@oxy.so/core 1.18.0 → 3.0.0

package/dist/esm/mixins/OxyServices.reputation.js

@@ -1,286 +0,0 @@
-import { isFullReputationBalance } from '@oxy.so/contracts';
-import { OxyAuthenticationError } from '../OxyServices.errors.js';
-import { CACHE_TIMES } from './mixinHelpers.js';
-/** Cache-key prefix for every cached `GET /reputation/...` response. */
-const REPUTATION_CACHE_PREFIX = 'GET:/reputation/';
-export function OxyServicesReputationMixin(Base) {
-    return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
-        /**
-         * Get ANY user's reputation balance, in whichever view the server serves the
-         * caller.
-         *
-         * A third party gets `userId`, `total` and `trustTier` and nothing else, so
-         * the return type is a {@link ReputationBalanceView} union: narrow it with
-         * {@link isFullReputationBalance} before touching `breakdown`, `influence`
-         * or `reliability`. To read your OWN balance, call
-         * {@link getMyReputationBalance} instead — it returns the full shape with no
-         * narrowing.
-         *
-         * @param userId - The subject user's `_id` or publicKey.
-         */
-        async getReputationBalance(userId) {
-            try {
-                return await this.makeRequest('GET', `/reputation/${encodeURIComponent(userId)}/balance`, undefined, { cache: true, cacheTTL: CACHE_TIMES.MEDIUM });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Get the SIGNED-IN user's own reputation balance, in full.
-         *
-         * The subject view is the only one carrying `breakdown`, `influence` and
-         * `reliability`, and the subject is the common caller, so this is the
-         * ergonomic path: no id to pass, no narrowing to do.
-         *
-         * Throws rather than returning a half-populated object when the request was
-         * not authenticated as the subject — with no signed-in user, and when the
-         * server answered `200` with the public view anyway (which it does for an
-         * absent or lapsed token, since the endpoint's auth is optional). Both mean
-         * the private blocks are simply absent, and a thrown error is the only
-         * honest report of that.
-         */
-        async getMyReputationBalance() {
-            const userId = this.getCurrentUserId();
-            if (!userId) {
-                throw new OxyAuthenticationError('Reading your own reputation balance requires a signed-in user');
-            }
-            let balance;
-            try {
-                balance = await this.makeRequest('GET', `/reputation/${encodeURIComponent(userId)}/balance`, undefined, { cache: true, cacheTTL: CACHE_TIMES.MEDIUM });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-            if (!isFullReputationBalance(balance)) {
-                throw new OxyAuthenticationError('The reputation balance came back as the public view — the request was not authenticated as its subject');
-            }
-            return balance;
-        }
-        /**
-         * Get the reputation leaderboard, ordered by lifetime total descending.
-         * @param limit - Page size (server-capped).
-         * @param offset - Page offset.
-         */
-        async getReputationLeaderboard(limit, offset) {
-            try {
-                const params = {};
-                if (limit !== undefined)
-                    params.limit = limit;
-                if (offset !== undefined)
-                    params.offset = offset;
-                const res = await this.makeRequest('GET', '/reputation/leaderboard', Object.keys(params).length > 0 ? params : undefined, { cache: true, cacheTTL: CACHE_TIMES.LONG });
-                return res.data ?? [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * List the enabled reputation rules (for client display).
-         */
-        async getReputationRules() {
-            try {
-                const res = await this.makeRequest('GET', '/reputation/rules', undefined, { cache: true, cacheTTL: CACHE_TIMES.EXTRA_LONG });
-                return res.rules ?? [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Get a user's paginated reputation ledger, newest first (auth required).
-         * @param userId - The subject user's `_id` or publicKey.
-         * @param limit - Page size (server-capped).
-         * @param offset - Page offset.
-         */
-        async getReputationTransactions(userId, limit, offset) {
-            try {
-                const params = {};
-                if (limit !== undefined)
-                    params.limit = limit;
-                if (offset !== undefined)
-                    params.offset = offset;
-                const res = await this.makeRequest('GET', `/reputation/${encodeURIComponent(userId)}/transactions`, Object.keys(params).length > 0 ? params : undefined, { cache: true, cacheTTL: CACHE_TIMES.SHORT });
-                return res.data ?? [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Get a user's capped influence weight for a given context (auth required).
-         * @param userId - The subject user's `_id` or publicKey.
-         * @param context - The weight axis to read (defaults server-side to `default`).
-         */
-        async getReputationInfluence(userId, context) {
-            try {
-                return await this.makeRequest('GET', `/reputation/${encodeURIComponent(userId)}/influence`, context ? { context } : undefined, { cache: true, cacheTTL: CACHE_TIMES.MEDIUM });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Award (or penalise) reputation to a user by `actionType`. Restricted to
-         * service tokens and platform staff. Invalidates cached reputation reads.
-         * @param input - The award payload (subject, action, source, target, etc.).
-         */
-        async awardReputation(input) {
-            try {
-                const res = await this.makeRequest('POST', '/reputation/award', input, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res.transaction;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Open a dispute against a transaction (auth required; the disputer is the
-         * authenticated user and must own the transaction).
-         * @param input - The transaction id, reason, and optional evidence.
-         */
-        async createReputationDispute(input) {
-            try {
-                const res = await this.makeRequest('POST', '/reputation/disputes', input, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res.dispute;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * List a user's own reputation disputes (auth required; the caller must be
-         * the subject or platform staff).
-         * @param userId - The subject user's `_id` or publicKey.
-         * @param limit - Page size (server-capped).
-         * @param offset - Page offset.
-         */
-        async getUserReputationDisputes(userId, limit, offset) {
-            try {
-                const params = {};
-                if (limit !== undefined)
-                    params.limit = limit;
-                if (offset !== undefined)
-                    params.offset = offset;
-                const res = await this.makeRequest('GET', `/reputation/${encodeURIComponent(userId)}/disputes`, Object.keys(params).length > 0 ? params : undefined, { cache: true, cacheTTL: CACHE_TIMES.SHORT });
-                return res.data ?? [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        // =========================================================================
-        // STAFF / ADMIN METHODS (require staff privileges server-side)
-        // =========================================================================
-        /**
-         * Create or update a reputation rule, keyed by `actionType` (staff only).
-         * Invalidates the cached rule list.
-         * @param input - The rule definition.
-         */
-        async upsertReputationRule(input) {
-            try {
-                const res = await this.makeRequest('POST', '/reputation/rules', input, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res.rule;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Reverse a transaction (staff only): mark the original `reversed` and append
-         * a compensating `active` reversal with negated points. Invalidates cached
-         * reputation reads.
-         * @param transactionId - The transaction's id.
-         * @param input - Optional reason for the reversal.
-         */
-        async reverseReputationTransaction(transactionId, input) {
-            try {
-                const res = await this.makeRequest('POST', `/reputation/transactions/${encodeURIComponent(transactionId)}/reverse`, input ?? {}, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Void a transaction (staff only): mark it `voided` so it is excluded from
-         * the balance, with NO compensating entry. Invalidates cached reputation
-         * reads.
-         * @param transactionId - The transaction's id.
-         * @param input - Optional reason for the void.
-         */
-        async voidReputationTransaction(transactionId, input) {
-            try {
-                const res = await this.makeRequest('POST', `/reputation/transactions/${encodeURIComponent(transactionId)}/void`, input ?? {}, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res.transaction;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Force a recompute of a user's balance snapshot from their active ledger
-         * (staff only). Invalidates cached reputation reads.
-         *
-         * Staff-gated, so the response is always the full subject view — no
-         * narrowing needed.
-         *
-         * @param userId - The subject user's `_id` or publicKey.
-         */
-        async recalculateReputation(userId) {
-            try {
-                const res = await this.makeRequest('POST', `/reputation/${encodeURIComponent(userId)}/recalculate`, undefined, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Get the open dispute queue across all users (staff only).
-         * @param limit - Page size (server-capped).
-         * @param offset - Page offset.
-         */
-        async getReputationDisputeQueue(limit, offset) {
-            try {
-                const params = {};
-                if (limit !== undefined)
-                    params.limit = limit;
-                if (offset !== undefined)
-                    params.offset = offset;
-                const res = await this.makeRequest('GET', '/reputation/disputes', Object.keys(params).length > 0 ? params : undefined, { cache: true, cacheTTL: CACHE_TIMES.SHORT });
-                return res.data ?? [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Resolve a dispute (staff only). Accepting reverses the disputed
-         * transaction; rejecting restores it to `active`. Invalidates cached
-         * reputation reads.
-         * @param disputeId - The dispute's id.
-         * @param input - The resolution (`accepted` or `rejected`).
-         */
-        async resolveReputationDispute(disputeId, input) {
-            try {
-                const res = await this.makeRequest('POST', `/reputation/disputes/${encodeURIComponent(disputeId)}/resolve`, input, { cache: false });
-                this.clearCacheByPrefix(REPUTATION_CACHE_PREFIX);
-                return res.dispute;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-    };
-}

package/dist/esm/mixins/OxyServices.security.js

@@ -1,86 +0,0 @@
-import { logger } from '../logger/index.js';
-export function OxyServicesSecurityMixin(Base) {
-    return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
-        /**
-         * Get user's security activity with pagination
-         * @param limit - Number of results (default: 50, max: 100)
-         * @param offset - Pagination offset (default: 0)
-         * @param eventType - Optional filter by event type
-         * @returns Security activity response with pagination
-         */
-        async getSecurityActivity(limit, offset, eventType) {
-            try {
-                const params = {};
-                if (limit !== undefined)
-                    params.limit = limit;
-                if (offset !== undefined)
-                    params.offset = offset;
-                if (eventType)
-                    params.eventType = eventType;
-                // The API responds with the standard paginated envelope:
-                //   { data: SecurityActivity[], pagination: { total, limit, offset, hasMore } }
-                // SecurityActivityResponse is the flattened shape consumers expect.
-                const raw = await this.makeRequest('GET', '/security/activity', params, { cache: false });
-                const requestedLimit = typeof params.limit === 'number' ? params.limit : 0;
-                const requestedOffset = typeof params.offset === 'number' ? params.offset : 0;
-                return {
-                    data: raw.data ?? [],
-                    total: raw.pagination?.total ?? raw.data?.length ?? 0,
-                    limit: raw.pagination?.limit ?? requestedLimit,
-                    offset: raw.pagination?.offset ?? requestedOffset,
-                    hasMore: raw.pagination?.hasMore ?? false,
-                };
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Get recent security activity (convenience method)
-         * @param limit - Number of recent events to fetch (default: 10)
-         * @returns Array of recent security activities
-         */
-        async getRecentSecurityActivity(limit = 10) {
-            try {
-                const response = await this.getSecurityActivity(limit, 0);
-                return response.data || [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Log private key exported event
-         * @param deviceId - Optional device ID for tracking
-         * @returns Promise that resolves when event is logged
-         */
-        async logPrivateKeyExported(deviceId) {
-            try {
-                await this.makeRequest('POST', '/security/activity/private-key-exported', { deviceId }, { cache: false });
-            }
-            catch (error) {
-                // Don't throw - logging failures shouldn't break user flow, but surface
-                // for monitoring via the shared logger sink.
-                logger.warn('[OxyServices] Failed to log private key exported event', { component: 'OxyServices.security' }, error);
-            }
-        }
-        /**
-         * Log backup created event
-         * @param deviceId - Optional device ID for tracking
-         * @returns Promise that resolves when event is logged
-         */
-        async logBackupCreated(deviceId) {
-            try {
-                await this.makeRequest('POST', '/security/activity/backup-created', { deviceId }, { cache: false });
-            }
-            catch (error) {
-                // Don't throw - logging failures shouldn't break user flow, but surface
-                // for monitoring via the shared logger sink.
-                logger.warn('[OxyServices] Failed to log backup created event', { component: 'OxyServices.security' }, error);
-            }
-        }
-    };
-}

package/dist/esm/mixins/OxyServices.store.js

@@ -1,263 +0,0 @@
-import { CACHE_TIMES } from './mixinHelpers.js';
-/** Read one page out of that envelope. */
-function pageOf(res) {
-    return {
-        items: res.data ?? [],
-        total: res.pagination?.total ?? 0,
-        hasMore: res.pagination?.hasMore ?? false,
-    };
-}
-/**
- * Build a query string from the options that were actually supplied.
- *
- * Generic over the options object rather than taking a `Record`: an interface
- * has no implicit index signature in TypeScript, so `StoreReviewsOptions` would
- * not be assignable to one and every call site would need a cast.
- */
-function queryOf(params) {
-    const search = new URLSearchParams();
-    for (const [key, value] of Object.entries(params)) {
-        if (value !== undefined)
-            search.set(key, String(value));
-    }
-    const rendered = search.toString();
-    return rendered ? `?${rendered}` : '';
-}
-export function OxyServicesStoreMixin(Base) {
-    return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
-        // =========================================================================
-        // The storefront — /store. No authentication: everything served is public.
-        // =========================================================================
-        /** The shelves, in the order the store curates them. */
-        async listStoreCategories() {
-            try {
-                const res = await this.makeRequest('GET', '/store/categories', undefined, { cache: true, cacheTTL: CACHE_TIMES.MEDIUM });
-                return res.data ?? [];
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Published listings, newest first, optionally one shelf.
-         *
-         * An unknown category slug is an EMPTY shelf, not every app on the store —
-         * so a typo shows nothing rather than showing everything.
-         *
-         * @param options - `category` is a category slug; `limit` defaults to 24.
-         */
-        async listStoreApps(options = {}) {
-            try {
-                const res = await this.makeRequest('GET', `/store/apps${queryOf(options)}`, undefined, { cache: true, cacheTTL: CACHE_TIMES.SHORT });
-                return pageOf(res);
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * One store page.
-         *
-         * A draft answers 404 exactly as an unknown slug does: whether an
-         * unpublished page exists under a name is not something a visitor learns.
-         *
-         * @param slug - The listing's public slug, not an application id.
-         */
-        async getStoreApp(slug) {
-            try {
-                const res = await this.makeRequest('GET', `/store/apps/${encodeURIComponent(slug)}`, undefined, { cache: true, cacheTTL: CACHE_TIMES.SHORT });
-                return res.data;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /** Visible reviews for a published app, each with the publisher's reply. */
-        async listStoreReviews(slug, options = {}) {
-            try {
-                const res = await this.makeRequest('GET', `/store/apps/${encodeURIComponent(slug)}/reviews${queryOf(options)}`, undefined, { cache: true, cacheTTL: CACHE_TIMES.SHORT });
-                return pageOf(res);
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        // =========================================================================
-        // Reviewing — any signed-in Oxy account
-        // =========================================================================
-        /** The caller's own review of an app, or `null` if they have not written one. */
-        async getMyStoreReview(slug) {
-            try {
-                const res = await this.makeRequest('GET', `/store/apps/${encodeURIComponent(slug)}/review`, undefined, { cache: false });
-                return res.data ?? null;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Write the caller's review, or replace what they said before.
-         *
-         * A person has one review per app, so this sets it rather than adding one.
-         * Rewriting does not clear a moderator's decision: a hidden review stays
-         * hidden when its author edits it.
-         */
-        async writeStoreReview(slug, input) {
-            try {
-                const res = await this.makeRequest('PUT', `/store/apps/${encodeURIComponent(slug)}/review`, input, { cache: false });
-                return res.data;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /** Withdraw the caller's own review. A real delete — the words were theirs. */
-        async deleteMyStoreReview(slug) {
-            try {
-                await this.makeRequest('DELETE', `/store/apps/${encodeURIComponent(slug)}/review`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Answer a review on the publisher's behalf.
-         *
-         * Requires `app:update` over the application's owning account — the same
-         * permission that guards every other write to that application. Addressed
-         * by review id because the reply belongs to the review, and a listing can be
-         * renamed or withdrawn out from under it.
-         */
-        async replyToStoreReview(reviewId, body) {
-            try {
-                const res = await this.makeRequest('PUT', `/store/reviews/${encodeURIComponent(reviewId)}/reply`, { body }, { cache: false });
-                return res.data;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /** Withdraw the publisher's answer. Same permission that wrote it. */
-        async deleteStoreReviewReply(reviewId) {
-            try {
-                await this.makeRequest('DELETE', `/store/reviews/${encodeURIComponent(reviewId)}/reply`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        // =========================================================================
-        // The publisher's listing — /applications/:appId/listing
-        // =========================================================================
-        /** The application's store page in whatever state, or `null` if it has none. */
-        async getAppListing(applicationId) {
-            try {
-                return await this.makeRequest('GET', `/applications/${encodeURIComponent(applicationId)}/listing`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Create the page or replace its content. Never its status.
-         *
-         * Editing does not move a page: correcting a typo on a live listing leaves
-         * it live, and fixing a rejected one does not re-submit it.
-         */
-        async writeAppListing(applicationId, input) {
-            try {
-                return await this.makeRequest('PUT', `/applications/${encodeURIComponent(applicationId)}/listing`, input, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /** Hand the page to the store for review. From a draft, or a rejected page once fixed. */
-        async submitAppListing(applicationId) {
-            try {
-                return await this.makeRequest('POST', `/applications/${encodeURIComponent(applicationId)}/listing/submit`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Take the page down, or withdraw it from the queue.
-         *
-         * Back to a draft, never deleted: the slug, the words and the screenshots
-         * are the publisher's work, and the reviews were never the listing's to take
-         * with them.
-         */
-        async unpublishAppListing(applicationId) {
-            try {
-                return await this.makeRequest('POST', `/applications/${encodeURIComponent(applicationId)}/listing/unpublish`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        // =========================================================================
-        // Screenshots
-        // =========================================================================
-        /** Every picture on the listing, in the author's order. */
-        async listAppListingScreenshots(applicationId) {
-            try {
-                return await this.makeRequest('GET', `/applications/${encodeURIComponent(applicationId)}/listing/screenshots`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Attach an already-uploaded image, appended to the end.
-         *
-         * Upload through the assets surface first; the store keeps a reference
-         * rather than a second copy of the asset pipeline. The file must be live, an
-         * image, and one the caller is entitled to.
-         */
-        async addAppListingScreenshot(applicationId, input) {
-            try {
-                return await this.makeRequest('POST', `/applications/${encodeURIComponent(applicationId)}/listing/screenshots`, input, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /** Edit a picture's caption or the frame it was taken in. Order is {@link reorderAppListingScreenshots}. */
-        async updateAppListingScreenshot(applicationId, screenshotId, input) {
-            try {
-                return await this.makeRequest('PATCH', `/applications/${encodeURIComponent(applicationId)}/listing/screenshots/${encodeURIComponent(screenshotId)}`, input, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /** Remove a picture. The uploaded file stays — it may be in use elsewhere. */
-        async deleteAppListingScreenshot(applicationId, screenshotId) {
-            try {
-                await this.makeRequest('DELETE', `/applications/${encodeURIComponent(applicationId)}/listing/screenshots/${encodeURIComponent(screenshotId)}`, undefined, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Set the order of every picture at once.
-         *
-         * Send EVERY id on the listing, exactly once, in the order they should
-         * appear. A partial list is rejected rather than applied: it would leave the
-         * pictures it omits at their old positions, interleaved with the new ones.
-         */
-        async reorderAppListingScreenshots(applicationId, screenshotIds) {
-            try {
-                return await this.makeRequest('PUT', `/applications/${encodeURIComponent(applicationId)}/listing/screenshots/order`, { screenshotIds }, { cache: false });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-    };
-}