@oxy.so/core 1.0.0 → 1.1.0

package/dist/cjs/OxyServices.errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OxyAuthenticationTimeoutError = exports.ServiceAssetMetadataError = exports.AssetUrlResolutionError = exports.OxyAuthenticationError = void 0;
+exports.OxyAuthenticationTimeoutError = exports.ServiceLinkedDownloadUrlError = exports.ServiceAssetMetadataError = exports.AssetUrlResolutionError = exports.OxyAuthenticationError = void 0;
 /**
  * Custom error types for better error handling
  */
@@ -86,6 +86,33 @@ class ServiceAssetMetadataError extends Error {
     }
 }
 exports.ServiceAssetMetadataError = ServiceAssetMetadataError;
+/**
+ * A chunk of `POST /assets/service/linked-url` failed, so the SDK cannot say
+ * whether those ids have URLs.
+ *
+ * Its own class rather than a reuse of {@link ServiceAssetMetadataError}, and
+ * deliberately WITHOUT that one's `{ partial: true }` escape hatch, because the
+ * two mistakes cost different things. Reading a failed metadata lookup as
+ * "absent" embedded a media item with no hash. Reading a failed DOWNLOAD mint as
+ * "absent" tells a buyer who paid that the file they own is not there — and
+ * "not there" is already this route's answer for "not yours", so a best-effort
+ * mode would make a throttled request indistinguishable from a refusal. There is
+ * no download path that legitimately wants that, so there is no option to ask
+ * for it.
+ */
+class ServiceLinkedDownloadUrlError extends Error {
+    constructor(unresolvedIds, statuses, cause) {
+        const uniqueStatuses = Array.from(new Set(statuses)).sort((a, b) => a - b);
+        const statusSuffix = uniqueStatuses.length > 0 ? ` — status ${uniqueStatuses.join(', ')}` : '';
+        super(`Could not mint download URLs for ${unresolvedIds.length} id(s)${statusSuffix}. Treat this as unknown, never as "the caller holds no right".`);
+        this.code = 'SERVICE_LINKED_DOWNLOAD_URL_UNRESOLVED';
+        this.name = 'ServiceLinkedDownloadUrlError';
+        this.unresolvedIds = unresolvedIds;
+        this.statuses = uniqueStatuses;
+        this.cause = cause;
+    }
+}
+exports.ServiceLinkedDownloadUrlError = ServiceLinkedDownloadUrlError;
 class OxyAuthenticationTimeoutError extends OxyAuthenticationError {
     constructor(operationName, timeoutMs) {
         super(`Authentication timeout (${timeoutMs}ms): ${operationName} requires user authentication. Please ensure the user is logged in before calling this method.`, 'AUTH_TIMEOUT', 408);

package/dist/cjs/crypto/keyManager.js

@@ -69,7 +69,7 @@ exports.IdentityUnavailableError = IdentityUnavailableError;
 /**
  * HKDF salt that domain-separates every identity-scoped seed produced by
  * {@link KeyManager.deriveScopedSeed}. Versioned so a future scheme change is a
- * new, non-colliding tag. The per-app domain (e.g. Oxy Pay's FairCoin wallet)
+ * new, non-colliding tag. The per-app domain (e.g. Peable's FairCoin wallet)
  * is carried by the caller's `info` string, not this salt.
  */
 const SCOPED_SEED_KDF_SALT = 'oxy-identity-scoped-seed-v1';
@@ -2174,12 +2174,14 @@ class KeyManager {
      *
      * The domain separation is carried by `info` (e.g. `"oxypay/faircoin/v1"`),
      * so distinct apps/purposes get independent seeds from the same identity.
+     * That legacy Peable tag is a cryptographic contract and must not be renamed:
+     * changing it would derive a different wallet for every existing user.
      * The output is HKDF keying material, never the private key itself — a
-     * consumer (e.g. Oxy Pay's FairCoin HD wallet) can feed it straight into
+     * consumer (e.g. Peable's FairCoin HD wallet) can feed it straight into
      * `HDKey.fromMasterSeed` and never touches the identity key.
      *
      * Key source (native only): prefers the shared ecosystem identity written to
-     * `group.so.oxy.shared` (what a Relying Party like Oxy Pay reads), then falls
+     * `group.so.oxy.shared` (what a Relying Party like Peable reads), then falls
      * back to this device's primary identity (Commons/Accounts). Both reproduce
      * from the user's Oxy recovery phrase, so the derived seed is recoverable.
      *

package/dist/cjs/i18n/locales/en-US.json

@@ -1412,7 +1412,7 @@
         },
         "details": {
             "cardDetails": "Card Details",
-            "oxyPay": "Oxy Pay",
+            "peable": "Peable",
             "faircoinPayment": "FairCoin Payment",
             "paymentDetails": "Payment Details",
             "creditCard": "Credit Card",
@@ -1438,7 +1438,7 @@
             "amount": "Amount",
             "paymentMethod": "Payment Method",
             "card": "Card",
-            "oxyPayAccount": "Oxy Pay Account",
+            "peableAccount": "Peable Account",
             "faircoinWallet": "FairCoin Wallet",
             "paidViaQR": "Paid via QR",
             "processing": "Processing...",
@@ -1465,8 +1465,8 @@
                 "description": "Pay securely with your credit or debit card."
             },
             "oxy": {
-                "label": "Oxy Pay",
-                "description": "Use your Oxy Pay in-app balance."
+                "label": "Peable",
+                "description": "Use your Peable in-app balance."
             },
             "faircoin": {
                 "label": "FAIRWallet",
@@ -2127,6 +2127,18 @@
             "title": "Permissions requested",
             "basic": "Sign you in and read your basic profile"
         },
+        "resource": {
+            "title": "Oxy app and protected resource"
+        },
+        "writeActions": {
+            "title": "Actions this connection can perform"
+        },
+        "effects": {
+            "write": "Write",
+            "external": "External",
+            "financial": "Financial",
+            "security": "Security"
+        },
         "scopes": {
             "openid": "Confirm your identity",
             "profile": "Read your basic profile",
@@ -2147,7 +2159,8 @@
             "federationWrite": "Act across federated services"
         },
         "account": {
-            "title": "Signing in as"
+            "title": "Signing in as",
+            "id": "Account ID: {{id}}"
         },
         "links": {
             "website": "Website",

package/dist/cjs/i18n/locales/es-ES.json

@@ -1412,7 +1412,7 @@
         },
         "details": {
             "cardDetails": "Detalles de la tarjeta",
-            "oxyPay": "Oxy Pay",
+            "peable": "Peable",
             "faircoinPayment": "Pago con FairCoin",
             "paymentDetails": "Detalles del pago",
             "creditCard": "Tarjeta de crédito",
@@ -1438,7 +1438,7 @@
             "amount": "Monto",
             "paymentMethod": "Método de pago",
             "card": "Tarjeta",
-            "oxyPayAccount": "Cuenta Oxy Pay",
+            "peableAccount": "Cuenta Peable",
             "faircoinWallet": "Billetera FairCoin",
             "paidViaQR": "Pagado vía QR",
             "processing": "Procesando...",
@@ -1465,8 +1465,8 @@
                 "description": "Paga de forma segura con tu tarjeta de crédito o débito."
             },
             "oxy": {
-                "label": "Oxy Pay",
-                "description": "Usa tu saldo de Oxy Pay en la app."
+                "label": "Peable",
+                "description": "Usa tu saldo de Peable en la app."
             },
             "faircoin": {
                 "label": "FAIRWallet",
@@ -2127,6 +2127,18 @@
             "title": "Permisos solicitados",
             "basic": "Iniciar sesión y leer tu perfil básico"
         },
+        "resource": {
+            "title": "App de Oxy y recurso protegido"
+        },
+        "writeActions": {
+            "title": "Acciones que puede realizar esta conexión"
+        },
+        "effects": {
+            "write": "Escritura",
+            "external": "Externa",
+            "financial": "Financiera",
+            "security": "Seguridad"
+        },
         "scopes": {
             "openid": "Confirmar tu identidad",
             "profile": "Leer tu perfil básico",
@@ -2147,7 +2159,8 @@
             "federationWrite": "Actuar en servicios federados"
         },
         "account": {
-            "title": "Iniciando sesión como"
+            "title": "Iniciando sesión como",
+            "id": "ID de cuenta: {{id}}"
         },
         "links": {
             "website": "Sitio web",

package/dist/cjs/i18n/locales/locales/en-US.json

@@ -1412,7 +1412,7 @@
     },
     "details": {
       "cardDetails": "Card Details",
-      "oxyPay": "Oxy Pay",
+      "peable": "Peable",
       "faircoinPayment": "FairCoin Payment",
       "paymentDetails": "Payment Details",
       "creditCard": "Credit Card",
@@ -1438,7 +1438,7 @@
       "amount": "Amount",
       "paymentMethod": "Payment Method",
       "card": "Card",
-      "oxyPayAccount": "Oxy Pay Account",
+      "peableAccount": "Peable Account",
       "faircoinWallet": "FairCoin Wallet",
       "paidViaQR": "Paid via QR",
       "processing": "Processing...",
@@ -1465,8 +1465,8 @@
         "description": "Pay securely with your credit or debit card."
       },
       "oxy": {
-        "label": "Oxy Pay",
-        "description": "Use your Oxy Pay in-app balance."
+        "label": "Peable",
+        "description": "Use your Peable in-app balance."
       },
       "faircoin": {
         "label": "FAIRWallet",
@@ -2127,6 +2127,18 @@
       "title": "Permissions requested",
       "basic": "Sign you in and read your basic profile"
     },
+    "resource": {
+      "title": "Oxy app and protected resource"
+    },
+    "writeActions": {
+      "title": "Actions this connection can perform"
+    },
+    "effects": {
+      "write": "Write",
+      "external": "External",
+      "financial": "Financial",
+      "security": "Security"
+    },
     "scopes": {
       "openid": "Confirm your identity",
       "profile": "Read your basic profile",
@@ -2147,7 +2159,8 @@
       "federationWrite": "Act across federated services"
     },
     "account": {
-      "title": "Signing in as"
+      "title": "Signing in as",
+      "id": "Account ID: {{id}}"
     },
     "links": {
       "website": "Website",

package/dist/cjs/i18n/locales/locales/es-ES.json

@@ -1412,7 +1412,7 @@
     },
     "details": {
       "cardDetails": "Detalles de la tarjeta",
-      "oxyPay": "Oxy Pay",
+      "peable": "Peable",
       "faircoinPayment": "Pago con FairCoin",
       "paymentDetails": "Detalles del pago",
       "creditCard": "Tarjeta de crédito",
@@ -1438,7 +1438,7 @@
       "amount": "Monto",
       "paymentMethod": "Método de pago",
       "card": "Tarjeta",
-      "oxyPayAccount": "Cuenta Oxy Pay",
+      "peableAccount": "Cuenta Peable",
       "faircoinWallet": "Billetera FairCoin",
       "paidViaQR": "Pagado vía QR",
       "processing": "Procesando...",
@@ -1465,8 +1465,8 @@
         "description": "Paga de forma segura con tu tarjeta de crédito o débito."
       },
       "oxy": {
-        "label": "Oxy Pay",
-        "description": "Usa tu saldo de Oxy Pay en la app."
+        "label": "Peable",
+        "description": "Usa tu saldo de Peable en la app."
       },
       "faircoin": {
         "label": "FAIRWallet",
@@ -2127,6 +2127,18 @@
       "title": "Permisos solicitados",
       "basic": "Iniciar sesión y leer tu perfil básico"
     },
+    "resource": {
+      "title": "App de Oxy y recurso protegido"
+    },
+    "writeActions": {
+      "title": "Acciones que puede realizar esta conexión"
+    },
+    "effects": {
+      "write": "Escritura",
+      "external": "Externa",
+      "financial": "Financiera",
+      "security": "Seguridad"
+    },
     "scopes": {
       "openid": "Confirmar tu identidad",
       "profile": "Leer tu perfil básico",
@@ -2147,7 +2159,8 @@
       "federationWrite": "Actuar en servicios federados"
     },
     "account": {
-      "title": "Iniciando sesión como"
+      "title": "Iniciando sesión como",
+      "id": "ID de cuenta: {{id}}"
     },
     "links": {
       "website": "Sitio web",

package/dist/cjs/mixins/OxyServices.agency.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OxyServicesAgencyMixin = OxyServicesAgencyMixin;
+const mixinHelpers_1 = require("./mixinHelpers");
+function query(path, key, value) {
+    return `${path}?${key}=${encodeURIComponent(value)}`;
+}
+function OxyServicesAgencyMixin(Base) {
+    return class extends Base {
+        async listAvailableCapabilityCatalogs(accountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/catalogs/available', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.MEDIUM });
+                return response.catalogs;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listDelegationGrants(ownerAccountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/grants', 'ownerAccountId', ownerAccountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.grants;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async createDelegationGrant(input) {
+            try {
+                const response = await this.makeRequest('POST', '/capabilities/grants', input, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(input.ownerAccountId)}`);
+                return response.grant;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async revokeDelegationGrant(grantId, ownerAccountId) {
+            try {
+                await this.makeRequest('DELETE', `/capabilities/grants/${encodeURIComponent(grantId)}`, undefined, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async updateDelegationGrant(grantId, ownerAccountId, input) {
+            try {
+                const response = await this.makeRequest('PUT', `/capabilities/grants/${encodeURIComponent(grantId)}`, input, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
+                return response.grant;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listAccountCapabilityPolicies(accountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/account-policies', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.policies;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async putAccountCapabilityPolicy(appId, input) {
+            try {
+                const response = await this.makeRequest('PUT', `/capabilities/account-policies/${encodeURIComponent(appId)}`, input, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/account-policies?accountId=${encodeURIComponent(input.accountId)}`);
+                return response.policy;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async deleteAccountCapabilityPolicy(appId, accountId) {
+            try {
+                await this.makeRequest('DELETE', `/capabilities/account-policies/${encodeURIComponent(appId)}?accountId=${encodeURIComponent(accountId)}`, undefined, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/account-policies?accountId=${encodeURIComponent(accountId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listCapabilityExecutionAuthorizations(ownerAccountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/execution-authorizations', 'ownerAccountId', ownerAccountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.authorizations;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async revokeCapabilityExecutionAuthorization(authorizationId, ownerAccountId) {
+            try {
+                await this.makeRequest('DELETE', `/capabilities/execution-authorizations/${encodeURIComponent(authorizationId)}`, undefined, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/execution-authorizations?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listCapabilityAuditEvents(accountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/audit', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.events;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+    };
+}

package/dist/cjs/mixins/OxyServices.assets.js

@@ -19,6 +19,13 @@ const SERVICE_ASSET_METADATA_CHUNK_SIZE = 100;
  * {@link SERVICE_ASSET_METADATA_CHUNK_SIZE} for the forward id lookup.
  */
 const SERVICE_ASSET_METADATA_BY_SHA_CHUNK_SIZE = 100;
+/**
+ * Maximum number of ids sent per `POST /assets/service/linked-url` request.
+ * Matches that route's own cap, which is a QUARTER of the metadata routes' —
+ * see `MAX_ASSETS_LINKED_URL` in the API for why minting download credentials is
+ * budgeted more tightly than projecting rows.
+ */
+const SERVICE_LINKED_DOWNLOAD_URL_CHUNK_SIZE = 25;
 /**
  * Lowercase hex SHA-256 digest matcher (exactly 64 hex chars). The reverse
  * lookup drops non-conforming hashes client-side so a single malformed value
@@ -361,6 +368,89 @@ function OxyServicesAssetsMixin(Base) {
             }
             return settled.flat();
         }
+        /**
+         * Mint short-lived direct download URLs for files the calling application's
+         * own users attached to it, via `POST /assets/service/linked-url`.
+         *
+         * This is the ONLY path in this SDK by which a service token reaches file
+         * BYTES. {@link getServiceAssetMetadataByIds} is metadata-only, and every
+         * other download helper here — {@link getFileDownloadUrl},
+         * {@link getFileDownloadUrlAsync}, {@link getBatchFileAccess} — resolves a URL
+         * for the CURRENT USER through `makeRequest`, which is a different question: a
+         * relying service holds no user session, and the buyer whose entitlement it is
+         * enforcing is not a viewer Oxy knows anything about.
+         *
+         * **Service-token auth (required), plus the `files:linked:read` scope**, which
+         * is NOT implied by `files:read`. The calling client must be service-configured
+         * (`configureServiceAuth(apiKey, apiSecret)`); a user-session request is
+         * rejected by the route's service-auth guard.
+         *
+         * **What the server will and will not give you.** A URL comes back only for a
+         * file whose OWN OWNER linked it to this application (`file_links.created_by =
+         * files.owner_user_id`). Every other id is omitted: unknown, deleted,
+         * system-owned, linked by somebody else, or not linked here at all. So the
+         * result is routinely shorter than the input and must be mapped by `id`.
+         *
+         * ABSENCE IS A REFUSAL, NOT A FACT ABOUT THE FILE, and the caller is the only
+         * party that can tell the difference. The route deliberately cannot — it
+         * answers identically for "no such file" and "not yours" so it leaks nothing —
+         * which means a service must decide what to tell its user from its OWN
+         * entitlement record, never from this response. Do not surface "file not
+         * found" on the strength of an omission.
+         *
+         * FAILURE IS NOT ABSENCE EITHER, and here it cannot be opted out of: a failed
+         * chunk throws {@link ServiceLinkedDownloadUrlError} carrying its ids, with no
+         * `{ partial: true }` mode. Swallowing a 429 would tell a user who paid for a
+         * file that it is not there. An empty input resolves to `[]` with no network
+         * call.
+         *
+         * Never cached at the SDK layer, and that is a stronger statement than the
+         * sibling methods' "low hit rate": each entry is a live credential for the
+         * bytes, so caching one keeps it usable after the service has decided the
+         * caller's entitlement ended.
+         */
+        async getServiceLinkedDownloadUrls(ids) {
+            const uniqueIds = Array.from(new Set(ids.filter((id) => typeof id === 'string' && id.trim().length > 0)));
+            if (uniqueIds.length === 0) {
+                return [];
+            }
+            const chunks = [];
+            for (let i = 0; i < uniqueIds.length; i += SERVICE_LINKED_DOWNLOAD_URL_CHUNK_SIZE) {
+                chunks.push(uniqueIds.slice(i, i + SERVICE_LINKED_DOWNLOAD_URL_CHUNK_SIZE));
+            }
+            // Chunks stay independent so one failure never cancels work already in
+            // flight; the failures are collected and re-raised together below, exactly
+            // as in the metadata sibling.
+            const unresolvedIds = [];
+            const statuses = [];
+            let firstError;
+            const settled = await Promise.all(chunks.map(async (chunk) => {
+                try {
+                    const entries = await this.makeServiceRequest('POST', '/assets/service/linked-url', { ids: chunk });
+                    return Array.isArray(entries) ? entries : [];
+                }
+                catch (error) {
+                    const status = (0, errorUtils_1.extractErrorStatus)(error);
+                    // `chunkSize` and `status`, never the ids and never a `url`: a minted
+                    // URL in a log line is a credential in a log line.
+                    logger_1.logger.warn('getServiceLinkedDownloadUrls: chunk failed', {
+                        method: 'getServiceLinkedDownloadUrls',
+                        chunkSize: chunk.length,
+                        status,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    unresolvedIds.push(...chunk);
+                    if (typeof status === 'number')
+                        statuses.push(status);
+                    firstError ?? (firstError = error);
+                    return [];
+                }
+            }));
+            if (unresolvedIds.length > 0) {
+                throw new OxyServices_errors_1.ServiceLinkedDownloadUrlError(unresolvedIds, statuses, firstError);
+            }
+            return settled.flat();
+        }
         /**
          * Reverse content-address lookup: resolve many content `sha256` digests to
          * the servable Oxy asset holding each, in one round-trip per chunk via

package/dist/cjs/mixins/OxyServices.connectedApps.js

@@ -4,9 +4,6 @@ exports.OxyServicesConnectedAppsMixin = OxyServicesConnectedAppsMixin;
 const mixinHelpers_1 = require("./mixinHelpers");
 function OxyServicesConnectedAppsMixin(Base) {
     return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
         /**
          * Resolve an OAuth client identifier to the owning application's PUBLIC
          * identity. No authentication required — the API returns only sanitized,
@@ -74,5 +71,25 @@ function OxyServicesConnectedAppsMixin(Base) {
                 throw this.handleError(error);
             }
         }
+        /** List resource-bound external MCP connections for the active Oxy account. */
+        async listConnectedMcpClients() {
+            try {
+                const response = await this.makeRequest('GET', '/auth/mcp/oauth/grants', undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.grants;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        /** Revoke one external MCP connection and every token in its family. */
+        async revokeConnectedMcpClient(grantId) {
+            try {
+                await this.makeRequest('DELETE', `/auth/mcp/oauth/grants/${encodeURIComponent(grantId)}`, undefined, { cache: false });
+                this.clearCacheEntry('GET:/auth/mcp/oauth/grants');
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
     };
 }

package/dist/cjs/mixins/OxyServices.utility.js

@@ -4,12 +4,10 @@ exports.OxyServicesUtilityMixin = OxyServicesUtilityMixin;
 /**
  * Utility Methods Mixin
  *
- * Provides utility methods including link metadata fetching
- * and Express.js authentication middleware
+ * Provides utility methods including Express.js authentication middleware.
  */
 const jwt_decode_1 = require("jwt-decode");
 const protocol_1 = require("@oxy.so/protocol");
-const apiUtils_1 = require("../utils/apiUtils");
 const logger_1 = require("../logger");
 const oxyServiceEnvironment_1 = require("../utils/oxyServiceEnvironment");
 /**
@@ -138,24 +136,6 @@ function OxyServicesUtilityMixin(Base) {
                 return null;
             }
         }
-        /**
-         * Fetch link metadata
-         */
-        async fetchLinkMetadata(url) {
-            try {
-                const path = (0, apiUtils_1.buildUrl)('/links/preview', { url, wait: 1 });
-                const preview = await this.makeRequest('GET', path, undefined, { cache: false });
-                return {
-                    url: preview.url,
-                    title: preview.title?.trim() || preview.url.replace(/^https?:\/\//, '').replace(/\/$/, ''),
-                    description: preview.description?.trim() || 'Link',
-                    image: preview.image,
-                };
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
         /**
          * Express.js authentication middleware
          *

package/dist/cjs/mixins/index.js

@@ -20,6 +20,7 @@ const OxyServices_reputation_1 = require("./OxyServices.reputation");
 const OxyServices_assets_1 = require("./OxyServices.assets");
 const OxyServices_accounts_1 = require("./OxyServices.accounts");
 const OxyServices_connectedApps_1 = require("./OxyServices.connectedApps");
+const OxyServices_agency_1 = require("./OxyServices.agency");
 const OxyServices_store_1 = require("./OxyServices.store");
 const OxyServices_location_1 = require("./OxyServices.location");
 const OxyServices_analytics_1 = require("./OxyServices.analytics");
@@ -34,7 +35,6 @@ const OxyServices_appData_1 = require("./OxyServices.appData");
 const OxyServices_civic_1 = require("./OxyServices.civic");
 const OxyServices_chains_1 = require("./OxyServices.chains");
 const OxyServices_nodes_1 = require("./OxyServices.nodes");
-const OxyServices_links_1 = require("./OxyServices.links");
 const OxyServices_followGraph_1 = require("./OxyServices.followGraph");
 const OxyServices_inference_1 = require("./OxyServices.inference");
 const OxyServices_deviceBoot_1 = require("./OxyServices.deviceBoot");
@@ -73,6 +73,8 @@ const MIXIN_PIPELINE = [
     // OAuth-consent surface (public app identity + connected-app grants). Kept
     // separate from account ownership.
     OxyServices_connectedApps_1.OxyServicesConnectedAppsMixin,
+    // Oxy-owned delegated authority for Alia and digital-agent accounts.
+    OxyServices_agency_1.OxyServicesAgencyMixin,
     // The app store: the public storefront, the reviews on it, and the listing a
     // publisher edits. A module OVER the platform — turn it off and OAuth still
     // works — so it is its own surface rather than more of `accounts`.
@@ -95,9 +97,6 @@ const MIXIN_PIPELINE = [
     // User nodes / decentralization (Fase 5): register/read/revoke/manage the
     // caller's personal data node + ingest hint.
     OxyServices_nodes_1.OxyServicesNodesMixin,
-    // Link previews / unfurls: SDK-owned link-metadata resolution via oxy-api,
-    // so apps stop scraping link metadata locally.
-    OxyServices_links_1.OxyServicesLinksMixin,
     // The user-owned follow graph (#809). One relationship per user and target,
     // shared across applications, with per-application context on top.
     OxyServices_followGraph_1.OxyServicesFollowGraphMixin,

package/dist/cjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/cjs/server/index.js

@@ -16,7 +16,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isOfficialWebOrigin = exports.registrableApex = exports.OXY_IDENTITY_CACHE_PREFIXES = exports.oxyUserByIdCacheKey = exports.evictOxyIdentityCache = exports.publishOxyUserInvalidation = exports.createOxyUserInvalidationHandler = exports.verifySecret = exports.verifyCapabilityTicket = exports.readCapabilityAuthorization = exports.issueCapabilityTicket = exports.inputSatisfiesCapabilityLimits = exports.createCapabilityTicketMiddleware = exports.CapabilityTicketError = exports.OXY_CSP_BASELINE = exports.inlineScriptCspHash = exports.formatOxyCspPolicy = exports.extractInlineScripts = exports.cspSourcesFor = exports.createOxySecurityHeaders = exports.buildOxyPagesHeaders = exports.buildOxyCspDirectives = exports.createOxyCors = exports.UPSTREAM_HEADERS_TIMEOUT_MS = exports.MAX_URL_LENGTH = exports.MAX_REDIRECTS = exports.DEFAULT_USER_AGENT = exports.BLOCKED_HOSTNAMES = exports.ALLOWED_PROTOCOLS = exports.ALLOWED_PORTS = exports.UpstreamError = exports.SsrfRejection = exports.safeFetch = exports.isBlockedIp = exports.assertSafePublicUrl = exports.createOxyRateLimit = exports.OXY_SERVICE_ENVIRONMENTS = exports.requireOxyAuth = exports.isOxyAuthenticated = exports.getRequiredOxyUserId = exports.getRequiredOxyBillingPrincipal = exports.getOxyUserId = exports.getOxyRequestAttribution = exports.getOxyDelegatedUserId = exports.getOxyBillingPrincipal = exports.createOxyAuthMiddleware = exports.createOptionalOxyAuth = void 0;
+exports.withoutNodeHttpObservation = exports.observeNodeHttp = exports.createEcosystemTraffic = exports.isOfficialWebOrigin = exports.registrableApex = exports.OXY_IDENTITY_CACHE_PREFIXES = exports.oxyUserByIdCacheKey = exports.evictOxyIdentityCache = exports.publishOxyUserInvalidation = exports.createOxyUserInvalidationHandler = exports.verifySecret = exports.verifyCapabilityTicket = exports.readCapabilityAuthorization = exports.issueCapabilityTicket = exports.inputSatisfiesCapabilityLimits = exports.createCapabilityTicketMiddleware = exports.CapabilityTicketError = exports.OXY_CSP_BASELINE = exports.inlineScriptCspHash = exports.formatOxyCspPolicy = exports.extractInlineScripts = exports.cspSourcesFor = exports.createOxySecurityHeaders = exports.buildOxyPagesHeaders = exports.buildOxyCspDirectives = exports.createOxyCors = exports.UPSTREAM_HEADERS_TIMEOUT_MS = exports.MAX_URL_LENGTH = exports.MAX_REDIRECTS = exports.DEFAULT_USER_AGENT = exports.BLOCKED_HOSTNAMES = exports.ALLOWED_PROTOCOLS = exports.ALLOWED_PORTS = exports.UpstreamError = exports.SsrfRejection = exports.safeFetch = exports.isBlockedIp = exports.assertSafePublicUrl = exports.createOxyRateLimit = exports.OXY_SERVICE_ENVIRONMENTS = exports.requireOxyAuth = exports.isOxyAuthenticated = exports.getRequiredOxyUserId = exports.getRequiredOxyBillingPrincipal = exports.getOxyUserId = exports.getOxyRequestAttribution = exports.getOxyDelegatedUserId = exports.getOxyBillingPrincipal = exports.createOxyAuthMiddleware = exports.createOptionalOxyAuth = void 0;
 var auth_1 = require("./auth");
 Object.defineProperty(exports, "createOptionalOxyAuth", { enumerable: true, get: function () { return auth_1.createOptionalOxyAuth; } });
 Object.defineProperty(exports, "createOxyAuthMiddleware", { enumerable: true, get: function () { return auth_1.createOxyAuthMiddleware; } });
@@ -95,3 +95,8 @@ var registrableApex_1 = require("../utils/registrableApex");
 Object.defineProperty(exports, "registrableApex", { enumerable: true, get: function () { return registrableApex_1.registrableApex; } });
 var officialOrigins_1 = require("../utils/officialOrigins");
 Object.defineProperty(exports, "isOfficialWebOrigin", { enumerable: true, get: function () { return officialOrigins_1.isOfficialWebOrigin; } });
+var traffic_1 = require("./traffic");
+Object.defineProperty(exports, "createEcosystemTraffic", { enumerable: true, get: function () { return traffic_1.createEcosystemTraffic; } });
+var trafficNodeHttp_1 = require("./trafficNodeHttp");
+Object.defineProperty(exports, "observeNodeHttp", { enumerable: true, get: function () { return trafficNodeHttp_1.observeNodeHttp; } });
+Object.defineProperty(exports, "withoutNodeHttpObservation", { enumerable: true, get: function () { return trafficNodeHttp_1.withoutNodeHttpObservation; } });