@oxyhq/core 10.1.5 → 11.0.0

package/dist/cjs/boot/sessionColdBoot.js

@@ -25,7 +25,7 @@ exports.runSessionColdBoot = runSessionColdBoot;
  */
 const coldBoot_1 = require("../utils/coldBoot");
 const platform_1 = require("../utils/platform");
-const loggerUtils_1 = require("../utils/loggerUtils");
+const logger_1 = require("../logger");
 const refresh_1 = require("../session/refresh");
 /**
  * Run the device-first cold boot. Resolves to the `runColdBoot` outcome and, as
@@ -119,11 +119,11 @@ async function runSessionColdBoot(opts) {
                     // The mint rotated the secret but it could not be durably persisted —
                     // refuse to advertise a session that will not survive a reload. Keep
                     // the secret; a later boot/attempt re-mints once storage recovers.
-                    loggerUtils_1.logger.error('device-secret mint rotated the secret but it could not be durably persisted — not planting', undefined, { component: 'sessionColdBoot', method: 'device-secret-mint' });
+                    logger_1.logger.error('device-secret mint rotated the secret but it could not be durably persisted — not planting', undefined, { component: 'sessionColdBoot', method: 'device-secret-mint' });
                     return { kind: 'skip' };
                 case 'transient':
                     // Network / 5xx: keep the secret; a later attempt can succeed.
-                    loggerUtils_1.logger.debug('device-secret mint failed (transient) — keeping secret', { component: 'sessionColdBoot', method: 'device-secret-mint' });
+                    logger_1.logger.debug('device-secret mint failed (transient) — keeping secret', { component: 'sessionColdBoot', method: 'device-secret-mint' });
                     return { kind: 'skip' };
                 case 'no-secret':
                     return { kind: 'skip' };

package/dist/cjs/crypto/keyManager.js

@@ -10,8 +10,7 @@ exports.KeyManager = exports.IdentityPersistError = exports.IdentityAlreadyExist
 const elliptic_1 = require("elliptic");
 const platform_1 = require("../utils/platform");
 const protocol_1 = require("@oxyhq/protocol");
-const loggerUtils_1 = require("../utils/loggerUtils");
-const debugUtils_1 = require("../shared/utils/debugUtils");
+const logger_1 = require("../logger");
 /**
  * Thrown when an identity-mutating operation (createIdentity / importKeyPair)
  * is invoked while a valid identity already exists on the device.
@@ -253,8 +252,8 @@ class KeyManager {
         // Update cache
         KeyManager.cachedSharedPublicKey = publicKey;
         KeyManager.cachedHasSharedIdentity = true;
-        if ((0, debugUtils_1.isDev)()) {
-            loggerUtils_1.logger.debug('Shared identity created successfully', { component: 'KeyManager' });
+        if ((0, logger_1.isDev)()) {
+            logger_1.logger.debug('Shared identity created successfully', { component: 'KeyManager' });
         }
         return publicKey;
     }
@@ -294,8 +293,8 @@ class KeyManager {
             return publicKey;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.warn('Failed to get shared public key', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to get shared public key', { component: 'KeyManager' }, error);
             }
             KeyManager.cachedSharedPublicKey = null;
             return null;
@@ -334,8 +333,8 @@ class KeyManager {
             return privateKey;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.warn('Failed to get shared private key', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to get shared private key', { component: 'KeyManager' }, error);
             }
             return null;
         }
@@ -361,8 +360,8 @@ class KeyManager {
             return hasShared;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.warn('Failed to check shared identity', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to check shared identity', { component: 'KeyManager' }, error);
             }
             KeyManager.cachedHasSharedIdentity = false;
             return false;
@@ -418,8 +417,8 @@ class KeyManager {
         // Update cache
         KeyManager.cachedSharedPublicKey = publicKey;
         KeyManager.cachedHasSharedIdentity = true;
-        if ((0, debugUtils_1.isDev)()) {
-            loggerUtils_1.logger.debug('Shared identity imported successfully', { component: 'KeyManager' });
+        if ((0, logger_1.isDev)()) {
+            logger_1.logger.debug('Shared identity imported successfully', { component: 'KeyManager' });
         }
         return publicKey;
     }
@@ -454,13 +453,13 @@ class KeyManager {
                 await store.setItemAsync(STORAGE_KEYS.SHARED_SESSION_ID, sessionId);
                 await store.setItemAsync(STORAGE_KEYS.SHARED_SESSION_TOKEN, accessToken);
             }
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.debug('Shared session stored successfully', { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.debug('Shared session stored successfully', { component: 'KeyManager' });
             }
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.error('Failed to store shared session', error, { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.error('Failed to store shared session', error, { component: 'KeyManager' });
             }
             throw error;
         }
@@ -496,8 +495,8 @@ class KeyManager {
             return { sessionId, accessToken };
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.warn('Failed to get shared session', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to get shared session', { component: 'KeyManager' }, error);
             }
             return null;
         }
@@ -523,13 +522,13 @@ class KeyManager {
                 await store.deleteItemAsync(STORAGE_KEYS.SHARED_SESSION_ID);
                 await store.deleteItemAsync(STORAGE_KEYS.SHARED_SESSION_TOKEN);
             }
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.debug('Shared session cleared successfully', { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.debug('Shared session cleared successfully', { component: 'KeyManager' });
             }
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.error('Failed to clear shared session', error, { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.error('Failed to clear shared session', error, { component: 'KeyManager' });
             }
         }
     }
@@ -550,29 +549,29 @@ class KeyManager {
             // Check if we already have a shared identity
             const hasShared = await KeyManager.hasSharedIdentity();
             if (hasShared) {
-                if ((0, debugUtils_1.isDev)()) {
-                    loggerUtils_1.logger.debug('Shared identity already exists, skipping migration', { component: 'KeyManager' });
+                if ((0, logger_1.isDev)()) {
+                    logger_1.logger.debug('Shared identity already exists, skipping migration', { component: 'KeyManager' });
                 }
                 return true;
             }
             // Get local identity
             const privateKey = await KeyManager.getPrivateKey();
             if (!privateKey) {
-                if ((0, debugUtils_1.isDev)()) {
-                    loggerUtils_1.logger.debug('No local identity to migrate', { component: 'KeyManager' });
+                if ((0, logger_1.isDev)()) {
+                    logger_1.logger.debug('No local identity to migrate', { component: 'KeyManager' });
                 }
                 return false;
             }
             // Import to shared storage
             await KeyManager.importSharedIdentity(privateKey);
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.debug('Successfully migrated local identity to shared identity', { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.debug('Successfully migrated local identity to shared identity', { component: 'KeyManager' });
             }
             return true;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.error('Failed to migrate to shared identity', error, { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.error('Failed to migrate to shared identity', error, { component: 'KeyManager' });
             }
             return false;
         }
@@ -626,7 +625,7 @@ class KeyManager {
             priorPublic = await store.getItemAsync(STORAGE_KEYS.PUBLIC_KEY);
         }
         catch (error) {
-            loggerUtils_1.logger.error('Failed to read existing primary before persist', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to read existing primary before persist', error, { component: 'KeyManager' });
             throw new IdentityPersistError('Could not read existing identity before writing a new one; refusing to overwrite blind.', error);
         }
         // If we are replacing a DIFFERENT, currently-healthy identity, make sure
@@ -659,7 +658,7 @@ class KeyManager {
                     await store.setItemAsync(STORAGE_KEYS.BACKUP_TIMESTAMP, Date.now().toString());
                 }
                 catch (error) {
-                    loggerUtils_1.logger.error('Failed to back up existing identity before overwrite', error, { component: 'KeyManager' });
+                    logger_1.logger.error('Failed to back up existing identity before overwrite', error, { component: 'KeyManager' });
                     throw new IdentityPersistError('Failed to back up existing identity before overwrite', error);
                 }
             }
@@ -675,7 +674,7 @@ class KeyManager {
             });
         }
         catch (error) {
-            loggerUtils_1.logger.error('Failed to write primary identity to secure store', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to write primary identity to secure store', error, { component: 'KeyManager' });
             await KeyManager._rollbackPrimary(store, priorPrivate, priorPublic);
             throw new IdentityPersistError('Failed to write identity to secure store', error);
         }
@@ -690,7 +689,7 @@ class KeyManager {
             readBackPublic = await store.getItemAsync(STORAGE_KEYS.PUBLIC_KEY);
         }
         catch (error) {
-            loggerUtils_1.logger.error('Failed to read identity back after write', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to read identity back after write', error, { component: 'KeyManager' });
             await KeyManager._rollbackPrimary(store, priorPrivate, priorPublic);
             throw new IdentityPersistError('Failed to verify identity after write', error);
         }
@@ -699,7 +698,7 @@ class KeyManager {
         // trigger a spurious mismatch.
         if (readBackPrivate?.toLowerCase() !== canonicalPrivate ||
             readBackPublic?.toLowerCase() !== canonicalPublic) {
-            loggerUtils_1.logger.error('Identity round-trip mismatch after write', undefined, { component: 'KeyManager' });
+            logger_1.logger.error('Identity round-trip mismatch after write', undefined, { component: 'KeyManager' });
             await KeyManager._rollbackPrimary(store, priorPrivate, priorPublic);
             throw new IdentityPersistError('Identity write was not persisted correctly (round-trip mismatch).');
         }
@@ -724,7 +723,7 @@ class KeyManager {
             await KeyManager._rollbackPrimary(store, priorPrivate, priorPublic);
             if (error instanceof IdentityPersistError)
                 throw error;
-            loggerUtils_1.logger.error('Identity sign/verify probe failed', error, { component: 'KeyManager' });
+            logger_1.logger.error('Identity sign/verify probe failed', error, { component: 'KeyManager' });
             throw new IdentityPersistError('Stored identity failed crypto self-test', error);
         }
         // Step 3: The new primary is durable and functional. NOW it is safe to
@@ -743,7 +742,7 @@ class KeyManager {
             priorBackupTimestamp = await store.getItemAsync(STORAGE_KEYS.BACKUP_TIMESTAMP);
         }
         catch (error) {
-            loggerUtils_1.logger.error('Failed to snapshot identity backup before refresh', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to snapshot identity backup before refresh', error, { component: 'KeyManager' });
             await KeyManager._rollbackPrimary(store, priorPrivate, priorPublic);
             throw new IdentityPersistError('Failed to snapshot identity backup before refresh', error);
         }
@@ -755,7 +754,7 @@ class KeyManager {
             await store.setItemAsync(STORAGE_KEYS.BACKUP_TIMESTAMP, Date.now().toString());
         }
         catch (error) {
-            loggerUtils_1.logger.error('Failed to refresh identity backup after primary write', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to refresh identity backup after primary write', error, { component: 'KeyManager' });
             await KeyManager._rollbackBackup(store, priorBackupPrivate, priorBackupPublic, priorBackupTimestamp);
             await KeyManager._rollbackPrimary(store, priorPrivate, priorPublic);
             throw new IdentityPersistError('Failed to refresh identity backup after primary write', error);
@@ -803,7 +802,7 @@ class KeyManager {
             }
         }
         catch (rollbackError) {
-            loggerUtils_1.logger.error('Failed to roll back identity backup after a failed refresh', rollbackError, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to roll back identity backup after a failed refresh', rollbackError, { component: 'KeyManager' });
         }
     }
     /**
@@ -838,7 +837,7 @@ class KeyManager {
             }
         }
         catch (rollbackError) {
-            loggerUtils_1.logger.error('Failed to roll back primary identity after a failed write', rollbackError, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to roll back primary identity after a failed write', rollbackError, { component: 'KeyManager' });
         }
         finally {
             // Whatever happened, the cached verdict is no longer trustworthy.
@@ -922,8 +921,8 @@ class KeyManager {
         catch (error) {
             // If secure store is not available, return null (no identity)
             // This allows the app to continue functioning even if secure store fails to load
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.warn('Failed to access secure store', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to access secure store', { component: 'KeyManager' }, error);
             }
             return null;
         }
@@ -949,8 +948,8 @@ class KeyManager {
             // If secure store is not available, return null (no identity)
             // Cache null to avoid repeated failed attempts
             KeyManager.cachedPublicKey = null;
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.warn('Failed to access secure store', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.warn('Failed to access secure store', { component: 'KeyManager' }, error);
             }
             return null;
         }
@@ -988,7 +987,7 @@ class KeyManager {
             // did, the next call would skip storage entirely and return false even
             // after the device is unlocked. Just return false and let the next
             // call retry from storage.
-            loggerUtils_1.logger.error('Failed to read identity from secure storage', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to read identity from secure storage', error, { component: 'KeyManager' });
             return false;
         }
         // Storage succeeded. Now classify the result. From here onward, any
@@ -1009,15 +1008,15 @@ class KeyManager {
                     // tolerate legacy uppercase-stored public keys.
                     hasIdentity = derived.toLowerCase() === publicKey.toLowerCase();
                     if (!hasIdentity) {
-                        loggerUtils_1.logger.warn('KeyManager.hasIdentity: stored public key does not match derived public key', { component: 'KeyManager' });
+                        logger_1.logger.warn('KeyManager.hasIdentity: stored public key does not match derived public key', { component: 'KeyManager' });
                     }
                 }
                 catch (error) {
-                    loggerUtils_1.logger.warn('KeyManager.hasIdentity: failed to derive public key from stored private key', { component: 'KeyManager' }, error);
+                    logger_1.logger.warn('KeyManager.hasIdentity: failed to derive public key from stored private key', { component: 'KeyManager' }, error);
                 }
             }
             else {
-                loggerUtils_1.logger.warn('KeyManager.hasIdentity: stored key material is malformed', { component: 'KeyManager' });
+                logger_1.logger.warn('KeyManager.hasIdentity: stored key material is malformed', { component: 'KeyManager' });
             }
         }
         // Cache result. Storage succeeded, so this verdict is stable:
@@ -1032,8 +1031,8 @@ class KeyManager {
         // Diagnostic breadcrumb (dev only). Logs lengths + validity flags so we
         // can tell from `adb logcat` exactly WHY hasIdentity returned what it
         // did. Never log the key material itself.
-        if ((0, debugUtils_1.isDev)()) {
-            loggerUtils_1.logger.debug('KeyManager.hasIdentity result', { component: 'KeyManager' }, {
+        if ((0, logger_1.isDev)()) {
+            logger_1.logger.debug('KeyManager.hasIdentity result', { component: 'KeyManager' }, {
                 privateLen: privateKey?.length ?? 0,
                 publicLen: publicKey?.length ?? 0,
                 privateValid: privateKey ? KeyManager.isValidPrivateKey(privateKey) : null,
@@ -1070,13 +1069,13 @@ class KeyManager {
         if (!skipBackup) {
             try {
                 const backupSuccess = await KeyManager.backupIdentity();
-                if (!backupSuccess && (0, debugUtils_1.isDev)()) {
-                    loggerUtils_1.logger.warn('Failed to backup identity before deletion - proceeding anyway', { component: 'KeyManager' });
+                if (!backupSuccess && (0, logger_1.isDev)()) {
+                    logger_1.logger.warn('Failed to backup identity before deletion - proceeding anyway', { component: 'KeyManager' });
                 }
             }
             catch (backupError) {
-                if ((0, debugUtils_1.isDev)()) {
-                    loggerUtils_1.logger.warn('Failed to backup identity before deletion', { component: 'KeyManager' }, backupError);
+                if ((0, logger_1.isDev)()) {
+                    logger_1.logger.warn('Failed to backup identity before deletion', { component: 'KeyManager' }, backupError);
                 }
             }
         }
@@ -1120,8 +1119,8 @@ class KeyManager {
             return true;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.error('Failed to backup identity', error, { component: 'KeyManager' });
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.error('Failed to backup identity', error, { component: 'KeyManager' });
             }
             return false;
         }
@@ -1165,13 +1164,13 @@ class KeyManager {
             const probeHash = '0'.repeat(64);
             const signature = keyPair.sign(probeHash);
             if (!keyPair.verify(probeHash, signature)) {
-                loggerUtils_1.logger.error('Identity sign/verify probe failed during integrity check', undefined, { component: 'KeyManager' });
+                logger_1.logger.error('Identity sign/verify probe failed during integrity check', undefined, { component: 'KeyManager' });
                 return false;
             }
             return true;
         }
         catch (error) {
-            loggerUtils_1.logger.error('Identity integrity check failed', error, { component: 'KeyManager' });
+            logger_1.logger.error('Identity integrity check failed', error, { component: 'KeyManager' });
             return false;
         }
     }
@@ -1212,7 +1211,7 @@ class KeyManager {
                 primaryPublic = await store.getItemAsync(STORAGE_KEYS.PUBLIC_KEY);
             }
             catch (error) {
-                loggerUtils_1.logger.warn('restoreIdentityFromBackup: could not read primary (transient?). Refusing to restore.', { component: 'KeyManager' }, error);
+                logger_1.logger.warn('restoreIdentityFromBackup: could not read primary (transient?). Refusing to restore.', { component: 'KeyManager' }, error);
                 return false;
             }
             // If the primary reads back as a complete, self-consistent identity, it
@@ -1231,7 +1230,7 @@ class KeyManager {
                 return false; // No backup available
             }
             if (!KeyManager.isValidPrivateKey(backupPrivateKey) || !KeyManager.isValidPublicKey(backupPublicKey)) {
-                loggerUtils_1.logger.warn('Backup identity is malformed; refusing to restore', { component: 'KeyManager' });
+                logger_1.logger.warn('Backup identity is malformed; refusing to restore', { component: 'KeyManager' });
                 return false;
             }
             // Verify backup keys derive consistently. Hex is case-insensitive so
@@ -1239,7 +1238,7 @@ class KeyManager {
             // be considered valid.
             const derivedPublicKey = KeyManager.derivePublicKey(backupPrivateKey);
             if (derivedPublicKey.toLowerCase() !== backupPublicKey.toLowerCase()) {
-                loggerUtils_1.logger.warn('Backup public key does not match derived; refusing to restore', { component: 'KeyManager' });
+                logger_1.logger.warn('Backup public key does not match derived; refusing to restore', { component: 'KeyManager' });
                 return false;
             }
             // Guard 3: if ANY primary key material is still present and identifies a
@@ -1250,13 +1249,13 @@ class KeyManager {
             // different identity is sitting in the primary slot.
             if (primaryPublic &&
                 primaryPublic.toLowerCase() !== backupPublicKey.toLowerCase()) {
-                loggerUtils_1.logger.error('Primary public key is present, corrupt-or-mismatched, AND differs from the backup. Refusing to restore to avoid switching accounts.', undefined, { component: 'KeyManager' });
+                logger_1.logger.error('Primary public key is present, corrupt-or-mismatched, AND differs from the backup. Refusing to restore to avoid switching accounts.', undefined, { component: 'KeyManager' });
                 return false;
             }
             if (primaryPrivate &&
                 KeyManager.isValidPrivateKey(primaryPrivate) &&
                 KeyManager.derivePublicKey(primaryPrivate).toLowerCase() !== backupPublicKey.toLowerCase()) {
-                loggerUtils_1.logger.error('Primary private key identifies a DIFFERENT identity than the backup. Refusing to restore to avoid switching accounts.', undefined, { component: 'KeyManager' });
+                logger_1.logger.error('Primary private key identifies a DIFFERENT identity than the backup. Refusing to restore to avoid switching accounts.', undefined, { component: 'KeyManager' });
                 return false;
             }
             // Safe to restore: rebuild the primary using the same atomic write
@@ -1265,14 +1264,14 @@ class KeyManager {
                 await KeyManager._persistIdentityAtomic(backupPrivateKey, backupPublicKey);
             }
             catch (error) {
-                loggerUtils_1.logger.error('Failed to persist identity restored from backup', error, { component: 'KeyManager' });
+                logger_1.logger.error('Failed to persist identity restored from backup', error, { component: 'KeyManager' });
                 return false;
             }
             await store.setItemAsync(STORAGE_KEYS.BACKUP_TIMESTAMP, Date.now().toString());
             return true;
         }
         catch (error) {
-            loggerUtils_1.logger.error('Failed to restore identity from backup', error, { component: 'KeyManager' });
+            logger_1.logger.error('Failed to restore identity from backup', error, { component: 'KeyManager' });
             return false;
         }
     }
@@ -1322,8 +1321,8 @@ class KeyManager {
             return true;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.debug('[oxy.crypto] isValidPublicKey rejected input', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.debug('[oxy.crypto] isValidPublicKey rejected input', { component: 'KeyManager' }, error);
             }
             return false;
         }
@@ -1377,8 +1376,8 @@ class KeyManager {
             return true;
         }
         catch (error) {
-            if ((0, debugUtils_1.isDev)()) {
-                loggerUtils_1.logger.debug('[oxy.crypto] isValidPrivateKey rejected input', { component: 'KeyManager' }, error);
+            if ((0, logger_1.isDev)()) {
+                logger_1.logger.debug('[oxy.crypto] isValidPrivateKey rejected input', { component: 'KeyManager' }, error);
             }
             return false;
         }

package/dist/cjs/crypto/signatureService.js

@@ -12,7 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SignatureService = void 0;
 const protocol_1 = require("@oxyhq/protocol");
 const keyManager_1 = require("./keyManager");
-const loggerUtils_1 = require("../utils/loggerUtils");
+const logger_1 = require("../logger");
 class SignatureService {
     /**
      * Generate a random challenge string (for offline use)
@@ -34,7 +34,7 @@ class SignatureService {
             }
             catch (error) {
                 // Node crypto failed to load — log and fall through to Web Crypto API
-                loggerUtils_1.logger.warn('[oxy.crypto] Node crypto unavailable, falling back to Web Crypto', { component: 'SignatureService' }, error);
+                logger_1.logger.warn('[oxy.crypto] Node crypto unavailable, falling back to Web Crypto', { component: 'SignatureService' }, error);
             }
         }
         // Browser: use Web Crypto API

package/dist/cjs/index.js

@@ -19,9 +19,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isWeb = exports.setPlatformOS = exports.getPlatformOS = exports.getPrimaryLanguage = exports.getUserLanguages = exports.isRTLLocale = exports.getNativeLanguageName = exports.getLanguageName = exports.getLanguageMetadata = exports.isSupportedLocale = exports.normalizeLocale = exports.getBaseLanguage = exports.FALLBACK_LOCALE = exports.SUPPORTED_LANGUAGES = exports.TopicSource = exports.TopicType = exports.SECURITY_EVENT_SEVERITY_MAP = exports.DeviceManager = exports.RecoveryPhraseService = exports.SignatureService = exports.IdentityPersistError = exports.IdentityAlreadyExistsError = exports.KeyManager = exports.sessionsArraysEqual = exports.normalizeAndSortSessions = exports.mergeSessions = exports.authenticatedApiCall = exports.withAuthErrorHandling = exports.isAuthenticationError = exports.ensureValidToken = exports.AuthenticationFailedError = exports.SessionSyncRequiredError = exports.verifyPublicCardAttestation = exports.parseAttestPayload = exports.parseIdPayload = exports.buildUserDid = exports.ORGANIZATION_CATEGORIES = exports.normalizeProfileLinks = exports.getNormalizedUserHandle = exports.getCanonicalUserHandle = exports.normalizeUserIdentityOrNull = exports.normalizeUserIdentity = exports.getNormalizedUserId = exports.OxyAppDataIdentifierError = exports.ServiceCredentialMismatchError = exports.oxyClient = exports.OXY_CLOUD_URL = exports.OxyAuthenticationTimeoutError = exports.OxyAuthenticationError = exports.OxyServices = void 0;
-exports.retryAsync = exports.validateRequiredFields = exports.handleHttpError = exports.createApiError = exports.ErrorCodes = exports.safeJsonParse = exports.buildPaginationParams = exports.buildUrl = exports.buildSearchParams = exports.translate = exports.createDebugLogger = exports.debugError = exports.debugWarn = exports.debugLog = exports.isDev = exports.withRetry = exports.delay = exports.shouldAllowRequest = exports.recordSuccess = exports.recordFailure = exports.calculateBackoffInterval = exports.createCircuitBreakerState = exports.DEFAULT_CIRCUIT_BREAKER_CONFIG = exports.isRetryableError = exports.isNetworkError = exports.isServerError = exports.isRateLimitError = exports.isNotFoundError = exports.isForbiddenError = exports.isUnauthorizedError = exports.isAlreadyRegisteredError = exports.getErrorMessage = exports.getErrorStatus = exports.HttpStatus = exports.getSystemColorScheme = exports.systemPrefersDarkMode = exports.getOppositeTheme = exports.normalizeColorScheme = exports.normalizeTheme = exports.getContrastTextColor = exports.isLightColor = exports.withOpacity = exports.rgbToHex = exports.hexToRgb = exports.lightenColor = exports.darkenColor = exports.isWebBrowser = exports.isAndroid = exports.isIOS = exports.isNative = void 0;
-exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.OXY_AUTHORIZE_URL = exports.DEFAULT_OAUTH_SCOPE = exports.generatePkcePair = exports.generateOAuthState = exports.computeCodeChallenge = exports.buildOAuthAuthorizeUrl = exports.runColdBoot = exports.CENTRAL_IDP_APEX = exports.registrableApex = exports.getAccountColor = exports.formatPublicKeyHandle = exports.getAccountFallbackHandle = exports.getAccountDisplayName = exports.createQuickAccount = exports.buildAccountsArray = exports.updateAvatarVisibility = exports.logPerformance = exports.logPayment = exports.logDevice = exports.logUser = exports.logSession = exports.logApi = exports.logAuth = exports.LogLevel = exports.logger = exports.normalizeMultilineText = exports.normalizeInlineText = exports.validateAndSanitizeUserInput = exports.isValidObjectId = exports.sanitizeHTML = exports.sanitizeString = exports.isValidFileType = exports.isValidFileSize = exports.isValidDate = exports.isValidURL = exports.isValidUUID = exports.isValidObject = exports.isValidArray = exports.isRequiredBoolean = exports.isRequiredNumber = exports.isRequiredString = exports.isValidDisplayName = exports.isValidPassword = exports.isValidUsername = exports.isValidEmail = exports.PASSWORD_REGEX = exports.USERNAME_REGEX = exports.EMAIL_REGEX = void 0;
-exports.packageInfo = exports.runSessionColdBoot = exports.TOKEN_REFRESH_LEAD_MS = exports.startTokenRefreshScheduler = exports.installAuthRefreshHandler = exports.createAuthRefreshHandler = exports.refreshDeviceSecretArm = exports.refreshPersistedSession = exports.AUTH_STATE_STORAGE_KEY = exports.createMemoryAuthStateStore = exports.createNativeAuthStateStore = exports.createWebAuthStateStore = exports.createAccountDialogController = exports.AccountDialogController = exports.switchableAccountIds = exports.projectSwitchableAccounts = exports.accountIdsOf = exports.activeUserOf = exports.activeSessionIdOf = exports.deviceStateToClientSessions = exports.createSessionClient = exports.createSessionClientHost = exports.SessionClient = exports.redeemHubTicketOnHub = exports.syncHubAfterSignIn = exports.parseHubSyncReturnUrl = exports.normalizeOfficialReturnOrigin = exports.isAllowedDeviceJoinOrigin = exports.isOfficialWebOrigin = exports.isIdpHubOrigin = exports.buildHubSyncUrl = exports.buildIdpHubOrigin = exports.clearOAuthHandshake = exports.readOAuthHandshake = exports.persistOAuthHandshake = exports.normalizeOAuthRedirectUri = exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = void 0;
+exports.isValidUsername = exports.isValidEmail = exports.PASSWORD_REGEX = exports.USERNAME_REGEX = exports.EMAIL_REGEX = exports.retryAsync = exports.validateRequiredFields = exports.handleHttpError = exports.createApiError = exports.ErrorCodes = exports.safeJsonParse = exports.buildPaginationParams = exports.buildUrl = exports.buildSearchParams = exports.translate = exports.withRetry = exports.delay = exports.shouldAllowRequest = exports.recordSuccess = exports.recordFailure = exports.calculateBackoffInterval = exports.createCircuitBreakerState = exports.DEFAULT_CIRCUIT_BREAKER_CONFIG = exports.isRetryableError = exports.isNetworkError = exports.isServerError = exports.isRateLimitError = exports.isNotFoundError = exports.isForbiddenError = exports.isUnauthorizedError = exports.isAlreadyRegisteredError = exports.getErrorMessage = exports.getErrorStatus = exports.HttpStatus = exports.getSystemColorScheme = exports.systemPrefersDarkMode = exports.getOppositeTheme = exports.normalizeColorScheme = exports.normalizeTheme = exports.getContrastTextColor = exports.isLightColor = exports.withOpacity = exports.rgbToHex = exports.hexToRgb = exports.lightenColor = exports.darkenColor = exports.isWebBrowser = exports.isAndroid = exports.isIOS = exports.isNative = void 0;
+exports.buildIdpHubOrigin = exports.clearOAuthHandshake = exports.readOAuthHandshake = exports.persistOAuthHandshake = exports.normalizeOAuthRedirectUri = exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.OXY_AUTHORIZE_URL = exports.DEFAULT_OAUTH_SCOPE = exports.generatePkcePair = exports.generateOAuthState = exports.computeCodeChallenge = exports.buildOAuthAuthorizeUrl = exports.runColdBoot = exports.CENTRAL_IDP_APEX = exports.registrableApex = exports.getAccountColor = exports.formatPublicKeyHandle = exports.getAccountFallbackHandle = exports.getAccountDisplayName = exports.createQuickAccount = exports.buildAccountsArray = exports.updateAvatarVisibility = exports.isDev = exports.consoleSink = exports.resetLoggerConfig = exports.getLoggerConfig = exports.configureLogger = exports.createLogger = exports.logger = exports.normalizeMultilineText = exports.normalizeInlineText = exports.validateAndSanitizeUserInput = exports.isValidObjectId = exports.sanitizeHTML = exports.sanitizeString = exports.isValidFileType = exports.isValidFileSize = exports.isValidDate = exports.isValidURL = exports.isValidUUID = exports.isValidObject = exports.isValidArray = exports.isRequiredBoolean = exports.isRequiredNumber = exports.isRequiredString = exports.isValidDisplayName = exports.isValidPassword = void 0;
+exports.packageInfo = exports.runSessionColdBoot = exports.TOKEN_REFRESH_LEAD_MS = exports.startTokenRefreshScheduler = exports.installAuthRefreshHandler = exports.createAuthRefreshHandler = exports.refreshDeviceSecretArm = exports.refreshPersistedSession = exports.AUTH_STATE_STORAGE_KEY = exports.createMemoryAuthStateStore = exports.createNativeAuthStateStore = exports.createWebAuthStateStore = exports.createAccountDialogController = exports.AccountDialogController = exports.switchableAccountIds = exports.projectSwitchableAccounts = exports.accountIdsOf = exports.activeUserOf = exports.activeSessionIdOf = exports.deviceStateToClientSessions = exports.createSessionClient = exports.createSessionClientHost = exports.SessionClient = exports.redeemHubTicketOnHub = exports.syncHubAfterSignIn = exports.parseHubSyncReturnUrl = exports.normalizeOfficialReturnOrigin = exports.isAllowedDeviceJoinOrigin = exports.isOfficialWebOrigin = exports.isIdpHubOrigin = exports.buildHubSyncUrl = void 0;
 // Ensure crypto polyfills are loaded before anything else
 require("./crypto/polyfill");
 // ---------------------------------------------------------------------------
@@ -181,12 +181,6 @@ Object.defineProperty(exports, "recordSuccess", { enumerable: true, get: functio
 Object.defineProperty(exports, "shouldAllowRequest", { enumerable: true, get: function () { return networkUtils_1.shouldAllowRequest; } });
 Object.defineProperty(exports, "delay", { enumerable: true, get: function () { return networkUtils_1.delay; } });
 Object.defineProperty(exports, "withRetry", { enumerable: true, get: function () { return networkUtils_1.withRetry; } });
-var debugUtils_1 = require("./shared/utils/debugUtils");
-Object.defineProperty(exports, "isDev", { enumerable: true, get: function () { return debugUtils_1.isDev; } });
-Object.defineProperty(exports, "debugLog", { enumerable: true, get: function () { return debugUtils_1.debugLog; } });
-Object.defineProperty(exports, "debugWarn", { enumerable: true, get: function () { return debugUtils_1.debugWarn; } });
-Object.defineProperty(exports, "debugError", { enumerable: true, get: function () { return debugUtils_1.debugError; } });
-Object.defineProperty(exports, "createDebugLogger", { enumerable: true, get: function () { return debugUtils_1.createDebugLogger; } });
 // ---------------------------------------------------------------------------
 // i18n
 // ---------------------------------------------------------------------------
@@ -239,18 +233,16 @@ var textNormalization_1 = require("./utils/textNormalization");
 Object.defineProperty(exports, "normalizeInlineText", { enumerable: true, get: function () { return textNormalization_1.normalizeInlineText; } });
 Object.defineProperty(exports, "normalizeMultilineText", { enumerable: true, get: function () { return textNormalization_1.normalizeMultilineText; } });
 // ---------------------------------------------------------------------------
-// Logging
-// ---------------------------------------------------------------------------
-var loggerUtils_1 = require("./utils/loggerUtils");
-Object.defineProperty(exports, "logger", { enumerable: true, get: function () { return loggerUtils_1.logger; } });
-Object.defineProperty(exports, "LogLevel", { enumerable: true, get: function () { return loggerUtils_1.LogLevel; } });
-Object.defineProperty(exports, "logAuth", { enumerable: true, get: function () { return loggerUtils_1.logAuth; } });
-Object.defineProperty(exports, "logApi", { enumerable: true, get: function () { return loggerUtils_1.logApi; } });
-Object.defineProperty(exports, "logSession", { enumerable: true, get: function () { return loggerUtils_1.logSession; } });
-Object.defineProperty(exports, "logUser", { enumerable: true, get: function () { return loggerUtils_1.logUser; } });
-Object.defineProperty(exports, "logDevice", { enumerable: true, get: function () { return loggerUtils_1.logDevice; } });
-Object.defineProperty(exports, "logPayment", { enumerable: true, get: function () { return loggerUtils_1.logPayment; } });
-Object.defineProperty(exports, "logPerformance", { enumerable: true, get: function () { return loggerUtils_1.logPerformance; } });
+// Logging — the ecosystem-wide chokepoint (also at subpath `@oxyhq/core/logger`)
+// ---------------------------------------------------------------------------
+var logger_1 = require("./logger");
+Object.defineProperty(exports, "logger", { enumerable: true, get: function () { return logger_1.logger; } });
+Object.defineProperty(exports, "createLogger", { enumerable: true, get: function () { return logger_1.createLogger; } });
+Object.defineProperty(exports, "configureLogger", { enumerable: true, get: function () { return logger_1.configureLogger; } });
+Object.defineProperty(exports, "getLoggerConfig", { enumerable: true, get: function () { return logger_1.getLoggerConfig; } });
+Object.defineProperty(exports, "resetLoggerConfig", { enumerable: true, get: function () { return logger_1.resetLoggerConfig; } });
+Object.defineProperty(exports, "consoleSink", { enumerable: true, get: function () { return logger_1.consoleSink; } });
+Object.defineProperty(exports, "isDev", { enumerable: true, get: function () { return logger_1.isDev; } });
 // ---------------------------------------------------------------------------
 // Avatars
 // ---------------------------------------------------------------------------