@oxyhq/services 5.17.17 → 5.17.18

package/src/ui/styles/spacing.ts

@@ -8,7 +8,20 @@ import { StyleSheet } from 'react-native';
 export const STEP_GAP = 12; // Vertical gap between ALL elements (illustration, title, description, textfield, buttons, etc.) - must be consistent everywhere
 export const STEP_INNER_GAP = 12; // Gap within sections (headers, cards, etc.) - must match STEP_GAP for uniformity
 
-// Import spacing constants directly from '../constants/spacing' where needed.
+/**
+ * Re-export screen spacing constants from constants/spacing.ts
+ * This allows importing all spacing constants from a single location
+ */
+export {
+    SCREEN_PADDING_HORIZONTAL,
+    SCREEN_PADDING_VERTICAL,
+    SECTION_GAP,
+    SECTION_GAP_LARGE,
+    COMPONENT_GAP,
+    COMPONENT_GAP_SMALL,
+    HEADER_PADDING_TOP_OVERVIEW,
+    HEADER_PADDING_TOP_SETTINGS,
+} from '../constants/spacing';
 
 /**
  * Reusable stylesheet for step components
@@ -24,7 +37,7 @@ export const stepStyles = StyleSheet.create({
     },
     sectionSpacing: {
         // Layout removed - do NOT use for spacing, use explicit marginBottom: 0
-        // This should not add margins
+        // This is kept for backward compatibility but should not add margins
         marginBottom: 0,
     },
     header: {

package/src/ui/types/navigation.ts

@@ -50,12 +50,12 @@ export interface BaseScreenProps {
 export interface OxyProviderProps {
     oxyServices?: unknown;
     children?: ReactNode;
-    contextOnly?: boolean;
     onAuthStateChange?: (user: unknown) => void;
     storageKeyPrefix?: string;
     baseURL?: string;
+    authWebUrl?: string;
+    authRedirectUri?: string;
     queryClient?: QueryClient;
 }
 
 
-

package/src/ui/utils/avatarUtils.ts

@@ -1,9 +1,9 @@
 import type { OxyServices } from '../../core';
 import type { User } from '../../models/interfaces';
 import { useAccountStore } from '../stores/accountStore';
+import { useAuthStore } from '../stores/authStore';
 import { QueryClient } from '@tanstack/react-query';
 import { queryKeys, invalidateUserQueries, invalidateAccountQueries } from '../hooks/queries/queryKeys';
-import { logger } from '../../utils/loggerUtils';
 
 /**
  * Updates file visibility to public for avatar use.
@@ -35,7 +35,6 @@ export async function updateAvatarVisibility(
 }
 
 /**
- * @deprecated Use refreshAccountInStore instead for full profile sync
  * Refreshes avatar in accountStore with cache-busted URL to force image reload.
  * 
  * @param sessionId - The session ID for the account to update
@@ -55,41 +54,6 @@ export function refreshAvatarInStore(
   });
 }
 
-/**
- * Refreshes all user profile data in accountStore (username, displayName, avatar).
- * This ensures accountStore stays in sync with profile changes.
- * 
- * @param sessionId - The session ID for the account to update
- * @param userData - The updated user data
- * @param oxyServices - OxyServices instance to generate download URL
- */
-export function refreshAccountInStore(
-  sessionId: string,
-  userData: Partial<User>,
-  oxyServices: OxyServices
-): void {
-  const { updateAccount } = useAccountStore.getState();
-  
-  const displayName = userData.name?.full || userData.name?.first || userData.username || 'Account';
-  const avatarUrl = userData.avatar 
-    ? oxyServices.getFileDownloadUrl(userData.avatar, 'thumb') + `?t=${Date.now()}`
-    : undefined;
-  
-  logger.debug('Refreshing account in store', { 
-    component: 'AccountStore', 
-    sessionId,
-    username: userData.username,
-    hasAvatar: !!userData.avatar
-  });
-  
-  updateAccount(sessionId, {
-    username: userData.username,
-    displayName,
-    avatar: userData.avatar,
-    avatarUrl,
-  });
-}
-
 /**
  * Updates user profile with avatar and handles all side effects (query invalidation, accountStore update).
  * This function can be used from within OxyContext provider without requiring useOxy hook.
@@ -98,6 +62,7 @@ export function refreshAccountInStore(
  * @param oxyServices - OxyServices instance
  * @param activeSessionId - Active session ID
  * @param queryClient - TanStack Query client
+ * @param syncSession - Optional function to sync session/refresh token when auth errors occur
  * @returns Promise that resolves with updated user data
  */
 export async function updateProfileWithAvatar(
@@ -105,15 +70,28 @@ export async function updateProfileWithAvatar(
   oxyServices: OxyServices,
   activeSessionId: string | null,
   queryClient: QueryClient,
-  options?: { deviceId?: string }
+  syncSession?: () => Promise<User>
 ): Promise<User> {
-  const { deviceId } = options || {};
   // Ensure we have a valid token before making the request
   if (!oxyServices.hasValidToken() && activeSessionId) {
     try {
-      await oxyServices.getTokenBySession(activeSessionId, deviceId);
+      await oxyServices.getTokenBySession(activeSessionId);
     } catch (tokenError) {
-      throw tokenError;
+      const errorMessage = tokenError instanceof Error ? tokenError.message : String(tokenError);
+      if (errorMessage.includes('AUTH_REQUIRED_OFFLINE_SESSION') || errorMessage.includes('offline')) {
+        if (syncSession) {
+          try {
+            await syncSession();
+            await oxyServices.getTokenBySession(activeSessionId);
+          } catch (syncError) {
+            throw new Error('Session needs to be synced. Please try again.');
+          }
+        } else {
+          throw tokenError;
+        }
+      } else {
+        throw tokenError;
+      }
     }
   }
 
@@ -126,9 +104,12 @@ export async function updateProfileWithAvatar(
       queryClient.setQueryData(queryKeys.users.profile(activeSessionId), data);
     }
     
-    // Refresh accountStore with all updated profile data
-    if (activeSessionId) {
-      refreshAccountInStore(activeSessionId, data, oxyServices);
+    // Update authStore so frontend components see the changes immediately
+    useAuthStore.getState().setUser(data);
+    
+    // If avatar was updated, refresh accountStore with cache-busted URL
+    if (updates.avatar && activeSessionId) {
+      refreshAvatarInStore(activeSessionId, updates.avatar, oxyServices);
     }
     
     // Invalidate all related queries to refresh everywhere
@@ -141,10 +122,22 @@ export async function updateProfileWithAvatar(
     const status = error?.status || error?.response?.status;
     
     // Handle authentication errors
-      if (status === 401 || errorMessage.includes('Authentication required') || errorMessage.includes('Invalid or missing authorization header')) {
-        throw new Error('Authentication failed. Please sign in again.');
+    if (status === 401 || errorMessage.includes('Authentication required') || errorMessage.includes('Invalid or missing authorization header')) {
+      if (activeSessionId && syncSession) {
+        try {
+          await syncSession();
+          await oxyServices.getTokenBySession(activeSessionId);
+          // Retry the update after getting token
+          return await updateProfileWithAvatar(updates, oxyServices, activeSessionId, queryClient, syncSession);
+        } catch (retryError) {
+          throw new Error('Authentication failed. Please sign in again.');
+        }
+      } else {
+        throw new Error('No active session. Please sign in.');
+      }
     }
     
     throw error;
   }
 }
+

package/src/ui/utils/storageHelpers.ts

@@ -11,10 +11,6 @@ export interface SessionStorageKeys {
   language: string;
 }
 
-export interface CreateStorageOptions {
-  prefix?: string;
-}
-
 /**
  * Create an in-memory storage implementation used as a safe fallback.
  */

package/src/utils/__tests__/validationUtils.test.ts

@@ -6,6 +6,7 @@ import {
   isValidObject,
   isValidEmail,
   isValidUsername,
+  isValidPassword,
   isValidUUID,
   isValidDate,
   isValidFileSize,
@@ -124,6 +125,20 @@ describe('Validation Utils', () => {
     });
   });
 
+  describe('isValidPassword', () => {
+    it('should return true for valid passwords', () => {
+      expect(isValidPassword('password123')).toBe(true);
+      expect(isValidPassword('mySecurePass')).toBe(true);
+      expect(isValidPassword('12345678')).toBe(true);
+    });
+
+    it('should return false for invalid passwords', () => {
+      expect(isValidPassword('')).toBe(false);
+      expect(isValidPassword('short')).toBe(false); // too short
+      expect(isValidPassword('1234567')).toBe(false); // too short
+    });
+  });
+
   describe('isValidUUID', () => {
     it('should return true for valid UUIDs', () => {
       expect(isValidUUID('123e4567-e89b-12d3-a456-426614174000')).toBe(true);
@@ -218,4 +233,4 @@ describe('Validation Utils', () => {
       expect(validateAndSanitizeUserInput(123, 'string')).toBeNull();
     });
   });
-});
+});

package/src/utils/errorUtils.ts

@@ -211,4 +211,11 @@ export function logError(error: unknown, context?: string): void {
       method: 'logError',
     });
   }
-}
+}
+
+/**
+ * Retry function with exponential backoff
+ * Re-exports retryAsync for backward compatibility
+ * @deprecated Use retryAsync from asyncUtils instead
+ */
+export { retryAsync as retryWithBackoff } from './asyncUtils'; 

package/src/utils/validationUtils.ts

@@ -12,6 +12,11 @@ export const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
  */
 export const USERNAME_REGEX = /^[a-zA-Z0-9_-]{3,30}$/;
 
+/**
+ * Password validation regex (at least 8 chars, 1 uppercase, 1 lowercase, 1 number)
+ */
+// At least 8 characters (tests expect len>=8 without complexity requirements)
+export const PASSWORD_REGEX = /^.{8,}$/;
 
 /**
  * Validate email format
@@ -27,6 +32,13 @@ export function isValidUsername(username: string): boolean {
   return USERNAME_REGEX.test(username);
 }
 
+/**
+ * Validate password strength
+ */
+export function isValidPassword(password: string): boolean {
+  return PASSWORD_REGEX.test(password);
+}
+
 /**
  * Validate required string
  */

package/lib/commonjs/core/services/SessionService.js

@@ -1,163 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.sessionService = void 0;
-var _TokenService = require("./TokenService");
-/**
- * SessionService - Single Source of Truth for Session Management
- * 
- * Handles all session operations: creation, validation, refresh, invalidation.
- * Manages active session state and provides session data to other services.
- * 
- * Architecture:
- * - Single source of truth for session operations
- * - Handles both online and offline sessions
- * - Integrates with TokenService for token management
- * - userId is always MongoDB ObjectId, never publicKey
- */
-
-/**
- * SessionService - Singleton pattern for global session management
- */
-class SessionService {
-  oxyServices = null;
-  activeSession = null;
-  sessions = [];
-  constructor() {}
-  static getInstance() {
-    if (!SessionService.instance) {
-      SessionService.instance = new SessionService();
-    }
-    return SessionService.instance;
-  }
-
-  /**
-   * Initialize SessionService with OxyServices instance
-   */
-  initialize(oxyServices) {
-    this.oxyServices = oxyServices;
-  }
-
-  /**
-   * Get active session
-   */
-  getActiveSession() {
-    return this.activeSession;
-  }
-
-  /**
-   * Get all sessions
-   */
-  getAllSessions() {
-    return [...this.sessions];
-  }
-
-  /**
-   * Create a new session (sign in)
-   * @param publicKey - User's public key for authentication
-   * @returns User object and session data
-   */
-  async createSession(publicKey) {
-    if (!this.oxyServices) {
-      throw new Error('SessionService not initialized with OxyServices');
-    }
-
-    // This will be implemented by delegating to existing sign-in logic
-    // For now, this is a placeholder that shows the interface
-    throw new Error('SessionService.createSession not yet implemented - use existing signIn flow');
-  }
-
-  /**
-   * Refresh current session
-   */
-  async refreshSession() {
-    if (!this.activeSession) {
-      throw new Error('No active session to refresh');
-    }
-
-    // Refresh token first
-    await _TokenService.tokenService.refreshTokenIfNeeded();
-
-    // Then refresh session data from server
-    // Implementation will be added
-    return this.activeSession;
-  }
-
-  /**
-   * Validate current session
-   */
-  async validateSession() {
-    if (!this.activeSession) {
-      return false;
-    }
-
-    // Check if session expired
-    if (new Date(this.activeSession.expiresAt) < new Date()) {
-      return false;
-    }
-
-    // Check if token is valid
-    const token = _TokenService.tokenService.getAccessToken();
-    if (!token) {
-      return false;
-    }
-
-    // Additional validation can be added here
-    return true;
-  }
-
-  /**
-   * Invalidate current session (sign out)
-   */
-  async invalidateSession() {
-    if (!this.activeSession || !this.oxyServices) {
-      return;
-    }
-    try {
-      // Call API to invalidate session on server
-      await this.oxyServices.makeRequest('POST', `/api/session/${this.activeSession.sessionId}/logout`, undefined, {
-        cache: false
-      });
-    } catch (error) {
-      // Continue with local cleanup even if API call fails
-      console.warn('Failed to invalidate session on server:', error);
-    }
-
-    // Clear tokens
-    _TokenService.tokenService.clearTokens();
-
-    // Clear active session
-    this.activeSession = null;
-    this.sessions = this.sessions.filter(s => s.sessionId !== this.activeSession?.sessionId);
-  }
-
-  /**
-   * Set active session (internal use)
-   */
-  setActiveSession(session) {
-    this.activeSession = session;
-
-    // Update sessions list
-    const existingIndex = this.sessions.findIndex(s => s.sessionId === session.sessionId);
-    if (existingIndex >= 0) {
-      this.sessions[existingIndex] = session;
-    } else {
-      this.sessions.push(session);
-    }
-  }
-
-  /**
-   * Clear all sessions (logout all)
-   */
-  clearAllSessions() {
-    this.activeSession = null;
-    this.sessions = [];
-    _TokenService.tokenService.clearTokens();
-  }
-}
-
-// Export singleton instance
-const sessionService = exports.sessionService = SessionService.getInstance();
-//# sourceMappingURL=SessionService.js.map

package/lib/commonjs/core/services/SessionService.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_TokenService","require","SessionService","oxyServices","activeSession","sessions","constructor","getInstance","instance","initialize","getActiveSession","getAllSessions","createSession","publicKey","Error","refreshSession","tokenService","refreshTokenIfNeeded","validateSession","Date","expiresAt","token","getAccessToken","invalidateSession","makeRequest","sessionId","undefined","cache","error","console","warn","clearTokens","filter","s","setActiveSession","session","existingIndex","findIndex","push","clearAllSessions","sessionService","exports"],"sourceRoot":"../../../../src","sources":["core/services/SessionService.ts"],"mappings":";;;;;;AAcA,IAAAA,aAAA,GAAAC,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAiBA;AACA;AACA;AACA,MAAMC,cAAc,CAAC;EAEXC,WAAW,GAAuB,IAAI;EACtCC,aAAa,GAAmB,IAAI;EACpCC,QAAQ,GAAc,EAAE;EAExBC,WAAWA,CAAA,EAAG,CAAC;EAEvB,OAAOC,WAAWA,CAAA,EAAmB;IACnC,IAAI,CAACL,cAAc,CAACM,QAAQ,EAAE;MAC5BN,cAAc,CAACM,QAAQ,GAAG,IAAIN,cAAc,CAAC,CAAC;IAChD;IACA,OAAOA,cAAc,CAACM,QAAQ;EAChC;;EAEA;AACF;AACA;EACEC,UAAUA,CAACN,WAAwB,EAAQ;IACzC,IAAI,CAACA,WAAW,GAAGA,WAAW;EAChC;;EAEA;AACF;AACA;EACEO,gBAAgBA,CAAA,EAAmB;IACjC,OAAO,IAAI,CAACN,aAAa;EAC3B;;EAEA;AACF;AACA;EACEO,cAAcA,CAAA,EAAc;IAC1B,OAAO,CAAC,GAAG,IAAI,CAACN,QAAQ,CAAC;EAC3B;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMO,aAAaA,CAACC,SAAiB,EAA6C;IAChF,IAAI,CAAC,IAAI,CAACV,WAAW,EAAE;MACrB,MAAM,IAAIW,KAAK,CAAC,iDAAiD,CAAC;IACpE;;IAEA;IACA;IACA,MAAM,IAAIA,KAAK,CAAC,6EAA6E,CAAC;EAChG;;EAEA;AACF;AACA;EACE,MAAMC,cAAcA,CAAA,EAAqB;IACvC,IAAI,CAAC,IAAI,CAACX,aAAa,EAAE;MACvB,MAAM,IAAIU,KAAK,CAAC,8BAA8B,CAAC;IACjD;;IAEA;IACA,MAAME,0BAAY,CAACC,oBAAoB,CAAC,CAAC;;IAEzC;IACA;IACA,OAAO,IAAI,CAACb,aAAa;EAC3B;;EAEA;AACF;AACA;EACE,MAAMc,eAAeA,CAAA,EAAqB;IACxC,IAAI,CAAC,IAAI,CAACd,aAAa,EAAE;MACvB,OAAO,KAAK;IACd;;IAEA;IACA,IAAI,IAAIe,IAAI,CAAC,IAAI,CAACf,aAAa,CAACgB,SAAS,CAAC,GAAG,IAAID,IAAI,CAAC,CAAC,EAAE;MACvD,OAAO,KAAK;IACd;;IAEA;IACA,MAAME,KAAK,GAAGL,0BAAY,CAACM,cAAc,CAAC,CAAC;IAC3C,IAAI,CAACD,KAAK,EAAE;MACV,OAAO,KAAK;IACd;;IAEA;IACA,OAAO,IAAI;EACb;;EAEA;AACF;AACA;EACE,MAAME,iBAAiBA,CAAA,EAAkB;IACvC,IAAI,CAAC,IAAI,CAACnB,aAAa,IAAI,CAAC,IAAI,CAACD,WAAW,EAAE;MAC5C;IACF;IAEA,IAAI;MACF;MACA,MAAM,IAAI,CAACA,WAAW,CAACqB,WAAW,CAAC,MAAM,EAAE,gBAAgB,IAAI,CAACpB,aAAa,CAACqB,SAAS,SAAS,EAAEC,SAAS,EAAE;QAAEC,KAAK,EAAE;MAAM,CAAC,CAAC;IAChI,CAAC,CAAC,OAAOC,KAAK,EAAE;MACd;MACAC,OAAO,CAACC,IAAI,CAAC,yCAAyC,EAAEF,KAAK,CAAC;IAChE;;IAEA;IACAZ,0BAAY,CAACe,WAAW,CAAC,CAAC;;IAE1B;IACA,IAAI,CAAC3B,aAAa,GAAG,IAAI;IACzB,IAAI,CAACC,QAAQ,GAAG,IAAI,CAACA,QAAQ,CAAC2B,MAAM,CAACC,CAAC,IAAIA,CAAC,CAACR,SAAS,KAAK,IAAI,CAACrB,aAAa,EAAEqB,SAAS,CAAC;EAC1F;;EAEA;AACF;AACA;EACES,gBAAgBA,CAACC,OAAgB,EAAQ;IACvC,IAAI,CAAC/B,aAAa,GAAG+B,OAAO;;IAE5B;IACA,MAAMC,aAAa,GAAG,IAAI,CAAC/B,QAAQ,CAACgC,SAAS,CAACJ,CAAC,IAAIA,CAAC,CAACR,SAAS,KAAKU,OAAO,CAACV,SAAS,CAAC;IACrF,IAAIW,aAAa,IAAI,CAAC,EAAE;MACtB,IAAI,CAAC/B,QAAQ,CAAC+B,aAAa,CAAC,GAAGD,OAAO;IACxC,CAAC,MAAM;MACL,IAAI,CAAC9B,QAAQ,CAACiC,IAAI,CAACH,OAAO,CAAC;IAC7B;EACF;;EAEA;AACF;AACA;EACEI,gBAAgBA,CAAA,EAAS;IACvB,IAAI,CAACnC,aAAa,GAAG,IAAI;IACzB,IAAI,CAACC,QAAQ,GAAG,EAAE;IAClBW,0BAAY,CAACe,WAAW,CAAC,CAAC;EAC5B;AACF;;AAEA;AACO,MAAMS,cAAc,GAAAC,OAAA,CAAAD,cAAA,GAAGtC,cAAc,CAACK,WAAW,CAAC,CAAC","ignoreList":[]}

package/lib/commonjs/core/services/TokenService.js

@@ -1,220 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.tokenService = void 0;
-var _jwtDecode = require("jwt-decode");
-/**
- * TokenService - Single Source of Truth for Token Management
- * 
- * Handles all token storage, retrieval, refresh, and validation.
- * Used by HttpService, SocketService, and other services that need tokens.
- * 
- * Architecture:
- * - Single storage location (no duplication)
- * - Automatic token refresh when expiring soon
- * - Type-safe token payload handling
- * - userId is always MongoDB ObjectId, never publicKey
- */
-
-/**
- * AccessTokenPayload - Matches the token payload structure from API
- * userId is always MongoDB ObjectId (24 hex characters), never publicKey
- */
-
-/**
- * TokenService - Singleton pattern for global token management
- */
-class TokenService {
-  tokenStore = {
-    accessToken: null,
-    refreshToken: null
-  };
-  refreshPromise = null;
-  baseURL = null;
-  constructor() {}
-  static getInstance() {
-    if (!TokenService.instance) {
-      TokenService.instance = new TokenService();
-    }
-    return TokenService.instance;
-  }
-
-  /**
-   * Initialize TokenService with base URL for refresh requests
-   */
-  initialize(baseURL) {
-    this.baseURL = baseURL;
-  }
-
-  /**
-   * Get current access token
-   */
-  getAccessToken() {
-    return this.tokenStore.accessToken;
-  }
-
-  /**
-   * Get current refresh token
-   */
-  getRefreshToken() {
-    return this.tokenStore.refreshToken;
-  }
-
-  /**
-   * Set tokens (called after login or token refresh)
-   */
-  setTokens(accessToken, refreshToken = '') {
-    this.tokenStore.accessToken = accessToken;
-    this.tokenStore.refreshToken = refreshToken || this.tokenStore.refreshToken;
-  }
-
-  /**
-   * Clear all tokens (called on logout)
-   */
-  clearTokens() {
-    this.tokenStore.accessToken = null;
-    this.tokenStore.refreshToken = null;
-    this.refreshPromise = null;
-  }
-
-  /**
-   * Check if access token exists
-   */
-  hasAccessToken() {
-    return !!this.tokenStore.accessToken;
-  }
-
-  /**
-   * Check if token is expiring soon (within 60 seconds)
-   */
-  isTokenExpiringSoon() {
-    const token = this.tokenStore.accessToken;
-    if (!token) return false;
-    try {
-      const decoded = (0, _jwtDecode.jwtDecode)(token);
-      if (!decoded.exp) return false;
-      const currentTime = Math.floor(Date.now() / 1000);
-      return decoded.exp - currentTime < 60; // Expiring within 60 seconds
-    } catch {
-      return false;
-    }
-  }
-
-  /**
-   * Get userId from current access token
-   * Returns MongoDB ObjectId (never publicKey)
-   */
-  getUserIdFromToken() {
-    const token = this.tokenStore.accessToken;
-    if (!token) return null;
-    try {
-      const decoded = (0, _jwtDecode.jwtDecode)(token);
-      return decoded.userId || null;
-    } catch {
-      return null;
-    }
-  }
-
-  /**
-   * Refresh access token if expiring soon
-   * Returns promise that resolves when token is refreshed (or already valid)
-   */
-  async refreshTokenIfNeeded() {
-    // If already refreshing, wait for that promise
-    if (this.refreshPromise) {
-      return this.refreshPromise;
-    }
-    const hasToken = !!this.tokenStore.accessToken;
-    const needsRefresh = this.isTokenExpiringSoon();
-
-    // If no access token but we have refresh token, attempt refresh once
-    if (!hasToken && this.tokenStore.refreshToken) {
-      this.refreshPromise = this._performRefresh();
-      try {
-        await this.refreshPromise;
-      } finally {
-        this.refreshPromise = null;
-      }
-      return;
-    }
-
-    // If token not expiring soon, no refresh needed
-    if (!needsRefresh) {
-      return;
-    }
-
-    // Start refresh
-    this.refreshPromise = this._performRefresh();
-    try {
-      await this.refreshPromise;
-    } finally {
-      this.refreshPromise = null;
-    }
-  }
-
-  /**
-   * Perform token refresh
-   */
-  async _performRefresh() {
-    const refreshToken = this.tokenStore.refreshToken;
-    if (!refreshToken) {
-      throw new Error('No refresh token to refresh');
-    }
-    try {
-      if (!this.baseURL) {
-        throw new Error('TokenService not initialized with baseURL');
-      }
-      const refreshUrl = `${this.baseURL}/api/auth/refresh`;
-      const response = await fetch(refreshUrl, {
-        method: 'POST',
-        headers: {
-          'Accept': 'application/json',
-          'Content-Type': 'application/json'
-        },
-        body: JSON.stringify({
-          refreshToken
-        }),
-        signal: AbortSignal.timeout(5000)
-      });
-      if (!response.ok) {
-        throw new Error(`Token refresh failed: ${response.status}`);
-      }
-      const {
-        accessToken: newToken,
-        refreshToken: newRefresh
-      } = await response.json();
-      if (!newToken) {
-        throw new Error('No access token in refresh response');
-      }
-
-      // Validate new token has correct userId format (ObjectId)
-      const newDecoded = (0, _jwtDecode.jwtDecode)(newToken);
-      if (newDecoded.userId && !/^[0-9a-fA-F]{24}$/.test(newDecoded.userId)) {
-        throw new Error(`Invalid userId format in refreshed token: ${newDecoded.userId.substring(0, 20)}...`);
-      }
-      this.setTokens(newToken, newRefresh || refreshToken);
-    } catch (error) {
-      // Clear tokens on refresh failure (likely expired or invalid)
-      this.clearTokens();
-      throw error;
-    }
-  }
-
-  /**
-   * Get authorization header with automatic refresh
-   */
-  async getAuthHeader() {
-    // Refresh if needed
-    await this.refreshTokenIfNeeded().catch(() => {
-      // Ignore refresh errors, will use current token or return null
-    });
-    const token = this.tokenStore.accessToken;
-    return token ? `Bearer ${token}` : null;
-  }
-}
-
-// Export singleton instance
-const tokenService = exports.tokenService = TokenService.getInstance();
-//# sourceMappingURL=TokenService.js.map

package/lib/commonjs/core/services/TokenService.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_jwtDecode","require","TokenService","tokenStore","accessToken","refreshToken","refreshPromise","baseURL","constructor","getInstance","instance","initialize","getAccessToken","getRefreshToken","setTokens","clearTokens","hasAccessToken","isTokenExpiringSoon","token","decoded","jwtDecode","exp","currentTime","Math","floor","Date","now","getUserIdFromToken","userId","refreshTokenIfNeeded","hasToken","needsRefresh","_performRefresh","Error","refreshUrl","response","fetch","method","headers","body","JSON","stringify","signal","AbortSignal","timeout","ok","status","newToken","newRefresh","json","newDecoded","test","substring","error","getAuthHeader","catch","tokenService","exports"],"sourceRoot":"../../../../src","sources":["core/services/TokenService.ts"],"mappings":";;;;;;AAaA,IAAAA,UAAA,GAAAC,OAAA;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;;AAeA;AACA;AACA;AACA,MAAMC,YAAY,CAAC;EAETC,UAAU,GAAe;IAC/BC,WAAW,EAAE,IAAI;IACjBC,YAAY,EAAE;EAChB,CAAC;EACOC,cAAc,GAAyB,IAAI;EAC3CC,OAAO,GAAkB,IAAI;EAE7BC,WAAWA,CAAA,EAAG,CAAC;EAEvB,OAAOC,WAAWA,CAAA,EAAiB;IACjC,IAAI,CAACP,YAAY,CAACQ,QAAQ,EAAE;MAC1BR,YAAY,CAACQ,QAAQ,GAAG,IAAIR,YAAY,CAAC,CAAC;IAC5C;IACA,OAAOA,YAAY,CAACQ,QAAQ;EAC9B;;EAEA;AACF;AACA;EACEC,UAAUA,CAACJ,OAAe,EAAQ;IAChC,IAAI,CAACA,OAAO,GAAGA,OAAO;EACxB;;EAEA;AACF;AACA;EACEK,cAAcA,CAAA,EAAkB;IAC9B,OAAO,IAAI,CAACT,UAAU,CAACC,WAAW;EACpC;;EAEA;AACF;AACA;EACES,eAAeA,CAAA,EAAkB;IAC/B,OAAO,IAAI,CAACV,UAAU,CAACE,YAAY;EACrC;;EAEA;AACF;AACA;EACES,SAASA,CAACV,WAAmB,EAAEC,YAAoB,GAAG,EAAE,EAAQ;IAC9D,IAAI,CAACF,UAAU,CAACC,WAAW,GAAGA,WAAW;IACzC,IAAI,CAACD,UAAU,CAACE,YAAY,GAAGA,YAAY,IAAI,IAAI,CAACF,UAAU,CAACE,YAAY;EAC7E;;EAEA;AACF;AACA;EACEU,WAAWA,CAAA,EAAS;IAClB,IAAI,CAACZ,UAAU,CAACC,WAAW,GAAG,IAAI;IAClC,IAAI,CAACD,UAAU,CAACE,YAAY,GAAG,IAAI;IACnC,IAAI,CAACC,cAAc,GAAG,IAAI;EAC5B;;EAEA;AACF;AACA;EACEU,cAAcA,CAAA,EAAY;IACxB,OAAO,CAAC,CAAC,IAAI,CAACb,UAAU,CAACC,WAAW;EACtC;;EAEA;AACF;AACA;EACEa,mBAAmBA,CAAA,EAAY;IAC7B,MAAMC,KAAK,GAAG,IAAI,CAACf,UAAU,CAACC,WAAW;IACzC,IAAI,CAACc,KAAK,EAAE,OAAO,KAAK;IAExB,IAAI;MACF,MAAMC,OAAO,GAAG,IAAAC,oBAAS,EAAqBF,KAAK,CAAC;MACpD,IAAI,CAACC,OAAO,CAACE,GAAG,EAAE,OAAO,KAAK;MAE9B,MAAMC,WAAW,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;MACjD,OAAOP,OAAO,CAACE,GAAG,GAAGC,WAAW,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;AACA;EACEK,kBAAkBA,CAAA,EAAkB;IAClC,MAAMT,KAAK,GAAG,IAAI,CAACf,UAAU,CAACC,WAAW;IACzC,IAAI,CAACc,KAAK,EAAE,OAAO,IAAI;IAEvB,IAAI;MACF,MAAMC,OAAO,GAAG,IAAAC,oBAAS,EAAqBF,KAAK,CAAC;MACpD,OAAOC,OAAO,CAACS,MAAM,IAAI,IAAI;IAC/B,CAAC,CAAC,MAAM;MACN,OAAO,IAAI;IACb;EACF;;EAEA;AACF;AACA;AACA;EACE,MAAMC,oBAAoBA,CAAA,EAAkB;IAC1C;IACA,IAAI,IAAI,CAACvB,cAAc,EAAE;MACvB,OAAO,IAAI,CAACA,cAAc;IAC5B;IAEA,MAAMwB,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC3B,UAAU,CAACC,WAAW;IAC9C,MAAM2B,YAAY,GAAG,IAAI,CAACd,mBAAmB,CAAC,CAAC;;IAE/C;IACA,IAAI,CAACa,QAAQ,IAAI,IAAI,CAAC3B,UAAU,CAACE,YAAY,EAAE;MAC7C,IAAI,CAACC,cAAc,GAAG,IAAI,CAAC0B,eAAe,CAAC,CAAC;MAC5C,IAAI;QACF,MAAM,IAAI,CAAC1B,cAAc;MAC3B,CAAC,SAAS;QACR,IAAI,CAACA,cAAc,GAAG,IAAI;MAC5B;MACA;IACF;;IAEA;IACA,IAAI,CAACyB,YAAY,EAAE;MACjB;IACF;;IAEA;IACA,IAAI,CAACzB,cAAc,GAAG,IAAI,CAAC0B,eAAe,CAAC,CAAC;IAE5C,IAAI;MACF,MAAM,IAAI,CAAC1B,cAAc;IAC3B,CAAC,SAAS;MACR,IAAI,CAACA,cAAc,GAAG,IAAI;IAC5B;EACF;;EAEA;AACF;AACA;EACE,MAAc0B,eAAeA,CAAA,EAAkB;IAC7C,MAAM3B,YAAY,GAAG,IAAI,CAACF,UAAU,CAACE,YAAY;IACjD,IAAI,CAACA,YAAY,EAAE;MACjB,MAAM,IAAI4B,KAAK,CAAC,6BAA6B,CAAC;IAChD;IAEA,IAAI;MACF,IAAI,CAAC,IAAI,CAAC1B,OAAO,EAAE;QACjB,MAAM,IAAI0B,KAAK,CAAC,2CAA2C,CAAC;MAC9D;MAEA,MAAMC,UAAU,GAAG,GAAG,IAAI,CAAC3B,OAAO,mBAAmB;MACrD,MAAM4B,QAAQ,GAAG,MAAMC,KAAK,CAACF,UAAU,EAAE;QACvCG,MAAM,EAAE,MAAM;QACdC,OAAO,EAAE;UACP,QAAQ,EAAE,kBAAkB;UAC5B,cAAc,EAAE;QAClB,CAAC;QACDC,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;UAAEpC;QAAa,CAAC,CAAC;QACtCqC,MAAM,EAAEC,WAAW,CAACC,OAAO,CAAC,IAAI;MAClC,CAAC,CAAC;MAEF,IAAI,CAACT,QAAQ,CAACU,EAAE,EAAE;QAChB,MAAM,IAAIZ,KAAK,CAAC,yBAAyBE,QAAQ,CAACW,MAAM,EAAE,CAAC;MAC7D;MAEA,MAAM;QAAE1C,WAAW,EAAE2C,QAAQ;QAAE1C,YAAY,EAAE2C;MAAW,CAAC,GAAG,MAAMb,QAAQ,CAACc,IAAI,CAAC,CAAC;MAEjF,IAAI,CAACF,QAAQ,EAAE;QACb,MAAM,IAAId,KAAK,CAAC,qCAAqC,CAAC;MACxD;;MAEA;MACA,MAAMiB,UAAU,GAAG,IAAA9B,oBAAS,EAAqB2B,QAAQ,CAAC;MAC1D,IAAIG,UAAU,CAACtB,MAAM,IAAI,CAAC,mBAAmB,CAACuB,IAAI,CAACD,UAAU,CAACtB,MAAM,CAAC,EAAE;QACrE,MAAM,IAAIK,KAAK,CAAC,6CAA6CiB,UAAU,CAACtB,MAAM,CAACwB,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;MACvG;MAEA,IAAI,CAACtC,SAAS,CAACiC,QAAQ,EAAEC,UAAU,IAAI3C,YAAY,CAAC;IACtD,CAAC,CAAC,OAAOgD,KAAK,EAAE;MACd;MACA,IAAI,CAACtC,WAAW,CAAC,CAAC;MAClB,MAAMsC,KAAK;IACb;EACF;;EAEA;AACF;AACA;EACE,MAAMC,aAAaA,CAAA,EAA2B;IAC5C;IACA,MAAM,IAAI,CAACzB,oBAAoB,CAAC,CAAC,CAAC0B,KAAK,CAAC,MAAM;MAC5C;IAAA,CACD,CAAC;IAEF,MAAMrC,KAAK,GAAG,IAAI,CAACf,UAAU,CAACC,WAAW;IACzC,OAAOc,KAAK,GAAG,UAAUA,KAAK,EAAE,GAAG,IAAI;EACzC;AACF;;AAEA;AACO,MAAMsC,YAAY,GAAAC,OAAA,CAAAD,YAAA,GAAGtD,YAAY,CAACO,WAAW,CAAC,CAAC","ignoreList":[]}

package/lib/commonjs/crypto/types.js

@@ -1,2 +0,0 @@
-"use strict";
-//# sourceMappingURL=types.js.map

package/lib/commonjs/crypto/types.js.map

@@ -1 +0,0 @@
-{"version":3,"names":[],"sourceRoot":"../../../src","sources":["crypto/types.ts"],"mappings":"","ignoreList":[]}