@oxyhq/services 23.0.2 → 23.1.0

package/lib/typescript/module/ui/context/commitSessionFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitSessionFlow.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/commitSessionFlow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAMxC,MAAM,WAAW,6BAA6B;IAC5C;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,6EAA6E;IAC7E,mBAAmB,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,8EAA8E;IAC9E,iBAAiB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,sCAAsC;IACtC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,yEAAyE;IACzE,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,6EAA6E;IAC7E,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC3C,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAChD,gBAAgB,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC,CAkFf"}

package/lib/typescript/module/ui/context/hooks/useAuthOperations.d.ts

@@ -0,0 +1,74 @@
+import type { ApiError, AuthStateStore, IdentityBinding, SessionClient, User } from '@oxyhq/core';
+import type { AuthState } from '../../stores/authStore.js';
+import type { ClientSession } from '@oxyhq/core';
+import type { StorageInterface } from '../../utils/storageHelpers.js';
+import type { OxyServices } from '@oxyhq/core';
+export interface UseAuthOperationsOptions {
+    oxyServices: OxyServices;
+    storage: StorageInterface | null;
+    /**
+     * The device-first persisted auth-state store. On EXPLICIT full sign-out the
+     * session blob is cleared (`store.clear()`) so a reload's cold boot finds no
+     * device credential to restore; on sign-in the returned zero-cookie device
+     * credential (`deviceId` + `deviceSecret`) is persisted so the next boot
+     * warm-restores without a redirect.
+     */
+    store: AuthStateStore;
+    activeSessionId: string | null;
+    setActiveSessionId: (sessionId: string | null) => void;
+    updateSessions: (sessions: ClientSession[], options?: {
+        merge?: boolean;
+    }) => void;
+    saveActiveSessionId: (sessionId: string) => Promise<void>;
+    clearSessionState: () => Promise<void>;
+    /** Used only by `performSignIn`'s same-user duplicate-session dedup (legacy session-validate path; unrelated to the SessionClient device-account set). */
+    switchSession: (sessionId: string) => Promise<User>;
+    /**
+     * The Fase 3-A/3-B `SessionClient` (server-authoritative device account
+     * set). `logout` / `logoutAll` route SERVER-side revocation through
+     * `sessionClient.signOut(...)` instead of the bearer/cookie logout
+     * endpoints.
+     */
+    sessionClient: SessionClient;
+    /** Reprojects `sessionClient.getState()` onto sessions/activeSessionId/user (Task 1's callback). Awaited after a partial `signOut` so the exposed state reflects the server truth before the call resolves. */
+    syncFromClient: () => Promise<void>;
+    onAuthStateChange?: (user: User | null) => void;
+    onError?: (error: ApiError) => void;
+    loginSuccess: (user: User) => void;
+    loginFailure: (message: string) => void;
+    logoutStore: () => void;
+    setAuthState: (state: Partial<AuthState>) => void;
+    logger?: (message: string, error?: unknown) => void;
+    /**
+     * Identity-bound session (`sessionMode: 'identity'`). When set, a successful
+     * key sign-in writes the durable `{publicKey, accountId}` pin so pinned
+     * re-mints and projections bind immediately instead of waiting for a second
+     * `establishIdentitySession` round-trip.
+     */
+    identityBinding?: IdentityBinding;
+    /** Refreshes the provider's memoised pinned account id after the pin lands. */
+    refreshPinnedAccountId?: () => Promise<string | null>;
+}
+export interface UseAuthOperationsResult {
+    /** Sign in with existing public key */
+    signIn: (publicKey: string, deviceName?: string) => Promise<User>;
+    /** Logout from current session */
+    logout: (targetSessionId?: string) => Promise<void>;
+    /** Logout from all sessions */
+    logoutAll: () => Promise<void>;
+}
+/**
+ * Clear the persisted device credential on an explicit full sign-out.
+ * Best-effort and non-blocking: sign-out must never fail because a storage
+ * write threw. Exported so `OxyContext`'s zero-account branch (a REMOTE full
+ * sign-out pushed over the socket) runs the EXACT same cleanup as the local
+ * `logout` / `logoutAll` paths — a remote sign-out is indistinguishable from a
+ * local one to the next cold boot.
+ */
+export declare function clearPersistedAuthSafe(store: AuthStateStore, logger?: (message: string, error?: unknown) => void): void;
+/**
+ * Authentication operations using public key cryptography.
+ * Accepts public key as parameter - identity management is handled by the app layer.
+ */
+export declare const useAuthOperations: ({ oxyServices, store, activeSessionId, setActiveSessionId, updateSessions, saveActiveSessionId, clearSessionState, switchSession, sessionClient, syncFromClient, onAuthStateChange, onError, loginSuccess, loginFailure, logoutStore, setAuthState, logger, identityBinding, refreshPinnedAccountId, }: UseAuthOperationsOptions) => UseAuthOperationsResult;
+//# sourceMappingURL=useAuthOperations.d.ts.map

package/lib/typescript/module/ui/context/hooks/useAuthOperations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthOperations.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/context/hooks/useAuthOperations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,aAAa,CAAC;AAIvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjC;;;;;;OAMG;IACH,KAAK,EAAE,cAAc,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,cAAc,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACnF,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,iBAAiB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,0JAA0J;IAC1J,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;;;OAKG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B,+MAA+M;IAC/M,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,WAAW,EAAE,MAAM,IAAI,CAAC;IACxB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACpD;;;;;OAKG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,+EAA+E;IAC/E,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,uBAAuB;IACtC,uCAAuC;IACvC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,kCAAkC;IAClC,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,+BAA+B;IAC/B,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAMD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,cAAc,EACrB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,GAClD,IAAI,CAIN;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,wSAoB/B,wBAAwB,KAAG,uBAmS7B,CAAC"}

package/lib/typescript/module/ui/context/oxyContextHelpers.d.ts

@@ -0,0 +1,7 @@
+import type { UseFollowHook } from '../hooks/useFollow.types.js';
+/** Local display hint when a session lacks explicit `expiresAt` (7 days). */
+export declare const DEFAULT_SESSION_VALIDITY_MS: number;
+export declare function getHttpStatus(error: unknown): number | undefined;
+export declare function isUnauthorizedStatus(error: unknown): boolean;
+export declare const loadUseFollowHook: () => UseFollowHook;
+//# sourceMappingURL=oxyContextHelpers.d.ts.map

package/lib/typescript/module/ui/context/oxyContextHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxyContextHelpers.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/oxyContextHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA0B,CAAC;AAG9D,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,QAA0B,CAAC;AAEnE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAoBhE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE5D;AAID,eAAO,MAAM,iBAAiB,QAAO,aAuBpC,CAAC"}

package/lib/typescript/module/ui/context/oxyContextTypes.d.ts

@@ -0,0 +1,189 @@
+import type { ReactNode } from 'react';
+import type { OxyServices, User, SessionLoginResponse, AccountNode, CreateAccountInput, ClientSession, AccountDialogController, AccountDialogView, ApiError, SessionClient, SessionMode } from '@oxyhq/core';
+import type { UseFollowHook } from '../hooks/useFollow.types.js';
+import type { useLanguageManagement } from '../hooks/useLanguageManagement.js';
+import type { RouteName } from '../navigation/routes.js';
+import type { StartWebOAuthSignInOptions } from '../oauth/browserAuthTransport.js';
+import type { WebAuthMode, WebOAuthSignInResult } from '../oauth/types.js';
+export interface OxyContextState {
+    user: User | null;
+    sessions: ClientSession[];
+    activeSessionId: string | null;
+    isAuthenticated: boolean;
+    isLoading: boolean;
+    isTokenReady: boolean;
+    hasAccessToken: boolean;
+    canUsePrivateApi: boolean;
+    isPrivateApiPending: boolean;
+    /**
+     * Whether the initial auth determination has concluded.
+     *
+     * `false` from mount until the FIRST device-first cold boot resolves —
+     * during that window `isAuthenticated: false` is UNDETERMINED, not a
+     * definitive "logged out". Flips to `true` exactly once the boot concludes
+     * (a session was committed OR none exists) and never reverts. Consumers should
+     * defer their first auth-dependent fetch until this is `true` so a cold-boot
+     * web reload with an existing session does not fetch anonymous data.
+     */
+    isAuthResolved: boolean;
+    isStorageReady: boolean;
+    /**
+     * Who owns this provider's session (see `OxyProviderProps.sessionMode`).
+     *
+     * `'account'` — the device's active account; any app on the device can switch
+     * it and this client follows. `'identity'` — the owner of the local primary
+     * identity key, permanently: a sibling app's account switch never changes this
+     * client's user or bearer, and every account-graph mutation
+     * (`switchToAccount` / `switchSession`) rejects with `IdentityBoundSessionError`
+     * while `accounts` stays empty and the account dialog never opens.
+     */
+    sessionMode: SessionMode;
+    /** How web third-party sign-in reaches the IdP (see `OxyProviderProps.webAuthMode`). */
+    webAuthMode: WebAuthMode;
+    error: string | null;
+    /** Active UI locale (`language-REGION`): the account's primary locale when signed in, else the guest/device locale. */
+    currentLanguage: string;
+    /** Ordered account locales (primary first) when signed in, or the single guest override when signed out. */
+    currentLanguages: string[];
+    currentLanguageMetadata: ReturnType<typeof useLanguageManagement>['metadata'];
+    currentLanguageName: string;
+    currentNativeLanguageName: string;
+    hasIdentity: () => Promise<boolean>;
+    getPublicKey: () => Promise<string | null>;
+    signIn: (publicKey: string, deviceName?: string) => Promise<User>;
+    /**
+     * Sign in with a passkey (WebAuthn). With no `username` this is the
+     * usernameless / discoverable-credential flow: the browser prompts for any
+     * resident Oxy passkey. Pass `username` for the username-first flow — the
+     * server scopes `allowCredentials` to that user's passkeys so a
+     * NON-discoverable hardware key (e.g. a U2F/security key) can be used.
+     * WEB-ONLY — throws on native or an unsupported browser (native passkeys are
+     * Commons' job). On `useOxy()`, NOT re-exposed on `useAuth()`.
+     */
+    signInWithPasskey: (opts?: {
+        username?: string;
+        deviceName?: string;
+        deviceFingerprint?: string;
+    }) => Promise<void>;
+    /**
+     * Create a brand-new account whose first authentication method is a passkey.
+     * WEB-ONLY — throws on native or an unsupported browser.
+     */
+    registerWithPasskey: (params: {
+        username: string;
+        deviceName?: string;
+    }) => Promise<void>;
+    /**
+     * Add a passkey to the already-signed-in account (bearer present). Does NOT
+     * commit a new session; refreshes the linked auth-methods list on success.
+     * WEB-ONLY — throws on native or an unsupported browser.
+     */
+    addPasskey: (params?: {
+        deviceName?: string;
+    }) => Promise<void>;
+    /**
+     * Remove a passkey from the current account by its credential id
+     * (`AuthMethodEntry.credentialId`). Refreshes the linked auth-methods list on
+     * success. Works on any platform (it is a plain unlink, not a WebAuthn
+     * ceremony) but is only reachable from surfaces that list passkeys.
+     */
+    removePasskey: (credentialId: string) => Promise<void>;
+    revokeSuspiciousSignIn: () => Promise<void>;
+    handleWebSession: (session: SessionLoginResponse) => Promise<void>;
+    /**
+     * Run a WEB third-party OAuth sign-in (authorization code + PKCE) end to end
+     * using this provider's `webAuthMode`, and commit the resulting session.
+     *
+     * This is the shared operation `OxySignInButton` delegates to; RPs that ship
+     * their own button call it directly and never implement popup listeners, a
+     * token exchange, or `state` validation themselves. Returns a typed result —
+     * closing the popup and running out of time are values, not exceptions.
+     *
+     * In popup mode the window MUST be opened during the user's click: either
+     * call this synchronously from the press handler (it opens one itself), or
+     * call `openOAuthPopup()` there and pass the handle as `popup`.
+     *
+     * No-op outside a browser and in `sessionMode: 'identity'`, both of which
+     * resolve to `{ status: 'unsupported' }`.
+     */
+    startWebOAuthSignIn: (options: StartWebOAuthSignInOptions) => Promise<WebOAuthSignInResult>;
+    logout: (targetSessionId?: string) => Promise<void>;
+    logoutAll: () => Promise<void>;
+    switchSession: (sessionId: string) => Promise<User>;
+    removeSession: (sessionId: string) => Promise<void>;
+    refreshSessions: () => Promise<void>;
+    setLanguage: (languageId: string) => Promise<void>;
+    getDeviceSessions: () => Promise<Array<{
+        sessionId: string;
+        deviceId: string;
+        deviceName?: string;
+        lastActive?: string;
+        expiresAt?: string;
+    }>>;
+    logoutAllDeviceSessions: () => Promise<void>;
+    updateDeviceName: (deviceName: string) => Promise<void>;
+    clearSessionState: () => Promise<void>;
+    clearAllAccountData: () => Promise<void>;
+    storageKeyPrefix: string;
+    clientId: string | null;
+    oxyServices: OxyServices;
+    /** Server-authoritative device session client. `null` before an `OxyProvider` is mounted. */
+    sessionClient: SessionClient | null;
+    useFollow?: UseFollowHook;
+    showBottomSheet?: (screenOrConfig: RouteName | {
+        screen: RouteName;
+        props?: Record<string, unknown>;
+    }) => void;
+    openAvatarPicker: () => void;
+    accountDialogController: AccountDialogController | null;
+    isAccountDialogOpen: boolean;
+    openAccountDialog: (view?: AccountDialogView) => void;
+    closeAccountDialog: () => void;
+    accounts: AccountNode[];
+    switchToAccount: (accountId: string) => Promise<void>;
+    refreshAccounts: () => Promise<void>;
+    createAccount: (data: CreateAccountInput) => Promise<AccountNode>;
+}
+export interface OxyContextProviderProps {
+    children: ReactNode;
+    oxyServices?: OxyServices;
+    baseURL?: string;
+    authWebUrl?: string;
+    authRedirectUri?: string;
+    /**
+     * Authorize endpoint override for web "Sign in with Oxy". Defaults to the
+     * production Oxy IdP when unset; a local/staging deployment points it at its
+     * own IdP so sign-in never reaches production `auth.oxy.so`.
+     */
+    authorizeBaseUrl?: string;
+    storageKeyPrefix?: string;
+    clientId?: string;
+    /**
+     * Who owns this provider's session. See `OxyProviderProps.sessionMode` for the
+     * full contract.
+     * @default 'account'
+     */
+    sessionMode?: SessionMode;
+    /**
+     * Transport for WEB third-party sign-in. See `OxyProviderProps.webAuthMode`.
+     * @default 'popup'
+     */
+    webAuthMode?: WebAuthMode;
+    onAuthStateChange?: (user: User | null) => void;
+    onError?: (error: ApiError) => void;
+}
+/** Internal commit input — session plus zero-cookie device credential. */
+export interface CommitInput {
+    sessionId: string;
+    accessToken?: string;
+    deviceId?: string;
+    deviceSecret?: string;
+    expiresAt?: string;
+    userId?: string;
+    user?: {
+        id: string;
+        username?: string;
+        avatar?: string;
+    };
+}
+//# sourceMappingURL=oxyContextTypes.d.ts.map

package/lib/typescript/module/ui/context/oxyContextTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxyContextTypes.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/oxyContextTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7M,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAgC,CAAC;AAC5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAgB,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;OASG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;;;;;OASG;IACH,WAAW,EAAE,WAAW,CAAC;IACzB,wFAAwF;IACxF,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,uHAAuH;IACvH,eAAe,EAAE,MAAM,CAAC;IACxB,4GAA4G;IAC5G,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,uBAAuB,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;IAElC,WAAW,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE3C,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE;;;;;;;;OAQG;IACH,iBAAiB,EAAE,CAAC,IAAI,CAAC,EAAE;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpB;;;OAGG;IACH,mBAAmB,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1F;;;;OAIG;IACH,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE;;;;;OAKG;IACH,aAAa,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,sBAAsB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,gBAAgB,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE5F,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,iBAAiB,EAAE,MAAM,OAAO,CAC9B,KAAK,CAAC;QACJ,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CACH,CAAC;IACF,uBAAuB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,iBAAiB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,mBAAmB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,6FAA6F;IAC7F,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,eAAe,CAAC,EAAE,CAAC,cAAc,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/G,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAE7B,uBAAuB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACxD,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,CAAC,IAAI,CAAC,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACtD,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAE/B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,aAAa,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,SAAS,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;CACrC;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D"}

package/lib/typescript/module/ui/context/passkeyFlow.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Pure passkey (WebAuthn) sign-in / registration orchestration.
+ *
+ * Extracted from `OxyContext` so the fixed `options → ceremony → verify → commit`
+ * ordering is unit-testable with injected deps — the exact pattern
+ * `commitSessionFlow.ts` (`commitDeviceSetAndResolve`) uses. The context methods
+ * (`signInWithPasskey` / `registerWithPasskey` / `addPasskey`) are thin wrappers
+ * that supply the real deps: the core `webauthn*` methods, the platform ceremony
+ * client (`webauthn/passkeyClient`), and the internal `commitSession` funnel.
+ *
+ * All three GATE on `isSupported()` first (the platform client returns `false`
+ * off the web) so an unsupported surface fails loudly before touching a ceremony.
+ */
+import type { LoginResult } from '@oxyhq/contracts';
+import type { CommitInput } from './oxyContextTypes.js';
+/**
+ * The result of `OxyServices.webauthnRegisterVerify` — either the LINK branch
+ * (`{ success, message }`, bearer present, no session) or the SIGNUP branch (a
+ * full {@link LoginResult}, which carries a `sessionId` on its session arm).
+ */
+export type PasskeyRegisterVerifyResult = {
+    success: true;
+    message: string;
+} | LoginResult;
+/** Thrown when a passkey flow is attempted on a surface that cannot run WebAuthn. */
+export declare const PASSKEY_UNSUPPORTED_MESSAGE = "Passkeys are not available in this environment. Use another sign-in method.";
+/** Injected dependencies for {@link runPasskeyLogin}. */
+export interface RunPasskeyLoginDeps {
+    isSupported: () => boolean;
+    getLoginOptions: (username?: string) => Promise<unknown>;
+    runCeremony: (optionsJSON: unknown) => Promise<unknown>;
+    loginVerify: (response: unknown, envelope: {
+        deviceName?: string;
+        deviceFingerprint?: string;
+        deviceId?: string;
+    }) => Promise<LoginResult>;
+    commit: (input: CommitInput) => Promise<void>;
+    /**
+     * When present, scopes login options to that user's registered passkeys
+     * (username-first) — the path a NON-discoverable hardware key (e.g. a U2F
+     * security key) needs, since it can't be found by a usernameless ceremony.
+     * Omit for the discoverable / resident-credential path.
+     */
+    username?: string;
+    deviceId?: string;
+    deviceName?: string;
+    deviceFingerprint?: string;
+}
+/**
+ * Passkey SIGN-IN. With no `username` this is the usernameless
+ * (discoverable-credential) flow; with a `username` it is username-first —
+ * the server scopes `allowCredentials` to that user's passkeys so a
+ * non-discoverable hardware key (U2F/security key) can be selected. Either way:
+ * request login options, run the authentication ceremony, verify, then commit
+ * the session. A passkey assertion is itself the strong factor — sign-in always
+ * resolves to a completed session.
+ */
+export declare function runPasskeyLogin(deps: RunPasskeyLoginDeps): Promise<void>;
+/** Injected dependencies for {@link runPasskeyRegister}. */
+export interface RunPasskeyRegisterDeps {
+    isSupported: () => boolean;
+    getRegisterOptions: (username: string) => Promise<unknown>;
+    runCeremony: (optionsJSON: unknown) => Promise<unknown>;
+    registerVerify: (response: unknown, envelope: {
+        username: string;
+        deviceName?: string;
+    }) => Promise<PasskeyRegisterVerifyResult>;
+    commit: (input: CommitInput) => Promise<void>;
+    username: string;
+    deviceName?: string;
+}
+/**
+ * Passkey SIGNUP: create a brand-new account whose first auth method is a
+ * passkey. The verify signup branch mints a session (a {@link LoginSessionResult}
+ * carrying `sessionId`), which is committed exactly like a password signup.
+ */
+export declare function runPasskeyRegister(deps: RunPasskeyRegisterDeps): Promise<void>;
+/** Injected dependencies for {@link runPasskeyAdd}. */
+export interface RunPasskeyAddDeps {
+    isSupported: () => boolean;
+    getRegisterOptions: () => Promise<unknown>;
+    runCeremony: (optionsJSON: unknown) => Promise<unknown>;
+    registerVerify: (response: unknown, envelope: {
+        deviceName?: string;
+    }) => Promise<PasskeyRegisterVerifyResult>;
+    onLinked: () => void;
+    deviceName?: string;
+}
+/**
+ * ADD a passkey to the already-signed-in account (bearer present). The verify
+ * link branch returns `{ success, message }` with NO session — so this never
+ * commits a session; it just fires `onLinked` (which invalidates the
+ * auth-methods query). A session arm here would be a server contract violation.
+ */
+export declare function runPasskeyAdd(deps: RunPasskeyAddDeps): Promise<void>;
+//# sourceMappingURL=passkeyFlow.d.ts.map

package/lib/typescript/module/ui/context/passkeyFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeyFlow.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/passkeyFlow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAsB,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAmB,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CAAC;AAE3F,qFAAqF;AACrF,eAAO,MAAM,2BAA2B,gFACuC,CAAC;AAehF,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,eAAe,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,WAAW,EAAE,CACX,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,KAC7E,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAY9E;AAED,4DAA4D;AAC5D,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,cAAc,EAAE,CACd,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAChD,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBpF;AAED,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,kBAAkB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,cAAc,EAAE,CACd,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAC9B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAW1E"}

package/lib/typescript/module/ui/context/useOxyAccountGraph.d.ts

@@ -0,0 +1,32 @@
+import { type RefObject } from 'react';
+import type { QueryClient } from '@tanstack/react-query';
+import type { OxyServices, AccountNode, CreateAccountInput, AccountDialogController, SessionClient } from '@oxyhq/core';
+import type { CommitInput } from './oxyContextTypes.js';
+interface UseOxyAccountGraphParams {
+    isAuthenticated: boolean;
+    tokenReady: boolean;
+    initialized: boolean;
+    /**
+     * `sessionMode: 'identity'`. The account graph is a switcher surface, and an
+     * identity-bound client authenticates as the owner of the local identity key —
+     * permanently. The graph is therefore never fetched and every switch rejects.
+     */
+    identityBound: boolean;
+    oxyServices: OxyServices;
+    sessionClient: SessionClient;
+    syncFromClient: () => Promise<void>;
+    commitSession: (input: CommitInput, options: {
+        activate: boolean;
+    }) => Promise<void>;
+    queryClient: QueryClient;
+    accountDialogControllerRef: RefObject<AccountDialogController | null>;
+    clearSessionStateRef: RefObject<() => Promise<void>>;
+}
+export declare function useOxyAccountGraph({ isAuthenticated, tokenReady, initialized, identityBound, oxyServices, sessionClient, syncFromClient, commitSession, queryClient, accountDialogControllerRef, clearSessionStateRef, }: UseOxyAccountGraphParams): {
+    accounts: AccountNode[];
+    refreshAccounts: () => Promise<void>;
+    switchToAccount: (accountId: string) => Promise<void>;
+    createAccount: (data: CreateAccountInput) => Promise<AccountNode>;
+};
+export {};
+//# sourceMappingURL=useOxyAccountGraph.d.ts.map

package/lib/typescript/module/ui/context/useOxyAccountGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useOxyAccountGraph.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/useOxyAccountGraph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAOxH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAmB,CAAC;AAErD,UAAU,wBAAwB;IAChC,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,WAAW,EAAE,WAAW,CAAC;IACzB,0BAA0B,EAAE,SAAS,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IACtE,oBAAoB,EAAE,SAAS,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;CACtD;AAED,wBAAgB,kBAAkB,CAAC,EACjC,eAAe,EACf,UAAU,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,WAAW,EACX,0BAA0B,EAC1B,oBAAoB,GACrB,EAAE,wBAAwB;;2BAGqB,OAAO,CAAC,IAAI,CAAC;iCAsCvC,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;0BAuC3B,kBAAkB,KAAG,OAAO,CAAC,WAAW,CAAC;EAczD"}

package/lib/typescript/module/ui/hooks/mutations/mutationFactory.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Mutation Factory - Creates standardized mutations with optimistic updates
+ *
+ * This factory reduces boilerplate code for mutations that follow the common pattern:
+ * 1. Cancel outgoing queries
+ * 2. Snapshot previous data
+ * 3. Apply optimistic update
+ * 4. On error: rollback and show toast
+ * 5. On success: update cache, stores, and invalidate queries
+ */
+import type { QueryClient, UseMutationOptions } from '@tanstack/react-query';
+import type { User } from '@oxyhq/core';
+/**
+ * Configuration for creating a standard profile mutation
+ */
+export interface ProfileMutationConfig<TData, TVariables> {
+    /** The mutation function that makes the API call */
+    mutationFn: (variables: TVariables) => Promise<TData>;
+    /**
+     * Stable mutation key for the offline queue. Required so TanStack Query
+     * can correlate paused mutations across refetches/resume cycles.
+     */
+    mutationKey: readonly unknown[];
+    /** Query keys to cancel before mutation */
+    cancelQueryKeys?: unknown[][];
+    /** Function to apply optimistic update to the user data */
+    optimisticUpdate?: (previousUser: User, variables: TVariables) => Partial<User>;
+    /** Error message to show on failure */
+    errorMessage?: string | ((error: Error) => string);
+    /** Success message to show (optional) */
+    successMessage?: string;
+    /** Whether to update authStore on success (default: true) */
+    updateAuthStore?: boolean;
+    /** Whether to invalidate user queries on success (default: true) */
+    invalidateUserQueries?: boolean;
+    /** Whether to invalidate account queries on success (default: true) */
+    invalidateAccountQueries?: boolean;
+    /** Custom onSuccess handler */
+    onSuccess?: (data: TData, variables: TVariables, queryClient: QueryClient) => void;
+}
+/**
+ * Creates a standard profile mutation with optimistic updates
+ *
+ * @example
+ * ```ts
+ * const updateProfile = createProfileMutation({
+ *   mutationKey: mutationKeys.account.updateProfile,
+ *   mutationFn: (updates) => oxyServices.updateProfile(updates),
+ *   optimisticUpdate: (user, updates) => updates,
+ *   errorMessage: 'Failed to update profile',
+ * });
+ * ```
+ */
+export declare function createProfileMutation<TVariables>(config: ProfileMutationConfig<User, TVariables>, queryClient: QueryClient, activeSessionId: string | null): UseMutationOptions<User, Error, TVariables, {
+    previousUser?: User;
+}>;
+/**
+ * Configuration for creating a generic mutation (non-profile)
+ */
+export interface GenericMutationConfig<TData, TVariables, TContext> {
+    /** The mutation function */
+    mutationFn: (variables: TVariables) => Promise<TData>;
+    /**
+     * Stable mutation key for the offline queue. Required so TanStack Query
+     * can correlate paused mutations across refetches/resume cycles.
+     */
+    mutationKey: readonly unknown[];
+    /** Query key for optimistic data */
+    queryKey: unknown[];
+    /** Function to create optimistic data */
+    optimisticData?: (previous: TData | undefined, variables: TVariables) => TData;
+    /** Error message */
+    errorMessage?: string;
+    /** Success message */
+    successMessage?: string;
+    /** Additional queries to invalidate on success */
+    invalidateQueries?: unknown[][];
+}
+/**
+ * Creates a generic mutation with optimistic updates
+ */
+export declare function createGenericMutation<TData, TVariables>(config: GenericMutationConfig<TData, TVariables, {
+    previous?: TData;
+}>, queryClient: QueryClient): UseMutationOptions<TData, Error, TVariables, {
+    previous?: TData;
+}>;
+//# sourceMappingURL=mutationFactory.d.ts.map

package/lib/typescript/module/ui/hooks/mutations/mutationFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutationFactory.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/hooks/mutations/mutationFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAKxC;;GAEG;AACH,MAAM,WAAW,qBAAqB,CAAC,KAAK,EAAE,UAAU;IACtD,oDAAoD;IACpD,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD;;;OAGG;IACH,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;IAChC,2CAA2C;IAC3C,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9B,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC;IACnD,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uEAAuE;IACvE,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,+BAA+B;IAC/B,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,KAAK,IAAI,CAAC;CACpF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAC9C,MAAM,EAAE,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,EAC/C,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,GAC7B,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE;IAAE,YAAY,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CA0FtE;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ;IAChE,4BAA4B;IAC5B,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD;;;OAGG;IACH,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;IAChC,oCAAoC;IACpC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,yCAAyC;IACzC,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,EAAE,SAAS,EAAE,UAAU,KAAK,KAAK,CAAC;IAC/E,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;CACjC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EACrD,MAAM,EAAE,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE;IAAE,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,EACtE,WAAW,EAAE,WAAW,GACvB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE;IAAE,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,CA6CpE"}

package/lib/typescript/module/ui/hooks/mutations/mutationKeys.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Stable mutation key factories.
+ *
+ * Mutations that may be queued while offline MUST declare a stable
+ * `mutationKey`. When the network comes back, TanStack Query resumes
+ * paused mutations grouped by key — so the keys here should be stable
+ * across renders and across reloads when persistence is enabled.
+ */
+export declare const mutationKeys: {
+    readonly account: {
+        readonly updateProfile: readonly ["mutation", "account", "updateProfile"];
+        readonly uploadAvatar: readonly ["mutation", "account", "uploadAvatar"];
+        readonly updateSettings: readonly ["mutation", "account", "updateSettings"];
+        readonly updatePrivacySettings: readonly ["mutation", "account", "updatePrivacySettings"];
+        readonly updateNotificationPreferences: readonly ["mutation", "account", "updateNotificationPreferences"];
+        readonly updateUserPreferences: readonly ["mutation", "account", "updateUserPreferences"];
+        readonly uploadFile: readonly ["mutation", "account", "uploadFile"];
+    };
+    readonly session: {
+        readonly switch: readonly ["mutation", "session", "switch"];
+        readonly logout: readonly ["mutation", "session", "logout"];
+        readonly logoutAll: readonly ["mutation", "session", "logoutAll"];
+        readonly updateDeviceName: readonly ["mutation", "session", "updateDeviceName"];
+        readonly removeDevice: readonly ["mutation", "session", "removeDevice"];
+    };
+    readonly connectedApps: {
+        readonly revoke: readonly ["mutation", "connectedApps", "revoke"];
+    };
+};
+//# sourceMappingURL=mutationKeys.d.ts.map

package/lib/typescript/module/ui/hooks/mutations/mutationKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutationKeys.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/hooks/mutations/mutationKeys.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;CA6Bf,CAAC"}