@oxy.so/contracts 4.10.0 → 4.11.0

package/dist/cjs/signIn.js

@@ -124,7 +124,9 @@ exports.emailSignInCodeSchema = zod_1.z
     const code = normalizeEmailSignInCode(value);
     return (new RegExp(`^\\d{${accountEmail_1.EMAIL_CODE_LENGTH}}$`).test(code) ||
         new RegExp(`^[${exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET}]{${exports.EMAIL_SIGNIN_LONG_CODE_LENGTH}}$`).test(code));
-}, { message: `code must be ${accountEmail_1.EMAIL_CODE_LENGTH} digits or the ${exports.EMAIL_SIGNIN_LONG_CODE_LENGTH}-character code from the email` });
+}, {
+    message: `code must be ${accountEmail_1.EMAIL_CODE_LENGTH} digits or the ${exports.EMAIL_SIGNIN_LONG_CODE_LENGTH}-character code from the email`,
+});
 /** `POST /auth/signin/email/confirm` — the code from the email. */
 exports.emailSignInConfirmRequestSchema = zod_1.z
     .object({
@@ -199,7 +201,13 @@ function isSecondFactorRequired(result) {
  * What a re-verification email code confirms. The code is bound to it: a code
  * asked for one change never authorises another, and the email names it.
  */
-exports.REAUTH_ACTIONS = ['change_password', 'totp', 'link_commons', 'delete_account', 'credentials_manage'];
+exports.REAUTH_ACTIONS = [
+    'change_password',
+    'totp',
+    'link_commons',
+    'delete_account',
+    'credentials_manage',
+];
 /** `POST /users/me/reauth/email` */
 exports.reauthEmailStartRequestSchema = zod_1.z.object({ action: zod_1.z.enum(exports.REAUTH_ACTIONS) }).strict();
 /**
@@ -259,14 +267,19 @@ exports.totpEnrollResponseSchema = zod_1.z.object({
 /** `POST /users/me/totp/confirm` — the first code from the authenticator turns it on. */
 exports.totpConfirmRequestSchema = zod_1.z
     .object({
-    code: zod_1.z.string().trim().regex(new RegExp(`^\\d{${exports.TOTP_DIGITS}}$`)),
+    code: zod_1.z
+        .string()
+        .trim()
+        .regex(new RegExp(`^\\d{${exports.TOTP_DIGITS}}$`)),
     reauth: exports.reauthProofSchema,
 })
     .strict();
 /** `POST /users/me/totp/disable` and `POST /users/me/totp/backup-codes` */
 exports.totpReauthRequestSchema = zod_1.z.object({ reauth: exports.reauthProofSchema }).strict();
 exports.totpBackupCodesResponseSchema = zod_1.z.object({
-    backupCodes: zod_1.z.array(zod_1.z.string().regex(/^[a-z2-9]{5}-[a-z2-9]{5}$/)).length(exports.TOTP_BACKUP_CODE_COUNT),
+    backupCodes: zod_1.z
+        .array(zod_1.z.string().regex(/^[a-z2-9]{5}-[a-z2-9]{5}$/))
+        .length(exports.TOTP_BACKUP_CODE_COUNT),
 });
 /**
  * Stable error codes (`error.code` in the API error body). Clients map these

package/dist/cjs/transparency.js

@@ -23,7 +23,9 @@ const zod_1 = require("zod");
  * verification failure at a distance.
  */
 /** A SHA-256 digest in the exact form the protocol emits: 64 lowercase hex chars. */
-const hexDigestSchema = zod_1.z.string().regex(/^[0-9a-f]{64}$/, 'Expected a 64-char lowercase hex digest');
+const hexDigestSchema = zod_1.z
+    .string()
+    .regex(/^[0-9a-f]{64}$/, 'Expected a 64-char lowercase hex digest');
 /**
  * One signer's endorsement of a checkpoint's signed fields.
  *

package/dist/cjs/updates.js

@@ -12,7 +12,7 @@
  * CLI, the console hook) validates its INPUT against the same definitions, so
  * producer and consumers cannot drift.
  *
- * Domain model (mirrors the Mongoose models in `@oxy.so/api`):
+ * Domain model (mirrors the update tables in `@oxy.so/api`):
  *  - A `channel` (e.g. `production`, `preview`, `pr-123`) is a named release
  *    track for one application.
  *  - An `update` is one published bundle for a single `(channel, runtimeVersion,
@@ -156,9 +156,7 @@ exports.createUpdateRequestSchema = zod_1.z.object({
      * `expoClient` (the public expo config) so `Constants.expoConfig` resolves
      * after an OTA update; MAY carry other third-party config.
      */
-    extra: zod_1.z
-        .object({ expoClient: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()) })
-        .catchall(zod_1.z.unknown()),
+    extra: zod_1.z.object({ expoClient: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()) }).catchall(zod_1.z.unknown()),
     /** String→string metadata dict; filtered client-side via manifest filters. */
     metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional(),
     /** Initial rollout percentage (default 100 — full rollout). */

package/dist/cjs/userResponse.js

@@ -1,4 +1,23 @@
 "use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deviceLinkedSessionsResponseSchema = exports.deviceLinkedSessionSchema = exports.currentUserResponseSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.dateOfBirthSchema = exports.themePreferenceSchema = exports.userRelationshipSchema = exports.userNameSchema = exports.USER_PROFILE_COLOR_PRESETS = void 0;
+exports.resolveUserId = resolveUserId;
+exports.safeParseContract = safeParseContract;
+/** Canonical profile/theme preset identities accepted by Oxy writes. */
+exports.USER_PROFILE_COLOR_PRESETS = [
+    'teal',
+    'blue',
+    'green',
+    'amber',
+    'red',
+    'purple',
+    'pink',
+    'sky',
+    'orange',
+    'mint',
+    'mono',
+    'oxy',
+];
 /**
  * Canonical API user-response contracts.
  *
@@ -21,18 +40,14 @@
  *    Emits `id` (NOT `_id`), forwards `username` verbatim (may be absent), and
  *    emits `name` as the structured `{ first, last, full, displayName }`
  *    subdocument.
- *  - `packages/api/src/models/User.ts` — `NameSchema` (`first`/`last` default
- *    `''`; `full` and `displayName` are Mongoose VIRTUALS. Formatted API
- *    responses compose both fields, while raw-document responses may omit the
- *    virtuals if the query did not materialise them.
+ *  - `packages/api/src/db/schema/users.ts` — the stored name (`first`/`last`);
+ *    `full` and `displayName` have no column of their own. Formatted API
+ *    responses compose both fields, while raw-document responses may omit
+ *    them.
  *
  * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
  * `require()`).
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deviceLinkedSessionsResponseSchema = exports.deviceLinkedSessionSchema = exports.currentUserResponseSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.dateOfBirthSchema = exports.themePreferenceSchema = exports.userRelationshipSchema = exports.userNameSchema = void 0;
-exports.resolveUserId = resolveUserId;
-exports.safeParseContract = safeParseContract;
 const zod_1 = require("zod");
 const identity_1 = require("./identity");
 const accountGraph_1 = require("./accountGraph");
@@ -125,7 +140,7 @@ exports.dateOfBirthSchema = zod_1.z
  */
 exports.userResponseSchema = zod_1.z
     .object({
-    /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
+    /** The user id as a string. Present on `formatUserResponse` output. */
     id: zod_1.z.string().optional(),
     /** Raw-document id (e.g. `GET /users/me`). Present when `id` is not. */
     _id: zod_1.z.string().optional(),
@@ -225,6 +240,14 @@ exports.userResponseSchema = zod_1.z
      * `GET /session/user/:sessionId`) and absent until the user sets it.
      */
     themePreference: exports.themePreferenceSchema.optional(),
+    personalization: zod_1.z
+        .object({
+        mentionMono: zod_1.z
+            .object({ allowed: zod_1.z.boolean(), expiresAt: zod_1.z.string().datetime().nullable() })
+            .strict(),
+    })
+        .strict()
+        .optional(),
 })
     .passthrough();
 exports.userProfileUpdateSchema = zod_1.z

package/dist/cjs/username.js

@@ -217,7 +217,9 @@ exports.usernameSchema = zod_1.z
     .regex(USERNAME_PATTERN, exports.USERNAME_INVALID_MESSAGE)
     .refine((username) => !/^[0-9]+$/.test(username), exports.NUMERIC_USERNAME_MESSAGE)
     .refine((username) => !exports.RESERVED_USERNAMES.has(username.toLowerCase()), exports.RESERVED_USERNAME_MESSAGE)
-    .refine((username) => !username.split(/[-_]/).some((segment) => RESERVED_USERNAME_SEGMENTS.has(segment.toLowerCase())), exports.RESERVED_USERNAME_MESSAGE);
+    .refine((username) => !username
+    .split(/[-_]/)
+    .some((segment) => RESERVED_USERNAME_SEGMENTS.has(segment.toLowerCase())), exports.RESERVED_USERNAME_MESSAGE);
 /**
  * Whether a candidate handle is storable — the boolean form, for input surfaces
  * that show a message as somebody types rather than throwing.