@oxy.so/core 7.11.1 → 7.13.0

package/dist/esm/i18n/locales/en-US.js

@@ -161,6 +161,9 @@ const dict = {
             requestExpired: 'This sign-in expired. Send a new email.',
             secondFactorInvalid: "That code isn't right. Try the current one.",
             originNotAllowed: "Sign-in isn't available here.",
+            network: "Couldn't reach Oxy. Check your connection and try again.",
+            invalidInput: "Something you entered isn't valid. Check it and try again.",
+            server: "Oxy couldn't finish this right now. Try again in a moment.",
             generic: 'Something went wrong. Please try again.',
         },
         subtitleToApp: 'to continue to {{app}}',
@@ -223,6 +226,31 @@ const dict = {
             invalidDescription: 'It expired or was already used. Ask for a new email in the app, or type the code from the latest one.',
         },
     },
+    actionErrors: {
+        updateProfile: "Couldn't update your profile. Please try again.",
+        uploadAvatar: "Couldn't upload the picture. Please try again.",
+        updateSettings: "Couldn't save your settings. Please try again.",
+        updatePrivacy: "Couldn't save your privacy settings. Please try again.",
+        updateNotifications: "Couldn't save your notification preferences. Please try again.",
+        updatePreferences: "Couldn't save your preferences. Please try again.",
+        revokeConnectedApp: "Couldn't disconnect the app. Please try again.",
+        switchSession: "Couldn't switch accounts. Please try again.",
+        logout: "Couldn't sign out. Please try again.",
+        logoutAll: "Couldn't sign out everywhere. Please try again.",
+        updateDeviceName: "Couldn't rename the device. Please try again.",
+        removeDevice: "Couldn't remove the device. Please try again.",
+    },
+    usernamePolicy: {
+        hint: 'Letters, numbers, - and _. No spaces.',
+        required: 'Choose a username.',
+        tooShort: 'Use at least {{min}} characters.',
+        tooLong: 'Use at most {{max}} characters.',
+        noSpaces: "Usernames can't contain spaces. Use - or _ instead.",
+        characters: 'Use only letters, numbers, - and _. Start and end with a letter or number, and never put two of - or _ together.',
+        onlyNumbers: "A username can't be only numbers. Add a letter.",
+        reserved: 'That username is reserved. Choose another one.',
+        mustEndInBot: 'A bot account’s username must end in “bot”.',
+    },
     signup: {
         title: 'Create your account',
         subtitle: 'Choose your username. Then we confirm your email.',
@@ -231,7 +259,6 @@ const dict = {
         username: {
             label: 'Username',
             placeholder: 'yourname',
-            required: 'Choose a username.',
             taken: 'That username is taken.',
         },
         email: {
@@ -279,7 +306,6 @@ const dict = {
             firstPlaceholder: 'Your first name',
             lastLabel: 'Last name',
             lastPlaceholder: 'Your last name',
-            saveFailed: 'Could not save your name',
         },
         avatar: {
             title: 'Make It Yours',
@@ -602,8 +628,6 @@ const dict = {
                 label: 'Username',
                 placeholder: 'Choose a username',
                 choose: 'Choose a username',
-                required: 'Username is required',
-                tooShort: 'Username must be at least 3 characters',
             },
             email: {
                 title: 'Email',
@@ -1258,7 +1282,7 @@ const dict = {
             },
             rules: {
                 title: 'Username rules',
-                content: 'Usernames can only contain lowercase letters (a-z) and numbers (0-9). They must be at least 4 characters long. Special characters, spaces, and uppercase letters are not allowed to keep usernames simple and easy to remember.',
+                content: 'Usernames are 3 to 30 characters long and use letters, numbers, hyphens (-) and underscores (_). They start and end with a letter or number, never put two of - or _ together, and are not only numbers. Spaces are not allowed. Capital letters are kept as you type them, but Alice and alice are the same username.',
             },
             unique: {
                 title: 'Why must it be unique?',
@@ -1837,9 +1861,6 @@ const dict = {
                 label: 'Username',
                 available: 'Username is available',
                 taken: 'Username is taken',
-                tooShort: 'Username must be at least 3 characters',
-                invalidChars: 'Only letters, numbers, hyphens, and underscores',
-                mustEndInBot: 'A bot account’s username must end in “bot”',
                 checkFailed: 'Could not check availability',
             },
             accountCategory: {
@@ -1874,16 +1895,16 @@ const dict = {
                 transfer: 'Transfer ownership',
             },
             errors: {
-                identifierRequired: 'Enter a username or email to invite',
+                emailRequired: 'Enter an email to invite.',
+                emailInvalid: 'Enter a valid email address, like name@example.com.',
                 missingAccount: 'No account selected.',
                 noPermission: 'You do not have permission to view members.',
-                userNotFound: 'User not found',
             },
             invite: {
-                title: 'Add a member',
-                identifierLabel: 'Username or email',
+                title: 'Invite a member',
+                emailLabel: 'Email',
                 roleLabel: 'Role',
-                submit: 'Add member',
+                submit: 'Send invitation',
             },
             removeConfirm: {
                 title: 'Remove member',
@@ -1894,8 +1915,9 @@ const dict = {
                 description: 'Transfer ownership of this account to this member? You will be demoted to admin. This cannot be undone.',
             },
             toasts: {
-                added: 'Member added',
-                addFailed: 'Failed to add member',
+                invited: 'Invitation sent',
+                inviteFailed: "Couldn't send the invitation. Please try again.",
+                invitationUpdateFailed: "Couldn't update the invitation. Please try again.",
                 removed: 'Member removed',
                 removeFailed: 'Failed to remove member',
                 roleUpdated: 'Role updated',
@@ -1957,6 +1979,7 @@ const dict = {
         title: 'Delete Account',
         warning: 'This action cannot be undone. Your account and all associated data will be permanently deleted.',
         confirmLabel: 'Type "{{username}}" to confirm',
+        confirmMismatch: 'That isn\'t your username. Type "{{username}}" exactly.',
         confirm: 'Delete Forever',
         error: 'Failed to delete account',
         handoff: {
@@ -2309,6 +2332,7 @@ const dict = {
             newLabel: 'New password',
             repeatLabel: 'Repeat the password',
             tooShort: 'Use at least {{min}} characters.',
+            tooLong: 'Use at most {{max}} characters.',
             mismatch: "The passwords don't match.",
             signOutOthers: 'Sign out everywhere else',
             save: 'Save password',
@@ -2371,6 +2395,7 @@ const dict = {
             request: "Couldn't start the verification. Check the domain and try again.",
             notYet: 'Not verified yet. Changes to DNS can take a while to show up.',
             remove: "Couldn't remove the domain",
+            invalid: 'Enter just the domain, like example.com — no https://, slashes or spaces.',
         },
         remove: {
             title: 'Remove domain',

package/dist/esm/i18n/locales/es-ES.js

@@ -161,6 +161,9 @@ const dict = {
             requestExpired: 'Este inicio de sesión ha caducado. Envía un email nuevo.',
             secondFactorInvalid: 'Ese código no es correcto. Prueba con el actual.',
             originNotAllowed: 'Aquí no se puede iniciar sesión.',
+            network: 'No se ha podido conectar con Oxy. Comprueba tu conexión e inténtalo de nuevo.',
+            invalidInput: 'Algo de lo que has escrito no es válido. Revísalo e inténtalo de nuevo.',
+            server: 'Oxy no ha podido terminar esto ahora. Inténtalo de nuevo en un momento.',
             generic: 'Algo ha ido mal. Inténtalo de nuevo.',
         },
         subtitleToApp: 'para continuar en {{app}}',
@@ -223,6 +226,31 @@ const dict = {
             invalidDescription: 'Ha caducado o ya se ha usado. Pide un email nuevo en la app o escribe el código del último.',
         },
     },
+    actionErrors: {
+        updateProfile: 'No se ha podido actualizar tu perfil. Inténtalo de nuevo.',
+        uploadAvatar: 'No se ha podido subir la foto. Inténtalo de nuevo.',
+        updateSettings: 'No se han podido guardar tus ajustes. Inténtalo de nuevo.',
+        updatePrivacy: 'No se han podido guardar tus ajustes de privacidad. Inténtalo de nuevo.',
+        updateNotifications: 'No se han podido guardar tus preferencias de notificaciones. Inténtalo de nuevo.',
+        updatePreferences: 'No se han podido guardar tus preferencias. Inténtalo de nuevo.',
+        revokeConnectedApp: 'No se ha podido desconectar la app. Inténtalo de nuevo.',
+        switchSession: 'No se ha podido cambiar de cuenta. Inténtalo de nuevo.',
+        logout: 'No se ha podido cerrar la sesión. Inténtalo de nuevo.',
+        logoutAll: 'No se ha podido cerrar la sesión en todas partes. Inténtalo de nuevo.',
+        updateDeviceName: 'No se ha podido cambiar el nombre del dispositivo. Inténtalo de nuevo.',
+        removeDevice: 'No se ha podido quitar el dispositivo. Inténtalo de nuevo.',
+    },
+    usernamePolicy: {
+        hint: 'Letras, números, - y _. Sin espacios.',
+        required: 'Elige un nombre de usuario.',
+        tooShort: 'Usa al menos {{min}} caracteres.',
+        tooLong: 'Usa como máximo {{max}} caracteres.',
+        noSpaces: 'El nombre de usuario no puede tener espacios. Usa - o _ en su lugar.',
+        characters: 'Usa solo letras, números, - y _. Empieza y termina con una letra o un número, y no pongas dos - o _ seguidos.',
+        onlyNumbers: 'El nombre de usuario no puede ser solo números. Añade una letra.',
+        reserved: 'Ese nombre de usuario está reservado. Elige otro.',
+        mustEndInBot: 'El nombre de usuario de una cuenta bot debe terminar en «bot».',
+    },
     signup: {
         title: 'Crea tu cuenta',
         subtitle: 'Elige tu nombre de usuario. Después confirmamos tu email.',
@@ -231,7 +259,6 @@ const dict = {
         username: {
             label: 'Nombre de usuario',
             placeholder: 'tunombre',
-            required: 'Elige un nombre de usuario.',
             taken: 'Ese nombre de usuario ya está en uso.',
         },
         email: {
@@ -303,8 +330,6 @@ const dict = {
                 label: 'Usuario',
                 placeholder: 'Elige un usuario',
                 choose: 'Elige un usuario',
-                required: 'El usuario es obligatorio',
-                tooShort: 'El usuario debe tener al menos 3 caracteres',
             },
             email: {
                 title: 'Correo electrónico',
@@ -902,7 +927,6 @@ const dict = {
             firstPlaceholder: 'Tu nombre',
             lastLabel: 'Apellidos',
             lastPlaceholder: 'Tus apellidos',
-            saveFailed: 'No se pudo guardar tu nombre',
         },
         avatar: {
             title: 'Hazlo tuyo',
@@ -1258,7 +1282,7 @@ const dict = {
             },
             rules: {
                 title: 'Reglas del nombre de usuario',
-                content: 'Los nombres de usuario solo pueden contener letras minúsculas (a-z) y números (0-9). Deben tener al menos 4 caracteres. No se permiten caracteres especiales, espacios ni mayúsculas para mantener los nombres de usuario simples y fáciles de recordar.',
+                content: 'Los nombres de usuario tienen entre 3 y 30 caracteres y usan letras, números, guiones (-) y guiones bajos (_). Empiezan y terminan con una letra o un número, nunca llevan dos - o _ seguidos y no son solo números. No se permiten espacios. Las mayúsculas se guardan tal como las escribes, pero Alicia y alicia son el mismo nombre de usuario.',
             },
             unique: {
                 title: '¿Por qué debe ser único?',
@@ -1837,9 +1861,6 @@ const dict = {
                 label: 'Nombre de usuario',
                 available: 'El nombre de usuario está disponible',
                 taken: 'El nombre de usuario ya está en uso',
-                tooShort: 'El nombre de usuario debe tener al menos 3 caracteres',
-                invalidChars: 'Solo letras, números, guiones y guiones bajos',
-                mustEndInBot: 'El nombre de usuario de una cuenta de bot debe terminar en “bot”',
                 checkFailed: 'No se pudo comprobar la disponibilidad',
             },
             accountCategory: {
@@ -1874,16 +1895,16 @@ const dict = {
                 transfer: 'Transferir propiedad',
             },
             errors: {
-                identifierRequired: 'Introduce un nombre de usuario o correo para invitar',
+                emailRequired: 'Introduce un email para invitar.',
+                emailInvalid: 'Introduce un email válido, como nombre@ejemplo.com.',
                 missingAccount: 'Ninguna cuenta seleccionada.',
                 noPermission: 'No tienes permiso para ver los miembros.',
-                userNotFound: 'Usuario no encontrado',
             },
             invite: {
-                title: 'Añadir un miembro',
-                identifierLabel: 'Nombre de usuario o correo',
+                title: 'Invitar a un miembro',
+                emailLabel: 'Email',
                 roleLabel: 'Rol',
-                submit: 'Añadir miembro',
+                submit: 'Enviar invitación',
             },
             removeConfirm: {
                 title: 'Eliminar miembro',
@@ -1894,8 +1915,9 @@ const dict = {
                 description: '¿Transferir la propiedad de esta cuenta a este miembro? Pasarás a ser administrador. Esto no se puede deshacer.',
             },
             toasts: {
-                added: 'Miembro añadido',
-                addFailed: 'No se pudo añadir el miembro',
+                invited: 'Invitación enviada',
+                inviteFailed: 'No se ha podido enviar la invitación. Inténtalo de nuevo.',
+                invitationUpdateFailed: 'No se ha podido actualizar la invitación. Inténtalo de nuevo.',
                 removed: 'Miembro eliminado',
                 removeFailed: 'No se pudo eliminar el miembro',
                 roleUpdated: 'Rol actualizado',
@@ -1957,6 +1979,7 @@ const dict = {
         title: 'Eliminar cuenta',
         warning: 'Esta acción no se puede deshacer. Tu cuenta y todos los datos asociados se eliminarán de forma permanente.',
         confirmLabel: 'Escribe "{{username}}" para confirmar',
+        confirmMismatch: 'Ese no es tu nombre de usuario. Escribe "{{username}}" exactamente.',
         confirm: 'Eliminar para siempre',
         error: 'No se pudo eliminar la cuenta',
         handoff: {
@@ -2309,6 +2332,7 @@ const dict = {
             newLabel: 'Contraseña nueva',
             repeatLabel: 'Repite la contraseña',
             tooShort: 'Usa al menos {{min}} caracteres.',
+            tooLong: 'Usa como máximo {{max}} caracteres.',
             mismatch: 'Las contraseñas no coinciden.',
             signOutOthers: 'Cerrar sesión en todos los demás sitios',
             save: 'Guardar contraseña',
@@ -2371,6 +2395,7 @@ const dict = {
             request: 'No se pudo empezar la verificación. Revisa el dominio e inténtalo otra vez.',
             notYet: 'Aún no está verificado. Los cambios de DNS pueden tardar en aparecer.',
             remove: 'No se pudo quitar el dominio',
+            invalid: 'Escribe solo el dominio, como ejemplo.com, sin https://, barras ni espacios.',
         },
         remove: {
             title: 'Quitar dominio',

package/dist/esm/index.js

@@ -30,6 +30,7 @@ import './crypto/polyfill.js';
 // ---------------------------------------------------------------------------
 export { OxyServices, OXY_API_URL, OXY_CLOUD_URL } from './OxyServices.js';
 export { OxyApiError, OxyAuthenticationError, OxyAuthenticationTimeoutError, AssetUrlResolutionError, ServiceAssetMetadataError, } from './OxyServices.errors.js';
+export { sameHolderIdentity } from './api/holderEvidence.js';
 export { ASSET_MULTIPART_UPLOAD_MAX_BYTES, assetUrlCacheTTL, MAX_UPLOAD_BYTES } from './api/assets.js';
 export { DirectUploadInterruptedError } from './api/directUpload.js';
 export { buildUserDid } from './api/identity.js';

package/dist/types/HttpService.d.ts

@@ -22,6 +22,18 @@ export type AccessTokenProvider = () => string | null;
  * — `null` to send it anonymous. See {@link HttpService.setAnonymousAuthProvider}.
  */
 export type AnonymousAuthProvider = () => Promise<string | null>;
+declare const credentialGenerationBrand: unique symbol;
+/**
+ * An opaque, immutable token for ONE installation of a bearer in a client.
+ *
+ * `TokenStore` swaps it on every write path (setter, refresh, account or actor
+ * switch, cross-tab or restored token, clear), so two installations of the same
+ * bytes (A, B, A) are different generations. It names a local sequence only: it
+ * is not evidence of an account, a scope or authorization.
+ */
+export type CredentialGeneration = {
+    readonly [credentialGenerationBrand]: true;
+};
 /** A trusted platform transport, for example Expo's streaming fetch. */
 export type ResponseTransport = (input: string, init: RequestInit) => Promise<Response>;
 /**
@@ -44,6 +56,13 @@ export interface ResponseRequest {
 /** Same response contract, but rejects locally when the SDK has no bearer. */
 export type AuthenticatedResponseRequest = ResponseRequest;
 export interface RequestOptions {
+    /**
+     * Bind a write to ONE installation of the source's bearer. The transport
+     * rejects (`AUTH_SESSION_CHANGED`) when the generation was replaced before
+     * dispatch, after queueing, or before the result is returned. Implies no cache,
+     * deduplication or retry, and a 401 neither refreshes nor clears the session.
+     */
+    expectedCredentialGeneration?: CredentialGeneration;
     cache?: boolean;
     cacheTTL?: number;
     deduplicate?: boolean;
@@ -228,6 +247,7 @@ export declare class HttpService {
      * bearer — and through the token listeners, the account — back.
      */
     private sessionEpoch;
+    private readonly credentialSource;
     /** Preserve a known device across legacy rotations which omit the claim. */
     private sessionDeviceId;
     /** Preserve known actor and context hints across rotations without those claims. */
@@ -258,7 +278,7 @@ export declare class HttpService {
      */
     private _tokenChangeListeners;
     private requestMetrics;
-    constructor(config: OxyConfig);
+    constructor(config: OxyConfig, credentialSource?: HttpService | null);
     private syncAccessTokenFromProvider;
     /**
      * Robust FormData detection that works in browser, React Native, and
@@ -521,6 +541,10 @@ export declare class HttpService {
      * plants tokens itself (the device-secret arm) compares it across its awaits.
      */
     getSessionEpoch(): number;
+    /** Capture only the local generation; the caller must separately bind authority. */
+    captureCredentialGeneration(): CredentialGeneration | null;
+    isCredentialGenerationCurrent(generation: CredentialGeneration): boolean;
+    private assertCredentialGeneration;
     /** Whether {@link endSession} ran and no token has been planted since. */
     hasSessionEnded(): boolean;
     setAuthRefreshHandler(handler: AuthRefreshHandler | null): void;

package/dist/types/api/holderEvidence.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Holder-context evidence: the server's point-in-time observation of which
+ * shared-device context a bearer is installed in, bound to ONE installation of
+ * that bearer in this client (ADR 0053).
+ *
+ * Evidence is never authorization. It lets a caller that already captured a
+ * viewer intent prove, before a write is dispatched, that the bearer the write
+ * will carry belongs to that viewer's account and actor, and then pin the write
+ * to the exact installation with `expectedCredentialGeneration`. Anything that
+ * cannot be proven is `unavailable`, and the caller keeps its existing checks.
+ */
+import type { HolderContextEvidenceV1Response } from '@oxy.so/contracts';
+import type { CredentialGeneration } from '../HttpService';
+/** The identifiers the server observed; none of them is a credential. */
+export type HolderEvidenceIdentity = Readonly<Pick<HolderContextEvidenceV1Response, 'deviceId' | 'deviceSessionId' | 'contextId' | 'actorId' | 'accountId' | 'sessionId'>>;
+export interface HolderEvidence {
+    /** The installation of the bearer this evidence was observed for. */
+    readonly generation: CredentialGeneration;
+    readonly identity: HolderEvidenceIdentity;
+    /** The device-session revision the server observed. */
+    readonly deviceRevision: number;
+    /** Epoch milliseconds: the earlier of the bearer and session expiry. */
+    readonly expiresAtMs: number;
+}
+/**
+ * Why no evidence exists. Every reason means "keep the existing checks": none of
+ * them says the session is revoked, and none may clear or refresh credentials.
+ *
+ * - `no_credential`: no bearer is installed, or it comes from a pull-only provider.
+ * - `no_holder`: this client holds no device credential to prove the holder with.
+ * - `changed`: the bearer was replaced while the evidence was being acquired.
+ * - `unsupported`: a delegated, OAuth or legacy bearer, or the endpoint is not offered.
+ * - `binding_unavailable`: the server could not match holder, context and bearer.
+ * - `unavailable`: the endpoint is off, rate limited, unreachable or answered wrongly.
+ */
+export type HolderEvidenceUnavailableReason = 'no_credential' | 'no_holder' | 'changed' | 'unsupported' | 'binding_unavailable' | 'unavailable';
+export type HolderEvidenceResult = {
+    readonly status: 'ok';
+    readonly evidence: HolderEvidence;
+} | {
+    readonly status: 'unavailable';
+    readonly reason: HolderEvidenceUnavailableReason;
+};
+/** The one comparison that decides whether two observations name the same viewer context. */
+export declare function sameHolderIdentity(a: HolderEvidenceIdentity, b: HolderEvidenceIdentity): boolean;

package/dist/types/api/session.d.ts

@@ -2,6 +2,7 @@ import type { AccountActorChain, DeviceProof } from '@oxy.so/contracts';
 import type { OxyContext } from '../client/context';
 import type { ClientSession } from '../models/session';
 import type { User } from '../models/interfaces';
+import type { HolderEvidence, HolderEvidenceResult } from './holderEvidence';
 /**
  * Reads the device credential this client holds, if any — `{ deviceId,
  * deviceSecret }` from the provider's auth store. See
@@ -29,6 +30,8 @@ export declare class SessionApi {
     private deviceCredentialProvider;
     private decodedFor;
     private decoded;
+    /** One server round trip per installed bearer; the key is the opaque generation. */
+    private readonly evidence;
     constructor(ctx: OxyContext);
     /** The current access token, or `null` when signed out. */
     get accessToken(): string | null;
@@ -75,6 +78,24 @@ export declare class SessionApi {
      * that cannot be read only means the sign-in gets its own device.
      */
     readDeviceProof(): Promise<DeviceProof | null>;
+    /**
+     * Ask the server which shared-device context the INSTALLED bearer belongs to,
+     * and bind the answer to that exact installation.
+     *
+     * The result is honored only if the credential generation captured before
+     * the request is still current when the answer is committed, so a refresh,
+     * setter, account or actor switch, cross-tab change, restore or A to B to A
+     * during the request yields `changed`. The answer must also agree with the
+     * claims of the bearer that was captured; a disagreement is
+     * `binding_unavailable`. Nothing here refreshes, clears or mints a credential,
+     * and no outcome is a revocation verdict: callers keep their existing checks.
+     * Concurrent callers share one request per installation.
+     */
+    observeHolderEvidence(): Promise<HolderEvidenceResult>;
+    /** Whether evidence still names the installed bearer and has not expired. */
+    isHolderEvidenceCurrent(evidence: HolderEvidence): boolean;
+    private refreshEvidence;
+    private acquireEvidence;
     /** Ask the server whether the current access token is valid. */
     validateToken(): Promise<boolean>;
     /**

package/dist/types/i18n/locales/en-US.d.ts

@@ -161,6 +161,9 @@ declare const dict: {
             requestExpired: string;
             secondFactorInvalid: string;
             originNotAllowed: string;
+            network: string;
+            invalidInput: string;
+            server: string;
             generic: string;
         };
         subtitleToApp: string;
@@ -223,6 +226,31 @@ declare const dict: {
             invalidDescription: string;
         };
     };
+    actionErrors: {
+        updateProfile: string;
+        uploadAvatar: string;
+        updateSettings: string;
+        updatePrivacy: string;
+        updateNotifications: string;
+        updatePreferences: string;
+        revokeConnectedApp: string;
+        switchSession: string;
+        logout: string;
+        logoutAll: string;
+        updateDeviceName: string;
+        removeDevice: string;
+    };
+    usernamePolicy: {
+        hint: string;
+        required: string;
+        tooShort: string;
+        tooLong: string;
+        noSpaces: string;
+        characters: string;
+        onlyNumbers: string;
+        reserved: string;
+        mustEndInBot: string;
+    };
     signup: {
         title: string;
         subtitle: string;
@@ -231,7 +259,6 @@ declare const dict: {
         username: {
             label: string;
             placeholder: string;
-            required: string;
             taken: string;
         };
         email: {
@@ -270,7 +297,6 @@ declare const dict: {
             firstPlaceholder: string;
             lastLabel: string;
             lastPlaceholder: string;
-            saveFailed: string;
         };
         avatar: {
             title: string;
@@ -593,8 +619,6 @@ declare const dict: {
                 label: string;
                 placeholder: string;
                 choose: string;
-                required: string;
-                tooShort: string;
             };
             email: {
                 title: string;
@@ -1828,9 +1852,6 @@ declare const dict: {
                 label: string;
                 available: string;
                 taken: string;
-                tooShort: string;
-                invalidChars: string;
-                mustEndInBot: string;
                 checkFailed: string;
             };
             accountCategory: {
@@ -1865,14 +1886,14 @@ declare const dict: {
                 transfer: string;
             };
             errors: {
-                identifierRequired: string;
+                emailRequired: string;
+                emailInvalid: string;
                 missingAccount: string;
                 noPermission: string;
-                userNotFound: string;
             };
             invite: {
                 title: string;
-                identifierLabel: string;
+                emailLabel: string;
                 roleLabel: string;
                 submit: string;
             };
@@ -1885,8 +1906,9 @@ declare const dict: {
                 description: string;
             };
             toasts: {
-                added: string;
-                addFailed: string;
+                invited: string;
+                inviteFailed: string;
+                invitationUpdateFailed: string;
                 removed: string;
                 removeFailed: string;
                 roleUpdated: string;
@@ -1948,6 +1970,7 @@ declare const dict: {
         title: string;
         warning: string;
         confirmLabel: string;
+        confirmMismatch: string;
         confirm: string;
         error: string;
         handoff: {
@@ -2300,6 +2323,7 @@ declare const dict: {
             newLabel: string;
             repeatLabel: string;
             tooShort: string;
+            tooLong: string;
             mismatch: string;
             signOutOthers: string;
             save: string;
@@ -2362,6 +2386,7 @@ declare const dict: {
             request: string;
             notYet: string;
             remove: string;
+            invalid: string;
         };
         remove: {
             title: string;