OAAO,GAAG,OAAO5B,YAAY,KAAK,UAAU,GAC9CA,YAAY,CAACyB,KAAK,CAAC,GAClBA,KAAK,YAAYI,KAAK,GAAGJ,KAAK,CAACG,OAAO,GAAG5B,YAAa;MAC3D8B,YAAK,CAACL,KAAK,CAACG,OAAO,CAAC;IACtB,CAAC;IAEDrB,SAAS,EAAEA,CAACwB,IAAI,EAAErB,SAAS,KAAK;MAC9B;MACAhB,WAAW,CAAC2B,YAAY,CAACR,oBAAS,CAACC,QAAQ,CAACC,OAAO,CAACpB,eAAe,CAAC,EAAEoC,IAAI,CAAC;MAC3E,IAAIpC,eAAe,EAAE;QACnBD,WAAW,CAAC2B,YAAY,CAACR,oBAAS,CAACS,KAAK,CAACC,OAAO,CAAC5B,eAAe,CAAC,EAAEoC,IAAI,CAAC;MAC1E;;MAEA;MACA,IAAI7B,eAAe,EAAE;QACnB8B,uBAAY,CAACC,QAAQ,CAAC,CAAC,CAACC,OAAO,CAACH,IAAI,CAAC;MACvC;;MAEA;MACA,IAAI3B,2BAA2B,EAAE;QAC/B,IAAAD,gCAAqB,EAACT,WAAW,CAAC;MACpC;MACA,IAAIY,8BAA8B,EAAE;QAClC,IAAAD,mCAAwB,EAACX,WAAW,CAAC;MACvC;;MAEA;MACA,IAAIO,cAAc,EAAE;QAClB6B,YAAK,CAACK,OAAO,CAAClC,cAAc,CAAC;MAC/B;;MAEA;MACA,IAAIO,eAAe,EAAE;QACnBA,eAAe,CAACuB,IAAI,EAAErB,SAAS,EAAEhB,WAAW,CAAC;MAC/C;IACF;EACF,CAAC;AACH;;AAEA;AACA;AACA;;AAqBA;AACA;AACA;AACO,SAAS0C,qBAAqBA,CACnC3C,MAAsE,EACtEC,WAAwB,EAC4C;EACpE,MAAM;IACJE,UAAU;IACVC,WAAW;IACXe,QAAQ;IACRyB,cAAc;IACdrC,YAAY,GAAG,kBAAkB;IACjCC,cAAc;IACdqC,iBAAiB,GAAG;EACtB,CAAC,GAAG7C,MAAM;EAEV,OAAO;IACLI,WAAW,EAAE,CAAC,GAAGA,WAAW,CAAC;IAC7BD,UAAU;IAEVa,QAAQ,EAAE,MAAOC,SAAS,IAAK;MAC7B,MAAMhB,WAAW,CAACiB,aAAa,CAAC;QAAEC;MAAS,CAAC,CAAC;MAC7C,MAAM2B,QAAQ,GAAG7C,WAAW,CAACwB,YAAY,CAAQN,QAAQ,CAAC;MAE1D,IAAIyB,cAAc,EAAE;QAClB3C,WAAW,CAAC2B,YAAY,CAAQT,QAAQ,EAAEyB,cAAc,CAACE,QAAQ,EAAE7B,SAAS,CAAC,CAAC;MAChF;MAEA,OAAO;QAAE6B;MAAS,CAAC;IACrB,CAAC;IAEDf,OAAO,EAAEA,CAACC,KAAK,EAAEC,UAAU,EAAEC,OAAO,KAAK;MACvC,IAAIA,OAAO,EAAEY,QAAQ,KAAKC,SAAS,EAAE;QACnC9C,WAAW,CAAC2B,YAAY,CAACT,QAAQ,EAAEe,OAAO,CAACY,QAAQ,CAAC;MACtD;MACAT,YAAK,CAACL,KAAK,CAACA,KAAK,YAAYI,KAAK,GAAGJ,KAAK,CAACG,OAAO,GAAG5B,YAAY,CAAC;IACpE,CAAC;IAEDO,SAAS,EAAGwB,IAAI,IAAK;MACnBrC,WAAW,CAAC2B,YAAY,CAACT,QAAQ,EAAEmB,IAAI,CAAC;MAExC,KAAK,MAAMf,GAAG,IAAIsB,iBAAiB,EAAE;QACnC5C,WAAW,CAAC4C,iBAAiB,CAAC;UAAE1B,QAAQ,EAAEI;QAAI,CAAC,CAAC;MAClD;MAEA,IAAIf,cAAc,EAAE;QAClB6B,YAAK,CAACK,OAAO,CAAClC,cAAc,CAAC;MAC/B;IACF;EACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/ui/hooks/mutations/mutationKeys.js

@@ -0,0 +1,40 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.mutationKeys = void 0;
+/**
+ * Stable mutation key factories.
+ *
+ * Mutations that may be queued while offline MUST declare a stable
+ * `mutationKey`. When the network comes back, TanStack Query resumes
+ * paused mutations grouped by key — so the keys here should be stable
+ * across renders and across reloads when persistence is enabled.
+ */
+
+const mutationKeys = exports.mutationKeys = {
+  // Account-related writes
+  account: {
+    updateProfile: ['mutation', 'account', 'updateProfile'],
+    uploadAvatar: ['mutation', 'account', 'uploadAvatar'],
+    updateSettings: ['mutation', 'account', 'updateSettings'],
+    updatePrivacySettings: ['mutation', 'account', 'updatePrivacySettings'],
+    updateNotificationPreferences: ['mutation', 'account', 'updateNotificationPreferences'],
+    updateUserPreferences: ['mutation', 'account', 'updateUserPreferences'],
+    uploadFile: ['mutation', 'account', 'uploadFile']
+  },
+  // Session / device writes
+  session: {
+    switch: ['mutation', 'session', 'switch'],
+    logout: ['mutation', 'session', 'logout'],
+    logoutAll: ['mutation', 'session', 'logoutAll'],
+    updateDeviceName: ['mutation', 'session', 'updateDeviceName'],
+    removeDevice: ['mutation', 'session', 'removeDevice']
+  },
+  // Connected apps (OAuth grants)
+  connectedApps: {
+    revoke: ['mutation', 'connectedApps', 'revoke']
+  }
+};
+//# sourceMappingURL=mutationKeys.js.map

package/lib/commonjs/ui/hooks/mutations/mutationKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mutationKeys","exports","account","updateProfile","uploadAvatar","updateSettings","updatePrivacySettings","updateNotificationPreferences","updateUserPreferences","uploadFile","session","switch","logout","logoutAll","updateDeviceName","removeDevice","connectedApps","revoke"],"sourceRoot":"../../../../../src","sources":["ui/hooks/mutations/mutationKeys.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMA,YAAY,GAAAC,OAAA,CAAAD,YAAA,GAAG;EAC1B;EACAE,OAAO,EAAE;IACPC,aAAa,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAU;IAChEC,YAAY,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,CAAU;IAC9DC,cAAc,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAU;IAClEC,qBAAqB,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,uBAAuB,CAAU;IAChFC,6BAA6B,EAAE,CAC7B,UAAU,EACV,SAAS,EACT,+BAA+B,CACvB;IACVC,qBAAqB,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,uBAAuB,CAAU;IAChFC,UAAU,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY;EAClD,CAAC;EAED;EACAC,OAAO,EAAE;IACPC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAU;IAClDC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAU;IAClDC,SAAS,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAU;IACxDC,gBAAgB,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAU;IACtEC,YAAY,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc;EACtD,CAAC;EAED;EACAC,aAAa,EAAE;IACbC,MAAM,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ;EAChD;AACF,CAAU","ignoreList":[]}