@oxyhq/core 1.11.24 → 2.1.0

package/dist/cjs/AuthManagerTypes.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * AuthManager — public types for the multi-account cookie path.
+ *
+ * Lives in its own module (rather than the 670-line `models/interfaces.ts`)
+ * so consumers can `import type` exactly the multi-account surface without
+ * pulling in the full interfaces graph, and so `AuthManager.ts` stays
+ * decoupled from the wire shapes — these types re-state the wire as the
+ * AuthManager's in-memory representation.
+ *
+ * @module core/AuthManagerTypes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/CrossDomainAuth.js

@@ -42,20 +42,45 @@ class CrossDomainAuth {
      */
     async signIn(options = {}) {
         const method = options.method || 'auto';
-        // If specific method requested, use it directly
+        // If specific method requested, use it directly. The caller MAY have
+        // pre-opened a popup on the raw click (the standard pattern in
+        // WebOxyProvider / services useAuth). For the FedCM and redirect paths
+        // that popup is unused — close it so it doesn't linger as an orphaned
+        // blank window. Close in both success and failure paths.
         if (method === 'fedcm') {
-            return this.signInWithFedCM(options);
+            try {
+                const session = await this.signInWithFedCM(options);
+                this.closeOrphanPopup(options.popup);
+                return session;
+            }
+            catch (error) {
+                this.closeOrphanPopup(options.popup);
+                throw error;
+            }
         }
         if (method === 'popup') {
             return this.signInWithPopup(options);
         }
         if (method === 'redirect') {
+            this.closeOrphanPopup(options.popup);
             this.signInWithRedirect(options);
             return null; // Redirect doesn't return immediately
         }
         // Auto mode: Try methods in order of preference
         return this.autoSignIn(options);
     }
+    /**
+     * Close a caller-supplied popup window that is no longer needed (e.g. the
+     * resolved auth method didn't end up using it). Safe against null / already
+     * closed handles.
+     *
+     * @private
+     */
+    closeOrphanPopup(popup) {
+        if (popup && !popup.closed) {
+            popup.close();
+        }
+    }
     /**
      * Automatic sign-in with progressive enhancement
      *
@@ -66,7 +91,11 @@ class CrossDomainAuth {
         if (this.isFedCMSupported()) {
             try {
                 options.onMethodSelected?.('fedcm');
-                return await this.signInWithFedCM(options);
+                const session = await this.signInWithFedCM(options);
+                // FedCM succeeded — close the pre-opened popup so it doesn't linger
+                // as an orphaned blank window.
+                this.closeOrphanPopup(options.popup);
+                return session;
             }
             catch (error) {
                 console.warn('[CrossDomainAuth] FedCM failed, trying popup...', error);
@@ -79,6 +108,8 @@ class CrossDomainAuth {
         }
         catch (error) {
             console.warn('[CrossDomainAuth] Popup failed, falling back to redirect...', error);
+            // Popup path failed — close the pre-opened popup before redirecting.
+            this.closeOrphanPopup(options.popup);
         }
         // 3. Fallback to redirect (always works)
         options.onMethodSelected?.('redirect');
@@ -105,6 +136,7 @@ class CrossDomainAuth {
             mode: options.isSignup ? 'signup' : 'login',
             width: options.popupDimensions?.width,
             height: options.popupDimensions?.height,
+            popup: options.popup ?? undefined,
         });
     }
     /**
@@ -164,6 +196,16 @@ class CrossDomainAuth {
     restoreSession() {
         return this.oxyServices.restoreSession?.() || false;
     }
+    /**
+     * Open a blank popup SYNCHRONOUSLY (call from a raw user-gesture handler
+     * BEFORE any `await`). Returns `null` if the popup was blocked. Pass the
+     * handle into `signIn({ popup })` / `signInWithPopup({ popup })` so the
+     * popup is not blocked by Chrome after any prior `await` consumed the
+     * transient user activation. Delegates to `OxyServices.openBlankPopup`.
+     */
+    openBlankPopup(width, height) {
+        return this.oxyServices.openBlankPopup(width, height);
+    }
     /**
      * Check if FedCM is supported in current browser
      */

package/dist/cjs/OxyServices.base.js

@@ -53,6 +53,22 @@ class OxyServicesBase {
     getBaseURL() {
         return this.httpService.getBaseURL();
     }
+    /**
+     * Get the base URL the SDK's first-party session/refresh calls should target.
+     *
+     * Returns the configured `sessionBaseUrl` when provided, otherwise falls back
+     * to the API `baseURL` (`getBaseURL()`). Per the 2026 session architecture
+     * (docs/SESSION-ARCHITECTURE.md), non-`oxy.so` apps point this at their own
+     * same-site backend (e.g. `https://api.mention.earth`) whose session bridge
+     * forwards the user's refresh credential to `api.oxy.so`; `*.oxy.so` apps
+     * leave it unset so it resolves to `https://api.oxy.so` and nothing changes.
+     *
+     * This is additive: it only exposes configuration for `@oxyhq/services` to
+     * consume in a later phase. No refresh/auth logic in core reads it yet.
+     */
+    getSessionBaseUrl() {
+        return this.config.sessionBaseUrl ?? this.getBaseURL();
+    }
     /**
      * Get the HTTP service instance
      * Useful for advanced use cases where direct access to the HTTP service is needed

package/dist/cjs/i18n/locales/ar-SA.json

@@ -114,6 +114,89 @@
             "email": "البريد الإلكتروني",
             "password": "كلمة المرور",
             "confirmPassword": "تأكيد كلمة المرور"
+        },
+        "revoke": "Revoke"
+    },
+    "notifications": {
+        "title": "Notifications",
+        "subtitle": "Manage push, email, and security alerts",
+        "updateError": "Failed to update notification preferences",
+        "sections": {
+            "channels": "Channels",
+            "alerts": "Alerts",
+            "marketing": "Marketing"
+        },
+        "items": {
+            "push": {
+                "title": "Push notifications",
+                "subtitle": "Real-time alerts on your devices"
+            },
+            "emailDigest": {
+                "title": "Email digest",
+                "subtitle": "Periodic summary of your account activity"
+            },
+            "securityAlerts": {
+                "title": "Security alerts",
+                "subtitle": "Sign-ins, recovery codes, and key changes"
+            },
+            "marketingEmails": {
+                "title": "Marketing emails",
+                "subtitle": "Product news and occasional offers"
+            }
+        }
+    },
+    "preferences": {
+        "title": "Preferences",
+        "subtitle": "Theme, motion, and regional settings",
+        "sections": {
+            "appearance": "Appearance",
+            "language": "Language",
+            "region": "Region"
+        },
+        "theme": {
+            "light": "Light",
+            "dark": "Dark",
+            "system": "System default"
+        },
+        "items": {
+            "theme": {
+                "title": "Theme"
+            },
+            "reduceMotion": {
+                "title": "Reduce motion",
+                "subtitle": "Minimise animations across Oxy apps",
+                "systemOn": "Following system: reduce motion is on"
+            },
+            "language": {
+                "title": "Language"
+            },
+            "timezone": {
+                "title": "Timezone",
+                "unknown": "Unable to detect timezone"
+            },
+            "about": {
+                "title": "About preferences",
+                "subtitle": "Preferences sync across every Oxy app you sign into"
+            }
+        }
+    },
+    "connectedApps": {
+        "title": "Connected apps",
+        "subtitle": "Manage third-party app access",
+        "empty": {
+            "title": "No connected apps",
+            "subtitle": "Apps you authorize to sign in with your Oxy account will appear here"
+        },
+        "item": {
+            "lastUsed": "Last used {{relative}}"
+        },
+        "confirm": {
+            "title": "Revoke access",
+            "message": "Revoke {{name}}'s access to your Oxy account?"
+        },
+        "toasts": {
+            "revoked": "Revoked access for {{name}}",
+            "revokeFailed": "Failed to revoke access"
         }
     }
 }

package/dist/cjs/i18n/locales/ca-ES.json

@@ -114,6 +114,89 @@
             "email": "Correu electrònic",
             "password": "Contrasenya",
             "confirmPassword": "Confirmar contrasenya"
+        },
+        "revoke": "Revoke"
+    },
+    "notifications": {
+        "title": "Notifications",
+        "subtitle": "Manage push, email, and security alerts",
+        "updateError": "Failed to update notification preferences",
+        "sections": {
+            "channels": "Channels",
+            "alerts": "Alerts",
+            "marketing": "Marketing"
+        },
+        "items": {
+            "push": {
+                "title": "Push notifications",
+                "subtitle": "Real-time alerts on your devices"
+            },
+            "emailDigest": {
+                "title": "Email digest",
+                "subtitle": "Periodic summary of your account activity"
+            },
+            "securityAlerts": {
+                "title": "Security alerts",
+                "subtitle": "Sign-ins, recovery codes, and key changes"
+            },
+            "marketingEmails": {
+                "title": "Marketing emails",
+                "subtitle": "Product news and occasional offers"
+            }
+        }
+    },
+    "preferences": {
+        "title": "Preferences",
+        "subtitle": "Theme, motion, and regional settings",
+        "sections": {
+            "appearance": "Appearance",
+            "language": "Language",
+            "region": "Region"
+        },
+        "theme": {
+            "light": "Light",
+            "dark": "Dark",
+            "system": "System default"
+        },
+        "items": {
+            "theme": {
+                "title": "Theme"
+            },
+            "reduceMotion": {
+                "title": "Reduce motion",
+                "subtitle": "Minimise animations across Oxy apps",
+                "systemOn": "Following system: reduce motion is on"
+            },
+            "language": {
+                "title": "Language"
+            },
+            "timezone": {
+                "title": "Timezone",
+                "unknown": "Unable to detect timezone"
+            },
+            "about": {
+                "title": "About preferences",
+                "subtitle": "Preferences sync across every Oxy app you sign into"
+            }
+        }
+    },
+    "connectedApps": {
+        "title": "Connected apps",
+        "subtitle": "Manage third-party app access",
+        "empty": {
+            "title": "No connected apps",
+            "subtitle": "Apps you authorize to sign in with your Oxy account will appear here"
+        },
+        "item": {
+            "lastUsed": "Last used {{relative}}"
+        },
+        "confirm": {
+            "title": "Revoke access",
+            "message": "Revoke {{name}}'s access to your Oxy account?"
+        },
+        "toasts": {
+            "revoked": "Revoked access for {{name}}",
+            "revokeFailed": "Failed to revoke access"
         }
     }
 }

package/dist/cjs/i18n/locales/de-DE.json

@@ -114,6 +114,89 @@
             "email": "E-Mail",
             "password": "Passwort",
             "confirmPassword": "Passwort bestätigen"
+        },
+        "revoke": "Revoke"
+    },
+    "notifications": {
+        "title": "Notifications",
+        "subtitle": "Manage push, email, and security alerts",
+        "updateError": "Failed to update notification preferences",
+        "sections": {
+            "channels": "Channels",
+            "alerts": "Alerts",
+            "marketing": "Marketing"
+        },
+        "items": {
+            "push": {
+                "title": "Push notifications",
+                "subtitle": "Real-time alerts on your devices"
+            },
+            "emailDigest": {
+                "title": "Email digest",
+                "subtitle": "Periodic summary of your account activity"
+            },
+            "securityAlerts": {
+                "title": "Security alerts",
+                "subtitle": "Sign-ins, recovery codes, and key changes"
+            },
+            "marketingEmails": {
+                "title": "Marketing emails",
+                "subtitle": "Product news and occasional offers"
+            }
+        }
+    },
+    "preferences": {
+        "title": "Preferences",
+        "subtitle": "Theme, motion, and regional settings",
+        "sections": {
+            "appearance": "Appearance",
+            "language": "Language",
+            "region": "Region"
+        },
+        "theme": {
+            "light": "Light",
+            "dark": "Dark",
+            "system": "System default"
+        },
+        "items": {
+            "theme": {
+                "title": "Theme"
+            },
+            "reduceMotion": {
+                "title": "Reduce motion",
+                "subtitle": "Minimise animations across Oxy apps",
+                "systemOn": "Following system: reduce motion is on"
+            },
+            "language": {
+                "title": "Language"
+            },
+            "timezone": {
+                "title": "Timezone",
+                "unknown": "Unable to detect timezone"
+            },
+            "about": {
+                "title": "About preferences",
+                "subtitle": "Preferences sync across every Oxy app you sign into"
+            }
+        }
+    },
+    "connectedApps": {
+        "title": "Connected apps",
+        "subtitle": "Manage third-party app access",
+        "empty": {
+            "title": "No connected apps",
+            "subtitle": "Apps you authorize to sign in with your Oxy account will appear here"
+        },
+        "item": {
+            "lastUsed": "Last used {{relative}}"
+        },
+        "confirm": {
+            "title": "Revoke access",
+            "message": "Revoke {{name}}'s access to your Oxy account?"
+        },
+        "toasts": {
+            "revoked": "Revoked access for {{name}}",
+            "revokeFailed": "Failed to revoke access"
         }
     }
 }

package/dist/cjs/i18n/locales/en-US.json

@@ -1060,6 +1060,7 @@
             "resetPassword": "Reset Password"
         },
         "cancel": "Cancel",
+        "revoke": "Revoke",
         "retry": "Retry",
         "save": "Save",
         "saved": "Saved successfully",
@@ -1412,5 +1413,87 @@
             "deleteFile": "Are you sure you want to delete \"{{filename}}\"? This action cannot be undone.",
             "deleteFiles": "Are you sure you want to delete {{count}} file(s)? This action cannot be undone."
         }
+    },
+    "notifications": {
+        "title": "Notifications",
+        "subtitle": "Manage push, email, and security alerts",
+        "updateError": "Failed to update notification preferences",
+        "sections": {
+            "channels": "Channels",
+            "alerts": "Alerts",
+            "marketing": "Marketing"
+        },
+        "items": {
+            "push": {
+                "title": "Push notifications",
+                "subtitle": "Real-time alerts on your devices"
+            },
+            "emailDigest": {
+                "title": "Email digest",
+                "subtitle": "Periodic summary of your account activity"
+            },
+            "securityAlerts": {
+                "title": "Security alerts",
+                "subtitle": "Sign-ins, recovery codes, and key changes"
+            },
+            "marketingEmails": {
+                "title": "Marketing emails",
+                "subtitle": "Product news and occasional offers"
+            }
+        }
+    },
+    "preferences": {
+        "title": "Preferences",
+        "subtitle": "Theme, motion, and regional settings",
+        "sections": {
+            "appearance": "Appearance",
+            "language": "Language",
+            "region": "Region"
+        },
+        "theme": {
+            "light": "Light",
+            "dark": "Dark",
+            "system": "System default"
+        },
+        "items": {
+            "theme": {
+                "title": "Theme"
+            },
+            "reduceMotion": {
+                "title": "Reduce motion",
+                "subtitle": "Minimise animations across Oxy apps",
+                "systemOn": "Following system: reduce motion is on"
+            },
+            "language": {
+                "title": "Language"
+            },
+            "timezone": {
+                "title": "Timezone",
+                "unknown": "Unable to detect timezone"
+            },
+            "about": {
+                "title": "About preferences",
+                "subtitle": "Preferences sync across every Oxy app you sign into"
+            }
+        }
+    },
+    "connectedApps": {
+        "title": "Connected apps",
+        "subtitle": "Manage third-party app access",
+        "empty": {
+            "title": "No connected apps",
+            "subtitle": "Apps you authorize to sign in with your Oxy account will appear here"
+        },
+        "item": {
+            "lastUsed": "Last used {{relative}}"
+        },
+        "confirm": {
+            "title": "Revoke access",
+            "message": "Revoke {{name}}'s access to your Oxy account?"
+        },
+        "toasts": {
+            "revoked": "Revoked access for {{name}}",
+            "revokeFailed": "Failed to revoke access"
+        }
     }
 }

package/dist/cjs/i18n/locales/es-ES.json

@@ -284,6 +284,7 @@
             "resetPassword": "Restablecer contraseña"
         },
         "cancel": "Cancelar",
+        "revoke": "Revocar",
         "retry": "Reintentar",
         "save": "Guardar",
         "saved": "Guardado correctamente",
@@ -326,13 +327,25 @@
         "actions": {
             "manage": "Gestionar"
         },
-        "loadingAdditional": { "title": "Cargando cuentas...", "subtitle": "Espera mientras cargamos tus cuentas adicionales" },
+        "loadingAdditional": {
+            "title": "Cargando cuentas...",
+            "subtitle": "Espera mientras cargamos tus cuentas adicionales"
+        },
         "additional": {
-            "noAccounts": { "title": "No hay otras cuentas", "subtitle": "Añade otra cuenta para cambiar entre ellas" }
+            "noAccounts": {
+                "title": "No hay otras cuentas",
+                "subtitle": "Añade otra cuenta para cambiar entre ellas"
+            }
         },
         "items": {
-            "addAccount": { "title": "Añadir otra cuenta", "subtitle": "Inicia sesión con otra cuenta" },
-            "signOutAll": { "title": "Cerrar sesión en todas las cuentas", "subtitle": "Eliminar todas las cuentas de este dispositivo" },
+            "addAccount": {
+                "title": "Añadir otra cuenta",
+                "subtitle": "Inicia sesión con otra cuenta"
+            },
+            "signOutAll": {
+                "title": "Cerrar sesión en todas las cuentas",
+                "subtitle": "Eliminar todas las cuentas de este dispositivo"
+            },
             "accountSwitcher": {
                 "switchPrompt": "¿Cambiar a {{username}}?",
                 "titleShow": "Mostrar conmutador de cuentas",
@@ -1400,5 +1413,87 @@
             "deleteFile": "¿Seguro que quieres eliminar \"{{filename}}\"? Esta acción no se puede deshacer.",
             "deleteFiles": "¿Seguro que quieres eliminar {{count}} archivo(s)? Esta acción no se puede deshacer."
         }
+    },
+    "notifications": {
+        "title": "Notificaciones",
+        "subtitle": "Gestiona las alertas push, por correo y de seguridad",
+        "updateError": "No se han podido actualizar las preferencias de notificación",
+        "sections": {
+            "channels": "Canales",
+            "alerts": "Alertas",
+            "marketing": "Marketing"
+        },
+        "items": {
+            "push": {
+                "title": "Notificaciones push",
+                "subtitle": "Alertas en tiempo real en tus dispositivos"
+            },
+            "emailDigest": {
+                "title": "Resumen por correo",
+                "subtitle": "Resumen periódico de la actividad de tu cuenta"
+            },
+            "securityAlerts": {
+                "title": "Alertas de seguridad",
+                "subtitle": "Inicios de sesión, códigos de recuperación y cambios de claves"
+            },
+            "marketingEmails": {
+                "title": "Correos de marketing",
+                "subtitle": "Novedades del producto y ofertas ocasionales"
+            }
+        }
+    },
+    "preferences": {
+        "title": "Preferencias",
+        "subtitle": "Tema, movimiento y configuración regional",
+        "sections": {
+            "appearance": "Apariencia",
+            "language": "Idioma",
+            "region": "Región"
+        },
+        "theme": {
+            "light": "Claro",
+            "dark": "Oscuro",
+            "system": "Predeterminado del sistema"
+        },
+        "items": {
+            "theme": {
+                "title": "Tema"
+            },
+            "reduceMotion": {
+                "title": "Reducir movimiento",
+                "subtitle": "Minimizar animaciones en todas las apps de Oxy",
+                "systemOn": "Siguiendo al sistema: reducir movimiento activado"
+            },
+            "language": {
+                "title": "Idioma"
+            },
+            "timezone": {
+                "title": "Zona horaria",
+                "unknown": "No se ha podido detectar la zona horaria"
+            },
+            "about": {
+                "title": "Acerca de las preferencias",
+                "subtitle": "Las preferencias se sincronizan en todas las apps de Oxy en las que inicies sesión"
+            }
+        }
+    },
+    "connectedApps": {
+        "title": "Aplicaciones conectadas",
+        "subtitle": "Gestiona el acceso de aplicaciones de terceros",
+        "empty": {
+            "title": "Sin aplicaciones conectadas",
+            "subtitle": "Las apps que autorices a iniciar sesión con tu cuenta Oxy aparecerán aquí"
+        },
+        "item": {
+            "lastUsed": "Último uso: {{relative}}"
+        },
+        "confirm": {
+            "title": "Revocar acceso",
+            "message": "¿Revocar el acceso de {{name}} a tu cuenta Oxy?"
+        },
+        "toasts": {
+            "revoked": "Acceso revocado para {{name}}",
+            "revokeFailed": "No se ha podido revocar el acceso"
+        }
     }
 }