@oxy.so/contracts 4.11.0-oxy-one.0 → 4.12.0

package/dist/cjs/inference/scopedExecution.js

@@ -6,7 +6,7 @@ const zod_1 = require("zod");
 const identifiers_1 = require("./identifiers");
 const money_1 = require("./money");
 /** Explicit extension negotiation; never replaces the legacy 3.5 handshake. */
-exports.SCOPED_EXECUTION_CONTRACT_VERSION = "3.6.0";
+exports.SCOPED_EXECUTION_CONTRACT_VERSION = '3.6.0';
 /** Scoped only; normal envelope v2 and metadata 3.5 remain unchanged. */
 exports.SCOPED_REQUEST_ENVELOPE_VERSION = 3;
 const identity = zod_1.z.string().min(1).max(256);
@@ -14,10 +14,10 @@ const sha256 = zod_1.z.string().regex(/^[0-9a-f]{64}$/);
 const maxCost = money_1.exactDecimalSchema.refine((value) => {
     if (!money_1.exactDecimalSchema.safeParse(value).success)
         return false;
-    const [whole, fraction = ""] = value.split(".");
-    const units = BigInt(whole) * 1000000000000n + BigInt(fraction.padEnd(12, "0"));
+    const [whole, fraction = ''] = value.split('.');
+    const units = BigInt(whole) * 1000000000000n + BigInt(fraction.padEnd(12, '0'));
     return units > 0n && units <= 10000000000n;
-}, "scoped cost must be positive and at most 0.01 USD");
+}, 'scoped cost must be positive and at most 0.01 USD');
 /** Restriction only: none of these identities grants catalogue eligibility. */
 exports.scopedExecutionAudienceSchema = zod_1.z
     .object({
@@ -42,7 +42,7 @@ exports.scopedExecutionAudienceSchema = zod_1.z
     deploymentId: identifiers_1.deploymentIdSchema,
     provider: identifiers_1.inferenceProviderSlugSchema,
     keyId: identity,
-    modelReference: identifiers_1.modelReferenceSchema.refine((value) => value.includes("@"), "must pin a revision"),
+    modelReference: identifiers_1.modelReferenceSchema.refine((value) => value.includes('@'), 'must pin a revision'),
     upstreamModelId: identity,
     priceVersionId: identity,
     providerRateCardVersionId: identity,
@@ -63,25 +63,25 @@ exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema
  * reparsed/defaulted decision. Reject non-JSON values rather than dropping them.
  */
 function canonicalScopedExecutionJson(value) {
-    if (value === null || typeof value === "string" || typeof value === "boolean")
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
         return JSON.stringify(value);
-    if (typeof value === "number" && Number.isFinite(value))
+    if (typeof value === 'number' && Number.isFinite(value))
         return JSON.stringify(value);
     if (Array.isArray(value)) {
         const entries = Array.from(value, (entry, index) => {
             if (!(index in value))
-                throw new Error("Scoped execution requires dense JSON arrays.");
+                throw new Error('Scoped execution requires dense JSON arrays.');
             return canonicalScopedExecutionJson(entry);
         });
-        return `[${entries.join(",")}]`;
+        return `[${entries.join(',')}]`;
     }
-    if (typeof value === "object" &&
+    if (typeof value === 'object' &&
         value !== null &&
         Object.getPrototypeOf(value) === Object.prototype) {
         const entries = Object.keys(value)
             .sort()
             .map((key) => `${JSON.stringify(key)}:${canonicalScopedExecutionJson(value[key])}`);
-        return `{${entries.join(",")}}`;
+        return `{${entries.join(',')}}`;
     }
-    throw new Error("Scoped execution requires JSON wire values.");
+    throw new Error('Scoped execution requires JSON wire values.');
 }

package/dist/cjs/inference/usage.js

@@ -65,12 +65,7 @@ exports.usageReservationRequestSchema = zod_1.z.object({
     expiresInSeconds: zod_1.z.number().int().positive().max(86400),
 });
 /** Lifecycle of a hold. Terminal states are `settled`, `released`, `expired`. */
-exports.usageReservationStatusSchema = zod_1.z.enum([
-    'held',
-    'settled',
-    'released',
-    'expired',
-]);
+exports.usageReservationStatusSchema = zod_1.z.enum(['held', 'settled', 'released', 'expired']);
 /**
  * A hold placed against an account's balance.
  *
@@ -178,6 +173,14 @@ exports.normalizedUsageReportSchema = zod_1.z
     deploymentId: identifiers_1.deploymentIdSchema,
     /** How many allowed route switches occurred while serving this request. */
     routeSwitches: zod_1.z.number().int().nonnegative().max(100),
+    /**
+     * The funding tier of the platform key that served the final attempt, as
+     * the data plane states it (ADR 0038). Absent when the key's economics
+     * were never stated, when a customer credential served, or when nothing
+     * was served. Oxy reads it to account for what the request cost the
+     * platform; it is never a key identity and never reaches a customer.
+     */
+    fundingTier: identifiers_1.inferenceFundingTierSchema.optional(),
     startedAt: identifiers_1.inferenceTimestampSchema,
     completedAt: identifiers_1.inferenceTimestampSchema,
     timeToFirstTokenMs: zod_1.z.number().int().nonnegative().safe().optional(),
@@ -270,9 +273,7 @@ exports.usageReceiptSchema = zod_1.z
  * ledger accounts and only the second one is visible on an invoice.
  */
 exports.usageRefundSubjectSchema = zod_1.z.discriminatedUnion('kind', [
-    zod_1.z
-        .object({ kind: zod_1.z.literal('reservation'), reservationId: zod_1.z.string().min(1).max(128) })
-        .strict(),
+    zod_1.z.object({ kind: zod_1.z.literal('reservation'), reservationId: zod_1.z.string().min(1).max(128) }).strict(),
     zod_1.z.object({ kind: zod_1.z.literal('receipt'), receiptId: zod_1.z.string().min(1).max(128) }).strict(),
 ]);
 /** Why money was given back or a hold was released. */

package/dist/cjs/inference/version.js

@@ -102,4 +102,4 @@ exports.INFERENCE_CONTRACT_VERSION = void 0;
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-exports.INFERENCE_CONTRACT_VERSION = '3.5.0';
+exports.INFERENCE_CONTRACT_VERSION = '3.8.0';

package/dist/cjs/notifications.js

@@ -64,18 +64,38 @@ exports.createOxyNotificationRequestSchema = zod_1.z
     .superRefine((value, context) => {
     if (value.type === 'system') {
         if (value.actorId !== value.recipientId)
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['actorId'], message: 'a system notification is from the recipient\'s own account' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['actorId'],
+                message: "a system notification is from the recipient's own account",
+            });
         if (!value.title)
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['title'], message: 'title is required for a system notification' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['title'],
+                message: 'title is required for a system notification',
+            });
         if (!value.message)
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['message'], message: 'message is required for a system notification' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['message'],
+                message: 'message is required for a system notification',
+            });
     }
     else {
         if (value.url !== undefined) {
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['url'], message: 'url is only stored for a system notification' });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['url'],
+                message: 'url is only stored for a system notification',
+            });
         }
         if (value.entityType === 'app') {
-            context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['entityType'], message: "entityType 'app' is only valid for a system notification" });
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['entityType'],
+                message: "entityType 'app' is only valid for a system notification",
+            });
         }
     }
 });

package/dist/cjs/oauth.js

@@ -71,45 +71,61 @@ exports.oauthAuthorizeCodeResponseSchema = zod_1.z.object({
  * Reuses the ordinary public application projection and adds only the public
  * DCR client id needed to bind the consent surface to the request.
  */
-exports.mcpOAuthClientApplicationSchema = sessionStatus_1.publicApplicationSchema.extend({
+exports.mcpOAuthClientApplicationSchema = sessionStatus_1.publicApplicationSchema
+    .extend({
     clientId: zod_1.z.string().min(1),
-}).strict();
+})
+    .strict();
 /**
  * An effectful MCP action the requested capability set can actually invoke.
  * Every field is picked from the canonical catalog tool schema so consent can
  * never maintain a second tool description or effect classification.
  */
-exports.mcpOAuthWriteActionSchema = agency_1.catalogToolSchema.innerType().pick({
+exports.mcpOAuthWriteActionSchema = agency_1.catalogToolSchema
+    .innerType()
+    .pick({
     name: true,
     version: true,
     description: true,
     requiredCapabilities: true,
     effect: true,
-}).strict().refine((action) => action.effect !== 'read', {
+})
+    .strict()
+    .refine((action) => action.effect !== 'read', {
     message: 'MCP consent write actions must be effectful',
     path: ['effect'],
 });
 /** Exact, server-resolved context rendered before an external MCP grant. */
-exports.mcpOAuthConsentContextSchema = zod_1.z.object({
+exports.mcpOAuthConsentContextSchema = zod_1.z
+    .object({
     client: exports.mcpOAuthClientApplicationSchema,
-    account: zod_1.z.object({
+    account: zod_1.z
+        .object({
         id: zod_1.z.string().min(1),
         displayName: zod_1.z.string().min(1).optional(),
         handle: zod_1.z.string().min(1).optional(),
         avatar: zod_1.z.string().min(1).optional(),
-    }).strict(),
-    resource: zod_1.z.object({
+    })
+        .strict(),
+    resource: zod_1.z
+        .object({
         appId: zod_1.z.string().min(1),
         uri: zod_1.z.string().url(),
         application: sessionStatus_1.publicApplicationSchema,
-    }).strict(),
+    })
+        .strict(),
     capabilities: zod_1.z.array(zod_1.z.string().min(1)).min(1),
     writeActions: zod_1.z.array(exports.mcpOAuthWriteActionSchema),
-}).strict();
-exports.mcpOAuthClientInfoResponseSchema = zod_1.z.object({
+})
+    .strict();
+exports.mcpOAuthClientInfoResponseSchema = zod_1.z
+    .object({
     application: exports.mcpOAuthClientApplicationSchema,
-}).strict();
-exports.mcpOAuthConsentResponseSchema = zod_1.z.object({
+})
+    .strict();
+exports.mcpOAuthConsentResponseSchema = zod_1.z
+    .object({
     consentRequired: zod_1.z.boolean(),
     context: exports.mcpOAuthConsentContextSchema,
-}).strict();
+})
+    .strict();

package/dist/cjs/oxyRecordTypes.js

@@ -8,8 +8,8 @@
  * is rejected as `invalid_envelope`.
  *
  * `oxySignedRecordTypeSchema` is that runtime gate (the API's `verifyEnvelope`
- * re-narrows with it; the Mongoose `SignedRecord.type` enum and the Postgres
- * CHECK on `signed_records.type` are both derived from `.options`);
+ * re-narrows with it; the Postgres CHECK on `signed_records.type` is derived
+ * from `.options`);
  * `OxySignedRecordType` is the matching compile-time union the SDK
  * identity/civic mixins type against.
  *

package/dist/cjs/products/access.js

@@ -5,86 +5,175 @@ const zod_1 = require("zod");
 const identifiers_1 = require("../inference/identifiers");
 const identifier = zod_1.z.string().min(1).max(160);
 const count = zod_1.z.number().int().nonnegative().safe();
-const period = zod_1.z.object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() }).strict()
-    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'period end must follow start');
+const period = zod_1.z
+    .object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() })
+    .strict()
+    .refine((value) => Date.parse(value.end) > Date.parse(value.start), 'period end must follow start');
 /** Product ownership and audience are registered together; branding grants no trust. */
-exports.productDefinitionSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, ownerAccountId: identifiers_1.oxyAccountIdSchema,
+exports.productDefinitionSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    ownerAccountId: identifiers_1.oxyAccountIdSchema,
     applicationId: identifiers_1.oxyApplicationIdSchema,
-}).strict();
-exports.subjectProductAccessQuerySchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), subjectAccountId: identifiers_1.oxyAccountIdSchema, productId: identifier,
-}).strict();
+})
+    .strict();
+exports.subjectProductAccessQuerySchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    subjectAccountId: identifiers_1.oxyAccountIdSchema,
+    productId: identifier,
+})
+    .strict();
 /** Every quota declares its combination rule; there is no commercial default. */
 exports.productBenefitSchema = zod_1.z.discriminatedUnion('kind', [
     zod_1.z.object({ kind: zod_1.z.literal('capability'), productId: identifier, key: identifier }).strict(),
-    zod_1.z.object({ kind: zod_1.z.literal('quota'), productId: identifier, key: identifier,
-        unit: identifier, included: count, combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']) }).strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('quota'),
+        productId: identifier,
+        key: identifier,
+        unit: identifier,
+        included: count,
+        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']),
+    })
+        .strict(),
 ]);
 /** A version names a frozen offer. An empty bundle grants nothing. */
-exports.productOfferSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, version: zod_1.z.number().int().positive().safe(),
-    kind: zod_1.z.enum(['individual', 'bundle']), benefits: zod_1.z.array(exports.productBenefitSchema),
-}).strict().refine(value => value.kind === 'bundle' || new Set(value.benefits.map(benefit => benefit.productId)).size <= 1, 'individual offers cannot cover multiple products');
-exports.productSubscriptionSourceSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier,
-    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, payerAccountId: identifiers_1.oxyAccountIdSchema,
-    provider: zod_1.z.enum(['stripe', 'peable']), providerSubscriptionId: identifier,
-    status: zod_1.z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
-    period, cancelAtPeriodEnd: zod_1.z.boolean(),
-}).strict();
+exports.productOfferSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    version: zod_1.z.number().int().positive().safe(),
+    kind: zod_1.z.enum(['individual', 'bundle']),
+    benefits: zod_1.z.array(exports.productBenefitSchema),
+})
+    .strict()
+    .refine((value) => value.kind === 'bundle' ||
+    new Set(value.benefits.map((benefit) => benefit.productId)).size <= 1, 'individual offers cannot cover multiple products');
+exports.productSubscriptionSourceSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema,
+    payerAccountId: identifiers_1.oxyAccountIdSchema,
+    provider: zod_1.z.enum(['stripe', 'peable']),
+    providerSubscriptionId: identifier,
+    status: zod_1.z.enum([
+        'active',
+        'trialing',
+        'past_due',
+        'unpaid',
+        'canceled',
+        'paused',
+        'incomplete',
+        'incomplete_expired',
+    ]),
+    period,
+    cancelAtPeriodEnd: zod_1.z.boolean(),
+})
+    .strict();
 /** A frozen paid-period/offer segment; upgrades append, never rewrite it. */
-exports.productOfferSegmentSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, subscriptionId: identifier,
-    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, offerId: identifier,
-    offerVersion: zod_1.z.number().int().positive().safe(), origin: zod_1.z.enum(['individual', 'bundle']), period,
-}).strict();
+exports.productOfferSegmentSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    subscriptionId: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema,
+    offerId: identifier,
+    offerVersion: zod_1.z.number().int().positive().safe(),
+    origin: zod_1.z.enum(['individual', 'bundle']),
+    period,
+})
+    .strict();
 /** Provenance survives cancellation: deactivate a source, never delete history. */
-exports.productAccessGrantSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), id: identifier, sourceSegmentId: identifier,
-    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, offerId: identifier,
+exports.productAccessGrantSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: identifier,
+    sourceSegmentId: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema,
+    offerId: identifier,
     offerVersion: zod_1.z.number().int().positive().safe(),
-    origin: zod_1.z.enum(['individual', 'bundle']), benefit: exports.productBenefitSchema,
-    period, revokedAt: zod_1.z.string().datetime().nullable(),
-}).strict();
+    origin: zod_1.z.enum(['individual', 'bundle']),
+    benefit: exports.productBenefitSchema,
+    period,
+    revokedAt: zod_1.z.string().datetime().nullable(),
+})
+    .strict();
 /** Access answers contain no payer, provider reference, price or account balance. */
-exports.subjectProductAccessSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), subjectAccountId: identifiers_1.oxyAccountIdSchema, productId: identifier,
+exports.subjectProductAccessSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    subjectAccountId: identifiers_1.oxyAccountIdSchema,
+    productId: identifier,
     evaluatedAt: zod_1.z.string().datetime(),
     capabilities: zod_1.z.array(zod_1.z.object({ key: identifier, grantIds: zod_1.z.array(identifier) }).strict()),
-    quotas: zod_1.z.array(zod_1.z.object({ key: identifier, unit: identifier, included: count,
-        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']), grantIds: zod_1.z.array(identifier) }).strict()),
-    conflicts: zod_1.z.array(zod_1.z.object({ key: identifier,
-        reason: zod_1.z.enum(['combination_mismatch', 'unit_mismatch', 'exclusive_overlap', 'unsafe_total']),
-        grantIds: zod_1.z.array(identifier) }).strict()),
-}).strict();
+    quotas: zod_1.z.array(zod_1.z
+        .object({
+        key: identifier,
+        unit: identifier,
+        included: count,
+        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']),
+        grantIds: zod_1.z.array(identifier),
+    })
+        .strict()),
+    conflicts: zod_1.z.array(zod_1.z
+        .object({
+        key: identifier,
+        reason: zod_1.z.enum([
+            'combination_mismatch',
+            'unit_mismatch',
+            'exclusive_overlap',
+            'unsafe_total',
+        ]),
+        grantIds: zod_1.z.array(identifier),
+    })
+        .strict()),
+})
+    .strict();
 /** Active grant periods for metering adapters; no financial/provider identity. */
-exports.subjectProductGrantSnapshotSchema = zod_1.z.object({
-    schemaVersion: zod_1.z.literal(1), access: exports.subjectProductAccessSchema, grants: zod_1.z.array(exports.productAccessGrantSchema),
-}).strict().superRefine((value, ctx) => {
-    const active = new Set([...value.access.capabilities, ...value.access.quotas].flatMap(entry => entry.grantIds));
-    if (active.size !== value.grants.length || new Set(value.grants.map(g => g.id)).size !== value.grants.length
-        || value.grants.some(g => g.beneficiaryAccountId !== value.access.subjectAccountId
-            || g.benefit.productId !== value.access.productId || !active.has(g.id)
+exports.subjectProductGrantSnapshotSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    access: exports.subjectProductAccessSchema,
+    grants: zod_1.z.array(exports.productAccessGrantSchema),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const active = new Set([...value.access.capabilities, ...value.access.quotas].flatMap((entry) => entry.grantIds));
+    if (active.size !== value.grants.length ||
+        new Set(value.grants.map((g) => g.id)).size !== value.grants.length ||
+        value.grants.some((g) => g.beneficiaryAccountId !== value.access.subjectAccountId ||
+            g.benefit.productId !== value.access.productId ||
+            !active.has(g.id) ||
             // A future revocation is still active at evaluation time, as in access composition.
-            || (g.revokedAt !== null && Date.parse(g.revokedAt) <= Date.parse(value.access.evaluatedAt))
-            || Date.parse(g.period.start) > Date.parse(value.access.evaluatedAt)
-            || Date.parse(g.period.end) <= Date.parse(value.access.evaluatedAt)))
+            (g.revokedAt !== null &&
+                Date.parse(g.revokedAt) <= Date.parse(value.access.evaluatedAt)) ||
+            Date.parse(g.period.start) > Date.parse(value.access.evaluatedAt) ||
+            Date.parse(g.period.end) <= Date.parse(value.access.evaluatedAt)))
         ctx.addIssue({ code: 'custom', message: 'Active grant snapshot attribution differs' });
     for (const quota of value.access.quotas) {
-        const benefits = quota.grantIds.map(id => value.grants.find(g => g.id === id)?.benefit);
-        if (benefits.some(b => !b || b.kind !== 'quota' || b.key !== quota.key || b.unit !== quota.unit || b.combination !== quota.combination)) {
+        const benefits = quota.grantIds.map((id) => value.grants.find((g) => g.id === id)?.benefit);
+        if (benefits.some((b) => !b ||
+            b.kind !== 'quota' ||
+            b.key !== quota.key ||
+            b.unit !== quota.unit ||
+            b.combination !== quota.combination)) {
             ctx.addIssue({ code: 'custom', message: 'Grant quota terms differ' });
             continue;
         }
-        const amounts = benefits.map(b => b?.kind === 'quota' ? BigInt(b.included) : 0n);
-        const included = quota.combination === 'sum' ? amounts.reduce((sum, n) => sum + n, 0n) : amounts.reduce((maximum, n) => n > maximum ? n : maximum, 0n);
-        if (included !== BigInt(quota.included) || (quota.combination === 'exclusive' && benefits.length > 1))
+        const amounts = benefits.map((b) => (b?.kind === 'quota' ? BigInt(b.included) : 0n));
+        const included = quota.combination === 'sum'
+            ? amounts.reduce((sum, n) => sum + n, 0n)
+            : amounts.reduce((maximum, n) => (n > maximum ? n : maximum), 0n);
+        if (included !== BigInt(quota.included) ||
+            (quota.combination === 'exclusive' && benefits.length > 1))
             ctx.addIssue({ code: 'custom', message: 'Grant quota composition differs' });
     }
     for (const capability of value.access.capabilities)
-        if (capability.grantIds.some(id => {
-            const benefit = value.grants.find(g => g.id === id)?.benefit;
+        if (capability.grantIds.some((id) => {
+            const benefit = value.grants.find((g) => g.id === id)?.benefit;
             return benefit?.kind !== 'capability' || benefit.key !== capability.key;
         }))
             ctx.addIssue({ code: 'custom', message: 'Grant capability terms differ' });

package/dist/cjs/products/billing.js

@@ -6,25 +6,79 @@ const identifiers_1 = require("../inference/identifiers");
 const id = zod_1.z.string().min(1).max(160);
 const name = zod_1.z.string().min(1).max(100);
 const count = zod_1.z.number().int().nonnegative().safe();
-const period = zod_1.z.object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() }).strict()
-    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'Period end must follow start');
+const period = zod_1.z
+    .object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() })
+    .strict()
+    .refine((value) => Date.parse(value.end) > Date.parse(value.start), 'Period end must follow start');
 /** Self-service provenance; no payer/provider identifiers or balances in access metadata. */
-exports.productSubscriptionSummarySchema = zod_1.z.object({ sourceId: id,
-    status: zod_1.z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
-    period, cancelAtPeriodEnd: zod_1.z.boolean(), canCancel: zod_1.z.boolean(),
-    offers: zod_1.z.array(zod_1.z.object({ segmentId: id, offerId: id, offerVersion: zod_1.z.number().int().positive().safe(),
-        displayName: name, origin: zod_1.z.enum(['individual', 'bundle']), period, current: zod_1.z.boolean(),
+exports.productSubscriptionSummarySchema = zod_1.z
+    .object({
+    sourceId: id,
+    status: zod_1.z.enum([
+        'active',
+        'trialing',
+        'past_due',
+        'unpaid',
+        'canceled',
+        'paused',
+        'incomplete',
+        'incomplete_expired',
+    ]),
+    period,
+    cancelAtPeriodEnd: zod_1.z.boolean(),
+    canCancel: zod_1.z.boolean(),
+    offers: zod_1.z.array(zod_1.z
+        .object({
+        segmentId: id,
+        offerId: id,
+        offerVersion: zod_1.z.number().int().positive().safe(),
+        displayName: name,
+        origin: zod_1.z.enum(['individual', 'bundle']),
+        period,
+        current: zod_1.z.boolean(),
         products: zod_1.z.array(zod_1.z.object({ id, displayName: name }).strict()),
-    }).strict()),
-}).strict();
-exports.productSubscriptionsResponseSchema = zod_1.z.object({ subscriptions: zod_1.z.array(exports.productSubscriptionSummarySchema) }).strict();
-exports.subscriptionCreditGrantSchema = zod_1.z.object({ id, invoiceId: id,
-    origin: zod_1.z.enum(['subscription_payment', 'subscription_proration', 'subscription_promotional_grant']),
-    period, granted: count, consumed: count, clawed: count, remaining: count,
-    promotionId: id.nullable(), createdAt: zod_1.z.string().datetime(),
-}).strict().refine(value => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) === BigInt(value.granted), 'Grant conservation differs');
-exports.subscriptionCreditGrantsResponseSchema = zod_1.z.object({ grants: zod_1.z.array(exports.subscriptionCreditGrantSchema) }).strict();
-exports.cancelProductSubscriptionSchema = zod_1.z.object({ sourceId: id, actionId: zod_1.z.string().min(8).max(160).regex(/^[a-zA-Z0-9_-]+$/).optional(), expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema.optional() }).strict();
+    })
+        .strict()),
+})
+    .strict();
+exports.productSubscriptionsResponseSchema = zod_1.z
+    .object({ subscriptions: zod_1.z.array(exports.productSubscriptionSummarySchema) })
+    .strict();
+exports.subscriptionCreditGrantSchema = zod_1.z
+    .object({
+    id,
+    invoiceId: id,
+    origin: zod_1.z.enum([
+        'subscription_payment',
+        'subscription_proration',
+        'subscription_promotional_grant',
+    ]),
+    period,
+    granted: count,
+    consumed: count,
+    clawed: count,
+    remaining: count,
+    promotionId: id.nullable(),
+    createdAt: zod_1.z.string().datetime(),
+})
+    .strict()
+    .refine((value) => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) ===
+    BigInt(value.granted), 'Grant conservation differs');
+exports.subscriptionCreditGrantsResponseSchema = zod_1.z
+    .object({ grants: zod_1.z.array(exports.subscriptionCreditGrantSchema) })
+    .strict();
+exports.cancelProductSubscriptionSchema = zod_1.z
+    .object({
+    sourceId: id,
+    actionId: zod_1.z
+        .string()
+        .min(8)
+        .max(160)
+        .regex(/^[a-zA-Z0-9_-]+$/)
+        .optional(),
+    expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema.optional(),
+})
+    .strict();
 /** Remote acceptance is distinct from completed local reconciliation. */
 exports.productSubscriptionCancellationResultSchema = zod_1.z.union([
     zod_1.z.object({ sourceId: id, cancelAtPeriodEnd: zod_1.z.literal(true) }).strict(),

package/dist/cjs/products/checkout.js

@@ -3,15 +3,33 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.personalPlanCheckoutResultSchema = exports.personalPlanCheckoutRequestSchema = void 0;
 const zod_1 = require("zod");
 const identifiers_1 = require("../inference/identifiers");
-exports.personalPlanCheckoutRequestSchema = zod_1.z.object({
+exports.personalPlanCheckoutRequestSchema = zod_1.z
+    .object({
     expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema,
-    offerId: zod_1.z.string().min(1).max(160), offerVersion: zod_1.z.number().int().positive().safe(),
-    idempotencyKey: zod_1.z.string().min(8).max(160).regex(/^[a-zA-Z0-9_-]+$/),
-}).strict();
+    offerId: zod_1.z.string().min(1).max(160),
+    offerVersion: zod_1.z.number().int().positive().safe(),
+    idempotencyKey: zod_1.z
+        .string()
+        .min(8)
+        .max(160)
+        .regex(/^[a-zA-Z0-9_-]+$/),
+})
+    .strict();
 /** No grant or subscription is created by checkout completion in the browser. */
 exports.personalPlanCheckoutResultSchema = zod_1.z.discriminatedUnion('state', [
-    zod_1.z.object({ state: zod_1.z.literal('unconfigured'), reason: zod_1.z.enum(['provider_unconfigured', 'offer_unconfigured', 'price_unconfigured']) }).strict(),
-    zod_1.z.object({ state: zod_1.z.literal('pending'), intentId: zod_1.z.string().min(1).max(160), checkoutUrl: zod_1.z.string().url().startsWith('https://') }).strict(),
+    zod_1.z
+        .object({
+        state: zod_1.z.literal('unconfigured'),
+        reason: zod_1.z.enum(['provider_unconfigured', 'offer_unconfigured', 'price_unconfigured']),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        state: zod_1.z.literal('pending'),
+        intentId: zod_1.z.string().min(1).max(160),
+        checkoutUrl: zod_1.z.string().url().startsWith('https://').optional(),
+    })
+        .strict(),
     zod_1.z.object({ state: zod_1.z.literal('closed'), intentId: zod_1.z.string().min(1).max(160) }).strict(),
     zod_1.z.object({ state: zod_1.z.literal('fulfilled'), intentId: zod_1.z.string().min(1).max(160) }).strict(),
 ]);