@oxyhq/core 12.10.4 → 12.10.6

package/dist/cjs/i18n/locales/en-US.json

@@ -1552,6 +1552,7 @@
             "fileEmpty": "File \"{{name}}\" is empty",
             "fileTooLarge": "\"{{name}}\" is too large. Maximum file size is {{maxSize}}",
             "noValidFiles": "No valid files to upload",
+            "imagesOnlyRequired": "Only image files can be selected",
             "waitForSelection": "Please wait for the current file selection to complete",
             "noFilesSelected": "No files were selected",
             "loadSomeFailed": "Failed to load some files:\n{{errors}}",

package/dist/cjs/i18n/locales/es-ES.json

@@ -1552,6 +1552,7 @@
             "fileEmpty": "El archivo \"{{name}}\" está vacío",
             "fileTooLarge": "\"{{name}}\" es demasiado grande. El tamaño máximo es {{maxSize}}",
             "noValidFiles": "No hay archivos válidos para subir",
+            "imagesOnlyRequired": "Solo se pueden seleccionar archivos de imagen",
             "waitForSelection": "Espera a que se complete la selección actual",
             "noFilesSelected": "No se seleccionaron archivos",
             "loadSomeFailed": "Error al cargar algunos archivos:\n{{errors}}",

package/dist/cjs/i18n/locales/locales/en-US.json

@@ -1552,6 +1552,7 @@
       "fileEmpty": "File \"{{name}}\" is empty",
       "fileTooLarge": "\"{{name}}\" is too large. Maximum file size is {{maxSize}}",
       "noValidFiles": "No valid files to upload",
+      "imagesOnlyRequired": "Only image files can be selected",
       "waitForSelection": "Please wait for the current file selection to complete",
       "noFilesSelected": "No files were selected",
       "loadSomeFailed": "Failed to load some files:\n{{errors}}",

package/dist/cjs/i18n/locales/locales/es-ES.json

@@ -1552,6 +1552,7 @@
       "fileEmpty": "El archivo \"{{name}}\" está vacío",
       "fileTooLarge": "\"{{name}}\" es demasiado grande. El tamaño máximo es {{maxSize}}",
       "noValidFiles": "No hay archivos válidos para subir",
+      "imagesOnlyRequired": "Solo se pueden seleccionar archivos de imagen",
       "waitForSelection": "Espera a que se complete la selección actual",
       "noFilesSelected": "No se seleccionaron archivos",
       "loadSomeFailed": "Error al cargar algunos archivos:\n{{errors}}",

package/dist/cjs/index.js

@@ -21,7 +21,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.FALLBACK_LOCALE = exports.SUPPORTED_LANGUAGES = exports.TopicSource = exports.TopicType = exports.SECURITY_EVENT_SEVERITY_MAP = exports.DeviceManager = exports.deriveSharedSecret = exports.AEAD_NONCE_LENGTH = exports.AEAD_KEY_LENGTH = exports.decryptAead = exports.encryptAead = exports.hkdfSha256 = exports.RecoveryPhraseService = exports.SignatureService = exports.updateIdentityMarker = exports.readIdentityMarker = exports.IdentityUnavailableError = exports.IdentityPersistError = exports.IdentityAlreadyExistsError = exports.KeyManager = exports.sessionsArraysEqual = exports.normalizeAndSortSessions = exports.mergeSessions = exports.authenticatedApiCall = exports.withAuthErrorHandling = exports.isAuthenticationError = exports.ensureValidToken = exports.AuthenticationFailedError = exports.SessionSyncRequiredError = exports.verifyPublicCardAttestation = exports.parseAttestPayload = exports.parseIdPayload = exports.buildUserDid = exports.ORGANIZATION_CATEGORIES = exports.normalizeProfileLinks = exports.getNormalizedUserHandle = exports.getCanonicalUserHandle = exports.normalizeUserIdentityOrNull = exports.normalizeUserIdentity = exports.getNormalizedUserId = exports.OxyAppDataIdentifierError = exports.parseCommonsApprovalExpiresAt = exports.getCommonsApprovalBlockingReason = exports.ServiceCredentialMismatchError = exports.oxyClient = exports.OXY_CLOUD_URL = exports.OxyAuthenticationTimeoutError = exports.OxyAuthenticationError = exports.AssetUrlResolutionError = exports.OxyServices = void 0;
 exports.buildUrl = exports.buildSearchParams = exports.translate = exports.withRetry = exports.delay = exports.shouldAllowRequest = exports.recordSuccess = exports.recordFailure = exports.calculateBackoffInterval = exports.createCircuitBreakerState = exports.DEFAULT_CIRCUIT_BREAKER_CONFIG = exports.isRetryableError = exports.isNetworkError = exports.isServerError = exports.isRateLimitError = exports.isNotFoundError = exports.isForbiddenError = exports.isUnauthorizedError = exports.isAlreadyRegisteredError = exports.getErrorMessage = exports.getErrorStatus = exports.HttpStatus = exports.getSystemColorScheme = exports.systemPrefersDarkMode = exports.getOppositeTheme = exports.normalizeColorScheme = exports.normalizeTheme = exports.getContrastTextColor = exports.isLightColor = exports.withOpacity = exports.rgbToHex = exports.hexToRgb = exports.lightenColor = exports.darkenColor = exports.isWebBrowser = exports.isAndroid = exports.isIOS = exports.isNative = exports.isWeb = exports.setPlatformOS = exports.getPlatformOS = exports.getPrimaryLanguage = exports.getUserLanguages = exports.isRTLLocale = exports.getNativeLanguageName = exports.getLanguageName = exports.getLanguageMetadata = exports.isSupportedLocale = exports.normalizeLocale = exports.getBaseLanguage = void 0;
 exports.isOxyRpOrigin = exports.CENTRAL_IDP_APEX = exports.registrableApex = exports.getAccountColor = exports.formatPublicKeyHandle = exports.getAccountFallbackHandle = exports.getAccountDisplayName = exports.createQuickAccount = exports.buildAccountsArray = exports.updateAvatarVisibility = exports.isDev = exports.consoleSink = exports.resetLoggerConfig = exports.getLoggerConfig = exports.configureLogger = exports.createLogger = exports.logger = exports.normalizeMultilineText = exports.normalizeInlineText = exports.validateAndSanitizeUserInput = exports.isValidObjectId = exports.sanitizeHTML = exports.sanitizeString = exports.isValidFileType = exports.isValidFileSize = exports.isValidDate = exports.isValidURL = exports.isValidUUID = exports.isValidObject = exports.isValidArray = exports.isRequiredBoolean = exports.isRequiredNumber = exports.isRequiredString = exports.DISPLAY_NAME_ORPHANED_MARK_SOURCE = exports.DISPLAY_NAME_DISALLOWED_SOURCE = exports.DISPLAY_NAME_ALLOWED_SCRIPTS = exports.isValidDisplayName = exports.isValidPassword = exports.isValidUsername = exports.isValidEmail = exports.PASSWORD_REGEX = exports.USERNAME_REGEX = exports.EMAIL_REGEX = exports.retryAsync = exports.validateRequiredFields = exports.handleHttpError = exports.createApiError = exports.ErrorCodes = exports.safeJsonParse = exports.buildPaginationParams = void 0;
-exports.packageInfo = exports.runSessionColdBoot = exports.TOKEN_REFRESH_LEAD_MS = exports.startTokenRefreshScheduler = exports.installAuthRefreshHandler = exports.createAuthRefreshHandler = exports.refreshDeviceSecretArm = exports.refreshPersistedSession = exports.AUTH_STATE_STORAGE_KEY = exports.createMemoryAuthStateStore = exports.createNativeAuthStateStore = exports.createWebAuthStateStore = exports.createAccountDialogController = exports.AccountDialogController = exports.switchableAccountIds = exports.projectSwitchableAccounts = exports.accountIdsOf = exports.activeUserOf = exports.activeSessionIdOf = exports.deviceStateToClientSessions = exports.createSessionClient = exports.createSessionClientHost = exports.SessionClient = exports.redeemHubTicketOnHub = exports.syncHubAfterSignIn = exports.parseHubSyncReturnUrl = exports.normalizeOfficialReturnOrigin = exports.isAllowedDeviceJoinOrigin = exports.isOfficialWebOrigin = exports.isLoopbackOrigin = exports.isIdpHubOrigin = exports.buildHubSyncUrl = exports.buildIdpHubOrigin = exports.clearOAuthHandshake = exports.readOAuthHandshake = exports.persistOAuthHandshake = exports.normalizeOAuthRedirectUri = exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.OXY_AUTHORIZE_URL = exports.DEFAULT_OAUTH_SCOPE = exports.generatePkcePair = exports.generateOAuthState = exports.computeCodeChallenge = exports.buildOAuthAuthorizeUrl = exports.runColdBoot = void 0;
+exports.runSessionColdBoot = exports.TOKEN_REFRESH_LEAD_MS = exports.startTokenRefreshScheduler = exports.installAuthRefreshHandler = exports.createAuthRefreshHandler = exports.refreshDeviceSecretArm = exports.refreshPersistedSession = exports.AUTH_STATE_STORAGE_KEY = exports.createMemoryAuthStateStore = exports.createNativeAuthStateStore = exports.createWebAuthStateStore = exports.createAccountDialogController = exports.AccountDialogController = exports.switchableAccountIds = exports.projectSwitchableAccounts = exports.accountIdsOf = exports.activeUserOf = exports.activeSessionIdOf = exports.deviceStateToClientSessions = exports.createSessionClient = exports.createSessionClientHost = exports.SessionClient = exports.redeemHubTicketOnHub = exports.syncHubAfterSignIn = exports.parseHubSyncReturnUrl = exports.normalizeOfficialReturnOrigin = exports.isAllowedDeviceJoinOrigin = exports.isOfficialWebOrigin = exports.isLoopbackOrigin = exports.isIdpHubOrigin = exports.buildHubSyncUrl = exports.buildIdpHubOrigin = exports.consumeOAuthReturnPath = exports.persistOAuthReturnPath = exports.clearOAuthHandshake = exports.readOAuthHandshake = exports.persistOAuthHandshake = exports.normalizeOAuthRedirectUri = exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY = exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.OXY_AUTHORIZE_URL = exports.DEFAULT_OAUTH_SCOPE = exports.generatePkcePair = exports.generateOAuthState = exports.computeCodeChallenge = exports.buildOAuthAuthorizeUrl = exports.runColdBoot = void 0;
+exports.packageInfo = void 0;
 // Ensure crypto polyfills are loaded before anything else
 require("./crypto/polyfill");
 // ---------------------------------------------------------------------------
@@ -313,10 +314,13 @@ Object.defineProperty(exports, "OXY_OAUTH_STATE_STORAGE_KEY", { enumerable: true
 Object.defineProperty(exports, "OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY", { enumerable: true, get: function () { return oauthPkce_1.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY; } });
 Object.defineProperty(exports, "OXY_SILENT_OAUTH_ATTEMPTED_KEY", { enumerable: true, get: function () { return oauthPkce_1.OXY_SILENT_OAUTH_ATTEMPTED_KEY; } });
 Object.defineProperty(exports, "OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY", { enumerable: true, get: function () { return oauthPkce_1.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY; } });
+Object.defineProperty(exports, "OXY_OAUTH_RETURN_PATH_STORAGE_KEY", { enumerable: true, get: function () { return oauthPkce_1.OXY_OAUTH_RETURN_PATH_STORAGE_KEY; } });
 Object.defineProperty(exports, "normalizeOAuthRedirectUri", { enumerable: true, get: function () { return oauthPkce_1.normalizeOAuthRedirectUri; } });
 Object.defineProperty(exports, "persistOAuthHandshake", { enumerable: true, get: function () { return oauthPkce_1.persistOAuthHandshake; } });
 Object.defineProperty(exports, "readOAuthHandshake", { enumerable: true, get: function () { return oauthPkce_1.readOAuthHandshake; } });
 Object.defineProperty(exports, "clearOAuthHandshake", { enumerable: true, get: function () { return oauthPkce_1.clearOAuthHandshake; } });
+Object.defineProperty(exports, "persistOAuthReturnPath", { enumerable: true, get: function () { return oauthPkce_1.persistOAuthReturnPath; } });
+Object.defineProperty(exports, "consumeOAuthReturnPath", { enumerable: true, get: function () { return oauthPkce_1.consumeOAuthReturnPath; } });
 var officialOrigins_1 = require("./utils/officialOrigins");
 Object.defineProperty(exports, "buildIdpHubOrigin", { enumerable: true, get: function () { return officialOrigins_1.buildIdpHubOrigin; } });
 Object.defineProperty(exports, "buildHubSyncUrl", { enumerable: true, get: function () { return officialOrigins_1.buildHubSyncUrl; } });

package/dist/cjs/session/hubSync.js

@@ -33,7 +33,7 @@ async function syncHubAfterSignIn(oxy, opts) {
     }
     const hubOrigin = (0, officialOrigins_1.buildIdpHubOrigin)();
     const issued = await oxy.issueHubTicket(hubOrigin);
-    const returnUrl = `${location.origin}${location.pathname}${location.search}`;
+    const returnUrl = `${location.origin}${location.pathname}${location.search}${location.hash}`;
     const syncUrl = (0, officialOrigins_1.buildHubSyncUrl)(issued.ticket, returnUrl);
     window.location.assign(syncUrl);
     return true;

package/dist/cjs/utils/oauthPkce.js

@@ -17,12 +17,14 @@
  * React Native. No `require()`, so the ESM build stays bundler-clean.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.DEFAULT_OAUTH_SCOPE = exports.OXY_AUTHORIZE_URL = void 0;
+exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY = exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = exports.OXY_OAUTH_STATE_STORAGE_KEY = exports.DEFAULT_OAUTH_SCOPE = exports.OXY_AUTHORIZE_URL = void 0;
 exports.computeCodeChallenge = computeCodeChallenge;
 exports.generatePkcePair = generatePkcePair;
 exports.generateOAuthState = generateOAuthState;
 exports.buildOAuthAuthorizeUrl = buildOAuthAuthorizeUrl;
 exports.normalizeOAuthRedirectUri = normalizeOAuthRedirectUri;
+exports.persistOAuthReturnPath = persistOAuthReturnPath;
+exports.consumeOAuthReturnPath = consumeOAuthReturnPath;
 exports.persistOAuthHandshake = persistOAuthHandshake;
 exports.readOAuthHandshake = readOAuthHandshake;
 exports.clearOAuthHandshake = clearOAuthHandshake;
@@ -155,9 +157,19 @@ exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY = 'oxy_oauth_code_verifier';
 exports.OXY_SILENT_OAUTH_ATTEMPTED_KEY = 'oxy.silent_oauth_attempted';
 /** `sessionStorage` key — blocks further cross-origin auto-restore in this tab. */
 exports.OXY_CROSS_ORIGIN_RESTORE_ATTEMPTED_KEY = 'oxy.cross_origin_restore_attempted';
+/**
+ * `sessionStorage` key for the in-app path to return to after an authorize
+ * round trip. See {@link persistOAuthReturnPath}.
+ */
+exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY = 'oxy.oauth_return_path';
 /**
  * Normalize a redirect URI to its origin. Official Oxy apps register apex
  * origins (`https://inbox.oxy.so`) — never path-qualified URLs.
+ *
+ * This is why the path cannot ride along in `redirect_uri`, and why
+ * {@link persistOAuthReturnPath} exists: the authorize round trip always lands
+ * back on the bare origin, so the page the user was on has to be carried
+ * out-of-band and restored on return.
  */
 function normalizeOAuthRedirectUri(input) {
     try {
@@ -167,6 +179,70 @@ function normalizeOAuthRedirectUri(input) {
         return input;
     }
 }
+/**
+ * Is this a safe same-origin path to restore into the address bar?
+ *
+ * Only site-relative paths are accepted. `//evil.com` and `/\evil.com` are
+ * rejected because browsers resolve both as protocol-relative *absolute* URLs —
+ * without this check, anything able to write one key of `sessionStorage` could
+ * turn the post-authorize restore into an open redirect.
+ */
+function isSafeReturnPath(value) {
+    if (!value.startsWith('/'))
+        return false;
+    if (value.startsWith('//') || value.startsWith('/\\'))
+        return false;
+    if (value.length > 2048)
+        return false;
+    return true;
+}
+/**
+ * Remember the page the user was on before a full-page authorize redirect.
+ *
+ * Silent cross-origin restore navigates the whole tab to the IdP and back, and
+ * `redirect_uri` must be a registered apex origin, so the browser returns to
+ * `/` no matter which page the visit started on. Without this, every deep link
+ * — a shared URL, a search result, an ad landing page — silently became the
+ * home page for signed-out visitors on their first navigation in a tab.
+ *
+ * Stored next to the PKCE handshake it belongs to, and cleared by
+ * {@link clearOAuthHandshake} so a stale entry can never be applied to an
+ * unrelated later navigation.
+ */
+function persistOAuthReturnPath(path) {
+    const store = globalThis.sessionStorage;
+    if (!store || !isSafeReturnPath(path))
+        return;
+    try {
+        store.setItem(exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY, path);
+    }
+    catch (error) {
+        // Non-fatal: the round trip still completes, it just lands on the origin.
+        logger_1.logger.warn('Could not persist OAuth return path to sessionStorage', { component: 'oauthPkce' }, error);
+    }
+}
+/**
+ * Read and remove the persisted return path, or `null` when there is none or
+ * it failed validation.
+ *
+ * Single-use by design: it is consumed on the first return so a leftover value
+ * cannot redirect a later navigation in the same tab.
+ */
+function consumeOAuthReturnPath() {
+    const store = globalThis.sessionStorage;
+    if (!store)
+        return null;
+    try {
+        const value = store.getItem(exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY);
+        store.removeItem(exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY);
+        if (!value || !isSafeReturnPath(value))
+            return null;
+        return value;
+    }
+    catch {
+        return null;
+    }
+}
 /** Persist the OAuth handshake for a full-page redirect return (web only). */
 function persistOAuthHandshake(state, codeVerifier) {
     const store = globalThis.sessionStorage;
@@ -199,6 +275,9 @@ function clearOAuthHandshake() {
     try {
         store?.removeItem(exports.OXY_OAUTH_STATE_STORAGE_KEY);
         store?.removeItem(exports.OXY_OAUTH_CODE_VERIFIER_STORAGE_KEY);
+        // The return path belongs to this handshake. Leaving it behind would let a
+        // later, unrelated navigation in the same tab be redirected by it.
+        store?.removeItem(exports.OXY_OAUTH_RETURN_PATH_STORAGE_KEY);
     }
     catch {
         // Best-effort cleanup only.