@franzzemen/brokenstock-shell 0.10.1 → 0.10.2

package/fesm2022/franzzemen-brokenstock-shell.mjs

@@ -850,7 +850,9 @@ class AuthenticationService {
             if (err instanceof PasskeyCancelledError)
                 throw new AuthenticatorError(undefined, 'Cancelled — no passkey was added.', 0);
             if (err instanceof DOMException && err.name === 'InvalidStateError') {
-                throw new AuthenticatorError(undefined, 'This device already has a passkey for this account.', 0);
+                // The browser found one of this account's passkeys already usable here — often synced from
+                // another computer through a Google or Apple account. No second one is needed.
+                throw new AuthenticatorError(undefined, 'A passkey for this account is already on this device — it may be synced from another computer through your Google or Apple account. Use "Sign in with a passkey".', 0);
             }
             throw new AuthenticatorError(undefined, 'The browser could not make a passkey.', 0);
         }
@@ -4402,6 +4404,8 @@ class Login {
     #activatedRoute;
     /** The quiet wait for a passkey picked from the username box's suggestions (passkey D9). */
     #autofill;
+    /** Settles when the quiet wait has fully ended — the button's prompt waits for it. */
+    #autofillSettled;
     constructor(authenticationService, router) {
         this.authenticationService = authenticationService;
         this.router = router;
@@ -4451,12 +4455,18 @@ class Login {
         this.#autofill?.abort();
     }
     /** "Sign in with a passkey". The quiet wait must stop first: a browser runs one passkey prompt at a time. */
-    onPasskey() {
+    async onPasskey() {
         this.errors = [];
         this.passkeyHint.set(false);
+        this.submitted = true;
         this.#autofill?.abort();
         this.#autofill = undefined;
-        this.submitted = true;
+        // ⚠ Wait for the browser to finish cancelling the quiet request before opening the prompt.
+        // Starting a second passkey request while the first is still being torn down is the overlap
+        // Windows is least tolerant of. Bounded, so a request that never settles cannot block the button.
+        const settled = this.#autofillSettled;
+        if (settled)
+            await Promise.race([settled, new Promise(r => setTimeout(r, 1500))]);
         this.#passkeySignIn(false);
     }
     /**
@@ -4472,10 +4482,10 @@ class Login {
         this.#autofill?.abort();
         const controller = new AbortController();
         this.#autofill = controller;
-        this.#passkeySignIn(true, controller.signal);
+        this.#autofillSettled = this.#passkeySignIn(true, controller.signal);
     }
     #passkeySignIn(conditional, signal) {
-        this.authenticationService
+        return this.authenticationService
             .loginWithPasskey({ conditional, ...(signal ? { signal } : {}) })
             .then(() => this.#afterSignIn(undefined))
             .catch((err) => {