@oxy.so/services 4.0.6 → 6.0.0

package/src/ui/components/authChooser/SignUpView.tsx

@@ -1,76 +0,0 @@
-/**
- * Account creation (`signup` view).
- *
- * Web: the account AND its self-custody identity are created at the identity
- * origin (`id.oxy.so`), in the same window a passkey sign-in uses — never on
- * this page, whatever its origin (one identity, two carriers). The sign-in
- * entry's "create an account" link opens that window directly; this view is
- * what `openAccountDialog('signup')` lands on, and offers the same one action.
- *
- * Native: Commons owns identity creation. Deep-link straight in when Commons is
- * installed, else lead with the "Get Commons" acquisition CTA.
- */
-
-import type React from 'react';
-import { View } from 'react-native';
-import { Button } from '@oxy.so/bloom/button';
-import { Text } from '@oxy.so/bloom/typography';
-import type { AccountDialogSnapshot } from '@oxy.so/core';
-import { SubtleLink } from './primitives';
-import { authChooserStyles as styles } from './styles';
-import type { PasskeyMode, Theme, Translate } from './types';
-
-interface SignUpViewProps {
-  snapshot: AccountDialogSnapshot;
-  theme: Theme;
-  t: Translate;
-  passkeyMode: PasskeyMode;
-  /** Open the identity-origin window — web's only creation path. */
-  onOpenHub: () => void;
-  /** Deep-link into Commons' own identity-creation screen (installed only). */
-  onCreateIdentityInCommons: () => void;
-  /** Open the Commons store listing / landing page for this platform. */
-  onGetCommons: () => void;
-  onBackToSignIn: () => void;
-}
-
-const SignUpView: React.FC<SignUpViewProps> = ({
-  snapshot,
-  theme,
-  t,
-  passkeyMode,
-  onOpenHub,
-  onCreateIdentityInCommons,
-  onGetCommons,
-  onBackToSignIn,
-}) => {
-  if (passkeyMode === 'none') {
-    const commonsInstalled = snapshot.commonsAvailability === 'available';
-    return (
-      <View style={styles.centeredBlock}>
-        <Button
-          appearance="solid" tone="accent" size="lg"
-          onPress={commonsInstalled ? onCreateIdentityInCommons : onGetCommons}
-          style={styles.primaryButton}
-        >
-          {commonsInstalled ? t('signup.createInCommons') : t('accountSwitcher.getCommons')}
-        </Button>
-        <SubtleLink label={t('signup.backToSignInLink')} theme={theme} onPress={onBackToSignIn} />
-      </View>
-    );
-  }
-
-  return (
-    <View style={styles.centeredBlock}>
-      <Text style={[styles.mutedText, { color: theme.colors.textSecondary }]}>
-        {t('accountSwitcher.passkeyHint')}
-      </Text>
-      <Button appearance="solid" tone="accent" size="lg" onPress={onOpenHub} style={styles.primaryButton} testID="signup-open-identity">
-        {t('signup.createAccount')}
-      </Button>
-      <SubtleLink label={t('signup.backToSignInLink')} theme={theme} onPress={onBackToSignIn} />
-    </View>
-  );
-};
-
-export default SignUpView;

package/src/ui/components/passkeyHubPopup.ts

@@ -1,28 +0,0 @@
-/**
- * Popup opener for the cross-origin passkey hub (b2).
- *
- * On a non-Oxy web origin (e.g. mention.earth) a WebAuthn ceremony can't run
- * locally — the credential's RP ID is bound to `oxy.so`. Instead,
- * `AccountDialogController.startPasskeyHubSignIn` opens a popup at the
- * auth.oxy.so passkey hub, where the SAME ceremony IS a first-party operation.
- *
- * Kept in its own module (mirroring `oauthNavigation.ts`'s
- * `redirectToAuthorize`) so `window.open` sits behind a plain function the
- * controller wiring in `OxyContext` can inject without touching `window`
- * itself, and so a test can substitute a fake opener.
- */
-
-import type { PopupWindowHandle } from '@oxy.so/core';
-
-/**
- * Open a new, EMPTY popup window. Must be called SYNCHRONOUSLY from within a
- * user-gesture handler (before any `await`) — opening it after an async call
- * loses the gesture attribution and the browser silently blocks it. Returns
- * `null` when blocked, or when there is no DOM `window` (native/SSR — the
- * hub-popup flow does not apply there).
- */
-export function openPasskeyHubPopup(): PopupWindowHandle | null {
-    const win = (globalThis as { window?: Window }).window;
-    if (!win) return null;
-    return win.open('', '_blank', 'width=420,height=640');
-}

package/src/ui/oauth/legacyRedirectLanes.ts

@@ -1,43 +0,0 @@
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-
-import type { WebAuthMode } from './types';
-
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-export function allowsAutomaticIdpRedirect(webAuthMode: WebAuthMode): boolean {
-  return webAuthMode === 'redirect';
-}