@oxy.so/core 1.8.0 → 1.9.0

package/dist/esm/crypto/polyfill.js

@@ -13,8 +13,23 @@
  *   2. Node — backed by the built-in `node:crypto` module (`webcrypto`, else
  *      `randomFillSync`). This is what a Node runtime WITHOUT a global WebCrypto
  *      (Node 18 script entrypoints, some embedded hosts) falls back to.
- *   3. React Native — `expo-crypto.getRandomBytes` (statically imported via the
- *      per-platform `platform/crypto` module in `@oxy.so/protocol`).
+ *   3. React Native — `expo-crypto.getRandomBytes`, through the dependency-free
+ *      `@oxy.so/protocol/random` entry.
+ *
+ * # Evaluation order — this module must import NOTHING that can capture the global
+ *
+ * `@noble/hashes` 1.x reads `globalThis.crypto` exactly once, when its
+ * `crypto.js` is evaluated, and `randomBytes` uses that captured binding for
+ * the lifetime of the app. ES imports are evaluated before the importing
+ * module's body, so every module this file imports runs BEFORE the shim below
+ * is installed. This file used to import `@oxy.so/protocol`'s root entry,
+ * which reaches `@noble/curves` → `@noble/hashes` through the envelope signer:
+ * on Hermes (no `globalThis.crypto` at startup) noble captured `undefined`
+ * before the shim existed, and every identity creation on Android failed with
+ * `crypto.getRandomValues must be defined`. Its imports are therefore limited
+ * to `buffer` and `@oxy.so/protocol/random`, both free of crypto libraries,
+ * and `index.ts` imports this file first. `__tests__/polyfillOrder.test.ts`
+ * guards both halves.
  *
  * Historically step (2) delegated to `@oxy.so/protocol`'s RN-only
  * `getRandomBytesRN`, which THROWS on Node — so any Node host lacking a global
@@ -23,7 +38,7 @@
  */
 import _cjs_buffer from 'buffer';
 const { Buffer } = _cjs_buffer;
-import { getRandomBytesRN, isNodeJS } from '@oxy.so/protocol';
+import { getRandomBytesRN, isNodeJS } from '@oxy.so/protocol/random';
 const getGlobalObject = () => {
     if (typeof globalThis !== 'undefined')
         return globalThis;
@@ -112,7 +127,7 @@ const cryptoPolyfill = {
             return array;
         }
         // React Native (and any non-Node host without WebCrypto): synchronous
-        // expo-crypto via @oxy.so/protocol's RN `platform/crypto` variant.
+        // expo-crypto via @oxy.so/protocol's RN `platform/random` variant.
         const bytes = getRandomBytesRN(array.byteLength);
         const uint8View = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
         uint8View.set(bytes);

package/dist/esm/i18n/locales/en-US.json

@@ -1850,6 +1850,7 @@
             "switch": {
                 "title": "Switch account",
                 "count": "{{count}} accounts",
+                "countOne": "{{count}} account",
                 "empty": "Accounts you own or share"
             }
         },
@@ -1970,7 +1971,8 @@
             "loading": "Loading sessions…",
             "empty": "No active sessions",
             "signOutAllOnThisDevice": "Sign out of all other devices",
-            "signOutAllSubtitle": "End {{count}} other device session(s)"
+            "signOutAllSubtitle": "End {{count}} other device session(s)",
+            "otherSession": "Another session"
         },
         "confirms": {
             "removeDeviceTitle": "Remove device",

package/dist/esm/i18n/locales/es-ES.json

@@ -1850,6 +1850,7 @@
             "switch": {
                 "title": "Cambiar de cuenta",
                 "count": "{{count}} cuentas",
+                "countOne": "{{count}} cuenta",
                 "empty": "Cuentas que posees o compartes"
             }
         },
@@ -1970,7 +1971,8 @@
             "loading": "Cargando sesiones…",
             "empty": "No hay sesiones activas",
             "signOutAllOnThisDevice": "Cerrar sesión en los demás dispositivos",
-            "signOutAllSubtitle": "Finalizar {{count}} sesión(es) de otros dispositivos"
+            "signOutAllSubtitle": "Finalizar {{count}} sesión(es) de otros dispositivos",
+            "otherSession": "Otra sesión"
         },
         "confirms": {
             "removeDeviceTitle": "Eliminar dispositivo",

package/dist/esm/i18n/locales/locales/en-US.json

@@ -1850,6 +1850,7 @@
       "switch": {
         "title": "Switch account",
         "count": "{{count}} accounts",
+        "countOne": "{{count}} account",
         "empty": "Accounts you own or share"
       }
     },
@@ -1970,7 +1971,8 @@
       "loading": "Loading sessions…",
       "empty": "No active sessions",
       "signOutAllOnThisDevice": "Sign out of all other devices",
-      "signOutAllSubtitle": "End {{count}} other device session(s)"
+      "signOutAllSubtitle": "End {{count}} other device session(s)",
+      "otherSession": "Another session"
     },
     "confirms": {
       "removeDeviceTitle": "Remove device",

package/dist/esm/i18n/locales/locales/es-ES.json

@@ -1850,6 +1850,7 @@
       "switch": {
         "title": "Cambiar de cuenta",
         "count": "{{count}} cuentas",
+        "countOne": "{{count}} cuenta",
         "empty": "Cuentas que posees o compartes"
       }
     },
@@ -1970,7 +1971,8 @@
       "loading": "Cargando sesiones…",
       "empty": "No hay sesiones activas",
       "signOutAllOnThisDevice": "Cerrar sesión en los demás dispositivos",
-      "signOutAllSubtitle": "Finalizar {{count}} sesión(es) de otros dispositivos"
+      "signOutAllSubtitle": "Finalizar {{count}} sesión(es) de otros dispositivos",
+      "otherSession": "Otra sesión"
     },
     "confirms": {
       "removeDeviceTitle": "Eliminar dispositivo",

package/dist/esm/index.js

@@ -16,7 +16,10 @@
  * Every export below is NOMINAL — no `export *`, no barrels, no compat shims.
  * If a symbol does not appear here, it is NOT part of the public API.
  */
-// Ensure crypto polyfills are loaded before anything else
+// Ensure crypto polyfills are loaded before anything else. This MUST stay the
+// first import: `@noble/hashes` captures `globalThis.crypto` when it is
+// evaluated, so the shim has to exist before any module below reaches it (see
+// the evaluation-order note in `./crypto/polyfill`).
 import './crypto/polyfill.js';
 // ---------------------------------------------------------------------------
 // API client

package/dist/esm/session/accountDialogController.js

@@ -329,16 +329,25 @@ export class AccountDialogController {
         }
         // Signed out. The directory is bearer-read and `SessionClient` drops the one
         // it holds when the device empties, so there is nothing to clear here — only
-        // the in-flight bookkeeping, which no longer describes anything.
+        // the in-flight bookkeeping, which no longer describes anything. The account
+        // menu described the account that just left, so it gives way to the entry.
         this.error = null;
         this.loading = false;
+        this.view = this.resolveView(this.view);
         this.emit();
     }
     // =========================================================================
     // View actions
     // =========================================================================
-    /** Set the dialog view directly. */
-    setView(view) {
+    /**
+     * Set the dialog view directly.
+     *
+     * `'accounts'` is only honoured with a session. Signed out it lands on the
+     * sign-in entry instead — the menu it would open holds "Switch account",
+     * storage and "Sign out" for an account that does not exist.
+     */
+    setView(requested) {
+        const view = this.resolveView(requested);
         if (this.view === view)
             return;
         this.view = view;
@@ -351,6 +360,37 @@ export class AccountDialogController {
         }
         this.emit();
     }
+    /**
+     * Go back one step: `signup` and `qr` return to the sign-in entry, and the
+     * entry returns to the account menu when somebody is signed in.
+     *
+     * Returns `false` — changing nothing — when the current view is the dialog's
+     * first one, so the host closes the dialog instead. Leaving an active
+     * request withdraws it; otherwise its authorize code stays approvable until
+     * it expires.
+     */
+    back() {
+        const target = backViewOf(this.view, this.hasSession());
+        if (target === null)
+            return false;
+        if (this.signIn.phase === 'starting' || this.signIn.phase === 'waiting') {
+            this.cancelSignIn();
+        }
+        this.setView(target);
+        return true;
+    }
+    /** `'accounts'` needs a session; without one the sign-in entry stands in for it. */
+    resolveView(view) {
+        return view === 'accounts' && !this.hasSession() ? 'signin' : view;
+    }
+    /**
+     * Whether an account is signed in here — the precondition of the account
+     * menu. The bearer, not the directory: the directory is bearer-read, and the
+     * menu's content (hero, storage, sign-out) is all about the bearer's account.
+     */
+    hasSession() {
+        return this.isAuthenticated();
+    }
     /** Switch to the "add account" view (the sign-in entry chooser). */
     add() {
         this.setView('add');
@@ -1285,8 +1325,13 @@ export class AccountDialogController {
     }
     computeSnapshot() {
         const directory = this.sessionClient.getDirectory();
+        const hasSession = this.hasSession();
+        // Resolved here as well as in `setView`: the controller is constructed on
+        // `'accounts'` before anyone knows whether a bearer exists.
+        const view = this.resolveView(this.view);
         return {
-            view: this.view,
+            view,
+            backView: backViewOf(view, hasSession),
             directory,
             activeContext: resolveActiveContext(directory),
             loading: this.loading,
@@ -1311,6 +1356,29 @@ export class AccountDialogController {
         }
     }
 }
+/**
+ * The view one step back from `view`, or `null` when `view` is the dialog's
+ * first view.
+ *
+ * The sign-in entry is `'add'` ("add another account") when somebody is signed
+ * in and `'signin'` when nobody is; `signup` and `qr` are reached FROM that
+ * entry, so they return to it. The entry itself returns to the account menu —
+ * which exists only with a session. This used to be a host-side
+ * "back = accounts" that assumed a signed-in origin, so a signed-out Back from
+ * "Create your account" opened a menu holding "Sign out" for nobody.
+ */
+export function backViewOf(view, hasSession) {
+    switch (view) {
+        case 'signup':
+        case 'qr':
+            return hasSession ? 'add' : 'signin';
+        case 'add':
+            return hasSession ? 'accounts' : null;
+        case 'signin':
+        case 'accounts':
+            return null;
+    }
+}
 /** Factory mirroring `createSessionClient`, for ergonomic wiring by consumers. */
 export function createAccountDialogController(options) {
     return new AccountDialogController(options);