@oxy.so/contracts 1.0.1 → 1.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/.tsbuildinfo +1 -1
- package/dist/cjs/agency.js +7 -1
- package/dist/cjs/externalIdentity.js +52 -0
- package/dist/cjs/identity.js +20 -1
- package/dist/cjs/index.js +32 -15
- package/dist/cjs/oauth.js +50 -1
- package/dist/cjs/webauthn.js +1 -1
- package/dist/esm/.tsbuildinfo +1 -1
- package/dist/esm/agency.js +6 -0
- package/dist/esm/externalIdentity.js +49 -0
- package/dist/esm/identity.js +19 -0
- package/dist/esm/index.js +4 -6
- package/dist/esm/oauth.js +49 -0
- package/dist/esm/webauthn.js +1 -1
- package/dist/types/.tsbuildinfo +1 -1
- package/dist/types/agency.d.ts +61 -24
- package/dist/types/externalIdentity.d.ts +536 -0
- package/dist/types/identity.d.ts +38 -0
- package/dist/types/index.d.ts +7 -8
- package/dist/types/inference/request.d.ts +28 -28
- package/dist/types/keyRecovery.d.ts +4 -4
- package/dist/types/oauth.d.ts +891 -0
- package/dist/types/userResponse.d.ts +2 -2
- package/dist/types/webauthn.d.ts +1 -1
- package/package.json +1 -1
- package/dist/cjs/links.js +0 -68
- package/dist/esm/links.js +0 -65
- package/dist/types/links.d.ts +0 -96
package/dist/cjs/agency.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.CAPABILITY_PACKAGES = exports.autonomyLevelSchema = exports.AUTONOMY_LEVELS = void 0;
|
|
3
|
+
exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.CAPABILITY_PACKAGES = exports.autonomyLevelSchema = exports.AUTONOMY_LEVELS = void 0;
|
|
4
4
|
const zod_1 = require("zod");
|
|
5
5
|
const nonEmptyStringSchema = zod_1.z.string().trim().min(1);
|
|
6
6
|
const identifierSchema = zod_1.z.string().trim().min(1).max(255);
|
|
@@ -55,6 +55,11 @@ exports.grantLimitSchema = zod_1.z.object({
|
|
|
55
55
|
// queries) and ADR 0016 forbids persisting those in Oxy.
|
|
56
56
|
value: zod_1.z.union([zod_1.z.number().finite(), zod_1.z.boolean()]),
|
|
57
57
|
}).strict();
|
|
58
|
+
exports.capabilityCatalogBindingSchema = zod_1.z.object({
|
|
59
|
+
registrationId: identifierSchema,
|
|
60
|
+
version: identifierSchema,
|
|
61
|
+
digest: sha256HexSchema,
|
|
62
|
+
}).strict();
|
|
58
63
|
exports.executionAuthorizationRefSchema = zod_1.z.discriminatedUnion('kind', [
|
|
59
64
|
zod_1.z.object({
|
|
60
65
|
kind: zod_1.z.literal('direct_request'),
|
|
@@ -75,6 +80,7 @@ exports.delegationGrantSchema = zod_1.z.object({
|
|
|
75
80
|
ownerAccountId: identifierSchema,
|
|
76
81
|
actor: exports.actorRefSchema,
|
|
77
82
|
resource: exports.resourceRefSchema,
|
|
83
|
+
catalog: exports.capabilityCatalogBindingSchema.nullable(),
|
|
78
84
|
capabilityPackages: zod_1.z.array(exports.capabilityPackageSchema),
|
|
79
85
|
capabilities: zod_1.z.array(identifierSchema),
|
|
80
86
|
toolOverrides: zod_1.z.array(exports.toolGrantOverrideSchema).default([]),
|
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.lookupExternalIdentitiesResponseSchema = exports.lookupExternalIdentitiesRequestSchema = exports.resolveExternalIdentityResponseSchema = exports.resolveExternalIdentityRequestSchema = exports.externalIdentityReferenceSchema = void 0;
|
|
4
|
+
const zod_1 = require("zod");
|
|
5
|
+
const userResponse_1 = require("./userResponse");
|
|
6
|
+
exports.externalIdentityReferenceSchema = zod_1.z.object({
|
|
7
|
+
canonicalAcct: zod_1.z.string().min(1),
|
|
8
|
+
network: zod_1.z.string().min(1),
|
|
9
|
+
protocol: zod_1.z.enum(['activitypub', 'atproto']),
|
|
10
|
+
actorUri: zod_1.z.string().min(1),
|
|
11
|
+
transportAcct: zod_1.z.string().min(1),
|
|
12
|
+
sourceUserId: zod_1.z.string().min(1),
|
|
13
|
+
});
|
|
14
|
+
exports.resolveExternalIdentityRequestSchema = zod_1.z.object({
|
|
15
|
+
actorUri: zod_1.z.string().min(1).max(2048).optional(),
|
|
16
|
+
handle: zod_1.z.string().min(1).max(2048).optional(),
|
|
17
|
+
transportAcct: zod_1.z.string().max(320).optional(),
|
|
18
|
+
protocol: zod_1.z.enum(['activitypub', 'atproto']).optional(),
|
|
19
|
+
}).refine(value => Boolean(value.actorUri) !== Boolean(value.handle), 'Exactly one actorUri or handle is required');
|
|
20
|
+
exports.resolveExternalIdentityResponseSchema = zod_1.z.object({
|
|
21
|
+
user: userResponse_1.userResponseSchema.extend({
|
|
22
|
+
id: zod_1.z.string().min(1),
|
|
23
|
+
username: zod_1.z.string().min(1),
|
|
24
|
+
bio: zod_1.z.string().optional(),
|
|
25
|
+
externalIdentities: zod_1.z.array(exports.externalIdentityReferenceSchema),
|
|
26
|
+
redirectedUserIds: zod_1.z.array(zod_1.z.string()),
|
|
27
|
+
}),
|
|
28
|
+
externalIdentity: exports.externalIdentityReferenceSchema.extend({ userId: zod_1.z.string() }),
|
|
29
|
+
externalIdentities: zod_1.z.array(exports.externalIdentityReferenceSchema),
|
|
30
|
+
redirectedUserIds: zod_1.z.array(zod_1.z.string()),
|
|
31
|
+
}).superRefine((value, context) => {
|
|
32
|
+
if (value.externalIdentity.userId !== value.user.id) {
|
|
33
|
+
context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['externalIdentity', 'userId'], message: 'Canonical user id does not match profile' });
|
|
34
|
+
}
|
|
35
|
+
if (!value.externalIdentities.some(identity => identity.actorUri === value.externalIdentity.actorUri
|
|
36
|
+
&& identity.canonicalAcct === value.externalIdentity.canonicalAcct
|
|
37
|
+
&& identity.sourceUserId === value.externalIdentity.sourceUserId)) {
|
|
38
|
+
context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['externalIdentity'], message: 'Resolved source is absent from authoritative identities' });
|
|
39
|
+
}
|
|
40
|
+
if (!value.externalIdentities.some(identity => identity.canonicalAcct === value.user.username)) {
|
|
41
|
+
context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['user', 'username'], message: 'Profile handle is not an authoritative identity' });
|
|
42
|
+
}
|
|
43
|
+
});
|
|
44
|
+
exports.lookupExternalIdentitiesRequestSchema = zod_1.z.object({ identifiers: zod_1.z.array(zod_1.z.string().min(1).max(2048)).min(1).max(100) });
|
|
45
|
+
exports.lookupExternalIdentitiesResponseSchema = zod_1.z.object({
|
|
46
|
+
identities: zod_1.z.array(zod_1.z.object({
|
|
47
|
+
identifier: zod_1.z.string(),
|
|
48
|
+
userId: zod_1.z.string().nullable(),
|
|
49
|
+
externalIdentities: zod_1.z.array(exports.externalIdentityReferenceSchema),
|
|
50
|
+
redirectedUserIds: zod_1.z.array(zod_1.z.string()),
|
|
51
|
+
})),
|
|
52
|
+
});
|
package/dist/cjs/identity.js
CHANGED
|
@@ -39,7 +39,7 @@
|
|
|
39
39
|
* `require()`).
|
|
40
40
|
*/
|
|
41
41
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
42
|
-
exports.exportBundleSchema = exports.exportFinancialSectionSchema = exports.exportUsageReservationSchema = exports.exportLedgerEntrySchema = exports.exportUsageReceiptSchema = exports.exportAttestationSchema = exports.authMethodsResponseSchema = exports.authMethodEntrySchema = exports.domainVerificationInstructionsSchema = exports.domainVerificationRequestSchema = exports.verifiedDomainSchema = exports.signedRecordEnvelopeSchema = exports.didDocumentSchema = exports.didServiceSchema = exports.verificationMethodSchema = void 0;
|
|
42
|
+
exports.exportBundleSchema = exports.exportFinancialSectionSchema = exports.exportUsageReservationSchema = exports.exportLedgerEntrySchema = exports.exportUsageReceiptSchema = exports.exportAttestationSchema = exports.authMethodsResponseSchema = exports.authMethodEntrySchema = exports.domainVerificationInstructionsSchema = exports.resourceDomainOwnershipResponseSchema = exports.resourceDomainOwnershipRequestSchema = exports.domainVerificationRequestSchema = exports.verifiedDomainSchema = exports.signedRecordEnvelopeSchema = exports.didDocumentSchema = exports.didServiceSchema = exports.verificationMethodSchema = void 0;
|
|
43
43
|
const zod_1 = require("zod");
|
|
44
44
|
// The option schemas are left UN-annotated so they keep their concrete
|
|
45
45
|
// `ZodObject` type — `z.discriminatedUnion` requires object options and an
|
|
@@ -171,6 +171,25 @@ exports.verifiedDomainSchema = zod_1.z.object({
|
|
|
171
171
|
exports.domainVerificationRequestSchema = zod_1.z.object({
|
|
172
172
|
domain: zod_1.z.string().trim().min(1),
|
|
173
173
|
});
|
|
174
|
+
const resourceOriginHostSchema = zod_1.z
|
|
175
|
+
.string()
|
|
176
|
+
.trim()
|
|
177
|
+
.toLowerCase()
|
|
178
|
+
.pipe(zod_1.z.string().min(1).max(253).regex(/^(?!-)[a-z0-9-]{1,63}(?<!-)(?:\.(?!-)[a-z0-9-]{1,63}(?<!-))+$/, 'originHost must be a public DNS hostname without scheme, port or path'));
|
|
179
|
+
/** Clarity resource-server request to bind a site to Oxy domain authority. */
|
|
180
|
+
exports.resourceDomainOwnershipRequestSchema = zod_1.z.object({
|
|
181
|
+
accountId: zod_1.z.string().min(1).max(128),
|
|
182
|
+
verifiedDomainId: zod_1.z.string().min(1).max(128),
|
|
183
|
+
originHost: resourceOriginHostSchema,
|
|
184
|
+
}).strict();
|
|
185
|
+
exports.resourceDomainOwnershipResponseSchema = zod_1.z.object({
|
|
186
|
+
verified: zod_1.z.boolean(),
|
|
187
|
+
accountId: zod_1.z.string().min(1).max(128),
|
|
188
|
+
verifiedDomainId: zod_1.z.string().min(1).max(128),
|
|
189
|
+
originHost: resourceOriginHostSchema,
|
|
190
|
+
verifiedAt: zod_1.z.string().datetime().optional(),
|
|
191
|
+
method: zod_1.z.enum(['dns-txt', 'well-known']).optional(),
|
|
192
|
+
}).strict();
|
|
174
193
|
/**
|
|
175
194
|
* The instructions the API returns when a domain verification is requested. The
|
|
176
195
|
* caller may prove ownership EITHER by publishing the `dns` TXT record OR by
|
package/dist/cjs/index.js
CHANGED
|
@@ -10,17 +10,31 @@
|
|
|
10
10
|
* Platform-agnostic — zod is the only runtime dependency. No react/react-native/
|
|
11
11
|
* expo, no `require()` in the ESM build.
|
|
12
12
|
*/
|
|
13
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
14
|
+
if (k2 === undefined) k2 = k;
|
|
15
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
16
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
17
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
18
|
+
}
|
|
19
|
+
Object.defineProperty(o, k2, desc);
|
|
20
|
+
}) : (function(o, m, k, k2) {
|
|
21
|
+
if (k2 === undefined) k2 = k;
|
|
22
|
+
o[k2] = m[k];
|
|
23
|
+
}));
|
|
24
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
25
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
26
|
+
};
|
|
13
27
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
14
28
|
exports.isPublishedOxyUserChangeReason = exports.OXY_PUBLISHED_USER_CHANGE_REASONS = exports.OXY_USER_CHANGE_REASONS = exports.OXY_USER_INVALIDATION_CHANNEL = exports.inboxEmailPushDataSchema = exports.INBOX_EMAIL_PUSH_TYPE = exports.INBOX_EMAIL_PUSH_CHANNEL = exports.IDENTITY_APPROVAL_PUSH_CHANNEL = exports.commonsDenyReasonSchema = exports.COMMONS_DENY_REASONS = exports.sessionStatusSchema = exports.publicApplicationSchema = exports.applicationTypeSchema = exports.safeParseContract = exports.resolveUserId = exports.deviceLinkedSessionsResponseSchema = exports.deviceLinkedSessionSchema = exports.currentUserResponseSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.themePreferenceSchema = exports.userRelationshipSchema = exports.userNameSchema = exports.BOT_USERNAME_INVALID_MESSAGE = exports.USERNAME_INVALID_MESSAGE = exports.USERNAME_MAX_LENGTH = exports.USERNAME_MIN_LENGTH = exports.applyBotUsernameSuffix = exports.stripDisallowedUsernameCharacters = exports.isValidUsername = exports.usernameSchemaForAccountKind = exports.usernameSchema = exports.createAccountRequestSchema = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.RETIRED_ACCOUNT_CATEGORY_IDS = exports.newlyAddedRetiredCategories = exports.MAX_ACCOUNT_CATEGORIES = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.accountCategoryIdSchema = exports.accountCategoriesSchema = exports.ACCOUNT_CATEGORY_KINDS = exports.ACCOUNT_CATEGORY_IDS = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.isAccountKind = exports.childAccountKindSchema = exports.CHILD_ACCOUNT_KINDS = exports.accountKindSchema = exports.ACCOUNT_KINDS = void 0;
|
|
15
|
-
exports.
|
|
16
|
-
exports.
|
|
17
|
-
exports.deviceDirectorySyncSchema = exports.deviceActivateResponseSchema = exports.deviceActivateRequestSchema = exports.deviceDirectorySchema = exports.devicePrincipalSchema = exports.deviceAccountContextSchema = exports.deviceDirectoryProfileSchema = exports.deviceContextRelationshipSchema = exports.sessionAccountsChangedEventSchema = exports.sessionAccountsChangedReasonSchema = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceBackgroundTokenResponseSchema = exports.deviceBackgroundTokenRequestSchema = exports.deviceBackgroundCredentialResponseSchema = exports.deviceTokenMintResponseSchema = exports.deviceTokenMintRequestSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.
|
|
18
|
-
exports.
|
|
19
|
-
exports.
|
|
20
|
-
exports.
|
|
21
|
-
exports.
|
|
22
|
-
exports.
|
|
23
|
-
exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = void 0;
|
|
29
|
+
exports.credentialIssueResultSchema = exports.verifiableCredentialResponseSchema = exports.credentialRecordSchema = exports.vouchResultSchema = exports.personhoodStatusResultSchema = exports.personhoodBreakdownSchema = exports.personhoodVouchRecordSchema = exports.validationVoteResultSchema = exports.validationRequestSummarySchema = exports.validationOpenResultSchema = exports.validationOpenRequestSchema = exports.validationVerdictRecordSchema = exports.realLifeAttestationResultSchema = exports.realLifeAttestationRecordSchema = exports.signedPublicCardSchema = exports.publicCardSchema = exports.logPageResponseSchema = exports.chainHeadResponseSchema = exports.oxySignedRecordTypeSchema = exports.exportBundleSchema = exports.exportFinancialSectionSchema = exports.exportUsageReservationSchema = exports.exportLedgerEntrySchema = exports.exportUsageReceiptSchema = exports.exportAttestationSchema = exports.authMethodsResponseSchema = exports.authMethodEntrySchema = exports.domainVerificationInstructionsSchema = exports.resourceDomainOwnershipResponseSchema = exports.resourceDomainOwnershipRequestSchema = exports.domainVerificationRequestSchema = exports.verifiedDomainSchema = exports.signedRecordEnvelopeSchema = exports.didDocumentSchema = exports.didServiceSchema = exports.verificationMethodSchema = exports.appAffinityEventsIngestSchema = exports.appAffinityEventSchema = exports.appAffinityEventTypeSchema = exports.appUserSignalIngestSchema = exports.appInterestInputSchema = exports.appEndorsementInputSchema = exports.recommendationResponseSchema = exports.recommendationItemSchema = exports.recommendationCountSchema = exports.recommendationRequestSchema = exports.recommendationSignalWeightsSchema = exports.recommendationBoostSchema = exports.recommendationExcludeTypeSchema = exports.oxyUserInvalidationEventSchema = void 0;
|
|
30
|
+
exports.moderationDecisionStatusSchema = exports.moderationAttributionSchema = exports.moderationFindingScopeSchema = exports.moderationSeveritySchema = exports.APPLICATION_MODERATION_STANDINGS = exports.IDENTITY_BINDING_STATUSES = exports.IDENTITY_BINDING_TYPES = exports.PERSONHOOD_STATUSES = exports.CONTRIBUTION_TIERS = exports.CONDUCT_STANDINGS = exports.CONDUCT_STRIKE_STATUSES = exports.MODERATION_EFFECT_SKIP_REASONS = exports.MODERATION_EFFECT_STATUSES = exports.MODERATION_EFFECT_TYPES = exports.MODERATION_DECISION_STATUSES = exports.MODERATION_ATTRIBUTIONS = exports.MODERATION_FINDING_SCOPES = exports.MODERATION_SEVERITIES = exports.isFullReputationBalance = exports.reverseReputationTransactionSchema = exports.upsertReputationRuleSchema = exports.resolveReputationDisputeSchema = exports.createReputationDisputeSchema = exports.awardReputationSchema = exports.reverseReputationTransactionResultSchema = exports.reputationInfluenceResultSchema = exports.reputationLeaderboardEntrySchema = exports.reputationLeaderboardUserSchema = exports.reputationRuleSchema = exports.reputationDisputeSchema = exports.reputationBalanceSchema = exports.reputationBalanceSummarySchema = exports.reputationReliabilitySchema = exports.reputationInfluenceSchema = exports.reputationBalanceBreakdownSchema = exports.reputationTransactionSchema = exports.reputationInfluenceContextSchema = exports.reputationDisputeStatusSchema = exports.reputationTargetEntityTypeSchema = exports.trustTierSchema = exports.reputationTransactionStatusSchema = exports.reputationCategorySchema = exports.REPUTATION_INFLUENCE_CONTEXTS = exports.REPUTATION_DISPUTE_STATUSES = exports.REPUTATION_TARGET_ENTITY_TYPES = exports.TRUST_TIERS = exports.REPUTATION_TRANSACTION_STATUSES = exports.REPUTATION_CATEGORIES = exports.credentialVerifyResultSchema = exports.credentialListResultSchema = void 0;
|
|
31
|
+
exports.oauthAuthorizeCodeResponseSchema = exports.oauthConsentDecisionSchema = exports.deviceDirectorySyncSchema = exports.deviceActivateResponseSchema = exports.deviceActivateRequestSchema = exports.deviceDirectorySchema = exports.devicePrincipalSchema = exports.deviceAccountContextSchema = exports.deviceDirectoryProfileSchema = exports.deviceContextRelationshipSchema = exports.sessionAccountsChangedEventSchema = exports.sessionAccountsChangedReasonSchema = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceBackgroundTokenResponseSchema = exports.deviceBackgroundTokenRequestSchema = exports.deviceBackgroundCredentialResponseSchema = exports.deviceTokenMintResponseSchema = exports.deviceTokenMintRequestSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.applicationModerationTrustSchema = exports.reputationContextualInfluenceSchema = exports.reputationReviewingSchema = exports.reputationReportingSchema = exports.reputationConductSchema = exports.reputationContributionSchema = exports.reputationPersonhoodSchema = exports.identityBindingSchema = exports.registerIdentityBindingSchema = exports.reverseModerationEffectResultSchema = exports.applyModerationDecisionResultSchema = exports.moderationEffectSchema = exports.reverseModerationEffectSchema = exports.finalizeModerationDecisionSchema = exports.moderationDecisionEventSchema = exports.moderationPolicyVersionsSchema = exports.moderationDecisionEventSubjectSchema = exports.moderationFindingSchema = exports.applicationModerationStandingSchema = exports.identityBindingStatusSchema = exports.identityBindingTypeSchema = exports.personhoodStatusSchema = exports.contributionTierSchema = exports.conductStandingSchema = exports.conductStrikeStatusSchema = exports.moderationEffectSkipReasonSchema = exports.moderationEffectStatusSchema = exports.moderationEffectTypeSchema = void 0;
|
|
32
|
+
exports.rollbackRequestSchema = exports.updateListResponseSchema = exports.channelListResponseSchema = exports.channelSchema = exports.rollbackToEmbeddedEntrySchema = exports.createUpdateResponseSchema = exports.updateSchema = exports.createUpdateRequestSchema = exports.updateAssetRefSchema = exports.assetCompleteResponseSchema = exports.assetCompleteResultItemSchema = exports.assetCompleteRequestSchema = exports.assetInitResponseSchema = exports.assetUploadTicketSchema = exports.assetInitRequestSchema = exports.assetInitItemSchema = exports.rolloutPercentSchema = exports.runtimeVersionSchema = exports.channelNameSchema = exports.sha256HexSchema = exports.updateAssetStatusSchema = exports.updateStatusSchema = exports.updatePlatformSchema = exports.backupStatusResponseSchema = exports.backupUploadRequestSchema = exports.encryptedBackupEnvelopeSchema = exports.backupLookupIdSchema = exports.rotateKeyCompleteResponseSchema = exports.rotateKeyCompleteRequestSchema = exports.rotateKeyChallengeResponseSchema = exports.loginResultSchema = exports.hubAuthorizeResultSchema = exports.hubAuthorizeRequestSchema = exports.hubActivateRequestSchema = exports.hubClaimRequestSchema = exports.hubSessionSchema = exports.browserHubRevokeResponseSchema = exports.browserHubErrorSchema = exports.browserHubResolveResponseSchema = exports.browserHubHandleResponseSchema = exports.browserHubHandleRequestSchema = exports.browserHubHandleSchema = exports.BROWSER_HUB_HANDLE_TTL_MS = exports.BROWSER_HUB_COOKIE_ATTRIBUTES = exports.BROWSER_HUB_COOKIE_NAME = exports.mcpOAuthConsentResponseSchema = exports.mcpOAuthClientInfoResponseSchema = exports.mcpOAuthConsentContextSchema = exports.mcpOAuthWriteActionSchema = exports.mcpOAuthClientApplicationSchema = void 0;
|
|
33
|
+
exports.USAGE_SOURCES = exports.usageUnitSchema = exports.USAGE_UNITS = exports.moneySchema = exports.exactDecimalSchema = exports.INFERENCE_MONEY_SCALE = exports.currencyCodeSchema = exports.RESERVED_ALIA_PUBLISHER = exports.inferenceRegionSchema = exports.deploymentIdSchema = exports.inferenceProviderSlugSchema = exports.routingProfileSlugSchema = exports.routingProfileIdSchema = exports.modelReferenceSchema = exports.modelRevisionLabelSchema = exports.modelIdSchema = exports.modelSlugSchema = exports.publisherSlugSchema = exports.sha256DigestSchema = exports.inferenceHttpsUrlSchema = exports.inferenceDateSchema = exports.inferenceTimestampSchema = exports.inferenceEnvironmentSchema = exports.idempotencyKeySchema = exports.generationIdSchema = exports.requestIdSchema = exports.oxyCredentialIdSchema = exports.oxyApplicationIdSchema = exports.delegatedUserIdSchema = exports.oxyAccountIdSchema = exports.INFERENCE_CONTRACT_VERSION = exports.transparencyCheckpointListSchema = exports.transparencyInclusionProofSchema = exports.transparencyCheckpointSchema = exports.transparencyAnchorSchema = exports.transparencyCheckpointSignatureSchema = exports.deviceTransferDenyResponseSchema = exports.deviceTransferApproveResponseSchema = exports.deviceTransferApproveRequestSchema = exports.deviceTransferInfoResponseSchema = exports.deviceTransferInitResponseSchema = exports.deviceTransferInitRequestSchema = exports.devicePairingStatusSchema = exports.webauthnLoginVerifyRequestSchema = exports.webauthnRegisterVerifyRequestSchema = exports.webauthnLoginOptionsRequestSchema = exports.webauthnRegisterOptionsRequestSchema = exports.updateRolloutPatchSchema = exports.promoteRequestSchema = exports.rollbackToEmbeddedRequestSchema = void 0;
|
|
34
|
+
exports.aliaReleaseArtifactSchema = exports.authorizedRouteSchema = exports.routingPolicyReferenceSchema = exports.routingPolicySchema = exports.routingFallbackPolicySchema = exports.routingPolicyScopeSchema = exports.routingTargetSchema = exports.modelCatalogueEntrySchema = exports.catalogueServingProviderSummarySchema = exports.cataloguePublisherSummarySchema = exports.routingProfileSchema = exports.routingProfileCandidateSchema = exports.modelDeploymentSchema = exports.inferenceProviderSchema = exports.modelRevisionSchema = exports.catalogueModelSchema = exports.modelPublisherSchema = exports.modelSafetyMetadataSchema = exports.modelEvaluationResultSchema = exports.modelDeprecationSchema = exports.commercialPermissionSchema = exports.availabilityScopeSchema = exports.inferenceDataPolicySchema = exports.modelProvenanceSchema = exports.modelLicenseSchema = exports.modelCapabilitiesSchema = exports.inferenceModalitySchema = exports.priceSnapshotSchema = exports.priceVersionSchema = exports.priceVersionStatusSchema = exports.embeddingResponseSchema = exports.embeddingFailureSchema = exports.embeddingSuccessSchema = exports.embeddingUsageSchema = exports.embeddingVectorSchema = exports.inferenceErrorSchema = exports.providerErrorPassthroughSchema = exports.safeErrorTextSchema = exports.upstreamErrorCategorySchema = exports.inferenceErrorCodeSchema = exports.NON_RETRYABLE_INFERENCE_ERROR_CODES = exports.INFERENCE_ERROR_CODES = exports.inferenceAttributionSchema = exports.authenticatedPrincipalSchema = exports.billingPrincipalSchema = exports.inferenceScopeSchema = exports.INFERENCE_SCOPES = exports.unitPriceSchema = exports.usageQuantitySchema = exports.usageSourceSchema = void 0;
|
|
35
|
+
exports.kaanaCredentialCreateMutationSchema = exports.kaanaCredentialIdentitySchema = exports.kaanaCredentialOperationActionSchema = exports.kaanaCredentialOperationIdSchema = exports.kaanaCredentialHandleSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.inferenceContentSourceSchema = exports.modelDocumentationSchema = exports.modelReleaseIngestionResultSchema = exports.modelReleaseIngestionRequestSchema = exports.modelLineDeclarationSchema = exports.modelGpaiDocumentationSchema = exports.modelDownstreamDocumentationSchema = exports.SYSTEMIC_RISK_COMPUTE_THRESHOLD_FLOPS = exports.trainingComputeFlopsSchema = exports.modelSystemicRiskTierSchema = exports.modelDistributionMethodSchema = exports.aliaModelReleaseManifestSchema = exports.aliaReleaseSignatureSchema = void 0;
|
|
36
|
+
exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerCredentialCustodyStateSchema = exports.providerCredentialValidationDeploymentSchema = exports.providerCredentialValidationOperationSchema = exports.kaanaCredentialValidationOutcomeSchema = exports.kaanaCredentialValidationFailureCodeSchema = exports.kaanaCredentialValidationOutcomeStateSchema = exports.kaanaCredentialValidationTaskSchema = exports.kaanaCredentialOutcomeSchema = exports.kaanaCredentialConflictOutcomeSchema = exports.kaanaCredentialAppliedOutcomeSchema = exports.kaanaCredentialOutcomeRequestSchema = exports.kaanaCredentialRevokeOutcomeRequestSchema = exports.kaanaCredentialRotateOutcomeRequestSchema = exports.kaanaCredentialCreateOutcomeRequestSchema = exports.kaanaCredentialMutationSchema = exports.kaanaCredentialRevokeMutationSchema = exports.kaanaCredentialRotateMutationSchema = void 0;
|
|
37
|
+
exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = exports.payAsYouGoEntitlementSchema = void 0;
|
|
24
38
|
var accountGraph_1 = require("./accountGraph");
|
|
25
39
|
Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
|
|
26
40
|
Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
|
|
@@ -108,6 +122,8 @@ Object.defineProperty(exports, "didDocumentSchema", { enumerable: true, get: fun
|
|
|
108
122
|
Object.defineProperty(exports, "signedRecordEnvelopeSchema", { enumerable: true, get: function () { return identity_1.signedRecordEnvelopeSchema; } });
|
|
109
123
|
Object.defineProperty(exports, "verifiedDomainSchema", { enumerable: true, get: function () { return identity_1.verifiedDomainSchema; } });
|
|
110
124
|
Object.defineProperty(exports, "domainVerificationRequestSchema", { enumerable: true, get: function () { return identity_1.domainVerificationRequestSchema; } });
|
|
125
|
+
Object.defineProperty(exports, "resourceDomainOwnershipRequestSchema", { enumerable: true, get: function () { return identity_1.resourceDomainOwnershipRequestSchema; } });
|
|
126
|
+
Object.defineProperty(exports, "resourceDomainOwnershipResponseSchema", { enumerable: true, get: function () { return identity_1.resourceDomainOwnershipResponseSchema; } });
|
|
111
127
|
Object.defineProperty(exports, "domainVerificationInstructionsSchema", { enumerable: true, get: function () { return identity_1.domainVerificationInstructionsSchema; } });
|
|
112
128
|
Object.defineProperty(exports, "authMethodEntrySchema", { enumerable: true, get: function () { return identity_1.authMethodEntrySchema; } });
|
|
113
129
|
Object.defineProperty(exports, "authMethodsResponseSchema", { enumerable: true, get: function () { return identity_1.authMethodsResponseSchema; } });
|
|
@@ -235,12 +251,6 @@ Object.defineProperty(exports, "reputationReportingSchema", { enumerable: true,
|
|
|
235
251
|
Object.defineProperty(exports, "reputationReviewingSchema", { enumerable: true, get: function () { return moderationReputation_1.reputationReviewingSchema; } });
|
|
236
252
|
Object.defineProperty(exports, "reputationContextualInfluenceSchema", { enumerable: true, get: function () { return moderationReputation_1.reputationContextualInfluenceSchema; } });
|
|
237
253
|
Object.defineProperty(exports, "applicationModerationTrustSchema", { enumerable: true, get: function () { return moderationReputation_1.applicationModerationTrustSchema; } });
|
|
238
|
-
var links_1 = require("./links");
|
|
239
|
-
// Schemas
|
|
240
|
-
Object.defineProperty(exports, "linkPreviewSchema", { enumerable: true, get: function () { return links_1.linkPreviewSchema; } });
|
|
241
|
-
Object.defineProperty(exports, "linkPreviewBatchRequestSchema", { enumerable: true, get: function () { return links_1.linkPreviewBatchRequestSchema; } });
|
|
242
|
-
Object.defineProperty(exports, "linkPreviewBatchResponseSchema", { enumerable: true, get: function () { return links_1.linkPreviewBatchResponseSchema; } });
|
|
243
|
-
Object.defineProperty(exports, "linkPreviewResponseSchema", { enumerable: true, get: function () { return links_1.linkPreviewResponseSchema; } });
|
|
244
254
|
var deviceSession_1 = require("./deviceSession");
|
|
245
255
|
Object.defineProperty(exports, "sessionAccountSchema", { enumerable: true, get: function () { return deviceSession_1.sessionAccountSchema; } });
|
|
246
256
|
Object.defineProperty(exports, "deviceSessionStateSchema", { enumerable: true, get: function () { return deviceSession_1.deviceSessionStateSchema; } });
|
|
@@ -266,6 +276,11 @@ Object.defineProperty(exports, "deviceDirectorySyncSchema", { enumerable: true,
|
|
|
266
276
|
var oauth_1 = require("./oauth");
|
|
267
277
|
Object.defineProperty(exports, "oauthConsentDecisionSchema", { enumerable: true, get: function () { return oauth_1.oauthConsentDecisionSchema; } });
|
|
268
278
|
Object.defineProperty(exports, "oauthAuthorizeCodeResponseSchema", { enumerable: true, get: function () { return oauth_1.oauthAuthorizeCodeResponseSchema; } });
|
|
279
|
+
Object.defineProperty(exports, "mcpOAuthClientApplicationSchema", { enumerable: true, get: function () { return oauth_1.mcpOAuthClientApplicationSchema; } });
|
|
280
|
+
Object.defineProperty(exports, "mcpOAuthWriteActionSchema", { enumerable: true, get: function () { return oauth_1.mcpOAuthWriteActionSchema; } });
|
|
281
|
+
Object.defineProperty(exports, "mcpOAuthConsentContextSchema", { enumerable: true, get: function () { return oauth_1.mcpOAuthConsentContextSchema; } });
|
|
282
|
+
Object.defineProperty(exports, "mcpOAuthClientInfoResponseSchema", { enumerable: true, get: function () { return oauth_1.mcpOAuthClientInfoResponseSchema; } });
|
|
283
|
+
Object.defineProperty(exports, "mcpOAuthConsentResponseSchema", { enumerable: true, get: function () { return oauth_1.mcpOAuthConsentResponseSchema; } });
|
|
269
284
|
var browserHub_1 = require("./browserHub");
|
|
270
285
|
Object.defineProperty(exports, "BROWSER_HUB_COOKIE_NAME", { enumerable: true, get: function () { return browserHub_1.BROWSER_HUB_COOKIE_NAME; } });
|
|
271
286
|
Object.defineProperty(exports, "BROWSER_HUB_COOKIE_ATTRIBUTES", { enumerable: true, get: function () { return browserHub_1.BROWSER_HUB_COOKIE_ATTRIBUTES; } });
|
|
@@ -591,6 +606,7 @@ Object.defineProperty(exports, "actorRefSchema", { enumerable: true, get: functi
|
|
|
591
606
|
Object.defineProperty(exports, "resourceRefSchema", { enumerable: true, get: function () { return agency_1.resourceRefSchema; } });
|
|
592
607
|
Object.defineProperty(exports, "toolGrantOverrideSchema", { enumerable: true, get: function () { return agency_1.toolGrantOverrideSchema; } });
|
|
593
608
|
Object.defineProperty(exports, "grantLimitSchema", { enumerable: true, get: function () { return agency_1.grantLimitSchema; } });
|
|
609
|
+
Object.defineProperty(exports, "capabilityCatalogBindingSchema", { enumerable: true, get: function () { return agency_1.capabilityCatalogBindingSchema; } });
|
|
594
610
|
Object.defineProperty(exports, "executionAuthorizationRefSchema", { enumerable: true, get: function () { return agency_1.executionAuthorizationRefSchema; } });
|
|
595
611
|
Object.defineProperty(exports, "capabilityCoordinatorSchema", { enumerable: true, get: function () { return agency_1.capabilityCoordinatorSchema; } });
|
|
596
612
|
Object.defineProperty(exports, "delegationGrantSchema", { enumerable: true, get: function () { return agency_1.delegationGrantSchema; } });
|
|
@@ -622,3 +638,4 @@ Object.defineProperty(exports, "inboxNaturalSearchResponseSchema", { enumerable:
|
|
|
622
638
|
Object.defineProperty(exports, "inboxSmartRepliesResponseSchema", { enumerable: true, get: function () { return inbox_1.inboxSmartRepliesResponseSchema; } });
|
|
623
639
|
Object.defineProperty(exports, "inboxThreadSummaryResponseSchema", { enumerable: true, get: function () { return inbox_1.inboxThreadSummaryResponseSchema; } });
|
|
624
640
|
Object.defineProperty(exports, "inboxInferenceStreamEventSchema", { enumerable: true, get: function () { return inbox_1.inboxInferenceStreamEventSchema; } });
|
|
641
|
+
__exportStar(require("./externalIdentity"), exports);
|
package/dist/cjs/oauth.js
CHANGED
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.oauthAuthorizeCodeResponseSchema = exports.oauthConsentDecisionSchema = void 0;
|
|
3
|
+
exports.mcpOAuthConsentResponseSchema = exports.mcpOAuthClientInfoResponseSchema = exports.mcpOAuthConsentContextSchema = exports.mcpOAuthWriteActionSchema = exports.mcpOAuthClientApplicationSchema = exports.oauthAuthorizeCodeResponseSchema = exports.oauthConsentDecisionSchema = void 0;
|
|
4
4
|
const zod_1 = require("zod");
|
|
5
|
+
const agency_1 = require("./agency");
|
|
6
|
+
const sessionStatus_1 = require("./sessionStatus");
|
|
5
7
|
/**
|
|
6
8
|
* The two `/auth/oauth/*` responses the browser hub's edge layer reads.
|
|
7
9
|
*
|
|
@@ -64,3 +66,50 @@ exports.oauthAuthorizeCodeResponseSchema = zod_1.z.object({
|
|
|
64
66
|
redirectUri: zod_1.z.string(),
|
|
65
67
|
expiresIn: zod_1.z.number().int().positive(),
|
|
66
68
|
});
|
|
69
|
+
/**
|
|
70
|
+
* Display-safe identity of a dynamically registered external MCP client.
|
|
71
|
+
* Reuses the ordinary public application projection and adds only the public
|
|
72
|
+
* DCR client id needed to bind the consent surface to the request.
|
|
73
|
+
*/
|
|
74
|
+
exports.mcpOAuthClientApplicationSchema = sessionStatus_1.publicApplicationSchema.extend({
|
|
75
|
+
clientId: zod_1.z.string().min(1),
|
|
76
|
+
}).strict();
|
|
77
|
+
/**
|
|
78
|
+
* An effectful MCP action the requested capability set can actually invoke.
|
|
79
|
+
* Every field is picked from the canonical catalog tool schema so consent can
|
|
80
|
+
* never maintain a second tool description or effect classification.
|
|
81
|
+
*/
|
|
82
|
+
exports.mcpOAuthWriteActionSchema = agency_1.catalogToolSchema.innerType().pick({
|
|
83
|
+
name: true,
|
|
84
|
+
version: true,
|
|
85
|
+
description: true,
|
|
86
|
+
requiredCapabilities: true,
|
|
87
|
+
effect: true,
|
|
88
|
+
}).strict().refine((action) => action.effect !== 'read', {
|
|
89
|
+
message: 'MCP consent write actions must be effectful',
|
|
90
|
+
path: ['effect'],
|
|
91
|
+
});
|
|
92
|
+
/** Exact, server-resolved context rendered before an external MCP grant. */
|
|
93
|
+
exports.mcpOAuthConsentContextSchema = zod_1.z.object({
|
|
94
|
+
client: exports.mcpOAuthClientApplicationSchema,
|
|
95
|
+
account: zod_1.z.object({
|
|
96
|
+
id: zod_1.z.string().min(1),
|
|
97
|
+
displayName: zod_1.z.string().min(1).optional(),
|
|
98
|
+
handle: zod_1.z.string().min(1).optional(),
|
|
99
|
+
avatar: zod_1.z.string().min(1).optional(),
|
|
100
|
+
}).strict(),
|
|
101
|
+
resource: zod_1.z.object({
|
|
102
|
+
appId: zod_1.z.string().min(1),
|
|
103
|
+
uri: zod_1.z.string().url(),
|
|
104
|
+
application: sessionStatus_1.publicApplicationSchema,
|
|
105
|
+
}).strict(),
|
|
106
|
+
capabilities: zod_1.z.array(zod_1.z.string().min(1)).min(1),
|
|
107
|
+
writeActions: zod_1.z.array(exports.mcpOAuthWriteActionSchema),
|
|
108
|
+
}).strict();
|
|
109
|
+
exports.mcpOAuthClientInfoResponseSchema = zod_1.z.object({
|
|
110
|
+
application: exports.mcpOAuthClientApplicationSchema,
|
|
111
|
+
}).strict();
|
|
112
|
+
exports.mcpOAuthConsentResponseSchema = zod_1.z.object({
|
|
113
|
+
consentRequired: zod_1.z.boolean(),
|
|
114
|
+
context: exports.mcpOAuthConsentContextSchema,
|
|
115
|
+
}).strict();
|
package/dist/cjs/webauthn.js
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
*
|
|
5
5
|
* These schemas describe ONLY the outer Oxy envelope that wraps a WebAuthn
|
|
6
6
|
* ceremony request — the username the client is registering/authenticating as,
|
|
7
|
-
* plus
|
|
7
|
+
* plus non-authoritative device metadata. The browser
|
|
8
8
|
* `RegistrationResponseJSON` / `AuthenticationResponseJSON` payloads are NOT
|
|
9
9
|
* mirrored here: they are validated by `@simplewebauthn/server` inside the route
|
|
10
10
|
* (`verifyRegistrationResponse` / `verifyAuthenticationResponse`), which is the
|