cursedbelt 2.8.0 → 3.0.0

package/dist/react/session/CCSessionGate.d.ts

@@ -1,19 +0,0 @@
-import type { ReactNode } from 'react';
-import type { SignupMode } from '../../config/appConfig';
-export interface CCSessionGateProps {
-    children: ReactNode;
-    /** The app's signup gate (D33) — decides whether signup is offered at all. */
-    signupMode?: SignupMode;
-    /** Heading on the sign-in card. */
-    title?: string;
-    /**
-     * Paint the door in the dark-aurora "front door" look (see {@link AuthCard}'s
-     * `aurora`) so the marketing-site → product hand-off is visually continuous.
-     * Default `true` — this IS the app's full-screen logged-out front door, the one
-     * surface that should carry the brand canvas. An app that wants the plain
-     * token-themed door instead can pass `false`.
-     */
-    aurora?: boolean;
-}
-export declare function CCSessionGate({ children, signupMode, title, aurora, }: CCSessionGateProps): import("react").JSX.Element;
-//# sourceMappingURL=CCSessionGate.d.ts.map

package/dist/react/session/CCSessionGate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CCSessionGate.d.ts","sourceRoot":"","sources":["../../../src/react/session/CCSessionGate.tsx"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAKzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,UAAU,EACV,KAAiB,EACjB,MAAa,GACd,EAAE,kBAAkB,+BA6CpB"}

package/dist/react/session/CCSessionGate.js

@@ -1,67 +0,0 @@
-import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
-/**
- * `CCSessionGate` — the app-wide front door for a generated app whose guard
- * instance has accounts.
- *
- * It exists because a deployed `privateMode` app had no front door at all. The
- * server 401ed every anonymous request (correctly), `AppErrorOverlay` passes
- * 401 through by design ("left to the auth surface"), and there WAS no auth
- * surface: `AuthGate` was mounted nowhere and `notifyUnauthorized` had zero call
- * sites repo-wide. A signed-out visitor to app.cursedalchemy.com got a dashboard
- * of empty widgets and no way to log in.
- *
- * `AuthGate` could not have filled the role even if mounted: it POSTs
- * `{ username, password }` as JSON, while `POST /api/guard/login` takes the
- * email as a QUERY PARAM and the password as RAW BODY BYTES (so `guardService`
- * can zeroize them — `JSON.stringify` would materialise the passphrase as a
- * second, immutable string). So this gate is built on the two pieces that
- * already speak the real wire shape:
- *
- *   * {@link AccountSignInPanel} — the SAME surface `/account` renders, so the
- *     sign-in/sign-up switch, the D33 signup gate and the `data-cc-auth`
- *     markers the browser reachability gate drives are identical wherever the
- *     door appears. A second, bespoke login form here is exactly what would let
- *     the gate and `/account` drift apart.
- *   * `CCSessionProvider`'s `signIn`/`signUp` → `accountClient` → the endpoints.
- *
- * Two conditions close it, and both are needed:
- *
- *  1. **No session** — fail-closed, so nothing renders (and no view fires a
- *     request) before there is an identity. Deterministic: no flash of a
- *     signed-out shell, no waiting on a 401 round trip.
- *  2. **The 401 signal** ({@link subscribeUnauthorized}) — for the session that
- *     dies mid-use. `CCSessionProvider` self-clears only on a `SESSION_*` code;
- *     a bare 401 from any other surface would otherwise leave `signedIn` true
- *     and strand the user on a screen of errors with no way back.
- *
- * An `?invite=<token>` in the URL opens the signup half directly — that link IS
- * the instruction to create an account, and under `signupMode: 'invite'` it is
- * the only thing that offers signup at all.
- */
-import { useEffect, useState } from 'react';
-import { subscribeUnauthorized } from '../authSignal';
-import { AccountSignInPanel } from '../studios/GuardAccountPanels';
-import { useCcSession } from './sessionContext';
-export function CCSessionGate({ children, signupMode, title = 'Sign in', aurora = true, }) {
-    const { signedIn, signIn, signUp } = useCcSession();
-    const [rejected, setRejected] = useState(false);
-    const [invite] = useState(() => typeof window === 'undefined'
-        ? undefined
-        : (new URLSearchParams(window.location.search).get('invite') ?? undefined));
-    useEffect(() => subscribeUnauthorized(() => setRejected(true)), []);
-    // A fresh session supersedes an earlier rejection — otherwise the gate would
-    // stay closed over a perfectly good sign-in that happened after one 401.
-    useEffect(() => {
-        if (signedIn)
-            setRejected(false);
-    }, [signedIn]);
-    if (signedIn && !rejected)
-        return _jsx(_Fragment, { children: children });
-    const panel = (_jsx(AccountSignInPanel, { title: title, aurora: aurora, ...(signupMode ? { signupMode } : {}), ...(invite ? { inviteToken: invite } : {}), onSignIn: ({ email, password }) => signIn({ email, password }), onSignUp: ({ email, password, inviteToken }) => signUp({ email, password, ...(inviteToken ? { inviteToken } : {}) }) }));
-    // Aurora: the AuthCard is itself the full-screen, centered, aurora-lit surface —
-    // wrapping it in a second centering box (and a max-w-sm that would clip the
-    // canvas) is wrong, so the marker rides a display-contents wrapper instead.
-    // Plain: the door has no full-screen chrome of its own, so keep the centering box.
-    return aurora ? (_jsx("div", { "data-cc-session-gate": '', className: 'contents', children: panel })) : (_jsx("div", { "data-cc-session-gate": '', className: 'flex min-h-screen items-center justify-center p-6', children: _jsx("div", { className: 'w-full max-w-sm', children: panel }) }));
-}
-//# sourceMappingURL=CCSessionGate.js.map

package/dist/react/session/CCSessionGate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CCSessionGate.js","sourceRoot":"","sources":["../../../src/react/session/CCSessionGate.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAkBhD,MAAM,UAAU,aAAa,CAAC,EAC5B,QAAQ,EACR,UAAU,EACV,KAAK,GAAG,SAAS,EACjB,MAAM,GAAG,IAAI,GACM;IACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IACpD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAC7B,OAAO,MAAM,KAAK,WAAW;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAC7E,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpE,6EAA6E;IAC7E,yEAAyE;IACzE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ;YAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,IAAI,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAElD,MAAM,KAAK,GAAG,CACZ,KAAC,kBAAkB,IACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,KACV,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAClC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3C,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAC9D,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAC7C,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAEtE,CACH,CAAC;IAEF,iFAAiF;IACjF,4EAA4E;IAC5E,4EAA4E;IAC5E,mFAAmF;IACnF,OAAO,MAAM,CAAC,CAAC,CAAC,CACd,sCAA0B,EAAE,EAAC,SAAS,EAAC,UAAU,YAC9C,KAAK,GACF,CACP,CAAC,CAAC,CAAC,CACF,sCAA0B,EAAE,EAAC,SAAS,EAAC,mDAAmD,YACxF,cAAK,SAAS,EAAC,iBAAiB,YAAE,KAAK,GAAO,GAC1C,CACP,CAAC;AACJ,CAAC"}

package/dist/react/session/CCSessionProvider.d.ts

@@ -1,43 +0,0 @@
-/**
- * `CCSessionProvider` (02 §5) — the app's live session: the actions that mint
- * one, the timer that keeps it alive, and the rule that drops it the moment the
- * server says it is dead.
- *
- * It sits INSIDE `EngineDataProvider` (it calls the account routes through the
- * one `EngineClient`) but reads a store created OUTSIDE React, because that same
- * store is what supplies `EngineClientOptions.token` (see `ccSessionStore`).
- *
- * Two behaviors worth naming:
- *
- *   * **Proactive refresh.** `sessionTtlMinutes` is finite by design, and a user
- *     mid-edit should not be logged out by the clock. The provider re-mints a
- *     lead time before `exp` (02 §4) — an exchange, so the old token dies with
- *     it. A refresh that fails is NOT retried in a loop: the two ways it fails
- *     (revoked, membership changed) are both permanent, and a retry loop against
- *     a revoked session is a log-flooding machine.
- *   * **A 401 signs you out.** Every failure already funnels through the data
- *     tier's error sink; a `SESSION_*` 401 there means the token this client is
- *     presenting is dead server-side (expired, revoked, or a role change closed
- *     it). Continuing to render a signed-in shell after that is the bug where a
- *     demoted user still sees the admin panel until they reload.
- */
-import { type ReactNode } from 'react';
-import type { CCUserClaims } from '../../core/session/claims';
-import type { CCSession, CCSessionStore } from './ccSessionStore';
-export interface CCSessionProviderProps {
-    /** The module-scope store whose `token()` the EngineClient was built with. */
-    store: CCSessionStore;
-    /**
-     * How this device names itself in the sessions panel (02 §4). Default: the
-     * platform string, which is what a user recognizes ("MacIntel"), never the
-     * full user agent (a fingerprint nobody asked to store).
-     */
-    deviceLabel?: string;
-    /** Re-mint this many seconds before `exp`. Default 120; 0 disables refresh. */
-    refreshLeadSeconds?: number;
-    children: ReactNode;
-}
-export declare function CCSessionProvider({ store, deviceLabel, refreshLeadSeconds, children, }: CCSessionProviderProps): import("react").JSX.Element;
-/** The claims the shell renders with — null while signed out. */
-export declare const claimsOfSession: (session: CCSession | null) => CCUserClaims | null;
-//# sourceMappingURL=CCSessionProvider.d.ts.map

package/dist/react/session/CCSessionProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CCSessionProvider.d.ts","sourceRoot":"","sources":["../../../src/react/session/CCSessionProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,KAAK,SAAS,EAAiE,MAAM,OAAO,CAAC;AACtG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAU9D,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,8EAA8E;IAC9E,KAAK,EAAE,cAAc,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAQD,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EACL,WAAW,EACX,kBAAwB,EACxB,QAAQ,GACT,EAAE,sBAAsB,+BAsGxB;AAED,iEAAiE;AACjE,eAAO,MAAM,eAAe,GAAI,SAAS,SAAS,GAAG,IAAI,KAAG,YAAY,GAAG,IAA+B,CAAC"}

package/dist/react/session/CCSessionProvider.js

@@ -1,118 +0,0 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-/**
- * `CCSessionProvider` (02 §5) — the app's live session: the actions that mint
- * one, the timer that keeps it alive, and the rule that drops it the moment the
- * server says it is dead.
- *
- * It sits INSIDE `EngineDataProvider` (it calls the account routes through the
- * one `EngineClient`) but reads a store created OUTSIDE React, because that same
- * store is what supplies `EngineClientOptions.token` (see `ccSessionStore`).
- *
- * Two behaviors worth naming:
- *
- *   * **Proactive refresh.** `sessionTtlMinutes` is finite by design, and a user
- *     mid-edit should not be logged out by the clock. The provider re-mints a
- *     lead time before `exp` (02 §4) — an exchange, so the old token dies with
- *     it. A refresh that fails is NOT retried in a loop: the two ways it fails
- *     (revoked, membership changed) are both permanent, and a retry loop against
- *     a revoked session is a log-flooding machine.
- *   * **A 401 signs you out.** Every failure already funnels through the data
- *     tier's error sink; a `SESSION_*` 401 there means the token this client is
- *     presenting is dead server-side (expired, revoked, or a role change closed
- *     it). Continuing to render a signed-in shell after that is the bug where a
- *     demoted user still sees the admin panel until they reload.
- */
-import { useCallback, useEffect, useMemo, useRef, useSyncExternalStore } from 'react';
-import { createAccountClient, } from '../data/accountClient';
-import { useEngineData } from '../data/engineDataContext';
-import { CCSessionContext } from './sessionContext';
-/** A short, recognizable device name — never the full user-agent string. */
-const defaultDeviceLabel = () => {
-    const platform = typeof navigator === 'undefined' ? undefined : navigator.platform;
-    return platform && platform.length > 0 ? platform : undefined;
-};
-export function CCSessionProvider({ store, deviceLabel, refreshLeadSeconds = 120, children, }) {
-    const { client, error } = useEngineData();
-    const account = useMemo(() => createAccountClient(client), [client]);
-    const session = useSyncExternalStore(store.subscribe, store.get, store.get);
-    const label = useMemo(() => deviceLabel ?? defaultDeviceLabel(), [deviceLabel]);
-    const adopt = useCallback((minted) => {
-        store.set(minted);
-        return minted;
-    }, [store]);
-    const signIn = useCallback(async (input) => adopt(await account.login({ ...input, ...(label ? { deviceLabel: label } : {}) })), [account, adopt, label]);
-    const signUp = useCallback(async (input) => {
-        const created = await account.signup(input);
-        // Signup does not mint (it precedes having a session at all), so the
-        // provider logs the new account straight in — the alternative is a
-        // "created, now sign in" step that every app would then re-implement.
-        await signIn({ email: input.email, password: input.password });
-        return created;
-    }, [account, signIn]);
-    const signOut = useCallback(async () => {
-        try {
-            // Server-side FIRST: a client that only forgets its token leaves a live
-            // session behind that a copy of the token would still authenticate.
-            await account.logout();
-        }
-        finally {
-            store.clear();
-        }
-    }, [account, store]);
-    const signOutEverywhere = useCallback(async () => {
-        try {
-            return (await account.logoutEverywhere()).revoked;
-        }
-        finally {
-            store.clear();
-        }
-    }, [account, store]);
-    const refresh = useCallback(async () => adopt(await account.refresh()), [account, adopt]);
-    // ── proactive refresh ─────────────────────────────────────────────────────
-    // Keyed on the jti so an exchange re-arms exactly once; a bare `session`
-    // dependency would re-arm on every unrelated store emit.
-    const jti = session?.claims.jti;
-    const expiresAt = session?.claims.exp;
-    const refreshing = useRef(false);
-    useEffect(() => {
-        if (!jti || expiresAt === undefined || refreshLeadSeconds <= 0)
-            return;
-        const dueMs = expiresAt * 1000 - refreshLeadSeconds * 1000 - Date.now();
-        const timer = setTimeout(() => {
-            if (refreshing.current)
-                return;
-            refreshing.current = true;
-            // A failed refresh is terminal (revoked / membership changed), so the
-            // session is dropped rather than retried — the user signs in again.
-            void account
-                .refresh()
-                .then((minted) => store.set(minted))
-                .catch(() => store.clear())
-                .finally(() => {
-                refreshing.current = false;
-            });
-        }, Math.max(0, dueMs));
-        return () => clearTimeout(timer);
-    }, [account, expiresAt, jti, refreshLeadSeconds, store]);
-    // ── a dead session stops rendering as a live one ──────────────────────────
-    const sessionRejected = error?.status === 401 && error.code?.startsWith('SESSION_') === true;
-    useEffect(() => {
-        if (sessionRejected)
-            store.clear();
-    }, [sessionRejected, store]);
-    const value = useMemo(() => ({
-        session,
-        claims: session?.claims ?? null,
-        signedIn: session !== null,
-        account,
-        signIn,
-        signUp,
-        signOut,
-        signOutEverywhere,
-        refresh,
-    }), [account, refresh, session, signIn, signOut, signOutEverywhere, signUp]);
-    return _jsx(CCSessionContext.Provider, { value: value, children: children });
-}
-/** The claims the shell renders with — null while signed out. */
-export const claimsOfSession = (session) => session?.claims ?? null;
-//# sourceMappingURL=CCSessionProvider.js.map

package/dist/react/session/CCSessionProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CCSessionProvider.js","sourceRoot":"","sources":["../../../src/react/session/CCSessionProvider.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAkB,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAEtG,OAAO,EAGL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAA8B,MAAM,kBAAkB,CAAC;AAiBhF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,GAAuB,EAAE;IAClD,MAAM,QAAQ,GAAG,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;IACnF,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EACL,WAAW,EACX,kBAAkB,GAAG,GAAG,EACxB,QAAQ,GACe;IACvB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAgB,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,IAAI,kBAAkB,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAEhF,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,MAAiB,EAAa,EAAE;QAC/B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,KAAK,CAAC,CACR,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,KAAsC,EAAsB,EAAE,CACnE,KAAK,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EACpF,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CACxB,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,KAAkB,EAA4B,EAAE;QACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC,EACD,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACpD,IAAI,CAAC;YACH,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAErB,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,IAAqB,EAAE;QAChE,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAwB,EAAE,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAE9G,6EAA6E;IAC7E,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,GAAG,GAAG,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,GAAG,IAAI,SAAS,KAAK,SAAS,IAAI,kBAAkB,IAAI,CAAC;YAAE,OAAO;QACvE,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,GAAG,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE;YACH,IAAI,UAAU,CAAC,OAAO;gBAAE,OAAO;YAC/B,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,sEAAsE;YACtE,oEAAoE;YACpE,KAAK,OAAO;iBACT,OAAO,EAAE;iBACT,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;iBACnC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;iBAC1B,OAAO,CAAC,GAAG,EAAE;gBACZ,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;YAC7B,CAAC,CAAC,CAAC;QACP,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CACnB,CAAC;QACF,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;IAEzD,6EAA6E;IAC7E,MAAM,eAAe,GAAG,KAAK,EAAE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;IAC7F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,OAAO;QACP,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI;QAC/B,QAAQ,EAAE,OAAO,KAAK,IAAI;QAC1B,OAAO;QACP,MAAM;QACN,MAAM;QACN,OAAO;QACP,iBAAiB;QACjB,OAAO;KACR,CAAC,EACF,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,CACxE,CAAC;IAEF,OAAO,KAAC,gBAAgB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA6B,CAAC;AACzF,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAyB,EAAuB,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC"}

package/dist/react/session/ccSessionStore.d.ts

@@ -1,62 +0,0 @@
-/**
- * The browser's hold on a minted GuardEngine session (02 §5) — framework-free,
- * so the app's fetch client can read the token OUTSIDE React while the shell
- * renders the claims INSIDE it.
- *
- * That split is the whole reason this is a store rather than component state.
- * `EngineDataProvider` builds its `EngineClient` once, at mount, with a
- * `token()` provider; a session kept in React state would hand that client a
- * stale closure the moment anyone logged in. So the store is created at module
- * scope, the client reads `store.token()` per request, and the provider
- * subscribes for re-render.
- *
- * Three deliberate properties:
- *
- * 1. **`sessionStorage`, not `localStorage`, by default.** Both are readable by
- *    injected script, so neither is a security boundary — but a session token in
- *    `localStorage` outlives the tab, the browser restart and the user's memory
- *    of having signed in, while `sessionStorage` dies with the tab. The narrower
- *    lifetime is the honest default; a host that wants "stay signed in" passes
- *    `localStorage` explicitly and owns that choice.
- * 2. **An expired session never rehydrates.** A token past its `exp` is refused
- *    by the server anyway; restoring it would render a signed-in shell whose
- *    every request 401s.
- * 3. **The claims are re-parsed, never trusted as JSON.** Whatever is in storage
- *    is attacker-writable in the XSS case, and `CCUserClaimsSchema` is `.strict()`
- *    — a stored blob with an extra key is a forged claims set, so it is dropped
- *    rather than fed to the shell's permission gating. (The SERVER re-verifies
- *    the signed token on every request regardless; this is the client refusing to
- *    render a lie in the meantime.)
- */
-import { type CCUserClaims } from '../../core/session/claims';
-/** A minted session as the client holds it: the opaque token plus its claims. */
-export interface CCSession {
-    token: string;
-    claims: CCUserClaims;
-}
-export interface CCSessionStore {
-    /** The current session, or null when signed out. */
-    get(): CCSession | null;
-    /** The bearer token for `EngineClientOptions.token`. Null when signed out. */
-    token(): string | null;
-    /** Adopt a freshly minted session (login, signup-then-login, refresh). */
-    set(session: CCSession): void;
-    /** Forget the session locally. Ending it SERVER-side is `logout` (02 §4). */
-    clear(): void;
-    /** React subscription (`useSyncExternalStore`). Returns the unsubscribe. */
-    subscribe(listener: () => void): () => void;
-}
-export interface CreateCcSessionStoreOptions {
-    /**
-     * Where the token survives a reload. Default: `sessionStorage` when a DOM is
-     * present. Pass `null` for a memory-only store (tests, or a host that refuses
-     * to persist a credential at all).
-     */
-    storage?: Storage | null;
-    /** Storage key. Default `cc.session`. */
-    key?: string;
-    /** Clock, in ms. Injected by tests. */
-    now?: () => number;
-}
-export declare function createCcSessionStore(options?: CreateCcSessionStoreOptions): CCSessionStore;
-//# sourceMappingURL=ccSessionStore.d.ts.map

package/dist/react/session/ccSessionStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ccSessionStore.d.ts","sourceRoot":"","sources":["../../../src/react/session/ccSessionStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,KAAK,YAAY,EAAqC,MAAM,2BAA2B,CAAC;AAEjG,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,GAAG,IAAI,SAAS,GAAG,IAAI,CAAC;IACxB,8EAA8E;IAC9E,KAAK,IAAI,MAAM,GAAG,IAAI,CAAC;IACvB,0EAA0E;IAC1E,GAAG,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,KAAK,IAAI,IAAI,CAAC;IACd,4EAA4E;IAC5E,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAYD,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,2BAAgC,GAAG,cAAc,CAkE9F"}

package/dist/react/session/ccSessionStore.js

@@ -1,113 +0,0 @@
-/**
- * The browser's hold on a minted GuardEngine session (02 §5) — framework-free,
- * so the app's fetch client can read the token OUTSIDE React while the shell
- * renders the claims INSIDE it.
- *
- * That split is the whole reason this is a store rather than component state.
- * `EngineDataProvider` builds its `EngineClient` once, at mount, with a
- * `token()` provider; a session kept in React state would hand that client a
- * stale closure the moment anyone logged in. So the store is created at module
- * scope, the client reads `store.token()` per request, and the provider
- * subscribes for re-render.
- *
- * Three deliberate properties:
- *
- * 1. **`sessionStorage`, not `localStorage`, by default.** Both are readable by
- *    injected script, so neither is a security boundary — but a session token in
- *    `localStorage` outlives the tab, the browser restart and the user's memory
- *    of having signed in, while `sessionStorage` dies with the tab. The narrower
- *    lifetime is the honest default; a host that wants "stay signed in" passes
- *    `localStorage` explicitly and owns that choice.
- * 2. **An expired session never rehydrates.** A token past its `exp` is refused
- *    by the server anyway; restoring it would render a signed-in shell whose
- *    every request 401s.
- * 3. **The claims are re-parsed, never trusted as JSON.** Whatever is in storage
- *    is attacker-writable in the XSS case, and `CCUserClaimsSchema` is `.strict()`
- *    — a stored blob with an extra key is a forged claims set, so it is dropped
- *    rather than fed to the shell's permission gating. (The SERVER re-verifies
- *    the signed token on every request regardless; this is the client refusing to
- *    render a lie in the meantime.)
- */
-import { CCUserClaimsSchema, claimsExpired } from '../../core/session/claims';
-/** `sessionStorage` if the environment has one — never a throw in SSR/tests. */
-const defaultStorage = () => {
-    try {
-        return typeof globalThis.sessionStorage === 'undefined' ? null : globalThis.sessionStorage;
-    }
-    catch {
-        // A privacy mode that throws on `sessionStorage` access is a memory-only store.
-        return null;
-    }
-};
-export function createCcSessionStore(options = {}) {
-    const storage = options.storage === undefined ? defaultStorage() : options.storage;
-    const key = options.key ?? 'cc.session';
-    const now = options.now ?? (() => Date.now());
-    const listeners = new Set();
-    const persist = (session) => {
-        if (!storage)
-            return;
-        try {
-            if (session)
-                storage.setItem(key, JSON.stringify(session));
-            else
-                storage.removeItem(key);
-        }
-        catch {
-            // A full or blocked storage must never break signing in — the session
-            // still lives in memory for this page's lifetime.
-        }
-    };
-    const rehydrate = () => {
-        if (!storage)
-            return null;
-        let raw = null;
-        try {
-            raw = storage.getItem(key);
-        }
-        catch {
-            return null;
-        }
-        if (!raw)
-            return null;
-        try {
-            const parsed = JSON.parse(raw);
-            const claims = CCUserClaimsSchema.safeParse(parsed.claims);
-            if (typeof parsed.token !== 'string' || !claims.success || claimsExpired(claims.data, now())) {
-                persist(null);
-                return null;
-            }
-            return { token: parsed.token, claims: claims.data };
-        }
-        catch {
-            persist(null);
-            return null;
-        }
-    };
-    let current = rehydrate();
-    const emit = () => {
-        for (const listener of listeners)
-            listener();
-    };
-    return {
-        get: () => current,
-        token: () => current?.token ?? null,
-        set(session) {
-            current = session;
-            persist(session);
-            emit();
-        },
-        clear() {
-            current = null;
-            persist(null);
-            emit();
-        },
-        subscribe(listener) {
-            listeners.add(listener);
-            return () => {
-                listeners.delete(listener);
-            };
-        },
-    };
-}
-//# sourceMappingURL=ccSessionStore.js.map

package/dist/react/session/ccSessionStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ccSessionStore.js","sourceRoot":"","sources":["../../../src/react/session/ccSessionStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAqB,kBAAkB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAkCjG,gFAAgF;AAChF,MAAM,cAAc,GAAG,GAAmB,EAAE;IAC1C,IAAI,CAAC;QACH,OAAO,OAAO,UAAU,CAAC,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,UAAuC,EAAE;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACnF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,YAAY,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAExC,MAAM,OAAO,GAAG,CAAC,OAAyB,EAAQ,EAAE;QAClD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,IAAI,OAAO;gBAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;;gBACtD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,kDAAkD;QACpD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,GAAqB,EAAE;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0C,CAAC;YACxE,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBAC7F,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAO,GAAqB,SAAS,EAAE,CAAC;IAE5C,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO;QAClB,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;QACnC,GAAG,CAAC,OAAO;YACT,OAAO,GAAG,OAAO,CAAC;YAClB,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,IAAI,EAAE,CAAC;QACT,CAAC;QACD,KAAK;YACH,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,EAAE,CAAC;QACT,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE;gBACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/react/session/index.d.ts

@@ -1,5 +0,0 @@
-export { CCSessionGate, type CCSessionGateProps } from './CCSessionGate';
-export { CCSessionProvider, type CCSessionProviderProps, claimsOfSession } from './CCSessionProvider';
-export { type CCSession, type CCSessionStore, type CreateCcSessionStoreOptions, createCcSessionStore, } from './ccSessionStore';
-export { CCSessionContext, type CCSessionContextValue, useCcSession, useCcSessionOrNull } from './sessionContext';
-//# sourceMappingURL=index.d.ts.map

package/dist/react/session/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/react/session/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EACL,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,2BAA2B,EAChC,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/react/session/index.js

@@ -1,11 +0,0 @@
-// The client session tier (02 §5) — how a generated app holds the session the
-// GuardEngine mints, and the ONE place a token is read for a request.
-//
-// The store is created at module scope (it feeds `EngineClientOptions.token`);
-// the provider is mounted inside `EngineDataProvider` and owns the actions,
-// the proactive refresh and the "a 401 signs you out" rule.
-export { CCSessionGate } from './CCSessionGate';
-export { CCSessionProvider, claimsOfSession } from './CCSessionProvider';
-export { createCcSessionStore, } from './ccSessionStore';
-export { CCSessionContext, useCcSession, useCcSessionOrNull } from './sessionContext';
-//# sourceMappingURL=index.js.map

package/dist/react/session/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/react/session/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,4DAA4D;AAE5D,OAAO,EAAE,aAAa,EAA2B,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAA+B,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAIL,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAA8B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/react/session/sessionContext.d.ts

@@ -1,30 +0,0 @@
-import type { CCUserClaims } from '../../core/session/claims';
-import type { AccountClient, AccountIdentity, LoginInput, SignupInput } from '../data/accountClient';
-import type { CCSession } from './ccSessionStore';
-export interface CCSessionContextValue {
-    session: CCSession | null;
-    /** The verified claims of the live session, or null. Advisory on the client. */
-    claims: CCUserClaims | null;
-    signedIn: boolean;
-    /** The typed account API, for surfaces that go beyond sign-in (members, devices). */
-    account: AccountClient;
-    /** Log in and adopt the minted session. The device label is filled in here. */
-    signIn(input: Omit<LoginInput, 'deviceLabel'>): Promise<CCSession>;
-    /** Create an account (optionally on an invitation) and sign straight in. */
-    signUp(input: SignupInput): Promise<AccountIdentity>;
-    /** End this device's session server-side, then forget it locally. */
-    signOut(): Promise<void>;
-    /** End every session of this account; returns how many were closed. */
-    signOutEverywhere(): Promise<number>;
-    /** Exchange the current token for a fresh one carrying the store's grant. */
-    refresh(): Promise<CCSession>;
-}
-export declare const CCSessionContext: import("react").Context<CCSessionContextValue | null>;
-export declare function useCcSession(): CCSessionContextValue;
-/**
- * The session when a provider is mounted, else null — for a component that must
- * work in an app with no account tier at all (guard off, or a local single-user
- * app that never logs in).
- */
-export declare function useCcSessionOrNull(): CCSessionContextValue | null;
-//# sourceMappingURL=sessionContext.d.ts.map

package/dist/react/session/sessionContext.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionContext.d.ts","sourceRoot":"","sources":["../../../src/react/session/sessionContext.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,gFAAgF;IAChF,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,qFAAqF;IACrF,OAAO,EAAE,aAAa,CAAC;IACvB,+EAA+E;IAC/E,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,4EAA4E;IAC5E,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrD,qEAAqE;IACrE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,uEAAuE;IACvE,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,6EAA6E;IAC7E,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;CAC/B;AAED,eAAO,MAAM,gBAAgB,uDAAoD,CAAC;AAElF,wBAAgB,YAAY,IAAI,qBAAqB,CAOpD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,qBAAqB,GAAG,IAAI,CAEjE"}

package/dist/react/session/sessionContext.js

@@ -1,22 +0,0 @@
-/**
- * The session context and its readers, kept apart from the provider that fills
- * it (the same split `engineDataContext` uses) so a component can read the
- * session without importing the provider's effect graph.
- */
-import { createContext, useContext } from 'react';
-export const CCSessionContext = createContext(null);
-export function useCcSession() {
-    const context = useContext(CCSessionContext);
-    if (!context)
-        throw new Error('useCcSession must be used inside <CCSessionProvider>. Mount it once, inside <EngineDataProvider> (02 §5).');
-    return context;
-}
-/**
- * The session when a provider is mounted, else null — for a component that must
- * work in an app with no account tier at all (guard off, or a local single-user
- * app that never logs in).
- */
-export function useCcSessionOrNull() {
-    return useContext(CCSessionContext);
-}
-//# sourceMappingURL=sessionContext.js.map

package/dist/react/session/sessionContext.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionContext.js","sourceRoot":"","sources":["../../../src/react/session/sessionContext.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAwBlD,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAA+B,IAAI,CAAC,CAAC;AAElF,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACtC,CAAC"}

package/dist/react/shell/CCAppShell.d.ts

@@ -1,62 +0,0 @@
-/**
- * `CCAppShell` — the app shell the primitives were always waiting for.
- *
- * `ba4f93f` landed the pieces (`Slot`, `CCPortalProvider`, `CCRouterProvider`,
- * `initSharedStyleSheet`, `createInstanceRuntime`) and nothing composed them, so
- * every generated app would have had to re-derive the composition order — and
- * the order is not arbitrary. Four laws are encoded in it:
- *
- *   1. **The shared stylesheet is compiled ONCE at boot** and adopted by
- *      reference into every shadow boundary (J2-4). Adopting the full sheet per
- *      ShadowRoot duplicates the CSSOM per instance, so a multi-panel dashboard
- *      costs N sheets instead of one.
- *   2. **`CCPortalProvider` wraps the router, not the other way round.** Every
- *      floating surface — dialogs, popovers, toasts, the lock screen — portals
- *      into one root with the fixed z-index bands and the Ordered Focus Stack
- *      (02 §6.2). A provider mounted inside the routed subtree would be torn
- *      down by a navigation that happened while a dialog was open.
- *   3. **Theme tokens are CSS custom properties on the shell element.** Engines
- *      consume variables only; `theme.overrides` writes them here, which is why
- *      hardcoded palette values in engine styles are a lint error (02 §5.1).
- *   4. **Instance lifecycle runs before the first view renders.** The shell
- *      starts each instance's host (`onLoad` → `onReady`) and unmounts it on
- *      teardown, so intake is registered before any pane can miss a signal
- *      (03 §6.2).
- */
-import { type ReactNode } from 'react';
-import type { CCUserClaims } from '../../core/session/claims';
-import type { EffectiveManifest } from '../../verify/types';
-import type { CCRouter } from '../../client/router';
-/** What a host must supply per instance so the shell can drive its lifecycle. */
-export interface InstanceHostBinding {
-    instanceId: string;
-    /** Runs `onLoad` → `onReady` and opens the instance stream. */
-    start(): Promise<void>;
-    /** Closes the stream, unsubscribes intake, aborts in-flight work. */
-    unmount(): void;
-}
-export interface CCAppShellProps {
-    manifest: EffectiveManifest;
-    router: CCRouter;
-    /** Verified claims, or null while locked/anonymous. */
-    claims: CCUserClaims | null;
-    /**
-     * The framework token/Tailwind sheet, as text. Compiled once into a
-     * Constructable `CSSStyleSheet` here and shared by REFERENCE with every shadow
-     * boundary — one CSSOM allocation for N instances (J2-4).
-     */
-    themeCss?: string;
-    /** `theme.overrides` from config: a CSS custom-property map (`--cc-primary`, …). */
-    themeOverrides?: Readonly<Record<string, string>>;
-    /** Dark mode is a class on the shell root, not a prop threaded through engines. */
-    colorScheme?: 'light' | 'dark';
-    /** One binding per instance in the manifest. */
-    instances?: readonly InstanceHostBinding[];
-    /** Rendered once every instance has reached `ready`. */
-    children: ReactNode;
-    /** Shown while instances are still loading. */
-    fallback?: ReactNode;
-    className?: string;
-}
-export declare function CCAppShell({ manifest, router, claims, themeCss, themeOverrides, colorScheme, instances, children, fallback, className, }: CCAppShellProps): import("react").JSX.Element;
-//# sourceMappingURL=CCAppShell.d.ts.map

package/dist/react/shell/CCAppShell.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CCAppShell.d.ts","sourceRoot":"","sources":["../../../src/react/shell/CCAppShell.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,KAAK,SAAS,EAAwC,MAAM,OAAO,CAAC;AAE7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAI5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,qEAAqE;IACrE,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,QAAQ,CAAC;IACjB,uDAAuD;IACvD,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,mFAAmF;IACnF,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,gDAAgD;IAChD,SAAS,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC3C,wDAAwD;IACxD,QAAQ,EAAE,SAAS,CAAC;IACpB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EACR,MAAM,EACN,MAAM,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,SAAS,EACT,QAAQ,EACR,QAAe,EACf,SAAS,GACV,EAAE,eAAe,+BAyEjB"}