From 7c86c1477fbbad6cba9f4d1a0e3db69b2900bbd5 Mon Sep 17 00:00:00 2001
From: Jon Staab <shtaab@gmail.com>
Date: Fri, 6 Mar 2026 09:23:37 -0800
Subject: [PATCH] Add LogInSelect step for disambiguating pomade sessions

---
 package.json                              |   2 +-
 pnpm-lock.yaml                            | Bin 359886 -> 359886 bytes
 src/app/components/LogInEmail.svelte      |  34 +++++----
 src/app/components/LogInOTPConfirm.svelte |  40 ++++++-----
 src/app/components/LogInSelect.svelte     |  82 ++++++++++++++++++++++
 5 files changed, 126 insertions(+), 32 deletions(-)
 create mode 100644 src/app/components/LogInSelect.svelte

diff --git a/package.json b/package.json
index 6f32adcd..a9c1e20e 100644
--- a/package.json
+++ b/package.json
@@ -57,7 +57,7 @@
     "@getalby/lightning-tools": "^6.1.0",
     "@getalby/sdk": "^5.1.2",
     "@noble/curves": "^1.9.7",
-    "@pomade/core": "^0.2.0",
+    "@pomade/core": "^0.2.1",
     "@poppanator/sveltekit-svg": "^4.2.1",
     "@sveltejs/adapter-static": "^3.0.10",
     "@tiptap/core": "^2.27.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 98946c21c3f00ad2a7f6da6cdd9ab00e7d75c4d8..e836681105281c2fe8c0b7f4e601201603c2af81 100644
GIT binary patch
delta 284
zcmX^2TlCy-(G68>j7Ae5im)2!8R;2rR}5v@z`WUoOOI6{$<iPt#mvwm#Ue4qI4RM>
z+{D1t#L^(u(!kir)G|4B@<Act>2~of?3>r{8{VI;B*>^4RuxeY5Ezi15teH1pPZ2!
z<dSOSo8*xaT9N4-oElo{TVCYhUzzIfRIFd&V(6L{X<%vWTb^a+T&nNylU8L=UXfYm
z<Puz9=<e&ATT$qp<P)BlYaBRTF^W-`8R)#}7xNhvr>}U+DAT<Def#?Nj6lq^ef@jp
v*Ww^)kn5K-PnRoYk=>ri&64j)&=1oYbD8C)^M$eqfb_Qm^#jddU8?~A`LSD3

delta 285
zcmX^2TlCy-(G68>%!Yc#lO1?PK=gLSP?inMn_al{SQX4nEz?XaOw7`ZQ_NCQERs!)
zEYb`U4NX(i%uN!FjLaq<6cV0p7tg}Jc@4ke{pm$UjGAGd=9LCX89v_r8F>}qQNcci
zsXl40;bw(C5yin#X{I^GL58XRA*m*rRYgXo=BZ)jE<vTnu9cz19xh(m0a-y7SzZMt
zUKPHTe%h%OIVBcOPR<4Cj?)#R7==O3n|?8$QE~c;w~R8)>)*Gpf6oZSOxxGLXMQaX
rbNzDW>2jqkvfC56S@Jyz`e8a_F0<TpzEBnckp6a{?|~t}x>f@KXWd%M

diff --git a/src/app/components/LogInEmail.svelte b/src/app/components/LogInEmail.svelte
index 133b2778..0c647a9f 100644
--- a/src/app/components/LogInEmail.svelte
+++ b/src/app/components/LogInEmail.svelte
@@ -1,4 +1,5 @@
 <script lang="ts">
+  import {uniq} from "@welshman/lib"
   import {Client} from "@pomade/core"
   import {loginWithPomade} from "@welshman/app"
   import {preventDefault} from "@lib/html"
@@ -17,6 +18,7 @@
   import ModalSubtitle from "@lib/components/ModalSubtitle.svelte"
   import ModalFooter from "@lib/components/ModalFooter.svelte"
   import LogInOTP from "@app/components/LogInOTP.svelte"
+  import LogInSelect from "@app/components/LogInSelect.svelte"
   import {pushModal, clearModals} from "@app/util/modal"
   import {setChecked} from "@app/util/notifications"
   import {pushToast} from "@app/util/toast"
@@ -38,7 +40,7 @@
     try {
       const {ok, options, messages, clientSecret} = await Client.loginWithPassword(email, password)
 
-      if (!ok) {
+      if (!ok || options.length === 0) {
         console.error(messages)
 
         return pushToast({
@@ -47,21 +49,25 @@
         })
       }
 
-      const [client, peers] = options[0]!
-      const {clientOptions, ...res} = await Client.selectLogin(clientSecret, client, peers)
-
-      if (res.ok && clientOptions) {
-        loginWithPomade(clientOptions.group.group_pk.slice(2), email, clientOptions)
-        deleteOldPomadeSessions()
-        setChecked("*")
-        clearModals()
+      if (uniq(options.map(o => o.pubkey)).length > 1) {
+        pushModal(LogInSelect, {email, options, clientSecret})
       } else {
-        console.error(res.messages)
+        const {client, peers} = options[0]
+        const {clientOptions, ...res} = await Client.selectLogin(clientSecret, client, peers)
 
-        pushToast({
-          theme: "error",
-          message: "Sorry, we were unable to log you in.",
-        })
+        if (res.ok && clientOptions) {
+          loginWithPomade(clientOptions.group.group_pk.slice(2), email, clientOptions)
+          deleteOldPomadeSessions()
+          setChecked("*")
+          clearModals()
+        } else {
+          console.error(res.messages)
+
+          pushToast({
+            theme: "error",
+            message: "Sorry, we were unable to log you in.",
+          })
+        }
       }
     } finally {
       loading = false
diff --git a/src/app/components/LogInOTPConfirm.svelte b/src/app/components/LogInOTPConfirm.svelte
index b6cf823c..e00b68c8 100644
--- a/src/app/components/LogInOTPConfirm.svelte
+++ b/src/app/components/LogInOTPConfirm.svelte
@@ -1,4 +1,5 @@
 <script lang="ts">
+  import {uniq} from "@welshman/lib"
   import {Client} from "@pomade/core"
   import {loginWithPomade} from "@welshman/app"
   import {preventDefault} from "@lib/html"
@@ -13,7 +14,8 @@
   import ModalTitle from "@lib/components/ModalTitle.svelte"
   import ModalSubtitle from "@lib/components/ModalSubtitle.svelte"
   import ModalFooter from "@lib/components/ModalFooter.svelte"
-  import {clearModals} from "@app/util/modal"
+  import LogInSelect from "@app/components/LogInSelect.svelte"
+  import {pushModal, clearModals} from "@app/util/modal"
   import {setChecked} from "@app/util/notifications"
   import {pushToast} from "@app/util/toast"
   import {POMADE_SIGNERS} from "@app/core/state"
@@ -34,10 +36,10 @@
       .map(x => x.trim())
       .filter(x => x.match(/^[0-9]{8}$/))
 
-    if (otps.length < 2) {
+    if (otps.length < 3) {
       return pushToast({
         theme: "error",
-        message: "Failed to recover, not enough valid recovery codes were provided.",
+        message: "Not enough valid recovery codes were provided.",
       })
     }
 
@@ -50,7 +52,7 @@
         otps,
       )
 
-      if (!ok) {
+      if (!ok || options.length === 0) {
         console.error(messages)
 
         return pushToast({
@@ -59,21 +61,25 @@
         })
       }
 
-      const [client, peers] = options[0]!
-      const {clientOptions, ...res} = await Client.selectLogin(clientSecret, client, peers)
-
-      if (res.ok && clientOptions) {
-        loginWithPomade(clientOptions.group.group_pk.slice(2), email, clientOptions)
-        deleteOldPomadeSessions()
-        setChecked("*")
-        clearModals()
+      if (uniq(options.map(o => o.pubkey)).length > 1) {
+        pushModal(LogInSelect, {email, options, clientSecret})
       } else {
-        console.error(res.messages)
+        const {client, peers} = options[0]
+        const {clientOptions, ...res} = await Client.selectLogin(clientSecret, client, peers)
 
-        pushToast({
-          theme: "error",
-          message: "Sorry, we were unable to log you in.",
-        })
+        if (res.ok && clientOptions) {
+          loginWithPomade(clientOptions.group.group_pk.slice(2), email, clientOptions)
+          deleteOldPomadeSessions()
+          setChecked("*")
+          clearModals()
+        } else {
+          console.error(res.messages)
+
+          pushToast({
+            theme: "error",
+            message: "Sorry, we were unable to log you in.",
+          })
+        }
       }
     } finally {
       loading = false
diff --git a/src/app/components/LogInSelect.svelte b/src/app/components/LogInSelect.svelte
new file mode 100644
index 00000000..16b4f3fb
--- /dev/null
+++ b/src/app/components/LogInSelect.svelte
@@ -0,0 +1,82 @@
+<script lang="ts">
+  import type {AccountOption} from "@pomade/core"
+  import {Client} from "@pomade/core"
+  import {loginWithPomade} from "@welshman/app"
+  import Button from "@lib/components/Button.svelte"
+  import Spinner from "@lib/components/Spinner.svelte"
+  import AltArrowLeft from "@assets/icons/alt-arrow-left.svg?dataurl"
+  import Icon from "@lib/components/Icon.svelte"
+  import Modal from "@lib/components/Modal.svelte"
+  import ModalBody from "@lib/components/ModalBody.svelte"
+  import ModalHeader from "@lib/components/ModalHeader.svelte"
+  import ModalTitle from "@lib/components/ModalTitle.svelte"
+  import ModalSubtitle from "@lib/components/ModalSubtitle.svelte"
+  import ModalFooter from "@lib/components/ModalFooter.svelte"
+  import Profile from "@app/components/Profile.svelte"
+  import {clearModals} from "@app/util/modal"
+  import {setChecked} from "@app/util/notifications"
+  import {pushToast} from "@app/util/toast"
+  import {deleteOldPomadeSessions} from "@app/core/commands"
+
+  interface Props {
+    email: string
+    options: AccountOption[]
+    clientSecret: string
+  }
+
+  let {email, options, clientSecret}: Props = $props()
+
+  let loading = $state(false)
+
+  const back = () => history.back()
+
+  const selectAccount = async ({client, peers}: AccountOption) => {
+    loading = true
+
+    try {
+      const {clientOptions, ...res} = await Client.selectLogin(clientSecret, client, peers)
+
+      if (res.ok && clientOptions) {
+        loginWithPomade(clientOptions.group.group_pk.slice(2), clientOptions.email, clientOptions)
+        deleteOldPomadeSessions()
+        setChecked("*")
+        clearModals()
+      } else {
+        console.error(res.messages)
+
+        pushToast({
+          theme: "error",
+          message: "Sorry, we were unable to log you in.",
+        })
+      }
+    } finally {
+      loading = false
+    }
+  }
+</script>
+
+<Modal>
+  <ModalBody>
+    <ModalHeader>
+      <ModalTitle>Select Account</ModalTitle>
+      <ModalSubtitle>Multiple accounts are associated with {email}. Please select one to continue.</ModalSubtitle>
+    </ModalHeader>
+    <div class="flex flex-col gap-2">
+      {#each options as option (option.pubkey)}
+        <Button
+          onclick={() => selectAccount(option)}
+          disabled={loading}
+          class="card2 bg-alt flex w-full items-center p-3 text-left">
+          <Profile pubkey={option.pubkey} />
+        </Button>
+      {/each}
+    </div>
+  </ModalBody>
+  <ModalFooter>
+    <Button class="btn btn-link" onclick={back} disabled={loading}>
+      <Icon icon={AltArrowLeft} />
+      Go back
+    </Button>
+    <Spinner {loading} />
+  </ModalFooter>
+</Modal>