@oxyhq/services 13.3.0 → 14.0.0

package/lib/commonjs/ui/hooks/useSessionSocket.js

@@ -1,203 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.useSessionSocket = useSessionSocket;
-var _react = require("react");
-var _socket = _interopRequireDefault(require("socket.io-client"));
-var _bloom = require("@oxyhq/bloom");
-var _core = require("@oxyhq/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _core.createDebugLogger)('SessionSocket');
-
-/**
- * Server-emitted event types on the `session_update` channel.
- *
- * `session_removed`, `device_removed`, `sessions_removed` are the ONLY
- * events that may sign the user out. Anything else (e.g. `session_created`
- * fired right after a successful sign-in) MUST NOT trigger sign-out — see
- * the comment on the `default` branch below.
- */
-
-function useSessionSocket({
-  userId,
-  activeSessionId,
-  currentDeviceId,
-  refreshSessions,
-  clearSessionState,
-  baseURL,
-  getAccessToken,
-  onRemoteSignOut,
-  onSessionRemoved
-}) {
-  const socketRef = (0, _react.useRef)(null);
-
-  // Store callbacks in refs to avoid reconnecting when they change
-  const refreshSessionsRef = (0, _react.useRef)(refreshSessions);
-  const clearSessionStateRef = (0, _react.useRef)(clearSessionState);
-  const onRemoteSignOutRef = (0, _react.useRef)(onRemoteSignOut);
-  const onSessionRemovedRef = (0, _react.useRef)(onSessionRemoved);
-  const activeSessionIdRef = (0, _react.useRef)(activeSessionId);
-  const currentDeviceIdRef = (0, _react.useRef)(currentDeviceId);
-  const getAccessTokenRef = (0, _react.useRef)(getAccessToken);
-
-  // Update refs when callbacks change
-  (0, _react.useEffect)(() => {
-    refreshSessionsRef.current = refreshSessions;
-    clearSessionStateRef.current = clearSessionState;
-    onRemoteSignOutRef.current = onRemoteSignOut;
-    onSessionRemovedRef.current = onSessionRemoved;
-    activeSessionIdRef.current = activeSessionId;
-    currentDeviceIdRef.current = currentDeviceId;
-    getAccessTokenRef.current = getAccessToken;
-  }, [refreshSessions, clearSessionState, onRemoteSignOut, onSessionRemoved, activeSessionId, currentDeviceId, getAccessToken]);
-  (0, _react.useEffect)(() => {
-    if (!userId || !baseURL) {
-      // Clean up if userId or baseURL becomes invalid
-      if (socketRef.current) {
-        socketRef.current.disconnect();
-        socketRef.current = null;
-      }
-      return;
-    }
-
-    // Disconnect previous socket if switching users
-    if (socketRef.current) {
-      socketRef.current.disconnect();
-      socketRef.current = null;
-    }
-
-    // Connect with auth token; use callback so reconnections get a fresh token
-    socketRef.current = (0, _socket.default)(baseURL, {
-      transports: ['websocket'],
-      auth: cb => {
-        const token = getAccessTokenRef.current();
-        cb({
-          token: token ?? ''
-        });
-      }
-    });
-    const socket = socketRef.current;
-
-    // Server auto-joins the user to `user:<userId>` room on connection
-    const handleConnect = () => {
-      debug.log('Socket connected:', socket.id);
-    };
-    const refreshSessionsSafe = () => {
-      refreshSessionsRef.current().catch(error => {
-        // Refresh errors shouldn't break the socket handler. They happen
-        // routinely when sessions are removed mid-fetch — log and move on.
-        if (__DEV__) {
-          _core.logger.debug('Failed to refresh sessions after session_update', {
-            component: 'useSessionSocket'
-          }, error);
-        }
-      });
-    };
-    const triggerLocalSignOut = async (toastMessage, errorContext) => {
-      if (onRemoteSignOutRef.current) {
-        onRemoteSignOutRef.current();
-      } else {
-        _bloom.toast.info(toastMessage);
-      }
-      // Clear local state since the server has already removed the session.
-      // Await so storage cleanup completes before any subsequent navigation.
-      try {
-        await clearSessionStateRef.current();
-      } catch (error) {
-        if (__DEV__) {
-          _core.logger.error(`Failed to clear session state after ${errorContext}`, error instanceof Error ? error : new Error(String(error)), {
-            component: 'useSessionSocket'
-          });
-        }
-      }
-    };
-    const handleSessionUpdate = async data => {
-      debug.log('Received session_update:', data);
-      const currentActiveSessionId = activeSessionIdRef.current;
-      const currentDeviceIdValue = currentDeviceIdRef.current;
-
-      // Strict whitelist. Every event type that may sign the user out must
-      // appear in the switch. Anything unknown falls through to `default`,
-      // which is intentionally a no-op for session lifecycle — it only logs
-      // in dev. This guards against future server-side event additions
-      // accidentally triggering sign-out.
-      switch (data.type) {
-        case 'session_removed':
-          {
-            if (data.sessionId && onSessionRemovedRef.current) {
-              onSessionRemovedRef.current(data.sessionId);
-            }
-            if (data.sessionId && data.sessionId === currentActiveSessionId) {
-              await triggerLocalSignOut('You have been signed out remotely.', 'session_removed');
-            } else {
-              refreshSessionsSafe();
-            }
-            break;
-          }
-        case 'device_removed':
-          {
-            if (data.sessionIds && onSessionRemovedRef.current) {
-              for (const sessionId of data.sessionIds) {
-                onSessionRemovedRef.current(sessionId);
-              }
-            }
-            if (data.deviceId && currentDeviceIdValue && data.deviceId === currentDeviceIdValue) {
-              await triggerLocalSignOut('This device has been removed. You have been signed out.', 'device_removed');
-            } else {
-              refreshSessionsSafe();
-            }
-            break;
-          }
-        case 'sessions_removed':
-          {
-            if (data.sessionIds && onSessionRemovedRef.current) {
-              for (const sessionId of data.sessionIds) {
-                onSessionRemovedRef.current(sessionId);
-              }
-            }
-            if (data.sessionIds && currentActiveSessionId && data.sessionIds.includes(currentActiveSessionId)) {
-              await triggerLocalSignOut('You have been signed out remotely.', 'sessions_removed');
-            } else {
-              refreshSessionsSafe();
-            }
-            break;
-          }
-        case 'session_created':
-        case 'session_update':
-          {
-            // Lifecycle event for the current user. Just resync the sessions
-            // list — never sign out. A prior implementation compared
-            // `data.sessionId === currentActiveSessionId` and signed the user
-            // out if true, which was catastrophic: a
-            // `session_created` event fired immediately after a successful
-            // sign-in carries the user's NEW (now-active) session id, which
-            // matched and triggered an instant remote sign-out toast on every
-            // login. Whitelist explicitly; never fall through.
-            refreshSessionsSafe();
-            break;
-          }
-        default:
-          {
-            if (__DEV__) {
-              _core.logger.warn('Unknown session socket event type', {
-                component: 'useSessionSocket',
-                type: data.type
-              });
-            }
-            break;
-          }
-      }
-    };
-    socket.on('connect', handleConnect);
-    socket.on('session_update', handleSessionUpdate);
-    return () => {
-      socket.off('connect', handleConnect);
-      socket.off('session_update', handleSessionUpdate);
-      socket.disconnect();
-      socketRef.current = null;
-    };
-  }, [userId, baseURL]); // Only depend on userId and baseURL - callbacks are in refs
-}
-//# sourceMappingURL=useSessionSocket.js.map

package/lib/commonjs/ui/hooks/useSessionSocket.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_react","require","_socket","_interopRequireDefault","_bloom","_core","e","__esModule","default","debug","createDebugLogger","useSessionSocket","userId","activeSessionId","currentDeviceId","refreshSessions","clearSessionState","baseURL","getAccessToken","onRemoteSignOut","onSessionRemoved","socketRef","useRef","refreshSessionsRef","clearSessionStateRef","onRemoteSignOutRef","onSessionRemovedRef","activeSessionIdRef","currentDeviceIdRef","getAccessTokenRef","useEffect","current","disconnect","io","transports","auth","cb","token","socket","handleConnect","log","id","refreshSessionsSafe","catch","error","__DEV__","logger","component","triggerLocalSignOut","toastMessage","errorContext","toast","info","Error","String","handleSessionUpdate","data","currentActiveSessionId","currentDeviceIdValue","type","sessionId","sessionIds","deviceId","includes","warn","on","off"],"sourceRoot":"../../../../src","sources":["ui/hooks/useSessionSocket.ts"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAJ,OAAA;AAAqC,SAAAE,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAGrC,MAAMG,KAAK,GAAG,IAAAC,uBAAiB,EAAC,eAAe,CAAC;;AAEhD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AA2BO,SAASC,gBAAgBA,CAAC;EAC/BC,MAAM;EACNC,eAAe;EACfC,eAAe;EACfC,eAAe;EACfC,iBAAiB;EACjBC,OAAO;EACPC,cAAc;EACdC,eAAe;EACfC;AACqB,CAAC,EAAE;EACxB,MAAMC,SAAS,GAAG,IAAAC,aAAM,EAAgB,IAAI,CAAC;;EAE7C;EACA,MAAMC,kBAAkB,GAAG,IAAAD,aAAM,EAACP,eAAe,CAAC;EAClD,MAAMS,oBAAoB,GAAG,IAAAF,aAAM,EAACN,iBAAiB,CAAC;EACtD,MAAMS,kBAAkB,GAAG,IAAAH,aAAM,EAACH,eAAe,CAAC;EAClD,MAAMO,mBAAmB,GAAG,IAAAJ,aAAM,EAACF,gBAAgB,CAAC;EACpD,MAAMO,kBAAkB,GAAG,IAAAL,aAAM,EAACT,eAAe,CAAC;EAClD,MAAMe,kBAAkB,GAAG,IAAAN,aAAM,EAACR,eAAe,CAAC;EAClD,MAAMe,iBAAiB,GAAG,IAAAP,aAAM,EAACJ,cAAc,CAAC;;EAEhD;EACA,IAAAY,gBAAS,EAAC,MAAM;IACdP,kBAAkB,CAACQ,OAAO,GAAGhB,eAAe;IAC5CS,oBAAoB,CAACO,OAAO,GAAGf,iBAAiB;IAChDS,kBAAkB,CAACM,OAAO,GAAGZ,eAAe;IAC5CO,mBAAmB,CAACK,OAAO,GAAGX,gBAAgB;IAC9CO,kBAAkB,CAACI,OAAO,GAAGlB,eAAe;IAC5Ce,kBAAkB,CAACG,OAAO,GAAGjB,eAAe;IAC5Ce,iBAAiB,CAACE,OAAO,GAAGb,cAAc;EAC5C,CAAC,EAAE,CAACH,eAAe,EAAEC,iBAAiB,EAAEG,eAAe,EAAEC,gBAAgB,EAAEP,eAAe,EAAEC,eAAe,EAAEI,cAAc,CAAC,CAAC;EAE7H,IAAAY,gBAAS,EAAC,MAAM;IACd,IAAI,CAAClB,MAAM,IAAI,CAACK,OAAO,EAAE;MACvB;MACA,IAAII,SAAS,CAACU,OAAO,EAAE;QACrBV,SAAS,CAACU,OAAO,CAACC,UAAU,CAAC,CAAC;QAC9BX,SAAS,CAACU,OAAO,GAAG,IAAI;MAC1B;MACA;IACF;;IAEA;IACA,IAAIV,SAAS,CAACU,OAAO,EAAE;MACrBV,SAAS,CAACU,OAAO,CAACC,UAAU,CAAC,CAAC;MAC9BX,SAAS,CAACU,OAAO,GAAG,IAAI;IAC1B;;IAEA;IACAV,SAAS,CAACU,OAAO,GAAG,IAAAE,eAAE,EAAChB,OAAO,EAAE;MAC9BiB,UAAU,EAAE,CAAC,WAAW,CAAC;MACzBC,IAAI,EAAGC,EAAE,IAAK;QACZ,MAAMC,KAAK,GAAGR,iBAAiB,CAACE,OAAO,CAAC,CAAC;QACzCK,EAAE,CAAC;UAAEC,KAAK,EAAEA,KAAK,IAAI;QAAG,CAAC,CAAC;MAC5B;IACF,CAAC,CAAC;IACF,MAAMC,MAAM,GAAGjB,SAAS,CAACU,OAAO;;IAEhC;IACA,MAAMQ,aAAa,GAAGA,CAAA,KAAM;MAC1B9B,KAAK,CAAC+B,GAAG,CAAC,mBAAmB,EAAEF,MAAM,CAACG,EAAE,CAAC;IAC3C,CAAC;IAED,MAAMC,mBAAmB,GAAGA,CAAA,KAAM;MAChCnB,kBAAkB,CAACQ,OAAO,CAAC,CAAC,CAACY,KAAK,CAAEC,KAAc,IAAK;QACrD;QACA;QACA,IAAIC,OAAO,EAAE;UACXC,YAAM,CAACrC,KAAK,CACV,iDAAiD,EACjD;YAAEsC,SAAS,EAAE;UAAmB,CAAC,EACjCH,KACF,CAAC;QACH;MACF,CAAC,CAAC;IACJ,CAAC;IAED,MAAMI,mBAAmB,GAAG,MAAAA,CAAOC,YAAoB,EAAEC,YAAoB,KAAK;MAChF,IAAIzB,kBAAkB,CAACM,OAAO,EAAE;QAC9BN,kBAAkB,CAACM,OAAO,CAAC,CAAC;MAC9B,CAAC,MAAM;QACLoB,YAAK,CAACC,IAAI,CAACH,YAAY,CAAC;MAC1B;MACA;MACA;MACA,IAAI;QACF,MAAMzB,oBAAoB,CAACO,OAAO,CAAC,CAAC;MACtC,CAAC,CAAC,OAAOa,KAAK,EAAE;QACd,IAAIC,OAAO,EAAE;UACXC,YAAM,CAACF,KAAK,CACV,uCAAuCM,YAAY,EAAE,EACrDN,KAAK,YAAYS,KAAK,GAAGT,KAAK,GAAG,IAAIS,KAAK,CAACC,MAAM,CAACV,KAAK,CAAC,CAAC,EACzD;YAAEG,SAAS,EAAE;UAAmB,CAClC,CAAC;QACH;MACF;IACF,CAAC;IAED,MAAMQ,mBAAmB,GAAG,MAAOC,IAA0B,IAAK;MAChE/C,KAAK,CAAC+B,GAAG,CAAC,0BAA0B,EAAEgB,IAAI,CAAC;MAE3C,MAAMC,sBAAsB,GAAG9B,kBAAkB,CAACI,OAAO;MACzD,MAAM2B,oBAAoB,GAAG9B,kBAAkB,CAACG,OAAO;;MAEvD;MACA;MACA;MACA;MACA;MACA,QAAQyB,IAAI,CAACG,IAAI;QACf,KAAK,iBAAiB;UAAE;YACtB,IAAIH,IAAI,CAACI,SAAS,IAAIlC,mBAAmB,CAACK,OAAO,EAAE;cACjDL,mBAAmB,CAACK,OAAO,CAACyB,IAAI,CAACI,SAAS,CAAC;YAC7C;YACA,IAAIJ,IAAI,CAACI,SAAS,IAAIJ,IAAI,CAACI,SAAS,KAAKH,sBAAsB,EAAE;cAC/D,MAAMT,mBAAmB,CAAC,oCAAoC,EAAE,iBAAiB,CAAC;YACpF,CAAC,MAAM;cACLN,mBAAmB,CAAC,CAAC;YACvB;YACA;UACF;QACA,KAAK,gBAAgB;UAAE;YACrB,IAAIc,IAAI,CAACK,UAAU,IAAInC,mBAAmB,CAACK,OAAO,EAAE;cAClD,KAAK,MAAM6B,SAAS,IAAIJ,IAAI,CAACK,UAAU,EAAE;gBACvCnC,mBAAmB,CAACK,OAAO,CAAC6B,SAAS,CAAC;cACxC;YACF;YACA,IAAIJ,IAAI,CAACM,QAAQ,IAAIJ,oBAAoB,IAAIF,IAAI,CAACM,QAAQ,KAAKJ,oBAAoB,EAAE;cACnF,MAAMV,mBAAmB,CACvB,yDAAyD,EACzD,gBACF,CAAC;YACH,CAAC,MAAM;cACLN,mBAAmB,CAAC,CAAC;YACvB;YACA;UACF;QACA,KAAK,kBAAkB;UAAE;YACvB,IAAIc,IAAI,CAACK,UAAU,IAAInC,mBAAmB,CAACK,OAAO,EAAE;cAClD,KAAK,MAAM6B,SAAS,IAAIJ,IAAI,CAACK,UAAU,EAAE;gBACvCnC,mBAAmB,CAACK,OAAO,CAAC6B,SAAS,CAAC;cACxC;YACF;YACA,IACEJ,IAAI,CAACK,UAAU,IACfJ,sBAAsB,IACtBD,IAAI,CAACK,UAAU,CAACE,QAAQ,CAACN,sBAAsB,CAAC,EAChD;cACA,MAAMT,mBAAmB,CAAC,oCAAoC,EAAE,kBAAkB,CAAC;YACrF,CAAC,MAAM;cACLN,mBAAmB,CAAC,CAAC;YACvB;YACA;UACF;QACA,KAAK,iBAAiB;QACtB,KAAK,gBAAgB;UAAE;YACrB;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACAA,mBAAmB,CAAC,CAAC;YACrB;UACF;QACA;UAAS;YACP,IAAIG,OAAO,EAAE;cACXC,YAAM,CAACkB,IAAI,CAAC,mCAAmC,EAAE;gBAC/CjB,SAAS,EAAE,kBAAkB;gBAC7BY,IAAI,EAAEH,IAAI,CAACG;cACb,CAAC,CAAC;YACJ;YACA;UACF;MACF;IACF,CAAC;IAEDrB,MAAM,CAAC2B,EAAE,CAAC,SAAS,EAAE1B,aAAa,CAAC;IACnCD,MAAM,CAAC2B,EAAE,CAAC,gBAAgB,EAAEV,mBAAmB,CAAC;IAEhD,OAAO,MAAM;MACXjB,MAAM,CAAC4B,GAAG,CAAC,SAAS,EAAE3B,aAAa,CAAC;MACpCD,MAAM,CAAC4B,GAAG,CAAC,gBAAgB,EAAEX,mBAAmB,CAAC;MACjDjB,MAAM,CAACN,UAAU,CAAC,CAAC;MACnBX,SAAS,CAACU,OAAO,GAAG,IAAI;IAC1B,CAAC;EACH,CAAC,EAAE,CAACnB,MAAM,EAAEK,OAAO,CAAC,CAAC,CAAC,CAAC;AACzB","ignoreList":[]}

package/lib/commonjs/utils/silentGuardKey.js

@@ -1,54 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.buildSilentGuardKey = buildSilentGuardKey;
-exports.safeWindowOrigin = safeWindowOrigin;
-/**
- * Shared, pure helpers for building the `origin|baseURL` signature used as the
- * module-level run-once guard key for cold-boot silent-SSO probes
- * (`silentColdBootKey` in `OxyContext`, `ssoSignature` in `useWebSSO`).
- *
- * NATIVE SAFETY (the bug this fixes): React Native aliases a global `window`
- * (it points at the JS global object), so `typeof window !== 'undefined'` is
- * `true` on native — but `window.location` is `undefined`. Reading
- * `window.location.origin` after only a `typeof window` check therefore throws
- * `TypeError: Cannot read property 'origin' of undefined` on native. Because
- * the key is built UNCONDITIONALLY at the top of the cold-boot path (before its
- * try/catch), that throw escaped session restore entirely and broke
- * cross-session restore on native. Both prior copies of the guard had the same
- * insufficient `typeof window` check and were prone to drift, so the read is
- * consolidated here behind a guard that also verifies `window.location`.
- */
-
-/**
- * Read `window.location.origin` safely on every platform.
- *
- * Returns the browser origin on web, and the sentinel `'no-origin'` anywhere
- * `window.location` is absent (React Native, SSR/Node). Never throws.
- */
-function safeWindowOrigin() {
-  if (typeof window !== 'undefined' && typeof window.location !== 'undefined') {
-    return window.location.origin;
-  }
-  return 'no-origin';
-}
-
-/**
- * Build the stable `origin|baseURL` signature for the silent-SSO run-once
- * guard. Two providers pointed at the same API from the same origin share one
- * attempt. `getBaseURL` is invoked defensively (it may be absent or throw on a
- * partially-initialised client); any failure degrades to an empty baseURL.
- */
-function buildSilentGuardKey(getBaseURL) {
-  const origin = safeWindowOrigin();
-  let baseURL = '';
-  try {
-    baseURL = getBaseURL?.() ?? '';
-  } catch {
-    baseURL = '';
-  }
-  return `${origin}|${baseURL}`;
-}
-//# sourceMappingURL=silentGuardKey.js.map

package/lib/commonjs/utils/silentGuardKey.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["safeWindowOrigin","window","location","origin","buildSilentGuardKey","getBaseURL","baseURL"],"sourceRoot":"../../../src","sources":["utils/silentGuardKey.ts"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASA,gBAAgBA,CAAA,EAAW;EACzC,IAAI,OAAOC,MAAM,KAAK,WAAW,IAAI,OAAOA,MAAM,CAACC,QAAQ,KAAK,WAAW,EAAE;IAC3E,OAAOD,MAAM,CAACC,QAAQ,CAACC,MAAM;EAC/B;EACA,OAAO,WAAW;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAACC,UAAqC,EAAU;EACjF,MAAMF,MAAM,GAAGH,gBAAgB,CAAC,CAAC;EACjC,IAAIM,OAAO,GAAG,EAAE;EAChB,IAAI;IACFA,OAAO,GAAGD,UAAU,GAAG,CAAC,IAAI,EAAE;EAChC,CAAC,CAAC,MAAM;IACNC,OAAO,GAAG,EAAE;EACd;EACA,OAAO,GAAGH,MAAM,IAAIG,OAAO,EAAE;AAC/B","ignoreList":[]}

package/lib/module/ui/components/accountMenuRows.js

@@ -1,29 +0,0 @@
-"use strict";
-
-/**
- * Pure builder for `AccountMenu` rows. Extracted so the multi-account display
- * logic can be unit-tested without rendering React Native.
- *
- * Maps each {@link DeviceAccount} (sourced from `useDeviceAccounts()`, which
- * hydrates EVERY account with real name/email/avatar/color from the shared
- * apex `refresh-all` path or the local fallback) into an `AccountRow`.
- *
- * `secondary` is the account's real email when present; otherwise it falls
- * back to the `@handle` line. A missing email is NEVER synthesized into a fake
- * `username@oxy.so` — the device-account layer already resolved `email` to the
- * real value or the `@handle` fallback.
- */
-export function buildAccountRows({
-  accounts
-}) {
-  return accounts.map(account => ({
-    sessionId: account.sessionId,
-    authuser: account.authuser,
-    isActive: account.isCurrent,
-    displayName: account.displayName,
-    secondary: account.email,
-    avatarUri: account.avatarUrl,
-    user: account.user
-  }));
-}
-//# sourceMappingURL=accountMenuRows.js.map

package/lib/module/ui/components/accountMenuRows.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["buildAccountRows","accounts","map","account","sessionId","authuser","isActive","isCurrent","displayName","secondary","email","avatarUri","avatarUrl","user"],"sourceRoot":"../../../../src","sources":["ui/components/accountMenuRows.ts"],"mappings":";;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,gBAAgBA,CAAC;EAC7BC;AACmB,CAAC,EAAgB;EACpC,OAAOA,QAAQ,CAACC,GAAG,CAAEC,OAAsB,KAAkB;IACzDC,SAAS,EAAED,OAAO,CAACC,SAAS;IAC5BC,QAAQ,EAAEF,OAAO,CAACE,QAAQ;IAC1BC,QAAQ,EAAEH,OAAO,CAACI,SAAS;IAC3BC,WAAW,EAAEL,OAAO,CAACK,WAAW;IAChCC,SAAS,EAAEN,OAAO,CAACO,KAAK;IACxBC,SAAS,EAAER,OAAO,CAACS,SAAS;IAC5BC,IAAI,EAAEV,OAAO,CAACU;EAClB,CAAC,CAAC,CAAC;AACP","ignoreList":[]}

package/lib/module/ui/hooks/useDeviceAccounts.js

@@ -1,276 +0,0 @@
-"use strict";
-
-import { useMemo } from 'react';
-import { useQuery } from '@tanstack/react-query';
-import { getAccountDisplayName, getAccountFallbackHandle } from '@oxyhq/core';
-import { useOxy } from "../context/OxyContext.js";
-import { useI18n } from "./useI18n.js";
-import { queryKeys } from "./queries/queryKeys.js";
-
-/**
- * The per-account user shape carried by a {@link DeviceAccount}. Either:
- *  - the minimal projection returned by `POST /auth/refresh-all`
- *    ({@link RefreshAllAccountUser}, the shared apex path), or
- *  - the SDK's canonical {@link User} document (the active row on the local
- *    fallback path, which already has the full user loaded in `useOxy()`).
- *
- * Both satisfy `getAccountDisplayName`'s `DisplayNameUserShape`, so display
- * resolution is uniform across paths.
- */
-
-/**
- * One signed-in account on this device, fully hydrated for the account
- * chooser. Unlike the old `AccountMenu` behaviour (which only carried the
- * ACTIVE session's user), EVERY entry here carries real per-account
- * `displayName` / `email` / `avatarUrl` / `color`.
- */
-
-/**
- * Resolve which entries are the current account, robustly.
- *
- * Primary signal: `entry.sessionId === activeSessionId`. On the web shared-apex
- * path, `refreshAllSessions()` returns SERVER-side session ids that may not
- * equal the locally-stored `activeSessionId` (a different storage namespace /
- * server perspective), so a pure `sessionId` match can flag NO row as current —
- * the bug that surfaced as "Not signed in" even while authenticated.
- *
- * Fallbacks, applied only when the `sessionId` match found nothing AND the user
- * is authenticated:
- *  1. Match the live `user.id` against each entry's per-account user id.
- *  2. If still nothing and there is exactly one account, mark that one current.
- *
- * At most ONE entry is ever marked current.
- *
- * Pure & side-effect free so it is unit-testable without rendering React.
- */
-export function markCurrentAccount(accounts, activeSessionId, liveUserId, isAuthenticated) {
-  const bySession = accounts.map(account => ({
-    ...account,
-    isCurrent: Boolean(activeSessionId) && account.sessionId === activeSessionId
-  }));
-  if (bySession.some(account => account.isCurrent) || !isAuthenticated) {
-    return bySession;
-  }
-
-  // No row matched by session id: fall back to the live user's id, marking at
-  // most the FIRST matching entry current (never more than one).
-  if (liveUserId) {
-    let matched = false;
-    const byUser = bySession.map(account => {
-      if (!matched && account.user.id === liveUserId) {
-        matched = true;
-        return {
-          ...account,
-          isCurrent: true
-        };
-      }
-      return account;
-    });
-    if (matched) {
-      return byUser;
-    }
-  }
-
-  // Authenticated, nothing matched, but there is exactly one account → it must
-  // be the current one (single-account shared-apex / cross-domain case).
-  if (bySession.length === 1) {
-    return [{
-      ...bySession[0],
-      isCurrent: true
-    }];
-  }
-  return bySession;
-}
-
-/**
- * Resolve every account signed in on this device for the unified account
- * switcher, with real per-account name / email / avatar / color.
- *
- * ## Data sources (web vs native)
- *
- * - **Web on a `*.oxy.so` host** → `oxyServices.refreshAllSessions()` returns
- *   the full apex device-account list (identical to what `auth.oxy.so` sees,
- *   because the `Domain=oxy.so` refresh cookies reach `api.oxy.so`). Used
- *   directly — this is the `fromSharedApex: true` path.
- * - **Cross-domain web (non-`oxy.so` apex)** OR **native (no browser cookies)**
- *   → `refreshAllSessions()` yields `{ accounts: [] }` (the apex cookies never
- *   reach the request: cross-domain by `Domain`, native by having no cookie
- *   jar at all; a 401 is also normalised to `{ accounts: [] }` inside the
- *   core mixin). In that case we FALL BACK to the SDK's local multi-account
- *   list from `useOxy()` (`sessions` + `activeSessionId` + the active `user`).
- *   This is the `fromSharedApex: false` path.
- *
- * The fallback decision is purely data-driven: **if `refreshAllSessions()`
- * returns >0 accounts, use the shared path; otherwise fall back to local
- * `useOxy()` sessions.** No host sniffing is needed — the cookie scoping does
- * the discrimination for us, and the same code path works on native (where the
- * fetch returns `{ accounts: [] }`).
- *
- * ## Why React Query (not a `useRef`/`useState` start-once like the auth app)
- *
- * The auth app's `use-device-accounts.ts` hand-rolls a `startedRef` because it
- * has no React Query. The SDK does. `refreshAllSessions()` ROTATES single-use
- * refresh cookies on every call, so it must run AT MOST ONCE per page load:
- * we model that with `staleTime: Infinity` + `gcTime: Infinity` +
- * `refetchOnWindowFocus/Reconnect/Mount: false` + `retry: false`. React Query
- * dedupes concurrent mounts and caches the single result for the page's
- * lifetime — the exact "run once" guarantee the auth app documents, but
- * without the manual ref/state machinery.
- *
- * ## Validation note (intentionally NO zod re-parse)
- *
- * The auth app's hook calls `fetch` directly, so IT must `safeParse` the wire
- * response with `@oxyhq/contracts`. This hook calls
- * `oxyServices.refreshAllSessions()`, whose core mixin ALREADY validates and
- * normalises the wire response (skips entries missing required fields,
- * normalises `authuser` null→0, builds the `RefreshAllAccountUser` shape) — the
- * mixin is the single source of truth. Re-validating the SDK's own already-typed
- * output here would be redundant double-validation, so we do not re-parse.
- *
- * ## Error handling
- *
- * `refreshAllSessions()` already maps 401/404/abort to `{ accounts: [] }`
- * internally. Any OTHER failure (network, 5xx) propagates as a thrown error and
- * is surfaced by React Query (`query.isError`) — never swallowed. Callers that
- * don't care can ignore it; the hook still returns the local fallback list so
- * the chooser stays usable.
- */
-export function useDeviceAccounts() {
-  const {
-    oxyServices,
-    sessions,
-    activeSessionId,
-    user,
-    isAuthenticated
-  } = useOxy();
-  const {
-    locale
-  } = useI18n();
-
-  // Stable, per-API-origin query key. `refreshAllSessions` resolves against
-  // the session base url derived from `getBaseURL()`, so keying on it scopes
-  // the cached result to the API the provider is pointed at.
-  const baseURL = oxyServices.getBaseURL();
-  const query = useQuery({
-    queryKey: [...queryKeys.accounts.all, 'deviceAccounts', baseURL],
-    queryFn: () => oxyServices.refreshAllSessions(),
-    // Only attempt the shared apex path while signed in. When logged out
-    // there is nothing to enumerate and the fallback (also empty) is used.
-    enabled: isAuthenticated,
-    // Single-use cookie rotation → run at most once per page load.
-    staleTime: Number.POSITIVE_INFINITY,
-    gcTime: Number.POSITIVE_INFINITY,
-    refetchOnWindowFocus: false,
-    refetchOnReconnect: false,
-    refetchOnMount: false,
-    retry: false
-  });
-  const sharedAccounts = query.data?.accounts ?? [];
-  const fromSharedApex = sharedAccounts.length > 0;
-  const accounts = useMemo(() => {
-    const resolveAvatarUrl = avatar => avatar ? oxyServices.getFileDownloadUrl(avatar, 'thumb') : undefined;
-
-    // Build a single current-account row from the live `useOxy().user`. Used
-    // as a last-resort fallback when neither the shared-apex probe nor the
-    // local session store yielded a row but the user IS authenticated (e.g.
-    // a cross-domain host where the apex probe returned empty before the
-    // local session store hydrated). The signed-in user must ALWAYS be
-    // represented. Email is the REAL email or the `@handle` line — never a
-    // synthesized `username@oxy.so`.
-    const liveUserRow = () => {
-      if (!isAuthenticated || !user || !activeSessionId) {
-        return [];
-      }
-      const displayName = getAccountDisplayName(user, locale);
-      const handle = getAccountFallbackHandle(user);
-      const secondaryHandle = handle ? `@${handle}` : null;
-      return [{
-        sessionId: activeSessionId,
-        authuser: undefined,
-        isCurrent: true,
-        displayName,
-        email: user.email ?? secondaryHandle,
-        avatarUrl: resolveAvatarUrl(user.avatar),
-        color: user.color ?? null,
-        user
-      }];
-    };
-    let built;
-    if (fromSharedApex) {
-      // Shared apex path: every entry carries a real per-account user.
-      built = sharedAccounts.flatMap(entry => {
-        if (!entry.user) {
-          return [];
-        }
-        const accountUser = entry.user;
-        const displayName = getAccountDisplayName(accountUser, locale);
-        const handle = getAccountFallbackHandle(accountUser);
-        const email = entry.user.email ?? null;
-        const secondaryHandle = handle ? `@${handle}` : null;
-        return [{
-          sessionId: entry.sessionId,
-          authuser: entry.authuser,
-          // Provisional; finalised by `markCurrentAccount` below so the
-          // shared-apex path is robust to server/local session-id skew.
-          isCurrent: false,
-          displayName,
-          // Real email, or null (NEVER synthesized). The UI uses the
-          // `@handle` line only when email is genuinely absent.
-          email: email ?? secondaryHandle,
-          avatarUrl: resolveAvatarUrl(entry.user.avatar),
-          color: entry.user.color ?? null,
-          user: accountUser
-        }];
-      });
-    } else {
-      // Local fallback path: build from the SDK's multi-session store. The
-      // active session row gets the full loaded `user`; inactive fallback
-      // rows carry only what the `ClientSession` exposes (no synthesized
-      // identity — they show the active user's data only when active).
-      built = (sessions ?? []).flatMap(session => {
-        const isCurrent = session.sessionId === activeSessionId;
-        if (!isCurrent || !user) {
-          return [];
-        }
-        const accountUser = user;
-        const displayName = getAccountDisplayName(accountUser, locale);
-        const handle = getAccountFallbackHandle(accountUser);
-        const email = user.email ?? null;
-        const secondaryHandle = handle ? `@${handle}` : null;
-        return [{
-          sessionId: session.sessionId,
-          authuser: session.authuser,
-          isCurrent,
-          displayName,
-          email: email ?? secondaryHandle,
-          avatarUrl: resolveAvatarUrl(user.avatar),
-          color: user.color ?? null,
-          user: accountUser
-        }];
-      });
-    }
-
-    // Robust current-account detection: tolerate server/local session-id
-    // skew on the shared-apex path by falling back to the live user's id and
-    // the single-account heuristic.
-    const flagged = markCurrentAccount(built, activeSessionId, user?.id ?? null, isAuthenticated);
-
-    // The signed-in user must ALWAYS be represented. If detection produced
-    // an empty list yet the user is authenticated, synthesize a single
-    // current row from the live `useOxy().user`.
-    if (flagged.length === 0) {
-      return liveUserRow();
-    }
-    return flagged;
-  }, [fromSharedApex, sharedAccounts, sessions, activeSessionId, user, isAuthenticated, locale, oxyServices]);
-  return {
-    accounts,
-    // `isLoading` only reflects the shared probe while it's the relevant
-    // source. Once we know we're on the fallback (probe settled with 0
-    // accounts) the local list is synchronously available.
-    isLoading: isAuthenticated && query.isLoading,
-    currentSessionId: activeSessionId ?? null,
-    fromSharedApex
-  };
-}
-//# sourceMappingURL=useDeviceAccounts.js.map

package/lib/module/ui/hooks/useDeviceAccounts.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["useMemo","useQuery","getAccountDisplayName","getAccountFallbackHandle","useOxy","useI18n","queryKeys","markCurrentAccount","accounts","activeSessionId","liveUserId","isAuthenticated","bySession","map","account","isCurrent","Boolean","sessionId","some","matched","byUser","user","id","length","useDeviceAccounts","oxyServices","sessions","locale","baseURL","getBaseURL","query","queryKey","all","queryFn","refreshAllSessions","enabled","staleTime","Number","POSITIVE_INFINITY","gcTime","refetchOnWindowFocus","refetchOnReconnect","refetchOnMount","retry","sharedAccounts","data","fromSharedApex","resolveAvatarUrl","avatar","getFileDownloadUrl","undefined","liveUserRow","displayName","handle","secondaryHandle","authuser","email","avatarUrl","color","built","flatMap","entry","accountUser","session","flagged","isLoading","currentSessionId"],"sourceRoot":"../../../../src","sources":["ui/hooks/useDeviceAccounts.ts"],"mappings":";;AAAA,SAASA,OAAO,QAAQ,OAAO;AAC/B,SAASC,QAAQ,QAAQ,uBAAuB;AAChD,SACIC,qBAAqB,EACrBC,wBAAwB,QACrB,aAAa;AAMpB,SAASC,MAAM,QAAQ,0BAAuB;AAC9C,SAASC,OAAO,QAAQ,cAAW;AACnC,SAASC,SAAS,QAAQ,wBAAqB;;AAE/C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA;AACA;AACA;AACA;AACA;AACA;;AA4CA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,kBAAkBA,CAC9BC,QAAyB,EACzBC,eAA0C,EAC1CC,UAAqC,EACrCC,eAAwB,EACT;EACf,MAAMC,SAAS,GAAGJ,QAAQ,CAACK,GAAG,CAAEC,OAAO,KAAqB;IACxD,GAAGA,OAAO;IACVC,SAAS,EAAEC,OAAO,CAACP,eAAe,CAAC,IAAIK,OAAO,CAACG,SAAS,KAAKR;EACjE,CAAC,CAAC,CAAC;EAEH,IAAIG,SAAS,CAACM,IAAI,CAAEJ,OAAO,IAAKA,OAAO,CAACC,SAAS,CAAC,IAAI,CAACJ,eAAe,EAAE;IACpE,OAAOC,SAAS;EACpB;;EAEA;EACA;EACA,IAAIF,UAAU,EAAE;IACZ,IAAIS,OAAO,GAAG,KAAK;IACnB,MAAMC,MAAM,GAAGR,SAAS,CAACC,GAAG,CAAEC,OAAO,IAAoB;MACrD,IAAI,CAACK,OAAO,IAAIL,OAAO,CAACO,IAAI,CAACC,EAAE,KAAKZ,UAAU,EAAE;QAC5CS,OAAO,GAAG,IAAI;QACd,OAAO;UAAE,GAAGL,OAAO;UAAEC,SAAS,EAAE;QAAK,CAAC;MAC1C;MACA,OAAOD,OAAO;IAClB,CAAC,CAAC;IACF,IAAIK,OAAO,EAAE;MACT,OAAOC,MAAM;IACjB;EACJ;;EAEA;EACA;EACA,IAAIR,SAAS,CAACW,MAAM,KAAK,CAAC,EAAE;IACxB,OAAO,CAAC;MAAE,GAAGX,SAAS,CAAC,CAAC,CAAC;MAAEG,SAAS,EAAE;IAAK,CAAC,CAAC;EACjD;EAEA,OAAOH,SAAS;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASY,iBAAiBA,CAAA,EAA4B;EACzD,MAAM;IACFC,WAAW;IACXC,QAAQ;IACRjB,eAAe;IACfY,IAAI;IACJV;EACJ,CAAC,GAAGP,MAAM,CAAC,CAAC;EACZ,MAAM;IAAEuB;EAAO,CAAC,GAAGtB,OAAO,CAAC,CAAC;;EAE5B;EACA;EACA;EACA,MAAMuB,OAAO,GAAGH,WAAW,CAACI,UAAU,CAAC,CAAC;EAExC,MAAMC,KAAK,GAAG7B,QAAQ,CAAC;IACnB8B,QAAQ,EAAE,CAAC,GAAGzB,SAAS,CAACE,QAAQ,CAACwB,GAAG,EAAE,gBAAgB,EAAEJ,OAAO,CAAU;IACzEK,OAAO,EAAEA,CAAA,KAAMR,WAAW,CAACS,kBAAkB,CAAC,CAAC;IAC/C;IACA;IACAC,OAAO,EAAExB,eAAe;IACxB;IACAyB,SAAS,EAAEC,MAAM,CAACC,iBAAiB;IACnCC,MAAM,EAAEF,MAAM,CAACC,iBAAiB;IAChCE,oBAAoB,EAAE,KAAK;IAC3BC,kBAAkB,EAAE,KAAK;IACzBC,cAAc,EAAE,KAAK;IACrBC,KAAK,EAAE;EACX,CAAC,CAAC;EAEF,MAAMC,cAAc,GAAGd,KAAK,CAACe,IAAI,EAAErC,QAAQ,IAAI,EAAE;EACjD,MAAMsC,cAAc,GAAGF,cAAc,CAACrB,MAAM,GAAG,CAAC;EAEhD,MAAMf,QAAQ,GAAGR,OAAO,CAAkB,MAAM;IAC5C,MAAM+C,gBAAgB,GAAIC,MAAiC,IACvDA,MAAM,GAAGvB,WAAW,CAACwB,kBAAkB,CAACD,MAAM,EAAE,OAAO,CAAC,GAAGE,SAAS;;IAExE;IACA;IACA;IACA;IACA;IACA;IACA;IACA,MAAMC,WAAW,GAAGA,CAAA,KAAuB;MACvC,IAAI,CAACxC,eAAe,IAAI,CAACU,IAAI,IAAI,CAACZ,eAAe,EAAE;QAC/C,OAAO,EAAE;MACb;MACA,MAAM2C,WAAW,GAAGlD,qBAAqB,CAACmB,IAAI,EAAEM,MAAM,CAAC;MACvD,MAAM0B,MAAM,GAAGlD,wBAAwB,CAACkB,IAAI,CAAC;MAC7C,MAAMiC,eAAe,GAAGD,MAAM,GAAG,IAAIA,MAAM,EAAE,GAAG,IAAI;MACpD,OAAO,CAAC;QACJpC,SAAS,EAAER,eAAe;QAC1B8C,QAAQ,EAAEL,SAAS;QACnBnC,SAAS,EAAE,IAAI;QACfqC,WAAW;QACXI,KAAK,EAAEnC,IAAI,CAACmC,KAAK,IAAIF,eAAe;QACpCG,SAAS,EAAEV,gBAAgB,CAAC1B,IAAI,CAAC2B,MAAM,CAAC;QACxCU,KAAK,EAAErC,IAAI,CAACqC,KAAK,IAAI,IAAI;QACzBrC;MACJ,CAAC,CAAC;IACN,CAAC;IAED,IAAIsC,KAAsB;IAE1B,IAAIb,cAAc,EAAE;MAChB;MACAa,KAAK,GAAGf,cAAc,CAACgB,OAAO,CAAEC,KAAK,IAAsB;QACvD,IAAI,CAACA,KAAK,CAACxC,IAAI,EAAE;UACb,OAAO,EAAE;QACb;QACA,MAAMyC,WAA8B,GAAGD,KAAK,CAACxC,IAAI;QACjD,MAAM+B,WAAW,GAAGlD,qBAAqB,CAAC4D,WAAW,EAAEnC,MAAM,CAAC;QAC9D,MAAM0B,MAAM,GAAGlD,wBAAwB,CAAC2D,WAAW,CAAC;QACpD,MAAMN,KAAK,GAAGK,KAAK,CAACxC,IAAI,CAACmC,KAAK,IAAI,IAAI;QACtC,MAAMF,eAAe,GAAGD,MAAM,GAAG,IAAIA,MAAM,EAAE,GAAG,IAAI;QACpD,OAAO,CAAC;UACJpC,SAAS,EAAE4C,KAAK,CAAC5C,SAAS;UAC1BsC,QAAQ,EAAEM,KAAK,CAACN,QAAQ;UACxB;UACA;UACAxC,SAAS,EAAE,KAAK;UAChBqC,WAAW;UACX;UACA;UACAI,KAAK,EAAEA,KAAK,IAAIF,eAAe;UAC/BG,SAAS,EAAEV,gBAAgB,CAACc,KAAK,CAACxC,IAAI,CAAC2B,MAAM,CAAC;UAC9CU,KAAK,EAAEG,KAAK,CAACxC,IAAI,CAACqC,KAAK,IAAI,IAAI;UAC/BrC,IAAI,EAAEyC;QACV,CAAC,CAAC;MACN,CAAC,CAAC;IACN,CAAC,MAAM;MACH;MACA;MACA;MACA;MACAH,KAAK,GAAG,CAACjC,QAAQ,IAAI,EAAE,EAAEkC,OAAO,CAAEG,OAAsB,IAAsB;QAC1E,MAAMhD,SAAS,GAAGgD,OAAO,CAAC9C,SAAS,KAAKR,eAAe;QACvD,IAAI,CAACM,SAAS,IAAI,CAACM,IAAI,EAAE;UACrB,OAAO,EAAE;QACb;QACA,MAAMyC,WAA8B,GAAGzC,IAAI;QAC3C,MAAM+B,WAAW,GAAGlD,qBAAqB,CAAC4D,WAAW,EAAEnC,MAAM,CAAC;QAC9D,MAAM0B,MAAM,GAAGlD,wBAAwB,CAAC2D,WAAW,CAAC;QACpD,MAAMN,KAAK,GAAGnC,IAAI,CAACmC,KAAK,IAAI,IAAI;QAChC,MAAMF,eAAe,GAAGD,MAAM,GAAG,IAAIA,MAAM,EAAE,GAAG,IAAI;QACpD,OAAO,CAAC;UACJpC,SAAS,EAAE8C,OAAO,CAAC9C,SAAS;UAC5BsC,QAAQ,EAAEQ,OAAO,CAACR,QAAQ;UAC1BxC,SAAS;UACTqC,WAAW;UACXI,KAAK,EAAEA,KAAK,IAAIF,eAAe;UAC/BG,SAAS,EAAEV,gBAAgB,CAAC1B,IAAI,CAAC2B,MAAM,CAAC;UACxCU,KAAK,EAAErC,IAAI,CAACqC,KAAK,IAAI,IAAI;UACzBrC,IAAI,EAAEyC;QACV,CAAC,CAAC;MACN,CAAC,CAAC;IACN;;IAEA;IACA;IACA;IACA,MAAME,OAAO,GAAGzD,kBAAkB,CAC9BoD,KAAK,EACLlD,eAAe,EACfY,IAAI,EAAEC,EAAE,IAAI,IAAI,EAChBX,eACJ,CAAC;;IAED;IACA;IACA;IACA,IAAIqD,OAAO,CAACzC,MAAM,KAAK,CAAC,EAAE;MACtB,OAAO4B,WAAW,CAAC,CAAC;IACxB;IACA,OAAOa,OAAO;EAClB,CAAC,EAAE,CACClB,cAAc,EACdF,cAAc,EACdlB,QAAQ,EACRjB,eAAe,EACfY,IAAI,EACJV,eAAe,EACfgB,MAAM,EACNF,WAAW,CACd,CAAC;EAEF,OAAO;IACHjB,QAAQ;IACR;IACA;IACA;IACAyD,SAAS,EAAEtD,eAAe,IAAImB,KAAK,CAACmC,SAAS;IAC7CC,gBAAgB,EAAEzD,eAAe,IAAI,IAAI;IACzCqC;EACJ,CAAC;AACL","ignoreList":[]}