DES-23: Add LoadMore infinite-scroll primitive + useLoadMore hook ## Summary S

.gitignore

@@ -54,6 +54,9 @@ test-config.yml
 dist/
 build/
 lib/
+# The GGA example app keeps decoupled source modules under src/lib/ (not a
+# compiled-output dir), so it must not be swept up by the `lib/` rule above.
+!apps/examples/grid-global-accounts-example-app/src/lib/
 
 # Vim swap files
 *.swp
@@ -126,3 +129,6 @@ stats.html
 
 # Dev proxy cookies (contains ALB session tokens)
 .dev-proxy-cookies
+
+# Playwright MCP logs
+.playwright-mcp/

.mise.toml

@@ -2,7 +2,7 @@
 MISE_NODE_COREPACK = true
 
 [tools]
-node = "20.19"
+node = "20.19.6"
 
 [tasks.deps]
 description = "Install all JS dependencies"

.yarnrc.yml

@@ -1,10 +1,10 @@
 compressionLevel: mixed
 
-enableGlobalCache: false
+enableGlobalCache: true
 
 nodeLinker: node-modules
 
-npmMinimalAgeGate: 1440
+npmMinimalAgeGate: 4320 # 3 days
 
 npmPreapprovedPackages:
   - "@lightsparkdev/*"

README.md

@@ -26,3 +26,11 @@ yarn start remote-signing-server
 ```
 
 Please see the README files in the [examples directory](./apps/examples) for instructions on running the examples. Please note that some packages such as @lightsparkdev/ui are for building the examples only and not necessary for your implementation of our [published SDK packages](https://www.npmjs.com/search?q=%40lightsparkdev).
+
+## Contributions and releases
+
+After the migration in [RELEASING.md](RELEASING.md) is activated, target
+contribution PRs at `develop` and include a Changeset for public package changes.
+Contributions are imported into Webdev for review and testing, then exported to
+`main`. Versioning happens in Webdev; public `main` supplies immutable release
+candidates.

apps/examples/grid-global-accounts-example-app/.gitignore

@@ -0,0 +1,2 @@
+# Verification screenshots — captured locally, not tracked.
+.screenshots/

apps/examples/grid-global-accounts-example-app/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Grid Global Accounts</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

apps/examples/grid-global-accounts-example-app/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@lightsparkdev/grid-global-accounts-example-app",
+  "private": true,
+  "version": "0.0.1",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc && vite build",
+    "start": "vite",
+    "preview": "vite preview",
+    "test": "vitest run"
+  },
+  "devDependencies": {
+    "@types/react": "^19.2.15",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^5.2.0",
+    "typescript": "^5.6.2",
+    "vite": "^8.0.14",
+    "vitest": "^4.1.7"
+  },
+  "dependencies": {
+    "@emotion/react": "^11.14.0",
+    "@emotion/styled": "^11.14.1",
+    "@lightsparkdev/origin": "*",
+    "@turnkey/api-key-stamper": "^0.6.5",
+    "@turnkey/crypto": "^2.11.0",
+    "@turnkey/encoding": "^0.6.0",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6"
+  }
+}

apps/examples/grid-global-accounts-example-app/src/App.tsx

@@ -0,0 +1,19 @@
+import { Shell } from "./components/Shell";
+import { AppStateProvider, useAppState } from "./state/store";
+import { CustomerView } from "./views/customer/CustomerView";
+import { PlatformView } from "./views/platform/PlatformView";
+
+export function App() {
+  return (
+    <AppStateProvider>
+      <Shell>
+        <Router />
+      </Shell>
+    </AppStateProvider>
+  );
+}
+
+function Router() {
+  const { persona } = useAppState();
+  return persona === "platform" ? <PlatformView /> : <CustomerView />;
+}

apps/examples/grid-global-accounts-example-app/src/__tests__/google-identity.test.ts

@@ -0,0 +1,37 @@
+import { createHash } from "node:crypto";
+import { afterEach, describe, expect, it } from "vitest";
+
+import { oidcNonceForPublicKey } from "../google-identity";
+import { generateClientKeyPair } from "../turnkey";
+import { setActiveSessionAccount } from "../session";
+
+// The backend's sandbox_oidc_nonce_for_public_key / Turnkey enclave rule:
+//   sha256(public_key.encode("utf-8")).hexdigest()
+function backendNonce(publicKeyHex: string): string {
+  return createHash("sha256").update(publicKeyHex, "utf8").digest("hex");
+}
+
+afterEach(() => {
+  setActiveSessionAccount(null);
+});
+
+describe("oidcNonceForPublicKey", () => {
+  it("matches sha256-hex of the public-key hex string (backend formula)", async () => {
+    const pub = "02a1b2c3";
+    expect(await oidcNonceForPublicKey(pub)).toBe(backendNonce(pub));
+  });
+
+  it("binds to the COMPRESSED session key the oauth flow generates", async () => {
+    setActiveSessionAccount("InternalAccount:google");
+    const kp = generateClientKeyPair();
+    // 33-byte compressed P-256 point → 66 hex chars; the nonce must hash this
+    // exact key, not the uncompressed encoding.
+    expect(kp.publicKey.length).toBe(66);
+    expect(await oidcNonceForPublicKey(kp.publicKey)).toBe(
+      backendNonce(kp.publicKey),
+    );
+    expect(await oidcNonceForPublicKey(kp.publicKey)).not.toBe(
+      backendNonce(kp.publicKeyUncompressed),
+    );
+  });
+});

apps/examples/grid-global-accounts-example-app/src/__tests__/login-key-encoding.test.ts

@@ -0,0 +1,84 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import type { ClientKeyPair } from "../session";
+import {
+  loginClientPublicKey,
+  persistLoginKeyEncoding,
+  readLoginKeyEncoding,
+} from "../login-key-encoding";
+
+const kp: ClientKeyPair = {
+  privateKey: "priv",
+  publicKey: "02compressed",
+  publicKeyUncompressed: "04uncompressed",
+};
+
+function stubStoredEncoding(value: string | null): void {
+  vi.stubGlobal("localStorage", {
+    getItem: () => value,
+    setItem: () => {},
+    removeItem: () => {},
+  });
+}
+
+afterEach(() => {
+  vi.unstubAllGlobals();
+});
+
+describe("login key encoding toggle", () => {
+  it("sends the compressed (modern) key by default when the toggle is unset", () => {
+    stubStoredEncoding(null);
+    expect(readLoginKeyEncoding()).toBe("modern");
+    expect(loginClientPublicKey(kp)).toBe(kp.publicKey);
+  });
+
+  it("sends the uncompressed (legacy) key when the toggle is set to legacy", () => {
+    stubStoredEncoding("legacy");
+    expect(readLoginKeyEncoding()).toBe("legacy");
+    expect(loginClientPublicKey(kp)).toBe(kp.publicKeyUncompressed);
+  });
+
+  it("treats any non-legacy stored value as modern", () => {
+    stubStoredEncoding("something-else");
+    expect(readLoginKeyEncoding()).toBe("modern");
+    expect(loginClientPublicKey(kp)).toBe(kp.publicKey);
+  });
+
+  it("falls back to modern when localStorage is unavailable", () => {
+    vi.stubGlobal("localStorage", {
+      getItem: () => {
+        throw new Error("localStorage unavailable");
+      },
+    });
+    expect(readLoginKeyEncoding()).toBe("modern");
+    expect(loginClientPublicKey(kp)).toBe(kp.publicKey);
+  });
+
+  it("persists the toggle choice so the next login (and a reload) keeps it", () => {
+    const store: Record<string, string> = {};
+    vi.stubGlobal("localStorage", {
+      getItem: (k: string) => store[k] ?? null,
+      setItem: (k: string, v: string) => {
+        store[k] = v;
+      },
+      removeItem: (k: string) => {
+        delete store[k];
+      },
+    });
+    persistLoginKeyEncoding("legacy");
+    expect(readLoginKeyEncoding()).toBe("legacy");
+    expect(loginClientPublicKey(kp)).toBe(kp.publicKeyUncompressed);
+    persistLoginKeyEncoding("modern");
+    expect(readLoginKeyEncoding()).toBe("modern");
+    expect(loginClientPublicKey(kp)).toBe(kp.publicKey);
+  });
+
+  it("swallows write failures when localStorage is unavailable", () => {
+    vi.stubGlobal("localStorage", {
+      setItem: () => {
+        throw new Error("localStorage unavailable");
+      },
+    });
+    expect(() => persistLoginKeyEncoding("legacy")).not.toThrow();
+  });
+});