@oxy.so/services 6.0.0 → 6.1.0

package/lib/commonjs/ui/components/signIn/OxyDeleteAccountPanel.js

@@ -0,0 +1,114 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.OxyDeleteAccountPanel = void 0;
+var _react = require("react");
+var _OxyContext = require("../../context/OxyContext.js");
+var _useI18n = require("../../hooks/useI18n.js");
+var _passkeyClient = require("../../../webauthn/passkeyClient");
+var _passkeyFlow = require("../../context/passkeyFlow.js");
+var _OxyAuthScreen = require("./OxyAuthScreen.js");
+var _accountFlowParts = require("./accountFlowParts.js");
+var _jsxRuntime = require("react/jsx-runtime");
+/**
+ * Deleting a passkey account (ADR 0029 D3), auth.oxy.so's `/delete-account`.
+ *
+ * A passkey account has no key to sign its deletion with, so the person types
+ * the username and asserts one of the account's passkeys — on auth.oxy.so, the
+ * one origin that asserts them — over a challenge the API minted for the
+ * account. An account with a Commons key is deleted in Commons, with its key.
+ * The page must be signed in as the account; the host renders sign-in first.
+ */
+
+const OxyDeleteAccountPanel = ({
+  onDeleted
+}) => {
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const {
+    user,
+    oxyServices,
+    logout
+  } = (0, _OxyContext.useOxy)();
+  const [confirmText, setConfirmText] = (0, _react.useState)('');
+  const [pending, setPending] = (0, _react.useState)(false);
+  const [error, setError] = (0, _react.useState)(null);
+  const [deleted, setDeleted] = (0, _react.useState)(false);
+  if (deleted) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreen, {
+      children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+        title: t('deleteAccount.passkey.done'),
+        description: t('deleteAccount.passkey.closeWindow')
+      })
+    });
+  }
+  const username = user?.username ?? '';
+  if (user?.publicKey) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreen, {
+      children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+        title: t('deleteAccount.handoff.commonsTitle'),
+        description: t('deleteAccount.passkey.commons')
+      })
+    });
+  }
+
+  // The ceremony opens the browser's passkey prompt, so it starts from the press.
+  const remove = () => {
+    if (pending) return;
+    if (confirmText.trim() !== username) {
+      setError(t('deleteAccount.confirmLabel', {
+        username
+      }));
+      return;
+    }
+    setError(null);
+    setPending(true);
+    (async () => {
+      if (!(0, _passkeyClient.isPasskeySupported)()) throw new Error(_passkeyFlow.PASSKEY_UNSUPPORTED_MESSAGE);
+      const options = await oxyServices.getAccountDeletionOptions();
+      const assertion = await (0, _passkeyClient.runAuthenticationCeremony)(options);
+      await oxyServices.deleteAccountWithPasskey(confirmText.trim(), assertion);
+      await logout().catch(() => undefined);
+      setDeleted(true);
+      onDeleted?.();
+    })().catch(reason => setError((0, _accountFlowParts.describeAccountFlowError)(reason, t))).finally(() => setPending(false));
+  };
+  return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+    children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+      title: t('deleteAccount.title'),
+      description: t('deleteAccount.passkey.subtitle', {
+        username
+      })
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowNote, {
+      children: t('deleteAccount.warning')
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowField, {
+      label: t('deleteAccount.confirmLabel', {
+        username
+      }),
+      value: confirmText,
+      onChange: value => {
+        setConfirmText(value);
+        if (error) setError(null);
+      },
+      onSubmit: remove,
+      error: null,
+      disabled: pending,
+      placeholder: username,
+      autoComplete: "off",
+      testID: "delete-account-confirm"
+    }), error ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowErrorLine, {
+      message: error
+    }) : null, /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowAction, {
+      label: t('deleteAccount.passkey.action'),
+      onPress: remove,
+      pending: pending,
+      disabled: confirmText.trim() !== username,
+      testID: "delete-account-passkey"
+    })]
+  });
+};
+exports.OxyDeleteAccountPanel = OxyDeleteAccountPanel;
+//# sourceMappingURL=OxyDeleteAccountPanel.js.map

package/lib/commonjs/ui/components/signIn/OxyDeleteAccountPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_OxyContext","_useI18n","_passkeyClient","_passkeyFlow","_OxyAuthScreen","_accountFlowParts","_jsxRuntime","OxyDeleteAccountPanel","onDeleted","t","useI18n","user","oxyServices","logout","useOxy","confirmText","setConfirmText","useState","pending","setPending","error","setError","deleted","setDeleted","jsx","OxyAuthScreen","children","OxyAuthScreenHeader","title","description","username","publicKey","remove","trim","isPasskeySupported","Error","PASSKEY_UNSUPPORTED_MESSAGE","options","getAccountDeletionOptions","assertion","runAuthenticationCeremony","deleteAccountWithPasskey","catch","undefined","reason","describeAccountFlowError","finally","jsxs","AccountFlowNote","AccountFlowField","label","value","onChange","onSubmit","disabled","placeholder","autoComplete","testID","AccountFlowErrorLine","message","AccountFlowAction","onPress","exports"],"sourceRoot":"../../../../../src","sources":["ui/components/signIn/OxyDeleteAccountPanel.tsx"],"mappings":";;;;;;AAWA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AACA,IAAAK,cAAA,GAAAL,OAAA;AACA,IAAAM,iBAAA,GAAAN,OAAA;AAM4B,IAAAO,WAAA,GAAAP,OAAA;AAvB5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAsBO,MAAMQ,qBAA2D,GAAGA,CAAC;EAAEC;AAAU,CAAC,KAAK;EAC5F,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,IAAI;IAAEC,WAAW;IAAEC;EAAO,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAC9C,MAAM,CAACC,WAAW,EAAEC,cAAc,CAAC,GAAG,IAAAC,eAAQ,EAAC,EAAE,CAAC;EAClD,MAAM,CAACC,OAAO,EAAEC,UAAU,CAAC,GAAG,IAAAF,eAAQ,EAAC,KAAK,CAAC;EAC7C,MAAM,CAACG,KAAK,EAAEC,QAAQ,CAAC,GAAG,IAAAJ,eAAQ,EAAgB,IAAI,CAAC;EACvD,MAAM,CAACK,OAAO,EAAEC,UAAU,CAAC,GAAG,IAAAN,eAAQ,EAAC,KAAK,CAAC;EAE7C,IAAIK,OAAO,EAAE;IACX,oBACE,IAAAhB,WAAA,CAAAkB,GAAA,EAACpB,cAAA,CAAAqB,aAAa;MAAAC,QAAA,eACZ,IAAApB,WAAA,CAAAkB,GAAA,EAACpB,cAAA,CAAAuB,mBAAmB;QAACC,KAAK,EAAEnB,CAAC,CAAC,4BAA4B,CAAE;QAACoB,WAAW,EAAEpB,CAAC,CAAC,mCAAmC;MAAE,CAAE;IAAC,CACvG,CAAC;EAEpB;EAEA,MAAMqB,QAAQ,GAAGnB,IAAI,EAAEmB,QAAQ,IAAI,EAAE;EACrC,IAAInB,IAAI,EAAEoB,SAAS,EAAE;IACnB,oBACE,IAAAzB,WAAA,CAAAkB,GAAA,EAACpB,cAAA,CAAAqB,aAAa;MAAAC,QAAA,eACZ,IAAApB,WAAA,CAAAkB,GAAA,EAACpB,cAAA,CAAAuB,mBAAmB;QAACC,KAAK,EAAEnB,CAAC,CAAC,oCAAoC,CAAE;QAACoB,WAAW,EAAEpB,CAAC,CAAC,+BAA+B;MAAE,CAAE;IAAC,CAC3G,CAAC;EAEpB;;EAEA;EACA,MAAMuB,MAAM,GAAGA,CAAA,KAAM;IACnB,IAAId,OAAO,EAAE;IACb,IAAIH,WAAW,CAACkB,IAAI,CAAC,CAAC,KAAKH,QAAQ,EAAE;MACnCT,QAAQ,CAACZ,CAAC,CAAC,4BAA4B,EAAE;QAAEqB;MAAS,CAAC,CAAC,CAAC;MACvD;IACF;IACAT,QAAQ,CAAC,IAAI,CAAC;IACdF,UAAU,CAAC,IAAI,CAAC;IAChB,CAAC,YAAY;MACX,IAAI,CAAC,IAAAe,iCAAkB,EAAC,CAAC,EAAE,MAAM,IAAIC,KAAK,CAACC,wCAA2B,CAAC;MACvE,MAAMC,OAAO,GAAG,MAAMzB,WAAW,CAAC0B,yBAAyB,CAAC,CAAC;MAC7D,MAAMC,SAAS,GAAG,MAAM,IAAAC,wCAAyB,EAACH,OAAO,CAAC;MAC1D,MAAMzB,WAAW,CAAC6B,wBAAwB,CAAC1B,WAAW,CAACkB,IAAI,CAAC,CAAC,EAAEM,SAAS,CAAC;MACzE,MAAM1B,MAAM,CAAC,CAAC,CAAC6B,KAAK,CAAC,MAAMC,SAAS,CAAC;MACrCpB,UAAU,CAAC,IAAI,CAAC;MAChBf,SAAS,GAAG,CAAC;IACf,CAAC,EAAE,CAAC,CACDkC,KAAK,CAAEE,MAAe,IAAKvB,QAAQ,CAAC,IAAAwB,0CAAwB,EAACD,MAAM,EAAEnC,CAAC,CAAC,CAAC,CAAC,CACzEqC,OAAO,CAAC,MAAM3B,UAAU,CAAC,KAAK,CAAC,CAAC;EACrC,CAAC;EAED,oBACE,IAAAb,WAAA,CAAAyC,IAAA,EAAC3C,cAAA,CAAAqB,aAAa;IAAAC,QAAA,gBACZ,IAAApB,WAAA,CAAAkB,GAAA,EAACpB,cAAA,CAAAuB,mBAAmB;MAACC,KAAK,EAAEnB,CAAC,CAAC,qBAAqB,CAAE;MAACoB,WAAW,EAAEpB,CAAC,CAAC,gCAAgC,EAAE;QAAEqB;MAAS,CAAC;IAAE,CAAE,CAAC,eACxH,IAAAxB,WAAA,CAAAkB,GAAA,EAACnB,iBAAA,CAAA2C,eAAe;MAAAtB,QAAA,EAAEjB,CAAC,CAAC,uBAAuB;IAAC,CAAkB,CAAC,eAC/D,IAAAH,WAAA,CAAAkB,GAAA,EAACnB,iBAAA,CAAA4C,gBAAgB;MACfC,KAAK,EAAEzC,CAAC,CAAC,4BAA4B,EAAE;QAAEqB;MAAS,CAAC,CAAE;MACrDqB,KAAK,EAAEpC,WAAY;MACnBqC,QAAQ,EAAGD,KAAK,IAAK;QACnBnC,cAAc,CAACmC,KAAK,CAAC;QACrB,IAAI/B,KAAK,EAAEC,QAAQ,CAAC,IAAI,CAAC;MAC3B,CAAE;MACFgC,QAAQ,EAAErB,MAAO;MACjBZ,KAAK,EAAE,IAAK;MACZkC,QAAQ,EAAEpC,OAAQ;MAClBqC,WAAW,EAAEzB,QAAS;MACtB0B,YAAY,EAAC,KAAK;MAClBC,MAAM,EAAC;IAAwB,CAChC,CAAC,EACDrC,KAAK,gBAAG,IAAAd,WAAA,CAAAkB,GAAA,EAACnB,iBAAA,CAAAqD,oBAAoB;MAACC,OAAO,EAAEvC;IAAM,CAAE,CAAC,GAAG,IAAI,eACxD,IAAAd,WAAA,CAAAkB,GAAA,EAACnB,iBAAA,CAAAuD,iBAAiB;MAChBV,KAAK,EAAEzC,CAAC,CAAC,8BAA8B,CAAE;MACzCoD,OAAO,EAAE7B,MAAO;MAChBd,OAAO,EAAEA,OAAQ;MACjBoC,QAAQ,EAAEvC,WAAW,CAACkB,IAAI,CAAC,CAAC,KAAKH,QAAS;MAC1C2B,MAAM,EAAC;IAAwB,CAChC,CAAC;EAAA,CACW,CAAC;AAEpB,CAAC;AAACK,OAAA,CAAAvD,qBAAA,GAAAA,qBAAA","ignoreList":[]}

package/lib/commonjs/ui/components/signIn/OxyLinkCommonsPanel.js

@@ -0,0 +1,275 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.OxyLinkCommonsPanel = exports.IDENTITY_LINK_POLL_MS = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _reactNativeQrcodeSvg = _interopRequireDefault(require("react-native-qrcode-svg"));
+var _button = require("@oxy.so/bloom/button");
+var _theme = require("@oxy.so/bloom/theme");
+var _typography = require("@oxy.so/bloom/typography");
+var _core = require("@oxy.so/core");
+var _OxyContext = require("../../context/OxyContext.js");
+var _passkeyFlow = require("../../context/passkeyFlow.js");
+var _useI18n = require("../../hooks/useI18n.js");
+var _passkeyClient = require("../../../webauthn/passkeyClient");
+var _OxyAuthScreen = require("./OxyAuthScreen.js");
+var _accountFlowParts = require("./accountFlowParts.js");
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * Linking Commons to a passkey account (ADR 0029 D3), auth.oxy.so's
+ * `/link-commons`:
+ *
+ *   QR → Commons scans and signs with its key → both screens show the same
+ *   code → the person confirms here with the passkey → linked
+ *
+ * Afterwards the account is self-custodied: its root is the key Commons holds,
+ * its recovery email is deleted, and its phrase in Commons is how it gets back
+ * in. The passkey keeps signing in on the web. The page must be signed in as
+ * the account; the host renders sign-in first.
+ */
+
+/** How often the page asks whether Commons has signed. */
+const IDENTITY_LINK_POLL_MS = exports.IDENTITY_LINK_POLL_MS = 2000;
+
+/** High-contrast, un-themed on purpose: scan reliability. */
+const QR_PLATE_BG = '#FFFFFF';
+const QR_FOREGROUND = '#000000';
+const QR_SIZE = 200;
+const OxyLinkCommonsPanel = ({
+  onLinked
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const {
+    user,
+    oxyServices
+  } = (0, _OxyContext.useOxy)();
+  const [step, setStep] = (0, _react.useState)({
+    name: 'opening'
+  });
+  const [pending, setPending] = (0, _react.useState)(false);
+  const [error, setError] = (0, _react.useState)(null);
+  const alreadyLinked = Boolean(user?.publicKey);
+  const open = (0, _react.useCallback)(() => {
+    setError(null);
+    setStep({
+      name: 'opening'
+    });
+    oxyServices.createIdentityLink().then(link => setStep({
+      name: 'qr',
+      link
+    })).catch(reason => {
+      setError((0, _accountFlowParts.describeAccountFlowError)(reason, t));
+      setStep({
+        name: 'expired'
+      });
+    });
+  }, [oxyServices, t]);
+
+  // One request per visit, opened once the page knows the account has no root.
+  const opened = (0, _react.useRef)(false);
+  (0, _react.useEffect)(() => {
+    if (alreadyLinked || opened.current) return;
+    opened.current = true;
+    open();
+  }, [alreadyLinked, open]);
+
+  // While the QR shows, ask whether Commons has signed; a request only lives a
+  // few minutes, and an expired one says so instead of waiting forever.
+  const link = step.name === 'qr' ? step.link : null;
+  (0, _react.useEffect)(() => {
+    if (!link) return;
+    let stopped = false;
+    const poll = async () => {
+      if (stopped) return;
+      if (Date.now() >= link.expiresAt) {
+        setStep({
+          name: 'expired'
+        });
+        return;
+      }
+      try {
+        const state = await oxyServices.getIdentityLink(link.linkId);
+        if (stopped) return;
+        if (state.status === 'signed' && state.publicKey) {
+          setStep({
+            name: 'matching',
+            link,
+            code: (0, _core.deriveIdentityLinkCode)(link.linkId, state.publicKey)
+          });
+          return;
+        }
+        if (state.status === 'cancelled') {
+          setStep({
+            name: 'expired'
+          });
+          return;
+        }
+      } catch {
+        // A missed poll is retried on the next tick.
+      }
+      if (!stopped) timer = setTimeout(() => void poll(), IDENTITY_LINK_POLL_MS);
+    };
+    let timer = setTimeout(() => void poll(), IDENTITY_LINK_POLL_MS);
+    return () => {
+      stopped = true;
+      clearTimeout(timer);
+    };
+  }, [link, oxyServices]);
+
+  // The ceremony opens the browser's passkey prompt, so it starts from the press.
+  const confirm = confirmed => {
+    if (pending) return;
+    setError(null);
+    setPending(true);
+    (async () => {
+      if (!(0, _passkeyClient.isPasskeySupported)()) throw new Error(_passkeyFlow.PASSKEY_UNSUPPORTED_MESSAGE);
+      const options = await oxyServices.getIdentityLinkAssertionOptions(confirmed.linkId, confirmed.challenge);
+      const assertion = await (0, _passkeyClient.runAuthenticationCeremony)(options);
+      await oxyServices.completeIdentityLink(confirmed.linkId, assertion);
+      setStep({
+        name: 'done'
+      });
+      onLinked?.();
+    })().catch(reason => setError((0, _accountFlowParts.describeAccountFlowError)(reason, t))).finally(() => setPending(false));
+  };
+  const cancel = cancelled => {
+    void oxyServices.cancelIdentityLink(cancelled.linkId).catch(() => undefined);
+    setStep({
+      name: 'expired'
+    });
+  };
+  if (alreadyLinked) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreen, {
+      children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+        title: t('linkCommons.title'),
+        description: t('linkCommons.already')
+      })
+    });
+  }
+  switch (step.name) {
+    case 'done':
+      return /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreen, {
+        children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('linkCommons.doneTitle'),
+          description: t('linkCommons.done')
+        })
+      });
+    case 'expired':
+      return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+        children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('linkCommons.title'),
+          description: t('linkCommons.expired')
+        }), error ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowErrorLine, {
+          message: error
+        }) : null, /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowAction, {
+          label: t('linkCommons.renew'),
+          onPress: open,
+          pending: false,
+          testID: "link-commons-renew"
+        })]
+      });
+    case 'matching':
+      return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+        children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('linkCommons.compareTitle'),
+          description: t('linkCommons.compare')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+          accessibilityLabel: step.code.split('').join(' '),
+          style: [styles.code, {
+            color: theme.colors.text
+          }],
+          testID: "link-commons-code",
+          children: `${step.code.slice(0, 3)} ${step.code.slice(3)}`
+        }), error ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowErrorLine, {
+          message: error
+        }) : null, /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowAction, {
+          label: t('linkCommons.confirm'),
+          onPress: () => confirm(step.link),
+          pending: pending,
+          testID: "link-commons-confirm"
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_button.Button, {
+          appearance: "plain",
+          tone: "neutral",
+          size: "lg",
+          fullWidth: true,
+          disabled: pending,
+          onPress: () => cancel(step.link),
+          testID: "link-commons-cancel",
+          children: t('linkCommons.cancel')
+        })]
+      });
+    case 'qr':
+      return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+        children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('linkCommons.title'),
+          description: t('linkCommons.subtitle')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+          style: styles.plateRow,
+          children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+            style: [styles.plate, {
+              borderColor: theme.colors.border
+            }],
+            testID: "link-commons-qr",
+            children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeQrcodeSvg.default, {
+              value: step.link.qrPayload,
+              size: QR_SIZE,
+              backgroundColor: QR_PLATE_BG,
+              color: QR_FOREGROUND
+            })
+          })
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowNote, {
+          children: t('linkCommons.scan')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowNote, {
+          children: t('linkCommons.waiting')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_button.Button, {
+          appearance: "plain",
+          tone: "neutral",
+          size: "lg",
+          fullWidth: true,
+          onPress: () => cancel(step.link),
+          testID: "link-commons-cancel",
+          children: t('linkCommons.cancel')
+        })]
+      });
+    default:
+      return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+        children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('linkCommons.title'),
+          description: t('linkCommons.subtitle')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+          style: styles.plateRow,
+          children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.ActivityIndicator, {
+            size: "large",
+            color: theme.colors.primary
+          })
+        })]
+      });
+  }
+};
+exports.OxyLinkCommonsPanel = OxyLinkCommonsPanel;
+const styles = _reactNative.StyleSheet.create({
+  plateRow: {
+    alignItems: 'center'
+  },
+  plate: {
+    padding: 12,
+    borderRadius: 16,
+    borderWidth: _reactNative.StyleSheet.hairlineWidth,
+    backgroundColor: QR_PLATE_BG
+  },
+  code: {
+    fontSize: 40,
+    lineHeight: 48,
+    fontWeight: '700',
+    letterSpacing: 4,
+    textAlign: 'center'
+  }
+});
+//# sourceMappingURL=OxyLinkCommonsPanel.js.map

package/lib/commonjs/ui/components/signIn/OxyLinkCommonsPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_reactNativeQrcodeSvg","_interopRequireDefault","_button","_theme","_typography","_core","_OxyContext","_passkeyFlow","_useI18n","_passkeyClient","_OxyAuthScreen","_accountFlowParts","_jsxRuntime","e","__esModule","default","IDENTITY_LINK_POLL_MS","exports","QR_PLATE_BG","QR_FOREGROUND","QR_SIZE","OxyLinkCommonsPanel","onLinked","theme","useTheme","t","useI18n","user","oxyServices","useOxy","step","setStep","useState","name","pending","setPending","error","setError","alreadyLinked","Boolean","publicKey","open","useCallback","createIdentityLink","then","link","catch","reason","describeAccountFlowError","opened","useRef","useEffect","current","stopped","poll","Date","now","expiresAt","state","getIdentityLink","linkId","status","code","deriveIdentityLinkCode","timer","setTimeout","clearTimeout","confirm","confirmed","isPasskeySupported","Error","PASSKEY_UNSUPPORTED_MESSAGE","options","getIdentityLinkAssertionOptions","challenge","assertion","runAuthenticationCeremony","completeIdentityLink","finally","cancel","cancelled","cancelIdentityLink","undefined","jsx","OxyAuthScreen","children","OxyAuthScreenHeader","title","description","jsxs","AccountFlowErrorLine","message","AccountFlowAction","label","onPress","testID","Text","accessibilityLabel","split","join","style","styles","color","colors","text","slice","Button","appearance","tone","size","fullWidth","disabled","View","plateRow","plate","borderColor","border","value","qrPayload","backgroundColor","AccountFlowNote","ActivityIndicator","primary","StyleSheet","create","alignItems","padding","borderRadius","borderWidth","hairlineWidth","fontSize","lineHeight","fontWeight","letterSpacing","textAlign"],"sourceRoot":"../../../../../src","sources":["ui/components/signIn/OxyLinkCommonsPanel.tsx"],"mappings":";;;;;;AAcA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,qBAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,WAAA,GAAAN,OAAA;AACA,IAAAO,KAAA,GAAAP,OAAA;AAEA,IAAAQ,WAAA,GAAAR,OAAA;AACA,IAAAS,YAAA,GAAAT,OAAA;AACA,IAAAU,QAAA,GAAAV,OAAA;AACA,IAAAW,cAAA,GAAAX,OAAA;AACA,IAAAY,cAAA,GAAAZ,OAAA;AACA,IAAAa,iBAAA,GAAAb,OAAA;AAAwH,IAAAc,WAAA,GAAAd,OAAA;AAAA,SAAAG,uBAAAY,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AA3BxH;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkBA;AACO,MAAMG,qBAAqB,GAAAC,OAAA,CAAAD,qBAAA,GAAG,IAAI;;AAEzC;AACA,MAAME,WAAW,GAAG,SAAS;AAC7B,MAAMC,aAAa,GAAG,SAAS;AAC/B,MAAMC,OAAO,GAAG,GAAG;AAcZ,MAAMC,mBAAuD,GAAGA,CAAC;EAAEC;AAAS,CAAC,KAAK;EACvF,MAAMC,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,IAAI;IAAEC;EAAY,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EACtC,MAAM,CAACC,IAAI,EAAEC,OAAO,CAAC,GAAG,IAAAC,eAAQ,EAAO;IAAEC,IAAI,EAAE;EAAU,CAAC,CAAC;EAC3D,MAAM,CAACC,OAAO,EAAEC,UAAU,CAAC,GAAG,IAAAH,eAAQ,EAAC,KAAK,CAAC;EAC7C,MAAM,CAACI,KAAK,EAAEC,QAAQ,CAAC,GAAG,IAAAL,eAAQ,EAAgB,IAAI,CAAC;EACvD,MAAMM,aAAa,GAAGC,OAAO,CAACZ,IAAI,EAAEa,SAAS,CAAC;EAE9C,MAAMC,IAAI,GAAG,IAAAC,kBAAW,EAAC,MAAM;IAC7BL,QAAQ,CAAC,IAAI,CAAC;IACdN,OAAO,CAAC;MAAEE,IAAI,EAAE;IAAU,CAAC,CAAC;IAC5BL,WAAW,CACRe,kBAAkB,CAAC,CAAC,CACpBC,IAAI,CAAEC,IAAI,IAAKd,OAAO,CAAC;MAAEE,IAAI,EAAE,IAAI;MAAEY;IAAK,CAAC,CAAC,CAAC,CAC7CC,KAAK,CAAEC,MAAe,IAAK;MAC1BV,QAAQ,CAAC,IAAAW,0CAAwB,EAACD,MAAM,EAAEtB,CAAC,CAAC,CAAC;MAC7CM,OAAO,CAAC;QAAEE,IAAI,EAAE;MAAU,CAAC,CAAC;IAC9B,CAAC,CAAC;EACN,CAAC,EAAE,CAACL,WAAW,EAAEH,CAAC,CAAC,CAAC;;EAEpB;EACA,MAAMwB,MAAM,GAAG,IAAAC,aAAM,EAAC,KAAK,CAAC;EAC5B,IAAAC,gBAAS,EAAC,MAAM;IACd,IAAIb,aAAa,IAAIW,MAAM,CAACG,OAAO,EAAE;IACrCH,MAAM,CAACG,OAAO,GAAG,IAAI;IACrBX,IAAI,CAAC,CAAC;EACR,CAAC,EAAE,CAACH,aAAa,EAAEG,IAAI,CAAC,CAAC;;EAEzB;EACA;EACA,MAAMI,IAAI,GAAGf,IAAI,CAACG,IAAI,KAAK,IAAI,GAAGH,IAAI,CAACe,IAAI,GAAG,IAAI;EAClD,IAAAM,gBAAS,EAAC,MAAM;IACd,IAAI,CAACN,IAAI,EAAE;IACX,IAAIQ,OAAO,GAAG,KAAK;IACnB,MAAMC,IAAI,GAAG,MAAAA,CAAA,KAAY;MACvB,IAAID,OAAO,EAAE;MACb,IAAIE,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIX,IAAI,CAACY,SAAS,EAAE;QAChC1B,OAAO,CAAC;UAAEE,IAAI,EAAE;QAAU,CAAC,CAAC;QAC5B;MACF;MACA,IAAI;QACF,MAAMyB,KAAK,GAAG,MAAM9B,WAAW,CAAC+B,eAAe,CAACd,IAAI,CAACe,MAAM,CAAC;QAC5D,IAAIP,OAAO,EAAE;QACb,IAAIK,KAAK,CAACG,MAAM,KAAK,QAAQ,IAAIH,KAAK,CAAClB,SAAS,EAAE;UAChDT,OAAO,CAAC;YAAEE,IAAI,EAAE,UAAU;YAAEY,IAAI;YAAEiB,IAAI,EAAE,IAAAC,4BAAsB,EAAClB,IAAI,CAACe,MAAM,EAAEF,KAAK,CAAClB,SAAS;UAAE,CAAC,CAAC;UAC/F;QACF;QACA,IAAIkB,KAAK,CAACG,MAAM,KAAK,WAAW,EAAE;UAChC9B,OAAO,CAAC;YAAEE,IAAI,EAAE;UAAU,CAAC,CAAC;UAC5B;QACF;MACF,CAAC,CAAC,MAAM;QACN;MAAA;MAEF,IAAI,CAACoB,OAAO,EAAEW,KAAK,GAAGC,UAAU,CAAC,MAAM,KAAKX,IAAI,CAAC,CAAC,EAAEtC,qBAAqB,CAAC;IAC5E,CAAC;IACD,IAAIgD,KAAK,GAAGC,UAAU,CAAC,MAAM,KAAKX,IAAI,CAAC,CAAC,EAAEtC,qBAAqB,CAAC;IAChE,OAAO,MAAM;MACXqC,OAAO,GAAG,IAAI;MACda,YAAY,CAACF,KAAK,CAAC;IACrB,CAAC;EACH,CAAC,EAAE,CAACnB,IAAI,EAAEjB,WAAW,CAAC,CAAC;;EAEvB;EACA,MAAMuC,OAAO,GAAIC,SAAqC,IAAK;IACzD,IAAIlC,OAAO,EAAE;IACbG,QAAQ,CAAC,IAAI,CAAC;IACdF,UAAU,CAAC,IAAI,CAAC;IAChB,CAAC,YAAY;MACX,IAAI,CAAC,IAAAkC,iCAAkB,EAAC,CAAC,EAAE,MAAM,IAAIC,KAAK,CAACC,wCAA2B,CAAC;MACvE,MAAMC,OAAO,GAAG,MAAM5C,WAAW,CAAC6C,+BAA+B,CAACL,SAAS,CAACR,MAAM,EAAEQ,SAAS,CAACM,SAAS,CAAC;MACxG,MAAMC,SAAS,GAAG,MAAM,IAAAC,wCAAyB,EAACJ,OAAO,CAAC;MAC1D,MAAM5C,WAAW,CAACiD,oBAAoB,CAACT,SAAS,CAACR,MAAM,EAAEe,SAAS,CAAC;MACnE5C,OAAO,CAAC;QAAEE,IAAI,EAAE;MAAO,CAAC,CAAC;MACzBX,QAAQ,GAAG,CAAC;IACd,CAAC,EAAE,CAAC,CACDwB,KAAK,CAAEC,MAAe,IAAKV,QAAQ,CAAC,IAAAW,0CAAwB,EAACD,MAAM,EAAEtB,CAAC,CAAC,CAAC,CAAC,CACzEqD,OAAO,CAAC,MAAM3C,UAAU,CAAC,KAAK,CAAC,CAAC;EACrC,CAAC;EAED,MAAM4C,MAAM,GAAIC,SAAqC,IAAK;IACxD,KAAKpD,WAAW,CAACqD,kBAAkB,CAACD,SAAS,CAACpB,MAAM,CAAC,CAACd,KAAK,CAAC,MAAMoC,SAAS,CAAC;IAC5EnD,OAAO,CAAC;MAAEE,IAAI,EAAE;IAAU,CAAC,CAAC;EAC9B,CAAC;EAED,IAAIK,aAAa,EAAE;IACjB,oBACE,IAAA1B,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA0E,aAAa;MAAAC,QAAA,eACZ,IAAAzE,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA4E,mBAAmB;QAACC,KAAK,EAAE9D,CAAC,CAAC,mBAAmB,CAAE;QAAC+D,WAAW,EAAE/D,CAAC,CAAC,qBAAqB;MAAE,CAAE;IAAC,CAChF,CAAC;EAEpB;EAEA,QAAQK,IAAI,CAACG,IAAI;IACf,KAAK,MAAM;MACT,oBACE,IAAArB,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA0E,aAAa;QAAAC,QAAA,eACZ,IAAAzE,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA4E,mBAAmB;UAACC,KAAK,EAAE9D,CAAC,CAAC,uBAAuB,CAAE;UAAC+D,WAAW,EAAE/D,CAAC,CAAC,kBAAkB;QAAE,CAAE;MAAC,CACjF,CAAC;IAEpB,KAAK,SAAS;MACZ,oBACE,IAAAb,WAAA,CAAA6E,IAAA,EAAC/E,cAAA,CAAA0E,aAAa;QAAAC,QAAA,gBACZ,IAAAzE,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA4E,mBAAmB;UAACC,KAAK,EAAE9D,CAAC,CAAC,mBAAmB,CAAE;UAAC+D,WAAW,EAAE/D,CAAC,CAAC,qBAAqB;QAAE,CAAE,CAAC,EAC5FW,KAAK,gBAAG,IAAAxB,WAAA,CAAAuE,GAAA,EAACxE,iBAAA,CAAA+E,oBAAoB;UAACC,OAAO,EAAEvD;QAAM,CAAE,CAAC,GAAG,IAAI,eACxD,IAAAxB,WAAA,CAAAuE,GAAA,EAACxE,iBAAA,CAAAiF,iBAAiB;UAACC,KAAK,EAAEpE,CAAC,CAAC,mBAAmB,CAAE;UAACqE,OAAO,EAAErD,IAAK;UAACP,OAAO,EAAE,KAAM;UAAC6D,MAAM,EAAC;QAAoB,CAAE,CAAC;MAAA,CAClG,CAAC;IAEpB,KAAK,UAAU;MACb,oBACE,IAAAnF,WAAA,CAAA6E,IAAA,EAAC/E,cAAA,CAAA0E,aAAa;QAAAC,QAAA,gBACZ,IAAAzE,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA4E,mBAAmB;UAACC,KAAK,EAAE9D,CAAC,CAAC,0BAA0B,CAAE;UAAC+D,WAAW,EAAE/D,CAAC,CAAC,qBAAqB;QAAE,CAAE,CAAC,eACpG,IAAAb,WAAA,CAAAuE,GAAA,EAAC/E,WAAA,CAAA4F,IAAI;UACHC,kBAAkB,EAAEnE,IAAI,CAACgC,IAAI,CAACoC,KAAK,CAAC,EAAE,CAAC,CAACC,IAAI,CAAC,GAAG,CAAE;UAClDC,KAAK,EAAE,CAACC,MAAM,CAACvC,IAAI,EAAE;YAAEwC,KAAK,EAAE/E,KAAK,CAACgF,MAAM,CAACC;UAAK,CAAC,CAAE;UACnDT,MAAM,EAAC,mBAAmB;UAAAV,QAAA,EAEzB,GAAGvD,IAAI,CAACgC,IAAI,CAAC2C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI3E,IAAI,CAACgC,IAAI,CAAC2C,KAAK,CAAC,CAAC,CAAC;QAAE,CAC7C,CAAC,EACNrE,KAAK,gBAAG,IAAAxB,WAAA,CAAAuE,GAAA,EAACxE,iBAAA,CAAA+E,oBAAoB;UAACC,OAAO,EAAEvD;QAAM,CAAE,CAAC,GAAG,IAAI,eACxD,IAAAxB,WAAA,CAAAuE,GAAA,EAACxE,iBAAA,CAAAiF,iBAAiB;UAACC,KAAK,EAAEpE,CAAC,CAAC,qBAAqB,CAAE;UAACqE,OAAO,EAAEA,CAAA,KAAM3B,OAAO,CAACrC,IAAI,CAACe,IAAI,CAAE;UAACX,OAAO,EAAEA,OAAQ;UAAC6D,MAAM,EAAC;QAAsB,CAAE,CAAC,eACzI,IAAAnF,WAAA,CAAAuE,GAAA,EAACjF,OAAA,CAAAwG,MAAM;UAACC,UAAU,EAAC,OAAO;UAACC,IAAI,EAAC,SAAS;UAACC,IAAI,EAAC,IAAI;UAACC,SAAS;UAACC,QAAQ,EAAE7E,OAAQ;UAAC4D,OAAO,EAAEA,CAAA,KAAMf,MAAM,CAACjD,IAAI,CAACe,IAAI,CAAE;UAACkD,MAAM,EAAC,qBAAqB;UAAAV,QAAA,EAC5I5D,CAAC,CAAC,oBAAoB;QAAC,CAClB,CAAC;MAAA,CACI,CAAC;IAEpB,KAAK,IAAI;MACP,oBACE,IAAAb,WAAA,CAAA6E,IAAA,EAAC/E,cAAA,CAAA0E,aAAa;QAAAC,QAAA,gBACZ,IAAAzE,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA4E,mBAAmB;UAACC,KAAK,EAAE9D,CAAC,CAAC,mBAAmB,CAAE;UAAC+D,WAAW,EAAE/D,CAAC,CAAC,sBAAsB;QAAE,CAAE,CAAC,eAC9F,IAAAb,WAAA,CAAAuE,GAAA,EAACpF,YAAA,CAAAiH,IAAI;UAACZ,KAAK,EAAEC,MAAM,CAACY,QAAS;UAAA5B,QAAA,eAC3B,IAAAzE,WAAA,CAAAuE,GAAA,EAACpF,YAAA,CAAAiH,IAAI;YAACZ,KAAK,EAAE,CAACC,MAAM,CAACa,KAAK,EAAE;cAAEC,WAAW,EAAE5F,KAAK,CAACgF,MAAM,CAACa;YAAO,CAAC,CAAE;YAACrB,MAAM,EAAC,iBAAiB;YAAAV,QAAA,eACzF,IAAAzE,WAAA,CAAAuE,GAAA,EAACnF,qBAAA,CAAAe,OAAM;cAACsG,KAAK,EAAEvF,IAAI,CAACe,IAAI,CAACyE,SAAU;cAACT,IAAI,EAAEzF,OAAQ;cAACmG,eAAe,EAAErG,WAAY;cAACoF,KAAK,EAAEnF;YAAc,CAAE;UAAC,CACrG;QAAC,CACH,CAAC,eACP,IAAAP,WAAA,CAAAuE,GAAA,EAACxE,iBAAA,CAAA6G,eAAe;UAAAnC,QAAA,EAAE5D,CAAC,CAAC,kBAAkB;QAAC,CAAkB,CAAC,eAC1D,IAAAb,WAAA,CAAAuE,GAAA,EAACxE,iBAAA,CAAA6G,eAAe;UAAAnC,QAAA,EAAE5D,CAAC,CAAC,qBAAqB;QAAC,CAAkB,CAAC,eAC7D,IAAAb,WAAA,CAAAuE,GAAA,EAACjF,OAAA,CAAAwG,MAAM;UAACC,UAAU,EAAC,OAAO;UAACC,IAAI,EAAC,SAAS;UAACC,IAAI,EAAC,IAAI;UAACC,SAAS;UAAChB,OAAO,EAAEA,CAAA,KAAMf,MAAM,CAACjD,IAAI,CAACe,IAAI,CAAE;UAACkD,MAAM,EAAC,qBAAqB;UAAAV,QAAA,EACzH5D,CAAC,CAAC,oBAAoB;QAAC,CAClB,CAAC;MAAA,CACI,CAAC;IAEpB;MACE,oBACE,IAAAb,WAAA,CAAA6E,IAAA,EAAC/E,cAAA,CAAA0E,aAAa;QAAAC,QAAA,gBACZ,IAAAzE,WAAA,CAAAuE,GAAA,EAACzE,cAAA,CAAA4E,mBAAmB;UAACC,KAAK,EAAE9D,CAAC,CAAC,mBAAmB,CAAE;UAAC+D,WAAW,EAAE/D,CAAC,CAAC,sBAAsB;QAAE,CAAE,CAAC,eAC9F,IAAAb,WAAA,CAAAuE,GAAA,EAACpF,YAAA,CAAAiH,IAAI;UAACZ,KAAK,EAAEC,MAAM,CAACY,QAAS;UAAA5B,QAAA,eAC3B,IAAAzE,WAAA,CAAAuE,GAAA,EAACpF,YAAA,CAAA0H,iBAAiB;YAACZ,IAAI,EAAC,OAAO;YAACP,KAAK,EAAE/E,KAAK,CAACgF,MAAM,CAACmB;UAAQ,CAAE;QAAC,CAC3D,CAAC;MAAA,CACM,CAAC;EAEtB;AACF,CAAC;AAACzG,OAAA,CAAAI,mBAAA,GAAAA,mBAAA;AAEF,MAAMgF,MAAM,GAAGsB,uBAAU,CAACC,MAAM,CAAC;EAC/BX,QAAQ,EAAE;IACRY,UAAU,EAAE;EACd,CAAC;EACDX,KAAK,EAAE;IACLY,OAAO,EAAE,EAAE;IACXC,YAAY,EAAE,EAAE;IAChBC,WAAW,EAAEL,uBAAU,CAACM,aAAa;IACrCV,eAAe,EAAErG;EACnB,CAAC;EACD4C,IAAI,EAAE;IACJoE,QAAQ,EAAE,EAAE;IACZC,UAAU,EAAE,EAAE;IACdC,UAAU,EAAE,KAAK;IACjBC,aAAa,EAAE,CAAC;IAChBC,SAAS,EAAE;EACb;AACF,CAAC,CAAC","ignoreList":[]}

package/lib/commonjs/ui/components/signIn/OxyRecoverAccountPanel.js

@@ -0,0 +1,170 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.OxyRecoverAccountPanel = void 0;
+var _react = require("react");
+var _theme = require("@oxy.so/bloom/theme");
+var _core = require("@oxy.so/core");
+var _OxyContext = require("../../context/OxyContext.js");
+var _passkeyFlow = require("../../context/passkeyFlow.js");
+var _useI18n = require("../../hooks/useI18n.js");
+var _passkeyClient = require("../../../webauthn/passkeyClient");
+var _primitives = require("../authChooser/primitives.js");
+var _OxyAuthScreen = require("./OxyAuthScreen.js");
+var _accountFlowParts = require("./accountFlowParts.js");
+var _jsxRuntime = require("react/jsx-runtime");
+/**
+ * Recovering a passkey account (ADR 0029 D3), auth.oxy.so's `/recover`:
+ *
+ *   username or email → the code sent to the recovery email → new passkey → signed in
+ *
+ * The first step answers the same whether or not the account exists, so it
+ * never says who has one. An account that uses Commons has no recovery email:
+ * it recovers in Commons with its phrase, and the first step says so. The new
+ * passkey joins the ones the account has; lost ones are removed afterwards in
+ * the account's security settings.
+ */
+
+const OxyRecoverAccountPanel = ({
+  onRecovered,
+  onSignIn
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const {
+    oxyServices,
+    handleWebSession
+  } = (0, _OxyContext.useOxy)();
+  const [step, setStep] = (0, _react.useState)({
+    name: 'entry'
+  });
+  const [identifier, setIdentifier] = (0, _react.useState)('');
+  const [pending, setPending] = (0, _react.useState)(false);
+  const [error, setError] = (0, _react.useState)(null);
+  const run = work => {
+    if (pending) return;
+    setError(null);
+    setPending(true);
+    work().catch(reason => {
+      if ((0, _accountFlowParts.isTicketExpired)(reason)) setStep({
+        name: 'entry'
+      });
+      setError((0, _accountFlowParts.describeAccountFlowError)(reason, t));
+    }).finally(() => setPending(false));
+  };
+  const sendCode = async () => {
+    const {
+      verificationId
+    } = await oxyServices.startEmailVerification({
+      purpose: 'recovery',
+      identifier: identifier.trim()
+    });
+    setStep({
+      name: 'code',
+      verificationId
+    });
+  };
+  const submitIdentifier = () => {
+    if (!identifier.trim()) {
+      setError(t('recover.identifier.required'));
+      return;
+    }
+    run(sendCode);
+  };
+
+  // The ceremony opens the browser's passkey prompt, so it starts from the press.
+  const addPasskey = recoveryTicket => run(() => (0, _passkeyFlow.runPasskeyRegisterSignIn)({
+    isSupported: _passkeyClient.isPasskeySupported,
+    getRegisterOptions: () => oxyServices.webauthnRegisterOptions({
+      recoveryTicket
+    }),
+    runCeremony: _passkeyClient.runRegistrationCeremony,
+    registerVerify: response => oxyServices.webauthnRegisterVerify(response, {
+      recoveryTicket,
+      deviceFingerprint: JSON.stringify(_core.DeviceManager.getDeviceFingerprint())
+    }),
+    commit: async session => {
+      await handleWebSession(session);
+      onRecovered();
+    }
+  }));
+  switch (step.name) {
+    case 'code':
+      return /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.EmailCodeStep, {
+        description: t('emailCode.sentIfAccount'),
+        verificationId: step.verificationId,
+        onConfirmed: ({
+          ticket,
+          username
+        }) => {
+          setError(null);
+          setStep({
+            name: 'passkey',
+            recoveryTicket: ticket,
+            username
+          });
+        },
+        onResend: sendCode,
+        back: {
+          label: t('signin.actions.back'),
+          onPress: () => setStep({
+            name: 'entry'
+          })
+        }
+      });
+    case 'passkey':
+      return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+        children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('recover.passkey.title'),
+          description: t('recover.passkey.subtitle', {
+            username: step.username ?? ''
+          })
+        }), error ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowErrorLine, {
+          message: error
+        }) : null, /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowAction, {
+          label: t('recover.passkey.action'),
+          onPress: () => addPasskey(step.recoveryTicket),
+          pending: pending,
+          testID: "recover-create-passkey"
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthTerms, {})]
+      });
+    default:
+      return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyAuthScreen.OxyAuthScreen, {
+        children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthScreenHeader, {
+          title: t('recover.title'),
+          description: t('recover.subtitle')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowField, {
+          label: t('recover.identifier.label'),
+          value: identifier,
+          onChange: value => {
+            setIdentifier(value);
+            if (error) setError(null);
+          },
+          onSubmit: submitIdentifier,
+          error: error,
+          disabled: pending,
+          placeholder: t('recover.identifier.placeholder'),
+          autoComplete: "username",
+          testID: "recover-identifier"
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowNote, {
+          children: t('recover.commonsNote')
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_accountFlowParts.AccountFlowAction, {
+          label: t('signin.actions.continue'),
+          onPress: submitIdentifier,
+          pending: pending,
+          testID: "recover-continue"
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_primitives.SubtleLink, {
+          label: t('recover.backToSignIn'),
+          theme: theme,
+          onPress: onSignIn,
+          testID: "back-to-sign-in"
+        }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthScreen.OxyAuthTerms, {})]
+      });
+  }
+};
+exports.OxyRecoverAccountPanel = OxyRecoverAccountPanel;
+//# sourceMappingURL=OxyRecoverAccountPanel.js.map

package/lib/commonjs/ui/components/signIn/OxyRecoverAccountPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_theme","_core","_OxyContext","_passkeyFlow","_useI18n","_passkeyClient","_primitives","_OxyAuthScreen","_accountFlowParts","_jsxRuntime","OxyRecoverAccountPanel","onRecovered","onSignIn","theme","useTheme","t","useI18n","oxyServices","handleWebSession","useOxy","step","setStep","useState","name","identifier","setIdentifier","pending","setPending","error","setError","run","work","catch","reason","isTicketExpired","describeAccountFlowError","finally","sendCode","verificationId","startEmailVerification","purpose","trim","submitIdentifier","addPasskey","recoveryTicket","runPasskeyRegisterSignIn","isSupported","isPasskeySupported","getRegisterOptions","webauthnRegisterOptions","runCeremony","runRegistrationCeremony","registerVerify","response","webauthnRegisterVerify","deviceFingerprint","JSON","stringify","DeviceManager","getDeviceFingerprint","commit","session","jsx","EmailCodeStep","description","onConfirmed","ticket","username","onResend","back","label","onPress","jsxs","OxyAuthScreen","children","OxyAuthScreenHeader","title","AccountFlowErrorLine","message","AccountFlowAction","testID","OxyAuthTerms","AccountFlowField","value","onChange","onSubmit","disabled","placeholder","autoComplete","AccountFlowNote","SubtleLink","exports"],"sourceRoot":"../../../../../src","sources":["ui/components/signIn/OxyRecoverAccountPanel.tsx"],"mappings":";;;;;;AAaA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,cAAA,GAAAN,OAAA;AACA,IAAAO,WAAA,GAAAP,OAAA;AACA,IAAAQ,cAAA,GAAAR,OAAA;AACA,IAAAS,iBAAA,GAAAT,OAAA;AAQ4B,IAAAU,WAAA,GAAAV,OAAA;AA9B5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkCO,MAAMW,sBAA6D,GAAGA,CAAC;EAAEC,WAAW;EAAEC;AAAS,CAAC,KAAK;EAC1G,MAAMC,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,WAAW;IAAEC;EAAiB,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAClD,MAAM,CAACC,IAAI,EAAEC,OAAO,CAAC,GAAG,IAAAC,eAAQ,EAAO;IAAEC,IAAI,EAAE;EAAQ,CAAC,CAAC;EACzD,MAAM,CAACC,UAAU,EAAEC,aAAa,CAAC,GAAG,IAAAH,eAAQ,EAAC,EAAE,CAAC;EAChD,MAAM,CAACI,OAAO,EAAEC,UAAU,CAAC,GAAG,IAAAL,eAAQ,EAAC,KAAK,CAAC;EAC7C,MAAM,CAACM,KAAK,EAAEC,QAAQ,CAAC,GAAG,IAAAP,eAAQ,EAAgB,IAAI,CAAC;EAEvD,MAAMQ,GAAG,GAAIC,IAAyB,IAAK;IACzC,IAAIL,OAAO,EAAE;IACbG,QAAQ,CAAC,IAAI,CAAC;IACdF,UAAU,CAAC,IAAI,CAAC;IAChBI,IAAI,CAAC,CAAC,CACHC,KAAK,CAAEC,MAAe,IAAK;MAC1B,IAAI,IAAAC,iCAAe,EAACD,MAAM,CAAC,EAAEZ,OAAO,CAAC;QAAEE,IAAI,EAAE;MAAQ,CAAC,CAAC;MACvDM,QAAQ,CAAC,IAAAM,0CAAwB,EAACF,MAAM,EAAElB,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CACDqB,OAAO,CAAC,MAAMT,UAAU,CAAC,KAAK,CAAC,CAAC;EACrC,CAAC;EAED,MAAMU,QAAQ,GAAG,MAAAA,CAAA,KAAY;IAC3B,MAAM;MAAEC;IAAe,CAAC,GAAG,MAAMrB,WAAW,CAACsB,sBAAsB,CAAC;MAAEC,OAAO,EAAE,UAAU;MAAEhB,UAAU,EAAEA,UAAU,CAACiB,IAAI,CAAC;IAAE,CAAC,CAAC;IAC3HpB,OAAO,CAAC;MAAEE,IAAI,EAAE,MAAM;MAAEe;IAAe,CAAC,CAAC;EAC3C,CAAC;EAED,MAAMI,gBAAgB,GAAGA,CAAA,KAAM;IAC7B,IAAI,CAAClB,UAAU,CAACiB,IAAI,CAAC,CAAC,EAAE;MACtBZ,QAAQ,CAACd,CAAC,CAAC,6BAA6B,CAAC,CAAC;MAC1C;IACF;IACAe,GAAG,CAACO,QAAQ,CAAC;EACf,CAAC;;EAED;EACA,MAAMM,UAAU,GAAIC,cAAsB,IACxCd,GAAG,CAAC,MACF,IAAAe,qCAAwB,EAAC;IACvBC,WAAW,EAAEC,iCAAkB;IAC/BC,kBAAkB,EAAEA,CAAA,KAAM/B,WAAW,CAACgC,uBAAuB,CAAC;MAAEL;IAAe,CAAC,CAAC;IACjFM,WAAW,EAAEC,sCAAuB;IACpCC,cAAc,EAAGC,QAAQ,IACvBpC,WAAW,CAACqC,sBAAsB,CAACD,QAAQ,EAAE;MAC3CT,cAAc;MACdW,iBAAiB,EAAEC,IAAI,CAACC,SAAS,CAACC,mBAAa,CAACC,oBAAoB,CAAC,CAAC;IACxE,CAAC,CAAC;IACJC,MAAM,EAAE,MAAOC,OAAO,IAAK;MACzB,MAAM3C,gBAAgB,CAAC2C,OAAO,CAAC;MAC/BlD,WAAW,CAAC,CAAC;IACf;EACF,CAAC,CACH,CAAC;EAEH,QAAQS,IAAI,CAACG,IAAI;IACf,KAAK,MAAM;MACT,oBACE,IAAAd,WAAA,CAAAqD,GAAA,EAACtD,iBAAA,CAAAuD,aAAa;QACZC,WAAW,EAAEjD,CAAC,CAAC,yBAAyB,CAAE;QAC1CuB,cAAc,EAAElB,IAAI,CAACkB,cAAe;QACpC2B,WAAW,EAAEA,CAAC;UAAEC,MAAM;UAAEC;QAAS,CAAC,KAAK;UACrCtC,QAAQ,CAAC,IAAI,CAAC;UACdR,OAAO,CAAC;YAAEE,IAAI,EAAE,SAAS;YAAEqB,cAAc,EAAEsB,MAAM;YAAEC;UAAS,CAAC,CAAC;QAChE,CAAE;QACFC,QAAQ,EAAE/B,QAAS;QACnBgC,IAAI,EAAE;UAAEC,KAAK,EAAEvD,CAAC,CAAC,qBAAqB,CAAC;UAAEwD,OAAO,EAAEA,CAAA,KAAMlD,OAAO,CAAC;YAAEE,IAAI,EAAE;UAAQ,CAAC;QAAE;MAAE,CACtF,CAAC;IAEN,KAAK,SAAS;MACZ,oBACE,IAAAd,WAAA,CAAA+D,IAAA,EAACjE,cAAA,CAAAkE,aAAa;QAAAC,QAAA,gBACZ,IAAAjE,WAAA,CAAAqD,GAAA,EAACvD,cAAA,CAAAoE,mBAAmB;UAClBC,KAAK,EAAE7D,CAAC,CAAC,uBAAuB,CAAE;UAClCiD,WAAW,EAAEjD,CAAC,CAAC,0BAA0B,EAAE;YAAEoD,QAAQ,EAAE/C,IAAI,CAAC+C,QAAQ,IAAI;UAAG,CAAC;QAAE,CAC/E,CAAC,EACDvC,KAAK,gBAAG,IAAAnB,WAAA,CAAAqD,GAAA,EAACtD,iBAAA,CAAAqE,oBAAoB;UAACC,OAAO,EAAElD;QAAM,CAAE,CAAC,GAAG,IAAI,eACxD,IAAAnB,WAAA,CAAAqD,GAAA,EAACtD,iBAAA,CAAAuE,iBAAiB;UAChBT,KAAK,EAAEvD,CAAC,CAAC,wBAAwB,CAAE;UACnCwD,OAAO,EAAEA,CAAA,KAAM5B,UAAU,CAACvB,IAAI,CAACwB,cAAc,CAAE;UAC/ClB,OAAO,EAAEA,OAAQ;UACjBsD,MAAM,EAAC;QAAwB,CAChC,CAAC,eACF,IAAAvE,WAAA,CAAAqD,GAAA,EAACvD,cAAA,CAAA0E,YAAY,IAAE,CAAC;MAAA,CACH,CAAC;IAEpB;MACE,oBACE,IAAAxE,WAAA,CAAA+D,IAAA,EAACjE,cAAA,CAAAkE,aAAa;QAAAC,QAAA,gBACZ,IAAAjE,WAAA,CAAAqD,GAAA,EAACvD,cAAA,CAAAoE,mBAAmB;UAACC,KAAK,EAAE7D,CAAC,CAAC,eAAe,CAAE;UAACiD,WAAW,EAAEjD,CAAC,CAAC,kBAAkB;QAAE,CAAE,CAAC,eACtF,IAAAN,WAAA,CAAAqD,GAAA,EAACtD,iBAAA,CAAA0E,gBAAgB;UACfZ,KAAK,EAAEvD,CAAC,CAAC,0BAA0B,CAAE;UACrCoE,KAAK,EAAE3D,UAAW;UAClB4D,QAAQ,EAAGD,KAAK,IAAK;YACnB1D,aAAa,CAAC0D,KAAK,CAAC;YACpB,IAAIvD,KAAK,EAAEC,QAAQ,CAAC,IAAI,CAAC;UAC3B,CAAE;UACFwD,QAAQ,EAAE3C,gBAAiB;UAC3Bd,KAAK,EAAEA,KAAM;UACb0D,QAAQ,EAAE5D,OAAQ;UAClB6D,WAAW,EAAExE,CAAC,CAAC,gCAAgC,CAAE;UACjDyE,YAAY,EAAC,UAAU;UACvBR,MAAM,EAAC;QAAoB,CAC5B,CAAC,eACF,IAAAvE,WAAA,CAAAqD,GAAA,EAACtD,iBAAA,CAAAiF,eAAe;UAAAf,QAAA,EAAE3D,CAAC,CAAC,qBAAqB;QAAC,CAAkB,CAAC,eAC7D,IAAAN,WAAA,CAAAqD,GAAA,EAACtD,iBAAA,CAAAuE,iBAAiB;UAACT,KAAK,EAAEvD,CAAC,CAAC,yBAAyB,CAAE;UAACwD,OAAO,EAAE7B,gBAAiB;UAAChB,OAAO,EAAEA,OAAQ;UAACsD,MAAM,EAAC;QAAkB,CAAE,CAAC,eACjI,IAAAvE,WAAA,CAAAqD,GAAA,EAACxD,WAAA,CAAAoF,UAAU;UAACpB,KAAK,EAAEvD,CAAC,CAAC,sBAAsB,CAAE;UAACF,KAAK,EAAEA,KAAM;UAAC0D,OAAO,EAAE3D,QAAS;UAACoE,MAAM,EAAC;QAAiB,CAAE,CAAC,eAC1G,IAAAvE,WAAA,CAAAqD,GAAA,EAACvD,cAAA,CAAA0E,YAAY,IAAE,CAAC;MAAA,CACH,CAAC;EAEtB;AACF,CAAC;AAACU,OAAA,CAAAjF,sBAAA,GAAAA,sBAAA","ignoreList":[]}