@oxyhq/services 23.0.2 → 23.1.0

package/lib/typescript/module/ui/types/navigation.d.ts

@@ -0,0 +1,120 @@
+import type { ReactNode, RefObject } from 'react';
+import type { QueryClient } from '@tanstack/react-query';
+import type { RouteName } from '../navigation/routes.js';
+import type { SessionMode } from '@oxyhq/core';
+import type { WebAuthMode } from '../oauth/types.js';
+export interface StepController {
+    canGoBack: () => boolean;
+    goBack: () => void;
+}
+export interface BaseScreenProps {
+    navigate?: (screen: RouteName, props?: Record<string, unknown>) => void;
+    goBack?: () => void;
+    /** Whether the host surface can navigate back — a deeper frame OR a prior step. */
+    canGoBack?: () => boolean;
+    onClose?: () => void;
+    onAuthenticated?: (payload?: unknown) => void;
+    /**
+     * Dismiss THIS surface, resolving the `present()` promise that opened it
+     * with `result`. Injected by the surface host (the P1 surface stack). Picker
+     * and crop screens use it to hand a typed result back to the awaiting
+     * `surfaces.present(...)` call instead of an untyped `onSelect`/`onConfirm`
+     * callback prop.
+     */
+    dismiss?: (result?: unknown) => void;
+    theme?: 'light' | 'dark' | string;
+    initialStep?: number;
+    stepControllerRef?: RefObject<StepController | null>;
+    onStepChange?: (currentStep: number, totalSteps: number) => void;
+    currentScreen?: RouteName;
+    scrollTo?: (y: number, animated?: boolean) => void;
+    username?: string;
+    email?: string;
+    password?: string;
+    confirmPassword?: string;
+    userProfile?: unknown;
+    [key: string]: unknown;
+}
+export interface OxyProviderProps {
+    oxyServices?: unknown;
+    children?: ReactNode;
+    onAuthStateChange?: (user: unknown) => void;
+    storageKeyPrefix?: string;
+    /**
+     * The app's Oxy OAuth client id / ApplicationCredential publicKey.
+     * Required for the cross-app device sign-in flow: the QR / approval-window
+     * sign-in registers a device-flow session via `POST /auth/session/create`,
+     * which now identifies the requesting app by this real registered
+     * client id. The central Oxy auth experience resolves and renders the
+     * consent identity from it server-side. Without it the device sign-in
+     * flow cannot start.
+     */
+    clientId?: string;
+    baseURL?: string;
+    authWebUrl?: string;
+    authRedirectUri?: string;
+    /**
+     * Authorize endpoint override for web "Sign in with Oxy". Defaults to the
+     * production Oxy IdP (`https://auth.oxy.so/authorize`) when unset. Set this
+     * from an env var (e.g. Vite `VITE_OXY_AUTHORIZE_URL`, Expo
+     * `EXPO_PUBLIC_OXY_AUTHORIZE_URL`) so a local/staging deployment targets its
+     * own IdP instead of production.
+     */
+    authorizeBaseUrl?: string;
+    /**
+     * Who owns this app's session.
+     *
+     * - `'account'` (default) — the device's ACTIVE account. Every ordinary Oxy
+     *   app: any app sharing the device's `DeviceSession` can switch the active
+     *   account and this one follows, sign-in surfaces and the account switcher
+     *   are available, and `accounts` lists the account graph.
+     * - `'identity'` — the owner of this device's PRIMARY identity key, for as
+     *   long as that key exists. The provider pins its authenticated user AND
+     *   its bearer to the account that key authenticates as, so an account
+     *   switch made by any sibling app changes the shared device state but never
+     *   this app's user or token. Built for the identity vault (Commons).
+     *
+     * In `'identity'` mode the account-graph surfaces are disabled at the source
+     * rather than hidden in the UI: `accounts` stays empty and is never fetched,
+     * `switchToAccount` / `switchSession` reject with `IdentityBoundSessionError`,
+     * `accountDialogController` is `null` and `openAccountDialog()` does nothing,
+     * and the web OAuth cold-boot lane (the authorization-code return leg) is
+     * skipped — it commits whichever account the IdP resolves, which is not
+     * necessarily the local key's owner.
+     *
+     * Read once at mount, like `baseURL` / `oxyServices`: changing it on a
+     * mounted provider does not re-bind the session.
+     * @default 'account'
+     */
+    sessionMode?: SessionMode;
+    /**
+     * How a WEB third-party "Sign in with Oxy" hands the user to the IdP.
+     *
+     * - `'popup'` (default) — a small `auth.oxy.so` window opened from the
+     *   user's click. The app stays MOUNTED and becomes authenticated without a
+     *   reload; the IdP delivers only the authorization code + `state` back to
+     *   the opener via `postMessage` (never a token, device secret, or PKCE
+     *   verifier). A blocked popup falls back to the redirect automatically.
+     * - `'redirect'` — a full-page navigation to `auth.oxy.so`, which returns to
+     *   the registered `redirect_uri` with `?code=`. The tab unmounts and
+     *   remounts, so route and unsaved state are lost.
+     *
+     * Either way the navigation only ever happens from a real user gesture: the
+     * SDK never bounces the top-level window on its own (#691 phase 7b).
+     *
+     * Native is unaffected — it always uses an in-app auth session.
+     * @default 'popup'
+     */
+    webAuthMode?: WebAuthMode;
+    queryClient?: QueryClient;
+    /**
+     * Convenience: wrap the whole app subtree in `<RequireOxyAuth prompt=...>`.
+     * `off` (default) renders children unconditionally; `soft` adds a dismissible
+     * sign-in banner while signed out; `hard` blocks the app behind the signed-out
+     * wall until the user signs in. For finer control, mount `RequireOxyAuth`
+     * yourself around a specific subtree instead.
+     * @default 'off'
+     */
+    requireAuth?: 'off' | 'soft' | 'hard';
+}
+//# sourceMappingURL=navigation.d.ts.map

package/lib/typescript/module/ui/types/navigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../../../../src/ui/types/navigation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAsB,CAAC;AAEtD,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAgB,CAAC;AAElD,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,MAAM,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAE5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACxE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAGrC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAGlC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACrD,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAGjE,aAAa,CAAC,EAAE,SAAS,CAAC;IAG1B,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAGnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IAMtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;CACzC"}

package/lib/typescript/module/ui/types/surfaceScreen.d.ts

@@ -0,0 +1,38 @@
+import type { RouteName } from '../navigation/routes.js';
+import type { SurfaceProps, SurfaceResult } from '../navigation/surfaceRegistry.js';
+/**
+ * The typed prop contract a screen receives when it is bound into an SDK surface.
+ *
+ * This is the successor to the grab-bag `BaseScreenProps`: `props` carries the
+ * route's own {@link SurfaceProps typed props}, and the navigation methods are
+ * split along the two axes the surface system models — NAV-WITHIN
+ * (`navigate`/`replace`/`goBack`/`step`) inside this surface, and DEPTH
+ * (`present`/`dismiss`) across the stack.
+ *
+ * In P1 the ~35 screens still consume the legacy `BaseScreenProps` shape (the
+ * `SurfaceScreen` binding passes a superset that satisfies both), so this type is
+ * the target contract for the per-screen migration in a later phase — it is not
+ * yet the render-time prop shape for existing screens.
+ */
+export interface SurfaceScreenProps<K extends RouteName> {
+    /** The route's typed props (from the {@link SurfaceProps registry}). */
+    props: SurfaceProps<K>;
+    /** Drill in to another route — WITHIN this surface, or a new surface if the
+     * target's presentation differs. */
+    navigate: <T extends RouteName>(route: T, props?: SurfaceProps<T>) => void;
+    /** Replace the current route in place (no history entry). */
+    replace: <T extends RouteName>(route: T, props?: SurfaceProps<T>) => void;
+    /** Pop one level; if at the root, dismiss the surface. */
+    goBack: () => void;
+    /** Whether a back is possible (a deeper route OR a prior wizard step). */
+    canGoBack: () => boolean;
+    /** Dismiss THIS surface, resolving its `present()` promise with `result`. */
+    dismiss: (result?: SurfaceResult<K>) => void;
+    /** Present a NEW surface on top of the stack (DEPTH); resolves with its result. */
+    present: <T extends RouteName>(route: T, props?: SurfaceProps<T>) => Promise<SurfaceResult<T> | undefined>;
+    /** The current wizard step of this frame. */
+    step: number;
+    /** Set the current wizard step. */
+    setStep: (step: number) => void;
+}
+//# sourceMappingURL=surfaceScreen.d.ts.map

package/lib/typescript/module/ui/types/surfaceScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surfaceScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/types/surfaceScreen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kCAA+B,CAAC;AAEjF;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,SAAS;IACrD,wEAAwE;IACxE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACvB;wCACoC;IACpC,QAAQ,EAAE,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC3E,6DAA6D;IAC7D,OAAO,EAAE,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC1E,0DAA0D;IAC1D,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,6EAA6E;IAC7E,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC7C,mFAAmF;IACnF,OAAO,EAAE,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3G,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC"}

package/lib/typescript/module/ui/utils/avatarUtils.d.ts

@@ -0,0 +1,24 @@
+import type { OxyServices, User } from '@oxyhq/core';
+import type { UserProfileUpdate } from '@oxyhq/contracts';
+import type { QueryClient } from '@tanstack/react-query';
+/**
+ * Refreshes avatar in accountStore with cache-busted URL to force image reload.
+ *
+ * @param sessionId - The session ID for the account to update
+ * @param avatarFileId - The new avatar file ID
+ * @param oxyServices - OxyServices instance to generate download URL
+ */
+export declare function refreshAvatarInStore(sessionId: string, avatarFileId: string, oxyServices: OxyServices): void;
+/**
+ * Updates user profile with avatar and handles all side effects (query invalidation, accountStore update).
+ * This function can be used from within OxyContext provider without requiring useOxy hook.
+ *
+ * @param updates - Profile updates including avatar
+ * @param oxyServices - OxyServices instance
+ * @param activeSessionId - Active session ID
+ * @param queryClient - TanStack Query client
+ * @param syncSession - Optional function to sync session/refresh token when auth errors occur
+ * @returns Promise that resolves with updated user data
+ */
+export declare function updateProfileWithAvatar(updates: UserProfileUpdate, oxyServices: OxyServices, activeSessionId: string | null, queryClient: QueryClient, syncSession?: () => Promise<User>): Promise<User>;
+//# sourceMappingURL=avatarUtils.d.ts.map

package/lib/typescript/module/ui/utils/avatarUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatarUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/avatarUtils.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGzD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,WAAW,GACvB,IAAI,CAON;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,WAAW,EAAE,WAAW,EACxB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/lib/typescript/module/ui/utils/colorUtils.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Color Utility Functions
+ *
+ * Re-exports from shared module for cleaner internal imports.
+ * External consumers should use '@oxyhq/services/shared' directly.
+ *
+ * @module ui/utils/colorUtils
+ */
+export { darkenColor, lightenColor, hexToRgb, rgbToHex, withOpacity, isLightColor, getContrastTextColor, } from '@oxyhq/core';
+//# sourceMappingURL=colorUtils.d.ts.map

package/lib/typescript/module/ui/utils/colorUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"colorUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/colorUtils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,oBAAoB,GACrB,MAAM,aAAa,CAAC"}

package/lib/typescript/module/ui/utils/commonsStoreLinks.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Where to send a user who doesn't have Commons installed yet.
+ *
+ * Commons is not published to either app store as of this writing (no submit
+ * profile in its `eas.json`, no store listing) — so these are ALWAYS
+ * env-overridable and NEVER hardcoded, and the landing-page fallback exists
+ * precisely so a "Get Commons" affordance is never a dead link in the
+ * meantime. Once Commons ships to TestFlight/Play, set the two store env vars
+ * and every consumer picks them up with no code change.
+ */
+/** Real per-platform store URLs, or `undefined` where not yet configured. */
+export interface CommonsStoreLinks {
+    ios: string | undefined;
+    android: string | undefined;
+}
+/** Per-platform Commons store URLs, from env — `undefined` when unset. */
+export declare function getCommonsStoreLinks(): CommonsStoreLinks;
+/**
+ * Resolve the "Get Commons" href for the current platform. Never `undefined`
+ * — falls back to a landing page so the affordance is always a working link,
+ * store listing or not.
+ */
+export declare function getCommonsAcquisitionUrl(platformOS: 'ios' | 'android' | string): string;
+//# sourceMappingURL=commonsStoreLinks.d.ts.map

package/lib/typescript/module/ui/utils/commonsStoreLinks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commonsStoreLinks.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/commonsStoreLinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,IAAI,iBAAiB,CAKxD;AAKD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAIvF"}

package/lib/typescript/module/ui/utils/deliveryPlatform.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Classify the surface a "Sign in with Oxy" request is initiated from, for
+ * `AccountDialogController`'s `platform` option (issue #691, Phase 4/5).
+ *
+ * `@oxyhq/core` deliberately refuses to do this itself — it never touches a
+ * platform global — so the consumer that OWNS the environment classifies it and
+ * hands the verdict in. The verdict feeds `selectCommonsDelivery`, where it
+ * decides one thing only: whether this device may take the `'open-commons'`
+ * deep-link route. Getting it wrong in the "mobile" direction is the costly
+ * error (a custom-scheme navigation that does not resolve is a dead end with no
+ * automatic way back), so every ambiguous signal resolves AWAY from `'mobile'`.
+ *
+ * No user-agent string is parsed. The two signals used are declarative and
+ * standardized:
+ *   1. `navigator.userAgentData.mobile` — the User-Agent Client Hints boolean.
+ *      Authoritative where implemented (Chromium), in both directions.
+ *   2. The PRIMARY pointer (`(pointer: coarse)`) plus a touch digitizer.
+ *      A phone/tablet reports a coarse primary pointer; a touchscreen laptop
+ *      still reports its mouse as primary, so it is not misclassified.
+ */
+import type { CommonsDeliveryPlatform } from '@oxyhq/core';
+/**
+ * Which surface this app is running on, as `selectCommonsDelivery` models it.
+ *
+ *  - Native (Expo/RN) is always `'mobile'`: it is an Oxy app installed on a
+ *    phone/tablet, exactly the case where a verified Commons link can resolve
+ *    on this very device.
+ *  - A web browser is classified from the signals above.
+ *  - Anything else — a browser-like environment with neither signal — is
+ *    `'unknown'`, a first-class value that never opts into the deep link.
+ */
+export declare function resolveDeliveryPlatform(): CommonsDeliveryPlatform;
+//# sourceMappingURL=deliveryPlatform.d.ts.map

package/lib/typescript/module/ui/utils/deliveryPlatform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveryPlatform.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/deliveryPlatform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAiB3D;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,IAAI,uBAAuB,CAgBjE"}

package/lib/typescript/module/ui/utils/deviceCredential.d.ts

@@ -0,0 +1,8 @@
+import type { AuthStateStore } from '@oxyhq/core';
+/** True when the persisted store holds a device credential. */
+export declare function hasPersistedDeviceCredential(store: AuthStateStore): Promise<boolean>;
+export declare function loadPersistedDeviceCredential(store: AuthStateStore): Promise<{
+    deviceId: string;
+    deviceSecret: string;
+} | null>;
+//# sourceMappingURL=deviceCredential.d.ts.map

package/lib/typescript/module/ui/utils/deviceCredential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceCredential.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/deviceCredential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,+DAA+D;AAC/D,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAG1F;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAM5D"}

package/lib/typescript/module/ui/utils/errorHandlers.d.ts

@@ -0,0 +1,35 @@
+import type { ApiError } from '@oxyhq/core';
+export interface HandleAuthErrorOptions {
+    defaultMessage: string;
+    code: string;
+    status?: number;
+    onError?: (error: ApiError) => void;
+    setAuthError?: (message: string) => void;
+    logger?: (message: string, error?: unknown) => void;
+}
+/**
+ * Determine whether the error represents an invalid session condition.
+ * This centralizes 401 detection across different fetch clients.
+ */
+export declare const isInvalidSessionError: (error: unknown) => boolean;
+/**
+ * Determine whether the error represents a timeout or network error.
+ * These are expected when the device is offline or has poor connectivity.
+ */
+export declare const isTimeoutOrNetworkError: (error: unknown) => boolean;
+/**
+ * Extract a consistent error message from unknown error shapes.
+ *
+ * @param error - The unknown error payload
+ * @param fallbackMessage - Message to return when no concrete message is available
+ */
+export declare const extractErrorMessage: (error: unknown, fallbackMessage?: string) => string;
+/**
+ * Centralized error handler for auth-related operations.
+ *
+ * @param error - Unknown error object
+ * @param options - Error handling configuration
+ * @returns Resolved error message
+ */
+export declare const handleAuthError: (error: unknown, { defaultMessage, code, status, onError, setAuthError, logger, }: HandleAuthErrorOptions) => string;
+//# sourceMappingURL=errorHandlers.d.ts.map

package/lib/typescript/module/ui/utils/errorHandlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandlers.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/errorHandlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAgB5C,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IACpC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CACrD;AAkBD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,KAAG,OA4BtD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,GAAI,OAAO,OAAO,KAAG,OA0CxD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,OAAO,OAAO,EACd,wBAAoC,KACnC,MAuBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO,OAAO,EACd,kEAOG,sBAAsB,KACxB,MAiBF,CAAC"}

package/lib/typescript/module/ui/utils/fileManagement.d.ts

@@ -0,0 +1,55 @@
+import type Ionicons from "@expo/vector-icons/Ionicons";
+import type { AssetUploadInput, RNFileDescriptor } from "@oxyhq/core";
+import type { ComponentProps } from "react";
+/**
+ * Extended File interface that includes a `uri` property for mobile preview support.
+ * React Native file pickers return URI-based references that need to be preserved
+ * on the File object for preview rendering.
+ */
+interface FileWithUri extends File {
+    uri?: string;
+}
+/**
+ * Picker descriptor as returned by expo-document-picker / expo-image-picker.
+ * Carries enough info to either build a web `File` from the URI or pass the
+ * descriptor straight to FormData on React Native.
+ */
+export interface PickerAsset {
+    file?: File | Blob;
+    uri?: string;
+    name?: string | null;
+    mimeType?: string | null;
+    size?: number | null;
+}
+/**
+ * Type guard — returns true if the input is a React Native file descriptor
+ * (carries a URI but is not a real DOM `File` / `Blob` instance).
+ */
+export declare function isRNFileDescriptor(input: unknown): input is RNFileDescriptor;
+/**
+ * Format file size in bytes to human-readable string
+ */
+export declare function formatFileSize(bytes: number): string;
+/**
+ * Get icon name for file based on content type
+ */
+export declare function getFileIcon(contentType: string): ComponentProps<typeof Ionicons>["name"];
+/**
+ * Convert a document/image picker asset into a value that
+ * `OxyServices.assetUpload` can accept.
+ *
+ * - On the web, builds a real `File` (with the `uri` field preserved for
+ *   preview rendering) by fetching the asset as a Blob.
+ * - On React Native (iOS/Android), returns the picker descriptor directly
+ *   ({ uri, type, name, size }). RN's `FormData` reads the file from disk
+ *   during the multipart upload — no in-JS Blob conversion needed. Attempting
+ *   to wrap an ArrayBuffer in a Blob fails on Hermes ("Creating blobs from
+ *   'ArrayBuffer' and 'ArrayBufferView' are not supported").
+ */
+export declare function convertDocumentPickerAssetToFile(doc: PickerAsset, index: number): Promise<FileWithUri | RNFileDescriptor | null>;
+/**
+ * Upload file raw - helper function for file uploads
+ */
+export declare function uploadFileRaw(file: AssetUploadInput, userId: string, oxyServices: any, visibility?: "private" | "public" | "unlisted"): Promise<any>;
+export {};
+//# sourceMappingURL=fileManagement.d.ts.map

package/lib/typescript/module/ui/utils/fileManagement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileManagement.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/fileManagement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,6BAA6B,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAG5C;;;;GAIG;AACH,UAAU,WAAY,SAAQ,IAAI;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAO5E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAC1B,WAAW,EAAE,MAAM,GACjB,cAAc,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAYzC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gCAAgC,CACrD,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAuEhD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAClC,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,EAEd,WAAW,EAAE,GAAG,EAChB,UAAU,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,gBAG9C"}

package/lib/typescript/module/ui/utils/iconNames.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Type-safe icon name utilities
+ *
+ * Provides centralized, typed icon name mappings to eliminate `as any` casts
+ * when using dynamic icon names with @expo/vector-icons.
+ */
+/**
+ * Profile field icons (MaterialCommunityIcons)
+ */
+export declare const PROFILE_FIELD_ICONS: {
+    readonly displayName: "account-outline";
+    readonly username: "at";
+    readonly email: "email-outline";
+    readonly bio: "text-box-outline";
+    readonly location: "map-marker-outline";
+    readonly links: "link-variant";
+    readonly website: "web";
+    readonly phone: "phone-outline";
+    readonly birthday: "cake-variant-outline";
+};
+export type ProfileFieldIconKey = keyof typeof PROFILE_FIELD_ICONS;
+/**
+ * Get icon name for a profile field
+ */
+export declare function getProfileFieldIcon(field: string): string;
+/**
+ * Settings section icons (MaterialCommunityIcons)
+ */
+export declare const SETTINGS_ICONS: {
+    readonly account: "account-cog-outline";
+    readonly privacy: "shield-account-outline";
+    readonly security: "lock-outline";
+    readonly notifications: "bell-outline";
+    readonly language: "translate";
+    readonly appearance: "palette-outline";
+    readonly storage: "folder-outline";
+    readonly help: "help-circle-outline";
+    readonly about: "information-outline";
+    readonly logout: "logout";
+};
+export type SettingsIconKey = keyof typeof SETTINGS_ICONS;
+/**
+ * Get icon name for a settings section
+ */
+export declare function getSettingsIcon(section: string): string;
+/**
+ * File type icons (MaterialCommunityIcons)
+ */
+export declare const FILE_TYPE_ICONS: {
+    readonly image: "image-outline";
+    readonly video: "video-outline";
+    readonly audio: "music-note-outline";
+    readonly document: "file-document-outline";
+    readonly pdf: "file-pdf-box";
+    readonly archive: "folder-zip-outline";
+    readonly code: "code-tags";
+    readonly spreadsheet: "file-excel-outline";
+    readonly presentation: "file-presentation-outline";
+    readonly text: "file-document-edit-outline";
+    readonly unknown: "file-outline";
+};
+export type FileTypeIconKey = keyof typeof FILE_TYPE_ICONS;
+/**
+ * Get icon name for a file type
+ */
+export declare function getFileTypeIcon(type: string): string;
+/**
+ * Action icons (Ionicons)
+ */
+export declare const ACTION_ICONS: {
+    readonly close: "close";
+    readonly back: "chevron-back";
+    readonly forward: "chevron-forward";
+    readonly add: "add";
+    readonly remove: "remove";
+    readonly delete: "trash-outline";
+    readonly edit: "pencil-outline";
+    readonly save: "checkmark";
+    readonly cancel: "close";
+    readonly search: "search-outline";
+    readonly filter: "filter-outline";
+    readonly sort: "swap-vertical-outline";
+    readonly refresh: "refresh-outline";
+    readonly share: "share-outline";
+    readonly copy: "copy-outline";
+    readonly download: "download-outline";
+    readonly upload: "cloud-upload-outline";
+};
+export type ActionIconKey = keyof typeof ACTION_ICONS;
+/**
+ * Get icon name for an action
+ */
+export declare function getActionIcon(action: string): string;
+/**
+ * Status icons (Ionicons)
+ */
+export declare const STATUS_ICONS: {
+    readonly success: "checkmark-circle";
+    readonly error: "alert-circle";
+    readonly warning: "warning";
+    readonly info: "information-circle";
+    readonly loading: "hourglass-outline";
+    readonly pending: "time-outline";
+    readonly online: "ellipse";
+    readonly offline: "ellipse-outline";
+};
+export type StatusIconKey = keyof typeof STATUS_ICONS;
+/**
+ * Get icon name for a status
+ */
+export declare function getStatusIcon(status: string): string;
+//# sourceMappingURL=iconNames.d.ts.map

package/lib/typescript/module/ui/utils/iconNames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iconNames.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/iconNames.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;CAUtB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAEnE;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;CAWjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,cAAc,CAAC;AAE1D;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;CAYlB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,eAAe,CAAC;AAE3D;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;CAkBf,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,YAAY,CAAC;AAEtD;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;CASf,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,YAAY,CAAC;AAEtD;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/lib/typescript/module/ui/utils/isWebBrowser.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Web-browser detection for `@oxyhq/services`.
+ *
+ * The predicate now lives ONCE in `@oxyhq/core` (`isWebBrowser`) so services and
+ * auth-sdk share the exact same DOM probe. This module re-exposes it under the
+ * existing internal import path so consumers stay unchanged.
+ */
+export { isWebBrowser } from '@oxyhq/core';
+//# sourceMappingURL=isWebBrowser.d.ts.map

package/lib/typescript/module/ui/utils/isWebBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isWebBrowser.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/isWebBrowser.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/lib/typescript/module/ui/utils/netConnectivity.d.ts

@@ -0,0 +1,17 @@
+export interface NetInfoLikeState {
+    isConnected: boolean | null;
+    isInternetReachable?: boolean | null;
+}
+/**
+ * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
+ * reports connected but explicitly unreachable (captive portal, no route) counts
+ * as offline.
+ */
+export declare function isNetConnectivityOnline(state: NetInfoLikeState): boolean;
+/**
+ * Conservative offline verdict for boot-path probes. Unknown / probing states
+ * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
+ * skips a real sign-in.
+ */
+export declare function isNetConnectivityExplicitlyOffline(state: NetInfoLikeState | null | undefined): boolean;
+//# sourceMappingURL=netConnectivity.d.ts.map

package/lib/typescript/module/ui/utils/netConnectivity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"netConnectivity.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/netConnectivity.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAExE;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GACzC,OAAO,CAKT"}

package/lib/typescript/module/ui/utils/oauthReturn.d.ts

@@ -0,0 +1,48 @@
+import type { OxyServices } from '@oxyhq/core';
+import type { OAuthSessionCommitInput } from '../oauth/types.js';
+/**
+ * When the RP lands with `?code=` after signing in at auth.oxy.so, exchange the
+ * code for a device-first session before cold boot runs.
+ *
+ * This is the REDIRECT transport's return leg. The SDK never starts a full-page
+ * authorize navigation on its own any more (#691 phase 7b), but this lane is
+ * still load-bearing: a browser-BLOCKED sign-in popup falls back to a full-page
+ * redirect (`startWebOAuthSignIn`), and that redirect comes back here.
+ *
+ * It owns only what is specific to a full-page round trip — reading the code off
+ * the URL, recovering the handshake `sessionStorage` carried across the
+ * navigation, and cleaning both up afterwards — and delegates state validation,
+ * the PKCE exchange, and the session commit to `completeOAuthCode`, the same
+ * function the popup transport runs.
+ *
+ * It is also the SINGLE cleanup path for an OAuth `error` landing on the URL:
+ * any `?error=…` (including an `error=login_required` left over from the
+ * now-deleted silent restore) is stripped along with `state` /
+ * `error_description`, and the stale PKCE handshake is cleared.
+ */
+export declare function tryCompleteOAuthReturn(opts: {
+    oxyServices: OxyServices;
+    clientId?: string | null;
+    authRedirectUri?: string;
+    commitSession: (input: OAuthSessionCommitInput) => Promise<void>;
+}): Promise<boolean>;
+/**
+ * Rewrite the address bar after an authorize round trip, and tell the router.
+ *
+ * Prefers the page the visit started on (see `persistOAuthReturnPath`) over the
+ * bare origin the IdP redirected to, falling back to `fallbackUrl` when nothing
+ * was recorded.
+ *
+ * The `popstate` dispatch is the load-bearing part. `history.replaceState`
+ * fires no event, and cold boot runs *inside* the mounted app — by the time
+ * this executes, a history-based router (React Router, Vue Router, …) has
+ * already read `location` and rendered the route for `/`. Without a
+ * notification the address bar would show the restored deep link while the page
+ * still displayed the home page. `popstate` is the event the History API
+ * defines for exactly this, and it is what those routers subscribe to.
+ *
+ * Only dispatched when the URL actually changed, so the common no-op case does
+ * not push a spurious event at every listener on the page.
+ */
+export declare function replaceUrlAfterOAuthReturn(fallbackUrl: string): void;
+//# sourceMappingURL=oauthReturn.d.ts.map

package/lib/typescript/module/ui/utils/oauthReturn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthReturn.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/oauthReturn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS/C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAgB,CAAC;AAG9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE,GAAG,OAAO,CAAC,OAAO,CAAC,CA6CnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAuBpE"}