@oxyhq/services 16.0.0 → 18.0.0

package/lib/commonjs/ui/components/RequireOxyAuth.js

@@ -0,0 +1,299 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = exports.RequireOxyAuth = void 0;
+var _react = require("react");
+var _reactNative = require("react-native");
+var _theme = require("@oxyhq/bloom/theme");
+var _typography = require("@oxyhq/bloom/typography");
+var _OxyContext = require("../context/OxyContext.js");
+var _OxySignInButton = require("./OxySignInButton.js");
+var _OxyLogo = _interopRequireDefault(require("./OxyLogo.js"));
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * RequireOxyAuth — the optional signed-out gate primitive (React Native).
+ *
+ * ONE shared way for any Oxy app to opt into a signed-out gate. It is entirely
+ * OPTIONAL: a public app renders its children untouched (`prompt="off"`); an
+ * auth-required app blocks them behind a signed-out state (`prompt="hard"`); an
+ * app that mostly works signed-out but wants a nudge shows a dismissible banner
+ * (`prompt="soft"`). Every mode reuses the ONE account dialog the provider
+ * already mounts — opening the sign-in surface is always
+ * `useOxy().openAccountDialog('signin')`; there is NO second dialog.
+ *
+ * Readiness gating (CRITICAL): the gate keys on the SDK's own readiness state
+ * (`useOxy().canUsePrivateApi` / `isPrivateApiPending`), NEVER on app-local
+ * hooks. While auth is still resolving (`isPrivateApiPending`) it renders a
+ * neutral loading state so the signed-out wall never flashes before the
+ * device-first cold boot concludes (the documented cold-boot race).
+ *
+ * Styling follows the sibling `OxyAccountDialog`/`OxySignInButton` pattern —
+ * `useTheme()` + `StyleSheet` (NOT NativeWind), so the gate renders correctly in
+ * EVERY consumer, including apps that do not run NativeWind (e.g. the accounts
+ * app).
+ */
+
+/**
+ * How `RequireOxyAuth` treats a signed-out (or still-resolving) session.
+ *  - `off`  — always render children (public app; a no-op provided for symmetry).
+ *  - `soft` — render children, plus a dismissible sign-in banner when signed out.
+ *  - `hard` — block children behind a centered signed-out state until signed in.
+ */
+
+const DEFAULT_TITLE = 'Sign in to continue';
+const DEFAULT_SUBTITLE = 'Sign in with your Oxy account to continue.';
+const DEFAULT_BANNER_MESSAGE = "You're browsing signed out.";
+const DEFAULT_BANNER_ACTION = 'Sign in';
+
+/**
+ * Optional signed-out gate. Wrap any subtree (or the whole app via the
+ * provider's `requireAuth` prop) to opt into a shared, readiness-safe wall.
+ */
+const RequireOxyAuth = ({
+  children,
+  prompt = 'hard',
+  loadingFallback,
+  signedOutFallback,
+  title,
+  subtitle,
+  bannerMessage,
+  bannerActionLabel
+}) => {
+  const {
+    canUsePrivateApi,
+    isPrivateApiPending,
+    openAccountDialog
+  } = (0, _OxyContext.useOxy)();
+
+  // Public app: render straight through. Cheap enough to short-circuit before
+  // touching any gate UI.
+  if (prompt === 'off') {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_jsxRuntime.Fragment, {
+      children: children
+    });
+  }
+
+  // Signed in (and token ready): render the protected subtree in every mode.
+  if (canUsePrivateApi) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_jsxRuntime.Fragment, {
+      children: children
+    });
+  }
+  if (prompt === 'soft') {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(SoftGate, {
+      pending: isPrivateApiPending,
+      message: bannerMessage ?? DEFAULT_BANNER_MESSAGE,
+      actionLabel: bannerActionLabel ?? DEFAULT_BANNER_ACTION,
+      onSignIn: () => openAccountDialog('signin'),
+      children: children
+    });
+  }
+
+  // prompt === 'hard'
+  if (isPrivateApiPending) {
+    return loadingFallback ? /*#__PURE__*/(0, _jsxRuntime.jsx)(_jsxRuntime.Fragment, {
+      children: loadingFallback
+    }) : /*#__PURE__*/(0, _jsxRuntime.jsx)(NeutralLoading, {});
+  }
+  if (signedOutFallback) {
+    return /*#__PURE__*/(0, _jsxRuntime.jsx)(_jsxRuntime.Fragment, {
+      children: signedOutFallback
+    });
+  }
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(HardWall, {
+    title: title ?? DEFAULT_TITLE,
+    subtitle: subtitle ?? DEFAULT_SUBTITLE
+  });
+};
+
+// ---------------------------------------------------------------------------
+// Soft gate — children + a dismissible sign-in banner while signed out.
+// ---------------------------------------------------------------------------
+exports.RequireOxyAuth = RequireOxyAuth;
+const SoftGate = ({
+  children,
+  pending,
+  message,
+  actionLabel,
+  onSignIn
+}) => {
+  const theme = (0, _theme.useTheme)();
+  const [dismissed, setDismissed] = (0, _react.useState)(false);
+
+  // Never surface the nudge while auth is still resolving — only once the boot
+  // has concluded signed out and the user has not dismissed it.
+  const showBanner = !pending && !dismissed;
+  return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+    style: styles.softRoot,
+    children: [showBanner ? /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+      style: [styles.banner, {
+        backgroundColor: theme.colors.card,
+        borderColor: theme.colors.border
+      }],
+      children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyLogo.default, {
+        variant: "icon",
+        size: 20,
+        fillColor: theme.colors.primary
+      }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+        style: [styles.bannerText, {
+          color: theme.colors.text
+        }],
+        numberOfLines: 2,
+        children: message
+      }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.Pressable, {
+        onPress: onSignIn,
+        style: [styles.bannerCta, {
+          backgroundColor: theme.colors.primary
+        }],
+        accessibilityRole: "button",
+        accessibilityLabel: actionLabel,
+        children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+          style: styles.bannerCtaText,
+          children: actionLabel
+        })
+      }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.Pressable, {
+        onPress: () => setDismissed(true),
+        style: styles.bannerDismiss,
+        accessibilityRole: "button",
+        accessibilityLabel: "Dismiss",
+        hitSlop: 8,
+        children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+          style: [styles.bannerDismissText, {
+            color: theme.colors.textSecondary
+          }],
+          children: "\u2715"
+        })
+      })]
+    }) : null, /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+      style: styles.softBody,
+      children: children
+    })]
+  });
+};
+
+// ---------------------------------------------------------------------------
+// Hard wall — centered signed-out state with the "Sign in with Oxy" CTA.
+// ---------------------------------------------------------------------------
+
+const HardWall = ({
+  title,
+  subtitle
+}) => {
+  const theme = (0, _theme.useTheme)();
+  return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.View, {
+    style: [styles.wallRoot, {
+      backgroundColor: theme.colors.background
+    }],
+    children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+      style: [styles.logoBadge, {
+        backgroundColor: theme.colors.primarySubtle
+      }],
+      children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxyLogo.default, {
+        variant: "icon",
+        size: 44,
+        fillColor: theme.colors.primary
+      })
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+      style: [styles.wallTitle, {
+        color: theme.colors.text
+      }],
+      children: title
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_typography.Text, {
+      style: [styles.wallSubtitle, {
+        color: theme.colors.textSecondary
+      }],
+      children: subtitle
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_OxySignInButton.OxySignInButton, {
+      variant: "contained",
+      style: styles.wallCta
+    })]
+  });
+};
+const NeutralLoading = () => {
+  const theme = (0, _theme.useTheme)();
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.View, {
+    style: [styles.wallRoot, {
+      backgroundColor: theme.colors.background
+    }],
+    children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.ActivityIndicator, {
+      color: theme.colors.primary
+    })
+  });
+};
+const styles = _reactNative.StyleSheet.create({
+  softRoot: {
+    flex: 1
+  },
+  softBody: {
+    flex: 1
+  },
+  banner: {
+    flexDirection: 'row',
+    alignItems: 'center',
+    gap: 10,
+    paddingVertical: 8,
+    paddingHorizontal: 12,
+    borderBottomWidth: _reactNative.StyleSheet.hairlineWidth
+  },
+  bannerText: {
+    flex: 1,
+    fontSize: 13.5
+  },
+  bannerCta: {
+    paddingVertical: 6,
+    paddingHorizontal: 14,
+    borderRadius: 999
+  },
+  bannerCtaText: {
+    color: '#FFFFFF',
+    fontSize: 13,
+    fontWeight: '700'
+  },
+  bannerDismiss: {
+    width: 28,
+    height: 28,
+    alignItems: 'center',
+    justifyContent: 'center'
+  },
+  bannerDismissText: {
+    fontSize: 15,
+    fontWeight: '600'
+  },
+  wallRoot: {
+    flex: 1,
+    alignItems: 'center',
+    justifyContent: 'center',
+    padding: 24,
+    gap: 16
+  },
+  logoBadge: {
+    width: 88,
+    height: 88,
+    borderRadius: 44,
+    alignItems: 'center',
+    justifyContent: 'center',
+    marginBottom: 4
+  },
+  wallTitle: {
+    fontSize: 24,
+    fontWeight: '800',
+    letterSpacing: -0.4,
+    textAlign: 'center'
+  },
+  wallSubtitle: {
+    fontSize: 15,
+    lineHeight: 21,
+    textAlign: 'center',
+    maxWidth: 340
+  },
+  wallCta: {
+    marginTop: 8,
+    width: '100%',
+    maxWidth: 320
+  }
+});
+var _default = exports.default = RequireOxyAuth;
+//# sourceMappingURL=RequireOxyAuth.js.map

package/lib/commonjs/ui/components/RequireOxyAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_react","require","_reactNative","_theme","_typography","_OxyContext","_OxySignInButton","_OxyLogo","_interopRequireDefault","_jsxRuntime","e","__esModule","default","DEFAULT_TITLE","DEFAULT_SUBTITLE","DEFAULT_BANNER_MESSAGE","DEFAULT_BANNER_ACTION","RequireOxyAuth","children","prompt","loadingFallback","signedOutFallback","title","subtitle","bannerMessage","bannerActionLabel","canUsePrivateApi","isPrivateApiPending","openAccountDialog","useOxy","jsx","Fragment","SoftGate","pending","message","actionLabel","onSignIn","NeutralLoading","HardWall","exports","theme","useTheme","dismissed","setDismissed","useState","showBanner","jsxs","View","style","styles","softRoot","banner","backgroundColor","colors","card","borderColor","border","variant","size","fillColor","primary","Text","bannerText","color","text","numberOfLines","Pressable","onPress","bannerCta","accessibilityRole","accessibilityLabel","bannerCtaText","bannerDismiss","hitSlop","bannerDismissText","textSecondary","softBody","wallRoot","background","logoBadge","primarySubtle","wallTitle","wallSubtitle","OxySignInButton","wallCta","ActivityIndicator","StyleSheet","create","flex","flexDirection","alignItems","gap","paddingVertical","paddingHorizontal","borderBottomWidth","hairlineWidth","fontSize","borderRadius","fontWeight","width","height","justifyContent","padding","marginBottom","letterSpacing","textAlign","lineHeight","maxWidth","marginTop","_default"],"sourceRoot":"../../../../src","sources":["ui/components/RequireOxyAuth.tsx"],"mappings":";;;;;;AAwBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AACA,IAAAK,gBAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAC,sBAAA,CAAAP,OAAA;AAAgC,IAAAQ,WAAA,GAAAR,OAAA;AAAA,SAAAO,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AA9BhC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAWA;AACA;AACA;AACA;AACA;AACA;;AAqBA,MAAMG,aAAa,GAAG,qBAAqB;AAC3C,MAAMC,gBAAgB,GAAG,4CAA4C;AACrE,MAAMC,sBAAsB,GAAG,6BAA6B;AAC5D,MAAMC,qBAAqB,GAAG,SAAS;;AAEvC;AACA;AACA;AACA;AACO,MAAMC,cAA6C,GAAGA,CAAC;EAC5DC,QAAQ;EACRC,MAAM,GAAG,MAAM;EACfC,eAAe;EACfC,iBAAiB;EACjBC,KAAK;EACLC,QAAQ;EACRC,aAAa;EACbC;AACF,CAAC,KAAK;EACJ,MAAM;IAAEC,gBAAgB;IAAEC,mBAAmB;IAAEC;EAAkB,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;;EAE7E;EACA;EACA,IAAIV,MAAM,KAAK,KAAK,EAAE;IACpB,oBAAO,IAAAV,WAAA,CAAAqB,GAAA,EAAArB,WAAA,CAAAsB,QAAA;MAAAb,QAAA,EAAGA;IAAQ,CAAG,CAAC;EACxB;;EAEA;EACA,IAAIQ,gBAAgB,EAAE;IACpB,oBAAO,IAAAjB,WAAA,CAAAqB,GAAA,EAAArB,WAAA,CAAAsB,QAAA;MAAAb,QAAA,EAAGA;IAAQ,CAAG,CAAC;EACxB;EAEA,IAAIC,MAAM,KAAK,MAAM,EAAE;IACrB,oBACE,IAAAV,WAAA,CAAAqB,GAAA,EAACE,QAAQ;MACPC,OAAO,EAAEN,mBAAoB;MAC7BO,OAAO,EAAEV,aAAa,IAAIT,sBAAuB;MACjDoB,WAAW,EAAEV,iBAAiB,IAAIT,qBAAsB;MACxDoB,QAAQ,EAAEA,CAAA,KAAMR,iBAAiB,CAAC,QAAQ,CAAE;MAAAV,QAAA,EAE3CA;IAAQ,CACD,CAAC;EAEf;;EAEA;EACA,IAAIS,mBAAmB,EAAE;IACvB,OAAOP,eAAe,gBAAG,IAAAX,WAAA,CAAAqB,GAAA,EAAArB,WAAA,CAAAsB,QAAA;MAAAb,QAAA,EAAGE;IAAe,CAAG,CAAC,gBAAG,IAAAX,WAAA,CAAAqB,GAAA,EAACO,cAAc,IAAE,CAAC;EACtE;EACA,IAAIhB,iBAAiB,EAAE;IACrB,oBAAO,IAAAZ,WAAA,CAAAqB,GAAA,EAAArB,WAAA,CAAAsB,QAAA;MAAAb,QAAA,EAAGG;IAAiB,CAAG,CAAC;EACjC;EACA,oBAAO,IAAAZ,WAAA,CAAAqB,GAAA,EAACQ,QAAQ;IAAChB,KAAK,EAAEA,KAAK,IAAIT,aAAc;IAACU,QAAQ,EAAEA,QAAQ,IAAIT;EAAiB,CAAE,CAAC;AAC5F,CAAC;;AAED;AACA;AACA;AAAAyB,OAAA,CAAAtB,cAAA,GAAAA,cAAA;AAUA,MAAMe,QAAiC,GAAGA,CAAC;EAAEd,QAAQ;EAAEe,OAAO;EAAEC,OAAO;EAAEC,WAAW;EAAEC;AAAS,CAAC,KAAK;EACnG,MAAMI,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,MAAM,CAACC,SAAS,EAAEC,YAAY,CAAC,GAAG,IAAAC,eAAQ,EAAC,KAAK,CAAC;;EAEjD;EACA;EACA,MAAMC,UAAU,GAAG,CAACZ,OAAO,IAAI,CAACS,SAAS;EAEzC,oBACE,IAAAjC,WAAA,CAAAqC,IAAA,EAAC5C,YAAA,CAAA6C,IAAI;IAACC,KAAK,EAAEC,MAAM,CAACC,QAAS;IAAAhC,QAAA,GAC1B2B,UAAU,gBACT,IAAApC,WAAA,CAAAqC,IAAA,EAAC5C,YAAA,CAAA6C,IAAI;MAACC,KAAK,EAAE,CAACC,MAAM,CAACE,MAAM,EAAE;QAAEC,eAAe,EAAEZ,KAAK,CAACa,MAAM,CAACC,IAAI;QAAEC,WAAW,EAAEf,KAAK,CAACa,MAAM,CAACG;MAAO,CAAC,CAAE;MAAAtC,QAAA,gBACrG,IAAAT,WAAA,CAAAqB,GAAA,EAACvB,QAAA,CAAAK,OAAO;QAAC6C,OAAO,EAAC,MAAM;QAACC,IAAI,EAAE,EAAG;QAACC,SAAS,EAAEnB,KAAK,CAACa,MAAM,CAACO;MAAQ,CAAE,CAAC,eACrE,IAAAnD,WAAA,CAAAqB,GAAA,EAAC1B,WAAA,CAAAyD,IAAI;QAACb,KAAK,EAAE,CAACC,MAAM,CAACa,UAAU,EAAE;UAAEC,KAAK,EAAEvB,KAAK,CAACa,MAAM,CAACW;QAAK,CAAC,CAAE;QAACC,aAAa,EAAE,CAAE;QAAA/C,QAAA,EAC9EgB;MAAO,CACJ,CAAC,eACP,IAAAzB,WAAA,CAAAqB,GAAA,EAAC5B,YAAA,CAAAgE,SAAS;QACRC,OAAO,EAAE/B,QAAS;QAClBY,KAAK,EAAE,CAACC,MAAM,CAACmB,SAAS,EAAE;UAAEhB,eAAe,EAAEZ,KAAK,CAACa,MAAM,CAACO;QAAQ,CAAC,CAAE;QACrES,iBAAiB,EAAC,QAAQ;QAC1BC,kBAAkB,EAAEnC,WAAY;QAAAjB,QAAA,eAEhC,IAAAT,WAAA,CAAAqB,GAAA,EAAC1B,WAAA,CAAAyD,IAAI;UAACb,KAAK,EAAEC,MAAM,CAACsB,aAAc;UAAArD,QAAA,EAAEiB;QAAW,CAAO;MAAC,CAC9C,CAAC,eACZ,IAAA1B,WAAA,CAAAqB,GAAA,EAAC5B,YAAA,CAAAgE,SAAS;QACRC,OAAO,EAAEA,CAAA,KAAMxB,YAAY,CAAC,IAAI,CAAE;QAClCK,KAAK,EAAEC,MAAM,CAACuB,aAAc;QAC5BH,iBAAiB,EAAC,QAAQ;QAC1BC,kBAAkB,EAAC,SAAS;QAC5BG,OAAO,EAAE,CAAE;QAAAvD,QAAA,eAEX,IAAAT,WAAA,CAAAqB,GAAA,EAAC1B,WAAA,CAAAyD,IAAI;UAACb,KAAK,EAAE,CAACC,MAAM,CAACyB,iBAAiB,EAAE;YAAEX,KAAK,EAAEvB,KAAK,CAACa,MAAM,CAACsB;UAAc,CAAC,CAAE;UAAAzD,QAAA,EAAC;QAAC,CAAM;MAAC,CAC/E,CAAC;IAAA,CACR,CAAC,GACL,IAAI,eACR,IAAAT,WAAA,CAAAqB,GAAA,EAAC5B,YAAA,CAAA6C,IAAI;MAACC,KAAK,EAAEC,MAAM,CAAC2B,QAAS;MAAA1D,QAAA,EAAEA;IAAQ,CAAO,CAAC;EAAA,CAC3C,CAAC;AAEX,CAAC;;AAED;AACA;AACA;;AAEA,MAAMoB,QAAuD,GAAGA,CAAC;EAAEhB,KAAK;EAAEC;AAAS,CAAC,KAAK;EACvF,MAAMiB,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,oBACE,IAAAhC,WAAA,CAAAqC,IAAA,EAAC5C,YAAA,CAAA6C,IAAI;IAACC,KAAK,EAAE,CAACC,MAAM,CAAC4B,QAAQ,EAAE;MAAEzB,eAAe,EAAEZ,KAAK,CAACa,MAAM,CAACyB;IAAW,CAAC,CAAE;IAAA5D,QAAA,gBAC3E,IAAAT,WAAA,CAAAqB,GAAA,EAAC5B,YAAA,CAAA6C,IAAI;MAACC,KAAK,EAAE,CAACC,MAAM,CAAC8B,SAAS,EAAE;QAAE3B,eAAe,EAAEZ,KAAK,CAACa,MAAM,CAAC2B;MAAc,CAAC,CAAE;MAAA9D,QAAA,eAC/E,IAAAT,WAAA,CAAAqB,GAAA,EAACvB,QAAA,CAAAK,OAAO;QAAC6C,OAAO,EAAC,MAAM;QAACC,IAAI,EAAE,EAAG;QAACC,SAAS,EAAEnB,KAAK,CAACa,MAAM,CAACO;MAAQ,CAAE;IAAC,CACjE,CAAC,eACP,IAAAnD,WAAA,CAAAqB,GAAA,EAAC1B,WAAA,CAAAyD,IAAI;MAACb,KAAK,EAAE,CAACC,MAAM,CAACgC,SAAS,EAAE;QAAElB,KAAK,EAAEvB,KAAK,CAACa,MAAM,CAACW;MAAK,CAAC,CAAE;MAAA9C,QAAA,EAAEI;IAAK,CAAO,CAAC,eAC7E,IAAAb,WAAA,CAAAqB,GAAA,EAAC1B,WAAA,CAAAyD,IAAI;MAACb,KAAK,EAAE,CAACC,MAAM,CAACiC,YAAY,EAAE;QAAEnB,KAAK,EAAEvB,KAAK,CAACa,MAAM,CAACsB;MAAc,CAAC,CAAE;MAAAzD,QAAA,EAAEK;IAAQ,CAAO,CAAC,eAC5F,IAAAd,WAAA,CAAAqB,GAAA,EAACxB,gBAAA,CAAA6E,eAAe;MAAC1B,OAAO,EAAC,WAAW;MAACT,KAAK,EAAEC,MAAM,CAACmC;IAAQ,CAAE,CAAC;EAAA,CAC1D,CAAC;AAEX,CAAC;AAED,MAAM/C,cAAwB,GAAGA,CAAA,KAAM;EACrC,MAAMG,KAAK,GAAG,IAAAC,eAAQ,EAAC,CAAC;EACxB,oBACE,IAAAhC,WAAA,CAAAqB,GAAA,EAAC5B,YAAA,CAAA6C,IAAI;IAACC,KAAK,EAAE,CAACC,MAAM,CAAC4B,QAAQ,EAAE;MAAEzB,eAAe,EAAEZ,KAAK,CAACa,MAAM,CAACyB;IAAW,CAAC,CAAE;IAAA5D,QAAA,eAC3E,IAAAT,WAAA,CAAAqB,GAAA,EAAC5B,YAAA,CAAAmF,iBAAiB;MAACtB,KAAK,EAAEvB,KAAK,CAACa,MAAM,CAACO;IAAQ,CAAE;EAAC,CAC9C,CAAC;AAEX,CAAC;AAED,MAAMX,MAAM,GAAGqC,uBAAU,CAACC,MAAM,CAAC;EAC/BrC,QAAQ,EAAE;IACRsC,IAAI,EAAE;EACR,CAAC;EACDZ,QAAQ,EAAE;IACRY,IAAI,EAAE;EACR,CAAC;EACDrC,MAAM,EAAE;IACNsC,aAAa,EAAE,KAAK;IACpBC,UAAU,EAAE,QAAQ;IACpBC,GAAG,EAAE,EAAE;IACPC,eAAe,EAAE,CAAC;IAClBC,iBAAiB,EAAE,EAAE;IACrBC,iBAAiB,EAAER,uBAAU,CAACS;EAChC,CAAC;EACDjC,UAAU,EAAE;IACV0B,IAAI,EAAE,CAAC;IACPQ,QAAQ,EAAE;EACZ,CAAC;EACD5B,SAAS,EAAE;IACTwB,eAAe,EAAE,CAAC;IAClBC,iBAAiB,EAAE,EAAE;IACrBI,YAAY,EAAE;EAChB,CAAC;EACD1B,aAAa,EAAE;IACbR,KAAK,EAAE,SAAS;IAChBiC,QAAQ,EAAE,EAAE;IACZE,UAAU,EAAE;EACd,CAAC;EACD1B,aAAa,EAAE;IACb2B,KAAK,EAAE,EAAE;IACTC,MAAM,EAAE,EAAE;IACVV,UAAU,EAAE,QAAQ;IACpBW,cAAc,EAAE;EAClB,CAAC;EACD3B,iBAAiB,EAAE;IACjBsB,QAAQ,EAAE,EAAE;IACZE,UAAU,EAAE;EACd,CAAC;EACDrB,QAAQ,EAAE;IACRW,IAAI,EAAE,CAAC;IACPE,UAAU,EAAE,QAAQ;IACpBW,cAAc,EAAE,QAAQ;IACxBC,OAAO,EAAE,EAAE;IACXX,GAAG,EAAE;EACP,CAAC;EACDZ,SAAS,EAAE;IACToB,KAAK,EAAE,EAAE;IACTC,MAAM,EAAE,EAAE;IACVH,YAAY,EAAE,EAAE;IAChBP,UAAU,EAAE,QAAQ;IACpBW,cAAc,EAAE,QAAQ;IACxBE,YAAY,EAAE;EAChB,CAAC;EACDtB,SAAS,EAAE;IACTe,QAAQ,EAAE,EAAE;IACZE,UAAU,EAAE,KAAK;IACjBM,aAAa,EAAE,CAAC,GAAG;IACnBC,SAAS,EAAE;EACb,CAAC;EACDvB,YAAY,EAAE;IACZc,QAAQ,EAAE,EAAE;IACZU,UAAU,EAAE,EAAE;IACdD,SAAS,EAAE,QAAQ;IACnBE,QAAQ,EAAE;EACZ,CAAC;EACDvB,OAAO,EAAE;IACPwB,SAAS,EAAE,CAAC;IACZT,KAAK,EAAE,MAAM;IACbQ,QAAQ,EAAE;EACZ;AACF,CAAC,CAAC;AAAC,IAAAE,QAAA,GAAAtE,OAAA,CAAA3B,OAAA,GAEYK,cAAc","ignoreList":[]}

package/lib/commonjs/ui/components/oauthNavigation.js

@@ -0,0 +1,73 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.openAuthorizeUrlNative = openAuthorizeUrlNative;
+exports.redirectToAuthorize = redirectToAuthorize;
+var _reactNative = require("react-native");
+var _core = require("@oxyhq/core");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); } /**
+ * Platform navigation for the third-party "Sign in with Oxy" OAuth flow.
+ *
+ * Kept out of `OxySignInButton` so the button's routing logic can be unit-tested
+ * without driving a real browser navigation (jsdom's `location.assign` is
+ * non-configurable and cannot be spied). Both entry points hand a fully-built
+ * `auth.oxy.so/authorize` URL to the platform — never FedCM, an SSO bounce, or
+ * an Oxy session cookie.
+ */
+/** Minimal shape of the optional `expo-web-browser` auth-session result. */
+
+/** Minimal shape of the optional `expo-web-browser` native module we depend on. */
+
+/** Outcome of opening the authorize URL on native. */
+
+/**
+ * Web: hand the TOP-LEVEL document to the OAuth authorize URL (a full-page
+ * redirect, not a popup) so the RP returns to its registered `redirect_uri`.
+ * No-op where `location` is unavailable (SSR / non-browser hosts).
+ */
+function redirectToAuthorize(url) {
+  globalThis.location?.assign(url);
+}
+
+/**
+ * Native: open the authorize URL in an in-app auth session via the optional
+ * `expo-web-browser` module (`openAuthSessionAsync` returns to `redirectUri`),
+ * degrading to `Linking.openURL` when the module is not installed — the same
+ * dynamic-import-with-fallback pattern services uses for haptics/netinfo.
+ *
+ * Returns the deep-link URL the session came back to when it can be observed, so
+ * the caller can hand `?code=…&state=…` back to the RP for the token exchange.
+ */
+async function openAuthorizeUrlNative(url, redirectUri) {
+  try {
+    const mod = await Promise.resolve().then(() => _interopRequireWildcard(require('expo-web-browser')));
+    if (mod && typeof mod.openAuthSessionAsync === 'function') {
+      const result = await mod.openAuthSessionAsync(url, redirectUri);
+      const redirectUrl = result && result.type === 'success' && typeof result.url === 'string' ? result.url : null;
+      return {
+        redirectUrl
+      };
+    }
+  } catch (error) {
+    _core.logger.warn('OxySignInButton: expo-web-browser auth session failed; falling back to Linking.openURL', {
+      component: 'oauthNavigation'
+    }, error);
+  }
+
+  // Fallback: Linking cannot observe the return URL, so the RP completes the
+  // exchange from its own deep-link handler. A rejected openURL (e.g. an
+  // unregistered scheme) must not throw out of the sign-in flow.
+  try {
+    await _reactNative.Linking.openURL(url);
+  } catch (error) {
+    _core.logger.warn('OxySignInButton: Linking.openURL rejected the authorize URL', {
+      component: 'oauthNavigation'
+    }, error);
+  }
+  return {
+    redirectUrl: null
+  };
+}
+//# sourceMappingURL=oauthNavigation.js.map

package/lib/commonjs/ui/components/oauthNavigation.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","_core","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","redirectToAuthorize","url","globalThis","location","assign","openAuthorizeUrlNative","redirectUri","mod","Promise","resolve","then","openAuthSessionAsync","result","redirectUrl","type","error","logger","warn","component","Linking","openURL"],"sourceRoot":"../../../../src","sources":["ui/components/oauthNavigation.ts"],"mappings":";;;;;;;AAUA,IAAAA,YAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AAAqC,SAAAE,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA,KAXrC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAKA;;AAMA;;AAKA;;AAWA;AACA;AACA;AACA;AACA;AACO,SAASkB,mBAAmBA,CAACC,GAAW,EAAQ;EAClDC,UAAU,CAA6BC,QAAQ,EAAEC,MAAM,CAACH,GAAG,CAAC;AACjE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeI,sBAAsBA,CACxCJ,GAAW,EACXK,WAAmB,EACS;EAC5B,IAAI;IACA,MAAMC,GAAG,GAAI,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAA9B,uBAAA,CAAAF,OAAA,CAAa,kBAAkB,GAAiC;IAC7E,IAAI6B,GAAG,IAAI,OAAOA,GAAG,CAACI,oBAAoB,KAAK,UAAU,EAAE;MACvD,MAAMC,MAAM,GAAG,MAAML,GAAG,CAACI,oBAAoB,CAACV,GAAG,EAAEK,WAAW,CAAC;MAC/D,MAAMO,WAAW,GACbD,MAAM,IAAIA,MAAM,CAACE,IAAI,KAAK,SAAS,IAAI,OAAOF,MAAM,CAACX,GAAG,KAAK,QAAQ,GAC/DW,MAAM,CAACX,GAAG,GACV,IAAI;MACd,OAAO;QAAEY;MAAY,CAAC;IAC1B;EACJ,CAAC,CAAC,OAAOE,KAAK,EAAE;IACZC,YAAM,CAACC,IAAI,CACP,wFAAwF,EACxF;MAAEC,SAAS,EAAE;IAAkB,CAAC,EAChCH,KACJ,CAAC;EACL;;EAEA;EACA;EACA;EACA,IAAI;IACA,MAAMI,oBAAO,CAACC,OAAO,CAACnB,GAAG,CAAC;EAC9B,CAAC,CAAC,OAAOc,KAAK,EAAE;IACZC,YAAM,CAACC,IAAI,CACP,6DAA6D,EAC7D;MAAEC,SAAS,EAAE;IAAkB,CAAC,EAChCH,KACJ,CAAC;EACL;EACA,OAAO;IAAEF,WAAW,EAAE;EAAK,CAAC;AAChC","ignoreList":[]}

package/lib/commonjs/ui/context/OxyContext.js

@@ -5,7 +5,9 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.useOxy = exports.OxyProvider = exports.OxyContextProvider = void 0;
 var _react = require("react");
+var _reactNative = require("react-native");
 var _core = require("@oxyhq/core");
+var _accountDialogManager = require("../navigation/accountDialogManager.js");
 var _authStore = require("../stores/authStore.js");
 var _shallow = require("zustand/react/shallow");
 var _useLanguageManagement = require("../hooks/useLanguageManagement.js");
@@ -116,6 +118,7 @@ const OxyProvider = ({
   authRedirectUri,
   storageKeyPrefix = 'oxy_session',
   clientId: clientIdProp,
+  coldBoot = true,
   onAuthStateChange,
   onError
 }) => {
@@ -171,6 +174,7 @@ const OxyProvider = ({
   userRef.current = user;
   isAuthenticatedRef.current = isAuthenticated;
   const [initialized, setInitialized] = (0, _react.useState)(false);
+  const [accountDialogOpen, setAccountDialogOpen] = (0, _react.useState)(false);
   const setAuthState = _authStore.useAuthStore.setState;
 
   // Keep the shared `oxyClient` singleton's token store in lockstep with the
@@ -311,10 +315,19 @@ const OxyProvider = ({
   const markAuthResolvedRef = (0, _react.useRef)(markAuthResolved);
   markAuthResolvedRef.current = markAuthResolved;
 
+  // Re-boot indirection: the SessionClient is built in the ref initializer below
+  // (before `runColdBoot` is defined), but its `onSessionAppeared` must re-run the
+  // cold boot to self-acquire when a sibling signs in on this device. A ref bridges
+  // the ordering; it is assigned right after `runColdBoot` is declared.
+  const runColdBootRef = (0, _react.useRef)(null);
+
   // Server-authoritative device session client. Built ONCE per `oxyServices`
   // instance. `onUnauthenticated` (a device signout-all pushed over the socket,
   // or bootstrapped as zero-account) clears the persisted store + local state so
   // a reload does not try to restore a session the device no longer has.
+  // `signedOutSocketAuth` + `onSessionAppeared` power the signed-out sync channel:
+  // an idle tab joins its `device:<id>` room (web via the `oxy_device` cookie,
+  // native via the shared device token) and self-acquires on a sibling sign-in.
   const sessionClientPairRef = (0, _react.useRef)(null);
   if (!sessionClientPairRef.current) {
     sessionClientPairRef.current = (0, _index.createSessionClient)(oxyServices, authStore, () => {
@@ -322,6 +335,21 @@ const OxyProvider = ({
       void clearSessionStateRef.current().catch(clearError => {
         logger('Failed to clear local state on remote sign-out', clearError);
       });
+    }, {
+      signedOutSocketAuth: async () => {
+        // Web (`*.oxy.so`): the first-party `oxy_device` cookie rides the
+        // same-site handshake automatically — just connect.
+        if ((0, _isWebBrowser.isWebBrowser)()) return true;
+        // Native (no cookie jar): present the shared device token if we have one.
+        try {
+          return (await authStore.loadDeviceToken()) ?? false;
+        } catch {
+          return false;
+        }
+      },
+      onSessionAppeared: () => {
+        void runColdBootRef.current?.();
+      }
     });
   }
   const {
@@ -601,6 +629,58 @@ const OxyProvider = ({
     });
   }, [commitSession]);
 
+  // ── Unified account dialog ─────────────────────────────────────────────────
+  // The single account-chooser + sign-in surface. Built ONCE per provider mount
+  // and bound to the live `oxyServices` + `sessionClient` + this provider's
+  // `handleWebSession` commit funnel. `handleWebSession` is threaded through a ref
+  // so the controller keeps a STABLE `commitSession` (rebuilding the controller
+  // on every commit-identity change would drop its subscription + state).
+  const handleWebSessionRef = (0, _react.useRef)(handleWebSession);
+  handleWebSessionRef.current = handleWebSession;
+  const accountDialogControllerRef = (0, _react.useRef)(null);
+  if (!accountDialogControllerRef.current) {
+    accountDialogControllerRef.current = (0, _core.createAccountDialogController)({
+      oxyServices,
+      sessionClient,
+      clientId,
+      locale: currentLanguage,
+      commitSession: session => handleWebSessionRef.current(session),
+      onSignedIn: () => setAccountDialogOpen(false),
+      openUrl: url => {
+        void _reactNative.Linking.openURL(url);
+      }
+    });
+  }
+  const accountDialogController = accountDialogControllerRef.current;
+  const openAccountDialog = (0, _react.useCallback)(view => {
+    accountDialogControllerRef.current?.setView(view ?? 'accounts');
+    setAccountDialogOpen(true);
+  }, []);
+  const closeAccountDialog = (0, _react.useCallback)(() => {
+    accountDialogControllerRef.current?.cancelSignIn();
+    setAccountDialogOpen(false);
+  }, []);
+
+  // Start driving the dialog on mount; tear it down on unmount.
+  (0, _react.useEffect)(() => {
+    const controller = accountDialogControllerRef.current;
+    controller?.start();
+    return () => controller?.destroy();
+  }, []);
+
+  // Expose the live open/close controls to the imperative manager so
+  // `showSignInModal()` (and any app-level imperative "sign in" handler) works.
+  (0, _react.useEffect)(() => (0, _accountDialogManager.registerAccountDialogControls)({
+    open: openAccountDialog,
+    close: closeAccountDialog
+  }), [openAccountDialog, closeAccountDialog]);
+
+  // Broadcast visibility so `OxySignInButton`'s "Signing in…" affordance stays
+  // accurate regardless of what opened or dismissed the dialog.
+  (0, _react.useEffect)(() => {
+    (0, _accountDialogManager.notifyAccountDialogVisibility)(accountDialogOpen);
+  }, [accountDialogOpen]);
+
   // Keyless password sign-in: username/email + password.
   const signInWithPassword = (0, _react.useCallback)(async (identifier, password, opts) => {
     const deviceToken = (await authStore.loadDeviceToken()) ?? undefined;
@@ -695,6 +775,17 @@ const OxyProvider = ({
         },
         onSignedOut: () => {
           markAuthResolvedRef.current();
+          // Open the signed-out realtime channel so this idle tab joins its
+          // `device:<id>` room (web `oxy_device` cookie / native device token)
+          // and self-acquires when a sibling signs in. Idempotent, best-effort.
+          void sessionClient.start().catch(startError => {
+            if (__DEV__) {
+              _core.logger.debug('signed-out socket start failed (non-fatal)', {
+                component: 'OxyContext',
+                method: 'runColdBoot'
+              }, startError);
+            }
+          });
         },
         onStepError: (id, error) => {
           if (__DEV__) {
@@ -716,9 +807,25 @@ const OxyProvider = ({
       // Backstop: resolve on every exit path so the gate can never hang.
       markAuthResolvedRef.current();
     }
-  }, [oxyServices, authStore]);
+  }, [oxyServices, authStore, sessionClient]);
+  // Bridge for `onSessionAppeared` (SessionClient) → re-run the cold boot to
+  // self-acquire when a sibling signs in on this device while this tab is idle.
+  runColdBootRef.current = runColdBoot;
   (0, _react.useEffect)(() => {
-    if (!storage || initialized) {
+    if (initialized) {
+      return;
+    }
+    // IdP mode (`coldBoot={false}`): this provider is NOT the ecosystem session
+    // authority, so it never runs the device-first restore and never opens the
+    // signed-out device-state socket (`runColdBoot` → `onSignedOut` is the sole
+    // place that socket starts). Resolve auth immediately as signed out so there
+    // is no boot spinner; a deliberate sign-in still commits a normal session.
+    if (!coldBoot) {
+      setInitialized(true);
+      markAuthResolved();
+      return;
+    }
+    if (!storage) {
       return;
     }
     setInitialized(true);
@@ -727,7 +834,7 @@ const OxyProvider = ({
         logger('Cold boot failed', error);
       }
     });
-  }, [runColdBoot, storage, initialized, logger]);
+  }, [coldBoot, runColdBoot, storage, initialized, logger, markAuthResolved]);
 
   // Exposed `refreshSessions`: re-bootstrap the server-authoritative device
   // state and reproject — the manual counterpart to the realtime socket.
@@ -793,6 +900,9 @@ const OxyProvider = ({
   (0, _react.useEffect)(() => {
     if (isAuthenticated && initialized && tokenReady) {
       refreshAccounts();
+      // Reload the dialog's own account graph too, so a session restored OUTSIDE
+      // the dialog (cold boot / password sign-in) surfaces its graph accounts.
+      void accountDialogControllerRef.current?.refresh();
     }
   }, [isAuthenticated, initialized, tokenReady, refreshAccounts]);
   const runPostAccountSwitchSideEffects = (0, _react.useCallback)(async () => {
@@ -877,11 +987,15 @@ const OxyProvider = ({
     useFollow: useFollowHook,
     showBottomSheet: showBottomSheetForContext,
     openAvatarPicker,
+    accountDialogController,
+    isAccountDialogOpen: accountDialogOpen,
+    openAccountDialog,
+    closeAccountDialog,
     accounts,
     switchToAccount,
     refreshAccounts,
     createAccount: createAccountFn
-  }), [user, sessions, activeSessionId, isAuthenticated, isLoading, tokenReady, hasAccessToken, canUsePrivateApi, isPrivateApiPending, authResolved, storage, error, currentLanguage, currentLanguageMetadata, currentLanguageName, currentNativeLanguageName, hasIdentity, getPublicKey, signIn, signInWithPassword, completeTwoFactorSignIn, handleWebSession, logout, logoutAll, switchSessionForContext, refreshSessionsForContext, setLanguage, getDeviceSessions, logoutAllDeviceSessions, updateDeviceName, clearSessionState, clearAllAccountData, storageKeyPrefix, clientId, oxyServices, useFollowHook, showBottomSheetForContext, openAvatarPicker, accounts, switchToAccount, refreshAccounts, createAccountFn]);
+  }), [user, sessions, activeSessionId, isAuthenticated, isLoading, tokenReady, hasAccessToken, canUsePrivateApi, isPrivateApiPending, authResolved, storage, error, currentLanguage, currentLanguageMetadata, currentLanguageName, currentNativeLanguageName, hasIdentity, getPublicKey, signIn, signInWithPassword, completeTwoFactorSignIn, handleWebSession, logout, logoutAll, switchSessionForContext, refreshSessionsForContext, setLanguage, getDeviceSessions, logoutAllDeviceSessions, updateDeviceName, clearSessionState, clearAllAccountData, storageKeyPrefix, clientId, oxyServices, useFollowHook, showBottomSheetForContext, openAvatarPicker, accountDialogController, accountDialogOpen, openAccountDialog, closeAccountDialog, accounts, switchToAccount, refreshAccounts, createAccountFn]);
   return /*#__PURE__*/(0, _jsxRuntime.jsx)(OxyContext.Provider, {
     value: contextValue,
     children: children
@@ -937,6 +1051,10 @@ const LOADING_STATE = {
   clientId: null,
   oxyServices: LOADING_STATE_OXY_SERVICES,
   openAvatarPicker: () => {},
+  accountDialogController: null,
+  isAccountDialogOpen: false,
+  openAccountDialog: () => {},
+  closeAccountDialog: () => {},
   accounts: [],
   switchToAccount: () => rejectMissingProvider(),
   refreshAccounts: () => rejectMissingProvider(),