@undefineds.co/xpod 0.4.19 → 0.4.20

package/dist/api/container/common.js

@@ -176,7 +176,8 @@ function registerCommonServices(container) {
         solidSessions: (0, awilix_1.asFunction)(({ config }) => {
             return new SolidSessionFactory_1.SolidSessionFactory({
                 tokenEndpoint: config.cssTokenEndpoint,
-                publicBaseUrl: config.solidBaseUrl,
+                // Managed Local's Pod origin differs from the issuer of its client credentials.
+                publicBaseUrl: config.oidcIssuer ?? config.solidBaseUrl,
             });
         }).singleton(),
         ownerPodAccess: (0, awilix_1.asFunction)(({ config, solidSessions, taskCredentialStore }) => {

package/dist/api/handlers/AiConfigHandler.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerAiConfigRoutes = registerAiConfigRoutes;
 const readBoundedJsonBody_1 = require("../http/readBoundedJsonBody");
 const GatewayPrincipal_1 = require("../ai-gateway/auth/GatewayPrincipal");
+const PodAccessFailureResponse_1 = require("./PodAccessFailureResponse");
 const EmbeddingModelPolicy_1 = require("../../ai/service/EmbeddingModelPolicy");
 function registerAiConfigRoutes(server, options) {
     server.get('/api/ai/config', async (request, response) => {
@@ -17,7 +18,12 @@ function registerAiConfigRoutes(server, options) {
                 lifecycle: options.lifecycle ? await options.lifecycle.status(owner) : emptyLifecycle(config.updatedAt),
             });
         }
-        catch {
+        catch (error) {
+            // A caller whose Pod credential cannot be replayed (a DPoP session) is refused, not
+            // broken: the session retries with its own client credential only when it sees this
+            // stable 403, so reporting it as an internal error would strand the read.
+            if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error))
+                return;
             sendJson(response, 500, { error: 'Failed to read AI Config' });
         }
     });
@@ -52,7 +58,9 @@ function registerAiConfigRoutes(server, options) {
                 lifecycle: options.lifecycle ? await options.lifecycle.status(owner) : emptyLifecycle(config.updatedAt),
             });
         }
-        catch {
+        catch (error) {
+            if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error))
+                return;
             sendJson(response, 500, { error: 'Failed to update AI Config' });
         }
     });

package/dist/runtime/host/node/NodeRuntimeHost.js

@@ -20,9 +20,13 @@ class NodeRuntimeHost {
         return process.platform === 'win32' ? 'port' : 'socket';
     }
     async allocatePorts(options = {}) {
-        const gateway = options.gatewayPort ?? await (0, port_finder_1.getFreePort)(options.basePort ?? 5600);
-        const css = options.cssPort ?? await (0, port_finder_1.getFreePort)(gateway + 1);
-        const api = options.apiPort ?? await (0, port_finder_1.getFreePort)(css + 1);
+        // Defaults have to clear every address a service may bind: `bootstrap` publishes the
+        // gateway as `localhost`, which can resolve to `::1`, while CSS/API bind the default
+        // `bindHost` 127.0.0.1. An IPv4-only probe reports a port held on `[::]` as free, and the
+        // runtime then serves its own localhost traffic to the competitor.
+        const gateway = options.gatewayPort ?? await (0, port_finder_1.getFreePortForWildcard)(options.basePort ?? 5600);
+        const css = options.cssPort ?? await (0, port_finder_1.getFreePortForWildcard)(gateway + 1);
+        const api = options.apiPort ?? await (0, port_finder_1.getFreePortForWildcard)(css + 1);
         // Tunnels (and the P2P data plane) terminate here, and this listener never treats a
         // caller as local whatever headers it carries - that is the gate. Its port is the one
         // number the user copies into a provider console, so it is predictable rather than

package/dist/runtime/port-finder.d.ts

@@ -18,11 +18,6 @@ export declare function getFreePort(basePort: number, host?: string, timeoutMs?:
  * runtime's service.
  */
 export declare function getEphemeralLoopbackPort(): Promise<number>;
-/**
- * Allocates a port for child services that bind wildcard addresses.
- * CSS may bind `::` while the API binds `0.0.0.0`, so probing only localhost
- * can miss an occupied port on the other address family.
- */
 /**
  * Takes exactly this port or fails.
  *

package/dist/runtime/port-finder.js

@@ -155,10 +155,26 @@ function hasIpv6Address() {
     return Object.values(node_os_1.default.networkInterfaces()).some((entries) => entries?.some((entry) => entry.family === 'IPv6'));
 }
 /**
- * Allocates a port for child services that bind wildcard addresses.
- * CSS may bind `::` while the API binds `0.0.0.0`, so probing only localhost
- * can miss an occupied port on the other address family.
+ * Addresses this allocator clears before handing out a port: the wildcard addresses plus the
+ * loopback addresses child services use by default (`bindHost` defaults to `127.0.0.1`).
+ * Platforms may allow a wildcard bind and a specific-address bind on the same port (this macOS
+ * host does, under Node and Bun), so probing one category can report an unusable port as free.
+ * A port held on a non-loopback specific address is outside this guarantee: it is not probed.
  */
+function serviceProbeHosts(probeIpv6) {
+    return probeIpv6
+        ? ['0.0.0.0', '::', '127.0.0.1', '::1']
+        : ['0.0.0.0', '127.0.0.1'];
+}
+/** The first address a service may bind that is already taken, if any. */
+async function firstOccupiedServiceAddress(port, timeoutMs, probeIpv6) {
+    for (const host of serviceProbeHosts(probeIpv6)) {
+        if (!await canListen(port, host, timeoutMs)) {
+            return host;
+        }
+    }
+    return undefined;
+}
 /**
  * Takes exactly this port or fails.
  *
@@ -169,21 +185,17 @@ async function requireFreePortForWildcard(port, timeoutMs = PORT_PROBE_TIMEOUT_M
     if (!Number.isInteger(port) || port <= 0 || port > 65535) {
         throw new Error(`ingress port ${port} is not a valid port number`);
     }
-    if (!await canListen(port, '0.0.0.0', timeoutMs)) {
-        throw new Error(`ingress port ${port} is already in use; free it or point the tunnel at another port`);
-    }
-    if (hasIpv6Address() && !await canListen(port, '::', timeoutMs)) {
-        throw new Error(`ingress port ${port} is already in use on IPv6; free it or point the tunnel at another port`);
+    const occupied = await firstOccupiedServiceAddress(port, timeoutMs, hasIpv6Address());
+    if (occupied) {
+        const family = occupied.includes(':') ? ' on IPv6' : '';
+        throw new Error(`ingress port ${port} is already in use${family}; free it or point the tunnel at another port`);
     }
     return port;
 }
 async function getFreePortForWildcard(basePort, timeoutMs = PORT_PROBE_TIMEOUT_MS) {
     const probeIpv6 = hasIpv6Address();
     for (let port = basePort; port <= HIGHEST_PORT; port++) {
-        if (!await canListen(port, '0.0.0.0', timeoutMs)) {
-            continue;
-        }
-        if (probeIpv6 && !await canListen(port, '::', timeoutMs)) {
+        if (await firstOccupiedServiceAddress(port, timeoutMs, probeIpv6)) {
             continue;
         }
         return port;

package/node_modules/@undefineds.co/extension-sdk/dist/react/solid-auth-boundary.d.ts

@@ -1,5 +1,5 @@
 import { type ReactNode } from 'react';
-import { type AuthSurfaceMode, type StorageBootstrapCopy, type WebIdLoginRouteCopy } from '@undefineds.co/shared-ui';
+import { type AppIdentity, type AuthSurfaceMode, type PodSignInCopy, type PodSignInLocale, type StorageBootstrapCopy, type WebIdLoginRouteCopy } from '@undefineds.co/shared-ui';
 import type { StorageSelectionState, StorageBinding, WebIdAuthState, WebIdLoginRouteDescriptor } from '@undefineds.co/solid-sdk';
 export interface SolidAuthBoundaryProps {
     state: WebIdAuthState;
@@ -9,6 +9,11 @@ export interface SolidAuthBoundaryProps {
     onCreateStorage?: () => void | Promise<void>;
     onContinueStorage?: (binding: StorageBinding) => void | Promise<void>;
     onSelectStorage?: (binding: StorageBinding) => void | Promise<void>;
+    /**
+     * `storage` still overrides the Pod chooser wording. `route` is retained for
+     * source compatibility only: the sign-in wording now ships with `PodSignIn`
+     * (`podSignInCopy` overrides it).
+     */
     copy?: {
         route?: Partial<WebIdLoginRouteCopy>;
         storage?: Partial<StorageBootstrapCopy>;
@@ -22,6 +27,19 @@ export interface SolidAuthBoundaryProps {
     /** Optional host-owned close action for modal presentation. */
     onSurfaceClose?: () => void | Promise<void>;
     auxiliary?: ReactNode;
+    /** The application's own name and icon for the source mark. Nothing is assumed when omitted. */
+    app?: AppIdentity;
+    /** Sign-in wording language. Defaults to `en`. */
+    locale?: PodSignInLocale;
+    /** Partial overrides of the shared sign-in wording. */
+    podSignInCopy?: Partial<PodSignInCopy>;
+    /** Technical detail of a failure becomes expandable. */
+    developerMode?: boolean;
     children: ReactNode;
 }
-export declare function SolidAuthBoundary({ state, storageState, routes, storageRouteId, onCreateStorage, onContinueStorage, onSelectStorage, copy, onLogin, onRetry, onCancel, onSwitchAccount, surfaceMode, onSurfaceClose, auxiliary, children, }: SolidAuthBoundaryProps): import("react").JSX.Element;
+/**
+ * The application front door for third-party apps: maps the WebID and Pod
+ * selection state onto the shared `PodSignIn` states (A0-A3, plus a one-line
+ * C notice). It renders no second login flow; every action calls the host.
+ */
+export declare function SolidAuthBoundary({ state, storageState, routes, storageRouteId, onCreateStorage, onContinueStorage, onSelectStorage, copy, onLogin, onRetry, onCancel, onSwitchAccount, surfaceMode, onSurfaceClose, auxiliary, app: appProp, locale, podSignInCopy, developerMode, children, }: SolidAuthBoundaryProps): import("react").JSX.Element;

package/node_modules/@undefineds.co/extension-sdk/dist/react/solid-auth-boundary.js

@@ -1,83 +1,19 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { useState } from 'react';
-import { AuthSurface, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, StorageBootstrapView, WebIdLoginRouteView, } from '@undefineds.co/shared-ui';
-const routeCopy = {
-    title: 'Connect to Solid',
-    description: 'Choose an identity route to continue.',
-    startLabel: 'Continue',
-    restoringLabel: 'Restoring your session…',
-    connectingLabel: 'Connecting…',
-    rememberedLabel: 'Remembered identity',
-    expiredTitle: 'Session expired',
-    retryLabel: 'Try again',
-    cancelLabel: 'Cancel',
-    storageConflictTitle: 'Storage conflict',
-    failureTitle: 'Could not sign in',
-    switchAccountLabel: 'Switch account',
-};
-const storageCopy = {
-    title: 'Prepare storage',
-    description: 'The host is preparing the selected storage binding.',
-    creationMessage: 'Storage is not ready yet.',
-    waitingMessage: 'Waiting for the storage binding.',
-    readyMessage: 'Storage is ready.',
-    conflictMessage: 'The selected storage conflicts with this identity.',
-    errorMessage: 'Storage could not be prepared.',
-    createLabel: 'Create storage',
-    continueLabel: 'Continue',
-    retryLabel: 'Try again',
-    cancelLabel: 'Cancel',
-};
-function presentationState(state, storageState) {
-    if (storageState?.status === 'conflict') {
-        return { status: 'storage-conflict', message: storageState.message };
-    }
-    if (storageState?.status === 'error') {
-        return { status: 'error', message: storageState.message };
-    }
-    switch (state.status) {
-        case 'restoring':
-            return state.remembered
-                ? { status: 'restoring', remembered: state.remembered }
-                : { status: 'restoring' };
-        case 'anonymous':
-            return state.remembered
-                ? { status: 'remembered', remembered: state.remembered }
-                : { status: 'anonymous' };
-        case 'connecting':
-            return { status: 'connecting' };
-        case 'authenticated':
-            return { status: 'authenticated', webId: state.webId };
-        case 'expired':
-            return state.remembered
-                ? { status: 'expired', remembered: state.remembered }
-                : { status: 'expired' };
-        case 'error':
-            return { status: 'error', message: state.message };
+import { useRef, useState } from 'react';
+import { Button, PodSignIn, PodSignInFrame, SourceMark, formatCopy, resolvePodSignInCopy, webIdShortName, } from '@undefineds.co/shared-ui';
+const DEFAULT_APP_NAME = 'Solid';
+function presentationFor(mode) {
+    switch (mode) {
+        case 'page': return { presentation: 'page', modal: false };
+        case 'modal': return { presentation: 'dialog', modal: true };
+        case 'embedded': return { presentation: 'dialog', modal: false };
     }
 }
-function storageViewState(state) {
-    switch (state.status) {
-        case 'loading':
-            return 'waiting';
-        case 'empty':
-            return 'creation';
-        case 'selecting':
-            return 'waiting_for_binding';
-        case 'creating':
-            return 'creating';
-        case 'waiting_for_binding':
-            return 'waiting_for_binding';
-        case 'ready':
-            return 'ready';
-        case 'conflict':
-            return { status: 'conflict', message: state.message };
-        case 'error':
-            return { status: 'error', message: state.message };
-    }
-}
-function isStorageReady(state) {
-    return state === undefined || state.status === 'ready';
+function rememberedIdentity(remembered) {
+    return {
+        displayName: remembered.displayName,
+        ...(remembered.avatarUrl ? { avatarUrl: remembered.avatarUrl } : {}),
+    };
 }
 function storageBindingLabel(binding) {
     if (binding.label?.trim())
@@ -87,62 +23,143 @@ function storageBindingLabel(binding) {
 function storageBindingKey(binding) {
     return `${binding.storageUrl}\u0000${binding.webId}`;
 }
-function StorageSelectionView({ state, copy, onSelectStorage, onContinueStorage, }) {
+/** The Pod chooser: the same 360px body and tokens as the sign-in states. */
+function StorageSelectionView({ state, app, copy, storageCopy, onSelectStorage, onContinueStorage, }) {
     const [selectedKey, setSelectedKey] = useState();
     const selected = state.candidates.find((candidate) => storageBindingKey(candidate) === selectedKey);
     const canSelect = Boolean(onSelectStorage || onContinueStorage);
-    return (_jsxs(Card, { className: "w-full rounded-none border-0 bg-transparent text-card-foreground shadow-none", children: [copy.title || copy.description ? (_jsxs(CardHeader, { children: [copy.title ? _jsx(CardTitle, { children: copy.title }) : null, copy.description ? _jsx(CardDescription, { children: copy.description }) : null] })) : null, _jsxs(CardContent, { className: "space-y-4 px-4 pb-4 pt-0", children: [_jsx("p", { role: "status", "aria-live": "polite", className: "text-sm text-foreground", children: "Choose a storage binding to continue." }), _jsx("div", { className: "space-y-2", children: state.candidates.map((candidate) => {
-                            const key = storageBindingKey(candidate);
-                            const label = storageBindingLabel(candidate);
-                            const isSelected = key === selectedKey;
-                            const content = (_jsxs(_Fragment, { children: [_jsx("span", { className: "min-w-0 truncate", children: label }), _jsx("span", { className: "shrink-0 text-xs text-muted-foreground", children: isSelected ? 'Selected' : 'Select' })] }));
-                            return canSelect ? (_jsx(Button, { type: "button", variant: isSelected ? 'secondary' : 'outline', className: "h-auto w-full justify-between gap-3 px-3 py-3 text-left", "aria-label": `${isSelected ? 'Selected' : 'Select'} ${label}`, "aria-pressed": isSelected, onClick: () => {
-                                    setSelectedKey(key);
-                                    if (onSelectStorage)
-                                        void onSelectStorage(candidate);
-                                }, children: content }, key)) : (_jsx("div", { className: "flex items-center justify-between gap-3 rounded-md border border-border/60 px-3 py-3 text-sm", children: content }, key));
-                        }) }), selected && onContinueStorage ? (_jsx(Button, { type: "button", className: "w-full", onClick: () => void onContinueStorage(selected), children: copy.continueLabel })) : null] })] }));
+    const title = storageCopy?.title || copy.choosePodTitle;
+    const continueLabel = storageCopy?.continueLabel || copy.customSubmit;
+    return (_jsxs("div", { "data-pod-sign-in-state": "choose-pod", className: "flex flex-col gap-6", children: [_jsx(SourceMark, { icon: app.icon, name: app.name }), _jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h1", { className: "text-xl font-semibold text-foreground", children: title }), _jsx("p", { role: "status", "aria-live": "polite", className: "text-sm text-muted-foreground", children: storageCopy?.description || copy.choosePodLead })] }), _jsx("div", { className: "flex flex-col gap-2", children: state.candidates.map((candidate) => {
+                    const key = storageBindingKey(candidate);
+                    const label = storageBindingLabel(candidate);
+                    const isSelected = key === selectedKey;
+                    const stateLabel = isSelected ? copy.selected : copy.select;
+                    const content = (_jsxs(_Fragment, { children: [_jsx("span", { className: "min-w-0 truncate text-sm text-foreground", children: label }), _jsx("span", { className: "shrink-0 text-[13px] text-muted-foreground", children: stateLabel })] }));
+                    return canSelect ? (_jsx("button", { type: "button", "aria-label": `${stateLabel} ${label}`, "aria-pressed": isSelected, className: `flex min-h-11 w-full items-center justify-between gap-3 rounded-lg border px-3 py-2 text-left focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-ring ${isSelected ? 'border-primary bg-accent' : 'border-border bg-card'}`, onClick: () => {
+                            setSelectedKey(key);
+                            if (onSelectStorage)
+                                void onSelectStorage(candidate);
+                        }, children: content }, key)) : (_jsx("div", { className: "flex min-h-11 items-center justify-between gap-3 rounded-lg border border-border bg-card px-3 py-2", children: content }, key));
+                }) }), selected && onContinueStorage ? (_jsx(Button, { type: "button", className: "h-11 w-full rounded-lg text-sm font-medium", onClick: () => void onContinueStorage(selected), children: continueLabel })) : null] }));
+}
+function isStorageReady(state) {
+    return state === undefined || state.status === 'ready';
 }
-export function SolidAuthBoundary({ state, storageState, routes, storageRouteId, onCreateStorage, onContinueStorage, onSelectStorage, copy, onLogin, onRetry, onCancel, onSwitchAccount, surfaceMode = 'page', onSurfaceClose, auxiliary, children, }) {
-    const visibleRouteCopy = { ...routeCopy, ...copy?.route };
-    const visibleStorageCopy = { ...storageCopy, ...copy?.storage };
-    // AuthSurface owns both the accessible heading and the card frame for the
-    // boundary. The nested views render unframed with presentation-only titles
-    // so the surface does not show double cards or two equally named headings.
-    const routeViewCopy = { ...visibleRouteCopy, title: '' };
-    const storageViewCopy = { ...visibleStorageCopy, title: '' };
-    const surface = (title, content) => (_jsx(AuthSurface, { mode: surfaceMode, title: title, onClose: onSurfaceClose, closeLabel: "Close", children: content }));
+/**
+ * The application front door for third-party apps: maps the WebID and Pod
+ * selection state onto the shared `PodSignIn` states (A0-A3, plus a one-line
+ * C notice). It renders no second login flow; every action calls the host.
+ */
+export function SolidAuthBoundary({ state, storageState, routes, storageRouteId, onCreateStorage, onContinueStorage, onSelectStorage, copy, onLogin, onRetry, onCancel, onSwitchAccount, surfaceMode = 'page', onSurfaceClose, auxiliary, app: appProp, locale = 'en', podSignInCopy, developerMode = false, children, }) {
+    const text = resolvePodSignInCopy(locale, podSignInCopy);
+    // `connecting` carries only the route, so the screen the user pressed the button on
+    // (remembered identity or first visit) is remembered from the states before it.
+    const lastRemembered = useRef(undefined);
+    if (state.status === 'anonymous' || state.status === 'restoring' || state.status === 'expired') {
+        lastRemembered.current = state.remembered;
+    }
+    const app = appProp ?? { name: DEFAULT_APP_NAME };
+    const { presentation, modal } = presentationFor(surfaceMode);
+    const frame = (content) => (_jsxs(PodSignInFrame, { presentation: presentation, modal: modal, ariaLabel: text.chooseTitle, onClose: onSurfaceClose ? () => void onSurfaceClose() : undefined, closeLabel: onSurfaceClose ? text.close : undefined, children: [content, auxiliary ? _jsx("div", { className: "mt-4", children: auxiliary }) : null] }));
     if (state.status === 'authenticated' && isStorageReady(storageState)) {
         return _jsx(_Fragment, { children: children });
     }
     if (state.status === 'authenticated' && storageState?.status === 'selecting') {
-        return surface(visibleStorageCopy.title, (_jsx(StorageSelectionView, { state: storageState, copy: storageViewCopy, onSelectStorage: onSelectStorage, onContinueStorage: onContinueStorage })));
+        return frame(_jsx(StorageSelectionView, { state: storageState, app: app, copy: text, storageCopy: copy?.storage, onSelectStorage: onSelectStorage, onContinueStorage: onContinueStorage }));
+    }
+    // Route used by "sign in" and "sign in again": the remembered identity's route,
+    // else the only route. With several routes and nothing remembered the first is the primary one.
+    const rememberedOf = (s) => (s.status === 'anonymous' || s.status === 'restoring' || s.status === 'expired' ? s.remembered : undefined);
+    const remembered = rememberedOf(state);
+    const primaryRoute = state.status === 'connecting'
+        ? state.route
+        : routes.find((route) => route.id === remembered?.routeId) ?? routes[0];
+    const login = () => { if (primaryRoute)
+        void onLogin(primaryRoute.id); };
+    const relogin = () => {
+        const routeId = state.status === 'error' ? state.retryRouteId : primaryRoute?.id;
+        if (routeId && onRetry)
+            void onRetry(routeId);
+        else
+            login();
+    };
+    const noop = () => undefined;
+    const extraRoutes = state.status === 'anonymous' && !remembered ? routes.filter((route) => route !== primaryRoute) : [];
+    let podState;
+    let notice;
+    let onPrimary = login;
+    let onUseAnother = onSwitchAccount ? () => void onSwitchAccount() : undefined;
+    const serviceLabel = primaryRoute?.label;
+    // Route-specific label for the primary button on the first-visit screen.
+    const routeCopy = serviceLabel
+        ? { useXpod: formatCopy(text.signInWith, { service: serviceLabel }) }
+        : undefined;
+    if (state.status === 'authenticated') {
+        // Valid WebID sessions stay valid while their Pod opens or retries: never
+        // turn a Pod problem into a second login.
+        const identity = { displayName: webIdShortName(state.webId) };
+        const busy = storageState?.status === 'loading'
+            || storageState?.status === 'waiting_for_binding'
+            || storageState?.status === 'creating';
+        podState = { kind: 'remembered', identity, busy };
+        onUseAnother = undefined;
+        onPrimary = noop;
+        if (storageState?.status === 'error') {
+            notice = { tone: 'warning', text: text.noticeUnreachable, primaryLabel: text.retry, developerDetail: storageState.message };
+            const retryRouteId = storageRouteId;
+            onPrimary = retryRouteId && onRetry ? () => void onRetry(retryRouteId) : noop;
+        }
+        else if (storageState?.status === 'conflict') {
+            notice = { tone: 'warning', text: text.noticeIncomplete, primaryLabel: text.useAnother, developerDetail: storageState.message };
+            onPrimary = onSwitchAccount
+                ? () => void onSwitchAccount()
+                : storageRouteId && onRetry ? () => void onRetry(storageRouteId) : noop;
+        }
+        else if (storageState?.status === 'empty') {
+            notice = { tone: 'neutral', text: text.noticeNoWebId, primaryLabel: text.goCreate };
+            onPrimary = onCreateStorage ? () => void onCreateStorage() : noop;
+        }
+    }
+    else if (state.status === 'restoring') {
+        podState = { kind: 'restoring', ...(remembered ? { identity: rememberedIdentity(remembered) } : {}) };
+    }
+    else if (state.status === 'connecting') {
+        // The screen the user pressed the button on, with the button spinning.
+        podState = lastRemembered.current
+            ? { kind: 'remembered', identity: rememberedIdentity(lastRemembered.current), busy: true }
+            : { kind: 'choose-service', busy: true };
+        if (lastRemembered.current)
+            onUseAnother = undefined;
+    }
+    else if (state.status === 'expired') {
+        podState = {
+            kind: 'expired',
+            identity: rememberedIdentity(remembered ?? { displayName: serviceLabel ?? app.name }),
+        };
+        onPrimary = relogin;
     }
-    if (state.status === 'authenticated' && storageState) {
-        const storageStateView = storageViewState(storageState);
-        const canRetryStorage = Boolean(onRetry && storageRouteId
-            && (storageState.status === 'conflict' || storageState.status === 'error'));
-        const canCancelStorage = Boolean(onCancel
-            && (storageState.status === 'creating' || storageState.status === 'waiting_for_binding'));
-        return surface(visibleStorageCopy.title, (_jsx(StorageBootstrapView, { state: storageStateView, copy: storageViewCopy, onCreate: storageState.status === 'empty' ? onCreateStorage : undefined, onRetry: canRetryStorage ? () => void onRetry?.(storageRouteId) : undefined, onCancel: canCancelStorage ? onCancel : undefined, framed: false })));
+    else {
+        // anonymous, or error (same screens plus a C4 notice)
+        podState = remembered
+            ? { kind: 'remembered', identity: rememberedIdentity(remembered) }
+            : { kind: 'choose-service' };
+        if (state.status === 'error') {
+            notice = {
+                tone: 'warning',
+                text: text.noticeIncomplete,
+                primaryLabel: text.reauthenticate,
+                developerDetail: state.message,
+            };
+            onPrimary = relogin;
+        }
+        if (primaryRoute?.availability === 'starting') {
+            podState = { ...podState, busy: true };
+        }
+        else if (primaryRoute?.availability === 'unavailable' && !notice) {
+            notice = { tone: 'warning', text: primaryRoute.unavailableReason ?? text.noticeUnreachable };
+            onPrimary = noop;
+        }
     }
-    const routeList = state.status === 'connecting'
-        ? [state.route]
-        : routes.length > 0
-            ? routes
-            : [];
-    const mappedState = presentationState(state, storageState);
-    return surface(visibleRouteCopy.title, (_jsxs("div", { className: "flex w-full flex-col gap-4", children: [routeList.map((route) => {
-                const retryRouteId = state.status === 'error'
-                    ? state.retryRouteId
-                    : state.status === 'expired'
-                        ? state.remembered?.routeId ?? (routes.length === 1 ? routes[0]?.id : undefined)
-                        : undefined;
-                const canRetry = Boolean(onRetry && (retryRouteId === route.id
-                    || (storageRouteId === route.id
-                        && (storageState?.status === 'conflict' || storageState?.status === 'error'))));
-                const canStart = state.status === 'anonymous';
-                const canCancel = state.status === 'connecting';
-                return (_jsx(WebIdLoginRouteView, { route: route, state: mappedState, copy: routeViewCopy, onStart: canStart ? onLogin : undefined, onRetry: canRetry ? onRetry : undefined, onCancel: canCancel ? onCancel : undefined, onSwitchAccount: onSwitchAccount, framed: false }, route.id));
-            }), auxiliary ? _jsx("div", { children: auxiliary }) : null] })));
+    return frame(_jsxs(_Fragment, { children: [_jsx(PodSignIn, { app: app, state: podState, notice: notice, locale: locale, copy: { ...routeCopy, ...podSignInCopy }, developerMode: developerMode, primaryIcon: null, capabilities: { customService: false, register: false }, onPrimary: onPrimary, onUseAnother: onUseAnother }), extraRoutes.length > 0 ? (_jsx("div", { className: "mt-3 flex flex-col gap-2", children: extraRoutes.map((route) => (_jsx(Button, { type: "button", variant: "outline", className: "h-11 w-full rounded-lg text-sm font-medium", disabled: route.availability === 'unavailable', onClick: () => void onLogin(route.id), children: formatCopy(text.signInWith, { service: route.label }) }, route.id))) })) : null, state.status === 'connecting' && onCancel ? (_jsx(Button, { type: "button", variant: "ghost", className: "mt-2 h-9 w-full rounded-lg px-2 text-sm font-medium", onClick: () => void onCancel(), children: text.cancel })) : null] }));
 }

package/node_modules/@undefineds.co/shared-ui/dist/focus.d.ts

@@ -5,7 +5,7 @@
  * top of a native form focus border creates the double-frame effect that this
  * package intentionally avoids.
  */
-export declare const controlFocusClass = "focus:outline-none focus:ring-0 focus-visible:border-ring";
+export declare const controlFocusClass = "focus:outline-none focus:ring-0 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-[3px] focus-visible:outline-ring";
 export declare const interactiveFocusClass = "focus:outline-none focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-ring";
 /**
  * Buttons communicate keyboard focus through their existing surface instead

package/node_modules/@undefineds.co/shared-ui/dist/focus.js

@@ -5,7 +5,7 @@
  * top of a native form focus border creates the double-frame effect that this
  * package intentionally avoids.
  */
-export const controlFocusClass = 'focus:outline-none focus:ring-0 focus-visible:border-ring';
+export const controlFocusClass = 'focus:outline-none focus:ring-0 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-[3px] focus-visible:outline-ring';
 export const interactiveFocusClass = 'focus:outline-none focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-ring';
 /**
  * Buttons communicate keyboard focus through their existing surface instead

package/node_modules/@undefineds.co/shared-ui/dist/index.d.ts

@@ -29,3 +29,4 @@ export * from './utils';
 export * from './storage-bootstrap';
 export * from './webid-auth';
 export * from './workspace';
+export * from './pod-sign-in/index';

package/node_modules/@undefineds.co/shared-ui/dist/index.js

@@ -28,3 +28,4 @@ export * from './utils.js';
 export * from './storage-bootstrap.js';
 export * from './webid-auth.js';
 export * from './workspace.js';
+export * from './pod-sign-in/index.js';

package/node_modules/@undefineds.co/shared-ui/dist/login/LoginModal.d.ts

@@ -2,5 +2,7 @@ import type { LoginModalProps } from './types';
 /**
  * Shared login modal. The host supplies the brand and, optionally, the product
  * name that user-facing messages refer to.
+ *
+ * @deprecated Use PodSignIn inside PodSignInFrame (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
  */
 export declare function LoginModal(props: LoginModalProps): import("react").JSX.Element | null;

package/node_modules/@undefineds.co/shared-ui/dist/login/LoginModal.js

@@ -12,6 +12,8 @@ import { LocalReachabilitySummary } from './LocalReachabilitySummary.js';
 /**
  * Shared login modal. The host supplies the brand and, optionally, the product
  * name that user-facing messages refer to.
+ *
+ * @deprecated Use PodSignIn inside PodSignInFrame (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
  */
 export function LoginModal(props) {
     const { state, storageConflict, view } = props;

package/node_modules/@undefineds.co/shared-ui/dist/login/LoginView.d.ts

@@ -30,4 +30,7 @@ export interface LoginViewProps {
     overlayClassName?: string;
     cardClassName?: string;
 }
+/**
+ * @deprecated Use PodSignIn (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export declare function LoginView({ state, identity, error, restorable, providers, brand, host, ariaLabel, actions, authWindowStatus, connectingProvider, allowAdditionalProviders, overlayClassName, cardClassName, }: LoginViewProps): import("react").JSX.Element | null;

package/node_modules/@undefineds.co/shared-ui/dist/login/LoginView.js

@@ -6,6 +6,9 @@ const CLOSED_AUTH_WINDOW = {
     reason: 'dismissed',
     ready: false,
 };
+/**
+ * @deprecated Use PodSignIn (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export function LoginView({ state, identity, error = null, restorable = false, providers, brand, host = 'document', ariaLabel, actions, authWindowStatus = CLOSED_AUTH_WINDOW, connectingProvider = null, allowAdditionalProviders = false, overlayClassName, cardClassName, }) {
     if (state === 'authenticated')
         return null;

package/node_modules/@undefineds.co/shared-ui/dist/login.d.ts

@@ -20,11 +20,17 @@ export declare function LoginAvatar({ name, avatarUrl, size, marker, }: {
     size?: 'md' | 'lg';
     marker?: ReactNode;
 }): import("react").JSX.Element;
+/**
+ * @deprecated Use PodSignIn (state `restoring`) (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export declare function LoginRestoringView({ accountName, avatarUrl, label, }: {
     accountName?: string;
     avatarUrl?: string;
     label?: string;
 }): import("react").JSX.Element;
+/**
+ * @deprecated Use PodSignIn (`busy` on the primary action) (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export declare function LoginConnectingView({ title, detail, providerLabel, providerHost, onCancel, cancelLabel, }: {
     title?: string;
     detail?: string;
@@ -33,6 +39,9 @@ export declare function LoginConnectingView({ title, detail, providerLabel, prov
     onCancel?: () => void;
     cancelLabel?: string;
 }): import("react").JSX.Element;
+/**
+ * @deprecated Use PodSignIn (states `remembered` / `expired`) (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export declare function LoginAccountView({ name, avatarUrl, bindingLabel, expired, expiredTitle, expiredDescription, enterLabel, switchLabel, error, onDismissError, dismissErrorLabel, onEnter, onSwitchAccount, onReauthenticate, }: {
     name: string;
     avatarUrl?: string;
@@ -93,6 +102,9 @@ export interface RememberedLoginViewCopy {
     connectingDetail: string;
     cancelLabel: string;
 }
+/**
+ * @deprecated Use PodSignIn (states `remembered` / `expired`) (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export declare function RememberedLoginView({ state, copy, onContinue, onReauthenticate, onSwitchAccount, onCancel, onDismissError, }: {
     state: SessionLoginPresentationState;
     copy: RememberedLoginViewCopy;
@@ -102,6 +114,9 @@ export declare function RememberedLoginView({ state, copy, onContinue, onReauthe
     onCancel?: () => void;
     onDismissError?: () => void;
 }): import("react").JSX.Element | null;
+/**
+ * @deprecated Use PodSignIn with a `notice` (see `pod-sign-in/`). Kept for one more version; behavior is unchanged.
+ */
 export declare function LoginFailureView({ title, description, primaryLabel, onPrimary, secondaryLabel, onSecondary, }: {
     title?: string;
     description?: string | null;