@oxy.so/core 4.5.0-oxy-one.1 → 4.6.0

package/dist/esm/index.js

@@ -42,7 +42,7 @@ export { OxyAppDataIdentifierError } from './api/appData.js';
 export { getCommonsApprovalBlockingReason, parseCommonsApprovalExpiresAt, } from './utils/commonsApproval.js';
 // Automatic "Sign in with Oxy" delivery selection — ONE pure decision that maps
 // the caller's facts onto exactly one primary route (open Commons / await push / QR).
-export { selectCommonsDelivery, pushTargetsFromDelivery, commonsDeliveryPlatform } from './utils/commonsDelivery.js';
+export { selectCommonsDelivery, pushTargetsFromDelivery, commonsDeliveryPlatform, } from './utils/commonsDelivery.js';
 // ---------------------------------------------------------------------------
 // User identity and handles
 // ---------------------------------------------------------------------------

package/dist/esm/inference/OxyInferenceClient.js

@@ -61,7 +61,7 @@ var _OxyInferenceClient_instances, _OxyInferenceClient_baseURL, _OxyInferenceCli
  * schema, so a rename on either side fails a build rather than a customer's
  * request.
  */
-import { decisionRequestSchema, decisionSuccessSchema, decisionAnswersMatch } from '@oxy.so/contracts';
+import { decisionRequestSchema, decisionSuccessSchema, decisionAnswersMatch, } from '@oxy.so/contracts';
 import { INFERENCE_ERROR_CODES, MAX_INFERENCE_AUDIO_BYTES, inferenceAudioMediaTypeSchema, inferenceStreamEventSchema, modelIdSchema, } from '@oxy.so/contracts';
 /** The base URL of the Oxy API, when a caller names none. */
 export const OXY_INFERENCE_BASE_URL = 'https://api.oxy.so';
@@ -200,9 +200,7 @@ export class OxyInferenceClient {
         return __classPrivateFieldGet(this, _OxyInferenceClient_instances, "m", _OxyInferenceClient_request).call(this, 'POST', '/v1/responses', {
             body: request,
             ...(options.signal === undefined ? {} : { signal: options.signal }),
-            ...(options.idempotencyKey === undefined
-                ? {}
-                : { idempotencyKey: options.idempotencyKey }),
+            ...(options.idempotencyKey === undefined ? {} : { idempotencyKey: options.idempotencyKey }),
             ...(options.delegatedUserId === undefined
                 ? {}
                 : { delegatedUserId: options.delegatedUserId }),
@@ -219,7 +217,8 @@ export class OxyInferenceClient {
             delegatedUserId: options.delegatedUserId,
         });
         const parsed = decisionSuccessSchema.safeParse(payload);
-        if (!parsed.success || parsed.data.model !== input.model ||
+        if (!parsed.success ||
+            parsed.data.model !== input.model ||
             !decisionAnswersMatch(input, parsed.data.data)) {
             throw new OxyInferenceProtocolError('Invalid or mismatched decisions response.');
         }
@@ -231,9 +230,7 @@ export class OxyInferenceClient {
             method: 'POST',
             headers: await __classPrivateFieldGet(this, _OxyInferenceClient_instances, "m", _OxyInferenceClient_headers).call(this, 'audio/*', {
                 hasBody: true,
-                ...(options.idempotencyKey === undefined
-                    ? {}
-                    : { idempotencyKey: options.idempotencyKey }),
+                ...(options.idempotencyKey === undefined ? {} : { idempotencyKey: options.idempotencyKey }),
                 ...(options.delegatedUserId === undefined
                     ? {}
                     : { delegatedUserId: options.delegatedUserId }),
@@ -305,9 +302,7 @@ export class OxyInferenceClient {
             method: 'POST',
             headers: await __classPrivateFieldGet(this, _OxyInferenceClient_instances, "m", _OxyInferenceClient_headers).call(this, 'text/event-stream', {
                 hasBody: true,
-                ...(options.idempotencyKey === undefined
-                    ? {}
-                    : { idempotencyKey: options.idempotencyKey }),
+                ...(options.idempotencyKey === undefined ? {} : { idempotencyKey: options.idempotencyKey }),
                 ...(options.delegatedUserId === undefined
                     ? {}
                     : { delegatedUserId: options.delegatedUserId }),
@@ -405,9 +400,7 @@ export class OxyInferenceClient {
 _OxyInferenceClient_baseURL = new WeakMap(), _OxyInferenceClient_credential = new WeakMap(), _OxyInferenceClient_fetch = new WeakMap(), _OxyInferenceClient_instances = new WeakSet(), _OxyInferenceClient_bearer = 
 /** The bearer for this request, from whichever lane was configured. */
 async function _OxyInferenceClient_bearer() {
-    const value = typeof __classPrivateFieldGet(this, _OxyInferenceClient_credential, "f") === 'string'
-        ? __classPrivateFieldGet(this, _OxyInferenceClient_credential, "f")
-        : await __classPrivateFieldGet(this, _OxyInferenceClient_credential, "f").call(this);
+    const value = typeof __classPrivateFieldGet(this, _OxyInferenceClient_credential, "f") === 'string' ? __classPrivateFieldGet(this, _OxyInferenceClient_credential, "f") : await __classPrivateFieldGet(this, _OxyInferenceClient_credential, "f").call(this);
     if (value === null || value === undefined || value.length === 0) {
         throw new Error('OxyInferenceClient has no bearer: the configured credential resolved to nothing. On the Oxy auth lane this usually means the session is not restored yet.');
     }
@@ -445,9 +438,7 @@ async function _OxyInferenceClient_request(method, path, options) {
         method,
         headers: await __classPrivateFieldGet(this, _OxyInferenceClient_instances, "m", _OxyInferenceClient_headers).call(this, 'application/json', {
             hasBody: options.body !== undefined,
-            ...(options.idempotencyKey === undefined
-                ? {}
-                : { idempotencyKey: options.idempotencyKey }),
+            ...(options.idempotencyKey === undefined ? {} : { idempotencyKey: options.idempotencyKey }),
             ...(options.delegatedUserId === undefined
                 ? {}
                 : { delegatedUserId: options.delegatedUserId }),
@@ -461,8 +452,11 @@ async function _OxyInferenceClient_request(method, path, options) {
     }
     if (options.bindRequestId) {
         const requestId = response.headers.get('X-Oxy-Request-Id');
-        if (!requestId || typeof payload !== 'object' || payload === null ||
-            !('requestId' in payload) || payload.requestId !== requestId) {
+        if (!requestId ||
+            typeof payload !== 'object' ||
+            payload === null ||
+            !('requestId' in payload) ||
+            payload.requestId !== requestId) {
             throw new OxyInferenceProtocolError('Decisions response request ID does not match its header.', requestId ?? undefined);
         }
     }

package/dist/esm/models/interfaces.js

@@ -3,15 +3,15 @@
  * Maps each event type to its default severity level
  */
 export const SECURITY_EVENT_SEVERITY_MAP = {
-    'sign_in': 'low',
-    'sign_out': 'low',
-    'profile_updated': 'low',
-    'email_changed': 'medium',
-    'device_added': 'medium',
-    'device_removed': 'medium',
-    'security_settings_changed': 'medium',
-    'account_recovery': 'high',
-    'private_key_exported': 'high',
-    'backup_created': 'high',
-    'suspicious_activity': 'critical',
+    sign_in: 'low',
+    sign_out: 'low',
+    profile_updated: 'low',
+    email_changed: 'medium',
+    device_added: 'medium',
+    device_removed: 'medium',
+    security_settings_changed: 'medium',
+    account_recovery: 'high',
+    private_key_exported: 'high',
+    backup_created: 'high',
+    suspicious_activity: 'critical',
 };

package/dist/esm/server/OxyServer.js

@@ -1,4 +1,4 @@
-import { subjectProductAccessQuerySchema, subjectProductGrantSnapshotSchema } from '@oxy.so/contracts';
+import { subjectProductAccessQuerySchema, subjectProductGrantSnapshotSchema, } from '@oxy.so/contracts';
 /**
  * `OxyServer` — the Oxy client for a backend.
  *
@@ -32,8 +32,9 @@ import { hasBoundedServiceTokenLifetime } from './serviceTokenLifetime.js';
 function reusableServiceToken(token) {
     try {
         const claims = jwtDecode(token);
-        return hasBoundedServiceTokenLifetime(claims) && typeof claims.exp === 'number'
-            && claims.exp > Math.floor(Date.now() / 1000);
+        return (hasBoundedServiceTokenLifetime(claims) &&
+            typeof claims.exp === 'number' &&
+            claims.exp > Math.floor(Date.now() / 1000));
     }
     catch {
         return false;
@@ -80,7 +81,11 @@ export class OxyServer extends OxyServices {
         this.actingAsPending = new Map();
         this.actingAsGenerations = new Map();
         /** Public keys only; never private material. */
-        this.jwksCache = { keys: new Map(), expiresAt: 0, lastAttemptAt: 0 };
+        this.jwksCache = {
+            keys: new Map(),
+            expiresAt: 0,
+            lastAttemptAt: 0,
+        };
         /**
          * Before this instant a request without a user session does not try to mint
          * a service token and goes out anonymous. Set after a failed mint.
@@ -224,7 +229,9 @@ export class OxyServer extends OxyServices {
                 });
                 throw new ServiceCredentialMismatchError();
             }
-            if (entry.token && reusableServiceToken(entry.token) && entry.expiresAt > now + TOKEN_REUSE_MARGIN_MS) {
+            if (entry.token &&
+                reusableServiceToken(entry.token) &&
+                entry.expiresAt > now + TOKEN_REUSE_MARGIN_MS) {
                 return entry.token;
             }
             if (entry.pending) {
@@ -283,7 +290,8 @@ export class OxyServer extends OxyServices {
             throw new Error('A user session is required');
         const answer = await this.request('GET', `/v1/products/${encodeURIComponent(parsed.productId)}/access/${encodeURIComponent(parsed.subjectAccountId)}/grants`, undefined, { cache: false, retry: false, headers: { Authorization: `Bearer ${accessToken}` } });
         const snapshot = subjectProductGrantSnapshotSchema.parse(answer);
-        if (snapshot.access.subjectAccountId !== parsed.subjectAccountId || snapshot.access.productId !== parsed.productId)
+        if (snapshot.access.subjectAccountId !== parsed.subjectAccountId ||
+            snapshot.access.productId !== parsed.productId)
             throw new Error('Product grant response attribution differs');
         return snapshot;
     }
@@ -292,7 +300,8 @@ export class OxyServer extends OxyServices {
         const parsed = subjectProductAccessQuerySchema.parse(query);
         const answer = await this.serviceRequest('GET', `/v1/products/${encodeURIComponent(parsed.productId)}/access/${encodeURIComponent(parsed.subjectAccountId)}/service-grants`, undefined, { cache: false, retry: false });
         const snapshot = subjectProductGrantSnapshotSchema.parse(answer);
-        if (snapshot.access.subjectAccountId !== parsed.subjectAccountId || snapshot.access.productId !== parsed.productId)
+        if (snapshot.access.subjectAccountId !== parsed.subjectAccountId ||
+            snapshot.access.productId !== parsed.productId)
             throw new Error('Product grant response attribution differs');
         return snapshot;
     }
@@ -314,7 +323,13 @@ export class OxyServer extends OxyServices {
      */
     async verifyActingAs(appId, userId, options = {}) {
         const pair = JSON.stringify([appId, userId]);
-        const cacheKey = JSON.stringify([appId, userId, options.credentialId, options.ownerAccountId, options.environment]);
+        const cacheKey = JSON.stringify([
+            appId,
+            userId,
+            options.credentialId,
+            options.ownerAccountId,
+            options.environment,
+        ]);
         if (options.cache === true) {
             const cached = this.actingAs.get(cacheKey);
             if (cached && cached.expiresAt > Date.now()) {
@@ -397,18 +412,32 @@ export class OxyServer extends OxyServices {
             entry.secretBuf = secretBuf;
         }
         else {
-            this.serviceTokens.set(cacheKey, { token: response.token, expiresAt, secretBuf, pending: null, apiKey: key });
+            this.serviceTokens.set(cacheKey, {
+                token: response.token,
+                expiresAt,
+                secretBuf,
+                pending: null,
+                apiKey: key,
+            });
         }
         return response.token;
     }
     /** A token obtained by attestation, cached like a credential's (one identity per process). */
     async workloadServiceToken() {
         const entry = this.serviceTokens.get(WORKLOAD_CACHE_KEY);
-        if (entry?.token && reusableServiceToken(entry.token) && entry.expiresAt > Date.now() + TOKEN_REUSE_MARGIN_MS)
+        if (entry?.token &&
+            reusableServiceToken(entry.token) &&
+            entry.expiresAt > Date.now() + TOKEN_REUSE_MARGIN_MS)
             return entry.token;
         if (entry?.pending)
             return entry.pending;
-        const seeded = entry ?? { token: '', expiresAt: 0, secretBuf: Buffer.alloc(0), pending: null, apiKey: WORKLOAD_CACHE_KEY };
+        const seeded = entry ?? {
+            token: '',
+            expiresAt: 0,
+            secretBuf: Buffer.alloc(0),
+            pending: null,
+            apiKey: WORKLOAD_CACHE_KEY,
+        };
         this.serviceTokens.set(WORKLOAD_CACHE_KEY, seeded);
         const pending = (async () => {
             const granted = await requestWorkloadServiceToken({ baseUrl: this.baseURL });
@@ -438,8 +467,22 @@ export class OxyServer extends OxyServices {
     async lookupActingAs(appId, userId, options, pair, cacheKey, generation, serial, startedAt) {
         try {
             const serviceToken = await this.serviceToken();
-            const result = await this.request('GET', '/internal/service-acting-as/verify', { appId, userId, ...(options.credentialId ? { credentialId: options.credentialId,
-                    ownerAccountId: options.ownerAccountId, environment: options.environment } : {}) }, { cache: false, retry: false, timeout: 5000, headers: { Authorization: `Bearer ${serviceToken}` } });
+            const result = await this.request('GET', '/internal/service-acting-as/verify', {
+                appId,
+                userId,
+                ...(options.credentialId
+                    ? {
+                        credentialId: options.credentialId,
+                        ownerAccountId: options.ownerAccountId,
+                        environment: options.environment,
+                    }
+                    : {}),
+            }, {
+                cache: false,
+                retry: false,
+                timeout: 5000,
+                headers: { Authorization: `Bearer ${serviceToken}` },
+            });
             // A deadline bounds how long an already old response can authorize. It
             // is not by itself a measurement of end-to-end revocation latency.
             if (this.actingAsGenerations.get(pair) !== generation || serial < generation.completed)
@@ -454,10 +497,11 @@ export class OxyServer extends OxyServices {
             const epoch = BigInt(rawEpoch);
             if (epoch > 9223372036854775807n)
                 return null;
-            if (typeof result.authorized !== 'boolean' || !Array.isArray(result.scopes)
-                || !result.scopes.every((scope) => typeof scope === 'string' && scope.length > 0 && scope.trim() === scope)
-                || new Set(result.scopes).size !== result.scopes.length
-                || (!result.authorized && result.scopes.length !== 0))
+            if (typeof result.authorized !== 'boolean' ||
+                !Array.isArray(result.scopes) ||
+                !result.scopes.every((scope) => typeof scope === 'string' && scope.length > 0 && scope.trim() === scope) ||
+                new Set(result.scopes).size !== result.scopes.length ||
+                (!result.authorized && result.scopes.length !== 0))
                 return null;
             const older = epoch < generation.epoch;
             if (epoch > generation.epoch)
@@ -465,7 +509,8 @@ export class OxyServer extends OxyServices {
             if (result.authorized && older)
                 return null;
             const verified = result.authorized === true
-                ? { authorized: true, scopes: result.scopes, epoch: rawEpoch } : null;
+                ? { authorized: true, scopes: result.scopes, epoch: rawEpoch }
+                : null;
             if (options.cache === true)
                 this.rememberActingAs(cacheKey, verified, startedAt + (verified ? ACTING_AS_GRANT_TTL_MS : ACTING_AS_DENIAL_TTL_MS));
             return verified;
@@ -476,7 +521,10 @@ export class OxyServer extends OxyServices {
                 this.clearActingAsPair(appId, userId);
             }
             logger.warn('[oxy.auth] verifyActingAs lookup failed — not cached', {
-                component: 'auth', method: 'verifyActingAs', appId, userId,
+                component: 'auth',
+                method: 'verifyActingAs',
+                appId,
+                userId,
             }, error);
             return null;
         }
@@ -515,11 +563,11 @@ export class OxyServer extends OxyServices {
         catch {
             throw new OxyAccountEventError('Account event token is malformed');
         }
-        if (Object.keys(header).length !== 3
-            || header.alg !== 'EdDSA'
-            || header.typ !== 'secevent+jwt'
-            || typeof header.kid !== 'string'
-            || !/^[A-Za-z0-9._-]{1,128}$/.test(header.kid)) {
+        if (Object.keys(header).length !== 3 ||
+            header.alg !== 'EdDSA' ||
+            header.typ !== 'secevent+jwt' ||
+            typeof header.kid !== 'string' ||
+            !/^[A-Za-z0-9._-]{1,128}$/.test(header.kid)) {
             throw new OxyAccountEventError('Account event token header is not supported');
         }
         const nodeCrypto = await loadNodeCrypto();
@@ -528,7 +576,9 @@ export class OxyServer extends OxyServices {
             jwk = await resolveServiceTokenPublicKey(header.kid, options.jwksUrl ?? new URL('/.well-known/jwks.json', this.baseURL).toString(), this.jwksCache);
         }
         catch (error) {
-            throw new OxyAccountEventError(error instanceof Error ? error.message.replace('Service token', 'Account event') : 'Signing key is unavailable');
+            throw new OxyAccountEventError(error instanceof Error
+                ? error.message.replace('Service token', 'Account event')
+                : 'Signing key is unavailable');
         }
         const signature = Buffer.from(signatureB64, 'base64url');
         if (signature.toString('base64url') !== signatureB64 || signature.length !== 64) {
@@ -536,7 +586,10 @@ export class OxyServer extends OxyServices {
         }
         let verified = false;
         try {
-            const publicKey = nodeCrypto.createPublicKey({ key: jwk, format: 'jwk' });
+            const publicKey = nodeCrypto.createPublicKey({
+                key: jwk,
+                format: 'jwk',
+            });
             verified = nodeCrypto.verify(null, Buffer.from(`${headerB64}.${payloadB64}`), publicKey, signature);
         }
         catch {
@@ -547,7 +600,7 @@ export class OxyServer extends OxyServices {
         if (payload.iss !== OXY_JWT_ISSUER) {
             throw new OxyAccountEventError('Account event token issuer is not Oxy');
         }
-        const audience = options.audience ?? await this.configuredServiceAppId();
+        const audience = options.audience ?? (await this.configuredServiceAppId());
         if (typeof payload.aud !== 'string' || payload.aud !== audience) {
             throw new OxyAccountEventError('Account event token is addressed to another application');
         }
@@ -563,7 +616,10 @@ export class OxyServer extends OxyServices {
         }
         const entries = Object.entries(events);
         const deleted = events[OXY_ACCOUNT_DELETED_EVENT_URI];
-        if (entries.length !== 1 || typeof deleted !== 'object' || deleted === null || Array.isArray(deleted)) {
+        if (entries.length !== 1 ||
+            typeof deleted !== 'object' ||
+            deleted === null ||
+            Array.isArray(deleted)) {
             throw new OxyAccountEventError('Account event token carries an unknown event');
         }
         const body = deleted;
@@ -573,7 +629,9 @@ export class OxyServer extends OxyServices {
         if (typeof body.occurredAt !== 'string' || Number.isNaN(Date.parse(body.occurredAt))) {
             throw new OxyAccountEventError('Account event has no occurrence time');
         }
-        if (body.username !== undefined && body.username !== null && typeof body.username !== 'string') {
+        if (body.username !== undefined &&
+            body.username !== null &&
+            typeof body.username !== 'string') {
             throw new OxyAccountEventError('Account event username is malformed');
         }
         return {

package/dist/esm/server/agentAccount.js

@@ -7,8 +7,12 @@ export async function signInAgentAccount(options) {
     const publicKey = normalizeSecp256k1PublicKey(signer.publicKey.trim());
     const claims = await client.auth.agent.requestChallenge(publicKey);
     const timestamp = Date.now();
-    if (claims.action !== 'agent_signin' || claims.accountId !== accountId || claims.actorId !== accountId
-        || normalizeSecp256k1PublicKey(claims.publicKey) !== publicKey || !claims.authMethodId || claims.expiresAt <= timestamp) {
+    if (claims.action !== 'agent_signin' ||
+        claims.accountId !== accountId ||
+        claims.actorId !== accountId ||
+        normalizeSecp256k1PublicKey(claims.publicKey) !== publicKey ||
+        !claims.authMethodId ||
+        claims.expiresAt <= timestamp) {
         throw new Error('Agent challenge does not match this account and signer');
     }
     const signature = await signer.signMessage(buildAgentProofMessage(claims, timestamp));

package/dist/esm/server/aliaMachineCredential.js

@@ -2,20 +2,34 @@
 export const OXY_ALIA_RESOURCE_APPLICATION_ID = '6a2f851751b784a86fd0e934';
 export const OXY_ALIA_MACHINE_SCOPES = ['alia:chat', 'inference:invoke'];
 function id(value) {
-    return typeof value === 'string' && value.length > 0 && value.length <= 128 && value.trim() === value;
+    return (typeof value === 'string' && value.length > 0 && value.length <= 128 && value.trim() === value);
 }
 /** Strict response boundary: extra user/tier fields cannot smuggle authority. */
 export function isOxyAliaMachinePrincipal(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         return false;
     const p = value;
-    const keys = ['kind', 'audience', 'applicationId', 'credentialId', 'ownerAccountId', 'environment', 'scopes'];
-    return Object.keys(p).length === keys.length && keys.every(key => Object.prototype.hasOwnProperty.call(p, key))
-        && p.kind === 'machine' && p.audience === OXY_ALIA_RESOURCE_APPLICATION_ID
-        && id(p.applicationId) && id(p.credentialId) && id(p.ownerAccountId)
-        && typeof p.environment === 'string' && ['production', 'staging', 'development'].includes(p.environment)
-        && Array.isArray(p.scopes) && p.scopes.length === 2
-        && OXY_ALIA_MACHINE_SCOPES.every(scope => p.scopes.includes(scope));
+    const keys = [
+        'kind',
+        'audience',
+        'applicationId',
+        'credentialId',
+        'ownerAccountId',
+        'environment',
+        'scopes',
+    ];
+    return (Object.keys(p).length === keys.length &&
+        keys.every((key) => Object.prototype.hasOwnProperty.call(p, key)) &&
+        p.kind === 'machine' &&
+        p.audience === OXY_ALIA_RESOURCE_APPLICATION_ID &&
+        id(p.applicationId) &&
+        id(p.credentialId) &&
+        id(p.ownerAccountId) &&
+        typeof p.environment === 'string' &&
+        ['production', 'staging', 'development'].includes(p.environment) &&
+        Array.isArray(p.scopes) &&
+        p.scopes.length === 2 &&
+        OXY_ALIA_MACHINE_SCOPES.every((scope) => p.scopes.includes(scope)));
 }
 // Keep the forwarding credential out of enumerable request/principal objects,
 // logs, response serialization and persistent SDK/session state. No cache.
@@ -23,7 +37,9 @@ const forwardingCredentials = new WeakMap();
 /** Only for the request-scoped Oxy inference client; never for a user API. */
 export function getOxyAliaMachineCredentialBearer(req) {
     const bound = forwardingCredentials.get(req);
-    return bound && req.machineCredential === bound.principal ? bound.bearer : null;
+    return bound && req.machineCredential === bound.principal
+        ? bound.bearer
+        : null;
 }
 /** Opt into Alia's app-only chat lane on its two chat routes, never globally. */
 export function createOxyAliaMachineCredentialAuth(server, options) {
@@ -35,19 +51,28 @@ export function createOxyAliaMachineCredentialAuth(server, options) {
             return;
         }
         const existing = req;
-        if (existing.user || existing.userId || existing.serviceApp || existing.oxyRequester
-            || req.machineCredential
-            || req.headers['x-oxy-user-id'] !== undefined || req.headers['x-oxy-requester-assertion'] !== undefined) {
+        if (existing.user ||
+            existing.userId ||
+            existing.serviceApp ||
+            existing.oxyRequester ||
+            req.machineCredential ||
+            req.headers['x-oxy-user-id'] !== undefined ||
+            req.headers['x-oxy-requester-assertion'] !== undefined) {
             res.status(403).json({ error: 'MACHINE_USER_DELEGATION_UNSUPPORTED' });
             return;
         }
         try {
             const answer = await server.apps.introspectAliaMachineCredential(token);
-            if (!answer.active || !isOxyAliaMachinePrincipal(answer.principal) || answer.principal.environment !== options.environment) {
+            if (!answer.active ||
+                !isOxyAliaMachinePrincipal(answer.principal) ||
+                answer.principal.environment !== options.environment) {
                 res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
                 return;
             }
-            const principal = Object.freeze({ ...answer.principal, scopes: Object.freeze(['alia:chat', 'inference:invoke']) });
+            const principal = Object.freeze({
+                ...answer.principal,
+                scopes: Object.freeze(['alia:chat', 'inference:invoke']),
+            });
             req.machineCredential = principal;
             forwardingCredentials.set(req, { principal, bearer: token });
             next();

package/dist/esm/server/auth.js

@@ -1,5 +1,5 @@
 import { logger } from '../logger/index.js';
-import { OXY_SERVICE_ENVIRONMENTS } from '../utils/oxyServiceEnvironment.js';
+import { OXY_SERVICE_ENVIRONMENTS, } from '../utils/oxyServiceEnvironment.js';
 export { OXY_SERVICE_ENVIRONMENTS };
 function normalizeId(value) {
     const normalized = value?.trim();
@@ -21,9 +21,7 @@ function ensureUser(req, userId) {
 }
 export function getOxyUserId(req) {
     const authReq = req;
-    return (normalizeId(authReq.userId) ??
-        normalizeId(authReq.user?.id) ??
-        normalizeId(authReq.user?._id));
+    return (normalizeId(authReq.userId) ?? normalizeId(authReq.user?.id) ?? normalizeId(authReq.user?._id));
 }
 /**
  * Who acted, and as whom, on this user session (issue #1520), or `null` when
@@ -167,7 +165,10 @@ export function requireOxyAuth(req, res, next) {
     next();
 }
 export function createOptionalOxyAuth(oxy, options = {}) {
-    const resolveSession = oxy.middleware.auth({ ...options.auth, optional: true });
+    const resolveSession = oxy.middleware.auth({
+        ...options.auth,
+        optional: true,
+    });
     return (req, res, next) => {
         if (getOxyUserId(req)) {
             next();

package/dist/esm/server/capabilityTicket.js

@@ -1,4 +1,4 @@
-import { randomUUID, sign as signBytes, verify as verifyBytes, } from 'node:crypto';
+import { randomUUID, sign as signBytes, verify as verifyBytes } from 'node:crypto';
 import { capabilityTicketClaimsSchema, } from '@oxy.so/contracts';
 const ALGORITHM = 'EdDSA';
 const TOKEN_TYPE = 'OXY-CAPABILITY+JWT';
@@ -55,11 +55,11 @@ export function verifyCapabilityTicket(token, options) {
         throw new CapabilityTicketError('malformed', 'Capability ticket header is not supported');
     }
     const headerRecord = header;
-    if (Object.keys(headerRecord).length !== 3
-        || headerRecord.alg !== ALGORITHM
-        || headerRecord.typ !== TOKEN_TYPE
-        || typeof headerRecord.kid !== 'string'
-        || headerRecord.kid.length === 0) {
+    if (Object.keys(headerRecord).length !== 3 ||
+        headerRecord.alg !== ALGORITHM ||
+        headerRecord.typ !== TOKEN_TYPE ||
+        typeof headerRecord.kid !== 'string' ||
+        headerRecord.kid.length === 0) {
         throw new CapabilityTicketError('malformed', 'Capability ticket header is not supported');
     }
     const publicKey = options.resolvePublicKey(headerRecord.kid);

package/dist/esm/server/index.js

@@ -16,7 +16,7 @@
  */
 // The backend client: OxyServices plus the service-token lane, middleware,
 // account events and the service-only namespace methods.
-export { OxyServer, ServiceCredentialMismatchError, ANONYMOUS_SERVICE_TOKEN_RETRY_MS } from './OxyServer.js';
+export { OxyServer, ServiceCredentialMismatchError, ANONYMOUS_SERVICE_TOKEN_RETRY_MS, } from './OxyServer.js';
 export { ServerAppsApi, ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces.js';
 export { createOxyAliaMachineCredentialAuth, getOxyAliaMachineCredentialBearer, isOxyAliaMachinePrincipal, OXY_ALIA_RESOURCE_APPLICATION_ID, OXY_ALIA_MACHINE_SCOPES, } from './aliaMachineCredential.js';
 export { OxyAccountEventError, OXY_ACCOUNT_DELETED_EVENT_URI } from './middleware.js';
@@ -48,13 +48,13 @@ export { createOxyUserInvalidationHandler, publishOxyUserInvalidation, } from '.
 // The identity-key enumeration itself is platform-neutral (`src/utils/`) so the
 // client namespaces and this Node-only subscriber sweep the SAME list — a second
 // copy is what let `updateAccount` and `updateProfile` drift apart.
-export { evictOxyIdentityCache, oxyUserByIdCacheKey, OXY_IDENTITY_CACHE_PREFIXES } from '../utils/identityCacheSweep.js';
+export { evictOxyIdentityCache, oxyUserByIdCacheKey, OXY_IDENTITY_CACHE_PREFIXES, } from '../utils/identityCacheSweep.js';
 // Registrable-apex (eTLD+1) derivation via the Public Suffix List — the SINGLE
 // SOURCE OF TRUTH shared with the IdP worker and the client FAPI auto-detect.
 // Pure host handling (no browser deps), so it is safe on the server subpath and
 // lets `@oxy.so/api` derive `auth.<apex>` without duplicating PSL logic.
 export { registrableApex } from '../utils/registrableApex.js';
-export { isLoopbackOrigin, isOfficialWebOrigin, isAllowedDeviceJoinOrigin } from '../utils/officialOrigins.js';
+export { isLoopbackOrigin, isOfficialWebOrigin, isAllowedDeviceJoinOrigin, } from '../utils/officialOrigins.js';
 export { createEcosystemTraffic } from './traffic.js';
 export { observeNodeHttp, withoutNodeHttpObservation } from './trafficNodeHttp.js';
 /**
@@ -63,6 +63,6 @@ export { observeNodeHttp, withoutNodeHttpObservation } from './trafficNodeHttp.j
  * exported from this subpath rather than the root barrel because it reaches the
  * container credentials endpoint.
  */
-export { canAttestWorkloadIdentity, requestWorkloadServiceToken } from './workloadIdentity.js';
-export { OXY_SERVICE_TOKEN_MAX_LIFETIME_SECONDS, hasBoundedServiceTokenLifetime } from './serviceTokenLifetime.js';
+export { attestWorkloadIdentity, canAttestWorkloadIdentity, requestWorkloadServiceToken, } from './workloadIdentity.js';
+export { OXY_SERVICE_TOKEN_MAX_LIFETIME_SECONDS, hasBoundedServiceTokenLifetime, } from './serviceTokenLifetime.js';
 export { signInAgentAccount } from './agentAccount.js';

package/dist/esm/server/liveCapabilityTicket.js

@@ -1,5 +1,5 @@
-import { canonicalCapabilityJson, capabilityTicketClaimsSchema } from '@oxy.so/contracts';
-import { verifyCapabilityTicket } from './capabilityTicket.js';
+import { canonicalCapabilityJson, capabilityTicketClaimsSchema, } from '@oxy.so/contracts';
+import { verifyCapabilityTicket, } from './capabilityTicket.js';
 /** Local signature + live receiving-service introspection; no cache or retry. */
 export function createLiveCapabilityTicketVerifier(options) {
     if (typeof options.issuer !== 'string' || options.issuer.trim() === '')
@@ -25,7 +25,10 @@ export function createLiveCapabilityTicketVerifier(options) {
                 if (controller.signal.aborted)
                     rejectAbort();
             });
-            const result = await Promise.race([options.introspect(ticket, { signal: controller.signal }), interrupted]);
+            const result = await Promise.race([
+                options.introspect(ticket, { signal: controller.signal }),
+                interrupted,
+            ]);
             controller.signal.throwIfAborted();
             if (result.active !== true)
                 throw new Error('Capability ticket is inactive');