@oxy.so/contracts 1.4.0 → 1.5.0

package/dist/cjs/index.js

@@ -697,3 +697,5 @@ Object.defineProperty(exports, "inboxSmartRepliesResponseSchema", { enumerable:
 Object.defineProperty(exports, "inboxThreadSummaryResponseSchema", { enumerable: true, get: function () { return inbox_1.inboxThreadSummaryResponseSchema; } });
 Object.defineProperty(exports, "inboxInferenceStreamEventSchema", { enumerable: true, get: function () { return inbox_1.inboxInferenceStreamEventSchema; } });
 __exportStar(require("./externalIdentity"), exports);
+__exportStar(require("./linkedAccounts"), exports);
+__exportStar(require("./notifications"), exports);

package/dist/cjs/linkedAccounts.js

@@ -0,0 +1,93 @@
+"use strict";
+/**
+ * Wire contract for Oxy linked accounts — external accounts (any Mastodon-API
+ * server, Bluesky) a LOCAL Oxy user has proven they own by completing an OAuth
+ * authorization there.
+ *
+ * Every response schema is `.strict()` and carries no field a third-party token
+ * could occupy: Oxy uses the OAuth flow only to learn which account authorized
+ * it, then discards the token. See `docs/identity/linked-accounts.md`.
+ *
+ * Platform-agnostic — zod only, no react/react-native/expo.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LINKED_ACCOUNT_CALLBACK_ERRORS = exports.serviceLinkedAccountListResponseSchema = exports.serviceLinkedAccountSchema = exports.linkedAccountListResponseSchema = exports.completeLinkedAccountResponseSchema = exports.linkedAccountSchema = exports.completeLinkedAccountRequestSchema = exports.startLinkedAccountResponseSchema = exports.startLinkedAccountRequestSchema = exports.linkedAccountNetworkSchema = exports.LINKED_ACCOUNT_NETWORKS = void 0;
+const zod_1 = require("zod");
+exports.LINKED_ACCOUNT_NETWORKS = ['activitypub', 'atproto'];
+exports.linkedAccountNetworkSchema = zod_1.z.enum(exports.LINKED_ACCOUNT_NETWORKS);
+/**
+ * `POST /linked-accounts/:network/start`.
+ *
+ * - `instance` (activitypub): `mastodon.social`, `https://mastodon.social` or
+ *   `@user@mastodon.social`.
+ * - `handle` (atproto): a handle (`alice.bsky.social`) or a DID.
+ * - `returnTo` + `clientId`: where the browser lands afterwards, with
+ *   `?link_code=` or `?link_error=`. `returnTo` must exactly match a redirect
+ *   URI registered on the TRUSTED (first-party) application `clientId` names.
+ */
+exports.startLinkedAccountRequestSchema = zod_1.z
+    .object({
+    instance: zod_1.z.string().trim().min(1).max(320).optional(),
+    handle: zod_1.z.string().trim().min(1).max(320).optional(),
+    clientId: zod_1.z.string().trim().min(1).max(256),
+    returnTo: zod_1.z.string().trim().min(1).max(2048),
+})
+    .strict();
+exports.startLinkedAccountResponseSchema = zod_1.z
+    .object({
+    authorizeUrl: zod_1.z.string().url(),
+    expiresAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/**
+ * `POST /linked-accounts/complete`, with the session of the user who STARTED
+ * the flow: `code` is the one-time `link_code` the callback appended to
+ * `returnTo`. It expires five minutes after the callback. Presented by any
+ * other user it is refused (403) and burned.
+ */
+exports.completeLinkedAccountRequestSchema = zod_1.z
+    .object({ code: zod_1.z.string().trim().min(1).max(256) })
+    .strict();
+/** One live linked account, as its owner sees it. */
+exports.linkedAccountSchema = zod_1.z
+    .object({
+    id: zod_1.z.string().min(1),
+    network: exports.linkedAccountNetworkSchema,
+    /** `username@domain` for ActivityPub; the DID for atproto. */
+    accountKey: zod_1.z.string().min(1),
+    /** ActivityPub actor id, or the DID for atproto. */
+    actorUri: zod_1.z.string().min(1),
+    handle: zod_1.z.string().min(1),
+    host: zod_1.z.string().min(1),
+    proofMethod: zod_1.z.literal('oauth'),
+    verifiedAt: zod_1.z.string().datetime(),
+    createdAt: zod_1.z.string().datetime(),
+})
+    .strict();
+exports.completeLinkedAccountResponseSchema = zod_1.z
+    .object({ linkedAccount: exports.linkedAccountSchema })
+    .strict();
+exports.linkedAccountListResponseSchema = zod_1.z
+    .object({ linkedAccounts: zod_1.z.array(exports.linkedAccountSchema) })
+    .strict();
+/**
+ * `GET /linked-accounts/by-user/:userId` (service token with the privileged
+ * `linked-accounts:read`). Adds `federatedUserId`: the FEDERATED shadow user Oxy
+ * already holds for that external account, if any — the anchor for adopting
+ * content Oxy federated in before the account was linked.
+ */
+exports.serviceLinkedAccountSchema = exports.linkedAccountSchema
+    .extend({ federatedUserId: zod_1.z.string().min(1).nullable() })
+    .strict();
+exports.serviceLinkedAccountListResponseSchema = zod_1.z
+    .object({ userId: zod_1.z.string().min(1), linkedAccounts: zod_1.z.array(exports.serviceLinkedAccountSchema) })
+    .strict();
+/**
+ * Error codes the callback appends as `?link_error=<code>` to `returnTo`. An
+ * account already linked to someone else is reported by `/complete` (409).
+ */
+exports.LINKED_ACCOUNT_CALLBACK_ERRORS = [
+    'access_denied',
+    'verification_failed',
+    'provider_unavailable',
+];

package/dist/cjs/notifications.js

@@ -0,0 +1,81 @@
+"use strict";
+/**
+ * The closed set of Oxy in-app notification types — owned here so the API's
+ * CHECK constraint (`notifications.type`), its request validation and the SDK
+ * all read one tuple.
+ *
+ * `system` is a message from an Oxy service about the recipient's OWN account
+ * (Oxy Move's "your migration finished"): the actor is the recipient, and the
+ * entity is their profile or an `app` id. It is the only type an actor does not
+ * cause.
+ *
+ * Platform-agnostic — zod only, no react/react-native/expo.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOxyNotificationRequestSchema = exports.OXY_NOTIFICATION_URL_MAX = exports.OXY_SYSTEM_NOTIFICATION_MESSAGE_MAX = exports.OXY_SYSTEM_NOTIFICATION_TITLE_MAX = exports.OXY_NOTIFICATION_ENTITY_TYPES = exports.OXY_NOTIFICATION_TYPES = void 0;
+const zod_1 = require("zod");
+exports.OXY_NOTIFICATION_TYPES = [
+    'like',
+    'reply',
+    'mention',
+    'follow',
+    'repost',
+    'quote',
+    'welcome',
+    'system',
+];
+/**
+ * What a notification's `entityId` names.
+ *
+ * `app` means `entityId` is an OPAQUE id in the notifying application's own
+ * namespace (Oxy Move's migration job id). Oxy never resolves it; it exists so
+ * a `system` notification about something that is not a post or a profile does
+ * not have to pretend to be one. Valid only with `type: 'system'`.
+ */
+exports.OXY_NOTIFICATION_ENTITY_TYPES = ['post', 'reply', 'profile', 'app'];
+/** Length caps on the text a `system` notification carries (enforced by CHECKs too). */
+exports.OXY_SYSTEM_NOTIFICATION_TITLE_MAX = 120;
+exports.OXY_SYSTEM_NOTIFICATION_MESSAGE_MAX = 500;
+exports.OXY_NOTIFICATION_URL_MAX = 2048;
+/**
+ * `POST /notifications` (service token with `notifications:write`).
+ *
+ * Only a `system` notification carries text: `title` and `message` are REQUIRED
+ * for it and stored, and `url` is an optional deep link (https, or a custom
+ * scheme registered as a redirect URI on the calling application). For every
+ * other type the client renders from `type` + entity, and `title` / `message` /
+ * `data` are accepted but discarded, as they always were.
+ *
+ * `system` notifications share the duplicate guard (recipient, actor, type,
+ * entityId): use a caller-unique `entityId` (a job id) for each distinct event.
+ */
+exports.createOxyNotificationRequestSchema = zod_1.z
+    .object({
+    recipientId: zod_1.z.string().min(1),
+    actorId: zod_1.z.string().min(1),
+    type: zod_1.z.enum(exports.OXY_NOTIFICATION_TYPES),
+    entityId: zod_1.z.string().min(1),
+    entityType: zod_1.z.enum(exports.OXY_NOTIFICATION_ENTITY_TYPES),
+    title: zod_1.z.string().trim().min(1).max(exports.OXY_SYSTEM_NOTIFICATION_TITLE_MAX).optional(),
+    message: zod_1.z.string().trim().min(1).max(exports.OXY_SYSTEM_NOTIFICATION_MESSAGE_MAX).optional(),
+    url: zod_1.z.string().trim().min(1).max(exports.OXY_NOTIFICATION_URL_MAX).optional(),
+    data: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+})
+    .superRefine((value, context) => {
+    if (value.type === 'system') {
+        if (value.actorId !== value.recipientId)
+            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['actorId'], message: 'a system notification is from the recipient\'s own account' });
+        if (!value.title)
+            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['title'], message: 'title is required for a system notification' });
+        if (!value.message)
+            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['message'], message: 'message is required for a system notification' });
+    }
+    else {
+        if (value.url !== undefined) {
+            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['url'], message: 'url is only stored for a system notification' });
+        }
+        if (value.entityType === 'app') {
+            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['entityType'], message: "entityType 'app' is only valid for a system notification" });
+        }
+    }
+});