js-bao-wss-client 2.0.0 → 2.0.2

package/dist/dev/DevTools.d.ts

@@ -0,0 +1,38 @@
+/**
+ * `<PrimitiveDevTools>` / `<DevTools>` — a floating dev-only panel for
+ * switching between test users (issue #420).
+ *
+ * Design constraints (locked forks):
+ *   - Fork 4: inline styling, NO separate CSS file.
+ *   - Fork 6: dual production gate — this whole `/dev` entrypoint tree-shakes
+ *     out of production bundles, AND a runtime `import.meta.env.DEV` guard
+ *     makes the component render `null` (installing no window hooks) when
+ *     DEV === false.
+ *   - React is an OPTIONAL peer dependency. We statically `import * as React`
+ *     so bundlers (Vite/Webpack) see a real import edge and can externalize the
+ *     `react` peer dep — this is the primary path in a normal ESM React app. We
+ *     build elements via `createElement` (no JSX) and provide a local ambient
+ *     `declare module "react"` so this compiles even when `@types/react` is not
+ *     installed at build time. A graceful "react peer dep required" error is
+ *     still surfaced for the case where react genuinely isn't present.
+ */
+import { type DevClient } from "./useDevToken.js";
+/** Props for `<DevTools>`. */
+export interface DevToolsProps {
+    /** The JsBaoClient instance to drive (required). */
+    client: DevClient;
+    /** Auto-apply VITE_PRIMITIVE_DEV_TOKEN on mount (default true). */
+    autoApplyEnvToken?: boolean;
+    /** Override the DEV gate (mainly for tests / storybooks). */
+    isDev?: boolean;
+    /** Default TTL minted for switch-user (default "30m"). */
+    ttl?: string;
+}
+/**
+ * The DevTools panel. Renders `null` (and installs no window hooks) outside a
+ * dev build, per the dual production gate.
+ */
+export declare function DevTools(props: DevToolsProps): any;
+/** Alias matching the design's `<PrimitiveDevTools>` name. */
+export declare const PrimitiveDevTools: typeof DevTools;
+//# sourceMappingURL=DevTools.d.ts.map

package/dist/dev/DevTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevTools.d.ts","sourceRoot":"","sources":["../../dev/DevTools.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,OAAO,EAEL,KAAK,SAAS,EAGf,MAAM,kBAAkB,CAAC;AAU1B,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,MAAM,EAAE,SAAS,CAAC;IAClB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,GAAG,CAgKlD;AAED,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,iBAAW,CAAC"}

package/dist/dev/DevTools.js

@@ -0,0 +1,203 @@
+/**
+ * `<PrimitiveDevTools>` / `<DevTools>` — a floating dev-only panel for
+ * switching between test users (issue #420).
+ *
+ * Design constraints (locked forks):
+ *   - Fork 4: inline styling, NO separate CSS file.
+ *   - Fork 6: dual production gate — this whole `/dev` entrypoint tree-shakes
+ *     out of production bundles, AND a runtime `import.meta.env.DEV` guard
+ *     makes the component render `null` (installing no window hooks) when
+ *     DEV === false.
+ *   - React is an OPTIONAL peer dependency. We statically `import * as React`
+ *     so bundlers (Vite/Webpack) see a real import edge and can externalize the
+ *     `react` peer dep — this is the primary path in a normal ESM React app. We
+ *     build elements via `createElement` (no JSX) and provide a local ambient
+ *     `declare module "react"` so this compiles even when `@types/react` is not
+ *     installed at build time. A graceful "react peer dep required" error is
+ *     still surfaced for the case where react genuinely isn't present.
+ */
+// Static import so bundlers can externalize/optimize the optional `react` peer
+// dep. In an ESM React app this resolves to the host app's React; when react is
+// genuinely absent the bundler/runtime fails the import (or `React` is
+// undefined), which `resolveReact()` turns into an actionable error below.
+import * as React from "react";
+import { DevToolsController, } from "./useDevToken.js";
+/**
+ * Resolve the host app's React. The primary path is the static
+ * `import * as React from "react"` at the top of this module — in a normal ESM
+ * React app the bundler externalizes `react` and `React` resolves to the host's
+ * copy. We still defensively fall back to a UMD `globalThis.React` (script-tag
+ * setups) and throw a clear, actionable error when React is genuinely absent,
+ * rather than a confusing `undefined.createElement` crash.
+ */
+function resolveReact() {
+    // 1) Static ESM import (the path bundlers see and externalize). Interop:
+    //    `import * as React` may surface the module under `.default` on some
+    //    CJS-interop setups.
+    const candidate = (React?.default ?? React);
+    if (candidate && typeof candidate.createElement === "function") {
+        return candidate;
+    }
+    // 2) UMD / script-tag setups expose React on the global.
+    const g = globalThis;
+    if (g.React && typeof g.React.createElement === "function") {
+        return g.React;
+    }
+    throw new Error("[PrimitiveDevTools] React is required to use <DevTools> but was not found. " +
+        "Install it as a peer dependency: `npm install react react-dom`.");
+}
+const panelStyle = {
+    position: "fixed",
+    bottom: "16px",
+    right: "16px",
+    zIndex: 2147483647,
+    background: "#1f2430",
+    color: "#e6e6e6",
+    fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
+    fontSize: "12px",
+    padding: "12px",
+    borderRadius: "8px",
+    boxShadow: "0 4px 16px rgba(0,0,0,0.4)",
+    width: "260px",
+};
+const labelStyle = {
+    display: "block",
+    marginBottom: "4px",
+    opacity: 0.7,
+};
+const inputStyle = {
+    width: "100%",
+    boxSizing: "border-box",
+    marginBottom: "6px",
+    padding: "4px 6px",
+    background: "#11141b",
+    color: "#e6e6e6",
+    border: "1px solid #333a47",
+    borderRadius: "4px",
+};
+const buttonStyle = {
+    width: "100%",
+    padding: "6px",
+    marginBottom: "6px",
+    background: "#3b82f6",
+    color: "#fff",
+    border: "none",
+    borderRadius: "4px",
+    cursor: "pointer",
+};
+/**
+ * The DevTools panel. Renders `null` (and installs no window hooks) outside a
+ * dev build, per the dual production gate.
+ */
+export function DevTools(props) {
+    if (!props || !props.client) {
+        throw new Error("<DevTools> requires a `client` prop (a JsBaoClient instance).");
+    }
+    const React = resolveReact();
+    const { createElement: h, useState, useEffect, useRef } = React;
+    const controllerRef = useRef(null);
+    if (!controllerRef.current) {
+        controllerRef.current = new DevToolsController({
+            client: props.client,
+            autoApplyEnvToken: props.autoApplyEnvToken,
+            isDev: props.isDev,
+            ttl: props.ttl,
+        });
+    }
+    const controller = controllerRef.current;
+    const [me, setMe] = useState(null);
+    const [users, setUsers] = useState([]);
+    const [adminError, setAdminError] = useState(null);
+    const [quickToken, setQuickToken] = useState("");
+    const [status, setStatus] = useState("");
+    useEffect(() => {
+        if (!controller.isDev)
+            return;
+        const cleanup = controller.activate();
+        // Load current user + (best-effort) the admin user list on open.
+        controller
+            .getCurrentUser()
+            .then((u) => setMe(u))
+            .catch(() => { });
+        controller
+            .listUsers()
+            .then((list) => {
+            setUsers(list);
+            setAdminError(null);
+        })
+            .catch(() => setAdminError("Admin/owner required to list users."));
+        return cleanup;
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, []);
+    // Production gate: render nothing.
+    if (!controller.isDev) {
+        return null;
+    }
+    const onSwitch = (userId) => {
+        setStatus(`Switching to ${userId}…`);
+        controller
+            .switchToUser(userId)
+            .then(() => setStatus(`Now acting as ${userId}`))
+            .catch((e) => setStatus(`Switch failed: ${e?.message ?? e}`));
+    };
+    const onQuickLogin = () => {
+        if (!quickToken.trim())
+            return;
+        controller.setToken(quickToken.trim());
+        setStatus("Applied pasted token");
+        setQuickToken("");
+    };
+    const onLogout = () => {
+        controller
+            .logout(me?.userId)
+            .then(() => {
+            setMe(null);
+            setStatus("Logged out");
+        })
+            .catch((e) => setStatus(`Logout failed: ${e?.message ?? e}`));
+    };
+    const children = [];
+    children.push(h("div", { key: "title", style: { fontWeight: "bold", marginBottom: "8px" } }, "Primitive DevTools"));
+    children.push(h("div", { key: "me", style: { marginBottom: "8px" } }, me
+        ? `${me.email ?? me.userId} (${me.appRole ?? "?"})`
+        : "Not signed in"));
+    // Admin-gated switch-user dropdown.
+    if (adminError) {
+        children.push(h("div", { key: "admin-err", style: { color: "#fca5a5", marginBottom: "8px" } }, adminError));
+    }
+    else if (users.length > 0) {
+        children.push(h("label", { key: "switch-label", style: labelStyle }, "Switch user"));
+        children.push(h("select", {
+            key: "switch",
+            style: inputStyle,
+            onChange: (e) => {
+                const v = e?.target?.value;
+                if (v)
+                    onSwitch(v);
+            },
+            defaultValue: "",
+        }, [
+            h("option", { key: "_", value: "" }, "Select a user…"),
+            ...users.map((u) => h("option", { key: u.userId, value: u.userId }, `${u.email ?? u.name ?? u.userId}${u.role ? ` (${u.role})` : ""}`)),
+        ]));
+    }
+    // Quick login.
+    children.push(h("label", { key: "ql-label", style: labelStyle }, "Quick login (paste token)"));
+    children.push(h("input", {
+        key: "ql-input",
+        style: inputStyle,
+        placeholder: "prim_…",
+        value: quickToken,
+        onChange: (e) => setQuickToken(e?.target?.value ?? ""),
+    }));
+    children.push(h("button", { key: "ql-btn", style: buttonStyle, onClick: onQuickLogin }, "Apply token"));
+    // Logout.
+    children.push(h("button", { key: "logout", style: { ...buttonStyle, background: "#475569" }, onClick: onLogout }, "Logout"));
+    if (status) {
+        children.push(h("div", { key: "status", style: { marginTop: "6px", opacity: 0.8 } }, status));
+    }
+    return h("div", { style: panelStyle }, children);
+}
+/** Alias matching the design's `<PrimitiveDevTools>` name. */
+export const PrimitiveDevTools = DevTools;
+//# sourceMappingURL=DevTools.js.map

package/dist/dev/DevTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevTools.js","sourceRoot":"","sources":["../../dev/DevTools.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,+EAA+E;AAC/E,gFAAgF;AAChF,uEAAuE;AACvE,2EAA2E;AAC3E,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EACL,kBAAkB,GAInB,MAAM,kBAAkB,CAAC;AAsB1B;;;;;;;GAOG;AACH,SAAS,YAAY;IACnB,yEAAyE;IACzE,yEAAyE;IACzE,yBAAyB;IACzB,MAAM,SAAS,GAAG,CAAE,KAAa,EAAE,OAAO,IAAI,KAAK,CAAQ,CAAC;IAC5D,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAC/D,OAAO,SAAsB,CAAC;IAChC,CAAC;IACD,yDAAyD;IACzD,MAAM,CAAC,GAAG,UAAiB,CAAC;IAC5B,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,CAAC,CAAC,KAAkB,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6EAA6E;QAC3E,iEAAiE,CACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAoC;IAClD,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,UAAU;IAClB,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,gDAAgD;IAC5D,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,MAAM;IACf,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,4BAA4B;IACvC,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,UAAU,GAAoC;IAClD,OAAO,EAAE,OAAO;IAChB,YAAY,EAAE,KAAK;IACnB,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,MAAM,UAAU,GAAoC;IAClD,KAAK,EAAE,MAAM;IACb,SAAS,EAAE,YAAY;IACvB,YAAY,EAAE,KAAK;IACnB,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,mBAAmB;IAC3B,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF,MAAM,WAAW,GAAoC;IACnD,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,KAAK;IACd,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,KAAK;IACnB,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAEhE,MAAM,aAAa,GAAG,MAAM,CAA4B,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3B,aAAa,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC;YAC7C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC;IAEzC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAClE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IAEjD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU,CAAC,KAAK;YAAE,OAAO;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;QACtC,iEAAiE;QACjE,UAAU;aACP,cAAc,EAAE;aAChB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACrB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnB,UAAU;aACP,SAAS,EAAE;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,qCAAqC,CAAC,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC;QACf,uDAAuD;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,mCAAmC;IACnC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,SAAS,CAAC,gBAAgB,MAAM,GAAG,CAAC,CAAC;QACrC,UAAU;aACP,YAAY,CAAC,MAAM,CAAC;aACpB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;aAChD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAAE,OAAO;QAC/B,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAClC,aAAa,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,UAAU;aACP,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;aAClB,IAAI,CAAC,GAAG,EAAE;YACT,KAAK,CAAC,IAAI,CAAC,CAAC;YACZ,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAU,EAAE,CAAC;IAE3B,QAAQ,CAAC,IAAI,CACX,CAAC,CACC,KAAK,EACL,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EACpE,oBAAoB,CACrB,CACF,CAAC;IAEF,QAAQ,CAAC,IAAI,CACX,CAAC,CACC,KAAK,EACL,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAC7C,EAAE;QACA,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,OAAO,IAAI,GAAG,GAAG;QACnD,CAAC,CAAC,eAAe,CACpB,CACF,CAAC;IAEF,oCAAoC;IACpC,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAC7F,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QACrF,QAAQ,CAAC,IAAI,CACX,CAAC,CACC,QAAQ,EACR;YACE,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,CAAC,CAAM,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC;gBAC3B,IAAI,CAAC;oBAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;YACD,YAAY,EAAE,EAAE;SACjB,EACD;YACE,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC;YACtD,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,CAAC,CACC,QAAQ,EACR,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAClC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAClE,CACF;SACF,CACF,CACF,CAAC;IACJ,CAAC;IAED,eAAe;IACf,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC/F,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,OAAO,EAAE;QACT,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,QAAQ;QACrB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,CAAC,CAAM,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;KAC5D,CAAC,CACH,CAAC;IACF,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,aAAa,CAAC,CACzF,CAAC;IAEF,UAAU;IACV,QAAQ,CAAC,IAAI,CACX,CAAC,CACC,QAAQ,EACR,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EACtF,QAAQ,CACT,CACF,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAC/E,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC"}

package/dist/dev/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `js-bao-wss-client/dev` — developer-only entrypoint (issue #420).
+ *
+ * Importing this subpath opts into the DevTools surface. It is a SEPARATE
+ * entrypoint from the main package so production bundles that never import it
+ * tree-shake all of this code out (Fork 6 dual gate, layer 1). The runtime
+ * `import.meta.env.DEV` guard is layer 2.
+ *
+ * ## React is NOT required to sign someone in
+ *
+ * The framework-agnostic API below ({@link injectDevToken}, {@link switchDevUser},
+ * {@link createDevTools}, {@link DevToolsController}) lets ANY app — vanilla JS,
+ * Vue, Svelte, Solid, Node — sign a test user into the client with a single
+ * function call and never import React:
+ *
+ * ```ts
+ * import { injectDevToken, switchDevUser } from "js-bao-wss-client/dev";
+ *
+ * // Sign in with a token (e.g. from `primitive tokens inject`):
+ * injectDevToken(client, "prim_…");
+ *
+ * // …or switch to a test user by id (mints/reuses a 30-min token):
+ * await switchDevUser({ client }, "user_123");
+ * ```
+ *
+ * The `<DevTools>` React component is an OPTIONAL convenience UI layered on top
+ * of the same controller. React is an OPTIONAL peer dependency, only pulled in
+ * if you import the component — the framework-agnostic helpers above never
+ * import React.
+ */
+export { injectDevToken, switchDevUser, createDevTools, DevToolsController, type DevClient, type DevToolsConfig, type AppUserSummary, type CurrentUserInfo, type DevToolsWindowApi, } from "./useDevToken.js";
+export { DevTools, PrimitiveDevTools } from "./DevTools.js";
+export type { DevToolsProps } from "./DevTools.js";
+export { DevTokenCache, DEV_TOKENS_STORAGE_KEY, type CachedDevToken, type DevTokenStore, } from "./storage.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/dev/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../dev/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAEL,cAAc,EACd,aAAa,EACb,cAAc,EAEd,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC"}

package/dist/dev/index.js

@@ -0,0 +1,40 @@
+/**
+ * `js-bao-wss-client/dev` — developer-only entrypoint (issue #420).
+ *
+ * Importing this subpath opts into the DevTools surface. It is a SEPARATE
+ * entrypoint from the main package so production bundles that never import it
+ * tree-shake all of this code out (Fork 6 dual gate, layer 1). The runtime
+ * `import.meta.env.DEV` guard is layer 2.
+ *
+ * ## React is NOT required to sign someone in
+ *
+ * The framework-agnostic API below ({@link injectDevToken}, {@link switchDevUser},
+ * {@link createDevTools}, {@link DevToolsController}) lets ANY app — vanilla JS,
+ * Vue, Svelte, Solid, Node — sign a test user into the client with a single
+ * function call and never import React:
+ *
+ * ```ts
+ * import { injectDevToken, switchDevUser } from "js-bao-wss-client/dev";
+ *
+ * // Sign in with a token (e.g. from `primitive tokens inject`):
+ * injectDevToken(client, "prim_…");
+ *
+ * // …or switch to a test user by id (mints/reuses a 30-min token):
+ * await switchDevUser({ client }, "user_123");
+ * ```
+ *
+ * The `<DevTools>` React component is an OPTIONAL convenience UI layered on top
+ * of the same controller. React is an OPTIONAL peer dependency, only pulled in
+ * if you import the component — the framework-agnostic helpers above never
+ * import React.
+ */
+// ── Framework-agnostic API (NO React) ───────────────────────────────────────
+export { 
+// Convenience helpers — the one-call non-React way to sign in.
+injectDevToken, switchDevUser, createDevTools, 
+// The underlying controller (use directly for full control).
+DevToolsController, } from "./useDevToken.js";
+// ── Optional React convenience UI (only this pulls in `react`) ──────────────
+export { DevTools, PrimitiveDevTools } from "./DevTools.js";
+export { DevTokenCache, DEV_TOKENS_STORAGE_KEY, } from "./storage.js";
+//# sourceMappingURL=index.js.map

package/dist/dev/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../dev/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,+EAA+E;AAC/E,OAAO;AACL,+DAA+D;AAC/D,cAAc,EACd,aAAa,EACb,cAAc;AACd,6DAA6D;AAC7D,kBAAkB,GAMnB,MAAM,kBAAkB,CAAC;AAE1B,+EAA+E;AAC/E,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,EACL,aAAa,EACb,sBAAsB,GAGvB,MAAM,cAAc,CAAC"}

package/dist/dev/storage.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Dev-token cache for `<DevTools>` (issue #420).
+ *
+ * Persists short-lived (30-min) dev tokens in localStorage, keyed by app and
+ * user, so switching back to a recently-used test user can reuse a cached
+ * token without a fresh API call. Falls back to an in-memory Map when
+ * localStorage is unavailable (Safari private mode / quota errors).
+ *
+ * This module is intentionally framework-agnostic and side-effect-free on
+ * import so it can be unit-tested in a plain Node environment with a fake
+ * `localStorage`.
+ */
+export declare const DEV_TOKENS_STORAGE_KEY = "__primitive_dev_tokens_v1__";
+export interface CachedDevToken {
+    token: string;
+    /** Epoch millis at which the token expires. */
+    expiresAt: number;
+    /** Epoch millis at which the token was minted/cached. */
+    createdAt: number;
+    /** Human-readable token name (e.g. "devtools-169..."). */
+    name: string;
+}
+/** Shape persisted under {@link DEV_TOKENS_STORAGE_KEY}. */
+export type DevTokenStore = {
+    [appId: string]: {
+        [userId: string]: CachedDevToken;
+    };
+};
+/** Minimal Storage surface we depend on (matches the DOM `Storage` interface). */
+export interface StorageLike {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+/**
+ * A cache that prefers localStorage but transparently falls back to an
+ * in-memory Map if any localStorage operation throws (quota / private mode).
+ */
+export declare class DevTokenCache {
+    private storage;
+    private memory;
+    private usingMemory;
+    constructor(storage?: StorageLike | null);
+    /** True when the cache has fallen back to the in-memory Map. */
+    get isInMemory(): boolean;
+    private read;
+    private write;
+    private fallBackToMemory;
+    /**
+     * Remove expired entries across all apps/users. Returns the pruned store.
+     * Called on panel open.
+     */
+    prune(now?: number): DevTokenStore;
+    /** Get a non-expired cached token for the app/user, or null. */
+    get(appId: string, userId: string, now?: number): CachedDevToken | null;
+    /** Store/replace the cached token for an app/user. */
+    set(appId: string, userId: string, entry: CachedDevToken): void;
+    /** Remove the cached token for an app/user (e.g. on logout). */
+    remove(appId: string, userId: string): void;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/dev/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../dev/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,4DAA4D;AAC5D,MAAM,MAAM,aAAa,GAAG;IAC1B,CAAC,KAAK,EAAE,MAAM,GAAG;QACf,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC;KAClC,CAAC;CACH,CAAC;AAEF,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAaD;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,CAAC,EAAE,WAAW,GAAG,IAAI;IAKxC,gEAAgE;IAChE,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,KAAK;IAab,OAAO,CAAC,gBAAgB;IAKxB;;;OAGG;IACH,KAAK,CAAC,GAAG,GAAE,MAAmB,GAAG,aAAa;IAoB9C,gEAAgE;IAChE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,cAAc,GAAG,IAAI;IAWnF,sDAAsD;IACtD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI;IAO/D,gEAAgE;IAChE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;CAQ5C"}

package/dist/dev/storage.js

@@ -0,0 +1,130 @@
+/**
+ * Dev-token cache for `<DevTools>` (issue #420).
+ *
+ * Persists short-lived (30-min) dev tokens in localStorage, keyed by app and
+ * user, so switching back to a recently-used test user can reuse a cached
+ * token without a fresh API call. Falls back to an in-memory Map when
+ * localStorage is unavailable (Safari private mode / quota errors).
+ *
+ * This module is intentionally framework-agnostic and side-effect-free on
+ * import so it can be unit-tested in a plain Node environment with a fake
+ * `localStorage`.
+ */
+export const DEV_TOKENS_STORAGE_KEY = "__primitive_dev_tokens_v1__";
+function resolveStorage() {
+    try {
+        if (typeof localStorage !== "undefined" && localStorage) {
+            return localStorage;
+        }
+    }
+    catch {
+        // accessing localStorage can throw in sandboxed iframes
+    }
+    return null;
+}
+/**
+ * A cache that prefers localStorage but transparently falls back to an
+ * in-memory Map if any localStorage operation throws (quota / private mode).
+ */
+export class DevTokenCache {
+    constructor(storage) {
+        this.memory = {};
+        this.usingMemory = false;
+        this.storage = storage === undefined ? resolveStorage() : storage;
+        if (!this.storage)
+            this.usingMemory = true;
+    }
+    /** True when the cache has fallen back to the in-memory Map. */
+    get isInMemory() {
+        return this.usingMemory;
+    }
+    read() {
+        if (this.usingMemory || !this.storage)
+            return this.memory;
+        try {
+            const raw = this.storage.getItem(DEV_TOKENS_STORAGE_KEY);
+            if (!raw)
+                return {};
+            const parsed = JSON.parse(raw);
+            return parsed && typeof parsed === "object" ? parsed : {};
+        }
+        catch {
+            // Corrupt JSON or read failure — fall back to memory.
+            this.fallBackToMemory();
+            return this.memory;
+        }
+    }
+    write(store) {
+        if (this.usingMemory || !this.storage) {
+            this.memory = store;
+            return;
+        }
+        try {
+            this.storage.setItem(DEV_TOKENS_STORAGE_KEY, JSON.stringify(store));
+        }
+        catch {
+            // Quota exceeded / private mode — switch to memory and keep working.
+            this.fallBackToMemory(store);
+        }
+    }
+    fallBackToMemory(seed) {
+        this.usingMemory = true;
+        if (seed)
+            this.memory = seed;
+    }
+    /**
+     * Remove expired entries across all apps/users. Returns the pruned store.
+     * Called on panel open.
+     */
+    prune(now = Date.now()) {
+        const store = this.read();
+        let changed = false;
+        for (const appId of Object.keys(store)) {
+            const users = store[appId];
+            for (const userId of Object.keys(users)) {
+                if (users[userId].expiresAt <= now) {
+                    delete users[userId];
+                    changed = true;
+                }
+            }
+            if (Object.keys(users).length === 0) {
+                delete store[appId];
+                changed = true;
+            }
+        }
+        if (changed)
+            this.write(store);
+        return store;
+    }
+    /** Get a non-expired cached token for the app/user, or null. */
+    get(appId, userId, now = Date.now()) {
+        const store = this.read();
+        const entry = store[appId]?.[userId];
+        if (!entry)
+            return null;
+        if (entry.expiresAt <= now) {
+            this.remove(appId, userId);
+            return null;
+        }
+        return entry;
+    }
+    /** Store/replace the cached token for an app/user. */
+    set(appId, userId, entry) {
+        const store = this.read();
+        if (!store[appId])
+            store[appId] = {};
+        store[appId][userId] = entry;
+        this.write(store);
+    }
+    /** Remove the cached token for an app/user (e.g. on logout). */
+    remove(appId, userId) {
+        const store = this.read();
+        if (store[appId]) {
+            delete store[appId][userId];
+            if (Object.keys(store[appId]).length === 0)
+                delete store[appId];
+            this.write(store);
+        }
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/dev/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../dev/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AA0BpE,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,IAAI,OAAO,YAAY,KAAK,WAAW,IAAI,YAAY,EAAE,CAAC;YACxD,OAAO,YAAsC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,aAAa;IAKxB,YAAY,OAA4B;QAHhC,WAAM,GAAkB,EAAE,CAAC;QAC3B,gBAAW,GAAG,KAAK,CAAC;QAG1B,IAAI,CAAC,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;YACtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAoB;QAChC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,IAAoB;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,IAAI;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;oBACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gEAAgE;IAChE,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sDAAsD;IACtD,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,KAAqB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,gEAAgE;IAChE,MAAM,CAAC,KAAa,EAAE,MAAc;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}