@oxy.so/core 1.18.1 → 3.0.0

package/dist/cjs/mixins/OxyServices.agency.js

@@ -1,154 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OxyServicesAgencyMixin = OxyServicesAgencyMixin;
-const mixinHelpers_1 = require("./mixinHelpers");
-function query(path, key, value) {
-    return `${path}?${key}=${encodeURIComponent(value)}`;
-}
-function OxyServicesAgencyMixin(Base) {
-    return class extends Base {
-        async listAvailableCapabilityCatalogs(accountId) {
-            try {
-                const response = await this.makeRequest('GET', query('/capabilities/catalogs/available', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.MEDIUM });
-                return response.catalogs;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async listDelegationGrants(ownerAccountId) {
-            try {
-                const response = await this.makeRequest('GET', query('/capabilities/grants', 'ownerAccountId', ownerAccountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
-                return response.grants;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async createDelegationGrant(input) {
-            try {
-                const response = await this.makeRequest('POST', '/capabilities/grants', input, { cache: false });
-                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(input.ownerAccountId)}`);
-                return response.grant;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async revokeDelegationGrant(grantId, ownerAccountId) {
-            try {
-                await this.makeRequest('DELETE', `/capabilities/grants/${encodeURIComponent(grantId)}`, undefined, { cache: false });
-                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async updateDelegationGrant(grantId, ownerAccountId, input) {
-            try {
-                const response = await this.makeRequest('PUT', `/capabilities/grants/${encodeURIComponent(grantId)}`, input, { cache: false });
-                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
-                return response.grant;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async listAccountCapabilityPolicies(accountId) {
-            try {
-                const response = await this.makeRequest('GET', query('/capabilities/account-policies', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
-                return response.policies;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async putAccountCapabilityPolicy(appId, input) {
-            try {
-                const response = await this.makeRequest('PUT', `/capabilities/account-policies/${encodeURIComponent(appId)}`, input, { cache: false });
-                this.clearCacheEntry(`GET:/capabilities/account-policies?accountId=${encodeURIComponent(input.accountId)}`);
-                return response.policy;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async deleteAccountCapabilityPolicy(appId, accountId) {
-            try {
-                await this.makeRequest('DELETE', `/capabilities/account-policies/${encodeURIComponent(appId)}?accountId=${encodeURIComponent(accountId)}`, undefined, { cache: false });
-                this.clearCacheEntry(`GET:/capabilities/account-policies?accountId=${encodeURIComponent(accountId)}`);
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async listCapabilityExecutionAuthorizations(ownerAccountId) {
-            try {
-                const response = await this.makeRequest('GET', query('/capabilities/execution-authorizations', 'ownerAccountId', ownerAccountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
-                return response.authorizations;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async revokeCapabilityExecutionAuthorization(authorizationId, ownerAccountId) {
-            try {
-                await this.makeRequest('DELETE', `/capabilities/execution-authorizations/${encodeURIComponent(authorizationId)}`, undefined, { cache: false });
-                this.clearCacheEntry(`GET:/capabilities/execution-authorizations?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        async listCapabilityAuditEvents(accountId) {
-            try {
-                const response = await this.makeRequest('GET', query('/capabilities/audit', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
-                return response.events;
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Product backend → Oxy: trade the signed-in requester's access token for a
-         * one-use assertion naming `agentId` (ADR 0025). Authenticated with THIS
-         * instance's service credential (`configureServiceAuth`). `subjectToken` is
-         * sent to Oxy only, in the body; never forward it anywhere else.
-         *
-         * Not retried: a refusal is an answer, and the caller mints per turn.
-         */
-        async mintRequesterAssertion(input) {
-            try {
-                const serviceToken = await this.getServiceToken();
-                return await this.makeRequest('POST', '/internal/native-agents/requester-assertions', { agentId: input.agentId, subjectToken: input.subjectToken }, {
-                    cache: false,
-                    retry: false,
-                    timeout: 5000,
-                    headers: { Authorization: `Bearer ${serviceToken}` },
-                });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Audience → Oxy: verify, live-revalidate and CONSUME an assertion. A second
-         * call with the same assertion answers `active: false`. Authenticated with
-         * the audience's own service credential.
-         */
-        async introspectRequesterAssertion(input) {
-            try {
-                const serviceToken = await this.getServiceToken();
-                return await this.makeRequest('POST', '/internal/native-agents/requester-assertions/introspect', { assertion: input.assertion, presenter: input.presenter }, {
-                    cache: false,
-                    retry: false,
-                    timeout: 5000,
-                    headers: { Authorization: `Bearer ${serviceToken}` },
-                });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-    };
-}

package/dist/cjs/mixins/OxyServices.analytics.js

@@ -1,49 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OxyServicesAnalyticsMixin = OxyServicesAnalyticsMixin;
-const mixinHelpers_1 = require("./mixinHelpers");
-function OxyServicesAnalyticsMixin(Base) {
-    return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
-        /**
-         * Track an analytics event
-         * @param eventName - Name of the event to track
-         * @param properties - Optional event properties
-         */
-        async trackEvent(eventName, properties) {
-            try {
-                await this.makeRequest('POST', '/analytics/events', {
-                    event: eventName,
-                    properties
-                }, { cache: false, retry: false }); // Don't retry analytics events
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-        /**
-         * Get analytics data for a date range
-         * @param startDate - Optional start date (ISO string)
-         * @param endDate - Optional end date (ISO string)
-         * @returns Analytics data
-         */
-        async getAnalytics(startDate, endDate) {
-            try {
-                const params = {};
-                if (startDate)
-                    params.startDate = startDate;
-                if (endDate)
-                    params.endDate = endDate;
-                return await this.makeRequest('GET', '/analytics', params, {
-                    cache: true,
-                    cacheTTL: mixinHelpers_1.CACHE_TIMES.LONG,
-                });
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
-    };
-}

package/dist/cjs/mixins/OxyServices.appData.js

@@ -1,108 +0,0 @@
-"use strict";
-/**
- * Per-user App-Data Mixin
- *
- * Thin client around `/users/me/app-data/...` — a generic per-user JSON KV
- * store on the API. Authenticated callers can read, write, list, and delete
- * entries scoped to their own user account.
- *
- * Identifier rules (must match the API):
- *   - Both `namespace` and `key` must match `/^[a-z0-9_-]{1,64}$/u`.
- *
- * Limits (enforced by the API):
- *   - Serialized JSON values are capped at 64 KB.
- *   - Writes are rate-limited to 100 / minute / user.
- *
- * Intended use cases are small bits of cross-device app state — e.g. Academy
- * course progress, "last viewed" markers, dismissed banner flags. Do not use
- * this for large blobs or anything that needs server-side querying; it's a
- * write-it-and-read-it-back store.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OxyAppDataIdentifierError = void 0;
-exports.OxyServicesAppDataMixin = OxyServicesAppDataMixin;
-/**
- * Identifier validator — mirror of the API regex. Validating client-side
- * gives consumers a clean throw before the request even leaves the device.
- */
-const APP_DATA_IDENTIFIER_PATTERN = /^[a-z0-9_-]{1,64}$/u;
-/** Thrown when a namespace or key fails the kebab/snake-case validator. */
-class OxyAppDataIdentifierError extends Error {
-    constructor(field, value) {
-        super(`Invalid app-data ${field} "${value}": must match [a-z0-9_-]{1,64} (lowercase letters, digits, dashes, underscores).`);
-        this.name = 'OxyAppDataIdentifierError';
-    }
-}
-exports.OxyAppDataIdentifierError = OxyAppDataIdentifierError;
-function assertIdentifier(field, value) {
-    if (!APP_DATA_IDENTIFIER_PATTERN.test(value)) {
-        throw new OxyAppDataIdentifierError(field, value);
-    }
-}
-function OxyServicesAppDataMixin(Base) {
-    return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
-        /**
-         * Read the value stored under `(namespace, key)` for the current user.
-         *
-         * @returns The previously-stored value, or `null` if nothing has been
-         *   stored yet. Never throws on "not found" — a missing entry is
-         *   semantically a `null` value.
-         */
-        async getAppData(namespace, key) {
-            assertIdentifier('namespace', namespace);
-            assertIdentifier('key', key);
-            return this.withAuthRetry(async () => {
-                const response = await this.makeRequest('GET', `/users/me/app-data/${encodeURIComponent(namespace)}/${encodeURIComponent(key)}`, undefined, { cache: false });
-                return response?.value ?? null;
-            }, 'getAppData');
-        }
-        /**
-         * Upsert the value under `(namespace, key)` for the current user.
-         *
-         * Returns the value the server confirmed it stored — typically the same
-         * value the caller passed in, but consumers should prefer the returned
-         * value (the API is the source of truth).
-         *
-         * @throws OxyAppDataIdentifierError when namespace or key is malformed.
-         */
-        async setAppData(namespace, key, value) {
-            assertIdentifier('namespace', namespace);
-            assertIdentifier('key', key);
-            return this.withAuthRetry(async () => {
-                const response = await this.makeRequest('PUT', `/users/me/app-data/${encodeURIComponent(namespace)}/${encodeURIComponent(key)}`, { value }, { cache: false });
-                // The server echoes the stored value back; fall back to the caller's
-                // input only if the server somehow omitted it (defensive — the route
-                // always sets it).
-                return (response?.value ?? value);
-            }, 'setAppData');
-        }
-        /**
-         * Delete the value stored under `(namespace, key)` for the current user.
-         *
-         * Idempotent — resolves successfully whether or not the entry existed.
-         */
-        async deleteAppData(namespace, key) {
-            assertIdentifier('namespace', namespace);
-            assertIdentifier('key', key);
-            await this.withAuthRetry(async () => {
-                await this.makeRequest('DELETE', `/users/me/app-data/${encodeURIComponent(namespace)}/${encodeURIComponent(key)}`, undefined, { cache: false });
-            }, 'deleteAppData');
-        }
-        /**
-         * List every entry stored under `namespace` for the current user.
-         *
-         * Returns an empty object when the namespace contains no entries (the
-         * endpoint never 404s on an empty namespace).
-         */
-        async listAppData(namespace) {
-            assertIdentifier('namespace', namespace);
-            return this.withAuthRetry(async () => {
-                const response = await this.makeRequest('GET', `/users/me/app-data/${encodeURIComponent(namespace)}`, undefined, { cache: false });
-                return response?.entries ?? {};
-            }, 'listAppData');
-        }
-    };
-}