@oxyhq/core 12.1.0 → 12.2.0

package/dist/types/index.d.ts

@@ -99,7 +99,7 @@ export { deviceStateToClientSessions, activeSessionIdOf, activeUserOf, accountId
 export { projectSwitchableAccounts, switchableAccountIds, } from './session/accountProjection';
 export type { SwitchableAccount, SwitchableAccountUser, ProjectSwitchableAccountsInput, } from './session/accountProjection';
 export { AccountDialogController, createAccountDialogController, } from './session/accountDialogController';
-export type { AccountDialogControllerOptions, AccountDialogSnapshot, AccountDialogView, CommonsAvailability, SignInFlowPhase, SignInFlowState, } from './session/accountDialogController';
+export type { AccountDialogControllerOptions, AccountDialogSnapshot, AccountDialogView, CommonsAvailability, PopupWindowHandle, SignInFlowPhase, SignInFlowState, } from './session/accountDialogController';
 export { createWebAuthStateStore, createNativeAuthStateStore, createMemoryAuthStateStore, AUTH_STATE_STORAGE_KEY, } from './session/authStateStore';
 export type { PersistedAuthState, AuthStateStore, NativeKeyValueStorage, } from './session/authStateStore';
 export { refreshPersistedSession, refreshDeviceSecretArm, createAuthRefreshHandler, installAuthRefreshHandler, startTokenRefreshScheduler, TOKEN_REFRESH_LEAD_MS, } from './session/refresh';

package/dist/types/session/accountDialogController.d.ts

@@ -24,6 +24,12 @@
  *   - `commonsAvailability` — whether Commons is installed on this device
  *     (native only, via the injected `canOpenApp` probe), so the QR view can
  *     offer a "Get Commons" fallback instead of a same-device dead end.
+ *   - `startPasskeyHubSignIn` — on a non-Oxy web origin (where a WebAuthn
+ *     ceremony can't run locally, the RP-ID is bound to oxy.so), open a popup
+ *     at the auth.oxy.so passkey hub instead, scoped to the SAME device-flow
+ *     session `showQr` creates, and complete it via the SAME poll/socket/claim
+ *     engine. Falls back to `showQr`'s plain QR rendering if the popup is
+ *     blocked.
  *
  * Sign-in is passkey (WebAuthn) or the Commons QR / shared-keychain handoff —
  * password, social login, and 2FA were removed ecosystem-wide. Account
@@ -51,6 +57,21 @@ export type AccountDialogView = 'accounts' | 'signin' | 'qr' | 'add' | 'signup';
 export type CommonsAvailability = 'unknown' | 'checking' | 'available' | 'unavailable';
 /** Lifecycle phase of the "Sign in with Oxy" device flow. */
 export type SignInFlowPhase = 'idle' | 'starting' | 'waiting' | 'authorized' | 'error';
+/**
+ * Minimal structural handle over a popup `Window` — just enough for the
+ * cross-origin passkey hub flow ({@link AccountDialogController.startPasskeyHubSignIn}):
+ * navigate it once the device-flow session's `authorizeCode` is known, detect
+ * the user closing it early (`closed`), and close it programmatically on
+ * completion/failure. Satisfied directly by `window.open()`'s return value on
+ * web; native has no popup concept and never injects an opener.
+ */
+export interface PopupWindowHandle {
+    readonly closed: boolean;
+    close(): void;
+    location: {
+        href: string;
+    };
+}
 /** State of the "Sign in with Oxy" (shared-key / QR) device flow. */
 export interface SignInFlowState {
     phase: SignInFlowPhase;
@@ -166,6 +187,20 @@ export interface AccountDialogControllerOptions {
      * `showQr` behaves exactly as before (render QR only).
      */
     canOpenApp?: (url: string) => Promise<boolean>;
+    /**
+     * Open a new, empty popup window SYNCHRONOUSLY (before any `await`) so the
+     * browser attributes it to the click gesture that triggered it, returning a
+     * handle to navigate once the device-flow session is known — or `null` if
+     * the popup was blocked. Injected by the provider (web only:
+     * `window.open('', ...)`; absent on native, where the hub-popup flow does
+     * not apply). Used by {@link AccountDialogController.startPasskeyHubSignIn}.
+     */
+    openPopup?: () => PopupWindowHandle | null;
+    /**
+     * Base origin of the auth.oxy.so passkey hub (defaults to
+     * `https://auth.${CENTRAL_IDP_APEX}`). Overridable for local/staging testing.
+     */
+    hubBaseUrl?: string;
 }
 type SnapshotListener = (snapshot: AccountDialogSnapshot) => void;
 export declare class AccountDialogController {
@@ -180,6 +215,8 @@ export declare class AccountDialogController {
     private readonly openUrl?;
     private readonly canOpenApp?;
     private readonly socketFactory?;
+    private readonly openPopup?;
+    private readonly hubBaseUrl;
     private readonly listeners;
     private view;
     private graph;
@@ -204,6 +241,10 @@ export declare class AccountDialogController {
      * single-use token concurrently.
      */
     private pollInFlight;
+    /** The popup opened by {@link startPasskeyHubSignIn}, or `null`. */
+    private activePopup;
+    /** Watches {@link activePopup}'s `closed` state; see {@link watchPopup}. */
+    private popupWatchTimer;
     private unsubscribeSession;
     private unsubscribeTokens;
     /** Last-observed SDK auth readiness (a planted bearer). Drives the fetch edge. */
@@ -303,6 +344,45 @@ export declare class AccountDialogController {
      * session committed. Requires `clientId`.
      */
     showQr(): Promise<void>;
+    /**
+     * Web-only: "Sign in with a passkey" on a non-Oxy origin cannot run the
+     * WebAuthn ceremony locally — a credential minted with `WEBAUTHN_RP_ID=oxy.so`
+     * can only be asserted from `oxy.so`/a subdomain/loopback, a browser-enforced
+     * boundary `isOxyRpOrigin()` (consumer-side) already gates on. Instead, open
+     * a popup at the auth.oxy.so passkey hub, scoped to the SAME device-flow
+     * session {@link showQr} would create (same `authorizeCode`/`sessionToken`
+     * pair), and let the SAME poll/socket/claim engine complete it once the hub
+     * authorizes the session (`POST /auth/session/authorize-code/:authorizeCode`,
+     * bearer-authed, server-side — this method never sees or transmits the
+     * secret `sessionToken`).
+     *
+     * The popup MUST be opened synchronously, before any `await`, or the
+     * browser's popup blocker loses the click-gesture attribution and silently
+     * blocks it — so {@link openPopup} is invoked as the very first step, before
+     * the device-flow session (which needs an async call) even exists. If the
+     * popup is blocked (or no `openPopup` was injected), this falls back to
+     * `showQr`'s plain QR rendering — no dead end.
+     */
+    startPasskeyHubSignIn(): Promise<void>;
+    /**
+     * Shared device-flow session creation for both {@link showQr} (renders the
+     * QR) and {@link startPasskeyHubSignIn} (also opens the hub popup) — the
+     * same `startCommonsSignIn` → poll/socket wiring either way. Returns the
+     * handle on success (already reflected in `signIn`), or `null` on failure
+     * (already set as `signIn.error`).
+     */
+    private startDeviceFlowSession;
+    /**
+     * Poll {@link PopupWindowHandle.closed} so a user who dismisses the hub
+     * popup without completing sign-in gets prompt feedback (there is no DOM
+     * event for a cross-origin popup closing — polling is the only mechanism).
+     * Cleared by {@link closeActivePopup}, which every sign-in exit path already
+     * calls.
+     */
+    private watchPopup;
+    private clearPopupWatchTimer;
+    /** Tear down the popup watch timer and close the popup, if any. Idempotent. */
+    private closeActivePopup;
     /**
      * Resolve whether Commons is installed on this device via the injected
      * `canOpenApp` probe, updating {@link commonsAvailability} as durable,
@@ -323,7 +403,7 @@ export declare class AccountDialogController {
      * fallback stays live regardless of the outcome here.
      */
     private deepLinkIntoCommonsIfAvailable;
-    /** Tear down the active sign-in device flow (timers + socket + token) and reset to idle. */
+    /** Tear down the active sign-in device flow (timers + socket + popup + token) and reset to idle. */
     cancelSignIn(): void;
     private scheduleNextPoll;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/core",
-  "version": "12.1.0",
+  "version": "12.2.0",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -117,7 +117,7 @@
     "invariant": "^2.2.4",
     "jwt-decode": "^4.0.0",
     "socket.io-client": "^4.8.1",
-    "tldts": "^7.4.5",
+    "tldts": "^7.4.8",
     "zod": "^3.25.64"
   },
   "peerDependencies": {
@@ -147,10 +147,10 @@
     "@types/elliptic": "^6.4.18",
     "@types/express": "^4.17.21",
     "@types/invariant": "^2.2.34",
-    "@types/node": "^20.19.9",
+    "@types/node": "^20.19.43",
     "expo-crypto": "~56.0.3",
     "expo-secure-store": "~56.0.4",
-    "express": "^4.21.2",
+    "express": "^4.22.2",
     "express-rate-limit": "^7.5.0",
     "release-it": "^19.0.6",
     "typescript": "^5.9.2"

package/src/i18n/locales/ar-SA.json

@@ -43,11 +43,26 @@
     "currentAccount": "الحالي",
     "or": "أو",
     "viewAllAccounts": "عرض {{count}} المزيد",
+    "createAccountLink": "جديد على Oxy؟ أنشئ حسابًا",
     "status": {
-      "accountSwitched": "استخدام {{name}} الآن"
+      "accountSwitched": "استخدام {{name}} الآن",
+      "signingIn": "جارٍ تسجيل الدخول…"
     }
   },
   "signup": {
+    "commonsHeadline": "أنشئ هويتك في Commons",
+    "commonsExplainer": "‏Commons هي هوية Oxy الخاصة بك بحفظ ذاتي كامل — تطبيق واحد يعمل في كل مكان.",
+    "createInCommons": "أنشئ هويتك في Commons",
+    "passkeyAlternative": "لا تملك Commons؟ أنشئ مفتاح مرور على هذا الجهاز بدلاً من ذلك",
+    "createAccount": "إنشاء حساب",
+    "creating": "جارٍ الإنشاء…",
+    "usernamePlaceholder": "اختر اسم مستخدم",
+    "usernameChecking": "جارٍ التحقق…",
+    "usernameAvailable": "متاح",
+    "usernameTaken": "اسم المستخدم هذا مستخدم بالفعل",
+    "backToSignInLink": "لديك حساب بالفعل؟ سجّل الدخول",
+    "hubExplainer": "أنشئ هوية Oxy الخاصة بك في نافذة آمنة، ثم عد إلى هنا مباشرة.",
+    "continueInWindow": "المتابعة في نافذة جديدة",
     "welcome": {
       "title": "مرحبًا بك في Oxy!",
       "subtitle": "أنشئ حسابك في خطوات قليلة",
@@ -94,6 +109,15 @@
       "legalReminder": "بإنشاء حساب، فإنك توافق على شروط الخدمة وسياسة الخصوصية الخاصة بنا."
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "سجّل الدخول بهوية Oxy الخاصة بك",
+    "signInWithOxy": "تسجيل الدخول باستخدام Oxy",
+    "useIdentityOnDevice": "لا تملك Commons؟ استخدم مفتاح مرور على هذا الجهاز بدلاً من ذلك",
+    "passkeySigningIn": "جارٍ تسجيل الدخول…",
+    "getCommons": "احصل على Commons",
+    "commonsNotInstalled": "لا تملك Commons؟ احصل على التطبيق لتسجيل الدخول بمعرّف Oxy الخاص بك.",
+    "showQrAnyway": "لدي Commons على جهاز آخر"
+  },
   "common": {
     "actions": {
       "back": "رجوع",
@@ -105,7 +129,8 @@
       "verify": "التحقق",
       "resetPassword": "إعادة تعيين كلمة المرور",
       "signedOut": "تم تسجيل الخروج",
-      "close": "إغلاق"
+      "close": "إغلاق",
+      "tryAgain": "حاول مرة أخرى"
     },
     "links": {
       "recoverAccount": "استعادة حسابك",

package/src/i18n/locales/ca-ES.json

@@ -43,11 +43,26 @@
     "currentAccount": "Actual",
     "or": "o",
     "viewAllAccounts": "Veure {{count}} més",
+    "createAccountLink": "Ets nou a Oxy? Crea'n una",
     "status": {
-      "accountSwitched": "Ara utilitzant {{name}}"
+      "accountSwitched": "Ara utilitzant {{name}}",
+      "signingIn": "Iniciant sessió…"
     }
   },
   "signup": {
+    "commonsHeadline": "Crea la teva identitat a Commons",
+    "commonsExplainer": "Commons és la teva identitat d'Oxy amb autocustòdia completa: una app que funciona a tot arreu.",
+    "createInCommons": "Crea la teva identitat a Commons",
+    "passkeyAlternative": "No tens Commons? Crea una clau d'accés en aquest dispositiu",
+    "createAccount": "Crear compte",
+    "creating": "Creant…",
+    "usernamePlaceholder": "Tria un nom d'usuari",
+    "usernameChecking": "Comprovant…",
+    "usernameAvailable": "Disponible",
+    "usernameTaken": "Aquest nom d'usuari ja està en ús",
+    "backToSignInLink": "Ja tens compte? Inicia sessió",
+    "hubExplainer": "Crea la teva Oxy ID en una finestra segura i torna de seguida.",
+    "continueInWindow": "Continua en una finestra nova",
     "welcome": {
       "title": "Benvingut a Oxy!",
       "subtitle": "Crea el teu compte en pocs passos",
@@ -94,6 +109,15 @@
       "legalReminder": "En crear un compte, acceptes els nostres Termes de servei i Política de privacitat."
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "Inicia sessió amb la teva identitat d'Oxy",
+    "signInWithOxy": "Inicia sessió amb Oxy",
+    "useIdentityOnDevice": "No tens Commons? Fes servir una clau d'accés en aquest dispositiu",
+    "passkeySigningIn": "Iniciant sessió…",
+    "getCommons": "Descarrega Commons",
+    "commonsNotInstalled": "No tens Commons? Descarrega l'app per iniciar sessió amb el teu Oxy ID.",
+    "showQrAnyway": "Tinc Commons en un altre dispositiu"
+  },
   "common": {
     "actions": {
       "back": "Enrere",
@@ -105,7 +129,8 @@
       "verify": "Verificar",
       "resetPassword": "Restablir contrasenya",
       "signedOut": "Sessió tancada",
-      "close": "Tanca"
+      "close": "Tanca",
+      "tryAgain": "Torna-ho a provar"
     },
     "links": {
       "recoverAccount": "Recuperar el teu compte",

package/src/i18n/locales/de-DE.json

@@ -43,11 +43,26 @@
     "currentAccount": "Aktuell",
     "or": "oder",
     "viewAllAccounts": "{{count}} weitere anzeigen",
+    "createAccountLink": "Neu bei Oxy? Konto erstellen",
     "status": {
-      "accountSwitched": "Verwende jetzt {{name}}"
+      "accountSwitched": "Verwende jetzt {{name}}",
+      "signingIn": "Anmeldung läuft…"
     }
   },
   "signup": {
+    "commonsHeadline": "Erstellen Sie Ihre Identität in Commons",
+    "commonsExplainer": "Commons ist Ihre vollständig selbstverwaltete Oxy-Identität – eine App, überall einsetzbar.",
+    "createInCommons": "Erstellen Sie Ihre Identität in Commons",
+    "passkeyAlternative": "Kein Commons? Erstellen Sie stattdessen einen Passkey auf diesem Gerät",
+    "createAccount": "Konto erstellen",
+    "creating": "Wird erstellt…",
+    "usernamePlaceholder": "Benutzernamen wählen",
+    "usernameChecking": "Wird geprüft…",
+    "usernameAvailable": "Verfügbar",
+    "usernameTaken": "Dieser Benutzername ist bereits vergeben",
+    "backToSignInLink": "Sie haben bereits ein Konto? Anmelden",
+    "hubExplainer": "Erstellen Sie Ihre Oxy-ID in einem sicheren Fenster und kehren Sie dann direkt zurück.",
+    "continueInWindow": "In einem neuen Fenster fortfahren",
     "welcome": {
       "title": "Willkommen bei Oxy!",
       "subtitle": "Erstellen Sie Ihr Konto in nur wenigen Schritten",
@@ -94,6 +109,15 @@
       "legalReminder": "Durch die Erstellung eines Kontos stimmen Sie unseren Nutzungsbedingungen und der Datenschutzrichtlinie zu."
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "Melden Sie sich mit Ihrer Oxy-Identität an",
+    "signInWithOxy": "Mit Oxy anmelden",
+    "useIdentityOnDevice": "Kein Commons? Verwenden Sie stattdessen einen Passkey auf diesem Gerät",
+    "passkeySigningIn": "Anmeldung läuft…",
+    "getCommons": "Commons herunterladen",
+    "commonsNotInstalled": "Kein Commons? Holen Sie sich die App, um sich mit Ihrer Oxy-ID anzumelden.",
+    "showQrAnyway": "Ich habe Commons auf einem anderen Gerät"
+  },
   "common": {
     "actions": {
       "back": "Zurück",
@@ -105,7 +129,8 @@
       "verify": "Überprüfen",
       "resetPassword": "Passwort zurücksetzen",
       "signedOut": "Abgemeldet",
-      "close": "Schließen"
+      "close": "Schließen",
+      "tryAgain": "Erneut versuchen"
     },
     "links": {
       "recoverAccount": "Ihr Konto wiederherstellen",

package/src/i18n/locales/en-US.json

@@ -50,11 +50,26 @@
     "currentAccount": "Current",
     "or": "or",
     "viewAllAccounts": "View {{count}} more",
+    "createAccountLink": "New to Oxy? Create one",
     "status": {
-      "accountSwitched": "Now using {{name}}"
+      "accountSwitched": "Now using {{name}}",
+      "signingIn": "Signing in…"
     }
   },
   "signup": {
+    "commonsHeadline": "Create your identity in Commons",
+    "commonsExplainer": "Commons is your full self-custody Oxy identity — one app, works everywhere.",
+    "createInCommons": "Create your identity in Commons",
+    "passkeyAlternative": "No Commons? Create a passkey on this device instead",
+    "createAccount": "Create account",
+    "creating": "Creating…",
+    "usernamePlaceholder": "Choose a username",
+    "usernameChecking": "Checking…",
+    "usernameAvailable": "Available",
+    "usernameTaken": "This username is taken",
+    "backToSignInLink": "Already have an account? Sign in",
+    "hubExplainer": "Create your Oxy ID in a secure window, then come right back.",
+    "continueInWindow": "Continue in a new window",
     "welcome": {
       "title": "Welcome to Oxy!",
       "subtitle": "Let's create your account in just a few steps",
@@ -391,7 +406,14 @@
     "scanTitle": "Scan to sign in",
     "scanSubtitle": "Open the Oxy app on your phone and scan this code",
     "scanWithOxy": "Scan with the Oxy app to continue",
-    "scanQr": "Scan QR code"
+    "scanQr": "Scan QR code",
+    "qrHeadline": "Sign in with your Oxy identity",
+    "signInWithOxy": "Sign in with Oxy",
+    "useIdentityOnDevice": "No Commons? Use a passkey on this device instead",
+    "passkeySigningIn": "Signing in…",
+    "getCommons": "Get Commons",
+    "commonsNotInstalled": "Don't have Commons? Get the app to sign in with your Oxy ID.",
+    "showQrAnyway": "I have Commons on another device"
   },
   "reputation": {
     "faq": {
@@ -1130,7 +1152,8 @@
       "resetPassword": "Reset Password",
       "signedOut": "Signed out",
       "close": "Close",
-      "delete": "Delete"
+      "delete": "Delete",
+      "tryAgain": "Try again"
     },
     "cancel": "Cancel",
     "revoke": "Revoke",

package/src/i18n/locales/es-ES.json

@@ -50,11 +50,26 @@
     "currentAccount": "Actual",
     "or": "o",
     "viewAllAccounts": "Ver {{count}} más",
+    "createAccountLink": "¿Nuevo en Oxy? Crea una cuenta",
     "status": {
-      "accountSwitched": "Ahora usando {{name}}"
+      "accountSwitched": "Ahora usando {{name}}",
+      "signingIn": "Iniciando sesión…"
     }
   },
   "signup": {
+    "commonsHeadline": "Crea tu identidad en Commons",
+    "commonsExplainer": "Commons es tu identidad de Oxy con autocustodia completa: una app que funciona en todas partes.",
+    "createInCommons": "Crea tu identidad en Commons",
+    "passkeyAlternative": "¿No tienes Commons? Crea una clave de acceso en este dispositivo",
+    "createAccount": "Crear cuenta",
+    "creating": "Creando…",
+    "usernamePlaceholder": "Elige un usuario",
+    "usernameChecking": "Comprobando…",
+    "usernameAvailable": "Disponible",
+    "usernameTaken": "Este usuario ya está en uso",
+    "backToSignInLink": "¿Ya tienes cuenta? Inicia sesión",
+    "hubExplainer": "Crea tu Oxy ID en una ventana segura y vuelve enseguida.",
+    "continueInWindow": "Continuar en una ventana nueva",
     "welcome": {
       "title": "¡Te damos la bienvenida a Oxy!",
       "subtitle": "Crea tu cuenta en pocos pasos",
@@ -303,7 +318,8 @@
       "resetPassword": "Restablecer contraseña",
       "signedOut": "Sesión cerrada",
       "close": "Cerrar",
-      "delete": "Eliminar"
+      "delete": "Eliminar",
+      "tryAgain": "Reintentar"
     },
     "cancel": "Cancelar",
     "revoke": "Revocar",
@@ -588,7 +604,14 @@
     "scanTitle": "Escanea para iniciar sesión",
     "scanSubtitle": "Abre la app de Oxy en tu móvil y escanea este código",
     "scanWithOxy": "Escanea con la app de Oxy para continuar",
-    "scanQr": "Escanear código QR"
+    "scanQr": "Escanear código QR",
+    "qrHeadline": "Inicia sesión con tu identidad de Oxy",
+    "signInWithOxy": "Inicia sesión con Oxy",
+    "useIdentityOnDevice": "¿No tienes Commons? Usa una clave de acceso en este dispositivo",
+    "passkeySigningIn": "Iniciando sesión…",
+    "getCommons": "Descargar Commons",
+    "commonsNotInstalled": "¿No tienes Commons? Descarga la app para iniciar sesión con tu Oxy ID.",
+    "showQrAnyway": "Tengo Commons en otro dispositivo"
   },
   "feedback": {
     "type": {

package/src/i18n/locales/fr-FR.json

@@ -43,11 +43,26 @@
     "currentAccount": "Actuel",
     "or": "ou",
     "viewAllAccounts": "Voir {{count}} de plus",
+    "createAccountLink": "Nouveau sur Oxy ? Créez un compte",
     "status": {
-      "accountSwitched": "Utilisation de {{name}}"
+      "accountSwitched": "Utilisation de {{name}}",
+      "signingIn": "Connexion…"
     }
   },
   "signup": {
+    "commonsHeadline": "Créez votre identité dans Commons",
+    "commonsExplainer": "Commons est votre identité Oxy en autoconservation complète : une seule app, partout.",
+    "createInCommons": "Créez votre identité dans Commons",
+    "passkeyAlternative": "Pas de Commons ? Créez une clé d'accès sur cet appareil",
+    "createAccount": "Créer un compte",
+    "creating": "Création…",
+    "usernamePlaceholder": "Choisissez un nom d'utilisateur",
+    "usernameChecking": "Vérification…",
+    "usernameAvailable": "Disponible",
+    "usernameTaken": "Ce nom d'utilisateur est déjà pris",
+    "backToSignInLink": "Vous avez déjà un compte ? Connectez-vous",
+    "hubExplainer": "Créez votre Oxy ID dans une fenêtre sécurisée, puis revenez directement.",
+    "continueInWindow": "Continuer dans une nouvelle fenêtre",
     "welcome": {
       "title": "Bienvenue sur Oxy !",
       "subtitle": "Créez votre compte en quelques étapes",
@@ -94,6 +109,15 @@
       "legalReminder": "En créant un compte, vous acceptez nos Conditions d'utilisation et notre Politique de confidentialité."
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "Connectez-vous avec votre identité Oxy",
+    "signInWithOxy": "Se connecter avec Oxy",
+    "useIdentityOnDevice": "Pas de Commons ? Utilisez une clé d'accès sur cet appareil",
+    "passkeySigningIn": "Connexion…",
+    "getCommons": "Obtenir Commons",
+    "commonsNotInstalled": "Pas de Commons ? Téléchargez l'app pour vous connecter avec votre Oxy ID.",
+    "showQrAnyway": "J'ai Commons sur un autre appareil"
+  },
   "common": {
     "actions": {
       "back": "Retour",
@@ -105,7 +129,8 @@
       "verify": "Vérifier",
       "resetPassword": "Réinitialiser le mot de passe",
       "signedOut": "Déconnecté",
-      "close": "Fermer"
+      "close": "Fermer",
+      "tryAgain": "Réessayer"
     },
     "links": {
       "recoverAccount": "Récupérer votre compte",

package/src/i18n/locales/it-IT.json

@@ -43,11 +43,26 @@
     "currentAccount": "Attuale",
     "or": "o",
     "viewAllAccounts": "Visualizza {{count}} altri",
+    "createAccountLink": "Nuovo su Oxy? Creane uno",
     "status": {
-      "accountSwitched": "Ora usando {{name}}"
+      "accountSwitched": "Ora usando {{name}}",
+      "signingIn": "Accesso in corso…"
     }
   },
   "signup": {
+    "commonsHeadline": "Crea la tua identità in Commons",
+    "commonsExplainer": "Commons è la tua identità Oxy in piena autocustodia: un'unica app, ovunque.",
+    "createInCommons": "Crea la tua identità in Commons",
+    "passkeyAlternative": "Non hai Commons? Crea una passkey su questo dispositivo",
+    "createAccount": "Crea account",
+    "creating": "Creazione…",
+    "usernamePlaceholder": "Scegli un nome utente",
+    "usernameChecking": "Verifica in corso…",
+    "usernameAvailable": "Disponibile",
+    "usernameTaken": "Questo nome utente è già in uso",
+    "backToSignInLink": "Hai già un account? Accedi",
+    "hubExplainer": "Crea il tuo Oxy ID in una finestra sicura, poi torna subito qui.",
+    "continueInWindow": "Continua in una nuova finestra",
     "welcome": {
       "title": "Benvenuto su Oxy!",
       "subtitle": "Crea il tuo account in pochi passaggi",
@@ -94,6 +109,15 @@
       "legalReminder": "Creando un account, accetti i nostri Termini di servizio e l'Informativa sulla privacy."
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "Accedi con la tua identità Oxy",
+    "signInWithOxy": "Accedi con Oxy",
+    "useIdentityOnDevice": "Non hai Commons? Usa una passkey su questo dispositivo",
+    "passkeySigningIn": "Accesso in corso…",
+    "getCommons": "Ottieni Commons",
+    "commonsNotInstalled": "Non hai Commons? Scarica l'app per accedere con il tuo Oxy ID.",
+    "showQrAnyway": "Ho Commons su un altro dispositivo"
+  },
   "common": {
     "actions": {
       "back": "Indietro",
@@ -105,7 +129,8 @@
       "verify": "Verifica",
       "resetPassword": "Reimposta password",
       "signedOut": "Disconnesso",
-      "close": "Chiudi"
+      "close": "Chiudi",
+      "tryAgain": "Riprova"
     },
     "links": {
       "recoverAccount": "Recupera il tuo account",

package/src/i18n/locales/ja-JP.json

@@ -43,11 +43,26 @@
     "currentAccount": "現在",
     "or": "または",
     "viewAllAccounts": "さらに{{count}}件を表示",
+    "createAccountLink": "Oxyは初めてですか？アカウントを作成",
     "status": {
-      "accountSwitched": "{{name}}を使用中"
+      "accountSwitched": "{{name}}を使用中",
+      "signingIn": "サインインしています…"
     }
   },
   "signup": {
+    "commonsHeadline": "Commonsであなたのアイデンティティを作成",
+    "commonsExplainer": "Commonsは完全に自己管理できるあなたのOxy IDです。1つのアプリでどこでも使えます。",
+    "createInCommons": "Commonsであなたのアイデンティティを作成",
+    "passkeyAlternative": "Commonsがありませんか？このデバイスでパスキーを作成",
+    "createAccount": "アカウントを作成",
+    "creating": "作成しています…",
+    "usernamePlaceholder": "ユーザー名を選択",
+    "usernameChecking": "確認しています…",
+    "usernameAvailable": "利用可能",
+    "usernameTaken": "このユーザー名は既に使用されています",
+    "backToSignInLink": "すでにアカウントをお持ちですか？サインイン",
+    "hubExplainer": "安全なウィンドウでOxy IDを作成し、すぐに戻ってきてください。",
+    "continueInWindow": "新しいウィンドウで続ける",
     "welcome": {
       "title": "Oxyへようこそ！",
       "subtitle": "数ステップでアカウントを作成",
@@ -94,6 +109,15 @@
       "legalReminder": "アカウントを作成することで、利用規約とプライバシーポリシーに同意したことになります。"
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "Oxy IDでサインイン",
+    "signInWithOxy": "Oxyでサインイン",
+    "useIdentityOnDevice": "Commonsがありませんか？このデバイスのパスキーを使用",
+    "passkeySigningIn": "サインインしています…",
+    "getCommons": "Commonsを入手",
+    "commonsNotInstalled": "Commonsがありませんか？アプリを入手してOxy IDでサインインしましょう。",
+    "showQrAnyway": "別のデバイスにCommonsがあります"
+  },
   "common": {
     "actions": {
       "back": "戻る",
@@ -105,7 +129,8 @@
       "verify": "確認",
       "resetPassword": "パスワードをリセット",
       "signedOut": "ログアウトしました",
-      "close": "閉じる"
+      "close": "閉じる",
+      "tryAgain": "再試行"
     },
     "links": {
       "recoverAccount": "アカウントを回復",

package/src/i18n/locales/ko-KR.json

@@ -43,11 +43,26 @@
     "currentAccount": "현재",
     "or": "또는",
     "viewAllAccounts": "{{count}}개 더 보기",
+    "createAccountLink": "Oxy가 처음이신가요? 계정 만들기",
     "status": {
-      "accountSwitched": "{{name}} 사용 중"
+      "accountSwitched": "{{name}} 사용 중",
+      "signingIn": "로그인 중…"
     }
   },
   "signup": {
+    "commonsHeadline": "Commons에서 나의 아이덴티티 만들기",
+    "commonsExplainer": "Commons는 완전한 자기 보관 방식의 Oxy 아이덴티티입니다. 하나의 앱으로 어디서나 사용하세요.",
+    "createInCommons": "Commons에서 나의 아이덴티티 만들기",
+    "passkeyAlternative": "Commons가 없으신가요? 이 기기에서 패스키를 만드세요",
+    "createAccount": "계정 만들기",
+    "creating": "만드는 중…",
+    "usernamePlaceholder": "사용자 이름 선택",
+    "usernameChecking": "확인 중…",
+    "usernameAvailable": "사용 가능",
+    "usernameTaken": "이미 사용 중인 사용자 이름입니다",
+    "backToSignInLink": "이미 계정이 있으신가요? 로그인",
+    "hubExplainer": "안전한 창에서 Oxy ID를 만든 후 바로 돌아오세요.",
+    "continueInWindow": "새 창에서 계속하기",
     "welcome": {
       "title": "Oxy에 오신 것을 환영합니다!",
       "subtitle": "몇 단계만으로 계정을 만드세요",
@@ -94,6 +109,15 @@
       "legalReminder": "계정을 만들면 서비스 약관 및 개인정보 보호정책에 동의하는 것입니다."
     }
   },
+  "accountSwitcher": {
+    "qrHeadline": "Oxy ID로 로그인",
+    "signInWithOxy": "Oxy로 로그인",
+    "useIdentityOnDevice": "Commons가 없으신가요? 이 기기의 패스키를 사용하세요",
+    "passkeySigningIn": "로그인 중…",
+    "getCommons": "Commons 다운로드",
+    "commonsNotInstalled": "Commons가 없으신가요? 앱을 다운로드하여 Oxy ID로 로그인하세요.",
+    "showQrAnyway": "다른 기기에 Commons가 있습니다"
+  },
   "common": {
     "actions": {
       "back": "뒤로",
@@ -105,7 +129,8 @@
       "verify": "확인",
       "resetPassword": "비밀번호 재설정",
       "signedOut": "로그아웃됨",
-      "close": "닫기"
+      "close": "닫기",
+      "tryAgain": "다시 시도"
     },
     "links": {
       "recoverAccount": "계정 복구",