@oxyhq/services 16.0.0 → 18.0.0

package/lib/module/ui/components/RequireOxyAuth.js

@@ -0,0 +1,294 @@
+"use strict";
+
+/**
+ * RequireOxyAuth — the optional signed-out gate primitive (React Native).
+ *
+ * ONE shared way for any Oxy app to opt into a signed-out gate. It is entirely
+ * OPTIONAL: a public app renders its children untouched (`prompt="off"`); an
+ * auth-required app blocks them behind a signed-out state (`prompt="hard"`); an
+ * app that mostly works signed-out but wants a nudge shows a dismissible banner
+ * (`prompt="soft"`). Every mode reuses the ONE account dialog the provider
+ * already mounts — opening the sign-in surface is always
+ * `useOxy().openAccountDialog('signin')`; there is NO second dialog.
+ *
+ * Readiness gating (CRITICAL): the gate keys on the SDK's own readiness state
+ * (`useOxy().canUsePrivateApi` / `isPrivateApiPending`), NEVER on app-local
+ * hooks. While auth is still resolving (`isPrivateApiPending`) it renders a
+ * neutral loading state so the signed-out wall never flashes before the
+ * device-first cold boot concludes (the documented cold-boot race).
+ *
+ * Styling follows the sibling `OxyAccountDialog`/`OxySignInButton` pattern —
+ * `useTheme()` + `StyleSheet` (NOT NativeWind), so the gate renders correctly in
+ * EVERY consumer, including apps that do not run NativeWind (e.g. the accounts
+ * app).
+ */
+
+import { useState } from 'react';
+import { ActivityIndicator, Pressable, StyleSheet, View } from 'react-native';
+import { useTheme } from '@oxyhq/bloom/theme';
+import { Text } from '@oxyhq/bloom/typography';
+import { useOxy } from "../context/OxyContext.js";
+import { OxySignInButton } from "./OxySignInButton.js";
+import OxyLogo from "./OxyLogo.js";
+
+/**
+ * How `RequireOxyAuth` treats a signed-out (or still-resolving) session.
+ *  - `off`  — always render children (public app; a no-op provided for symmetry).
+ *  - `soft` — render children, plus a dismissible sign-in banner when signed out.
+ *  - `hard` — block children behind a centered signed-out state until signed in.
+ */
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+const DEFAULT_TITLE = 'Sign in to continue';
+const DEFAULT_SUBTITLE = 'Sign in with your Oxy account to continue.';
+const DEFAULT_BANNER_MESSAGE = "You're browsing signed out.";
+const DEFAULT_BANNER_ACTION = 'Sign in';
+
+/**
+ * Optional signed-out gate. Wrap any subtree (or the whole app via the
+ * provider's `requireAuth` prop) to opt into a shared, readiness-safe wall.
+ */
+export const RequireOxyAuth = ({
+  children,
+  prompt = 'hard',
+  loadingFallback,
+  signedOutFallback,
+  title,
+  subtitle,
+  bannerMessage,
+  bannerActionLabel
+}) => {
+  const {
+    canUsePrivateApi,
+    isPrivateApiPending,
+    openAccountDialog
+  } = useOxy();
+
+  // Public app: render straight through. Cheap enough to short-circuit before
+  // touching any gate UI.
+  if (prompt === 'off') {
+    return /*#__PURE__*/_jsx(_Fragment, {
+      children: children
+    });
+  }
+
+  // Signed in (and token ready): render the protected subtree in every mode.
+  if (canUsePrivateApi) {
+    return /*#__PURE__*/_jsx(_Fragment, {
+      children: children
+    });
+  }
+  if (prompt === 'soft') {
+    return /*#__PURE__*/_jsx(SoftGate, {
+      pending: isPrivateApiPending,
+      message: bannerMessage ?? DEFAULT_BANNER_MESSAGE,
+      actionLabel: bannerActionLabel ?? DEFAULT_BANNER_ACTION,
+      onSignIn: () => openAccountDialog('signin'),
+      children: children
+    });
+  }
+
+  // prompt === 'hard'
+  if (isPrivateApiPending) {
+    return loadingFallback ? /*#__PURE__*/_jsx(_Fragment, {
+      children: loadingFallback
+    }) : /*#__PURE__*/_jsx(NeutralLoading, {});
+  }
+  if (signedOutFallback) {
+    return /*#__PURE__*/_jsx(_Fragment, {
+      children: signedOutFallback
+    });
+  }
+  return /*#__PURE__*/_jsx(HardWall, {
+    title: title ?? DEFAULT_TITLE,
+    subtitle: subtitle ?? DEFAULT_SUBTITLE
+  });
+};
+
+// ---------------------------------------------------------------------------
+// Soft gate — children + a dismissible sign-in banner while signed out.
+// ---------------------------------------------------------------------------
+
+const SoftGate = ({
+  children,
+  pending,
+  message,
+  actionLabel,
+  onSignIn
+}) => {
+  const theme = useTheme();
+  const [dismissed, setDismissed] = useState(false);
+
+  // Never surface the nudge while auth is still resolving — only once the boot
+  // has concluded signed out and the user has not dismissed it.
+  const showBanner = !pending && !dismissed;
+  return /*#__PURE__*/_jsxs(View, {
+    style: styles.softRoot,
+    children: [showBanner ? /*#__PURE__*/_jsxs(View, {
+      style: [styles.banner, {
+        backgroundColor: theme.colors.card,
+        borderColor: theme.colors.border
+      }],
+      children: [/*#__PURE__*/_jsx(OxyLogo, {
+        variant: "icon",
+        size: 20,
+        fillColor: theme.colors.primary
+      }), /*#__PURE__*/_jsx(Text, {
+        style: [styles.bannerText, {
+          color: theme.colors.text
+        }],
+        numberOfLines: 2,
+        children: message
+      }), /*#__PURE__*/_jsx(Pressable, {
+        onPress: onSignIn,
+        style: [styles.bannerCta, {
+          backgroundColor: theme.colors.primary
+        }],
+        accessibilityRole: "button",
+        accessibilityLabel: actionLabel,
+        children: /*#__PURE__*/_jsx(Text, {
+          style: styles.bannerCtaText,
+          children: actionLabel
+        })
+      }), /*#__PURE__*/_jsx(Pressable, {
+        onPress: () => setDismissed(true),
+        style: styles.bannerDismiss,
+        accessibilityRole: "button",
+        accessibilityLabel: "Dismiss",
+        hitSlop: 8,
+        children: /*#__PURE__*/_jsx(Text, {
+          style: [styles.bannerDismissText, {
+            color: theme.colors.textSecondary
+          }],
+          children: "\u2715"
+        })
+      })]
+    }) : null, /*#__PURE__*/_jsx(View, {
+      style: styles.softBody,
+      children: children
+    })]
+  });
+};
+
+// ---------------------------------------------------------------------------
+// Hard wall — centered signed-out state with the "Sign in with Oxy" CTA.
+// ---------------------------------------------------------------------------
+
+const HardWall = ({
+  title,
+  subtitle
+}) => {
+  const theme = useTheme();
+  return /*#__PURE__*/_jsxs(View, {
+    style: [styles.wallRoot, {
+      backgroundColor: theme.colors.background
+    }],
+    children: [/*#__PURE__*/_jsx(View, {
+      style: [styles.logoBadge, {
+        backgroundColor: theme.colors.primarySubtle
+      }],
+      children: /*#__PURE__*/_jsx(OxyLogo, {
+        variant: "icon",
+        size: 44,
+        fillColor: theme.colors.primary
+      })
+    }), /*#__PURE__*/_jsx(Text, {
+      style: [styles.wallTitle, {
+        color: theme.colors.text
+      }],
+      children: title
+    }), /*#__PURE__*/_jsx(Text, {
+      style: [styles.wallSubtitle, {
+        color: theme.colors.textSecondary
+      }],
+      children: subtitle
+    }), /*#__PURE__*/_jsx(OxySignInButton, {
+      variant: "contained",
+      style: styles.wallCta
+    })]
+  });
+};
+const NeutralLoading = () => {
+  const theme = useTheme();
+  return /*#__PURE__*/_jsx(View, {
+    style: [styles.wallRoot, {
+      backgroundColor: theme.colors.background
+    }],
+    children: /*#__PURE__*/_jsx(ActivityIndicator, {
+      color: theme.colors.primary
+    })
+  });
+};
+const styles = StyleSheet.create({
+  softRoot: {
+    flex: 1
+  },
+  softBody: {
+    flex: 1
+  },
+  banner: {
+    flexDirection: 'row',
+    alignItems: 'center',
+    gap: 10,
+    paddingVertical: 8,
+    paddingHorizontal: 12,
+    borderBottomWidth: StyleSheet.hairlineWidth
+  },
+  bannerText: {
+    flex: 1,
+    fontSize: 13.5
+  },
+  bannerCta: {
+    paddingVertical: 6,
+    paddingHorizontal: 14,
+    borderRadius: 999
+  },
+  bannerCtaText: {
+    color: '#FFFFFF',
+    fontSize: 13,
+    fontWeight: '700'
+  },
+  bannerDismiss: {
+    width: 28,
+    height: 28,
+    alignItems: 'center',
+    justifyContent: 'center'
+  },
+  bannerDismissText: {
+    fontSize: 15,
+    fontWeight: '600'
+  },
+  wallRoot: {
+    flex: 1,
+    alignItems: 'center',
+    justifyContent: 'center',
+    padding: 24,
+    gap: 16
+  },
+  logoBadge: {
+    width: 88,
+    height: 88,
+    borderRadius: 44,
+    alignItems: 'center',
+    justifyContent: 'center',
+    marginBottom: 4
+  },
+  wallTitle: {
+    fontSize: 24,
+    fontWeight: '800',
+    letterSpacing: -0.4,
+    textAlign: 'center'
+  },
+  wallSubtitle: {
+    fontSize: 15,
+    lineHeight: 21,
+    textAlign: 'center',
+    maxWidth: 340
+  },
+  wallCta: {
+    marginTop: 8,
+    width: '100%',
+    maxWidth: 320
+  }
+});
+export default RequireOxyAuth;
+//# sourceMappingURL=RequireOxyAuth.js.map

package/lib/module/ui/components/RequireOxyAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useState","ActivityIndicator","Pressable","StyleSheet","View","useTheme","Text","useOxy","OxySignInButton","OxyLogo","Fragment","_Fragment","jsx","_jsx","jsxs","_jsxs","DEFAULT_TITLE","DEFAULT_SUBTITLE","DEFAULT_BANNER_MESSAGE","DEFAULT_BANNER_ACTION","RequireOxyAuth","children","prompt","loadingFallback","signedOutFallback","title","subtitle","bannerMessage","bannerActionLabel","canUsePrivateApi","isPrivateApiPending","openAccountDialog","SoftGate","pending","message","actionLabel","onSignIn","NeutralLoading","HardWall","theme","dismissed","setDismissed","showBanner","style","styles","softRoot","banner","backgroundColor","colors","card","borderColor","border","variant","size","fillColor","primary","bannerText","color","text","numberOfLines","onPress","bannerCta","accessibilityRole","accessibilityLabel","bannerCtaText","bannerDismiss","hitSlop","bannerDismissText","textSecondary","softBody","wallRoot","background","logoBadge","primarySubtle","wallTitle","wallSubtitle","wallCta","create","flex","flexDirection","alignItems","gap","paddingVertical","paddingHorizontal","borderBottomWidth","hairlineWidth","fontSize","borderRadius","fontWeight","width","height","justifyContent","padding","marginBottom","letterSpacing","textAlign","lineHeight","maxWidth","marginTop"],"sourceRoot":"../../../../src","sources":["ui/components/RequireOxyAuth.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,QAAQ,QAAwB,OAAO;AAChD,SAASC,iBAAiB,EAAEC,SAAS,EAAEC,UAAU,EAAEC,IAAI,QAAQ,cAAc;AAC7E,SAASC,QAAQ,QAAQ,oBAAoB;AAC7C,SAASC,IAAI,QAAQ,yBAAyB;AAC9C,SAASC,MAAM,QAAQ,0BAAuB;AAC9C,SAASC,eAAe,QAAQ,sBAAmB;AACnD,OAAOC,OAAO,MAAM,cAAW;;AAE/B;AACA;AACA;AACA;AACA;AACA;AALA,SAAAC,QAAA,IAAAC,SAAA,EAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AA0BA,MAAMC,aAAa,GAAG,qBAAqB;AAC3C,MAAMC,gBAAgB,GAAG,4CAA4C;AACrE,MAAMC,sBAAsB,GAAG,6BAA6B;AAC5D,MAAMC,qBAAqB,GAAG,SAAS;;AAEvC;AACA;AACA;AACA;AACA,OAAO,MAAMC,cAA6C,GAAGA,CAAC;EAC5DC,QAAQ;EACRC,MAAM,GAAG,MAAM;EACfC,eAAe;EACfC,iBAAiB;EACjBC,KAAK;EACLC,QAAQ;EACRC,aAAa;EACbC;AACF,CAAC,KAAK;EACJ,MAAM;IAAEC,gBAAgB;IAAEC,mBAAmB;IAAEC;EAAkB,CAAC,GAAGxB,MAAM,CAAC,CAAC;;EAE7E;EACA;EACA,IAAIe,MAAM,KAAK,KAAK,EAAE;IACpB,oBAAOT,IAAA,CAAAF,SAAA;MAAAU,QAAA,EAAGA;IAAQ,CAAG,CAAC;EACxB;;EAEA;EACA,IAAIQ,gBAAgB,EAAE;IACpB,oBAAOhB,IAAA,CAAAF,SAAA;MAAAU,QAAA,EAAGA;IAAQ,CAAG,CAAC;EACxB;EAEA,IAAIC,MAAM,KAAK,MAAM,EAAE;IACrB,oBACET,IAAA,CAACmB,QAAQ;MACPC,OAAO,EAAEH,mBAAoB;MAC7BI,OAAO,EAAEP,aAAa,IAAIT,sBAAuB;MACjDiB,WAAW,EAAEP,iBAAiB,IAAIT,qBAAsB;MACxDiB,QAAQ,EAAEA,CAAA,KAAML,iBAAiB,CAAC,QAAQ,CAAE;MAAAV,QAAA,EAE3CA;IAAQ,CACD,CAAC;EAEf;;EAEA;EACA,IAAIS,mBAAmB,EAAE;IACvB,OAAOP,eAAe,gBAAGV,IAAA,CAAAF,SAAA;MAAAU,QAAA,EAAGE;IAAe,CAAG,CAAC,gBAAGV,IAAA,CAACwB,cAAc,IAAE,CAAC;EACtE;EACA,IAAIb,iBAAiB,EAAE;IACrB,oBAAOX,IAAA,CAAAF,SAAA;MAAAU,QAAA,EAAGG;IAAiB,CAAG,CAAC;EACjC;EACA,oBAAOX,IAAA,CAACyB,QAAQ;IAACb,KAAK,EAAEA,KAAK,IAAIT,aAAc;IAACU,QAAQ,EAAEA,QAAQ,IAAIT;EAAiB,CAAE,CAAC;AAC5F,CAAC;;AAED;AACA;AACA;;AAUA,MAAMe,QAAiC,GAAGA,CAAC;EAAEX,QAAQ;EAAEY,OAAO;EAAEC,OAAO;EAAEC,WAAW;EAAEC;AAAS,CAAC,KAAK;EACnG,MAAMG,KAAK,GAAGlC,QAAQ,CAAC,CAAC;EACxB,MAAM,CAACmC,SAAS,EAAEC,YAAY,CAAC,GAAGzC,QAAQ,CAAC,KAAK,CAAC;;EAEjD;EACA;EACA,MAAM0C,UAAU,GAAG,CAACT,OAAO,IAAI,CAACO,SAAS;EAEzC,oBACEzB,KAAA,CAACX,IAAI;IAACuC,KAAK,EAAEC,MAAM,CAACC,QAAS;IAAAxB,QAAA,GAC1BqB,UAAU,gBACT3B,KAAA,CAACX,IAAI;MAACuC,KAAK,EAAE,CAACC,MAAM,CAACE,MAAM,EAAE;QAAEC,eAAe,EAAER,KAAK,CAACS,MAAM,CAACC,IAAI;QAAEC,WAAW,EAAEX,KAAK,CAACS,MAAM,CAACG;MAAO,CAAC,CAAE;MAAA9B,QAAA,gBACrGR,IAAA,CAACJ,OAAO;QAAC2C,OAAO,EAAC,MAAM;QAACC,IAAI,EAAE,EAAG;QAACC,SAAS,EAAEf,KAAK,CAACS,MAAM,CAACO;MAAQ,CAAE,CAAC,eACrE1C,IAAA,CAACP,IAAI;QAACqC,KAAK,EAAE,CAACC,MAAM,CAACY,UAAU,EAAE;UAAEC,KAAK,EAAElB,KAAK,CAACS,MAAM,CAACU;QAAK,CAAC,CAAE;QAACC,aAAa,EAAE,CAAE;QAAAtC,QAAA,EAC9Ea;MAAO,CACJ,CAAC,eACPrB,IAAA,CAACX,SAAS;QACR0D,OAAO,EAAExB,QAAS;QAClBO,KAAK,EAAE,CAACC,MAAM,CAACiB,SAAS,EAAE;UAAEd,eAAe,EAAER,KAAK,CAACS,MAAM,CAACO;QAAQ,CAAC,CAAE;QACrEO,iBAAiB,EAAC,QAAQ;QAC1BC,kBAAkB,EAAE5B,WAAY;QAAAd,QAAA,eAEhCR,IAAA,CAACP,IAAI;UAACqC,KAAK,EAAEC,MAAM,CAACoB,aAAc;UAAA3C,QAAA,EAAEc;QAAW,CAAO;MAAC,CAC9C,CAAC,eACZtB,IAAA,CAACX,SAAS;QACR0D,OAAO,EAAEA,CAAA,KAAMnB,YAAY,CAAC,IAAI,CAAE;QAClCE,KAAK,EAAEC,MAAM,CAACqB,aAAc;QAC5BH,iBAAiB,EAAC,QAAQ;QAC1BC,kBAAkB,EAAC,SAAS;QAC5BG,OAAO,EAAE,CAAE;QAAA7C,QAAA,eAEXR,IAAA,CAACP,IAAI;UAACqC,KAAK,EAAE,CAACC,MAAM,CAACuB,iBAAiB,EAAE;YAAEV,KAAK,EAAElB,KAAK,CAACS,MAAM,CAACoB;UAAc,CAAC,CAAE;UAAA/C,QAAA,EAAC;QAAC,CAAM;MAAC,CAC/E,CAAC;IAAA,CACR,CAAC,GACL,IAAI,eACRR,IAAA,CAACT,IAAI;MAACuC,KAAK,EAAEC,MAAM,CAACyB,QAAS;MAAAhD,QAAA,EAAEA;IAAQ,CAAO,CAAC;EAAA,CAC3C,CAAC;AAEX,CAAC;;AAED;AACA;AACA;;AAEA,MAAMiB,QAAuD,GAAGA,CAAC;EAAEb,KAAK;EAAEC;AAAS,CAAC,KAAK;EACvF,MAAMa,KAAK,GAAGlC,QAAQ,CAAC,CAAC;EACxB,oBACEU,KAAA,CAACX,IAAI;IAACuC,KAAK,EAAE,CAACC,MAAM,CAAC0B,QAAQ,EAAE;MAAEvB,eAAe,EAAER,KAAK,CAACS,MAAM,CAACuB;IAAW,CAAC,CAAE;IAAAlD,QAAA,gBAC3ER,IAAA,CAACT,IAAI;MAACuC,KAAK,EAAE,CAACC,MAAM,CAAC4B,SAAS,EAAE;QAAEzB,eAAe,EAAER,KAAK,CAACS,MAAM,CAACyB;MAAc,CAAC,CAAE;MAAApD,QAAA,eAC/ER,IAAA,CAACJ,OAAO;QAAC2C,OAAO,EAAC,MAAM;QAACC,IAAI,EAAE,EAAG;QAACC,SAAS,EAAEf,KAAK,CAACS,MAAM,CAACO;MAAQ,CAAE;IAAC,CACjE,CAAC,eACP1C,IAAA,CAACP,IAAI;MAACqC,KAAK,EAAE,CAACC,MAAM,CAAC8B,SAAS,EAAE;QAAEjB,KAAK,EAAElB,KAAK,CAACS,MAAM,CAACU;MAAK,CAAC,CAAE;MAAArC,QAAA,EAAEI;IAAK,CAAO,CAAC,eAC7EZ,IAAA,CAACP,IAAI;MAACqC,KAAK,EAAE,CAACC,MAAM,CAAC+B,YAAY,EAAE;QAAElB,KAAK,EAAElB,KAAK,CAACS,MAAM,CAACoB;MAAc,CAAC,CAAE;MAAA/C,QAAA,EAAEK;IAAQ,CAAO,CAAC,eAC5Fb,IAAA,CAACL,eAAe;MAAC4C,OAAO,EAAC,WAAW;MAACT,KAAK,EAAEC,MAAM,CAACgC;IAAQ,CAAE,CAAC;EAAA,CAC1D,CAAC;AAEX,CAAC;AAED,MAAMvC,cAAwB,GAAGA,CAAA,KAAM;EACrC,MAAME,KAAK,GAAGlC,QAAQ,CAAC,CAAC;EACxB,oBACEQ,IAAA,CAACT,IAAI;IAACuC,KAAK,EAAE,CAACC,MAAM,CAAC0B,QAAQ,EAAE;MAAEvB,eAAe,EAAER,KAAK,CAACS,MAAM,CAACuB;IAAW,CAAC,CAAE;IAAAlD,QAAA,eAC3ER,IAAA,CAACZ,iBAAiB;MAACwD,KAAK,EAAElB,KAAK,CAACS,MAAM,CAACO;IAAQ,CAAE;EAAC,CAC9C,CAAC;AAEX,CAAC;AAED,MAAMX,MAAM,GAAGzC,UAAU,CAAC0E,MAAM,CAAC;EAC/BhC,QAAQ,EAAE;IACRiC,IAAI,EAAE;EACR,CAAC;EACDT,QAAQ,EAAE;IACRS,IAAI,EAAE;EACR,CAAC;EACDhC,MAAM,EAAE;IACNiC,aAAa,EAAE,KAAK;IACpBC,UAAU,EAAE,QAAQ;IACpBC,GAAG,EAAE,EAAE;IACPC,eAAe,EAAE,CAAC;IAClBC,iBAAiB,EAAE,EAAE;IACrBC,iBAAiB,EAAEjF,UAAU,CAACkF;EAChC,CAAC;EACD7B,UAAU,EAAE;IACVsB,IAAI,EAAE,CAAC;IACPQ,QAAQ,EAAE;EACZ,CAAC;EACDzB,SAAS,EAAE;IACTqB,eAAe,EAAE,CAAC;IAClBC,iBAAiB,EAAE,EAAE;IACrBI,YAAY,EAAE;EAChB,CAAC;EACDvB,aAAa,EAAE;IACbP,KAAK,EAAE,SAAS;IAChB6B,QAAQ,EAAE,EAAE;IACZE,UAAU,EAAE;EACd,CAAC;EACDvB,aAAa,EAAE;IACbwB,KAAK,EAAE,EAAE;IACTC,MAAM,EAAE,EAAE;IACVV,UAAU,EAAE,QAAQ;IACpBW,cAAc,EAAE;EAClB,CAAC;EACDxB,iBAAiB,EAAE;IACjBmB,QAAQ,EAAE,EAAE;IACZE,UAAU,EAAE;EACd,CAAC;EACDlB,QAAQ,EAAE;IACRQ,IAAI,EAAE,CAAC;IACPE,UAAU,EAAE,QAAQ;IACpBW,cAAc,EAAE,QAAQ;IACxBC,OAAO,EAAE,EAAE;IACXX,GAAG,EAAE;EACP,CAAC;EACDT,SAAS,EAAE;IACTiB,KAAK,EAAE,EAAE;IACTC,MAAM,EAAE,EAAE;IACVH,YAAY,EAAE,EAAE;IAChBP,UAAU,EAAE,QAAQ;IACpBW,cAAc,EAAE,QAAQ;IACxBE,YAAY,EAAE;EAChB,CAAC;EACDnB,SAAS,EAAE;IACTY,QAAQ,EAAE,EAAE;IACZE,UAAU,EAAE,KAAK;IACjBM,aAAa,EAAE,CAAC,GAAG;IACnBC,SAAS,EAAE;EACb,CAAC;EACDpB,YAAY,EAAE;IACZW,QAAQ,EAAE,EAAE;IACZU,UAAU,EAAE,EAAE;IACdD,SAAS,EAAE,QAAQ;IACnBE,QAAQ,EAAE;EACZ,CAAC;EACDrB,OAAO,EAAE;IACPsB,SAAS,EAAE,CAAC;IACZT,KAAK,EAAE,MAAM;IACbQ,QAAQ,EAAE;EACZ;AACF,CAAC,CAAC;AAEF,eAAe7E,cAAc","ignoreList":[]}

package/lib/module/ui/components/oauthNavigation.js

@@ -0,0 +1,70 @@
+"use strict";
+
+/**
+ * Platform navigation for the third-party "Sign in with Oxy" OAuth flow.
+ *
+ * Kept out of `OxySignInButton` so the button's routing logic can be unit-tested
+ * without driving a real browser navigation (jsdom's `location.assign` is
+ * non-configurable and cannot be spied). Both entry points hand a fully-built
+ * `auth.oxy.so/authorize` URL to the platform — never FedCM, an SSO bounce, or
+ * an Oxy session cookie.
+ */
+
+import { Linking } from 'react-native';
+import { logger } from '@oxyhq/core';
+
+/** Minimal shape of the optional `expo-web-browser` auth-session result. */
+
+/** Minimal shape of the optional `expo-web-browser` native module we depend on. */
+
+/** Outcome of opening the authorize URL on native. */
+
+/**
+ * Web: hand the TOP-LEVEL document to the OAuth authorize URL (a full-page
+ * redirect, not a popup) so the RP returns to its registered `redirect_uri`.
+ * No-op where `location` is unavailable (SSR / non-browser hosts).
+ */
+export function redirectToAuthorize(url) {
+  globalThis.location?.assign(url);
+}
+
+/**
+ * Native: open the authorize URL in an in-app auth session via the optional
+ * `expo-web-browser` module (`openAuthSessionAsync` returns to `redirectUri`),
+ * degrading to `Linking.openURL` when the module is not installed — the same
+ * dynamic-import-with-fallback pattern services uses for haptics/netinfo.
+ *
+ * Returns the deep-link URL the session came back to when it can be observed, so
+ * the caller can hand `?code=…&state=…` back to the RP for the token exchange.
+ */
+export async function openAuthorizeUrlNative(url, redirectUri) {
+  try {
+    const mod = await import('expo-web-browser');
+    if (mod && typeof mod.openAuthSessionAsync === 'function') {
+      const result = await mod.openAuthSessionAsync(url, redirectUri);
+      const redirectUrl = result && result.type === 'success' && typeof result.url === 'string' ? result.url : null;
+      return {
+        redirectUrl
+      };
+    }
+  } catch (error) {
+    logger.warn('OxySignInButton: expo-web-browser auth session failed; falling back to Linking.openURL', {
+      component: 'oauthNavigation'
+    }, error);
+  }
+
+  // Fallback: Linking cannot observe the return URL, so the RP completes the
+  // exchange from its own deep-link handler. A rejected openURL (e.g. an
+  // unregistered scheme) must not throw out of the sign-in flow.
+  try {
+    await Linking.openURL(url);
+  } catch (error) {
+    logger.warn('OxySignInButton: Linking.openURL rejected the authorize URL', {
+      component: 'oauthNavigation'
+    }, error);
+  }
+  return {
+    redirectUrl: null
+  };
+}
+//# sourceMappingURL=oauthNavigation.js.map

package/lib/module/ui/components/oauthNavigation.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Linking","logger","redirectToAuthorize","url","globalThis","location","assign","openAuthorizeUrlNative","redirectUri","mod","openAuthSessionAsync","result","redirectUrl","type","error","warn","component","openURL"],"sourceRoot":"../../../../src","sources":["ui/components/oauthNavigation.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,OAAO,QAAQ,cAAc;AACtC,SAASC,MAAM,QAAQ,aAAa;;AAEpC;;AAMA;;AAKA;;AAWA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAACC,GAAW,EAAQ;EAClDC,UAAU,CAA6BC,QAAQ,EAAEC,MAAM,CAACH,GAAG,CAAC;AACjE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeI,sBAAsBA,CACxCJ,GAAW,EACXK,WAAmB,EACS;EAC5B,IAAI;IACA,MAAMC,GAAG,GAAI,MAAM,MAAM,CAAC,kBAAkB,CAAiC;IAC7E,IAAIA,GAAG,IAAI,OAAOA,GAAG,CAACC,oBAAoB,KAAK,UAAU,EAAE;MACvD,MAAMC,MAAM,GAAG,MAAMF,GAAG,CAACC,oBAAoB,CAACP,GAAG,EAAEK,WAAW,CAAC;MAC/D,MAAMI,WAAW,GACbD,MAAM,IAAIA,MAAM,CAACE,IAAI,KAAK,SAAS,IAAI,OAAOF,MAAM,CAACR,GAAG,KAAK,QAAQ,GAC/DQ,MAAM,CAACR,GAAG,GACV,IAAI;MACd,OAAO;QAAES;MAAY,CAAC;IAC1B;EACJ,CAAC,CAAC,OAAOE,KAAK,EAAE;IACZb,MAAM,CAACc,IAAI,CACP,wFAAwF,EACxF;MAAEC,SAAS,EAAE;IAAkB,CAAC,EAChCF,KACJ,CAAC;EACL;;EAEA;EACA;EACA;EACA,IAAI;IACA,MAAMd,OAAO,CAACiB,OAAO,CAACd,GAAG,CAAC;EAC9B,CAAC,CAAC,OAAOW,KAAK,EAAE;IACZb,MAAM,CAACc,IAAI,CACP,6DAA6D,EAC7D;MAAEC,SAAS,EAAE;IAAkB,CAAC,EAChCF,KACJ,CAAC;EACL;EACA,OAAO;IAAEF,WAAW,EAAE;EAAK,CAAC;AAChC","ignoreList":[]}

package/lib/module/ui/context/OxyContext.js

@@ -1,8 +1,10 @@
 "use strict";
 
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
+import { Linking } from 'react-native';
 import { OxyServices, oxyClient } from '@oxyhq/core';
-import { KeyManager, runSessionColdBoot, installAuthRefreshHandler, startTokenRefreshScheduler, logger as loggerUtil } from '@oxyhq/core';
+import { KeyManager, runSessionColdBoot, installAuthRefreshHandler, startTokenRefreshScheduler, createAccountDialogController, logger as loggerUtil } from '@oxyhq/core';
+import { registerAccountDialogControls, notifyAccountDialogVisibility } from "../navigation/accountDialogManager.js";
 import { useAuthStore } from "../stores/authStore.js";
 import { useShallow } from 'zustand/react/shallow';
 import { useLanguageManagement } from "../hooks/useLanguageManagement.js";
@@ -113,6 +115,7 @@ export const OxyProvider = ({
   authRedirectUri,
   storageKeyPrefix = 'oxy_session',
   clientId: clientIdProp,
+  coldBoot = true,
   onAuthStateChange,
   onError
 }) => {
@@ -168,6 +171,7 @@ export const OxyProvider = ({
   userRef.current = user;
   isAuthenticatedRef.current = isAuthenticated;
   const [initialized, setInitialized] = useState(false);
+  const [accountDialogOpen, setAccountDialogOpen] = useState(false);
   const setAuthState = useAuthStore.setState;
 
   // Keep the shared `oxyClient` singleton's token store in lockstep with the
@@ -308,10 +312,19 @@ export const OxyProvider = ({
   const markAuthResolvedRef = useRef(markAuthResolved);
   markAuthResolvedRef.current = markAuthResolved;
 
+  // Re-boot indirection: the SessionClient is built in the ref initializer below
+  // (before `runColdBoot` is defined), but its `onSessionAppeared` must re-run the
+  // cold boot to self-acquire when a sibling signs in on this device. A ref bridges
+  // the ordering; it is assigned right after `runColdBoot` is declared.
+  const runColdBootRef = useRef(null);
+
   // Server-authoritative device session client. Built ONCE per `oxyServices`
   // instance. `onUnauthenticated` (a device signout-all pushed over the socket,
   // or bootstrapped as zero-account) clears the persisted store + local state so
   // a reload does not try to restore a session the device no longer has.
+  // `signedOutSocketAuth` + `onSessionAppeared` power the signed-out sync channel:
+  // an idle tab joins its `device:<id>` room (web via the `oxy_device` cookie,
+  // native via the shared device token) and self-acquires on a sibling sign-in.
   const sessionClientPairRef = useRef(null);
   if (!sessionClientPairRef.current) {
     sessionClientPairRef.current = createSessionClient(oxyServices, authStore, () => {
@@ -319,6 +332,21 @@ export const OxyProvider = ({
       void clearSessionStateRef.current().catch(clearError => {
         logger('Failed to clear local state on remote sign-out', clearError);
       });
+    }, {
+      signedOutSocketAuth: async () => {
+        // Web (`*.oxy.so`): the first-party `oxy_device` cookie rides the
+        // same-site handshake automatically — just connect.
+        if (isWebBrowser()) return true;
+        // Native (no cookie jar): present the shared device token if we have one.
+        try {
+          return (await authStore.loadDeviceToken()) ?? false;
+        } catch {
+          return false;
+        }
+      },
+      onSessionAppeared: () => {
+        void runColdBootRef.current?.();
+      }
     });
   }
   const {
@@ -598,6 +626,58 @@ export const OxyProvider = ({
     });
   }, [commitSession]);
 
+  // ── Unified account dialog ─────────────────────────────────────────────────
+  // The single account-chooser + sign-in surface. Built ONCE per provider mount
+  // and bound to the live `oxyServices` + `sessionClient` + this provider's
+  // `handleWebSession` commit funnel. `handleWebSession` is threaded through a ref
+  // so the controller keeps a STABLE `commitSession` (rebuilding the controller
+  // on every commit-identity change would drop its subscription + state).
+  const handleWebSessionRef = useRef(handleWebSession);
+  handleWebSessionRef.current = handleWebSession;
+  const accountDialogControllerRef = useRef(null);
+  if (!accountDialogControllerRef.current) {
+    accountDialogControllerRef.current = createAccountDialogController({
+      oxyServices,
+      sessionClient,
+      clientId,
+      locale: currentLanguage,
+      commitSession: session => handleWebSessionRef.current(session),
+      onSignedIn: () => setAccountDialogOpen(false),
+      openUrl: url => {
+        void Linking.openURL(url);
+      }
+    });
+  }
+  const accountDialogController = accountDialogControllerRef.current;
+  const openAccountDialog = useCallback(view => {
+    accountDialogControllerRef.current?.setView(view ?? 'accounts');
+    setAccountDialogOpen(true);
+  }, []);
+  const closeAccountDialog = useCallback(() => {
+    accountDialogControllerRef.current?.cancelSignIn();
+    setAccountDialogOpen(false);
+  }, []);
+
+  // Start driving the dialog on mount; tear it down on unmount.
+  useEffect(() => {
+    const controller = accountDialogControllerRef.current;
+    controller?.start();
+    return () => controller?.destroy();
+  }, []);
+
+  // Expose the live open/close controls to the imperative manager so
+  // `showSignInModal()` (and any app-level imperative "sign in" handler) works.
+  useEffect(() => registerAccountDialogControls({
+    open: openAccountDialog,
+    close: closeAccountDialog
+  }), [openAccountDialog, closeAccountDialog]);
+
+  // Broadcast visibility so `OxySignInButton`'s "Signing in…" affordance stays
+  // accurate regardless of what opened or dismissed the dialog.
+  useEffect(() => {
+    notifyAccountDialogVisibility(accountDialogOpen);
+  }, [accountDialogOpen]);
+
   // Keyless password sign-in: username/email + password.
   const signInWithPassword = useCallback(async (identifier, password, opts) => {
     const deviceToken = (await authStore.loadDeviceToken()) ?? undefined;
@@ -692,6 +772,17 @@ export const OxyProvider = ({
         },
         onSignedOut: () => {
           markAuthResolvedRef.current();
+          // Open the signed-out realtime channel so this idle tab joins its
+          // `device:<id>` room (web `oxy_device` cookie / native device token)
+          // and self-acquires when a sibling signs in. Idempotent, best-effort.
+          void sessionClient.start().catch(startError => {
+            if (__DEV__) {
+              loggerUtil.debug('signed-out socket start failed (non-fatal)', {
+                component: 'OxyContext',
+                method: 'runColdBoot'
+              }, startError);
+            }
+          });
         },
         onStepError: (id, error) => {
           if (__DEV__) {
@@ -713,9 +804,25 @@ export const OxyProvider = ({
       // Backstop: resolve on every exit path so the gate can never hang.
       markAuthResolvedRef.current();
     }
-  }, [oxyServices, authStore]);
+  }, [oxyServices, authStore, sessionClient]);
+  // Bridge for `onSessionAppeared` (SessionClient) → re-run the cold boot to
+  // self-acquire when a sibling signs in on this device while this tab is idle.
+  runColdBootRef.current = runColdBoot;
   useEffect(() => {
-    if (!storage || initialized) {
+    if (initialized) {
+      return;
+    }
+    // IdP mode (`coldBoot={false}`): this provider is NOT the ecosystem session
+    // authority, so it never runs the device-first restore and never opens the
+    // signed-out device-state socket (`runColdBoot` → `onSignedOut` is the sole
+    // place that socket starts). Resolve auth immediately as signed out so there
+    // is no boot spinner; a deliberate sign-in still commits a normal session.
+    if (!coldBoot) {
+      setInitialized(true);
+      markAuthResolved();
+      return;
+    }
+    if (!storage) {
       return;
     }
     setInitialized(true);
@@ -724,7 +831,7 @@ export const OxyProvider = ({
         logger('Cold boot failed', error);
       }
     });
-  }, [runColdBoot, storage, initialized, logger]);
+  }, [coldBoot, runColdBoot, storage, initialized, logger, markAuthResolved]);
 
   // Exposed `refreshSessions`: re-bootstrap the server-authoritative device
   // state and reproject — the manual counterpart to the realtime socket.
@@ -790,6 +897,9 @@ export const OxyProvider = ({
   useEffect(() => {
     if (isAuthenticated && initialized && tokenReady) {
       refreshAccounts();
+      // Reload the dialog's own account graph too, so a session restored OUTSIDE
+      // the dialog (cold boot / password sign-in) surfaces its graph accounts.
+      void accountDialogControllerRef.current?.refresh();
     }
   }, [isAuthenticated, initialized, tokenReady, refreshAccounts]);
   const runPostAccountSwitchSideEffects = useCallback(async () => {
@@ -874,11 +984,15 @@ export const OxyProvider = ({
     useFollow: useFollowHook,
     showBottomSheet: showBottomSheetForContext,
     openAvatarPicker,
+    accountDialogController,
+    isAccountDialogOpen: accountDialogOpen,
+    openAccountDialog,
+    closeAccountDialog,
     accounts,
     switchToAccount,
     refreshAccounts,
     createAccount: createAccountFn
-  }), [user, sessions, activeSessionId, isAuthenticated, isLoading, tokenReady, hasAccessToken, canUsePrivateApi, isPrivateApiPending, authResolved, storage, error, currentLanguage, currentLanguageMetadata, currentLanguageName, currentNativeLanguageName, hasIdentity, getPublicKey, signIn, signInWithPassword, completeTwoFactorSignIn, handleWebSession, logout, logoutAll, switchSessionForContext, refreshSessionsForContext, setLanguage, getDeviceSessions, logoutAllDeviceSessions, updateDeviceName, clearSessionState, clearAllAccountData, storageKeyPrefix, clientId, oxyServices, useFollowHook, showBottomSheetForContext, openAvatarPicker, accounts, switchToAccount, refreshAccounts, createAccountFn]);
+  }), [user, sessions, activeSessionId, isAuthenticated, isLoading, tokenReady, hasAccessToken, canUsePrivateApi, isPrivateApiPending, authResolved, storage, error, currentLanguage, currentLanguageMetadata, currentLanguageName, currentNativeLanguageName, hasIdentity, getPublicKey, signIn, signInWithPassword, completeTwoFactorSignIn, handleWebSession, logout, logoutAll, switchSessionForContext, refreshSessionsForContext, setLanguage, getDeviceSessions, logoutAllDeviceSessions, updateDeviceName, clearSessionState, clearAllAccountData, storageKeyPrefix, clientId, oxyServices, useFollowHook, showBottomSheetForContext, openAvatarPicker, accountDialogController, accountDialogOpen, openAccountDialog, closeAccountDialog, accounts, switchToAccount, refreshAccounts, createAccountFn]);
   return /*#__PURE__*/_jsx(OxyContext.Provider, {
     value: contextValue,
     children: children
@@ -933,6 +1047,10 @@ const LOADING_STATE = {
   clientId: null,
   oxyServices: LOADING_STATE_OXY_SERVICES,
   openAvatarPicker: () => {},
+  accountDialogController: null,
+  isAccountDialogOpen: false,
+  openAccountDialog: () => {},
+  closeAccountDialog: () => {},
   accounts: [],
   switchToAccount: () => rejectMissingProvider(),
   refreshAccounts: () => rejectMissingProvider(),