Account Linking

client.linkAccount({ provider, redirectUrl })   →  POST /users/me/link-account/start
   → redirect the browser to the provider
   → provider calls back to AGG, which redirects to your redirectUrl?link_confirm_token=…
client.linkAccountConfirm(token)                →  POST /users/me/link-account/confirm
   → the Account row is written to the current user

// User is already signed in with SIWE
console.log(client.isAuthenticated); // true

// Start the link — redirectUrl is REQUIRED and must be an allowed origin for your app
const response = await client.linkAccount({
  provider: "google",
  redirectUrl: "https://yourapp.com/auth/callback",
});

if (response.type === "redirect") {
  window.location.href = response.url; // send the user to Google
}

// On the redirect target page
const token = new URLSearchParams(window.location.search).get("link_confirm_token");
if (token) {
  await client.linkAccountConfirm(token);
  // The Account row is now written to the current user.
  const profile = await client.getCurrentUser();
  console.log(profile.accounts);
  // [
  //   { type: "siwe",  provider: "wallet", providerAccountId: "0xABC..." },
  //   { type: "oauth", provider: "google", providerAccountId: "google-user-id" }
  // ]
}

// Anywhere under <AggAuthProvider>, kicking off the link:
import { useLinkAccount } from "@agg-build/hooks";

const { startLink, isLoading, error } = useLinkAccount();

await startLink({ provider: "google", redirectUrl: window.location.href });
// …provider round-trip… on return, AggAuthProvider auto-confirms.

const response = await client.linkAccount({
  provider: "email",
  email: "user@example.com",
  redirectUrl: "https://yourapp.com/auth/callback",
});
// response = { type: "magic_link", success: true } — no redirect here.

try {
  await client.linkAccountConfirm(token);
} catch (err) {
  if (err.status === 409) {
    // This identity is linked to another account.
  }
}

const profile = await client.getCurrentUser();

if (!profile.username) {
  // Prompt the user for one, then persist it. 3-30 chars; letters, numbers and `_ - .`;
  // must start and end with a letter or number. Rejects with 409 if already taken.
  await client.updateUser({ username: chosenUsername });
}

// The challenge now has something to name — continue with the flow below.

// 1. Start the link — `address` is the wallet that will sign.
const response = await client.linkAccount({
  provider: "siwe", // or "siws" for Solana
  address: walletAddress,
});
// response = { type: "wallet_challenge", message }

// 2. Have the user sign `message` EXACTLY as returned. Do not reconstruct or edit it.
const signature = await signMessage(response.message);

// 3. Confirm with the message + signature.
await client.linkAccountConfirm({
  kind: "wallet_signature",
  message: response.message,
  signature,
});
// → { status: "linked", provider: "wallet" }  (or "solana_wallet")

const profile = await client.getCurrentUser(); // GET /users/me
profile.accounts.forEach((account) => {
  console.log(`${account.provider}: ${account.providerAccountId}`);
});