@oxy.so/contracts 4.16.0 → 4.17.0

package/dist/types/inference/streamEvents.d.ts

@@ -427,14 +427,14 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
             message: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
         }, "strict", z.ZodTypeAny, {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         }, {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -447,9 +447,9 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -462,9 +462,9 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }>, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -477,9 +477,9 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -492,9 +492,9 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
@@ -510,9 +510,9 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     };
     schemaVersion: 1;
@@ -531,9 +531,9 @@ export declare const inferenceStreamErrorEventSchema: z.ZodObject<{
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     };
     schemaVersion: 1;
@@ -863,14 +863,14 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
             message: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
         }, "strict", z.ZodTypeAny, {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         }, {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -883,9 +883,9 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -898,9 +898,9 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }>, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -913,9 +913,9 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }, {
         code: "rate_limited" | "internal_error" | "service_unavailable" | "cancelled" | "invalid_request" | "authentication_failed" | "permission_denied" | "insufficient_scope" | "model_not_found" | "unsupported_modality" | "context_length_exceeded" | "request_too_large" | "output_limit_exceeded" | "idempotency_conflict" | "insufficient_balance" | "spending_limit_exceeded" | "quota_exceeded" | "byok_credential_invalid" | "policy_violation" | "commercial_permission_denied" | "no_route_available" | "upstream_content_filtered" | "deployment_unavailable" | "provider_error" | "provider_timeout" | "provider_overloaded" | "provider_credential_invalid" | "provider_billing_refused";
@@ -928,9 +928,9 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
@@ -946,9 +946,9 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     };
     schemaVersion: 1;
@@ -967,9 +967,9 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
         upstreamCategory?: "unknown" | "authentication" | "invalid_request" | "rate_limit" | "quota" | "timeout" | "overloaded" | "server_error" | "content_filter" | undefined;
         providerError?: {
             provider: string;
-            status?: number | undefined;
             code?: string | undefined;
             message?: string | undefined;
+            status?: number | undefined;
         } | undefined;
     };
     schemaVersion: 1;

package/dist/types/inference/usage.d.ts

@@ -257,8 +257,8 @@ export declare const usageReservationSchema: z.ZodEffects<z.ZodObject<{
     /** The receipt that consumed this hold. Present exactly when `settled`. */
     settledReceiptId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "expired" | "held" | "settled" | "released";
     expiresAt: string;
+    status: "expired" | "held" | "settled" | "released";
     createdAt: string;
     schemaVersion: 1;
     currency: string;
@@ -282,8 +282,8 @@ export declare const usageReservationSchema: z.ZodEffects<z.ZodObject<{
     ceilingPriceVersionId: string;
     settledReceiptId?: string | undefined;
 }, {
-    status: "expired" | "held" | "settled" | "released";
     expiresAt: string;
+    status: "expired" | "held" | "settled" | "released";
     createdAt: string;
     schemaVersion: 1;
     currency: string;
@@ -307,8 +307,8 @@ export declare const usageReservationSchema: z.ZodEffects<z.ZodObject<{
     ceilingPriceVersionId: string;
     settledReceiptId?: string | undefined;
 }>, {
-    status: "expired" | "held" | "settled" | "released";
     expiresAt: string;
+    status: "expired" | "held" | "settled" | "released";
     createdAt: string;
     schemaVersion: 1;
     currency: string;
@@ -332,8 +332,8 @@ export declare const usageReservationSchema: z.ZodEffects<z.ZodObject<{
     ceilingPriceVersionId: string;
     settledReceiptId?: string | undefined;
 }, {
-    status: "expired" | "held" | "settled" | "released";
     expiresAt: string;
+    status: "expired" | "held" | "settled" | "released";
     createdAt: string;
     schemaVersion: 1;
     currency: string;

package/dist/types/oauth.d.ts

@@ -74,13 +74,13 @@ export declare const oauthAuthorizeCodeResponseSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     code: string;
     state: string | null;
-    redirectUri: string;
     expiresIn: number;
+    redirectUri: string;
 }, {
     code: string;
     state: string | null;
-    redirectUri: string;
     expiresIn: number;
+    redirectUri: string;
 }>;
 /**
  * Display-safe identity of a dynamically registered external MCP client.

package/dist/types/organizations.d.ts

@@ -1,10 +1,5 @@
 import { z } from 'zod';
-/** Real-world identity classification, independent of account topics and permissions. */
-export declare const ORGANIZATION_TYPES: readonly ["business", "nonprofit", "public_body", "community", "other"];
-export declare const ORGANIZATION_STATUSES: readonly ["active", "inactive", "merged", "suppressed"];
-export declare const ORGANIZATION_CLAIM_STATUSES: readonly ["unclaimed", "claimed"];
-export declare const ORGANIZATION_ALIAS_KINDS: readonly ["name_variant", "former_name", "localized_name", "marketing_name", "misspelling"];
-export declare const ORGANIZATION_CLAIM_DECISIONS: readonly ["pending", "approved", "rejected"];
+export { ORGANIZATION_TYPES, ORGANIZATION_STATUSES, ORGANIZATION_CLAIM_STATUSES, ORGANIZATION_ALIAS_KINDS, ORGANIZATION_CLAIM_DECISIONS, ORGANIZATION_NAME_MAX_LENGTH, ORGANIZATION_ERROR_CODES, } from './client/organizations';
 export declare const organizationAliasSchema: z.ZodObject<{
     alias: z.ZodString;
     kind: z.ZodEnum<["name_variant", "former_name", "localized_name", "marketing_name", "misspelling"]>;
@@ -18,7 +13,6 @@ export declare const organizationAliasSchema: z.ZodObject<{
     kind: "name_variant" | "former_name" | "localized_name" | "marketing_name" | "misspelling";
     language?: string | undefined;
 }>;
-export declare const ORGANIZATION_NAME_MAX_LENGTH = 300;
 export declare const organizationNameSchema: z.ZodEffects<z.ZodString, string, string>;
 export declare const createOrganizationSchema: z.ZodObject<{
     name: z.ZodEffects<z.ZodString, string, string>;
@@ -686,8 +680,8 @@ export declare const organizationExternalInputSchema: z.ZodObject<{
         }[] | undefined;
     };
     evidenceReference: string;
-    namespace: string;
     externalId: string;
+    namespace: string;
     accountId?: string | undefined;
     avatarFileId?: string | undefined;
 }, {
@@ -704,8 +698,8 @@ export declare const organizationExternalInputSchema: z.ZodObject<{
         }[] | undefined;
     };
     evidenceReference: string;
-    namespace: string;
     externalId: string;
+    namespace: string;
     accountId?: string | undefined;
     avatarFileId?: string | undefined;
 }>;
@@ -925,7 +919,6 @@ export declare const organizationMergeSchema: z.ZodObject<{
     evidenceReference: string;
     targetAccountId: string;
 }>;
-export declare const ORGANIZATION_ERROR_CODES: readonly ["bad_request", "unauthorized", "forbidden", "not_found", "unknown_route", "conflict", "validation_failed", "rate_limited", "internal_error", "service_unavailable"];
 export declare const organizationErrorSchema: z.ZodObject<{
     error: z.ZodObject<{
         code: z.ZodEnum<["bad_request", "unauthorized", "forbidden", "not_found", "unknown_route", "conflict", "validation_failed", "rate_limited", "internal_error", "service_unavailable"]>;
@@ -1086,3 +1079,8 @@ export declare const organizationCurationResultSchema: z.ZodObject<{
     accountId: string;
 }>;
 export type OrganizationCuration = z.infer<typeof organizationCurationSchema>;
+export type OrganizationClaimList = z.infer<typeof organizationClaimListSchema>;
+export type OrganizationImportBatchResult = z.infer<typeof organizationImportBatchResultSchema>;
+export type OrganizationExternal = z.infer<typeof organizationExternalSchema>;
+export type OrganizationExternalResolution = z.infer<typeof organizationExternalResolutionSchema>;
+export type OrganizationCurationResult = z.infer<typeof organizationCurationResultSchema>;

package/dist/types/products/billing.d.ts

@@ -564,3 +564,6 @@ export declare const productSubscriptionCancellationResultSchema: z.ZodUnion<[z.
     reconciliationPending: true;
 }>]>;
 export type ProductSubscriptionCancellationResult = z.infer<typeof productSubscriptionCancellationResultSchema>;
+export type ProductSubscriptionsResponse = z.infer<typeof productSubscriptionsResponseSchema>;
+export type SubscriptionCreditGrantsResponse = z.infer<typeof subscriptionCreditGrantsResponseSchema>;
+export type CancelProductSubscription = z.infer<typeof cancelProductSubscriptionSchema>;

package/dist/types/reputation.d.ts

@@ -41,6 +41,7 @@
 import { z } from 'zod';
 import { type UserNameResponse } from './userResponse';
 import { type ReputationConduct, type ReputationContextualInfluence, type ReputationContribution, type ReputationPersonhood, type ReputationReporting, type ReputationReviewing } from './moderationReputation';
+export { isFullReputationBalance } from './client/reputation';
 /**
  * Category bucket a reputation transaction falls into. Drives the per-category
  * balance breakdown; every rule and transaction carries exactly one.
@@ -255,17 +256,6 @@ export declare const reputationBalanceSchema: z.ZodType<ReputationBalance>;
  * requires narrowing with {@link isFullReputationBalance}.
  */
 export type ReputationBalanceView = ReputationBalance | ReputationBalanceSummary;
-/**
- * Whether a balance came back as the SUBJECT view, and so carries the
- * breakdown / influence / reliability blocks.
- *
- * Checks every extra field rather than one representative: the point of the
- * guard is that the caller then dereferences those blocks, so a partial payload
- * must not narrow.
- *
- * @param balance - A balance from `getReputationBalance`.
- */
-export declare function isFullReputationBalance(balance: ReputationBalanceView): balance is ReputationBalance;
 /**
  * A reputation award/penalty rule, keyed by `actionType`. Rules are defined in
  * Oxy's code and versioned; no endpoint edits them.

package/dist/types/sessionStatus.d.ts

@@ -179,8 +179,8 @@ export declare const sessionStatusSchema: z.ZodObject<{
     openedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     status: string;
-    purpose?: "device_sign_in" | "oauth_authorization" | undefined;
     expiresAt?: string | undefined;
+    purpose?: "device_sign_in" | "oauth_authorization" | undefined;
     sessionId?: string | null | undefined;
     userId?: string | null | undefined;
     publicKey?: string | null | undefined;
@@ -204,8 +204,8 @@ export declare const sessionStatusSchema: z.ZodObject<{
     openedAt?: string | null | undefined;
 }, {
     status: string;
-    purpose?: "device_sign_in" | "oauth_authorization" | undefined;
     expiresAt?: string | undefined;
+    purpose?: "device_sign_in" | "oauth_authorization" | undefined;
     sessionId?: string | null | undefined;
     userId?: string | null | undefined;
     publicKey?: string | null | undefined;

package/dist/types/signIn.d.ts

@@ -31,37 +31,8 @@
  */
 import { z } from 'zod';
 import type { LoginResult } from './deviceBoot';
-/** How long the link in a sign-in email can be opened. */
-export declare const EMAIL_SIGNIN_LINK_TTL_MS: number;
-/** How long a second-factor challenge can be answered. */
-export declare const SIGNIN_SECOND_FACTOR_TTL_MS: number;
-/** Wrong second-factor codes one challenge accepts. */
-export declare const SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = 5;
-/** Shortest password Oxy accepts when one is set. */
-export declare const PASSWORD_MIN_LENGTH = 10;
-/** Longest password Oxy accepts (characters). */
-export declare const PASSWORD_MAX_LENGTH = 256;
-/** Digits in an authenticator code. */
-export declare const TOTP_DIGITS = 6;
-/** Seconds each authenticator code lasts. */
-export declare const TOTP_PERIOD_SECONDS = 30;
-/** Backup codes issued when an authenticator is enabled or they are regenerated. */
-export declare const TOTP_BACKUP_CODE_COUNT = 10;
-/**
- * The long sign-in code: ten characters of Crockford base32 without the
- * look-alikes (no 0, O, 1, I, L, U), shown as `XXXXX-XXXXX`. An account whose
- * sign-in codes were guessed at too often today (the per-account ceiling) is
- * sent this instead of 6 digits for the rest of the day, so its owner can still
- * type a code while guessing one is infeasible.
- */
-export declare const EMAIL_SIGNIN_LONG_CODE_ALPHABET = "23456789ABCDEFGHJKMNPQRSTVWXYZ";
-export declare const EMAIL_SIGNIN_LONG_CODE_LENGTH = 10;
-/**
- * Normalise a typed sign-in code: 6 digits stay as they are; a long code is
- * upper-cased with its dash and spaces removed. Anything else is returned
- * trimmed (and will simply be wrong).
- */
-export declare function normalizeEmailSignInCode(code: string): string;
+export { EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, normalizeEmailSignInCode, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_ACCOUNTS_MAX, isSecondFactorRequired, isEmailSignInChooseAccount, REAUTH_ACTIONS, SIGN_IN_ERROR_CODES, } from './client/signIn';
+export type { ReauthAction, SignInErrorCode } from './client/signIn';
 /** A username or an email. */
 export declare const signInIdentifierSchema: z.ZodString;
 /** A password as typed. Its policy applies only when one is set. */
@@ -252,8 +223,8 @@ export declare const passwordSignInRequestSchema: z.ZodObject<{
     identifier: z.ZodString;
     password: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    identifier: string;
     password: string;
+    identifier: string;
     device?: {
         deviceId: string;
         deviceSecret: string;
@@ -261,8 +232,8 @@ export declare const passwordSignInRequestSchema: z.ZodObject<{
     deviceName?: string | undefined;
     deviceFingerprint?: string | undefined;
 }, {
-    identifier: string;
     password: string;
+    identifier: string;
     device?: {
         deviceId: string;
         deviceSecret: string;
@@ -364,13 +335,6 @@ export interface EmailSignInPending {
 export declare const emailSignInPendingSchema: z.ZodType<EmailSignInPending>;
 /** What a first factor answers: a session, or the second-factor step. */
 export type SignInStepResult = LoginResult | SecondFactorRequired;
-/**
- * How long, once the email is proven, the person has to choose which of its
- * accounts signs in.
- */
-export declare const EMAIL_SIGNIN_CHOICE_TTL_MS: number;
-/** Most accounts one email can hold; sign-up refuses another past it. */
-export declare const EMAIL_ACCOUNTS_MAX = 20;
 /** One account an email holds, as the choice after proving it shows it. */
 export interface EmailSignInAccountOption {
     id: string;
@@ -436,16 +400,6 @@ export declare const emailSignInChooseRequestSchema: z.ZodObject<{
     deviceFingerprint?: string | undefined;
 }>;
 export type EmailSignInChooseRequest = z.infer<typeof emailSignInChooseRequestSchema>;
-/** Narrow a {@link SignInStepResult}. */
-export declare function isSecondFactorRequired(result: EmailSignInStepResult | EmailSignInPending): result is SecondFactorRequired;
-/** Narrow an {@link EmailSignInStepResult}. */
-export declare function isEmailSignInChooseAccount(result: EmailSignInStepResult | EmailSignInPending): result is EmailSignInChooseAccount;
-/**
- * What a re-verification email code confirms. The code is bound to it: a code
- * asked for one change never authorises another, and the email names it.
- */
-export declare const REAUTH_ACTIONS: readonly ["change_password", "totp", "link_commons", "delete_account", "credentials_manage"];
-export type ReauthAction = (typeof REAUTH_ACTIONS)[number];
 /** `POST /users/me/reauth/email` */
 export declare const reauthEmailStartRequestSchema: z.ZodObject<{
     action: z.ZodEnum<["change_password", "totp", "link_commons", "delete_account", "credentials_manage"]>;
@@ -668,6 +622,7 @@ export declare const totpConfirmRequestSchema: z.ZodObject<{
         totpCode?: string | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
+    code: string;
     reauth: {
         password?: string | undefined;
         emailCode?: {
@@ -676,8 +631,8 @@ export declare const totpConfirmRequestSchema: z.ZodObject<{
         } | undefined;
         totpCode?: string | undefined;
     };
-    code: string;
 }, {
+    code: string;
     reauth: {
         password?: string | undefined;
         emailCode?: {
@@ -686,7 +641,6 @@ export declare const totpConfirmRequestSchema: z.ZodObject<{
         } | undefined;
         totpCode?: string | undefined;
     };
-    code: string;
 }>;
 export type TotpConfirmRequest = z.infer<typeof totpConfirmRequestSchema>;
 /** `POST /users/me/totp/disable` and `POST /users/me/totp/backup-codes` */
@@ -759,40 +713,3 @@ export interface TotpBackupCodesResponse {
     backupCodes: string[];
 }
 export declare const totpBackupCodesResponseSchema: z.ZodType<TotpBackupCodesResponse>;
-/**
- * Stable error codes (`error.code` in the API error body). Clients map these
- * through their localization, never the English message.
- */
-export declare const SIGN_IN_ERROR_CODES: {
-    /** Wrong identifier or password — never says which. */
-    readonly invalidCredentials: "SIGNIN_INVALID_CREDENTIALS";
-    /** The request is unknown, expired, spent, or its secret is wrong. */
-    readonly requestInvalid: "SIGNIN_REQUEST_INVALID";
-    /** The link is unknown, expired or already used. */
-    readonly linkInvalid: "SIGNIN_LINK_INVALID";
-    /** The link was opened in another browser: type the code in the app instead. */
-    readonly linkOtherDevice: "SIGNIN_LINK_OTHER_DEVICE";
-    /** The second-factor challenge or its code is wrong, expired or spent. */
-    readonly secondFactorInvalid: "SECOND_FACTOR_INVALID";
-    /** Too many failures for this account: wait and try again. */
-    readonly locked: "SIGNIN_LOCKED";
-    /** The step needs a fresh proof (`reauth`). */
-    readonly reauthRequired: "REAUTH_REQUIRED";
-    /** The fresh proof was wrong. */
-    readonly reauthInvalid: "REAUTH_INVALID";
-    /** The account has an authenticator: the proof must carry its code. */
-    readonly totpRequired: "TOTP_REQUIRED";
-    /** Enrolling or confirming an authenticator that is already on. */
-    readonly totpAlreadyEnabled: "TOTP_ALREADY_ENABLED";
-    /** Disabling, confirming or regenerating codes with no authenticator (or no pending one). */
-    readonly totpNotEnabled: "TOTP_NOT_ENABLED";
-    /** The code the authenticator showed at enrolment is wrong. */
-    readonly totpCodeInvalid: "TOTP_CODE_INVALID";
-    /** Only official Oxy apps and auth.oxy.so may sign people in here. */
-    readonly originNotAllowed: "SIGNIN_ORIGIN_NOT_ALLOWED";
-    /** The username is taken. */
-    readonly usernameTaken: "USERNAME_TAKEN";
-    /** The email already holds `EMAIL_ACCOUNTS_MAX` accounts: no sign-up adds another. */
-    readonly emailAccountsFull: "EMAIL_ACCOUNTS_FULL";
-};
-export type SignInErrorCode = (typeof SIGN_IN_ERROR_CODES)[keyof typeof SIGN_IN_ERROR_CODES];