@oxy.so/services 4.0.7 → 6.1.0

package/src/ui/components/OxyAccountDialogScreen.tsx

@@ -22,18 +22,15 @@
  */
 
 import type React from 'react';
-import { useCallback, useSyncExternalStore } from 'react';
+import { useCallback } from 'react';
 import { StyleSheet, View } from 'react-native';
-import type { AccountDialogSnapshot } from '@oxy.so/core';
 import { useOxy } from '../context/OxyContext';
 import { useI18n } from '../hooks/useI18n';
 import { useSurfaceHeader } from '../hooks/useSurfaceHeader';
 import type { BaseScreenProps } from '../types/navigation';
 import LogoText from './logo/LogoText';
 import OxyAuthChooser from './OxyAuthChooser';
-import { EMPTY_ACCOUNT_DIALOG_SNAPSHOT } from '../hooks/accountDialogSnapshot';
-
-type Translate = ReturnType<typeof useI18n>['t'];
+import { useAccountDialogSnapshot } from '../hooks/accountDialogSnapshot';
 
 /**
  * The account MENU's nav bar carries the Oxy wordmark instead of a title — the
@@ -60,25 +57,9 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   const { accountDialogController: controller, closeAccountDialog } = useOxy();
   const { t } = useI18n();
 
-  // A lightweight, header-only binding to the same controller `OxyAuthChooser`
-  // binds independently — cheap, and the established pattern here (
-  // `useDeviceSwitcher` also binds to this controller on its own).
-  const subscribe = useCallback(
-    (listener: () => void) => (controller ? controller.subscribe(listener) : () => undefined),
-    [controller],
-  );
-  const getSnapshot = useCallback(
-    () => (controller ? controller.getSnapshot() : EMPTY_ACCOUNT_DIALOG_SNAPSHOT),
-    [controller],
-  );
-  const snapshot = useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
+  const snapshot = useAccountDialogSnapshot(controller);
 
   const { view } = snapshot;
-  // Names the entry view "Add another account" rather than "Sign in" only when
-  // THIS app is signed in. Not the directory's size: the device can go on
-  // listing a shared identity (Commons') after the app signed out, and that
-  // titled a signed-out sheet "Add another account" (OxyHQ/oxy#1375 item 21).
-  const hasSignedInAccounts = snapshot.hasSession;
   // Where back leads is the CONTROLLER's answer (`snapshot.backView`), never a
   // table here: a host-side "back = accounts" assumed a signed-in origin and
   // opened the account menu for nobody on a signed-out Back from sign-up.
@@ -93,18 +74,15 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   // `closeAccountDialog` so the pop + state teardown stay in one place. Opened
   // cold (detached) it is the root frame → `canGoBack` is false → no back.
   const backsToHost = !showBack && (canGoBack?.() ?? false);
-  // The account MENU is branded, not titled: its nav bar carries the Oxy
-  // wordmark and no large title. The current account is named by the HERO block
-  // `OxyAuthChooser` renders under it (email + large avatar + greeting), never
-  // by the bar. Every OTHER view keeps the SHARED Dialog nav header the rest of
-  // the SDK uses — a large in-content title/subtitle that collapses into the bar
-  // on scroll — because their copy is informative.
-  const copy = view === 'accounts' ? null : headerCopy(view, hasSignedInAccounts, t);
+  // The sign-in and sign-up screens carry their own header — the Oxy mark and
+  // the large title auth.oxy.so shows — so the bar holds only the way back.
+  // The account MENU is branded with the wordmark (the hero under it names the
+  // account); the active request is titled, route-agnostically, because Oxy
+  // picks how it travels (issue #691).
 
   useSurfaceHeader({
-    titleContent: copy ? undefined : NAV_LOGO,
-    title: copy?.title,
-    subtitle: copy?.subtitle ?? undefined,
+    titleContent: view === 'accounts' ? NAV_LOGO : undefined,
+    title: view === 'qr' ? t('accountSwitcher.signInWithOxy') : undefined,
     onBack: showBack ? goBack : backsToHost ? closeAccountDialog : undefined,
   });
 
@@ -119,45 +97,6 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   );
 };
 
-// ---------------------------------------------------------------------------
-// Copy + helpers
-// ---------------------------------------------------------------------------
-
-function headerCopy(
-  view: Exclude<AccountDialogSnapshot['view'], 'accounts'>,
-  hasSignedInAccounts: boolean,
-  t: Translate,
-): { title: string; subtitle: string | null } {
-  switch (view) {
-    // The ACTIVE REQUEST. Its header is deliberately route-AGNOSTIC: Oxy picks
-    // the delivery route (QR here, a push to the user's phone, or opening
-    // Commons on this device — issue #691), so naming one of them in the bar
-    // would contradict the other two. The route-specific status line lives in
-    // the body, derived from `signIn.progress`, and is the only thing that
-    // describes HOW the request is travelling.
-    case 'qr':
-      return {
-        title: t('accountSwitcher.signInWithOxy') || 'Sign in with Oxy',
-        subtitle: null,
-      };
-    case 'signup':
-      return {
-        title: t('signup.title') || 'Create your account',
-        subtitle: t('signup.subtitle') || 'One identity for the whole ecosystem.',
-      };
-    default:
-      return hasSignedInAccounts
-        ? {
-            title: t('signin.addAccountTitle') || 'Add another account',
-            subtitle: t('signin.addAccountSubtitle') || 'Sign in with another account.',
-          }
-        : {
-            title: t('signin.title') || 'Sign in',
-            subtitle: t('signin.subtitle') || 'One identity for the whole ecosystem.',
-          };
-  }
-}
-
 /**
  * The screen gutter. In the Dialog's nav-header mode the surface adds NO content
  * padding of its own — the large title and each screen own theirs — so this must
@@ -169,7 +108,7 @@ const SCREEN_MARGIN = 20;
 const styles = StyleSheet.create({
   bodyContent: {
     paddingTop: 4,
-    paddingBottom: 4,
+    paddingBottom: 20,
     paddingHorizontal: SCREEN_MARGIN,
   },
 });

package/src/ui/components/OxyAuthChooser.tsx

@@ -15,17 +15,16 @@
  * responsibility each:
  *
  *  - `accounts` → `AccountsMenuView` — the signed-in Oxy account menu.
- *  - `add` / `signin` → `SignInEntryView` — ONE primary action, "Continue with
- *    Oxy" (issue #691, Phase 5). On WEB this view is transient: the flow
- *    auto-starts the instant the view is reached, because the request surface
- *    (a QR on an unknown desktop, "Check Commons on your phone" where Oxy could
- *    deliver) IS the primary route there, never something behind a second tap.
+ *  - `add` / `signin` → `OxySignInPanel` — THE sign-in screen, the one
+ *    auth.oxy.so renders too: the device's accounts, then "Continue with
+ *    Oxy" (on the web, auth.oxy.so's window over the app).
  *  - `qr` → `SignInRequestView` — the ACTIVE REQUEST: the controller-bound
  *    wiring over the shared, presentational `OxySignInRequestSurface` (the same
  *    component the auth.oxy.so IdP mounts from its OAuth-bound request). It maps
  *    `snapshot.signIn` onto that surface's props; alternatives stay behind
  *    "Having trouble?" until the chosen route reports `routeFailed`.
- *  - `signup` → `SignUpView` — account creation, Commons-first.
+ *  - `signup` → `OxySignUpPanel` — account creation: auth.oxy.so's window on
+ *    the web, Commons on native.
  *
  * Per-account color re-theming uses Bloom's `APP_COLOR_PRESETS` + `BloomColorScope`
  * (same visual language auth.oxy.so uses). Base theming is `useTheme()` + a
@@ -39,7 +38,7 @@ import { Linking, Platform } from 'react-native';
 import { toast } from '@oxy.so/bloom/toast';
 import { surfaces } from '@oxy.so/bloom/surfaces';
 import { useTheme } from '@oxy.so/bloom/theme';
-import { IDENTITY_WEB_ORIGIN, getNormalizedUserHandle, type User } from '@oxy.so/core';
+import { getNormalizedUserHandle, type OxyAuthScreen, type User } from '@oxy.so/core';
 import { useQueryClient } from '@tanstack/react-query';
 import { useOxy } from '../context/OxyContext';
 import { useDeviceSwitcher } from '../hooks/useDeviceSwitcher';
@@ -52,9 +51,7 @@ import { isWebBrowser } from '../utils/isWebBrowser';
 import { getCommonsAcquisitionUrl } from '../utils/commonsStoreLinks';
 import { useAccountStorageUsage } from '../hooks/queries/useServicesQueries';
 import AccountsMenuView from './authChooser/AccountsMenuView';
-import SignInEntryView from './authChooser/SignInEntryView';
 import SignInRequestView from './authChooser/SignInRequestView';
-import SignUpView from './authChooser/SignUpView';
 import { signInFailureMessage } from './authChooser/signInFailureMessage';
 import {
   resolveAccentHex,
@@ -66,9 +63,9 @@ import {
   type SignInAlternatives,
 } from './authChooser/types';
 import { EMPTY_ACCOUNT_DIALOG_SNAPSHOT } from '../hooks/accountDialogSnapshot';
+import { OxySignInPanel } from './signIn/OxySignInPanel';
+import { OxySignUpPanel } from './signIn/OxySignUpPanel';
 
-/** Commons' own identity-creation deep link (mirrors the `approve`/`attest`/`card` intents). */
-const COMMONS_CREATE_IDENTITY_URL = 'oxycommons://create-identity';
 /**
  * "Accounts by Oxy" management app — the canonical home for account settings,
  * data export, and storage management. The account-menu rows deep-link into it
@@ -90,12 +87,6 @@ const toastedFailureAttempt = new WeakMap<object, number>();
 export interface OxyAuthChooserProps {
   /** Called after a completed switch, sign-in, or sign-up. */
   onComplete?: () => void;
-  /**
-   * @deprecated No effect. The web sign-in entry no longer auto-starts a
-   * device-flow request: its primary action opens the identity origin
-   * (`id.oxy.so`) in a popup, which a browser only allows from a user gesture.
-   */
-  autoStartSignIn?: boolean;
 }
 
 /**
@@ -111,6 +102,7 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
     logout,
     openAvatarPicker,
     user,
+    continueOnAuth,
   } = useOxy();
   const theme = useTheme();
   const { t } = useI18n();
@@ -120,13 +112,23 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   // so the two switchers cannot drift.
   const { principals } = useDeviceSwitcher();
 
-  // Web sign-in and sign-up run at the identity origin (`id.oxy.so`), never
-  // on this page, whatever this page's origin: that is where the passkey
-  // ceremony can run for any app AND where the account's identity is created
-  // and kept sealed under the passkey (one identity, two carriers). Native has
-  // no passkey path: Commons owns identity there ('none').
+  // On the web every sign-in and sign-up runs in auth.oxy.so's window over the
+  // app (`continueOnAuth`): the passkey belongs to that origin, and the
+  // browser's session lives there, shared by every Oxy app. Native has no
+  // passkey path: Commons owns identity there ('none').
   const passkeyMode = useMemo<PasskeyMode>(() => (isWebBrowser() ? 'hub' : 'none'), []);
 
+  /** auth.oxy.so's window; this surface closes once it signs the app in. */
+  const openOnOxy = useCallback(
+    (screen: OxyAuthScreen) => {
+      void continueOnAuth(screen).then((result) => {
+        if (result.status === 'signed-in') onComplete?.();
+        else if (result.status === 'failed') toast.error(t('signin.errors.failed'));
+      });
+    },
+    [continueOnAuth, onComplete, t],
+  );
+
   // Bind the headless controller. `getSnapshot` returns a stable reference
   // between changes, so it is `useSyncExternalStore`-safe. Guard the no-provider
   // loading state (`controller` is `null`) with an inert store.
@@ -140,7 +142,8 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
       if (!controller) return () => undefined;
       const maybeToastSignInError = () => {
         const { signIn } = controller.getSnapshot();
-        if (signIn.phase !== 'error') return;
+        // The embedded QR's failures are its own to handle (it renews itself).
+        if (signIn.phase !== 'error' || signIn.inline) return;
         if (toastedFailureAttempt.get(controller) === signIn.attempt) return;
         toastedFailureAttempt.set(controller, signIn.attempt);
         const message = signInFailureMessage(signIn.failure, t);
@@ -363,18 +366,14 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   const alternatives = useMemo<SignInAlternatives>(
     () => ({
       passkeyAvailable: passkeyMode !== 'none',
-      // Called straight from the press: the popup opens before any await.
-      onSignInWithPasskey: () => void controller?.startPasskeyHubSignIn(),
+      // auth.oxy.so asserts the passkey, in its window.
+      onSignInWithPasskey: () => openOnOxy('signin'),
       onShowQr: () => void controller?.showQr(),
       onGetCommons: () => openExternal(getCommonsAcquisitionUrl(Platform.OS)),
-      // Web: the identity origin creates the account and its identity in the
-      // same window a sign-in uses. Native: Commons creates the identity.
-      onCreateAccount: () => {
-        if (passkeyMode === 'hub') void controller?.startPasskeyHubSignIn();
-        else controller?.startSignup();
-      },
+      // Web: the account is made on auth.oxy.so. Native: Commons makes it.
+      onCreateAccount: () => (passkeyMode === 'hub' ? openOnOxy('signup') : controller?.startSignup()),
     }),
-    [passkeyMode, controller, openExternal],
+    [passkeyMode, controller, openExternal, openOnOxy],
   );
 
   // Real storage usage for the account menu's "Oxy storage" block. Disabled
@@ -420,7 +419,6 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
       onSignOut: () => {
         void handleSignOut();
       },
-      onOpenIdentity: passkeyMode === 'hub' ? () => openUrl(`${IDENTITY_WEB_ORIGIN}/`) : undefined,
       customItems: (consumerHooks?.menuItems ?? []).map((item) => ({
         ...item,
         onPress: () => {
@@ -429,7 +427,7 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
         },
       })),
     };
-  }, [consumerHooks, onComplete, showBottomSheet, handleSignOut, openExternal, passkeyMode]);
+  }, [consumerHooks, onComplete, showBottomSheet, handleSignOut, openExternal]);
 
   if (!controller) {
     return null;
@@ -462,29 +460,14 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   }
 
   if (view === 'signup') {
-    return (
-      <SignUpView
-        snapshot={snapshot}
-        theme={theme}
-        t={t}
-        passkeyMode={passkeyMode}
-        onOpenHub={() => void controller.startPasskeyHubSignIn()}
-        onCreateIdentityInCommons={() => openExternal(COMMONS_CREATE_IDENTITY_URL)}
-        onGetCommons={alternatives.onGetCommons}
-        onBackToSignIn={() => controller.setView('signin')}
-      />
-    );
+    return <OxySignUpPanel onSignIn={() => controller.setView('signin')} onCreateOnWeb={() => openOnOxy('signup')} />;
   }
 
   return (
-    <SignInEntryView
-      snapshot={snapshot}
-      principals={principals}
-      theme={theme}
-      t={t}
-      handlers={handlers}
-      onContinueWithOxy={() => void controller.signInWithOxy()}
-      alternatives={alternatives}
+    <OxySignInPanel
+      host="dialog"
+      onSignedIn={() => onComplete?.()}
+      onCreateAccount={alternatives.onCreateAccount}
     />
   );
 };

package/src/ui/components/OxyProvider.tsx

@@ -90,7 +90,6 @@ const OxyProvider: FC<OxyProviderProps> = ({
     queryClient: providedQueryClient,
     requireAuth = 'off',
     backgroundSession = false,
-    deviceCredentialStorage = 'persistent',
     language,
 }) => {
 
@@ -240,7 +239,6 @@ const OxyProvider: FC<OxyProviderProps> = ({
                 sessionMode={sessionMode}
                 webAuthMode={webAuthMode}
                 backgroundSession={backgroundSession}
-                deviceCredentialStorage={deviceCredentialStorage}
                 platformStorage={platformStorage}
                 onAuthStateChange={onAuthStateChange as OxyRuntimeProviderProps['onAuthStateChange']}
             >

package/src/ui/components/ProfileButton.tsx

@@ -1,9 +1,6 @@
 import type React from 'react';
 import { useCallback, useEffect, useMemo } from 'react';
-import {
-    type StyleProp,
-    type ViewStyle,
-} from 'react-native';
+import type { StyleProp, ViewStyle } from 'react-native';
 import { View } from 'react-native-css/components';
 import { RiLoginBoxLine } from '@oxy.so/bloom/icons/RiLoginBoxLine';
 import { RiMoreLine } from '@oxy.so/bloom/icons/RiMoreLine';

package/src/ui/components/authChooser/AccountsMenuView.tsx

@@ -51,7 +51,6 @@ import {
   type SwitcherPrincipalRow,
 } from '@oxy.so/core';
 import AvatarCameraBadge from '../AvatarCameraBadge';
-import { HoverPressable } from './primitives';
 import { authChooserStyles as styles } from './styles';
 import {
   resolveAccentHex,
@@ -63,6 +62,34 @@ import {
   type Translate,
 } from './types';
 
+type HoverPressableProps = Omit<React.ComponentProps<typeof Pressable>, 'className'> & {
+  baseClassName: string;
+  hoverClassName: string;
+};
+
+/**
+ * A `Pressable` that appends a hover-tint NativeWind token while pointer-hovered.
+ * The Metro web pipeline here does NOT emit NativeWind `hover:` variants, so hover
+ * is driven by RN's cross-platform `onHoverIn`/`onHoverOut` (they fire only on web
+ * via react-native-web; a no-op on native) toggling a plain background token —
+ * the tint stays a NativeWind class, only the trigger is JS.
+ */
+const HoverPressable: React.FC<HoverPressableProps> = ({
+  baseClassName,
+  hoverClassName,
+  ...rest
+}) => {
+  const [hovered, setHovered] = useState(false);
+  return (
+    <Pressable
+      {...rest}
+      className={hovered ? `${baseClassName} ${hoverClassName}` : baseClassName}
+      onHoverIn={() => setHovered(true)}
+      onHoverOut={() => setHovered(false)}
+    />
+  );
+};
+
 /**
  * Leading glyph for the rows that live in a Bloom grouped section (the MENU
  * block) and for the storage card's cloud, which lines its title up with them.
@@ -477,13 +504,6 @@ const AccountsMenuView: React.FC<AccountsMenuViewProps> = ({
           title={t('accountMenu.settings')}
           onPress={menu.onOpenSettings}
         />
-        {menu.onOpenIdentity ? (
-          <SettingsListItem
-            icon={<MenuIcon name="shield-account-outline" theme={theme} />}
-            title={t('accountMenu.identity')}
-            onPress={menu.onOpenIdentity}
-          />
-        ) : null}
         <SettingsListItem
           icon={<MenuIcon name="help-circle-outline" theme={theme} />}
           title={t('accountMenu.help')}

package/src/ui/components/authChooser/primitives.tsx

@@ -5,8 +5,7 @@
  */
 
 import type React from 'react';
-import { useState } from 'react';
-import { Pressable, View } from 'react-native-css/components';
+import { Pressable, View } from 'react-native';
 import MaterialCommunityIcons from '../../icons/MaterialCommunityIcons';
 import { Avatar } from '@oxy.so/bloom/avatar';
 import { BloomColorScope } from '@oxy.so/bloom/theme';
@@ -18,34 +17,6 @@ import { resolveAccentHex, toPreset, type Theme } from './types';
 /** Diameter of a row avatar (the sign-in view's account rows). */
 const ROW_AVATAR_SIZE = 40;
 
-type HoverPressableProps = Omit<React.ComponentProps<typeof Pressable>, 'className'> & {
-  baseClassName: string;
-  hoverClassName: string;
-};
-
-/**
- * A `Pressable` that appends a hover-tint NativeWind token while pointer-hovered.
- * The Metro web pipeline here does NOT emit NativeWind `hover:` variants, so hover
- * is driven by RN's cross-platform `onHoverIn`/`onHoverOut` (they fire only on web
- * via react-native-web; a no-op on native) toggling a plain background token —
- * the tint stays a NativeWind class, only the trigger is JS.
- */
-export const HoverPressable: React.FC<HoverPressableProps> = ({
-  baseClassName,
-  hoverClassName,
-  ...rest
-}) => {
-  const [hovered, setHovered] = useState(false);
-  return (
-    <Pressable
-      {...rest}
-      className={hovered ? `${baseClassName} ${hoverClassName}` : baseClassName}
-      onHoverIn={() => setHovered(true)}
-      onHoverOut={() => setHovered(false)}
-    />
-  );
-};
-
 /**
  * A SUBORDINATE action: a small centred text link, never a button.
  *
@@ -73,15 +44,6 @@ export const SubtleLink: React.FC<{
   </Pressable>
 );
 
-/** A labelled hairline separating two blocks ("or"). */
-export const Dividerish: React.FC<{ theme: Theme; label: string }> = ({ theme, label }) => (
-  <View style={styles.dividerRow}>
-    <View style={[styles.dividerLine, { backgroundColor: theme.colors.border }]} />
-    <Text style={[styles.dividerText, { color: theme.colors.textSecondary }]}>{label}</Text>
-    <View style={[styles.dividerLine, { backgroundColor: theme.colors.border }]} />
-  </View>
-);
-
 /**
  * A `principal acting as account` row on the sign-in entry — "continue as one of
  * these" rather than a choice of authentication METHOD, which is why it stays

package/src/ui/components/authChooser/signInFailureMessage.ts

@@ -9,18 +9,12 @@
 import type { SignInFailureReason } from '@oxy.so/core';
 import type { Translate } from './types';
 
-/**
- * The toast for `failure`, or `null` when there is nothing to report: a
- * `'cancelled'` attempt is the user's own choice (they closed the window), and
- * the surface already offers "Try again" without scolding them for it.
- */
+/** The toast for `failure`, or `null` when there is nothing to report. */
 export function signInFailureMessage(
   failure: SignInFailureReason | null,
   t: Translate,
 ): string | null {
   switch (failure) {
-    case 'cancelled':
-      return null;
     case 'denied':
       return t('accountSwitcher.signInFailures.denied');
     case 'expired':

package/src/ui/components/authChooser/styles.ts

@@ -140,42 +140,11 @@ export const authChooserStyles = StyleSheet.create({
     fontSize: 14,
     fontWeight: '600',
   },
-  signInBlock: {
-    width: '100%',
-  },
   primaryButton: {
     width: '100%',
     borderRadius: 14,
     marginTop: 8,
   },
-  secondaryButton: {
-    width: '100%',
-    borderRadius: 14,
-    marginTop: 10,
-  },
-  usernameInput: {
-    width: '100%',
-    borderWidth: StyleSheet.hairlineWidth,
-    borderRadius: 14,
-    paddingVertical: 12,
-    paddingHorizontal: 14,
-    fontSize: 16,
-    marginTop: 8,
-  },
-  dividerRow: {
-    flexDirection: 'row',
-    alignItems: 'center',
-    width: '100%',
-    marginVertical: 14,
-  },
-  dividerLine: {
-    flex: 1,
-    height: StyleSheet.hairlineWidth,
-  },
-  dividerText: {
-    marginHorizontal: 12,
-    fontSize: 13,
-  },
   centeredBlock: {
     alignItems: 'center',
     justifyContent: 'center',

package/src/ui/components/authChooser/types.ts

@@ -95,11 +95,6 @@ export interface AccountsMenuActions {
   onPrivacy: () => void;
   onTerms: () => void;
   onSignOut: () => void;
-  /**
-   * Open the person's identity at the identity origin (recovery phrase,
-   * recovery, account deletion). Web only — `undefined` hides the row.
-   */
-  onOpenIdentity?: () => void;
   customItems: readonly {
     key: string;
     label: string;
@@ -111,8 +106,8 @@ export interface AccountsMenuActions {
 /**
  * Where a passkey sign-in or sign-up can run from the current surface.
  *
- * `'hub'`  = web: it runs at the identity origin (`id.oxy.so`) in a popup, on
- *            every web origin, first-party or not.
+ * `'hub'`  = web: it runs in auth.oxy.so's window over the app
+ *            (`continueOnAuth`), on every web origin.
  * `'none'` = native, where Commons owns identity.
  */
 export type PasskeyMode = 'hub' | 'none';

package/src/ui/components/oauthNavigation.ts

@@ -52,7 +52,7 @@ export interface OpenAuthorizeOptions {
  * (see `normalizeOAuthRedirectUri`), so the IdP always returns the tab to `/`,
  * and the return handlers restore this path. Doing it here rather than at each
  * call site is deliberate: every web authorize redirect — silent restore,
- * interactive sign-in, the passkey hub — funnels through this function, so a
+ * interactive sign-in, `continueOnAuth` — funnels through this function, so a
  * new flow cannot forget to preserve the page the visitor came from.
  */
 export function redirectToAuthorize(url: string): void {