@oxy.so/core 7.23.1 → 7.24.0

package/dist/cjs/i18n/locales/en-US.js

@@ -681,6 +681,16 @@ const dict = {
                 add: 'Add your links',
                 placeholder: 'Enter URL',
                 yourLinks: 'Your Links',
+                linkTitle: 'Title',
+                moveUp: 'Move up',
+                moveDown: 'Move down',
+                errors: {
+                    empty: 'Enter a link.',
+                    invalid: 'Enter a valid link.',
+                    insecure: 'Links must start with https://.',
+                    duplicate: 'That link is already on your profile.',
+                    limit: 'You can add up to {{count}} links.',
+                },
                 count: '{{count}} link added',
                 count_plural: '{{count}} links added',
             },

package/dist/cjs/i18n/locales/es-ES.js

@@ -383,6 +383,16 @@ const dict = {
                 add: 'Añade tus enlaces',
                 placeholder: 'Introduce la URL',
                 yourLinks: 'Tus enlaces',
+                linkTitle: 'Título',
+                moveUp: 'Subir',
+                moveDown: 'Bajar',
+                errors: {
+                    empty: 'Introduce un enlace.',
+                    invalid: 'Introduce un enlace válido.',
+                    insecure: 'Los enlaces deben empezar por https://.',
+                    duplicate: 'Ese enlace ya está en tu perfil.',
+                    limit: 'Puedes añadir hasta {{count}} enlaces.',
+                },
                 count: '{{count}} enlace añadido',
                 count_plural: '{{count}} enlaces añadidos',
             },

package/dist/cjs/index.js

@@ -61,7 +61,7 @@ Object.defineProperty(exports, "MAX_ACCOUNT_CATEGORIES", { enumerable: true, get
 Object.defineProperty(exports, "SELECTABLE_ACCOUNT_CATEGORY_IDS", { enumerable: true, get: function () { return accounts_1.SELECTABLE_ACCOUNT_CATEGORY_IDS; } });
 Object.defineProperty(exports, "isSelectableAccountCategoryId", { enumerable: true, get: function () { return accounts_1.isSelectableAccountCategoryId; } });
 Object.defineProperty(exports, "kindAcceptsAccountCategories", { enumerable: true, get: function () { return accounts_1.kindAcceptsAccountCategories; } });
-// The store's installer (ADR 0053): what a runtime that installs applications registers beside
+// The store's installer (ADR 0059): what a runtime that installs applications registers beside
 // `oxy.store`, and what a store asks it.
 var storeInstaller_1 = require("./api/storeInstaller");
 Object.defineProperty(exports, "getStoreInstaller", { enumerable: true, get: function () { return storeInstaller_1.getStoreInstaller; } });

package/dist/esm/api/accounts.js

@@ -1,4 +1,4 @@
-import { agentKeyListResponseCheck, agentKeyOperationChallengeCheck, agentKeyOperationCheck, agentKeyOperationResultCheck, executeAgentKeyOperationCheck, parseContract, } from '@oxy.so/contracts/client';
+import { agentKeyListResponseCheck, agentKeyOperationChallengeCheck, agentKeyOperationCheck, agentKeyOperationResultCheck, executeAgentKeyOperationCheck, organizationIdentityKeyStateCheck, organizationKeyApplyRequestCheck, organizationKeyChallengeCheck, organizationKeyChallengeRequestCheck, organizationKeyProofClaims, parseContract, } from '@oxy.so/contracts/client';
 import { normalizeUserIdentity } from '../utils/userIdentity.js';
 import { evictOxyIdentityCache } from '../utils/identityCacheSweep.js';
 import { evictOxyAccountForestCache, oxyAccountDetailCacheKey, OXY_ACCOUNT_PER_ACCOUNT_CACHE_PREFIX, } from '../utils/accountCacheSweep.js';
@@ -75,6 +75,72 @@ export class AccountAgentKeysApi {
         return parseContract(agentKeyOperationResultCheck, response);
     }
 }
+/**
+ * `oxy.accounts.identityKey` — an organization's identity key (ADR 0061): its
+ * DID `#key-1`, the key Peable derives its FairCoin receive addresses from.
+ * Only the organization's owners and admins may read or change it; the key is
+ * created and held in Commons and never signs anybody in.
+ *
+ * `get` answers `publicKey: null` for an organization that has no key yet (its
+ * DID lists no `#key-1`): that is when a client shows its owners "Set up the
+ * organization's Peable wallet". A 403 (`ORGANIZATION_KEY_FORBIDDEN`) means the
+ * signed-in person is not an owner or admin of a claimed, active organization.
+ */
+export class AccountIdentityKeyApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    /** The organization's key (`null` without one) and every key it has had, oldest first. */
+    async get(accountId) {
+        return parseContract(organizationIdentityKeyStateCheck, await this.ctx.request('GET', `/accounts/${enc(accountId)}/identity-key`, undefined, { cache: false }));
+    }
+    /** A one-use challenge for one change, with the claims every signer signs. */
+    async requestChallenge(accountId, request) {
+        return parseContract(organizationKeyChallengeCheck, await this.ctx.request('POST', `/accounts/${enc(accountId)}/identity-key/challenge`, parseContract(organizationKeyChallengeRequestCheck, request), { cache: false }));
+    }
+    /** Apply a change with its signatures (see {@link link} for the whole ceremony). */
+    async apply(accountId, request) {
+        return parseContract(organizationIdentityKeyStateCheck, await this.ctx.request('POST', `/accounts/${enc(accountId)}/identity-key`, parseContract(organizationKeyApplyRequestCheck, request), { cache: false }));
+    }
+    /**
+     * Commons' whole ceremony. NATIVE-ONLY: the actor is THIS device's personal
+     * root (`KeyManager`), which must be the signed-in person's. `key` is the
+     * organization key the device generated (`create`, or `replace` with a new
+     * one); `previousKey` is the current organization key when the device holds
+     * it, so the replacement is recorded as proven by it.
+     */
+    async link(accountId, input) {
+        const { KeyManager, signIdentityProof } = await import('../crypto/index.js');
+        const [rootPrivateKey, rootPublicKey] = await Promise.all([
+            KeyManager.getPrivateKey(),
+            KeyManager.getPublicKey(),
+        ]);
+        if (!rootPrivateKey || !rootPublicKey) {
+            throw new Error('No identity on this device to sign with');
+        }
+        const challenge = await this.requestChallenge(accountId, {
+            operation: input.operation,
+            publicKey: input.key.publicKey,
+        });
+        const root = rootPublicKey.trim().toLowerCase();
+        if (challenge.actorPublicKey !== root) {
+            throw new Error("This device's identity is not the signed-in account's");
+        }
+        const sign = async (signer, publicKey) => (await signIdentityProof({ privateKey: signer.privateKey, publicKey }, organizationKeyProofClaims(challenge, publicKey))).signature;
+        const previousPublicKey = challenge.previousPublicKey;
+        return this.apply(accountId, {
+            operation: input.operation,
+            publicKey: challenge.publicKey,
+            challenge: challenge.challenge,
+            expiresAt: challenge.expiresAt,
+            actorSignature: await sign({ privateKey: rootPrivateKey, publicKey: root }, root),
+            keySignature: await sign(input.key, challenge.publicKey),
+            ...(input.previousKey && previousPublicKey
+                ? { previousKeySignature: await sign(input.previousKey, previousPublicKey) }
+                : {}),
+        });
+    }
+}
 /** Consent-based invitations; never cached or queued as offline mutations. */
 export class AccountInvitationsApi {
     constructor(ctx) {
@@ -109,6 +175,7 @@ export class AccountsApi {
         this.members = new AccountMembersApi(ctx);
         this.invitations = new AccountInvitationsApi(ctx);
         this.agentKeys = new AccountAgentKeysApi(ctx);
+        this.identityKey = new AccountIdentityKeyApi(ctx);
     }
     /**
      * List the accounts the caller can access: their own personal (root)

package/dist/esm/api/storeInstaller.js

@@ -5,7 +5,7 @@
  * `oxy.store` says what the store lists; an installer says what the machine can do with a
  * listing. A runtime that installs applications registers one (OxyOS's Bloom host registers one
  * backed by the system's install service before the application's code runs, OxyOS ADR 0030
- * decision 9; ADR 0053 here). Where none is registered — the web, iOS, Android — there is
+ * decision 9; ADR 0059 here). Where none is registered — the web, iOS, Android — there is
  * nothing to install, and a store shows what it shows without one. An application never asks
  * which platform it runs on: it asks whether there is an installer.
  *