@oxy.so/services 4.0.6 → 6.0.0

package/lib/typescript/module/ui/session/authStore.d.ts

@@ -7,7 +7,6 @@
  * store shape + logic (`createWebAuthStateStore` / `createNativeAuthStateStore` /
  * `createMemoryAuthStateStore`); this module only selects the seam:
  *
- *  - `storage: 'ephemeral'` → `createMemoryAuthStateStore()`, on EVERY platform.
  *  - web  → `createWebAuthStateStore()` (localStorage, in-memory fallback).
  *  - native → `createNativeAuthStateStore(secureKV)` for the SESSION blob over
  *    the shared `createNativeSecureKeyValueStorage()` adapter
@@ -35,20 +34,6 @@ export interface PlatformAuthStateStoreOptions {
      * a decision a storage seam gets to make.
      */
     sessionMode?: SessionMode;
-    /**
-     * Whether this origin/app may persist a durable device credential AT ALL.
-     *
-     * `'ephemeral'` stores nothing durable and mirrors nothing: the session lives
-     * in memory for the lifetime of the page and is gone on reload. Its one caller
-     * is `auth.oxy.so` with the browser hub enabled (issue #937 Phase 5, ADR 0003),
-     * where the durable credential for the browser profile is the server-side
-     * DeviceSession behind the `__Host-oxy-device` handle.
-     *
-     * See `OxyProviderProps.deviceCredentialStorage` for why the answer to "let the
-     * hub be authoritative" is to stop persisting the other credential rather than
-     * to consult it second.
-     */
-    storage?: 'persistent' | 'ephemeral';
 }
 /**
  * Build the platform {@link AuthStateStore} for this runtime.
@@ -56,21 +41,6 @@ export interface PlatformAuthStateStoreOptions {
  * Native persists the SESSION blob (`deviceId` + `deviceSecret` + cached access
  * token) per-app in SecureStore; the SDK re-mints the access token from the
  * device credential on the next cold boot.
- *
- * ## The ephemeral check is FIRST, and the order is load-bearing
- *
- * It short-circuits above the `isReactNative()` branch so an ephemeral caller can
- * never reach the native path — and therefore can never reach the shared-slot
- * mirroring wrapper. Checked after that branch instead, an origin that has
- * declined to persist a credential would publish one into the device-wide slot
- * every sibling app adopts on cold boot: it would keep nothing itself while
- * deciding which session five other apps boot into.
- *
- * That is unreachable today because the only ephemeral caller is a web origin, so
- * `isReactNative()` is false there anyway. Unreachable today is exactly the kind
- * of guarantee that stops holding when someone adds the second caller, so it is
- * structural here rather than incidental, and
- * `__tests__/session/authStoreEphemeral.test.ts` holds the ordering directly.
  */
 export declare function createPlatformAuthStateStore(options?: PlatformAuthStateStoreOptions): AuthStateStore;
 //# sourceMappingURL=authStore.d.ts.map

package/lib/typescript/module/ui/session/authStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authStore.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/authStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAKtB,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,cAAc,CAiBhB"}
+{"version":3,"file":"authStore.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/authStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAKtB,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,cAAc,CAWhB"}

package/lib/typescript/module/ui/types/navigation.d.ts

@@ -126,32 +126,6 @@ export interface OxyProviderProps {
      * @default false
      */
     backgroundSession?: boolean;
-    /**
-     * Whether this origin/app may persist the durable device credential
-     * (`deviceId` + `deviceSecret`) at all.
-     *
-     * `'persistent'` (the default, and every app's behaviour) stores it — web
-     * localStorage per origin, SecureStore per app on native — so the SDK can
-     * re-mint an access token on the next cold boot.
-     *
-     * `'ephemeral'` stores NOTHING durable: the session lives in memory for the
-     * lifetime of the page and is gone on reload. It exists for ONE caller,
-     * `auth.oxy.so` with the browser hub enabled (issue #937 Phase 5, ADR 0003),
-     * where the durable credential for the browser profile is the server-side
-     * DeviceSession behind the `__Host-oxy-device` handle. Two durable
-     * credentials for one origin is the dual authority that phase exists to
-     * remove — revoking the hub while a localStorage secret still mints would
-     * make a sign-out look like it worked — so the way to let the hub be
-     * authoritative is to stop persisting the other one, not to consult it
-     * second.
-     *
-     * Do NOT reach for this to make an app "more private". A relying-party
-     * origin set to `'ephemeral'` simply signs the user out on every reload,
-     * because nothing else on that origin remembers the device.
-     *
-     * @default 'persistent'
-     */
-    deviceCredentialStorage?: 'persistent' | 'ephemeral';
     /**
      * Wires the app's OWN i18n library to Oxy's resolved language, so the
      * account (or, signed out, the device/guest locale) drives the app's

package/lib/typescript/module/ui/types/navigation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../../../../src/ui/types/navigation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAsB,CAAC;AAEtD,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAA+B,CAAC;AAEtE,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,MAAM,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAE5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACxE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAGrC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAGlC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACrD,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAGjE,aAAa,CAAC,EAAE,SAAS,CAAC;IAG1B,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAGnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IAMtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACtC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,uBAAuB,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACrD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAC9B,kEAAkE;IAClE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD"}
+{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../../../../src/ui/types/navigation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAsB,CAAC;AAEtD,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAA+B,CAAC;AAEtE,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,MAAM,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAE5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACxE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAGrC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAGlC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACrD,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAGjE,aAAa,CAAC,EAAE,SAAS,CAAC;IAG1B,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAGnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IAMtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACtC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAC9B,kEAAkE;IAClE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/services",
-  "version": "4.0.6",
+  "version": "6.0.0",
   "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -155,7 +155,7 @@
   },
   "dependencies": {
     "@expo/config-plugins": "57.0.9",
-    "@oxy.so/contracts": "^1.5.0",
+    "@oxy.so/contracts": "^2.0.0",
     "@simplewebauthn/browser": "^13.3.0",
     "color": "^4.2.3"
   },
@@ -164,7 +164,7 @@
     "@commitlint/cli": "^21.2.1",
     "@commitlint/config-conventional": "^21.2.0",
     "@expo/vector-icons": "^15.0.3",
-    "@oxy.so/core": "1.13.0",
+    "@oxy.so/core": "1.16.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": "^12.0.1",
     "@react-native/babel-preset": "^0.86.2",
@@ -179,7 +179,7 @@
     "@types/jest": "^30.0.0",
     "@types/node": "^20.19.43",
     "@types/react": "*",
-    "@oxy.so/bloom": "^4.21.1",
+    "@oxy.so/bloom": "^4.26.0",
     "copyfiles": "^2.4.1",
     "expo-constants": "~57.0.5",
     "expo-file-system": "~57.0.1",
@@ -215,8 +215,8 @@
   "//@oxy.so/bloom": "RE-RAISE THIS FLOOR ON EVERY BREAKING BLOOM RELEASE, in the same commit as the root package.json catalog entry and the code that requires it. The breaking position is the MAJOR, so `^3.0.1` means `>=3.0.1 <4.0.0`: 3.x minors are admitted on semver's additive promise, and Bloom 4.0.0 is refused until someone raises this deliberately. The CAP is the part that is load-bearing. An earlier revision of this key recorded the opposite trade -- an uncapped `>=` floor, accepted so that intentionally-breaking Bloom 0.x minors would not be blocked -- and that trade is closed by evidence rather than by preference: an unbounded range is exactly what let `bun install` pair this package with Bloom 1.0.0 and emit no warning at all, and 1.0.0 broke it four ways (a deleted provider, a renamed confirm option, a renamed Chip fill, and two REMOVED SUBPATHS that fail at bundle time, before any typecheck runs). A floor is a claim about what was measured; a cap is the claim that nothing beyond it was. RAISED TO 3.0.1 from `^2.1.0`. Bloom 3.0.0 breaks exactly two things -- `PageHeader` defaults to `presentation=\"floating\"` and stops hiding the title under `transparent`, and `Field disabled` now reaches the control that reads the field context -- and THIS PACKAGE IMPORTS NEITHER: it renders no `PageHeader` and no `Field`, and 3.0 removes no subpath (unlike 2.0.0, which is why that floor cost code changes and this one does not). Its six `transparent` occurrences are CSS colour values, not the PageHeader prop. The cap had to move rather than widen to a union, because leaving `^2.1.0` in place is what made `bun install` resolve a SECOND, nested Bloom 2.12.4 under this package for any app on Bloom 3 -- two copies of a library whose 3.0 contracts (`control-surface`, `TopEdgeProvider`, `ScrollOffsetProvider`) are React contexts, so a provider from one copy cannot be read by a consumer from the other. Mention's `oxyRuntimeCompatibility` test is what caught it; nothing in a typecheck can. RAISED AGAIN TO 3.2.0 from `^3.0.1`, for the same class of reason the 2.x note records, only in the other direction: 3.2.0 ADDS the per-glyph icon subpaths (`@oxy.so/bloom/icons/RiAtLine`) that this package's screens now import instead of the `@oxy.so/bloom/icons` barrel, and a missing subpath fails at bundle time, in the consumer's Metro, long after this package has typechecked and shipped. `^3.0.1` would have admitted Bloom 3.0.1 and 3.1.0, neither of which has those subpaths, so the floor is the only thing standing between a consumer and a red build. Nothing else about 3.1.0 or 3.2.0 is required here; the cap stays at the major. RAISED TO ^4.2.0: FollowButton now delegates its visuals to Bloom media-header FollowButton with loading, textStyle and large size; the new shared UI contracts require one Bloom4 context across Services and its consumer.",
   "peerDependencies": {
     "@expo/vector-icons": "^15.0.3",
-    "@oxy.so/bloom": "^4.21.1",
-    "@oxy.so/core": "^1.12.0",
+    "@oxy.so/bloom": "^4.26.0",
+    "@oxy.so/core": "^1.16.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": ">=11.4.1",
     "@tanstack/query-async-storage-persister": "^5.101",
@@ -253,9 +253,6 @@
     "nativewind": {
       "optional": true
     },
-    "react-native-css": {
-      "optional": true
-    },
     "expo-modules-core": {
       "optional": true
     },

package/src/assets/signIn/slide-1.jpg.d.ts

@@ -0,0 +1,3 @@
+/** An image: a URL under Vite, an asset id under Metro — either is an image source. */
+declare const asset: string | number;
+export default asset;

package/src/assets/signIn/slide-2.jpg.d.ts

@@ -0,0 +1,3 @@
+/** An image: a URL under Vite, an asset id under Metro — either is an image source. */
+declare const asset: string | number;
+export default asset;

package/src/assets/signIn/slide-3.jpg.d.ts

@@ -0,0 +1,3 @@
+/** An image: a URL under Vite, an asset id under Metro — either is an image source. */
+declare const asset: string | number;
+export default asset;

package/src/assets/signIn/slide-4.jpg.d.ts

@@ -0,0 +1,3 @@
+/** An image: a URL under Vite, an asset id under Metro — either is an image source. */
+declare const asset: string | number;
+export default asset;

package/src/index.ts

@@ -359,13 +359,22 @@ export { default as ProfileButton } from './ui/components/ProfileButton';
 export type { ProfileButtonProps } from './ui/components/ProfileButton';
 export type { AccountDialogMenuItem } from './ui/navigation/accountDialogManager';
 
-// The account switcher/sign-in/sign-up chooser WITHOUT dialog chrome — the
-// surface stack presents `OxyAccountDialogScreen` (which renders this) into
-// Bloom's `<Dialog>` for the normal in-app surface; exported directly so a bare
-// host (e.g. a future auth.oxy.so hub page) can mount the exact same chooser
-// with its own completion strategy.
-export { default as OxyAuthChooser } from './ui/components/OxyAuthChooser';
-export type { OxyAuthChooserProps } from './ui/components/OxyAuthChooser';
+// THE sign-in screens. The account dialog renders them, and so does every page
+// of the auth.oxy.so IdP: one implementation of what a person sees when they
+// sign in, create an account, or choose which account continues.
+export { OxySignInPanel } from './ui/components/signIn/OxySignInPanel';
+export type { OxySignInPanelProps } from './ui/components/signIn/OxySignInPanel';
+export { OxySignUpPanel } from './ui/components/signIn/OxySignUpPanel';
+export type { OxySignUpPanelProps } from './ui/components/signIn/OxySignUpPanel';
+export { OxyAccountPicker } from './ui/components/signIn/OxyAccountPicker';
+export type { OxyAccountPickerProps } from './ui/components/signIn/OxyAccountPicker';
+export {
+  OxyAuthScreen,
+  OxyAuthScreenHeader,
+  OxyAuthLoading,
+  OxyAuthTerms,
+} from './ui/components/signIn/OxyAuthScreen';
+export type { OxyAuthScreenHeaderProps } from './ui/components/signIn/OxyAuthScreen';
 
 // The in-flight "Sign in with Oxy" REQUEST surface — the route's primary visual,
 // the progress line, and the "Having trouble?" alternatives — as a purely

package/src/ui/components/FollowButton.tsx

@@ -12,6 +12,7 @@ import { useFollow, useFollowForButton } from '../hooks/useFollow';
 import { useFollowStore } from '../stores/followStore';
 import type { OxyServices, BulkFollowResult, BulkUnfollowResult } from '@oxy.so/core';
 import { useShallow } from 'zustand/react/shallow';
+import { describeFollowAllButton, describeFollowButton } from './followButtonAccessibility';
 
 const DEFAULT_FOLLOW_ALL_LABEL = 'Follow all';
 const DEFAULT_FOLLOWED_ALL_LABEL = 'Following';
@@ -32,6 +33,12 @@ interface FollowButtonBaseProps {
 export interface SingleFollowButtonProps extends FollowButtonBaseProps {
   userId: string;
   initiallyFollowing?: boolean;
+  /**
+   * The account's handle, with or without the `@`. A screen reader then hears
+   * "Following @nate" rather than a bare "Following"; omit it and the name
+   * still follows the state.
+   */
+  username?: string;
   userIds?: never;
 }
 
@@ -59,6 +66,7 @@ const FollowButtonInner = memo(function FollowButtonInner({
   userId,
   oxyServices,
   initiallyFollowing,
+  username,
   size = 'medium',
   onFollowChange,
   style,
@@ -106,6 +114,12 @@ const FollowButtonInner = memo(function FollowButtonInner({
   const isBusy = isLoading || !isKnown;
   const showFollowing = isKnown && isFollowing;
   const showSpinner = showLoadingState && isBusy;
+  const { accessibilityLabel, accessibilityHint } = describeFollowButton({
+    isKnown,
+    isFollowing: showFollowing,
+    isPending: isLoading,
+    username,
+  });
 
   return (
     <BloomFollowButton
@@ -117,6 +131,8 @@ const FollowButtonInner = memo(function FollowButtonInner({
       style={style}
       textStyle={textStyle}
       label={isKnown || showSpinner ? 'Follow' : ''}
+      accessibilityLabel={accessibilityLabel}
+      accessibilityHint={accessibilityHint}
     />
   );
 });
@@ -226,10 +242,19 @@ const FollowButtonMultiInner = memo(function FollowButtonMultiInner({
   }, [disabled, isLoading, allFollowing, followAllUsers, unfollowAllUsers, onFollowChange, onBulkFollow, onBulkUnfollow, preventParentActions]);
 
   const showSpinner = showLoadingState && isLoading;
+  const { accessibilityLabel, accessibilityHint } = describeFollowAllButton({
+    allFollowing,
+    isPending: Boolean(isLoading),
+    count: userIds.length,
+    followAllLabel,
+    followedAllLabel,
+  });
 
   return (
     <BloomFollowButton
       following={allFollowing}
+      accessibilityLabel={accessibilityLabel}
+      accessibilityHint={accessibilityHint}
       onFollowChange={() => { void handlePress(); }}
       label={followAllLabel}
       followingLabel={followedAllLabel}

package/src/ui/components/FollowTargetButton.tsx

@@ -385,6 +385,10 @@ export const FollowTargetButton = memo(function FollowTargetButton({
       following={isFollowing}
       label={isFollowing ? text.idle : label}
       followingLabel={label}
+      // The visible text says Following / Requested / Off here, but Bloom
+      // names the button by its idle label in every state. Name it by the
+      // state it shows (OxyHQ/oxy#1375 item 22).
+      accessibilityLabel={label}
       size={size}
       disabled={disabled || isUnknown}
       loading={isPending || isUnknown}

package/src/ui/components/OxyAccountDialogScreen.tsx

@@ -22,18 +22,15 @@
  */
 
 import type React from 'react';
-import { useCallback, useSyncExternalStore } from 'react';
+import { useCallback } from 'react';
 import { StyleSheet, View } from 'react-native';
-import type { AccountDialogSnapshot } from '@oxy.so/core';
 import { useOxy } from '../context/OxyContext';
 import { useI18n } from '../hooks/useI18n';
 import { useSurfaceHeader } from '../hooks/useSurfaceHeader';
 import type { BaseScreenProps } from '../types/navigation';
 import LogoText from './logo/LogoText';
 import OxyAuthChooser from './OxyAuthChooser';
-import { EMPTY_ACCOUNT_DIALOG_SNAPSHOT } from '../hooks/accountDialogSnapshot';
-
-type Translate = ReturnType<typeof useI18n>['t'];
+import { useAccountDialogSnapshot } from '../hooks/accountDialogSnapshot';
 
 /**
  * The account MENU's nav bar carries the Oxy wordmark instead of a title — the
@@ -60,25 +57,9 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   const { accountDialogController: controller, closeAccountDialog } = useOxy();
   const { t } = useI18n();
 
-  // A lightweight, header-only binding to the same controller `OxyAuthChooser`
-  // binds independently — cheap, and the established pattern here (
-  // `useDeviceSwitcher` also binds to this controller on its own).
-  const subscribe = useCallback(
-    (listener: () => void) => (controller ? controller.subscribe(listener) : () => undefined),
-    [controller],
-  );
-  const getSnapshot = useCallback(
-    () => (controller ? controller.getSnapshot() : EMPTY_ACCOUNT_DIALOG_SNAPSHOT),
-    [controller],
-  );
-  const snapshot = useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
+  const snapshot = useAccountDialogSnapshot(controller);
 
   const { view } = snapshot;
-  // Names the entry view "Add another account" rather than "Sign in" only when
-  // THIS app is signed in. Not the directory's size: the device can go on
-  // listing a shared identity (Commons') after the app signed out, and that
-  // titled a signed-out sheet "Add another account" (OxyHQ/oxy#1375 item 21).
-  const hasSignedInAccounts = snapshot.hasSession;
   // Where back leads is the CONTROLLER's answer (`snapshot.backView`), never a
   // table here: a host-side "back = accounts" assumed a signed-in origin and
   // opened the account menu for nobody on a signed-out Back from sign-up.
@@ -93,18 +74,15 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   // `closeAccountDialog` so the pop + state teardown stay in one place. Opened
   // cold (detached) it is the root frame → `canGoBack` is false → no back.
   const backsToHost = !showBack && (canGoBack?.() ?? false);
-  // The account MENU is branded, not titled: its nav bar carries the Oxy
-  // wordmark and no large title. The current account is named by the HERO block
-  // `OxyAuthChooser` renders under it (email + large avatar + greeting), never
-  // by the bar. Every OTHER view keeps the SHARED Dialog nav header the rest of
-  // the SDK uses — a large in-content title/subtitle that collapses into the bar
-  // on scroll — because their copy is informative.
-  const copy = view === 'accounts' ? null : headerCopy(view, hasSignedInAccounts, t);
+  // The sign-in and sign-up screens carry their own header — the Oxy mark and
+  // the large title auth.oxy.so shows — so the bar holds only the way back.
+  // The account MENU is branded with the wordmark (the hero under it names the
+  // account); the active request is titled, route-agnostically, because Oxy
+  // picks how it travels (issue #691).
 
   useSurfaceHeader({
-    titleContent: copy ? undefined : NAV_LOGO,
-    title: copy?.title,
-    subtitle: copy?.subtitle ?? undefined,
+    titleContent: view === 'accounts' ? NAV_LOGO : undefined,
+    title: view === 'qr' ? t('accountSwitcher.signInWithOxy') : undefined,
     onBack: showBack ? goBack : backsToHost ? closeAccountDialog : undefined,
   });
 
@@ -119,45 +97,6 @@ const OxyAccountDialogScreen: React.FC<BaseScreenProps> = ({ canGoBack }) => {
   );
 };
 
-// ---------------------------------------------------------------------------
-// Copy + helpers
-// ---------------------------------------------------------------------------
-
-function headerCopy(
-  view: Exclude<AccountDialogSnapshot['view'], 'accounts'>,
-  hasSignedInAccounts: boolean,
-  t: Translate,
-): { title: string; subtitle: string | null } {
-  switch (view) {
-    // The ACTIVE REQUEST. Its header is deliberately route-AGNOSTIC: Oxy picks
-    // the delivery route (QR here, a push to the user's phone, or opening
-    // Commons on this device — issue #691), so naming one of them in the bar
-    // would contradict the other two. The route-specific status line lives in
-    // the body, derived from `signIn.progress`, and is the only thing that
-    // describes HOW the request is travelling.
-    case 'qr':
-      return {
-        title: t('accountSwitcher.signInWithOxy') || 'Sign in with Oxy',
-        subtitle: null,
-      };
-    case 'signup':
-      return {
-        title: t('signup.title') || 'Create your account',
-        subtitle: t('signup.subtitle') || 'One identity for the whole ecosystem.',
-      };
-    default:
-      return hasSignedInAccounts
-        ? {
-            title: t('signin.addAccountTitle') || 'Add another account',
-            subtitle: t('signin.addAccountSubtitle') || 'Sign in with another account.',
-          }
-        : {
-            title: t('signin.title') || 'Sign in',
-            subtitle: t('signin.subtitle') || 'One identity for the whole ecosystem.',
-          };
-  }
-}
-
 /**
  * The screen gutter. In the Dialog's nav-header mode the surface adds NO content
  * padding of its own — the large title and each screen own theirs — so this must
@@ -169,7 +108,7 @@ const SCREEN_MARGIN = 20;
 const styles = StyleSheet.create({
   bodyContent: {
     paddingTop: 4,
-    paddingBottom: 4,
+    paddingBottom: 20,
     paddingHorizontal: SCREEN_MARGIN,
   },
 });

package/src/ui/components/OxyAuthChooser.tsx

@@ -15,17 +15,16 @@
  * responsibility each:
  *
  *  - `accounts` → `AccountsMenuView` — the signed-in Oxy account menu.
- *  - `add` / `signin` → `SignInEntryView` — ONE primary action, "Continue with
- *    Oxy" (issue #691, Phase 5). On WEB this view is transient: the flow
- *    auto-starts the instant the view is reached, because the request surface
- *    (a QR on an unknown desktop, "Check Commons on your phone" where Oxy could
- *    deliver) IS the primary route there, never something behind a second tap.
+ *  - `add` / `signin` → `OxySignInPanel` — THE sign-in screen, the one
+ *    auth.oxy.so renders too: the device's accounts, then "Continue with
+ *    Oxy" (on the web, auth.oxy.so's window over the app).
  *  - `qr` → `SignInRequestView` — the ACTIVE REQUEST: the controller-bound
  *    wiring over the shared, presentational `OxySignInRequestSurface` (the same
  *    component the auth.oxy.so IdP mounts from its OAuth-bound request). It maps
  *    `snapshot.signIn` onto that surface's props; alternatives stay behind
  *    "Having trouble?" until the chosen route reports `routeFailed`.
- *  - `signup` → `SignUpView` — account creation, Commons-first.
+ *  - `signup` → `OxySignUpPanel` — account creation: auth.oxy.so's window on
+ *    the web, Commons on native.
  *
  * Per-account color re-theming uses Bloom's `APP_COLOR_PRESETS` + `BloomColorScope`
  * (same visual language auth.oxy.so uses). Base theming is `useTheme()` + a
@@ -39,7 +38,7 @@ import { Linking, Platform } from 'react-native';
 import { toast } from '@oxy.so/bloom/toast';
 import { surfaces } from '@oxy.so/bloom/surfaces';
 import { useTheme } from '@oxy.so/bloom/theme';
-import { IDENTITY_WEB_ORIGIN, getNormalizedUserHandle, type User } from '@oxy.so/core';
+import { AUTH_WEB_ORIGIN, getNormalizedUserHandle, type OxyAuthScreen, type User } from '@oxy.so/core';
 import { useQueryClient } from '@tanstack/react-query';
 import { useOxy } from '../context/OxyContext';
 import { useDeviceSwitcher } from '../hooks/useDeviceSwitcher';
@@ -52,9 +51,7 @@ import { isWebBrowser } from '../utils/isWebBrowser';
 import { getCommonsAcquisitionUrl } from '../utils/commonsStoreLinks';
 import { useAccountStorageUsage } from '../hooks/queries/useServicesQueries';
 import AccountsMenuView from './authChooser/AccountsMenuView';
-import SignInEntryView from './authChooser/SignInEntryView';
 import SignInRequestView from './authChooser/SignInRequestView';
-import SignUpView from './authChooser/SignUpView';
 import { signInFailureMessage } from './authChooser/signInFailureMessage';
 import {
   resolveAccentHex,
@@ -66,9 +63,9 @@ import {
   type SignInAlternatives,
 } from './authChooser/types';
 import { EMPTY_ACCOUNT_DIALOG_SNAPSHOT } from '../hooks/accountDialogSnapshot';
+import { OxySignInPanel } from './signIn/OxySignInPanel';
+import { OxySignUpPanel } from './signIn/OxySignUpPanel';
 
-/** Commons' own identity-creation deep link (mirrors the `approve`/`attest`/`card` intents). */
-const COMMONS_CREATE_IDENTITY_URL = 'oxycommons://create-identity';
 /**
  * "Accounts by Oxy" management app — the canonical home for account settings,
  * data export, and storage management. The account-menu rows deep-link into it
@@ -90,12 +87,6 @@ const toastedFailureAttempt = new WeakMap<object, number>();
 export interface OxyAuthChooserProps {
   /** Called after a completed switch, sign-in, or sign-up. */
   onComplete?: () => void;
-  /**
-   * @deprecated No effect. The web sign-in entry no longer auto-starts a
-   * device-flow request: its primary action opens the identity origin
-   * (`id.oxy.so`) in a popup, which a browser only allows from a user gesture.
-   */
-  autoStartSignIn?: boolean;
 }
 
 /**
@@ -111,6 +102,7 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
     logout,
     openAvatarPicker,
     user,
+    continueOnAuth,
   } = useOxy();
   const theme = useTheme();
   const { t } = useI18n();
@@ -120,13 +112,23 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   // so the two switchers cannot drift.
   const { principals } = useDeviceSwitcher();
 
-  // Web sign-in and sign-up run at the identity origin (`id.oxy.so`), never
-  // on this page, whatever this page's origin: that is where the passkey
-  // ceremony can run for any app AND where the account's identity is created
-  // and kept sealed under the passkey (one identity, two carriers). Native has
-  // no passkey path: Commons owns identity there ('none').
+  // On the web every sign-in and sign-up runs in auth.oxy.so's window over the
+  // app (`continueOnAuth`): the passkey belongs to that origin, and the
+  // browser's session lives there, shared by every Oxy app. Native has no
+  // passkey path: Commons owns identity there ('none').
   const passkeyMode = useMemo<PasskeyMode>(() => (isWebBrowser() ? 'hub' : 'none'), []);
 
+  /** auth.oxy.so's window; this surface closes once it signs the app in. */
+  const openOnOxy = useCallback(
+    (screen: OxyAuthScreen) => {
+      void continueOnAuth(screen).then((result) => {
+        if (result.status === 'signed-in') onComplete?.();
+        else if (result.status === 'failed') toast.error(t('signin.errors.failed'));
+      });
+    },
+    [continueOnAuth, onComplete, t],
+  );
+
   // Bind the headless controller. `getSnapshot` returns a stable reference
   // between changes, so it is `useSyncExternalStore`-safe. Guard the no-provider
   // loading state (`controller` is `null`) with an inert store.
@@ -140,7 +142,8 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
       if (!controller) return () => undefined;
       const maybeToastSignInError = () => {
         const { signIn } = controller.getSnapshot();
-        if (signIn.phase !== 'error') return;
+        // The embedded QR's failures are its own to handle (it renews itself).
+        if (signIn.phase !== 'error' || signIn.inline) return;
         if (toastedFailureAttempt.get(controller) === signIn.attempt) return;
         toastedFailureAttempt.set(controller, signIn.attempt);
         const message = signInFailureMessage(signIn.failure, t);
@@ -363,18 +366,14 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   const alternatives = useMemo<SignInAlternatives>(
     () => ({
       passkeyAvailable: passkeyMode !== 'none',
-      // Called straight from the press: the popup opens before any await.
-      onSignInWithPasskey: () => void controller?.startPasskeyHubSignIn(),
+      // auth.oxy.so asserts the passkey, in its window.
+      onSignInWithPasskey: () => openOnOxy('signin'),
       onShowQr: () => void controller?.showQr(),
       onGetCommons: () => openExternal(getCommonsAcquisitionUrl(Platform.OS)),
-      // Web: the identity origin creates the account and its identity in the
-      // same window a sign-in uses. Native: Commons creates the identity.
-      onCreateAccount: () => {
-        if (passkeyMode === 'hub') void controller?.startPasskeyHubSignIn();
-        else controller?.startSignup();
-      },
+      // Web: the account is made on auth.oxy.so. Native: Commons makes it.
+      onCreateAccount: () => (passkeyMode === 'hub' ? openOnOxy('signup') : controller?.startSignup()),
     }),
-    [passkeyMode, controller, openExternal],
+    [passkeyMode, controller, openExternal, openOnOxy],
   );
 
   // Real storage usage for the account menu's "Oxy storage" block. Disabled
@@ -420,7 +419,7 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
       onSignOut: () => {
         void handleSignOut();
       },
-      onOpenIdentity: passkeyMode === 'hub' ? () => openUrl(`${IDENTITY_WEB_ORIGIN}/`) : undefined,
+      onOpenIdentity: passkeyMode === 'hub' ? () => openUrl(`${AUTH_WEB_ORIGIN}/identity`) : undefined,
       customItems: (consumerHooks?.menuItems ?? []).map((item) => ({
         ...item,
         onPress: () => {
@@ -462,29 +461,14 @@ const OxyAuthChooser: React.FC<OxyAuthChooserProps> = ({ onComplete }) => {
   }
 
   if (view === 'signup') {
-    return (
-      <SignUpView
-        snapshot={snapshot}
-        theme={theme}
-        t={t}
-        passkeyMode={passkeyMode}
-        onOpenHub={() => void controller.startPasskeyHubSignIn()}
-        onCreateIdentityInCommons={() => openExternal(COMMONS_CREATE_IDENTITY_URL)}
-        onGetCommons={alternatives.onGetCommons}
-        onBackToSignIn={() => controller.setView('signin')}
-      />
-    );
+    return <OxySignUpPanel onSignIn={() => controller.setView('signin')} onCreateOnWeb={() => openOnOxy('signup')} />;
   }
 
   return (
-    <SignInEntryView
-      snapshot={snapshot}
-      principals={principals}
-      theme={theme}
-      t={t}
-      handlers={handlers}
-      onContinueWithOxy={() => void controller.signInWithOxy()}
-      alternatives={alternatives}
+    <OxySignInPanel
+      host="dialog"
+      onSignedIn={() => onComplete?.()}
+      onCreateAccount={alternatives.onCreateAccount}
     />
   );
 };

package/src/ui/components/OxyProvider.tsx

@@ -90,7 +90,6 @@ const OxyProvider: FC<OxyProviderProps> = ({
     queryClient: providedQueryClient,
     requireAuth = 'off',
     backgroundSession = false,
-    deviceCredentialStorage = 'persistent',
     language,
 }) => {
 
@@ -240,7 +239,6 @@ const OxyProvider: FC<OxyProviderProps> = ({
                 sessionMode={sessionMode}
                 webAuthMode={webAuthMode}
                 backgroundSession={backgroundSession}
-                deviceCredentialStorage={deviceCredentialStorage}
                 platformStorage={platformStorage}
                 onAuthStateChange={onAuthStateChange as OxyRuntimeProviderProps['onAuthStateChange']}
             >