@oxy.so/services 11.10.0 → 11.12.1

package/src/ui/context/OxyContext.tsx

@@ -125,6 +125,7 @@ import { useFollow } from '../hooks/useFollow';
 import { commitDeviceSetAndResolve } from './commitSessionFlow';
 import { clearSignInFlows } from '../components/signIn/signInFlowStore';
 import { useOxyAccountGraph } from './useOxyAccountGraph';
+import { AppAssertionProvider } from '../appAssertion/AppAssertionContext';
 
 export type { LogoutResult, OxyContextState, OxyRuntimeProviderProps } from './oxyContextTypes';
 
@@ -1742,7 +1743,18 @@ export const OxyRuntimeProvider: React.FC<OxyRuntimeProviderProps> = ({
   return (
     <OxyRuntimeHandleProvider value={runtime}>
       <OxyAuthActionsContext.Provider value={authActionsValue}>
-        <OxyRuntimeContext.Provider value={contextValue}>{children}</OxyRuntimeContext.Provider>
+        <OxyRuntimeContext.Provider value={contextValue}>
+          <AppAssertionProvider
+            oxyServices={oxyServices}
+            clientId={clientId}
+            userId={canUsePrivateApi ? (user?.id ?? null) : null}
+            sessionId={canUsePrivateApi ? activeSessionId : null}
+            storage={storage}
+            storageKeyPrefix={storageKeyPrefix}
+          >
+            {children}
+          </AppAssertionProvider>
+        </OxyRuntimeContext.Provider>
       </OxyAuthActionsContext.Provider>
     </OxyRuntimeHandleProvider>
   );

package/src/ui/hooks/mutations/mutationKeys.ts

@@ -36,4 +36,9 @@ export const mutationKeys = {
   connectedApps: {
     revoke: ['mutation', 'connectedApps', 'revoke'] as const,
   },
+
+  // A file's applications with access (ADR 0043 stage 4c)
+  fileAppAccess: {
+    revoke: ['mutation', 'fileAppAccess', 'revoke'] as const,
+  },
 } as const;

package/src/ui/hooks/mutations/useAccountMutations.ts

@@ -3,6 +3,7 @@ import { authenticatedApiCall } from '@oxy.so/core';
 import type {
   AssetMetadata,
   AssetUploadInput,
+  FileApplicationAccessRevocation,
   NotificationPreferences,
   PrivacySettings,
   User,
@@ -21,6 +22,7 @@ import { useOxy } from '../../context/OxyContext';
 import { toast } from '@oxy.so/bloom/toast';
 import { useAuthStore } from '../../stores/authStore';
 import { clearedFieldsFromProfileUpdate, upsertCachedUser } from '../queries/userCache';
+import { removeAppAccessFromCache } from '../queries/useFileQueries';
 
 /**
  * Update user profile with optimistic updates and offline queue support
@@ -708,3 +710,34 @@ export const useUploadFile = () => {
     },
   });
 };
+
+/**
+ * Take an application's access to one of the person's files away (ADR 0043
+ * stage 4c): optimistic — the application leaves the cached list at once and
+ * comes back if the revoke fails — then the list is re-read either way. The
+ * caller shows its own toasts (it knows the application's name).
+ */
+export const useRevokeFileAppAccess = () => {
+  const { oxyServices, activeSessionId } = useOxy();
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationKey: [...mutationKeys.fileAppAccess.revoke],
+    mutationFn: async ({ fileId, applicationId }: { fileId: string; applicationId: string }) =>
+      authenticatedApiCall<FileApplicationAccessRevocation>(oxyServices, activeSessionId, () =>
+        oxyServices.assets.revokeAppAccess(fileId, applicationId),
+      ),
+    onMutate: async ({ fileId, applicationId }) => {
+      await queryClient.cancelQueries({ queryKey: queryKeys.files.appAccess(fileId) });
+      return { previous: removeAppAccessFromCache(queryClient, fileId, applicationId) };
+    },
+    onError: (_error, { fileId }, context) => {
+      if (context?.previous) {
+        queryClient.setQueryData(queryKeys.files.appAccess(fileId), context.previous);
+      }
+    },
+    onSettled: (_data, _error, { fileId }) => {
+      void queryClient.invalidateQueries({ queryKey: queryKeys.files.appAccess(fileId) });
+    },
+  });
+};

package/src/ui/hooks/queries/queryKeys.ts

@@ -115,6 +115,11 @@ export const queryKeys = {
     list: (ownerId?: string) => [...queryKeys.files.all, 'list', ownerId || 'anonymous'] as const,
     /** The owner's trash (ADR 0043 D5) — under `files.all`, so one invalidation covers both. */
     trash: (ownerId?: string) => [...queryKeys.files.all, 'trash', ownerId || 'anonymous'] as const,
+    /**
+     * The applications that can read one file with their own token (ADR 0043
+     * stage 4c) — under `files.all`, so a library invalidation refreshes it too.
+     */
+    appAccess: (fileId: string) => [...queryKeys.files.all, 'appAccess', fileId] as const,
   },
 
   // Connected apps (OAuth grants the user has authorized)

package/src/ui/hooks/queries/useFileQueries.ts

@@ -9,8 +9,13 @@
  * infinite scroll, pull-to-refresh, and optimistic upload reconciliation.
  */
 
-import { useInfiniteQuery, type InfiniteData, type QueryClient } from '@tanstack/react-query';
-import type { FileMetadata } from '@oxy.so/core';
+import {
+  useInfiniteQuery,
+  useQuery,
+  type InfiniteData,
+  type QueryClient,
+} from '@tanstack/react-query';
+import type { FileApplicationAccess, FileMetadata } from '@oxy.so/core';
 import { useOxy } from '../../context/OxyContext';
 import { queryKeys } from './queryKeys';
 
@@ -185,3 +190,40 @@ export function patchFileMetadataInCache(
       : data,
   );
 }
+
+// --- Applications with access (ADR 0043 stage 4c) ---------------------------
+
+/**
+ * The applications that can open one of the owner's files with their own
+ * token: one that stored it for the person, or one the person attached it to.
+ * Fetched when `enabled` (the owner's own file); `staleTime: 0` re-reads it
+ * every time the details open, since an application can gain access at any
+ * time (a new upload on the person's behalf).
+ */
+export const useFileAppAccess = (fileId: string, enabled = true) => {
+  const { oxyServices } = useOxy();
+  return useQuery<FileApplicationAccess[], Error>({
+    queryKey: queryKeys.files.appAccess(fileId),
+    queryFn: () => oxyServices.assets.listAppAccess(fileId),
+    enabled: enabled && fileId.length > 0,
+    staleTime: 0,
+    refetchOnWindowFocus: false,
+  });
+};
+
+/** Drop one application from a file's cached access list (the optimistic half of a revoke). */
+export function removeAppAccessFromCache(
+  queryClient: QueryClient,
+  fileId: string,
+  applicationId: string,
+): FileApplicationAccess[] | undefined {
+  const key = queryKeys.files.appAccess(fileId);
+  const previous = queryClient.getQueryData<FileApplicationAccess[]>(key);
+  if (previous) {
+    queryClient.setQueryData<FileApplicationAccess[]>(
+      key,
+      previous.filter((app) => app.applicationId !== applicationId),
+    );
+  }
+  return previous;
+}

package/src/ui/icons/subsetGlyphMaps.ts

@@ -323,6 +323,7 @@ export const materialCommunityIconsGlyphMap = {
   "trophy": 984376,
   "trophy-outline": 984378,
   "update": 984752,
+  "upload": 984402,
   "video-outline": 986076,
   "volume-off": 984449,
   "wallet": 984452,

package/src/ui/index.ts

@@ -37,6 +37,8 @@ export { default as ProfileButton } from './components/ProfileButton';
 
 // Context + hooks
 export { useOxy, useOptionalOxy, OxyProviderMissingError } from './context/OxyContext';
+export { useAppAssertion } from './appAssertion/AppAssertionContext';
+export type { UseAppAssertionResult } from './appAssertion/AppAssertionContext';
 export { useAuth } from './hooks/useAuth';
 export type { AuthActions, AuthState, SignInOutcome, UseAuthReturn } from './hooks/useAuth';
 export { useFollow, useSeedFollowStatuses } from './hooks/useFollow';