@oxy.so/core 4.5.0-oxy-one.1 → 4.6.0

package/dist/esm/api/follows.js

@@ -41,7 +41,10 @@ export class FollowsApi {
     }
     /** Whether the signed-in user follows `userId`. Cached 1 minute, busted by every write. */
     async status(userId) {
-        return this.ctx.request('GET', `/users/${userId}/follow-status`, undefined, { cache: true, cacheTTL: STATUS_TTL });
+        return this.ctx.request('GET', `/users/${userId}/follow-status`, undefined, {
+            cache: true,
+            cacheTTL: STATUS_TTL,
+        });
     }
     /**
      * Follow status for MANY users, one round-trip per chunk of 200 — for list
@@ -208,7 +211,11 @@ export class FollowsApi {
     // ── Internals ────────────────────────────────────────────────────────────
     async userPage(path, params) {
         const response = await this.ctx.request('GET', path, buildQueryParams(params ?? {}), { cache: true, cacheTTL: GRAPH_TTL });
-        return { data: response.data || [], total: response.pagination.total, hasMore: response.pagination.hasMore };
+        return {
+            data: response.data || [],
+            total: response.pagination.total,
+            hasMore: response.pagination.hasMore,
+        };
     }
     /**
      * Every cached read a follow write makes stale, in ONE pass over the cache.

package/dist/esm/api/identity.js

@@ -93,14 +93,19 @@ export class IdentityApi {
      * verification-method fragment.
      */
     async authMethods() {
-        return this.ctx.request('GET', '/auth/methods', undefined, { cache: true, cacheTTL: SHORT_TTL });
+        return this.ctx.request('GET', '/auth/methods', undefined, {
+            cache: true,
+            cacheTTL: SHORT_TTL,
+        });
     }
     /**
      * How the signed-in account is kept (ADR 0029 D3): whether Commons' root is
      * linked (self-custody), or the email of an account without a key.
      */
     async rootStatus() {
-        return this.ctx.request('GET', '/identity/root-status', undefined, { cache: false });
+        return this.ctx.request('GET', '/identity/root-status', undefined, {
+            cache: false,
+        });
     }
     /**
      * Rotate the account's identity key: derive a brand-new keypair, prove
@@ -275,7 +280,9 @@ export class IdentityApi {
      */
     async rotationAlreadyApplied(userId, newPublicKey) {
         return this.ctx
-            .request('GET', `/u/${encodeURIComponent(userId)}/did.json`, undefined, { cache: false })
+            .request('GET', `/u/${encodeURIComponent(userId)}/did.json`, undefined, {
+            cache: false,
+        })
             .then((doc) => doc.verificationMethod.some((vm) => 'publicKeyHex' in vm &&
             typeof vm.publicKeyHex === 'string' &&
             vm.publicKeyHex.toLowerCase() === newPublicKey.toLowerCase()))
@@ -304,7 +311,9 @@ export class IdentityLinksApi {
      * The "Link Commons" panel shows its `qrPayload`; Commons scans it and signs with `sign`.
      */
     async create() {
-        const res = await this.ctx.request('POST', '/identity/link', undefined, { cache: false });
+        const res = await this.ctx.request('POST', '/identity/link', undefined, {
+            cache: false,
+        });
         const parsed = safeParseContract(identityLinkCreateResponseSchema, res);
         if (!parsed)
             throw new Error('identity/link returned an unexpected response shape');
@@ -328,7 +337,10 @@ export class IdentityLinksApi {
      */
     async sign(linkId, challenge) {
         const { KeyManager, signIdentityProof, deriveIdentityLinkCode } = await import('../crypto/internal.js');
-        const [privateKey, publicKey] = await Promise.all([KeyManager.getPrivateKey(), KeyManager.getPublicKey()]);
+        const [privateKey, publicKey] = await Promise.all([
+            KeyManager.getPrivateKey(),
+            KeyManager.getPublicKey(),
+        ]);
         if (!privateKey || !publicKey) {
             throw new Error('No identity on this device to link');
         }
@@ -346,7 +358,11 @@ export class IdentityLinksApi {
             expiresAt: state.expiresAt,
         });
         await this.ctx.request('POST', `/identity/link/${encodeURIComponent(linkId)}/proof`, { publicKey: root, proof }, { cache: false, skipAuth: true });
-        return { publicKey: root, code: deriveIdentityLinkCode(linkId, root), username: state.username };
+        return {
+            publicKey: root,
+            code: deriveIdentityLinkCode(linkId, root),
+            username: state.username,
+        };
     }
     /**
      * Complete a link with a code just sent to the account's email
@@ -486,18 +502,24 @@ export class IdentityBackupApi {
             createdAt,
             lookupId,
         };
-        return this.ctx.request('POST', '/identity/backup', body, { cache: false });
+        return this.ctx.request('POST', '/identity/backup', body, {
+            cache: false,
+        });
     }
     /**
      * Whether the signed-in user has a stored backup, plus its non-sensitive hint
      * and timestamp. Returns no ciphertext and no locator.
      */
     async status() {
-        return this.ctx.request('GET', '/identity/backup/status', undefined, { cache: false });
+        return this.ctx.request('GET', '/identity/backup/status', undefined, {
+            cache: false,
+        });
     }
     /** Delete the signed-in user's stored backup. Idempotent. */
     async delete() {
-        return this.ctx.request('DELETE', '/identity/backup', undefined, { cache: false });
+        return this.ctx.request('DELETE', '/identity/backup', undefined, {
+            cache: false,
+        });
     }
     /**
      * Restore an identity from its encrypted backup using ONLY the recovery

package/dist/esm/api/nodes.js

@@ -45,7 +45,9 @@ export class NodesApi {
     }
     /** Revoke the signed-in user's node registration. */
     async removeMine() {
-        const res = await this.ctx.request('DELETE', '/nodes/me', undefined, { cache: false });
+        const res = await this.ctx.request('DELETE', '/nodes/me', undefined, {
+            cache: false,
+        });
         this.sweep();
         return { revoked: res.success === true };
     }

package/dist/esm/api/privacy.js

@@ -27,7 +27,10 @@ export class PrivacyApi {
     // ── Blocked ──────────────────────────────────────────────────────────────
     /** The signed-in user's blocked users. */
     async blocked() {
-        return this.ctx.request('GET', '/privacy/blocked', undefined, { cache: true, cacheTTL: LIST_TTL });
+        return this.ctx.request('GET', '/privacy/blocked', undefined, {
+            cache: true,
+            cacheTTL: LIST_TTL,
+        });
     }
     /** Block a user. */
     async block(userId) {
@@ -57,7 +60,10 @@ export class PrivacyApi {
     // ── Restricted ───────────────────────────────────────────────────────────
     /** The signed-in user's restricted users. */
     async restricted() {
-        return this.ctx.request('GET', '/privacy/restricted', undefined, { cache: true, cacheTTL: LIST_TTL });
+        return this.ctx.request('GET', '/privacy/restricted', undefined, {
+            cache: true,
+            cacheTTL: LIST_TTL,
+        });
     }
     /** Restrict a user: limit their interactions without blocking them. */
     async restrict(userId) {

package/dist/esm/api/session.js

@@ -104,7 +104,11 @@ export class SessionApi {
             return null;
         try {
             const proof = await provider();
-            if (proof && typeof proof.deviceId === 'string' && proof.deviceId && typeof proof.deviceSecret === 'string' && proof.deviceSecret) {
+            if (proof &&
+                typeof proof.deviceId === 'string' &&
+                proof.deviceId &&
+                typeof proof.deviceSecret === 'string' &&
+                proof.deviceSecret) {
                 return { deviceId: proof.deviceId, deviceSecret: proof.deviceSecret };
             }
             return null;
@@ -119,7 +123,10 @@ export class SessionApi {
         if (!this.isAuthenticated)
             return false;
         try {
-            const res = await this.ctx.request('GET', '/auth/validate', undefined, { cache: false, retry: false });
+            const res = await this.ctx.request('GET', '/auth/validate', undefined, {
+                cache: false,
+                retry: false,
+            });
             return res.valid === true;
         }
         catch {
@@ -145,11 +152,15 @@ export class SessionApi {
     }
     /** The sessions that belong with `sessionId` (same account set). */
     async list(sessionId) {
-        return this.ctx.request('GET', `/session/sessions/${sessionId}`, undefined, { cache: false });
+        return this.ctx.request('GET', `/session/sessions/${sessionId}`, undefined, {
+            cache: false,
+        });
     }
     /** Sign out `sessionId`, or — with `targetSessionId` — one of the sessions beside it. */
     async logout(sessionId, targetSessionId) {
-        const url = targetSessionId ? `/session/logout/${sessionId}/${targetSessionId}` : `/session/logout/${sessionId}`;
+        const url = targetSessionId
+            ? `/session/logout/${sessionId}/${targetSessionId}`
+            : `/session/logout/${sessionId}`;
         await this.ctx.request('POST', url, undefined, { cache: false });
     }
     /** Sign out every session beside `sessionId`, and it. */

package/dist/esm/api/store.js

@@ -50,7 +50,9 @@ export class StoreReviewsApi {
      * hidden when its author edits it.
      */
     async write(slug, input) {
-        const res = await this.ctx.request('PUT', reviewPath(slug), input, { cache: false });
+        const res = await this.ctx.request('PUT', reviewPath(slug), input, {
+            cache: false,
+        });
         return res.data;
     }
     /** Withdraw the caller's own review. A real delete — the words were theirs. */
@@ -65,7 +67,9 @@ export class ListingScreenshotsApi {
     }
     /** Every picture on the listing, in the author's order. */
     async list(applicationId) {
-        return this.ctx.request('GET', screenshotsPath(applicationId), undefined, { cache: false });
+        return this.ctx.request('GET', screenshotsPath(applicationId), undefined, {
+            cache: false,
+        });
     }
     /**
      * Attach an already-uploaded image, appended to the end.
@@ -75,7 +79,9 @@ export class ListingScreenshotsApi {
      * one the caller is entitled to.
      */
     async add(applicationId, input) {
-        return this.ctx.request('POST', screenshotsPath(applicationId), input, { cache: false });
+        return this.ctx.request('POST', screenshotsPath(applicationId), input, {
+            cache: false,
+        });
     }
     /** Edit a picture's caption or the frame it was taken in. Order is `reorder`. */
     async update(applicationId, screenshotId, input) {
@@ -108,7 +114,9 @@ export class StoreListingApi {
     }
     /** The application's store page in whatever state, or `null` if it has none. */
     async get(applicationId) {
-        return this.ctx.request('GET', listingPath(applicationId), undefined, { cache: false });
+        return this.ctx.request('GET', listingPath(applicationId), undefined, {
+            cache: false,
+        });
     }
     /**
      * Create the page or replace its content. Never its status.
@@ -117,7 +125,9 @@ export class StoreListingApi {
      * it live, and fixing a rejected one does not re-submit it.
      */
     async write(applicationId, input) {
-        return this.ctx.request('PUT', listingPath(applicationId), input, { cache: false });
+        return this.ctx.request('PUT', listingPath(applicationId), input, {
+            cache: false,
+        });
     }
     /** Hand the page to the store for review. From a draft, or a rejected page once fixed. */
     async submit(applicationId) {

package/dist/esm/api/topics.js

@@ -34,12 +34,17 @@ export class TopicsApi {
         const params = { q: query };
         if (limit)
             params.limit = limit;
-        const res = await this.ctx.request('GET', '/topics/search', params, { cache: false });
+        const res = await this.ctx.request('GET', '/topics/search', params, {
+            cache: false,
+        });
         return res.topics ?? [];
     }
     /** One topic by slug. */
     async get(slug) {
-        return this.ctx.request('GET', `/topics/${slug}`, undefined, { cache: true, cacheTTL: LONG });
+        return this.ctx.request('GET', `/topics/${slug}`, undefined, {
+            cache: true,
+            cacheTTL: LONG,
+        });
     }
     /** The top-level categories, optionally translated. */
     async categories(locale) {
@@ -55,7 +60,9 @@ export class TopicsApi {
     }
     /** Update a topic's description and translations. Staff or service only. */
     async update(slug, data) {
-        const topic = await this.ctx.request('PATCH', `/topics/${slug}`, data, { cache: false });
+        const topic = await this.ctx.request('PATCH', `/topics/${slug}`, data, {
+            cache: false,
+        });
         this.ctx.oxy.cache.delete(`GET:/topics/${slug}`);
         return topic;
     }

package/dist/esm/api/users.js

@@ -74,7 +74,10 @@ export class UsersApi {
     }
     /** The signed-in user. Cached 1 minute. */
     async me(options) {
-        const user = await this.ctx.request('GET', '/users/me', undefined, { cache: options?.cache ?? true, cacheTTL: ME_TTL });
+        const user = await this.ctx.request('GET', '/users/me', undefined, {
+            cache: options?.cache ?? true,
+            cacheTTL: ME_TTL,
+        });
         return normalizeUserIdentity(user);
     }
     /** A profile by username. Cached 5 minutes; `{ cache: false }` as in `get`. */
@@ -147,7 +150,9 @@ export class UsersApi {
             // A 404 (absent) and an upstream failure both return null; the log keeps
             // them distinguishable without turning expected misses into noise.
             const status = extractErrorStatus(error);
-            logger.debug(status === 404 ? 'users.resolveHandle: handle not found' : 'users.resolveHandle: discovery failed', {
+            logger.debug(status === 404
+                ? 'users.resolveHandle: handle not found'
+                : 'users.resolveHandle: discovery failed', {
                 method: 'users.resolveHandle',
                 handle,
                 status,
@@ -167,7 +172,9 @@ export class UsersApi {
     }
     /** Profiles similar to `userId`, by co-follower overlap. Cached 5 minutes. */
     async similar(userId, limitOrPagination) {
-        const pagination = typeof limitOrPagination === 'number' ? { limit: limitOrPagination } : limitOrPagination ?? {};
+        const pagination = typeof limitOrPagination === 'number'
+            ? { limit: limitOrPagination }
+            : (limitOrPagination ?? {});
         const users = await this.ctx.request('GET', `/profiles/${userId}/similar`, buildQueryParams(pagination), {
             cache: true,
             cacheTTL: PROFILE_TTL,
@@ -267,6 +274,11 @@ export class UsersApi {
         }
         const timestamp = Date.now();
         const signature = await SignatureService.sign(`delete:${publicKey}:${timestamp}`);
-        return this.ctx.request('DELETE', '/users/me', { signature, timestamp, confirmText, ...(proof.totpCode ? { totpCode: proof.totpCode } : {}) }, { cache: false });
+        return this.ctx.request('DELETE', '/users/me', {
+            signature,
+            timestamp,
+            confirmText,
+            ...(proof.totpCode ? { totpCode: proof.totpCode } : {}),
+        }, { cache: false });
     }
 }

package/dist/esm/boot/sessionColdBoot.js

@@ -44,7 +44,7 @@ import { runColdBoot } from '../utils/coldBoot.js';
 import { isNative as detectNative } from '../utils/platform.js';
 import { logger } from '../logger/index.js';
 import { computeIdentityTag } from '../utils/cacheKey.js';
-import { TOKEN_REFRESH_LEAD_MS, refreshDeviceSecretArm, refreshSharedDeviceArm } from '../session/refresh.js';
+import { TOKEN_REFRESH_LEAD_MS, refreshDeviceSecretArm, refreshSharedDeviceArm, } from '../session/refresh.js';
 import { establishIdentitySession, resolveIdentityPin, } from '../session/identitySession.js';
 /**
  * Run the device-first cold boot. Resolves to the `runColdBoot` outcome and, as
@@ -56,7 +56,7 @@ export async function runSessionColdBoot(opts) {
     const isNative = opts.platform?.isNative ?? detectNative();
     // Non-null ONLY in identity mode; every `!== null` test below therefore reads
     // as "is this boot identity-bound?" while also narrowing the binding.
-    const identityBinding = opts.sessionMode === 'identity' ? opts.identity ?? null : null;
+    const identityBinding = opts.sessionMode === 'identity' ? (opts.identity ?? null) : null;
     if (opts.sessionMode === 'identity' && identityBinding === null) {
         logger.error('runSessionColdBoot: sessionMode "identity" requires an `identity` binding — refusing to run any lane (an identity-bound client must never adopt the device active account)', undefined, { component: 'sessionColdBoot', method: 'runSessionColdBoot' });
         await opts.onSignedOut?.('error');
@@ -102,10 +102,15 @@ export async function runSessionColdBoot(opts) {
     steps.push({
         id: 'warm-token-plant',
         run: async () => {
-            if (identityBinding === null && isNative && await store.isAutomaticIdentitySignInSuppressed?.())
+            if (identityBinding === null &&
+                isNative &&
+                (await store.isAutomaticIdentitySignInSuppressed?.()))
                 return { kind: 'skip' };
             const persisted = await store.load();
-            if (!persisted?.accessToken || !persisted.sessionId || !persisted.userId || !persisted.expiresAt) {
+            if (!persisted?.accessToken ||
+                !persisted.sessionId ||
+                !persisted.userId ||
+                !persisted.expiresAt) {
                 return { kind: 'skip' };
             }
             // Guard a malformed `expiresAt` (Date.parse -> NaN): treat as not-valid and
@@ -176,7 +181,9 @@ export async function runSessionColdBoot(opts) {
                         },
                     };
                 case 'invalid-secret': {
-                    if (identityBinding === null && store.setAutomaticIdentitySignInSuppressed && await store.isAutomaticIdentitySignInSuppressed?.()) {
+                    if (identityBinding === null &&
+                        store.setAutomaticIdentitySignInSuppressed &&
+                        (await store.isAutomaticIdentitySignInSuppressed?.())) {
                         rejectedLocalHolder = true;
                         signedOutReason = 'no_session';
                         return { kind: 'skip' };
@@ -211,7 +218,10 @@ export async function runSessionColdBoot(opts) {
                     return { kind: 'skip' };
                 case 'transient':
                     // Network / 5xx: keep the secret; a later attempt can succeed.
-                    logger.debug('device-secret mint failed (transient) — keeping secret', { component: 'sessionColdBoot', method: 'device-secret-mint' });
+                    logger.debug('device-secret mint failed (transient) — keeping secret', {
+                        component: 'sessionColdBoot',
+                        method: 'device-secret-mint',
+                    });
                     return { kind: 'skip' };
                 case 'session-ended':
                     // The prior holder/epoch was superseded. This boot must not turn a
@@ -284,11 +294,22 @@ export async function runSessionColdBoot(opts) {
             // like every other network step.
             enabled: () => isNative && !isOffline() && !accountRecoverySuperseded,
             run: async () => {
-                const result = await refreshSharedDeviceArm({ oxy, store, shared: sharedSlot, rejectedLocalHolder });
+                const result = await refreshSharedDeviceArm({
+                    oxy,
+                    store,
+                    shared: sharedSlot,
+                    rejectedLocalHolder,
+                });
                 if (result.status === 'ok') {
-                    return { kind: 'session', session: {
-                            sessionId: result.sessionId, userId: result.userId, accessToken: result.token, state: result.state,
-                        } };
+                    return {
+                        kind: 'session',
+                        session: {
+                            sessionId: result.sessionId,
+                            userId: result.userId,
+                            accessToken: result.token,
+                            state: result.state,
+                        },
+                    };
                 }
                 if (result.status === 'no-session')
                     signedOutReason = 'no_session';
@@ -319,11 +340,16 @@ export async function runSessionColdBoot(opts) {
             id: 'commons-proof-signin',
             enabled: () => isNative && !isOffline(),
             run: async () => {
-                if (accountRecoverySuperseded || await store.isAutomaticIdentitySignInSuppressed?.())
+                if (accountRecoverySuperseded || (await store.isAutomaticIdentitySignInSuppressed?.()))
                     return { kind: 'skip' };
                 const epoch = oxy.http.getSessionEpoch();
-                const session = await oxy.auth.signInWithCommonsIdentity({ plantTokens: false, requestOptions: { retry: false } });
-                if (!session?.accessToken || oxy.http.getSessionEpoch() !== epoch || await store.isAutomaticIdentitySignInSuppressed?.()) {
+                const session = await oxy.auth.signInWithCommonsIdentity({
+                    plantTokens: false,
+                    requestOptions: { retry: false },
+                });
+                if (!session?.accessToken ||
+                    oxy.http.getSessionEpoch() !== epoch ||
+                    (await store.isAutomaticIdentitySignInSuppressed?.())) {
                     return { kind: 'skip' };
                 }
                 // `verifyChallenge` issues a deviceSecret; persist it so the next
@@ -339,7 +365,8 @@ export async function runSessionColdBoot(opts) {
                         expiresAt: session.expiresAt,
                     });
                 }
-                if (oxy.http.getSessionEpoch() !== epoch || await store.isAutomaticIdentitySignInSuppressed?.())
+                if (oxy.http.getSessionEpoch() !== epoch ||
+                    (await store.isAutomaticIdentitySignInSuppressed?.()))
                     return { kind: 'skip' };
                 oxy.session.setAccessToken(session.accessToken);
                 return {

package/dist/esm/constants/version.js

@@ -3,11 +3,11 @@
  * This file is auto-generated to avoid runtime dependency on package.json
  */
 export const packageInfo = {
-    name: "@oxy.so/services",
-    version: "5.2.1",
-    description: "Reusable OxyHQ module to handle authentication, user management, reputation system (Oxy Trust) and more 🚀",
-    main: "lib/commonjs/node/index.js",
-    module: "lib/module/node/index.js",
-    types: "lib/typescript/node/index.d.ts"
+    name: '@oxy.so/services',
+    version: '5.2.1',
+    description: 'Reusable OxyHQ module to handle authentication, user management, reputation system (Oxy Trust) and more 🚀',
+    main: 'lib/commonjs/node/index.js',
+    module: 'lib/module/node/index.js',
+    types: 'lib/typescript/node/index.d.ts',
 };
 export const { name, version, description } = packageInfo;

package/dist/esm/crypto/identityMarker.js

@@ -208,7 +208,9 @@ export async function updateIdentityMarker(partial) {
         }
         return false;
     }
-    const nextOnboarding = partial.onboardingComplete !== undefined ? partial.onboardingComplete : existing.onboardingComplete;
+    const nextOnboarding = partial.onboardingComplete !== undefined
+        ? partial.onboardingComplete
+        : existing.onboardingComplete;
     const next = {
         v: 1,
         publicKey: partial.publicKey ?? existing.publicKey,

package/dist/esm/crypto/identityProof.js

@@ -20,5 +20,10 @@ export async function signIdentityProof(identity, claims) {
         throw new Error('identity proof: the claims name a different root');
     }
     const signature = await signMessage(buildIdentityProofMessage(claims), identity.privateKey);
-    return { v: IDENTITY_PROOF_VERSION, challenge: claims.challenge, expiresAt: claims.expiresAt, signature };
+    return {
+        v: IDENTITY_PROOF_VERSION,
+        challenge: claims.challenge,
+        expiresAt: claims.expiresAt,
+        signature,
+    };
 }

package/dist/esm/crypto/internal.js

@@ -16,4 +16,4 @@ export { encryptAead, decryptAead, AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH } from './
 export { digestIdentityPayload, signIdentityProof } from './identityProof.js';
 export { deriveIdentityLinkCode } from './identityLink.js';
 export { solveRegistrationPow } from './registrationPow.js';
-export { canonicalize, loadCommonsIdentityBridge, signMessage, verifySignature } from '@oxy.so/protocol';
+export { canonicalize, loadCommonsIdentityBridge, signMessage, verifySignature, } from '@oxy.so/protocol';