Reboot 1.3.0

🌠 Hello, MCP makers and mobile mavens!

What's new in 1.3.0:

:mobile_phone: React Native Support
rbt generate --mobile now emits a React Native client, so the same generated hooks you use on the web run in your Expo app too. The bank-pydantic and chat-room examples now ship mobile/ apps to show the way.

🌐 Web Apps Sign In Through OAuth
The Reboot OAuth server now speaks the browser flow too: cookie-backed sessions, useSignIn() / useSignOut() hooks, automatic token refresh, and single sign-on across surfaces — sign in on the web and your MCP session is signed in too (and vice versa).

🛡️ Exact-Match CORS via allowed_origins
Apps with oauth= no longer serve permissive CORS: pass Application(allowed_origins=[...]) to allow-list your frontend's origin. (Required in production; localhost is allowed automatically under rbt dev run.)

:frame_photo: useUser enhancements
No more "Connecting to MCP host..." placeholder: your UI renders right away, while a no-id hook like useUser() reports { user, isLoading } until the default id resolves.

🧪 One-Call Test Impersonation
await rbt.create_external_context_as(name, user_id) mints a real OAuth access token and auto-constructs the User as a side effect — so TokenVerifierForTest is gone.

🔍 rbt inspect
Inspect the state of any running Reboot app straight from the CLI — made for agents (and humans) that previously had to hand-script the chunked inspect API.

🚀 Keep signing in once. Keep shipping everywhere — web, MCP, and now mobile.