@oxyhq/core 17.0.2 → 17.1.0

package/src/session/accountProjection.ts

@@ -18,6 +18,7 @@
  */
 
 import type { DeviceSessionState } from '@oxyhq/contracts';
+import { isActAsEligibleKind } from '@oxyhq/contracts';
 import type { User } from '../models/interfaces';
 import type {
   AccountNode,
@@ -142,6 +143,9 @@ export interface ProjectSwitchableAccountsInput {
  * graph-only rows (in graph order). An account present as BOTH a device session
  * and a graph node is deduped into ONE device row enriched with the graph
  * metadata (relationship / kind / parent / membership).
+ *
+ * Graph nodes of a kind nobody may act as (`channel`) are omitted — see the
+ * filter below.
  */
 export function projectSwitchableAccounts(input: ProjectSwitchableAccountsInput): SwitchableAccount[] {
   const { state, graph, profilesById, activeUser, locale, resolveAvatarUrl } = input;
@@ -227,6 +231,17 @@ export function projectSwitchableAccounts(input: ProjectSwitchableAccountsInput)
       continue;
     }
     // Graph-only account (owned org / shared, not yet a device session).
+    //
+    // This lane is why a no-login account is NOT kept out of the switcher "by
+    // construction": the graph contributes accounts that have no device session
+    // and no credentials at all, which is exactly how an org first becomes
+    // switchable. So a kind that must never be switched into has to be filtered
+    // HERE, and `isActAsEligibleKind` is the same predicate the server enforces
+    // on `POST /accounts/:id/switch` — offering a row the server would 403 is a
+    // dead button.
+    if (!isActAsEligibleKind(node.kind)) {
+      continue;
+    }
     remember(toRow(node.account, {
       relationship: node.relationship,
       kind: node.kind,
@@ -247,6 +262,9 @@ export function projectSwitchableAccounts(input: ProjectSwitchableAccountsInput)
  * `oxyServices.getUsersByIds(...)`; graph nodes already embed their `account`
  * document, but including their ids lets the caller pass one id set and lets the
  * projection prefer freshly-fetched profiles uniformly.
+ *
+ * Applies the SAME act-as filter as {@link projectSwitchableAccounts} to graph
+ * nodes, so this never fetches a profile for a row the projection will drop.
  */
 export function switchableAccountIds(
   state: DeviceSessionState | null,
@@ -259,7 +277,7 @@ export function switchableAccountIds(
     }
   }
   for (const node of graph) {
-    if (node.accountId) {
+    if (node.accountId && isActAsEligibleKind(node.kind)) {
       ids.add(node.accountId);
     }
   }

package/src/types/color.d.ts

@@ -1,20 +0,0 @@
-declare module 'color' {
-  interface Color {
-    (color: string | Color | undefined, model?: string): Color;
-    rgb(): Color;
-    rgba(): Color;
-    alpha(): number;
-    alpha(val: number): Color;
-    fade(val: number): Color;
-    lighten(val: number): Color;
-    darken(val: number): Color;
-    string(): string;
-    hex(): string;
-    toString(): string;
-  }
-
-  function color(color: string | Color | undefined, model?: string): Color;
-  export default color;
-}
-
-

package/src/types/elliptic.d.ts

@@ -1,70 +0,0 @@
-declare module 'elliptic' {
-  export interface BN {
-    toArray(endian?: 'be' | 'le', length?: number): number[];
-    toString(base?: number): string;
-  }
-
-  export interface KeyPair {
-    getPrivate(enc?: 'hex' | 'array' | 'bn'): string | number[] | any;
-    getPublic(): Point;
-    getPublic(enc: 'hex'): string;
-    getPublic(enc: 'array'): number[];
-    getPublic(compressed: boolean, enc?: 'hex'): string;
-    getPublic(compressed: boolean, enc?: 'array'): number[];
-    sign(msg: string | number[]): Signature;
-    verify(msg: string | number[], signature: Signature | string | { r: string | number[]; s: string | number[] }): boolean;
-    /** ECDH: derive the shared point's x-coordinate against another party's public point. */
-    derive(pub: Point): BN;
-  }
-
-  export interface Signature {
-    r: any;
-    s: any;
-    recoveryParam: number | null;
-    toDER(enc?: 'hex'): string;
-    toCompact(enc?: 'hex', param?: number): string;
-  }
-
-  export interface Curve {
-    n: any;
-    red: any;
-    g: Point;
-    decodePoint(bytes: string | number[], enc?: string): Point;
-  }
-
-  export interface Point {
-    x: any;
-    y: any;
-    inf: boolean;
-    getX(): any;
-    getY(): any;
-    encode(enc?: string, compressed?: boolean): string | number[];
-    add(p: Point): Point;
-    mul(k: any): Point;
-    eq(p: Point): boolean;
-  }
-
-  export class EC {
-    constructor(curve: string | Curve);
-    keyFromPrivate(priv: string | number[], enc?: string): KeyPair;
-    keyFromPublic(pub: string | number[] | Point, enc?: string): KeyPair;
-    genKeyPair(opts?: { entropy?: string | number[]; pers?: string | number[] }): KeyPair;
-    keyPair(opts?: { priv?: string | number[]; pub?: string | number[] | Point; privEnc?: string; pubEnc?: string }): KeyPair;
-    curve: Curve;
-    n: any;
-    nh: any;
-    g: Point;
-  }
-
-  export type ECKeyPair = KeyPair;
-
-  // ec can be called as a function or used as a constructor
-  export interface ECConstructor {
-    new (curve: string | Curve): EC;
-    (curve: string | Curve): EC;
-  }
-  
-  export const ec: ECConstructor;
-}
-
-