@oxyhq/services 24.0.0 → 24.0.2

package/lib/module/ui/session/backgroundSession.js

@@ -27,12 +27,16 @@
  * live in different stores with one writer each, so there is nothing to keep in
  * lockstep and no state that can disagree.
  *
- * Android only. `requireOptionalNativeModule` resolves `null` on web and on any
- * app that does not ship the native module, and every function here degrades to a
- * no-op in that case — so an app can enable this and lose nothing on other
- * platforms.
+ * ## Android only, and web is refused rather than merely unsupported
+ *
+ * Web is gated off by an explicit platform check, not by the native module being
+ * absent — provisioning in a browser origin would be a security downgrade, so it
+ * must not depend on an incidental fact. See {@link loadNativeModule}. iOS has no
+ * implementation yet and resolves to no module, so every function here degrades to
+ * a no-op: an app can enable this and lose nothing on other platforms.
  */
 import { requireOptionalNativeModule } from 'expo-modules-core';
+import { Platform } from 'react-native';
 import { logger } from '@oxyhq/core';
 
 /**
@@ -52,7 +56,30 @@ const RENEW_WHEN_REMAINING_MS = 7 * 24 * 60 * 60 * 1000;
 let nativeModule;
 
 /**
- * Resolve the native module once.
+ * Resolve the native module once — and refuse outright on web.
+ *
+ * ## Web is excluded on purpose, and not merely because the module is absent
+ *
+ * The credential is deliberately NON-ROTATING and long-lived, which is safe only
+ * because native background code is its sole consumer and nobody rotates it. A
+ * browser origin already holds the ROTATING `deviceSecret`, and it has no
+ * background worker to serve — so provisioning there would add a strictly weaker
+ * long-lived secret alongside a stronger short-lived one. That is a downgrade, not
+ * a harmless no-op, and the harm lands at the PROVISION CALL (which mints a live
+ * server-side credential) regardless of whether anything manages to store it.
+ *
+ * That property must not rest on `requireOptionalNativeModule` happening to return
+ * `null` on web. It does today — the module is registered for android only — but
+ * that is an incidental fact a future web shim or a web-build native-module mock
+ * would quietly reverse. So the platform is checked FIRST, before we even ask the
+ * registry, and every entry point in this module inherits the gate.
+ *
+ * (A pre-deploy server makes this visible too: oxy-api's `sessionDevice` router
+ * applies `requireSameSiteOrigin` path-agnostically, so an unmatched path answers
+ * `404` to a native caller but `403 BAD_ORIGIN` to a browser one. Core's degrade is
+ * deliberately narrow — `404 → null` only — because a real origin misconfiguration
+ * on a CURRENT server also returns 403, and swallowing that would hide a genuine
+ * bug. Platform gating belongs here, where the platform is actually known.)
  *
  * `requireOptionalNativeModule` (a static import Metro always resolves) rather
  * than a dynamic `import(moduleName)`: the latter compiles to `require(variable)`
@@ -62,6 +89,10 @@ let nativeModule;
  */
 function loadNativeModule() {
   if (nativeModule === undefined) {
+    if (Platform.OS === 'web') {
+      nativeModule = null;
+      return nativeModule;
+    }
     const native = requireOptionalNativeModule('OxyBackgroundSession');
     nativeModule = native && typeof native.put === 'function' && typeof native.clear === 'function' && typeof native.peek === 'function' ? {
       put: native.put.bind(native),
@@ -205,13 +236,7 @@ export async function syncBackgroundSession(input) {
       });
       return;
     }
-    const persisted = await native.put({
-      baseUrl: oxyServices.getBaseURL(),
-      deviceId: provisioned.deviceId,
-      secret: provisioned.secret,
-      accountId: provisioned.accountId,
-      expiresAt
-    });
+    const persisted = await native.put(oxyServices.getBaseURL(), provisioned.deviceId, provisioned.secret, provisioned.accountId, expiresAt);
     if (!persisted) {
       logger.warn('[backgroundSession] the native store did not retain the background credential; background refreshes stay signed out until the next attempt', {
         component: 'backgroundSession'

package/lib/module/ui/session/backgroundSession.js.map

@@ -1 +1 @@
-{"version":3,"names":["requireOptionalNativeModule","logger","RENEW_WHEN_REMAINING_MS","nativeModule","loadNativeModule","undefined","native","put","clear","peek","bind","isBackgroundSessionSupported","clearBackgroundSession","error","warn","component","assertProvisioningAvailable","oxyServices","provisionBackgroundCredential","message","Error","syncBackgroundSession","input","userId","canUsePrivateApi","isCurrent","stored","accountId","isForCurrentAccount","hasLifeLeft","expiresAt","Date","now","provisioned","parse","Number","isFinite","persisted","baseUrl","getBaseURL","deviceId","secret"],"sourceRoot":"../../../../src","sources":["ui/session/backgroundSession.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,2BAA2B,QAAQ,mBAAmB;AAE/D,SAASC,MAAM,QAAQ,aAAa;;AAEpC;AACA;AACA;AACA;AACA;;AAiBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAEvD,IAAIC,YAAiE;;AAErE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,gBAAgBA,CAAA,EAA4C;EACnE,IAAID,YAAY,KAAKE,SAAS,EAAE;IAC9B,MAAMC,MAAM,GAAGN,2BAA2B,CACxC,sBACF,CAAC;IACDG,YAAY,GACVG,MAAM,IACN,OAAOA,MAAM,CAACC,GAAG,KAAK,UAAU,IAChC,OAAOD,MAAM,CAACE,KAAK,KAAK,UAAU,IAClC,OAAOF,MAAM,CAACG,IAAI,KAAK,UAAU,GAC7B;MACEF,GAAG,EAAED,MAAM,CAACC,GAAG,CAACG,IAAI,CAACJ,MAAM,CAAC;MAC5BE,KAAK,EAAEF,MAAM,CAACE,KAAK,CAACE,IAAI,CAACJ,MAAM,CAAC;MAChCG,IAAI,EAAEH,MAAM,CAACG,IAAI,CAACC,IAAI,CAACJ,MAAM;IAC/B,CAAC,GACD,IAAI;EACZ;EACA,OAAOH,YAAY;AACrB;;AAEA;AACA,OAAO,SAASQ,4BAA4BA,CAAA,EAAY;EACtD,OAAOP,gBAAgB,CAAC,CAAC,KAAK,IAAI;AACpC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeQ,sBAAsBA,CAAA,EAAkB;EAC5D,MAAMN,MAAM,GAAGF,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACE,MAAM,EAAE;IACX;EACF;EACA,IAAI;IACF,MAAMA,MAAM,CAACE,KAAK,CAAC,CAAC;EACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;IACdZ,MAAM,CAACa,IAAI,CAAC,sEAAsE,EAAE;MAClFC,SAAS,EAAE,mBAAmB;MAC9BF;IACF,CAAC,CAAC;EACJ;AACF;AAgBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASG,2BAA2BA,CAACC,WAAwB,EAAQ;EACnE,IAAI,OAAOA,WAAW,CAACC,6BAA6B,KAAK,UAAU,EAAE;IACnE;EACF;EACA,MAAMC,OAAO,GACX,sFAAsF,GACtF,sFAAsF,GACtF,0FAA0F;EAC5FlB,MAAM,CAACY,KAAK,CAACM,OAAO,EAAEd,SAAS,EAAE;IAAEU,SAAS,EAAE;EAAoB,CAAC,CAAC;EACpE,MAAM,IAAIK,KAAK,CAACD,OAAO,CAAC;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeE,qBAAqBA,CAACC,KAAiC,EAAiB;EAC5F,MAAMhB,MAAM,GAAGF,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACE,MAAM,EAAE;IACX;EACF;EACA,MAAM;IAAEW,WAAW;IAAEM,MAAM;IAAEC,gBAAgB;IAAEC;EAAU,CAAC,GAAGH,KAAK;;EAElE;EACA;EACA;EACA,IAAIC,MAAM,EAAE;IACVP,2BAA2B,CAACC,WAAW,CAAC;EAC1C;EAEA,IAAI;IACF,IAAI,CAACM,MAAM,EAAE;MACX;MACA,MAAMjB,MAAM,CAACE,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMkB,MAAM,GAAG,MAAMpB,MAAM,CAACG,IAAI,CAAC,CAAC;IAClC,IAAIiB,MAAM,IAAIA,MAAM,CAACC,SAAS,KAAKJ,MAAM,EAAE;MACzC;MACA,MAAMjB,MAAM,CAACE,KAAK,CAAC,CAAC;IACtB;IAEA,MAAMoB,mBAAmB,GAAGF,MAAM,EAAEC,SAAS,KAAKJ,MAAM;IACxD,MAAMM,WAAW,GACfD,mBAAmB,IAAIF,MAAM,CAACI,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG9B,uBAAuB;IAChF,IAAI2B,WAAW,EAAE;MACf;IACF;;IAEA;IACA;IACA;IACA,IAAI,CAACL,gBAAgB,IAAI,CAACC,SAAS,CAAC,CAAC,EAAE;MACrC;IACF;IAEA,MAAMQ,WAAW,GAAG,MAAMhB,WAAW,CAACC,6BAA6B,CAAC,CAAC;IACrE,IAAI,CAACe,WAAW,EAAE;MAChB;MACA;MACA;IACF;IACA,IAAI,CAACR,SAAS,CAAC,CAAC,EAAE;MAChB;IACF;IACA,IAAIQ,WAAW,CAACN,SAAS,KAAKJ,MAAM,EAAE;MACpC;MACA;MACA;MACA,MAAMjB,MAAM,CAACE,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMsB,SAAS,GAAGC,IAAI,CAACG,KAAK,CAACD,WAAW,CAACH,SAAS,CAAC;IACnD,IAAI,CAACK,MAAM,CAACC,QAAQ,CAACN,SAAS,CAAC,EAAE;MAC/B7B,MAAM,CAACa,IAAI,CAAC,sEAAsE,EAAE;QAClFC,SAAS,EAAE;MACb,CAAC,CAAC;MACF;IACF;IAEA,MAAMsB,SAAS,GAAG,MAAM/B,MAAM,CAACC,GAAG,CAAC;MACjC+B,OAAO,EAAErB,WAAW,CAACsB,UAAU,CAAC,CAAC;MACjCC,QAAQ,EAAEP,WAAW,CAACO,QAAQ;MAC9BC,MAAM,EAAER,WAAW,CAACQ,MAAM;MAC1Bd,SAAS,EAAEM,WAAW,CAACN,SAAS;MAChCG;IACF,CAAC,CAAC;IACF,IAAI,CAACO,SAAS,EAAE;MACdpC,MAAM,CAACa,IAAI,CACT,4IAA4I,EAC5I;QAAEC,SAAS,EAAE;MAAoB,CACnC,CAAC;IACH;EACF,CAAC,CAAC,OAAOF,KAAK,EAAE;IACdZ,MAAM,CAACa,IAAI,CAAC,qEAAqE,EAAE;MACjFC,SAAS,EAAE,mBAAmB;MAC9BF;IACF,CAAC,CAAC;EACJ;AACF","ignoreList":[]}
+{"version":3,"names":["requireOptionalNativeModule","Platform","logger","RENEW_WHEN_REMAINING_MS","nativeModule","loadNativeModule","undefined","OS","native","put","clear","peek","bind","isBackgroundSessionSupported","clearBackgroundSession","error","warn","component","assertProvisioningAvailable","oxyServices","provisionBackgroundCredential","message","Error","syncBackgroundSession","input","userId","canUsePrivateApi","isCurrent","stored","accountId","isForCurrentAccount","hasLifeLeft","expiresAt","Date","now","provisioned","parse","Number","isFinite","persisted","getBaseURL","deviceId","secret"],"sourceRoot":"../../../../src","sources":["ui/session/backgroundSession.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,2BAA2B,QAAQ,mBAAmB;AAC/D,SAASC,QAAQ,QAAQ,cAAc;AAEvC,SAASC,MAAM,QAAQ,aAAa;;AAEpC;AACA;AACA;AACA;AACA;;AA+BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAEvD,IAAIC,YAAiE;;AAErE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,gBAAgBA,CAAA,EAA4C;EACnE,IAAID,YAAY,KAAKE,SAAS,EAAE;IAC9B,IAAIL,QAAQ,CAACM,EAAE,KAAK,KAAK,EAAE;MACzBH,YAAY,GAAG,IAAI;MACnB,OAAOA,YAAY;IACrB;IACA,MAAMI,MAAM,GAAGR,2BAA2B,CACxC,sBACF,CAAC;IACDI,YAAY,GACVI,MAAM,IACN,OAAOA,MAAM,CAACC,GAAG,KAAK,UAAU,IAChC,OAAOD,MAAM,CAACE,KAAK,KAAK,UAAU,IAClC,OAAOF,MAAM,CAACG,IAAI,KAAK,UAAU,GAC7B;MACEF,GAAG,EAAED,MAAM,CAACC,GAAG,CAACG,IAAI,CAACJ,MAAM,CAAC;MAC5BE,KAAK,EAAEF,MAAM,CAACE,KAAK,CAACE,IAAI,CAACJ,MAAM,CAAC;MAChCG,IAAI,EAAEH,MAAM,CAACG,IAAI,CAACC,IAAI,CAACJ,MAAM;IAC/B,CAAC,GACD,IAAI;EACZ;EACA,OAAOJ,YAAY;AACrB;;AAEA;AACA,OAAO,SAASS,4BAA4BA,CAAA,EAAY;EACtD,OAAOR,gBAAgB,CAAC,CAAC,KAAK,IAAI;AACpC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeS,sBAAsBA,CAAA,EAAkB;EAC5D,MAAMN,MAAM,GAAGH,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACG,MAAM,EAAE;IACX;EACF;EACA,IAAI;IACF,MAAMA,MAAM,CAACE,KAAK,CAAC,CAAC;EACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;IACdb,MAAM,CAACc,IAAI,CAAC,sEAAsE,EAAE;MAClFC,SAAS,EAAE,mBAAmB;MAC9BF;IACF,CAAC,CAAC;EACJ;AACF;AAgBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASG,2BAA2BA,CAACC,WAAwB,EAAQ;EACnE,IAAI,OAAOA,WAAW,CAACC,6BAA6B,KAAK,UAAU,EAAE;IACnE;EACF;EACA,MAAMC,OAAO,GACX,sFAAsF,GACtF,sFAAsF,GACtF,0FAA0F;EAC5FnB,MAAM,CAACa,KAAK,CAACM,OAAO,EAAEf,SAAS,EAAE;IAAEW,SAAS,EAAE;EAAoB,CAAC,CAAC;EACpE,MAAM,IAAIK,KAAK,CAACD,OAAO,CAAC;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeE,qBAAqBA,CAACC,KAAiC,EAAiB;EAC5F,MAAMhB,MAAM,GAAGH,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACG,MAAM,EAAE;IACX;EACF;EACA,MAAM;IAAEW,WAAW;IAAEM,MAAM;IAAEC,gBAAgB;IAAEC;EAAU,CAAC,GAAGH,KAAK;;EAElE;EACA;EACA;EACA,IAAIC,MAAM,EAAE;IACVP,2BAA2B,CAACC,WAAW,CAAC;EAC1C;EAEA,IAAI;IACF,IAAI,CAACM,MAAM,EAAE;MACX;MACA,MAAMjB,MAAM,CAACE,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMkB,MAAM,GAAG,MAAMpB,MAAM,CAACG,IAAI,CAAC,CAAC;IAClC,IAAIiB,MAAM,IAAIA,MAAM,CAACC,SAAS,KAAKJ,MAAM,EAAE;MACzC;MACA,MAAMjB,MAAM,CAACE,KAAK,CAAC,CAAC;IACtB;IAEA,MAAMoB,mBAAmB,GAAGF,MAAM,EAAEC,SAAS,KAAKJ,MAAM;IACxD,MAAMM,WAAW,GACfD,mBAAmB,IAAIF,MAAM,CAACI,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG/B,uBAAuB;IAChF,IAAI4B,WAAW,EAAE;MACf;IACF;;IAEA;IACA;IACA;IACA,IAAI,CAACL,gBAAgB,IAAI,CAACC,SAAS,CAAC,CAAC,EAAE;MACrC;IACF;IAEA,MAAMQ,WAAW,GAAG,MAAMhB,WAAW,CAACC,6BAA6B,CAAC,CAAC;IACrE,IAAI,CAACe,WAAW,EAAE;MAChB;MACA;MACA;IACF;IACA,IAAI,CAACR,SAAS,CAAC,CAAC,EAAE;MAChB;IACF;IACA,IAAIQ,WAAW,CAACN,SAAS,KAAKJ,MAAM,EAAE;MACpC;MACA;MACA;MACA,MAAMjB,MAAM,CAACE,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMsB,SAAS,GAAGC,IAAI,CAACG,KAAK,CAACD,WAAW,CAACH,SAAS,CAAC;IACnD,IAAI,CAACK,MAAM,CAACC,QAAQ,CAACN,SAAS,CAAC,EAAE;MAC/B9B,MAAM,CAACc,IAAI,CAAC,sEAAsE,EAAE;QAClFC,SAAS,EAAE;MACb,CAAC,CAAC;MACF;IACF;IAEA,MAAMsB,SAAS,GAAG,MAAM/B,MAAM,CAACC,GAAG,CAChCU,WAAW,CAACqB,UAAU,CAAC,CAAC,EACxBL,WAAW,CAACM,QAAQ,EACpBN,WAAW,CAACO,MAAM,EAClBP,WAAW,CAACN,SAAS,EACrBG,SACF,CAAC;IACD,IAAI,CAACO,SAAS,EAAE;MACdrC,MAAM,CAACc,IAAI,CACT,4IAA4I,EAC5I;QAAEC,SAAS,EAAE;MAAoB,CACnC,CAAC;IACH;EACF,CAAC,CAAC,OAAOF,KAAK,EAAE;IACdb,MAAM,CAACc,IAAI,CAAC,qEAAqE,EAAE;MACjFC,SAAS,EAAE,mBAAmB;MAC9BF;IACF,CAAC,CAAC;EACJ;AACF","ignoreList":[]}

package/lib/module/ui/session/useBackgroundSessionSync.js

@@ -33,11 +33,10 @@ export function useBackgroundSessionSync({
       return;
     }
     if (!enabled) {
-      // An app that turns the feature OFF must not leave a live credential at
-      // rest for the rest of its 30-day lifetime. The cost is one local store
-      // open per launch on Android apps that never use the feature, which is
-      // accepted deliberately: correct revocation is worth more than skipping a
-      // memoized keystore open.
+      // An app that leaves the feature off must not keep a credential THIS app
+      // provisioned earlier. The store is package-scoped (see
+      // OxyBackgroundSessionStore), so this cannot revoke a sibling Oxy app's
+      // credential under the shared UID.
       void clearBackgroundSession();
       return;
     }

package/lib/module/ui/session/useBackgroundSessionSync.js.map

@@ -1 +1 @@
-{"version":3,"names":["useEffect","AppState","clearBackgroundSession","isBackgroundSessionSupported","syncBackgroundSession","useBackgroundSessionSync","enabled","oxyServices","userId","canUsePrivateApi","current","run","isCurrent","subscription","addEventListener","state","remove"],"sourceRoot":"../../../../src","sources":["ui/session/useBackgroundSessionSync.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,SAAS,QAAQ,OAAO;AACjC,SAASC,QAAQ,QAAQ,cAAc;AAEvC,SACEC,sBAAsB,EACtBC,4BAA4B,EAC5BC,qBAAqB,QAChB,wBAAqB;AAY5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,wBAAwBA,CAAC;EACvCC,OAAO;EACPC,WAAW;EACXC,MAAM;EACNC;AAC6B,CAAC,EAAQ;EACtCT,SAAS,CAAC,MAAM;IACd,IAAI,CAACG,4BAA4B,CAAC,CAAC,EAAE;MACnC;IACF;IAEA,IAAI,CAACG,OAAO,EAAE;MACZ;MACA;MACA;MACA;MACA;MACA,KAAKJ,sBAAsB,CAAC,CAAC;MAC7B;IACF;;IAEA;IACA;IACA,IAAIQ,OAAO,GAAG,IAAI;IAClB;IACA;IACA;IACA;IACA;IACA,MAAMC,GAAG,GAAGA,CAAA,KAAM;MAChB,KAAKP,qBAAqB,CAAC;QACzBG,WAAW;QACXC,MAAM;QACNC,gBAAgB;QAChBG,SAAS,EAAEA,CAAA,KAAMF;MACnB,CAAC,CAAC;IACJ,CAAC;IAEDC,GAAG,CAAC,CAAC;IACL,MAAME,YAAY,GAAGZ,QAAQ,CAACa,gBAAgB,CAAC,QAAQ,EAAGC,KAAK,IAAK;MAClE,IAAIA,KAAK,KAAK,QAAQ,EAAE;QACtBJ,GAAG,CAAC,CAAC;MACP;IACF,CAAC,CAAC;IAEF,OAAO,MAAM;MACXD,OAAO,GAAG,KAAK;MACfG,YAAY,CAACG,MAAM,CAAC,CAAC;MACrB;MACA;MACA;MACA;IACF,CAAC;EACH,CAAC,EAAE,CAACV,OAAO,EAAEC,WAAW,EAAEC,MAAM,EAAEC,gBAAgB,CAAC,CAAC;AACtD","ignoreList":[]}
+{"version":3,"names":["useEffect","AppState","clearBackgroundSession","isBackgroundSessionSupported","syncBackgroundSession","useBackgroundSessionSync","enabled","oxyServices","userId","canUsePrivateApi","current","run","isCurrent","subscription","addEventListener","state","remove"],"sourceRoot":"../../../../src","sources":["ui/session/useBackgroundSessionSync.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,SAAS,QAAQ,OAAO;AACjC,SAASC,QAAQ,QAAQ,cAAc;AAEvC,SACEC,sBAAsB,EACtBC,4BAA4B,EAC5BC,qBAAqB,QAChB,wBAAqB;AAY5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,wBAAwBA,CAAC;EACvCC,OAAO;EACPC,WAAW;EACXC,MAAM;EACNC;AAC6B,CAAC,EAAQ;EACtCT,SAAS,CAAC,MAAM;IACd,IAAI,CAACG,4BAA4B,CAAC,CAAC,EAAE;MACnC;IACF;IAEA,IAAI,CAACG,OAAO,EAAE;MACZ;MACA;MACA;MACA;MACA,KAAKJ,sBAAsB,CAAC,CAAC;MAC7B;IACF;;IAEA;IACA;IACA,IAAIQ,OAAO,GAAG,IAAI;IAClB;IACA;IACA;IACA;IACA;IACA,MAAMC,GAAG,GAAGA,CAAA,KAAM;MAChB,KAAKP,qBAAqB,CAAC;QACzBG,WAAW;QACXC,MAAM;QACNC,gBAAgB;QAChBG,SAAS,EAAEA,CAAA,KAAMF;MACnB,CAAC,CAAC;IACJ,CAAC;IAEDC,GAAG,CAAC,CAAC;IACL,MAAME,YAAY,GAAGZ,QAAQ,CAACa,gBAAgB,CAAC,QAAQ,EAAGC,KAAK,IAAK;MAClE,IAAIA,KAAK,KAAK,QAAQ,EAAE;QACtBJ,GAAG,CAAC,CAAC;MACP;IACF,CAAC,CAAC;IAEF,OAAO,MAAM;MACXD,OAAO,GAAG,KAAK;MACfG,YAAY,CAACG,MAAM,CAAC,CAAC;MACrB;MACA;MACA;MACA;IACF,CAAC;EACH,CAAC,EAAE,CAACV,OAAO,EAAEC,WAAW,EAAEC,MAAM,EAAEC,gBAAgB,CAAC,CAAC;AACtD","ignoreList":[]}

package/lib/module/ui/utils/userUtils.js

@@ -4,12 +4,11 @@
  * User display name and date formatting utilities.
  *
  * Display-name helpers follow the API contract: prefer `name.displayName` when
- * present, otherwise fall back to the normalized handle. The legacy
- * `getAccountDisplayName` chain is only used as a last resort for local
- * account-switcher surfaces without a handle.
+ * present, otherwise fall back to the normalized handle via
+ * `getNormalizedUserHandle`.
  */
 
-import { getAccountDisplayName as coreGetAccountDisplayName, getNormalizedUserHandle } from '@oxyhq/core';
+import { getNormalizedUserHandle } from '@oxyhq/core';
 
 /**
  * Formats a date string to a readable format (e.g., "Feb 21, 2025")
@@ -37,37 +36,28 @@ function readDisplayName(user) {
 /**
  * Gets a display name from user data.
  *
- * Prefers API `name.displayName`, then the normalized handle, then the local
- * account-switcher fallback chain.
+ * Prefers API `name.displayName`, then the normalized handle.
  */
-export const getDisplayName = (user, locale) => {
+export const getDisplayName = user => {
   const displayName = readDisplayName(user);
   if (displayName) return displayName;
-  const handle = getNormalizedUserHandle(user);
-  if (handle) return handle;
-  return coreGetAccountDisplayName(user, locale);
+  return getNormalizedUserHandle(user) ?? '';
 };
 
 /**
  * Gets a short display name (first token) for compact UI.
  */
-export const getShortDisplayName = (user, locale) => {
+export const getShortDisplayName = user => {
   const displayName = readDisplayName(user);
   if (displayName) {
     const firstToken = displayName.split(/\s+/).find(Boolean);
     if (firstToken) return firstToken;
   }
-  const name = user?.name;
-  if (name && typeof name === 'object') {
-    const first = typeof name.first === 'string' ? name.first.trim() : '';
-    if (first) return first.split(/\s+/)[0] ?? first;
-    const full = typeof name.full === 'string' ? name.full.trim() : '';
-    if (full) return full.split(/\s+/)[0] ?? full;
-  } else if (typeof name === 'string' && name.trim()) {
-    return name.trim().split(/\s+/)[0] ?? name.trim();
-  }
   const handle = getNormalizedUserHandle(user);
-  if (handle) return handle;
-  return coreGetAccountDisplayName(user, locale);
+  if (handle) {
+    const firstToken = handle.split(/\s+/).find(Boolean);
+    return firstToken ?? handle;
+  }
+  return '';
 };
 //# sourceMappingURL=userUtils.js.map

package/lib/module/ui/utils/userUtils.js.map

@@ -1 +1 @@
-{"version":3,"names":["getAccountDisplayName","coreGetAccountDisplayName","getNormalizedUserHandle","formatDate","dateString","date","Date","Number","isNaN","getTime","toLocaleDateString","month","day","year","readDisplayName","user","name","displayName","trim","getDisplayName","locale","handle","getShortDisplayName","firstToken","split","find","Boolean","first","full"],"sourceRoot":"../../../../src","sources":["ui/utils/userUtils.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,qBAAqB,IAAIC,yBAAyB,EAClDC,uBAAuB,QAElB,aAAa;;AAEpB;AACA;AACA;AACA,OAAO,MAAMC,UAAU,GAAIC,UAA4C,IAAa;EAClF,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,IAAI;IACF,MAAMC,IAAI,GAAGD,UAAU,YAAYE,IAAI,GAAGF,UAAU,GAAG,IAAIE,IAAI,CAACF,UAAU,CAAC;IAC3E,IAAIG,MAAM,CAACC,KAAK,CAACH,IAAI,CAACI,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE;IAE3C,OAAOJ,IAAI,CAACK,kBAAkB,CAAC,OAAO,EAAE;MACtCC,KAAK,EAAE,OAAO;MACdC,GAAG,EAAE,SAAS;MACdC,IAAI,EAAE;IACR,CAAC,CAAC;EACJ,CAAC,CAAC,MAAM;IACN,OAAO,EAAE;EACX;AACF,CAAC;AAED,SAASC,eAAeA,CAACC,IAA6C,EAAU;EAC9E,MAAMC,IAAI,GAAGD,IAAI,EAAEC,IAAI;EACvB,IAAI,CAACA,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE,OAAO,EAAE;EAChD,OAAO,OAAOA,IAAI,CAACC,WAAW,KAAK,QAAQ,GAAGD,IAAI,CAACC,WAAW,CAACC,IAAI,CAAC,CAAC,GAAG,EAAE;AAC5E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,cAAc,GAAGA,CAC5BJ,IAA6C,EAC7CK,MAAe,KACJ;EACX,MAAMH,WAAW,GAAGH,eAAe,CAACC,IAAI,CAAC;EACzC,IAAIE,WAAW,EAAE,OAAOA,WAAW;EAEnC,MAAMI,MAAM,GAAGnB,uBAAuB,CAACa,IAAI,CAAC;EAC5C,IAAIM,MAAM,EAAE,OAAOA,MAAM;EAEzB,OAAOpB,yBAAyB,CAACc,IAAI,EAAEK,MAAM,CAAC;AAChD,CAAC;;AAED;AACA;AACA;AACA,OAAO,MAAME,mBAAmB,GAAGA,CACjCP,IAA6C,EAC7CK,MAAe,KACJ;EACX,MAAMH,WAAW,GAAGH,eAAe,CAACC,IAAI,CAAC;EACzC,IAAIE,WAAW,EAAE;IACf,MAAMM,UAAU,GAAGN,WAAW,CAACO,KAAK,CAAC,KAAK,CAAC,CAACC,IAAI,CAACC,OAAO,CAAC;IACzD,IAAIH,UAAU,EAAE,OAAOA,UAAU;EACnC;EAEA,MAAMP,IAAI,GAAGD,IAAI,EAAEC,IAAI;EACvB,IAAIA,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE;IACpC,MAAMW,KAAK,GAAG,OAAOX,IAAI,CAACW,KAAK,KAAK,QAAQ,GAAGX,IAAI,CAACW,KAAK,CAACT,IAAI,CAAC,CAAC,GAAG,EAAE;IACrE,IAAIS,KAAK,EAAE,OAAOA,KAAK,CAACH,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAIG,KAAK;IAChD,MAAMC,IAAI,GAAG,OAAOZ,IAAI,CAACY,IAAI,KAAK,QAAQ,GAAGZ,IAAI,CAACY,IAAI,CAACV,IAAI,CAAC,CAAC,GAAG,EAAE;IAClE,IAAIU,IAAI,EAAE,OAAOA,IAAI,CAACJ,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAII,IAAI;EAC/C,CAAC,MAAM,IAAI,OAAOZ,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACE,IAAI,CAAC,CAAC,EAAE;IAClD,OAAOF,IAAI,CAACE,IAAI,CAAC,CAAC,CAACM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAIR,IAAI,CAACE,IAAI,CAAC,CAAC;EACnD;EAEA,MAAMG,MAAM,GAAGnB,uBAAuB,CAACa,IAAI,CAAC;EAC5C,IAAIM,MAAM,EAAE,OAAOA,MAAM;EAEzB,OAAOpB,yBAAyB,CAACc,IAAI,EAAEK,MAAM,CAAC;AAChD,CAAC","ignoreList":[]}
+{"version":3,"names":["getNormalizedUserHandle","formatDate","dateString","date","Date","Number","isNaN","getTime","toLocaleDateString","month","day","year","readDisplayName","user","name","displayName","trim","getDisplayName","getShortDisplayName","firstToken","split","find","Boolean","handle"],"sourceRoot":"../../../../src","sources":["ui/utils/userUtils.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,uBAAuB,QAAmC,aAAa;;AAEhF;AACA;AACA;AACA,OAAO,MAAMC,UAAU,GAAIC,UAA4C,IAAa;EAClF,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,IAAI;IACF,MAAMC,IAAI,GAAGD,UAAU,YAAYE,IAAI,GAAGF,UAAU,GAAG,IAAIE,IAAI,CAACF,UAAU,CAAC;IAC3E,IAAIG,MAAM,CAACC,KAAK,CAACH,IAAI,CAACI,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE;IAE3C,OAAOJ,IAAI,CAACK,kBAAkB,CAAC,OAAO,EAAE;MACtCC,KAAK,EAAE,OAAO;MACdC,GAAG,EAAE,SAAS;MACdC,IAAI,EAAE;IACR,CAAC,CAAC;EACJ,CAAC,CAAC,MAAM;IACN,OAAO,EAAE;EACX;AACF,CAAC;AAED,SAASC,eAAeA,CAACC,IAA6C,EAAU;EAC9E,MAAMC,IAAI,GAAGD,IAAI,EAAEC,IAAI;EACvB,IAAI,CAACA,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE,OAAO,EAAE;EAChD,OAAO,OAAOA,IAAI,CAACC,WAAW,KAAK,QAAQ,GAAGD,IAAI,CAACC,WAAW,CAACC,IAAI,CAAC,CAAC,GAAG,EAAE;AAC5E;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,cAAc,GACzBJ,IAA6C,IAClC;EACX,MAAME,WAAW,GAAGH,eAAe,CAACC,IAAI,CAAC;EACzC,IAAIE,WAAW,EAAE,OAAOA,WAAW;EACnC,OAAOf,uBAAuB,CAACa,IAAI,CAAC,IAAI,EAAE;AAC5C,CAAC;;AAED;AACA;AACA;AACA,OAAO,MAAMK,mBAAmB,GAC9BL,IAA6C,IAClC;EACX,MAAME,WAAW,GAAGH,eAAe,CAACC,IAAI,CAAC;EACzC,IAAIE,WAAW,EAAE;IACf,MAAMI,UAAU,GAAGJ,WAAW,CAACK,KAAK,CAAC,KAAK,CAAC,CAACC,IAAI,CAACC,OAAO,CAAC;IACzD,IAAIH,UAAU,EAAE,OAAOA,UAAU;EACnC;EAEA,MAAMI,MAAM,GAAGvB,uBAAuB,CAACa,IAAI,CAAC;EAC5C,IAAIU,MAAM,EAAE;IACV,MAAMJ,UAAU,GAAGI,MAAM,CAACH,KAAK,CAAC,KAAK,CAAC,CAACC,IAAI,CAACC,OAAO,CAAC;IACpD,OAAOH,UAAU,IAAII,MAAM;EAC7B;EAEA,OAAO,EAAE;AACX,CAAC","ignoreList":[]}

package/lib/typescript/commonjs/ui/screens/ProfileScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAe3D,UAAU,kBAAmB,SAAQ,eAAe;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAoS/C,CAAC;AAuCF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"ProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAe3D,UAAU,kBAAmB,SAAQ,eAAe;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAkT/C,CAAC;AAuCF,eAAe,aAAa,CAAC"}

package/lib/typescript/commonjs/ui/session/backgroundSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backgroundSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/backgroundSession.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAgE/C,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AA8BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF5F"}
+{"version":3,"file":"backgroundSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/backgroundSession.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAyG/C,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AA8BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF5F"}

package/lib/typescript/commonjs/ui/session/useBackgroundSessionSync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBackgroundSessionSync.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/useBackgroundSessionSync.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,WAAW,6BAA6B;IAC5C,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,EAAE,6BAA6B,GAAG,IAAI,CAiDtC"}
+{"version":3,"file":"useBackgroundSessionSync.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/useBackgroundSessionSync.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,WAAW,6BAA6B;IAC5C,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,EAAE,6BAA6B,GAAG,IAAI,CAgDtC"}

package/lib/typescript/commonjs/ui/utils/userUtils.d.ts

@@ -2,9 +2,8 @@
  * User display name and date formatting utilities.
  *
  * Display-name helpers follow the API contract: prefer `name.displayName` when
- * present, otherwise fall back to the normalized handle. The legacy
- * `getAccountDisplayName` chain is only used as a last resort for local
- * account-switcher surfaces without a handle.
+ * present, otherwise fall back to the normalized handle via
+ * `getNormalizedUserHandle`.
  */
 import { type DisplayNameUserShape } from '@oxyhq/core';
 /**
@@ -14,12 +13,11 @@ export declare const formatDate: (dateString: string | undefined | null | Date)
 /**
  * Gets a display name from user data.
  *
- * Prefers API `name.displayName`, then the normalized handle, then the local
- * account-switcher fallback chain.
+ * Prefers API `name.displayName`, then the normalized handle.
  */
-export declare const getDisplayName: (user: DisplayNameUserShape | null | undefined, locale?: string) => string;
+export declare const getDisplayName: (user: DisplayNameUserShape | null | undefined) => string;
 /**
  * Gets a short display name (first token) for compact UI.
  */
-export declare const getShortDisplayName: (user: DisplayNameUserShape | null | undefined, locale?: string) => string;
+export declare const getShortDisplayName: (user: DisplayNameUserShape | null | undefined) => string;
 //# sourceMappingURL=userUtils.d.ts.map

package/lib/typescript/commonjs/ui/utils/userUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/userUtils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,YAAY,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,KAAG,MAezE,CAAC;AAQF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC7C,SAAS,MAAM,KACd,MAQF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAC9B,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC7C,SAAS,MAAM,KACd,MAqBF,CAAC"}
+{"version":3,"file":"userUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/userUtils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,YAAY,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,KAAG,MAezE,CAAC;AAQF;;;;GAIG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,KAC5C,MAIF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAC9B,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,KAC5C,MAcF,CAAC"}

package/lib/typescript/module/ui/screens/ProfileScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAe3D,UAAU,kBAAmB,SAAQ,eAAe;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAoS/C,CAAC;AAuCF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"ProfileScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/ProfileScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAqB,CAAC;AAe3D,UAAU,kBAAmB,SAAQ,eAAe;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAkT/C,CAAC;AAuCF,eAAe,aAAa,CAAC"}

package/lib/typescript/module/ui/session/backgroundSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backgroundSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/backgroundSession.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAgE/C,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AA8BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF5F"}
+{"version":3,"file":"backgroundSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/backgroundSession.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAyG/C,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AA8BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF5F"}

package/lib/typescript/module/ui/session/useBackgroundSessionSync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBackgroundSessionSync.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/useBackgroundSessionSync.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,WAAW,6BAA6B;IAC5C,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,EAAE,6BAA6B,GAAG,IAAI,CAiDtC"}
+{"version":3,"file":"useBackgroundSessionSync.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/useBackgroundSessionSync.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,WAAW,6BAA6B;IAC5C,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,EAAE,6BAA6B,GAAG,IAAI,CAgDtC"}

package/lib/typescript/module/ui/utils/userUtils.d.ts

@@ -2,9 +2,8 @@
  * User display name and date formatting utilities.
  *
  * Display-name helpers follow the API contract: prefer `name.displayName` when
- * present, otherwise fall back to the normalized handle. The legacy
- * `getAccountDisplayName` chain is only used as a last resort for local
- * account-switcher surfaces without a handle.
+ * present, otherwise fall back to the normalized handle via
+ * `getNormalizedUserHandle`.
  */
 import { type DisplayNameUserShape } from '@oxyhq/core';
 /**
@@ -14,12 +13,11 @@ export declare const formatDate: (dateString: string | undefined | null | Date)
 /**
  * Gets a display name from user data.
  *
- * Prefers API `name.displayName`, then the normalized handle, then the local
- * account-switcher fallback chain.
+ * Prefers API `name.displayName`, then the normalized handle.
  */
-export declare const getDisplayName: (user: DisplayNameUserShape | null | undefined, locale?: string) => string;
+export declare const getDisplayName: (user: DisplayNameUserShape | null | undefined) => string;
 /**
  * Gets a short display name (first token) for compact UI.
  */
-export declare const getShortDisplayName: (user: DisplayNameUserShape | null | undefined, locale?: string) => string;
+export declare const getShortDisplayName: (user: DisplayNameUserShape | null | undefined) => string;
 //# sourceMappingURL=userUtils.d.ts.map

package/lib/typescript/module/ui/utils/userUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/userUtils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,YAAY,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,KAAG,MAezE,CAAC;AAQF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC7C,SAAS,MAAM,KACd,MAQF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAC9B,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC7C,SAAS,MAAM,KACd,MAqBF,CAAC"}
+{"version":3,"file":"userUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/userUtils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,YAAY,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,KAAG,MAezE,CAAC;AAQF;;;;GAIG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,KAC5C,MAIF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAC9B,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,KAC5C,MAcF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/services",
-  "version": "24.0.0",
+  "version": "24.0.2",
   "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -148,7 +148,7 @@
     "@commitlint/cli": "^21.2.1",
     "@commitlint/config-conventional": "^21.2.0",
     "@expo/vector-icons": "^15.0.3",
-    "@oxyhq/core": "15.0.0",
+    "@oxyhq/core": "15.0.1",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": "^11.4.1",
     "@react-native/babel-preset": "^0.86.0",

package/src/ui/screens/ProfileScreen.tsx

@@ -135,8 +135,13 @@ const ProfileScreen: React.FC<ProfileScreenProps> = ({ userId, username, theme,
     // title (a stable "Profile" fallback before it resolves), so the banner +
     // overlapping avatar scroll as content UNDER the shared gradient nav bar.
     // `onImage` tone keeps the title + close legible over the colored banner.
+    // Ends in a string, deliberately: `getNormalizedUserHandle` answers `null` for a
+    // user it cannot normalise, and letting that null travel makes this `string | null`
+    // — which does not satisfy `Avatar.name` and does not typecheck. Empty is the honest
+    // bottom of the chain and every reader below already treats it as falsy
+    // (`displayName || t('profile.title')`), so nothing renders a literal "null".
     const displayName = profile
-        ? (profile.name?.displayName ?? getNormalizedUserHandle(profile))
+        ? (profile.name?.displayName ?? getNormalizedUserHandle(profile) ?? '')
         : username || '';
     useSurfaceHeader({
         title: displayName || t('profile.title'),
@@ -191,8 +196,17 @@ const ProfileScreen: React.FC<ProfileScreenProps> = ({ userId, username, theme,
                 <View style={styles.avatarRow} className="px-screen-margin">
                     <View style={styles.avatarWrapper} className="border-bg bg-bg rounded-radius-max">
                         <Avatar
-                            source={profile?.avatar ? oxyServices.getFileDownloadUrl(profile.avatar, 'thumb') : undefined}
-                            name={displayName || username}
+                            // `getFileDownloadUrl` answers `null` for a reference it cannot
+                            // resolve, and `Avatar.source` takes `undefined` for "no picture" —
+                            // the two spellings of absent do not meet, so the coalesce is the
+                            // whole fix. Without it this file does not typecheck, which blocks
+                            // `bun run build` and therefore every publish of this package.
+                            source={
+                                profile?.avatar
+                                    ? (oxyServices.getFileDownloadUrl(profile.avatar, 'thumb') ?? undefined)
+                                    : undefined
+                            }
+                            name={displayName}
                             size={AVATAR_SIZE}
                         />
                     </View>

package/src/ui/session/__tests__/backgroundSession.test.ts

@@ -56,12 +56,20 @@ function fakeOxy(
  * Re-import the module per test: it memoises the resolved native module, which is
  * correct in production (one resolution per process) and must not leak between
  * cases here.
+ *
+ * `platform` is explicit because the react-native stub defaults `Platform.OS` to
+ * `'web'`, where this feature is gated OFF by design. Every case therefore has to
+ * say which platform it is describing — defaulting to `'android'` here, since that
+ * is the only platform the feature ships on.
  */
-async function loadModule(native: NativeCalls | null) {
+async function loadModule(native: NativeCalls | null, platform: 'android' | 'web' = 'android') {
   jest.resetModules();
+  requireOptionalNativeModule.mockClear();
   requireOptionalNativeModule.mockReturnValue(
     native ? { put: native.put, clear: native.clear, peek: native.peek } : null,
   );
+  const { Platform } = await import('react-native');
+  Platform.OS = platform;
   return import('../backgroundSession');
 }
 
@@ -145,13 +153,18 @@ describe('syncBackgroundSession', () => {
     });
 
     expect(provision).toHaveBeenCalledTimes(1);
-    expect(native.put).toHaveBeenCalledWith({
-      baseUrl: 'https://api.oxy.so',
-      deviceId: 'device-1',
-      secret: 'bg-secret',
-      accountId: 'user-1',
-      expiresAt: Date.parse(expiresAt),
-    });
+    // Positional scalars, and the ORDER is the contract: the native signature is
+    // five parameters, not one object, because an Expo Modules `Record` does not
+    // convert in a consumer build of this package and every call was rejected. A
+    // silently reordered argument would store a credential that no mint can use, so
+    // this assertion is what pins the order — see `OxyBackgroundSessionModule.kt`.
+    expect(native.put).toHaveBeenCalledWith(
+      'https://api.oxy.so',
+      'device-1',
+      'bg-secret',
+      'user-1',
+      Date.parse(expiresAt),
+    );
     // Same account, so nothing was revoked on the way.
     expect(native.clear).not.toHaveBeenCalled();
   });
@@ -316,6 +329,48 @@ describe('a @oxyhq/core too old to provision', () => {
   });
 });
 
+describe('on web', () => {
+  /**
+   * Web must never provision. The credential is non-rotating and long-lived, which
+   * is only safe because native background code is its sole consumer; a browser
+   * origin already holds the ROTATING deviceSecret and has no background worker, so
+   * a successful provision there is a security DOWNGRADE. The harm lands at the
+   * network call, which mints a live server-side credential, so "storage failed
+   * anyway" is not a defence.
+   *
+   * These tests present a native module that IS available, which is the whole
+   * point: they fail if the gate ever relies on `requireOptionalNativeModule`
+   * returning null on web rather than on the platform check.
+   */
+  test('does not provision even when a native module IS present', async () => {
+    const native = fakeNative(null);
+    const { syncBackgroundSession, isBackgroundSessionSupported } = await loadModule(native, 'web');
+    const provision = jest.fn(async () => provisioned());
+
+    expect(isBackgroundSessionSupported()).toBe(false);
+    await syncBackgroundSession({
+      oxyServices: fakeOxy(provision),
+      userId: 'user-1',
+      canUsePrivateApi: true,
+      isCurrent: () => true,
+    });
+
+    expect(provision).not.toHaveBeenCalled();
+    expect(native.put).not.toHaveBeenCalled();
+    // Not even a read, so nothing in a browser origin is touched at all.
+    expect(native.peek).not.toHaveBeenCalled();
+    expect(native.clear).not.toHaveBeenCalled();
+  });
+
+  test('never asks the native registry on web', async () => {
+    const { isBackgroundSessionSupported } = await loadModule(fakeNative(null), 'web');
+    expect(isBackgroundSessionSupported()).toBe(false);
+    // The platform decides BEFORE the registry is consulted, so a web-build
+    // native-module mock or a future web shim cannot reopen the gate.
+    expect(requireOptionalNativeModule).not.toHaveBeenCalled();
+  });
+});
+
 describe('without the native module', () => {
   test('every entry point is an inert no-op', async () => {
     const { syncBackgroundSession, clearBackgroundSession, isBackgroundSessionSupported } =

package/src/ui/session/backgroundSession.ts

@@ -25,12 +25,16 @@
  * live in different stores with one writer each, so there is nothing to keep in
  * lockstep and no state that can disagree.
  *
- * Android only. `requireOptionalNativeModule` resolves `null` on web and on any
- * app that does not ship the native module, and every function here degrades to a
- * no-op in that case — so an app can enable this and lose nothing on other
- * platforms.
+ * ## Android only, and web is refused rather than merely unsupported
+ *
+ * Web is gated off by an explicit platform check, not by the native module being
+ * absent — provisioning in a browser origin would be a security downgrade, so it
+ * must not depend on an incidental fact. See {@link loadNativeModule}. iOS has no
+ * implementation yet and resolves to no module, so every function here degrades to
+ * a no-op: an app can enable this and lose nothing on other platforms.
  */
 import { requireOptionalNativeModule } from 'expo-modules-core';
+import { Platform } from 'react-native';
 import type { OxyServices } from '@oxyhq/core';
 import { logger } from '@oxyhq/core';
 
@@ -40,15 +44,29 @@ import { logger } from '@oxyhq/core';
  * secret's only reader is one less place it can leak from.
  */
 interface OxyBackgroundSessionNativeModule {
-  /** Store (replacing) the credential. Resolves `false` when it was rejected or storage failed. */
-  put(credential: {
-    baseUrl: string;
-    deviceId: string;
-    secret: string;
-    accountId: string;
-    /** Epoch millis — parsed from the server's ISO-8601 string here, not natively. */
-    expiresAt: number;
-  }): Promise<boolean>;
+  /**
+   * Store (replacing) the credential. Resolves `false` when it was rejected or
+   * storage failed.
+   *
+   * Positional scalars rather than one object, matching the native signature — and
+   * that shape is load-bearing, not a preference. Passing an object made this an
+   * Expo Modules `Record`, and a `Record` does not convert in a consumer build of
+   * this package: every call was rejected with `The 1st argument cannot be cast to
+   * type CredentialInput (received class ReadableNativeMap)`, so the credential was
+   * never stored and background refreshes stayed signed out. See the comment on
+   * `AsyncFunction("put")` in `OxyBackgroundSessionModule.kt` for why, and do not
+   * restore the object form without proving on a device that a `Record` converts.
+   *
+   * `expiresAtMs` is epoch millis, parsed from the server's ISO-8601 string here
+   * rather than natively.
+   */
+  put(
+    baseUrl: string,
+    deviceId: string,
+    secret: string,
+    accountId: string,
+    expiresAtMs: number,
+  ): Promise<boolean>;
   /** Drop the credential and any cached access token. */
   clear(): Promise<boolean>;
   /** What is stored: the owning account and its expiry (epoch millis), or `null`. */
@@ -67,7 +85,30 @@ const RENEW_WHEN_REMAINING_MS = 7 * 24 * 60 * 60 * 1000;
 let nativeModule: OxyBackgroundSessionNativeModule | null | undefined;
 
 /**
- * Resolve the native module once.
+ * Resolve the native module once — and refuse outright on web.
+ *
+ * ## Web is excluded on purpose, and not merely because the module is absent
+ *
+ * The credential is deliberately NON-ROTATING and long-lived, which is safe only
+ * because native background code is its sole consumer and nobody rotates it. A
+ * browser origin already holds the ROTATING `deviceSecret`, and it has no
+ * background worker to serve — so provisioning there would add a strictly weaker
+ * long-lived secret alongside a stronger short-lived one. That is a downgrade, not
+ * a harmless no-op, and the harm lands at the PROVISION CALL (which mints a live
+ * server-side credential) regardless of whether anything manages to store it.
+ *
+ * That property must not rest on `requireOptionalNativeModule` happening to return
+ * `null` on web. It does today — the module is registered for android only — but
+ * that is an incidental fact a future web shim or a web-build native-module mock
+ * would quietly reverse. So the platform is checked FIRST, before we even ask the
+ * registry, and every entry point in this module inherits the gate.
+ *
+ * (A pre-deploy server makes this visible too: oxy-api's `sessionDevice` router
+ * applies `requireSameSiteOrigin` path-agnostically, so an unmatched path answers
+ * `404` to a native caller but `403 BAD_ORIGIN` to a browser one. Core's degrade is
+ * deliberately narrow — `404 → null` only — because a real origin misconfiguration
+ * on a CURRENT server also returns 403, and swallowing that would hide a genuine
+ * bug. Platform gating belongs here, where the platform is actually known.)
  *
  * `requireOptionalNativeModule` (a static import Metro always resolves) rather
  * than a dynamic `import(moduleName)`: the latter compiles to `require(variable)`
@@ -77,6 +118,10 @@ let nativeModule: OxyBackgroundSessionNativeModule | null | undefined;
  */
 function loadNativeModule(): OxyBackgroundSessionNativeModule | null {
   if (nativeModule === undefined) {
+    if (Platform.OS === 'web') {
+      nativeModule = null;
+      return nativeModule;
+    }
     const native = requireOptionalNativeModule<Partial<OxyBackgroundSessionNativeModule>>(
       'OxyBackgroundSession',
     );
@@ -246,13 +291,13 @@ export async function syncBackgroundSession(input: BackgroundSessionSyncInput):
       return;
     }
 
-    const persisted = await native.put({
-      baseUrl: oxyServices.getBaseURL(),
-      deviceId: provisioned.deviceId,
-      secret: provisioned.secret,
-      accountId: provisioned.accountId,
+    const persisted = await native.put(
+      oxyServices.getBaseURL(),
+      provisioned.deviceId,
+      provisioned.secret,
+      provisioned.accountId,
       expiresAt,
-    });
+    );
     if (!persisted) {
       logger.warn(
         '[backgroundSession] the native store did not retain the background credential; background refreshes stay signed out until the next attempt',

package/src/ui/session/useBackgroundSessionSync.ts

@@ -48,11 +48,10 @@ export function useBackgroundSessionSync({
     }
 
     if (!enabled) {
-      // An app that turns the feature OFF must not leave a live credential at
-      // rest for the rest of its 30-day lifetime. The cost is one local store
-      // open per launch on Android apps that never use the feature, which is
-      // accepted deliberately: correct revocation is worth more than skipping a
-      // memoized keystore open.
+      // An app that leaves the feature off must not keep a credential THIS app
+      // provisioned earlier. The store is package-scoped (see
+      // OxyBackgroundSessionStore), so this cannot revoke a sibling Oxy app's
+      // credential under the shared UID.
       void clearBackgroundSession();
       return;
     }