@oxy.so/services 1.0.0

package/lib/typescript/types/expo-document-picker.d.ts

@@ -0,0 +1,36 @@
+declare module 'expo-document-picker' {
+    type DocumentPickerInputType = string | string[];
+
+    export interface DocumentPickerOptions {
+        type?: DocumentPickerInputType;
+        multiple?: boolean;
+        copyToCacheDirectory?: boolean;
+    }
+
+    export interface DocumentPickerAsset {
+        name?: string | null;
+        size?: number | null;
+        mimeType?: string | null;
+        uri?: string;
+        file?: File | Blob;
+        lastModified?: number | null;
+    }
+
+    export interface DocumentPickerSuccessResult {
+        canceled: false;
+        assets: DocumentPickerAsset[];
+        type?: 'success';
+    }
+
+    export interface DocumentPickerCanceledResult {
+        canceled: true;
+        assets: [];
+        type?: 'cancel';
+    }
+
+    export type DocumentPickerResult = DocumentPickerSuccessResult | DocumentPickerCanceledResult;
+
+    export function getDocumentAsync(options?: DocumentPickerOptions): Promise<DocumentPickerResult>;
+    export function isAvailableAsync(): Promise<boolean>;
+}
+

package/lib/typescript/types/expo-haptics.d.ts

@@ -0,0 +1,42 @@
+declare module 'expo-haptics' {
+  export enum ImpactFeedbackStyle {
+    Light = 'light',
+    Medium = 'medium',
+    Heavy = 'heavy',
+    Rigid = 'rigid',
+    Soft = 'soft',
+  }
+
+  export enum NotificationFeedbackType {
+    Success = 'success',
+    Warning = 'warning',
+    Error = 'error',
+  }
+
+  export enum AndroidHaptics {
+    Confirm = 'confirm',
+    Reject = 'reject',
+    Toggle_On = 'toggle_on',
+    Toggle_Off = 'toggle_off',
+    Selection = 'selection',
+    Context_Click = 'context_click',
+    Keyboard_Tap = 'keyboard_tap',
+    Keyboard_Press = 'keyboard_press',
+    Keyboard_Release = 'keyboard_release',
+    Virtual_Key = 'virtual_key',
+    Virtual_Key_Release = 'virtual_key_release',
+    Long_Press = 'long_press',
+    Gesture_Start = 'gesture_start',
+    Gesture_End = 'gesture_end',
+    Clock_Tick = 'clock_tick',
+    Segment_Tick = 'segment_tick',
+    Segment_Frequent_Tick = 'segment_frequent_tick',
+    Text_Handle_Move = 'text_handle_move',
+    Drag_Start = 'drag_start',
+  }
+
+  export function impactAsync(style?: ImpactFeedbackStyle): Promise<void>;
+  export function notificationAsync(type?: NotificationFeedbackType): Promise<void>;
+  export function selectionAsync(): Promise<void>;
+  export function performAndroidHapticsAsync(type: AndroidHaptics): Promise<void>;
+}

package/lib/typescript/types/expo-image-picker.d.ts

@@ -0,0 +1,35 @@
+declare module 'expo-image-picker' {
+    export interface ImagePickerAsset {
+        uri: string;
+        width: number;
+        height: number;
+    }
+
+    export interface ImagePickerSuccessResult {
+        canceled: false;
+        assets: ImagePickerAsset[];
+    }
+
+    export interface ImagePickerCanceledResult {
+        canceled: true;
+        assets: null;
+    }
+
+    export type ImagePickerResult = ImagePickerSuccessResult | ImagePickerCanceledResult;
+
+    export interface ImagePickerPermission {
+        granted: boolean;
+        canAskAgain: boolean;
+    }
+
+    export interface ImagePickerOptions {
+        mediaTypes?: 'images'[];
+        allowsMultipleSelection?: boolean;
+        quality?: number;
+    }
+
+    export function launchImageLibraryAsync(options?: ImagePickerOptions): Promise<ImagePickerResult>;
+    export function launchCameraAsync(options?: ImagePickerOptions): Promise<ImagePickerResult>;
+    export function requestMediaLibraryPermissionsAsync(): Promise<ImagePickerPermission>;
+    export function requestCameraPermissionsAsync(): Promise<ImagePickerPermission>;
+}

package/lib/typescript/types/expo-secure-store.d.ts

@@ -0,0 +1,22 @@
+declare module 'expo-secure-store' {
+  export interface SecureStoreOptions {
+    keychainAccessible?: 'WHEN_UNLOCKED' | 'AFTER_FIRST_UNLOCK' | 'WHEN_UNLOCKED_THIS_DEVICE_ONLY' | 'AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY' | 'WHEN_PASSCODE_SET_THIS_DEVICE_ONLY';
+    requireAuthentication?: boolean;
+    authenticationPrompt?: string;
+    showModal?: boolean;
+    keychainService?: string;
+  }
+
+  export const WHEN_UNLOCKED: 'WHEN_UNLOCKED';
+  export const AFTER_FIRST_UNLOCK: 'AFTER_FIRST_UNLOCK';
+  export const WHEN_UNLOCKED_THIS_DEVICE_ONLY: 'WHEN_UNLOCKED_THIS_DEVICE_ONLY';
+  export const AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY: 'AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY';
+  export const WHEN_PASSCODE_SET_THIS_DEVICE_ONLY: 'WHEN_PASSCODE_SET_THIS_DEVICE_ONLY';
+
+  export function setItemAsync(key: string, value: string, options?: SecureStoreOptions): Promise<void>;
+  export function getItemAsync(key: string, options?: SecureStoreOptions): Promise<string | null>;
+  export function deleteItemAsync(key: string, options?: SecureStoreOptions): Promise<void>;
+  export function isAvailableAsync(): Promise<boolean>;
+}
+
+

package/lib/typescript/types/express.d.ts

@@ -0,0 +1,24 @@
+declare module 'express' {
+  export function Router(): {
+    get: (path: string, ...handlers: Array<(req: Request, res: Response, next: () => void) => void>) => void;
+    post: (path: string, ...handlers: Array<(req: Request, res: Response, next: () => void) => void>) => void;
+    put: (path: string, ...handlers: Array<(req: Request, res: Response, next: () => void) => void>) => void;
+    delete: (path: string, ...handlers: Array<(req: Request, res: Response, next: () => void) => void>) => void;
+    use: (path: string | (() => void), ...handlers: Array<(req: Request, res: Response, next: () => void) => void>) => void;
+  };
+  export interface Request { 
+    body?: Record<string, unknown>;
+    params: Record<string, string>;
+    query: Record<string, string | string[]>;
+    headers: Record<string, string>;
+    user?: Record<string, unknown>;
+    [key: string]: unknown;
+  }
+  export interface Response { 
+    status: (code: number) => Response;
+    json: (data: unknown) => Response;
+    send: (data: unknown) => Response;
+    redirect: (url: string) => Response;
+    [key: string]: unknown;
+  }
+}

package/lib/typescript/types/react-native-classname.d.ts

@@ -0,0 +1,39 @@
+// Robust NativeWind className typings for React Native's `ScrollView` & `FlatList`.
+//
+// NativeWind 5's engine (`react-native-css`) augments `ScrollViewProps` and
+// `FlatListProps` with className props, but its declarations carry heritage
+// clauses (`interface ScrollViewProps extends ViewProps, ScrollViewPropsIOS, …`)
+// and route `FlatList`'s `contentContainerClassName` through a deep
+// `@react-native/virtualized-lists` → `ScrollViewProps` augmentation. Under
+// React Native 0.85 that heritage no longer matches, and the nested
+// `@react-native/virtualized-lists` copy does not resolve from a CONSUMER's
+// `node_modules` — so when this package's source is type-checked through the
+// `react-native` export condition (which resolves `@oxy.so/services` to raw
+// `src/`), those className members silently drop and consumer `tsc` fails with
+// TS2769 on screens that use `contentContainerClassName` (e.g.
+// ManageAccountScreen, ConnectedAppsScreen).
+//
+// These heritage-free augmentations add the className props directly to the two
+// interfaces, so resolution never depends on the deep virtualized-lists copy or
+// on react-native-css's heritage clauses. The plain `import 'react-native'`
+// makes this a module so the `declare module` is treated as an augmentation
+// (merge) rather than a redeclaration. Consumers load it via the
+// `/// <reference path>` directives in `src/index.ts` and `src/ui/index.ts`.
+
+import 'react-native';
+
+declare module 'react-native' {
+  interface ScrollViewProps {
+    className?: string;
+    contentContainerClassName?: string;
+    indicatorClassName?: string;
+  }
+
+  interface FlatListProps<ItemT> {
+    className?: string;
+    contentContainerClassName?: string;
+    columnWrapperClassName?: string;
+    ListHeaderComponentClassName?: string;
+    ListFooterComponentClassName?: string;
+  }
+}

package/lib/typescript/types/react-native-web-style.d.ts

@@ -0,0 +1,27 @@
+// Web-only CSS transition/transform typings for React Native's `ViewStyle`.
+//
+// On web, React Native for Web forwards these CSS properties straight through to
+// the underlying DOM element, so an inline `style={{ transitionProperty: … }}`
+// works at runtime — but RN's `ViewStyle` type (which targets native) does not
+// declare them, so `tsc` rejects the object literal (TS2322 "Object literal may
+// only specify known properties"). Components that reproduce web animations with
+// inline transition styles (e.g. `ProfileButton`'s Bluesky-style hover reveal)
+// need these keys typed without resorting to `as any`.
+//
+// This augmentation adds ONLY the standard CSS animation/transition properties
+// as optional `string`s. It is guarded at the call site behind `Platform.OS ===
+// 'web'`, so native code paths never emit them. The plain `import 'react-native'`
+// makes this a module augmentation (merge) rather than a redeclaration. Consumers
+// load it via the `/// <reference path>` directives in `src/index.ts` and
+// `src/ui/index.ts`, alongside `react-native-classname.d.ts`.
+
+import 'react-native';
+
+declare module 'react-native' {
+  interface ViewStyle {
+    transitionProperty?: string;
+    transitionDuration?: string;
+    transitionDelay?: string;
+    transitionTimingFunction?: string;
+  }
+}

package/package.json

@@ -0,0 +1,320 @@
+{
+  "name": "@oxy.so/services",
+  "version": "1.0.0",
+  "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
+  "main": "lib/commonjs/index.js",
+  "module": "lib/module/index.js",
+  "types": "lib/typescript/commonjs/index.d.ts",
+  "react-native": "src/index.ts",
+  "source": "src/index.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "react-native": "./src/index.ts",
+      "import": {
+        "types": "./lib/typescript/module/index.d.ts",
+        "default": "./lib/module/index.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/index.d.ts",
+        "default": "./lib/commonjs/index.js"
+      },
+      "default": "./lib/module/index.js"
+    },
+    "./ui": {
+      "react-native": "./src/ui/index.ts",
+      "import": {
+        "types": "./lib/typescript/module/ui/index.d.ts",
+        "default": "./lib/module/ui/index.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/ui/index.d.ts",
+        "default": "./lib/commonjs/ui/index.js"
+      },
+      "default": "./lib/module/ui/index.js"
+    },
+    "./ui/client": {
+      "react-native": "./src/ui/client.ts",
+      "import": {
+        "types": "./lib/typescript/module/ui/client.d.ts",
+        "default": "./lib/module/ui/client.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/ui/client.d.ts",
+        "default": "./lib/commonjs/ui/client.js"
+      },
+      "default": "./lib/module/ui/client.js"
+    },
+    "./ui/server": {
+      "react-native": "./src/ui/server.ts",
+      "import": {
+        "types": "./lib/typescript/module/ui/server.d.ts",
+        "default": "./lib/module/ui/server.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/ui/server.d.ts",
+        "default": "./lib/commonjs/ui/server.js"
+      },
+      "default": "./lib/module/ui/server.js"
+    },
+    "./screens": {
+      "react-native": "./src/ui/screens/index.ts",
+      "import": {
+        "types": "./lib/typescript/module/ui/screens/index.d.ts",
+        "default": "./lib/module/ui/screens/index.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/ui/screens/index.d.ts",
+        "default": "./lib/commonjs/ui/screens/index.js"
+      },
+      "default": "./lib/module/ui/screens/index.js"
+    },
+    "./notifications": {
+      "react-native": "./src/notifications/deviceNotifications.ts",
+      "import": {
+        "types": "./lib/typescript/module/notifications/deviceNotifications.d.ts",
+        "default": "./lib/module/notifications/deviceNotifications.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/notifications/deviceNotifications.d.ts",
+        "default": "./lib/commonjs/notifications/deviceNotifications.js"
+      },
+      "default": "./lib/module/notifications/deviceNotifications.js"
+    },
+    "./plugins/*": "./plugins/*.js",
+    "./expo-module.config.json": "./expo-module.config.json",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "NOTICE",
+    "src",
+    "lib",
+    "assets",
+    "android/build.gradle",
+    "android/src",
+    "ios/OxyIdentityModule.swift",
+    "ios/OxyIdentity.podspec",
+    "plugins",
+    "expo-module.config.json"
+  ],
+  "keywords": [
+    "react-native",
+    "expo",
+    "ios",
+    "android",
+    "oxyhq",
+    "sdk",
+    "authentication",
+    "ui-components"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/oxyhq/sdk",
+    "directory": "packages/services"
+  },
+  "author": "OxyHQ",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "homepage": "https://oxy.so",
+  "scripts": {
+    "typescript": "tsc --skipLibCheck --noEmit",
+    "lint": "biome lint --error-on-warnings ./src",
+    "build": "bun run check:icon-fonts && bun x react-native-builder-bob build --target commonjs && bun x react-native-builder-bob build --target module && bun x react-native-builder-bob build --target typescript && bun run copy-assets && bun run copy-dts && bun run delete-dts.js && bun run delete-debug-view",
+    "postbuild": "node scripts/verify-package.mjs",
+    "verify:package": "node scripts/verify-package.mjs",
+    "generate:icon-fonts": "node scripts/generate-icon-font-subsets.mjs",
+    "check:icon-fonts": "node scripts/check-icon-font-subsets.mjs",
+    "build:js": "bun x react-native-builder-bob build --target commonjs && bun x react-native-builder-bob build --target module && bun run copy-assets",
+    "test": "jest --passWithNoTests",
+    "test:watch": "jest --watch",
+    "test:coverage": "jest --coverage",
+    "copy-assets": "copyfiles -u 1 \"src/assets/**/*\" lib/commonjs/assets && copyfiles -u 1 \"src/assets/**/*\" lib/module/assets",
+    "copy-dts": "copyfiles -u 1 \"src/**/*.d.ts\" lib/typescript",
+    "delete-debug-view": "rm -rf ./lib/commonjs/components/bottomSheetDebugView ./lib/module/components/bottomSheetDebugView ./lib/typescript/components/bottomSheetDebugView || true",
+    "delete-dts.js": "find ./lib/commonjs -name '*.d.js*' -delete && find ./lib/module -name '*.d.js*' -delete",
+    "release": "rm -rf lib && bun run build && release-it",
+    "prepublishOnly": "node ../../scripts/assert-bun-publish.mjs && bun run typescript && bun run test && bun run build"
+  },
+  "release-it": {
+    "git": {
+      "tagName": "@oxy.so/services@${version}",
+      "tagAnnotation": "Release @oxy.so/services@${version}",
+      "commitMessage": "chore(services): release @oxy.so/services@${version}"
+    },
+    "github": {
+      "release": true,
+      "releaseName": "@oxy.so/services@${version}"
+    },
+    "npm": {
+      "publish": true
+    }
+  },
+  "dependencies": {
+    "@oxy.so/contracts": "1.0.1",
+    "@simplewebauthn/browser": "^13.3.0",
+    "color": "^4.2.3"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^1.9.4",
+    "@commitlint/cli": "^21.2.1",
+    "@commitlint/config-conventional": "^21.2.0",
+    "@expo/vector-icons": "^15.0.3",
+    "@oxy.so/core": "1.0.0",
+    "@react-native-async-storage/async-storage": "^2.0.0",
+    "@react-native-community/netinfo": "^12.0.1",
+    "@react-native/babel-preset": "^0.86.2",
+    "@release-it/conventional-changelog": "^10.0.6",
+    "@tanstack/query-async-storage-persister": "^5.101",
+    "@tanstack/query-sync-storage-persister": "^5.101",
+    "@tanstack/react-query": "^5.101",
+    "@tanstack/react-query-persist-client": "^5.101",
+    "@testing-library/jest-dom": "^6.4.2",
+    "@testing-library/react": "^16.3.2",
+    "@types/color": "^4.2.1",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^20.19.43",
+    "@types/react": "*",
+    "@oxy.so/bloom": "^1.0.0",
+    "copyfiles": "^2.4.1",
+    "expo-constants": "~57.0.5",
+    "expo-file-system": "~57.0.1",
+    "expo-haptics": "~57.0.1",
+    "expo-image": "~57.0.1",
+    "expo-image-manipulator": "~57.0.4",
+    "expo-linear-gradient": "~57.0.1",
+    "expo-notifications": "~57.0.5",
+    "expo-modules-core": "~57.0.17",
+    "expo-secure-store": "~57.0.1",
+    "expo-web-browser": "~57.0.1",
+    "husky": "^4.3.8",
+    "jest": "^30.5.1",
+    "lint-staged": "^15.2.4",
+    "nativewind": "5.0.0-preview.3",
+    "react": "19.2.3",
+    "react-dom": "19.2.3",
+    "react-native": "0.86.0",
+    "react-native-builder-bob": "^0.43.0",
+    "react-native-css": "^3.0.6",
+    "react-native-gesture-handler": "~2.32.0",
+    "react-native-keyboard-controller": "1.21.13",
+    "react-native-qrcode-svg": "^6.3.0",
+    "react-native-reanimated": "4.5.0",
+    "react-native-safe-area-context": "~5.8.0",
+    "react-native-svg": "15.15.5",
+    "release-it": "^19.0.6",
+    "socket.io-client": "^4.8.1",
+    "ts-jest": "^29.4.12",
+    "typescript": "^5.9.2",
+    "zustand": "^5.0.14"
+  },
+  "//@oxy.so/bloom": "RE-RAISE THIS FLOOR ON EVERY BREAKING BLOOM RELEASE, in the same commit as the root package.json catalog entry and the code that requires it. Bloom is now at or above 1.0.0, so the breaking position is the MAJOR and `^1.0.0` means `>=1.0.0 <2.0.0`: 1.x minors are admitted on semver's additive promise, and Bloom 2.0.0 is refused until someone raises this deliberately. The CAP is the part that is load-bearing. An earlier revision of this key recorded the opposite trade -- an uncapped `>=` floor, accepted so that intentionally-breaking Bloom 0.x minors would not be blocked -- and that trade is now closed by evidence rather than by preference: an unbounded range is exactly what let `bun install` pair this package with Bloom 1.0.0 and emit no warning at all, and 1.0.0 broke it four ways (a deleted provider, a renamed confirm option, a renamed Chip fill, and two REMOVED SUBPATHS that fail at bundle time, before any typecheck runs). A floor is a claim about what was measured; a cap is the claim that nothing beyond it was.",
+  "peerDependencies": {
+    "@expo/vector-icons": "^15.0.3",
+    "@oxy.so/bloom": "^1.0.0",
+    "@oxy.so/core": "1.0.0",
+    "@react-native-async-storage/async-storage": "^2.0.0",
+    "@react-native-community/netinfo": ">=11.4.1",
+    "@tanstack/query-async-storage-persister": "^5.101",
+    "@tanstack/query-sync-storage-persister": "^5.101",
+    "@tanstack/react-query": "^5.101",
+    "@tanstack/react-query-persist-client": "^5.101",
+    "@types/react": "*",
+    "@types/react-native": "*",
+    "expo": ">=56.0.0",
+    "expo-constants": ">=56.0.0",
+    "expo-document-picker": ">=56.0.0",
+    "expo-file-system": ">=56.0.0",
+    "expo-haptics": ">=56.0.0",
+    "expo-image": ">=2.0.0",
+    "expo-image-manipulator": ">=56.0.0",
+    "expo-image-picker": ">=56.0.0",
+    "expo-linear-gradient": ">=56.0.0",
+    "expo-modules-core": "*",
+    "expo-notifications": ">=56.0.0",
+    "expo-web-browser": ">=56.0.0",
+    "nativewind": ">=5.0.0",
+    "react-native-css": "^3.0.6",
+    "react": ">=18.0.0",
+    "react-native": ">=0.85.0",
+    "react-native-gesture-handler": ">=2.31.1",
+    "react-native-keyboard-controller": ">=1.21.0",
+    "react-native-qrcode-svg": "^6.3.0",
+    "react-native-reanimated": ">=4.3.0",
+    "react-native-safe-area-context": ">=5.7.0",
+    "react-native-svg": ">=15.15.0",
+    "zustand": "^5.0.0"
+  },
+  "peerDependenciesMeta": {
+    "nativewind": {
+      "optional": true
+    },
+    "react-native-css": {
+      "optional": true
+    },
+    "expo-modules-core": {
+      "optional": true
+    },
+    "@types/react-native": {
+      "optional": true
+    },
+    "@types/react": {
+      "optional": true
+    },
+    "react-native-keyboard-controller": {
+      "optional": true
+    },
+    "expo": {
+      "optional": true
+    },
+    "expo-haptics": {
+      "optional": true
+    },
+    "expo-linear-gradient": {
+      "optional": true
+    },
+    "expo-document-picker": {
+      "optional": true
+    },
+    "expo-image-manipulator": {
+      "optional": true
+    },
+    "expo-constants": {
+      "optional": true
+    },
+    "expo-notifications": {
+      "optional": true
+    },
+    "@tanstack/query-sync-storage-persister": {
+      "optional": true
+    },
+    "expo-image-picker": {
+      "optional": true
+    },
+    "expo-web-browser": {
+      "optional": true
+    }
+  },
+  "react-native-builder-bob": {
+    "source": "src",
+    "output": "lib",
+    "targets": [
+      [
+        "commonjs",
+        {
+          "esm": true
+        }
+      ],
+      [
+        "module",
+        {
+          "esm": true
+        }
+      ],
+      "typescript"
+    ]
+  }
+}

package/plugins/withSharedDeviceSessionProvider.js

@@ -0,0 +1,102 @@
+/**
+ * Config plugin: withSharedDeviceSessionProvider (UID-member hub apps).
+ *
+ * The shared DeviceSession credential is how several official Oxy apps end up on
+ * ONE `DeviceSession` — and therefore one globally active account context —
+ * WITHOUT any of them reading Commons's private identity key. This plugin wires
+ * the Android side of `@oxy.so/services`:
+ *
+ *  - Defines a `signature`-level permission
+ *    `so.oxy.shared.permission.READ_DEVICE_SESSION`. `signature` means only apps
+ *    signed with the SAME certificate (the shared Oxy release keystore) can hold
+ *    it — the trust boundary is the signing key, not the deprecated `sharedUserId`.
+ *  - Requests that same permission so this app can also read cross-authority.
+ *  - Declares `OxyDeviceSessionProvider` at authority
+ *    `${applicationId}.devicesession` (AGP substitutes `${applicationId}` at
+ *    build), guarded by that permission. The provider is READ-only across the
+ *    process boundary: a sibling may join the device session, never overwrite it.
+ *  - Adds `<queries>` entries so Android 11+ package-visibility filtering never
+ *    hides the sibling providers from the resolver.
+ *
+ * WHICH APPS USE THIS PLUGIN: exactly the apps listed in `PROVIDER_AUTHORITIES`
+ * below, which must be apps inside the `so.oxy.shared` UID. UID members share one
+ * data directory, so they all serve the SAME file and the sweep in
+ * `OxyDeviceSessionModule` is deterministic whichever one answers. An app that is
+ * same-signature but outside that UID must use `withSharedDeviceSessionReader`
+ * instead — hosting from there would publish a second, independent copy of "the
+ * shared credential" and make the winner depend on list order.
+ *
+ * Keep this list identical to `PROVIDER_AUTHORITIES` in
+ * `android/src/main/java/so/oxy/devicesession/OxyDeviceSessionModule.kt`.
+ *
+ * This is deliberately a SEPARATE permission and a SEPARATE provider from
+ * `withSharedIdentityProvider`. Two secrets with different blast radii: the
+ * identity key is self-custody and irreplaceable, the device credential is
+ * server-revocable and re-publishable. An app that only needs a session gets only
+ * the second one.
+ */
+const { withAndroidManifest } = require('@expo/config-plugins');
+
+const READ_DEVICE_SESSION_PERMISSION = 'so.oxy.shared.permission.READ_DEVICE_SESSION';
+const PROVIDER_CLASS = 'so.oxy.devicesession.OxyDeviceSessionProvider';
+const PROVIDER_AUTHORITIES = [
+  'so.oxy.accounts.devicesession',
+  'so.oxy.accounts.dev.devicesession',
+  'so.oxy.commons.devicesession',
+  'so.oxy.commons.dev.devicesession',
+];
+
+module.exports = function withSharedDeviceSessionProvider(config) {
+  return withAndroidManifest(config, (modConfig) => {
+    const manifest = modConfig.modResults.manifest;
+
+    // 1. Define the signature-level permission.
+    manifest['permission'] = manifest['permission'] ?? [];
+    if (!manifest['permission'].some((p) => p.$['android:name'] === READ_DEVICE_SESSION_PERMISSION)) {
+      manifest['permission'].push({
+        $: {
+          'android:name': READ_DEVICE_SESSION_PERMISSION,
+          'android:protectionLevel': 'signature',
+        },
+      });
+    }
+
+    // 2. Request it (a hub app reads its siblings too — prod ⇆ dev variant).
+    manifest['uses-permission'] = manifest['uses-permission'] ?? [];
+    if (!manifest['uses-permission'].some((p) => p.$['android:name'] === READ_DEVICE_SESSION_PERMISSION)) {
+      manifest['uses-permission'].push({ $: { 'android:name': READ_DEVICE_SESSION_PERMISSION } });
+    }
+
+    // 3. Make the sibling provider authorities visible under package filtering.
+    manifest['queries'] = manifest['queries'] ?? [];
+    if (manifest['queries'].length === 0) {
+      manifest['queries'].push({});
+    }
+    const queries = manifest['queries'][0];
+    queries.provider = queries.provider ?? [];
+    for (const authority of PROVIDER_AUTHORITIES) {
+      if (!queries.provider.some((p) => p.$['android:authorities'] === authority)) {
+        queries.provider.push({ $: { 'android:authorities': authority } });
+      }
+    }
+
+    // 4. Host the provider.
+    const app = manifest.application?.[0];
+    if (!app) {
+      throw new Error('withSharedDeviceSessionProvider: AndroidManifest has no <application>');
+    }
+    app.provider = app.provider ?? [];
+    if (!app.provider.some((p) => p.$['android:name'] === PROVIDER_CLASS)) {
+      app.provider.push({
+        $: {
+          'android:name': PROVIDER_CLASS,
+          'android:authorities': '${applicationId}.devicesession',
+          'android:exported': 'true',
+          'android:permission': READ_DEVICE_SESSION_PERMISSION,
+        },
+      });
+    }
+
+    return modConfig;
+  });
+};