@oxy.so/services 4.0.7 → 6.1.0

package/src/ui/components/authChooser/SignInEntryView.tsx

@@ -1,157 +0,0 @@
-/**
- * The sign-in ENTRY (`signin` / `add` views) — ONE primary action.
- *
- * Web: "Continue" opens the identity origin (`id.oxy.so`) in a popup, where the
- * person signs in — or creates an account — with a passkey, and the account's
- * self-custody identity is created or unsealed (one identity, two carriers). No
- * philosophy up front: fingerprint, face or device PIN, and they are in. An
- * account that lives on another device is one subordinate link away (Commons
- * QR). Nothing auto-starts: a browser only opens a popup from a user gesture.
- *
- * Native: "Continue with Oxy" — the Commons flow (shared keychain, else the
- * request Oxy routes to the person's Commons identity).
- *
- * Existing accounts still render ABOVE the CTA: "continue as one of these" is a
- * choice of WHO, not of HOW.
- *
- * Signed in (the "Add another account" entry), a row is an account to switch
- * to, and the current one carries its check. Signed out, nothing here is
- * current: the device may still list an identity it holds (Commons' shared
- * one), but THIS app has no session, so each row reads "Continue as @handle"
- * and choosing it signs in (OxyHQ/oxy#1375 items 20 and 21).
- */
-
-import type React from 'react';
-import { View } from 'react-native';
-import { Button } from '@oxy.so/bloom/button';
-import { Text } from '@oxy.so/bloom/typography';
-import {
-  showsPrincipalHeaders,
-  type AccountDialogSnapshot,
-  type SwitcherPrincipalRow,
-} from '@oxy.so/core';
-import TroubleDisclosure from './TroubleDisclosure';
-import { AccountRow, Dividerish, SubtleLink } from './primitives';
-import { authChooserStyles as styles } from './styles';
-import type {
-  OxyAuthChooserHandlers,
-  OxySignInSurfaceAction,
-  SignInAlternatives,
-  Theme,
-  Translate,
-} from './types';
-
-interface SignInEntryViewProps {
-  snapshot: AccountDialogSnapshot;
-  /** The device's people, each with the accounts they may act as. */
-  principals: SwitcherPrincipalRow[];
-  theme: Theme;
-  t: Translate;
-  handlers: OxyAuthChooserHandlers;
-  /** Native's primary action. Starts the Commons flow; Oxy chooses the route from there. */
-  onContinueWithOxy: () => void;
-  alternatives: SignInAlternatives;
-}
-
-const SignInEntryView: React.FC<SignInEntryViewProps> = ({
-  snapshot,
-  principals,
-  theme,
-  t,
-  handlers,
-  onContinueWithOxy,
-  alternatives,
-}) => {
-  const web = alternatives.passkeyAvailable;
-
-  // Web keeps Commons one link away; native keeps its QR/Commons alternatives
-  // behind the disclosure, as before.
-  const troubleActions: OxySignInSurfaceAction[] = web
-    ? [{ key: 'get-commons-link', label: t('accountSwitcher.getCommons'), onPress: alternatives.onGetCommons }]
-    : [
-        { key: 'scan-qr-link', label: t('accountSwitcher.scanQr'), onPress: alternatives.onShowQr },
-        { key: 'get-commons-link', label: t('accountSwitcher.getCommons'), onPress: alternatives.onGetCommons },
-      ];
-
-  // Whose route this is only needs naming when the list holds more than one
-  // person, or somebody with more than one account — the same rule the account
-  // menu's group headers follow.
-  const namesTheOperator = showsPrincipalHeaders(principals);
-  const rows = principals.flatMap((principal) =>
-    principal.contexts.map((context) => ({
-      context,
-      operatedBy:
-        namesTheOperator && context.isDelegated
-          ? t('accountSwitcher.context.operatedBy', { name: principal.displayName })
-          : null,
-    })),
-  );
-
-  return (
-    <View style={styles.signInBlock}>
-      {rows.length > 0 ? (
-        <View style={styles.rows}>
-          {rows.map(({ context, operatedBy }) => (
-            <AccountRow
-              key={context.contextId}
-              context={context}
-              operatedBy={operatedBy}
-              continueAsLabel={
-                snapshot.hasSession
-                  ? null
-                  : t('signin.chooser.continueAs', {
-                      name: context.handle ? `@${context.handle}` : context.displayName,
-                    })
-              }
-              theme={theme}
-              activating={snapshot.activatingContextId === context.contextId}
-              disabled={snapshot.activatingContextId !== null}
-              onPress={() => handlers.onActivate(context.contextId)}
-            />
-          ))}
-          <Dividerish theme={theme} label={t('signin.or')} />
-        </View>
-      ) : null}
-
-      {web ? (
-        <Text style={[styles.mutedText, { color: theme.colors.textSecondary }]}>
-          {t('accountSwitcher.passkeyHint')}
-        </Text>
-      ) : null}
-
-      <Button
-        appearance="solid" tone="accent"
-        // `lg` (44dp): the surface's ONE primary action is a full-width CTA, and
-        // the default `md` (36dp) is under the touch-target minimum on Android.
-        size="lg"
-        onPress={web ? alternatives.onSignInWithPasskey : onContinueWithOxy}
-        style={styles.primaryButton}
-        testID="continue-with-oxy"
-      >
-        {web ? t('accountSwitcher.continueWithPasskey') : t('accountSwitcher.continueWithOxy')}
-      </Button>
-
-      {/* Account CREATION is not an authentication method — it is the way in for
-          someone who has no account yet — so it keeps its own subordinate link. */}
-      <SubtleLink
-        label={t('signin.createAccountLink')}
-        theme={theme}
-        onPress={alternatives.onCreateAccount}
-        testID="create-account-link"
-      />
-
-      {web ? (
-        <SubtleLink
-          label={t('accountSwitcher.otherDeviceCommons')}
-          theme={theme}
-          onPress={alternatives.onShowQr}
-          testID="scan-qr-link"
-        />
-      ) : null}
-
-      <TroubleDisclosure actions={troubleActions} revealed={false} theme={theme} t={t} />
-    </View>
-  );
-};
-
-export default SignInEntryView;

package/src/ui/components/authChooser/SignUpView.tsx

@@ -1,76 +0,0 @@
-/**
- * Account creation (`signup` view).
- *
- * Web: the account AND its self-custody identity are created at the identity
- * origin (`id.oxy.so`), in the same window a passkey sign-in uses — never on
- * this page, whatever its origin (one identity, two carriers). The sign-in
- * entry's "create an account" link opens that window directly; this view is
- * what `openAccountDialog('signup')` lands on, and offers the same one action.
- *
- * Native: Commons owns identity creation. Deep-link straight in when Commons is
- * installed, else lead with the "Get Commons" acquisition CTA.
- */
-
-import type React from 'react';
-import { View } from 'react-native';
-import { Button } from '@oxy.so/bloom/button';
-import { Text } from '@oxy.so/bloom/typography';
-import type { AccountDialogSnapshot } from '@oxy.so/core';
-import { SubtleLink } from './primitives';
-import { authChooserStyles as styles } from './styles';
-import type { PasskeyMode, Theme, Translate } from './types';
-
-interface SignUpViewProps {
-  snapshot: AccountDialogSnapshot;
-  theme: Theme;
-  t: Translate;
-  passkeyMode: PasskeyMode;
-  /** Open the identity-origin window — web's only creation path. */
-  onOpenHub: () => void;
-  /** Deep-link into Commons' own identity-creation screen (installed only). */
-  onCreateIdentityInCommons: () => void;
-  /** Open the Commons store listing / landing page for this platform. */
-  onGetCommons: () => void;
-  onBackToSignIn: () => void;
-}
-
-const SignUpView: React.FC<SignUpViewProps> = ({
-  snapshot,
-  theme,
-  t,
-  passkeyMode,
-  onOpenHub,
-  onCreateIdentityInCommons,
-  onGetCommons,
-  onBackToSignIn,
-}) => {
-  if (passkeyMode === 'none') {
-    const commonsInstalled = snapshot.commonsAvailability === 'available';
-    return (
-      <View style={styles.centeredBlock}>
-        <Button
-          appearance="solid" tone="accent" size="lg"
-          onPress={commonsInstalled ? onCreateIdentityInCommons : onGetCommons}
-          style={styles.primaryButton}
-        >
-          {commonsInstalled ? t('signup.createInCommons') : t('accountSwitcher.getCommons')}
-        </Button>
-        <SubtleLink label={t('signup.backToSignInLink')} theme={theme} onPress={onBackToSignIn} />
-      </View>
-    );
-  }
-
-  return (
-    <View style={styles.centeredBlock}>
-      <Text style={[styles.mutedText, { color: theme.colors.textSecondary }]}>
-        {t('accountSwitcher.passkeyHint')}
-      </Text>
-      <Button appearance="solid" tone="accent" size="lg" onPress={onOpenHub} style={styles.primaryButton} testID="signup-open-identity">
-        {t('signup.createAccount')}
-      </Button>
-      <SubtleLink label={t('signup.backToSignInLink')} theme={theme} onPress={onBackToSignIn} />
-    </View>
-  );
-};
-
-export default SignUpView;

package/src/ui/components/passkeyHubPopup.ts

@@ -1,28 +0,0 @@
-/**
- * Popup opener for the cross-origin passkey hub (b2).
- *
- * On a non-Oxy web origin (e.g. mention.earth) a WebAuthn ceremony can't run
- * locally — the credential's RP ID is bound to `oxy.so`. Instead,
- * `AccountDialogController.startPasskeyHubSignIn` opens a popup at the
- * auth.oxy.so passkey hub, where the SAME ceremony IS a first-party operation.
- *
- * Kept in its own module (mirroring `oauthNavigation.ts`'s
- * `redirectToAuthorize`) so `window.open` sits behind a plain function the
- * controller wiring in `OxyContext` can inject without touching `window`
- * itself, and so a test can substitute a fake opener.
- */
-
-import type { PopupWindowHandle } from '@oxy.so/core';
-
-/**
- * Open a new, EMPTY popup window. Must be called SYNCHRONOUSLY from within a
- * user-gesture handler (before any `await`) — opening it after an async call
- * loses the gesture attribution and the browser silently blocks it. Returns
- * `null` when blocked, or when there is no DOM `window` (native/SSR — the
- * hub-popup flow does not apply there).
- */
-export function openPasskeyHubPopup(): PopupWindowHandle | null {
-    const win = (globalThis as { window?: Window }).window;
-    if (!win) return null;
-    return win.open('', '_blank', 'width=420,height=640');
-}

package/src/ui/oauth/legacyRedirectLanes.ts

@@ -1,43 +0,0 @@
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-
-import type { WebAuthMode } from './types';
-
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-export function allowsAutomaticIdpRedirect(webAuthMode: WebAuthMode): boolean {
-  return webAuthMode === 'redirect';
-}