@oxyhq/services 8.1.2 → 8.2.0

package/lib/commonjs/ui/components/OxyProvider.js

@@ -10,6 +10,7 @@ var _OxyContext = require("../context/OxyContext.js");
 var _reactQuery = require("@tanstack/react-query");
 var _bloom = require("@oxyhq/bloom");
 var _toast = require("@oxyhq/bloom/toast");
+var _core = require("@oxyhq/core");
 var _FontLoader = require("./FontLoader.js");
 var _queryClient = require("../hooks/queryClient.js");
 var _storageHelpers = require("../utils/storageHelpers.js");
@@ -53,7 +54,9 @@ const LazyBottomSheetRouter = /*#__PURE__*/(0, _react.lazy)(() => Promise.resolv
   default: mod.default
 }), error => {
   if (__DEV__) {
-    console.error('[OxyProvider] Failed to load BottomSheetRouter:', error);
+    _core.logger.error('Failed to load BottomSheetRouter', error instanceof Error ? error : new Error(String(error)), {
+      component: 'OxyProvider'
+    });
   }
   return {
     default: () => null
@@ -118,7 +121,9 @@ const OxyProvider = ({
     const moduleName = KEYBOARD_CONTROLLER_MODULE;
     (specifier => new Promise(r => r(`${specifier}`)).then(s => _interopRequireWildcard(require(s))))(moduleName).then(mod => setKBProvider(() => mod.KeyboardProvider)).catch(error => {
       if (__DEV__) {
-        console.warn('[OxyProvider] react-native-keyboard-controller not available, skipping keyboard support', error);
+        _core.logger.warn('react-native-keyboard-controller not available, skipping keyboard support', {
+          component: 'OxyProvider'
+        }, error);
       }
     });
   }, []);
@@ -161,7 +166,9 @@ const OxyProvider = ({
         storage = await (0, _storageHelpers.createPlatformStorage)();
       } catch (error) {
         if (__DEV__) {
-          console.warn('[OxyProvider] Failed to initialize storage for query persistence', error);
+          _core.logger.warn('Failed to initialize storage for query persistence', {
+            component: 'OxyProvider'
+          }, error);
         }
       }
       if (!mounted || queryClientRef.current) return;

package/lib/commonjs/ui/components/OxyProvider.js.map

@@ -1 +1 @@
-{"version":3,"names":["_react","require","_reactNative","_OxyContext","_reactQuery","_bloom","_toast","_FontLoader","_queryClient","_storageHelpers","_jsxRuntime","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","BOOT_BG_COLOR","bootStyles","StyleSheet","create","bootShell","flex","backgroundColor","setupFonts","isWeb","Platform","OS","KEYBOARD_CONTROLLER_MODULE","LazyBottomSheetRouter","lazy","Promise","resolve","then","mod","error","__DEV__","console","LazySignInModal","OxyProvider","oxyServices","children","onAuthStateChange","storageKeyPrefix","baseURL","authWebUrl","authRedirectUri","queryClient","providedQueryClient","KBProvider","setKBProvider","useState","useEffect","moduleName","specifier","s","KeyboardProvider","catch","warn","KeyboardWrapper","jsx","Fragment","storageRef","useRef","queryClientRef","persistenceUnsubRef","setQueryClient","current","mounted","bootstrap","storage","createPlatformStorage","client","createQueryClient","restored","unsubscribe","attachQueryPersistence","handleVisibilityChange","focusManager","setFocused","document","visibilityState","addEventListener","removeEventListener","subscription","AppState","state","remove","cleanup","setupNetworkMonitoring","onlineManager","setOnline","navigator","onLine","handleOnline","handleOffline","window","NetInfo","fetch","isConnected","View","style","coreContent","QueryClientProvider","BloomDialogProvider","jsxs","OxyContextProvider","Suspense","fallback","ToastOutlet","_default","exports"],"sourceRoot":"../../../../src","sources":["ui/components/OxyProvider.tsx"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,WAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AACA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,WAAA,GAAAN,OAAA;AACA,IAAAO,YAAA,GAAAP,OAAA;AACA,IAAAQ,eAAA,GAAAR,OAAA;AAAuF,IAAAS,WAAA,GAAAT,OAAA;AAAA,SAAAU,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA,KAEvF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMkB,aAAa,GAAG,SAAS;AAE/B,MAAMC,UAAU,GAAGC,uBAAU,CAACC,MAAM,CAAC;EACjCC,SAAS,EAAE;IACPC,IAAI,EAAE,CAAC;IACPC,eAAe,EAAEN;EACrB;AACJ,CAAC,CAAC;;AAEF;AACA,IAAAO,sBAAU,EAAC,CAAC;;AAEZ;AACA,MAAMC,KAAK,GAAGC,qBAAQ,CAACC,EAAE,KAAK,KAAK;;AAEnC;AACA;AACA,MAAMC,0BAA0B,GAAG,kCAAkC;;AAErE;AACA;AACA;AACA,MAAMC,qBAAqB,gBAAG,IAAAC,WAAI,EAAC,MAC/BC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAApC,uBAAA,CAAAV,OAAA,CAAO,qBAAqB,IAAE8C,IAAI,CAC7BC,GAAG,KAAM;EAAE1B,OAAO,EAAE0B,GAAG,CAAC1B;AAAoC,CAAC,CAAC,EAC9D2B,KAAK,IAAK;EACP,IAAIC,OAAO,EAAE;IACTC,OAAO,CAACF,KAAK,CAAC,iDAAiD,EAAEA,KAAK,CAAC;EAC3E;EACA,OAAO;IAAE3B,OAAO,EAAGA,CAAA,KAAM;EAAY,CAAC;AAC1C,CACJ,CACJ,CAAC;AAED,MAAM8B,eAAe,gBAAG,IAAAR,WAAI,EAAC,MACzBC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAApC,uBAAA,CAAAV,OAAA,CAAO,eAAe,IAAE8C,IAAI,CACvBC,GAAG,KAAM;EAAE1B,OAAO,EAAE0B,GAAG,CAAC1B;AAAoC,CAAC,CAAC,EAC/D,OAAO;EAAEA,OAAO,EAAGA,CAAA,KAAM;AAAY,CAAC,CAC1C,CACJ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM+B,WAAiC,GAAGA,CAAC;EACvCC,WAAW;EACXC,QAAQ;EACRC,iBAAiB;EACjBC,gBAAgB;EAChBC,OAAO;EACPC,UAAU;EACVC,eAAe;EACfC,WAAW,EAAEC;AACjB,CAAC,KAAK;EAEF;EACA;EACA;EACA;EACA,MAAM,CAACC,UAAU,EAAEC,aAAa,CAAC,GAAG,IAAAC,eAAQ,EAAqC,IAAI,CAAC;EACtF,IAAAC,gBAAS,EAAC,MAAM;IACZ,IAAI3B,KAAK,EAAE;IACX,MAAM4B,UAAU,GAAGzB,0BAA0B;IAC7C,CAAA0B,SAAA,QAAAvB,OAAA,CAAA9B,CAAA,IAAAA,CAAA,IAAAqD,SAAA,KAAArB,IAAA,CAAAsB,CAAA,IAAA1D,uBAAA,CAAAV,OAAA,CAAAoE,CAAA,KAAOF,UAAU,EACZpB,IAAI,CAAEC,GAAG,IAAKgB,aAAa,CAAC,MAAMhB,GAAG,CAACsB,gBAAgB,CAAC,CAAC,CACxDC,KAAK,CAAEtB,KAAK,IAAK;MACd,IAAIC,OAAO,EAAE;QACTC,OAAO,CAACqB,IAAI,CAAC,yFAAyF,EAAEvB,KAAK,CAAC;MAClH;IACJ,CAAC,CAAC;EACV,CAAC,EAAE,EAAE,CAAC;EACN,MAAMwB,eAA4C,GAAGV,UAAU,KAAK,CAAC;IAAER;EAAS,CAAC,kBAAK,IAAA7C,WAAA,CAAAgE,GAAA,EAAAhE,WAAA,CAAAiE,QAAA;IAAApB,QAAA,EAAGA;EAAQ,CAAG,CAAC,CAAC;;EAEtG;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMqB,UAAU,GAAG,IAAAC,aAAM,EAA0B,IAAI,CAAC;EACxD,MAAMC,cAAc,GAAG,IAAAD,aAAM,EAA8C,IAAI,CAAC;EAChF,MAAME,mBAAmB,GAAG,IAAAF,aAAM,EAAsB,IAAI,CAAC;;EAE7D;EACA;EACA,MAAM,CAAChB,WAAW,EAAEmB,cAAc,CAAC,GAAG,IAAAf,eAAQ,EAA8C,MAAM;IAC9F,IAAIH,mBAAmB,EAAE;MACrBgB,cAAc,CAACG,OAAO,GAAGnB,mBAAmB;MAC5C,OAAOA,mBAAmB;IAC9B;IACA,OAAO,IAAI;EACf,CAAC,CAAC;EAEF,IAAAI,gBAAS,EAAC,MAAM;IACZ,IAAIJ,mBAAmB,EAAE;MACrBgB,cAAc,CAACG,OAAO,GAAGnB,mBAAmB;MAC5CkB,cAAc,CAAClB,mBAAmB,CAAC;MACnC;IACJ;IAEA,IAAIoB,OAAO,GAAG,IAAI;IAElB,MAAMC,SAAS,GAAG,MAAAA,CAAA,KAA2B;MACzC,IAAIC,OAAgC,GAAG,IAAI;MAC3C,IAAI;QACAA,OAAO,GAAG,MAAM,IAAAC,qCAAqB,EAAC,CAAC;MAC3C,CAAC,CAAC,OAAOpC,KAAK,EAAE;QACZ,IAAIC,OAAO,EAAE;UACTC,OAAO,CAACqB,IAAI,CAAC,kEAAkE,EAAEvB,KAAK,CAAC;QAC3F;MACJ;MAEA,IAAI,CAACiC,OAAO,IAAIJ,cAAc,CAACG,OAAO,EAAE;MAExCL,UAAU,CAACK,OAAO,GAAGG,OAAO;MAC5B,MAAME,MAAM,GAAG,IAAAC,8BAAiB,EAAC,CAAC;MAClC,MAAM;QAAEC,QAAQ;QAAEC;MAAY,CAAC,GAAG,IAAAC,mCAAsB,EAACJ,MAAM,EAAEF,OAAO,CAAC;MACzEL,mBAAmB,CAACE,OAAO,GAAGQ,WAAW;;MAEzC;MACA;MACA,MAAMD,QAAQ;MAEd,IAAI,CAACN,OAAO,EAAE;QACVO,WAAW,CAAC,CAAC;QACb;MACJ;MAEAX,cAAc,CAACG,OAAO,GAAGK,MAAM;MAC/BN,cAAc,CAACM,MAAM,CAAC;IAC1B,CAAC;IAEDH,SAAS,CAAC,CAAC;IAEX,OAAO,MAAM;MACTD,OAAO,GAAG,KAAK;MACfH,mBAAmB,CAACE,OAAO,GAAG,CAAC;MAC/BF,mBAAmB,CAACE,OAAO,GAAG,IAAI;IACtC,CAAC;EACL,CAAC,EAAE,CAACnB,mBAAmB,CAAC,CAAC;;EAEzB;EACA,IAAAI,gBAAS,EAAC,MAAM;IACZ,IAAI3B,KAAK,EAAE;MACP;MACA,MAAMoD,sBAAsB,GAAGA,CAAA,KAAM;QACjCC,wBAAY,CAACC,UAAU,CAACC,QAAQ,CAACC,eAAe,KAAK,SAAS,CAAC;MACnE,CAAC;MACDD,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAEL,sBAAsB,CAAC;MACrE,OAAO,MAAM;QACTG,QAAQ,CAACG,mBAAmB,CAAC,kBAAkB,EAAEN,sBAAsB,CAAC;MAC5E,CAAC;IACL;IACI;IACA,MAAMO,YAAY,GAAGC,qBAAQ,CAACH,gBAAgB,CAAC,QAAQ,EAAGI,KAAK,IAAK;MAChER,wBAAY,CAACC,UAAU,CAACO,KAAK,KAAK,QAAQ,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,MAAM;MACTF,YAAY,CAACG,MAAM,CAAC,CAAC;IACzB,CAAC;EACT,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA,IAAAnC,gBAAS,EAAC,MAAM;IACZ,IAAIoC,OAAiC;IAErC,MAAMC,sBAAsB,GAAG,MAAAA,CAAA,KAAY;MACvC,IAAI;QACA,IAAIhE,KAAK,EAAE;UACP;UACAiE,yBAAa,CAACC,SAAS,CAACC,SAAS,CAACC,MAAM,CAAC;UACzC,MAAMC,YAAY,GAAGA,CAAA,KAAMJ,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;UACxD,MAAMI,aAAa,GAAGA,CAAA,KAAML,yBAAa,CAACC,SAAS,CAAC,KAAK,CAAC;UAE1DK,MAAM,CAACd,gBAAgB,CAAC,QAAQ,EAAEY,YAAY,CAAC;UAC/CE,MAAM,CAACd,gBAAgB,CAAC,SAAS,EAAEa,aAAa,CAAC;UAEjDP,OAAO,GAAGA,CAAA,KAAM;YACZQ,MAAM,CAACb,mBAAmB,CAAC,QAAQ,EAAEW,YAAY,CAAC;YAClDE,MAAM,CAACb,mBAAmB,CAAC,SAAS,EAAEY,aAAa,CAAC;UACxD,CAAC;QACL,CAAC,MAAM;UACH;UACA,IAAI;YACA,MAAME,OAAO,GAAG,MAAAlE,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAApC,uBAAA,CAAAV,OAAA,CAAa,iCAAiC,GAAC;YAC/D,MAAMmG,KAAK,GAAG,MAAMW,OAAO,CAACzF,OAAO,CAAC0F,KAAK,CAAC,CAAC;YAC3CR,yBAAa,CAACC,SAAS,CAACL,KAAK,CAACa,WAAW,IAAI,IAAI,CAAC;YAElD,MAAMxB,WAAW,GAAGsB,OAAO,CAACzF,OAAO,CAAC0E,gBAAgB,CAAEI,KAAsC,IAAK;cAC7FI,yBAAa,CAACC,SAAS,CAACL,KAAK,CAACa,WAAW,IAAI,IAAI,CAAC;YACtD,CAAC,CAAC;YAEFX,OAAO,GAAGA,CAAA,KAAMb,WAAW,CAAC,CAAC;UACjC,CAAC,CAAC,MAAM;YACJ;YACAe,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;UACjC;QACJ;MACJ,CAAC,CAAC,OAAOxD,KAAK,EAAE;QACZ;QACAuD,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;MACjC;IACJ,CAAC;IAEDF,sBAAsB,CAAC,CAAC;IAExB,OAAO,MAAM;MACTD,OAAO,GAAG,CAAC;IACf,CAAC;EACL,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA;EACA;EACA;EACA;EACA;EACA,IAAI,CAACzC,WAAW,EAAE;IACd,oBACI,IAAAnD,WAAA,CAAAgE,GAAA,EAACD,eAAe;MAAAlB,QAAA,eACZ,IAAA7C,WAAA,CAAAgE,GAAA,EAACxE,YAAA,CAAAgH,IAAI;QAACC,KAAK,EAAEnF,UAAU,CAACG;MAAU,CAAE;IAAC,CACxB,CAAC;EAE1B;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMiF,WAAW,gBACb,IAAA1G,WAAA,CAAAgE,GAAA,EAACtE,WAAA,CAAAiH,mBAAmB;IAAC/B,MAAM,EAAEzB,WAAY;IAAAN,QAAA,eACrC,IAAA7C,WAAA,CAAAgE,GAAA,EAACrE,MAAA,CAAAiH,mBAAmB;MAAA/D,QAAA,eAChB,IAAA7C,WAAA,CAAA6G,IAAA,EAACpH,WAAA,CAAAqH,kBAAkB;QACflE,WAAW,EAAEA,WAAsD;QACnEI,OAAO,EAAEA,OAAQ;QACjBC,UAAU,EAAEA,UAAW;QACvBC,eAAe,EAAEA,eAAgB;QACjCH,gBAAgB,EAAEA,gBAAiB;QACnCD,iBAAiB,EAAEA,iBAAkE;QAAAD,QAAA,GAEpFA,QAAQ,eACT,IAAA7C,WAAA,CAAA6G,IAAA,EAACvH,MAAA,CAAAyH,QAAQ;UAACC,QAAQ,EAAE,IAAK;UAAAnE,QAAA,gBACrB,IAAA7C,WAAA,CAAAgE,GAAA,EAAC/B,qBAAqB,IAAE,CAAC,eACzB,IAAAjC,WAAA,CAAAgE,GAAA,EAACtB,eAAe,IAAE,CAAC;QAAA,CACb,CAAC,eACX,IAAA1C,WAAA,CAAAgE,GAAA,EAACpE,MAAA,CAAAqH,WAAW,IAAE,CAAC;MAAA,CACC;IAAC,CACJ;EAAC,CACL,CACxB;EAED,oBACI,IAAAjH,WAAA,CAAAgE,GAAA,EAACD,eAAe;IAAAlB,QAAA,EACX6D;EAAW,CACC,CAAC;AAE1B,CAAC;AAAC,IAAAQ,QAAA,GAAAC,OAAA,CAAAvG,OAAA,GAEa+B,WAAW","ignoreList":[]}
+{"version":3,"names":["_react","require","_reactNative","_OxyContext","_reactQuery","_bloom","_toast","_core","_FontLoader","_queryClient","_storageHelpers","_jsxRuntime","_interopRequireWildcard","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","BOOT_BG_COLOR","bootStyles","StyleSheet","create","bootShell","flex","backgroundColor","setupFonts","isWeb","Platform","OS","KEYBOARD_CONTROLLER_MODULE","LazyBottomSheetRouter","lazy","Promise","resolve","then","mod","error","__DEV__","loggerUtil","Error","String","component","LazySignInModal","OxyProvider","oxyServices","children","onAuthStateChange","storageKeyPrefix","baseURL","authWebUrl","authRedirectUri","queryClient","providedQueryClient","KBProvider","setKBProvider","useState","useEffect","moduleName","specifier","s","KeyboardProvider","catch","warn","KeyboardWrapper","jsx","Fragment","storageRef","useRef","queryClientRef","persistenceUnsubRef","setQueryClient","current","mounted","bootstrap","storage","createPlatformStorage","client","createQueryClient","restored","unsubscribe","attachQueryPersistence","handleVisibilityChange","focusManager","setFocused","document","visibilityState","addEventListener","removeEventListener","subscription","AppState","state","remove","cleanup","setupNetworkMonitoring","onlineManager","setOnline","navigator","onLine","handleOnline","handleOffline","window","NetInfo","fetch","isConnected","View","style","coreContent","QueryClientProvider","BloomDialogProvider","jsxs","OxyContextProvider","Suspense","fallback","ToastOutlet","_default","exports"],"sourceRoot":"../../../../src","sources":["ui/components/OxyProvider.tsx"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,WAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AACA,IAAAI,MAAA,GAAAJ,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AACA,IAAAO,WAAA,GAAAP,OAAA;AACA,IAAAQ,YAAA,GAAAR,OAAA;AACA,IAAAS,eAAA,GAAAT,OAAA;AAAuF,IAAAU,WAAA,GAAAV,OAAA;AAAA,SAAAW,wBAAAC,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAH,uBAAA,YAAAA,CAAAC,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA,KAEvF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMkB,aAAa,GAAG,SAAS;AAE/B,MAAMC,UAAU,GAAGC,uBAAU,CAACC,MAAM,CAAC;EACjCC,SAAS,EAAE;IACPC,IAAI,EAAE,CAAC;IACPC,eAAe,EAAEN;EACrB;AACJ,CAAC,CAAC;;AAEF;AACA,IAAAO,sBAAU,EAAC,CAAC;;AAEZ;AACA,MAAMC,KAAK,GAAGC,qBAAQ,CAACC,EAAE,KAAK,KAAK;;AAEnC;AACA;AACA,MAAMC,0BAA0B,GAAG,kCAAkC;;AAErE;AACA;AACA;AACA,MAAMC,qBAAqB,gBAAG,IAAAC,WAAI,EAAC,MAC/BC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAApC,uBAAA,CAAAX,OAAA,CAAO,qBAAqB,IAAE+C,IAAI,CAC7BC,GAAG,KAAM;EAAE1B,OAAO,EAAE0B,GAAG,CAAC1B;AAAoC,CAAC,CAAC,EAC9D2B,KAAK,IAAK;EACP,IAAIC,OAAO,EAAE;IACTC,YAAU,CAACF,KAAK,CAAC,kCAAkC,EAAEA,KAAK,YAAYG,KAAK,GAAGH,KAAK,GAAG,IAAIG,KAAK,CAACC,MAAM,CAACJ,KAAK,CAAC,CAAC,EAAE;MAAEK,SAAS,EAAE;IAAc,CAAC,CAAC;EACjJ;EACA,OAAO;IAAEhC,OAAO,EAAGA,CAAA,KAAM;EAAY,CAAC;AAC1C,CACJ,CACJ,CAAC;AAED,MAAMiC,eAAe,gBAAG,IAAAX,WAAI,EAAC,MACzBC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAApC,uBAAA,CAAAX,OAAA,CAAO,eAAe,IAAE+C,IAAI,CACvBC,GAAG,KAAM;EAAE1B,OAAO,EAAE0B,GAAG,CAAC1B;AAAoC,CAAC,CAAC,EAC/D,OAAO;EAAEA,OAAO,EAAGA,CAAA,KAAM;AAAY,CAAC,CAC1C,CACJ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMkC,WAAiC,GAAGA,CAAC;EACvCC,WAAW;EACXC,QAAQ;EACRC,iBAAiB;EACjBC,gBAAgB;EAChBC,OAAO;EACPC,UAAU;EACVC,eAAe;EACfC,WAAW,EAAEC;AACjB,CAAC,KAAK;EAEF;EACA;EACA;EACA;EACA,MAAM,CAACC,UAAU,EAAEC,aAAa,CAAC,GAAG,IAAAC,eAAQ,EAAqC,IAAI,CAAC;EACtF,IAAAC,gBAAS,EAAC,MAAM;IACZ,IAAI9B,KAAK,EAAE;IACX,MAAM+B,UAAU,GAAG5B,0BAA0B;IAC7C,CAAA6B,SAAA,QAAA1B,OAAA,CAAA9B,CAAA,IAAAA,CAAA,IAAAwD,SAAA,KAAAxB,IAAA,CAAAyB,CAAA,IAAA7D,uBAAA,CAAAX,OAAA,CAAAwE,CAAA,KAAOF,UAAU,EACZvB,IAAI,CAAEC,GAAG,IAAKmB,aAAa,CAAC,MAAMnB,GAAG,CAACyB,gBAAgB,CAAC,CAAC,CACxDC,KAAK,CAAEzB,KAAK,IAAK;MACd,IAAIC,OAAO,EAAE;QACTC,YAAU,CAACwB,IAAI,CAAC,2EAA2E,EAAE;UAAErB,SAAS,EAAE;QAAc,CAAC,EAAEL,KAAK,CAAC;MACrI;IACJ,CAAC,CAAC;EACV,CAAC,EAAE,EAAE,CAAC;EACN,MAAM2B,eAA4C,GAAGV,UAAU,KAAK,CAAC;IAAER;EAAS,CAAC,kBAAK,IAAAhD,WAAA,CAAAmE,GAAA,EAAAnE,WAAA,CAAAoE,QAAA;IAAApB,QAAA,EAAGA;EAAQ,CAAG,CAAC,CAAC;;EAEtG;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMqB,UAAU,GAAG,IAAAC,aAAM,EAA0B,IAAI,CAAC;EACxD,MAAMC,cAAc,GAAG,IAAAD,aAAM,EAA8C,IAAI,CAAC;EAChF,MAAME,mBAAmB,GAAG,IAAAF,aAAM,EAAsB,IAAI,CAAC;;EAE7D;EACA;EACA,MAAM,CAAChB,WAAW,EAAEmB,cAAc,CAAC,GAAG,IAAAf,eAAQ,EAA8C,MAAM;IAC9F,IAAIH,mBAAmB,EAAE;MACrBgB,cAAc,CAACG,OAAO,GAAGnB,mBAAmB;MAC5C,OAAOA,mBAAmB;IAC9B;IACA,OAAO,IAAI;EACf,CAAC,CAAC;EAEF,IAAAI,gBAAS,EAAC,MAAM;IACZ,IAAIJ,mBAAmB,EAAE;MACrBgB,cAAc,CAACG,OAAO,GAAGnB,mBAAmB;MAC5CkB,cAAc,CAAClB,mBAAmB,CAAC;MACnC;IACJ;IAEA,IAAIoB,OAAO,GAAG,IAAI;IAElB,MAAMC,SAAS,GAAG,MAAAA,CAAA,KAA2B;MACzC,IAAIC,OAAgC,GAAG,IAAI;MAC3C,IAAI;QACAA,OAAO,GAAG,MAAM,IAAAC,qCAAqB,EAAC,CAAC;MAC3C,CAAC,CAAC,OAAOvC,KAAK,EAAE;QACZ,IAAIC,OAAO,EAAE;UACTC,YAAU,CAACwB,IAAI,CAAC,oDAAoD,EAAE;YAAErB,SAAS,EAAE;UAAc,CAAC,EAAEL,KAAK,CAAC;QAC9G;MACJ;MAEA,IAAI,CAACoC,OAAO,IAAIJ,cAAc,CAACG,OAAO,EAAE;MAExCL,UAAU,CAACK,OAAO,GAAGG,OAAO;MAC5B,MAAME,MAAM,GAAG,IAAAC,8BAAiB,EAAC,CAAC;MAClC,MAAM;QAAEC,QAAQ;QAAEC;MAAY,CAAC,GAAG,IAAAC,mCAAsB,EAACJ,MAAM,EAAEF,OAAO,CAAC;MACzEL,mBAAmB,CAACE,OAAO,GAAGQ,WAAW;;MAEzC;MACA;MACA,MAAMD,QAAQ;MAEd,IAAI,CAACN,OAAO,EAAE;QACVO,WAAW,CAAC,CAAC;QACb;MACJ;MAEAX,cAAc,CAACG,OAAO,GAAGK,MAAM;MAC/BN,cAAc,CAACM,MAAM,CAAC;IAC1B,CAAC;IAEDH,SAAS,CAAC,CAAC;IAEX,OAAO,MAAM;MACTD,OAAO,GAAG,KAAK;MACfH,mBAAmB,CAACE,OAAO,GAAG,CAAC;MAC/BF,mBAAmB,CAACE,OAAO,GAAG,IAAI;IACtC,CAAC;EACL,CAAC,EAAE,CAACnB,mBAAmB,CAAC,CAAC;;EAEzB;EACA,IAAAI,gBAAS,EAAC,MAAM;IACZ,IAAI9B,KAAK,EAAE;MACP;MACA,MAAMuD,sBAAsB,GAAGA,CAAA,KAAM;QACjCC,wBAAY,CAACC,UAAU,CAACC,QAAQ,CAACC,eAAe,KAAK,SAAS,CAAC;MACnE,CAAC;MACDD,QAAQ,CAACE,gBAAgB,CAAC,kBAAkB,EAAEL,sBAAsB,CAAC;MACrE,OAAO,MAAM;QACTG,QAAQ,CAACG,mBAAmB,CAAC,kBAAkB,EAAEN,sBAAsB,CAAC;MAC5E,CAAC;IACL;IACI;IACA,MAAMO,YAAY,GAAGC,qBAAQ,CAACH,gBAAgB,CAAC,QAAQ,EAAGI,KAAK,IAAK;MAChER,wBAAY,CAACC,UAAU,CAACO,KAAK,KAAK,QAAQ,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,MAAM;MACTF,YAAY,CAACG,MAAM,CAAC,CAAC;IACzB,CAAC;EACT,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA,IAAAnC,gBAAS,EAAC,MAAM;IACZ,IAAIoC,OAAiC;IAErC,MAAMC,sBAAsB,GAAG,MAAAA,CAAA,KAAY;MACvC,IAAI;QACA,IAAInE,KAAK,EAAE;UACP;UACAoE,yBAAa,CAACC,SAAS,CAACC,SAAS,CAACC,MAAM,CAAC;UACzC,MAAMC,YAAY,GAAGA,CAAA,KAAMJ,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;UACxD,MAAMI,aAAa,GAAGA,CAAA,KAAML,yBAAa,CAACC,SAAS,CAAC,KAAK,CAAC;UAE1DK,MAAM,CAACd,gBAAgB,CAAC,QAAQ,EAAEY,YAAY,CAAC;UAC/CE,MAAM,CAACd,gBAAgB,CAAC,SAAS,EAAEa,aAAa,CAAC;UAEjDP,OAAO,GAAGA,CAAA,KAAM;YACZQ,MAAM,CAACb,mBAAmB,CAAC,QAAQ,EAAEW,YAAY,CAAC;YAClDE,MAAM,CAACb,mBAAmB,CAAC,SAAS,EAAEY,aAAa,CAAC;UACxD,CAAC;QACL,CAAC,MAAM;UACH;UACA,IAAI;YACA,MAAME,OAAO,GAAG,MAAArE,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAApC,uBAAA,CAAAX,OAAA,CAAa,iCAAiC,GAAC;YAC/D,MAAMuG,KAAK,GAAG,MAAMW,OAAO,CAAC5F,OAAO,CAAC6F,KAAK,CAAC,CAAC;YAC3CR,yBAAa,CAACC,SAAS,CAACL,KAAK,CAACa,WAAW,IAAI,IAAI,CAAC;YAElD,MAAMxB,WAAW,GAAGsB,OAAO,CAAC5F,OAAO,CAAC6E,gBAAgB,CAAEI,KAAsC,IAAK;cAC7FI,yBAAa,CAACC,SAAS,CAACL,KAAK,CAACa,WAAW,IAAI,IAAI,CAAC;YACtD,CAAC,CAAC;YAEFX,OAAO,GAAGA,CAAA,KAAMb,WAAW,CAAC,CAAC;UACjC,CAAC,CAAC,MAAM;YACJ;YACAe,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;UACjC;QACJ;MACJ,CAAC,CAAC,OAAO3D,KAAK,EAAE;QACZ;QACA0D,yBAAa,CAACC,SAAS,CAAC,IAAI,CAAC;MACjC;IACJ,CAAC;IAEDF,sBAAsB,CAAC,CAAC;IAExB,OAAO,MAAM;MACTD,OAAO,GAAG,CAAC;IACf,CAAC;EACL,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA;EACA;EACA;EACA;EACA;EACA,IAAI,CAACzC,WAAW,EAAE;IACd,oBACI,IAAAtD,WAAA,CAAAmE,GAAA,EAACD,eAAe;MAAAlB,QAAA,eACZ,IAAAhD,WAAA,CAAAmE,GAAA,EAAC5E,YAAA,CAAAoH,IAAI;QAACC,KAAK,EAAEtF,UAAU,CAACG;MAAU,CAAE;IAAC,CACxB,CAAC;EAE1B;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMoF,WAAW,gBACb,IAAA7G,WAAA,CAAAmE,GAAA,EAAC1E,WAAA,CAAAqH,mBAAmB;IAAC/B,MAAM,EAAEzB,WAAY;IAAAN,QAAA,eACrC,IAAAhD,WAAA,CAAAmE,GAAA,EAACzE,MAAA,CAAAqH,mBAAmB;MAAA/D,QAAA,eAChB,IAAAhD,WAAA,CAAAgH,IAAA,EAACxH,WAAA,CAAAyH,kBAAkB;QACflE,WAAW,EAAEA,WAAsD;QACnEI,OAAO,EAAEA,OAAQ;QACjBC,UAAU,EAAEA,UAAW;QACvBC,eAAe,EAAEA,eAAgB;QACjCH,gBAAgB,EAAEA,gBAAiB;QACnCD,iBAAiB,EAAEA,iBAAkE;QAAAD,QAAA,GAEpFA,QAAQ,eACT,IAAAhD,WAAA,CAAAgH,IAAA,EAAC3H,MAAA,CAAA6H,QAAQ;UAACC,QAAQ,EAAE,IAAK;UAAAnE,QAAA,gBACrB,IAAAhD,WAAA,CAAAmE,GAAA,EAAClC,qBAAqB,IAAE,CAAC,eACzB,IAAAjC,WAAA,CAAAmE,GAAA,EAACtB,eAAe,IAAE,CAAC;QAAA,CACb,CAAC,eACX,IAAA7C,WAAA,CAAAmE,GAAA,EAACxE,MAAA,CAAAyH,WAAW,IAAE,CAAC;MAAA,CACC;IAAC,CACJ;EAAC,CACL,CACxB;EAED,oBACI,IAAApH,WAAA,CAAAmE,GAAA,EAACD,eAAe;IAAAlB,QAAA,EACX6D;EAAW,CACC,CAAC;AAE1B,CAAC;AAAC,IAAAQ,QAAA,GAAAC,OAAA,CAAA1G,OAAA,GAEakC,WAAW","ignoreList":[]}

package/lib/commonjs/ui/context/OxyContext.js

@@ -30,6 +30,71 @@ const OxyContext = /*#__PURE__*/(0, _react.createContext)(null);
 // `../utils/activeAuthuser` so the session-management and auth-operations hooks
 // can share them without re-importing this 1k-line context file.
 
+/**
+ * Module-level run-once guard for the cold-boot silent SSO steps
+ * (`fedcm-silent` and `silent-iframe`).
+ *
+ * Both steps trigger a one-shot browser credential / iframe handshake that must
+ * fire AT MOST ONCE per page load — otherwise a provider remount storm (route
+ * churn, StrictMode double-invoke, error-boundary recovery) becomes a credential
+ * request storm. A per-instance ref resets on every remount, so the guard must
+ * live at module scope. Keyed on `origin|baseURL` so two providers pointed at
+ * the same API from the same origin share one attempt; never cleared because
+ * only a fresh page load can change the IdP session state, and a fresh page load
+ * starts a fresh module scope.
+ *
+ * This is a NEW, dedicated set — distinct from `useWebSSO`'s `silentSSOAttempted`
+ * (which guards the post-boot INTERACTIVE button path) and never a core
+ * module-level singleton (that re-evaluates under Metro web bundling and the
+ * guard would not hold).
+ */
+const servicesSilentAttempted = new Set();
+
+/**
+ * Build the `origin|baseURL` signature used as the silent-cold-boot guard key.
+ */
+function silentColdBootKey(oxyServices) {
+  const origin = typeof window !== 'undefined' ? window.location.origin : 'no-origin';
+  let baseURL = '';
+  try {
+    baseURL = oxyServices.getBaseURL?.() ?? '';
+  } catch {
+    baseURL = '';
+  }
+  return `${origin}|${baseURL}`;
+}
+
+/**
+ * Whether `idpOrigin` is a same-site, first-party host of the current page —
+ * i.e. it shares the page's registrable apex (last two labels), so a "no
+ * session" answer from its `/auth/session-check` iframe is authoritative for
+ * THIS app and may force a local sign-out.
+ *
+ * On a cross-site IdP (or any host whose relationship to the page can't be
+ * positively established) this returns `false`, so the visibility-driven check
+ * may surface a session-ended toast but MUST NOT clear local state — a
+ * third-party / undetermined IdP answer can never force logout. Returns `false`
+ * off-browser.
+ */
+function isSameSiteIdP(idpOrigin) {
+  if (typeof window === 'undefined') return false;
+  let idpHostname;
+  try {
+    idpHostname = new URL(idpOrigin).hostname;
+  } catch {
+    return false;
+  }
+  const pageHostname = window.location.hostname;
+  if (!idpHostname || !pageHostname) return false;
+  if (idpHostname === pageHostname) return true;
+  const apexOf = hostname => hostname.split('.').slice(-2).join('.');
+  const pageApex = apexOf(pageHostname);
+  // Require a real registrable apex (≥2 labels) AND an exact apex match AND that
+  // the IdP host is the page apex itself or a subdomain of it.
+  if (pageHostname.split('.').length < 2) return false;
+  if (apexOf(idpHostname) !== pageApex) return false;
+  return idpHostname === pageApex || idpHostname.endsWith(`.${pageApex}`);
+}
 let cachedUseFollowHook = null;
 const loadUseFollowHook = () => {
   if (cachedUseFollowHook) {
@@ -71,9 +136,19 @@ const OxyProvider = ({
     if (providedOxyServices) {
       oxyServicesRef.current = providedOxyServices;
     } else if (baseURL) {
+      // Auto-detect the FAPI (IdP) origin from the current browser hostname so
+      // a consuming RP (mention.earth, homiio.com, alia.onl, …) targets
+      // `auth.<rp-apex>` for FedCM + the silent iframe WITHOUT passing
+      // `authWebUrl` explicitly — that is what makes both the FedCM config and
+      // the `/auth/silent` iframe first-party with the RP (Safari ITP /
+      // Firefox TCP need first-party). An explicit `authWebUrl` prop still
+      // wins. On native `autoDetectAuthWebUrl()` returns `undefined`
+      // (off-browser), leaving the value unchanged. We only auto-detect on the
+      // baseURL-only path — a consumer-provided `OxyServices` instance is
+      // never mutated.
       oxyServicesRef.current = new _core.OxyServices({
         baseURL,
-        authWebUrl,
+        authWebUrl: authWebUrl ?? (0, _core.autoDetectAuthWebUrl)(),
         authRedirectUri
       });
     } else {
@@ -138,7 +213,9 @@ const OxyProvider = ({
   }, [oxyServices]);
   const logger = (0, _react.useCallback)((message, err) => {
     if (__DEV__) {
-      console.warn(`[OxyContext] ${message}`, err);
+      _core.logger.warn(message, {
+        component: 'OxyContext'
+      }, err);
     }
   }, []);
   const storageKeys = (0, _react.useMemo)(() => (0, _storageHelpers.getStorageKeys)(storageKeyPrefix), [storageKeyPrefix]);
@@ -357,6 +434,14 @@ const OxyProvider = ({
   const onAuthStateChangeRef = (0, _react.useRef)(onAuthStateChange);
   onAuthStateChangeRef.current = onAuthStateChange;
 
+  // `handleWebSSOSession` is declared further down (it depends on values that
+  // are only available there). The FedCM/iframe cold-boot steps need to commit
+  // a recovered session through it, so we route the call through a ref that is
+  // populated once the callback exists. The ref is assigned synchronously on
+  // every render before the cold-boot effect can fire (the effect is gated on
+  // `storage` + `initialized`, both of which settle after first render).
+  const handleWebSSOSessionRef = (0, _react.useRef)(null);
+
   // Cold-boot session restore via the secure refresh cookies (web only).
   //
   // Calls `oxyServices.refreshAllSessions()` → `POST /auth/refresh-all` with
@@ -451,90 +536,232 @@ const OxyProvider = ({
     onAuthStateChangeRef.current?.(fullUser);
     return true;
   }, [oxyServices, persistSessionDurably]);
+
+  // Native (and offline) stored-session restore — the ONLY restore path that
+  // runs on React Native, and the web fallback when no cross-domain step won.
+  //
+  // Verbatim-extracted from the previous `restoreSessionsFromStorage` body: it
+  // reads the durable `session_ids` / `active_session_id` slots, validates each
+  // stored session in parallel (bearer `validateSession`), and switches to the
+  // stored active session via the session-management `switchSession`. This body
+  // is platform-agnostic and gated by NO `enabled()` predicate so it runs on
+  // every platform — on native it is reached unconditionally (every web-only
+  // step ahead of it is disabled by `isWebBrowser()`), so native restore is
+  // exactly this and nothing else (no FedCM / iframe / refresh-all /
+  // handleAuthCallback).
+  const restoreStoredSession = (0, _react.useCallback)(async () => {
+    if (!storage) {
+      return false;
+    }
+    const storedSessionIdsJson = await storage.getItem(storageKeys.sessionIds);
+    const storedSessionIds = storedSessionIdsJson ? JSON.parse(storedSessionIdsJson) : [];
+    const storedActiveSessionId = await storage.getItem(storageKeys.activeSessionId);
+    let validSessions = [];
+    if (storedSessionIds.length > 0) {
+      // Validate all sessions in parallel (with 8s timeout per session) to avoid
+      // sequential blocking that freezes the app on startup
+      const VALIDATION_TIMEOUT = 8000;
+      const results = await Promise.allSettled(storedSessionIds.map(async sessionId => {
+        const timeoutPromise = new Promise(resolve => setTimeout(() => resolve(null), VALIDATION_TIMEOUT));
+        const validationPromise = oxyServices.validateSession(sessionId, {
+          useHeaderValidation: true
+        }).catch(validationError => {
+          if (!(0, _errorHandlers.isInvalidSessionError)(validationError) && !(0, _errorHandlers.isTimeoutOrNetworkError)(validationError)) {
+            logger('Session validation failed during init', validationError);
+          } else if (__DEV__ && (0, _errorHandlers.isTimeoutOrNetworkError)(validationError)) {
+            _core.logger.debug('Session validation timeout (expected when offline)', {
+              component: 'OxyContext',
+              method: 'restoreStoredSession'
+            }, validationError);
+          }
+          return null;
+        });
+        return Promise.race([validationPromise, timeoutPromise]).then(validation => {
+          if (validation?.valid && validation.user) {
+            const now = new Date();
+            return {
+              sessionId,
+              deviceId: '',
+              expiresAt: new Date(now.getTime() + 7 * 24 * 60 * 60 * 1000).toISOString(),
+              lastActive: now.toISOString(),
+              userId: validation.user.id?.toString() ?? '',
+              isCurrent: sessionId === storedActiveSessionId
+            };
+          }
+          return null;
+        });
+      }));
+      validSessions = results.filter(r => r.status === 'fulfilled').map(r => r.value).filter(s => s !== null);
+
+      // Always persist validated sessions to storage (even empty list)
+      // to clear stale/expired session IDs that would cause 401 loops on restart
+      updateSessionsRef.current(validSessions, {
+        merge: false
+      });
+    }
+    if (storedActiveSessionId) {
+      try {
+        await switchSessionRef.current(storedActiveSessionId);
+        return true;
+      } catch (switchError) {
+        // Silently handle expected errors (invalid sessions, timeouts, network issues)
+        if ((0, _errorHandlers.isInvalidSessionError)(switchError)) {
+          await storage.removeItem(storageKeys.activeSessionId);
+          updateSessionsRef.current(validSessions.filter(session => session.sessionId !== storedActiveSessionId), {
+            merge: false
+          });
+          // Don't log expected session errors during restoration
+        } else if ((0, _errorHandlers.isTimeoutOrNetworkError)(switchError)) {
+          // Timeout/network error - non-critical, don't block
+          if (__DEV__) {
+            _core.logger.debug('Active session validation timeout (expected when offline)', {
+              component: 'OxyContext',
+              method: 'restoreStoredSession'
+            }, switchError);
+          }
+        } else {
+          // Only log unexpected errors
+          logger('Active session validation error', switchError);
+        }
+      }
+    }
+    return false;
+  }, [logger, oxyServices, storage, storageKeys.activeSessionId, storageKeys.sessionIds]);
+
+  // Cold boot — the single, ordered, short-circuit session-recovery sequence,
+  // consuming the SAME `runColdBoot` core primitive as `WebOxyProvider`. The
+  // FIRST step that yields a session wins; every later step is skipped. Each
+  // web-only step is gated by `isWebBrowser()`, so on native ONLY
+  // `stored-session` runs.
+  //
+  // Order (web): redirect callback → FedCM silent → silent iframe → refresh
+  // cookie → stored session. Order (native): stored session only.
   const restoreSessionsFromStorage = (0, _react.useCallback)(async () => {
     if (!storage) {
       return;
     }
     setTokenReady(false);
+    const commitWebSession = handleWebSSOSessionRef.current;
+    const silentKey = silentColdBootKey(oxyServices);
+    const fedcmSupported = (0, _useWebSSO.isWebBrowser)() && oxyServices.isFedCMSupported?.() === true;
     try {
-      // Web cold-boot fast path: restore the active session from the secure
-      // httpOnly refresh cookie before the bearer-protected stored-session
-      // validation (which 401s on a hard reload). On success we are signed in
-      // from the cookie alone — no FedCM needed. On failure we fall through to
-      // the existing stored-session flow below; nothing is cleared.
-      if (await restoreViaRefreshCookie()) {
-        return;
-      }
-      const storedSessionIdsJson = await storage.getItem(storageKeys.sessionIds);
-      const storedSessionIds = storedSessionIdsJson ? JSON.parse(storedSessionIdsJson) : [];
-      const storedActiveSessionId = await storage.getItem(storageKeys.activeSessionId);
-      let validSessions = [];
-      if (storedSessionIds.length > 0) {
-        // Validate all sessions in parallel (with 8s timeout per session) to avoid
-        // sequential blocking that freezes the app on startup
-        const VALIDATION_TIMEOUT = 8000;
-        const results = await Promise.allSettled(storedSessionIds.map(async sessionId => {
-          const timeoutPromise = new Promise(resolve => setTimeout(() => resolve(null), VALIDATION_TIMEOUT));
-          const validationPromise = oxyServices.validateSession(sessionId, {
-            useHeaderValidation: true
-          }).catch(validationError => {
-            if (!(0, _errorHandlers.isInvalidSessionError)(validationError) && !(0, _errorHandlers.isTimeoutOrNetworkError)(validationError)) {
-              logger('Session validation failed during init', validationError);
-            } else if (__DEV__ && (0, _errorHandlers.isTimeoutOrNetworkError)(validationError)) {
-              _core.logger.debug('Session validation timeout (expected when offline)', {
-                component: 'OxyContext',
-                method: 'restoreSessionsFromStorage'
-              }, validationError);
-            }
-            return null;
-          });
-          return Promise.race([validationPromise, timeoutPromise]).then(validation => {
-            if (validation?.valid && validation.user) {
-              const now = new Date();
+      const outcome = await (0, _core.runColdBoot)({
+        steps: [{
+          // 1) Redirect callback wins: a popup/redirect sign-in just landed
+          // back on this page with `access_token`/`session_id` query params.
+          // `handleAuthCallback` plants the token but returns a PLACEHOLDER
+          // user (empty id), so we hydrate the REAL user via `getCurrentUser`
+          // and commit through `handleWebSSOSession` before claiming a
+          // session — never expose a placeholder user (R4).
+          id: 'redirect',
+          enabled: () => (0, _useWebSSO.isWebBrowser)(),
+          run: async () => {
+            const callbackSession = oxyServices.handleAuthCallback?.();
+            if (!callbackSession || !commitWebSession) {
               return {
-                sessionId,
-                deviceId: '',
-                expiresAt: new Date(now.getTime() + 7 * 24 * 60 * 60 * 1000).toISOString(),
-                lastActive: now.toISOString(),
-                userId: validation.user.id?.toString() ?? '',
-                isCurrent: sessionId === storedActiveSessionId
+                kind: 'skip'
               };
             }
-            return null;
-          });
-        }));
-        validSessions = results.filter(r => r.status === 'fulfilled').map(r => r.value).filter(s => s !== null);
-
-        // Always persist validated sessions to storage (even empty list)
-        // to clear stale/expired session IDs that would cause 401 loops on restart
-        updateSessionsRef.current(validSessions, {
-          merge: false
-        });
-      }
-      if (storedActiveSessionId) {
-        try {
-          await switchSessionRef.current(storedActiveSessionId);
-        } catch (switchError) {
-          // Silently handle expected errors (invalid sessions, timeouts, network issues)
-          if ((0, _errorHandlers.isInvalidSessionError)(switchError)) {
-            await storage.removeItem(storageKeys.activeSessionId);
-            updateSessionsRef.current(validSessions.filter(session => session.sessionId !== storedActiveSessionId), {
-              merge: false
+            const fullUser = await oxyServices.getCurrentUser();
+            await commitWebSession({
+              ...callbackSession,
+              user: fullUser
             });
-            // Don't log expected session errors during restoration
-          } else if ((0, _errorHandlers.isTimeoutOrNetworkError)(switchError)) {
-            // Timeout/network error - non-critical, don't block
-            if (__DEV__) {
-              _core.logger.debug('Active session validation timeout (expected when offline)', {
-                component: 'OxyContext',
-                method: 'restoreSessionsFromStorage'
-              }, switchError);
+            return {
+              kind: 'session',
+              session: true
+            };
+          }
+        }, {
+          // 2) FedCM silent reauthn (Chrome). `silentSignInWithFedCM` plants
+          // the access token internally; we commit the returned session via
+          // `handleWebSSOSession`. Guarded so it fires at most once per page
+          // load across remounts.
+          id: 'fedcm-silent',
+          enabled: () => fedcmSupported && !servicesSilentAttempted.has(silentKey),
+          run: async () => {
+            servicesSilentAttempted.add(silentKey);
+            const session = await oxyServices.silentSignInWithFedCM?.();
+            if (!session || !commitWebSession) {
+              return {
+                kind: 'skip'
+              };
             }
-          } else {
-            // Only log unexpected errors
-            logger('Active session validation error', switchError);
+            await commitWebSession(session);
+            return {
+              kind: 'session',
+              session: true
+            };
+          }
+        }, {
+          // 3) Silent first-party iframe ({authWebUrl}/auth/silent) for
+          // browsers without FedCM (Safari / Firefox). After auto-detection
+          // `authWebUrl` is `auth.<rp-apex>`, so the iframe + its
+          // `fedcm_session` cookie are first-party with the RP. Shares the
+          // one-shot guard with the FedCM step.
+          id: 'silent-iframe',
+          enabled: () => (0, _useWebSSO.isWebBrowser)() && oxyServices.isFedCMSupported?.() !== true && !servicesSilentAttempted.has(silentKey),
+          run: async () => {
+            servicesSilentAttempted.add(silentKey);
+            const session = await oxyServices.silentSignIn?.();
+            if (!session || !commitWebSession) {
+              return {
+                kind: 'skip'
+              };
+            }
+            await commitWebSession(session);
+            return {
+              kind: 'session',
+              session: true
+            };
+          }
+        }, {
+          // 4) Refresh-cookie restore (same-site only). On `*.oxy.so` the
+          // httpOnly `oxy_rt_${n}` cookies ride along and resurrect every
+          // device-local slot. On a cross-domain RP (mention.earth, …) the
+          // cookie is `Domain=oxy.so` so it never reaches `api.<apex>` —
+          // `refreshAllSessions` returns `{accounts:[]}` and this skips.
+          // That is correct; there is deliberately NO `api.<apex>` bridge.
+          id: 'cookie-restore',
+          enabled: () => (0, _useWebSSO.isWebBrowser)(),
+          run: async () => {
+            const restored = await restoreViaRefreshCookie();
+            return restored ? {
+              kind: 'session',
+              session: true
+            } : {
+              kind: 'skip'
+            };
+          }
+        }, {
+          // 5) Stored-session bearer restore. NO `enabled` gate — runs on ALL
+          // platforms. This is native's ONLY restore path (every web-only
+          // step above is disabled off-browser).
+          id: 'stored-session',
+          run: async () => {
+            const restored = await restoreStoredSession();
+            return restored ? {
+              kind: 'session',
+              session: true
+            } : {
+              kind: 'skip'
+            };
+          }
+        }],
+        onStepError: (id, error) => {
+          if (__DEV__) {
+            _core.logger.debug(`Cold-boot step "${id}" errored (non-fatal, falling through)`, {
+              component: 'OxyContext',
+              method: 'restoreSessionsFromStorage'
+            }, error);
           }
         }
+      });
+      if (__DEV__ && outcome.kind === 'session') {
+        _core.logger.debug(`Cold boot recovered a session via "${outcome.via}"`, {
+          component: 'OxyContext',
+          method: 'restoreSessionsFromStorage'
+        });
       }
     } catch (error) {
       if (__DEV__) {
@@ -547,7 +774,7 @@ const OxyProvider = ({
     } finally {
       setTokenReady(true);
     }
-  }, [logger, oxyServices, storage, storageKeys.activeSessionId, storageKeys.sessionIds, restoreViaRefreshCookie]);
+  }, [oxyServices, storage, restoreViaRefreshCookie, restoreStoredSession]);
   (0, _react.useEffect)(() => {
     if (!storage || initialized) {
       return;
@@ -622,7 +849,21 @@ const OxyProvider = ({
     onAuthStateChange?.(fullUser);
   }, [oxyServices, updateSessions, setActiveSessionId, loginSuccess, onAuthStateChange, persistSessionDurably]);
 
-  // Enable web SSO only after local storage check completes and no user found
+  // Expose `handleWebSSOSession` to the cold-boot FedCM/iframe/redirect steps,
+  // which reference it through a ref because they are declared above this
+  // callback. Assigned synchronously on every render so the ref is populated
+  // before the cold-boot effect (gated on `storage`/`initialized`) can fire.
+  handleWebSSOSessionRef.current = handleWebSSOSession;
+
+  // Cross-domain silent SSO is now owned by the `fedcm-silent` / `silent-iframe`
+  // cold-boot steps above (the ordered `runColdBoot` sequence). `useWebSSO`
+  // remains mounted for its module-level run-once guard and its interactive
+  // FedCM helpers, and as a bounded post-boot safety net: it can fire at most
+  // once per page load (its own module guard), and only AFTER cold boot has
+  // finished (`tokenReady`) with no user recovered. We deliberately keep
+  // `shouldTryWebSSO` as `tokenReady && !user && initialized` — it is NOT
+  // loosened; cold boot runs while `tokenReady` is false, so this never races
+  // the cold-boot silent step.
   const shouldTryWebSSO = (0, _useWebSSO.isWebBrowser)() && tokenReady && !user && initialized;
   (0, _useWebSSO.useWebSSO)({
     oxyServices,
@@ -642,8 +883,16 @@ const OxyProvider = ({
   // If session is gone (cleared/logged out), clear local session too
   const lastIdPCheckRef = (0, _react.useRef)(0);
   const pendingIdPCleanupRef = (0, _react.useRef)(null);
+
+  // Use the RESOLVED IdP origin (the auto-detected `auth.<rp-apex>` planted on
+  // the instance config), not the raw `authWebUrl` prop — on a cross-domain RP
+  // the prop is undefined but the instance was constructed with the detected
+  // value, so the check must target the same first-party IdP the cold-boot
+  // iframe used.
+  const resolvedAuthWebUrl = oxyServices.config?.authWebUrl;
   (0, _react.useEffect)(() => {
     if (!(0, _useWebSSO.isWebBrowser)() || !user || !initialized) return;
+    const idpOrigin = resolvedAuthWebUrl || 'https://auth.oxy.so';
     const checkIdPSession = () => {
       // Debounce: check at most once per 30 seconds
       const now = Date.now();
@@ -656,7 +905,6 @@ const OxyProvider = ({
       // Load hidden iframe to check IdP session via postMessage
       const iframe = document.createElement('iframe');
       iframe.style.cssText = 'display:none;width:0;height:0;border:0';
-      const idpOrigin = authWebUrl || 'https://auth.oxy.so';
       iframe.src = `${idpOrigin}/auth/session-check?client_id=${encodeURIComponent(window.location.origin)}`;
       let cleaned = false;
       const cleanup = () => {
@@ -670,8 +918,15 @@ const OxyProvider = ({
         if (event.data?.type !== 'oxy-session-check') return;
         cleanup();
         if (!event.data.hasSession) {
-          _bloom.toast.info('Your session has ended. Please sign in again.');
-          await clearSessionState();
+          // Only a SAME-SITE, first-party IdP answer is authoritative enough to
+          // force a local sign-out. On a cross-site / undetermined IdP the
+          // "no session" answer must never clear local state (a third-party
+          // can't be trusted to end this app's session). Surface the toast in
+          // both cases, but gate the destructive `clearSessionState()`.
+          if (isSameSiteIdP(idpOrigin)) {
+            _bloom.toast.info('Your session has ended. Please sign in again.');
+            await clearSessionState();
+          }
         }
       };
       window.addEventListener('message', handleMessage);
@@ -690,7 +945,7 @@ const OxyProvider = ({
       pendingIdPCleanupRef.current?.();
       pendingIdPCleanupRef.current = null;
     };
-  }, [user, initialized, clearSessionState, authWebUrl]);
+  }, [user, initialized, clearSessionState, resolvedAuthWebUrl]);
   const activeSession = activeSessionId ? sessions.find(session => session.sessionId === activeSessionId) : undefined;
   const currentDeviceId = activeSession?.deviceId ?? null;
   const userId = user?.id;