@oxy.so/services 11.10.0 → 11.12.1

package/lib/module/ui/appAssertion/appAssertionManager.js

@@ -0,0 +1,304 @@
+"use strict";
+
+/**
+ * The app's assertion of which app it is (ADR 0045), obtained and refreshed for
+ * the signed-in session without any app code.
+ *
+ * One manager per `OxyProvider`. For the active session it resolves the app's
+ * application id from its registered `clientId`, proves the app by platform —
+ * the browser's `Origin` on the web, Play Integrity on Android, App Attest on
+ * iOS — trades the proof for an Oxy-signed `OXY-APP+JWT`, and refreshes it a
+ * minute before it expires. A session change drops the assertion at once: an
+ * assertion names exactly one person and one session.
+ *
+ * Outcomes are values, never thrown: `ready`, `unsupported` (this build cannot
+ * prove itself: no `clientId`, no native module, App Attest unavailable) or
+ * `unavailable` (Oxy refused or could not be reached). A refusal that will not
+ * change for this session (an unregistered origin or platform) is not retried
+ * until the session changes; anything else is retried with a backoff.
+ */
+
+import { OXY_APP_ASSERTION_HEADER } from '@oxy.so/contracts/client';
+/** Refresh this long before expiry. */
+const REFRESH_BEFORE_MS = 60_000;
+/** `getAppAssertion()` fetches anew when less than this is left. */
+const MIN_REMAINING_MS = 30_000;
+const RETRY_FIRST_MS = 30_000;
+const RETRY_MAX_MS = 15 * 60_000;
+
+/** Refusals that will not change for this session. */
+const PERMANENT_REFUSALS = new Set(['application_unavailable', 'session_other_application', 'platform_not_registered', 'origin_not_registered', 'integrity_unconfigured']);
+const IDLE = {
+  status: 'idle',
+  assertion: null,
+  applicationId: null,
+  platform: null,
+  expiresAt: null,
+  error: null
+};
+class Unsupported extends Error {
+  constructor(reason) {
+    super(reason);
+    this.reason = reason;
+  }
+}
+function errorCode(error) {
+  if (error instanceof Unsupported) return error.reason;
+  const code = error?.code;
+  return typeof code === 'string' && code.length > 0 ? code : 'request_failed';
+}
+export class AppAssertionManager {
+  snapshot = IDLE;
+  listeners = new Set();
+  session = null;
+  /** Bumped on every session change; a result for an older generation is dropped. */
+  generation = 0;
+  inflight = null;
+  timer = null;
+  retryMs = RETRY_FIRST_MS;
+  retryAt = 0;
+  applicationId = null;
+  preparedProject = null;
+  constructor(options) {
+    this.options = options;
+    this.now = options.now ?? Date.now;
+    this.setTimer = options.setTimer ?? ((run, ms) => setTimeout(run, ms));
+    this.clearTimer = options.clearTimer ?? (timer => clearTimeout(timer));
+  }
+  subscribe = listener => {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  };
+  getSnapshot = () => this.snapshot;
+
+  /**
+   * A current assertion for the active session, obtaining one when there is
+   * none or it is about to expire; `null` when this app cannot have one now.
+   */
+  getAppAssertion = async () => {
+    const current = this.snapshot;
+    if (current.status === 'ready' && current.assertion && current.expiresAt !== null && current.expiresAt - this.now() > MIN_REMAINING_MS) {
+      return current.assertion;
+    }
+    if (!this.session || current.status === 'unsupported') return null;
+    if (current.status === 'unavailable' && this.now() < this.retryAt) return null;
+    return this.refresh();
+  };
+
+  /**
+   * `{ 'X-Oxy-App-Assertion': <assertion> }` for a request to a service that
+   * needs to know the app (Alia), or `{}` when there is none.
+   */
+  getAppAssertionHeaders = async () => {
+    const assertion = await this.getAppAssertion();
+    return assertion ? {
+      [OXY_APP_ASSERTION_HEADER]: assertion
+    } : {};
+  };
+
+  /** Follow the active session; `null` when signed out or not yet able to call Oxy. */
+  setSession(session) {
+    const same = session?.userId === this.session?.userId && session?.sessionId === this.session?.sessionId;
+    if (same) return;
+    this.session = session;
+    this.generation += 1;
+    this.inflight = null;
+    this.retryMs = RETRY_FIRST_MS;
+    this.retryAt = 0;
+    this.cancelTimer();
+    this.publish(IDLE);
+    if (session) void this.refresh();
+  }
+
+  /** Stop all work. A later `setSession` starts again. */
+  dispose() {
+    this.session = null;
+    this.generation += 1;
+    this.inflight = null;
+    this.cancelTimer();
+  }
+  refresh() {
+    if (this.inflight) return this.inflight;
+    const generation = this.generation;
+    const run = this.obtain().then(answer => {
+      if (generation !== this.generation) return null;
+      const expiresAt = Date.parse(answer.expiresAt);
+      this.retryMs = RETRY_FIRST_MS;
+      this.publish({
+        status: 'ready',
+        assertion: answer.assertion,
+        applicationId: answer.applicationId,
+        platform: answer.platform,
+        expiresAt,
+        error: null
+      });
+      this.schedule(Math.max(expiresAt - this.now() - REFRESH_BEFORE_MS, MIN_REMAINING_MS));
+      return answer.assertion;
+    }).catch(error => {
+      if (generation !== this.generation) return null;
+      const code = errorCode(error);
+      const unsupported = error instanceof Unsupported;
+      const current = this.snapshot;
+      if (!unsupported && !PERMANENT_REFUSALS.has(code) && current.status === 'ready' && current.expiresAt !== null && current.expiresAt - this.now() > MIN_REMAINING_MS) {
+        // The assertion in hand is still good: keep it, and try again soon.
+        this.schedule(Math.min(RETRY_FIRST_MS, current.expiresAt - this.now() - MIN_REMAINING_MS));
+        return current.assertion;
+      }
+      this.publish({
+        ...IDLE,
+        status: unsupported ? 'unsupported' : 'unavailable',
+        platform: this.options.integrity.platform,
+        error: code
+      });
+      if (!unsupported) {
+        if (PERMANENT_REFUSALS.has(code)) {
+          this.retryAt = Number.POSITIVE_INFINITY;
+        } else {
+          this.retryAt = this.now() + this.retryMs;
+          this.schedule(this.retryMs);
+          this.retryMs = Math.min(this.retryMs * 2, RETRY_MAX_MS);
+        }
+      }
+      return null;
+    }).finally(() => {
+      if (this.inflight === run) this.inflight = null;
+    });
+    this.inflight = run;
+    if (this.snapshot.status !== 'ready') this.publish({
+      ...this.snapshot,
+      status: 'pending'
+    });
+    return run;
+  }
+  async obtain() {
+    const applicationId = await this.resolveApplicationId();
+    const {
+      platform
+    } = this.options.integrity;
+    const assertions = this.options.oxyServices.apps.assertions;
+    if (platform === 'web') return assertions.create({
+      applicationId,
+      platform: 'web'
+    });
+    const integrity = await this.options.integrity.loadIntegrity();
+    if (!integrity) throw new Unsupported('integrity_module_unavailable');
+    if (platform === 'android') return this.proveAndroid(applicationId, integrity);
+    if (!integrity.isSupported) throw new Unsupported('app_attest_unsupported');
+    return this.proveIos(applicationId, integrity);
+  }
+  resolveApplicationId() {
+    const clientId = this.options.clientId;
+    if (!clientId) return Promise.reject(new Unsupported('client_id_missing'));
+    if (this.applicationId?.clientId !== clientId) {
+      const id = this.options.oxyServices.apps.getPublic(clientId).then(app => app.id);
+      id.catch(() => {
+        if (this.applicationId?.id === id) this.applicationId = null;
+      });
+      this.applicationId = {
+        clientId,
+        id
+      };
+    }
+    return this.applicationId.id;
+  }
+  async proveAndroid(applicationId, integrity) {
+    const assertions = this.options.oxyServices.apps.assertions;
+    const challenge = await assertions.challenge({
+      applicationId,
+      platform: 'android'
+    });
+    if (!challenge.cloudProjectNumber) throw new Unsupported('integrity_unconfigured');
+    try {
+      if (this.preparedProject !== challenge.cloudProjectNumber) {
+        await integrity.prepareIntegrityTokenProviderAsync(challenge.cloudProjectNumber);
+        this.preparedProject = challenge.cloudProjectNumber;
+      }
+      const integrityToken = await integrity.requestIntegrityCheckAsync(challenge.requestHash);
+      return await assertions.create({
+        applicationId,
+        platform: 'android',
+        proof: {
+          challenge: challenge.challenge,
+          integrityToken
+        }
+      });
+    } catch (error) {
+      // A provider Google invalidated is prepared again on the next attempt.
+      this.preparedProject = null;
+      throw error;
+    }
+  }
+  async proveIos(applicationId, integrity) {
+    const keyName = `${this.options.storageKeyPrefix}_app_attest_key_${applicationId}`;
+    const storage = this.options.storage();
+    const assertOnce = async keyId => {
+      const assertions = this.options.oxyServices.apps.assertions;
+      const challenge = await assertions.challenge({
+        applicationId,
+        platform: 'ios',
+        purpose: 'assertion'
+      });
+      const assertion = await integrity.generateAssertionAsync(keyId, challenge.requestHash);
+      return assertions.create({
+        applicationId,
+        platform: 'ios',
+        proof: {
+          challenge: challenge.challenge,
+          keyId,
+          assertion
+        }
+      });
+    };
+    const stored = await storage?.getItem(keyName).catch(() => null);
+    if (stored) {
+      try {
+        return await assertOnce(stored);
+      } catch (error) {
+        // Oxy no longer knows the key (swept, or never registered): attest a new one.
+        if (errorCode(error) !== 'attest_key_unknown') throw error;
+        await storage?.removeItem(keyName).catch(() => undefined);
+      }
+    }
+    const keyId = await this.attestKey(applicationId, integrity);
+    await storage?.setItem(keyName, keyId).catch(() => undefined);
+    return assertOnce(keyId);
+  }
+  async attestKey(applicationId, integrity) {
+    const assertions = this.options.oxyServices.apps.assertions;
+    const keyId = await integrity.generateKeyAsync();
+    const challenge = await assertions.challenge({
+      applicationId,
+      platform: 'ios',
+      purpose: 'attest_key'
+    });
+    const attestation = await integrity.attestKeyAsync(keyId, challenge.requestHash);
+    await assertions.registerAttestKey({
+      applicationId,
+      keyId,
+      challenge: challenge.challenge,
+      attestation
+    });
+    return keyId;
+  }
+  schedule(ms) {
+    this.cancelTimer();
+    const generation = this.generation;
+    this.timer = this.setTimer(() => {
+      this.timer = null;
+      if (generation === this.generation && this.session) void this.refresh();
+    }, ms);
+  }
+  cancelTimer() {
+    if (this.timer !== null) {
+      this.clearTimer(this.timer);
+      this.timer = null;
+    }
+  }
+  publish(next) {
+    this.snapshot = next;
+    for (const listener of this.listeners) listener();
+  }
+}
+//# sourceMappingURL=appAssertionManager.js.map

package/lib/module/ui/appAssertion/appAssertionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["OXY_APP_ASSERTION_HEADER","REFRESH_BEFORE_MS","MIN_REMAINING_MS","RETRY_FIRST_MS","RETRY_MAX_MS","PERMANENT_REFUSALS","Set","IDLE","status","assertion","applicationId","platform","expiresAt","error","Unsupported","Error","constructor","reason","errorCode","code","length","AppAssertionManager","snapshot","listeners","session","generation","inflight","timer","retryMs","retryAt","preparedProject","options","now","Date","setTimer","run","ms","setTimeout","clearTimer","clearTimeout","subscribe","listener","add","delete","getSnapshot","getAppAssertion","current","refresh","getAppAssertionHeaders","setSession","same","userId","sessionId","cancelTimer","publish","dispose","obtain","then","answer","parse","schedule","Math","max","catch","unsupported","has","min","integrity","Number","POSITIVE_INFINITY","finally","resolveApplicationId","assertions","oxyServices","apps","create","loadIntegrity","proveAndroid","isSupported","proveIos","clientId","Promise","reject","id","getPublic","app","challenge","cloudProjectNumber","prepareIntegrityTokenProviderAsync","integrityToken","requestIntegrityCheckAsync","requestHash","proof","keyName","storageKeyPrefix","storage","assertOnce","keyId","purpose","generateAssertionAsync","stored","getItem","removeItem","undefined","attestKey","setItem","generateKeyAsync","attestation","attestKeyAsync","registerAttestKey","next"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appAssertionManager.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,wBAAwB,QAAQ,0BAA0B;AAoCnE;AACA,MAAMC,iBAAiB,GAAG,MAAM;AAChC;AACA,MAAMC,gBAAgB,GAAG,MAAM;AAC/B,MAAMC,cAAc,GAAG,MAAM;AAC7B,MAAMC,YAAY,GAAG,EAAE,GAAG,MAAM;;AAEhC;AACA,MAAMC,kBAAkB,GAAG,IAAIC,GAAG,CAAC,CACjC,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,CACzB,CAAC;AAEF,MAAMC,IAA0B,GAAG;EACjCC,MAAM,EAAE,MAAM;EACdC,SAAS,EAAE,IAAI;EACfC,aAAa,EAAE,IAAI;EACnBC,QAAQ,EAAE,IAAI;EACdC,SAAS,EAAE,IAAI;EACfC,KAAK,EAAE;AACT,CAAC;AAED,MAAMC,WAAW,SAASC,KAAK,CAAC;EAC9BC,WAAWA,CAAUC,MAAc,EAAE;IACnC,KAAK,CAACA,MAAM,CAAC;IAAC,KADKA,MAAc,GAAdA,MAAc;EAEnC;AACF;AAEA,SAASC,SAASA,CAACL,KAAc,EAAU;EACzC,IAAIA,KAAK,YAAYC,WAAW,EAAE,OAAOD,KAAK,CAACI,MAAM;EACrD,MAAME,IAAI,GAAIN,KAAK,EAAgCM,IAAI;EACvD,OAAO,OAAOA,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACC,MAAM,GAAG,CAAC,GAAGD,IAAI,GAAG,gBAAgB;AAC9E;AAEA,OAAO,MAAME,mBAAmB,CAAC;EACvBC,QAAQ,GAAyBf,IAAI;EAC5BgB,SAAS,GAAG,IAAIjB,GAAG,CAAa,CAAC;EAC1CkB,OAAO,GAA+B,IAAI;EAClD;EACQC,UAAU,GAAG,CAAC;EACdC,QAAQ,GAAkC,IAAI;EAC9CC,KAAK,GAAY,IAAI;EACrBC,OAAO,GAAGzB,cAAc;EACxB0B,OAAO,GAAG,CAAC;EACXnB,aAAa,GAAqD,IAAI;EACtEoB,eAAe,GAAkB,IAAI;EAK7Cd,WAAWA,CAAkBe,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;IAC9D,IAAI,CAACC,GAAG,GAAGD,OAAO,CAACC,GAAG,IAAIC,IAAI,CAACD,GAAG;IAClC,IAAI,CAACE,QAAQ,GAAGH,OAAO,CAACG,QAAQ,KAAK,CAACC,GAAG,EAAEC,EAAE,KAAKC,UAAU,CAACF,GAAG,EAAEC,EAAE,CAAC,CAAC;IACtE,IAAI,CAACE,UAAU,GACbP,OAAO,CAACO,UAAU,KAAMX,KAAK,IAAKY,YAAY,CAACZ,KAAsC,CAAC,CAAC;EAC3F;EAESa,SAAS,GAAIC,QAAoB,IAAmB;IAC3D,IAAI,CAAClB,SAAS,CAACmB,GAAG,CAACD,QAAQ,CAAC;IAC5B,OAAO,MAAM;MACX,IAAI,CAAClB,SAAS,CAACoB,MAAM,CAACF,QAAQ,CAAC;IACjC,CAAC;EACH,CAAC;EAEQG,WAAW,GAAGA,CAAA,KAA4B,IAAI,CAACtB,QAAQ;;EAEhE;AACF;AACA;AACA;EACWuB,eAAe,GAAG,MAAAA,CAAA,KAAoC;IAC7D,MAAMC,OAAO,GAAG,IAAI,CAACxB,QAAQ;IAC7B,IACEwB,OAAO,CAACtC,MAAM,KAAK,OAAO,IAC1BsC,OAAO,CAACrC,SAAS,IACjBqC,OAAO,CAAClC,SAAS,KAAK,IAAI,IAC1BkC,OAAO,CAAClC,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG9B,gBAAgB,EACjD;MACA,OAAO4C,OAAO,CAACrC,SAAS;IAC1B;IACA,IAAI,CAAC,IAAI,CAACe,OAAO,IAAIsB,OAAO,CAACtC,MAAM,KAAK,aAAa,EAAE,OAAO,IAAI;IAClE,IAAIsC,OAAO,CAACtC,MAAM,KAAK,aAAa,IAAI,IAAI,CAACwB,GAAG,CAAC,CAAC,GAAG,IAAI,CAACH,OAAO,EAAE,OAAO,IAAI;IAC9E,OAAO,IAAI,CAACkB,OAAO,CAAC,CAAC;EACvB,CAAC;;EAED;AACF;AACA;AACA;EACWC,sBAAsB,GAAG,MAAAA,CAAA,KAA6C;IAC7E,MAAMvC,SAAS,GAAG,MAAM,IAAI,CAACoC,eAAe,CAAC,CAAC;IAC9C,OAAOpC,SAAS,GAAG;MAAE,CAACT,wBAAwB,GAAGS;IAAU,CAAC,GAAG,CAAC,CAAC;EACnE,CAAC;;EAED;EACAwC,UAAUA,CAACzB,OAAmC,EAAQ;IACpD,MAAM0B,IAAI,GACR1B,OAAO,EAAE2B,MAAM,KAAK,IAAI,CAAC3B,OAAO,EAAE2B,MAAM,IAAI3B,OAAO,EAAE4B,SAAS,KAAK,IAAI,CAAC5B,OAAO,EAAE4B,SAAS;IAC5F,IAAIF,IAAI,EAAE;IACV,IAAI,CAAC1B,OAAO,GAAGA,OAAO;IACtB,IAAI,CAACC,UAAU,IAAI,CAAC;IACpB,IAAI,CAACC,QAAQ,GAAG,IAAI;IACpB,IAAI,CAACE,OAAO,GAAGzB,cAAc;IAC7B,IAAI,CAAC0B,OAAO,GAAG,CAAC;IAChB,IAAI,CAACwB,WAAW,CAAC,CAAC;IAClB,IAAI,CAACC,OAAO,CAAC/C,IAAI,CAAC;IAClB,IAAIiB,OAAO,EAAE,KAAK,IAAI,CAACuB,OAAO,CAAC,CAAC;EAClC;;EAEA;EACAQ,OAAOA,CAAA,EAAS;IACd,IAAI,CAAC/B,OAAO,GAAG,IAAI;IACnB,IAAI,CAACC,UAAU,IAAI,CAAC;IACpB,IAAI,CAACC,QAAQ,GAAG,IAAI;IACpB,IAAI,CAAC2B,WAAW,CAAC,CAAC;EACpB;EAEQN,OAAOA,CAAA,EAA2B;IACxC,IAAI,IAAI,CAACrB,QAAQ,EAAE,OAAO,IAAI,CAACA,QAAQ;IACvC,MAAMD,UAAU,GAAG,IAAI,CAACA,UAAU;IAClC,MAAMU,GAAG,GAAG,IAAI,CAACqB,MAAM,CAAC,CAAC,CACtBC,IAAI,CAAEC,MAAM,IAAK;MAChB,IAAIjC,UAAU,KAAK,IAAI,CAACA,UAAU,EAAE,OAAO,IAAI;MAC/C,MAAMb,SAAS,GAAGqB,IAAI,CAAC0B,KAAK,CAACD,MAAM,CAAC9C,SAAS,CAAC;MAC9C,IAAI,CAACgB,OAAO,GAAGzB,cAAc;MAC7B,IAAI,CAACmD,OAAO,CAAC;QACX9C,MAAM,EAAE,OAAO;QACfC,SAAS,EAAEiD,MAAM,CAACjD,SAAS;QAC3BC,aAAa,EAAEgD,MAAM,CAAChD,aAAa;QACnCC,QAAQ,EAAE+C,MAAM,CAAC/C,QAAQ;QACzBC,SAAS;QACTC,KAAK,EAAE;MACT,CAAC,CAAC;MACF,IAAI,CAAC+C,QAAQ,CAACC,IAAI,CAACC,GAAG,CAAClD,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG/B,iBAAiB,EAAEC,gBAAgB,CAAC,CAAC;MACrF,OAAOwD,MAAM,CAACjD,SAAS;IACzB,CAAC,CAAC,CACDsD,KAAK,CAAElD,KAAc,IAAK;MACzB,IAAIY,UAAU,KAAK,IAAI,CAACA,UAAU,EAAE,OAAO,IAAI;MAC/C,MAAMN,IAAI,GAAGD,SAAS,CAACL,KAAK,CAAC;MAC7B,MAAMmD,WAAW,GAAGnD,KAAK,YAAYC,WAAW;MAChD,MAAMgC,OAAO,GAAG,IAAI,CAACxB,QAAQ;MAC7B,IACE,CAAC0C,WAAW,IACZ,CAAC3D,kBAAkB,CAAC4D,GAAG,CAAC9C,IAAI,CAAC,IAC7B2B,OAAO,CAACtC,MAAM,KAAK,OAAO,IAC1BsC,OAAO,CAAClC,SAAS,KAAK,IAAI,IAC1BkC,OAAO,CAAClC,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG9B,gBAAgB,EACjD;QACA;QACA,IAAI,CAAC0D,QAAQ,CACXC,IAAI,CAACK,GAAG,CAAC/D,cAAc,EAAE2C,OAAO,CAAClC,SAAS,GAAG,IAAI,CAACoB,GAAG,CAAC,CAAC,GAAG9B,gBAAgB,CAC5E,CAAC;QACD,OAAO4C,OAAO,CAACrC,SAAS;MAC1B;MACA,IAAI,CAAC6C,OAAO,CAAC;QACX,GAAG/C,IAAI;QACPC,MAAM,EAAEwD,WAAW,GAAG,aAAa,GAAG,aAAa;QACnDrD,QAAQ,EAAE,IAAI,CAACoB,OAAO,CAACoC,SAAS,CAACxD,QAAQ;QACzCE,KAAK,EAAEM;MACT,CAAC,CAAC;MACF,IAAI,CAAC6C,WAAW,EAAE;QAChB,IAAI3D,kBAAkB,CAAC4D,GAAG,CAAC9C,IAAI,CAAC,EAAE;UAChC,IAAI,CAACU,OAAO,GAAGuC,MAAM,CAACC,iBAAiB;QACzC,CAAC,MAAM;UACL,IAAI,CAACxC,OAAO,GAAG,IAAI,CAACG,GAAG,CAAC,CAAC,GAAG,IAAI,CAACJ,OAAO;UACxC,IAAI,CAACgC,QAAQ,CAAC,IAAI,CAAChC,OAAO,CAAC;UAC3B,IAAI,CAACA,OAAO,GAAGiC,IAAI,CAACK,GAAG,CAAC,IAAI,CAACtC,OAAO,GAAG,CAAC,EAAExB,YAAY,CAAC;QACzD;MACF;MACA,OAAO,IAAI;IACb,CAAC,CAAC,CACDkE,OAAO,CAAC,MAAM;MACb,IAAI,IAAI,CAAC5C,QAAQ,KAAKS,GAAG,EAAE,IAAI,CAACT,QAAQ,GAAG,IAAI;IACjD,CAAC,CAAC;IACJ,IAAI,CAACA,QAAQ,GAAGS,GAAG;IACnB,IAAI,IAAI,CAACb,QAAQ,CAACd,MAAM,KAAK,OAAO,EAAE,IAAI,CAAC8C,OAAO,CAAC;MAAE,GAAG,IAAI,CAAChC,QAAQ;MAAEd,MAAM,EAAE;IAAU,CAAC,CAAC;IAC3F,OAAO2B,GAAG;EACZ;EAEA,MAAcqB,MAAMA,CAAA,EAAkC;IACpD,MAAM9C,aAAa,GAAG,MAAM,IAAI,CAAC6D,oBAAoB,CAAC,CAAC;IACvD,MAAM;MAAE5D;IAAS,CAAC,GAAG,IAAI,CAACoB,OAAO,CAACoC,SAAS;IAC3C,MAAMK,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;IAC3D,IAAI7D,QAAQ,KAAK,KAAK,EAAE,OAAO6D,UAAU,CAACG,MAAM,CAAC;MAAEjE,aAAa;MAAEC,QAAQ,EAAE;IAAM,CAAC,CAAC;IAEpF,MAAMwD,SAAS,GAAG,MAAM,IAAI,CAACpC,OAAO,CAACoC,SAAS,CAACS,aAAa,CAAC,CAAC;IAC9D,IAAI,CAACT,SAAS,EAAE,MAAM,IAAIrD,WAAW,CAAC,8BAA8B,CAAC;IACrE,IAAIH,QAAQ,KAAK,SAAS,EAAE,OAAO,IAAI,CAACkE,YAAY,CAACnE,aAAa,EAAEyD,SAAS,CAAC;IAC9E,IAAI,CAACA,SAAS,CAACW,WAAW,EAAE,MAAM,IAAIhE,WAAW,CAAC,wBAAwB,CAAC;IAC3E,OAAO,IAAI,CAACiE,QAAQ,CAACrE,aAAa,EAAEyD,SAAS,CAAC;EAChD;EAEQI,oBAAoBA,CAAA,EAAoB;IAC9C,MAAMS,QAAQ,GAAG,IAAI,CAACjD,OAAO,CAACiD,QAAQ;IACtC,IAAI,CAACA,QAAQ,EAAE,OAAOC,OAAO,CAACC,MAAM,CAAC,IAAIpE,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAACJ,aAAa,EAAEsE,QAAQ,KAAKA,QAAQ,EAAE;MAC7C,MAAMG,EAAE,GAAG,IAAI,CAACpD,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACU,SAAS,CAACJ,QAAQ,CAAC,CAACvB,IAAI,CAAE4B,GAAG,IAAKA,GAAG,CAACF,EAAE,CAAC;MAClFA,EAAE,CAACpB,KAAK,CAAC,MAAM;QACb,IAAI,IAAI,CAACrD,aAAa,EAAEyE,EAAE,KAAKA,EAAE,EAAE,IAAI,CAACzE,aAAa,GAAG,IAAI;MAC9D,CAAC,CAAC;MACF,IAAI,CAACA,aAAa,GAAG;QAAEsE,QAAQ;QAAEG;MAAG,CAAC;IACvC;IACA,OAAO,IAAI,CAACzE,aAAa,CAACyE,EAAE;EAC9B;EAEA,MAAcN,YAAYA,CACxBnE,aAAqB,EACrByD,SAA6B,EACE;IAC/B,MAAMK,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;IAC3D,MAAMc,SAAS,GAAG,MAAMd,UAAU,CAACc,SAAS,CAAC;MAAE5E,aAAa;MAAEC,QAAQ,EAAE;IAAU,CAAC,CAAC;IACpF,IAAI,CAAC2E,SAAS,CAACC,kBAAkB,EAAE,MAAM,IAAIzE,WAAW,CAAC,wBAAwB,CAAC;IAClF,IAAI;MACF,IAAI,IAAI,CAACgB,eAAe,KAAKwD,SAAS,CAACC,kBAAkB,EAAE;QACzD,MAAMpB,SAAS,CAACqB,kCAAkC,CAACF,SAAS,CAACC,kBAAkB,CAAC;QAChF,IAAI,CAACzD,eAAe,GAAGwD,SAAS,CAACC,kBAAkB;MACrD;MACA,MAAME,cAAc,GAAG,MAAMtB,SAAS,CAACuB,0BAA0B,CAACJ,SAAS,CAACK,WAAW,CAAC;MACxF,OAAO,MAAMnB,UAAU,CAACG,MAAM,CAAC;QAC7BjE,aAAa;QACbC,QAAQ,EAAE,SAAS;QACnBiF,KAAK,EAAE;UAAEN,SAAS,EAAEA,SAAS,CAACA,SAAS;UAAEG;QAAe;MAC1D,CAAC,CAAC;IACJ,CAAC,CAAC,OAAO5E,KAAK,EAAE;MACd;MACA,IAAI,CAACiB,eAAe,GAAG,IAAI;MAC3B,MAAMjB,KAAK;IACb;EACF;EAEA,MAAckE,QAAQA,CACpBrE,aAAqB,EACrByD,SAA6B,EACE;IAC/B,MAAM0B,OAAO,GAAG,GAAG,IAAI,CAAC9D,OAAO,CAAC+D,gBAAgB,mBAAmBpF,aAAa,EAAE;IAClF,MAAMqF,OAAO,GAAG,IAAI,CAAChE,OAAO,CAACgE,OAAO,CAAC,CAAC;IACtC,MAAMC,UAAU,GAAG,MAAOC,KAAa,IAAK;MAC1C,MAAMzB,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;MAC3D,MAAMc,SAAS,GAAG,MAAMd,UAAU,CAACc,SAAS,CAAC;QAC3C5E,aAAa;QACbC,QAAQ,EAAE,KAAK;QACfuF,OAAO,EAAE;MACX,CAAC,CAAC;MACF,MAAMzF,SAAS,GAAG,MAAM0D,SAAS,CAACgC,sBAAsB,CAACF,KAAK,EAAEX,SAAS,CAACK,WAAW,CAAC;MACtF,OAAOnB,UAAU,CAACG,MAAM,CAAC;QACvBjE,aAAa;QACbC,QAAQ,EAAE,KAAK;QACfiF,KAAK,EAAE;UAAEN,SAAS,EAAEA,SAAS,CAACA,SAAS;UAAEW,KAAK;UAAExF;QAAU;MAC5D,CAAC,CAAC;IACJ,CAAC;IAED,MAAM2F,MAAM,GAAG,MAAML,OAAO,EAAEM,OAAO,CAACR,OAAO,CAAC,CAAC9B,KAAK,CAAC,MAAM,IAAI,CAAC;IAChE,IAAIqC,MAAM,EAAE;MACV,IAAI;QACF,OAAO,MAAMJ,UAAU,CAACI,MAAM,CAAC;MACjC,CAAC,CAAC,OAAOvF,KAAK,EAAE;QACd;QACA,IAAIK,SAAS,CAACL,KAAK,CAAC,KAAK,oBAAoB,EAAE,MAAMA,KAAK;QAC1D,MAAMkF,OAAO,EAAEO,UAAU,CAACT,OAAO,CAAC,CAAC9B,KAAK,CAAC,MAAMwC,SAAS,CAAC;MAC3D;IACF;IACA,MAAMN,KAAK,GAAG,MAAM,IAAI,CAACO,SAAS,CAAC9F,aAAa,EAAEyD,SAAS,CAAC;IAC5D,MAAM4B,OAAO,EAAEU,OAAO,CAACZ,OAAO,EAAEI,KAAK,CAAC,CAAClC,KAAK,CAAC,MAAMwC,SAAS,CAAC;IAC7D,OAAOP,UAAU,CAACC,KAAK,CAAC;EAC1B;EAEA,MAAcO,SAASA,CAAC9F,aAAqB,EAAEyD,SAA6B,EAAmB;IAC7F,MAAMK,UAAU,GAAG,IAAI,CAACzC,OAAO,CAAC0C,WAAW,CAACC,IAAI,CAACF,UAAU;IAC3D,MAAMyB,KAAK,GAAG,MAAM9B,SAAS,CAACuC,gBAAgB,CAAC,CAAC;IAChD,MAAMpB,SAAS,GAAG,MAAMd,UAAU,CAACc,SAAS,CAAC;MAC3C5E,aAAa;MACbC,QAAQ,EAAE,KAAK;MACfuF,OAAO,EAAE;IACX,CAAC,CAAC;IACF,MAAMS,WAAW,GAAG,MAAMxC,SAAS,CAACyC,cAAc,CAACX,KAAK,EAAEX,SAAS,CAACK,WAAW,CAAC;IAChF,MAAMnB,UAAU,CAACqC,iBAAiB,CAAC;MACjCnG,aAAa;MACbuF,KAAK;MACLX,SAAS,EAAEA,SAAS,CAACA,SAAS;MAC9BqB;IACF,CAAC,CAAC;IACF,OAAOV,KAAK;EACd;EAEQrC,QAAQA,CAACxB,EAAU,EAAQ;IACjC,IAAI,CAACiB,WAAW,CAAC,CAAC;IAClB,MAAM5B,UAAU,GAAG,IAAI,CAACA,UAAU;IAClC,IAAI,CAACE,KAAK,GAAG,IAAI,CAACO,QAAQ,CAAC,MAAM;MAC/B,IAAI,CAACP,KAAK,GAAG,IAAI;MACjB,IAAIF,UAAU,KAAK,IAAI,CAACA,UAAU,IAAI,IAAI,CAACD,OAAO,EAAE,KAAK,IAAI,CAACuB,OAAO,CAAC,CAAC;IACzE,CAAC,EAAEX,EAAE,CAAC;EACR;EAEQiB,WAAWA,CAAA,EAAS;IAC1B,IAAI,IAAI,CAAC1B,KAAK,KAAK,IAAI,EAAE;MACvB,IAAI,CAACW,UAAU,CAAC,IAAI,CAACX,KAAK,CAAC;MAC3B,IAAI,CAACA,KAAK,GAAG,IAAI;IACnB;EACF;EAEQ2B,OAAOA,CAACwD,IAA0B,EAAQ;IAChD,IAAI,CAACxF,QAAQ,GAAGwF,IAAI;IACpB,KAAK,MAAMrE,QAAQ,IAAI,IAAI,CAAClB,SAAS,EAAEkB,QAAQ,CAAC,CAAC;EACnD;AACF","ignoreList":[]}

package/lib/module/ui/appAssertion/appIntegrityPlatform.js

@@ -0,0 +1,14 @@
+"use strict";
+
+/**
+ * Web: the app proves itself with the browser's `Origin`, which Oxy reads from
+ * the request itself (ADR 0045). Nothing to load.
+ *
+ * Native builds resolve `appIntegrityPlatform.native.ts` instead.
+ */
+
+export const appIntegrityPlatform = {
+  platform: 'web',
+  loadIntegrity: async () => null
+};
+//# sourceMappingURL=appIntegrityPlatform.js.map

package/lib/module/ui/appAssertion/appIntegrityPlatform.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["appIntegrityPlatform","platform","loadIntegrity"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appIntegrityPlatform.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAGA,OAAO,MAAMA,oBAA0C,GAAG;EACxDC,QAAQ,EAAE,KAAK;EACfC,aAAa,EAAE,MAAAA,CAAA,KAAY;AAC7B,CAAC","ignoreList":[]}

package/lib/module/ui/appAssertion/appIntegrityPlatform.native.js

@@ -0,0 +1,26 @@
+"use strict";
+
+/**
+ * iOS and Android: the app proves itself with App Attest or Play Integrity
+ * through `@expo/app-integrity` (ADR 0045).
+ *
+ * The module is loaded lazily, and its `import()` is a direct statement of a
+ * `try` block — the shape Metro marks OPTIONAL — so an app bundle that lacks
+ * the package, or a binary built before it was added (an over-the-air update
+ * of the JavaScript alone), still boots: `requireNativeModule` throws inside
+ * the import, and the app simply has no assertion.
+ */
+import { Platform } from 'react-native';
+async function loadIntegrity() {
+  try {
+    const integrity = await import('@expo/app-integrity');
+    return integrity;
+  } catch {
+    return null;
+  }
+}
+export const appIntegrityPlatform = {
+  platform: Platform.OS === 'ios' ? 'ios' : Platform.OS === 'android' ? 'android' : 'web',
+  loadIntegrity: Platform.OS === 'ios' || Platform.OS === 'android' ? loadIntegrity : async () => null
+};
+//# sourceMappingURL=appIntegrityPlatform.native.js.map

package/lib/module/ui/appAssertion/appIntegrityPlatform.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Platform","loadIntegrity","integrity","appIntegrityPlatform","platform","OS"],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appIntegrityPlatform.native.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,QAAQ,QAAQ,cAAc;AAGvC,eAAeC,aAAaA,CAAA,EAAuC;EACjE,IAAI;IACF,MAAMC,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;IACrD,OAAOA,SAAS;EAClB,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;AAEA,OAAO,MAAMC,oBAA0C,GAAG;EACxDC,QAAQ,EAAEJ,QAAQ,CAACK,EAAE,KAAK,KAAK,GAAG,KAAK,GAAGL,QAAQ,CAACK,EAAE,KAAK,SAAS,GAAG,SAAS,GAAG,KAAK;EACvFJ,aAAa,EACXD,QAAQ,CAACK,EAAE,KAAK,KAAK,IAAIL,QAAQ,CAACK,EAAE,KAAK,SAAS,GAAGJ,aAAa,GAAG,YAAY;AACrF,CAAC","ignoreList":[]}

package/lib/module/ui/appAssertion/appIntegrityTypes.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=appIntegrityTypes.js.map

package/lib/module/ui/appAssertion/appIntegrityTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["ui/appAssertion/appIntegrityTypes.ts"],"mappings":"","ignoreList":[]}

package/lib/module/ui/components/fileManagement/FileAppAccessSection.js

@@ -0,0 +1,116 @@
+"use strict";
+
+import { useCallback, useState } from 'react';
+import { ActivityIndicator, View } from 'react-native';
+import { Avatar } from '@oxy.so/bloom/avatar';
+import { Button } from '@oxy.so/bloom/button';
+import { SettingsListGroup, SettingsListItem } from '@oxy.so/bloom/settings-list';
+import { surfaces } from '@oxy.so/bloom/surfaces';
+import { useTheme } from '@oxy.so/bloom/theme';
+import { toast } from '@oxy.so/bloom/toast';
+import { Text } from '@oxy.so/bloom/typography';
+import { useI18n } from "../../hooks/useI18n.js";
+import { useFileAppAccess } from "../../hooks/queries/useFileQueries.js";
+import { useRevokeFileAppAccess } from "../../hooks/mutations/useAccountMutations.js";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+const APP_ICON_SIZE = 32;
+/**
+ * "Apps with access" (ADR 0043 stage 4c): the applications that can open this
+ * file on their own — one that stored it for the person (`upload`), one the
+ * person attached it to (`link`) — each with a Revoke action behind a
+ * confirmation. Revoking stops the application reading the file and every
+ * playback it started; the row leaves the list at once and comes back if the
+ * revoke fails. Shown only on the owner's own file.
+ */
+export const FileAppAccessSection = ({
+  fileId
+}) => {
+  const {
+    t
+  } = useI18n();
+  const {
+    colors
+  } = useTheme();
+  const {
+    data: apps,
+    isLoading,
+    isError
+  } = useFileAppAccess(fileId);
+  const revoke = useRevokeFileAppAccess();
+  const [revokingId, setRevokingId] = useState(null);
+  const confirmRevoke = useCallback(async app => {
+    const confirmed = await surfaces.confirm({
+      title: t('fileManagement.appAccess.confirm.title', {
+        name: app.name
+      }),
+      description: t('fileManagement.appAccess.confirm.message', {
+        name: app.name
+      }),
+      confirmLabel: t('fileManagement.appAccess.revoke'),
+      cancelLabel: t('common.cancel'),
+      destructive: true
+    });
+    if (!confirmed) return;
+    setRevokingId(app.applicationId);
+    try {
+      await revoke.mutateAsync({
+        fileId,
+        applicationId: app.applicationId
+      });
+      toast.success(t('fileManagement.appAccess.toasts.revoked', {
+        name: app.name
+      }));
+    } catch {
+      toast.error(t('fileManagement.appAccess.toasts.revokeFailed', {
+        name: app.name
+      }));
+    } finally {
+      setRevokingId(null);
+    }
+  }, [fileId, revoke, t]);
+  const viaText = app => app.via.map(via => t(`fileManagement.appAccess.via.${via}`)).join(' · ');
+  return /*#__PURE__*/_jsxs(View, {
+    className: "w-full mb-space-24",
+    children: [/*#__PURE__*/_jsx(Text, {
+      className: "text-text text-[16px] font-semibold mb-space-4",
+      children: t('fileManagement.appAccess.title')
+    }), /*#__PURE__*/_jsx(Text, {
+      className: "text-text-secondary text-[14px] mb-space-12",
+      children: t('fileManagement.appAccess.description')
+    }), isLoading ? /*#__PURE__*/_jsx(ActivityIndicator, {
+      color: colors.primary
+    }) : isError ? /*#__PURE__*/_jsx(Text, {
+      className: "text-text-secondary text-[14px]",
+      children: t('fileManagement.appAccess.loadError')
+    }) : !apps || apps.length === 0 ? /*#__PURE__*/_jsx(Text, {
+      className: "text-text-secondary text-[14px]",
+      children: t('fileManagement.appAccess.empty')
+    }) : /*#__PURE__*/_jsx(SettingsListGroup, {
+      children: apps.map(app => /*#__PURE__*/_jsx(SettingsListItem, {
+        icon: /*#__PURE__*/_jsx(Avatar, {
+          source: app.icon,
+          name: app.name,
+          size: APP_ICON_SIZE
+        }),
+        title: app.name,
+        description: viaText(app),
+        showChevron: false,
+        rightElement: /*#__PURE__*/_jsx(Button, {
+          appearance: "subtle",
+          tone: "danger",
+          size: "sm",
+          loading: revokingId === app.applicationId,
+          disabled: revokingId !== null,
+          accessibilityLabel: t('fileManagement.appAccess.a11y.revoke', {
+            name: app.name
+          }),
+          onPress: () => {
+            void confirmRevoke(app);
+          },
+          children: t('fileManagement.appAccess.revoke')
+        })
+      }, app.applicationId))
+    })]
+  });
+};
+//# sourceMappingURL=FileAppAccessSection.js.map

package/lib/module/ui/components/fileManagement/FileAppAccessSection.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useCallback","useState","ActivityIndicator","View","Avatar","Button","SettingsListGroup","SettingsListItem","surfaces","useTheme","toast","Text","useI18n","useFileAppAccess","useRevokeFileAppAccess","jsx","_jsx","jsxs","_jsxs","APP_ICON_SIZE","FileAppAccessSection","fileId","t","colors","data","apps","isLoading","isError","revoke","revokingId","setRevokingId","confirmRevoke","app","confirmed","confirm","title","name","description","confirmLabel","cancelLabel","destructive","applicationId","mutateAsync","success","error","viaText","via","map","join","className","children","color","primary","length","icon","source","size","showChevron","rightElement","appearance","tone","loading","disabled","accessibilityLabel","onPress"],"sourceRoot":"../../../../../src","sources":["ui/components/fileManagement/FileAppAccessSection.tsx"],"mappings":";;AACA,SAASA,WAAW,EAAEC,QAAQ,QAAQ,OAAO;AAC7C,SAASC,iBAAiB,EAAEC,IAAI,QAAQ,cAAc;AACtD,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,iBAAiB,EAAEC,gBAAgB,QAAQ,6BAA6B;AACjF,SAASC,QAAQ,QAAQ,wBAAwB;AACjD,SAASC,QAAQ,QAAQ,qBAAqB;AAC9C,SAASC,KAAK,QAAQ,qBAAqB;AAC3C,SAASC,IAAI,QAAQ,0BAA0B;AAE/C,SAASC,OAAO,QAAQ,wBAAqB;AAC7C,SAASC,gBAAgB,QAAQ,uCAAoC;AACrE,SAASC,sBAAsB,QAAQ,8CAA2C;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAEnF,MAAMC,aAAa,GAAG,EAAE;AAMxB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,oBAAyD,GAAGA,CAAC;EAAEC;AAAO,CAAC,KAAK;EACvF,MAAM;IAAEC;EAAE,CAAC,GAAGV,OAAO,CAAC,CAAC;EACvB,MAAM;IAAEW;EAAO,CAAC,GAAGd,QAAQ,CAAC,CAAC;EAC7B,MAAM;IAAEe,IAAI,EAAEC,IAAI;IAAEC,SAAS;IAAEC;EAAQ,CAAC,GAAGd,gBAAgB,CAACQ,MAAM,CAAC;EACnE,MAAMO,MAAM,GAAGd,sBAAsB,CAAC,CAAC;EACvC,MAAM,CAACe,UAAU,EAAEC,aAAa,CAAC,GAAG7B,QAAQ,CAAgB,IAAI,CAAC;EAEjE,MAAM8B,aAAa,GAAG/B,WAAW,CAC/B,MAAOgC,GAA0B,IAAK;IACpC,MAAMC,SAAS,GAAG,MAAMzB,QAAQ,CAAC0B,OAAO,CAAC;MACvCC,KAAK,EAAEb,CAAC,CAAC,wCAAwC,EAAE;QAAEc,IAAI,EAAEJ,GAAG,CAACI;MAAK,CAAC,CAAC;MACtEC,WAAW,EAAEf,CAAC,CAAC,0CAA0C,EAAE;QAAEc,IAAI,EAAEJ,GAAG,CAACI;MAAK,CAAC,CAAC;MAC9EE,YAAY,EAAEhB,CAAC,CAAC,iCAAiC,CAAC;MAClDiB,WAAW,EAAEjB,CAAC,CAAC,eAAe,CAAC;MAC/BkB,WAAW,EAAE;IACf,CAAC,CAAC;IACF,IAAI,CAACP,SAAS,EAAE;IAChBH,aAAa,CAACE,GAAG,CAACS,aAAa,CAAC;IAChC,IAAI;MACF,MAAMb,MAAM,CAACc,WAAW,CAAC;QAAErB,MAAM;QAAEoB,aAAa,EAAET,GAAG,CAACS;MAAc,CAAC,CAAC;MACtE/B,KAAK,CAACiC,OAAO,CAACrB,CAAC,CAAC,yCAAyC,EAAE;QAAEc,IAAI,EAAEJ,GAAG,CAACI;MAAK,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,MAAM;MACN1B,KAAK,CAACkC,KAAK,CAACtB,CAAC,CAAC,8CAA8C,EAAE;QAAEc,IAAI,EAAEJ,GAAG,CAACI;MAAK,CAAC,CAAC,CAAC;IACpF,CAAC,SAAS;MACRN,aAAa,CAAC,IAAI,CAAC;IACrB;EACF,CAAC,EACD,CAACT,MAAM,EAAEO,MAAM,EAAEN,CAAC,CACpB,CAAC;EAED,MAAMuB,OAAO,GAAIb,GAA0B,IACzCA,GAAG,CAACc,GAAG,CAACC,GAAG,CAAED,GAAG,IAAKxB,CAAC,CAAC,gCAAgCwB,GAAG,EAAE,CAAC,CAAC,CAACE,IAAI,CAAC,KAAK,CAAC;EAE5E,oBACE9B,KAAA,CAACf,IAAI;IAAC8C,SAAS,EAAC,oBAAoB;IAAAC,QAAA,gBAClClC,IAAA,CAACL,IAAI;MAACsC,SAAS,EAAC,gDAAgD;MAAAC,QAAA,EAC7D5B,CAAC,CAAC,gCAAgC;IAAC,CAChC,CAAC,eACPN,IAAA,CAACL,IAAI;MAACsC,SAAS,EAAC,6CAA6C;MAAAC,QAAA,EAC1D5B,CAAC,CAAC,sCAAsC;IAAC,CACtC,CAAC,EACNI,SAAS,gBACRV,IAAA,CAACd,iBAAiB;MAACiD,KAAK,EAAE5B,MAAM,CAAC6B;IAAQ,CAAE,CAAC,GAC1CzB,OAAO,gBACTX,IAAA,CAACL,IAAI;MAACsC,SAAS,EAAC,iCAAiC;MAAAC,QAAA,EAC9C5B,CAAC,CAAC,oCAAoC;IAAC,CACpC,CAAC,GACL,CAACG,IAAI,IAAIA,IAAI,CAAC4B,MAAM,KAAK,CAAC,gBAC5BrC,IAAA,CAACL,IAAI;MAACsC,SAAS,EAAC,iCAAiC;MAAAC,QAAA,EAC9C5B,CAAC,CAAC,gCAAgC;IAAC,CAChC,CAAC,gBAEPN,IAAA,CAACV,iBAAiB;MAAA4C,QAAA,EACfzB,IAAI,CAACsB,GAAG,CAAEf,GAAG,iBACZhB,IAAA,CAACT,gBAAgB;QAEf+C,IAAI,eAAEtC,IAAA,CAACZ,MAAM;UAACmD,MAAM,EAAEvB,GAAG,CAACsB,IAAK;UAAClB,IAAI,EAAEJ,GAAG,CAACI,IAAK;UAACoB,IAAI,EAAErC;QAAc,CAAE,CAAE;QACxEgB,KAAK,EAAEH,GAAG,CAACI,IAAK;QAChBC,WAAW,EAAEQ,OAAO,CAACb,GAAG,CAAE;QAC1ByB,WAAW,EAAE,KAAM;QACnBC,YAAY,eACV1C,IAAA,CAACX,MAAM;UACLsD,UAAU,EAAC,QAAQ;UACnBC,IAAI,EAAC,QAAQ;UACbJ,IAAI,EAAC,IAAI;UACTK,OAAO,EAAEhC,UAAU,KAAKG,GAAG,CAACS,aAAc;UAC1CqB,QAAQ,EAAEjC,UAAU,KAAK,IAAK;UAC9BkC,kBAAkB,EAAEzC,CAAC,CAAC,sCAAsC,EAAE;YAAEc,IAAI,EAAEJ,GAAG,CAACI;UAAK,CAAC,CAAE;UAClF4B,OAAO,EAAEA,CAAA,KAAM;YACb,KAAKjC,aAAa,CAACC,GAAG,CAAC;UACzB,CAAE;UAAAkB,QAAA,EAED5B,CAAC,CAAC,iCAAiC;QAAC,CAC/B;MACT,GAnBIU,GAAG,CAACS,aAoBV,CACF;IAAC,CACe,CACpB;EAAA,CACG,CAAC;AAEX,CAAC","ignoreList":[]}

package/lib/module/ui/components/fileManagement/FileDetailsModal.js

@@ -9,10 +9,12 @@ import { useTheme } from '@oxy.so/bloom/theme';
 import { surfaces } from '@oxy.so/bloom/surfaces';
 import { useI18n } from "../../hooks/useI18n.js";
 import { formatFileSize, getFileIcon } from "../../utils/fileManagement.js";
+import { FileAppAccessSection } from "./FileAppAccessSection.js";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * File-detail panel — a rich presented surface (NOT a yes/no confirm): a file's
- * icon + metadata plus download / delete / cancel actions. Each action first
+ * icon + metadata, for the owner the applications that can open it ("Apps with
+ * access", ADR 0043 stage 4c), plus download / delete / cancel actions. Each action first
  * dismisses this surface, then runs its handler, so a follow-up delete confirm
  * stacks cleanly above whatever remains. Presented via {@link presentFileDetails}.
  */
@@ -82,7 +84,9 @@ export const FileDetailsModal = ({
             children: file.metadata.description
           })]
         })]
-      })]
+      }), isOwner ? /*#__PURE__*/_jsx(FileAppAccessSection, {
+        fileId: file.id
+      }) : null]
     }), /*#__PURE__*/_jsxs(View, {
       style: {
         gap: 8

package/lib/module/ui/components/fileManagement/FileDetailsModal.js.map

@@ -1 +1 @@
-{"version":3,"names":["View","Card","Text","Ionicons","Button","useTheme","surfaces","useI18n","formatFileSize","getFileIcon","jsx","_jsx","jsxs","_jsxs","FileDetailsModal","surface","file","onDownload","onDelete","isOwner","t","colors","children","appearance","className","name","contentType","size","color","primary","filename","length","Date","uploadDate","toLocaleString","metadata","description","style","gap","tone","onPress","dismiss","id","presentFileDetails","options","present"],"sourceRoot":"../../../../../src","sources":["ui/components/fileManagement/FileDetailsModal.tsx"],"mappings":";;AACA,SAASA,IAAI,QAAQ,cAAc;AACnC,SAASC,IAAI,QAAQ,oBAAoB;AACzC,SAASC,IAAI,QAAQ,0BAA0B;AAC/C,OAAOC,QAAQ,MAAM,yBAAsB;AAC3C,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,QAAQ,QAAQ,qBAAqB;AAC9C,SAASC,QAAQ,QAA8B,wBAAwB;AAEvE,SAASC,OAAO,QAAQ,wBAAqB;AAC7C,SAASC,cAAc,EAAEC,WAAW,QAAQ,+BAA4B;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAWzE;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,gBAAiD,GAAGA,CAAC;EAChEC,OAAO;EACPC,IAAI;EACJC,UAAU;EACVC,QAAQ;EACRC;AACF,CAAC,KAAK;EACJ,MAAM;IAAEC;EAAE,CAAC,GAAGb,OAAO,CAAC,CAAC;EACvB,MAAM;IAAEc;EAAO,CAAC,GAAGhB,QAAQ,CAAC,CAAC;EAE7B,oBACEQ,KAAA,CAACb,IAAI;IAAAsB,QAAA,gBACHT,KAAA,CAACZ,IAAI;MAACsB,UAAU,EAAC,QAAQ;MAACC,SAAS,EAAC,uBAAuB;MAAAF,QAAA,gBACzDX,IAAA,CAACX,IAAI;QAACwB,SAAS,EAAC,aAAa;QAAAF,QAAA,eAC3BX,IAAA,CAACR,QAAQ;UAACsB,IAAI,EAAEhB,WAAW,CAACO,IAAI,CAACU,WAAW,CAAE;UAACC,IAAI,EAAE,EAAG;UAACC,KAAK,EAAEP,MAAM,CAACQ;QAAQ,CAAE;MAAC,CAC9E,CAAC,eAEPlB,IAAA,CAACT,IAAI;QAACsB,SAAS,EAAC,yDAAyD;QAAAF,QAAA,EACtEN,IAAI,CAACc;MAAQ,CACV,CAAC,eAEPjB,KAAA,CAACb,IAAI;QAACwB,SAAS,EAAC,oBAAoB;QAAAF,QAAA,gBAClCT,KAAA,CAACb,IAAI;UAACwB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACX,IAAI;YAACsB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,qBAAqB,CAAC,EAAC,GAC5B;UAAA,CAAM,CAAC,eACPT,IAAA,CAACT,IAAI;YAACsB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EACxDd,cAAc,CAACQ,IAAI,CAACe,MAAM;UAAC,CACxB,CAAC;QAAA,CACH,CAAC,eAEPlB,KAAA,CAACb,IAAI;UAACwB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACX,IAAI;YAACsB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,6BAA6B,CAAC,EAAC,GACpC;UAAA,CAAM,CAAC,eACPT,IAAA,CAACT,IAAI;YAACsB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EAAEN,IAAI,CAACU;UAAW,CAAO,CAAC;QAAA,CACjF,CAAC,eAEPb,KAAA,CAACb,IAAI;UAACwB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACX,IAAI;YAACsB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,iCAAiC,CAAC,EAAC,GACxC;UAAA,CAAM,CAAC,eACPT,IAAA,CAACT,IAAI;YAACsB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EACxD,IAAIU,IAAI,CAAChB,IAAI,CAACiB,UAAU,CAAC,CAACC,cAAc,CAAC;UAAC,CACvC,CAAC;QAAA,CACH,CAAC,EAENlB,IAAI,CAACmB,QAAQ,EAAEC,WAAW,iBACzBvB,KAAA,CAACb,IAAI;UAACwB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACX,IAAI;YAACsB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,oCAAoC,CAAC,EAAC,GAC3C;UAAA,CAAM,CAAC,eACPT,IAAA,CAACT,IAAI;YAACsB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EACxDN,IAAI,CAACmB,QAAQ,CAACC;UAAW,CACtB,CAAC;QAAA,CACH,CACP;MAAA,CACG,CAAC;IAAA,CACH,CAAC,eAEPvB,KAAA,CAACb,IAAI;MAACqC,KAAK,EAAE;QAAEC,GAAG,EAAE;MAAE,CAAE;MAAAhB,QAAA,gBACtBX,IAAA,CAACP,MAAM;QACLmB,UAAU,EAAC,OAAO;QAClBgB,IAAI,EAAC,QAAQ;QACbC,OAAO,EAAEA,CAAA,KAAM;UACbzB,OAAO,CAAC0B,OAAO,CAAC,CAAC;UACjBxB,UAAU,CAACD,IAAI,CAAC0B,EAAE,EAAE1B,IAAI,CAACc,QAAQ,CAAC;QACpC,CAAE;QAAAR,QAAA,EAEDF,CAAC,CAAC,iCAAiC;MAAC,CAC/B,CAAC,EACRD,OAAO,gBACNR,IAAA,CAACP,MAAM;QACLmB,UAAU,EAAC,OAAO;QAClBgB,IAAI,EAAC,QAAQ;QACbC,OAAO,EAAEA,CAAA,KAAM;UACbzB,OAAO,CAAC0B,OAAO,CAAC,CAAC;UACjBvB,QAAQ,CAACF,IAAI,CAAC0B,EAAE,EAAE1B,IAAI,CAACc,QAAQ,CAAC;QAClC,CAAE;QAAAR,QAAA,EAEDF,CAAC,CAAC,uBAAuB;MAAC,CACrB,CAAC,GACP,IAAI,eACRT,IAAA,CAACP,MAAM;QAACmB,UAAU,EAAC,QAAQ;QAACgB,IAAI,EAAC,SAAS;QAACC,OAAO,EAAEA,CAAA,KAAMzB,OAAO,CAAC0B,OAAO,CAAC,CAAE;QAAAnB,QAAA,EACzEF,CAAC,CAAC,eAAe;MAAC,CACb,CAAC;IAAA,CACL,CAAC;EAAA,CACH,CAAC;AAEX,CAAC;;AAED;;AAGA;AACA,OAAO,SAASuB,kBAAkBA,CAACC,OAAkC,EAAQ;EAC3E,KAAKtC,QAAQ,CAACuC,OAAO,CAAE9B,OAAO,iBAAKJ,IAAA,CAACG,gBAAgB;IAACC,OAAO,EAAEA,OAAQ;IAAA,GAAK6B;EAAO,CAAG,CAAC,CAAC;AACzF","ignoreList":[]}
+{"version":3,"names":["View","Card","Text","Ionicons","Button","useTheme","surfaces","useI18n","formatFileSize","getFileIcon","FileAppAccessSection","jsx","_jsx","jsxs","_jsxs","FileDetailsModal","surface","file","onDownload","onDelete","isOwner","t","colors","children","appearance","className","name","contentType","size","color","primary","filename","length","Date","uploadDate","toLocaleString","metadata","description","fileId","id","style","gap","tone","onPress","dismiss","presentFileDetails","options","present"],"sourceRoot":"../../../../../src","sources":["ui/components/fileManagement/FileDetailsModal.tsx"],"mappings":";;AACA,SAASA,IAAI,QAAQ,cAAc;AACnC,SAASC,IAAI,QAAQ,oBAAoB;AACzC,SAASC,IAAI,QAAQ,0BAA0B;AAC/C,OAAOC,QAAQ,MAAM,yBAAsB;AAC3C,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,QAAQ,QAAQ,qBAAqB;AAC9C,SAASC,QAAQ,QAA8B,wBAAwB;AAEvE,SAASC,OAAO,QAAQ,wBAAqB;AAC7C,SAASC,cAAc,EAAEC,WAAW,QAAQ,+BAA4B;AACxE,SAASC,oBAAoB,QAAQ,2BAAwB;AAAC,SAAAC,GAAA,IAAAC,IAAA,EAAAC,IAAA,IAAAC,KAAA;AAW9D;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,gBAAiD,GAAGA,CAAC;EAChEC,OAAO;EACPC,IAAI;EACJC,UAAU;EACVC,QAAQ;EACRC;AACF,CAAC,KAAK;EACJ,MAAM;IAAEC;EAAE,CAAC,GAAGd,OAAO,CAAC,CAAC;EACvB,MAAM;IAAEe;EAAO,CAAC,GAAGjB,QAAQ,CAAC,CAAC;EAE7B,oBACES,KAAA,CAACd,IAAI;IAAAuB,QAAA,gBACHT,KAAA,CAACb,IAAI;MAACuB,UAAU,EAAC,QAAQ;MAACC,SAAS,EAAC,uBAAuB;MAAAF,QAAA,gBACzDX,IAAA,CAACZ,IAAI;QAACyB,SAAS,EAAC,aAAa;QAAAF,QAAA,eAC3BX,IAAA,CAACT,QAAQ;UAACuB,IAAI,EAAEjB,WAAW,CAACQ,IAAI,CAACU,WAAW,CAAE;UAACC,IAAI,EAAE,EAAG;UAACC,KAAK,EAAEP,MAAM,CAACQ;QAAQ,CAAE;MAAC,CAC9E,CAAC,eAEPlB,IAAA,CAACV,IAAI;QAACuB,SAAS,EAAC,yDAAyD;QAAAF,QAAA,EACtEN,IAAI,CAACc;MAAQ,CACV,CAAC,eAEPjB,KAAA,CAACd,IAAI;QAACyB,SAAS,EAAC,oBAAoB;QAAAF,QAAA,gBAClCT,KAAA,CAACd,IAAI;UAACyB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACZ,IAAI;YAACuB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,qBAAqB,CAAC,EAAC,GAC5B;UAAA,CAAM,CAAC,eACPT,IAAA,CAACV,IAAI;YAACuB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EACxDf,cAAc,CAACS,IAAI,CAACe,MAAM;UAAC,CACxB,CAAC;QAAA,CACH,CAAC,eAEPlB,KAAA,CAACd,IAAI;UAACyB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACZ,IAAI;YAACuB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,6BAA6B,CAAC,EAAC,GACpC;UAAA,CAAM,CAAC,eACPT,IAAA,CAACV,IAAI;YAACuB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EAAEN,IAAI,CAACU;UAAW,CAAO,CAAC;QAAA,CACjF,CAAC,eAEPb,KAAA,CAACd,IAAI;UAACyB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACZ,IAAI;YAACuB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,iCAAiC,CAAC,EAAC,GACxC;UAAA,CAAM,CAAC,eACPT,IAAA,CAACV,IAAI;YAACuB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EACxD,IAAIU,IAAI,CAAChB,IAAI,CAACiB,UAAU,CAAC,CAACC,cAAc,CAAC;UAAC,CACvC,CAAC;QAAA,CACH,CAAC,EAENlB,IAAI,CAACmB,QAAQ,EAAEC,WAAW,iBACzBvB,KAAA,CAACd,IAAI;UAACyB,SAAS,EAAC,4DAA4D;UAAAF,QAAA,gBAC1ET,KAAA,CAACZ,IAAI;YAACuB,SAAS,EAAC,kEAAkE;YAAAF,QAAA,GAC/EF,CAAC,CAAC,oCAAoC,CAAC,EAAC,GAC3C;UAAA,CAAM,CAAC,eACPT,IAAA,CAACV,IAAI;YAACuB,SAAS,EAAC,2CAA2C;YAAAF,QAAA,EACxDN,IAAI,CAACmB,QAAQ,CAACC;UAAW,CACtB,CAAC;QAAA,CACH,CACP;MAAA,CACG,CAAC,EAENjB,OAAO,gBAAGR,IAAA,CAACF,oBAAoB;QAAC4B,MAAM,EAAErB,IAAI,CAACsB;MAAG,CAAE,CAAC,GAAG,IAAI;IAAA,CACvD,CAAC,eAEPzB,KAAA,CAACd,IAAI;MAACwC,KAAK,EAAE;QAAEC,GAAG,EAAE;MAAE,CAAE;MAAAlB,QAAA,gBACtBX,IAAA,CAACR,MAAM;QACLoB,UAAU,EAAC,OAAO;QAClBkB,IAAI,EAAC,QAAQ;QACbC,OAAO,EAAEA,CAAA,KAAM;UACb3B,OAAO,CAAC4B,OAAO,CAAC,CAAC;UACjB1B,UAAU,CAACD,IAAI,CAACsB,EAAE,EAAEtB,IAAI,CAACc,QAAQ,CAAC;QACpC,CAAE;QAAAR,QAAA,EAEDF,CAAC,CAAC,iCAAiC;MAAC,CAC/B,CAAC,EACRD,OAAO,gBACNR,IAAA,CAACR,MAAM;QACLoB,UAAU,EAAC,OAAO;QAClBkB,IAAI,EAAC,QAAQ;QACbC,OAAO,EAAEA,CAAA,KAAM;UACb3B,OAAO,CAAC4B,OAAO,CAAC,CAAC;UACjBzB,QAAQ,CAACF,IAAI,CAACsB,EAAE,EAAEtB,IAAI,CAACc,QAAQ,CAAC;QAClC,CAAE;QAAAR,QAAA,EAEDF,CAAC,CAAC,uBAAuB;MAAC,CACrB,CAAC,GACP,IAAI,eACRT,IAAA,CAACR,MAAM;QAACoB,UAAU,EAAC,QAAQ;QAACkB,IAAI,EAAC,SAAS;QAACC,OAAO,EAAEA,CAAA,KAAM3B,OAAO,CAAC4B,OAAO,CAAC,CAAE;QAAArB,QAAA,EACzEF,CAAC,CAAC,eAAe;MAAC,CACb,CAAC;IAAA,CACL,CAAC;EAAA,CACH,CAAC;AAEX,CAAC;;AAED;;AAGA;AACA,OAAO,SAASwB,kBAAkBA,CAACC,OAAkC,EAAQ;EAC3E,KAAKxC,QAAQ,CAACyC,OAAO,CAAE/B,OAAO,iBAAKJ,IAAA,CAACG,gBAAgB;IAACC,OAAO,EAAEA,OAAQ;IAAA,GAAK8B;EAAO,CAAG,CAAC,CAAC;AACzF","ignoreList":[]}

package/lib/module/ui/context/OxyContext.js

@@ -46,6 +46,7 @@ import { useFollow } from "../hooks/useFollow.js";
 import { commitDeviceSetAndResolve } from "./commitSessionFlow.js";
 import { clearSignInFlows } from "../components/signIn/signInFlowStore.js";
 import { useOxyAccountGraph } from "./useOxyAccountGraph.js";
+import { AppAssertionProvider } from "../appAssertion/AppAssertionContext.js";
 import { jsx as _jsx } from "react/jsx-runtime";
 const OxyRuntimeContext = /*#__PURE__*/createContext(null);
 const subscribeNever = () => () => undefined;
@@ -1395,7 +1396,15 @@ export const OxyRuntimeProvider = ({
       value: authActionsValue,
       children: /*#__PURE__*/_jsx(OxyRuntimeContext.Provider, {
         value: contextValue,
-        children: children
+        children: /*#__PURE__*/_jsx(AppAssertionProvider, {
+          oxyServices: oxyServices,
+          clientId: clientId,
+          userId: canUsePrivateApi ? user?.id ?? null : null,
+          sessionId: canUsePrivateApi ? activeSessionId : null,
+          storage: storage,
+          storageKeyPrefix: storageKeyPrefix,
+          children: children
+        })
       })
     })
   });