@oxy.so/core 7.7.0 → 7.8.1

package/dist/cjs/api/auth.js

@@ -515,6 +515,7 @@ class AuthCommonsApi {
             sessionToken,
             authorizeCode: res.authorizeCode,
             qrPayload: res.qrPayload,
+            approvalUrl: res.approvalUrl,
             expiresAt: res.expiresAt ?? expiresAt,
             status: res.status,
         };

package/dist/cjs/i18n/locales/ar-SA.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'امسح باستخدام Commons لتسجيل الدخول',
             renew: 'عرض رمز جديد',
         },
+        device: {
+            codeHint: 'تأكد من أن هاتفك يعرض هذا الرمز',
+        },
         errors: {
             rateLimited: 'محاولات كثيرة جدًا. حاول مرة أخرى بعد {{seconds}} ث.',
             invalidCredentials: 'اسم المستخدم أو البريد الإلكتروني أو كلمة المرور غير صحيح. إذا كانت عدة حسابات تستخدم هذا البريد الإلكتروني، فسجّل الدخول باسم المستخدم.',

package/dist/cjs/i18n/locales/bn-BD.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'সাইন ইন করতে Commons দিয়ে স্ক্যান করুন',
             renew: 'নতুন কোড দেখান',
         },
+        device: {
+            codeHint: 'দেখে নিন আপনার ফোনে এই কোডটিই দেখাচ্ছে',
+        },
         errors: {
             rateLimited: 'অনেকবার চেষ্টা করা হয়েছে। {{seconds}} সেকেন্ড পরে আবার চেষ্টা করুন।',
             invalidCredentials: 'ইউজারনেম, ইমেইল বা পাসওয়ার্ড সঠিক নয়। এই ইমেইলে একাধিক অ্যাকাউন্ট থাকলে ইউজারনেম দিয়ে সাইন ইন করুন।',

package/dist/cjs/i18n/locales/ca-ES.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Escaneja amb Commons per entrar',
             renew: 'Mostra un codi nou',
         },
+        device: {
+            codeHint: 'Comprova que el mòbil mostra aquest codi',
+        },
         errors: {
             rateLimited: 'Massa intents. Torna-ho a provar d’aquí a {{seconds}} s.',
             invalidCredentials: "El nom d'usuari, el correu o la contrasenya no són correctes. Si diversos comptes fan servir aquest correu, entra amb el nom d'usuari.",

package/dist/cjs/i18n/locales/de-DE.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Mit Commons scannen, um dich anzumelden',
             renew: 'Neuen Code anzeigen',
         },
+        device: {
+            codeHint: 'Prüfe, ob dein Smartphone diesen Code anzeigt',
+        },
         errors: {
             rateLimited: 'Zu viele Versuche. Versuche es in {{seconds}} s erneut.',
             invalidCredentials: 'Benutzername, E-Mail oder Passwort stimmen nicht. Wenn mehrere Konten diese E-Mail-Adresse nutzen, melde dich mit dem Benutzernamen an.',

package/dist/cjs/i18n/locales/en-US.js

@@ -171,6 +171,9 @@ const dict = {
             caption: 'Scan with Commons to sign in',
             renew: 'Show a new code',
         },
+        device: {
+            codeHint: 'Check that your phone shows this code',
+        },
         terms: {
             before: 'By continuing, you agree to our',
             termsLink: 'Terms of Service',

package/dist/cjs/i18n/locales/es-ES.js

@@ -171,6 +171,9 @@ const dict = {
             caption: 'Escanea con Commons para entrar',
             renew: 'Mostrar un código nuevo',
         },
+        device: {
+            codeHint: 'Comprueba que tu móvil muestra este código',
+        },
         terms: {
             before: 'Al continuar, aceptas nuestros',
             termsLink: 'Términos del servicio',

package/dist/cjs/i18n/locales/fr-FR.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Scannez avec Commons pour vous connecter',
             renew: 'Afficher un nouveau code',
         },
+        device: {
+            codeHint: 'Vérifiez que votre téléphone affiche ce code',
+        },
         errors: {
             rateLimited: 'Trop de tentatives. Réessayez dans {{seconds}} s.',
             invalidCredentials: "Le nom d'utilisateur, l'e-mail ou le mot de passe est incorrect. Si plusieurs comptes utilisent cet e-mail, connectez-vous avec le nom d'utilisateur.",

package/dist/cjs/i18n/locales/hi-IN.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'साइन इन करने के लिए Commons से स्कैन करें',
             renew: 'नया कोड दिखाएं',
         },
+        device: {
+            codeHint: 'जाँचें कि आपके फ़ोन पर यही कोड दिख रहा है',
+        },
         errors: {
             rateLimited: 'बहुत ज़्यादा कोशिशें हो गईं। {{seconds}} सेकंड बाद फिर कोशिश करें।',
             invalidCredentials: 'यूज़रनेम, ईमेल या पासवर्ड सही नहीं है। अगर इस ईमेल से कई अकाउंट जुड़े हैं, तो यूज़रनेम से साइन इन करें।',

package/dist/cjs/i18n/locales/id-ID.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Pindai dengan Commons untuk masuk',
             renew: 'Tampilkan kode baru',
         },
+        device: {
+            codeHint: 'Pastikan ponsel Anda menampilkan kode ini',
+        },
         errors: {
             rateLimited: 'Terlalu banyak percobaan. Coba lagi dalam {{seconds}} dtk.',
             invalidCredentials: 'Nama pengguna, email, atau sandi tidak benar. Jika beberapa akun menggunakan email ini, masuklah dengan nama pengguna.',

package/dist/cjs/i18n/locales/it-IT.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Scansiona con Commons per accedere',
             renew: 'Mostra un nuovo codice',
         },
+        device: {
+            codeHint: 'Controlla che il telefono mostri questo codice',
+        },
         errors: {
             rateLimited: 'Troppi tentativi. Riprova tra {{seconds}} s.',
             invalidCredentials: 'Nome utente, email o password non corretti. Se più account usano questa email, accedi con il nome utente.',

package/dist/cjs/i18n/locales/ja-JP.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Commons でスキャンしてサインイン',
             renew: '新しいコードを表示',
         },
+        device: {
+            codeHint: 'スマートフォンに同じコードが表示されていることを確認してください',
+        },
         errors: {
             rateLimited: '試行回数が多すぎます。{{seconds}} 秒後にもう一度お試しください。',
             invalidCredentials: 'ユーザー名、メールアドレス、またはパスワードが正しくありません。 複数のアカウントがこのメールアドレスを使っている場合は、ユーザー名でサインインしてください。',

package/dist/cjs/i18n/locales/ko-KR.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Commons로 스캔하여 로그인',
             renew: '새 코드 표시',
         },
+        device: {
+            codeHint: '휴대폰에 이 코드가 표시되는지 확인하세요',
+        },
         errors: {
             rateLimited: '시도 횟수가 너무 많습니다. {{seconds}}초 후에 다시 시도하세요.',
             invalidCredentials: '사용자 이름, 이메일 또는 비밀번호가 올바르지 않습니다. 여러 계정이 이 이메일을 사용하면 사용자 이름으로 로그인하세요.',

package/dist/cjs/i18n/locales/pt-PT.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Lê com o Commons para entrar',
             renew: 'Mostrar um código novo',
         },
+        device: {
+            codeHint: 'Confirme que o telemóvel mostra este código',
+        },
         errors: {
             rateLimited: 'Demasiadas tentativas. Tenta novamente dentro de {{seconds}} s.',
             invalidCredentials: 'O nome de utilizador, o email ou a palavra-passe não estão certos. Se várias contas usam este email, entra com o nome de utilizador.',

package/dist/cjs/i18n/locales/ru-RU.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Отсканируйте в Commons, чтобы войти',
             renew: 'Показать новый код',
         },
+        device: {
+            codeHint: 'Убедитесь, что на телефоне тот же код',
+        },
         errors: {
             rateLimited: 'Слишком много попыток. Повторите через {{seconds}} с.',
             invalidCredentials: 'Неверное имя пользователя, адрес почты или пароль. Если с этим адресом связано несколько аккаунтов, войдите по имени пользователя.',

package/dist/cjs/i18n/locales/tr-TR.js

@@ -20,6 +20,9 @@ const dict = {
             caption: 'Giriş yapmak için Commons ile tarayın',
             renew: 'Yeni kod göster',
         },
+        device: {
+            codeHint: 'Telefonunda bu kodun göründüğünü kontrol et',
+        },
         errors: {
             rateLimited: 'Çok fazla deneme yapıldı. {{seconds}} sn sonra tekrar deneyin.',
             invalidCredentials: 'Kullanıcı adı, e-posta veya şifre yanlış. Bu e-postayı birden fazla hesap kullanıyorsa kullanıcı adıyla giriş yapın.',

package/dist/cjs/i18n/locales/zh-CN.js

@@ -20,6 +20,9 @@ const dict = {
             caption: '使用 Commons 扫码登录',
             renew: '显示新的二维码',
         },
+        device: {
+            codeHint: '请确认手机上显示的是这个代码',
+        },
         errors: {
             rateLimited: '尝试次数过多。请在 {{seconds}} 秒后重试。',
             invalidCredentials: '用户名、邮箱或密码不正确。 如果多个账号使用此邮箱，请用用户名登录。',

package/dist/cjs/session/accountDialogController.js

@@ -108,6 +108,7 @@ const IDLE_SIGN_IN_FACTS = {
     phase: 'idle',
     authorizeCode: null,
     qrPayload: null,
+    approvalUrl: null,
     expiresAt: null,
     error: null,
     failure: null,
@@ -753,6 +754,7 @@ class AccountDialogController {
             phase: 'waiting',
             authorizeCode: handle.authorizeCode,
             qrPayload: handle.qrPayload,
+            approvalUrl: handle.approvalUrl,
             expiresAt: handle.expiresAt,
             // No route yet: the surface shows "Preparing request" until the primary
             // route is resolved below. It is never guessed in the meantime.
@@ -1249,11 +1251,12 @@ class AccountDialogController {
     }
     /** Update a subset of the device-flow facts, re-deriving `progress`. */
     patchSignIn(patch) {
-        const { phase, authorizeCode, qrPayload, expiresAt, error, failure, route, routeFailed, pushSentAt, openedAt, } = this.signIn;
+        const { phase, authorizeCode, qrPayload, approvalUrl, expiresAt, error, failure, route, routeFailed, pushSentAt, openedAt, } = this.signIn;
         this.setSignIn({
             phase,
             authorizeCode,
             qrPayload,
+            approvalUrl,
             expiresAt,
             error,
             failure,

package/dist/esm/api/auth.js

@@ -475,6 +475,7 @@ export class AuthCommonsApi {
             sessionToken,
             authorizeCode: res.authorizeCode,
             qrPayload: res.qrPayload,
+            approvalUrl: res.approvalUrl,
             expiresAt: res.expiresAt ?? expiresAt,
             status: res.status,
         };

package/dist/esm/i18n/locales/ar-SA.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'امسح باستخدام Commons لتسجيل الدخول',
             renew: 'عرض رمز جديد',
         },
+        device: {
+            codeHint: 'تأكد من أن هاتفك يعرض هذا الرمز',
+        },
         errors: {
             rateLimited: 'محاولات كثيرة جدًا. حاول مرة أخرى بعد {{seconds}} ث.',
             invalidCredentials: 'اسم المستخدم أو البريد الإلكتروني أو كلمة المرور غير صحيح. إذا كانت عدة حسابات تستخدم هذا البريد الإلكتروني، فسجّل الدخول باسم المستخدم.',

package/dist/esm/i18n/locales/bn-BD.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'সাইন ইন করতে Commons দিয়ে স্ক্যান করুন',
             renew: 'নতুন কোড দেখান',
         },
+        device: {
+            codeHint: 'দেখে নিন আপনার ফোনে এই কোডটিই দেখাচ্ছে',
+        },
         errors: {
             rateLimited: 'অনেকবার চেষ্টা করা হয়েছে। {{seconds}} সেকেন্ড পরে আবার চেষ্টা করুন।',
             invalidCredentials: 'ইউজারনেম, ইমেইল বা পাসওয়ার্ড সঠিক নয়। এই ইমেইলে একাধিক অ্যাকাউন্ট থাকলে ইউজারনেম দিয়ে সাইন ইন করুন।',

package/dist/esm/i18n/locales/ca-ES.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Escaneja amb Commons per entrar',
             renew: 'Mostra un codi nou',
         },
+        device: {
+            codeHint: 'Comprova que el mòbil mostra aquest codi',
+        },
         errors: {
             rateLimited: 'Massa intents. Torna-ho a provar d’aquí a {{seconds}} s.',
             invalidCredentials: "El nom d'usuari, el correu o la contrasenya no són correctes. Si diversos comptes fan servir aquest correu, entra amb el nom d'usuari.",

package/dist/esm/i18n/locales/de-DE.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Mit Commons scannen, um dich anzumelden',
             renew: 'Neuen Code anzeigen',
         },
+        device: {
+            codeHint: 'Prüfe, ob dein Smartphone diesen Code anzeigt',
+        },
         errors: {
             rateLimited: 'Zu viele Versuche. Versuche es in {{seconds}} s erneut.',
             invalidCredentials: 'Benutzername, E-Mail oder Passwort stimmen nicht. Wenn mehrere Konten diese E-Mail-Adresse nutzen, melde dich mit dem Benutzernamen an.',

package/dist/esm/i18n/locales/en-US.js

@@ -169,6 +169,9 @@ const dict = {
             caption: 'Scan with Commons to sign in',
             renew: 'Show a new code',
         },
+        device: {
+            codeHint: 'Check that your phone shows this code',
+        },
         terms: {
             before: 'By continuing, you agree to our',
             termsLink: 'Terms of Service',

package/dist/esm/i18n/locales/es-ES.js

@@ -169,6 +169,9 @@ const dict = {
             caption: 'Escanea con Commons para entrar',
             renew: 'Mostrar un código nuevo',
         },
+        device: {
+            codeHint: 'Comprueba que tu móvil muestra este código',
+        },
         terms: {
             before: 'Al continuar, aceptas nuestros',
             termsLink: 'Términos del servicio',

package/dist/esm/i18n/locales/fr-FR.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Scannez avec Commons pour vous connecter',
             renew: 'Afficher un nouveau code',
         },
+        device: {
+            codeHint: 'Vérifiez que votre téléphone affiche ce code',
+        },
         errors: {
             rateLimited: 'Trop de tentatives. Réessayez dans {{seconds}} s.',
             invalidCredentials: "Le nom d'utilisateur, l'e-mail ou le mot de passe est incorrect. Si plusieurs comptes utilisent cet e-mail, connectez-vous avec le nom d'utilisateur.",

package/dist/esm/i18n/locales/hi-IN.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'साइन इन करने के लिए Commons से स्कैन करें',
             renew: 'नया कोड दिखाएं',
         },
+        device: {
+            codeHint: 'जाँचें कि आपके फ़ोन पर यही कोड दिख रहा है',
+        },
         errors: {
             rateLimited: 'बहुत ज़्यादा कोशिशें हो गईं। {{seconds}} सेकंड बाद फिर कोशिश करें।',
             invalidCredentials: 'यूज़रनेम, ईमेल या पासवर्ड सही नहीं है। अगर इस ईमेल से कई अकाउंट जुड़े हैं, तो यूज़रनेम से साइन इन करें।',

package/dist/esm/i18n/locales/id-ID.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Pindai dengan Commons untuk masuk',
             renew: 'Tampilkan kode baru',
         },
+        device: {
+            codeHint: 'Pastikan ponsel Anda menampilkan kode ini',
+        },
         errors: {
             rateLimited: 'Terlalu banyak percobaan. Coba lagi dalam {{seconds}} dtk.',
             invalidCredentials: 'Nama pengguna, email, atau sandi tidak benar. Jika beberapa akun menggunakan email ini, masuklah dengan nama pengguna.',

package/dist/esm/i18n/locales/it-IT.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Scansiona con Commons per accedere',
             renew: 'Mostra un nuovo codice',
         },
+        device: {
+            codeHint: 'Controlla che il telefono mostri questo codice',
+        },
         errors: {
             rateLimited: 'Troppi tentativi. Riprova tra {{seconds}} s.',
             invalidCredentials: 'Nome utente, email o password non corretti. Se più account usano questa email, accedi con il nome utente.',

package/dist/esm/i18n/locales/ja-JP.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Commons でスキャンしてサインイン',
             renew: '新しいコードを表示',
         },
+        device: {
+            codeHint: 'スマートフォンに同じコードが表示されていることを確認してください',
+        },
         errors: {
             rateLimited: '試行回数が多すぎます。{{seconds}} 秒後にもう一度お試しください。',
             invalidCredentials: 'ユーザー名、メールアドレス、またはパスワードが正しくありません。 複数のアカウントがこのメールアドレスを使っている場合は、ユーザー名でサインインしてください。',

package/dist/esm/i18n/locales/ko-KR.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Commons로 스캔하여 로그인',
             renew: '새 코드 표시',
         },
+        device: {
+            codeHint: '휴대폰에 이 코드가 표시되는지 확인하세요',
+        },
         errors: {
             rateLimited: '시도 횟수가 너무 많습니다. {{seconds}}초 후에 다시 시도하세요.',
             invalidCredentials: '사용자 이름, 이메일 또는 비밀번호가 올바르지 않습니다. 여러 계정이 이 이메일을 사용하면 사용자 이름으로 로그인하세요.',

package/dist/esm/i18n/locales/pt-PT.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Lê com o Commons para entrar',
             renew: 'Mostrar um código novo',
         },
+        device: {
+            codeHint: 'Confirme que o telemóvel mostra este código',
+        },
         errors: {
             rateLimited: 'Demasiadas tentativas. Tenta novamente dentro de {{seconds}} s.',
             invalidCredentials: 'O nome de utilizador, o email ou a palavra-passe não estão certos. Se várias contas usam este email, entra com o nome de utilizador.',

package/dist/esm/i18n/locales/ru-RU.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Отсканируйте в Commons, чтобы войти',
             renew: 'Показать новый код',
         },
+        device: {
+            codeHint: 'Убедитесь, что на телефоне тот же код',
+        },
         errors: {
             rateLimited: 'Слишком много попыток. Повторите через {{seconds}} с.',
             invalidCredentials: 'Неверное имя пользователя, адрес почты или пароль. Если с этим адресом связано несколько аккаунтов, войдите по имени пользователя.',

package/dist/esm/i18n/locales/tr-TR.js

@@ -18,6 +18,9 @@ const dict = {
             caption: 'Giriş yapmak için Commons ile tarayın',
             renew: 'Yeni kod göster',
         },
+        device: {
+            codeHint: 'Telefonunda bu kodun göründüğünü kontrol et',
+        },
         errors: {
             rateLimited: 'Çok fazla deneme yapıldı. {{seconds}} sn sonra tekrar deneyin.',
             invalidCredentials: 'Kullanıcı adı, e-posta veya şifre yanlış. Bu e-postayı birden fazla hesap kullanıyorsa kullanıcı adıyla giriş yapın.',

package/dist/esm/i18n/locales/zh-CN.js

@@ -18,6 +18,9 @@ const dict = {
             caption: '使用 Commons 扫码登录',
             renew: '显示新的二维码',
         },
+        device: {
+            codeHint: '请确认手机上显示的是这个代码',
+        },
         errors: {
             rateLimited: '尝试次数过多。请在 {{seconds}} 秒后重试。',
             invalidCredentials: '用户名、邮箱或密码不正确。 如果多个账号使用此邮箱，请用用户名登录。',

package/dist/esm/session/accountDialogController.js

@@ -103,6 +103,7 @@ const IDLE_SIGN_IN_FACTS = {
     phase: 'idle',
     authorizeCode: null,
     qrPayload: null,
+    approvalUrl: null,
     expiresAt: null,
     error: null,
     failure: null,
@@ -748,6 +749,7 @@ export class AccountDialogController {
             phase: 'waiting',
             authorizeCode: handle.authorizeCode,
             qrPayload: handle.qrPayload,
+            approvalUrl: handle.approvalUrl,
             expiresAt: handle.expiresAt,
             // No route yet: the surface shows "Preparing request" until the primary
             // route is resolved below. It is never guessed in the meantime.
@@ -1244,11 +1246,12 @@ export class AccountDialogController {
     }
     /** Update a subset of the device-flow facts, re-deriving `progress`. */
     patchSignIn(patch) {
-        const { phase, authorizeCode, qrPayload, expiresAt, error, failure, route, routeFailed, pushSentAt, openedAt, } = this.signIn;
+        const { phase, authorizeCode, qrPayload, approvalUrl, expiresAt, error, failure, route, routeFailed, pushSentAt, openedAt, } = this.signIn;
         this.setSignIn({
             phase,
             authorizeCode,
             qrPayload,
+            approvalUrl,
             expiresAt,
             error,
             failure,

package/dist/types/api/auth.d.ts

@@ -148,6 +148,12 @@ export interface CommonsSignInHandle {
     authorizeCode: string;
     /** Ready-to-render deep-link / universal-link string (`oxycommons://approve?...`). */
     qrPayload: string;
+    /**
+     * The same request as the IdP's https approval page
+     * (`https://auth.oxy.so/device?user_code=…`): what a device with no keyboard
+     * shows as its QR, since any phone camera opens it, with or without Commons.
+     */
+    approvalUrl: string;
     /** Server-authoritative expiry (epoch milliseconds). */
     expiresAt: number;
     /** Session lifecycle status as reported by the server (e.g. `'pending'`). */

package/dist/types/i18n/locales/ar-SA.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/bn-BD.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/ca-ES.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/de-DE.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/en-US.d.ts

@@ -169,6 +169,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         terms: {
             before: string;
             termsLink: string;

package/dist/types/i18n/locales/es-ES.d.ts

@@ -169,6 +169,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         terms: {
             before: string;
             termsLink: string;

package/dist/types/i18n/locales/fr-FR.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/hi-IN.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/id-ID.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/it-IT.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/ja-JP.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/ko-KR.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/pt-PT.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/ru-RU.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/tr-TR.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/i18n/locales/zh-CN.d.ts

@@ -18,6 +18,9 @@ declare const dict: {
             caption: string;
             renew: string;
         };
+        device: {
+            codeHint: string;
+        };
         errors: {
             rateLimited: string;
             invalidCredentials: string;

package/dist/types/session/accountDialogController.d.ts

@@ -137,6 +137,11 @@ export interface SignInFlowState {
      * as a QR (cross-device) and open as a deep link (same-device), or `null`.
      */
     qrPayload: string | null;
+    /**
+     * The request's https approval page (`https://auth.oxy.so/device?user_code=…`),
+     * or `null`: the QR a device with no keyboard shows, for any phone camera.
+     */
+    approvalUrl: string | null;
     /** Server-authoritative expiry (epoch ms), or `null`. */
     expiresAt: number | null;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/core",
-  "version": "7.7.0",
+  "version": "7.8.1",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/src/api/auth.ts

@@ -218,6 +218,12 @@ export interface CommonsSignInHandle {
   authorizeCode: string;
   /** Ready-to-render deep-link / universal-link string (`oxycommons://approve?...`). */
   qrPayload: string;
+  /**
+   * The same request as the IdP's https approval page
+   * (`https://auth.oxy.so/device?user_code=…`): what a device with no keyboard
+   * shows as its QR, since any phone camera opens it, with or without Commons.
+   */
+  approvalUrl: string;
   /** Server-authoritative expiry (epoch milliseconds). */
   expiresAt: number;
   /** Session lifecycle status as reported by the server (e.g. `'pending'`). */
@@ -453,6 +459,7 @@ export interface CommonsOAuthFinalizeResult {
 interface CommonsSessionCreateResponse {
   authorizeCode: string;
   qrPayload: string;
+  approvalUrl: string;
   status: string;
   /** Optional server-authoritative expiry; falls back to the client-proposed value. */
   expiresAt?: number;
@@ -999,6 +1006,7 @@ export class AuthCommonsApi {
       sessionToken,
       authorizeCode: res.authorizeCode,
       qrPayload: res.qrPayload,
+      approvalUrl: res.approvalUrl,
       expiresAt: res.expiresAt ?? expiresAt,
       status: res.status,
     };

package/src/i18n/locales/ar-SA.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'امسح باستخدام Commons لتسجيل الدخول',
       renew: 'عرض رمز جديد',
     },
+    device: {
+      codeHint: 'تأكد من أن هاتفك يعرض هذا الرمز',
+    },
     errors: {
       rateLimited: 'محاولات كثيرة جدًا. حاول مرة أخرى بعد {{seconds}} ث.',
       invalidCredentials:

package/src/i18n/locales/bn-BD.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'সাইন ইন করতে Commons দিয়ে স্ক্যান করুন',
       renew: 'নতুন কোড দেখান',
     },
+    device: {
+      codeHint: 'দেখে নিন আপনার ফোনে এই কোডটিই দেখাচ্ছে',
+    },
     errors: {
       rateLimited: 'অনেকবার চেষ্টা করা হয়েছে। {{seconds}} সেকেন্ড পরে আবার চেষ্টা করুন।',
       invalidCredentials:

package/src/i18n/locales/ca-ES.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Escaneja amb Commons per entrar',
       renew: 'Mostra un codi nou',
     },
+    device: {
+      codeHint: 'Comprova que el mòbil mostra aquest codi',
+    },
     errors: {
       rateLimited: 'Massa intents. Torna-ho a provar d’aquí a {{seconds}} s.',
       invalidCredentials:

package/src/i18n/locales/de-DE.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Mit Commons scannen, um dich anzumelden',
       renew: 'Neuen Code anzeigen',
     },
+    device: {
+      codeHint: 'Prüfe, ob dein Smartphone diesen Code anzeigt',
+    },
     errors: {
       rateLimited: 'Zu viele Versuche. Versuche es in {{seconds}} s erneut.',
       invalidCredentials:

package/src/i18n/locales/en-US.ts

@@ -190,6 +190,9 @@ const dict = {
       caption: 'Scan with Commons to sign in',
       renew: 'Show a new code',
     },
+    device: {
+      codeHint: 'Check that your phone shows this code',
+    },
     terms: {
       before: 'By continuing, you agree to our',
       termsLink: 'Terms of Service',

package/src/i18n/locales/es-ES.ts

@@ -191,6 +191,9 @@ const dict = {
       caption: 'Escanea con Commons para entrar',
       renew: 'Mostrar un código nuevo',
     },
+    device: {
+      codeHint: 'Comprueba que tu móvil muestra este código',
+    },
     terms: {
       before: 'Al continuar, aceptas nuestros',
       termsLink: 'Términos del servicio',

package/src/i18n/locales/fr-FR.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Scannez avec Commons pour vous connecter',
       renew: 'Afficher un nouveau code',
     },
+    device: {
+      codeHint: 'Vérifiez que votre téléphone affiche ce code',
+    },
     errors: {
       rateLimited: 'Trop de tentatives. Réessayez dans {{seconds}} s.',
       invalidCredentials:

package/src/i18n/locales/hi-IN.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'साइन इन करने के लिए Commons से स्कैन करें',
       renew: 'नया कोड दिखाएं',
     },
+    device: {
+      codeHint: 'जाँचें कि आपके फ़ोन पर यही कोड दिख रहा है',
+    },
     errors: {
       rateLimited: 'बहुत ज़्यादा कोशिशें हो गईं। {{seconds}} सेकंड बाद फिर कोशिश करें।',
       invalidCredentials:

package/src/i18n/locales/id-ID.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Pindai dengan Commons untuk masuk',
       renew: 'Tampilkan kode baru',
     },
+    device: {
+      codeHint: 'Pastikan ponsel Anda menampilkan kode ini',
+    },
     errors: {
       rateLimited: 'Terlalu banyak percobaan. Coba lagi dalam {{seconds}} dtk.',
       invalidCredentials:

package/src/i18n/locales/it-IT.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Scansiona con Commons per accedere',
       renew: 'Mostra un nuovo codice',
     },
+    device: {
+      codeHint: 'Controlla che il telefono mostri questo codice',
+    },
     errors: {
       rateLimited: 'Troppi tentativi. Riprova tra {{seconds}} s.',
       invalidCredentials:

package/src/i18n/locales/ja-JP.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Commons でスキャンしてサインイン',
       renew: '新しいコードを表示',
     },
+    device: {
+      codeHint: 'スマートフォンに同じコードが表示されていることを確認してください',
+    },
     errors: {
       rateLimited: '試行回数が多すぎます。{{seconds}} 秒後にもう一度お試しください。',
       invalidCredentials:

package/src/i18n/locales/ko-KR.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Commons로 스캔하여 로그인',
       renew: '새 코드 표시',
     },
+    device: {
+      codeHint: '휴대폰에 이 코드가 표시되는지 확인하세요',
+    },
     errors: {
       rateLimited: '시도 횟수가 너무 많습니다. {{seconds}}초 후에 다시 시도하세요.',
       invalidCredentials:

package/src/i18n/locales/pt-PT.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Lê com o Commons para entrar',
       renew: 'Mostrar um código novo',
     },
+    device: {
+      codeHint: 'Confirme que o telemóvel mostra este código',
+    },
     errors: {
       rateLimited: 'Demasiadas tentativas. Tenta novamente dentro de {{seconds}} s.',
       invalidCredentials:

package/src/i18n/locales/ru-RU.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Отсканируйте в Commons, чтобы войти',
       renew: 'Показать новый код',
     },
+    device: {
+      codeHint: 'Убедитесь, что на телефоне тот же код',
+    },
     errors: {
       rateLimited: 'Слишком много попыток. Повторите через {{seconds}} с.',
       invalidCredentials:

package/src/i18n/locales/tr-TR.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: 'Giriş yapmak için Commons ile tarayın',
       renew: 'Yeni kod göster',
     },
+    device: {
+      codeHint: 'Telefonunda bu kodun göründüğünü kontrol et',
+    },
     errors: {
       rateLimited: 'Çok fazla deneme yapıldı. {{seconds}} sn sonra tekrar deneyin.',
       invalidCredentials:

package/src/i18n/locales/zh-CN.ts

@@ -18,6 +18,9 @@ const dict = {
       caption: '使用 Commons 扫码登录',
       renew: '显示新的二维码',
     },
+    device: {
+      codeHint: '请确认手机上显示的是这个代码',
+    },
     errors: {
       rateLimited: '尝试次数过多。请在 {{seconds}} 秒后重试。',
       invalidCredentials: '用户名、邮箱或密码不正确。 如果多个账号使用此邮箱，请用用户名登录。',

package/src/session/accountDialogController.ts

@@ -173,6 +173,11 @@ export interface SignInFlowState {
    * as a QR (cross-device) and open as a deep link (same-device), or `null`.
    */
   qrPayload: string | null;
+  /**
+   * The request's https approval page (`https://auth.oxy.so/device?user_code=…`),
+   * or `null`: the QR a device with no keyboard shows, for any phone camera.
+   */
+  approvalUrl: string | null;
   /** Server-authoritative expiry (epoch ms), or `null`. */
   expiresAt: number | null;
   /**
@@ -442,6 +447,7 @@ const IDLE_SIGN_IN_FACTS: SignInFlowFacts = {
   phase: 'idle',
   authorizeCode: null,
   qrPayload: null,
+  approvalUrl: null,
   expiresAt: null,
   error: null,
   failure: null,
@@ -1166,6 +1172,7 @@ export class AccountDialogController {
       phase: 'waiting',
       authorizeCode: handle.authorizeCode,
       qrPayload: handle.qrPayload,
+      approvalUrl: handle.approvalUrl,
       expiresAt: handle.expiresAt,
       // No route yet: the surface shows "Preparing request" until the primary
       // route is resolved below. It is never guessed in the meantime.
@@ -1723,6 +1730,7 @@ export class AccountDialogController {
       phase,
       authorizeCode,
       qrPayload,
+      approvalUrl,
       expiresAt,
       error,
       failure,
@@ -1735,6 +1743,7 @@ export class AccountDialogController {
       phase,
       authorizeCode,
       qrPayload,
+      approvalUrl,
       expiresAt,
       error,
       failure,