@oxyhq/services 26.0.1 → 26.0.4

package/src/ui/utils/fileManagement.ts

@@ -1,7 +1,7 @@
-import type Ionicons from '@expo/vector-icons/Ionicons';
-import type { AssetUploadInput, RNFileDescriptor } from '@oxyhq/core';
-import type { ComponentProps } from 'react';
-import { Platform } from 'react-native';
+import type Ionicons from "@expo/vector-icons/Ionicons";
+import type { AssetUploadInput, RNFileDescriptor } from "@oxyhq/core";
+import type { ComponentProps } from "react";
+import { Platform } from "react-native";
 
 /**
  * Extended File interface that includes a `uri` property for mobile preview support.
@@ -9,7 +9,7 @@ import { Platform } from 'react-native';
  * on the File object for preview rendering.
  */
 interface FileWithUri extends File {
-  uri?: string;
+	uri?: string;
 }
 
 /**
@@ -18,11 +18,11 @@ interface FileWithUri extends File {
  * descriptor straight to FormData on React Native.
  */
 export interface PickerAsset {
-  file?: File | Blob;
-  uri?: string;
-  name?: string | null;
-  mimeType?: string | null;
-  size?: number | null;
+	file?: File | Blob;
+	uri?: string;
+	name?: string | null;
+	mimeType?: string | null;
+	size?: number | null;
 }
 
 /**
@@ -30,37 +30,42 @@ export interface PickerAsset {
  * (carries a URI but is not a real DOM `File` / `Blob` instance).
  */
 export function isRNFileDescriptor(input: unknown): input is RNFileDescriptor {
-  if (!input || typeof input !== 'object') return false;
-  const obj = input as Record<string, unknown>;
-  if (typeof obj.uri !== 'string') return false;
-  if (typeof File !== 'undefined' && input instanceof File) return false;
-  if (typeof Blob !== 'undefined' && input instanceof Blob) return false;
-  return true;
+	if (!input || typeof input !== "object") return false;
+	const obj = input as Record<string, unknown>;
+	if (typeof obj.uri !== "string") return false;
+	if (typeof File !== "undefined" && input instanceof File) return false;
+	if (typeof Blob !== "undefined" && input instanceof Blob) return false;
+	return true;
 }
 
 /**
  * Format file size in bytes to human-readable string
  */
 export function formatFileSize(bytes: number): string {
-    if (bytes === 0) return '0 Bytes';
-    const k = 1024;
-    const sizes = ['Bytes', 'KB', 'MB', 'GB'];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return `${Number.parseFloat((bytes / k ** i).toFixed(2))} ${sizes[i]}`;
+	if (bytes === 0) return "0 Bytes";
+	const k = 1024;
+	const sizes = ["Bytes", "KB", "MB", "GB"];
+	const i = Math.floor(Math.log(bytes) / Math.log(k));
+	return `${Number.parseFloat((bytes / k ** i).toFixed(2))} ${sizes[i]}`;
 }
 
 /**
  * Get icon name for file based on content type
  */
-export function getFileIcon(contentType: string): ComponentProps<typeof Ionicons>['name'] {
-    if (contentType.startsWith('image/')) return 'image';
-    if (contentType.startsWith('video/')) return 'videocam';
-    if (contentType.startsWith('audio/')) return 'musical-notes';
-    if (contentType.includes('pdf')) return 'document-text';
-    if (contentType.includes('word') || contentType.includes('doc')) return 'document';
-    if (contentType.includes('excel') || contentType.includes('sheet')) return 'grid';
-    if (contentType.includes('zip') || contentType.includes('archive')) return 'archive';
-    return 'document-outline';
+export function getFileIcon(
+	contentType: string,
+): ComponentProps<typeof Ionicons>["name"] {
+	if (contentType.startsWith("image/")) return "image";
+	if (contentType.startsWith("video/")) return "videocam";
+	if (contentType.startsWith("audio/")) return "musical-notes";
+	if (contentType.includes("pdf")) return "document-text";
+	if (contentType.includes("word") || contentType.includes("doc"))
+		return "document";
+	if (contentType.includes("excel") || contentType.includes("sheet"))
+		return "grid";
+	if (contentType.includes("zip") || contentType.includes("archive"))
+		return "archive";
+	return "document-outline";
 }
 
 /**
@@ -76,79 +81,90 @@ export function getFileIcon(contentType: string): ComponentProps<typeof Ionicons
  *   'ArrayBuffer' and 'ArrayBufferView' are not supported").
  */
 export async function convertDocumentPickerAssetToFile(
-    doc: PickerAsset,
-    index: number
+	doc: PickerAsset,
+	index: number,
 ): Promise<FileWithUri | RNFileDescriptor | null> {
-    const fileName = doc.name || `file-${index + 1}`;
-    const fileType = doc.mimeType || 'application/octet-stream';
+	const fileName = doc.name || `file-${index + 1}`;
+	const fileType = doc.mimeType || "application/octet-stream";
 
-    // React Native path — return the descriptor as-is. FormData handles it.
-    if (Platform.OS !== 'web') {
-        if (!doc.uri) {
-            throw new Error('Missing file data (no uri property)');
-        }
-        return {
-            uri: doc.uri,
-            type: fileType,
-            name: fileName,
-            size: typeof doc.size === 'number' ? doc.size : undefined,
-        };
-    }
+	// React Native path — return the descriptor as-is. FormData handles it.
+	if (Platform.OS !== "web") {
+		if (!doc.uri) {
+			throw new Error("Missing file data (no uri property)");
+		}
+		return {
+			uri: doc.uri,
+			type: fileType,
+			name: fileName,
+			size: typeof doc.size === "number" ? doc.size : undefined,
+		};
+	}
 
-    try {
-        let file: FileWithUri | null = null;
+	try {
+		let file: FileWithUri | null = null;
 
-        // Priority 1: Use doc.file if available (web native File API).
-        // This is the most efficient path as it doesn't require fetching.
-        if (doc.file && typeof globalThis.File !== 'undefined' && doc.file instanceof globalThis.File) {
-            file = doc.file as FileWithUri;
-            // Ensure file has required properties
-            if (!file.name && doc.name) {
-                // Create new File with proper name if missing
-                file = new globalThis.File([file], doc.name, { type: file.type || fileType });
-            }
-            // Preserve URI for preview if available
-            if (doc.uri) {
-                file.uri = doc.uri;
-            }
-            return file;
-        }
+		// Priority 1: Use doc.file if available (web native File API).
+		// This is the most efficient path as it doesn't require fetching.
+		if (
+			doc.file &&
+			typeof globalThis.File !== "undefined" &&
+			doc.file instanceof globalThis.File
+		) {
+			file = doc.file as FileWithUri;
+			// Ensure file has required properties
+			if (!file.name && doc.name) {
+				// Create new File with proper name if missing
+				file = new globalThis.File([file], doc.name, {
+					type: file.type || fileType,
+				});
+			}
+			// Preserve URI for preview if available
+			if (doc.uri) {
+				file.uri = doc.uri;
+			}
+			return file;
+		}
 
-        // Priority 2: Build File from URI (web blob URLs or http(s) URLs).
-        if (doc.uri) {
-            try {
-                const response = await fetch(doc.uri);
-                if (!response.ok) {
-                    throw new Error(`Failed to fetch file: ${response.statusText}`);
-                }
-                const blob = await response.blob();
-                const resolvedType = doc.mimeType || blob.type || 'application/octet-stream';
-                file = new globalThis.File([blob], fileName, { type: resolvedType }) as FileWithUri;
-                file.uri = doc.uri;
-                return file;
-            } catch (error: unknown) {
-                console.error('Failed to read file from URI:', error);
-                throw new Error(`Failed to load file: ${(error instanceof Error ? error.message : null) || 'Unknown error'}`);
-            }
-        }
+		// Priority 2: Build File from URI (web blob URLs or http(s) URLs).
+		if (doc.uri) {
+			try {
+				const response = await fetch(doc.uri);
+				if (!response.ok) {
+					throw new Error(`Failed to fetch file: ${response.statusText}`);
+				}
+				const blob = await response.blob();
+				const resolvedType =
+					doc.mimeType || blob.type || "application/octet-stream";
+				file = new globalThis.File([blob], fileName, {
+					type: resolvedType,
+				}) as FileWithUri;
+				file.uri = doc.uri;
+				return file;
+			} catch (error: unknown) {
+				console.error("Failed to read file from URI:", error);
+				throw new Error(
+					`Failed to load file: ${(error instanceof Error ? error.message : null) || "Unknown error"}`,
+				);
+			}
+		}
 
-        // No file or URI available - this shouldn't happen with Expo 54
-        throw new Error('Missing file data (no file or uri property)');
-    } catch (error: unknown) {
-        console.error('Error converting document to file:', error);
-        throw error;
-    }
+		// No file or URI available - this shouldn't happen with Expo 54
+		throw new Error("Missing file data (no file or uri property)");
+	} catch (error: unknown) {
+		console.error("Error converting document to file:", error);
+		throw error;
+	}
 }
 
 /**
  * Upload file raw - helper function for file uploads
  */
 export async function uploadFileRaw(
-    file: AssetUploadInput,
-    userId: string,
-    // biome-ignore lint/suspicious/noExplicitAny: OxyServices type cannot be fully resolved due to mixin composition pattern
-    oxyServices: any,
-    visibility?: 'private' | 'public' | 'unlisted'
+	file: AssetUploadInput,
+	userId: string,
+	// biome-ignore lint/suspicious/noExplicitAny: OxyServices type cannot be fully resolved due to mixin composition pattern
+	oxyServices: any,
+	visibility?: "private" | "public" | "unlisted",
 ) {
-    return await oxyServices.uploadRawFile(file, visibility);
+	return await oxyServices.uploadRawFile(file, visibility);
 }

package/src/ui/utils/netConnectivity.ts

@@ -0,0 +1,27 @@
+export interface NetInfoLikeState {
+  isConnected: boolean | null;
+  isInternetReachable?: boolean | null;
+}
+
+/**
+ * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
+ * reports connected but explicitly unreachable (captive portal, no route) counts
+ * as offline.
+ */
+export function isNetConnectivityOnline(state: NetInfoLikeState): boolean {
+  return Boolean(state.isConnected && state.isInternetReachable !== false);
+}
+
+/**
+ * Conservative offline verdict for boot-path probes. Unknown / probing states
+ * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
+ * skips a real sign-in.
+ */
+export function isNetConnectivityExplicitlyOffline(
+  state: NetInfoLikeState | null | undefined,
+): boolean {
+  if (!state) return false;
+  if (state.isConnected === false) return true;
+  if (state.isConnected === true && state.isInternetReachable === false) return true;
+  return false;
+}

package/src/ui/utils/oauthReturn.ts

@@ -3,7 +3,7 @@ import {
   clearOAuthHandshake,
   consumeOAuthReturnPath,
   logger,
-  normalizeOAuthRedirectUri,
+  canonicalizeOAuthRedirectUri,
   readOAuthHandshake,
 } from '@oxyhq/core';
 import { completeOAuthCode } from '../oauth/completeOAuthCode';
@@ -14,12 +14,21 @@ import { isWebBrowser } from './isWebBrowser';
  * When the RP lands with `?code=` after signing in at auth.oxy.so, exchange the
  * code for a device-first session before cold boot runs.
  *
- * This is the REDIRECT transport's return leg. It owns only what is specific to
- * a full-page round trip — reading the code off the URL, recovering the
- * handshake `sessionStorage` carried across the navigation, and cleaning both up
- * afterwards — and delegates state validation, the PKCE exchange, and the
- * session commit to `completeOAuthCode`, the same function the popup transport
- * runs.
+ * This is the REDIRECT transport's return leg. The SDK never starts a full-page
+ * authorize navigation on its own any more (#691 phase 7b), but this lane is
+ * still load-bearing: a browser-BLOCKED sign-in popup falls back to a full-page
+ * redirect (`startWebOAuthSignIn`), and that redirect comes back here.
+ *
+ * It owns only what is specific to a full-page round trip — reading the code off
+ * the URL, recovering the handshake `sessionStorage` carried across the
+ * navigation, and cleaning both up afterwards — and delegates state validation,
+ * the PKCE exchange, and the session commit to `completeOAuthCode`, the same
+ * function the popup transport runs.
+ *
+ * It is also the SINGLE cleanup path for an OAuth `error` landing on the URL:
+ * any `?error=…` (including an `error=login_required` left over from the
+ * now-deleted silent restore) is stripped along with `state` /
+ * `error_description`, and the stale PKCE handshake is cleared.
  */
 export async function tryCompleteOAuthReturn(opts: {
   oxyServices: OxyServices;
@@ -49,13 +58,18 @@ export async function tryCompleteOAuthReturn(opts: {
     return false;
   }
 
+  const handshake = readOAuthHandshake();
+  const redirectUri = canonicalizeOAuthRedirectUri(
+    handshake?.redirectUri ?? opts.authRedirectUri ?? location.origin,
+  );
+
   const result = await completeOAuthCode({
     oxyServices: opts.oxyServices,
     clientId,
     code,
     returnedState: params.get('state'),
-    handshake: readOAuthHandshake(),
-    redirectUri: normalizeOAuthRedirectUri(opts.authRedirectUri ?? location.origin),
+    handshake,
+    redirectUri,
     commitSession: opts.commitSession,
     // Strip the params before the commit so a stale `?code=` cannot re-enter the
     // exchange loop, and read the return path FIRST — clearOAuthHandshake drops
@@ -120,29 +134,5 @@ function stripOAuthParamsFromUrl(): void {
   url.searchParams.delete('state');
   url.searchParams.delete('error');
   url.searchParams.delete('error_description');
-  url.searchParams.delete('hub_sync');
-  replaceUrlAfterOAuthReturn(`${url.pathname}${url.search}${url.hash}`);
-}
-
-/**
- * When auth.oxy.so hub-sync redeem fails, the IdP redirects back with
- * `?hub_sync=failed`. Strip the param and log so cold boot can continue
- * without leaving a stale query string.
- */
-export function consumeHubSyncFailure(): boolean {
-  if (!isWebBrowser()) return false;
-  const location = (globalThis as { location?: Location }).location;
-  if (!location) return false;
-
-  const params = new URLSearchParams(location.search);
-  if (params.get('hub_sync') !== 'failed') return false;
-
-  logger.warn('Hub sync failed — IdP device session may be out of sync', {
-    component: 'hubSync',
-  });
-
-  const url = new URL(location.href);
-  url.searchParams.delete('hub_sync');
   replaceUrlAfterOAuthReturn(`${url.pathname}${url.search}${url.hash}`);
-  return true;
 }

package/src/ui/utils/userUtils.ts

@@ -1,15 +1,12 @@
 /**
  * User display name and date formatting utilities.
  *
- * The display-name helpers are thin wrappers around the canonical
- * `getAccountDisplayName` in `@oxyhq/core`, which handles all the edge cases
- * (missing username, missing name, fallback to truncated `publicKey`, i18n).
+ * Display-name helpers follow the API contract: prefer `name.displayName` when
+ * present, otherwise fall back to the normalized handle via
+ * `getNormalizedUserHandle`.
  */
 
-import {
-  getAccountDisplayName as coreGetAccountDisplayName,
-  type DisplayNameUserShape,
-} from '@oxyhq/core';
+import { getNormalizedUserHandle, type DisplayNameUserShape } from '@oxyhq/core';
 
 /**
  * Formats a date string to a readable format (e.g., "Feb 21, 2025")
@@ -31,44 +28,42 @@ export const formatDate = (dateString: string | undefined | null | Date): string
   }
 };
 
+function readDisplayName(user: DisplayNameUserShape | null | undefined): string {
+  const name = user?.name;
+  if (!name || typeof name !== 'object') return '';
+  return typeof name.displayName === 'string' ? name.displayName.trim() : '';
+}
+
 /**
  * Gets a display name from user data.
  *
- * Prefers full name → composed first+last → username → `Account 0x12345678…`
- * (derived from publicKey) → translated "Unnamed".
- *
- * @param user - User-like object with optional name/username/publicKey
- * @param locale - Optional locale for the final fallback label
+ * Prefers API `name.displayName`, then the normalized handle.
  */
 export const getDisplayName = (
   user: DisplayNameUserShape | null | undefined,
-  locale?: string,
-): string => coreGetAccountDisplayName(user, locale);
+): string => {
+  const displayName = readDisplayName(user);
+  if (displayName) return displayName;
+  return getNormalizedUserHandle(user) ?? '';
+};
 
 /**
- * Gets a short display name (first name or username).
- *
- * Used for compact UI (e.g. greetings). Falls back to the full display name
- * helper, which also handles publicKey-only accounts.
+ * Gets a short display name (first token) for compact UI.
  */
 export const getShortDisplayName = (
   user: DisplayNameUserShape | null | undefined,
-  locale?: string,
 ): string => {
-  if (!user) return coreGetAccountDisplayName(user, locale);
-
-  const name = user.name;
-  if (name && typeof name === 'object') {
-    const first = typeof name.first === 'string' ? name.first.trim() : '';
-    if (first) return first;
-    const full = typeof name.full === 'string' ? name.full.trim() : '';
-    if (full) return full.split(' ')[0];
-  } else if (typeof name === 'string' && name.trim()) {
-    return name.trim().split(' ')[0];
+  const displayName = readDisplayName(user);
+  if (displayName) {
+    const firstToken = displayName.split(/\s+/).find(Boolean);
+    if (firstToken) return firstToken;
   }
 
-  if (typeof user.username === 'string' && user.username.trim()) return user.username.trim();
+  const handle = getNormalizedUserHandle(user);
+  if (handle) {
+    const firstToken = handle.split(/\s+/).find(Boolean);
+    return firstToken ?? handle;
+  }
 
-  // Defer to the canonical helper for publicKey/unnamed fallbacks.
-  return coreGetAccountDisplayName(user, locale);
+  return '';
 };

package/lib/commonjs/ui/oauth/legacyRedirectLanes.js

@@ -1,48 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.allowsAutomaticIdpRedirect = allowsAutomaticIdpRedirect;
-/**
- * The legacy, redirect-mode-only lanes that navigate the RP's TOP-LEVEL window
- * to the IdP without a user gesture.
- *
- * `webAuthMode: 'popup'` exists to guarantee exactly one thing: the relying
- * party never leaves its route. Two mechanics in this SDK break that guarantee,
- * because each replaces the whole document on its own initiative:
- *
- * 1. **Cold-boot silent restore** — a full-page `prompt=none` authorize bounce
- *    to `auth.oxy.so` when the device-secret mint finds no local session
- *    (`maybeStartSilentOAuthRestore`, called from `runProviderColdBoot`).
- * 2. **Post-sign-in hub sync** — a full-page hop to `auth.oxy.so/sync` that
- *    plants this device's credential on the IdP hub so OTHER origins can later
- *    run lane 1 (`syncHubAfterSignIn`, called from the `commitSession` funnel).
- *
- * Both belong to the redirect transport and are kept only for the migration
- * window (issue #691, "Cold boot and cross-domain behavior"). In popup mode a
- * domain with no local credential simply resolves SIGNED OUT, and the user's
- * next explicit "Continue with Oxy" opens the popup — from a real user gesture,
- * never automatically.
- *
- * NOT covered here, and correctly enabled in BOTH modes: navigations the user
- * asked for. When the browser blocks the popup, `startWebOAuthSignIn` still
- * falls back to a full-page redirect rather than dead-ending the sign-in, and
- * `tryCompleteOAuthReturn` still consumes a `?code=` that is already on the URL.
- *
- * PHASE 7b: once the pilot flips the default transport to `'popup'`, this
- * predicate and BOTH lanes above are deleted outright. Grepping this symbol
- * finds every site that has to go.
- */
-
-/**
- * Whether a provider running `webAuthMode` may perform an SDK-initiated,
- * non-gesture, full-page navigation to the IdP.
- *
- * `true` only for `'redirect'` — still the default and the compatibility path,
- * whose behaviour must stay byte-for-byte unchanged.
- */
-function allowsAutomaticIdpRedirect(webAuthMode) {
-  return webAuthMode === 'redirect';
-}
-//# sourceMappingURL=legacyRedirectLanes.js.map

package/lib/commonjs/ui/oauth/legacyRedirectLanes.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["allowsAutomaticIdpRedirect","webAuthMode"],"sourceRoot":"../../../../src","sources":["ui/oauth/legacyRedirectLanes.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASA,0BAA0BA,CAACC,WAAwB,EAAW;EAC5E,OAAOA,WAAW,KAAK,UAAU;AACnC","ignoreList":[]}

package/lib/commonjs/ui/utils/crossOriginRestore.js

@@ -1,140 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.clearCrossOriginRestoreGuards = clearCrossOriginRestoreGuards;
-exports.consumeSilentOAuthError = consumeSilentOAuthError;
-exports.isCrossOriginRestoreBlocked = isCrossOriginRestoreBlocked;
-exports.isSilentRestoreEligibleOrigin = isSilentRestoreEligibleOrigin;
-exports.markCrossOriginRestoreAttempted = markCrossOriginRestoreAttempted;
-exports.maybeStartSilentOAuthRestore = maybeStartSilentOAuthRestore;
-var _core = require("@oxyhq/core");
-var _isWebBrowser = require("./isWebBrowser.js");
-var _oauthReturn = require("./oauthReturn.js");
-var _oauthNavigation = require("../components/oauthNavigation.js");
-function sessionStore() {
-  return globalThis.sessionStorage;
-}
-
-/** True when this tab already attempted cross-origin silent OAuth restore. */
-function isCrossOriginRestoreBlocked() {
-  const store = sessionStore();
-  if (!store) return false;
-  return Boolean(store.getItem(_core.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY) || store.getItem(_core.OXY_SILENT_OAUTH_ATTEMPTED_KEY));
-}
-
-/** Mark restore as attempted — never auto-retry until sign-out clears guards. */
-function markCrossOriginRestoreAttempted() {
-  const store = sessionStore();
-  if (!store) return;
-  store.setItem(_core.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY, '1');
-  store.setItem(_core.OXY_SILENT_OAUTH_ATTEMPTED_KEY, '1');
-}
-
-/** Clear all cross-origin restore loop guards (call on sign-out). */
-function clearCrossOriginRestoreGuards() {
-  const store = sessionStore();
-  if (!store) return;
-  for (const key of [_core.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY, _core.OXY_SILENT_OAUTH_ATTEMPTED_KEY]) {
-    store.removeItem(key);
-  }
-}
-
-/**
- * Whether cold boot should attempt silent cross-origin OAuth restore for the
- * given web origin.
- *
- * Mirrors the hub-sync WRITE gate (`syncHubAfterSignIn`): only OFFICIAL Oxy web
- * origins participate in cross-app SSO — a random third-party / preview origin
- * must never have its tab bounced to the IdP. Additionally, loopback / local-dev
- * origins are EXCLUDED here even though {@link isOfficialWebOrigin} treats them
- * as official: a developer's local app must never be redirected to a hosted IdP
- * on cold boot (it signs in through the in-app dialog instead). The central IdP
- * hub's own origin is excluded to avoid a wasteful self-hop.
- */
-function isSilentRestoreEligibleOrigin(origin) {
-  if ((0, _core.isLoopbackOrigin)(origin)) return false;
-  if ((0, _core.isIdpHubOrigin)()) return false;
-  return (0, _core.isOfficialWebOrigin)(origin);
-}
-/**
- * Top-level redirect to auth.oxy.so/authorize with `prompt=none` for silent
- * cross-origin session restore on all web apps (official + third-party).
- */
-async function maybeStartSilentOAuthRestore(opts) {
-  if (!(0, _isWebBrowser.isWebBrowser)()) return false;
-  const location = globalThis.location;
-  if (!location) return false;
-
-  // Defense-in-depth: never bounce a loopback / non-official / IdP-hub origin to
-  // a hosted authorize endpoint (the caller gates on this too).
-  if (!isSilentRestoreEligibleOrigin(location.origin)) {
-    return false;
-  }
-  if (isCrossOriginRestoreBlocked()) {
-    return false;
-  }
-  const params = new URLSearchParams(location.search);
-  if (params.has('code') || params.has('error')) {
-    return false;
-  }
-  try {
-    const {
-      codeVerifier,
-      codeChallenge
-    } = await (0, _core.generatePkcePair)();
-    const state = await (0, _core.generateOAuthState)();
-    if (!(0, _core.persistOAuthHandshake)(state, codeVerifier)) {
-      return false;
-    }
-    const redirectUri = (0, _core.normalizeOAuthRedirectUri)(opts.redirectUri ?? location.origin);
-    const authorizeUrl = (0, _core.buildOAuthAuthorizeUrl)({
-      authorizeBaseUrl: opts.authorizeBaseUrl,
-      clientId: opts.clientId,
-      redirectUri,
-      state,
-      codeChallenge,
-      scope: opts.scope,
-      prompt: 'none'
-    });
-    markCrossOriginRestoreAttempted();
-    (0, _oauthNavigation.redirectToAuthorize)(authorizeUrl);
-    return true;
-  } catch (error) {
-    _core.logger.warn('Silent OAuth restore skipped', {
-      component: 'crossOriginRestore'
-    }, error);
-    return false;
-  }
-}
-
-/**
- * When the RP lands with OAuth error params from a silent authorize attempt,
- * strip them and return whether the error was terminal for silent restore.
- */
-function consumeSilentOAuthError() {
-  if (!(0, _isWebBrowser.isWebBrowser)()) return null;
-  const location = globalThis.location;
-  const history = globalThis.history;
-  if (!location) return null;
-  const params = new URLSearchParams(location.search);
-  const error = params.get('error');
-  if (error !== 'login_required' && error !== 'consent_required') {
-    return null;
-  }
-  markCrossOriginRestoreAttempted();
-  if (history?.replaceState) {
-    const url = new URL(location.href);
-    url.searchParams.delete('error');
-    url.searchParams.delete('error_description');
-    url.searchParams.delete('state');
-    // Silent restore failed, but the visitor still asked for a specific page.
-    // Put them back on it rather than leaving them on the bare origin the IdP
-    // redirected to.
-    (0, _oauthReturn.replaceUrlAfterOAuthReturn)(`${url.pathname}${url.search}${url.hash}`);
-  }
-  (0, _core.clearOAuthHandshake)();
-  return error;
-}
-//# sourceMappingURL=crossOriginRestore.js.map