@oxy.so/services 12.2.1 → 12.4.0

package/lib/typescript/module/ui/navigation/surfaceRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"surfaceRegistry.d.ts","sourceRoot":"","sources":["../../../../../src/ui/navigation/surfaceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAA+B,CAAC;AAEzE;;;;;;;;;;GAUG;AAEH,sFAAsF;AACtF,KAAK,YAAY,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,IAAI;IAClE,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,YAAY,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,aAAa,EAAE,YAAY,CAAC;IAC5B,mBAAmB,EAAE,YAAY,CAAC;IAClC,cAAc,EAAE,YAAY,CAAC;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,gBAAgB,EAAE,YAAY,CAAC;IAC/B,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACpE,sEAAsE;IACtE,SAAS,EAAE,YAAY,CAAC;IACxB,WAAW,EAAE,YAAY,CAAC;IAC1B,SAAS,EAAE,YAAY,CAAC;IACxB,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,YAAY,CAAC;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,EAAE,YAAY,CAAC;IAC7B,WAAW,EAAE,YAAY,CAAC;IAC1B,WAAW,EAAE,YAAY,CAAC;IAC1B,gBAAgB,EAAE,YAAY,CAAC;IAC/B,kBAAkB,EAAE,YAAY,CAAC;IACjC,WAAW,EAAE,YAAY,CAAC;IAC1B,gBAAgB,EAAE,YAAY,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,YAAY,CAAC;IACzB,UAAU,EAAE,YAAY,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,cAAc,EAAE,YAAY,CAAC;IAC7B,eAAe,EAAE,YAAY,CAAC;IAC9B;;;;;OAKG;IACH,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,mBAAmB,CAAC,CAAC;IAC5F;;;OAGG;IACH,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpE,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,YAAY,CAAC;IAC1B,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,YAAY,CAAC;IAC1B,cAAc,EAAE,YAAY,CAAC;IAC7B,mBAAmB,EAAE,YAAY,CAAC;IAClC,yFAAyF;IACzF,aAAa,EAAE,YAAY,CAAC;QAAE,WAAW,CAAC,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAC;CAClE;AAeD,6CAA6C;AAC7C,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC5E,8EAA8E;AAC9E,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,qCAAqC;IACrC,YAAY,EAAE,mBAAmB,CAAC;IAClC,2EAA2E;IAC3E,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,UAAU,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAClC;;;;OAIG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mFAAmF;IACnF,eAAe,EAAE,OAAO,CAAC;IACzB,qFAAqF;IACrF,eAAe,CAAC,EAAE,MAAM,SAAS,CAAC;CACnC;AAsDD;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAC3B,OAAO,SAAS,EAChB,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,kBAsBF,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,GACjC,OAAO,SAAS,EAChB,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,mBAAkE,CAAC"}
+{"version":3,"file":"surfaceRegistry.d.ts","sourceRoot":"","sources":["../../../../../src/ui/navigation/surfaceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAA+B,CAAC;AAEzE;;;;;;;;;;GAUG;AAEH,sFAAsF;AACtF,KAAK,YAAY,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,IAAI;IAClE,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,YAAY,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,aAAa,EAAE,YAAY,CAAC;IAC5B,mBAAmB,EAAE,YAAY,CAAC;IAClC,cAAc,EAAE,YAAY,CAAC;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,gBAAgB,EAAE,YAAY,CAAC;IAC/B,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACpE,sEAAsE;IACtE,SAAS,EAAE,YAAY,CAAC;IACxB,WAAW,EAAE,YAAY,CAAC;IAC1B,SAAS,EAAE,YAAY,CAAC;IACxB,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,YAAY,CAAC;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,EAAE,YAAY,CAAC;IAC7B,WAAW,EAAE,YAAY,CAAC;IAC1B,WAAW,EAAE,YAAY,CAAC;IAC1B,gBAAgB,EAAE,YAAY,CAAC;IAC/B,kBAAkB,EAAE,YAAY,CAAC;IACjC,WAAW,EAAE,YAAY,CAAC;IAC1B,gBAAgB,EAAE,YAAY,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,YAAY,CAAC;IACzB,UAAU,EAAE,YAAY,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,cAAc,EAAE,YAAY,CAAC;IAC7B,eAAe,EAAE,YAAY,CAAC;IAC9B;;;;;OAKG;IACH,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,mBAAmB,CAAC,CAAC;IAC5F;;;OAGG;IACH,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpE,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,YAAY,CAAC;IAC1B,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,YAAY,CAAC;IAC1B,cAAc,EAAE,YAAY,CAAC;IAC7B,WAAW,EAAE,YAAY,CAAC;IAC1B,cAAc,EAAE,YAAY,CAAC;IAC7B,mBAAmB,EAAE,YAAY,CAAC;IAClC,yFAAyF;IACzF,aAAa,EAAE,YAAY,CAAC;QAAE,WAAW,CAAC,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAC;CAClE;AAeD,6CAA6C;AAC7C,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC5E,8EAA8E;AAC9E,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,qCAAqC;IACrC,YAAY,EAAE,mBAAmB,CAAC;IAClC,2EAA2E;IAC3E,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,UAAU,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAClC;;;;OAIG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mFAAmF;IACnF,eAAe,EAAE,OAAO,CAAC;IACzB,qFAAqF;IACrF,eAAe,CAAC,EAAE,MAAM,SAAS,CAAC;CACnC;AAsDD;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAC3B,OAAO,SAAS,EAChB,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,kBAsBF,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,GACjC,OAAO,SAAS,EAChB,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,mBAAkE,CAAC"}

package/lib/typescript/module/ui/screens/AccountSecurityPanelScreen.d.ts

@@ -1,6 +1,6 @@
 /**
  * The frame the account's own security panels render in when presented as a
- * surface (`showBottomSheet('DeleteAccount' | 'LinkCommons' | 'SignInPassword'
+ * surface (`showBottomSheet('DeleteAccount' | 'LinkCommons' | 'SignInEmail' | 'SignInPassword'
  * | 'SignInAuthenticator')`): the panel draws its own large header, so the bar
  * holds only the way back, and the body keeps the dialog's screen gutter.
  */

package/lib/typescript/module/ui/screens/ManageAccountScreen.d.ts

@@ -4,8 +4,9 @@ import type { BaseScreenProps } from '../types/navigation.js';
  * Unified "Manage your Oxy Account" screen.
  *
  * Replaces AccountOverview + AccountSettings + the per-account half of
- * SessionManagement. Lists ONLY the active user's profile, sessions on this
- * device, and security/destructive actions for THIS account. Multi-account
+ * SessionManagement. Lists ONLY the active user's profile, its sign-in and
+ * security page (`SignInSecurity`: methods and sessions), and the destructive
+ * actions for THIS account. Multi-account
  * surface lives in the unified `OxyAccountDialogScreen` — keep these concerns separate.
  */
 interface ManageAccountScreenProps extends BaseScreenProps {

package/lib/typescript/module/ui/screens/ManageAccountScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ManageAccountScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ManageAccountScreen.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAiB/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AA6C3D;;;;;;;GAOG;AACH,UAAU,wBAAyB,SAAQ,eAAe;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,QAAA,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAgqB3D,CAAC;AAYF,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"ManageAccountScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ManageAccountScreen.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAe/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAY3D;;;;;;;;GAQG;AACH,UAAU,wBAAyB,SAAQ,eAAe;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,QAAA,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAyd3D,CAAC;AAYF,eAAe,mBAAmB,CAAC"}

package/lib/typescript/module/ui/screens/SignInEmailScreen.d.ts

@@ -0,0 +1,6 @@
+import type React from 'react';
+import type { BaseScreenProps } from '../types/navigation.js';
+/** `SignInEmail`: add, change or remove the account's email. */
+declare const SignInEmailScreen: React.FC<BaseScreenProps>;
+export default SignInEmailScreen;
+//# sourceMappingURL=SignInEmailScreen.d.ts.map

package/lib/typescript/module/ui/screens/SignInEmailScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInEmailScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/SignInEmailScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAG3D,gEAAgE;AAChE,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAIhD,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/lib/typescript/module/ui/screens/SignInSecurityScreen.d.ts

@@ -0,0 +1,6 @@
+import type React from 'react';
+import type { BaseScreenProps } from '../types/navigation.js';
+/** `SignInSecurity`: how the account signs in, and where it is signed in. */
+declare const SignInSecurityScreen: React.FC<BaseScreenProps>;
+export default SignInSecurityScreen;
+//# sourceMappingURL=SignInSecurityScreen.d.ts.map

package/lib/typescript/module/ui/screens/SignInSecurityScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInSecurityScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/SignInSecurityScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAK/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAE3D,6EAA6E;AAC7E,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAQnD,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/services",
-  "version": "12.2.1",
+  "version": "12.4.0",
   "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -151,7 +151,7 @@
     "prepublishOnly": "node ../../scripts/assert-bun-publish.mjs && bun run typescript && bun run test && bun run build"
   },
   "dependencies": {
-    "@oxy.so/contracts": "^5.0.0",
+    "@oxy.so/contracts": "^5.1.0",
     "color": "^5.0.3",
     "@peable.to/sdk": "0.4.1"
   },
@@ -160,7 +160,7 @@
     "@commitlint/config-conventional": "^21.2.0",
     "@expo/app-integrity": "~58.0.2",
     "@expo/vector-icons": "^15.0.3",
-    "@oxy.so/core": "6.0.0",
+    "@oxy.so/core": "6.1.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": "^12.0.1",
     "@react-native/babel-preset": "^0.88.0",
@@ -210,12 +210,12 @@
     "expo-video": "~58.0.11"
   },
   "//@oxy.so/bloom": "Bloom 11.1.0 adds the shared grouped sections, usage card, subscription plans, frame appearance and overlay navigation APIs used by this SDK. First-party Bloom peers remain open above this tested minimum.",
-  "//@oxy.so/core": "Core 5.5.0 supplies the shared account-screen translations and updated profile/follow contracts required by this release. Keep one Core instance per app; raise this floor with the root catalogue when new runtime APIs are required. Core 6.0.0 removes only `OxyInferenceClient.decide()` and `getGenerationRecordByIdempotencyKey()` (decisions moved to kaana.ai/v1), which this package never used, so the peer admits both majors (`^5.5.0 || ^6.0.0`) rather than moving the cap.",
+  "//@oxy.so/core": "Core 6.1.0 supplies `oxy.auth.email.{startChange,change,remove}` and `oxy.auth.password.remove`, which the sign-in & security panels call, and their translations. Keep one Core instance per app; raise this floor with the root catalogue when new runtime APIs are required.",
   "peerDependencies": {
     "@expo/app-integrity": ">=56.0.0 <59.0.0",
     "@expo/vector-icons": "^15.0.3",
     "@oxy.so/bloom": ">=11.1.0",
-    "@oxy.so/core": "^5.5.0 || ^6.0.0",
+    "@oxy.so/core": "^6.1.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": ">=11.4.1 <13.0.0",
     "@tanstack/query-async-storage-persister": "^5.101",

package/src/index.ts

@@ -394,8 +394,13 @@ export type { OxySignUpPanelProps } from './ui/components/signIn/OxySignUpPanel'
 export { OxyAccountPicker } from './ui/components/signIn/OxyAccountPicker';
 export type { OxyAccountPickerProps } from './ui/components/signIn/OxyAccountPicker';
 // The account's own sign-in security, for its settings (the Accounts app, and
-// the account dialog's "Manage your account" through the `DeleteAccount`,
-// `LinkCommons`, `SignInPassword` and `SignInAuthenticator` routes).
+// the account dialog's "Manage your account" through the `SignInSecurity`,
+// `SignInEmail`, `SignInPassword`, `SignInAuthenticator`, `LinkCommons` and
+// `DeleteAccount` routes).
+export { OxySignInSecurityPanel } from './ui/components/signIn/OxySignInSecurityPanel';
+export type { OxySignInSecurityPanelProps } from './ui/components/signIn/OxySignInSecurityPanel';
+export { OxyEmailPanel } from './ui/components/signIn/OxyEmailPanel';
+export type { OxyEmailPanelProps } from './ui/components/signIn/OxyEmailPanel';
 export { OxyDeleteAccountPanel } from './ui/components/signIn/OxyDeleteAccountPanel';
 export type { OxyDeleteAccountPanelProps } from './ui/components/signIn/OxyDeleteAccountPanel';
 export { OxyLinkCommonsPanel } from './ui/components/signIn/OxyLinkCommonsPanel';

package/src/ui/client.ts

@@ -69,7 +69,22 @@ export { useStorage } from './hooks/useStorage';
 // Realtime events and the profile mutation, which startup code (a socket hook,
 // a locale provider) needs without the root barrel's account screens.
 export { useOxyEvent } from './hooks/useOxyEvent';
-export { useUpdateProfile } from './hooks/mutations/useAccountMutations';
+// Data hooks a product screen needs (a review's photo upload, a price in the
+// viewer's currency, a "Syncing..." badge) without the root barrel's screens:
+// mercaria.co shipped ~225 KB gzip of account screens on first paint because
+// its review upload could only get `useUploadFile` from the root.
+export {
+  useUpdateProfile,
+  useUploadAvatar,
+  useUploadFile,
+} from './hooks/mutations/useAccountMutations';
+export { useFileDownloadUrl } from './hooks/useFileDownloadUrl';
+export { useMutationStatus } from './hooks/useMutationStatus';
+export type { MutationStatus } from './hooks/useMutationStatus';
+export { useOnlineStatus } from './hooks/useOnlineStatus';
+export { useDisplayCurrency } from './hooks/useDisplayCurrency';
+export { useDisplayPrice } from './hooks/useDisplayPrice';
+export { DisplayCurrencySelector } from './components/DisplayCurrencySelector';
 export type { UseStorageOptions, UseStorageResult } from './hooks/useStorage';
 
 // Route screens live at `@oxy.so/services/screens` so client imports preserve

package/src/ui/components/signIn/OxyAuthenticatorPanel.tsx

@@ -23,12 +23,11 @@ import type { TotpEnrollResponse } from '@oxy.so/contracts';
 import { TOTP_DIGITS } from '@oxy.so/contracts/client';
 import { useQueryClient } from '@tanstack/react-query';
 import { useOxy } from '../../context/oxyRuntimeContext';
-import { useSignInMethods } from '../../hooks/queries/useAuthMethods';
 import { queryKeys } from '../../hooks/queries/queryKeys';
 import { useI18n } from '../../hooks/useI18n';
 import { copyText } from '../../utils/clipboard';
 import { SubtleLink } from '../authChooser/primitives';
-import { OxyAuthLoading, OxyAuthScreen, OxyAuthScreenHeader } from './OxyAuthScreen';
+import { OxyAuthScreen, OxyAuthScreenHeader } from './OxyAuthScreen';
 import { ReauthStep } from './ReauthStep';
 import {
   AccountFlowAction,
@@ -38,6 +37,7 @@ import {
   AccountFlowProgress,
   describeSignInError,
 } from './accountFlowParts';
+import { accountSecurityFallback, useAccountSecurityState } from './accountSecurityState';
 
 /** High-contrast, un-themed on purpose: scan reliability. */
 const QR_PLATE_BG = '#FFFFFF';
@@ -60,10 +60,9 @@ export interface OxyAuthenticatorPanelProps {
 export const OxyAuthenticatorPanel: React.FC<OxyAuthenticatorPanelProps> = ({ onDone }) => {
   const theme = useTheme();
   const { t } = useI18n();
-  const { oxyServices, user } = useOxy();
+  const { oxyServices } = useOxy();
   const queryClient = useQueryClient();
-  const keyed = Boolean(user?.publicKey);
-  const methods = useSignInMethods({ enabled: !keyed });
+  const security = useAccountSecurityState();
   const [step, setStep] = useState<Step>({ name: 'status' });
   const [code, setCode] = useState('');
   const [pending, setPending] = useState(false);
@@ -72,7 +71,7 @@ export const OxyAuthenticatorPanel: React.FC<OxyAuthenticatorPanelProps> = ({ on
   const refresh = () =>
     void queryClient.invalidateQueries({ queryKey: queryKeys.signInMethods.all });
 
-  if (keyed) {
+  if (security.keyed) {
     return (
       <OxyAuthScreen>
         <OxyAuthScreenHeader
@@ -82,8 +81,9 @@ export const OxyAuthenticatorPanel: React.FC<OxyAuthenticatorPanelProps> = ({ on
       </OxyAuthScreen>
     );
   }
-  if (!methods.data) return <OxyAuthLoading />;
-  const { hasPassword, totpEnabled, backupCodesRemaining } = methods.data;
+  const fallback = accountSecurityFallback(security, t('signInSecurity.totp.title'), t);
+  if (fallback || !security.methods.data) return fallback;
+  const { hasEmail, hasPassword, totpEnabled, backupCodesRemaining } = security.methods.data;
 
   const setUp = () => {
     if (pending) return;
@@ -157,6 +157,7 @@ export const OxyAuthenticatorPanel: React.FC<OxyAuthenticatorPanelProps> = ({ on
           description={t('signInSecurity.totp.scan')}
           action="totp"
           allowPassword={hasPassword}
+          allowEmail={hasEmail}
           totpEnabled={false}
           submitLabel={t('signInSecurity.totp.enable')}
           validate={() =>
@@ -213,6 +214,7 @@ export const OxyAuthenticatorPanel: React.FC<OxyAuthenticatorPanelProps> = ({ on
           description={t('signInSecurity.totp.regenerateDescription')}
           action="totp"
           allowPassword={hasPassword}
+          allowEmail={hasEmail}
           totpEnabled
           submitLabel={t('signInSecurity.totp.regenerate')}
           onSubmit={async (reauth) => {
@@ -230,6 +232,7 @@ export const OxyAuthenticatorPanel: React.FC<OxyAuthenticatorPanelProps> = ({ on
           description={t('signInSecurity.totp.description')}
           action="totp"
           allowPassword={hasPassword}
+          allowEmail={hasEmail}
           totpEnabled
           submitLabel={t('signInSecurity.totp.disable')}
           destructive

package/src/ui/components/signIn/OxyDeleteAccountPanel.tsx

@@ -2,8 +2,9 @@
  * Deleting an account that has no key of its own, from the account's settings
  * (the account dialog's "Manage your account", or the Accounts app):
  *
- *   type the username → a code sent to the account's email (+ the
- *   authenticator's code when it has one) → deleted, and signed out
+ *   type the username → a code sent to the account's email, or its password
+ *   when it has no email (+ the authenticator's code when it has one) →
+ *   deleted, and signed out
  *
  * An account with a Commons key is deleted with that key — in Commons, or in
  * an app that holds it (`ManageAccountScreen`); this panel says so instead.
@@ -14,11 +15,11 @@ import type React from 'react';
 import { useState } from 'react';
 import { surfaces } from '@oxy.so/bloom/surfaces';
 import { useOxy } from '../../context/oxyRuntimeContext';
-import { useSignInMethods } from '../../hooks/queries/useAuthMethods';
 import { useI18n } from '../../hooks/useI18n';
-import { OxyAuthLoading, OxyAuthScreen, OxyAuthScreenHeader } from './OxyAuthScreen';
+import { OxyAuthScreen, OxyAuthScreenHeader } from './OxyAuthScreen';
 import { ReauthStep } from './ReauthStep';
 import { AccountFlowField, AccountFlowNotice } from './accountFlowParts';
+import { accountSecurityFallback, useAccountSecurityState } from './accountSecurityState';
 
 export interface OxyDeleteAccountPanelProps {
   /** The account is gone and this origin signed out of it. */
@@ -33,8 +34,7 @@ export const OxyDeleteAccountPanel: React.FC<OxyDeleteAccountPanelProps> = ({
 }) => {
   const { t } = useI18n();
   const { user, oxyServices, logout } = useOxy();
-  const keyed = Boolean(user?.publicKey);
-  const methods = useSignInMethods({ enabled: !keyed });
+  const security = useAccountSecurityState();
   const [confirmText, setConfirmText] = useState('');
   const [deleted, setDeleted] = useState(false);
 
@@ -49,7 +49,7 @@ export const OxyDeleteAccountPanel: React.FC<OxyDeleteAccountPanelProps> = ({
     );
   }
 
-  if (keyed) {
+  if (security.keyed) {
     return (
       <OxyAuthScreen>
         <OxyAuthScreenHeader title={t('deleteAccount.handoff.commonsTitle')} />
@@ -60,7 +60,9 @@ export const OxyDeleteAccountPanel: React.FC<OxyDeleteAccountPanelProps> = ({
     );
   }
 
-  if (!methods.data) return <OxyAuthLoading />;
+  const fallback = accountSecurityFallback(security, t('deleteAccount.title'), t);
+  if (fallback || !security.methods.data) return fallback;
+  const { hasEmail, totpEnabled } = security.methods.data;
 
   const username = user?.username ?? '';
 
@@ -69,14 +71,16 @@ export const OxyDeleteAccountPanel: React.FC<OxyDeleteAccountPanelProps> = ({
       title={t('deleteAccount.title')}
       description={t('deleteAccount.keyless.subtitle', { username })}
       action="delete_account"
-      totpEnabled={methods.data.totpEnabled}
+      // The mailbox proves it when there is one; the password only without.
+      allowPassword={!hasEmail}
+      allowEmail={hasEmail}
+      totpEnabled={totpEnabled}
       submitLabel={t('deleteAccount.keyless.action')}
       destructive
       validate={() =>
         confirmText.trim() === username ? null : t('deleteAccount.confirmLabel', { username })
       }
       onSubmit={async (proof) => {
-        if (!proof.emailCode) throw new Error(t('reauth.errors.invalid'));
         // The last word before it is gone: the proof is ready, and nothing has
         // been sent yet. Cancelling keeps the screen as it is, code and all.
         const confirmed = await surfaces.confirm({
@@ -87,12 +91,7 @@ export const OxyDeleteAccountPanel: React.FC<OxyDeleteAccountPanelProps> = ({
           destructive: true,
         });
         if (!confirmed) return;
-        await oxyServices.users.deleteMe(confirmText.trim(), {
-          reauth: {
-            emailCode: proof.emailCode,
-            ...(proof.totpCode ? { totpCode: proof.totpCode } : {}),
-          },
-        });
+        await oxyServices.users.deleteMe(confirmText.trim(), { reauth: proof });
         await logout().catch(() => undefined);
         setDeleted(true);
         onDeleted?.();

package/src/ui/components/signIn/OxyEmailPanel.tsx

@@ -0,0 +1,258 @@
+/**
+ * The account's email, from its settings: add one, change it, or remove it.
+ *
+ *   add / change: the new address → a code sent to IT, plus the person's
+ *   proof (the password, or a code to the current email; + the
+ *   authenticator's) → saved, and every other session signed out
+ *
+ *   remove: only with a password set, confirmed with that password (+ the
+ *   authenticator's) → the account signs in, and is recovered, with its
+ *   password alone
+ *
+ * Sign-in codes, links and security notices go to this address. An account
+ * with a Commons key has no email; this panel says so instead.
+ */
+
+import type React from 'react';
+import { useState } from 'react';
+import { toast } from '@oxy.so/bloom/toast';
+import { EMAIL_CODE_LENGTH, checkContract, emailAddressCheck } from '@oxy.so/contracts/client';
+import { useQueryClient } from '@tanstack/react-query';
+import { useOxy } from '../../context/oxyRuntimeContext';
+import { queryKeys } from '../../hooks/queries/queryKeys';
+import { useI18n } from '../../hooks/useI18n';
+import { SubtleLink } from '../authChooser/primitives';
+import { OxyAuthScreen, OxyAuthScreenHeader } from './OxyAuthScreen';
+import { ReauthStep } from './ReauthStep';
+import {
+  AccountFlowAction,
+  AccountFlowCodeField,
+  AccountFlowField,
+  AccountFlowNote,
+  AccountFlowNotice,
+  describeSignInError,
+} from './accountFlowParts';
+import { accountSecurityFallback, useAccountSecurityState } from './accountSecurityState';
+
+type Step =
+  | { name: 'status' }
+  | { name: 'address' }
+  | { name: 'confirm'; email: string; verificationId: string }
+  | { name: 'remove' };
+
+export interface OxyEmailPanelProps {
+  /** The email was added, changed or removed. */
+  onDone?: () => void;
+}
+
+export const OxyEmailPanel: React.FC<OxyEmailPanelProps> = ({ onDone }) => {
+  const { t } = useI18n();
+  const { oxyServices, user } = useOxy();
+  const queryClient = useQueryClient();
+  const security = useAccountSecurityState();
+  const [step, setStep] = useState<Step>({ name: 'status' });
+  const [address, setAddress] = useState('');
+  const [code, setCode] = useState('');
+  const [pending, setPending] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  if (security.keyed) {
+    return (
+      <OxyAuthScreen>
+        <OxyAuthScreenHeader
+          title={t('signInSecurity.email.title')}
+          description={t('linkCommons.already')}
+        />
+      </OxyAuthScreen>
+    );
+  }
+  const fallback = accountSecurityFallback(security, t('signInSecurity.email.title'), t);
+  if (fallback || !security.methods.data) return fallback;
+  const { hasEmail, hasPassword, totpEnabled } = security.methods.data;
+  const current = hasEmail ? (user?.email ?? null) : null;
+
+  const finish = (message: string) => {
+    void queryClient.invalidateQueries({ queryKey: queryKeys.signInMethods.all });
+    void queryClient.invalidateQueries({ queryKey: queryKeys.accounts.all });
+    toast.success(message);
+    setStep({ name: 'status' });
+    setAddress('');
+    setCode('');
+    onDone?.();
+  };
+
+  const sendCode = (email: string) => {
+    if (pending) return;
+    setError(null);
+    setPending(true);
+    oxyServices.auth.email
+      .startChange(email)
+      .then((started) => {
+        setCode('');
+        setStep({ name: 'confirm', email, verificationId: started.verificationId });
+      })
+      .catch((reason: unknown) => setError(describeSignInError(reason, t)))
+      .finally(() => setPending(false));
+  };
+
+  const submitAddress = () => {
+    const email = checkContract(emailAddressCheck, address);
+    if (!email) {
+      setError(t('signInSecurity.email.invalid'));
+      return;
+    }
+    if (email === current) {
+      setError(t('signInSecurity.errors.emailUnchanged'));
+      return;
+    }
+    sendCode(email);
+  };
+
+  switch (step.name) {
+    case 'address':
+      return (
+        <OxyAuthScreen>
+          <OxyAuthScreenHeader
+            title={hasEmail ? t('signInSecurity.email.change') : t('signInSecurity.email.add')}
+            description={t('signInSecurity.email.newDescription')}
+          />
+          <AccountFlowField
+            label={t('signInSecurity.email.newLabel')}
+            value={address}
+            onChange={(value) => {
+              setAddress(value);
+              if (error) setError(null);
+            }}
+            onSubmit={submitAddress}
+            error={error}
+            disabled={pending}
+            autoComplete="email"
+            keyboardType="email-address"
+            testID="email-new"
+          />
+          <AccountFlowAction
+            label={t('signInSecurity.email.sendCode')}
+            onPress={submitAddress}
+            pending={pending}
+            testID="email-send-code"
+          />
+          <SubtleLink
+            label={t('common.cancel')}
+            onPress={() => {
+              setError(null);
+              setStep({ name: 'status' });
+            }}
+            disabled={pending}
+            testID="email-cancel"
+          />
+        </OxyAuthScreen>
+      );
+    case 'confirm':
+      return (
+        <ReauthStep
+          title={t('signInSecurity.email.confirmTitle')}
+          description={t('signInSecurity.email.confirmDescription', { email: step.email })}
+          action="change_email"
+          allowPassword={hasPassword}
+          allowEmail={hasEmail}
+          totpEnabled={totpEnabled}
+          submitLabel={t('signInSecurity.email.save')}
+          validate={() =>
+            code.replace(/\D/g, '').length === EMAIL_CODE_LENGTH
+              ? null
+              : t('emailCode.errors.codeInvalid')
+          }
+          onSubmit={async (reauth) => {
+            await oxyServices.auth.email.change({
+              email: step.email,
+              verificationId: step.verificationId,
+              code: code.replace(/\D/g, ''),
+              reauth,
+            });
+            finish(t('signInSecurity.email.saved'));
+          }}
+          secondary={{ label: t('common.cancel'), onPress: () => setStep({ name: 'status' }) }}
+        >
+          <AccountFlowCodeField
+            label={t('signInSecurity.email.codeLabel')}
+            value={code}
+            onChange={setCode}
+            error={null}
+            length={EMAIL_CODE_LENGTH}
+            testID="email-new-code"
+          />
+          <SubtleLink
+            label={t('emailCode.resend')}
+            onPress={() => sendCode(step.email)}
+            disabled={pending}
+            testID="email-new-code-resend"
+          />
+          {error ? (
+            <AccountFlowNotice type="error" testID="email-new-code-error">
+              {error}
+            </AccountFlowNotice>
+          ) : null}
+        </ReauthStep>
+      );
+    case 'remove':
+      return (
+        <ReauthStep
+          title={t('signInSecurity.email.removeTitle')}
+          description={t('signInSecurity.email.removeDescription')}
+          action="change_email"
+          // Confirmed with the password it will rely on, never the mailbox it loses.
+          allowPassword
+          allowEmail={false}
+          totpEnabled={totpEnabled}
+          submitLabel={t('signInSecurity.email.remove')}
+          destructive
+          onSubmit={async (reauth) => {
+            await oxyServices.auth.email.remove(reauth);
+            finish(t('signInSecurity.email.removed'));
+          }}
+          secondary={{ label: t('common.cancel'), onPress: () => setStep({ name: 'status' }) }}
+        />
+      );
+    default:
+      return (
+        <OxyAuthScreen>
+          <OxyAuthScreenHeader
+            title={t('signInSecurity.email.title')}
+            description={
+              hasEmail
+                ? t('signInSecurity.email.description')
+                : t('signInSecurity.email.noneDescription')
+            }
+          />
+          {current ? <AccountFlowNote testID="email-current">{current}</AccountFlowNote> : null}
+          {!hasEmail ? (
+            <AccountFlowNotice type="warning" testID="email-none-warning">
+              {t('signInSecurity.noEmailWarning')}
+            </AccountFlowNotice>
+          ) : null}
+          <AccountFlowAction
+            label={hasEmail ? t('signInSecurity.email.change') : t('signInSecurity.email.add')}
+            onPress={() => {
+              setError(null);
+              setAddress('');
+              setStep({ name: 'address' });
+            }}
+            pending={false}
+            testID="email-change"
+          />
+          {hasEmail && hasPassword ? (
+            <SubtleLink
+              label={t('signInSecurity.email.remove')}
+              onPress={() => setStep({ name: 'remove' })}
+              testID="remove-email-link"
+            />
+          ) : null}
+          {hasEmail && !hasPassword ? (
+            <AccountFlowNote testID="email-remove-needs-password">
+              {t('signInSecurity.email.removeNeedsPassword')}
+            </AccountFlowNote>
+          ) : null}
+        </OxyAuthScreen>
+      );
+  }
+};