@luxfi/ui 8.2.7 → 8.2.9

package/dist/identity.js

@@ -1,224 +1,9 @@
 'use client';
-import * as React2 from 'react';
-import React2__default from 'react';
-import '@hanzo/gui';
-import { QueryClient } from '@tanstack/react-query';
+import * as React from 'react';
+import { iamBase, iam, IamError } from './iam.js';
+import { useWhiteLabel } from './provider.js';
 import { jsx } from 'react/jsx-runtime';
 
-// src/white-label.ts
-var LUX_BRAND = {
-  lux: "#7000FF",
-  zoo: "#6C5EFB",
-  hanzo: "#EA580C",
-  pars: "#1C3879"};
-var PARS_GOLD = "#C8A45C";
-var ORGS = {
-  lux: {
-    org: "lux",
-    name: "Lux",
-    domain: "lux.network",
-    iamDomain: "lux.id",
-    accent: LUX_BRAND.lux,
-    accentForeground: "#FFFFFF"
-  },
-  zoo: {
-    org: "zoo",
-    name: "Zoo",
-    domain: "zoo.ngo",
-    // Zoo's issuer is `zoolabs.id` — the one row where it is not `<org>.id`,
-    // and the one every hand-rolled branding map gets wrong. `id.zoo.network`
-    // ANSWERS, which is why it keeps being copied around, but it is an alias:
-    // its own discovery document advertises
-    //   issuer                  https://zoolabs.id
-    //   authorization_endpoint  https://zoolabs.id/v1/iam/oauth/authorize
-    //   jwks_uri                https://zoolabs.id/v1/iam/.well-known/jwks
-    // so a client configured on the alias validates `iss` against a string the
-    // IdP never emits and rejects every token it is given — the exact shape of
-    // the lux.id outage. `zoo.id` is not an IdP at all (no discovery document).
-    iamDomain: "zoolabs.id",
-    accent: LUX_BRAND.zoo,
-    accentForeground: "#FFFFFF"
-  },
-  bootnode: {
-    org: "bootnode",
-    name: "Bootnode",
-    domain: "bootno.de",
-    iamDomain: "id.bootno.de",
-    accent: LUX_BRAND.lux,
-    accentForeground: "#FFFFFF"
-  },
-  hanzo: {
-    org: "hanzo",
-    name: "Hanzo",
-    domain: "hanzo.ai",
-    iamDomain: "hanzo.id",
-    accent: LUX_BRAND.hanzo,
-    accentForeground: "#FFFFFF"
-  },
-  pars: {
-    org: "pars",
-    name: "Pars",
-    domain: "pars.id",
-    iamDomain: "pars.id",
-    accent: LUX_BRAND.pars,
-    accentForeground: PARS_GOLD
-  }
-};
-var DOMAIN_ORG = [
-  ["lux.network", "lux"],
-  ["lux.cloud", "lux"],
-  ["lux.id", "lux"],
-  ["lux.finance", "lux"],
-  ["lux.market", "lux"],
-  ["lux.exchange", "lux"],
-  ["zoo.ngo", "zoo"],
-  ["zoo.network", "zoo"],
-  ["zoo.cloud", "zoo"],
-  ["zoolabs.id", "zoo"],
-  ["hanzo.ai", "hanzo"],
-  ["hanzo.cloud", "hanzo"],
-  ["hanzo.id", "hanzo"],
-  ["pars.id", "pars", "app"],
-  ["pars.network", "pars", "app"],
-  ["parsdao.org", "pars", "app"],
-  ["bootno.de", "bootnode", "platform"]
-];
-var DEFAULT_ORG = "lux";
-function normalizeHost(host) {
-  const noPort = host.trim().toLowerCase().split(":")[0] ?? "";
-  return noPort.replace(/\.$/, "");
-}
-function isUnder(host, domain) {
-  return host === domain || host.endsWith(`.${domain}`);
-}
-function matchDomain(host) {
-  let best;
-  for (const entry of DOMAIN_ORG) {
-    if (isUnder(host, entry[0]) && (!best || entry[0].length > best[0].length)) {
-      best = entry;
-    }
-  }
-  return best;
-}
-function appSlug(host, domain, pinned) {
-  if (pinned) return pinned;
-  const sub = host === domain ? "" : host.slice(0, -(domain.length + 1));
-  const leftmost = sub.split(".")[0] ?? "";
-  if (leftmost && leftmost !== "www") return leftmost;
-  const label = domain.split(".")[0] ?? "";
-  const tld = domain.split(".").slice(1).join(".");
-  return tld.split(".")[0] || label;
-}
-function isLocal(host) {
-  return host === "localhost" || host.endsWith(".localhost") || host === "127.0.0.1" || host === "0.0.0.0" || host === "[::1]" || host.endsWith(".local");
-}
-function resolveWhiteLabel(host) {
-  const h = normalizeHost(host ?? "");
-  const match = h ? matchDomain(h) : void 0;
-  const org = match ? match[1] : DEFAULT_ORG;
-  const identity = ORGS[org];
-  const app = match ? appSlug(h, match[0], match[2]) : h && isLocal(h) ? "local" : "app";
-  return {
-    ...identity,
-    host: h,
-    app,
-    theme: `dark_${org}`,
-    issuer: `https://${identity.iamDomain}`,
-    clientId: `${org}-${app}`
-  };
-}
-
-// src/iam.ts
-var IamError = class extends Error {
-  constructor(message, status, unauthenticated) {
-    super(message);
-    this.name = "IamError";
-    this.status = status;
-    this.unauthenticated = unauthenticated;
-  }
-};
-var SIGNED_OUT = /please sign in|authentication required|unauthorized/i;
-function isSignedOut(status, msg) {
-  return status === 401 || SIGNED_OUT.test(msg);
-}
-function iamBase(host) {
-  const wl = typeof host === "object" && host !== null ? host : resolveWhiteLabel(host);
-  return `${wl.issuer}/v1/iam`;
-}
-async function read(call, verb, params) {
-  const url = new URL(`${call.base}/${verb}`);
-  for (const [k, v] of Object.entries(params)) url.searchParams.set(k, String(v));
-  let res;
-  try {
-    res = await fetch(url.toString(), {
-      method: "GET",
-      // The bearer is the whole credential. IAM does not allow credentialed
-      // CORS, so sending cookies would only get the response blocked.
-      headers: call.token ? { Authorization: `Bearer ${call.token}` } : {},
-      signal: call.signal
-    });
-  } catch (e) {
-    throw new IamError(e instanceof Error ? e.message : "IAM unreachable", 0, false);
-  }
-  const body = await res.json().catch(() => ({}));
-  const msg = typeof body.msg === "string" ? body.msg : "";
-  if (!res.ok || body.status === "error") {
-    throw new IamError(msg || `IAM ${verb} failed (${res.status})`, res.status, isSignedOut(res.status, msg));
-  }
-  return body.data;
-}
-var IAM_PAGE_SIZE = 20;
-var iam = {
-  /** The signed-in principal, or null when there is no session. */
-  async account(call) {
-    try {
-      const data = await read(call, "get-account", {});
-      return data && data.name ? data : null;
-    } catch (e) {
-      if (e instanceof IamError && e.unauthenticated) return null;
-      throw e;
-    }
-  },
-  /**
-   * One page of the orgs the principal can see. IAM scopes the read to the
-   * caller's authority, so a normal member gets their own org and a super
-   * admin gets the tenant list — the page never has to decide.
-   */
-  async organizations(call, page = 0, query = "", pageSize = IAM_PAGE_SIZE) {
-    const params = {
-      owner: "admin",
-      // IAM orgs live under the reserved `admin` owner
-      p: page + 1,
-      // the backend page is 1-based
-      pageSize,
-      sortField: "name",
-      sortOrder: "ascending"
-    };
-    const q = query.trim();
-    if (q) {
-      params.field = "name";
-      params.value = q;
-    }
-    return await read(call, "get-organizations", params) ?? [];
-  },
-  /** One organization by name. */
-  async organization(call, name) {
-    return await read(call, "get-organization", { id: `admin/${name}` }) ?? null;
-  },
-  /** Members of an organization. */
-  async users(call, org) {
-    return await read(call, "get-users", { owner: org }) ?? [];
-  },
-  /** The organization's projects — IAM keys this read by `organization`. */
-  async projects(call, org) {
-    return await read(call, "get-organization-projects", { organization: org }) ?? [];
-  }
-};
-new QueryClient({
-  defaultOptions: { queries: { refetchOnWindowFocus: false, retry: 1, staleTime: 3e4 } }
-});
-var WhiteLabelContext = React2__default.createContext(resolveWhiteLabel(""));
-var useWhiteLabel = () => React2__default.useContext(WhiteLabelContext);
 var IAM_TOKEN_KEY = "hanzo_iam_access_token";
 function storedToken() {
   if (typeof window === "undefined") return null;
@@ -259,23 +44,23 @@ function writeScope(host, kind, value) {
   } catch {
   }
 }
-var IdentityContext = React2.createContext(null);
+var IdentityContext = React.createContext(null);
 var IdentityProvider = ({
   children,
   auth = defaultAuth,
   loginPath = "/login"
 }) => {
   const whiteLabel = useWhiteLabel();
-  const base = React2.useMemo(() => iamBase(whiteLabel), [whiteLabel]);
-  const [status, setStatus] = React2.useState("loading");
-  const [account, setAccount] = React2.useState(null);
-  const [orgs, setOrgs] = React2.useState([]);
-  const [projects, setProjects] = React2.useState([]);
-  const [error, setError] = React2.useState(null);
-  const [orgName, setOrgName] = React2.useState(null);
-  const [projectName, setProjectName] = React2.useState(null);
-  const [epoch, setEpoch] = React2.useState(0);
-  React2.useEffect(() => {
+  const base = React.useMemo(() => iamBase(whiteLabel), [whiteLabel]);
+  const [status, setStatus] = React.useState("loading");
+  const [account, setAccount] = React.useState(null);
+  const [orgs, setOrgs] = React.useState([]);
+  const [projects, setProjects] = React.useState([]);
+  const [error, setError] = React.useState(null);
+  const [orgName, setOrgName] = React.useState(null);
+  const [projectName, setProjectName] = React.useState(null);
+  const [epoch, setEpoch] = React.useState(0);
+  React.useEffect(() => {
     const ac = new AbortController();
     let live = true;
     void (async () => {
@@ -323,12 +108,12 @@ var IdentityProvider = ({
       ac.abort();
     };
   }, [base, auth, epoch]);
-  const org = React2.useMemo(() => {
+  const org = React.useMemo(() => {
     if (orgs.length === 0) return null;
     const saved = orgName ?? readScope(whiteLabel.host, "org");
     return orgs.find((o) => o.name === saved) ?? orgs.find((o) => o.name === account?.owner) ?? orgs[0];
   }, [orgs, orgName, account, whiteLabel.host]);
-  React2.useEffect(() => {
+  React.useEffect(() => {
     if (!org) {
       setProjects([]);
       return;
@@ -346,12 +131,12 @@ var IdentityProvider = ({
       ac.abort();
     };
   }, [base, auth, org, epoch]);
-  const project = React2.useMemo(() => {
+  const project = React.useMemo(() => {
     if (projects.length === 0) return null;
     const saved = projectName ?? readScope(whiteLabel.host, "project");
     return projects.find((p) => p.name === saved) ?? projects.find((p) => p.isDefault) ?? projects[0];
   }, [projects, projectName, whiteLabel.host]);
-  const value = React2.useMemo(() => ({
+  const value = React.useMemo(() => ({
     status,
     account,
     orgs,
@@ -383,9 +168,9 @@ var IdentityProvider = ({
   return /* @__PURE__ */ jsx(IdentityContext.Provider, { value, children });
 };
 function useIdentity() {
-  const ctx = React2.useContext(IdentityContext);
+  const ctx = React.useContext(IdentityContext);
   const whiteLabel = useWhiteLabel();
-  const fallback = React2.useMemo(() => ({
+  const fallback = React.useMemo(() => ({
     status: "anonymous",
     account: null,
     orgs: [],