@oxy.so/core 1.10.0 → 1.11.0

package/src/models/interfaces.ts

@@ -115,6 +115,13 @@ export interface User {
    * lists, profile search) — the two are separate fields on the User document.
    */
   description?: string;
+  /**
+   * ActivityPub actor URIs this account is also known as — its live,
+   * OAuth-proven linked Mastodon-API accounts. Emitted by
+   * `GET /profiles/username/:username`; a relying app passes it to the shared
+   * actor builder (`@oxy.so/federation`) so its actor publishes it.
+   */
+  alsoKnownAs?: string[];
   phone?: string;
   address?: string;
   /** Legacy free-text birthday, kept for backward compatibility. Prefer `dateOfBirth`. */
@@ -263,7 +270,22 @@ export interface LoginResponse {
 export interface Notification {
   id: string;
   message: string;
-  // Add other notification fields as needed
+  /** One of `OXY_NOTIFICATION_TYPES` (`@oxy.so/contracts`). */
+  type?: string;
+  /**
+   * `system` notifications only (with `message`): the text an Oxy service sent
+   * about the recipient's own account. Render these two instead of composing a
+   * sentence from actor + entity.
+   */
+  title?: string;
+  /** `system` notifications only: an optional deep link (https or the sending app's scheme). */
+  url?: string;
+  /**
+   * What `entityId` names: `post` | `reply` | `profile`, or `app` — an opaque id
+   * in the notifying application's namespace (`system` notifications only).
+   */
+  entityType?: string;
+  entityId?: string;
 }
 
 export interface Wallet {
@@ -666,6 +688,13 @@ export interface ServiceAssetMetadata {
    * play. Treat absence as "no adaptive stream, play the progressive original".
    */
   hlsReadyAt?: string;
+  /**
+   * The Oxy user who owns the file (`null` for a system-owned file such as the
+   * federated media cache). PRESENT ONLY for Oxy's own applications (service
+   * tokens with `tier: 'internal'`), so a first-party service can check that an
+   * asset a user attached is really that user's. Absent for every other caller.
+   */
+  ownerUserId?: string | null;
 }
 
 /**

package/src/server/__tests__/securityHeaders.test.ts

@@ -211,6 +211,13 @@ describe('@oxy.so/core/server buildOxyPagesHeaders on a sensitive origin (ADR 00
     expect(sensitive).toContain('https://api.oxy.so');
     expect(sensitive).toContain("frame-ancestors 'none'");
   });
+
+  it('sends no-transform so the edge never injects the beacon, and only there', () => {
+    expect(buildOxyPagesHeaders({ sensitive: true })).toContain(
+      'Cache-Control: public, max-age=0, must-revalidate, no-transform',
+    );
+    expect(buildOxyPagesHeaders()).not.toContain('Cache-Control');
+  });
 });
 
 describe('@oxy.so/core/server extractInlineScripts', () => {

package/src/server/securityHeaders.ts

@@ -366,6 +366,11 @@ export interface OxyPagesHeadersOptions {
    * the app — is REMOVED from `script-src` and `connect-src`, so third-party
    * measurement cannot run there even when the zone has Web Analytics enabled.
    * A structural block in the policy the page is served with, not a build flag.
+   *
+   * It also sends `Cache-Control: no-transform`, which stops the edge from
+   * injecting the beacon at all — otherwise every page load logs a CSP
+   * violation for a script we never asked for. The rest of the value is Pages'
+   * own default, so caching is unchanged.
    */
   sensitive?: boolean;
   /**
@@ -429,6 +434,9 @@ export function buildOxyPagesHeaders(options: OxyPagesHeadersOptions = {}): stri
   if (options.hsts !== false) {
     lines.push('  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload');
   }
+  if (options.sensitive) {
+    lines.push('  Cache-Control: public, max-age=0, must-revalidate, no-transform');
+  }
   lines.push('');
   return lines.join('\n');
 }