@oxyhq/services 5.17.17 → 5.18.0

package/lib/typescript/core/mixins/OxyServices.features.d.ts

@@ -0,0 +1,229 @@
+/**
+ * Features Methods Mixin
+ *
+ * Provides methods for various features:
+ * - Feedback submission
+ * - Subscription plans
+ * - Saves/Collections
+ * - User history
+ * - FAQ
+ * - User stats
+ * - Achievements
+ */
+import type { OxyServicesBase } from '../OxyServices.base';
+export interface FeedbackPayload {
+    type: 'bug' | 'feature' | 'general' | 'support';
+    title: string;
+    description: string;
+    priority: 'low' | 'medium' | 'high' | 'critical';
+    category: string;
+    contactEmail?: string;
+    systemInfo?: {
+        platform: string;
+        version: string;
+        appVersion: string;
+        userId?: string;
+        username?: string;
+        timestamp: string;
+    };
+}
+export interface FeedbackResult {
+    id: string;
+    status: string;
+    createdAt: string;
+}
+export interface SubscriptionPlan {
+    id: string;
+    name: string;
+    description: string;
+    price: number;
+    currency: string;
+    interval: 'month' | 'year';
+    features: string[];
+}
+export interface SubscriptionResult {
+    subscriptionId: string;
+    status: string;
+    currentPeriodEnd: string;
+}
+export interface SavedItem {
+    id: string;
+    itemId: string;
+    itemType: string;
+    title: string;
+    createdAt: string;
+}
+export interface Collection {
+    id: string;
+    name: string;
+    description?: string;
+    itemCount: number;
+    createdAt: string;
+}
+export interface UserStats {
+    postCount: number;
+    commentCount: number;
+    followerCount: number;
+    followingCount: number;
+    karmaScore?: number;
+}
+export interface HistoryItem {
+    id: string;
+    type: string;
+    title: string;
+    timestamp: string;
+    metadata?: Record<string, any>;
+}
+export interface FAQ {
+    id: string;
+    question: string;
+    answer: string;
+    category: string;
+}
+export interface Achievement {
+    id: string;
+    name: string;
+    description: string;
+    icon: string;
+    unlockedAt?: string;
+}
+export declare function OxyServicesFeaturesMixin<T extends typeof OxyServicesBase>(Base: T): {
+    new (...args: any[]): {
+        /**
+         * Submit user feedback
+         */
+        submitFeedback(payload: FeedbackPayload): Promise<FeedbackResult>;
+        /**
+         * Get available subscription plans
+         */
+        getSubscriptionPlans(): Promise<SubscriptionPlan[]>;
+        /**
+         * Get individual purchasable features
+         */
+        getIndividualFeatures(): Promise<any[]>;
+        /**
+         * Subscribe to a plan
+         */
+        subscribe(planId: string, paymentMethodId?: string): Promise<SubscriptionResult>;
+        /**
+         * Subscribe to an individual feature
+         */
+        subscribeToFeature(featureId: string, paymentMethodId?: string): Promise<SubscriptionResult>;
+        /**
+         * Cancel subscription
+         */
+        cancelSubscription(subscriptionId: string): Promise<void>;
+        /**
+         * Reactivate subscription
+         */
+        reactivateSubscription(subscriptionId: string): Promise<void>;
+        /**
+         * Get current user's subscription
+         */
+        getCurrentSubscription(): Promise<SubscriptionResult | null>;
+        /**
+         * Get user's saved items
+         */
+        getSavedItems(userId?: string): Promise<SavedItem[]>;
+        /**
+         * Get user's collections
+         */
+        getCollections(userId?: string): Promise<Collection[]>;
+        /**
+         * Save an item
+         */
+        saveItem(itemId: string, itemType: string, collectionId?: string): Promise<SavedItem>;
+        /**
+         * Remove an item from saves
+         */
+        removeSavedItem(saveId: string): Promise<void>;
+        /**
+         * Create a collection
+         */
+        createCollection(name: string, description?: string): Promise<Collection>;
+        /**
+         * Delete a collection
+         */
+        deleteCollection(collectionId: string): Promise<void>;
+        /**
+         * Get user statistics
+         */
+        getUserStats(userId: string): Promise<UserStats>;
+        /**
+         * Get user history
+         */
+        getUserHistory(userId?: string, limit?: number, offset?: number): Promise<HistoryItem[]>;
+        /**
+         * Clear user history
+         */
+        clearUserHistory(): Promise<void>;
+        /**
+         * Delete a history item
+         */
+        deleteHistoryItem(itemId: string): Promise<void>;
+        /**
+         * Get FAQs
+         */
+        getFAQs(category?: string): Promise<FAQ[]>;
+        /**
+         * Search FAQs
+         */
+        searchFAQs(query: string): Promise<FAQ[]>;
+        /**
+         * Get user achievements
+         */
+        getUserAchievements(userId?: string): Promise<Achievement[]>;
+        /**
+         * Get all available achievements
+         */
+        getAllAchievements(): Promise<Achievement[]>;
+        /**
+         * Delete user account (requires password confirmation)
+         */
+        deleteAccount(password: string): Promise<void>;
+        httpService: import("../HttpService").HttpService;
+        cloudURL: string;
+        config: import("../OxyServices.base").OxyConfig;
+        makeRequest<T_1>(method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE", url: string, data?: any, options?: import("../HttpService").RequestOptions): Promise<T_1>;
+        getBaseURL(): string;
+        getClient(): import("../HttpService").HttpService;
+        getMetrics(): {
+            totalRequests: number;
+            successfulRequests: number;
+            failedRequests: number;
+            cacheHits: number;
+            cacheMisses: number;
+            averageResponseTime: number;
+        };
+        clearCache(): void;
+        clearCacheEntry(key: string): void;
+        getCacheStats(): {
+            size: number;
+            hits: number;
+            misses: number;
+            hitRate: number;
+        };
+        getCloudURL(): string;
+        setTokens(accessToken: string, refreshToken?: string): void;
+        clearTokens(): void;
+        getCurrentUserId(): string | null;
+        hasValidToken(): boolean;
+        getAccessToken(): string | null;
+        waitForAuth(timeoutMs?: number): Promise<boolean>;
+        withAuthRetry<T_1>(operation: () => Promise<T_1>, operationName: string, options?: {
+            maxRetries?: number;
+            retryDelay?: number;
+            authTimeoutMs?: number;
+        }): Promise<T_1>;
+        validate(): Promise<boolean>;
+        handleError(error: unknown): Error;
+        healthCheck(): Promise<{
+            status: string;
+            users?: number;
+            timestamp?: string;
+            [key: string]: any;
+        }>;
+    };
+    __resetTokensForTests(): void;
+} & T;
+//# sourceMappingURL=OxyServices.features.d.ts.map

package/lib/typescript/core/mixins/OxyServices.features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OxyServices.features.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAI3D,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACrB,CAAC;CACL;AAED,MAAM,WAAW,cAAc;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,GAAG;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAErD,GAAG,EAAE;QAQ1B;;WAEG;gCAC2B,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAcvE;;WAEG;gCAC2B,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAWzD;;WAEG;iCAC4B,OAAO,CAAC,GAAG,EAAE,CAAC;QAW7C;;WAEG;0BACqB,MAAM,oBAAoB,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAStF;;WAEG;sCACiC,MAAM,oBAAoB,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;QASlG;;WAEG;2CACsC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;QAQ/D;;WAEG;+CAC0C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;QAQnE;;WAEG;kCAC6B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAkBlE;;WAEG;+BAC0B,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAU1D;;WAEG;gCAC2B,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QAU5D;;WAEG;yBACoB,MAAM,YAAY,MAAM,iBAAiB,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAU3F;;WAEG;gCAC2B,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;QAMpD;;WAEG;+BAC0B,MAAM,gBAAgB,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;QAS/E;;WAEG;uCACkC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;QAU3D;;WAEG;6BACwB,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAetD;;WAEG;gCAC2B,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAc9F;;WAEG;4BACuB,OAAO,CAAC,IAAI,CAAC;QAMvC;;WAEG;kCAC6B,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;QAUtD;;WAEG;2BACsB,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAYhD;;WAEG;0BACqB,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAe/C;;WAEG;qCACgC,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAUlE;;WAEG;8BACyB,OAAO,CAAC,WAAW,EAAE,CAAC;QAelD;;WAEG;gCAC2B,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA9MxC,CAAV;sBACM,CAAZ;yBACW,CAAC;;;;;;iBAuF4B,CAAC;qBAEjC,CAAZ;;;;;MAyHC"}

package/lib/typescript/core/mixins/OxyServices.fedcm.d.ts

@@ -0,0 +1,195 @@
+import type { OxyServicesBase } from '../OxyServices.base';
+import type { SessionLoginResponse } from '../../models/session';
+export interface FedCMAuthOptions {
+    nonce?: string;
+    context?: 'signin' | 'signup' | 'continue' | 'use';
+}
+export interface FedCMConfig {
+    enabled: boolean;
+    configURL: string;
+    clientId?: string;
+}
+/**
+ * Federated Credential Management (FedCM) Authentication Mixin
+ *
+ * Implements the modern browser-native identity federation API that enables
+ * Google-style cross-domain authentication without third-party cookies.
+ *
+ * Browser Support:
+ * - Chrome 108+
+ * - Safari 16.4+
+ * - Edge 108+
+ * - Firefox: Not yet supported (fallback required)
+ *
+ * Key Features:
+ * - No redirects or popups required
+ * - Browser-native UI prompts
+ * - Privacy-preserving (IdP can't track users)
+ * - Automatic SSO across domains
+ * - Silent re-authentication support
+ *
+ * @see https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API
+ */
+export declare function OxyServicesFedCMMixin<T extends typeof OxyServicesBase>(Base: T): {
+    new (...args: any[]): {
+        /**
+         * Instance method to check FedCM support
+         */
+        isFedCMSupported(): boolean;
+        /**
+         * Sign in using FedCM (Federated Credential Management API)
+         *
+         * This provides a Google-style authentication experience:
+         * - Browser shows native "Sign in with Oxy" prompt
+         * - No redirect or popup required
+         * - User approves → credential exchange happens in browser
+         * - All apps automatically get SSO after first sign-in
+         *
+         * @param options - Authentication options
+         * @returns Session with access token and user data
+         * @throws {OxyAuthenticationError} If FedCM not supported or user cancels
+         *
+         * @example
+         * ```typescript
+         * try {
+         *   const session = await oxyServices.signInWithFedCM();
+         *   console.log('Signed in:', session.user);
+         * } catch (error) {
+         *   // Fallback to popup or redirect auth
+         *   await oxyServices.signInWithPopup();
+         * }
+         * ```
+         */
+        signInWithFedCM(options?: FedCMAuthOptions): Promise<SessionLoginResponse>;
+        /**
+         * Silent sign-in using FedCM
+         *
+         * Attempts to automatically re-authenticate the user without any UI.
+         * This is what enables "instant sign-in" across all Oxy domains after
+         * the user has signed in once.
+         *
+         * The browser will:
+         * 1. Check if user has previously signed in to Oxy
+         * 2. Check if user is still signed in at auth.oxy.so
+         * 3. If yes, automatically provide credential without prompting
+         *
+         * @returns Session if user is already signed in, null otherwise
+         *
+         * @example
+         * ```typescript
+         * // On app startup
+         * useEffect(() => {
+         *   const checkAuth = async () => {
+         *     const session = await oxyServices.silentSignInWithFedCM();
+         *     if (session) {
+         *       setUser(session.user);
+         *     } else {
+         *       // Show sign-in button
+         *     }
+         *   };
+         *   checkAuth();
+         * }, []);
+         * ```
+         */
+        silentSignInWithFedCM(): Promise<SessionLoginResponse | null>;
+        /**
+         * Request identity credential from browser using FedCM API
+         *
+         * @private
+         */
+        requestIdentityCredential(options: {
+            configURL: string;
+            clientId: string;
+            nonce: string;
+            context?: string;
+            mediation?: "silent" | "optional" | "required";
+        }): Promise<{
+            token: string;
+        } | null>;
+        /**
+         * Exchange FedCM ID token for Oxy session
+         *
+         * The ID token is a JWT issued by auth.oxy.so that proves the user's
+         * identity. We exchange it for a full Oxy session with access token.
+         *
+         * @private
+         */
+        exchangeIdTokenForSession(idToken: string): Promise<SessionLoginResponse>;
+        /**
+         * Revoke FedCM credential (sign out)
+         *
+         * This tells the browser to forget the FedCM credential for this app.
+         * The user will need to re-authenticate next time.
+         */
+        revokeFedCMCredential(): Promise<void>;
+        /**
+         * Get configuration for FedCM
+         *
+         * @returns FedCM configuration with browser support info
+         */
+        getFedCMConfig(): FedCMConfig;
+        /**
+         * Generate a cryptographically secure nonce for FedCM
+         *
+         * @private
+         */
+        generateNonce(): string;
+        /**
+         * Get the client ID for this origin
+         *
+         * @private
+         */
+        getClientId(): string;
+        httpService: import("../HttpService").HttpService;
+        cloudURL: string;
+        config: import("../OxyServices.base").OxyConfig;
+        makeRequest<T_1>(method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE", url: string, data?: any, options?: import("../HttpService").RequestOptions): Promise<T_1>;
+        getBaseURL(): string;
+        getClient(): import("../HttpService").HttpService;
+        getMetrics(): {
+            totalRequests: number;
+            successfulRequests: number;
+            failedRequests: number;
+            cacheHits: number;
+            cacheMisses: number;
+            averageResponseTime: number;
+        };
+        clearCache(): void;
+        clearCacheEntry(key: string): void;
+        getCacheStats(): {
+            size: number;
+            hits: number;
+            misses: number;
+            hitRate: number;
+        };
+        getCloudURL(): string;
+        setTokens(accessToken: string, refreshToken?: string): void;
+        clearTokens(): void;
+        getCurrentUserId(): string | null;
+        hasValidToken(): boolean;
+        getAccessToken(): string | null;
+        waitForAuth(timeoutMs?: number): Promise<boolean>;
+        withAuthRetry<T_1>(operation: () => Promise<T_1>, operationName: string, options?: {
+            maxRetries?: number;
+            retryDelay?: number;
+            authTimeoutMs?: number;
+        }): Promise<T_1>;
+        validate(): Promise<boolean>;
+        handleError(error: unknown): Error;
+        healthCheck(): Promise<{
+            status: string;
+            users?: number;
+            timestamp?: string;
+            [key: string]: any;
+        }>;
+    };
+    readonly DEFAULT_CONFIG_URL: "https://auth.oxy.so/fedcm.json";
+    readonly FEDCM_TIMEOUT: 60000;
+    /**
+     * Check if FedCM is supported in the current browser
+     */
+    isFedCMSupported(): boolean;
+    __resetTokensForTests(): void;
+} & T;
+export { OxyServicesFedCMMixin as FedCMMixin };
+//# sourceMappingURL=OxyServices.fedcm.d.ts.map

package/lib/typescript/core/mixins/OxyServices.fedcm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OxyServices.fedcm.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.fedcm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC;CACpD;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEtD,GAAG,EAAE;QAc5B;;WAEG;4BACiB,OAAO;QAI3B;;;;;;;;;;;;;;;;;;;;;;;WAuBG;kCAC4B,gBAAgB,GAAQ,OAAO,CAAC,oBAAoB,CAAC;QA2CpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;iCAC4B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAiCnE;;;;WAIG;2CAC6C;YAC9C,SAAS,EAAE,MAAM,CAAC;YAClB,QAAQ,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,SAAS,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;SAChD,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QA+BrC;;;;;;;WAOG;2CAC6C,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAStF;;;;;WAKG;iCAC4B,OAAO,CAAC,IAAI,CAAC;QAmB5C;;;;WAIG;0BACe,WAAW;QAQ7B;;;;WAIG;yBACqB,MAAM;QAQ9B;;;;WAIG;uBACmB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAhH3B,CAAF;sBAEM,CAAC;yBAA6B,CAAC;;;;;;iBAgH/B,CAAC;qBAEJ,CAAD;;;;iCA3Q2C,gCAAgC;4BACrC,KAAK;IAE5C;;OAEG;wBACwB,OAAO;;MAwQnC;AAGD,OAAO,EAAE,qBAAqB,IAAI,UAAU,EAAE,CAAC"}

package/lib/typescript/core/mixins/OxyServices.karma.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyServices.karma.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.karma.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEtD,GAAG,EAAE;QAG1B;;WAEG;6BACwB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWhD;;WAEG;0BACqB,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAW9E;;;;WAIG;kCAC6B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWrD;;;;;;WAMG;oCAC+B,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAexF;;;WAGG;+BAC0B,OAAO,CAAC,GAAG,CAAC;QAWzC;;;WAGG;yBACoB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAa6pF,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAF9yL"}
+{"version":3,"file":"OxyServices.karma.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.karma.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEtD,GAAG,EAAE;QAG1B;;WAEG;6BACwB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWhD;;WAEG;0BACqB,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAW9E;;;;WAIG;kCAC6B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWrD;;;;;;WAMG;oCAC+B,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAexF;;;WAGG;+BAC0B,OAAO,CAAC,GAAG,CAAC;QAWzC;;;WAGG;yBACoB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAa87F,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAF/kM"}

package/lib/typescript/core/mixins/OxyServices.language.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyServices.language.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.language.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEzD,GAAG,EAAE;QAG1B;;WAEG;sBACwB,OAAO,CAAC;YACjC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;SAC5C,CAAC;QAuCF;;;;WAIG;8CACwC,MAAM,GAAmB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QA8B1F;;;;WAIG;sDACgD,MAAM,GAAmB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAK5G;;;;WAIG;kDAC4C,MAAM,GAAmB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAM9F;;;;WAIG;wDACkD,MAAM,GAAmB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAQqkB,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAFvxH"}
+{"version":3,"file":"OxyServices.language.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.language.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEzD,GAAG,EAAE;QAG1B;;WAEG;sBACwB,OAAO,CAAC;YACjC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;SAC5C,CAAC;QAuCF;;;;WAIG;8CACwC,MAAM,GAAmB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QA8B1F;;;;WAIG;sDACgD,MAAM,GAAmB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAK5G;;;;WAIG;kDAC4C,MAAM,GAAmB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAM9F;;;;WAIG;wDACkD,MAAM,GAAmB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAQs2B,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAFxjI"}

package/lib/typescript/core/mixins/OxyServices.location.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyServices.location.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.location.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEzD,GAAG,EAAE;QAI1B;;;;;WAKG;iCAC4B,MAAM,aAAa,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWvE;;;;WAIG;gCAC2B,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAamyI,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAFt8O"}
+{"version":3,"file":"OxyServices.location.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.location.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAEzD,GAAG,EAAE;QAI1B;;;;;WAKG;iCAC4B,MAAM,aAAa,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWvE;;;;WAIG;gCAC2B,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAaokJ,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAFvuP"}

package/lib/typescript/core/mixins/OxyServices.payment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyServices.payment.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.payment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAExD,GAAG,EAAE;QAI1B;;;;WAIG;4BACuB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QAQ5C;;;;WAIG;8BACyB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWjD;;;WAGG;2BACsB,OAAO,CAAC,GAAG,EAAE,CAAC;QAUvC;;;;WAIG;gCAC2B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWnD;;;WAGG;sCACiC,OAAO,CAAC,GAAG,CAAC;QAYhD;;;;WAIG;0BACqB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAW7C;;;WAGG;gCAC2B,OAAO,CAAC,GAAG,CAAC;QAY1C;;;;;WAKG;sCACiC,MAAM,YAAY;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAiBxG;;;;WAIG;mDAC8C;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAcg5B,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAFjmI"}
+{"version":3,"file":"OxyServices.payment.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.payment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAExD,GAAG,EAAE;QAI1B;;;;WAIG;4BACuB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QAQ5C;;;;WAIG;8BACyB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWjD;;;WAGG;2BACsB,OAAO,CAAC,GAAG,EAAE,CAAC;QAUvC;;;;WAIG;gCAC2B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAWnD;;;WAGG;sCACiC,OAAO,CAAC,GAAG,CAAC;QAYhD;;;;WAIG;0BACqB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAW7C;;;WAGG;gCAC2B,OAAO,CAAC,GAAG,CAAC;QAY1C;;;;;WAKG;sCACiC,MAAM,YAAY;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAiBxG;;;;WAIG;mDAC8C;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAcirC,CAAC;sBAA0B,CAAC;yBAA6B,CAAC;;;;;;iBAAuhG,CAAC;qBAAwB,CAAC;;;;;MAFl4I"}

package/lib/typescript/core/mixins/OxyServices.popup.d.ts

@@ -0,0 +1,206 @@
+import type { OxyServicesBase } from '../OxyServices.base';
+import type { SessionLoginResponse } from '../../models/session';
+export interface PopupAuthOptions {
+    width?: number;
+    height?: number;
+    timeout?: number;
+    mode?: 'login' | 'signup';
+}
+export interface SilentAuthOptions {
+    timeout?: number;
+}
+/**
+ * Popup-based Cross-Domain Authentication Mixin
+ *
+ * Implements OAuth2-style authentication using popup windows and postMessage.
+ * This is the primary authentication method for modern browsers, providing a
+ * Google-like experience without full page redirects.
+ *
+ * Flow:
+ * 1. Opens small popup window to auth.oxy.so
+ * 2. User signs in (auth.oxy.so sets its own first-party cookie)
+ * 3. auth.oxy.so sends token back via postMessage
+ * 4. Popup closes, parent app has the session
+ *
+ * Features:
+ * - No full page redirect (preserves app state)
+ * - Works across different domains (homiio.com, mention.earth, etc.)
+ * - Silent refresh using hidden iframe for seamless SSO
+ * - CSRF protection via state parameter
+ * - XSS protection via origin validation
+ *
+ * Browser Support: All modern browsers (IE11+)
+ */
+export declare function OxyServicesPopupAuthMixin<T extends typeof OxyServicesBase>(Base: T): {
+    new (...args: any[]): {
+        /**
+         * Sign in using popup window
+         *
+         * Opens a centered popup window to auth.oxy.so where the user can sign in.
+         * The popup automatically closes after successful authentication and the
+         * session is returned to the parent window.
+         *
+         * @param options - Popup configuration options
+         * @returns Session with access token and user data
+         * @throws {OxyAuthenticationError} If popup is blocked or auth fails
+         *
+         * @example
+         * ```typescript
+         * const handleSignIn = async () => {
+         *   try {
+         *     const session = await oxyServices.signInWithPopup();
+         *     console.log('Signed in:', session.user);
+         *   } catch (error) {
+         *     if (error.message.includes('blocked')) {
+         *       alert('Please allow popups for this site');
+         *     }
+         *   }
+         * };
+         * ```
+         */
+        signInWithPopup(options?: PopupAuthOptions): Promise<SessionLoginResponse>;
+        /**
+         * Sign up using popup window
+         *
+         * Same as signInWithPopup but opens the signup page by default.
+         *
+         * @param options - Popup configuration options
+         * @returns Session with access token and user data
+         */
+        signUpWithPopup(options?: PopupAuthOptions): Promise<SessionLoginResponse>;
+        /**
+         * Silent sign-in using hidden iframe
+         *
+         * Attempts to automatically re-authenticate the user without any UI.
+         * This is what enables seamless SSO across all Oxy domains.
+         *
+         * How it works:
+         * 1. Creates hidden iframe pointing to auth.oxy.so/silent-auth
+         * 2. If user has valid session at auth.oxy.so, it sends token via postMessage
+         * 3. If not, iframe responds with null (no error thrown)
+         *
+         * This should be called on app startup to check for existing sessions.
+         *
+         * @param options - Silent auth options
+         * @returns Session if user is signed in, null otherwise
+         *
+         * @example
+         * ```typescript
+         * useEffect(() => {
+         *   const checkAuth = async () => {
+         *     const session = await oxyServices.silentSignIn();
+         *     if (session) {
+         *       setUser(session.user);
+         *     }
+         *   };
+         *   checkAuth();
+         * }, []);
+         * ```
+         */
+        silentSignIn(options?: SilentAuthOptions): Promise<SessionLoginResponse | null>;
+        /**
+         * Open a centered popup window
+         *
+         * @private
+         */
+        openCenteredPopup(url: string, title: string, width: number, height: number): Window | null;
+        /**
+         * Wait for authentication response from popup
+         *
+         * @private
+         */
+        waitForPopupAuth(popup: Window, expectedState: string, timeout: number): Promise<SessionLoginResponse>;
+        /**
+         * Wait for authentication response from iframe
+         *
+         * @private
+         */
+        waitForIframeAuth(iframe: HTMLIFrameElement, timeout: number, expectedOrigin: string): Promise<SessionLoginResponse | null>;
+        /**
+         * Build authentication URL with query parameters
+         *
+         * @private
+         */
+        buildAuthUrl(params: {
+            mode: string;
+            state: string;
+            nonce: string;
+            clientId: string;
+            redirectUri: string;
+        }): string;
+        /**
+         * Generate cryptographically secure state for CSRF protection
+         *
+         * @private
+         */
+        generateState(): string;
+        /**
+         * Generate nonce for replay attack prevention
+         *
+         * @private
+         */
+        generateNonce(): string;
+        /**
+         * Store auth state in session storage
+         *
+         * @private
+         */
+        storeAuthState(state: string, nonce: string): void;
+        /**
+         * Clear auth state from session storage
+         *
+         * @private
+         */
+        clearAuthState(state: string): void;
+        httpService: import("../HttpService").HttpService;
+        cloudURL: string;
+        config: import("../OxyServices.base").OxyConfig;
+        makeRequest<T_1>(method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE", url: string, data?: any, options?: import("../HttpService").RequestOptions): Promise<T_1>;
+        getBaseURL(): string;
+        getClient(): import("../HttpService").HttpService;
+        getMetrics(): {
+            totalRequests: number;
+            successfulRequests: number;
+            failedRequests: number;
+            cacheHits: number;
+            cacheMisses: number;
+            averageResponseTime: number;
+        };
+        clearCache(): void;
+        clearCacheEntry(key: string): void;
+        getCacheStats(): {
+            size: number;
+            hits: number;
+            misses: number;
+            hitRate: number;
+        };
+        getCloudURL(): string;
+        setTokens(accessToken: string, refreshToken?: string): void;
+        clearTokens(): void;
+        getCurrentUserId(): string | null;
+        hasValidToken(): boolean;
+        getAccessToken(): string | null;
+        waitForAuth(timeoutMs?: number): Promise<boolean>;
+        withAuthRetry<T_1>(operation: () => Promise<T_1>, operationName: string, options?: {
+            maxRetries?: number;
+            retryDelay?: number;
+            authTimeoutMs?: number;
+        }): Promise<T_1>;
+        validate(): Promise<boolean>;
+        handleError(error: unknown): Error;
+        healthCheck(): Promise<{
+            status: string;
+            users?: number;
+            timestamp?: string;
+            [key: string]: any;
+        }>;
+    };
+    readonly AUTH_URL: "https://auth.oxy.so";
+    readonly POPUP_WIDTH: 500;
+    readonly POPUP_HEIGHT: 700;
+    readonly POPUP_TIMEOUT: 60000;
+    readonly SILENT_TIMEOUT: 5000;
+    __resetTokensForTests(): void;
+} & T;
+export { OxyServicesPopupAuthMixin as PopupAuthMixin };
+//# sourceMappingURL=OxyServices.popup.d.ts.map

package/lib/typescript/core/mixins/OxyServices.popup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OxyServices.popup.d.ts","sourceRoot":"","sources":["../../../../src/core/mixins/OxyServices.popup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,OAAO,eAAe,EAAE,IAAI,EAAE,CAAC;kBAE1D,GAAG,EAAE;QAS5B;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;kCAC4B,gBAAgB,GAAQ,OAAO,CAAC,oBAAoB,CAAC;QAgDpF;;;;;;;WAOG;kCAC4B,gBAAgB,GAAQ,OAAO,CAAC,oBAAoB,CAAC;QAIpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;+BACyB,iBAAiB,GAAQ,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAoCzF;;;;WAIG;+BAC2B,MAAM,SAAS,MAAM,SAAS,MAAM,UAAU,MAAM,GAAG,MAAM,GAAG,IAAI;QAoBlG;;;;WAIG;gCAEM,MAAM,iBACE,MAAM,WACZ,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC;QA0DhC;;;;WAIG;kCAEO,iBAAiB,WAChB,MAAM,kBACC,MAAM,GACrB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAgCvC;;;;WAIG;6BACyB;YAC1B,IAAI,EAAE,MAAM,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;YACd,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;SACrB,GAAG,MAAM;QAUV;;;;WAIG;yBACqB,MAAM;QAO9B;;;;WAIG;yBACqB,MAAM;QAO9B;;;;WAIG;8BAC0B,MAAM,SAAS,MAAM,GAAG,IAAI;QAMzD;;;;WAIG;8BAC0B,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAhND,CAAC;sBAA0B,CAAC;yBAElD,CAAA;;;;;;iBAsHf,CAAH;qBAEI,CAAC;;;;uBAxQ4B,qBAAqB;0BAClB,GAAG;2BACF,GAAG;4BACF,KAAK;6BACJ,IAAI;;MAgW7C;AAGD,OAAO,EAAE,yBAAyB,IAAI,cAAc,EAAE,CAAC"}