@oxy.so/services 10.0.0 → 11.1.0

package/android/src/main/java/so/oxy/security/OxyCallerPolicy.kt

@@ -0,0 +1,97 @@
+package so.oxy.security
+
+import android.content.Context
+import android.content.pm.PackageManager
+import android.os.Binder
+import android.os.Build
+import android.util.Log
+import java.security.MessageDigest
+
+/**
+ * Which app is calling one of this package's ContentProviders, and whether it
+ * is an Oxy app.
+ *
+ * Oxy Android apps do not share a UID, so every cross-app call crosses a real
+ * process and permission boundary. The manifest already demands a
+ * `signature`-level permission (`so.oxy.permission.DEVICE_SESSION`); inside
+ * `call()` this checks again, because a permission is necessary but not
+ * sufficient:
+ *
+ * 1. **The package is an Oxy app** listed in [OXY_PACKAGES]. The caller is taken
+ *    from `Binder.getCallingUid()`, never from anything the caller sends.
+ * 2. **It is signed with this app's certificate**: `hasSigningCertificate`
+ *    (SHA-256, API 28+), `checkSignatures` below that.
+ *
+ * Keep [OXY_PACKAGES] identical to the identity host's list in Commons
+ * (`modules/oxy-identity-host`, `OxyCallerPolicy.kt`); a test compares them.
+ */
+internal object OxyCallerPolicy {
+  private const val TAG = "OxyCallerPolicy"
+
+  val OXY_PACKAGES: Set<String> = setOf(
+    "earth.mention.app",
+    "earth.mention.app.dev",
+    "onl.alia.app",
+    "onl.alia.app.dev",
+    "com.allo.app",
+    "com.allo.app.dev",
+    "com.homiio.android",
+    "com.homiio.android.dev",
+    "so.oxy.crowdsource",
+    "so.oxy.crowdsource.dev",
+    "to.peable.app",
+    "to.peable.app.dev",
+    "so.oxy.atlas",
+    "so.oxy.atlas.dev",
+    "to.goway.app",
+    "to.goway.app.dev",
+    "so.oxy.move",
+    "so.oxy.move.dev",
+    "sh.willo.app",
+    "sh.willo.app.dev",
+    "now.moovo.app",
+    "now.moovo.app.dev",
+    "now.moovo.go",
+    "now.moovo.go.dev",
+    "now.moovo.tracker",
+    "now.moovo.tracker.dev",
+    "now.moovo.hub",
+    "now.moovo.hub.dev",
+    "so.oxy.noted",
+    "so.oxy.noted.dev",
+    "so.oxy.accounts",
+    "so.oxy.accounts.dev",
+    "so.oxy.commons",
+    "so.oxy.commons.dev",
+  )
+
+  /**
+   * The calling package when it is allow-listed and signed like this app, or
+   * null (logged with the package names and the method only, never a value).
+   */
+  fun resolveCaller(context: Context, method: String): String? {
+    val pm = context.packageManager
+    val uid = Binder.getCallingUid()
+    val packages = runCatching { pm.getPackagesForUid(uid) }.getOrNull().orEmpty()
+    val caller = packages.firstOrNull { it in OXY_PACKAGES && signedLikeSelf(context, it) }
+    if (caller == null) {
+      Log.w(TAG, "refused $method for ${packages.joinToString().ifEmpty { "uid $uid" }}")
+    }
+    return caller
+  }
+
+  private fun signedLikeSelf(context: Context, pkg: String): Boolean = runCatching {
+    val pm = context.packageManager
+    if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.P) {
+      val info = pm.getPackageInfo(context.packageName, PackageManager.GET_SIGNING_CERTIFICATES)
+      val signers = info.signingInfo?.apkContentsSigners.orEmpty()
+      signers.isNotEmpty() && signers.any { signer ->
+        val digest = MessageDigest.getInstance("SHA-256").digest(signer.toByteArray())
+        pm.hasSigningCertificate(pkg, digest, PackageManager.CERT_INPUT_SHA256)
+      }
+    } else {
+      @Suppress("DEPRECATION")
+      pm.checkSignatures(pkg, context.packageName) == PackageManager.SIGNATURE_MATCH
+    }
+  }.getOrDefault(false)
+}

package/android/src/main/java/so/oxy/session/OxyBackgroundSessionStore.kt

@@ -22,13 +22,7 @@ import so.oxy.storage.RecoveryPolicy
  * Neither ever rotates the credential — the server does not rotate it either.
  */
 internal object OxyBackgroundSessionStore {
-  /**
-   * Suffix is the hosting app's package name. Oxy apps share the `so.oxy.shared`
-   * Android UID (and therefore one data directory), so a single global prefs name
-   * would let one app that leaves `backgroundSession` off wipe another app's
-   * live credential on launch. Scoping by package keeps each app's widget/sync
-   * store independent.
-   */
+  /** Suffix is the hosting app's package name, so the file says whose credential it holds. */
   private const val PREFS_NAME_PREFIX = "oxy_background_session_"
 
   private fun prefsName(context: Context): String = PREFS_NAME_PREFIX + context.packageName
@@ -61,13 +55,13 @@ internal object OxyBackgroundSessionStore {
 
   /**
    * [RecoveryPolicy.RebuildFileOnly] — this store must NEVER escalate to a
-   * UID-shared master-key reset.
+   * master-key reset.
    *
    * What it holds is disposable: the app re-provisions the credential on its next
    * foreground, so "no credential" is a complete recovery that costs the user
    * nothing (background refreshes render signed out until then). A master-key reset
-   * would wipe every other Oxy store sharing the alias — including the self-custody
-   * identity keypair, which is IRREPLACEABLE. Trading someone else's unrecoverable
+   * would wipe every other encrypted store of this app sharing the alias — in
+   * Commons, including the identity signer store. Trading someone else's unrecoverable
    * data to save data we can simply ask for again is never the right trade, so the
    * escalation is not merely discouraged here, it is unreachable.
    */

package/android/src/main/java/so/oxy/storage/OxyEncryptedPrefs.kt

@@ -18,11 +18,11 @@ import java.security.GeneralSecurityException
  *
  * It used to have a second value, `RegenerateSharedMasterKey`, which deleted the
  * androidx master key (`_androidx_security_master_key_`) when a rebuild failed.
- * That key is ONE Keystore entry for the whole `so.oxy.shared` UID and wraps the
- * keyset of every Oxy prefs file in every Oxy app, so deleting it let one app
- * make every sibling's encrypted prefs unreadable. It was removed for
- * OxyHQ/oxy#1388 and must not come back: no store in any Oxy app deletes a
- * UID-shared key.
+ * That key is ONE Keystore entry for the whole app and wraps the keyset of every
+ * encrypted prefs file in it, so deleting it to heal one file made every other
+ * file unreadable (when Oxy apps still shared a UID, every OTHER app's files
+ * too). It was removed for OxyHQ/oxy#1388 and must not come back: no store
+ * deletes a Keystore entry.
  */
 internal enum class RecoveryPolicy {
   /**
@@ -37,9 +37,9 @@ internal enum class RecoveryPolicy {
  * The ONE way this package opens a hardware-backed [EncryptedSharedPreferences]
  * file.
  *
- * Two stores are built on it — the cross-app identity keypair
- * (`so.oxy.identity.OxyIdentityStore`) and the background session credential
- * (`so.oxy.session.OxyBackgroundSessionStore`) — and both need the same two
+ * The stores built on it — the device session credential
+ * (`so.oxy.devicesession.OxyDeviceSessionStore`) and the background session
+ * credential (`so.oxy.session.OxyBackgroundSessionStore`) — all need the same two
  * non-obvious properties below. They are implemented once here rather than per
  * store: a second copy would be a copy of exactly the reasoning that is easiest
  * to get wrong, and the failure mode of getting it wrong is silent (every read
@@ -67,9 +67,9 @@ internal enum class RecoveryPolicy {
  * ## Keyset self-heal (CRITICAL)
  *
  * The androidx master key that wraps each file's Tink keyset lives under the
- * UID-scoped default alias [MasterKey.DEFAULT_MASTER_KEY_ALIAS] — ONE entry for
- * the whole `so.oxy.shared` UID. When a NEW package joins that shared UID, that
- * master key can be rotated/regenerated, leaving keysets already written on disk
+ * default alias [MasterKey.DEFAULT_MASTER_KEY_ALIAS] — ONE entry for the whole
+ * app. When that master key is regenerated (a Keystore invalidation, a restore
+ * from a device-to-device transfer), keysets already written on disk stay
  * wrapped under the OLD key. `create()` then fails GCM verification
  * (`AEADBadTag` -> `GeneralSecurityException`, or an unreadable keyset ->
  * `IOException`) on EVERY read/write, and `EncryptedSharedPreferences` never
@@ -81,14 +81,13 @@ internal enum class RecoveryPolicy {
  * keysets. If a fresh keyset still cannot be built, the failure propagates and
  * the `runCatching {}` at every call site degrades to "absent".
  *
- * The master key itself is NEVER deleted here. It is shared by the whole UID, so
- * deleting it would make every other Oxy app's prefs file unreadable (and each
- * would then wipe itself on its next open). When the master key is gone — the
- * Keystore of the UID was wiped because some Oxy app's storage was cleared —
- * androidx creates a new one on the next `MasterKey.Builder.build()` and each
+ * The master key itself is NEVER deleted here. It is shared by every file of the
+ * app, so deleting it would make every other one unreadable (and each would then
+ * wipe itself on its next open). When the master key is gone — the app's
+ * Keystore was wiped with its storage — androidx creates a new one on the next `MasterKey.Builder.build()` and each
  * file heals itself through the file-only rebuild above. What was IN those
  * files is lost with the Keystore either way; for the self-custody identity,
- * the keystore-independent device backup brings it back (docs/identity/device-backup.md).
+ * Commons' keystore-independent device backup brings it back (docs/identity/device-backup.md).
  *
  * None of this touches the app's device session, which lives in expo-secure-store
  * under a DISTINCT prefs file ("SecureStore") and DISTINCT keystore aliases
@@ -164,7 +163,7 @@ internal object OxyEncryptedPrefs {
     Log.w(
       TAG,
       "'$prefsName' is still unreadable after a file reset ($recovery). Giving up " +
-        "without touching the UID-shared master key; its owner re-creates it.",
+        "without touching the app-wide master key; its owner re-creates it.",
       cause
     )
     throw cause

package/ios/OxyIdentityModule.swift

@@ -1,33 +1,32 @@
 import ExpoModulesCore
 
 /**
- * iOS no-op implementation of the shared Oxy identity bridge.
+ * iOS stub of the Commons identity bridge.
  *
- * On Apple platforms the cross-app identity share is handled directly by
- * `@oxy.so/core`'s `KeyManager` via the Keychain Access Group
- * (`group.so.oxy.shared`) — there is no ContentProvider equivalent to wrap. So
- * every function here resolves to `nil` / no-op, which makes the JS
- * `loadSharedIdentityBridge()` seam a pass-through on iOS: `KeyManager`'s iOS
- * branches keep using `expo-secure-store` with the keychain group untouched.
+ * On Apple platforms the Oxy identity is shared through the Keychain Access
+ * Group `group.so.oxy.shared`, which `@oxy.so/core`'s `KeyManager` reads
+ * directly; there is no Commons provider to call. Every function resolves `nil`,
+ * so `loadCommonsIdentityBridge()` answers "Commons could not help" and
+ * `KeyManager`'s iOS branches keep using the keychain group.
  */
 public class OxyIdentityModule: Module {
   public func definition() -> ModuleDefinition {
     Name("OxyIdentity")
 
-    AsyncFunction("getShared") { () -> [String: String]? in
+    AsyncFunction("describe") { () -> [String: String]? in
       return nil
     }
 
-    AsyncFunction("putShared") { (_ privateKey: String, _ publicKey: String) in
-      // No-op on iOS: the keychain-access-group path in KeyManager owns writes.
+    AsyncFunction("proveIdentity") { (_ challenge: String) -> [String: String]? in
+      return nil
     }
 
-    AsyncFunction("hasShared") { () -> Bool in
-      return false
+    AsyncFunction("deriveScopedSeed") { (_ info: String) -> String? in
+      return nil
     }
 
-    AsyncFunction("clearShared") { () in
-      // No-op on iOS.
+    AsyncFunction("signSocialReceive") { (_ index: Int, _ digest: String) -> [String: String]? in
+      return nil
     }
   }
 }

package/lib/commonjs/ui/boot/runProviderColdBoot.js

@@ -5,6 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.SESSION_HANDOFF_DEADLINE_MS = exports.COLD_BOOT_OVERALL_DEADLINE_MS = void 0;
 exports.runProviderColdBoot = runProviderColdBoot;
+var _applicationSessionLane = require("../oauth/applicationSessionLane.js");
 var _core = require("@oxy.so/core");
 var _session = require("@oxy.so/core/session");
 var _deviceCredential = require("../utils/deviceCredential.js");
@@ -70,8 +71,8 @@ async function detectOfflineHint() {
  *
  * Ordered pipeline:
  * 1. Complete an OAuth authorization-code return already on the URL (web)
- * 2. `runSessionColdBoot` — device-secret mint (+ native shared-key, or the
- *    primary-identity-key lane in `sessionMode: 'identity'`)
+ * 2. `runSessionColdBoot` — device-secret mint (+ the native Commons-proof lane,
+ *    or the primary-identity-key lane in `sessionMode: 'identity'`)
  *
  * Step 1 is ACCOUNT-MODE ONLY: it commits whichever account the IdP resolves,
  * which for an identity-bound client is somebody else's account by construction.
@@ -100,6 +101,11 @@ async function runProviderColdBoot(opts) {
   const identityBound = sessionMode === 'identity';
   setTokenReady(false);
   try {
+    // Classification precedes every local-secret, shared-credential and identity
+    // probe. Unavailable registry metadata fails closed, including offline boot.
+    const lane = await (opts.resolveSessionLane?.() ?? (0, _applicationSessionLane.resolveApplicationSessionLane)(oxyServices, clientId));
+    await opts.onClassified?.(lane);
+    if (identityBound && lane !== 'device') return;
     // The redirect transport's RETURN leg. An app reaches it whenever the browser
     // BLOCKED the sign-in popup and `startWebOAuthSignIn` fell back to a
     // full-page redirect (`popup-blocked` / `popup-navigation-failed`), so it is
@@ -111,7 +117,8 @@ async function runProviderColdBoot(opts) {
       clientId,
       authRedirectUri,
       commitSession: input => commitSession(input, {
-        activate: true
+        activate: true,
+        oauth: true
       })
     });
     if (oauthCompleted) {
@@ -119,6 +126,11 @@ async function runProviderColdBoot(opts) {
       markAuthResolved();
       return;
     }
+    if (lane === 'oauth') {
+      setTokenReady(true);
+      return;
+    }
+    await opts.beforeDeviceBoot?.();
 
     // Best-effort connectivity probe up front: an EXPLICIT offline verdict skips
     // the two doomed network steps so routing settles immediately instead of
@@ -194,6 +206,7 @@ async function runProviderColdBoot(opts) {
         }
       }
     });
+    await opts.afterDeviceBoot?.();
   } catch (error) {
     if (__DEV__) {
       _core.logger.error('Cold boot error', error instanceof Error ? error : new Error(String(error)), {

package/lib/commonjs/ui/boot/runProviderColdBoot.js.map

@@ -1 +1 @@
-{"version":3,"names":["_core","require","_session","_deviceCredential","_sharedDeviceCredentialStore","_oauthReturn","_isWebBrowser","_netConnectivity","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","SESSION_HANDOFF_DEADLINE_MS","exports","COLD_BOOT_OVERALL_DEADLINE_MS","OFFLINE_PROBE_TIMEOUT_MS","detectOfflineHint","isWebBrowser","online","globalThis","navigator","onLine","NetInfo","Promise","resolve","then","state","race","fetch","setTimeout","isNetConnectivityExplicitlyOffline","runProviderColdBoot","opts","oxyServices","authStore","clientId","authRedirectUri","sessionMode","identity","sessionClient","syncDeviceCredentialToHost","commitSession","markAuthResolved","setTokenReady","identityBound","oauthCompleted","tryCompleteOAuthReturn","input","activate","offline","runSessionColdBoot","oxy","store","platform","isWeb","isNative","sharedDeviceCredential","createPlatformSharedDeviceCredentialStore","undefined","overallDeadlineMs","isOffline","onStepDeadline","stepId","loggerUtil","warn","component","method","onSession","session","handoff","sessionId","accessToken","userId","deviceState","handoffDeadlineId","finally","clearTimeout","onSignedOut","cred","loadPersistedDeviceCredential","start","socketError","__DEV__","debug","onStepError","id","error","Error","String"],"sourceRoot":"../../../../src","sources":["ui/boot/runProviderColdBoot.ts"],"mappings":";;;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAEA,IAAAE,iBAAA,GAAAF,OAAA;AACA,IAAAG,4BAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AACA,IAAAM,gBAAA,GAAAN,OAAA;AAA8E,SAAAO,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAG9E;AACO,MAAMkB,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,IAAI;;AAE/C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAME,6BAA6B,GAAAD,OAAA,CAAAC,6BAAA,GAAG,MAAM;;AAEnD;AACA;AACA;AACA;AACA;AACA,MAAMC,wBAAwB,GAAG,GAAG;;AAEpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,iBAAiBA,CAAA,EAAqB;EACnD,IAAI;IACF,IAAI,IAAAC,0BAAY,EAAC,CAAC,EAAE;MAClB,MAAMC,MAAM,GAAIC,UAAU,CAA0CC,SAAS,EAAEC,MAAM;MACrF;MACA,OAAOH,MAAM,KAAK,KAAK;IACzB;IACA,MAAMI,OAAO,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAAjC,uBAAA,CAAAP,OAAA,CAAa,iCAAiC,GAAC;IAC/D,MAAMyC,KAAK,GAAG,MAAMH,OAAO,CAACI,IAAI,CAAC,CAC/BL,OAAO,CAACnB,OAAO,CAACyB,KAAK,CAAC,CAAC,EACvB,IAAIL,OAAO,CAAQC,OAAO,IAAK;MAC7BK,UAAU,CAAC,MAAML,OAAO,CAAC,IAAI,CAAC,EAAET,wBAAwB,CAAC;IAC3D,CAAC,CAAC,CACH,CAAC;IACF;IACA;IACA,OAAO,IAAAe,mDAAkC,EAACJ,KAAK,CAAC;EAClD,CAAC,CAAC,MAAM;IACN;IACA,OAAO,KAAK;EACd;AACF;AAwBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeK,mBAAmBA,CAACC,IAAgC,EAAiB;EACzF,MAAM;IACJC,WAAW;IACXC,SAAS;IACTC,QAAQ;IACRC,eAAe;IACfC,WAAW,GAAG,SAAS;IACvBC,QAAQ;IACRC,aAAa;IACbC,0BAA0B;IAC1BC,aAAa;IACbC,gBAAgB;IAChBC;EACF,CAAC,GAAGX,IAAI;EAER,MAAMY,aAAa,GAAGP,WAAW,KAAK,UAAU;EAEhDM,aAAa,CAAC,KAAK,CAAC;EAEpB,IAAI;IACF;IACA;IACA;IACA;IACA;IACA;IACA,MAAME,cAAc,GAAGD,aAAa,GAChC,KAAK,GACL,MAAM,IAAAE,mCAAsB,EAAC;MAC3Bb,WAAW;MACXE,QAAQ;MACRC,eAAe;MACfK,aAAa,EAAGM,KAAK,IAAKN,aAAa,CAACM,KAAK,EAAE;QAAEC,QAAQ,EAAE;MAAK,CAAC;IACnE,CAAC,CAAC;IACN,IAAIH,cAAc,EAAE;MAClBF,aAAa,CAAC,IAAI,CAAC;MACnBD,gBAAgB,CAAC,CAAC;MAClB;IACF;;IAEA;IACA;IACA;IACA;IACA,MAAMO,OAAO,GAAG,MAAMjC,iBAAiB,CAAC,CAAC;IAEzC,MAAM,IAAAkC,2BAAkB,EAAC;MACvBC,GAAG,EAAElB,WAAW;MAChBmB,KAAK,EAAElB,SAAS;MAChBmB,QAAQ,EAAE;QAAEC,KAAK,EAAE,IAAArC,0BAAY,EAAC,CAAC;QAAEsC,QAAQ,EAAE,CAAC,IAAAtC,0BAAY,EAAC;MAAE,CAAC;MAC9DoB,WAAW;MACXC,QAAQ;MACR;MACA;MACA;MACA;MACA;MACAkB,sBAAsB,EAAE,IAAAC,sEAAyC,EAAC,CAAC,IAAIC,SAAS;MAChFC,iBAAiB,EAAE7C,6BAA6B;MAChD8C,SAAS,EAAEA,CAAA,KAAMX,OAAO;MACxBY,cAAc,EAAGC,MAAM,IAAK;QAC1BC,YAAU,CAACC,IAAI,CACb,mBAAmBF,MAAM,kBAAkBhD,6BAA6B,8DAA8D,EACtI;UAAEmD,SAAS,EAAE,qBAAqB;UAAEC,MAAM,EAAE;QAAiB,CAC/D,CAAC;MACH,CAAC;MACDC,SAAS,EAAE,MAAOC,OAAO,IAAK;QAC5B;QACA;QACA,MAAM5B,0BAA0B,CAAC,CAAC;QAClC,MAAM6B,OAAO,GAAG5B,aAAa,CAC3B;UACE6B,SAAS,EAAEF,OAAO,CAACE,SAAS;UAC5BC,WAAW,EAAEH,OAAO,CAACG,WAAW;UAChCC,MAAM,EAAEJ,OAAO,CAACI,MAAM;UACtBC,WAAW,EAAEL,OAAO,CAAC1C;QACvB,CAAC,EACD;UAAEsB,QAAQ,EAAE;QAAM,CACpB,CAAC;QACD,IAAI0B,iBAA4D;QAChE,MAAMnD,OAAO,CAACI,IAAI,CAAC,CACjB0C,OAAO,EACP,IAAI9C,OAAO,CAAQC,OAAO,IAAK;UAC7BkD,iBAAiB,GAAG7C,UAAU,CAACL,OAAO,EAAEZ,2BAA2B,CAAC;QACtE,CAAC,CAAC,CACH,CAAC,CAAC+D,OAAO,CAAC,MAAM;UACf,IAAID,iBAAiB,KAAKhB,SAAS,EAAE;YACnCkB,YAAY,CAACF,iBAAiB,CAAC;UACjC;QACF,CAAC,CAAC;QACFhC,gBAAgB,CAAC,CAAC;MACpB,CAAC;MACDmC,WAAW,EAAE,MAAAA,CAAA,KAAY;QACvB,MAAMrC,0BAA0B,CAAC,CAAC;QAClC,MAAMsC,IAAI,GAAG,MAAM,IAAAC,+CAA6B,EAAC7C,SAAS,CAAC;QAC3D,IAAI4C,IAAI,EAAE;UACR,IAAI;YACF,MAAMvC,aAAa,CAACyC,KAAK,CAAC,CAAC;UAC7B,CAAC,CAAC,OAAOC,WAAW,EAAE;YACpB,IAAIC,OAAO,EAAE;cACXnB,YAAU,CAACoB,KAAK,CACd,wCAAwC,EACxC;gBAAElB,SAAS,EAAE;cAAsB,CAAC,EACpCgB,WACF,CAAC;YACH;UACF;QACF;QACAvC,gBAAgB,CAAC,CAAC;MACpB,CAAC;MACD0C,WAAW,EAAEA,CAACC,EAAE,EAAEC,KAAK,KAAK;QAC1B,IAAIJ,OAAO,EAAE;UACXnB,YAAU,CAACoB,KAAK,CACd,mBAAmBE,EAAE,wCAAwC,EAC7D;YAAEpB,SAAS,EAAE;UAAsB,CAAC,EACpCqB,KACF,CAAC;QACH;MACF;IACF,CAAC,CAAC;EACJ,CAAC,CAAC,OAAOA,KAAK,EAAE;IACd,IAAIJ,OAAO,EAAE;MACXnB,YAAU,CAACuB,KAAK,CACd,iBAAiB,EACjBA,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAG,IAAIC,KAAK,CAACC,MAAM,CAACF,KAAK,CAAC,CAAC,EACzD;QAAErB,SAAS,EAAE;MAAsB,CACrC,CAAC;IACH;EACF,CAAC,SAAS;IACRvB,gBAAgB,CAAC,CAAC;EACpB;AACF","ignoreList":[]}
+{"version":3,"names":["_applicationSessionLane","require","_core","_session","_deviceCredential","_sharedDeviceCredentialStore","_oauthReturn","_isWebBrowser","_netConnectivity","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","SESSION_HANDOFF_DEADLINE_MS","exports","COLD_BOOT_OVERALL_DEADLINE_MS","OFFLINE_PROBE_TIMEOUT_MS","detectOfflineHint","isWebBrowser","online","globalThis","navigator","onLine","NetInfo","Promise","resolve","then","state","race","fetch","setTimeout","isNetConnectivityExplicitlyOffline","runProviderColdBoot","opts","oxyServices","authStore","clientId","authRedirectUri","sessionMode","identity","sessionClient","syncDeviceCredentialToHost","commitSession","markAuthResolved","setTokenReady","identityBound","lane","resolveSessionLane","resolveApplicationSessionLane","onClassified","oauthCompleted","tryCompleteOAuthReturn","input","activate","oauth","beforeDeviceBoot","offline","runSessionColdBoot","oxy","store","platform","isWeb","isNative","sharedDeviceCredential","createPlatformSharedDeviceCredentialStore","undefined","overallDeadlineMs","isOffline","onStepDeadline","stepId","loggerUtil","warn","component","method","onSession","session","handoff","sessionId","accessToken","userId","deviceState","handoffDeadlineId","finally","clearTimeout","onSignedOut","cred","loadPersistedDeviceCredential","start","socketError","__DEV__","debug","onStepError","id","error","afterDeviceBoot","Error","String"],"sourceRoot":"../../../../src","sources":["ui/boot/runProviderColdBoot.ts"],"mappings":";;;;;;;AAAA,IAAAA,uBAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAEA,IAAAG,iBAAA,GAAAH,OAAA;AACA,IAAAI,4BAAA,GAAAJ,OAAA;AACA,IAAAK,YAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,gBAAA,GAAAP,OAAA;AAA8E,SAAAQ,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AAG9E;AACO,MAAMkB,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,IAAI;;AAE/C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAME,6BAA6B,GAAAD,OAAA,CAAAC,6BAAA,GAAG,MAAM;;AAEnD;AACA;AACA;AACA;AACA;AACA,MAAMC,wBAAwB,GAAG,GAAG;;AAEpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,iBAAiBA,CAAA,EAAqB;EACnD,IAAI;IACF,IAAI,IAAAC,0BAAY,EAAC,CAAC,EAAE;MAClB,MAAMC,MAAM,GAAIC,UAAU,CAA0CC,SAAS,EAAEC,MAAM;MACrF;MACA,OAAOH,MAAM,KAAK,KAAK;IACzB;IACA,MAAMI,OAAO,GAAG,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAAjC,uBAAA,CAAAR,OAAA,CAAa,iCAAiC,GAAC;IAC/D,MAAM0C,KAAK,GAAG,MAAMH,OAAO,CAACI,IAAI,CAAC,CAC/BL,OAAO,CAACnB,OAAO,CAACyB,KAAK,CAAC,CAAC,EACvB,IAAIL,OAAO,CAAQC,OAAO,IAAK;MAC7BK,UAAU,CAAC,MAAML,OAAO,CAAC,IAAI,CAAC,EAAET,wBAAwB,CAAC;IAC3D,CAAC,CAAC,CACH,CAAC;IACF;IACA;IACA,OAAO,IAAAe,mDAAkC,EAACJ,KAAK,CAAC;EAClD,CAAC,CAAC,MAAM;IACN;IACA,OAAO,KAAK;EACd;AACF;AA8BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeK,mBAAmBA,CAACC,IAAgC,EAAiB;EACzF,MAAM;IACJC,WAAW;IACXC,SAAS;IACTC,QAAQ;IACRC,eAAe;IACfC,WAAW,GAAG,SAAS;IACvBC,QAAQ;IACRC,aAAa;IACbC,0BAA0B;IAC1BC,aAAa;IACbC,gBAAgB;IAChBC;EACF,CAAC,GAAGX,IAAI;EAER,MAAMY,aAAa,GAAGP,WAAW,KAAK,UAAU;EAEhDM,aAAa,CAAC,KAAK,CAAC;EAEpB,IAAI;IACF;IACA;IACA,MAAME,IAAI,GAAG,OAAOb,IAAI,CAACc,kBAAkB,GAAG,CAAC,IAAI,IAAAC,qDAA6B,EAACd,WAAW,EAAEE,QAAQ,CAAC,CAAC;IACxG,MAAMH,IAAI,CAACgB,YAAY,GAAGH,IAAI,CAAC;IAC/B,IAAID,aAAa,IAAIC,IAAI,KAAK,QAAQ,EAAE;IACxC;IACA;IACA;IACA;IACA;IACA;IACA,MAAMI,cAAc,GAAGL,aAAa,GAChC,KAAK,GACL,MAAM,IAAAM,mCAAsB,EAAC;MAC3BjB,WAAW;MACXE,QAAQ;MACRC,eAAe;MACfK,aAAa,EAAGU,KAAK,IAAKV,aAAa,CAACU,KAAK,EAAE;QAAEC,QAAQ,EAAE,IAAI;QAAEC,KAAK,EAAE;MAAK,CAAC;IAChF,CAAC,CAAC;IACN,IAAIJ,cAAc,EAAE;MAClBN,aAAa,CAAC,IAAI,CAAC;MACnBD,gBAAgB,CAAC,CAAC;MAClB;IACF;IAEA,IAAIG,IAAI,KAAK,OAAO,EAAE;MACpBF,aAAa,CAAC,IAAI,CAAC;MACnB;IACF;IAEA,MAAMX,IAAI,CAACsB,gBAAgB,GAAG,CAAC;;IAE/B;IACA;IACA;IACA;IACA,MAAMC,OAAO,GAAG,MAAMvC,iBAAiB,CAAC,CAAC;IAEzC,MAAM,IAAAwC,2BAAkB,EAAC;MACvBC,GAAG,EAAExB,WAAW;MAChByB,KAAK,EAAExB,SAAS;MAChByB,QAAQ,EAAE;QAAEC,KAAK,EAAE,IAAA3C,0BAAY,EAAC,CAAC;QAAE4C,QAAQ,EAAE,CAAC,IAAA5C,0BAAY,EAAC;MAAE,CAAC;MAC9DoB,WAAW;MACXC,QAAQ;MACR;MACA;MACA;MACA;MACA;MACAwB,sBAAsB,EAAE,IAAAC,sEAAyC,EAAC,CAAC,IAAIC,SAAS;MAChFC,iBAAiB,EAAEnD,6BAA6B;MAChDoD,SAAS,EAAEA,CAAA,KAAMX,OAAO;MACxBY,cAAc,EAAGC,MAAM,IAAK;QAC1BC,YAAU,CAACC,IAAI,CACb,mBAAmBF,MAAM,kBAAkBtD,6BAA6B,8DAA8D,EACtI;UAAEyD,SAAS,EAAE,qBAAqB;UAAEC,MAAM,EAAE;QAAiB,CAC/D,CAAC;MACH,CAAC;MACDC,SAAS,EAAE,MAAOC,OAAO,IAAK;QAC5B;QACA;QACA,MAAMlC,0BAA0B,CAAC,CAAC;QAClC,MAAMmC,OAAO,GAAGlC,aAAa,CAC3B;UACEmC,SAAS,EAAEF,OAAO,CAACE,SAAS;UAC5BC,WAAW,EAAEH,OAAO,CAACG,WAAW;UAChCC,MAAM,EAAEJ,OAAO,CAACI,MAAM;UACtBC,WAAW,EAAEL,OAAO,CAAChD;QACvB,CAAC,EACD;UAAE0B,QAAQ,EAAE;QAAM,CACpB,CAAC;QACD,IAAI4B,iBAA4D;QAChE,MAAMzD,OAAO,CAACI,IAAI,CAAC,CACjBgD,OAAO,EACP,IAAIpD,OAAO,CAAQC,OAAO,IAAK;UAC7BwD,iBAAiB,GAAGnD,UAAU,CAACL,OAAO,EAAEZ,2BAA2B,CAAC;QACtE,CAAC,CAAC,CACH,CAAC,CAACqE,OAAO,CAAC,MAAM;UACf,IAAID,iBAAiB,KAAKhB,SAAS,EAAE;YACnCkB,YAAY,CAACF,iBAAiB,CAAC;UACjC;QACF,CAAC,CAAC;QACFtC,gBAAgB,CAAC,CAAC;MACpB,CAAC;MACDyC,WAAW,EAAE,MAAAA,CAAA,KAAY;QACvB,MAAM3C,0BAA0B,CAAC,CAAC;QAClC,MAAM4C,IAAI,GAAG,MAAM,IAAAC,+CAA6B,EAACnD,SAAS,CAAC;QAC3D,IAAIkD,IAAI,EAAE;UACR,IAAI;YACF,MAAM7C,aAAa,CAAC+C,KAAK,CAAC,CAAC;UAC7B,CAAC,CAAC,OAAOC,WAAW,EAAE;YACpB,IAAIC,OAAO,EAAE;cACXnB,YAAU,CAACoB,KAAK,CACd,wCAAwC,EACxC;gBAAElB,SAAS,EAAE;cAAsB,CAAC,EACpCgB,WACF,CAAC;YACH;UACF;QACF;QACA7C,gBAAgB,CAAC,CAAC;MACpB,CAAC;MACDgD,WAAW,EAAEA,CAACC,EAAE,EAAEC,KAAK,KAAK;QAC1B,IAAIJ,OAAO,EAAE;UACXnB,YAAU,CAACoB,KAAK,CACd,mBAAmBE,EAAE,wCAAwC,EAC7D;YAAEpB,SAAS,EAAE;UAAsB,CAAC,EACpCqB,KACF,CAAC;QACH;MACF;IACF,CAAC,CAAC;IACF,MAAM5D,IAAI,CAAC6D,eAAe,GAAG,CAAC;EAChC,CAAC,CAAC,OAAOD,KAAK,EAAE;IACd,IAAIJ,OAAO,EAAE;MACXnB,YAAU,CAACuB,KAAK,CACd,iBAAiB,EACjBA,KAAK,YAAYE,KAAK,GAAGF,KAAK,GAAG,IAAIE,KAAK,CAACC,MAAM,CAACH,KAAK,CAAC,CAAC,EACzD;QAAErB,SAAS,EAAE;MAAsB,CACrC,CAAC;IACH;EACF,CAAC,SAAS;IACR7B,gBAAgB,CAAC,CAAC;EACpB;AACF","ignoreList":[]}

package/lib/commonjs/ui/components/OxySignInButton.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.default = exports.OxySignInButton = void 0;
+var _applicationSessionLane = require("../oauth/applicationSessionLane.js");
 var _react = require("react");
 var _reactNative = require("react-native");
 var _core = require("@oxy.so/core");
@@ -69,7 +70,8 @@ const OxySignInButton = ({
   disabled = false,
   showWhenAuthenticated = false,
   oauthRedirectUri,
-  onOAuthResult
+  onOAuthResult,
+  nativeOAuthCompletion
 }) => {
   const {
     t
@@ -79,7 +81,8 @@ const OxySignInButton = ({
     oxyServices,
     clientId,
     webAuthMode,
-    startWebOAuthSignIn
+    startWebOAuthSignIn,
+    startNativeOAuthSignIn
   } = (0, _OxyContext.useOxy)();
   const {
     isAuthenticated,
@@ -115,7 +118,9 @@ const OxySignInButton = ({
     if (cached && cached.clientId === clientId && cached.oxyServices === oxyServices) {
       return cached.promise;
     }
-    const promise = oxyServices.apps.getPublic(clientId).catch(error => {
+    const promise = oxyServices.apps.getPublic(clientId, {
+      cache: false
+    }).catch(error => {
       // Only clear if this is still the live entry (a later resolve may have
       // replaced it after a clientId/oxyServices change).
       if (appResolutionRef.current?.promise === promise) {
@@ -196,6 +201,18 @@ const OxySignInButton = ({
       }
       return;
     }
+    if (nativeOAuthCompletion === 'sdk') {
+      if (onOAuthResult) {
+        notifyNotConfigured(app.name);
+        return;
+      }
+      const result = await startNativeOAuthSignIn({
+        redirectUri: oauthRedirectUri
+      });
+      if (result.status === 'failed') notifyFailed();
+      if (result.status === 'unsupported') notifyNotConfigured(app.name);
+      return;
+    }
 
     // Native: open the in-app auth session, then hand the handshake to the
     // RP so it can complete the token exchange from its deep-link callback.
@@ -222,7 +239,7 @@ const OxySignInButton = ({
       application: app.name
     });
     notifyNotConfigured(app.name);
-  }, [clientId, oauthRedirectUri, onOAuthResult, startOfficialSignIn, startWebOAuthSignIn, shouldPreOpenPopup, notifyNotConfigured, notifyFailed]);
+  }, [clientId, oauthRedirectUri, onOAuthResult, nativeOAuthCompletion, startNativeOAuthSignIn, startOfficialSignIn, startWebOAuthSignIn, shouldPreOpenPopup, notifyNotConfigured, notifyFailed]);
 
   // Resolve the Application once, then route: third-party → OAuth; first-party
   // / official → the in-app dialog. An unresolved client must fail closed:
@@ -240,7 +257,7 @@ const OxySignInButton = ({
       const resolving = resolvePublicApplication();
       if (!resolving) {
         (0, _oauthPopup.closeOAuthPopup)(popup);
-        startOfficialSignIn();
+        notifyNotConfigured('this app');
         return;
       }
       let app;
@@ -255,7 +272,7 @@ const OxySignInButton = ({
         notifyFailed();
         return;
       }
-      if (app.type === 'third_party' && !app.isOfficial) {
+      if ((0, _applicationSessionLane.classifyApplicationSessionLane)(app) === 'oauth') {
         await startThirdPartyOAuth(app, popup);
         return;
       }
@@ -273,9 +290,10 @@ const OxySignInButton = ({
       });
       notifyFailed();
     } finally {
+      appResolutionRef.current = null;
       routingRef.current = false;
     }
-  }, [resolvePublicApplication, startOfficialSignIn, startThirdPartyOAuth, clientId, notifyFailed]);
+  }, [resolvePublicApplication, startOfficialSignIn, startThirdPartyOAuth, clientId, notifyNotConfigured, notifyFailed]);
 
   // Defer to a caller-supplied handler, otherwise route by application type.
   //

package/lib/commonjs/ui/components/OxySignInButton.js.map

@@ -1 +1 @@
-{"version":3,"names":["_react","require","_reactNative","_core","_authStore","_shallow","_socialButton","_toast","_OxyContext","_useI18n","_accountDialogManager","_oauthNavigation","_oauthPopup","_jsxRuntime","ACTION_KEYS","signIn","continue","signUp","OxySignInButton","variant","appearance","action","size","fullWidth","iconOnly","onPress","style","textStyle","text","disabled","showWhenAuthenticated","oauthRedirectUri","onOAuthResult","t","useI18n","openAccountDialog","oxyServices","clientId","webAuthMode","startWebOAuthSignIn","useOxy","isAuthenticated","isLoading","useAuthStore","useShallow","state","isModalOpen","setIsModalOpen","useState","useEffect","subscribeToAccountDialog","appResolutionRef","useRef","routingRef","shouldPreOpenPopup","Platform","OS","Boolean","resolvePublicApplication","useCallback","cached","current","promise","apps","getPublic","catch","error","notifyNotConfigured","appName","toast","description","app","notifyFailed","startOfficialSignIn","startThirdPartyOAuth","popup","closeOAuthPopup","logger","undefined","component","application","name","result","redirectUri","status","warn","reason","pkce","Promise","all","generatePkcePair","generateOAuthState","authorizeUrl","buildOAuthAuthorizeUrl","codeChallenge","redirectUrl","openAuthorizeUrlNative","codeVerifier","routeSignIn","resolving","type","isOfficial","Error","String","handlePress","openOAuthPopup","isButtonDisabled","resolvedAppearance","actionKey","translated","label","socialButtonLabel","jsx","SocialButton","brand","accessibilityLabel","children","exports","_default","default"],"sourceRoot":"../../../../src","sources":["ui/components/OxySignInButton.tsx"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAOA,IAAAG,UAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AAOA,IAAAM,MAAA,GAAAN,OAAA;AACA,IAAAO,WAAA,GAAAP,OAAA;AACA,IAAAQ,QAAA,GAAAR,OAAA;AACA,IAAAS,qBAAA,GAAAT,OAAA;AACA,IAAAU,gBAAA,GAAAV,OAAA;AACA,IAAAW,WAAA,GAAAX,OAAA;AAAsE,IAAAY,WAAA,GAAAZ,OAAA;AAGtE;AACA;AACA;AACA;AACA;AACA;;AAUA;;AAwGA,MAAMa,WAAkD,GAAG;EACvDC,MAAM,EAAE,+BAA+B;EACvCC,QAAQ,EAAE,iCAAiC;EAC3CC,MAAM,EAAE;AACZ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,eAA+C,GAAGA,CAAC;EAC5DC,OAAO,GAAG,SAAS;EACnBC,UAAU;EACVC,MAAM,GAAG,QAAQ;EACjBC,IAAI,GAAG,IAAI;EACXC,SAAS,GAAG,KAAK;EACjBC,QAAQ,GAAG,KAAK;EAChBC,OAAO;EACPC,KAAK;EACLC,SAAS;EACTC,IAAI;EACJC,QAAQ,GAAG,KAAK;EAChBC,qBAAqB,GAAG,KAAK;EAC7BC,gBAAgB;EAChBC;AACJ,CAAC,KAAK;EACF,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,iBAAiB;IAAEC,WAAW;IAAEC,QAAQ;IAAEC,WAAW;IAAEC;EAAoB,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAC/F,MAAM;IAAEC,eAAe;IAAEC;EAAU,CAAC,GAAG,IAAAC,uBAAY,EAC/C,IAAAC,mBAAU,EAAEC,KAAK,KAAM;IAAEJ,eAAe,EAAEI,KAAK,CAACJ,eAAe;IAAEC,SAAS,EAAEG,KAAK,CAACH;EAAU,CAAC,CAAC,CAClG,CAAC;EACD;EACA;EACA;EACA,MAAM,CAACI,WAAW,EAAEC,cAAc,CAAC,GAAG,IAAAC,eAAQ,EAAC,KAAK,CAAC;EAErD,IAAAC,gBAAS,EAAC,MAAM,IAAAC,8CAAwB,EAACH,cAAc,CAAC,EAAE,EAAE,CAAC;;EAE7D;EACA;EACA;EACA;EACA;EACA,MAAMI,gBAAgB,GAAG,IAAAC,aAAM,EAIrB,IAAI,CAAC;EACf;EACA;EACA;EACA,MAAMC,UAAU,GAAG,IAAAD,aAAM,EAAC,KAAK,CAAC;EAChC;EACA;EACA;EACA;EACA,MAAME,kBAAkB,GACpBC,qBAAQ,CAACC,EAAE,KAAK,KAAK,IAAIlB,WAAW,KAAK,OAAO,IAAImB,OAAO,CAAC1B,gBAAgB,CAAC;EAEjF,MAAM2B,wBAAwB,GAAG,IAAAC,kBAAW,EAAC,MAAyC;IAClF,IAAI,CAACtB,QAAQ,EAAE,OAAO,IAAI;IAC1B,MAAMuB,MAAM,GAAGT,gBAAgB,CAACU,OAAO;IACvC,IAAID,MAAM,IAAIA,MAAM,CAACvB,QAAQ,KAAKA,QAAQ,IAAIuB,MAAM,CAACxB,WAAW,KAAKA,WAAW,EAAE;MAC9E,OAAOwB,MAAM,CAACE,OAAO;IACzB;IACA,MAAMA,OAAO,GAAG1B,WAAW,CAAC2B,IAAI,CAACC,SAAS,CAAC3B,QAAQ,CAAC,CAAC4B,KAAK,CAAEC,KAAK,IAAK;MAClE;MACA;MACA,IAAIf,gBAAgB,CAACU,OAAO,EAAEC,OAAO,KAAKA,OAAO,EAAE;QAC/CX,gBAAgB,CAACU,OAAO,GAAG,IAAI;MACnC;MACA,MAAMK,KAAK;IACf,CAAC,CAAC;IACFf,gBAAgB,CAACU,OAAO,GAAG;MAAExB,QAAQ;MAAED,WAAW;MAAE0B;IAAQ,CAAC;IAC7D,OAAOA,OAAO;EAClB,CAAC,EAAE,CAACzB,QAAQ,EAAED,WAAW,CAAC,CAAC;;EAE3B;EACA;EACA;EACA;EACA,MAAM+B,mBAAmB,GAAG,IAAAR,kBAAW,EAClCS,OAAe,IAAK;IACjBC,YAAK,CAACH,KAAK,CAACjC,CAAC,CAAC,6BAA6B,CAAC,EAAE;MAC1CqC,WAAW,EAAErC,CAAC,CAAC,wCAAwC,EAAE;QAAEsC,GAAG,EAAEH;MAAQ,CAAC;IAC7E,CAAC,CAAC;EACN,CAAC,EACD,CAACnC,CAAC,CACN,CAAC;EACD,MAAMuC,YAAY,GAAG,IAAAb,kBAAW,EAAC,MAAM;IACnCU,YAAK,CAACH,KAAK,CAACjC,CAAC,CAAC,sBAAsB,CAAC,EAAE;MACnCqC,WAAW,EAAErC,CAAC,CAAC,iCAAiC;IACpD,CAAC,CAAC;EACN,CAAC,EAAE,CAACA,CAAC,CAAC,CAAC;;EAEP;EACA,MAAMwC,mBAAmB,GAAG,IAAAd,kBAAW,EAAC,MAAM;IAC1CxB,iBAAiB,CAAC,QAAQ,CAAC;EAC/B,CAAC,EAAE,CAACA,iBAAiB,CAAC,CAAC;;EAEvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMuC,oBAAoB,GAAG,IAAAf,kBAAW,EACpC,OAAOY,GAAsB,EAAEI,KAA8B,KAAoB;IAC7E,IAAI,CAACtC,QAAQ,EAAE;MACX,IAAAuC,2BAAe,EAACD,KAAK,CAAC;MACtBF,mBAAmB,CAAC,CAAC;MACrB;IACJ;IACA,IAAI,CAAC1C,gBAAgB,EAAE;MACnB,IAAA6C,2BAAe,EAACD,KAAK,CAAC;MACtBE,YAAM,CAACX,KAAK,CACR,0HAA0H,EAC1HY,SAAS,EACT;QAAEC,SAAS,EAAE,iBAAiB;QAAE1C,QAAQ;QAAE2C,WAAW,EAAET,GAAG,CAACU;MAAK,CACpE,CAAC;MACDd,mBAAmB,CAACI,GAAG,CAACU,IAAI,CAAC;MAC7B;IACJ;IAEA,IAAI1B,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACvB,MAAM0B,MAAM,GAAG,MAAM3C,mBAAmB,CAAC;QACrC4C,WAAW,EAAEpD,gBAAgB;QAC7B;QACA;QACA;QACA;QACA,IAAIuB,kBAAkB,GAAG;UAAEqB;QAAM,CAAC,GAAG,CAAC,CAAC;MAC3C,CAAC,CAAC;MACF,IAAIO,MAAM,CAACE,MAAM,KAAK,QAAQ,EAAE;QAC5BP,YAAM,CAACQ,IAAI,CACP,wCAAwCH,MAAM,CAACI,MAAM,GAAG,EACxD;UAAEP,SAAS,EAAE,iBAAiB;UAAEC,WAAW,EAAET,GAAG,CAACU;QAAK,CAAC,EACvDC,MAAM,CAACZ,WACX,CAAC;QACDE,YAAY,CAAC,CAAC;MAClB;MACA;IACJ;;IAEA;IACA;IACA,MAAM,CAACe,IAAI,EAAE1C,KAAK,CAAC,GAAG,MAAM2C,OAAO,CAACC,GAAG,CAAC,CAAC,IAAAC,sBAAgB,EAAC,CAAC,EAAE,IAAAC,wBAAkB,EAAC,CAAC,CAAC,CAAC;IACnF,MAAMC,YAAY,GAAG,IAAAC,4BAAsB,EAAC;MACxCxD,QAAQ;MACR8C,WAAW,EAAEpD,gBAAgB;MAC7Bc,KAAK;MACLiD,aAAa,EAAEP,IAAI,CAACO;IACxB,CAAC,CAAC;IACF,MAAM;MAAEC;IAAY,CAAC,GAAG,MAAM,IAAAC,uCAAsB,EAACJ,YAAY,EAAE7D,gBAAgB,CAAC;IACpF,IAAIC,aAAa,EAAE;MACfA,aAAa,CAAC;QAAE+D,WAAW;QAAElD,KAAK;QAAEoD,YAAY,EAAEV,IAAI,CAACU;MAAa,CAAC,CAAC;MACtE;IACJ;IACApB,YAAM,CAACQ,IAAI,CACP,yLAAyL,EACzL;MAAEN,SAAS,EAAE,iBAAiB;MAAEC,WAAW,EAAET,GAAG,CAACU;IAAK,CAC1D,CAAC;IACDd,mBAAmB,CAACI,GAAG,CAACU,IAAI,CAAC;EACjC,CAAC,EACD,CACI5C,QAAQ,EACRN,gBAAgB,EAChBC,aAAa,EACbyC,mBAAmB,EACnBlC,mBAAmB,EACnBe,kBAAkB,EAClBa,mBAAmB,EACnBK,YAAY,CAEpB,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA;EACA,MAAM0B,WAAW,GAAG,IAAAvC,kBAAW,EAC3B,MAAOgB,KAA8B,IAAoB;IACrD,IAAItB,UAAU,CAACQ,OAAO,EAAE;MACpB,IAAAe,2BAAe,EAACD,KAAK,CAAC;MACtB;IACJ;IACAtB,UAAU,CAACQ,OAAO,GAAG,IAAI;IACzB,IAAI;MACA,MAAMsC,SAAS,GAAGzC,wBAAwB,CAAC,CAAC;MAC5C,IAAI,CAACyC,SAAS,EAAE;QACZ,IAAAvB,2BAAe,EAACD,KAAK,CAAC;QACtBF,mBAAmB,CAAC,CAAC;QACrB;MACJ;MACA,IAAIF,GAAsB;MAC1B,IAAI;QACAA,GAAG,GAAG,MAAM4B,SAAS;MACzB,CAAC,CAAC,OAAOjC,KAAK,EAAE;QACZ,IAAAU,2BAAe,EAACD,KAAK,CAAC;QACtBE,YAAM,CAACQ,IAAI,CACP,qEAAqE,EACrE;UAAEN,SAAS,EAAE,iBAAiB;UAAE1C;QAAS,CAAC,EAC1C6B,KACJ,CAAC;QACDM,YAAY,CAAC,CAAC;QACd;MACJ;MACA,IAAID,GAAG,CAAC6B,IAAI,KAAK,aAAa,IAAI,CAAC7B,GAAG,CAAC8B,UAAU,EAAE;QAC/C,MAAM3B,oBAAoB,CAACH,GAAG,EAAEI,KAAK,CAAC;QACtC;MACJ;MACA,IAAAC,2BAAe,EAACD,KAAK,CAAC;MACtBF,mBAAmB,CAAC,CAAC;IACzB,CAAC,CAAC,OAAOP,KAAK,EAAE;MACZ;MACA;MACA;MACA;MACA,IAAAU,2BAAe,EAACD,KAAK,CAAC;MACtBE,YAAM,CAACX,KAAK,CACR,yDAAyD,EACzDA,KAAK,YAAYoC,KAAK,GAAGpC,KAAK,GAAG,IAAIoC,KAAK,CAACC,MAAM,CAACrC,KAAK,CAAC,CAAC,EACzD;QAAEa,SAAS,EAAE,iBAAiB;QAAE1C;MAAS,CAC7C,CAAC;MACDmC,YAAY,CAAC,CAAC;IAClB,CAAC,SAAS;MACNnB,UAAU,CAACQ,OAAO,GAAG,KAAK;IAC9B;EACJ,CAAC,EACD,CACIH,wBAAwB,EACxBe,mBAAmB,EACnBC,oBAAoB,EACpBrC,QAAQ,EACRmC,YAAY,CAEpB,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAMgC,WAAW,GAAG,IAAA7C,kBAAW,EAAC,MAAM;IAClC,IAAIlC,OAAO,EAAE;MACTA,OAAO,CAAC,CAAC;MACT;IACJ;IACA,KAAKyE,WAAW,CAAC5C,kBAAkB,GAAG,IAAAmD,0BAAc,EAAC,CAAC,GAAG,IAAI,CAAC;EAClE,CAAC,EAAE,CAAChF,OAAO,EAAEyE,WAAW,EAAE5C,kBAAkB,CAAC,CAAC;;EAE9C;EACA,IAAIb,eAAe,IAAI,CAACX,qBAAqB,EAAE,OAAO,IAAI;EAE1D,MAAM4E,gBAAgB,GAAG7E,QAAQ,IAAIa,SAAS,IAAII,WAAW;;EAE7D;EACA;EACA,MAAM6D,kBAA0C,GAC5CvF,UAAU,KAAKD,OAAO,KAAK,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;;EAElE;EACA;EACA,MAAMyF,SAAS,GAAG9F,WAAW,CAACO,MAAM,CAAC;EACrC,MAAMwF,UAAU,GAAG5E,CAAC,CAAC2E,SAAS,CAAC;EAC/B,MAAME,KAAK,GAAGlF,IAAI,KAAKiF,UAAU,KAAKD,SAAS,GAAG,IAAAG,+BAAiB,EAAC,KAAK,EAAE1F,MAAM,CAAC,GAAGwF,UAAU,CAAC;EAEhG,oBACI,IAAAhG,WAAA,CAAAmG,GAAA,EAAC1G,aAAA,CAAA2G,YAAY;IACTC,KAAK,EAAC,KAAK;IACX7F,MAAM,EAAEA,MAAO;IACfD,UAAU,EAAEuF,kBAAmB;IAC/BrF,IAAI,EAAEA,IAAK;IACXC,SAAS,EAAEA,SAAU;IACrBC,QAAQ,EAAEA,QAAS;IACnBC,OAAO,EAAE+E,WAAY;IACrB3E,QAAQ,EAAE6E,gBAAiB;IAC3BhF,KAAK,EAAEA,KAAM;IACbC,SAAS,EAAEA,SAAU;IACrBwF,kBAAkB,EAAE3F,QAAQ,GAAGsF,KAAK,GAAGhC,SAAU;IAAAsC,QAAA,EAEhD1E,SAAS,IAAII,WAAW,GAAGb,CAAC,CAAC,yBAAyB,CAAC,GAAG6E;EAAK,CACtD,CAAC;AAEvB,CAAC;AAACO,OAAA,CAAAnG,eAAA,GAAAA,eAAA;AAAA,IAAAoG,QAAA,GAAAD,OAAA,CAAAE,OAAA,GAEarG,eAAe","ignoreList":[]}
+{"version":3,"names":["_applicationSessionLane","require","_react","_reactNative","_core","_authStore","_shallow","_socialButton","_toast","_OxyContext","_useI18n","_accountDialogManager","_oauthNavigation","_oauthPopup","_jsxRuntime","ACTION_KEYS","signIn","continue","signUp","OxySignInButton","variant","appearance","action","size","fullWidth","iconOnly","onPress","style","textStyle","text","disabled","showWhenAuthenticated","oauthRedirectUri","onOAuthResult","nativeOAuthCompletion","t","useI18n","openAccountDialog","oxyServices","clientId","webAuthMode","startWebOAuthSignIn","startNativeOAuthSignIn","useOxy","isAuthenticated","isLoading","useAuthStore","useShallow","state","isModalOpen","setIsModalOpen","useState","useEffect","subscribeToAccountDialog","appResolutionRef","useRef","routingRef","shouldPreOpenPopup","Platform","OS","Boolean","resolvePublicApplication","useCallback","cached","current","promise","apps","getPublic","cache","catch","error","notifyNotConfigured","appName","toast","description","app","notifyFailed","startOfficialSignIn","startThirdPartyOAuth","popup","closeOAuthPopup","logger","undefined","component","application","name","result","redirectUri","status","warn","reason","pkce","Promise","all","generatePkcePair","generateOAuthState","authorizeUrl","buildOAuthAuthorizeUrl","codeChallenge","redirectUrl","openAuthorizeUrlNative","codeVerifier","routeSignIn","resolving","classifyApplicationSessionLane","Error","String","handlePress","openOAuthPopup","isButtonDisabled","resolvedAppearance","actionKey","translated","label","socialButtonLabel","jsx","SocialButton","brand","accessibilityLabel","children","exports","_default","default"],"sourceRoot":"../../../../src","sources":["ui/components/OxySignInButton.tsx"],"mappings":";;;;;;AAAA,IAAAA,uBAAA,GAAAC,OAAA;AAEA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,YAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AAOA,IAAAI,UAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AAOA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,WAAA,GAAAR,OAAA;AACA,IAAAS,QAAA,GAAAT,OAAA;AACA,IAAAU,qBAAA,GAAAV,OAAA;AACA,IAAAW,gBAAA,GAAAX,OAAA;AACA,IAAAY,WAAA,GAAAZ,OAAA;AAAsE,IAAAa,WAAA,GAAAb,OAAA;AAGtE;AACA;AACA;AACA;AACA;AACA;;AAUA;;AA0GA,MAAMc,WAAkD,GAAG;EACvDC,MAAM,EAAE,+BAA+B;EACvCC,QAAQ,EAAE,iCAAiC;EAC3CC,MAAM,EAAE;AACZ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,eAA+C,GAAGA,CAAC;EAC5DC,OAAO,GAAG,SAAS;EACnBC,UAAU;EACVC,MAAM,GAAG,QAAQ;EACjBC,IAAI,GAAG,IAAI;EACXC,SAAS,GAAG,KAAK;EACjBC,QAAQ,GAAG,KAAK;EAChBC,OAAO;EACPC,KAAK;EACLC,SAAS;EACTC,IAAI;EACJC,QAAQ,GAAG,KAAK;EAChBC,qBAAqB,GAAG,KAAK;EAC7BC,gBAAgB;EAChBC,aAAa;EACbC;AACJ,CAAC,KAAK;EACF,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,iBAAiB;IAAEC,WAAW;IAAEC,QAAQ;IAAEC,WAAW;IAAEC,mBAAmB;IAAEC;EAAuB,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EACvH,MAAM;IAAEC,eAAe;IAAEC;EAAU,CAAC,GAAG,IAAAC,uBAAY,EAC/C,IAAAC,mBAAU,EAAEC,KAAK,KAAM;IAAEJ,eAAe,EAAEI,KAAK,CAACJ,eAAe;IAAEC,SAAS,EAAEG,KAAK,CAACH;EAAU,CAAC,CAAC,CAClG,CAAC;EACD;EACA;EACA;EACA,MAAM,CAACI,WAAW,EAAEC,cAAc,CAAC,GAAG,IAAAC,eAAQ,EAAC,KAAK,CAAC;EAErD,IAAAC,gBAAS,EAAC,MAAM,IAAAC,8CAAwB,EAACH,cAAc,CAAC,EAAE,EAAE,CAAC;;EAE7D;EACA;EACA;EACA;EACA;EACA,MAAMI,gBAAgB,GAAG,IAAAC,aAAM,EAIrB,IAAI,CAAC;EACf;EACA;EACA;EACA,MAAMC,UAAU,GAAG,IAAAD,aAAM,EAAC,KAAK,CAAC;EAChC;EACA;EACA;EACA;EACA,MAAME,kBAAkB,GACpBC,qBAAQ,CAACC,EAAE,KAAK,KAAK,IAAInB,WAAW,KAAK,OAAO,IAAIoB,OAAO,CAAC5B,gBAAgB,CAAC;EAEjF,MAAM6B,wBAAwB,GAAG,IAAAC,kBAAW,EAAC,MAAyC;IAClF,IAAI,CAACvB,QAAQ,EAAE,OAAO,IAAI;IAC1B,MAAMwB,MAAM,GAAGT,gBAAgB,CAACU,OAAO;IACvC,IAAID,MAAM,IAAIA,MAAM,CAACxB,QAAQ,KAAKA,QAAQ,IAAIwB,MAAM,CAACzB,WAAW,KAAKA,WAAW,EAAE;MAC9E,OAAOyB,MAAM,CAACE,OAAO;IACzB;IACA,MAAMA,OAAO,GAAG3B,WAAW,CAAC4B,IAAI,CAACC,SAAS,CAAC5B,QAAQ,EAAE;MAAE6B,KAAK,EAAE;IAAM,CAAC,CAAC,CAACC,KAAK,CAAEC,KAAK,IAAK;MACpF;MACA;MACA,IAAIhB,gBAAgB,CAACU,OAAO,EAAEC,OAAO,KAAKA,OAAO,EAAE;QAC/CX,gBAAgB,CAACU,OAAO,GAAG,IAAI;MACnC;MACA,MAAMM,KAAK;IACf,CAAC,CAAC;IACFhB,gBAAgB,CAACU,OAAO,GAAG;MAAEzB,QAAQ;MAAED,WAAW;MAAE2B;IAAQ,CAAC;IAC7D,OAAOA,OAAO;EAClB,CAAC,EAAE,CAAC1B,QAAQ,EAAED,WAAW,CAAC,CAAC;;EAE3B;EACA;EACA;EACA;EACA,MAAMiC,mBAAmB,GAAG,IAAAT,kBAAW,EAClCU,OAAe,IAAK;IACjBC,YAAK,CAACH,KAAK,CAACnC,CAAC,CAAC,6BAA6B,CAAC,EAAE;MAC1CuC,WAAW,EAAEvC,CAAC,CAAC,wCAAwC,EAAE;QAAEwC,GAAG,EAAEH;MAAQ,CAAC;IAC7E,CAAC,CAAC;EACN,CAAC,EACD,CAACrC,CAAC,CACN,CAAC;EACD,MAAMyC,YAAY,GAAG,IAAAd,kBAAW,EAAC,MAAM;IACnCW,YAAK,CAACH,KAAK,CAACnC,CAAC,CAAC,sBAAsB,CAAC,EAAE;MACnCuC,WAAW,EAAEvC,CAAC,CAAC,iCAAiC;IACpD,CAAC,CAAC;EACN,CAAC,EAAE,CAACA,CAAC,CAAC,CAAC;;EAEP;EACA,MAAM0C,mBAAmB,GAAG,IAAAf,kBAAW,EAAC,MAAM;IAC1CzB,iBAAiB,CAAC,QAAQ,CAAC;EAC/B,CAAC,EAAE,CAACA,iBAAiB,CAAC,CAAC;;EAEvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMyC,oBAAoB,GAAG,IAAAhB,kBAAW,EACpC,OAAOa,GAAsB,EAAEI,KAA8B,KAAoB;IAC7E,IAAI,CAACxC,QAAQ,EAAE;MACX,IAAAyC,2BAAe,EAACD,KAAK,CAAC;MACtBF,mBAAmB,CAAC,CAAC;MACrB;IACJ;IACA,IAAI,CAAC7C,gBAAgB,EAAE;MACnB,IAAAgD,2BAAe,EAACD,KAAK,CAAC;MACtBE,YAAM,CAACX,KAAK,CACR,0HAA0H,EAC1HY,SAAS,EACT;QAAEC,SAAS,EAAE,iBAAiB;QAAE5C,QAAQ;QAAE6C,WAAW,EAAET,GAAG,CAACU;MAAK,CACpE,CAAC;MACDd,mBAAmB,CAACI,GAAG,CAACU,IAAI,CAAC;MAC7B;IACJ;IAEA,IAAI3B,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACvB,MAAM2B,MAAM,GAAG,MAAM7C,mBAAmB,CAAC;QACrC8C,WAAW,EAAEvD,gBAAgB;QAC7B;QACA;QACA;QACA;QACA,IAAIyB,kBAAkB,GAAG;UAAEsB;QAAM,CAAC,GAAG,CAAC,CAAC;MAC3C,CAAC,CAAC;MACF,IAAIO,MAAM,CAACE,MAAM,KAAK,QAAQ,EAAE;QAC5BP,YAAM,CAACQ,IAAI,CACP,wCAAwCH,MAAM,CAACI,MAAM,GAAG,EACxD;UAAEP,SAAS,EAAE,iBAAiB;UAAEC,WAAW,EAAET,GAAG,CAACU;QAAK,CAAC,EACvDC,MAAM,CAACZ,WACX,CAAC;QACDE,YAAY,CAAC,CAAC;MAClB;MACA;IACJ;IAEA,IAAI1C,qBAAqB,KAAK,KAAK,EAAE;MACjC,IAAID,aAAa,EAAE;QAAEsC,mBAAmB,CAACI,GAAG,CAACU,IAAI,CAAC;QAAE;MAAQ;MAC5D,MAAMC,MAAM,GAAG,MAAM5C,sBAAsB,CAAC;QAAE6C,WAAW,EAAEvD;MAAiB,CAAC,CAAC;MAC9E,IAAIsD,MAAM,CAACE,MAAM,KAAK,QAAQ,EAAEZ,YAAY,CAAC,CAAC;MAC9C,IAAIU,MAAM,CAACE,MAAM,KAAK,aAAa,EAAEjB,mBAAmB,CAACI,GAAG,CAACU,IAAI,CAAC;MAClE;IACJ;;IAEA;IACA;IACA,MAAM,CAACM,IAAI,EAAE3C,KAAK,CAAC,GAAG,MAAM4C,OAAO,CAACC,GAAG,CAAC,CAAC,IAAAC,sBAAgB,EAAC,CAAC,EAAE,IAAAC,wBAAkB,EAAC,CAAC,CAAC,CAAC;IACnF,MAAMC,YAAY,GAAG,IAAAC,4BAAsB,EAAC;MACxC1D,QAAQ;MACRgD,WAAW,EAAEvD,gBAAgB;MAC7BgB,KAAK;MACLkD,aAAa,EAAEP,IAAI,CAACO;IACxB,CAAC,CAAC;IACF,MAAM;MAAEC;IAAY,CAAC,GAAG,MAAM,IAAAC,uCAAsB,EAACJ,YAAY,EAAEhE,gBAAgB,CAAC;IACpF,IAAIC,aAAa,EAAE;MACfA,aAAa,CAAC;QAAEkE,WAAW;QAAEnD,KAAK;QAAEqD,YAAY,EAAEV,IAAI,CAACU;MAAa,CAAC,CAAC;MACtE;IACJ;IACApB,YAAM,CAACQ,IAAI,CACP,yLAAyL,EACzL;MAAEN,SAAS,EAAE,iBAAiB;MAAEC,WAAW,EAAET,GAAG,CAACU;IAAK,CAC1D,CAAC;IACDd,mBAAmB,CAACI,GAAG,CAACU,IAAI,CAAC;EACjC,CAAC,EACD,CACI9C,QAAQ,EACRP,gBAAgB,EAChBC,aAAa,EACbC,qBAAqB,EACrBQ,sBAAsB,EACtBmC,mBAAmB,EACnBpC,mBAAmB,EACnBgB,kBAAkB,EAClBc,mBAAmB,EACnBK,YAAY,CAEpB,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA;EACA,MAAM0B,WAAW,GAAG,IAAAxC,kBAAW,EAC3B,MAAOiB,KAA8B,IAAoB;IACrD,IAAIvB,UAAU,CAACQ,OAAO,EAAE;MACpB,IAAAgB,2BAAe,EAACD,KAAK,CAAC;MACtB;IACJ;IACAvB,UAAU,CAACQ,OAAO,GAAG,IAAI;IACzB,IAAI;MACA,MAAMuC,SAAS,GAAG1C,wBAAwB,CAAC,CAAC;MAC5C,IAAI,CAAC0C,SAAS,EAAE;QACZ,IAAAvB,2BAAe,EAACD,KAAK,CAAC;QACtBR,mBAAmB,CAAC,UAAU,CAAC;QAC/B;MACJ;MACA,IAAII,GAAsB;MAC1B,IAAI;QACAA,GAAG,GAAG,MAAM4B,SAAS;MACzB,CAAC,CAAC,OAAOjC,KAAK,EAAE;QACZ,IAAAU,2BAAe,EAACD,KAAK,CAAC;QACtBE,YAAM,CAACQ,IAAI,CACP,qEAAqE,EACrE;UAAEN,SAAS,EAAE,iBAAiB;UAAE5C;QAAS,CAAC,EAC1C+B,KACJ,CAAC;QACDM,YAAY,CAAC,CAAC;QACd;MACJ;MACA,IAAI,IAAA4B,sDAA8B,EAAC7B,GAAG,CAAC,KAAK,OAAO,EAAE;QACjD,MAAMG,oBAAoB,CAACH,GAAG,EAAEI,KAAK,CAAC;QACtC;MACJ;MACA,IAAAC,2BAAe,EAACD,KAAK,CAAC;MACtBF,mBAAmB,CAAC,CAAC;IACzB,CAAC,CAAC,OAAOP,KAAK,EAAE;MACZ;MACA;MACA;MACA;MACA,IAAAU,2BAAe,EAACD,KAAK,CAAC;MACtBE,YAAM,CAACX,KAAK,CACR,yDAAyD,EACzDA,KAAK,YAAYmC,KAAK,GAAGnC,KAAK,GAAG,IAAImC,KAAK,CAACC,MAAM,CAACpC,KAAK,CAAC,CAAC,EACzD;QAAEa,SAAS,EAAE,iBAAiB;QAAE5C;MAAS,CAC7C,CAAC;MACDqC,YAAY,CAAC,CAAC;IAClB,CAAC,SAAS;MACNtB,gBAAgB,CAACU,OAAO,GAAG,IAAI;MAC/BR,UAAU,CAACQ,OAAO,GAAG,KAAK;IAC9B;EACJ,CAAC,EACD,CACIH,wBAAwB,EACxBgB,mBAAmB,EACnBC,oBAAoB,EACpBvC,QAAQ,EACRgC,mBAAmB,EACnBK,YAAY,CAEpB,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAM+B,WAAW,GAAG,IAAA7C,kBAAW,EAAC,MAAM;IAClC,IAAIpC,OAAO,EAAE;MACTA,OAAO,CAAC,CAAC;MACT;IACJ;IACA,KAAK4E,WAAW,CAAC7C,kBAAkB,GAAG,IAAAmD,0BAAc,EAAC,CAAC,GAAG,IAAI,CAAC;EAClE,CAAC,EAAE,CAAClF,OAAO,EAAE4E,WAAW,EAAE7C,kBAAkB,CAAC,CAAC;;EAE9C;EACA,IAAIb,eAAe,IAAI,CAACb,qBAAqB,EAAE,OAAO,IAAI;EAE1D,MAAM8E,gBAAgB,GAAG/E,QAAQ,IAAIe,SAAS,IAAII,WAAW;;EAE7D;EACA;EACA,MAAM6D,kBAA0C,GAC5CzF,UAAU,KAAKD,OAAO,KAAK,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;;EAElE;EACA;EACA,MAAM2F,SAAS,GAAGhG,WAAW,CAACO,MAAM,CAAC;EACrC,MAAM0F,UAAU,GAAG7E,CAAC,CAAC4E,SAAS,CAAC;EAC/B,MAAME,KAAK,GAAGpF,IAAI,KAAKmF,UAAU,KAAKD,SAAS,GAAG,IAAAG,+BAAiB,EAAC,KAAK,EAAE5F,MAAM,CAAC,GAAG0F,UAAU,CAAC;EAEhG,oBACI,IAAAlG,WAAA,CAAAqG,GAAA,EAAC5G,aAAA,CAAA6G,YAAY;IACTC,KAAK,EAAC,KAAK;IACX/F,MAAM,EAAEA,MAAO;IACfD,UAAU,EAAEyF,kBAAmB;IAC/BvF,IAAI,EAAEA,IAAK;IACXC,SAAS,EAAEA,SAAU;IACrBC,QAAQ,EAAEA,QAAS;IACnBC,OAAO,EAAEiF,WAAY;IACrB7E,QAAQ,EAAE+E,gBAAiB;IAC3BlF,KAAK,EAAEA,KAAM;IACbC,SAAS,EAAEA,SAAU;IACrB0F,kBAAkB,EAAE7F,QAAQ,GAAGwF,KAAK,GAAG/B,SAAU;IAAAqC,QAAA,EAEhD1E,SAAS,IAAII,WAAW,GAAGd,CAAC,CAAC,yBAAyB,CAAC,GAAG8E;EAAK,CACtD,CAAC;AAEvB,CAAC;AAACO,OAAA,CAAArG,eAAA,GAAAA,eAAA;AAAA,IAAAsG,QAAA,GAAAD,OAAA,CAAAE,OAAA,GAEavG,eAAe","ignoreList":[]}