@oxyhq/services 25.0.1 → 26.0.1

package/lib/module/ui/session/useBackgroundSessionSync.js

@@ -1,76 +0,0 @@
-"use strict";
-
-/**
- * Keeps the native background credential in step with the session, so an app
- * enables background authentication with one prop and writes no session code of
- * its own.
- *
- * See `./backgroundSession` for what the credential is and why it is separate
- * from the rotating device secret.
- */
-import { useEffect } from 'react';
-import { AppState } from 'react-native';
-import { clearBackgroundSession, isBackgroundSessionSupported, syncBackgroundSession } from "./backgroundSession.js";
-/**
- * An effect is the right shape here, unusually for this codebase: the work is a
- * side effect on native storage, and it has to react both to an identity change
- * (a value) and to the app being foregrounded (a subscription). There is no
- * derived-state or React Query formulation of "write a credential to the
- * keystore when the user changes or the app comes back".
- *
- * Re-runs on identity change, which is what makes sign-out and account switching
- * work: `syncBackgroundSession` clears a credential belonging to anyone other
- * than `userId` before it does any network work.
- */
-export function useBackgroundSessionSync({
-  enabled,
-  oxyServices,
-  userId,
-  canUsePrivateApi
-}) {
-  useEffect(() => {
-    if (!isBackgroundSessionSupported()) {
-      return;
-    }
-    if (!enabled) {
-      // An app that leaves the feature off must not keep a credential THIS app
-      // provisioned earlier. The store is package-scoped (see
-      // OxyBackgroundSessionStore), so this cannot revoke a sibling Oxy app's
-      // credential under the shared UID.
-      void clearBackgroundSession();
-      return;
-    }
-
-    // A run that is superseded (unmount, or another identity change) must not
-    // write the credential it was about to write.
-    let current = true;
-    // Deliberately NOT caught. `syncBackgroundSession` already handles every
-    // runtime failure internally and throws for exactly one thing: an installed
-    // `@oxyhq/core` too old to provision. That is a dependency mistake which must
-    // surface, so it is allowed to reject — adding a `.catch()` here would put it
-    // back behind the silence it was moved out of.
-    const run = () => {
-      void syncBackgroundSession({
-        oxyServices,
-        userId,
-        canUsePrivateApi,
-        isCurrent: () => current
-      });
-    };
-    run();
-    const subscription = AppState.addEventListener('change', state => {
-      if (state === 'active') {
-        run();
-      }
-    });
-    return () => {
-      current = false;
-      subscription.remove();
-      // Deliberately NOT clearing here. Unmount is the app closing, which is
-      // precisely when the credential has to survive — clearing on teardown
-      // would defeat the entire feature. Revocation happens on sign-out (via a
-      // `userId` of null), on the server, or when the credential expires.
-    };
-  }, [enabled, oxyServices, userId, canUsePrivateApi]);
-}
-//# sourceMappingURL=useBackgroundSessionSync.js.map

package/lib/module/ui/session/useBackgroundSessionSync.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["useEffect","AppState","clearBackgroundSession","isBackgroundSessionSupported","syncBackgroundSession","useBackgroundSessionSync","enabled","oxyServices","userId","canUsePrivateApi","current","run","isCurrent","subscription","addEventListener","state","remove"],"sourceRoot":"../../../../src","sources":["ui/session/useBackgroundSessionSync.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,SAAS,QAAQ,OAAO;AACjC,SAASC,QAAQ,QAAQ,cAAc;AAEvC,SACEC,sBAAsB,EACtBC,4BAA4B,EAC5BC,qBAAqB,QAChB,wBAAqB;AAY5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,wBAAwBA,CAAC;EACvCC,OAAO;EACPC,WAAW;EACXC,MAAM;EACNC;AAC6B,CAAC,EAAQ;EACtCT,SAAS,CAAC,MAAM;IACd,IAAI,CAACG,4BAA4B,CAAC,CAAC,EAAE;MACnC;IACF;IAEA,IAAI,CAACG,OAAO,EAAE;MACZ;MACA;MACA;MACA;MACA,KAAKJ,sBAAsB,CAAC,CAAC;MAC7B;IACF;;IAEA;IACA;IACA,IAAIQ,OAAO,GAAG,IAAI;IAClB;IACA;IACA;IACA;IACA;IACA,MAAMC,GAAG,GAAGA,CAAA,KAAM;MAChB,KAAKP,qBAAqB,CAAC;QACzBG,WAAW;QACXC,MAAM;QACNC,gBAAgB;QAChBG,SAAS,EAAEA,CAAA,KAAMF;MACnB,CAAC,CAAC;IACJ,CAAC;IAEDC,GAAG,CAAC,CAAC;IACL,MAAME,YAAY,GAAGZ,QAAQ,CAACa,gBAAgB,CAAC,QAAQ,EAAGC,KAAK,IAAK;MAClE,IAAIA,KAAK,KAAK,QAAQ,EAAE;QACtBJ,GAAG,CAAC,CAAC;MACP;IACF,CAAC,CAAC;IAEF,OAAO,MAAM;MACXD,OAAO,GAAG,KAAK;MACfG,YAAY,CAACG,MAAM,CAAC,CAAC;MACrB;MACA;MACA;MACA;IACF,CAAC;EACH,CAAC,EAAE,CAACV,OAAO,EAAEC,WAAW,EAAEC,MAAM,EAAEC,gBAAgB,CAAC,CAAC;AACtD","ignoreList":[]}

package/lib/module/ui/utils/netConnectivity.js

@@ -1,23 +0,0 @@
-"use strict";
-
-/**
- * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
- * reports connected but explicitly unreachable (captive portal, no route) counts
- * as offline.
- */
-export function isNetConnectivityOnline(state) {
-  return Boolean(state.isConnected && state.isInternetReachable !== false);
-}
-
-/**
- * Conservative offline verdict for boot-path probes. Unknown / probing states
- * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
- * skips a real sign-in.
- */
-export function isNetConnectivityExplicitlyOffline(state) {
-  if (!state) return false;
-  if (state.isConnected === false) return true;
-  if (state.isConnected === true && state.isInternetReachable === false) return true;
-  return false;
-}
-//# sourceMappingURL=netConnectivity.js.map

package/lib/module/ui/utils/netConnectivity.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["isNetConnectivityOnline","state","Boolean","isConnected","isInternetReachable","isNetConnectivityExplicitlyOffline"],"sourceRoot":"../../../../src","sources":["ui/utils/netConnectivity.ts"],"mappings":";;AAKA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,uBAAuBA,CAACC,KAAuB,EAAW;EACxE,OAAOC,OAAO,CAACD,KAAK,CAACE,WAAW,IAAIF,KAAK,CAACG,mBAAmB,KAAK,KAAK,CAAC;AAC1E;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,kCAAkCA,CAChDJ,KAA0C,EACjC;EACT,IAAI,CAACA,KAAK,EAAE,OAAO,KAAK;EACxB,IAAIA,KAAK,CAACE,WAAW,KAAK,KAAK,EAAE,OAAO,IAAI;EAC5C,IAAIF,KAAK,CAACE,WAAW,KAAK,IAAI,IAAIF,KAAK,CAACG,mBAAmB,KAAK,KAAK,EAAE,OAAO,IAAI;EAClF,OAAO,KAAK;AACd","ignoreList":[]}

package/lib/typescript/commonjs/ui/session/backgroundSession.d.ts

@@ -1,42 +0,0 @@
-import type { OxyServices } from '@oxyhq/core';
-/** Whether this platform/app can hold a background credential at all. */
-export declare function isBackgroundSessionSupported(): boolean;
-/**
- * Drop the stored credential. No-op where unsupported, and never throws.
- *
- * Called on sign-out and BEFORE an account switch's network work, so the window
- * in which background code could still serve the previous account is as short as
- * one local write.
- */
-export declare function clearBackgroundSession(): Promise<void>;
-export interface BackgroundSessionSyncInput {
-    oxyServices: OxyServices;
-    /** The signed-in account, or `null` when signed out. */
-    userId: string | null;
-    /** Whether a bearer is available yet — provisioning requires one. */
-    canUsePrivateApi: boolean;
-    /**
-     * Whether this run is still the current one. A run that loses its relevance
-     * mid-flight (unmount, or another identity change) must not write the
-     * credential it was about to write.
-     */
-    isCurrent: () => boolean;
-}
-/**
- * Bring the native credential in line with the session JS currently holds.
- *
- * Ordering is the load-bearing part: a credential belonging to a DIFFERENT
- * account is cleared before any network call, so a crash mid-provision leaves
- * background code signed out rather than serving the previous account's data
- * under the new account's name. The server enforces the same rule independently
- * (a mint is re-authorized against the live device session, and against its ACTIVE
- * account), so this is the fast local half of a belt-and-braces pair, not the only
- * guard.
- *
- * Throws for exactly one thing — a `@oxyhq/core` too old to provision (see
- * {@link assertProvisioningAvailable}). Every other failure is caught and logged:
- * a background credential is an enhancement, and failing to provision one must
- * not disturb the session that is working.
- */
-export declare function syncBackgroundSession(input: BackgroundSessionSyncInput): Promise<void>;
-//# sourceMappingURL=backgroundSession.d.ts.map

package/lib/typescript/commonjs/ui/session/backgroundSession.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"backgroundSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/backgroundSession.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAyG/C,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AA8BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF5F"}

package/lib/typescript/commonjs/ui/session/useBackgroundSessionSync.d.ts

@@ -1,23 +0,0 @@
-import type { OxyServices } from '@oxyhq/core';
-export interface UseBackgroundSessionSyncInput {
-    /** `OxyProviderProps.backgroundSession`. */
-    enabled: boolean;
-    oxyServices: OxyServices;
-    /** The signed-in account, or `null` when signed out. */
-    userId: string | null;
-    /** Whether a bearer is available yet — provisioning needs one. */
-    canUsePrivateApi: boolean;
-}
-/**
- * An effect is the right shape here, unusually for this codebase: the work is a
- * side effect on native storage, and it has to react both to an identity change
- * (a value) and to the app being foregrounded (a subscription). There is no
- * derived-state or React Query formulation of "write a credential to the
- * keystore when the user changes or the app comes back".
- *
- * Re-runs on identity change, which is what makes sign-out and account switching
- * work: `syncBackgroundSession` clears a credential belonging to anyone other
- * than `userId` before it does any network work.
- */
-export declare function useBackgroundSessionSync({ enabled, oxyServices, userId, canUsePrivateApi, }: UseBackgroundSessionSyncInput): void;
-//# sourceMappingURL=useBackgroundSessionSync.d.ts.map

package/lib/typescript/commonjs/ui/session/useBackgroundSessionSync.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useBackgroundSessionSync.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/useBackgroundSessionSync.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,WAAW,6BAA6B;IAC5C,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,EAAE,6BAA6B,GAAG,IAAI,CAgDtC"}

package/lib/typescript/commonjs/ui/utils/netConnectivity.d.ts

@@ -1,17 +0,0 @@
-export interface NetInfoLikeState {
-    isConnected: boolean | null;
-    isInternetReachable?: boolean | null;
-}
-/**
- * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
- * reports connected but explicitly unreachable (captive portal, no route) counts
- * as offline.
- */
-export declare function isNetConnectivityOnline(state: NetInfoLikeState): boolean;
-/**
- * Conservative offline verdict for boot-path probes. Unknown / probing states
- * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
- * skips a real sign-in.
- */
-export declare function isNetConnectivityExplicitlyOffline(state: NetInfoLikeState | null | undefined): boolean;
-//# sourceMappingURL=netConnectivity.d.ts.map

package/lib/typescript/commonjs/ui/utils/netConnectivity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"netConnectivity.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/netConnectivity.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAExE;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GACzC,OAAO,CAKT"}

package/lib/typescript/module/ui/session/backgroundSession.d.ts

@@ -1,42 +0,0 @@
-import type { OxyServices } from '@oxyhq/core';
-/** Whether this platform/app can hold a background credential at all. */
-export declare function isBackgroundSessionSupported(): boolean;
-/**
- * Drop the stored credential. No-op where unsupported, and never throws.
- *
- * Called on sign-out and BEFORE an account switch's network work, so the window
- * in which background code could still serve the previous account is as short as
- * one local write.
- */
-export declare function clearBackgroundSession(): Promise<void>;
-export interface BackgroundSessionSyncInput {
-    oxyServices: OxyServices;
-    /** The signed-in account, or `null` when signed out. */
-    userId: string | null;
-    /** Whether a bearer is available yet — provisioning requires one. */
-    canUsePrivateApi: boolean;
-    /**
-     * Whether this run is still the current one. A run that loses its relevance
-     * mid-flight (unmount, or another identity change) must not write the
-     * credential it was about to write.
-     */
-    isCurrent: () => boolean;
-}
-/**
- * Bring the native credential in line with the session JS currently holds.
- *
- * Ordering is the load-bearing part: a credential belonging to a DIFFERENT
- * account is cleared before any network call, so a crash mid-provision leaves
- * background code signed out rather than serving the previous account's data
- * under the new account's name. The server enforces the same rule independently
- * (a mint is re-authorized against the live device session, and against its ACTIVE
- * account), so this is the fast local half of a belt-and-braces pair, not the only
- * guard.
- *
- * Throws for exactly one thing — a `@oxyhq/core` too old to provision (see
- * {@link assertProvisioningAvailable}). Every other failure is caught and logged:
- * a background credential is an enhancement, and failing to provision one must
- * not disturb the session that is working.
- */
-export declare function syncBackgroundSession(input: BackgroundSessionSyncInput): Promise<void>;
-//# sourceMappingURL=backgroundSession.d.ts.map

package/lib/typescript/module/ui/session/backgroundSession.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"backgroundSession.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/backgroundSession.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAyG/C,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAa5D;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AA8BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqF5F"}

package/lib/typescript/module/ui/session/useBackgroundSessionSync.d.ts

@@ -1,23 +0,0 @@
-import type { OxyServices } from '@oxyhq/core';
-export interface UseBackgroundSessionSyncInput {
-    /** `OxyProviderProps.backgroundSession`. */
-    enabled: boolean;
-    oxyServices: OxyServices;
-    /** The signed-in account, or `null` when signed out. */
-    userId: string | null;
-    /** Whether a bearer is available yet — provisioning needs one. */
-    canUsePrivateApi: boolean;
-}
-/**
- * An effect is the right shape here, unusually for this codebase: the work is a
- * side effect on native storage, and it has to react both to an identity change
- * (a value) and to the app being foregrounded (a subscription). There is no
- * derived-state or React Query formulation of "write a credential to the
- * keystore when the user changes or the app comes back".
- *
- * Re-runs on identity change, which is what makes sign-out and account switching
- * work: `syncBackgroundSession` clears a credential belonging to anyone other
- * than `userId` before it does any network work.
- */
-export declare function useBackgroundSessionSync({ enabled, oxyServices, userId, canUsePrivateApi, }: UseBackgroundSessionSyncInput): void;
-//# sourceMappingURL=useBackgroundSessionSync.d.ts.map

package/lib/typescript/module/ui/session/useBackgroundSessionSync.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useBackgroundSessionSync.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/useBackgroundSessionSync.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,WAAW,6BAA6B;IAC5C,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,EAAE,6BAA6B,GAAG,IAAI,CAgDtC"}

package/lib/typescript/module/ui/utils/netConnectivity.d.ts

@@ -1,17 +0,0 @@
-export interface NetInfoLikeState {
-    isConnected: boolean | null;
-    isInternetReachable?: boolean | null;
-}
-/**
- * Mirrors Bloom `ConnectionStatusToasts` reachability semantics: a link that
- * reports connected but explicitly unreachable (captive portal, no route) counts
- * as offline.
- */
-export declare function isNetConnectivityOnline(state: NetInfoLikeState): boolean;
-/**
- * Conservative offline verdict for boot-path probes. Unknown / probing states
- * (`null`, timed-out fetch) resolve to "not offline" so a flaky probe never
- * skips a real sign-in.
- */
-export declare function isNetConnectivityExplicitlyOffline(state: NetInfoLikeState | null | undefined): boolean;
-//# sourceMappingURL=netConnectivity.d.ts.map

package/lib/typescript/module/ui/utils/netConnectivity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"netConnectivity.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/netConnectivity.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAExE;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GACzC,OAAO,CAKT"}

package/src/ui/boot/__tests__/coldBootNoIdpRedirect.test.ts

@@ -1,215 +0,0 @@
-/**
- * `runProviderColdBoot` — the boot NEVER navigates the top-level window (#691
- * phase 7b).
- *
- * Phase 7b deleted the two SDK-initiated, gesture-less full-page hops to the
- * IdP: the cold-boot `prompt=none` silent restore and the post-sign-in hub sync.
- * A web origin with no local device credential now resolves SIGNED OUT and waits
- * for the user's next explicit "Continue with Oxy".
- *
- * What must still work — and is asserted here — is everything the user actually
- * asked for: an authorization code ALREADY on the URL is completed, which is how
- * a browser-BLOCKED sign-in popup finishes after `startWebOAuthSignIn` falls
- * back to a full-page redirect.
- *
- * Unlike `__tests__/boot/runProviderColdBoot.test.ts` (deadline + connectivity
- * wiring), this suite keeps the real navigation primitive in view: every
- * assertion below reaches `redirectToAuthorize`, the ONLY top-level-window
- * navigation the boot could ever have performed.
- */
-
-import type { AuthStateStore, PersistedAuthState, SessionClient } from '@oxyhq/core';
-
-jest.mock('@oxyhq/core', () => {
-  const actual = jest.requireActual('@oxyhq/core');
-  return {
-    __esModule: true,
-    ...actual,
-    runSessionColdBoot: jest.fn(),
-  };
-});
-
-// The ONLY top-level-window navigation primitive the SDK has.
-jest.mock('../../components/oauthNavigation', () => ({
-  redirectToAuthorize: jest.fn(),
-}));
-
-jest.mock('../../utils/oauthReturn', () => {
-  const actual = jest.requireActual('../../utils/oauthReturn');
-  return {
-    __esModule: true,
-    ...actual,
-    tryCompleteOAuthReturn: jest.fn(async () => false),
-  };
-});
-
-import { runSessionColdBoot } from '@oxyhq/core';
-import { redirectToAuthorize } from '../../components/oauthNavigation';
-import { tryCompleteOAuthReturn } from '../../utils/oauthReturn';
-import { runProviderColdBoot, type RunProviderColdBootOptions } from '../runProviderColdBoot';
-
-const mockRunSessionColdBoot = runSessionColdBoot as jest.Mock;
-const mockRedirectToAuthorize = redirectToAuthorize as jest.Mock;
-const mockTryCompleteOAuthReturn = tryCompleteOAuthReturn as jest.Mock;
-
-const CLIENT_ID = 'oxy_dk_test';
-
-/** An auth store holding no device credential — the signed-out domain case. */
-function makeEmptyAuthStore(): AuthStateStore {
-  return {
-    load: jest.fn(async (): Promise<PersistedAuthState | null> => null),
-    save: jest.fn(async () => undefined),
-    clear: jest.fn(async () => undefined),
-  } as unknown as AuthStateStore;
-}
-
-interface Harness {
-  options: RunProviderColdBootOptions;
-  commitSession: jest.Mock;
-  markAuthResolved: jest.Mock;
-  setTokenReady: jest.Mock;
-  sessionClientStart: jest.Mock;
-}
-
-function makeHarness(overrides: Partial<RunProviderColdBootOptions> = {}): Harness {
-  const commitSession = jest.fn(async () => undefined);
-  const markAuthResolved = jest.fn();
-  const setTokenReady = jest.fn();
-  const sessionClientStart = jest.fn(async () => undefined);
-
-  const options: RunProviderColdBootOptions = {
-    oxyServices: {} as RunProviderColdBootOptions['oxyServices'],
-    authStore: makeEmptyAuthStore(),
-    clientId: CLIENT_ID,
-    sessionClient: { start: sessionClientStart } as unknown as SessionClient,
-    syncDeviceCredentialToHost: jest.fn(async () => undefined),
-    commitSession,
-    markAuthResolved,
-    setTokenReady,
-    ...overrides,
-  };
-
-  return { options, commitSession, markAuthResolved, setTokenReady, sessionClientStart };
-}
-
-/** `runSessionColdBoot` finding no session at all — the signed-out domain. */
-function stubSignedOutBoot(): void {
-  mockRunSessionColdBoot.mockImplementation(
-    async (opts: Parameters<typeof runSessionColdBoot>[0]) => {
-      await opts.onSignedOut?.('no_session');
-      return { kind: 'unauthenticated' } as const;
-    },
-  );
-}
-
-describe('runProviderColdBoot — no SDK-initiated IdP navigation (#691 phase 7b)', () => {
-  beforeEach(() => {
-    mockRunSessionColdBoot.mockReset();
-    mockRedirectToAuthorize.mockClear();
-    mockTryCompleteOAuthReturn.mockClear();
-    mockTryCompleteOAuthReturn.mockImplementation(async () => false);
-    globalThis.sessionStorage?.clear();
-  });
-
-  it('resolves a domain with no local credential SIGNED OUT instead of bouncing to the IdP', async () => {
-    stubSignedOutBoot();
-    const { options, markAuthResolved, commitSession, sessionClientStart } = makeHarness();
-
-    await runProviderColdBoot(options);
-
-    // Auth resolution concluded (routing can settle), nothing was committed,
-    // and with no persisted credential the device socket is not started.
-    expect(markAuthResolved).toHaveBeenCalled();
-    expect(commitSession).not.toHaveBeenCalled();
-    expect(sessionClientStart).not.toHaveBeenCalled();
-    expect(mockRedirectToAuthorize).not.toHaveBeenCalled();
-  });
-
-  it('does not navigate even with a clientId configured and the mint finding nothing', async () => {
-    // The deleted silent-restore lane needed exactly this shape: a registered
-    // client id plus a signed-out mint outcome. It must now be inert.
-    stubSignedOutBoot();
-    const { options } = makeHarness({ clientId: CLIENT_ID, authRedirectUri: 'https://app.oxy.so' });
-
-    await runProviderColdBoot(options);
-
-    expect(mockRedirectToAuthorize).not.toHaveBeenCalled();
-  });
-
-  it('does not navigate when the mint already resolved a session', async () => {
-    mockRunSessionColdBoot.mockImplementation(
-      async (opts: Parameters<typeof runSessionColdBoot>[0]) => {
-        const session = {
-          sessionId: 's1',
-          userId: 'u1',
-          accessToken: 'at',
-          via: 'device-secret-mint',
-        };
-        await opts.onSession?.(session);
-        return { kind: 'session', via: session.via, session } as const;
-      },
-    );
-    const { options, commitSession } = makeHarness();
-
-    await runProviderColdBoot(options);
-
-    expect(commitSession).toHaveBeenCalledWith(
-      { sessionId: 's1', accessToken: 'at', userId: 'u1' },
-      { activate: false },
-    );
-    expect(mockRedirectToAuthorize).not.toHaveBeenCalled();
-  });
-
-  describe('the blocked-popup redirect fallback still completes', () => {
-    it('completes an authorization code already on the URL', async () => {
-      // A popup-mode app lands here whenever the browser blocked the popup and
-      // `startWebOAuthSignIn` fell back to a full-page redirect.
-      mockTryCompleteOAuthReturn.mockImplementation(async () => true);
-      const { options, markAuthResolved, setTokenReady } = makeHarness();
-
-      await runProviderColdBoot(options);
-
-      expect(mockTryCompleteOAuthReturn).toHaveBeenCalledTimes(1);
-      expect(setTokenReady).toHaveBeenLastCalledWith(true);
-      expect(markAuthResolved).toHaveBeenCalled();
-      // The device mint is short-circuited by the completed return leg.
-      expect(mockRunSessionColdBoot).not.toHaveBeenCalled();
-      expect(mockRedirectToAuthorize).not.toHaveBeenCalled();
-    });
-
-    it('runs the return leg even on a boot that finds no session', async () => {
-      stubSignedOutBoot();
-      const { options } = makeHarness();
-
-      await runProviderColdBoot(options);
-
-      expect(mockTryCompleteOAuthReturn).toHaveBeenCalledTimes(1);
-    });
-
-    it('commits the OAuth return as a deliberate sign-in', async () => {
-      mockTryCompleteOAuthReturn.mockImplementation(async () => true);
-      const { options } = makeHarness();
-
-      await runProviderColdBoot(options);
-
-      const commit = mockTryCompleteOAuthReturn.mock.calls[0][0] as {
-        commitSession: (input: unknown) => Promise<void>;
-      };
-      await commit.commitSession({ sessionId: 's1', userId: 'u1' });
-      expect(options.commitSession).toHaveBeenCalledWith(
-        { sessionId: 's1', userId: 'u1' },
-        { activate: true },
-      );
-    });
-  });
-
-  it('identity mode skips the web OAuth return leg entirely', async () => {
-    stubSignedOutBoot();
-    const { options } = makeHarness({ sessionMode: 'identity' });
-
-    await runProviderColdBoot(options);
-
-    expect(mockTryCompleteOAuthReturn).not.toHaveBeenCalled();
-    expect(mockRedirectToAuthorize).not.toHaveBeenCalled();
-  });
-});