@oxy.so/contracts 4.11.0-oxy-one.0 → 4.11.0

package/dist/cjs/inference/usage.js

@@ -65,12 +65,7 @@ exports.usageReservationRequestSchema = zod_1.z.object({
     expiresInSeconds: zod_1.z.number().int().positive().max(86400),
 });
 /** Lifecycle of a hold. Terminal states are `settled`, `released`, `expired`. */
-exports.usageReservationStatusSchema = zod_1.z.enum([
-    'held',
-    'settled',
-    'released',
-    'expired',
-]);
+exports.usageReservationStatusSchema = zod_1.z.enum(['held', 'settled', 'released', 'expired']);
 /**
  * A hold placed against an account's balance.
  *
@@ -270,9 +265,7 @@ exports.usageReceiptSchema = zod_1.z
  * ledger accounts and only the second one is visible on an invoice.
  */
 exports.usageRefundSubjectSchema = zod_1.z.discriminatedUnion('kind', [
-    zod_1.z
-        .object({ kind: zod_1.z.literal('reservation'), reservationId: zod_1.z.string().min(1).max(128) })
-        .strict(),
+    zod_1.z.object({ kind: zod_1.z.literal('reservation'), reservationId: zod_1.z.string().min(1).max(128) }).strict(),
     zod_1.z.object({ kind: zod_1.z.literal('receipt'), receiptId: zod_1.z.string().min(1).max(128) }).strict(),
 ]);
 /** Why money was given back or a hold was released. */

package/dist/cjs/notifications.js

@@ -64,18 +64,38 @@ exports.createOxyNotificationRequestSchema = zod_1.z
     .superRefine((value, context) => {
     if (value.type === 'system') {
         if (value.actorId !== value.recipientId)
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['actorId'], message: 'a system notification is from the recipient\'s own account' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['actorId'],
+                message: "a system notification is from the recipient's own account",
+            });
         if (!value.title)
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['title'], message: 'title is required for a system notification' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['title'],
+                message: 'title is required for a system notification',
+            });
         if (!value.message)
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['message'], message: 'message is required for a system notification' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['message'],
+                message: 'message is required for a system notification',
+            });
     }
     else {
         if (value.url !== undefined) {
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['url'], message: 'url is only stored for a system notification' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['url'],
+                message: 'url is only stored for a system notification',
+            });
         }
         if (value.entityType === 'app') {
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['entityType'], message: "entityType 'app' is only valid for a system notification" });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['entityType'],
+                message: "entityType 'app' is only valid for a system notification",
+            });
         }
     }
 });

package/dist/cjs/oauth.js

@@ -71,45 +71,61 @@ exports.oauthAuthorizeCodeResponseSchema = zod_1.z.object({
  * Reuses the ordinary public application projection and adds only the public
  * DCR client id needed to bind the consent surface to the request.
  */
-exports.mcpOAuthClientApplicationSchema = sessionStatus_1.publicApplicationSchema.extend({
+exports.mcpOAuthClientApplicationSchema = sessionStatus_1.publicApplicationSchema
+    .extend({
     clientId: zod_1.z.string().min(1),
-}).strict();
+})
+    .strict();
 /**
  * An effectful MCP action the requested capability set can actually invoke.
  * Every field is picked from the canonical catalog tool schema so consent can
  * never maintain a second tool description or effect classification.
  */
-exports.mcpOAuthWriteActionSchema = agency_1.catalogToolSchema.innerType().pick({
+exports.mcpOAuthWriteActionSchema = agency_1.catalogToolSchema
+    .innerType()
+    .pick({
     name: true,
     version: true,
     description: true,
     requiredCapabilities: true,
     effect: true,
-}).strict().refine((action) => action.effect !== 'read', {
+})
+    .strict()
+    .refine((action) => action.effect !== 'read', {
     message: 'MCP consent write actions must be effectful',
     path: ['effect'],
 });
 /** Exact, server-resolved context rendered before an external MCP grant. */
-exports.mcpOAuthConsentContextSchema = zod_1.z.object({
+exports.mcpOAuthConsentContextSchema = zod_1.z
+    .object({
     client: exports.mcpOAuthClientApplicationSchema,
-    account: zod_1.z.object({
+    account: zod_1.z
+        .object({
         id: zod_1.z.string().min(1),
         displayName: zod_1.z.string().min(1).optional(),
         handle: zod_1.z.string().min(1).optional(),
         avatar: zod_1.z.string().min(1).optional(),
-    }).strict(),
-    resource: zod_1.z.object({
+    })
+        .strict(),
+    resource: zod_1.z
+        .object({
         appId: zod_1.z.string().min(1),
         uri: zod_1.z.string().url(),
         application: sessionStatus_1.publicApplicationSchema,
-    }).strict(),
+    })
+        .strict(),
     capabilities: zod_1.z.array(zod_1.z.string().min(1)).min(1),
     writeActions: zod_1.z.array(exports.mcpOAuthWriteActionSchema),
-}).strict();
-exports.mcpOAuthClientInfoResponseSchema = zod_1.z.object({
+})
+    .strict();
+exports.mcpOAuthClientInfoResponseSchema = zod_1.z
+    .object({
     application: exports.mcpOAuthClientApplicationSchema,
-}).strict();
-exports.mcpOAuthConsentResponseSchema = zod_1.z.object({
+})
+    .strict();
+exports.mcpOAuthConsentResponseSchema = zod_1.z
+    .object({
     consentRequired: zod_1.z.boolean(),
     context: exports.mcpOAuthConsentContextSchema,
-}).strict();
+})
+    .strict();

package/dist/cjs/oxyRecordTypes.js

@@ -8,8 +8,8 @@
  * is rejected as `invalid_envelope`.
  *
  * `oxySignedRecordTypeSchema` is that runtime gate (the API's `verifyEnvelope`
- * re-narrows with it; the Mongoose `SignedRecord.type` enum and the Postgres
- * CHECK on `signed_records.type` are both derived from `.options`);
+ * re-narrows with it; the Postgres CHECK on `signed_records.type` is derived
+ * from `.options`);
  * `OxySignedRecordType` is the matching compile-time union the SDK
  * identity/civic mixins type against.
  *

package/dist/cjs/products/access.js

@@ -5,86 +5,175 @@ const zod_1 = require("zod");
 const identifiers_1 = require("../inference/identifiers");
 const identifier = zod_1.z.string().min(1).max(160);
 const count = zod_1.z.number().int().nonnegative().safe();
-const period = zod_1.z.object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() }).strict()
-    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'period end must follow start');
+const period = zod_1.z
+    .object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() })
+    .strict()
+    .refine((value) => Date.parse(value.end) > Date.parse(value.start), 'period end must follow start');
 /** Product ownership and audience are registered together; branding grants no trust. */
-exports.productDefinitionSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, ownerAccountId: identifiers_1.oxyAccountIdSchema,
+exports.productDefinitionSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    ownerAccountId: identifiers_1.oxyAccountIdSchema,
     applicationId: identifiers_1.oxyApplicationIdSchema,
-}).strict();
-exports.subjectProductAccessQuerySchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), subjectAccountId: identifiers_1.oxyAccountIdSchema, productId: identifier,
-}).strict();
+})
+    .strict();
+exports.subjectProductAccessQuerySchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    subjectAccountId: identifiers_1.oxyAccountIdSchema,
+    productId: identifier,
+})
+    .strict();
 /** Every quota declares its combination rule; there is no commercial default. */
 exports.productBenefitSchema = zod_1.z.discriminatedUnion('kind', [
     zod_1.z.object({ kind: zod_1.z.literal('capability'), productId: identifier, key: identifier }).strict(),
-    zod_1.z.object({ kind: zod_1.z.literal('quota'), productId: identifier, key: identifier,
-        unit: identifier, included: count, combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']) }).strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('quota'),
+        productId: identifier,
+        key: identifier,
+        unit: identifier,
+        included: count,
+        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']),
+    })
+        .strict(),
 ]);
 /** A version names a frozen offer. An empty bundle grants nothing. */
-exports.productOfferSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, version: zod_1.z.number().int().positive().safe(),
-    kind: zod_1.z.enum(['individual', 'bundle']), benefits: zod_1.z.array(exports.productBenefitSchema),
-}).strict().refine(value => value.kind === 'bundle' || new Set(value.benefits.map(benefit => benefit.productId)).size <= 1, 'individual offers cannot cover multiple products');
-exports.productSubscriptionSourceSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier,
-    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, payerAccountId: identifiers_1.oxyAccountIdSchema,
-    provider: zod_1.z.enum(['stripe', 'peable']), providerSubscriptionId: identifier,
-    status: zod_1.z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
-    period, cancelAtPeriodEnd: zod_1.z.boolean(),
-}).strict();
+exports.productOfferSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    version: zod_1.z.number().int().positive().safe(),
+    kind: zod_1.z.enum(['individual', 'bundle']),
+    benefits: zod_1.z.array(exports.productBenefitSchema),
+})
+    .strict()
+    .refine((value) => value.kind === 'bundle' ||
+    new Set(value.benefits.map((benefit) => benefit.productId)).size <= 1, 'individual offers cannot cover multiple products');
+exports.productSubscriptionSourceSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema,
+    payerAccountId: identifiers_1.oxyAccountIdSchema,
+    provider: zod_1.z.enum(['stripe', 'peable']),
+    providerSubscriptionId: identifier,
+    status: zod_1.z.enum([
+        'active',
+        'trialing',
+        'past_due',
+        'unpaid',
+        'canceled',
+        'paused',
+        'incomplete',
+        'incomplete_expired',
+    ]),
+    period,
+    cancelAtPeriodEnd: zod_1.z.boolean(),
+})
+    .strict();
 /** A frozen paid-period/offer segment; upgrades append, never rewrite it. */
-exports.productOfferSegmentSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, subscriptionId: identifier,
-    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, offerId: identifier,
-    offerVersion: zod_1.z.number().int().positive().safe(), origin: zod_1.z.enum(['individual', 'bundle']), period,
-}).strict();
+exports.productOfferSegmentSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    subscriptionId: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema,
+    offerId: identifier,
+    offerVersion: zod_1.z.number().int().positive().safe(),
+    origin: zod_1.z.enum(['individual', 'bundle']),
+    period,
+})
+    .strict();
 /** Provenance survives cancellation: deactivate a source, never delete history. */
-exports.productAccessGrantSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, sourceSegmentId: identifier,
-    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, offerId: identifier,
+exports.productAccessGrantSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    sourceSegmentId: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema,
+    offerId: identifier,
     offerVersion: zod_1.z.number().int().positive().safe(),
-    origin: zod_1.z.enum(['individual', 'bundle']), benefit: exports.productBenefitSchema,
-    period, revokedAt: zod_1.z.string().datetime().nullable(),
-}).strict();
+    origin: zod_1.z.enum(['individual', 'bundle']),
+    benefit: exports.productBenefitSchema,
+    period,
+    revokedAt: zod_1.z.string().datetime().nullable(),
+})
+    .strict();
 /** Access answers contain no payer, provider reference, price or account balance. */
-exports.subjectProductAccessSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), subjectAccountId: identifiers_1.oxyAccountIdSchema, productId: identifier,
+exports.subjectProductAccessSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    subjectAccountId: identifiers_1.oxyAccountIdSchema,
+    productId: identifier,
     evaluatedAt: zod_1.z.string().datetime(),
     capabilities: zod_1.z.array(zod_1.z.object({ key: identifier, grantIds: zod_1.z.array(identifier) }).strict()),
-    quotas: zod_1.z.array(zod_1.z.object({ key: identifier, unit: identifier, included: count,
-        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']), grantIds: zod_1.z.array(identifier) }).strict()),
-    conflicts: zod_1.z.array(zod_1.z.object({ key: identifier,
-        reason: zod_1.z.enum(['combination_mismatch', 'unit_mismatch', 'exclusive_overlap', 'unsafe_total']),
-        grantIds: zod_1.z.array(identifier) }).strict()),
-}).strict();
+    quotas: zod_1.z.array(zod_1.z
+        .object({
+        key: identifier,
+        unit: identifier,
+        included: count,
+        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']),
+        grantIds: zod_1.z.array(identifier),
+    })
+        .strict()),
+    conflicts: zod_1.z.array(zod_1.z
+        .object({
+        key: identifier,
+        reason: zod_1.z.enum([
+            'combination_mismatch',
+            'unit_mismatch',
+            'exclusive_overlap',
+            'unsafe_total',
+        ]),
+        grantIds: zod_1.z.array(identifier),
+    })
+        .strict()),
+})
+    .strict();
 /** Active grant periods for metering adapters; no financial/provider identity. */
-exports.subjectProductGrantSnapshotSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), access: exports.subjectProductAccessSchema, grants: zod_1.z.array(exports.productAccessGrantSchema),
-}).strict().superRefine((value, ctx) => {
-    const active = new Set([...value.access.capabilities, ...value.access.quotas].flatMap(entry => entry.grantIds));
-    if (active.size !== value.grants.length || new Set(value.grants.map(g => g.id)).size !== value.grants.length
-        || value.grants.some(g => g.beneficiaryAccountId !== value.access.subjectAccountId
-            || g.benefit.productId !== value.access.productId || !active.has(g.id)
+exports.subjectProductGrantSnapshotSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    access: exports.subjectProductAccessSchema,
+    grants: zod_1.z.array(exports.productAccessGrantSchema),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const active = new Set([...value.access.capabilities, ...value.access.quotas].flatMap((entry) => entry.grantIds));
+    if (active.size !== value.grants.length ||
+        new Set(value.grants.map((g) => g.id)).size !== value.grants.length ||
+        value.grants.some((g) => g.beneficiaryAccountId !== value.access.subjectAccountId ||
+            g.benefit.productId !== value.access.productId ||
+            !active.has(g.id) ||
             // A future revocation is still active at evaluation time, as in access composition.
-            || (g.revokedAt !== null && Date.parse(g.revokedAt) <= Date.parse(value.access.evaluatedAt))
-            || Date.parse(g.period.start) > Date.parse(value.access.evaluatedAt)
-            || Date.parse(g.period.end) <= Date.parse(value.access.evaluatedAt)))
+            (g.revokedAt !== null &&
+                Date.parse(g.revokedAt) <= Date.parse(value.access.evaluatedAt)) ||
+            Date.parse(g.period.start) > Date.parse(value.access.evaluatedAt) ||
+            Date.parse(g.period.end) <= Date.parse(value.access.evaluatedAt)))
         ctx.addIssue({ code: 'custom', message: 'Active grant snapshot attribution differs' });
     for (const quota of value.access.quotas) {
-        const benefits = quota.grantIds.map(id => value.grants.find(g => g.id === id)?.benefit);
-        if (benefits.some(b => !b || b.kind !== 'quota' || b.key !== quota.key || b.unit !== quota.unit || b.combination !== quota.combination)) {
+        const benefits = quota.grantIds.map((id) => value.grants.find((g) => g.id === id)?.benefit);
+        if (benefits.some((b) => !b ||
+            b.kind !== 'quota' ||
+            b.key !== quota.key ||
+            b.unit !== quota.unit ||
+            b.combination !== quota.combination)) {
             ctx.addIssue({ code: 'custom', message: 'Grant quota terms differ' });
             continue;
         }
-        const amounts = benefits.map(b => b?.kind === 'quota' ? BigInt(b.included) : 0n);
-        const included = quota.combination === 'sum' ? amounts.reduce((sum, n) => sum + n, 0n) : amounts.reduce((maximum, n) => n > maximum ? n : maximum, 0n);
-        if (included !== BigInt(quota.included) || (quota.combination === 'exclusive' && benefits.length > 1))
+        const amounts = benefits.map((b) => (b?.kind === 'quota' ? BigInt(b.included) : 0n));
+        const included = quota.combination === 'sum'
+            ? amounts.reduce((sum, n) => sum + n, 0n)
+            : amounts.reduce((maximum, n) => (n > maximum ? n : maximum), 0n);
+        if (included !== BigInt(quota.included) ||
+            (quota.combination === 'exclusive' && benefits.length > 1))
             ctx.addIssue({ code: 'custom', message: 'Grant quota composition differs' });
     }
     for (const capability of value.access.capabilities)
-        if (capability.grantIds.some(id => {
-            const benefit = value.grants.find(g => g.id === id)?.benefit;
+        if (capability.grantIds.some((id) => {
+            const benefit = value.grants.find((g) => g.id === id)?.benefit;
             return benefit?.kind !== 'capability' || benefit.key !== capability.key;
         }))
             ctx.addIssue({ code: 'custom', message: 'Grant capability terms differ' });

package/dist/cjs/products/billing.js

@@ -6,25 +6,79 @@ const identifiers_1 = require("../inference/identifiers");
 const id = zod_1.z.string().min(1).max(160);
 const name = zod_1.z.string().min(1).max(100);
 const count = zod_1.z.number().int().nonnegative().safe();
-const period = zod_1.z.object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() }).strict()
-    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'Period end must follow start');
+const period = zod_1.z
+    .object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() })
+    .strict()
+    .refine((value) => Date.parse(value.end) > Date.parse(value.start), 'Period end must follow start');
 /** Self-service provenance; no payer/provider identifiers or balances in access metadata. */
-exports.productSubscriptionSummarySchema = zod_1.z.object({ sourceId: id,
-    status: zod_1.z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
-    period, cancelAtPeriodEnd: zod_1.z.boolean(), canCancel: zod_1.z.boolean(),
-    offers: zod_1.z.array(zod_1.z.object({ segmentId: id, offerId: id, offerVersion: zod_1.z.number().int().positive().safe(),
-        displayName: name, origin: zod_1.z.enum(['individual', 'bundle']), period, current: zod_1.z.boolean(),
+exports.productSubscriptionSummarySchema = zod_1.z
+    .object({
+    sourceId: id,
+    status: zod_1.z.enum([
+        'active',
+        'trialing',
+        'past_due',
+        'unpaid',
+        'canceled',
+        'paused',
+        'incomplete',
+        'incomplete_expired',
+    ]),
+    period,
+    cancelAtPeriodEnd: zod_1.z.boolean(),
+    canCancel: zod_1.z.boolean(),
+    offers: zod_1.z.array(zod_1.z
+        .object({
+        segmentId: id,
+        offerId: id,
+        offerVersion: zod_1.z.number().int().positive().safe(),
+        displayName: name,
+        origin: zod_1.z.enum(['individual', 'bundle']),
+        period,
+        current: zod_1.z.boolean(),
         products: zod_1.z.array(zod_1.z.object({ id, displayName: name }).strict()),
-    }).strict()),
-}).strict();
-exports.productSubscriptionsResponseSchema = zod_1.z.object({ subscriptions: zod_1.z.array(exports.productSubscriptionSummarySchema) }).strict();
-exports.subscriptionCreditGrantSchema = zod_1.z.object({ id, invoiceId: id,
-    origin: zod_1.z.enum(['subscription_payment', 'subscription_proration', 'subscription_promotional_grant']),
-    period, granted: count, consumed: count, clawed: count, remaining: count,
-    promotionId: id.nullable(), createdAt: zod_1.z.string().datetime(),
-}).strict().refine(value => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) === BigInt(value.granted), 'Grant conservation differs');
-exports.subscriptionCreditGrantsResponseSchema = zod_1.z.object({ grants: zod_1.z.array(exports.subscriptionCreditGrantSchema) }).strict();
-exports.cancelProductSubscriptionSchema = zod_1.z.object({ sourceId: id, actionId: zod_1.z.string().min(8).max(160).regex(/^[a-zA-Z0-9_-]+$/).optional(), expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema.optional() }).strict();
+    })
+        .strict()),
+})
+    .strict();
+exports.productSubscriptionsResponseSchema = zod_1.z
+    .object({ subscriptions: zod_1.z.array(exports.productSubscriptionSummarySchema) })
+    .strict();
+exports.subscriptionCreditGrantSchema = zod_1.z
+    .object({
+    id,
+    invoiceId: id,
+    origin: zod_1.z.enum([
+        'subscription_payment',
+        'subscription_proration',
+        'subscription_promotional_grant',
+    ]),
+    period,
+    granted: count,
+    consumed: count,
+    clawed: count,
+    remaining: count,
+    promotionId: id.nullable(),
+    createdAt: zod_1.z.string().datetime(),
+})
+    .strict()
+    .refine((value) => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) ===
+    BigInt(value.granted), 'Grant conservation differs');
+exports.subscriptionCreditGrantsResponseSchema = zod_1.z
+    .object({ grants: zod_1.z.array(exports.subscriptionCreditGrantSchema) })
+    .strict();
+exports.cancelProductSubscriptionSchema = zod_1.z
+    .object({
+    sourceId: id,
+    actionId: zod_1.z
+        .string()
+        .min(8)
+        .max(160)
+        .regex(/^[a-zA-Z0-9_-]+$/)
+        .optional(),
+    expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema.optional(),
+})
+    .strict();
 /** Remote acceptance is distinct from completed local reconciliation. */
 exports.productSubscriptionCancellationResultSchema = zod_1.z.union([
     zod_1.z.object({ sourceId: id, cancelAtPeriodEnd: zod_1.z.literal(true) }).strict(),

package/dist/cjs/products/checkout.js

@@ -3,15 +3,33 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.personalPlanCheckoutResultSchema = exports.personalPlanCheckoutRequestSchema = void 0;
 const zod_1 = require("zod");
 const identifiers_1 = require("../inference/identifiers");
-exports.personalPlanCheckoutRequestSchema = zod_1.z.object({
+exports.personalPlanCheckoutRequestSchema = zod_1.z
+    .object({
     expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema,
-    offerId: zod_1.z.string().min(1).max(160), offerVersion: zod_1.z.number().int().positive().safe(),
-    idempotencyKey: zod_1.z.string().min(8).max(160).regex(/^[a-zA-Z0-9_-]+$/),
-}).strict();
+    offerId: zod_1.z.string().min(1).max(160),
+    offerVersion: zod_1.z.number().int().positive().safe(),
+    idempotencyKey: zod_1.z
+        .string()
+        .min(8)
+        .max(160)
+        .regex(/^[a-zA-Z0-9_-]+$/),
+})
+    .strict();
 /** No grant or subscription is created by checkout completion in the browser. */
 exports.personalPlanCheckoutResultSchema = zod_1.z.discriminatedUnion('state', [
-    zod_1.z.object({ state: zod_1.z.literal('unconfigured'), reason: zod_1.z.enum(['provider_unconfigured', 'offer_unconfigured', 'price_unconfigured']) }).strict(),
-    zod_1.z.object({ state: zod_1.z.literal('pending'), intentId: zod_1.z.string().min(1).max(160), checkoutUrl: zod_1.z.string().url().startsWith('https://') }).strict(),
+    zod_1.z
+        .object({
+        state: zod_1.z.literal('unconfigured'),
+        reason: zod_1.z.enum(['provider_unconfigured', 'offer_unconfigured', 'price_unconfigured']),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        state: zod_1.z.literal('pending'),
+        intentId: zod_1.z.string().min(1).max(160),
+        checkoutUrl: zod_1.z.string().url().startsWith('https://').optional(),
+    })
+        .strict(),
     zod_1.z.object({ state: zod_1.z.literal('closed'), intentId: zod_1.z.string().min(1).max(160) }).strict(),
     zod_1.z.object({ state: zod_1.z.literal('fulfilled'), intentId: zod_1.z.string().min(1).max(160) }).strict(),
 ]);

package/dist/cjs/products/plans.js

@@ -4,20 +4,35 @@ exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = v
 const zod_1 = require("zod");
 const access_1 = require("./access");
 /** Approved display terms never identify or activate a billing-provider price. */
-exports.personalPlanDisplayPriceSchema = zod_1.z.object({ currency: zod_1.z.string().regex(/^[A-Z]{3}$/),
-    amountMinorUnits: zod_1.z.number().int().positive().safe(), interval: zod_1.z.literal('month'), trial: zod_1.z.literal('none'), taxTreatment: zod_1.z.literal('inclusive'), merchantTotal: zod_1.z.literal('final') }).strict();
+exports.personalPlanDisplayPriceSchema = zod_1.z
+    .object({
+    currency: zod_1.z.string().regex(/^[A-Z]{3}$/),
+    amountMinorUnits: zod_1.z.number().int().positive().safe(),
+    interval: zod_1.z.literal('month'),
+    trial: zod_1.z.literal('none'),
+    taxTreatment: zod_1.z.literal('inclusive'),
+    merchantTotal: zod_1.z.literal('final'),
+})
+    .strict();
 /** Public discovery is separate from customer access. No provider or owner IDs. */
-exports.personalPlanCatalogueSchema = zod_1.z.object({
+exports.personalPlanCatalogueSchema = zod_1.z
+    .object({
     schemaVersion: zod_1.z.literal(1),
     state: zod_1.z.enum(['unconfigured', 'configured']),
     purchase: zod_1.z.literal('unavailable'),
-    plans: zod_1.z.array(zod_1.z.object({
+    plans: zod_1.z.array(zod_1.z
+        .object({
         offerId: zod_1.z.string().min(1).max(160),
         offerVersion: zod_1.z.number().int().positive().safe(),
         displayName: zod_1.z.string().min(1).max(100),
         audience: zod_1.z.literal('personal'),
         kind: zod_1.z.literal('oxy_one'),
         price: exports.personalPlanDisplayPriceSchema.optional(),
-        benefits: zod_1.z.array(zod_1.z.object({ displayName: zod_1.z.string().min(1).max(100), benefit: access_1.productBenefitSchema }).strict()),
-    }).strict()),
-}).strict().refine(value => (value.state === 'unconfigured') === (value.plans.length === 0), 'Catalogue state must match published plans');
+        benefits: zod_1.z.array(zod_1.z
+            .object({ displayName: zod_1.z.string().min(1).max(100), benefit: access_1.productBenefitSchema })
+            .strict()),
+    })
+        .strict()),
+})
+    .strict()
+    .refine((value) => (value.state === 'unconfigured') === (value.plans.length === 0), 'Catalogue state must match published plans');

package/dist/cjs/recommendations.js

@@ -16,11 +16,7 @@ exports.appAffinityEventsIngestSchema = exports.appAffinityEventSchema = exports
 const zod_1 = require("zod");
 const userResponse_1 = require("./userResponse");
 /** User-type filters a caller may exclude from the recommendation surface. */
-exports.recommendationExcludeTypeSchema = zod_1.z.enum([
-    'federated',
-    'agent',
-    'automated',
-]);
+exports.recommendationExcludeTypeSchema = zod_1.z.enum(['federated', 'agent', 'automated']);
 /**
  * A caller-supplied editorial boost. `userIds` are nudged up (or down, for a
  * negative weight) in the ranking; the optional `reason` is for audit/telemetry
@@ -125,7 +121,9 @@ exports.appUserSignalIngestSchema = zod_1.z
     endorsements: zod_1.z.array(exports.appEndorsementInputSchema).max(500).optional(),
     interests: zod_1.z.array(exports.appInterestInputSchema).max(500).optional(),
 })
-    .refine((value) => (value.endorsements?.length ?? 0) > 0 || (value.interests?.length ?? 0) > 0, { message: 'At least one of endorsements or interests must be non-empty' });
+    .refine((value) => (value.endorsements?.length ?? 0) > 0 || (value.interests?.length ?? 0) > 0, {
+    message: 'At least one of endorsements or interests must be non-empty',
+});
 /**
  * The directed interaction types a consuming app may report between two users.
  * Each type carries a server-side default weight (see the API's

package/dist/cjs/reputation.js

@@ -25,8 +25,8 @@
  *  - **The balance has two views, and the union is the contract.** See
  *    {@link ReputationBalanceView} — the compile-time assertions below are what
  *    stop the private view's fields becoming reachable on a stranger's balance.
- *  - **The closed value sets live here, not beside the mongoose models.** The
- *    API's model enums and the SDK's unions are the same `as const` tuple, so a
+ *  - **The closed value sets live here, not beside the database schema.** The
+ *    API's column enums and the SDK's unions are the same `as const` tuple, so a
  *    seventh category cannot be added on one side only.
  *
  * The response entities are declared as explicit `interface`s with their runtime
@@ -78,10 +78,7 @@ exports.reputationCategorySchema = zod_1.z.enum(exports.REPUTATION_CATEGORIES);
  *                only by policy-driven code, never by a person); the pair nets
  *                to zero.
  */
-exports.REPUTATION_TRANSACTION_STATUSES = [
-    'active',
-    'reversed',
-];
+exports.REPUTATION_TRANSACTION_STATUSES = ['active', 'reversed'];
 exports.reputationTransactionStatusSchema = zod_1.z.enum(exports.REPUTATION_TRANSACTION_STATUSES);
 /**
  * Trust tiers, lowest → highest trust, plus the punitive `restricted`.

package/dist/cjs/sessionStatus.js

@@ -43,12 +43,7 @@ const zod_1 = require("zod");
  * `packages/api/src/models/Application.ts` (`first_party` | `third_party` |
  * `internal` | `system`).
  */
-exports.applicationTypeSchema = zod_1.z.enum([
-    'first_party',
-    'third_party',
-    'internal',
-    'system',
-]);
+exports.applicationTypeSchema = zod_1.z.enum(['first_party', 'third_party', 'internal', 'system']);
 /**
  * The display-safe public identity of a requesting application, exactly as
  * `serializePublicApplication` emits it. Returned by the API inside