@tastic/profile 0.10.0 → 0.12.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jay Deaton
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,13 +1,13 @@
 # @tastic/profile
 
-Player profile identity for local-multiplayer React Native games — a saved name/color/tag a player
+Player profile identity for local-multiplayer React Native games - a saved name/color/tag a player
 selects per seat, with a selection popover, an inline-editable roster screen, and a reusable identity
 badge. Deliberately blind to anything app-specific: a control scheme, a stats bucket, or anything
 else keyed by profile id lives entirely on the host app's own side.
 
 ## Why a separate `Profile` type at all?
 
-Every app built on this package needs its own extra fields on a profile — a key/gesture scheme, a
+Every app built on this package needs its own extra fields on a profile - a key/gesture scheme, a
 push/pull control mode, whatever's specific to that game. Baking any of those into this package's
 own `Profile` type would mean every OTHER app carries fields it doesn't use. Instead, this package's
 `Profile` is deliberately minimal:
@@ -25,73 +25,81 @@ interface Profile {
 
 A host app extends this on its own (`interface Profile extends BaseProfile { keyScheme: KeyScheme }`)
 and structural typing carries the richer shape straight through every component here that only ever
-reads the base fields — no wrapper or adapter needed. The one place this needs a little more than
-plain structural typing is `ProfilePicker`'s `onSelect` callback, which hands a profile back *out* —
+reads the base fields - no wrapper or adapter needed. The one place this needs a little more than
+plain structural typing is `ProfilePicker`'s `onSelect` callback, which hands a profile back *out* -
 see its own doc comment for why that component is generic over your own `Profile` type.
 
 ## What's in here
 
-- **`Profile`** — the base identity type described above.
-- **`isValidProfile` / `isValidTag`** — hand-rolled validators (no RN import, so they stay usable in
+- **`Profile`**: the base identity type described above.
+- **`isValidProfile` / `isValidTag`**: hand-rolled validators (no RN import, so they stay usable in
   plain-Node contexts like Jest without touching `react-native-paper`/`@rific/auto-paper`'s own
   RN-touching barrels). `isValidTag` accepts up to `MAX_TAG_LENGTH` plain characters or exactly one
   emoji (including a ZWJ-joined compound), and rejects mixing the two. `isValidProfile` checks only
-  this package's own base fields — a host app composes its own richer validator on top the same way
+  this package's own base fields - a host app composes its own richer validator on top the same way
   it extends the type:
   ```ts
   function isValidProfile(v: unknown): v is Profile {
     return isValidBaseProfile(v) && isValidKeyScheme((v as Partial<Profile>).keyScheme)
   }
   ```
-- **`ProfileChip`** — a profile's identity at a glance: its own color as a filled circle, with its
+- **`ProfileChip`**: a profile's identity at a glance: its own color as a filled circle, with its
   tag (or a generic fallback icon, if empty) in a contrast-safe color on top. `filled={false}` drops
   the background fill for a selected-row context that already fills its own background.
-- **`ProfilePicker`** — a name trigger + selection popover: pick an existing profile, fall back to a
+- **`ProfilePicker`**: a name trigger + selection popover: pick an existing profile, fall back to a
   null/"guest" selection, or (if `onManage` is passed) navigate to a management screen. Selection
-  only — creating, renaming, and deleting all live in `ProfilesManager`. Generic over your own
+  only - creating, renaming, and deleting all live in `ProfilesManager`. Generic over your own
   `Profile` type (see above). Placement props (all optional, see "Fake-rotated frames" below):
   `align` (force a horizontal side), `alignOverride` (substitute the whole placement result), and
   `rotation` (forwarded to the automatic measurement). Also exports
-  `getProfilePickerContentSize(profileCount, hasManageRow?)` — the popover's
+  `getProfilePickerContentSize(profileCount, hasManageRow?)` - the popover's
   `{ width, height }`, for sizing your own placement hook.
-- **`ProfilesManager`** — the roster screen itself: create/rename/recolor/retag/delete, editing
+- **`ProfilesManager`**: the roster screen itself: create/rename/recolor/retag/delete, editing
   inline in the row you tap, with a destructive-delete confirmation. No navigation of its own (no
-  router, no back button) — a host app renders this as a routed screen's body and supplies its own
+  router, no back button) - a host app renders this as a routed screen's body and supplies its own
   persistence via `profiles`/`onCreate`/`onSave`/`onDelete`. `onCreate`/`onSave` both take a
-  `ProfileEditPatch` (`{ name, color, tag }`) — exported from this package's own public API (it was
+  `ProfileEditPatch` (`{ name, color, tag }`) - exported from this package's own public API (it was
   a private, unexported interface inside `ProfilesManager.tsx` until `ProfilesScreen` below needed
   to reference it from its own props).
-- **`ProfilesScreen`** — the routed-screen shell around `ProfilesManager`: the container `View`,
+- **`ProfilesScreen`**: the routed-screen shell around `ProfilesManager`: the container `View`,
   theme-derived background/foreground, a back button, and the commit-pending-edit-before-navigate
   composition every app in the fleet used to hand-roll on its own around `ProfilesManager` (see
   "Routed screens: `ProfilesScreen`" below). Same `ProfileEditPatch`-shaped
   `profiles`/`defaultColor`/`onCreate`/`onSave`/`onDelete` as `ProfilesManager` itself, plus
-  `onBack`. Owns its own `ProfilesManagerHandle` ref internally — there's no `ref` prop here, since
+  `onBack`. Owns its own `ProfilesManagerHandle` ref internally - there's no `ref` prop here, since
   nothing outside it needs one anymore.
-- **`loadSharedProfiles` / `saveSharedProfiles` / `isSharedProfileStoreAvailable`** — an *optional*
+- **`readSharedProfiles` / `loadSharedProfiles` / `saveSharedProfiles` / `isSharedProfileStoreAvailable`**: an *optional*
   cross-app roster, shared between multiple apps of yours via a native iOS App Group (same Apple
   Developer Team, same `"com.apple.security.application-groups"` entitlement value on every
-  participating app). This only ever carries the base `Profile` shape above — a host app's own
+  participating app). This only ever carries the base `Profile` shape above - a host app's own
   extension fields (a key scheme, a control scheme, anything else) are NOT part of it and have to
   keep living in that app's own *local* storage, keyed by profile id, merged onto the shared base
   roster at read time (falling back to some per-app default whenever a shared profile's id isn't
-  in that app's own local extension table yet — e.g. it was created on a different app in the
+  in that app's own local extension table yet - e.g. it was created on a different app in the
   group). This split is deliberate, not a limitation to work around: it's this package's own
   base-fields-only `Profile` boundary (see above), just applied to storage instead of just to the
   TypeScript type.
 
   ```ts
-  // Conceptual sketch of the pattern — see "Redux helpers for the shared roster" below for a
+  // Conceptual sketch of the pattern - see "Redux helpers for the shared roster" below for a
   // ready-made version of it.
   const GROUP_ID = 'group.com.yourteam.yourgames'
-  const base = isSharedProfileStoreAvailable ? await loadSharedProfiles(GROUP_ID) : localBaseFallback
+  // null is a failed read, not an empty roster: keep the local copy and write nothing back.
+  const base = (isSharedProfileStoreAvailable ? await readSharedProfiles(GROUP_ID) : null) ?? localBaseFallback
   const profiles = base.map((p) => ({ ...p, controlScheme: localExtensions[p.id]?.controlScheme ?? DEFAULT_CONTROL_SCHEME }))
   // ...on create/update/delete, write the base fields back with saveSharedProfiles(GROUP_ID, nextBase)
   // and the extension field to the app's own local storage, same as today.
   ```
 
+  `readSharedProfiles` resolves to `[]` when nothing has been shared yet and to `null` when the
+  roster is there but couldn't be read (the native call failed, the blob is corrupt, or every entry
+  in it is invalid). Never treat that `null` as an empty roster: an app that replaces its roster
+  with `[]` and then saves deletes every profile from the shared store, for every app in the group.
+  `loadSharedProfiles` is the older form that flattens a failed read to `[]`; use it only where the
+  result can't replace a roster or lead to a write.
+
   Backed by a small native Expo Module (`ios/TasticProfileModule.swift`) wrapping
-  `UserDefaults(suiteName:)` — iOS only (see `expo-module.config.json`'s `"apple"`-only platform
+  `UserDefaults(suiteName:)` - iOS only (see `expo-module.config.json`'s `"apple"`-only platform
   list); `isSharedProfileStoreAvailable` is `false` on Android/web and on any iOS build that hasn't
   run `expo prebuild` since adding this App Group's entitlement, so a host app always needs its own
   local-storage fallback path regardless of platform. Requires the App Group itself to be declared
@@ -107,19 +115,19 @@ see its own doc comment for why that component is generic over your own `Profile
 `ProfilePicker` positions its popover with `@tastic/hud`'s `useAutoAlign`, which measures the
 trigger with `measureInWindow` and compares that rect against the raw window. Inside a *fake*
 rotation (a `View` turned +-90deg while the OS stays portrait-locked) the rect is in true screen
-space but the frame is not, so the hook measures along the wrong axes and can pick the wrong side —
+space but the frame is not, so the hook measures along the wrong axes and can pick the wrong side -
 flipping the list upward off-screen, or running it past the frame's bottom. Two optional props give
 you the same seam `@tastic/hud`'s `InlineColorPicker` has:
 
 | Prop | Type | Default | Effect |
 | --- | --- | --- | --- |
-| `align` | `'left' \| 'right' \| 'center'` | — | Forces the horizontal side; always beats the placement's own `align`. |
-| `alignOverride` | `ProfilePickerAlignResult` (`{ align, verticalAlign, maxHeight, measured, triggerRef }`, the same shape as `useAutoAlign`'s return / `@tastic/hud`'s `AlignResult`) | — | Replaces the automatic placement wholesale: its `align`/`verticalAlign`/`maxHeight`/`measured` drive the popover, and its `triggerRef` is the ref attached to the measured trigger. |
+| `align` | `'left' \| 'right' \| 'center'` | - | Forces the horizontal side; always beats the placement's own `align`. |
+| `alignOverride` | `ProfilePickerAlignResult` (`{ align, verticalAlign, maxHeight, measured, triggerRef }`, the same shape as `useAutoAlign`'s return / `@tastic/hud`'s `AlignResult`) | - | Replaces the automatic placement wholesale: its `align`/`verticalAlign`/`maxHeight`/`measured` drive the popover, and its `triggerRef` is the ref attached to the measured trigger. |
 | `rotation` | `0 \| 90 \| -90 \| 180` | `0` | Forwarded to the automatic `useAutoAlign` call (needs `@tastic/hud` >= 0.8.0). Ignored when `alignOverride` is given. |
 
 With none of them set the picker behaves exactly as it always has. Note `rotation` is never read
-from an ambient provider here (unlike `@tastic/hud`'s own pickers) — this package doesn't touch
-`@tastic/core` at runtime — so pass it explicitly.
+from an ambient provider here (unlike `@tastic/hud`'s own pickers) - this package doesn't touch
+`@tastic/core` at runtime - so pass it explicitly.
 
 To supply your own placement, run a rotation-aware placement hook against the popover's real size,
 using `getProfilePickerContentSize` so the two can't drift:
@@ -140,7 +148,7 @@ row per profile, and the Manage row when `onManage` is passed).
 #### The Profiles screen's color swatch: `useColorPickerAlign`
 
 `ProfilesManager` (and `ProfilesScreen`, which forwards it) renders `@tastic/hud`'s `InlineColorPicker`
-for the swatch popover in an edit row, and owns the popover state internally — so the host cannot pass
+for the swatch popover in an edit row, and owns the popover state internally - so the host cannot pass
 `alignOverride` to it directly. Inside a fake-rotated frame that popover has the same misplacement (and
 `InlineColorPicker` also feeds `useAutoAlign` its ambient rotation, double-rotating an already-transformed
 rect). Pass a placement **hook** as `useColorPickerAlign`:
@@ -149,13 +157,13 @@ rect). Pass a placement **hook** as `useColorPickerAlign`:
 <ProfilesScreen useColorPickerAlign={useFrameAutoAlign} /* ...the usual props */ />
 ```
 
-It is called as `useColorPickerAlign(open, contentWidth, contentHeight)` — `open` is whether the swatch
+It is called as `useColorPickerAlign(open, contentWidth, contentHeight)` - `open` is whether the swatch
 popover is showing, and the size is what `InlineColorPicker` itself computes (`@tastic/hud`'s
-`getInlineColorPickerContentSize` for the default swatch list at the raw window width) — and must return a
+`getInlineColorPickerContentSize` for the default swatch list at the raw window width) - and must return a
 `ProfilePickerAlignResult`, which is handed to `InlineColorPicker` as its `alignOverride` (its `triggerRef`
 is the ref that gets measured). It is a hook, not a plain function: give it a stable identity for the life of
 the mount (a module-level function), since switching it at runtime remounts the swatch. Omit it and behaviour is
-identical to before. **Needs `@tastic/hud` >= 0.12.0** to have any effect — older hud has no `alignOverride`
+identical to before. **Needs `@tastic/hud` >= 0.12.0** to have any effect - older hud has no `alignOverride`
 on `InlineColorPicker` and ignores it.
 
 ### Routed screens: `ProfilesScreen`
@@ -165,15 +173,15 @@ around `ProfilesManager`: a container `View`, theme-derived bg/fg, a `headerLeft
 the two-line `managerRef.current?.commitPendingEdit(); onBack()` composition every app's own
 back-button handler used to write out by hand (see `ProfilesManager`'s own `commitPendingEdit` doc
 above for why that flush matters on a router that doesn't genuinely unmount a popped screen). It
-owns that ref itself — there's no `ref` prop on `ProfilesScreen`, since nothing outside it needs
+owns that ref itself - there's no `ref` prop on `ProfilesScreen`, since nothing outside it needs
 one any more.
 
-Same `profiles`/`defaultColor`/`onCreate`/`onSave`/`onDelete` props as `ProfilesManager` — still
+Same `profiles`/`defaultColor`/`onCreate`/`onSave`/`onDelete` props as `ProfilesManager` - still
 `ProfileEditPatch`-shaped, still deliberately not widened to your own richer `CreateProfileInput`;
 compose any extra required fields (a key/control scheme, whatever's specific to your game) in your
-own closure at the call site, exactly as you already would calling `ProfilesManager` directly —
+own closure at the call site, exactly as you already would calling `ProfilesManager` directly -
 plus `onBack`. `fg`/`fgMuted`/`bg`/`cardBg`/`titleVariant`/`colorPreview` are all independently
-optional and forward straight through to the internal `ProfilesManager` (`bg` is new here —
+optional and forward straight through to the internal `ProfilesManager` (`bg` is new here -
 `ProfilesManager` itself has no `bg`, since it doesn't own a container `View` of its own).
 
 A whole routed screen, wired to your own store, is usually this small:
@@ -189,7 +197,7 @@ import { useProfiles } from '@/hooks/useProfiles'
 
 export default function Profiles() {
   const { profiles, createProfile, updateProfile, deleteProfile } = useProfiles()
-  // Only for wiring onDelete below — clears a deleted profile's own stats record so it doesn't
+  // Only for wiring onDelete below - clears a deleted profile's own stats record so it doesn't
   // stick around as an orphan once the profile itself is gone.
   const { removeProfileStats } = useGameStats()
 
@@ -209,11 +217,11 @@ export default function Profiles() {
 }
 ```
 
-`useProfiles`/`useGameStats` are your own app's hooks, not exports of this package — `profiles` is
+`useProfiles`/`useGameStats` are your own app's hooks, not exports of this package - `profiles` is
 whatever `Profile[]` (or your own extended shape) you already keep in Redux/context/state, and
 `createProfile`/`updateProfile`/`deleteProfile` are however you already persist it. `onBack` can be
-anything with no arguments — `router.back()`, a `safeBack()`-style helper that no-ops with no back
-stack behind it, `navigation.goBack()` — `ProfilesScreen` only ever calls it after flushing any
+anything with no arguments - `router.back()`, a `safeBack()`-style helper that no-ops with no back
+stack behind it, `navigation.goBack()` - `ProfilesScreen` only ever calls it after flushing any
 in-progress inline edit first.
 
 ### Redux helpers for the shared roster
@@ -221,36 +229,46 @@ in-progress inline edit first.
 The cross-app-roster sketch above is a pattern every `@tastic` game was hand-rolling on its own
 (a roster reducer, a per-profile extension table, the initial-load decision, a foreground-resync
 listener, a per-seat selection reducer). These five pieces are that logic extracted into reusable,
-Redux-shaped building blocks — plain TypeScript, no dependency on `redux`/`react-redux` themselves,
+Redux-shaped building blocks - plain TypeScript, no dependency on `redux`/`react-redux` themselves,
 so a host app plugs the reducer(s) into whatever store it already has:
 
-- **`profilesActions` / `profilesReducer` / `createProfileRecord`** — the base roster as a reducer:
+- **`profilesActions` / `profilesReducer` / `createProfileRecord`**: the base roster as a reducer:
   `add`/`update`/`remove`/`setAll` actions, plus `createProfileRecord(input)` to mint a complete
   `Profile` (id + timestamps) ready to dispatch via `profilesActions.add`.
-- **`createProfileExtensionSlice<TExtension>(namespace)`** — a factory for a host app's own
+- **`createProfileExtensionSlice<TExtension>(namespace)`**: a factory for a host app's own
   per-profile extension fields (a control scheme, a key scheme, ...): returns a
   `{ actions: { set, remove }, reducer }` pair over a plain `Record<profileId, TExtension>`,
   namespaced so more than one extension slice in the same app never collides. Not auto-cleared when
-  `profilesReducer` removes a profile — an app already dispatches its own cleanup action(s) on
+  `profilesReducer` removes a profile - an app already dispatches its own cleanup action(s) on
   delete, so this stays a self-contained reducer rather than new cross-slice wiring.
-- **`resolveInitialProfiles(groupId, localFallback)`** — the one-time initial-load decision: shared
-  store unavailable → `localFallback` verbatim; shared store empty → seed it from `localFallback`;
-  otherwise the shared roster always wins over a possibly-stale local snapshot.
-- **`useSharedProfilesSync({ groupId, onRemoteChange })`** — keeps a Redux-backed roster in sync for
+- **`resolveInitialProfiles(groupId, localFallback)`**: the one-time initial-load decision: shared
+  store unavailable → `localFallback` verbatim; shared roster unreadable → `localFallback`, writing
+  nothing; shared store empty → seed it from `localFallback`; otherwise the shared roster always
+  wins over a possibly-stale local snapshot.
+- **`useSharedProfilesSync({ groupId, onRemoteChange })`**: keeps a Redux-backed roster in sync for
   the rest of the app's lifetime: call the returned `syncToShared(next)` right after a local roster
   change to mirror it out, and `onRemoteChange` fires with a freshly-loaded roster whenever the app
   returns to the foreground (skipped while a `syncToShared` write is still in flight, so a remote
-  refresh can't clobber a write that hasn't landed yet).
-- **`createProfileSelectionSlice<TSeat>(namespace, defaultState)`** — a factory for the *other*
+  refresh can't clobber a write that hasn't landed yet, and skipped when the read fails).
+- **`createProfileSelectionSlice<TSeat>(namespace, defaultState)`**: a factory for the *other*
   per-seat piece of state: which profile id each seat currently has selected (parallel to
   `createProfileExtensionSlice` above, but keyed by seat instead of by profile id). Returns a
-  `{ actions: { select, clearProfile }, reducer }` pair over a plain `Record<TSeat, string | null>`.
+  `{ actions: { select, clearProfile, pruneToRoster }, reducer }` pair over a plain
+  `Record<TSeat, string | null>`.
   Unlike `createProfileExtensionSlice`, the seat set can't be derived from `TSeat` alone (types
-  don't exist at runtime), so callers pass their own `defaultState` — the same literal object (e.g.
+  don't exist at runtime), so callers pass their own `defaultState` - the same literal object (e.g.
   `{ 1: null, 2: null }`) every app already declares today. `select({ seat, profileId })` sets one
-  seat's selection directly; `clearProfile(profileId)` walks every seat and nulls out any that
-  currently points at that id — call it when a profile is deleted so no seat is left referencing a
-  ghost id. Always local, like the guest/CPU/override colors below — never part of the shared
+  seat's selection; one profile is never on two seats, so picking a profile another seat already
+  has swaps the two (that seat takes this seat's previous pick, or guest), and REHYDRATE drops any
+  duplicate saved before this rule, keeping the first seat's. A swap moves a profile off a seat
+  without that seat's own select handler running, so reset per-seat state tied to the selection
+  (a profile color override, below) for both seats when a pick swaps. `clearProfile(profileId)` walks every seat and nulls out any that
+  currently points at that id - call it when a profile is deleted so no seat is left referencing a
+  ghost id. `pruneToRoster(ids)` nulls every seat whose id is no longer in the given roster; dispatch
+  it after both `profilesActions.setAll` paths (the initial `resolveInitialProfiles` reconcile and
+  `onRemoteChange`), since a sibling app can delete a profile without this app's own delete ever
+  running, and it returns the same state object when nothing changes.
+  Always local, like the guest/CPU/override colors below, and never part of the shared
   App Group roster, since who's selected on *this* device is naturally per-app, per-device state.
 
 ## Muted profile colors (`ProfileColorProvider`)
@@ -276,26 +294,26 @@ untouched. `useProfileColorPreview()` returns the provider's function (or `undef
 ## Per-seat color persistence
 
 A loadout/lobby screen's color for a given seat is never just "the selected profile's saved
-color" — a seat can be a guest (no profile selected), a CPU opponent, or a profile the player
+color" - a seat can be a guest (no profile selected), a CPU opponent, or a profile the player
 manually recolored for a clash-swap without touching the profile itself. Every `@tastic` game
 (AirHockey, BoxHockey, Pong, LightCycles, Snake) ends up needing the same three cooperating pieces
-of state to cover all three cases. This is the established pattern every game should follow — it
+of state to cover all three cases. This is the established pattern every game should follow - it
 was previously undocumented at the package level, which is exactly why two of the five apps
 (AirHockey, Snake) didn't pick up the third piece below until after they'd already shipped without
 it.
 
-- **`lastGuestColor`** — a `Record<Seat, string>`: what a seat's color was the last time it was a
+- **`lastGuestColor`**: a `Record<Seat, string>`: what a seat's color was the last time it was a
   guest (no profile selected). Written only when a guest seat's color changes; a profile-selected
   seat never reads or writes it.
-- **`lastCpuColor`** — the same idea for the CPU slot, as a single remembered `string` rather than a
+- **`lastCpuColor`**: the same idea for the CPU slot, as a single remembered `string` rather than a
   per-seat record (a CPU opponent only ever occupies one fixed seat in every shipped game so far).
-- **`profileOverride`** — a `Record<Seat, string | null>`: a manual recolor or clash-swap landing on
-  a seat that currently has a profile selected. `null` means "no override — track the profile's own
+- **`profileOverride`**: a `Record<Seat, string | null>`: a manual recolor or clash-swap landing on
+  a seat that currently has a profile selected. `null` means "no override - track the profile's own
   saved color live." Cleared only when that seat's own profile selection genuinely changes, never by
   merely leaving and returning to the screen.
 
 None of these three are exports of this package today. `lastGuestColor`/`lastCpuColor` predate it
-entirely, and `profileOverride` is still hand-rolled per app — typically alongside
+entirely, and `profileOverride` is still hand-rolled per app - typically alongside
 `createProfileSelectionSlice`'s own selection state, in the same seat-scoped slice (see e.g.
 BoxHockey's `src/redux/seatColorsSlice.ts`) or folded into the app's own `gameSlice.ts` when there's
 no dedicated slice to put it in (see Snake's `src/redux/gameSlice.ts`). This section exists so a new
@@ -313,17 +331,28 @@ const color = profile
 ```
 
 `lastGuestColor`/`lastCpuColor` are only ever consulted when no profile is selected for that seat at
-all — a profile-selected seat's guest/CPU memory is neither read nor overwritten while it's active,
+all - a profile-selected seat's guest/CPU memory is neither read nor overwritten while it's active,
 so switching a seat back to "guest" later still recalls whatever guest color it had before a profile
 was ever selected there.
 
+Each seat resolves from its own source, so two of them can land on the same color (a profile saved
+as the other seat's guest color, say). Run seat 2's result through `avoidSeatColorClash` after
+resolving both:
+
+```ts
+const p2Display = avoidSeatColorClash(p1Color, p2Color, [DEFAULT_P1_COLOR, DEFAULT_P2_COLOR])
+```
+
+On a clash, seat 2 shows seat 1's default color, or seat 2's default when seat 1 is already on its
+own. It's for display only: don't persist it, so a guest's or the CPU's remembered color stays put.
+
 ## Install
 
 ```bash
 npm install @tastic/profile
 ```
 
-Published to the public npm registry via tag-based CI (OIDC trusted publishing — see
+Published to the public npm registry via tag-based CI (OIDC trusted publishing - see
 `npm run release:patch`/`:minor`/`:major`).
 
 ## Peer dependencies
@@ -332,9 +361,9 @@ Published to the public npm registry via tag-based CI (OIDC trusted publishing
 (`getContrastColor`, `useAutoPaperTheme`), `@rific/feedback-press` (`TouchableRipple`),
 `@rific/focus-chain` (`useFocusChain`), `@rific/toaster` (`useToast`), `@tastic/hud`
 (`InlineColorPicker`, `PopoverBody`, `PopoverHost`, `useAutoAlign`, `usePopoverHost`), `@tastic/core`
-(a peer of `@tastic/hud` itself) — none of these are bundled, so use whatever versions your app
+(a peer of `@tastic/hud` itself) - none of these are bundled, so use whatever versions your app
 already has.
 
-`expo-modules-core` is an *optional* peer — only resolved by `loadSharedProfiles`/`saveSharedProfiles`
+`expo-modules-core` is an *optional* peer - only resolved by `loadSharedProfiles`/`saveSharedProfiles`
 for the native App Group bridge described above; safe to omit entirely on an Android/web-only
 consumer.

package/dist/index.d.mts

@@ -141,6 +141,7 @@ interface SelectProfilePayload<TSeat> {
 }
 interface ProfileSelectionActions<TSeat> {
     clearProfile: ActionCreator<string>;
+    pruneToRoster: ActionCreator<string[]>;
     select: ActionCreator<SelectProfilePayload<TSeat>>;
 }
 type ProfileSelectionState<TSeat extends string | number> = Record<TSeat, string | null>;
@@ -211,8 +212,11 @@ interface UseSharedProfilesSyncResult {
 }
 declare function useSharedProfilesSync({ groupId, onRemoteChange }: UseSharedProfilesSyncOptions): UseSharedProfilesSyncResult;
 
+declare function avoidSeatColorClash(p1Color: string, p2Color: string, defaults: readonly [p1Default: string, p2Default: string]): string;
+
 declare const isSharedProfileStoreAvailable: boolean;
+declare function readSharedProfiles(groupId: string): Promise<Profile[] | null>;
 declare function loadSharedProfiles(groupId: string): Promise<Profile[]>;
 declare function saveSharedProfiles(groupId: string, profiles: Profile[]): Promise<void>;
 
-export { type CreateProfileInput, MAX_PROFILE_NAME_LENGTH, MAX_TAG_LENGTH, type Profile, ProfileChip, ProfileColorProvider, type ProfileEditPatch, type ProfileExtensionActions, type ProfileExtensionSlice, type ProfileExtensionState, ProfilePicker, type ProfilePickerAlignResult, type ProfilePickerContentSize, type ProfileSelectionActions, type ProfileSelectionSlice, type ProfileSelectionState, ProfilesManager, type ProfilesManagerHandle, type ProfilesManagerProps, ProfilesScreen, type ProfilesScreenProps, type SeatColorsActions, type SeatColorsSlice, type SeatColorsState, type SelectProfilePayload, type SetLastGuestColorPayload, type SetProfileExtensionPayload, type SetProfileOverridePayload, type UpdateProfilePayload, type UseSharedProfilesSyncOptions, type UseSharedProfilesSyncResult, createProfileExtensionSlice, createProfileRecord, createProfileSelectionSlice, createSeatColorsSlice, getProfilePickerContentSize, isSharedProfileStoreAvailable, isValidProfile, isValidTag, loadSharedProfiles, profilesActions, profilesReducer, resolveInitialProfiles, saveSharedProfiles, useProfileColorPreview, useProfileDisplayColor, useSharedProfilesSync };
+export { type CreateProfileInput, MAX_PROFILE_NAME_LENGTH, MAX_TAG_LENGTH, type Profile, ProfileChip, ProfileColorProvider, type ProfileEditPatch, type ProfileExtensionActions, type ProfileExtensionSlice, type ProfileExtensionState, ProfilePicker, type ProfilePickerAlignResult, type ProfilePickerContentSize, type ProfileSelectionActions, type ProfileSelectionSlice, type ProfileSelectionState, ProfilesManager, type ProfilesManagerHandle, type ProfilesManagerProps, ProfilesScreen, type ProfilesScreenProps, type SeatColorsActions, type SeatColorsSlice, type SeatColorsState, type SelectProfilePayload, type SetLastGuestColorPayload, type SetProfileExtensionPayload, type SetProfileOverridePayload, type UpdateProfilePayload, type UseSharedProfilesSyncOptions, type UseSharedProfilesSyncResult, avoidSeatColorClash, createProfileExtensionSlice, createProfileRecord, createProfileSelectionSlice, createSeatColorsSlice, getProfilePickerContentSize, isSharedProfileStoreAvailable, isValidProfile, isValidTag, loadSharedProfiles, profilesActions, profilesReducer, readSharedProfiles, resolveInitialProfiles, saveSharedProfiles, useProfileColorPreview, useProfileDisplayColor, useSharedProfilesSync };

package/dist/index.d.ts

@@ -141,6 +141,7 @@ interface SelectProfilePayload<TSeat> {
 }
 interface ProfileSelectionActions<TSeat> {
     clearProfile: ActionCreator<string>;
+    pruneToRoster: ActionCreator<string[]>;
     select: ActionCreator<SelectProfilePayload<TSeat>>;
 }
 type ProfileSelectionState<TSeat extends string | number> = Record<TSeat, string | null>;
@@ -211,8 +212,11 @@ interface UseSharedProfilesSyncResult {
 }
 declare function useSharedProfilesSync({ groupId, onRemoteChange }: UseSharedProfilesSyncOptions): UseSharedProfilesSyncResult;
 
+declare function avoidSeatColorClash(p1Color: string, p2Color: string, defaults: readonly [p1Default: string, p2Default: string]): string;
+
 declare const isSharedProfileStoreAvailable: boolean;
+declare function readSharedProfiles(groupId: string): Promise<Profile[] | null>;
 declare function loadSharedProfiles(groupId: string): Promise<Profile[]>;
 declare function saveSharedProfiles(groupId: string, profiles: Profile[]): Promise<void>;
 
-export { type CreateProfileInput, MAX_PROFILE_NAME_LENGTH, MAX_TAG_LENGTH, type Profile, ProfileChip, ProfileColorProvider, type ProfileEditPatch, type ProfileExtensionActions, type ProfileExtensionSlice, type ProfileExtensionState, ProfilePicker, type ProfilePickerAlignResult, type ProfilePickerContentSize, type ProfileSelectionActions, type ProfileSelectionSlice, type ProfileSelectionState, ProfilesManager, type ProfilesManagerHandle, type ProfilesManagerProps, ProfilesScreen, type ProfilesScreenProps, type SeatColorsActions, type SeatColorsSlice, type SeatColorsState, type SelectProfilePayload, type SetLastGuestColorPayload, type SetProfileExtensionPayload, type SetProfileOverridePayload, type UpdateProfilePayload, type UseSharedProfilesSyncOptions, type UseSharedProfilesSyncResult, createProfileExtensionSlice, createProfileRecord, createProfileSelectionSlice, createSeatColorsSlice, getProfilePickerContentSize, isSharedProfileStoreAvailable, isValidProfile, isValidTag, loadSharedProfiles, profilesActions, profilesReducer, resolveInitialProfiles, saveSharedProfiles, useProfileColorPreview, useProfileDisplayColor, useSharedProfilesSync };
+export { type CreateProfileInput, MAX_PROFILE_NAME_LENGTH, MAX_TAG_LENGTH, type Profile, ProfileChip, ProfileColorProvider, type ProfileEditPatch, type ProfileExtensionActions, type ProfileExtensionSlice, type ProfileExtensionState, ProfilePicker, type ProfilePickerAlignResult, type ProfilePickerContentSize, type ProfileSelectionActions, type ProfileSelectionSlice, type ProfileSelectionState, ProfilesManager, type ProfilesManagerHandle, type ProfilesManagerProps, ProfilesScreen, type ProfilesScreenProps, type SeatColorsActions, type SeatColorsSlice, type SeatColorsState, type SelectProfilePayload, type SetLastGuestColorPayload, type SetProfileExtensionPayload, type SetProfileOverridePayload, type UpdateProfilePayload, type UseSharedProfilesSyncOptions, type UseSharedProfilesSyncResult, avoidSeatColorClash, createProfileExtensionSlice, createProfileRecord, createProfileSelectionSlice, createSeatColorsSlice, getProfilePickerContentSize, isSharedProfileStoreAvailable, isValidProfile, isValidTag, loadSharedProfiles, profilesActions, profilesReducer, readSharedProfiles, resolveInitialProfiles, saveSharedProfiles, useProfileColorPreview, useProfileDisplayColor, useSharedProfilesSync };

package/dist/index.js

@@ -27,6 +27,7 @@ __export(index_exports, {
   ProfilePicker: () => ProfilePicker,
   ProfilesManager: () => ProfilesManager,
   ProfilesScreen: () => ProfilesScreen,
+  avoidSeatColorClash: () => avoidSeatColorClash,
   createProfileExtensionSlice: () => createProfileExtensionSlice,
   createProfileRecord: () => createProfileRecord,
   createProfileSelectionSlice: () => createProfileSelectionSlice,
@@ -38,6 +39,7 @@ __export(index_exports, {
   loadSharedProfiles: () => loadSharedProfiles,
   profilesActions: () => profilesActions,
   profilesReducer: () => profilesReducer,
+  readSharedProfiles: () => readSharedProfiles,
   resolveInitialProfiles: () => resolveInitialProfiles,
   saveSharedProfiles: () => saveSharedProfiles,
   useProfileColorPreview: () => useProfileColorPreview,
@@ -189,12 +191,12 @@ var styles2 = import_react_native2.StyleSheet.create({
   anchor: {
     position: "relative"
   },
-  // See InlineColorPicker's identical comment — React Native Web gives every position:'relative'
+  // See InlineColorPicker's identical comment - React Native Web gives every position:'relative'
   // view its own stacking context, so the elevation has to live on the anchor itself.
   anchorOpen: {
     zIndex: 100
   },
-  // Separates Manage (a navigation action) from the selectable rows above it — different kind of
+  // Separates Manage (a navigation action) from the selectable rows above it - different kind of
   // action, not just another row in the same list. Tinted with the seat's own color (passed in as
   // backgroundColor) rather than a flat gray, matching the border/caret's own accent-tinted look.
   divider: {
@@ -203,7 +205,7 @@ var styles2 = import_react_native2.StyleSheet.create({
     opacity: 0.25
   },
   // Matches ProfileChip's own default size/shape exactly (see this row's own render-site comment)
-  // — no backgroundColor, unlike ProfileChip's own default: this row has no identity color of its
+  // - no backgroundColor, unlike ProfileChip's own default: this row has no identity color of its
   // own to fill it with, and the render site now colors the icon directly instead.
   guestChip: {
     alignItems: "center",
@@ -217,7 +219,7 @@ var styles2 = import_react_native2.StyleSheet.create({
     fontWeight: "700",
     letterSpacing: 0.5
   },
-  // Centered rather than left-aligned like a normal row — see this row's own render-site comment
+  // Centered rather than left-aligned like a normal row - see this row's own render-site comment
   // for why (a footer action, not another selectable identity).
   manageRowInner: {
     alignItems: "center",
@@ -235,7 +237,7 @@ var styles2 = import_react_native2.StyleSheet.create({
     shadowOpacity: 0.3,
     shadowRadius: 8
   },
-  // Padded on every side (not just top/bottom) — a selected row's own full-color background (see
+  // Padded on every side (not just top/bottom) - a selected row's own full-color background (see
   // `row`'s borderRadius) needs real margin from the menu's own straight edges to read as a rounded
   // pill instead of looking clipped against them.
   menuContent: {
@@ -478,7 +480,7 @@ var styles3 = import_react_native3.StyleSheet.create({
     gap: 4,
     paddingBottom: 8
   },
-  // 1x1 and fully transparent — there's nothing to see here on purpose (see EditRow's own comment
+  // 1x1 and fully transparent - there's nothing to see here on purpose (see EditRow's own comment
   // above the field this styles). position: 'absolute' pulls it out of editRow's flex flow
   // entirely, so it doesn't reserve a gap in the row the way a normal flex sibling would.
   hiddenTagInput: {
@@ -607,12 +609,31 @@ var REHYDRATE = "persist/REHYDRATE";
 function createProfileSelectionSlice(namespace, defaultState, mountKey = "profileSelection") {
   const select = createActionCreator(`profileSelection/${namespace}/select`);
   const clearProfile = createActionCreator(`profileSelection/${namespace}/clearProfile`);
+  const pruneToRoster = createActionCreator(`profileSelection/${namespace}/pruneToRoster`);
   function reducer(state = defaultState, action) {
     if (action.type === REHYDRATE) {
       const persisted = action.payload?.[mountKey];
-      return { ...defaultState, ...state, ...persisted };
+      const merged = { ...defaultState, ...state, ...persisted };
+      const seen = /* @__PURE__ */ new Set();
+      for (const seat of Object.keys(merged)) {
+        const profileId = merged[seat];
+        if (profileId === null) continue;
+        if (seen.has(profileId)) merged[seat] = null;
+        else seen.add(profileId);
+      }
+      return merged;
+    }
+    if (select.match(action)) {
+      const { profileId, seat } = action.payload;
+      const previous = state[seat] ?? null;
+      const next = { ...state, [seat]: profileId };
+      if (profileId !== null) {
+        for (const other of Object.keys(state)) {
+          if (String(other) !== String(seat) && state[other] === profileId) next[other] = previous === profileId ? null : previous;
+        }
+      }
+      return next;
     }
-    if (select.match(action)) return { ...state, [action.payload.seat]: action.payload.profileId };
     if (clearProfile.match(action)) {
       const next = { ...state };
       for (const seat of Object.keys(state)) {
@@ -620,9 +641,22 @@ function createProfileSelectionSlice(namespace, defaultState, mountKey = "profil
       }
       return next;
     }
+    if (pruneToRoster.match(action)) {
+      const roster = new Set(action.payload);
+      const next = { ...state };
+      let changed = false;
+      for (const seat of Object.keys(state)) {
+        const profileId = state[seat];
+        if (profileId !== null && !roster.has(profileId)) {
+          next[seat] = null;
+          changed = true;
+        }
+      }
+      return changed ? next : state;
+    }
     return state;
   }
-  return { actions: { clearProfile, select }, reducer };
+  return { actions: { clearProfile, pruneToRoster, select }, reducer };
 }
 
 // src/redux/profilesSlice.ts
@@ -659,22 +693,27 @@ try {
 }
 var PROFILES_KEY = "sharedProfiles";
 var isSharedProfileStoreAvailable = native !== null;
-async function loadSharedProfiles(groupId) {
+async function readSharedProfiles(groupId) {
   if (!native) return [];
   let json = null;
   try {
     json = await native.getSharedJSON(groupId, PROFILES_KEY);
   } catch {
-    return [];
+    return null;
   }
   if (!json) return [];
   try {
     const parsed = JSON.parse(json);
-    return Array.isArray(parsed) ? parsed.filter(isValidProfile) : [];
+    if (!Array.isArray(parsed)) return null;
+    const profiles = parsed.filter(isValidProfile);
+    return parsed.length > 0 && profiles.length === 0 ? null : profiles;
   } catch {
-    return [];
+    return null;
   }
 }
+async function loadSharedProfiles(groupId) {
+  return await readSharedProfiles(groupId) ?? [];
+}
 async function saveSharedProfiles(groupId, profiles) {
   if (!native) return;
   try {
@@ -686,7 +725,8 @@ async function saveSharedProfiles(groupId, profiles) {
 // src/redux/resolveInitialProfiles.ts
 async function resolveInitialProfiles(groupId, localFallback) {
   if (!isSharedProfileStoreAvailable) return localFallback;
-  const shared = await loadSharedProfiles(groupId);
+  const shared = await readSharedProfiles(groupId);
+  if (shared === null) return localFallback;
   if (shared.length === 0 && localFallback.length > 0) {
     saveSharedProfiles(groupId, localFallback).catch(() => {
     });
@@ -728,8 +768,8 @@ function useSharedProfilesSync({ groupId, onRemoteChange }) {
     let cancelled = false;
     const sub = import_react_native5.AppState.addEventListener("change", (next) => {
       if (next !== "active" || pendingWriteRef.current) return;
-      loadSharedProfiles(groupId).then((shared) => {
-        if (!cancelled) onRemoteChangeRef.current(shared);
+      readSharedProfiles(groupId).then((shared) => {
+        if (!cancelled && shared !== null) onRemoteChangeRef.current(shared);
       });
     });
     return () => {
@@ -750,6 +790,13 @@ function useSharedProfilesSync({ groupId, onRemoteChange }) {
   );
   return { syncToShared };
 }
+
+// src/seatColorClash.ts
+function avoidSeatColorClash(p1Color, p2Color, defaults) {
+  if (p2Color.toLowerCase() !== p1Color.toLowerCase()) return p2Color;
+  const [p1Default, p2Default] = defaults;
+  return p2Color.toLowerCase() === p1Default.toLowerCase() ? p2Default : p1Default;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   MAX_PROFILE_NAME_LENGTH,
@@ -759,6 +806,7 @@ function useSharedProfilesSync({ groupId, onRemoteChange }) {
   ProfilePicker,
   ProfilesManager,
   ProfilesScreen,
+  avoidSeatColorClash,
   createProfileExtensionSlice,
   createProfileRecord,
   createProfileSelectionSlice,
@@ -770,6 +818,7 @@ function useSharedProfilesSync({ groupId, onRemoteChange }) {
   loadSharedProfiles,
   profilesActions,
   profilesReducer,
+  readSharedProfiles,
   resolveInitialProfiles,
   saveSharedProfiles,
   useProfileColorPreview,