@oxyhq/services 5.27.0 → 6.0.1

package/lib/module/core/mixins/OxyServices.popup.js

@@ -1,390 +0,0 @@
-"use strict";
-
-import { OxyAuthenticationError } from "../OxyServices.errors.js";
-import { createDebugLogger } from "../../shared/utils/debugUtils.js";
-const debug = createDebugLogger('PopupAuth');
-/**
- * Popup-based Cross-Domain Authentication Mixin
- *
- * Implements OAuth2-style authentication using popup windows and postMessage.
- * This is the primary authentication method for modern browsers, providing a
- * Google-like experience without full page redirects.
- *
- * Flow:
- * 1. Opens small popup window to auth.oxy.so
- * 2. User signs in (auth.oxy.so sets its own first-party cookie)
- * 3. auth.oxy.so sends token back via postMessage
- * 4. Popup closes, parent app has the session
- *
- * Features:
- * - No full page redirect (preserves app state)
- * - Works across different domains (homiio.com, mention.earth, etc.)
- * - Silent refresh using hidden iframe for seamless SSO
- * - CSRF protection via state parameter
- * - XSS protection via origin validation
- *
- * Browser Support: All modern browsers (IE11+)
- */
-export function OxyServicesPopupAuthMixin(Base) {
-  return class extends Base {
-    constructor(...args) {
-      super(...args);
-    }
-    static AUTH_URL = 'https://auth.oxy.so';
-    static POPUP_WIDTH = 500;
-    static POPUP_HEIGHT = 700;
-    static POPUP_TIMEOUT = 60000; // 1 minute
-    static SILENT_TIMEOUT = 5000; // 5 seconds
-
-    /**
-     * Sign in using popup window
-     *
-     * Opens a centered popup window to auth.oxy.so where the user can sign in.
-     * The popup automatically closes after successful authentication and the
-     * session is returned to the parent window.
-     *
-     * @param options - Popup configuration options
-     * @returns Session with access token and user data
-     * @throws {OxyAuthenticationError} If popup is blocked or auth fails
-     *
-     * @example
-     * ```typescript
-     * const handleSignIn = async () => {
-     *   try {
-     *     const session = await oxyServices.signInWithPopup();
-     *     console.log('Signed in:', session.user);
-     *   } catch (error) {
-     *     if (error.message.includes('blocked')) {
-     *       alert('Please allow popups for this site');
-     *     }
-     *   }
-     * };
-     * ```
-     */
-    async signInWithPopup(options = {}) {
-      if (typeof window === 'undefined') {
-        throw new OxyAuthenticationError('Popup authentication requires browser environment');
-      }
-      const state = this.generateState();
-      const nonce = this.generateNonce();
-
-      // Store state for CSRF protection
-      this.storeAuthState(state, nonce);
-      const width = options.width || this.constructor.POPUP_WIDTH;
-      const height = options.height || this.constructor.POPUP_HEIGHT;
-      const timeout = options.timeout || this.constructor.POPUP_TIMEOUT;
-      const mode = options.mode || 'login';
-      const authUrl = this.buildAuthUrl({
-        mode,
-        state,
-        nonce,
-        clientId: window.location.origin,
-        redirectUri: `${this.constructor.AUTH_URL}/auth/callback`
-      });
-      const popup = this.openCenteredPopup(authUrl, 'Oxy Sign In', width, height);
-      if (!popup) {
-        throw new OxyAuthenticationError('Popup blocked. Please allow popups for this site and try again.');
-      }
-      try {
-        const session = await this.waitForPopupAuth(popup, state, timeout);
-
-        // Store access token if present
-        if (session && session.accessToken) {
-          this.httpService.setTokens(session.accessToken);
-        }
-
-        // Fetch user data using the session ID
-        // The callback page only sends sessionId/accessToken, not user data
-        if (session && session.sessionId && !session.user) {
-          try {
-            const userData = await this.makeRequest('GET', `/api/session/user/${session.sessionId}`, undefined, {
-              cache: false
-            });
-            if (userData) {
-              session.user = userData;
-            }
-          } catch (userError) {
-            debug.warn('Failed to fetch user data:', userError);
-            // Continue without user data - caller can fetch separately
-          }
-        }
-        return session;
-      } catch (error) {
-        throw error;
-      } finally {
-        this.clearAuthState(state);
-      }
-    }
-
-    /**
-     * Sign up using popup window
-     *
-     * Same as signInWithPopup but opens the signup page by default.
-     *
-     * @param options - Popup configuration options
-     * @returns Session with access token and user data
-     */
-    async signUpWithPopup(options = {}) {
-      return this.signInWithPopup({
-        ...options,
-        mode: 'signup'
-      });
-    }
-
-    /**
-     * Silent sign-in using hidden iframe
-     *
-     * Attempts to automatically re-authenticate the user without any UI.
-     * This is what enables seamless SSO across all Oxy domains.
-     *
-     * How it works:
-     * 1. Creates hidden iframe pointing to auth.oxy.so/silent-auth
-     * 2. If user has valid session at auth.oxy.so, it sends token via postMessage
-     * 3. If not, iframe responds with null (no error thrown)
-     *
-     * This should be called on app startup to check for existing sessions.
-     *
-     * @param options - Silent auth options
-     * @returns Session if user is signed in, null otherwise
-     *
-     * @example
-     * ```typescript
-     * useEffect(() => {
-     *   const checkAuth = async () => {
-     *     const session = await oxyServices.silentSignIn();
-     *     if (session) {
-     *       setUser(session.user);
-     *     }
-     *   };
-     *   checkAuth();
-     * }, []);
-     * ```
-     */
-    async silentSignIn(options = {}) {
-      if (typeof window === 'undefined') {
-        return null;
-      }
-      const timeout = options.timeout || this.constructor.SILENT_TIMEOUT;
-      const nonce = this.generateNonce();
-      const clientId = window.location.origin;
-      const iframe = document.createElement('iframe');
-      iframe.style.display = 'none';
-      iframe.style.position = 'absolute';
-      iframe.style.width = '0';
-      iframe.style.height = '0';
-      iframe.style.border = 'none';
-      const silentUrl = `${this.constructor.AUTH_URL}/auth/silent?` + `client_id=${encodeURIComponent(clientId)}&` + `nonce=${nonce}`;
-      iframe.src = silentUrl;
-      document.body.appendChild(iframe);
-      try {
-        const session = await this.waitForIframeAuth(iframe, timeout, clientId);
-        if (session && session.accessToken) {
-          this.httpService.setTokens(session.accessToken);
-        }
-        return session;
-      } catch (error) {
-        return null;
-      } finally {
-        document.body.removeChild(iframe);
-      }
-    }
-
-    /**
-     * Open a centered popup window
-     *
-     * @private
-     */
-    openCenteredPopup(url, title, width, height) {
-      const left = window.screenX + (window.outerWidth - width) / 2;
-      const top = window.screenY + (window.outerHeight - height) / 2;
-      const features = [`width=${width}`, `height=${height}`, `left=${left}`, `top=${top}`, 'toolbar=no', 'menubar=no', 'scrollbars=yes', 'resizable=yes', 'status=no', 'location=no'].join(',');
-      return window.open(url, title, features);
-    }
-
-    /**
-     * Wait for authentication response from popup
-     *
-     * @private
-     */
-    async waitForPopupAuth(popup, expectedState, timeout) {
-      return new Promise((resolve, reject) => {
-        const timeoutId = setTimeout(() => {
-          cleanup();
-          reject(new OxyAuthenticationError('Authentication timeout'));
-        }, timeout);
-        const messageHandler = event => {
-          const authUrl = this.constructor.AUTH_URL;
-
-          // Log all messages for debugging
-          if (event.data && typeof event.data === 'object' && event.data.type) {
-            debug.log('Message received:', {
-              origin: event.origin,
-              expectedOrigin: authUrl,
-              type: event.data.type,
-              hasSession: !!event.data.session,
-              hasError: !!event.data.error
-            });
-          }
-
-          // CRITICAL: Verify origin to prevent XSS attacks
-          if (event.origin !== authUrl) {
-            return;
-          }
-          const {
-            type,
-            state,
-            session,
-            error
-          } = event.data;
-          if (type !== 'oxy_auth_response') {
-            return;
-          }
-          debug.log('Valid auth response:', {
-            state,
-            expectedState,
-            hasSession: !!session,
-            error
-          });
-
-          // Verify state parameter to prevent CSRF attacks
-          if (state !== expectedState) {
-            cleanup();
-            debug.error('State mismatch');
-            reject(new OxyAuthenticationError('Invalid state parameter. Possible CSRF attack.'));
-            return;
-          }
-          cleanup();
-          if (error) {
-            debug.error('Auth error:', error);
-            reject(new OxyAuthenticationError(error));
-          } else if (session) {
-            debug.log('Session received successfully');
-            resolve(session);
-          } else {
-            debug.error('No session in response');
-            reject(new OxyAuthenticationError('No session received from authentication server'));
-          }
-        };
-
-        // Poll to detect if user closed the popup
-        const pollInterval = setInterval(() => {
-          if (popup.closed) {
-            cleanup();
-            reject(new OxyAuthenticationError('Authentication cancelled by user'));
-          }
-        }, 500);
-        const cleanup = () => {
-          clearTimeout(timeoutId);
-          clearInterval(pollInterval);
-          window.removeEventListener('message', messageHandler);
-          if (!popup.closed) {
-            popup.close();
-          }
-        };
-        window.addEventListener('message', messageHandler);
-      });
-    }
-
-    /**
-     * Wait for authentication response from iframe
-     *
-     * @private
-     */
-    async waitForIframeAuth(iframe, timeout, expectedOrigin) {
-      return new Promise(resolve => {
-        const timeoutId = setTimeout(() => {
-          cleanup();
-          resolve(null); // Silent failure - don't throw
-        }, timeout);
-        const messageHandler = event => {
-          // Verify origin
-          if (event.origin !== this.constructor.AUTH_URL) {
-            return;
-          }
-          const {
-            type,
-            session
-          } = event.data;
-          if (type !== 'oxy_silent_auth') {
-            return;
-          }
-          cleanup();
-          resolve(session || null);
-        };
-        const cleanup = () => {
-          clearTimeout(timeoutId);
-          window.removeEventListener('message', messageHandler);
-        };
-        window.addEventListener('message', messageHandler);
-      });
-    }
-
-    /**
-     * Build authentication URL with query parameters
-     *
-     * @private
-     */
-    buildAuthUrl(params) {
-      const url = new URL(`${this.constructor.AUTH_URL}/${params.mode}`);
-      url.searchParams.set('response_type', 'token');
-      url.searchParams.set('client_id', params.clientId);
-      url.searchParams.set('redirect_uri', params.redirectUri);
-      url.searchParams.set('state', params.state);
-      url.searchParams.set('nonce', params.nonce);
-      return url.toString();
-    }
-
-    /**
-     * Generate cryptographically secure state for CSRF protection
-     *
-     * @private
-     */
-    generateState() {
-      if (typeof window !== 'undefined' && window.crypto && window.crypto.randomUUID) {
-        return window.crypto.randomUUID();
-      }
-      return `${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;
-    }
-
-    /**
-     * Generate nonce for replay attack prevention
-     *
-     * @private
-     */
-    generateNonce() {
-      if (typeof window !== 'undefined' && window.crypto && window.crypto.randomUUID) {
-        return window.crypto.randomUUID();
-      }
-      return `${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;
-    }
-
-    /**
-     * Store auth state in session storage
-     *
-     * @private
-     */
-    storeAuthState(state, nonce) {
-      if (typeof window !== 'undefined' && window.sessionStorage) {
-        sessionStorage.setItem(`oxy_auth_state_${state}`, JSON.stringify({
-          nonce,
-          timestamp: Date.now()
-        }));
-      }
-    }
-
-    /**
-     * Clear auth state from session storage
-     *
-     * @private
-     */
-    clearAuthState(state) {
-      if (typeof window !== 'undefined' && window.sessionStorage) {
-        sessionStorage.removeItem(`oxy_auth_state_${state}`);
-      }
-    }
-  };
-}
-
-// Export the mixin function as both named and default
-export { OxyServicesPopupAuthMixin as PopupAuthMixin };
-//# sourceMappingURL=OxyServices.popup.js.map

package/lib/module/core/mixins/OxyServices.popup.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["OxyAuthenticationError","createDebugLogger","debug","OxyServicesPopupAuthMixin","Base","constructor","args","AUTH_URL","POPUP_WIDTH","POPUP_HEIGHT","POPUP_TIMEOUT","SILENT_TIMEOUT","signInWithPopup","options","window","state","generateState","nonce","generateNonce","storeAuthState","width","height","timeout","mode","authUrl","buildAuthUrl","clientId","location","origin","redirectUri","popup","openCenteredPopup","session","waitForPopupAuth","accessToken","httpService","setTokens","sessionId","user","userData","makeRequest","undefined","cache","userError","warn","error","clearAuthState","signUpWithPopup","silentSignIn","iframe","document","createElement","style","display","position","border","silentUrl","encodeURIComponent","src","body","appendChild","waitForIframeAuth","removeChild","url","title","left","screenX","outerWidth","top","screenY","outerHeight","features","join","open","expectedState","Promise","resolve","reject","timeoutId","setTimeout","cleanup","messageHandler","event","data","type","log","expectedOrigin","hasSession","hasError","pollInterval","setInterval","closed","clearTimeout","clearInterval","removeEventListener","close","addEventListener","params","URL","searchParams","set","toString","crypto","randomUUID","Date","now","Math","random","substring","sessionStorage","setItem","JSON","stringify","timestamp","removeItem","PopupAuthMixin"],"sourceRoot":"../../../../src","sources":["core/mixins/OxyServices.popup.ts"],"mappings":";;AACA,SAASA,sBAAsB,QAAQ,0BAAuB;AAE9D,SAASC,iBAAiB,QAAQ,kCAA+B;AAEjE,MAAMC,KAAK,GAAGD,iBAAiB,CAAC,WAAW,CAAC;AAa5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASE,yBAAyBA,CAAmCC,IAAO,EAAE;EACnF,OAAO,cAAcA,IAAI,CAAC;IACxBC,WAAWA,CAAC,GAAGC,IAAW,EAAE;MAC1B,KAAK,CAAC,GAAIA,IAAc,CAAC;IAC3B;IACF,OAAuBC,QAAQ,GAAG,qBAAqB;IACvD,OAAuBC,WAAW,GAAG,GAAG;IACxC,OAAuBC,YAAY,GAAG,GAAG;IACzC,OAAuBC,aAAa,GAAG,KAAK,CAAC,CAAC;IAC9C,OAAuBC,cAAc,GAAG,IAAI,CAAC,CAAC;;IAE9C;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMC,eAAeA,CAACC,OAAyB,GAAG,CAAC,CAAC,EAAiC;MACnF,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;QACjC,MAAM,IAAId,sBAAsB,CAAC,mDAAmD,CAAC;MACvF;MAEA,MAAMe,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;MAClC,MAAMC,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;;MAElC;MACA,IAAI,CAACC,cAAc,CAACJ,KAAK,EAAEE,KAAK,CAAC;MAEjC,MAAMG,KAAK,GAAGP,OAAO,CAACO,KAAK,IAAK,IAAI,CAACf,WAAW,CAASG,WAAW;MACpE,MAAMa,MAAM,GAAGR,OAAO,CAACQ,MAAM,IAAK,IAAI,CAAChB,WAAW,CAASI,YAAY;MACvE,MAAMa,OAAO,GAAGT,OAAO,CAACS,OAAO,IAAK,IAAI,CAACjB,WAAW,CAASK,aAAa;MAC1E,MAAMa,IAAI,GAAGV,OAAO,CAACU,IAAI,IAAI,OAAO;MAEpC,MAAMC,OAAO,GAAG,IAAI,CAACC,YAAY,CAAC;QAChCF,IAAI;QACJR,KAAK;QACLE,KAAK;QACLS,QAAQ,EAAEZ,MAAM,CAACa,QAAQ,CAACC,MAAM;QAChCC,WAAW,EAAE,GAAI,IAAI,CAACxB,WAAW,CAASE,QAAQ;MACpD,CAAC,CAAC;MAEF,MAAMuB,KAAK,GAAG,IAAI,CAACC,iBAAiB,CAACP,OAAO,EAAE,aAAa,EAAEJ,KAAK,EAAEC,MAAM,CAAC;MAE3E,IAAI,CAACS,KAAK,EAAE;QACV,MAAM,IAAI9B,sBAAsB,CAC9B,iEACF,CAAC;MACH;MAEA,IAAI;QACF,MAAMgC,OAAO,GAAG,MAAM,IAAI,CAACC,gBAAgB,CAACH,KAAK,EAAEf,KAAK,EAAEO,OAAO,CAAC;;QAElE;QACA,IAAIU,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;;QAEA;QACA;QACA,IAAIF,OAAO,IAAIA,OAAO,CAACK,SAAS,IAAI,CAACL,OAAO,CAACM,IAAI,EAAE;UACjD,IAAI;YACF,MAAMC,QAAQ,GAAG,MAAM,IAAI,CAACC,WAAW,CACrC,KAAK,EACL,qBAAqBR,OAAO,CAACK,SAAS,EAAE,EACxCI,SAAS,EACT;cAAEC,KAAK,EAAE;YAAM,CACjB,CAAC;YACD,IAAIH,QAAQ,EAAE;cACXP,OAAO,CAASM,IAAI,GAAGC,QAAQ;YAClC;UACF,CAAC,CAAC,OAAOI,SAAS,EAAE;YAClBzC,KAAK,CAAC0C,IAAI,CAAC,4BAA4B,EAAED,SAAS,CAAC;YACnD;UACF;QACF;QAEA,OAAOX,OAAO;MAChB,CAAC,CAAC,OAAOa,KAAK,EAAE;QACd,MAAMA,KAAK;MACb,CAAC,SAAS;QACR,IAAI,CAACC,cAAc,CAAC/B,KAAK,CAAC;MAC5B;IACF;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMgC,eAAeA,CAAClC,OAAyB,GAAG,CAAC,CAAC,EAAiC;MACnF,OAAO,IAAI,CAACD,eAAe,CAAC;QAAE,GAAGC,OAAO;QAAEU,IAAI,EAAE;MAAS,CAAC,CAAC;IAC7D;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMyB,YAAYA,CAACnC,OAA0B,GAAG,CAAC,CAAC,EAAwC;MACxF,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;QACjC,OAAO,IAAI;MACb;MAEA,MAAMQ,OAAO,GAAGT,OAAO,CAACS,OAAO,IAAK,IAAI,CAACjB,WAAW,CAASM,cAAc;MAC3E,MAAMM,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;MAClC,MAAMQ,QAAQ,GAAGZ,MAAM,CAACa,QAAQ,CAACC,MAAM;MAEvC,MAAMqB,MAAM,GAAGC,QAAQ,CAACC,aAAa,CAAC,QAAQ,CAAC;MAC/CF,MAAM,CAACG,KAAK,CAACC,OAAO,GAAG,MAAM;MAC7BJ,MAAM,CAACG,KAAK,CAACE,QAAQ,GAAG,UAAU;MAClCL,MAAM,CAACG,KAAK,CAAChC,KAAK,GAAG,GAAG;MACxB6B,MAAM,CAACG,KAAK,CAAC/B,MAAM,GAAG,GAAG;MACzB4B,MAAM,CAACG,KAAK,CAACG,MAAM,GAAG,MAAM;MAE5B,MAAMC,SAAS,GAAG,GAAI,IAAI,CAACnD,WAAW,CAASE,QAAQ,eAAe,GAAG,aAAakD,kBAAkB,CAAC/B,QAAQ,CAAC,GAAG,GAAG,SAAST,KAAK,EAAE;MAExIgC,MAAM,CAACS,GAAG,GAAGF,SAAS;MACtBN,QAAQ,CAACS,IAAI,CAACC,WAAW,CAACX,MAAM,CAAC;MAEjC,IAAI;QACF,MAAMjB,OAAO,GAAG,MAAM,IAAI,CAAC6B,iBAAiB,CAACZ,MAAM,EAAE3B,OAAO,EAAEI,QAAQ,CAAC;QAEvE,IAAIM,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;QAEA,OAAOF,OAAO;MAChB,CAAC,CAAC,OAAOa,KAAK,EAAE;QACd,OAAO,IAAI;MACb,CAAC,SAAS;QACRK,QAAQ,CAACS,IAAI,CAACG,WAAW,CAACb,MAAM,CAAC;MACnC;IACF;;IAEA;AACF;AACA;AACA;AACA;IACSlB,iBAAiBA,CAACgC,GAAW,EAAEC,KAAa,EAAE5C,KAAa,EAAEC,MAAc,EAAiB;MACjG,MAAM4C,IAAI,GAAGnD,MAAM,CAACoD,OAAO,GAAG,CAACpD,MAAM,CAACqD,UAAU,GAAG/C,KAAK,IAAI,CAAC;MAC7D,MAAMgD,GAAG,GAAGtD,MAAM,CAACuD,OAAO,GAAG,CAACvD,MAAM,CAACwD,WAAW,GAAGjD,MAAM,IAAI,CAAC;MAE9D,MAAMkD,QAAQ,GAAG,CACf,SAASnD,KAAK,EAAE,EAChB,UAAUC,MAAM,EAAE,EAClB,QAAQ4C,IAAI,EAAE,EACd,OAAOG,GAAG,EAAE,EACZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,aAAa,CACd,CAACI,IAAI,CAAC,GAAG,CAAC;MAEX,OAAO1D,MAAM,CAAC2D,IAAI,CAACV,GAAG,EAAEC,KAAK,EAAEO,QAAQ,CAAC;IAC1C;;IAEA;AACF;AACA;AACA;AACA;IACE,MAAatC,gBAAgBA,CAC3BH,KAAa,EACb4C,aAAqB,EACrBpD,OAAe,EACgB;MAC/B,OAAO,IAAIqD,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;QACtC,MAAMC,SAAS,GAAGC,UAAU,CAAC,MAAM;UACjCC,OAAO,CAAC,CAAC;UACTH,MAAM,CAAC,IAAI7E,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC,EAAEsB,OAAO,CAAC;QAEX,MAAM2D,cAAc,GAAIC,KAAmB,IAAK;UAC9C,MAAM1D,OAAO,GAAI,IAAI,CAACnB,WAAW,CAASE,QAAQ;;UAElD;UACA,IAAI2E,KAAK,CAACC,IAAI,IAAI,OAAOD,KAAK,CAACC,IAAI,KAAK,QAAQ,IAAID,KAAK,CAACC,IAAI,CAACC,IAAI,EAAE;YACnElF,KAAK,CAACmF,GAAG,CAAC,mBAAmB,EAAE;cAC7BzD,MAAM,EAAEsD,KAAK,CAACtD,MAAM;cACpB0D,cAAc,EAAE9D,OAAO;cACvB4D,IAAI,EAAEF,KAAK,CAACC,IAAI,CAACC,IAAI;cACrBG,UAAU,EAAE,CAAC,CAACL,KAAK,CAACC,IAAI,CAACnD,OAAO;cAChCwD,QAAQ,EAAE,CAAC,CAACN,KAAK,CAACC,IAAI,CAACtC;YACzB,CAAC,CAAC;UACJ;;UAEA;UACA,IAAIqC,KAAK,CAACtD,MAAM,KAAKJ,OAAO,EAAE;YAC5B;UACF;UAEA,MAAM;YAAE4D,IAAI;YAAErE,KAAK;YAAEiB,OAAO;YAAEa;UAAM,CAAC,GAAGqC,KAAK,CAACC,IAAI;UAElD,IAAIC,IAAI,KAAK,mBAAmB,EAAE;YAChC;UACF;UAEAlF,KAAK,CAACmF,GAAG,CAAC,sBAAsB,EAAE;YAAEtE,KAAK;YAAE2D,aAAa;YAAEa,UAAU,EAAE,CAAC,CAACvD,OAAO;YAAEa;UAAM,CAAC,CAAC;;UAEzF;UACA,IAAI9B,KAAK,KAAK2D,aAAa,EAAE;YAC3BM,OAAO,CAAC,CAAC;YACT9E,KAAK,CAAC2C,KAAK,CAAC,gBAAgB,CAAC;YAC7BgC,MAAM,CAAC,IAAI7E,sBAAsB,CAAC,gDAAgD,CAAC,CAAC;YACpF;UACF;UAEAgF,OAAO,CAAC,CAAC;UAET,IAAInC,KAAK,EAAE;YACT3C,KAAK,CAAC2C,KAAK,CAAC,aAAa,EAAEA,KAAK,CAAC;YACjCgC,MAAM,CAAC,IAAI7E,sBAAsB,CAAC6C,KAAK,CAAC,CAAC;UAC3C,CAAC,MAAM,IAAIb,OAAO,EAAE;YAClB9B,KAAK,CAACmF,GAAG,CAAC,+BAA+B,CAAC;YAC1CT,OAAO,CAAC5C,OAAO,CAAC;UAClB,CAAC,MAAM;YACL9B,KAAK,CAAC2C,KAAK,CAAC,wBAAwB,CAAC;YACrCgC,MAAM,CAAC,IAAI7E,sBAAsB,CAAC,gDAAgD,CAAC,CAAC;UACtF;QACF,CAAC;;QAED;QACA,MAAMyF,YAAY,GAAGC,WAAW,CAAC,MAAM;UACrC,IAAI5D,KAAK,CAAC6D,MAAM,EAAE;YAChBX,OAAO,CAAC,CAAC;YACTH,MAAM,CAAC,IAAI7E,sBAAsB,CAAC,kCAAkC,CAAC,CAAC;UACxE;QACF,CAAC,EAAE,GAAG,CAAC;QAEP,MAAMgF,OAAO,GAAGA,CAAA,KAAM;UACpBY,YAAY,CAACd,SAAS,CAAC;UACvBe,aAAa,CAACJ,YAAY,CAAC;UAC3B3E,MAAM,CAACgF,mBAAmB,CAAC,SAAS,EAAEb,cAAc,CAAC;UACrD,IAAI,CAACnD,KAAK,CAAC6D,MAAM,EAAE;YACjB7D,KAAK,CAACiE,KAAK,CAAC,CAAC;UACf;QACF,CAAC;QAEDjF,MAAM,CAACkF,gBAAgB,CAAC,SAAS,EAAEf,cAAc,CAAC;MACpD,CAAC,CAAC;IACJ;;IAEA;AACF;AACA;AACA;AACA;IACE,MAAapB,iBAAiBA,CAC5BZ,MAAyB,EACzB3B,OAAe,EACfgE,cAAsB,EACgB;MACtC,OAAO,IAAIX,OAAO,CAAEC,OAAO,IAAK;QAC9B,MAAME,SAAS,GAAGC,UAAU,CAAC,MAAM;UACjCC,OAAO,CAAC,CAAC;UACTJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACjB,CAAC,EAAEtD,OAAO,CAAC;QAEX,MAAM2D,cAAc,GAAIC,KAAmB,IAAK;UAC9C;UACA,IAAIA,KAAK,CAACtD,MAAM,KAAM,IAAI,CAACvB,WAAW,CAASE,QAAQ,EAAE;YACvD;UACF;UAEA,MAAM;YAAE6E,IAAI;YAAEpD;UAAQ,CAAC,GAAGkD,KAAK,CAACC,IAAI;UAEpC,IAAIC,IAAI,KAAK,iBAAiB,EAAE;YAC9B;UACF;UAEAJ,OAAO,CAAC,CAAC;UACTJ,OAAO,CAAC5C,OAAO,IAAI,IAAI,CAAC;QAC1B,CAAC;QAED,MAAMgD,OAAO,GAAGA,CAAA,KAAM;UACpBY,YAAY,CAACd,SAAS,CAAC;UACvBhE,MAAM,CAACgF,mBAAmB,CAAC,SAAS,EAAEb,cAAc,CAAC;QACvD,CAAC;QAEDnE,MAAM,CAACkF,gBAAgB,CAAC,SAAS,EAAEf,cAAc,CAAC;MACpD,CAAC,CAAC;IACJ;;IAEA;AACF;AACA;AACA;AACA;IACSxD,YAAYA,CAACwE,MAMnB,EAAU;MACT,MAAMlC,GAAG,GAAG,IAAImC,GAAG,CAAC,GAAI,IAAI,CAAC7F,WAAW,CAASE,QAAQ,IAAI0F,MAAM,CAAC1E,IAAI,EAAE,CAAC;MAC3EwC,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC;MAC9CrC,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,WAAW,EAAEH,MAAM,CAACvE,QAAQ,CAAC;MAClDqC,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,cAAc,EAAEH,MAAM,CAACpE,WAAW,CAAC;MACxDkC,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,OAAO,EAAEH,MAAM,CAAClF,KAAK,CAAC;MAC3CgD,GAAG,CAACoC,YAAY,CAACC,GAAG,CAAC,OAAO,EAAEH,MAAM,CAAChF,KAAK,CAAC;MAC3C,OAAO8C,GAAG,CAACsC,QAAQ,CAAC,CAAC;IACvB;;IAEA;AACF;AACA;AACA;AACA;IACSrF,aAAaA,CAAA,EAAW;MAC7B,IAAI,OAAOF,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACwF,MAAM,IAAIxF,MAAM,CAACwF,MAAM,CAACC,UAAU,EAAE;QAC9E,OAAOzF,MAAM,CAACwF,MAAM,CAACC,UAAU,CAAC,CAAC;MACnC;MACA,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACN,QAAQ,CAAC,EAAE,CAAC,CAACO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACvE;;IAEA;AACF;AACA;AACA;AACA;IACS1F,aAAaA,CAAA,EAAW;MAC7B,IAAI,OAAOJ,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACwF,MAAM,IAAIxF,MAAM,CAACwF,MAAM,CAACC,UAAU,EAAE;QAC9E,OAAOzF,MAAM,CAACwF,MAAM,CAACC,UAAU,CAAC,CAAC;MACnC;MACA,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACN,QAAQ,CAAC,EAAE,CAAC,CAACO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACvE;;IAEA;AACF;AACA;AACA;AACA;IACSzF,cAAcA,CAACJ,KAAa,EAAEE,KAAa,EAAQ;MACxD,IAAI,OAAOH,MAAM,KAAK,WAAW,IAAIA,MAAM,CAAC+F,cAAc,EAAE;QAC1DA,cAAc,CAACC,OAAO,CAAC,kBAAkB/F,KAAK,EAAE,EAAEgG,IAAI,CAACC,SAAS,CAAC;UAAE/F,KAAK;UAAEgG,SAAS,EAAET,IAAI,CAACC,GAAG,CAAC;QAAE,CAAC,CAAC,CAAC;MACrG;IACF;;IAEA;AACF;AACA;AACA;AACA;IACS3D,cAAcA,CAAC/B,KAAa,EAAQ;MACzC,IAAI,OAAOD,MAAM,KAAK,WAAW,IAAIA,MAAM,CAAC+F,cAAc,EAAE;QAC1DA,cAAc,CAACK,UAAU,CAAC,kBAAkBnG,KAAK,EAAE,CAAC;MACtD;IACF;EACA,CAAC;AACH;;AAEA;AACA,SAASZ,yBAAyB,IAAIgH,cAAc","ignoreList":[]}

package/lib/module/core/mixins/OxyServices.privacy.js

@@ -1,170 +0,0 @@
-"use strict";
-
-/**
- * Privacy Methods Mixin (Blocked & Restricted Users)
- */
-
-export function OxyServicesPrivacyMixin(Base) {
-  return class extends Base {
-    constructor(...args) {
-      super(...args);
-    }
-    /**
-     * Extract user ID from blocked/restricted user object
-     */
-    extractUserId(userIdField) {
-      return typeof userIdField === 'string' ? userIdField : userIdField._id;
-    }
-
-    /**
-     * Check if a user is in a list (blocked or restricted)
-     */
-    async isUserInList(userId, getUserList, getIdField) {
-      try {
-        if (!userId) {
-          return false;
-        }
-        const users = await getUserList();
-        return users.some(item => {
-          const itemId = this.extractUserId(getIdField(item));
-          return itemId === userId;
-        });
-      } catch (error) {
-        // If there's an error, assume not in list to avoid breaking functionality
-        if (__DEV__) {
-          console.warn('Error checking user list:', error);
-        }
-        return false;
-      }
-    }
-
-    // ============================================================================
-    // BLOCKED USERS METHODS
-    // ============================================================================
-
-    /**
-     * Get list of blocked users
-     * @returns Array of blocked users
-     */
-    async getBlockedUsers() {
-      try {
-        return await this.makeRequest('GET', '/api/privacy/blocked', undefined, {
-          cache: true,
-          cacheTTL: 1 * 60 * 1000 // 1 minute cache
-        });
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Block a user
-     * @param userId - The user ID to block
-     * @returns Success message
-     */
-    async blockUser(userId) {
-      try {
-        if (!userId) {
-          throw new Error('User ID is required');
-        }
-        return await this.makeRequest('POST', `/api/privacy/blocked/${userId}`, undefined, {
-          cache: false
-        });
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Unblock a user
-     * @param userId - The user ID to unblock
-     * @returns Success message
-     */
-    async unblockUser(userId) {
-      try {
-        if (!userId) {
-          throw new Error('User ID is required');
-        }
-        return await this.makeRequest('DELETE', `/api/privacy/blocked/${userId}`, undefined, {
-          cache: false
-        });
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Check if a user is blocked
-     * @param userId - The user ID to check
-     * @returns True if the user is blocked, false otherwise
-     */
-    async isUserBlocked(userId) {
-      return this.isUserInList(userId, () => this.getBlockedUsers(), block => block.blockedId);
-    }
-
-    // ============================================================================
-    // RESTRICTED USERS METHODS
-    // ============================================================================
-
-    /**
-     * Get list of restricted users
-     * @returns Array of restricted users
-     */
-    async getRestrictedUsers() {
-      try {
-        return await this.makeRequest('GET', '/api/privacy/restricted', undefined, {
-          cache: true,
-          cacheTTL: 1 * 60 * 1000 // 1 minute cache
-        });
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Restrict a user (limit their interactions without fully blocking)
-     * @param userId - The user ID to restrict
-     * @returns Success message
-     */
-    async restrictUser(userId) {
-      try {
-        if (!userId) {
-          throw new Error('User ID is required');
-        }
-        return await this.makeRequest('POST', `/api/privacy/restricted/${userId}`, undefined, {
-          cache: false
-        });
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Unrestrict a user
-     * @param userId - The user ID to unrestrict
-     * @returns Success message
-     */
-    async unrestrictUser(userId) {
-      try {
-        if (!userId) {
-          throw new Error('User ID is required');
-        }
-        return await this.makeRequest('DELETE', `/api/privacy/restricted/${userId}`, undefined, {
-          cache: false
-        });
-      } catch (error) {
-        throw this.handleError(error);
-      }
-    }
-
-    /**
-     * Check if a user is restricted
-     * @param userId - The user ID to check
-     * @returns True if the user is restricted, false otherwise
-     */
-    async isUserRestricted(userId) {
-      return this.isUserInList(userId, () => this.getRestrictedUsers(), restrict => restrict.restrictedId);
-    }
-  };
-}
-//# sourceMappingURL=OxyServices.privacy.js.map

package/lib/module/core/mixins/OxyServices.privacy.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["OxyServicesPrivacyMixin","Base","constructor","args","extractUserId","userIdField","_id","isUserInList","userId","getUserList","getIdField","users","some","item","itemId","error","__DEV__","console","warn","getBlockedUsers","makeRequest","undefined","cache","cacheTTL","handleError","blockUser","Error","unblockUser","isUserBlocked","block","blockedId","getRestrictedUsers","restrictUser","unrestrictUser","isUserRestricted","restrict","restrictedId"],"sourceRoot":"../../../../src","sources":["core/mixins/OxyServices.privacy.ts"],"mappings":";;AAAA;AACA;AACA;;AAIA,OAAO,SAASA,uBAAuBA,CAAmCC,IAAO,EAAE;EACjF,OAAO,cAAcA,IAAI,CAAC;IACxBC,WAAWA,CAAC,GAAGC,IAAW,EAAE;MAC1B,KAAK,CAAC,GAAIA,IAAc,CAAC;IAC3B;IACA;AACJ;AACA;IACWC,aAAaA,CAACC,WAAyE,EAAU;MACtG,OAAO,OAAOA,WAAW,KAAK,QAAQ,GAAGA,WAAW,GAAGA,WAAW,CAACC,GAAG;IACxE;;IAEA;AACJ;AACA;IACI,MAAaC,YAAYA,CACvBC,MAAc,EACdC,WAA+B,EAC/BC,UAAqF,EACnE;MAClB,IAAI;QACF,IAAI,CAACF,MAAM,EAAE;UACX,OAAO,KAAK;QACd;QACA,MAAMG,KAAK,GAAG,MAAMF,WAAW,CAAC,CAAC;QACjC,OAAOE,KAAK,CAACC,IAAI,CAACC,IAAI,IAAI;UACxB,MAAMC,MAAM,GAAG,IAAI,CAACV,aAAa,CAACM,UAAU,CAACG,IAAI,CAAC,CAAC;UACnD,OAAOC,MAAM,KAAKN,MAAM;QAC1B,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOO,KAAK,EAAE;QACd;QACA,IAAIC,OAAO,EAAE;UACXC,OAAO,CAACC,IAAI,CAAC,2BAA2B,EAAEH,KAAK,CAAC;QAClD;QACA,OAAO,KAAK;MACd;IACF;;IAEA;IACA;IACA;;IAEA;AACJ;AACA;AACA;IACI,MAAMI,eAAeA,CAAA,EAA2B;MAC9C,IAAI;QACF,OAAO,MAAM,IAAI,CAACC,WAAW,CAAgB,KAAK,EAAE,sBAAsB,EAAEC,SAAS,EAAE;UACrFC,KAAK,EAAE,IAAI;UACXC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAE;QAC3B,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOR,KAAK,EAAE;QACd,MAAM,IAAI,CAACS,WAAW,CAACT,KAAK,CAAC;MAC/B;IACF;;IAEA;AACJ;AACA;AACA;AACA;IACI,MAAMU,SAASA,CAACjB,MAAc,EAAgC;MAC5D,IAAI;QACF,IAAI,CAACA,MAAM,EAAE;UACX,MAAM,IAAIkB,KAAK,CAAC,qBAAqB,CAAC;QACxC;QACA,OAAO,MAAM,IAAI,CAACN,WAAW,CAAsB,MAAM,EAAE,wBAAwBZ,MAAM,EAAE,EAAEa,SAAS,EAAE;UACtGC,KAAK,EAAE;QACT,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOP,KAAK,EAAE;QACd,MAAM,IAAI,CAACS,WAAW,CAACT,KAAK,CAAC;MAC/B;IACF;;IAEA;AACJ;AACA;AACA;AACA;IACI,MAAMY,WAAWA,CAACnB,MAAc,EAAgC;MAC9D,IAAI;QACF,IAAI,CAACA,MAAM,EAAE;UACX,MAAM,IAAIkB,KAAK,CAAC,qBAAqB,CAAC;QACxC;QACA,OAAO,MAAM,IAAI,CAACN,WAAW,CAAsB,QAAQ,EAAE,wBAAwBZ,MAAM,EAAE,EAAEa,SAAS,EAAE;UACxGC,KAAK,EAAE;QACT,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOP,KAAK,EAAE;QACd,MAAM,IAAI,CAACS,WAAW,CAACT,KAAK,CAAC;MAC/B;IACF;;IAEA;AACJ;AACA;AACA;AACA;IACI,MAAMa,aAAaA,CAACpB,MAAc,EAAoB;MACpD,OAAO,IAAI,CAACD,YAAY,CACtBC,MAAM,EACN,MAAM,IAAI,CAACW,eAAe,CAAC,CAAC,EAC3BU,KAAK,IAAKA,KAAK,CAACC,SACnB,CAAC;IACH;;IAEA;IACA;IACA;;IAEA;AACJ;AACA;AACA;IACI,MAAMC,kBAAkBA,CAAA,EAA8B;MACpD,IAAI;QACF,OAAO,MAAM,IAAI,CAACX,WAAW,CAAmB,KAAK,EAAE,yBAAyB,EAAEC,SAAS,EAAE;UAC3FC,KAAK,EAAE,IAAI;UACXC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAE;QAC3B,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOR,KAAK,EAAE;QACd,MAAM,IAAI,CAACS,WAAW,CAACT,KAAK,CAAC;MAC/B;IACF;;IAEA;AACJ;AACA;AACA;AACA;IACI,MAAMiB,YAAYA,CAACxB,MAAc,EAAgC;MAC/D,IAAI;QACF,IAAI,CAACA,MAAM,EAAE;UACX,MAAM,IAAIkB,KAAK,CAAC,qBAAqB,CAAC;QACxC;QACA,OAAO,MAAM,IAAI,CAACN,WAAW,CAAsB,MAAM,EAAE,2BAA2BZ,MAAM,EAAE,EAAEa,SAAS,EAAE;UACzGC,KAAK,EAAE;QACT,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOP,KAAK,EAAE;QACd,MAAM,IAAI,CAACS,WAAW,CAACT,KAAK,CAAC;MAC/B;IACF;;IAEA;AACJ;AACA;AACA;AACA;IACI,MAAMkB,cAAcA,CAACzB,MAAc,EAAgC;MACjE,IAAI;QACF,IAAI,CAACA,MAAM,EAAE;UACX,MAAM,IAAIkB,KAAK,CAAC,qBAAqB,CAAC;QACxC;QACA,OAAO,MAAM,IAAI,CAACN,WAAW,CAAsB,QAAQ,EAAE,2BAA2BZ,MAAM,EAAE,EAAEa,SAAS,EAAE;UAC3GC,KAAK,EAAE;QACT,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOP,KAAK,EAAE;QACd,MAAM,IAAI,CAACS,WAAW,CAACT,KAAK,CAAC;MAC/B;IACF;;IAEA;AACJ;AACA;AACA;AACA;IACI,MAAMmB,gBAAgBA,CAAC1B,MAAc,EAAoB;MACvD,OAAO,IAAI,CAACD,YAAY,CACtBC,MAAM,EACN,MAAM,IAAI,CAACuB,kBAAkB,CAAC,CAAC,EAC9BI,QAAQ,IAAKA,QAAQ,CAACC,YACzB,CAAC;IACH;EACF,CAAC;AACH","ignoreList":[]}