@oxyhq/services 14.0.1 → 15.0.0

package/lib/typescript/module/ui/screens/EditProfileFieldScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EditProfileFieldScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/EditProfileFieldScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AAYzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAa3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACtB,aAAa,GACb,UAAU,GACV,OAAO,GACP,KAAK,GACL,OAAO,GACP,SAAS,GACT,UAAU,GACV,UAAU,GACV,WAAW,GACX,OAAO,CAAC;AAmBd,UAAU,2BAA4B,SAAQ,eAAe;IACzD,6BAA6B;IAC7B,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAChC;;AAihBD,wBAAkD"}
+{"version":3,"file":"EditProfileFieldScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/EditProfileFieldScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAY9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAe3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACtB,aAAa,GACb,UAAU,GACV,OAAO,GACP,KAAK,GACL,OAAO,GACP,SAAS,GACT,UAAU,GACV,UAAU,GACV,WAAW,GACX,OAAO,CAAC;AAmBd,UAAU,2BAA4B,SAAQ,eAAe;IACzD,6BAA6B;IAC7B,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAChC;;AAmjBD,wBAAkD"}

package/lib/typescript/module/ui/screens/EditProfileScreen.d.ts

@@ -0,0 +1,14 @@
+import type React from 'react';
+import type { BaseScreenProps } from '../types/navigation.js';
+/**
+ * EditProfileScreen — the profile-editing HUB.
+ *
+ * Lists every editable profile field as its own row; each row deep-links into
+ * {@link EditProfileFieldScreen} with the matching `fieldType`. The avatar row
+ * reuses the exact same `openAvatarPicker` entry point that
+ * {@link ManageAccountScreen} uses. This is the single entry into per-field
+ * editing — reached from ManageAccount's "Edit profile" row.
+ */
+declare const EditProfileScreen: React.FC<BaseScreenProps>;
+export default EditProfileScreen;
+//# sourceMappingURL=EditProfileScreen.d.ts.map

package/lib/typescript/module/ui/screens/EditProfileScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EditProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/EditProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAO/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAQ3D;;;;;;;;GAQG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAgIhD,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/lib/typescript/module/ui/screens/ManageAccountScreen.d.ts

@@ -6,7 +6,7 @@ import type { BaseScreenProps } from '../types/navigation.js';
  * Replaces AccountOverview + AccountSettings + the per-account half of
  * SessionManagement. Lists ONLY the active user's profile, sessions on this
  * device, and security/destructive actions for THIS account. Multi-account
- * surface lives in {@link AccountMenu} — keep these concerns separate.
+ * surface lives in {@link AccountSwitcher} — keep these concerns separate.
  */
 declare const ManageAccountScreen: React.FC<BaseScreenProps>;
 export default ManageAccountScreen;

package/lib/typescript/module/ui/screens/ManageAccountScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ManageAccountScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ManageAccountScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAsB/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAoD3D;;;;;;;GAOG;AACH,QAAA,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA+5BlD,CAAC;AA+BF,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"ManageAccountScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ManageAccountScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAsB/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAoD3D;;;;;;;GAOG;AACH,QAAA,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA25BlD,CAAC;AA+BF,eAAe,mBAAmB,CAAC"}

package/lib/typescript/module/ui/screens/OxyAuthScreen.d.ts

@@ -1,18 +1,19 @@
 /**
- * OxyAuthScreen - Sign in with Oxy (native bottom-sheet container)
+ * OxyAuthScreen — Sign in with Oxy (native bottom-sheet container).
  *
- * Used by OTHER apps in the Oxy ecosystem to authenticate users. The primary
- * action is the one-tap "Continue with Oxy" approval flow (opens the Oxy Auth
- * web flow with a deep-link `redirect_uri` so the app→app return path can
- * complete the sign-in). The QR code is demoted to a collapsed "Sign in on
- * another device" disclosure — you can't scan your own screen.
+ * Two phases, Google-style:
+ *  1. Account chooser (FRONT screen, shown when the device/user already has
+ *     accounts): pick an account to continue as — one tap switches through the
+ *     SAME `switchToAccount` path the account switcher uses — or "Use another
+ *     account" to reveal the sign-in options.
+ *  2. Sign-in options: the first-party password flow (identifier → password →
+ *     optional 2FA, `usePasswordSignIn`) as the PRIMARY action, with the
+ *     cross-app device flow (same-device deep-link + "sign in on another device"
+ *     QR) as a SECONDARY option below an "or" divider.
  *
- * ALL of the auth-session machinery (session-token creation, QR data, socket +
- * polling, the native deep-link return path, waiting/error/retry state, the
- * open-auth handler, and cleanup) lives in the shared `useOxyAuthSession` hook,
- * which the web `SignInModal` also consumes — neither container re-implements
- * the transport. The Oxy Accounts app is where users manage their cryptographic
- * identity; this screen should NOT be used within the Accounts app itself.
+ * The device-flow machinery lives in the shared `useOxyAuthSession` hook (the
+ * web `SignInModal` consumes it too). This screen should NOT be used within the
+ * Oxy Accounts app itself.
  */
 import type React from 'react';
 import type { BaseScreenProps } from '../types/navigation.js';

package/lib/typescript/module/ui/screens/OxyAuthScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyAuthScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/OxyAuthScreen.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAc3D,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA6I5C,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"OxyAuthScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/OxyAuthScreen.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAmB3D,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAyR5C,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/lib/typescript/module/ui/screens/ProfileScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAe3D,UAAU,kBAAmB,SAAQ,eAAe;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAkS/C,CAAC;AA0CF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"ProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAe3D,UAAU,kBAAmB,SAAQ,eAAe;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CA+S/C,CAAC;AA0CF,eAAe,aAAa,CAAC"}

package/lib/typescript/module/ui/screens/linkFormat.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pure link-display helpers for the profile "links" editor. Kept out of the
+ * screen component so the string-coercion guard can be unit-tested without
+ * rendering the whole React Native screen.
+ */
+/** Strip the protocol and any trailing slash from a link URL for display. */
+export declare const getLinkTitle: (url: string) => string;
+/** Human-readable description for a link URL. */
+export declare const getLinkDescription: (url: string) => string;
+export interface LinkListItem {
+    id: string;
+    url: string;
+    title: string;
+    description: string;
+}
+/**
+ * Build editable list items from a raw links array. The array can come from
+ * legacy or untrusted profile data whose elements are not guaranteed to be
+ * strings, so each entry is coerced with `String(item ?? '')` before formatting
+ * — a non-string element must never crash the editor.
+ */
+export declare function linksToListItems(links: readonly unknown[]): LinkListItem[];
+//# sourceMappingURL=linkFormat.d.ts.map

package/lib/typescript/module/ui/screens/linkFormat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linkFormat.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/linkFormat.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,YAAY,GAAI,KAAK,MAAM,KAAG,MACW,CAAC;AAEvD,iDAAiD;AACjD,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAAG,MAA0B,CAAC;AAE5E,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,YAAY,EAAE,CAU1E"}

package/lib/typescript/module/ui/session/authStore.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Platform `AuthStateStore` for `@oxyhq/services`.
+ *
+ * The device-first session model persists the rotating refresh-token family
+ * head per origin (web) / per device (native). `@oxyhq/core` owns the store
+ * shape + logic (`createWebAuthStateStore` / `createNativeAuthStateStore`); this
+ * module only supplies the platform storage seam and wires the native device
+ * token to the SHARED keychain so every native Oxy app joins one DeviceSession:
+ *
+ *  - web  → `createWebAuthStateStore()` (localStorage, in-memory fallback).
+ *  - native → `createNativeAuthStateStore(secureKV)` for the SESSION blob
+ *    (refresh token) over `expo-secure-store` (AsyncStorage fallback), with the
+ *    long-lived DEVICE token delegated to `KeyManager`'s shared keychain
+ *    (`group.so.oxy.shared`) instead of per-app storage — so an in-app login on
+ *    any native Oxy app attributes to the SAME server-side DeviceSession.
+ *
+ * `expo-secure-store` is loaded via a runtime-computed dynamic import (the same
+ * optional-native-module pattern `OxyProvider` uses for netinfo / keyboard
+ * controller), so the web bundle never pulls it and a device without it falls
+ * back to AsyncStorage rather than crashing.
+ */
+import { type AuthStateStore } from '@oxyhq/core';
+/**
+ * Build the platform {@link AuthStateStore} for this runtime.
+ *
+ * Native additionally routes the device token through the shared keychain so
+ * every native Oxy app shares one server-side DeviceSession; the session blob
+ * (refresh token) stays per-app in SecureStore. Best-effort keychain access —
+ * a locked/failed shared-keychain read degrades to "no device token" rather
+ * than throwing out of cold boot / refresh.
+ */
+export declare function createPlatformAuthStateStore(): AuthStateStore;
+//# sourceMappingURL=authStore.d.ts.map

package/lib/typescript/module/ui/session/authStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authStore.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/authStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAIL,KAAK,cAAc,EAGpB,MAAM,aAAa,CAAC;AAmFrB;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAAI,cAAc,CA2C7D"}

package/lib/typescript/module/ui/session/createSessionClient.d.ts

@@ -1,14 +1,25 @@
-import type { OxyServices } from '@oxyhq/core';
-import { SessionClient } from '@oxyhq/core';
-import { createSessionClientHost } from './sessionClientHost.js';
+import { SessionClient, createSessionClientHost, type AuthStateStore, type OxyServices } from '@oxyhq/core';
 /**
- * Wires a `SessionClient` for `@oxyhq/services`: builds the `SessionClientHost`
- * adapter (Task 1) and the platform `TokenTransport` (Task 3) over the given
- * `OxyServices` instance, and returns both the client and the host — the host
- * is returned (not just the client) so `OxyContext` (Fase 3-B) can call
- * `host.setCurrentAccountId(...)` as the active account changes.
+ * Wire a `SessionClient` for `@oxyhq/services`.
+ *
+ * The platform-agnostic parts (host adapter, client, projection helpers) live
+ * ONCE in `@oxyhq/core`; this thin factory only injects the pieces specific to
+ * the RN/Expo SDK:
+ *
+ *  - `socket.io-client`'s `io`, STATICALLY imported (socket.io-client is a real
+ *    dependency of `@oxyhq/services`) so realtime session sync never relies on
+ *    core's lazy dynamic import of a bare specifier — bundler-fragile in
+ *    Metro/Expo-web against the published core dist.
+ *  - the device-first {@link createTokenTransport}, which mints a fallback token
+ *    by rotating the persisted refresh family (`store`).
+ *
+ * `onUnauthenticated` fires when an applied device state has zero accounts (a
+ * device signout-all): the provider clears the persisted store + local state so
+ * a reload does not try to restore a dead session. The host is returned
+ * alongside the client so the caller can call `host.setCurrentAccountId(...)`
+ * as the active account changes.
  */
-export declare function createSessionClient(oxyServices: OxyServices): {
+export declare function createSessionClient(oxyServices: OxyServices, store: AuthStateStore, onUnauthenticated?: () => void): {
     client: SessionClient;
     host: ReturnType<typeof createSessionClientHost>;
 };

package/lib/typescript/module/ui/session/createSessionClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createSessionClient.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/createSessionClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAqB,CAAC;AAG9D;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,WAAW,GAAG;IAC7D,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;CAClD,CAKA"}
+{"version":3,"file":"createSessionClient.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/createSessionClient.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AAGrB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,cAAc,EACrB,iBAAiB,CAAC,EAAE,MAAM,IAAI,GAC7B;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;CAClD,CAKA"}

package/lib/typescript/module/ui/session/index.d.ts

@@ -1,15 +1,15 @@
 /**
- * Session-sync integration layer (Fase 3-A) — intra-package use only.
+ * Session-sync integration layer — intra-package use only.
  *
- * These modules let `@oxyhq/services` drive the platform-agnostic
- * `SessionClient` (in `@oxyhq/core`): a thin host adapter over `OxyServices`,
- * pure `DeviceSessionState → services` projection helpers, a platform token
- * transport, and the factory that wires them together. Nothing here is
- * re-exported from the package root — `OxyContext` consumes it directly in
- * Fase 3-B.
+ * `@oxyhq/core` owns the platform-agnostic `SessionClient`, its host adapter,
+ * and the pure `DeviceSessionState → services` projection helpers; those are
+ * re-exported straight from core here so `OxyContext` has one import site.
+ * `@oxyhq/services` supplies only the two platform pieces: the thin
+ * `createSessionClient` factory (injects socket.io-client `io` + the
+ * device-first token transport) and the `AuthStateStore` factory.
  */
 export { createSessionClient } from './createSessionClient.js';
-export { createSessionClientHost } from './sessionClientHost.js';
 export { createTokenTransport } from './tokenTransport.js';
-export { accountIdsOf, activeSessionIdOf, activeUserOf, deviceStateToClientSessions, } from './projectSessionState.js';
+export { createPlatformAuthStateStore } from './authStore.js';
+export { createSessionClientHost, accountIdsOf, activeSessionIdOf, activeUserOf, deviceStateToClientSessions, } from '@oxyhq/core';
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/ui/session/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAqB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAkB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,0BAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAkB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAa,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,aAAa,CAAC"}

package/lib/typescript/module/ui/session/tokenTransport.d.ts

@@ -1,24 +1,18 @@
-import type { OxyServices, TokenTransport } from '@oxyhq/core';
+import { type AuthStateStore, type OxyServices, type TokenTransport } from '@oxyhq/core';
 /**
- * Platform `TokenTransport` for `SessionClient`: mints an access token when
- * none is currently held, reusing the SAME primitives `OxyContext`'s cold
- * boot already relies on (never re-implemented here):
+ * Platform `TokenTransport` for `SessionClient` (device-first model).
  *
- * - web: `oxyServices.silentSignIn()` (per-apex `/auth/silent` iframe).
- * - native: `oxyServices.signInWithSharedIdentity()` (app-group keychain).
+ * `ensureActiveToken` is the fallback the client uses when a `session_state`
+ * push arrived WITHOUT an embedded `activeToken` and the app currently holds no
+ * bearer. It mints one through the ONE unified refresh path
+ * (`refreshPersistedSession`): rotate the persisted refresh-token family
+ * (`POST /auth/refresh-token`) and, on native, fall back to the shared-keychain
+ * re-mint. There is no FedCM/silent-iframe arm anymore — the per-origin
+ * persisted refresh token is the durable web credential.
  *
- * Both primitives plant the token internally on success (the "Sign-In Token
- * Planting" rule) — `ensureActiveToken` never calls `setTokens` itself.
- *
- * `ensureActiveToken` treats a PRESENT token as sufficient in this phase; it
- * does not decode/match the token's subject against `state.activeAccountId`
- * (that refinement is Fase 3-B). Account switching itself is server-driven
- * via the `activeToken` carried in the sync envelope — this transport is
- * only the fallback used when the envelope carried no token.
- *
- * A failed mint is logged and swallowed: it must never throw out of
- * `ensureActiveToken`, since that would crash the caller (the SessionClient
- * socket handler in Fase 3-B).
+ * Concurrent pushes coalesce onto one in-flight mint. A failure is logged and
+ * swallowed: this method must never throw out (it runs inside the socket state
+ * handler).
  */
-export declare function createTokenTransport(oxyServices: OxyServices): TokenTransport;
+export declare function createTokenTransport(oxyServices: OxyServices, store: AuthStateStore): TokenTransport;
 //# sourceMappingURL=tokenTransport.d.ts.map

package/lib/typescript/module/ui/session/tokenTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokenTransport.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/tokenTransport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAI/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,WAAW,GAAG,cAAc,CAiD7E"}
+{"version":3,"file":"tokenTransport.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/tokenTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAGrB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,cAAc,GACpB,cAAc,CAsChB"}

package/lib/typescript/module/ui/utils/isWebBrowser.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Web-browser detection for `@oxyhq/services`.
+ *
+ * The predicate now lives ONCE in `@oxyhq/core` (`isWebBrowser`) so services and
+ * auth-sdk share the exact same DOM probe. This module re-exposes it under the
+ * existing internal import path so consumers stay unchanged.
+ */
+export { isWebBrowser } from '@oxyhq/core';
+//# sourceMappingURL=isWebBrowser.d.ts.map

package/lib/typescript/module/ui/utils/isWebBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isWebBrowser.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/isWebBrowser.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/lib/typescript/module/utils/deviceFlowSignIn.d.ts

@@ -30,9 +30,14 @@
  * claim->commit sequence here keeps native and web identical and
  * unit-testable.
  */
-import { type EstablishAfterClaimDeps, type SessionLoginResponse, type SsoEstablishClient, type User } from '@oxyhq/core';
+import { type SessionLoginResponse, type User } from '@oxyhq/core';
 interface DeviceFlowClaimResult {
     accessToken?: string;
+    /** Rotating refresh-token family head minted by `/auth/session/claim` on the
+     * trusted lane. Not on the core method's typed return, so read defensively;
+     * threaded into `commitSession` so the QR sign-in persists a durable session
+     * that survives a reload without a redirect. */
+    refreshToken?: string;
     sessionId?: string;
     deviceId?: string;
     expiresAt?: string;
@@ -44,10 +49,8 @@ interface DeviceFlowClaimResult {
  * trivially unit-testable with a stub and never pulls the RN/Expo runtime into
  * a test bundle.
  *
- * Extends {@link SsoEstablishClient} (`requestSsoEstablishUrl`) so the WEB
- * post-claim durable-session hop can be driven off the same client.
  */
-export interface DeviceFlowClient extends SsoEstablishClient {
+export interface DeviceFlowClient {
     /**
      * Exchange the device-flow `sessionToken` for the first access + refresh
      * token, planting them on the client. Single-use; replay is rejected by the
@@ -71,15 +74,14 @@ export interface CompleteDeviceFlowSignInOptions {
      * registers the account into the device's server-authoritative session set,
      * persists it durably, and hydrates the full user profile. Runs AFTER the
      * bearer is planted so its bearer-protected calls succeed.
+     *
+     * The `refreshToken` extra (optional; not on the public `SessionLoginResponse`
+     * type) carries the rotating refresh family so the commit funnel persists a
+     * durable session.
      */
-    commitSession: (session: SessionLoginResponse) => Promise<void>;
-    /**
-     * Injectable web seams for the post-claim durable-session establish hop
-     * ({@link establishIdpSessionAfterClaim}). Omit in production — the defaults
-     * resolve to `window.*` (and no-op off-web / on native). Tests inject fakes to
-     * drive the web path deterministically.
-     */
-    establishDeps?: EstablishAfterClaimDeps;
+    commitSession: (session: SessionLoginResponse & {
+        refreshToken?: string;
+    }) => Promise<void>;
 }
 /**
  * Complete a device-flow sign-in: claim the first access token with the secret
@@ -90,6 +92,6 @@ export interface CompleteDeviceFlowSignInOptions {
  * Throws if the claim did not return a usable session, or if either the claim
  * or the commit fails; callers surface a retry UI.
  */
-export declare function completeDeviceFlowSignIn({ oxyServices, sessionId, sessionToken, commitSession, establishDeps, }: CompleteDeviceFlowSignInOptions): Promise<User>;
+export declare function completeDeviceFlowSignIn({ oxyServices, sessionId, sessionToken, commitSession, }: CompleteDeviceFlowSignInOptions): Promise<User>;
 export {};
 //# sourceMappingURL=deviceFlowSignIn.d.ts.map

package/lib/typescript/module/utils/deviceFlowSignIn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deviceFlowSignIn.d.ts","sourceRoot":"","sources":["../../../../src/utils/deviceFlowSignIn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAGL,KAAK,uBAAuB,EAE5B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,IAAI,EACV,MAAM,aAAa,CAAC;AAErB,UAAU,qBAAqB;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,+BAA+B;IAC9C,6EAA6E;IAC7E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;;;;;OAKG;IACH,aAAa,CAAC,EAAE,uBAAuB,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,aAAa,GACd,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CjD"}
+{"version":3,"file":"deviceFlowSignIn.d.ts","sourceRoot":"","sources":["../../../../src/utils/deviceFlowSignIn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,IAAI,EACV,MAAM,aAAa,CAAC;AAErB,UAAU,qBAAqB;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;oDAGgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,+BAA+B;IAC9C,6EAA6E;IAC7E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,GACd,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CjD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/services",
-  "version": "14.0.1",
+  "version": "15.0.0",
   "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -106,10 +106,10 @@
     }
   },
   "dependencies": {
-    "@oxyhq/contracts": "0.8.0"
+    "@oxyhq/contracts": "0.9.1"
   },
   "devDependencies": {
-    "@oxyhq/core": "^5.4.2",
+    "@oxyhq/core": "^6.0.0",
     "nativewind": "5.0.0-preview.3",
     "react-native-css": "^3.0.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
@@ -153,7 +153,7 @@
   "peerDependencies": {
     "@expo/vector-icons": "^15.0.3",
     "@oxyhq/bloom": ">=0.16.0",
-    "@oxyhq/core": "^5.4.2",
+    "@oxyhq/core": "^6.0.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": "^11.4.1",
     "@tanstack/query-async-storage-persister": "^5.101",

package/src/index.ts

@@ -180,10 +180,6 @@ export {
     extractErrorMessage,
 } from './ui/utils/errorHandlers';
 export type { HandleAuthErrorOptions } from './ui/utils/errorHandlers';
-// Thrown by `signInWithPassword` / `signIn` on a cross-apex web RP, where a
-// direct (non-IdP) sign-in would not survive a page reload — apps catch it to
-// route the user to the durable "Continue with Oxy" IdP flow.
-export { CrossApexDirectSignInError, isCrossApexWeb } from './utils/crossApex';
 
 // ---------------------------------------------------------------------------
 // File filtering

package/src/ui/components/SignInAccountChooser.tsx

@@ -0,0 +1,162 @@
+import type React from 'react';
+import { View, Text, TouchableOpacity, StyleSheet, ActivityIndicator } from 'react-native';
+import { Ionicons } from '@expo/vector-icons';
+import { useTheme } from '@oxyhq/bloom/theme';
+import Avatar from './Avatar';
+import { useI18n } from '../hooks/useI18n';
+import type { SwitchableAccount } from '../hooks/useSwitchableAccounts';
+
+export interface SignInAccountChooserProps {
+    /** Accounts available on this device / in the caller's graph, current first. */
+    accounts: SwitchableAccount[];
+    /** Selecting a row — the active account continues, others switch into. */
+    onSelectAccount: (account: SwitchableAccount) => void;
+    /** "Use another account" → reveal the sign-in options (password / QR / add). */
+    onUseAnother: () => void;
+    /** The account id currently being switched into (shows a per-row spinner). */
+    pendingAccountId?: string | null;
+    /** Disables every row while a selection is in flight. */
+    disabled?: boolean;
+}
+
+/**
+ * Google-style account chooser (React Native). Lists every account the user can
+ * continue as — device sign-ins + linked graph accounts, from
+ * {@link SwitchableAccount} — plus a "Use another account" affordance. Rendered
+ * as the FRONT screen of the sign-in surfaces (`SignInModal` web,
+ * `OxyAuthScreen` native) whenever accounts exist; selecting a row funnels into
+ * the SAME `switchToAccount` path the account switcher uses. When no accounts
+ * exist the surfaces skip this and show the sign-in options directly.
+ *
+ * Presentational + chrome-agnostic (no modal/sheet wrapper, no data fetching) so
+ * both containers reuse it and it is unit-testable in isolation.
+ */
+export const SignInAccountChooser: React.FC<SignInAccountChooserProps> = ({
+    accounts,
+    onSelectAccount,
+    onUseAnother,
+    pendingAccountId,
+    disabled,
+}) => {
+    const { colors } = useTheme();
+    const { t } = useI18n();
+
+    return (
+        <View style={styles.container}>
+            {accounts.map((account) => {
+                const isPending = pendingAccountId === account.accountId;
+                const secondary = account.email;
+                return (
+                    <TouchableOpacity
+                        key={account.accountId}
+                        accessibilityRole="button"
+                        accessibilityLabel={t('signin.chooser.continueAs', { name: account.displayName })}
+                        accessibilityState={{ selected: account.isCurrent, disabled: Boolean(disabled) }}
+                        onPress={() => onSelectAccount(account)}
+                        disabled={disabled}
+                        activeOpacity={0.7}
+                        style={[
+                            styles.row,
+                            { borderColor: colors.border },
+                            account.isCurrent && { backgroundColor: colors.primarySubtle, borderColor: colors.primarySubtle },
+                            disabled && !isPending && styles.rowDisabled,
+                        ]}
+                    >
+                        <Avatar uri={account.avatarUrl} name={account.displayName} size={44} />
+                        <View style={styles.info}>
+                            <Text style={[styles.name, { color: colors.text }]} numberOfLines={1}>
+                                {account.displayName}
+                            </Text>
+                            {secondary ? (
+                                <Text style={[styles.secondary, { color: colors.textSecondary }]} numberOfLines={1}>
+                                    {secondary}
+                                </Text>
+                            ) : null}
+                        </View>
+                        {isPending ? (
+                            <ActivityIndicator size="small" color={colors.primary} />
+                        ) : account.isCurrent ? (
+                            <View style={[styles.currentPill, { backgroundColor: colors.card }]}>
+                                <Ionicons name="checkmark" size={14} color={colors.primary} />
+                                <Text style={[styles.currentPillText, { color: colors.primary }]}>
+                                    {t('signin.chooser.signedIn')}
+                                </Text>
+                            </View>
+                        ) : (
+                            <Ionicons name="chevron-forward" size={20} color={colors.textSecondary} />
+                        )}
+                    </TouchableOpacity>
+                );
+            })}
+
+            <TouchableOpacity
+                accessibilityRole="button"
+                accessibilityLabel={t('signin.chooser.useAnother')}
+                onPress={onUseAnother}
+                disabled={disabled}
+                activeOpacity={0.7}
+                style={[styles.row, { borderColor: colors.border }, disabled && styles.rowDisabled]}
+            >
+                <View style={[styles.addIcon, { backgroundColor: colors.backgroundSecondary }]}>
+                    <Ionicons name="person-add-outline" size={20} color={colors.textSecondary} />
+                </View>
+                <View style={styles.info}>
+                    <Text style={[styles.name, { color: colors.text }]}>{t('signin.chooser.useAnother')}</Text>
+                </View>
+                <Ionicons name="chevron-forward" size={20} color={colors.textSecondary} />
+            </TouchableOpacity>
+        </View>
+    );
+};
+
+const styles = StyleSheet.create({
+    container: {
+        width: '100%',
+        gap: 8,
+    },
+    row: {
+        flexDirection: 'row',
+        alignItems: 'center',
+        gap: 12,
+        borderWidth: 1,
+        borderRadius: 14,
+        paddingHorizontal: 14,
+        paddingVertical: 12,
+    },
+    rowDisabled: {
+        opacity: 0.5,
+    },
+    info: {
+        flex: 1,
+        minWidth: 0,
+    },
+    name: {
+        fontSize: 15,
+        fontWeight: '600',
+    },
+    secondary: {
+        fontSize: 13,
+        marginTop: 2,
+    },
+    currentPill: {
+        flexDirection: 'row',
+        alignItems: 'center',
+        gap: 3,
+        paddingHorizontal: 8,
+        paddingVertical: 3,
+        borderRadius: 999,
+    },
+    currentPillText: {
+        fontSize: 12,
+        fontWeight: '600',
+    },
+    addIcon: {
+        width: 44,
+        height: 44,
+        borderRadius: 22,
+        alignItems: 'center',
+        justifyContent: 'center',
+    },
+});
+
+export default SignInAccountChooser;