@oxyhq/services 15.0.0 → 17.0.0

package/lib/typescript/commonjs/ui/components/AnotherDeviceQR.d.ts

@@ -1,34 +0,0 @@
-/**
- * AnotherDeviceQR — the collapsed "Sign in on another device" disclosure shared
- * by both sign-in containers (`SignInModal` on web, `OxyAuthScreen` on native).
- *
- * The QR code is always DEMOTED below the platform-primary "Continue with Oxy"
- * action: you cannot scan your own screen, so the QR is only useful for handing
- * sign-in to a SECOND device (scan with the Oxy Accounts app there). It lives
- * inside a tap-to-expand disclosure so it never competes with the primary CTA.
- *
- * The QR plate stays white intentionally — high contrast is required for
- * reliable scanning regardless of the app theme. That single plate (and its
- * fixed dimensions) is the only StyleSheet/hardcoded-color in this component;
- * everything else is composed from Bloom typography + centralized token classes.
- */
-import type React from 'react';
-export interface AnotherDeviceQRProps {
-    /** The legacy QR payload (`oxyauth://<token>`). Empty string renders nothing. */
-    qrData: string;
-    /**
-     * The secure "Sign in with Oxy" handoff payload (`oxycommons://approve?...`).
-     * Preferred over `qrData` when present — it carries the PUBLIC authorize code
-     * (never the secret session token), so the Oxy identity app on another device
-     * can scan it to approve. Falls back to `qrData` when the handoff backend has
-     * not returned a payload.
-     */
-    qrPayload?: string | null;
-}
-/**
- * Collapsed disclosure that reveals a high-contrast QR for signing in on a
- * second device with the Oxy Accounts app.
- */
-declare const AnotherDeviceQR: React.FC<AnotherDeviceQRProps>;
-export default AnotherDeviceQR;
-//# sourceMappingURL=AnotherDeviceQR.d.ts.map

package/lib/typescript/commonjs/ui/components/AnotherDeviceQR.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AnotherDeviceQR.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/AnotherDeviceQR.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAQ/B,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AASD;;;GAGG;AACH,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CA0DnD,CAAC;AAaF,eAAe,eAAe,CAAC"}

package/lib/typescript/commonjs/ui/components/ProfileMenu.d.ts

@@ -1,49 +0,0 @@
-import type React from 'react';
-/**
- * Web-only anchor. `ProfileButton` measures its trigger and anchors the panel to
- * one corner so the menu opens either UPWARD (footer trigger) or DOWNWARD (a
- * trigger at the top of a sidebar). Exactly ONE vertical edge is pinned:
- *  - `bottom` set → the panel's BOTTOM edge is anchored, so it opens UPWARD.
- *  - `top` set → the panel's TOP edge is anchored, so it opens DOWNWARD.
- * Native ignores the anchor and docks the panel to the bottom as a sheet.
- */
-export interface ProfileMenuAnchor {
-    /** Distance from the viewport left, for the panel's LEFT edge. */
-    left: number;
-    /** Distance from the viewport bottom, for the panel's BOTTOM edge (opens upward). */
-    bottom?: number;
-    /** Distance from the viewport top, for the panel's TOP edge (opens downward). */
-    top?: number;
-}
-export interface ProfileMenuProps {
-    open: boolean;
-    onClose: () => void;
-    /** Web-only trigger anchor. Native ignores this (bottom-sheet style). */
-    anchor?: ProfileMenuAnchor | null;
-    /** Navigate to the "Manage account" surface (settings). */
-    onNavigateManage: () => void;
-    /** Start the add-account / sign-in flow for an additional account. */
-    onAddAccount: () => void;
-    /** Optional: navigate to the signed-in user's own profile. */
-    onNavigateProfile?: () => void;
-    /** Called before the active identity changes so apps can clear scoped state. */
-    onBeforeSessionChange?: () => void | Promise<void>;
-}
-/**
- * Clean account switcher, written with react-native `StyleSheet` + Bloom
- * theme colors (the package convention — no NativeWind, which is only an
- * optional peer and absent in the primary `accounts` consumer). Lists EVERY
- * switchable account from {@link useSwitchableAccounts}
- * — device sign-ins AND linked graph accounts (owned orgs + shared-with-you) —
- * and routes EVERY switch through the context's single
- * `switchToAccount(accountId)` dispatcher (there is no separate device-only
- * path). Each on-device inactive row carries a per-account sign-out icon;
- * graph-only rows carry a role badge and indent under their parent. Below the
- * list: Add account, Manage account, optional View profile, and Sign out of all.
- *
- * Renders as an upward-opening popover anchored to the trigger on web, and a
- * bottom-sheet style modal on native.
- */
-declare const ProfileMenu: React.FC<ProfileMenuProps>;
-export default ProfileMenu;
-//# sourceMappingURL=ProfileMenu.d.ts.map

package/lib/typescript/commonjs/ui/components/ProfileMenu.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProfileMenu.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/ProfileMenu.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA4B/B;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAC9B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,yEAAyE;IACzE,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,sEAAsE;IACtE,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B,gFAAgF;IAChF,qBAAqB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,gBAAgB,CA8V3C,CAAC;AA0IF,eAAe,WAAW,CAAC"}

package/lib/typescript/commonjs/ui/components/SignInAccountChooser.d.ts

@@ -1,29 +0,0 @@
-import type React from 'react';
-import type { SwitchableAccount } from '../hooks/useSwitchableAccounts';
-export interface SignInAccountChooserProps {
-    /** Accounts available on this device / in the caller's graph, current first. */
-    accounts: SwitchableAccount[];
-    /** Selecting a row — the active account continues, others switch into. */
-    onSelectAccount: (account: SwitchableAccount) => void;
-    /** "Use another account" → reveal the sign-in options (password / QR / add). */
-    onUseAnother: () => void;
-    /** The account id currently being switched into (shows a per-row spinner). */
-    pendingAccountId?: string | null;
-    /** Disables every row while a selection is in flight. */
-    disabled?: boolean;
-}
-/**
- * Google-style account chooser (React Native). Lists every account the user can
- * continue as — device sign-ins + linked graph accounts, from
- * {@link SwitchableAccount} — plus a "Use another account" affordance. Rendered
- * as the FRONT screen of the sign-in surfaces (`SignInModal` web,
- * `OxyAuthScreen` native) whenever accounts exist; selecting a row funnels into
- * the SAME `switchToAccount` path the account switcher uses. When no accounts
- * exist the surfaces skip this and show the sign-in options directly.
- *
- * Presentational + chrome-agnostic (no modal/sheet wrapper, no data fetching) so
- * both containers reuse it and it is unit-testable in isolation.
- */
-export declare const SignInAccountChooser: React.FC<SignInAccountChooserProps>;
-export default SignInAccountChooser;
-//# sourceMappingURL=SignInAccountChooser.d.ts.map

package/lib/typescript/commonjs/ui/components/SignInAccountChooser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInAccountChooser.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/SignInAccountChooser.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAM/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,MAAM,WAAW,yBAAyB;IACtC,gFAAgF;IAChF,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,0EAA0E;IAC1E,eAAe,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACtD,gFAAgF;IAChF,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,yBAAyB,CA4EpE,CAAC;AAoDF,eAAe,oBAAoB,CAAC"}

package/lib/typescript/commonjs/ui/components/SignInModal.d.ts

@@ -1,28 +0,0 @@
-/**
- * SignInModal — web-first centered sign-in modal.
- *
- * Two phases, Google-style:
- *  1. Account chooser (FRONT screen, shown when the device/user already has
- *     accounts): pick an account to continue as — one tap switches through the
- *     SAME `switchToAccount` path the account switcher uses — or "Use another
- *     account" to reveal the sign-in options.
- *  2. Sign-in options: the first-party password flow (identifier → password →
- *     optional 2FA, `usePasswordSignIn`) as the PRIMARY action, with the
- *     cross-app device flow (same-device deep-link + "sign in on another device"
- *     QR) as a SECONDARY option below an "or" divider.
- *
- * When there are no accounts the modal opens straight on the sign-in options.
- * The device-flow machinery lives in the shared `useOxyAuthSession` hook (the
- * native `OxyAuthScreen` consumes it too — neither container re-implements the
- * transport). Animates with a fade + scale; per-phase content cross-fades and
- * respects reduced motion.
- */
-import type React from 'react';
-export declare const showSignInModal: () => void;
-export declare const hideSignInModal: () => void;
-export declare const isSignInModalVisible: () => boolean;
-/** Subscribe to modal visibility changes */
-export declare const subscribeToSignInModal: (listener: (visible: boolean) => void) => (() => void);
-declare const SignInModal: React.FC;
-export default SignInModal;
-//# sourceMappingURL=SignInModal.d.ts.map

package/lib/typescript/commonjs/ui/components/SignInModal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInModal.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/SignInModal.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA8B/B,eAAO,MAAM,eAAe,YAI3B,CAAC;AAEF,eAAO,MAAM,eAAe,YAI3B,CAAC;AAEF,eAAO,MAAM,oBAAoB,eAAqB,CAAC;AAEvD,4CAA4C;AAC5C,eAAO,MAAM,sBAAsB,GAAI,UAAU,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,KAAG,CAAC,MAAM,IAAI,CAGxF,CAAC;AAEF,QAAA,MAAM,WAAW,EAAE,KAAK,CAAC,EAkBxB,CAAC;AAybF,eAAe,WAAW,CAAC"}

package/lib/typescript/commonjs/ui/hooks/useOxyAuthSession.d.ts

@@ -1,105 +0,0 @@
-/**
- * useOxyAuthSession — the single shared engine for the cross-app device-flow
- * sign-in ("Sign in with Oxy") used by BOTH containers:
- *
- *   - `SignInModal` (web centered modal)
- *   - `OxyAuthScreen` (native bottom sheet)
- *
- * Before this hook existed, those two files each re-implemented ~90% of the
- * same auth-session machinery (session-token creation, QR data, socket.io
- * `/auth-session` subscription, the HTTP polling fallback, waiting/error/retry
- * state, the open-auth handler, and cleanup) — and they had drifted (notably a
- * weaker `Math.random()` session token on native vs the crypto-secure one on
- * web). This hook owns ALL of it ONCE, with a clean typed surface, so the
- * containers only own their layout. The transport is functionally identical to
- * the previous implementations — this is a structural de-duplication, not a
- * behavior change.
- *
- * The native-only deep-link return path (`Linking` redirect handling) lives
- * HERE, gated to native via `Platform.OS`, so the web container never carries
- * native-only code while the two paths still cannot drift.
- */
-import type { OxyServices, SessionLoginResponse, User } from '@oxyhq/core';
-/**
- * Default destination for the "Create an Oxy account" / "Get Oxy Accounts"
- * link, shared by both containers. Reused as-is from the original native
- * `OxyAuthScreen` so no new route is invented.
- */
-export declare const OXY_ACCOUNTS_WEB_URL = "https://accounts.oxy.so";
-/** Default central Oxy auth web origin used when no override can be resolved. */
-export declare const OXY_AUTH_WEB_URL = "https://auth.oxy.so";
-/** Auth session expiration (5 minutes). */
-export declare const AUTH_SESSION_EXPIRY_MS: number;
-/** Polling interval (fallback if the socket fails) in milliseconds. */
-export declare const POLLING_INTERVAL_MS = 3000;
-/** The active device-flow session this client created and is waiting on. */
-export interface AuthSession {
-    /** The secret high-entropy token that IS the device-flow credential. */
-    sessionToken: string;
-    /** Epoch ms after which the server rejects this session. */
-    expiresAt: number;
-}
-export interface UseOxyAuthSessionOptions {
-    /**
-     * Called after a fully completed sign-in (bearer claimed, session hydrated).
-     * The web modal closes itself here; the native screen forwards the user to
-     * its `onAuthenticated` prop. The hook itself stays presentation-agnostic.
-     */
-    onSignedIn?: (user: User) => void;
-}
-export interface UseOxyAuthSessionResult {
-    /** The active device-flow session, or `null` before/while it is created. */
-    authSession: AuthSession | null;
-    /** The QR payload string (`oxyauth://<token>`), or `''` when no session. */
-    qrData: string;
-    /**
-     * The PUBLIC, single-use authorize code for the "Sign in with Oxy" handoff,
-     * or `null` when the handoff backend did not return one. The approver (the
-     * Oxy identity app) resolves the requesting app's identity from this code —
-     * it is safe to display; it is NOT the secret `sessionToken`.
-     */
-    authorizeCode: string | null;
-    /**
-     * The structured "Sign in with Oxy" deep-link payload
-     * (`oxycommons://approve?...`) to render in the cross-device QR and to open on
-     * the same device, or `null` when the handoff backend did not return one.
-     * Render this (preferred over `qrData`) in the QR and pass it to
-     * `Linking.openURL` for same-device approval.
-     */
-    qrPayload: string | null;
-    /** `true` while the session is being created (initial spinner). */
-    isLoading: boolean;
-    /** A user-facing error message, or `null`. Drives the retry UI. */
-    error: string | null;
-    /** `true` once a session exists and we are awaiting authorization. */
-    isWaiting: boolean;
-    /**
-     * Open the central Oxy auth approval surface for THIS device-flow session.
-     * On web this opens a centered approval popup; on native it opens the system
-     * browser (carrying a `redirect_uri` so the deep-link return path can fire).
-     * This is the action behind the platform-primary "Continue with Oxy" button.
-     */
-    openAuthApproval: () => Promise<void>;
-    /**
-     * Same-device "Sign in with Oxy" handoff: deep-link to `qrPayload`
-     * (`oxycommons://approve?...`) so the native Oxy identity app opens directly
-     * to approve. No-op when no `qrPayload` was returned. The socket / poll still
-     * completes the sign-in once the approval lands.
-     */
-    openSameDeviceApproval: () => Promise<void>;
-    /** Tear down the current session and create a fresh one (the retry action). */
-    retry: () => void;
-    /** Disconnect the socket and stop polling. Idempotent. */
-    cleanup: () => void;
-}
-/**
- * Owns the full device-flow auth-session lifecycle for one mounted sign-in
- * surface. Both `SignInModal` and `OxyAuthScreen` consume this; neither
- * re-implements the socket / polling / deep-link transport.
- *
- * Subscriptions (socket connect/disconnect, the poll interval, the native
- * deep-link listener, and unmount cleanup) are the legitimate `useEffect` use
- * WITH cleanup. No effect here computes derived UI state.
- */
-export declare function useOxyAuthSession(oxyServices: OxyServices, clientId: string | null, commitSession: ((session: SessionLoginResponse) => Promise<void>) | undefined, options?: UseOxyAuthSessionOptions): UseOxyAuthSessionResult;
-//# sourceMappingURL=useOxyAuthSession.d.ts.map

package/lib/typescript/commonjs/ui/hooks/useOxyAuthSession.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useOxyAuthSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/hooks/useOxyAuthSession.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAM3E;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,2CAA2C;AAC3C,eAAO,MAAM,sBAAsB,QAAgB,CAAC;AAEpD,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;CACnB;AAgCD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB,mEAAmE;IACnE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;OAKG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,+EAA+E;IAC/E,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAoFD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7E,OAAO,GAAE,wBAA6B,GACrC,uBAAuB,CA8YzB"}

package/lib/typescript/commonjs/ui/hooks/usePasswordSignIn.d.ts

@@ -1,31 +0,0 @@
-export type PasswordSignInStep = 'identifier' | 'password' | 'twoFactor';
-export interface UsePasswordSignInOptions {
-    /** Fired once a session has been committed (the surface should close). */
-    onSignedIn?: () => void;
-}
-export interface UsePasswordSignInResult {
-    step: PasswordSignInStep;
-    identifier: string;
-    setIdentifier: (value: string) => void;
-    password: string;
-    setPassword: (value: string) => void;
-    /** The current 2FA input — a TOTP code or a backup code, per `useBackupCode`. */
-    code: string;
-    setCode: (value: string) => void;
-    useBackupCode: boolean;
-    setUseBackupCode: (value: boolean) => void;
-    error: string | null;
-    isSubmitting: boolean;
-    /** Advance identifier → password (validates a non-empty identifier). */
-    submitIdentifier: () => void;
-    /** Submit the password: commits a one-step session, or advances to 2FA. */
-    submitPassword: () => Promise<void>;
-    /** Submit the 2FA code / backup code and commit the session. */
-    submitTwoFactor: () => Promise<void>;
-    /** Step back one screen (2FA → password → identifier), clearing the error. */
-    back: () => void;
-    /** Reset every field back to the identifier step. */
-    reset: () => void;
-}
-export declare function usePasswordSignIn(options?: UsePasswordSignInOptions): UsePasswordSignInResult;
-//# sourceMappingURL=usePasswordSignIn.d.ts.map

package/lib/typescript/commonjs/ui/hooks/usePasswordSignIn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"usePasswordSignIn.d.ts","sourceRoot":"","sources":["../../../../../src/ui/hooks/usePasswordSignIn.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;AAEzE,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,2EAA2E;IAC3E,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,gEAAgE;IAChE,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,qDAAqD;IACrD,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,uBAAuB,CA4JjG"}

package/lib/typescript/commonjs/ui/screens/AccountSwitcherScreen.d.ts

@@ -1,11 +0,0 @@
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-/**
- * Bottom-sheet route wrapper around {@link AccountSwitcherView}. Used when the
- * switcher is opened as a sheet (e.g. from the "Your accounts" entry in
- * ManageAccount) rather than as the header-chip popover (which uses the
- * `AccountSwitcher` modal directly).
- */
-declare const AccountSwitcherScreen: React.FC<BaseScreenProps>;
-export default AccountSwitcherScreen;
-//# sourceMappingURL=AccountSwitcherScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/AccountSwitcherScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountSwitcherScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AccountSwitcherScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAK3D;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA0BpD,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/lib/typescript/commonjs/ui/screens/OxyAuthScreen.d.ts

@@ -1,22 +0,0 @@
-/**
- * OxyAuthScreen — Sign in with Oxy (native bottom-sheet container).
- *
- * Two phases, Google-style:
- *  1. Account chooser (FRONT screen, shown when the device/user already has
- *     accounts): pick an account to continue as — one tap switches through the
- *     SAME `switchToAccount` path the account switcher uses — or "Use another
- *     account" to reveal the sign-in options.
- *  2. Sign-in options: the first-party password flow (identifier → password →
- *     optional 2FA, `usePasswordSignIn`) as the PRIMARY action, with the
- *     cross-app device flow (same-device deep-link + "sign in on another device"
- *     QR) as a SECONDARY option below an "or" divider.
- *
- * The device-flow machinery lives in the shared `useOxyAuthSession` hook (the
- * web `SignInModal` consumes it too). This screen should NOT be used within the
- * Oxy Accounts app itself.
- */
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-declare const OxyAuthScreen: React.FC<BaseScreenProps>;
-export default OxyAuthScreen;
-//# sourceMappingURL=OxyAuthScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/OxyAuthScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OxyAuthScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/OxyAuthScreen.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAmB3D,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAyR5C,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/lib/typescript/commonjs/utils/deviceFlowSignIn.d.ts

@@ -1,97 +0,0 @@
-/**
- * Shared, pure orchestration for completing the cross-app device-flow sign-in
- * (the QR-code / "Open Oxy Auth" path used on native and web).
- *
- * THE FIRST BUG THIS FIXES (native): once another authenticated device
- * approves the pending AuthSession, the originating client is notified
- * (socket / poll / deep-link) with the authorized `sessionId`. Before any
- * session-management code can use it, the client MUST exchange the secret
- * 128-bit `sessionToken` (held only by this client, generated for THIS flow)
- * for the first access token via `claimSessionByToken` — the device-flow
- * equivalent of OAuth's code-for-token exchange (RFC 8628 §3.4).
- *
- * THE SECOND BUG THIS FIXES (session-sync cutover regression): the
- * freshly-claimed session is NOT yet registered in the device's
- * server-authoritative session set — nothing has run
- * `sessionClient.addCurrentAccount()` for it — so it must NOT be committed
- * through `switchSession`. That path is now an account-SWITCH between
- * accounts already registered on this device (`OxyContext`'s
- * `switchSessionForContext`), and throws `No device account found for
- * session "..."` for anything else, surfacing as "Authorization successful
- * but failed to complete sign in." Instead the claimed session must be
- * committed through the SAME path a fresh password sign-in uses —
- * `useOxy().handleWebSession` (`OxyContext`'s `handleWebSSOSession`) — which
- * registers the account into the device set, persists it durably, and
- * hydrates the full user profile.
- *
- * Skipping the claim leaves the SDK with NO bearer token: the session is
- * authorized server-side but the app never becomes authenticated and the UI
- * sits "Waiting for authorization..." forever. Consolidating the
- * claim->commit sequence here keeps native and web identical and
- * unit-testable.
- */
-import { type SessionLoginResponse, type User } from '@oxyhq/core';
-interface DeviceFlowClaimResult {
-    accessToken?: string;
-    /** Rotating refresh-token family head minted by `/auth/session/claim` on the
-     * trusted lane. Not on the core method's typed return, so read defensively;
-     * threaded into `commitSession` so the QR sign-in persists a durable session
-     * that survives a reload without a redirect. */
-    refreshToken?: string;
-    sessionId?: string;
-    deviceId?: string;
-    expiresAt?: string;
-    user?: User;
-}
-/**
- * The minimal `OxyServices` surface this orchestration needs. Kept as a
- * structural type (rather than importing the full client) so the helper is
- * trivially unit-testable with a stub and never pulls the RN/Expo runtime into
- * a test bundle.
- *
- */
-export interface DeviceFlowClient {
-    /**
-     * Exchange the device-flow `sessionToken` for the first access + refresh
-     * token, planting them on the client. Single-use; replay is rejected by the
-     * API. No bearer required — the high-entropy `sessionToken` IS the credential.
-     */
-    claimSessionByToken: (sessionToken: string) => Promise<DeviceFlowClaimResult | undefined>;
-}
-export interface CompleteDeviceFlowSignInOptions {
-    /** The OxyServices client (or any object exposing `claimSessionByToken`). */
-    oxyServices: DeviceFlowClient;
-    /** The authorized device session id, delivered by the socket / poll / link. */
-    sessionId: string;
-    /**
-     * The secret `sessionToken` generated for THIS flow and registered via
-     * `POST /auth/session/create`. Required to claim the first access token.
-     */
-    sessionToken: string;
-    /**
-     * `useOxy().handleWebSession` — commits the freshly-claimed session into
-     * context state through the SAME path a password sign-in uses:
-     * registers the account into the device's server-authoritative session set,
-     * persists it durably, and hydrates the full user profile. Runs AFTER the
-     * bearer is planted so its bearer-protected calls succeed.
-     *
-     * The `refreshToken` extra (optional; not on the public `SessionLoginResponse`
-     * type) carries the rotating refresh family so the commit funnel persists a
-     * durable session.
-     */
-    commitSession: (session: SessionLoginResponse & {
-        refreshToken?: string;
-    }) => Promise<void>;
-}
-/**
- * Complete a device-flow sign-in: claim the first access token with the secret
- * `sessionToken` (planting the bearer), then commit the resulting session via
- * `commitSession` (registers it into the device's server-authoritative session
- * set and hydrates the full user). Returns the authenticated user.
- *
- * Throws if the claim did not return a usable session, or if either the claim
- * or the commit fails; callers surface a retry UI.
- */
-export declare function completeDeviceFlowSignIn({ oxyServices, sessionId, sessionToken, commitSession, }: CompleteDeviceFlowSignInOptions): Promise<User>;
-export {};
-//# sourceMappingURL=deviceFlowSignIn.d.ts.map

package/lib/typescript/commonjs/utils/deviceFlowSignIn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deviceFlowSignIn.d.ts","sourceRoot":"","sources":["../../../../src/utils/deviceFlowSignIn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,IAAI,EACV,MAAM,aAAa,CAAC;AAErB,UAAU,qBAAqB;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;oDAGgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,+BAA+B;IAC9C,6EAA6E;IAC7E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,GACd,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CjD"}

package/lib/typescript/module/ui/components/AccountMenu.d.ts

@@ -1,47 +0,0 @@
-import type React from 'react';
-/**
- * Web-only anchor for the popover panel. Each field anchors the panel against
- * one viewport edge, so the popover can be placed against ANY corner: a
- * top-right avatar chip opens downward/right-aligned (`{ top, right }`), while a
- * bottom-left account button opens upward/left-aligned (`{ bottom, left }`).
- *
- * Callers MUST supply at most one vertical edge (`top` XOR `bottom`) and at most
- * one horizontal edge (`left` XOR `right`). The panel has a fixed width and
- * `maxHeight`, so a single vertical + single horizontal edge fully positions it.
- * Supplying both opposite edges (e.g. `top` AND `bottom`) would stretch the
- * panel on RN-Web and is unsupported.
- */
-export interface AccountMenuAnchor {
-    /** Distance from the viewport top, when anchoring the panel's TOP edge. */
-    top?: number;
-    /** Distance from the viewport bottom, when anchoring the panel's BOTTOM edge (opens upward). */
-    bottom?: number;
-    /** Distance from the viewport left, when anchoring the panel's LEFT edge. */
-    left?: number;
-    /** Distance from the viewport right, when anchoring the panel's RIGHT edge. */
-    right?: number;
-}
-export interface AccountMenuProps {
-    open: boolean;
-    onClose: () => void;
-    onNavigateManage: () => void;
-    onAddAccount: () => void;
-    /** Optional anchor (web only). Native ignores this and uses bottom-sheet style. */
-    anchor?: AccountMenuAnchor | null;
-    /** Called before the active identity changes so apps can clear tenant-scoped state. */
-    onBeforeSessionChange?: () => void | Promise<void>;
-}
-/**
- * Unified, canonical account switcher for the Oxy ecosystem. Gmail-style: the
- * accounts list sits at the top (current account first, with a checkmark), then
- * "Add another account", "Manage account", and the sign-out actions. Lists EVERY
- * switchable account (device sign-ins AND linked graph accounts) and routes every
- * switch through the single `switchToAccount(accountId)` path.
- *
- * Reads everything it needs from `useOxy()` / `useSwitchableAccounts()` — never
- * receives a session via props. Renders as a popover anchored to the trigger on
- * web, and as a full-width bottom-sheet style modal on native.
- */
-declare const AccountMenu: React.FC<AccountMenuProps>;
-export default AccountMenu;
-//# sourceMappingURL=AccountMenu.d.ts.map

package/lib/typescript/module/ui/components/AccountMenu.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountMenu.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/AccountMenu.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAwB/B;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAC9B,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,mFAAmF;IACnF,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAQD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,gBAAgB,CA8b3C,CAAC;AA2HF,eAAe,WAAW,CAAC"}

package/lib/typescript/module/ui/components/AccountMenuButton.d.ts

@@ -1,26 +0,0 @@
-import type React from 'react';
-export interface AccountMenuButtonProps {
-    /** Avatar size (px). Defaults to 36 (Google account chip size). */
-    size?: number;
-    /** Called when the user picks "Manage your Oxy Account". */
-    onNavigateManage: () => void;
-    /** Called when the user picks "Add another account". */
-    onAddAccount: () => void;
-}
-/**
- * Avatar entry-point that opens the unified {@link AccountSwitcher}. Reads the
- * active account from `useOxy().user` — never receives user data via props.
- *
- * The chip reflects the current account: in the real-session switch model,
- * switching into an org / project / bot / shared account makes the whole app —
- * including this header avatar — become that account, so `user` IS the current
- * account and the chip always shows it.
- *
- * Renders a small avatar chip (top-right friendly). Click → opens the switcher
- * (device sign-ins + account graph). Pure component: owns only the open-state
- * and the trigger's measured anchor. Create-account and per-account settings
- * route through the global bottom-sheet manager.
- */
-declare const AccountMenuButton: React.FC<AccountMenuButtonProps>;
-export default AccountMenuButton;
-//# sourceMappingURL=AccountMenuButton.d.ts.map

package/lib/typescript/module/ui/components/AccountMenuButton.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountMenuButton.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/AccountMenuButton.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAW/B,MAAM,WAAW,sBAAsB;IACnC,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,wDAAwD;IACxD,YAAY,EAAE,MAAM,IAAI,CAAC;CAC5B;AAID;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CA+EvD,CAAC;AAUF,eAAe,iBAAiB,CAAC"}

package/lib/typescript/module/ui/components/AccountSwitcher.d.ts

@@ -1,46 +0,0 @@
-import type React from 'react';
-import type { AccountMenuAnchor } from './AccountMenu.js';
-/**
- * The set of action callbacks the switcher body needs. Supplied by whichever
- * chrome wraps it — the {@link AccountSwitcher} modal/popover (web header chip,
- * native sheet) or the {@link AccountSwitcherScreen} bottom-sheet route.
- */
-export interface AccountSwitcherActions {
-    /** Close the surface (dismiss the modal, or pop the bottom sheet). */
-    onClose: () => void;
-    /** Start adding another device sign-in. */
-    onAddAccount: () => void;
-    /** Open "Manage your Oxy Account" (the caller's own personal account). */
-    onNavigateManage: () => void;
-    /** Open the create-account flow. */
-    onCreateAccount: () => void;
-    /** Open the per-account settings surface for a non-personal account. */
-    onOpenAccountSettings?: (accountId: string) => void;
-    /** Called before the active device session changes so apps can clear tenant state. */
-    onBeforeSessionChange?: () => void | Promise<void>;
-}
-/**
- * The presentational, chrome-agnostic body of the unified account switcher.
- *
- * Two levels, relationship-aware, both sourced from the single
- * {@link useSwitchableAccounts} hook and switched through the SINGLE
- * `switchToAccount(accountId)` path:
- *  - Section A — accounts signed in on THIS device (`onDevice` rows). Tap to
- *    switch; per-row sign-out; "Add another account".
- *  - Section B — the account GRAPH not yet signed in here: "Your accounts"
- *    (self / owned) and "Shared with you" (member). 2-level tree (org →
- *    children), role badge, search, one-tap to switch.
- */
-export declare const AccountSwitcherView: React.FC<AccountSwitcherActions>;
-export interface AccountSwitcherProps extends AccountSwitcherActions {
-    open: boolean;
-    /** Optional anchor (web only). Native ignores this and docks as a bottom sheet. */
-    anchor?: AccountMenuAnchor | null;
-}
-/**
- * Unified account switcher presented as a popover (web) / bottom-sheet style
- * modal (native). The canonical entry point opened by {@link AccountMenuButton}.
- */
-declare const AccountSwitcher: React.FC<AccountSwitcherProps>;
-export default AccountSwitcher;
-//# sourceMappingURL=AccountSwitcher.d.ts.map

package/lib/typescript/module/ui/components/AccountSwitcher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountSwitcher.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/AccountSwitcher.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAwB/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAe,CAAC;AAKvD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC,sEAAsE;IACtE,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,oCAAoC;IACpC,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,wEAAwE;IACxE,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAyCD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAwbhE,CAAC;AAEF,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAChE,IAAI,EAAE,OAAO,CAAC;IACd,mFAAmF;IACnF,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACrC;AAED;;;GAGG;AACH,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAyDnD,CAAC;AA6IF,eAAe,eAAe,CAAC"}

package/lib/typescript/module/ui/components/AnotherDeviceQR.d.ts

@@ -1,34 +0,0 @@
-/**
- * AnotherDeviceQR — the collapsed "Sign in on another device" disclosure shared
- * by both sign-in containers (`SignInModal` on web, `OxyAuthScreen` on native).
- *
- * The QR code is always DEMOTED below the platform-primary "Continue with Oxy"
- * action: you cannot scan your own screen, so the QR is only useful for handing
- * sign-in to a SECOND device (scan with the Oxy Accounts app there). It lives
- * inside a tap-to-expand disclosure so it never competes with the primary CTA.
- *
- * The QR plate stays white intentionally — high contrast is required for
- * reliable scanning regardless of the app theme. That single plate (and its
- * fixed dimensions) is the only StyleSheet/hardcoded-color in this component;
- * everything else is composed from Bloom typography + centralized token classes.
- */
-import type React from 'react';
-export interface AnotherDeviceQRProps {
-    /** The legacy QR payload (`oxyauth://<token>`). Empty string renders nothing. */
-    qrData: string;
-    /**
-     * The secure "Sign in with Oxy" handoff payload (`oxycommons://approve?...`).
-     * Preferred over `qrData` when present — it carries the PUBLIC authorize code
-     * (never the secret session token), so the Oxy identity app on another device
-     * can scan it to approve. Falls back to `qrData` when the handoff backend has
-     * not returned a payload.
-     */
-    qrPayload?: string | null;
-}
-/**
- * Collapsed disclosure that reveals a high-contrast QR for signing in on a
- * second device with the Oxy Accounts app.
- */
-declare const AnotherDeviceQR: React.FC<AnotherDeviceQRProps>;
-export default AnotherDeviceQR;
-//# sourceMappingURL=AnotherDeviceQR.d.ts.map

package/lib/typescript/module/ui/components/AnotherDeviceQR.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AnotherDeviceQR.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/AnotherDeviceQR.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAQ/B,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AASD;;;GAGG;AACH,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CA0DnD,CAAC;AAaF,eAAe,eAAe,CAAC"}