@oxyhq/services 14.1.0 → 15.0.0

package/lib/commonjs/ui/session/authStore.js

@@ -0,0 +1,146 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createPlatformAuthStateStore = createPlatformAuthStateStore;
+var _core = require("@oxyhq/core");
+var _storageHelpers = require("../utils/storageHelpers.js");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); } /**
+ * Platform `AuthStateStore` for `@oxyhq/services`.
+ *
+ * The device-first session model persists the rotating refresh-token family
+ * head per origin (web) / per device (native). `@oxyhq/core` owns the store
+ * shape + logic (`createWebAuthStateStore` / `createNativeAuthStateStore`); this
+ * module only supplies the platform storage seam and wires the native device
+ * token to the SHARED keychain so every native Oxy app joins one DeviceSession:
+ *
+ *  - web  → `createWebAuthStateStore()` (localStorage, in-memory fallback).
+ *  - native → `createNativeAuthStateStore(secureKV)` for the SESSION blob
+ *    (refresh token) over `expo-secure-store` (AsyncStorage fallback), with the
+ *    long-lived DEVICE token delegated to `KeyManager`'s shared keychain
+ *    (`group.so.oxy.shared`) instead of per-app storage — so an in-app login on
+ *    any native Oxy app attributes to the SAME server-side DeviceSession.
+ *
+ * `expo-secure-store` is loaded via a runtime-computed dynamic import (the same
+ * optional-native-module pattern `OxyProvider` uses for netinfo / keyboard
+ * controller), so the web bundle never pulls it and a device without it falls
+ * back to AsyncStorage rather than crashing.
+ */
+// Variable indirection so Metro's static analyzer never traces expo-secure-store
+// into the web bundle; the module is native-only and optional.
+const SECURE_STORE_MODULE = 'expo-secure-store';
+let secureStorePromise = null;
+
+/**
+ * Resolve the `expo-secure-store` module once (memoised), or `null` when it is
+ * unavailable — callers then fall back to AsyncStorage. Never throws.
+ */
+function loadSecureStore() {
+  if (!secureStorePromise) {
+    const moduleName = SECURE_STORE_MODULE;
+    secureStorePromise = (specifier => new Promise(r => r(`${specifier}`)).then(s => _interopRequireWildcard(require(s))))(moduleName).then(mod => {
+      if (typeof mod.getItemAsync === 'function' && typeof mod.setItemAsync === 'function' && typeof mod.deleteItemAsync === 'function') {
+        return {
+          getItemAsync: mod.getItemAsync.bind(mod),
+          setItemAsync: mod.setItemAsync.bind(mod),
+          deleteItemAsync: mod.deleteItemAsync.bind(mod)
+        };
+      }
+      return null;
+    }).catch(() => null);
+  }
+  return secureStorePromise;
+}
+
+/**
+ * A native `NativeKeyValueStorage` that prefers `expo-secure-store` (encrypted
+ * at rest) and falls back to AsyncStorage when SecureStore is not installed.
+ * The SecureStore module is resolved lazily on first access so construction
+ * stays synchronous.
+ */
+function createNativeSecureKeyValueStorage() {
+  let asyncStorage = null;
+  const getAsyncStorage = async () => {
+    if (!asyncStorage) {
+      asyncStorage = await (0, _storageHelpers.createPlatformStorage)();
+    }
+    return asyncStorage;
+  };
+  return {
+    getItem: async key => {
+      const secure = await loadSecureStore();
+      if (secure) {
+        return secure.getItemAsync(key);
+      }
+      return (await getAsyncStorage()).getItem(key);
+    },
+    setItem: async (key, value) => {
+      const secure = await loadSecureStore();
+      if (secure) {
+        await secure.setItemAsync(key, value);
+        return;
+      }
+      await (await getAsyncStorage()).setItem(key, value);
+    },
+    removeItem: async key => {
+      const secure = await loadSecureStore();
+      if (secure) {
+        await secure.deleteItemAsync(key);
+        return;
+      }
+      await (await getAsyncStorage()).removeItem(key);
+    }
+  };
+}
+
+/**
+ * Build the platform {@link AuthStateStore} for this runtime.
+ *
+ * Native additionally routes the device token through the shared keychain so
+ * every native Oxy app shares one server-side DeviceSession; the session blob
+ * (refresh token) stays per-app in SecureStore. Best-effort keychain access —
+ * a locked/failed shared-keychain read degrades to "no device token" rather
+ * than throwing out of cold boot / refresh.
+ */
+function createPlatformAuthStateStore() {
+  if (!(0, _storageHelpers.isReactNative)()) {
+    return (0, _core.createWebAuthStateStore)();
+  }
+  const base = (0, _core.createNativeAuthStateStore)(createNativeSecureKeyValueStorage());
+  return {
+    ...base,
+    loadDeviceToken: async () => {
+      try {
+        return await _core.KeyManager.getSharedDeviceToken();
+      } catch (error) {
+        _core.logger.debug('Shared device-token read failed (treating as none)', {
+          component: 'authStore',
+          method: 'loadDeviceToken'
+        }, error);
+        return null;
+      }
+    },
+    saveDeviceToken: async token => {
+      try {
+        await _core.KeyManager.setSharedDeviceToken(token);
+      } catch (error) {
+        _core.logger.debug('Shared device-token write failed (non-fatal)', {
+          component: 'authStore',
+          method: 'saveDeviceToken'
+        }, error);
+      }
+    },
+    clearDeviceToken: async () => {
+      try {
+        await _core.KeyManager.clearSharedDeviceToken();
+      } catch (error) {
+        _core.logger.debug('Shared device-token clear failed (non-fatal)', {
+          component: 'authStore',
+          method: 'clearDeviceToken'
+        }, error);
+      }
+    }
+  };
+}
+//# sourceMappingURL=authStore.js.map

package/lib/commonjs/ui/session/authStore.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_core","require","_storageHelpers","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","SECURE_STORE_MODULE","secureStorePromise","loadSecureStore","moduleName","specifier","Promise","then","s","mod","getItemAsync","setItemAsync","deleteItemAsync","bind","catch","createNativeSecureKeyValueStorage","asyncStorage","getAsyncStorage","createPlatformStorage","getItem","key","secure","setItem","value","removeItem","createPlatformAuthStateStore","isReactNative","createWebAuthStateStore","base","createNativeAuthStateStore","loadDeviceToken","KeyManager","getSharedDeviceToken","error","logger","debug","component","method","saveDeviceToken","token","setSharedDeviceToken","clearDeviceToken","clearSharedDeviceToken"],"sourceRoot":"../../../../src","sources":["ui/session/authStore.ts"],"mappings":";;;;;;AAqBA,IAAAA,KAAA,GAAAC,OAAA;AAQA,IAAAC,eAAA,GAAAD,OAAA;AAA+E,SAAAE,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA,KA7B/E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAWA;AACA;AACA,MAAMkB,mBAAmB,GAAG,mBAAmB;AAQ/C,IAAIC,kBAA0D,GAAG,IAAI;;AAErE;AACA;AACA;AACA;AACA,SAASC,eAAeA,CAAA,EAAoC;EAC1D,IAAI,CAACD,kBAAkB,EAAE;IACvB,MAAME,UAAU,GAAGH,mBAAmB;IACtCC,kBAAkB,GAAG,CAAAG,SAAA,QAAAC,OAAA,CAAArB,CAAA,IAAAA,CAAA,IAAAoB,SAAA,KAAAE,IAAA,CAAAC,CAAA,IAAA3B,uBAAA,CAAAF,OAAA,CAAA6B,CAAA,KAAOJ,UAAU,EACnCG,IAAI,CAAEE,GAA6B,IAAK;MACvC,IACE,OAAOA,GAAG,CAACC,YAAY,KAAK,UAAU,IACtC,OAAOD,GAAG,CAACE,YAAY,KAAK,UAAU,IACtC,OAAOF,GAAG,CAACG,eAAe,KAAK,UAAU,EACzC;QACA,OAAO;UACLF,YAAY,EAAED,GAAG,CAACC,YAAY,CAACG,IAAI,CAACJ,GAAG,CAAC;UACxCE,YAAY,EAAEF,GAAG,CAACE,YAAY,CAACE,IAAI,CAACJ,GAAG,CAAC;UACxCG,eAAe,EAAEH,GAAG,CAACG,eAAe,CAACC,IAAI,CAACJ,GAAG;QAC/C,CAAC;MACH;MACA,OAAO,IAAI;IACb,CAAC,CAAC,CACDK,KAAK,CAAC,MAAM,IAAI,CAAC;EACtB;EACA,OAAOZ,kBAAkB;AAC3B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,SAASa,iCAAiCA,CAAA,EAA0B;EAClE,IAAIC,YAAsE,GAAG,IAAI;EACjF,MAAMC,eAAe,GAAG,MAAAA,CAAA,KAAY;IAClC,IAAI,CAACD,YAAY,EAAE;MACjBA,YAAY,GAAG,MAAM,IAAAE,qCAAqB,EAAC,CAAC;IAC9C;IACA,OAAOF,YAAY;EACrB,CAAC;EACD,OAAO;IACLG,OAAO,EAAE,MAAOC,GAAG,IAAK;MACtB,MAAMC,MAAM,GAAG,MAAMlB,eAAe,CAAC,CAAC;MACtC,IAAIkB,MAAM,EAAE;QACV,OAAOA,MAAM,CAACX,YAAY,CAACU,GAAG,CAAC;MACjC;MACA,OAAO,CAAC,MAAMH,eAAe,CAAC,CAAC,EAAEE,OAAO,CAACC,GAAG,CAAC;IAC/C,CAAC;IACDE,OAAO,EAAE,MAAAA,CAAOF,GAAG,EAAEG,KAAK,KAAK;MAC7B,MAAMF,MAAM,GAAG,MAAMlB,eAAe,CAAC,CAAC;MACtC,IAAIkB,MAAM,EAAE;QACV,MAAMA,MAAM,CAACV,YAAY,CAACS,GAAG,EAAEG,KAAK,CAAC;QACrC;MACF;MACA,MAAM,CAAC,MAAMN,eAAe,CAAC,CAAC,EAAEK,OAAO,CAACF,GAAG,EAAEG,KAAK,CAAC;IACrD,CAAC;IACDC,UAAU,EAAE,MAAOJ,GAAG,IAAK;MACzB,MAAMC,MAAM,GAAG,MAAMlB,eAAe,CAAC,CAAC;MACtC,IAAIkB,MAAM,EAAE;QACV,MAAMA,MAAM,CAACT,eAAe,CAACQ,GAAG,CAAC;QACjC;MACF;MACA,MAAM,CAAC,MAAMH,eAAe,CAAC,CAAC,EAAEO,UAAU,CAACJ,GAAG,CAAC;IACjD;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASK,4BAA4BA,CAAA,EAAmB;EAC7D,IAAI,CAAC,IAAAC,6BAAa,EAAC,CAAC,EAAE;IACpB,OAAO,IAAAC,6BAAuB,EAAC,CAAC;EAClC;EAEA,MAAMC,IAAI,GAAG,IAAAC,gCAA0B,EAACd,iCAAiC,CAAC,CAAC,CAAC;EAC5E,OAAO;IACL,GAAGa,IAAI;IACPE,eAAe,EAAE,MAAAA,CAAA,KAAY;MAC3B,IAAI;QACF,OAAO,MAAMC,gBAAU,CAACC,oBAAoB,CAAC,CAAC;MAChD,CAAC,CAAC,OAAOC,KAAK,EAAE;QACdC,YAAM,CAACC,KAAK,CACV,oDAAoD,EACpD;UAAEC,SAAS,EAAE,WAAW;UAAEC,MAAM,EAAE;QAAkB,CAAC,EACrDJ,KACF,CAAC;QACD,OAAO,IAAI;MACb;IACF,CAAC;IACDK,eAAe,EAAE,MAAOC,KAAK,IAAK;MAChC,IAAI;QACF,MAAMR,gBAAU,CAACS,oBAAoB,CAACD,KAAK,CAAC;MAC9C,CAAC,CAAC,OAAON,KAAK,EAAE;QACdC,YAAM,CAACC,KAAK,CACV,8CAA8C,EAC9C;UAAEC,SAAS,EAAE,WAAW;UAAEC,MAAM,EAAE;QAAkB,CAAC,EACrDJ,KACF,CAAC;MACH;IACF,CAAC;IACDQ,gBAAgB,EAAE,MAAAA,CAAA,KAAY;MAC5B,IAAI;QACF,MAAMV,gBAAU,CAACW,sBAAsB,CAAC,CAAC;MAC3C,CAAC,CAAC,OAAOT,KAAK,EAAE;QACdC,YAAM,CAACC,KAAK,CACV,8CAA8C,EAC9C;UAAEC,SAAS,EAAE,WAAW;UAAEC,MAAM,EAAE;QAAmB,CAAC,EACtDJ,KACF,CAAC;MACH;IACF;EACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/ui/session/createSessionClient.js

@@ -4,30 +4,36 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.createSessionClient = createSessionClient;
-var _core = require("@oxyhq/core");
 var _socket = require("socket.io-client");
-var _sessionClientHost = require("./sessionClientHost.js");
+var _core = require("@oxyhq/core");
 var _tokenTransport = require("./tokenTransport.js");
 /**
- * Wires a `SessionClient` for `@oxyhq/services`: builds the `SessionClientHost`
- * adapter (Task 1) and the platform `TokenTransport` (Task 3) over the given
- * `OxyServices` instance, and returns both the client and the host — the host
- * is returned (not just the client) so `OxyContext` (Fase 3-B) can call
- * `host.setCurrentAccountId(...)` as the active account changes.
+ * Wire a `SessionClient` for `@oxyhq/services`.
+ *
+ * The platform-agnostic parts (host adapter, client, projection helpers) live
+ * ONCE in `@oxyhq/core`; this thin factory only injects the pieces specific to
+ * the RN/Expo SDK:
+ *
+ *  - `socket.io-client`'s `io`, STATICALLY imported (socket.io-client is a real
+ *    dependency of `@oxyhq/services`) so realtime session sync never relies on
+ *    core's lazy dynamic import of a bare specifier — bundler-fragile in
+ *    Metro/Expo-web against the published core dist.
+ *  - the device-first {@link createTokenTransport}, which mints a fallback token
+ *    by rotating the persisted refresh family (`store`).
  *
- * `socket.io-client`'s `io` is STATICALLY imported and injected as the
- * `SessionClient` `socketFactory` (socket.io-client is a real dependency of
- * `@oxyhq/services`). This is what keeps realtime session sync working in the
- * Metro/Expo-web bundle: core's lazy dynamic `import('socket.io-client')` of a
- * bare specifier does not resolve reliably against the published core dist, so
- * the app-bundled static import is the reliable source of the factory.
+ * `onUnauthenticated` fires when an applied device state has zero accounts (a
+ * device signout-all): the provider clears the persisted store + local state so
+ * a reload does not try to restore a dead session. The host is returned
+ * alongside the client so the caller can call `host.setCurrentAccountId(...)`
+ * as the active account changes.
  */
-function createSessionClient(oxyServices) {
-  const host = (0, _sessionClientHost.createSessionClientHost)(oxyServices);
-  const transport = (0, _tokenTransport.createTokenTransport)(oxyServices);
+function createSessionClient(oxyServices, store, onUnauthenticated) {
+  const host = (0, _core.createSessionClientHost)(oxyServices);
+  const transport = (0, _tokenTransport.createTokenTransport)(oxyServices, store);
   const client = new _core.SessionClient(host, {
     transport,
-    socketFactory: _socket.io
+    socketFactory: _socket.io,
+    onUnauthenticated
   });
   return {
     client,

package/lib/commonjs/ui/session/createSessionClient.js.map

@@ -1 +1 @@
-{"version":3,"names":["_core","require","_socket","_sessionClientHost","_tokenTransport","createSessionClient","oxyServices","host","createSessionClientHost","transport","createTokenTransport","client","SessionClient","socketFactory","io"],"sourceRoot":"../../../../src","sources":["ui/session/createSessionClient.ts"],"mappings":";;;;;;AACA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,kBAAA,GAAAF,OAAA;AACA,IAAAG,eAAA,GAAAH,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,mBAAmBA,CAACC,WAAwB,EAG1D;EACA,MAAMC,IAAI,GAAG,IAAAC,0CAAuB,EAACF,WAAW,CAAC;EACjD,MAAMG,SAAS,GAAG,IAAAC,oCAAoB,EAACJ,WAAW,CAAC;EACnD,MAAMK,MAAM,GAAG,IAAIC,mBAAa,CAACL,IAAI,EAAE;IAAEE,SAAS;IAAEI,aAAa,EAAEC;EAAG,CAAC,CAAC;EACxE,OAAO;IAAEH,MAAM;IAAEJ;EAAK,CAAC;AACzB","ignoreList":[]}
+{"version":3,"names":["_socket","require","_core","_tokenTransport","createSessionClient","oxyServices","store","onUnauthenticated","host","createSessionClientHost","transport","createTokenTransport","client","SessionClient","socketFactory","io"],"sourceRoot":"../../../../src","sources":["ui/session/createSessionClient.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AAMA,IAAAE,eAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,mBAAmBA,CACjCC,WAAwB,EACxBC,KAAqB,EACrBC,iBAA8B,EAI9B;EACA,MAAMC,IAAI,GAAG,IAAAC,6BAAuB,EAACJ,WAAW,CAAC;EACjD,MAAMK,SAAS,GAAG,IAAAC,oCAAoB,EAACN,WAAW,EAAEC,KAAK,CAAC;EAC1D,MAAMM,MAAM,GAAG,IAAIC,mBAAa,CAACL,IAAI,EAAE;IAAEE,SAAS;IAAEI,aAAa,EAAEC,UAAE;IAAER;EAAkB,CAAC,CAAC;EAC3F,OAAO;IAAEK,MAAM;IAAEJ;EAAK,CAAC;AACzB","ignoreList":[]}

package/lib/commonjs/ui/session/index.js

@@ -6,19 +6,25 @@ Object.defineProperty(exports, "__esModule", {
 Object.defineProperty(exports, "accountIdsOf", {
   enumerable: true,
   get: function () {
-    return _projectSessionState.accountIdsOf;
+    return _core.accountIdsOf;
   }
 });
 Object.defineProperty(exports, "activeSessionIdOf", {
   enumerable: true,
   get: function () {
-    return _projectSessionState.activeSessionIdOf;
+    return _core.activeSessionIdOf;
   }
 });
 Object.defineProperty(exports, "activeUserOf", {
   enumerable: true,
   get: function () {
-    return _projectSessionState.activeUserOf;
+    return _core.activeUserOf;
+  }
+});
+Object.defineProperty(exports, "createPlatformAuthStateStore", {
+  enumerable: true,
+  get: function () {
+    return _authStore.createPlatformAuthStateStore;
   }
 });
 Object.defineProperty(exports, "createSessionClient", {
@@ -30,7 +36,7 @@ Object.defineProperty(exports, "createSessionClient", {
 Object.defineProperty(exports, "createSessionClientHost", {
   enumerable: true,
   get: function () {
-    return _sessionClientHost.createSessionClientHost;
+    return _core.createSessionClientHost;
   }
 });
 Object.defineProperty(exports, "createTokenTransport", {
@@ -42,11 +48,11 @@ Object.defineProperty(exports, "createTokenTransport", {
 Object.defineProperty(exports, "deviceStateToClientSessions", {
   enumerable: true,
   get: function () {
-    return _projectSessionState.deviceStateToClientSessions;
+    return _core.deviceStateToClientSessions;
   }
 });
 var _createSessionClient = require("./createSessionClient.js");
-var _sessionClientHost = require("./sessionClientHost.js");
 var _tokenTransport = require("./tokenTransport.js");
-var _projectSessionState = require("./projectSessionState.js");
+var _authStore = require("./authStore.js");
+var _core = require("@oxyhq/core");
 //# sourceMappingURL=index.js.map

package/lib/commonjs/ui/session/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_createSessionClient","require","_sessionClientHost","_tokenTransport","_projectSessionState"],"sourceRoot":"../../../../src","sources":["ui/session/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,kBAAA,GAAAD,OAAA;AACA,IAAAE,eAAA,GAAAF,OAAA;AACA,IAAAG,oBAAA,GAAAH,OAAA","ignoreList":[]}
+{"version":3,"names":["_createSessionClient","require","_tokenTransport","_authStore","_core"],"sourceRoot":"../../../../src","sources":["ui/session/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA","ignoreList":[]}

package/lib/commonjs/ui/session/tokenTransport.js

@@ -5,40 +5,25 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.createTokenTransport = createTokenTransport;
 var _core = require("@oxyhq/core");
-var _useWebSSO = require("../hooks/useWebSSO.js");
 /**
- * Platform `TokenTransport` for `SessionClient`: mints an access token when
- * none is currently held, reusing the SAME primitives `OxyContext`'s cold
- * boot already relies on (never re-implemented here):
+ * Platform `TokenTransport` for `SessionClient` (device-first model).
  *
- * - web: `oxyServices.silentSignIn()` (per-apex `/auth/silent` iframe).
- * - native: `oxyServices.signInWithSharedIdentity()` (app-group keychain).
+ * `ensureActiveToken` is the fallback the client uses when a `session_state`
+ * push arrived WITHOUT an embedded `activeToken` and the app currently holds no
+ * bearer. It mints one through the ONE unified refresh path
+ * (`refreshPersistedSession`): rotate the persisted refresh-token family
+ * (`POST /auth/refresh-token`) and, on native, fall back to the shared-keychain
+ * re-mint. There is no FedCM/silent-iframe arm anymore — the per-origin
+ * persisted refresh token is the durable web credential.
  *
- * Both primitives plant the token internally on success (the "Sign-In Token
- * Planting" rule) — `ensureActiveToken` never calls `setTokens` itself.
- *
- * `ensureActiveToken` treats a PRESENT token as sufficient in this phase; it
- * does not decode/match the token's subject against `state.activeAccountId`
- * (that refinement is Fase 3-B). Account switching itself is server-driven
- * via the `activeToken` carried in the sync envelope — this transport is
- * only the fallback used when the envelope carried no token.
- *
- * A failed mint is logged and swallowed: it must never throw out of
- * `ensureActiveToken`, since that would crash the caller (the SessionClient
- * socket handler in Fase 3-B).
+ * Concurrent pushes coalesce onto one in-flight mint. A failure is logged and
+ * swallowed: this method must never throw out (it runs inside the socket state
+ * handler).
  */
-function createTokenTransport(oxyServices) {
-  // Coalesces concurrent mints: `SessionClient.applyState` can fire
-  // `ensureActiveToken` on rapid successive state pushes; a second call while a
-  // mint is already in flight must reuse it, not spawn a second silent iframe /
-  // shared-key challenge round-trip.
+function createTokenTransport(oxyServices, store) {
   let inFlightMint = null;
   return {
     async ensureActiveToken(state) {
-      // Read the current token defensively: it is an in-memory getter that
-      // should never throw, but the documented contract is that this method
-      // never throws out — so a surprising throw is logged and treated as "no
-      // token" (fall through to mint) rather than rejecting the promise.
       try {
         if (oxyServices.getAccessToken()) {
           return;
@@ -53,15 +38,18 @@ function createTokenTransport(oxyServices) {
       }
       inFlightMint = (async () => {
         try {
-          const session = (0, _useWebSSO.isWebBrowser)() ? await oxyServices.silentSignIn() : await oxyServices.signInWithSharedIdentity();
-          if (!session) {
-            _core.logger.debug('ensureActiveToken: platform mint returned no session', {
+          const token = await (0, _core.refreshPersistedSession)({
+            oxy: oxyServices,
+            store
+          });
+          if (!token) {
+            _core.logger.debug('ensureActiveToken: refresh produced no session', {
               component: 'TokenTransport',
               deviceId: state.deviceId
             });
           }
         } catch (error) {
-          _core.logger.warn('ensureActiveToken: mint failed', {
+          _core.logger.warn('ensureActiveToken: refresh failed', {
             component: 'TokenTransport'
           }, error);
         }

package/lib/commonjs/ui/session/tokenTransport.js.map

@@ -1 +1 @@
-{"version":3,"names":["_core","require","_useWebSSO","createTokenTransport","oxyServices","inFlightMint","ensureActiveToken","state","getAccessToken","error","logger","warn","component","session","isWebBrowser","silentSignIn","signInWithSharedIdentity","debug","deviceId"],"sourceRoot":"../../../../src","sources":["ui/session/tokenTransport.ts"],"mappings":";;;;;;AAEA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,oBAAoBA,CAACC,WAAwB,EAAkB;EAC7E;EACA;EACA;EACA;EACA,IAAIC,YAAkC,GAAG,IAAI;EAE7C,OAAO;IACL,MAAMC,iBAAiBA,CAACC,KAAyB,EAAiB;MAChE;MACA;MACA;MACA;MACA,IAAI;QACF,IAAIH,WAAW,CAACI,cAAc,CAAC,CAAC,EAAE;UAChC;QACF;MACF,CAAC,CAAC,OAAOC,KAAK,EAAE;QACdC,YAAM,CAACC,IAAI,CAAC,yCAAyC,EAAE;UAAEC,SAAS,EAAE;QAAiB,CAAC,EAAEH,KAAK,CAAC;MAChG;MAEA,IAAIJ,YAAY,EAAE;QAChB,OAAOA,YAAY;MACrB;MAEAA,YAAY,GAAG,CAAC,YAAY;QAC1B,IAAI;UACF,MAAMQ,OAAO,GAAG,IAAAC,uBAAY,EAAC,CAAC,GAC1B,MAAMV,WAAW,CAACW,YAAY,CAAC,CAAC,GAChC,MAAMX,WAAW,CAACY,wBAAwB,CAAC,CAAC;UAEhD,IAAI,CAACH,OAAO,EAAE;YACZH,YAAM,CAACO,KAAK,CAAC,sDAAsD,EAAE;cACnEL,SAAS,EAAE,gBAAgB;cAC3BM,QAAQ,EAAEX,KAAK,CAACW;YAClB,CAAC,CAAC;UACJ;QACF,CAAC,CAAC,OAAOT,KAAK,EAAE;UACdC,YAAM,CAACC,IAAI,CAAC,gCAAgC,EAAE;YAAEC,SAAS,EAAE;UAAiB,CAAC,EAAEH,KAAK,CAAC;QACvF;MACF,CAAC,EAAE,CAAC;MAEJ,IAAI;QACF,MAAMJ,YAAY;MACpB,CAAC,SAAS;QACRA,YAAY,GAAG,IAAI;MACrB;IACF;EACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["_core","require","createTokenTransport","oxyServices","store","inFlightMint","ensureActiveToken","state","getAccessToken","error","logger","warn","component","token","refreshPersistedSession","oxy","debug","deviceId"],"sourceRoot":"../../../../src","sources":["ui/session/tokenTransport.ts"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,oBAAoBA,CAClCC,WAAwB,EACxBC,KAAqB,EACL;EAChB,IAAIC,YAAkC,GAAG,IAAI;EAE7C,OAAO;IACL,MAAMC,iBAAiBA,CAACC,KAAyB,EAAiB;MAChE,IAAI;QACF,IAAIJ,WAAW,CAACK,cAAc,CAAC,CAAC,EAAE;UAChC;QACF;MACF,CAAC,CAAC,OAAOC,KAAK,EAAE;QACdC,YAAM,CAACC,IAAI,CAAC,yCAAyC,EAAE;UAAEC,SAAS,EAAE;QAAiB,CAAC,EAAEH,KAAK,CAAC;MAChG;MAEA,IAAIJ,YAAY,EAAE;QAChB,OAAOA,YAAY;MACrB;MAEAA,YAAY,GAAG,CAAC,YAAY;QAC1B,IAAI;UACF,MAAMQ,KAAK,GAAG,MAAM,IAAAC,6BAAuB,EAAC;YAAEC,GAAG,EAAEZ,WAAW;YAAEC;UAAM,CAAC,CAAC;UACxE,IAAI,CAACS,KAAK,EAAE;YACVH,YAAM,CAACM,KAAK,CAAC,gDAAgD,EAAE;cAC7DJ,SAAS,EAAE,gBAAgB;cAC3BK,QAAQ,EAAEV,KAAK,CAACU;YAClB,CAAC,CAAC;UACJ;QACF,CAAC,CAAC,OAAOR,KAAK,EAAE;UACdC,YAAM,CAACC,IAAI,CAAC,mCAAmC,EAAE;YAAEC,SAAS,EAAE;UAAiB,CAAC,EAAEH,KAAK,CAAC;QAC1F;MACF,CAAC,EAAE,CAAC;MAEJ,IAAI;QACF,MAAMJ,YAAY;MACpB,CAAC,SAAS;QACRA,YAAY,GAAG,IAAI;MACrB;IACF;EACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/ui/utils/isWebBrowser.js

@@ -0,0 +1,13 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "isWebBrowser", {
+  enumerable: true,
+  get: function () {
+    return _core.isWebBrowser;
+  }
+});
+var _core = require("@oxyhq/core");
+//# sourceMappingURL=isWebBrowser.js.map

package/lib/commonjs/ui/utils/isWebBrowser.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_core","require"],"sourceRoot":"../../../../src","sources":["ui/utils/isWebBrowser.ts"],"mappings":";;;;;;;;;;;AAOA,IAAAA,KAAA,GAAAC,OAAA","ignoreList":[]}

package/lib/commonjs/utils/deviceFlowSignIn.js

@@ -44,8 +44,6 @@ var _core = require("@oxyhq/core");
  * trivially unit-testable with a stub and never pulls the RN/Expo runtime into
  * a test bundle.
  *
- * Extends {@link SsoEstablishClient} (`requestSsoEstablishUrl`) so the WEB
- * post-claim durable-session hop can be driven off the same client.
  */
 
 /**
@@ -61,8 +59,7 @@ async function completeDeviceFlowSignIn({
   oxyServices,
   sessionId,
   sessionToken,
-  commitSession,
-  establishDeps
+  commitSession
 }) {
   // 1) Plant the bearer + refresh tokens. The claim response is also persisted
   //    to native shared secure storage so a later cold boot has a bearer before
@@ -88,25 +85,25 @@ async function completeDeviceFlowSignIn({
 
   // 2) Bearer is now planted — commit the session through the same path a
   //    fresh sign-in uses so it is registered into the device's
-  //    server-authoritative session set instead of an account switch.
+  //    server-authoritative session set instead of an account switch. Thread
+  //    the rotating refresh token so the commit funnel persists a durable
+  //    session that survives a reload.
   await commitSession({
     sessionId: claimed.sessionId || sessionId,
     deviceId: claimed.deviceId ?? '',
     expiresAt: claimed.expiresAt ?? '',
     user: minimalUser,
-    accessToken: claimed.accessToken
+    accessToken: claimed.accessToken,
+    ...(claimed.refreshToken ? {
+      refreshToken: claimed.refreshToken
+    } : {})
   });
 
-  // 3) WEB durable-session hop (no-op on native). A device-flow claim plants
-  //    ONLY in-memory tokens — no IdP `fedcm_session` cookie is ever planted, so
-  //    a reload cannot re-mint a token and the session is lost. Now that the
-  //    session is committed AND durably persisted (step 2), plant the per-apex
-  //    IdP cookie via ONE top-level establish hop. Single attempt; total (never
-  //    throws) — an establish failure leaves the committed session as-is. On web
-  //    success it navigates away, so it is the LAST step: the browser tears the
-  //    page down on the next tick, after `claimed.user` is returned to the
-  //    caller's `onSignedIn`.
-  await (0, _core.establishIdpSessionAfterClaim)(oxyServices, establishDeps ?? {});
+  // The commit funnel persisted the rotating refresh family and registered the
+  // account into the device set, so a reload restores the session locally (web:
+  // stored-tokens / same-apex web-session; native: shared keychain) WITHOUT any
+  // IdP `fedcm_session` cookie or top-level establish hop.
+
   return claimed.user;
 }
 //# sourceMappingURL=deviceFlowSignIn.js.map

package/lib/commonjs/utils/deviceFlowSignIn.js.map

@@ -1 +1 @@
-{"version":3,"names":["_core","require","completeDeviceFlowSignIn","oxyServices","sessionId","sessionToken","commitSession","establishDeps","claimed","claimSessionByToken","accessToken","KeyManager","storeSharedSession","user","Error","minimalUser","id","username","name","avatar","undefined","deviceId","expiresAt","establishIdpSessionAfterClaim"],"sourceRoot":"../../../src","sources":["utils/deviceFlowSignIn.ts"],"mappings":";;;;;;AAiCA,IAAAA,KAAA,GAAAC,OAAA;AAjCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAoBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAqCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,wBAAwBA,CAAC;EAC7CC,WAAW;EACXC,SAAS;EACTC,YAAY;EACZC,aAAa;EACbC;AAC+B,CAAC,EAAiB;EACjD;EACA;EACA;EACA,MAAMC,OAAO,GAAG,MAAML,WAAW,CAACM,mBAAmB,CAACJ,YAAY,CAAC;EACnE,IAAIG,OAAO,EAAEE,WAAW,EAAE;IACxB,MAAMC,gBAAU,CAACC,kBAAkB,CAACJ,OAAO,CAACJ,SAAS,IAAIA,SAAS,EAAEI,OAAO,CAACE,WAAW,CAAC;EAC1F;EAEA,IAAI,CAACF,OAAO,EAAEE,WAAW,IAAI,CAACF,OAAO,CAACK,IAAI,EAAE;IAC1C,MAAM,IAAIC,KAAK,CAAC,mDAAmD,CAAC;EACtE;;EAEA;EACA;EACA;EACA;EACA,MAAMC,WAA4B,GAAG;IACnCC,EAAE,EAAER,OAAO,CAACK,IAAI,CAACG,EAAE;IACnBC,QAAQ,EAAET,OAAO,CAACK,IAAI,CAACI,QAAQ;IAC/BC,IAAI,EAAEV,OAAO,CAACK,IAAI,CAACK,IAAI;IACvBC,MAAM,EAAEX,OAAO,CAACK,IAAI,CAACM,MAAM,IAAIC;EACjC,CAAC;;EAED;EACA;EACA;EACA,MAAMd,aAAa,CAAC;IAClBF,SAAS,EAAEI,OAAO,CAACJ,SAAS,IAAIA,SAAS;IACzCiB,QAAQ,EAAEb,OAAO,CAACa,QAAQ,IAAI,EAAE;IAChCC,SAAS,EAAEd,OAAO,CAACc,SAAS,IAAI,EAAE;IAClCT,IAAI,EAAEE,WAAW;IACjBL,WAAW,EAAEF,OAAO,CAACE;EACvB,CAAC,CAAC;;EAEF;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAM,IAAAa,mCAA6B,EAACpB,WAAW,EAAEI,aAAa,IAAI,CAAC,CAAC,CAAC;EAErE,OAAOC,OAAO,CAACK,IAAI;AACrB","ignoreList":[]}
+{"version":3,"names":["_core","require","completeDeviceFlowSignIn","oxyServices","sessionId","sessionToken","commitSession","claimed","claimSessionByToken","accessToken","KeyManager","storeSharedSession","user","Error","minimalUser","id","username","name","avatar","undefined","deviceId","expiresAt","refreshToken"],"sourceRoot":"../../../src","sources":["utils/deviceFlowSignIn.ts"],"mappings":";;;;;;AAiCA,IAAAA,KAAA,GAAAC,OAAA;AAjCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,wBAAwBA,CAAC;EAC7CC,WAAW;EACXC,SAAS;EACTC,YAAY;EACZC;AAC+B,CAAC,EAAiB;EACjD;EACA;EACA;EACA,MAAMC,OAAO,GAAG,MAAMJ,WAAW,CAACK,mBAAmB,CAACH,YAAY,CAAC;EACnE,IAAIE,OAAO,EAAEE,WAAW,EAAE;IACxB,MAAMC,gBAAU,CAACC,kBAAkB,CAACJ,OAAO,CAACH,SAAS,IAAIA,SAAS,EAAEG,OAAO,CAACE,WAAW,CAAC;EAC1F;EAEA,IAAI,CAACF,OAAO,EAAEE,WAAW,IAAI,CAACF,OAAO,CAACK,IAAI,EAAE;IAC1C,MAAM,IAAIC,KAAK,CAAC,mDAAmD,CAAC;EACtE;;EAEA;EACA;EACA;EACA;EACA,MAAMC,WAA4B,GAAG;IACnCC,EAAE,EAAER,OAAO,CAACK,IAAI,CAACG,EAAE;IACnBC,QAAQ,EAAET,OAAO,CAACK,IAAI,CAACI,QAAQ;IAC/BC,IAAI,EAAEV,OAAO,CAACK,IAAI,CAACK,IAAI;IACvBC,MAAM,EAAEX,OAAO,CAACK,IAAI,CAACM,MAAM,IAAIC;EACjC,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAMb,aAAa,CAAC;IAClBF,SAAS,EAAEG,OAAO,CAACH,SAAS,IAAIA,SAAS;IACzCgB,QAAQ,EAAEb,OAAO,CAACa,QAAQ,IAAI,EAAE;IAChCC,SAAS,EAAEd,OAAO,CAACc,SAAS,IAAI,EAAE;IAClCT,IAAI,EAAEE,WAAW;IACjBL,WAAW,EAAEF,OAAO,CAACE,WAAW;IAChC,IAAIF,OAAO,CAACe,YAAY,GAAG;MAAEA,YAAY,EAAEf,OAAO,CAACe;IAAa,CAAC,GAAG,CAAC,CAAC;EACxE,CAAC,CAAC;;EAEF;EACA;EACA;EACA;;EAEA,OAAOf,OAAO,CAACK,IAAI;AACrB","ignoreList":[]}

package/lib/module/index.js

@@ -89,11 +89,6 @@ export { useOnlineStatus } from "./ui/hooks/useOnlineStatus.js";
 // Error handlers
 // ---------------------------------------------------------------------------
 export { handleAuthError, isInvalidSessionError, isTimeoutOrNetworkError, extractErrorMessage } from "./ui/utils/errorHandlers.js";
-// Thrown by `signInWithPassword` / `signIn` on a cross-apex web RP, where a
-// direct (non-IdP) sign-in would not survive a page reload — apps catch it to
-// route the user to the durable "Continue with Oxy" IdP flow.
-export { CrossApexDirectSignInError, isCrossApexWeb } from "./utils/crossApex.js";
-
 // ---------------------------------------------------------------------------
 // File filtering
 // ---------------------------------------------------------------------------

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["setPlatformOS","Platform","OS","default","OxyProvider","useOxy","useAuth","FontLoader","useAuthStore","useAssetStore","useAssets","useAssetsStore","useAsset","useUploadProgress","useAssetLoading","useAssetErrors","useAssetsByApp","useAssetsByEntity","useAssetUsageCount","useIsAssetLinked","setOxyAssetInstance","useFileDownloadUrl","useFollow","useFollowerCounts","useUserProfile","useUserProfiles","useCurrentUser","useUserById","useUserByUsername","useUsersBySessions","usePrivacySettings","useAuthorizedApps","useSessions","useSession","useDeviceSessions","useUserDevices","useSecurityInfo","useAccountStorageUsage","useSecurityActivity","useRecentSecurityActivity","useInfiniteSecurityActivity","useUserSubscription","useUserPayments","useUserWallet","useUserWalletTransactions","useUpdateProfile","useUploadAvatar","useUpdateAccountSettings","useUpdatePrivacySettings","useUpdateNotificationPreferences","useUpdateUserPreferences","useRevokeAuthorizedApp","useUploadFile","useSwitchSession","useLogoutSession","useLogoutAll","useUpdateDeviceName","useRemoveDevice","createProfileMutation","createGenericMutation","mutationKeys","queryKeys","invalidateAccountQueries","invalidateUserQueries","invalidateSessionQueries","invalidateDeviceQueries","invalidatePrivacyQueries","invalidateSecurityQueries","invalidateStorageQueries","invalidatePaymentsQueries","invalidateConnectedAppsQueries","useMutationStatus","useOnlineStatus","handleAuthError","isInvalidSessionError","isTimeoutOrNetworkError","extractErrorMessage","CrossApexDirectSignInError","isCrossApexWeb","useFileFiltering","Avatar","OxySignInButton","OxyAuthPrompt","OxyLogo","FollowButton","LogoIcon","LogoText","AccountMenu","AccountMenuButton","ProfileButton","ProfileMenu","AccountSwitcher","AccountSwitcherView","useSwitchableAccounts","ManageAccountScreen","NotificationsScreen","PreferencesScreen","ConnectedAppsScreen","AccountSwitcherScreen","CreateAccountScreen","AccountMembersScreen","AccountSettingsScreen","showBottomSheet","closeBottomSheet","showSignInModal","hideSignInModal"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA,SAASA,aAAa,QAAyB,aAAa;AAC5D,SAASC,QAAQ,QAAQ,cAAc;AACvCD,aAAa,CAACC,QAAQ,CAACC,EAAgB,CAAC;;AAExC;AACA;AACA;AACA,SAASC,OAAO,IAAIC,WAAW,QAAQ,gCAA6B;AACpE,SAASC,MAAM,QAAQ,4BAAyB;AAEhD,SAASC,OAAO,QAAQ,uBAAoB;AAG5C;AACA;AACA;AACA,SAASC,UAAU,QAAQ,+BAA4B;;AAEvD;AACA;AACA;AACA,SAASC,YAAY,QAAQ,0BAAuB;AACpD,SACIC,aAAa,EACbC,SAAS,IAAIC,cAAc,EAC3BC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,cAAc,EACdC,cAAc,EACdC,iBAAiB,EACjBC,kBAAkB,EAClBC,gBAAgB,QACb,2BAAwB;;AAE/B;AACA;AACA;AACA,SAAST,SAAS,EAAEU,mBAAmB,QAAQ,yBAAsB;AACrE,SAASC,kBAAkB,QAAQ,kCAA+B;AAClE,SAASC,SAAS,EAAEC,iBAAiB,QAAQ,yBAAsB;;AAEnE;AACA;AACA;AACA,SACIC,cAAc,EACdC,eAAe,EACfC,cAAc,EACdC,WAAW,EACXC,iBAAiB,EACjBC,kBAAkB,EAClBC,kBAAkB,EAClBC,iBAAiB,QACd,yCAAsC;AAC7C,SACIC,WAAW,EACXC,UAAU,EACVC,iBAAiB,EACjBC,cAAc,EACdC,eAAe,EACfC,sBAAsB,QACnB,0CAAuC;AAC9C,SACIC,mBAAmB,EACnBC,yBAAyB,EACzBC,2BAA2B,QACxB,0CAAuC;AAC9C,SACIC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,yBAAyB,QACtB,yCAAsC;;AAE7C;;AAeA;AACA;AACA;AACA,SACIC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,EACxBC,wBAAwB,EACxBC,gCAAgC,EAChCC,wBAAwB,EACxBC,sBAAsB,EACtBC,aAAa,QACV,6CAA0C;AACjD,SACIC,gBAAgB,EAChBC,gBAAgB,EAChBC,YAAY,EACZC,mBAAmB,EACnBC,eAAe,QACZ,8CAA2C;AAClD,SACIC,qBAAqB,EACrBC,qBAAqB,QAClB,yCAAsC;AAM7C;AACA,SAASC,YAAY,QAAQ,sCAAmC;;AAEhE;AACA;AACA;AACA;AACA;AACA;AACA,SACIC,SAAS,EACTC,wBAAwB,EACxBC,qBAAqB,EACrBC,wBAAwB,EACxBC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,EACzBC,wBAAwB,EACxBC,yBAAyB,EACzBC,8BAA8B,QAC3B,iCAA8B;;AAErC;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAEhE,SAASC,eAAe,QAAQ,+BAA4B;;AAE5D;AACA;AACA;AACA,SACIC,eAAe,EACfC,qBAAqB,EACrBC,uBAAuB,EACvBC,mBAAmB,QAChB,6BAA0B;AAEjC;AACA;AACA;AACA,SAASC,0BAA0B,EAAEC,cAAc,QAAQ,sBAAmB;;AAE9E;AACA;AACA;AACA,SAASC,gBAAgB,QAAQ,gCAA6B;AAG9D;AACA;AACA;AACA,SAAS5E,OAAO,IAAI6E,MAAM,QAAQ,2BAAwB;AAE1D,SAASC,eAAe,QAAQ,oCAAiC;AACjE,SAASC,aAAa,QAAQ,kCAA+B;AAE7D,SAAS/E,OAAO,IAAIgF,OAAO,QAAQ,4BAAyB;AAC5D,SAAShF,OAAO,IAAIiF,YAAY,QAAQ,iCAA8B;AAEtE,SAASC,QAAQ,QAAQ,kCAA+B;AACxD,SAASC,QAAQ,QAAQ,kCAA+B;;AAExD;AACA,SAASnF,OAAO,IAAIoF,WAAW,QAAQ,gCAA6B;AAEpE,SAASpF,OAAO,IAAIqF,iBAAiB,QAAQ,sCAAmC;AAGhF;AACA;AACA;AACA,SAASrF,OAAO,IAAIsF,aAAa,QAAQ,kCAA+B;AAExE,SAAStF,OAAO,IAAIuF,WAAW,QAAQ,gCAA6B;AAGpE;AACA;AACA;AACA,SAASvF,OAAO,IAAIwF,eAAe,EAAEC,mBAAmB,QAAQ,oCAAiC;AAGjG;AACA;AACA;AACA;AACA,SAASC,qBAAqB,QAAQ,qCAAkC;AAOxE;AACA,SAAS1F,OAAO,IAAI2F,mBAAmB,QAAQ,qCAAkC;AACjF,SAAS3F,OAAO,IAAI4F,mBAAmB,QAAQ,qCAAkC;AACjF,SAAS5F,OAAO,IAAI6F,iBAAiB,QAAQ,mCAAgC;AAC7E,SAAS7F,OAAO,IAAI8F,mBAAmB,QAAQ,qCAAkC;;AAEjF;AACA,SAAS9F,OAAO,IAAI+F,qBAAqB,QAAQ,uCAAoC;AACrF,SAAS/F,OAAO,IAAIgG,mBAAmB,QAAQ,qCAAkC;AACjF,SAAShG,OAAO,IAAIiG,oBAAoB,QAAQ,sCAAmC;AACnF,SAASjG,OAAO,IAAIkG,qBAAqB,QAAQ,uCAAoC;;AAErF;AACA;AACA;AACA,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,uCAAoC;AAGtF;AACA;AACA;AACA,SAASC,eAAe,EAAEC,eAAe,QAAQ,gCAA6B","ignoreList":[]}
+{"version":3,"names":["setPlatformOS","Platform","OS","default","OxyProvider","useOxy","useAuth","FontLoader","useAuthStore","useAssetStore","useAssets","useAssetsStore","useAsset","useUploadProgress","useAssetLoading","useAssetErrors","useAssetsByApp","useAssetsByEntity","useAssetUsageCount","useIsAssetLinked","setOxyAssetInstance","useFileDownloadUrl","useFollow","useFollowerCounts","useUserProfile","useUserProfiles","useCurrentUser","useUserById","useUserByUsername","useUsersBySessions","usePrivacySettings","useAuthorizedApps","useSessions","useSession","useDeviceSessions","useUserDevices","useSecurityInfo","useAccountStorageUsage","useSecurityActivity","useRecentSecurityActivity","useInfiniteSecurityActivity","useUserSubscription","useUserPayments","useUserWallet","useUserWalletTransactions","useUpdateProfile","useUploadAvatar","useUpdateAccountSettings","useUpdatePrivacySettings","useUpdateNotificationPreferences","useUpdateUserPreferences","useRevokeAuthorizedApp","useUploadFile","useSwitchSession","useLogoutSession","useLogoutAll","useUpdateDeviceName","useRemoveDevice","createProfileMutation","createGenericMutation","mutationKeys","queryKeys","invalidateAccountQueries","invalidateUserQueries","invalidateSessionQueries","invalidateDeviceQueries","invalidatePrivacyQueries","invalidateSecurityQueries","invalidateStorageQueries","invalidatePaymentsQueries","invalidateConnectedAppsQueries","useMutationStatus","useOnlineStatus","handleAuthError","isInvalidSessionError","isTimeoutOrNetworkError","extractErrorMessage","useFileFiltering","Avatar","OxySignInButton","OxyAuthPrompt","OxyLogo","FollowButton","LogoIcon","LogoText","AccountMenu","AccountMenuButton","ProfileButton","ProfileMenu","AccountSwitcher","AccountSwitcherView","useSwitchableAccounts","ManageAccountScreen","NotificationsScreen","PreferencesScreen","ConnectedAppsScreen","AccountSwitcherScreen","CreateAccountScreen","AccountMembersScreen","AccountSettingsScreen","showBottomSheet","closeBottomSheet","showSignInModal","hideSignInModal"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA,SAASA,aAAa,QAAyB,aAAa;AAC5D,SAASC,QAAQ,QAAQ,cAAc;AACvCD,aAAa,CAACC,QAAQ,CAACC,EAAgB,CAAC;;AAExC;AACA;AACA;AACA,SAASC,OAAO,IAAIC,WAAW,QAAQ,gCAA6B;AACpE,SAASC,MAAM,QAAQ,4BAAyB;AAEhD,SAASC,OAAO,QAAQ,uBAAoB;AAG5C;AACA;AACA;AACA,SAASC,UAAU,QAAQ,+BAA4B;;AAEvD;AACA;AACA;AACA,SAASC,YAAY,QAAQ,0BAAuB;AACpD,SACIC,aAAa,EACbC,SAAS,IAAIC,cAAc,EAC3BC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,cAAc,EACdC,cAAc,EACdC,iBAAiB,EACjBC,kBAAkB,EAClBC,gBAAgB,QACb,2BAAwB;;AAE/B;AACA;AACA;AACA,SAAST,SAAS,EAAEU,mBAAmB,QAAQ,yBAAsB;AACrE,SAASC,kBAAkB,QAAQ,kCAA+B;AAClE,SAASC,SAAS,EAAEC,iBAAiB,QAAQ,yBAAsB;;AAEnE;AACA;AACA;AACA,SACIC,cAAc,EACdC,eAAe,EACfC,cAAc,EACdC,WAAW,EACXC,iBAAiB,EACjBC,kBAAkB,EAClBC,kBAAkB,EAClBC,iBAAiB,QACd,yCAAsC;AAC7C,SACIC,WAAW,EACXC,UAAU,EACVC,iBAAiB,EACjBC,cAAc,EACdC,eAAe,EACfC,sBAAsB,QACnB,0CAAuC;AAC9C,SACIC,mBAAmB,EACnBC,yBAAyB,EACzBC,2BAA2B,QACxB,0CAAuC;AAC9C,SACIC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,yBAAyB,QACtB,yCAAsC;;AAE7C;;AAeA;AACA;AACA;AACA,SACIC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,EACxBC,wBAAwB,EACxBC,gCAAgC,EAChCC,wBAAwB,EACxBC,sBAAsB,EACtBC,aAAa,QACV,6CAA0C;AACjD,SACIC,gBAAgB,EAChBC,gBAAgB,EAChBC,YAAY,EACZC,mBAAmB,EACnBC,eAAe,QACZ,8CAA2C;AAClD,SACIC,qBAAqB,EACrBC,qBAAqB,QAClB,yCAAsC;AAM7C;AACA,SAASC,YAAY,QAAQ,sCAAmC;;AAEhE;AACA;AACA;AACA;AACA;AACA;AACA,SACIC,SAAS,EACTC,wBAAwB,EACxBC,qBAAqB,EACrBC,wBAAwB,EACxBC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,EACzBC,wBAAwB,EACxBC,yBAAyB,EACzBC,8BAA8B,QAC3B,iCAA8B;;AAErC;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAEhE,SAASC,eAAe,QAAQ,+BAA4B;;AAE5D;AACA;AACA;AACA,SACIC,eAAe,EACfC,qBAAqB,EACrBC,uBAAuB,EACvBC,mBAAmB,QAChB,6BAA0B;AAGjC;AACA;AACA;AACA,SAASC,gBAAgB,QAAQ,gCAA6B;AAG9D;AACA;AACA;AACA,SAAS1E,OAAO,IAAI2E,MAAM,QAAQ,2BAAwB;AAE1D,SAASC,eAAe,QAAQ,oCAAiC;AACjE,SAASC,aAAa,QAAQ,kCAA+B;AAE7D,SAAS7E,OAAO,IAAI8E,OAAO,QAAQ,4BAAyB;AAC5D,SAAS9E,OAAO,IAAI+E,YAAY,QAAQ,iCAA8B;AAEtE,SAASC,QAAQ,QAAQ,kCAA+B;AACxD,SAASC,QAAQ,QAAQ,kCAA+B;;AAExD;AACA,SAASjF,OAAO,IAAIkF,WAAW,QAAQ,gCAA6B;AAEpE,SAASlF,OAAO,IAAImF,iBAAiB,QAAQ,sCAAmC;AAGhF;AACA;AACA;AACA,SAASnF,OAAO,IAAIoF,aAAa,QAAQ,kCAA+B;AAExE,SAASpF,OAAO,IAAIqF,WAAW,QAAQ,gCAA6B;AAGpE;AACA;AACA;AACA,SAASrF,OAAO,IAAIsF,eAAe,EAAEC,mBAAmB,QAAQ,oCAAiC;AAGjG;AACA;AACA;AACA;AACA,SAASC,qBAAqB,QAAQ,qCAAkC;AAOxE;AACA,SAASxF,OAAO,IAAIyF,mBAAmB,QAAQ,qCAAkC;AACjF,SAASzF,OAAO,IAAI0F,mBAAmB,QAAQ,qCAAkC;AACjF,SAAS1F,OAAO,IAAI2F,iBAAiB,QAAQ,mCAAgC;AAC7E,SAAS3F,OAAO,IAAI4F,mBAAmB,QAAQ,qCAAkC;;AAEjF;AACA,SAAS5F,OAAO,IAAI6F,qBAAqB,QAAQ,uCAAoC;AACrF,SAAS7F,OAAO,IAAI8F,mBAAmB,QAAQ,qCAAkC;AACjF,SAAS9F,OAAO,IAAI+F,oBAAoB,QAAQ,sCAAmC;AACnF,SAAS/F,OAAO,IAAIgG,qBAAqB,QAAQ,uCAAoC;;AAErF;AACA;AACA;AACA,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,uCAAoC;AAGtF;AACA;AACA;AACA,SAASC,eAAe,EAAEC,eAAe,QAAQ,gCAA6B","ignoreList":[]}