@party-stack/web-runtime 0.4.2 → 0.5.0

package/README.md

@@ -0,0 +1,60 @@
+# @party-stack/web-runtime
+
+The main export constructs the platform runtime as an Effect Layer:
+
+```ts
+import { Runtime } from "@party-stack/runtime";
+import * as WebRuntime from "@party-stack/web-runtime";
+import { Effect } from "effect";
+
+const program = Effect.gen(function* () {
+    const runtime = yield* Runtime;
+    yield* runtime.bytes.write("example", new Blob(["hello"]));
+    // Run the application's scoped services here.
+});
+
+await Effect.runPromise(program.pipe(Effect.provide(WebRuntime.layer({ owner: "user", namespace: "app" }))));
+```
+
+Defining the Layer opens nothing. Building it acquires storage, connectivity and
+platform resources in its Scope. Completion, failure or interruption closes
+the database, removes listeners, closes channels and releases native locks.
+No separate platform `cleanup()` call is needed. The implementation also works in
+workers, where `window` and `document` are unavailable.
+
+Persistent storage uses IndexedDB and OPFS. A persistent replica acquires one native
+Web Lock for its entire host Scope; another owner waits until that Scope closes or
+the browser context dies. SharedWorker clients use the standard ontology protocol
+and memory replicas. BroadcastChannel carries storage invalidations for local
+private-state projections; it is not an RPC transport or leader-election service.
+Missing Web Locks fail explicitly for persistent storage.
+
+`storage: "memory"` selects isolated in-process storage. This is
+an explicit fallback choice, with memory lifetime; it does not recover pending
+work from an inaccessible persistent store. Worker support and storage access
+must be tested separately. Private browsing may provide temporary storage with
+different quotas. Browser-local encryption key persistence requires an explicit
+`persistEncryptionKeys: true` choice.
+
+```ts
+WebRuntime.layer({ owner: "user", namespace: "app", persistEncryptionKeys: true });
+```
+
+This explicitly permits a non-extractable AES-GCM CryptoKey to survive reloads in
+IndexedDB, in a separate key database. Same-origin code can still use the key to
+decrypt; it is not a vault lock or isolation from XSS. Clearing site data loses
+these keys. The flag enables persistent local credentials but does not opt ordinary
+encrypted properties into caching. `ontology.decrypt(value, { cache: true })` is a
+separate per-call choice; the default bypasses persistent cached plaintext copies.
+Cached copies are themselves encrypted with the device key. This runtime must be
+partitioned by authenticated owner and ontology namespace as usual; never reuse a
+private runtime for unrelated users. See [encrypted values](../ontology/encrypted-values.md).
+
+`createWebRuntime(owner, namespace, options?)` returns the same scoped Effect as
+`make({ owner, namespace, ...options })`. It has no Promise constructor or manual
+cleanup method. Installations accept this provider directly; application entry
+points can supply `layer` to an Effect program or an outer ManagedRuntime.
+
+Browser tests cover native IndexedDB transactions/notifications, host-lock release
+on tab termination, and a SharedWorker owner with per-tab memory replicas and
+TanStack collections. Private browsing/storage access still requires platform testing.

package/lib/NavigatorNetworkConnectivity.d.ts

@@ -1,16 +1,9 @@
-import { NetworkConnectivity } from "@party-stack/runtime";
+import { Effect, Stream } from "effect";
 //#region src/NavigatorNetworkConnectivity.d.ts
-export declare class NavigatorNetworkConnectivity implements NetworkConnectivity {
-  private readonly listeners;
-  private lifetime;
-  private connected;
-  private closePromise;
-  private constructor();
-  static create(): NavigatorNetworkConnectivity;
-  get isConnected(): boolean;
-  subscribe(listener: (isConnected: boolean) => void): () => void;
-  close(): Promise<void>;
-  private setConnected;
-}
+/** Native listeners and the worker event fallback belong to the caller's platform scope. */
+export declare const makeNavigatorNetworkConnectivity: () => Effect.Effect<{
+  online: Effect.Effect<boolean, never, never>;
+  changes: Stream.Stream<boolean, never, never>;
+}, never, import("effect/Scope").Scope>;
 //#endregion
 //# sourceMappingURL=NavigatorNetworkConnectivity.d.ts.map

package/lib/NavigatorNetworkConnectivity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NavigatorNetworkConnectivity.d.ts","names":[],"sources":["../src/NavigatorNetworkConnectivity.ts"],"mappings":";;qBAKa,wCAAwC;mBAChC;UACT;UACA;UACA;UAED;SAIA,UAAU;MAqCb;EAIJ,UAAU,WAAW;EAOrB,SAAS;UAOD"}
+{"version":3,"file":"NavigatorNetworkConnectivity.d.ts","names":[],"sources":["../src/NavigatorNetworkConnectivity.ts"],"mappings":";;;qBAMa,wCAAgC,OAAA;;;iCA+C3C"}

package/lib/NavigatorNetworkConnectivity.js

@@ -1,64 +1,43 @@
-import { once, race, run, sleep } from "effection";
+import { makeNetworkConnectivity } from "@party-stack/runtime";
+import { Effect, PubSub, Stream } from "effect";
 //#region src/NavigatorNetworkConnectivity.ts
-const ONLINE_STABILIZATION_MS = 1e3;
-var NavigatorNetworkConnectivity = class NavigatorNetworkConnectivity {
-	listeners = /* @__PURE__ */ new Set();
-	lifetime;
-	connected;
-	closePromise;
-	constructor(initiallyConnected) {
-		this.connected = initiallyConnected;
-	}
-	static create() {
-		const connectivity = new NavigatorNetworkConnectivity(navigator.onLine);
-		connectivity.lifetime = run(function* () {
-			while (true) {
-				if (!(yield* race([(function* () {
-					yield* once(window, "online");
-					return true;
-				})(), (function* () {
-					yield* once(window, "offline");
-					return false;
-				})()]))) {
-					connectivity.setConnected(false);
-					continue;
-				}
-				if (connectivity.isConnected) continue;
-				const stabilized = yield* race([(function* () {
-					yield* sleep(ONLINE_STABILIZATION_MS);
-					return navigator.onLine;
-				})(), (function* () {
-					yield* once(window, "offline");
-					return false;
-				})()]);
-				connectivity.setConnected(stabilized);
-			}
-		});
-		connectivity.lifetime.catch(() => void 0);
-		return connectivity;
-	}
-	get isConnected() {
-		return this.connected;
-	}
-	subscribe(listener) {
-		this.listeners.add(listener);
-		return () => {
-			this.listeners.delete(listener);
-		};
-	}
-	close() {
-		this.closePromise ??= Promise.resolve(this.lifetime.halt()).finally(() => {
-			this.listeners.clear();
-		});
-		return this.closePromise;
-	}
-	setConnected(isConnected) {
-		if (isConnected === this.connected) return;
-		this.connected = isConnected;
-		for (const listener of this.listeners) listener(isConnected);
-	}
-};
+const WORKER_CONNECTIVITY_SAMPLE_MS = 1e3;
+/** Native listeners and the worker event fallback belong to the caller's platform scope. */
+const makeNavigatorNetworkConnectivity = Effect.fnUntraced(function* () {
+	const state = yield* makeNetworkConnectivity(navigator.onLine !== false);
+	const target = typeof window === "undefined" ? globalThis : window;
+	const events = yield* Effect.acquireRelease(PubSub.sliding({
+		capacity: 1,
+		replay: 1
+	}), PubSub.shutdown);
+	let observed = navigator.onLine !== false;
+	const changed = () => {
+		observed = navigator.onLine !== false;
+		PubSub.publishUnsafe(events, void 0);
+	};
+	const sample = () => {
+		if (observed !== (navigator.onLine !== false)) changed();
+	};
+	yield* Effect.acquireRelease(Effect.sync(() => {
+		target.addEventListener("online", changed);
+		target.addEventListener("offline", changed);
+	}), () => Effect.sync(() => {
+		target.removeEventListener("online", changed);
+		target.removeEventListener("offline", changed);
+	}));
+	const changes = Stream.fromPubSub(events).pipe(Stream.mapEffect(() => state.set(navigator.onLine !== false)));
+	yield* Stream.runDrain(changes).pipe(Effect.forkScoped({ startImmediately: true }));
+	if (typeof window === "undefined") yield* Effect.forever(Effect.sleep(WORKER_CONNECTIVITY_SAMPLE_MS).pipe(Effect.andThen(Effect.sync(sample)))).pipe(Effect.forkScoped);
+	return {
+		online: Effect.suspend(() => {
+			sample();
+			const online = navigator.onLine !== false;
+			return state.set(online).pipe(Effect.as(online));
+		}),
+		changes: state.changes
+	};
+});
 //#endregion
-export { NavigatorNetworkConnectivity };
+export { makeNavigatorNetworkConnectivity };
 
 //# sourceMappingURL=NavigatorNetworkConnectivity.js.map

package/lib/NavigatorNetworkConnectivity.js.map

@@ -1 +1 @@
-{"version":3,"file":"NavigatorNetworkConnectivity.js","names":[],"sources":["../src/NavigatorNetworkConnectivity.ts"],"sourcesContent":["import { once, race, run, sleep, type Task } from \"effection\";\nimport type { NetworkConnectivity } from \"@party-stack/runtime\";\n\nconst ONLINE_STABILIZATION_MS = 1_000;\n\nexport class NavigatorNetworkConnectivity implements NetworkConnectivity {\n    private readonly listeners = new Set<(isConnected: boolean) => void>();\n    private lifetime!: Task<void>;\n    private connected: boolean;\n    private closePromise: Promise<void> | undefined;\n\n    private constructor(initiallyConnected: boolean) {\n        this.connected = initiallyConnected;\n    }\n\n    static create(): NavigatorNetworkConnectivity {\n        const connectivity = new NavigatorNetworkConnectivity(navigator.onLine);\n        connectivity.lifetime = run(function* () {\n            while (true) {\n                const online = yield* race([\n                    (function* () {\n                        yield* once(window, \"online\");\n                        return true;\n                    })(),\n                    (function* () {\n                        yield* once(window, \"offline\");\n                        return false;\n                    })(),\n                ]);\n                if (!online) {\n                    connectivity.setConnected(false);\n                    continue;\n                }\n                if (connectivity.isConnected) continue;\n\n                const stabilized = yield* race([\n                    (function* () {\n                        yield* sleep(ONLINE_STABILIZATION_MS);\n                        return navigator.onLine;\n                    })(),\n                    (function* () {\n                        yield* once(window, \"offline\");\n                        return false;\n                    })(),\n                ]);\n                connectivity.setConnected(stabilized);\n            }\n        });\n        void connectivity.lifetime.catch(() => undefined);\n        return connectivity;\n    }\n\n    get isConnected(): boolean {\n        return this.connected;\n    }\n\n    subscribe(listener: (isConnected: boolean) => void): () => void {\n        this.listeners.add(listener);\n        return () => {\n            this.listeners.delete(listener);\n        };\n    }\n\n    close(): Promise<void> {\n        this.closePromise ??= Promise.resolve(this.lifetime.halt()).finally(() => {\n            this.listeners.clear();\n        });\n        return this.closePromise;\n    }\n\n    private setConnected(isConnected: boolean): void {\n        if (isConnected === this.connected) return;\n        this.connected = isConnected;\n        for (const listener of this.listeners) {\n            listener(isConnected);\n        }\n    }\n}\n"],"mappings":";;AAGA,MAAM,0BAA0B;AAEhC,IAAa,+BAAb,MAAa,6BAA4D;CACrE,4BAA6B,IAAI,IAAoC;CACrE;CACA;CACA;CAEA,YAAoB,oBAA6B;EAC7C,KAAK,YAAY;CACrB;CAEA,OAAO,SAAuC;EAC1C,MAAM,eAAe,IAAI,6BAA6B,UAAU,MAAM;EACtE,aAAa,WAAW,IAAI,aAAa;GACrC,OAAO,MAAM;IAWT,IAAI,EAAC,OAViB,KAAK,EACtB,aAAa;KACV,OAAO,KAAK,QAAQ,QAAQ;KAC5B,OAAO;IACX,EAAA,CAAG,IACF,aAAa;KACV,OAAO,KAAK,QAAQ,SAAS;KAC7B,OAAO;IACX,EAAA,CAAG,CACP,CAAC,IACY;KACT,aAAa,aAAa,KAAK;KAC/B;IACJ;IACA,IAAI,aAAa,aAAa;IAE9B,MAAM,aAAa,OAAO,KAAK,EAC1B,aAAa;KACV,OAAO,MAAM,uBAAuB;KACpC,OAAO,UAAU;IACrB,EAAA,CAAG,IACF,aAAa;KACV,OAAO,KAAK,QAAQ,SAAS;KAC7B,OAAO;IACX,EAAA,CAAG,CACP,CAAC;IACD,aAAa,aAAa,UAAU;GACxC;EACJ,CAAC;EACD,aAAkB,SAAS,YAAY,KAAA,CAAS;EAChD,OAAO;CACX;CAEA,IAAI,cAAuB;EACvB,OAAO,KAAK;CAChB;CAEA,UAAU,UAAsD;EAC5D,KAAK,UAAU,IAAI,QAAQ;EAC3B,aAAa;GACT,KAAK,UAAU,OAAO,QAAQ;EAClC;CACJ;CAEA,QAAuB;EACnB,KAAK,iBAAiB,QAAQ,QAAQ,KAAK,SAAS,KAAK,CAAC,CAAC,CAAC,cAAc;GACtE,KAAK,UAAU,MAAM;EACzB,CAAC;EACD,OAAO,KAAK;CAChB;CAEA,aAAqB,aAA4B;EAC7C,IAAI,gBAAgB,KAAK,WAAW;EACpC,KAAK,YAAY;EACjB,KAAK,MAAM,YAAY,KAAK,WACxB,SAAS,WAAW;CAE5B;AACJ"}
+{"version":3,"file":"NavigatorNetworkConnectivity.js","names":[],"sources":["../src/NavigatorNetworkConnectivity.ts"],"sourcesContent":["import { makeNetworkConnectivity } from \"@party-stack/runtime\";\nimport { Effect, PubSub, Stream } from \"effect\";\n\nconst WORKER_CONNECTIVITY_SAMPLE_MS = 1_000;\n\n/** Native listeners and the worker event fallback belong to the caller's platform scope. */\nexport const makeNavigatorNetworkConnectivity = Effect.fnUntraced(function* () {\n    const state = yield* makeNetworkConnectivity(navigator.onLine !== false);\n    const target = typeof window === \"undefined\" ? globalThis : window;\n    const events = yield* Effect.acquireRelease(\n        PubSub.sliding<void>({ capacity: 1, replay: 1 }),\n        PubSub.shutdown\n    );\n    let observed = navigator.onLine !== false;\n    const changed = () => {\n        observed = navigator.onLine !== false;\n        PubSub.publishUnsafe(events, undefined);\n    };\n    const sample = () => {\n        if (observed !== (navigator.onLine !== false)) changed();\n    };\n    yield* Effect.acquireRelease(\n        Effect.sync(() => {\n            target.addEventListener(\"online\", changed);\n            target.addEventListener(\"offline\", changed);\n        }),\n        () =>\n            Effect.sync(() => {\n                target.removeEventListener(\"online\", changed);\n                target.removeEventListener(\"offline\", changed);\n            })\n    );\n    const changes = Stream.fromPubSub(events).pipe(\n        Stream.mapEffect(() => state.set(navigator.onLine !== false))\n    );\n    yield* Stream.runDrain(changes).pipe(Effect.forkScoped({ startImmediately: true }));\n    // SharedWorkers can observe onLine changes without receiving native events\n    // (including Chromium's emulated offline mode). Sample only the local flag.\n    if (typeof window === \"undefined\")\n        yield* Effect.forever(\n            Effect.sleep(WORKER_CONNECTIVITY_SAMPLE_MS).pipe(Effect.andThen(Effect.sync(sample)))\n        ).pipe(Effect.forkScoped);\n    return {\n        online: Effect.suspend(() => {\n            sample();\n            // Record an observed state before returning it. Otherwise a\n            // quick reconnect can overtake the event consumer: it sees true -> true,\n            // and an outbox that just paused never receives its reconnect wakeup.\n            const online = navigator.onLine !== false;\n            return state.set(online).pipe(Effect.as(online));\n        }),\n        changes: state.changes,\n    };\n});\n"],"mappings":";;;AAGA,MAAM,gCAAgC;;AAGtC,MAAa,mCAAmC,OAAO,WAAW,aAAa;CAC3E,MAAM,QAAQ,OAAO,wBAAwB,UAAU,WAAW,KAAK;CACvE,MAAM,SAAS,OAAO,WAAW,cAAc,aAAa;CAC5D,MAAM,SAAS,OAAO,OAAO,eACzB,OAAO,QAAc;EAAE,UAAU;EAAG,QAAQ;CAAE,CAAC,GAC/C,OAAO,QACX;CACA,IAAI,WAAW,UAAU,WAAW;CACpC,MAAM,gBAAgB;EAClB,WAAW,UAAU,WAAW;EAChC,OAAO,cAAc,QAAQ,KAAA,CAAS;CAC1C;CACA,MAAM,eAAe;EACjB,IAAI,cAAc,UAAU,WAAW,QAAQ,QAAQ;CAC3D;CACA,OAAO,OAAO,eACV,OAAO,WAAW;EACd,OAAO,iBAAiB,UAAU,OAAO;EACzC,OAAO,iBAAiB,WAAW,OAAO;CAC9C,CAAC,SAEG,OAAO,WAAW;EACd,OAAO,oBAAoB,UAAU,OAAO;EAC5C,OAAO,oBAAoB,WAAW,OAAO;CACjD,CAAC,CACT;CACA,MAAM,UAAU,OAAO,WAAW,MAAM,CAAC,CAAC,KACtC,OAAO,gBAAgB,MAAM,IAAI,UAAU,WAAW,KAAK,CAAC,CAChE;CACA,OAAO,OAAO,SAAS,OAAO,CAAC,CAAC,KAAK,OAAO,WAAW,EAAE,kBAAkB,KAAK,CAAC,CAAC;CAGlF,IAAI,OAAO,WAAW,aAClB,OAAO,OAAO,QACV,OAAO,MAAM,6BAA6B,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,KAAK,MAAM,CAAC,CAAC,CACxF,CAAC,CAAC,KAAK,OAAO,UAAU;CAC5B,OAAO;EACH,QAAQ,OAAO,cAAc;GACzB,OAAO;GAIP,MAAM,SAAS,UAAU,WAAW;GACpC,OAAO,MAAM,IAAI,MAAM,CAAC,CAAC,KAAK,OAAO,GAAG,MAAM,CAAC;EACnD,CAAC;EACD,SAAS,MAAM;CACnB;AACJ,CAAC"}

package/lib/OPFSBlobBytesStore.d.ts

@@ -1,15 +1,16 @@
-import { BlobBytesStore } from "@party-stack/runtime";
+import { BlobBytesService, ByteInput } from "@party-stack/runtime";
+import { Effect } from "effect";
 //#region src/OPFSBlobBytesStore.d.ts
 export interface OPFSBlobBytesStoreOptions {
   directoryName: string;
 }
-export declare class OPFSBlobBytesStore implements BlobBytesStore {
+export declare class OPFSBlobBytesStore implements BlobBytesService {
   #private;
+  readonly write: (id: string, value: ByteInput) => Effect.Effect<void, unknown, never>;
+  readonly read: (id: string) => Effect.Effect<import("@party-stack/runtime").ByteSource | undefined, import("effect/Cause").UnknownError, never>;
+  readonly delete: (id: string) => Effect.Effect<void, import("effect/Cause").UnknownError, never>;
+  readonly clear: () => Effect.Effect<void, import("effect/Cause").UnknownError, never>;
   constructor(options: OPFSBlobBytesStoreOptions);
-  write(id: string, blob: Blob): Promise<void>;
-  read(id: string): Promise<Blob>;
-  delete(id: string): Promise<void>;
-  clear(): Promise<void>;
 }
 //#endregion
 //# sourceMappingURL=OPFSBlobBytesStore.d.ts.map

package/lib/OPFSBlobBytesStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OPFSBlobBytesStore.d.ts","names":[],"sources":["../src/OPFSBlobBytesStore.ts"],"mappings":";;iBAEiB;EACb;;qBAOS,8BAA8B;;EAGvC,YAAY,SAAS;EAIf,MAAM,YAAY,MAAM,OAAO;EAa/B,KAAK,aAAa,QAAQ;EAM1B,OAAO,aAAa;EAYpB,SAAS"}
+{"version":3,"file":"OPFSBlobBytesStore.d.ts","names":[],"sources":["../src/OPFSBlobBytesStore.ts"],"mappings":";;;iBAGiB;EACb;;qBAsBS,8BAA8B;;WAG9B,QAAK,YAAc,OAAS,cAAS,OAAA;WACrC,OAAI,eAAc,OAAA,sCAAA,+CAAA;WAIlB,SAAM,eAAc,OAAA,oCAAA;WACpB,aAAK,OAAA,oCAAA;EAEd,YAAY,SAAS"}

package/lib/OPFSBlobBytesStore.js

@@ -1,43 +1,57 @@
+import { byteIO, byteSource } from "@party-stack/runtime";
+import { Effect, Stream } from "effect";
 //#region src/OPFSBlobBytesStore.ts
-function encodeFileName(id) {
-	return encodeURIComponent(id);
+/** Preserve existing valid names. Composite partition keys contain JSON backslashes,
+* which OPFS rejects; hashes also keep addresses within filesystem component limits.
+* The reserved # prefix cannot collide with URI-encoded file IDs or un-hashed directories.
+*/
+async function opfsName(name) {
+	const bytes = new TextEncoder().encode(name);
+	if (bytes.length > 0 && bytes.length <= 255 && !/[\\/\0]/.test(name) && name !== "." && name !== ".." && !name.startsWith("#")) return name;
+	const hash = await crypto.subtle.digest("SHA-256", bytes);
+	return `#${Array.from(new Uint8Array(hash), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 var OPFSBlobBytesStore = class {
 	#directoryName;
+	write = (id, value) => byteIO((signal) => this.#write(id, value, signal));
+	read = (id) => Effect.tryPromise(() => this.#read(id)).pipe(Effect.map((value) => value === void 0 ? void 0 : byteSource(value)));
+	delete = (id) => Effect.tryPromise(() => this.#delete(id));
+	clear = () => Effect.tryPromise(() => this.#clear());
 	constructor(options) {
 		this.#directoryName = options.directoryName;
 	}
-	async write(id, blob) {
-		const writable = await (await (await this.#directory()).getFileHandle(encodeFileName(id), { create: true })).createWritable();
+	async #write(id, input, signal) {
+		const writable = await (await (await this.#directory()).getFileHandle(await opfsName(encodeURIComponent(id)), { create: true })).createWritable();
+		await Stream.toReadableStream(byteSource(input).stream).pipeTo(writable, { signal });
+	}
+	async #read(id) {
 		try {
-			await writable.write(blob);
-		} finally {
-			await writable.close();
+			return await (await (await this.#directory()).getFileHandle(await opfsName(encodeURIComponent(id)))).getFile();
+		} catch (cause) {
+			if (cause instanceof DOMException && cause.name === "NotFoundError") return void 0;
+			throw cause;
 		}
 	}
-	async read(id) {
-		return (await (await this.#directory()).getFileHandle(encodeFileName(id))).getFile();
-	}
-	async delete(id) {
+	async #delete(id) {
 		const directory = await this.#directory();
 		try {
-			await directory.removeEntry(encodeFileName(id));
+			await directory.removeEntry(await opfsName(encodeURIComponent(id)));
 		} catch (error) {
 			if (error instanceof DOMException && error.name === "NotFoundError") return;
 			throw error;
 		}
 	}
-	async clear() {
+	async #clear() {
 		const root = await navigator.storage.getDirectory();
 		try {
-			await root.removeEntry(this.#directoryName, { recursive: true });
+			await root.removeEntry(await opfsName(this.#directoryName), { recursive: true });
 		} catch (error) {
 			if (error instanceof DOMException && error.name === "NotFoundError") return;
 			throw error;
 		}
 	}
 	async #directory() {
-		return (await navigator.storage.getDirectory()).getDirectoryHandle(this.#directoryName, { create: true });
+		return (await navigator.storage.getDirectory()).getDirectoryHandle(await opfsName(this.#directoryName), { create: true });
 	}
 };
 //#endregion

package/lib/OPFSBlobBytesStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"OPFSBlobBytesStore.js","names":[],"sources":["../src/OPFSBlobBytesStore.ts"],"sourcesContent":["import type { BlobBytesStore } from \"@party-stack/runtime\";\n\nexport interface OPFSBlobBytesStoreOptions {\n    directoryName: string;\n}\n\nfunction encodeFileName(id: string): string {\n    return encodeURIComponent(id);\n}\n\nexport class OPFSBlobBytesStore implements BlobBytesStore {\n    #directoryName: string;\n\n    constructor(options: OPFSBlobBytesStoreOptions) {\n        this.#directoryName = options.directoryName;\n    }\n\n    async write(id: string, blob: Blob): Promise<void> {\n        const directory = await this.#directory();\n        const fileHandle = await directory.getFileHandle(encodeFileName(id), {\n            create: true,\n        });\n        const writable = await fileHandle.createWritable();\n        try {\n            await writable.write(blob);\n        } finally {\n            await writable.close();\n        }\n    }\n\n    async read(id: string): Promise<Blob> {\n        const directory = await this.#directory();\n        const fileHandle = await directory.getFileHandle(encodeFileName(id));\n        return fileHandle.getFile();\n    }\n\n    async delete(id: string): Promise<void> {\n        const directory = await this.#directory();\n        try {\n            await directory.removeEntry(encodeFileName(id));\n        } catch (error) {\n            if (error instanceof DOMException && error.name === \"NotFoundError\") {\n                return;\n            }\n            throw error;\n        }\n    }\n\n    async clear(): Promise<void> {\n        const root = await navigator.storage.getDirectory();\n        try {\n            await root.removeEntry(this.#directoryName, {\n                recursive: true,\n            });\n        } catch (error) {\n            if (error instanceof DOMException && error.name === \"NotFoundError\") {\n                return;\n            }\n            throw error;\n        }\n    }\n\n    async #directory(): Promise<FileSystemDirectoryHandle> {\n        const root = await navigator.storage.getDirectory();\n        return root.getDirectoryHandle(this.#directoryName, { create: true });\n    }\n}\n"],"mappings":";AAMA,SAAS,eAAe,IAAoB;CACxC,OAAO,mBAAmB,EAAE;AAChC;AAEA,IAAa,qBAAb,MAA0D;CACtD;CAEA,YAAY,SAAoC;EAC5C,KAAK,iBAAiB,QAAQ;CAClC;CAEA,MAAM,MAAM,IAAY,MAA2B;EAK/C,MAAM,WAAW,OAAM,OAHE,MADD,KAAK,WAAW,EAAA,CACL,cAAc,eAAe,EAAE,GAAG,EACjE,QAAQ,KACZ,CAAC,EAAA,CACiC,eAAe;EACjD,IAAI;GACA,MAAM,SAAS,MAAM,IAAI;EAC7B,UAAU;GACN,MAAM,SAAS,MAAM;EACzB;CACJ;CAEA,MAAM,KAAK,IAA2B;EAGlC,QAAO,OADkB,MADD,KAAK,WAAW,EAAA,CACL,cAAc,eAAe,EAAE,CAAC,EAAA,CACjD,QAAQ;CAC9B;CAEA,MAAM,OAAO,IAA2B;EACpC,MAAM,YAAY,MAAM,KAAK,WAAW;EACxC,IAAI;GACA,MAAM,UAAU,YAAY,eAAe,EAAE,CAAC;EAClD,SAAS,OAAO;GACZ,IAAI,iBAAiB,gBAAgB,MAAM,SAAS,iBAChD;GAEJ,MAAM;EACV;CACJ;CAEA,MAAM,QAAuB;EACzB,MAAM,OAAO,MAAM,UAAU,QAAQ,aAAa;EAClD,IAAI;GACA,MAAM,KAAK,YAAY,KAAK,gBAAgB,EACxC,WAAW,KACf,CAAC;EACL,SAAS,OAAO;GACZ,IAAI,iBAAiB,gBAAgB,MAAM,SAAS,iBAChD;GAEJ,MAAM;EACV;CACJ;CAEA,MAAM,aAAiD;EAEnD,QAAO,MADY,UAAU,QAAQ,aAAa,EAAA,CACtC,mBAAmB,KAAK,gBAAgB,EAAE,QAAQ,KAAK,CAAC;CACxE;AACJ"}
+{"version":3,"file":"OPFSBlobBytesStore.js","names":[],"sources":["../src/OPFSBlobBytesStore.ts"],"sourcesContent":["import { byteSource, type ByteInput, byteIO, type BlobBytesService } from \"@party-stack/runtime\";\nimport { Effect, Stream } from \"effect\";\n\nexport interface OPFSBlobBytesStoreOptions {\n    directoryName: string;\n}\n\n/** Preserve existing valid names. Composite partition keys contain JSON backslashes,\n * which OPFS rejects; hashes also keep addresses within filesystem component limits.\n * The reserved # prefix cannot collide with URI-encoded file IDs or un-hashed directories.\n */\nasync function opfsName(name: string): Promise<string> {\n    const bytes = new TextEncoder().encode(name);\n    if (\n        bytes.length > 0 &&\n        bytes.length <= 255 &&\n        !/[\\\\/\\0]/.test(name) &&\n        name !== \".\" &&\n        name !== \"..\" &&\n        !name.startsWith(\"#\")\n    )\n        return name;\n    const hash = await crypto.subtle.digest(\"SHA-256\", bytes);\n    return `#${Array.from(new Uint8Array(hash), (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\")}`;\n}\n\nexport class OPFSBlobBytesStore implements BlobBytesService {\n    #directoryName: string;\n\n    readonly write = (id: string, value: ByteInput) => byteIO((signal) => this.#write(id, value, signal));\n    readonly read = (id: string) =>\n        Effect.tryPromise(() => this.#read(id)).pipe(\n            Effect.map((value) => (value === undefined ? undefined : byteSource(value)))\n        );\n    readonly delete = (id: string) => Effect.tryPromise(() => this.#delete(id));\n    readonly clear = () => Effect.tryPromise(() => this.#clear());\n\n    constructor(options: OPFSBlobBytesStoreOptions) {\n        this.#directoryName = options.directoryName;\n    }\n\n    async #write(id: string, input: ByteInput, signal?: AbortSignal): Promise<void> {\n        const directory = await this.#directory();\n        const fileHandle = await directory.getFileHandle(await opfsName(encodeURIComponent(id)), {\n            create: true,\n        });\n        const writable = await fileHandle.createWritable();\n        await Stream.toReadableStream(byteSource(input).stream).pipeTo(writable, { signal });\n    }\n\n    async #read(id: string): Promise<Blob | undefined> {\n        try {\n            const directory = await this.#directory();\n            const fileHandle = await directory.getFileHandle(await opfsName(encodeURIComponent(id)));\n            return await fileHandle.getFile();\n        } catch (cause) {\n            if (cause instanceof DOMException && cause.name === \"NotFoundError\") return undefined;\n            throw cause;\n        }\n    }\n\n    async #delete(id: string): Promise<void> {\n        const directory = await this.#directory();\n        try {\n            await directory.removeEntry(await opfsName(encodeURIComponent(id)));\n        } catch (error) {\n            if (error instanceof DOMException && error.name === \"NotFoundError\") {\n                return;\n            }\n            throw error;\n        }\n    }\n\n    async #clear(): Promise<void> {\n        const root = await navigator.storage.getDirectory();\n        try {\n            await root.removeEntry(await opfsName(this.#directoryName), {\n                recursive: true,\n            });\n        } catch (error) {\n            if (error instanceof DOMException && error.name === \"NotFoundError\") {\n                return;\n            }\n            throw error;\n        }\n    }\n\n    async #directory(): Promise<FileSystemDirectoryHandle> {\n        const root = await navigator.storage.getDirectory();\n        return root.getDirectoryHandle(await opfsName(this.#directoryName), { create: true });\n    }\n}\n"],"mappings":";;;;;;;AAWA,eAAe,SAAS,MAA+B;CACnD,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI;CAC3C,IACI,MAAM,SAAS,KACf,MAAM,UAAU,OAChB,CAAC,UAAU,KAAK,IAAI,KACpB,SAAS,OACT,SAAS,QACT,CAAC,KAAK,WAAW,GAAG,GAEpB,OAAO;CACX,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK;CACxD,OAAO,IAAI,MAAM,KAAK,IAAI,WAAW,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;AACrG;AAEA,IAAa,qBAAb,MAA4D;CACxD;CAEA,SAAkB,IAAY,UAAqB,QAAQ,WAAW,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC;CACpG,QAAiB,OACb,OAAO,iBAAiB,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,KACpC,OAAO,KAAK,UAAW,UAAU,KAAA,IAAY,KAAA,IAAY,WAAW,KAAK,CAAE,CAC/E;CACJ,UAAmB,OAAe,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;CAC1E,cAAuB,OAAO,iBAAiB,KAAK,OAAO,CAAC;CAE5D,YAAY,SAAoC;EAC5C,KAAK,iBAAiB,QAAQ;CAClC;CAEA,MAAM,OAAO,IAAY,OAAkB,QAAqC;EAK5E,MAAM,WAAW,OAAM,OAHE,MADD,KAAK,WAAW,EAAA,CACL,cAAc,MAAM,SAAS,mBAAmB,EAAE,CAAC,GAAG,EACrF,QAAQ,KACZ,CAAC,EAAA,CACiC,eAAe;EACjD,MAAM,OAAO,iBAAiB,WAAW,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,UAAU,EAAE,OAAO,CAAC;CACvF;CAEA,MAAM,MAAM,IAAuC;EAC/C,IAAI;GAGA,OAAO,OAAM,OADY,MADD,KAAK,WAAW,EAAA,CACL,cAAc,MAAM,SAAS,mBAAmB,EAAE,CAAC,CAAC,EAAA,CAC/D,QAAQ;EACpC,SAAS,OAAO;GACZ,IAAI,iBAAiB,gBAAgB,MAAM,SAAS,iBAAiB,OAAO,KAAA;GAC5E,MAAM;EACV;CACJ;CAEA,MAAM,QAAQ,IAA2B;EACrC,MAAM,YAAY,MAAM,KAAK,WAAW;EACxC,IAAI;GACA,MAAM,UAAU,YAAY,MAAM,SAAS,mBAAmB,EAAE,CAAC,CAAC;EACtE,SAAS,OAAO;GACZ,IAAI,iBAAiB,gBAAgB,MAAM,SAAS,iBAChD;GAEJ,MAAM;EACV;CACJ;CAEA,MAAM,SAAwB;EAC1B,MAAM,OAAO,MAAM,UAAU,QAAQ,aAAa;EAClD,IAAI;GACA,MAAM,KAAK,YAAY,MAAM,SAAS,KAAK,cAAc,GAAG,EACxD,WAAW,KACf,CAAC;EACL,SAAS,OAAO;GACZ,IAAI,iBAAiB,gBAAgB,MAAM,SAAS,iBAChD;GAEJ,MAAM;EACV;CACJ;CAEA,MAAM,aAAiD;EAEnD,QAAO,MADY,UAAU,QAAQ,aAAa,EAAA,CACtC,mBAAmB,MAAM,SAAS,KAAK,cAAc,GAAG,EAAE,QAAQ,KAAK,CAAC;CACxF;AACJ"}

package/lib/WebRuntime.d.ts

@@ -0,0 +1,30 @@
+import { Runtime, RuntimeAcquisitionError, RuntimePartition, Runtimes } from "@party-stack/runtime";
+import { Effect, Layer, Scope } from "effect";
+import { TablesService } from "@party-stack/ontology-storage/tables";
+//#region src/WebRuntime.d.ts
+export interface WebRuntimeOptions {
+  /** Selects the built-in tables and ancillary blob/keyring/capacity persistence. */
+  readonly storage?: "indexeddb" | "memory";
+  /** Replace table acquisition without changing browser capabilities or opening built-in tables.
+   * The acquisition Scope owns open resources. Destroy must also work after that Scope closes;
+   * it deletes this partition's custom tables when the replica is forgotten.
+   */
+  readonly tables?: Effect.Effect<{
+    readonly tables: TablesService;
+    readonly destroy: Effect.Effect<void, RuntimeAcquisitionError>;
+  }, RuntimeAcquisitionError, RuntimePartition | Scope.Scope>;
+  /** Explicitly allow a non-extractable AES-GCM CryptoKey to persist in IndexedDB across reloads.
+   * Same-origin code can still use it to decrypt: this is not a vault lock or protection from XSS.
+   * Keys are separate from ordinary table exports. Clearing site data loses the keys and makes
+   * remaining local ciphertext unreadable. This flag does not opt encrypted properties into caching;
+   * individual decrypt calls must request cache:true. Omitted keys must be composed separately.
+   */
+  readonly persistEncryptionKeys?: boolean;
+}
+/** Lazy platform acquisition. The containing Layer Scope owns all open resources. */
+export declare const make: (options?: WebRuntimeOptions | undefined) => Effect.Effect<import("@party-stack/runtime").RuntimeService, RuntimeAcquisitionError, RuntimePartition | Scope.Scope>;
+export declare const layer: (options?: WebRuntimeOptions) => Layer.Layer<Runtime, RuntimeAcquisitionError, RuntimePartition>;
+/** Browser capabilities are available before any partition storage is acquired. */
+export declare const webRuntime: (options?: WebRuntimeOptions) => Layer.Layer<Runtimes, never, never>;
+//#endregion
+//# sourceMappingURL=WebRuntime.d.ts.map

package/lib/WebRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebRuntime.d.ts","names":[],"sources":["../src/WebRuntime.ts"],"mappings":";;;;iBAciB;;WAEJ;;;;;WAKA,SAAS,OAAO;aACV,QAAQ;aAAwB,SAAS,OAAO,aAAa;KACxE,yBACA,mBAAmB,MAAM;;;;;;;WAQpB;;;qBAIA,OAAI,UAAA,kCAAA,OAAA,sCAAA,gBAAA,yBAAA,mBAAA,MAAA;qBAoFJ,QAAK,UAAa,sBAAiB,MAAA,MAAA,SAAA,yBAAA;;qBAGnC,aAAU,UAAa,sBAAiB,MAAA,MAAA"}

package/lib/WebRuntime.js

@@ -0,0 +1,83 @@
+import { makeNavigatorNetworkConnectivity } from "./NavigatorNetworkConnectivity.js";
+import { OPFSBlobBytesStore } from "./OPFSBlobBytesStore.js";
+import { createWebBrowserAuthentication } from "./createWebBrowserAuthentication.js";
+import { MemoryBlobBytesStore, Runtime, RuntimeError, RuntimePartition, Runtimes, makeMemoryEncryptionKeyring } from "@party-stack/runtime";
+import { Effect, Layer } from "effect";
+import * as IndexedDb from "@effect/platform-browser/IndexedDb";
+import { makeEncryptionKeyring } from "@party-stack/indexeddb-ontology-storage/encryption-keyring";
+import * as IndexedDbTables from "@party-stack/indexeddb-ontology-storage/tables";
+import * as Memory from "@party-stack/ontology-storage/memory/tables";
+//#region src/WebRuntime.ts
+/** Lazy platform acquisition. The containing Layer Scope owns all open resources. */
+const make = Effect.fn("WebRuntime.make")(function* (options = {}) {
+	const { owner, namespace } = yield* RuntimePartition;
+	const persistent = options.storage !== "memory";
+	if (persistent && (!globalThis.indexedDB || !globalThis.IDBKeyRange || !globalThis.navigator?.storage?.getDirectory)) return yield* new RuntimeError({
+		operation: "webRuntime.storage",
+		cause: /* @__PURE__ */ new Error("IndexedDB and OPFS are unavailable. Isolated memory storage can be selected explicitly.")
+	});
+	const name = `party-stack:${JSON.stringify([owner, namespace])}`;
+	const connectivity = yield* makeNavigatorNetworkConnectivity();
+	const indexedDb = Layer.sync(IndexedDb.IndexedDb)(() => IndexedDb.make({
+		indexedDB: globalThis.indexedDB,
+		IDBKeyRange: globalThis.IDBKeyRange
+	}));
+	const blobBytes = persistent ? new OPFSBlobBytesStore({ directoryName: `${name}:blobs` }) : new MemoryBlobBytesStore();
+	const customTables = options.tables ? yield* options.tables : void 0;
+	const adapter = {
+		capacity: {
+			memory: Effect.succeed(void 0),
+			storage: persistent ? Effect.tryPromise({
+				try: async () => {
+					if (!globalThis.navigator?.storage?.estimate) return void 0;
+					const estimate = await navigator.storage.estimate();
+					return {
+						scope: "origin",
+						usedBytes: estimate.usage,
+						limitBytes: estimate.quota,
+						availableBytes: estimate.quota === void 0 || estimate.usage === void 0 ? void 0 : Math.max(0, estimate.quota - estimate.usage)
+					};
+				},
+				catch: (cause) => new RuntimeError({
+					operation: "capacity.storage",
+					cause
+				})
+			}) : Effect.succeed(void 0)
+		},
+		connectivity,
+		blobBytes,
+		tables: customTables?.tables ?? (persistent ? yield* IndexedDbTables.make({ databaseName: `${name}:storage` }).pipe(Effect.provide(indexedDb)) : yield* Memory.make()),
+		destroy: persistent || customTables ? Effect.all([
+			customTables?.destroy ?? (persistent ? Effect.all([removeDatabase(name), removeDatabase(`${name}:storage`)], { concurrency: "unbounded" }) : Effect.void),
+			persistent ? removeDatabase(`${name}:keys`) : Effect.void,
+			blobBytes instanceof OPFSBlobBytesStore ? blobBytes.clear() : Effect.void
+		], { concurrency: "unbounded" }).pipe(Effect.asVoid, Effect.mapError((cause) => new RuntimeError({
+			operation: "destroy",
+			cause
+		}))) : void 0,
+		encryptionKeyring: persistent && options.persistEncryptionKeys ? yield* makeEncryptionKeyring(`${name}:keys`).pipe(Effect.provide(indexedDb)) : persistent ? void 0 : yield* makeMemoryEncryptionKeyring(),
+		browserAuthentication: typeof window !== "undefined" ? createWebBrowserAuthentication() : void 0
+	};
+	return yield* Runtime.make(adapter);
+});
+const layer = (options = {}) => Layer.effect(Runtime, make(options));
+/** Browser capabilities are available before any partition storage is acquired. */
+const webRuntime = (options = {}) => Runtimes.layer(layer(options), { browserAuthentication: typeof window !== "undefined" ? createWebBrowserAuthentication() : void 0 });
+function deleteDatabase(name) {
+	return new Promise((resolve, reject) => {
+		const request = globalThis.indexedDB.deleteDatabase(name);
+		request.onsuccess = () => resolve();
+		request.onerror = () => reject(new Error(`IndexedDB database "${name}" could not be deleted.`, { cause: request.error }));
+	});
+}
+const removeDatabase = (name) => Effect.tryPromise({
+	try: () => deleteDatabase(name),
+	catch: (cause) => new RuntimeError({
+		operation: "destroy",
+		cause
+	})
+});
+//#endregion
+export { layer, make, webRuntime };
+
+//# sourceMappingURL=WebRuntime.js.map

package/lib/WebRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebRuntime.js","names":[],"sources":["../src/WebRuntime.ts"],"sourcesContent":["import * as IndexedDb from \"@effect/platform-browser/IndexedDb\";\nimport { makeEncryptionKeyring } from \"@party-stack/indexeddb-ontology-storage/encryption-keyring\";\nimport * as IndexedDbTables from \"@party-stack/indexeddb-ontology-storage/tables\";\nimport * as Memory from \"@party-stack/ontology-storage/memory/tables\";\nimport { makeMemoryEncryptionKeyring, MemoryBlobBytesStore } from \"@party-stack/runtime\";\nimport { Runtime, RuntimeError, RuntimePartition, Runtimes } from \"@party-stack/runtime\";\nimport { Effect, Layer } from \"effect\";\nimport { createWebBrowserAuthentication } from \"./createWebBrowserAuthentication.js\";\nimport { makeNavigatorNetworkConnectivity } from \"./NavigatorNetworkConnectivity.js\";\nimport { OPFSBlobBytesStore } from \"./OPFSBlobBytesStore.js\";\nimport type { TablesService } from \"@party-stack/ontology-storage/tables\";\nimport type { RuntimeOptions, RuntimeAcquisitionError } from \"@party-stack/runtime\";\nimport type { Scope } from \"effect\";\n\nexport interface WebRuntimeOptions {\n    /** Selects the built-in tables and ancillary blob/keyring/capacity persistence. */\n    readonly storage?: \"indexeddb\" | \"memory\";\n    /** Replace table acquisition without changing browser capabilities or opening built-in tables.\n     * The acquisition Scope owns open resources. Destroy must also work after that Scope closes;\n     * it deletes this partition's custom tables when the replica is forgotten.\n     */\n    readonly tables?: Effect.Effect<\n        { readonly tables: TablesService; readonly destroy: Effect.Effect<void, RuntimeAcquisitionError> },\n        RuntimeAcquisitionError,\n        RuntimePartition | Scope.Scope\n    >;\n    /** Explicitly allow a non-extractable AES-GCM CryptoKey to persist in IndexedDB across reloads.\n     * Same-origin code can still use it to decrypt: this is not a vault lock or protection from XSS.\n     * Keys are separate from ordinary table exports. Clearing site data loses the keys and makes\n     * remaining local ciphertext unreadable. This flag does not opt encrypted properties into caching;\n     * individual decrypt calls must request cache:true. Omitted keys must be composed separately.\n     */\n    readonly persistEncryptionKeys?: boolean;\n}\n\n/** Lazy platform acquisition. The containing Layer Scope owns all open resources. */\nexport const make = Effect.fn(\"WebRuntime.make\")(function* (options: WebRuntimeOptions = {}) {\n    const { owner, namespace } = yield* RuntimePartition;\n    const persistent = options.storage !== \"memory\";\n    if (\n        persistent &&\n        (!globalThis.indexedDB || !globalThis.IDBKeyRange || !globalThis.navigator?.storage?.getDirectory)\n    )\n        return yield* new RuntimeError({\n            operation: \"webRuntime.storage\",\n            cause: new Error(\n                \"IndexedDB and OPFS are unavailable. Isolated memory storage can be selected explicitly.\"\n            ),\n        });\n    const name = `party-stack:${JSON.stringify([owner, namespace])}`;\n    const connectivity = yield* makeNavigatorNetworkConnectivity();\n    // Effect's layerWindow reads window; supplying the factory explicitly also works in workers.\n    const indexedDb = Layer.sync(IndexedDb.IndexedDb)(() =>\n        IndexedDb.make({ indexedDB: globalThis.indexedDB, IDBKeyRange: globalThis.IDBKeyRange })\n    );\n    const blobBytes = persistent\n        ? new OPFSBlobBytesStore({ directoryName: `${name}:blobs` })\n        : new MemoryBlobBytesStore();\n    const customTables = options.tables ? yield* options.tables : undefined;\n    const adapter: RuntimeOptions = {\n        capacity: {\n            memory: Effect.succeed(undefined),\n            storage: persistent\n                ? Effect.tryPromise({\n                      try: async () => {\n                          if (!globalThis.navigator?.storage?.estimate) return undefined;\n                          const estimate = await navigator.storage.estimate();\n                          return {\n                              scope: \"origin\" as const,\n                              usedBytes: estimate.usage,\n                              limitBytes: estimate.quota,\n                              availableBytes:\n                                  estimate.quota === undefined || estimate.usage === undefined\n                                      ? undefined\n                                      : Math.max(0, estimate.quota - estimate.usage),\n                          };\n                      },\n                      catch: (cause) => new RuntimeError({ operation: \"capacity.storage\", cause }),\n                  })\n                : Effect.succeed(undefined),\n        },\n        connectivity,\n        blobBytes,\n        tables:\n            customTables?.tables ??\n            (persistent\n                ? yield* IndexedDbTables.make({ databaseName: `${name}:storage` }).pipe(\n                      Effect.provide(indexedDb)\n                  )\n                : yield* Memory.make()),\n        destroy:\n            persistent || customTables\n                ? Effect.all(\n                      [\n                          customTables?.destroy ??\n                              (persistent\n                                  ? Effect.all([removeDatabase(name), removeDatabase(`${name}:storage`)], {\n                                        concurrency: \"unbounded\",\n                                    })\n                                  : Effect.void),\n                          persistent ? removeDatabase(`${name}:keys`) : Effect.void,\n                          blobBytes instanceof OPFSBlobBytesStore ? blobBytes.clear() : Effect.void,\n                      ],\n                      { concurrency: \"unbounded\" }\n                  ).pipe(\n                      Effect.asVoid,\n                      Effect.mapError((cause) => new RuntimeError({ operation: \"destroy\", cause }))\n                  )\n                : undefined,\n        encryptionKeyring:\n            persistent && options.persistEncryptionKeys\n                ? yield* makeEncryptionKeyring(`${name}:keys`).pipe(Effect.provide(indexedDb))\n                : persistent\n                  ? undefined\n                  : yield* makeMemoryEncryptionKeyring(),\n        browserAuthentication: typeof window !== \"undefined\" ? createWebBrowserAuthentication() : undefined,\n    };\n    return yield* Runtime.make(adapter);\n});\n\nexport const layer = (options: WebRuntimeOptions = {}) => Layer.effect(Runtime, make(options));\n\n/** Browser capabilities are available before any partition storage is acquired. */\nexport const webRuntime = (options: WebRuntimeOptions = {}) =>\n    Runtimes.layer(layer(options), {\n        browserAuthentication: typeof window !== \"undefined\" ? createWebBrowserAuthentication() : undefined,\n    });\n\nfunction deleteDatabase(name: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n        const request = globalThis.indexedDB.deleteDatabase(name);\n        request.onsuccess = () => resolve();\n        request.onerror = () =>\n            reject(new Error(`IndexedDB database \"${name}\" could not be deleted.`, { cause: request.error }));\n        // \"blocked\" is a progress event: cooperating connections may still be\n        // finishing transactions after close()/versionchange. The deletion is\n        // already queued and cannot be cancelled, so await its final result.\n    });\n}\n\nconst removeDatabase = (name: string) =>\n    Effect.tryPromise({\n        try: () => deleteDatabase(name),\n        catch: (cause) => new RuntimeError({ operation: \"destroy\", cause }),\n    });\n"],"mappings":";;;;;;;;;;;AAoCA,MAAa,OAAO,OAAO,GAAG,iBAAiB,CAAC,CAAC,WAAW,UAA6B,CAAC,GAAG;CACzF,MAAM,EAAE,OAAO,cAAc,OAAO;CACpC,MAAM,aAAa,QAAQ,YAAY;CACvC,IACI,eACC,CAAC,WAAW,aAAa,CAAC,WAAW,eAAe,CAAC,WAAW,WAAW,SAAS,eAErF,OAAO,OAAO,IAAI,aAAa;EAC3B,WAAW;EACX,uBAAO,IAAI,MACP,yFACJ;CACJ,CAAC;CACL,MAAM,OAAO,eAAe,KAAK,UAAU,CAAC,OAAO,SAAS,CAAC;CAC7D,MAAM,eAAe,OAAO,iCAAiC;CAE7D,MAAM,YAAY,MAAM,KAAK,UAAU,SAAS,CAAC,OAC7C,UAAU,KAAK;EAAE,WAAW,WAAW;EAAW,aAAa,WAAW;CAAY,CAAC,CAC3F;CACA,MAAM,YAAY,aACZ,IAAI,mBAAmB,EAAE,eAAe,GAAG,KAAK,QAAQ,CAAC,IACzD,IAAI,qBAAqB;CAC/B,MAAM,eAAe,QAAQ,SAAS,OAAO,QAAQ,SAAS,KAAA;CAC9D,MAAM,UAA0B;EAC5B,UAAU;GACN,QAAQ,OAAO,QAAQ,KAAA,CAAS;GAChC,SAAS,aACH,OAAO,WAAW;IACd,KAAK,YAAY;KACb,IAAI,CAAC,WAAW,WAAW,SAAS,UAAU,OAAO,KAAA;KACrD,MAAM,WAAW,MAAM,UAAU,QAAQ,SAAS;KAClD,OAAO;MACH,OAAO;MACP,WAAW,SAAS;MACpB,YAAY,SAAS;MACrB,gBACI,SAAS,UAAU,KAAA,KAAa,SAAS,UAAU,KAAA,IAC7C,KAAA,IACA,KAAK,IAAI,GAAG,SAAS,QAAQ,SAAS,KAAK;KACzD;IACJ;IACA,QAAQ,UAAU,IAAI,aAAa;KAAE,WAAW;KAAoB;IAAM,CAAC;GAC/E,CAAC,IACD,OAAO,QAAQ,KAAA,CAAS;EAClC;EACA;EACA;EACA,QACI,cAAc,WACb,aACK,OAAO,gBAAgB,KAAK,EAAE,cAAc,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,KAC7D,OAAO,QAAQ,SAAS,CAC5B,IACA,OAAO,OAAO,KAAK;EAC7B,SACI,cAAc,eACR,OAAO,IACH;GACI,cAAc,YACT,aACK,OAAO,IAAI,CAAC,eAAe,IAAI,GAAG,eAAe,GAAG,KAAK,SAAS,CAAC,GAAG,EAClE,aAAa,YACjB,CAAC,IACD,OAAO;GACjB,aAAa,eAAe,GAAG,KAAK,MAAM,IAAI,OAAO;GACrD,qBAAqB,qBAAqB,UAAU,MAAM,IAAI,OAAO;EACzE,GACA,EAAE,aAAa,YAAY,CAC/B,CAAC,CAAC,KACE,OAAO,QACP,OAAO,UAAU,UAAU,IAAI,aAAa;GAAE,WAAW;GAAW;EAAM,CAAC,CAAC,CAChF,IACA,KAAA;EACV,mBACI,cAAc,QAAQ,wBAChB,OAAO,sBAAsB,GAAG,KAAK,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,SAAS,CAAC,IAC3E,aACE,KAAA,IACA,OAAO,4BAA4B;EAC/C,uBAAuB,OAAO,WAAW,cAAc,+BAA+B,IAAI,KAAA;CAC9F;CACA,OAAO,OAAO,QAAQ,KAAK,OAAO;AACtC,CAAC;AAED,MAAa,SAAS,UAA6B,CAAC,MAAM,MAAM,OAAO,SAAS,KAAK,OAAO,CAAC;;AAG7F,MAAa,cAAc,UAA6B,CAAC,MACrD,SAAS,MAAM,MAAM,OAAO,GAAG,EAC3B,uBAAuB,OAAO,WAAW,cAAc,+BAA+B,IAAI,KAAA,EAC9F,CAAC;AAEL,SAAS,eAAe,MAA6B;CACjD,OAAO,IAAI,SAAS,SAAS,WAAW;EACpC,MAAM,UAAU,WAAW,UAAU,eAAe,IAAI;EACxD,QAAQ,kBAAkB,QAAQ;EAClC,QAAQ,gBACJ,OAAO,IAAI,MAAM,uBAAuB,KAAK,0BAA0B,EAAE,OAAO,QAAQ,MAAM,CAAC,CAAC;CAIxG,CAAC;AACL;AAEA,MAAM,kBAAkB,SACpB,OAAO,WAAW;CACd,WAAW,eAAe,IAAI;CAC9B,QAAQ,UAAU,IAAI,aAAa;EAAE,WAAW;EAAW;CAAM,CAAC;AACtE,CAAC"}

package/lib/createWebBrowserAuthentication.d.ts

@@ -1,5 +1,13 @@
 import { BrowserAuthentication } from "@party-stack/runtime";
 //#region src/createWebBrowserAuthentication.d.ts
+/** Call on the redirect page. A different opener origin must be explicitly configured;
+ * for example, a registered localhost callback returning to a named dev worktree.
+ */
+export declare function relayWebBrowserAuthenticationCallback(callbackUrl?: string, options?: {
+  openerOrigin?: string;
+  onAccepted?: () => void;
+}): (() => void) | undefined;
+/** The acquisition runs synchronously on web: reserve before any OAuth/RPC await. */
 export declare function createWebBrowserAuthentication(options?: {
   popupTarget?: string;
   popupFeatures?: string;

package/lib/createWebBrowserAuthentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createWebBrowserAuthentication.d.ts","names":[],"sources":["../src/createWebBrowserAuthentication.ts"],"mappings":";;wBAwBgB,+BACZ;EACI;EACA;IAEL"}
+{"version":3,"file":"createWebBrowserAuthentication.d.ts","names":[],"sources":["../src/createWebBrowserAuthentication.ts"],"mappings":";;;;;wBAsBgB,sCACZ,sBACA;EAAW;EAAuB;;;wBAyCtB,+BACZ;EAAW;EAAsB;IAClC"}

package/lib/createWebBrowserAuthentication.js

@@ -1,66 +1,163 @@
-import { BrowserAuthenticationCancelledError } from "@party-stack/runtime";
+import { BrowserAuthenticationError } from "@party-stack/runtime";
+import { Effect, Schema } from "effect";
 //#region src/createWebBrowserAuthentication.ts
+const callbackMessage = Schema.Struct({
+	type: Schema.Literal("party-stack:browser-authentication:callback"),
+	callbackUrl: Schema.String
+});
+const isCallbackMessage = Schema.is(callbackMessage);
+const acceptedMessage = Schema.Struct({
+	type: Schema.Literal("party-stack:browser-authentication:accepted"),
+	state: Schema.NullOr(Schema.String)
+});
+const isAcceptedMessage = Schema.is(acceptedMessage);
+/** Call on the redirect page. A different opener origin must be explicitly configured;
+* for example, a registered localhost callback returning to a named dev worktree.
+*/
+function relayWebBrowserAuthenticationCallback(callbackUrl = window.location.href, options = {}) {
+	const opener = window.opener;
+	if (!opener) return;
+	let cleanup = () => {};
+	try {
+		const callback = new URL(callbackUrl);
+		if (callback.origin !== window.location.origin) return;
+		const openerOrigin = new URL(options.openerOrigin ?? callback.origin).origin;
+		const state = callback.searchParams.get("state");
+		const accepted = (event) => {
+			if (event.origin !== openerOrigin || event.source !== opener || !isAcceptedMessage(event.data) || event.data.state !== state) return;
+			cleanup();
+			options.onAccepted?.();
+		};
+		cleanup = () => window.removeEventListener("message", accepted);
+		window.addEventListener("message", accepted);
+		opener.postMessage({
+			type: "party-stack:browser-authentication:callback",
+			callbackUrl
+		}, openerOrigin);
+		return cleanup;
+	} catch {
+		cleanup();
+		return;
+	}
+}
 function matchesRedirectUrl(candidate, redirectUrl) {
 	const actual = new URL(candidate);
 	const expected = new URL(redirectUrl);
 	return actual.origin === expected.origin && actual.pathname === expected.pathname;
 }
-function createRedirectSession() {
-	return {
-		open(authorizationUrl) {
-			location.assign(authorizationUrl);
-			return new Promise(() => void 0);
-		},
-		close() {
-			window.stop();
-		}
-	};
-}
+/** The acquisition runs synchronously on web: reserve before any OAuth/RPC await. */
 function createWebBrowserAuthentication(options = {}) {
-	return { start({ redirectUrl, presentation }) {
-		if (presentation !== "popup") return createRedirectSession();
-		const popup = window.open("about:blank", options.popupTarget ?? "party-stack-authentication", options.popupFeatures ?? "popup=yes,width=500,height=700");
-		if (!popup) return createRedirectSession();
-		let stopWaiting;
+	return { start: Effect.fnUntraced(function* ({ redirectUrl, presentation }) {
+		const popup = yield* Effect.try({
+			try: () => {
+				new URL(redirectUrl);
+				return presentation === "popup" ? window.open("about:blank", options.popupTarget ?? "party-stack-authentication", options.popupFeatures ?? "popup=yes,width=500,height=700") : null;
+			},
+			catch: (cause) => new BrowserAuthenticationError({
+				reason: "Configuration",
+				message: "Could not reserve browser authentication.",
+				cause
+			})
+		});
+		if (presentation === "popup" && !popup) return yield* new BrowserAuthenticationError({
+			reason: "Platform",
+			message: "The authentication popup was blocked."
+		});
+		let closed = false;
+		let used = false;
 		let cancel;
-		return {
-			open(authorizationUrl) {
-				popup.location.assign(authorizationUrl);
-				return new Promise((resolve, reject) => {
-					cancel = () => {
-						stopWaiting?.();
-						cancel = void 0;
-						reject(new BrowserAuthenticationCancelledError());
-					};
-					const timer = window.setInterval(() => {
-						if (popup.closed) {
-							cancel?.();
-							return;
-						}
+		const close = () => {
+			if (closed) return;
+			closed = true;
+			cancel?.();
+			if (popup) popup.close();
+			else if (used) window.stop();
+		};
+		yield* Effect.addFinalizer(() => Effect.sync(close));
+		return { open: (authorizationUrl) => Effect.suspend(() => {
+			if (used || closed) return Effect.fail(new BrowserAuthenticationError({
+				reason: "Configuration",
+				message: "This authentication session has already been used or closed."
+			}));
+			used = true;
+			if (!popup) return Effect.try({
+				try: () => location.assign(authorizationUrl),
+				catch: (cause) => new BrowserAuthenticationError({
+					reason: "Platform",
+					message: "Could not open browser authorization.",
+					cause
+				})
+			}).pipe(Effect.andThen(Effect.never));
+			return Effect.callback((resume) => {
+				const expected = new URL(redirectUrl);
+				let state;
+				try {
+					state = new URL(authorizationUrl).searchParams.get("state");
+				} catch (cause) {
+					resume(Effect.fail(new BrowserAuthenticationError({
+						reason: "Configuration",
+						message: "Invalid authorization URL.",
+						cause
+					})));
+					return;
+				}
+				let done = false;
+				const finish = (result) => {
+					if (done) return;
+					done = true;
+					cleanup();
+					resume(result);
+				};
+				const accept = (candidate) => {
+					try {
+						if (!matchesRedirectUrl(candidate, redirectUrl) || new URL(candidate).searchParams.get("state") !== state) return;
 						try {
-							const current = popup.location.href;
-							if (!matchesRedirectUrl(current, redirectUrl)) return;
-							stopWaiting?.();
-							cancel = void 0;
-							popup.close();
-							resolve({ callbackUrl: current });
+							popup.postMessage?.({
+								type: "party-stack:browser-authentication:accepted",
+								state
+							}, expected.origin);
 						} catch {}
-					}, 250);
-					stopWaiting = () => {
-						window.clearInterval(timer);
-						stopWaiting = void 0;
-					};
-				});
-			},
-			close() {
-				stopWaiting?.();
-				popup.close();
-				cancel?.();
-			}
-		};
-	} };
+						finish(Effect.succeed({ callbackUrl: candidate }));
+						close();
+					} catch {}
+				};
+				const message = (event) => {
+					if (event.origin === expected.origin && event.source === popup && isCallbackMessage(event.data)) accept(event.data.callbackUrl);
+				};
+				const cleanup = () => {
+					window.clearInterval(timer);
+					window.removeEventListener("message", message);
+					cancel = void 0;
+				};
+				cancel = () => finish(Effect.fail(new BrowserAuthenticationError({
+					reason: "Cancelled",
+					message: "Browser authentication was cancelled."
+				})));
+				window.addEventListener("message", message);
+				const timer = window.setInterval(() => {
+					if (popup.closed) {
+						cancel?.();
+						return;
+					}
+					try {
+						accept(popup.location.href);
+					} catch {}
+				}, 250);
+				try {
+					popup.location.assign(authorizationUrl);
+				} catch (cause) {
+					finish(Effect.fail(new BrowserAuthenticationError({
+						reason: "Platform",
+						message: "Could not open browser authorization.",
+						cause
+					})));
+				}
+				return Effect.sync(cleanup);
+			}).pipe(Effect.onInterrupt(() => Effect.sync(close)));
+		}) };
+	}) };
 }
 //#endregion
-export { createWebBrowserAuthentication };
+export { createWebBrowserAuthentication, relayWebBrowserAuthenticationCallback };
 
 //# sourceMappingURL=createWebBrowserAuthentication.js.map

package/lib/createWebBrowserAuthentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"createWebBrowserAuthentication.js","names":[],"sources":["../src/createWebBrowserAuthentication.ts"],"sourcesContent":["import {\n    BrowserAuthenticationCancelledError,\n    type BrowserAuthentication,\n    type BrowserAuthenticationSession,\n} from \"@party-stack/runtime\";\n\nfunction matchesRedirectUrl(candidate: string, redirectUrl: string): boolean {\n    const actual = new URL(candidate);\n    const expected = new URL(redirectUrl);\n    return actual.origin === expected.origin && actual.pathname === expected.pathname;\n}\n\nfunction createRedirectSession(): BrowserAuthenticationSession {\n    return {\n        open(authorizationUrl) {\n            location.assign(authorizationUrl);\n            return new Promise(() => undefined);\n        },\n        close() {\n            window.stop();\n        },\n    };\n}\n\nexport function createWebBrowserAuthentication(\n    options: {\n        popupTarget?: string;\n        popupFeatures?: string;\n    } = {}\n): BrowserAuthentication {\n    return {\n        start({ redirectUrl, presentation }) {\n            if (presentation !== \"popup\") {\n                return createRedirectSession();\n            }\n            const popup = window.open(\n                \"about:blank\",\n                options.popupTarget ?? \"party-stack-authentication\",\n                options.popupFeatures ?? \"popup=yes,width=500,height=700\"\n            );\n            if (!popup) return createRedirectSession();\n\n            let stopWaiting: (() => void) | undefined;\n            let cancel: (() => void) | undefined;\n            return {\n                open(authorizationUrl) {\n                    popup.location.assign(authorizationUrl);\n                    return new Promise<{\n                        callbackUrl: string;\n                    }>((resolve, reject) => {\n                        cancel = () => {\n                            stopWaiting?.();\n                            cancel = undefined;\n                            reject(new BrowserAuthenticationCancelledError());\n                        };\n                        const timer = window.setInterval(() => {\n                            if (popup.closed) {\n                                cancel?.();\n                                return;\n                            }\n                            try {\n                                const current = popup.location.href;\n                                if (!matchesRedirectUrl(current, redirectUrl)) {\n                                    return;\n                                }\n                                stopWaiting?.();\n                                cancel = undefined;\n                                popup.close();\n                                resolve({\n                                    callbackUrl: current,\n                                });\n                            } catch {\n                                // Cross-origin access is expected until the provider returns.\n                            }\n                        }, 250);\n                        stopWaiting = () => {\n                            window.clearInterval(timer);\n                            stopWaiting = undefined;\n                        };\n                    });\n                },\n                close() {\n                    stopWaiting?.();\n                    popup.close();\n                    cancel?.();\n                },\n            };\n        },\n    };\n}\n"],"mappings":";;AAMA,SAAS,mBAAmB,WAAmB,aAA8B;CACzE,MAAM,SAAS,IAAI,IAAI,SAAS;CAChC,MAAM,WAAW,IAAI,IAAI,WAAW;CACpC,OAAO,OAAO,WAAW,SAAS,UAAU,OAAO,aAAa,SAAS;AAC7E;AAEA,SAAS,wBAAsD;CAC3D,OAAO;EACH,KAAK,kBAAkB;GACnB,SAAS,OAAO,gBAAgB;GAChC,OAAO,IAAI,cAAc,KAAA,CAAS;EACtC;EACA,QAAQ;GACJ,OAAO,KAAK;EAChB;CACJ;AACJ;AAEA,SAAgB,+BACZ,UAGI,CAAC,GACgB;CACrB,OAAO,EACH,MAAM,EAAE,aAAa,gBAAgB;EACjC,IAAI,iBAAiB,SACjB,OAAO,sBAAsB;EAEjC,MAAM,QAAQ,OAAO,KACjB,eACA,QAAQ,eAAe,8BACvB,QAAQ,iBAAiB,gCAC7B;EACA,IAAI,CAAC,OAAO,OAAO,sBAAsB;EAEzC,IAAI;EACJ,IAAI;EACJ,OAAO;GACH,KAAK,kBAAkB;IACnB,MAAM,SAAS,OAAO,gBAAgB;IACtC,OAAO,IAAI,SAEP,SAAS,WAAW;KACpB,eAAe;MACX,cAAc;MACd,SAAS,KAAA;MACT,OAAO,IAAI,oCAAoC,CAAC;KACpD;KACA,MAAM,QAAQ,OAAO,kBAAkB;MACnC,IAAI,MAAM,QAAQ;OACd,SAAS;OACT;MACJ;MACA,IAAI;OACA,MAAM,UAAU,MAAM,SAAS;OAC/B,IAAI,CAAC,mBAAmB,SAAS,WAAW,GACxC;OAEJ,cAAc;OACd,SAAS,KAAA;OACT,MAAM,MAAM;OACZ,QAAQ,EACJ,aAAa,QACjB,CAAC;MACL,QAAQ,CAER;KACJ,GAAG,GAAG;KACN,oBAAoB;MAChB,OAAO,cAAc,KAAK;MAC1B,cAAc,KAAA;KAClB;IACJ,CAAC;GACL;GACA,QAAQ;IACJ,cAAc;IACd,MAAM,MAAM;IACZ,SAAS;GACb;EACJ;CACJ,EACJ;AACJ"}
+{"version":3,"file":"createWebBrowserAuthentication.js","names":[],"sources":["../src/createWebBrowserAuthentication.ts"],"sourcesContent":["import {\n    BrowserAuthenticationError,\n    type BrowserAuthentication,\n    type BrowserAuthenticationSession,\n} from \"@party-stack/runtime\";\nimport { Effect, Schema } from \"effect\";\n\nconst callbackMessage = Schema.Struct({\n    type: Schema.Literal(\"party-stack:browser-authentication:callback\"),\n    callbackUrl: Schema.String,\n});\nconst isCallbackMessage = Schema.is(callbackMessage);\n\nconst acceptedMessage = Schema.Struct({\n    type: Schema.Literal(\"party-stack:browser-authentication:accepted\"),\n    state: Schema.NullOr(Schema.String),\n});\nconst isAcceptedMessage = Schema.is(acceptedMessage);\n\n/** Call on the redirect page. A different opener origin must be explicitly configured;\n * for example, a registered localhost callback returning to a named dev worktree.\n */\nexport function relayWebBrowserAuthenticationCallback(\n    callbackUrl = window.location.href,\n    options: { openerOrigin?: string; onAccepted?: () => void } = {}\n): (() => void) | undefined {\n    const opener = window.opener;\n    if (!opener) return;\n    let cleanup = () => {};\n    try {\n        const callback = new URL(callbackUrl);\n        if (callback.origin !== window.location.origin) return;\n        const openerOrigin = new URL(options.openerOrigin ?? callback.origin).origin;\n        const state = callback.searchParams.get(\"state\");\n        const accepted = (event: MessageEvent<unknown>) => {\n            if (\n                event.origin !== openerOrigin ||\n                event.source !== opener ||\n                !isAcceptedMessage(event.data) ||\n                event.data.state !== state\n            )\n                return;\n            cleanup();\n            options.onAccepted?.();\n        };\n        cleanup = () => window.removeEventListener(\"message\", accepted);\n        window.addEventListener(\"message\", accepted);\n        opener.postMessage(\n            { type: \"party-stack:browser-authentication:callback\", callbackUrl },\n            openerOrigin\n        );\n        return cleanup;\n    } catch {\n        cleanup();\n        return;\n    }\n}\n\nfunction matchesRedirectUrl(candidate: string, redirectUrl: string): boolean {\n    const actual = new URL(candidate);\n    const expected = new URL(redirectUrl);\n    return actual.origin === expected.origin && actual.pathname === expected.pathname;\n}\n\n/** The acquisition runs synchronously on web: reserve before any OAuth/RPC await. */\nexport function createWebBrowserAuthentication(\n    options: { popupTarget?: string; popupFeatures?: string } = {}\n): BrowserAuthentication {\n    return {\n        start: Effect.fnUntraced(function* ({ redirectUrl, presentation }) {\n            const popup = yield* Effect.try({\n                try: () => {\n                    new URL(redirectUrl);\n                    return presentation === \"popup\"\n                        ? window.open(\n                              \"about:blank\",\n                              options.popupTarget ?? \"party-stack-authentication\",\n                              options.popupFeatures ?? \"popup=yes,width=500,height=700\"\n                          )\n                        : null;\n                },\n                catch: (cause) =>\n                    new BrowserAuthenticationError({\n                        reason: \"Configuration\",\n                        message: \"Could not reserve browser authentication.\",\n                        cause,\n                    }),\n            });\n            if (presentation === \"popup\" && !popup)\n                return yield* new BrowserAuthenticationError({\n                    reason: \"Platform\",\n                    message: \"The authentication popup was blocked.\",\n                });\n            let closed = false;\n            let used = false;\n            let cancel: (() => void) | undefined;\n            const close = () => {\n                if (closed) return;\n                closed = true;\n                cancel?.();\n                if (popup) popup.close();\n                else if (used) window.stop();\n            };\n            yield* Effect.addFinalizer(() => Effect.sync(close));\n            return {\n                open: (authorizationUrl: string) =>\n                    Effect.suspend(() => {\n                        if (used || closed)\n                            return Effect.fail(\n                                new BrowserAuthenticationError({\n                                    reason: \"Configuration\",\n                                    message: \"This authentication session has already been used or closed.\",\n                                })\n                            );\n                        used = true;\n                        if (!popup)\n                            return Effect.try({\n                                try: () => location.assign(authorizationUrl),\n                                catch: (cause) =>\n                                    new BrowserAuthenticationError({\n                                        reason: \"Platform\",\n                                        message: \"Could not open browser authorization.\",\n                                        cause,\n                                    }),\n                            }).pipe(Effect.andThen(Effect.never));\n                        return Effect.callback<{ callbackUrl: string }, BrowserAuthenticationError>(\n                            (resume) => {\n                                const expected = new URL(redirectUrl);\n                                let state: string | null;\n                                try {\n                                    state = new URL(authorizationUrl).searchParams.get(\"state\");\n                                } catch (cause) {\n                                    resume(\n                                        Effect.fail(\n                                            new BrowserAuthenticationError({\n                                                reason: \"Configuration\",\n                                                message: \"Invalid authorization URL.\",\n                                                cause,\n                                            })\n                                        )\n                                    );\n                                    return;\n                                }\n                                let done = false;\n                                const finish = (\n                                    result: Effect.Effect<{ callbackUrl: string }, BrowserAuthenticationError>\n                                ) => {\n                                    if (done) return;\n                                    done = true;\n                                    cleanup();\n                                    resume(result);\n                                };\n                                const accept = (candidate: string) => {\n                                    try {\n                                        if (\n                                            !matchesRedirectUrl(candidate, redirectUrl) ||\n                                            new URL(candidate).searchParams.get(\"state\") !== state\n                                        )\n                                            return;\n                                        try {\n                                            popup.postMessage?.(\n                                                {\n                                                    type: \"party-stack:browser-authentication:accepted\",\n                                                    state,\n                                                },\n                                                expected.origin\n                                            );\n                                        } catch {\n                                            /* The callback is already verified. */\n                                        }\n                                        finish(Effect.succeed({ callbackUrl: candidate }));\n                                        close();\n                                    } catch {\n                                        /* Ignore unrelated or malformed callback messages. */\n                                    }\n                                };\n                                const message = (event: MessageEvent<unknown>) => {\n                                    if (\n                                        event.origin === expected.origin &&\n                                        event.source === popup &&\n                                        isCallbackMessage(event.data)\n                                    )\n                                        accept(event.data.callbackUrl);\n                                };\n                                const cleanup = () => {\n                                    window.clearInterval(timer);\n                                    window.removeEventListener(\"message\", message);\n                                    cancel = undefined;\n                                };\n                                cancel = () =>\n                                    finish(\n                                        Effect.fail(\n                                            new BrowserAuthenticationError({\n                                                reason: \"Cancelled\",\n                                                message: \"Browser authentication was cancelled.\",\n                                            })\n                                        )\n                                    );\n                                window.addEventListener(\"message\", message);\n                                const timer = window.setInterval(() => {\n                                    if (popup.closed) {\n                                        cancel?.();\n                                        return;\n                                    }\n                                    try {\n                                        accept(popup.location.href);\n                                    } catch {\n                                        /* A cross-origin popup is expected. */\n                                    }\n                                }, 250);\n                                try {\n                                    popup.location.assign(authorizationUrl);\n                                } catch (cause) {\n                                    finish(\n                                        Effect.fail(\n                                            new BrowserAuthenticationError({\n                                                reason: \"Platform\",\n                                                message: \"Could not open browser authorization.\",\n                                                cause,\n                                            })\n                                        )\n                                    );\n                                }\n                                return Effect.sync(cleanup);\n                            }\n                        ).pipe(Effect.onInterrupt(() => Effect.sync(close)));\n                    }),\n            } satisfies BrowserAuthenticationSession;\n        }),\n    };\n}\n"],"mappings":";;;AAOA,MAAM,kBAAkB,OAAO,OAAO;CAClC,MAAM,OAAO,QAAQ,6CAA6C;CAClE,aAAa,OAAO;AACxB,CAAC;AACD,MAAM,oBAAoB,OAAO,GAAG,eAAe;AAEnD,MAAM,kBAAkB,OAAO,OAAO;CAClC,MAAM,OAAO,QAAQ,6CAA6C;CAClE,OAAO,OAAO,OAAO,OAAO,MAAM;AACtC,CAAC;AACD,MAAM,oBAAoB,OAAO,GAAG,eAAe;;;;AAKnD,SAAgB,sCACZ,cAAc,OAAO,SAAS,MAC9B,UAA8D,CAAC,GACvC;CACxB,MAAM,SAAS,OAAO;CACtB,IAAI,CAAC,QAAQ;CACb,IAAI,gBAAgB,CAAC;CACrB,IAAI;EACA,MAAM,WAAW,IAAI,IAAI,WAAW;EACpC,IAAI,SAAS,WAAW,OAAO,SAAS,QAAQ;EAChD,MAAM,eAAe,IAAI,IAAI,QAAQ,gBAAgB,SAAS,MAAM,CAAC,CAAC;EACtE,MAAM,QAAQ,SAAS,aAAa,IAAI,OAAO;EAC/C,MAAM,YAAY,UAAiC;GAC/C,IACI,MAAM,WAAW,gBACjB,MAAM,WAAW,UACjB,CAAC,kBAAkB,MAAM,IAAI,KAC7B,MAAM,KAAK,UAAU,OAErB;GACJ,QAAQ;GACR,QAAQ,aAAa;EACzB;EACA,gBAAgB,OAAO,oBAAoB,WAAW,QAAQ;EAC9D,OAAO,iBAAiB,WAAW,QAAQ;EAC3C,OAAO,YACH;GAAE,MAAM;GAA+C;EAAY,GACnE,YACJ;EACA,OAAO;CACX,QAAQ;EACJ,QAAQ;EACR;CACJ;AACJ;AAEA,SAAS,mBAAmB,WAAmB,aAA8B;CACzE,MAAM,SAAS,IAAI,IAAI,SAAS;CAChC,MAAM,WAAW,IAAI,IAAI,WAAW;CACpC,OAAO,OAAO,WAAW,SAAS,UAAU,OAAO,aAAa,SAAS;AAC7E;;AAGA,SAAgB,+BACZ,UAA4D,CAAC,GACxC;CACrB,OAAO,EACH,OAAO,OAAO,WAAW,WAAW,EAAE,aAAa,gBAAgB;EAC/D,MAAM,QAAQ,OAAO,OAAO,IAAI;GAC5B,WAAW;IACP,IAAI,IAAI,WAAW;IACnB,OAAO,iBAAiB,UAClB,OAAO,KACH,eACA,QAAQ,eAAe,8BACvB,QAAQ,iBAAiB,gCAC7B,IACA;GACV;GACA,QAAQ,UACJ,IAAI,2BAA2B;IAC3B,QAAQ;IACR,SAAS;IACT;GACJ,CAAC;EACT,CAAC;EACD,IAAI,iBAAiB,WAAW,CAAC,OAC7B,OAAO,OAAO,IAAI,2BAA2B;GACzC,QAAQ;GACR,SAAS;EACb,CAAC;EACL,IAAI,SAAS;EACb,IAAI,OAAO;EACX,IAAI;EACJ,MAAM,cAAc;GAChB,IAAI,QAAQ;GACZ,SAAS;GACT,SAAS;GACT,IAAI,OAAO,MAAM,MAAM;QAClB,IAAI,MAAM,OAAO,KAAK;EAC/B;EACA,OAAO,OAAO,mBAAmB,OAAO,KAAK,KAAK,CAAC;EACnD,OAAO,EACH,OAAO,qBACH,OAAO,cAAc;GACjB,IAAI,QAAQ,QACR,OAAO,OAAO,KACV,IAAI,2BAA2B;IAC3B,QAAQ;IACR,SAAS;GACb,CAAC,CACL;GACJ,OAAO;GACP,IAAI,CAAC,OACD,OAAO,OAAO,IAAI;IACd,WAAW,SAAS,OAAO,gBAAgB;IAC3C,QAAQ,UACJ,IAAI,2BAA2B;KAC3B,QAAQ;KACR,SAAS;KACT;IACJ,CAAC;GACT,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,KAAK,CAAC;GACxC,OAAO,OAAO,UACT,WAAW;IACR,MAAM,WAAW,IAAI,IAAI,WAAW;IACpC,IAAI;IACJ,IAAI;KACA,QAAQ,IAAI,IAAI,gBAAgB,CAAC,CAAC,aAAa,IAAI,OAAO;IAC9D,SAAS,OAAO;KACZ,OACI,OAAO,KACH,IAAI,2BAA2B;MAC3B,QAAQ;MACR,SAAS;MACT;KACJ,CAAC,CACL,CACJ;KACA;IACJ;IACA,IAAI,OAAO;IACX,MAAM,UACF,WACC;KACD,IAAI,MAAM;KACV,OAAO;KACP,QAAQ;KACR,OAAO,MAAM;IACjB;IACA,MAAM,UAAU,cAAsB;KAClC,IAAI;MACA,IACI,CAAC,mBAAmB,WAAW,WAAW,KAC1C,IAAI,IAAI,SAAS,CAAC,CAAC,aAAa,IAAI,OAAO,MAAM,OAEjD;MACJ,IAAI;OACA,MAAM,cACF;QACI,MAAM;QACN;OACJ,GACA,SAAS,MACb;MACJ,QAAQ,CAER;MACA,OAAO,OAAO,QAAQ,EAAE,aAAa,UAAU,CAAC,CAAC;MACjD,MAAM;KACV,QAAQ,CAER;IACJ;IACA,MAAM,WAAW,UAAiC;KAC9C,IACI,MAAM,WAAW,SAAS,UAC1B,MAAM,WAAW,SACjB,kBAAkB,MAAM,IAAI,GAE5B,OAAO,MAAM,KAAK,WAAW;IACrC;IACA,MAAM,gBAAgB;KAClB,OAAO,cAAc,KAAK;KAC1B,OAAO,oBAAoB,WAAW,OAAO;KAC7C,SAAS,KAAA;IACb;IACA,eACI,OACI,OAAO,KACH,IAAI,2BAA2B;KAC3B,QAAQ;KACR,SAAS;IACb,CAAC,CACL,CACJ;IACJ,OAAO,iBAAiB,WAAW,OAAO;IAC1C,MAAM,QAAQ,OAAO,kBAAkB;KACnC,IAAI,MAAM,QAAQ;MACd,SAAS;MACT;KACJ;KACA,IAAI;MACA,OAAO,MAAM,SAAS,IAAI;KAC9B,QAAQ,CAER;IACJ,GAAG,GAAG;IACN,IAAI;KACA,MAAM,SAAS,OAAO,gBAAgB;IAC1C,SAAS,OAAO;KACZ,OACI,OAAO,KACH,IAAI,2BAA2B;MAC3B,QAAQ;MACR,SAAS;MACT;KACJ,CAAC,CACL,CACJ;IACJ;IACA,OAAO,OAAO,KAAK,OAAO;GAC9B,CACJ,CAAC,CAAC,KAAK,OAAO,kBAAkB,OAAO,KAAK,KAAK,CAAC,CAAC;EACvD,CAAC,EACT;CACJ,CAAC,EACL;AACJ"}

package/lib/index.d.ts

@@ -1,2 +1,3 @@
-import { createWebRuntime } from "./createWebRuntime.js";
-export { createWebRuntime };
+import { WebRuntimeOptions, layer, make, webRuntime } from "./WebRuntime.js";
+import { createWebBrowserAuthentication, relayWebBrowserAuthenticationCallback } from "./createWebBrowserAuthentication.js";
+export { type WebRuntimeOptions, createWebBrowserAuthentication, layer, make, relayWebBrowserAuthenticationCallback, webRuntime };

package/lib/index.js

@@ -1 +1,3 @@
-export { createWebRuntime } from "./createWebRuntime.js";
+import { createWebBrowserAuthentication, relayWebBrowserAuthenticationCallback } from "./createWebBrowserAuthentication.js";
+import { layer, make, webRuntime } from "./WebRuntime.js";
+export { createWebBrowserAuthentication, layer, make, relayWebBrowserAuthenticationCallback, webRuntime };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@party-stack/web-runtime",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "files": [
     "lib"
   ],
@@ -12,19 +12,25 @@
     }
   },
   "dependencies": {
-    "effection": "^4.0.2",
-    "@party-stack/coordination": "0.3.1",
-    "@party-stack/db-indexeddb-persistence": "0.3.0",
-    "@party-stack/runtime": "0.4.2"
+    "@effect/platform-browser": "^4.0.5",
+    "effect": "^4.0.5",
+    "@party-stack/indexeddb-ontology-storage": "0.2.0",
+    "@party-stack/ontology-storage": "0.2.0",
+    "@party-stack/runtime": "0.5.0"
   },
   "devDependencies": {
-    "@tanstack/db": "0.14.0",
-    "@tanstack/db-sqlite-persistence-core": "0.4.9",
+    "@tanstack/db": "1.0.0-rc.1.4",
     "playwright": "^1.61.1",
     "typescript": "~7.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@1.2.0",
     "vite-plus": "1.2.0",
-    "@party-stack/build-config": "0.1.3"
+    "@party-stack/build-config": "0.2.0",
+    "@party-stack/connect": "0.2.0",
+    "@party-stack/ontology-backend": "0.2.0",
+    "@party-stack/ontology": "0.21.0",
+    "@party-stack/ontology-replica": "0.2.0",
+    "@party-stack/ontology-server": "0.11.0",
+    "@party-stack/ontology-spec": "0.2.0"
   },
   "scripts": {
     "test:browser": "tsc -p tsconfig.e2e.json && vp test run --config vitest.e2e.config.mjs"

package/lib/createWebRuntime.d.ts

@@ -1,5 +0,0 @@
-import { RuntimeAdapter } from "@party-stack/runtime";
-//#region src/createWebRuntime.d.ts
-export declare const createWebRuntime: (owner: string, namespace: string) => RuntimeAdapter;
-//#endregion
-//# sourceMappingURL=createWebRuntime.d.ts.map

package/lib/createWebRuntime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"createWebRuntime.d.ts","names":[],"sources":["../src/createWebRuntime.ts"],"mappings":";;qBAuBa,mBAAmB,eAAe,sBAAsB"}

package/lib/createWebRuntime.js

@@ -1,43 +0,0 @@
-import { NavigatorNetworkConnectivity } from "./NavigatorNetworkConnectivity.js";
-import { OPFSBlobBytesStore } from "./OPFSBlobBytesStore.js";
-import { createWebBrowserAuthentication } from "./createWebBrowserAuthentication.js";
-import { defineRuntime } from "@party-stack/runtime";
-import { LockBroadcastCoordination } from "@party-stack/coordination";
-import { createIndexedDBPersistence } from "@party-stack/db-indexeddb-persistence";
-//#region src/createWebRuntime.ts
-function deleteIndexedDB(name) {
-	return new Promise((resolve, reject) => {
-		const request = indexedDB.deleteDatabase(name);
-		request.onsuccess = () => resolve();
-		request.onerror = () => reject(new Error(`IndexedDB database "${name}" could not be deleted.`, { cause: request.error }));
-		request.onblocked = () => reject(/* @__PURE__ */ new Error(`IndexedDB database "${name}" could not be deleted because it is open.`));
-	});
-}
-const createWebRuntime = defineRuntime((owner, namespace) => {
-	const name = `party-stack:${owner}:${namespace}`;
-	const persistence = createIndexedDBPersistence({ databaseName: name });
-	const connectivity = NavigatorNetworkConnectivity.create();
-	const coordination = new LockBroadcastCoordination({ scope: name });
-	const blobBytes = new OPFSBlobBytesStore({ directoryName: `${name}:blobs` });
-	return {
-		owner,
-		namespace,
-		blobBytes,
-		coordination,
-		connectivity,
-		browserAuthentication: createWebBrowserAuthentication(),
-		persistence,
-		destroy: async () => {
-			await Promise.all([deleteIndexedDB(name), blobBytes.clear()]);
-		},
-		cleanup: async () => {
-			await coordination.close();
-			await connectivity.close();
-			persistence.close();
-		}
-	};
-});
-//#endregion
-export { createWebRuntime };
-
-//# sourceMappingURL=createWebRuntime.js.map

package/lib/createWebRuntime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"createWebRuntime.js","names":[],"sources":["../src/createWebRuntime.ts"],"sourcesContent":["import { LockBroadcastCoordination } from \"@party-stack/coordination\";\nimport { createIndexedDBPersistence } from \"@party-stack/db-indexeddb-persistence\";\nimport { defineRuntime } from \"@party-stack/runtime\";\nimport { createWebBrowserAuthentication } from \"./createWebBrowserAuthentication.js\";\nimport { NavigatorNetworkConnectivity } from \"./NavigatorNetworkConnectivity.js\";\nimport { OPFSBlobBytesStore } from \"./OPFSBlobBytesStore.js\";\nimport type { RuntimeAdapter } from \"@party-stack/runtime\";\n\nfunction deleteIndexedDB(name: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n        const request = indexedDB.deleteDatabase(name);\n        request.onsuccess = () => resolve();\n        request.onerror = () =>\n            reject(\n                new Error(`IndexedDB database \"${name}\" could not be deleted.`, {\n                    cause: request.error,\n                })\n            );\n        request.onblocked = () =>\n            reject(new Error(`IndexedDB database \"${name}\" could not be deleted because it is open.`));\n    });\n}\n\nexport const createWebRuntime: (owner: string, namespace: string) => RuntimeAdapter = defineRuntime(\n    (owner, namespace) => {\n        const name = `party-stack:${owner}:${namespace}`;\n        const persistence = createIndexedDBPersistence({\n            databaseName: name,\n        });\n        const connectivity = NavigatorNetworkConnectivity.create();\n        const coordination = new LockBroadcastCoordination({\n            scope: name,\n        });\n        const blobBytes = new OPFSBlobBytesStore({\n            directoryName: `${name}:blobs`,\n        });\n        return {\n            owner,\n            namespace,\n            blobBytes,\n            coordination,\n            connectivity,\n            browserAuthentication: createWebBrowserAuthentication(),\n            persistence,\n            destroy: async () => {\n                await Promise.all([deleteIndexedDB(name), blobBytes.clear()]);\n            },\n            cleanup: async () => {\n                await coordination.close();\n                await connectivity.close();\n                persistence.close();\n            },\n        };\n    }\n);\n"],"mappings":";;;;;;;AAQA,SAAS,gBAAgB,MAA6B;CAClD,OAAO,IAAI,SAAS,SAAS,WAAW;EACpC,MAAM,UAAU,UAAU,eAAe,IAAI;EAC7C,QAAQ,kBAAkB,QAAQ;EAClC,QAAQ,gBACJ,OACI,IAAI,MAAM,uBAAuB,KAAK,0BAA0B,EAC5D,OAAO,QAAQ,MACnB,CAAC,CACL;EACJ,QAAQ,kBACJ,uBAAO,IAAI,MAAM,uBAAuB,KAAK,2CAA2C,CAAC;CACjG,CAAC;AACL;AAEA,MAAa,mBAAyE,eACjF,OAAO,cAAc;CAClB,MAAM,OAAO,eAAe,MAAM,GAAG;CACrC,MAAM,cAAc,2BAA2B,EAC3C,cAAc,KAClB,CAAC;CACD,MAAM,eAAe,6BAA6B,OAAO;CACzD,MAAM,eAAe,IAAI,0BAA0B,EAC/C,OAAO,KACX,CAAC;CACD,MAAM,YAAY,IAAI,mBAAmB,EACrC,eAAe,GAAG,KAAK,QAC3B,CAAC;CACD,OAAO;EACH;EACA;EACA;EACA;EACA;EACA,uBAAuB,+BAA+B;EACtD;EACA,SAAS,YAAY;GACjB,MAAM,QAAQ,IAAI,CAAC,gBAAgB,IAAI,GAAG,UAAU,MAAM,CAAC,CAAC;EAChE;EACA,SAAS,YAAY;GACjB,MAAM,aAAa,MAAM;GACzB,MAAM,aAAa,MAAM;GACzB,YAAY,MAAM;EACtB;CACJ;AACJ,CACJ"}