flowstate-mobile Package Skill

Package: @epicdm/flowstate-mobile Repository: flowstate-mobile Path: . Version: 1.0.0

Use this published Dojo skill as the package-level entrypoint. For detailed workflows, use the package-local skills listed below.

Primary Package Workflow

FlowState Mobile OAuth Local Dev

Use this skill for mobile OAuth setup, DCR, PKCE, and local/self-hosted auth testing.

Start Here

Read:

• docs/LOCAL_DEV.md
• docs/SELF_HOSTED_OAUTH.md
• tests/e2e/README.md
• iOS AuthService, TokenManager, ServerConfigStore
• Android AuthService, TokenManager, OAuthDiscovery, ServerConfigStore

Rules

1. Use OAuth AS metadata fallback when OIDC discovery is not available locally.
2. Register mobile clients as public clients with token_endpoint_auth_method: none.
3. Use PKCE S256 for authorization code flow.
4. Request offline_access when refresh tokens are required.
5. Keep platform redirect schemes synchronized with project configuration and client registration cache keys.
6. Never store access or refresh tokens in non-secure storage.

Local Stack Checks

flowstate start
curl -s http://localhost:8080/.well-known/oauth-authorization-server
curl -s -X POST http://localhost:8080/auth/register \
  -H 'Content-Type: application/json' \
  -d '{"client_name":"probe","redirect_uris":["epicflowstate://auth/callback"],"token_endpoint_auth_method":"none","grant_types":["authorization_code","refresh_token"],"response_types":["code"],"application_type":"native"}'

E2E

Run smoke flows without the stack. Run OAuth flows only after verifying auth-server, Kong, and D1 worker health.

Package Skill Inventory

@epicdm/flowstate-mobile Skill Inventory

Review Gate

@epicdm/flowstate-mobile Skill Review

Verdict

Pass with environment follow-ups.

The skills are source-backed and focus on root workspace orchestration, CI, E2E, and OAuth environment setup.

Verification

• ASCII and skill frontmatter checks passed.
• Package-root coverage passed: 3 package roots, 0 missing inventories.
• npm run typecheck failed because workspace package scripts could not find tsc.
• npm run format:check failed because prettier was not found.
• cd packages/android && ./gradlew tasks --console=plain passed.
• xcodegen, xcodebuild -version, and swift --version are available.

Platform E2E requires simulators/emulators and, for OAuth flows, a local FlowState stack.

Follow-Ups

• Resolve or document the root script references to @epicdm/flowstate-mobile-rn.
• Rebuild generated Dojo content from reviewed package-local skills before publishing.
• Install/repair npm dependencies before rerunning root TypeScript and formatting checks.

Start with this skill to understand the package purpose, then use the package-local focused skills for specific workflows. Keep this Dojo version aligned with ./package.json. Do not treat generated feature lists as lessons; use workflow evidence from CODE-REVIEW.md, SKILL-INVENTORY.md, and REVIEW.md.