@zyphr-dev/auth-react-native 0.1.0

package/README.md

@@ -0,0 +1,65 @@
+# @zyphr-dev/auth-react-native
+
+React Native bindings for [Zyphr](https://zyphr.dev) auth. Same reactive session +
+proactive token refresh as the web binding, plus a **secure-storage adapter** and
+**refresh-on-foreground**.
+
+- `<ZyphrAuthProvider>` — provides the session; refreshes when the app returns to the foreground.
+- `useSession()` — reactive `{ status, accessToken, isAuthenticated }`.
+- `useAuth()` — `login`, `logout`, `refresh`.
+
+Built on [`@zyphr-dev/auth-core`](https://zyphr.dev/docs/sdks/auth) and the
+client-safe `ZyphrClient` (publishable key).
+
+## Install
+
+```bash
+npm i @zyphr-dev/auth-react-native @zyphr-dev/node-sdk
+# plus your secure store (recommended):
+npx expo install expo-secure-store
+```
+
+## Usage
+
+```tsx
+import * as SecureStore from 'expo-secure-store';
+import { ZyphrClient } from '@zyphr-dev/node-sdk';
+import {
+  ZyphrAuthProvider,
+  useSession,
+  useAuth,
+  secureStoreAdapter,
+} from '@zyphr-dev/auth-react-native';
+
+const client = new ZyphrClient({ applicationKey: 'za_pub_xxx' });
+
+export default function App() {
+  return (
+    <ZyphrAuthProvider client={client} storage={secureStoreAdapter(SecureStore)}>
+      <Screen />
+    </ZyphrAuthProvider>
+  );
+}
+```
+
+```tsx
+function Screen() {
+  const { status, isAuthenticated } = useSession();
+  const { login, logout } = useAuth();
+  // render based on status / isAuthenticated
+}
+```
+
+## Token storage
+
+Pass a secure store — `secureStoreAdapter(SecureStore)` (encrypted; recommended)
+or `asyncStorageAdapter(AsyncStorage)` (not encrypted; use only if you already
+standardize on it). Both are optional peer dependencies — install whichever you
+use. The default (no `storage`) is in-memory and does not survive an app restart,
+so it's for prototyping only.
+
+## Refresh on foreground
+
+A backgrounded app's scheduled refresh timer may not fire reliably, so the
+provider also refreshes when the app returns to `active` (via React Native's
+`AppState`). Disable with `refreshOnForeground={false}`.

package/dist/index.cjs

@@ -0,0 +1,152 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ZyphrAuthProvider: () => ZyphrAuthProvider,
+  asyncStorageAdapter: () => asyncStorageAdapter,
+  createZyphrTransport: () => createZyphrTransport,
+  secureStoreAdapter: () => secureStoreAdapter,
+  useAuth: () => useAuth,
+  useSession: () => useSession
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/provider.tsx
+var import_react = require("react");
+var import_react_native = require("react-native");
+var import_auth_core2 = require("@zyphr-dev/auth-core");
+
+// src/transport.ts
+var import_auth_core = require("@zyphr-dev/auth-core");
+function createZyphrTransport(client, now = Date.now) {
+  const extract = (tokens) => (0, import_auth_core.toSessionTokens)(
+    { accessToken: tokens?.accessToken, refreshToken: tokens?.refreshToken, expiresIn: tokens?.expiresIn },
+    now()
+  );
+  return {
+    async login({ email, password }) {
+      const res = await client.auth.login.loginEndUser({ email, password });
+      return extract(res.data?.tokens);
+    },
+    async refresh(refreshToken) {
+      const res = await client.auth.sessions.refreshEndUserToken({ refreshToken });
+      return extract(res.data?.tokens);
+    },
+    async logout(refreshToken) {
+      await client.auth.sessions.revokeEndUserSession({ refreshToken });
+    }
+  };
+}
+
+// src/provider.tsx
+var import_jsx_runtime = require("react/jsx-runtime");
+var ZyphrAuthContext = (0, import_react.createContext)(null);
+function ZyphrAuthProvider({
+  client,
+  storage,
+  refreshSkewMs,
+  refreshOnForeground = true,
+  children
+}) {
+  const [manager] = (0, import_react.useState)(
+    () => new import_auth_core2.SessionManager({
+      transport: createZyphrTransport(client),
+      storage: storage ?? new import_auth_core2.MemoryTokenStorage(),
+      refreshSkewMs
+    })
+  );
+  const initialized = (0, import_react.useRef)(false);
+  (0, import_react.useEffect)(() => {
+    if (!initialized.current) {
+      initialized.current = true;
+      void manager.initialize();
+    }
+    return () => {
+      manager.destroy();
+    };
+  }, [manager]);
+  (0, import_react.useEffect)(() => {
+    if (!refreshOnForeground || !import_react_native.AppState?.addEventListener) return;
+    const onChange = (next) => {
+      if (next === "active" && manager.getState().isAuthenticated) {
+        void manager.refresh();
+      }
+    };
+    const sub = import_react_native.AppState.addEventListener("change", onChange);
+    return () => {
+      sub?.remove?.();
+    };
+  }, [manager, refreshOnForeground]);
+  const value = (0, import_react.useMemo)(() => ({ manager }), [manager]);
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ZyphrAuthContext.Provider, { value, children });
+}
+function useManager() {
+  const ctx = (0, import_react.useContext)(ZyphrAuthContext);
+  if (!ctx) {
+    throw new Error("useSession/useAuth must be used within a <ZyphrAuthProvider>.");
+  }
+  return ctx.manager;
+}
+function useSession() {
+  const manager = useManager();
+  return (0, import_react.useSyncExternalStore)(
+    (onChange) => manager.subscribe(() => onChange()),
+    () => manager.getState(),
+    () => manager.getState()
+  );
+}
+function useAuth() {
+  const manager = useManager();
+  return (0, import_react.useMemo)(
+    () => ({
+      login: (params) => manager.login(params),
+      logout: () => manager.logout(),
+      refresh: () => manager.refresh()
+    }),
+    [manager]
+  );
+}
+
+// src/storage.ts
+function secureStoreAdapter(secureStore) {
+  return {
+    getItem: (key) => secureStore.getItemAsync(key),
+    setItem: (key, value) => secureStore.setItemAsync(key, value),
+    removeItem: (key) => secureStore.deleteItemAsync(key)
+  };
+}
+function asyncStorageAdapter(asyncStorage) {
+  return {
+    getItem: (key) => asyncStorage.getItem(key),
+    setItem: (key, value) => asyncStorage.setItem(key, value),
+    removeItem: (key) => asyncStorage.removeItem(key)
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ZyphrAuthProvider,
+  asyncStorageAdapter,
+  createZyphrTransport,
+  secureStoreAdapter,
+  useAuth,
+  useSession
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/provider.tsx","../src/transport.ts","../src/storage.ts"],"sourcesContent":["/**\n * @zyphr-dev/auth-react-native\n *\n * React Native bindings for Zyphr auth. Wrap your app in <ZyphrAuthProvider> and\n * read the session with useSession() / act with useAuth(). Same session engine as\n * the web binding (@zyphr-dev/auth-core), plus a secure-storage adapter and\n * refresh-on-foreground via React Native's AppState.\n */\n\nexport { ZyphrAuthProvider, useSession, useAuth } from './provider.js';\nexport type { ZyphrAuthProviderProps, UseAuthResult } from './provider.js';\n\nexport { createZyphrTransport } from './transport.js';\nexport { secureStoreAdapter, asyncStorageAdapter } from './storage.js';\n\nexport type { SessionState, SessionStatus, LoginParams, TokenStorage } from '@zyphr-dev/auth-core';\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  useSyncExternalStore,\n  type ReactElement,\n  type ReactNode,\n} from 'react';\nimport { AppState, type AppStateStatus } from 'react-native';\nimport type { ZyphrClient } from '@zyphr-dev/node-sdk';\nimport {\n  SessionManager,\n  MemoryTokenStorage,\n  type LoginParams,\n  type SessionState,\n  type TokenStorage,\n} from '@zyphr-dev/auth-core';\nimport { createZyphrTransport } from './transport.js';\n\nexport interface ZyphrAuthProviderProps {\n  /** A client-safe ZyphrClient (constructed with your publishable application key). */\n  client: ZyphrClient;\n  /**\n   * Where tokens persist. Strongly recommended in production — pass a secure\n   * store via `secureStoreAdapter(SecureStore)` (expo-secure-store) or\n   * `asyncStorageAdapter(AsyncStorage)`. Defaults to in-memory (tokens are lost\n   * on app restart), which is fine only for prototyping.\n   */\n  storage?: TokenStorage;\n  /** Refresh this many ms before the access token expires. Default 60_000. */\n  refreshSkewMs?: number;\n  /**\n   * Refresh the session when the app returns to the foreground (default true).\n   * A backgrounded app's scheduled refresh timer may not fire reliably, so we\n   * also refresh on foreground to keep the token fresh.\n   */\n  refreshOnForeground?: boolean;\n  children: ReactNode;\n}\n\ninterface ZyphrAuthContextValue {\n  manager: SessionManager;\n}\n\nconst ZyphrAuthContext = createContext<ZyphrAuthContextValue | null>(null);\n\n/**\n * Provides a reactive Zyphr auth session to a React Native app. Same session\n * engine as the web binding (@zyphr-dev/auth-core), plus refresh-on-foreground\n * via React Native's AppState. Read state with {@link useSession}, act with\n * {@link useAuth}.\n */\nexport function ZyphrAuthProvider({\n  client,\n  storage,\n  refreshSkewMs,\n  refreshOnForeground = true,\n  children,\n}: ZyphrAuthProviderProps): ReactElement {\n  const [manager] = useState(\n    () =>\n      new SessionManager({\n        transport: createZyphrTransport(client),\n        storage: storage ?? new MemoryTokenStorage(),\n        refreshSkewMs,\n      }),\n  );\n\n  const initialized = useRef(false);\n  useEffect(() => {\n    if (!initialized.current) {\n      initialized.current = true;\n      void manager.initialize();\n    }\n    return () => {\n      manager.destroy();\n    };\n  }, [manager]);\n\n  // Refresh when the app returns to the foreground.\n  useEffect(() => {\n    if (!refreshOnForeground || !AppState?.addEventListener) return;\n    const onChange = (next: AppStateStatus) => {\n      if (next === 'active' && manager.getState().isAuthenticated) {\n        void manager.refresh();\n      }\n    };\n    const sub = AppState.addEventListener('change', onChange);\n    return () => {\n      // RN >= 0.65 returns a subscription with .remove(); older returns void.\n      (sub as { remove?: () => void } | undefined)?.remove?.();\n    };\n  }, [manager, refreshOnForeground]);\n\n  const value = useMemo(() => ({ manager }), [manager]);\n  return <ZyphrAuthContext.Provider value={value}>{children}</ZyphrAuthContext.Provider>;\n}\n\nfunction useManager(): SessionManager {\n  const ctx = useContext(ZyphrAuthContext);\n  if (!ctx) {\n    throw new Error('useSession/useAuth must be used within a <ZyphrAuthProvider>.');\n  }\n  return ctx.manager;\n}\n\n/** Reactive session state — re-renders on login, logout, refresh. */\nexport function useSession(): SessionState {\n  const manager = useManager();\n  return useSyncExternalStore(\n    (onChange) => manager.subscribe(() => onChange()),\n    () => manager.getState(),\n    () => manager.getState(),\n  );\n}\n\nexport interface UseAuthResult {\n  login: (params: LoginParams) => Promise<void>;\n  logout: () => Promise<void>;\n  refresh: () => Promise<void>;\n}\n\n/** Auth actions bound to the provider's session manager. */\nexport function useAuth(): UseAuthResult {\n  const manager = useManager();\n  return useMemo(\n    () => ({\n      login: (params) => manager.login(params),\n      logout: () => manager.logout(),\n      refresh: () => manager.refresh(),\n    }),\n    [manager],\n  );\n}\n","import type { ZyphrClient } from '@zyphr-dev/node-sdk';\nimport { type AuthTransport, type LoginParams, type SessionTokens, toSessionTokens } from '@zyphr-dev/auth-core';\n\n/**\n * An {@link AuthTransport} over the client-safe `ZyphrClient` (publishable\n * application key — no secret in the app bundle). Same transport the web binding\n * uses; re-implemented here so the React Native package doesn't depend on\n * `@zyphr-dev/auth-react` (which pulls web-React types).\n */\nexport function createZyphrTransport(client: ZyphrClient, now: () => number = Date.now): AuthTransport {\n  const extract = (tokens?: { accessToken?: string; refreshToken?: string; expiresIn?: number }): SessionTokens =>\n    toSessionTokens(\n      { accessToken: tokens?.accessToken, refreshToken: tokens?.refreshToken, expiresIn: tokens?.expiresIn },\n      now(),\n    );\n\n  return {\n    async login({ email, password }: LoginParams): Promise<SessionTokens> {\n      const res = await client.auth.login.loginEndUser({ email, password });\n      return extract(res.data?.tokens);\n    },\n    async refresh(refreshToken: string): Promise<SessionTokens> {\n      const res = await client.auth.sessions.refreshEndUserToken({ refreshToken });\n      return extract(res.data?.tokens);\n    },\n    async logout(refreshToken: string): Promise<void> {\n      await client.auth.sessions.revokeEndUserSession({ refreshToken });\n    },\n  };\n}\n","import type { TokenStorage } from '@zyphr-dev/auth-core';\n\n/**\n * The minimal async key/value shape common to React Native secure stores —\n * `expo-secure-store` (getItemAsync/setItemAsync/deleteItemAsync) and\n * `@react-native-async-storage/async-storage` (getItem/setItem/removeItem) both\n * fit one of these once wrapped. We keep the dependency OPTIONAL: the app passes\n * whichever it uses, so we don't force a native module on every consumer.\n */\n\n/** Adapt `expo-secure-store` (the recommended secure default). */\nexport function secureStoreAdapter(secureStore: {\n  getItemAsync(key: string): Promise<string | null>;\n  setItemAsync(key: string, value: string): Promise<void>;\n  deleteItemAsync(key: string): Promise<void>;\n}): TokenStorage {\n  return {\n    getItem: (key) => secureStore.getItemAsync(key),\n    setItem: (key, value) => secureStore.setItemAsync(key, value),\n    removeItem: (key) => secureStore.deleteItemAsync(key),\n  };\n}\n\n/**\n * Adapt `@react-native-async-storage/async-storage`. NOTE: AsyncStorage is NOT\n * encrypted — prefer {@link secureStoreAdapter} for tokens. Provided for apps\n * that already standardize on AsyncStorage and accept the tradeoff.\n */\nexport function asyncStorageAdapter(asyncStorage: {\n  getItem(key: string): Promise<string | null>;\n  setItem(key: string, value: string): Promise<void>;\n  removeItem(key: string): Promise<void>;\n}): TokenStorage {\n  return {\n    getItem: (key) => asyncStorage.getItem(key),\n    setItem: (key, value) => asyncStorage.setItem(key, value),\n    removeItem: (key) => asyncStorage.removeItem(key),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAUO;AACP,0BAA8C;AAE9C,IAAAA,oBAMO;;;AClBP,uBAA0F;AAQnF,SAAS,qBAAqB,QAAqB,MAAoB,KAAK,KAAoB;AACrG,QAAM,UAAU,CAAC,eACf;AAAA,IACE,EAAE,aAAa,QAAQ,aAAa,cAAc,QAAQ,cAAc,WAAW,QAAQ,UAAU;AAAA,IACrG,IAAI;AAAA,EACN;AAEF,SAAO;AAAA,IACL,MAAM,MAAM,EAAE,OAAO,SAAS,GAAwC;AACpE,YAAM,MAAM,MAAM,OAAO,KAAK,MAAM,aAAa,EAAE,OAAO,SAAS,CAAC;AACpE,aAAO,QAAQ,IAAI,MAAM,MAAM;AAAA,IACjC;AAAA,IACA,MAAM,QAAQ,cAA8C;AAC1D,YAAM,MAAM,MAAM,OAAO,KAAK,SAAS,oBAAoB,EAAE,aAAa,CAAC;AAC3E,aAAO,QAAQ,IAAI,MAAM,MAAM;AAAA,IACjC;AAAA,IACA,MAAM,OAAO,cAAqC;AAChD,YAAM,OAAO,KAAK,SAAS,qBAAqB,EAAE,aAAa,CAAC;AAAA,IAClE;AAAA,EACF;AACF;;;ADqES;AAnDT,IAAM,uBAAmB,4BAA4C,IAAI;AAQlE,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB;AACF,GAAyC;AACvC,QAAM,CAAC,OAAO,QAAI;AAAA,IAChB,MACE,IAAI,iCAAe;AAAA,MACjB,WAAW,qBAAqB,MAAM;AAAA,MACtC,SAAS,WAAW,IAAI,qCAAmB;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,EACL;AAEA,QAAM,kBAAc,qBAAO,KAAK;AAChC,8BAAU,MAAM;AACd,QAAI,CAAC,YAAY,SAAS;AACxB,kBAAY,UAAU;AACtB,WAAK,QAAQ,WAAW;AAAA,IAC1B;AACA,WAAO,MAAM;AACX,cAAQ,QAAQ;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,OAAO,CAAC;AAGZ,8BAAU,MAAM;AACd,QAAI,CAAC,uBAAuB,CAAC,8BAAU,iBAAkB;AACzD,UAAM,WAAW,CAAC,SAAyB;AACzC,UAAI,SAAS,YAAY,QAAQ,SAAS,EAAE,iBAAiB;AAC3D,aAAK,QAAQ,QAAQ;AAAA,MACvB;AAAA,IACF;AACA,UAAM,MAAM,6BAAS,iBAAiB,UAAU,QAAQ;AACxD,WAAO,MAAM;AAEX,MAAC,KAA6C,SAAS;AAAA,IACzD;AAAA,EACF,GAAG,CAAC,SAAS,mBAAmB,CAAC;AAEjC,QAAM,YAAQ,sBAAQ,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC;AACpD,SAAO,4CAAC,iBAAiB,UAAjB,EAA0B,OAAe,UAAS;AAC5D;AAEA,SAAS,aAA6B;AACpC,QAAM,UAAM,yBAAW,gBAAgB;AACvC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,SAAO,IAAI;AACb;AAGO,SAAS,aAA2B;AACzC,QAAM,UAAU,WAAW;AAC3B,aAAO;AAAA,IACL,CAAC,aAAa,QAAQ,UAAU,MAAM,SAAS,CAAC;AAAA,IAChD,MAAM,QAAQ,SAAS;AAAA,IACvB,MAAM,QAAQ,SAAS;AAAA,EACzB;AACF;AASO,SAAS,UAAyB;AACvC,QAAM,UAAU,WAAW;AAC3B,aAAO;AAAA,IACL,OAAO;AAAA,MACL,OAAO,CAAC,WAAW,QAAQ,MAAM,MAAM;AAAA,MACvC,QAAQ,MAAM,QAAQ,OAAO;AAAA,MAC7B,SAAS,MAAM,QAAQ,QAAQ;AAAA,IACjC;AAAA,IACA,CAAC,OAAO;AAAA,EACV;AACF;;;AE7HO,SAAS,mBAAmB,aAIlB;AACf,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,YAAY,aAAa,GAAG;AAAA,IAC9C,SAAS,CAAC,KAAK,UAAU,YAAY,aAAa,KAAK,KAAK;AAAA,IAC5D,YAAY,CAAC,QAAQ,YAAY,gBAAgB,GAAG;AAAA,EACtD;AACF;AAOO,SAAS,oBAAoB,cAInB;AACf,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,aAAa,QAAQ,GAAG;AAAA,IAC1C,SAAS,CAAC,KAAK,UAAU,aAAa,QAAQ,KAAK,KAAK;AAAA,IACxD,YAAY,CAAC,QAAQ,aAAa,WAAW,GAAG;AAAA,EAClD;AACF;","names":["import_auth_core"]}

package/dist/index.d.cts

@@ -0,0 +1,75 @@
+import { ReactNode, ReactElement } from 'react';
+import { ZyphrClient } from '@zyphr-dev/node-sdk';
+import { LoginParams, TokenStorage, SessionState, AuthTransport } from '@zyphr-dev/auth-core';
+export { LoginParams, SessionState, SessionStatus, TokenStorage } from '@zyphr-dev/auth-core';
+
+interface ZyphrAuthProviderProps {
+    /** A client-safe ZyphrClient (constructed with your publishable application key). */
+    client: ZyphrClient;
+    /**
+     * Where tokens persist. Strongly recommended in production — pass a secure
+     * store via `secureStoreAdapter(SecureStore)` (expo-secure-store) or
+     * `asyncStorageAdapter(AsyncStorage)`. Defaults to in-memory (tokens are lost
+     * on app restart), which is fine only for prototyping.
+     */
+    storage?: TokenStorage;
+    /** Refresh this many ms before the access token expires. Default 60_000. */
+    refreshSkewMs?: number;
+    /**
+     * Refresh the session when the app returns to the foreground (default true).
+     * A backgrounded app's scheduled refresh timer may not fire reliably, so we
+     * also refresh on foreground to keep the token fresh.
+     */
+    refreshOnForeground?: boolean;
+    children: ReactNode;
+}
+/**
+ * Provides a reactive Zyphr auth session to a React Native app. Same session
+ * engine as the web binding (@zyphr-dev/auth-core), plus refresh-on-foreground
+ * via React Native's AppState. Read state with {@link useSession}, act with
+ * {@link useAuth}.
+ */
+declare function ZyphrAuthProvider({ client, storage, refreshSkewMs, refreshOnForeground, children, }: ZyphrAuthProviderProps): ReactElement;
+/** Reactive session state — re-renders on login, logout, refresh. */
+declare function useSession(): SessionState;
+interface UseAuthResult {
+    login: (params: LoginParams) => Promise<void>;
+    logout: () => Promise<void>;
+    refresh: () => Promise<void>;
+}
+/** Auth actions bound to the provider's session manager. */
+declare function useAuth(): UseAuthResult;
+
+/**
+ * An {@link AuthTransport} over the client-safe `ZyphrClient` (publishable
+ * application key — no secret in the app bundle). Same transport the web binding
+ * uses; re-implemented here so the React Native package doesn't depend on
+ * `@zyphr-dev/auth-react` (which pulls web-React types).
+ */
+declare function createZyphrTransport(client: ZyphrClient, now?: () => number): AuthTransport;
+
+/**
+ * The minimal async key/value shape common to React Native secure stores —
+ * `expo-secure-store` (getItemAsync/setItemAsync/deleteItemAsync) and
+ * `@react-native-async-storage/async-storage` (getItem/setItem/removeItem) both
+ * fit one of these once wrapped. We keep the dependency OPTIONAL: the app passes
+ * whichever it uses, so we don't force a native module on every consumer.
+ */
+/** Adapt `expo-secure-store` (the recommended secure default). */
+declare function secureStoreAdapter(secureStore: {
+    getItemAsync(key: string): Promise<string | null>;
+    setItemAsync(key: string, value: string): Promise<void>;
+    deleteItemAsync(key: string): Promise<void>;
+}): TokenStorage;
+/**
+ * Adapt `@react-native-async-storage/async-storage`. NOTE: AsyncStorage is NOT
+ * encrypted — prefer {@link secureStoreAdapter} for tokens. Provided for apps
+ * that already standardize on AsyncStorage and accept the tradeoff.
+ */
+declare function asyncStorageAdapter(asyncStorage: {
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+    removeItem(key: string): Promise<void>;
+}): TokenStorage;
+
+export { type UseAuthResult, ZyphrAuthProvider, type ZyphrAuthProviderProps, asyncStorageAdapter, createZyphrTransport, secureStoreAdapter, useAuth, useSession };

package/dist/index.d.ts

@@ -0,0 +1,75 @@
+import { ReactNode, ReactElement } from 'react';
+import { ZyphrClient } from '@zyphr-dev/node-sdk';
+import { LoginParams, TokenStorage, SessionState, AuthTransport } from '@zyphr-dev/auth-core';
+export { LoginParams, SessionState, SessionStatus, TokenStorage } from '@zyphr-dev/auth-core';
+
+interface ZyphrAuthProviderProps {
+    /** A client-safe ZyphrClient (constructed with your publishable application key). */
+    client: ZyphrClient;
+    /**
+     * Where tokens persist. Strongly recommended in production — pass a secure
+     * store via `secureStoreAdapter(SecureStore)` (expo-secure-store) or
+     * `asyncStorageAdapter(AsyncStorage)`. Defaults to in-memory (tokens are lost
+     * on app restart), which is fine only for prototyping.
+     */
+    storage?: TokenStorage;
+    /** Refresh this many ms before the access token expires. Default 60_000. */
+    refreshSkewMs?: number;
+    /**
+     * Refresh the session when the app returns to the foreground (default true).
+     * A backgrounded app's scheduled refresh timer may not fire reliably, so we
+     * also refresh on foreground to keep the token fresh.
+     */
+    refreshOnForeground?: boolean;
+    children: ReactNode;
+}
+/**
+ * Provides a reactive Zyphr auth session to a React Native app. Same session
+ * engine as the web binding (@zyphr-dev/auth-core), plus refresh-on-foreground
+ * via React Native's AppState. Read state with {@link useSession}, act with
+ * {@link useAuth}.
+ */
+declare function ZyphrAuthProvider({ client, storage, refreshSkewMs, refreshOnForeground, children, }: ZyphrAuthProviderProps): ReactElement;
+/** Reactive session state — re-renders on login, logout, refresh. */
+declare function useSession(): SessionState;
+interface UseAuthResult {
+    login: (params: LoginParams) => Promise<void>;
+    logout: () => Promise<void>;
+    refresh: () => Promise<void>;
+}
+/** Auth actions bound to the provider's session manager. */
+declare function useAuth(): UseAuthResult;
+
+/**
+ * An {@link AuthTransport} over the client-safe `ZyphrClient` (publishable
+ * application key — no secret in the app bundle). Same transport the web binding
+ * uses; re-implemented here so the React Native package doesn't depend on
+ * `@zyphr-dev/auth-react` (which pulls web-React types).
+ */
+declare function createZyphrTransport(client: ZyphrClient, now?: () => number): AuthTransport;
+
+/**
+ * The minimal async key/value shape common to React Native secure stores —
+ * `expo-secure-store` (getItemAsync/setItemAsync/deleteItemAsync) and
+ * `@react-native-async-storage/async-storage` (getItem/setItem/removeItem) both
+ * fit one of these once wrapped. We keep the dependency OPTIONAL: the app passes
+ * whichever it uses, so we don't force a native module on every consumer.
+ */
+/** Adapt `expo-secure-store` (the recommended secure default). */
+declare function secureStoreAdapter(secureStore: {
+    getItemAsync(key: string): Promise<string | null>;
+    setItemAsync(key: string, value: string): Promise<void>;
+    deleteItemAsync(key: string): Promise<void>;
+}): TokenStorage;
+/**
+ * Adapt `@react-native-async-storage/async-storage`. NOTE: AsyncStorage is NOT
+ * encrypted — prefer {@link secureStoreAdapter} for tokens. Provided for apps
+ * that already standardize on AsyncStorage and accept the tradeoff.
+ */
+declare function asyncStorageAdapter(asyncStorage: {
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+    removeItem(key: string): Promise<void>;
+}): TokenStorage;
+
+export { type UseAuthResult, ZyphrAuthProvider, type ZyphrAuthProviderProps, asyncStorageAdapter, createZyphrTransport, secureStoreAdapter, useAuth, useSession };

package/dist/index.js

@@ -0,0 +1,131 @@
+// src/provider.tsx
+import {
+  createContext,
+  useContext,
+  useEffect,
+  useMemo,
+  useRef,
+  useState,
+  useSyncExternalStore
+} from "react";
+import { AppState } from "react-native";
+import {
+  SessionManager,
+  MemoryTokenStorage
+} from "@zyphr-dev/auth-core";
+
+// src/transport.ts
+import { toSessionTokens } from "@zyphr-dev/auth-core";
+function createZyphrTransport(client, now = Date.now) {
+  const extract = (tokens) => toSessionTokens(
+    { accessToken: tokens?.accessToken, refreshToken: tokens?.refreshToken, expiresIn: tokens?.expiresIn },
+    now()
+  );
+  return {
+    async login({ email, password }) {
+      const res = await client.auth.login.loginEndUser({ email, password });
+      return extract(res.data?.tokens);
+    },
+    async refresh(refreshToken) {
+      const res = await client.auth.sessions.refreshEndUserToken({ refreshToken });
+      return extract(res.data?.tokens);
+    },
+    async logout(refreshToken) {
+      await client.auth.sessions.revokeEndUserSession({ refreshToken });
+    }
+  };
+}
+
+// src/provider.tsx
+import { jsx } from "react/jsx-runtime";
+var ZyphrAuthContext = createContext(null);
+function ZyphrAuthProvider({
+  client,
+  storage,
+  refreshSkewMs,
+  refreshOnForeground = true,
+  children
+}) {
+  const [manager] = useState(
+    () => new SessionManager({
+      transport: createZyphrTransport(client),
+      storage: storage ?? new MemoryTokenStorage(),
+      refreshSkewMs
+    })
+  );
+  const initialized = useRef(false);
+  useEffect(() => {
+    if (!initialized.current) {
+      initialized.current = true;
+      void manager.initialize();
+    }
+    return () => {
+      manager.destroy();
+    };
+  }, [manager]);
+  useEffect(() => {
+    if (!refreshOnForeground || !AppState?.addEventListener) return;
+    const onChange = (next) => {
+      if (next === "active" && manager.getState().isAuthenticated) {
+        void manager.refresh();
+      }
+    };
+    const sub = AppState.addEventListener("change", onChange);
+    return () => {
+      sub?.remove?.();
+    };
+  }, [manager, refreshOnForeground]);
+  const value = useMemo(() => ({ manager }), [manager]);
+  return /* @__PURE__ */ jsx(ZyphrAuthContext.Provider, { value, children });
+}
+function useManager() {
+  const ctx = useContext(ZyphrAuthContext);
+  if (!ctx) {
+    throw new Error("useSession/useAuth must be used within a <ZyphrAuthProvider>.");
+  }
+  return ctx.manager;
+}
+function useSession() {
+  const manager = useManager();
+  return useSyncExternalStore(
+    (onChange) => manager.subscribe(() => onChange()),
+    () => manager.getState(),
+    () => manager.getState()
+  );
+}
+function useAuth() {
+  const manager = useManager();
+  return useMemo(
+    () => ({
+      login: (params) => manager.login(params),
+      logout: () => manager.logout(),
+      refresh: () => manager.refresh()
+    }),
+    [manager]
+  );
+}
+
+// src/storage.ts
+function secureStoreAdapter(secureStore) {
+  return {
+    getItem: (key) => secureStore.getItemAsync(key),
+    setItem: (key, value) => secureStore.setItemAsync(key, value),
+    removeItem: (key) => secureStore.deleteItemAsync(key)
+  };
+}
+function asyncStorageAdapter(asyncStorage) {
+  return {
+    getItem: (key) => asyncStorage.getItem(key),
+    setItem: (key, value) => asyncStorage.setItem(key, value),
+    removeItem: (key) => asyncStorage.removeItem(key)
+  };
+}
+export {
+  ZyphrAuthProvider,
+  asyncStorageAdapter,
+  createZyphrTransport,
+  secureStoreAdapter,
+  useAuth,
+  useSession
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.tsx","../src/transport.ts","../src/storage.ts"],"sourcesContent":["import {\n  createContext,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  useSyncExternalStore,\n  type ReactElement,\n  type ReactNode,\n} from 'react';\nimport { AppState, type AppStateStatus } from 'react-native';\nimport type { ZyphrClient } from '@zyphr-dev/node-sdk';\nimport {\n  SessionManager,\n  MemoryTokenStorage,\n  type LoginParams,\n  type SessionState,\n  type TokenStorage,\n} from '@zyphr-dev/auth-core';\nimport { createZyphrTransport } from './transport.js';\n\nexport interface ZyphrAuthProviderProps {\n  /** A client-safe ZyphrClient (constructed with your publishable application key). */\n  client: ZyphrClient;\n  /**\n   * Where tokens persist. Strongly recommended in production — pass a secure\n   * store via `secureStoreAdapter(SecureStore)` (expo-secure-store) or\n   * `asyncStorageAdapter(AsyncStorage)`. Defaults to in-memory (tokens are lost\n   * on app restart), which is fine only for prototyping.\n   */\n  storage?: TokenStorage;\n  /** Refresh this many ms before the access token expires. Default 60_000. */\n  refreshSkewMs?: number;\n  /**\n   * Refresh the session when the app returns to the foreground (default true).\n   * A backgrounded app's scheduled refresh timer may not fire reliably, so we\n   * also refresh on foreground to keep the token fresh.\n   */\n  refreshOnForeground?: boolean;\n  children: ReactNode;\n}\n\ninterface ZyphrAuthContextValue {\n  manager: SessionManager;\n}\n\nconst ZyphrAuthContext = createContext<ZyphrAuthContextValue | null>(null);\n\n/**\n * Provides a reactive Zyphr auth session to a React Native app. Same session\n * engine as the web binding (@zyphr-dev/auth-core), plus refresh-on-foreground\n * via React Native's AppState. Read state with {@link useSession}, act with\n * {@link useAuth}.\n */\nexport function ZyphrAuthProvider({\n  client,\n  storage,\n  refreshSkewMs,\n  refreshOnForeground = true,\n  children,\n}: ZyphrAuthProviderProps): ReactElement {\n  const [manager] = useState(\n    () =>\n      new SessionManager({\n        transport: createZyphrTransport(client),\n        storage: storage ?? new MemoryTokenStorage(),\n        refreshSkewMs,\n      }),\n  );\n\n  const initialized = useRef(false);\n  useEffect(() => {\n    if (!initialized.current) {\n      initialized.current = true;\n      void manager.initialize();\n    }\n    return () => {\n      manager.destroy();\n    };\n  }, [manager]);\n\n  // Refresh when the app returns to the foreground.\n  useEffect(() => {\n    if (!refreshOnForeground || !AppState?.addEventListener) return;\n    const onChange = (next: AppStateStatus) => {\n      if (next === 'active' && manager.getState().isAuthenticated) {\n        void manager.refresh();\n      }\n    };\n    const sub = AppState.addEventListener('change', onChange);\n    return () => {\n      // RN >= 0.65 returns a subscription with .remove(); older returns void.\n      (sub as { remove?: () => void } | undefined)?.remove?.();\n    };\n  }, [manager, refreshOnForeground]);\n\n  const value = useMemo(() => ({ manager }), [manager]);\n  return <ZyphrAuthContext.Provider value={value}>{children}</ZyphrAuthContext.Provider>;\n}\n\nfunction useManager(): SessionManager {\n  const ctx = useContext(ZyphrAuthContext);\n  if (!ctx) {\n    throw new Error('useSession/useAuth must be used within a <ZyphrAuthProvider>.');\n  }\n  return ctx.manager;\n}\n\n/** Reactive session state — re-renders on login, logout, refresh. */\nexport function useSession(): SessionState {\n  const manager = useManager();\n  return useSyncExternalStore(\n    (onChange) => manager.subscribe(() => onChange()),\n    () => manager.getState(),\n    () => manager.getState(),\n  );\n}\n\nexport interface UseAuthResult {\n  login: (params: LoginParams) => Promise<void>;\n  logout: () => Promise<void>;\n  refresh: () => Promise<void>;\n}\n\n/** Auth actions bound to the provider's session manager. */\nexport function useAuth(): UseAuthResult {\n  const manager = useManager();\n  return useMemo(\n    () => ({\n      login: (params) => manager.login(params),\n      logout: () => manager.logout(),\n      refresh: () => manager.refresh(),\n    }),\n    [manager],\n  );\n}\n","import type { ZyphrClient } from '@zyphr-dev/node-sdk';\nimport { type AuthTransport, type LoginParams, type SessionTokens, toSessionTokens } from '@zyphr-dev/auth-core';\n\n/**\n * An {@link AuthTransport} over the client-safe `ZyphrClient` (publishable\n * application key — no secret in the app bundle). Same transport the web binding\n * uses; re-implemented here so the React Native package doesn't depend on\n * `@zyphr-dev/auth-react` (which pulls web-React types).\n */\nexport function createZyphrTransport(client: ZyphrClient, now: () => number = Date.now): AuthTransport {\n  const extract = (tokens?: { accessToken?: string; refreshToken?: string; expiresIn?: number }): SessionTokens =>\n    toSessionTokens(\n      { accessToken: tokens?.accessToken, refreshToken: tokens?.refreshToken, expiresIn: tokens?.expiresIn },\n      now(),\n    );\n\n  return {\n    async login({ email, password }: LoginParams): Promise<SessionTokens> {\n      const res = await client.auth.login.loginEndUser({ email, password });\n      return extract(res.data?.tokens);\n    },\n    async refresh(refreshToken: string): Promise<SessionTokens> {\n      const res = await client.auth.sessions.refreshEndUserToken({ refreshToken });\n      return extract(res.data?.tokens);\n    },\n    async logout(refreshToken: string): Promise<void> {\n      await client.auth.sessions.revokeEndUserSession({ refreshToken });\n    },\n  };\n}\n","import type { TokenStorage } from '@zyphr-dev/auth-core';\n\n/**\n * The minimal async key/value shape common to React Native secure stores —\n * `expo-secure-store` (getItemAsync/setItemAsync/deleteItemAsync) and\n * `@react-native-async-storage/async-storage` (getItem/setItem/removeItem) both\n * fit one of these once wrapped. We keep the dependency OPTIONAL: the app passes\n * whichever it uses, so we don't force a native module on every consumer.\n */\n\n/** Adapt `expo-secure-store` (the recommended secure default). */\nexport function secureStoreAdapter(secureStore: {\n  getItemAsync(key: string): Promise<string | null>;\n  setItemAsync(key: string, value: string): Promise<void>;\n  deleteItemAsync(key: string): Promise<void>;\n}): TokenStorage {\n  return {\n    getItem: (key) => secureStore.getItemAsync(key),\n    setItem: (key, value) => secureStore.setItemAsync(key, value),\n    removeItem: (key) => secureStore.deleteItemAsync(key),\n  };\n}\n\n/**\n * Adapt `@react-native-async-storage/async-storage`. NOTE: AsyncStorage is NOT\n * encrypted — prefer {@link secureStoreAdapter} for tokens. Provided for apps\n * that already standardize on AsyncStorage and accept the tradeoff.\n */\nexport function asyncStorageAdapter(asyncStorage: {\n  getItem(key: string): Promise<string | null>;\n  setItem(key: string, value: string): Promise<void>;\n  removeItem(key: string): Promise<void>;\n}): TokenStorage {\n  return {\n    getItem: (key) => asyncStorage.getItem(key),\n    setItem: (key, value) => asyncStorage.setItem(key, value),\n    removeItem: (key) => asyncStorage.removeItem(key),\n  };\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,gBAAqC;AAE9C;AAAA,EACE;AAAA,EACA;AAAA,OAIK;;;AClBP,SAAmE,uBAAuB;AAQnF,SAAS,qBAAqB,QAAqB,MAAoB,KAAK,KAAoB;AACrG,QAAM,UAAU,CAAC,WACf;AAAA,IACE,EAAE,aAAa,QAAQ,aAAa,cAAc,QAAQ,cAAc,WAAW,QAAQ,UAAU;AAAA,IACrG,IAAI;AAAA,EACN;AAEF,SAAO;AAAA,IACL,MAAM,MAAM,EAAE,OAAO,SAAS,GAAwC;AACpE,YAAM,MAAM,MAAM,OAAO,KAAK,MAAM,aAAa,EAAE,OAAO,SAAS,CAAC;AACpE,aAAO,QAAQ,IAAI,MAAM,MAAM;AAAA,IACjC;AAAA,IACA,MAAM,QAAQ,cAA8C;AAC1D,YAAM,MAAM,MAAM,OAAO,KAAK,SAAS,oBAAoB,EAAE,aAAa,CAAC;AAC3E,aAAO,QAAQ,IAAI,MAAM,MAAM;AAAA,IACjC;AAAA,IACA,MAAM,OAAO,cAAqC;AAChD,YAAM,OAAO,KAAK,SAAS,qBAAqB,EAAE,aAAa,CAAC;AAAA,IAClE;AAAA,EACF;AACF;;;ADqES;AAnDT,IAAM,mBAAmB,cAA4C,IAAI;AAQlE,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB;AACF,GAAyC;AACvC,QAAM,CAAC,OAAO,IAAI;AAAA,IAChB,MACE,IAAI,eAAe;AAAA,MACjB,WAAW,qBAAqB,MAAM;AAAA,MACtC,SAAS,WAAW,IAAI,mBAAmB;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,EACL;AAEA,QAAM,cAAc,OAAO,KAAK;AAChC,YAAU,MAAM;AACd,QAAI,CAAC,YAAY,SAAS;AACxB,kBAAY,UAAU;AACtB,WAAK,QAAQ,WAAW;AAAA,IAC1B;AACA,WAAO,MAAM;AACX,cAAQ,QAAQ;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,OAAO,CAAC;AAGZ,YAAU,MAAM;AACd,QAAI,CAAC,uBAAuB,CAAC,UAAU,iBAAkB;AACzD,UAAM,WAAW,CAAC,SAAyB;AACzC,UAAI,SAAS,YAAY,QAAQ,SAAS,EAAE,iBAAiB;AAC3D,aAAK,QAAQ,QAAQ;AAAA,MACvB;AAAA,IACF;AACA,UAAM,MAAM,SAAS,iBAAiB,UAAU,QAAQ;AACxD,WAAO,MAAM;AAEX,MAAC,KAA6C,SAAS;AAAA,IACzD;AAAA,EACF,GAAG,CAAC,SAAS,mBAAmB,CAAC;AAEjC,QAAM,QAAQ,QAAQ,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC;AACpD,SAAO,oBAAC,iBAAiB,UAAjB,EAA0B,OAAe,UAAS;AAC5D;AAEA,SAAS,aAA6B;AACpC,QAAM,MAAM,WAAW,gBAAgB;AACvC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,SAAO,IAAI;AACb;AAGO,SAAS,aAA2B;AACzC,QAAM,UAAU,WAAW;AAC3B,SAAO;AAAA,IACL,CAAC,aAAa,QAAQ,UAAU,MAAM,SAAS,CAAC;AAAA,IAChD,MAAM,QAAQ,SAAS;AAAA,IACvB,MAAM,QAAQ,SAAS;AAAA,EACzB;AACF;AASO,SAAS,UAAyB;AACvC,QAAM,UAAU,WAAW;AAC3B,SAAO;AAAA,IACL,OAAO;AAAA,MACL,OAAO,CAAC,WAAW,QAAQ,MAAM,MAAM;AAAA,MACvC,QAAQ,MAAM,QAAQ,OAAO;AAAA,MAC7B,SAAS,MAAM,QAAQ,QAAQ;AAAA,IACjC;AAAA,IACA,CAAC,OAAO;AAAA,EACV;AACF;;;AE7HO,SAAS,mBAAmB,aAIlB;AACf,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,YAAY,aAAa,GAAG;AAAA,IAC9C,SAAS,CAAC,KAAK,UAAU,YAAY,aAAa,KAAK,KAAK;AAAA,IAC5D,YAAY,CAAC,QAAQ,YAAY,gBAAgB,GAAG;AAAA,EACtD;AACF;AAOO,SAAS,oBAAoB,cAInB;AACf,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,aAAa,QAAQ,GAAG;AAAA,IAC1C,SAAS,CAAC,KAAK,UAAU,aAAa,QAAQ,KAAK,KAAK;AAAA,IACxD,YAAY,CAAC,QAAQ,aAAa,WAAW,GAAG;AAAA,EAClD;AACF;","names":[]}

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "@zyphr-dev/auth-react-native",
+  "version": "0.1.0",
+  "description": "React Native bindings for Zyphr auth — <ZyphrAuthProvider>, useSession, useAuth, with a secure-storage adapter and refresh-on-foreground. Built on @zyphr-dev/auth-core.",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "src",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "lint": "tsc --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist"
+  },
+  "peerDependencies": {
+    "react": ">=17.0.0",
+    "react-native": ">=0.64.0"
+  },
+  "peerDependenciesMeta": {
+    "@react-native-async-storage/async-storage": {
+      "optional": true
+    },
+    "expo-secure-store": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@zyphr-dev/auth-core": "^0.1.0",
+    "@zyphr-dev/node-sdk": "^0.1.42"
+  },
+  "devDependencies": {
+    "@testing-library/react": "^16.0.0",
+    "@types/react": "^18.3.0",
+    "jsdom": "^25.0.0",
+    "react": "^18.3.0",
+    "react-dom": "^18.3.0",
+    "react-native": "^0.75.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.3.0",
+    "vitest": "^4.0.18"
+  },
+  "keywords": [
+    "zyphr",
+    "auth",
+    "react-native",
+    "session",
+    "useSession",
+    "expo",
+    "secure-store"
+  ],
+  "license": "MIT",
+  "homepage": "https://zyphr.dev/docs/sdks/auth",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ArcRaz/zyphr.git",
+    "directory": "packages/auth-react-native"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,16 @@
+/**
+ * @zyphr-dev/auth-react-native
+ *
+ * React Native bindings for Zyphr auth. Wrap your app in <ZyphrAuthProvider> and
+ * read the session with useSession() / act with useAuth(). Same session engine as
+ * the web binding (@zyphr-dev/auth-core), plus a secure-storage adapter and
+ * refresh-on-foreground via React Native's AppState.
+ */
+
+export { ZyphrAuthProvider, useSession, useAuth } from './provider.js';
+export type { ZyphrAuthProviderProps, UseAuthResult } from './provider.js';
+
+export { createZyphrTransport } from './transport.js';
+export { secureStoreAdapter, asyncStorageAdapter } from './storage.js';
+
+export type { SessionState, SessionStatus, LoginParams, TokenStorage } from '@zyphr-dev/auth-core';

package/src/provider.tsx

@@ -0,0 +1,137 @@
+import {
+  createContext,
+  useContext,
+  useEffect,
+  useMemo,
+  useRef,
+  useState,
+  useSyncExternalStore,
+  type ReactElement,
+  type ReactNode,
+} from 'react';
+import { AppState, type AppStateStatus } from 'react-native';
+import type { ZyphrClient } from '@zyphr-dev/node-sdk';
+import {
+  SessionManager,
+  MemoryTokenStorage,
+  type LoginParams,
+  type SessionState,
+  type TokenStorage,
+} from '@zyphr-dev/auth-core';
+import { createZyphrTransport } from './transport.js';
+
+export interface ZyphrAuthProviderProps {
+  /** A client-safe ZyphrClient (constructed with your publishable application key). */
+  client: ZyphrClient;
+  /**
+   * Where tokens persist. Strongly recommended in production — pass a secure
+   * store via `secureStoreAdapter(SecureStore)` (expo-secure-store) or
+   * `asyncStorageAdapter(AsyncStorage)`. Defaults to in-memory (tokens are lost
+   * on app restart), which is fine only for prototyping.
+   */
+  storage?: TokenStorage;
+  /** Refresh this many ms before the access token expires. Default 60_000. */
+  refreshSkewMs?: number;
+  /**
+   * Refresh the session when the app returns to the foreground (default true).
+   * A backgrounded app's scheduled refresh timer may not fire reliably, so we
+   * also refresh on foreground to keep the token fresh.
+   */
+  refreshOnForeground?: boolean;
+  children: ReactNode;
+}
+
+interface ZyphrAuthContextValue {
+  manager: SessionManager;
+}
+
+const ZyphrAuthContext = createContext<ZyphrAuthContextValue | null>(null);
+
+/**
+ * Provides a reactive Zyphr auth session to a React Native app. Same session
+ * engine as the web binding (@zyphr-dev/auth-core), plus refresh-on-foreground
+ * via React Native's AppState. Read state with {@link useSession}, act with
+ * {@link useAuth}.
+ */
+export function ZyphrAuthProvider({
+  client,
+  storage,
+  refreshSkewMs,
+  refreshOnForeground = true,
+  children,
+}: ZyphrAuthProviderProps): ReactElement {
+  const [manager] = useState(
+    () =>
+      new SessionManager({
+        transport: createZyphrTransport(client),
+        storage: storage ?? new MemoryTokenStorage(),
+        refreshSkewMs,
+      }),
+  );
+
+  const initialized = useRef(false);
+  useEffect(() => {
+    if (!initialized.current) {
+      initialized.current = true;
+      void manager.initialize();
+    }
+    return () => {
+      manager.destroy();
+    };
+  }, [manager]);
+
+  // Refresh when the app returns to the foreground.
+  useEffect(() => {
+    if (!refreshOnForeground || !AppState?.addEventListener) return;
+    const onChange = (next: AppStateStatus) => {
+      if (next === 'active' && manager.getState().isAuthenticated) {
+        void manager.refresh();
+      }
+    };
+    const sub = AppState.addEventListener('change', onChange);
+    return () => {
+      // RN >= 0.65 returns a subscription with .remove(); older returns void.
+      (sub as { remove?: () => void } | undefined)?.remove?.();
+    };
+  }, [manager, refreshOnForeground]);
+
+  const value = useMemo(() => ({ manager }), [manager]);
+  return <ZyphrAuthContext.Provider value={value}>{children}</ZyphrAuthContext.Provider>;
+}
+
+function useManager(): SessionManager {
+  const ctx = useContext(ZyphrAuthContext);
+  if (!ctx) {
+    throw new Error('useSession/useAuth must be used within a <ZyphrAuthProvider>.');
+  }
+  return ctx.manager;
+}
+
+/** Reactive session state — re-renders on login, logout, refresh. */
+export function useSession(): SessionState {
+  const manager = useManager();
+  return useSyncExternalStore(
+    (onChange) => manager.subscribe(() => onChange()),
+    () => manager.getState(),
+    () => manager.getState(),
+  );
+}
+
+export interface UseAuthResult {
+  login: (params: LoginParams) => Promise<void>;
+  logout: () => Promise<void>;
+  refresh: () => Promise<void>;
+}
+
+/** Auth actions bound to the provider's session manager. */
+export function useAuth(): UseAuthResult {
+  const manager = useManager();
+  return useMemo(
+    () => ({
+      login: (params) => manager.login(params),
+      logout: () => manager.logout(),
+      refresh: () => manager.refresh(),
+    }),
+    [manager],
+  );
+}

package/src/storage.ts

@@ -0,0 +1,39 @@
+import type { TokenStorage } from '@zyphr-dev/auth-core';
+
+/**
+ * The minimal async key/value shape common to React Native secure stores —
+ * `expo-secure-store` (getItemAsync/setItemAsync/deleteItemAsync) and
+ * `@react-native-async-storage/async-storage` (getItem/setItem/removeItem) both
+ * fit one of these once wrapped. We keep the dependency OPTIONAL: the app passes
+ * whichever it uses, so we don't force a native module on every consumer.
+ */
+
+/** Adapt `expo-secure-store` (the recommended secure default). */
+export function secureStoreAdapter(secureStore: {
+  getItemAsync(key: string): Promise<string | null>;
+  setItemAsync(key: string, value: string): Promise<void>;
+  deleteItemAsync(key: string): Promise<void>;
+}): TokenStorage {
+  return {
+    getItem: (key) => secureStore.getItemAsync(key),
+    setItem: (key, value) => secureStore.setItemAsync(key, value),
+    removeItem: (key) => secureStore.deleteItemAsync(key),
+  };
+}
+
+/**
+ * Adapt `@react-native-async-storage/async-storage`. NOTE: AsyncStorage is NOT
+ * encrypted — prefer {@link secureStoreAdapter} for tokens. Provided for apps
+ * that already standardize on AsyncStorage and accept the tradeoff.
+ */
+export function asyncStorageAdapter(asyncStorage: {
+  getItem(key: string): Promise<string | null>;
+  setItem(key: string, value: string): Promise<void>;
+  removeItem(key: string): Promise<void>;
+}): TokenStorage {
+  return {
+    getItem: (key) => asyncStorage.getItem(key),
+    setItem: (key, value) => asyncStorage.setItem(key, value),
+    removeItem: (key) => asyncStorage.removeItem(key),
+  };
+}

package/src/transport.ts

@@ -0,0 +1,30 @@
+import type { ZyphrClient } from '@zyphr-dev/node-sdk';
+import { type AuthTransport, type LoginParams, type SessionTokens, toSessionTokens } from '@zyphr-dev/auth-core';
+
+/**
+ * An {@link AuthTransport} over the client-safe `ZyphrClient` (publishable
+ * application key — no secret in the app bundle). Same transport the web binding
+ * uses; re-implemented here so the React Native package doesn't depend on
+ * `@zyphr-dev/auth-react` (which pulls web-React types).
+ */
+export function createZyphrTransport(client: ZyphrClient, now: () => number = Date.now): AuthTransport {
+  const extract = (tokens?: { accessToken?: string; refreshToken?: string; expiresIn?: number }): SessionTokens =>
+    toSessionTokens(
+      { accessToken: tokens?.accessToken, refreshToken: tokens?.refreshToken, expiresIn: tokens?.expiresIn },
+      now(),
+    );
+
+  return {
+    async login({ email, password }: LoginParams): Promise<SessionTokens> {
+      const res = await client.auth.login.loginEndUser({ email, password });
+      return extract(res.data?.tokens);
+    },
+    async refresh(refreshToken: string): Promise<SessionTokens> {
+      const res = await client.auth.sessions.refreshEndUserToken({ refreshToken });
+      return extract(res.data?.tokens);
+    },
+    async logout(refreshToken: string): Promise<void> {
+      await client.auth.sessions.revokeEndUserSession({ refreshToken });
+    },
+  };
+}