@oxyhq/core 17.0.0 → 17.0.3

package/dist/cjs/i18n/locales/en-US.json

@@ -54,6 +54,12 @@
         "status": {
             "accountSwitched": "Now using {{name}}",
             "signingIn": "Signing in…"
+        },
+        "errors": {
+            "notConfigured": "Sign-in isn't available",
+            "notConfiguredDescription": "{{app}} isn't set up for sign-in yet. Contact the app's developer.",
+            "failed": "Couldn't start sign-in",
+            "failedDescription": "Something went wrong. Please try again."
         }
     },
     "signup": {

package/dist/cjs/i18n/locales/es-ES.json

@@ -54,6 +54,12 @@
         "status": {
             "accountSwitched": "Ahora usando {{name}}",
             "signingIn": "Iniciando sesión…"
+        },
+        "errors": {
+            "notConfigured": "El inicio de sesión no está disponible",
+            "notConfiguredDescription": "{{app}} todavía no está configurada para iniciar sesión. Contacta con quien desarrolla la app.",
+            "failed": "No se pudo iniciar sesión",
+            "failedDescription": "Algo ha ido mal. Inténtalo de nuevo."
         }
     },
     "signup": {

package/dist/cjs/i18n/locales/locales/en-US.json

@@ -54,6 +54,12 @@
     "status": {
       "accountSwitched": "Now using {{name}}",
       "signingIn": "Signing in…"
+    },
+    "errors": {
+      "notConfigured": "Sign-in isn't available",
+      "notConfiguredDescription": "{{app}} isn't set up for sign-in yet. Contact the app's developer.",
+      "failed": "Couldn't start sign-in",
+      "failedDescription": "Something went wrong. Please try again."
     }
   },
   "signup": {

package/dist/cjs/i18n/locales/locales/es-ES.json

@@ -54,6 +54,12 @@
     "status": {
       "accountSwitched": "Ahora usando {{name}}",
       "signingIn": "Iniciando sesión…"
+    },
+    "errors": {
+      "notConfigured": "El inicio de sesión no está disponible",
+      "notConfiguredDescription": "{{app}} todavía no está configurada para iniciar sesión. Contacta con quien desarrolla la app.",
+      "failed": "No se pudo iniciar sesión",
+      "failedDescription": "Algo ha ido mal. Inténtalo de nuevo."
     }
   },
   "signup": {

package/dist/cjs/mixins/OxyServices.accounts.js

@@ -1,11 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ORGANIZATION_CATEGORIES = void 0;
+exports.isActAsEligibleKind = exports.ORGANIZATION_CATEGORIES = exports.ACCOUNT_KINDS = void 0;
 exports.OxyServicesAccountsMixin = OxyServicesAccountsMixin;
 const userIdentity_1 = require("../utils/userIdentity");
 const mixinHelpers_1 = require("./mixinHelpers");
 var contracts_1 = require("@oxyhq/contracts");
+Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return contracts_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "ORGANIZATION_CATEGORIES", { enumerable: true, get: function () { return contracts_1.ORGANIZATION_CATEGORIES; } });
+Object.defineProperty(exports, "isActAsEligibleKind", { enumerable: true, get: function () { return contracts_1.isActAsEligibleKind; } });
 function OxyServicesAccountsMixin(Base) {
     return class extends Base {
         constructor(...args) {

package/dist/cjs/server/userInvalidation.js

@@ -166,6 +166,12 @@ function createOxyUserInvalidationHandler(options = {}) {
  * wrong data.
  */
 function evictOxyIdentityCache(oxy, userId) {
+    // Match the sweep the user mixin runs after a local profile write — session-
+    // bound and /users/me entries are keyed without the user id, so they must be
+    // prefix-swept on cross-service invalidation too.
+    oxy.clearCacheByPrefix('GET:/session/user/');
+    oxy.clearCacheByPrefix('GET:/users/me');
+    oxy.clearCacheByPrefix('GET:/auth/lookup/');
     oxy.clearCacheEntry(`GET:/users/${userId}`);
     oxy.clearCacheByPrefix('GET:/profiles/username/');
     oxy.clearCacheByPrefix('GET:/profiles/resolve');

package/dist/cjs/session/accountDialogController.js

@@ -459,7 +459,7 @@ class AccountDialogController {
      */
     async switchTo(accountId) {
         if (this.switchingAccountId)
-            return;
+            return false;
         this.switchingAccountId = accountId;
         this.error = null;
         this.emit();
@@ -488,9 +488,11 @@ class AccountDialogController {
             }
             // Re-project + refetch immediately; the subscription also fires.
             await this.refresh();
+            return true;
         }
         catch (error) {
             this.error = errorMessage(error);
+            return false;
         }
         finally {
             this.switchingAccountId = null;

package/dist/cjs/session/accountProjection.js

@@ -20,6 +20,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.projectSwitchableAccounts = projectSwitchableAccounts;
 exports.switchableAccountIds = switchableAccountIds;
+const contracts_1 = require("@oxyhq/contracts");
 const accountUtils_1 = require("../utils/accountUtils");
 const userHandle_1 = require("../utils/userHandle");
 /**
@@ -30,6 +31,9 @@ const userHandle_1 = require("../utils/userHandle");
  * graph-only rows (in graph order). An account present as BOTH a device session
  * and a graph node is deduped into ONE device row enriched with the graph
  * metadata (relationship / kind / parent / membership).
+ *
+ * Graph nodes of a kind nobody may act as (`channel`) are omitted — see the
+ * filter below.
  */
 function projectSwitchableAccounts(input) {
     const { state, graph, profilesById, activeUser, locale, resolveAvatarUrl } = input;
@@ -99,6 +103,17 @@ function projectSwitchableAccounts(input) {
             continue;
         }
         // Graph-only account (owned org / shared, not yet a device session).
+        //
+        // This lane is why a no-login account is NOT kept out of the switcher "by
+        // construction": the graph contributes accounts that have no device session
+        // and no credentials at all, which is exactly how an org first becomes
+        // switchable. So a kind that must never be switched into has to be filtered
+        // HERE, and `isActAsEligibleKind` is the same predicate the server enforces
+        // on `POST /accounts/:id/switch` — offering a row the server would 403 is a
+        // dead button.
+        if (!(0, contracts_1.isActAsEligibleKind)(node.kind)) {
+            continue;
+        }
         remember(toRow(node.account, {
             relationship: node.relationship,
             kind: node.kind,
@@ -117,6 +132,9 @@ function projectSwitchableAccounts(input) {
  * `oxyServices.getUsersByIds(...)`; graph nodes already embed their `account`
  * document, but including their ids lets the caller pass one id set and lets the
  * projection prefer freshly-fetched profiles uniformly.
+ *
+ * Applies the SAME act-as filter as {@link projectSwitchableAccounts} to graph
+ * nodes, so this never fetches a profile for a row the projection will drop.
  */
 function switchableAccountIds(state, graph) {
     const ids = new Set();
@@ -126,7 +144,7 @@ function switchableAccountIds(state, graph) {
         }
     }
     for (const node of graph) {
-        if (node.accountId) {
+        if (node.accountId && (0, contracts_1.isActAsEligibleKind)(node.kind)) {
             ids.add(node.accountId);
         }
     }