@oxy.so/contracts 1.1.1 → 1.3.0

package/dist/types/identityProof.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Identity proof contract — the ONE signed format for operations on a personal root.
+ *
+ * ADR 0024 D7. A proof is a signature by the root key over the canonical bytes
+ * of {@link IdentityProofClaims}. Every field the verifier cares about is IN the
+ * signed bytes, so a signature cannot be moved to another operation, account,
+ * root, payload, revision or audience, and the one-use `challenge` means it
+ * cannot be replayed either (a timestamp window is not replay protection).
+ *
+ * Both sides build the bytes with {@link buildIdentityProofMessage} and hash
+ * payloads with {@link canonicalJson}; neither writes its own JSON template, so
+ * the client and the verifier cannot drift apart.
+ *
+ * Platform-agnostic — zod only, ESM-safe (no `require()`), no hashing here (the
+ * caller hashes `canonicalJson(payload)` with SHA-256 using its platform's
+ * primitive and passes the hex digest in).
+ */
+import { z } from 'zod';
+export declare const IDENTITY_PROOF_VERSION: 2;
+export declare const IDENTITY_PROOF_DOMAIN: "oxy-identity-proof";
+/** The audience every API-verified identity proof names. */
+export declare const IDENTITY_PROOF_AUDIENCE: "oxy-api/identity";
+/** How long a proof challenge lives: one interactive ceremony. */
+export declare const IDENTITY_PROOF_CHALLENGE_TTL_MS: number;
+/**
+ * Everything a root proof may authorize. A challenge is minted for exactly one
+ * action and spent only by a proof for that action.
+ */
+export declare const IDENTITY_PROOF_ACTIONS: {
+    /** A keyless account's FIRST root, stored with its web envelope. */
+    readonly establish: "web_envelope_establish";
+    /** Replace the web envelope (add or remove a wrap, re-seal). */
+    readonly put: "web_envelope_put";
+    /** Record that the recovery material is written down. */
+    readonly phraseConfirmed: "web_envelope_phrase_confirmed";
+    /** Record that the recovery material re-derived the root. */
+    readonly recoveryVerified: "web_envelope_recovery_verified";
+    /** Remove the web holder. */
+    readonly delete: "web_envelope_delete";
+    /** Link a keyless account's first root without a web envelope (`POST /auth/link`). */
+    readonly link: "link_identity";
+    /** Create a personal account together with its root (passkey sign-up). */
+    readonly enroll: "enroll_identity";
+    /** Prove the root to start signed-out recovery. */
+    readonly recoverStart: "recover_account_start";
+    /** Bind the new passkey and envelope when completing signed-out recovery. */
+    readonly recoverComplete: "recover_account_complete";
+    /** Seal the root for the Commons device that joined a move (payload: move id + sealed bytes). */
+    readonly moveSeal: "identity_move_seal";
+};
+export type IdentityProofAction = (typeof IDENTITY_PROOF_ACTIONS)[keyof typeof IDENTITY_PROOF_ACTIONS];
+export declare const IDENTITY_PROOF_ACTION_VALUES: [IdentityProofAction, ...IdentityProofAction[]];
+/**
+ * The signed claims. `null` is written explicitly for a field that does not
+ * apply, so "absent" can never be confused with a value.
+ */
+export interface IdentityProofClaims {
+    action: IdentityProofAction;
+    /** The account the operation changes (`users.id`), or a namespaced subject (`username:alice`) before one exists. */
+    subject: string;
+    /** Who performs it: the signed-in personal principal, or `credential:<id>` / `anonymous` where none exists. */
+    actor: string;
+    /** The root doing the signing, lowercase uncompressed hex. */
+    rootPublicKey: string;
+    /** SHA-256 hex of `canonicalJson(payload)`, or `null` when the operation has no payload. */
+    payloadDigest: string | null;
+    /** The envelope revision the operation expects to replace, or `null`. */
+    expectedRevision: number | null;
+    audience: string;
+    /** The one-use server challenge. */
+    challenge: string;
+    /** Unix milliseconds after which the proof is refused. */
+    expiresAt: number;
+}
+/**
+ * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace,
+ * `undefined` members omitted, arrays in order. Numbers must be finite. This is
+ * the ONLY serializer for anything digested into a proof.
+ */
+export declare function canonicalJson(value: unknown): string;
+/**
+ * The exact bytes a root signs. Throws on a malformed claim rather than signing
+ * (or verifying) something ambiguous.
+ */
+export declare function buildIdentityProofMessage(claims: IdentityProofClaims): string;
+/** The proof as it travels: the signature plus the two claims the verifier cannot derive. */
+export declare const identityProofSchema: z.ZodObject<{
+    v: z.ZodLiteral<2>;
+    challenge: z.ZodString;
+    expiresAt: z.ZodNumber;
+    signature: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    expiresAt: number;
+    signature: string;
+    v: 2;
+    challenge: string;
+}, {
+    expiresAt: number;
+    signature: string;
+    v: 2;
+    challenge: string;
+}>;
+export type IdentityProof = z.infer<typeof identityProofSchema>;
+/** `POST /identity/proof-challenge` */
+export declare const identityProofChallengeRequestSchema: z.ZodObject<{
+    action: z.ZodEnum<[IdentityProofAction, ...IdentityProofAction[]]>;
+}, "strip", z.ZodTypeAny, {
+    action: IdentityProofAction;
+}, {
+    action: IdentityProofAction;
+}>;
+export type IdentityProofChallengeRequest = z.infer<typeof identityProofChallengeRequestSchema>;
+export interface IdentityProofChallengeResponse {
+    challenge: string;
+    /** Unix milliseconds; a proof must not claim a later `expiresAt`. */
+    expiresAt: number;
+    audience: string;
+}
+export declare const identityProofChallengeResponseSchema: z.ZodType<IdentityProofChallengeResponse>;
+/**
+ * Stable error codes the root routes answer with (`error.code` in the API error
+ * body). Clients map these through their localization, never the English message.
+ */
+export declare const IDENTITY_ERROR_CODES: {
+    readonly proofInvalid: "IDENTITY_PROOF_INVALID";
+    readonly revisionConflict: "IDENTITY_ENVELOPE_REVISION_CONFLICT";
+    readonly rootAlreadyLinked: "IDENTITY_ROOT_ALREADY_LINKED";
+    readonly rootLinkedElsewhere: "IDENTITY_ROOT_LINKED_ELSEWHERE";
+    readonly noRoot: "IDENTITY_NO_ROOT";
+    readonly freshFactorRequired: "IDENTITY_FRESH_FACTOR_REQUIRED";
+    readonly lastWebHolder: "IDENTITY_LAST_WEB_HOLDER";
+    readonly enrollmentRequired: "IDENTITY_ENROLLMENT_REQUIRED";
+    readonly enrollmentInvalid: "IDENTITY_ENROLLMENT_INVALID";
+    readonly notPersonal: "IDENTITY_NOT_PERSONAL_ACCOUNT";
+    readonly recoveryFailed: "IDENTITY_RECOVERY_FAILED";
+};
+export type IdentityErrorCode = (typeof IDENTITY_ERROR_CODES)[keyof typeof IDENTITY_ERROR_CODES];
+/**
+ * `GET /identity/root-status` — non-sensitive readiness metadata any first-party
+ * surface (Accounts, the account menu) may read with a bearer to show a reminder,
+ * without the ciphertext and without opening anything (ADR 0024 D5).
+ */
+export interface IdentityRootStatus {
+    /** Whether the account has a root at all. */
+    rootLinked: boolean;
+    /** Passkeys whose wraps can open the web holder, and how many have proven it. `null`: no web holder. */
+    webHolder: {
+        passkeys: number;
+        verifiedPasskeys: number;
+    } | null;
+    /** Whether the root has recovery words (a raw-key root does not). `null` when unknown (no web holder). */
+    hasPhrase: boolean | null;
+    phraseConfirmedAt: string | null;
+    recoveryVerifiedAt: string | null;
+}
+export declare const identityRootStatusSchema: z.ZodType<IdentityRootStatus>;

package/dist/types/identityRecovery.d.ts

@@ -0,0 +1,246 @@
+/**
+ * Signed-out recovery contract (ADR 0024 D5) — get an EXISTING account back from
+ * its root alone, with no passkey, session or email.
+ *
+ *  1. `POST /identity/recovery/challenge` → a one-use challenge. It says nothing
+ *     about any account.
+ *  2. The holder derives the root locally from recovery material (12/24 words or a
+ *     raw key) and signs `recover_account_start` over that challenge:
+ *     `POST /identity/recovery/start { publicKey, proof }`. Only a valid proof
+ *     learns which account the root belongs to; the response carries passkey
+ *     registration options for THAT account and a short-lived ticket.
+ *  3. The holder creates the passkey, seals the root under it (PRF), and signs
+ *     `recover_account_complete` over the registration challenge and the envelope
+ *     digest: `POST /identity/recovery/complete`. The passkey, the envelope and a
+ *     session are created in one transaction.
+ *
+ * The recovery material and the root never leave the holder. Platform-agnostic —
+ * zod only, ESM-safe.
+ */
+import { z } from 'zod';
+/** A recovery attempt lives this long between steps. */
+export declare const IDENTITY_RECOVERY_TTL_MS: number;
+export interface IdentityRecoveryChallengeResponse {
+    /** 32 bytes, lowercase hex. */
+    challenge: string;
+    /** Unix milliseconds. */
+    expiresAt: number;
+}
+export declare const identityRecoveryChallengeResponseSchema: z.ZodType<IdentityRecoveryChallengeResponse>;
+export declare const identityRecoveryStartRequestSchema: z.ZodObject<{
+    publicKey: z.ZodString;
+    /** `recover_account_start`, subject `root:<publicKey>`, actor `anonymous`. */
+    proof: z.ZodObject<{
+        v: z.ZodLiteral<2>;
+        challenge: z.ZodString;
+        expiresAt: z.ZodNumber;
+        signature: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    }, {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    publicKey: string;
+    proof: {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    };
+}, {
+    publicKey: string;
+    proof: {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    };
+}>;
+export type IdentityRecoveryStartRequest = z.infer<typeof identityRecoveryStartRequestSchema>;
+export interface IdentityRecoveryStartResponse {
+    /** Opaque, one-use; presented once to `complete`. */
+    ticket: string;
+    accountId: string;
+    username: string | null;
+    /** `PublicKeyCredentialCreationOptionsJSON` for the account's new passkey. */
+    registrationOptions: Record<string, unknown>;
+    /** Unix milliseconds. */
+    expiresAt: number;
+}
+export declare const identityRecoveryCompleteRequestSchema: z.ZodObject<{
+    ticket: z.ZodString;
+    /** The browser `RegistrationResponseJSON`, verified by the API's WebAuthn library. */
+    response: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    /** The root sealed under the new passkey — exactly one wrap, for that credential. */
+    envelope: z.ZodEffects<z.ZodObject<{
+        version: z.ZodLiteral<2>;
+        algorithm: z.ZodLiteral<"xchacha20poly1305">;
+        publicKey: z.ZodString;
+        secretKind: z.ZodEnum<["mnemonic-entropy", "raw-private-key"]>;
+        secretNonce: z.ZodString;
+        sealedSecret: z.ZodString;
+        wraps: z.ZodArray<z.ZodObject<{
+            credentialId: z.ZodString;
+            nonce: z.ZodString;
+            wrappedKey: z.ZodString;
+            createdAt: z.ZodString;
+            rpId: z.ZodString;
+            verifiedAt: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }, {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        version: 2;
+        publicKey: string;
+        algorithm: "xchacha20poly1305";
+        secretKind: "mnemonic-entropy" | "raw-private-key";
+        secretNonce: string;
+        sealedSecret: string;
+        wraps: {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }[];
+    }, {
+        version: 2;
+        publicKey: string;
+        algorithm: "xchacha20poly1305";
+        secretKind: "mnemonic-entropy" | "raw-private-key";
+        secretNonce: string;
+        sealedSecret: string;
+        wraps: {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }[];
+    }>, {
+        version: 2;
+        publicKey: string;
+        algorithm: "xchacha20poly1305";
+        secretKind: "mnemonic-entropy" | "raw-private-key";
+        secretNonce: string;
+        sealedSecret: string;
+        wraps: {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }[];
+    }, {
+        version: 2;
+        publicKey: string;
+        algorithm: "xchacha20poly1305";
+        secretKind: "mnemonic-entropy" | "raw-private-key";
+        secretNonce: string;
+        sealedSecret: string;
+        wraps: {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }[];
+    }>;
+    /** `recover_account_complete`, subject = account id, actor `credential:<id>`, challenge = registration challenge (hex). */
+    proof: z.ZodObject<{
+        v: z.ZodLiteral<2>;
+        challenge: z.ZodString;
+        expiresAt: z.ZodNumber;
+        signature: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    }, {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    }>;
+    deviceName: z.ZodOptional<z.ZodString>;
+    deviceFingerprint: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    proof: {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    };
+    envelope: {
+        version: 2;
+        publicKey: string;
+        algorithm: "xchacha20poly1305";
+        secretKind: "mnemonic-entropy" | "raw-private-key";
+        secretNonce: string;
+        sealedSecret: string;
+        wraps: {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }[];
+    };
+    response: Record<string, unknown>;
+    ticket: string;
+    deviceName?: string | undefined;
+    deviceFingerprint?: string | undefined;
+}, {
+    proof: {
+        expiresAt: number;
+        signature: string;
+        v: 2;
+        challenge: string;
+    };
+    envelope: {
+        version: 2;
+        publicKey: string;
+        algorithm: "xchacha20poly1305";
+        secretKind: "mnemonic-entropy" | "raw-private-key";
+        secretNonce: string;
+        sealedSecret: string;
+        wraps: {
+            credentialId: string;
+            createdAt: string;
+            nonce: string;
+            wrappedKey: string;
+            rpId: string;
+            verifiedAt?: string | undefined;
+        }[];
+    };
+    response: Record<string, unknown>;
+    ticket: string;
+    deviceName?: string | undefined;
+    deviceFingerprint?: string | undefined;
+}>;
+export type IdentityRecoveryCompleteRequest = z.infer<typeof identityRecoveryCompleteRequestSchema>;

package/dist/types/index.d.ts

@@ -11,8 +11,8 @@
  */
 export { ACCOUNT_KINDS, accountKindSchema, CHILD_ACCOUNT_KINDS, childAccountKindSchema, isAccountKind, isDelegatedActAsEligibleKind, isOperatorSwitchTargetKind, ACCOUNT_CATEGORY_IDS, ACCOUNT_CATEGORY_KINDS, accountCategoriesSchema, accountCategoryIdSchema, isSelectableAccountCategoryId, kindAcceptsAccountCategories, MAX_ACCOUNT_CATEGORIES, newlyAddedRetiredCategories, RETIRED_ACCOUNT_CATEGORY_IDS, SELECTABLE_ACCOUNT_CATEGORY_IDS, createAccountRequestSchema, } from './accountGraph';
 export type { AccountKind, AccountCategoryId, AccountCategoryKind, ChildAccountKind, CreateAccountRequest, } from './accountGraph';
-export { usernameSchema, usernameSchemaForAccountKind, isValidUsername, stripDisallowedUsernameCharacters, applyBotUsernameSuffix, USERNAME_MIN_LENGTH, USERNAME_MAX_LENGTH, USERNAME_INVALID_MESSAGE, BOT_USERNAME_INVALID_MESSAGE, } from './username';
-export { userNameSchema, userRelationshipSchema, themePreferenceSchema, userResponseSchema, userProfileUpdateSchema, currentUserResponseSchema, deviceLinkedSessionSchema, deviceLinkedSessionsResponseSchema, resolveUserId, safeParseContract, } from './userResponse';
+export { usernameSchema, usernameSchemaForAccountKind, isValidUsername, stripDisallowedUsernameCharacters, applyBotUsernameSuffix, USERNAME_MIN_LENGTH, USERNAME_MAX_LENGTH, USERNAME_INVALID_MESSAGE, BOT_USERNAME_INVALID_MESSAGE, RESERVED_USERNAME_MESSAGE, NUMERIC_USERNAME_MESSAGE, } from './username';
+export { userNameSchema, userRelationshipSchema, themePreferenceSchema, dateOfBirthSchema, userResponseSchema, userProfileUpdateSchema, currentUserResponseSchema, deviceLinkedSessionSchema, deviceLinkedSessionsResponseSchema, resolveUserId, safeParseContract, } from './userResponse';
 export type { UserNameResponse, UserRelationship, ThemePreference, UserResponse, UserProfileUpdate, CurrentUserResponseContract, DeviceLinkedSessionResponse, DeviceLinkedSessionsResponseContract, } from './userResponse';
 export { applicationTypeSchema, publicApplicationSchema, sessionStatusSchema, } from './sessionStatus';
 export type { ApplicationTypeContract, PublicApplicationResponse, SessionStatusResponse, } from './sessionStatus';
@@ -51,12 +51,18 @@ export { rotateKeyChallengeResponseSchema, rotateKeyCompleteRequestSchema, rotat
 export type { RotateKeyChallengeResponse, RotateKeyCompleteRequest, RotateKeyCompleteResponse, } from './keyRotation';
 export { backupLookupIdSchema, encryptedBackupEnvelopeSchema, backupUploadRequestSchema, backupStatusResponseSchema, } from './keyRecovery';
 export type { EncryptedBackupEnvelope, BackupUploadRequest, BackupStatusResponse, } from './keyRecovery';
+export { WEB_IDENTITY_ENVELOPE_VERSION, WEB_IDENTITY_SECRET_KINDS, webIdentityPublicKeySchema, webauthnCredentialIdSchema, webauthnRpIdSchema, webIdentityWrapSchema, webIdentityEnvelopeSchema, webIdentityEnvelopeUploadSchema, webIdentityHolderSchema, webIdentityEnvelopeResponseSchema, webIdentityEnvelopeProofFieldsSchema, webIdentityEnvelopeActionSchema, webIdentityEnvelopePutSchema, webauthnAssertionResponseSchema, webIdentityEnvelopeEstablishSchema, } from './webIdentityCarrier';
+export { IDENTITY_PROOF_VERSION, IDENTITY_PROOF_DOMAIN, IDENTITY_PROOF_AUDIENCE, IDENTITY_PROOF_CHALLENGE_TTL_MS, IDENTITY_PROOF_ACTIONS, IDENTITY_PROOF_ACTION_VALUES, IDENTITY_ERROR_CODES, canonicalJson, buildIdentityProofMessage, identityProofSchema, identityProofChallengeRequestSchema, identityProofChallengeResponseSchema, identityRootStatusSchema, } from './identityProof';
+export { IDENTITY_RECOVERY_TTL_MS, identityRecoveryChallengeResponseSchema, identityRecoveryStartRequestSchema, identityRecoveryCompleteRequestSchema, } from './identityRecovery';
+export type { IdentityRecoveryChallengeResponse, IdentityRecoveryStartRequest, IdentityRecoveryStartResponse, IdentityRecoveryCompleteRequest, } from './identityRecovery';
+export type { IdentityProofAction, IdentityErrorCode, IdentityProofClaims, IdentityProof, IdentityProofChallengeRequest, IdentityProofChallengeResponse, IdentityRootStatus, } from './identityProof';
+export { IDENTITY_MOVE_TTL_MS, IDENTITY_MOVE_STATUSES, IDENTITY_MOVE_QR_PREFIX, identityMoveRevealRequestSchema, buildMoveCommitmentInput, buildMoveSasInput, buildMoveSealPayload, buildMoveCiphertextDigestInput, buildMoveReceiptMessage, identityMoveIdSchema, identityMoveEphemeralKeySchema, identityMoveCreateRequestSchema, identityMoveCreateResponseSchema, identityMoveJoinRequestSchema, identityMoveSealRequestSchema, identityMoveReceiptRequestSchema, identityMoveStateSchema, } from './identityMove';
+export type { IdentityMoveStatus, IdentityMoveCreateRequest, IdentityMoveCreateResponse, IdentityMoveJoinRequest, IdentityMoveSealRequest, IdentityMoveReceiptRequest, IdentityMoveRevealRequest, IdentityMoveState, } from './identityMove';
+export type { WebIdentityWrap, WebIdentityEnvelope, WebIdentitySecretKind, WebIdentityHolder, WebIdentityEnvelopeAction, WebauthnAssertionResponse, WebIdentityEnvelopeUpload, WebIdentityEnvelopeResponse, WebIdentityEnvelopePut, WebIdentityEnvelopeEstablish, } from './webIdentityCarrier';
 export { updatePlatformSchema, updateStatusSchema, updateAssetStatusSchema, sha256HexSchema, channelNameSchema, runtimeVersionSchema, rolloutPercentSchema, assetInitItemSchema, assetInitRequestSchema, assetUploadTicketSchema, assetInitResponseSchema, assetCompleteRequestSchema, assetCompleteResultItemSchema, assetCompleteResponseSchema, updateAssetRefSchema, createUpdateRequestSchema, updateSchema, createUpdateResponseSchema, rollbackToEmbeddedEntrySchema, channelSchema, channelListResponseSchema, updateListResponseSchema, rollbackRequestSchema, rollbackToEmbeddedRequestSchema, promoteRequestSchema, updateRolloutPatchSchema, } from './updates';
 export type { UpdatePlatform, UpdateStatus, UpdateAssetStatus, AssetInitItem, AssetInitRequest, AssetUploadTicket, AssetInitResponse, AssetCompleteRequest, AssetCompleteResultItem, AssetCompleteResponse, UpdateAssetRef, CreateUpdateRequest, Update, CreateUpdateResponse, RollbackToEmbeddedEntry, Channel, ChannelListResponse, UpdateListResponse, RollbackRequest, RollbackToEmbeddedRequest, PromoteRequest, UpdateRolloutPatch, } from './updates';
 export { webauthnRegisterOptionsRequestSchema, webauthnLoginOptionsRequestSchema, webauthnRegisterVerifyRequestSchema, webauthnLoginVerifyRequestSchema, } from './webauthn';
 export type { WebauthnRegisterOptionsRequest, WebauthnLoginOptionsRequest, WebauthnRegisterVerifyRequest, WebauthnLoginVerifyRequest, } from './webauthn';
-export { devicePairingStatusSchema, deviceTransferInitRequestSchema, deviceTransferInitResponseSchema, deviceTransferInfoResponseSchema, deviceTransferApproveRequestSchema, deviceTransferApproveResponseSchema, deviceTransferDenyResponseSchema, } from './devicePairing';
-export type { DevicePairingStatus, DeviceTransferInitRequest, DeviceTransferInitResponse, DeviceTransferInfoResponse, DeviceTransferApproveRequest, DeviceTransferApproveResponse, DeviceTransferDenyResponse, } from './devicePairing';
 export { transparencyCheckpointSignatureSchema, transparencyAnchorSchema, transparencyCheckpointSchema, transparencyInclusionProofSchema, transparencyCheckpointListSchema, } from './transparency';
 export type { TransparencyCheckpointSignature, TransparencyAnchor, TransparencyCheckpoint, TransparencyInclusionProof, TransparencyCheckpointList, } from './transparency';
 export { INFERENCE_CONTRACT_VERSION, } from './inference/version';
@@ -80,10 +86,10 @@ export { aliaReleaseArtifactSchema, aliaReleaseSignatureSchema, aliaModelRelease
 export type { AliaReleaseArtifact, AliaReleaseSignature, AliaModelReleaseManifest, } from './inference/aliaModelRelease';
 export { modelDistributionMethodSchema, modelSystemicRiskTierSchema, trainingComputeFlopsSchema, SYSTEMIC_RISK_COMPUTE_THRESHOLD_FLOPS, modelDownstreamDocumentationSchema, modelGpaiDocumentationSchema, modelLineDeclarationSchema, modelReleaseIngestionRequestSchema, modelReleaseIngestionResultSchema, modelDocumentationSchema, } from './inference/modelDocumentation';
 export type { ModelDistributionMethod, ModelSystemicRiskTier, ModelDownstreamDocumentation, ModelGpaiDocumentation, ModelLineDeclaration, ModelReleaseIngestionRequest, ModelReleaseIngestionResult, ModelDocumentation, } from './inference/modelDocumentation';
-export { inferenceContentSourceSchema, inferenceContentPartSchema, inferenceToolCallSchema, inferenceMessageRoleSchema, inferenceMessageSchema, inferenceInputSchema, samplingParametersSchema, toolDefinitionSchema, toolChoiceSchema, responseFormatSchema, clientRequestMetadataSchema, inferenceRequestSchema, } from './inference/request';
-export type { InferenceContentSource, InferenceContentPart, InferenceToolCall, InferenceMessageRole, InferenceMessage, InferenceInput, SamplingParameters, ToolDefinition, ToolChoice, ResponseFormat, ClientRequestMetadata, InferenceRequest, } from './inference/request';
-export { inferenceStreamStartEventSchema, inferenceStreamDeltaEventSchema, inferenceStreamToolCallEventSchema, inferenceStreamUsageEventSchema, inferenceRouteSwitchDetailSchema, inferenceRouteSwitchReasonSchema, inferenceStreamRouteSwitchEventSchema, inferenceStreamErrorEventSchema, inferenceFinishReasonSchema, inferenceStreamDoneEventSchema, inferenceStreamEventSchema, } from './inference/streamEvents';
-export type { InferenceStreamStartEvent, InferenceStreamDeltaEvent, InferenceStreamToolCallEvent, InferenceStreamUsageEvent, InferenceRouteSwitchDetail, InferenceRouteSwitchReason, InferenceStreamRouteSwitchEvent, InferenceStreamErrorEvent, InferenceFinishReason, InferenceStreamDoneEvent, InferenceStreamEvent, } from './inference/streamEvents';
+export { inferenceContentSourceSchema, inferenceContentPartSchema, inferenceToolCallSchema, inferenceMessageRoleSchema, inferenceMessageSchema, inferenceInputSchema, samplingParametersSchema, toolDefinitionSchema, toolChoiceSchema, responseFormatSchema, clientRequestMetadataSchema, inferenceRequestSchema, inferenceSpeechParametersSchema, } from './inference/request';
+export type { InferenceContentSource, InferenceContentPart, InferenceToolCall, InferenceMessageRole, InferenceMessage, InferenceInput, SamplingParameters, ToolDefinition, ToolChoice, ResponseFormat, ClientRequestMetadata, InferenceRequest, InferenceSpeechParameters, } from './inference/request';
+export { inferenceStreamStartEventSchema, inferenceStreamDeltaEventSchema, inferenceAudioMediaTypeSchema, MAX_INFERENCE_AUDIO_BYTES, inferenceStreamAudioEventSchema, inferenceStreamToolCallEventSchema, inferenceStreamUsageEventSchema, inferenceRouteSwitchDetailSchema, inferenceRouteSwitchReasonSchema, inferenceStreamRouteSwitchEventSchema, inferenceStreamErrorEventSchema, inferenceFinishReasonSchema, inferenceStreamDoneEventSchema, inferenceStreamEventSchema, } from './inference/streamEvents';
+export type { InferenceStreamStartEvent, InferenceStreamDeltaEvent, InferenceAudioMediaType, InferenceStreamAudioEvent, InferenceStreamToolCallEvent, InferenceStreamUsageEvent, InferenceRouteSwitchDetail, InferenceRouteSwitchReason, InferenceStreamRouteSwitchEvent, InferenceStreamErrorEvent, InferenceFinishReason, InferenceStreamDoneEvent, InferenceStreamEvent, } from './inference/streamEvents';
 export { usageReservationRequestSchema, usageReservationStatusSchema, usageReservationSchema, inferenceRequestOutcomeSchema, normalizedUsageReportSchema, usageReceiptSchema, usageRefundSubjectSchema, usageRefundReasonSchema, usageRefundSchema, } from './inference/usage';
 export type { UsageReservationRequest, UsageReservationStatus, UsageReservation, InferenceRequestOutcome, NormalizedUsageReport, UsageReceipt, UsageRefundSubject, UsageRefundReason, UsageRefund, } from './inference/usage';
 export { providerConnectionScopeSchema, kaanaCredentialHandleSchema, kaanaCredentialOperationIdSchema, kaanaCredentialOperationActionSchema, kaanaCredentialIdentitySchema, kaanaCredentialCreateMutationSchema, kaanaCredentialRotateMutationSchema, kaanaCredentialRevokeMutationSchema, kaanaCredentialMutationSchema, kaanaCredentialCreateOutcomeRequestSchema, kaanaCredentialRotateOutcomeRequestSchema, kaanaCredentialRevokeOutcomeRequestSchema, kaanaCredentialOutcomeRequestSchema, kaanaCredentialAppliedOutcomeSchema, kaanaCredentialConflictOutcomeSchema, kaanaCredentialOutcomeSchema, kaanaCredentialValidationTaskSchema, kaanaCredentialValidationOutcomeStateSchema, kaanaCredentialValidationFailureCodeSchema, kaanaCredentialValidationOutcomeSchema, providerCredentialValidationOperationSchema, providerCredentialValidationDeploymentSchema, providerCredentialCustodyStateSchema, providerConnectionValidationSchema, providerConnectionStatusSchema, providerConnectionSchema, } from './inference/providerConnection';

package/dist/types/inference/catalogue.d.ts

@@ -165,11 +165,12 @@ export declare const inferenceDataPolicySchema: z.ZodEffects<z.ZodObject<{
     policyUrl?: string | undefined;
 }>;
 /**
- * Who a route may be served to. Availability inside Alia never implies
- * permission to resell the same provider/model publicly, which is why this is
- * an explicit scope on the route rather than a boolean derived from "it works".
+ * Who a route may be served to. Availability to an official Oxy product never
+ * implies permission to resell the same provider/model publicly, which is why
+ * this is an explicit scope on the route rather than a boolean derived from
+ * "it works".
  */
-export declare const availabilityScopeSchema: z.ZodEnum<["internal_alia", "public_payg", "enterprise", "byok_only", "oxy_hosted"]>;
+export declare const availabilityScopeSchema: z.ZodEnum<["platform_internal", "public_payg", "enterprise", "byok_only", "oxy_hosted"]>;
 /** The commercial basis on which Oxy may serve a route. */
 export declare const commercialPermissionSchema: z.ZodEnum<["standard_application_use", "public_resale_approved", "wholesale_contract", "customer_byok", "open_weight_hosting"]>;
 /** Deprecation state, with the replacement a customer should migrate to. */
@@ -806,7 +807,7 @@ export declare const inferenceProviderSchema: z.ZodObject<{
  */
 export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
     /** See `version.ts`: exchanged with the data plane on its own. */
-    schemaVersion: z.ZodLiteral<1>;
+    schemaVersion: z.ZodLiteral<2>;
     deploymentId: z.ZodString;
     provider: z.ZodString;
     /** Always revision-pinned: a deployment serves specific weights. */
@@ -850,7 +851,7 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         subprocessors?: string[] | undefined;
         policyUrl?: string | undefined;
     }>;
-    availabilityScope: z.ZodEnum<["internal_alia", "public_payg", "enterprise", "byok_only", "oxy_hosted"]>;
+    availabilityScope: z.ZodEnum<["platform_internal", "public_payg", "enterprise", "byok_only", "oxy_hosted"]>;
     commercialPermission: z.ZodEnum<["standard_application_use", "public_resale_approved", "wholesale_contract", "customer_byok", "open_weight_hosting"]>;
     status: z.ZodEnum<["active", "degraded", "disabled", "retired"]>;
     /** Reserved capacity for one enterprise account rather than shared. */
@@ -859,7 +860,7 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
     priceVersionId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     status: "active" | "disabled" | "retired" | "degraded";
-    schemaVersion: 1;
+    schemaVersion: 2;
     provider: string;
     modelReference: string;
     regions: string[];
@@ -872,13 +873,13 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         policyUrl?: string | undefined;
     };
     deploymentId: string;
-    availabilityScope: "internal_alia" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
+    availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
 }, {
     status: "active" | "disabled" | "retired" | "degraded";
-    schemaVersion: 1;
+    schemaVersion: 2;
     provider: string;
     modelReference: string;
     regions: string[];
@@ -891,13 +892,13 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         policyUrl?: string | undefined;
     };
     deploymentId: string;
-    availabilityScope: "internal_alia" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
+    availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
 }>, {
     status: "active" | "disabled" | "retired" | "degraded";
-    schemaVersion: 1;
+    schemaVersion: 2;
     provider: string;
     modelReference: string;
     regions: string[];
@@ -910,13 +911,13 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         policyUrl?: string | undefined;
     };
     deploymentId: string;
-    availabilityScope: "internal_alia" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
+    availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
 }, {
     status: "active" | "disabled" | "retired" | "degraded";
-    schemaVersion: 1;
+    schemaVersion: 2;
     provider: string;
     modelReference: string;
     regions: string[];
@@ -929,7 +930,7 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         policyUrl?: string | undefined;
     };
     deploymentId: string;
-    availabilityScope: "internal_alia" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
+    availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
@@ -1098,7 +1099,7 @@ export declare const catalogueServingProviderSummarySchema: z.ZodObject<{
  */
 export declare const modelCatalogueEntrySchema: z.ZodObject<{
     /** See `version.ts`: this is the public catalogue response shape. */
-    schemaVersion: z.ZodLiteral<2>;
+    schemaVersion: z.ZodLiteral<3>;
     modelId: z.ZodString;
     publisher: z.ZodObject<{
         slug: z.ZodString;
@@ -1340,7 +1341,7 @@ export declare const modelCatalogueEntrySchema: z.ZodObject<{
         }[];
     }>>;
     /** Present only when every visible deployment shares one scope. */
-    availabilityScope: z.ZodOptional<z.ZodEnum<["internal_alia", "public_payg", "enterprise", "byok_only", "oxy_hosted"]>>;
+    availabilityScope: z.ZodOptional<z.ZodEnum<["platform_internal", "public_payg", "enterprise", "byok_only", "oxy_hosted"]>>;
     /** Present only when every visible deployment shares one permission basis. */
     commercialPermission: z.ZodOptional<z.ZodEnum<["standard_application_use", "public_resale_approved", "wholesale_contract", "customer_byok", "open_weight_hosting"]>>;
     deprecation: z.ZodEffects<z.ZodObject<{
@@ -1422,7 +1423,7 @@ export declare const modelCatalogueEntrySchema: z.ZodObject<{
         maxContextTokens: number;
         maxOutputTokens: number;
     };
-    schemaVersion: 2;
+    schemaVersion: 3;
     modelId: string;
     publisher: {
         displayName: string;
@@ -1489,7 +1490,7 @@ export declare const modelCatalogueEntrySchema: z.ZodObject<{
         provenanceMarking: "none" | "visible_watermark" | "invisible_watermark" | "c2pa";
         safetyCardUrl?: string | undefined;
     } | undefined;
-    availabilityScope?: "internal_alia" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted" | undefined;
+    availabilityScope?: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted" | undefined;
     commercialPermission?: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting" | undefined;
     pricing?: {
         currency: string;
@@ -1516,7 +1517,7 @@ export declare const modelCatalogueEntrySchema: z.ZodObject<{
         maxContextTokens: number;
         maxOutputTokens: number;
     };
-    schemaVersion: 2;
+    schemaVersion: 3;
     modelId: string;
     publisher: {
         displayName: string;
@@ -1570,7 +1571,7 @@ export declare const modelCatalogueEntrySchema: z.ZodObject<{
         knownLimitations?: string[] | undefined;
     } | undefined;
     regions?: string[] | undefined;
-    availabilityScope?: "internal_alia" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted" | undefined;
+    availabilityScope?: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted" | undefined;
     commercialPermission?: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting" | undefined;
     servingProviders?: {
         displayName: string;