@oxyhq/core 6.0.0 → 7.1.0

package/dist/types/mixins/OxyServices.authorizedApps.d.ts

@@ -1,94 +0,0 @@
-/**
- * Authorized-apps mixin — the "Connected apps" management surface that survived
- * the FedCM removal.
- *
- * These two methods read/revoke the user's LEGACY FedCM authorization grants
- * (`GET`/`DELETE /fedcm/me/authorized-apps`). They are the last live consumers
- * of that endpoint (services' `ConnectedAppsScreen` via `useAccountQueries` /
- * `useAccountMutations`) and stay until the AppGrant migration retires the
- * FedCM grant store. All FedCM SIGN-IN machinery was deleted with
- * `OxyServices.fedcm.ts`; this is management-only, so it has no dependency on
- * the credential/nonce pipeline.
- */
-import type { OxyServicesBase } from '../OxyServices.base';
-/**
- * Public summary of an RP application the user has authorized — mirrors the
- * `AuthorizedAppSummary` shape returned by `GET /fedcm/me/authorized-apps`.
- */
-export interface AuthorizedApp {
-    /** Normalised RP origin. */
-    origin: string;
-    /** Friendly display name. */
-    name: string;
-    /** Optional human-readable description. */
-    description?: string;
-    /** ISO-8601 timestamp of when the user first authorized this RP. */
-    firstGrantedAt: string;
-    /** ISO-8601 timestamp of the most recent FedCM exchange for this user+RP. */
-    lastUsedAt: string;
-}
-export declare function OxyServicesAuthorizedAppsMixin<T extends typeof OxyServicesBase>(Base: T): {
-    new (...args: any[]): {
-        /**
-         * List the authenticated user's authorized RP apps — the intersection of the
-         * user's FedCM grants and the currently-approved RP catalog. Powers the
-         * "Connected apps" management UI. Requires a real user session.
-         */
-        listAuthorizedApps(): Promise<AuthorizedApp[]>;
-        /**
-         * Revoke the authenticated user's authorization for a specific RP origin.
-         * The corresponding cache entry is invalidated so a subsequent
-         * `listAuthorizedApps()` sees fresh data.
-         */
-        revokeAuthorizedApp(origin: string): Promise<void>;
-        httpService: import("../HttpService").HttpService;
-        cloudURL: string;
-        config: import("../OxyServices.base").OxyConfig;
-        __resetTokensForTests(): void;
-        makeRequest<T_1>(method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE", url: string, data?: any, options?: import("../HttpService").RequestOptions): Promise<T_1>;
-        getBaseURL(): string;
-        getClient(): import("../HttpService").HttpService;
-        createLinkedClient(config: import("../OxyServices.base").OxyConfig): import("..").LinkedHttpClient;
-        getMetrics(): {
-            totalRequests: number;
-            successfulRequests: number;
-            failedRequests: number;
-            cacheHits: number;
-            cacheMisses: number;
-            averageResponseTime: number;
-        };
-        clearCache(): void;
-        clearCacheEntry(key: string): void;
-        clearCacheByPrefix(prefix: string): number;
-        getCacheStats(): {
-            size: number;
-            hits: number;
-            misses: number;
-            hitRate: number;
-        };
-        getCloudURL(): string;
-        setTokens(accessToken: string): void;
-        clearTokens(): void;
-        onTokensChanged(listener: (accessToken: string | null) => void): () => void;
-        _cachedUserId: string | null | undefined;
-        _cachedAccessToken: string | null;
-        getCurrentUserId(): string | null;
-        hasValidToken(): boolean;
-        getAccessToken(): string | null;
-        getAccessTokenExpiry(): number | null;
-        waitForAuth(timeoutMs?: number): Promise<boolean>;
-        withAuthRetry<T_1>(operation: () => Promise<T_1>, operationName: string, options?: {
-            maxRetries?: number;
-            retryDelay?: number;
-            authTimeoutMs?: number;
-        }): Promise<T_1>;
-        validate(): Promise<boolean>;
-        handleError(error: unknown): Error;
-        healthCheck(): Promise<{
-            status: string;
-            users?: number;
-            timestamp?: string;
-            [key: string]: any;
-        }>;
-    };
-} & T;

package/src/mixins/OxyServices.authorizedApps.ts

@@ -1,75 +0,0 @@
-/**
- * Authorized-apps mixin — the "Connected apps" management surface that survived
- * the FedCM removal.
- *
- * These two methods read/revoke the user's LEGACY FedCM authorization grants
- * (`GET`/`DELETE /fedcm/me/authorized-apps`). They are the last live consumers
- * of that endpoint (services' `ConnectedAppsScreen` via `useAccountQueries` /
- * `useAccountMutations`) and stay until the AppGrant migration retires the
- * FedCM grant store. All FedCM SIGN-IN machinery was deleted with
- * `OxyServices.fedcm.ts`; this is management-only, so it has no dependency on
- * the credential/nonce pipeline.
- */
-import type { OxyServicesBase } from '../OxyServices.base';
-
-/**
- * Public summary of an RP application the user has authorized — mirrors the
- * `AuthorizedAppSummary` shape returned by `GET /fedcm/me/authorized-apps`.
- */
-export interface AuthorizedApp {
-  /** Normalised RP origin. */
-  origin: string;
-  /** Friendly display name. */
-  name: string;
-  /** Optional human-readable description. */
-  description?: string;
-  /** ISO-8601 timestamp of when the user first authorized this RP. */
-  firstGrantedAt: string;
-  /** ISO-8601 timestamp of the most recent FedCM exchange for this user+RP. */
-  lastUsedAt: string;
-}
-
-export function OxyServicesAuthorizedAppsMixin<T extends typeof OxyServicesBase>(Base: T) {
-  return class extends Base {
-    /**
-     * List the authenticated user's authorized RP apps — the intersection of the
-     * user's FedCM grants and the currently-approved RP catalog. Powers the
-     * "Connected apps" management UI. Requires a real user session.
-     */
-    async listAuthorizedApps(): Promise<AuthorizedApp[]> {
-      try {
-        const response = await this.makeRequest<{ apps: AuthorizedApp[] }>(
-          'GET',
-          '/fedcm/me/authorized-apps',
-          undefined,
-          {
-            cache: true,
-            cacheTTL: 30 * 1000, // 30 second cache — short, this drives a manageable UI
-          },
-        );
-        return response?.apps ?? [];
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Revoke the authenticated user's authorization for a specific RP origin.
-     * The corresponding cache entry is invalidated so a subsequent
-     * `listAuthorizedApps()` sees fresh data.
-     */
-    async revokeAuthorizedApp(origin: string): Promise<void> {
-      try {
-        await this.makeRequest(
-          'DELETE',
-          `/fedcm/me/authorized-apps/${encodeURIComponent(origin)}`,
-          undefined,
-          { cache: false },
-        );
-        this.clearCacheEntry('GET:/fedcm/me/authorized-apps');
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-  };
-}

package/src/mixins/__tests__/authorizedApps.test.ts

@@ -1,63 +0,0 @@
-/**
- * Authorized-apps mixin tests — the "Connected apps" management pair that
- * survived the FedCM removal. Stubs `makeRequest` (no network).
- */
-import type { AuthorizedApp } from '../OxyServices.authorizedApps';
-import { OxyServices } from '../../OxyServices';
-
-const APP: AuthorizedApp = {
-  origin: 'https://mention.earth',
-  name: 'Mention',
-  firstGrantedAt: '2026-01-01T00:00:00.000Z',
-  lastUsedAt: '2026-06-01T00:00:00.000Z',
-};
-
-describe('OxyServices.authorizedApps', () => {
-  let oxy: OxyServices;
-  let makeRequest: jest.SpyInstance;
-
-  beforeEach(() => {
-    oxy = new OxyServices({ baseURL: 'http://test.invalid' });
-    makeRequest = jest.spyOn(oxy, 'makeRequest');
-  });
-
-  afterEach(() => jest.restoreAllMocks());
-
-  describe('listAuthorizedApps', () => {
-    it('GETs the authorized-apps and returns the array', async () => {
-      makeRequest.mockResolvedValueOnce({ apps: [APP] });
-      expect(await oxy.listAuthorizedApps()).toEqual([APP]);
-      expect(makeRequest).toHaveBeenCalledWith(
-        'GET',
-        '/fedcm/me/authorized-apps',
-        undefined,
-        expect.objectContaining({ cache: true }),
-      );
-    });
-
-    it('defaults to [] when the response has no apps', async () => {
-      makeRequest.mockResolvedValueOnce({});
-      expect(await oxy.listAuthorizedApps()).toEqual([]);
-    });
-
-    it('defaults to [] when the response is null (no throw on null access)', async () => {
-      makeRequest.mockResolvedValueOnce(null);
-      expect(await oxy.listAuthorizedApps()).toEqual([]);
-    });
-  });
-
-  describe('revokeAuthorizedApp', () => {
-    it('DELETEs the encoded origin and sweeps the list cache', async () => {
-      const clearCacheEntry = jest.spyOn(oxy, 'clearCacheEntry');
-      makeRequest.mockResolvedValueOnce(undefined);
-      await oxy.revokeAuthorizedApp('https://mention.earth');
-      expect(makeRequest).toHaveBeenCalledWith(
-        'DELETE',
-        '/fedcm/me/authorized-apps/https%3A%2F%2Fmention.earth',
-        undefined,
-        { cache: false },
-      );
-      expect(clearCacheEntry).toHaveBeenCalledWith('GET:/fedcm/me/authorized-apps');
-    });
-  });
-});