@oxyhq/services 5.21.6 → 5.22.0

package/lib/typescript/module/ui/screens/FileManagementScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileManagementScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/FileManagementScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAgBjF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AA6FzE,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,yBAAyB,CAmpE7D,CAAC;AAIF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"FileManagementScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/FileManagementScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAgBjF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AA6FzE,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,yBAAyB,CAqqE7D,CAAC;AAIF,eAAe,oBAAoB,CAAC"}

package/lib/typescript/module/ui/screens/HistoryViewScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HistoryViewScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/HistoryViewScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AAiP3D,wBAA6C"}
+{"version":3,"file":"HistoryViewScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/HistoryViewScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAMrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AAuP3D,wBAA6C"}

package/lib/typescript/module/ui/screens/LanguageSelectorScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LanguageSelectorScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/LanguageSelectorScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAS9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAY3D,UAAU,2BAA4B,SAAQ,eAAe;CAAI;;AA6LjE,wBAAkD"}
+{"version":3,"file":"LanguageSelectorScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/LanguageSelectorScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAS9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAY3D,UAAU,2BAA4B,SAAQ,eAAe;CAAI;;AA+LjE,wBAAkD"}

package/lib/typescript/module/ui/screens/LegalDocumentsScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LegalDocumentsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/LegalDocumentsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAOrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AA4L3D,wBAAgD"}
+{"version":3,"file":"LegalDocumentsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/LegalDocumentsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAOrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AA8L3D,wBAAgD"}

package/lib/typescript/module/ui/screens/PremiumSubscriptionScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PremiumSubscriptionScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/PremiumSubscriptionScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAc/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqD3D,QAAA,MAAM,yBAAyB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA0jCxD,CAAC;AAmdF,eAAe,yBAAyB,CAAC"}
+{"version":3,"file":"PremiumSubscriptionScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/PremiumSubscriptionScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAc/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqD3D,QAAA,MAAM,yBAAyB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAwjCxD,CAAC;AAmdF,eAAe,yBAAyB,CAAC"}

package/lib/typescript/module/ui/screens/PrivacySettingsScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PrivacySettingsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/PrivacySettingsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AAQzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AAqf3D,wBAAiD"}
+{"version":3,"file":"PrivacySettingsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/PrivacySettingsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AAQzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AA6f3D,wBAAiD"}

package/lib/typescript/module/ui/screens/SearchSettingsScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SearchSettingsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/SearchSettingsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AAMnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AA2I3D,wBAAgD"}
+{"version":3,"file":"SearchSettingsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/SearchSettingsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AAMnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AA6I3D,wBAAgD"}

package/lib/typescript/module/ui/screens/SessionManagementScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SessionManagementScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/SessionManagementScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAa/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqB3D,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA4StD,CAAC;AAwFF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"SessionManagementScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/SessionManagementScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAa/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqB3D,QAAA,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAsTtD,CAAC;AAwFF,eAAe,uBAAuB,CAAC"}

package/lib/typescript/module/ui/screens/UserLinksScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserLinksScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/UserLinksScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAK3D,UAAU,oBAAqB,SAAQ,eAAe;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;QACV,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACN;AAED,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAqDnD,CAAC;AAsBF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"UserLinksScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/UserLinksScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAK3D,UAAU,oBAAqB,SAAQ,eAAe;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;QACV,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACN;AAED,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAuDnD,CAAC;AAsBF,eAAe,eAAe,CAAC"}

package/lib/typescript/module/ui/screens/WelcomeNewUserScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WelcomeNewUserScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/WelcomeNewUserScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAGjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAgD3D;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,GAAG;IAAE,OAAO,CAAC,EAAE,GAAG,CAAA;CAAE,CAgMvE,CAAC;AAgGF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"WelcomeNewUserScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/WelcomeNewUserScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAGjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAiD3D;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,GAAG;IAAE,OAAO,CAAC,EAAE,GAAG,CAAA;CAAE,CAgMvE,CAAC;AAgGF,eAAe,oBAAoB,CAAC"}

package/lib/typescript/module/ui/screens/karma/KarmaAboutScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KarmaAboutScreen.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/screens/karma/KarmaAboutScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAQ9D,QAAA,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAwC/C,CAAC;AAwBF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"KarmaAboutScreen.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/screens/karma/KarmaAboutScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAQ9D,QAAA,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAwC/C,CAAC;AAsBF,eAAe,gBAAgB,CAAC"}

package/lib/typescript/module/ui/styles/fonts.d.ts

@@ -6,13 +6,13 @@ import { type TextStyle } from 'react-native';
  * For native platforms, we use the specific static font file names
  */
 export declare const fontFamilies: {
-    phudu: string;
-    phuduLight: string;
-    phuduMedium: string;
-    phuduSemiBold: string;
-    phuduBold: string;
-    phuduExtraBold: string;
-    phuduBlack: string;
+    inter: string;
+    interLight: string;
+    interMedium: string;
+    interSemiBold: string;
+    interBold: string;
+    interExtraBold: string;
+    interBlack: string;
 };
 /**
  * Font styles that can be reused across the app

package/lib/typescript/module/ui/styles/theme.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../../../../src/ui/styles/theme.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAGpE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE;QACL,KAAK,EAAE,SAAS,CAAC;QACjB,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,SAAS,CAAC;KAClB,CAAC;CACH;AA4DD,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,GAAG,MAAM,KAAG,KAElD,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,OAAO,OAAO,GAAG,MAAM,KAAG,WAExD,CAAC;AAGF,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,GAAG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CzD,CAAC"}
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../../../../src/ui/styles/theme.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAGpE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE;QACL,KAAK,EAAE,SAAS,CAAC;QACjB,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,SAAS,CAAC;KAClB,CAAC;CACH;AA0DD,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,GAAG,MAAM,KAAG,KAElD,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,OAAO,OAAO,GAAG,MAAM,KAAG,WAExD,CAAC;AAGF,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,GAAG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CzD,CAAC"}

package/lib/typescript/module/ui/utils/authHelpers.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Authentication helper utilities to reduce code duplication across hooks and utilities.
+ * These functions handle common token validation and authentication error patterns.
+ */
+import type { OxyServices } from '../../core';
+/**
+ * Error thrown when session sync is required
+ */
+export declare class SessionSyncRequiredError extends Error {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when authentication fails
+ */
+export declare class AuthenticationFailedError extends Error {
+    constructor(message?: string);
+}
+/**
+ * Ensures a valid token exists before making authenticated API calls.
+ * If no valid token exists and an active session ID is available,
+ * attempts to refresh the token using the session.
+ *
+ * @param oxyServices - The OxyServices instance
+ * @param activeSessionId - The active session ID (if available)
+ * @throws {SessionSyncRequiredError} If the session needs to be synced (offline session)
+ * @throws {Error} If token refresh fails for other reasons
+ *
+ * @example
+ * ```ts
+ * // In a mutation or query function:
+ * await ensureValidToken(oxyServices, activeSessionId);
+ * return await oxyServices.updateProfile(updates);
+ * ```
+ */
+export declare function ensureValidToken(oxyServices: OxyServices, activeSessionId: string | null | undefined): Promise<void>;
+/**
+ * Options for handling API authentication errors
+ */
+export interface HandleApiErrorOptions {
+    /** Optional callback to attempt session sync and retry */
+    syncSession?: () => Promise<unknown>;
+    /** The active session ID for retry attempts */
+    activeSessionId?: string | null;
+    /** The OxyServices instance for retry attempts */
+    oxyServices?: OxyServices;
+}
+/**
+ * Checks if an error is an authentication error (401 or auth-related message)
+ *
+ * @param error - The error to check
+ * @returns True if the error is an authentication error
+ */
+export declare function isAuthenticationError(error: unknown): boolean;
+/**
+ * Wraps an API call with authentication error handling.
+ * If an authentication error occurs, it can optionally attempt to sync the session and retry.
+ *
+ * @param apiCall - The API call function to execute
+ * @param options - Optional error handling configuration
+ * @returns The result of the API call
+ * @throws {AuthenticationFailedError} If authentication fails and cannot be recovered
+ * @throws {Error} If the API call fails for non-auth reasons
+ *
+ * @example
+ * ```ts
+ * // Simple usage:
+ * const result = await withAuthErrorHandling(
+ *   () => oxyServices.updateProfile(updates)
+ * );
+ *
+ * // With retry on auth failure:
+ * const result = await withAuthErrorHandling(
+ *   () => oxyServices.updateProfile(updates),
+ *   { syncSession, activeSessionId, oxyServices }
+ * );
+ * ```
+ */
+export declare function withAuthErrorHandling<T>(apiCall: () => Promise<T>, options?: HandleApiErrorOptions): Promise<T>;
+/**
+ * Combines token validation and auth error handling for a complete authenticated API call.
+ * This is the recommended helper for most authenticated API operations.
+ *
+ * @param oxyServices - The OxyServices instance
+ * @param activeSessionId - The active session ID
+ * @param apiCall - The API call function to execute
+ * @param syncSession - Optional callback to sync session on auth failure
+ * @returns The result of the API call
+ *
+ * @example
+ * ```ts
+ * return await authenticatedApiCall(
+ *   oxyServices,
+ *   activeSessionId,
+ *   () => oxyServices.updateProfile(updates)
+ * );
+ * ```
+ */
+export declare function authenticatedApiCall<T>(oxyServices: OxyServices, activeSessionId: string | null | undefined, apiCall: () => Promise<T>, syncSession?: () => Promise<unknown>): Promise<T>;
+//# sourceMappingURL=authHelpers.d.ts.map

package/lib/typescript/module/ui/utils/authHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authHelpers.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/authHelpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,SAAkD;CAItE;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,SAAiD;CAIrE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACzC,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kDAAkD;IAClD,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAc7D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,CAAC,CAAC,CAsBZ;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GACnC,OAAO,CAAC,CAAC,CAAC,CAQZ"}

package/lib/typescript/module/ui/utils/avatarUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"avatarUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/avatarUtils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,WAAW,EAAE,WAAW,EACxB,WAAW,GAAE,MAAsB,GAClC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,WAAW,GACvB,IAAI,CAON;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EACtB,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,WAAW,EAAE,WAAW,EACxB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC,CAoEf"}
+{"version":3,"file":"avatarUtils.d.ts","sourceRoot":"","sources":["../../../../../src/ui/utils/avatarUtils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,WAAW,EAAE,WAAW,EACxB,WAAW,GAAE,MAAsB,GAClC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,WAAW,GACvB,IAAI,CAON;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EACtB,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,WAAW,EAAE,WAAW,EACxB,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/lib/typescript/module/web.d.ts

@@ -0,0 +1,54 @@
+/**
+ * OxyHQServices Web Entry Point - Pure React/Next.js Apps
+ *
+ * This entry point is optimized for pure web applications without Expo or React Native.
+ * It excludes all React Native dependencies for a smaller bundle size.
+ *
+ * Use this for:
+ * - Pure React apps (Vite, Create React App)
+ * - Next.js apps
+ * - Any web-only application
+ *
+ * For Expo apps (native + web), use the main entry point instead:
+ * import { OxyProvider } from '@oxyhq/services';
+ */
+import './crypto/polyfill';
+export { OxyServices, OxyAuthenticationError, OxyAuthenticationTimeoutError } from './core';
+export { OXY_CLOUD_URL, oxyClient } from './core';
+export { CrossDomainAuth, createCrossDomainAuth } from './core';
+export type { CrossDomainAuthOptions } from './core';
+export { KeyManager, SignatureService, RecoveryPhraseService } from './crypto';
+export type { KeyPair, SignedMessage, AuthChallenge, RecoveryPhraseResult } from './crypto';
+export { useOxy } from './ui/context/OxyContext';
+export { useAuth } from './ui/hooks/useAuth';
+export type { AuthState, AuthActions, UseAuthReturn } from './ui/hooks/useAuth';
+export { default as WebOxyProvider } from './ui/components/WebOxyProvider';
+export { DeviceManager } from './utils/deviceManager';
+export type { DeviceFingerprint, StoredDeviceInfo } from './utils/deviceManager';
+export { SUPPORTED_LANGUAGES, getLanguageMetadata, getLanguageName, getNativeLanguageName, normalizeLanguageCode } from './utils/languageUtils';
+export type { LanguageMetadata } from './utils/languageUtils';
+export type { OxyConfig, User, LoginResponse, Notification, Wallet, Transaction, TransferFundsRequest, PurchaseRequest, WithdrawalRequest, TransactionResponse, KarmaRule, KarmaHistory, KarmaLeaderboardEntry, KarmaAwardRequest, ApiError, PaymentMethod, PaymentRequest, PaymentResponse, AnalyticsData, FollowerDetails, ContentViewer, FileMetadata, FileUploadResponse, FileListResponse, FileUpdateRequest, FileDeleteResponse, DeviceSession, DeviceSessionsResponse, DeviceSessionLogoutResponse, UpdateDeviceNameResponse, BlockedUser, RestrictedUser, FileVisibility, AssetLink, AssetVariant, Asset, AssetInitRequest, AssetInitResponse, AssetCompleteRequest, AssetLinkRequest, AssetUnlinkRequest, AssetUrlResponse, AssetDeleteSummary, AssetUploadProgress, AssetUpdateVisibilityRequest, AssetUpdateVisibilityResponse, AccountStorageCategoryUsage, AccountStorageUsageResponse, SecurityEventType, SecurityEventSeverity, SecurityActivity, SecurityActivityResponse } from './models/interfaces';
+export { SECURITY_EVENT_SEVERITY_MAP } from './models/interfaces';
+export type { SessionLoginResponse, ClientSession, MinimalUserData } from './models/session';
+export { useAuthStore } from './ui/stores/authStore';
+export { useAssetStore, useAssets as useAssetsStore, useAsset, useUploadProgress, useAssetLoading, useAssetErrors, useAssetsByApp, useAssetsByEntity, useAssetUsageCount, useIsAssetLinked } from './ui/stores/assetStore';
+export { useSessionSocket } from './ui/hooks/useSessionSocket';
+export { useAssets, setOxyAssetInstance } from './ui/hooks/useAssets';
+export { useFileDownloadUrl, setOxyFileUrlInstance } from './ui/hooks/useFileDownloadUrl';
+export { useUserProfile, useUserProfiles, useCurrentUser, useUserById, useUserByUsername, useUsersBySessions, usePrivacySettings, useSessions, useSession, useDeviceSessions, useUserDevices, useSecurityInfo, useSecurityActivity, useRecentSecurityActivity, } from './ui/hooks/queries';
+export { useUpdateProfile, useUploadAvatar, useUpdateAccountSettings, useUpdatePrivacySettings, useUploadFile, useSwitchSession, useLogoutSession, useLogoutAll, useUpdateDeviceName, useRemoveDevice, } from './ui/hooks/mutations';
+export { createProfileMutation, createGenericMutation, } from './ui/hooks/mutations/mutationFactory';
+export type { ProfileMutationConfig, GenericMutationConfig, } from './ui/hooks/mutations/mutationFactory';
+export { ensureValidToken, withAuthErrorHandling, authenticatedApiCall, isAuthenticationError, SessionSyncRequiredError, AuthenticationFailedError, } from './ui/utils/authHelpers';
+export type { HandleApiErrorOptions } from './ui/utils/authHelpers';
+export { useFileFiltering } from './ui/hooks/useFileFiltering';
+export type { ViewMode, SortBy, SortOrder } from './ui/hooks/useFileFiltering';
+export { OxySignInButton } from './ui/components/OxySignInButton';
+export { OxyLogo } from './ui/components/OxyLogo';
+export * from './utils/apiUtils';
+export { ErrorCodes, createApiError, handleHttpError, validateRequiredFields, retryWithBackoff } from './utils/errorUtils';
+export * from './utils/validationUtils';
+export { logger, LogLevel, LogContext, logAuth, logApi, logSession, logUser, logDevice, logPayment, logPerformance } from './utils/loggerUtils';
+export * from './utils/asyncUtils';
+export * from './utils/hookUtils';
+//# sourceMappingURL=web.d.ts.map

package/lib/typescript/module/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../../src/web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,mBAAmB,CAAC;AAG3B,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGlD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAChE,YAAY,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC;AAGrD,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,OAAO,EACP,aAAa,EACb,aAAa,EACb,oBAAoB,EACrB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGhF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAG3E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGjF,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,YAAY,EACV,SAAS,EACT,IAAI,EACJ,aAAa,EACb,YAAY,EACZ,MAAM,EACN,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,cAAc,EACd,eAAe,EACf,aAAa,EACb,eAAe,EACf,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,EACT,YAAY,EACZ,KAAK,EACL,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAElE,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,aAAa,EACb,SAAS,IAAI,cAAc,EAC3B,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAG1F,OAAO,EACL,cAAc,EACd,eAAe,EACf,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,MAAM,EACN,QAAQ,EACR,UAAU,EACV,OAAO,EACP,MAAM,EACN,UAAU,EACV,OAAO,EACP,SAAS,EACT,UAAU,EACV,cAAc,EACf,MAAM,qBAAqB,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/services",
-  "version": "5.21.6",
+  "version": "5.22.0",
   "description": "Reusable OxyHQ module to handle authentication, user management, karma system, device-based session management and more 🚀",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -13,6 +13,7 @@
   },
   "exports": {
     ".": {
+      "types": "./lib/typescript/module/index.d.ts",
       "react-native": "./src/index.ts",
       "node": {
         "import": {
@@ -24,58 +25,43 @@
           "default": "./lib/commonjs/core/index.js"
         }
       },
-      "import": {
-        "types": "./lib/typescript/module/index.d.ts",
-        "default": "./lib/module/index.js"
-      },
-      "require": {
-        "types": "./lib/typescript/commonjs/index.d.ts",
-        "default": "./lib/commonjs/index.js"
-      }
+      "import": "./lib/module/index.js",
+      "require": "./lib/commonjs/index.js",
+      "default": "./lib/module/index.js"
+    },
+    "./web": {
+      "types": "./lib/typescript/module/web.d.ts",
+      "import": "./lib/module/web.js",
+      "require": "./lib/commonjs/web.js",
+      "default": "./lib/module/web.js"
     },
     "./core": {
+      "types": "./lib/typescript/module/core/index.d.ts",
       "react-native": "./src/core/index.ts",
-      "import": {
-        "types": "./lib/typescript/module/core/index.d.ts",
-        "default": "./lib/module/core/index.js"
-      },
-      "require": {
-        "types": "./lib/typescript/commonjs/core/index.d.ts",
-        "default": "./lib/commonjs/core/index.js"
-      }
+      "import": "./lib/module/core/index.js",
+      "require": "./lib/commonjs/core/index.js",
+      "default": "./lib/module/core/index.js"
     },
     "./ui": {
+      "types": "./lib/typescript/module/ui/index.d.ts",
       "react-native": "./src/ui/index.ts",
-      "import": {
-        "types": "./lib/typescript/module/ui/index.d.ts",
-        "default": "./lib/module/ui/index.js"
-      },
-      "require": {
-        "types": "./lib/typescript/commonjs/ui/index.d.ts",
-        "default": "./lib/commonjs/ui/index.js"
-      }
+      "import": "./lib/module/ui/index.js",
+      "require": "./lib/commonjs/ui/index.js",
+      "default": "./lib/module/ui/index.js"
     },
     "./full": {
+      "types": "./lib/typescript/module/index.d.ts",
       "react-native": "./src/index.ts",
-      "import": {
-        "types": "./lib/typescript/module/index.d.ts",
-        "default": "./lib/module/index.js"
-      },
-      "require": {
-        "types": "./lib/typescript/commonjs/index.d.ts",
-        "default": "./lib/commonjs/index.js"
-      }
+      "import": "./lib/module/index.js",
+      "require": "./lib/commonjs/index.js",
+      "default": "./lib/module/index.js"
     },
     "./crypto": {
+      "types": "./lib/typescript/module/crypto/index.d.ts",
       "react-native": "./src/crypto/index.ts",
-      "import": {
-        "types": "./lib/typescript/module/crypto/index.d.ts",
-        "default": "./lib/module/crypto/index.js"
-      },
-      "require": {
-        "types": "./lib/typescript/commonjs/crypto/index.d.ts",
-        "default": "./lib/commonjs/crypto/index.js"
-      }
+      "import": "./lib/module/crypto/index.js",
+      "require": "./lib/commonjs/crypto/index.js",
+      "default": "./lib/module/crypto/index.js"
     },
     "./package.json": "./package.json"
   },

package/src/core/HttpService.ts

@@ -53,6 +53,8 @@ class TokenStore {
   private static instance: TokenStore;
   private accessToken: string | null = null;
   private refreshToken: string | null = null;
+  private csrfToken: string | null = null;
+  private csrfTokenFetchPromise: Promise<string | null> | null = null;
 
   private constructor() {}
 
@@ -84,6 +86,27 @@ class TokenStore {
   hasAccessToken(): boolean {
     return !!this.accessToken;
   }
+
+  setCsrfToken(token: string | null): void {
+    this.csrfToken = token;
+  }
+
+  getCsrfToken(): string | null {
+    return this.csrfToken;
+  }
+
+  setCsrfTokenFetchPromise(promise: Promise<string | null> | null): void {
+    this.csrfTokenFetchPromise = promise;
+  }
+
+  getCsrfTokenFetchPromise(): Promise<string | null> | null {
+    return this.csrfTokenFetchPromise;
+  }
+
+  clearCsrfToken(): void {
+    this.csrfToken = null;
+    this.csrfTokenFetchPromise = null;
+  }
 }
 
 /**
@@ -206,6 +229,10 @@ export class HttpService {
         // Get auth token (with auto-refresh)
         const authHeader = await this.getAuthHeader();
 
+        // Get CSRF token for state-changing requests
+        const isStateChangingMethod = ['POST', 'PUT', 'PATCH', 'DELETE'].includes(method);
+        const csrfToken = isStateChangingMethod ? await this.fetchCsrfToken() : null;
+
         // Determine if data is FormData using robust detection
         const isFormData = this.isFormData(data);
 
@@ -232,6 +259,11 @@ export class HttpService {
           headers['Authorization'] = authHeader;
         }
 
+        // Add CSRF token header for state-changing requests
+        if (csrfToken) {
+          headers['X-CSRF-Token'] = csrfToken;
+        }
+
         // Merge custom headers if provided
         if (config.headers) {
           Object.entries(config.headers).forEach(([key, value]) => {
@@ -254,6 +286,7 @@ export class HttpService {
           headers,
           body: bodyValue as BodyInit | null | undefined,
           signal: controller.signal,
+          credentials: 'include', // Include cookies for cross-origin requests (CSRF, session)
         });
 
         if (timeoutId) clearTimeout(timeoutId);
@@ -416,6 +449,62 @@ export class HttpService {
     return queryString ? `${base}${base.includes('?') ? '&' : '?'}${queryString}` : base;
   }
 
+  /**
+   * Fetch CSRF token from server (with deduplication)
+   * Required for state-changing requests (POST, PUT, PATCH, DELETE)
+   */
+  private async fetchCsrfToken(): Promise<string | null> {
+    // Return cached token if available
+    const cachedToken = this.tokenStore.getCsrfToken();
+    if (cachedToken) {
+      return cachedToken;
+    }
+
+    // Deduplicate concurrent CSRF token fetches
+    const existingPromise = this.tokenStore.getCsrfTokenFetchPromise();
+    if (existingPromise) {
+      return existingPromise;
+    }
+
+    const fetchPromise = (async () => {
+      try {
+        const response = await fetch(`${this.baseURL}/api/csrf-token`, {
+          method: 'GET',
+          headers: { 'Accept': 'application/json' },
+          credentials: 'include', // Required to receive and send cookies
+          signal: AbortSignal.timeout(5000),
+        });
+
+        if (response.ok) {
+          const data = await response.json() as { csrfToken?: string };
+          const token = data.csrfToken || null;
+          this.tokenStore.setCsrfToken(token);
+          this.logger.debug('CSRF token fetched');
+          return token;
+        }
+
+        // Also check response header for CSRF token
+        const headerToken = response.headers.get('X-CSRF-Token');
+        if (headerToken) {
+          this.tokenStore.setCsrfToken(headerToken);
+          this.logger.debug('CSRF token from header');
+          return headerToken;
+        }
+
+        this.logger.warn('Failed to fetch CSRF token:', response.status);
+        return null;
+      } catch (error) {
+        this.logger.warn('CSRF token fetch error:', error);
+        return null;
+      } finally {
+        this.tokenStore.setCsrfTokenFetchPromise(null);
+      }
+    })();
+
+    this.tokenStore.setCsrfTokenFetchPromise(fetchPromise);
+    return fetchPromise;
+  }
+
   /**
    * Get auth header with automatic token refresh
    */
@@ -439,6 +528,7 @@ export class HttpService {
             method: 'GET',
             headers: { 'Accept': 'application/json' },
             signal: AbortSignal.timeout(5000),
+            credentials: 'include', // Include cookies for cross-origin requests
           });
 
           if (response.ok) {
@@ -568,6 +658,7 @@ export class HttpService {
 
   clearTokens(): void {
     this.tokenStore.clearTokens();
+    this.tokenStore.clearCsrfToken();
   }
 
   getAccessToken(): string | null {

package/src/core/mixins/OxyServices.assets.ts

@@ -402,7 +402,7 @@ export function OxyServicesAssetsMixin<T extends typeof OxyServicesBase>(Base: T
     public async fetchAssetContent(url: string, type: 'text'): Promise<string>;
     public async fetchAssetContent(url: string, type: 'blob'): Promise<Blob>;
     public async fetchAssetContent(url: string, type: 'text' | 'blob') {
-      const response = await fetch(url);
+      const response = await fetch(url, { credentials: 'include' });
       if (!response?.ok) {
         throw new Error(`Failed to fetch asset content (status ${response?.status})`);
       }