@oxyhq/services 30.0.0 → 30.1.0

package/lib/commonjs/ui/components/OxyProvider.js

@@ -0,0 +1,314 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _reactNativeGestureHandler = require("react-native-gesture-handler");
+var _reactNativeSafeAreaContext = require("react-native-safe-area-context");
+var _OxyContext = require("../context/OxyContext.js");
+var _reactQuery = require("@tanstack/react-query");
+var _surfaces = require("@oxyhq/bloom/surfaces");
+var _toast = require("@oxyhq/bloom/toast");
+var _core = require("@oxyhq/core");
+var _RequireOxyAuth = require("./RequireOxyAuth.js");
+var _queryClient = require("../hooks/queryClient.js");
+var _storageHelpers = require("../utils/storageHelpers.js");
+var _netConnectivity = require("../utils/netConnectivity.js");
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); } /**
+ * Background color shown for the brief window between mount and the
+ * persisted-cache hydration completing. Matches the typical splash-screen
+ * backgrounds used across Oxy apps (dark surface, white-on-dark text), so
+ * the transition reads as a continuation of the splash instead of a
+ * white flash. Apps that need a different boot color can keep doing their
+ * own `expo-splash-screen` orchestration — this placeholder just guarantees
+ * we never render a transparent `null` while we wait.
+ *
+ * Light-mode background. Apps that boot into dark mode see a brief light
+ * flash here, which is unavoidable without re-implementing the BloomTheme
+ * resolver outside of `<BloomThemeProvider>`. The light value is far less
+ * jarring than `null` (transparent) on either theme.
+ */
+const BOOT_BG_COLOR = '#ffffff';
+const bootStyles = _reactNative.StyleSheet.create({
+  providerRoot: {
+    flex: 1
+  },
+  bootShell: {
+    flex: 1,
+    backgroundColor: BOOT_BG_COLOR
+  }
+});
+
+// Detect if running on web
+const isWeb = _reactNative.Platform.OS === 'web';
+
+// Variable indirection: the module name is computed at runtime so Metro's
+// static analyzer cannot trace this into the web bundle. Native-only.
+const KEYBOARD_CONTROLLER_MODULE = 'react-native-keyboard-controller';
+
+/**
+ * OxyProvider - Universal provider for Expo apps (native + web)
+ *
+ * Provides authentication, session management, query client, and UI overlays.
+ * Wraps its own overlay stack in SafeAreaProvider and GestureHandlerRootView so
+ * the shared Bloom SURFACE STACK (`<SurfaceProvider>` / `<SurfaceHost>`) — which
+ * hosts every SDK surface (the ~35 bottom-sheet routes + the AccountDialog) — can
+ * safely render even when a consuming app has not mounted those providers yet.
+ *
+ * Usage:
+ * ```tsx
+ * import { OxyProvider, useAuth } from '@oxyhq/services';
+ *
+ * function App() {
+ *   return (
+ *     <SafeAreaProvider>
+ *       <GestureHandlerRootView style={{ flex: 1 }}>
+ *         <OxyProvider baseURL="https://api.oxy.so">
+ *           <YourApp />
+ *         </OxyProvider>
+ *       </GestureHandlerRootView>
+ *     </SafeAreaProvider>
+ *   );
+ * }
+ *
+ * function MyComponent() {
+ *   const { isAuthenticated, user, signIn, signOut } = useAuth();
+ *
+ *   if (!isAuthenticated) {
+ *     return <OxySignInButton />;
+ *   }
+ *   return <Text>Welcome, {user?.username}!</Text>;
+ * }
+ * ```
+ */
+const OxyProvider = ({
+  oxyServices,
+  children,
+  onAuthStateChange,
+  storageKeyPrefix,
+  clientId,
+  baseURL,
+  authWebUrl,
+  authRedirectUri,
+  authorizeBaseUrl,
+  sessionMode = 'account',
+  webAuthMode = 'popup',
+  queryClient: providedQueryClient,
+  requireAuth = 'off',
+  backgroundSession = false,
+  deviceCredentialStorage = 'persistent'
+}) => {
+  // Dynamic KeyboardProvider for native. Uses variable indirection
+  // (KEYBOARD_CONTROLLER_MODULE) so Metro's static analyzer cannot trace
+  // the import into the web bundle. On web, the runtime guard short-circuits
+  // before the import runs.
+  const [KBProvider, setKBProvider] = (0, _react.useState)(null);
+  (0, _react.useEffect)(() => {
+    if (isWeb) return;
+    const moduleName = KEYBOARD_CONTROLLER_MODULE;
+    (specifier => new Promise(r => r(`${specifier}`)).then(s => _interopRequireWildcard(require(s))))(moduleName).then(mod => setKBProvider(() => mod.KeyboardProvider)).catch(error => {
+      if (__DEV__) {
+        _core.logger.warn('react-native-keyboard-controller not available, skipping keyboard support', {
+          component: 'OxyProvider'
+        }, error);
+      }
+    });
+  }, []);
+  const KeyboardWrapper = KBProvider ?? (({
+    children
+  }) => /*#__PURE__*/(0, _jsxRuntime.jsx)(_jsxRuntime.Fragment, {
+    children: children
+  }));
+
+  // Storage + persistence wiring.
+  //
+  // We MUST await the restore() promise before exposing the QueryClient to
+  // children — otherwise the first render sees an empty cache and any
+  // <Suspense> queries or `enabled: !!cached` gates would skip the offline
+  // hit. Once the persisted blob has been hydrated (or definitively failed
+  // to hydrate), we mark the client ready and unblock rendering.
+  const storageRef = (0, _react.useRef)(null);
+  const queryClientRef = (0, _react.useRef)(null);
+  const persistenceUnsubRef = (0, _react.useRef)(null);
+
+  // If the consumer supplied their own QueryClient we use it as-is and skip
+  // persistence — their host app owns that lifecycle.
+  const [queryClient, setQueryClient] = (0, _react.useState)(() => {
+    if (providedQueryClient) {
+      queryClientRef.current = providedQueryClient;
+      return providedQueryClient;
+    }
+    return null;
+  });
+  (0, _react.useEffect)(() => {
+    if (providedQueryClient) {
+      queryClientRef.current = providedQueryClient;
+      setQueryClient(providedQueryClient);
+      return;
+    }
+    let mounted = true;
+    const bootstrap = async () => {
+      let storage = null;
+      try {
+        storage = await (0, _storageHelpers.createPlatformStorage)();
+      } catch (error) {
+        if (__DEV__) {
+          _core.logger.warn('Failed to initialize storage for query persistence', {
+            component: 'OxyProvider'
+          }, error);
+        }
+      }
+      if (!mounted || queryClientRef.current) return;
+      storageRef.current = storage;
+      const client = (0, _queryClient.createQueryClient)();
+      const {
+        restored,
+        unsubscribe
+      } = (0, _queryClient.attachQueryPersistence)(client, storage);
+      persistenceUnsubRef.current = unsubscribe;
+
+      // Block first render until the persisted cache is restored so
+      // offline reads land synchronously on the very first paint.
+      await restored;
+      if (!mounted) {
+        unsubscribe();
+        return;
+      }
+      queryClientRef.current = client;
+      setQueryClient(client);
+    };
+    bootstrap();
+    return () => {
+      mounted = false;
+      persistenceUnsubRef.current?.();
+      persistenceUnsubRef.current = null;
+    };
+  }, [providedQueryClient]);
+
+  // Hook React Query focus manager into app state (native) or visibility (web)
+  (0, _react.useEffect)(() => {
+    if (isWeb) {
+      // Web: use document visibility
+      const handleVisibilityChange = () => {
+        _reactQuery.focusManager.setFocused(document.visibilityState === 'visible');
+      };
+      document.addEventListener('visibilitychange', handleVisibilityChange);
+      return () => {
+        document.removeEventListener('visibilitychange', handleVisibilityChange);
+      };
+    }
+    // Native: use AppState
+    const subscription = _reactNative.AppState.addEventListener('change', state => {
+      _reactQuery.focusManager.setFocused(state === 'active');
+    });
+    return () => {
+      subscription.remove();
+    };
+  }, []);
+
+  // Setup network status monitoring for offline detection
+  (0, _react.useEffect)(() => {
+    let cleanup;
+    const setupNetworkMonitoring = async () => {
+      try {
+        if (isWeb) {
+          // Web: use navigator.onLine
+          _reactQuery.onlineManager.setOnline(navigator.onLine);
+          const handleOnline = () => _reactQuery.onlineManager.setOnline(true);
+          const handleOffline = () => _reactQuery.onlineManager.setOnline(false);
+          window.addEventListener('online', handleOnline);
+          window.addEventListener('offline', handleOffline);
+          cleanup = () => {
+            window.removeEventListener('online', handleOnline);
+            window.removeEventListener('offline', handleOffline);
+          };
+        } else {
+          // Native: try to use NetInfo
+          try {
+            const NetInfo = await Promise.resolve().then(() => _interopRequireWildcard(require('@react-native-community/netinfo')));
+            const state = await NetInfo.default.fetch();
+            _reactQuery.onlineManager.setOnline((0, _netConnectivity.isNetConnectivityOnline)(state));
+            const unsubscribe = NetInfo.default.addEventListener(state => {
+              _reactQuery.onlineManager.setOnline((0, _netConnectivity.isNetConnectivityOnline)(state));
+            });
+            cleanup = () => unsubscribe();
+          } catch {
+            // NetInfo not available, default to online
+            _reactQuery.onlineManager.setOnline(true);
+          }
+        }
+      } catch (error) {
+        // Default to online if detection fails
+        _reactQuery.onlineManager.setOnline(true);
+      }
+    };
+    setupNetworkMonitoring();
+    return () => {
+      cleanup?.();
+    };
+  }, []);
+
+  // While the QueryClient is being created and the persisted cache is
+  // hydrating, render a solid-color shell instead of `null`. Returning
+  // `null` here on mid-range Android devices flashed a transparent
+  // surface for 200–600ms after the native splash hid, which read as a
+  // glitch. The shell keeps the screen filled with a sensible default
+  // until children can mount under a real <QueryClientProvider>.
+  if (!queryClient) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeGestureHandler.GestureHandlerRootView, {
+      style: bootStyles.providerRoot,
+      children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeSafeAreaContext.SafeAreaProvider, {
+        children: /*#__PURE__*/(0, _jsxRuntime.jsx)(KeyboardWrapper, {
+          children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+            style: bootStyles.bootShell
+          })
+        })
+      })
+    });
+  }
+
+  // Core content: QueryClient + OxyContext + UI overlays.
+  //
+  // Theming is owned by `@oxyhq/bloom`. Consumers must mount their own
+  // `<BloomThemeProvider>` in their app root and configure it directly
+  // (defaultColorPreset, defaultMode, persistKey, storage, fonts, etc.).
+  // OxyProvider does NOT wrap a BloomThemeProvider — that would create a
+  // duplicate scope that silently shadows the consumer's configuration.
+  const coreContent = /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactQuery.QueryClientProvider, {
+    client: queryClient,
+    children: /*#__PURE__*/(0, _jsxRuntime.jsxs)(_OxyContext.OxyRuntimeProvider, {
+      oxyServices: oxyServices,
+      baseURL: baseURL,
+      authWebUrl: authWebUrl,
+      authRedirectUri: authRedirectUri,
+      authorizeBaseUrl: authorizeBaseUrl,
+      storageKeyPrefix: storageKeyPrefix,
+      clientId: clientId,
+      sessionMode: sessionMode,
+      webAuthMode: webAuthMode,
+      backgroundSession: backgroundSession,
+      deviceCredentialStorage: deviceCredentialStorage,
+      onAuthStateChange: onAuthStateChange,
+      children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_surfaces.SurfaceProvider, {
+        children: requireAuth === 'off' ? children : /*#__PURE__*/(0, _jsxRuntime.jsx)(_RequireOxyAuth.RequireOxyAuth, {
+          prompt: requireAuth,
+          children: children
+        })
+      }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_toast.ToastOutlet, {})]
+    })
+  });
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeGestureHandler.GestureHandlerRootView, {
+    style: bootStyles.providerRoot,
+    children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeSafeAreaContext.SafeAreaProvider, {
+      children: /*#__PURE__*/(0, _jsxRuntime.jsx)(KeyboardWrapper, {
+        children: coreContent
+      })
+    })
+  });
+};
+var _default = exports.default = OxyProvider;
+//# sourceMappingURL=OxyProvider.js.map

package/lib/commonjs/ui/components/OxyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_reactNativeGestureHandler","_reactNativeSafeAreaContext","_OxyContext","_reactQuery","_surfaces","_toast","_core","_RequireOxyAuth","_queryClient","_storageHelpers","_netConnectivity","_jsxRuntime","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","BOOT_BG_COLOR","bootStyles","StyleSheet","create","providerRoot","flex","bootShell","backgroundColor","isWeb","Platform","OS","KEYBOARD_CONTROLLER_MODULE","OxyProvider","oxyServices","children","onAuthStateChange","storageKeyPrefix","clientId","baseURL","authWebUrl","authRedirectUri","authorizeBaseUrl","sessionMode","webAuthMode","queryClient","providedQueryClient","requireAuth","backgroundSession","deviceCredentialStorage","KBProvider","setKBProvider","useState","useEffect","moduleName","specifier","Promise","then","s","mod","KeyboardProvider","catch","error","__DEV__","loggerUtil","warn","component","KeyboardWrapper","jsx","Fragment","storageRef","useRef","queryClientRef","persistenceUnsubRef","setQueryClient","current","mounted","bootstrap","storage","createPlatformStorage","client","createQueryClient","restored","unsubscribe","attachQueryPersistence","handleVisibilityChange","focusManager","setFocused","document","visibilityState","addEventListener","removeEventListener","subscription","AppState","state","remove","cleanup","setupNetworkMonitoring","onlineManager","setOnline","navigator","onLine","handleOnline","handleOffline","window","NetInfo","resolve","fetch","isNetConnectivityOnline","GestureHandlerRootView","style","SafeAreaProvider","View","coreContent","QueryClientProvider","jsxs","OxyRuntimeProvider","SurfaceProvider","RequireOxyAuth","prompt","ToastOutlet","_default","exports"],"sourceRoot":"../../../../src","sources":["ui/components/OxyProvider.tsx"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,0BAAA,GAAAF,OAAA;AACA,IAAAG,2BAAA,GAAAH,OAAA;AAEA,IAAAI,WAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AACA,IAAAM,SAAA,GAAAN,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,KAAA,GAAAR,OAAA;AACA,IAAAS,eAAA,GAAAT,OAAA;AACA,IAAAU,YAAA,GAAAV,OAAA;AACA,IAAAW,eAAA,GAAAX,OAAA;AACA,IAAAY,gBAAA,GAAAZ,OAAA;AAAmE,IAAAa,WAAA,GAAAb,OAAA;AAAA,SAAAc,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA,KAEnE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMkB,aAAa,GAAG,SAAS;AAE/B,MAAMC,UAAU,GAAGC,uBAAU,CAACC,MAAM,CAAC;EACjCC,YAAY,EAAE;IACVC,IAAI,EAAE;EACV,CAAC;EACDC,SAAS,EAAE;IACPD,IAAI,EAAE,CAAC;IACPE,eAAe,EAAEP;EACrB;AACJ,CAAC,CAAC;;AAEF;AACA,MAAMQ,KAAK,GAAGC,qBAAQ,CAACC,EAAE,KAAK,KAAK;;AAEnC;AACA;AACA,MAAMC,0BAA0B,GAAG,kCAAkC;;AAErE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,WAAiC,GAAGA,CAAC;EACvCC,WAAW;EACXC,QAAQ;EACRC,iBAAiB;EACjBC,gBAAgB;EAChBC,QAAQ;EACRC,OAAO;EACPC,UAAU;EACVC,eAAe;EACfC,gBAAgB;EAChBC,WAAW,GAAG,SAAS;EACvBC,WAAW,GAAG,OAAO;EACrBC,WAAW,EAAEC,mBAAmB;EAChCC,WAAW,GAAG,KAAK;EACnBC,iBAAiB,GAAG,KAAK;EACzBC,uBAAuB,GAAG;AAC9B,CAAC,KAAK;EAEF;EACA;EACA;EACA;EACA,MAAM,CAACC,UAAU,EAAEC,aAAa,CAAC,GAAG,IAAAC,eAAQ,EAAqC,IAAI,CAAC;EACtF,IAAAC,gBAAS,EAAC,MAAM;IACZ,IAAIxB,KAAK,EAAE;IACX,MAAMyB,UAAU,GAAGtB,0BAA0B;IAC7C,CAAAuB,SAAA,QAAAC,OAAA,CAAAnD,CAAA,IAAAA,CAAA,IAAAkD,SAAA,KAAAE,IAAA,CAAAC,CAAA,IAAAzD,uBAAA,CAAAd,OAAA,CAAAuE,CAAA,KAAOJ,UAAU,EACZG,IAAI,CAAEE,GAAG,IAAKR,aAAa,CAAC,MAAMQ,GAAG,CAACC,gBAAgB,CAAC,CAAC,CACxDC,KAAK,CAAEC,KAAK,IAAK;MACd,IAAIC,OAAO,EAAE;QACTC,YAAU,CAACC,IAAI,CAAC,2EAA2E,EAAE;UAAEC,SAAS,EAAE;QAAc,CAAC,EAAEJ,KAAK,CAAC;MACrI;IACJ,CAAC,CAAC;EACV,CAAC,EAAE,EAAE,CAAC;EACN,MAAMK,eAA4C,GAAGjB,UAAU,KAAK,CAAC;IAAEf;EAAS,CAAC,kBAAK,IAAAnC,WAAA,CAAAoE,GAAA,EAAApE,WAAA,CAAAqE,QAAA;IAAAlC,QAAA,EAAGA;EAAQ,CAAG,CAAC,CAAC;;EAEtG;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMmC,UAAU,GAAG,IAAAC,aAAM,EAA0B,IAAI,CAAC;EACxD,MAAMC,cAAc,GAAG,IAAAD,aAAM,EAA8C,IAAI,CAAC;EAChF,MAAME,mBAAmB,GAAG,IAAAF,aAAM,EAAsB,IAAI,CAAC;;EAE7D;EACA;EACA,MAAM,CAAC1B,WAAW,EAAE6B,cAAc,CAAC,GAAG,IAAAtB,eAAQ,EAA8C,MAAM;IAC9F,IAAIN,mBAAmB,EAAE;MACrB0B,cAAc,CAACG,OAAO,GAAG7B,mBAAmB;MAC5C,OAAOA,mBAAmB;IAC9B;IACA,OAAO,IAAI;EACf,CAAC,CAAC;EAEF,IAAAO,gBAAS,EAAC,MAAM;IACZ,IAAIP,mBAAmB,EAAE;MACrB0B,cAAc,CAACG,OAAO,GAAG7B,mBAAmB;MAC5C4B,cAAc,CAAC5B,mBAAmB,CAAC;MACnC;IACJ;IAEA,IAAI8B,OAAO,GAAG,IAAI;IAElB,MAAMC,SAAS,GAAG,MAAAA,CAAA,KAA2B;MACzC,IAAIC,OAAgC,GAAG,IAAI;MAC3C,IAAI;QACAA,OAAO,GAAG,MAAM,IAAAC,qCAAqB,EAAC,CAAC;MAC3C,CAAC,CAAC,OAAOjB,KAAK,EAAE;QACZ,IAAIC,OAAO,EAAE;UACTC,YAAU,CAACC,IAAI,CAAC,oDAAoD,EAAE;YAAEC,SAAS,EAAE;UAAc,CAAC,EAAEJ,KAAK,CAAC;QAC9G;MACJ;MAEA,IAAI,CAACc,OAAO,IAAIJ,cAAc,CAACG,OAAO,EAAE;MAExCL,UAAU,CAACK,OAAO,GAAGG,OAAO;MAC5B,MAAME,MAAM,GAAG,IAAAC,8BAAiB,EAAC,CAAC;MAClC,MAAM;QAAEC,QAAQ;QAAEC;MAAY,CAAC,GAAG,IAAAC,mCAAsB,EAACJ,MAAM,EAAEF,OAAO,CAAC;MACzEL,mBAAmB,CAACE,OAAO,GAAGQ,WAAW;;MAEzC;MACA;MACA,MAAMD,QAAQ;MAEd,IAAI,CAACN,OAAO,EAAE;QACVO,WAAW,CAAC,CAAC;QACb;MACJ;MAEAX,cAAc,CAACG,OAAO,GAAGK,MAAM;MAC/BN,cAAc,CAACM,MAAM,CAAC;IAC1B,CAAC;IAEDH,SAAS,CAAC,CAAC;IAEX,OAAO,MAAM;MACTD,OAAO,GAAG,KAAK;MACfH,mBAAmB,CAACE,OAAO,GAAG,CAAC;MAC/BF,mBAAmB,CAACE,OAAO,GAAG,IAAI;IACtC,CAAC;EACL,CAAC,EAAE,CAAC7B,mBAAmB,CAAC,CAAC;;EAEzB;EACA,IAAAO,gBAAS,EAAC,MAAM;IACZ,IAAIxB,KAAK,EAAE;MACP;MACA,MAAMwD,sBAAsB,GAAGA,CAAA,KAAM;QACjCC,wBAAY,CAACC,UAAU,CAACC,QAAQ,CAACC,eAAe,KAAK,SAAS,CAAC;MACnE,CAAC;MACDD,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAEL,sBAAsB,CAAC;MACrE,OAAO,MAAM;QACTG,QAAQ,CAACG,mBAAmB,CAAC,kBAAkB,EAAEN,sBAAsB,CAAC;MAC5E,CAAC;IACL;IACI;IACA,MAAMO,YAAY,GAAGC,qBAAQ,CAACH,gBAAgB,CAAC,QAAQ,EAAGI,KAAK,IAAK;MAChER,wBAAY,CAACC,UAAU,CAACO,KAAK,KAAK,QAAQ,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,MAAM;MACTF,YAAY,CAACG,MAAM,CAAC,CAAC;IACzB,CAAC;EACT,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA,IAAA1C,gBAAS,EAAC,MAAM;IACZ,IAAI2C,OAAiC;IAErC,MAAMC,sBAAsB,GAAG,MAAAA,CAAA,KAAY;MACvC,IAAI;QACA,IAAIpE,KAAK,EAAE;UACP;UACAqE,yBAAa,CAACC,SAAS,CAACC,SAAS,CAACC,MAAM,CAAC;UACzC,MAAMC,YAAY,GAAGA,CAAA,KAAMJ,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;UACxD,MAAMI,aAAa,GAAGA,CAAA,KAAML,yBAAa,CAACC,SAAS,CAAC,KAAK,CAAC;UAE1DK,MAAM,CAACd,gBAAgB,CAAC,QAAQ,EAAEY,YAAY,CAAC;UAC/CE,MAAM,CAACd,gBAAgB,CAAC,SAAS,EAAEa,aAAa,CAAC;UAEjDP,OAAO,GAAGA,CAAA,KAAM;YACZQ,MAAM,CAACb,mBAAmB,CAAC,QAAQ,EAAEW,YAAY,CAAC;YAClDE,MAAM,CAACb,mBAAmB,CAAC,SAAS,EAAEY,aAAa,CAAC;UACxD,CAAC;QACL,CAAC,MAAM;UACH;UACA,IAAI;YACA,MAAME,OAAO,GAAG,MAAAjD,OAAA,CAAAkD,OAAA,GAAAjD,IAAA,OAAAxD,uBAAA,CAAAd,OAAA,CAAa,iCAAiC,GAAC;YAC/D,MAAM2G,KAAK,GAAG,MAAMW,OAAO,CAAC7F,OAAO,CAAC+F,KAAK,CAAC,CAAC;YAC3CT,yBAAa,CAACC,SAAS,CAAC,IAAAS,wCAAuB,EAACd,KAAK,CAAC,CAAC;YAEvD,MAAMX,WAAW,GAAGsB,OAAO,CAAC7F,OAAO,CAAC8E,gBAAgB,CAAEI,KAA4E,IAAK;cACnII,yBAAa,CAACC,SAAS,CAAC,IAAAS,wCAAuB,EAACd,KAAK,CAAC,CAAC;YAC3D,CAAC,CAAC;YAEFE,OAAO,GAAGA,CAAA,KAAMb,WAAW,CAAC,CAAC;UACjC,CAAC,CAAC,MAAM;YACJ;YACAe,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;UACjC;QACJ;MACJ,CAAC,CAAC,OAAOrC,KAAK,EAAE;QACZ;QACAoC,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;MACjC;IACJ,CAAC;IAEDF,sBAAsB,CAAC,CAAC;IAExB,OAAO,MAAM;MACTD,OAAO,GAAG,CAAC;IACf,CAAC;EACL,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA;EACA;EACA;EACA;EACA;EACA,IAAI,CAACnD,WAAW,EAAE;IACd,oBACI,IAAA7C,WAAA,CAAAoE,GAAA,EAAC/E,0BAAA,CAAAwH,sBAAsB;MAACC,KAAK,EAAExF,UAAU,CAACG,YAAa;MAAAU,QAAA,eACnD,IAAAnC,WAAA,CAAAoE,GAAA,EAAC9E,2BAAA,CAAAyH,gBAAgB;QAAA5E,QAAA,eACb,IAAAnC,WAAA,CAAAoE,GAAA,EAACD,eAAe;UAAAhC,QAAA,eACZ,IAAAnC,WAAA,CAAAoE,GAAA,EAAChF,YAAA,CAAA4H,IAAI;YAACF,KAAK,EAAExF,UAAU,CAACK;UAAU,CAAE;QAAC,CACxB;MAAC,CACJ;IAAC,CACC,CAAC;EAEjC;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMsF,WAAW,gBACb,IAAAjH,WAAA,CAAAoE,GAAA,EAAC5E,WAAA,CAAA0H,mBAAmB;IAAClC,MAAM,EAAEnC,WAAY;IAAAV,QAAA,eACrC,IAAAnC,WAAA,CAAAmH,IAAA,EAAC5H,WAAA,CAAA6H,kBAAkB;MACflF,WAAW,EAAEA,WAAsD;MACnEK,OAAO,EAAEA,OAAQ;MACjBC,UAAU,EAAEA,UAAW;MACvBC,eAAe,EAAEA,eAAgB;MACjCC,gBAAgB,EAAEA,gBAAiB;MACnCL,gBAAgB,EAAEA,gBAAiB;MACnCC,QAAQ,EAAEA,QAAS;MACnBK,WAAW,EAAEA,WAAY;MACzBC,WAAW,EAAEA,WAAY;MACzBI,iBAAiB,EAAEA,iBAAkB;MACrCC,uBAAuB,EAAEA,uBAAwB;MACjDb,iBAAiB,EAAEA,iBAAkE;MAAAD,QAAA,gBAErF,IAAAnC,WAAA,CAAAoE,GAAA,EAAC3E,SAAA,CAAA4H,eAAe;QAAAlF,QAAA,EACXY,WAAW,KAAK,KAAK,GAClBZ,QAAQ,gBAER,IAAAnC,WAAA,CAAAoE,GAAA,EAACxE,eAAA,CAAA0H,cAAc;UAACC,MAAM,EAAExE,WAAY;UAAAZ,QAAA,EAAEA;QAAQ,CAAiB;MAClE,CACY,CAAC,eAClB,IAAAnC,WAAA,CAAAoE,GAAA,EAAC1E,MAAA,CAAA8H,WAAW,IAAE,CAAC;IAAA,CACC;EAAC,CACJ,CACxB;EAED,oBACI,IAAAxH,WAAA,CAAAoE,GAAA,EAAC/E,0BAAA,CAAAwH,sBAAsB;IAACC,KAAK,EAAExF,UAAU,CAACG,YAAa;IAAAU,QAAA,eACnD,IAAAnC,WAAA,CAAAoE,GAAA,EAAC9E,2BAAA,CAAAyH,gBAAgB;MAAA5E,QAAA,eACb,IAAAnC,WAAA,CAAAoE,GAAA,EAACD,eAAe;QAAAhC,QAAA,EACX8E;MAAW,CACC;IAAC,CACJ;EAAC,CACC,CAAC;AAEjC,CAAC;AAAC,IAAAQ,QAAA,GAAAC,OAAA,CAAA9G,OAAA,GAEaqB,WAAW","ignoreList":[]}

package/lib/commonjs/ui/components/OxySignInButton.js

@@ -0,0 +1,322 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = exports.OxySignInButton = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _core = require("@oxyhq/core");
+var _authStore = require("../stores/authStore.js");
+var _shallow = require("zustand/react/shallow");
+var _theme = require("@oxyhq/bloom/theme");
+var _button = require("@oxyhq/bloom/button");
+var _toast = require("@oxyhq/bloom/toast");
+var _OxyContext = require("../context/OxyContext.js");
+var _useI18n = require("../hooks/useI18n.js");
+var _LogoIcon = require("./logo/LogoIcon.js");
+var _accountDialogManager = require("../navigation/accountDialogManager.js");
+var _oauthNavigation = require("./oauthNavigation.js");
+var _oauthPopup = require("../oauth/oauthPopup.js");
+var _jsxRuntime = require("react/jsx-runtime");
+/**
+ * The OAuth handshake surfaced to a NATIVE third-party RP via
+ * {@link OxySignInButtonProps.onOAuthResult} so it can finish the code exchange
+ * (`POST /auth/oauth/token`). Web sign-in is handled entirely by the SDK's web
+ * transport (`useOxy().startWebOAuthSignIn`) and never uses this callback.
+ */
+
+/**
+ * A pre-styled button component for signing in with Oxy identity
+ *
+ * This component opens the Oxy Auth flow which allows users to authenticate
+ * using their Oxy Accounts identity (via QR code or deep link).
+ *
+ * @example
+ * ```tsx
+ * // Basic usage
+ * <OxySignInButton />
+ *
+ * // Custom styling
+ * <OxySignInButton
+ *   variant="contained"
+ *   style={{ marginTop: 20 }}
+ *   text="Login with Oxy"
+ * />
+ *
+ * // Custom handler
+ * <OxySignInButton onPress={() => {
+ *   // Custom authentication flow
+ * }} />
+ * ```
+ */
+const OxySignInButton = ({
+  variant = 'default',
+  onPress,
+  style,
+  textStyle,
+  text,
+  disabled = false,
+  showWhenAuthenticated = false,
+  oauthRedirectUri,
+  onOAuthResult
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const {
+    t
+  } = (0, _useI18n.useI18n)();
+  const {
+    openAccountDialog,
+    oxyServices,
+    clientId,
+    webAuthMode,
+    startWebOAuthSignIn
+  } = (0, _OxyContext.useOxy)();
+  const {
+    isAuthenticated,
+    isLoading
+  } = (0, _authStore.useAuthStore)((0, _shallow.useShallow)(state => ({
+    isAuthenticated: state.isAuthenticated,
+    isLoading: state.isLoading
+  })));
+  // Tracks whether the unified account dialog is open so we can show
+  // "Signing in..." while it is. The manager reports visibility on every
+  // change regardless of platform or what opened/closed it.
+  const [isModalOpen, setIsModalOpen] = (0, _react.useState)(false);
+  (0, _react.useEffect)(() => (0, _accountDialogManager.subscribeToAccountDialog)(setIsModalOpen), []);
+
+  // The application's public identity is resolved lazily on first press and its
+  // promise cached, so rapid taps share one in-flight resolve. The cache is
+  // KEYED on the identity inputs (clientId + the oxyServices instance): if
+  // either changes the cache is invalidated and re-resolved — without a
+  // useEffect. A rejected resolve clears the cache so a later press can retry.
+  const appResolutionRef = (0, _react.useRef)(null);
+  // Re-entrancy guard: a routing pass may await network + crypto before it
+  // redirects, so block a second concurrent press from racing the sessionStorage
+  // handshake against a different PKCE pair.
+  const routingRef = (0, _react.useRef)(false);
+  // Popup mode only opens a window for applications that could actually need
+  // one: `oauthRedirectUri` is required for (and only for) third-party OAuth,
+  // so an official app never flashes a popup open and closed while its
+  // in-app dialog loads.
+  const shouldPreOpenPopup = _reactNative.Platform.OS === 'web' && webAuthMode === 'popup' && Boolean(oauthRedirectUri);
+  const resolvePublicApplication = (0, _react.useCallback)(() => {
+    if (!clientId) return null;
+    const cached = appResolutionRef.current;
+    if (cached && cached.clientId === clientId && cached.oxyServices === oxyServices) {
+      return cached.promise;
+    }
+    const promise = oxyServices.getPublicApplication(clientId).catch(error => {
+      // Only clear if this is still the live entry (a later resolve may have
+      // replaced it after a clientId/oxyServices change).
+      if (appResolutionRef.current?.promise === promise) {
+        appResolutionRef.current = null;
+      }
+      throw error;
+    });
+    appResolutionRef.current = {
+      clientId,
+      oxyServices,
+      promise
+    };
+    return promise;
+  }, [clientId, oxyServices]);
+
+  // A press that cannot reach a sign-in surface must SAY so. Without this the
+  // only trace of an aborted sign-in was a console line, so the button read as
+  // simply dead — the SDK owns this so no relying party has to wire it up.
+  // `ToastOutlet` is already mounted by `OxyProvider`.
+  const notifyNotConfigured = (0, _react.useCallback)(appName => {
+    _toast.toast.error(t('signin.errors.notConfigured'), {
+      description: t('signin.errors.notConfiguredDescription', {
+        app: appName
+      })
+    });
+  }, [t]);
+  const notifyFailed = (0, _react.useCallback)(() => {
+    _toast.toast.error(t('signin.errors.failed'), {
+      description: t('signin.errors.failedDescription')
+    });
+  }, [t]);
+
+  // Official / first-party surface: the in-app account + sign-in dialog.
+  const startOfficialSignIn = (0, _react.useCallback)(() => {
+    openAccountDialog('signin');
+  }, [openAccountDialog]);
+
+  // Third-party surface: an OAuth 2.0 authorization-code + PKCE flow against
+  // auth.oxy.so. No FedCM, no SSO bounce, no Oxy session cookies.
+  //
+  // Web delegates to the ONE shared transport (`startWebOAuthSignIn`), which
+  // owns popup-vs-redirect selection, the popup lifecycle, the code exchange,
+  // and the session commit. Native keeps its in-app auth session and hands the
+  // handshake to the RP, which owns that exchange.
+  const startThirdPartyOAuth = (0, _react.useCallback)(async (app, popup) => {
+    if (!clientId) {
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      startOfficialSignIn();
+      return;
+    }
+    if (!oauthRedirectUri) {
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      _core.logger.error('OxySignInButton: a third_party application requires the `oauthRedirectUri` prop to start the OAuth flow; sign-in aborted', undefined, {
+        component: 'OxySignInButton',
+        clientId,
+        application: app.name
+      });
+      notifyNotConfigured(app.name);
+      return;
+    }
+    if (_reactNative.Platform.OS === 'web') {
+      const result = await startWebOAuthSignIn({
+        redirectUri: oauthRedirectUri,
+        // In popup mode the window was claimed during the press (see
+        // `handlePress`); `null` means the browser blocked it and the
+        // transport falls back to a redirect. `undefined` (redirect
+        // mode) lets the transport decide for itself.
+        ...(shouldPreOpenPopup ? {
+          popup
+        } : {})
+      });
+      if (result.status === 'failed') {
+        _core.logger.warn(`OxySignInButton: web sign-in failed (${result.reason})`, {
+          component: 'OxySignInButton',
+          application: app.name
+        }, result.description);
+        notifyFailed();
+      }
+      return;
+    }
+
+    // Native: open the in-app auth session, then hand the handshake to the
+    // RP so it can complete the token exchange from its deep-link callback.
+    const [pkce, state] = await Promise.all([(0, _core.generatePkcePair)(), (0, _core.generateOAuthState)()]);
+    const authorizeUrl = (0, _core.buildOAuthAuthorizeUrl)({
+      clientId,
+      redirectUri: oauthRedirectUri,
+      state,
+      codeChallenge: pkce.codeChallenge
+    });
+    const {
+      redirectUrl
+    } = await (0, _oauthNavigation.openAuthorizeUrlNative)(authorizeUrl, oauthRedirectUri);
+    if (onOAuthResult) {
+      onOAuthResult({
+        redirectUrl,
+        state,
+        codeVerifier: pkce.codeVerifier
+      });
+      return;
+    }
+    _core.logger.warn('OxySignInButton: native third-party sign-in cannot complete without an `onOAuthResult` handler; the code exchange is the RP\'s responsibility (state + code_verifier were not surfaced)', {
+      component: 'OxySignInButton',
+      application: app.name
+    });
+    notifyNotConfigured(app.name);
+  }, [clientId, oauthRedirectUri, onOAuthResult, startOfficialSignIn, startWebOAuthSignIn, shouldPreOpenPopup, notifyNotConfigured, notifyFailed]);
+
+  // Resolve the Application once, then route: third-party → OAuth; first-party
+  // / official → the in-app dialog. An unresolved client must fail closed:
+  // opening the privileged device-session dialog without a known first-party
+  // classification could downgrade a third-party OAuth + PKCE flow. Every path
+  // that does NOT reach the OAuth lane closes the pre-opened popup, so an
+  // aborted press can never leave an empty window on screen.
+  const routeSignIn = (0, _react.useCallback)(async popup => {
+    if (routingRef.current) {
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      return;
+    }
+    routingRef.current = true;
+    try {
+      const resolving = resolvePublicApplication();
+      if (!resolving) {
+        (0, _oauthPopup.closeOAuthPopup)(popup);
+        startOfficialSignIn();
+        return;
+      }
+      let app;
+      try {
+        app = await resolving;
+      } catch (error) {
+        (0, _oauthPopup.closeOAuthPopup)(popup);
+        _core.logger.warn('OxySignInButton: could not resolve the application; sign-in aborted', {
+          component: 'OxySignInButton',
+          clientId
+        }, error);
+        notifyFailed();
+        return;
+      }
+      if (app.type === 'third_party' && !app.isOfficial) {
+        await startThirdPartyOAuth(app, popup);
+        return;
+      }
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      startOfficialSignIn();
+    } catch (error) {
+      // `handlePress` fires this without awaiting, so an unexpected
+      // throw (a rejected native auth session, a crypto failure) would
+      // otherwise vanish into an unhandled rejection with the button
+      // left looking inert.
+      (0, _oauthPopup.closeOAuthPopup)(popup);
+      _core.logger.error('OxySignInButton: sign-in routing threw; sign-in aborted', error instanceof Error ? error : new Error(String(error)), {
+        component: 'OxySignInButton',
+        clientId
+      });
+      notifyFailed();
+    } finally {
+      routingRef.current = false;
+    }
+  }, [resolvePublicApplication, startOfficialSignIn, startThirdPartyOAuth, clientId, notifyFailed]);
+
+  // Defer to a caller-supplied handler, otherwise route by application type.
+  //
+  // The popup is opened HERE, synchronously, before the async application
+  // resolve: `window.open` only survives while the click is still being
+  // handled, so a window opened after that first `await` is silently blocked.
+  const handlePress = (0, _react.useCallback)(() => {
+    if (onPress) {
+      onPress();
+      return;
+    }
+    void routeSignIn(shouldPreOpenPopup ? (0, _oauthPopup.openOAuthPopup)() : null);
+  }, [onPress, routeSignIn, shouldPreOpenPopup]);
+
+  // Don't show the button if already authenticated (unless explicitly overridden)
+  if (isAuthenticated && !showWhenAuthenticated) return null;
+  const isButtonDisabled = disabled || isLoading || isModalOpen;
+
+  // Map the public `variant` API onto Bloom's Button variants:
+  //   contained → primary (filled), outline → outline, default → secondary.
+  const buttonVariant = variant === 'contained' ? 'primary' : variant === 'outline' ? 'outline' : 'secondary';
+
+  // The Oxy mark reads white-on-primary for the filled (contained) button and
+  // primary-on-transparent for the outline / default surfaces.
+  const isContained = variant === 'contained';
+  const logoColor = isContained ? '#ffffff' : theme.colors.primary;
+  const logoLetterColor = isContained ? theme.colors.primary : '#ffffff';
+
+  // The relying party surfaces exactly ONE primary action, and it reads
+  // "Continue with Oxy" (issue #691). A caller-supplied `text` still wins.
+  const label = text ?? t('accountSwitcher.continueWithOxy');
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_button.Button, {
+    variant: buttonVariant,
+    onPress: handlePress,
+    disabled: isButtonDisabled,
+    style: style,
+    textStyle: [_reactNative.Platform.OS === 'web' ? {
+      fontWeight: '600'
+    } : null, textStyle],
+    icon: /*#__PURE__*/(0, _jsxRuntime.jsx)(_LogoIcon.LogoIcon, {
+      height: 20,
+      color: logoColor,
+      letterColor: logoLetterColor,
+      style: {
+        marginRight: 10
+      }
+    }),
+    children: isLoading || isModalOpen ? t('signin.status.signingIn') : label
+  });
+};
+exports.OxySignInButton = OxySignInButton;
+var _default = exports.default = OxySignInButton;
+//# sourceMappingURL=OxySignInButton.js.map