@oxyhq/core 12.9.0 → 12.10.1

package/dist/cjs/HttpService.js

@@ -271,22 +271,28 @@ class HttpService {
             }
             this.requestMetrics.cacheMisses++;
         }
+        // Resolve the auth preflight OUTSIDE the queue slot. A slot represents
+        // NETWORK OCCUPANCY only. `getAuthHeader` may await the single-flight token
+        // refresh/mint — itself a request — so if a slot-holding request awaited it
+        // here and every slot were held by requests all waiting on that same mint,
+        // the mint could never acquire a slot to run (systemic deadlock). Resolving
+        // it before enqueue means auth-blocked requests hold NO slot while the shared
+        // mint runs. `skipAuth` requests (the body-authenticated mint) send NO bearer
+        // and skip the near-expiry preflight — see RequestOptions.skipAuth. The
+        // 401/CSRF retry re-enters request() with a fresh config, so it re-resolves
+        // these here with the refreshed token / cleared CSRF.
+        const isStateChangingMethod = ['POST', 'PUT', 'PATCH', 'DELETE'].includes(method);
+        const authHeader = config.skipAuth ? null : await this.getAuthHeader();
+        // CSRF protects cookie-authenticated browser writes. Bearer-authenticated SDK
+        // clients are not vulnerable to ambient-cookie CSRF, and linked app APIs
+        // should not need to implement a duplicate `/csrf-token` route.
+        const csrfToken = isStateChangingMethod && !authHeader ? await this.fetchCsrfToken() : null;
         // Request function
         const requestFn = async () => {
             const startTime = Date.now();
             try {
                 // Build URL with params
                 const fullUrl = this.buildURL(url, params);
-                // Get auth token (with auto-refresh). `skipAuth` requests (the
-                // body-authenticated refresh endpoint) send NO bearer and skip the
-                // near-expiry preflight — see RequestOptions.skipAuth for the deadlock
-                // this avoids.
-                const authHeader = config.skipAuth ? null : await this.getAuthHeader();
-                // CSRF protects cookie-authenticated browser writes. Bearer-authenticated
-                // SDK clients are not vulnerable to ambient-cookie CSRF, and linked app
-                // APIs should not need to implement a duplicate `/csrf-token` route.
-                const isStateChangingMethod = ['POST', 'PUT', 'PATCH', 'DELETE'].includes(method);
-                const csrfToken = isStateChangingMethod && !authHeader ? await this.fetchCsrfToken() : null;
                 // Determine if data is FormData using robust detection
                 const isFormData = this.isFormData(data);
                 // Make fetch request
@@ -493,8 +499,12 @@ class HttpService {
         const finalRequest = dedupeKey
             ? () => this.deduplicator.deduplicate(dedupeKey, requestWithRetry)
             : requestWithRetry;
-        // Execute request (with queue if needed)
-        const result = await this.requestQueue.enqueue(finalRequest);
+        // Execute the request. Control-plane calls the auth lane depends on
+        // (`bypassQueue`, e.g. the device-secret mint) run DIRECTLY — a queued mint
+        // could never acquire a slot when every slot is parked awaiting it.
+        const result = config.bypassQueue
+            ? await finalRequest()
+            : await this.requestQueue.enqueue(finalRequest);
         // Cache the result if caching is enabled
         if (cache && cacheKey && result) {
             this.cache.set(cacheKey, result, cacheTTL);

package/dist/cjs/crypto/keyManager.js

@@ -122,6 +122,24 @@ const V2_STORAGE_KEYS = {
     BACKUP_PUBLIC_KEY: 'oxy_identity_backup_public_key_v2',
     BACKUP_TIMESTAMP: 'oxy_identity_backup_timestamp_v2',
 };
+/**
+ * Dedicated keychain slot for the recovery mnemonic (the 12-word phrase).
+ *
+ * Stored under its OWN keychain service — distinct from the v2 primary, backup,
+ * and shared slots — so it shares an AndroidKeyStore key with none of them
+ * (blast-radius isolation, same rationale as the v2 primary/backup split).
+ * Written `WHEN_UNLOCKED_THIS_DEVICE_ONLY` and NEVER exported off-device: it
+ * exists solely so the user can RE-READ their phrase from Settings on the SAME
+ * device that generated/imported it.
+ *
+ * This is convenience persistence, NOT a recovery mechanism — a keystore death
+ * wipes it alongside the keys, exactly like the private key itself. The user's
+ * written-down phrase remains the sole out-of-band recovery path. The mnemonic
+ * lives ONLY in this slot: it is never mirrored into the identity marker,
+ * {@link KeyManager.getIdentityStatus}, logs, or any exported bundle.
+ */
+const RECOVERY_MNEMONIC_KEYCHAIN_SERVICE = 'oxy_identity_mnemonic';
+const RECOVERY_MNEMONIC_STORAGE_KEY = 'oxy_identity_mnemonic_v1';
 /**
  * Advisory AsyncStorage fast-path flag: set once the v2 slots own the identity.
  * Re-derivable (its loss just re-runs the cheap slot check), so it lives in
@@ -1476,6 +1494,73 @@ class KeyManager {
             throw new IdentityUnavailableError('Failed to read identity from secure storage.', error);
         }
     }
+    /**
+     * Persist the recovery mnemonic (the 12-word phrase) into its dedicated,
+     * device-only keychain slot so the user can re-reveal it from Settings after
+     * onboarding.
+     *
+     * Called best-effort at identity creation/import, where the phrase is already
+     * in memory: a failure to persist it must NEVER fail the identity itself, so
+     * callers deliberately swallow the thrown error (logging it). Storage errors
+     * throw {@link IdentityUnavailableError} — same "cannot determine" semantics as
+     * the other getters — so a caller MAY observe/log the failure.
+     *
+     * The mnemonic is stored ONLY here — never in the marker, `getIdentityStatus`,
+     * logs, or any exported bundle.
+     */
+    static async storeRecoveryMnemonic(mnemonic) {
+        if (isWebPlatform()) {
+            return; // Identity storage is only available on native platforms
+        }
+        try {
+            const store = await initSecureStore();
+            await store.setItemAsync(RECOVERY_MNEMONIC_STORAGE_KEY, mnemonic, KeyManager._privateWriteOpts(store, RECOVERY_MNEMONIC_KEYCHAIN_SERVICE));
+        }
+        catch (error) {
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to persist recovery mnemonic', { component: 'KeyManager' }, error);
+            }
+            throw new IdentityUnavailableError('Failed to persist recovery mnemonic.', error);
+        }
+    }
+    /**
+     * Read the stored recovery mnemonic for re-reveal in Settings.
+     *
+     * Returns the phrase, or `null` when a read SUCCEEDS and finds none — the
+     * expected result for any identity created/imported before this feature
+     * existed, since the phrase was never captured for those. THROWS
+     * {@link IdentityUnavailableError} when storage is unreadable (keychain locked
+     * / module load failure), matching {@link getPublicKey}'s contract — a thrown
+     * read is never flattened to `null`, so a caller distinguishes "phrase was
+     * never stored" from "keychain temporarily locked, retry".
+     */
+    static async getRecoveryMnemonic() {
+        if (isWebPlatform()) {
+            return null; // Identity storage is only available on native platforms
+        }
+        try {
+            const store = await initSecureStore();
+            return await store.getItemAsync(RECOVERY_MNEMONIC_STORAGE_KEY, KeyManager._slotOpts(RECOVERY_MNEMONIC_KEYCHAIN_SERVICE));
+        }
+        catch (error) {
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to read recovery mnemonic', { component: 'KeyManager' }, error);
+            }
+            throw new IdentityUnavailableError('Failed to read recovery mnemonic from secure storage.', error);
+        }
+    }
+    /**
+     * Delete the stored recovery mnemonic. Best-effort: a delete failure is logged
+     * and swallowed, never thrown — it runs inside the identity-deletion path where
+     * an unreadable keychain must not abort the wider teardown.
+     */
+    static async deleteRecoveryMnemonic() {
+        if (isWebPlatform()) {
+            return; // Identity storage is only available on native platforms
+        }
+        const store = await initSecureStore();
+        await KeyManager._bestEffortDelete(store, RECOVERY_MNEMONIC_STORAGE_KEY, RECOVERY_MNEMONIC_KEYCHAIN_SERVICE);
+    }
     /**
      * Check if a complete, parseable identity exists on this device.
      *
@@ -1691,6 +1776,10 @@ class KeyManager {
         await KeyManager._bestEffortDeleteV2Primary(store);
         await KeyManager._bestEffortDelete(store, STORAGE_KEYS.PRIVATE_KEY);
         await KeyManager._bestEffortDelete(store, STORAGE_KEYS.PUBLIC_KEY);
+        // Always drop the stored recovery mnemonic — it is scoped to the identity
+        // being deleted, so a leftover would let Settings reveal a stale phrase for
+        // an identity that no longer exists (or a DIFFERENT one after re-onboarding).
+        await KeyManager.deleteRecoveryMnemonic();
         // Also clear backups + the shared slot on force deletion, so a deleted
         // identity cannot be resurrected from any recovery source.
         if (force) {

package/dist/cjs/i18n/locales/ar-SA.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "حساباتك"
+        },
+        "loading": "جارٍ تحميل الحسابات...",
         "qrHeadline": "سجّل الدخول بهوية Oxy الخاصة بك",
         "signInWithOxy": "تسجيل الدخول باستخدام Oxy",
         "useIdentityOnDevice": "لا تملك Commons؟ استخدم مفتاح مرور على هذا الجهاز بدلاً من ذلك",

package/dist/cjs/i18n/locales/ca-ES.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "Els teus comptes"
+        },
+        "loading": "S'estan carregant els comptes...",
         "qrHeadline": "Inicia sessió amb la teva identitat d'Oxy",
         "signInWithOxy": "Inicia sessió amb Oxy",
         "useIdentityOnDevice": "No tens Commons? Fes servir una clau d'accés en aquest dispositiu",

package/dist/cjs/i18n/locales/de-DE.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "Ihre Konten"
+        },
+        "loading": "Konten werden geladen...",
         "qrHeadline": "Melden Sie sich mit Ihrer Oxy-Identität an",
         "signInWithOxy": "Mit Oxy anmelden",
         "useIdentityOnDevice": "Kein Commons? Verwenden Sie stattdessen einen Passkey auf diesem Gerät",

package/dist/cjs/i18n/locales/en-US.json

@@ -421,7 +421,8 @@
         "getCommons": "Get Commons",
         "commonsNotInstalled": "Don't have Commons? Get the app to sign in with your Oxy ID.",
         "showQrAnyway": "I have Commons on another device",
-        "switchWhileSignedInAs": "Switch account, signed in as {{name}}"
+        "switchWhileSignedInAs": "Switch account, signed in as {{name}}",
+        "manageOnDevice": "Manage accounts on this device"
     },
     "reputation": {
         "faq": {
@@ -754,6 +755,8 @@
             "saving": "Saving…",
             "helper": "The cropped circle is what will appear on your profile. Pinch to zoom, drag to position.",
             "zoom": "{{value}}×",
+            "zoomIn": "Zoom in",
+            "zoomOut": "Zoom out",
             "a11yImage": "Crop preview. Pinch to zoom and drag to reposition the image.",
             "a11yReset": "Reset crop to default position",
             "a11yResetAnnouncement": "Crop reset"
@@ -774,6 +777,47 @@
         },
         "changeAvatar": "Change avatar"
     },
+    "changeAvatar": {
+        "title": "Change profile picture",
+        "sources": {
+            "upload": {
+                "title": "Upload from device",
+                "description": "Choose a photo from your gallery"
+            },
+            "camera": {
+                "title": "Take a picture",
+                "description": "Use your camera"
+            },
+            "files": {
+                "title": "My Oxy files",
+                "description": "Pick an image you already uploaded"
+            },
+            "remove": {
+                "title": "Remove current photo",
+                "description": "Go back to your initials"
+            }
+        },
+        "remove": {
+            "confirmTitle": "Remove profile picture?",
+            "confirmMessage": "Your profile will show your initials instead. You can add a new photo at any time.",
+            "confirmLabel": "Remove"
+        },
+        "permission": {
+            "libraryDenied": "Oxy needs access to your photos to upload a picture.",
+            "cameraDenied": "Oxy needs access to your camera to take a picture.",
+            "openSettings": "Open settings"
+        },
+        "errors": {
+            "pickerUnavailable": "Photo picking is not available on this device.",
+            "cameraUnavailable": "The camera is not available on this device.",
+            "pickFailed": "Could not open the photo picker.",
+            "cameraFailed": "Could not open the camera.",
+            "loadImageFailed": "Could not load the selected image."
+        },
+        "a11y": {
+            "currentPhoto": "Your current profile picture"
+        }
+    },
     "accountOverview": {
         "title": "Account",
         "sections": {
@@ -1442,6 +1486,11 @@
         "uploadPhotos": "Upload Photos",
         "uploadFiles": "Upload Files",
         "clearSearch": "Clear Search",
+        "retry": "Try again",
+        "loadError": {
+            "title": "Couldn't load your files",
+            "description": "Something went wrong. Check your connection and try again."
+        },
         "choosePhoto": "Choose Photo",
         "done": "Done",
         "doneWithCount": "Done ({{count}})",
@@ -1614,7 +1663,9 @@
     },
     "accountMenu": {
         "label": "Account menu",
-        "manage": "Manage your Oxy Account",
+        "manage": "Manage your Oxy account",
+        "greeting": "Hi, {{name}}!",
+        "switchAccount": "Switch account",
         "viewProfile": "View profile",
         "addAnother": "Add another account",
         "signOutAll": "Sign out of all accounts",
@@ -1622,7 +1673,22 @@
         "openHint": "Opens the account menu",
         "openWithUser": "Account menu for {{name}}",
         "switching": "Switching account…",
-        "signOutAccount": "Sign out {{name}}"
+        "signOutAccount": "Sign out {{name}}",
+        "storage": {
+            "title": "Oxy storage",
+            "usage": "{{used}} of {{total}} used",
+            "used": "Used",
+            "free": "Free",
+            "unavailable": "Usage details unavailable",
+            "upgrade": "Upgrade plan",
+            "manage": "Manage storage"
+        },
+        "data": "Your data in Oxy",
+        "settings": "Oxy settings",
+        "help": "Help & feedback",
+        "signOut": "Sign out",
+        "privacy": "Privacy Policy",
+        "terms": "Terms of Service"
     },
     "accounts": {
         "activeAccount": {

package/dist/cjs/i18n/locales/es-ES.json

@@ -290,6 +290,8 @@
             "saving": "Guardando…",
             "helper": "El círculo recortado es lo que aparecerá en tu perfil. Pellizca para acercar, arrastra para colocar.",
             "zoom": "{{value}}×",
+            "zoomIn": "Acercar",
+            "zoomOut": "Alejar",
             "a11yImage": "Vista previa del recorte. Pellizca para acercar y arrastra para reposicionar la imagen.",
             "a11yReset": "Restablecer el recorte a la posición predeterminada",
             "a11yResetAnnouncement": "Recorte restablecido"
@@ -310,6 +312,47 @@
         },
         "changeAvatar": "Cambiar avatar"
     },
+    "changeAvatar": {
+        "title": "Cambiar foto de perfil",
+        "sources": {
+            "upload": {
+                "title": "Subir desde el dispositivo",
+                "description": "Elige una foto de tu galería"
+            },
+            "camera": {
+                "title": "Hacer una foto",
+                "description": "Usa tu cámara"
+            },
+            "files": {
+                "title": "Mis archivos de Oxy",
+                "description": "Elige una imagen que ya has subido"
+            },
+            "remove": {
+                "title": "Eliminar la foto actual",
+                "description": "Vuelve a tus iniciales"
+            }
+        },
+        "remove": {
+            "confirmTitle": "¿Eliminar la foto de perfil?",
+            "confirmMessage": "Tu perfil mostrará tus iniciales. Puedes añadir una foto nueva cuando quieras.",
+            "confirmLabel": "Eliminar"
+        },
+        "permission": {
+            "libraryDenied": "Oxy necesita acceso a tus fotos para subir una imagen.",
+            "cameraDenied": "Oxy necesita acceso a tu cámara para hacer una foto.",
+            "openSettings": "Abrir ajustes"
+        },
+        "errors": {
+            "pickerUnavailable": "La selección de fotos no está disponible en este dispositivo.",
+            "cameraUnavailable": "La cámara no está disponible en este dispositivo.",
+            "pickFailed": "No se pudo abrir el selector de fotos.",
+            "cameraFailed": "No se pudo abrir la cámara.",
+            "loadImageFailed": "No se pudo cargar la imagen seleccionada."
+        },
+        "a11y": {
+            "currentPhoto": "Tu foto de perfil actual"
+        }
+    },
     "common": {
         "actions": {
             "back": "Atrás",
@@ -619,7 +662,8 @@
         "getCommons": "Descargar Commons",
         "commonsNotInstalled": "¿No tienes Commons? Descarga la app para iniciar sesión con tu Oxy ID.",
         "showQrAnyway": "Tengo Commons en otro dispositivo",
-        "switchWhileSignedInAs": "Cambiar de cuenta, con la sesión iniciada como {{name}}"
+        "switchWhileSignedInAs": "Cambiar de cuenta, con la sesión iniciada como {{name}}",
+        "manageOnDevice": "Gestionar cuentas en este dispositivo"
     },
     "feedback": {
         "type": {
@@ -1442,6 +1486,11 @@
         "uploadPhotos": "Subir fotos",
         "uploadFiles": "Subir archivos",
         "clearSearch": "Limpiar búsqueda",
+        "retry": "Reintentar",
+        "loadError": {
+            "title": "No se pudieron cargar tus archivos",
+            "description": "Algo salió mal. Comprueba tu conexión e inténtalo de nuevo."
+        },
         "choosePhoto": "Elegir foto",
         "done": "Listo",
         "doneWithCount": "Listo ({{count}})",
@@ -1615,6 +1664,8 @@
     "accountMenu": {
         "label": "Menú de cuenta",
         "manage": "Gestiona tu cuenta de Oxy",
+        "greeting": "¡Hola, {{name}}!",
+        "switchAccount": "Cambiar de cuenta",
         "viewProfile": "Ver perfil",
         "addAnother": "Añadir otra cuenta",
         "signOutAll": "Cerrar sesión en todas las cuentas",
@@ -1622,7 +1673,22 @@
         "openHint": "Abre el menú de cuenta",
         "openWithUser": "Menú de cuenta de {{name}}",
         "switching": "Cambiando de cuenta…",
-        "signOutAccount": "Cerrar sesión de {{name}}"
+        "signOutAccount": "Cerrar sesión de {{name}}",
+        "storage": {
+            "title": "Almacenamiento de Oxy",
+            "usage": "{{used}} de {{total}} en uso",
+            "used": "Usado",
+            "free": "Libre",
+            "unavailable": "Detalles de uso no disponibles",
+            "upgrade": "Mejorar plan",
+            "manage": "Gestionar almacenamiento"
+        },
+        "data": "Tus datos en Oxy",
+        "settings": "Ajustes de Oxy",
+        "help": "Ayuda y comentarios",
+        "signOut": "Cerrar sesión",
+        "privacy": "Política de privacidad",
+        "terms": "Términos del servicio"
     },
     "accounts": {
         "activeAccount": {

package/dist/cjs/i18n/locales/fr-FR.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "Vos comptes"
+        },
+        "loading": "Chargement des comptes...",
         "qrHeadline": "Connectez-vous avec votre identité Oxy",
         "signInWithOxy": "Se connecter avec Oxy",
         "useIdentityOnDevice": "Pas de Commons ? Utilisez une clé d'accès sur cet appareil",

package/dist/cjs/i18n/locales/it-IT.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "I tuoi account"
+        },
+        "loading": "Caricamento account...",
         "qrHeadline": "Accedi con la tua identità Oxy",
         "signInWithOxy": "Accedi con Oxy",
         "useIdentityOnDevice": "Non hai Commons? Usa una passkey su questo dispositivo",

package/dist/cjs/i18n/locales/ja-JP.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "あなたのアカウント"
+        },
+        "loading": "アカウントを読み込み中...",
         "qrHeadline": "Oxy IDでサインイン",
         "signInWithOxy": "Oxyでサインイン",
         "useIdentityOnDevice": "Commonsがありませんか？このデバイスのパスキーを使用",

package/dist/cjs/i18n/locales/ko-KR.json

@@ -112,6 +112,10 @@
         }
     },
     "accountSwitcher": {
+        "sections": {
+            "yourAccounts": "내 계정"
+        },
+        "loading": "계정을 불러오는 중...",
         "qrHeadline": "Oxy ID로 로그인",
         "signInWithOxy": "Oxy로 로그인",
         "useIdentityOnDevice": "Commons가 없으신가요? 이 기기의 패스키를 사용하세요",

package/dist/cjs/i18n/locales/locales/ar-SA.json

@@ -112,6 +112,10 @@
     }
   },
   "accountSwitcher": {
+    "sections": {
+      "yourAccounts": "حساباتك"
+    },
+    "loading": "جارٍ تحميل الحسابات...",
     "qrHeadline": "سجّل الدخول بهوية Oxy الخاصة بك",
     "signInWithOxy": "تسجيل الدخول باستخدام Oxy",
     "useIdentityOnDevice": "لا تملك Commons؟ استخدم مفتاح مرور على هذا الجهاز بدلاً من ذلك",

package/dist/cjs/i18n/locales/locales/ca-ES.json

@@ -112,6 +112,10 @@
     }
   },
   "accountSwitcher": {
+    "sections": {
+      "yourAccounts": "Els teus comptes"
+    },
+    "loading": "S'estan carregant els comptes...",
     "qrHeadline": "Inicia sessió amb la teva identitat d'Oxy",
     "signInWithOxy": "Inicia sessió amb Oxy",
     "useIdentityOnDevice": "No tens Commons? Fes servir una clau d'accés en aquest dispositiu",

package/dist/cjs/i18n/locales/locales/de-DE.json

@@ -112,6 +112,10 @@
     }
   },
   "accountSwitcher": {
+    "sections": {
+      "yourAccounts": "Ihre Konten"
+    },
+    "loading": "Konten werden geladen...",
     "qrHeadline": "Melden Sie sich mit Ihrer Oxy-Identität an",
     "signInWithOxy": "Mit Oxy anmelden",
     "useIdentityOnDevice": "Kein Commons? Verwenden Sie stattdessen einen Passkey auf diesem Gerät",

package/dist/cjs/i18n/locales/locales/en-US.json

@@ -421,7 +421,8 @@
     "getCommons": "Get Commons",
     "commonsNotInstalled": "Don't have Commons? Get the app to sign in with your Oxy ID.",
     "showQrAnyway": "I have Commons on another device",
-    "switchWhileSignedInAs": "Switch account, signed in as {{name}}"
+    "switchWhileSignedInAs": "Switch account, signed in as {{name}}",
+    "manageOnDevice": "Manage accounts on this device"
   },
   "reputation": {
     "faq": {
@@ -754,6 +755,8 @@
       "saving": "Saving…",
       "helper": "The cropped circle is what will appear on your profile. Pinch to zoom, drag to position.",
       "zoom": "{{value}}×",
+      "zoomIn": "Zoom in",
+      "zoomOut": "Zoom out",
       "a11yImage": "Crop preview. Pinch to zoom and drag to reposition the image.",
       "a11yReset": "Reset crop to default position",
       "a11yResetAnnouncement": "Crop reset"
@@ -774,6 +777,47 @@
     },
     "changeAvatar": "Change avatar"
   },
+  "changeAvatar": {
+    "title": "Change profile picture",
+    "sources": {
+      "upload": {
+        "title": "Upload from device",
+        "description": "Choose a photo from your gallery"
+      },
+      "camera": {
+        "title": "Take a picture",
+        "description": "Use your camera"
+      },
+      "files": {
+        "title": "My Oxy files",
+        "description": "Pick an image you already uploaded"
+      },
+      "remove": {
+        "title": "Remove current photo",
+        "description": "Go back to your initials"
+      }
+    },
+    "remove": {
+      "confirmTitle": "Remove profile picture?",
+      "confirmMessage": "Your profile will show your initials instead. You can add a new photo at any time.",
+      "confirmLabel": "Remove"
+    },
+    "permission": {
+      "libraryDenied": "Oxy needs access to your photos to upload a picture.",
+      "cameraDenied": "Oxy needs access to your camera to take a picture.",
+      "openSettings": "Open settings"
+    },
+    "errors": {
+      "pickerUnavailable": "Photo picking is not available on this device.",
+      "cameraUnavailable": "The camera is not available on this device.",
+      "pickFailed": "Could not open the photo picker.",
+      "cameraFailed": "Could not open the camera.",
+      "loadImageFailed": "Could not load the selected image."
+    },
+    "a11y": {
+      "currentPhoto": "Your current profile picture"
+    }
+  },
   "accountOverview": {
     "title": "Account",
     "sections": {
@@ -1442,6 +1486,11 @@
     "uploadPhotos": "Upload Photos",
     "uploadFiles": "Upload Files",
     "clearSearch": "Clear Search",
+    "retry": "Try again",
+    "loadError": {
+      "title": "Couldn't load your files",
+      "description": "Something went wrong. Check your connection and try again."
+    },
     "choosePhoto": "Choose Photo",
     "done": "Done",
     "doneWithCount": "Done ({{count}})",
@@ -1614,7 +1663,9 @@
   },
   "accountMenu": {
     "label": "Account menu",
-    "manage": "Manage your Oxy Account",
+    "manage": "Manage your Oxy account",
+    "greeting": "Hi, {{name}}!",
+    "switchAccount": "Switch account",
     "viewProfile": "View profile",
     "addAnother": "Add another account",
     "signOutAll": "Sign out of all accounts",
@@ -1622,7 +1673,22 @@
     "openHint": "Opens the account menu",
     "openWithUser": "Account menu for {{name}}",
     "switching": "Switching account…",
-    "signOutAccount": "Sign out {{name}}"
+    "signOutAccount": "Sign out {{name}}",
+    "storage": {
+      "title": "Oxy storage",
+      "usage": "{{used}} of {{total}} used",
+      "used": "Used",
+      "free": "Free",
+      "unavailable": "Usage details unavailable",
+      "upgrade": "Upgrade plan",
+      "manage": "Manage storage"
+    },
+    "data": "Your data in Oxy",
+    "settings": "Oxy settings",
+    "help": "Help & feedback",
+    "signOut": "Sign out",
+    "privacy": "Privacy Policy",
+    "terms": "Terms of Service"
   },
   "accounts": {
     "activeAccount": {