@oxy.so/contracts 4.14.0 → 4.16.0

package/dist/esm/index.js

@@ -100,7 +100,7 @@ export {
 EMAIL_VERIFICATION_PURPOSES, EMAIL_CODE_LENGTH, EMAIL_CODE_TTL_MS, EMAIL_CODE_MAX_ATTEMPTS, EMAIL_TICKET_TTL_MS, EMAIL_VERIFICATION_ERROR_CODES, emailAddressSchema, emailTicketSchema, emailVerificationStartRequestSchema, emailVerificationStartResponseSchema, emailVerificationConfirmRequestSchema, emailVerificationConfirmResponseSchema, } from './accountEmail.js';
 export { 
 // Email code/link, password and authenticator sign-in
-EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, SIGN_IN_ERROR_CODES, signInIdentifierSchema, passwordInputSchema, newPasswordSchema, secondFactorCodeSchema, emailSignInStartRequestSchema, emailSignInStartResponseSchema, emailSignInConfirmRequestSchema, emailSignInCodeSchema, normalizeEmailSignInCode, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, emailSignInCollectRequestSchema, emailSignInLinkRequestSchema, emailSignInLinkResponseSchema, emailSignInPendingSchema, passwordSignInRequestSchema, secondFactorSignInRequestSchema, secondFactorRequiredSchema, signUpRequestSchema, isSecondFactorRequired, reauthProofSchema, emailReauthProofSchema, REAUTH_ACTIONS, reauthEmailStartRequestSchema, passwordSetRequestSchema, signInMethodsSchema, totpEnrollResponseSchema, totpConfirmRequestSchema, totpReauthRequestSchema, totpBackupCodesResponseSchema, } from './signIn.js';
+EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, SIGN_IN_ERROR_CODES, signInIdentifierSchema, passwordInputSchema, newPasswordSchema, secondFactorCodeSchema, emailSignInStartRequestSchema, emailSignInStartResponseSchema, emailSignInConfirmRequestSchema, emailSignInCodeSchema, normalizeEmailSignInCode, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, emailSignInCollectRequestSchema, emailSignInLinkRequestSchema, emailSignInLinkResponseSchema, emailSignInPendingSchema, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_ACCOUNTS_MAX, emailSignInAccountOptionSchema, emailSignInChooseAccountSchema, emailSignInChooseRequestSchema, isEmailSignInChooseAccount, passwordSignInRequestSchema, secondFactorSignInRequestSchema, secondFactorRequiredSchema, signUpRequestSchema, isSecondFactorRequired, reauthProofSchema, emailReauthProofSchema, REAUTH_ACTIONS, reauthEmailStartRequestSchema, passwordSetRequestSchema, signInMethodsSchema, totpEnrollResponseSchema, totpConfirmRequestSchema, totpReauthRequestSchema, totpBackupCodesResponseSchema, } from './signIn.js';
 export { 
 // Linking Commons to an account without a key (ADR 0029 D3)
 IDENTITY_LINK_STATUSES, IDENTITY_LINK_QR_PREFIX, identityLinkIdSchema, buildIdentityLinkQrPayload, parseIdentityLinkQrPayload, identityLinkCreateResponseSchema, identityLinkStateSchema, identityLinkProofRequestSchema, identityLinkCompleteRequestSchema, } from './identityLink.js';

package/dist/esm/inference/money.js

@@ -144,6 +144,15 @@ export const moneySchema = z
  * estimated from the audio, and a provider billed by the audio it carries (or
  * by tokens) never reports it.
  *
+ * **`input_transcription_milliseconds` is a second model's reading** (added in
+ * contract set 3.9.0, mirroring `@kaana.ai/contracts` 4.1.0): milliseconds of a
+ * realtime session's input audio that the deployment's own TRANSCRIPTION model
+ * transcribed, when the provider bills that model apart from the session model
+ * (OpenAI bills input transcription at the ASR model's price). The session
+ * model's `audio_input_tokens` and this unit are two charges for two models,
+ * each read once, so the partition rule holds. A provider whose session price
+ * already includes the transcription (xAI's Voice Agent) never reports it.
+ *
  * No refinement in this package can enforce it, and saying so is part of the
  * rule: a nested report and a disjoint one are the same four non-negative
  * integers, so no predicate over a single report can tell them apart. The two
@@ -181,6 +190,7 @@ export const USAGE_UNITS = [
     'cached_audio_input_tokens',
     'audio_output_tokens',
     'session_milliseconds',
+    'input_transcription_milliseconds',
 ];
 export const usageUnitSchema = z.enum(USAGE_UNITS);
 /**

package/dist/esm/inference/version.js

@@ -99,4 +99,4 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export const INFERENCE_CONTRACT_VERSION = '3.8.0';
+export const INFERENCE_CONTRACT_VERSION = '3.9.0';

package/dist/esm/signIn.js

@@ -18,6 +18,11 @@
  *    one-use second-factor challenge instead of a session, and
  *    `POST /auth/signin/second-factor` takes the TOTP (or a backup code).
  *
+ * An email may hold several accounts (up to `EMAIL_ACCOUNTS_MAX`). Signing in
+ * with the email, once the code or the link proves it, answers the accounts to
+ * choose from when there are several, and `POST /auth/signin/email/choose`
+ * names one. A username always names one account.
+ *
  * `POST /auth/signup` creates an account from a username and an email confirmed
  * with `POST /auth/email/verify/{start,confirm}` (purpose `signup`).
  *
@@ -188,10 +193,41 @@ export const emailSignInPendingSchema = z.object({
     status: z.literal('pending'),
     expiresAt: z.number().int().positive(),
 });
+/**
+ * How long, once the email is proven, the person has to choose which of its
+ * accounts signs in.
+ */
+export const EMAIL_SIGNIN_CHOICE_TTL_MS = 5 * 60 * 1000;
+/** Most accounts one email can hold; sign-up refuses another past it. */
+export const EMAIL_ACCOUNTS_MAX = 20;
+export const emailSignInAccountOptionSchema = z.object({
+    id: z.string().min(1).max(64),
+    username: z.string().min(1).optional(),
+    displayName: z.string().min(1).optional(),
+    avatar: z.string().min(1).optional(),
+});
+export const emailSignInChooseAccountSchema = z.object({
+    chooseAccount: z.literal(true),
+    accounts: z.array(emailSignInAccountOptionSchema).min(2).max(EMAIL_ACCOUNTS_MAX),
+    expiresAt: z.number().int().positive(),
+});
+/** `POST /auth/signin/email/choose` — the account, from those {@link EmailSignInChooseAccount} listed. */
+export const emailSignInChooseRequestSchema = z
+    .object({
+    requestId: z.string().trim().min(1).max(64),
+    requestSecret: opaqueTokenSchema,
+    userId: z.string().trim().min(1).max(64),
+    ...sessionEnvelope,
+})
+    .strict();
 /** Narrow a {@link SignInStepResult}. */
 export function isSecondFactorRequired(result) {
     return result.secondFactorRequired === true;
 }
+/** Narrow an {@link EmailSignInStepResult}. */
+export function isEmailSignInChooseAccount(result) {
+    return result.chooseAccount === true;
+}
 /**
  * What a re-verification email code confirms. The code is bound to it: a code
  * asked for one change never authorises another, and the email names it.
@@ -309,4 +345,6 @@ export const SIGN_IN_ERROR_CODES = {
     originNotAllowed: 'SIGNIN_ORIGIN_NOT_ALLOWED',
     /** The username is taken. */
     usernameTaken: 'USERNAME_TAKEN',
+    /** The email already holds `EMAIL_ACCOUNTS_MAX` accounts: no sign-up adds another. */
+    emailAccountsFull: 'EMAIL_ACCOUNTS_FULL',
 };