@oxyhq/app-preset 0.1.0

package/README.md

@@ -0,0 +1,107 @@
+# @oxyhq/app-preset
+
+The **Oxy distro of Expo** — the shared configuration every Oxy app (Mention,
+Homiio, Allo, accounts, Commons, …) used to copy-paste, centralized into one
+zero-build package. Apps replace four config-plugin entries, a hand-tuned Metro
+config, a Babel config, an ESLint config, a Tailwind CSS header, and three
+tsconfigs with a single dependency, and pick up ecosystem changes with a version
+bump instead of re-editing every repo.
+
+There is no build step: this package ships plain CommonJS config plus static CSS
+and JSON.
+
+## What it centralizes
+
+| Piece | Import | Replaces |
+| --- | --- | --- |
+| Config plugin | `['@oxyhq/app-preset', {}]` | `withSharedUserId` + iOS keychain entitlement + `expo-build-properties` + `@oxyhq/services/plugins/withSharedIdentityReader` |
+| Metro | `@oxyhq/app-preset/metro` | monorepo watch folders, block list, symlink + package-exports resolution, web-font/wasm asset exts, release minifier, NativeWind wrapper |
+| Babel | `@oxyhq/app-preset/babel` | `babel-preset-expo` + `module-resolver` + `react-native-worklets/plugin` |
+| ESLint | `@oxyhq/app-preset/eslint` | `eslint-config-expo/flat` + `dist/*` ignore |
+| CSS base | `@oxyhq/app-preset/base.css` | Tailwind v4 + NativeWind + Bloom design-token imports + SDK `@source` globs |
+| tsconfig | `@oxyhq/app-preset/tsconfig/{base,frontend,backend}.json` | the shared strict/composite TypeScript bases |
+
+## Usage
+
+### 1. Config plugin (`app.config.js` / `app.json`)
+
+```js
+plugins: [
+  // …app-specific plugins…
+  ['@oxyhq/app-preset', {}],
+]
+```
+
+This adds `android:sharedUserId="so.oxy.shared"`, the iOS
+`keychain-access-groups` entitlement (`$(AppIdentifierPrefix)group.so.oxy.shared`),
+the Oxy `expo-build-properties` defaults (iOS `deploymentTarget 16.4`; Android
+`compileSdk 36` / `targetSdk 35` / ProGuard + resource shrinking), and the
+`@oxyhq/services` shared-identity reader plugin (Android signature permission +
+`<queries>` for silent "Sign in with Oxy").
+
+Each piece is individually disableable and overridable:
+
+```js
+['@oxyhq/app-preset', {
+  sharedUserId: 'so.oxy.shared',        // false → skip android:sharedUserId
+  keychainGroup: 'group.so.oxy.shared', // false → skip iOS keychain entitlement
+  ios: { deploymentTarget: '17.0' },    // deep-merges over defaults; false → skip iOS build props
+  android: { targetSdkVersion: 34 },    // deep-merges over defaults; false → skip Android build props
+  sharedIdentityReader: true,           // false → skip @oxyhq/services reader plugin
+}]
+```
+
+### 2. Metro (`metro.config.js`)
+
+```js
+const { createOxyMetroConfig } = require('@oxyhq/app-preset/metro');
+
+module.exports = createOxyMetroConfig(__dirname, {
+  sharedTypesPackage: '@myapp/shared-types', // optional
+  cssInput: './global.css',                  // optional, this is the default
+});
+```
+
+### 3. Babel (`babel.config.js`)
+
+```js
+module.exports = require('@oxyhq/app-preset/babel');
+```
+
+### 4. ESLint (`eslint.config.js`)
+
+```js
+const oxyConfig = require('@oxyhq/app-preset/eslint');
+module.exports = [...oxyConfig];
+```
+
+### 5. CSS (`global.css`)
+
+```css
+@import "@oxyhq/app-preset/base.css";
+
+/* App-specific globs (later rules win on overlap): */
+@source "./app/**/*.{js,jsx,ts,tsx}";
+@source "./components/**/*.{js,jsx,ts,tsx}";
+```
+
+### 6. TypeScript (`tsconfig.json`)
+
+```jsonc
+// frontend
+{ "extends": "@oxyhq/app-preset/tsconfig/frontend.json", "compilerOptions": { "paths": { "@/*": ["./*"] } }, "include": ["**/*.ts", "**/*.tsx"] }
+// backend
+{ "extends": "@oxyhq/app-preset/tsconfig/backend.json", "compilerOptions": { "rootDir": "./", "outDir": "dist" }, "include": ["**/*.ts"] }
+```
+
+## Peer dependencies
+
+All peers are **optional** except `expo` — a piece's peer is only needed when you
+use that piece (e.g. `expo-build-properties` only when build properties are
+enabled, `eslint-config-expo` only for the ESLint config). The config plugin and
+factories throw a clear, actionable error if a required peer is missing.
+
+## Compatibility
+
+Requires **Expo SDK 56+**; validated against **Expo SDK 57 / React Native 0.86**
+(the current Oxy ecosystem target) via `test-app-expo`.

package/app.plugin.js

@@ -0,0 +1 @@
+module.exports = require('./plugin/withOxyAppPreset');

package/babel/index.js

@@ -0,0 +1,40 @@
+/**
+ * @oxyhq/app-preset — Babel config factory.
+ *
+ * The standard Babel config every Oxy Expo app shares: babel-preset-expo with
+ * `unstable_transformImportMeta`, the `@ → ./` module-resolver alias, and the
+ * `react-native-worklets/plugin` LAST (Reanimated 4 re-exports it — it must be
+ * the final plugin).
+ *
+ * Usage — a one-line babel.config.js:
+ *
+ *   module.exports = require('@oxyhq/app-preset/babel');
+ *
+ * The peer packages (`babel-preset-expo`, `babel-plugin-module-resolver`,
+ * `react-native-worklets`) resolve from the consuming app's node_modules, where
+ * Expo already installs them.
+ *
+ * @param {import('@babel/core').ConfigAPI} api
+ * @returns {import('@babel/core').TransformOptions}
+ */
+module.exports = function oxyBabelPreset(api) {
+  api.cache(true);
+  return {
+    presets: [
+      ['babel-preset-expo', { unstable_transformImportMeta: true }],
+    ],
+    plugins: [
+      // The module-resolver must come first for correct module resolution.
+      [
+        'module-resolver',
+        {
+          root: ['./'],
+          alias: { '@': './' },
+          extensions: ['.ts', '.tsx', '.js', '.jsx', '.json', '.svg'],
+        },
+      ],
+      // Must be LAST.
+      'react-native-worklets/plugin',
+    ],
+  };
+};

package/css/base.css

@@ -0,0 +1,32 @@
+/* @oxyhq/app-preset — Tailwind v4 + NativeWind base stylesheet.
+ *
+ * The shared CSS header every Oxy Expo app used to copy-paste: the Tailwind v4
+ * layer imports, NativeWind's theme, and Bloom's canonical design tokens
+ * (RADIUS scale, spacing, typography, color aliases — the single source of
+ * truth generated from `bloomThemeCss()`), plus the `@source` globs that scan
+ * the Oxy SDK packages for class names.
+ *
+ * Import it at the TOP of the app's global.css, then add the app-specific
+ * `@source` globs and `@theme` overrides below it (later rules win on overlap):
+ *
+ *   @import "@oxyhq/app-preset/base.css";
+ *
+ *   @source "./app/**\/*.{js,jsx,ts,tsx}";
+ *   @source "./components/**\/*.{js,jsx,ts,tsx}";
+ *
+ * The SDK `@source` globs below are RELATIVE TO THIS FILE's location. Published,
+ * this file lives at `node_modules/@oxyhq/app-preset/css/base.css`, so
+ * `../../services/lib` resolves to `node_modules/@oxyhq/services/lib` and
+ * `../../bloom/lib` to `node_modules/@oxyhq/bloom/lib` — @oxyhq/app-preset,
+ * @oxyhq/services and @oxyhq/bloom are siblings under `@oxyhq/`. The same two
+ * levels up land on `packages/` in the source monorepo, so the globs resolve in
+ * both layouts without each app guessing its own node_modules path. */
+
+@import "tailwindcss/theme.css" layer(theme);
+@import "tailwindcss/preflight.css" layer(base);
+@import "tailwindcss/utilities.css";
+@import "nativewind/theme";
+@import "@oxyhq/bloom/design-tokens/theme.css";
+
+@source "../../services/lib/**/*.{js,jsx}";
+@source "../../bloom/lib/**/*.{js,jsx}";

package/eslint/index.js

@@ -0,0 +1,23 @@
+/**
+ * @oxyhq/app-preset — flat ESLint config.
+ *
+ * `eslint-config-expo/flat` plus the shared `dist/*` ignore. Consumers spread
+ * it and append their own rules:
+ *
+ *   const oxyConfig = require('@oxyhq/app-preset/eslint');
+ *   module.exports = [...oxyConfig];
+ *
+ * `eslint` and `eslint-config-expo` resolve from the consuming app's
+ * node_modules (both are optional peers of the preset).
+ *
+ * @type {import('eslint').Linter.Config[]}
+ */
+const { defineConfig } = require('eslint/config');
+const expoConfig = require('eslint-config-expo/flat');
+
+module.exports = defineConfig([
+  expoConfig,
+  {
+    ignores: ['dist/*'],
+  },
+]);

package/metro/index.js

@@ -0,0 +1,148 @@
+/**
+ * @oxyhq/app-preset — Metro config factory.
+ *
+ * Lifts the shared Metro configuration every Oxy Expo app used to copy-paste:
+ * monorepo watch folders, the block list, symlink + package-exports resolution
+ * (required by @oxyhq/bloom's subpath exports), the web-font/wasm asset
+ * extensions, the release minifier tuning, and the NativeWind wrapper.
+ *
+ * Usage — a three-line metro.config.js:
+ *
+ *   const { createOxyMetroConfig } = require('@oxyhq/app-preset/metro');
+ *   module.exports = createOxyMetroConfig(__dirname, {
+ *     sharedTypesPackage: '@myapp/shared-types',
+ *   });
+ *
+ * @param {string} projectRoot Absolute path to the app package (pass `__dirname`).
+ * @param {object} [options]
+ * @param {string} [options.sharedTypesPackage] Bare name of the app's
+ *   `packages/shared-types` workspace package. When set, it is aliased to the
+ *   monorepo `packages/shared-types` dir and its `src` is added to the block
+ *   list (so Metro never bundles the un-built TypeScript source).
+ * @param {string} [options.cssInput='./global.css'] NativeWind CSS entry point.
+ * @param {(string|RegExp)[]} [options.extraBlockList=[]] Extra Metro
+ *   `blockList` patterns appended to the Oxy defaults.
+ * @returns {import('metro-config').MetroConfig}
+ */
+const { getDefaultConfig } = require('expo/metro-config');
+const { withNativeWind } = require('nativewind/metro');
+const path = require('path');
+
+function blockPath(dir) {
+  const resolved = path.resolve(dir);
+  return new RegExp(`${resolved.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}/.*`);
+}
+
+function createOxyMetroConfig(projectRoot, options = {}) {
+  const {
+    sharedTypesPackage,
+    cssInput = './global.css',
+    extraBlockList = [],
+  } = options;
+
+  const monorepoRoot = path.resolve(projectRoot, '../..');
+  const config = getDefaultConfig(projectRoot);
+
+  config.projectRoot = projectRoot;
+
+  // Include the monorepo root so Metro resolves hoisted deps in root node_modules/.
+  config.watchFolders = [monorepoRoot];
+
+  const blockList = [
+    blockPath(path.join(monorepoRoot, 'packages/backend')),
+    blockPath(path.join(monorepoRoot, 'docs')),
+    /\.expo\/.*/,
+    /\.expo-shared\/.*/,
+    /\.metro\/.*/,
+    /\.cache\/.*/,
+    /node_modules\/\.cache\/.*/,
+    /\.tsbuildinfo$/,
+    /.*\.expo\/types\/.*/,
+    /__tests__\/.*/,
+    /\.test\.(js|ts|tsx|jsx)$/,
+    /\.spec\.(js|ts|tsx|jsx)$/,
+    /\.md$/,
+    /README/,
+    ...extraBlockList,
+  ];
+
+  const extraNodeModules = {};
+  if (sharedTypesPackage) {
+    const sharedTypesDir = path.join(monorepoRoot, 'packages/shared-types');
+    blockList.push(blockPath(path.join(sharedTypesDir, 'src')));
+    extraNodeModules[sharedTypesPackage] = sharedTypesDir;
+  }
+
+  config.resolver = {
+    ...config.resolver,
+    blockList,
+    extraNodeModules: {
+      ...config.resolver.extraNodeModules,
+      ...extraNodeModules,
+    },
+    // Resolve from the app's node_modules first, then the monorepo root (hoisted deps).
+    nodeModulesPaths: [
+      path.join(projectRoot, 'node_modules'),
+      path.join(monorepoRoot, 'node_modules'),
+    ],
+    // Enable symlinks for workspace resolution.
+    unstable_enableSymlinks: true,
+    // Enable package.json "exports" resolution (required by @oxyhq/bloom subpath exports).
+    unstable_enablePackageExports: true,
+    sourceExts: [...config.resolver.sourceExts, 'ts', 'tsx'],
+    // Bloom imports `.woff2`/`.woff` fonts directly from JS on web; Metro does not
+    // include them in default assetExts, and svg is handled by the transformer.
+    assetExts: [
+      ...config.resolver.assetExts.filter((ext) => ext !== 'svg'),
+      'wasm',
+      'woff2',
+      'woff',
+    ],
+  };
+
+  config.transformer = {
+    ...config.transformer,
+    minifierConfig: {
+      ...config.transformer?.minifierConfig,
+      keep_classnames: false,
+      keep_fnames: false,
+      mangle: {
+        keep_classnames: false,
+        keep_fnames: false,
+      },
+      output: {
+        ascii_only: true,
+        quote_style: 3,
+        wrap_iife: true,
+      },
+      sourceMap: {
+        includeSources: false,
+      },
+      toplevel: false,
+      compress: {
+        arguments: true,
+        dead_code: true,
+        drop_console: false,
+        drop_debugger: true,
+        ecma: 2020,
+        evaluate: true,
+        inline: 1,
+        passes: 3,
+        reduce_funcs: true,
+        reduce_vars: true,
+        unsafe: false,
+        unsafe_comps: false,
+        unsafe_math: false,
+        unsafe_methods: false,
+      },
+    },
+  };
+
+  return withNativeWind(config, {
+    input: cssInput,
+    inlineRem: 16,
+    inlineVariables: false,
+  });
+}
+
+module.exports = { createOxyMetroConfig };

package/package.json

@@ -0,0 +1,105 @@
+{
+  "name": "@oxyhq/app-preset",
+  "version": "0.1.0",
+  "description": "The Oxy distro of Expo — centralized Expo config plugin, Metro/Babel/ESLint factories, Tailwind base CSS and TypeScript bases shared by every Oxy app (Mention, Homiio, Allo, accounts, …). A zero-build package: apps replace copy-pasted config with a single dependency bump.",
+  "main": "./app.plugin.js",
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": "./app.plugin.js",
+    "./app.plugin.js": "./app.plugin.js",
+    "./plugin/withOxyAppPreset": "./plugin/withOxyAppPreset.js",
+    "./plugin/withSharedUserId": "./plugin/withSharedUserId.js",
+    "./plugin/withOxyKeychain": "./plugin/withOxyKeychain.js",
+    "./plugin/withOxyBuildProperties": "./plugin/withOxyBuildProperties.js",
+    "./metro": "./metro/index.js",
+    "./babel": "./babel/index.js",
+    "./eslint": "./eslint/index.js",
+    "./base.css": "./css/base.css",
+    "./css/base.css": "./css/base.css",
+    "./tsconfig/base.json": "./tsconfig/base.json",
+    "./tsconfig/frontend.json": "./tsconfig/frontend.json",
+    "./tsconfig/backend.json": "./tsconfig/backend.json",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "app.plugin.js",
+    "plugin",
+    "metro",
+    "babel",
+    "eslint",
+    "css",
+    "tsconfig",
+    "README.md"
+  ],
+  "keywords": [
+    "oxyhq",
+    "expo",
+    "react-native",
+    "config-plugin",
+    "metro",
+    "babel",
+    "nativewind",
+    "preset"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/oxyhq/sdk",
+    "directory": "packages/app-preset"
+  },
+  "author": "OxyHQ",
+  "license": "MIT",
+  "homepage": "https://oxy.so",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "test": "echo \"@oxyhq/app-preset is a zero-build config package — no unit tests\" && exit 0"
+  },
+  "peerDependencies": {
+    "@oxyhq/bloom": "*",
+    "@oxyhq/services": "*",
+    "babel-plugin-module-resolver": "*",
+    "babel-preset-expo": "*",
+    "eslint": ">=9.0.0",
+    "eslint-config-expo": "*",
+    "expo": ">=56.0.0",
+    "expo-build-properties": "*",
+    "nativewind": ">=5.0.0-preview.0",
+    "react-native-worklets": "*",
+    "tailwindcss": ">=4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@oxyhq/bloom": {
+    "optional": true
+  },
+  "@oxyhq/services": {
+  "optional": true
+},
+"babel-plugin-module-resolver": {
+"optional": true
+},
+"babel-preset-expo": {
+"optional": true
+},
+"eslint": {
+"optional": true
+},
+"eslint-config-expo": {
+"optional": true
+},
+"expo-build-properties": {
+"optional": true
+},
+"nativewind": {
+"optional": true
+},
+"react-native-worklets": {
+"optional": true
+},
+"tailwindcss": {
+"optional": true
+}
+}
+}

package/plugin/withOxyAppPreset.js

@@ -0,0 +1,74 @@
+/**
+ * Expo Config Plugin: withOxyAppPreset
+ *
+ * The single config-plugin entry every Oxy app adds in place of the four
+ * copy-pasted plugin entries (`withSharedUserId`, keychain entitlement,
+ * `expo-build-properties`, `@oxyhq/services/plugins/withSharedIdentityReader`).
+ *
+ * In app.config.js / app.json:
+ *
+ *   plugins: [
+ *     // …app-specific plugins…
+ *     ['@oxyhq/app-preset', {}],
+ *   ]
+ *
+ * Each piece is individually disableable by passing its option as `false`:
+ *
+ *   ['@oxyhq/app-preset', {
+ *     sharedUserId: 'so.oxy.shared',        // false → skip android:sharedUserId
+ *     keychainGroup: 'group.so.oxy.shared', // false → skip iOS keychain entitlement
+ *     ios: { deploymentTarget: '17.0' },    // false → skip iOS build properties
+ *     android: { targetSdkVersion: 34 },    // false → skip Android build properties
+ *     sharedIdentityReader: true,           // false → skip @oxyhq/services reader plugin
+ *   }]
+ *
+ * @param {import('expo/config').ExpoConfig} config
+ * @param {object} [options]
+ * @param {string|false} [options.sharedUserId='so.oxy.shared']
+ * @param {string|false} [options.keychainGroup='group.so.oxy.shared']
+ * @param {object|false}  [options.ios]
+ * @param {object|false}  [options.android]
+ * @param {boolean}       [options.sharedIdentityReader=true]
+ */
+const withSharedUserId = require('./withSharedUserId');
+const withOxyKeychain = require('./withOxyKeychain');
+const withOxyBuildProperties = require('./withOxyBuildProperties');
+
+module.exports = function withOxyAppPreset(config, options = {}) {
+  const {
+    sharedUserId = 'so.oxy.shared',
+    keychainGroup = 'group.so.oxy.shared',
+    ios = {},
+    android = {},
+    sharedIdentityReader = true,
+  } = options;
+
+  let next = config;
+
+  if (sharedUserId !== false) {
+    next = withSharedUserId(next, sharedUserId);
+  }
+
+  if (keychainGroup !== false) {
+    next = withOxyKeychain(next, keychainGroup);
+  }
+
+  if (ios !== false || android !== false) {
+    next = withOxyBuildProperties(next, { ios, android });
+  }
+
+  if (sharedIdentityReader !== false) {
+    let withSharedIdentityReader;
+    try {
+      withSharedIdentityReader = require('@oxyhq/services/plugins/withSharedIdentityReader');
+    } catch (error) {
+      throw new Error(
+        "[@oxyhq/app-preset] sharedIdentityReader is enabled but the peer dependency '@oxyhq/services' "
+          + 'is not installed. Install it, or pass `{ sharedIdentityReader: false }` to the preset.',
+      );
+    }
+    next = withSharedIdentityReader(next);
+  }
+
+  return next;
+};

package/plugin/withOxyBuildProperties.js

@@ -0,0 +1,88 @@
+/**
+ * Expo Config Plugin: withOxyBuildProperties
+ *
+ * Wraps `expo-build-properties` with the native build defaults every Oxy app
+ * ships with — iOS deployment target and the Android SDK / minification knobs —
+ * so apps stop copy-pasting the same `expo-build-properties` block. Caller
+ * overrides deep-merge over these defaults.
+ *
+ * `expo-build-properties` is required lazily (it is an optional peer): a missing
+ * install throws a clear, actionable error only when this plugin actually runs
+ * with build properties enabled.
+ *
+ * @param {import('expo/config').ExpoConfig} config
+ * @param {object} [options]
+ * @param {object|false} [options.ios]     iOS overrides, or `false` to skip iOS.
+ * @param {object|false} [options.android] Android overrides, or `false` to skip Android.
+ */
+const DEFAULTS = {
+  ios: {
+    deploymentTarget: '16.4',
+  },
+  android: {
+    compileSdkVersion: 36,
+    targetSdkVersion: 35,
+    buildToolsVersion: '36.0.0',
+    enableProguardInReleaseBuilds: true,
+    enableShrinkResourcesInReleaseBuilds: true,
+    useLegacyPackaging: false,
+  },
+};
+
+function isPlainObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function deepMerge(base, override) {
+  if (!isPlainObject(override)) {
+    return base;
+  }
+  const result = { ...base };
+  for (const [key, value] of Object.entries(override)) {
+    result[key] = isPlainObject(value) && isPlainObject(result[key])
+      ? deepMerge(result[key], value)
+      : value;
+  }
+  return result;
+}
+
+function resolveBuildPropertiesPlugin() {
+  let mod;
+  try {
+    mod = require('expo-build-properties');
+  } catch (error) {
+    throw new Error(
+      "[@oxyhq/app-preset] withOxyBuildProperties requires the peer dependency 'expo-build-properties'. "
+        + "Install it with `npx expo install expo-build-properties`, or disable it by passing "
+        + '`{ ios: false, android: false }` to the preset.',
+    );
+  }
+  const plugin = typeof mod === 'function' ? mod : mod.withBuildProperties || mod.default;
+  if (typeof plugin !== 'function') {
+    throw new Error(
+      "[@oxyhq/app-preset] Could not resolve the 'expo-build-properties' config plugin from the installed package.",
+    );
+  }
+  return plugin;
+}
+
+module.exports = function withOxyBuildProperties(config, options = {}) {
+  const { ios = {}, android = {} } = options;
+
+  if (ios === false && android === false) {
+    return config;
+  }
+
+  const props = {};
+  if (ios !== false) {
+    props.ios = deepMerge(DEFAULTS.ios, ios);
+  }
+  if (android !== false) {
+    props.android = deepMerge(DEFAULTS.android, android);
+  }
+
+  const withBuildProperties = resolveBuildPropertiesPlugin();
+  return withBuildProperties(config, props);
+};
+
+module.exports.DEFAULTS = DEFAULTS;

package/plugin/withOxyKeychain.js

@@ -0,0 +1,35 @@
+/**
+ * Expo Config Plugin: withOxyKeychain
+ *
+ * Adds an iOS `keychain-access-groups` entitlement so Oxy apps signed with the
+ * same Team ID can share Keychain items — the iOS half of "sign in once, use
+ * everywhere" (the Android half is withSharedUserId + the shared-identity
+ * native module). The group is prefixed with `$(AppIdentifierPrefix)` so Xcode
+ * expands it to the Team ID at build time.
+ *
+ * Merge-not-overwrite: if the app (or another plugin, e.g. expo-build-properties)
+ * already declared keychain-access-groups, the Oxy group is appended without
+ * dropping the existing entries.
+ *
+ * @param {import('expo/config').ExpoConfig} config
+ * @param {string} [keychainGroup='group.so.oxy.shared'] The keychain group,
+ *   without the `$(AppIdentifierPrefix)` prefix.
+ */
+const { withEntitlementsPlist } = require('expo/config-plugins');
+
+module.exports = function withOxyKeychain(config, keychainGroup = 'group.so.oxy.shared') {
+  const entry = `$(AppIdentifierPrefix)${keychainGroup}`;
+
+  return withEntitlementsPlist(config, (config) => {
+    const key = 'keychain-access-groups';
+    const existing = config.modResults[key];
+    const groups = Array.isArray(existing) ? [...existing] : [];
+
+    if (!groups.includes(entry)) {
+      groups.push(entry);
+    }
+
+    config.modResults[key] = groups;
+    return config;
+  });
+};

package/plugin/withSharedUserId.js

@@ -0,0 +1,36 @@
+/**
+ * Expo Config Plugin: withSharedUserId
+ *
+ * Adds android:sharedUserId to AndroidManifest.xml to enable cross-app data
+ * sharing between Oxy apps (Mention, Homiio, accounts, Commons, …).
+ *
+ * This allows:
+ * - Shared cryptographic identity storage
+ * - Cross-app authentication (sign in once, use everywhere)
+ * - Shared session tokens
+ *
+ * IMPORTANT:
+ * - All Oxy apps MUST use the same sharedUserId: "so.oxy.shared"
+ * - Apps MUST be signed with the same certificate
+ * - Cannot change sharedUserId after publishing (requires reinstall)
+ *
+ * @see https://developer.android.com/guide/topics/manifest/manifest-element#uid
+ *
+ * @param {import('expo/config').ExpoConfig} config
+ * @param {string} [sharedUserId='so.oxy.shared'] The android:sharedUserId value.
+ */
+const { withAndroidManifest } = require('expo/config-plugins');
+
+module.exports = function withSharedUserId(config, sharedUserId = 'so.oxy.shared') {
+  return withAndroidManifest(config, async (config) => {
+    const androidManifest = config.modResults.manifest;
+
+    // Add sharedUserId to the manifest root element
+    androidManifest.$ = {
+      ...androidManifest.$,
+      'android:sharedUserId': sharedUserId,
+    };
+
+    return config;
+  });
+};

package/tsconfig/backend.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "//": "@oxyhq/app-preset — Node/Bun backend TypeScript config. Compiled with tsc to dist/ (CommonJS) and THAT emitted output is what the Docker/ECS image runs — module format and emit layout are a runtime contract. Overrides the Oxy base only where this becomes an emitting CommonJS Node service. Consumers set their own `rootDir`/`outDir`/`include` (and `paths` to resolve workspace deps from source during type-check).",
+  "extends": "./base.json",
+  "compilerOptions": {
+    "module": "commonjs",
+    "moduleResolution": "node",
+    "noEmit": false,
+    "declaration": true
+  }
+}

package/tsconfig/base.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "//": "@oxyhq/app-preset — shared, runtime-neutral TypeScript base. The strict/safety defaults every Oxy package inherits. This base is TYPE-CHECK ONLY (noEmit): the frontend (tsconfig/frontend.json) and emitting Node packages (tsconfig/backend.json) override module/target/emit for their runtime. Does NOT extend expo/tsconfig.base — that sets customConditions:[\"react-native\"], only valid with bundler/nodenext resolution, which would break the CJS/node packages. The frontend config layers the Expo base on top where bundler resolution is in effect.",
+  "compilerOptions": {
+    "target": "ES2020",
+    "lib": ["ES2020"],
+    "module": "ES2020",
+    "moduleResolution": "bundler",
+
+    "strict": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+
+    "composite": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+
+    "noEmit": true
+  },
+  "exclude": [
+    "node_modules",
+    "**/node_modules",
+    "**/dist",
+    "**/build",
+    "**/.expo"
+  ]
+}

package/tsconfig/frontend.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "//": "@oxyhq/app-preset — Expo / React Native frontend TypeScript config. Not compiled by tsc (Metro/Expo bundles the source); tsc is only for type-checking. Extends BOTH the Oxy base (strict/composite defaults) AND expo/tsconfig.base (React-Native JSX, customConditions:[\"react-native\"], bundler resolution). Later entries win, so the Expo base overrides the Oxy base where they differ; the explicit overrides below win over both. Consumers extend this and add their own `paths` (e.g. \"@/*\") + `include`.",
+  "extends": ["./base.json", "expo/tsconfig.base"],
+  "compilerOptions": {
+    "jsx": "react-native",
+    "strict": true,
+    "composite": true,
+    "noEmit": false
+  }
+}