@oxy.so/core 1.7.3 → 1.7.4

package/dist/types/mixins/OxyServices.auth.d.ts

@@ -391,10 +391,13 @@ export declare function OxyServicesAuthMixin<T extends typeof OxyServicesBase>(B
         /**
          * Whether this process can prove what it is (ADR 0026).
          *
-         * The internal package subpath selects a client implementation for native
-         * and browser bundlers, and the signer only for Node hosts. The runtime
-         * Node guard avoids calling attestation on clients; the module boundary
-         * keeps node:crypto out of their bundle graphs (a guard alone cannot).
+         * `#workload-identity` (package.json `imports`) selects a client
+         * implementation for native and browser bundlers, and the signer only for
+         * Node hosts. The runtime Node guard avoids calling attestation on clients;
+         * the module boundary keeps node:crypto out of their bundle graphs (a guard
+         * alone cannot). It is a package import, not a self-reference to an export
+         * subpath: a self-reference only resolves where `@oxy.so/core` is reachable
+         * through `node_modules`, which bundlers inside this workspace are not.
          *
          * @internal
          */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/core",
-  "version": "1.7.3",
+  "version": "1.7.4",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -59,17 +59,7 @@
       },
       "default": "./dist/esm/logger/index.js"
     },
-    "./package.json": "./package.json",
-    "./internal/workload-identity": {
-      "types": "./dist/types/server/workloadIdentity.d.ts",
-      "react-native": "./dist/esm/server/workloadIdentity.client.js",
-      "browser": "./dist/esm/server/workloadIdentity.client.js",
-      "node": {
-        "import": "./dist/esm/server/workloadIdentity.js",
-        "require": "./dist/cjs/server/workloadIdentity.js"
-      },
-      "default": "./dist/esm/server/workloadIdentity.client.js"
-    }
+    "./package.json": "./package.json"
   },
   "files": [
     "NOTICE",

package/src/mixins/OxyServices.auth.ts

@@ -647,17 +647,20 @@ export function OxyServicesAuthMixin<T extends typeof OxyServicesBase>(Base: T)
     /**
      * Whether this process can prove what it is (ADR 0026).
      *
-     * The internal package subpath selects a client implementation for native
-     * and browser bundlers, and the signer only for Node hosts. The runtime
-     * Node guard avoids calling attestation on clients; the module boundary
-     * keeps node:crypto out of their bundle graphs (a guard alone cannot).
+     * `#workload-identity` (package.json `imports`) selects a client
+     * implementation for native and browser bundlers, and the signer only for
+     * Node hosts. The runtime Node guard avoids calling attestation on clients;
+     * the module boundary keeps node:crypto out of their bundle graphs (a guard
+     * alone cannot). It is a package import, not a self-reference to an export
+     * subpath: a self-reference only resolves where `@oxy.so/core` is reachable
+     * through `node_modules`, which bundlers inside this workspace are not.
      *
      * @internal
      */
     async _canUseWorkloadIdentity(): Promise<boolean> {
       if (typeof process === 'undefined' || !process.versions?.node) return false;
       try {
-        const { canAttestWorkloadIdentity } = await import('@oxy.so/core/internal/workload-identity');
+        const { canAttestWorkloadIdentity } = await import('#workload-identity');
         return canAttestWorkloadIdentity();
       } catch {
         // A bundler that dropped the server subpath, or a runtime without it.
@@ -684,7 +687,7 @@ export function OxyServicesAuthMixin<T extends typeof OxyServicesBase>(Base: T)
       if (entry?.token && entry.expiresAt > now + 60_000) return entry.token;
       if (entry?.pending) return entry.pending;
 
-      const { requestWorkloadServiceToken } = await import('@oxy.so/core/internal/workload-identity');
+      const { requestWorkloadServiceToken } = await import('#workload-identity');
       const seeded = entry ?? {
         token: '',
         expiresAt: 0,