@oxyhq/services 30.0.0 → 30.1.0

package/lib/commonjs/ui/navigation/surfaces.js

@@ -0,0 +1,339 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.closeAllRouteSurfaces = closeAllRouteSurfaces;
+exports.navigateWithinOrPresent = navigateWithinOrPresent;
+exports.openWithinOrPresent = openWithinOrPresent;
+exports.present = present;
+exports.presentDetached = presentDetached;
+exports.presentRoute = presentRoute;
+exports.replaceWithinOrPresent = replaceWithinOrPresent;
+exports.surfaces = void 0;
+exports.topMorphableSurface = topMorphableSurface;
+exports.topRouteSurface = topRouteSurface;
+exports.useSurfaces = useSurfaces;
+var _react = require("react");
+var _surfaces = require("@oxyhq/bloom/surfaces");
+var _surfaceRegistry = require("./surfaceRegistry.js");
+var _surfaceNavStack = require("./surfaceNavStack.js");
+var _SurfaceScreen = _interopRequireDefault(require("../components/SurfaceScreen.js"));
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * The SDK's typed surface API — a route registry layered on top of Bloom's
+ * content-agnostic surface stack (`@oxyhq/bloom/surfaces`).
+ *
+ * `present(route)` opens a NEW Bloom surface (the DEPTH axis) whose content is a
+ * {@link SurfaceScreen} driven by the route's own {@link SurfaceNavStack} (the
+ * NAV-WITHIN axis). Navigating within that surface mutates its nav stack and
+ * re-renders the SAME Bloom surface; presenting stacks another surface on top.
+ *
+ * Bloom coordinates z-order / backdrop / dismiss across every surface (SDK's and
+ * apps'), so nothing clashes.
+ */
+
+/** Responsive "sheet": bottom sheet on narrow, centered card on wide. */
+const SHEET_PLACEMENT = {
+  base: 'bottom',
+  md: 'center'
+};
+
+/** Full-bleed black canvas for the `'fullScreen'` approximation (image picker). */
+const FULLSCREEN_SURFACE_STYLE = {
+  backgroundColor: '#000000',
+  overflow: 'hidden'
+};
+
+/**
+ * Every SDK screen owns its own background + content padding + scroll region
+ * (they were authored for the bare `BottomSheet`). So the shared `Dialog` must
+ * NOT add its own `contentPadding` on top (that double-pads) — it owns only the
+ * structural chrome: the surface card, the size cap (`maxHeightRatio`) and the
+ * scroll boundary. `contentPadding: 0` makes the screen's own padding the single
+ * source, matching the image-picker (`fullScreen`) surface.
+ */
+const SDK_SURFACE_CHROME = {
+  contentPadding: 0,
+  maxHeightRatio: 0.9
+};
+
+/** Map a route's presentation taxonomy onto concrete Bloom `Dialog` options. */
+function bloomOptionsFor(config) {
+  // Threaded onto every placement so a route that owns its own scroll container
+  // (`scrollable: false`) opts out of the Dialog's internal ScrollView.
+  const scrollable = config.scrollable;
+  // Surface-level morph opt-out (the DEPTH axis is untouched — this only governs
+  // whether the panel reshapes when the content is swapped in place). Each frame
+  // additionally declares its own opt-out through `useDialogFrame` in
+  // `SurfaceScreen`, so a surface can morph for most routes and not for one.
+  const morph = config.morph;
+  // Nav-header mode marker: turns on the Dialog's OWN sticky gradient nav bar +
+  // large collapsing title over its scroll content. The title/subtitle/action
+  // slots are contributed at runtime by the mounted screen via `useSurfaceHeader`
+  // (resolved in `SurfaceScreen`), so the seed here just enables the scaffold.
+  const header = config.header ? {
+    largeTitle: true
+  } : undefined;
+  switch (config.presentation) {
+    case 'center':
+      return {
+        placement: 'center',
+        scrollable,
+        header,
+        morph,
+        ...SDK_SURFACE_CHROME
+      };
+    case 'drawer':
+      return {
+        placement: {
+          base: 'bottom',
+          md: 'left'
+        },
+        scrollable,
+        header,
+        morph,
+        ...SDK_SURFACE_CHROME
+      };
+    case 'fullScreen':
+      // Approximate a full-screen surface with the shared `Dialog`: a tall
+      // sheet / large centered card, flush content, a black canvas and
+      // programmatic-only dismiss — matching the shipped image-picker Dialog.
+      return {
+        placement: SHEET_PLACEMENT,
+        contentPadding: 0,
+        maxWidth: 640,
+        maxHeightRatio: 0.9,
+        dismissOnBackdrop: false,
+        scrollable,
+        morph,
+        style: FULLSCREEN_SURFACE_STYLE,
+        panelStyle: FULLSCREEN_SURFACE_STYLE
+      };
+    default:
+      return {
+        placement: SHEET_PLACEMENT,
+        scrollable,
+        header,
+        morph,
+        ...SDK_SURFACE_CHROME
+      };
+  }
+}
+
+/**
+ * A live handle to a presented SDK surface. Exposes DEPTH controls (`dismiss`,
+ * `result`) and NAV-WITHIN controls (`navigate`/`replace`/`goBack`/`setStep`) that
+ * drive this surface's own nav stack. Held by the `showBottomSheet` adapter (base
+ * surface) and by `OxyContext` (the AccountDialog surface).
+ */
+
+/**
+ * The type-erased handle the `showBottomSheet` adapter needs from a tracked
+ * surface: what it hosts, and how to drive/dismiss it. Kept result-type-free so
+ * the (generic) `SurfaceInstance<K>` never has to be widened into a shared array.
+ * Exported so `OxyContext` can hold the surface it MORPHS the account dialog into
+ * (see {@link topRouteSurface}).
+ */
+
+/**
+ * Active SDK "route" surfaces (the `showBottomSheet` lineage), bottom → top.
+ * `present`/`presentRoute` register here; `presentDetached` (AccountDialog) does
+ * NOT, so the base-sheet navigation logic never treats the account modal as a
+ * navigable base. Entries self-remove when their surface is dismissed.
+ */
+const activeRouteSurfaces = [];
+
+/**
+ * The frontmost DETACHED surface (the AccountDialog), while open. Detached
+ * surfaces are kept OUT of `activeRouteSurfaces` so `closeAllRouteSurfaces` never
+ * touches them — but the AccountDialog IS a valid morph target: a result-bearing
+ * flow opened from within it (the account-menu hero avatar → `ChangeAvatar`) must
+ * morph INTO it, not stack a new surface behind it. Invariant: whenever set, this
+ * surface is frontmost — every account-menu action that opens a tracked surface
+ * (Manage, Help, …) dismisses the dialog FIRST, so the two never overlap.
+ */
+let detachedFrontSurface = null;
+function presentInternal(route, props, opts, track) {
+  const navStack = (0, _surfaceNavStack.createSurfaceNavStack)(route, props);
+  const config = (0, _surfaceRegistry.getSurfaceConfig)(route, props);
+  const bloomOpts = {
+    label: route,
+    ...bloomOptionsFor(config),
+    ...opts
+  };
+
+  // `SurfaceScreen` is statically imported but only READ here, at presentation
+  // time. That keeps the surfaces.ts <-> SurfaceScreen cycle safe (a mounted
+  // SurfaceScreen imports these presenters, while presenting one renders a
+  // SurfaceScreen) without a `require()` — which ESM output must never contain,
+  // see the note on `screenComponents` in `./routes`.
+  const result = _surfaces.surfaces.present(surface => /*#__PURE__*/(0, _react.createElement)(_SurfaceScreen.default, {
+    navStack,
+    surface,
+    dismissOnBackdrop: bloomOpts.dismissOnBackdrop ?? true
+  }), bloomOpts);
+  const instance = {
+    route,
+    navigate: (nextRoute, nextProps) => {
+      const top = navStack.getTop();
+      if (top.route === nextRoute) navStack.replace(nextRoute, nextProps);else navStack.navigate(nextRoute, nextProps);
+    },
+    replace: (nextRoute, nextProps) => navStack.replace(nextRoute, nextProps),
+    goBack: () => navStack.goBack(),
+    canGoBack: () => navStack.canGoBack(),
+    setStep: step => navStack.setStep(step),
+    beginFlow: (nextRoute, nextProps) => navStack.beginFlow(nextRoute, nextProps),
+    dismiss: dismissResult => navStack.requestDismiss(dismissResult),
+    result
+  };
+
+  // If the surface is torn down (backdrop, `closeAll`, host unmount) while a
+  // result-bearing sub-flow is still open, settle that flow so an awaiting caller
+  // never hangs. Runs for tracked and detached surfaces alike.
+  result.finally(() => navStack.abandonActiveFlow());
+  const tracked = {
+    route: instance.route,
+    navigate: instance.navigate,
+    goBack: instance.goBack,
+    beginFlow: instance.beginFlow,
+    dismiss: () => instance.dismiss()
+  };
+  if (track) {
+    activeRouteSurfaces.push(tracked);
+    result.finally(() => {
+      const index = activeRouteSurfaces.indexOf(tracked);
+      if (index >= 0) activeRouteSurfaces.splice(index, 1);
+    });
+  } else {
+    // Detached (the AccountDialog): NOT in the closeAll lineage, but recorded as
+    // the frontmost morph target so a flow opened from within it morphs IN.
+    detachedFrontSurface = tracked;
+    result.finally(() => {
+      if (detachedFrontSurface === tracked) detachedFrontSurface = null;
+    });
+  }
+  return instance;
+}
+
+/**
+ * Present a NEW route surface on top of the stack (the DEPTH axis). Resolves with
+ * the value the surface is dismissed with. Registered in the route-surface stack.
+ */
+function present(route, props, opts) {
+  return presentInternal(route, props ?? {}, opts, true);
+}
+
+/**
+ * Present a surface that is NOT part of the `showBottomSheet` base-navigation
+ * lineage (the AccountDialog modal). Otherwise identical to {@link present}.
+ */
+function presentDetached(route, props, opts) {
+  return presentInternal(route, props ?? {}, opts, false);
+}
+
+/**
+ * Untyped present for the adapter, the nav helpers, and the `SurfaceScreen`
+ * binding (where the route is a runtime value and its props are already erased).
+ */
+function presentRoute(route, props) {
+  return presentInternal(route, props ?? {}, undefined, true);
+}
+
+/** The top-most active route surface, or `undefined` when none are open. */
+function topRouteSurface() {
+  return activeRouteSurfaces[activeRouteSurfaces.length - 1];
+}
+
+/**
+ * The frontmost surface a result-bearing flow should morph INTO: the detached
+ * AccountDialog if open (it sits on top of everything), else the top tracked
+ * route surface. Used by {@link openWithinOrPresent} so the account-menu hero
+ * avatar morphs the dialog into `ChangeAvatar` instead of stacking a new surface.
+ */
+function topMorphableSurface() {
+  return detachedFrontSurface ?? topRouteSurface();
+}
+
+/**
+ * Dismiss every active route surface (the whole `showBottomSheet` session). The
+ * AccountDialog is untracked, so it is untouched. Iterates a snapshot because
+ * `dismiss` mutates `activeRouteSurfaces` asynchronously as surfaces settle.
+ */
+function closeAllRouteSurfaces() {
+  for (const instance of [...activeRouteSurfaces].reverse()) instance.dismiss();
+}
+
+/**
+ * Drill in from a screen. From inside a surface the DEFAULT is to navigate WITHIN
+ * it — the panel MORPHS from the current frame's size to the next's. EVERY screen
+ * morphs; a NEW surface is stacked on top ONLY when the target route declares
+ * `stacks` (reserved for genuine overlays — none today, since action sheets /
+ * confirms / prompts are Bloom-raw `surfaces.present` calls outside this
+ * registry). A stacked surface gets its own backdrop + entry animation; dismissing
+ * it unwinds back to the surface that opened it.
+ */
+function navigateWithinOrPresent(navStack, route, props) {
+  const nextProps = props ?? {};
+  if ((0, _surfaceRegistry.getSurfaceConfig)(route, nextProps).stacks) {
+    presentRoute(route, nextProps);
+  } else {
+    navStack.navigate(route, nextProps);
+  }
+}
+
+/** Replace variant of {@link navigateWithinOrPresent} (swaps the top frame). */
+function replaceWithinOrPresent(navStack, route, props) {
+  const nextProps = props ?? {};
+  if ((0, _surfaceRegistry.getSurfaceConfig)(route, nextProps).stacks) {
+    presentRoute(route, nextProps);
+  } else {
+    navStack.replace(route, nextProps);
+  }
+}
+
+/**
+ * Open a result-bearing route the SAME way a drill-in navigates (the morph-by-
+ * default rule), but returning the route's dismissal RESULT to the caller.
+ *
+ * When a surface is already open and the target morphs into it (the default —
+ * anything not marked `stacks`), it runs as a SUB-FLOW inside that surface: the
+ * panel morphs from the current screen into the target, and the promise resolves
+ * with the target's `dismiss(result)` (or `undefined` when cancelled), popping
+ * back to the caller's frame WITHOUT closing the host. Otherwise (no surface, or a
+ * route that stacks) it presents a fresh surface and resolves with its dismissal —
+ * identical to the historical `present(route).result`.
+ *
+ * The entry seam for the avatar picker AND its nested "My Oxy files" media
+ * selector: each awaits its result whether it morphed into the caller's surface
+ * or opened cold, with no morph-vs-present branch of its own.
+ */
+function openWithinOrPresent(route, props) {
+  const nextProps = props ?? {};
+  const host = topMorphableSurface();
+  if (host && !(0, _surfaceRegistry.getSurfaceConfig)(route, nextProps).stacks) {
+    // Morph: run as a sub-flow inside the host. The erased `Promise<unknown>` is
+    // narrowed to this route's result at the typed boundary (the sub-flow resolves
+    // with exactly the value a descendant screen passes to `dismiss(result)`).
+    return host.beginFlow(route, nextProps);
+  }
+  return present(route, props).result;
+}
+
+/**
+ * The SDK's imperative surface API (a module singleton). `present` is the typed
+ * route presenter; `dismissAll` unwinds the whole session. Not yet exported from
+ * the package root — the public `surfaces`/`useSurfaces` API lands in a later
+ * phase; for P1 the internal adapters (`showBottomSheet`, `openAccountDialog`)
+ * are the only public entry points.
+ */
+const surfaces = exports.surfaces = {
+  present: (route, props, opts) => present(route, props, opts).result,
+  dismissAll: closeAllRouteSurfaces
+};
+
+/** Hook form of {@link surfaces} (stable singleton). */
+function useSurfaces() {
+  return surfaces;
+}
+//# sourceMappingURL=surfaces.js.map

package/lib/commonjs/ui/navigation/surfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_surfaces","_surfaceRegistry","_surfaceNavStack","_SurfaceScreen","_interopRequireDefault","e","__esModule","default","SHEET_PLACEMENT","base","md","FULLSCREEN_SURFACE_STYLE","backgroundColor","overflow","SDK_SURFACE_CHROME","contentPadding","maxHeightRatio","bloomOptionsFor","config","scrollable","morph","header","largeTitle","undefined","presentation","placement","maxWidth","dismissOnBackdrop","style","panelStyle","activeRouteSurfaces","detachedFrontSurface","presentInternal","route","props","opts","track","navStack","createSurfaceNavStack","getSurfaceConfig","bloomOpts","label","result","bloomSurfaces","present","surface","createElement","SurfaceScreen","instance","navigate","nextRoute","nextProps","top","getTop","replace","goBack","canGoBack","setStep","step","beginFlow","dismiss","dismissResult","requestDismiss","finally","abandonActiveFlow","tracked","push","index","indexOf","splice","presentDetached","presentRoute","topRouteSurface","length","topMorphableSurface","closeAllRouteSurfaces","reverse","navigateWithinOrPresent","stacks","replaceWithinOrPresent","openWithinOrPresent","host","surfaces","exports","dismissAll","useSurfaces"],"sourceRoot":"../../../../src","sources":["ui/navigation/surfaces.ts"],"mappings":";;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AAMA,IAAAE,gBAAA,GAAAF,OAAA;AAMA,IAAAG,gBAAA,GAAAH,OAAA;AACA,IAAAI,cAAA,GAAAC,sBAAA,CAAAL,OAAA;AAAwD,SAAAK,uBAAAC,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAExD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,MAAMG,eAAe,GAAG;EAAEC,IAAI,EAAE,QAAQ;EAAEC,EAAE,EAAE;AAAS,CAAU;;AAEjE;AACA,MAAMC,wBAAmC,GAAG;EAAEC,eAAe,EAAE,SAAS;EAAEC,QAAQ,EAAE;AAAS,CAAC;;AAE9F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,kBAAkB,GAAG;EAAEC,cAAc,EAAE,CAAC;EAAEC,cAAc,EAAE;AAAI,CAAU;;AAE9E;AACA,SAASC,eAAeA,CAACC,MAA0B,EAAkB;EACnE;EACA;EACA,MAAMC,UAAU,GAAGD,MAAM,CAACC,UAAU;EACpC;EACA;EACA;EACA;EACA,MAAMC,KAAK,GAAGF,MAAM,CAACE,KAAK;EAC1B;EACA;EACA;EACA;EACA,MAAMC,MAAM,GAAGH,MAAM,CAACG,MAAM,GAAG;IAAEC,UAAU,EAAE;EAAK,CAAC,GAAGC,SAAS;EAC/D,QAAQL,MAAM,CAACM,YAAY;IACzB,KAAK,QAAQ;MACX,OAAO;QAAEC,SAAS,EAAE,QAAQ;QAAEN,UAAU;QAAEE,MAAM;QAAED,KAAK;QAAE,GAAGN;MAAmB,CAAC;IAClF,KAAK,QAAQ;MACX,OAAO;QACLW,SAAS,EAAE;UAAEhB,IAAI,EAAE,QAAQ;UAAEC,EAAE,EAAE;QAAO,CAAC;QACzCS,UAAU;QACVE,MAAM;QACND,KAAK;QACL,GAAGN;MACL,CAAC;IACH,KAAK,YAAY;MACf;MACA;MACA;MACA,OAAO;QACLW,SAAS,EAAEjB,eAAe;QAC1BO,cAAc,EAAE,CAAC;QACjBW,QAAQ,EAAE,GAAG;QACbV,cAAc,EAAE,GAAG;QACnBW,iBAAiB,EAAE,KAAK;QACxBR,UAAU;QACVC,KAAK;QACLQ,KAAK,EAAEjB,wBAAwB;QAC/BkB,UAAU,EAAElB;MACd,CAAC;IACH;MACE,OAAO;QAAEc,SAAS,EAAEjB,eAAe;QAAEW,UAAU;QAAEE,MAAM;QAAED,KAAK;QAAE,GAAGN;MAAmB,CAAC;EAC3F;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAcA;AACA;AACA;AACA;AACA;AACA;AACA;;AAUA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMgB,mBAAqC,GAAG,EAAE;;AAEhD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAIC,oBAA2C,GAAG,IAAI;AAEtD,SAASC,eAAeA,CACtBC,KAAQ,EACRC,KAA8B,EAC9BC,IAAgC,EAChCC,KAAc,EACM;EACpB,MAAMC,QAAQ,GAAG,IAAAC,sCAAqB,EAACL,KAAK,EAAEC,KAAK,CAAC;EACpD,MAAMhB,MAAM,GAAG,IAAAqB,iCAAgB,EAACN,KAAK,EAAEC,KAAK,CAAC;EAC7C,MAAMM,SAAyB,GAAG;IAAEC,KAAK,EAAER,KAAK;IAAE,GAAGhB,eAAe,CAACC,MAAM,CAAC;IAAE,GAAGiB;EAAK,CAAC;;EAEvF;EACA;EACA;EACA;EACA;EACA,MAAMO,MAAM,GAAGC,kBAAa,CAACC,OAAO,CAAoBC,OAAwB,iBAC9E,IAAAC,oBAAa,EAACC,sBAAa,EAAE;IAC3BV,QAAQ;IACRQ,OAAO;IACPlB,iBAAiB,EAAEa,SAAS,CAACb,iBAAiB,IAAI;EACpD,CAAC,CAAC,EACFa,SACF,CAAC;EAED,MAAMQ,QAA4B,GAAG;IACnCf,KAAK;IACLgB,QAAQ,EAAEA,CAACC,SAAS,EAAEC,SAAS,KAAK;MAClC,MAAMC,GAAG,GAAGf,QAAQ,CAACgB,MAAM,CAAC,CAAC;MAC7B,IAAID,GAAG,CAACnB,KAAK,KAAKiB,SAAS,EAAEb,QAAQ,CAACiB,OAAO,CAACJ,SAAS,EAAEC,SAAS,CAAC,CAAC,KAC/Dd,QAAQ,CAACY,QAAQ,CAACC,SAAS,EAAEC,SAAS,CAAC;IAC9C,CAAC;IACDG,OAAO,EAAEA,CAACJ,SAAS,EAAEC,SAAS,KAAKd,QAAQ,CAACiB,OAAO,CAACJ,SAAS,EAAEC,SAAS,CAAC;IACzEI,MAAM,EAAEA,CAAA,KAAMlB,QAAQ,CAACkB,MAAM,CAAC,CAAC;IAC/BC,SAAS,EAAEA,CAAA,KAAMnB,QAAQ,CAACmB,SAAS,CAAC,CAAC;IACrCC,OAAO,EAAGC,IAAI,IAAKrB,QAAQ,CAACoB,OAAO,CAACC,IAAI,CAAC;IACzCC,SAAS,EAAEA,CAACT,SAAS,EAAEC,SAAS,KAAKd,QAAQ,CAACsB,SAAS,CAACT,SAAS,EAAEC,SAAS,CAAC;IAC7ES,OAAO,EAAGC,aAAa,IAAKxB,QAAQ,CAACyB,cAAc,CAACD,aAAa,CAAC;IAClEnB;EACF,CAAC;;EAED;EACA;EACA;EACAA,MAAM,CAACqB,OAAO,CAAC,MAAM1B,QAAQ,CAAC2B,iBAAiB,CAAC,CAAC,CAAC;EAElD,MAAMC,OAAuB,GAAG;IAC9BhC,KAAK,EAAEe,QAAQ,CAACf,KAAK;IACrBgB,QAAQ,EAAED,QAAQ,CAACC,QAAQ;IAC3BM,MAAM,EAAEP,QAAQ,CAACO,MAAM;IACvBI,SAAS,EAAEX,QAAQ,CAACW,SAAS;IAC7BC,OAAO,EAAEA,CAAA,KAAMZ,QAAQ,CAACY,OAAO,CAAC;EAClC,CAAC;EACD,IAAIxB,KAAK,EAAE;IACTN,mBAAmB,CAACoC,IAAI,CAACD,OAAO,CAAC;IACjCvB,MAAM,CAACqB,OAAO,CAAC,MAAM;MACnB,MAAMI,KAAK,GAAGrC,mBAAmB,CAACsC,OAAO,CAACH,OAAO,CAAC;MAClD,IAAIE,KAAK,IAAI,CAAC,EAAErC,mBAAmB,CAACuC,MAAM,CAACF,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC;EACJ,CAAC,MAAM;IACL;IACA;IACApC,oBAAoB,GAAGkC,OAAO;IAC9BvB,MAAM,CAACqB,OAAO,CAAC,MAAM;MACnB,IAAIhC,oBAAoB,KAAKkC,OAAO,EAAElC,oBAAoB,GAAG,IAAI;IACnE,CAAC,CAAC;EACJ;EAEA,OAAOiB,QAAQ;AACjB;;AAEA;AACA;AACA;AACA;AACO,SAASJ,OAAOA,CACrBX,KAAQ,EACRC,KAAuB,EACvBC,IAAqB,EACD;EACpB,OAAOH,eAAe,CAACC,KAAK,EAAGC,KAAK,IAAI,CAAC,CAAC,EAA8BC,IAAI,EAAE,IAAI,CAAC;AACrF;;AAEA;AACA;AACA;AACA;AACO,SAASmC,eAAeA,CAC7BrC,KAAQ,EACRC,KAAuB,EACvBC,IAAqB,EACD;EACpB,OAAOH,eAAe,CAACC,KAAK,EAAGC,KAAK,IAAI,CAAC,CAAC,EAA8BC,IAAI,EAAE,KAAK,CAAC;AACtF;;AAEA;AACA;AACA;AACA;AACO,SAASoC,YAAYA,CAACtC,KAAgB,EAAEC,KAA+B,EAAmB;EAC/F,OAAOF,eAAe,CAACC,KAAK,EAAEC,KAAK,IAAI,CAAC,CAAC,EAAEX,SAAS,EAAE,IAAI,CAAC;AAC7D;;AAEA;AACO,SAASiD,eAAeA,CAAA,EAA+B;EAC5D,OAAO1C,mBAAmB,CAACA,mBAAmB,CAAC2C,MAAM,GAAG,CAAC,CAAC;AAC5D;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAAA,EAA+B;EAChE,OAAO3C,oBAAoB,IAAIyC,eAAe,CAAC,CAAC;AAClD;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASG,qBAAqBA,CAAA,EAAS;EAC5C,KAAK,MAAM3B,QAAQ,IAAI,CAAC,GAAGlB,mBAAmB,CAAC,CAAC8C,OAAO,CAAC,CAAC,EAAE5B,QAAQ,CAACY,OAAO,CAAC,CAAC;AAC/E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASiB,uBAAuBA,CACrCxC,QAAyB,EACzBJ,KAAgB,EAChBC,KAA+B,EACzB;EACN,MAAMiB,SAAS,GAAGjB,KAAK,IAAI,CAAC,CAAC;EAC7B,IAAI,IAAAK,iCAAgB,EAACN,KAAK,EAAEkB,SAAS,CAAC,CAAC2B,MAAM,EAAE;IAC7CP,YAAY,CAACtC,KAAK,EAAEkB,SAAS,CAAC;EAChC,CAAC,MAAM;IACLd,QAAQ,CAACY,QAAQ,CAAChB,KAAK,EAAEkB,SAAS,CAAC;EACrC;AACF;;AAEA;AACO,SAAS4B,sBAAsBA,CACpC1C,QAAyB,EACzBJ,KAAgB,EAChBC,KAA+B,EACzB;EACN,MAAMiB,SAAS,GAAGjB,KAAK,IAAI,CAAC,CAAC;EAC7B,IAAI,IAAAK,iCAAgB,EAACN,KAAK,EAAEkB,SAAS,CAAC,CAAC2B,MAAM,EAAE;IAC7CP,YAAY,CAACtC,KAAK,EAAEkB,SAAS,CAAC;EAChC,CAAC,MAAM;IACLd,QAAQ,CAACiB,OAAO,CAACrB,KAAK,EAAEkB,SAAS,CAAC;EACpC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS6B,mBAAmBA,CACjC/C,KAAQ,EACRC,KAAuB,EACgB;EACvC,MAAMiB,SAAS,GAAIjB,KAAK,IAAI,CAAC,CAA6B;EAC1D,MAAM+C,IAAI,GAAGP,mBAAmB,CAAC,CAAC;EAClC,IAAIO,IAAI,IAAI,CAAC,IAAA1C,iCAAgB,EAACN,KAAK,EAAEkB,SAAS,CAAC,CAAC2B,MAAM,EAAE;IACtD;IACA;IACA;IACA,OAAOG,IAAI,CAACtB,SAAS,CAAC1B,KAAK,EAAEkB,SAAS,CAAC;EACzC;EACA,OAAOP,OAAO,CAACX,KAAK,EAAEC,KAAK,CAAC,CAACQ,MAAM;AACrC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMwC,QAAQ,GAAAC,OAAA,CAAAD,QAAA,GAAG;EACtBtC,OAAO,EAAEA,CAAsBX,KAAQ,EAAEC,KAAuB,EAAEC,IAAqB,KACrFS,OAAO,CAACX,KAAK,EAAEC,KAAK,EAAEC,IAAI,CAAC,CAACO,MAAM;EACpC0C,UAAU,EAAET;AACd,CAAU;;AAEV;AACO,SAASU,WAAWA,CAAA,EAAoB;EAC7C,OAAOH,QAAQ;AACjB","ignoreList":[]}

package/lib/commonjs/ui/oauth/browserAuthTransport.js

@@ -0,0 +1,170 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.startWebOAuthSignIn = startWebOAuthSignIn;
+var _core = require("@oxyhq/core");
+var _oauthNavigation = require("../components/oauthNavigation.js");
+var _isWebBrowser = require("../utils/isWebBrowser.js");
+var _completeOAuthCode = require("./completeOAuthCode.js");
+var _oauthHandshake = require("./oauthHandshake.js");
+var _oauthPopup = require("./oauthPopup.js");
+/**
+ * The single web entry point for third-party "Sign in with Oxy".
+ *
+ * Picks the transport (`popup` or `redirect`), drives it, and returns ONE typed
+ * result — so callers (`OxySignInButton`, and any RP with its own button) never
+ * touch `window.open`, `postMessage`, or the token exchange themselves.
+ *
+ * Popup mode keeps the relying party mounted: its route, scroll position, and
+ * unsaved state survive because the tab never navigates. Redirect mode is the
+ * compatibility fallback, and is also where popup mode lands when the browser
+ * blocks the window — a blocked popup must still sign the user in, not dead-end.
+ *
+ * Native is NOT handled here: `openAuthorizeUrlNative` (an in-app auth session)
+ * remains the native lane and is untouched by this module.
+ */
+
+/** Provider-owned wiring for a web sign-in — everything that is not per-press. */
+
+/** Per-press inputs for {@link startWebOAuthSignIn}. */
+
+async function startWebOAuthSignIn(context, options) {
+  if (!(0, _isWebBrowser.isWebBrowser)()) {
+    (0, _oauthPopup.closeOAuthPopup)(options.popup ?? null);
+    return {
+      status: 'unsupported',
+      reason: 'no-browser'
+    };
+  }
+  if (context.identityBound) {
+    (0, _oauthPopup.closeOAuthPopup)(options.popup ?? null);
+    return {
+      status: 'unsupported',
+      reason: 'identity-bound'
+    };
+  }
+  if (!context.clientId) {
+    (0, _oauthPopup.closeOAuthPopup)(options.popup ?? null);
+    return {
+      status: 'unsupported',
+      reason: 'missing-client-id'
+    };
+  }
+
+  // Claim the window BEFORE the first `await` below, so a caller that invoked us
+  // straight from the click still has gesture attribution. An explicit `null`
+  // means the caller already tried and was blocked.
+  const popup = context.mode === 'popup' && options.popup === undefined ? (0, _oauthPopup.openOAuthPopup)() : options.popup ?? null;
+  if (context.mode === 'redirect') {
+    (0, _oauthPopup.closeOAuthPopup)(popup);
+    return startRedirectSignIn(context, options, 'redirect-mode');
+  }
+  if (!popup) {
+    _core.logger.warn('OAuth sign-in popup was blocked; falling back to a full-page redirect', {
+      component: 'browserAuthTransport'
+    });
+    return startRedirectSignIn(context, options, 'popup-blocked');
+  }
+  try {
+    const prepared = await (0, _oauthHandshake.prepareAuthorizeRequest)({
+      clientId: context.clientId,
+      redirectUri: options.redirectUri,
+      authorizeBaseUrl: context.authorizeBaseUrl,
+      scope: options.scope,
+      responseMode: 'web_message'
+    });
+    if (!(0, _oauthPopup.navigateOAuthPopup)(popup, prepared.authorizeUrl)) {
+      return startRedirectSignIn(context, options, 'popup-navigation-failed');
+    }
+    const outcome = await (0, _oauthPopup.awaitOAuthPopupResult)({
+      popup,
+      expectedOrigin: prepared.authorizeOrigin,
+      expectedState: prepared.handshake.state,
+      redirectUri: options.redirectUri,
+      ...(options.timeoutMs !== undefined ? {
+        timeoutMs: options.timeoutMs
+      } : {})
+    });
+    switch (outcome.kind) {
+      case 'code':
+        {
+          const completion = await (0, _completeOAuthCode.completeOAuthCode)({
+            oxyServices: context.oxyServices,
+            clientId: context.clientId,
+            code: outcome.code,
+            returnedState: outcome.state,
+            handshake: prepared.handshake,
+            redirectUri: options.redirectUri,
+            commitSession: context.commitSession
+          });
+          return completion.ok ? {
+            status: 'signed-in'
+          } : {
+            status: 'failed',
+            reason: completion.reason
+          };
+        }
+      case 'oauth-error':
+        return {
+          status: 'failed',
+          reason: 'idp-error',
+          description: outcome.errorDescription ?? outcome.error
+        };
+      case 'state-mismatch':
+        return {
+          status: 'failed',
+          reason: 'state-mismatch'
+        };
+      case 'closed':
+        return {
+          status: 'cancelled'
+        };
+      case 'timed-out':
+        return {
+          status: 'timed-out'
+        };
+      case 'unsupported':
+        return {
+          status: 'unsupported',
+          reason: 'no-browser'
+        };
+    }
+  } finally {
+    // Covers throws after open (prepare/exchange/commit) and every settled outcome.
+    (0, _oauthPopup.closeOAuthPopup)(popup);
+  }
+}
+
+/**
+ * Full-page hand-off to the IdP. The document is destroyed by the navigation, so
+ * the handshake MUST reach `sessionStorage` first — without it the return trip
+ * cannot validate `state`, and starting the redirect anyway would strand the
+ * user at a callback that can only refuse them.
+ */
+async function startRedirectSignIn(context, options, via) {
+  // Narrowed by the caller; repeated here so this helper is safe on its own.
+  if (!context.clientId) return {
+    status: 'unsupported',
+    reason: 'missing-client-id'
+  };
+  const prepared = await (0, _oauthHandshake.prepareAuthorizeRequest)({
+    clientId: context.clientId,
+    redirectUri: options.redirectUri,
+    authorizeBaseUrl: context.authorizeBaseUrl,
+    scope: options.scope
+  });
+  if (!(0, _core.persistOAuthHandshake)(prepared.handshake.state, prepared.handshake.codeVerifier, options.redirectUri)) {
+    return {
+      status: 'failed',
+      reason: 'handshake-storage'
+    };
+  }
+  (0, _oauthNavigation.redirectToAuthorize)(prepared.authorizeUrl);
+  return {
+    status: 'redirecting',
+    via
+  };
+}
+//# sourceMappingURL=browserAuthTransport.js.map

package/lib/commonjs/ui/oauth/browserAuthTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_core","require","_oauthNavigation","_isWebBrowser","_completeOAuthCode","_oauthHandshake","_oauthPopup","startWebOAuthSignIn","context","options","isWebBrowser","closeOAuthPopup","popup","status","reason","identityBound","clientId","mode","undefined","openOAuthPopup","startRedirectSignIn","logger","warn","component","prepared","prepareAuthorizeRequest","redirectUri","authorizeBaseUrl","scope","responseMode","navigateOAuthPopup","authorizeUrl","outcome","awaitOAuthPopupResult","expectedOrigin","authorizeOrigin","expectedState","handshake","state","timeoutMs","kind","completion","completeOAuthCode","oxyServices","code","returnedState","commitSession","ok","description","errorDescription","error","via","persistOAuthHandshake","codeVerifier","redirectToAuthorize"],"sourceRoot":"../../../../src","sources":["ui/oauth/browserAuthTransport.ts"],"mappings":";;;;;;AAgBA,IAAAA,KAAA,GAAAC,OAAA;AAEA,IAAAC,gBAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AACA,IAAAG,kBAAA,GAAAH,OAAA;AACA,IAAAI,eAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AAtBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAiBA;;AAeA;;AAwBO,eAAeM,mBAAmBA,CACvCC,OAAiC,EACjCC,OAAmC,EACJ;EAC/B,IAAI,CAAC,IAAAC,0BAAY,EAAC,CAAC,EAAE;IACnB,IAAAC,2BAAe,EAACF,OAAO,CAACG,KAAK,IAAI,IAAI,CAAC;IACtC,OAAO;MAAEC,MAAM,EAAE,aAAa;MAAEC,MAAM,EAAE;IAAa,CAAC;EACxD;EACA,IAAIN,OAAO,CAACO,aAAa,EAAE;IACzB,IAAAJ,2BAAe,EAACF,OAAO,CAACG,KAAK,IAAI,IAAI,CAAC;IACtC,OAAO;MAAEC,MAAM,EAAE,aAAa;MAAEC,MAAM,EAAE;IAAiB,CAAC;EAC5D;EACA,IAAI,CAACN,OAAO,CAACQ,QAAQ,EAAE;IACrB,IAAAL,2BAAe,EAACF,OAAO,CAACG,KAAK,IAAI,IAAI,CAAC;IACtC,OAAO;MAAEC,MAAM,EAAE,aAAa;MAAEC,MAAM,EAAE;IAAoB,CAAC;EAC/D;;EAEA;EACA;EACA;EACA,MAAMF,KAAK,GACTJ,OAAO,CAACS,IAAI,KAAK,OAAO,IAAIR,OAAO,CAACG,KAAK,KAAKM,SAAS,GAAG,IAAAC,0BAAc,EAAC,CAAC,GAAGV,OAAO,CAACG,KAAK,IAAI,IAAI;EAEpG,IAAIJ,OAAO,CAACS,IAAI,KAAK,UAAU,EAAE;IAC/B,IAAAN,2BAAe,EAACC,KAAK,CAAC;IACtB,OAAOQ,mBAAmB,CAACZ,OAAO,EAAEC,OAAO,EAAE,eAAe,CAAC;EAC/D;EACA,IAAI,CAACG,KAAK,EAAE;IACVS,YAAM,CAACC,IAAI,CAAC,uEAAuE,EAAE;MACnFC,SAAS,EAAE;IACb,CAAC,CAAC;IACF,OAAOH,mBAAmB,CAACZ,OAAO,EAAEC,OAAO,EAAE,eAAe,CAAC;EAC/D;EAEA,IAAI;IACF,MAAMe,QAAQ,GAAG,MAAM,IAAAC,uCAAuB,EAAC;MAC7CT,QAAQ,EAAER,OAAO,CAACQ,QAAQ;MAC1BU,WAAW,EAAEjB,OAAO,CAACiB,WAAW;MAChCC,gBAAgB,EAAEnB,OAAO,CAACmB,gBAAgB;MAC1CC,KAAK,EAAEnB,OAAO,CAACmB,KAAK;MACpBC,YAAY,EAAE;IAChB,CAAC,CAAC;IAEF,IAAI,CAAC,IAAAC,8BAAkB,EAAClB,KAAK,EAAEY,QAAQ,CAACO,YAAY,CAAC,EAAE;MACrD,OAAOX,mBAAmB,CAACZ,OAAO,EAAEC,OAAO,EAAE,yBAAyB,CAAC;IACzE;IAEA,MAAMuB,OAAO,GAAG,MAAM,IAAAC,iCAAqB,EAAC;MAC1CrB,KAAK;MACLsB,cAAc,EAAEV,QAAQ,CAACW,eAAe;MACxCC,aAAa,EAAEZ,QAAQ,CAACa,SAAS,CAACC,KAAK;MACvCZ,WAAW,EAAEjB,OAAO,CAACiB,WAAW;MAChC,IAAIjB,OAAO,CAAC8B,SAAS,KAAKrB,SAAS,GAAG;QAAEqB,SAAS,EAAE9B,OAAO,CAAC8B;MAAU,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC;IAEF,QAAQP,OAAO,CAACQ,IAAI;MAClB,KAAK,MAAM;QAAE;UACX,MAAMC,UAAU,GAAG,MAAM,IAAAC,oCAAiB,EAAC;YACzCC,WAAW,EAAEnC,OAAO,CAACmC,WAAW;YAChC3B,QAAQ,EAAER,OAAO,CAACQ,QAAQ;YAC1B4B,IAAI,EAAEZ,OAAO,CAACY,IAAI;YAClBC,aAAa,EAAEb,OAAO,CAACM,KAAK;YAC5BD,SAAS,EAAEb,QAAQ,CAACa,SAAS;YAC7BX,WAAW,EAAEjB,OAAO,CAACiB,WAAW;YAChCoB,aAAa,EAAEtC,OAAO,CAACsC;UACzB,CAAC,CAAC;UACF,OAAOL,UAAU,CAACM,EAAE,GAChB;YAAElC,MAAM,EAAE;UAAY,CAAC,GACvB;YAAEA,MAAM,EAAE,QAAQ;YAAEC,MAAM,EAAE2B,UAAU,CAAC3B;UAAO,CAAC;QACrD;MACA,KAAK,aAAa;QAChB,OAAO;UACLD,MAAM,EAAE,QAAQ;UAChBC,MAAM,EAAE,WAAW;UACnBkC,WAAW,EAAEhB,OAAO,CAACiB,gBAAgB,IAAIjB,OAAO,CAACkB;QACnD,CAAC;MACH,KAAK,gBAAgB;QACnB,OAAO;UAAErC,MAAM,EAAE,QAAQ;UAAEC,MAAM,EAAE;QAAiB,CAAC;MACvD,KAAK,QAAQ;QACX,OAAO;UAAED,MAAM,EAAE;QAAY,CAAC;MAChC,KAAK,WAAW;QACd,OAAO;UAAEA,MAAM,EAAE;QAAY,CAAC;MAChC,KAAK,aAAa;QAChB,OAAO;UAAEA,MAAM,EAAE,aAAa;UAAEC,MAAM,EAAE;QAAa,CAAC;IAC1D;EACF,CAAC,SAAS;IACR;IACA,IAAAH,2BAAe,EAACC,KAAK,CAAC;EACxB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeQ,mBAAmBA,CAChCZ,OAAiC,EACjCC,OAAmC,EACnC0C,GAA2B,EACI;EAC/B;EACA,IAAI,CAAC3C,OAAO,CAACQ,QAAQ,EAAE,OAAO;IAAEH,MAAM,EAAE,aAAa;IAAEC,MAAM,EAAE;EAAoB,CAAC;EAEpF,MAAMU,QAAQ,GAAG,MAAM,IAAAC,uCAAuB,EAAC;IAC7CT,QAAQ,EAAER,OAAO,CAACQ,QAAQ;IAC1BU,WAAW,EAAEjB,OAAO,CAACiB,WAAW;IAChCC,gBAAgB,EAAEnB,OAAO,CAACmB,gBAAgB;IAC1CC,KAAK,EAAEnB,OAAO,CAACmB;EACjB,CAAC,CAAC;EAEF,IAAI,CAAC,IAAAwB,2BAAqB,EACxB5B,QAAQ,CAACa,SAAS,CAACC,KAAK,EACxBd,QAAQ,CAACa,SAAS,CAACgB,YAAY,EAC/B5C,OAAO,CAACiB,WACV,CAAC,EAAE;IACD,OAAO;MAAEb,MAAM,EAAE,QAAQ;MAAEC,MAAM,EAAE;IAAoB,CAAC;EAC1D;EAEA,IAAAwC,oCAAmB,EAAC9B,QAAQ,CAACO,YAAY,CAAC;EAC1C,OAAO;IAAElB,MAAM,EAAE,aAAa;IAAEsC;EAAI,CAAC;AACvC","ignoreList":[]}

package/lib/commonjs/ui/oauth/completeOAuthCode.js

@@ -0,0 +1,78 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.completeOAuthCode = completeOAuthCode;
+var _core = require("@oxyhq/core");
+/**
+ * The ONE path from an OAuth authorization code to a committed session.
+ *
+ * Both web transports end here — the popup with an in-memory handshake, the
+ * redirect lane with one read back from `sessionStorage` — so state validation,
+ * the PKCE exchange, the session commit, and handshake cleanup exist exactly
+ * once. Duplicating any of those per transport is how the two lanes would drift
+ * apart on the security-critical steps.
+ *
+ * Ordering is deliberate and load-bearing:
+ *   1. validate `state` BEFORE anything is sent to the token endpoint,
+ *   2. exchange the code for a session,
+ *   3. run `cleanup` (drop the persisted handshake / strip `?code=` from the
+ *      URL) BEFORE the commit, so a stale code can never re-enter the exchange,
+ *   4. commit the session.
+ *
+ * `cleanup` runs exactly once on EVERY exit path, including a state mismatch
+ * and a failed exchange.
+ */
+
+/** Inputs for {@link completeOAuthCode}. */
+
+async function completeOAuthCode(input) {
+  let cleaned = false;
+  const runCleanup = () => {
+    if (cleaned) return;
+    cleaned = true;
+    input.cleanup?.();
+  };
+  if (!input.handshake || !input.returnedState || input.handshake.state !== input.returnedState) {
+    _core.logger.warn('OAuth completion rejected: missing or mismatched state', {
+      component: 'completeOAuthCode'
+    });
+    runCleanup();
+    return {
+      ok: false,
+      reason: 'state-mismatch'
+    };
+  }
+  try {
+    const result = await input.oxyServices.exchangeOAuthCode({
+      code: input.code,
+      clientId: input.clientId,
+      redirectUri: input.redirectUri,
+      codeVerifier: input.handshake.codeVerifier
+    });
+    runCleanup();
+    await input.commitSession({
+      sessionId: result.sessionId,
+      accessToken: result.accessToken,
+      deviceId: result.deviceId,
+      deviceSecret: result.deviceSecret,
+      userId: result.user.id,
+      expiresAt: result.expiresAt,
+      user: result.user
+    });
+    return {
+      ok: true
+    };
+  } catch (error) {
+    _core.logger.warn('OAuth code exchange failed', {
+      component: 'completeOAuthCode'
+    }, error);
+    runCleanup();
+    return {
+      ok: false,
+      reason: 'exchange-failed'
+    };
+  }
+}
+//# sourceMappingURL=completeOAuthCode.js.map

package/lib/commonjs/ui/oauth/completeOAuthCode.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_core","require","completeOAuthCode","input","cleaned","runCleanup","cleanup","handshake","returnedState","state","logger","warn","component","ok","reason","result","oxyServices","exchangeOAuthCode","code","clientId","redirectUri","codeVerifier","commitSession","sessionId","accessToken","deviceId","deviceSecret","userId","user","id","expiresAt","error"],"sourceRoot":"../../../../src","sources":["ui/oauth/completeOAuthCode.ts"],"mappings":";;;;;;AAqBA,IAAAA,KAAA,GAAAC,OAAA;AArBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;;AA2BO,eAAeC,iBAAiBA,CACrCC,KAA6B,EACG;EAChC,IAAIC,OAAO,GAAG,KAAK;EACnB,MAAMC,UAAU,GAAGA,CAAA,KAAY;IAC7B,IAAID,OAAO,EAAE;IACbA,OAAO,GAAG,IAAI;IACdD,KAAK,CAACG,OAAO,GAAG,CAAC;EACnB,CAAC;EAED,IAAI,CAACH,KAAK,CAACI,SAAS,IAAI,CAACJ,KAAK,CAACK,aAAa,IAAIL,KAAK,CAACI,SAAS,CAACE,KAAK,KAAKN,KAAK,CAACK,aAAa,EAAE;IAC7FE,YAAM,CAACC,IAAI,CAAC,wDAAwD,EAAE;MACpEC,SAAS,EAAE;IACb,CAAC,CAAC;IACFP,UAAU,CAAC,CAAC;IACZ,OAAO;MAAEQ,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAiB,CAAC;EAChD;EAEA,IAAI;IACF,MAAMC,MAAM,GAAG,MAAMZ,KAAK,CAACa,WAAW,CAACC,iBAAiB,CAAC;MACvDC,IAAI,EAAEf,KAAK,CAACe,IAAI;MAChBC,QAAQ,EAAEhB,KAAK,CAACgB,QAAQ;MACxBC,WAAW,EAAEjB,KAAK,CAACiB,WAAW;MAC9BC,YAAY,EAAElB,KAAK,CAACI,SAAS,CAACc;IAChC,CAAC,CAAC;IACFhB,UAAU,CAAC,CAAC;IACZ,MAAMF,KAAK,CAACmB,aAAa,CAAC;MACxBC,SAAS,EAAER,MAAM,CAACQ,SAAS;MAC3BC,WAAW,EAAET,MAAM,CAACS,WAAW;MAC/BC,QAAQ,EAAEV,MAAM,CAACU,QAAQ;MACzBC,YAAY,EAAEX,MAAM,CAACW,YAAY;MACjCC,MAAM,EAAEZ,MAAM,CAACa,IAAI,CAACC,EAAE;MACtBC,SAAS,EAAEf,MAAM,CAACe,SAAS;MAC3BF,IAAI,EAAEb,MAAM,CAACa;IACf,CAAC,CAAC;IACF,OAAO;MAAEf,EAAE,EAAE;IAAK,CAAC;EACrB,CAAC,CAAC,OAAOkB,KAAK,EAAE;IACdrB,YAAM,CAACC,IAAI,CAAC,4BAA4B,EAAE;MAAEC,SAAS,EAAE;IAAoB,CAAC,EAAEmB,KAAK,CAAC;IACpF1B,UAAU,CAAC,CAAC;IACZ,OAAO;MAAEQ,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAkB,CAAC;EACjD;AACF","ignoreList":[]}

package/lib/commonjs/ui/oauth/oauthHandshake.js

@@ -0,0 +1,53 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.prepareAuthorizeRequest = prepareAuthorizeRequest;
+var _core = require("@oxyhq/core");
+/**
+ * The RP half of an OAuth authorize request: a fresh CSRF `state` + PKCE pair,
+ * and the authorize URL built from them.
+ *
+ * Both web transports start here, and the ONLY difference between them is one
+ * parameter: `popup` asks the IdP for `response_mode=web_message` so the result
+ * comes back to `window.opener` instead of navigating the RP's tab. Everything
+ * else — `S256` PKCE, exact registered `redirect_uri`, random `state` — is
+ * identical, which is what lets both lanes converge on one completion path.
+ */
+
+/** Inputs for {@link prepareAuthorizeRequest}. */
+
+/** A ready-to-use authorize request plus the secrets that finish it. */
+
+/**
+ * Generate a fresh handshake and build the authorize URL around it.
+ *
+ * The verifier is returned to the caller and never stored here: the popup
+ * transport keeps it in memory for the lifetime of the attempt, and the
+ * redirect transport persists it through `persistOAuthHandshake` because a
+ * full-page navigation destroys the running document.
+ */
+async function prepareAuthorizeRequest(params) {
+  const [pkce, state] = await Promise.all([(0, _core.generatePkcePair)(), (0, _core.generateOAuthState)()]);
+  const authorizeUrl = (0, _core.buildOAuthAuthorizeUrl)({
+    authorizeBaseUrl: params.authorizeBaseUrl,
+    clientId: params.clientId,
+    redirectUri: params.redirectUri,
+    scope: params.scope,
+    state,
+    codeChallenge: pkce.codeChallenge,
+    ...(params.responseMode ? {
+      responseMode: params.responseMode
+    } : {})
+  });
+  return {
+    authorizeUrl,
+    authorizeOrigin: new URL(authorizeUrl).origin,
+    handshake: {
+      state,
+      codeVerifier: pkce.codeVerifier
+    }
+  };
+}
+//# sourceMappingURL=oauthHandshake.js.map