@oxy.so/services 13.7.0 → 13.9.0

package/android/build.gradle

@@ -15,6 +15,7 @@ android {
 }
 
 dependencies {
+  testImplementation "junit:junit:4.13.2"
   // Hardware-backed EncryptedSharedPreferences (MasterKey AES256_GCM) for the
   // device-session and background-session credentials.
   implementation "androidx.security:security-crypto:1.1.0-alpha06"

package/android/src/main/java/so/oxy/assets/OxyAssetFilesModule.kt

@@ -0,0 +1,49 @@
+package so.oxy.assets
+
+import android.net.Uri
+import android.os.SystemClock
+import expo.modules.kotlin.exception.Exceptions
+import expo.modules.kotlin.modules.Module
+import expo.modules.kotlin.modules.ModuleDefinition
+import java.util.concurrent.ConcurrentHashMap
+import java.util.concurrent.atomic.AtomicBoolean
+
+class OxyAssetFilesModule : Module() {
+  private val jobs = ConcurrentHashMap<String, AtomicBoolean>()
+
+  override fun definition() = ModuleDefinition {
+    Name("OxyAssetFiles")
+    Events("hashProgress")
+    // Register synchronously so cancellation cannot race an enqueued worker.
+    Function("createHash") { id: String ->
+      check(jobs.putIfAbsent(id, AtomicBoolean(false)) == null) { "Duplicate hash operation" }
+    }
+    Function("cancelHash") { id: String -> jobs[id]?.set(true) }
+    AsyncFunction("hashAsync") { id: String, uriString: String, expectedSize: Double ->
+      val cancelled = jobs[id] ?: error("Unknown hash operation")
+      try {
+        val uri = Uri.parse(uriString)
+        require(uri.scheme == "file" || uri.scheme == "content") { "Expected a local file" }
+        val context = appContext.reactContext ?: throw Exceptions.ReactContextLost()
+        var lastProgress = 0L
+        val result = context.contentResolver.openInputStream(uri)?.use { input ->
+          streamSha256(input, { cancelled.get() }) { loaded ->
+            val now = SystemClock.elapsedRealtime()
+            if (now - lastProgress >= 100 || loaded.toDouble() == expectedSize) {
+              lastProgress = now
+              sendEvent("hashProgress", mapOf("id" to id, "loaded" to loaded.toDouble()))
+            }
+          }
+        } ?: error("Cannot open upload file")
+        check(result.second.toDouble() == expectedSize) { "File changed while hashing" }
+        result.first
+      } finally {
+        jobs.remove(id)
+      }
+    }
+    OnDestroy {
+      jobs.values.forEach { it.set(true) }
+      jobs.clear()
+    }
+  }
+}

package/android/src/main/java/so/oxy/assets/StreamSha256.kt

@@ -0,0 +1,23 @@
+package so.oxy.assets
+
+import java.io.InputStream
+import java.io.InterruptedIOException
+import java.security.MessageDigest
+
+/** Reads on the native worker, without crossing the JS bridge or buffering the file. */
+internal fun streamSha256(input: InputStream, cancelled: () -> Boolean, progress: (Long) -> Unit): Pair<String, Long> {
+  val digest = MessageDigest.getInstance("SHA-256")
+  val buffer = ByteArray(1024 * 1024)
+  var loaded = 0L
+  while (true) {
+    if (cancelled()) throw InterruptedIOException("Upload hash cancelled")
+    val count = input.read(buffer)
+    if (count < 0) break
+    if (count == 0) continue
+    digest.update(buffer, 0, count)
+    loaded += count
+    progress(loaded)
+  }
+  if (cancelled()) throw InterruptedIOException("Upload hash cancelled")
+  return digest.digest().joinToString("") { "%02x".format(it) } to loaded
+}

package/android/src/test/java/so/oxy/assets/StreamSha256Test.kt

@@ -0,0 +1,45 @@
+package so.oxy.assets
+
+import java.io.ByteArrayInputStream
+import java.io.InputStream
+import java.io.InterruptedIOException
+import java.security.MessageDigest
+import org.junit.Assert.*
+import org.junit.Test
+
+class StreamSha256Test {
+  @Test fun knownDigestAndProgress() {
+    val progress = mutableListOf<Long>()
+    val (digest, size) = streamSha256(ByteArrayInputStream("abc".toByteArray()), { false }, { progress.add(it) })
+    assertEquals("ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad", digest)
+    assertEquals(3L, size)
+    assertEquals(listOf(3L), progress)
+  }
+  @Test fun largerThanHeapStreamUsesBoundedReads() {
+    val size = 370L * 1024 * 1024
+    var remaining = size
+    val expected = MessageDigest.getInstance("SHA-256")
+    val input = object : InputStream() {
+      override fun read(): Int = error("Must use bounded blocks")
+      override fun read(bytes: ByteArray, offset: Int, count: Int): Int {
+        assertTrue(count <= 1024 * 1024)
+        if (remaining == 0L) return -1
+        val length = minOf(count.toLong(), remaining).toInt()
+        bytes.fill(7, offset, offset + length)
+        expected.update(bytes, offset, length)
+        remaining -= length
+        return length
+      }
+    }
+    val result = streamSha256(input, { false }, {})
+    assertEquals(size, result.second)
+    assertEquals(expected.digest().joinToString("") { "%02x".format(it) }, result.first)
+  }
+  @Test fun cancellationStopsBeforeReadingAnotherBlock() {
+    var cancelled = false
+    try {
+      streamSha256(ByteArrayInputStream(ByteArray(2 * 1024 * 1024)), { cancelled }, { cancelled = true })
+      fail("Expected cancellation")
+    } catch (_: InterruptedIOException) { }
+  }
+}

package/expo-module.config.json

@@ -1,13 +1,14 @@
 {
   "platforms": ["apple", "android"],
   "apple": {
-    "modules": ["OxyIdentityModule"]
+    "modules": ["OxyIdentityModule", "OxyAssetFilesModule"]
   },
   "android": {
     "modules": [
       "so.oxy.identity.OxyIdentityModule",
       "so.oxy.devicesession.OxyDeviceSessionModule",
-      "so.oxy.session.OxyBackgroundSessionModule"
+      "so.oxy.session.OxyBackgroundSessionModule",
+      "so.oxy.assets.OxyAssetFilesModule"
     ]
   }
 }

package/ios/OxyAssetFilesModule.swift

@@ -0,0 +1,72 @@
+import CryptoKit
+import ExpoModulesCore
+import Foundation
+
+public class OxyAssetFilesModule: Module {
+  private let lock = NSLock()
+  private var jobs: [String: Bool] = [:]
+
+  private func cancelled(_ id: String) -> Bool {
+    lock.lock()
+    defer { lock.unlock() }
+    return jobs[id] != false
+  }
+
+  public func definition() -> ModuleDefinition {
+    Name("OxyAssetFiles")
+    Events("hashProgress")
+    Function("createHash") { (id: String) in
+      self.lock.lock()
+      defer { self.lock.unlock() }
+      self.jobs[id] = false
+    }
+    Function("cancelHash") { (id: String) in
+      self.lock.lock()
+      defer { self.lock.unlock() }
+      if self.jobs[id] != nil { self.jobs[id] = true }
+    }
+    AsyncFunction("hashAsync") { (id: String, uri: String, expectedSize: Double) -> String in
+      defer {
+        self.lock.lock()
+        self.jobs.removeValue(forKey: id)
+        self.lock.unlock()
+      }
+      guard let url = URL(string: uri), url.isFileURL else {
+        throw NSError(domain: "OxyAssetFiles", code: 1, userInfo: [NSLocalizedDescriptionKey: "Expected a local file"])
+      }
+      let input = try FileHandle(forReadingFrom: url)
+      defer { try? input.close() }
+      var digest = SHA256()
+      var loaded = 0
+      var lastProgress = ProcessInfo.processInfo.systemUptime
+      while true {
+        if self.cancelled(id) {
+          throw NSError(domain: "OxyAssetFiles", code: 2, userInfo: [NSLocalizedDescriptionKey: "Upload hash cancelled"])
+        }
+        // Drain Foundation's temporary buffers on every iteration, not at the
+        // end of a multi-gigabyte worker invocation.
+        let count = try autoreleasepool { () throws -> Int in
+          let data = try input.read(upToCount: 1024 * 1024) ?? Data()
+          digest.update(data: data)
+          return data.count
+        }
+        if count == 0 { break }
+        loaded += count
+        let now = ProcessInfo.processInfo.systemUptime
+        if now - lastProgress >= 0.1 || Double(loaded) == expectedSize {
+          lastProgress = now
+          self.sendEvent("hashProgress", ["id": id, "loaded": loaded])
+        }
+      }
+      guard !self.cancelled(id), Double(loaded) == expectedSize else {
+        throw NSError(domain: "OxyAssetFiles", code: 3, userInfo: [NSLocalizedDescriptionKey: "Upload cancelled or file changed"])
+      }
+      return digest.finalize().map { String(format: "%02x", $0) }.joined()
+    }.runOnQueue(DispatchQueue.global(qos: .userInitiated))
+    OnDestroy {
+      self.lock.lock()
+      self.jobs.removeAll()
+      self.lock.unlock()
+    }
+  }
+}

package/lib/commonjs/index.js

@@ -129,6 +129,12 @@ Object.defineProperty(exports, "OxyDeleteAccountPanel", {
     return _OxyDeleteAccountPanel.OxyDeleteAccountPanel;
   }
 });
+Object.defineProperty(exports, "OxyDeviceSignIn", {
+  enumerable: true,
+  get: function () {
+    return _OxyDeviceSignIn.OxyDeviceSignIn;
+  }
+});
 Object.defineProperty(exports, "OxyEmailPanel", {
   enumerable: true,
   get: function () {
@@ -937,6 +943,7 @@ var _errorHandlers = require("./ui/utils/errorHandlers.js");
 var _useFileFiltering = require("./ui/hooks/useFileFiltering.js");
 var _core = require("@oxy.so/core");
 var _OxySignInButton = _interopRequireDefault(require("./ui/components/OxySignInButton.js"));
+var _OxyDeviceSignIn = require("./ui/components/OxyDeviceSignIn.js");
 var _oauthPopup = require("./ui/oauth/oauthPopup.js");
 var _OxyAuthPrompt = require("./ui/components/OxyAuthPrompt.js");
 var _OxyOAuthCallback = require("./ui/components/OxyOAuthCallback.js");
@@ -1095,6 +1102,9 @@ function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e
 // UI components
 // ---------------------------------------------------------------------------
 
+// Sign-in on a device with no keyboard (a TV, a photo frame): a large QR any
+// phone camera opens, the request's https approval page, and the code to compare.
+
 // Web OAuth transport (popup / redirect). RPs that ship their own sign-in
 // button call `useOxy().startWebOAuthSignIn(...)`; only the popup opener is
 // exported, because it MUST run synchronously inside the press handler to keep

package/lib/commonjs/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["require","_routes","_screenComponents","_OxyProvider","_interopRequireDefault","_OxyContext","_index","_useAuth","_AppAssertionContext","_productAnalytics","_identityBinding","_authStore","_assetStore","_useAssets","_useFileDownloadUrl","_useFollow","_useStorage","_useAccountQueries","_useServicesQueries","_useSecurityQueries","_useAuthMethods","_usePaymentQueries","_useAccountMutations","_useServicesMutations","_mutationFactory","_mutationKeys","_queryKeys","_userCache","_useMutationStatus","_useOnlineStatus","_useOxyEvent","_errorHandlers","_useFileFiltering","_core","_OxySignInButton","_oauthPopup","_OxyAuthPrompt","_OxyOAuthCallback","_OxyConsentScreen","_RequireOxyAuth","_FollowButton","_FollowTargetButton","_followRules","_followLabels","_useFollowTarget","_followTargetStore","_PeableButton","_OxyPayButton","_LogoIcon","_LogoText","_ProfileButton","_OxySignInPanel","_OxySignUpPanel","_OxyAccountPicker","_OxySignInSecurityPanel","_OxyEmailPanel","_OxyDeleteAccountPanel","_OxyLinkCommonsPanel","_OxyPasswordPanel","_OxyAuthenticatorPanel","_OxyAuthScreen","_OxySignInRequestSurface","_useDeviceSwitcher","_bottomSheetManager","_useSurfaceHeader","_SurfaceHeaderAction","_accountDialogManager","_usePersonalPlans","_AccountInvitationAcceptance","_DisplayCurrencySelector","_useDisplayCurrency","_useDisplayPrice","e","__esModule","default","registerScreens","screenComponents"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BAA,OAAA;AAEA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,iBAAA,GAAAF,OAAA;AAOA,IAAAG,YAAA,GAAAC,sBAAA,CAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AASA,IAAAM,MAAA,GAAAN,OAAA;AAgBA,IAAAO,QAAA,GAAAP,OAAA;AAIA,IAAAQ,oBAAA,GAAAR,OAAA;AAUA,IAAAS,iBAAA,GAAAT,OAAA;AAKA,IAAAU,gBAAA,GAAAV,OAAA;AAKA,IAAAW,UAAA,GAAAX,OAAA;AACA,IAAAY,WAAA,GAAAZ,OAAA;AAgBA,IAAAa,UAAA,GAAAb,OAAA;AACA,IAAAc,mBAAA,GAAAd,OAAA;AACA,IAAAe,UAAA,GAAAf,OAAA;AACA,IAAAgB,WAAA,GAAAhB,OAAA;AAMA,IAAAiB,kBAAA,GAAAjB,OAAA;AAUA,IAAAkB,mBAAA,GAAAlB,OAAA;AAQA,IAAAmB,mBAAA,GAAAnB,OAAA;AAKA,IAAAoB,eAAA,GAAApB,OAAA;AACA,IAAAqB,kBAAA,GAAArB,OAAA;AAyBA,IAAAsB,oBAAA,GAAAtB,OAAA;AAUA,IAAAuB,qBAAA,GAAAvB,OAAA;AAOA,IAAAwB,gBAAA,GAAAxB,OAAA;AAUA,IAAAyB,aAAA,GAAAzB,OAAA;AAQA,IAAA0B,UAAA,GAAA1B,OAAA;AAqBA,IAAA2B,UAAA,GAAA3B,OAAA;AAcA,IAAA4B,kBAAA,GAAA5B,OAAA;AAEA,IAAA6B,gBAAA,GAAA7B,OAAA;AACA,IAAA8B,YAAA,GAAA9B,OAAA;AAKA,IAAA+B,cAAA,GAAA/B,OAAA;AAWA,IAAAgC,iBAAA,GAAAhC,OAAA;AA2BA,IAAAiC,KAAA,GAAAjC,OAAA;AAIA,IAAAkC,gBAAA,GAAA9B,sBAAA,CAAAJ,OAAA;AAOA,IAAAmC,WAAA,GAAAnC,OAAA;AAgBA,IAAAoC,cAAA,GAAApC,OAAA;AAEA,IAAAqC,iBAAA,GAAArC,OAAA;AAEA,IAAAsC,iBAAA,GAAAtC,OAAA;AAaA,IAAAuC,eAAA,GAAAvC,OAAA;AAKA,IAAAwC,aAAA,GAAApC,sBAAA,CAAAJ,OAAA;AAOA,IAAAyC,mBAAA,GAAAzC,OAAA;AACA,IAAA0C,YAAA,GAAA1C,OAAA;AAaA,IAAA2C,aAAA,GAAA3C,OAAA;AAEA,IAAA4C,gBAAA,GAAA5C,OAAA;AAEA,IAAA6C,kBAAA,GAAA7C,OAAA;AAcA,IAAA8C,aAAA,GAAA1C,sBAAA,CAAAJ,OAAA;AAGA,IAAA+C,aAAA,GAAA3C,sBAAA,CAAAJ,OAAA;AAGA,IAAAgD,SAAA,GAAAhD,OAAA;AACA,IAAAiD,SAAA,GAAAjD,OAAA;AAKA,IAAAkD,cAAA,GAAA9C,sBAAA,CAAAJ,OAAA;AAUA,IAAAmD,eAAA,GAAAnD,OAAA;AAEA,IAAAoD,eAAA,GAAApD,OAAA;AAEA,IAAAqD,iBAAA,GAAArD,OAAA;AAMA,IAAAsD,uBAAA,GAAAtD,OAAA;AAEA,IAAAuD,cAAA,GAAAvD,OAAA;AAEA,IAAAwD,sBAAA,GAAAxD,OAAA;AAEA,IAAAyD,oBAAA,GAAAzD,OAAA;AAEA,IAAA0D,iBAAA,GAAA1D,OAAA;AAEA,IAAA2D,sBAAA,GAAA3D,OAAA;AAEA,IAAA4D,cAAA,GAAA5D,OAAA;AAgBA,IAAA6D,wBAAA,GAAA7D,OAAA;AAUA,IAAA8D,kBAAA,GAAA9D,OAAA;AAWA,IAAA+D,mBAAA,GAAA/D,OAAA;AAMA,IAAAgE,iBAAA,GAAAhE,OAAA;AACA,IAAAiE,oBAAA,GAAAjE,OAAA;AASA,IAAAkE,qBAAA,GAAAlE,OAAA;AAWA,IAAAmE,iBAAA,GAAAnE,OAAA;AAIA,IAAAoE,4BAAA,GAAApE,OAAA;AAEA,IAAAqE,wBAAA,GAAArE,OAAA;AACA,IAAAsE,mBAAA,GAAAtE,OAAA;AACA,IAAAuE,gBAAA,GAAAvE,OAAA;AAA6D,SAAAI,uBAAAoE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAle7D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA;;AAMA,IAAAG,uBAAe,EAACC,kCAAgB,CAAC;;AAEjC;AACA;AACA;;AAGA;AACA;AACA;;AAGA;AACA;AACA;;AAkBA;AACA;AACA;;AAaA;AACA;AACA;;AAGA;AACA;AACA;;AAeA;AACA;AACA;;AAOA;AACA;AACA;;AAgCA;;AAeA;AACA;AACA;;AA2BA;;AAGA;AACA;AACA;AACA;AACA;AACA;;AAeA;AACA;AACA;AACA;AACA;AACA;AACA;;AAcA;;AAMA;AACA;AACA;;AASA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAQA;AACA;AACA;AACA;;AA6BA;AACA;AACA;AACA;AACA;;AAGA;;AASA;;AAmCA;;AAEA;;AAKA;AACA;AACA;;AAQA;AACA;AACA;;AAOA;AACA;AACA;AACA;;AAqBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAIA;AACA;AACA;;AAOA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"names":["require","_routes","_screenComponents","_OxyProvider","_interopRequireDefault","_OxyContext","_index","_useAuth","_AppAssertionContext","_productAnalytics","_identityBinding","_authStore","_assetStore","_useAssets","_useFileDownloadUrl","_useFollow","_useStorage","_useAccountQueries","_useServicesQueries","_useSecurityQueries","_useAuthMethods","_usePaymentQueries","_useAccountMutations","_useServicesMutations","_mutationFactory","_mutationKeys","_queryKeys","_userCache","_useMutationStatus","_useOnlineStatus","_useOxyEvent","_errorHandlers","_useFileFiltering","_core","_OxySignInButton","_OxyDeviceSignIn","_oauthPopup","_OxyAuthPrompt","_OxyOAuthCallback","_OxyConsentScreen","_RequireOxyAuth","_FollowButton","_FollowTargetButton","_followRules","_followLabels","_useFollowTarget","_followTargetStore","_PeableButton","_OxyPayButton","_LogoIcon","_LogoText","_ProfileButton","_OxySignInPanel","_OxySignUpPanel","_OxyAccountPicker","_OxySignInSecurityPanel","_OxyEmailPanel","_OxyDeleteAccountPanel","_OxyLinkCommonsPanel","_OxyPasswordPanel","_OxyAuthenticatorPanel","_OxyAuthScreen","_OxySignInRequestSurface","_useDeviceSwitcher","_bottomSheetManager","_useSurfaceHeader","_SurfaceHeaderAction","_accountDialogManager","_usePersonalPlans","_AccountInvitationAcceptance","_DisplayCurrencySelector","_useDisplayCurrency","_useDisplayPrice","e","__esModule","default","registerScreens","screenComponents"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BAA,OAAA;AAEA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,iBAAA,GAAAF,OAAA;AAOA,IAAAG,YAAA,GAAAC,sBAAA,CAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AASA,IAAAM,MAAA,GAAAN,OAAA;AAgBA,IAAAO,QAAA,GAAAP,OAAA;AAIA,IAAAQ,oBAAA,GAAAR,OAAA;AAUA,IAAAS,iBAAA,GAAAT,OAAA;AAKA,IAAAU,gBAAA,GAAAV,OAAA;AAKA,IAAAW,UAAA,GAAAX,OAAA;AACA,IAAAY,WAAA,GAAAZ,OAAA;AAgBA,IAAAa,UAAA,GAAAb,OAAA;AACA,IAAAc,mBAAA,GAAAd,OAAA;AACA,IAAAe,UAAA,GAAAf,OAAA;AACA,IAAAgB,WAAA,GAAAhB,OAAA;AAMA,IAAAiB,kBAAA,GAAAjB,OAAA;AAUA,IAAAkB,mBAAA,GAAAlB,OAAA;AAQA,IAAAmB,mBAAA,GAAAnB,OAAA;AAKA,IAAAoB,eAAA,GAAApB,OAAA;AACA,IAAAqB,kBAAA,GAAArB,OAAA;AAyBA,IAAAsB,oBAAA,GAAAtB,OAAA;AAUA,IAAAuB,qBAAA,GAAAvB,OAAA;AAOA,IAAAwB,gBAAA,GAAAxB,OAAA;AAUA,IAAAyB,aAAA,GAAAzB,OAAA;AAQA,IAAA0B,UAAA,GAAA1B,OAAA;AAqBA,IAAA2B,UAAA,GAAA3B,OAAA;AAcA,IAAA4B,kBAAA,GAAA5B,OAAA;AAEA,IAAA6B,gBAAA,GAAA7B,OAAA;AACA,IAAA8B,YAAA,GAAA9B,OAAA;AAKA,IAAA+B,cAAA,GAAA/B,OAAA;AAWA,IAAAgC,iBAAA,GAAAhC,OAAA;AA2BA,IAAAiC,KAAA,GAAAjC,OAAA;AAIA,IAAAkC,gBAAA,GAAA9B,sBAAA,CAAAJ,OAAA;AAIA,IAAAmC,gBAAA,GAAAnC,OAAA;AAOA,IAAAoC,WAAA,GAAApC,OAAA;AAgBA,IAAAqC,cAAA,GAAArC,OAAA;AAEA,IAAAsC,iBAAA,GAAAtC,OAAA;AAEA,IAAAuC,iBAAA,GAAAvC,OAAA;AAaA,IAAAwC,eAAA,GAAAxC,OAAA;AAKA,IAAAyC,aAAA,GAAArC,sBAAA,CAAAJ,OAAA;AAOA,IAAA0C,mBAAA,GAAA1C,OAAA;AACA,IAAA2C,YAAA,GAAA3C,OAAA;AAaA,IAAA4C,aAAA,GAAA5C,OAAA;AAEA,IAAA6C,gBAAA,GAAA7C,OAAA;AAEA,IAAA8C,kBAAA,GAAA9C,OAAA;AAcA,IAAA+C,aAAA,GAAA3C,sBAAA,CAAAJ,OAAA;AAGA,IAAAgD,aAAA,GAAA5C,sBAAA,CAAAJ,OAAA;AAGA,IAAAiD,SAAA,GAAAjD,OAAA;AACA,IAAAkD,SAAA,GAAAlD,OAAA;AAKA,IAAAmD,cAAA,GAAA/C,sBAAA,CAAAJ,OAAA;AAUA,IAAAoD,eAAA,GAAApD,OAAA;AAEA,IAAAqD,eAAA,GAAArD,OAAA;AAEA,IAAAsD,iBAAA,GAAAtD,OAAA;AAMA,IAAAuD,uBAAA,GAAAvD,OAAA;AAEA,IAAAwD,cAAA,GAAAxD,OAAA;AAEA,IAAAyD,sBAAA,GAAAzD,OAAA;AAEA,IAAA0D,oBAAA,GAAA1D,OAAA;AAEA,IAAA2D,iBAAA,GAAA3D,OAAA;AAEA,IAAA4D,sBAAA,GAAA5D,OAAA;AAEA,IAAA6D,cAAA,GAAA7D,OAAA;AAgBA,IAAA8D,wBAAA,GAAA9D,OAAA;AAUA,IAAA+D,kBAAA,GAAA/D,OAAA;AAWA,IAAAgE,mBAAA,GAAAhE,OAAA;AAMA,IAAAiE,iBAAA,GAAAjE,OAAA;AACA,IAAAkE,oBAAA,GAAAlE,OAAA;AASA,IAAAmE,qBAAA,GAAAnE,OAAA;AAWA,IAAAoE,iBAAA,GAAApE,OAAA;AAIA,IAAAqE,4BAAA,GAAArE,OAAA;AAEA,IAAAsE,wBAAA,GAAAtE,OAAA;AACA,IAAAuE,mBAAA,GAAAvE,OAAA;AACA,IAAAwE,gBAAA,GAAAxE,OAAA;AAA6D,SAAAI,uBAAAqE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAte7D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA;;AAMA,IAAAG,uBAAe,EAACC,kCAAgB,CAAC;;AAEjC;AACA;AACA;;AAGA;AACA;AACA;;AAGA;AACA;AACA;;AAkBA;AACA;AACA;;AAaA;AACA;AACA;;AAGA;AACA;AACA;;AAeA;AACA;AACA;;AAOA;AACA;AACA;;AAgCA;;AAeA;AACA;AACA;;AA2BA;;AAGA;AACA;AACA;AACA;AACA;AACA;;AAeA;AACA;AACA;AACA;AACA;AACA;AACA;;AAcA;;AAMA;AACA;AACA;;AASA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAOA;AACA;;AAIA;AACA;AACA;AACA;;AA6BA;AACA;AACA;AACA;AACA;;AAGA;;AASA;;AAmCA;;AAEA;;AAKA;AACA;AACA;;AAQA;AACA;AACA;;AAOA;AACA;AACA;AACA;;AAqBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAIA;AACA;AACA;;AAOA;AACA;AACA;AACA","ignoreList":[]}

package/lib/commonjs/ui/components/OxyDeviceSignIn.js

@@ -0,0 +1,192 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.OxyDeviceSignIn = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _reactNativeQrcodeSvg = _interopRequireDefault(require("react-native-qrcode-svg"));
+var _button = require("@oxy.so/bloom/button");
+var _code = require("@oxy.so/bloom/code");
+var _RiCheckboxCircleLine = require("@oxy.so/bloom/icons/RiCheckboxCircleLine");
+var _RiRefreshLine = require("@oxy.so/bloom/icons/RiRefreshLine");
+var _loading = require("@oxy.so/bloom/loading");
+var _theme = require("@oxy.so/bloom/theme");
+var _typography = require("@oxy.so/bloom/typography");
+var _oxyRuntimeContext = require("../context/oxyRuntimeContext.js");
+var _useI18n = require("../hooks/useI18n.js");
+var _accountDialogSnapshot = require("../hooks/accountDialogSnapshot.js");
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * Sign-in for a device with no keyboard — a TV, a photo frame, a kiosk: a large
+ * QR that any phone camera opens, and the code to compare on the phone.
+ *
+ * The QR encodes the request's https approval page
+ * (`signIn.approvalUrl`, `auth.oxy.so/device?user_code=…`), not the
+ * `oxycommons://` deep link the account dialog shows: whoever scans a frame may
+ * not have Commons, and the page works in any phone browser. It prints the same
+ * code this surface shows, so the person can check they are approving THIS
+ * screen before they press Allow there.
+ *
+ * It owns one QR-only request (`controller.startInlineQr()`), exactly like the
+ * sign-in entry's embedded QR (`signIn/InlineCommonsQr.tsx`): started on mount,
+ * renewed when it expires, withdrawn on unmount while it is still approvable.
+ * It never pushes to a phone or opens Commons. On approval the controller
+ * claims the session and `OxyProvider` signs the app in, so the host simply
+ * stops rendering this.
+ *
+ * Anti-phishing: the plate encodes `signIn.approvalUrl` and the code line shows
+ * `signIn.authorizeCode`, both PUBLIC; nothing about the application is read out
+ * of either here. The secret `sessionToken` never leaves the controller.
+ */
+
+/** High-contrast, un-themed on purpose: scan reliability. */const QR_PLATE_BG = '#FFFFFF';
+const QR_FOREGROUND = '#000000';
+/** Big enough to scan from across a room at the default size. */
+const DEFAULT_QR_SIZE = 280;
+/** The quiet zone around the symbol, as a fraction of its size. */
+const PLATE_PADDING_RATIO = 0.06;
+const OxyDeviceSignIn = ({
+  size = DEFAULT_QR_SIZE
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const {
+    accountDialogController: controller
+  } = (0, _oxyRuntimeContext.useOxy)();
+  const {
+    signIn
+  } = (0, _accountDialogSnapshot.useAccountDialogSnapshot)(controller);
+  const live = signIn.inline && (signIn.phase === 'starting' || signIn.phase === 'waiting');
+  const expired = signIn.inline && signIn.phase === 'error' && signIn.failure === 'expired';
+
+  // One request for as long as this is on screen. Withdrawn on the way out only
+  // while it is still ours and still approvable.
+  (0, _react.useEffect)(() => {
+    if (!controller) return;
+    const {
+      signIn: current
+    } = controller.getSnapshot();
+    if (!(current.inline && (current.phase === 'starting' || current.phase === 'waiting'))) {
+      void controller.startInlineQr();
+    }
+    return () => {
+      const {
+        signIn: last
+      } = controller.getSnapshot();
+      if (last.inline && (last.phase === 'starting' || last.phase === 'waiting')) controller.cancelSignIn();
+    };
+  }, [controller]);
+
+  // A code only lives a few minutes; an expired one is replaced, not reported.
+  (0, _react.useEffect)(() => {
+    if (controller && expired) void controller.startInlineQr();
+  }, [controller, expired]);
+  const padding = Math.round(size * PLATE_PADDING_RATIO);
+  const showsCode = live && signIn.approvalUrl && signIn.progress !== 'confirming-identity';
+  let plate;
+  if (signIn.inline && signIn.progress === 'identity-confirmed') {
+    plate = /*#__PURE__*/(0, _jsxRuntime.jsx)(_RiCheckboxCircleLine.RiCheckboxCircleLine, {
+      size: "3xl",
+      fill: theme.colors.success
+    });
+  } else if (showsCode && signIn.approvalUrl) {
+    plate = /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeQrcodeSvg.default, {
+      value: signIn.approvalUrl,
+      size: size,
+      backgroundColor: QR_PLATE_BG,
+      color: QR_FOREGROUND
+    });
+  } else if (live || expired || signIn.inline && signIn.phase === 'completed') {
+    plate = /*#__PURE__*/(0, _jsxRuntime.jsx)(_loading.SpinnerIcon, {
+      size: Math.round(size / 6),
+      color: QR_FOREGROUND
+    });
+  } else {
+    // Failed for a reason renewing will not fix by itself, or superseded and
+    // then withdrawn: one press for a new code.
+    plate = /*#__PURE__*/(0, _jsxRuntime.jsx)(_button.Button, {
+      appearance: "plain",
+      tone: "neutral",
+      leadingIcon: _RiRefreshLine.RiRefreshLine,
+      onPress: () => void controller?.startInlineQr(),
+      testID: "device-sign-in-renew",
+      children: t('signin.qr.renew')
+    });
+  }
+  return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+    style: styles.block,
+    testID: "oxy-device-sign-in",
+    children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+      style: [styles.title, {
+        color: theme.colors.text
+      }],
+      children: t('signin.device.title')
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+      style: [styles.caption, {
+        color: theme.colors.textSecondary
+      }],
+      children: t('signin.device.caption')
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+      style: [styles.plate, {
+        width: size + padding * 2,
+        height: size + padding * 2,
+        padding
+      }],
+      children: plate
+    }), showsCode && signIn.authorizeCode ? /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+      style: styles.codeBlock,
+      children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+        style: [styles.codeHint, {
+          color: theme.colors.textSecondary
+        }],
+        children: t('signin.device.codeHint')
+      }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_code.Code, {
+        testID: "device-sign-in-code",
+        style: styles.code,
+        children: signIn.authorizeCode
+      })]
+    }) : null]
+  });
+};
+exports.OxyDeviceSignIn = OxyDeviceSignIn;
+const styles = _reactNative.StyleSheet.create({
+  block: {
+    alignItems: 'center',
+    gap: 16
+  },
+  title: {
+    fontSize: 28,
+    lineHeight: 34,
+    fontWeight: '600',
+    textAlign: 'center'
+  },
+  caption: {
+    fontSize: 16,
+    lineHeight: 22,
+    textAlign: 'center'
+  },
+  plate: {
+    borderRadius: 16,
+    backgroundColor: QR_PLATE_BG,
+    alignItems: 'center',
+    justifyContent: 'center'
+  },
+  codeBlock: {
+    alignItems: 'center',
+    gap: 4
+  },
+  codeHint: {
+    fontSize: 13,
+    lineHeight: 18,
+    textAlign: 'center'
+  },
+  code: {
+    fontSize: 14
+  }
+});
+//# sourceMappingURL=OxyDeviceSignIn.js.map

package/lib/commonjs/ui/components/OxyDeviceSignIn.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_reactNativeQrcodeSvg","_interopRequireDefault","_button","_code","_RiCheckboxCircleLine","_RiRefreshLine","_loading","_theme","_typography","_oxyRuntimeContext","_useI18n","_accountDialogSnapshot","_jsxRuntime","e","__esModule","default","QR_PLATE_BG","QR_FOREGROUND","DEFAULT_QR_SIZE","PLATE_PADDING_RATIO","OxyDeviceSignIn","size","theme","useTheme","t","useI18n","accountDialogController","controller","useOxy","signIn","useAccountDialogSnapshot","live","inline","phase","expired","failure","useEffect","current","getSnapshot","startInlineQr","last","cancelSignIn","padding","Math","round","showsCode","approvalUrl","progress","plate","jsx","RiCheckboxCircleLine","fill","colors","success","value","backgroundColor","color","SpinnerIcon","Button","appearance","tone","leadingIcon","RiRefreshLine","onPress","testID","children","jsxs","View","style","styles","block","Text","title","text","caption","textSecondary","width","height","authorizeCode","codeBlock","codeHint","Code","code","exports","StyleSheet","create","alignItems","gap","fontSize","lineHeight","fontWeight","textAlign","borderRadius","justifyContent"],"sourceRoot":"../../../../src","sources":["ui/components/OxyDeviceSignIn.tsx"],"mappings":";;;;;;AAwBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,qBAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,KAAA,GAAAL,OAAA;AACA,IAAAM,qBAAA,GAAAN,OAAA;AACA,IAAAO,cAAA,GAAAP,OAAA;AACA,IAAAQ,QAAA,GAAAR,OAAA;AACA,IAAAS,MAAA,GAAAT,OAAA;AACA,IAAAU,WAAA,GAAAV,OAAA;AACA,IAAAW,kBAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AACA,IAAAa,sBAAA,GAAAb,OAAA;AAA0E,IAAAc,WAAA,GAAAd,OAAA;AAAA,SAAAG,uBAAAY,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AApC1E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAiBA,6DACA,MAAMG,WAAW,GAAG,SAAS;AAC7B,MAAMC,aAAa,GAAG,SAAS;AAC/B;AACA,MAAMC,eAAe,GAAG,GAAG;AAC3B;AACA,MAAMC,mBAAmB,GAAG,IAAI;AAOzB,MAAMC,eAA+C,GAAGA,CAAC;EAAEC,IAAI,GAAGH;AAAgB,CAAC,KAAK;EAC7F,MAAMI,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,uBAAuB,EAAEC;EAAW,CAAC,GAAG,IAAAC,yBAAM,EAAC,CAAC;EACxD,MAAM;IAAEC;EAAO,CAAC,GAAG,IAAAC,+CAAwB,EAACH,UAAU,CAAC;EACvD,MAAMI,IAAI,GAAGF,MAAM,CAACG,MAAM,KAAKH,MAAM,CAACI,KAAK,KAAK,UAAU,IAAIJ,MAAM,CAACI,KAAK,KAAK,SAAS,CAAC;EACzF,MAAMC,OAAO,GAAGL,MAAM,CAACG,MAAM,IAAIH,MAAM,CAACI,KAAK,KAAK,OAAO,IAAIJ,MAAM,CAACM,OAAO,KAAK,SAAS;;EAEzF;EACA;EACA,IAAAC,gBAAS,EAAC,MAAM;IACd,IAAI,CAACT,UAAU,EAAE;IACjB,MAAM;MAAEE,MAAM,EAAEQ;IAAQ,CAAC,GAAGV,UAAU,CAACW,WAAW,CAAC,CAAC;IACpD,IAAI,EAAED,OAAO,CAACL,MAAM,KAAKK,OAAO,CAACJ,KAAK,KAAK,UAAU,IAAII,OAAO,CAACJ,KAAK,KAAK,SAAS,CAAC,CAAC,EAAE;MACtF,KAAKN,UAAU,CAACY,aAAa,CAAC,CAAC;IACjC;IACA,OAAO,MAAM;MACX,MAAM;QAAEV,MAAM,EAAEW;MAAK,CAAC,GAAGb,UAAU,CAACW,WAAW,CAAC,CAAC;MACjD,IAAIE,IAAI,CAACR,MAAM,KAAKQ,IAAI,CAACP,KAAK,KAAK,UAAU,IAAIO,IAAI,CAACP,KAAK,KAAK,SAAS,CAAC,EACxEN,UAAU,CAACc,YAAY,CAAC,CAAC;IAC7B,CAAC;EACH,CAAC,EAAE,CAACd,UAAU,CAAC,CAAC;;EAEhB;EACA,IAAAS,gBAAS,EAAC,MAAM;IACd,IAAIT,UAAU,IAAIO,OAAO,EAAE,KAAKP,UAAU,CAACY,aAAa,CAAC,CAAC;EAC5D,CAAC,EAAE,CAACZ,UAAU,EAAEO,OAAO,CAAC,CAAC;EAEzB,MAAMQ,OAAO,GAAGC,IAAI,CAACC,KAAK,CAACvB,IAAI,GAAGF,mBAAmB,CAAC;EACtD,MAAM0B,SAAS,GAAGd,IAAI,IAAIF,MAAM,CAACiB,WAAW,IAAIjB,MAAM,CAACkB,QAAQ,KAAK,qBAAqB;EAEzF,IAAIC,KAAsB;EAC1B,IAAInB,MAAM,CAACG,MAAM,IAAIH,MAAM,CAACkB,QAAQ,KAAK,oBAAoB,EAAE;IAC7DC,KAAK,gBAAG,IAAApC,WAAA,CAAAqC,GAAA,EAAC7C,qBAAA,CAAA8C,oBAAoB;MAAC7B,IAAI,EAAC,KAAK;MAAC8B,IAAI,EAAE7B,KAAK,CAAC8B,MAAM,CAACC;IAAQ,CAAE,CAAC;EACzE,CAAC,MAAM,IAAIR,SAAS,IAAIhB,MAAM,CAACiB,WAAW,EAAE;IAC1CE,KAAK,gBACH,IAAApC,WAAA,CAAAqC,GAAA,EAACjD,qBAAA,CAAAe,OAAM;MACLuC,KAAK,EAAEzB,MAAM,CAACiB,WAAY;MAC1BzB,IAAI,EAAEA,IAAK;MACXkC,eAAe,EAAEvC,WAAY;MAC7BwC,KAAK,EAAEvC;IAAc,CACtB,CACF;EACH,CAAC,MAAM,IAAIc,IAAI,IAAIG,OAAO,IAAKL,MAAM,CAACG,MAAM,IAAIH,MAAM,CAACI,KAAK,KAAK,WAAY,EAAE;IAC7Ee,KAAK,gBAAG,IAAApC,WAAA,CAAAqC,GAAA,EAAC3C,QAAA,CAAAmD,WAAW;MAACpC,IAAI,EAAEsB,IAAI,CAACC,KAAK,CAACvB,IAAI,GAAG,CAAC,CAAE;MAACmC,KAAK,EAAEvC;IAAc,CAAE,CAAC;EAC3E,CAAC,MAAM;IACL;IACA;IACA+B,KAAK,gBACH,IAAApC,WAAA,CAAAqC,GAAA,EAAC/C,OAAA,CAAAwD,MAAM;MACLC,UAAU,EAAC,OAAO;MAClBC,IAAI,EAAC,SAAS;MACdC,WAAW,EAAEC,4BAAc;MAC3BC,OAAO,EAAEA,CAAA,KAAM,KAAKpC,UAAU,EAAEY,aAAa,CAAC,CAAE;MAChDyB,MAAM,EAAC,sBAAsB;MAAAC,QAAA,EAE5BzC,CAAC,CAAC,iBAAiB;IAAC,CACf,CACT;EACH;EAEA,oBACE,IAAAZ,WAAA,CAAAsD,IAAA,EAACnE,YAAA,CAAAoE,IAAI;IAACC,KAAK,EAAEC,MAAM,CAACC,KAAM;IAACN,MAAM,EAAC,oBAAoB;IAAAC,QAAA,gBACpD,IAAArD,WAAA,CAAAqC,GAAA,EAACzC,WAAA,CAAA+D,IAAI;MAACH,KAAK,EAAE,CAACC,MAAM,CAACG,KAAK,EAAE;QAAEhB,KAAK,EAAElC,KAAK,CAAC8B,MAAM,CAACqB;MAAK,CAAC,CAAE;MAAAR,QAAA,EAAEzC,CAAC,CAAC,qBAAqB;IAAC,CAAO,CAAC,eAC5F,IAAAZ,WAAA,CAAAqC,GAAA,EAACzC,WAAA,CAAA+D,IAAI;MAACH,KAAK,EAAE,CAACC,MAAM,CAACK,OAAO,EAAE;QAAElB,KAAK,EAAElC,KAAK,CAAC8B,MAAM,CAACuB;MAAc,CAAC,CAAE;MAAAV,QAAA,EAClEzC,CAAC,CAAC,uBAAuB;IAAC,CACvB,CAAC,eACP,IAAAZ,WAAA,CAAAqC,GAAA,EAAClD,YAAA,CAAAoE,IAAI;MACHC,KAAK,EAAE,CAACC,MAAM,CAACrB,KAAK,EAAE;QAAE4B,KAAK,EAAEvD,IAAI,GAAGqB,OAAO,GAAG,CAAC;QAAEmC,MAAM,EAAExD,IAAI,GAAGqB,OAAO,GAAG,CAAC;QAAEA;MAAQ,CAAC,CAAE;MAAAuB,QAAA,EAEzFjB;IAAK,CACF,CAAC,EACNH,SAAS,IAAIhB,MAAM,CAACiD,aAAa,gBAChC,IAAAlE,WAAA,CAAAsD,IAAA,EAACnE,YAAA,CAAAoE,IAAI;MAACC,KAAK,EAAEC,MAAM,CAACU,SAAU;MAAAd,QAAA,gBAC5B,IAAArD,WAAA,CAAAqC,GAAA,EAACzC,WAAA,CAAA+D,IAAI;QAACH,KAAK,EAAE,CAACC,MAAM,CAACW,QAAQ,EAAE;UAAExB,KAAK,EAAElC,KAAK,CAAC8B,MAAM,CAACuB;QAAc,CAAC,CAAE;QAAAV,QAAA,EACnEzC,CAAC,CAAC,wBAAwB;MAAC,CACxB,CAAC,eACP,IAAAZ,WAAA,CAAAqC,GAAA,EAAC9C,KAAA,CAAA8E,IAAI;QAACjB,MAAM,EAAC,qBAAqB;QAACI,KAAK,EAAEC,MAAM,CAACa,IAAK;QAAAjB,QAAA,EACnDpC,MAAM,CAACiD;MAAa,CACjB,CAAC;IAAA,CACH,CAAC,GACL,IAAI;EAAA,CACJ,CAAC;AAEX,CAAC;AAACK,OAAA,CAAA/D,eAAA,GAAAA,eAAA;AAEF,MAAMiD,MAAM,GAAGe,uBAAU,CAACC,MAAM,CAAC;EAC/Bf,KAAK,EAAE;IACLgB,UAAU,EAAE,QAAQ;IACpBC,GAAG,EAAE;EACP,CAAC;EACDf,KAAK,EAAE;IACLgB,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE,EAAE;IACdC,UAAU,EAAE,KAAK;IACjBC,SAAS,EAAE;EACb,CAAC;EACDjB,OAAO,EAAE;IACPc,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE,EAAE;IACdE,SAAS,EAAE;EACb,CAAC;EACD3C,KAAK,EAAE;IACL4C,YAAY,EAAE,EAAE;IAChBrC,eAAe,EAAEvC,WAAW;IAC5BsE,UAAU,EAAE,QAAQ;IACpBO,cAAc,EAAE;EAClB,CAAC;EACDd,SAAS,EAAE;IACTO,UAAU,EAAE,QAAQ;IACpBC,GAAG,EAAE;EACP,CAAC;EACDP,QAAQ,EAAE;IACRQ,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE,EAAE;IACdE,SAAS,EAAE;EACb,CAAC;EACDT,IAAI,EAAE;IACJM,QAAQ,EAAE;EACZ;AACF,CAAC,CAAC","ignoreList":[]}

package/lib/commonjs/ui/context/OxyContext.js

@@ -28,6 +28,7 @@ Object.defineProperty(exports, "useOxyAuthActions", {
     return _oxyRuntimeContext.useOxyAuthActions;
   }
 });
+var _nativeAssetFiles = require("../utils/nativeAssetFiles");
 var _nativeAuthTransport = require("../oauth/nativeAuthTransport.js");
 var _isolatedOAuthSession = require("./isolatedOAuthSession.js");
 var _react = require("react");
@@ -126,6 +127,9 @@ const OxyRuntimeProvider = ({
     }
   }
   const oxyServices = oxyServicesRef.current;
+  // Child passive effects may upload immediately on mount. Configure transport
+  // during commit, before those effects, without mutating the client in render.
+  (0, _react.useLayoutEffect)(() => (0, _nativeAssetFiles.installNativeAssetFiles)(oxyServices), [oxyServices]);
 
   // The device-first persisted auth-state store (per-origin device credential on
   // web; SecureStore session blob on native). Built ONCE per provider mount.