@oxy.so/core 7.11.1 → 7.13.0

package/dist/cjs/i18n/locales/en-US.js

@@ -163,6 +163,9 @@ const dict = {
             requestExpired: 'This sign-in expired. Send a new email.',
             secondFactorInvalid: "That code isn't right. Try the current one.",
             originNotAllowed: "Sign-in isn't available here.",
+            network: "Couldn't reach Oxy. Check your connection and try again.",
+            invalidInput: "Something you entered isn't valid. Check it and try again.",
+            server: "Oxy couldn't finish this right now. Try again in a moment.",
             generic: 'Something went wrong. Please try again.',
         },
         subtitleToApp: 'to continue to {{app}}',
@@ -225,6 +228,31 @@ const dict = {
             invalidDescription: 'It expired or was already used. Ask for a new email in the app, or type the code from the latest one.',
         },
     },
+    actionErrors: {
+        updateProfile: "Couldn't update your profile. Please try again.",
+        uploadAvatar: "Couldn't upload the picture. Please try again.",
+        updateSettings: "Couldn't save your settings. Please try again.",
+        updatePrivacy: "Couldn't save your privacy settings. Please try again.",
+        updateNotifications: "Couldn't save your notification preferences. Please try again.",
+        updatePreferences: "Couldn't save your preferences. Please try again.",
+        revokeConnectedApp: "Couldn't disconnect the app. Please try again.",
+        switchSession: "Couldn't switch accounts. Please try again.",
+        logout: "Couldn't sign out. Please try again.",
+        logoutAll: "Couldn't sign out everywhere. Please try again.",
+        updateDeviceName: "Couldn't rename the device. Please try again.",
+        removeDevice: "Couldn't remove the device. Please try again.",
+    },
+    usernamePolicy: {
+        hint: 'Letters, numbers, - and _. No spaces.',
+        required: 'Choose a username.',
+        tooShort: 'Use at least {{min}} characters.',
+        tooLong: 'Use at most {{max}} characters.',
+        noSpaces: "Usernames can't contain spaces. Use - or _ instead.",
+        characters: 'Use only letters, numbers, - and _. Start and end with a letter or number, and never put two of - or _ together.',
+        onlyNumbers: "A username can't be only numbers. Add a letter.",
+        reserved: 'That username is reserved. Choose another one.',
+        mustEndInBot: 'A bot account’s username must end in “bot”.',
+    },
     signup: {
         title: 'Create your account',
         subtitle: 'Choose your username. Then we confirm your email.',
@@ -233,7 +261,6 @@ const dict = {
         username: {
             label: 'Username',
             placeholder: 'yourname',
-            required: 'Choose a username.',
             taken: 'That username is taken.',
         },
         email: {
@@ -281,7 +308,6 @@ const dict = {
             firstPlaceholder: 'Your first name',
             lastLabel: 'Last name',
             lastPlaceholder: 'Your last name',
-            saveFailed: 'Could not save your name',
         },
         avatar: {
             title: 'Make It Yours',
@@ -604,8 +630,6 @@ const dict = {
                 label: 'Username',
                 placeholder: 'Choose a username',
                 choose: 'Choose a username',
-                required: 'Username is required',
-                tooShort: 'Username must be at least 3 characters',
             },
             email: {
                 title: 'Email',
@@ -1260,7 +1284,7 @@ const dict = {
             },
             rules: {
                 title: 'Username rules',
-                content: 'Usernames can only contain lowercase letters (a-z) and numbers (0-9). They must be at least 4 characters long. Special characters, spaces, and uppercase letters are not allowed to keep usernames simple and easy to remember.',
+                content: 'Usernames are 3 to 30 characters long and use letters, numbers, hyphens (-) and underscores (_). They start and end with a letter or number, never put two of - or _ together, and are not only numbers. Spaces are not allowed. Capital letters are kept as you type them, but Alice and alice are the same username.',
             },
             unique: {
                 title: 'Why must it be unique?',
@@ -1839,9 +1863,6 @@ const dict = {
                 label: 'Username',
                 available: 'Username is available',
                 taken: 'Username is taken',
-                tooShort: 'Username must be at least 3 characters',
-                invalidChars: 'Only letters, numbers, hyphens, and underscores',
-                mustEndInBot: 'A bot account’s username must end in “bot”',
                 checkFailed: 'Could not check availability',
             },
             accountCategory: {
@@ -1876,16 +1897,16 @@ const dict = {
                 transfer: 'Transfer ownership',
             },
             errors: {
-                identifierRequired: 'Enter a username or email to invite',
+                emailRequired: 'Enter an email to invite.',
+                emailInvalid: 'Enter a valid email address, like name@example.com.',
                 missingAccount: 'No account selected.',
                 noPermission: 'You do not have permission to view members.',
-                userNotFound: 'User not found',
             },
             invite: {
-                title: 'Add a member',
-                identifierLabel: 'Username or email',
+                title: 'Invite a member',
+                emailLabel: 'Email',
                 roleLabel: 'Role',
-                submit: 'Add member',
+                submit: 'Send invitation',
             },
             removeConfirm: {
                 title: 'Remove member',
@@ -1896,8 +1917,9 @@ const dict = {
                 description: 'Transfer ownership of this account to this member? You will be demoted to admin. This cannot be undone.',
             },
             toasts: {
-                added: 'Member added',
-                addFailed: 'Failed to add member',
+                invited: 'Invitation sent',
+                inviteFailed: "Couldn't send the invitation. Please try again.",
+                invitationUpdateFailed: "Couldn't update the invitation. Please try again.",
                 removed: 'Member removed',
                 removeFailed: 'Failed to remove member',
                 roleUpdated: 'Role updated',
@@ -1959,6 +1981,7 @@ const dict = {
         title: 'Delete Account',
         warning: 'This action cannot be undone. Your account and all associated data will be permanently deleted.',
         confirmLabel: 'Type "{{username}}" to confirm',
+        confirmMismatch: 'That isn\'t your username. Type "{{username}}" exactly.',
         confirm: 'Delete Forever',
         error: 'Failed to delete account',
         handoff: {
@@ -2311,6 +2334,7 @@ const dict = {
             newLabel: 'New password',
             repeatLabel: 'Repeat the password',
             tooShort: 'Use at least {{min}} characters.',
+            tooLong: 'Use at most {{max}} characters.',
             mismatch: "The passwords don't match.",
             signOutOthers: 'Sign out everywhere else',
             save: 'Save password',
@@ -2373,6 +2397,7 @@ const dict = {
             request: "Couldn't start the verification. Check the domain and try again.",
             notYet: 'Not verified yet. Changes to DNS can take a while to show up.',
             remove: "Couldn't remove the domain",
+            invalid: 'Enter just the domain, like example.com — no https://, slashes or spaces.',
         },
         remove: {
             title: 'Remove domain',

package/dist/cjs/i18n/locales/es-ES.js

@@ -163,6 +163,9 @@ const dict = {
             requestExpired: 'Este inicio de sesión ha caducado. Envía un email nuevo.',
             secondFactorInvalid: 'Ese código no es correcto. Prueba con el actual.',
             originNotAllowed: 'Aquí no se puede iniciar sesión.',
+            network: 'No se ha podido conectar con Oxy. Comprueba tu conexión e inténtalo de nuevo.',
+            invalidInput: 'Algo de lo que has escrito no es válido. Revísalo e inténtalo de nuevo.',
+            server: 'Oxy no ha podido terminar esto ahora. Inténtalo de nuevo en un momento.',
             generic: 'Algo ha ido mal. Inténtalo de nuevo.',
         },
         subtitleToApp: 'para continuar en {{app}}',
@@ -225,6 +228,31 @@ const dict = {
             invalidDescription: 'Ha caducado o ya se ha usado. Pide un email nuevo en la app o escribe el código del último.',
         },
     },
+    actionErrors: {
+        updateProfile: 'No se ha podido actualizar tu perfil. Inténtalo de nuevo.',
+        uploadAvatar: 'No se ha podido subir la foto. Inténtalo de nuevo.',
+        updateSettings: 'No se han podido guardar tus ajustes. Inténtalo de nuevo.',
+        updatePrivacy: 'No se han podido guardar tus ajustes de privacidad. Inténtalo de nuevo.',
+        updateNotifications: 'No se han podido guardar tus preferencias de notificaciones. Inténtalo de nuevo.',
+        updatePreferences: 'No se han podido guardar tus preferencias. Inténtalo de nuevo.',
+        revokeConnectedApp: 'No se ha podido desconectar la app. Inténtalo de nuevo.',
+        switchSession: 'No se ha podido cambiar de cuenta. Inténtalo de nuevo.',
+        logout: 'No se ha podido cerrar la sesión. Inténtalo de nuevo.',
+        logoutAll: 'No se ha podido cerrar la sesión en todas partes. Inténtalo de nuevo.',
+        updateDeviceName: 'No se ha podido cambiar el nombre del dispositivo. Inténtalo de nuevo.',
+        removeDevice: 'No se ha podido quitar el dispositivo. Inténtalo de nuevo.',
+    },
+    usernamePolicy: {
+        hint: 'Letras, números, - y _. Sin espacios.',
+        required: 'Elige un nombre de usuario.',
+        tooShort: 'Usa al menos {{min}} caracteres.',
+        tooLong: 'Usa como máximo {{max}} caracteres.',
+        noSpaces: 'El nombre de usuario no puede tener espacios. Usa - o _ en su lugar.',
+        characters: 'Usa solo letras, números, - y _. Empieza y termina con una letra o un número, y no pongas dos - o _ seguidos.',
+        onlyNumbers: 'El nombre de usuario no puede ser solo números. Añade una letra.',
+        reserved: 'Ese nombre de usuario está reservado. Elige otro.',
+        mustEndInBot: 'El nombre de usuario de una cuenta bot debe terminar en «bot».',
+    },
     signup: {
         title: 'Crea tu cuenta',
         subtitle: 'Elige tu nombre de usuario. Después confirmamos tu email.',
@@ -233,7 +261,6 @@ const dict = {
         username: {
             label: 'Nombre de usuario',
             placeholder: 'tunombre',
-            required: 'Elige un nombre de usuario.',
             taken: 'Ese nombre de usuario ya está en uso.',
         },
         email: {
@@ -305,8 +332,6 @@ const dict = {
                 label: 'Usuario',
                 placeholder: 'Elige un usuario',
                 choose: 'Elige un usuario',
-                required: 'El usuario es obligatorio',
-                tooShort: 'El usuario debe tener al menos 3 caracteres',
             },
             email: {
                 title: 'Correo electrónico',
@@ -904,7 +929,6 @@ const dict = {
             firstPlaceholder: 'Tu nombre',
             lastLabel: 'Apellidos',
             lastPlaceholder: 'Tus apellidos',
-            saveFailed: 'No se pudo guardar tu nombre',
         },
         avatar: {
             title: 'Hazlo tuyo',
@@ -1260,7 +1284,7 @@ const dict = {
             },
             rules: {
                 title: 'Reglas del nombre de usuario',
-                content: 'Los nombres de usuario solo pueden contener letras minúsculas (a-z) y números (0-9). Deben tener al menos 4 caracteres. No se permiten caracteres especiales, espacios ni mayúsculas para mantener los nombres de usuario simples y fáciles de recordar.',
+                content: 'Los nombres de usuario tienen entre 3 y 30 caracteres y usan letras, números, guiones (-) y guiones bajos (_). Empiezan y terminan con una letra o un número, nunca llevan dos - o _ seguidos y no son solo números. No se permiten espacios. Las mayúsculas se guardan tal como las escribes, pero Alicia y alicia son el mismo nombre de usuario.',
             },
             unique: {
                 title: '¿Por qué debe ser único?',
@@ -1839,9 +1863,6 @@ const dict = {
                 label: 'Nombre de usuario',
                 available: 'El nombre de usuario está disponible',
                 taken: 'El nombre de usuario ya está en uso',
-                tooShort: 'El nombre de usuario debe tener al menos 3 caracteres',
-                invalidChars: 'Solo letras, números, guiones y guiones bajos',
-                mustEndInBot: 'El nombre de usuario de una cuenta de bot debe terminar en “bot”',
                 checkFailed: 'No se pudo comprobar la disponibilidad',
             },
             accountCategory: {
@@ -1876,16 +1897,16 @@ const dict = {
                 transfer: 'Transferir propiedad',
             },
             errors: {
-                identifierRequired: 'Introduce un nombre de usuario o correo para invitar',
+                emailRequired: 'Introduce un email para invitar.',
+                emailInvalid: 'Introduce un email válido, como nombre@ejemplo.com.',
                 missingAccount: 'Ninguna cuenta seleccionada.',
                 noPermission: 'No tienes permiso para ver los miembros.',
-                userNotFound: 'Usuario no encontrado',
             },
             invite: {
-                title: 'Añadir un miembro',
-                identifierLabel: 'Nombre de usuario o correo',
+                title: 'Invitar a un miembro',
+                emailLabel: 'Email',
                 roleLabel: 'Rol',
-                submit: 'Añadir miembro',
+                submit: 'Enviar invitación',
             },
             removeConfirm: {
                 title: 'Eliminar miembro',
@@ -1896,8 +1917,9 @@ const dict = {
                 description: '¿Transferir la propiedad de esta cuenta a este miembro? Pasarás a ser administrador. Esto no se puede deshacer.',
             },
             toasts: {
-                added: 'Miembro añadido',
-                addFailed: 'No se pudo añadir el miembro',
+                invited: 'Invitación enviada',
+                inviteFailed: 'No se ha podido enviar la invitación. Inténtalo de nuevo.',
+                invitationUpdateFailed: 'No se ha podido actualizar la invitación. Inténtalo de nuevo.',
                 removed: 'Miembro eliminado',
                 removeFailed: 'No se pudo eliminar el miembro',
                 roleUpdated: 'Rol actualizado',
@@ -1959,6 +1981,7 @@ const dict = {
         title: 'Eliminar cuenta',
         warning: 'Esta acción no se puede deshacer. Tu cuenta y todos los datos asociados se eliminarán de forma permanente.',
         confirmLabel: 'Escribe "{{username}}" para confirmar',
+        confirmMismatch: 'Ese no es tu nombre de usuario. Escribe "{{username}}" exactamente.',
         confirm: 'Eliminar para siempre',
         error: 'No se pudo eliminar la cuenta',
         handoff: {
@@ -2311,6 +2334,7 @@ const dict = {
             newLabel: 'Contraseña nueva',
             repeatLabel: 'Repite la contraseña',
             tooShort: 'Usa al menos {{min}} caracteres.',
+            tooLong: 'Usa como máximo {{max}} caracteres.',
             mismatch: 'Las contraseñas no coinciden.',
             signOutOthers: 'Cerrar sesión en todos los demás sitios',
             save: 'Guardar contraseña',
@@ -2373,6 +2397,7 @@ const dict = {
             request: 'No se pudo empezar la verificación. Revisa el dominio e inténtalo otra vez.',
             notYet: 'Aún no está verificado. Los cambios de DNS pueden tardar en aparecer.',
             remove: 'No se pudo quitar el dominio',
+            invalid: 'Escribe solo el dominio, como ejemplo.com, sin https://, barras ni espacios.',
         },
         remove: {
             title: 'Quitar dominio',

package/dist/cjs/index.js

@@ -21,10 +21,10 @@
  * If a symbol does not appear here, it is NOT part of the public API.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getBaseLanguage = exports.FALLBACK_LOCALE = exports.SUPPORTED_LANGUAGES = exports.TopicSource = exports.TopicType = exports.SECURITY_EVENT_SEVERITY_MAP = exports.sessionsArraysEqual = exports.normalizeAndSortSessions = exports.mergeSessions = exports.authenticatedApiCall = exports.withAuthErrorHandling = exports.isAuthenticationError = exports.ensureValidToken = exports.AuthenticationFailedError = exports.SessionSyncRequiredError = exports.normalizeProfileLinks = exports.getNormalizedUserHandle = exports.getCanonicalUserHandle = exports.normalizeUserIdentityOrNull = exports.normalizeUserIdentity = exports.getNormalizedUserId = exports.commonsDeliveryPlatform = exports.pushTargetsFromDelivery = exports.selectCommonsDelivery = exports.parseCommonsApprovalExpiresAt = exports.getCommonsApprovalBlockingReason = exports.OxyAppDataIdentifierError = exports.AccountNotOnDeviceError = exports.REPUTATION_CACHE_PREFIX = exports.StoreInstallerError = exports.setStoreInstaller = exports.getStoreInstaller = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.ACCOUNT_CATEGORY_IDS = exports.buildUserDid = exports.DirectUploadInterruptedError = exports.MAX_UPLOAD_BYTES = exports.assetUrlCacheTTL = exports.ASSET_MULTIPART_UPLOAD_MAX_BYTES = exports.ServiceAssetMetadataError = exports.AssetUrlResolutionError = exports.OxyAuthenticationTimeoutError = exports.OxyAuthenticationError = exports.OxyApiError = exports.OXY_CLOUD_URL = exports.OXY_API_URL = exports.OxyServices = void 0;
-exports.isLocaleLoaded = exports.loadLocale = exports.translate = exports.withRetry = exports.delay = exports.shouldAllowRequest = exports.recordSuccess = exports.recordFailure = exports.calculateBackoffInterval = exports.createCircuitBreakerState = exports.DEFAULT_CIRCUIT_BREAKER_CONFIG = exports.isRetryableError = exports.isNetworkError = exports.isServerError = exports.isRateLimitError = exports.isNotFoundError = exports.isForbiddenError = exports.isUnauthorizedError = exports.isAlreadyRegisteredError = exports.getErrorMessage = exports.getErrorStatus = exports.HttpStatus = exports.getSystemColorScheme = exports.systemPrefersDarkMode = exports.getOppositeTheme = exports.normalizeColorScheme = exports.normalizeTheme = exports.getContrastTextColor = exports.isLightColor = exports.withOpacity = exports.rgbToHex = exports.hexToRgb = exports.lightenColor = exports.darkenColor = exports.isWebBrowser = exports.isAndroid = exports.isIOS = exports.isNative = exports.isWeb = exports.setPlatformOS = exports.getPlatformOS = exports.coerceToSupportedLocale = exports.getPrimaryLanguage = exports.getUserLanguages = exports.isRTLLocale = exports.getNativeLanguageName = exports.getLanguageName = exports.getLanguageMetadata = exports.isSupportedLocale = exports.normalizeLocale = void 0;
-exports.normalizeMultilineText = exports.normalizeInlineText = exports.validateAndSanitizeUserInput = exports.isValidObjectId = exports.sanitizeHTML = exports.sanitizeString = exports.isValidFileType = exports.isValidFileSize = exports.isValidDate = exports.isValidURL = exports.isValidUUID = exports.isValidObject = exports.isValidArray = exports.isRequiredBoolean = exports.isRequiredNumber = exports.isRequiredString = exports.DISPLAY_NAME_UNFLANKED_SEPARATOR_SOURCE = exports.DISPLAY_NAME_ORPHANED_MARK_SOURCE = exports.DISPLAY_NAME_DISALLOWED_SOURCE = exports.DISPLAY_NAME_ALLOWED_SCRIPTS = exports.accountNameInvalidKey = exports.accountNameInvalidMessage = exports.accountNameMaxLength = exports.isValidAccountName = exports.isValidDisplayName = exports.isValidPassword = exports.isValidEmail = exports.ACCOUNT_TITLE_INVALID_MESSAGE = exports.DISPLAY_NAME_INVALID_MESSAGE = exports.MAX_DISPLAY_NAME_LENGTH = exports.PASSWORD_REGEX = exports.EMAIL_REGEX = exports.retryAsync = exports.validateRequiredFields = exports.parseHttpErrorBody = exports.isHttpRequestError = exports.handleHttpError = exports.createApiError = exports.ErrorCodes = exports.safeJsonParse = exports.buildPaginationParams = exports.buildUrl = exports.buildSearchParams = exports.buildQueryParams = exports.trustTierLabel = exports.reputationCategoryLabel = exports.accountRoleLabel = exports.accountCategoryLabel = exports.getLocalesVersion = exports.subscribeLocales = void 0;
-exports.packageInfo = exports.consumeOAuthReturnPath = exports.persistOAuthReturnPath = exports.clearOAuthHandshake = exports.readOAuthHandshake = exports.persistOAuthHandshake = exports.canonicalizeOAuthRedirectUri = exports.normalizeOAuthRedirectUri = exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY = exports.OXY_OAUTH_REDIRECT_URI_STORAGE_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.OXY_AUTHORIZE_URL = exports.DEFAULT_OAUTH_SCOPE = exports.generatePkcePair = exports.generateOAuthState = exports.computeCodeChallenge = exports.buildOAuthAuthorizeUrl = exports.CENTRAL_IDP_APEX = exports.AUTH_WEB_ORIGIN = exports.getAccountColor = exports.formatPublicKeyHandle = exports.getAccountFallbackHandle = exports.getAccountDisplayName = exports.createQuickAccount = exports.buildAccountsArray = exports.updateAvatarVisibility = exports.isDev = exports.consoleSink = exports.resetLoggerConfig = exports.getLoggerConfig = exports.configureLogger = exports.createLogger = exports.logger = void 0;
+exports.FALLBACK_LOCALE = exports.SUPPORTED_LANGUAGES = exports.TopicSource = exports.TopicType = exports.SECURITY_EVENT_SEVERITY_MAP = exports.sessionsArraysEqual = exports.normalizeAndSortSessions = exports.mergeSessions = exports.authenticatedApiCall = exports.withAuthErrorHandling = exports.isAuthenticationError = exports.ensureValidToken = exports.AuthenticationFailedError = exports.SessionSyncRequiredError = exports.normalizeProfileLinks = exports.getNormalizedUserHandle = exports.getCanonicalUserHandle = exports.normalizeUserIdentityOrNull = exports.normalizeUserIdentity = exports.getNormalizedUserId = exports.commonsDeliveryPlatform = exports.pushTargetsFromDelivery = exports.selectCommonsDelivery = exports.parseCommonsApprovalExpiresAt = exports.getCommonsApprovalBlockingReason = exports.OxyAppDataIdentifierError = exports.AccountNotOnDeviceError = exports.REPUTATION_CACHE_PREFIX = exports.StoreInstallerError = exports.setStoreInstaller = exports.getStoreInstaller = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.ACCOUNT_CATEGORY_IDS = exports.buildUserDid = exports.DirectUploadInterruptedError = exports.MAX_UPLOAD_BYTES = exports.assetUrlCacheTTL = exports.ASSET_MULTIPART_UPLOAD_MAX_BYTES = exports.sameHolderIdentity = exports.ServiceAssetMetadataError = exports.AssetUrlResolutionError = exports.OxyAuthenticationTimeoutError = exports.OxyAuthenticationError = exports.OxyApiError = exports.OXY_CLOUD_URL = exports.OXY_API_URL = exports.OxyServices = void 0;
+exports.loadLocale = exports.translate = exports.withRetry = exports.delay = exports.shouldAllowRequest = exports.recordSuccess = exports.recordFailure = exports.calculateBackoffInterval = exports.createCircuitBreakerState = exports.DEFAULT_CIRCUIT_BREAKER_CONFIG = exports.isRetryableError = exports.isNetworkError = exports.isServerError = exports.isRateLimitError = exports.isNotFoundError = exports.isForbiddenError = exports.isUnauthorizedError = exports.isAlreadyRegisteredError = exports.getErrorMessage = exports.getErrorStatus = exports.HttpStatus = exports.getSystemColorScheme = exports.systemPrefersDarkMode = exports.getOppositeTheme = exports.normalizeColorScheme = exports.normalizeTheme = exports.getContrastTextColor = exports.isLightColor = exports.withOpacity = exports.rgbToHex = exports.hexToRgb = exports.lightenColor = exports.darkenColor = exports.isWebBrowser = exports.isAndroid = exports.isIOS = exports.isNative = exports.isWeb = exports.setPlatformOS = exports.getPlatformOS = exports.coerceToSupportedLocale = exports.getPrimaryLanguage = exports.getUserLanguages = exports.isRTLLocale = exports.getNativeLanguageName = exports.getLanguageName = exports.getLanguageMetadata = exports.isSupportedLocale = exports.normalizeLocale = exports.getBaseLanguage = void 0;
+exports.normalizeInlineText = exports.validateAndSanitizeUserInput = exports.isValidObjectId = exports.sanitizeHTML = exports.sanitizeString = exports.isValidFileType = exports.isValidFileSize = exports.isValidDate = exports.isValidURL = exports.isValidUUID = exports.isValidObject = exports.isValidArray = exports.isRequiredBoolean = exports.isRequiredNumber = exports.isRequiredString = exports.DISPLAY_NAME_UNFLANKED_SEPARATOR_SOURCE = exports.DISPLAY_NAME_ORPHANED_MARK_SOURCE = exports.DISPLAY_NAME_DISALLOWED_SOURCE = exports.DISPLAY_NAME_ALLOWED_SCRIPTS = exports.accountNameInvalidKey = exports.accountNameInvalidMessage = exports.accountNameMaxLength = exports.isValidAccountName = exports.isValidDisplayName = exports.isValidPassword = exports.isValidEmail = exports.ACCOUNT_TITLE_INVALID_MESSAGE = exports.DISPLAY_NAME_INVALID_MESSAGE = exports.MAX_DISPLAY_NAME_LENGTH = exports.PASSWORD_REGEX = exports.EMAIL_REGEX = exports.retryAsync = exports.validateRequiredFields = exports.parseHttpErrorBody = exports.isHttpRequestError = exports.handleHttpError = exports.createApiError = exports.ErrorCodes = exports.safeJsonParse = exports.buildPaginationParams = exports.buildUrl = exports.buildSearchParams = exports.buildQueryParams = exports.trustTierLabel = exports.reputationCategoryLabel = exports.accountRoleLabel = exports.accountCategoryLabel = exports.getLocalesVersion = exports.subscribeLocales = exports.isLocaleLoaded = void 0;
+exports.packageInfo = exports.consumeOAuthReturnPath = exports.persistOAuthReturnPath = exports.clearOAuthHandshake = exports.readOAuthHandshake = exports.persistOAuthHandshake = exports.canonicalizeOAuthRedirectUri = exports.normalizeOAuthRedirectUri = exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY = exports.OXY_OAUTH_REDIRECT_URI_STORAGE_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.OXY_AUTHORIZE_URL = exports.DEFAULT_OAUTH_SCOPE = exports.generatePkcePair = exports.generateOAuthState = exports.computeCodeChallenge = exports.buildOAuthAuthorizeUrl = exports.CENTRAL_IDP_APEX = exports.AUTH_WEB_ORIGIN = exports.getAccountColor = exports.formatPublicKeyHandle = exports.getAccountFallbackHandle = exports.getAccountDisplayName = exports.createQuickAccount = exports.buildAccountsArray = exports.updateAvatarVisibility = exports.isDev = exports.consoleSink = exports.resetLoggerConfig = exports.getLoggerConfig = exports.configureLogger = exports.createLogger = exports.logger = exports.normalizeMultilineText = void 0;
 // The crypto shim MUST stay the first import. The root itself ships no crypto
 // library (`__tests__/rootEntryGraph.test.ts`), but `@oxy.so/protocol`'s root
 // entry (reached by the OAuth/PKCE and device helpers) does, and Metro does not
@@ -44,6 +44,8 @@ Object.defineProperty(exports, "OxyAuthenticationError", { enumerable: true, get
 Object.defineProperty(exports, "OxyAuthenticationTimeoutError", { enumerable: true, get: function () { return OxyServices_errors_1.OxyAuthenticationTimeoutError; } });
 Object.defineProperty(exports, "AssetUrlResolutionError", { enumerable: true, get: function () { return OxyServices_errors_1.AssetUrlResolutionError; } });
 Object.defineProperty(exports, "ServiceAssetMetadataError", { enumerable: true, get: function () { return OxyServices_errors_1.ServiceAssetMetadataError; } });
+var holderEvidence_1 = require("./api/holderEvidence");
+Object.defineProperty(exports, "sameHolderIdentity", { enumerable: true, get: function () { return holderEvidence_1.sameHolderIdentity; } });
 var assets_1 = require("./api/assets");
 Object.defineProperty(exports, "ASSET_MULTIPART_UPLOAD_MAX_BYTES", { enumerable: true, get: function () { return assets_1.ASSET_MULTIPART_UPLOAD_MAX_BYTES; } });
 Object.defineProperty(exports, "assetUrlCacheTTL", { enumerable: true, get: function () { return assets_1.assetUrlCacheTTL; } });

package/dist/esm/HttpService.js

@@ -36,6 +36,9 @@ const REQUESTER_PROOF_HEADERS = new Set([
     'x-oxy-presented-requester-context',
     'x-oxy-presented-service-token',
 ]);
+function newCredentialGeneration() {
+    return Object.freeze({});
+}
 /** Comparison only fences local async work; it never validates token authority. */
 function sameTokenSession(left, right) {
     if (left === right)
@@ -246,14 +249,25 @@ const CACHE_SIZE_WARNING_THROTTLE_MS = 60000;
 class TokenStore {
     constructor() {
         this.accessToken = null;
+        this.generation = newCredentialGeneration();
     }
     setTokens(accessToken) {
+        this.generation = newCredentialGeneration();
         this.accessToken = accessToken;
     }
+    /** The identity of the bearer's current installation, never of its bytes. */
+    getGeneration() {
+        return this.generation;
+    }
+    /** Retire the current generation without touching the bearer (provider swaps). */
+    invalidateGeneration() {
+        this.generation = newCredentialGeneration();
+    }
     getAccessToken() {
         return this.accessToken;
     }
     clearTokens() {
+        this.generation = newCredentialGeneration();
         this.accessToken = null;
     }
     hasAccessToken() {
@@ -304,7 +318,7 @@ function linkAbort(parent, child) {
  * Uses native fetch instead of axios for smaller bundle size.
  */
 export class HttpService {
-    constructor(config) {
+    constructor(config, credentialSource = null) {
         // Only active calls retain a lease. Invalidation detaches matching leases,
         // so late results cannot warm the cache or attract new deduplicated callers.
         this.readLeases = new Map();
@@ -401,6 +415,7 @@ export class HttpService {
             averageResponseTime: 0,
         };
         this.config = config;
+        this.credentialSource = credentialSource;
         this.baseURL = config.baseURL;
         this.tokenStore = new TokenStore();
         this.logger = new SimpleLogger(config.enableLogging || false, config.logLevel || 'error', 'HttpService');
@@ -517,6 +532,17 @@ export class HttpService {
     async request(config) {
         if (config.signal?.aborted)
             throw createCancelledError('Request cancelled before it was sent');
+        if (config.expectedCredentialGeneration) {
+            // The prototype is deliberately limited to writes; it does not
+            // yet define leases for cached/deduplicated reads or raw response paths.
+            if (!['POST', 'PUT', 'PATCH', 'DELETE'].includes(config.method) ||
+                config.skipAuth ||
+                Object.keys(config.headers ?? {}).some((key) => key.toLowerCase() === 'authorization')) {
+                throw new Error('A credential generation requires an implicitly authenticated write');
+            }
+            (this.credentialSource ?? this).assertCredentialGeneration(config.expectedCredentialGeneration);
+            config = { ...config, cache: false, deduplicate: false, retry: false };
+        }
         // The provider can change independently of the last request. Synchronize
         // before deriving the cache and deduplication identity, including hits.
         const explicitAuthorization = Object.keys(config.headers ?? {}).some((key) => key.toLowerCase() === 'authorization');
@@ -606,6 +632,12 @@ export class HttpService {
         const authHeader = usesSessionAuth
             ? await awaitRequestSignal(this.getAuthHeader(), signal)
             : null;
+        const assertExpectedCredential = () => {
+            if (config.expectedCredentialGeneration) {
+                (this.credentialSource ?? this).assertCredentialGeneration(config.expectedCredentialGeneration, authHeader);
+            }
+        };
+        assertExpectedCredential();
         const isOriginalSession = () => {
             if (this.sessionEpoch !== contextEpoch)
                 return false;
@@ -655,6 +687,7 @@ export class HttpService {
             if (usesSessionAuth && !isOriginalSession()) {
                 throw new OxyAuthenticationError('The request session changed', 'AUTH_SESSION_CHANGED');
             }
+            assertExpectedCredential();
             /**
              * Whether OUR timer fired, so a timeout can be told apart from a
              * cancellation. Both reach us from `fetch` as an indistinguishable
@@ -751,6 +784,9 @@ export class HttpService {
                     Object.keys(headers).some((key) => REQUESTER_PROOF_HEADERS.has(key.toLowerCase()))) {
                     throw new Error('Requester proofs require a transport that rejects redirects');
                 }
+                // Header and source generation are checked together in this synchronous
+                // dispatch segment, after the preflight and any queue wait.
+                assertExpectedCredential();
                 const response = useXhrForUpload
                     ? await this.uploadViaXHR(fullUrl, method, headers, bodyValue, controller.signal, timeout, false)
                     : await fetch(fullUrl, {
@@ -765,6 +801,13 @@ export class HttpService {
                 // it, including on every throw between here and there.
                 if (timeoutId)
                     clearTimeout(timeoutId);
+                try {
+                    assertExpectedCredential();
+                }
+                catch (error) {
+                    void discardResponseBody(response);
+                    throw error;
+                }
                 if (usesSessionAuth && !isOriginalSession()) {
                     void discardResponseBody(response);
                     throw new OxyAuthenticationError('The request session changed', 'AUTH_SESSION_CHANGED');
@@ -775,6 +818,7 @@ export class HttpService {
                     // once before giving up. HttpService deliberately does not know any
                     // session routes; the refresh handler owns session rotation.
                     if (response.status === 401 &&
+                        !config.expectedCredentialGeneration &&
                         !config._isAuthRetry &&
                         usesSessionAuth &&
                         isOriginalSession()) {
@@ -910,12 +954,14 @@ export class HttpService {
                 if (usesSessionAuth && !isOriginalSession()) {
                     throw new OxyAuthenticationError('The request session changed', 'AUTH_SESSION_CHANGED');
                 }
+                assertExpectedCredential();
                 const duration = Date.now() - startTime;
                 this.updateMetrics(true, duration);
                 this.config.onRequestEnd?.(url, method, duration, true);
                 return responseData;
             }
             catch (error) {
+                assertExpectedCredential();
                 const duration = Date.now() - startTime;
                 this.updateMetrics(false, duration);
                 // A body reader can reject or finish parsing an error after the viewer
@@ -1027,6 +1073,7 @@ export class HttpService {
         if (usesSessionAuth && !isOriginalSession()) {
             throw new OxyAuthenticationError('The request session changed', 'AUTH_SESSION_CHANGED');
         }
+        assertExpectedCredential();
         // Cache the result if caching is enabled
         if (cache && cacheKey && lease.valid && result) {
             this.cache.set(cacheKey, result, cacheTTL);
@@ -1752,6 +1799,27 @@ export class HttpService {
     getSessionEpoch() {
         return this.sessionEpoch;
     }
+    /** Capture only the local generation; the caller must separately bind authority. */
+    captureCredentialGeneration() {
+        // A pull-only provider can change A→B→A between reads without notifying us.
+        if (this.accessTokenProvider)
+            return null;
+        return this.tokenStore.getAccessToken() ? this.tokenStore.getGeneration() : null;
+    }
+    isCredentialGenerationCurrent(generation) {
+        return (!this.accessTokenProvider &&
+            this.tokenStore.getAccessToken() !== null &&
+            generation === this.tokenStore.getGeneration());
+    }
+    assertCredentialGeneration(generation, selectedHeader) {
+        const token = this.tokenStore.getAccessToken();
+        if (this.accessTokenProvider ||
+            !token ||
+            generation !== this.tokenStore.getGeneration() ||
+            (selectedHeader !== undefined && selectedHeader !== `Bearer ${token}`)) {
+            throw new OxyAuthenticationError('The request credential changed', 'AUTH_SESSION_CHANGED');
+        }
+    }
     /** Whether {@link endSession} ran and no token has been planted since. */
     hasSessionEnded() {
         return this.sessionEnded;
@@ -1760,6 +1828,7 @@ export class HttpService {
         this.authRefreshHandler = handler;
     }
     setAccessTokenProvider(provider) {
+        this.tokenStore.invalidateGeneration();
         this.accessTokenProvider = provider;
     }
     /**

package/dist/esm/OxyServices.js

@@ -114,7 +114,7 @@ export class OxyServices {
      * Query). Pass `enableCache: true` to opt in.
      */
     createLinkedClient(config) {
-        const client = new HttpService({ ...config, enableCache: config.enableCache ?? false });
+        const client = new HttpService({ ...config, enableCache: config.enableCache ?? false }, this.http);
         const syncToken = (accessToken) => {
             const current = client.getAccessToken();
             if (accessToken) {

package/dist/esm/api/apps.js

@@ -81,7 +81,7 @@ export class ConnectedAppsApi {
      *   `ConnectedApp.applicationId`, NOT a credential/client id).
      */
     async revoke(applicationId) {
-        await this.ctx.request('DELETE', `/auth/grants/${applicationId}`, undefined, { cache: false });
+        await this.ctx.request('DELETE', `/auth/grants/${enc(applicationId)}`, undefined, { cache: false });
         this.ctx.oxy.cache.delete('GET:/auth/grants');
     }
     /** Resource-bound external MCP connections for the active Oxy account. */

package/dist/esm/api/auth.js

@@ -932,7 +932,7 @@ export class AuthApi {
      */
     async checkUsername(username) {
         // Public availability lookup (pre-session) — skip the bearer preflight.
-        return this.ctx.request('GET', `/auth/check-username/${username}`, undefined, {
+        return this.ctx.request('GET', `/auth/check-username/${encodeURIComponent(username)}`, undefined, {
             cache: false,
             skipAuth: true,
         });

package/dist/esm/api/billing.js

@@ -10,6 +10,7 @@
  * arrive as ISO-8601 strings.
  */
 import { cancelProductSubscriptionCheck, parseContract, personalPlanCatalogueCheck, personalPlanCheckoutRequestCheck, personalPlanCheckoutResultCheck, productPlanCatalogueCheck, productPlanCheckoutRequestCheck, productSubscriptionCancellationResultCheck, productSubscriptionRenewalRequestCheck, productSubscriptionsResponseCheck, subjectProductAccessCheck, subjectProductAccessQueryCheck, subscriptionCreditGrantsResponseCheck, } from '@oxy.so/contracts/client';
+const enc = encodeURIComponent;
 const SUBSCRIPTION_TTL = 2 * 60 * 1000;
 const WALLET_TTL = 60 * 1000;
 export class BillingApi {
@@ -73,7 +74,7 @@ export class BillingApi {
     /** A user's subscription (default: the signed-in user's). */
     async subscription(userId) {
         const id = this.resolveUserId(userId);
-        return this.ctx.request('GET', `/subscription/${id}`, undefined, {
+        return this.ctx.request('GET', `/subscription/${enc(id)}`, undefined, {
             cache: true,
             cacheTTL: SUBSCRIPTION_TTL,
         });
@@ -81,7 +82,7 @@ export class BillingApi {
     /** A user's wallet (default: the signed-in user's). Cached briefly: the balance moves. */
     async wallet(userId) {
         const id = this.resolveUserId(userId);
-        return this.ctx.request('GET', `/wallet/${id}`, undefined, {
+        return this.ctx.request('GET', `/wallet/${enc(id)}`, undefined, {
             cache: true,
             cacheTTL: WALLET_TTL,
         });
@@ -94,7 +95,7 @@ export class BillingApi {
             params.limit = options.limit;
         if (options.offset)
             params.offset = options.offset;
-        return this.ctx.request('GET', `/wallet/transactions/${id}`, params, {
+        return this.ctx.request('GET', `/wallet/transactions/${enc(id)}`, params, {
             cache: false,
         });
     }

package/dist/esm/api/devices.js

@@ -1,6 +1,7 @@
 import { checkContract, deviceBackgroundCredentialResponseCheck, deviceJoinCodeResponseCheck, deviceJoinResponseCheck, deviceRegisterResponseCheck, deviceTokenMintResponseCheck, } from '@oxy.so/contracts/client';
 import { logger } from '../logger/index.js';
 import { extractErrorStatus } from '../utils/errorUtils.js';
+const enc = encodeURIComponent;
 /**
  * The server's `401 account_not_on_device` for a PINNED mint: the requested
  * `accountId` is not (or is no longer) a live account of this device session.
@@ -71,7 +72,7 @@ export class DevicesApi {
      * @param deviceId - The device ID to remove
      */
     async remove(deviceId) {
-        await this.ctx.request('DELETE', `/devices/${deviceId}`, undefined, { cache: false });
+        await this.ctx.request('DELETE', `/devices/${enc(deviceId)}`, undefined, { cache: false });
     }
     /**
      * Get device sessions for a given session ID
@@ -81,7 +82,7 @@ export class DevicesApi {
      */
     async sessions(sessionId) {
         // Cache disabled by default to ensure fresh session data
-        return this.ctx.request('GET', `/session/device/sessions/${sessionId}`, undefined, {
+        return this.ctx.request('GET', `/session/device/sessions/${enc(sessionId)}`, undefined, {
             cache: false, // Don't cache sessions - always get fresh data
             deduplicate: true, // Deduplicate concurrent requests for same sessionId
         });
@@ -99,7 +100,7 @@ export class DevicesApi {
             urlParams.deviceId = deviceId;
         if (excludeCurrent)
             urlParams.excludeCurrent = 'true';
-        return this.ctx.request('POST', `/session/device/logout-all/${sessionId}`, urlParams, { cache: false });
+        return this.ctx.request('POST', `/session/device/logout-all/${enc(sessionId)}`, urlParams, { cache: false });
     }
     /**
      * Update device name
@@ -108,7 +109,7 @@ export class DevicesApi {
      * @returns Updated device object
      */
     async rename(sessionId, deviceName) {
-        return this.ctx.request('PUT', `/session/device/name/${sessionId}`, { deviceName }, { cache: false });
+        return this.ctx.request('PUT', `/session/device/name/${enc(sessionId)}`, { deviceName }, { cache: false });
     }
     /**
      * Get security information