@oxy.so/services 11.9.0 → 11.12.0

package/lib/module/assets/fonts/icons/manifest.json

@@ -6,7 +6,7 @@
       "fontFamily": "OxyServicesIonicons",
       "file": "src/assets/fonts/icons/OxyServicesIonicons.ttf",
       "bytes": 43160,
-      "sha256": "c062679623ae08f1fb0231729c1f9efae97044e35ffe51f7c0544f866cb2f959",
+      "sha256": "d96ec296f01cc237bf8e087401879aeef569c82871f40e4447d63bc8a9eaab3e",
       "names": [
         "add",
         "add-circle-outline",
@@ -152,8 +152,8 @@
     "materialCommunityIcons": {
       "fontFamily": "OxyServicesMaterialCommunityIcons",
       "file": "src/assets/fonts/icons/OxyServicesMaterialCommunityIcons.ttf",
-      "bytes": 29224,
-      "sha256": "c7fdc975626c395ee2b1d0c462ae8dab6f800935bb64739d2d07ea4a30da51d0",
+      "bytes": 29292,
+      "sha256": "a3bef5c42424d459860676f20d7f1e9aaea4f7295aba3d5361ca2195d8f1d59c",
       "names": [
         "account",
         "account-circle",
@@ -337,6 +337,7 @@
         "trophy",
         "trophy-outline",
         "update",
+        "upload",
         "video-outline",
         "volume-off",
         "wallet",
@@ -352,5 +353,5 @@
     }
   },
   "glyphMapsFile": "src/ui/icons/subsetGlyphMaps.ts",
-  "glyphMapsSha256": "1f2e6005461383abb6c5443981341e8ae716110eb6de6590f8a3caa4cfe614b0"
+  "glyphMapsSha256": "b0a3d21006a83bf10deac1c8e5bb1a4dacac3c0afe9d445ed856f766f49b6c01"
 }

package/lib/module/index.js

@@ -45,6 +45,10 @@ export { useOptionalOxy, OxyProviderMissingError } from "./ui/context/OxyContext
 // members moving — a locale change or a dialog opening does not re-render them.
 export { useOxyRuntime, useOxySnapshot, useActiveAccount, useDeviceDirectory, OxyRuntimeMissingError } from "./ui/runtime/index.js";
 export { useAuth } from "./ui/hooks/useAuth.js";
+// This app's Oxy-signed assertion of which app it is (ADR 0045), obtained and
+// refreshed by the provider; attach `getAppAssertionHeaders()` to a request
+// for a service that needs to know the app.
+export { useAppAssertion, AppAssertionProviderMissingError } from "./ui/appAssertion/AppAssertionContext.js";
 export { createDeferredProductAnalytics } from "./ui/analytics/productAnalytics.js";
 // Thrown by `switchToAccount` / `switchSession` while `OxyProvider` runs with
 // `sessionMode="identity"` — an identity-bound app authenticates as the owner of
@@ -238,4 +242,8 @@ export { SurfaceHeaderAction } from "./ui/components/SurfaceHeaderAction.js";
 // Imperative account dialog entry points (outside React).
 export { openAccountDialog, closeAccountDialog, subscribeToAccountDialog } from "./ui/navigation/accountDialogManager.js";
 export { usePersonalPlans, usePersonalPlanSubscriptions } from "./ui/hooks/queries/usePersonalPlans.js";
+export { AccountInvitationAcceptance } from "./ui/components/AccountInvitationAcceptance.js";
+export { DisplayCurrencySelector } from "./ui/components/DisplayCurrencySelector.js";
+export { useDisplayCurrency } from "./ui/hooks/useDisplayCurrency.js";
+export { useDisplayPrice } from "./ui/hooks/useDisplayPrice.js";
 //# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["setPlatformOS","Platform","OS","default","OxyProvider","useOxy","useOptionalOxy","OxyProviderMissingError","useOxyRuntime","useOxySnapshot","useActiveAccount","useDeviceDirectory","OxyRuntimeMissingError","useAuth","createDeferredProductAnalytics","IdentityBoundSessionError","useAuthStore","useAssetStore","useAssets","useAssetsStore","useAsset","useUploadProgress","useAssetLoading","useAssetErrors","useAssetsByApp","useAssetsByEntity","useAssetUsageCount","useIsAssetLinked","setOxyAssetInstance","useFileDownloadUrl","useFollow","useFollowerCounts","useSeedFollowStatuses","useStorage","useUserProfile","useUserProfiles","useCurrentUser","useUserById","useUserByUsername","useUsersBySessions","usePrivacySettings","useConnectedApps","useSessions","useSession","useDeviceSessions","useUserDevices","useSecurityInfo","useAccountStorageUsage","useSecurityActivity","useRecentSecurityActivity","useInfiniteSecurityActivity","useAuthMethods","useSignInMethods","useUserSubscription","useUserPayments","useUserWallet","useUserWalletTransactions","useUpdateProfile","useUploadAvatar","useUpdateAccountSettings","useUpdatePrivacySettings","useUpdateNotificationPreferences","useUpdateUserPreferences","useRevokeConnectedApp","useUploadFile","useSwitchSession","useLogoutSession","useLogoutAll","useUpdateDeviceName","useRemoveDevice","createProfileMutation","createGenericMutation","mutationKeys","queryKeys","invalidateAccountQueries","invalidateUserQueries","invalidateSessionQueries","invalidateDeviceQueries","invalidatePrivacyQueries","invalidateSecurityQueries","invalidateStorageQueries","invalidatePaymentsQueries","invalidateConnectedAppsQueries","invalidateAuthMethodsQueries","upsertCachedUser","upsertCachedUsers","CLEARABLE_USER_FIELDS","clearedFieldsFromProfileUpdate","clearedFieldsFromAccountUpdate","useMutationStatus","useOnlineStatus","useOxyEvent","handleAuthError","isInvalidSessionError","isTimeoutOrNetworkError","extractErrorMessage","useFileFiltering","OXY_OAUTH_STATE_STORAGE_KEY","OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY","OxySignInButton","openOAuthPopup","OxyAuthPrompt","OxyOAuthCallback","OxyConsentScreen","RequireOxyAuth","FollowButton","FollowTargetButton","buildFollowMenuItems","resolveFollowPrimaryAction","FOLLOW_ACTION_LEAVES_ACTIVE","useFollowTarget","useFollowTargetStore","UNKNOWN_FOLLOW_STATUS","isFollowedGlobally","withApplicationMode","isCompleteFollowStatus","followRecordToStatus","followRecordsToStatusMap","PeableButton","OxyPayButton","LogoIcon","LogoText","ProfileButton","OxySignInPanel","OxySignUpPanel","OxyAccountPicker","OxyDeleteAccountPanel","OxyLinkCommonsPanel","OxyPasswordPanel","OxyAuthenticatorPanel","OxyAuthScreen","OxyAuthScreenHeader","OxyAuthLoading","OxyAuthTerms","OxySignInRequestSurface","useDeviceSwitcher","showBottomSheet","closeBottomSheet","useSurfaceHeader","SurfaceHeaderAction","openAccountDialog","closeAccountDialog","subscribeToAccountDialog","usePersonalPlans","usePersonalPlanSubscriptions"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA,SAASA,aAAa,QAAyB,cAAc;AAC7D,SAASC,QAAQ,QAAQ,cAAc;AACvCD,aAAa,CAACC,QAAQ,CAACC,EAAgB,CAAC;;AAExC;AACA;AACA;AACA,SAASC,OAAO,IAAIC,WAAW,QAAQ,gCAA6B;AACpE,SAASC,MAAM,QAAQ,4BAAyB;AAChD;AACA;AACA;AACA,SAASC,cAAc,EAAEC,uBAAuB,QAAQ,4BAAyB;;AAEjF;AACA;AACA;AACA,SACEC,aAAa,EACbC,cAAc,EACdC,gBAAgB,EAChBC,kBAAkB,EAClBC,sBAAsB,QACjB,uBAAc;AAUrB,SAASC,OAAO,QAAQ,uBAAoB;AAE5C,SAASC,8BAA8B,QAAQ,oCAAiC;AAEhF;AACA;AACA;AACA,SAASC,yBAAyB,QAAQ,iCAA8B;;AAExE;AACA;AACA;AACA,SAASC,YAAY,QAAQ,0BAAuB;AACpD,SACEC,aAAa,EACbC,SAAS,IAAIC,cAAc,EAC3BC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,cAAc,EACdC,cAAc,EACdC,iBAAiB,EACjBC,kBAAkB,EAClBC,gBAAgB,QACX,2BAAwB;;AAE/B;AACA;AACA;AACA,SAAST,SAAS,EAAEU,mBAAmB,QAAQ,yBAAsB;AACrE,SAASC,kBAAkB,QAAQ,kCAA+B;AAClE,SAASC,SAAS,EAAEC,iBAAiB,EAAEC,qBAAqB,QAAQ,yBAAsB;AAC1F,SAASC,UAAU,QAAQ,0BAAuB;AAGlD;AACA;AACA;AACA,SACEC,cAAc,EACdC,eAAe,EACfC,cAAc,EACdC,WAAW,EACXC,iBAAiB,EACjBC,kBAAkB,EAClBC,kBAAkB,EAClBC,gBAAgB,QACX,yCAAsC;AAC7C,SACEC,WAAW,EACXC,UAAU,EACVC,iBAAiB,EACjBC,cAAc,EACdC,eAAe,EACfC,sBAAsB,QACjB,0CAAuC;AAC9C,SACEC,mBAAmB,EACnBC,yBAAyB,EACzBC,2BAA2B,QACtB,0CAAuC;AAC9C,SAASC,cAAc,EAAEC,gBAAgB,QAAQ,sCAAmC;AACpF,SACEC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,yBAAyB,QACpB,yCAAsC;;AAE7C;;AAeA;AACA;AACA;AACA,SACEC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,EACxBC,wBAAwB,EACxBC,gCAAgC,EAChCC,wBAAwB,EACxBC,qBAAqB,EACrBC,aAAa,QACR,6CAA0C;AACjD,SACEC,gBAAgB,EAChBC,gBAAgB,EAChBC,YAAY,EACZC,mBAAmB,EACnBC,eAAe,QACV,8CAA2C;AAClD,SACEC,qBAAqB,EACrBC,qBAAqB,QAChB,yCAAsC;AAM7C;AACA,SAASC,YAAY,QAAQ,sCAAmC;;AAEhE;AACA;AACA;AACA;AACA;AACA;AACA,SACEC,SAAS,EACTC,wBAAwB,EACxBC,qBAAqB,EACrBC,wBAAwB,EACxBC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,EACzBC,wBAAwB,EACxBC,yBAAyB,EACzBC,8BAA8B,EAC9BC,4BAA4B,QACvB,iCAA8B;;AAErC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SACEC,gBAAgB,EAChBC,iBAAiB,EACjBC,qBAAqB,EACrBC,8BAA8B,EAC9BC,8BAA8B,QACzB,iCAA8B;AAOrC;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAEhE,SAASC,eAAe,QAAQ,+BAA4B;AAC5D,SAASC,WAAW,QAAQ,2BAAwB;;AAEpD;AACA;AACA;AACA,SACEC,eAAe,EACfC,qBAAqB,EACrBC,uBAAuB,EACvBC,mBAAmB,QACd,6BAA0B;AAGjC;AACA;AACA;AACA,SAASC,gBAAgB,QAAQ,gCAA6B;AAG9D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,SACEC,2BAA2B,EAC3BC,mCAAmC,QAC9B,cAAc;AACrB,SAAS/F,OAAO,IAAIgG,eAAe,QAAQ,oCAAiC;AAG5E;AACA;AACA;AACA;AACA,SAASC,cAAc,QAAQ,0BAAuB;AAgBtD,SAASC,aAAa,QAAQ,kCAA+B;AAE7D,SAASC,gBAAgB,QAAQ,qCAAkC;AAEnE,SAASC,gBAAgB,QAAQ,qCAAkC;AAQnE;AACA;AACA;AACA;AACA;AACA,SAASC,cAAc,QAAQ,mCAAgC;;AAE/D;;AAGA,SAASrG,OAAO,IAAIsG,YAAY,QAAQ,iCAA8B;AAMtE;AACA,SAASC,kBAAkB,QAAQ,uCAAoC;AACvE;AACE;AACA;AACA;AACA;AACA;AACAC,oBAAoB,EACpBC,0BAA0B,EAC1BC,2BAA2B,QACtB,gCAA6B;AAOpC,SAASC,eAAe,QAAQ,+BAA4B;AAE5D,SACEC,oBAAoB,EACpBC,qBAAqB;AACrB;AACA;AACA;AACAC,kBAAkB,EAClBC,mBAAmB;AACnB;AACA;AACAC,sBAAsB,EACtBC,oBAAoB,EACpBC,wBAAwB,QACnB,kCAA+B;AACtC,SAASlH,OAAO,IAAImH,YAAY,QAAQ,iCAA8B;AAEtE;AACA,SAASnH,OAAO,IAAIoH,YAAY,QAAQ,iCAA8B;AACtE;;AAEA,SAASC,QAAQ,QAAQ,kCAA+B;AACxD,SAASC,QAAQ,QAAQ,kCAA+B;;AAExD;AACA;AACA;AACA,SAAStH,OAAO,IAAIuH,aAAa,QAAQ,kCAA+B;AAIxE;AACA;AACA;AACA,SAASC,cAAc,QAAQ,0CAAuC;AAEtE,SAASC,cAAc,QAAQ,0CAAuC;AAEtE,SAASC,gBAAgB,QAAQ,4CAAyC;AAE1E;AACA;AACA;AACA,SAASC,qBAAqB,QAAQ,iDAA8C;AAEpF,SAASC,mBAAmB,QAAQ,+CAA4C;AAEhF,SAASC,gBAAgB,QAAQ,4CAAyC;AAE1E,SAASC,qBAAqB,QAAQ,iDAA8C;AAEpF,SACEC,aAAa,EACbC,mBAAmB,EACnBC,cAAc,EACdC,YAAY,QACP,yCAAsC;AAG7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,uBAAuB,QAAQ,4CAAyC;AAIjF;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAGhE;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,uCAAoC;AAGtF;AACA;AACA;AACA,SAASC,gBAAgB,QAAmC,gCAA6B;AACzF,SACEC,mBAAmB,QAEd,wCAAqC;;AAE5C;AACA;AACA;AACA;AACA,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,wBAAwB,QACnB,yCAAsC;AAO7C,SACEC,gBAAgB,EAChBC,4BAA4B,QACvB,wCAAqC","ignoreList":[]}
+{"version":3,"names":["setPlatformOS","Platform","OS","default","OxyProvider","useOxy","useOptionalOxy","OxyProviderMissingError","useOxyRuntime","useOxySnapshot","useActiveAccount","useDeviceDirectory","OxyRuntimeMissingError","useAuth","useAppAssertion","AppAssertionProviderMissingError","createDeferredProductAnalytics","IdentityBoundSessionError","useAuthStore","useAssetStore","useAssets","useAssetsStore","useAsset","useUploadProgress","useAssetLoading","useAssetErrors","useAssetsByApp","useAssetsByEntity","useAssetUsageCount","useIsAssetLinked","setOxyAssetInstance","useFileDownloadUrl","useFollow","useFollowerCounts","useSeedFollowStatuses","useStorage","useUserProfile","useUserProfiles","useCurrentUser","useUserById","useUserByUsername","useUsersBySessions","usePrivacySettings","useConnectedApps","useSessions","useSession","useDeviceSessions","useUserDevices","useSecurityInfo","useAccountStorageUsage","useSecurityActivity","useRecentSecurityActivity","useInfiniteSecurityActivity","useAuthMethods","useSignInMethods","useUserSubscription","useUserPayments","useUserWallet","useUserWalletTransactions","useUpdateProfile","useUploadAvatar","useUpdateAccountSettings","useUpdatePrivacySettings","useUpdateNotificationPreferences","useUpdateUserPreferences","useRevokeConnectedApp","useUploadFile","useSwitchSession","useLogoutSession","useLogoutAll","useUpdateDeviceName","useRemoveDevice","createProfileMutation","createGenericMutation","mutationKeys","queryKeys","invalidateAccountQueries","invalidateUserQueries","invalidateSessionQueries","invalidateDeviceQueries","invalidatePrivacyQueries","invalidateSecurityQueries","invalidateStorageQueries","invalidatePaymentsQueries","invalidateConnectedAppsQueries","invalidateAuthMethodsQueries","upsertCachedUser","upsertCachedUsers","CLEARABLE_USER_FIELDS","clearedFieldsFromProfileUpdate","clearedFieldsFromAccountUpdate","useMutationStatus","useOnlineStatus","useOxyEvent","handleAuthError","isInvalidSessionError","isTimeoutOrNetworkError","extractErrorMessage","useFileFiltering","OXY_OAUTH_STATE_STORAGE_KEY","OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY","OxySignInButton","openOAuthPopup","OxyAuthPrompt","OxyOAuthCallback","OxyConsentScreen","RequireOxyAuth","FollowButton","FollowTargetButton","buildFollowMenuItems","resolveFollowPrimaryAction","FOLLOW_ACTION_LEAVES_ACTIVE","useFollowTarget","useFollowTargetStore","UNKNOWN_FOLLOW_STATUS","isFollowedGlobally","withApplicationMode","isCompleteFollowStatus","followRecordToStatus","followRecordsToStatusMap","PeableButton","OxyPayButton","LogoIcon","LogoText","ProfileButton","OxySignInPanel","OxySignUpPanel","OxyAccountPicker","OxyDeleteAccountPanel","OxyLinkCommonsPanel","OxyPasswordPanel","OxyAuthenticatorPanel","OxyAuthScreen","OxyAuthScreenHeader","OxyAuthLoading","OxyAuthTerms","OxySignInRequestSurface","useDeviceSwitcher","showBottomSheet","closeBottomSheet","useSurfaceHeader","SurfaceHeaderAction","openAccountDialog","closeAccountDialog","subscribeToAccountDialog","usePersonalPlans","usePersonalPlanSubscriptions","AccountInvitationAcceptance","DisplayCurrencySelector","useDisplayCurrency","useDisplayPrice"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA,SAASA,aAAa,QAAyB,cAAc;AAC7D,SAASC,QAAQ,QAAQ,cAAc;AACvCD,aAAa,CAACC,QAAQ,CAACC,EAAgB,CAAC;;AAExC;AACA;AACA;AACA,SAASC,OAAO,IAAIC,WAAW,QAAQ,gCAA6B;AACpE,SAASC,MAAM,QAAQ,4BAAyB;AAChD;AACA;AACA;AACA,SAASC,cAAc,EAAEC,uBAAuB,QAAQ,4BAAyB;;AAEjF;AACA;AACA;AACA,SACEC,aAAa,EACbC,cAAc,EACdC,gBAAgB,EAChBC,kBAAkB,EAClBC,sBAAsB,QACjB,uBAAc;AAUrB,SAASC,OAAO,QAAQ,uBAAoB;AAC5C;AACA;AACA;AACA,SACEC,eAAe,EACfC,gCAAgC,QAC3B,0CAAuC;AAO9C,SAASC,8BAA8B,QAAQ,oCAAiC;AAEhF;AACA;AACA;AACA,SAASC,yBAAyB,QAAQ,iCAA8B;;AAExE;AACA;AACA;AACA,SAASC,YAAY,QAAQ,0BAAuB;AACpD,SACEC,aAAa,EACbC,SAAS,IAAIC,cAAc,EAC3BC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,cAAc,EACdC,cAAc,EACdC,iBAAiB,EACjBC,kBAAkB,EAClBC,gBAAgB,QACX,2BAAwB;;AAE/B;AACA;AACA;AACA,SAAST,SAAS,EAAEU,mBAAmB,QAAQ,yBAAsB;AACrE,SAASC,kBAAkB,QAAQ,kCAA+B;AAClE,SAASC,SAAS,EAAEC,iBAAiB,EAAEC,qBAAqB,QAAQ,yBAAsB;AAC1F,SAASC,UAAU,QAAQ,0BAAuB;AAGlD;AACA;AACA;AACA,SACEC,cAAc,EACdC,eAAe,EACfC,cAAc,EACdC,WAAW,EACXC,iBAAiB,EACjBC,kBAAkB,EAClBC,kBAAkB,EAClBC,gBAAgB,QACX,yCAAsC;AAC7C,SACEC,WAAW,EACXC,UAAU,EACVC,iBAAiB,EACjBC,cAAc,EACdC,eAAe,EACfC,sBAAsB,QACjB,0CAAuC;AAC9C,SACEC,mBAAmB,EACnBC,yBAAyB,EACzBC,2BAA2B,QACtB,0CAAuC;AAC9C,SAASC,cAAc,EAAEC,gBAAgB,QAAQ,sCAAmC;AACpF,SACEC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,yBAAyB,QACpB,yCAAsC;;AAE7C;;AAeA;AACA;AACA;AACA,SACEC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,EACxBC,wBAAwB,EACxBC,gCAAgC,EAChCC,wBAAwB,EACxBC,qBAAqB,EACrBC,aAAa,QACR,6CAA0C;AACjD,SACEC,gBAAgB,EAChBC,gBAAgB,EAChBC,YAAY,EACZC,mBAAmB,EACnBC,eAAe,QACV,8CAA2C;AAClD,SACEC,qBAAqB,EACrBC,qBAAqB,QAChB,yCAAsC;AAM7C;AACA,SAASC,YAAY,QAAQ,sCAAmC;;AAEhE;AACA;AACA;AACA;AACA;AACA;AACA,SACEC,SAAS,EACTC,wBAAwB,EACxBC,qBAAqB,EACrBC,wBAAwB,EACxBC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,EACzBC,wBAAwB,EACxBC,yBAAyB,EACzBC,8BAA8B,EAC9BC,4BAA4B,QACvB,iCAA8B;;AAErC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SACEC,gBAAgB,EAChBC,iBAAiB,EACjBC,qBAAqB,EACrBC,8BAA8B,EAC9BC,8BAA8B,QACzB,iCAA8B;AAOrC;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAEhE,SAASC,eAAe,QAAQ,+BAA4B;AAC5D,SAASC,WAAW,QAAQ,2BAAwB;;AAEpD;AACA;AACA;AACA,SACEC,eAAe,EACfC,qBAAqB,EACrBC,uBAAuB,EACvBC,mBAAmB,QACd,6BAA0B;AAGjC;AACA;AACA;AACA,SAASC,gBAAgB,QAAQ,gCAA6B;AAG9D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,SACEC,2BAA2B,EAC3BC,mCAAmC,QAC9B,cAAc;AACrB,SAASjG,OAAO,IAAIkG,eAAe,QAAQ,oCAAiC;AAG5E;AACA;AACA;AACA;AACA,SAASC,cAAc,QAAQ,0BAAuB;AAgBtD,SAASC,aAAa,QAAQ,kCAA+B;AAE7D,SAASC,gBAAgB,QAAQ,qCAAkC;AAEnE,SAASC,gBAAgB,QAAQ,qCAAkC;AAQnE;AACA;AACA;AACA;AACA;AACA,SAASC,cAAc,QAAQ,mCAAgC;;AAE/D;;AAGA,SAASvG,OAAO,IAAIwG,YAAY,QAAQ,iCAA8B;AAMtE;AACA,SAASC,kBAAkB,QAAQ,uCAAoC;AACvE;AACE;AACA;AACA;AACA;AACA;AACAC,oBAAoB,EACpBC,0BAA0B,EAC1BC,2BAA2B,QACtB,gCAA6B;AAOpC,SAASC,eAAe,QAAQ,+BAA4B;AAE5D,SACEC,oBAAoB,EACpBC,qBAAqB;AACrB;AACA;AACA;AACAC,kBAAkB,EAClBC,mBAAmB;AACnB;AACA;AACAC,sBAAsB,EACtBC,oBAAoB,EACpBC,wBAAwB,QACnB,kCAA+B;AACtC,SAASpH,OAAO,IAAIqH,YAAY,QAAQ,iCAA8B;AAEtE;AACA,SAASrH,OAAO,IAAIsH,YAAY,QAAQ,iCAA8B;AACtE;;AAEA,SAASC,QAAQ,QAAQ,kCAA+B;AACxD,SAASC,QAAQ,QAAQ,kCAA+B;;AAExD;AACA;AACA;AACA,SAASxH,OAAO,IAAIyH,aAAa,QAAQ,kCAA+B;AAIxE;AACA;AACA;AACA,SAASC,cAAc,QAAQ,0CAAuC;AAEtE,SAASC,cAAc,QAAQ,0CAAuC;AAEtE,SAASC,gBAAgB,QAAQ,4CAAyC;AAE1E;AACA;AACA;AACA,SAASC,qBAAqB,QAAQ,iDAA8C;AAEpF,SAASC,mBAAmB,QAAQ,+CAA4C;AAEhF,SAASC,gBAAgB,QAAQ,4CAAyC;AAE1E,SAASC,qBAAqB,QAAQ,iDAA8C;AAEpF,SACEC,aAAa,EACbC,mBAAmB,EACnBC,cAAc,EACdC,YAAY,QACP,yCAAsC;AAG7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,uBAAuB,QAAQ,4CAAyC;AAIjF;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAGhE;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,uCAAoC;AAGtF;AACA;AACA;AACA,SAASC,gBAAgB,QAAmC,gCAA6B;AACzF,SACEC,mBAAmB,QAEd,wCAAqC;;AAE5C;AACA;AACA;AACA;AACA,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,wBAAwB,QACnB,yCAAsC;AAO7C,SACEC,gBAAgB,EAChBC,4BAA4B,QACvB,wCAAqC;AAC5C,SAASC,2BAA2B,QAAQ,gDAA6C;AAEzF,SAASC,uBAAuB,QAAQ,4CAAyC;AACjF,SAASC,kBAAkB,QAAQ,kCAA+B;AAClE,SAASC,eAAe,QAAQ,+BAA4B","ignoreList":[]}

package/lib/module/ui/appAssertion/AppAssertionContext.js

@@ -0,0 +1,72 @@
+"use strict";
+
+/**
+ * `useAppAssertion()` (ADR 0045): this app's Oxy-signed assertion of which app
+ * it is, for the signed-in session.
+ *
+ * `OxyProvider` mounts {@link AppAssertionProvider} itself and the manager
+ * obtains and refreshes the assertion on its own; an app never handles the
+ * proof. Something that calls a service which needs to know the app (Alia's
+ * SDK, for an agent confined to its application) attaches
+ * `await getAppAssertionHeaders()` to the request.
+ */
+
+import { createContext, useContext, useEffect, useMemo, useRef, useSyncExternalStore } from 'react';
+import { appIntegrityPlatform } from './appIntegrityPlatform';
+import { AppAssertionManager } from "./appAssertionManager.js";
+import { jsx as _jsx } from "react/jsx-runtime";
+const AppAssertionContext = /*#__PURE__*/createContext(null);
+export function AppAssertionProvider({
+  children,
+  oxyServices,
+  clientId,
+  userId,
+  sessionId,
+  storage,
+  storageKeyPrefix,
+  integrity = appIntegrityPlatform
+}) {
+  // Read only when an iOS install needs its App Attest key id, never in render.
+  const storageRef = useRef(storage);
+  useEffect(() => {
+    storageRef.current = storage;
+  }, [storage]);
+  const manager = useMemo(() => new AppAssertionManager({
+    oxyServices,
+    clientId,
+    integrity,
+    storage: () => storageRef.current,
+    storageKeyPrefix
+  }), [oxyServices, clientId, integrity, storageKeyPrefix]);
+  useEffect(() => {
+    manager.setSession(userId && sessionId ? {
+      userId,
+      sessionId
+    } : null);
+  }, [manager, userId, sessionId]);
+  useEffect(() => () => manager.dispose(), [manager]);
+  return /*#__PURE__*/_jsx(AppAssertionContext.Provider, {
+    value: manager,
+    children: children
+  });
+}
+export class AppAssertionProviderMissingError extends Error {
+  code = 'oxy_provider_missing';
+  constructor() {
+    super('useAppAssertion() was called outside <OxyProvider>.');
+    this.name = 'AppAssertionProviderMissingError';
+  }
+}
+
+/** This app's assertion of which app it is, kept current for the signed-in session. */
+export function useAppAssertion() {
+  const manager = useContext(AppAssertionContext);
+  if (!manager) throw new AppAssertionProviderMissingError();
+  const snapshot = useSyncExternalStore(manager.subscribe, manager.getSnapshot, manager.getSnapshot);
+  return {
+    ...snapshot,
+    getAppAssertion: manager.getAppAssertion,
+    getAppAssertionHeaders: manager.getAppAssertionHeaders
+  };
+}
+//# sourceMappingURL=AppAssertionContext.js.map

package/lib/module/ui/appAssertion/AppAssertionContext.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createContext","useContext","useEffect","useMemo","useRef","useSyncExternalStore","appIntegrityPlatform","AppAssertionManager","jsx","_jsx","AppAssertionContext","AppAssertionProvider","children","oxyServices","clientId","userId","sessionId","storage","storageKeyPrefix","integrity","storageRef","current","manager","setSession","dispose","Provider","value","AppAssertionProviderMissingError","Error","code","constructor","name","useAppAssertion","snapshot","subscribe","getSnapshot","getAppAssertion","getAppAssertionHeaders"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/AppAssertionContext.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SACEA,aAAa,EAEbC,UAAU,EACVC,SAAS,EACTC,OAAO,EACPC,MAAM,EACNC,oBAAoB,QACf,OAAO;AAEd,SAASC,oBAAoB,QAAQ,wBAAwB;AAC7D,SAASC,mBAAmB,QAAmC,0BAAuB;AAAC,SAAAC,GAAA,IAAAC,IAAA;AAGvF,MAAMC,mBAAmB,gBAAGV,aAAa,CAA6B,IAAI,CAAC;AAe3E,OAAO,SAASW,oBAAoBA,CAAC;EACnCC,QAAQ;EACRC,WAAW;EACXC,QAAQ;EACRC,MAAM;EACNC,SAAS;EACTC,OAAO;EACPC,gBAAgB;EAChBC,SAAS,GAAGb;AACa,CAAC,EAAE;EAC5B;EACA,MAAMc,UAAU,GAAGhB,MAAM,CAA0Ba,OAAO,CAAC;EAC3Df,SAAS,CAAC,MAAM;IACdkB,UAAU,CAACC,OAAO,GAAGJ,OAAO;EAC9B,CAAC,EAAE,CAACA,OAAO,CAAC,CAAC;EAEb,MAAMK,OAAO,GAAGnB,OAAO,CACrB,MACE,IAAII,mBAAmB,CAAC;IACtBM,WAAW;IACXC,QAAQ;IACRK,SAAS;IACTF,OAAO,EAAEA,CAAA,KAAMG,UAAU,CAACC,OAAO;IACjCH;EACF,CAAC,CAAC,EACJ,CAACL,WAAW,EAAEC,QAAQ,EAAEK,SAAS,EAAED,gBAAgB,CACrD,CAAC;EAEDhB,SAAS,CAAC,MAAM;IACdoB,OAAO,CAACC,UAAU,CAACR,MAAM,IAAIC,SAAS,GAAG;MAAED,MAAM;MAAEC;IAAU,CAAC,GAAG,IAAI,CAAC;EACxE,CAAC,EAAE,CAACM,OAAO,EAAEP,MAAM,EAAEC,SAAS,CAAC,CAAC;EAEhCd,SAAS,CAAC,MAAM,MAAMoB,OAAO,CAACE,OAAO,CAAC,CAAC,EAAE,CAACF,OAAO,CAAC,CAAC;EAEnD,oBAAOb,IAAA,CAACC,mBAAmB,CAACe,QAAQ;IAACC,KAAK,EAAEJ,OAAQ;IAAAV,QAAA,EAAEA;EAAQ,CAA+B,CAAC;AAChG;AASA,OAAO,MAAMe,gCAAgC,SAASC,KAAK,CAAC;EACjDC,IAAI,GAAG,sBAAsB;EAEtCC,WAAWA,CAAA,EAAG;IACZ,KAAK,CAAC,qDAAqD,CAAC;IAC5D,IAAI,CAACC,IAAI,GAAG,kCAAkC;EAChD;AACF;;AAEA;AACA,OAAO,SAASC,eAAeA,CAAA,EAA0B;EACvD,MAAMV,OAAO,GAAGrB,UAAU,CAACS,mBAAmB,CAAC;EAC/C,IAAI,CAACY,OAAO,EAAE,MAAM,IAAIK,gCAAgC,CAAC,CAAC;EAC1D,MAAMM,QAAQ,GAAG5B,oBAAoB,CACnCiB,OAAO,CAACY,SAAS,EACjBZ,OAAO,CAACa,WAAW,EACnBb,OAAO,CAACa,WACV,CAAC;EACD,OAAO;IACL,GAAGF,QAAQ;IACXG,eAAe,EAAEd,OAAO,CAACc,eAAe;IACxCC,sBAAsB,EAAEf,OAAO,CAACe;EAClC,CAAC;AACH","ignoreList":[]}

package/lib/module/ui/appAssertion/appAssertionManager.js

@@ -0,0 +1,304 @@
+"use strict";
+
+/**
+ * The app's assertion of which app it is (ADR 0045), obtained and refreshed for
+ * the signed-in session without any app code.
+ *
+ * One manager per `OxyProvider`. For the active session it resolves the app's
+ * application id from its registered `clientId`, proves the app by platform —
+ * the browser's `Origin` on the web, Play Integrity on Android, App Attest on
+ * iOS — trades the proof for an Oxy-signed `OXY-APP+JWT`, and refreshes it a
+ * minute before it expires. A session change drops the assertion at once: an
+ * assertion names exactly one person and one session.
+ *
+ * Outcomes are values, never thrown: `ready`, `unsupported` (this build cannot
+ * prove itself: no `clientId`, no native module, App Attest unavailable) or
+ * `unavailable` (Oxy refused or could not be reached). A refusal that will not
+ * change for this session (an unregistered origin or platform) is not retried
+ * until the session changes; anything else is retried with a backoff.
+ */
+
+import { OXY_APP_ASSERTION_HEADER } from '@oxy.so/contracts/client';
+/** Refresh this long before expiry. */
+const REFRESH_BEFORE_MS = 60_000;
+/** `getAppAssertion()` fetches anew when less than this is left. */
+const MIN_REMAINING_MS = 30_000;
+const RETRY_FIRST_MS = 30_000;
+const RETRY_MAX_MS = 15 * 60_000;
+
+/** Refusals that will not change for this session. */
+const PERMANENT_REFUSALS = new Set(['application_unavailable', 'session_other_application', 'platform_not_registered', 'origin_not_registered', 'integrity_unconfigured']);
+const IDLE = {
+  status: 'idle',
+  assertion: null,
+  applicationId: null,
+  platform: null,
+  expiresAt: null,
+  error: null
+};
+class Unsupported extends Error {
+  constructor(reason) {
+    super(reason);
+    this.reason = reason;
+  }
+}
+function errorCode(error) {
+  if (error instanceof Unsupported) return error.reason;
+  const code = error?.code;
+  return typeof code === 'string' && code.length > 0 ? code : 'request_failed';
+}
+export class AppAssertionManager {
+  snapshot = IDLE;
+  listeners = new Set();
+  session = null;
+  /** Bumped on every session change; a result for an older generation is dropped. */
+  generation = 0;
+  inflight = null;
+  timer = null;
+  retryMs = RETRY_FIRST_MS;
+  retryAt = 0;
+  applicationId = null;
+  preparedProject = null;
+  constructor(options) {
+    this.options = options;
+    this.now = options.now ?? Date.now;
+    this.setTimer = options.setTimer ?? ((run, ms) => setTimeout(run, ms));
+    this.clearTimer = options.clearTimer ?? (timer => clearTimeout(timer));
+  }
+  subscribe = listener => {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  };
+  getSnapshot = () => this.snapshot;
+
+  /**
+   * A current assertion for the active session, obtaining one when there is
+   * none or it is about to expire; `null` when this app cannot have one now.
+   */
+  getAppAssertion = async () => {
+    const current = this.snapshot;
+    if (current.status === 'ready' && current.assertion && current.expiresAt !== null && current.expiresAt - this.now() > MIN_REMAINING_MS) {
+      return current.assertion;
+    }
+    if (!this.session || current.status === 'unsupported') return null;
+    if (current.status === 'unavailable' && this.now() < this.retryAt) return null;
+    return this.refresh();
+  };
+
+  /**
+   * `{ 'X-Oxy-App-Assertion': <assertion> }` for a request to a service that
+   * needs to know the app (Alia), or `{}` when there is none.
+   */
+  getAppAssertionHeaders = async () => {
+    const assertion = await this.getAppAssertion();
+    return assertion ? {
+      [OXY_APP_ASSERTION_HEADER]: assertion
+    } : {};
+  };
+
+  /** Follow the active session; `null` when signed out or not yet able to call Oxy. */
+  setSession(session) {
+    const same = session?.userId === this.session?.userId && session?.sessionId === this.session?.sessionId;
+    if (same) return;
+    this.session = session;
+    this.generation += 1;
+    this.inflight = null;
+    this.retryMs = RETRY_FIRST_MS;
+    this.retryAt = 0;
+    this.cancelTimer();
+    this.publish(IDLE);
+    if (session) void this.refresh();
+  }
+
+  /** Stop all work. A later `setSession` starts again. */
+  dispose() {
+    this.session = null;
+    this.generation += 1;
+    this.inflight = null;
+    this.cancelTimer();
+  }
+  refresh() {
+    if (this.inflight) return this.inflight;
+    const generation = this.generation;
+    const run = this.obtain().then(answer => {
+      if (generation !== this.generation) return null;
+      const expiresAt = Date.parse(answer.expiresAt);
+      this.retryMs = RETRY_FIRST_MS;
+      this.publish({
+        status: 'ready',
+        assertion: answer.assertion,
+        applicationId: answer.applicationId,
+        platform: answer.platform,
+        expiresAt,
+        error: null
+      });
+      this.schedule(Math.max(expiresAt - this.now() - REFRESH_BEFORE_MS, MIN_REMAINING_MS));
+      return answer.assertion;
+    }).catch(error => {
+      if (generation !== this.generation) return null;
+      const code = errorCode(error);
+      const unsupported = error instanceof Unsupported;
+      const current = this.snapshot;
+      if (!unsupported && !PERMANENT_REFUSALS.has(code) && current.status === 'ready' && current.expiresAt !== null && current.expiresAt - this.now() > MIN_REMAINING_MS) {
+        // The assertion in hand is still good: keep it, and try again soon.
+        this.schedule(Math.min(RETRY_FIRST_MS, current.expiresAt - this.now() - MIN_REMAINING_MS));
+        return current.assertion;
+      }
+      this.publish({
+        ...IDLE,
+        status: unsupported ? 'unsupported' : 'unavailable',
+        platform: this.options.integrity.platform,
+        error: code
+      });
+      if (!unsupported) {
+        if (PERMANENT_REFUSALS.has(code)) {
+          this.retryAt = Number.POSITIVE_INFINITY;
+        } else {
+          this.retryAt = this.now() + this.retryMs;
+          this.schedule(this.retryMs);
+          this.retryMs = Math.min(this.retryMs * 2, RETRY_MAX_MS);
+        }
+      }
+      return null;
+    }).finally(() => {
+      if (this.inflight === run) this.inflight = null;
+    });
+    this.inflight = run;
+    if (this.snapshot.status !== 'ready') this.publish({
+      ...this.snapshot,
+      status: 'pending'
+    });
+    return run;
+  }
+  async obtain() {
+    const applicationId = await this.resolveApplicationId();
+    const {
+      platform
+    } = this.options.integrity;
+    const assertions = this.options.oxyServices.apps.assertions;
+    if (platform === 'web') return assertions.create({
+      applicationId,
+      platform: 'web'
+    });
+    const integrity = await this.options.integrity.loadIntegrity();
+    if (!integrity) throw new Unsupported('integrity_module_unavailable');
+    if (platform === 'android') return this.proveAndroid(applicationId, integrity);
+    if (!integrity.isSupported) throw new Unsupported('app_attest_unsupported');
+    return this.proveIos(applicationId, integrity);
+  }
+  resolveApplicationId() {
+    const clientId = this.options.clientId;
+    if (!clientId) return Promise.reject(new Unsupported('client_id_missing'));
+    if (this.applicationId?.clientId !== clientId) {
+      const id = this.options.oxyServices.apps.getPublic(clientId).then(app => app.id);
+      id.catch(() => {
+        if (this.applicationId?.id === id) this.applicationId = null;
+      });
+      this.applicationId = {
+        clientId,
+        id
+      };
+    }
+    return this.applicationId.id;
+  }
+  async proveAndroid(applicationId, integrity) {
+    const assertions = this.options.oxyServices.apps.assertions;
+    const challenge = await assertions.challenge({
+      applicationId,
+      platform: 'android'
+    });
+    if (!challenge.cloudProjectNumber) throw new Unsupported('integrity_unconfigured');
+    try {
+      if (this.preparedProject !== challenge.cloudProjectNumber) {
+        await integrity.prepareIntegrityTokenProviderAsync(challenge.cloudProjectNumber);
+        this.preparedProject = challenge.cloudProjectNumber;
+      }
+      const integrityToken = await integrity.requestIntegrityCheckAsync(challenge.requestHash);
+      return await assertions.create({
+        applicationId,
+        platform: 'android',
+        proof: {
+          challenge: challenge.challenge,
+          integrityToken
+        }
+      });
+    } catch (error) {
+      // A provider Google invalidated is prepared again on the next attempt.
+      this.preparedProject = null;
+      throw error;
+    }
+  }
+  async proveIos(applicationId, integrity) {
+    const keyName = `${this.options.storageKeyPrefix}_app_attest_key_${applicationId}`;
+    const storage = this.options.storage();
+    const assertOnce = async keyId => {
+      const assertions = this.options.oxyServices.apps.assertions;
+      const challenge = await assertions.challenge({
+        applicationId,
+        platform: 'ios',
+        purpose: 'assertion'
+      });
+      const assertion = await integrity.generateAssertionAsync(keyId, challenge.requestHash);
+      return assertions.create({
+        applicationId,
+        platform: 'ios',
+        proof: {
+          challenge: challenge.challenge,
+          keyId,
+          assertion
+        }
+      });
+    };
+    const stored = await storage?.getItem(keyName).catch(() => null);
+    if (stored) {
+      try {
+        return await assertOnce(stored);
+      } catch (error) {
+        // Oxy no longer knows the key (swept, or never registered): attest a new one.
+        if (errorCode(error) !== 'attest_key_unknown') throw error;
+        await storage?.removeItem(keyName).catch(() => undefined);
+      }
+    }
+    const keyId = await this.attestKey(applicationId, integrity);
+    await storage?.setItem(keyName, keyId).catch(() => undefined);
+    return assertOnce(keyId);
+  }
+  async attestKey(applicationId, integrity) {
+    const assertions = this.options.oxyServices.apps.assertions;
+    const keyId = await integrity.generateKeyAsync();
+    const challenge = await assertions.challenge({
+      applicationId,
+      platform: 'ios',
+      purpose: 'attest_key'
+    });
+    const attestation = await integrity.attestKeyAsync(keyId, challenge.requestHash);
+    await assertions.registerAttestKey({
+      applicationId,
+      keyId,
+      challenge: challenge.challenge,
+      attestation
+    });
+    return keyId;
+  }
+  schedule(ms) {
+    this.cancelTimer();
+    const generation = this.generation;
+    this.timer = this.setTimer(() => {
+      this.timer = null;
+      if (generation === this.generation && this.session) void this.refresh();
+    }, ms);
+  }
+  cancelTimer() {
+    if (this.timer !== null) {
+      this.clearTimer(this.timer);
+      this.timer = null;
+    }
+  }
+  publish(next) {
+    this.snapshot = next;
+    for (const listener of this.listeners) listener();
+  }
+}
+//# sourceMappingURL=appAssertionManager.js.map

package/lib/module/ui/appAssertion/appAssertionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["OXY_APP_ASSERTION_HEADER","REFRESH_BEFORE_MS","MIN_REMAINING_MS","RETRY_FIRST_MS","RETRY_MAX_MS","PERMANENT_REFUSALS","Set","IDLE","status","assertion","applicationId","platform","expiresAt","error","Unsupported","Error","constructor","reason","errorCode","code","length","AppAssertionManager","snapshot","listeners","session","generation","inflight","timer","retryMs","retryAt","preparedProject","options","now","Date","setTimer","run","ms","setTimeout","clearTimer","clearTimeout","subscribe","listener","add","delete","getSnapshot","getAppAssertion","current","refresh","getAppAssertionHeaders","setSession","same","userId","sessionId","cancelTimer","publish","dispose","obtain","then","answer","parse","schedule","Math","max","catch","unsupported","has","min","integrity","Number","POSITIVE_INFINITY","finally","resolveApplicationId","assertions","oxyServices","apps","create","loadIntegrity","proveAndroid","isSupported","proveIos","clientId","Promise","reject","id","getPublic","app","challenge","cloudProjectNumber","prepareIntegrityTokenProviderAsync","integrityToken","requestIntegrityCheckAsync","requestHash","proof","keyName","storageKeyPrefix","storage","assertOnce","keyId","purpose","generateAssertionAsync","stored","getItem","removeItem","undefined","attestKey","setItem","generateKeyAsync","attestation","attestKeyAsync","registerAttestKey","next"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appAssertionManager.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,wBAAwB,QAAQ,0BAA0B;AAoCnE;AACA,MAAMC,iBAAiB,GAAG,MAAM;AAChC;AACA,MAAMC,gBAAgB,GAAG,MAAM;AAC/B,MAAMC,cAAc,GAAG,MAAM;AAC7B,MAAMC,YAAY,GAAG,EAAE,GAAG,MAAM;;AAEhC;AACA,MAAMC,kBAAkB,GAAG,IAAIC,GAAG,CAAC,CACjC,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,CACzB,CAAC;AAEF,MAAMC,IAA0B,GAAG;EACjCC,MAAM,EAAE,MAAM;EACdC,SAAS,EAAE,IAAI;EACfC,aAAa,EAAE,IAAI;EACnBC,QAAQ,EAAE,IAAI;EACdC,SAAS,EAAE,IAAI;EACfC,KAAK,EAAE;AACT,CAAC;AAED,MAAMC,WAAW,SAASC,KAAK,CAAC;EAC9BC,WAAWA,CAAUC,MAAc,EAAE;IACnC,KAAK,CAACA,MAAM,CAAC;IAAC,KADKA,MAAc,GAAdA,MAAc;EAEnC;AACF;AAEA,SAASC,SAASA,CAACL,KAAc,EAAU;EACzC,IAAIA,KAAK,YAAYC,WAAW,EAAE,OAAOD,KAAK,CAACI,MAAM;EACrD,MAAME,IAAI,GAAIN,KAAK,EAAgCM,IAAI;EACvD,OAAO,OAAOA,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACC,MAAM,GAAG,CAAC,GAAGD,IAAI,GAAG,gBAAgB;AAC9E;AAEA,OAAO,MAAME,mBAAmB,CAAC;EACvBC,QAAQ,GAAyBf,IAAI;EAC5BgB,SAAS,GAAG,IAAIjB,GAAG,CAAa,CAAC;EAC1CkB,OAAO,GAA+B,IAAI;EAClD;EACQC,UAAU,GAAG,CAAC;EACdC,QAAQ,GAAkC,IAAI;EAC9CC,KAAK,GAAY,IAAI;EACrBC,OAAO,GAAGzB,cAAc;EACxB0B,OAAO,GAAG,CAAC;EACXnB,aAAa,GAAqD,IAAI;EACtEoB,eAAe,GAAkB,IAAI;EAK7Cd,WAAWA,CAAkBe,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;IAC9D,IAAI,CAACC,GAAG,GAAGD,OAAO,CAACC,GAAG,IAAIC,IAAI,CAACD,GAAG;IAClC,IAAI,CAACE,QAAQ,GAAGH,OAAO,CAACG,QAAQ,KAAK,CAACC,GAAG,EAAEC,EAAE,KAAKC,UAAU,CAACF,GAAG,EAAEC,EAAE,CAAC,CAAC;IACtE,IAAI,CAACE,UAAU,GACbP,OAAO,CAACO,UAAU,KAAMX,KAAK,IAAKY,YAAY,CAACZ,KAAsC,CAAC,CAAC;EAC3F;EAESa,SAAS,GAAIC,QAAoB,IAAmB;IAC3D,IAAI,CAAClB,SAAS,CAACmB,GAAG,CAACD,QAAQ,CAAC;IAC5B,OAAO,MAAM;MACX,IAAI,CAAClB,SAAS,CAACoB,MAAM,CAACF,QAAQ,CAAC;IACjC,CAAC;EACH,CAAC;EAEQG,WAAW,GAAGA,CAAA,KAA4B,IAAI,CAACtB,QAAQ;;EAEhE;AACF;AACA;AACA;EACWuB,eAAe,GAAG,MAAAA,CAAA,KAAoC;IAC7D,MAAMC,OAAO,GAAG,IAAI,CAACxB,QAAQ;IAC7B,IACEwB,OAAO,CAACtC,MAAM,KAAK,OAAO,IAC1BsC,OAAO,CAACrC,SAAS,IACjBqC,OAAO,CAAClC,SAAS,KAAK,IAAI,IAC1BkC,OAAO,CAAClC,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG9B,gBAAgB,EACjD;MACA,OAAO4C,OAAO,CAACrC,SAAS;IAC1B;IACA,IAAI,CAAC,IAAI,CAACe,OAAO,IAAIsB,OAAO,CAACtC,MAAM,KAAK,aAAa,EAAE,OAAO,IAAI;IAClE,IAAIsC,OAAO,CAACtC,MAAM,KAAK,aAAa,IAAI,IAAI,CAACwB,GAAG,CAAC,CAAC,GAAG,IAAI,CAACH,OAAO,EAAE,OAAO,IAAI;IAC9E,OAAO,IAAI,CAACkB,OAAO,CAAC,CAAC;EACvB,CAAC;;EAED;AACF;AACA;AACA;EACWC,sBAAsB,GAAG,MAAAA,CAAA,KAA6C;IAC7E,MAAMvC,SAAS,GAAG,MAAM,IAAI,CAACoC,eAAe,CAAC,CAAC;IAC9C,OAAOpC,SAAS,GAAG;MAAE,CAACT,wBAAwB,GAAGS;IAAU,CAAC,GAAG,CAAC,CAAC;EACnE,CAAC;;EAED;EACAwC,UAAUA,CAACzB,OAAmC,EAAQ;IACpD,MAAM0B,IAAI,GACR1B,OAAO,EAAE2B,MAAM,KAAK,IAAI,CAAC3B,OAAO,EAAE2B,MAAM,IAAI3B,OAAO,EAAE4B,SAAS,KAAK,IAAI,CAAC5B,OAAO,EAAE4B,SAAS;IAC5F,IAAIF,IAAI,EAAE;IACV,IAAI,CAAC1B,OAAO,GAAGA,OAAO;IACtB,IAAI,CAACC,UAAU,IAAI,CAAC;IACpB,IAAI,CAACC,QAAQ,GAAG,IAAI;IACpB,IAAI,CAACE,OAAO,GAAGzB,cAAc;IAC7B,IAAI,CAAC0B,OAAO,GAAG,CAAC;IAChB,IAAI,CAACwB,WAAW,CAAC,CAAC;IAClB,IAAI,CAACC,OAAO,CAAC/C,IAAI,CAAC;IAClB,IAAIiB,OAAO,EAAE,KAAK,IAAI,CAACuB,OAAO,CAAC,CAAC;EAClC;;EAEA;EACAQ,OAAOA,CAAA,EAAS;IACd,IAAI,CAAC/B,OAAO,GAAG,IAAI;IACnB,IAAI,CAACC,UAAU,IAAI,CAAC;IACpB,IAAI,CAACC,QAAQ,GAAG,IAAI;IACpB,IAAI,CAAC2B,WAAW,CAAC,CAAC;EACpB;EAEQN,OAAOA,CAAA,EAA2B;IACxC,IAAI,IAAI,CAACrB,QAAQ,EAAE,OAAO,IAAI,CAACA,QAAQ;IACvC,MAAMD,UAAU,GAAG,IAAI,CAACA,UAAU;IAClC,MAAMU,GAAG,GAAG,IAAI,CAACqB,MAAM,CAAC,CAAC,CACtBC,IAAI,CAAEC,MAAM,IAAK;MAChB,IAAIjC,UAAU,KAAK,IAAI,CAACA,UAAU,EAAE,OAAO,IAAI;MAC/C,MAAMb,SAAS,GAAGqB,IAAI,CAAC0B,KAAK,CAACD,MAAM,CAAC9C,SAAS,CAAC;MAC9C,IAAI,CAACgB,OAAO,GAAGzB,cAAc;MAC7B,IAAI,CAACmD,OAAO,CAAC;QACX9C,MAAM,EAAE,OAAO;QACfC,SAAS,EAAEiD,MAAM,CAACjD,SAAS;QAC3BC,aAAa,EAAEgD,MAAM,CAAChD,aAAa;QACnCC,QAAQ,EAAE+C,MAAM,CAAC/C,QAAQ;QACzBC,SAAS;QACTC,KAAK,EAAE;MACT,CAAC,CAAC;MACF,IAAI,CAAC+C,QAAQ,CAACC,IAAI,CAACC,GAAG,CAAClD,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG/B,iBAAiB,EAAEC,gBAAgB,CAAC,CAAC;MACrF,OAAOwD,MAAM,CAACjD,SAAS;IACzB,CAAC,CAAC,CACDsD,KAAK,CAAElD,KAAc,IAAK;MACzB,IAAIY,UAAU,KAAK,IAAI,CAACA,UAAU,EAAE,OAAO,IAAI;MAC/C,MAAMN,IAAI,GAAGD,SAAS,CAACL,KAAK,CAAC;MAC7B,MAAMmD,WAAW,GAAGnD,KAAK,YAAYC,WAAW;MAChD,MAAMgC,OAAO,GAAG,IAAI,CAACxB,QAAQ;MAC7B,IACE,CAAC0C,WAAW,IACZ,CAAC3D,kBAAkB,CAAC4D,GAAG,CAAC9C,IAAI,CAAC,IAC7B2B,OAAO,CAACtC,MAAM,KAAK,OAAO,IAC1BsC,OAAO,CAAClC,SAAS,KAAK,IAAI,IAC1BkC,OAAO,CAAClC,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG9B,gBAAgB,EACjD;QACA;QACA,IAAI,CAAC0D,QAAQ,CACXC,IAAI,CAACK,GAAG,CAAC/D,cAAc,EAAE2C,OAAO,CAAClC,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG9B,gBAAgB,CAC5E,CAAC;QACD,OAAO4C,OAAO,CAACrC,SAAS;MAC1B;MACA,IAAI,CAAC6C,OAAO,CAAC;QACX,GAAG/C,IAAI;QACPC,MAAM,EAAEwD,WAAW,GAAG,aAAa,GAAG,aAAa;QACnDrD,QAAQ,EAAE,IAAI,CAACoB,OAAO,CAACoC,SAAS,CAACxD,QAAQ;QACzCE,KAAK,EAAEM;MACT,CAAC,CAAC;MACF,IAAI,CAAC6C,WAAW,EAAE;QAChB,IAAI3D,kBAAkB,CAAC4D,GAAG,CAAC9C,IAAI,CAAC,EAAE;UAChC,IAAI,CAACU,OAAO,GAAGuC,MAAM,CAACC,iBAAiB;QACzC,CAAC,MAAM;UACL,IAAI,CAACxC,OAAO,GAAG,IAAI,CAACG,GAAG,CAAC,CAAC,GAAG,IAAI,CAACJ,OAAO;UACxC,IAAI,CAACgC,QAAQ,CAAC,IAAI,CAAChC,OAAO,CAAC;UAC3B,IAAI,CAACA,OAAO,GAAGiC,IAAI,CAACK,GAAG,CAAC,IAAI,CAACtC,OAAO,GAAG,CAAC,EAAExB,YAAY,CAAC;QACzD;MACF;MACA,OAAO,IAAI;IACb,CAAC,CAAC,CACDkE,OAAO,CAAC,MAAM;MACb,IAAI,IAAI,CAAC5C,QAAQ,KAAKS,GAAG,EAAE,IAAI,CAACT,QAAQ,GAAG,IAAI;IACjD,CAAC,CAAC;IACJ,IAAI,CAACA,QAAQ,GAAGS,GAAG;IACnB,IAAI,IAAI,CAACb,QAAQ,CAACd,MAAM,KAAK,OAAO,EAAE,IAAI,CAAC8C,OAAO,CAAC;MAAE,GAAG,IAAI,CAAChC,QAAQ;MAAEd,MAAM,EAAE;IAAU,CAAC,CAAC;IAC3F,OAAO2B,GAAG;EACZ;EAEA,MAAcqB,MAAMA,CAAA,EAAkC;IACpD,MAAM9C,aAAa,GAAG,MAAM,IAAI,CAAC6D,oBAAoB,CAAC,CAAC;IACvD,MAAM;MAAE5D;IAAS,CAAC,GAAG,IAAI,CAACoB,OAAO,CAACoC,SAAS;IAC3C,MAAMK,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;IAC3D,IAAI7D,QAAQ,KAAK,KAAK,EAAE,OAAO6D,UAAU,CAACG,MAAM,CAAC;MAAEjE,aAAa;MAAEC,QAAQ,EAAE;IAAM,CAAC,CAAC;IAEpF,MAAMwD,SAAS,GAAG,MAAM,IAAI,CAACpC,OAAO,CAACoC,SAAS,CAACS,aAAa,CAAC,CAAC;IAC9D,IAAI,CAACT,SAAS,EAAE,MAAM,IAAIrD,WAAW,CAAC,8BAA8B,CAAC;IACrE,IAAIH,QAAQ,KAAK,SAAS,EAAE,OAAO,IAAI,CAACkE,YAAY,CAACnE,aAAa,EAAEyD,SAAS,CAAC;IAC9E,IAAI,CAACA,SAAS,CAACW,WAAW,EAAE,MAAM,IAAIhE,WAAW,CAAC,wBAAwB,CAAC;IAC3E,OAAO,IAAI,CAACiE,QAAQ,CAACrE,aAAa,EAAEyD,SAAS,CAAC;EAChD;EAEQI,oBAAoBA,CAAA,EAAoB;IAC9C,MAAMS,QAAQ,GAAG,IAAI,CAACjD,OAAO,CAACiD,QAAQ;IACtC,IAAI,CAACA,QAAQ,EAAE,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIpE,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAACJ,aAAa,EAAEsE,QAAQ,KAAKA,QAAQ,EAAE;MAC7C,MAAMG,EAAE,GAAG,IAAI,CAACpD,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACU,SAAS,CAACJ,QAAQ,CAAC,CAACvB,IAAI,CAAE4B,GAAG,IAAKA,GAAG,CAACF,EAAE,CAAC;MAClFA,EAAE,CAACpB,KAAK,CAAC,MAAM;QACb,IAAI,IAAI,CAACrD,aAAa,EAAEyE,EAAE,KAAKA,EAAE,EAAE,IAAI,CAACzE,aAAa,GAAG,IAAI;MAC9D,CAAC,CAAC;MACF,IAAI,CAACA,aAAa,GAAG;QAAEsE,QAAQ;QAAEG;MAAG,CAAC;IACvC;IACA,OAAO,IAAI,CAACzE,aAAa,CAACyE,EAAE;EAC9B;EAEA,MAAcN,YAAYA,CACxBnE,aAAqB,EACrByD,SAA6B,EACE;IAC/B,MAAMK,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;IAC3D,MAAMc,SAAS,GAAG,MAAMd,UAAU,CAACc,SAAS,CAAC;MAAE5E,aAAa;MAAEC,QAAQ,EAAE;IAAU,CAAC,CAAC;IACpF,IAAI,CAAC2E,SAAS,CAACC,kBAAkB,EAAE,MAAM,IAAIzE,WAAW,CAAC,wBAAwB,CAAC;IAClF,IAAI;MACF,IAAI,IAAI,CAACgB,eAAe,KAAKwD,SAAS,CAACC,kBAAkB,EAAE;QACzD,MAAMpB,SAAS,CAACqB,kCAAkC,CAACF,SAAS,CAACC,kBAAkB,CAAC;QAChF,IAAI,CAACzD,eAAe,GAAGwD,SAAS,CAACC,kBAAkB;MACrD;MACA,MAAME,cAAc,GAAG,MAAMtB,SAAS,CAACuB,0BAA0B,CAACJ,SAAS,CAACK,WAAW,CAAC;MACxF,OAAO,MAAMnB,UAAU,CAACG,MAAM,CAAC;QAC7BjE,aAAa;QACbC,QAAQ,EAAE,SAAS;QACnBiF,KAAK,EAAE;UAAEN,SAAS,EAAEA,SAAS,CAACA,SAAS;UAAEG;QAAe;MAC1D,CAAC,CAAC;IACJ,CAAC,CAAC,OAAO5E,KAAK,EAAE;MACd;MACA,IAAI,CAACiB,eAAe,GAAG,IAAI;MAC3B,MAAMjB,KAAK;IACb;EACF;EAEA,MAAckE,QAAQA,CACpBrE,aAAqB,EACrByD,SAA6B,EACE;IAC/B,MAAM0B,OAAO,GAAG,GAAG,IAAI,CAAC9D,OAAO,CAAC+D,gBAAgB,mBAAmBpF,aAAa,EAAE;IAClF,MAAMqF,OAAO,GAAG,IAAI,CAAChE,OAAO,CAACgE,OAAO,CAAC,CAAC;IACtC,MAAMC,UAAU,GAAG,MAAOC,KAAa,IAAK;MAC1C,MAAMzB,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;MAC3D,MAAMc,SAAS,GAAG,MAAMd,UAAU,CAACc,SAAS,CAAC;QAC3C5E,aAAa;QACbC,QAAQ,EAAE,KAAK;QACfuF,OAAO,EAAE;MACX,CAAC,CAAC;MACF,MAAMzF,SAAS,GAAG,MAAM0D,SAAS,CAACgC,sBAAsB,CAACF,KAAK,EAAEX,SAAS,CAACK,WAAW,CAAC;MACtF,OAAOnB,UAAU,CAACG,MAAM,CAAC;QACvBjE,aAAa;QACbC,QAAQ,EAAE,KAAK;QACfiF,KAAK,EAAE;UAAEN,SAAS,EAAEA,SAAS,CAACA,SAAS;UAAEW,KAAK;UAAExF;QAAU;MAC5D,CAAC,CAAC;IACJ,CAAC;IAED,MAAM2F,MAAM,GAAG,MAAML,OAAO,EAAEM,OAAO,CAACR,OAAO,CAAC,CAAC9B,KAAK,CAAC,MAAM,IAAI,CAAC;IAChE,IAAIqC,MAAM,EAAE;MACV,IAAI;QACF,OAAO,MAAMJ,UAAU,CAACI,MAAM,CAAC;MACjC,CAAC,CAAC,OAAOvF,KAAK,EAAE;QACd;QACA,IAAIK,SAAS,CAACL,KAAK,CAAC,KAAK,oBAAoB,EAAE,MAAMA,KAAK;QAC1D,MAAMkF,OAAO,EAAEO,UAAU,CAACT,OAAO,CAAC,CAAC9B,KAAK,CAAC,MAAMwC,SAAS,CAAC;MAC3D;IACF;IACA,MAAMN,KAAK,GAAG,MAAM,IAAI,CAACO,SAAS,CAAC9F,aAAa,EAAEyD,SAAS,CAAC;IAC5D,MAAM4B,OAAO,EAAEU,OAAO,CAACZ,OAAO,EAAEI,KAAK,CAAC,CAAClC,KAAK,CAAC,MAAMwC,SAAS,CAAC;IAC7D,OAAOP,UAAU,CAACC,KAAK,CAAC;EAC1B;EAEA,MAAcO,SAASA,CAAC9F,aAAqB,EAAEyD,SAA6B,EAAmB;IAC7F,MAAMK,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;IAC3D,MAAMyB,KAAK,GAAG,MAAM9B,SAAS,CAACuC,gBAAgB,CAAC,CAAC;IAChD,MAAMpB,SAAS,GAAG,MAAMd,UAAU,CAACc,SAAS,CAAC;MAC3C5E,aAAa;MACbC,QAAQ,EAAE,KAAK;MACfuF,OAAO,EAAE;IACX,CAAC,CAAC;IACF,MAAMS,WAAW,GAAG,MAAMxC,SAAS,CAACyC,cAAc,CAACX,KAAK,EAAEX,SAAS,CAACK,WAAW,CAAC;IAChF,MAAMnB,UAAU,CAACqC,iBAAiB,CAAC;MACjCnG,aAAa;MACbuF,KAAK;MACLX,SAAS,EAAEA,SAAS,CAACA,SAAS;MAC9BqB;IACF,CAAC,CAAC;IACF,OAAOV,KAAK;EACd;EAEQrC,QAAQA,CAACxB,EAAU,EAAQ;IACjC,IAAI,CAACiB,WAAW,CAAC,CAAC;IAClB,MAAM5B,UAAU,GAAG,IAAI,CAACA,UAAU;IAClC,IAAI,CAACE,KAAK,GAAG,IAAI,CAACO,QAAQ,CAAC,MAAM;MAC/B,IAAI,CAACP,KAAK,GAAG,IAAI;MACjB,IAAIF,UAAU,KAAK,IAAI,CAACA,UAAU,IAAI,IAAI,CAACD,OAAO,EAAE,KAAK,IAAI,CAACuB,OAAO,CAAC,CAAC;IACzE,CAAC,EAAEX,EAAE,CAAC;EACR;EAEQiB,WAAWA,CAAA,EAAS;IAC1B,IAAI,IAAI,CAAC1B,KAAK,KAAK,IAAI,EAAE;MACvB,IAAI,CAACW,UAAU,CAAC,IAAI,CAACX,KAAK,CAAC;MAC3B,IAAI,CAACA,KAAK,GAAG,IAAI;IACnB;EACF;EAEQ2B,OAAOA,CAACwD,IAA0B,EAAQ;IAChD,IAAI,CAACxF,QAAQ,GAAGwF,IAAI;IACpB,KAAK,MAAMrE,QAAQ,IAAI,IAAI,CAAClB,SAAS,EAAEkB,QAAQ,CAAC,CAAC;EACnD;AACF","ignoreList":[]}

package/lib/module/ui/appAssertion/appIntegrityPlatform.js

@@ -0,0 +1,14 @@
+"use strict";
+
+/**
+ * Web: the app proves itself with the browser's `Origin`, which Oxy reads from
+ * the request itself (ADR 0045). Nothing to load.
+ *
+ * Native builds resolve `appIntegrityPlatform.native.ts` instead.
+ */
+
+export const appIntegrityPlatform = {
+  platform: 'web',
+  loadIntegrity: async () => null
+};
+//# sourceMappingURL=appIntegrityPlatform.js.map

package/lib/module/ui/appAssertion/appIntegrityPlatform.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["appIntegrityPlatform","platform","loadIntegrity"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appIntegrityPlatform.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAGA,OAAO,MAAMA,oBAA0C,GAAG;EACxDC,QAAQ,EAAE,KAAK;EACfC,aAAa,EAAE,MAAAA,CAAA,KAAY;AAC7B,CAAC","ignoreList":[]}

package/lib/module/ui/appAssertion/appIntegrityPlatform.native.js

@@ -0,0 +1,26 @@
+"use strict";
+
+/**
+ * iOS and Android: the app proves itself with App Attest or Play Integrity
+ * through `@expo/app-integrity` (ADR 0045).
+ *
+ * The module is loaded lazily, and its `import()` is a direct statement of a
+ * `try` block — the shape Metro marks OPTIONAL — so an app bundle that lacks
+ * the package, or a binary built before it was added (an over-the-air update
+ * of the JavaScript alone), still boots: `requireNativeModule` throws inside
+ * the import, and the app simply has no assertion.
+ */
+import { Platform } from 'react-native';
+async function loadIntegrity() {
+  try {
+    const integrity = await import('@expo/app-integrity');
+    return integrity;
+  } catch {
+    return null;
+  }
+}
+export const appIntegrityPlatform = {
+  platform: Platform.OS === 'ios' ? 'ios' : Platform.OS === 'android' ? 'android' : 'web',
+  loadIntegrity: Platform.OS === 'ios' || Platform.OS === 'android' ? loadIntegrity : async () => null
+};
+//# sourceMappingURL=appIntegrityPlatform.native.js.map

package/lib/module/ui/appAssertion/appIntegrityPlatform.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Platform","loadIntegrity","integrity","appIntegrityPlatform","platform","OS"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appIntegrityPlatform.native.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,QAAQ,QAAQ,cAAc;AAGvC,eAAeC,aAAaA,CAAA,EAAuC;EACjE,IAAI;IACF,MAAMC,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;IACrD,OAAOA,SAAS;EAClB,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;AAEA,OAAO,MAAMC,oBAA0C,GAAG;EACxDC,QAAQ,EAAEJ,QAAQ,CAACK,EAAE,KAAK,KAAK,GAAG,KAAK,GAAGL,QAAQ,CAACK,EAAE,KAAK,SAAS,GAAG,SAAS,GAAG,KAAK;EACvFJ,aAAa,EACXD,QAAQ,CAACK,EAAE,KAAK,KAAK,IAAIL,QAAQ,CAACK,EAAE,KAAK,SAAS,GAAGJ,aAAa,GAAG,YAAY;AACrF,CAAC","ignoreList":[]}

package/lib/module/ui/appAssertion/appIntegrityTypes.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=appIntegrityTypes.js.map

package/lib/module/ui/appAssertion/appIntegrityTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appIntegrityTypes.ts"],"mappings":"","ignoreList":[]}

package/lib/module/ui/components/AccountInvitationAcceptance.js

@@ -0,0 +1,94 @@
+"use strict";
+
+import { useEffect, useState } from 'react';
+import { View } from 'react-native';
+import { Text } from '@oxy.so/bloom/typography';
+import { Button } from '@oxy.so/bloom/button';
+import { getNormalizedUserHandle } from '@oxy.so/core';
+import { useOxy } from "../context/OxyContext.js";
+
+/** The link never grants access on navigation, preview, sign-in or account switching. */
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+export function AccountInvitationAcceptance({
+  token
+}) {
+  return /*#__PURE__*/_jsx(InvitationContent, {
+    token: token
+  }, token);
+}
+function InvitationContent({
+  token
+}) {
+  const {
+    oxyServices,
+    user,
+    canUsePrivateApi,
+    openAccountDialog
+  } = useOxy();
+  const [preview, setPreview] = useState(null);
+  const [error, setError] = useState('');
+  const [busy, setBusy] = useState(false);
+  const [accepted, setAccepted] = useState(false);
+  useEffect(() => {
+    let alive = true;
+    setPreview(null);
+    setError('');
+    if (canUsePrivateApi && token) {
+      oxyServices.accounts.invitations.preview(token).then(value => {
+        if (alive) setPreview(value);
+      }).catch(reason => {
+        if (alive) setError(reason instanceof Error ? reason.message : 'Invitation unavailable');
+      });
+    }
+    return () => {
+      alive = false;
+    };
+  }, [oxyServices, canUsePrivateApi, token]);
+  const accept = async () => {
+    if (!user || !preview) return;
+    setBusy(true);
+    setError('');
+    try {
+      await oxyServices.accounts.invitations.accept(token, user.id);
+      setAccepted(true);
+    } catch (reason) {
+      setError(reason instanceof Error ? reason.message : 'Could not accept invitation');
+    } finally {
+      setBusy(false);
+    }
+  };
+  return /*#__PURE__*/_jsxs(View, {
+    className: "gap-space-16 p-space-24",
+    children: [/*#__PURE__*/_jsx(Text, {
+      className: "text-title font-semibold text-text",
+      children: "Account invitation"
+    }), canUsePrivateApi && token && !preview && !error ? /*#__PURE__*/_jsx(Text, {
+      accessibilityRole: "progressbar",
+      children: "Loading invitation\u2026"
+    }) : null, accepted ? /*#__PURE__*/_jsx(Text, {
+      children: "Invitation accepted. You can now access this account."
+    }) : /*#__PURE__*/_jsxs(_Fragment, {
+      children: [preview ? /*#__PURE__*/_jsxs(Text, {
+        children: ["Join ", preview.account.displayName ?? preview.account.username, " as", ' ', preview.invitation.role, "."]
+      }) : null, /*#__PURE__*/_jsxs(Text, {
+        children: ["Selected account:", ' ', user ? `${user.name?.displayName ?? getNormalizedUserHandle(user) ?? user.id} (${user.email ?? user.id})` : 'Not signed in']
+      }), /*#__PURE__*/_jsx(Text, {
+        children: "The selected account receives access. Its email can differ from the invitation address. No access is granted until you confirm."
+      }), /*#__PURE__*/_jsx(Button, {
+        disabled: busy,
+        onPress: () => openAccountDialog(),
+        children: user ? 'Change account' : 'Sign in or create account'
+      }), /*#__PURE__*/_jsx(Button, {
+        disabled: busy || !user || !preview || user.kind !== 'personal',
+        onPress: accept,
+        children: "Confirm and accept"
+      })]
+    }), error ? /*#__PURE__*/_jsx(Text, {
+      accessibilityRole: "alert",
+      children: error
+    }) : null, !token ? /*#__PURE__*/_jsx(Text, {
+      children: "This invitation link is incomplete."
+    }) : null]
+  });
+}
+//# sourceMappingURL=AccountInvitationAcceptance.js.map