@unisim/sdk 0.141.6 → 0.141.8

package/README.md

@@ -72,9 +72,10 @@ function Header() {
   Apple has no such parameter). A password is a quiet second route on the code
   tab: it signs an existing account in and never creates one, and there is no
   password reset — the code is the way back in. The provider tab appears **only
-  for providers the Supabase project has switched on**, and **never in a native
-  (Capacitor) shell**; without it there is no tab bar at all. See the header of
-  `SignInDialog.tsx`.
+  for providers the Supabase project has switched on**; without it there is no
+  tab bar at all. In a native (Capacitor) shell the buttons use the system
+  browser / Apple's own sheet instead of the web round trip — see [Provider
+  sign-in in the phone apps](#provider-sign-in-in-the-phone-apps-apple--google--microsoft).
 - `sendSignInCode(supabase, { email })` / `verifySignInCode(supabase, { email,
   code, flow })` — the code tab's logic, for other sign-in screens (the hub's).
   A trial session gets an email-change code, verified as `email_change`, so the
@@ -85,6 +86,10 @@ function Header() {
   with `linkIdentity`, never replaced.
 - `fetchEnabledOAuthProviders(supabaseUrl, anonKey)` — which providers are on,
   from `/auth/v1/settings`; `[]` on any doubt.
+- `startNativeOAuthSignIn(supabase, provider, { supabaseUrl, anonKey, loginHint })`
+  — the same thing inside a Capacitor app; resolves `signed-in` / `cancelled` /
+  `error` when the round trip is over. `nativeOAuthSupport()` /
+  `nativeProvidersToOffer()` decide whether to offer it.
 - `<OAuthButtons providers={…} />` — the buttons. Without `providers` it shows
   Google and Microsoft only, because the hub's labels predate Apple.
 
@@ -115,6 +120,18 @@ function Header() {
   `<UserProfile />` when its account header is clicked; pass
   `showLimits={false}` to the navbar's profile if a product shows entitlements
   its own way.
+- **Delete my account** (since 0.141.7) — a row under Sign out in that same
+  account panel, opening `<DeleteAccountDialog />`: it warns that the Universal
+  ID goes in **every** UNI·SIM product, needs `delete-all` typed, calls the
+  platform's `delete-account` function and signs out locally. App Review
+  5.1.1(v) and Google Play both require in-app deletion for an app whose
+  sign-in creates accounts, so it is **on by default inside a native
+  (Capacitor) shell and off in a browser**; `showDeleteAccount` on
+  `<UserProfile />` / `<UniversalAppsNavBar />` overrides it either way. ⚠️ An
+  app that draws its own delete row passes `false` (Universal PDF does, or a
+  phone shows two). `deleteMyAccount()`, `DeleteAccountDialog` and
+  `deleteAccountCopy()` are exported for an app that wants them elsewhere.
+  `npm run test:delete-account` (39 checks).
 
 ### Org admin
 - `useOrgMembers()` / `useOrgSeats()` / `useAuditLog()`
@@ -345,6 +362,81 @@ app actually got — a build that quietly landed on `native-local` still signs i
 it just does not carry to the other apps, and nothing about the behaviour makes
 that visible.
 
+## Provider sign-in in the phone apps (Apple / Google / Microsoft)
+
+`<SignInDialog />` offers the Apple / Google / Microsoft tab inside a Capacitor
+app too (since 0.141.8). The web round trip cannot work there — it returns to
+`capacitor://localhost`, which is on no redirect allowlist; Google refuses
+sign-in inside an embedded web view (`403 disallowed_useragent`); and
+navigating the app's only web view away unloads the app — so a native shell
+does it the way native apps must:
+
+| | iOS | Android |
+| --- | --- | --- |
+| Apple | the OS's **Sign in with Apple sheet** → Supabase `id_token` grant | the system browser, like the others |
+| Google / Microsoft | **`ASWebAuthenticationSession`** → Supabase `/authorize` | a **Custom Tab** → Supabase `/authorize` |
+| Comes back to | the session's own completion handler | `OAuthCallbackActivity`, merged in from the SDK's manifest |
+| Callback address | `<bundle id>://auth-callback` | `<applicationId>://auth-callback` |
+| Per-app config | the `com.apple.developer.applesignin` entitlement | none |
+
+Source: `src/nativeOAuth.ts`, `ios/Sources/UnisimSuiteAuthPlugin/SuiteOAuth.swift`,
+`android/src/main/java/uk/co/unisim/sdk/OAuthCallbackActivity.java`. The three
+native methods (`oauthSupport`, `oauthStart`, `appleSignIn`) live on the
+existing `UnisimSuiteAuth` plugin, for the same reason the app-opening methods
+do: a new plugin class is absent from every app until each one re-syncs.
+
+What it guarantees, each pinned by `npm run test:native-oauth`:
+
+- **The session is suite-wide.** It is installed with `supabase.auth.setSession`,
+  which writes through the shared suite store above — one sign-in on the phone
+  signs in every suite app, exactly like the email code.
+- **A trial session is linked, never replaced** — the browser leg goes through
+  `/user/identities/authorize` with the trial's bearer token, the Apple leg
+  through the `id_token` grant with `link_identity`, and a failed link is
+  returned, never retried as a sign-in. `identity_already_exists` and
+  `manual_linking_disabled` arrive with the web flow's codes, so the dialog's
+  collision panel works unchanged. (The native "leave my trial behind" path
+  does not sign out first: the new session replaces the trial only when it
+  lands, so cancelling keeps the trial.)
+- **PKCE, and only a code is accepted back.** S256 where WebCrypto exists,
+  `plain` otherwise (supabase-js's own fallback). Tokens in a fragment, or a
+  callback on any address but this app's own, are refused — on Android any app
+  can fire a deep link at us, and a code is worthless without the verifier.
+- **Nothing appears until it can work.** The tab needs the provider switched
+  on in Supabase *and* the plugin's native half (an app synced against an older
+  SDK shows no tab). **On iPhone it also needs Apple switched on**: App Review
+  4.8 will not take Google or Microsoft in an iPhone app without Sign in with
+  Apple beside them, so with Apple off the app offers the email code alone.
+
+### Turning it on for an app
+
+1. Depend on `@unisim/sdk` ≥ 0.141.8 and `npm run cap:sync`. Android needs
+   nothing more.
+2. iOS: `node ../universal-platform/scripts/add-sign-in-with-apple.mjs <path-to-app-repo>`
+   (after `add-suite-keychain.mjs`, which creates the entitlements file), then
+   rebuild. The App ID needs the **Sign in with Apple** capability as well.
+3. The project — console settings, recorded nowhere in code:
+   - every `<bundle id>://auth-callback` on the Supabase **redirect allowlist**;
+   - every iOS bundle id in the **Apple provider's Client IDs** (beside the web
+     Services ID) — the sheet's token is issued to the bundle id;
+   - **Allow manual linking** on (trials link);
+   - the providers themselves switched on.
+
+⚠️ **Every one of those fails far from its cause:**
+
+| Missing | Looks like |
+| --- | --- |
+| the callback on the allowlist | GoTrue silently sends the browser to the Site URL; the sheet sits on the website and never comes back |
+| the bundle id in Apple's Client IDs | the Apple sheet succeeds, then Supabase refuses the token's audience |
+| the entitlement | the Apple sheet fails at once with ASAuthorizationError 1000 — the same code as a device with no Apple ID |
+| the App ID capability | a device build fails to provision; a simulator build is fine, so it proves nothing |
+| manual linking | every trial visitor gets "can't link" |
+| a re-sync against this SDK | no provider tab at all |
+
+Known limit: on Android, if the system kills the app while the browser is up,
+the callback arrives with nobody holding the PKCE verifier; the app comes back
+to the front and the person signs in again.
+
 ## Opening a suite app instead of its website
 
 On a phone, a switcher row for a product you have installed opens **the app**,

package/android/src/main/AndroidManifest.xml

@@ -51,6 +51,16 @@
     3. The PROVIDER, whose authority is built from ${applicationId} so each app
        ends up with its own. They cannot share one authority — two apps claiming
        the same one cannot be installed side by side.
+
+    4. The OAUTH CALLBACK ACTIVITY, which receives
+       `<applicationId>://auth-callback?code=…` at the end of an Apple / Google /
+       Microsoft sign-in (src/nativeOAuth.ts). Its scheme is ${applicationId},
+       expanded per app by manifest merging, so no app carries an intent filter
+       of its own for it — and every one of those addresses must be on the
+       Supabase redirect allowlist, or GoTrue silently sends the browser to the
+       Site URL instead and the app never hears back. A separate activity, not
+       MainActivity, so the callback never reaches Capacitor's `appUrlOpen`
+       (Universal PDF opens every VIEW intent there as a document).
 -->
 <manifest xmlns:android="http://schemas.android.com/apk/res/android">
 
@@ -95,6 +105,20 @@
             android:exported="true"
             android:grantUriPermissions="false"
             android:permission="uk.co.unisim.suite.permission.SUITE_AUTH" />
+
+        <activity
+            android:name="uk.co.unisim.sdk.OAuthCallbackActivity"
+            android:exported="true"
+            android:excludeFromRecents="true"
+            android:noHistory="true"
+            android:theme="@android:style/Theme.Translucent.NoTitleBar">
+            <intent-filter>
+                <action android:name="android.intent.action.VIEW" />
+                <category android:name="android.intent.category.DEFAULT" />
+                <category android:name="android.intent.category.BROWSABLE" />
+                <data android:scheme="${applicationId}" android:host="auth-callback" />
+            </intent-filter>
+        </activity>
     </application>
 
 </manifest>

package/android/src/main/java/uk/co/unisim/sdk/OAuthCallbackActivity.java

@@ -0,0 +1,72 @@
+package uk.co.unisim.sdk;
+
+import android.app.Activity;
+import android.content.Context;
+import android.content.Intent;
+import android.net.Uri;
+import android.os.Bundle;
+
+/**
+ * Receives {@code <applicationId>://auth-callback?code=…} — the deep link
+ * Supabase sends the browser to at the end of an Apple / Google / Microsoft
+ * sign-in started by {@link UnisimSuiteAuthPlugin#oauthStart} — hands the URL
+ * to the waiting plugin call, and puts the app back in front.
+ *
+ * <p>Declared in the SDK's own {@code AndroidManifest.xml} with the scheme
+ * {@code ${applicationId}}, which manifest merging expands per app, so no app
+ * needs an intent filter of its own. It is deliberately NOT the app's
+ * MainActivity: routing the callback through the launcher activity would hand
+ * it to Capacitor's {@code appUrlOpen}, and Universal PDF (for one) already
+ * treats every VIEW intent there as a document to open.
+ *
+ * <p>⚠️ <b>Why it starts the app's activity with CLEAR_TOP rather than just
+ * finishing.</b> The Custom Tab runs INSIDE the app's task, and this activity
+ * lands on top of it. Finishing alone would reveal the Custom Tab again,
+ * still showing the provider's last page. Relaunching the activity that
+ * opened the tab with {@code FLAG_ACTIVITY_CLEAR_TOP} pops both the tab and
+ * this activity off the stack in one move — the same trick AppAuth uses.
+ *
+ * <p>A callback nobody is waiting for (the process died while the browser was
+ * up, or the person had already come back and cancelled) is dropped: the
+ * PKCE verifier that would redeem its code lived in the JavaScript that is
+ * gone, so there is nothing it could be exchanged with. The app still comes
+ * to the front, and the person simply tries again.
+ */
+public class OAuthCallbackActivity extends Activity {
+
+    /** The host of every app's callback URL — mirrors NATIVE_OAUTH_CALLBACK_HOST in nativeOAuth.ts. */
+    public static final String HOST = "auth-callback";
+
+    /** The activity that opened the browser, to bring back. Set by the plugin. */
+    static volatile Class<? extends Activity> returnTo;
+
+    /** {@code <applicationId>://auth-callback} — the address on the Supabase allowlist. */
+    static String callbackUrl(Context context) {
+        return context.getPackageName() + "://" + HOST;
+    }
+
+    @Override
+    protected void onCreate(Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+
+        Intent intent = getIntent();
+        Uri data = intent != null ? intent.getData() : null;
+        if (data != null
+                && HOST.equalsIgnoreCase(data.getHost())
+                && getPackageName().equalsIgnoreCase(data.getScheme())) {
+            UnisimSuiteAuthPlugin.deliverOAuthRedirect(data.toString());
+        }
+
+        Intent back = null;
+        Class<? extends Activity> target = returnTo;
+        if (target != null) {
+            back = new Intent(this, target);
+            back.addFlags(Intent.FLAG_ACTIVITY_CLEAR_TOP | Intent.FLAG_ACTIVITY_SINGLE_TOP);
+        } else {
+            back = getPackageManager().getLaunchIntentForPackage(getPackageName());
+            if (back != null) back.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
+        }
+        if (back != null) startActivity(back);
+        finish();
+    }
+}

package/android/src/main/java/uk/co/unisim/sdk/UnisimSuiteAuthPlugin.java

@@ -1,7 +1,11 @@
 package uk.co.unisim.sdk;
 
+import android.app.Activity;
+import android.content.ActivityNotFoundException;
 import android.content.Intent;
 import android.content.pm.PackageManager;
+import android.net.Uri;
+import android.os.Bundle;
 
 import com.getcapacitor.JSArray;
 import com.getcapacitor.JSObject;
@@ -13,6 +17,7 @@ import com.getcapacitor.annotation.CapacitorPlugin;
 import org.json.JSONArray;
 import org.json.JSONObject;
 
+import java.lang.ref.WeakReference;
 import java.util.ArrayList;
 import java.util.List;
 
@@ -211,4 +216,128 @@ public class UnisimSuiteAuthPlugin extends Plugin {
             call.reject("Could not open " + pkg + ": " + e.getMessage(), e);
         }
     }
+
+    // ─────────────────────────────────────────────────────────────────────────
+    // Apple / Google / Microsoft sign-in — the Android half of nativeOAuth.ts
+    //
+    // All three providers go through the system browser here (Android has no
+    // Sign in with Apple sheet). The page opens in a Custom Tab where the
+    // browser supports one and as an ordinary browser page otherwise; either
+    // way it is the browser's own engine and cookies, not our WebView, which is
+    // what Google insists on. Supabase finishes by sending the browser to
+    // `<applicationId>://auth-callback?code=…`, which OAuthCallbackActivity
+    // (declared in this module's manifest) receives and hands back here.
+    //
+    // ⚠️ The Custom Tab is requested by hand — ACTION_VIEW plus the
+    // `EXTRA_SESSION` extra, which is the whole of the Custom Tabs protocol —
+    // rather than through androidx.browser, so this module carries no new
+    // dependency into fourteen apps' Gradle builds.
+    //
+    // ⚠️ "The person came back without finishing" has no callback of its own.
+    // It is inferred the way AppAuth infers it: the app was paused by the
+    // browser and is now resuming with the call still open. A real callback
+    // always settles the call BEFORE the activity resumes (the callback
+    // activity delivers in onCreate, then relaunches us), so the two cannot
+    // be confused.
+    // ─────────────────────────────────────────────────────────────────────────
+
+    private static final String EXTRA_CUSTOM_TABS_SESSION = "android.support.customtabs.extra.SESSION";
+
+    /** The plugin instance with a sign-in in flight, for OAuthCallbackActivity. */
+    private static WeakReference<UnisimSuiteAuthPlugin> oauthOwner = new WeakReference<>(null);
+
+    private PluginCall pendingOAuth;
+    private boolean oauthLeftApp;
+
+    @PluginMethod
+    public void oauthSupport(PluginCall call) {
+        JSObject result = new JSObject();
+        result.put("platform", "android");
+        result.put("callbackUrl", OAuthCallbackActivity.callbackUrl(getContext()));
+        result.put("appleNative", false);
+        call.resolve(result);
+    }
+
+    @PluginMethod
+    public void oauthStart(PluginCall call) {
+        String url = call.getString("url");
+        if (url == null || !url.startsWith("https://")) {
+            call.reject("url must be an https:// address");
+            return;
+        }
+        Activity activity = getActivity();
+        if (activity == null) {
+            call.reject("No activity to open the sign-in page from");
+            return;
+        }
+
+        // One at a time: an earlier attempt still open is settled as cancelled.
+        settleOAuth(null);
+
+        Intent intent = new Intent(Intent.ACTION_VIEW, Uri.parse(url));
+        intent.addCategory(Intent.CATEGORY_BROWSABLE);
+        Bundle extras = new Bundle();
+        extras.putBinder(EXTRA_CUSTOM_TABS_SESSION, null);
+        intent.putExtras(extras);
+
+        synchronized (UnisimSuiteAuthPlugin.class) {
+            pendingOAuth = call;
+            oauthLeftApp = false;
+            oauthOwner = new WeakReference<>(this);
+            OAuthCallbackActivity.returnTo = activity.getClass();
+        }
+
+        try {
+            activity.startActivity(intent);
+        } catch (ActivityNotFoundException e) {
+            synchronized (UnisimSuiteAuthPlugin.class) {
+                pendingOAuth = null;
+            }
+            call.reject("No browser is installed to sign in with", e);
+        }
+    }
+
+    /** Called by OAuthCallbackActivity with the full callback URL. */
+    static void deliverOAuthRedirect(String url) {
+        UnisimSuiteAuthPlugin owner;
+        synchronized (UnisimSuiteAuthPlugin.class) {
+            owner = oauthOwner.get();
+        }
+        if (owner != null) owner.settleOAuth(url);
+    }
+
+    /** Resolve the open call with the callback URL, or as cancelled when null. */
+    private void settleOAuth(String url) {
+        PluginCall call;
+        synchronized (UnisimSuiteAuthPlugin.class) {
+            call = pendingOAuth;
+            pendingOAuth = null;
+        }
+        if (call == null) return;
+        JSObject result = new JSObject();
+        if (url != null) {
+            result.put("url", url);
+        } else {
+            result.put("cancelled", true);
+        }
+        call.resolve(result);
+    }
+
+    @Override
+    protected void handleOnPause() {
+        super.handleOnPause();
+        synchronized (UnisimSuiteAuthPlugin.class) {
+            if (pendingOAuth != null) oauthLeftApp = true;
+        }
+    }
+
+    @Override
+    protected void handleOnResume() {
+        super.handleOnResume();
+        boolean abandoned;
+        synchronized (UnisimSuiteAuthPlugin.class) {
+            abandoned = pendingOAuth != null && oauthLeftApp;
+        }
+        if (abandoned) settleOAuth(null);
+    }
 }

package/dist/DeleteAccountDialog.d.ts

@@ -0,0 +1,12 @@
+import { type MenuTheme } from './menuTheme.js';
+export interface DeleteAccountDialogProps {
+    open: boolean;
+    onClose: () => void;
+    /** The account being deleted, shown in the warning so nobody deletes the wrong one. */
+    email?: string;
+    theme?: MenuTheme;
+    /** Called once the account is gone and this device is signed out. */
+    onDeleted?: () => void;
+}
+export declare function DeleteAccountDialog(props: DeleteAccountDialogProps): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=DeleteAccountDialog.d.ts.map

package/dist/DeleteAccountDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteAccountDialog.d.ts","sourceRoot":"","sources":["../src/DeleteAccountDialog.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAA;AA6BrD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,kDAQlE"}

package/dist/DeleteAccountDialog.js

@@ -0,0 +1,185 @@
+'use client';
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { createPortal } from 'react-dom';
+import { NAV_OVERLAY_Z_INDEX } from './DropdownSurface.js';
+import { MENU } from './menuTheme.js';
+import { useLanguage, useUniversal } from './provider.js';
+import { deleteAccountCopy } from './deleteAccountCopy.js';
+import { DELETE_ACCOUNT_PHRASE, deleteMyAccount, isDeleteAccountConfirmed, } from './deleteAccount.js';
+export function DeleteAccountDialog(props) {
+    // The body mounts only while open, so every opening starts with an empty box
+    // and a dead button — no clearing effect, and no frame where the last
+    // opening's typed phrase is still there with the button already live.
+    // It is also what keeps `useUniversal()` from being called by a host that
+    // renders <UserProfile /> outside a provider and never opens this.
+    if (!props.open || typeof document === 'undefined')
+        return null;
+    return _jsx(DeleteAccountBody, { ...props });
+}
+function DeleteAccountBody({ onClose, email, theme = 'light', onDeleted }) {
+    const { language } = useLanguage();
+    const { supabase } = useUniversal();
+    const copy = deleteAccountCopy(language);
+    const p = MENU[theme];
+    const [typed, setTyped] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState(null);
+    const [done, setDone] = useState(false);
+    // Escape is Cancel. Not while the request is in flight: the account may
+    // already be half gone, and the answer is worth waiting for. Capture phase,
+    // so the menu underneath doesn't read the same key as "close me" too.
+    useEffect(() => {
+        function onKey(e) {
+            if (e.key !== 'Escape' || busy)
+                return;
+            e.stopPropagation();
+            e.preventDefault();
+            onClose();
+        }
+        document.addEventListener('keydown', onKey, true);
+        return () => document.removeEventListener('keydown', onKey, true);
+    }, [busy, onClose]);
+    const confirmed = isDeleteAccountConfirmed(typed);
+    async function run() {
+        if (!confirmed || busy)
+            return;
+        setBusy(true);
+        setError(null);
+        const result = await deleteMyAccount(supabase, copy.fallbackError);
+        setBusy(false);
+        if (result.ok) {
+            setDone(true);
+            onDeleted?.();
+        }
+        else {
+            setError(result.error);
+        }
+    }
+    return createPortal(_jsx("div", { style: overlayStyle, role: "presentation", onClick: (e) => {
+            // The backdrop is Cancel, the safe answer, except mid-request.
+            if (e.target === e.currentTarget && !busy)
+                onClose();
+        }, children: _jsx("div", { role: "dialog", "aria-modal": "true", "aria-labelledby": "unisim-delete-account-title", "data-testid": "unisim-delete-account-dialog", style: cardStyle(p), children: done ? (_jsxs(_Fragment, { children: [_jsx("h2", { id: "unisim-delete-account-title", style: titleStyle(p.text), children: copy.doneTitle }), _jsx("p", { style: bodyStyle(p), children: copy.doneBody }), _jsx("div", { style: buttonRowStyle, children: _jsx("button", { type: "button", onClick: onClose, autoFocus: true, style: dangerButtonStyle(false), children: copy.close }) })] })) : (_jsxs(_Fragment, { children: [_jsx("h2", { id: "unisim-delete-account-title", style: titleStyle(p.danger), children: copy.title }), _jsxs("div", { style: scrollStyle, children: [_jsxs("p", { style: bodyStyle(p), children: [copy.introBefore, email ? (_jsxs(_Fragment, { children: [' ', "(", _jsx("strong", { style: { color: p.text, wordBreak: 'break-all' }, children: email }), ")"] })) : null, ' ', copy.introAfter] }), _jsx("ul", { style: listStyle(p), children: copy.bullets.map((b) => _jsx("li", { style: { marginTop: 6 }, children: b }, b)) }), _jsxs("label", { htmlFor: "unisim-delete-account-confirm", style: labelStyle(p), children: [copy.confirmBefore, ' ', _jsx("span", { style: { fontFamily: 'ui-monospace, SFMono-Regular, Menlo, monospace', fontWeight: 700, color: p.danger }, children: DELETE_ACCOUNT_PHRASE }), ' ', copy.confirmAfter] }), _jsx("input", { id: "unisim-delete-account-confirm", value: typed, onChange: (e) => setTyped(e.target.value), onKeyDown: (e) => { if (e.key === 'Enter')
+                                    void run(); }, placeholder: DELETE_ACCOUNT_PHRASE, autoCapitalize: "none", autoCorrect: "off", autoComplete: "off", spellCheck: false, disabled: busy, style: inputStyle(p) }), error && (_jsx("div", { role: "alert", style: errorStyle(p), children: error }))] }), _jsxs("div", { style: buttonRowStyle, children: [_jsx("button", { type: "button", onClick: onClose, disabled: busy, autoFocus: true, style: cancelButtonStyle(p, busy), children: copy.cancel }), _jsx("button", { type: "button", onClick: () => void run(), disabled: !confirmed || busy, style: dangerButtonStyle(!confirmed || busy), children: busy ? copy.deleting : copy.row })] })] })) }) }), document.body);
+}
+const overlayStyle = {
+    position: 'fixed',
+    inset: 0,
+    background: 'rgba(15, 23, 42, 0.5)',
+    display: 'flex',
+    alignItems: 'center',
+    justifyContent: 'center',
+    // The notch and the home indicator: a phone is where this dialog matters.
+    padding: 'max(16px, env(safe-area-inset-top)) 16px max(16px, env(safe-area-inset-bottom))',
+    boxSizing: 'border-box',
+    zIndex: NAV_OVERLAY_Z_INDEX + 100,
+    fontFamily: "'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif",
+};
+const cardStyle = (p) => ({
+    width: '100%',
+    maxWidth: 420,
+    maxHeight: '100%',
+    display: 'flex',
+    flexDirection: 'column',
+    background: p.surface,
+    color: p.text,
+    borderRadius: 16,
+    border: `1px solid ${p.border}`,
+    boxShadow: p.shadow,
+    padding: '22px 22px 18px',
+    boxSizing: 'border-box',
+});
+// Only the middle scrolls, so the two buttons stay on screen on a short phone
+// with the keyboard up.
+const scrollStyle = {
+    minHeight: 0,
+    flex: 1,
+    overflowY: 'auto',
+    margin: '0 -22px',
+    padding: '0 22px',
+};
+const titleStyle = (color) => ({
+    margin: 0,
+    fontSize: 18,
+    fontWeight: 700,
+    letterSpacing: '-0.01em',
+    color,
+    flexShrink: 0,
+});
+const bodyStyle = (p) => ({
+    margin: '10px 0 0',
+    fontSize: 14,
+    lineHeight: 1.5,
+    color: p.body,
+});
+const listStyle = (p) => ({
+    margin: '10px 0 0',
+    paddingLeft: 18,
+    fontSize: 12.5,
+    lineHeight: 1.5,
+    color: p.muted,
+});
+const labelStyle = (p) => ({
+    display: 'block',
+    margin: '16px 0 6px',
+    fontSize: 12.5,
+    fontWeight: 600,
+    color: p.body,
+});
+/**
+ * ⚠️ 16px on purpose, not a taste call: iOS zooms the page in on focus below
+ * that, and does not zoom back out.
+ */
+const inputStyle = (p) => ({
+    width: '100%',
+    padding: '9px 11px',
+    borderRadius: 9,
+    border: `1px solid ${p.danger}`,
+    background: p.inputBg,
+    color: p.inputText,
+    fontSize: 16,
+    boxSizing: 'border-box',
+    outline: 'none',
+});
+const errorStyle = (p) => ({
+    marginTop: 12,
+    padding: '8px 11px',
+    borderRadius: 9,
+    background: p.dangerHoverBg,
+    color: p.dangerHoverText,
+    fontSize: 12.5,
+    lineHeight: 1.45,
+});
+const buttonRowStyle = {
+    display: 'flex',
+    flexWrap: 'wrap',
+    justifyContent: 'flex-end',
+    gap: 8,
+    marginTop: 16,
+    flexShrink: 0,
+};
+const cancelButtonStyle = (p, disabled) => ({
+    padding: '10px 16px',
+    borderRadius: 10,
+    border: `1px solid ${p.border}`,
+    background: 'transparent',
+    color: p.body,
+    fontSize: 14,
+    fontWeight: 600,
+    cursor: disabled ? 'default' : 'pointer',
+    opacity: disabled ? 0.5 : 1,
+});
+// White on red-700 is 6.5:1, so it holds on both palettes.
+const dangerButtonStyle = (disabled) => ({
+    padding: '10px 16px',
+    borderRadius: 10,
+    border: 0,
+    background: '#b91c1c',
+    color: '#ffffff',
+    fontSize: 14,
+    fontWeight: 600,
+    cursor: disabled ? 'default' : 'pointer',
+    opacity: disabled ? 0.5 : 1,
+});
+//# sourceMappingURL=DeleteAccountDialog.js.map

package/dist/DeleteAccountDialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteAccountDialog.js","sourceRoot":"","sources":["../src/DeleteAccountDialog.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAsB,MAAM,OAAO,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAkB,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,wBAAwB,GAEzB,MAAM,oBAAoB,CAAA;AA+B3B,MAAM,UAAU,mBAAmB,CAAC,KAA+B;IACjE,6EAA6E;IAC7E,sEAAsE;IACtE,sEAAsE;IACtE,0EAA0E;IAC1E,mEAAmE;IACnE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,KAAC,iBAAiB,OAAK,KAAK,GAAI,CAAA;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,EAAE,SAAS,EAA4B;IACjG,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;IAClC,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAA;IACnC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IAErB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACvD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEvC,wEAAwE;IACxE,4EAA4E;IAC5E,sEAAsE;IACtE,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,KAAK,CAAC,CAAgB;YAC7B,IAAI,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI;gBAAE,OAAM;YACtC,CAAC,CAAC,eAAe,EAAE,CAAA;YACnB,CAAC,CAAC,cAAc,EAAE,CAAA;YAClB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACjD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACnE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAEnB,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAA;IAEjD,KAAK,UAAU,GAAG;QAChB,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAM;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAA;QACb,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAA0C,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QACpG,OAAO,CAAC,KAAK,CAAC,CAAA;QACd,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAA;YACb,SAAS,EAAE,EAAE,CAAA;QACf,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CACjB,cACE,KAAK,EAAE,YAAY,EACnB,IAAI,EAAC,cAAc,EACnB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,+DAA+D;YAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAA;QACtD,CAAC,YAED,cACE,IAAI,EAAC,QAAQ,gBACF,MAAM,qBACD,6BAA6B,iBACjC,8BAA8B,EAC1C,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,YAElB,IAAI,CAAC,CAAC,CAAC,CACN,8BACE,aAAI,EAAE,EAAC,6BAA6B,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,YAAG,IAAI,CAAC,SAAS,GAAM,EACrF,YAAG,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,YAAG,IAAI,CAAC,QAAQ,GAAK,EAC3C,cAAK,KAAK,EAAE,cAAc,YACxB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,EAAE,SAAS,QAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,YAC9E,IAAI,CAAC,KAAK,GACJ,GACL,IACL,CACJ,CAAC,CAAC,CAAC,CACF,8BACE,aAAI,EAAE,EAAC,6BAA6B,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,YAAG,IAAI,CAAC,KAAK,GAAM,EAEnF,eAAK,KAAK,EAAE,WAAW,aACrB,aAAG,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,aACnB,IAAI,CAAC,WAAW,EAChB,KAAK,CAAC,CAAC,CAAC,CACP,8BACG,GAAG,OAAE,iBAAQ,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,YAAG,KAAK,GAAU,SAC/E,CACJ,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EACZ,IAAI,CAAC,UAAU,IACd,EACJ,aAAI,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,YACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAY,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAG,CAAC,IAA9B,CAAC,CAAmC,CAAC,GACpE,EAEL,iBAAO,OAAO,EAAC,+BAA+B,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,aAChE,IAAI,CAAC,aAAa,EAAE,GAAG,EACxB,eAAM,KAAK,EAAE,EAAE,UAAU,EAAE,gDAAgD,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,YAC5G,qBAAqB,GACjB,EAAC,GAAG,EACV,IAAI,CAAC,YAAY,IACZ,EACR,gBACE,EAAE,EAAC,+BAA+B,EAClC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACzC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO;oCAAE,KAAK,GAAG,EAAE,CAAA,CAAC,CAAC,EACvD,WAAW,EAAE,qBAAqB,EAClC,cAAc,EAAC,MAAM,EACrB,WAAW,EAAC,KAAK,EACjB,YAAY,EAAC,KAAK,EAClB,UAAU,EAAE,KAAK,EACjB,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,GACpB,EAED,KAAK,IAAI,CACR,cAAK,IAAI,EAAC,OAAO,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,YAAG,KAAK,GAAO,CACtD,IACG,EAEN,eAAK,KAAK,EAAE,cAAc,aAExB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,QAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,YAChG,IAAI,CAAC,MAAM,GACL,EACT,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,EACzB,QAAQ,EAAE,CAAC,SAAS,IAAI,IAAI,EAC5B,KAAK,EAAE,iBAAiB,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,YAE3C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GACzB,IACL,IACL,CACJ,GACG,GACF,EACN,QAAQ,CAAC,IAAI,CACd,CAAA;AACH,CAAC;AAMD,MAAM,YAAY,GAAkB;IAClC,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,CAAC;IACR,UAAU,EAAE,uBAAuB;IACnC,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,0EAA0E;IAC1E,OAAO,EAAE,iFAAiF;IAC1F,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,mBAAmB,GAAG,GAAG;IACjC,UAAU,EAAE,sFAAsF;CACnG,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC;IAChD,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,MAAM;IACf,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,CAAC,CAAC,OAAO;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI;IACb,YAAY,EAAE,EAAE;IAChB,MAAM,EAAE,aAAa,CAAC,CAAC,MAAM,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM;IACnB,OAAO,EAAE,gBAAgB;IACzB,SAAS,EAAE,YAAY;CACxB,CAAC,CAAA;AAEF,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,WAAW,GAAkB;IACjC,SAAS,EAAE,CAAC;IACZ,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,MAAM;IACjB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,QAAQ;CAClB,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,KAAa,EAAiB,EAAE,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,GAAG;IACf,aAAa,EAAE,SAAS;IACxB,KAAK;IACL,UAAU,EAAE,CAAC;CACd,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,CAAC,CAAC,IAAI;CACd,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,CAAC,CAAC,KAAK;CACf,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,CAAC,CAAC,IAAI;CACd,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC;IACjD,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,UAAU;IACnB,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,aAAa,CAAC,CAAC,MAAM,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,OAAO;IACrB,KAAK,EAAE,CAAC,CAAC,SAAS;IAClB,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,YAAY;IACvB,OAAO,EAAE,MAAM;CAChB,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC;IACjD,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,UAAU;IACnB,YAAY,EAAE,CAAC;IACf,UAAU,EAAE,CAAC,CAAC,aAAa;IAC3B,KAAK,EAAE,CAAC,CAAC,eAAe;IACxB,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;CACjB,CAAC,CAAA;AAEF,MAAM,cAAc,GAAkB;IACpC,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,UAAU;IAC1B,GAAG,EAAE,CAAC;IACN,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;CACd,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAU,EAAE,QAAiB,EAAiB,EAAE,CAAC,CAAC;IAC3E,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,EAAE;IAChB,MAAM,EAAE,aAAa,CAAC,CAAC,MAAM,EAAE;IAC/B,UAAU,EAAE,aAAa;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI;IACb,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,GAAG;IACf,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;IACxC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAA;AAEF,2DAA2D;AAC3D,MAAM,iBAAiB,GAAG,CAAC,QAAiB,EAAiB,EAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,EAAE;IAChB,MAAM,EAAE,CAAC;IACT,UAAU,EAAE,SAAS;IACrB,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,GAAG;IACf,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;IACxC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAA"}

package/dist/SignInDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInDialog.d.ts","sourceRoot":"","sources":["../src/SignInDialog.tsx"],"names":[],"mappings":"AAuEA;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAEpE,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,IAAI,EAAE,OAAO,CAAA;IACb,qFAAqF;IACrF,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,WAAW,CAAC,EAAE,gBAAgB,CAAA;CAC/B;AA2BD,wBAAgB,YAAY,CAAC,EAC3B,IAAI,EACJ,OAAO,EACP,YAAY,EACZ,WAAsB,GACvB,EAAE,iBAAiB,sCA8bnB"}
+{"version":3,"file":"SignInDialog.d.ts","sourceRoot":"","sources":["../src/SignInDialog.tsx"],"names":[],"mappings":"AA+EA;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAEpE,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,IAAI,EAAE,OAAO,CAAA;IACb,qFAAqF;IACrF,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,WAAW,CAAC,EAAE,gBAAgB,CAAA;CAC/B;AA2BD,wBAAgB,YAAY,CAAC,EAC3B,IAAI,EACJ,OAAO,EACP,YAAY,EACZ,WAAsB,GACvB,EAAE,iBAAiB,sCAwenB"}