@oxy.so/contracts 1.0.1 → 1.1.1

package/dist/esm/agency.js

@@ -52,6 +52,11 @@ export const grantLimitSchema = z.object({
     // queries) and ADR 0016 forbids persisting those in Oxy.
     value: z.union([z.number().finite(), z.boolean()]),
 }).strict();
+export const capabilityCatalogBindingSchema = z.object({
+    registrationId: identifierSchema,
+    version: identifierSchema,
+    digest: sha256HexSchema,
+}).strict();
 export const executionAuthorizationRefSchema = z.discriminatedUnion('kind', [
     z.object({
         kind: z.literal('direct_request'),
@@ -72,6 +77,7 @@ export const delegationGrantSchema = z.object({
     ownerAccountId: identifierSchema,
     actor: actorRefSchema,
     resource: resourceRefSchema,
+    catalog: capabilityCatalogBindingSchema.nullable(),
     capabilityPackages: z.array(capabilityPackageSchema),
     capabilities: z.array(identifierSchema),
     toolOverrides: z.array(toolGrantOverrideSchema).default([]),

package/dist/esm/externalIdentity.js

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+import { userResponseSchema } from './userResponse.js';
+export const externalIdentityReferenceSchema = z.object({
+    canonicalAcct: z.string().min(1),
+    network: z.string().min(1),
+    protocol: z.enum(['activitypub', 'atproto']),
+    actorUri: z.string().min(1),
+    transportAcct: z.string().min(1),
+    sourceUserId: z.string().min(1),
+});
+export const resolveExternalIdentityRequestSchema = z.object({
+    actorUri: z.string().min(1).max(2048).optional(),
+    handle: z.string().min(1).max(2048).optional(),
+    transportAcct: z.string().max(320).optional(),
+    protocol: z.enum(['activitypub', 'atproto']).optional(),
+}).refine(value => Boolean(value.actorUri) !== Boolean(value.handle), 'Exactly one actorUri or handle is required');
+export const resolveExternalIdentityResponseSchema = z.object({
+    user: userResponseSchema.extend({
+        id: z.string().min(1),
+        username: z.string().min(1),
+        bio: z.string().optional(),
+        externalIdentities: z.array(externalIdentityReferenceSchema),
+        redirectedUserIds: z.array(z.string()),
+    }),
+    externalIdentity: externalIdentityReferenceSchema.extend({ userId: z.string() }),
+    externalIdentities: z.array(externalIdentityReferenceSchema),
+    redirectedUserIds: z.array(z.string()),
+}).superRefine((value, context) => {
+    if (value.externalIdentity.userId !== value.user.id) {
+        context.addIssue({ code: z.ZodIssueCode.custom, path: ['externalIdentity', 'userId'], message: 'Canonical user id does not match profile' });
+    }
+    if (!value.externalIdentities.some(identity => identity.actorUri === value.externalIdentity.actorUri
+        && identity.canonicalAcct === value.externalIdentity.canonicalAcct
+        && identity.sourceUserId === value.externalIdentity.sourceUserId)) {
+        context.addIssue({ code: z.ZodIssueCode.custom, path: ['externalIdentity'], message: 'Resolved source is absent from authoritative identities' });
+    }
+    if (!value.externalIdentities.some(identity => identity.canonicalAcct === value.user.username)) {
+        context.addIssue({ code: z.ZodIssueCode.custom, path: ['user', 'username'], message: 'Profile handle is not an authoritative identity' });
+    }
+});
+export const lookupExternalIdentitiesRequestSchema = z.object({ identifiers: z.array(z.string().min(1).max(2048)).min(1).max(100) });
+export const lookupExternalIdentitiesResponseSchema = z.object({
+    identities: z.array(z.object({
+        identifier: z.string(),
+        userId: z.string().nullable(),
+        externalIdentities: z.array(externalIdentityReferenceSchema),
+        redirectedUserIds: z.array(z.string()),
+    })),
+});

package/dist/esm/identity.js

@@ -168,6 +168,25 @@ export const verifiedDomainSchema = z.object({
 export const domainVerificationRequestSchema = z.object({
     domain: z.string().trim().min(1),
 });
+const resourceOriginHostSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .pipe(z.string().min(1).max(253).regex(/^(?!-)[a-z0-9-]{1,63}(?<!-)(?:\.(?!-)[a-z0-9-]{1,63}(?<!-))+$/, 'originHost must be a public DNS hostname without scheme, port or path'));
+/** Clarity resource-server request to bind a site to Oxy domain authority. */
+export const resourceDomainOwnershipRequestSchema = z.object({
+    accountId: z.string().min(1).max(128),
+    verifiedDomainId: z.string().min(1).max(128),
+    originHost: resourceOriginHostSchema,
+}).strict();
+export const resourceDomainOwnershipResponseSchema = z.object({
+    verified: z.boolean(),
+    accountId: z.string().min(1).max(128),
+    verifiedDomainId: z.string().min(1).max(128),
+    originHost: resourceOriginHostSchema,
+    verifiedAt: z.string().datetime().optional(),
+    method: z.enum(['dns-txt', 'well-known']).optional(),
+}).strict();
 /**
  * The instructions the API returns when a domain verification is requested. The
  * caller may prove ownership EITHER by publishing the `dns` TXT record OR by

package/dist/esm/index.js

@@ -31,7 +31,7 @@ export {
 recommendationExcludeTypeSchema, recommendationBoostSchema, recommendationSignalWeightsSchema, recommendationRequestSchema, recommendationCountSchema, recommendationItemSchema, recommendationResponseSchema, appEndorsementInputSchema, appInterestInputSchema, appUserSignalIngestSchema, appAffinityEventTypeSchema, appAffinityEventSchema, appAffinityEventsIngestSchema, } from './recommendations.js';
 export { 
 // Schemas
-verificationMethodSchema, didServiceSchema, didDocumentSchema, signedRecordEnvelopeSchema, verifiedDomainSchema, domainVerificationRequestSchema, domainVerificationInstructionsSchema, authMethodEntrySchema, authMethodsResponseSchema, exportAttestationSchema, exportUsageReceiptSchema, exportLedgerEntrySchema, exportUsageReservationSchema, exportFinancialSectionSchema, exportBundleSchema, } from './identity.js';
+verificationMethodSchema, didServiceSchema, didDocumentSchema, signedRecordEnvelopeSchema, verifiedDomainSchema, domainVerificationRequestSchema, resourceDomainOwnershipRequestSchema, resourceDomainOwnershipResponseSchema, domainVerificationInstructionsSchema, authMethodEntrySchema, authMethodsResponseSchema, exportAttestationSchema, exportUsageReceiptSchema, exportLedgerEntrySchema, exportUsageReservationSchema, exportFinancialSectionSchema, exportBundleSchema, } from './identity.js';
 export { 
 // Schemas
 oxySignedRecordTypeSchema, } from './oxyRecordTypes.js';
@@ -67,12 +67,9 @@ moderationFindingSchema, moderationDecisionEventSubjectSchema, moderationPolicyV
 registerIdentityBindingSchema, identityBindingSchema, 
 // Schemas — the derived V2 axes
 reputationPersonhoodSchema, reputationContributionSchema, reputationConductSchema, reputationReportingSchema, reputationReviewingSchema, reputationContextualInfluenceSchema, applicationModerationTrustSchema, } from './moderationReputation.js';
-export { 
-// Schemas
-linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchResponseSchema, linkPreviewResponseSchema, } from './links.js';
 export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceBackgroundCredentialResponseSchema, deviceBackgroundTokenRequestSchema, deviceBackgroundTokenResponseSchema, SESSION_ACCOUNTS_CHANGED_EVENT, sessionAccountsChangedReasonSchema, sessionAccountsChangedEventSchema, } from './deviceSession.js';
 export { deviceContextRelationshipSchema, deviceDirectoryProfileSchema, deviceAccountContextSchema, devicePrincipalSchema, deviceDirectorySchema, deviceActivateRequestSchema, deviceActivateResponseSchema, deviceDirectorySyncSchema, } from './deviceDirectory.js';
-export { oauthConsentDecisionSchema, oauthAuthorizeCodeResponseSchema } from './oauth.js';
+export { oauthConsentDecisionSchema, oauthAuthorizeCodeResponseSchema, mcpOAuthClientApplicationSchema, mcpOAuthWriteActionSchema, mcpOAuthConsentContextSchema, mcpOAuthClientInfoResponseSchema, mcpOAuthConsentResponseSchema, } from './oauth.js';
 export { BROWSER_HUB_COOKIE_NAME, BROWSER_HUB_COOKIE_ATTRIBUTES, BROWSER_HUB_HANDLE_TTL_MS, browserHubHandleSchema, browserHubHandleRequestSchema, browserHubHandleResponseSchema, browserHubResolveResponseSchema, browserHubErrorSchema, browserHubRevokeResponseSchema, hubSessionSchema, hubClaimRequestSchema, hubActivateRequestSchema, hubAuthorizeRequestSchema, hubAuthorizeResultSchema, } from './browserHub.js';
 export { 
 // Schemas
@@ -168,6 +165,7 @@ export {
 // Product entitlements. Allowances are integer counts and money is an exact
 // decimal, so a plan allowance cannot be added to a balance.
 PRODUCT_PLAN_STATUSES, productPlanStatusSchema, LIVE_PRODUCT_PLAN_STATUSES, planAllowanceSchema, productPlanSchema, payAsYouGoEntitlementSchema, COST_CENTER_STATUSES, costCenterStatusSchema, costCenterSchema, costCenterSpendSchema, productEntitlementSchema, } from './inference/entitlement.js';
-export { AUTONOMY_LEVELS, CAPABILITY_PACKAGES, autonomyLevelSchema, capabilityPackageSchema, actorRefSchema, resourceRefSchema, toolGrantOverrideSchema, grantLimitSchema, executionAuthorizationRefSchema, capabilityCoordinatorSchema, delegationGrantSchema, automationTriggerSchema, automationActorSelectionSchema, automationDataFlowSchema, automationDefinitionSchema, capabilityTicketClaimsSchema, policyDecisionSchema, auditResultSchema, auditEventSchema, catalogToolSchema, catalogEventSchema, appCapabilityCatalogSchema, catalogRegistrationSchema, normalizedAppEventSchema, } from './agency.js';
+export { AUTONOMY_LEVELS, CAPABILITY_PACKAGES, autonomyLevelSchema, capabilityPackageSchema, actorRefSchema, resourceRefSchema, toolGrantOverrideSchema, grantLimitSchema, capabilityCatalogBindingSchema, executionAuthorizationRefSchema, capabilityCoordinatorSchema, delegationGrantSchema, automationTriggerSchema, automationActorSelectionSchema, automationDataFlowSchema, automationDefinitionSchema, capabilityTicketClaimsSchema, policyDecisionSchema, auditResultSchema, auditEventSchema, catalogToolSchema, catalogEventSchema, appCapabilityCatalogSchema, catalogRegistrationSchema, normalizedAppEventSchema, } from './agency.js';
 export { emailContextAddressSchema, emailContextMailboxSchema, emailContextMessageSchema, emailAgentContextSchema, } from './emailAgentContext.js';
 export { inboxComposeRequestSchema, inboxDailyBriefRequestSchema, inboxNaturalSearchRequestSchema, inboxMessageInferenceParamsSchema, inboxInferenceTextResponseSchema, inboxNaturalSearchResponseSchema, inboxSmartRepliesResponseSchema, inboxThreadSummaryResponseSchema, inboxInferenceStreamEventSchema, } from './inference/inbox.js';
+export * from './externalIdentity.js';

package/dist/esm/oauth.js

@@ -1,4 +1,6 @@
 import { z } from 'zod';
+import { catalogToolSchema } from './agency.js';
+import { publicApplicationSchema } from './sessionStatus.js';
 /**
  * The two `/auth/oauth/*` responses the browser hub's edge layer reads.
  *
@@ -61,3 +63,50 @@ export const oauthAuthorizeCodeResponseSchema = z.object({
     redirectUri: z.string(),
     expiresIn: z.number().int().positive(),
 });
+/**
+ * Display-safe identity of a dynamically registered external MCP client.
+ * Reuses the ordinary public application projection and adds only the public
+ * DCR client id needed to bind the consent surface to the request.
+ */
+export const mcpOAuthClientApplicationSchema = publicApplicationSchema.extend({
+    clientId: z.string().min(1),
+}).strict();
+/**
+ * An effectful MCP action the requested capability set can actually invoke.
+ * Every field is picked from the canonical catalog tool schema so consent can
+ * never maintain a second tool description or effect classification.
+ */
+export const mcpOAuthWriteActionSchema = catalogToolSchema.innerType().pick({
+    name: true,
+    version: true,
+    description: true,
+    requiredCapabilities: true,
+    effect: true,
+}).strict().refine((action) => action.effect !== 'read', {
+    message: 'MCP consent write actions must be effectful',
+    path: ['effect'],
+});
+/** Exact, server-resolved context rendered before an external MCP grant. */
+export const mcpOAuthConsentContextSchema = z.object({
+    client: mcpOAuthClientApplicationSchema,
+    account: z.object({
+        id: z.string().min(1),
+        displayName: z.string().min(1).optional(),
+        handle: z.string().min(1).optional(),
+        avatar: z.string().min(1).optional(),
+    }).strict(),
+    resource: z.object({
+        appId: z.string().min(1),
+        uri: z.string().url(),
+        application: publicApplicationSchema,
+    }).strict(),
+    capabilities: z.array(z.string().min(1)).min(1),
+    writeActions: z.array(mcpOAuthWriteActionSchema),
+}).strict();
+export const mcpOAuthClientInfoResponseSchema = z.object({
+    application: mcpOAuthClientApplicationSchema,
+}).strict();
+export const mcpOAuthConsentResponseSchema = z.object({
+    consentRequired: z.boolean(),
+    context: mcpOAuthConsentContextSchema,
+}).strict();

package/dist/esm/webauthn.js

@@ -3,7 +3,7 @@
  *
  * These schemas describe ONLY the outer Oxy envelope that wraps a WebAuthn
  * ceremony request — the username the client is registering/authenticating as,
- * plus the device-session options every first-party sign-in accepts. The browser
+ * plus non-authoritative device metadata. The browser
  * `RegistrationResponseJSON` / `AuthenticationResponseJSON` payloads are NOT
  * mirrored here: they are validated by `@simplewebauthn/server` inside the route
  * (`verifyRegistrationResponse` / `verifyAuthenticationResponse`), which is the