@smarthivelabs-devs/auth-expo 1.2.0 → 1.4.0

package/README.md

@@ -29,22 +29,22 @@ pnpm add @smarthivelabs-devs/auth-expo @smarthivelabs-devs/auth-sdk expo-auth-se
 
 ## Setup
 
-Wrap your root component with `SmartHiveProvider`. The `redirectUri` is only needed for the OAuth redirect flow — you can still set it even if you only use headless.
+Wrap your root component with `SmartHiveAuthProvider`. The `redirectUri` is only needed for the OAuth redirect flow — you can still set it even if you only use headless.
 
 ```tsx
 // app/_layout.tsx
-import { SmartHiveProvider, buildRedirectUri } from "@smarthivelabs-devs/auth-expo";
+import { SmartHiveAuthProvider, buildRedirectUri } from "@smarthivelabs-devs/auth-expo";
 
 export default function Layout() {
   return (
-    <SmartHiveProvider
+    <SmartHiveAuthProvider
       projectId={process.env.EXPO_PUBLIC_AUTH_PROJECT_ID!}
       publishableKey={process.env.EXPO_PUBLIC_AUTH_PUBLISHABLE_KEY!}
       baseUrl={process.env.EXPO_PUBLIC_AUTH_BASE_URL!}
       redirectUri={buildRedirectUri("myapp")}
     >
       <Stack />
-    </SmartHiveProvider>
+    </SmartHiveAuthProvider>
   );
 }
 ```
@@ -203,7 +203,7 @@ export default function LoginScreen() {
 }
 ```
 
-`signIn.social()` calls `Linking.openURL()` to open the provider's consent screen in the system browser. When the user approves, the provider redirects back to your app's `redirectUri` deep link with `?access_token=...&refresh_token=...`. The `SmartHiveProvider` deep link listener picks this up automatically and saves the session — no extra setup needed.
+`signIn.social()` calls `Linking.openURL()` to open the provider's consent screen in the system browser. When the user approves, the provider redirects back to your app's `redirectUri` deep link with `?access_token=...&refresh_token=...`. The `SmartHiveAuthProvider` deep link listener picks this up automatically and saves the session — no extra setup needed.
 
 **Supported providers:**
 `google` · `apple` · `github` · `facebook` · `twitter` · `linkedin` · `microsoft` · `discord` · `spotify` · `twitch` · `reddit` · `gitlab` · `slack` · `notion` · `zoom` · `figma`
@@ -370,7 +370,7 @@ import { SignedIn, SignedOut, AuthLoading } from "@smarthivelabs-devs/auth-expo"
 
 ```
 app/
-├── _layout.tsx           ← SmartHiveProvider here
+├── _layout.tsx           ← SmartHiveAuthProvider here
 ├── index.tsx             ← SignedIn / SignedOut routing
 ├── login.tsx             ← your custom login screen using signIn.*
 └── (protected)/
@@ -380,18 +380,18 @@ app/
 ```tsx
 // app/_layout.tsx
 import { Stack } from "expo-router";
-import { SmartHiveProvider, buildRedirectUri } from "@smarthivelabs-devs/auth-expo";
+import { SmartHiveAuthProvider, buildRedirectUri } from "@smarthivelabs-devs/auth-expo";
 
 export default function Layout() {
   return (
-    <SmartHiveProvider
+    <SmartHiveAuthProvider
       projectId={process.env.EXPO_PUBLIC_AUTH_PROJECT_ID!}
       publishableKey={process.env.EXPO_PUBLIC_AUTH_PUBLISHABLE_KEY!}
       baseUrl={process.env.EXPO_PUBLIC_AUTH_BASE_URL!}
       redirectUri={buildRedirectUri("myapp")}
     >
       <Stack />
-    </SmartHiveProvider>
+    </SmartHiveAuthProvider>
   );
 }
 ```
@@ -486,7 +486,7 @@ PKCE verifier and state (used during OAuth redirect flow) are also stored in Sec
 ```ts
 import type {
   SmartHiveExpoConfig,
-  SmartHiveProviderProps,
+  SmartHiveAuthProviderProps,
 } from "@smarthivelabs-devs/auth-expo";
 
 import type {
@@ -525,6 +525,82 @@ await client.login();
 
 ---
 
+## Social Auth Proxy (White-label Domain)
+
+By default, when a user taps "Sign in with Google", the iOS system prompt shows:
+
+> *"YourApp wants to use **authcore.smarthivelabs.dev** to sign in"*
+
+And the Google consent screen shows:
+
+> *"to continue to **smarthivelabs.dev**"*
+
+To show **your own domain** on both prompts, add two thin proxy routes to your backend and set `socialProxyUrl` in the provider config. SmartHive Auth does all the OAuth work — your domain just acts as the visible entry point.
+
+### Step 1 — Add proxy routes to your backend
+
+```ts
+// src/routes/socialProxyRoutes.ts
+import express from "express";
+const router = express.Router();
+
+const SMARTHIVE_BASE = process.env.SMARTHIVE_AUTH_BASE_URL!; // https://authcore.smarthivelabs.dev
+const SMARTHIVE_ENV  = process.env.SMARTHIVE_AUTH_ENVIRONMENT!; // prod
+const SMARTHIVE_PID  = process.env.SMARTHIVE_PROJECT_ID!;
+const APP_BASE_URL   = process.env.APP_BASE_URL!; // https://api.yourapp.com
+
+// Initiation — app calls this, proxy forwards to SmartHive
+router.get("/:provider", async (req, res) => {
+  const target = new URL(`${SMARTHIVE_BASE}/${SMARTHIVE_ENV}/api/auth/social/${req.params.provider}`);
+  target.searchParams.set("project_id", SMARTHIVE_PID);
+  if (req.query.redirect_uri) target.searchParams.set("redirect_uri", req.query.redirect_uri as string);
+  target.searchParams.set("proxy_callback", `${APP_BASE_URL}/api/auth/social/${req.params.provider}/callback`);
+  res.redirect(target.toString());
+});
+
+// Callback — Google/Apple calls this, proxy forwards to SmartHive
+router.get("/:provider/callback", async (req, res) => {
+  const target = new URL(`${SMARTHIVE_BASE}/${SMARTHIVE_ENV}/api/auth/social/${req.params.provider}/callback`);
+  for (const [k, v] of Object.entries(req.query)) target.searchParams.set(k, v as string);
+  res.redirect(target.toString());
+});
+
+app.use("/api/auth/social", router);
+```
+
+Required env vars on your backend:
+```env
+SMARTHIVE_AUTH_BASE_URL=https://authcore.smarthivelabs.dev
+SMARTHIVE_AUTH_ENVIRONMENT=prod
+APP_BASE_URL=https://api.yourapp.com
+```
+
+### Step 2 — Register your callback URL with each provider
+
+In your Google Cloud Console (or Apple/GitHub/etc. developer console), register:
+```
+https://api.yourapp.com/api/auth/social/google/callback
+```
+instead of the SmartHive URL. Replace `google` with each provider you support.
+
+### Step 3 — Set `socialProxyUrl` in your app
+
+```tsx
+<SmartHiveAuthProvider
+  publishableKey="pk_prod_..."
+  projectId="your-project-id"
+  baseUrl="https://authcore.smarthivelabs.dev"
+  redirectUri="myapp://auth/callback"
+  socialProxyUrl="https://api.yourapp.com"   // ← add this
+>
+  <App />
+</SmartHiveAuthProvider>
+```
+
+That's it. `signIn.social("google")` now opens `api.yourapp.com/api/auth/social/google`, iOS shows your domain, and Google shows "to continue to **yourapp.com**".
+
+---
+
 ## Related Packages
 
 | Package | Use case |

package/dist/index.d.ts

@@ -4,6 +4,13 @@ import { SmartHiveAuthConfig, SmartHiveAuthClient, AuthSession, HeadlessSignInRe
 interface SmartHiveExpoConfig extends Omit<SmartHiveAuthConfig, "storage"> {
     /** Deep link redirect URI, e.g. "myapp://auth/callback" */
     redirectUri: string;
+    /**
+     * URL of your own backend's social auth proxy (e.g. "https://api.myapp.com").
+     * When set, social OAuth routes through your domain — Google/Apple consent screens
+     * show your domain instead of SmartHive's. Your backend must implement
+     * GET /api/auth/social/:provider and GET /api/auth/social/:provider/callback.
+     */
+    socialProxyUrl?: string;
 }
 /**
  * Build a deep link redirect URI from your Expo app scheme.
@@ -61,7 +68,7 @@ interface AuthContextValue {
                 callbackURL?: string;
             }): Promise<void>;
         };
-        /** Initiate a social OAuth flow — opens the provider's consent screen via Linking. */
+        /** Initiate a social OAuth flow — opens an in-app browser sheet (expo-web-browser). Auto-closes on redirect and updates session state. */
         social(provider: SocialProvider, options?: {
             redirectUri?: string;
         }): Promise<void>;
@@ -74,16 +81,18 @@ interface AuthContextValue {
         }): Promise<HeadlessSignUpResult>;
     };
 }
-interface SmartHiveProviderProps extends SmartHiveExpoConfig {
+interface SmartHiveAuthProviderProps extends SmartHiveExpoConfig {
     children: React.ReactNode;
 }
+/** @deprecated Use SmartHiveAuthProviderProps */
+type SmartHiveProviderProps = SmartHiveAuthProviderProps;
 /**
  * Wraps your Expo app and provides auth state to all child components.
  * Tokens are stored in SecureStore. Supports both:
  *  - OAuth 2.0 + PKCE browser redirect via `login()`
  *  - Headless direct sign-in via `signIn.*` (no browser, custom login screens)
  */
-declare function SmartHiveProvider({ children, ...config }: SmartHiveProviderProps): react_jsx_runtime.JSX.Element;
+declare function SmartHiveAuthProvider({ children, ...config }: SmartHiveAuthProviderProps): react_jsx_runtime.JSX.Element;
 declare function useAuth(): AuthContextValue;
 declare function useSession(): AuthSession | null;
 declare function useUser(): {} | null;
@@ -91,6 +100,8 @@ declare function useIsLoaded(): boolean;
 declare function useIsSignedIn(): boolean | null;
 declare function useAuthFetch(): (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 declare function useAuthorizationHeader(): () => Promise<Record<string, string>>;
+/** @deprecated Use SmartHiveAuthProvider */
+declare const SmartHiveProvider: typeof SmartHiveAuthProvider;
 declare function SignedIn({ children }: {
     children: React.ReactNode;
 }): react_jsx_runtime.JSX.Element | null;
@@ -101,4 +112,4 @@ declare function AuthLoading({ children }: {
     children: React.ReactNode;
 }): react_jsx_runtime.JSX.Element | null;
 
-export { AuthLoading, SignedIn, SignedOut, type SmartHiveExpoConfig, SmartHiveProvider, type SmartHiveProviderProps, buildRedirectUri, initExpoAuth, useAuth, useAuthFetch, useAuthorizationHeader, useIsLoaded, useIsSignedIn, useSession, useUser };
+export { AuthLoading, SignedIn, SignedOut, SmartHiveAuthProvider, type SmartHiveAuthProviderProps, type SmartHiveExpoConfig, SmartHiveProvider, type SmartHiveProviderProps, buildRedirectUri, initExpoAuth, useAuth, useAuthFetch, useAuthorizationHeader, useIsLoaded, useIsSignedIn, useSession, useUser };

package/dist/index.js

@@ -10,6 +10,7 @@ import {
 } from "react";
 import { Linking } from "react-native";
 import { AuthRequest } from "expo-auth-session";
+import * as WebBrowser from "expo-web-browser";
 import * as SecureStore from "expo-secure-store";
 import {
   initAuth,
@@ -64,17 +65,26 @@ function initExpoAuth(config) {
     },
     async loginSocial(provider, options) {
       const redirectUri = options?.redirectUri ?? config.redirectUri;
-      const authBase = normalizeBaseUrl(config.authDomain ?? config.baseUrl);
-      const env = envFromPublishableKey(config.publishableKey);
-      const url = new URL(`${authBase}/${env}/api/auth/social/${provider}`);
-      url.searchParams.set("project_id", config.projectId);
-      url.searchParams.set("redirect_uri", redirectUri);
-      await Linking.openURL(url.toString());
+      let socialUrl;
+      if (config.socialProxyUrl) {
+        socialUrl = new URL(`${normalizeBaseUrl(config.socialProxyUrl)}/api/auth/social/${provider}`);
+        socialUrl.searchParams.set("redirect_uri", redirectUri);
+      } else {
+        const authBase = normalizeBaseUrl(config.authDomain ?? config.baseUrl);
+        const env = envFromPublishableKey(config.publishableKey);
+        socialUrl = new URL(`${authBase}/${env}/api/auth/social/${provider}`);
+        socialUrl.searchParams.set("project_id", config.projectId);
+        socialUrl.searchParams.set("redirect_uri", redirectUri);
+      }
+      const result = await WebBrowser.openAuthSessionAsync(socialUrl.toString(), redirectUri);
+      if (result.type === "success") {
+        await base.handleSocialCallback({ url: result.url });
+      }
     }
   };
 }
 var AuthContext = createContext(null);
-function SmartHiveProvider({ children, ...config }) {
+function SmartHiveAuthProvider({ children, ...config }) {
   const configRef = useRef(config);
   const client = useMemo(() => initExpoAuth(configRef.current), []);
   const [session, setSession] = useState(null);
@@ -157,7 +167,11 @@ function SmartHiveProvider({ children, ...config }) {
       magicLink: {
         send: (p) => h.signIn.magicLink.send(p)
       },
-      social: (provider, options) => client.loginSocial(provider, options)
+      social: async (provider, options) => {
+        await client.loginSocial(provider, options);
+        const s = await client.getSession();
+        if (s) setSession(s);
+      }
     };
   }, [client]);
   const signUp = useMemo(() => {
@@ -197,7 +211,7 @@ function SmartHiveProvider({ children, ...config }) {
 }
 function useAuthContext() {
   const ctx = useContext(AuthContext);
-  if (!ctx) throw new Error("useAuth must be used inside <SmartHiveProvider>.");
+  if (!ctx) throw new Error("useAuth must be used inside <SmartHiveAuthProvider>.");
   return ctx;
 }
 function useAuth() {
@@ -222,6 +236,7 @@ function useAuthFetch() {
 function useAuthorizationHeader() {
   return useAuthContext().getAuthorizationHeader;
 }
+var SmartHiveProvider = SmartHiveAuthProvider;
 function SignedIn({ children }) {
   const { isLoaded, isSignedIn } = useAuthContext();
   if (!isLoaded || !isSignedIn) return null;
@@ -240,6 +255,7 @@ export {
   AuthLoading,
   SignedIn,
   SignedOut,
+  SmartHiveAuthProvider,
   SmartHiveProvider,
   buildRedirectUri,
   initExpoAuth,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/provider.tsx"],"sourcesContent":["import {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from \"react\";\nimport { Linking } from \"react-native\";\nimport { AuthRequest } from \"expo-auth-session\";\nimport * as SecureStore from \"expo-secure-store\";\nimport {\n  initAuth,\n  envFromPublishableKey,\n  type AuthSession,\n  type AuthStorage,\n  type HeadlessClient,\n  type HeadlessSignInResult,\n  type HeadlessSignUpResult,\n  type SmartHiveAuthClient,\n  type SmartHiveAuthConfig,\n  type SocialProvider,\n} from \"@smarthivelabs-devs/auth-sdk\";\n\n// ── Secure storage adapter ────────────────────────────────────────────────────\n\nconst secureStorage: AuthStorage = {\n  getItem: (key) => SecureStore.getItemAsync(key),\n  setItem: (key, value) => SecureStore.setItemAsync(key, value),\n  removeItem: (key) => SecureStore.deleteItemAsync(key),\n};\n\nconst storageKeys = {\n  pkceVerifier: \"smarthive.auth.pkce_verifier\",\n  pkceState: \"smarthive.auth.pkce_state\"\n} as const;\n\n// ── Config ────────────────────────────────────────────────────────────────────\n\nexport interface SmartHiveExpoConfig extends Omit<SmartHiveAuthConfig, \"storage\"> {\n  /** Deep link redirect URI, e.g. \"myapp://auth/callback\" */\n  redirectUri: string;\n}\n\n/**\n * Build a deep link redirect URI from your Expo app scheme.\n * @example buildRedirectUri(\"myapp\") → \"myapp://auth/callback\"\n */\nexport function buildRedirectUri(scheme: string, path = \"auth/callback\"): string {\n  return `${scheme}://${path}`;\n}\n\nfunction normalizeBaseUrl(baseUrl: string) {\n  return baseUrl.replace(/\\/$/, \"\");\n}\n\n// ── Auth client (Expo flavour) ─────────────────────────────────────────────────\n\n/**\n * Creates an auth client that uses SecureStore for token storage and\n * Linking.openURL for the OAuth redirect (instead of location.assign).\n */\nexport function initExpoAuth(config: SmartHiveExpoConfig): SmartHiveAuthClient {\n  const base = initAuth({\n    ...config,\n    storage: secureStorage,\n    temporaryStorage: secureStorage\n  } as SmartHiveAuthConfig);\n\n  return {\n    ...base,\n    async login(options) {\n      const redirectUri = options?.redirectUri ?? config.redirectUri;\n      const authBase = normalizeBaseUrl(config.authDomain ?? config.baseUrl);\n      const request = new AuthRequest({\n        clientId: config.publishableKey,\n        redirectUri,\n        responseType: \"code\",\n        usePKCE: true,\n        state: options?.state,\n        extraParams: {\n          project_id: config.projectId,\n          publishable_key: config.publishableKey\n        }\n      });\n      const url = await request.makeAuthUrlAsync({\n        authorizationEndpoint: `${authBase}/api/auth/oauth2/authorize`\n      });\n\n      if (request.codeVerifier) {\n        await secureStorage.setItem(storageKeys.pkceVerifier, request.codeVerifier);\n      }\n      await secureStorage.setItem(storageKeys.pkceState, request.state);\n      await Linking.openURL(url);\n    },\n\n    async loginSocial(provider, options) {\n      const redirectUri = options?.redirectUri ?? config.redirectUri;\n      const authBase = normalizeBaseUrl(config.authDomain ?? config.baseUrl);\n      const env = envFromPublishableKey(config.publishableKey);\n      const url = new URL(`${authBase}/${env}/api/auth/social/${provider}`);\n      url.searchParams.set(\"project_id\", config.projectId);\n      url.searchParams.set(\"redirect_uri\", redirectUri);\n      await Linking.openURL(url.toString());\n    },\n  };\n}\n\n// ── Context ────────────────────────────────────────────────────────────────────\n\ninterface AuthContextValue {\n  client: SmartHiveAuthClient;\n  session: AuthSession | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n  /** OAuth 2.0 + PKCE browser redirect sign-in (unchanged). */\n  login(options?: { redirectUri?: string }): Promise<void>;\n  logout(): Promise<void>;\n  refreshSession(): Promise<void>;\n  getAuthorizationHeader(): Promise<Record<string, string>>;\n  authFetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;\n  /**\n   * Headless (no browser) sign-in methods for custom login screens.\n   * Tokens are stored in SecureStore automatically on success.\n   */\n  signIn: {\n    email(params: { email: string; password: string }): Promise<HeadlessSignInResult>;\n    phone: {\n      sendOtp(params: { phoneNumber: string }): Promise<void>;\n      verify(params: { phoneNumber: string; code: string }): Promise<HeadlessSignInResult>;\n    };\n    emailOtp: {\n      send(params: { email: string }): Promise<void>;\n      verify(params: { email: string; code: string }): Promise<HeadlessSignInResult>;\n    };\n    magicLink: {\n      send(params: { email: string; callbackURL?: string }): Promise<void>;\n    };\n    /** Initiate a social OAuth flow — opens the provider's consent screen via Linking. */\n    social(provider: SocialProvider, options?: { redirectUri?: string }): Promise<void>;\n  };\n  signUp: {\n    email(params: { email: string; password: string; name?: string }): Promise<HeadlessSignUpResult>;\n  };\n}\n\nconst AuthContext = createContext<AuthContextValue | null>(null);\n\n// ── Provider ───────────────────────────────────────────────────────────────────\n\nexport interface SmartHiveProviderProps extends SmartHiveExpoConfig {\n  children: React.ReactNode;\n}\n\n/**\n * Wraps your Expo app and provides auth state to all child components.\n * Tokens are stored in SecureStore. Supports both:\n *  - OAuth 2.0 + PKCE browser redirect via `login()`\n *  - Headless direct sign-in via `signIn.*` (no browser, custom login screens)\n */\nexport function SmartHiveProvider({ children, ...config }: SmartHiveProviderProps) {\n  const configRef = useRef(config);\n  const client = useMemo(() => initExpoAuth(configRef.current), []);\n\n  const [session, setSession] = useState<AuthSession | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  // Initial session load from SecureStore\n  useEffect(() => {\n    let cancelled = false;\n    client\n      .initialize()\n      .then(() => client.getSession())\n      .then((s) => { if (!cancelled) setSession(s); })\n      .catch(() => {})\n      .finally(() => { if (!cancelled) setIsLoaded(true); });\n    return () => { cancelled = true; };\n  }, [client]);\n\n  // Deep link listener — catches both PKCE and social OAuth callbacks\n  useEffect(() => {\n    function handleUrl({ url }: { url: string }) {\n      try {\n        const parsed = new URL(url);\n        if (parsed.searchParams.has(\"access_token\") || parsed.searchParams.has(\"error\")) {\n          // Social auth callback — tokens already in URL params\n          client\n            .handleSocialCallback({ url })\n            .then((s) => setSession(s))\n            .catch(() => {});\n        } else {\n          // PKCE OAuth callback — exchange code for tokens\n          client\n            .handleCallback({ url })\n            .then((s) => setSession(s))\n            .catch(() => {});\n        }\n      } catch {\n        // Unparseable URL — ignore\n      }\n    }\n\n    const sub = Linking.addEventListener(\"url\", handleUrl);\n\n    // Handle cold-start: app opened directly from the OAuth redirect URL\n    Linking.getInitialURL().then((url) => {\n      if (url) handleUrl({ url });\n    });\n\n    return () => sub.remove();\n  }, [client]);\n\n  const login = useCallback(\n    (options?: { redirectUri?: string }) => client.login(options),\n    [client]\n  );\n\n  const logout = useCallback(async () => {\n    await client.logout();\n    setSession(null);\n  }, [client]);\n\n  const refreshSession = useCallback(async () => {\n    setSession(await client.refreshSession());\n  }, [client]);\n\n  const getAuthorizationHeader = useCallback(\n    () => client.getAuthorizationHeader(),\n    [client]\n  );\n\n  const authFetch = useCallback(\n    (input: string | URL | Request, init?: RequestInit) => client.fetch(input, init),\n    [client]\n  );\n\n  // ── Headless sign-in wrappers — save session + update state ──────────────────\n\n  function wrapHeadlessSignIn(\n    fn: (p: never) => Promise<HeadlessSignInResult>\n  ) {\n    return async (params: never) => {\n      const result = await fn(params);\n      setSession({\n        accessToken: result.accessToken,\n        refreshToken: result.refreshToken,\n        expiresAt: result.expiresAt,\n        user: result.user,\n      });\n      return result;\n    };\n  }\n\n  const signIn = useMemo<AuthContextValue[\"signIn\"]>(() => {\n    const h: HeadlessClient = client.headless;\n    return {\n      email: wrapHeadlessSignIn(h.signIn.email.bind(h.signIn) as never),\n      phone: {\n        sendOtp: (p) => h.signIn.phone.sendOtp(p),\n        verify: wrapHeadlessSignIn(h.signIn.phone.verify.bind(h.signIn.phone) as never),\n      },\n      emailOtp: {\n        send: (p) => h.signIn.emailOtp.send(p),\n        verify: wrapHeadlessSignIn(h.signIn.emailOtp.verify.bind(h.signIn.emailOtp) as never),\n      },\n      magicLink: {\n        send: (p) => h.signIn.magicLink.send(p),\n      },\n      social: (provider, options) => client.loginSocial(provider, options),\n    };\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client]);\n\n  const signUp = useMemo<AuthContextValue[\"signUp\"]>(() => {\n    const h: HeadlessClient = client.headless;\n    return {\n      email: async (params) => {\n        const result = await h.signUp.email(params);\n        if (!result.requiresVerification) {\n          setSession({\n            accessToken: result.accessToken,\n            refreshToken: result.refreshToken,\n            expiresAt: result.expiresAt,\n            user: result.user,\n          });\n        }\n        return result;\n      },\n    };\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client]);\n\n  const value = useMemo<AuthContextValue>(\n    () => ({\n      client,\n      session,\n      isLoaded,\n      isSignedIn: !!session,\n      login,\n      logout,\n      refreshSession,\n      getAuthorizationHeader,\n      authFetch,\n      signIn,\n      signUp,\n    }),\n    [client, session, isLoaded, login, logout, refreshSession, getAuthorizationHeader, authFetch, signIn, signUp]\n  );\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\n}\n\n// ── Hooks ──────────────────────────────────────────────────────────────────────\n\nfunction useAuthContext(): AuthContextValue {\n  const ctx = useContext(AuthContext);\n  if (!ctx) throw new Error(\"useAuth must be used inside <SmartHiveProvider>.\");\n  return ctx;\n}\n\nexport function useAuth() { return useAuthContext(); }\nexport function useSession() { return useAuthContext().session; }\nexport function useUser() { return useAuthContext().session?.user ?? null; }\nexport function useIsLoaded() { return useAuthContext().isLoaded; }\n\nexport function useIsSignedIn() {\n  const { isLoaded, isSignedIn } = useAuthContext();\n  return isLoaded ? isSignedIn : null;\n}\n\nexport function useAuthFetch() {\n  return useAuthContext().authFetch;\n}\n\nexport function useAuthorizationHeader() {\n  return useAuthContext().getAuthorizationHeader;\n}\n\n// ── Render helpers ─────────────────────────────────────────────────────────────\n\nexport function SignedIn({ children }: { children: React.ReactNode }) {\n  const { isLoaded, isSignedIn } = useAuthContext();\n  if (!isLoaded || !isSignedIn) return null;\n  return <>{children}</>;\n}\n\nexport function SignedOut({ children }: { children: React.ReactNode }) {\n  const { isLoaded, isSignedIn } = useAuthContext();\n  if (!isLoaded || isSignedIn) return null;\n  return <>{children}</>;\n}\n\nexport function AuthLoading({ children }: { children: React.ReactNode }) {\n  const { isLoaded } = useAuthContext();\n  return isLoaded ? null : <>{children}</>;\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,mBAAmB;AAC5B,YAAY,iBAAiB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OASK;AA+RE,SAkCA,UAlCA;AA3RT,IAAM,gBAA6B;AAAA,EACjC,SAAS,CAAC,QAAoB,yBAAa,GAAG;AAAA,EAC9C,SAAS,CAAC,KAAK,UAAsB,yBAAa,KAAK,KAAK;AAAA,EAC5D,YAAY,CAAC,QAAoB,4BAAgB,GAAG;AACtD;AAEA,IAAM,cAAc;AAAA,EAClB,cAAc;AAAA,EACd,WAAW;AACb;AAaO,SAAS,iBAAiB,QAAgB,OAAO,iBAAyB;AAC/E,SAAO,GAAG,MAAM,MAAM,IAAI;AAC5B;AAEA,SAAS,iBAAiB,SAAiB;AACzC,SAAO,QAAQ,QAAQ,OAAO,EAAE;AAClC;AAQO,SAAS,aAAa,QAAkD;AAC7E,QAAM,OAAO,SAAS;AAAA,IACpB,GAAG;AAAA,IACH,SAAS;AAAA,IACT,kBAAkB;AAAA,EACpB,CAAwB;AAExB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM,MAAM,SAAS;AACnB,YAAM,cAAc,SAAS,eAAe,OAAO;AACnD,YAAM,WAAW,iBAAiB,OAAO,cAAc,OAAO,OAAO;AACrE,YAAM,UAAU,IAAI,YAAY;AAAA,QAC9B,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,cAAc;AAAA,QACd,SAAS;AAAA,QACT,OAAO,SAAS;AAAA,QAChB,aAAa;AAAA,UACX,YAAY,OAAO;AAAA,UACnB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,QAAQ,iBAAiB;AAAA,QACzC,uBAAuB,GAAG,QAAQ;AAAA,MACpC,CAAC;AAED,UAAI,QAAQ,cAAc;AACxB,cAAM,cAAc,QAAQ,YAAY,cAAc,QAAQ,YAAY;AAAA,MAC5E;AACA,YAAM,cAAc,QAAQ,YAAY,WAAW,QAAQ,KAAK;AAChE,YAAM,QAAQ,QAAQ,GAAG;AAAA,IAC3B;AAAA,IAEA,MAAM,YAAY,UAAU,SAAS;AACnC,YAAM,cAAc,SAAS,eAAe,OAAO;AACnD,YAAM,WAAW,iBAAiB,OAAO,cAAc,OAAO,OAAO;AACrE,YAAM,MAAM,sBAAsB,OAAO,cAAc;AACvD,YAAM,MAAM,IAAI,IAAI,GAAG,QAAQ,IAAI,GAAG,oBAAoB,QAAQ,EAAE;AACpE,UAAI,aAAa,IAAI,cAAc,OAAO,SAAS;AACnD,UAAI,aAAa,IAAI,gBAAgB,WAAW;AAChD,YAAM,QAAQ,QAAQ,IAAI,SAAS,CAAC;AAAA,IACtC;AAAA,EACF;AACF;AAwCA,IAAM,cAAc,cAAuC,IAAI;AAcxD,SAAS,kBAAkB,EAAE,UAAU,GAAG,OAAO,GAA2B;AACjF,QAAM,YAAY,OAAO,MAAM;AAC/B,QAAM,SAAS,QAAQ,MAAM,aAAa,UAAU,OAAO,GAAG,CAAC,CAAC;AAEhE,QAAM,CAAC,SAAS,UAAU,IAAI,SAA6B,IAAI;AAC/D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAG9C,YAAU,MAAM;AACd,QAAI,YAAY;AAChB,WACG,WAAW,EACX,KAAK,MAAM,OAAO,WAAW,CAAC,EAC9B,KAAK,CAAC,MAAM;AAAE,UAAI,CAAC,UAAW,YAAW,CAAC;AAAA,IAAG,CAAC,EAC9C,MAAM,MAAM;AAAA,IAAC,CAAC,EACd,QAAQ,MAAM;AAAE,UAAI,CAAC,UAAW,aAAY,IAAI;AAAA,IAAG,CAAC;AACvD,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAM;AAAA,EACnC,GAAG,CAAC,MAAM,CAAC;AAGX,YAAU,MAAM;AACd,aAAS,UAAU,EAAE,IAAI,GAAoB;AAC3C,UAAI;AACF,cAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,YAAI,OAAO,aAAa,IAAI,cAAc,KAAK,OAAO,aAAa,IAAI,OAAO,GAAG;AAE/E,iBACG,qBAAqB,EAAE,IAAI,CAAC,EAC5B,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,EACzB,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACnB,OAAO;AAEL,iBACG,eAAe,EAAE,IAAI,CAAC,EACtB,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,EACzB,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACnB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,MAAM,QAAQ,iBAAiB,OAAO,SAAS;AAGrD,YAAQ,cAAc,EAAE,KAAK,CAAC,QAAQ;AACpC,UAAI,IAAK,WAAU,EAAE,IAAI,CAAC;AAAA,IAC5B,CAAC;AAED,WAAO,MAAM,IAAI,OAAO;AAAA,EAC1B,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,CAAC,YAAuC,OAAO,MAAM,OAAO;AAAA,IAC5D,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,SAAS,YAAY,YAAY;AACrC,UAAM,OAAO,OAAO;AACpB,eAAW,IAAI;AAAA,EACjB,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,iBAAiB,YAAY,YAAY;AAC7C,eAAW,MAAM,OAAO,eAAe,CAAC;AAAA,EAC1C,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,yBAAyB;AAAA,IAC7B,MAAM,OAAO,uBAAuB;AAAA,IACpC,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,YAAY;AAAA,IAChB,CAAC,OAA+B,SAAuB,OAAO,MAAM,OAAO,IAAI;AAAA,IAC/E,CAAC,MAAM;AAAA,EACT;AAIA,WAAS,mBACP,IACA;AACA,WAAO,OAAO,WAAkB;AAC9B,YAAM,SAAS,MAAM,GAAG,MAAM;AAC9B,iBAAW;AAAA,QACT,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,QACrB,WAAW,OAAO;AAAA,QAClB,MAAM,OAAO;AAAA,MACf,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAAS,QAAoC,MAAM;AACvD,UAAM,IAAoB,OAAO;AACjC,WAAO;AAAA,MACL,OAAO,mBAAmB,EAAE,OAAO,MAAM,KAAK,EAAE,MAAM,CAAU;AAAA,MAChE,OAAO;AAAA,QACL,SAAS,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ,CAAC;AAAA,QACxC,QAAQ,mBAAmB,EAAE,OAAO,MAAM,OAAO,KAAK,EAAE,OAAO,KAAK,CAAU;AAAA,MAChF;AAAA,MACA,UAAU;AAAA,QACR,MAAM,CAAC,MAAM,EAAE,OAAO,SAAS,KAAK,CAAC;AAAA,QACrC,QAAQ,mBAAmB,EAAE,OAAO,SAAS,OAAO,KAAK,EAAE,OAAO,QAAQ,CAAU;AAAA,MACtF;AAAA,MACA,WAAW;AAAA,QACT,MAAM,CAAC,MAAM,EAAE,OAAO,UAAU,KAAK,CAAC;AAAA,MACxC;AAAA,MACA,QAAQ,CAAC,UAAU,YAAY,OAAO,YAAY,UAAU,OAAO;AAAA,IACrE;AAAA,EAEF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,SAAS,QAAoC,MAAM;AACvD,UAAM,IAAoB,OAAO;AACjC,WAAO;AAAA,MACL,OAAO,OAAO,WAAW;AACvB,cAAM,SAAS,MAAM,EAAE,OAAO,MAAM,MAAM;AAC1C,YAAI,CAAC,OAAO,sBAAsB;AAChC,qBAAW;AAAA,YACT,aAAa,OAAO;AAAA,YACpB,cAAc,OAAO;AAAA,YACrB,WAAW,OAAO;AAAA,YAClB,MAAM,OAAO;AAAA,UACf,CAAC;AAAA,QACH;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EAEF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,CAAC,CAAC;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,SAAS,UAAU,OAAO,QAAQ,gBAAgB,wBAAwB,WAAW,QAAQ,MAAM;AAAA,EAC9G;AAEA,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAIA,SAAS,iBAAmC;AAC1C,QAAM,MAAM,WAAW,WAAW;AAClC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,kDAAkD;AAC5E,SAAO;AACT;AAEO,SAAS,UAAU;AAAE,SAAO,eAAe;AAAG;AAC9C,SAAS,aAAa;AAAE,SAAO,eAAe,EAAE;AAAS;AACzD,SAAS,UAAU;AAAE,SAAO,eAAe,EAAE,SAAS,QAAQ;AAAM;AACpE,SAAS,cAAc;AAAE,SAAO,eAAe,EAAE;AAAU;AAE3D,SAAS,gBAAgB;AAC9B,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,SAAO,WAAW,aAAa;AACjC;AAEO,SAAS,eAAe;AAC7B,SAAO,eAAe,EAAE;AAC1B;AAEO,SAAS,yBAAyB;AACvC,SAAO,eAAe,EAAE;AAC1B;AAIO,SAAS,SAAS,EAAE,SAAS,GAAkC;AACpE,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,MAAI,CAAC,YAAY,CAAC,WAAY,QAAO;AACrC,SAAO,gCAAG,UAAS;AACrB;AAEO,SAAS,UAAU,EAAE,SAAS,GAAkC;AACrE,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,MAAI,CAAC,YAAY,WAAY,QAAO;AACpC,SAAO,gCAAG,UAAS;AACrB;AAEO,SAAS,YAAY,EAAE,SAAS,GAAkC;AACvE,QAAM,EAAE,SAAS,IAAI,eAAe;AACpC,SAAO,WAAW,OAAO,gCAAG,UAAS;AACvC;","names":[]}
+{"version":3,"sources":["../src/provider.tsx"],"sourcesContent":["import {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from \"react\";\nimport { Linking } from \"react-native\";\nimport { AuthRequest } from \"expo-auth-session\";\nimport * as WebBrowser from \"expo-web-browser\";\nimport * as SecureStore from \"expo-secure-store\";\nimport {\n  initAuth,\n  envFromPublishableKey,\n  type AuthSession,\n  type AuthStorage,\n  type HeadlessClient,\n  type HeadlessSignInResult,\n  type HeadlessSignUpResult,\n  type SmartHiveAuthClient,\n  type SmartHiveAuthConfig,\n  type SocialProvider,\n} from \"@smarthivelabs-devs/auth-sdk\";\n\n// ── Secure storage adapter ────────────────────────────────────────────────────\n\nconst secureStorage: AuthStorage = {\n  getItem: (key) => SecureStore.getItemAsync(key),\n  setItem: (key, value) => SecureStore.setItemAsync(key, value),\n  removeItem: (key) => SecureStore.deleteItemAsync(key),\n};\n\nconst storageKeys = {\n  pkceVerifier: \"smarthive.auth.pkce_verifier\",\n  pkceState: \"smarthive.auth.pkce_state\"\n} as const;\n\n// ── Config ────────────────────────────────────────────────────────────────────\n\nexport interface SmartHiveExpoConfig extends Omit<SmartHiveAuthConfig, \"storage\"> {\n  /** Deep link redirect URI, e.g. \"myapp://auth/callback\" */\n  redirectUri: string;\n  /**\n   * URL of your own backend's social auth proxy (e.g. \"https://api.myapp.com\").\n   * When set, social OAuth routes through your domain — Google/Apple consent screens\n   * show your domain instead of SmartHive's. Your backend must implement\n   * GET /api/auth/social/:provider and GET /api/auth/social/:provider/callback.\n   */\n  socialProxyUrl?: string;\n}\n\n/**\n * Build a deep link redirect URI from your Expo app scheme.\n * @example buildRedirectUri(\"myapp\") → \"myapp://auth/callback\"\n */\nexport function buildRedirectUri(scheme: string, path = \"auth/callback\"): string {\n  return `${scheme}://${path}`;\n}\n\nfunction normalizeBaseUrl(baseUrl: string) {\n  return baseUrl.replace(/\\/$/, \"\");\n}\n\n// ── Auth client (Expo flavour) ─────────────────────────────────────────────────\n\n/**\n * Creates an auth client that uses SecureStore for token storage and\n * Linking.openURL for the OAuth redirect (instead of location.assign).\n */\nexport function initExpoAuth(config: SmartHiveExpoConfig): SmartHiveAuthClient {\n  const base = initAuth({\n    ...config,\n    storage: secureStorage,\n    temporaryStorage: secureStorage\n  } as SmartHiveAuthConfig);\n\n  return {\n    ...base,\n    async login(options) {\n      const redirectUri = options?.redirectUri ?? config.redirectUri;\n      const authBase = normalizeBaseUrl(config.authDomain ?? config.baseUrl);\n      const request = new AuthRequest({\n        clientId: config.publishableKey,\n        redirectUri,\n        responseType: \"code\",\n        usePKCE: true,\n        state: options?.state,\n        extraParams: {\n          project_id: config.projectId,\n          publishable_key: config.publishableKey\n        }\n      });\n      const url = await request.makeAuthUrlAsync({\n        authorizationEndpoint: `${authBase}/api/auth/oauth2/authorize`\n      });\n\n      if (request.codeVerifier) {\n        await secureStorage.setItem(storageKeys.pkceVerifier, request.codeVerifier);\n      }\n      await secureStorage.setItem(storageKeys.pkceState, request.state);\n      await Linking.openURL(url);\n    },\n\n    async loginSocial(provider, options) {\n      const redirectUri = options?.redirectUri ?? config.redirectUri;\n      let socialUrl: URL;\n\n      if (config.socialProxyUrl) {\n        // Route through the app's own backend — Google/Apple show the app's domain\n        socialUrl = new URL(`${normalizeBaseUrl(config.socialProxyUrl)}/api/auth/social/${provider}`);\n        socialUrl.searchParams.set(\"redirect_uri\", redirectUri);\n        // project_id is injected server-side by the backend proxy\n      } else {\n        // Direct SmartHive route\n        const authBase = normalizeBaseUrl(config.authDomain ?? config.baseUrl);\n        const env = envFromPublishableKey(config.publishableKey);\n        socialUrl = new URL(`${authBase}/${env}/api/auth/social/${provider}`);\n        socialUrl.searchParams.set(\"project_id\", config.projectId);\n        socialUrl.searchParams.set(\"redirect_uri\", redirectUri);\n      }\n\n      // In-app browser sheet — auto-closes when redirectUri fires\n      const result = await WebBrowser.openAuthSessionAsync(socialUrl.toString(), redirectUri);\n      if (result.type === \"success\") {\n        await base.handleSocialCallback({ url: result.url });\n      }\n    },\n  };\n}\n\n// ── Context ────────────────────────────────────────────────────────────────────\n\ninterface AuthContextValue {\n  client: SmartHiveAuthClient;\n  session: AuthSession | null;\n  isLoaded: boolean;\n  isSignedIn: boolean;\n  /** OAuth 2.0 + PKCE browser redirect sign-in (unchanged). */\n  login(options?: { redirectUri?: string }): Promise<void>;\n  logout(): Promise<void>;\n  refreshSession(): Promise<void>;\n  getAuthorizationHeader(): Promise<Record<string, string>>;\n  authFetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;\n  /**\n   * Headless (no browser) sign-in methods for custom login screens.\n   * Tokens are stored in SecureStore automatically on success.\n   */\n  signIn: {\n    email(params: { email: string; password: string }): Promise<HeadlessSignInResult>;\n    phone: {\n      sendOtp(params: { phoneNumber: string }): Promise<void>;\n      verify(params: { phoneNumber: string; code: string }): Promise<HeadlessSignInResult>;\n    };\n    emailOtp: {\n      send(params: { email: string }): Promise<void>;\n      verify(params: { email: string; code: string }): Promise<HeadlessSignInResult>;\n    };\n    magicLink: {\n      send(params: { email: string; callbackURL?: string }): Promise<void>;\n    };\n    /** Initiate a social OAuth flow — opens an in-app browser sheet (expo-web-browser). Auto-closes on redirect and updates session state. */\n    social(provider: SocialProvider, options?: { redirectUri?: string }): Promise<void>;\n  };\n  signUp: {\n    email(params: { email: string; password: string; name?: string }): Promise<HeadlessSignUpResult>;\n  };\n}\n\nconst AuthContext = createContext<AuthContextValue | null>(null);\n\n// ── Provider ───────────────────────────────────────────────────────────────────\n\nexport interface SmartHiveAuthProviderProps extends SmartHiveExpoConfig {\n  children: React.ReactNode;\n}\n\n/** @deprecated Use SmartHiveAuthProviderProps */\nexport type SmartHiveProviderProps = SmartHiveAuthProviderProps;\n\n/**\n * Wraps your Expo app and provides auth state to all child components.\n * Tokens are stored in SecureStore. Supports both:\n *  - OAuth 2.0 + PKCE browser redirect via `login()`\n *  - Headless direct sign-in via `signIn.*` (no browser, custom login screens)\n */\nexport function SmartHiveAuthProvider({ children, ...config }: SmartHiveAuthProviderProps) {\n  const configRef = useRef(config);\n  const client = useMemo(() => initExpoAuth(configRef.current), []);\n\n  const [session, setSession] = useState<AuthSession | null>(null);\n  const [isLoaded, setIsLoaded] = useState(false);\n\n  // Initial session load from SecureStore\n  useEffect(() => {\n    let cancelled = false;\n    client\n      .initialize()\n      .then(() => client.getSession())\n      .then((s) => { if (!cancelled) setSession(s); })\n      .catch(() => {})\n      .finally(() => { if (!cancelled) setIsLoaded(true); });\n    return () => { cancelled = true; };\n  }, [client]);\n\n  // Deep link listener — catches both PKCE and social OAuth callbacks\n  useEffect(() => {\n    function handleUrl({ url }: { url: string }) {\n      try {\n        const parsed = new URL(url);\n        if (parsed.searchParams.has(\"access_token\") || parsed.searchParams.has(\"error\")) {\n          // Social auth callback — tokens already in URL params\n          client\n            .handleSocialCallback({ url })\n            .then((s) => setSession(s))\n            .catch(() => {});\n        } else {\n          // PKCE OAuth callback — exchange code for tokens\n          client\n            .handleCallback({ url })\n            .then((s) => setSession(s))\n            .catch(() => {});\n        }\n      } catch {\n        // Unparseable URL — ignore\n      }\n    }\n\n    const sub = Linking.addEventListener(\"url\", handleUrl);\n\n    // Handle cold-start: app opened directly from the OAuth redirect URL\n    Linking.getInitialURL().then((url) => {\n      if (url) handleUrl({ url });\n    });\n\n    return () => sub.remove();\n  }, [client]);\n\n  const login = useCallback(\n    (options?: { redirectUri?: string }) => client.login(options),\n    [client]\n  );\n\n  const logout = useCallback(async () => {\n    await client.logout();\n    setSession(null);\n  }, [client]);\n\n  const refreshSession = useCallback(async () => {\n    setSession(await client.refreshSession());\n  }, [client]);\n\n  const getAuthorizationHeader = useCallback(\n    () => client.getAuthorizationHeader(),\n    [client]\n  );\n\n  const authFetch = useCallback(\n    (input: string | URL | Request, init?: RequestInit) => client.fetch(input, init),\n    [client]\n  );\n\n  // ── Headless sign-in wrappers — save session + update state ──────────────────\n\n  function wrapHeadlessSignIn(\n    fn: (p: never) => Promise<HeadlessSignInResult>\n  ) {\n    return async (params: never) => {\n      const result = await fn(params);\n      setSession({\n        accessToken: result.accessToken,\n        refreshToken: result.refreshToken,\n        expiresAt: result.expiresAt,\n        user: result.user,\n      });\n      return result;\n    };\n  }\n\n  const signIn = useMemo<AuthContextValue[\"signIn\"]>(() => {\n    const h: HeadlessClient = client.headless;\n    return {\n      email: wrapHeadlessSignIn(h.signIn.email.bind(h.signIn) as never),\n      phone: {\n        sendOtp: (p) => h.signIn.phone.sendOtp(p),\n        verify: wrapHeadlessSignIn(h.signIn.phone.verify.bind(h.signIn.phone) as never),\n      },\n      emailOtp: {\n        send: (p) => h.signIn.emailOtp.send(p),\n        verify: wrapHeadlessSignIn(h.signIn.emailOtp.verify.bind(h.signIn.emailOtp) as never),\n      },\n      magicLink: {\n        send: (p) => h.signIn.magicLink.send(p),\n      },\n      social: async (provider, options) => {\n        await client.loginSocial(provider, options);\n        // loginSocial used openAuthSessionAsync + handleSocialCallback — session is now in SecureStore\n        const s = await client.getSession();\n        if (s) setSession(s);\n      },\n    };\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client]);\n\n  const signUp = useMemo<AuthContextValue[\"signUp\"]>(() => {\n    const h: HeadlessClient = client.headless;\n    return {\n      email: async (params) => {\n        const result = await h.signUp.email(params);\n        if (!result.requiresVerification) {\n          setSession({\n            accessToken: result.accessToken,\n            refreshToken: result.refreshToken,\n            expiresAt: result.expiresAt,\n            user: result.user,\n          });\n        }\n        return result;\n      },\n    };\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client]);\n\n  const value = useMemo<AuthContextValue>(\n    () => ({\n      client,\n      session,\n      isLoaded,\n      isSignedIn: !!session,\n      login,\n      logout,\n      refreshSession,\n      getAuthorizationHeader,\n      authFetch,\n      signIn,\n      signUp,\n    }),\n    [client, session, isLoaded, login, logout, refreshSession, getAuthorizationHeader, authFetch, signIn, signUp]\n  );\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\n}\n\n// ── Hooks ──────────────────────────────────────────────────────────────────────\n\nfunction useAuthContext(): AuthContextValue {\n  const ctx = useContext(AuthContext);\n  if (!ctx) throw new Error(\"useAuth must be used inside <SmartHiveAuthProvider>.\");\n  return ctx;\n}\n\nexport function useAuth() { return useAuthContext(); }\nexport function useSession() { return useAuthContext().session; }\nexport function useUser() { return useAuthContext().session?.user ?? null; }\nexport function useIsLoaded() { return useAuthContext().isLoaded; }\n\nexport function useIsSignedIn() {\n  const { isLoaded, isSignedIn } = useAuthContext();\n  return isLoaded ? isSignedIn : null;\n}\n\nexport function useAuthFetch() {\n  return useAuthContext().authFetch;\n}\n\nexport function useAuthorizationHeader() {\n  return useAuthContext().getAuthorizationHeader;\n}\n\n/** @deprecated Use SmartHiveAuthProvider */\nexport const SmartHiveProvider = SmartHiveAuthProvider;\n\n// ── Render helpers ─────────────────────────────────────────────────────────────\n\nexport function SignedIn({ children }: { children: React.ReactNode }) {\n  const { isLoaded, isSignedIn } = useAuthContext();\n  if (!isLoaded || !isSignedIn) return null;\n  return <>{children}</>;\n}\n\nexport function SignedOut({ children }: { children: React.ReactNode }) {\n  const { isLoaded, isSignedIn } = useAuthContext();\n  if (!isLoaded || isSignedIn) return null;\n  return <>{children}</>;\n}\n\nexport function AuthLoading({ children }: { children: React.ReactNode }) {\n  const { isLoaded } = useAuthContext();\n  return isLoaded ? null : <>{children}</>;\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,mBAAmB;AAC5B,YAAY,gBAAgB;AAC5B,YAAY,iBAAiB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OASK;AA6TE,SAqCA,UArCA;AAzTT,IAAM,gBAA6B;AAAA,EACjC,SAAS,CAAC,QAAoB,yBAAa,GAAG;AAAA,EAC9C,SAAS,CAAC,KAAK,UAAsB,yBAAa,KAAK,KAAK;AAAA,EAC5D,YAAY,CAAC,QAAoB,4BAAgB,GAAG;AACtD;AAEA,IAAM,cAAc;AAAA,EAClB,cAAc;AAAA,EACd,WAAW;AACb;AAoBO,SAAS,iBAAiB,QAAgB,OAAO,iBAAyB;AAC/E,SAAO,GAAG,MAAM,MAAM,IAAI;AAC5B;AAEA,SAAS,iBAAiB,SAAiB;AACzC,SAAO,QAAQ,QAAQ,OAAO,EAAE;AAClC;AAQO,SAAS,aAAa,QAAkD;AAC7E,QAAM,OAAO,SAAS;AAAA,IACpB,GAAG;AAAA,IACH,SAAS;AAAA,IACT,kBAAkB;AAAA,EACpB,CAAwB;AAExB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM,MAAM,SAAS;AACnB,YAAM,cAAc,SAAS,eAAe,OAAO;AACnD,YAAM,WAAW,iBAAiB,OAAO,cAAc,OAAO,OAAO;AACrE,YAAM,UAAU,IAAI,YAAY;AAAA,QAC9B,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,cAAc;AAAA,QACd,SAAS;AAAA,QACT,OAAO,SAAS;AAAA,QAChB,aAAa;AAAA,UACX,YAAY,OAAO;AAAA,UACnB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,QAAQ,iBAAiB;AAAA,QACzC,uBAAuB,GAAG,QAAQ;AAAA,MACpC,CAAC;AAED,UAAI,QAAQ,cAAc;AACxB,cAAM,cAAc,QAAQ,YAAY,cAAc,QAAQ,YAAY;AAAA,MAC5E;AACA,YAAM,cAAc,QAAQ,YAAY,WAAW,QAAQ,KAAK;AAChE,YAAM,QAAQ,QAAQ,GAAG;AAAA,IAC3B;AAAA,IAEA,MAAM,YAAY,UAAU,SAAS;AACnC,YAAM,cAAc,SAAS,eAAe,OAAO;AACnD,UAAI;AAEJ,UAAI,OAAO,gBAAgB;AAEzB,oBAAY,IAAI,IAAI,GAAG,iBAAiB,OAAO,cAAc,CAAC,oBAAoB,QAAQ,EAAE;AAC5F,kBAAU,aAAa,IAAI,gBAAgB,WAAW;AAAA,MAExD,OAAO;AAEL,cAAM,WAAW,iBAAiB,OAAO,cAAc,OAAO,OAAO;AACrE,cAAM,MAAM,sBAAsB,OAAO,cAAc;AACvD,oBAAY,IAAI,IAAI,GAAG,QAAQ,IAAI,GAAG,oBAAoB,QAAQ,EAAE;AACpE,kBAAU,aAAa,IAAI,cAAc,OAAO,SAAS;AACzD,kBAAU,aAAa,IAAI,gBAAgB,WAAW;AAAA,MACxD;AAGA,YAAM,SAAS,MAAiB,gCAAqB,UAAU,SAAS,GAAG,WAAW;AACtF,UAAI,OAAO,SAAS,WAAW;AAC7B,cAAM,KAAK,qBAAqB,EAAE,KAAK,OAAO,IAAI,CAAC;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACF;AAwCA,IAAM,cAAc,cAAuC,IAAI;AAiBxD,SAAS,sBAAsB,EAAE,UAAU,GAAG,OAAO,GAA+B;AACzF,QAAM,YAAY,OAAO,MAAM;AAC/B,QAAM,SAAS,QAAQ,MAAM,aAAa,UAAU,OAAO,GAAG,CAAC,CAAC;AAEhE,QAAM,CAAC,SAAS,UAAU,IAAI,SAA6B,IAAI;AAC/D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAG9C,YAAU,MAAM;AACd,QAAI,YAAY;AAChB,WACG,WAAW,EACX,KAAK,MAAM,OAAO,WAAW,CAAC,EAC9B,KAAK,CAAC,MAAM;AAAE,UAAI,CAAC,UAAW,YAAW,CAAC;AAAA,IAAG,CAAC,EAC9C,MAAM,MAAM;AAAA,IAAC,CAAC,EACd,QAAQ,MAAM;AAAE,UAAI,CAAC,UAAW,aAAY,IAAI;AAAA,IAAG,CAAC;AACvD,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAM;AAAA,EACnC,GAAG,CAAC,MAAM,CAAC;AAGX,YAAU,MAAM;AACd,aAAS,UAAU,EAAE,IAAI,GAAoB;AAC3C,UAAI;AACF,cAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,YAAI,OAAO,aAAa,IAAI,cAAc,KAAK,OAAO,aAAa,IAAI,OAAO,GAAG;AAE/E,iBACG,qBAAqB,EAAE,IAAI,CAAC,EAC5B,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,EACzB,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACnB,OAAO;AAEL,iBACG,eAAe,EAAE,IAAI,CAAC,EACtB,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,EACzB,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACnB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,MAAM,QAAQ,iBAAiB,OAAO,SAAS;AAGrD,YAAQ,cAAc,EAAE,KAAK,CAAC,QAAQ;AACpC,UAAI,IAAK,WAAU,EAAE,IAAI,CAAC;AAAA,IAC5B,CAAC;AAED,WAAO,MAAM,IAAI,OAAO;AAAA,EAC1B,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,CAAC,YAAuC,OAAO,MAAM,OAAO;AAAA,IAC5D,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,SAAS,YAAY,YAAY;AACrC,UAAM,OAAO,OAAO;AACpB,eAAW,IAAI;AAAA,EACjB,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,iBAAiB,YAAY,YAAY;AAC7C,eAAW,MAAM,OAAO,eAAe,CAAC;AAAA,EAC1C,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,yBAAyB;AAAA,IAC7B,MAAM,OAAO,uBAAuB;AAAA,IACpC,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,YAAY;AAAA,IAChB,CAAC,OAA+B,SAAuB,OAAO,MAAM,OAAO,IAAI;AAAA,IAC/E,CAAC,MAAM;AAAA,EACT;AAIA,WAAS,mBACP,IACA;AACA,WAAO,OAAO,WAAkB;AAC9B,YAAM,SAAS,MAAM,GAAG,MAAM;AAC9B,iBAAW;AAAA,QACT,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,QACrB,WAAW,OAAO;AAAA,QAClB,MAAM,OAAO;AAAA,MACf,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAAS,QAAoC,MAAM;AACvD,UAAM,IAAoB,OAAO;AACjC,WAAO;AAAA,MACL,OAAO,mBAAmB,EAAE,OAAO,MAAM,KAAK,EAAE,MAAM,CAAU;AAAA,MAChE,OAAO;AAAA,QACL,SAAS,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ,CAAC;AAAA,QACxC,QAAQ,mBAAmB,EAAE,OAAO,MAAM,OAAO,KAAK,EAAE,OAAO,KAAK,CAAU;AAAA,MAChF;AAAA,MACA,UAAU;AAAA,QACR,MAAM,CAAC,MAAM,EAAE,OAAO,SAAS,KAAK,CAAC;AAAA,QACrC,QAAQ,mBAAmB,EAAE,OAAO,SAAS,OAAO,KAAK,EAAE,OAAO,QAAQ,CAAU;AAAA,MACtF;AAAA,MACA,WAAW;AAAA,QACT,MAAM,CAAC,MAAM,EAAE,OAAO,UAAU,KAAK,CAAC;AAAA,MACxC;AAAA,MACA,QAAQ,OAAO,UAAU,YAAY;AACnC,cAAM,OAAO,YAAY,UAAU,OAAO;AAE1C,cAAM,IAAI,MAAM,OAAO,WAAW;AAClC,YAAI,EAAG,YAAW,CAAC;AAAA,MACrB;AAAA,IACF;AAAA,EAEF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,SAAS,QAAoC,MAAM;AACvD,UAAM,IAAoB,OAAO;AACjC,WAAO;AAAA,MACL,OAAO,OAAO,WAAW;AACvB,cAAM,SAAS,MAAM,EAAE,OAAO,MAAM,MAAM;AAC1C,YAAI,CAAC,OAAO,sBAAsB;AAChC,qBAAW;AAAA,YACT,aAAa,OAAO;AAAA,YACpB,cAAc,OAAO;AAAA,YACrB,WAAW,OAAO;AAAA,YAClB,MAAM,OAAO;AAAA,UACf,CAAC;AAAA,QACH;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EAEF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,CAAC,CAAC;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,SAAS,UAAU,OAAO,QAAQ,gBAAgB,wBAAwB,WAAW,QAAQ,MAAM;AAAA,EAC9G;AAEA,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAIA,SAAS,iBAAmC;AAC1C,QAAM,MAAM,WAAW,WAAW;AAClC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,sDAAsD;AAChF,SAAO;AACT;AAEO,SAAS,UAAU;AAAE,SAAO,eAAe;AAAG;AAC9C,SAAS,aAAa;AAAE,SAAO,eAAe,EAAE;AAAS;AACzD,SAAS,UAAU;AAAE,SAAO,eAAe,EAAE,SAAS,QAAQ;AAAM;AACpE,SAAS,cAAc;AAAE,SAAO,eAAe,EAAE;AAAU;AAE3D,SAAS,gBAAgB;AAC9B,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,SAAO,WAAW,aAAa;AACjC;AAEO,SAAS,eAAe;AAC7B,SAAO,eAAe,EAAE;AAC1B;AAEO,SAAS,yBAAyB;AACvC,SAAO,eAAe,EAAE;AAC1B;AAGO,IAAM,oBAAoB;AAI1B,SAAS,SAAS,EAAE,SAAS,GAAkC;AACpE,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,MAAI,CAAC,YAAY,CAAC,WAAY,QAAO;AACrC,SAAO,gCAAG,UAAS;AACrB;AAEO,SAAS,UAAU,EAAE,SAAS,GAAkC;AACrE,QAAM,EAAE,UAAU,WAAW,IAAI,eAAe;AAChD,MAAI,CAAC,YAAY,WAAY,QAAO;AACpC,SAAO,gCAAG,UAAS;AACrB;AAEO,SAAS,YAAY,EAAE,SAAS,GAAkC;AACvE,QAAM,EAAE,SAAS,IAAI,eAAe;AACpC,SAAO,WAAW,OAAO,gCAAG,UAAS;AACvC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smarthivelabs-devs/auth-expo",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "description": "SmartHive Auth provider, hooks, and SecureStore integration for React Native / Expo",
   "license": "MIT",
   "repository": {
@@ -25,18 +25,20 @@
     "LICENSE"
   ],
   "peerDependencies": {
-    "@smarthivelabs-devs/auth-sdk": "^1.2.0",
+    "@smarthivelabs-devs/auth-sdk": "^1.4.0",
     "expo-auth-session": ">=5",
     "expo-secure-store": ">=12",
+    "expo-web-browser": ">=12",
     "react": ">=18",
     "react-native": ">=0.73"
   },
   "devDependencies": {
     "@types/react": "^18.3.18",
     "@types/react-native": "^0.73.0",
+    "expo-web-browser": "^55.0.15",
     "tsup": "^8.3.0",
     "typescript": "^5.7.3",
-    "@smarthivelabs-devs/auth-sdk": "^1.2.0"
+    "@smarthivelabs-devs/auth-sdk": "^1.4.0"
   },
   "scripts": {
     "build": "tsup",