@glyphteck/veyl 0.62.0 → 0.63.1

package/LICENSE

@@ -19,4 +19,4 @@ Third-party components remain governed by their respective licenses and
 notices. Rights that applicable law does not permit to be restricted remain
 unaffected.
 
-The Veyl Terms of Service are available at https://veyl.glyphteck.com/legal#terms.
+The Veyl Terms of Service are available at https://veyl.glyphteck.com/terms#terms.

package/dist/account.js

@@ -18,12 +18,14 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -31,7 +33,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 
 // ../../node_modules/.bun/bech32@2.0.0/node_modules/bech32/dist/index.js
-var require_dist = __commonJS((exports) => {
+var require_dist = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.bech32m = exports.bech32 = undefined;
   var ALPHABET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
@@ -7404,12 +7406,24 @@ function readAvatarVersion(value) {
 }
 
 // ../../core/agreement.js
-var TERMS_VERSION = "2026-07-15";
-var COMMUNITY_RULES_VERSION = "2026-05-11.1";
+var TERMS_VERSION = "2026-08-22.4";
 var CURRENT_AGREEMENT = Object.freeze({
-  termsVersion: TERMS_VERSION,
-  communityRulesVersion: COMMUNITY_RULES_VERSION
+  termsVersion: TERMS_VERSION
 });
+var TERMS_VERSION_PATTERN = /^\d{4}-\d{2}-\d{2}(?:\.\d+)?$/u;
+function agreementContract(value = CURRENT_AGREEMENT) {
+  const termsVersion = typeof value?.termsVersion === "string" ? value.termsVersion.trim() : "";
+  if (!TERMS_VERSION_PATTERN.test(termsVersion)) {
+    throw new Error("valid Terms version required");
+  }
+  return Object.freeze({ termsVersion });
+}
+function isAgreementAccepted(agreement, contract = CURRENT_AGREEMENT) {
+  return agreement?.termsVersion === agreementContract(contract).termsVersion && !!agreement?.acceptedAt;
+}
+function hasAgreement(user, contract = CURRENT_AGREEMENT) {
+  return isAgreementAccepted(user?.agreement, contract);
+}
 
 // ../../core/utils/time.js
 function timestampMs(value, fallback = null, options = {}) {
@@ -7615,6 +7629,9 @@ function createUser({ cloud, network, avatarCache = null, diag = null, onSession
   let userUid = null;
   let settingsKey = null;
   let settingsStored = null;
+  let agreementStored = null;
+  let agreementOverride = null;
+  let agreementAcceptance = null;
   let avatarFetch = { uid: null, key: null, promise: null };
   let blockedSource = state.blocked;
   let blockedSet = new Set(blockedSource);
@@ -7840,6 +7857,9 @@ function createUser({ cloud, network, avatarCache = null, diag = null, onSession
       clearSettingsKey(settingsKey);
       settingsKey = null;
       settingsStored = null;
+      agreementStored = null;
+      agreementOverride = null;
+      agreementAcceptance = null;
       if (signedOutUid) {
         keepOnlyCachedAvatar(null);
       }
@@ -7854,6 +7874,9 @@ function createUser({ cloud, network, avatarCache = null, diag = null, onSession
       clearSettingsKey(settingsKey);
       settingsKey = null;
       settingsStored = null;
+      agreementStored = null;
+      agreementOverride = null;
+      agreementAcceptance = null;
     }
     setState((user) => authUidChanged ? { ...defaultUser, authReady: true, uid: authUser.uid } : { ...user, authReady: true, isAdmin: false, adminReady: false });
     readCachedAvatar(authUser.uid).then((cached) => {
@@ -7913,18 +7936,23 @@ function createUser({ cloud, network, avatarCache = null, diag = null, onSession
       if (!info.fromCache) {
         settingsStored = Object.prototype.hasOwnProperty.call(privateData, "settings");
       }
+      agreementStored = privateData.agreement ?? null;
+      if (agreementOverride && isAgreementAccepted(agreementStored, agreementOverride.agreement)) {
+        agreementOverride = null;
+      }
       setState((user) => ({
         ...user,
-        agreement: privateData.agreement ?? null,
+        agreement: agreementOverride?.agreement ?? agreementStored,
         settingsReady: user.settingsReady || !info.fromCache
       }));
     }), current((error) => {
       markError(diag, "user.settings.snapshot", authStartedAt, error);
       settingsStored = null;
+      agreementStored = null;
       setState((user) => ({
         ...user,
         settingsReady: true,
-        agreement: null
+        agreement: agreementOverride?.agreement ?? null
       }));
     })));
     userWatches.push(cloud.user.banned(authUser.uid, current((banned) => {
@@ -8028,6 +8056,9 @@ function createUser({ cloud, network, avatarCache = null, diag = null, onSession
     clearSettingsKey(settingsKey);
     settingsKey = null;
     settingsStored = null;
+    agreementStored = null;
+    agreementOverride = null;
+    agreementAcceptance = null;
     userUid = null;
     avatarFetch = { uid: null, key: null, promise: null };
     state = defaultUser;
@@ -8055,21 +8086,71 @@ function createUser({ cloud, network, avatarCache = null, diag = null, onSession
       throw new Error("peer uid required");
     return cloud.user.blocked.remove(uid, nextPeerUid);
   }
-  async function acceptAgreement() {
+  async function acceptAgreement(requestedAgreement = CURRENT_AGREEMENT) {
     const uid = cloud.auth.user?.uid;
     const session = authSession;
     if (!uid)
       throw new Error("auth");
-    await cloud.user.agreement.accept(uid);
-    if (!isCurrentUser(uid, session))
-      return;
-    setState((user) => ({
-      ...user,
+    const agreement = agreementContract(requestedAgreement);
+    while (agreementAcceptance) {
+      if (agreementAcceptance.termsVersion === agreement.termsVersion) {
+        return agreementAcceptance.promise;
+      }
+      await agreementAcceptance.promise.catch(NOOP);
+      if (!isCurrentUser(uid, session))
+        throw new Error("auth");
+    }
+    const startedAt = Date.now();
+    const override = {
       agreement: {
-        ...CURRENT_AGREEMENT,
+        ...agreement,
         acceptedAt: new Date
       }
+    };
+    markDiag(diag, "user.agreement.accept.start", {
+      termsVersion: agreement.termsVersion
+    });
+    agreementOverride = override;
+    setState((user) => ({
+      ...user,
+      agreement: override.agreement
     }));
+    markDiag(diag, "user.agreement.accept.optimistic", {
+      termsVersion: agreement.termsVersion
+    });
+    const acceptance = {
+      termsVersion: agreement.termsVersion,
+      promise: null
+    };
+    const operation = new Promise((resolve) => setTimeout(resolve, 0)).then(() => {
+      markDiag(diag, "user.agreement.accept.request.start", {
+        termsVersion: agreement.termsVersion
+      });
+      return cloud.user.agreement.accept(uid, agreement);
+    }).then(() => {
+      markDone(diag, "user.agreement.accept", startedAt, {
+        termsVersion: agreement.termsVersion
+      });
+      return agreement;
+    }).catch((error) => {
+      markError(diag, "user.agreement.accept", startedAt, error, {
+        termsVersion: agreement.termsVersion
+      });
+      if (!isCurrentUser(uid, session))
+        throw error;
+      if (agreementOverride === override) {
+        agreementOverride = null;
+        setState((user) => ({ ...user, agreement: agreementStored }));
+      }
+      throw error;
+    }).finally(() => {
+      if (agreementAcceptance === acceptance) {
+        agreementAcceptance = null;
+      }
+    });
+    acceptance.promise = operation;
+    agreementAcceptance = acceptance;
+    return operation;
   }
   async function unlockSettings(key) {
     const uid = cloud.auth.user?.uid;
@@ -36073,7 +36154,8 @@ function emptyState(user, network) {
     session: null,
     wallet: null,
     walletError: null,
-    lockState: "locked"
+    lockState: "locked",
+    agreementSession: null
   };
 }
 function openAccount(options = {}) {
@@ -36095,6 +36177,7 @@ function openAccount(options = {}) {
   let stopVault = NOOP8;
   let syncingUser = false;
   let state;
+  let nextAgreement = agreementContract(options.agreement || CURRENT_AGREEMENT);
   const listeners = new Set;
   const user = options.user || createUser({
     cloud,
@@ -36282,7 +36365,8 @@ function openAccount(options = {}) {
       session: null,
       wallet: null,
       walletError: null,
-      lockState: "locked"
+      lockState: "locked",
+      agreementSession: null
     };
     if (notify2) {
       emitDomains(patch);
@@ -36341,7 +36425,11 @@ function openAccount(options = {}) {
     const nextUser = user.getSnapshot();
     const uid = nextUser.uid || null;
     if (uid === state.uid) {
-      emitDomains({ user: nextUser });
+      const agreementSession = state.agreementSession ? {
+        agreement: state.agreementSession.agreement,
+        accepted: hasAgreement(nextUser, state.agreementSession.agreement)
+      } : null;
+      emitDomains({ user: nextUser, agreementSession });
       return;
     }
     syncingUser = true;
@@ -36384,6 +36472,7 @@ function openAccount(options = {}) {
       throw new Error("vault not ready");
     const currentAttempt = attempt + 1;
     attempt = currentAttempt;
+    const requiredAgreement = nextAgreement;
     const source = unlockOptions.source || "password";
     const isCurrent = () => !closed && attempt === currentAttempt && state.uid === uid && cloud.auth.user?.uid === uid;
     let session = null;
@@ -36416,7 +36505,11 @@ function openAccount(options = {}) {
         session,
         wallet: null,
         walletError: null,
-        lockState: "unlocked"
+        lockState: "unlocked",
+        agreementSession: {
+          agreement: requiredAgreement,
+          accepted: hasAgreement(state.user, requiredAgreement)
+        }
       });
       setActive(true);
       session.walletReady.then(({ wallet: wallet2 }) => {
@@ -36470,6 +36563,19 @@ function openAccount(options = {}) {
     }
     return vaultCrypto.verifyVaultPassword(state.vault, password);
   }
+  function setAgreementContract(value) {
+    nextAgreement = agreementContract(value);
+    return nextAgreement;
+  }
+  async function acceptAgreement() {
+    const agreementSession = state.agreementSession;
+    if (state.lockState !== "unlocked" || !agreementSession) {
+      throw new Error("unlocked agreement session required");
+    }
+    if (agreementSession.accepted)
+      return agreementSession.agreement;
+    return state.user.acceptAgreement(agreementSession.agreement);
+  }
   async function deleteAccount(options2 = {}) {
     if (options2.confirm !== true) {
       throw new Error("account deletion requires confirm: true");
@@ -36559,17 +36665,19 @@ function openAccount(options = {}) {
       return () => listeners.delete(listener);
     },
     unlock,
+    acceptAgreement,
     createVault,
     verifyPassword,
     delete: deleteAccount,
     lock,
     switchNetwork,
     setActive,
+    setAgreementContract,
     setNetwork,
     close
   });
 }
 export {
-  openAccount,
-  isVaultPasswordError
+  isVaultPasswordError,
+  openAccount
 };

package/dist/auth.js

@@ -18,12 +18,14 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -92,6 +94,26 @@ function normalizePasskeyRegisterError(error, options = {}) {
   return error;
 }
 
+// ../../core/agreement.js
+var TERMS_VERSION = "2026-08-22.4";
+var CURRENT_AGREEMENT = Object.freeze({
+  termsVersion: TERMS_VERSION
+});
+var TERMS_VERSION_PATTERN = /^\d{4}-\d{2}-\d{2}(?:\.\d+)?$/u;
+function agreementContract(value = CURRENT_AGREEMENT) {
+  const termsVersion = typeof value?.termsVersion === "string" ? value.termsVersion.trim() : "";
+  if (!TERMS_VERSION_PATTERN.test(termsVersion)) {
+    throw new Error("valid Terms version required");
+  }
+  return Object.freeze({ termsVersion });
+}
+function isAgreementAccepted(agreement, contract = CURRENT_AGREEMENT) {
+  return agreement?.termsVersion === agreementContract(contract).termsVersion && !!agreement?.acceptedAt;
+}
+function hasAgreement(user, contract = CURRENT_AGREEMENT) {
+  return isAgreementAccepted(user?.agreement, contract);
+}
+
 // ../../core/origins.js
 var ROOT_DOMAIN = "glyphteck.com";
 var VEYL_DEV_WEB_PORT_MIN = 3000;
@@ -138,8 +160,7 @@ var links = Object.freeze({
   veyl: origins.veyl,
   veylDev: origins.veylDev,
   veylDevWeb: origins.veylDevWeb,
-  terms: `${origins.veyl}/legal#terms`,
-  communityRules: `${origins.veyl}/community-rules`,
+  terms: `${origins.veyl}/terms#terms`,
   contact: `mailto:contact@${ROOT_DOMAIN}`,
   regtestFaucet: "https://app.lightspark.com/regtest-faucet"
 });
@@ -457,7 +478,7 @@ function openAuth(options = {}) {
       const start = await transport.register.start({
         label,
         origin: operationOrigin(operation),
-        ...operation.termsVersion ? { termsVersion: operation.termsVersion } : {}
+        agreement: operation.agreement || CURRENT_AGREEMENT
       });
       const attestation = await createCredential(start?.opts, {
         ...operation,