@oxy.so/core 4.5.0-oxy-one.1 → 4.5.0

package/dist/cjs/api/identity.js

@@ -131,14 +131,19 @@ class IdentityApi {
      * verification-method fragment.
      */
     async authMethods() {
-        return this.ctx.request('GET', '/auth/methods', undefined, { cache: true, cacheTTL: SHORT_TTL });
+        return this.ctx.request('GET', '/auth/methods', undefined, {
+            cache: true,
+            cacheTTL: SHORT_TTL,
+        });
     }
     /**
      * How the signed-in account is kept (ADR 0029 D3): whether Commons' root is
      * linked (self-custody), or the email of an account without a key.
      */
     async rootStatus() {
-        return this.ctx.request('GET', '/identity/root-status', undefined, { cache: false });
+        return this.ctx.request('GET', '/identity/root-status', undefined, {
+            cache: false,
+        });
     }
     /**
      * Rotate the account's identity key: derive a brand-new keypair, prove
@@ -313,7 +318,9 @@ class IdentityApi {
      */
     async rotationAlreadyApplied(userId, newPublicKey) {
         return this.ctx
-            .request('GET', `/u/${encodeURIComponent(userId)}/did.json`, undefined, { cache: false })
+            .request('GET', `/u/${encodeURIComponent(userId)}/did.json`, undefined, {
+            cache: false,
+        })
             .then((doc) => doc.verificationMethod.some((vm) => 'publicKeyHex' in vm &&
             typeof vm.publicKeyHex === 'string' &&
             vm.publicKeyHex.toLowerCase() === newPublicKey.toLowerCase()))
@@ -343,7 +350,9 @@ class IdentityLinksApi {
      * The "Link Commons" panel shows its `qrPayload`; Commons scans it and signs with `sign`.
      */
     async create() {
-        const res = await this.ctx.request('POST', '/identity/link', undefined, { cache: false });
+        const res = await this.ctx.request('POST', '/identity/link', undefined, {
+            cache: false,
+        });
         const parsed = (0, contracts_1.safeParseContract)(contracts_1.identityLinkCreateResponseSchema, res);
         if (!parsed)
             throw new Error('identity/link returned an unexpected response shape');
@@ -367,7 +376,10 @@ class IdentityLinksApi {
      */
     async sign(linkId, challenge) {
         const { KeyManager, signIdentityProof, deriveIdentityLinkCode } = await Promise.resolve().then(() => __importStar(require('../crypto/internal')));
-        const [privateKey, publicKey] = await Promise.all([KeyManager.getPrivateKey(), KeyManager.getPublicKey()]);
+        const [privateKey, publicKey] = await Promise.all([
+            KeyManager.getPrivateKey(),
+            KeyManager.getPublicKey(),
+        ]);
         if (!privateKey || !publicKey) {
             throw new Error('No identity on this device to link');
         }
@@ -385,7 +397,11 @@ class IdentityLinksApi {
             expiresAt: state.expiresAt,
         });
         await this.ctx.request('POST', `/identity/link/${encodeURIComponent(linkId)}/proof`, { publicKey: root, proof }, { cache: false, skipAuth: true });
-        return { publicKey: root, code: deriveIdentityLinkCode(linkId, root), username: state.username };
+        return {
+            publicKey: root,
+            code: deriveIdentityLinkCode(linkId, root),
+            username: state.username,
+        };
     }
     /**
      * Complete a link with a code just sent to the account's email
@@ -527,18 +543,24 @@ class IdentityBackupApi {
             createdAt,
             lookupId,
         };
-        return this.ctx.request('POST', '/identity/backup', body, { cache: false });
+        return this.ctx.request('POST', '/identity/backup', body, {
+            cache: false,
+        });
     }
     /**
      * Whether the signed-in user has a stored backup, plus its non-sensitive hint
      * and timestamp. Returns no ciphertext and no locator.
      */
     async status() {
-        return this.ctx.request('GET', '/identity/backup/status', undefined, { cache: false });
+        return this.ctx.request('GET', '/identity/backup/status', undefined, {
+            cache: false,
+        });
     }
     /** Delete the signed-in user's stored backup. Idempotent. */
     async delete() {
-        return this.ctx.request('DELETE', '/identity/backup', undefined, { cache: false });
+        return this.ctx.request('DELETE', '/identity/backup', undefined, {
+            cache: false,
+        });
     }
     /**
      * Restore an identity from its encrypted backup using ONLY the recovery

package/dist/cjs/api/nodes.js

@@ -48,7 +48,9 @@ class NodesApi {
     }
     /** Revoke the signed-in user's node registration. */
     async removeMine() {
-        const res = await this.ctx.request('DELETE', '/nodes/me', undefined, { cache: false });
+        const res = await this.ctx.request('DELETE', '/nodes/me', undefined, {
+            cache: false,
+        });
         this.sweep();
         return { revoked: res.success === true };
     }

package/dist/cjs/api/privacy.js

@@ -30,7 +30,10 @@ class PrivacyApi {
     // ── Blocked ──────────────────────────────────────────────────────────────
     /** The signed-in user's blocked users. */
     async blocked() {
-        return this.ctx.request('GET', '/privacy/blocked', undefined, { cache: true, cacheTTL: LIST_TTL });
+        return this.ctx.request('GET', '/privacy/blocked', undefined, {
+            cache: true,
+            cacheTTL: LIST_TTL,
+        });
     }
     /** Block a user. */
     async block(userId) {
@@ -60,7 +63,10 @@ class PrivacyApi {
     // ── Restricted ───────────────────────────────────────────────────────────
     /** The signed-in user's restricted users. */
     async restricted() {
-        return this.ctx.request('GET', '/privacy/restricted', undefined, { cache: true, cacheTTL: LIST_TTL });
+        return this.ctx.request('GET', '/privacy/restricted', undefined, {
+            cache: true,
+            cacheTTL: LIST_TTL,
+        });
     }
     /** Restrict a user: limit their interactions without blocking them. */
     async restrict(userId) {

package/dist/cjs/api/session.js

@@ -107,7 +107,11 @@ class SessionApi {
             return null;
         try {
             const proof = await provider();
-            if (proof && typeof proof.deviceId === 'string' && proof.deviceId && typeof proof.deviceSecret === 'string' && proof.deviceSecret) {
+            if (proof &&
+                typeof proof.deviceId === 'string' &&
+                proof.deviceId &&
+                typeof proof.deviceSecret === 'string' &&
+                proof.deviceSecret) {
                 return { deviceId: proof.deviceId, deviceSecret: proof.deviceSecret };
             }
             return null;
@@ -122,7 +126,10 @@ class SessionApi {
         if (!this.isAuthenticated)
             return false;
         try {
-            const res = await this.ctx.request('GET', '/auth/validate', undefined, { cache: false, retry: false });
+            const res = await this.ctx.request('GET', '/auth/validate', undefined, {
+                cache: false,
+                retry: false,
+            });
             return res.valid === true;
         }
         catch {
@@ -148,11 +155,15 @@ class SessionApi {
     }
     /** The sessions that belong with `sessionId` (same account set). */
     async list(sessionId) {
-        return this.ctx.request('GET', `/session/sessions/${sessionId}`, undefined, { cache: false });
+        return this.ctx.request('GET', `/session/sessions/${sessionId}`, undefined, {
+            cache: false,
+        });
     }
     /** Sign out `sessionId`, or — with `targetSessionId` — one of the sessions beside it. */
     async logout(sessionId, targetSessionId) {
-        const url = targetSessionId ? `/session/logout/${sessionId}/${targetSessionId}` : `/session/logout/${sessionId}`;
+        const url = targetSessionId
+            ? `/session/logout/${sessionId}/${targetSessionId}`
+            : `/session/logout/${sessionId}`;
         await this.ctx.request('POST', url, undefined, { cache: false });
     }
     /** Sign out every session beside `sessionId`, and it. */

package/dist/cjs/api/store.js

@@ -53,7 +53,9 @@ class StoreReviewsApi {
      * hidden when its author edits it.
      */
     async write(slug, input) {
-        const res = await this.ctx.request('PUT', reviewPath(slug), input, { cache: false });
+        const res = await this.ctx.request('PUT', reviewPath(slug), input, {
+            cache: false,
+        });
         return res.data;
     }
     /** Withdraw the caller's own review. A real delete — the words were theirs. */
@@ -69,7 +71,9 @@ class ListingScreenshotsApi {
     }
     /** Every picture on the listing, in the author's order. */
     async list(applicationId) {
-        return this.ctx.request('GET', screenshotsPath(applicationId), undefined, { cache: false });
+        return this.ctx.request('GET', screenshotsPath(applicationId), undefined, {
+            cache: false,
+        });
     }
     /**
      * Attach an already-uploaded image, appended to the end.
@@ -79,7 +83,9 @@ class ListingScreenshotsApi {
      * one the caller is entitled to.
      */
     async add(applicationId, input) {
-        return this.ctx.request('POST', screenshotsPath(applicationId), input, { cache: false });
+        return this.ctx.request('POST', screenshotsPath(applicationId), input, {
+            cache: false,
+        });
     }
     /** Edit a picture's caption or the frame it was taken in. Order is `reorder`. */
     async update(applicationId, screenshotId, input) {
@@ -113,7 +119,9 @@ class StoreListingApi {
     }
     /** The application's store page in whatever state, or `null` if it has none. */
     async get(applicationId) {
-        return this.ctx.request('GET', listingPath(applicationId), undefined, { cache: false });
+        return this.ctx.request('GET', listingPath(applicationId), undefined, {
+            cache: false,
+        });
     }
     /**
      * Create the page or replace its content. Never its status.
@@ -122,7 +130,9 @@ class StoreListingApi {
      * it live, and fixing a rejected one does not re-submit it.
      */
     async write(applicationId, input) {
-        return this.ctx.request('PUT', listingPath(applicationId), input, { cache: false });
+        return this.ctx.request('PUT', listingPath(applicationId), input, {
+            cache: false,
+        });
     }
     /** Hand the page to the store for review. From a draft, or a rejected page once fixed. */
     async submit(applicationId) {

package/dist/cjs/api/topics.js

@@ -37,12 +37,17 @@ class TopicsApi {
         const params = { q: query };
         if (limit)
             params.limit = limit;
-        const res = await this.ctx.request('GET', '/topics/search', params, { cache: false });
+        const res = await this.ctx.request('GET', '/topics/search', params, {
+            cache: false,
+        });
         return res.topics ?? [];
     }
     /** One topic by slug. */
     async get(slug) {
-        return this.ctx.request('GET', `/topics/${slug}`, undefined, { cache: true, cacheTTL: LONG });
+        return this.ctx.request('GET', `/topics/${slug}`, undefined, {
+            cache: true,
+            cacheTTL: LONG,
+        });
     }
     /** The top-level categories, optionally translated. */
     async categories(locale) {
@@ -58,7 +63,9 @@ class TopicsApi {
     }
     /** Update a topic's description and translations. Staff or service only. */
     async update(slug, data) {
-        const topic = await this.ctx.request('PATCH', `/topics/${slug}`, data, { cache: false });
+        const topic = await this.ctx.request('PATCH', `/topics/${slug}`, data, {
+            cache: false,
+        });
         this.ctx.oxy.cache.delete(`GET:/topics/${slug}`);
         return topic;
     }

package/dist/cjs/api/users.js

@@ -110,7 +110,10 @@ class UsersApi {
     }
     /** The signed-in user. Cached 1 minute. */
     async me(options) {
-        const user = await this.ctx.request('GET', '/users/me', undefined, { cache: options?.cache ?? true, cacheTTL: ME_TTL });
+        const user = await this.ctx.request('GET', '/users/me', undefined, {
+            cache: options?.cache ?? true,
+            cacheTTL: ME_TTL,
+        });
         return (0, userIdentity_1.normalizeUserIdentity)(user);
     }
     /** A profile by username. Cached 5 minutes; `{ cache: false }` as in `get`. */
@@ -183,7 +186,9 @@ class UsersApi {
             // A 404 (absent) and an upstream failure both return null; the log keeps
             // them distinguishable without turning expected misses into noise.
             const status = (0, errorUtils_1.extractErrorStatus)(error);
-            logger_1.logger.debug(status === 404 ? 'users.resolveHandle: handle not found' : 'users.resolveHandle: discovery failed', {
+            logger_1.logger.debug(status === 404
+                ? 'users.resolveHandle: handle not found'
+                : 'users.resolveHandle: discovery failed', {
                 method: 'users.resolveHandle',
                 handle,
                 status,
@@ -203,7 +208,9 @@ class UsersApi {
     }
     /** Profiles similar to `userId`, by co-follower overlap. Cached 5 minutes. */
     async similar(userId, limitOrPagination) {
-        const pagination = typeof limitOrPagination === 'number' ? { limit: limitOrPagination } : limitOrPagination ?? {};
+        const pagination = typeof limitOrPagination === 'number'
+            ? { limit: limitOrPagination }
+            : (limitOrPagination ?? {});
         const users = await this.ctx.request('GET', `/profiles/${userId}/similar`, (0, apiUtils_1.buildQueryParams)(pagination), {
             cache: true,
             cacheTTL: PROFILE_TTL,
@@ -303,7 +310,12 @@ class UsersApi {
         }
         const timestamp = Date.now();
         const signature = await SignatureService.sign(`delete:${publicKey}:${timestamp}`);
-        return this.ctx.request('DELETE', '/users/me', { signature, timestamp, confirmText, ...(proof.totpCode ? { totpCode: proof.totpCode } : {}) }, { cache: false });
+        return this.ctx.request('DELETE', '/users/me', {
+            signature,
+            timestamp,
+            confirmText,
+            ...(proof.totpCode ? { totpCode: proof.totpCode } : {}),
+        }, { cache: false });
     }
 }
 exports.UsersApi = UsersApi;

package/dist/cjs/boot/sessionColdBoot.js

@@ -59,7 +59,7 @@ async function runSessionColdBoot(opts) {
     const isNative = opts.platform?.isNative ?? (0, platform_1.isNative)();
     // Non-null ONLY in identity mode; every `!== null` test below therefore reads
     // as "is this boot identity-bound?" while also narrowing the binding.
-    const identityBinding = opts.sessionMode === 'identity' ? opts.identity ?? null : null;
+    const identityBinding = opts.sessionMode === 'identity' ? (opts.identity ?? null) : null;
     if (opts.sessionMode === 'identity' && identityBinding === null) {
         logger_1.logger.error('runSessionColdBoot: sessionMode "identity" requires an `identity` binding — refusing to run any lane (an identity-bound client must never adopt the device active account)', undefined, { component: 'sessionColdBoot', method: 'runSessionColdBoot' });
         await opts.onSignedOut?.('error');
@@ -105,10 +105,15 @@ async function runSessionColdBoot(opts) {
     steps.push({
         id: 'warm-token-plant',
         run: async () => {
-            if (identityBinding === null && isNative && await store.isAutomaticIdentitySignInSuppressed?.())
+            if (identityBinding === null &&
+                isNative &&
+                (await store.isAutomaticIdentitySignInSuppressed?.()))
                 return { kind: 'skip' };
             const persisted = await store.load();
-            if (!persisted?.accessToken || !persisted.sessionId || !persisted.userId || !persisted.expiresAt) {
+            if (!persisted?.accessToken ||
+                !persisted.sessionId ||
+                !persisted.userId ||
+                !persisted.expiresAt) {
                 return { kind: 'skip' };
             }
             // Guard a malformed `expiresAt` (Date.parse -> NaN): treat as not-valid and
@@ -179,7 +184,9 @@ async function runSessionColdBoot(opts) {
                         },
                     };
                 case 'invalid-secret': {
-                    if (identityBinding === null && store.setAutomaticIdentitySignInSuppressed && await store.isAutomaticIdentitySignInSuppressed?.()) {
+                    if (identityBinding === null &&
+                        store.setAutomaticIdentitySignInSuppressed &&
+                        (await store.isAutomaticIdentitySignInSuppressed?.())) {
                         rejectedLocalHolder = true;
                         signedOutReason = 'no_session';
                         return { kind: 'skip' };
@@ -214,7 +221,10 @@ async function runSessionColdBoot(opts) {
                     return { kind: 'skip' };
                 case 'transient':
                     // Network / 5xx: keep the secret; a later attempt can succeed.
-                    logger_1.logger.debug('device-secret mint failed (transient) — keeping secret', { component: 'sessionColdBoot', method: 'device-secret-mint' });
+                    logger_1.logger.debug('device-secret mint failed (transient) — keeping secret', {
+                        component: 'sessionColdBoot',
+                        method: 'device-secret-mint',
+                    });
                     return { kind: 'skip' };
                 case 'session-ended':
                     // The prior holder/epoch was superseded. This boot must not turn a
@@ -287,11 +297,22 @@ async function runSessionColdBoot(opts) {
             // like every other network step.
             enabled: () => isNative && !isOffline() && !accountRecoverySuperseded,
             run: async () => {
-                const result = await (0, refresh_1.refreshSharedDeviceArm)({ oxy, store, shared: sharedSlot, rejectedLocalHolder });
+                const result = await (0, refresh_1.refreshSharedDeviceArm)({
+                    oxy,
+                    store,
+                    shared: sharedSlot,
+                    rejectedLocalHolder,
+                });
                 if (result.status === 'ok') {
-                    return { kind: 'session', session: {
-                            sessionId: result.sessionId, userId: result.userId, accessToken: result.token, state: result.state,
-                        } };
+                    return {
+                        kind: 'session',
+                        session: {
+                            sessionId: result.sessionId,
+                            userId: result.userId,
+                            accessToken: result.token,
+                            state: result.state,
+                        },
+                    };
                 }
                 if (result.status === 'no-session')
                     signedOutReason = 'no_session';
@@ -322,11 +343,16 @@ async function runSessionColdBoot(opts) {
             id: 'commons-proof-signin',
             enabled: () => isNative && !isOffline(),
             run: async () => {
-                if (accountRecoverySuperseded || await store.isAutomaticIdentitySignInSuppressed?.())
+                if (accountRecoverySuperseded || (await store.isAutomaticIdentitySignInSuppressed?.()))
                     return { kind: 'skip' };
                 const epoch = oxy.http.getSessionEpoch();
-                const session = await oxy.auth.signInWithCommonsIdentity({ plantTokens: false, requestOptions: { retry: false } });
-                if (!session?.accessToken || oxy.http.getSessionEpoch() !== epoch || await store.isAutomaticIdentitySignInSuppressed?.()) {
+                const session = await oxy.auth.signInWithCommonsIdentity({
+                    plantTokens: false,
+                    requestOptions: { retry: false },
+                });
+                if (!session?.accessToken ||
+                    oxy.http.getSessionEpoch() !== epoch ||
+                    (await store.isAutomaticIdentitySignInSuppressed?.())) {
                     return { kind: 'skip' };
                 }
                 // `verifyChallenge` issues a deviceSecret; persist it so the next
@@ -342,7 +368,8 @@ async function runSessionColdBoot(opts) {
                         expiresAt: session.expiresAt,
                     });
                 }
-                if (oxy.http.getSessionEpoch() !== epoch || await store.isAutomaticIdentitySignInSuppressed?.())
+                if (oxy.http.getSessionEpoch() !== epoch ||
+                    (await store.isAutomaticIdentitySignInSuppressed?.()))
                     return { kind: 'skip' };
                 oxy.session.setAccessToken(session.accessToken);
                 return {

package/dist/cjs/constants/version.js

@@ -6,11 +6,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.description = exports.version = exports.name = exports.packageInfo = void 0;
 exports.packageInfo = {
-    name: "@oxy.so/services",
-    version: "5.2.1",
-    description: "Reusable OxyHQ module to handle authentication, user management, reputation system (Oxy Trust) and more 🚀",
-    main: "lib/commonjs/node/index.js",
-    module: "lib/module/node/index.js",
-    types: "lib/typescript/node/index.d.ts"
+    name: '@oxy.so/services',
+    version: '5.2.1',
+    description: 'Reusable OxyHQ module to handle authentication, user management, reputation system (Oxy Trust) and more 🚀',
+    main: 'lib/commonjs/node/index.js',
+    module: 'lib/module/node/index.js',
+    types: 'lib/typescript/node/index.d.ts',
 };
 exports.name = exports.packageInfo.name, exports.version = exports.packageInfo.version, exports.description = exports.packageInfo.description;

package/dist/cjs/crypto/identityMarker.js

@@ -215,7 +215,9 @@ async function updateIdentityMarker(partial) {
         }
         return false;
     }
-    const nextOnboarding = partial.onboardingComplete !== undefined ? partial.onboardingComplete : existing.onboardingComplete;
+    const nextOnboarding = partial.onboardingComplete !== undefined
+        ? partial.onboardingComplete
+        : existing.onboardingComplete;
     const next = {
         v: 1,
         publicKey: partial.publicKey ?? existing.publicKey,

package/dist/cjs/crypto/identityProof.js

@@ -24,5 +24,10 @@ async function signIdentityProof(identity, claims) {
         throw new Error('identity proof: the claims name a different root');
     }
     const signature = await (0, protocol_1.signMessage)((0, contracts_1.buildIdentityProofMessage)(claims), identity.privateKey);
-    return { v: contracts_1.IDENTITY_PROOF_VERSION, challenge: claims.challenge, expiresAt: claims.expiresAt, signature };
+    return {
+        v: contracts_1.IDENTITY_PROOF_VERSION,
+        challenge: claims.challenge,
+        expiresAt: claims.expiresAt,
+        signature,
+    };
 }