@oxyhq/services 16.0.0 → 17.0.0

package/lib/typescript/module/ui/components/ProfileMenu.d.ts

@@ -1,49 +0,0 @@
-import type React from 'react';
-/**
- * Web-only anchor. `ProfileButton` measures its trigger and anchors the panel to
- * one corner so the menu opens either UPWARD (footer trigger) or DOWNWARD (a
- * trigger at the top of a sidebar). Exactly ONE vertical edge is pinned:
- *  - `bottom` set → the panel's BOTTOM edge is anchored, so it opens UPWARD.
- *  - `top` set → the panel's TOP edge is anchored, so it opens DOWNWARD.
- * Native ignores the anchor and docks the panel to the bottom as a sheet.
- */
-export interface ProfileMenuAnchor {
-    /** Distance from the viewport left, for the panel's LEFT edge. */
-    left: number;
-    /** Distance from the viewport bottom, for the panel's BOTTOM edge (opens upward). */
-    bottom?: number;
-    /** Distance from the viewport top, for the panel's TOP edge (opens downward). */
-    top?: number;
-}
-export interface ProfileMenuProps {
-    open: boolean;
-    onClose: () => void;
-    /** Web-only trigger anchor. Native ignores this (bottom-sheet style). */
-    anchor?: ProfileMenuAnchor | null;
-    /** Navigate to the "Manage account" surface (settings). */
-    onNavigateManage: () => void;
-    /** Start the add-account / sign-in flow for an additional account. */
-    onAddAccount: () => void;
-    /** Optional: navigate to the signed-in user's own profile. */
-    onNavigateProfile?: () => void;
-    /** Called before the active identity changes so apps can clear scoped state. */
-    onBeforeSessionChange?: () => void | Promise<void>;
-}
-/**
- * Clean account switcher, written with react-native `StyleSheet` + Bloom
- * theme colors (the package convention — no NativeWind, which is only an
- * optional peer and absent in the primary `accounts` consumer). Lists EVERY
- * switchable account from {@link useSwitchableAccounts}
- * — device sign-ins AND linked graph accounts (owned orgs + shared-with-you) —
- * and routes EVERY switch through the context's single
- * `switchToAccount(accountId)` dispatcher (there is no separate device-only
- * path). Each on-device inactive row carries a per-account sign-out icon;
- * graph-only rows carry a role badge and indent under their parent. Below the
- * list: Add account, Manage account, optional View profile, and Sign out of all.
- *
- * Renders as an upward-opening popover anchored to the trigger on web, and a
- * bottom-sheet style modal on native.
- */
-declare const ProfileMenu: React.FC<ProfileMenuProps>;
-export default ProfileMenu;
-//# sourceMappingURL=ProfileMenu.d.ts.map

package/lib/typescript/module/ui/components/ProfileMenu.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProfileMenu.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/ProfileMenu.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA4B/B;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAC9B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,yEAAyE;IACzE,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,sEAAsE;IACtE,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B,gFAAgF;IAChF,qBAAqB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,gBAAgB,CA8V3C,CAAC;AA0IF,eAAe,WAAW,CAAC"}

package/lib/typescript/module/ui/components/SignInAccountChooser.d.ts

@@ -1,29 +0,0 @@
-import type React from 'react';
-import type { SwitchableAccount } from '../hooks/useSwitchableAccounts.js';
-export interface SignInAccountChooserProps {
-    /** Accounts available on this device / in the caller's graph, current first. */
-    accounts: SwitchableAccount[];
-    /** Selecting a row — the active account continues, others switch into. */
-    onSelectAccount: (account: SwitchableAccount) => void;
-    /** "Use another account" → reveal the sign-in options (password / QR / add). */
-    onUseAnother: () => void;
-    /** The account id currently being switched into (shows a per-row spinner). */
-    pendingAccountId?: string | null;
-    /** Disables every row while a selection is in flight. */
-    disabled?: boolean;
-}
-/**
- * Google-style account chooser (React Native). Lists every account the user can
- * continue as — device sign-ins + linked graph accounts, from
- * {@link SwitchableAccount} — plus a "Use another account" affordance. Rendered
- * as the FRONT screen of the sign-in surfaces (`SignInModal` web,
- * `OxyAuthScreen` native) whenever accounts exist; selecting a row funnels into
- * the SAME `switchToAccount` path the account switcher uses. When no accounts
- * exist the surfaces skip this and show the sign-in options directly.
- *
- * Presentational + chrome-agnostic (no modal/sheet wrapper, no data fetching) so
- * both containers reuse it and it is unit-testable in isolation.
- */
-export declare const SignInAccountChooser: React.FC<SignInAccountChooserProps>;
-export default SignInAccountChooser;
-//# sourceMappingURL=SignInAccountChooser.d.ts.map

package/lib/typescript/module/ui/components/SignInAccountChooser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInAccountChooser.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/SignInAccountChooser.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAM/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAgC,CAAC;AAExE,MAAM,WAAW,yBAAyB;IACtC,gFAAgF;IAChF,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,0EAA0E;IAC1E,eAAe,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACtD,gFAAgF;IAChF,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,yBAAyB,CA4EpE,CAAC;AAoDF,eAAe,oBAAoB,CAAC"}

package/lib/typescript/module/ui/components/SignInModal.d.ts

@@ -1,28 +0,0 @@
-/**
- * SignInModal — web-first centered sign-in modal.
- *
- * Two phases, Google-style:
- *  1. Account chooser (FRONT screen, shown when the device/user already has
- *     accounts): pick an account to continue as — one tap switches through the
- *     SAME `switchToAccount` path the account switcher uses — or "Use another
- *     account" to reveal the sign-in options.
- *  2. Sign-in options: the first-party password flow (identifier → password →
- *     optional 2FA, `usePasswordSignIn`) as the PRIMARY action, with the
- *     cross-app device flow (same-device deep-link + "sign in on another device"
- *     QR) as a SECONDARY option below an "or" divider.
- *
- * When there are no accounts the modal opens straight on the sign-in options.
- * The device-flow machinery lives in the shared `useOxyAuthSession` hook (the
- * native `OxyAuthScreen` consumes it too — neither container re-implements the
- * transport). Animates with a fade + scale; per-phase content cross-fades and
- * respects reduced motion.
- */
-import type React from 'react';
-export declare const showSignInModal: () => void;
-export declare const hideSignInModal: () => void;
-export declare const isSignInModalVisible: () => boolean;
-/** Subscribe to modal visibility changes */
-export declare const subscribeToSignInModal: (listener: (visible: boolean) => void) => (() => void);
-declare const SignInModal: React.FC;
-export default SignInModal;
-//# sourceMappingURL=SignInModal.d.ts.map

package/lib/typescript/module/ui/components/SignInModal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInModal.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/SignInModal.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA8B/B,eAAO,MAAM,eAAe,YAI3B,CAAC;AAEF,eAAO,MAAM,eAAe,YAI3B,CAAC;AAEF,eAAO,MAAM,oBAAoB,eAAqB,CAAC;AAEvD,4CAA4C;AAC5C,eAAO,MAAM,sBAAsB,GAAI,UAAU,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,KAAG,CAAC,MAAM,IAAI,CAGxF,CAAC;AAEF,QAAA,MAAM,WAAW,EAAE,KAAK,CAAC,EAkBxB,CAAC;AAybF,eAAe,WAAW,CAAC"}

package/lib/typescript/module/ui/hooks/useOxyAuthSession.d.ts

@@ -1,105 +0,0 @@
-/**
- * useOxyAuthSession — the single shared engine for the cross-app device-flow
- * sign-in ("Sign in with Oxy") used by BOTH containers:
- *
- *   - `SignInModal` (web centered modal)
- *   - `OxyAuthScreen` (native bottom sheet)
- *
- * Before this hook existed, those two files each re-implemented ~90% of the
- * same auth-session machinery (session-token creation, QR data, socket.io
- * `/auth-session` subscription, the HTTP polling fallback, waiting/error/retry
- * state, the open-auth handler, and cleanup) — and they had drifted (notably a
- * weaker `Math.random()` session token on native vs the crypto-secure one on
- * web). This hook owns ALL of it ONCE, with a clean typed surface, so the
- * containers only own their layout. The transport is functionally identical to
- * the previous implementations — this is a structural de-duplication, not a
- * behavior change.
- *
- * The native-only deep-link return path (`Linking` redirect handling) lives
- * HERE, gated to native via `Platform.OS`, so the web container never carries
- * native-only code while the two paths still cannot drift.
- */
-import type { OxyServices, SessionLoginResponse, User } from '@oxyhq/core';
-/**
- * Default destination for the "Create an Oxy account" / "Get Oxy Accounts"
- * link, shared by both containers. Reused as-is from the original native
- * `OxyAuthScreen` so no new route is invented.
- */
-export declare const OXY_ACCOUNTS_WEB_URL = "https://accounts.oxy.so";
-/** Default central Oxy auth web origin used when no override can be resolved. */
-export declare const OXY_AUTH_WEB_URL = "https://auth.oxy.so";
-/** Auth session expiration (5 minutes). */
-export declare const AUTH_SESSION_EXPIRY_MS: number;
-/** Polling interval (fallback if the socket fails) in milliseconds. */
-export declare const POLLING_INTERVAL_MS = 3000;
-/** The active device-flow session this client created and is waiting on. */
-export interface AuthSession {
-    /** The secret high-entropy token that IS the device-flow credential. */
-    sessionToken: string;
-    /** Epoch ms after which the server rejects this session. */
-    expiresAt: number;
-}
-export interface UseOxyAuthSessionOptions {
-    /**
-     * Called after a fully completed sign-in (bearer claimed, session hydrated).
-     * The web modal closes itself here; the native screen forwards the user to
-     * its `onAuthenticated` prop. The hook itself stays presentation-agnostic.
-     */
-    onSignedIn?: (user: User) => void;
-}
-export interface UseOxyAuthSessionResult {
-    /** The active device-flow session, or `null` before/while it is created. */
-    authSession: AuthSession | null;
-    /** The QR payload string (`oxyauth://<token>`), or `''` when no session. */
-    qrData: string;
-    /**
-     * The PUBLIC, single-use authorize code for the "Sign in with Oxy" handoff,
-     * or `null` when the handoff backend did not return one. The approver (the
-     * Oxy identity app) resolves the requesting app's identity from this code —
-     * it is safe to display; it is NOT the secret `sessionToken`.
-     */
-    authorizeCode: string | null;
-    /**
-     * The structured "Sign in with Oxy" deep-link payload
-     * (`oxycommons://approve?...`) to render in the cross-device QR and to open on
-     * the same device, or `null` when the handoff backend did not return one.
-     * Render this (preferred over `qrData`) in the QR and pass it to
-     * `Linking.openURL` for same-device approval.
-     */
-    qrPayload: string | null;
-    /** `true` while the session is being created (initial spinner). */
-    isLoading: boolean;
-    /** A user-facing error message, or `null`. Drives the retry UI. */
-    error: string | null;
-    /** `true` once a session exists and we are awaiting authorization. */
-    isWaiting: boolean;
-    /**
-     * Open the central Oxy auth approval surface for THIS device-flow session.
-     * On web this opens a centered approval popup; on native it opens the system
-     * browser (carrying a `redirect_uri` so the deep-link return path can fire).
-     * This is the action behind the platform-primary "Continue with Oxy" button.
-     */
-    openAuthApproval: () => Promise<void>;
-    /**
-     * Same-device "Sign in with Oxy" handoff: deep-link to `qrPayload`
-     * (`oxycommons://approve?...`) so the native Oxy identity app opens directly
-     * to approve. No-op when no `qrPayload` was returned. The socket / poll still
-     * completes the sign-in once the approval lands.
-     */
-    openSameDeviceApproval: () => Promise<void>;
-    /** Tear down the current session and create a fresh one (the retry action). */
-    retry: () => void;
-    /** Disconnect the socket and stop polling. Idempotent. */
-    cleanup: () => void;
-}
-/**
- * Owns the full device-flow auth-session lifecycle for one mounted sign-in
- * surface. Both `SignInModal` and `OxyAuthScreen` consume this; neither
- * re-implements the socket / polling / deep-link transport.
- *
- * Subscriptions (socket connect/disconnect, the poll interval, the native
- * deep-link listener, and unmount cleanup) are the legitimate `useEffect` use
- * WITH cleanup. No effect here computes derived UI state.
- */
-export declare function useOxyAuthSession(oxyServices: OxyServices, clientId: string | null, commitSession: ((session: SessionLoginResponse) => Promise<void>) | undefined, options?: UseOxyAuthSessionOptions): UseOxyAuthSessionResult;
-//# sourceMappingURL=useOxyAuthSession.d.ts.map

package/lib/typescript/module/ui/hooks/useOxyAuthSession.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useOxyAuthSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/hooks/useOxyAuthSession.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAM3E;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,2CAA2C;AAC3C,eAAO,MAAM,sBAAsB,QAAgB,CAAC;AAEpD,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;CACnB;AAgCD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB,mEAAmE;IACnE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;OAKG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,+EAA+E;IAC/E,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAoFD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7E,OAAO,GAAE,wBAA6B,GACrC,uBAAuB,CA8YzB"}

package/lib/typescript/module/ui/hooks/usePasswordSignIn.d.ts

@@ -1,31 +0,0 @@
-export type PasswordSignInStep = 'identifier' | 'password' | 'twoFactor';
-export interface UsePasswordSignInOptions {
-    /** Fired once a session has been committed (the surface should close). */
-    onSignedIn?: () => void;
-}
-export interface UsePasswordSignInResult {
-    step: PasswordSignInStep;
-    identifier: string;
-    setIdentifier: (value: string) => void;
-    password: string;
-    setPassword: (value: string) => void;
-    /** The current 2FA input — a TOTP code or a backup code, per `useBackupCode`. */
-    code: string;
-    setCode: (value: string) => void;
-    useBackupCode: boolean;
-    setUseBackupCode: (value: boolean) => void;
-    error: string | null;
-    isSubmitting: boolean;
-    /** Advance identifier → password (validates a non-empty identifier). */
-    submitIdentifier: () => void;
-    /** Submit the password: commits a one-step session, or advances to 2FA. */
-    submitPassword: () => Promise<void>;
-    /** Submit the 2FA code / backup code and commit the session. */
-    submitTwoFactor: () => Promise<void>;
-    /** Step back one screen (2FA → password → identifier), clearing the error. */
-    back: () => void;
-    /** Reset every field back to the identifier step. */
-    reset: () => void;
-}
-export declare function usePasswordSignIn(options?: UsePasswordSignInOptions): UsePasswordSignInResult;
-//# sourceMappingURL=usePasswordSignIn.d.ts.map

package/lib/typescript/module/ui/hooks/usePasswordSignIn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"usePasswordSignIn.d.ts","sourceRoot":"","sources":["../../../../../src/ui/hooks/usePasswordSignIn.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;AAEzE,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,2EAA2E;IAC3E,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,gEAAgE;IAChE,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,qDAAqD;IACrD,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,uBAAuB,CA4JjG"}

package/lib/typescript/module/ui/screens/AccountSwitcherScreen.d.ts

@@ -1,11 +0,0 @@
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation.js';
-/**
- * Bottom-sheet route wrapper around {@link AccountSwitcherView}. Used when the
- * switcher is opened as a sheet (e.g. from the "Your accounts" entry in
- * ManageAccount) rather than as the header-chip popover (which uses the
- * `AccountSwitcher` modal directly).
- */
-declare const AccountSwitcherScreen: React.FC<BaseScreenProps>;
-export default AccountSwitcherScreen;
-//# sourceMappingURL=AccountSwitcherScreen.d.ts.map

package/lib/typescript/module/ui/screens/AccountSwitcherScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountSwitcherScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AccountSwitcherScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAK3D;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA0BpD,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/lib/typescript/module/ui/screens/OxyAuthScreen.d.ts

@@ -1,22 +0,0 @@
-/**
- * OxyAuthScreen — Sign in with Oxy (native bottom-sheet container).
- *
- * Two phases, Google-style:
- *  1. Account chooser (FRONT screen, shown when the device/user already has
- *     accounts): pick an account to continue as — one tap switches through the
- *     SAME `switchToAccount` path the account switcher uses — or "Use another
- *     account" to reveal the sign-in options.
- *  2. Sign-in options: the first-party password flow (identifier → password →
- *     optional 2FA, `usePasswordSignIn`) as the PRIMARY action, with the
- *     cross-app device flow (same-device deep-link + "sign in on another device"
- *     QR) as a SECONDARY option below an "or" divider.
- *
- * The device-flow machinery lives in the shared `useOxyAuthSession` hook (the
- * web `SignInModal` consumes it too). This screen should NOT be used within the
- * Oxy Accounts app itself.
- */
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation.js';
-declare const OxyAuthScreen: React.FC<BaseScreenProps>;
-export default OxyAuthScreen;
-//# sourceMappingURL=OxyAuthScreen.d.ts.map

package/lib/typescript/module/ui/screens/OxyAuthScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OxyAuthScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/OxyAuthScreen.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAmB3D,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAyR5C,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/lib/typescript/module/utils/deviceFlowSignIn.d.ts

@@ -1,97 +0,0 @@
-/**
- * Shared, pure orchestration for completing the cross-app device-flow sign-in
- * (the QR-code / "Open Oxy Auth" path used on native and web).
- *
- * THE FIRST BUG THIS FIXES (native): once another authenticated device
- * approves the pending AuthSession, the originating client is notified
- * (socket / poll / deep-link) with the authorized `sessionId`. Before any
- * session-management code can use it, the client MUST exchange the secret
- * 128-bit `sessionToken` (held only by this client, generated for THIS flow)
- * for the first access token via `claimSessionByToken` — the device-flow
- * equivalent of OAuth's code-for-token exchange (RFC 8628 §3.4).
- *
- * THE SECOND BUG THIS FIXES (session-sync cutover regression): the
- * freshly-claimed session is NOT yet registered in the device's
- * server-authoritative session set — nothing has run
- * `sessionClient.addCurrentAccount()` for it — so it must NOT be committed
- * through `switchSession`. That path is now an account-SWITCH between
- * accounts already registered on this device (`OxyContext`'s
- * `switchSessionForContext`), and throws `No device account found for
- * session "..."` for anything else, surfacing as "Authorization successful
- * but failed to complete sign in." Instead the claimed session must be
- * committed through the SAME path a fresh password sign-in uses —
- * `useOxy().handleWebSession` (`OxyContext`'s `handleWebSSOSession`) — which
- * registers the account into the device set, persists it durably, and
- * hydrates the full user profile.
- *
- * Skipping the claim leaves the SDK with NO bearer token: the session is
- * authorized server-side but the app never becomes authenticated and the UI
- * sits "Waiting for authorization..." forever. Consolidating the
- * claim->commit sequence here keeps native and web identical and
- * unit-testable.
- */
-import { type SessionLoginResponse, type User } from '@oxyhq/core';
-interface DeviceFlowClaimResult {
-    accessToken?: string;
-    /** Rotating refresh-token family head minted by `/auth/session/claim` on the
-     * trusted lane. Not on the core method's typed return, so read defensively;
-     * threaded into `commitSession` so the QR sign-in persists a durable session
-     * that survives a reload without a redirect. */
-    refreshToken?: string;
-    sessionId?: string;
-    deviceId?: string;
-    expiresAt?: string;
-    user?: User;
-}
-/**
- * The minimal `OxyServices` surface this orchestration needs. Kept as a
- * structural type (rather than importing the full client) so the helper is
- * trivially unit-testable with a stub and never pulls the RN/Expo runtime into
- * a test bundle.
- *
- */
-export interface DeviceFlowClient {
-    /**
-     * Exchange the device-flow `sessionToken` for the first access + refresh
-     * token, planting them on the client. Single-use; replay is rejected by the
-     * API. No bearer required — the high-entropy `sessionToken` IS the credential.
-     */
-    claimSessionByToken: (sessionToken: string) => Promise<DeviceFlowClaimResult | undefined>;
-}
-export interface CompleteDeviceFlowSignInOptions {
-    /** The OxyServices client (or any object exposing `claimSessionByToken`). */
-    oxyServices: DeviceFlowClient;
-    /** The authorized device session id, delivered by the socket / poll / link. */
-    sessionId: string;
-    /**
-     * The secret `sessionToken` generated for THIS flow and registered via
-     * `POST /auth/session/create`. Required to claim the first access token.
-     */
-    sessionToken: string;
-    /**
-     * `useOxy().handleWebSession` — commits the freshly-claimed session into
-     * context state through the SAME path a password sign-in uses:
-     * registers the account into the device's server-authoritative session set,
-     * persists it durably, and hydrates the full user profile. Runs AFTER the
-     * bearer is planted so its bearer-protected calls succeed.
-     *
-     * The `refreshToken` extra (optional; not on the public `SessionLoginResponse`
-     * type) carries the rotating refresh family so the commit funnel persists a
-     * durable session.
-     */
-    commitSession: (session: SessionLoginResponse & {
-        refreshToken?: string;
-    }) => Promise<void>;
-}
-/**
- * Complete a device-flow sign-in: claim the first access token with the secret
- * `sessionToken` (planting the bearer), then commit the resulting session via
- * `commitSession` (registers it into the device's server-authoritative session
- * set and hydrates the full user). Returns the authenticated user.
- *
- * Throws if the claim did not return a usable session, or if either the claim
- * or the commit fails; callers surface a retry UI.
- */
-export declare function completeDeviceFlowSignIn({ oxyServices, sessionId, sessionToken, commitSession, }: CompleteDeviceFlowSignInOptions): Promise<User>;
-export {};
-//# sourceMappingURL=deviceFlowSignIn.d.ts.map

package/lib/typescript/module/utils/deviceFlowSignIn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deviceFlowSignIn.d.ts","sourceRoot":"","sources":["../../../../src/utils/deviceFlowSignIn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,IAAI,EACV,MAAM,aAAa,CAAC;AAErB,UAAU,qBAAqB;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;oDAGgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,+BAA+B;IAC9C,6EAA6E;IAC7E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,GACd,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CjD"}