@oxyhq/services 28.0.0 → 30.0.0

package/lib/commonjs/ui/server.js

@@ -1,86 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.ProfileScreen = exports.OxySignInButton = exports.OxyProvider = exports.OxyPayButton = exports.LogoText = exports.LogoIcon = exports.FollowButton = void 0;
-Object.defineProperty(exports, "extractErrorMessage", {
-  enumerable: true,
-  get: function () {
-    return _errorHandlers.extractErrorMessage;
-  }
-});
-Object.defineProperty(exports, "handleAuthError", {
-  enumerable: true,
-  get: function () {
-    return _errorHandlers.handleAuthError;
-  }
-});
-Object.defineProperty(exports, "isInvalidSessionError", {
-  enumerable: true,
-  get: function () {
-    return _errorHandlers.isInvalidSessionError;
-  }
-});
-Object.defineProperty(exports, "isTimeoutOrNetworkError", {
-  enumerable: true,
-  get: function () {
-    return _errorHandlers.isTimeoutOrNetworkError;
-  }
-});
-exports.useStorage = exports.useOxy = exports.useFollow = exports.useAuthStore = exports.useAuth = exports.useAccountStore = exports.toast = void 0;
-var _errorHandlers = require("./utils/errorHandlers.js");
-/**
- * Server-safe UI exports (noops)
- *
- * Import from this module for SSR environments where React components
- * shouldn't be rendered on the server.
- *
- * @example
- * import { OxyProvider, useOxy } from '@oxyhq/services/ui/server';
- */
-
-// Noop utilities
-const noopComponent = () => null;
-const noopHook = () => ({});
-const noopStorageResult = {
-  storage: null,
-  isReady: false
-};
-
-// Components (all render null)
-const OxyProvider = exports.OxyProvider = noopComponent;
-const OxySignInButton = exports.OxySignInButton = noopComponent;
-const LogoIcon = exports.LogoIcon = noopComponent;
-const LogoText = exports.LogoText = noopComponent;
-const FollowButton = exports.FollowButton = noopComponent;
-const OxyPayButton = exports.OxyPayButton = noopComponent;
-
-// Context
-const useOxy = exports.useOxy = noopHook;
-
-// Hooks (all return empty objects)
-const useAuth = exports.useAuth = noopHook;
-const useFollow = exports.useFollow = noopHook;
-const useStorage = () => noopStorageResult;
-
-// Screens (render null)
-exports.useStorage = useStorage;
-const ProfileScreen = exports.ProfileScreen = noopComponent;
-
-// Stores (return empty objects)
-const useAuthStore = exports.useAuthStore = noopHook;
-const useAccountStore = exports.useAccountStore = noopHook;
-
-// Toast (noop)
-const toast = exports.toast = Object.assign(() => {}, {
-  success: () => {},
-  error: () => {},
-  info: () => {},
-  warning: () => {},
-  loading: () => {},
-  dismiss: () => {}
-});
-
-// Error handler utilities (pure functions work everywhere)
-//# sourceMappingURL=server.js.map

package/lib/commonjs/ui/server.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_errorHandlers","require","noopComponent","noopHook","noopStorageResult","storage","isReady","OxyProvider","exports","OxySignInButton","LogoIcon","LogoText","FollowButton","OxyPayButton","useOxy","useAuth","useFollow","useStorage","ProfileScreen","useAuthStore","useAccountStore","toast","Object","assign","success","error","info","warning","loading","dismiss"],"sourceRoot":"../../../src","sources":["ui/server.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDA,IAAAA,cAAA,GAAAC,OAAA;AApDA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,MAAMC,aAAa,GAAGA,CAAA,KAAM,IAAI;AAChC,MAAMC,QAAQ,GAAGA,CAAA,MAAO,CAAC,CAAC,CAAC;AAC3B,MAAMC,iBAAiB,GAAG;EAAEC,OAAO,EAAE,IAAI;EAAEC,OAAO,EAAE;AAAM,CAAC;;AAE3D;AACO,MAAMC,WAAW,GAAAC,OAAA,CAAAD,WAAA,GAAGL,aAAa;AACjC,MAAMO,eAAe,GAAAD,OAAA,CAAAC,eAAA,GAAGP,aAAa;AACrC,MAAMQ,QAAQ,GAAAF,OAAA,CAAAE,QAAA,GAAGR,aAAa;AAC9B,MAAMS,QAAQ,GAAAH,OAAA,CAAAG,QAAA,GAAGT,aAAa;AAC9B,MAAMU,YAAY,GAAAJ,OAAA,CAAAI,YAAA,GAAGV,aAAa;AAClC,MAAMW,YAAY,GAAAL,OAAA,CAAAK,YAAA,GAAGX,aAAa;;AAEzC;AACO,MAAMY,MAAM,GAAAN,OAAA,CAAAM,MAAA,GAAGX,QAAQ;;AAE9B;AACO,MAAMY,OAAO,GAAAP,OAAA,CAAAO,OAAA,GAAGZ,QAAQ;AACxB,MAAMa,SAAS,GAAAR,OAAA,CAAAQ,SAAA,GAAGb,QAAQ;AAC1B,MAAMc,UAAU,GAAGA,CAAA,KAAMb,iBAAiB;;AAEjD;AAAAI,OAAA,CAAAS,UAAA,GAAAA,UAAA;AACO,MAAMC,aAAa,GAAAV,OAAA,CAAAU,aAAA,GAAGhB,aAAa;;AAE1C;AACO,MAAMiB,YAAY,GAAAX,OAAA,CAAAW,YAAA,GAAGhB,QAAQ;AAC7B,MAAMiB,eAAe,GAAAZ,OAAA,CAAAY,eAAA,GAAGjB,QAAQ;;AAEvC;AACO,MAAMkB,KAAK,GAAAb,OAAA,CAAAa,KAAA,GAAGC,MAAM,CAACC,MAAM,CAC9B,MAAM,CAAC,CAAC,EACR;EACIC,OAAO,EAAEA,CAAA,KAAM,CAAC,CAAC;EACjBC,KAAK,EAAEA,CAAA,KAAM,CAAC,CAAC;EACfC,IAAI,EAAEA,CAAA,KAAM,CAAC,CAAC;EACdC,OAAO,EAAEA,CAAA,KAAM,CAAC,CAAC;EACjBC,OAAO,EAAEA,CAAA,KAAM,CAAC,CAAC;EACjBC,OAAO,EAAEA,CAAA,KAAM,CAAC;AACpB,CACJ,CAAC;;AAED","ignoreList":[]}

package/lib/commonjs/ui/session/authStore.js

@@ -1,39 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createPlatformAuthStateStore = createPlatformAuthStateStore;
-var _core = require("@oxyhq/core");
-var _storageHelpers = require("../utils/storageHelpers.js");
-var _nativeSecureStorage = require("./nativeSecureStorage.js");
-/**
- * Platform `AuthStateStore` for `@oxyhq/services`.
- *
- * The zero-cookie device model persists the durable device credential
- * (`deviceId` + `deviceSecret`) per origin (web) / per device (native), and the
- * SDK re-mints the access token from that credential on cold boot. `@oxyhq/core`
- * owns the store shape + logic (`createWebAuthStateStore` /
- * `createNativeAuthStateStore`); this module only selects the platform storage
- * seam:
- *
- *  - web  → `createWebAuthStateStore()` (localStorage, in-memory fallback).
- *  - native → `createNativeAuthStateStore(secureKV)` for the SESSION blob over
- *    the shared `createNativeSecureKeyValueStorage()` adapter
- *    (`expo-secure-store`, AsyncStorage fallback).
- */
-
-/**
- * Build the platform {@link AuthStateStore} for this runtime.
- *
- * Native persists the SESSION blob (`deviceId` + `deviceSecret` + cached access
- * token) per-app in SecureStore; the SDK re-mints the access token from the
- * device credential on the next cold boot.
- */
-function createPlatformAuthStateStore() {
-  if (!(0, _storageHelpers.isReactNative)()) {
-    return (0, _core.createWebAuthStateStore)();
-  }
-  return (0, _core.createNativeAuthStateStore)((0, _nativeSecureStorage.createNativeSecureKeyValueStorage)());
-}
-//# sourceMappingURL=authStore.js.map

package/lib/commonjs/ui/session/authStore.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_core","require","_storageHelpers","_nativeSecureStorage","createPlatformAuthStateStore","isReactNative","createWebAuthStateStore","createNativeAuthStateStore","createNativeSecureKeyValueStorage"],"sourceRoot":"../../../../src","sources":["ui/session/authStore.ts"],"mappings":";;;;;;AAeA,IAAAA,KAAA,GAAAC,OAAA;AAKA,IAAAC,eAAA,GAAAD,OAAA;AACA,IAAAE,oBAAA,GAAAF,OAAA;AArBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,4BAA4BA,CAAA,EAAmB;EAC7D,IAAI,CAAC,IAAAC,6BAAa,EAAC,CAAC,EAAE;IACpB,OAAO,IAAAC,6BAAuB,EAAC,CAAC;EAClC;EAEA,OAAO,IAAAC,gCAA0B,EAAC,IAAAC,sDAAiC,EAAC,CAAC,CAAC;AACxE","ignoreList":[]}

package/lib/commonjs/ui/session/backgroundSession.js

@@ -1,258 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.clearBackgroundSession = clearBackgroundSession;
-exports.isBackgroundSessionSupported = isBackgroundSessionSupported;
-exports.syncBackgroundSession = syncBackgroundSession;
-var _expoModulesCore = require("expo-modules-core");
-var _reactNative = require("react-native");
-var _core = require("@oxyhq/core");
-/**
- * The JS half of the native background session credential.
- *
- * A home-screen widget or a sync job refreshes while the app process is dead:
- * there is no JS runtime, so it cannot go through this SDK's normal session lane
- * at all. Native code needs its own way to obtain a bearer, and this module is
- * what gives it one — while the app runs, it provisions a purpose-built
- * credential and hands it to the native store that `so.oxy.session.OxyBackgroundSession`
- * reads.
- *
- * ## Why a separate credential rather than the device secret
- *
- * `POST /session/device/token` ROTATES the device secret on every mint, and the
- * presented secret dies 60 seconds later. Native code minting with it would be a
- * second writer to the value this SDK's whole session depends on — and since
- * `createNativeAuthStateStore` serves JS from an in-process mirror that never
- * re-reads storage, JS would be blind to that rotation. A worker killed between
- * the server's rotation and its local write would sign the user out of the app.
- * A credential that nobody rotates removes that failure mode instead of managing
- * it.
- *
- * ## What this does NOT do
- *
- * It never reads or writes `oxy.auth.v1` / expo-secure-store. The two credentials
- * live in different stores with one writer each, so there is nothing to keep in
- * lockstep and no state that can disagree.
- *
- * ## Android only, and web is refused rather than merely unsupported
- *
- * Web is gated off by an explicit platform check, not by the native module being
- * absent — provisioning in a browser origin would be a security downgrade, so it
- * must not depend on an incidental fact. See {@link loadNativeModule}. iOS has no
- * implementation yet and resolves to no module, so every function here degrades to
- * a no-op: an app can enable this and lose nothing on other platforms.
- */
-
-/**
- * The native module's surface. Deliberately write-mostly: there is no `get`,
- * because JS has no use for the secret it just wrote and keeping native as the
- * secret's only reader is one less place it can leak from.
- */
-
-/**
- * Re-provision once the remaining lifetime drops below this.
- *
- * The server issues a 30-day credential; renewing with a week to spare means an
- * app opened even occasionally always holds a live one, while an app left unopened
- * for a month lets it lapse — which is the intended outcome, not a failure.
- */
-const RENEW_WHEN_REMAINING_MS = 7 * 24 * 60 * 60 * 1000;
-let nativeModule;
-
-/**
- * Resolve the native module once — and refuse outright on web.
- *
- * ## Web is excluded on purpose, and not merely because the module is absent
- *
- * The credential is deliberately NON-ROTATING and long-lived, which is safe only
- * because native background code is its sole consumer and nobody rotates it. A
- * browser origin already holds the ROTATING `deviceSecret`, and it has no
- * background worker to serve — so provisioning there would add a strictly weaker
- * long-lived secret alongside a stronger short-lived one. That is a downgrade, not
- * a harmless no-op, and the harm lands at the PROVISION CALL (which mints a live
- * server-side credential) regardless of whether anything manages to store it.
- *
- * That property must not rest on `requireOptionalNativeModule` happening to return
- * `null` on web. It does today — the module is registered for android only — but
- * that is an incidental fact a future web shim or a web-build native-module mock
- * would quietly reverse. So the platform is checked FIRST, before we even ask the
- * registry, and every entry point in this module inherits the gate.
- *
- * (A pre-deploy server makes this visible too: oxy-api's `sessionDevice` router
- * applies `requireSameSiteOrigin` path-agnostically, so an unmatched path answers
- * `404` to a native caller but `403 BAD_ORIGIN` to a browser one. Core's degrade is
- * deliberately narrow — `404 → null` only — because a real origin misconfiguration
- * on a CURRENT server also returns 403, and swallowing that would hide a genuine
- * bug. Platform gating belongs here, where the platform is actually known.)
- *
- * `requireOptionalNativeModule` (a static import Metro always resolves) rather
- * than a dynamic `import(moduleName)`: the latter compiles to `require(variable)`
- * in the CJS build, which Metro cannot resolve inside a consuming app — it
- * silently returned `null` there, which is exactly how the cross-app SSO bridge
- * broke once. Same reasoning as `loadSharedIdentityBridge` in `@oxyhq/protocol`.
- */
-function loadNativeModule() {
-  if (nativeModule === undefined) {
-    if (_reactNative.Platform.OS === 'web') {
-      nativeModule = null;
-      return nativeModule;
-    }
-    const native = (0, _expoModulesCore.requireOptionalNativeModule)('OxyBackgroundSession');
-    nativeModule = native && typeof native.put === 'function' && typeof native.clear === 'function' && typeof native.peek === 'function' ? {
-      put: native.put.bind(native),
-      clear: native.clear.bind(native),
-      peek: native.peek.bind(native)
-    } : null;
-  }
-  return nativeModule;
-}
-
-/** Whether this platform/app can hold a background credential at all. */
-function isBackgroundSessionSupported() {
-  return loadNativeModule() !== null;
-}
-
-/**
- * Drop the stored credential. No-op where unsupported, and never throws.
- *
- * Called on sign-out and BEFORE an account switch's network work, so the window
- * in which background code could still serve the previous account is as short as
- * one local write.
- */
-async function clearBackgroundSession() {
-  const native = loadNativeModule();
-  if (!native) {
-    return;
-  }
-  try {
-    await native.clear();
-  } catch (error) {
-    _core.logger.warn('[backgroundSession] could not clear the native background credential', {
-      component: 'backgroundSession',
-      error
-    });
-  }
-}
-/**
- * Fail LOUDLY when the installed `@oxyhq/core` predates
- * `provisionBackgroundCredential`.
- *
- * This is the one failure here that is a build/dependency mistake rather than a
- * runtime condition, and it is the one that must never be quiet. Everything else
- * in `syncBackgroundSession` is caught and logged at warn, which is right for a
- * flaky network — but applying that to a version skew would leave background
- * refreshes permanently non-functional behind a warning nobody reads. So this
- * throws, and logs at ERROR first so it is still visible in a release build whose
- * rejection handler is silent.
- *
- * Reachable only through a runtime skew: the declared `@oxyhq/core` range covers
- * the method, so a correctly-resolved install cannot get here, and TypeScript
- * rules it out at compile time.
- */
-function assertProvisioningAvailable(oxyServices) {
-  if (typeof oxyServices.provisionBackgroundCredential === 'function') {
-    return;
-  }
-  const message = '[backgroundSession] the installed @oxyhq/core has no provisionBackgroundCredential, ' + 'so no background credential can be provisioned and native background refreshes will ' + 'never authenticate. Install a @oxyhq/core that satisfies this package\'s declared range.';
-  _core.logger.error(message, undefined, {
-    component: 'backgroundSession'
-  });
-  throw new Error(message);
-}
-
-/**
- * Bring the native credential in line with the session JS currently holds.
- *
- * Ordering is the load-bearing part: a credential belonging to a DIFFERENT
- * account is cleared before any network call, so a crash mid-provision leaves
- * background code signed out rather than serving the previous account's data
- * under the new account's name. The server enforces the same rule independently
- * (a mint is re-authorized against the live device session, and against its ACTIVE
- * account), so this is the fast local half of a belt-and-braces pair, not the only
- * guard.
- *
- * Throws for exactly one thing — a `@oxyhq/core` too old to provision (see
- * {@link assertProvisioningAvailable}). Every other failure is caught and logged:
- * a background credential is an enhancement, and failing to provision one must
- * not disturb the session that is working.
- */
-async function syncBackgroundSession(input) {
-  const native = loadNativeModule();
-  if (!native) {
-    return;
-  }
-  const {
-    oxyServices,
-    userId,
-    canUsePrivateApi,
-    isCurrent
-  } = input;
-
-  // Before the try, so the catch below cannot turn a dependency skew into a
-  // warning. Signed-out is exempt: clearing needs no core method, and a sign-out
-  // must never be blocked by one.
-  if (userId) {
-    assertProvisioningAvailable(oxyServices);
-  }
-  try {
-    if (!userId) {
-      // Signed out. Local-only, so it works with no bearer and no network.
-      await native.clear();
-      return;
-    }
-    const stored = await native.peek();
-    if (stored && stored.accountId !== userId) {
-      // Identity changed under a live credential — clear FIRST, provision after.
-      await native.clear();
-    }
-    const isForCurrentAccount = stored?.accountId === userId;
-    const hasLifeLeft = isForCurrentAccount && stored.expiresAt - Date.now() > RENEW_WHEN_REMAINING_MS;
-    if (hasLifeLeft) {
-      return;
-    }
-
-    // Everything below needs a bearer. Without one yet (cold boot still
-    // resolving) there is nothing to do but wait for the next run — the token
-    // landing re-triggers this.
-    if (!canUsePrivateApi || !isCurrent()) {
-      return;
-    }
-    const provisioned = await oxyServices.provisionBackgroundCredential();
-    if (!provisioned) {
-      // `null` means the endpoint is not deployed yet. Expected during the
-      // rollout window (api leads the SDK) and deliberately quiet.
-      return;
-    }
-    if (!isCurrent()) {
-      return;
-    }
-    if (provisioned.accountId !== userId) {
-      // The active account moved while the request was in flight, so this
-      // credential is already for the wrong account. Drop it; the next run
-      // provisions for the account that is actually signed in.
-      await native.clear();
-      return;
-    }
-    const expiresAt = Date.parse(provisioned.expiresAt);
-    if (!Number.isFinite(expiresAt)) {
-      _core.logger.warn('[backgroundSession] server returned an unparseable credential expiry', {
-        component: 'backgroundSession'
-      });
-      return;
-    }
-    const persisted = await native.put(oxyServices.getBaseURL(), provisioned.deviceId, provisioned.secret, provisioned.accountId, expiresAt);
-    if (!persisted) {
-      _core.logger.warn('[backgroundSession] the native store did not retain the background credential; background refreshes stay signed out until the next attempt', {
-        component: 'backgroundSession'
-      });
-    }
-  } catch (error) {
-    _core.logger.warn('[backgroundSession] could not sync the native background credential', {
-      component: 'backgroundSession',
-      error
-    });
-  }
-}
-//# sourceMappingURL=backgroundSession.js.map

package/lib/commonjs/ui/session/backgroundSession.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_expoModulesCore","require","_reactNative","_core","RENEW_WHEN_REMAINING_MS","nativeModule","loadNativeModule","undefined","Platform","OS","native","requireOptionalNativeModule","put","clear","peek","bind","isBackgroundSessionSupported","clearBackgroundSession","error","logger","warn","component","assertProvisioningAvailable","oxyServices","provisionBackgroundCredential","message","Error","syncBackgroundSession","input","userId","canUsePrivateApi","isCurrent","stored","accountId","isForCurrentAccount","hasLifeLeft","expiresAt","Date","now","provisioned","parse","Number","isFinite","persisted","getBaseURL","deviceId","secret"],"sourceRoot":"../../../../src","sources":["ui/session/backgroundSession.ts"],"mappings":";;;;;;;;AAmCA,IAAAA,gBAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAtCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;;AA+BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMG,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAEvD,IAAIC,YAAiE;;AAErE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,gBAAgBA,CAAA,EAA4C;EACnE,IAAID,YAAY,KAAKE,SAAS,EAAE;IAC9B,IAAIC,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACzBJ,YAAY,GAAG,IAAI;MACnB,OAAOA,YAAY;IACrB;IACA,MAAMK,MAAM,GAAG,IAAAC,4CAA2B,EACxC,sBACF,CAAC;IACDN,YAAY,GACVK,MAAM,IACN,OAAOA,MAAM,CAACE,GAAG,KAAK,UAAU,IAChC,OAAOF,MAAM,CAACG,KAAK,KAAK,UAAU,IAClC,OAAOH,MAAM,CAACI,IAAI,KAAK,UAAU,GAC7B;MACEF,GAAG,EAAEF,MAAM,CAACE,GAAG,CAACG,IAAI,CAACL,MAAM,CAAC;MAC5BG,KAAK,EAAEH,MAAM,CAACG,KAAK,CAACE,IAAI,CAACL,MAAM,CAAC;MAChCI,IAAI,EAAEJ,MAAM,CAACI,IAAI,CAACC,IAAI,CAACL,MAAM;IAC/B,CAAC,GACD,IAAI;EACZ;EACA,OAAOL,YAAY;AACrB;;AAEA;AACO,SAASW,4BAA4BA,CAAA,EAAY;EACtD,OAAOV,gBAAgB,CAAC,CAAC,KAAK,IAAI;AACpC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeW,sBAAsBA,CAAA,EAAkB;EAC5D,MAAMP,MAAM,GAAGJ,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACI,MAAM,EAAE;IACX;EACF;EACA,IAAI;IACF,MAAMA,MAAM,CAACG,KAAK,CAAC,CAAC;EACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;IACdC,YAAM,CAACC,IAAI,CAAC,sEAAsE,EAAE;MAClFC,SAAS,EAAE,mBAAmB;MAC9BH;IACF,CAAC,CAAC;EACJ;AACF;AAgBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASI,2BAA2BA,CAACC,WAAwB,EAAQ;EACnE,IAAI,OAAOA,WAAW,CAACC,6BAA6B,KAAK,UAAU,EAAE;IACnE;EACF;EACA,MAAMC,OAAO,GACX,sFAAsF,GACtF,sFAAsF,GACtF,0FAA0F;EAC5FN,YAAM,CAACD,KAAK,CAACO,OAAO,EAAElB,SAAS,EAAE;IAAEc,SAAS,EAAE;EAAoB,CAAC,CAAC;EACpE,MAAM,IAAIK,KAAK,CAACD,OAAO,CAAC;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeE,qBAAqBA,CAACC,KAAiC,EAAiB;EAC5F,MAAMlB,MAAM,GAAGJ,gBAAgB,CAAC,CAAC;EACjC,IAAI,CAACI,MAAM,EAAE;IACX;EACF;EACA,MAAM;IAAEa,WAAW;IAAEM,MAAM;IAAEC,gBAAgB;IAAEC;EAAU,CAAC,GAAGH,KAAK;;EAElE;EACA;EACA;EACA,IAAIC,MAAM,EAAE;IACVP,2BAA2B,CAACC,WAAW,CAAC;EAC1C;EAEA,IAAI;IACF,IAAI,CAACM,MAAM,EAAE;MACX;MACA,MAAMnB,MAAM,CAACG,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMmB,MAAM,GAAG,MAAMtB,MAAM,CAACI,IAAI,CAAC,CAAC;IAClC,IAAIkB,MAAM,IAAIA,MAAM,CAACC,SAAS,KAAKJ,MAAM,EAAE;MACzC;MACA,MAAMnB,MAAM,CAACG,KAAK,CAAC,CAAC;IACtB;IAEA,MAAMqB,mBAAmB,GAAGF,MAAM,EAAEC,SAAS,KAAKJ,MAAM;IACxD,MAAMM,WAAW,GACfD,mBAAmB,IAAIF,MAAM,CAACI,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGlC,uBAAuB;IAChF,IAAI+B,WAAW,EAAE;MACf;IACF;;IAEA;IACA;IACA;IACA,IAAI,CAACL,gBAAgB,IAAI,CAACC,SAAS,CAAC,CAAC,EAAE;MACrC;IACF;IAEA,MAAMQ,WAAW,GAAG,MAAMhB,WAAW,CAACC,6BAA6B,CAAC,CAAC;IACrE,IAAI,CAACe,WAAW,EAAE;MAChB;MACA;MACA;IACF;IACA,IAAI,CAACR,SAAS,CAAC,CAAC,EAAE;MAChB;IACF;IACA,IAAIQ,WAAW,CAACN,SAAS,KAAKJ,MAAM,EAAE;MACpC;MACA;MACA;MACA,MAAMnB,MAAM,CAACG,KAAK,CAAC,CAAC;MACpB;IACF;IAEA,MAAMuB,SAAS,GAAGC,IAAI,CAACG,KAAK,CAACD,WAAW,CAACH,SAAS,CAAC;IACnD,IAAI,CAACK,MAAM,CAACC,QAAQ,CAACN,SAAS,CAAC,EAAE;MAC/BjB,YAAM,CAACC,IAAI,CAAC,sEAAsE,EAAE;QAClFC,SAAS,EAAE;MACb,CAAC,CAAC;MACF;IACF;IAEA,MAAMsB,SAAS,GAAG,MAAMjC,MAAM,CAACE,GAAG,CAChCW,WAAW,CAACqB,UAAU,CAAC,CAAC,EACxBL,WAAW,CAACM,QAAQ,EACpBN,WAAW,CAACO,MAAM,EAClBP,WAAW,CAACN,SAAS,EACrBG,SACF,CAAC;IACD,IAAI,CAACO,SAAS,EAAE;MACdxB,YAAM,CAACC,IAAI,CACT,4IAA4I,EAC5I;QAAEC,SAAS,EAAE;MAAoB,CACnC,CAAC;IACH;EACF,CAAC,CAAC,OAAOH,KAAK,EAAE;IACdC,YAAM,CAACC,IAAI,CAAC,qEAAqE,EAAE;MACjFC,SAAS,EAAE,mBAAmB;MAC9BH;IACF,CAAC,CAAC;EACJ;AACF","ignoreList":[]}

package/lib/commonjs/ui/session/createSessionClient.js

@@ -1,58 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createSessionClient = createSessionClient;
-var _socket = require("socket.io-client");
-var _core = require("@oxyhq/core");
-var _tokenTransport = require("./tokenTransport.js");
-/**
- * Wire a `SessionClient` for `@oxyhq/services`.
- *
- * The platform-agnostic parts (host adapter, client, projection helpers) live
- * ONCE in `@oxyhq/core`; this thin factory only injects the pieces specific to
- * the RN/Expo SDK:
- *
- *  - `socket.io-client`'s `io`, STATICALLY imported (socket.io-client is a real
- *    dependency of `@oxyhq/services`) so realtime session sync never relies on
- *    core's lazy dynamic import of a bare specifier — bundler-fragile in
- *    Metro/Expo-web against the published core dist.
- *  - the device-first {@link createTokenTransport}, which mints a fallback token
- *    through the ONE shared `httpService.refreshAccessToken` single-flight (it
- *    reads the persisted `deviceId` + `deviceSecret` via the installed handler,
- *    so it takes no `store` of its own).
- *
- * `onUnauthenticated` fires when an applied device state has zero accounts. It
- * receives the {@link SessionStateOrigin} so the provider can gate the
- * destructive credential wipe: a `request`-origin verdict (a REST sign-out /
- * revocation) clears the persisted store; a `push`-origin verdict (a possibly
- * transient socket broadcast) clears only the local UI session and KEEPS the
- * durable device credential. The host is returned alongside the client so the
- * caller can call `host.setCurrentAccountId(...)` as the active account changes.
- *
- * The realtime socket uses bearer when authenticated, or deviceId+deviceSecret
- * when signed out (after the one-shot join redirect).
- *
- * `getPinnedAccountId` reports the account an IDENTITY-BOUND provider
- * (`sessionMode: 'identity'`) is pinned to, and `null` for every account-mode
- * provider — which is exactly the value `SessionClient` and the transport read
- * when the option is absent, so account mode is unchanged. While it reports an
- * account, the client tracks device state truthfully but never re-binds its
- * bearer to the device's mutable active account.
- */
-function createSessionClient(oxyServices, onUnauthenticated, getPinnedAccountId) {
-  const host = (0, _core.createSessionClientHost)(oxyServices);
-  const transport = (0, _tokenTransport.createTokenTransport)(oxyServices, getPinnedAccountId);
-  const client = new _core.SessionClient(host, {
-    transport,
-    socketFactory: _socket.io,
-    onUnauthenticated,
-    getPinnedAccountId
-  });
-  return {
-    client,
-    host
-  };
-}
-//# sourceMappingURL=createSessionClient.js.map

package/lib/commonjs/ui/session/createSessionClient.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_socket","require","_core","_tokenTransport","createSessionClient","oxyServices","onUnauthenticated","getPinnedAccountId","host","createSessionClientHost","transport","createTokenTransport","client","SessionClient","socketFactory","io"],"sourceRoot":"../../../../src","sources":["ui/session/createSessionClient.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AAMA,IAAAE,eAAA,GAAAF,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,mBAAmBA,CACjCC,WAAwB,EACxBC,iBAAwD,EACxDC,kBAAwC,EAIxC;EACA,MAAMC,IAAI,GAAG,IAAAC,6BAAuB,EAACJ,WAAW,CAAC;EACjD,MAAMK,SAAS,GAAG,IAAAC,oCAAoB,EAACN,WAAW,EAAEE,kBAAkB,CAAC;EACvE,MAAMK,MAAM,GAAG,IAAIC,mBAAa,CAACL,IAAI,EAAE;IACrCE,SAAS;IACTI,aAAa,EAAEC,UAAE;IACjBT,iBAAiB;IACjBC;EACF,CAAC,CAAC;EACF,OAAO;IAAEK,MAAM;IAAEJ;EAAK,CAAC;AACzB","ignoreList":[]}

package/lib/commonjs/ui/session/identityBinding.js

@@ -1,95 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.IdentityBoundSessionError = void 0;
-exports.createIdentitySessionBinding = createIdentitySessionBinding;
-var _core = require("@oxyhq/core");
-var _storageHelpers = require("../utils/storageHelpers.js");
-var _nativeSecureStorage = require("./nativeSecureStorage.js");
-/**
- * Identity-bound sessions — the PLATFORM half of `sessionMode: 'identity'`.
- *
- * `@oxyhq/core` owns everything platform-agnostic about an identity-bound
- * session: the pin store shapes, `resolveIdentityPin`,
- * `establishIdentitySession`, and the pinned cold-boot / re-mint lanes. What it
- * deliberately leaves out is WHICH pin store a given runtime should use, so this
- * module supplies it — web `localStorage` vs the same native SecureStore adapter
- * the device credential already persists through — and adds the one piece of
- * state the provider needs on top: a memoised, SYNCHRONOUSLY readable pinned
- * account id.
- *
- * Why the memo matters: `SessionClient.getPinnedAccountId` is a synchronous read
- * on the socket/apply path, while resolving the pin is asynchronous (a storage
- * read plus a keychain read, through `resolveIdentityPin`). The provider
- * resolves it before the cold boot and after every (re-)established identity
- * session; every read after that is free.
- */
-
-/**
- * The provider-scoped identity binding: the core {@link IdentityBinding} handed
- * to the cold boot and the re-mint handler, plus the resolved pin the projection
- * and `SessionClient` bind to.
- */
-
-/**
- * Thrown by every account-graph mutation while the provider runs in
- * `sessionMode: 'identity'`.
- *
- * An identity-bound app's user is the owner of the local identity key — fixed,
- * for the lifetime of that key. Switching it is not a temporarily-unavailable
- * operation that could be retried, it is not part of this mode's contract at
- * all, so the surfaces reject loudly rather than resolving to a no-op that would
- * read to the caller as a successful switch.
- */
-class IdentityBoundSessionError extends Error {
-  name = 'IdentityBoundSessionError';
-  code = 'identity_bound_session';
-  constructor(operation) {
-    super(`"${operation}" is unavailable while the session is identity-bound (sessionMode: "identity"): this app authenticates as the owner of the local identity key and cannot switch accounts.`);
-    this.operation = operation;
-  }
-}
-
-/**
- * Build the identity binding for this runtime. Called ONCE per provider mount,
- * and ONLY when `sessionMode: 'identity'` — account-mode providers never
- * construct a pin store.
- */
-exports.IdentityBoundSessionError = IdentityBoundSessionError;
-function createIdentitySessionBinding() {
-  const pinStore = (0, _storageHelpers.isReactNative)() ? (0, _core.createNativeIdentityPinStore)((0, _nativeSecureStorage.createNativeSecureKeyValueStorage)()) : (0, _core.createWebIdentityPinStore)();
-  const binding = {
-    pinStore
-  };
-
-  // Only a RESOLVED (non-null) pin is memoised. A `null` outcome is either "not
-  // pinned yet" or an indeterminate key read (locked keychain), and caching
-  // either one would leave this client permanently unpinned for the rest of the
-  // process — the exact state in which it would start following the device's
-  // mutable active account.
-  let pinnedAccountId = null;
-  let inFlight = null;
-  const resolve = () => {
-    if (!inFlight) {
-      inFlight = (0, _core.resolveIdentityPin)(binding).then(pin => {
-        pinnedAccountId = pin?.accountId ?? null;
-        return pinnedAccountId;
-      }).finally(() => {
-        inFlight = null;
-      });
-    }
-    return inFlight;
-  };
-  return {
-    binding,
-    getPinnedAccountId: () => pinnedAccountId,
-    ensurePinnedAccountId: () => pinnedAccountId !== null ? Promise.resolve(pinnedAccountId) : resolve(),
-    refreshPinnedAccountId: () => {
-      pinnedAccountId = null;
-      return resolve();
-    }
-  };
-}
-//# sourceMappingURL=identityBinding.js.map

package/lib/commonjs/ui/session/identityBinding.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_core","require","_storageHelpers","_nativeSecureStorage","IdentityBoundSessionError","Error","name","code","constructor","operation","exports","createIdentitySessionBinding","pinStore","isReactNative","createNativeIdentityPinStore","createNativeSecureKeyValueStorage","createWebIdentityPinStore","binding","pinnedAccountId","inFlight","resolve","resolveIdentityPin","then","pin","accountId","finally","getPinnedAccountId","ensurePinnedAccountId","Promise","refreshPinnedAccountId"],"sourceRoot":"../../../../src","sources":["ui/session/identityBinding.ts"],"mappings":";;;;;;;AAkBA,IAAAA,KAAA,GAAAC,OAAA;AAMA,IAAAC,eAAA,GAAAD,OAAA;AACA,IAAAE,oBAAA,GAAAF,OAAA;AAzBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAUA;AACA;AACA;AACA;AACA;;AAqBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMG,yBAAyB,SAASC,KAAK,CAAC;EACjCC,IAAI,GAAG,2BAA2B;EAC3CC,IAAI,GAAG,wBAAwB;EACxCC,WAAWA,CAAUC,SAAiB,EAAE;IACtC,KAAK,CACH,IAAIA,SAAS,2KACf,CAAC;IAAC,KAHiBA,SAAiB,GAAjBA,SAAiB;EAItC;AACF;;AAEA;AACA;AACA;AACA;AACA;AAJAC,OAAA,CAAAN,yBAAA,GAAAA,yBAAA;AAKO,SAASO,4BAA4BA,CAAA,EAA2B;EACrE,MAAMC,QAAQ,GAAG,IAAAC,6BAAa,EAAC,CAAC,GAC5B,IAAAC,kCAA4B,EAAC,IAAAC,sDAAiC,EAAC,CAAC,CAAC,GACjE,IAAAC,+BAAyB,EAAC,CAAC;EAC/B,MAAMC,OAAwB,GAAG;IAAEL;EAAS,CAAC;;EAE7C;EACA;EACA;EACA;EACA;EACA,IAAIM,eAA8B,GAAG,IAAI;EACzC,IAAIC,QAAuC,GAAG,IAAI;EAElD,MAAMC,OAAO,GAAGA,CAAA,KAA8B;IAC5C,IAAI,CAACD,QAAQ,EAAE;MACbA,QAAQ,GAAG,IAAAE,wBAAkB,EAACJ,OAAO,CAAC,CACnCK,IAAI,CAAEC,GAAG,IAAK;QACbL,eAAe,GAAGK,GAAG,EAAEC,SAAS,IAAI,IAAI;QACxC,OAAON,eAAe;MACxB,CAAC,CAAC,CACDO,OAAO,CAAC,MAAM;QACbN,QAAQ,GAAG,IAAI;MACjB,CAAC,CAAC;IACN;IACA,OAAOA,QAAQ;EACjB,CAAC;EAED,OAAO;IACLF,OAAO;IACPS,kBAAkB,EAAEA,CAAA,KAAMR,eAAe;IACzCS,qBAAqB,EAAEA,CAAA,KACrBT,eAAe,KAAK,IAAI,GAAGU,OAAO,CAACR,OAAO,CAACF,eAAe,CAAC,GAAGE,OAAO,CAAC,CAAC;IACzES,sBAAsB,EAAEA,CAAA,KAAM;MAC5BX,eAAe,GAAG,IAAI;MACtB,OAAOE,OAAO,CAAC,CAAC;IAClB;EACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/ui/session/index.js

@@ -1,78 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "IdentityBoundSessionError", {
-  enumerable: true,
-  get: function () {
-    return _identityBinding.IdentityBoundSessionError;
-  }
-});
-Object.defineProperty(exports, "accountIdsOf", {
-  enumerable: true,
-  get: function () {
-    return _core.accountIdsOf;
-  }
-});
-Object.defineProperty(exports, "activeSessionIdOf", {
-  enumerable: true,
-  get: function () {
-    return _core.activeSessionIdOf;
-  }
-});
-Object.defineProperty(exports, "activeUserOf", {
-  enumerable: true,
-  get: function () {
-    return _core.activeUserOf;
-  }
-});
-Object.defineProperty(exports, "createIdentitySessionBinding", {
-  enumerable: true,
-  get: function () {
-    return _identityBinding.createIdentitySessionBinding;
-  }
-});
-Object.defineProperty(exports, "createPlatformAuthStateStore", {
-  enumerable: true,
-  get: function () {
-    return _authStore.createPlatformAuthStateStore;
-  }
-});
-Object.defineProperty(exports, "createSessionClient", {
-  enumerable: true,
-  get: function () {
-    return _createSessionClient.createSessionClient;
-  }
-});
-Object.defineProperty(exports, "createSessionClientHost", {
-  enumerable: true,
-  get: function () {
-    return _core.createSessionClientHost;
-  }
-});
-Object.defineProperty(exports, "createTokenTransport", {
-  enumerable: true,
-  get: function () {
-    return _tokenTransport.createTokenTransport;
-  }
-});
-Object.defineProperty(exports, "deviceStateToClientSessions", {
-  enumerable: true,
-  get: function () {
-    return _core.deviceStateToClientSessions;
-  }
-});
-Object.defineProperty(exports, "useBackgroundSessionSync", {
-  enumerable: true,
-  get: function () {
-    return _useBackgroundSessionSync.useBackgroundSessionSync;
-  }
-});
-var _createSessionClient = require("./createSessionClient.js");
-var _tokenTransport = require("./tokenTransport.js");
-var _authStore = require("./authStore.js");
-var _useBackgroundSessionSync = require("./useBackgroundSessionSync.js");
-var _identityBinding = require("./identityBinding.js");
-var _core = require("@oxyhq/core");
-//# sourceMappingURL=index.js.map

package/lib/commonjs/ui/session/index.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_createSessionClient","require","_tokenTransport","_authStore","_useBackgroundSessionSync","_identityBinding","_core"],"sourceRoot":"../../../../src","sources":["ui/session/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAAA,oBAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,yBAAA,GAAAH,OAAA;AACA,IAAAI,gBAAA,GAAAJ,OAAA;AAEA,IAAAK,KAAA,GAAAL,OAAA","ignoreList":[]}