@oxyhq/services 23.0.2 → 23.0.3

package/lib/commonjs/ui/components/OxyAccountDialogScreen.js

@@ -0,0 +1,195 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _OxyContext = require("../context/OxyContext.js");
+var _useI18n = require("../hooks/useI18n.js");
+var _useSurfaceHeader = require("../hooks/useSurfaceHeader.js");
+var _LogoText = _interopRequireDefault(require("./logo/LogoText.js"));
+var _OxyAuthChooser = _interopRequireDefault(require("./OxyAuthChooser.js"));
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * OxyAccountDialogScreen — the ONE unified account dialog BODY for `@oxyhq/services`.
+ *
+ * The header (title/subtitle per view + back button) around the headless chooser
+ * logic, which lives in `OxyAuthChooser` — the account switcher, sign-in,
+ * sign-up, and QR views are ALL there, extracted so the same chooser can be
+ * mounted bare by a future host with no Dialog chrome (e.g. an auth.oxy.so hub
+ * page driving the cross-origin passkey popup, b2). This file owns ONLY the
+ * header + the scroll body.
+ *
+ * It is presented as the `AccountDialog` route on the shared Bloom SURFACE STACK
+ * (`@oxyhq/bloom/surfaces`) — `OxyContext.openAccountDialog` calls
+ * `presentDetached('AccountDialog', …, { placement: { base: 'bottom', md:
+ * 'center' }, dismissOnBackdrop: false, maxWidth: 420 })`, so the STACK owns the
+ * responsive `<Dialog>` chrome and this component renders only its content. That
+ * replaces the previous standalone controlled `<Dialog open={isAccountDialogOpen}>`
+ * mount: dismissal now flows through the stack (backdrop/swipe disabled), and the
+ * header close button (and `OxyAuthChooser`'s `onComplete`) drive
+ * `useOxy().closeAccountDialog`, which dismisses the surface and runs its exit
+ * animation. The view-enum (`accounts|signin|qr|add|signup`) stays internal here,
+ * driven by the shared `AccountDialogController` in `@oxyhq/core`.
+ */
+
+/**
+ * The account MENU's nav bar carries the Oxy wordmark instead of a title — the
+ * surface IS the Oxy account, so naming it in prose is redundant. A module-level
+ * element: it takes no props, so its identity is stable forever and the header's
+ * identity-compared slot never thrashes.
+ */
+const NAV_LOGO = /*#__PURE__*/(0, _jsxRuntime.jsx)(_LogoText.default, {
+  height: 20
+});
+
+/**
+ * The unified account dialog BODY — the header + `OxyAuthChooser` chooser.
+ *
+ * Presented as the `AccountDialog` surface (route) on the shared Bloom surface
+ * stack; the surface owns the `<Dialog>` chrome (responsive `{ base: 'bottom',
+ * md: 'center' }` placement, `dismissOnBackdrop={false}`, `maxWidth={420}` — set
+ * by `OxyContext` when it presents this surface), so this component renders ONLY
+ * the content. Open it via `useOxy().openAccountDialog(view?)` or the imperative
+ * `openAccountDialog('signin')`; the view-enum (`accounts|signin|qr|add|signup`)
+ * stays internal here, driven by the shared `AccountDialogController` in
+ * `@oxyhq/core`. Closing routes through `useOxy().closeAccountDialog`, which
+ * dismisses the surface and runs its exit animation.
+ */
+const OxyAccountDialogScreen = ({
+  canGoBack
+}) => {
+  const {
+    accountDialogController: controller,
+    closeAccountDialog
+  } = (0, _OxyContext.useOxy)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+
+  // A lightweight, header-only binding to the same controller `OxyAuthChooser`
+  // binds independently — cheap, and the established pattern here (
+  // `useSwitchableAccounts` also binds to this controller on its own).
+  const subscribe = (0, _react.useCallback)(listener => controller ? controller.subscribe(listener) : () => undefined, [controller]);
+  const getSnapshot = (0, _react.useCallback)(() => controller ? controller.getSnapshot() : EMPTY_SNAPSHOT, [controller]);
+  const snapshot = (0, _react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
+  const {
+    view
+  } = snapshot;
+  const showBack = view === 'qr' || view === 'signup' || view === 'add' && snapshot.accounts.length > 0;
+  const goToAccounts = (0, _react.useCallback)(() => {
+    if (!controller) return;
+    const {
+      view: currentView,
+      signIn
+    } = controller.getSnapshot();
+    // Backing out of an active request must withdraw it — otherwise the
+    // authorizeCode stays approvable until expiry (issue #691 phase 5).
+    if ((currentView === 'qr' || currentView === 'add') && (signIn.phase === 'starting' || signIn.phase === 'waiting')) {
+      controller.cancelSignIn();
+    }
+    controller.setView('accounts');
+  }, [controller]);
+  // An ENTRY view (accounts / signin — no in-dialog back of its own) that is
+  // MORPHED into a host surface (ManageAccount → switcher) has a frame beneath it,
+  // so its back CLOSES the dialog and reshapes back to the host — routed through
+  // `closeAccountDialog` so the pop + state teardown stay in one place. Opened
+  // cold (detached) it is the root frame → `canGoBack` is false → no back.
+  const backsToHost = !showBack && (canGoBack?.() ?? false);
+  // The account MENU is branded, not titled: its nav bar carries the Oxy
+  // wordmark and no large title. The current account is named by the HERO block
+  // `OxyAuthChooser` renders under it (email + large avatar + greeting), never
+  // by the bar. Every OTHER view keeps the SHARED Dialog nav header the rest of
+  // the SDK uses — a large in-content title/subtitle that collapses into the bar
+  // on scroll — because their copy is informative.
+  const copy = view === 'accounts' ? null : headerCopy(view, snapshot.accounts.length, t);
+  (0, _useSurfaceHeader.useSurfaceHeader)({
+    titleContent: copy ? undefined : NAV_LOGO,
+    title: copy?.title,
+    subtitle: copy?.subtitle ?? undefined,
+    onBack: showBack ? goToAccounts : backsToHost ? closeAccountDialog : undefined
+  });
+  if (!controller) {
+    return null;
+  }
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+    style: styles.bodyContent,
+    children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyAuthChooser.default, {
+      onComplete: closeAccountDialog
+    })
+  });
+};
+
+// ---------------------------------------------------------------------------
+// Copy + helpers
+// ---------------------------------------------------------------------------
+
+function headerCopy(view, accountCount, t) {
+  switch (view) {
+    // The ACTIVE REQUEST. Its header is deliberately route-AGNOSTIC: Oxy picks
+    // the delivery route (QR here, a push to the user's phone, or opening
+    // Commons on this device — issue #691), so naming one of them in the bar
+    // would contradict the other two. The route-specific status line lives in
+    // the body, derived from `signIn.progress`, and is the only thing that
+    // describes HOW the request is travelling.
+    case 'qr':
+      return {
+        title: t('accountSwitcher.signInWithOxy') || 'Sign in with Oxy',
+        subtitle: null
+      };
+    case 'signup':
+      return {
+        title: t('signup.title') || 'Create your account',
+        subtitle: t('signup.subtitle') || 'One identity for the whole ecosystem.'
+      };
+    default:
+      return accountCount > 0 ? {
+        title: t('signin.addAccountTitle') || 'Add another account',
+        subtitle: t('signin.addAccountSubtitle') || 'Sign in with another account.'
+      } : {
+        title: t('signin.title') || 'Sign in',
+        subtitle: t('signin.subtitle') || 'One identity for the whole ecosystem.'
+      };
+  }
+}
+const EMPTY_SNAPSHOT = {
+  view: 'accounts',
+  accounts: [],
+  activeAccountId: null,
+  loading: false,
+  error: null,
+  switchingAccountId: null,
+  signIn: {
+    phase: 'idle',
+    authorizeCode: null,
+    qrPayload: null,
+    expiresAt: null,
+    error: null,
+    route: null,
+    routeFailed: false,
+    pushSentAt: null,
+    openedAt: null,
+    progress: 'idle'
+  },
+  commonsAvailability: 'unknown'
+};
+
+/**
+ * The screen gutter. In the Dialog's nav-header mode the surface adds NO content
+ * padding of its own — the large title and each screen own theirs — so this must
+ * match Bloom's own large-title gutter (`screen-margin`, 20px) for the body to
+ * line up with the title above it.
+ */
+const SCREEN_MARGIN = 20;
+const styles = _reactNative.StyleSheet.create({
+  bodyContent: {
+    paddingTop: 4,
+    paddingBottom: 4,
+    paddingHorizontal: SCREEN_MARGIN
+  }
+});
+var _default = exports.default = OxyAccountDialogScreen;
+//# sourceMappingURL=OxyAccountDialogScreen.js.map

package/lib/commonjs/ui/components/OxyAccountDialogScreen.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_OxyContext","_useI18n","_useSurfaceHeader","_LogoText","_interopRequireDefault","_OxyAuthChooser","_jsxRuntime","e","__esModule","default","NAV_LOGO","jsx","height","OxyAccountDialogScreen","canGoBack","accountDialogController","controller","closeAccountDialog","useOxy","t","useI18n","subscribe","useCallback","listener","undefined","getSnapshot","EMPTY_SNAPSHOT","snapshot","useSyncExternalStore","view","showBack","accounts","length","goToAccounts","currentView","signIn","phase","cancelSignIn","setView","backsToHost","copy","headerCopy","useSurfaceHeader","titleContent","title","subtitle","onBack","View","style","styles","bodyContent","children","onComplete","accountCount","activeAccountId","loading","error","switchingAccountId","authorizeCode","qrPayload","expiresAt","route","routeFailed","pushSentAt","openedAt","progress","commonsAvailability","SCREEN_MARGIN","StyleSheet","create","paddingTop","paddingBottom","paddingHorizontal","_default","exports"],"sourceRoot":"../../../../src","sources":["ui/components/OxyAccountDialogScreen.tsx"],"mappings":";;;;;;AAwBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,WAAA,GAAAF,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,iBAAA,GAAAJ,OAAA;AAEA,IAAAK,SAAA,GAAAC,sBAAA,CAAAN,OAAA;AACA,IAAAO,eAAA,GAAAD,sBAAA,CAAAN,OAAA;AAA8C,IAAAQ,WAAA,GAAAR,OAAA;AAAA,SAAAM,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAhC9C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAeA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMG,QAAQ,gBAAG,IAAAJ,WAAA,CAAAK,GAAA,EAACR,SAAA,CAAAM,OAAQ;EAACG,MAAM,EAAE;AAAG,CAAE,CAAC;;AAEzC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,sBAAiD,GAAGA,CAAC;EAAEC;AAAU,CAAC,KAAK;EAC3E,MAAM;IAAEC,uBAAuB,EAAEC,UAAU;IAAEC;EAAmB,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAC5E,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;;EAEvB;EACA;EACA;EACA,MAAMC,SAAS,GAAG,IAAAC,kBAAW,EAC1BC,QAAoB,IAAMP,UAAU,GAAGA,UAAU,CAACK,SAAS,CAACE,QAAQ,CAAC,GAAG,MAAMC,SAAU,EACzF,CAACR,UAAU,CACb,CAAC;EACD,MAAMS,WAAW,GAAG,IAAAH,kBAAW,EAC7B,MAAON,UAAU,GAAGA,UAAU,CAACS,WAAW,CAAC,CAAC,GAAGC,cAAe,EAC9D,CAACV,UAAU,CACb,CAAC;EACD,MAAMW,QAAQ,GAAG,IAAAC,2BAAoB,EAACP,SAAS,EAAEI,WAAW,EAAEA,WAAW,CAAC;EAE1E,MAAM;IAAEI;EAAK,CAAC,GAAGF,QAAQ;EACzB,MAAMG,QAAQ,GACZD,IAAI,KAAK,IAAI,IAAIA,IAAI,KAAK,QAAQ,IAAKA,IAAI,KAAK,KAAK,IAAIF,QAAQ,CAACI,QAAQ,CAACC,MAAM,GAAG,CAAE;EACxF,MAAMC,YAAY,GAAG,IAAAX,kBAAW,EAAC,MAAM;IACrC,IAAI,CAACN,UAAU,EAAE;IACjB,MAAM;MAAEa,IAAI,EAAEK,WAAW;MAAEC;IAAO,CAAC,GAAGnB,UAAU,CAACS,WAAW,CAAC,CAAC;IAC9D;IACA;IACA,IACE,CAACS,WAAW,KAAK,IAAI,IAAIA,WAAW,KAAK,KAAK,MAC7CC,MAAM,CAACC,KAAK,KAAK,UAAU,IAAID,MAAM,CAACC,KAAK,KAAK,SAAS,CAAC,EAC3D;MACApB,UAAU,CAACqB,YAAY,CAAC,CAAC;IAC3B;IACArB,UAAU,CAACsB,OAAO,CAAC,UAAU,CAAC;EAChC,CAAC,EAAE,CAACtB,UAAU,CAAC,CAAC;EAChB;EACA;EACA;EACA;EACA;EACA,MAAMuB,WAAW,GAAG,CAACT,QAAQ,KAAKhB,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC;EACzD;EACA;EACA;EACA;EACA;EACA;EACA,MAAM0B,IAAI,GAAGX,IAAI,KAAK,UAAU,GAAG,IAAI,GAAGY,UAAU,CAACZ,IAAI,EAAEF,QAAQ,CAACI,QAAQ,CAACC,MAAM,EAAEb,CAAC,CAAC;EAEvF,IAAAuB,kCAAgB,EAAC;IACfC,YAAY,EAAEH,IAAI,GAAGhB,SAAS,GAAGd,QAAQ;IACzCkC,KAAK,EAAEJ,IAAI,EAAEI,KAAK;IAClBC,QAAQ,EAAEL,IAAI,EAAEK,QAAQ,IAAIrB,SAAS;IACrCsB,MAAM,EAAEhB,QAAQ,GAAGG,YAAY,GAAGM,WAAW,GAAGtB,kBAAkB,GAAGO;EACvE,CAAC,CAAC;EAEF,IAAI,CAACR,UAAU,EAAE;IACf,OAAO,IAAI;EACb;EAEA,oBACE,IAAAV,WAAA,CAAAK,GAAA,EAACZ,YAAA,CAAAgD,IAAI;IAACC,KAAK,EAAEC,MAAM,CAACC,WAAY;IAAAC,QAAA,eAC9B,IAAA7C,WAAA,CAAAK,GAAA,EAACN,eAAA,CAAAI,OAAc;MAAC2C,UAAU,EAAEnC;IAAmB,CAAE;EAAC,CAC9C,CAAC;AAEX,CAAC;;AAED;AACA;AACA;;AAEA,SAASwB,UAAUA,CACjBZ,IAAwD,EACxDwB,YAAoB,EACpBlC,CAAY,EACgC;EAC5C,QAAQU,IAAI;IACV;IACA;IACA;IACA;IACA;IACA;IACA,KAAK,IAAI;MACP,OAAO;QACLe,KAAK,EAAEzB,CAAC,CAAC,+BAA+B,CAAC,IAAI,kBAAkB;QAC/D0B,QAAQ,EAAE;MACZ,CAAC;IACH,KAAK,QAAQ;MACX,OAAO;QACLD,KAAK,EAAEzB,CAAC,CAAC,cAAc,CAAC,IAAI,qBAAqB;QACjD0B,QAAQ,EAAE1B,CAAC,CAAC,iBAAiB,CAAC,IAAI;MACpC,CAAC;IACH;MACE,OAAOkC,YAAY,GAAG,CAAC,GACnB;QACET,KAAK,EAAEzB,CAAC,CAAC,wBAAwB,CAAC,IAAI,qBAAqB;QAC3D0B,QAAQ,EAAE1B,CAAC,CAAC,2BAA2B,CAAC,IAAI;MAC9C,CAAC,GACD;QACEyB,KAAK,EAAEzB,CAAC,CAAC,cAAc,CAAC,IAAI,SAAS;QACrC0B,QAAQ,EAAE1B,CAAC,CAAC,iBAAiB,CAAC,IAAI;MACpC,CAAC;EACT;AACF;AAEA,MAAMO,cAAqC,GAAG;EAC5CG,IAAI,EAAE,UAAU;EAChBE,QAAQ,EAAE,EAAE;EACZuB,eAAe,EAAE,IAAI;EACrBC,OAAO,EAAE,KAAK;EACdC,KAAK,EAAE,IAAI;EACXC,kBAAkB,EAAE,IAAI;EACxBtB,MAAM,EAAE;IACNC,KAAK,EAAE,MAAM;IACbsB,aAAa,EAAE,IAAI;IACnBC,SAAS,EAAE,IAAI;IACfC,SAAS,EAAE,IAAI;IACfJ,KAAK,EAAE,IAAI;IACXK,KAAK,EAAE,IAAI;IACXC,WAAW,EAAE,KAAK;IAClBC,UAAU,EAAE,IAAI;IAChBC,QAAQ,EAAE,IAAI;IACdC,QAAQ,EAAE;EACZ,CAAC;EACDC,mBAAmB,EAAE;AACvB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,aAAa,GAAG,EAAE;AAExB,MAAMlB,MAAM,GAAGmB,uBAAU,CAACC,MAAM,CAAC;EAC/BnB,WAAW,EAAE;IACXoB,UAAU,EAAE,CAAC;IACbC,aAAa,EAAE,CAAC;IAChBC,iBAAiB,EAAEL;EACrB;AACF,CAAC,CAAC;AAAC,IAAAM,QAAA,GAAAC,OAAA,CAAAjE,OAAA,GAEYI,sBAAsB","ignoreList":[]}

package/lib/commonjs/ui/components/OxyAuthChooser.js

@@ -0,0 +1,401 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _bloom = require("@oxyhq/bloom");
+var _theme = require("@oxyhq/bloom/theme");
+var _core = require("@oxyhq/core");
+var _reactQuery = require("@tanstack/react-query");
+var _OxyContext = require("../context/OxyContext.js");
+var _useI18n = require("../hooks/useI18n.js");
+var _accountDialogManager = require("../navigation/accountDialogManager.js");
+var _isWebBrowser = require("../utils/isWebBrowser.js");
+var _commonsStoreLinks = require("../utils/commonsStoreLinks.js");
+var _useServicesQueries = require("../hooks/queries/useServicesQueries.js");
+var _AccountsMenuView = _interopRequireDefault(require("./authChooser/AccountsMenuView.js"));
+var _SignInEntryView = _interopRequireDefault(require("./authChooser/SignInEntryView.js"));
+var _SignInRequestView = _interopRequireDefault(require("./authChooser/SignInRequestView.js"));
+var _SignUpView = _interopRequireDefault(require("./authChooser/SignUpView.js"));
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * OxyAuthChooser — the account switcher + sign-in/sign-up surface, WITHOUT
+ * any dialog chrome.
+ *
+ * A thin React Native binding over the headless `AccountDialogController` in
+ * `@oxyhq/core` (bound via `useSyncExternalStore`) — the same data/state
+ * machine {@link OxyAccountDialogScreen} renders, extracted so it can be mounted in
+ * TWO places: wrapped in Bloom's `<Dialog>` by `OxyAccountDialogScreen` (the normal
+ * in-app surface), and mounted bare by a future auth.oxy.so hub page for the
+ * cross-origin passkey popup (b2) — same chooser, two hosts, two completion
+ * strategies via the `onComplete` prop. Neither host duplicates view logic.
+ *
+ * This file owns WIRING only: the controller binding, the action handlers, and
+ * which view module renders. Every view lives in `./authChooser/`, one
+ * responsibility each:
+ *
+ *  - `accounts` → `AccountsMenuView` — the signed-in Oxy account menu.
+ *  - `add` / `signin` → `SignInEntryView` — ONE primary action, "Continue with
+ *    Oxy" (issue #691, Phase 5). On WEB this view is transient: the flow
+ *    auto-starts the instant the view is reached, because the request surface
+ *    (a QR on an unknown desktop, "Check Commons on your phone" where Oxy could
+ *    deliver) IS the primary route there, never something behind a second tap.
+ *  - `qr` → `SignInRequestView` — the ACTIVE REQUEST: the controller-bound
+ *    wiring over the shared, presentational `OxySignInRequestSurface` (the same
+ *    component the auth.oxy.so IdP mounts from its OAuth-bound request). It maps
+ *    `snapshot.signIn` onto that surface's props; alternatives stay behind
+ *    "Having trouble?" until the chosen route reports `routeFailed`.
+ *  - `signup` → `SignUpView` — account creation, Commons-first.
+ *
+ * Per-account color re-theming uses Bloom's `APP_COLOR_PRESETS` + `BloomColorScope`
+ * (same visual language auth.oxy.so uses). Base theming is `useTheme()` + a
+ * `StyleSheet`, so this renders correctly in EVERY consumer — including apps
+ * that do not use NativeWind (e.g. the accounts app).
+ */
+
+/** Commons' own identity-creation deep link (mirrors the `approve`/`attest`/`card` intents). */
+const COMMONS_CREATE_IDENTITY_URL = 'oxycommons://create-identity';
+/**
+ * "Accounts by Oxy" management app — the canonical home for account settings,
+ * data export, and storage management. The account-menu rows deep-link into it
+ * (`/data`, `/storage`, or its root) the same way `getCommonsAcquisitionUrl`
+ * hands off to Commons; nothing here invents new API endpoints.
+ */
+const ACCOUNTS_APP_URL = 'https://accounts.oxy.so';
+/**
+ * The account switcher + sign-in/sign-up chooser. Mounted by `OxyAccountDialogScreen`
+ * (wrapped in Bloom's `<Dialog>`) today; mountable bare by any future host that
+ * supplies its own `onComplete`.
+ */
+const OxyAuthChooser = ({
+  onComplete,
+  autoStartSignIn: autoStartSignInEnabled = true
+}) => {
+  const {
+    accountDialogController: controller,
+    showBottomSheet,
+    refreshAccounts,
+    signInWithPasskey,
+    registerWithPasskey,
+    oxyServices,
+    logout,
+    openAvatarPicker
+  } = (0, _OxyContext.useOxy)();
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const queryClient = (0, _reactQuery.useQueryClient)();
+
+  // A credential minted for `oxy.so` can only be ASSERTED there (or a loopback
+  // dev host) — a hard WebAuthn RP-ID boundary the browser enforces, not
+  // feature detection. On a first-party Oxy web origin the ceremony runs
+  // directly ('direct'). On any OTHER web origin (b2) it can't run locally, so
+  // the passkey action instead opens a popup at the auth.oxy.so passkey hub —
+  // where the SAME ceremony IS first-party — and relays the resulting session
+  // back via `AccountDialogController.startPasskeyHubSignIn` ('hub'). Native
+  // has neither: Commons owns identity there ('none'). `isOxyRpOrigin()` reads
+  // `location` once and is stable for the component's lifetime.
+  const passkeyMode = (0, _react.useMemo)(() => {
+    if (!(0, _isWebBrowser.isWebBrowser)()) return 'none';
+    return (0, _core.isOxyRpOrigin)() ? 'direct' : 'hub';
+  }, []);
+  const [signInPasskeyPending, setSignInPasskeyPending] = (0, _react.useState)(false);
+  const handleSignInWithPasskey = (0, _react.useCallback)(async () => {
+    if (signInPasskeyPending) return;
+    setSignInPasskeyPending(true);
+    try {
+      await signInWithPasskey();
+      onComplete?.();
+    } catch (error) {
+      // A cancelled/failed ceremony keeps the view open so the user can retry
+      // or fall back to the QR — surface the reason as a toast (owner mandate:
+      // errors never render inline inside the dialog), never swallow.
+      _bloom.toast.error(error instanceof Error && error.message ? error.message : t('accountSwitcher.toasts.passkeySignInFailed'));
+    } finally {
+      setSignInPasskeyPending(false);
+    }
+  }, [signInPasskeyPending, signInWithPasskey, onComplete, t]);
+  const [createPasskeyPending, setCreatePasskeyPending] = (0, _react.useState)(false);
+  const handleCreateWithPasskey = (0, _react.useCallback)(async username => {
+    if (createPasskeyPending) return;
+    setCreatePasskeyPending(true);
+    try {
+      await registerWithPasskey({
+        username
+      });
+      onComplete?.();
+    } catch (error) {
+      _bloom.toast.error(error instanceof Error && error.message ? error.message : t('signup.toasts.passkeyCreateFailed'));
+    } finally {
+      setCreatePasskeyPending(false);
+    }
+  }, [createPasskeyPending, registerWithPasskey, onComplete, t]);
+
+  // Web: auto-start "Sign in with Oxy" when the sign-in entry becomes the shown
+  // view — the request surface is the PRIMARY web route, not something behind a
+  // second tap (the user's ONE action was the sign-in button that opened this).
+  // `signInWithOxy()` tries the shared keychain first (silently, native-only)
+  // then falls to the device flow, whose route the controller picks. Driven from
+  // the EVENTS that reach that view — the initial `subscribe` pass below (an
+  // open-to-sign-in) and the add / back-to-sign-in handlers — never a watcher
+  // effect. Guarded so it never restarts a live flow (phase must be idle) and is
+  // a no-op on native (button-driven). Reads the live snapshot at call time (an
+  // event callback, not render), so it is stable across renders.
+  const autoStartSignIn = (0, _react.useCallback)(() => {
+    if (!autoStartSignInEnabled || !controller || !(0, _isWebBrowser.isWebBrowser)()) return;
+    const {
+      view: currentView,
+      signIn
+    } = controller.getSnapshot();
+    if (currentView !== 'signin' && currentView !== 'add' || signIn.phase !== 'idle') return;
+    void controller.signInWithOxy();
+  }, [autoStartSignInEnabled, controller]);
+
+  // Bind the headless controller. `getSnapshot` returns a stable reference
+  // between changes, so it is `useSyncExternalStore`-safe. Guard the no-provider
+  // loading state (`controller` is `null`) with an inert store.
+  //
+  // The subscribe callback ALSO carries two owner-mandated reactions to the
+  // controller. These run in the subscribe / notification callbacks — EVENT
+  // callbacks, not render/effect — so neither is a React effect hook:
+  //  1. Sign-in device-flow failures (poll / socket / popup-cancel land on
+  //     `signIn` asynchronously) are toasted at the notification site, deduped
+  //     per subscription — NEVER an inline banner in the request view (owner
+  //     mandate, same contract as account-switch).
+  //  2. On subscribe (mount / re-subscribe — a passive effect, the SAME timing
+  //     the removed effects had) the web sign-in flow auto-starts if the opening
+  //     view is the sign-in entry.
+  const subscribe = (0, _react.useCallback)(listener => {
+    if (!controller) return () => undefined;
+    let lastToastedSignInError = null;
+    const maybeToastSignInError = () => {
+      const {
+        signIn
+      } = controller.getSnapshot();
+      if (signIn.phase === 'error' && signIn.error && signIn.error !== lastToastedSignInError) {
+        lastToastedSignInError = signIn.error;
+        _bloom.toast.error(signIn.error);
+      } else if (signIn.phase !== 'error') {
+        lastToastedSignInError = null;
+      }
+    };
+    maybeToastSignInError();
+    autoStartSignIn();
+    return controller.subscribe(() => {
+      maybeToastSignInError();
+      listener();
+    });
+  }, [controller, autoStartSignIn]);
+  const getSnapshot = (0, _react.useCallback)(() => controller ? controller.getSnapshot() : EMPTY_SNAPSHOT, [controller]);
+  const snapshot = (0, _react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
+  const {
+    view
+  } = snapshot;
+  const [switching, setSwitching] = (0, _react.useState)(false);
+  const handleSwitch = (0, _react.useCallback)(async accountId => {
+    if (!controller || switching) return;
+    if (accountId === snapshot.activeAccountId) {
+      onComplete?.();
+      return;
+    }
+    setSwitching(true);
+    try {
+      await controller.switchTo(accountId);
+      // `switchTo` never throws — it records a failure on the controller's
+      // snapshot. Read it back at the point the switch settles and surface it
+      // as a toast (event-driven, at the failure site — NOT an inline banner
+      // and NOT a snapshot-reaction). On success reload the app's account
+      // graph and drop cached account-scoped data so the new active identity
+      // re-fetches — the same side effects the context's own
+      // `switchToAccount` performs.
+      if (controller.getSnapshot().error) {
+        _bloom.toast.error(t('accountSwitcher.toasts.switchFailed'));
+        return;
+      }
+      void refreshAccounts();
+      queryClient.invalidateQueries();
+      onComplete?.();
+    } finally {
+      setSwitching(false);
+    }
+  }, [controller, switching, snapshot.activeAccountId, onComplete, refreshAccounts, queryClient, t]);
+  const handleManage = (0, _react.useCallback)(() => {
+    onComplete?.();
+    const hooks = (0, _accountDialogManager.getAccountDialogConsumerHooks)();
+    if (hooks?.onNavigateManage) {
+      hooks.onNavigateManage();
+      return;
+    }
+    showBottomSheet?.('ManageAccount');
+  }, [onComplete, showBottomSheet]);
+  const handleAdd = (0, _react.useCallback)(() => {
+    const hooks = (0, _accountDialogManager.getAccountDialogConsumerHooks)();
+    if (hooks?.onAddAccount) {
+      hooks.onAddAccount();
+      return;
+    }
+    // No consumer override: enter the "add account" view and auto-start the web
+    // sign-in flow, from this handler (the event that reaches the view).
+    controller?.add();
+    autoStartSignIn();
+  }, [controller, autoStartSignIn]);
+  const handlers = (0, _react.useMemo)(() => ({
+    onSwitch: accountId => {
+      void handleSwitch(accountId);
+    },
+    onAdd: handleAdd,
+    onManage: handleManage,
+    // Morphs the AccountDialog surface into `ChangeAvatar` (and back), then
+    // uploads / clears the picked photo — the single shared avatar write path.
+    onEditAvatar: () => openAvatarPicker()
+  }), [handleSwitch, handleAdd, handleManage, openAvatarPicker]);
+
+  // Everything that is NOT the surface's one primary action. Wired once here;
+  // each view picks the subset that is a genuine alternative to ITS primary
+  // surface and hides them behind "Having trouble?" (issue #691).
+  const alternatives = (0, _react.useMemo)(() => ({
+    passkeyAvailable: passkeyMode !== 'none',
+    // The hub-popup flow reports progress through `snapshot.signIn` (already
+    // rendered by the request view) — only the DIRECT ceremony uses this
+    // component-local pending flag. A ceremony FAILURE is toasted by
+    // `handleSignInWithPasskey`, never rendered inline.
+    passkeyPending: passkeyMode === 'direct' ? signInPasskeyPending : false,
+    onSignInWithPasskey: () => {
+      if (passkeyMode === 'direct') {
+        void handleSignInWithPasskey();
+        return;
+      }
+      void controller?.startPasskeyHubSignIn();
+    },
+    onShowQr: () => void controller?.showQr(),
+    onGetCommons: () => void _reactNative.Linking.openURL((0, _commonsStoreLinks.getCommonsAcquisitionUrl)(_reactNative.Platform.OS)),
+    onCreateAccount: () => controller?.startSignup()
+  }), [passkeyMode, signInPasskeyPending, handleSignInWithPasskey, controller]);
+
+  // Real storage usage for the account menu's "Oxy storage" block. Disabled
+  // (no fetch) until a private-API session exists, so it is inert on the
+  // sign-in/request/sign-up views; when present the block shows live used/total.
+  const storageQuery = (0, _useServicesQueries.useAccountStorageUsage)();
+  const storage = (0, _react.useMemo)(() => storageQuery.data ? {
+    usedBytes: storageQuery.data.totalUsedBytes,
+    limitBytes: storageQuery.data.totalLimitBytes
+  } : null, [storageQuery.data]);
+
+  // The account-menu rows below the switcher: storage + data + settings + help
+  // deep-link into the "Accounts by Oxy" app or open the matching in-app sheet
+  // (Help, Legal); sign-out uses the SDK's own per-account sign-out. No new
+  // endpoints — the same handoff pattern `handleManage`/`getCommonsAcquisitionUrl`
+  // already use.
+  const accountMenu = (0, _react.useMemo)(() => {
+    const openUrl = url => {
+      void _reactNative.Linking.openURL(url);
+    };
+    const openSheet = config => {
+      onComplete?.();
+      showBottomSheet?.(config);
+    };
+    return {
+      onOpenSettings: () => openUrl(ACCOUNTS_APP_URL),
+      onOpenData: () => openUrl(`${ACCOUNTS_APP_URL}/data`),
+      onManageStorage: () => openUrl(`${ACCOUNTS_APP_URL}/storage`),
+      onUpgradeStorage: () => openUrl(`${ACCOUNTS_APP_URL}/payments`),
+      onHelp: () => openSheet('HelpSupport'),
+      onPrivacy: () => openSheet({
+        screen: 'LegalDocuments',
+        props: {
+          initialStep: 1
+        }
+      }),
+      onTerms: () => openSheet({
+        screen: 'LegalDocuments',
+        props: {
+          initialStep: 2
+        }
+      }),
+      onSignOut: () => {
+        void logout();
+        onComplete?.();
+      }
+    };
+  }, [onComplete, showBottomSheet, logout]);
+  if (!controller) {
+    return null;
+  }
+  if (view === 'accounts') {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_AccountsMenuView.default, {
+      snapshot: snapshot,
+      theme: theme,
+      t: t,
+      handlers: handlers,
+      storage: storage,
+      menu: accountMenu
+    });
+  }
+  if (view === 'qr') {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_SignInRequestView.default, {
+      snapshot: snapshot,
+      t: t,
+      onRetry: () => void controller.showQr(),
+      alternatives: alternatives
+    });
+  }
+  if (view === 'signup') {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_SignUpView.default, {
+      snapshot: snapshot,
+      theme: theme,
+      t: t,
+      oxyServices: oxyServices,
+      passkeyMode: passkeyMode,
+      onCreateWithPasskey: username => void handleCreateWithPasskey(username),
+      createPending: createPasskeyPending,
+      onOpenHub: () => void controller.startPasskeyHubSignIn(),
+      onCreateIdentityInCommons: () => void _reactNative.Linking.openURL(COMMONS_CREATE_IDENTITY_URL),
+      onGetCommons: alternatives.onGetCommons,
+      onBackToSignIn: () => {
+        controller.setView('signin');
+        autoStartSignIn();
+      }
+    });
+  }
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_SignInEntryView.default, {
+    snapshot: snapshot,
+    theme: theme,
+    t: t,
+    handlers: handlers,
+    onContinueWithOxy: () => void controller.signInWithOxy(),
+    alternatives: alternatives
+  });
+};
+
+// ---------------------------------------------------------------------------
+// Empty snapshot (no-provider loading state)
+// ---------------------------------------------------------------------------
+
+const EMPTY_SNAPSHOT = {
+  view: 'accounts',
+  accounts: [],
+  activeAccountId: null,
+  loading: false,
+  error: null,
+  switchingAccountId: null,
+  signIn: {
+    phase: 'idle',
+    authorizeCode: null,
+    qrPayload: null,
+    expiresAt: null,
+    error: null,
+    route: null,
+    routeFailed: false,
+    pushSentAt: null,
+    openedAt: null,
+    progress: 'idle'
+  },
+  commonsAvailability: 'unknown'
+};
+var _default = exports.default = OxyAuthChooser;
+//# sourceMappingURL=OxyAuthChooser.js.map

package/lib/commonjs/ui/components/OxyAuthChooser.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_bloom","_theme","_core","_reactQuery","_OxyContext","_useI18n","_accountDialogManager","_isWebBrowser","_commonsStoreLinks","_useServicesQueries","_AccountsMenuView","_interopRequireDefault","_SignInEntryView","_SignInRequestView","_SignUpView","_jsxRuntime","e","__esModule","default","COMMONS_CREATE_IDENTITY_URL","ACCOUNTS_APP_URL","OxyAuthChooser","onComplete","autoStartSignIn","autoStartSignInEnabled","accountDialogController","controller","showBottomSheet","refreshAccounts","signInWithPasskey","registerWithPasskey","oxyServices","logout","openAvatarPicker","useOxy","theme","useTheme","t","useI18n","queryClient","useQueryClient","passkeyMode","useMemo","isWebBrowser","isOxyRpOrigin","signInPasskeyPending","setSignInPasskeyPending","useState","handleSignInWithPasskey","useCallback","error","toast","Error","message","createPasskeyPending","setCreatePasskeyPending","handleCreateWithPasskey","username","view","currentView","signIn","getSnapshot","phase","signInWithOxy","subscribe","listener","undefined","lastToastedSignInError","maybeToastSignInError","EMPTY_SNAPSHOT","snapshot","useSyncExternalStore","switching","setSwitching","handleSwitch","accountId","activeAccountId","switchTo","invalidateQueries","handleManage","hooks","getAccountDialogConsumerHooks","onNavigateManage","handleAdd","onAddAccount","add","handlers","onSwitch","onAdd","onManage","onEditAvatar","alternatives","passkeyAvailable","passkeyPending","onSignInWithPasskey","startPasskeyHubSignIn","onShowQr","showQr","onGetCommons","Linking","openURL","getCommonsAcquisitionUrl","Platform","OS","onCreateAccount","startSignup","storageQuery","useAccountStorageUsage","storage","data","usedBytes","totalUsedBytes","limitBytes","totalLimitBytes","accountMenu","openUrl","url","openSheet","config","onOpenSettings","onOpenData","onManageStorage","onUpgradeStorage","onHelp","onPrivacy","screen","props","initialStep","onTerms","onSignOut","jsx","menu","onRetry","onCreateWithPasskey","createPending","onOpenHub","onCreateIdentityInCommons","onBackToSignIn","setView","onContinueWithOxy","accounts","loading","switchingAccountId","authorizeCode","qrPayload","expiresAt","route","routeFailed","pushSentAt","openedAt","progress","commonsAvailability","_default","exports"],"sourceRoot":"../../../../src","sources":["ui/components/OxyAuthChooser.tsx"],"mappings":";;;;;;AAoCA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAEA,IAAAI,KAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AACA,IAAAM,WAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AACA,IAAAQ,qBAAA,GAAAR,OAAA;AACA,IAAAS,aAAA,GAAAT,OAAA;AACA,IAAAU,kBAAA,GAAAV,OAAA;AACA,IAAAW,mBAAA,GAAAX,OAAA;AACA,IAAAY,iBAAA,GAAAC,sBAAA,CAAAb,OAAA;AACA,IAAAc,gBAAA,GAAAD,sBAAA,CAAAb,OAAA;AACA,IAAAe,kBAAA,GAAAF,sBAAA,CAAAb,OAAA;AACA,IAAAgB,WAAA,GAAAH,sBAAA,CAAAb,OAAA;AAAkD,IAAAiB,WAAA,GAAAjB,OAAA;AAAA,SAAAa,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AApDlD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AA4BA;AACA,MAAMG,2BAA2B,GAAG,8BAA8B;AAClE;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,gBAAgB,GAAG,yBAAyB;AAclD;AACA;AACA;AACA;AACA;AACA,MAAMC,cAA6C,GAAGA,CAAC;EACrDC,UAAU;EACVC,eAAe,EAAEC,sBAAsB,GAAG;AAC5C,CAAC,KAAK;EACJ,MAAM;IACJC,uBAAuB,EAAEC,UAAU;IACnCC,eAAe;IACfC,eAAe;IACfC,iBAAiB;IACjBC,mBAAmB;IACnBC,WAAW;IACXC,MAAM;IACNC;EACF,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EACZ,MAAMC,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAMC,WAAW,GAAG,IAAAC,0BAAc,EAAC,CAAC;;EAEpC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMC,WAAW,GAAG,IAAAC,cAAO,EAAc,MAAM;IAC7C,IAAI,CAAC,IAAAC,0BAAY,EAAC,CAAC,EAAE,OAAO,MAAM;IAClC,OAAO,IAAAC,mBAAa,EAAC,CAAC,GAAG,QAAQ,GAAG,KAAK;EAC3C,CAAC,EAAE,EAAE,CAAC;EAEN,MAAM,CAACC,oBAAoB,EAAEC,uBAAuB,CAAC,GAAG,IAAAC,eAAQ,EAAC,KAAK,CAAC;EACvE,MAAMC,uBAAuB,GAAG,IAAAC,kBAAW,EAAC,YAAY;IACtD,IAAIJ,oBAAoB,EAAE;IAC1BC,uBAAuB,CAAC,IAAI,CAAC;IAC7B,IAAI;MACF,MAAMjB,iBAAiB,CAAC,CAAC;MACzBP,UAAU,GAAG,CAAC;IAChB,CAAC,CAAC,OAAO4B,KAAK,EAAE;MACd;MACA;MACA;MACAC,YAAK,CAACD,KAAK,CACTA,KAAK,YAAYE,KAAK,IAAIF,KAAK,CAACG,OAAO,GACnCH,KAAK,CAACG,OAAO,GACbhB,CAAC,CAAC,4CAA4C,CACpD,CAAC;IACH,CAAC,SAAS;MACRS,uBAAuB,CAAC,KAAK,CAAC;IAChC;EACF,CAAC,EAAE,CAACD,oBAAoB,EAAEhB,iBAAiB,EAAEP,UAAU,EAAEe,CAAC,CAAC,CAAC;EAE5D,MAAM,CAACiB,oBAAoB,EAAEC,uBAAuB,CAAC,GAAG,IAAAR,eAAQ,EAAC,KAAK,CAAC;EACvE,MAAMS,uBAAuB,GAAG,IAAAP,kBAAW,EACzC,MAAOQ,QAAgB,IAAK;IAC1B,IAAIH,oBAAoB,EAAE;IAC1BC,uBAAuB,CAAC,IAAI,CAAC;IAC7B,IAAI;MACF,MAAMzB,mBAAmB,CAAC;QAAE2B;MAAS,CAAC,CAAC;MACvCnC,UAAU,GAAG,CAAC;IAChB,CAAC,CAAC,OAAO4B,KAAK,EAAE;MACdC,YAAK,CAACD,KAAK,CACTA,KAAK,YAAYE,KAAK,IAAIF,KAAK,CAACG,OAAO,GACnCH,KAAK,CAACG,OAAO,GACbhB,CAAC,CAAC,mCAAmC,CAC3C,CAAC;IACH,CAAC,SAAS;MACRkB,uBAAuB,CAAC,KAAK,CAAC;IAChC;EACF,CAAC,EACD,CAACD,oBAAoB,EAAExB,mBAAmB,EAAER,UAAU,EAAEe,CAAC,CAC3D,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMd,eAAe,GAAG,IAAA0B,kBAAW,EAAC,MAAM;IACxC,IAAI,CAACzB,sBAAsB,IAAI,CAACE,UAAU,IAAI,CAAC,IAAAiB,0BAAY,EAAC,CAAC,EAAE;IAC/D,MAAM;MAAEe,IAAI,EAAEC,WAAW;MAAEC;IAAO,CAAC,GAAGlC,UAAU,CAACmC,WAAW,CAAC,CAAC;IAC9D,IAAKF,WAAW,KAAK,QAAQ,IAAIA,WAAW,KAAK,KAAK,IAAKC,MAAM,CAACE,KAAK,KAAK,MAAM,EAAE;IACpF,KAAKpC,UAAU,CAACqC,aAAa,CAAC,CAAC;EACjC,CAAC,EAAE,CAACvC,sBAAsB,EAAEE,UAAU,CAAC,CAAC;;EAExC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMsC,SAAS,GAAG,IAAAf,kBAAW,EAC1BgB,QAAoB,IAAK;IACxB,IAAI,CAACvC,UAAU,EAAE,OAAO,MAAMwC,SAAS;IACvC,IAAIC,sBAAqC,GAAG,IAAI;IAChD,MAAMC,qBAAqB,GAAGA,CAAA,KAAM;MAClC,MAAM;QAAER;MAAO,CAAC,GAAGlC,UAAU,CAACmC,WAAW,CAAC,CAAC;MAC3C,IAAID,MAAM,CAACE,KAAK,KAAK,OAAO,IAAIF,MAAM,CAACV,KAAK,IAAIU,MAAM,CAACV,KAAK,KAAKiB,sBAAsB,EAAE;QACvFA,sBAAsB,GAAGP,MAAM,CAACV,KAAK;QACrCC,YAAK,CAACD,KAAK,CAACU,MAAM,CAACV,KAAK,CAAC;MAC3B,CAAC,MAAM,IAAIU,MAAM,CAACE,KAAK,KAAK,OAAO,EAAE;QACnCK,sBAAsB,GAAG,IAAI;MAC/B;IACF,CAAC;IACDC,qBAAqB,CAAC,CAAC;IACvB7C,eAAe,CAAC,CAAC;IACjB,OAAOG,UAAU,CAACsC,SAAS,CAAC,MAAM;MAChCI,qBAAqB,CAAC,CAAC;MACvBH,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC;EACJ,CAAC,EACD,CAACvC,UAAU,EAAEH,eAAe,CAC9B,CAAC;EACD,MAAMsC,WAAW,GAAG,IAAAZ,kBAAW,EAC7B,MAAOvB,UAAU,GAAGA,UAAU,CAACmC,WAAW,CAAC,CAAC,GAAGQ,cAAe,EAC9D,CAAC3C,UAAU,CACb,CAAC;EACD,MAAM4C,QAAQ,GAAG,IAAAC,2BAAoB,EAACP,SAAS,EAAEH,WAAW,EAAEA,WAAW,CAAC;EAC1E,MAAM;IAAEH;EAAK,CAAC,GAAGY,QAAQ;EAEzB,MAAM,CAACE,SAAS,EAAEC,YAAY,CAAC,GAAG,IAAA1B,eAAQ,EAAC,KAAK,CAAC;EAEjD,MAAM2B,YAAY,GAAG,IAAAzB,kBAAW,EAC9B,MAAO0B,SAAiB,IAAK;IAC3B,IAAI,CAACjD,UAAU,IAAI8C,SAAS,EAAE;IAC9B,IAAIG,SAAS,KAAKL,QAAQ,CAACM,eAAe,EAAE;MAC1CtD,UAAU,GAAG,CAAC;MACd;IACF;IACAmD,YAAY,CAAC,IAAI,CAAC;IAClB,IAAI;MACF,MAAM/C,UAAU,CAACmD,QAAQ,CAACF,SAAS,CAAC;MACpC;MACA;MACA;MACA;MACA;MACA;MACA;MACA,IAAIjD,UAAU,CAACmC,WAAW,CAAC,CAAC,CAACX,KAAK,EAAE;QAClCC,YAAK,CAACD,KAAK,CAACb,CAAC,CAAC,qCAAqC,CAAC,CAAC;QACrD;MACF;MACA,KAAKT,eAAe,CAAC,CAAC;MACtBW,WAAW,CAACuC,iBAAiB,CAAC,CAAC;MAC/BxD,UAAU,GAAG,CAAC;IAChB,CAAC,SAAS;MACRmD,YAAY,CAAC,KAAK,CAAC;IACrB;EACF,CAAC,EACD,CAAC/C,UAAU,EAAE8C,SAAS,EAAEF,QAAQ,CAACM,eAAe,EAAEtD,UAAU,EAAEM,eAAe,EAAEW,WAAW,EAAEF,CAAC,CAC/F,CAAC;EAED,MAAM0C,YAAY,GAAG,IAAA9B,kBAAW,EAAC,MAAM;IACrC3B,UAAU,GAAG,CAAC;IACd,MAAM0D,KAAK,GAAG,IAAAC,mDAA6B,EAAC,CAAC;IAC7C,IAAID,KAAK,EAAEE,gBAAgB,EAAE;MAC3BF,KAAK,CAACE,gBAAgB,CAAC,CAAC;MACxB;IACF;IACAvD,eAAe,GAAG,eAAe,CAAC;EACpC,CAAC,EAAE,CAACL,UAAU,EAAEK,eAAe,CAAC,CAAC;EAEjC,MAAMwD,SAAS,GAAG,IAAAlC,kBAAW,EAAC,MAAM;IAClC,MAAM+B,KAAK,GAAG,IAAAC,mDAA6B,EAAC,CAAC;IAC7C,IAAID,KAAK,EAAEI,YAAY,EAAE;MACvBJ,KAAK,CAACI,YAAY,CAAC,CAAC;MACpB;IACF;IACA;IACA;IACA1D,UAAU,EAAE2D,GAAG,CAAC,CAAC;IACjB9D,eAAe,CAAC,CAAC;EACnB,CAAC,EAAE,CAACG,UAAU,EAAEH,eAAe,CAAC,CAAC;EAEjC,MAAM+D,QAAQ,GAAG,IAAA5C,cAAO,EACtB,OAAO;IACL6C,QAAQ,EAAGZ,SAAS,IAAK;MACvB,KAAKD,YAAY,CAACC,SAAS,CAAC;IAC9B,CAAC;IACDa,KAAK,EAAEL,SAAS;IAChBM,QAAQ,EAAEV,YAAY;IACtB;IACA;IACAW,YAAY,EAAEA,CAAA,KAAMzD,gBAAgB,CAAC;EACvC,CAAC,CAAC,EACF,CAACyC,YAAY,EAAES,SAAS,EAAEJ,YAAY,EAAE9C,gBAAgB,CAC1D,CAAC;;EAED;EACA;EACA;EACA,MAAM0D,YAAY,GAAG,IAAAjD,cAAO,EAC1B,OAAO;IACLkD,gBAAgB,EAAEnD,WAAW,KAAK,MAAM;IACxC;IACA;IACA;IACA;IACAoD,cAAc,EAAEpD,WAAW,KAAK,QAAQ,GAAGI,oBAAoB,GAAG,KAAK;IACvEiD,mBAAmB,EAAEA,CAAA,KAAM;MACzB,IAAIrD,WAAW,KAAK,QAAQ,EAAE;QAC5B,KAAKO,uBAAuB,CAAC,CAAC;QAC9B;MACF;MACA,KAAKtB,UAAU,EAAEqE,qBAAqB,CAAC,CAAC;IAC1C,CAAC;IACDC,QAAQ,EAAEA,CAAA,KAAM,KAAKtE,UAAU,EAAEuE,MAAM,CAAC,CAAC;IACzCC,YAAY,EAAEA,CAAA,KAAM,KAAKC,oBAAO,CAACC,OAAO,CAAC,IAAAC,2CAAwB,EAACC,qBAAQ,CAACC,EAAE,CAAC,CAAC;IAC/EC,eAAe,EAAEA,CAAA,KAAM9E,UAAU,EAAE+E,WAAW,CAAC;EACjD,CAAC,CAAC,EACF,CAAChE,WAAW,EAAEI,oBAAoB,EAAEG,uBAAuB,EAAEtB,UAAU,CACzE,CAAC;;EAED;EACA;EACA;EACA,MAAMgF,YAAY,GAAG,IAAAC,0CAAsB,EAAC,CAAC;EAC7C,MAAMC,OAAO,GAAG,IAAAlE,cAAO,EACrB,MACEgE,YAAY,CAACG,IAAI,GACb;IACEC,SAAS,EAAEJ,YAAY,CAACG,IAAI,CAACE,cAAc;IAC3CC,UAAU,EAAEN,YAAY,CAACG,IAAI,CAACI;EAChC,CAAC,GACD,IAAI,EACV,CAACP,YAAY,CAACG,IAAI,CACpB,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAMK,WAAW,GAAG,IAAAxE,cAAO,EAAsB,MAAM;IACrD,MAAMyE,OAAO,GAAIC,GAAW,IAAK;MAC/B,KAAKjB,oBAAO,CAACC,OAAO,CAACgB,GAAG,CAAC;IAC3B,CAAC;IACD,MAAMC,SAAS,GAAIC,MAA0D,IAAK;MAChFhG,UAAU,GAAG,CAAC;MACdK,eAAe,GAAG2F,MAAM,CAAC;IAC3B,CAAC;IACD,OAAO;MACLC,cAAc,EAAEA,CAAA,KAAMJ,OAAO,CAAC/F,gBAAgB,CAAC;MAC/CoG,UAAU,EAAEA,CAAA,KAAML,OAAO,CAAC,GAAG/F,gBAAgB,OAAO,CAAC;MACrDqG,eAAe,EAAEA,CAAA,KAAMN,OAAO,CAAC,GAAG/F,gBAAgB,UAAU,CAAC;MAC7DsG,gBAAgB,EAAEA,CAAA,KAAMP,OAAO,CAAC,GAAG/F,gBAAgB,WAAW,CAAC;MAC/DuG,MAAM,EAAEA,CAAA,KAAMN,SAAS,CAAC,aAAa,CAAC;MACtCO,SAAS,EAAEA,CAAA,KAAMP,SAAS,CAAC;QAAEQ,MAAM,EAAE,gBAAgB;QAAEC,KAAK,EAAE;UAAEC,WAAW,EAAE;QAAE;MAAE,CAAC,CAAC;MACnFC,OAAO,EAAEA,CAAA,KAAMX,SAAS,CAAC;QAAEQ,MAAM,EAAE,gBAAgB;QAAEC,KAAK,EAAE;UAAEC,WAAW,EAAE;QAAE;MAAE,CAAC,CAAC;MACjFE,SAAS,EAAEA,CAAA,KAAM;QACf,KAAKjG,MAAM,CAAC,CAAC;QACbV,UAAU,GAAG,CAAC;MAChB;IACF,CAAC;EACH,CAAC,EAAE,CAACA,UAAU,EAAEK,eAAe,EAAEK,MAAM,CAAC,CAAC;EAEzC,IAAI,CAACN,UAAU,EAAE;IACf,OAAO,IAAI;EACb;EAEA,IAAIgC,IAAI,KAAK,UAAU,EAAE;IACvB,oBACE,IAAA3C,WAAA,CAAAmH,GAAA,EAACxH,iBAAA,CAAAQ,OAAgB;MACfoD,QAAQ,EAAEA,QAAS;MACnBnC,KAAK,EAAEA,KAAM;MACbE,CAAC,EAAEA,CAAE;MACLiD,QAAQ,EAAEA,QAAS;MACnBsB,OAAO,EAAEA,OAAQ;MACjBuB,IAAI,EAAEjB;IAAY,CACnB,CAAC;EAEN;EAEA,IAAIxD,IAAI,KAAK,IAAI,EAAE;IACjB,oBACE,IAAA3C,WAAA,CAAAmH,GAAA,EAACrH,kBAAA,CAAAK,OAAiB;MAChBoD,QAAQ,EAAEA,QAAS;MACnBjC,CAAC,EAAEA,CAAE;MACL+F,OAAO,EAAEA,CAAA,KAAM,KAAK1G,UAAU,CAACuE,MAAM,CAAC,CAAE;MACxCN,YAAY,EAAEA;IAAa,CAC5B,CAAC;EAEN;EAEA,IAAIjC,IAAI,KAAK,QAAQ,EAAE;IACrB,oBACE,IAAA3C,WAAA,CAAAmH,GAAA,EAACpH,WAAA,CAAAI,OAAU;MACToD,QAAQ,EAAEA,QAAS;MACnBnC,KAAK,EAAEA,KAAM;MACbE,CAAC,EAAEA,CAAE;MACLN,WAAW,EAAEA,WAAY;MACzBU,WAAW,EAAEA,WAAY;MACzB4F,mBAAmB,EAAG5E,QAAQ,IAAK,KAAKD,uBAAuB,CAACC,QAAQ,CAAE;MAC1E6E,aAAa,EAAEhF,oBAAqB;MACpCiF,SAAS,EAAEA,CAAA,KAAM,KAAK7G,UAAU,CAACqE,qBAAqB,CAAC,CAAE;MACzDyC,yBAAyB,EAAEA,CAAA,KAAM,KAAKrC,oBAAO,CAACC,OAAO,CAACjF,2BAA2B,CAAE;MACnF+E,YAAY,EAAEP,YAAY,CAACO,YAAa;MACxCuC,cAAc,EAAEA,CAAA,KAAM;QACpB/G,UAAU,CAACgH,OAAO,CAAC,QAAQ,CAAC;QAC5BnH,eAAe,CAAC,CAAC;MACnB;IAAE,CACH,CAAC;EAEN;EAEA,oBACE,IAAAR,WAAA,CAAAmH,GAAA,EAACtH,gBAAA,CAAAM,OAAe;IACdoD,QAAQ,EAAEA,QAAS;IACnBnC,KAAK,EAAEA,KAAM;IACbE,CAAC,EAAEA,CAAE;IACLiD,QAAQ,EAAEA,QAAS;IACnBqD,iBAAiB,EAAEA,CAAA,KAAM,KAAKjH,UAAU,CAACqC,aAAa,CAAC,CAAE;IACzD4B,YAAY,EAAEA;EAAa,CAC5B,CAAC;AAEN,CAAC;;AAED;AACA;AACA;;AAEA,MAAMtB,cAAqC,GAAG;EAC5CX,IAAI,EAAE,UAAU;EAChBkF,QAAQ,EAAE,EAAE;EACZhE,eAAe,EAAE,IAAI;EACrBiE,OAAO,EAAE,KAAK;EACd3F,KAAK,EAAE,IAAI;EACX4F,kBAAkB,EAAE,IAAI;EACxBlF,MAAM,EAAE;IACNE,KAAK,EAAE,MAAM;IACbiF,aAAa,EAAE,IAAI;IACnBC,SAAS,EAAE,IAAI;IACfC,SAAS,EAAE,IAAI;IACf/F,KAAK,EAAE,IAAI;IACXgG,KAAK,EAAE,IAAI;IACXC,WAAW,EAAE,KAAK;IAClBC,UAAU,EAAE,IAAI;IAChBC,QAAQ,EAAE,IAAI;IACdC,QAAQ,EAAE;EACZ,CAAC;EACDC,mBAAmB,EAAE;AACvB,CAAC;AAAC,IAAAC,QAAA,GAAAC,OAAA,CAAAvI,OAAA,GAEaG,cAAc","ignoreList":[]}