dexie-cloud-addon 4.2.4 → 4.3.0

package/dist/modern/service-worker.js

@@ -8,7 +8,7 @@
  *
  * ==========================================================================
  *
- * Version 4.2.4, Tue Dec 09 2025
+ * Version 4.3.0, Tue Jan 20 2026
  *
  * https://dexie.org
  *
@@ -39,7 +39,7 @@ LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
 OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THIS SOFTWARE.
 ***************************************************************************** */
-/* global Reflect, Promise */
+/* global Reflect, Promise, SuppressedError, Symbol, Iterator */
 
 
 function __rest(s, e) {
@@ -83,8 +83,9 @@ function __await(v) {
 function __asyncGenerator(thisArg, _arguments, generator) {
     if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
     var g = generator.apply(thisArg, _arguments || []), i, q = [];
-    return i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i;
-    function verb(n) { if (g[n]) i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; }
+    return i = Object.create((typeof AsyncIterator === "function" ? AsyncIterator : Object).prototype), verb("next"), verb("throw"), verb("return", awaitReturn), i[Symbol.asyncIterator] = function () { return this; }, i;
+    function awaitReturn(f) { return function (v) { return Promise.resolve(v).then(f, reject); }; }
+    function verb(n, f) { if (g[n]) { i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; if (f) i[n] = f(i[n]); } }
     function resume(n, v) { try { step(g[n](v)); } catch (e) { settle(q[0][3], e); } }
     function step(r) { r.value instanceof __await ? Promise.resolve(r.value.v).then(fulfill, reject) : settle(q[0][2], r); }
     function fulfill(value) { resume("next", value); }
@@ -98,7 +99,12 @@ function __asyncValues(o) {
     return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
     function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
     function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
-}
+}
+
+typeof SuppressedError === "function" ? SuppressedError : function (error, suppressed, message) {
+    var e = new Error(message);
+    return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+};
 
 const UNAUTHORIZED_USER = {
     userId: "unauthorized",
@@ -475,10 +481,17 @@ function removeRedundantUpdateOps(muts) {
             return true;
         if (mut.keys.length !== 1 || mut.changeSpecs.length !== 1)
             return true;
+        // Check if this has PropModifications - if so, skip optimization
+        const changeSpecs = mut.changeSpecs[0];
+        if (Object.values(changeSpecs).some(v => typeof v === "object" && v && "@@propmod" in v)) {
+            return true; // Cannot optimize if any PropModification is present
+        }
         // Keep track of properties that aren't overlapped by later transactions
         const unoverlappedProps = new Set(Object.keys(mut.changeSpecs[0]));
         const strKey = '' + mut.keys[0];
         const keyCoverage = updateCoverage.get(strKey);
+        if (!keyCoverage)
+            return true; // No coverage info - cannot optimize
         for (let i = keyCoverage.length - 1; i >= 0; --i) {
             const { txid, updateSpec } = keyCoverage[i];
             if (txid === mut.txid)
@@ -532,6 +545,15 @@ function randomString$1(bytes) {
     }
 }
 
+/** Type guard to check if a message is an OAuthResultMessage */
+function isOAuthResultMessage(msg) {
+    return (typeof msg === 'object' &&
+        msg !== null &&
+        msg.type === 'dexie:oauthResult' &&
+        typeof msg.provider === 'string' &&
+        typeof msg.state === 'string');
+}
+
 function assert(b) {
     if (!b)
         throw new Error('Assertion Failed');
@@ -711,13 +733,12 @@ function applyOperations(target, ops) {
 function subtractChanges(target, // Server change set
 changesToSubtract // additional mutations on client during syncWithServer()
 ) {
-    var _a, _b, _c;
     for (const [table, mutationSet] of Object.entries(changesToSubtract)) {
         for (const [key, mut] of Object.entries(mutationSet)) {
             switch (mut.type) {
                 case 'ups':
                     {
-                        const targetMut = (_a = target[table]) === null || _a === void 0 ? void 0 : _a[key];
+                        const targetMut = target[table]?.[key];
                         if (targetMut) {
                             switch (targetMut.type) {
                                 case 'ups':
@@ -735,10 +756,10 @@ changesToSubtract // additional mutations on client during syncWithServer()
                     }
                     break;
                 case 'del':
-                    (_b = target[table]) === null || _b === void 0 ? true : delete _b[key];
+                    delete target[table]?.[key];
                     break;
                 case 'upd': {
-                    const targetMut = (_c = target[table]) === null || _c === void 0 ? void 0 : _c[key];
+                    const targetMut = target[table]?.[key];
                     if (targetMut) {
                         switch (targetMut.type) {
                             case 'ups':
@@ -771,17 +792,14 @@ changesToSubtract // additional mutations on client during syncWithServer()
  * @param inSet
  * @returns DBOperationsSet representing inSet
  */
-function toDBOperationSet(inSet, txid = "") {
-    // Fictive transaction:
-    if (!txid)
-        txid = randomString(16);
+function toDBOperationSet(inSet, txid) {
     // Convert data into a temporary map to collect mutations of same table and type
     const map = {};
     for (const [table, ops] of Object.entries(inSet)) {
         for (const [key, op] of Object.entries(ops)) {
             const mapEntry = map[table] || (map[table] = {});
             const ops = mapEntry[op.type] || (mapEntry[op.type] = []);
-            ops.push(Object.assign({ key }, op)); // DBKeyMutation doesn't contain key, so we need to bring it in.
+            ops.push({ key, ...op }); // DBKeyMutation doesn't contain key, so we need to bring it in.
         }
     }
     // Start computing the resulting format:
@@ -959,142 +977,111 @@ function decodeYMessage(a) {
 }
 
 async function asyncIterablePipeline(source, ...stages) {
-    var _a, e_1, _b, _c;
     // Chain generators by sending outdata from one to another
     let result = source(); // Start with the source generator
     for (let i = 0; i < stages.length; i++) {
         result = stages[i](result); // Pass on the result to next generator
     }
-    try {
-        // Start running the machine. If the last stage is a sink, it will consume the data and never emit anything
-        // to us here...
-        for (var _d = true, result_1 = __asyncValues(result), result_1_1; result_1_1 = await result_1.next(), _a = result_1_1.done, !_a; _d = true) {
-            _c = result_1_1.value;
-            _d = false;
-            const chunk = _c;
-        }
-    }
-    catch (e_1_1) { e_1 = { error: e_1_1 }; }
-    finally {
-        try {
-            if (!_d && !_a && (_b = result_1.return)) await _b.call(result_1);
-        }
-        finally { if (e_1) throw e_1.error; }
-    }
-}
-
-function consumeChunkedBinaryStream(source) {
-    return __asyncGenerator(this, arguments, function* consumeChunkedBinaryStream_1() {
-        var _a, e_1, _b, _c;
-        let state = 0;
-        let sizeBuf = new Uint8Array(4);
-        let sizeBufPos = 0;
-        let bufs = [];
-        let len = 0;
-        try {
-            for (var _d = true, source_1 = __asyncValues(source), source_1_1; source_1_1 = yield __await(source_1.next()), _a = source_1_1.done, !_a; _d = true) {
-                _c = source_1_1.value;
-                _d = false;
-                const chunk = _c;
-                const dw = new DataView(chunk.buffer, chunk.byteOffset, chunk.byteLength);
-                let pos = 0;
-                while (pos < chunk.byteLength) {
-                    switch (state) {
-                        case 0:
-                            // Beginning of a size header
-                            if (pos + 4 > chunk.byteLength) {
-                                for (const b of chunk.slice(pos)) {
-                                    if (sizeBufPos === 4)
-                                        break;
-                                    sizeBuf[sizeBufPos++] = b;
-                                    ++pos;
-                                }
-                                if (sizeBufPos < 4) {
-                                    // Need more bytes in order to read length.
-                                    // Will go out from while loop as well because pos is defenitely = chunk.byteLength here.
-                                    break;
-                                }
-                            }
-                            else if (sizeBufPos > 0 && sizeBufPos < 4) {
-                                for (const b of chunk.slice(pos, pos + 4 - sizeBufPos)) {
-                                    sizeBuf[sizeBufPos++] = b;
-                                    ++pos;
-                                }
-                            }
-                        // Intentional fall-through...
-                        case 1:
-                            len =
-                                sizeBufPos === 4
-                                    ? new DataView(sizeBuf.buffer, 0, 4).getUint32(0, false)
-                                    : dw.getUint32(pos, false);
-                            if (sizeBufPos)
-                                sizeBufPos = 0; // in this case pos is already forwarded
-                            else
-                                pos += 4; // else pos is not yet forwarded - that's why we do it now
-                        // Intentional fall-through...
-                        case 2:
-                            // Eat the chunk
-                            if (pos >= chunk.byteLength) {
-                                state = 2;
+    // Start running the machine. If the last stage is a sink, it will consume the data and never emit anything
+    // to us here...
+    for await (const chunk of result) { }
+}
+
+async function* consumeChunkedBinaryStream(source) {
+    let state = 0;
+    let sizeBuf = new Uint8Array(4);
+    let sizeBufPos = 0;
+    let bufs = [];
+    let len = 0;
+    for await (const chunk of source) {
+        const dw = new DataView(chunk.buffer, chunk.byteOffset, chunk.byteLength);
+        let pos = 0;
+        while (pos < chunk.byteLength) {
+            switch (state) {
+                case 0:
+                    // Beginning of a size header
+                    if (pos + 4 > chunk.byteLength) {
+                        for (const b of chunk.slice(pos)) {
+                            if (sizeBufPos === 4)
                                 break;
-                            }
-                            if (pos + len > chunk.byteLength) {
-                                bufs.push(chunk.slice(pos));
-                                len -= (chunk.byteLength - pos);
-                                state = 2;
-                                pos = chunk.byteLength; // will break while loop.
-                            }
-                            else {
-                                if (bufs.length > 0) {
-                                    const concats = new Uint8Array(bufs.reduce((p, c) => p + c.byteLength, len));
-                                    let p = 0;
-                                    for (const buf of bufs) {
-                                        concats.set(buf, p);
-                                        p += buf.byteLength;
-                                    }
-                                    concats.set(chunk.slice(pos, pos + len), p);
-                                    bufs = [];
-                                    yield yield __await(concats);
-                                }
-                                else {
-                                    yield yield __await(chunk.slice(pos, pos + len));
-                                }
-                                pos += len;
-                                state = 0;
-                            }
+                            sizeBuf[sizeBufPos++] = b;
+                            ++pos;
+                        }
+                        if (sizeBufPos < 4) {
+                            // Need more bytes in order to read length.
+                            // Will go out from while loop as well because pos is defenitely = chunk.byteLength here.
                             break;
+                        }
                     }
-                }
-            }
-        }
-        catch (e_1_1) { e_1 = { error: e_1_1 }; }
-        finally {
-            try {
-                if (!_d && !_a && (_b = source_1.return)) yield __await(_b.call(source_1));
+                    else if (sizeBufPos > 0 && sizeBufPos < 4) {
+                        for (const b of chunk.slice(pos, pos + 4 - sizeBufPos)) {
+                            sizeBuf[sizeBufPos++] = b;
+                            ++pos;
+                        }
+                    }
+                // Intentional fall-through...
+                case 1:
+                    len =
+                        sizeBufPos === 4
+                            ? new DataView(sizeBuf.buffer, 0, 4).getUint32(0, false)
+                            : dw.getUint32(pos, false);
+                    if (sizeBufPos)
+                        sizeBufPos = 0; // in this case pos is already forwarded
+                    else
+                        pos += 4; // else pos is not yet forwarded - that's why we do it now
+                // Intentional fall-through...
+                case 2:
+                    // Eat the chunk
+                    if (pos >= chunk.byteLength) {
+                        state = 2;
+                        break;
+                    }
+                    if (pos + len > chunk.byteLength) {
+                        bufs.push(chunk.slice(pos));
+                        len -= (chunk.byteLength - pos);
+                        state = 2;
+                        pos = chunk.byteLength; // will break while loop.
+                    }
+                    else {
+                        if (bufs.length > 0) {
+                            const concats = new Uint8Array(bufs.reduce((p, c) => p + c.byteLength, len));
+                            let p = 0;
+                            for (const buf of bufs) {
+                                concats.set(buf, p);
+                                p += buf.byteLength;
+                            }
+                            concats.set(chunk.slice(pos, pos + len), p);
+                            bufs = [];
+                            yield concats;
+                        }
+                        else {
+                            yield chunk.slice(pos, pos + len);
+                        }
+                        pos += len;
+                        state = 0;
+                    }
+                    break;
             }
-            finally { if (e_1) throw e_1.error; }
         }
-    });
+    }
 }
 
 function getFetchResponseBodyGenerator(res) {
-    return function () {
-        return __asyncGenerator(this, arguments, function* () {
-            if (!res.body)
-                throw new Error("Response body is not readable");
-            const reader = res.body.getReader();
-            try {
-                while (true) {
-                    const { done, value } = yield __await(reader.read());
-                    if (done)
-                        return yield __await(void 0);
-                    yield yield __await(value);
-                }
-            }
-            finally {
-                reader.releaseLock();
+    return async function* () {
+        if (!res.body)
+            throw new Error("Response body is not readable");
+        const reader = res.body.getReader();
+        try {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    return;
+                yield value;
             }
-        });
+        }
+        finally {
+            reader.releaseLock();
+        }
     };
 }
 
@@ -1301,6 +1288,43 @@ function confirmLogout(userInteraction, currentUserId, numUnsyncedChanges) {
             .catch(() => false);
     });
 }
+/**
+ * Prompts the user to select an authentication method (OAuth provider or OTP).
+ *
+ * @param userInteraction - The user interaction BehaviorSubject
+ * @param providers - Available OAuth providers
+ * @param otpEnabled - Whether OTP is available
+ * @param title - Dialog title
+ * @param alerts - Optional alerts to display
+ * @returns Promise resolving to the user's selection
+ */
+function promptForProvider(userInteraction, providers, otpEnabled, title = 'Choose login method', alerts = []) {
+    return new Promise((resolve, reject) => {
+        const interactionProps = {
+            type: 'provider-selection',
+            title,
+            alerts,
+            providers,
+            otpEnabled,
+            fields: {},
+            submitLabel: undefined,
+            cancelLabel: 'Cancel',
+            onSelectProvider: (providerName) => {
+                userInteraction.next(undefined);
+                resolve({ type: 'provider', provider: providerName });
+            },
+            onSelectOtp: () => {
+                userInteraction.next(undefined);
+                resolve({ type: 'otp' });
+            },
+            onCancel: () => {
+                userInteraction.next(undefined);
+                reject(new Dexie.AbortError('User cancelled'));
+            },
+        };
+        userInteraction.next(interactionProps);
+    });
+}
 
 function loadAccessToken(db) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -2071,7 +2095,8 @@ const defs = Object.assign(Object.assign(Object.assign(Object.assign({}, undefin
             return Object.assign({ $t: 'PropModification' }, propModification['@@propmod']);
         },
         revive: (_a) => {
-            var propModSpec = __rest(_a, ["$t"]) // keep the rest
+            var { $t } = _a, // strip '$t'
+            propModSpec = __rest(_a, ["$t"]) // keep the rest
             ;
             return new PropModification(propModSpec);
         },
@@ -3563,15 +3588,313 @@ function _logout(db_1) {
     });
 }
 
+/** User-friendly messages for OAuth error codes */
+const ERROR_MESSAGES = {
+    popup_blocked: 'The login popup was blocked by your browser. Please allow popups for this site and try again.',
+    popup_closed: 'The login popup was closed before completing authentication.',
+    access_denied: 'Access was denied by the authentication provider.',
+    invalid_state: 'The authentication response could not be verified. Please try again.',
+    email_not_verified: 'Your email address must be verified before you can log in.',
+    expired_code: 'The authentication code has expired. Please try again.',
+    provider_error: 'An error occurred with the authentication provider.',
+    network_error: 'A network error occurred during authentication. Please check your connection and try again.',
+};
+/** Error class for OAuth-specific errors */
+class OAuthError extends Error {
+    constructor(code, provider, customMessage) {
+        super(customMessage || ERROR_MESSAGES[code]);
+        this.name = 'OAuthError';
+        this.code = code;
+        this.provider = provider;
+    }
+    /** Get user-friendly message for this error */
+    get userMessage() {
+        return ERROR_MESSAGES[this.code] || this.message;
+    }
+}
+
+/**
+ * Exchanges a Dexie Cloud authorization code for access and refresh tokens.
+ *
+ * This is called after the OAuth callback delivers the authorization code
+ * via postMessage (popup flow) or redirect.
+ *
+ * @param options - Exchange options
+ * @returns Promise resolving to TokenFinalResponse
+ * @throws OAuthError or TokenErrorResponseError on failure
+ */
+function exchangeOAuthCode(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { databaseUrl, code, publicKey, scopes = ['ACCESS_DB'] } = options;
+        const tokenRequest = {
+            grant_type: 'authorization_code',
+            code,
+            public_key: publicKey,
+            scopes,
+        };
+        try {
+            const res = yield fetch(`${databaseUrl}/token`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(tokenRequest),
+                mode: 'cors',
+            });
+            if (!res.ok) {
+                if (res.status === 400 || res.status === 401) {
+                    // Try to parse error response
+                    try {
+                        const errorResponse = yield res.json();
+                        if (errorResponse.type === 'error') {
+                            // Check for specific error codes
+                            if (errorResponse.messageCode === 'INVALID_OTP') {
+                                // In the context of OAuth, this likely means expired code
+                                throw new OAuthError('expired_code', undefined, errorResponse.message);
+                            }
+                            throw new TokenErrorResponseError(errorResponse);
+                        }
+                    }
+                    catch (e) {
+                        if (e instanceof OAuthError || e instanceof TokenErrorResponseError) {
+                            throw e;
+                        }
+                        // Fall through to generic error
+                    }
+                }
+                const errorText = yield res.text().catch(() => res.statusText);
+                throw new OAuthError('provider_error', undefined, `Token exchange failed: ${res.status} ${errorText}`);
+            }
+            const response = yield res.json();
+            if (response.type === 'error') {
+                throw new TokenErrorResponseError(response);
+            }
+            if (response.type !== 'tokens') {
+                throw new OAuthError('provider_error', undefined, `Unexpected response type: ${response.type}`);
+            }
+            return response;
+        }
+        catch (error) {
+            if (error instanceof OAuthError || error instanceof TokenErrorResponseError) {
+                throw error;
+            }
+            if (error instanceof TypeError) {
+                // Network error
+                throw new OAuthError('network_error');
+            }
+            throw error;
+        }
+    });
+}
+
+/** Default response when OAuth is disabled or unavailable */
+const OTP_ONLY_RESPONSE = {
+    providers: [],
+    otpEnabled: true,
+};
+/**
+ * Fetches available authentication providers from the Dexie Cloud server.
+ *
+ * @param databaseUrl - The Dexie Cloud database URL
+ * @param socialAuthEnabled - Whether social auth is enabled in client config (default: true)
+ * @returns Promise resolving to AuthProvidersResponse
+ *
+ * Handles failures gracefully:
+ * - 404 → Returns OTP-only (old server version)
+ * - Network error → Returns OTP-only
+ * - socialAuthEnabled: false → Returns OTP-only without fetching
+ */
+function fetchAuthProviders(databaseUrl_1) {
+    return __awaiter(this, arguments, void 0, function* (databaseUrl, socialAuthEnabled = true) {
+        // If social auth is disabled, return OTP-only without fetching
+        if (!socialAuthEnabled) {
+            return OTP_ONLY_RESPONSE;
+        }
+        try {
+            const res = yield fetch(`${databaseUrl}/auth-providers`, {
+                method: 'GET',
+                headers: { 'Accept': 'application/json' },
+                mode: 'cors',
+            });
+            if (res.status === 404) {
+                // Old server version without OAuth support
+                console.debug('[dexie-cloud] Server does not support /auth-providers endpoint. Using OTP-only authentication.');
+                return OTP_ONLY_RESPONSE;
+            }
+            if (!res.ok) {
+                console.warn(`[dexie-cloud] Failed to fetch auth providers: ${res.status} ${res.statusText}`);
+                return OTP_ONLY_RESPONSE;
+            }
+            return yield res.json();
+        }
+        catch (error) {
+            // Network error or other failure - fall back to OTP
+            console.debug('[dexie-cloud] Could not fetch auth providers, falling back to OTP:', error);
+            return OTP_ONLY_RESPONSE;
+        }
+    });
+}
+
+/** Generate a random state string for CSRF protection */
+function generateState() {
+    const array = new Uint8Array(32);
+    crypto.getRandomValues(array);
+    return Array.from(array, byte => byte.toString(16).padStart(2, '0')).join('');
+}
+/** Build the OAuth login URL */
+function buildOAuthLoginUrl(options, state) {
+    const url = new URL(`${options.databaseUrl}/oauth/login/${options.provider}`);
+    url.searchParams.set('state', state);
+    // Set the redirect URI for postMessage or custom scheme
+    const redirectUri = options.redirectUri ||
+        (typeof window !== 'undefined' ? window.location.origin : '');
+    if (redirectUri) {
+        url.searchParams.set('redirect_uri', redirectUri);
+    }
+    return url.toString();
+}
+/** Calculate centered popup position */
+function getPopupPosition(width, height) {
+    var _a, _b, _c, _d, _e, _f;
+    const screenLeft = (_a = window.screenLeft) !== null && _a !== void 0 ? _a : window.screenX;
+    const screenTop = (_b = window.screenTop) !== null && _b !== void 0 ? _b : window.screenY;
+    const screenWidth = (_d = (_c = window.innerWidth) !== null && _c !== void 0 ? _c : document.documentElement.clientWidth) !== null && _d !== void 0 ? _d : screen.width;
+    const screenHeight = (_f = (_e = window.innerHeight) !== null && _e !== void 0 ? _e : document.documentElement.clientHeight) !== null && _f !== void 0 ? _f : screen.height;
+    const left = screenLeft + (screenWidth - width) / 2;
+    const top = screenTop + (screenHeight - height) / 2;
+    return { left: Math.max(0, left), top: Math.max(0, top) };
+}
+/**
+ * Initiates OAuth login flow using a popup window.
+ *
+ * Opens a popup to the OAuth provider, listens for postMessage with the result,
+ * and returns the Dexie Cloud authorization code.
+ *
+ * @param options - OAuth login options
+ * @returns Promise resolving to OAuthLoginResult
+ * @throws OAuthError on failure
+ */
+function oauthLogin(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { databaseUrl, provider, usePopup = true } = options;
+        if (!usePopup) {
+            // For redirect flows, we can't return a promise - the page will navigate away
+            throw new Error('Non-popup OAuth flow requires handleOAuthCallback after redirect');
+        }
+        const state = generateState();
+        const loginUrl = buildOAuthLoginUrl(options, state);
+        // Calculate popup dimensions and position
+        const width = 500;
+        const height = 600;
+        const { left, top } = getPopupPosition(width, height);
+        // Open popup window
+        const popup = window.open(loginUrl, 'dexie-cloud-oauth', `width=${width},height=${height},left=${left},top=${top},menubar=no,toolbar=no,location=yes,status=no`);
+        if (!popup) {
+            throw new OAuthError('popup_blocked', provider);
+        }
+        return new Promise((resolve, reject) => {
+            let resolved = false;
+            // Listen for postMessage from the popup
+            const handleMessage = (event) => {
+                // Validate origin - must be from the Dexie Cloud server
+                const expectedOrigin = new URL(databaseUrl).origin;
+                if (event.origin !== expectedOrigin) {
+                    return; // Ignore messages from other origins
+                }
+                // Check if this is our OAuth result message
+                if (!isOAuthResultMessage(event.data)) {
+                    return;
+                }
+                const message = event.data;
+                // Validate state to prevent CSRF
+                if (message.state !== state) {
+                    console.warn('[dexie-cloud] OAuth state mismatch, ignoring message');
+                    return;
+                }
+                // Clean up
+                cleanup();
+                resolved = true;
+                // Handle error from OAuth flow
+                if (message.error) {
+                    const errorCode = mapOAuthError(message.error);
+                    reject(new OAuthError(errorCode, provider, message.error));
+                    return;
+                }
+                // Success - return the authorization code
+                if (message.code) {
+                    resolve({
+                        code: message.code,
+                        provider: message.provider,
+                        state: message.state,
+                    });
+                }
+                else {
+                    reject(new OAuthError('provider_error', provider, 'No authorization code received'));
+                }
+            };
+            // Check if popup was closed without completing
+            const checkPopupClosed = setInterval(() => {
+                if (popup.closed && !resolved) {
+                    cleanup();
+                    reject(new OAuthError('popup_closed', provider));
+                }
+            }, 500);
+            // Cleanup function
+            const cleanup = () => {
+                window.removeEventListener('message', handleMessage);
+                clearInterval(checkPopupClosed);
+                try {
+                    if (!popup.closed) {
+                        popup.close();
+                    }
+                }
+                catch (_a) {
+                    // Ignore errors when closing popup
+                }
+            };
+            // Start listening for messages
+            window.addEventListener('message', handleMessage);
+        });
+    });
+}
+/** Map OAuth error strings to error codes */
+function mapOAuthError(error) {
+    const lowerError = error.toLowerCase();
+    if (lowerError.includes('access_denied') || lowerError.includes('access denied')) {
+        return 'access_denied';
+    }
+    if (lowerError.includes('email') && lowerError.includes('verif')) {
+        return 'email_not_verified';
+    }
+    if (lowerError.includes('expired')) {
+        return 'expired_code';
+    }
+    if (lowerError.includes('state')) {
+        return 'invalid_state';
+    }
+    return 'provider_error';
+}
+
 function otpFetchTokenCallback(db) {
     const { userInteraction } = db.cloud;
     return function otpAuthenticate(_a) {
         return __awaiter(this, arguments, void 0, function* ({ public_key, hints }) {
-            var _b;
+            var _b, _c;
             let tokenRequest;
             const url = (_b = db.cloud.options) === null || _b === void 0 ? void 0 : _b.databaseUrl;
             if (!url)
                 throw new Error(`No database URL given.`);
+            // Handle OAuth code exchange (from redirect/deep link flows)
+            if ((hints === null || hints === void 0 ? void 0 : hints.oauthCode) && hints.provider) {
+                return yield exchangeOAuthCode({
+                    databaseUrl: url,
+                    code: hints.oauthCode,
+                    publicKey: public_key,
+                    scopes: ['ACCESS_DB'],
+                });
+            }
+            // Handle OAuth provider login (popup flow)
+            if (hints === null || hints === void 0 ? void 0 : hints.provider) {
+                return yield handleOAuthFlow(db, public_key, hints.provider);
+            }
             if ((hints === null || hints === void 0 ? void 0 : hints.grant_type) === 'demo') {
                 const demo_user = yield promptForEmail(userInteraction, 'Enter a demo user email', (hints === null || hints === void 0 ? void 0 : hints.email) || (hints === null || hints === void 0 ? void 0 : hints.userId));
                 tokenRequest = {
@@ -3595,6 +3918,18 @@ function otpFetchTokenCallback(db) {
                 };
             }
             else {
+                // Check for available auth providers (OAuth + OTP)
+                const socialAuthEnabled = ((_c = db.cloud.options) === null || _c === void 0 ? void 0 : _c.socialAuth) !== false;
+                const authProviders = yield fetchAuthProviders(url, socialAuthEnabled);
+                // If we have OAuth providers available, prompt for selection
+                if (authProviders.providers.length > 0) {
+                    const selection = yield promptForProvider(userInteraction, authProviders.providers, authProviders.otpEnabled, 'Sign in');
+                    if (selection.type === 'provider') {
+                        // User selected an OAuth provider
+                        return yield handleOAuthFlow(db, public_key, selection.provider);
+                    }
+                    // User chose OTP - continue with email prompt below
+                }
                 const email = yield promptForEmail(userInteraction, 'Enter email address', hints === null || hints === void 0 ? void 0 : hints.email);
                 if (/@demo.local$/.test(email)) {
                     tokenRequest = {
@@ -3672,6 +4007,49 @@ function otpFetchTokenCallback(db) {
         });
     };
 }
+/**
+ * Handles the OAuth popup flow and token exchange.
+ */
+function handleOAuthFlow(db, publicKey, provider) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const url = (_a = db.cloud.options) === null || _a === void 0 ? void 0 : _a.databaseUrl;
+        if (!url)
+            throw new Error(`No database URL given.`);
+        const { userInteraction } = db.cloud;
+        const usePopup = ((_b = db.cloud.options) === null || _b === void 0 ? void 0 : _b.oauthPopup) !== false;
+        const redirectUri = ((_c = db.cloud.options) === null || _c === void 0 ? void 0 : _c.oauthRedirectUri) ||
+            (typeof window !== 'undefined' ? window.location.origin : undefined);
+        try {
+            // Start OAuth popup flow
+            const result = yield oauthLogin({
+                databaseUrl: url,
+                provider,
+                redirectUri,
+                usePopup,
+            });
+            // Exchange the auth code for tokens
+            return yield exchangeOAuthCode({
+                databaseUrl: url,
+                code: result.code,
+                publicKey,
+                scopes: ['ACCESS_DB'],
+            });
+        }
+        catch (error) {
+            if (error instanceof OAuthError) {
+                // Show user-friendly error message
+                yield alertUser(userInteraction, 'Authentication Failed', {
+                    type: 'error',
+                    messageCode: 'GENERIC_ERROR',
+                    message: error.userMessage,
+                    messageParams: {},
+                }).catch(() => { });
+            }
+            throw error;
+        }
+    });
+}
 
 /** A way to log to console in production without terser stripping out
  * it from the release bundle.
@@ -4494,7 +4872,8 @@ function overrideParseStoresSpec(origFunc, dexie) {
         const cloudSchema = dexie.cloud.schema || (dexie.cloud.schema = {});
         const allPrefixes = new Set();
         Object.keys(storesClone).forEach(tableName => {
-            const schemaSrc = storesClone[tableName];
+            var _a;
+            const schemaSrc = (_a = storesClone[tableName]) === null || _a === void 0 ? void 0 : _a.trim();
             const cloudTableSchema = cloudSchema[tableName] || (cloudSchema[tableName] = {});
             if (schemaSrc != null) {
                 if (/^\@/.test(schemaSrc)) {
@@ -4535,7 +4914,8 @@ function performGuardedJob(db, jobName, job) {
         // No support for guarding jobs. IE11, node.js, etc.
         return job();
     }
-    return navigator.locks.request(db.name + '|' + jobName, () => job());
+    // @ts-expect-error - LockManager callback type inference issue with generics
+    return navigator.locks.request(db.name + '|' + jobName, job);
 }
 
 function performInitialSync(db, cloudOptions, cloudSchema) {
@@ -5290,12 +5670,9 @@ function verifySchema(db) {
     }
 }
 
-var n,l$1,u$1,t$1,o$1,f$1={},e$1=[],c$1=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i;function s$1(n,l){for(var u in l)n[u]=l[u];return n}function a$1(n){var l=n.parentNode;l&&l.removeChild(n);}function h(l,u,i){var t,o,r,f={};for(r in u)"key"==r?t=u[r]:"ref"==r?o=u[r]:f[r]=u[r];if(arguments.length>2&&(f.children=arguments.length>3?n.call(arguments,2):i),"function"==typeof l&&null!=l.defaultProps)for(r in l.defaultProps)void 0===f[r]&&(f[r]=l.defaultProps[r]);return v$1(l,f,t,o,null)}function v$1(n,i,t,o,r){var f={type:n,props:i,key:t,ref:o,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,__h:null,constructor:void 0,__v:null==r?++u$1:r};return null==r&&null!=l$1.vnode&&l$1.vnode(f),f}function p$1(n){return n.children}function d$1(n,l){this.props=n,this.context=l;}function _$1(n,l){if(null==l)return n.__?_$1(n.__,n.__.__k.indexOf(n)+1):null;for(var u;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e)return u.__e;return "function"==typeof n.type?_$1(n):null}function k$1(n){var l,u;if(null!=(n=n.__)&&null!=n.__c){for(n.__e=n.__c.base=null,l=0;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e){n.__e=n.__c.base=u.__e;break}return k$1(n)}}function b$1(n){(!n.__d&&(n.__d=!0)&&t$1.push(n)&&!g$1.__r++||o$1!==l$1.debounceRendering)&&((o$1=l$1.debounceRendering)||setTimeout)(g$1);}function g$1(){for(var n;g$1.__r=t$1.length;)n=t$1.sort(function(n,l){return n.__v.__b-l.__v.__b}),t$1=[],n.some(function(n){var l,u,i,t,o,r;n.__d&&(o=(t=(l=n).__v).__e,(r=l.__P)&&(u=[],(i=s$1({},t)).__v=t.__v+1,j$1(r,t,i,l.__n,void 0!==r.ownerSVGElement,null!=t.__h?[o]:null,u,null==o?_$1(t):o,t.__h),z$1(u,t),t.__e!=o&&k$1(t)));});}function w$1(n,l,u,i,t,o,r,c,s,a){var h,y,d,k,b,g,w,x=i&&i.__k||e$1,C=x.length;for(u.__k=[],h=0;h<l.length;h++)if(null!=(k=u.__k[h]=null==(k=l[h])||"boolean"==typeof k?null:"string"==typeof k||"number"==typeof k||"bigint"==typeof k?v$1(null,k,null,null,k):Array.isArray(k)?v$1(p$1,{children:k},null,null,null):k.__b>0?v$1(k.type,k.props,k.key,null,k.__v):k)){if(k.__=u,k.__b=u.__b+1,null===(d=x[h])||d&&k.key==d.key&&k.type===d.type)x[h]=void 0;else for(y=0;y<C;y++){if((d=x[y])&&k.key==d.key&&k.type===d.type){x[y]=void 0;break}d=null;}j$1(n,k,d=d||f$1,t,o,r,c,s,a),b=k.__e,(y=k.ref)&&d.ref!=y&&(w||(w=[]),d.ref&&w.push(d.ref,null,k),w.push(y,k.__c||b,k)),null!=b?(null==g&&(g=b),"function"==typeof k.type&&k.__k===d.__k?k.__d=s=m$1(k,s,n):s=A(n,k,d,x,b,s),"function"==typeof u.type&&(u.__d=s)):s&&d.__e==s&&s.parentNode!=n&&(s=_$1(d));}for(u.__e=g,h=C;h--;)null!=x[h]&&("function"==typeof u.type&&null!=x[h].__e&&x[h].__e==u.__d&&(u.__d=_$1(i,h+1)),N(x[h],x[h]));if(w)for(h=0;h<w.length;h++)M(w[h],w[++h],w[++h]);}function m$1(n,l,u){for(var i,t=n.__k,o=0;t&&o<t.length;o++)(i=t[o])&&(i.__=n,l="function"==typeof i.type?m$1(i,l,u):A(u,i,i,t,i.__e,l));return l}function A(n,l,u,i,t,o){var r,f,e;if(void 0!==l.__d)r=l.__d,l.__d=void 0;else if(null==u||t!=o||null==t.parentNode)n:if(null==o||o.parentNode!==n)n.appendChild(t),r=null;else {for(f=o,e=0;(f=f.nextSibling)&&e<i.length;e+=2)if(f==t)break n;n.insertBefore(t,o),r=o;}return void 0!==r?r:t.nextSibling}function C(n,l,u,i,t){var o;for(o in u)"children"===o||"key"===o||o in l||H(n,o,null,u[o],i);for(o in l)t&&"function"!=typeof l[o]||"children"===o||"key"===o||"value"===o||"checked"===o||u[o]===l[o]||H(n,o,l[o],u[o],i);}function $(n,l,u){"-"===l[0]?n.setProperty(l,u):n[l]=null==u?"":"number"!=typeof u||c$1.test(l)?u:u+"px";}function H(n,l,u,i,t){var o;n:if("style"===l)if("string"==typeof u)n.style.cssText=u;else {if("string"==typeof i&&(n.style.cssText=i=""),i)for(l in i)u&&l in u||$(n.style,l,"");if(u)for(l in u)i&&u[l]===i[l]||$(n.style,l,u[l]);}else if("o"===l[0]&&"n"===l[1])o=l!==(l=l.replace(/Capture$/,"")),l=l.toLowerCase()in n?l.toLowerCase().slice(2):l.slice(2),n.l||(n.l={}),n.l[l+o]=u,u?i||n.addEventListener(l,o?T:I,o):n.removeEventListener(l,o?T:I,o);else if("dangerouslySetInnerHTML"!==l){if(t)l=l.replace(/xlink(H|:h)/,"h").replace(/sName$/,"s");else if("href"!==l&&"list"!==l&&"form"!==l&&"tabIndex"!==l&&"download"!==l&&l in n)try{n[l]=null==u?"":u;break n}catch(n){}"function"==typeof u||(null!=u&&(!1!==u||"a"===l[0]&&"r"===l[1])?n.setAttribute(l,u):n.removeAttribute(l));}}function I(n){this.l[n.type+!1](l$1.event?l$1.event(n):n);}function T(n){this.l[n.type+!0](l$1.event?l$1.event(n):n);}function j$1(n,u,i,t,o,r,f,e,c){var a,h,v,y,_,k,b,g,m,x,A,C,$,H=u.type;if(void 0!==u.constructor)return null;null!=i.__h&&(c=i.__h,e=u.__e=i.__e,u.__h=null,r=[e]),(a=l$1.__b)&&a(u);try{n:if("function"==typeof H){if(g=u.props,m=(a=H.contextType)&&t[a.__c],x=a?m?m.props.value:a.__:t,i.__c?b=(h=u.__c=i.__c).__=h.__E:("prototype"in H&&H.prototype.render?u.__c=h=new H(g,x):(u.__c=h=new d$1(g,x),h.constructor=H,h.render=O),m&&m.sub(h),h.props=g,h.state||(h.state={}),h.context=x,h.__n=t,v=h.__d=!0,h.__h=[]),null==h.__s&&(h.__s=h.state),null!=H.getDerivedStateFromProps&&(h.__s==h.state&&(h.__s=s$1({},h.__s)),s$1(h.__s,H.getDerivedStateFromProps(g,h.__s))),y=h.props,_=h.state,v)null==H.getDerivedStateFromProps&&null!=h.componentWillMount&&h.componentWillMount(),null!=h.componentDidMount&&h.__h.push(h.componentDidMount);else {if(null==H.getDerivedStateFromProps&&g!==y&&null!=h.componentWillReceiveProps&&h.componentWillReceiveProps(g,x),!h.__e&&null!=h.shouldComponentUpdate&&!1===h.shouldComponentUpdate(g,h.__s,x)||u.__v===i.__v){h.props=g,h.state=h.__s,u.__v!==i.__v&&(h.__d=!1),h.__v=u,u.__e=i.__e,u.__k=i.__k,u.__k.forEach(function(n){n&&(n.__=u);}),h.__h.length&&f.push(h);break n}null!=h.componentWillUpdate&&h.componentWillUpdate(g,h.__s,x),null!=h.componentDidUpdate&&h.__h.push(function(){h.componentDidUpdate(y,_,k);});}if(h.context=x,h.props=g,h.__v=u,h.__P=n,A=l$1.__r,C=0,"prototype"in H&&H.prototype.render)h.state=h.__s,h.__d=!1,A&&A(u),a=h.render(h.props,h.state,h.context);else do{h.__d=!1,A&&A(u),a=h.render(h.props,h.state,h.context),h.state=h.__s;}while(h.__d&&++C<25);h.state=h.__s,null!=h.getChildContext&&(t=s$1(s$1({},t),h.getChildContext())),v||null==h.getSnapshotBeforeUpdate||(k=h.getSnapshotBeforeUpdate(y,_)),$=null!=a&&a.type===p$1&&null==a.key?a.props.children:a,w$1(n,Array.isArray($)?$:[$],u,i,t,o,r,f,e,c),h.base=u.__e,u.__h=null,h.__h.length&&f.push(h),b&&(h.__E=h.__=null),h.__e=!1;}else null==r&&u.__v===i.__v?(u.__k=i.__k,u.__e=i.__e):u.__e=L(i.__e,u,i,t,o,r,f,c);(a=l$1.diffed)&&a(u);}catch(n){u.__v=null,(c||null!=r)&&(u.__e=e,u.__h=!!c,r[r.indexOf(e)]=null),l$1.__e(n,u,i);}}function z$1(n,u){l$1.__c&&l$1.__c(u,n),n.some(function(u){try{n=u.__h,u.__h=[],n.some(function(n){n.call(u);});}catch(n){l$1.__e(n,u.__v);}});}function L(l,u,i,t,o,r,e,c){var s,h,v,y=i.props,p=u.props,d=u.type,k=0;if("svg"===d&&(o=!0),null!=r)for(;k<r.length;k++)if((s=r[k])&&"setAttribute"in s==!!d&&(d?s.localName===d:3===s.nodeType)){l=s,r[k]=null;break}if(null==l){if(null===d)return document.createTextNode(p);l=o?document.createElementNS("http://www.w3.org/2000/svg",d):document.createElement(d,p.is&&p),r=null,c=!1;}if(null===d)y===p||c&&l.data===p||(l.data=p);else {if(r=r&&n.call(l.childNodes),h=(y=i.props||f$1).dangerouslySetInnerHTML,v=p.dangerouslySetInnerHTML,!c){if(null!=r)for(y={},k=0;k<l.attributes.length;k++)y[l.attributes[k].name]=l.attributes[k].value;(v||h)&&(v&&(h&&v.__html==h.__html||v.__html===l.innerHTML)||(l.innerHTML=v&&v.__html||""));}if(C(l,p,y,o,c),v)u.__k=[];else if(k=u.props.children,w$1(l,Array.isArray(k)?k:[k],u,i,t,o&&"foreignObject"!==d,r,e,r?r[0]:i.__k&&_$1(i,0),c),null!=r)for(k=r.length;k--;)null!=r[k]&&a$1(r[k]);c||("value"in p&&void 0!==(k=p.value)&&(k!==l.value||"progress"===d&&!k||"option"===d&&k!==y.value)&&H(l,"value",k,y.value,!1),"checked"in p&&void 0!==(k=p.checked)&&k!==l.checked&&H(l,"checked",k,y.checked,!1));}return l}function M(n,u,i){try{"function"==typeof n?n(u):n.current=u;}catch(n){l$1.__e(n,i);}}function N(n,u,i){var t,o;if(l$1.unmount&&l$1.unmount(n),(t=n.ref)&&(t.current&&t.current!==n.__e||M(t,null,u)),null!=(t=n.__c)){if(t.componentWillUnmount)try{t.componentWillUnmount();}catch(n){l$1.__e(n,u);}t.base=t.__P=null;}if(t=n.__k)for(o=0;o<t.length;o++)t[o]&&N(t[o],u,"function"!=typeof n.type);i||null==n.__e||a$1(n.__e),n.__e=n.__d=void 0;}function O(n,l,u){return this.constructor(n,u)}function P(u,i,t){var o,r,e;l$1.__&&l$1.__(u,i),r=(o="function"==typeof t)?null:t&&t.__k||i.__k,e=[],j$1(i,u=(!o&&t||i).__k=h(p$1,null,[u]),r||f$1,f$1,void 0!==i.ownerSVGElement,!o&&t?[t]:r?null:i.firstChild?n.call(i.childNodes):null,e,!o&&t?t:r?r.__e:i.firstChild,o),z$1(e,u);}n=e$1.slice,l$1={__e:function(n,l,u,i){for(var t,o,r;l=l.__;)if((t=l.__c)&&!t.__)try{if((o=t.constructor)&&null!=o.getDerivedStateFromError&&(t.setState(o.getDerivedStateFromError(n)),r=t.__d),null!=t.componentDidCatch&&(t.componentDidCatch(n,i||{}),r=t.__d),r)return t.__E=t}catch(l){n=l;}throw n}},u$1=0,d$1.prototype.setState=function(n,l){var u;u=null!=this.__s&&this.__s!==this.state?this.__s:this.__s=s$1({},this.state),"function"==typeof n&&(n=n(s$1({},u),this.props)),n&&s$1(u,n),null!=n&&this.__v&&(l&&this.__h.push(l),b$1(this));},d$1.prototype.forceUpdate=function(n){this.__v&&(this.__e=!0,n&&this.__h.push(n),b$1(this));},d$1.prototype.render=p$1,t$1=[],g$1.__r=0;
+var n,l$1,u$1,i$1,r$1,o$1,e$1,f$1,c$1,s$1,a$1,p$1={},v$1=[],y=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,w$1=Array.isArray;function d$1(n,l){for(var u in l)n[u]=l[u];return n}function g(n){n&&n.parentNode&&n.parentNode.removeChild(n);}function _$1(l,u,t){var i,r,o,e={};for(o in u)"key"==o?i=u[o]:"ref"==o?r=u[o]:e[o]=u[o];if(arguments.length>2&&(e.children=arguments.length>3?n.call(arguments,2):t),"function"==typeof l&&null!=l.defaultProps)for(o in l.defaultProps) void 0===e[o]&&(e[o]=l.defaultProps[o]);return m$1(l,e,i,r,null)}function m$1(n,t,i,r,o){var e={type:n,props:t,key:i,ref:r,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:null==o?++u$1:o,__i:-1,__u:0};return null==o&&null!=l$1.vnode&&l$1.vnode(e),e}function k$1(n){return n.children}function x(n,l){this.props=n,this.context=l;}function S(n,l){if(null==l)return n.__?S(n.__,n.__i+1):null;for(var u;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e)return u.__e;return "function"==typeof n.type?S(n):null}function C$1(n){var l,u;if(null!=(n=n.__)&&null!=n.__c){for(n.__e=n.__c.base=null,l=0;l<n.__k.length;l++)if(null!=(u=n.__k[l])&&null!=u.__e){n.__e=n.__c.base=u.__e;break}return C$1(n)}}function M(n){(!n.__d&&(n.__d=true)&&i$1.push(n)&&!$.__r++||r$1!=l$1.debounceRendering)&&((r$1=l$1.debounceRendering)||o$1)($);}function $(){for(var n,u,t,r,o,f,c,s=1;i$1.length;)i$1.length>s&&i$1.sort(e$1),n=i$1.shift(),s=i$1.length,n.__d&&(t=void 0,r=void 0,o=(r=(u=n).__v).__e,f=[],c=[],u.__P&&((t=d$1({},r)).__v=r.__v+1,l$1.vnode&&l$1.vnode(t),O(u.__P,t,r,u.__n,u.__P.namespaceURI,32&r.__u?[o]:null,f,null==o?S(r):o,!!(32&r.__u),c),t.__v=r.__v,t.__.__k[t.__i]=t,N(f,t,c),r.__e=r.__=null,t.__e!=o&&C$1(t)));$.__r=0;}function I(n,l,u,t,i,r,o,e,f,c,s){var a,h,y,w,d,g,_,m=t&&t.__k||v$1,b=l.length;for(f=P(u,l,m,f,b),a=0;a<b;a++)null!=(y=u.__k[a])&&(h=-1==y.__i?p$1:m[y.__i]||p$1,y.__i=a,g=O(n,y,h,i,r,o,e,f,c,s),w=y.__e,y.ref&&h.ref!=y.ref&&(h.ref&&B$1(h.ref,null,y),s.push(y.ref,y.__c||w,y)),null==d&&null!=w&&(d=w),(_=!!(4&y.__u))||h.__k===y.__k?f=A$1(y,f,n,_):"function"==typeof y.type&&void 0!==g?f=g:w&&(f=w.nextSibling),y.__u&=-7);return u.__e=d,f}function P(n,l,u,t,i){var r,o,e,f,c,s=u.length,a=s,h=0;for(n.__k=new Array(i),r=0;r<i;r++)null!=(o=l[r])&&"boolean"!=typeof o&&"function"!=typeof o?("string"==typeof o||"number"==typeof o||"bigint"==typeof o||o.constructor==String?o=n.__k[r]=m$1(null,o,null,null,null):w$1(o)?o=n.__k[r]=m$1(k$1,{children:o},null,null,null):null==o.constructor&&o.__b>0?o=n.__k[r]=m$1(o.type,o.props,o.key,o.ref?o.ref:null,o.__v):n.__k[r]=o,f=r+h,o.__=n,o.__b=n.__b+1,-1!=(c=o.__i=L(o,u,f,a))&&(a--,(e=u[c])&&(e.__u|=2)),null==e||null==e.__v?(-1==c&&(i>s?h--:i<s&&h++),"function"!=typeof o.type&&(o.__u|=4)):c!=f&&(c==f-1?h--:c==f+1?h++:(c>f?h--:h++,o.__u|=4))):n.__k[r]=null;if(a)for(r=0;r<s;r++)null!=(e=u[r])&&0==(2&e.__u)&&(e.__e==t&&(t=S(e)),D$1(e,e));return t}function A$1(n,l,u,t){var i,r;if("function"==typeof n.type){for(i=n.__k,r=0;i&&r<i.length;r++)i[r]&&(i[r].__=n,l=A$1(i[r],l,u,t));return l}n.__e!=l&&(t&&(l&&n.type&&!l.parentNode&&(l=S(n)),u.insertBefore(n.__e,l||null)),l=n.__e);do{l=l&&l.nextSibling;}while(null!=l&&8==l.nodeType);return l}function L(n,l,u,t){var i,r,o,e=n.key,f=n.type,c=l[u],s=null!=c&&0==(2&c.__u);if(null===c&&null==e||s&&e==c.key&&f==c.type)return u;if(t>(s?1:0))for(i=u-1,r=u+1;i>=0||r<l.length;)if(null!=(c=l[o=i>=0?i--:r++])&&0==(2&c.__u)&&e==c.key&&f==c.type)return o;return  -1}function T$1(n,l,u){"-"==l[0]?n.setProperty(l,null==u?"":u):n[l]=null==u?"":"number"!=typeof u||y.test(l)?u:u+"px";}function j$1(n,l,u,t,i){var r,o;n:if("style"==l)if("string"==typeof u)n.style.cssText=u;else {if("string"==typeof t&&(n.style.cssText=t=""),t)for(l in t)u&&l in u||T$1(n.style,l,"");if(u)for(l in u)t&&u[l]==t[l]||T$1(n.style,l,u[l]);}else if("o"==l[0]&&"n"==l[1])r=l!=(l=l.replace(f$1,"$1")),o=l.toLowerCase(),l=o in n||"onFocusOut"==l||"onFocusIn"==l?o.slice(2):l.slice(2),n.l||(n.l={}),n.l[l+r]=u,u?t?u.u=t.u:(u.u=c$1,n.addEventListener(l,r?a$1:s$1,r)):n.removeEventListener(l,r?a$1:s$1,r);else {if("http://www.w3.org/2000/svg"==i)l=l.replace(/xlink(H|:h)/,"h").replace(/sName$/,"s");else if("width"!=l&&"height"!=l&&"href"!=l&&"list"!=l&&"form"!=l&&"tabIndex"!=l&&"download"!=l&&"rowSpan"!=l&&"colSpan"!=l&&"role"!=l&&"popover"!=l&&l in n)try{n[l]=null==u?"":u;break n}catch(n){}"function"==typeof u||(null==u||false===u&&"-"!=l[4]?n.removeAttribute(l):n.setAttribute(l,"popover"==l&&1==u?"":u));}}function F(n){return function(u){if(this.l){var t=this.l[u.type+n];if(null==u.t)u.t=c$1++;else if(u.t<t.u)return;return t(l$1.event?l$1.event(u):u)}}}function O(n,u,t,i,r,o,e,f,c,s){var a,h,p,v,y,_,m,b,S,C,M,$,P,A,H,L,T,j=u.type;if(null!=u.constructor)return null;128&t.__u&&(c=!!(32&t.__u),o=[f=u.__e=t.__e]),(a=l$1.__b)&&a(u);n:if("function"==typeof j)try{if(b=u.props,S="prototype"in j&&j.prototype.render,C=(a=j.contextType)&&i[a.__c],M=a?C?C.props.value:a.__:i,t.__c?m=(h=u.__c=t.__c).__=h.__E:(S?u.__c=h=new j(b,M):(u.__c=h=new x(b,M),h.constructor=j,h.render=E),C&&C.sub(h),h.state||(h.state={}),h.__n=i,p=h.__d=!0,h.__h=[],h._sb=[]),S&&null==h.__s&&(h.__s=h.state),S&&null!=j.getDerivedStateFromProps&&(h.__s==h.state&&(h.__s=d$1({},h.__s)),d$1(h.__s,j.getDerivedStateFromProps(b,h.__s))),v=h.props,y=h.state,h.__v=u,p)S&&null==j.getDerivedStateFromProps&&null!=h.componentWillMount&&h.componentWillMount(),S&&null!=h.componentDidMount&&h.__h.push(h.componentDidMount);else {if(S&&null==j.getDerivedStateFromProps&&b!==v&&null!=h.componentWillReceiveProps&&h.componentWillReceiveProps(b,M),u.__v==t.__v||!h.__e&&null!=h.shouldComponentUpdate&&!1===h.shouldComponentUpdate(b,h.__s,M)){for(u.__v!=t.__v&&(h.props=b,h.state=h.__s,h.__d=!1),u.__e=t.__e,u.__k=t.__k,u.__k.some(function(n){n&&(n.__=u);}),$=0;$<h._sb.length;$++)h.__h.push(h._sb[$]);h._sb=[],h.__h.length&&e.push(h);break n}null!=h.componentWillUpdate&&h.componentWillUpdate(b,h.__s,M),S&&null!=h.componentDidUpdate&&h.__h.push(function(){h.componentDidUpdate(v,y,_);});}if(h.context=M,h.props=b,h.__P=n,h.__e=!1,P=l$1.__r,A=0,S){for(h.state=h.__s,h.__d=!1,P&&P(u),a=h.render(h.props,h.state,h.context),H=0;H<h._sb.length;H++)h.__h.push(h._sb[H]);h._sb=[];}else do{h.__d=!1,P&&P(u),a=h.render(h.props,h.state,h.context),h.state=h.__s;}while(h.__d&&++A<25);h.state=h.__s,null!=h.getChildContext&&(i=d$1(d$1({},i),h.getChildContext())),S&&!p&&null!=h.getSnapshotBeforeUpdate&&(_=h.getSnapshotBeforeUpdate(v,y)),L=a,null!=a&&a.type===k$1&&null==a.key&&(L=V(a.props.children)),f=I(n,w$1(L)?L:[L],u,t,i,r,o,e,f,c,s),h.base=u.__e,u.__u&=-161,h.__h.length&&e.push(h),m&&(h.__E=h.__=null);}catch(n){if(u.__v=null,c||null!=o)if(n.then){for(u.__u|=c?160:128;f&&8==f.nodeType&&f.nextSibling;)f=f.nextSibling;o[o.indexOf(f)]=null,u.__e=f;}else {for(T=o.length;T--;)g(o[T]);z$1(u);}else u.__e=t.__e,u.__k=t.__k,n.then||z$1(u);l$1.__e(n,u,t);}else null==o&&u.__v==t.__v?(u.__k=t.__k,u.__e=t.__e):f=u.__e=q(t.__e,u,t,i,r,o,e,c,s);return (a=l$1.diffed)&&a(u),128&u.__u?void 0:f}function z$1(n){n&&n.__c&&(n.__c.__e=true),n&&n.__k&&n.__k.forEach(z$1);}function N(n,u,t){for(var i=0;i<t.length;i++)B$1(t[i],t[++i],t[++i]);l$1.__c&&l$1.__c(u,n),n.some(function(u){try{n=u.__h,u.__h=[],n.some(function(n){n.call(u);});}catch(n){l$1.__e(n,u.__v);}});}function V(n){return "object"!=typeof n||null==n||n.__b&&n.__b>0?n:w$1(n)?n.map(V):d$1({},n)}function q(u,t,i,r,o,e,f,c,s){var a,h,v,y,d,_,m,b=i.props||p$1,k=t.props,x=t.type;if("svg"==x?o="http://www.w3.org/2000/svg":"math"==x?o="http://www.w3.org/1998/Math/MathML":o||(o="http://www.w3.org/1999/xhtml"),null!=e)for(a=0;a<e.length;a++)if((d=e[a])&&"setAttribute"in d==!!x&&(x?d.localName==x:3==d.nodeType)){u=d,e[a]=null;break}if(null==u){if(null==x)return document.createTextNode(k);u=document.createElementNS(o,x,k.is&&k),c&&(l$1.__m&&l$1.__m(t,e),c=false),e=null;}if(null==x)b===k||c&&u.data==k||(u.data=k);else {if(e=e&&n.call(u.childNodes),!c&&null!=e)for(b={},a=0;a<u.attributes.length;a++)b[(d=u.attributes[a]).name]=d.value;for(a in b)if(d=b[a],"children"==a);else if("dangerouslySetInnerHTML"==a)v=d;else if(!(a in k)){if("value"==a&&"defaultValue"in k||"checked"==a&&"defaultChecked"in k)continue;j$1(u,a,null,d,o);}for(a in k)d=k[a],"children"==a?y=d:"dangerouslySetInnerHTML"==a?h=d:"value"==a?_=d:"checked"==a?m=d:c&&"function"!=typeof d||b[a]===d||j$1(u,a,d,b[a],o);if(h)c||v&&(h.__html==v.__html||h.__html==u.innerHTML)||(u.innerHTML=h.__html),t.__k=[];else if(v&&(u.innerHTML=""),I("template"==t.type?u.content:u,w$1(y)?y:[y],t,i,r,"foreignObject"==x?"http://www.w3.org/1999/xhtml":o,e,f,e?e[0]:i.__k&&S(i,0),c,s),null!=e)for(a=e.length;a--;)g(e[a]);c||(a="value","progress"==x&&null==_?u.removeAttribute("value"):null!=_&&(_!==u[a]||"progress"==x&&!_||"option"==x&&_!=b[a])&&j$1(u,a,_,b[a],o),a="checked",null!=m&&m!=u[a]&&j$1(u,a,m,b[a],o));}return u}function B$1(n,u,t){try{if("function"==typeof n){var i="function"==typeof n.__u;i&&n.__u(),i&&null==u||(n.__u=n(u));}else n.current=u;}catch(n){l$1.__e(n,t);}}function D$1(n,u,t){var i,r;if(l$1.unmount&&l$1.unmount(n),(i=n.ref)&&(i.current&&i.current!=n.__e||B$1(i,null,u)),null!=(i=n.__c)){if(i.componentWillUnmount)try{i.componentWillUnmount();}catch(n){l$1.__e(n,u);}i.base=i.__P=null;}if(i=n.__k)for(r=0;r<i.length;r++)i[r]&&D$1(i[r],u,t||"function"!=typeof n.type);t||g(n.__e),n.__c=n.__=n.__e=void 0;}function E(n,l,u){return this.constructor(n,u)}function G(u,t,i){var r,o,e,f;t==document&&(t=document.documentElement),l$1.__&&l$1.__(u,t),o=(r="function"=="undefined")?null:t.__k,e=[],f=[],O(t,u=(t).__k=_$1(k$1,null,[u]),o||p$1,p$1,t.namespaceURI,o?null:t.firstChild?n.call(t.childNodes):null,e,o?o.__e:t.firstChild,r,f),N(e,u,f);}n=v$1.slice,l$1={__e:function(n,l,u,t){for(var i,r,o;l=l.__;)if((i=l.__c)&&!i.__)try{if((r=i.constructor)&&null!=r.getDerivedStateFromError&&(i.setState(r.getDerivedStateFromError(n)),o=i.__d),null!=i.componentDidCatch&&(i.componentDidCatch(n,t||{}),o=i.__d),o)return i.__E=i}catch(l){n=l;}throw n}},u$1=0,x.prototype.setState=function(n,l){var u;u=null!=this.__s&&this.__s!=this.state?this.__s:this.__s=d$1({},this.state),"function"==typeof n&&(n=n(d$1({},u),this.props)),n&&d$1(u,n),null!=n&&this.__v&&(l&&this._sb.push(l),M(this));},x.prototype.forceUpdate=function(n){this.__v&&(this.__e=true,n&&this.__h.push(n),M(this));},x.prototype.render=k$1,i$1=[],o$1="function"==typeof Promise?Promise.prototype.then.bind(Promise.resolve()):setTimeout,e$1=function(n,l){return n.__v.__b-l.__v.__b},$.__r=0,f$1=/(PointerCapture)$|Capture$/i,c$1=0,s$1=F(false),a$1=F(true);
 
 const Styles = {
-    Error: {
-        color: "red",
-    },
     Alert: {
         error: {
             color: "red",
@@ -5410,17 +5787,110 @@ const Styles = {
         color: "#333",
         borderBottom: "1px solid #eee",
         paddingBottom: "10px"
+    },
+    // OAuth Provider Button Styles
+    ProviderButton: {
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        width: "100%",
+        padding: "12px 16px",
+        marginBottom: "10px",
+        border: "1px solid #d1d5db",
+        borderRadius: "6px",
+        backgroundColor: "#ffffff",
+        cursor: "pointer",
+        fontSize: "14px",
+        fontWeight: "500",
+        color: "#374151",
+        transition: "all 0.2s ease",
+        gap: "12px"
+    },
+    ProviderButtonIcon: {
+        width: "20px",
+        height: "20px",
+        flexShrink: 0
+    },
+    ProviderButtonText: {
+        flex: 1,
+        textAlign: "left"
+    },
+    // Provider-specific colors
+    ProviderGoogle: {
+        backgroundColor: "#ffffff",
+        border: "1px solid #dadce0",
+        color: "#3c4043"
+    },
+    ProviderGitHub: {
+        backgroundColor: "#24292e",
+        border: "1px solid #24292e",
+        color: "#ffffff"
+    },
+    ProviderMicrosoft: {
+        backgroundColor: "#ffffff",
+        border: "1px solid #8c8c8c",
+        color: "#5e5e5e"
+    },
+    ProviderApple: {
+        backgroundColor: "#000000",
+        border: "1px solid #000000",
+        color: "#ffffff"
+    },
+    ProviderCustom: {
+        backgroundColor: "#4f46e5",
+        border: "1px solid #4f46e5",
+        color: "#ffffff"
+    },
+    // Divider styles
+    Divider: {
+        display: "flex",
+        alignItems: "center",
+        margin: "20px 0",
+        color: "#6b7280",
+        fontSize: "13px"
+    },
+    DividerLine: {
+        flex: 1,
+        height: "1px",
+        backgroundColor: "#e5e7eb"
+    },
+    DividerText: {
+        padding: "0 12px",
+        color: "#9ca3af"
+    },
+    // OTP Button (Continue with email)
+    OtpButton: {
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        width: "100%",
+        padding: "12px 16px",
+        border: "1px solid #d1d5db",
+        borderRadius: "6px",
+        backgroundColor: "#f9fafb",
+        cursor: "pointer",
+        fontSize: "14px",
+        fontWeight: "500",
+        color: "#374151",
+        transition: "all 0.2s ease",
+        gap: "12px"
+    },
+    // Cancel button for provider selection
+    CancelButtonRow: {
+        display: "flex",
+        justifyContent: "center",
+        marginTop: "16px"
     }
 };
 
 function Dialog({ children, className }) {
-    return (h("div", { className: `dexie-dialog ${className || ''}` },
-        h("div", { style: Styles.Darken }),
-        h("div", { style: Styles.DialogOuter },
-            h("div", { style: Styles.DialogInner }, children))));
+    return (_$1("div", { className: `dexie-dialog ${className || ''}` },
+        _$1("div", { style: Styles.Darken }),
+        _$1("div", { style: Styles.DialogOuter },
+            _$1("div", { style: Styles.DialogInner }, children))));
 }
 
-var t,r,u,i,o=0,c=[],f=[],e=l$1.__b,a=l$1.__r,v=l$1.diffed,l=l$1.__c,m=l$1.unmount;function d(t,u){l$1.__h&&l$1.__h(r,t,o||u),o=0;var i=r.__H||(r.__H={__:[],__h:[]});return t>=i.__.length&&i.__.push({__V:f}),i.__[t]}function p(n){return o=1,y(z,n)}function y(n,u,i){var o=d(t++,2);if(o.t=n,!o.__c&&(o.__=[i?i(u):z(void 0,u),function(n){var t=o.__N?o.__N[0]:o.__[0],r=o.t(t,n);t!==r&&(o.__N=[r,o.__[1]],o.__c.setState({}));}],o.__c=r,!r.u)){r.u=!0;var c=r.shouldComponentUpdate;r.shouldComponentUpdate=function(n,t,r){if(!o.__c.__H)return !0;var u=o.__c.__H.__.filter(function(n){return n.__c});if(u.every(function(n){return !n.__N}))return !c||c.call(this,n,t,r);var i=!1;return u.forEach(function(n){if(n.__N){var t=n.__[0];n.__=n.__N,n.__N=void 0,t!==n.__[0]&&(i=!0);}}),!!i&&(!c||c.call(this,n,t,r))};}return o.__N||o.__}function s(u,i){var o=d(t++,4);!l$1.__s&&w(o.__H,i)&&(o.__=u,o.i=i,r.__h.push(o));}function _(n){return o=5,F(function(){return {current:n}},[])}function F(n,r){var u=d(t++,7);return w(u.__H,r)?(u.__V=n(),u.i=r,u.__h=n,u.__V):u.__}function b(){for(var t;t=c.shift();)if(t.__P&&t.__H)try{t.__H.__h.forEach(j),t.__H.__h.forEach(k),t.__H.__h=[];}catch(r){t.__H.__h=[],l$1.__e(r,t.__v);}}l$1.__b=function(n){r=null,e&&e(n);},l$1.__r=function(n){a&&a(n),t=0;var i=(r=n.__c).__H;i&&(u===r?(i.__h=[],r.__h=[],i.__.forEach(function(n){n.__N&&(n.__=n.__N),n.__V=f,n.__N=n.i=void 0;})):(i.__h.forEach(j),i.__h.forEach(k),i.__h=[])),u=r;},l$1.diffed=function(t){v&&v(t);var o=t.__c;o&&o.__H&&(o.__H.__h.length&&(1!==c.push(o)&&i===l$1.requestAnimationFrame||((i=l$1.requestAnimationFrame)||function(n){var t,r=function(){clearTimeout(u),g&&cancelAnimationFrame(t),setTimeout(n);},u=setTimeout(r,100);g&&(t=requestAnimationFrame(r));})(b)),o.__H.__.forEach(function(n){n.i&&(n.__H=n.i),n.__V!==f&&(n.__=n.__V),n.i=void 0,n.__V=f;})),u=r=null;},l$1.__c=function(t,r){r.some(function(t){try{t.__h.forEach(j),t.__h=t.__h.filter(function(n){return !n.__||k(n)});}catch(u){r.some(function(n){n.__h&&(n.__h=[]);}),r=[],l$1.__e(u,t.__v);}}),l&&l(t,r);},l$1.unmount=function(t){m&&m(t);var r,u=t.__c;u&&u.__H&&(u.__H.__.forEach(function(n){try{j(n);}catch(n){r=n;}}),r&&l$1.__e(r,u.__v));};var g="function"==typeof requestAnimationFrame;function j(n){var t=r,u=n.__c;"function"==typeof u&&(n.__c=void 0,u()),r=t;}function k(n){var t=r;n.__c=n.__(),r=t;}function w(n,t){return !n||n.length!==t.length||t.some(function(t,r){return t!==n[r]})}function z(n,t){return "function"==typeof t?t(n):t}
+var t,r,u,i,o=0,f=[],c=l$1,e=c.__b,a=c.__r,v=c.diffed,l=c.__c,m=c.unmount,s=c.__;function p(n,t){c.__h&&c.__h(r,n,o||t),o=0;var u=r.__H||(r.__H={__:[],__h:[]});return n>=u.__.length&&u.__.push({}),u.__[n]}function d(n){return o=1,h(D,n)}function h(n,u,i){var o=p(t++,2);if(o.t=n,!o.__c&&(o.__=[D(void 0,u),function(n){var t=o.__N?o.__N[0]:o.__[0],r=o.t(t,n);t!==r&&(o.__N=[r,o.__[1]],o.__c.setState({}));}],o.__c=r,!r.__f)){var f=function(n,t,r){if(!o.__c.__H)return  true;var u=o.__c.__H.__.filter(function(n){return !!n.__c});if(u.every(function(n){return !n.__N}))return !c||c.call(this,n,t,r);var i=o.__c.props!==n;return u.forEach(function(n){if(n.__N){var t=n.__[0];n.__=n.__N,n.__N=void 0,t!==n.__[0]&&(i=true);}}),c&&c.call(this,n,t,r)||i};r.__f=true;var c=r.shouldComponentUpdate,e=r.componentWillUpdate;r.componentWillUpdate=function(n,t,r){if(this.__e){var u=c;c=void 0,f(n,t,r),c=u;}e&&e.call(this,n,t,r);},r.shouldComponentUpdate=f;}return o.__N||o.__}function _(n,u){var i=p(t++,4);!c.__s&&C(i.__H,u)&&(i.__=n,i.u=u,r.__h.push(i));}function A(n){return o=5,T(function(){return {current:n}},[])}function T(n,r){var u=p(t++,7);return C(u.__H,r)&&(u.__=n(),u.__H=r,u.__h=n),u.__}function j(){for(var n;n=f.shift();)if(n.__P&&n.__H)try{n.__H.__h.forEach(z),n.__H.__h.forEach(B),n.__H.__h=[];}catch(t){n.__H.__h=[],c.__e(t,n.__v);}}c.__b=function(n){r=null,e&&e(n);},c.__=function(n,t){n&&t.__k&&t.__k.__m&&(n.__m=t.__k.__m),s&&s(n,t);},c.__r=function(n){a&&a(n),t=0;var i=(r=n.__c).__H;i&&(u===r?(i.__h=[],r.__h=[],i.__.forEach(function(n){n.__N&&(n.__=n.__N),n.u=n.__N=void 0;})):(i.__h.forEach(z),i.__h.forEach(B),i.__h=[],t=0)),u=r;},c.diffed=function(n){v&&v(n);var t=n.__c;t&&t.__H&&(t.__H.__h.length&&(1!==f.push(t)&&i===c.requestAnimationFrame||((i=c.requestAnimationFrame)||w)(j)),t.__H.__.forEach(function(n){n.u&&(n.__H=n.u),n.u=void 0;})),u=r=null;},c.__c=function(n,t){t.some(function(n){try{n.__h.forEach(z),n.__h=n.__h.filter(function(n){return !n.__||B(n)});}catch(r){t.some(function(n){n.__h&&(n.__h=[]);}),t=[],c.__e(r,n.__v);}}),l&&l(n,t);},c.unmount=function(n){m&&m(n);var t,r=n.__c;r&&r.__H&&(r.__H.__.forEach(function(n){try{z(n);}catch(n){t=n;}}),r.__H=void 0,t&&c.__e(t,r.__v));};var k="function"==typeof requestAnimationFrame;function w(n){var t,r=function(){clearTimeout(u),k&&cancelAnimationFrame(t),setTimeout(n);},u=setTimeout(r,35);k&&(t=requestAnimationFrame(r));}function z(n){var t=r,u=n.__c;"function"==typeof u&&(n.__c=void 0,u()),r=t;}function B(n){var t=r;n.__c=n.__(),r=t;}function C(n,t){return !n||n.length!==t.length||t.some(function(t,r){return t!==n[r]})}function D(n,t){return "function"==typeof t?t(n):t}
 
 /** Resolve a message template with parameters.
  *
@@ -5442,19 +5912,19 @@ function resolveText({ message, messageCode, messageParams }) {
 
 const OTP_LENGTH = 8;
 function LoginDialog({ title, type, alerts, fields, submitLabel, cancelLabel, onCancel, onSubmit, }) {
-    const [params, setParams] = p({});
-    const firstFieldRef = _(null);
-    s(() => { var _a; return (_a = firstFieldRef.current) === null || _a === void 0 ? void 0 : _a.focus(); }, []);
-    return (h(Dialog, { className: "dxc-login-dlg" },
-        h(p$1, null,
-            h("h3", { style: Styles.WindowHeader }, title),
-            alerts.map((alert) => (h("p", { style: Styles.Alert[alert.type] }, resolveText(alert)))),
-            h("form", { onSubmit: (ev) => {
+    const [params, setParams] = d({});
+    const firstFieldRef = A(null);
+    _(() => { var _a; return (_a = firstFieldRef.current) === null || _a === void 0 ? void 0 : _a.focus(); }, []);
+    return (_$1(Dialog, { className: "dxc-login-dlg" },
+        _$1(k$1, null,
+            _$1("h3", { style: Styles.WindowHeader }, title),
+            alerts.map((alert) => (_$1("p", { style: Styles.Alert[alert.type] }, resolveText(alert)))),
+            _$1("form", { onSubmit: (ev) => {
                     ev.preventDefault();
                     onSubmit(params);
-                } }, Object.entries(fields).map(([fieldName, { type, label, placeholder }], idx) => (h("label", { style: Styles.Label, key: idx },
+                } }, Object.entries(fields).map(([fieldName, { type, label, placeholder }], idx) => (_$1("label", { style: Styles.Label, key: idx },
                 label ? `${label}: ` : '',
-                h("input", { ref: idx === 0 ? firstFieldRef : undefined, type: type, name: fieldName, autoComplete: "on", style: Styles.Input, autoFocus: true, placeholder: placeholder, value: params[fieldName] || '', onInput: (ev) => {
+                _$1("input", { ref: idx === 0 ? firstFieldRef : undefined, type: type, name: fieldName, autoComplete: "on", style: Styles.Input, autoFocus: true, placeholder: placeholder, value: params[fieldName] || '', onInput: (ev) => {
                         var _a;
                         const value = valueTransformer(type, (_a = ev.target) === null || _a === void 0 ? void 0 : _a['value']);
                         let updatedParams = Object.assign(Object.assign({}, params), { [fieldName]: value });
@@ -5464,10 +5934,10 @@ function LoginDialog({ title, type, alerts, fields, submitLabel, cancelLabel, on
                             onSubmit(updatedParams);
                         }
                     } })))))),
-        h("div", { style: Styles.ButtonsDiv },
-            h(p$1, null,
-                h("button", { type: "submit", style: Styles.PrimaryButton, onClick: () => onSubmit(params) }, submitLabel),
-                cancelLabel && (h("button", { style: Styles.Button, onClick: onCancel }, cancelLabel))))));
+        _$1("div", { style: Styles.ButtonsDiv },
+            _$1(k$1, null,
+                _$1("button", { type: "submit", style: Styles.PrimaryButton, onClick: () => onSubmit(params) }, submitLabel),
+                cancelLabel && (_$1("button", { style: Styles.Button, onClick: onCancel }, cancelLabel))))));
 }
 function valueTransformer(type, value) {
     switch (type) {
@@ -5480,7 +5950,83 @@ function valueTransformer(type, value) {
     }
 }
 
-class LoginGui extends d$1 {
+/** Default SVG icons for built-in providers */
+const ProviderIcons = {
+    google: `<svg viewBox="0 0 24 24" width="20" height="20"><path fill="#4285F4" d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"/><path fill="#34A853" d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"/><path fill="#FBBC05" d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"/><path fill="#EA4335" d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"/></svg>`,
+    github: `<svg viewBox="0 0 24 24" width="20" height="20" fill="currentColor"><path d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0024 12c0-6.63-5.37-12-12-12z"/></svg>`,
+    microsoft: `<svg viewBox="0 0 24 24" width="20" height="20"><rect fill="#F25022" x="1" y="1" width="10" height="10"/><rect fill="#00A4EF" x="1" y="13" width="10" height="10"/><rect fill="#7FBA00" x="13" y="1" width="10" height="10"/><rect fill="#FFB900" x="13" y="13" width="10" height="10"/></svg>`,
+    apple: `<svg viewBox="0 0 24 24" width="20" height="20" fill="currentColor"><path d="M18.71 19.5c-.83 1.24-1.71 2.45-3.05 2.47-1.34.03-1.77-.79-3.29-.79-1.53 0-2 .77-3.27.82-1.31.05-2.3-1.32-3.14-2.53C4.25 17 2.94 12.45 4.7 9.39c.87-1.52 2.43-2.48 4.12-2.51 1.28-.02 2.5.87 3.29.87.78 0 2.26-1.07 3.81-.91.65.03 2.47.26 3.64 1.98-.09.06-2.17 1.28-2.15 3.81.03 3.02 2.65 4.03 2.68 4.04-.03.07-.42 1.44-1.38 2.83M13 3.5c.73-.83 1.94-1.46 2.94-1.5.13 1.17-.34 2.35-1.04 3.19-.69.85-1.83 1.51-2.95 1.42-.15-1.15.41-2.35 1.05-3.11z"/></svg>`,
+};
+/** Get provider-specific button styles */
+function getProviderStyle(providerType) {
+    const baseStyle = Object.assign({}, Styles.ProviderButton);
+    switch (providerType) {
+        case 'google':
+            return Object.assign(Object.assign({}, baseStyle), Styles.ProviderGoogle);
+        case 'github':
+            return Object.assign(Object.assign({}, baseStyle), Styles.ProviderGitHub);
+        case 'microsoft':
+            return Object.assign(Object.assign({}, baseStyle), Styles.ProviderMicrosoft);
+        case 'apple':
+            return Object.assign(Object.assign({}, baseStyle), Styles.ProviderApple);
+        default:
+            return Object.assign(Object.assign({}, baseStyle), Styles.ProviderCustom);
+    }
+}
+/**
+ * Button component for OAuth provider login.
+ * Displays the provider's icon and name following provider branding guidelines.
+ */
+function AuthProviderButton({ provider, onClick }) {
+    const { type, name, displayName, iconUrl } = provider;
+    const style = getProviderStyle(type);
+    // Determine button text
+    const buttonText = `Continue with ${displayName}`;
+    // Get icon - use custom iconUrl if provided, otherwise use built-in SVG
+    const iconSvg = ProviderIcons[type] || '';
+    return (_$1("button", { type: "button", style: style, onClick: onClick, class: `dxc-provider-btn dxc-provider-${type}`, "aria-label": buttonText },
+        iconUrl ? (_$1("img", { src: iconUrl, alt: "", style: Styles.ProviderButtonIcon, "aria-hidden": "true" })) : iconSvg ? (_$1("span", { style: Styles.ProviderButtonIcon, "aria-hidden": "true", dangerouslySetInnerHTML: { __html: iconSvg } })) : null,
+        _$1("span", { style: Styles.ProviderButtonText }, buttonText)));
+}
+/** Email/envelope icon for OTP button */
+const EmailIcon = `<svg viewBox="0 0 24 24" width="20" height="20" fill="none" stroke="currentColor" stroke-width="2"><rect x="2" y="4" width="20" height="16" rx="2"/><path d="M22 6L12 13 2 6"/></svg>`;
+/**
+ * Button for email/OTP authentication option.
+ */
+function OtpButton({ onClick }) {
+    return (_$1("button", { type: "button", style: Styles.OtpButton, onClick: onClick, class: "dxc-otp-btn", "aria-label": "Continue with email" },
+        _$1("span", { style: Styles.ProviderButtonIcon, "aria-hidden": "true", dangerouslySetInnerHTML: { __html: EmailIcon } }),
+        _$1("span", { style: Styles.ProviderButtonText }, "Continue with email")));
+}
+/**
+ * Visual divider with "or" text.
+ */
+function Divider() {
+    return (_$1("div", { style: Styles.Divider },
+        _$1("div", { style: Styles.DividerLine }),
+        _$1("span", { style: Styles.DividerText }, "or"),
+        _$1("div", { style: Styles.DividerLine })));
+}
+
+/**
+ * Dialog component for OAuth provider selection.
+ * Displays available OAuth providers as buttons and optionally an email/OTP option.
+ */
+function ProviderSelectionDialog({ title, alerts, providers, otpEnabled, cancelLabel, onSelectProvider, onSelectOtp, onCancel, }) {
+    return (_$1(Dialog, { className: "dxc-provider-selection-dlg" },
+        _$1(k$1, null,
+            _$1("h3", { style: Styles.WindowHeader }, title),
+            alerts.map((alert, idx) => (_$1("p", { key: idx, style: Styles.Alert[alert.type] }, resolveText(alert)))),
+            _$1("div", { class: "dxc-providers" }, providers.map((provider) => (_$1(AuthProviderButton, { key: provider.name, provider: provider, onClick: () => onSelectProvider(provider.name) })))),
+            otpEnabled && providers.length > 0 && (_$1(k$1, null,
+                _$1(Divider, null),
+                _$1(OtpButton, { onClick: onSelectOtp }))),
+            otpEnabled && providers.length === 0 && (_$1(OtpButton, { onClick: onSelectOtp })),
+            cancelLabel && (_$1("div", { style: Styles.CancelButtonRow },
+                _$1("button", { type: "button", style: Styles.Button, onClick: onCancel }, cancelLabel))))));
+}
+
+class LoginGui extends x {
     constructor(props) {
         super(props);
         this.observer = (userInteraction) => this.setState({ userInteraction });
@@ -5498,8 +6044,12 @@ class LoginGui extends d$1 {
     render(props, { userInteraction }) {
         if (!userInteraction)
             return null;
-        //if (props.db.cloud.userInteraction.observers.length > 1) return null; // Someone else subscribes.
-        return h(LoginDialog, Object.assign({}, userInteraction));
+        // Render appropriate dialog based on interaction type
+        if (userInteraction.type === 'provider-selection') {
+            return _$1(ProviderSelectionDialog, Object.assign({}, userInteraction));
+        }
+        // Default to LoginDialog for other interaction types
+        return _$1(LoginDialog, Object.assign({}, userInteraction));
     }
 }
 function setupDefaultGUI(db) {
@@ -5507,13 +6057,13 @@ function setupDefaultGUI(db) {
     const el = document.createElement('div');
     if (document.body) {
         document.body.appendChild(el);
-        P(h(LoginGui, { db: db.vip }), el);
+        G(_$1(LoginGui, { db: db.vip }), el);
     }
     else {
         addEventListener('DOMContentLoaded', () => {
             if (!closed) {
                 document.body.appendChild(el);
-                P(h(LoginGui, { db: db.vip }), el);
+                G(_$1(LoginGui, { db: db.vip }), el);
             }
         });
     }
@@ -6097,7 +6647,7 @@ function dexieCloud(dexie) {
     const syncComplete = new Subject();
     dexie.cloud = {
         // @ts-ignore
-        version: "4.2.4",
+        version: "4.3.0",
         options: Object.assign({}, DEFAULT_OPTIONS),
         schema: null,
         get currentUserId() {
@@ -6414,7 +6964,7 @@ function dexieCloud(dexie) {
     }
 }
 // @ts-ignore
-dexieCloud.version = "4.2.4";
+dexieCloud.version = "4.3.0";
 Dexie.Cloud = dexieCloud;
 
 // In case the SW lives for a while, let it reuse already opened connections: