@octane-xplat/auth 0.9.0 → 0.11.0

package/dist/web/index.js

@@ -1,5 +1,6 @@
-import { appleAuth } from "./apple.web.js";
-import { googleAuth } from "./google.web.js";
-import { AppleSignInButton } from "./AppleSignInButton.web.tsrx.js";
-import { GoogleSignInButton } from "./GoogleSignInButton.web.tsrx.js";
-export { AppleSignInButton, GoogleSignInButton, appleAuth, googleAuth };
+import { appleAuth } from "./auth/src/apple.web.js";
+import { googleAuth } from "./auth/src/google.web.js";
+import { AppleSignInButton } from "./auth/src/AppleSignInButton.web.tsrx.js";
+import { GoogleSignInButton } from "./auth/src/GoogleSignInButton.web.tsrx.js";
+import { createHostedAuth, postJson, queryParam } from "./auth/src/hosted.js";
+export { AppleSignInButton, GoogleSignInButton, appleAuth, createHostedAuth, googleAuth, postJson, queryParam };

package/dist/web/octane-client-build.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "buildId": "dc0dd9f6-f1fb-4b15-a5c3-95ddbe1709aa",
+  "buildId": "7ebd11a6-c6c1-4302-aa4a-1fb3fa0410da",
   "mode": "production",
   "capabilities": {
     "independentHydration": false

package/dist/web/platform/src/app-info.web.js

@@ -0,0 +1,3 @@
+import { desktopHostBootstrap } from "./host-runtime.web.js";
+desktopHostBootstrap()?.appInfo;
+//#endregion

package/dist/web/platform/src/auth-session.web.js

@@ -0,0 +1,10 @@
+//#region ../platform/src/auth-session.web.ts
+var authSession = {
+	supported: false,
+	async ensure() {
+		return "unsupported";
+	},
+	impl: null
+};
+//#endregion
+export { authSession };

package/dist/web/platform/src/breakpoints.web.tsrx.js

@@ -0,0 +1,7 @@
+import { hookSlots } from "octane";
+import { enableNativeReadCollection } from "octane/internal/client";
+import "octane/signals/client";
+//#region ../platform/src/breakpoints.web.tsrx
+enableNativeReadCollection(1);
+/* @__PURE__ */ hookSlots(2) + 1;
+//#endregion

package/dist/web/platform/src/clipboard.web.js

@@ -0,0 +1,3 @@
+import { desktopHostClient } from "./host-runtime.web.js";
+typeof navigator !== "undefined" && typeof navigator.clipboard?.writeText === "function" || desktopHostClient();
+//#endregion

package/dist/web/platform/src/deep-links.web.js

@@ -0,0 +1,3 @@
+import { desktopHostBootstrap } from "./host-runtime.web.js";
+desktopHostBootstrap()?.initialUrl;
+//#endregion

package/dist/web/platform/src/device.web.js

@@ -0,0 +1,2 @@
+navigator.userAgent.match(/(?:Mac OS X|Windows NT|Android|OS) ([\d._]+)/)?.[1]?.replace(/_/g, "."), navigator.language.split("-")[0], navigator.language.split("-")[1];
+//#endregion

package/dist/web/platform/src/host-bridge.web.js

@@ -0,0 +1,18 @@
+//#region ../platform/src/host-bridge.web.ts
+/** Return the native message channel when this page is hosted by a desktop app. */
+function createWebKitTransport() {
+	if (typeof window === "undefined") return null;
+	const handler = window.webkit?.messageHandlers?.xplat;
+	const host = window.__xplatHostTransport;
+	if (!handler || !host) return null;
+	return {
+		postMessage(message) {
+			handler.postMessage(message);
+		},
+		listen(listener) {
+			return host.listen(listener);
+		}
+	};
+}
+//#endregion
+export { createWebKitTransport };

package/dist/web/platform/src/host-protocol.js

@@ -0,0 +1,73 @@
+//#region ../platform/src/host-protocol.ts
+/**
+* Create the webview-side client. Host methods are typed at compile time; this
+* deliberately does not add runtime schema validation.
+*/
+function createHostClient(transport) {
+	const pending = /* @__PURE__ */ new Map();
+	const listeners = /* @__PURE__ */ new Map();
+	let nextId = 0;
+	let disposed = false;
+	const removeListener = transport.listen((message) => {
+		const packet = JSON.parse(message);
+		if (packet.type === "reply") {
+			const task = pending.get(packet.id);
+			if (!task) return;
+			pending.delete(packet.id);
+			if (packet.ok) task.resolve(packet.value);
+			else task.reject(new Error(packet.error));
+			return;
+		}
+		for (const listener of listeners.get(packet.name) ?? []) listener(packet.payload);
+	});
+	const request = (value) => {
+		if (disposed) return Promise.reject(/* @__PURE__ */ new Error("desktop host client is disposed"));
+		const id = ++nextId;
+		const promise = new Promise((resolve, reject) => pending.set(id, {
+			resolve,
+			reject
+		}));
+		try {
+			transport.postMessage(JSON.stringify({
+				...value,
+				id
+			}));
+		} catch (error) {
+			const task = pending.get(id);
+			pending.delete(id);
+			task?.reject(error instanceof Error ? error : new Error(String(error)));
+		}
+		return promise;
+	};
+	return {
+		call: ((service, method, ...args) => request({
+			type: "call",
+			service,
+			method,
+			args
+		})),
+		capabilities() {
+			return request({ type: "capabilities" });
+		},
+		on(name, listener) {
+			const eventListeners = listeners.get(name) ?? /* @__PURE__ */ new Set();
+			const receive = listener;
+			eventListeners.add(receive);
+			listeners.set(name, eventListeners);
+			return () => {
+				eventListeners.delete(receive);
+				if (!eventListeners.size) listeners.delete(name);
+			};
+		},
+		dispose() {
+			if (disposed) return;
+			disposed = true;
+			removeListener();
+			listeners.clear();
+			for (const task of pending.values()) task.reject(/* @__PURE__ */ new Error("desktop host client is disposed"));
+			pending.clear();
+		}
+	};
+}
+//#endregion
+export { createHostClient };

package/dist/web/platform/src/host-runtime.web.js

@@ -0,0 +1,76 @@
+import { createWebKitTransport } from "./host-bridge.web.js";
+import { createHostClient } from "./host-protocol.js";
+//#region ../platform/src/host-runtime.web.ts
+var client;
+var capabilityTable;
+/** Return the native service client when this page is inside a desktop webview. */
+function desktopHostClient() {
+	if (client !== void 0) return client;
+	const transport = createWebKitTransport();
+	client = transport ? createHostClient(transport) : null;
+	return client;
+}
+/** Read values installed before the document's application scripts execute. */
+function desktopHostBootstrap() {
+	if (typeof window === "undefined") return null;
+	return window.__xplatHostSnapshot ?? null;
+}
+function desktopHostSupports(service, method) {
+	const host = desktopHostClient();
+	if (!host) return Promise.resolve(false);
+	capabilityTable ??= host.capabilities().catch(() => ({}));
+	return capabilityTable.then((capabilities) => capabilities[service]?.includes(method) ?? false);
+}
+/** Typed desktop service facade; null outside a supported native webview. */
+function desktopHost() {
+	const host = desktopHostClient();
+	if (!host) return null;
+	return {
+		app: {
+			getInfo: () => host.call("app", "getInfo"),
+			getState: () => host.call("app", "getState"),
+			getWindowSize: () => host.call("app", "getWindowSize"),
+			consumeInitialUrl: () => host.call("app", "consumeInitialUrl")
+		},
+		clipboard: {
+			read: () => host.call("clipboard", "read"),
+			write: (value) => host.call("clipboard", "write", value)
+		},
+		files: {
+			pick: (accept, options) => host.call("files", "pick", accept, options),
+			readText: (uri) => host.call("files", "readText", uri),
+			writeText: (name, text) => host.call("files", "writeText", name, text)
+		},
+		notifications: {
+			ensure: () => host.call("notifications", "ensure"),
+			notify: (title, body) => host.call("notifications", "notify", title, body)
+		},
+		secureStorage: {
+			get: (key) => host.call("secureStorage", "get", key),
+			set: (key, value) => host.call("secureStorage", "set", key, value),
+			remove: (key) => host.call("secureStorage", "remove", key)
+		},
+		appearance: { get: () => host.call("appearance", "get") },
+		windows: {
+			open: (options) => host.call("windows", "open", options),
+			close: (id) => host.call("windows", "close", id),
+			setTitle: (id, title) => host.call("windows", "setTitle", id, title)
+		},
+		system: {
+			openUrl: (url) => host.call("system", "openUrl", url),
+			openPath: (path) => host.call("system", "openPath", path),
+			shareContent: (input) => host.call("system", "shareContent", input)
+		},
+		storage: {
+			get: (key) => host.call("storage", "get", key),
+			set: (key, value) => host.call("storage", "set", key, value),
+			remove: (key) => host.call("storage", "remove", key)
+		},
+		capabilities: () => host.capabilities(),
+		supports: desktopHostSupports,
+		on: (name, listener) => host.on(name, listener),
+		dispose: () => host.dispose()
+	};
+}
+//#endregion
+export { desktopHost, desktopHostBootstrap, desktopHostClient, desktopHostSupports };

package/dist/web/platform/src/index.web.js

@@ -0,0 +1,13 @@
+import "./device.web.js";
+import "./app-info.web.js";
+import "./clipboard.web.js";
+import "./locale.web.js";
+import "./webauthn.web.js";
+import { random } from "./random.web.js";
+import { authSession } from "./auth-session.web.js";
+import "./deep-links.web.js";
+import "./lifecycle.web.tsrx.js";
+import "./safe-area.web.tsrx.js";
+import "./screen.web.tsrx.js";
+import "./breakpoints.web.tsrx.js";
+export { authSession, random };

package/dist/web/platform/src/lifecycle.web.tsrx.js

@@ -0,0 +1,3 @@
+import { hookSlots } from "octane";
+/* @__PURE__ */ hookSlots(2) + 1;
+//#endregion

package/dist/web/platform/src/locale.web.js

@@ -0,0 +1,10 @@
+(() => {
+	const tag = navigator.language ?? "";
+	const [language = "", region = ""] = tag.split("-");
+	return {
+		tag,
+		language,
+		region
+	};
+})();
+//#endregion

package/dist/web/platform/src/random.web.js

@@ -0,0 +1,21 @@
+//#region ../platform/src/random.web.ts
+var source = () => typeof crypto !== "undefined" && typeof crypto.getRandomValues === "function" ? crypto : null;
+var random = {
+	get supported() {
+		return source() !== null;
+	},
+	fill(view) {
+		if (!ArrayBuffer.isView(view)) throw new TypeError("random.fill: expected an ArrayBufferView");
+		const crypto = source();
+		if (!crypto) throw new Error("random: crypto.getRandomValues is unavailable");
+		const target = new Uint8Array(view.buffer, view.byteOffset, view.byteLength);
+		for (let offset = 0; offset < target.length; offset += 65536) crypto.getRandomValues(target.subarray(offset, offset + 65536));
+		return view;
+	},
+	bytes(length) {
+		if (!Number.isInteger(length) || length < 0) throw new RangeError("random.bytes: length must be a non-negative integer");
+		return random.fill(new Uint8Array(length));
+	}
+};
+//#endregion
+export { random };

package/dist/web/platform/src/safe-area.web.tsrx.js

@@ -0,0 +1,3 @@
+import { hookSlots } from "octane";
+/* @__PURE__ */ hookSlots(2) + 1;
+//#endregion

package/dist/web/platform/src/screen.web.tsrx.js

@@ -0,0 +1,3 @@
+import { hookSlots } from "octane";
+/* @__PURE__ */ hookSlots(2) + 1;
+//#endregion

package/dist/web/platform/src/webauthn.web.js

@@ -0,0 +1,2 @@
+typeof window !== "undefined" && window.isSecureContext && typeof PublicKeyCredential === "function" && navigator.credentials;
+//#endregion

package/dist/web/secure-storage/src/secure-storage.web.js

@@ -0,0 +1,21 @@
+import { desktopHost } from "../../platform/src/host-runtime.web.js";
+//#region ../secure-storage/src/secure-storage.web.ts
+var hostStore = {
+	get: (key) => desktopHost()?.secureStorage.get(key) ?? Promise.resolve(null),
+	set: (key, value) => desktopHost()?.secureStorage.set(key, value) ?? Promise.resolve(false),
+	remove: (key) => desktopHost()?.secureStorage.remove(key) ?? Promise.resolve(false)
+};
+var secureStorage = {
+	get supported() {
+		return desktopHost() !== null;
+	},
+	async ensure() {
+		const host = desktopHost();
+		return host && await host.supports("secureStorage", "get") ? "granted" : "unsupported";
+	},
+	get impl() {
+		return desktopHost() ? hostStore : null;
+	}
+};
+//#endregion
+export { secureStorage };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@octane-xplat/auth",
-  "version": "0.9.0",
-  "description": "Sign in with Apple + Google Sign-In for Octane xplat — native SDKs on iOS/Android, platform web SDKs in the browser",
+  "version": "0.11.0",
+  "description": "Sign in with Apple + Google Sign-In + hosted-auth sessions for Octane xplat — native SDKs on iOS/Android, platform web SDKs in the browser",
   "keywords": [
     "android",
     "apple",
@@ -12,6 +12,7 @@
     "nativescript",
     "oauth",
     "octane",
+    "pkce",
     "sign-in",
     "web",
     "xplat"
@@ -52,15 +53,18 @@
   },
   "dependencies": {
     "@nativescript/apple-sign-in": "2.0.0",
-    "@nativescript/google-signin": "2.1.1"
+    "@nativescript/google-signin": "2.1.1",
+    "@octane-xplat/platform": "0.11.0",
+    "@octane-xplat/secure-storage": "0.11.0"
   },
   "devDependencies": {
     "@nativescript-community/octane": "0.2.4",
     "@nativescript/core": "9.1.2",
+    "@octane-xplat/macos-renderer": "0.11.0",
     "@octanejs/vite-plugin": "0.1.61",
     "@tsrx/typescript-plugin": "0.4.11",
     "octane": "0.6.3",
-    "tsrx-typegen": "0.2.1",
+    "tsrx-typegen": "0.2.2",
     "typescript": "5.9.3",
     "vite": "8.3.0"
   },
@@ -81,6 +85,8 @@
     "build": "vite build && vite build --mode native && pnpm typegen && node ../../scripts/check-native-dist.mjs",
     "test:packed": "node tests/packed-consumer.mjs",
     "typegen": "tsrx-typegen --target octane",
-    "pack:check": "tsrx-typegen --pack-check"
+    "pack:check": "tsrx-typegen --pack-check",
+    "test": "node --test tests/*.test.mjs",
+    "typecheck:macos": "tsrx-tsc --noEmit -p tsconfig.macos.json"
   }
 }

package/src/AppleSignInButton.macos.tsrx

@@ -1,36 +1,34 @@
-/** @jsxImportSource @xplat/macos/renderer */
+/** @jsxImportSource @octane-xplat/macos-renderer */
+import { useEffect, useRef } from 'octane'
 import { appleAuth } from './apple.macos'
-import type { AppleSignInButtonProps, SignInResult } from './types'
+import { attachAppleButton } from './apple-button.macos'
+import type { AppleSignInButtonProps } from './types'
 
-const LABELS = {
-	default: 'Sign in with Apple',
-	signUp: 'Sign up with Apple',
-	continue: 'Continue with Apple',
-} as const
-
-/** Sign in with Apple button — macOS leaf. The AppKit renderer has no
- *  ASAuthorizationAppleIDButton in its vocabulary, so this is a flexbox row
- *  with a click-gesture tap (the same shape as Pressable/controls.macos)
- *  that runs the AuthenticationServices flow and reports through `onResult`.
- *  onPress on the intrinsic <button> is not used — the universal compile
- *  emits DOM-only delegateEvents for it. */
+/** Official ASAuthorizationAppleIDButton, embedded in the leaf's host view. */
 export function AppleSignInButton(props: AppleSignInButtonProps) @{
+	const anchor = useRef<any>(null)
+	const handle = useRef<ReturnType<typeof attachAppleButton> | null>(null)
+	const current = useRef(props)
+	current.current = props
+
+	useEffect(() => {
+		if (!anchor.current) return
+		handle.current = attachAppleButton(anchor.current, current.current, () => {
+			const latest = current.current
+			if (latest.disabled) return
+			latest.onPress?.()
+			void appleAuth.signIn().then((result) => current.current.onResult?.(result))
+		})
+
+		return () => { handle.current?.detach(); handle.current = null }
+	}, [props.type, props.theme])
+
+	useEffect(() => { handle.current?.update(!!props.disabled) })
+
 	<flexboxlayout
+		ref={(view: any) => { anchor.current = view }}
 		id={props.id}
-		className={['vx-button', props.className]}
-		style={props.style}
-		accessibilityLabel={LABELS[props.type ?? 'default']}
-		onTap={
-			props.disabled === true
-				? undefined
-				: () => {
-						props.onPress?.()
-						if (props.onResult) {
-							void appleAuth.signIn().then((result: SignInResult) => props.onResult?.(result))
-						}
-					}
-		}
-	>
-		<label text={LABELS[props.type ?? 'default']} />
-	</flexboxlayout>
+		className={props.className}
+		style={{ width: 240, height: 44, ...props.style }}
+	/>;
 }

package/src/GoogleSignInButton.macos.tsrx

@@ -1,7 +1,21 @@
-/** @jsxImportSource @xplat/macos/renderer */
+/** @jsxImportSource @octane-xplat/macos-renderer */
+import { googleAuth } from './google.macos'
 import type { GoogleSignInButtonProps } from './types'
 
-/** Explicit placeholder — the AppKit host has no Google sign-in button. */
-export function GoogleSignInButton(_props: GoogleSignInButtonProps) @{
-	<label className="vx-unsupported">Google Sign-In is unsupported by the AppKit host</label>
+/** Hosted Google sign-in trigger; Google does not provide an AppKit button. */
+export function GoogleSignInButton(props: GoogleSignInButtonProps) @{
+	<flexboxlayout
+		id={props.id}
+		className={['vx-button', props.className]}
+		style={props.style}
+		accessibilityRole="button"
+		accessibilityLabel="Sign in with Google"
+		accessibilityState={{ disabled: !!props.disabled }}
+		onTap={props.disabled ? undefined : () => {
+			props.onPress?.()
+			void googleAuth.signIn().then((result) => props.onResult?.(result))
+		}}
+	>
+		<label text="Sign in with Google" />
+	</flexboxlayout>;
 }

package/src/apple-button.macos.ts

@@ -0,0 +1,75 @@
+// Leaf-owned attachment: no renderer vocabulary or shared host change needed.
+import type { AppleSignInButtonProps } from './types'
+
+declare const objc: any
+declare const NSObject: any
+declare const interop: any
+declare const ASAuthorizationAppleIDButton: any
+
+let ActionTarget: any
+
+export function attachAppleButton(view: any, props: AppleSignInButtonProps, press: () => void) {
+	try {
+		objc.import('AuthenticationServices')
+	} catch {}
+
+	if (typeof ASAuthorizationAppleIDButton === 'undefined') {
+		throw new Error('The official Sign in with Apple button is unavailable on this host')
+	}
+
+	if (!ActionTarget) {
+		ActionTarget = NSObject.extend(
+			{
+				press(this: any, _sender: any) {
+					this.callback?.()
+				},
+			},
+			{ exposedMethods: { 'press:': { params: [interop.types.id], returns: interop.types.void } } },
+		)
+	}
+
+	const target = ActionTarget.new()
+	target.callback = press
+	// Values from ASAuthorizationAppleIDButton.h (macOS 10.15+).
+	const type = props.type === 'continue' ? 1 : props.type === 'signUp' ? 2 : 0
+	const theme = props.theme === 'white' ? 0 : props.theme === 'whiteOutline' ? 1 : 2
+	const button =
+		ASAuthorizationAppleIDButton.alloc().initWithAuthorizationButtonTypeAuthorizationButtonStyle(
+			type,
+			theme,
+		)
+
+	button.target = target
+	button.action = 'press:'
+	button.enabled = !props.disabled
+	button.translatesAutoresizingMaskIntoConstraints = false
+	view.addSubview(button)
+	const constraints = [
+		button.leadingAnchor.constraintEqualToAnchor(view.leadingAnchor),
+		button.trailingAnchor.constraintEqualToAnchor(view.trailingAnchor),
+		button.topAnchor.constraintEqualToAnchor(view.topAnchor),
+		button.bottomAnchor.constraintEqualToAnchor(view.bottomAnchor),
+	]
+
+	for (const constraint of constraints) {
+		constraint.active = true
+	}
+
+	return {
+		// Target is weak in AppKit: retain its wrapper with the attachment handle.
+		target,
+		button,
+		update(disabled: boolean) {
+			button.enabled = !disabled
+		},
+		detach() {
+			target.callback = null
+			button.target = null
+			for (const constraint of constraints) {
+				constraint.active = false
+			}
+
+			button.removeFromSuperview()
+		},
+	}
+}