@oxyhq/services 28.0.0 → 30.0.0

package/lib/module/ui/navigation/surfaces.js

@@ -1,325 +0,0 @@
-"use strict";
-
-import { createElement } from 'react';
-import { surfaces as bloomSurfaces } from '@oxyhq/bloom/surfaces';
-import { getSurfaceConfig } from "./surfaceRegistry.js";
-import { createSurfaceNavStack } from "./surfaceNavStack.js";
-
-/**
- * The SDK's typed surface API — a route registry layered on top of Bloom's
- * content-agnostic surface stack (`@oxyhq/bloom/surfaces`).
- *
- * `present(route)` opens a NEW Bloom surface (the DEPTH axis) whose content is a
- * {@link SurfaceScreen} driven by the route's own {@link SurfaceNavStack} (the
- * NAV-WITHIN axis). Navigating within that surface mutates its nav stack and
- * re-renders the SAME Bloom surface; presenting stacks another surface on top.
- *
- * Bloom coordinates z-order / backdrop / dismiss across every surface (SDK's and
- * apps'), so nothing clashes.
- */
-
-/** Responsive "sheet": bottom sheet on narrow, centered card on wide. */
-const SHEET_PLACEMENT = {
-  base: 'bottom',
-  md: 'center'
-};
-
-/** Full-bleed black canvas for the `'fullScreen'` approximation (image picker). */
-const FULLSCREEN_SURFACE_STYLE = {
-  backgroundColor: '#000000',
-  overflow: 'hidden'
-};
-
-/**
- * Every SDK screen owns its own background + content padding + scroll region
- * (they were authored for the bare `BottomSheet`). So the shared `Dialog` must
- * NOT add its own `contentPadding` on top (that double-pads) — it owns only the
- * structural chrome: the surface card, the size cap (`maxHeightRatio`) and the
- * scroll boundary. `contentPadding: 0` makes the screen's own padding the single
- * source, matching the image-picker (`fullScreen`) surface.
- */
-const SDK_SURFACE_CHROME = {
-  contentPadding: 0,
-  maxHeightRatio: 0.9
-};
-
-/** Map a route's presentation taxonomy onto concrete Bloom `Dialog` options. */
-function bloomOptionsFor(config) {
-  // Threaded onto every placement so a route that owns its own scroll container
-  // (`scrollable: false`) opts out of the Dialog's internal ScrollView.
-  const scrollable = config.scrollable;
-  // Surface-level morph opt-out (the DEPTH axis is untouched — this only governs
-  // whether the panel reshapes when the content is swapped in place). Each frame
-  // additionally declares its own opt-out through `useDialogFrame` in
-  // `SurfaceScreen`, so a surface can morph for most routes and not for one.
-  const morph = config.morph;
-  // Nav-header mode marker: turns on the Dialog's OWN sticky gradient nav bar +
-  // large collapsing title over its scroll content. The title/subtitle/action
-  // slots are contributed at runtime by the mounted screen via `useSurfaceHeader`
-  // (resolved in `SurfaceScreen`), so the seed here just enables the scaffold.
-  const header = config.header ? {
-    largeTitle: true
-  } : undefined;
-  switch (config.presentation) {
-    case 'center':
-      return {
-        placement: 'center',
-        scrollable,
-        header,
-        morph,
-        ...SDK_SURFACE_CHROME
-      };
-    case 'drawer':
-      return {
-        placement: {
-          base: 'bottom',
-          md: 'left'
-        },
-        scrollable,
-        header,
-        morph,
-        ...SDK_SURFACE_CHROME
-      };
-    case 'fullScreen':
-      // Approximate a full-screen surface with the shared `Dialog`: a tall
-      // sheet / large centered card, flush content, a black canvas and
-      // programmatic-only dismiss — matching the shipped image-picker Dialog.
-      return {
-        placement: SHEET_PLACEMENT,
-        contentPadding: 0,
-        maxWidth: 640,
-        maxHeightRatio: 0.9,
-        dismissOnBackdrop: false,
-        scrollable,
-        morph,
-        style: FULLSCREEN_SURFACE_STYLE,
-        panelStyle: FULLSCREEN_SURFACE_STYLE
-      };
-    default:
-      return {
-        placement: SHEET_PLACEMENT,
-        scrollable,
-        header,
-        morph,
-        ...SDK_SURFACE_CHROME
-      };
-  }
-}
-
-/**
- * A live handle to a presented SDK surface. Exposes DEPTH controls (`dismiss`,
- * `result`) and NAV-WITHIN controls (`navigate`/`replace`/`goBack`/`setStep`) that
- * drive this surface's own nav stack. Held by the `showBottomSheet` adapter (base
- * surface) and by `OxyContext` (the AccountDialog surface).
- */
-
-/**
- * The type-erased handle the `showBottomSheet` adapter needs from a tracked
- * surface: what it hosts, and how to drive/dismiss it. Kept result-type-free so
- * the (generic) `SurfaceInstance<K>` never has to be widened into a shared array.
- * Exported so `OxyContext` can hold the surface it MORPHS the account dialog into
- * (see {@link topRouteSurface}).
- */
-
-/**
- * Active SDK "route" surfaces (the `showBottomSheet` lineage), bottom → top.
- * `present`/`presentRoute` register here; `presentDetached` (AccountDialog) does
- * NOT, so the base-sheet navigation logic never treats the account modal as a
- * navigable base. Entries self-remove when their surface is dismissed.
- */
-const activeRouteSurfaces = [];
-
-/**
- * The frontmost DETACHED surface (the AccountDialog), while open. Detached
- * surfaces are kept OUT of `activeRouteSurfaces` so `closeAllRouteSurfaces` never
- * touches them — but the AccountDialog IS a valid morph target: a result-bearing
- * flow opened from within it (the account-menu hero avatar → `ChangeAvatar`) must
- * morph INTO it, not stack a new surface behind it. Invariant: whenever set, this
- * surface is frontmost — every account-menu action that opens a tracked surface
- * (Manage, Help, …) dismisses the dialog FIRST, so the two never overlap.
- */
-let detachedFrontSurface = null;
-function presentInternal(route, props, opts, track) {
-  const navStack = createSurfaceNavStack(route, props);
-  const config = getSurfaceConfig(route, props);
-  const bloomOpts = {
-    label: route,
-    ...bloomOptionsFor(config),
-    ...opts
-  };
-
-  // Lazy-resolved to break the surfaces.ts <-> SurfaceScreen module cycle: a
-  // mounted SurfaceScreen presents further surfaces (it imports these presenters),
-  // while presenting one renders a SurfaceScreen. Deferring the component to call
-  // time (both modules are initialized by then) makes the import graph one-way —
-  // the same idiom `routes.ts` uses to lazy-load screen components.
-  const SurfaceScreen = require('../components/SurfaceScreen').default;
-  const result = bloomSurfaces.present(surface => /*#__PURE__*/createElement(SurfaceScreen, {
-    navStack,
-    surface,
-    dismissOnBackdrop: bloomOpts.dismissOnBackdrop ?? true
-  }), bloomOpts);
-  const instance = {
-    route,
-    navigate: (nextRoute, nextProps) => {
-      const top = navStack.getTop();
-      if (top.route === nextRoute) navStack.replace(nextRoute, nextProps);else navStack.navigate(nextRoute, nextProps);
-    },
-    replace: (nextRoute, nextProps) => navStack.replace(nextRoute, nextProps),
-    goBack: () => navStack.goBack(),
-    canGoBack: () => navStack.canGoBack(),
-    setStep: step => navStack.setStep(step),
-    beginFlow: (nextRoute, nextProps) => navStack.beginFlow(nextRoute, nextProps),
-    dismiss: dismissResult => navStack.requestDismiss(dismissResult),
-    result
-  };
-
-  // If the surface is torn down (backdrop, `closeAll`, host unmount) while a
-  // result-bearing sub-flow is still open, settle that flow so an awaiting caller
-  // never hangs. Runs for tracked and detached surfaces alike.
-  result.finally(() => navStack.abandonActiveFlow());
-  const tracked = {
-    route: instance.route,
-    navigate: instance.navigate,
-    goBack: instance.goBack,
-    beginFlow: instance.beginFlow,
-    dismiss: () => instance.dismiss()
-  };
-  if (track) {
-    activeRouteSurfaces.push(tracked);
-    result.finally(() => {
-      const index = activeRouteSurfaces.indexOf(tracked);
-      if (index >= 0) activeRouteSurfaces.splice(index, 1);
-    });
-  } else {
-    // Detached (the AccountDialog): NOT in the closeAll lineage, but recorded as
-    // the frontmost morph target so a flow opened from within it morphs IN.
-    detachedFrontSurface = tracked;
-    result.finally(() => {
-      if (detachedFrontSurface === tracked) detachedFrontSurface = null;
-    });
-  }
-  return instance;
-}
-
-/**
- * Present a NEW route surface on top of the stack (the DEPTH axis). Resolves with
- * the value the surface is dismissed with. Registered in the route-surface stack.
- */
-export function present(route, props, opts) {
-  return presentInternal(route, props ?? {}, opts, true);
-}
-
-/**
- * Present a surface that is NOT part of the `showBottomSheet` base-navigation
- * lineage (the AccountDialog modal). Otherwise identical to {@link present}.
- */
-export function presentDetached(route, props, opts) {
-  return presentInternal(route, props ?? {}, opts, false);
-}
-
-/**
- * Untyped present for the adapter, the nav helpers, and the `SurfaceScreen`
- * binding (where the route is a runtime value and its props are already erased).
- */
-export function presentRoute(route, props) {
-  return presentInternal(route, props ?? {}, undefined, true);
-}
-
-/** The top-most active route surface, or `undefined` when none are open. */
-export function topRouteSurface() {
-  return activeRouteSurfaces[activeRouteSurfaces.length - 1];
-}
-
-/**
- * The frontmost surface a result-bearing flow should morph INTO: the detached
- * AccountDialog if open (it sits on top of everything), else the top tracked
- * route surface. Used by {@link openWithinOrPresent} so the account-menu hero
- * avatar morphs the dialog into `ChangeAvatar` instead of stacking a new surface.
- */
-export function topMorphableSurface() {
-  return detachedFrontSurface ?? topRouteSurface();
-}
-
-/**
- * Dismiss every active route surface (the whole `showBottomSheet` session). The
- * AccountDialog is untracked, so it is untouched. Iterates a snapshot because
- * `dismiss` mutates `activeRouteSurfaces` asynchronously as surfaces settle.
- */
-export function closeAllRouteSurfaces() {
-  for (const instance of [...activeRouteSurfaces].reverse()) instance.dismiss();
-}
-
-/**
- * Drill in from a screen. From inside a surface the DEFAULT is to navigate WITHIN
- * it — the panel MORPHS from the current frame's size to the next's. EVERY screen
- * morphs; a NEW surface is stacked on top ONLY when the target route declares
- * `stacks` (reserved for genuine overlays — none today, since action sheets /
- * confirms / prompts are Bloom-raw `surfaces.present` calls outside this
- * registry). A stacked surface gets its own backdrop + entry animation; dismissing
- * it unwinds back to the surface that opened it.
- */
-export function navigateWithinOrPresent(navStack, route, props) {
-  const nextProps = props ?? {};
-  if (getSurfaceConfig(route, nextProps).stacks) {
-    presentRoute(route, nextProps);
-  } else {
-    navStack.navigate(route, nextProps);
-  }
-}
-
-/** Replace variant of {@link navigateWithinOrPresent} (swaps the top frame). */
-export function replaceWithinOrPresent(navStack, route, props) {
-  const nextProps = props ?? {};
-  if (getSurfaceConfig(route, nextProps).stacks) {
-    presentRoute(route, nextProps);
-  } else {
-    navStack.replace(route, nextProps);
-  }
-}
-
-/**
- * Open a result-bearing route the SAME way a drill-in navigates (the morph-by-
- * default rule), but returning the route's dismissal RESULT to the caller.
- *
- * When a surface is already open and the target morphs into it (the default —
- * anything not marked `stacks`), it runs as a SUB-FLOW inside that surface: the
- * panel morphs from the current screen into the target, and the promise resolves
- * with the target's `dismiss(result)` (or `undefined` when cancelled), popping
- * back to the caller's frame WITHOUT closing the host. Otherwise (no surface, or a
- * route that stacks) it presents a fresh surface and resolves with its dismissal —
- * identical to the historical `present(route).result`.
- *
- * The entry seam for the avatar picker AND its nested "My Oxy files" media
- * selector: each awaits its result whether it morphed into the caller's surface
- * or opened cold, with no morph-vs-present branch of its own.
- */
-export function openWithinOrPresent(route, props) {
-  const nextProps = props ?? {};
-  const host = topMorphableSurface();
-  if (host && !getSurfaceConfig(route, nextProps).stacks) {
-    // Morph: run as a sub-flow inside the host. The erased `Promise<unknown>` is
-    // narrowed to this route's result at the typed boundary (the sub-flow resolves
-    // with exactly the value a descendant screen passes to `dismiss(result)`).
-    return host.beginFlow(route, nextProps);
-  }
-  return present(route, props).result;
-}
-
-/**
- * The SDK's imperative surface API (a module singleton). `present` is the typed
- * route presenter; `dismissAll` unwinds the whole session. Not yet exported from
- * the package root — the public `surfaces`/`useSurfaces` API lands in a later
- * phase; for P1 the internal adapters (`showBottomSheet`, `openAccountDialog`)
- * are the only public entry points.
- */
-export const surfaces = {
-  present: (route, props, opts) => present(route, props, opts).result,
-  dismissAll: closeAllRouteSurfaces
-};
-
-/** Hook form of {@link surfaces} (stable singleton). */
-export function useSurfaces() {
-  return surfaces;
-}
-//# sourceMappingURL=surfaces.js.map

package/lib/module/ui/navigation/surfaces.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["createElement","surfaces","bloomSurfaces","getSurfaceConfig","createSurfaceNavStack","SHEET_PLACEMENT","base","md","FULLSCREEN_SURFACE_STYLE","backgroundColor","overflow","SDK_SURFACE_CHROME","contentPadding","maxHeightRatio","bloomOptionsFor","config","scrollable","morph","header","largeTitle","undefined","presentation","placement","maxWidth","dismissOnBackdrop","style","panelStyle","activeRouteSurfaces","detachedFrontSurface","presentInternal","route","props","opts","track","navStack","bloomOpts","label","SurfaceScreen","require","default","result","present","surface","instance","navigate","nextRoute","nextProps","top","getTop","replace","goBack","canGoBack","setStep","step","beginFlow","dismiss","dismissResult","requestDismiss","finally","abandonActiveFlow","tracked","push","index","indexOf","splice","presentDetached","presentRoute","topRouteSurface","length","topMorphableSurface","closeAllRouteSurfaces","reverse","navigateWithinOrPresent","stacks","replaceWithinOrPresent","openWithinOrPresent","host","dismissAll","useSurfaces"],"sourceRoot":"../../../../src","sources":["ui/navigation/surfaces.ts"],"mappings":";;AAAA,SAASA,aAAa,QAAQ,OAAO;AAErC,SACEC,QAAQ,IAAIC,aAAa,QAGpB,uBAAuB;AAE9B,SACEC,gBAAgB,QAIX,sBAAmB;AAC1B,SAASC,qBAAqB,QAA8B,sBAAmB;;AAE/E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,MAAMC,eAAe,GAAG;EAAEC,IAAI,EAAE,QAAQ;EAAEC,EAAE,EAAE;AAAS,CAAU;;AAEjE;AACA,MAAMC,wBAAmC,GAAG;EAAEC,eAAe,EAAE,SAAS;EAAEC,QAAQ,EAAE;AAAS,CAAC;;AAE9F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,kBAAkB,GAAG;EAAEC,cAAc,EAAE,CAAC;EAAEC,cAAc,EAAE;AAAI,CAAU;;AAE9E;AACA,SAASC,eAAeA,CAACC,MAA0B,EAAkB;EACnE;EACA;EACA,MAAMC,UAAU,GAAGD,MAAM,CAACC,UAAU;EACpC;EACA;EACA;EACA;EACA,MAAMC,KAAK,GAAGF,MAAM,CAACE,KAAK;EAC1B;EACA;EACA;EACA;EACA,MAAMC,MAAM,GAAGH,MAAM,CAACG,MAAM,GAAG;IAAEC,UAAU,EAAE;EAAK,CAAC,GAAGC,SAAS;EAC/D,QAAQL,MAAM,CAACM,YAAY;IACzB,KAAK,QAAQ;MACX,OAAO;QAAEC,SAAS,EAAE,QAAQ;QAAEN,UAAU;QAAEE,MAAM;QAAED,KAAK;QAAE,GAAGN;MAAmB,CAAC;IAClF,KAAK,QAAQ;MACX,OAAO;QACLW,SAAS,EAAE;UAAEhB,IAAI,EAAE,QAAQ;UAAEC,EAAE,EAAE;QAAO,CAAC;QACzCS,UAAU;QACVE,MAAM;QACND,KAAK;QACL,GAAGN;MACL,CAAC;IACH,KAAK,YAAY;MACf;MACA;MACA;MACA,OAAO;QACLW,SAAS,EAAEjB,eAAe;QAC1BO,cAAc,EAAE,CAAC;QACjBW,QAAQ,EAAE,GAAG;QACbV,cAAc,EAAE,GAAG;QACnBW,iBAAiB,EAAE,KAAK;QACxBR,UAAU;QACVC,KAAK;QACLQ,KAAK,EAAEjB,wBAAwB;QAC/BkB,UAAU,EAAElB;MACd,CAAC;IACH;MACE,OAAO;QAAEc,SAAS,EAAEjB,eAAe;QAAEW,UAAU;QAAEE,MAAM;QAAED,KAAK;QAAE,GAAGN;MAAmB,CAAC;EAC3F;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAcA;AACA;AACA;AACA;AACA;AACA;AACA;;AAUA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMgB,mBAAqC,GAAG,EAAE;;AAEhD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAIC,oBAA2C,GAAG,IAAI;AAEtD,SAASC,eAAeA,CACtBC,KAAQ,EACRC,KAA8B,EAC9BC,IAAgC,EAChCC,KAAc,EACM;EACpB,MAAMC,QAAQ,GAAG9B,qBAAqB,CAAC0B,KAAK,EAAEC,KAAK,CAAC;EACpD,MAAMhB,MAAM,GAAGZ,gBAAgB,CAAC2B,KAAK,EAAEC,KAAK,CAAC;EAC7C,MAAMI,SAAyB,GAAG;IAAEC,KAAK,EAAEN,KAAK;IAAE,GAAGhB,eAAe,CAACC,MAAM,CAAC;IAAE,GAAGiB;EAAK,CAAC;;EAEvF;EACA;EACA;EACA;EACA;EACA,MAAMK,aAAa,GACjBC,OAAO,CAAC,6BAA6B,CAAC,CACtCC,OAAO;EAET,MAAMC,MAAM,GAAGtC,aAAa,CAACuC,OAAO,CAAoBC,OAAwB,iBAC9E1C,aAAa,CAACqC,aAAa,EAAE;IAC3BH,QAAQ;IACRQ,OAAO;IACPlB,iBAAiB,EAAEW,SAAS,CAACX,iBAAiB,IAAI;EACpD,CAAC,CAAC,EACFW,SACF,CAAC;EAED,MAAMQ,QAA4B,GAAG;IACnCb,KAAK;IACLc,QAAQ,EAAEA,CAACC,SAAS,EAAEC,SAAS,KAAK;MAClC,MAAMC,GAAG,GAAGb,QAAQ,CAACc,MAAM,CAAC,CAAC;MAC7B,IAAID,GAAG,CAACjB,KAAK,KAAKe,SAAS,EAAEX,QAAQ,CAACe,OAAO,CAACJ,SAAS,EAAEC,SAAS,CAAC,CAAC,KAC/DZ,QAAQ,CAACU,QAAQ,CAACC,SAAS,EAAEC,SAAS,CAAC;IAC9C,CAAC;IACDG,OAAO,EAAEA,CAACJ,SAAS,EAAEC,SAAS,KAAKZ,QAAQ,CAACe,OAAO,CAACJ,SAAS,EAAEC,SAAS,CAAC;IACzEI,MAAM,EAAEA,CAAA,KAAMhB,QAAQ,CAACgB,MAAM,CAAC,CAAC;IAC/BC,SAAS,EAAEA,CAAA,KAAMjB,QAAQ,CAACiB,SAAS,CAAC,CAAC;IACrCC,OAAO,EAAGC,IAAI,IAAKnB,QAAQ,CAACkB,OAAO,CAACC,IAAI,CAAC;IACzCC,SAAS,EAAEA,CAACT,SAAS,EAAEC,SAAS,KAAKZ,QAAQ,CAACoB,SAAS,CAACT,SAAS,EAAEC,SAAS,CAAC;IAC7ES,OAAO,EAAGC,aAAa,IAAKtB,QAAQ,CAACuB,cAAc,CAACD,aAAa,CAAC;IAClEhB;EACF,CAAC;;EAED;EACA;EACA;EACAA,MAAM,CAACkB,OAAO,CAAC,MAAMxB,QAAQ,CAACyB,iBAAiB,CAAC,CAAC,CAAC;EAElD,MAAMC,OAAuB,GAAG;IAC9B9B,KAAK,EAAEa,QAAQ,CAACb,KAAK;IACrBc,QAAQ,EAAED,QAAQ,CAACC,QAAQ;IAC3BM,MAAM,EAAEP,QAAQ,CAACO,MAAM;IACvBI,SAAS,EAAEX,QAAQ,CAACW,SAAS;IAC7BC,OAAO,EAAEA,CAAA,KAAMZ,QAAQ,CAACY,OAAO,CAAC;EAClC,CAAC;EACD,IAAItB,KAAK,EAAE;IACTN,mBAAmB,CAACkC,IAAI,CAACD,OAAO,CAAC;IACjCpB,MAAM,CAACkB,OAAO,CAAC,MAAM;MACnB,MAAMI,KAAK,GAAGnC,mBAAmB,CAACoC,OAAO,CAACH,OAAO,CAAC;MAClD,IAAIE,KAAK,IAAI,CAAC,EAAEnC,mBAAmB,CAACqC,MAAM,CAACF,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC;EACJ,CAAC,MAAM;IACL;IACA;IACAlC,oBAAoB,GAAGgC,OAAO;IAC9BpB,MAAM,CAACkB,OAAO,CAAC,MAAM;MACnB,IAAI9B,oBAAoB,KAAKgC,OAAO,EAAEhC,oBAAoB,GAAG,IAAI;IACnE,CAAC,CAAC;EACJ;EAEA,OAAOe,QAAQ;AACjB;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASF,OAAOA,CACrBX,KAAQ,EACRC,KAAuB,EACvBC,IAAqB,EACD;EACpB,OAAOH,eAAe,CAACC,KAAK,EAAGC,KAAK,IAAI,CAAC,CAAC,EAA8BC,IAAI,EAAE,IAAI,CAAC;AACrF;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASiC,eAAeA,CAC7BnC,KAAQ,EACRC,KAAuB,EACvBC,IAAqB,EACD;EACpB,OAAOH,eAAe,CAACC,KAAK,EAAGC,KAAK,IAAI,CAAC,CAAC,EAA8BC,IAAI,EAAE,KAAK,CAAC;AACtF;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASkC,YAAYA,CAACpC,KAAgB,EAAEC,KAA+B,EAAmB;EAC/F,OAAOF,eAAe,CAACC,KAAK,EAAEC,KAAK,IAAI,CAAC,CAAC,EAAEX,SAAS,EAAE,IAAI,CAAC;AAC7D;;AAEA;AACA,OAAO,SAAS+C,eAAeA,CAAA,EAA+B;EAC5D,OAAOxC,mBAAmB,CAACA,mBAAmB,CAACyC,MAAM,GAAG,CAAC,CAAC;AAC5D;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAAA,EAA+B;EAChE,OAAOzC,oBAAoB,IAAIuC,eAAe,CAAC,CAAC;AAClD;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,qBAAqBA,CAAA,EAAS;EAC5C,KAAK,MAAM3B,QAAQ,IAAI,CAAC,GAAGhB,mBAAmB,CAAC,CAAC4C,OAAO,CAAC,CAAC,EAAE5B,QAAQ,CAACY,OAAO,CAAC,CAAC;AAC/E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASiB,uBAAuBA,CACrCtC,QAAyB,EACzBJ,KAAgB,EAChBC,KAA+B,EACzB;EACN,MAAMe,SAAS,GAAGf,KAAK,IAAI,CAAC,CAAC;EAC7B,IAAI5B,gBAAgB,CAAC2B,KAAK,EAAEgB,SAAS,CAAC,CAAC2B,MAAM,EAAE;IAC7CP,YAAY,CAACpC,KAAK,EAAEgB,SAAS,CAAC;EAChC,CAAC,MAAM;IACLZ,QAAQ,CAACU,QAAQ,CAACd,KAAK,EAAEgB,SAAS,CAAC;EACrC;AACF;;AAEA;AACA,OAAO,SAAS4B,sBAAsBA,CACpCxC,QAAyB,EACzBJ,KAAgB,EAChBC,KAA+B,EACzB;EACN,MAAMe,SAAS,GAAGf,KAAK,IAAI,CAAC,CAAC;EAC7B,IAAI5B,gBAAgB,CAAC2B,KAAK,EAAEgB,SAAS,CAAC,CAAC2B,MAAM,EAAE;IAC7CP,YAAY,CAACpC,KAAK,EAAEgB,SAAS,CAAC;EAChC,CAAC,MAAM;IACLZ,QAAQ,CAACe,OAAO,CAACnB,KAAK,EAAEgB,SAAS,CAAC;EACpC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS6B,mBAAmBA,CACjC7C,KAAQ,EACRC,KAAuB,EACgB;EACvC,MAAMe,SAAS,GAAIf,KAAK,IAAI,CAAC,CAA6B;EAC1D,MAAM6C,IAAI,GAAGP,mBAAmB,CAAC,CAAC;EAClC,IAAIO,IAAI,IAAI,CAACzE,gBAAgB,CAAC2B,KAAK,EAAEgB,SAAS,CAAC,CAAC2B,MAAM,EAAE;IACtD;IACA;IACA;IACA,OAAOG,IAAI,CAACtB,SAAS,CAACxB,KAAK,EAAEgB,SAAS,CAAC;EACzC;EACA,OAAOL,OAAO,CAACX,KAAK,EAAEC,KAAK,CAAC,CAACS,MAAM;AACrC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMvC,QAAQ,GAAG;EACtBwC,OAAO,EAAEA,CAAsBX,KAAQ,EAAEC,KAAuB,EAAEC,IAAqB,KACrFS,OAAO,CAACX,KAAK,EAAEC,KAAK,EAAEC,IAAI,CAAC,CAACQ,MAAM;EACpCqC,UAAU,EAAEP;AACd,CAAU;;AAEV;AACA,OAAO,SAASQ,WAAWA,CAAA,EAAoB;EAC7C,OAAO7E,QAAQ;AACjB","ignoreList":[]}

package/lib/module/ui/oauth/browserAuthTransport.js

@@ -1,167 +0,0 @@
-"use strict";
-
-/**
- * The single web entry point for third-party "Sign in with Oxy".
- *
- * Picks the transport (`popup` or `redirect`), drives it, and returns ONE typed
- * result — so callers (`OxySignInButton`, and any RP with its own button) never
- * touch `window.open`, `postMessage`, or the token exchange themselves.
- *
- * Popup mode keeps the relying party mounted: its route, scroll position, and
- * unsaved state survive because the tab never navigates. Redirect mode is the
- * compatibility fallback, and is also where popup mode lands when the browser
- * blocks the window — a blocked popup must still sign the user in, not dead-end.
- *
- * Native is NOT handled here: `openAuthorizeUrlNative` (an in-app auth session)
- * remains the native lane and is untouched by this module.
- */
-
-import { logger, persistOAuthHandshake } from '@oxyhq/core';
-import { redirectToAuthorize } from "../components/oauthNavigation.js";
-import { isWebBrowser } from "../utils/isWebBrowser.js";
-import { completeOAuthCode } from "./completeOAuthCode.js";
-import { prepareAuthorizeRequest } from "./oauthHandshake.js";
-import { awaitOAuthPopupResult, closeOAuthPopup, navigateOAuthPopup, openOAuthPopup } from "./oauthPopup.js";
-
-/** Provider-owned wiring for a web sign-in — everything that is not per-press. */
-
-/** Per-press inputs for {@link startWebOAuthSignIn}. */
-
-export async function startWebOAuthSignIn(context, options) {
-  if (!isWebBrowser()) {
-    closeOAuthPopup(options.popup ?? null);
-    return {
-      status: 'unsupported',
-      reason: 'no-browser'
-    };
-  }
-  if (context.identityBound) {
-    closeOAuthPopup(options.popup ?? null);
-    return {
-      status: 'unsupported',
-      reason: 'identity-bound'
-    };
-  }
-  if (!context.clientId) {
-    closeOAuthPopup(options.popup ?? null);
-    return {
-      status: 'unsupported',
-      reason: 'missing-client-id'
-    };
-  }
-
-  // Claim the window BEFORE the first `await` below, so a caller that invoked us
-  // straight from the click still has gesture attribution. An explicit `null`
-  // means the caller already tried and was blocked.
-  const popup = context.mode === 'popup' && options.popup === undefined ? openOAuthPopup() : options.popup ?? null;
-  if (context.mode === 'redirect') {
-    closeOAuthPopup(popup);
-    return startRedirectSignIn(context, options, 'redirect-mode');
-  }
-  if (!popup) {
-    logger.warn('OAuth sign-in popup was blocked; falling back to a full-page redirect', {
-      component: 'browserAuthTransport'
-    });
-    return startRedirectSignIn(context, options, 'popup-blocked');
-  }
-  try {
-    const prepared = await prepareAuthorizeRequest({
-      clientId: context.clientId,
-      redirectUri: options.redirectUri,
-      authorizeBaseUrl: context.authorizeBaseUrl,
-      scope: options.scope,
-      responseMode: 'web_message'
-    });
-    if (!navigateOAuthPopup(popup, prepared.authorizeUrl)) {
-      return startRedirectSignIn(context, options, 'popup-navigation-failed');
-    }
-    const outcome = await awaitOAuthPopupResult({
-      popup,
-      expectedOrigin: prepared.authorizeOrigin,
-      expectedState: prepared.handshake.state,
-      redirectUri: options.redirectUri,
-      ...(options.timeoutMs !== undefined ? {
-        timeoutMs: options.timeoutMs
-      } : {})
-    });
-    switch (outcome.kind) {
-      case 'code':
-        {
-          const completion = await completeOAuthCode({
-            oxyServices: context.oxyServices,
-            clientId: context.clientId,
-            code: outcome.code,
-            returnedState: outcome.state,
-            handshake: prepared.handshake,
-            redirectUri: options.redirectUri,
-            commitSession: context.commitSession
-          });
-          return completion.ok ? {
-            status: 'signed-in'
-          } : {
-            status: 'failed',
-            reason: completion.reason
-          };
-        }
-      case 'oauth-error':
-        return {
-          status: 'failed',
-          reason: 'idp-error',
-          description: outcome.errorDescription ?? outcome.error
-        };
-      case 'state-mismatch':
-        return {
-          status: 'failed',
-          reason: 'state-mismatch'
-        };
-      case 'closed':
-        return {
-          status: 'cancelled'
-        };
-      case 'timed-out':
-        return {
-          status: 'timed-out'
-        };
-      case 'unsupported':
-        return {
-          status: 'unsupported',
-          reason: 'no-browser'
-        };
-    }
-  } finally {
-    // Covers throws after open (prepare/exchange/commit) and every settled outcome.
-    closeOAuthPopup(popup);
-  }
-}
-
-/**
- * Full-page hand-off to the IdP. The document is destroyed by the navigation, so
- * the handshake MUST reach `sessionStorage` first — without it the return trip
- * cannot validate `state`, and starting the redirect anyway would strand the
- * user at a callback that can only refuse them.
- */
-async function startRedirectSignIn(context, options, via) {
-  // Narrowed by the caller; repeated here so this helper is safe on its own.
-  if (!context.clientId) return {
-    status: 'unsupported',
-    reason: 'missing-client-id'
-  };
-  const prepared = await prepareAuthorizeRequest({
-    clientId: context.clientId,
-    redirectUri: options.redirectUri,
-    authorizeBaseUrl: context.authorizeBaseUrl,
-    scope: options.scope
-  });
-  if (!persistOAuthHandshake(prepared.handshake.state, prepared.handshake.codeVerifier, options.redirectUri)) {
-    return {
-      status: 'failed',
-      reason: 'handshake-storage'
-    };
-  }
-  redirectToAuthorize(prepared.authorizeUrl);
-  return {
-    status: 'redirecting',
-    via
-  };
-}
-//# sourceMappingURL=browserAuthTransport.js.map

package/lib/module/ui/oauth/browserAuthTransport.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["logger","persistOAuthHandshake","redirectToAuthorize","isWebBrowser","completeOAuthCode","prepareAuthorizeRequest","awaitOAuthPopupResult","closeOAuthPopup","navigateOAuthPopup","openOAuthPopup","startWebOAuthSignIn","context","options","popup","status","reason","identityBound","clientId","mode","undefined","startRedirectSignIn","warn","component","prepared","redirectUri","authorizeBaseUrl","scope","responseMode","authorizeUrl","outcome","expectedOrigin","authorizeOrigin","expectedState","handshake","state","timeoutMs","kind","completion","oxyServices","code","returnedState","commitSession","ok","description","errorDescription","error","via","codeVerifier"],"sourceRoot":"../../../../src","sources":["ui/oauth/browserAuthTransport.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,MAAM,EAAEC,qBAAqB,QAAQ,aAAa;AAE3D,SAASC,mBAAmB,QAAQ,kCAA+B;AACnE,SAASC,YAAY,QAAQ,0BAAuB;AACpD,SAASC,iBAAiB,QAAQ,wBAAqB;AACvD,SAASC,uBAAuB,QAAQ,qBAAkB;AAC1D,SAASC,qBAAqB,EAAEC,eAAe,EAAEC,kBAAkB,EAAEC,cAAc,QAAQ,iBAAc;;AASzG;;AAeA;;AAwBA,OAAO,eAAeC,mBAAmBA,CACvCC,OAAiC,EACjCC,OAAmC,EACJ;EAC/B,IAAI,CAACT,YAAY,CAAC,CAAC,EAAE;IACnBI,eAAe,CAACK,OAAO,CAACC,KAAK,IAAI,IAAI,CAAC;IACtC,OAAO;MAAEC,MAAM,EAAE,aAAa;MAAEC,MAAM,EAAE;IAAa,CAAC;EACxD;EACA,IAAIJ,OAAO,CAACK,aAAa,EAAE;IACzBT,eAAe,CAACK,OAAO,CAACC,KAAK,IAAI,IAAI,CAAC;IACtC,OAAO;MAAEC,MAAM,EAAE,aAAa;MAAEC,MAAM,EAAE;IAAiB,CAAC;EAC5D;EACA,IAAI,CAACJ,OAAO,CAACM,QAAQ,EAAE;IACrBV,eAAe,CAACK,OAAO,CAACC,KAAK,IAAI,IAAI,CAAC;IACtC,OAAO;MAAEC,MAAM,EAAE,aAAa;MAAEC,MAAM,EAAE;IAAoB,CAAC;EAC/D;;EAEA;EACA;EACA;EACA,MAAMF,KAAK,GACTF,OAAO,CAACO,IAAI,KAAK,OAAO,IAAIN,OAAO,CAACC,KAAK,KAAKM,SAAS,GAAGV,cAAc,CAAC,CAAC,GAAGG,OAAO,CAACC,KAAK,IAAI,IAAI;EAEpG,IAAIF,OAAO,CAACO,IAAI,KAAK,UAAU,EAAE;IAC/BX,eAAe,CAACM,KAAK,CAAC;IACtB,OAAOO,mBAAmB,CAACT,OAAO,EAAEC,OAAO,EAAE,eAAe,CAAC;EAC/D;EACA,IAAI,CAACC,KAAK,EAAE;IACVb,MAAM,CAACqB,IAAI,CAAC,uEAAuE,EAAE;MACnFC,SAAS,EAAE;IACb,CAAC,CAAC;IACF,OAAOF,mBAAmB,CAACT,OAAO,EAAEC,OAAO,EAAE,eAAe,CAAC;EAC/D;EAEA,IAAI;IACF,MAAMW,QAAQ,GAAG,MAAMlB,uBAAuB,CAAC;MAC7CY,QAAQ,EAAEN,OAAO,CAACM,QAAQ;MAC1BO,WAAW,EAAEZ,OAAO,CAACY,WAAW;MAChCC,gBAAgB,EAAEd,OAAO,CAACc,gBAAgB;MAC1CC,KAAK,EAAEd,OAAO,CAACc,KAAK;MACpBC,YAAY,EAAE;IAChB,CAAC,CAAC;IAEF,IAAI,CAACnB,kBAAkB,CAACK,KAAK,EAAEU,QAAQ,CAACK,YAAY,CAAC,EAAE;MACrD,OAAOR,mBAAmB,CAACT,OAAO,EAAEC,OAAO,EAAE,yBAAyB,CAAC;IACzE;IAEA,MAAMiB,OAAO,GAAG,MAAMvB,qBAAqB,CAAC;MAC1CO,KAAK;MACLiB,cAAc,EAAEP,QAAQ,CAACQ,eAAe;MACxCC,aAAa,EAAET,QAAQ,CAACU,SAAS,CAACC,KAAK;MACvCV,WAAW,EAAEZ,OAAO,CAACY,WAAW;MAChC,IAAIZ,OAAO,CAACuB,SAAS,KAAKhB,SAAS,GAAG;QAAEgB,SAAS,EAAEvB,OAAO,CAACuB;MAAU,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC;IAEF,QAAQN,OAAO,CAACO,IAAI;MAClB,KAAK,MAAM;QAAE;UACX,MAAMC,UAAU,GAAG,MAAMjC,iBAAiB,CAAC;YACzCkC,WAAW,EAAE3B,OAAO,CAAC2B,WAAW;YAChCrB,QAAQ,EAAEN,OAAO,CAACM,QAAQ;YAC1BsB,IAAI,EAAEV,OAAO,CAACU,IAAI;YAClBC,aAAa,EAAEX,OAAO,CAACK,KAAK;YAC5BD,SAAS,EAAEV,QAAQ,CAACU,SAAS;YAC7BT,WAAW,EAAEZ,OAAO,CAACY,WAAW;YAChCiB,aAAa,EAAE9B,OAAO,CAAC8B;UACzB,CAAC,CAAC;UACF,OAAOJ,UAAU,CAACK,EAAE,GAChB;YAAE5B,MAAM,EAAE;UAAY,CAAC,GACvB;YAAEA,MAAM,EAAE,QAAQ;YAAEC,MAAM,EAAEsB,UAAU,CAACtB;UAAO,CAAC;QACrD;MACA,KAAK,aAAa;QAChB,OAAO;UACLD,MAAM,EAAE,QAAQ;UAChBC,MAAM,EAAE,WAAW;UACnB4B,WAAW,EAAEd,OAAO,CAACe,gBAAgB,IAAIf,OAAO,CAACgB;QACnD,CAAC;MACH,KAAK,gBAAgB;QACnB,OAAO;UAAE/B,MAAM,EAAE,QAAQ;UAAEC,MAAM,EAAE;QAAiB,CAAC;MACvD,KAAK,QAAQ;QACX,OAAO;UAAED,MAAM,EAAE;QAAY,CAAC;MAChC,KAAK,WAAW;QACd,OAAO;UAAEA,MAAM,EAAE;QAAY,CAAC;MAChC,KAAK,aAAa;QAChB,OAAO;UAAEA,MAAM,EAAE,aAAa;UAAEC,MAAM,EAAE;QAAa,CAAC;IAC1D;EACF,CAAC,SAAS;IACR;IACAR,eAAe,CAACM,KAAK,CAAC;EACxB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeO,mBAAmBA,CAChCT,OAAiC,EACjCC,OAAmC,EACnCkC,GAA2B,EACI;EAC/B;EACA,IAAI,CAACnC,OAAO,CAACM,QAAQ,EAAE,OAAO;IAAEH,MAAM,EAAE,aAAa;IAAEC,MAAM,EAAE;EAAoB,CAAC;EAEpF,MAAMQ,QAAQ,GAAG,MAAMlB,uBAAuB,CAAC;IAC7CY,QAAQ,EAAEN,OAAO,CAACM,QAAQ;IAC1BO,WAAW,EAAEZ,OAAO,CAACY,WAAW;IAChCC,gBAAgB,EAAEd,OAAO,CAACc,gBAAgB;IAC1CC,KAAK,EAAEd,OAAO,CAACc;EACjB,CAAC,CAAC;EAEF,IAAI,CAACzB,qBAAqB,CACxBsB,QAAQ,CAACU,SAAS,CAACC,KAAK,EACxBX,QAAQ,CAACU,SAAS,CAACc,YAAY,EAC/BnC,OAAO,CAACY,WACV,CAAC,EAAE;IACD,OAAO;MAAEV,MAAM,EAAE,QAAQ;MAAEC,MAAM,EAAE;IAAoB,CAAC;EAC1D;EAEAb,mBAAmB,CAACqB,QAAQ,CAACK,YAAY,CAAC;EAC1C,OAAO;IAAEd,MAAM,EAAE,aAAa;IAAEgC;EAAI,CAAC;AACvC","ignoreList":[]}

package/lib/module/ui/oauth/completeOAuthCode.js

@@ -1,75 +0,0 @@
-"use strict";
-
-/**
- * The ONE path from an OAuth authorization code to a committed session.
- *
- * Both web transports end here — the popup with an in-memory handshake, the
- * redirect lane with one read back from `sessionStorage` — so state validation,
- * the PKCE exchange, the session commit, and handshake cleanup exist exactly
- * once. Duplicating any of those per transport is how the two lanes would drift
- * apart on the security-critical steps.
- *
- * Ordering is deliberate and load-bearing:
- *   1. validate `state` BEFORE anything is sent to the token endpoint,
- *   2. exchange the code for a session,
- *   3. run `cleanup` (drop the persisted handshake / strip `?code=` from the
- *      URL) BEFORE the commit, so a stale code can never re-enter the exchange,
- *   4. commit the session.
- *
- * `cleanup` runs exactly once on EVERY exit path, including a state mismatch
- * and a failed exchange.
- */
-
-import { logger } from '@oxyhq/core';
-
-/** Inputs for {@link completeOAuthCode}. */
-
-export async function completeOAuthCode(input) {
-  let cleaned = false;
-  const runCleanup = () => {
-    if (cleaned) return;
-    cleaned = true;
-    input.cleanup?.();
-  };
-  if (!input.handshake || !input.returnedState || input.handshake.state !== input.returnedState) {
-    logger.warn('OAuth completion rejected: missing or mismatched state', {
-      component: 'completeOAuthCode'
-    });
-    runCleanup();
-    return {
-      ok: false,
-      reason: 'state-mismatch'
-    };
-  }
-  try {
-    const result = await input.oxyServices.exchangeOAuthCode({
-      code: input.code,
-      clientId: input.clientId,
-      redirectUri: input.redirectUri,
-      codeVerifier: input.handshake.codeVerifier
-    });
-    runCleanup();
-    await input.commitSession({
-      sessionId: result.sessionId,
-      accessToken: result.accessToken,
-      deviceId: result.deviceId,
-      deviceSecret: result.deviceSecret,
-      userId: result.user.id,
-      expiresAt: result.expiresAt,
-      user: result.user
-    });
-    return {
-      ok: true
-    };
-  } catch (error) {
-    logger.warn('OAuth code exchange failed', {
-      component: 'completeOAuthCode'
-    }, error);
-    runCleanup();
-    return {
-      ok: false,
-      reason: 'exchange-failed'
-    };
-  }
-}
-//# sourceMappingURL=completeOAuthCode.js.map

package/lib/module/ui/oauth/completeOAuthCode.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["logger","completeOAuthCode","input","cleaned","runCleanup","cleanup","handshake","returnedState","state","warn","component","ok","reason","result","oxyServices","exchangeOAuthCode","code","clientId","redirectUri","codeVerifier","commitSession","sessionId","accessToken","deviceId","deviceSecret","userId","user","id","expiresAt","error"],"sourceRoot":"../../../../src","sources":["ui/oauth/completeOAuthCode.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,MAAM,QAAQ,aAAa;;AAGpC;;AA2BA,OAAO,eAAeC,iBAAiBA,CACrCC,KAA6B,EACG;EAChC,IAAIC,OAAO,GAAG,KAAK;EACnB,MAAMC,UAAU,GAAGA,CAAA,KAAY;IAC7B,IAAID,OAAO,EAAE;IACbA,OAAO,GAAG,IAAI;IACdD,KAAK,CAACG,OAAO,GAAG,CAAC;EACnB,CAAC;EAED,IAAI,CAACH,KAAK,CAACI,SAAS,IAAI,CAACJ,KAAK,CAACK,aAAa,IAAIL,KAAK,CAACI,SAAS,CAACE,KAAK,KAAKN,KAAK,CAACK,aAAa,EAAE;IAC7FP,MAAM,CAACS,IAAI,CAAC,wDAAwD,EAAE;MACpEC,SAAS,EAAE;IACb,CAAC,CAAC;IACFN,UAAU,CAAC,CAAC;IACZ,OAAO;MAAEO,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAiB,CAAC;EAChD;EAEA,IAAI;IACF,MAAMC,MAAM,GAAG,MAAMX,KAAK,CAACY,WAAW,CAACC,iBAAiB,CAAC;MACvDC,IAAI,EAAEd,KAAK,CAACc,IAAI;MAChBC,QAAQ,EAAEf,KAAK,CAACe,QAAQ;MACxBC,WAAW,EAAEhB,KAAK,CAACgB,WAAW;MAC9BC,YAAY,EAAEjB,KAAK,CAACI,SAAS,CAACa;IAChC,CAAC,CAAC;IACFf,UAAU,CAAC,CAAC;IACZ,MAAMF,KAAK,CAACkB,aAAa,CAAC;MACxBC,SAAS,EAAER,MAAM,CAACQ,SAAS;MAC3BC,WAAW,EAAET,MAAM,CAACS,WAAW;MAC/BC,QAAQ,EAAEV,MAAM,CAACU,QAAQ;MACzBC,YAAY,EAAEX,MAAM,CAACW,YAAY;MACjCC,MAAM,EAAEZ,MAAM,CAACa,IAAI,CAACC,EAAE;MACtBC,SAAS,EAAEf,MAAM,CAACe,SAAS;MAC3BF,IAAI,EAAEb,MAAM,CAACa;IACf,CAAC,CAAC;IACF,OAAO;MAAEf,EAAE,EAAE;IAAK,CAAC;EACrB,CAAC,CAAC,OAAOkB,KAAK,EAAE;IACd7B,MAAM,CAACS,IAAI,CAAC,4BAA4B,EAAE;MAAEC,SAAS,EAAE;IAAoB,CAAC,EAAEmB,KAAK,CAAC;IACpFzB,UAAU,CAAC,CAAC;IACZ,OAAO;MAAEO,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAkB,CAAC;EACjD;AACF","ignoreList":[]}

package/lib/module/ui/oauth/oauthHandshake.js

@@ -1,50 +0,0 @@
-"use strict";
-
-/**
- * The RP half of an OAuth authorize request: a fresh CSRF `state` + PKCE pair,
- * and the authorize URL built from them.
- *
- * Both web transports start here, and the ONLY difference between them is one
- * parameter: `popup` asks the IdP for `response_mode=web_message` so the result
- * comes back to `window.opener` instead of navigating the RP's tab. Everything
- * else — `S256` PKCE, exact registered `redirect_uri`, random `state` — is
- * identical, which is what lets both lanes converge on one completion path.
- */
-
-import { buildOAuthAuthorizeUrl, generateOAuthState, generatePkcePair } from '@oxyhq/core';
-
-/** Inputs for {@link prepareAuthorizeRequest}. */
-
-/** A ready-to-use authorize request plus the secrets that finish it. */
-
-/**
- * Generate a fresh handshake and build the authorize URL around it.
- *
- * The verifier is returned to the caller and never stored here: the popup
- * transport keeps it in memory for the lifetime of the attempt, and the
- * redirect transport persists it through `persistOAuthHandshake` because a
- * full-page navigation destroys the running document.
- */
-export async function prepareAuthorizeRequest(params) {
-  const [pkce, state] = await Promise.all([generatePkcePair(), generateOAuthState()]);
-  const authorizeUrl = buildOAuthAuthorizeUrl({
-    authorizeBaseUrl: params.authorizeBaseUrl,
-    clientId: params.clientId,
-    redirectUri: params.redirectUri,
-    scope: params.scope,
-    state,
-    codeChallenge: pkce.codeChallenge,
-    ...(params.responseMode ? {
-      responseMode: params.responseMode
-    } : {})
-  });
-  return {
-    authorizeUrl,
-    authorizeOrigin: new URL(authorizeUrl).origin,
-    handshake: {
-      state,
-      codeVerifier: pkce.codeVerifier
-    }
-  };
-}
-//# sourceMappingURL=oauthHandshake.js.map

package/lib/module/ui/oauth/oauthHandshake.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["buildOAuthAuthorizeUrl","generateOAuthState","generatePkcePair","prepareAuthorizeRequest","params","pkce","state","Promise","all","authorizeUrl","authorizeBaseUrl","clientId","redirectUri","scope","codeChallenge","responseMode","authorizeOrigin","URL","origin","handshake","codeVerifier"],"sourceRoot":"../../../../src","sources":["ui/oauth/oauthHandshake.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,sBAAsB,EAAEC,kBAAkB,EAAEC,gBAAgB,QAAQ,aAAa;;AAG1F;;AAkBA;;AAaA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,uBAAuBA,CAC3CC,MAAqC,EACF;EACnC,MAAM,CAACC,IAAI,EAAEC,KAAK,CAAC,GAAG,MAAMC,OAAO,CAACC,GAAG,CAAC,CAACN,gBAAgB,CAAC,CAAC,EAAED,kBAAkB,CAAC,CAAC,CAAC,CAAC;EAEnF,MAAMQ,YAAY,GAAGT,sBAAsB,CAAC;IAC1CU,gBAAgB,EAAEN,MAAM,CAACM,gBAAgB;IACzCC,QAAQ,EAAEP,MAAM,CAACO,QAAQ;IACzBC,WAAW,EAAER,MAAM,CAACQ,WAAW;IAC/BC,KAAK,EAAET,MAAM,CAACS,KAAK;IACnBP,KAAK;IACLQ,aAAa,EAAET,IAAI,CAACS,aAAa;IACjC,IAAIV,MAAM,CAACW,YAAY,GAAG;MAAEA,YAAY,EAAEX,MAAM,CAACW;IAAa,CAAC,GAAG,CAAC,CAAC;EACtE,CAAC,CAAC;EAEF,OAAO;IACLN,YAAY;IACZO,eAAe,EAAE,IAAIC,GAAG,CAACR,YAAY,CAAC,CAACS,MAAM;IAC7CC,SAAS,EAAE;MAAEb,KAAK;MAAEc,YAAY,EAAEf,IAAI,CAACe;IAAa;EACtD,CAAC;AACH","ignoreList":[]}