@oxy.so/services 11.2.0-oxy-one.2 → 11.2.0-oxy-one.4

package/src/ui/screens/trust/TrustRulesScreen.tsx

@@ -17,98 +17,97 @@ import { queryKeys } from '../../hooks/queries/queryKeys';
 
 /** Stable display order for rule category sections. */
 const CATEGORY_ORDER: ReputationCategory[] = [
-    'content',
-    'social',
-    'trust',
-    'moderation',
-    'physical',
-    'penalty',
-    'other',
+  'content',
+  'social',
+  'trust',
+  'moderation',
+  'physical',
+  'penalty',
+  'other',
 ];
 
 const TrustRulesScreen: React.FC<BaseScreenProps> = () => {
-    const { oxyServices } = useOxy();
-    const { t, locale } = useI18n();
+  const { oxyServices } = useOxy();
+  const { t, locale } = useI18n();
 
-    useSurfaceHeader({
-        title: t('trust.rules.title') || 'Trust Rules',
-        subtitle: t('trust.rules.subtitle') || 'How to earn reputation',
-    });
-    const bloomTheme = useTheme();
+  useSurfaceHeader({
+    title: t('trust.rules.title') || 'Trust Rules',
+    subtitle: t('trust.rules.subtitle') || 'How to earn reputation',
+  });
+  const bloomTheme = useTheme();
 
-    const rulesQuery = useQuery({
-        queryKey: queryKeys.reputation.rules(),
-        queryFn: () => oxyServices.reputation.rules(),
-        staleTime: 10 * 60 * 1000,
-    });
-    const rules: ReputationRule[] = Array.isArray(rulesQuery.data) ? rulesQuery.data : [];
-    const isLoading = rulesQuery.isPending;
-    const error = rulesQuery.error
-        ? (rulesQuery.error instanceof Error ? rulesQuery.error.message : null) || 'Failed to load rules'
-        : null;
+  const rulesQuery = useQuery({
+    queryKey: queryKeys.reputation.rules(),
+    queryFn: () => oxyServices.reputation.rules(),
+    staleTime: 10 * 60 * 1000,
+  });
+  const rules: ReputationRule[] = Array.isArray(rulesQuery.data) ? rulesQuery.data : [];
+  const isLoading = rulesQuery.isPending;
+  const error = rulesQuery.error
+    ? (rulesQuery.error instanceof Error ? rulesQuery.error.message : null) ||
+      'Failed to load rules'
+    : null;
 
-    // Group rules by category, preserving a stable section order. Categories
-    // with no rules are dropped; unknown categories fall back to "other".
-    const groupedRules = useMemo(() => {
-        const buckets = new Map<ReputationCategory, ReputationRule[]>();
-        for (const rule of rules) {
-            const category: ReputationCategory = CATEGORY_ORDER.includes(rule.category)
-                ? rule.category
-                : 'other';
-            const bucket = buckets.get(category);
-            if (bucket) {
-                bucket.push(rule);
-            } else {
-                buckets.set(category, [rule]);
-            }
-        }
-        return CATEGORY_ORDER
-            .filter((category) => buckets.has(category))
-            .map((category) => ({ category, items: buckets.get(category) ?? [] }));
-    }, [rules]);
+  // Group rules by category, preserving a stable section order. Categories
+  // with no rules are dropped; unknown categories fall back to "other".
+  const groupedRules = useMemo(() => {
+    const buckets = new Map<ReputationCategory, ReputationRule[]>();
+    for (const rule of rules) {
+      const category: ReputationCategory = CATEGORY_ORDER.includes(rule.category)
+        ? rule.category
+        : 'other';
+      const bucket = buckets.get(category);
+      if (bucket) {
+        bucket.push(rule);
+      } else {
+        buckets.set(category, [rule]);
+      }
+    }
+    return CATEGORY_ORDER.filter((category) => buckets.has(category)).map((category) => ({
+      category,
+      items: buckets.get(category) ?? [],
+    }));
+  }, [rules]);
 
-    return (
-        <>
-            {isLoading ? (
-                <Loading size="lg" color={bloomTheme.colors.primary} />
-            ) : error ? (
-                <Text className="text-text-secondary text-base text-center px-screen-margin pt-space-40">
-                    {error}
-                </Text>
-            ) : rules.length === 0 ? (
-                <Text className="text-text-secondary text-base text-center px-screen-margin pt-space-40">
-                    {t('trust.rules.empty') || 'No rules found.'}
-                </Text>
-            ) : (
-                    <View className="px-screen-margin pb-space-24 pt-space-12">
-                        {groupedRules.map(({ category, items }) => (
-                            <SettingsListGroup
-                                key={category}
-                                title={reputationCategoryLabel(locale, category)}
-                            >
-                                {items.map((rule) => (
-                                    <SettingsListItem
-                                        key={rule.actionType}
-                                        title={rule.description}
-                                        showChevron={false}
-                                        rightElement={
-                                            <Chip
-                                                variant="subtle"
-                                                size="small"
-                                                color={rule.points > 0 ? 'success' : rule.points < 0 ? 'error' : 'default'}
-                                            >
-                                                {rule.points > 0 ? `+${rule.points}` : `${rule.points}`}
-                                            </Chip>
-                                        }
-                                        accessibilityLabel={`${rule.description}, ${rule.points > 0 ? '+' : ''}${rule.points} ${t('trust.center.balance') || 'reputation points'}`}
-                                    />
-                                ))}
-                            </SettingsListGroup>
-                        ))}
-                    </View>
-            )}
-        </>
-    );
+  return (
+    <>
+      {isLoading ? (
+        <Loading size="lg" color={bloomTheme.colors.primary} />
+      ) : error ? (
+        <Text className="text-text-secondary text-base text-center px-screen-margin pt-space-40">
+          {error}
+        </Text>
+      ) : rules.length === 0 ? (
+        <Text className="text-text-secondary text-base text-center px-screen-margin pt-space-40">
+          {t('trust.rules.empty') || 'No rules found.'}
+        </Text>
+      ) : (
+        <View className="px-screen-margin pb-space-24 pt-space-12">
+          {groupedRules.map(({ category, items }) => (
+            <SettingsListGroup key={category} title={reputationCategoryLabel(locale, category)}>
+              {items.map((rule) => (
+                <SettingsListItem
+                  key={rule.actionType}
+                  title={rule.description}
+                  showChevron={false}
+                  rightElement={
+                    <Chip
+                      variant="subtle"
+                      size="small"
+                      color={rule.points > 0 ? 'success' : rule.points < 0 ? 'error' : 'default'}
+                    >
+                      {rule.points > 0 ? `+${rule.points}` : `${rule.points}`}
+                    </Chip>
+                  }
+                  accessibilityLabel={`${rule.description}, ${rule.points > 0 ? '+' : ''}${rule.points} ${t('trust.center.balance') || 'reputation points'}`}
+                />
+              ))}
+            </SettingsListGroup>
+          ))}
+        </View>
+      )}
+    </>
+  );
 };
 
 export default TrustRulesScreen;

package/src/ui/server.ts

@@ -38,23 +38,20 @@ export const ProfileScreen = noopComponent;
 export const useAuthStore = noopHook;
 
 // Toast (noop)
-export const toast = Object.assign(
-    () => {},
-    {
-        success: () => {},
-        error: () => {},
-        info: () => {},
-        warning: () => {},
-        loading: () => {},
-        dismiss: () => {},
-    }
-);
+export const toast = Object.assign(() => {}, {
+  success: () => {},
+  error: () => {},
+  info: () => {},
+  warning: () => {},
+  loading: () => {},
+  dismiss: () => {},
+});
 
 // Error handler utilities (pure functions work everywhere)
 export {
-    handleAuthError,
-    isInvalidSessionError,
-    isTimeoutOrNetworkError,
-    extractErrorMessage,
+  handleAuthError,
+  isInvalidSessionError,
+  isTimeoutOrNetworkError,
+  extractErrorMessage,
 } from './utils/errorHandlers';
 export type { HandleAuthErrorOptions } from './utils/errorHandlers';

package/src/ui/session/__tests__/authStore.test.ts

@@ -9,7 +9,12 @@
  */
 import type { AuthStateStore } from '@oxy.so/core/session';
 
-const CRED_STATE = { sessionId: 'sess-1', userId: 'user-1', deviceId: 'dev-1', deviceSecret: 'ds-1' };
+const CRED_STATE = {
+  sessionId: 'sess-1',
+  userId: 'user-1',
+  deviceId: 'dev-1',
+  deviceSecret: 'ds-1',
+};
 
 /** Track every credential handed to the shared slot by the store under test. */
 function makeSharedSpy() {

package/src/ui/session/__tests__/createSessionClient.test.ts

@@ -5,13 +5,20 @@ class FakeSocket {
   connected = false;
   on(_event: string, _cb: Handler) {}
   off(_event: string, _cb?: Handler) {}
-  connect() { this.connected = true; }
-  disconnect() { this.connected = false; }
+  connect() {
+    this.connected = true;
+  }
+  disconnect() {
+    this.connected = false;
+  }
 }
 const ioMock = jest.fn((_uri: string, _opts?: Record<string, unknown>) => new FakeSocket());
 // Core loads socket.io-client only when `start()` needs realtime transport. This
 // mock proves the services factory keeps that boundary lazy.
-jest.mock('socket.io-client', () => ({ __esModule: true, io: (...args: unknown[]) => ioMock(...(args as [string, Record<string, unknown>?])) }));
+jest.mock('socket.io-client', () => ({
+  __esModule: true,
+  io: (...args: unknown[]) => ioMock(...(args as [string, Record<string, unknown>?])),
+}));
 
 import { createSessionClient } from '../createSessionClient';
 
@@ -22,10 +29,14 @@ function fakeOxy() {
   return {
     request: jest.fn().mockResolvedValue(undefined),
     baseURL: 'https://api.oxy.so',
-    session: { accessToken: 'bearer.jwt.token', setAccessToken: jest.fn(), onChange: jest.fn((l: (t: string | null) => void) => {
-      listeners.add(l);
-      return () => listeners.delete(l);
-    }) },
+    session: {
+      accessToken: 'bearer.jwt.token',
+      setAccessToken: jest.fn(),
+      onChange: jest.fn((l: (t: string | null) => void) => {
+        listeners.add(l);
+        return () => listeners.delete(l);
+      }),
+    },
   };
 }
 
@@ -60,7 +71,10 @@ describe('createSessionClient', () => {
 
     // The lazily-loaded `io` opens the session socket at the base URL.
     expect(ioMock).toHaveBeenCalledTimes(1);
-    expect(ioMock).toHaveBeenCalledWith('https://api.oxy.so', expect.objectContaining({ transports: ['websocket'] }));
+    expect(ioMock).toHaveBeenCalledWith(
+      'https://api.oxy.so',
+      expect.objectContaining({ transports: ['websocket'] }),
+    );
     client.stop();
   });
 

package/src/ui/session/__tests__/sharedDeviceCredentialStore.test.ts

@@ -82,7 +82,10 @@ type BrokerModule = {
  */
 function loadStore(
   os: 'ios' | 'android' | 'web',
-  seams: { secureStore?: ReturnType<typeof makeSecureStoreMock>; broker?: BrokerModule | null } = {},
+  seams: {
+    secureStore?: ReturnType<typeof makeSecureStoreMock>;
+    broker?: BrokerModule | null;
+  } = {},
 ): SharedDeviceCredentialStore | null {
   jest.resetModules();
   jest.doMock('expo-modules-core', () => ({
@@ -106,7 +109,8 @@ function loadStore(
   });
   const rn = require('react-native') as { Platform: { OS: string } };
   rn.Platform.OS = os;
-  const mod = require('../sharedDeviceCredentialStore') as typeof import('../sharedDeviceCredentialStore');
+  const mod =
+    require('../sharedDeviceCredentialStore') as typeof import('../sharedDeviceCredentialStore');
   return mod.createPlatformSharedDeviceCredentialStore();
 }
 
@@ -201,7 +205,9 @@ describe('iOS keychain-group slot', () => {
     const store = loadStore('ios', { secureStore });
     await store?.publish(CRED);
     const write = secureStore.calls.find((c) => c.options?.keychainAccessible !== undefined);
-    expect(write?.options?.keychainAccessible).toBe(secureStore.module.WHEN_UNLOCKED_THIS_DEVICE_ONLY);
+    expect(write?.options?.keychainAccessible).toBe(
+      secureStore.module.WHEN_UNLOCKED_THIS_DEVICE_ONLY,
+    );
   });
 
   test('a publish round-trips and reads back as present', async () => {
@@ -238,7 +244,11 @@ describe('iOS keychain-group slot', () => {
 describe('Android broker slot', () => {
   test('narrows a present payload', async () => {
     const store = loadStore('android', {
-      broker: { read: async () => ({ status: 'present', ...CRED }), write: async () => true, clear: async () => undefined },
+      broker: {
+        read: async () => ({ status: 'present', ...CRED }),
+        write: async () => true,
+        clear: async () => undefined,
+      },
     });
     await expect(store?.read()).resolves.toEqual({ state: 'present', credential: CRED });
   });
@@ -269,7 +279,11 @@ describe('Android broker slot', () => {
 
   test('an unrecognised payload from an older sibling is unavailable, never absent', async () => {
     const store = loadStore('android', {
-      broker: { read: async () => ({ ok: true }), write: async () => true, clear: async () => undefined },
+      broker: {
+        read: async () => ({ ok: true }),
+        write: async () => true,
+        clear: async () => undefined,
+      },
     });
     expect((await store?.read())?.state).toBe('unavailable');
   });
@@ -282,7 +296,11 @@ describe('Android broker slot', () => {
 
   test('publish forwards the broker’s own read-back verdict', async () => {
     const unverified = loadStore('android', {
-      broker: { read: async () => ({ status: 'absent' }), write: async () => false, clear: async () => undefined },
+      broker: {
+        read: async () => ({ status: 'absent' }),
+        write: async () => false,
+        clear: async () => undefined,
+      },
     });
     await expect(unverified?.publish(CRED)).resolves.toBe(false);
   });

package/src/ui/session/__tests__/tokenLossRecovery.test.ts

@@ -55,7 +55,9 @@ function harness(remintAnswers: Array<string | null | 'drop-credential'>): Harne
   return { deps, state, remint, signOutLocally, sleeps };
 }
 
-async function runToCompletion(recovery: ReturnType<typeof createTokenLossRecovery>): Promise<void> {
+async function runToCompletion(
+  recovery: ReturnType<typeof createTokenLossRecovery>,
+): Promise<void> {
   for (let i = 0; i < 200 && recovery.isRecovering(); i += 1) {
     await new Promise((resolve) => setTimeout(resolve, 0));
   }

package/src/ui/session/__tests__/tokenTransport.test.ts

@@ -10,11 +10,18 @@ import { createTokenTransport } from '../tokenTransport';
 // account switch) must still mint the new account's token. These tests exercise
 // that account-match contract and the transport's error/swallow behavior.
 
-function fakeOxy(currentUserId: string | null, refreshAccessToken = jest.fn(async () => 'minted-token')) {
+function fakeOxy(
+  currentUserId: string | null,
+  refreshAccessToken = jest.fn(async () => 'minted-token'),
+) {
   const userId = jest.fn((): string | null => currentUserId);
   return {
     userId,
-    session: { get userId() { return userId(); } },
+    session: {
+      get userId() {
+        return userId();
+      },
+    },
     http: { refreshAccessToken },
   };
 }

package/src/ui/session/authStore.ts

@@ -19,7 +19,13 @@
  * for the Commons identity key. The mirror is additive — it can neither change
  * nor fail the app's own durable write.
  */
-import { createWebAuthStateStore, createNativeAuthStateStore, createSharedMirroringAuthStateStore, type AuthStateStore, type SessionMode } from '@oxy.so/core/session';
+import {
+  createWebAuthStateStore,
+  createNativeAuthStateStore,
+  createSharedMirroringAuthStateStore,
+  type AuthStateStore,
+  type SessionMode,
+} from '@oxy.so/core/session';
 import { isReactNative } from '../utils/storageHelpers';
 import { createNativeSecureKeyValueStorage } from './nativeSecureStorage';
 import { createPlatformSharedDeviceCredentialStore } from './sharedDeviceCredentialStore';

package/src/ui/session/backgroundSession.ts

@@ -122,9 +122,10 @@ function loadNativeModule(): OxyBackgroundSessionNativeModule | null {
       nativeModule = null;
       return nativeModule;
     }
-    const native = requireOptionalNativeModule<Partial<OxyBackgroundSessionNativeModule>>(
-      'OxyBackgroundSession',
-    );
+    const native =
+      requireOptionalNativeModule<Partial<OxyBackgroundSessionNativeModule>>(
+        'OxyBackgroundSession',
+      );
     nativeModule =
       native &&
       typeof native.put === 'function' &&

package/src/ui/session/createSessionClient.ts

@@ -1,4 +1,8 @@
-import { SessionClient, createSessionClientHost, type SessionStateOrigin } from '@oxy.so/core/session';
+import {
+  SessionClient,
+  createSessionClientHost,
+  type SessionStateOrigin,
+} from '@oxy.so/core/session';
 import type { OxyServices } from '@oxy.so/core';
 import { createTokenTransport } from './tokenTransport';
 
@@ -49,10 +53,18 @@ export function createSessionClient(
   const baseHost = createSessionClientHost(oxyServices);
   const host = {
     ...baseHost,
-    getAccessToken: () => isDeviceSessionAllowed() ? baseHost.getAccessToken() : null,
-    setTokens: (token: string) => { if (isDeviceSessionAllowed()) baseHost.setTokens(token); },
-    makeRequest: async <T>(method: 'GET' | 'POST', url: string, data?: unknown, requestOptions?: { cache?: boolean }): Promise<T> => {
-      if (!isDeviceSessionAllowed()) throw new Error('An isolated OAuth session cannot access the shared device');
+    getAccessToken: () => (isDeviceSessionAllowed() ? baseHost.getAccessToken() : null),
+    setTokens: (token: string) => {
+      if (isDeviceSessionAllowed()) baseHost.setTokens(token);
+    },
+    makeRequest: async <T>(
+      method: 'GET' | 'POST',
+      url: string,
+      data?: unknown,
+      requestOptions?: { cache?: boolean },
+    ): Promise<T> => {
+      if (!isDeviceSessionAllowed())
+        throw new Error('An isolated OAuth session cannot access the shared device');
       return baseHost.makeRequest<T>(method, url, data, requestOptions);
     },
   };

package/src/ui/session/deviceCredentialTracker.ts

@@ -22,7 +22,9 @@ export interface CredentialTrackingAuthStateStore extends AuthStateStore {
   heldDeviceCredential(): HeldDeviceCredential | null | undefined;
 }
 
-function credentialOf(state: { deviceId?: string; deviceSecret?: string } | null): HeldDeviceCredential | null {
+function credentialOf(
+  state: { deviceId?: string; deviceSecret?: string } | null,
+): HeldDeviceCredential | null {
   return state?.deviceId && state.deviceSecret
     ? { deviceId: state.deviceId, deviceSecret: state.deviceSecret }
     : null;
@@ -41,11 +43,15 @@ export function trackDeviceCredential(store: AuthStateStore): CredentialTracking
       held = credentialOf(state);
       return store.save(state);
     },
-    ...(store.saveIfCurrent ? {saveIfCurrent: async (state: PersistedAuthState, guard: AuthStateWriteGuard) => {
-      const committed = await store.saveIfCurrent?.(state, guard);
-      if (committed) held = credentialOf(state);
-      return committed === true;
-    }} : {}),
+    ...(store.saveIfCurrent
+      ? {
+          saveIfCurrent: async (state: PersistedAuthState, guard: AuthStateWriteGuard) => {
+            const committed = await store.saveIfCurrent?.(state, guard);
+            if (committed) held = credentialOf(state);
+            return committed === true;
+          },
+        }
+      : {}),
     clear: async () => {
       held = null;
       await store.clear();

package/src/ui/session/identityBinding.ts

@@ -16,7 +16,12 @@
  * resolves it before the cold boot and after every (re-)established identity
  * session; every read after that is free.
  */
-import { createNativeIdentityPinStore, createWebIdentityPinStore, resolveIdentityPin, type IdentityBinding } from '@oxy.so/core/session';
+import {
+  createNativeIdentityPinStore,
+  createWebIdentityPinStore,
+  resolveIdentityPin,
+  type IdentityBinding,
+} from '@oxy.so/core/session';
 import { isReactNative } from '../utils/storageHelpers';
 import { createNativeSecureKeyValueStorage } from './nativeSecureStorage';
 

package/src/ui/session/sharedDeviceCredentialStore.ts

@@ -39,7 +39,12 @@
  */
 import { Platform } from 'react-native';
 import { requireOptionalNativeModule } from 'expo-modules-core';
-import { normalizeSharedDeviceSessionRead, type SharedDeviceCredential, type SharedDeviceCredentialRead, type SharedDeviceCredentialStore } from '@oxy.so/core/session';
+import {
+  normalizeSharedDeviceSessionRead,
+  type SharedDeviceCredential,
+  type SharedDeviceCredentialRead,
+  type SharedDeviceCredentialStore,
+} from '@oxy.so/core/session';
 
 /**
  * The iOS Keychain Access Group every official Oxy app declares in its
@@ -230,9 +235,13 @@ let brokerModule: OxyDeviceSessionNativeModule | null | undefined;
  */
 function loadBrokerModule(): OxyDeviceSessionNativeModule | null {
   if (brokerModule === undefined) {
-    const native = requireOptionalNativeModule<Partial<OxyDeviceSessionNativeModule>>('OxyDeviceSession');
+    const native =
+      requireOptionalNativeModule<Partial<OxyDeviceSessionNativeModule>>('OxyDeviceSession');
     brokerModule =
-      native && typeof native.read === 'function' && typeof native.write === 'function' && typeof native.clear === 'function'
+      native &&
+      typeof native.read === 'function' &&
+      typeof native.write === 'function' &&
+      typeof native.clear === 'function'
         ? {
             read: native.read.bind(native),
             write: native.write.bind(native),
@@ -309,5 +318,7 @@ export function createPlatformSharedDeviceCredentialStore(): SharedDeviceCredent
   if (Platform.OS === 'web') {
     return null;
   }
-  return Platform.OS === 'ios' ? createKeychainGroupCredentialStore() : createBrokerCredentialStore();
+  return Platform.OS === 'ios'
+    ? createKeychainGroupCredentialStore()
+    : createBrokerCredentialStore();
 }

package/src/ui/session/tokenLossRecovery.ts

@@ -63,7 +63,9 @@ export interface TokenLossRecovery {
  * near the post-failure refresh cooldowns and settles at one attempt a minute,
  * which also respects the mint's own 60s rate-limit cooldown.
  */
-export const TOKEN_RECOVERY_BACKOFF_MS: readonly number[] = [2_000, 5_000, 10_000, 20_000, 30_000, 60_000];
+export const TOKEN_RECOVERY_BACKOFF_MS: readonly number[] = [
+  2_000, 5_000, 10_000, 20_000, 30_000, 60_000,
+];
 
 /** Attempts through a key-based lane once the device credential is gone. */
 export const MAX_KEYED_RECOVERY_ATTEMPTS = 3;
@@ -85,19 +87,26 @@ export function createTokenLossRecovery(deps: TokenLossRecoveryDeps): TokenLossR
   const run = async (): Promise<void> => {
     let attempt = 0;
     let keyedAttempts = 0;
-    logger.warn('Access token lost while signed in — recovering the session instead of signing out', LOG_CONTEXT);
+    logger.warn(
+      'Access token lost while signed in — recovering the session instead of signing out',
+      LOG_CONTEXT,
+    );
     while (!settled()) {
       if (!(await deps.hasDeviceCredential())) {
-        const keyed = keyedAttempts < MAX_KEYED_RECOVERY_ATTEMPTS && (await deps.hasKeyedRecovery());
+        const keyed =
+          keyedAttempts < MAX_KEYED_RECOVERY_ATTEMPTS && (await deps.hasKeyedRecovery());
         if (!keyed) {
           if (settled()) {
             return;
           }
-          logger.warn('Session recovery ended: no device credential and no key-based lane left — signing out', {
-            ...LOG_CONTEXT,
-            attempts: attempt,
-            keyedAttempts,
-          });
+          logger.warn(
+            'Session recovery ended: no device credential and no key-based lane left — signing out',
+            {
+              ...LOG_CONTEXT,
+              attempts: attempt,
+              keyedAttempts,
+            },
+          );
           await deps.signOutLocally();
           return;
         }
@@ -110,11 +119,16 @@ export function createTokenLossRecovery(deps: TokenLossRecoveryDeps): TokenLossR
       attempt += 1;
       if (token || settled()) {
         if (token) {
-          logger.warn('Session recovered after a lost access token', { ...LOG_CONTEXT, attempts: attempt });
+          logger.warn('Session recovered after a lost access token', {
+            ...LOG_CONTEXT,
+            attempts: attempt,
+          });
         }
         return;
       }
-      await sleep(TOKEN_RECOVERY_BACKOFF_MS[Math.min(attempt - 1, TOKEN_RECOVERY_BACKOFF_MS.length - 1)]);
+      await sleep(
+        TOKEN_RECOVERY_BACKOFF_MS[Math.min(attempt - 1, TOKEN_RECOVERY_BACKOFF_MS.length - 1)],
+      );
     }
   };
 

package/src/ui/session/tokenTransport.ts

@@ -50,7 +50,11 @@ export function createTokenTransport(
           return;
         }
       } catch (error) {
-        logger.warn('ensureActiveToken: bearer-account check threw', { component: 'TokenTransport' }, error);
+        logger.warn(
+          'ensureActiveToken: bearer-account check threw',
+          { component: 'TokenTransport' },
+          error,
+        );
       }
 
       try {