@oxyhq/services 23.0.2 → 23.1.0

package/lib/module/ui/components/OxySignInButton.js

@@ -0,0 +1,284 @@
+"use strict";
+
+import { useCallback, useState, useEffect, useRef } from 'react';
+import { Platform } from 'react-native';
+import { logger, generatePkcePair, generateOAuthState, buildOAuthAuthorizeUrl } from '@oxyhq/core';
+import { useAuthStore } from "../stores/authStore.js";
+import { useShallow } from 'zustand/react/shallow';
+import { useTheme } from '@oxyhq/bloom/theme';
+import { Button } from '@oxyhq/bloom/button';
+import { useOxy } from "../context/OxyContext.js";
+import { useI18n } from "../hooks/useI18n.js";
+import { LogoIcon } from "./logo/LogoIcon.js";
+import { subscribeToAccountDialog } from "../navigation/accountDialogManager.js";
+import { openAuthorizeUrlNative } from "./oauthNavigation.js";
+import { closeOAuthPopup, openOAuthPopup } from "../oauth/oauthPopup.js";
+
+/**
+ * The OAuth handshake surfaced to a NATIVE third-party RP via
+ * {@link OxySignInButtonProps.onOAuthResult} so it can finish the code exchange
+ * (`POST /auth/oauth/token`). Web sign-in is handled entirely by the SDK's web
+ * transport (`useOxy().startWebOAuthSignIn`) and never uses this callback.
+ */
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * A pre-styled button component for signing in with Oxy identity
+ *
+ * This component opens the Oxy Auth flow which allows users to authenticate
+ * using their Oxy Accounts identity (via QR code or deep link).
+ *
+ * @example
+ * ```tsx
+ * // Basic usage
+ * <OxySignInButton />
+ *
+ * // Custom styling
+ * <OxySignInButton
+ *   variant="contained"
+ *   style={{ marginTop: 20 }}
+ *   text="Login with Oxy"
+ * />
+ *
+ * // Custom handler
+ * <OxySignInButton onPress={() => {
+ *   // Custom authentication flow
+ * }} />
+ * ```
+ */
+export const OxySignInButton = ({
+  variant = 'default',
+  onPress,
+  style,
+  textStyle,
+  text,
+  disabled = false,
+  showWhenAuthenticated = false,
+  oauthRedirectUri,
+  onOAuthResult
+}) => {
+  const theme = useTheme();
+  const {
+    t
+  } = useI18n();
+  const {
+    openAccountDialog,
+    oxyServices,
+    clientId,
+    webAuthMode,
+    startWebOAuthSignIn
+  } = useOxy();
+  const {
+    isAuthenticated,
+    isLoading
+  } = useAuthStore(useShallow(state => ({
+    isAuthenticated: state.isAuthenticated,
+    isLoading: state.isLoading
+  })));
+  // Tracks whether the unified account dialog is open so we can show
+  // "Signing in..." while it is. The manager reports visibility on every
+  // change regardless of platform or what opened/closed it.
+  const [isModalOpen, setIsModalOpen] = useState(false);
+  useEffect(() => subscribeToAccountDialog(setIsModalOpen), []);
+
+  // The application's public identity is resolved lazily on first press and its
+  // promise cached, so rapid taps share one in-flight resolve. The cache is
+  // KEYED on the identity inputs (clientId + the oxyServices instance): if
+  // either changes the cache is invalidated and re-resolved — without a
+  // useEffect. A rejected resolve clears the cache so a later press can retry.
+  const appResolutionRef = useRef(null);
+  // Re-entrancy guard: a routing pass may await network + crypto before it
+  // redirects, so block a second concurrent press from racing the sessionStorage
+  // handshake against a different PKCE pair.
+  const routingRef = useRef(false);
+  // Popup mode only opens a window for applications that could actually need
+  // one: `oauthRedirectUri` is required for (and only for) third-party OAuth,
+  // so an official app never flashes a popup open and closed while its
+  // in-app dialog loads.
+  const shouldPreOpenPopup = Platform.OS === 'web' && webAuthMode === 'popup' && Boolean(oauthRedirectUri);
+  const resolvePublicApplication = useCallback(() => {
+    if (!clientId) return null;
+    const cached = appResolutionRef.current;
+    if (cached && cached.clientId === clientId && cached.oxyServices === oxyServices) {
+      return cached.promise;
+    }
+    const promise = oxyServices.getPublicApplication(clientId).catch(error => {
+      // Only clear if this is still the live entry (a later resolve may have
+      // replaced it after a clientId/oxyServices change).
+      if (appResolutionRef.current?.promise === promise) {
+        appResolutionRef.current = null;
+      }
+      throw error;
+    });
+    appResolutionRef.current = {
+      clientId,
+      oxyServices,
+      promise
+    };
+    return promise;
+  }, [clientId, oxyServices]);
+
+  // Official / first-party surface: the in-app account + sign-in dialog.
+  const startOfficialSignIn = useCallback(() => {
+    openAccountDialog('signin');
+  }, [openAccountDialog]);
+
+  // Third-party surface: an OAuth 2.0 authorization-code + PKCE flow against
+  // auth.oxy.so. No FedCM, no SSO bounce, no Oxy session cookies.
+  //
+  // Web delegates to the ONE shared transport (`startWebOAuthSignIn`), which
+  // owns popup-vs-redirect selection, the popup lifecycle, the code exchange,
+  // and the session commit. Native keeps its in-app auth session and hands the
+  // handshake to the RP, which owns that exchange.
+  const startThirdPartyOAuth = useCallback(async (app, popup) => {
+    if (!clientId) {
+      closeOAuthPopup(popup);
+      startOfficialSignIn();
+      return;
+    }
+    if (!oauthRedirectUri) {
+      closeOAuthPopup(popup);
+      logger.error('OxySignInButton: a third_party application requires the `oauthRedirectUri` prop to start the OAuth flow; sign-in aborted', undefined, {
+        component: 'OxySignInButton',
+        clientId,
+        application: app.name
+      });
+      return;
+    }
+    if (Platform.OS === 'web') {
+      const result = await startWebOAuthSignIn({
+        redirectUri: oauthRedirectUri,
+        // In popup mode the window was claimed during the press (see
+        // `handlePress`); `null` means the browser blocked it and the
+        // transport falls back to a redirect. `undefined` (redirect
+        // mode) lets the transport decide for itself.
+        ...(shouldPreOpenPopup ? {
+          popup
+        } : {})
+      });
+      if (result.status === 'failed') {
+        logger.warn(`OxySignInButton: web sign-in failed (${result.reason})`, {
+          component: 'OxySignInButton',
+          application: app.name
+        }, result.description);
+      }
+      return;
+    }
+
+    // Native: open the in-app auth session, then hand the handshake to the
+    // RP so it can complete the token exchange from its deep-link callback.
+    const [pkce, state] = await Promise.all([generatePkcePair(), generateOAuthState()]);
+    const authorizeUrl = buildOAuthAuthorizeUrl({
+      clientId,
+      redirectUri: oauthRedirectUri,
+      state,
+      codeChallenge: pkce.codeChallenge
+    });
+    const {
+      redirectUrl
+    } = await openAuthorizeUrlNative(authorizeUrl, oauthRedirectUri);
+    if (onOAuthResult) {
+      onOAuthResult({
+        redirectUrl,
+        state,
+        codeVerifier: pkce.codeVerifier
+      });
+      return;
+    }
+    logger.warn('OxySignInButton: native third-party sign-in cannot complete without an `onOAuthResult` handler; the code exchange is the RP\'s responsibility (state + code_verifier were not surfaced)', {
+      component: 'OxySignInButton',
+      application: app.name
+    });
+  }, [clientId, oauthRedirectUri, onOAuthResult, startOfficialSignIn, startWebOAuthSignIn, shouldPreOpenPopup]);
+
+  // Resolve the Application once, then route: third-party → OAuth; first-party
+  // / official / unresolved → the in-app dialog. Resolution failure NEVER
+  // breaks an official app's sign-in — it falls back to the dialog. Every path
+  // that does NOT reach the OAuth lane closes the pre-opened popup, so a
+  // mis-routed press can never leave an empty window on screen.
+  const routeSignIn = useCallback(async popup => {
+    if (routingRef.current) {
+      closeOAuthPopup(popup);
+      return;
+    }
+    routingRef.current = true;
+    try {
+      const resolving = resolvePublicApplication();
+      if (!resolving) {
+        closeOAuthPopup(popup);
+        startOfficialSignIn();
+        return;
+      }
+      let app;
+      try {
+        app = await resolving;
+      } catch (error) {
+        closeOAuthPopup(popup);
+        logger.warn('OxySignInButton: could not resolve the application; opening the sign-in dialog', {
+          component: 'OxySignInButton',
+          clientId
+        }, error);
+        startOfficialSignIn();
+        return;
+      }
+      if (app.type === 'third_party' && !app.isOfficial) {
+        await startThirdPartyOAuth(app, popup);
+        return;
+      }
+      closeOAuthPopup(popup);
+      startOfficialSignIn();
+    } finally {
+      routingRef.current = false;
+    }
+  }, [resolvePublicApplication, startOfficialSignIn, startThirdPartyOAuth, clientId]);
+
+  // Defer to a caller-supplied handler, otherwise route by application type.
+  //
+  // The popup is opened HERE, synchronously, before the async application
+  // resolve: `window.open` only survives while the click is still being
+  // handled, so a window opened after that first `await` is silently blocked.
+  const handlePress = useCallback(() => {
+    if (onPress) {
+      onPress();
+      return;
+    }
+    void routeSignIn(shouldPreOpenPopup ? openOAuthPopup() : null);
+  }, [onPress, routeSignIn, shouldPreOpenPopup]);
+
+  // Don't show the button if already authenticated (unless explicitly overridden)
+  if (isAuthenticated && !showWhenAuthenticated) return null;
+  const isButtonDisabled = disabled || isLoading || isModalOpen;
+
+  // Map the public `variant` API onto Bloom's Button variants:
+  //   contained → primary (filled), outline → outline, default → secondary.
+  const buttonVariant = variant === 'contained' ? 'primary' : variant === 'outline' ? 'outline' : 'secondary';
+
+  // The Oxy mark reads white-on-primary for the filled (contained) button and
+  // primary-on-transparent for the outline / default surfaces.
+  const isContained = variant === 'contained';
+  const logoColor = isContained ? '#ffffff' : theme.colors.primary;
+  const logoLetterColor = isContained ? theme.colors.primary : '#ffffff';
+
+  // The relying party surfaces exactly ONE primary action, and it reads
+  // "Continue with Oxy" (issue #691). A caller-supplied `text` still wins.
+  const label = text ?? t('accountSwitcher.continueWithOxy');
+  return /*#__PURE__*/_jsx(Button, {
+    variant: buttonVariant,
+    onPress: handlePress,
+    disabled: isButtonDisabled,
+    style: style,
+    textStyle: [Platform.OS === 'web' ? {
+      fontWeight: '600'
+    } : null, textStyle],
+    icon: /*#__PURE__*/_jsx(LogoIcon, {
+      height: 20,
+      color: logoColor,
+      letterColor: logoLetterColor,
+      style: {
+        marginRight: 10
+      }
+    }),
+    children: isLoading || isModalOpen ? t('signin.status.signingIn') : label
+  });
+};
+export default OxySignInButton;
+//# sourceMappingURL=OxySignInButton.js.map

package/lib/module/ui/components/OxySignInButton.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useCallback","useState","useEffect","useRef","Platform","logger","generatePkcePair","generateOAuthState","buildOAuthAuthorizeUrl","useAuthStore","useShallow","useTheme","Button","useOxy","useI18n","LogoIcon","subscribeToAccountDialog","openAuthorizeUrlNative","closeOAuthPopup","openOAuthPopup","jsx","_jsx","OxySignInButton","variant","onPress","style","textStyle","text","disabled","showWhenAuthenticated","oauthRedirectUri","onOAuthResult","theme","t","openAccountDialog","oxyServices","clientId","webAuthMode","startWebOAuthSignIn","isAuthenticated","isLoading","state","isModalOpen","setIsModalOpen","appResolutionRef","routingRef","shouldPreOpenPopup","OS","Boolean","resolvePublicApplication","cached","current","promise","getPublicApplication","catch","error","startOfficialSignIn","startThirdPartyOAuth","app","popup","undefined","component","application","name","result","redirectUri","status","warn","reason","description","pkce","Promise","all","authorizeUrl","codeChallenge","redirectUrl","codeVerifier","routeSignIn","resolving","type","isOfficial","handlePress","isButtonDisabled","buttonVariant","isContained","logoColor","colors","primary","logoLetterColor","label","fontWeight","icon","height","color","letterColor","marginRight","children"],"sourceRoot":"../../../../src","sources":["ui/components/OxySignInButton.tsx"],"mappings":";;AACA,SAASA,WAAW,EAAEC,QAAQ,EAAEC,SAAS,EAAEC,MAAM,QAAQ,OAAO;AAChE,SAAyDC,QAAQ,QAAQ,cAAc;AACvF,SACIC,MAAM,EACNC,gBAAgB,EAChBC,kBAAkB,EAClBC,sBAAsB,QAEnB,aAAa;AACpB,SAASC,YAAY,QAAQ,wBAAqB;AAClD,SAASC,UAAU,QAAQ,uBAAuB;AAClD,SAASC,QAAQ,QAAQ,oBAAoB;AAC7C,SAASC,MAAM,QAA4B,qBAAqB;AAChE,SAASC,MAAM,QAAQ,0BAAuB;AAC9C,SAASC,OAAO,QAAQ,qBAAkB;AAC1C,SAASC,QAAQ,QAAQ,oBAAiB;AAC1C,SAASC,wBAAwB,QAAQ,uCAAoC;AAC7E,SAASC,sBAAsB,QAAQ,sBAAmB;AAC1D,SAASC,eAAe,EAAEC,cAAc,QAAQ,wBAAqB;;AAGrE;AACA;AACA;AACA;AACA;AACA;AALA,SAAAC,GAAA,IAAAC,IAAA;AA6FA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,eAA+C,GAAGA,CAAC;EAC5DC,OAAO,GAAG,SAAS;EACnBC,OAAO;EACPC,KAAK;EACLC,SAAS;EACTC,IAAI;EACJC,QAAQ,GAAG,KAAK;EAChBC,qBAAqB,GAAG,KAAK;EAC7BC,gBAAgB;EAChBC;AACJ,CAAC,KAAK;EACF,MAAMC,KAAK,GAAGrB,QAAQ,CAAC,CAAC;EACxB,MAAM;IAAEsB;EAAE,CAAC,GAAGnB,OAAO,CAAC,CAAC;EACvB,MAAM;IAAEoB,iBAAiB;IAAEC,WAAW;IAAEC,QAAQ;IAAEC,WAAW;IAAEC;EAAoB,CAAC,GAAGzB,MAAM,CAAC,CAAC;EAC/F,MAAM;IAAE0B,eAAe;IAAEC;EAAU,CAAC,GAAG/B,YAAY,CAC/CC,UAAU,CAAE+B,KAAK,KAAM;IAAEF,eAAe,EAAEE,KAAK,CAACF,eAAe;IAAEC,SAAS,EAAEC,KAAK,CAACD;EAAU,CAAC,CAAC,CAClG,CAAC;EACD;EACA;EACA;EACA,MAAM,CAACE,WAAW,EAAEC,cAAc,CAAC,GAAG1C,QAAQ,CAAC,KAAK,CAAC;EAErDC,SAAS,CAAC,MAAMc,wBAAwB,CAAC2B,cAAc,CAAC,EAAE,EAAE,CAAC;;EAE7D;EACA;EACA;EACA;EACA;EACA,MAAMC,gBAAgB,GAAGzC,MAAM,CAIrB,IAAI,CAAC;EACf;EACA;EACA;EACA,MAAM0C,UAAU,GAAG1C,MAAM,CAAC,KAAK,CAAC;EAChC;EACA;EACA;EACA;EACA,MAAM2C,kBAAkB,GACpB1C,QAAQ,CAAC2C,EAAE,KAAK,KAAK,IAAIV,WAAW,KAAK,OAAO,IAAIW,OAAO,CAAClB,gBAAgB,CAAC;EAEjF,MAAMmB,wBAAwB,GAAGjD,WAAW,CAAC,MAAyC;IAClF,IAAI,CAACoC,QAAQ,EAAE,OAAO,IAAI;IAC1B,MAAMc,MAAM,GAAGN,gBAAgB,CAACO,OAAO;IACvC,IAAID,MAAM,IAAIA,MAAM,CAACd,QAAQ,KAAKA,QAAQ,IAAIc,MAAM,CAACf,WAAW,KAAKA,WAAW,EAAE;MAC9E,OAAOe,MAAM,CAACE,OAAO;IACzB;IACA,MAAMA,OAAO,GAAGjB,WAAW,CAACkB,oBAAoB,CAACjB,QAAQ,CAAC,CAACkB,KAAK,CAAEC,KAAK,IAAK;MACxE;MACA;MACA,IAAIX,gBAAgB,CAACO,OAAO,EAAEC,OAAO,KAAKA,OAAO,EAAE;QAC/CR,gBAAgB,CAACO,OAAO,GAAG,IAAI;MACnC;MACA,MAAMI,KAAK;IACf,CAAC,CAAC;IACFX,gBAAgB,CAACO,OAAO,GAAG;MAAEf,QAAQ;MAAED,WAAW;MAAEiB;IAAQ,CAAC;IAC7D,OAAOA,OAAO;EAClB,CAAC,EAAE,CAAChB,QAAQ,EAAED,WAAW,CAAC,CAAC;;EAE3B;EACA,MAAMqB,mBAAmB,GAAGxD,WAAW,CAAC,MAAM;IAC1CkC,iBAAiB,CAAC,QAAQ,CAAC;EAC/B,CAAC,EAAE,CAACA,iBAAiB,CAAC,CAAC;;EAEvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMuB,oBAAoB,GAAGzD,WAAW,CACpC,OAAO0D,GAAsB,EAAEC,KAA8B,KAAoB;IAC7E,IAAI,CAACvB,QAAQ,EAAE;MACXlB,eAAe,CAACyC,KAAK,CAAC;MACtBH,mBAAmB,CAAC,CAAC;MACrB;IACJ;IACA,IAAI,CAAC1B,gBAAgB,EAAE;MACnBZ,eAAe,CAACyC,KAAK,CAAC;MACtBtD,MAAM,CAACkD,KAAK,CACR,0HAA0H,EAC1HK,SAAS,EACT;QAAEC,SAAS,EAAE,iBAAiB;QAAEzB,QAAQ;QAAE0B,WAAW,EAAEJ,GAAG,CAACK;MAAK,CACpE,CAAC;MACD;IACJ;IAEA,IAAI3D,QAAQ,CAAC2C,EAAE,KAAK,KAAK,EAAE;MACvB,MAAMiB,MAAM,GAAG,MAAM1B,mBAAmB,CAAC;QACrC2B,WAAW,EAAEnC,gBAAgB;QAC7B;QACA;QACA;QACA;QACA,IAAIgB,kBAAkB,GAAG;UAAEa;QAAM,CAAC,GAAG,CAAC,CAAC;MAC3C,CAAC,CAAC;MACF,IAAIK,MAAM,CAACE,MAAM,KAAK,QAAQ,EAAE;QAC5B7D,MAAM,CAAC8D,IAAI,CACP,wCAAwCH,MAAM,CAACI,MAAM,GAAG,EACxD;UAAEP,SAAS,EAAE,iBAAiB;UAAEC,WAAW,EAAEJ,GAAG,CAACK;QAAK,CAAC,EACvDC,MAAM,CAACK,WACX,CAAC;MACL;MACA;IACJ;;IAEA;IACA;IACA,MAAM,CAACC,IAAI,EAAE7B,KAAK,CAAC,GAAG,MAAM8B,OAAO,CAACC,GAAG,CAAC,CAAClE,gBAAgB,CAAC,CAAC,EAAEC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACnF,MAAMkE,YAAY,GAAGjE,sBAAsB,CAAC;MACxC4B,QAAQ;MACR6B,WAAW,EAAEnC,gBAAgB;MAC7BW,KAAK;MACLiC,aAAa,EAAEJ,IAAI,CAACI;IACxB,CAAC,CAAC;IACF,MAAM;MAAEC;IAAY,CAAC,GAAG,MAAM1D,sBAAsB,CAACwD,YAAY,EAAE3C,gBAAgB,CAAC;IACpF,IAAIC,aAAa,EAAE;MACfA,aAAa,CAAC;QAAE4C,WAAW;QAAElC,KAAK;QAAEmC,YAAY,EAAEN,IAAI,CAACM;MAAa,CAAC,CAAC;MACtE;IACJ;IACAvE,MAAM,CAAC8D,IAAI,CACP,yLAAyL,EACzL;MAAEN,SAAS,EAAE,iBAAiB;MAAEC,WAAW,EAAEJ,GAAG,CAACK;IAAK,CAC1D,CAAC;EACL,CAAC,EACD,CACI3B,QAAQ,EACRN,gBAAgB,EAChBC,aAAa,EACbyB,mBAAmB,EACnBlB,mBAAmB,EACnBQ,kBAAkB,CAE1B,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAM+B,WAAW,GAAG7E,WAAW,CAC3B,MAAO2D,KAA8B,IAAoB;IACrD,IAAId,UAAU,CAACM,OAAO,EAAE;MACpBjC,eAAe,CAACyC,KAAK,CAAC;MACtB;IACJ;IACAd,UAAU,CAACM,OAAO,GAAG,IAAI;IACzB,IAAI;MACA,MAAM2B,SAAS,GAAG7B,wBAAwB,CAAC,CAAC;MAC5C,IAAI,CAAC6B,SAAS,EAAE;QACZ5D,eAAe,CAACyC,KAAK,CAAC;QACtBH,mBAAmB,CAAC,CAAC;QACrB;MACJ;MACA,IAAIE,GAAsB;MAC1B,IAAI;QACAA,GAAG,GAAG,MAAMoB,SAAS;MACzB,CAAC,CAAC,OAAOvB,KAAK,EAAE;QACZrC,eAAe,CAACyC,KAAK,CAAC;QACtBtD,MAAM,CAAC8D,IAAI,CACP,gFAAgF,EAChF;UAAEN,SAAS,EAAE,iBAAiB;UAAEzB;QAAS,CAAC,EAC1CmB,KACJ,CAAC;QACDC,mBAAmB,CAAC,CAAC;QACrB;MACJ;MACA,IAAIE,GAAG,CAACqB,IAAI,KAAK,aAAa,IAAI,CAACrB,GAAG,CAACsB,UAAU,EAAE;QAC/C,MAAMvB,oBAAoB,CAACC,GAAG,EAAEC,KAAK,CAAC;QACtC;MACJ;MACAzC,eAAe,CAACyC,KAAK,CAAC;MACtBH,mBAAmB,CAAC,CAAC;IACzB,CAAC,SAAS;MACNX,UAAU,CAACM,OAAO,GAAG,KAAK;IAC9B;EACJ,CAAC,EACD,CAACF,wBAAwB,EAAEO,mBAAmB,EAAEC,oBAAoB,EAAErB,QAAQ,CAClF,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAM6C,WAAW,GAAGjF,WAAW,CAAC,MAAM;IAClC,IAAIwB,OAAO,EAAE;MACTA,OAAO,CAAC,CAAC;MACT;IACJ;IACA,KAAKqD,WAAW,CAAC/B,kBAAkB,GAAG3B,cAAc,CAAC,CAAC,GAAG,IAAI,CAAC;EAClE,CAAC,EAAE,CAACK,OAAO,EAAEqD,WAAW,EAAE/B,kBAAkB,CAAC,CAAC;;EAE9C;EACA,IAAIP,eAAe,IAAI,CAACV,qBAAqB,EAAE,OAAO,IAAI;EAE1D,MAAMqD,gBAAgB,GAAGtD,QAAQ,IAAIY,SAAS,IAAIE,WAAW;;EAE7D;EACA;EACA,MAAMyC,aAA4B,GAC9B5D,OAAO,KAAK,WAAW,GAAG,SAAS,GAAGA,OAAO,KAAK,SAAS,GAAG,SAAS,GAAG,WAAW;;EAEzF;EACA;EACA,MAAM6D,WAAW,GAAG7D,OAAO,KAAK,WAAW;EAC3C,MAAM8D,SAAS,GAAGD,WAAW,GAAG,SAAS,GAAGpD,KAAK,CAACsD,MAAM,CAACC,OAAO;EAChE,MAAMC,eAAe,GAAGJ,WAAW,GAAGpD,KAAK,CAACsD,MAAM,CAACC,OAAO,GAAG,SAAS;;EAEtE;EACA;EACA,MAAME,KAAK,GAAG9D,IAAI,IAAIM,CAAC,CAAC,iCAAiC,CAAC;EAE1D,oBACIZ,IAAA,CAACT,MAAM;IACHW,OAAO,EAAE4D,aAAc;IACvB3D,OAAO,EAAEyD,WAAY;IACrBrD,QAAQ,EAAEsD,gBAAiB;IAC3BzD,KAAK,EAAEA,KAAM;IACbC,SAAS,EAAE,CAACtB,QAAQ,CAAC2C,EAAE,KAAK,KAAK,GAAG;MAAE2C,UAAU,EAAE;IAAM,CAAC,GAAG,IAAI,EAAEhE,SAAS,CAAE;IAC7EiE,IAAI,eACAtE,IAAA,CAACN,QAAQ;MACL6E,MAAM,EAAE,EAAG;MACXC,KAAK,EAAER,SAAU;MACjBS,WAAW,EAAEN,eAAgB;MAC7B/D,KAAK,EAAE;QAAEsE,WAAW,EAAE;MAAG;IAAE,CAC9B,CACJ;IAAAC,QAAA,EAEAxD,SAAS,IAAIE,WAAW,GAAGT,CAAC,CAAC,yBAAyB,CAAC,GAAGwD;EAAK,CAC5D,CAAC;AAEjB,CAAC;AAED,eAAenE,eAAe","ignoreList":[]}

package/lib/module/ui/components/OxySignInRequestSurface.js

@@ -0,0 +1,141 @@
+"use strict";
+
+/**
+ * `OxySignInRequestSurface` — the in-flight "Sign in with Oxy" request, rendered
+ * from plain facts (issue #691, Phase 5).
+ *
+ * The user already performed their one action. From here the surface only
+ * REPORTS: the route-appropriate primary visual, the status line for the
+ * progress it was told about, and nothing else at the same weight. Alternatives
+ * stay behind "Having trouble?" until the chosen route could not be carried out,
+ * at which point they ARE the content and render plainly.
+ *
+ * PRESENTATIONAL AND HEADLESS-FRIENDLY. It owns no request, no controller, no
+ * polling, and no state of its own: everything it draws is a prop. That is what
+ * lets the two hosts of this surface share ONE implementation —
+ *
+ *  - `OxyAuthChooser`'s `SignInRequestView`, driven by `AccountDialogController`'s
+ *    device flow;
+ *  - the auth.oxy.so IdP's OAuth-bound lane, whose request carries an OAuth
+ *    binding the account dialog's session has no concept of.
+ *
+ * It resolves only what every `@oxyhq/services` consumer already has in context:
+ * the Bloom theme (`useTheme`) and the SDK's own locale dictionary (`useI18n`,
+ * the `accountSwitcher.*` copy in all 11 locales). Host-specific copy — the
+ * labels on {@link OxySignInRequestSurfaceProps.subordinate} and
+ * {@link OxySignInRequestSurfaceProps.alternatives} — arrives already localized.
+ *
+ * TWO THINGS IT DELIBERATELY DOES NOT DO:
+ *  - it renders no failure REASON. A host surfaces that the way its own shell
+ *    demands (the account dialog toasts it — errors never render inline there;
+ *    a full page may show a banner around this surface). The surface only takes
+ *    the fact that the request failed, and offers the way forward.
+ *  - it derives nothing from {@link OxySignInRequestSurfaceProps.qrPayload}.
+ *    Application identity, origin, and scopes are resolved server-side by the
+ *    approver (Commons), never read out of a payload here — the plate encodes it
+ *    and shows nothing about it.
+ *
+ * SECRETS: every prop is safe to render. There is no `sessionToken` (the secret
+ * claim/finalize credential), no bearer, and no authorization code — a host
+ * keeps those in its own controller, and no prop on this component invites one.
+ */
+
+import { View } from 'react-native';
+import { Button } from '@oxyhq/bloom/button';
+import { useTheme } from '@oxyhq/bloom/theme';
+import { Text } from '@oxyhq/bloom/typography';
+import { useI18n } from "../hooks/useI18n.js";
+import TroubleDisclosure from "./authChooser/TroubleDisclosure.js";
+import { SubtleLink } from "./authChooser/primitives.js";
+import { GetCommonsPrompt, RequestPrimarySurface } from "./authChooser/requestSurfaces.js";
+import { signInProgressLabel } from "./authChooser/signInProgress.js";
+import { authChooserStyles as styles } from "./authChooser/styles.js";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/** Shared empty list, so an omitted action bundle allocates nothing per render. */
+const NO_ACTIONS = [];
+export const OxySignInRequestSurface = ({
+  route,
+  progress,
+  qrPayload = null,
+  routeFailed = false,
+  failed = false,
+  onRetry,
+  onAcquireCommons,
+  subordinate = NO_ACTIONS,
+  alternatives = NO_ACTIONS
+}) => {
+  const theme = useTheme();
+  const {
+    t
+  } = useI18n();
+  const subordinateLinks = subordinate.map(action => /*#__PURE__*/_jsx(SubtleLink, {
+    label: action.label,
+    theme: theme,
+    onPress: action.onPress,
+    disabled: action.disabled,
+    testID: action.key
+  }, action.key));
+
+  // A failed request has no working primary route left. Its REASON is the host's
+  // to surface (toast / banner); all this owes the user is the way forward.
+  if (failed) {
+    return /*#__PURE__*/_jsxs(View, {
+      style: styles.centeredBlock,
+      children: [onRetry ? /*#__PURE__*/_jsx(Button, {
+        variant: "primary",
+        onPress: onRetry,
+        style: styles.primaryButton,
+        children: t('common.actions.tryAgain')
+      }) : null, subordinateLinks, /*#__PURE__*/_jsx(TroubleDisclosure, {
+        actions: alternatives,
+        revealed: true,
+        theme: theme,
+        t: t
+      })]
+    });
+  }
+
+  // Commons is absent: acquiring it IS the primary route, not a fallback, so it
+  // renders as the one primary action and no route progress is reported (there is
+  // no route to report on until the host says otherwise).
+  if (onAcquireCommons) {
+    return /*#__PURE__*/_jsxs(View, {
+      style: styles.centeredBlock,
+      children: [/*#__PURE__*/_jsx(GetCommonsPrompt, {
+        theme: theme,
+        t: t,
+        onGetCommons: onAcquireCommons
+      }), subordinateLinks, /*#__PURE__*/_jsx(TroubleDisclosure, {
+        actions: alternatives,
+        revealed: false,
+        theme: theme,
+        t: t
+      })]
+    });
+  }
+  const status = signInProgressLabel(progress, route, t);
+  return /*#__PURE__*/_jsxs(View, {
+    style: styles.centeredBlock,
+    children: [/*#__PURE__*/_jsx(RequestPrimarySurface, {
+      route: route,
+      progress: progress,
+      qrPayload: qrPayload,
+      theme: theme,
+      t: t
+    }), status ? /*#__PURE__*/_jsx(Text, {
+      style: [styles.mutedText, {
+        color: theme.colors.textSecondary
+      }],
+      accessibilityLiveRegion: "polite",
+      testID: "signin-progress",
+      children: status
+    }) : null, subordinateLinks, /*#__PURE__*/_jsx(TroubleDisclosure, {
+      actions: alternatives,
+      revealed: routeFailed,
+      theme: theme,
+      t: t
+    })]
+  });
+};
+export default OxySignInRequestSurface;
+//# sourceMappingURL=OxySignInRequestSurface.js.map

package/lib/module/ui/components/OxySignInRequestSurface.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["View","Button","useTheme","Text","useI18n","TroubleDisclosure","SubtleLink","GetCommonsPrompt","RequestPrimarySurface","signInProgressLabel","authChooserStyles","styles","jsx","_jsx","jsxs","_jsxs","NO_ACTIONS","OxySignInRequestSurface","route","progress","qrPayload","routeFailed","failed","onRetry","onAcquireCommons","subordinate","alternatives","theme","t","subordinateLinks","map","action","label","onPress","disabled","testID","key","style","centeredBlock","children","variant","primaryButton","actions","revealed","onGetCommons","status","mutedText","color","colors","textSecondary","accessibilityLiveRegion"],"sourceRoot":"../../../../src","sources":["ui/components/OxySignInRequestSurface.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,IAAI,QAAQ,cAAc;AACnC,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,QAAQ,QAAQ,oBAAoB;AAC7C,SAASC,IAAI,QAAQ,yBAAyB;AAE9C,SAASC,OAAO,QAAQ,qBAAkB;AAC1C,OAAOC,iBAAiB,MAAM,oCAAiC;AAC/D,SAASC,UAAU,QAAQ,6BAA0B;AACrD,SAASC,gBAAgB,EAAEC,qBAAqB,QAAQ,kCAA+B;AACvF,SAASC,mBAAmB,QAAQ,iCAA8B;AAClE,SAASC,iBAAiB,IAAIC,MAAM,QAAQ,yBAAsB;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAGnE;AACA,MAAMC,UAA6C,GAAG,EAAE;AAkExD,OAAO,MAAMC,uBAA+D,GAAGA,CAAC;EAC9EC,KAAK;EACLC,QAAQ;EACRC,SAAS,GAAG,IAAI;EAChBC,WAAW,GAAG,KAAK;EACnBC,MAAM,GAAG,KAAK;EACdC,OAAO;EACPC,gBAAgB;EAChBC,WAAW,GAAGT,UAAU;EACxBU,YAAY,GAAGV;AACjB,CAAC,KAAK;EACJ,MAAMW,KAAK,GAAGzB,QAAQ,CAAC,CAAC;EACxB,MAAM;IAAE0B;EAAE,CAAC,GAAGxB,OAAO,CAAC,CAAC;EAEvB,MAAMyB,gBAAgB,GAAGJ,WAAW,CAACK,GAAG,CAAEC,MAAM,iBAC9ClB,IAAA,CAACP,UAAU;IAET0B,KAAK,EAAED,MAAM,CAACC,KAAM;IACpBL,KAAK,EAAEA,KAAM;IACbM,OAAO,EAAEF,MAAM,CAACE,OAAQ;IACxBC,QAAQ,EAAEH,MAAM,CAACG,QAAS;IAC1BC,MAAM,EAAEJ,MAAM,CAACK;EAAI,GALdL,MAAM,CAACK,GAMb,CACF,CAAC;;EAEF;EACA;EACA,IAAId,MAAM,EAAE;IACV,oBACEP,KAAA,CAACf,IAAI;MAACqC,KAAK,EAAE1B,MAAM,CAAC2B,aAAc;MAAAC,QAAA,GAC/BhB,OAAO,gBACNV,IAAA,CAACZ,MAAM;QAACuC,OAAO,EAAC,SAAS;QAACP,OAAO,EAAEV,OAAQ;QAACc,KAAK,EAAE1B,MAAM,CAAC8B,aAAc;QAAAF,QAAA,EACrEX,CAAC,CAAC,yBAAyB;MAAC,CACvB,CAAC,GACP,IAAI,EACPC,gBAAgB,eACjBhB,IAAA,CAACR,iBAAiB;QAACqC,OAAO,EAAEhB,YAAa;QAACiB,QAAQ;QAAChB,KAAK,EAAEA,KAAM;QAACC,CAAC,EAAEA;MAAE,CAAE,CAAC;IAAA,CACrE,CAAC;EAEX;;EAEA;EACA;EACA;EACA,IAAIJ,gBAAgB,EAAE;IACpB,oBACET,KAAA,CAACf,IAAI;MAACqC,KAAK,EAAE1B,MAAM,CAAC2B,aAAc;MAAAC,QAAA,gBAChC1B,IAAA,CAACN,gBAAgB;QAACoB,KAAK,EAAEA,KAAM;QAACC,CAAC,EAAEA,CAAE;QAACgB,YAAY,EAAEpB;MAAiB,CAAE,CAAC,EACvEK,gBAAgB,eACjBhB,IAAA,CAACR,iBAAiB;QAACqC,OAAO,EAAEhB,YAAa;QAACiB,QAAQ,EAAE,KAAM;QAAChB,KAAK,EAAEA,KAAM;QAACC,CAAC,EAAEA;MAAE,CAAE,CAAC;IAAA,CAC7E,CAAC;EAEX;EAEA,MAAMiB,MAAM,GAAGpC,mBAAmB,CAACU,QAAQ,EAAED,KAAK,EAAEU,CAAC,CAAC;EAEtD,oBACEb,KAAA,CAACf,IAAI;IAACqC,KAAK,EAAE1B,MAAM,CAAC2B,aAAc;IAAAC,QAAA,gBAChC1B,IAAA,CAACL,qBAAqB;MACpBU,KAAK,EAAEA,KAAM;MACbC,QAAQ,EAAEA,QAAS;MACnBC,SAAS,EAAEA,SAAU;MACrBO,KAAK,EAAEA,KAAM;MACbC,CAAC,EAAEA;IAAE,CACN,CAAC,EACDiB,MAAM,gBACLhC,IAAA,CAACV,IAAI;MACHkC,KAAK,EAAE,CAAC1B,MAAM,CAACmC,SAAS,EAAE;QAAEC,KAAK,EAAEpB,KAAK,CAACqB,MAAM,CAACC;MAAc,CAAC,CAAE;MACjEC,uBAAuB,EAAC,QAAQ;MAChCf,MAAM,EAAC,iBAAiB;MAAAI,QAAA,EAEvBM;IAAM,CACH,CAAC,GACL,IAAI,EACPhB,gBAAgB,eACjBhB,IAAA,CAACR,iBAAiB;MAACqC,OAAO,EAAEhB,YAAa;MAACiB,QAAQ,EAAEtB,WAAY;MAACM,KAAK,EAAEA,KAAM;MAACC,CAAC,EAAEA;IAAE,CAAE,CAAC;EAAA,CACnF,CAAC;AAEX,CAAC;AAED,eAAeX,uBAAuB","ignoreList":[]}