@oxy.so/services 11.14.0 → 11.16.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/services",
-  "version": "11.14.0",
+  "version": "11.16.0",
   "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -85,7 +85,19 @@
     },
     "./plugins/*": "./plugins/*.js",
     "./expo-module.config.json": "./expo-module.config.json",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./ui/one-video": {
+      "react-native": "./src/ui/one-video.tsx",
+      "import": {
+        "types": "./lib/typescript/module/ui/one-video.d.ts",
+        "default": "./lib/module/ui/one-video.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/ui/one-video.d.ts",
+        "default": "./lib/commonjs/ui/one-video.js"
+      },
+      "default": "./lib/module/ui/one-video.js"
+    }
   },
   "files": [
     "NOTICE",
@@ -139,8 +151,7 @@
     "prepublishOnly": "node ../../scripts/assert-bun-publish.mjs && bun run typescript && bun run test && bun run build"
   },
   "dependencies": {
-    "@expo/config-plugins": "58.0.9",
-    "@oxy.so/contracts": "^4.24.0",
+    "@oxy.so/contracts": "^5.0.0",
     "color": "^5.0.3",
     "@peable.to/sdk": "0.4.1"
   },
@@ -149,7 +160,7 @@
     "@commitlint/config-conventional": "^21.2.0",
     "@expo/app-integrity": "~58.0.2",
     "@expo/vector-icons": "^15.0.3",
-    "@oxy.so/core": "5.1.0",
+    "@oxy.so/core": "6.0.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": "^12.0.1",
     "@react-native/babel-preset": "^0.88.0",
@@ -164,7 +175,7 @@
     "@types/jest": "^30.0.0",
     "@types/node": "^20.19.43",
     "@types/react": "*",
-    "@oxy.so/bloom": "^10.9.0",
+    "@oxy.so/bloom": "^11.1.1",
     "copyfiles": "^2.4.1",
     "expo-clipboard": "~58.0.3",
     "expo-constants": "~58.0.12",
@@ -195,15 +206,16 @@
     "socket.io-client": "^4.8.1",
     "ts-jest": "^29.4.12",
     "typescript": "^5.9.2",
-    "zustand": "^5.0.14"
+    "zustand": "^5.0.14",
+    "expo-video": "~58.0.11"
   },
-  "//@oxy.so/bloom": "RE-RAISE THIS FLOOR ON EVERY BREAKING BLOOM RELEASE, in the same commit as the root package.json catalog entry and the code that requires it. The breaking position is the MAJOR, so `^3.0.1` means `>=3.0.1 <4.0.0`: 3.x minors are admitted on semver's additive promise, and Bloom 4.0.0 is refused until someone raises this deliberately. The CAP is the part that is load-bearing. An earlier revision of this key recorded the opposite trade -- an uncapped `>=` floor, accepted so that intentionally-breaking Bloom 0.x minors would not be blocked -- and that trade is closed by evidence rather than by preference: an unbounded range is exactly what let `bun install` pair this package with Bloom 1.0.0 and emit no warning at all, and 1.0.0 broke it four ways (a deleted provider, a renamed confirm option, a renamed Chip fill, and two REMOVED SUBPATHS that fail at bundle time, before any typecheck runs). A floor is a claim about what was measured; a cap is the claim that nothing beyond it was. RAISED TO 3.0.1 from `^2.1.0`. Bloom 3.0.0 breaks exactly two things -- `PageHeader` defaults to `presentation=\"floating\"` and stops hiding the title under `transparent`, and `Field disabled` now reaches the control that reads the field context -- and THIS PACKAGE IMPORTS NEITHER: it renders no `PageHeader` and no `Field`, and 3.0 removes no subpath (unlike 2.0.0, which is why that floor cost code changes and this one does not). Its six `transparent` occurrences are CSS colour values, not the PageHeader prop. The cap had to move rather than widen to a union, because leaving `^2.1.0` in place is what made `bun install` resolve a SECOND, nested Bloom 2.12.4 under this package for any app on Bloom 3 -- two copies of a library whose 3.0 contracts (`control-surface`, `TopEdgeProvider`, `ScrollOffsetProvider`) are React contexts, so a provider from one copy cannot be read by a consumer from the other. Mention's `oxyRuntimeCompatibility` test is what caught it; nothing in a typecheck can. RAISED AGAIN TO 3.2.0 from `^3.0.1`, for the same class of reason the 2.x note records, only in the other direction: 3.2.0 ADDS the per-glyph icon subpaths (`@oxy.so/bloom/icons/RiAtLine`) that this package's screens now import instead of the `@oxy.so/bloom/icons` barrel, and a missing subpath fails at bundle time, in the consumer's Metro, long after this package has typechecked and shipped. `^3.0.1` would have admitted Bloom 3.0.1 and 3.1.0, neither of which has those subpaths, so the floor is the only thing standing between a consumer and a red build. Nothing else about 3.1.0 or 3.2.0 is required here; the cap stays at the major. RAISED TO ^4.2.0: FollowButton now delegates its visuals to Bloom media-header FollowButton with loading, textStyle and large size; the new shared UI contracts require one Bloom4 context across Services and its consumer. RAISED TO ^4.31.0: the sign-in and account screens type one-time codes into `InputOtp` with `type=\"alphanumeric\"` (the long sign-in code and backup codes), which 4.31.0 adds; older 4.x drops the letters. RAISED TO ^4.35.0: every password field passes `revealable` to `TextFieldInput` (the eye button, 4.35.0); older 4.x drops the prop silently and the password cannot be shown. The provider also mounts `@oxy.so/bloom/locale` (4.32.0+). RAISED TO ^5.1.0 (services 9.0.0, a major because consumers must move to Bloom 5 with it): Bloom 5.0.0 types `Card`'s `style` without radius, border width or `overflow` (geometry goes through `radius`/`border`/`clipContent`) and stops clipping a Card's children by default, so `BenefitList`'s `overflow: 'visible'` became both a type error and unnecessary; it is removed. The cap MOVES rather than widening to a `^4 || ^5` union, for the reason the 3.0.1 note records: a union lets an app resolve a second, nested Bloom copy and split the React contexts. The floor is 5.1.0 because that is the version measured here (every package builds and tests against it); 5.0.0 was not measured. RAISED TO ^6.0.0 (services 10.0.0, a major because consumers must move to Bloom 6 with it, and because this package's own `FollowButton`/`FollowTargetButton` `size` moves with Bloom's vocabulary): Bloom 6.0.0 removes the duplicate spellings its 5.x types still admitted, and this package used four of them. The control `size` narrows to `xs|sm|md|lg`, so every `small`/`medium`/`large` handed to a Bloom control became `sm`/`md`/`lg`, and the Follow buttons' public `size` became `sm|md|lg` because it is passed straight through to Bloom's media-header `FollowButton`. `Switch` is controlled by `checked`/`onCheckedChange`, not `value`/`onValueChange`. `Button` has no `variant`: each call site names `appearance` and `tone` (the pair the 5.x recipe resolved the variant to, so nothing repaints), `LinkButton`'s colour is `linkTone`, and `PeableButton` renders `InverseButton`. `Card` takes `appearance=\"outline\"` for `variant=\"outlined\"`. The deprecated spellings Bloom 6 still accepts (`isInvalid`, Chip `color`/`variant`) are not breaks and are left alone. The cap MOVES rather than widening to a `^5 || ^6` union, for the reason the 3.0.1 note records: a union lets an app resolve a second, nested Bloom copy and split the React contexts. The floor is 6.0.0 because that is the version measured when this raise was made; the workspace catalog has since moved to ^6.2.0, which adds only the `cover-header` subpath this package does not import, so the floor stays. MAINTENANCE 6.2.1: floor >=6.2.1 and cap <6.3.0 deliberately admit only the reviewed patch line with native Back/X completion and SVG paint/resize fixes. Known 6.4.0 lacks these fixes; the exact root catalog pin prevents a caret from selecting it. A broader minor range requires forward-port and consumer acceptance. VERIFIED 7.1.2: the additional >=7.1.2 <7.2.0 line contains the reviewed native fixes. Services build/types and the website real browser provider/theme tests pass with one byte-verified Bloom copy at both the root and Services importer. The root catalog remains pinned to 6.2.1; consumers explicitly choose one supported line. Versions 6.3.x, 6.4.x and 7.1.0/7.1.1 remain excluded. VERIFIED 7.7.0: admit the progressive media-preview release as another explicit line, so consumers selecting it share one Bloom provider/theme/font context with Services. Existing supported lines and the workspace catalog stay unchanged; unreviewed 7.2-7.6 and 7.8+ remain excluded. VERIFIED 7.13.1: admit the accessible bottom-sheet dialog release so consumers selecting this line share Bloom surface, theme and overlay contexts with Services. Stable Services 11.1.1 validates the unchanged 11.1.0 source against 7.13.1 with 1040 tests, types and packed exports; the existing catalog and other supported peer lines stay unchanged. VERIFIED 7.14.0: the additive outlined Stepper release is covered by Services build, types and 1040 tests against the published package on the 11.1 maintenance branch. VERIFIED 7.15.0: additive Button focus, hover and keyboard events; the stable maintenance line passes types and all 1040 tests against the official package, preserving the existing peer lines. VERIFIED 7.16.1: the stable 11.1 maintenance line passes types and all 1040 tests against the official Accordion, rating and Dialog release; packed exports are verified. Preserve every existing peer line. VERIFIED 7.17.0: Services 11.1.5 maintenance types, 1040 tests, fresh build and packed exports pass against the official additive Carousel/Search and dialog-focus release. Preserve the existing catalog and peer lines on main. VERIFIED 7.18/7.19: the 11.1 maintenance line passed types and 1040 tests separately against both official releases; this main line passed types and all 1042 tests against 7.19.0 after building its workspace dependencies. The root catalog remains 6.2.1; apps choose one admitted line. VERIFIED 7.20.0: additive viewport observation, opt-in Meter/RatingBar reveal and Dialog minimum side gutter; Services types and all 1042 tests pass against the release candidate tarball. Existing peer lines and the workspace catalog remain unchanged. VERIFIED 7.21.0: configurable Dialog/BottomSheet backdrop and transition preserve defaults; this main line passes types and all 1042 tests against the byte-verified release candidate. Existing supported peer lines and the workspace catalog remain unchanged. VERIFIED 7.22.0: controlled Collapsible and rich RadioGroup composition preserve Services compatibility; maintenance Services types and all 1040 tests pass against the release candidate, with unchanged 11.1.0 runtime source. Mercaria validates the composed purchase panels in eight browser scenarios and all four client typechecks. VERIFIED 7.27.0: exact ColorScope roles, local mode and portal propagation preserve Services defaults. This main line passes types and all 114 suites / 1042 tests against the official 7.27.0 package with a single Bloom resolution. Stable 11.1.13 maintenance also passes types and all 113 suites / 1040 tests. Preserve the existing main catalog and earlier admitted peer lines. VERIFIED 7.28.0: types and all 114 suites / 1042 tests pass with the official CSS 3.1.0-rc.0 / NativeWind 5.0.0-rc.0 compiler pair. Maintenance also verifies Expo 56.0.23 and RN 0.85.3; no runtime source or framework peer changes are required. VERIFIED 7.29.0: TypeScript and all 114 suites / 1042 tests pass with the paired NativeWind 5.0.0-rc.0 and react-native-css 3.1.0-rc.0. Optional gallery lifecycle callback preserves existing surface behavior; runtime source unchanged. VERIFIED 7.30.0: TypeScript and all 114 suites / 1042 tests pass against the video-overlay release candidate with one Bloom runtime; existing framework catalog and runtime source stay unchanged. VERIFIED 7.31.0: TypeScript and all 114 suites / 1042 tests pass against the official 7.31.0 package with one Bloom runtime. It adds the `video-view` subpath (expo-video's VideoView with `playsInline` on, so web video plays inline on iPhone Safari) and routes MediaSurface through it; this package imports neither, and runtime source and framework catalog stay unchanged. VERIFIED 7.32.0 AND 7.33.0 (11.2.0-oxy-one.4): each official package installed as the one Bloom resolution; types and all 115 suites / 1050 tests pass against both (and against the 6.2.1 catalog). 7.32.0 adds the shared agent-avatar renderer and Clippo; 7.33.0 adds the lean `settings-modal/modal` and `settings-modal/fields` entries. Both are additive (no subpath removed, no peer or dependency changed) and this package imports neither family. The cap moves to <7.34.0 so a 7.33 patch (7.33.1 restores web TextField side padding) needs no services release. The root catalog stays 6.2.1. Same verification and fix as maintenance 11.1.18. VERIFIED 8.0.0 (11.2.0-oxy-one.4): types and all 115 suites / 1050 tests pass with 8.0.0 as the one Bloom resolution. Its only break is that `LinkPreviewCard` leaves the root barrel for `@oxy.so/bloom/link-preview` (its cover now loads through `expo-image`, which the root barrel must not link); this package imports neither. The 8.0 line is admitted beside 7.x, so an app moves to Bloom 8 without a services major. VERIFIED 8.1.1 AND 9.0.0 (11.2.0-oxy-one.5): each installed as the one Bloom resolution (8.1.1 from the registry, 9.0.0 from the packed release candidate); types and all 115 suites / 1050 tests pass against both, and against the 6.2.1 catalog. 8.1.x adds the unified agent-avatar renderer and changes nothing this package imports. 9.0.0 removes the `small` / `medium` / `large` spellings from control sizes (Chip, Badge, Sidebar, Rating and others), renames `AlertDialog` / `Command` `visible` + `onClose` to `open` + `onOpenChange`, replaces the composer's `listening` with `voiceState`, and swaps the glass material for blur and tint; this package used one of those, Chip `size=\"small\"` (three screens), now `sm`, which every admitted line accepts. The 8.1 minor joins the 8.0 line (one 8.x range) and the 9.0 line is admitted beside the earlier ones. The root catalog stays 6.2.1. VERIFIED 10.0.0 (11.2.0-oxy-one.7): installed from the registry as the one Bloom resolution; types and all 115 suites / 1050 tests pass. 10.0.0 makes an avatar one flat `AvatarCharacter` and removes `AvatarConfig` with its constants from `@oxy.so/bloom/agent-avatar`; this package imports nothing from that family, so nothing here changes. The 10.0 line is admitted beside the earlier ones. The root catalog stays 6.2.1.",
-  "//@oxy.so/core": "The core peer is the root catalog's `^4.21.0 || ^5.0.0`. 5.0.0 removes only the retired present-requester assertion calls (oxy ADR 0042), which this package never used, so both majors are admitted rather than moving the cap — an app on either has one core copy shared with this package. Before that it was `^4.21.0` (>=4.21.0 <5.0.0), and contracts is a `workspace:^` dependency (packed as ^<its version>). Both were EXACT pins: core since the Oxy One prerelease (4.5.0-oxy-one.0, which a caret range could not admit) and contracts by `workspace:*`; the reason left with the prerelease, and an exact pin made every core or contracts minor a peer conflict or a second nested copy in each app until services was republished. The FLOOR is the core this package is built and tested against and needs (4.21.0: `assets.listAppAccess` / `revokeAppAccess` for \"Apps with access\"; 4.18.0 before it: `assets.list({ status: 'trash' })`, `FileMetadata.trashedAt`, `AssetLiveStatus`); raise it, in the same commit, to the first core a change here requires. The CAP is the next major: core 4.x and 5.x minors are admitted on semver's additive promise, and core 6.0.0 is refused until it is measured here, because a second core copy splits the one OxyServices instance and session an app shares with this package. 5.0.0 was measured: types and the full suite pass against it.",
+  "//@oxy.so/bloom": "Bloom 11.1.0 adds the shared grouped sections, usage card, subscription plans, frame appearance and overlay navigation APIs used by this SDK. First-party Bloom peers remain open above this tested minimum.",
+  "//@oxy.so/core": "Core 5.5.0 supplies the shared account-screen translations and updated profile/follow contracts required by this release. Keep one Core instance per app; raise this floor with the root catalogue when new runtime APIs are required. Core 6.0.0 removes only `OxyInferenceClient.decide()` and `getGenerationRecordByIdempotencyKey()` (decisions moved to kaana.ai/v1), which this package never used, so the peer admits both majors (`^5.5.0 || ^6.0.0`) rather than moving the cap.",
   "peerDependencies": {
     "@expo/app-integrity": ">=56.0.0 <59.0.0",
     "@expo/vector-icons": "^15.0.3",
-    "@oxy.so/bloom": ">=6.2.1 <6.3.0 || >=7.1.2 <7.2.0 || >=7.7.0 <7.8.0 || >=7.13.1 <7.34.0 || >=8.0.0 <8.2.0 || >=9.0.0 <9.1.0 || >=10.0.0",
-    "@oxy.so/core": "^4.21.0 || ^5.0.0",
+    "@oxy.so/bloom": ">=11.1.0",
+    "@oxy.so/core": "^5.5.0 || ^6.0.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": ">=11.4.1 <13.0.0",
     "@tanstack/query-async-storage-persister": "^5.101",
@@ -235,7 +247,8 @@
     "react-native-reanimated": ">=4.3.0 <5.0.0",
     "react-native-safe-area-context": ">=5.7.0 <6.0.0",
     "react-native-svg": ">=15.15.0 <16.0.0",
-    "zustand": "^5.0.0"
+    "zustand": "^5.0.0",
+    "expo-video": ">=57.0.0 <59.0.0"
   },
   "peerDependenciesMeta": {
     "nativewind": {
@@ -285,6 +298,9 @@
     },
     "expo-clipboard": {
       "optional": true
+    },
+    "expo-video": {
+      "optional": true
     }
   },
   "react-native-builder-bob": {

package/plugins/withOxySharedPermissions.js

@@ -30,7 +30,8 @@
  * `signature` is the whole trust boundary at the manifest level; each provider
  * also checks the calling package and its certificate itself.
  */
-const { withAndroidManifest } = require('@expo/config-plugins');
+// The app's own Expo SDK copy, never one this package ships (Expo's guidance for library plugins).
+const { withAndroidManifest } = require('expo/config-plugins');
 
 const IDENTITY_PERMISSION = 'so.oxy.permission.IDENTITY';
 const DEVICE_SESSION_PERMISSION = 'so.oxy.permission.DEVICE_SESSION';

package/plugins/withSharedDeviceSessionProvider.js

@@ -18,7 +18,8 @@
  * WHICH APPS USE THIS PLUGIN: exactly the apps whose authorities are listed in
  * `HOST_AUTHORITIES` of `OxyDeviceSessionModule.kt` (a test compares them).
  */
-const { withAndroidManifest } = require('@expo/config-plugins');
+// The app's own Expo SDK copy, never one this package ships (Expo's guidance for library plugins).
+const { withAndroidManifest } = require('expo/config-plugins');
 
 const DEVICE_SESSION_PERMISSION = 'so.oxy.permission.DEVICE_SESSION';
 const PROVIDER_CLASS = 'so.oxy.devicesession.OxyDeviceSessionProvider';

package/src/assets/fonts/icons/manifest.json

@@ -5,8 +5,8 @@
     "ionicons": {
       "fontFamily": "OxyServicesIonicons",
       "file": "src/assets/fonts/icons/OxyServicesIonicons.ttf",
-      "bytes": 43160,
-      "sha256": "d96ec296f01cc237bf8e087401879aeef569c82871f40e4447d63bc8a9eaab3e",
+      "bytes": 42552,
+      "sha256": "3e5edc36624f9eca140e1d6160dd3111fabcf79b3e3d2c51ad182e7af3261c73",
       "names": [
         "add",
         "add-circle-outline",
@@ -75,7 +75,6 @@
         "footsteps",
         "gift",
         "gift-outline",
-        "globe-outline",
         "grid",
         "hand-left",
         "hardware-chip-outline",
@@ -102,6 +101,7 @@
         "location-outline",
         "lock-closed",
         "log-out-outline",
+        "mail",
         "musical-notes",
         "navigate",
         "open",
@@ -152,8 +152,8 @@
     "materialCommunityIcons": {
       "fontFamily": "OxyServicesMaterialCommunityIcons",
       "file": "src/assets/fonts/icons/OxyServicesMaterialCommunityIcons.ttf",
-      "bytes": 29292,
-      "sha256": "a3bef5c42424d459860676f20d7f1e9aaea4f7295aba3d5361ca2195d8f1d59c",
+      "bytes": 29112,
+      "sha256": "ed3d93958134c776949a7e9cc27e97dcb4d5010b36f48b68f61689d94bda8864",
       "names": [
         "account",
         "account-circle",
@@ -161,7 +161,6 @@
         "account-eye-outline",
         "account-group",
         "account-multiple",
-        "account-multiple-outline",
         "account-outline",
         "account-plus",
         "account-search",
@@ -250,6 +249,7 @@
         "folder-open-outline",
         "folder-outline",
         "folder-zip-outline",
+        "forward",
         "function",
         "ghost",
         "gift",
@@ -263,6 +263,7 @@
         "image",
         "image-multiple-outline",
         "image-outline",
+        "inbox",
         "information",
         "information-outline",
         "key",
@@ -275,6 +276,7 @@
         "lock-outline",
         "logout",
         "magnify",
+        "mail",
         "map-marker",
         "map-marker-multiple",
         "map-marker-outline",
@@ -286,7 +288,6 @@
         "network",
         "null",
         "numeric",
-        "opacity",
         "open-in-app",
         "openid",
         "palette",
@@ -318,7 +319,6 @@
         "shield-search",
         "signature",
         "solid",
-        "sort",
         "sort-alphabetical-variant",
         "sort-numeric-variant",
         "star",
@@ -353,5 +353,5 @@
     }
   },
   "glyphMapsFile": "src/ui/icons/subsetGlyphMaps.ts",
-  "glyphMapsSha256": "b0a3d21006a83bf10deac1c8e5bb1a4dacac3c0afe9d445ed856f766f49b6c01"
+  "glyphMapsSha256": "181517f80b06fce5f3c35a0a27bd7a66472b9af560923f9719b5c3e942b21081"
 }

package/src/assets/one/README.md

@@ -0,0 +1,8 @@
+# Oxy One artwork
+
+`floral.mp4` is the user-provided `floral_a.mp4`, converted from HEVC 2560×2560
+into H.264/yuv420p at 720×720, without audio, with fast-start metadata. It retains
+the six-second duration. `floral.jpg` is a still from the same video.
+
+`OxyOneVideo` uses the still for reduced motion and while playback initializes.
+Bloom owns the decorative placement and fade; the media never supplies UI colors.

package/src/assets/one/floral.jpg.d.ts

@@ -0,0 +1,2 @@
+declare const source: import('react-native').ImageSourcePropType;
+export default source;

package/src/assets/one/floral.mp4.d.ts

@@ -0,0 +1,2 @@
+declare const source: number;
+export default source;

package/src/index.ts

@@ -28,6 +28,11 @@ import { setPlatformOS, type PlatformOS } from '@oxy.so/core';
 import { Platform } from 'react-native';
 setPlatformOS(Platform.OS as PlatformOS);
 
+import { registerScreens } from './ui/navigation/routes';
+import { screenComponents } from './ui/navigation/screenComponents';
+
+registerScreens(screenComponents);
+
 // ---------------------------------------------------------------------------
 // Provider + auth context
 // ---------------------------------------------------------------------------
@@ -375,7 +380,10 @@ export { LogoText } from './ui/components/logo/LogoText';
 // `useOxy().openAccountDialog`.
 export { default as ProfileButton } from './ui/components/ProfileButton';
 export type { ProfileButtonProps } from './ui/components/ProfileButton';
-export type { AccountDialogMenuItem } from './ui/navigation/accountDialogManager';
+export type {
+  AccountDialogMenuItem,
+  AccountDialogMenuSection,
+} from './ui/navigation/accountDialogManager';
 
 // THE sign-in screens. The account dialog renders them, and so does every page
 // of the auth.oxy.so IdP: one implementation of what a person sees when they

package/src/types/assets.d.ts

@@ -2,3 +2,13 @@ declare module '*.ttf' {
   const asset: number;
   export default asset;
 }
+
+declare module '*.mp4' {
+  const source: number;
+  export default source;
+}
+
+declare module '*.jpg' {
+  const source: import('react-native').ImageSourcePropType;
+  export default source;
+}

package/src/ui/client.ts

@@ -5,8 +5,7 @@
  * re-exports the sign-in panels (`OxySignInPanel`, `OxyLinkCommonsPanel` and
  * its QR code, `OxyConsentScreen`, …) for apps that embed them, and Metro does
  * not tree-shake, so importing ANY symbol from `@oxy.so/services` ships all of
- * them — even though the account dialog that normally shows them is loaded on
- * demand. Nothing exported here reaches those panels; the packaging test
+ * them — even though the account dialog that normally shows them is warmed at provider startup. Nothing exported here reaches those panels; the packaging test
  * `clientEntryIsolation` pins it.
  *
  * @example
@@ -52,7 +51,7 @@ export { useStorage } from './hooks/useStorage';
 export type { UseStorageOptions, UseStorageResult } from './hooks/useStorage';
 
 // Route screens live at `@oxy.so/services/screens` so client imports preserve
-// the route registry's lazy chunk boundaries.
+// the lean startup bundle; the provider warms their shared chunk before navigation.
 
 // Follow rules, for an app drawing its own follow affordance
 export {

package/src/ui/components/AccountInvitationAcceptance.tsx

@@ -4,7 +4,7 @@ import { Text } from '@oxy.so/bloom/typography';
 import { Button } from '@oxy.so/bloom/button';
 import type { AccountInvitationPreview } from '@oxy.so/core';
 import { getNormalizedUserHandle } from '@oxy.so/core';
-import { useOxy } from '../context/OxyContext';
+import { useOxy } from '../context/oxyRuntimeContext';
 
 /** The link never grants access on navigation, preview, sign-in or account switching. */
 export function AccountInvitationAcceptance({ token }: { token: string }) {

package/src/ui/components/BloomLocaleBridge.tsx

@@ -1,6 +1,6 @@
 import type { FC, ReactNode } from 'react';
 import { LocaleProvider, useBloomLocale } from '@oxy.so/bloom/locale';
-import { useOxy } from '../context/OxyContext';
+import { useOxy } from '../context/oxyRuntimeContext';
 
 /**
  * Bloom's own words — a field's "Show password", a dialog's "Close", "Step 2

package/src/ui/components/FollowButton.tsx

@@ -1,7 +1,7 @@
 import type React from 'react';
 import { useEffect, useCallback, useMemo, useState, memo } from 'react';
 import type { ViewStyle, TextStyle, StyleProp } from 'react-native';
-import { useOxy } from '../context/OxyContext';
+import { useOxy } from '../context/oxyRuntimeContext';
 import { toast } from '@oxy.so/bloom/toast';
 import { FollowButton as BloomFollowButton } from '@oxy.so/bloom/media-header';
 import { useFollow, useFollowForButton } from '../hooks/useFollow';

package/src/ui/components/LanguageBridge.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useMemo, useRef } from 'react';
 import { coerceToSupportedLocale } from '@oxy.so/core';
-import { useOxy } from '../context/OxyContext';
+import { useOxy } from '../context/oxyRuntimeContext';
 import type { OxyLanguageConfig } from '../types/navigation';
 
 /**

package/src/ui/components/OxyAccountDialogScreen.tsx

@@ -23,22 +23,13 @@
 import type React from 'react';
 import { useCallback } from 'react';
 import { StyleSheet, View } from 'react-native';
-import { useOxy } from '../context/OxyContext';
+import { useOxy } from '../context/oxyRuntimeContext';
 import { useI18n } from '../hooks/useI18n';
 import { useSurfaceHeader } from '../hooks/useSurfaceHeader';
 import type { BaseScreenProps } from '../types/navigation';
-import LogoText from './logo/LogoText';
 import OxyAuthChooser from './OxyAuthChooser';
 import { useAccountDialogSnapshot } from '../hooks/accountDialogSnapshot';
 
-/**
- * The account MENU's nav bar carries the Oxy wordmark instead of a title — the
- * surface IS the Oxy account, so naming it in prose is redundant. A module-level
- * element: it takes no props, so its identity is stable forever and the header's
- * identity-compared slot never thrashes.
- */
-const NAV_LOGO = <LogoText height={20} />;
-
 /**
  * The unified account dialog BODY — the header + `OxyAuthChooser` chooser.
  *
@@ -75,12 +66,10 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   const backsToHost = !showBack && (canGoBack?.() ?? false);
   // The sign-in and sign-up screens carry their own header — the Oxy mark and
   // the large title auth.oxy.so shows — so the bar holds only the way back.
-  // The account MENU is branded with the wordmark (the hero under it names the
-  // account); the active request is titled, route-agnostically, because Oxy
-  // picks how it travels (issue #691).
+  // The account menu names the account in its first card; only back/close
+  // belong in its bar. Active sign-in requests keep their informative title.
 
   useSurfaceHeader({
-    titleContent: view === 'accounts' ? NAV_LOGO : undefined,
     title: view === 'qr' ? t('accountSwitcher.signInWithOxy') : undefined,
     onBack: showBack ? goBack : backsToHost ? closeAccountDialog : undefined,
   });

package/src/ui/components/OxyAuthChooser.tsx

@@ -41,7 +41,7 @@ import { surfaces } from '@oxy.so/bloom/surfaces';
 import { useTheme } from '@oxy.so/bloom/theme';
 import { getNormalizedUserHandle, type User } from '@oxy.so/core';
 import { useQueryClient } from '@tanstack/react-query';
-import { useOxy } from '../context/OxyContext';
+import { useOxy } from '../context/oxyRuntimeContext';
 import { useDeviceSwitcher } from '../hooks/useDeviceSwitcher';
 import { useI18n } from '../hooks/useI18n';
 import {
@@ -65,12 +65,7 @@ import { EMPTY_ACCOUNT_DIALOG_SNAPSHOT } from '../hooks/accountDialogSnapshot';
 import { OxySignInPanel } from './signIn/OxySignInPanel';
 import { OxySignUpPanel } from './signIn/OxySignUpPanel';
 
-/**
- * "Accounts by Oxy" management app — the canonical home for account settings,
- * data export, and storage management. The account-menu rows deep-link into it
- * (`/data`, `/storage`, or its root) the same way `getCommonsAcquisitionUrl`
- * hands off to Commons; nothing here invents new API endpoints.
- */
+/** Hosted billing and storage-management destinations. */
 const ACCOUNTS_APP_URL = 'https://accounts.oxy.so';
 
 /**
@@ -289,8 +284,8 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   );
 
   const handleManage = useCallback(() => {
-    onComplete?.();
     if (consumerHooks?.onNavigateManage) {
+      onComplete?.();
       consumerHooks.onNavigateManage();
       return;
     }
@@ -378,40 +373,49 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
         ? {
             usedBytes: storageQuery.data.totalUsedBytes,
             limitBytes: storageQuery.data.totalLimitBytes,
+            categories: storageQuery.data.categories,
+            plan: storageQuery.data.plan,
           }
         : null,
     [storageQuery.data],
   );
 
-  // The account-menu rows below the switcher: storage + data + settings + help
-  // deep-link into the "Accounts by Oxy" app or open the matching in-app sheet
-  // (Help, Legal); sign-out uses the SDK's own per-account sign-out. No new
-  // endpoints — the same handoff pattern `handleManage`/`getCommonsAcquisitionUrl`
-  // already use.
+  // Account settings, data and help navigate within the current dialog.
   const accountMenu = useMemo<AccountsMenuActions>(() => {
     const openUrl = openExternal;
     const openSheet = (config: Parameters<NonNullable<typeof showBottomSheet>>[0]) => {
-      onComplete?.();
       showBottomSheet?.(config);
     };
     return {
-      onOpenSettings: () => openUrl(ACCOUNTS_APP_URL),
-      onOpenData: () => openUrl(`${ACCOUNTS_APP_URL}/data`),
+      onOpenPlan: () => openSheet('OxyOne'),
+      onOpenSettings: () => openSheet('Preferences'),
+      onOpenData: () => openSheet({ screen: 'ManageAccount', props: { section: 'data' } }),
       onManageStorage: () => openUrl(`${ACCOUNTS_APP_URL}/storage`),
-      onUpgradeStorage: () => openUrl(`${ACCOUNTS_APP_URL}/payments`),
+      onUpgradeStorage: () => openSheet('OxyOne'),
       onHelp: () => openSheet('HelpSupport'),
       onPrivacy: () => openSheet({ screen: 'LegalDocuments', props: { initialStep: 1 } }),
       onTerms: () => openSheet({ screen: 'LegalDocuments', props: { initialStep: 2 } }),
       onSignOut: () => {
         void handleSignOut();
       },
-      customItems: (consumerHooks?.menuItems ?? []).map((item) => ({
-        ...item,
-        onPress: () => {
-          onComplete?.();
-          item.onPress();
-        },
-      })),
+      sections: [
+        ...(consumerHooks?.menuItems?.length
+          ? [{ key: 'app-items', items: consumerHooks.menuItems }]
+          : []),
+        ...(consumerHooks?.menuSections ?? []),
+      ]
+        .filter((section) => section.items.length > 0)
+        .map((section) => ({
+          ...section,
+          items: section.items.map((item) => ({
+            ...item,
+            onPress: () => {
+              if (item.disabled) return;
+              if (!item.keepOpen) onComplete?.();
+              item.onPress();
+            },
+          })),
+        })),
     };
   }, [consumerHooks, onComplete, showBottomSheet, handleSignOut, openExternal]);
 

package/src/ui/components/OxyConsentScreen.tsx

@@ -1,3 +1,4 @@
+import { Admonition } from '@oxy.so/bloom/admonition';
 /**
  * OxyConsentScreen — the unified OAuth authorize/consent surface for
  * `@oxy.so/services`.
@@ -19,11 +20,11 @@
  * under the `consent.*` keys.
  */
 import { useCallback } from 'react';
-import { Linking, Pressable, ScrollView, StyleSheet, View } from 'react-native';
+import { Linking, ScrollView, StyleSheet, View } from 'react-native';
 import { logger } from '@oxy.so/core';
 import type { McpOAuthWriteAction } from '@oxy.so/contracts';
 import { Avatar } from '@oxy.so/bloom/avatar';
-import { Button } from '@oxy.so/bloom/button';
+import { Button, LinkButton } from '@oxy.so/bloom/button';
 import { Text } from '@oxy.so/bloom/typography';
 import { useTheme } from '@oxy.so/bloom/theme';
 import { useI18n } from '../hooks/useI18n';
@@ -208,9 +209,9 @@ function ConsentLink({
     });
   }, [url]);
   return (
-    <Pressable testID={testID} onPress={handlePress} accessibilityRole="link" style={styles.link}>
-      <Text style={[styles.linkText, { color }]}>{label}</Text>
-    </Pressable>
+    <LinkButton testID={testID} onPress={handlePress} accessibilityRole="link" size="sm">
+      {label}
+    </LinkButton>
   );
 }
 
@@ -464,11 +465,8 @@ export function OxyConsentScreen({
 
       {/* Blocking error */}
       {error ? (
-        <View
-          testID="consent-error"
-          style={[styles.errorCard, { borderColor: theme.colors.error }]}
-        >
-          <Text style={[styles.errorText, { color: theme.colors.error }]}>{error}</Text>
+        <View testID="consent-error">
+          <Admonition type="error">{error}</Admonition>
         </View>
       ) : null}
 
@@ -648,21 +646,6 @@ const styles = StyleSheet.create({
     gap: 16,
     paddingHorizontal: 4,
   },
-  link: {
-    alignSelf: 'flex-start',
-  },
-  linkText: {
-    fontSize: 13,
-    textDecorationLine: 'underline',
-  },
-  errorCard: {
-    borderWidth: StyleSheet.hairlineWidth,
-    borderRadius: 12,
-    padding: 12,
-  },
-  errorText: {
-    fontSize: 14,
-  },
   actions: {
     gap: 12,
   },

package/src/ui/components/OxyOAuthCallback.tsx

@@ -1,4 +1,5 @@
-import { ActivityIndicator, View } from 'react-native';
+import { SpinnerIcon } from '@oxy.so/bloom/loading';
+import { View } from 'react-native';
 import { useEffect } from 'react';
 import { useAuth } from '../hooks/useAuth';
 import { isWebBrowser } from '../utils/isWebBrowser';
@@ -32,7 +33,7 @@ export function OxyOAuthCallback({ redirectTo = '/' }: OxyOAuthCallbackProps) {
 
   return (
     <View style={{ flex: 1, alignItems: 'center', justifyContent: 'center' }}>
-      <ActivityIndicator />
+      <SpinnerIcon />
     </View>
   );
 }