@oxyhq/services 13.3.0 → 14.0.1

package/lib/module/ui/hooks/useSessionSocket.js

@@ -1,199 +0,0 @@
-"use strict";
-
-import { useEffect, useRef } from 'react';
-import io from 'socket.io-client';
-import { toast } from '@oxyhq/bloom';
-import { logger } from '@oxyhq/core';
-import { createDebugLogger } from '@oxyhq/core';
-const debug = createDebugLogger('SessionSocket');
-
-/**
- * Server-emitted event types on the `session_update` channel.
- *
- * `session_removed`, `device_removed`, `sessions_removed` are the ONLY
- * events that may sign the user out. Anything else (e.g. `session_created`
- * fired right after a successful sign-in) MUST NOT trigger sign-out — see
- * the comment on the `default` branch below.
- */
-
-export function useSessionSocket({
-  userId,
-  activeSessionId,
-  currentDeviceId,
-  refreshSessions,
-  clearSessionState,
-  baseURL,
-  getAccessToken,
-  onRemoteSignOut,
-  onSessionRemoved
-}) {
-  const socketRef = useRef(null);
-
-  // Store callbacks in refs to avoid reconnecting when they change
-  const refreshSessionsRef = useRef(refreshSessions);
-  const clearSessionStateRef = useRef(clearSessionState);
-  const onRemoteSignOutRef = useRef(onRemoteSignOut);
-  const onSessionRemovedRef = useRef(onSessionRemoved);
-  const activeSessionIdRef = useRef(activeSessionId);
-  const currentDeviceIdRef = useRef(currentDeviceId);
-  const getAccessTokenRef = useRef(getAccessToken);
-
-  // Update refs when callbacks change
-  useEffect(() => {
-    refreshSessionsRef.current = refreshSessions;
-    clearSessionStateRef.current = clearSessionState;
-    onRemoteSignOutRef.current = onRemoteSignOut;
-    onSessionRemovedRef.current = onSessionRemoved;
-    activeSessionIdRef.current = activeSessionId;
-    currentDeviceIdRef.current = currentDeviceId;
-    getAccessTokenRef.current = getAccessToken;
-  }, [refreshSessions, clearSessionState, onRemoteSignOut, onSessionRemoved, activeSessionId, currentDeviceId, getAccessToken]);
-  useEffect(() => {
-    if (!userId || !baseURL) {
-      // Clean up if userId or baseURL becomes invalid
-      if (socketRef.current) {
-        socketRef.current.disconnect();
-        socketRef.current = null;
-      }
-      return;
-    }
-
-    // Disconnect previous socket if switching users
-    if (socketRef.current) {
-      socketRef.current.disconnect();
-      socketRef.current = null;
-    }
-
-    // Connect with auth token; use callback so reconnections get a fresh token
-    socketRef.current = io(baseURL, {
-      transports: ['websocket'],
-      auth: cb => {
-        const token = getAccessTokenRef.current();
-        cb({
-          token: token ?? ''
-        });
-      }
-    });
-    const socket = socketRef.current;
-
-    // Server auto-joins the user to `user:<userId>` room on connection
-    const handleConnect = () => {
-      debug.log('Socket connected:', socket.id);
-    };
-    const refreshSessionsSafe = () => {
-      refreshSessionsRef.current().catch(error => {
-        // Refresh errors shouldn't break the socket handler. They happen
-        // routinely when sessions are removed mid-fetch — log and move on.
-        if (__DEV__) {
-          logger.debug('Failed to refresh sessions after session_update', {
-            component: 'useSessionSocket'
-          }, error);
-        }
-      });
-    };
-    const triggerLocalSignOut = async (toastMessage, errorContext) => {
-      if (onRemoteSignOutRef.current) {
-        onRemoteSignOutRef.current();
-      } else {
-        toast.info(toastMessage);
-      }
-      // Clear local state since the server has already removed the session.
-      // Await so storage cleanup completes before any subsequent navigation.
-      try {
-        await clearSessionStateRef.current();
-      } catch (error) {
-        if (__DEV__) {
-          logger.error(`Failed to clear session state after ${errorContext}`, error instanceof Error ? error : new Error(String(error)), {
-            component: 'useSessionSocket'
-          });
-        }
-      }
-    };
-    const handleSessionUpdate = async data => {
-      debug.log('Received session_update:', data);
-      const currentActiveSessionId = activeSessionIdRef.current;
-      const currentDeviceIdValue = currentDeviceIdRef.current;
-
-      // Strict whitelist. Every event type that may sign the user out must
-      // appear in the switch. Anything unknown falls through to `default`,
-      // which is intentionally a no-op for session lifecycle — it only logs
-      // in dev. This guards against future server-side event additions
-      // accidentally triggering sign-out.
-      switch (data.type) {
-        case 'session_removed':
-          {
-            if (data.sessionId && onSessionRemovedRef.current) {
-              onSessionRemovedRef.current(data.sessionId);
-            }
-            if (data.sessionId && data.sessionId === currentActiveSessionId) {
-              await triggerLocalSignOut('You have been signed out remotely.', 'session_removed');
-            } else {
-              refreshSessionsSafe();
-            }
-            break;
-          }
-        case 'device_removed':
-          {
-            if (data.sessionIds && onSessionRemovedRef.current) {
-              for (const sessionId of data.sessionIds) {
-                onSessionRemovedRef.current(sessionId);
-              }
-            }
-            if (data.deviceId && currentDeviceIdValue && data.deviceId === currentDeviceIdValue) {
-              await triggerLocalSignOut('This device has been removed. You have been signed out.', 'device_removed');
-            } else {
-              refreshSessionsSafe();
-            }
-            break;
-          }
-        case 'sessions_removed':
-          {
-            if (data.sessionIds && onSessionRemovedRef.current) {
-              for (const sessionId of data.sessionIds) {
-                onSessionRemovedRef.current(sessionId);
-              }
-            }
-            if (data.sessionIds && currentActiveSessionId && data.sessionIds.includes(currentActiveSessionId)) {
-              await triggerLocalSignOut('You have been signed out remotely.', 'sessions_removed');
-            } else {
-              refreshSessionsSafe();
-            }
-            break;
-          }
-        case 'session_created':
-        case 'session_update':
-          {
-            // Lifecycle event for the current user. Just resync the sessions
-            // list — never sign out. A prior implementation compared
-            // `data.sessionId === currentActiveSessionId` and signed the user
-            // out if true, which was catastrophic: a
-            // `session_created` event fired immediately after a successful
-            // sign-in carries the user's NEW (now-active) session id, which
-            // matched and triggered an instant remote sign-out toast on every
-            // login. Whitelist explicitly; never fall through.
-            refreshSessionsSafe();
-            break;
-          }
-        default:
-          {
-            if (__DEV__) {
-              logger.warn('Unknown session socket event type', {
-                component: 'useSessionSocket',
-                type: data.type
-              });
-            }
-            break;
-          }
-      }
-    };
-    socket.on('connect', handleConnect);
-    socket.on('session_update', handleSessionUpdate);
-    return () => {
-      socket.off('connect', handleConnect);
-      socket.off('session_update', handleSessionUpdate);
-      socket.disconnect();
-      socketRef.current = null;
-    };
-  }, [userId, baseURL]); // Only depend on userId and baseURL - callbacks are in refs
-}
-//# sourceMappingURL=useSessionSocket.js.map

package/lib/module/ui/hooks/useSessionSocket.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["useEffect","useRef","io","toast","logger","createDebugLogger","debug","useSessionSocket","userId","activeSessionId","currentDeviceId","refreshSessions","clearSessionState","baseURL","getAccessToken","onRemoteSignOut","onSessionRemoved","socketRef","refreshSessionsRef","clearSessionStateRef","onRemoteSignOutRef","onSessionRemovedRef","activeSessionIdRef","currentDeviceIdRef","getAccessTokenRef","current","disconnect","transports","auth","cb","token","socket","handleConnect","log","id","refreshSessionsSafe","catch","error","__DEV__","component","triggerLocalSignOut","toastMessage","errorContext","info","Error","String","handleSessionUpdate","data","currentActiveSessionId","currentDeviceIdValue","type","sessionId","sessionIds","deviceId","includes","warn","on","off"],"sourceRoot":"../../../../src","sources":["ui/hooks/useSessionSocket.ts"],"mappings":";;AAAA,SAASA,SAAS,EAAEC,MAAM,QAAQ,OAAO;AACzC,OAAOC,EAAE,MAAuB,kBAAkB;AAClD,SAASC,KAAK,QAAQ,cAAc;AACpC,SAASC,MAAM,QAAQ,aAAa;AACpC,SAASC,iBAAiB,QAAQ,aAAa;AAE/C,MAAMC,KAAK,GAAGD,iBAAiB,CAAC,eAAe,CAAC;;AAEhD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AA2BA,OAAO,SAASE,gBAAgBA,CAAC;EAC/BC,MAAM;EACNC,eAAe;EACfC,eAAe;EACfC,eAAe;EACfC,iBAAiB;EACjBC,OAAO;EACPC,cAAc;EACdC,eAAe;EACfC;AACqB,CAAC,EAAE;EACxB,MAAMC,SAAS,GAAGhB,MAAM,CAAgB,IAAI,CAAC;;EAE7C;EACA,MAAMiB,kBAAkB,GAAGjB,MAAM,CAACU,eAAe,CAAC;EAClD,MAAMQ,oBAAoB,GAAGlB,MAAM,CAACW,iBAAiB,CAAC;EACtD,MAAMQ,kBAAkB,GAAGnB,MAAM,CAACc,eAAe,CAAC;EAClD,MAAMM,mBAAmB,GAAGpB,MAAM,CAACe,gBAAgB,CAAC;EACpD,MAAMM,kBAAkB,GAAGrB,MAAM,CAACQ,eAAe,CAAC;EAClD,MAAMc,kBAAkB,GAAGtB,MAAM,CAACS,eAAe,CAAC;EAClD,MAAMc,iBAAiB,GAAGvB,MAAM,CAACa,cAAc,CAAC;;EAEhD;EACAd,SAAS,CAAC,MAAM;IACdkB,kBAAkB,CAACO,OAAO,GAAGd,eAAe;IAC5CQ,oBAAoB,CAACM,OAAO,GAAGb,iBAAiB;IAChDQ,kBAAkB,CAACK,OAAO,GAAGV,eAAe;IAC5CM,mBAAmB,CAACI,OAAO,GAAGT,gBAAgB;IAC9CM,kBAAkB,CAACG,OAAO,GAAGhB,eAAe;IAC5Cc,kBAAkB,CAACE,OAAO,GAAGf,eAAe;IAC5Cc,iBAAiB,CAACC,OAAO,GAAGX,cAAc;EAC5C,CAAC,EAAE,CAACH,eAAe,EAAEC,iBAAiB,EAAEG,eAAe,EAAEC,gBAAgB,EAAEP,eAAe,EAAEC,eAAe,EAAEI,cAAc,CAAC,CAAC;EAE7Hd,SAAS,CAAC,MAAM;IACd,IAAI,CAACQ,MAAM,IAAI,CAACK,OAAO,EAAE;MACvB;MACA,IAAII,SAAS,CAACQ,OAAO,EAAE;QACrBR,SAAS,CAACQ,OAAO,CAACC,UAAU,CAAC,CAAC;QAC9BT,SAAS,CAACQ,OAAO,GAAG,IAAI;MAC1B;MACA;IACF;;IAEA;IACA,IAAIR,SAAS,CAACQ,OAAO,EAAE;MACrBR,SAAS,CAACQ,OAAO,CAACC,UAAU,CAAC,CAAC;MAC9BT,SAAS,CAACQ,OAAO,GAAG,IAAI;IAC1B;;IAEA;IACAR,SAAS,CAACQ,OAAO,GAAGvB,EAAE,CAACW,OAAO,EAAE;MAC9Bc,UAAU,EAAE,CAAC,WAAW,CAAC;MACzBC,IAAI,EAAGC,EAAE,IAAK;QACZ,MAAMC,KAAK,GAAGN,iBAAiB,CAACC,OAAO,CAAC,CAAC;QACzCI,EAAE,CAAC;UAAEC,KAAK,EAAEA,KAAK,IAAI;QAAG,CAAC,CAAC;MAC5B;IACF,CAAC,CAAC;IACF,MAAMC,MAAM,GAAGd,SAAS,CAACQ,OAAO;;IAEhC;IACA,MAAMO,aAAa,GAAGA,CAAA,KAAM;MAC1B1B,KAAK,CAAC2B,GAAG,CAAC,mBAAmB,EAAEF,MAAM,CAACG,EAAE,CAAC;IAC3C,CAAC;IAED,MAAMC,mBAAmB,GAAGA,CAAA,KAAM;MAChCjB,kBAAkB,CAACO,OAAO,CAAC,CAAC,CAACW,KAAK,CAAEC,KAAc,IAAK;QACrD;QACA;QACA,IAAIC,OAAO,EAAE;UACXlC,MAAM,CAACE,KAAK,CACV,iDAAiD,EACjD;YAAEiC,SAAS,EAAE;UAAmB,CAAC,EACjCF,KACF,CAAC;QACH;MACF,CAAC,CAAC;IACJ,CAAC;IAED,MAAMG,mBAAmB,GAAG,MAAAA,CAAOC,YAAoB,EAAEC,YAAoB,KAAK;MAChF,IAAItB,kBAAkB,CAACK,OAAO,EAAE;QAC9BL,kBAAkB,CAACK,OAAO,CAAC,CAAC;MAC9B,CAAC,MAAM;QACLtB,KAAK,CAACwC,IAAI,CAACF,YAAY,CAAC;MAC1B;MACA;MACA;MACA,IAAI;QACF,MAAMtB,oBAAoB,CAACM,OAAO,CAAC,CAAC;MACtC,CAAC,CAAC,OAAOY,KAAK,EAAE;QACd,IAAIC,OAAO,EAAE;UACXlC,MAAM,CAACiC,KAAK,CACV,uCAAuCK,YAAY,EAAE,EACrDL,KAAK,YAAYO,KAAK,GAAGP,KAAK,GAAG,IAAIO,KAAK,CAACC,MAAM,CAACR,KAAK,CAAC,CAAC,EACzD;YAAEE,SAAS,EAAE;UAAmB,CAClC,CAAC;QACH;MACF;IACF,CAAC;IAED,MAAMO,mBAAmB,GAAG,MAAOC,IAA0B,IAAK;MAChEzC,KAAK,CAAC2B,GAAG,CAAC,0BAA0B,EAAEc,IAAI,CAAC;MAE3C,MAAMC,sBAAsB,GAAG1B,kBAAkB,CAACG,OAAO;MACzD,MAAMwB,oBAAoB,GAAG1B,kBAAkB,CAACE,OAAO;;MAEvD;MACA;MACA;MACA;MACA;MACA,QAAQsB,IAAI,CAACG,IAAI;QACf,KAAK,iBAAiB;UAAE;YACtB,IAAIH,IAAI,CAACI,SAAS,IAAI9B,mBAAmB,CAACI,OAAO,EAAE;cACjDJ,mBAAmB,CAACI,OAAO,CAACsB,IAAI,CAACI,SAAS,CAAC;YAC7C;YACA,IAAIJ,IAAI,CAACI,SAAS,IAAIJ,IAAI,CAACI,SAAS,KAAKH,sBAAsB,EAAE;cAC/D,MAAMR,mBAAmB,CAAC,oCAAoC,EAAE,iBAAiB,CAAC;YACpF,CAAC,MAAM;cACLL,mBAAmB,CAAC,CAAC;YACvB;YACA;UACF;QACA,KAAK,gBAAgB;UAAE;YACrB,IAAIY,IAAI,CAACK,UAAU,IAAI/B,mBAAmB,CAACI,OAAO,EAAE;cAClD,KAAK,MAAM0B,SAAS,IAAIJ,IAAI,CAACK,UAAU,EAAE;gBACvC/B,mBAAmB,CAACI,OAAO,CAAC0B,SAAS,CAAC;cACxC;YACF;YACA,IAAIJ,IAAI,CAACM,QAAQ,IAAIJ,oBAAoB,IAAIF,IAAI,CAACM,QAAQ,KAAKJ,oBAAoB,EAAE;cACnF,MAAMT,mBAAmB,CACvB,yDAAyD,EACzD,gBACF,CAAC;YACH,CAAC,MAAM;cACLL,mBAAmB,CAAC,CAAC;YACvB;YACA;UACF;QACA,KAAK,kBAAkB;UAAE;YACvB,IAAIY,IAAI,CAACK,UAAU,IAAI/B,mBAAmB,CAACI,OAAO,EAAE;cAClD,KAAK,MAAM0B,SAAS,IAAIJ,IAAI,CAACK,UAAU,EAAE;gBACvC/B,mBAAmB,CAACI,OAAO,CAAC0B,SAAS,CAAC;cACxC;YACF;YACA,IACEJ,IAAI,CAACK,UAAU,IACfJ,sBAAsB,IACtBD,IAAI,CAACK,UAAU,CAACE,QAAQ,CAACN,sBAAsB,CAAC,EAChD;cACA,MAAMR,mBAAmB,CAAC,oCAAoC,EAAE,kBAAkB,CAAC;YACrF,CAAC,MAAM;cACLL,mBAAmB,CAAC,CAAC;YACvB;YACA;UACF;QACA,KAAK,iBAAiB;QACtB,KAAK,gBAAgB;UAAE;YACrB;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACAA,mBAAmB,CAAC,CAAC;YACrB;UACF;QACA;UAAS;YACP,IAAIG,OAAO,EAAE;cACXlC,MAAM,CAACmD,IAAI,CAAC,mCAAmC,EAAE;gBAC/ChB,SAAS,EAAE,kBAAkB;gBAC7BW,IAAI,EAAEH,IAAI,CAACG;cACb,CAAC,CAAC;YACJ;YACA;UACF;MACF;IACF,CAAC;IAEDnB,MAAM,CAACyB,EAAE,CAAC,SAAS,EAAExB,aAAa,CAAC;IACnCD,MAAM,CAACyB,EAAE,CAAC,gBAAgB,EAAEV,mBAAmB,CAAC;IAEhD,OAAO,MAAM;MACXf,MAAM,CAAC0B,GAAG,CAAC,SAAS,EAAEzB,aAAa,CAAC;MACpCD,MAAM,CAAC0B,GAAG,CAAC,gBAAgB,EAAEX,mBAAmB,CAAC;MACjDf,MAAM,CAACL,UAAU,CAAC,CAAC;MACnBT,SAAS,CAACQ,OAAO,GAAG,IAAI;IAC1B,CAAC;EACH,CAAC,EAAE,CAACjB,MAAM,EAAEK,OAAO,CAAC,CAAC,CAAC,CAAC;AACzB","ignoreList":[]}

package/lib/module/utils/silentGuardKey.js

@@ -1,49 +0,0 @@
-"use strict";
-
-/**
- * Shared, pure helpers for building the `origin|baseURL` signature used as the
- * module-level run-once guard key for cold-boot silent-SSO probes
- * (`silentColdBootKey` in `OxyContext`, `ssoSignature` in `useWebSSO`).
- *
- * NATIVE SAFETY (the bug this fixes): React Native aliases a global `window`
- * (it points at the JS global object), so `typeof window !== 'undefined'` is
- * `true` on native — but `window.location` is `undefined`. Reading
- * `window.location.origin` after only a `typeof window` check therefore throws
- * `TypeError: Cannot read property 'origin' of undefined` on native. Because
- * the key is built UNCONDITIONALLY at the top of the cold-boot path (before its
- * try/catch), that throw escaped session restore entirely and broke
- * cross-session restore on native. Both prior copies of the guard had the same
- * insufficient `typeof window` check and were prone to drift, so the read is
- * consolidated here behind a guard that also verifies `window.location`.
- */
-
-/**
- * Read `window.location.origin` safely on every platform.
- *
- * Returns the browser origin on web, and the sentinel `'no-origin'` anywhere
- * `window.location` is absent (React Native, SSR/Node). Never throws.
- */
-export function safeWindowOrigin() {
-  if (typeof window !== 'undefined' && typeof window.location !== 'undefined') {
-    return window.location.origin;
-  }
-  return 'no-origin';
-}
-
-/**
- * Build the stable `origin|baseURL` signature for the silent-SSO run-once
- * guard. Two providers pointed at the same API from the same origin share one
- * attempt. `getBaseURL` is invoked defensively (it may be absent or throw on a
- * partially-initialised client); any failure degrades to an empty baseURL.
- */
-export function buildSilentGuardKey(getBaseURL) {
-  const origin = safeWindowOrigin();
-  let baseURL = '';
-  try {
-    baseURL = getBaseURL?.() ?? '';
-  } catch {
-    baseURL = '';
-  }
-  return `${origin}|${baseURL}`;
-}
-//# sourceMappingURL=silentGuardKey.js.map

package/lib/module/utils/silentGuardKey.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["safeWindowOrigin","window","location","origin","buildSilentGuardKey","getBaseURL","baseURL"],"sourceRoot":"../../../src","sources":["utils/silentGuardKey.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,gBAAgBA,CAAA,EAAW;EACzC,IAAI,OAAOC,MAAM,KAAK,WAAW,IAAI,OAAOA,MAAM,CAACC,QAAQ,KAAK,WAAW,EAAE;IAC3E,OAAOD,MAAM,CAACC,QAAQ,CAACC,MAAM;EAC/B;EACA,OAAO,WAAW;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAACC,UAAqC,EAAU;EACjF,MAAMF,MAAM,GAAGH,gBAAgB,CAAC,CAAC;EACjC,IAAIM,OAAO,GAAG,EAAE;EAChB,IAAI;IACFA,OAAO,GAAGD,UAAU,GAAG,CAAC,IAAI,EAAE;EAChC,CAAC,CAAC,MAAM;IACNC,OAAO,GAAG,EAAE;EACd;EACA,OAAO,GAAGH,MAAM,IAAIG,OAAO,EAAE;AAC/B","ignoreList":[]}

package/lib/typescript/commonjs/ui/components/accountMenuRows.d.ts

@@ -1,34 +0,0 @@
-import type { DeviceAccount, DeviceAccountUser } from '../hooks/useDeviceAccounts';
-export interface AccountRow {
-    sessionId: string;
-    /** Device-local refresh-cookie slot index (web silent-switch). */
-    authuser?: number;
-    isActive: boolean;
-    displayName: string;
-    secondary: string | null;
-    avatarUri?: string;
-    user: DeviceAccountUser | null;
-}
-export interface BuildAccountRowsInput {
-    /**
-     * Per-device account entries from {@link useDeviceAccounts}. Each entry
-     * already carries real per-account `displayName` / `email` / `avatarUrl` /
-     * `color`, so EVERY row (not just the active one) renders full identity.
-     */
-    accounts: DeviceAccount[];
-}
-/**
- * Pure builder for `AccountMenu` rows. Extracted so the multi-account display
- * logic can be unit-tested without rendering React Native.
- *
- * Maps each {@link DeviceAccount} (sourced from `useDeviceAccounts()`, which
- * hydrates EVERY account with real name/email/avatar/color from the shared
- * apex `refresh-all` path or the local fallback) into an `AccountRow`.
- *
- * `secondary` is the account's real email when present; otherwise it falls
- * back to the `@handle` line. A missing email is NEVER synthesized into a fake
- * `username@oxy.so` — the device-account layer already resolved `email` to the
- * real value or the `@handle` fallback.
- */
-export declare function buildAccountRows({ accounts, }: BuildAccountRowsInput): AccountRow[];
-//# sourceMappingURL=accountMenuRows.d.ts.map

package/lib/typescript/commonjs/ui/components/accountMenuRows.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"accountMenuRows.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/accountMenuRows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEnF,MAAM,WAAW,UAAU;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IAClC;;;;OAIG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,EAC7B,QAAQ,GACX,EAAE,qBAAqB,GAAG,UAAU,EAAE,CAUtC"}

package/lib/typescript/commonjs/ui/hooks/useDeviceAccounts.d.ts

@@ -1,133 +0,0 @@
-import type { RefreshAllAccountUser, User } from '@oxyhq/core';
-/**
- * The per-account user shape carried by a {@link DeviceAccount}. Either:
- *  - the minimal projection returned by `POST /auth/refresh-all`
- *    ({@link RefreshAllAccountUser}, the shared apex path), or
- *  - the SDK's canonical {@link User} document (the active row on the local
- *    fallback path, which already has the full user loaded in `useOxy()`).
- *
- * Both satisfy `getAccountDisplayName`'s `DisplayNameUserShape`, so display
- * resolution is uniform across paths.
- */
-export type DeviceAccountUser = RefreshAllAccountUser | User;
-/**
- * One signed-in account on this device, fully hydrated for the account
- * chooser. Unlike the old `AccountMenu` behaviour (which only carried the
- * ACTIVE session's user), EVERY entry here carries real per-account
- * `displayName` / `email` / `avatarUrl` / `color`.
- */
-export interface DeviceAccount {
-    /** Session id used to switch to this account on native. */
-    sessionId: string;
-    /**
-     * Device-local refresh-cookie slot index (0..N-1), present only on the
-     * shared apex path. Web silent-switch (`refreshTokenViaCookie({ authuser }`)
-     * keys off this; absent on the local fallback and on native.
-     */
-    authuser?: number;
-    /** Whether this account is the currently-active session. */
-    isCurrent: boolean;
-    /** Friendly display name (never blank — falls back to a handle/sentinel). */
-    displayName: string;
-    /**
-     * Real account email, or `null` when the account genuinely has none.
-     * NEVER a synthesized `username@oxy.so` — a missing email stays `null` and
-     * the UI falls back to the `@handle` secondary line.
-     */
-    email: string | null;
-    /** Resolved avatar thumbnail URL, or `undefined` when the account has no avatar. */
-    avatarUrl?: string;
-    /** Account's preferred Bloom color preset, or `null` when unset. */
-    color: string | null;
-    /** The underlying per-account user payload (shared projection or full User). */
-    user: DeviceAccountUser;
-}
-export interface UseDeviceAccountsResult {
-    /** Every account signed in on this device, current one(s) flagged `isCurrent`. */
-    accounts: DeviceAccount[];
-    /** True until the first detection settles. */
-    isLoading: boolean;
-    /** The currently-active session id (mirrors `useOxy().activeSessionId`). */
-    currentSessionId: string | null;
-    /**
-     * `true` when the list came from the shared apex path
-     * (`refreshAllSessions()` returned >0 accounts — the cross-domain SSO cookie
-     * set on `*.oxy.so`). `false` when it came from the local `useOxy()`
-     * fallback (native, or cross-domain web where the apex cookie is absent).
-     */
-    fromSharedApex: boolean;
-}
-/**
- * Resolve which entries are the current account, robustly.
- *
- * Primary signal: `entry.sessionId === activeSessionId`. On the web shared-apex
- * path, `refreshAllSessions()` returns SERVER-side session ids that may not
- * equal the locally-stored `activeSessionId` (a different storage namespace /
- * server perspective), so a pure `sessionId` match can flag NO row as current —
- * the bug that surfaced as "Not signed in" even while authenticated.
- *
- * Fallbacks, applied only when the `sessionId` match found nothing AND the user
- * is authenticated:
- *  1. Match the live `user.id` against each entry's per-account user id.
- *  2. If still nothing and there is exactly one account, mark that one current.
- *
- * At most ONE entry is ever marked current.
- *
- * Pure & side-effect free so it is unit-testable without rendering React.
- */
-export declare function markCurrentAccount(accounts: DeviceAccount[], activeSessionId: string | null | undefined, liveUserId: string | null | undefined, isAuthenticated: boolean): DeviceAccount[];
-/**
- * Resolve every account signed in on this device for the unified account
- * switcher, with real per-account name / email / avatar / color.
- *
- * ## Data sources (web vs native)
- *
- * - **Web on a `*.oxy.so` host** → `oxyServices.refreshAllSessions()` returns
- *   the full apex device-account list (identical to what `auth.oxy.so` sees,
- *   because the `Domain=oxy.so` refresh cookies reach `api.oxy.so`). Used
- *   directly — this is the `fromSharedApex: true` path.
- * - **Cross-domain web (non-`oxy.so` apex)** OR **native (no browser cookies)**
- *   → `refreshAllSessions()` yields `{ accounts: [] }` (the apex cookies never
- *   reach the request: cross-domain by `Domain`, native by having no cookie
- *   jar at all; a 401 is also normalised to `{ accounts: [] }` inside the
- *   core mixin). In that case we FALL BACK to the SDK's local multi-account
- *   list from `useOxy()` (`sessions` + `activeSessionId` + the active `user`).
- *   This is the `fromSharedApex: false` path.
- *
- * The fallback decision is purely data-driven: **if `refreshAllSessions()`
- * returns >0 accounts, use the shared path; otherwise fall back to local
- * `useOxy()` sessions.** No host sniffing is needed — the cookie scoping does
- * the discrimination for us, and the same code path works on native (where the
- * fetch returns `{ accounts: [] }`).
- *
- * ## Why React Query (not a `useRef`/`useState` start-once like the auth app)
- *
- * The auth app's `use-device-accounts.ts` hand-rolls a `startedRef` because it
- * has no React Query. The SDK does. `refreshAllSessions()` ROTATES single-use
- * refresh cookies on every call, so it must run AT MOST ONCE per page load:
- * we model that with `staleTime: Infinity` + `gcTime: Infinity` +
- * `refetchOnWindowFocus/Reconnect/Mount: false` + `retry: false`. React Query
- * dedupes concurrent mounts and caches the single result for the page's
- * lifetime — the exact "run once" guarantee the auth app documents, but
- * without the manual ref/state machinery.
- *
- * ## Validation note (intentionally NO zod re-parse)
- *
- * The auth app's hook calls `fetch` directly, so IT must `safeParse` the wire
- * response with `@oxyhq/contracts`. This hook calls
- * `oxyServices.refreshAllSessions()`, whose core mixin ALREADY validates and
- * normalises the wire response (skips entries missing required fields,
- * normalises `authuser` null→0, builds the `RefreshAllAccountUser` shape) — the
- * mixin is the single source of truth. Re-validating the SDK's own already-typed
- * output here would be redundant double-validation, so we do not re-parse.
- *
- * ## Error handling
- *
- * `refreshAllSessions()` already maps 401/404/abort to `{ accounts: [] }`
- * internally. Any OTHER failure (network, 5xx) propagates as a thrown error and
- * is surfaced by React Query (`query.isError`) — never swallowed. Callers that
- * don't care can ignore it; the hook still returns the local fallback list so
- * the chooser stays usable.
- */
-export declare function useDeviceAccounts(): UseDeviceAccountsResult;
-//# sourceMappingURL=useDeviceAccounts.d.ts.map

package/lib/typescript/commonjs/ui/hooks/useDeviceAccounts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useDeviceAccounts.d.ts","sourceRoot":"","sources":["../../../../../src/ui/hooks/useDeviceAccounts.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACR,qBAAqB,EACrB,IAAI,EAEP,MAAM,aAAa,CAAC;AAKrB;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,IAAI,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC1B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gFAAgF;IAChF,IAAI,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACpC,kFAAkF;IAClF,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,8CAA8C;IAC9C,SAAS,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAC9B,QAAQ,EAAE,aAAa,EAAE,EACzB,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC1C,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACrC,eAAe,EAAE,OAAO,GACzB,aAAa,EAAE,CAiCjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,wBAAgB,iBAAiB,IAAI,uBAAuB,CA4J3D"}

package/lib/typescript/commonjs/ui/hooks/useSessionSocket.d.ts

@@ -1,14 +0,0 @@
-interface UseSessionSocketProps {
-    userId: string | null | undefined;
-    activeSessionId: string | null | undefined;
-    currentDeviceId: string | null | undefined;
-    refreshSessions: () => Promise<void>;
-    clearSessionState: () => Promise<void>;
-    baseURL: string;
-    getAccessToken: () => string | null;
-    onRemoteSignOut?: () => void;
-    onSessionRemoved?: (sessionId: string) => void;
-}
-export declare function useSessionSocket({ userId, activeSessionId, currentDeviceId, refreshSessions, clearSessionState, baseURL, getAccessToken, onRemoteSignOut, onSessionRemoved, }: UseSessionSocketProps): void;
-export {};
-//# sourceMappingURL=useSessionSocket.d.ts.map

package/lib/typescript/commonjs/ui/hooks/useSessionSocket.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useSessionSocket.d.ts","sourceRoot":"","sources":["../../../../../src/ui/hooks/useSessionSocket.ts"],"names":[],"mappings":"AA8BA,UAAU,qBAAqB;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAClC,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,iBAAiB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAED,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,eAAe,EACf,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,EAAE,qBAAqB,QAoLvB"}

package/lib/typescript/commonjs/utils/silentGuardKey.d.ts

@@ -1,31 +0,0 @@
-/**
- * Shared, pure helpers for building the `origin|baseURL` signature used as the
- * module-level run-once guard key for cold-boot silent-SSO probes
- * (`silentColdBootKey` in `OxyContext`, `ssoSignature` in `useWebSSO`).
- *
- * NATIVE SAFETY (the bug this fixes): React Native aliases a global `window`
- * (it points at the JS global object), so `typeof window !== 'undefined'` is
- * `true` on native — but `window.location` is `undefined`. Reading
- * `window.location.origin` after only a `typeof window` check therefore throws
- * `TypeError: Cannot read property 'origin' of undefined` on native. Because
- * the key is built UNCONDITIONALLY at the top of the cold-boot path (before its
- * try/catch), that throw escaped session restore entirely and broke
- * cross-session restore on native. Both prior copies of the guard had the same
- * insufficient `typeof window` check and were prone to drift, so the read is
- * consolidated here behind a guard that also verifies `window.location`.
- */
-/**
- * Read `window.location.origin` safely on every platform.
- *
- * Returns the browser origin on web, and the sentinel `'no-origin'` anywhere
- * `window.location` is absent (React Native, SSR/Node). Never throws.
- */
-export declare function safeWindowOrigin(): string;
-/**
- * Build the stable `origin|baseURL` signature for the silent-SSO run-once
- * guard. Two providers pointed at the same API from the same origin share one
- * attempt. `getBaseURL` is invoked defensively (it may be absent or throw on a
- * partially-initialised client); any failure degrades to an empty baseURL.
- */
-export declare function buildSilentGuardKey(getBaseURL?: () => string | undefined): string;
-//# sourceMappingURL=silentGuardKey.d.ts.map

package/lib/typescript/commonjs/utils/silentGuardKey.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"silentGuardKey.d.ts","sourceRoot":"","sources":["../../../../src/utils/silentGuardKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAKzC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,MAAM,CASjF"}

package/lib/typescript/module/ui/components/accountMenuRows.d.ts

@@ -1,34 +0,0 @@
-import type { DeviceAccount, DeviceAccountUser } from '../hooks/useDeviceAccounts.js';
-export interface AccountRow {
-    sessionId: string;
-    /** Device-local refresh-cookie slot index (web silent-switch). */
-    authuser?: number;
-    isActive: boolean;
-    displayName: string;
-    secondary: string | null;
-    avatarUri?: string;
-    user: DeviceAccountUser | null;
-}
-export interface BuildAccountRowsInput {
-    /**
-     * Per-device account entries from {@link useDeviceAccounts}. Each entry
-     * already carries real per-account `displayName` / `email` / `avatarUrl` /
-     * `color`, so EVERY row (not just the active one) renders full identity.
-     */
-    accounts: DeviceAccount[];
-}
-/**
- * Pure builder for `AccountMenu` rows. Extracted so the multi-account display
- * logic can be unit-tested without rendering React Native.
- *
- * Maps each {@link DeviceAccount} (sourced from `useDeviceAccounts()`, which
- * hydrates EVERY account with real name/email/avatar/color from the shared
- * apex `refresh-all` path or the local fallback) into an `AccountRow`.
- *
- * `secondary` is the account's real email when present; otherwise it falls
- * back to the `@handle` line. A missing email is NEVER synthesized into a fake
- * `username@oxy.so` — the device-account layer already resolved `email` to the
- * real value or the `@handle` fallback.
- */
-export declare function buildAccountRows({ accounts, }: BuildAccountRowsInput): AccountRow[];
-//# sourceMappingURL=accountMenuRows.d.ts.map

package/lib/typescript/module/ui/components/accountMenuRows.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"accountMenuRows.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/accountMenuRows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,+BAA4B,CAAC;AAEnF,MAAM,WAAW,UAAU;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IAClC;;;;OAIG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,EAC7B,QAAQ,GACX,EAAE,qBAAqB,GAAG,UAAU,EAAE,CAUtC"}