@oxyhq/services 23.0.2 → 23.1.0

package/lib/commonjs/ui/components/OxySignInButton.js

@@ -0,0 +1,289 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = exports.OxySignInButton = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _core = require("@oxyhq/core");
+var _authStore = require("../stores/authStore.js");
+var _shallow = require("zustand/react/shallow");
+var _theme = require("@oxyhq/bloom/theme");
+var _button = require("@oxyhq/bloom/button");
+var _OxyContext = require("../context/OxyContext.js");
+var _useI18n = require("../hooks/useI18n.js");
+var _LogoIcon = require("./logo/LogoIcon.js");
+var _accountDialogManager = require("../navigation/accountDialogManager.js");
+var _oauthNavigation = require("./oauthNavigation.js");
+var _oauthPopup = require("../oauth/oauthPopup.js");
+var _jsxRuntime = require("react/jsx-runtime");
+/**
+ * The OAuth handshake surfaced to a NATIVE third-party RP via
+ * {@link OxySignInButtonProps.onOAuthResult} so it can finish the code exchange
+ * (`POST /auth/oauth/token`). Web sign-in is handled entirely by the SDK's web
+ * transport (`useOxy().startWebOAuthSignIn`) and never uses this callback.
+ */
+
+/**
+ * A pre-styled button component for signing in with Oxy identity
+ *
+ * This component opens the Oxy Auth flow which allows users to authenticate
+ * using their Oxy Accounts identity (via QR code or deep link).
+ *
+ * @example
+ * ```tsx
+ * // Basic usage
+ * <OxySignInButton />
+ *
+ * // Custom styling
+ * <OxySignInButton
+ *   variant="contained"
+ *   style={{ marginTop: 20 }}
+ *   text="Login with Oxy"
+ * />
+ *
+ * // Custom handler
+ * <OxySignInButton onPress={() => {
+ *   // Custom authentication flow
+ * }} />
+ * ```
+ */
+const OxySignInButton = ({
+  variant = 'default',
+  onPress,
+  style,
+  textStyle,
+  text,
+  disabled = false,
+  showWhenAuthenticated = false,
+  oauthRedirectUri,
+  onOAuthResult
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const {
+    openAccountDialog,
+    oxyServices,
+    clientId,
+    webAuthMode,
+    startWebOAuthSignIn
+  } = (0, _OxyContext.useOxy)();
+  const {
+    isAuthenticated,
+    isLoading
+  } = (0, _authStore.useAuthStore)((0, _shallow.useShallow)(state => ({
+    isAuthenticated: state.isAuthenticated,
+    isLoading: state.isLoading
+  })));
+  // Tracks whether the unified account dialog is open so we can show
+  // "Signing in..." while it is. The manager reports visibility on every
+  // change regardless of platform or what opened/closed it.
+  const [isModalOpen, setIsModalOpen] = (0, _react.useState)(false);
+  (0, _react.useEffect)(() => (0, _accountDialogManager.subscribeToAccountDialog)(setIsModalOpen), []);
+
+  // The application's public identity is resolved lazily on first press and its
+  // promise cached, so rapid taps share one in-flight resolve. The cache is
+  // KEYED on the identity inputs (clientId + the oxyServices instance): if
+  // either changes the cache is invalidated and re-resolved — without a
+  // useEffect. A rejected resolve clears the cache so a later press can retry.
+  const appResolutionRef = (0, _react.useRef)(null);
+  // Re-entrancy guard: a routing pass may await network + crypto before it
+  // redirects, so block a second concurrent press from racing the sessionStorage
+  // handshake against a different PKCE pair.
+  const routingRef = (0, _react.useRef)(false);
+  // Popup mode only opens a window for applications that could actually need
+  // one: `oauthRedirectUri` is required for (and only for) third-party OAuth,
+  // so an official app never flashes a popup open and closed while its
+  // in-app dialog loads.
+  const shouldPreOpenPopup = _reactNative.Platform.OS === 'web' && webAuthMode === 'popup' && Boolean(oauthRedirectUri);
+  const resolvePublicApplication = (0, _react.useCallback)(() => {
+    if (!clientId) return null;
+    const cached = appResolutionRef.current;
+    if (cached && cached.clientId === clientId && cached.oxyServices === oxyServices) {
+      return cached.promise;
+    }
+    const promise = oxyServices.getPublicApplication(clientId).catch(error => {
+      // Only clear if this is still the live entry (a later resolve may have
+      // replaced it after a clientId/oxyServices change).
+      if (appResolutionRef.current?.promise === promise) {
+        appResolutionRef.current = null;
+      }
+      throw error;
+    });
+    appResolutionRef.current = {
+      clientId,
+      oxyServices,
+      promise
+    };
+    return promise;
+  }, [clientId, oxyServices]);
+
+  // Official / first-party surface: the in-app account + sign-in dialog.
+  const startOfficialSignIn = (0, _react.useCallback)(() => {
+    openAccountDialog('signin');
+  }, [openAccountDialog]);
+
+  // Third-party surface: an OAuth 2.0 authorization-code + PKCE flow against
+  // auth.oxy.so. No FedCM, no SSO bounce, no Oxy session cookies.
+  //
+  // Web delegates to the ONE shared transport (`startWebOAuthSignIn`), which
+  // owns popup-vs-redirect selection, the popup lifecycle, the code exchange,
+  // and the session commit. Native keeps its in-app auth session and hands the
+  // handshake to the RP, which owns that exchange.
+  const startThirdPartyOAuth = (0, _react.useCallback)(async (app, popup) => {
+    if (!clientId) {
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      startOfficialSignIn();
+      return;
+    }
+    if (!oauthRedirectUri) {
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      _core.logger.error('OxySignInButton: a third_party application requires the `oauthRedirectUri` prop to start the OAuth flow; sign-in aborted', undefined, {
+        component: 'OxySignInButton',
+        clientId,
+        application: app.name
+      });
+      return;
+    }
+    if (_reactNative.Platform.OS === 'web') {
+      const result = await startWebOAuthSignIn({
+        redirectUri: oauthRedirectUri,
+        // In popup mode the window was claimed during the press (see
+        // `handlePress`); `null` means the browser blocked it and the
+        // transport falls back to a redirect. `undefined` (redirect
+        // mode) lets the transport decide for itself.
+        ...(shouldPreOpenPopup ? {
+          popup
+        } : {})
+      });
+      if (result.status === 'failed') {
+        _core.logger.warn(`OxySignInButton: web sign-in failed (${result.reason})`, {
+          component: 'OxySignInButton',
+          application: app.name
+        }, result.description);
+      }
+      return;
+    }
+
+    // Native: open the in-app auth session, then hand the handshake to the
+    // RP so it can complete the token exchange from its deep-link callback.
+    const [pkce, state] = await Promise.all([(0, _core.generatePkcePair)(), (0, _core.generateOAuthState)()]);
+    const authorizeUrl = (0, _core.buildOAuthAuthorizeUrl)({
+      clientId,
+      redirectUri: oauthRedirectUri,
+      state,
+      codeChallenge: pkce.codeChallenge
+    });
+    const {
+      redirectUrl
+    } = await (0, _oauthNavigation.openAuthorizeUrlNative)(authorizeUrl, oauthRedirectUri);
+    if (onOAuthResult) {
+      onOAuthResult({
+        redirectUrl,
+        state,
+        codeVerifier: pkce.codeVerifier
+      });
+      return;
+    }
+    _core.logger.warn('OxySignInButton: native third-party sign-in cannot complete without an `onOAuthResult` handler; the code exchange is the RP\'s responsibility (state + code_verifier were not surfaced)', {
+      component: 'OxySignInButton',
+      application: app.name
+    });
+  }, [clientId, oauthRedirectUri, onOAuthResult, startOfficialSignIn, startWebOAuthSignIn, shouldPreOpenPopup]);
+
+  // Resolve the Application once, then route: third-party → OAuth; first-party
+  // / official / unresolved → the in-app dialog. Resolution failure NEVER
+  // breaks an official app's sign-in — it falls back to the dialog. Every path
+  // that does NOT reach the OAuth lane closes the pre-opened popup, so a
+  // mis-routed press can never leave an empty window on screen.
+  const routeSignIn = (0, _react.useCallback)(async popup => {
+    if (routingRef.current) {
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      return;
+    }
+    routingRef.current = true;
+    try {
+      const resolving = resolvePublicApplication();
+      if (!resolving) {
+        (0, _oauthPopup.closeOAuthPopup)(popup);
+        startOfficialSignIn();
+        return;
+      }
+      let app;
+      try {
+        app = await resolving;
+      } catch (error) {
+        (0, _oauthPopup.closeOAuthPopup)(popup);
+        _core.logger.warn('OxySignInButton: could not resolve the application; opening the sign-in dialog', {
+          component: 'OxySignInButton',
+          clientId
+        }, error);
+        startOfficialSignIn();
+        return;
+      }
+      if (app.type === 'third_party' && !app.isOfficial) {
+        await startThirdPartyOAuth(app, popup);
+        return;
+      }
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      startOfficialSignIn();
+    } finally {
+      routingRef.current = false;
+    }
+  }, [resolvePublicApplication, startOfficialSignIn, startThirdPartyOAuth, clientId]);
+
+  // Defer to a caller-supplied handler, otherwise route by application type.
+  //
+  // The popup is opened HERE, synchronously, before the async application
+  // resolve: `window.open` only survives while the click is still being
+  // handled, so a window opened after that first `await` is silently blocked.
+  const handlePress = (0, _react.useCallback)(() => {
+    if (onPress) {
+      onPress();
+      return;
+    }
+    void routeSignIn(shouldPreOpenPopup ? (0, _oauthPopup.openOAuthPopup)() : null);
+  }, [onPress, routeSignIn, shouldPreOpenPopup]);
+
+  // Don't show the button if already authenticated (unless explicitly overridden)
+  if (isAuthenticated && !showWhenAuthenticated) return null;
+  const isButtonDisabled = disabled || isLoading || isModalOpen;
+
+  // Map the public `variant` API onto Bloom's Button variants:
+  //   contained → primary (filled), outline → outline, default → secondary.
+  const buttonVariant = variant === 'contained' ? 'primary' : variant === 'outline' ? 'outline' : 'secondary';
+
+  // The Oxy mark reads white-on-primary for the filled (contained) button and
+  // primary-on-transparent for the outline / default surfaces.
+  const isContained = variant === 'contained';
+  const logoColor = isContained ? '#ffffff' : theme.colors.primary;
+  const logoLetterColor = isContained ? theme.colors.primary : '#ffffff';
+
+  // The relying party surfaces exactly ONE primary action, and it reads
+  // "Continue with Oxy" (issue #691). A caller-supplied `text` still wins.
+  const label = text ?? t('accountSwitcher.continueWithOxy');
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_button.Button, {
+    variant: buttonVariant,
+    onPress: handlePress,
+    disabled: isButtonDisabled,
+    style: style,
+    textStyle: [_reactNative.Platform.OS === 'web' ? {
+      fontWeight: '600'
+    } : null, textStyle],
+    icon: /*#__PURE__*/(0, _jsxRuntime.jsx)(_LogoIcon.LogoIcon, {
+      height: 20,
+      color: logoColor,
+      letterColor: logoLetterColor,
+      style: {
+        marginRight: 10
+      }
+    }),
+    children: isLoading || isModalOpen ? t('signin.status.signingIn') : label
+  });
+};
+exports.OxySignInButton = OxySignInButton;
+var _default = exports.default = OxySignInButton;
+//# sourceMappingURL=OxySignInButton.js.map

package/lib/commonjs/ui/components/OxySignInButton.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_core","_authStore","_shallow","_theme","_button","_OxyContext","_useI18n","_LogoIcon","_accountDialogManager","_oauthNavigation","_oauthPopup","_jsxRuntime","OxySignInButton","variant","onPress","style","textStyle","text","disabled","showWhenAuthenticated","oauthRedirectUri","onOAuthResult","theme","useTheme","t","useI18n","openAccountDialog","oxyServices","clientId","webAuthMode","startWebOAuthSignIn","useOxy","isAuthenticated","isLoading","useAuthStore","useShallow","state","isModalOpen","setIsModalOpen","useState","useEffect","subscribeToAccountDialog","appResolutionRef","useRef","routingRef","shouldPreOpenPopup","Platform","OS","Boolean","resolvePublicApplication","useCallback","cached","current","promise","getPublicApplication","catch","error","startOfficialSignIn","startThirdPartyOAuth","app","popup","closeOAuthPopup","logger","undefined","component","application","name","result","redirectUri","status","warn","reason","description","pkce","Promise","all","generatePkcePair","generateOAuthState","authorizeUrl","buildOAuthAuthorizeUrl","codeChallenge","redirectUrl","openAuthorizeUrlNative","codeVerifier","routeSignIn","resolving","type","isOfficial","handlePress","openOAuthPopup","isButtonDisabled","buttonVariant","isContained","logoColor","colors","primary","logoLetterColor","label","jsx","Button","fontWeight","icon","LogoIcon","height","color","letterColor","marginRight","children","exports","_default","default"],"sourceRoot":"../../../../src","sources":["ui/components/OxySignInButton.tsx"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AAOA,IAAAG,UAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,OAAA,GAAAN,OAAA;AACA,IAAAO,WAAA,GAAAP,OAAA;AACA,IAAAQ,QAAA,GAAAR,OAAA;AACA,IAAAS,SAAA,GAAAT,OAAA;AACA,IAAAU,qBAAA,GAAAV,OAAA;AACA,IAAAW,gBAAA,GAAAX,OAAA;AACA,IAAAY,WAAA,GAAAZ,OAAA;AAAsE,IAAAa,WAAA,GAAAb,OAAA;AAGtE;AACA;AACA;AACA;AACA;AACA;;AAwFA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMc,eAA+C,GAAGA,CAAC;EAC5DC,OAAO,GAAG,SAAS;EACnBC,OAAO;EACPC,KAAK;EACLC,SAAS;EACTC,IAAI;EACJC,QAAQ,GAAG,KAAK;EAChBC,qBAAqB,GAAG,KAAK;EAC7BC,gBAAgB;EAChBC;AACJ,CAAC,KAAK;EACF,MAAMC,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACvB,MAAM;IAAEC,iBAAiB;IAAEC,WAAW;IAAEC,QAAQ;IAAEC,WAAW;IAAEC;EAAoB,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAC/F,MAAM;IAAEC,eAAe;IAAEC;EAAU,CAAC,GAAG,IAAAC,uBAAY,EAC/C,IAAAC,mBAAU,EAAEC,KAAK,KAAM;IAAEJ,eAAe,EAAEI,KAAK,CAACJ,eAAe;IAAEC,SAAS,EAAEG,KAAK,CAACH;EAAU,CAAC,CAAC,CAClG,CAAC;EACD;EACA;EACA;EACA,MAAM,CAACI,WAAW,EAAEC,cAAc,CAAC,GAAG,IAAAC,eAAQ,EAAC,KAAK,CAAC;EAErD,IAAAC,gBAAS,EAAC,MAAM,IAAAC,8CAAwB,EAACH,cAAc,CAAC,EAAE,EAAE,CAAC;;EAE7D;EACA;EACA;EACA;EACA;EACA,MAAMI,gBAAgB,GAAG,IAAAC,aAAM,EAIrB,IAAI,CAAC;EACf;EACA;EACA;EACA,MAAMC,UAAU,GAAG,IAAAD,aAAM,EAAC,KAAK,CAAC;EAChC;EACA;EACA;EACA;EACA,MAAME,kBAAkB,GACpBC,qBAAQ,CAACC,EAAE,KAAK,KAAK,IAAIlB,WAAW,KAAK,OAAO,IAAImB,OAAO,CAAC5B,gBAAgB,CAAC;EAEjF,MAAM6B,wBAAwB,GAAG,IAAAC,kBAAW,EAAC,MAAyC;IAClF,IAAI,CAACtB,QAAQ,EAAE,OAAO,IAAI;IAC1B,MAAMuB,MAAM,GAAGT,gBAAgB,CAACU,OAAO;IACvC,IAAID,MAAM,IAAIA,MAAM,CAACvB,QAAQ,KAAKA,QAAQ,IAAIuB,MAAM,CAACxB,WAAW,KAAKA,WAAW,EAAE;MAC9E,OAAOwB,MAAM,CAACE,OAAO;IACzB;IACA,MAAMA,OAAO,GAAG1B,WAAW,CAAC2B,oBAAoB,CAAC1B,QAAQ,CAAC,CAAC2B,KAAK,CAAEC,KAAK,IAAK;MACxE;MACA;MACA,IAAId,gBAAgB,CAACU,OAAO,EAAEC,OAAO,KAAKA,OAAO,EAAE;QAC/CX,gBAAgB,CAACU,OAAO,GAAG,IAAI;MACnC;MACA,MAAMI,KAAK;IACf,CAAC,CAAC;IACFd,gBAAgB,CAACU,OAAO,GAAG;MAAExB,QAAQ;MAAED,WAAW;MAAE0B;IAAQ,CAAC;IAC7D,OAAOA,OAAO;EAClB,CAAC,EAAE,CAACzB,QAAQ,EAAED,WAAW,CAAC,CAAC;;EAE3B;EACA,MAAM8B,mBAAmB,GAAG,IAAAP,kBAAW,EAAC,MAAM;IAC1CxB,iBAAiB,CAAC,QAAQ,CAAC;EAC/B,CAAC,EAAE,CAACA,iBAAiB,CAAC,CAAC;;EAEvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMgC,oBAAoB,GAAG,IAAAR,kBAAW,EACpC,OAAOS,GAAsB,EAAEC,KAA8B,KAAoB;IAC7E,IAAI,CAAChC,QAAQ,EAAE;MACX,IAAAiC,2BAAe,EAACD,KAAK,CAAC;MACtBH,mBAAmB,CAAC,CAAC;MACrB;IACJ;IACA,IAAI,CAACrC,gBAAgB,EAAE;MACnB,IAAAyC,2BAAe,EAACD,KAAK,CAAC;MACtBE,YAAM,CAACN,KAAK,CACR,0HAA0H,EAC1HO,SAAS,EACT;QAAEC,SAAS,EAAE,iBAAiB;QAAEpC,QAAQ;QAAEqC,WAAW,EAAEN,GAAG,CAACO;MAAK,CACpE,CAAC;MACD;IACJ;IAEA,IAAIpB,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACvB,MAAMoB,MAAM,GAAG,MAAMrC,mBAAmB,CAAC;QACrCsC,WAAW,EAAEhD,gBAAgB;QAC7B;QACA;QACA;QACA;QACA,IAAIyB,kBAAkB,GAAG;UAAEe;QAAM,CAAC,GAAG,CAAC,CAAC;MAC3C,CAAC,CAAC;MACF,IAAIO,MAAM,CAACE,MAAM,KAAK,QAAQ,EAAE;QAC5BP,YAAM,CAACQ,IAAI,CACP,wCAAwCH,MAAM,CAACI,MAAM,GAAG,EACxD;UAAEP,SAAS,EAAE,iBAAiB;UAAEC,WAAW,EAAEN,GAAG,CAACO;QAAK,CAAC,EACvDC,MAAM,CAACK,WACX,CAAC;MACL;MACA;IACJ;;IAEA;IACA;IACA,MAAM,CAACC,IAAI,EAAErC,KAAK,CAAC,GAAG,MAAMsC,OAAO,CAACC,GAAG,CAAC,CAAC,IAAAC,sBAAgB,EAAC,CAAC,EAAE,IAAAC,wBAAkB,EAAC,CAAC,CAAC,CAAC;IACnF,MAAMC,YAAY,GAAG,IAAAC,4BAAsB,EAAC;MACxCnD,QAAQ;MACRwC,WAAW,EAAEhD,gBAAgB;MAC7BgB,KAAK;MACL4C,aAAa,EAAEP,IAAI,CAACO;IACxB,CAAC,CAAC;IACF,MAAM;MAAEC;IAAY,CAAC,GAAG,MAAM,IAAAC,uCAAsB,EAACJ,YAAY,EAAE1D,gBAAgB,CAAC;IACpF,IAAIC,aAAa,EAAE;MACfA,aAAa,CAAC;QAAE4D,WAAW;QAAE7C,KAAK;QAAE+C,YAAY,EAAEV,IAAI,CAACU;MAAa,CAAC,CAAC;MACtE;IACJ;IACArB,YAAM,CAACQ,IAAI,CACP,yLAAyL,EACzL;MAAEN,SAAS,EAAE,iBAAiB;MAAEC,WAAW,EAAEN,GAAG,CAACO;IAAK,CAC1D,CAAC;EACL,CAAC,EACD,CACItC,QAAQ,EACRR,gBAAgB,EAChBC,aAAa,EACboC,mBAAmB,EACnB3B,mBAAmB,EACnBe,kBAAkB,CAE1B,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAMuC,WAAW,GAAG,IAAAlC,kBAAW,EAC3B,MAAOU,KAA8B,IAAoB;IACrD,IAAIhB,UAAU,CAACQ,OAAO,EAAE;MACpB,IAAAS,2BAAe,EAACD,KAAK,CAAC;MACtB;IACJ;IACAhB,UAAU,CAACQ,OAAO,GAAG,IAAI;IACzB,IAAI;MACA,MAAMiC,SAAS,GAAGpC,wBAAwB,CAAC,CAAC;MAC5C,IAAI,CAACoC,SAAS,EAAE;QACZ,IAAAxB,2BAAe,EAACD,KAAK,CAAC;QACtBH,mBAAmB,CAAC,CAAC;QACrB;MACJ;MACA,IAAIE,GAAsB;MAC1B,IAAI;QACAA,GAAG,GAAG,MAAM0B,SAAS;MACzB,CAAC,CAAC,OAAO7B,KAAK,EAAE;QACZ,IAAAK,2BAAe,EAACD,KAAK,CAAC;QACtBE,YAAM,CAACQ,IAAI,CACP,gFAAgF,EAChF;UAAEN,SAAS,EAAE,iBAAiB;UAAEpC;QAAS,CAAC,EAC1C4B,KACJ,CAAC;QACDC,mBAAmB,CAAC,CAAC;QACrB;MACJ;MACA,IAAIE,GAAG,CAAC2B,IAAI,KAAK,aAAa,IAAI,CAAC3B,GAAG,CAAC4B,UAAU,EAAE;QAC/C,MAAM7B,oBAAoB,CAACC,GAAG,EAAEC,KAAK,CAAC;QACtC;MACJ;MACA,IAAAC,2BAAe,EAACD,KAAK,CAAC;MACtBH,mBAAmB,CAAC,CAAC;IACzB,CAAC,SAAS;MACNb,UAAU,CAACQ,OAAO,GAAG,KAAK;IAC9B;EACJ,CAAC,EACD,CAACH,wBAAwB,EAAEQ,mBAAmB,EAAEC,oBAAoB,EAAE9B,QAAQ,CAClF,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAM4D,WAAW,GAAG,IAAAtC,kBAAW,EAAC,MAAM;IAClC,IAAIpC,OAAO,EAAE;MACTA,OAAO,CAAC,CAAC;MACT;IACJ;IACA,KAAKsE,WAAW,CAACvC,kBAAkB,GAAG,IAAA4C,0BAAc,EAAC,CAAC,GAAG,IAAI,CAAC;EAClE,CAAC,EAAE,CAAC3E,OAAO,EAAEsE,WAAW,EAAEvC,kBAAkB,CAAC,CAAC;;EAE9C;EACA,IAAIb,eAAe,IAAI,CAACb,qBAAqB,EAAE,OAAO,IAAI;EAE1D,MAAMuE,gBAAgB,GAAGxE,QAAQ,IAAIe,SAAS,IAAII,WAAW;;EAE7D;EACA;EACA,MAAMsD,aAA4B,GAC9B9E,OAAO,KAAK,WAAW,GAAG,SAAS,GAAGA,OAAO,KAAK,SAAS,GAAG,SAAS,GAAG,WAAW;;EAEzF;EACA;EACA,MAAM+E,WAAW,GAAG/E,OAAO,KAAK,WAAW;EAC3C,MAAMgF,SAAS,GAAGD,WAAW,GAAG,SAAS,GAAGtE,KAAK,CAACwE,MAAM,CAACC,OAAO;EAChE,MAAMC,eAAe,GAAGJ,WAAW,GAAGtE,KAAK,CAACwE,MAAM,CAACC,OAAO,GAAG,SAAS;;EAEtE;EACA;EACA,MAAME,KAAK,GAAGhF,IAAI,IAAIO,CAAC,CAAC,iCAAiC,CAAC;EAE1D,oBACI,IAAAb,WAAA,CAAAuF,GAAA,EAAC9F,OAAA,CAAA+F,MAAM;IACHtF,OAAO,EAAE8E,aAAc;IACvB7E,OAAO,EAAE0E,WAAY;IACrBtE,QAAQ,EAAEwE,gBAAiB;IAC3B3E,KAAK,EAAEA,KAAM;IACbC,SAAS,EAAE,CAAC8B,qBAAQ,CAACC,EAAE,KAAK,KAAK,GAAG;MAAEqD,UAAU,EAAE;IAAM,CAAC,GAAG,IAAI,EAAEpF,SAAS,CAAE;IAC7EqF,IAAI,eACA,IAAA1F,WAAA,CAAAuF,GAAA,EAAC3F,SAAA,CAAA+F,QAAQ;MACLC,MAAM,EAAE,EAAG;MACXC,KAAK,EAAEX,SAAU;MACjBY,WAAW,EAAET,eAAgB;MAC7BjF,KAAK,EAAE;QAAE2F,WAAW,EAAE;MAAG;IAAE,CAC9B,CACJ;IAAAC,QAAA,EAEA1E,SAAS,IAAII,WAAW,GAAGb,CAAC,CAAC,yBAAyB,CAAC,GAAGyE;EAAK,CAC5D,CAAC;AAEjB,CAAC;AAACW,OAAA,CAAAhG,eAAA,GAAAA,eAAA;AAAA,IAAAiG,QAAA,GAAAD,OAAA,CAAAE,OAAA,GAEalG,eAAe","ignoreList":[]}

package/lib/commonjs/ui/components/OxySignInRequestSurface.js

@@ -0,0 +1,147 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = exports.OxySignInRequestSurface = void 0;
+var _reactNative = require("react-native");
+var _button = require("@oxyhq/bloom/button");
+var _theme = require("@oxyhq/bloom/theme");
+var _typography = require("@oxyhq/bloom/typography");
+var _useI18n = require("../hooks/useI18n.js");
+var _TroubleDisclosure = _interopRequireDefault(require("./authChooser/TroubleDisclosure.js"));
+var _primitives = require("./authChooser/primitives.js");
+var _requestSurfaces = require("./authChooser/requestSurfaces.js");
+var _signInProgress = require("./authChooser/signInProgress.js");
+var _styles = require("./authChooser/styles.js");
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * `OxySignInRequestSurface` — the in-flight "Sign in with Oxy" request, rendered
+ * from plain facts (issue #691, Phase 5).
+ *
+ * The user already performed their one action. From here the surface only
+ * REPORTS: the route-appropriate primary visual, the status line for the
+ * progress it was told about, and nothing else at the same weight. Alternatives
+ * stay behind "Having trouble?" until the chosen route could not be carried out,
+ * at which point they ARE the content and render plainly.
+ *
+ * PRESENTATIONAL AND HEADLESS-FRIENDLY. It owns no request, no controller, no
+ * polling, and no state of its own: everything it draws is a prop. That is what
+ * lets the two hosts of this surface share ONE implementation —
+ *
+ *  - `OxyAuthChooser`'s `SignInRequestView`, driven by `AccountDialogController`'s
+ *    device flow;
+ *  - the auth.oxy.so IdP's OAuth-bound lane, whose request carries an OAuth
+ *    binding the account dialog's session has no concept of.
+ *
+ * It resolves only what every `@oxyhq/services` consumer already has in context:
+ * the Bloom theme (`useTheme`) and the SDK's own locale dictionary (`useI18n`,
+ * the `accountSwitcher.*` copy in all 11 locales). Host-specific copy — the
+ * labels on {@link OxySignInRequestSurfaceProps.subordinate} and
+ * {@link OxySignInRequestSurfaceProps.alternatives} — arrives already localized.
+ *
+ * TWO THINGS IT DELIBERATELY DOES NOT DO:
+ *  - it renders no failure REASON. A host surfaces that the way its own shell
+ *    demands (the account dialog toasts it — errors never render inline there;
+ *    a full page may show a banner around this surface). The surface only takes
+ *    the fact that the request failed, and offers the way forward.
+ *  - it derives nothing from {@link OxySignInRequestSurfaceProps.qrPayload}.
+ *    Application identity, origin, and scopes are resolved server-side by the
+ *    approver (Commons), never read out of a payload here — the plate encodes it
+ *    and shows nothing about it.
+ *
+ * SECRETS: every prop is safe to render. There is no `sessionToken` (the secret
+ * claim/finalize credential), no bearer, and no authorization code — a host
+ * keeps those in its own controller, and no prop on this component invites one.
+ */
+
+/** Shared empty list, so an omitted action bundle allocates nothing per render. */
+const NO_ACTIONS = [];
+const OxySignInRequestSurface = ({
+  route,
+  progress,
+  qrPayload = null,
+  routeFailed = false,
+  failed = false,
+  onRetry,
+  onAcquireCommons,
+  subordinate = NO_ACTIONS,
+  alternatives = NO_ACTIONS
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const subordinateLinks = subordinate.map(action => /*#__PURE__*/(0, _jsxRuntime.jsx)(_primitives.SubtleLink, {
+    label: action.label,
+    theme: theme,
+    onPress: action.onPress,
+    disabled: action.disabled,
+    testID: action.key
+  }, action.key));
+
+  // A failed request has no working primary route left. Its REASON is the host's
+  // to surface (toast / banner); all this owes the user is the way forward.
+  if (failed) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+      style: _styles.authChooserStyles.centeredBlock,
+      children: [onRetry ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_button.Button, {
+        variant: "primary",
+        onPress: onRetry,
+        style: _styles.authChooserStyles.primaryButton,
+        children: t('common.actions.tryAgain')
+      }) : null, subordinateLinks, /*#__PURE__*/(0, _jsxRuntime.jsx)(_TroubleDisclosure.default, {
+        actions: alternatives,
+        revealed: true,
+        theme: theme,
+        t: t
+      })]
+    });
+  }
+
+  // Commons is absent: acquiring it IS the primary route, not a fallback, so it
+  // renders as the one primary action and no route progress is reported (there is
+  // no route to report on until the host says otherwise).
+  if (onAcquireCommons) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+      style: _styles.authChooserStyles.centeredBlock,
+      children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_requestSurfaces.GetCommonsPrompt, {
+        theme: theme,
+        t: t,
+        onGetCommons: onAcquireCommons
+      }), subordinateLinks, /*#__PURE__*/(0, _jsxRuntime.jsx)(_TroubleDisclosure.default, {
+        actions: alternatives,
+        revealed: false,
+        theme: theme,
+        t: t
+      })]
+    });
+  }
+  const status = (0, _signInProgress.signInProgressLabel)(progress, route, t);
+  return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+    style: _styles.authChooserStyles.centeredBlock,
+    children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_requestSurfaces.RequestPrimarySurface, {
+      route: route,
+      progress: progress,
+      qrPayload: qrPayload,
+      theme: theme,
+      t: t
+    }), status ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+      style: [_styles.authChooserStyles.mutedText, {
+        color: theme.colors.textSecondary
+      }],
+      accessibilityLiveRegion: "polite",
+      testID: "signin-progress",
+      children: status
+    }) : null, subordinateLinks, /*#__PURE__*/(0, _jsxRuntime.jsx)(_TroubleDisclosure.default, {
+      actions: alternatives,
+      revealed: routeFailed,
+      theme: theme,
+      t: t
+    })]
+  });
+};
+exports.OxySignInRequestSurface = OxySignInRequestSurface;
+var _default = exports.default = OxySignInRequestSurface;
+//# sourceMappingURL=OxySignInRequestSurface.js.map

package/lib/commonjs/ui/components/OxySignInRequestSurface.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","_button","_theme","_typography","_useI18n","_TroubleDisclosure","_interopRequireDefault","_primitives","_requestSurfaces","_signInProgress","_styles","_jsxRuntime","e","__esModule","default","NO_ACTIONS","OxySignInRequestSurface","route","progress","qrPayload","routeFailed","failed","onRetry","onAcquireCommons","subordinate","alternatives","theme","useTheme","t","useI18n","subordinateLinks","map","action","jsx","SubtleLink","label","onPress","disabled","testID","key","jsxs","View","style","styles","centeredBlock","children","Button","variant","primaryButton","actions","revealed","GetCommonsPrompt","onGetCommons","status","signInProgressLabel","RequestPrimarySurface","Text","mutedText","color","colors","textSecondary","accessibilityLiveRegion","exports","_default"],"sourceRoot":"../../../../src","sources":["ui/components/OxySignInRequestSurface.tsx"],"mappings":";;;;;;AAyCA,IAAAA,YAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AAEA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,kBAAA,GAAAC,sBAAA,CAAAN,OAAA;AACA,IAAAO,WAAA,GAAAP,OAAA;AACA,IAAAQ,gBAAA,GAAAR,OAAA;AACA,IAAAS,eAAA,GAAAT,OAAA;AACA,IAAAU,OAAA,GAAAV,OAAA;AAAmE,IAAAW,WAAA,GAAAX,OAAA;AAAA,SAAAM,uBAAAM,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAnDnE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAgBA;AACA,MAAMG,UAA6C,GAAG,EAAE;AAkEjD,MAAMC,uBAA+D,GAAGA,CAAC;EAC9EC,KAAK;EACLC,QAAQ;EACRC,SAAS,GAAG,IAAI;EAChBC,WAAW,GAAG,KAAK;EACnBC,MAAM,GAAG,KAAK;EACdC,OAAO;EACPC,gBAAgB;EAChBC,WAAW,GAAGT,UAAU;EACxBU,YAAY,GAAGV;AACjB,CAAC,KAAK;EACJ,MAAMW,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM;IAAEC;EAAE,CAAC,GAAG,IAAAC,gBAAO,EAAC,CAAC;EAEvB,MAAMC,gBAAgB,GAAGN,WAAW,CAACO,GAAG,CAAEC,MAAM,iBAC9C,IAAArB,WAAA,CAAAsB,GAAA,EAAC1B,WAAA,CAAA2B,UAAU;IAETC,KAAK,EAAEH,MAAM,CAACG,KAAM;IACpBT,KAAK,EAAEA,KAAM;IACbU,OAAO,EAAEJ,MAAM,CAACI,OAAQ;IACxBC,QAAQ,EAAEL,MAAM,CAACK,QAAS;IAC1BC,MAAM,EAAEN,MAAM,CAACO;EAAI,GALdP,MAAM,CAACO,GAMb,CACF,CAAC;;EAEF;EACA;EACA,IAAIlB,MAAM,EAAE;IACV,oBACE,IAAAV,WAAA,CAAA6B,IAAA,EAACzC,YAAA,CAAA0C,IAAI;MAACC,KAAK,EAAEC,yBAAM,CAACC,aAAc;MAAAC,QAAA,GAC/BvB,OAAO,gBACN,IAAAX,WAAA,CAAAsB,GAAA,EAAChC,OAAA,CAAA6C,MAAM;QAACC,OAAO,EAAC,SAAS;QAACX,OAAO,EAAEd,OAAQ;QAACoB,KAAK,EAAEC,yBAAM,CAACK,aAAc;QAAAH,QAAA,EACrEjB,CAAC,CAAC,yBAAyB;MAAC,CACvB,CAAC,GACP,IAAI,EACPE,gBAAgB,eACjB,IAAAnB,WAAA,CAAAsB,GAAA,EAAC5B,kBAAA,CAAAS,OAAiB;QAACmC,OAAO,EAAExB,YAAa;QAACyB,QAAQ;QAACxB,KAAK,EAAEA,KAAM;QAACE,CAAC,EAAEA;MAAE,CAAE,CAAC;IAAA,CACrE,CAAC;EAEX;;EAEA;EACA;EACA;EACA,IAAIL,gBAAgB,EAAE;IACpB,oBACE,IAAAZ,WAAA,CAAA6B,IAAA,EAACzC,YAAA,CAAA0C,IAAI;MAACC,KAAK,EAAEC,yBAAM,CAACC,aAAc;MAAAC,QAAA,gBAChC,IAAAlC,WAAA,CAAAsB,GAAA,EAACzB,gBAAA,CAAA2C,gBAAgB;QAACzB,KAAK,EAAEA,KAAM;QAACE,CAAC,EAAEA,CAAE;QAACwB,YAAY,EAAE7B;MAAiB,CAAE,CAAC,EACvEO,gBAAgB,eACjB,IAAAnB,WAAA,CAAAsB,GAAA,EAAC5B,kBAAA,CAAAS,OAAiB;QAACmC,OAAO,EAAExB,YAAa;QAACyB,QAAQ,EAAE,KAAM;QAACxB,KAAK,EAAEA,KAAM;QAACE,CAAC,EAAEA;MAAE,CAAE,CAAC;IAAA,CAC7E,CAAC;EAEX;EAEA,MAAMyB,MAAM,GAAG,IAAAC,mCAAmB,EAACpC,QAAQ,EAAED,KAAK,EAAEW,CAAC,CAAC;EAEtD,oBACE,IAAAjB,WAAA,CAAA6B,IAAA,EAACzC,YAAA,CAAA0C,IAAI;IAACC,KAAK,EAAEC,yBAAM,CAACC,aAAc;IAAAC,QAAA,gBAChC,IAAAlC,WAAA,CAAAsB,GAAA,EAACzB,gBAAA,CAAA+C,qBAAqB;MACpBtC,KAAK,EAAEA,KAAM;MACbC,QAAQ,EAAEA,QAAS;MACnBC,SAAS,EAAEA,SAAU;MACrBO,KAAK,EAAEA,KAAM;MACbE,CAAC,EAAEA;IAAE,CACN,CAAC,EACDyB,MAAM,gBACL,IAAA1C,WAAA,CAAAsB,GAAA,EAAC9B,WAAA,CAAAqD,IAAI;MACHd,KAAK,EAAE,CAACC,yBAAM,CAACc,SAAS,EAAE;QAAEC,KAAK,EAAEhC,KAAK,CAACiC,MAAM,CAACC;MAAc,CAAC,CAAE;MACjEC,uBAAuB,EAAC,QAAQ;MAChCvB,MAAM,EAAC,iBAAiB;MAAAO,QAAA,EAEvBQ;IAAM,CACH,CAAC,GACL,IAAI,EACPvB,gBAAgB,eACjB,IAAAnB,WAAA,CAAAsB,GAAA,EAAC5B,kBAAA,CAAAS,OAAiB;MAACmC,OAAO,EAAExB,YAAa;MAACyB,QAAQ,EAAE9B,WAAY;MAACM,KAAK,EAAEA,KAAM;MAACE,CAAC,EAAEA;IAAE,CAAE,CAAC;EAAA,CACnF,CAAC;AAEX,CAAC;AAACkC,OAAA,CAAA9C,uBAAA,GAAAA,uBAAA;AAAA,IAAA+C,QAAA,GAAAD,OAAA,CAAAhD,OAAA,GAEaE,uBAAuB","ignoreList":[]}