@oxy.so/contracts 4.15.0 → 4.16.0

package/dist/esm/index.js

@@ -100,7 +100,7 @@ export {
 EMAIL_VERIFICATION_PURPOSES, EMAIL_CODE_LENGTH, EMAIL_CODE_TTL_MS, EMAIL_CODE_MAX_ATTEMPTS, EMAIL_TICKET_TTL_MS, EMAIL_VERIFICATION_ERROR_CODES, emailAddressSchema, emailTicketSchema, emailVerificationStartRequestSchema, emailVerificationStartResponseSchema, emailVerificationConfirmRequestSchema, emailVerificationConfirmResponseSchema, } from './accountEmail.js';
 export { 
 // Email code/link, password and authenticator sign-in
-EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, SIGN_IN_ERROR_CODES, signInIdentifierSchema, passwordInputSchema, newPasswordSchema, secondFactorCodeSchema, emailSignInStartRequestSchema, emailSignInStartResponseSchema, emailSignInConfirmRequestSchema, emailSignInCodeSchema, normalizeEmailSignInCode, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, emailSignInCollectRequestSchema, emailSignInLinkRequestSchema, emailSignInLinkResponseSchema, emailSignInPendingSchema, passwordSignInRequestSchema, secondFactorSignInRequestSchema, secondFactorRequiredSchema, signUpRequestSchema, isSecondFactorRequired, reauthProofSchema, emailReauthProofSchema, REAUTH_ACTIONS, reauthEmailStartRequestSchema, passwordSetRequestSchema, signInMethodsSchema, totpEnrollResponseSchema, totpConfirmRequestSchema, totpReauthRequestSchema, totpBackupCodesResponseSchema, } from './signIn.js';
+EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, SIGN_IN_ERROR_CODES, signInIdentifierSchema, passwordInputSchema, newPasswordSchema, secondFactorCodeSchema, emailSignInStartRequestSchema, emailSignInStartResponseSchema, emailSignInConfirmRequestSchema, emailSignInCodeSchema, normalizeEmailSignInCode, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, emailSignInCollectRequestSchema, emailSignInLinkRequestSchema, emailSignInLinkResponseSchema, emailSignInPendingSchema, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_ACCOUNTS_MAX, emailSignInAccountOptionSchema, emailSignInChooseAccountSchema, emailSignInChooseRequestSchema, isEmailSignInChooseAccount, passwordSignInRequestSchema, secondFactorSignInRequestSchema, secondFactorRequiredSchema, signUpRequestSchema, isSecondFactorRequired, reauthProofSchema, emailReauthProofSchema, REAUTH_ACTIONS, reauthEmailStartRequestSchema, passwordSetRequestSchema, signInMethodsSchema, totpEnrollResponseSchema, totpConfirmRequestSchema, totpReauthRequestSchema, totpBackupCodesResponseSchema, } from './signIn.js';
 export { 
 // Linking Commons to an account without a key (ADR 0029 D3)
 IDENTITY_LINK_STATUSES, IDENTITY_LINK_QR_PREFIX, identityLinkIdSchema, buildIdentityLinkQrPayload, parseIdentityLinkQrPayload, identityLinkCreateResponseSchema, identityLinkStateSchema, identityLinkProofRequestSchema, identityLinkCompleteRequestSchema, } from './identityLink.js';
@@ -200,7 +200,7 @@ export { meteredGenerationSchema } from './inference/economics.js';
 export { canonicalCapabilityJson, inputSatisfiesCapabilityLimits, isLoopbackOrigin, } from './capabilityBindings.js';
 export * from './agentKeys.js';
 export { productSubscriptionSummarySchema, productSubscriptionsResponseSchema, subscriptionCreditGrantSchema, subscriptionCreditGrantsResponseSchema, cancelProductSubscriptionSchema, productSubscriptionCancellationResultSchema, } from './products/billing.js';
-export { personalPlanDisplayPriceSchema, personalPlanCatalogueSchema, productPlanCatalogueSchema, } from './products/plans.js';
+export { personalPlanDisplayPriceSchema, personalPlanCatalogueSchema, } from './products/plans.js';
 export * from './products/checkout.js';
 export * from './organizations.js';
 export * from './safety.js';

package/dist/esm/inference/money.js

@@ -144,6 +144,15 @@ export const moneySchema = z
  * estimated from the audio, and a provider billed by the audio it carries (or
  * by tokens) never reports it.
  *
+ * **`input_transcription_milliseconds` is a second model's reading** (added in
+ * contract set 3.9.0, mirroring `@kaana.ai/contracts` 4.1.0): milliseconds of a
+ * realtime session's input audio that the deployment's own TRANSCRIPTION model
+ * transcribed, when the provider bills that model apart from the session model
+ * (OpenAI bills input transcription at the ASR model's price). The session
+ * model's `audio_input_tokens` and this unit are two charges for two models,
+ * each read once, so the partition rule holds. A provider whose session price
+ * already includes the transcription (xAI's Voice Agent) never reports it.
+ *
  * No refinement in this package can enforce it, and saying so is part of the
  * rule: a nested report and a disjoint one are the same four non-negative
  * integers, so no predicate over a single report can tell them apart. The two
@@ -181,6 +190,7 @@ export const USAGE_UNITS = [
     'cached_audio_input_tokens',
     'audio_output_tokens',
     'session_milliseconds',
+    'input_transcription_milliseconds',
 ];
 export const usageUnitSchema = z.enum(USAGE_UNITS);
 /**

package/dist/esm/inference/version.js

@@ -99,4 +99,4 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export const INFERENCE_CONTRACT_VERSION = '3.8.0';
+export const INFERENCE_CONTRACT_VERSION = '3.9.0';

package/dist/esm/products/billing.js

@@ -24,7 +24,6 @@ export const productSubscriptionSummarySchema = z
     period,
     cancelAtPeriodEnd: z.boolean(),
     canCancel: z.boolean(),
-    canRenew: z.boolean().optional(),
     offers: z.array(z
         .object({
         segmentId: id,

package/dist/esm/products/checkout.js

@@ -30,16 +30,3 @@ export const personalPlanCheckoutResultSchema = z.discriminatedUnion('state', [
     z.object({ state: z.literal('closed'), intentId: z.string().min(1).max(160) }).strict(),
     z.object({ state: z.literal('fulfilled'), intentId: z.string().min(1).max(160) }).strict(),
 ]);
-/** Explicit individual product offer; still owned and paid through Oxy. */
-export const productPlanCheckoutRequestSchema = personalPlanCheckoutRequestSchema
-    .extend({
-    productId: z.string().min(1).max(160),
-})
-    .strict();
-export const productSubscriptionRenewalRequestSchema = z
-    .object({
-    expectedSubjectAccountId: oxyAccountIdSchema,
-    sourceId: z.string().min(1).max(160),
-    idempotencyKey: personalPlanCheckoutRequestSchema.shape.idempotencyKey,
-})
-    .strict();

package/dist/esm/products/plans.js

@@ -16,7 +16,7 @@ export const personalPlanCatalogueSchema = z
     .object({
     schemaVersion: z.literal(1),
     state: z.enum(['unconfigured', 'configured']),
-    purchase: z.enum(['unavailable', 'available']),
+    purchase: z.literal('unavailable'),
     plans: z.array(z
         .object({
         offerId: z.string().min(1).max(160),
@@ -33,19 +33,3 @@ export const personalPlanCatalogueSchema = z
 })
     .strict()
     .refine((value) => (value.state === 'unconfigured') === (value.plans.length === 0), 'Catalogue state must match published plans');
-export const productPlanCatalogueSchema = z
-    .object({
-    schemaVersion: z.literal(1),
-    productId: z.string().min(1).max(160),
-    purchase: z.enum(['unavailable', 'available']),
-    plans: z.array(z
-        .object({
-        productId: z.string().min(1).max(160),
-        offerId: z.string().min(1).max(160),
-        offerVersion: z.number().int().positive().safe(),
-        displayName: z.string().min(1).max(100),
-        price: personalPlanDisplayPriceSchema.extend({ interval: z.enum(['month', 'year']) }),
-    })
-        .strict()),
-})
-    .strict();

package/dist/esm/signIn.js

@@ -18,6 +18,11 @@
  *    one-use second-factor challenge instead of a session, and
  *    `POST /auth/signin/second-factor` takes the TOTP (or a backup code).
  *
+ * An email may hold several accounts (up to `EMAIL_ACCOUNTS_MAX`). Signing in
+ * with the email, once the code or the link proves it, answers the accounts to
+ * choose from when there are several, and `POST /auth/signin/email/choose`
+ * names one. A username always names one account.
+ *
  * `POST /auth/signup` creates an account from a username and an email confirmed
  * with `POST /auth/email/verify/{start,confirm}` (purpose `signup`).
  *
@@ -188,10 +193,41 @@ export const emailSignInPendingSchema = z.object({
     status: z.literal('pending'),
     expiresAt: z.number().int().positive(),
 });
+/**
+ * How long, once the email is proven, the person has to choose which of its
+ * accounts signs in.
+ */
+export const EMAIL_SIGNIN_CHOICE_TTL_MS = 5 * 60 * 1000;
+/** Most accounts one email can hold; sign-up refuses another past it. */
+export const EMAIL_ACCOUNTS_MAX = 20;
+export const emailSignInAccountOptionSchema = z.object({
+    id: z.string().min(1).max(64),
+    username: z.string().min(1).optional(),
+    displayName: z.string().min(1).optional(),
+    avatar: z.string().min(1).optional(),
+});
+export const emailSignInChooseAccountSchema = z.object({
+    chooseAccount: z.literal(true),
+    accounts: z.array(emailSignInAccountOptionSchema).min(2).max(EMAIL_ACCOUNTS_MAX),
+    expiresAt: z.number().int().positive(),
+});
+/** `POST /auth/signin/email/choose` — the account, from those {@link EmailSignInChooseAccount} listed. */
+export const emailSignInChooseRequestSchema = z
+    .object({
+    requestId: z.string().trim().min(1).max(64),
+    requestSecret: opaqueTokenSchema,
+    userId: z.string().trim().min(1).max(64),
+    ...sessionEnvelope,
+})
+    .strict();
 /** Narrow a {@link SignInStepResult}. */
 export function isSecondFactorRequired(result) {
     return result.secondFactorRequired === true;
 }
+/** Narrow an {@link EmailSignInStepResult}. */
+export function isEmailSignInChooseAccount(result) {
+    return result.chooseAccount === true;
+}
 /**
  * What a re-verification email code confirms. The code is bound to it: a code
  * asked for one change never authorises another, and the email names it.
@@ -309,4 +345,6 @@ export const SIGN_IN_ERROR_CODES = {
     originNotAllowed: 'SIGNIN_ORIGIN_NOT_ALLOWED',
     /** The username is taken. */
     usernameTaken: 'USERNAME_TAKEN',
+    /** The email already holds `EMAIL_ACCOUNTS_MAX` accounts: no sign-up adds another. */
+    emailAccountsFull: 'EMAIL_ACCOUNTS_FULL',
 };

package/dist/esm/userResponse.js

@@ -241,10 +241,6 @@ export const userResponseSchema = z
      * so it is present on the current-user DTO (`GET /users/me`,
      * `GET /session/user/:sessionId`) and absent until the user sets it.
      */
-    userPreferences: z
-        .object({ displayCurrency: z.enum(['USD', 'EUR', 'FAIR']).optional() })
-        .catchall(z.unknown())
-        .optional(),
     themePreference: themePreferenceSchema.optional(),
     personalization: z
         .object({
@@ -305,10 +301,7 @@ export const userProfileUpdateSchema = z
     languages: z.array(z.string()).optional(),
     accountExpiresAfterInactivityDays: z.number().nullable().optional(),
     notificationPreferences: z.record(z.unknown()).optional(),
-    userPreferences: z
-        .object({ displayCurrency: z.enum(['USD', 'EUR', 'FAIR']).optional() })
-        .catchall(z.unknown())
-        .optional(),
+    userPreferences: z.record(z.unknown()).optional(),
     privacySettings: z.record(z.unknown()).optional(),
     /**
      * Portable theme preference. Written through the same `PUT /users/me`