@oxy.so/services 4.0.7 → 6.1.0

package/lib/module/ui/components/authChooser/SignInEntryView.js

@@ -1,127 +0,0 @@
-"use strict";
-
-/**
- * The sign-in ENTRY (`signin` / `add` views) — ONE primary action.
- *
- * Web: "Continue" opens the identity origin (`id.oxy.so`) in a popup, where the
- * person signs in — or creates an account — with a passkey, and the account's
- * self-custody identity is created or unsealed (one identity, two carriers). No
- * philosophy up front: fingerprint, face or device PIN, and they are in. An
- * account that lives on another device is one subordinate link away (Commons
- * QR). Nothing auto-starts: a browser only opens a popup from a user gesture.
- *
- * Native: "Continue with Oxy" — the Commons flow (shared keychain, else the
- * request Oxy routes to the person's Commons identity).
- *
- * Existing accounts still render ABOVE the CTA: "continue as one of these" is a
- * choice of WHO, not of HOW.
- *
- * Signed in (the "Add another account" entry), a row is an account to switch
- * to, and the current one carries its check. Signed out, nothing here is
- * current: the device may still list an identity it holds (Commons' shared
- * one), but THIS app has no session, so each row reads "Continue as @handle"
- * and choosing it signs in (OxyHQ/oxy#1375 items 20 and 21).
- */
-
-import { View } from 'react-native';
-import { Button } from '@oxy.so/bloom/button';
-import { Text } from '@oxy.so/bloom/typography';
-import { showsPrincipalHeaders } from '@oxy.so/core';
-import TroubleDisclosure from "./TroubleDisclosure.js";
-import { AccountRow, Dividerish, SubtleLink } from "./primitives.js";
-import { authChooserStyles as styles } from "./styles.js";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-const SignInEntryView = ({
-  snapshot,
-  principals,
-  theme,
-  t,
-  handlers,
-  onContinueWithOxy,
-  alternatives
-}) => {
-  const web = alternatives.passkeyAvailable;
-
-  // Web keeps Commons one link away; native keeps its QR/Commons alternatives
-  // behind the disclosure, as before.
-  const troubleActions = web ? [{
-    key: 'get-commons-link',
-    label: t('accountSwitcher.getCommons'),
-    onPress: alternatives.onGetCommons
-  }] : [{
-    key: 'scan-qr-link',
-    label: t('accountSwitcher.scanQr'),
-    onPress: alternatives.onShowQr
-  }, {
-    key: 'get-commons-link',
-    label: t('accountSwitcher.getCommons'),
-    onPress: alternatives.onGetCommons
-  }];
-
-  // Whose route this is only needs naming when the list holds more than one
-  // person, or somebody with more than one account — the same rule the account
-  // menu's group headers follow.
-  const namesTheOperator = showsPrincipalHeaders(principals);
-  const rows = principals.flatMap(principal => principal.contexts.map(context => ({
-    context,
-    operatedBy: namesTheOperator && context.isDelegated ? t('accountSwitcher.context.operatedBy', {
-      name: principal.displayName
-    }) : null
-  })));
-  return /*#__PURE__*/_jsxs(View, {
-    style: styles.signInBlock,
-    children: [rows.length > 0 ? /*#__PURE__*/_jsxs(View, {
-      style: styles.rows,
-      children: [rows.map(({
-        context,
-        operatedBy
-      }) => /*#__PURE__*/_jsx(AccountRow, {
-        context: context,
-        operatedBy: operatedBy,
-        continueAsLabel: snapshot.hasSession ? null : t('signin.chooser.continueAs', {
-          name: context.handle ? `@${context.handle}` : context.displayName
-        }),
-        theme: theme,
-        activating: snapshot.activatingContextId === context.contextId,
-        disabled: snapshot.activatingContextId !== null,
-        onPress: () => handlers.onActivate(context.contextId)
-      }, context.contextId)), /*#__PURE__*/_jsx(Dividerish, {
-        theme: theme,
-        label: t('signin.or')
-      })]
-    }) : null, web ? /*#__PURE__*/_jsx(Text, {
-      style: [styles.mutedText, {
-        color: theme.colors.textSecondary
-      }],
-      children: t('accountSwitcher.passkeyHint')
-    }) : null, /*#__PURE__*/_jsx(Button, {
-      appearance: "solid",
-      tone: "accent"
-      // `lg` (44dp): the surface's ONE primary action is a full-width CTA, and
-      // the default `md` (36dp) is under the touch-target minimum on Android.
-      ,
-      size: "lg",
-      onPress: web ? alternatives.onSignInWithPasskey : onContinueWithOxy,
-      style: styles.primaryButton,
-      testID: "continue-with-oxy",
-      children: web ? t('accountSwitcher.continueWithPasskey') : t('accountSwitcher.continueWithOxy')
-    }), /*#__PURE__*/_jsx(SubtleLink, {
-      label: t('signin.createAccountLink'),
-      theme: theme,
-      onPress: alternatives.onCreateAccount,
-      testID: "create-account-link"
-    }), web ? /*#__PURE__*/_jsx(SubtleLink, {
-      label: t('accountSwitcher.otherDeviceCommons'),
-      theme: theme,
-      onPress: alternatives.onShowQr,
-      testID: "scan-qr-link"
-    }) : null, /*#__PURE__*/_jsx(TroubleDisclosure, {
-      actions: troubleActions,
-      revealed: false,
-      theme: theme,
-      t: t
-    })]
-  });
-};
-export default SignInEntryView;
-//# sourceMappingURL=SignInEntryView.js.map

package/lib/module/ui/components/authChooser/SignInEntryView.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["View","Button","Text","showsPrincipalHeaders","TroubleDisclosure","AccountRow","Dividerish","SubtleLink","authChooserStyles","styles","jsx","_jsx","jsxs","_jsxs","SignInEntryView","snapshot","principals","theme","t","handlers","onContinueWithOxy","alternatives","web","passkeyAvailable","troubleActions","key","label","onPress","onGetCommons","onShowQr","namesTheOperator","rows","flatMap","principal","contexts","map","context","operatedBy","isDelegated","name","displayName","style","signInBlock","children","length","continueAsLabel","hasSession","handle","activating","activatingContextId","contextId","disabled","onActivate","mutedText","color","colors","textSecondary","appearance","tone","size","onSignInWithPasskey","primaryButton","testID","onCreateAccount","actions","revealed"],"sourceRoot":"../../../../../src","sources":["ui/components/authChooser/SignInEntryView.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,IAAI,QAAQ,cAAc;AACnC,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,IAAI,QAAQ,0BAA0B;AAC/C,SACEC,qBAAqB,QAGhB,cAAc;AACrB,OAAOC,iBAAiB,MAAM,wBAAqB;AACnD,SAASC,UAAU,EAAEC,UAAU,EAAEC,UAAU,QAAQ,iBAAc;AACjE,SAASC,iBAAiB,IAAIC,MAAM,QAAQ,aAAU;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAqBvD,MAAMC,eAA+C,GAAGA,CAAC;EACvDC,QAAQ;EACRC,UAAU;EACVC,KAAK;EACLC,CAAC;EACDC,QAAQ;EACRC,iBAAiB;EACjBC;AACF,CAAC,KAAK;EACJ,MAAMC,GAAG,GAAGD,YAAY,CAACE,gBAAgB;;EAEzC;EACA;EACA,MAAMC,cAAwC,GAAGF,GAAG,GAChD,CAAC;IAAEG,GAAG,EAAE,kBAAkB;IAAEC,KAAK,EAAER,CAAC,CAAC,4BAA4B,CAAC;IAAES,OAAO,EAAEN,YAAY,CAACO;EAAa,CAAC,CAAC,GACzG,CACE;IAAEH,GAAG,EAAE,cAAc;IAAEC,KAAK,EAAER,CAAC,CAAC,wBAAwB,CAAC;IAAES,OAAO,EAAEN,YAAY,CAACQ;EAAS,CAAC,EAC3F;IAAEJ,GAAG,EAAE,kBAAkB;IAAEC,KAAK,EAAER,CAAC,CAAC,4BAA4B,CAAC;IAAES,OAAO,EAAEN,YAAY,CAACO;EAAa,CAAC,CACxG;;EAEL;EACA;EACA;EACA,MAAME,gBAAgB,GAAG3B,qBAAqB,CAACa,UAAU,CAAC;EAC1D,MAAMe,IAAI,GAAGf,UAAU,CAACgB,OAAO,CAAEC,SAAS,IACxCA,SAAS,CAACC,QAAQ,CAACC,GAAG,CAAEC,OAAO,KAAM;IACnCA,OAAO;IACPC,UAAU,EACRP,gBAAgB,IAAIM,OAAO,CAACE,WAAW,GACnCpB,CAAC,CAAC,oCAAoC,EAAE;MAAEqB,IAAI,EAAEN,SAAS,CAACO;IAAY,CAAC,CAAC,GACxE;EACR,CAAC,CAAC,CACJ,CAAC;EAED,oBACE3B,KAAA,CAACb,IAAI;IAACyC,KAAK,EAAEhC,MAAM,CAACiC,WAAY;IAAAC,QAAA,GAC7BZ,IAAI,CAACa,MAAM,GAAG,CAAC,gBACd/B,KAAA,CAACb,IAAI;MAACyC,KAAK,EAAEhC,MAAM,CAACsB,IAAK;MAAAY,QAAA,GACtBZ,IAAI,CAACI,GAAG,CAAC,CAAC;QAAEC,OAAO;QAAEC;MAAW,CAAC,kBAChC1B,IAAA,CAACN,UAAU;QAET+B,OAAO,EAAEA,OAAQ;QACjBC,UAAU,EAAEA,UAAW;QACvBQ,eAAe,EACb9B,QAAQ,CAAC+B,UAAU,GACf,IAAI,GACJ5B,CAAC,CAAC,2BAA2B,EAAE;UAC7BqB,IAAI,EAAEH,OAAO,CAACW,MAAM,GAAG,IAAIX,OAAO,CAACW,MAAM,EAAE,GAAGX,OAAO,CAACI;QACxD,CAAC,CACN;QACDvB,KAAK,EAAEA,KAAM;QACb+B,UAAU,EAAEjC,QAAQ,CAACkC,mBAAmB,KAAKb,OAAO,CAACc,SAAU;QAC/DC,QAAQ,EAAEpC,QAAQ,CAACkC,mBAAmB,KAAK,IAAK;QAChDtB,OAAO,EAAEA,CAAA,KAAMR,QAAQ,CAACiC,UAAU,CAAChB,OAAO,CAACc,SAAS;MAAE,GAbjDd,OAAO,CAACc,SAcd,CACF,CAAC,eACFvC,IAAA,CAACL,UAAU;QAACW,KAAK,EAAEA,KAAM;QAACS,KAAK,EAAER,CAAC,CAAC,WAAW;MAAE,CAAE,CAAC;IAAA,CAC/C,CAAC,GACL,IAAI,EAEPI,GAAG,gBACFX,IAAA,CAACT,IAAI;MAACuC,KAAK,EAAE,CAAChC,MAAM,CAAC4C,SAAS,EAAE;QAAEC,KAAK,EAAErC,KAAK,CAACsC,MAAM,CAACC;MAAc,CAAC,CAAE;MAAAb,QAAA,EACpEzB,CAAC,CAAC,6BAA6B;IAAC,CAC7B,CAAC,GACL,IAAI,eAERP,IAAA,CAACV,MAAM;MACLwD,UAAU,EAAC,OAAO;MAACC,IAAI,EAAC;MACxB;MACA;MAAA;MACAC,IAAI,EAAC,IAAI;MACThC,OAAO,EAAEL,GAAG,GAAGD,YAAY,CAACuC,mBAAmB,GAAGxC,iBAAkB;MACpEqB,KAAK,EAAEhC,MAAM,CAACoD,aAAc;MAC5BC,MAAM,EAAC,mBAAmB;MAAAnB,QAAA,EAEzBrB,GAAG,GAAGJ,CAAC,CAAC,qCAAqC,CAAC,GAAGA,CAAC,CAAC,iCAAiC;IAAC,CAChF,CAAC,eAITP,IAAA,CAACJ,UAAU;MACTmB,KAAK,EAAER,CAAC,CAAC,0BAA0B,CAAE;MACrCD,KAAK,EAAEA,KAAM;MACbU,OAAO,EAAEN,YAAY,CAAC0C,eAAgB;MACtCD,MAAM,EAAC;IAAqB,CAC7B,CAAC,EAEDxC,GAAG,gBACFX,IAAA,CAACJ,UAAU;MACTmB,KAAK,EAAER,CAAC,CAAC,oCAAoC,CAAE;MAC/CD,KAAK,EAAEA,KAAM;MACbU,OAAO,EAAEN,YAAY,CAACQ,QAAS;MAC/BiC,MAAM,EAAC;IAAc,CACtB,CAAC,GACA,IAAI,eAERnD,IAAA,CAACP,iBAAiB;MAAC4D,OAAO,EAAExC,cAAe;MAACyC,QAAQ,EAAE,KAAM;MAAChD,KAAK,EAAEA,KAAM;MAACC,CAAC,EAAEA;IAAE,CAAE,CAAC;EAAA,CAC/E,CAAC;AAEX,CAAC;AAED,eAAeJ,eAAe","ignoreList":[]}

package/lib/module/ui/components/authChooser/SignUpView.js

@@ -1,73 +0,0 @@
-"use strict";
-
-/**
- * Account creation (`signup` view).
- *
- * Web: the account AND its self-custody identity are created at the identity
- * origin (`id.oxy.so`), in the same window a passkey sign-in uses — never on
- * this page, whatever its origin (one identity, two carriers). The sign-in
- * entry's "create an account" link opens that window directly; this view is
- * what `openAccountDialog('signup')` lands on, and offers the same one action.
- *
- * Native: Commons owns identity creation. Deep-link straight in when Commons is
- * installed, else lead with the "Get Commons" acquisition CTA.
- */
-
-import { View } from 'react-native';
-import { Button } from '@oxy.so/bloom/button';
-import { Text } from '@oxy.so/bloom/typography';
-import { SubtleLink } from "./primitives.js";
-import { authChooserStyles as styles } from "./styles.js";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-const SignUpView = ({
-  snapshot,
-  theme,
-  t,
-  passkeyMode,
-  onOpenHub,
-  onCreateIdentityInCommons,
-  onGetCommons,
-  onBackToSignIn
-}) => {
-  if (passkeyMode === 'none') {
-    const commonsInstalled = snapshot.commonsAvailability === 'available';
-    return /*#__PURE__*/_jsxs(View, {
-      style: styles.centeredBlock,
-      children: [/*#__PURE__*/_jsx(Button, {
-        appearance: "solid",
-        tone: "accent",
-        size: "lg",
-        onPress: commonsInstalled ? onCreateIdentityInCommons : onGetCommons,
-        style: styles.primaryButton,
-        children: commonsInstalled ? t('signup.createInCommons') : t('accountSwitcher.getCommons')
-      }), /*#__PURE__*/_jsx(SubtleLink, {
-        label: t('signup.backToSignInLink'),
-        theme: theme,
-        onPress: onBackToSignIn
-      })]
-    });
-  }
-  return /*#__PURE__*/_jsxs(View, {
-    style: styles.centeredBlock,
-    children: [/*#__PURE__*/_jsx(Text, {
-      style: [styles.mutedText, {
-        color: theme.colors.textSecondary
-      }],
-      children: t('accountSwitcher.passkeyHint')
-    }), /*#__PURE__*/_jsx(Button, {
-      appearance: "solid",
-      tone: "accent",
-      size: "lg",
-      onPress: onOpenHub,
-      style: styles.primaryButton,
-      testID: "signup-open-identity",
-      children: t('signup.createAccount')
-    }), /*#__PURE__*/_jsx(SubtleLink, {
-      label: t('signup.backToSignInLink'),
-      theme: theme,
-      onPress: onBackToSignIn
-    })]
-  });
-};
-export default SignUpView;
-//# sourceMappingURL=SignUpView.js.map

package/lib/module/ui/components/authChooser/SignUpView.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["View","Button","Text","SubtleLink","authChooserStyles","styles","jsx","_jsx","jsxs","_jsxs","SignUpView","snapshot","theme","t","passkeyMode","onOpenHub","onCreateIdentityInCommons","onGetCommons","onBackToSignIn","commonsInstalled","commonsAvailability","style","centeredBlock","children","appearance","tone","size","onPress","primaryButton","label","mutedText","color","colors","textSecondary","testID"],"sourceRoot":"../../../../../src","sources":["ui/components/authChooser/SignUpView.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,IAAI,QAAQ,cAAc;AACnC,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,IAAI,QAAQ,0BAA0B;AAE/C,SAASC,UAAU,QAAQ,iBAAc;AACzC,SAASC,iBAAiB,IAAIC,MAAM,QAAQ,aAAU;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAiBvD,MAAMC,UAAqC,GAAGA,CAAC;EAC7CC,QAAQ;EACRC,KAAK;EACLC,CAAC;EACDC,WAAW;EACXC,SAAS;EACTC,yBAAyB;EACzBC,YAAY;EACZC;AACF,CAAC,KAAK;EACJ,IAAIJ,WAAW,KAAK,MAAM,EAAE;IAC1B,MAAMK,gBAAgB,GAAGR,QAAQ,CAACS,mBAAmB,KAAK,WAAW;IACrE,oBACEX,KAAA,CAACT,IAAI;MAACqB,KAAK,EAAEhB,MAAM,CAACiB,aAAc;MAAAC,QAAA,gBAChChB,IAAA,CAACN,MAAM;QACLuB,UAAU,EAAC,OAAO;QAACC,IAAI,EAAC,QAAQ;QAACC,IAAI,EAAC,IAAI;QAC1CC,OAAO,EAAER,gBAAgB,GAAGH,yBAAyB,GAAGC,YAAa;QACrEI,KAAK,EAAEhB,MAAM,CAACuB,aAAc;QAAAL,QAAA,EAE3BJ,gBAAgB,GAAGN,CAAC,CAAC,wBAAwB,CAAC,GAAGA,CAAC,CAAC,4BAA4B;MAAC,CAC3E,CAAC,eACTN,IAAA,CAACJ,UAAU;QAAC0B,KAAK,EAAEhB,CAAC,CAAC,yBAAyB,CAAE;QAACD,KAAK,EAAEA,KAAM;QAACe,OAAO,EAAET;MAAe,CAAE,CAAC;IAAA,CACtF,CAAC;EAEX;EAEA,oBACET,KAAA,CAACT,IAAI;IAACqB,KAAK,EAAEhB,MAAM,CAACiB,aAAc;IAAAC,QAAA,gBAChChB,IAAA,CAACL,IAAI;MAACmB,KAAK,EAAE,CAAChB,MAAM,CAACyB,SAAS,EAAE;QAAEC,KAAK,EAAEnB,KAAK,CAACoB,MAAM,CAACC;MAAc,CAAC,CAAE;MAAAV,QAAA,EACpEV,CAAC,CAAC,6BAA6B;IAAC,CAC7B,CAAC,eACPN,IAAA,CAACN,MAAM;MAACuB,UAAU,EAAC,OAAO;MAACC,IAAI,EAAC,QAAQ;MAACC,IAAI,EAAC,IAAI;MAACC,OAAO,EAAEZ,SAAU;MAACM,KAAK,EAAEhB,MAAM,CAACuB,aAAc;MAACM,MAAM,EAAC,sBAAsB;MAAAX,QAAA,EAC9HV,CAAC,CAAC,sBAAsB;IAAC,CACpB,CAAC,eACTN,IAAA,CAACJ,UAAU;MAAC0B,KAAK,EAAEhB,CAAC,CAAC,yBAAyB,CAAE;MAACD,KAAK,EAAEA,KAAM;MAACe,OAAO,EAAET;IAAe,CAAE,CAAC;EAAA,CACtF,CAAC;AAEX,CAAC;AAED,eAAeR,UAAU","ignoreList":[]}

package/lib/module/ui/components/passkeyHubPopup.js

@@ -1,29 +0,0 @@
-"use strict";
-
-/**
- * Popup opener for the cross-origin passkey hub (b2).
- *
- * On a non-Oxy web origin (e.g. mention.earth) a WebAuthn ceremony can't run
- * locally — the credential's RP ID is bound to `oxy.so`. Instead,
- * `AccountDialogController.startPasskeyHubSignIn` opens a popup at the
- * auth.oxy.so passkey hub, where the SAME ceremony IS a first-party operation.
- *
- * Kept in its own module (mirroring `oauthNavigation.ts`'s
- * `redirectToAuthorize`) so `window.open` sits behind a plain function the
- * controller wiring in `OxyContext` can inject without touching `window`
- * itself, and so a test can substitute a fake opener.
- */
-
-/**
- * Open a new, EMPTY popup window. Must be called SYNCHRONOUSLY from within a
- * user-gesture handler (before any `await`) — opening it after an async call
- * loses the gesture attribution and the browser silently blocks it. Returns
- * `null` when blocked, or when there is no DOM `window` (native/SSR — the
- * hub-popup flow does not apply there).
- */
-export function openPasskeyHubPopup() {
-  const win = globalThis.window;
-  if (!win) return null;
-  return win.open('', '_blank', 'width=420,height=640');
-}
-//# sourceMappingURL=passkeyHubPopup.js.map

package/lib/module/ui/components/passkeyHubPopup.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["openPasskeyHubPopup","win","globalThis","window","open"],"sourceRoot":"../../../../src","sources":["ui/components/passkeyHubPopup.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,mBAAmBA,CAAA,EAA6B;EAC5D,MAAMC,GAAG,GAAIC,UAAU,CAAyBC,MAAM;EACtD,IAAI,CAACF,GAAG,EAAE,OAAO,IAAI;EACrB,OAAOA,GAAG,CAACG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,sBAAsB,CAAC;AACzD","ignoreList":[]}

package/lib/module/ui/oauth/legacyRedirectLanes.js

@@ -1,44 +0,0 @@
-"use strict";
-
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-export function allowsAutomaticIdpRedirect(webAuthMode) {
-  return webAuthMode === 'redirect';
-}
-//# sourceMappingURL=legacyRedirectLanes.js.map

package/lib/module/ui/oauth/legacyRedirectLanes.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["allowsAutomaticIdpRedirect","webAuthMode"],"sourceRoot":"../../../../src","sources":["ui/oauth/legacyRedirectLanes.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,0BAA0BA,CAACC,WAAwB,EAAW;EAC5E,OAAOA,WAAW,KAAK,UAAU;AACnC","ignoreList":[]}

package/lib/typescript/commonjs/ui/components/authChooser/SignInEntryView.d.ts

@@ -1,39 +0,0 @@
-/**
- * The sign-in ENTRY (`signin` / `add` views) — ONE primary action.
- *
- * Web: "Continue" opens the identity origin (`id.oxy.so`) in a popup, where the
- * person signs in — or creates an account — with a passkey, and the account's
- * self-custody identity is created or unsealed (one identity, two carriers). No
- * philosophy up front: fingerprint, face or device PIN, and they are in. An
- * account that lives on another device is one subordinate link away (Commons
- * QR). Nothing auto-starts: a browser only opens a popup from a user gesture.
- *
- * Native: "Continue with Oxy" — the Commons flow (shared keychain, else the
- * request Oxy routes to the person's Commons identity).
- *
- * Existing accounts still render ABOVE the CTA: "continue as one of these" is a
- * choice of WHO, not of HOW.
- *
- * Signed in (the "Add another account" entry), a row is an account to switch
- * to, and the current one carries its check. Signed out, nothing here is
- * current: the device may still list an identity it holds (Commons' shared
- * one), but THIS app has no session, so each row reads "Continue as @handle"
- * and choosing it signs in (OxyHQ/oxy#1375 items 20 and 21).
- */
-import type React from 'react';
-import { type AccountDialogSnapshot, type SwitcherPrincipalRow } from '@oxy.so/core';
-import type { OxyAuthChooserHandlers, SignInAlternatives, Theme, Translate } from './types';
-interface SignInEntryViewProps {
-    snapshot: AccountDialogSnapshot;
-    /** The device's people, each with the accounts they may act as. */
-    principals: SwitcherPrincipalRow[];
-    theme: Theme;
-    t: Translate;
-    handlers: OxyAuthChooserHandlers;
-    /** Native's primary action. Starts the Commons flow; Oxy chooses the route from there. */
-    onContinueWithOxy: () => void;
-    alternatives: SignInAlternatives;
-}
-declare const SignInEntryView: React.FC<SignInEntryViewProps>;
-export default SignInEntryView;
-//# sourceMappingURL=SignInEntryView.d.ts.map

package/lib/typescript/commonjs/ui/components/authChooser/SignInEntryView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInEntryView.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/components/authChooser/SignInEntryView.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EAC1B,MAAM,cAAc,CAAC;AAItB,OAAO,KAAK,EACV,sBAAsB,EAEtB,kBAAkB,EAClB,KAAK,EACL,SAAS,EACV,MAAM,SAAS,CAAC;AAEjB,UAAU,oBAAoB;IAC5B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,mEAAmE;IACnE,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACnC,KAAK,EAAE,KAAK,CAAC;IACb,CAAC,EAAE,SAAS,CAAC;IACb,QAAQ,EAAE,sBAAsB,CAAC;IACjC,0FAA0F;IAC1F,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,YAAY,EAAE,kBAAkB,CAAC;CAClC;AAED,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAmGnD,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/lib/typescript/commonjs/ui/components/authChooser/SignUpView.d.ts

@@ -1,31 +0,0 @@
-/**
- * Account creation (`signup` view).
- *
- * Web: the account AND its self-custody identity are created at the identity
- * origin (`id.oxy.so`), in the same window a passkey sign-in uses — never on
- * this page, whatever its origin (one identity, two carriers). The sign-in
- * entry's "create an account" link opens that window directly; this view is
- * what `openAccountDialog('signup')` lands on, and offers the same one action.
- *
- * Native: Commons owns identity creation. Deep-link straight in when Commons is
- * installed, else lead with the "Get Commons" acquisition CTA.
- */
-import type React from 'react';
-import type { AccountDialogSnapshot } from '@oxy.so/core';
-import type { PasskeyMode, Theme, Translate } from './types';
-interface SignUpViewProps {
-    snapshot: AccountDialogSnapshot;
-    theme: Theme;
-    t: Translate;
-    passkeyMode: PasskeyMode;
-    /** Open the identity-origin window — web's only creation path. */
-    onOpenHub: () => void;
-    /** Deep-link into Commons' own identity-creation screen (installed only). */
-    onCreateIdentityInCommons: () => void;
-    /** Open the Commons store listing / landing page for this platform. */
-    onGetCommons: () => void;
-    onBackToSignIn: () => void;
-}
-declare const SignUpView: React.FC<SignUpViewProps>;
-export default SignUpView;
-//# sourceMappingURL=SignUpView.d.ts.map

package/lib/typescript/commonjs/ui/components/authChooser/SignUpView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignUpView.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/components/authChooser/SignUpView.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAG1D,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAE7D,UAAU,eAAe;IACvB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC;IACb,CAAC,EAAE,SAAS,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,6EAA6E;IAC7E,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,uEAAuE;IACvE,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,QAAA,MAAM,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAqCzC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/lib/typescript/commonjs/ui/components/passkeyHubPopup.d.ts

@@ -1,23 +0,0 @@
-/**
- * Popup opener for the cross-origin passkey hub (b2).
- *
- * On a non-Oxy web origin (e.g. mention.earth) a WebAuthn ceremony can't run
- * locally — the credential's RP ID is bound to `oxy.so`. Instead,
- * `AccountDialogController.startPasskeyHubSignIn` opens a popup at the
- * auth.oxy.so passkey hub, where the SAME ceremony IS a first-party operation.
- *
- * Kept in its own module (mirroring `oauthNavigation.ts`'s
- * `redirectToAuthorize`) so `window.open` sits behind a plain function the
- * controller wiring in `OxyContext` can inject without touching `window`
- * itself, and so a test can substitute a fake opener.
- */
-import type { PopupWindowHandle } from '@oxy.so/core';
-/**
- * Open a new, EMPTY popup window. Must be called SYNCHRONOUSLY from within a
- * user-gesture handler (before any `await`) — opening it after an async call
- * loses the gesture attribution and the browser silently blocks it. Returns
- * `null` when blocked, or when there is no DOM `window` (native/SSR — the
- * hub-popup flow does not apply there).
- */
-export declare function openPasskeyHubPopup(): PopupWindowHandle | null;
-//# sourceMappingURL=passkeyHubPopup.d.ts.map

package/lib/typescript/commonjs/ui/components/passkeyHubPopup.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passkeyHubPopup.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/passkeyHubPopup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,iBAAiB,GAAG,IAAI,CAI9D"}

package/lib/typescript/commonjs/ui/oauth/legacyRedirectLanes.d.ts

@@ -1,40 +0,0 @@
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-import type { WebAuthMode } from './types';
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-export declare function allowsAutomaticIdpRedirect(webAuthMode: WebAuthMode): boolean;
-//# sourceMappingURL=legacyRedirectLanes.d.ts.map

package/lib/typescript/commonjs/ui/oauth/legacyRedirectLanes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"legacyRedirectLanes.d.ts","sourceRoot":"","sources":["../../../../../src/ui/oauth/legacyRedirectLanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAE5E"}

package/lib/typescript/module/ui/components/authChooser/SignInEntryView.d.ts

@@ -1,39 +0,0 @@
-/**
- * The sign-in ENTRY (`signin` / `add` views) — ONE primary action.
- *
- * Web: "Continue" opens the identity origin (`id.oxy.so`) in a popup, where the
- * person signs in — or creates an account — with a passkey, and the account's
- * self-custody identity is created or unsealed (one identity, two carriers). No
- * philosophy up front: fingerprint, face or device PIN, and they are in. An
- * account that lives on another device is one subordinate link away (Commons
- * QR). Nothing auto-starts: a browser only opens a popup from a user gesture.
- *
- * Native: "Continue with Oxy" — the Commons flow (shared keychain, else the
- * request Oxy routes to the person's Commons identity).
- *
- * Existing accounts still render ABOVE the CTA: "continue as one of these" is a
- * choice of WHO, not of HOW.
- *
- * Signed in (the "Add another account" entry), a row is an account to switch
- * to, and the current one carries its check. Signed out, nothing here is
- * current: the device may still list an identity it holds (Commons' shared
- * one), but THIS app has no session, so each row reads "Continue as @handle"
- * and choosing it signs in (OxyHQ/oxy#1375 items 20 and 21).
- */
-import type React from 'react';
-import { type AccountDialogSnapshot, type SwitcherPrincipalRow } from '@oxy.so/core';
-import type { OxyAuthChooserHandlers, SignInAlternatives, Theme, Translate } from './types.js';
-interface SignInEntryViewProps {
-    snapshot: AccountDialogSnapshot;
-    /** The device's people, each with the accounts they may act as. */
-    principals: SwitcherPrincipalRow[];
-    theme: Theme;
-    t: Translate;
-    handlers: OxyAuthChooserHandlers;
-    /** Native's primary action. Starts the Commons flow; Oxy chooses the route from there. */
-    onContinueWithOxy: () => void;
-    alternatives: SignInAlternatives;
-}
-declare const SignInEntryView: React.FC<SignInEntryViewProps>;
-export default SignInEntryView;
-//# sourceMappingURL=SignInEntryView.d.ts.map

package/lib/typescript/module/ui/components/authChooser/SignInEntryView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInEntryView.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/components/authChooser/SignInEntryView.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EAC1B,MAAM,cAAc,CAAC;AAItB,OAAO,KAAK,EACV,sBAAsB,EAEtB,kBAAkB,EAClB,KAAK,EACL,SAAS,EACV,MAAM,YAAS,CAAC;AAEjB,UAAU,oBAAoB;IAC5B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,mEAAmE;IACnE,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACnC,KAAK,EAAE,KAAK,CAAC;IACb,CAAC,EAAE,SAAS,CAAC;IACb,QAAQ,EAAE,sBAAsB,CAAC;IACjC,0FAA0F;IAC1F,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,YAAY,EAAE,kBAAkB,CAAC;CAClC;AAED,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAmGnD,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/lib/typescript/module/ui/components/authChooser/SignUpView.d.ts

@@ -1,31 +0,0 @@
-/**
- * Account creation (`signup` view).
- *
- * Web: the account AND its self-custody identity are created at the identity
- * origin (`id.oxy.so`), in the same window a passkey sign-in uses — never on
- * this page, whatever its origin (one identity, two carriers). The sign-in
- * entry's "create an account" link opens that window directly; this view is
- * what `openAccountDialog('signup')` lands on, and offers the same one action.
- *
- * Native: Commons owns identity creation. Deep-link straight in when Commons is
- * installed, else lead with the "Get Commons" acquisition CTA.
- */
-import type React from 'react';
-import type { AccountDialogSnapshot } from '@oxy.so/core';
-import type { PasskeyMode, Theme, Translate } from './types.js';
-interface SignUpViewProps {
-    snapshot: AccountDialogSnapshot;
-    theme: Theme;
-    t: Translate;
-    passkeyMode: PasskeyMode;
-    /** Open the identity-origin window — web's only creation path. */
-    onOpenHub: () => void;
-    /** Deep-link into Commons' own identity-creation screen (installed only). */
-    onCreateIdentityInCommons: () => void;
-    /** Open the Commons store listing / landing page for this platform. */
-    onGetCommons: () => void;
-    onBackToSignIn: () => void;
-}
-declare const SignUpView: React.FC<SignUpViewProps>;
-export default SignUpView;
-//# sourceMappingURL=SignUpView.d.ts.map

package/lib/typescript/module/ui/components/authChooser/SignUpView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignUpView.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/components/authChooser/SignUpView.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAG1D,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAS,CAAC;AAE7D,UAAU,eAAe;IACvB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC;IACb,CAAC,EAAE,SAAS,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,6EAA6E;IAC7E,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,uEAAuE;IACvE,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,QAAA,MAAM,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAqCzC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/lib/typescript/module/ui/components/passkeyHubPopup.d.ts

@@ -1,23 +0,0 @@
-/**
- * Popup opener for the cross-origin passkey hub (b2).
- *
- * On a non-Oxy web origin (e.g. mention.earth) a WebAuthn ceremony can't run
- * locally — the credential's RP ID is bound to `oxy.so`. Instead,
- * `AccountDialogController.startPasskeyHubSignIn` opens a popup at the
- * auth.oxy.so passkey hub, where the SAME ceremony IS a first-party operation.
- *
- * Kept in its own module (mirroring `oauthNavigation.ts`'s
- * `redirectToAuthorize`) so `window.open` sits behind a plain function the
- * controller wiring in `OxyContext` can inject without touching `window`
- * itself, and so a test can substitute a fake opener.
- */
-import type { PopupWindowHandle } from '@oxy.so/core';
-/**
- * Open a new, EMPTY popup window. Must be called SYNCHRONOUSLY from within a
- * user-gesture handler (before any `await`) — opening it after an async call
- * loses the gesture attribution and the browser silently blocks it. Returns
- * `null` when blocked, or when there is no DOM `window` (native/SSR — the
- * hub-popup flow does not apply there).
- */
-export declare function openPasskeyHubPopup(): PopupWindowHandle | null;
-//# sourceMappingURL=passkeyHubPopup.d.ts.map

package/lib/typescript/module/ui/components/passkeyHubPopup.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passkeyHubPopup.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/passkeyHubPopup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,iBAAiB,GAAG,IAAI,CAI9D"}

package/lib/typescript/module/ui/oauth/legacyRedirectLanes.d.ts

@@ -1,40 +0,0 @@
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-import type { WebAuthMode } from './types.js';
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-export declare function allowsAutomaticIdpRedirect(webAuthMode: WebAuthMode): boolean;
-//# sourceMappingURL=legacyRedirectLanes.d.ts.map

package/lib/typescript/module/ui/oauth/legacyRedirectLanes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"legacyRedirectLanes.d.ts","sourceRoot":"","sources":["../../../../../src/ui/oauth/legacyRedirectLanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAS,CAAC;AAE3C;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAE5E"}