@oxy.so/core 7.26.0 → 7.28.0

package/dist/cjs/i18n/locales/en-US.js

@@ -666,6 +666,20 @@ const dict = {
                 month: 'Month',
                 year: 'Year',
             },
+            pronouns: {
+                title: 'Pronouns',
+                subtitle: 'How people should refer to you',
+                label: 'Pronouns',
+                options: {
+                    unspecified: 'Not set',
+                    he_him: 'He/him',
+                    she_her: 'She/her',
+                    they_them: 'They/them',
+                    he_they: 'He/they',
+                    she_they: 'She/they',
+                    it_its: 'It/its',
+                },
+            },
             locations: {
                 title: 'Locations',
                 subtitle: "Places you've been or live",

package/dist/cjs/i18n/locales/es-ES.js

@@ -368,6 +368,20 @@ const dict = {
                 month: 'Mes',
                 year: 'Año',
             },
+            pronouns: {
+                title: 'Pronombres',
+                subtitle: 'Cómo deben referirse a ti las personas',
+                label: 'Pronombres',
+                options: {
+                    unspecified: 'Sin definir',
+                    he_him: 'He/him',
+                    she_her: 'She/her',
+                    they_them: 'They/them',
+                    he_they: 'He/they',
+                    she_they: 'She/they',
+                    it_its: 'It/its',
+                },
+            },
             locations: {
                 title: 'Ubicaciones',
                 subtitle: 'Lugares donde has estado o vives',

package/dist/esm/api/identity.js

@@ -80,9 +80,26 @@ export class IdentityApi {
      * Resolve the W3C DID document for any user. The API derives it on demand
      * from the account's `authMethods` + `publicKey` — there is no stored
      * document. Public (no auth required); short-TTL cached.
+     *
+     * `{ fresh: true }` reads the document as it is NOW: it skips (and drops)
+     * this client's cached copy, is not joined to an in-flight read, and sends
+     * `Cache-Control: no-cache` so no HTTP cache on the way answers for the
+     * origin. Use it whenever the answer decides where money goes: `#key-1` is
+     * the account's Peable receive key and changes on a rotation or an
+     * organization key replacement, and a cached copy would derive an address
+     * from the previous key for up to the cache TTL.
      */
-    async resolveDid(userId) {
-        return this.ctx.request('GET', `/u/${encodeURIComponent(userId)}/did.json`, undefined, {
+    async resolveDid(userId, options = {}) {
+        const path = `/u/${encodeURIComponent(userId)}/did.json`;
+        if (options.fresh) {
+            this.ctx.http.invalidateCache({ keys: [`GET:${path}`] });
+            return this.ctx.request('GET', path, undefined, {
+                cache: false,
+                deduplicate: false,
+                headers: { 'Cache-Control': 'no-cache' },
+            });
+        }
+        return this.ctx.request('GET', path, undefined, {
             cache: true,
             cacheTTL: SHORT_TTL,
         });

package/dist/esm/crypto/identityDerivations.js

@@ -58,6 +58,12 @@ export function deriveScopedSeedFromKey(privateKeyHex, info) {
  * `HMAC-SHA256(SOCIAL_RECEIVE_CHAIN_CODE_KEY, compressed identity public key)`.
  * Identical to `@fairco.in/core`'s `deriveSocialReceiveSpendingKey`.
  *
+ * INTERNAL to `@oxy.so/core` (not exported from `@oxy.so/core/crypto`): the
+ * derivation is non-hardened and the chain code is a public function of the
+ * identity public key, so `identity = child - I_L mod n` — whoever holds one
+ * child private key and the public key holds the identity key. Callers get
+ * signatures ({@link signSocialReceiveDigest}), never the child key.
+ *
  * @returns the child private key and its compressed public key, lowercase hex.
  */
 export function deriveSocialReceiveKey(privateKeyHex, index) {

package/dist/esm/crypto/index.js

@@ -24,8 +24,12 @@ export { hkdfSha256 } from './kdf.js';
 export { encryptAead, decryptAead, AEAD_KEY_LENGTH, AEAD_NONCE_LENGTH } from './aead.js';
 export { deriveSharedSecret } from './ecdh.js';
 // What the identity key computes without leaving its holder: the same functions
-// Commons' identity host implements natively on Android.
-export { SCOPED_SEED_KDF_SALT, SOCIAL_RECEIVE_CHAIN_CODE_KEY, MAX_SOCIAL_RECEIVE_INDEX, deriveScopedSeedFromKey, deriveSocialReceiveKey, signSocialReceiveDigest, authChallengeDigest, } from './identityDerivations.js';
+// Commons' identity host implements natively on Android. The social-receive
+// CHILD private key (`deriveSocialReceiveKey`) is deliberately not here: the
+// derivation is non-hardened under a chain code anyone can compute from the
+// public key, so one leaked child private key reveals the identity key. Only
+// signatures (`signSocialReceiveDigest`) leave this module.
+export { SCOPED_SEED_KDF_SALT, SOCIAL_RECEIVE_CHAIN_CODE_KEY, MAX_SOCIAL_RECEIVE_INDEX, deriveScopedSeedFromKey, signSocialReceiveDigest, authChallengeDigest, } from './identityDerivations.js';
 // Identity proofs — the one signed format for operations on a personal root
 // (docs/adr/0024-one-oxy-account-root-holders.md D7)
 export { digestIdentityPayload, signIdentityProof } from './identityProof.js';