@oxy.so/core 4.5.0-oxy-one.1 → 4.5.0

package/src/boot/sessionColdBoot.ts

@@ -44,7 +44,11 @@ import { runColdBoot, type ColdBootOutcome, type ColdBootStep } from '../utils/c
 import { isNative as detectNative } from '../utils/platform';
 import { logger } from '../logger';
 import { computeIdentityTag } from '../utils/cacheKey';
-import { TOKEN_REFRESH_LEAD_MS, refreshDeviceSecretArm, refreshSharedDeviceArm } from '../session/refresh';
+import {
+  TOKEN_REFRESH_LEAD_MS,
+  refreshDeviceSecretArm,
+  refreshSharedDeviceArm,
+} from '../session/refresh';
 import {
   establishIdentitySession,
   resolveIdentityPin,
@@ -156,7 +160,7 @@ export async function runSessionColdBoot(
 
   // Non-null ONLY in identity mode; every `!== null` test below therefore reads
   // as "is this boot identity-bound?" while also narrowing the binding.
-  const identityBinding = opts.sessionMode === 'identity' ? opts.identity ?? null : null;
+  const identityBinding = opts.sessionMode === 'identity' ? (opts.identity ?? null) : null;
   if (opts.sessionMode === 'identity' && identityBinding === null) {
     logger.error(
       'runSessionColdBoot: sessionMode "identity" requires an `identity` binding — refusing to run any lane (an identity-bound client must never adopt the device active account)',
@@ -211,9 +215,19 @@ export async function runSessionColdBoot(
   steps.push({
     id: 'warm-token-plant',
     run: async () => {
-      if (identityBinding === null && isNative && await store.isAutomaticIdentitySignInSuppressed?.()) return { kind: 'skip' };
+      if (
+        identityBinding === null &&
+        isNative &&
+        (await store.isAutomaticIdentitySignInSuppressed?.())
+      )
+        return { kind: 'skip' };
       const persisted = await store.load();
-      if (!persisted?.accessToken || !persisted.sessionId || !persisted.userId || !persisted.expiresAt) {
+      if (
+        !persisted?.accessToken ||
+        !persisted.sessionId ||
+        !persisted.userId ||
+        !persisted.expiresAt
+      ) {
         return { kind: 'skip' };
       }
       // Guard a malformed `expiresAt` (Date.parse -> NaN): treat as not-valid and
@@ -287,10 +301,14 @@ export async function runSessionColdBoot(
             },
           };
         case 'invalid-secret': {
-          if (identityBinding === null && store.setAutomaticIdentitySignInSuppressed && await store.isAutomaticIdentitySignInSuppressed?.()) {
+          if (
+            identityBinding === null &&
+            store.setAutomaticIdentitySignInSuppressed &&
+            (await store.isAutomaticIdentitySignInSuppressed?.())
+          ) {
             rejectedLocalHolder = true;
             signedOutReason = 'no_session';
-            return {kind: 'skip'};
+            return { kind: 'skip' };
           }
           // Stale/diverged secret — drop it so the mint lane stops firing. On
           // native the Commons-proof step below can still recover; on web this ends
@@ -329,10 +347,10 @@ export async function runSessionColdBoot(
           return { kind: 'skip' };
         case 'transient':
           // Network / 5xx: keep the secret; a later attempt can succeed.
-          logger.debug(
-            'device-secret mint failed (transient) — keeping secret',
-            { component: 'sessionColdBoot', method: 'device-secret-mint' },
-          );
+          logger.debug('device-secret mint failed (transient) — keeping secret', {
+            component: 'sessionColdBoot',
+            method: 'device-secret-mint',
+          });
           return { kind: 'skip' };
         case 'session-ended':
           // The prior holder/epoch was superseded. This boot must not turn a
@@ -404,14 +422,25 @@ export async function runSessionColdBoot(
       // like every other network step.
       enabled: () => isNative && !isOffline() && !accountRecoverySuperseded,
       run: async () => {
-        const result = await refreshSharedDeviceArm({oxy, store, shared: sharedSlot, rejectedLocalHolder});
+        const result = await refreshSharedDeviceArm({
+          oxy,
+          store,
+          shared: sharedSlot,
+          rejectedLocalHolder,
+        });
         if (result.status === 'ok') {
-          return {kind: 'session', session: {
-            sessionId: result.sessionId, userId: result.userId, accessToken: result.token, state: result.state,
-          }};
+          return {
+            kind: 'session',
+            session: {
+              sessionId: result.sessionId,
+              userId: result.userId,
+              accessToken: result.token,
+              state: result.state,
+            },
+          };
         }
         if (result.status === 'no-session') signedOutReason = 'no_session';
-        return {kind: 'skip'};
+        return { kind: 'skip' };
       },
     });
   }
@@ -439,10 +468,18 @@ export async function runSessionColdBoot(
       id: 'commons-proof-signin',
       enabled: () => isNative && !isOffline(),
       run: async () => {
-        if (accountRecoverySuperseded || await store.isAutomaticIdentitySignInSuppressed?.()) return { kind: 'skip' };
+        if (accountRecoverySuperseded || (await store.isAutomaticIdentitySignInSuppressed?.()))
+          return { kind: 'skip' };
         const epoch = oxy.http.getSessionEpoch();
-        const session = await oxy.auth.signInWithCommonsIdentity({ plantTokens: false, requestOptions: { retry: false } });
-        if (!session?.accessToken || oxy.http.getSessionEpoch() !== epoch || await store.isAutomaticIdentitySignInSuppressed?.()) {
+        const session = await oxy.auth.signInWithCommonsIdentity({
+          plantTokens: false,
+          requestOptions: { retry: false },
+        });
+        if (
+          !session?.accessToken ||
+          oxy.http.getSessionEpoch() !== epoch ||
+          (await store.isAutomaticIdentitySignInSuppressed?.())
+        ) {
           return { kind: 'skip' };
         }
         // `verifyChallenge` issues a deviceSecret; persist it so the next
@@ -458,7 +495,11 @@ export async function runSessionColdBoot(
             expiresAt: session.expiresAt,
           });
         }
-        if (oxy.http.getSessionEpoch() !== epoch || await store.isAutomaticIdentitySignInSuppressed?.()) return { kind: 'skip' };
+        if (
+          oxy.http.getSessionEpoch() !== epoch ||
+          (await store.isAutomaticIdentitySignInSuppressed?.())
+        )
+          return { kind: 'skip' };
         oxy.session.setAccessToken(session.accessToken);
         return {
           kind: 'session',

package/src/civic/payloads.ts

@@ -44,10 +44,7 @@ function parseCommonsQuery(raw: string): Map<string, string> {
     const rawKey = eq < 0 ? pair : pair.slice(0, eq);
     const rawValue = eq < 0 ? '' : pair.slice(eq + 1);
     try {
-      params.set(
-        decodeURIComponent(rawKey),
-        decodeURIComponent(rawValue.replace(/\+/g, ' ')),
-      );
+      params.set(decodeURIComponent(rawKey), decodeURIComponent(rawValue.replace(/\+/g, ' ')));
     } catch {
       // Malformed percent-encoding — keep the raw token rather than throwing, so
       // a single bad field doesn't sink an otherwise valid payload.

package/src/client/context.ts

@@ -20,7 +20,12 @@ export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
 export interface ServiceLane {
   /** Whether a service token can be minted here (a key pair, or workload identity). */
   readonly available: boolean;
-  request<T>(method: HttpMethod, url: string, data?: unknown, options?: RequestOptions & { actAs?: string }): Promise<T>;
+  request<T>(
+    method: HttpMethod,
+    url: string,
+    data?: unknown,
+    options?: RequestOptions & { actAs?: string },
+  ): Promise<T>;
 }
 
 export interface OxyContext {

package/src/constants/version.ts

@@ -4,12 +4,13 @@
  */
 
 export const packageInfo = {
-    name: "@oxy.so/services",
-    version: "5.2.1",
-    description: "Reusable OxyHQ module to handle authentication, user management, reputation system (Oxy Trust) and more 🚀",
-    main: "lib/commonjs/node/index.js",
-    module: "lib/module/node/index.js",
-    types: "lib/typescript/node/index.d.ts"
+  name: '@oxy.so/services',
+  version: '5.2.1',
+  description:
+    'Reusable OxyHQ module to handle authentication, user management, reputation system (Oxy Trust) and more 🚀',
+  main: 'lib/commonjs/node/index.js',
+  module: 'lib/module/node/index.js',
+  types: 'lib/typescript/node/index.d.ts',
 } as const;
 
 export const { name, version, description } = packageInfo;

package/src/crypto/aead.ts

@@ -60,11 +60,7 @@ function randomNonce(): Uint8Array {
  * @param aad       Optional associated data authenticated but not encrypted.
  * @returns         `{ nonce, ciphertext }` — both are required to decrypt.
  */
-export function encryptAead(
-  key: Uint8Array,
-  plaintext: Uint8Array,
-  aad?: Uint8Array,
-): AeadResult {
+export function encryptAead(key: Uint8Array, plaintext: Uint8Array, aad?: Uint8Array): AeadResult {
   assertKey(key);
   const nonce = randomNonce();
   const ciphertext = xchacha20poly1305(key, nonce, aad).encrypt(plaintext);

package/src/crypto/ecdh.ts

@@ -29,9 +29,6 @@ import { deriveSecp256k1SharedSecret } from '@oxy.so/protocol/secp256k1';
  *                          bytes) or uncompressed (`04` + 64 bytes).
  * @returns                 The 32-byte big-endian shared secret.
  */
-export function deriveSharedSecret(
-  privateKeyHex: string,
-  otherPublicKeyHex: string,
-): Uint8Array {
+export function deriveSharedSecret(privateKeyHex: string, otherPublicKeyHex: string): Uint8Array {
   return deriveSecp256k1SharedSecret(privateKeyHex, otherPublicKeyHex);
 }

package/src/crypto/identityDerivations.ts

@@ -117,6 +117,10 @@ export function signSocialReceiveDigest(
  * `sha256("auth:${publicKey}:${challenge}:${timestamp}")`, hex. The message
  * format is the one `POST /auth/verify` checks, unchanged.
  */
-export function authChallengeDigest(publicKey: string, challenge: string, timestamp: number): string {
+export function authChallengeDigest(
+  publicKey: string,
+  challenge: string,
+  timestamp: number,
+): string {
   return bytesToHex(sha256(utf8(`auth:${publicKey}:${challenge}:${timestamp}`)));
 }

package/src/crypto/identityMarker.ts

@@ -252,7 +252,9 @@ export async function updateIdentityMarker(
   }
 
   const nextOnboarding =
-    partial.onboardingComplete !== undefined ? partial.onboardingComplete : existing.onboardingComplete;
+    partial.onboardingComplete !== undefined
+      ? partial.onboardingComplete
+      : existing.onboardingComplete;
   const next: IdentityMarker = {
     v: 1,
     publicKey: partial.publicKey ?? existing.publicKey,

package/src/crypto/identityProof.ts

@@ -32,5 +32,10 @@ export async function signIdentityProof(
     throw new Error('identity proof: the claims name a different root');
   }
   const signature = await signMessage(buildIdentityProofMessage(claims), identity.privateKey);
-  return { v: IDENTITY_PROOF_VERSION, challenge: claims.challenge, expiresAt: claims.expiresAt, signature };
+  return {
+    v: IDENTITY_PROOF_VERSION,
+    challenge: claims.challenge,
+    expiresAt: claims.expiresAt,
+    signature,
+  };
 }

package/src/crypto/index.ts

@@ -12,10 +12,10 @@
 import './polyfill';
 
 export {
-    KeyManager,
-    IdentityAlreadyExistsError,
-    IdentityPersistError,
-    IdentityUnavailableError,
+  KeyManager,
+  IdentityAlreadyExistsError,
+  IdentityPersistError,
+  IdentityUnavailableError,
 } from './keyManager';
 export type { KeyPair, IdentityStatus, IdentityRecoveryResult } from './keyManager';
 export { readIdentityMarker, updateIdentityMarker } from './identityMarker';
@@ -36,13 +36,13 @@ export { deriveSharedSecret } from './ecdh';
 // What the identity key computes without leaving its holder: the same functions
 // Commons' identity host implements natively on Android.
 export {
-    SCOPED_SEED_KDF_SALT,
-    SOCIAL_RECEIVE_CHAIN_CODE_KEY,
-    MAX_SOCIAL_RECEIVE_INDEX,
-    deriveScopedSeedFromKey,
-    deriveSocialReceiveKey,
-    signSocialReceiveDigest,
-    authChallengeDigest,
+  SCOPED_SEED_KDF_SALT,
+  SOCIAL_RECEIVE_CHAIN_CODE_KEY,
+  MAX_SOCIAL_RECEIVE_INDEX,
+  deriveScopedSeedFromKey,
+  deriveSocialReceiveKey,
+  signSocialReceiveDigest,
+  authChallengeDigest,
 } from './identityDerivations';
 
 // Identity proofs — the one signed format for operations on a personal root

package/src/crypto/internal.ts

@@ -17,4 +17,9 @@ export { encryptAead, decryptAead, AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH } from './
 export { digestIdentityPayload, signIdentityProof } from './identityProof';
 export { deriveIdentityLinkCode } from './identityLink';
 export { solveRegistrationPow } from './registrationPow';
-export { canonicalize, loadCommonsIdentityBridge, signMessage, verifySignature } from '@oxy.so/protocol';
+export {
+  canonicalize,
+  loadCommonsIdentityBridge,
+  signMessage,
+  verifySignature,
+} from '@oxy.so/protocol';