@oxyhq/core 17.0.2 → 17.1.0

package/dist/esm/i18n/locales/en-US.json

@@ -54,6 +54,12 @@
         "status": {
             "accountSwitched": "Now using {{name}}",
             "signingIn": "Signing in…"
+        },
+        "errors": {
+            "notConfigured": "Sign-in isn't available",
+            "notConfiguredDescription": "{{app}} isn't set up for sign-in yet. Contact the app's developer.",
+            "failed": "Couldn't start sign-in",
+            "failedDescription": "Something went wrong. Please try again."
         }
     },
     "signup": {

package/dist/esm/i18n/locales/es-ES.json

@@ -54,6 +54,12 @@
         "status": {
             "accountSwitched": "Ahora usando {{name}}",
             "signingIn": "Iniciando sesión…"
+        },
+        "errors": {
+            "notConfigured": "El inicio de sesión no está disponible",
+            "notConfiguredDescription": "{{app}} todavía no está configurada para iniciar sesión. Contacta con quien desarrolla la app.",
+            "failed": "No se pudo iniciar sesión",
+            "failedDescription": "Algo ha ido mal. Inténtalo de nuevo."
         }
     },
     "signup": {

package/dist/esm/i18n/locales/locales/en-US.json

@@ -54,6 +54,12 @@
     "status": {
       "accountSwitched": "Now using {{name}}",
       "signingIn": "Signing in…"
+    },
+    "errors": {
+      "notConfigured": "Sign-in isn't available",
+      "notConfiguredDescription": "{{app}} isn't set up for sign-in yet. Contact the app's developer.",
+      "failed": "Couldn't start sign-in",
+      "failedDescription": "Something went wrong. Please try again."
     }
   },
   "signup": {

package/dist/esm/i18n/locales/locales/es-ES.json

@@ -54,6 +54,12 @@
     "status": {
       "accountSwitched": "Ahora usando {{name}}",
       "signingIn": "Iniciando sesión…"
+    },
+    "errors": {
+      "notConfigured": "El inicio de sesión no está disponible",
+      "notConfiguredDescription": "{{app}} todavía no está configurada para iniciar sesión. Contacta con quien desarrolla la app.",
+      "failed": "No se pudo iniciar sesión",
+      "failedDescription": "Algo ha ido mal. Inténtalo de nuevo."
     }
   },
   "signup": {

package/dist/esm/mixins/OxyServices.accounts.js

@@ -1,6 +1,6 @@
 import { normalizeUserIdentity } from '../utils/userIdentity.js';
 import { CACHE_TIMES } from './mixinHelpers.js';
-export { ORGANIZATION_CATEGORIES } from '@oxyhq/contracts';
+export { ACCOUNT_KINDS, ORGANIZATION_CATEGORIES, isActAsEligibleKind } from '@oxyhq/contracts';
 export function OxyServicesAccountsMixin(Base) {
     return class extends Base {
         constructor(...args) {
@@ -119,6 +119,42 @@ export function OxyServicesAccountsMixin(Base) {
                 throw this.handleError(error);
             }
         }
+        /**
+         * Mint a `channel` account under `ownerUserId` via service auth
+         * (`accounts:provision` scope). Requires `configureServiceAuth` first.
+         */
+        async provisionChannelAccount(data) {
+            try {
+                return await this.makeServiceRequest('POST', '/accounts/service/channels', data);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        /**
+         * Grant membership on a channel account via service auth
+         * (`accounts:provision` scope).
+         */
+        async provisionChannelMember(channelAccountId, data) {
+            try {
+                return await this.makeServiceRequest('POST', `/accounts/service/channels/${encodeURIComponent(channelAccountId)}/members`, data);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        /**
+         * Revoke membership on a channel account via service auth
+         * (`accounts:provision` scope).
+         */
+        async revokeChannelMember(channelAccountId, memberUserId) {
+            try {
+                return await this.makeServiceRequest('DELETE', `/accounts/service/channels/${encodeURIComponent(channelAccountId)}/members/${encodeURIComponent(memberUserId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
         /**
          * Update an account's mutable profile fields. Tree placement changes
          * (reparenting) go through the dedicated move endpoint, not here.

package/dist/esm/session/accountDialogController.js

@@ -455,7 +455,7 @@ export class AccountDialogController {
      */
     async switchTo(accountId) {
         if (this.switchingAccountId)
-            return;
+            return false;
         this.switchingAccountId = accountId;
         this.error = null;
         this.emit();
@@ -484,9 +484,11 @@ export class AccountDialogController {
             }
             // Re-project + refetch immediately; the subscription also fires.
             await this.refresh();
+            return true;
         }
         catch (error) {
             this.error = errorMessage(error);
+            return false;
         }
         finally {
             this.switchingAccountId = null;

package/dist/esm/session/accountProjection.js

@@ -16,6 +16,7 @@
  * into core, keyed directly on `DeviceSessionState` (whose `activeAccountId` is
  * atomic, so no cross-call current-row reconciliation is needed).
  */
+import { isActAsEligibleKind } from '@oxyhq/contracts';
 import { getAccountDisplayName, getAccountFallbackHandle } from '../utils/accountUtils.js';
 import { getNormalizedUserHandle } from '../utils/userHandle.js';
 /**
@@ -26,6 +27,9 @@ import { getNormalizedUserHandle } from '../utils/userHandle.js';
  * graph-only rows (in graph order). An account present as BOTH a device session
  * and a graph node is deduped into ONE device row enriched with the graph
  * metadata (relationship / kind / parent / membership).
+ *
+ * Graph nodes of a kind nobody may act as (`channel`) are omitted — see the
+ * filter below.
  */
 export function projectSwitchableAccounts(input) {
     const { state, graph, profilesById, activeUser, locale, resolveAvatarUrl } = input;
@@ -95,6 +99,17 @@ export function projectSwitchableAccounts(input) {
             continue;
         }
         // Graph-only account (owned org / shared, not yet a device session).
+        //
+        // This lane is why a no-login account is NOT kept out of the switcher "by
+        // construction": the graph contributes accounts that have no device session
+        // and no credentials at all, which is exactly how an org first becomes
+        // switchable. So a kind that must never be switched into has to be filtered
+        // HERE, and `isActAsEligibleKind` is the same predicate the server enforces
+        // on `POST /accounts/:id/switch` — offering a row the server would 403 is a
+        // dead button.
+        if (!isActAsEligibleKind(node.kind)) {
+            continue;
+        }
         remember(toRow(node.account, {
             relationship: node.relationship,
             kind: node.kind,
@@ -113,6 +128,9 @@ export function projectSwitchableAccounts(input) {
  * `oxyServices.getUsersByIds(...)`; graph nodes already embed their `account`
  * document, but including their ids lets the caller pass one id set and lets the
  * projection prefer freshly-fetched profiles uniformly.
+ *
+ * Applies the SAME act-as filter as {@link projectSwitchableAccounts} to graph
+ * nodes, so this never fetches a profile for a row the projection will drop.
  */
 export function switchableAccountIds(state, graph) {
     const ids = new Set();
@@ -122,7 +140,7 @@ export function switchableAccountIds(state, graph) {
         }
     }
     for (const node of graph) {
-        if (node.accountId) {
+        if (node.accountId && isActAsEligibleKind(node.kind)) {
             ids.add(node.accountId);
         }
     }