@oxy.so/contracts 1.5.0 → 2.1.0

package/dist/types/federationInstanceFetch.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Wire contract for `POST /federation/instance-fetch/sign`: Oxy's INSTANCE
+ * actor signs one ActivityPub GET for a first-party service, so the service can
+ * read an instance running in authorized-fetch ("secure") mode without holding
+ * a key.
+ *
+ * The caller sends a URL, never a signing string: Oxy builds the string itself
+ * (`(request-target): get <path>`, `host`, `date`), the method is always GET
+ * and the key is always the instance actor's. The caller sends the returned
+ * headers, unchanged, on exactly that URL, within the few minutes remote
+ * servers accept a `Date` for. A redirect is a new URL and needs a new
+ * signature.
+ *
+ * Needs a service token whose application holds the privileged
+ * `federation:instance-fetch` scope.
+ *
+ * Platform-agnostic — zod only.
+ */
+import { z } from 'zod';
+/** The longest URL Oxy will sign (the same cap as its own safe fetch). */
+export declare const INSTANCE_FETCH_MAX_URL_LENGTH = 2048;
+export declare const instanceFetchSignRequestSchema: z.ZodObject<{
+    /** The absolute public `https://` URL the caller is about to GET. */
+    url: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    url: string;
+}, {
+    url: string;
+}>;
+export type InstanceFetchSignRequest = z.infer<typeof instanceFetchSignRequestSchema>;
+export declare const instanceFetchSignResponseSchema: z.ZodObject<{
+    /** The instance actor's key, e.g. `https://oxy.so/ap/users/instance#main-key`. */
+    keyId: z.ZodString;
+    /** Send all three on the GET, as they are. */
+    headers: z.ZodObject<{
+        Host: z.ZodString;
+        Date: z.ZodString;
+        Signature: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        Host: string;
+        Date: string;
+        Signature: string;
+    }, {
+        Host: string;
+        Date: string;
+        Signature: string;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    keyId: string;
+    headers: {
+        Host: string;
+        Date: string;
+        Signature: string;
+    };
+}, {
+    keyId: string;
+    headers: {
+        Host: string;
+        Date: string;
+        Signature: string;
+    };
+}>;
+export type InstanceFetchSignResponse = z.infer<typeof instanceFetchSignResponseSchema>;

package/dist/types/index.d.ts

@@ -43,8 +43,6 @@ export { deviceContextRelationshipSchema, deviceDirectoryProfileSchema, deviceAc
 export type { DeviceContextRelationship, DeviceDirectoryProfile, DeviceAccountContext, DevicePrincipal, DeviceDirectory, DeviceActivateRequest, DeviceActivateResponse, DeviceDirectorySync, } from './deviceDirectory';
 export { oauthConsentDecisionSchema, oauthAuthorizeCodeResponseSchema, mcpOAuthClientApplicationSchema, mcpOAuthWriteActionSchema, mcpOAuthConsentContextSchema, mcpOAuthClientInfoResponseSchema, mcpOAuthConsentResponseSchema, } from './oauth';
 export type { OauthConsentDecision, OauthAuthorizeCodeResponse, McpOAuthClientApplication, McpOAuthWriteAction, McpOAuthConsentContext, McpOAuthClientInfoResponse, McpOAuthConsentResponse, } from './oauth';
-export { BROWSER_HUB_COOKIE_NAME, BROWSER_HUB_COOKIE_ATTRIBUTES, BROWSER_HUB_HANDLE_TTL_MS, browserHubHandleSchema, browserHubHandleRequestSchema, browserHubHandleResponseSchema, browserHubResolveResponseSchema, browserHubErrorSchema, browserHubRevokeResponseSchema, hubSessionSchema, hubClaimRequestSchema, hubActivateRequestSchema, hubAuthorizeRequestSchema, hubAuthorizeResultSchema, } from './browserHub';
-export type { BrowserHubHandleRequest, BrowserHubHandleResponse, BrowserHubResolveResponse, BrowserHubError, BrowserHubRevokeResponse, HubSession, HubClaimRequest, HubActivateRequest, HubAuthorizeRequest, HubAuthorizeResult, } from './browserHub';
 export { loginResultSchema, } from './deviceBoot';
 export type { LoginSessionResult, LoginResult, SecurityAlert, SecurityAlertAnomaly, } from './deviceBoot';
 export { rotateKeyChallengeResponseSchema, rotateKeyCompleteRequestSchema, rotateKeyCompleteResponseSchema, } from './keyRotation';
@@ -106,4 +104,5 @@ export { inboxComposeRequestSchema, inboxDailyBriefRequestSchema, inboxNaturalSe
 export type { InboxComposeRequest, InboxDailyBriefRequest, InboxInferenceTextResponse, InboxNaturalSearchResponse, InboxSmartRepliesResponse, InboxThreadSummaryResponse, InboxInferenceStreamEvent, } from './inference/inbox';
 export * from './externalIdentity';
 export * from './linkedAccounts';
+export * from './federationInstanceFetch';
 export * from './notifications';

package/dist/types/inference/aliaModelRelease.d.ts

@@ -141,15 +141,15 @@ export declare const aliaReleaseSignatureSchema: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     signature: string;
     signedAt: string;
+    keyId: string;
     algorithm: "ed25519";
     canonicalization: "jcs";
-    keyId: string;
 }, {
     signature: string;
     signedAt: string;
+    keyId: string;
     algorithm: "ed25519";
     canonicalization: "jcs";
-    keyId: string;
 }>;
 /**
  * A signed release of an `alia/*` model revision.
@@ -377,18 +377,19 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
     }, "strict", z.ZodTypeAny, {
         signature: string;
         signedAt: string;
+        keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-        keyId: string;
     }, {
         signature: string;
         signedAt: string;
+        keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-        keyId: string;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     schemaVersion: 1;
+    issuedAt: string;
     revision: {
         schemaVersion: 1;
         revision: string;
@@ -413,13 +414,12 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             safetyCardUrl?: string | undefined;
         } | undefined;
     };
-    issuedAt: string;
     signatures: {
         signature: string;
         signedAt: string;
+        keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-        keyId: string;
     }[];
     license: {
         displayName: string;
@@ -443,6 +443,7 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
     }[];
 }, {
     schemaVersion: 1;
+    issuedAt: string;
     revision: {
         schemaVersion: 1;
         revision: string;
@@ -467,13 +468,12 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             knownLimitations?: string[] | undefined;
         } | undefined;
     };
-    issuedAt: string;
     signatures: {
         signature: string;
         signedAt: string;
+        keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-        keyId: string;
     }[];
     license: {
         displayName: string;
@@ -497,6 +497,7 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
     }[];
 }>, {
     schemaVersion: 1;
+    issuedAt: string;
     revision: {
         schemaVersion: 1;
         revision: string;
@@ -521,13 +522,12 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             safetyCardUrl?: string | undefined;
         } | undefined;
     };
-    issuedAt: string;
     signatures: {
         signature: string;
         signedAt: string;
+        keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-        keyId: string;
     }[];
     license: {
         displayName: string;
@@ -551,6 +551,7 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
     }[];
 }, {
     schemaVersion: 1;
+    issuedAt: string;
     revision: {
         schemaVersion: 1;
         revision: string;
@@ -575,13 +576,12 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             knownLimitations?: string[] | undefined;
         } | undefined;
     };
-    issuedAt: string;
     signatures: {
         signature: string;
         signedAt: string;
+        keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-        keyId: string;
     }[];
     license: {
         displayName: string;

package/dist/types/inference/modelDocumentation.d.ts

@@ -626,18 +626,19 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
         }, "strict", z.ZodTypeAny, {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }, {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }>, "many">;
     }, "strict", z.ZodTypeAny, {
         schemaVersion: 1;
+        issuedAt: string;
         revision: {
             schemaVersion: 1;
             revision: string;
@@ -662,13 +663,12 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
                 safetyCardUrl?: string | undefined;
             } | undefined;
         };
-        issuedAt: string;
         signatures: {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }[];
         license: {
             displayName: string;
@@ -692,6 +692,7 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
         }[];
     }, {
         schemaVersion: 1;
+        issuedAt: string;
         revision: {
             schemaVersion: 1;
             revision: string;
@@ -716,13 +717,12 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
                 knownLimitations?: string[] | undefined;
             } | undefined;
         };
-        issuedAt: string;
         signatures: {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }[];
         license: {
             displayName: string;
@@ -746,6 +746,7 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
         }[];
     }>, {
         schemaVersion: 1;
+        issuedAt: string;
         revision: {
             schemaVersion: 1;
             revision: string;
@@ -770,13 +771,12 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
                 safetyCardUrl?: string | undefined;
             } | undefined;
         };
-        issuedAt: string;
         signatures: {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }[];
         license: {
             displayName: string;
@@ -800,6 +800,7 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
         }[];
     }, {
         schemaVersion: 1;
+        issuedAt: string;
         revision: {
             schemaVersion: 1;
             revision: string;
@@ -824,13 +825,12 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
                 knownLimitations?: string[] | undefined;
             } | undefined;
         };
-        issuedAt: string;
         signatures: {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }[];
         license: {
             displayName: string;
@@ -1059,6 +1059,7 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
     };
     manifest: {
         schemaVersion: 1;
+        issuedAt: string;
         revision: {
             schemaVersion: 1;
             revision: string;
@@ -1083,13 +1084,12 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
                 safetyCardUrl?: string | undefined;
             } | undefined;
         };
-        issuedAt: string;
         signatures: {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }[];
         license: {
             displayName: string;
@@ -1150,6 +1150,7 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
     };
     manifest: {
         schemaVersion: 1;
+        issuedAt: string;
         revision: {
             schemaVersion: 1;
             revision: string;
@@ -1174,13 +1175,12 @@ export declare const modelReleaseIngestionRequestSchema: z.ZodObject<{
                 knownLimitations?: string[] | undefined;
             } | undefined;
         };
-        issuedAt: string;
         signatures: {
             signature: string;
             signedAt: string;
+            keyId: string;
             algorithm: "ed25519";
             canonicalization: "jcs";
-            keyId: string;
         }[];
         license: {
             displayName: string;
@@ -1243,8 +1243,8 @@ export declare const modelReleaseIngestionResultSchema: z.ZodObject<{
     ingestedAt: z.ZodString;
 }, "strict", z.ZodTypeAny, {
     schemaVersion: 1;
-    revision: string;
     outcome: "ingested" | "already_ingested";
+    revision: string;
     modelId: string;
     reference: string;
     releaseId: string;
@@ -1254,8 +1254,8 @@ export declare const modelReleaseIngestionResultSchema: z.ZodObject<{
     ingestedAt: string;
 }, {
     schemaVersion: 1;
-    revision: string;
     outcome: "ingested" | "already_ingested";
+    revision: string;
     modelId: string;
     reference: string;
     releaseId: string;

package/dist/types/inference/providerConnection.d.ts

@@ -855,7 +855,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
     };
     provider: string;
     connectionId: string;
-    custodyState: "revoked" | "pending" | "ready" | "reconcile";
+    custodyState: "pending" | "revoked" | "ready" | "reconcile";
     upstreamBillsCustomerDirectly: true;
     credentialHandle?: string | undefined;
     credentialRevision?: number | undefined;
@@ -885,7 +885,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
     };
     provider: string;
     connectionId: string;
-    custodyState: "revoked" | "pending" | "ready" | "reconcile";
+    custodyState: "pending" | "revoked" | "ready" | "reconcile";
     upstreamBillsCustomerDirectly: true;
     credentialHandle?: string | undefined;
     credentialRevision?: number | undefined;
@@ -915,7 +915,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
     };
     provider: string;
     connectionId: string;
-    custodyState: "revoked" | "pending" | "ready" | "reconcile";
+    custodyState: "pending" | "revoked" | "ready" | "reconcile";
     upstreamBillsCustomerDirectly: true;
     credentialHandle?: string | undefined;
     credentialRevision?: number | undefined;
@@ -945,7 +945,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
     };
     provider: string;
     connectionId: string;
-    custodyState: "revoked" | "pending" | "ready" | "reconcile";
+    custodyState: "pending" | "revoked" | "ready" | "reconcile";
     upstreamBillsCustomerDirectly: true;
     credentialHandle?: string | undefined;
     credentialRevision?: number | undefined;

package/dist/types/linkedAccounts.d.ts

@@ -82,9 +82,9 @@ export declare const linkedAccountSchema: z.ZodObject<{
     id: string;
     createdAt: string;
     verifiedAt: string;
-    handle: string;
     network: "activitypub" | "atproto";
     actorUri: string;
+    handle: string;
     accountKey: string;
     host: string;
     proofMethod: "oauth";
@@ -92,9 +92,9 @@ export declare const linkedAccountSchema: z.ZodObject<{
     id: string;
     createdAt: string;
     verifiedAt: string;
-    handle: string;
     network: "activitypub" | "atproto";
     actorUri: string;
+    handle: string;
     accountKey: string;
     host: string;
     proofMethod: "oauth";
@@ -117,9 +117,9 @@ export declare const completeLinkedAccountResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -127,9 +127,9 @@ export declare const completeLinkedAccountResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -139,9 +139,9 @@ export declare const completeLinkedAccountResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -151,9 +151,9 @@ export declare const completeLinkedAccountResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -177,9 +177,9 @@ export declare const linkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -187,9 +187,9 @@ export declare const linkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -199,9 +199,9 @@ export declare const linkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -211,9 +211,9 @@ export declare const linkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -244,9 +244,9 @@ export declare const serviceLinkedAccountSchema: z.ZodObject<{
     id: string;
     createdAt: string;
     verifiedAt: string;
-    handle: string;
     network: "activitypub" | "atproto";
     actorUri: string;
+    handle: string;
     accountKey: string;
     host: string;
     proofMethod: "oauth";
@@ -255,9 +255,9 @@ export declare const serviceLinkedAccountSchema: z.ZodObject<{
     id: string;
     createdAt: string;
     verifiedAt: string;
-    handle: string;
     network: "activitypub" | "atproto";
     actorUri: string;
+    handle: string;
     accountKey: string;
     host: string;
     proofMethod: "oauth";
@@ -284,9 +284,9 @@ export declare const serviceLinkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -295,9 +295,9 @@ export declare const serviceLinkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -309,9 +309,9 @@ export declare const serviceLinkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -323,9 +323,9 @@ export declare const serviceLinkedAccountListResponseSchema: z.ZodObject<{
         id: string;
         createdAt: string;
         verifiedAt: string;
-        handle: string;
         network: "activitypub" | "atproto";
         actorUri: string;
+        handle: string;
         accountKey: string;
         host: string;
         proofMethod: "oauth";
@@ -339,3 +339,36 @@ export type ServiceLinkedAccountListResponse = z.infer<typeof serviceLinkedAccou
  */
 export declare const LINKED_ACCOUNT_CALLBACK_ERRORS: readonly ["access_denied", "verification_failed", "provider_unavailable"];
 export type LinkedAccountCallbackError = (typeof LINKED_ACCOUNT_CALLBACK_ERRORS)[number];
+/**
+ * Why `POST /linked-accounts/:network/start` refused, as `details.reason` on
+ * its 400 (`{ error: 'BAD_REQUEST', message, details: { reason } }`). The
+ * message is for logs; show the user a text chosen from the reason.
+ *
+ * - `instance_invalid`: the ActivityPub `instance` is not a server name.
+ * - `instance_unreachable`: the server does not resolve to a public address, or
+ *   could not be connected to.
+ * - `handle_unresolvable`: the atproto handle or DID does not resolve to an
+ *   account. The only reason that means "check what you typed".
+ * - `provider_rejected`: the other network answered and refused Oxy's
+ *   request — for atproto an authorization-server error such as
+ *   `invalid_client_metadata`; for a Mastodon-API server a refused app
+ *   registration (often: not a Mastodon-compatible server). Nothing the user
+ *   typed is wrong.
+ * - `provider_unavailable`: the other network could not be asked right now
+ *   (its OAuth metadata did not load, a 5xx, a timeout). Try again later.
+ *
+ * A refusal with no `details.reason` (a bad `returnTo`, a missing field) is a
+ * client bug, not something to show.
+ */
+export declare const LINKED_ACCOUNT_START_ERROR_REASONS: readonly ["instance_invalid", "instance_unreachable", "handle_unresolvable", "provider_rejected", "provider_unavailable"];
+export type LinkedAccountStartErrorReason = (typeof LINKED_ACCOUNT_START_ERROR_REASONS)[number];
+export declare const linkedAccountStartErrorReasonSchema: z.ZodEnum<["instance_invalid", "instance_unreachable", "handle_unresolvable", "provider_rejected", "provider_unavailable"]>;
+/** The `details` of a start refusal. */
+export declare const linkedAccountStartErrorDetailsSchema: z.ZodObject<{
+    reason: z.ZodEnum<["instance_invalid", "instance_unreachable", "handle_unresolvable", "provider_rejected", "provider_unavailable"]>;
+}, "strict", z.ZodTypeAny, {
+    reason: "provider_unavailable" | "instance_invalid" | "instance_unreachable" | "handle_unresolvable" | "provider_rejected";
+}, {
+    reason: "provider_unavailable" | "instance_invalid" | "instance_unreachable" | "handle_unresolvable" | "provider_rejected";
+}>;
+export type LinkedAccountStartErrorDetails = z.infer<typeof linkedAccountStartErrorDetailsSchema>;

package/dist/types/notifications.d.ts

@@ -91,3 +91,29 @@ export declare const createOxyNotificationRequestSchema: z.ZodEffects<z.ZodObjec
     title?: string | undefined;
 }>;
 export type CreateOxyNotificationRequest = z.infer<typeof createOxyNotificationRequestSchema>;
+/**
+ * Android notification channel a `system` notification is pushed on — a wire
+ * contract, because Android 8+ silently drops a push whose channel the app has
+ * not created. Created by the vault (Commons) before it registers its token.
+ */
+export declare const OXY_ACCOUNT_PUSH_CHANNEL = "account";
+/** Runtime type discriminator of the push that announces a `system` notification. */
+export declare const OXY_SYSTEM_NOTIFICATION_PUSH_TYPE = "oxy_system_notification";
+/**
+ * The ONLY data a `system` notification's push carries: its id. The title and
+ * message ride as the push's own title and body; the deep link does NOT travel,
+ * because a push payload is untrusted at the receiver. On a tap the vault
+ * re-reads the notification from Oxy by id (scoped to the signed-in recipient)
+ * and opens the `url` stored there.
+ */
+export declare const oxySystemNotificationPushDataSchema: z.ZodObject<{
+    type: z.ZodLiteral<"oxy_system_notification">;
+    notificationId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "oxy_system_notification";
+    notificationId: string;
+}, {
+    type: "oxy_system_notification";
+    notificationId: string;
+}>;
+export type OxySystemNotificationPushData = z.infer<typeof oxySystemNotificationPushDataSchema>;