@oxyhq/services 23.0.1 → 23.0.2

package/lib/module/index.js

@@ -1,203 +0,0 @@
-"use strict";
-
-/**
- * @oxyhq/services — OxyHQ Expo/React Native SDK
- *
- * Full UI components, screens, and native features for Expo apps.
- * Depends on @oxyhq/core for foundation services. Does NOT re-export from
- * @oxyhq/core — consumers import core types/values directly from `@oxyhq/core`.
- *
- * Every export below is NOMINAL — no `export *`, no compat shims.
- *
- * @example
- * ```tsx
- * import { OxyProvider, useAuth, OxySignInButton } from '@oxyhq/services';
- *
- * function App() {
- *   return (
- *     <OxyProvider baseURL="https://api.oxy.so">
- *       <YourApp />
- *     </OxyProvider>
- *   );
- * }
- * ```
- */
-
-/// <reference path="./types/react-native-classname.d.ts" />
-/// <reference path="./types/react-native-web-style.d.ts" />
-
-import { setPlatformOS } from '@oxyhq/core';
-import { Platform } from 'react-native';
-setPlatformOS(Platform.OS);
-
-// ---------------------------------------------------------------------------
-// Provider + auth context
-// ---------------------------------------------------------------------------
-export { default as OxyProvider } from "./ui/components/OxyProvider.js";
-export { useOxy } from "./ui/context/OxyContext.js";
-export { useAuth } from "./ui/hooks/useAuth.js";
-// Thrown by `switchToAccount` / `switchSession` while `OxyProvider` runs with
-// `sessionMode="identity"` — an identity-bound app authenticates as the owner of
-// the local identity key and cannot switch accounts.
-export { IdentityBoundSessionError } from "./ui/session/identityBinding.js";
-
-// ---------------------------------------------------------------------------
-// Zustand stores
-// ---------------------------------------------------------------------------
-export { useAuthStore } from "./ui/stores/authStore.js";
-export { useAccountStore } from "./ui/stores/accountStore.js";
-export { useAssetStore, useAssets as useAssetsStore, useAsset, useUploadProgress, useAssetLoading, useAssetErrors, useAssetsByApp, useAssetsByEntity, useAssetUsageCount, useIsAssetLinked } from "./ui/stores/assetStore.js";
-
-// ---------------------------------------------------------------------------
-// Session / asset hooks
-// ---------------------------------------------------------------------------
-export { useAssets, setOxyAssetInstance } from "./ui/hooks/useAssets.js";
-export { useFileDownloadUrl } from "./ui/hooks/useFileDownloadUrl.js";
-export { useFollow, useFollowerCounts, useSeedFollowStatuses } from "./ui/hooks/useFollow.js";
-export { useStorage } from "./ui/hooks/useStorage.js";
-// ---------------------------------------------------------------------------
-// Query hooks (TanStack Query — fetching)
-// ---------------------------------------------------------------------------
-export { useUserProfile, useUserProfiles, useCurrentUser, useUserById, useUserByUsername, useUsersBySessions, usePrivacySettings, useConnectedApps } from "./ui/hooks/queries/useAccountQueries.js";
-export { useSessions, useSession, useDeviceSessions, useUserDevices, useSecurityInfo, useAccountStorageUsage } from "./ui/hooks/queries/useServicesQueries.js";
-export { useSecurityActivity, useRecentSecurityActivity, useInfiniteSecurityActivity } from "./ui/hooks/queries/useSecurityQueries.js";
-export { useAuthMethods } from "./ui/hooks/queries/useAuthMethods.js";
-export { useUserSubscription, useUserPayments, useUserWallet, useUserWalletTransactions } from "./ui/hooks/queries/usePaymentQueries.js";
-
-// Payment / wallet / subscription domain types
-
-// ---------------------------------------------------------------------------
-// Mutation hooks (TanStack Query — updates)
-// ---------------------------------------------------------------------------
-export { useUpdateProfile, useUploadAvatar, useUpdateAccountSettings, useUpdatePrivacySettings, useUpdateNotificationPreferences, useUpdateUserPreferences, useRevokeConnectedApp, useUploadFile } from "./ui/hooks/mutations/useAccountMutations.js";
-export { useSwitchSession, useLogoutSession, useLogoutAll, useUpdateDeviceName, useRemoveDevice } from "./ui/hooks/mutations/useServicesMutations.js";
-export { createProfileMutation, createGenericMutation } from "./ui/hooks/mutations/mutationFactory.js";
-// Stable mutation keys for the offline queue
-export { mutationKeys } from "./ui/hooks/mutations/mutationKeys.js";
-
-// ---------------------------------------------------------------------------
-// Query keys + cache invalidation helpers
-// ---------------------------------------------------------------------------
-// Consumers (Mention, Homiio, Alia, accounts) use these to invalidate cached
-// data after writes that touch shared backend state. Keep nominal — no
-// `export *` — and never drop a public symbol without a major version bump.
-export { queryKeys, invalidateAccountQueries, invalidateUserQueries, invalidateSessionQueries, invalidateDeviceQueries, invalidatePrivacyQueries, invalidateSecurityQueries, invalidateStorageQueries, invalidatePaymentsQueries, invalidateConnectedAppsQueries, invalidateAuthMethodsQueries } from "./ui/hooks/queries/queryKeys.js";
-
-// Canonical user-cache upsert. MERGE-upserts a (possibly partial) user into the
-// SDK's user query cache under both keys it owns (by-id + viewer-scoped
-// by-username). Consumers route ALL cache seeds (feed / list / search / profile
-// hydration) through this so a sparse source can never strip a field an
-// authoritative fetch already stored.
-export { upsertCachedUser, upsertCachedUsers } from "./ui/hooks/queries/userCache.js";
-// Mutation status aggregator (for "Syncing..." indicators)
-export { useMutationStatus } from "./ui/hooks/useMutationStatus.js";
-export { useOnlineStatus } from "./ui/hooks/useOnlineStatus.js";
-export { useOxyEvent } from "./ui/hooks/useOxyEvent.js";
-
-// ---------------------------------------------------------------------------
-// Error handlers
-// ---------------------------------------------------------------------------
-export { handleAuthError, isInvalidSessionError, isTimeoutOrNetworkError, extractErrorMessage } from "./ui/utils/errorHandlers.js";
-// ---------------------------------------------------------------------------
-// File filtering
-// ---------------------------------------------------------------------------
-export { useFileFiltering } from "./ui/hooks/useFileFiltering.js";
-// ---------------------------------------------------------------------------
-// Device notifications — DELIBERATELY NOT EXPORTED HERE
-// ---------------------------------------------------------------------------
-// The `expo-notifications` adapter lives behind its own entry point:
-//
-//     import { getExpoPushToken } from '@oxyhq/services/notifications';
-//
-// It is the one module in this package whose dependencies (`expo-notifications`
-// and `expo-constants`) are optional peers that an app which does not use push
-// genuinely never installs. Re-exporting it from THIS barrel is what made that
-// optionality a lie: a barrel export puts the module in the import graph of
-// every consumer, and `tsc` must resolve the specifier of an `import()` even
-// when the call is lazy and wrapped in try/catch — so every consumer without
-// `expo-notifications` failed with TS2307 (plus TS7006 cascades) whether or not
-// it had ever heard of push. Behind a subpath the module is only ever pulled in
-// by an app that asked for it, which is what "optional peer" is supposed to
-// mean.
-//
-// Do NOT re-add these exports here. `__tests__/notifications/barrelIsolation.test.ts`
-// fails if you do.
-
-// ---------------------------------------------------------------------------
-// UI components
-// ---------------------------------------------------------------------------
-export { OXY_OAUTH_STATE_STORAGE_KEY, OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY } from '@oxyhq/core';
-export { default as OxySignInButton } from "./ui/components/OxySignInButton.js";
-// Web OAuth transport (popup / redirect). RPs that ship their own sign-in
-// button call `useOxy().startWebOAuthSignIn(...)`; only the popup opener is
-// exported, because it MUST run synchronously inside the press handler to keep
-// the browser's user-gesture attribution.
-export { openOAuthPopup } from "./ui/oauth/oauthPopup.js";
-export { OxyAuthPrompt } from "./ui/components/OxyAuthPrompt.js";
-export { OxyOAuthCallback } from "./ui/components/OxyOAuthCallback.js";
-export { OxyConsentScreen } from "./ui/components/OxyConsentScreen.js";
-// Optional signed-out gate primitive. Wrap any subtree (or the whole app via
-// `OxyProvider`'s `requireAuth` prop) to opt into a shared, readiness-safe wall.
-// `prompt`: `off` (render always) | `soft` (dismissible banner) | `hard` (block).
-// Gates on `useOxy().canUsePrivateApi` / `isPrivateApiPending` — never flashes the
-// wall before the device-first cold boot resolves. Opens the ONE account dialog.
-export { RequireOxyAuth } from "./ui/components/RequireOxyAuth.js";
-export { default as FollowButton } from "./ui/components/FollowButton.js";
-export { default as OxyPayButton } from "./ui/components/OxyPayButton.js";
-export { LogoIcon } from "./ui/components/logo/LogoIcon.js";
-export { LogoText } from "./ui/components/logo/LogoText.js";
-
-// Sidebar account trigger. Pressing `ProfileButton` opens the unified
-// `OxyAccountDialogScreen` (the single account switcher + sign-in surface) via
-// `useOxy().openAccountDialog`.
-export { default as ProfileButton } from "./ui/components/ProfileButton.js";
-// The account switcher/sign-in/sign-up chooser WITHOUT dialog chrome — the
-// surface stack presents `OxyAccountDialogScreen` (which renders this) into
-// Bloom's `<Dialog>` for the normal in-app surface; exported directly so a bare
-// host (e.g. a future auth.oxy.so hub page) can mount the exact same chooser
-// with its own completion strategy.
-export { default as OxyAuthChooser } from "./ui/components/OxyAuthChooser.js";
-// The in-flight "Sign in with Oxy" REQUEST surface — the route's primary visual,
-// the progress line, and the "Having trouble?" alternatives — as a purely
-// presentational component driven by plain facts. `OxyAuthChooser` renders it
-// from `AccountDialogController`'s device flow; a host with a request of its own
-// (the auth.oxy.so IdP's OAuth-bound lane) renders the SAME component from its
-// own facts, so there is one implementation of this surface, not two. It needs
-// no controller: `route` + `progress` + `qrPayload` + the failure flags are the
-// whole contract, and none of them is a secret credential.
-export { OxySignInRequestSurface } from "./ui/components/OxySignInRequestSurface.js";
-// Unified switchable-accounts hook — the single source of everything the user
-// can switch into: device sign-ins AND linked graph accounts (owned orgs +
-// shared-with-you), deduped by account id and hydrated with real
-// name/email/avatar/color. Backed by the shared `AccountDialogController` in
-// `@oxyhq/core`. Every switch routes through `useOxy().switchToAccount`.
-// The `SwitchableAccount` type lives in `@oxyhq/core` — import it from there.
-export { useSwitchableAccounts } from "./ui/hooks/useSwitchableAccounts.js";
-// Unified "Manage your Oxy Account" screen (the caller's own personal account)
-export { default as ProfileScreen } from "./ui/screens/ProfileScreen.js";
-export { default as ManageAccountScreen } from "./ui/screens/ManageAccountScreen.js";
-export { default as NotificationsScreen } from "./ui/screens/NotificationsScreen.js";
-export { default as PreferencesScreen } from "./ui/screens/PreferencesScreen.js";
-export { default as ConnectedAppsScreen } from "./ui/screens/ConnectedAppsScreen.js";
-
-// Account-graph screens (organization / project / bot accounts)
-export { default as CreateAccountScreen } from "./ui/screens/CreateAccountScreen.js";
-export { default as AccountMembersScreen } from "./ui/screens/AccountMembersScreen.js";
-export { default as AccountSettingsScreen } from "./ui/screens/AccountSettingsScreen.js";
-
-// ---------------------------------------------------------------------------
-// Bottom-sheet navigation
-// ---------------------------------------------------------------------------
-export { showBottomSheet, closeBottomSheet } from "./ui/navigation/bottomSheetManager.js";
-// Surface nav header — a surface screen declares its title/subtitle (+ any
-// action slot) into the Dialog's OWN navigation header. Screens render no header
-// of their own.
-export { useSurfaceHeader } from "./ui/hooks/useSurfaceHeader.js";
-export { SurfaceHeaderAction } from "./ui/components/SurfaceHeaderAction.js";
-
-// ---------------------------------------------------------------------------
-// Unified account dialog — imperative entry points
-// ---------------------------------------------------------------------------
-// Imperative account dialog entry points (outside React).
-export { openAccountDialog, closeAccountDialog, subscribeToAccountDialog } from "./ui/navigation/accountDialogManager.js";
-//# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["setPlatformOS","Platform","OS","default","OxyProvider","useOxy","useAuth","IdentityBoundSessionError","useAuthStore","useAccountStore","useAssetStore","useAssets","useAssetsStore","useAsset","useUploadProgress","useAssetLoading","useAssetErrors","useAssetsByApp","useAssetsByEntity","useAssetUsageCount","useIsAssetLinked","setOxyAssetInstance","useFileDownloadUrl","useFollow","useFollowerCounts","useSeedFollowStatuses","useStorage","useUserProfile","useUserProfiles","useCurrentUser","useUserById","useUserByUsername","useUsersBySessions","usePrivacySettings","useConnectedApps","useSessions","useSession","useDeviceSessions","useUserDevices","useSecurityInfo","useAccountStorageUsage","useSecurityActivity","useRecentSecurityActivity","useInfiniteSecurityActivity","useAuthMethods","useUserSubscription","useUserPayments","useUserWallet","useUserWalletTransactions","useUpdateProfile","useUploadAvatar","useUpdateAccountSettings","useUpdatePrivacySettings","useUpdateNotificationPreferences","useUpdateUserPreferences","useRevokeConnectedApp","useUploadFile","useSwitchSession","useLogoutSession","useLogoutAll","useUpdateDeviceName","useRemoveDevice","createProfileMutation","createGenericMutation","mutationKeys","queryKeys","invalidateAccountQueries","invalidateUserQueries","invalidateSessionQueries","invalidateDeviceQueries","invalidatePrivacyQueries","invalidateSecurityQueries","invalidateStorageQueries","invalidatePaymentsQueries","invalidateConnectedAppsQueries","invalidateAuthMethodsQueries","upsertCachedUser","upsertCachedUsers","useMutationStatus","useOnlineStatus","useOxyEvent","handleAuthError","isInvalidSessionError","isTimeoutOrNetworkError","extractErrorMessage","useFileFiltering","OXY_OAUTH_STATE_STORAGE_KEY","OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY","OxySignInButton","openOAuthPopup","OxyAuthPrompt","OxyOAuthCallback","OxyConsentScreen","RequireOxyAuth","FollowButton","OxyPayButton","LogoIcon","LogoText","ProfileButton","OxyAuthChooser","OxySignInRequestSurface","useSwitchableAccounts","ProfileScreen","ManageAccountScreen","NotificationsScreen","PreferencesScreen","ConnectedAppsScreen","CreateAccountScreen","AccountMembersScreen","AccountSettingsScreen","showBottomSheet","closeBottomSheet","useSurfaceHeader","SurfaceHeaderAction","openAccountDialog","closeAccountDialog","subscribeToAccountDialog"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA,SAASA,aAAa,QAAyB,aAAa;AAC5D,SAASC,QAAQ,QAAQ,cAAc;AACvCD,aAAa,CAACC,QAAQ,CAACC,EAAgB,CAAC;;AAExC;AACA;AACA;AACA,SAASC,OAAO,IAAIC,WAAW,QAAQ,gCAA6B;AACpE,SAASC,MAAM,QAAQ,4BAAyB;AAEhD,SAASC,OAAO,QAAQ,uBAAoB;AAE5C;AACA;AACA;AACA,SAASC,yBAAyB,QAAQ,iCAA8B;;AAExE;AACA;AACA;AACA,SAASC,YAAY,QAAQ,0BAAuB;AACpD,SAASC,eAAe,QAAQ,6BAA0B;AAC1D,SACIC,aAAa,EACbC,SAAS,IAAIC,cAAc,EAC3BC,QAAQ,EACRC,iBAAiB,EACjBC,eAAe,EACfC,cAAc,EACdC,cAAc,EACdC,iBAAiB,EACjBC,kBAAkB,EAClBC,gBAAgB,QACb,2BAAwB;;AAE/B;AACA;AACA;AACA,SAAST,SAAS,EAAEU,mBAAmB,QAAQ,yBAAsB;AACrE,SAASC,kBAAkB,QAAQ,kCAA+B;AAClE,SAASC,SAAS,EAAEC,iBAAiB,EAAEC,qBAAqB,QAAQ,yBAAsB;AAC1F,SAASC,UAAU,QAAQ,0BAAuB;AAGlD;AACA;AACA;AACA,SACIC,cAAc,EACdC,eAAe,EACfC,cAAc,EACdC,WAAW,EACXC,iBAAiB,EACjBC,kBAAkB,EAClBC,kBAAkB,EAClBC,gBAAgB,QACb,yCAAsC;AAC7C,SACIC,WAAW,EACXC,UAAU,EACVC,iBAAiB,EACjBC,cAAc,EACdC,eAAe,EACfC,sBAAsB,QACnB,0CAAuC;AAC9C,SACIC,mBAAmB,EACnBC,yBAAyB,EACzBC,2BAA2B,QACxB,0CAAuC;AAC9C,SAASC,cAAc,QAAQ,sCAAmC;AAClE,SACIC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,yBAAyB,QACtB,yCAAsC;;AAE7C;;AAeA;AACA;AACA;AACA,SACIC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,EACxBC,wBAAwB,EACxBC,gCAAgC,EAChCC,wBAAwB,EACxBC,qBAAqB,EACrBC,aAAa,QACV,6CAA0C;AACjD,SACIC,gBAAgB,EAChBC,gBAAgB,EAChBC,YAAY,EACZC,mBAAmB,EACnBC,eAAe,QACZ,8CAA2C;AAClD,SACIC,qBAAqB,EACrBC,qBAAqB,QAClB,yCAAsC;AAM7C;AACA,SAASC,YAAY,QAAQ,sCAAmC;;AAEhE;AACA;AACA;AACA;AACA;AACA;AACA,SACIC,SAAS,EACTC,wBAAwB,EACxBC,qBAAqB,EACrBC,wBAAwB,EACxBC,uBAAuB,EACvBC,wBAAwB,EACxBC,yBAAyB,EACzBC,wBAAwB,EACxBC,yBAAyB,EACzBC,8BAA8B,EAC9BC,4BAA4B,QACzB,iCAA8B;;AAErC;AACA;AACA;AACA;AACA;AACA,SAASC,gBAAgB,EAAEC,iBAAiB,QAAQ,iCAA8B;AAGlF;AACA,SAASC,iBAAiB,QAAQ,iCAA8B;AAEhE,SAASC,eAAe,QAAQ,+BAA4B;AAC5D,SAASC,WAAW,QAAQ,2BAAwB;;AAEpD;AACA;AACA;AACA,SACIC,eAAe,EACfC,qBAAqB,EACrBC,uBAAuB,EACvBC,mBAAmB,QAChB,6BAA0B;AAGjC;AACA;AACA;AACA,SAASC,gBAAgB,QAAQ,gCAA6B;AAG9D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,SACEC,2BAA2B,EAC3BC,mCAAmC,QAC9B,aAAa;AACpB,SAASpF,OAAO,IAAIqF,eAAe,QAAQ,oCAAiC;AAG5E;AACA;AACA;AACA;AACA,SAASC,cAAc,QAAQ,0BAAuB;AAUtD,SAASC,aAAa,QAAQ,kCAA+B;AAE7D,SAASC,gBAAgB,QAAQ,qCAAkC;AAEnE,SAASC,gBAAgB,QAAQ,qCAAkC;AAOnE;AACA;AACA;AACA;AACA;AACA,SAASC,cAAc,QAAQ,mCAAgC;AAG/D,SAAS1F,OAAO,IAAI2F,YAAY,QAAQ,iCAA8B;AAEtE,SAAS3F,OAAO,IAAI4F,YAAY,QAAQ,iCAA8B;AACtE,SAASC,QAAQ,QAAQ,kCAA+B;AACxD,SAASC,QAAQ,QAAQ,kCAA+B;;AAExD;AACA;AACA;AACA,SAAS9F,OAAO,IAAI+F,aAAa,QAAQ,kCAA+B;AAGxE;AACA;AACA;AACA;AACA;AACA,SAAS/F,OAAO,IAAIgG,cAAc,QAAQ,mCAAgC;AAG1E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,uBAAuB,QAAQ,4CAAyC;AAIjF;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,qBAAqB,QAAQ,qCAAkC;AAGxE;AACA,SAASlG,OAAO,IAAImG,aAAa,QAAQ,+BAA4B;AACrE,SAASnG,OAAO,IAAIoG,mBAAmB,QAAQ,qCAAkC;AACjF,SAASpG,OAAO,IAAIqG,mBAAmB,QAAQ,qCAAkC;AACjF,SAASrG,OAAO,IAAIsG,iBAAiB,QAAQ,mCAAgC;AAC7E,SAAStG,OAAO,IAAIuG,mBAAmB,QAAQ,qCAAkC;;AAEjF;AACA,SAASvG,OAAO,IAAIwG,mBAAmB,QAAQ,qCAAkC;AACjF,SAASxG,OAAO,IAAIyG,oBAAoB,QAAQ,sCAAmC;AACnF,SAASzG,OAAO,IAAI0G,qBAAqB,QAAQ,uCAAoC;;AAErF;AACA;AACA;AACA,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,uCAAoC;AAGtF;AACA;AACA;AACA,SAASC,gBAAgB,QAAmC,gCAA6B;AACzF,SAASC,mBAAmB,QAAuC,wCAAqC;;AAExG;AACA;AACA;AACA;AACA,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,wBAAwB,QACnB,yCAAsC","ignoreList":[]}

package/lib/module/notifications/deviceNotifications.js

@@ -1,433 +0,0 @@
-"use strict";
-
-/**
- * The ONE place `@oxyhq/services` touches `expo-notifications`.
- *
- * Every Oxy app that receives push needs the identical adapter — native-only,
- * dynamically imported, reading the OS permission and minting an EXPO push
- * token — so it lives here instead of being copied into each app. The
- * bearer-authenticated transport (`registerPushToken` / `unregisterPushToken`)
- * already lives in `@oxyhq/core`; core may never import an `expo-*` module, and
- * this adapter is the Expo-side half that closes that gap.
- *
- * ## Reached through its OWN entry point, never the root barrel
- *
- * ```ts
- * import { getExpoPushToken } from '@oxyhq/services/notifications';
- * ```
- *
- * This is the only module in the package that depends on peers an app which
- * does not use push genuinely never installs, and a barrel export would put it
- * in EVERY consumer's import graph. `tsc` resolves the specifier of an
- * `import()` even when the call is lazy and inside a try/catch, so a barrel
- * export turned "optional peer" into a hard requirement: consumers with no
- * interest in push failed to type-check with TS2307. The subpath is what keeps
- * the optionality honest — see the note in `src/index.ts`.
- *
- * Metro is the resolver that behaves differently here, and in the useful
- * direction: an unresolvable DYNAMIC `import()` bundles fine (the `catch` below
- * takes over at runtime), where a static import fails the build outright. That
- * is why the runtime shape below must stay dynamic-and-guarded.
- *
- * ## Native-only by construction
- *
- * Every entry point resolves its null/no-op result from `Platform.OS` BEFORE the
- * dynamic `import()`, so a web bundle never requests `expo-notifications` at all.
- * `expo-notifications` and `expo-constants` are OPTIONAL peer dependencies: an
- * app that does not use push never installs them, and a build without them
- * degrades to "notifications unavailable" rather than throwing at
- * module-evaluation time.
- *
- * ## The token is an EXPO push token — never a raw device token
- *
- * {@link getExpoPushToken} calls `getExpoPushTokenAsync()`, which returns the
- * `ExponentPushToken[…]` handle Expo's push service delivers through — the only
- * form it accepts. `getDevicePushTokenAsync()` — the raw APNs/FCM token — is
- * deliberately NOT used anywhere: registering one of those looks entirely
- * successful (the row is stored, the endpoint returns 200) and then every push
- * silently fails at delivery time. `@oxyhq/core`'s `registerPushToken` rejects a
- * raw device token before sending, and this module is the reason it never has to.
- *
- * ## The payload is untrusted
- *
- * Nothing here surfaces a notification's `title` / `body` / `subtitle`. The only
- * payload that leaves this module is the raw `content.data` — the routing keys —
- * typed `unknown`, so a caller has to validate it before acting on it and there
- * is no exported shape that invites rendering push-delivered text. The
- * foreground handler likewise answers with a visibility verdict and nothing else.
- */
-
-import { createLogger } from '@oxyhq/core';
-import { Platform } from 'react-native';
-const log = createLogger('deviceNotifications');
-function isRecord(value) {
-  return typeof value === 'object' && value !== null;
-}
-
-/**
- * Load `expo-notifications`, or `null` when it cannot serve this platform/build.
- *
- * The web guard runs before the `import()`, so a web bundle never reaches for the
- * native module. The dynamic import is intentional: the module registry caches
- * it, so repeated calls are cheap and no module-level mutable cache is
- * introduced here.
- */
-async function loadNotifications() {
-  if (Platform.OS === 'web') {
-    return null;
-  }
-  try {
-    return await import('expo-notifications');
-  } catch (error) {
-    log.warn('expo-notifications is unavailable in this build — push is disabled', {
-      method: 'loadNotifications'
-    }, error);
-    return null;
-  }
-}
-
-/**
- * The EAS project id an Expo push token is minted against, or `null` when the
- * app config carries none.
- *
- * Resolved exactly the way `expo-notifications` resolves it internally
- * (`easConfig.projectId`, then `expoConfig.extra.eas.projectId`) and then handed
- * BACK to `getExpoPushTokenAsync` explicitly, so the two can never disagree.
- * Reading it here is what turns "no project id" from an opaque
- * `ERR_NOTIFICATIONS_NO_EXPERIENCE_ID` rejection into a named, actionable state
- * instead of one more entry in the indistinguishable "permission denied /
- * offline" bucket.
- *
- * A missing `expo-constants` lands on the same `null` outcome — the single
- * actionable warning is emitted once by the caller, so this path only records
- * the extra detail at debug level rather than warning twice for one condition.
- */
-async function easProjectId() {
-  let constants;
-  try {
-    constants = (await import('expo-constants')).default;
-  } catch (error) {
-    log.debug('expo-constants is unavailable in this build — no EAS project id can be resolved', {
-      method: 'easProjectId'
-    }, error);
-    return null;
-  }
-  const fromEasConfig = constants.easConfig?.projectId;
-  if (typeof fromEasConfig === 'string' && fromEasConfig.length > 0) {
-    return fromEasConfig;
-  }
-  const extra = constants.expoConfig?.extra;
-  const eas = isRecord(extra) ? extra.eas : undefined;
-  const projectId = isRecord(eas) ? eas.projectId : undefined;
-  return typeof projectId === 'string' && projectId.length > 0 ? projectId : null;
-}
-
-/**
- * The platform tag the push-token registry stores this installation under, or
- * `null` on a platform Oxy does not deliver push to.
- *
- * Synchronous and import-free — the answer is a property of the bundle, not of
- * any native module.
- *
- * Web is `null` on purpose: the registry accepts a `web` platform, but browser
- * push needs a VAPID key + service-worker subscription no Oxy app has wired, so
- * there is no token to register and claiming otherwise would store a row nothing
- * can ever deliver to.
- */
-export function pushTokenPlatform() {
-  return Platform.OS === 'ios' || Platform.OS === 'android' ? Platform.OS : null;
-}
-
-/**
- * Whether the OS notification permission is ALREADY granted.
- *
- * Never prompts, so an app can re-check on every cold boot without ever asking
- * the user twice. Use {@link requestNotificationPermission} for the one place
- * that is allowed to show the system dialog.
- */
-export async function hasNotificationPermission() {
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return false;
-  }
-  try {
-    const permissions = await notifications.getPermissionsAsync();
-    return permissions.granted === true;
-  } catch (error) {
-    log.warn('could not read the notification permission', {
-      method: 'hasNotificationPermission'
-    }, error);
-    return false;
-  }
-}
-
-/**
- * Ensure the OS notification permission, prompting at most once.
- *
- * An installation that already answered the system dialog is never asked again:
- * an already-granted permission resolves `true` without a second dialog, and a
- * denial with `canAskAgain: false` resolves `false` without issuing a request
- * the OS would silently ignore.
- *
- * @returns Whether notifications are granted once this call is done.
- */
-export async function requestNotificationPermission() {
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return false;
-  }
-  try {
-    const existing = await notifications.getPermissionsAsync();
-    if (existing.granted === true) {
-      return true;
-    }
-    if (existing.canAskAgain === false) {
-      return false;
-    }
-    const requested = await notifications.requestPermissionsAsync();
-    return requested.granted === true;
-  } catch (error) {
-    log.warn('the notification permission could not be resolved', {
-      method: 'requestNotificationPermission'
-    }, error);
-    return false;
-  }
-}
-
-/**
- * This installation's Expo push token (`ExponentPushToken[…]`), or `null` when
- * one cannot be minted.
- *
- * Deliberately `getExpoPushTokenAsync` — see the module header for why the raw
- * device-token variant is never used.
- *
- * Every `null` is logged with the reason it happened. A missing EAS project id
- * in particular is a BUILD MISCONFIGURATION, not a user state: no token can ever
- * be minted, so push is off for every install of that build until the config is
- * fixed. It is reported as such rather than blending into the
- * indistinguishable "permission denied / offline" bucket.
- */
-export async function getExpoPushToken() {
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return null;
-  }
-  const projectId = await easProjectId();
-  if (!projectId) {
-    log.warn('no EAS project id in the app config (expo.extra.eas.projectId) — an Expo push token cannot be minted, so push is disabled for this build', {
-      method: 'getExpoPushToken'
-    });
-    return null;
-  }
-  try {
-    const token = await notifications.getExpoPushTokenAsync({
-      projectId
-    });
-    if (token.data.length === 0) {
-      log.warn('the Expo push service returned an empty token', {
-        method: 'getExpoPushToken'
-      });
-      return null;
-    }
-    return token.data;
-  } catch (error) {
-    log.warn('could not mint an Expo push token', {
-      method: 'getExpoPushToken'
-    }, error);
-    return null;
-  }
-}
-
-/**
- * Take the payload of the notification that COLD-LAUNCHED the app, if any.
- *
- * "Take" is literal: the response is cleared from `expo-notifications` once
- * read, so a listener attached later in the same launch is not handed the same
- * tap again. Clearing is best-effort across OS/module versions, so a caller that
- * must not act twice still needs its own idempotency ledger.
- *
- * @returns The raw, untrusted `content.data` of the launching notification, or
- *   `null`. Parsing/validation is the caller's job.
- */
-export async function takeLaunchNotificationData() {
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return null;
-  }
-  try {
-    const response = notifications.getLastNotificationResponse();
-    if (!response) {
-      return null;
-    }
-    const data = response.notification.request.content.data;
-    try {
-      notifications.clearLastNotificationResponse();
-    } catch (clearError) {
-      log.warn('could not clear the launching notification response', {
-        method: 'takeLaunchNotificationData'
-      }, clearError);
-    }
-    return data;
-  } catch (error) {
-    log.warn('could not read the launching notification', {
-      method: 'takeLaunchNotificationData'
-    }, error);
-    return null;
-  }
-}
-
-/**
- * What the OS should do with a notification that arrives while the app is
- * FOREGROUNDED.
- *
- * `'suppress'` is `expo-notifications`' own default for a foregrounded app, so a
- * decision function that only ever returns `'show'` for the payloads it
- * recognises leaves every other notification exactly as it behaves today.
- */
-
-/**
- * Whether the process-wide foreground handler has already been ATTEMPTED.
- *
- * `setNotificationHandler` is global, last-writer-wins process state, so this is
- * a one-shot install rather than something a mount/unmount cycle owns. A failed
- * attempt is deliberately not retried: the only failure modes are permanent for
- * the life of the process (web, a build without the native module, a native
- * module that threw on registration).
- *
- * Module-scoped and only ever touched from an async install call — never read
- * during render, so the React Compiler has no memoizable position to freeze it
- * into.
- */
-let foregroundHandlerAttempted = false;
-
-/** How prominently Android surfaces a channel's notifications. */
-
-/** An Android notification channel this app delivers on. */
-
-/**
- * Create (or update) an Android notification channel.
- *
- * A no-op everywhere but Android: iOS has no channels, and web never loads the
- * native module. Call it BEFORE registering a push token, so the very first
- * notification the server sends already has a channel to land on.
- *
- * Failure is non-fatal and logged: a missing channel costs visibility, and
- * refusing to register a token over it would cost the feature entirely.
- *
- * @returns Whether the channel was actually created (`false` off Android, or
- *   when the native module is unavailable, or when creation failed).
- */
-export async function ensureNotificationChannel(spec) {
-  if (Platform.OS !== 'android') {
-    return false;
-  }
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return false;
-  }
-  try {
-    await notifications.setNotificationChannelAsync(spec.id, {
-      name: spec.name,
-      importance: spec.importance === 'high' ? notifications.AndroidImportance.HIGH : notifications.AndroidImportance.DEFAULT,
-      ...(spec.description ? {
-        description: spec.description
-      } : {})
-    });
-    return true;
-  } catch (error) {
-    log.warn('could not create the notification channel', {
-      method: 'ensureNotificationChannel',
-      channelId: spec.id
-    }, error);
-    return false;
-  }
-}
-
-/**
- * Install the ONE process-wide handler that decides whether an incoming
- * notification is shown while the app is in the FOREGROUND.
- *
- * Without a handler, `expo-notifications` shows nothing at all while the app is
- * open — which is exactly when a time-critical notification (a "Sign in with
- * Oxy" approval request, say) matters most, because the user is already holding
- * the phone.
- *
- * The handler ONLY decides visibility. It never navigates, never acts on the
- * notification, and never reads the payload for display — `decide` is handed the
- * raw, untrusted `content.data` and may answer nothing but `'show'` /
- * `'suppress'`. Acting on a notification stays with a TAP, routed by
- * {@link subscribeToNotificationResponses}. No notification actions/categories
- * are registered here, so the banner cannot carry an action button.
- *
- * The one-shot latch is set BEFORE the first `await`, so concurrent callers
- * cannot both reach `setNotificationHandler`.
- *
- * @param decide - Maps the raw, untrusted payload to a presentation verdict.
- *   Must not throw; a throw is reported by the OS as a handling error and the
- *   notification is dropped.
- * @returns Whether a handler was installed by THIS call (`false` on a repeat
- *   call, on web, or when the native module is unavailable).
- */
-export async function installForegroundNotificationHandler(decide) {
-  if (foregroundHandlerAttempted) {
-    return false;
-  }
-  foregroundHandlerAttempted = true;
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return false;
-  }
-  try {
-    notifications.setNotificationHandler({
-      handleNotification: async notification => {
-        const data = notification.request.content.data;
-        const show = decide(data) === 'show';
-        return {
-          // Banner: the whole point — make the notification visible on screen.
-          shouldShowBanner: show,
-          // Notification centre: so the user can still review it after
-          // dismissing the banner.
-          shouldShowList: show,
-          // No sound: the app is foregrounded, so the user is already looking at
-          // the screen the banner appears on.
-          shouldPlaySound: false,
-          // Badging is an app-level unread concept this adapter has no view of.
-          shouldSetBadge: false
-        };
-      }
-    });
-    return true;
-  } catch (error) {
-    log.warn('could not install the foreground notification handler', {
-      method: 'installForegroundNotificationHandler'
-    }, error);
-    return false;
-  }
-}
-
-/**
- * Subscribe to notification TAPS (responses) while the app is running.
- *
- * @param listener - Receives the raw, untrusted `content.data` of the tapped
- *   notification. Parsing/validation is the caller's job.
- * @returns An unsubscribe function. Safe to call even if the subscription could
- *   not be established.
- */
-export async function subscribeToNotificationResponses(listener) {
-  const notifications = await loadNotifications();
-  if (!notifications) {
-    return () => undefined;
-  }
-  try {
-    const subscription = notifications.addNotificationResponseReceivedListener(response => {
-      listener(response.notification.request.content.data);
-    });
-    return () => subscription.remove();
-  } catch (error) {
-    log.warn('could not subscribe to notification taps', {
-      method: 'subscribeToNotificationResponses'
-    }, error);
-    return () => undefined;
-  }
-}
-//# sourceMappingURL=deviceNotifications.js.map