@oxyhq/services 22.13.0 → 23.0.0

package/src/ui/utils/fileManagement.ts

@@ -1,7 +1,7 @@
-import type { Ionicons } from '@expo/vector-icons';
-import type { AssetUploadInput, RNFileDescriptor } from '@oxyhq/core';
-import type { ComponentProps } from 'react';
-import { Platform } from 'react-native';
+import type Ionicons from "@expo/vector-icons/Ionicons";
+import type { AssetUploadInput, RNFileDescriptor } from "@oxyhq/core";
+import type { ComponentProps } from "react";
+import { Platform } from "react-native";
 
 /**
  * Extended File interface that includes a `uri` property for mobile preview support.
@@ -9,7 +9,7 @@ import { Platform } from 'react-native';
  * on the File object for preview rendering.
  */
 interface FileWithUri extends File {
-  uri?: string;
+	uri?: string;
 }
 
 /**
@@ -18,11 +18,11 @@ interface FileWithUri extends File {
  * descriptor straight to FormData on React Native.
  */
 export interface PickerAsset {
-  file?: File | Blob;
-  uri?: string;
-  name?: string | null;
-  mimeType?: string | null;
-  size?: number | null;
+	file?: File | Blob;
+	uri?: string;
+	name?: string | null;
+	mimeType?: string | null;
+	size?: number | null;
 }
 
 /**
@@ -30,37 +30,42 @@ export interface PickerAsset {
  * (carries a URI but is not a real DOM `File` / `Blob` instance).
  */
 export function isRNFileDescriptor(input: unknown): input is RNFileDescriptor {
-  if (!input || typeof input !== 'object') return false;
-  const obj = input as Record<string, unknown>;
-  if (typeof obj.uri !== 'string') return false;
-  if (typeof File !== 'undefined' && input instanceof File) return false;
-  if (typeof Blob !== 'undefined' && input instanceof Blob) return false;
-  return true;
+	if (!input || typeof input !== "object") return false;
+	const obj = input as Record<string, unknown>;
+	if (typeof obj.uri !== "string") return false;
+	if (typeof File !== "undefined" && input instanceof File) return false;
+	if (typeof Blob !== "undefined" && input instanceof Blob) return false;
+	return true;
 }
 
 /**
  * Format file size in bytes to human-readable string
  */
 export function formatFileSize(bytes: number): string {
-    if (bytes === 0) return '0 Bytes';
-    const k = 1024;
-    const sizes = ['Bytes', 'KB', 'MB', 'GB'];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return `${Number.parseFloat((bytes / k ** i).toFixed(2))} ${sizes[i]}`;
+	if (bytes === 0) return "0 Bytes";
+	const k = 1024;
+	const sizes = ["Bytes", "KB", "MB", "GB"];
+	const i = Math.floor(Math.log(bytes) / Math.log(k));
+	return `${Number.parseFloat((bytes / k ** i).toFixed(2))} ${sizes[i]}`;
 }
 
 /**
  * Get icon name for file based on content type
  */
-export function getFileIcon(contentType: string): ComponentProps<typeof Ionicons>['name'] {
-    if (contentType.startsWith('image/')) return 'image';
-    if (contentType.startsWith('video/')) return 'videocam';
-    if (contentType.startsWith('audio/')) return 'musical-notes';
-    if (contentType.includes('pdf')) return 'document-text';
-    if (contentType.includes('word') || contentType.includes('doc')) return 'document';
-    if (contentType.includes('excel') || contentType.includes('sheet')) return 'grid';
-    if (contentType.includes('zip') || contentType.includes('archive')) return 'archive';
-    return 'document-outline';
+export function getFileIcon(
+	contentType: string,
+): ComponentProps<typeof Ionicons>["name"] {
+	if (contentType.startsWith("image/")) return "image";
+	if (contentType.startsWith("video/")) return "videocam";
+	if (contentType.startsWith("audio/")) return "musical-notes";
+	if (contentType.includes("pdf")) return "document-text";
+	if (contentType.includes("word") || contentType.includes("doc"))
+		return "document";
+	if (contentType.includes("excel") || contentType.includes("sheet"))
+		return "grid";
+	if (contentType.includes("zip") || contentType.includes("archive"))
+		return "archive";
+	return "document-outline";
 }
 
 /**
@@ -76,79 +81,90 @@ export function getFileIcon(contentType: string): ComponentProps<typeof Ionicons
  *   'ArrayBuffer' and 'ArrayBufferView' are not supported").
  */
 export async function convertDocumentPickerAssetToFile(
-    doc: PickerAsset,
-    index: number
+	doc: PickerAsset,
+	index: number,
 ): Promise<FileWithUri | RNFileDescriptor | null> {
-    const fileName = doc.name || `file-${index + 1}`;
-    const fileType = doc.mimeType || 'application/octet-stream';
+	const fileName = doc.name || `file-${index + 1}`;
+	const fileType = doc.mimeType || "application/octet-stream";
 
-    // React Native path — return the descriptor as-is. FormData handles it.
-    if (Platform.OS !== 'web') {
-        if (!doc.uri) {
-            throw new Error('Missing file data (no uri property)');
-        }
-        return {
-            uri: doc.uri,
-            type: fileType,
-            name: fileName,
-            size: typeof doc.size === 'number' ? doc.size : undefined,
-        };
-    }
+	// React Native path — return the descriptor as-is. FormData handles it.
+	if (Platform.OS !== "web") {
+		if (!doc.uri) {
+			throw new Error("Missing file data (no uri property)");
+		}
+		return {
+			uri: doc.uri,
+			type: fileType,
+			name: fileName,
+			size: typeof doc.size === "number" ? doc.size : undefined,
+		};
+	}
 
-    try {
-        let file: FileWithUri | null = null;
+	try {
+		let file: FileWithUri | null = null;
 
-        // Priority 1: Use doc.file if available (web native File API).
-        // This is the most efficient path as it doesn't require fetching.
-        if (doc.file && typeof globalThis.File !== 'undefined' && doc.file instanceof globalThis.File) {
-            file = doc.file as FileWithUri;
-            // Ensure file has required properties
-            if (!file.name && doc.name) {
-                // Create new File with proper name if missing
-                file = new globalThis.File([file], doc.name, { type: file.type || fileType });
-            }
-            // Preserve URI for preview if available
-            if (doc.uri) {
-                file.uri = doc.uri;
-            }
-            return file;
-        }
+		// Priority 1: Use doc.file if available (web native File API).
+		// This is the most efficient path as it doesn't require fetching.
+		if (
+			doc.file &&
+			typeof globalThis.File !== "undefined" &&
+			doc.file instanceof globalThis.File
+		) {
+			file = doc.file as FileWithUri;
+			// Ensure file has required properties
+			if (!file.name && doc.name) {
+				// Create new File with proper name if missing
+				file = new globalThis.File([file], doc.name, {
+					type: file.type || fileType,
+				});
+			}
+			// Preserve URI for preview if available
+			if (doc.uri) {
+				file.uri = doc.uri;
+			}
+			return file;
+		}
 
-        // Priority 2: Build File from URI (web blob URLs or http(s) URLs).
-        if (doc.uri) {
-            try {
-                const response = await fetch(doc.uri);
-                if (!response.ok) {
-                    throw new Error(`Failed to fetch file: ${response.statusText}`);
-                }
-                const blob = await response.blob();
-                const resolvedType = doc.mimeType || blob.type || 'application/octet-stream';
-                file = new globalThis.File([blob], fileName, { type: resolvedType }) as FileWithUri;
-                file.uri = doc.uri;
-                return file;
-            } catch (error: unknown) {
-                console.error('Failed to read file from URI:', error);
-                throw new Error(`Failed to load file: ${(error instanceof Error ? error.message : null) || 'Unknown error'}`);
-            }
-        }
+		// Priority 2: Build File from URI (web blob URLs or http(s) URLs).
+		if (doc.uri) {
+			try {
+				const response = await fetch(doc.uri);
+				if (!response.ok) {
+					throw new Error(`Failed to fetch file: ${response.statusText}`);
+				}
+				const blob = await response.blob();
+				const resolvedType =
+					doc.mimeType || blob.type || "application/octet-stream";
+				file = new globalThis.File([blob], fileName, {
+					type: resolvedType,
+				}) as FileWithUri;
+				file.uri = doc.uri;
+				return file;
+			} catch (error: unknown) {
+				console.error("Failed to read file from URI:", error);
+				throw new Error(
+					`Failed to load file: ${(error instanceof Error ? error.message : null) || "Unknown error"}`,
+				);
+			}
+		}
 
-        // No file or URI available - this shouldn't happen with Expo 54
-        throw new Error('Missing file data (no file or uri property)');
-    } catch (error: unknown) {
-        console.error('Error converting document to file:', error);
-        throw error;
-    }
+		// No file or URI available - this shouldn't happen with Expo 54
+		throw new Error("Missing file data (no file or uri property)");
+	} catch (error: unknown) {
+		console.error("Error converting document to file:", error);
+		throw error;
+	}
 }
 
 /**
  * Upload file raw - helper function for file uploads
  */
 export async function uploadFileRaw(
-    file: AssetUploadInput,
-    userId: string,
-    // biome-ignore lint/suspicious/noExplicitAny: OxyServices type cannot be fully resolved due to mixin composition pattern
-    oxyServices: any,
-    visibility?: 'private' | 'public' | 'unlisted'
+	file: AssetUploadInput,
+	userId: string,
+	// biome-ignore lint/suspicious/noExplicitAny: OxyServices type cannot be fully resolved due to mixin composition pattern
+	oxyServices: any,
+	visibility?: "private" | "public" | "unlisted",
 ) {
-    return await oxyServices.uploadRawFile(file, visibility);
+	return await oxyServices.uploadRawFile(file, visibility);
 }

package/src/ui/utils/netConnectivity.ts

@@ -0,0 +1,27 @@
+export interface NetInfoLikeState {
+  isConnected: boolean | null;
+  isInternetReachable?: boolean | null;
+}
+
+/**
+ * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
+ * reports connected but explicitly unreachable (captive portal, no route) counts
+ * as offline.
+ */
+export function isNetConnectivityOnline(state: NetInfoLikeState): boolean {
+  return Boolean(state.isConnected && state.isInternetReachable !== false);
+}
+
+/**
+ * Conservative offline verdict for boot-path probes. Unknown / probing states
+ * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
+ * skips a real sign-in.
+ */
+export function isNetConnectivityExplicitlyOffline(
+  state: NetInfoLikeState | null | undefined,
+): boolean {
+  if (!state) return false;
+  if (state.isConnected === false) return true;
+  if (state.isConnected === true && state.isInternetReachable === false) return true;
+  return false;
+}

package/src/ui/utils/oauthReturn.ts

@@ -14,12 +14,21 @@ import { isWebBrowser } from './isWebBrowser';
  * When the RP lands with `?code=` after signing in at auth.oxy.so, exchange the
  * code for a device-first session before cold boot runs.
  *
- * This is the REDIRECT transport's return leg. It owns only what is specific to
- * a full-page round trip — reading the code off the URL, recovering the
- * handshake `sessionStorage` carried across the navigation, and cleaning both up
- * afterwards — and delegates state validation, the PKCE exchange, and the
- * session commit to `completeOAuthCode`, the same function the popup transport
- * runs.
+ * This is the REDIRECT transport's return leg. The SDK never starts a full-page
+ * authorize navigation on its own any more (#691 phase 7b), but this lane is
+ * still load-bearing: a browser-BLOCKED sign-in popup falls back to a full-page
+ * redirect (`startWebOAuthSignIn`), and that redirect comes back here.
+ *
+ * It owns only what is specific to a full-page round trip — reading the code off
+ * the URL, recovering the handshake `sessionStorage` carried across the
+ * navigation, and cleaning both up afterwards — and delegates state validation,
+ * the PKCE exchange, and the session commit to `completeOAuthCode`, the same
+ * function the popup transport runs.
+ *
+ * It is also the SINGLE cleanup path for an OAuth `error` landing on the URL:
+ * any `?error=…` (including an `error=login_required` left over from the
+ * now-deleted silent restore) is stripped along with `state` /
+ * `error_description`, and the stale PKCE handshake is cleared.
  */
 export async function tryCompleteOAuthReturn(opts: {
   oxyServices: OxyServices;
@@ -125,29 +134,5 @@ function stripOAuthParamsFromUrl(): void {
   url.searchParams.delete('state');
   url.searchParams.delete('error');
   url.searchParams.delete('error_description');
-  url.searchParams.delete('hub_sync');
-  replaceUrlAfterOAuthReturn(`${url.pathname}${url.search}${url.hash}`);
-}
-
-/**
- * When auth.oxy.so hub-sync redeem fails, the IdP redirects back with
- * `?hub_sync=failed`. Strip the param and log so cold boot can continue
- * without leaving a stale query string.
- */
-export function consumeHubSyncFailure(): boolean {
-  if (!isWebBrowser()) return false;
-  const location = (globalThis as { location?: Location }).location;
-  if (!location) return false;
-
-  const params = new URLSearchParams(location.search);
-  if (params.get('hub_sync') !== 'failed') return false;
-
-  logger.warn('Hub sync failed — IdP device session may be out of sync', {
-    component: 'hubSync',
-  });
-
-  const url = new URL(location.href);
-  url.searchParams.delete('hub_sync');
   replaceUrlAfterOAuthReturn(`${url.pathname}${url.search}${url.hash}`);
-  return true;
 }

package/lib/commonjs/ui/oauth/legacyRedirectLanes.js

@@ -1,48 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.allowsAutomaticIdpRedirect = allowsAutomaticIdpRedirect;
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-function allowsAutomaticIdpRedirect(webAuthMode) {
-  return webAuthMode === 'redirect';
-}
-//# sourceMappingURL=legacyRedirectLanes.js.map

package/lib/commonjs/ui/oauth/legacyRedirectLanes.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["allowsAutomaticIdpRedirect","webAuthMode"],"sourceRoot":"../../../../src","sources":["ui/oauth/legacyRedirectLanes.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASA,0BAA0BA,CAACC,WAAwB,EAAW;EAC5E,OAAOA,WAAW,KAAK,UAAU;AACnC","ignoreList":[]}

package/lib/commonjs/ui/utils/crossOriginRestore.js

@@ -1,140 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.clearCrossOriginRestoreGuards = clearCrossOriginRestoreGuards;
-exports.consumeSilentOAuthError = consumeSilentOAuthError;
-exports.isCrossOriginRestoreBlocked = isCrossOriginRestoreBlocked;
-exports.isSilentRestoreEligibleOrigin = isSilentRestoreEligibleOrigin;
-exports.markCrossOriginRestoreAttempted = markCrossOriginRestoreAttempted;
-exports.maybeStartSilentOAuthRestore = maybeStartSilentOAuthRestore;
-var _core = require("@oxyhq/core");
-var _isWebBrowser = require("./isWebBrowser.js");
-var _oauthReturn = require("./oauthReturn.js");
-var _oauthNavigation = require("../components/oauthNavigation.js");
-function sessionStore() {
-  return globalThis.sessionStorage;
-}
-
-/** True when this tab already attempted cross-origin silent OAuth restore. */
-function isCrossOriginRestoreBlocked() {
-  const store = sessionStore();
-  if (!store) return false;
-  return Boolean(store.getItem(_core.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY) || store.getItem(_core.OXY_SILENT_OAUTH_ATTEMPTED_KEY));
-}
-
-/** Mark restore as attempted — never auto-retry until sign-out clears guards. */
-function markCrossOriginRestoreAttempted() {
-  const store = sessionStore();
-  if (!store) return;
-  store.setItem(_core.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY, '1');
-  store.setItem(_core.OXY_SILENT_OAUTH_ATTEMPTED_KEY, '1');
-}
-
-/** Clear all cross-origin restore loop guards (call on sign-out). */
-function clearCrossOriginRestoreGuards() {
-  const store = sessionStore();
-  if (!store) return;
-  for (const key of [_core.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY, _core.OXY_SILENT_OAUTH_ATTEMPTED_KEY]) {
-    store.removeItem(key);
-  }
-}
-
-/**
- * Whether cold boot should attempt silent cross-origin OAuth restore for the
- * given web origin.
- *
- * Mirrors the hub-sync WRITE gate (`syncHubAfterSignIn`): only OFFICIAL Oxy web
- * origins participate in cross-app SSO — a random third-party / preview origin
- * must never have its tab bounced to the IdP. Additionally, loopback / local-dev
- * origins are EXCLUDED here even though {@link isOfficialWebOrigin} treats them
- * as official: a developer's local app must never be redirected to a hosted IdP
- * on cold boot (it signs in through the in-app dialog instead). The central IdP
- * hub's own origin is excluded to avoid a wasteful self-hop.
- */
-function isSilentRestoreEligibleOrigin(origin) {
-  if ((0, _core.isLoopbackOrigin)(origin)) return false;
-  if ((0, _core.isIdpHubOrigin)()) return false;
-  return (0, _core.isOfficialWebOrigin)(origin);
-}
-/**
- * Top-level redirect to auth.oxy.so/authorize with `prompt=none` for silent
- * cross-origin session restore on all web apps (official + third-party).
- */
-async function maybeStartSilentOAuthRestore(opts) {
-  if (!(0, _isWebBrowser.isWebBrowser)()) return false;
-  const location = globalThis.location;
-  if (!location) return false;
-
-  // Defense-in-depth: never bounce a loopback / non-official / IdP-hub origin to
-  // a hosted authorize endpoint (the caller gates on this too).
-  if (!isSilentRestoreEligibleOrigin(location.origin)) {
-    return false;
-  }
-  if (isCrossOriginRestoreBlocked()) {
-    return false;
-  }
-  const params = new URLSearchParams(location.search);
-  if (params.has('code') || params.has('error')) {
-    return false;
-  }
-  try {
-    const {
-      codeVerifier,
-      codeChallenge
-    } = await (0, _core.generatePkcePair)();
-    const state = await (0, _core.generateOAuthState)();
-    const redirectUri = (0, _core.canonicalizeOAuthRedirectUri)(opts.redirectUri ?? location.origin);
-    if (!(0, _core.persistOAuthHandshake)(state, codeVerifier, redirectUri)) {
-      return false;
-    }
-    const authorizeUrl = (0, _core.buildOAuthAuthorizeUrl)({
-      authorizeBaseUrl: opts.authorizeBaseUrl,
-      clientId: opts.clientId,
-      redirectUri,
-      state,
-      codeChallenge,
-      scope: opts.scope,
-      prompt: 'none'
-    });
-    markCrossOriginRestoreAttempted();
-    (0, _oauthNavigation.redirectToAuthorize)(authorizeUrl);
-    return true;
-  } catch (error) {
-    _core.logger.warn('Silent OAuth restore skipped', {
-      component: 'crossOriginRestore'
-    }, error);
-    return false;
-  }
-}
-
-/**
- * When the RP lands with OAuth error params from a silent authorize attempt,
- * strip them and return whether the error was terminal for silent restore.
- */
-function consumeSilentOAuthError() {
-  if (!(0, _isWebBrowser.isWebBrowser)()) return null;
-  const location = globalThis.location;
-  const history = globalThis.history;
-  if (!location) return null;
-  const params = new URLSearchParams(location.search);
-  const error = params.get('error');
-  if (error !== 'login_required' && error !== 'consent_required') {
-    return null;
-  }
-  markCrossOriginRestoreAttempted();
-  if (history?.replaceState) {
-    const url = new URL(location.href);
-    url.searchParams.delete('error');
-    url.searchParams.delete('error_description');
-    url.searchParams.delete('state');
-    // Silent restore failed, but the visitor still asked for a specific page.
-    // Put them back on it rather than leaving them on the bare origin the IdP
-    // redirected to.
-    (0, _oauthReturn.replaceUrlAfterOAuthReturn)(`${url.pathname}${url.search}${url.hash}`);
-  }
-  (0, _core.clearOAuthHandshake)();
-  return error;
-}
-//# sourceMappingURL=crossOriginRestore.js.map

package/lib/commonjs/ui/utils/crossOriginRestore.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_core","require","_isWebBrowser","_oauthReturn","_oauthNavigation","sessionStore","globalThis","sessionStorage","isCrossOriginRestoreBlocked","store","Boolean","getItem","OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY","OXY_SILENT_OAUTH_ATTEMPTED_KEY","markCrossOriginRestoreAttempted","setItem","clearCrossOriginRestoreGuards","key","removeItem","isSilentRestoreEligibleOrigin","origin","isLoopbackOrigin","isIdpHubOrigin","isOfficialWebOrigin","maybeStartSilentOAuthRestore","opts","isWebBrowser","location","params","URLSearchParams","search","has","codeVerifier","codeChallenge","generatePkcePair","state","generateOAuthState","redirectUri","canonicalizeOAuthRedirectUri","persistOAuthHandshake","authorizeUrl","buildOAuthAuthorizeUrl","authorizeBaseUrl","clientId","scope","prompt","redirectToAuthorize","error","logger","warn","component","consumeSilentOAuthError","history","get","replaceState","url","URL","href","searchParams","delete","replaceUrlAfterOAuthReturn","pathname","hash","clearOAuthHandshake"],"sourceRoot":"../../../../src","sources":["ui/utils/crossOriginRestore.ts"],"mappings":";;;;;;;;;;;AACA,IAAAA,KAAA,GAAAC,OAAA;AAcA,IAAAC,aAAA,GAAAD,OAAA;AACA,IAAAE,YAAA,GAAAF,OAAA;AACA,IAAAG,gBAAA,GAAAH,OAAA;AAEA,SAASI,YAAYA,CAAA,EAAwB;EAC3C,OAAQC,UAAU,CAAkCC,cAAc;AACpE;;AAEA;AACO,SAASC,2BAA2BA,CAAA,EAAY;EACrD,MAAMC,KAAK,GAAGJ,YAAY,CAAC,CAAC;EAC5B,IAAI,CAACI,KAAK,EAAE,OAAO,KAAK;EACxB,OAAOC,OAAO,CACZD,KAAK,CAACE,OAAO,CAACC,4CAAsC,CAAC,IACnDH,KAAK,CAACE,OAAO,CAACE,oCAA8B,CAChD,CAAC;AACH;;AAEA;AACO,SAASC,+BAA+BA,CAAA,EAAS;EACtD,MAAML,KAAK,GAAGJ,YAAY,CAAC,CAAC;EAC5B,IAAI,CAACI,KAAK,EAAE;EACZA,KAAK,CAACM,OAAO,CAACH,4CAAsC,EAAE,GAAG,CAAC;EAC1DH,KAAK,CAACM,OAAO,CAACF,oCAA8B,EAAE,GAAG,CAAC;AACpD;;AAEA;AACO,SAASG,6BAA6BA,CAAA,EAAS;EACpD,MAAMP,KAAK,GAAGJ,YAAY,CAAC,CAAC;EAC5B,IAAI,CAACI,KAAK,EAAE;EACZ,KAAK,MAAMQ,GAAG,IAAI,CAACL,4CAAsC,EAAEC,oCAA8B,CAAC,EAAE;IAC1FJ,KAAK,CAACS,UAAU,CAACD,GAAG,CAAC;EACvB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,6BAA6BA,CAACC,MAAc,EAAW;EACrE,IAAI,IAAAC,sBAAgB,EAACD,MAAM,CAAC,EAAE,OAAO,KAAK;EAC1C,IAAI,IAAAE,oBAAc,EAAC,CAAC,EAAE,OAAO,KAAK;EAClC,OAAO,IAAAC,yBAAmB,EAACH,MAAM,CAAC;AACpC;AAeA;AACA;AACA;AACA;AACO,eAAeI,4BAA4BA,CAChDC,IAA+B,EACb;EAClB,IAAI,CAAC,IAAAC,0BAAY,EAAC,CAAC,EAAE,OAAO,KAAK;EAEjC,MAAMC,QAAQ,GAAIrB,UAAU,CAA6BqB,QAAQ;EACjE,IAAI,CAACA,QAAQ,EAAE,OAAO,KAAK;;EAE3B;EACA;EACA,IAAI,CAACR,6BAA6B,CAACQ,QAAQ,CAACP,MAAM,CAAC,EAAE;IACnD,OAAO,KAAK;EACd;EAEA,IAAIZ,2BAA2B,CAAC,CAAC,EAAE;IACjC,OAAO,KAAK;EACd;EAEA,MAAMoB,MAAM,GAAG,IAAIC,eAAe,CAACF,QAAQ,CAACG,MAAM,CAAC;EACnD,IAAIF,MAAM,CAACG,GAAG,CAAC,MAAM,CAAC,IAAIH,MAAM,CAACG,GAAG,CAAC,OAAO,CAAC,EAAE;IAC7C,OAAO,KAAK;EACd;EAEA,IAAI;IACF,MAAM;MAAEC,YAAY;MAAEC;IAAc,CAAC,GAAG,MAAM,IAAAC,sBAAgB,EAAC,CAAC;IAChE,MAAMC,KAAK,GAAG,MAAM,IAAAC,wBAAkB,EAAC,CAAC;IACxC,MAAMC,WAAW,GAAG,IAAAC,kCAA4B,EAC9Cb,IAAI,CAACY,WAAW,IAAIV,QAAQ,CAACP,MAC/B,CAAC;IACD,IAAI,CAAC,IAAAmB,2BAAqB,EAACJ,KAAK,EAAEH,YAAY,EAAEK,WAAW,CAAC,EAAE;MAC5D,OAAO,KAAK;IACd;IAEA,MAAMG,YAAY,GAAG,IAAAC,4BAAsB,EAAC;MAC1CC,gBAAgB,EAAEjB,IAAI,CAACiB,gBAAgB;MACvCC,QAAQ,EAAElB,IAAI,CAACkB,QAAQ;MACvBN,WAAW;MACXF,KAAK;MACLF,aAAa;MACbW,KAAK,EAAEnB,IAAI,CAACmB,KAAK;MACjBC,MAAM,EAAE;IACV,CAAC,CAAC;IAEF/B,+BAA+B,CAAC,CAAC;IACjC,IAAAgC,oCAAmB,EAACN,YAAY,CAAC;IACjC,OAAO,IAAI;EACb,CAAC,CAAC,OAAOO,KAAK,EAAE;IACdC,YAAM,CAACC,IAAI,CAAC,8BAA8B,EAAE;MAAEC,SAAS,EAAE;IAAqB,CAAC,EAAEH,KAAK,CAAC;IACvF,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;AACA;AACO,SAASI,uBAAuBA,CAAA,EAAiD;EACtF,IAAI,CAAC,IAAAzB,0BAAY,EAAC,CAAC,EAAE,OAAO,IAAI;EAChC,MAAMC,QAAQ,GAAIrB,UAAU,CAAgDqB,QAAQ;EACpF,MAAMyB,OAAO,GAAI9C,UAAU,CAA2B8C,OAAO;EAC7D,IAAI,CAACzB,QAAQ,EAAE,OAAO,IAAI;EAE1B,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAACF,QAAQ,CAACG,MAAM,CAAC;EACnD,MAAMiB,KAAK,GAAGnB,MAAM,CAACyB,GAAG,CAAC,OAAO,CAAC;EACjC,IAAIN,KAAK,KAAK,gBAAgB,IAAIA,KAAK,KAAK,kBAAkB,EAAE;IAC9D,OAAO,IAAI;EACb;EAEAjC,+BAA+B,CAAC,CAAC;EAEjC,IAAIsC,OAAO,EAAEE,YAAY,EAAE;IACzB,MAAMC,GAAG,GAAG,IAAIC,GAAG,CAAC7B,QAAQ,CAAC8B,IAAI,CAAC;IAClCF,GAAG,CAACG,YAAY,CAACC,MAAM,CAAC,OAAO,CAAC;IAChCJ,GAAG,CAACG,YAAY,CAACC,MAAM,CAAC,mBAAmB,CAAC;IAC5CJ,GAAG,CAACG,YAAY,CAACC,MAAM,CAAC,OAAO,CAAC;IAChC;IACA;IACA;IACA,IAAAC,uCAA0B,EAAC,GAAGL,GAAG,CAACM,QAAQ,GAAGN,GAAG,CAACzB,MAAM,GAAGyB,GAAG,CAACO,IAAI,EAAE,CAAC;EACvE;EACA,IAAAC,yBAAmB,EAAC,CAAC;EACrB,OAAOhB,KAAK;AACd","ignoreList":[]}

package/lib/module/ui/oauth/legacyRedirectLanes.js

@@ -1,44 +0,0 @@
-"use strict";
-
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-export function allowsAutomaticIdpRedirect(webAuthMode) {
-  return webAuthMode === 'redirect';
-}
-//# sourceMappingURL=legacyRedirectLanes.js.map

package/lib/module/ui/oauth/legacyRedirectLanes.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["allowsAutomaticIdpRedirect","webAuthMode"],"sourceRoot":"../../../../src","sources":["ui/oauth/legacyRedirectLanes.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,0BAA0BA,CAACC,WAAwB,EAAW;EAC5E,OAAOA,WAAW,KAAK,UAAU;AACnC","ignoreList":[]}