@oxy.so/contracts 4.11.0-oxy-one.0 → 4.11.0

package/dist/cjs/accountGraph.js

@@ -117,7 +117,7 @@ function isOperatorSwitchTargetKind(kind) {
  * Narrow an unknown value to an {@link AccountKind}.
  *
  * The user-DTO serializers read from structurally-permissive `unknown` sources
- * (a Drizzle row, a Mongo document, an already-formatted object), so each one
+ * (a Drizzle row, a raw document, an already-formatted object), so each one
  * would otherwise hand-roll this check and they would drift on what counts.
  */
 function isAccountKind(value) {
@@ -395,7 +395,8 @@ const accountNameSchema = zod_1.z
  * accept categories would break that reasoning silently, so
  * `__tests__/accountGraph.test.ts` asserts the two lists agree.
  */
-exports.createAccountRequestSchema = zod_1.z.object({
+exports.createAccountRequestSchema = zod_1.z
+    .object({
     parentAccountId: zod_1.z.string().trim().min(1).optional(),
     kind: exports.childAccountKindSchema,
     /**
@@ -474,7 +475,8 @@ exports.createAccountRequestSchema = zod_1.z.object({
      * remedy must not either.
      */
     isPrivateAccount: zod_1.z.boolean().optional(),
-}).superRefine((request, ctx) => {
+})
+    .superRefine((request, ctx) => {
     // The ONE place `kind` and `username` arrive in the same object, so it is the
     // only place a wire schema CAN apply the per-kind half of the policy: a bot's
     // handle must end in `bot`. Not a second rule — it asks

package/dist/cjs/agency.js

@@ -5,17 +5,17 @@ const zod_1 = require("zod");
 const capabilityInvocation_1 = require("./capabilityInvocation");
 const nonEmptyStringSchema = zod_1.z.string().trim().min(1);
 const identifierSchema = zod_1.z.string().trim().min(1).max(255);
-const limitKeySchema = zod_1.z.string().regex(/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)*$/, 'limit keys must be dot-separated input property names').max(255);
+const limitKeySchema = zod_1.z
+    .string()
+    .regex(/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)*$/, 'limit keys must be dot-separated input property names')
+    .max(255);
 const auditCodeSchema = zod_1.z.string().regex(/^[A-Za-z0-9_.:-]{1,128}$/);
 const sha256HexSchema = zod_1.z.string().regex(/^[a-f0-9]{64}$/);
-const invocationPathSchema = zod_1.z.string().regex(/^\/(?!\/)[^\\?#]*$/, 'invocation paths must be absolute app-local paths without backslashes, query or fragment');
+const invocationPathSchema = zod_1.z
+    .string()
+    .regex(/^\/(?!\/)[^\\?#]*$/, 'invocation paths must be absolute app-local paths without backslashes, query or fragment');
 /** Autonomy is ordered from least to most permissive. */
-exports.AUTONOMY_LEVELS = [
-    'read_only',
-    'draft',
-    'execute_on_request',
-    'autonomous',
-];
+exports.AUTONOMY_LEVELS = ['read_only', 'draft', 'execute_on_request', 'autonomous'];
 exports.autonomyLevelSchema = zod_1.z.enum(exports.AUTONOMY_LEVELS);
 exports.CAPABILITY_PACKAGES = [
     'read',
@@ -29,14 +29,18 @@ exports.CAPABILITY_PACKAGES = [
 ];
 exports.capabilityPackageSchema = zod_1.z.enum(exports.CAPABILITY_PACKAGES);
 exports.actorRefSchema = zod_1.z.discriminatedUnion('type', [
-    zod_1.z.object({
+    zod_1.z
+        .object({
         type: zod_1.z.literal('alia'),
         ownerAccountId: identifierSchema,
-    }).strict(),
-    zod_1.z.object({
+    })
+        .strict(),
+    zod_1.z
+        .object({
         type: zod_1.z.literal('agent'),
         accountId: identifierSchema,
-    }).strict(),
+    })
+        .strict(),
 ]);
 /** Present requester only; standing grants/automation retain actorRefSchema. */
 exports.executionActorRefSchema = zod_1.z.discriminatedUnion('type', [
@@ -44,63 +48,84 @@ exports.executionActorRefSchema = zod_1.z.discriminatedUnion('type', [
     zod_1.z.object({ type: zod_1.z.literal('requester'), accountId: identifierSchema }).strict(),
 ]);
 /** Separate bearer lives only in the SDK option / authority request body. */
-exports.foregroundExecutionAuthorizationInputSchema = zod_1.z.object({
+exports.foregroundExecutionAuthorizationInputSchema = zod_1.z
+    .object({
     tool: zod_1.z.enum(['recommendProfiles', 'readViewerGraph']),
-    expectedCatalog: zod_1.z.object({
+    expectedCatalog: zod_1.z
+        .object({
         registrationId: identifierSchema,
         version: identifierSchema,
         digest: sha256HexSchema,
-    }).strict(),
+    })
+        .strict(),
     runId: identifierSchema,
     stepId: identifierSchema.optional(),
     expiresAt: zod_1.z.string().datetime(),
-}).strict();
-exports.resourceRefSchema = zod_1.z.object({
+})
+    .strict();
+exports.resourceRefSchema = zod_1.z
+    .object({
     appId: identifierSchema,
     effectiveAccountId: identifierSchema,
     resourceType: identifierSchema,
     resourceId: identifierSchema,
-}).strict();
-exports.toolGrantOverrideSchema = zod_1.z.object({
+})
+    .strict();
+exports.toolGrantOverrideSchema = zod_1.z
+    .object({
     tool: identifierSchema,
     decision: zod_1.z.enum(['allow', 'deny']),
-}).strict();
-exports.grantLimitSchema = zod_1.z.object({
+})
+    .strict();
+exports.grantLimitSchema = zod_1.z
+    .object({
     tool: identifierSchema,
     key: limitKeySchema,
     // Persisted limits are deliberately closed scalar bounds. Strings and
     // arrays are tool arguments in disguise (recipient lists, prompts, search
     // queries) and ADR 0016 forbids persisting those in Oxy.
     value: zod_1.z.union([zod_1.z.number().finite(), zod_1.z.boolean()]),
-}).strict();
-exports.capabilityCatalogBindingSchema = zod_1.z.object({
+})
+    .strict();
+exports.capabilityCatalogBindingSchema = zod_1.z
+    .object({
     registrationId: identifierSchema,
     version: identifierSchema,
     digest: sha256HexSchema,
-}).strict();
+})
+    .strict();
 exports.executionAuthorizationRefSchema = zod_1.z.discriminatedUnion('kind', [
-    zod_1.z.object({
+    zod_1.z
+        .object({
         kind: zod_1.z.literal('direct_request'),
         id: identifierSchema,
-    }).strict(),
-    zod_1.z.object({
+    })
+        .strict(),
+    zod_1.z
+        .object({
         kind: zod_1.z.literal('automation'),
         id: identifierSchema,
         automationId: identifierSchema,
-    }).strict(),
+    })
+        .strict(),
 ]);
-exports.capabilityCoordinatorSchema = zod_1.z.object({
+exports.capabilityCoordinatorSchema = zod_1.z
+    .object({
     applicationId: identifierSchema,
     credentialId: identifierSchema,
-}).strict();
+})
+    .strict();
 /** Opt-in catalogue pin; legacy issuance omits expectedCatalog and its claim. */
-exports.capabilityTicketRequestSchema = zod_1.z.object({
+exports.capabilityTicketRequestSchema = zod_1.z
+    .object({
     executionAuthorizationId: zod_1.z.string().min(1),
     runId: zod_1.z.string().min(1).optional(),
     stepId: zod_1.z.string().min(1).optional(),
     expectedCatalog: exports.capabilityCatalogBindingSchema.optional(),
-}).strict();
-exports.delegationGrantSchema = zod_1.z.object({
+})
+    .strict();
+exports.delegationGrantSchema = zod_1.z
+    .object({
     id: identifierSchema,
     ownerAccountId: identifierSchema,
     actor: exports.actorRefSchema,
@@ -116,30 +141,38 @@ exports.delegationGrantSchema = zod_1.z.object({
     revokedAt: zod_1.z.string().datetime().nullable().default(null),
     createdAt: zod_1.z.string().datetime(),
     updatedAt: zod_1.z.string().datetime(),
-}).strict();
+})
+    .strict();
 exports.automationTriggerSchema = zod_1.z.discriminatedUnion('type', [
     zod_1.z.object({ type: zod_1.z.literal('manual') }).strict(),
-    zod_1.z.object({
+    zod_1.z
+        .object({
         type: zod_1.z.literal('event'),
         appId: identifierSchema,
         eventType: identifierSchema,
         resource: exports.resourceRefSchema.optional(),
-    }).strict(),
-    zod_1.z.object({
+    })
+        .strict(),
+    zod_1.z
+        .object({
         type: zod_1.z.literal('schedule'),
         cron: nonEmptyStringSchema,
         timezone: nonEmptyStringSchema,
-    }).strict(),
+    })
+        .strict(),
 ]);
 exports.automationActorSelectionSchema = zod_1.z.discriminatedUnion('mode', [
     zod_1.z.object({ mode: zod_1.z.literal('fixed'), actor: exports.actorRefSchema }).strict(),
     zod_1.z.object({ mode: zod_1.z.literal('automatic') }).strict(),
 ]);
-exports.automationDataFlowSchema = zod_1.z.object({
+exports.automationDataFlowSchema = zod_1.z
+    .object({
     sources: zod_1.z.array(exports.resourceRefSchema),
     destinations: zod_1.z.array(exports.resourceRefSchema),
-}).strict();
-exports.automationDefinitionSchema = zod_1.z.object({
+})
+    .strict();
+exports.automationDefinitionSchema = zod_1.z
+    .object({
     id: identifierSchema,
     ownerAccountId: identifierSchema,
     objective: nonEmptyStringSchema,
@@ -153,8 +186,10 @@ exports.automationDefinitionSchema = zod_1.z.object({
     enabled: zod_1.z.boolean(),
     createdAt: zod_1.z.string().datetime(),
     updatedAt: zod_1.z.string().datetime(),
-}).strict();
-exports.capabilityTicketClaimsSchema = zod_1.z.object({
+})
+    .strict();
+exports.capabilityTicketClaimsSchema = zod_1.z
+    .object({
     iss: nonEmptyStringSchema,
     aud: identifierSchema,
     sub: identifierSchema,
@@ -177,10 +212,10 @@ exports.capabilityTicketClaimsSchema = zod_1.z.object({
     capabilities: zod_1.z.array(identifierSchema).min(1),
     limits: zod_1.z.array(exports.grantLimitSchema).default([]),
     autonomy: exports.autonomyLevelSchema,
-}).strict().superRefine((claims, context) => {
-    const expectedSubject = claims.actor.type !== 'alia'
-        ? claims.actor.accountId
-        : `alia:${claims.actor.ownerAccountId}`;
+})
+    .strict()
+    .superRefine((claims, context) => {
+    const expectedSubject = claims.actor.type !== 'alia' ? claims.actor.accountId : `alia:${claims.actor.ownerAccountId}`;
     if (claims.sub !== expectedSubject) {
         context.addIssue({
             code: zod_1.z.ZodIssueCode.custom,
@@ -195,13 +230,17 @@ exports.capabilityTicketClaimsSchema = zod_1.z.object({
             path: ['actor', 'ownerAccountId'],
         });
     }
-    if (claims.actor.type === 'requester' && (claims.actor.accountId !== claims.requesterAccountId
-        || claims.executionAuthorization.kind !== 'direct_request'
-        || claims.autonomy !== 'read_only'
-        || claims.grantId !== undefined
-        || claims.automationId !== undefined)) {
-        context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['actor'],
-            message: 'requester actors require their exact principal and direct read-only authority without standing grants' });
+    if (claims.actor.type === 'requester' &&
+        (claims.actor.accountId !== claims.requesterAccountId ||
+            claims.executionAuthorization.kind !== 'direct_request' ||
+            claims.autonomy !== 'read_only' ||
+            claims.grantId !== undefined ||
+            claims.automationId !== undefined)) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['actor'],
+            message: 'requester actors require their exact principal and direct read-only authority without standing grants',
+        });
     }
     if (claims.exp <= claims.iat) {
         context.addIssue({
@@ -238,7 +277,8 @@ exports.capabilityTicketClaimsSchema = zod_1.z.object({
 });
 /** Structural projections only: an authenticated transport must produce these. */
 exports.invocationPrincipalSchema = zod_1.z.discriminatedUnion('kind', [
-    zod_1.z.object({
+    zod_1.z
+        .object({
         kind: zod_1.z.literal('oauth'),
         subject: identifierSchema,
         clientId: identifierSchema,
@@ -246,25 +286,33 @@ exports.invocationPrincipalSchema = zod_1.z.discriminatedUnion('kind', [
         activeAccountId: identifierSchema,
         scopes: zod_1.z.array(identifierSchema),
         resource: zod_1.z.string().url(),
-    }).strict(),
-    zod_1.z.object({
+    })
+        .strict(),
+    zod_1.z
+        .object({
         kind: zod_1.z.literal('capability'),
         claims: exports.capabilityTicketClaimsSchema.refine((claims) => claims.catalog !== undefined, {
             message: 'internal MCP requires a signed catalogue binding',
         }),
-    }).strict(),
+    })
+        .strict(),
 ]);
-exports.policyDecisionSchema = zod_1.z.object({
+exports.policyDecisionSchema = zod_1.z
+    .object({
     allowed: zod_1.z.boolean(),
     reason: identifierSchema,
     effectiveAutonomy: exports.autonomyLevelSchema.optional(),
     grantId: identifierSchema.optional(),
-}).strict();
-exports.auditResultSchema = zod_1.z.object({
+})
+    .strict();
+exports.auditResultSchema = zod_1.z
+    .object({
     status: zod_1.z.enum(['planned', 'allowed', 'denied', 'succeeded', 'failed', 'rolled_back']),
     code: auditCodeSchema.optional(),
-}).strict();
-exports.auditEventSchema = zod_1.z.object({
+})
+    .strict();
+exports.auditEventSchema = zod_1.z
+    .object({
     eventId: identifierSchema,
     occurredAt: zod_1.z.string().datetime(),
     requesterAccountId: identifierSchema,
@@ -277,20 +325,26 @@ exports.auditEventSchema = zod_1.z.object({
     capabilities: zod_1.z.array(identifierSchema),
     policyDecision: exports.policyDecisionSchema,
     result: exports.auditResultSchema,
-    rollback: zod_1.z.object({
+    rollback: zod_1.z
+        .object({
         supported: zod_1.z.boolean(),
         attempted: zod_1.z.boolean(),
         succeeded: zod_1.z.boolean().optional(),
-    }).strict(),
-    correlation: zod_1.z.object({
+    })
+        .strict(),
+    correlation: zod_1.z
+        .object({
         runId: identifierSchema,
         stepId: identifierSchema.optional(),
         automationId: identifierSchema.optional(),
         idempotencyKeyHash: sha256HexSchema.optional(),
         capabilityTicketId: identifierSchema.optional(),
-    }).strict(),
-}).strict();
-exports.catalogToolSchema = zod_1.z.object({
+    })
+        .strict(),
+})
+    .strict();
+exports.catalogToolSchema = zod_1.z
+    .object({
     name: identifierSchema,
     version: identifierSchema,
     description: nonEmptyStringSchema,
@@ -303,15 +357,23 @@ exports.catalogToolSchema = zod_1.z.object({
     idempotency: zod_1.z.enum(['none', 'supported', 'required']),
     rollback: zod_1.z.enum(['none', 'manual', 'supported']),
     exposure: zod_1.z.array(zod_1.z.enum(['internal', 'mcp'])).min(1),
-    limitKeys: zod_1.z.array(zod_1.z.object({
+    limitKeys: zod_1.z
+        .array(zod_1.z
+        .object({
         key: limitKeySchema,
         kind: zod_1.z.enum(['maximum_number', 'exact_boolean']),
-    }).strict()).default([]),
-    invocation: zod_1.z.object({
+    })
+        .strict())
+        .default([]),
+    invocation: zod_1.z
+        .object({
         method: zod_1.z.enum(['GET', 'POST', 'PATCH', 'PUT', 'DELETE']),
         path: invocationPathSchema,
-    }).strict(),
-}).strict().superRefine((tool, context) => {
+    })
+        .strict(),
+})
+    .strict()
+    .superRefine((tool, context) => {
     const requireUnique = (values, path) => {
         if (new Set(values).size !== values.length) {
             context.addIssue({
@@ -388,7 +450,8 @@ exports.catalogToolSchema = zod_1.z.object({
             path: ['capabilityPackage'],
         });
     }
-    if ((tool.effect === 'financial' || tool.effect === 'security') && tool.idempotency !== 'required') {
+    if ((tool.effect === 'financial' || tool.effect === 'security') &&
+        tool.idempotency !== 'required') {
         context.addIssue({
             code: zod_1.z.ZodIssueCode.custom,
             message: 'Financial and security effects require idempotency keys',
@@ -407,16 +470,17 @@ exports.catalogToolSchema = zod_1.z.object({
     // not declare as a REQUIRED property can never be filled, and a GET input
     // that is not a scalar has no query-string form — both are refused here so
     // the builder never has to guess.
-    const declared = typeof tool.inputSchema.properties === 'object'
-        && tool.inputSchema.properties !== null
-        && !Array.isArray(tool.inputSchema.properties)
+    const declared = typeof tool.inputSchema.properties === 'object' &&
+        tool.inputSchema.properties !== null &&
+        !Array.isArray(tool.inputSchema.properties)
         ? tool.inputSchema.properties
         : {};
     const required = Array.isArray(tool.inputSchema.required) ? tool.inputSchema.required : [];
     const parameters = (0, capabilityInvocation_1.catalogInvocationPathParameters)(tool.invocation.path);
     requireUnique(parameters, 'invocation.path parameters');
     for (const parameter of parameters) {
-        if (!Object.prototype.hasOwnProperty.call(declared, parameter) || !required.includes(parameter)) {
+        if (!Object.prototype.hasOwnProperty.call(declared, parameter) ||
+            !required.includes(parameter)) {
             context.addIssue({
                 code: zod_1.z.ZodIssueCode.custom,
                 message: `Path parameter {${parameter}} must be a required input property`,
@@ -439,20 +503,26 @@ exports.catalogToolSchema = zod_1.z.object({
         }
     }
 });
-exports.catalogEventSchema = zod_1.z.object({
+exports.catalogEventSchema = zod_1.z
+    .object({
     type: identifierSchema,
     version: identifierSchema,
     description: nonEmptyStringSchema,
     dataSchema: zod_1.z.record(zod_1.z.unknown()),
     resourceTypes: zod_1.z.array(identifierSchema).min(1),
-}).strict();
-exports.appCapabilityCatalogSchema = zod_1.z.object({
+})
+    .strict();
+exports.appCapabilityCatalogSchema = zod_1.z
+    .object({
     schemaVersion: zod_1.z.literal('1'),
     appId: identifierSchema,
     version: identifierSchema,
     audience: identifierSchema,
     /** HTTPS origin that serves the catalog's internal invocation paths. */
-    internalBaseUrl: zod_1.z.string().url().superRefine((value, context) => {
+    internalBaseUrl: zod_1.z
+        .string()
+        .url()
+        .superRefine((value, context) => {
         const url = new URL(value);
         const localDevelopment = url.hostname === 'localhost' || url.hostname === '127.0.0.1';
         if (url.protocol !== 'https:' && !(localDevelopment && url.protocol === 'http:')) {
@@ -471,12 +541,16 @@ exports.appCapabilityCatalogSchema = zod_1.z.object({
     /** Account-scoped resource used for native Alia bindings without app-specific code. */
     accountResourceType: identifierSchema,
     /** Canonical protected-resource URI when this catalog is also exposed as an external MCP server. */
-    externalMcp: zod_1.z.object({
-        resource: zod_1.z.string().url().superRefine((value, context) => {
+    externalMcp: zod_1.z
+        .object({
+        resource: zod_1.z
+            .string()
+            .url()
+            .superRefine((value, context) => {
             const url = new URL(value);
-            const localDevelopment = url.hostname === 'localhost'
-                || url.hostname === '127.0.0.1'
-                || url.hostname === '[::1]';
+            const localDevelopment = url.hostname === 'localhost' ||
+                url.hostname === '127.0.0.1' ||
+                url.hostname === '[::1]';
             if (url.protocol !== 'https:' && !(localDevelopment && url.protocol === 'http:')) {
                 context.addIssue({
                     code: zod_1.z.ZodIssueCode.custom,
@@ -490,10 +564,14 @@ exports.appCapabilityCatalogSchema = zod_1.z.object({
                 });
             }
         }),
-    }).strict().optional(),
+    })
+        .strict()
+        .optional(),
     tools: zod_1.z.array(exports.catalogToolSchema),
     events: zod_1.z.array(exports.catalogEventSchema),
-}).strict().superRefine((catalog, context) => {
+})
+    .strict()
+    .superRefine((catalog, context) => {
     const names = new Set();
     for (const [index, tool] of catalog.tools.entries()) {
         if (names.has(tool.name)) {
@@ -512,8 +590,8 @@ exports.appCapabilityCatalogSchema = zod_1.z.object({
     for (const [left, right] of (0, capabilityInvocation_1.findOverlappingCatalogInvocations)(catalog.tools)) {
         context.addIssue({
             code: zod_1.z.ZodIssueCode.custom,
-            message: `Tools ${left.name} and ${right.name} have overlapping invocations `
-                + `(${left.invocation.method} ${left.invocation.path} / ${right.invocation.method} ${right.invocation.path})`,
+            message: `Tools ${left.name} and ${right.name} have overlapping invocations ` +
+                `(${left.invocation.method} ${left.invocation.path} / ${right.invocation.method} ${right.invocation.path})`,
             path: ['tools'],
         });
     }
@@ -529,13 +607,16 @@ exports.appCapabilityCatalogSchema = zod_1.z.object({
         eventTypes.add(event.type);
     }
 });
-exports.catalogRegistrationSchema = zod_1.z.object({
+exports.catalogRegistrationSchema = zod_1.z
+    .object({
     catalog: exports.appCapabilityCatalogSchema,
     digest: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
     signature: nonEmptyStringSchema,
     deployedAt: zod_1.z.string().datetime(),
-}).strict();
-exports.normalizedAppEventSchema = zod_1.z.object({
+})
+    .strict();
+exports.normalizedAppEventSchema = zod_1.z
+    .object({
     eventId: identifierSchema,
     appId: identifierSchema,
     accountId: identifierSchema,
@@ -543,4 +624,5 @@ exports.normalizedAppEventSchema = zod_1.z.object({
     type: identifierSchema,
     occurredAt: zod_1.z.string().datetime(),
     data: zod_1.z.record(zod_1.z.unknown()),
-}).strict();
+})
+    .strict();

package/dist/cjs/agentKeys.js

@@ -8,8 +8,15 @@ const signIn_1 = require("./signIn");
 const identityProof_1 = require("./identityProof");
 exports.AGENT_PROOF_AUDIENCE = 'oxy-api/agent';
 exports.AGENT_PROOF_TTL_MS = 60000;
-exports.AGENT_PROOF_ACTIONS = ['agent_signin', 'agent_enroll', 'agent_rotate', 'agent_recover', 'agent_governance'];
-exports.agentProofClaimsSchema = zod_1.z.object({
+exports.AGENT_PROOF_ACTIONS = [
+    'agent_signin',
+    'agent_enroll',
+    'agent_rotate',
+    'agent_recover',
+    'agent_governance',
+];
+exports.agentProofClaimsSchema = zod_1.z
+    .object({
     version: zod_1.z.literal(1),
     audience: zod_1.z.literal(exports.AGENT_PROOF_AUDIENCE),
     action: zod_1.z.enum(exports.AGENT_PROOF_ACTIONS),
@@ -20,48 +27,95 @@ exports.agentProofClaimsSchema = zod_1.z.object({
     payloadDigest: zod_1.z.string().regex(/^[0-9a-f]{64}$/),
     challenge: zod_1.z.string().regex(/^[0-9a-f]{64}$/),
     expiresAt: zod_1.z.number().int().positive(),
-}).strict();
+})
+    .strict();
 /** Different proof roles cannot substitute for one another on the same operation. */
 function buildAgentProofMessage(claims, timestamp, role = 'credential') {
-    return (0, identityProof_1.canonicalJson)({ domain: 'oxy-agent-proof', ...exports.agentProofClaimsSchema.parse(claims), timestamp, role });
+    return (0, identityProof_1.canonicalJson)({
+        domain: 'oxy-agent-proof',
+        ...exports.agentProofClaimsSchema.parse(claims),
+        timestamp,
+        role,
+    });
 }
-exports.agentSignatureSchema = zod_1.z.object({
+exports.agentSignatureSchema = zod_1.z
+    .object({
     challenge: zod_1.z.string().regex(/^[0-9a-f]{64}$/),
-    signature: zod_1.z.string().regex(/^[0-9a-f]+$/i).max(160),
+    signature: zod_1.z
+        .string()
+        .regex(/^[0-9a-f]+$/i)
+        .max(160),
     timestamp: zod_1.z.number().int().positive(),
-}).strict();
-exports.agentChallengeRequestSchema = zod_1.z.object({ publicKey: zod_1.z.string().trim().min(1).max(130) }).strict();
-exports.agentVerifyRequestSchema = exports.agentSignatureSchema.extend({ publicKey: zod_1.z.string().trim().min(1).max(130) }).strict();
-const newKey = { publicKey: zod_1.z.string().trim().min(1).max(130), label: zod_1.z.string().trim().min(1).max(120) };
+})
+    .strict();
+exports.agentChallengeRequestSchema = zod_1.z
+    .object({ publicKey: zod_1.z.string().trim().min(1).max(130) })
+    .strict();
+exports.agentVerifyRequestSchema = exports.agentSignatureSchema
+    .extend({ publicKey: zod_1.z.string().trim().min(1).max(130) })
+    .strict();
+const newKey = {
+    publicKey: zod_1.z.string().trim().min(1).max(130),
+    label: zod_1.z.string().trim().min(1).max(120),
+};
 exports.agentKeyOperationSchema = zod_1.z.discriminatedUnion('operation', [
     zod_1.z.object({ operation: zod_1.z.literal('enroll'), ...newKey }).strict(),
     zod_1.z.object({ operation: zod_1.z.literal('recover'), ...newKey }).strict(),
-    zod_1.z.object({ operation: zod_1.z.literal('rotate'), ...newKey, retireCurrent: zod_1.z.boolean().optional() }).strict(),
+    zod_1.z
+        .object({ operation: zod_1.z.literal('rotate'), ...newKey, retireCurrent: zod_1.z.boolean().optional() })
+        .strict(),
     zod_1.z.object({ operation: zod_1.z.literal('revoke'), methodId: zod_1.z.string().min(1) }).strict(),
 ]);
-exports.agentKeyOperationProofSchema = zod_1.z.object({
+exports.agentKeyOperationProofSchema = zod_1.z
+    .object({
     challenge: zod_1.z.string().regex(/^[0-9a-f]{64}$/),
     timestamp: zod_1.z.number().int().positive(),
-    keySignature: zod_1.z.string().regex(/^[0-9a-f]+$/i).max(160).optional(),
-    governorSignature: zod_1.z.string().regex(/^[0-9a-f]+$/i).max(160).optional(),
+    keySignature: zod_1.z
+        .string()
+        .regex(/^[0-9a-f]+$/i)
+        .max(160)
+        .optional(),
+    governorSignature: zod_1.z
+        .string()
+        .regex(/^[0-9a-f]+$/i)
+        .max(160)
+        .optional(),
     reauth: signIn_1.reauthProofSchema.optional(),
-}).strict();
-exports.executeAgentKeyOperationSchema = zod_1.z.object({
+})
+    .strict();
+exports.executeAgentKeyOperationSchema = zod_1.z
+    .object({
     operation: exports.agentKeyOperationSchema,
     proof: exports.agentKeyOperationProofSchema,
-}).strict();
-exports.agentKeyOperationChallengeSchema = zod_1.z.object({
+})
+    .strict();
+exports.agentKeyOperationChallengeSchema = zod_1.z
+    .object({
     claims: exports.agentProofClaimsSchema,
     governorPublicKey: zod_1.z.string().nullable(),
-}).strict();
-exports.agentKeyOperationResultSchema = zod_1.z.object({
+})
+    .strict();
+exports.agentKeyOperationResultSchema = zod_1.z
+    .object({
     methodId: zod_1.z.string().nullable(),
     revokedMethodIds: zod_1.z.array(zod_1.z.string()),
-}).strict();
+})
+    .strict();
 exports.ACCOUNT_AUTH_METHODS = ['identity', 'agent_key'];
 /** Public credential inventory. Never includes a proof, bearer or private key. */
-exports.agentKeyListResponseSchema = zod_1.z.object({ keys: zod_1.z.array(zod_1.z.object({
-        id: zod_1.z.string(), publicKey: zod_1.z.string(), label: zod_1.z.string(),
-        enrolledByUserId: zod_1.z.string().nullable(), enrollmentMethod: zod_1.z.enum(['governor', 'rotation', 'recovery']),
-        linkedAt: zod_1.z.string().datetime(), lastUsedAt: zod_1.z.string().datetime().nullable(), revokedAt: zod_1.z.string().datetime().nullable(),
-    }).strict()) }).strict();
+exports.agentKeyListResponseSchema = zod_1.z
+    .object({
+    keys: zod_1.z.array(zod_1.z
+        .object({
+        id: zod_1.z.string(),
+        publicKey: zod_1.z.string(),
+        label: zod_1.z.string(),
+        enrolledByUserId: zod_1.z.string().nullable(),
+        enrollmentMethod: zod_1.z.enum(['governor', 'rotation', 'recovery']),
+        linkedAt: zod_1.z.string().datetime(),
+        lastUsedAt: zod_1.z.string().datetime().nullable(),
+        revokedAt: zod_1.z.string().datetime().nullable(),
+    })
+        .strict()),
+})
+    .strict();