@oxy.so/contracts 4.16.0 → 4.17.0

package/dist/cjs/identityLink.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.identityLinkCompleteRequestSchema = exports.identityLinkProofRequestSchema = exports.identityLinkStateSchema = exports.identityLinkCreateResponseSchema = exports.identityLinkIdSchema = exports.IDENTITY_LINK_QR_PREFIX = exports.IDENTITY_LINK_STATUSES = void 0;
-exports.buildIdentityLinkQrPayload = buildIdentityLinkQrPayload;
-exports.parseIdentityLinkQrPayload = parseIdentityLinkQrPayload;
+exports.identityLinkCompleteRequestSchema = exports.identityLinkProofRequestSchema = exports.identityLinkStateSchema = exports.identityLinkCreateResponseSchema = exports.identityLinkIdSchema = exports.parseIdentityLinkQrPayload = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_QR_PREFIX = exports.IDENTITY_LINK_STATUSES = void 0;
 /**
  * Linking Commons to an account without a key (ADR 0029 D3) — the two-device
  * relay.
@@ -31,45 +29,26 @@ exports.parseIdentityLinkQrPayload = parseIdentityLinkQrPayload;
 const zod_1 = require("zod");
 const identityProof_1 = require("./identityProof");
 const signIn_1 = require("./signIn");
-exports.IDENTITY_LINK_STATUSES = ['pending', 'signed', 'completed', 'cancelled'];
-/** The scheme and host Commons routes a link QR to. */
-exports.IDENTITY_LINK_QR_PREFIX = 'oxycommons://link';
-const LINK_ID = /^[0-9a-f]{32}$/;
-const CHALLENGE = /^[0-9a-f]{64}$/;
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const identityLink_1 = require("./client/identityLink");
+var identityLink_2 = require("./client/identityLink");
+Object.defineProperty(exports, "IDENTITY_LINK_STATUSES", { enumerable: true, get: function () { return identityLink_2.IDENTITY_LINK_STATUSES; } });
+Object.defineProperty(exports, "IDENTITY_LINK_QR_PREFIX", { enumerable: true, get: function () { return identityLink_2.IDENTITY_LINK_QR_PREFIX; } });
+Object.defineProperty(exports, "buildIdentityLinkQrPayload", { enumerable: true, get: function () { return identityLink_2.buildIdentityLinkQrPayload; } });
+Object.defineProperty(exports, "parseIdentityLinkQrPayload", { enumerable: true, get: function () { return identityLink_2.parseIdentityLinkQrPayload; } });
 exports.identityLinkIdSchema = zod_1.z
     .string()
     .trim()
-    .regex(LINK_ID, 'linkId must be 32 lowercase hex characters');
-/** The QR auth.oxy.so shows: the request's id and the challenge Commons signs. */
-function buildIdentityLinkQrPayload(linkId, challenge) {
-    return `${exports.IDENTITY_LINK_QR_PREFIX}?id=${linkId}&c=${challenge}`;
-}
-/** The request a scanned code names, or `null` for anything that is not a link QR. */
-function parseIdentityLinkQrPayload(raw) {
-    const value = raw.trim();
-    if (!value.startsWith(`${exports.IDENTITY_LINK_QR_PREFIX}?`))
-        return null;
-    // Parsed by hand: React Native's `URLSearchParams` does not implement `get`.
-    const params = new Map();
-    for (const pair of value.slice(exports.IDENTITY_LINK_QR_PREFIX.length + 1).split('&')) {
-        const separator = pair.indexOf('=');
-        if (separator > 0)
-            params.set(pair.slice(0, separator), pair.slice(separator + 1));
-    }
-    const linkId = params.get('id') ?? '';
-    const challenge = params.get('c') ?? '';
-    if (!LINK_ID.test(linkId) || !CHALLENGE.test(challenge))
-        return null;
-    return { linkId, challenge };
-}
+    .regex(identityLink_1.LINK_ID, 'linkId must be 32 lowercase hex characters');
 exports.identityLinkCreateResponseSchema = zod_1.z.object({
     linkId: exports.identityLinkIdSchema,
-    challenge: zod_1.z.string().regex(CHALLENGE),
+    challenge: zod_1.z.string().regex(identityLink_1.CHALLENGE),
     expiresAt: zod_1.z.number().int().positive(),
-    qrPayload: zod_1.z.string().startsWith(exports.IDENTITY_LINK_QR_PREFIX),
+    qrPayload: zod_1.z.string().startsWith(identityLink_1.IDENTITY_LINK_QR_PREFIX),
 });
 exports.identityLinkStateSchema = zod_1.z.object({
-    status: zod_1.z.enum(exports.IDENTITY_LINK_STATUSES),
+    status: zod_1.z.enum(identityLink_1.IDENTITY_LINK_STATUSES),
     userId: zod_1.z.string().min(1),
     username: zod_1.z.string().nullable(),
     publicKey: zod_1.z.string().nullable(),

package/dist/cjs/identityProof.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.identityRootStatusSchema = exports.IDENTITY_ERROR_CODES = exports.identityProofChallengeResponseSchema = exports.identityProofChallengeRequestSchema = exports.identityProofSchema = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_VERSION = void 0;
-exports.canonicalJson = canonicalJson;
-exports.buildIdentityProofMessage = buildIdentityProofMessage;
+exports.identityRootStatusSchema = exports.identityProofChallengeResponseSchema = exports.identityProofChallengeRequestSchema = exports.identityProofSchema = exports.IDENTITY_ERROR_CODES = exports.buildIdentityProofMessage = exports.canonicalJson = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_VERSION = void 0;
 /**
  * Identity proof contract — the ONE signed format for operations on a personal root.
  *
@@ -21,121 +19,35 @@ exports.buildIdentityProofMessage = buildIdentityProofMessage;
  * primitive and passes the hex digest in).
  */
 const zod_1 = require("zod");
-exports.IDENTITY_PROOF_VERSION = 2;
-exports.IDENTITY_PROOF_DOMAIN = 'oxy-identity-proof';
-/** The audience every API-verified identity proof names. */
-exports.IDENTITY_PROOF_AUDIENCE = 'oxy-api/identity';
-/** How long a proof challenge lives: one interactive ceremony. */
-exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = 5 * 60 * 1000;
-/**
- * Everything a root proof may authorize. A challenge is minted for exactly one
- * action and spent only by a proof for that action.
- */
-exports.IDENTITY_PROOF_ACTIONS = {
-    /**
-     * Link Commons' root to an account that has none (`POST /auth/link`).
-     * The account becomes self-custodied and its email is deleted
-     * (ADR 0029 D3).
-     */
-    link: 'link_identity',
-};
-exports.IDENTITY_PROOF_ACTION_VALUES = Object.values(exports.IDENTITY_PROOF_ACTIONS);
-const HEX_DIGEST = /^[0-9a-f]{64}$/;
-const ROOT_KEY = /^04[0-9a-f]{128}$/;
-const CHALLENGE = /^[0-9a-f]{64}$/;
-/**
- * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace,
- * `undefined` members omitted, arrays in order. Numbers must be finite. This is
- * the ONLY serializer for anything digested into a proof.
- */
-function canonicalJson(value) {
-    if (value === null)
-        return 'null';
-    switch (typeof value) {
-        case 'string':
-        case 'boolean':
-            return JSON.stringify(value);
-        case 'number':
-            if (!Number.isFinite(value))
-                throw new Error('canonicalJson: non-finite number');
-            return JSON.stringify(value);
-        case 'object': {
-            if (Array.isArray(value)) {
-                return `[${value.map((entry) => (entry === undefined ? 'null' : canonicalJson(entry))).join(',')}]`;
-            }
-            const record = value;
-            const keys = Object.keys(record)
-                .filter((key) => record[key] !== undefined)
-                .sort();
-            return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(',')}}`;
-        }
-        default:
-            throw new Error(`canonicalJson: unsupported ${typeof value}`);
-    }
-}
-/**
- * The exact bytes a root signs. Throws on a malformed claim rather than signing
- * (or verifying) something ambiguous.
- */
-function buildIdentityProofMessage(claims) {
-    if (!exports.IDENTITY_PROOF_ACTION_VALUES.includes(claims.action))
-        throw new Error('identity proof: unknown action');
-    if (!claims.subject || !claims.actor)
-        throw new Error('identity proof: subject and actor are required');
-    if (!ROOT_KEY.test(claims.rootPublicKey))
-        throw new Error('identity proof: rootPublicKey must be canonical');
-    if (claims.payloadDigest !== null && !HEX_DIGEST.test(claims.payloadDigest)) {
-        throw new Error('identity proof: payloadDigest must be a lowercase SHA-256 hex digest');
-    }
-    if (claims.expectedRevision !== null &&
-        (!Number.isSafeInteger(claims.expectedRevision) || claims.expectedRevision < 0)) {
-        throw new Error('identity proof: expectedRevision must be a non-negative integer');
-    }
-    if (!CHALLENGE.test(claims.challenge))
-        throw new Error('identity proof: challenge must be 64 lowercase hex characters');
-    if (!Number.isSafeInteger(claims.expiresAt) || claims.expiresAt <= 0)
-        throw new Error('identity proof: expiresAt must be unix milliseconds');
-    return canonicalJson({
-        v: exports.IDENTITY_PROOF_VERSION,
-        domain: exports.IDENTITY_PROOF_DOMAIN,
-        action: claims.action,
-        subject: claims.subject,
-        actor: claims.actor,
-        rootPublicKey: claims.rootPublicKey,
-        payloadDigest: claims.payloadDigest,
-        expectedRevision: claims.expectedRevision,
-        audience: claims.audience,
-        challenge: claims.challenge,
-        expiresAt: claims.expiresAt,
-    });
-}
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const identityProof_1 = require("./client/identityProof");
+var identityProof_2 = require("./client/identityProof");
+Object.defineProperty(exports, "IDENTITY_PROOF_VERSION", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_VERSION; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_DOMAIN", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_DOMAIN; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_AUDIENCE", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_AUDIENCE; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_CHALLENGE_TTL_MS", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_CHALLENGE_TTL_MS; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_ACTIONS", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_ACTIONS; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_ACTION_VALUES", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_ACTION_VALUES; } });
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return identityProof_2.canonicalJson; } });
+Object.defineProperty(exports, "buildIdentityProofMessage", { enumerable: true, get: function () { return identityProof_2.buildIdentityProofMessage; } });
+Object.defineProperty(exports, "IDENTITY_ERROR_CODES", { enumerable: true, get: function () { return identityProof_2.IDENTITY_ERROR_CODES; } });
 /** The proof as it travels: the signature plus the two claims the verifier cannot derive. */
 exports.identityProofSchema = zod_1.z.object({
-    v: zod_1.z.literal(exports.IDENTITY_PROOF_VERSION),
-    challenge: zod_1.z.string().trim().regex(CHALLENGE, 'challenge must be 64 lowercase hex characters'),
+    v: zod_1.z.literal(identityProof_1.IDENTITY_PROOF_VERSION),
+    challenge: zod_1.z.string().trim().regex(identityProof_1.CHALLENGE, 'challenge must be 64 lowercase hex characters'),
     expiresAt: zod_1.z.number().int().positive(),
     signature: zod_1.z.string().trim().min(1).max(512),
 });
 /** `POST /identity/proof-challenge` */
 exports.identityProofChallengeRequestSchema = zod_1.z.object({
-    action: zod_1.z.enum(exports.IDENTITY_PROOF_ACTION_VALUES),
+    action: zod_1.z.enum(identityProof_1.IDENTITY_PROOF_ACTION_VALUES),
 });
 exports.identityProofChallengeResponseSchema = zod_1.z.object({
-    challenge: zod_1.z.string().regex(CHALLENGE),
+    challenge: zod_1.z.string().regex(identityProof_1.CHALLENGE),
     expiresAt: zod_1.z.number().int().positive(),
     audience: zod_1.z.string().min(1),
 });
-/**
- * Stable error codes the root routes answer with (`error.code` in the API error
- * body). Clients map these through their localization, never the English message.
- */
-exports.IDENTITY_ERROR_CODES = {
-    proofInvalid: 'IDENTITY_PROOF_INVALID',
-    rootAlreadyLinked: 'IDENTITY_ROOT_ALREADY_LINKED',
-    rootLinkedElsewhere: 'IDENTITY_ROOT_LINKED_ELSEWHERE',
-    freshFactorRequired: 'IDENTITY_FRESH_FACTOR_REQUIRED',
-    notPersonal: 'IDENTITY_NOT_PERSONAL_ACCOUNT',
-};
 exports.identityRootStatusSchema = zod_1.z.object({
     rootLinked: zod_1.z.boolean(),
     recoveryEmail: zod_1.z.string().nullable(),

package/dist/cjs/organizations.js

@@ -1,46 +1,38 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.organizationCurationResultSchema = exports.organizationCurationSchema = exports.organizationErrorSchema = exports.ORGANIZATION_ERROR_CODES = exports.organizationMergeSchema = exports.organizationExternalResolutionSchema = exports.organizationExternalSchema = exports.organizationImportBatchResultSchema = exports.organizationImportBatchSchema = exports.organizationExternalInputSchema = exports.organizationClaimReviewSchema = exports.organizationClaimListSchema = exports.organizationClaimListQuerySchema = exports.organizationClaimDetailSchema = exports.organizationClaimSchema = exports.organizationClaimInputSchema = exports.organizationBatchSchema = exports.organizationBatchInputSchema = exports.organizationListSchema = exports.organizationSearchSchema = exports.organizationSchema = exports.updateOrganizationSchema = exports.createOrganizationSchema = exports.organizationNameSchema = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.organizationAliasSchema = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_TYPES = void 0;
+exports.organizationCurationResultSchema = exports.organizationCurationSchema = exports.organizationErrorSchema = exports.organizationMergeSchema = exports.organizationExternalResolutionSchema = exports.organizationExternalSchema = exports.organizationImportBatchResultSchema = exports.organizationImportBatchSchema = exports.organizationExternalInputSchema = exports.organizationClaimReviewSchema = exports.organizationClaimListSchema = exports.organizationClaimListQuerySchema = exports.organizationClaimDetailSchema = exports.organizationClaimSchema = exports.organizationClaimInputSchema = exports.organizationBatchSchema = exports.organizationBatchInputSchema = exports.organizationListSchema = exports.organizationSearchSchema = exports.organizationSchema = exports.updateOrganizationSchema = exports.createOrganizationSchema = exports.organizationNameSchema = exports.organizationAliasSchema = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_TYPES = void 0;
 const zod_1 = require("zod");
-/** Real-world identity classification, independent of account topics and permissions. */
-exports.ORGANIZATION_TYPES = [
-    'business',
-    'nonprofit',
-    'public_body',
-    'community',
-    'other',
-];
-exports.ORGANIZATION_STATUSES = ['active', 'inactive', 'merged', 'suppressed'];
-exports.ORGANIZATION_CLAIM_STATUSES = ['unclaimed', 'claimed'];
-exports.ORGANIZATION_ALIAS_KINDS = [
-    'name_variant',
-    'former_name',
-    'localized_name',
-    'marketing_name',
-    'misspelling',
-];
-exports.ORGANIZATION_CLAIM_DECISIONS = ['pending', 'approved', 'rejected'];
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const organizations_1 = require("./client/organizations");
+var organizations_2 = require("./client/organizations");
+Object.defineProperty(exports, "ORGANIZATION_TYPES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_TYPES; } });
+Object.defineProperty(exports, "ORGANIZATION_STATUSES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_STATUSES; } });
+Object.defineProperty(exports, "ORGANIZATION_CLAIM_STATUSES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_CLAIM_STATUSES; } });
+Object.defineProperty(exports, "ORGANIZATION_ALIAS_KINDS", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_ALIAS_KINDS; } });
+Object.defineProperty(exports, "ORGANIZATION_CLAIM_DECISIONS", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_CLAIM_DECISIONS; } });
+Object.defineProperty(exports, "ORGANIZATION_NAME_MAX_LENGTH", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_NAME_MAX_LENGTH; } });
+Object.defineProperty(exports, "ORGANIZATION_ERROR_CODES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_ERROR_CODES; } });
 const id = zod_1.z.string().min(1).max(128);
 const optionalText = (max) => zod_1.z.string().trim().min(1).max(max).nullable().optional();
 exports.organizationAliasSchema = zod_1.z
     .object({
     alias: zod_1.z.string().trim().min(1).max(300),
-    kind: zod_1.z.enum(exports.ORGANIZATION_ALIAS_KINDS),
+    kind: zod_1.z.enum(organizations_1.ORGANIZATION_ALIAS_KINDS),
     language: zod_1.z.string().min(2).max(35).optional(),
 })
     .strict();
-exports.ORGANIZATION_NAME_MAX_LENGTH = 300;
 exports.organizationNameSchema = zod_1.z
     .string()
     .trim()
     .min(1)
-    .max(exports.ORGANIZATION_NAME_MAX_LENGTH)
+    .max(organizations_1.ORGANIZATION_NAME_MAX_LENGTH)
     .refine((value) => !/[<>]/.test(value) &&
     Array.from(value).every((character) => character.charCodeAt(0) >= 32 && character.charCodeAt(0) !== 127), 'Organization name must be plain text');
 exports.createOrganizationSchema = zod_1.z
     .object({
     name: exports.organizationNameSchema,
-    organizationType: zod_1.z.enum(exports.ORGANIZATION_TYPES),
+    organizationType: zod_1.z.enum(organizations_1.ORGANIZATION_TYPES),
     legalName: optionalText(300),
     websiteUrl: zod_1.z
         .string()
@@ -68,8 +60,8 @@ exports.organizationSchema = exports.createOrganizationSchema
     countryCode: zod_1.z.string().nullable(),
     aliases: zod_1.z.array(exports.organizationAliasSchema),
     verifiedDomains: zod_1.z.array(zod_1.z.string()),
-    claimStatus: zod_1.z.enum(exports.ORGANIZATION_CLAIM_STATUSES),
-    status: zod_1.z.enum(exports.ORGANIZATION_STATUSES),
+    claimStatus: zod_1.z.enum(organizations_1.ORGANIZATION_CLAIM_STATUSES),
+    status: zod_1.z.enum(organizations_1.ORGANIZATION_STATUSES),
     mergedIntoAccountId: id.nullable(),
     createdAt: zod_1.z.string().datetime(),
     updatedAt: zod_1.z.string().datetime(),
@@ -78,7 +70,7 @@ exports.organizationSchema = exports.createOrganizationSchema
 exports.organizationSearchSchema = zod_1.z
     .object({
     query: zod_1.z.string().trim().max(200).default(''),
-    organizationType: zod_1.z.enum(exports.ORGANIZATION_TYPES).optional(),
+    organizationType: zod_1.z.enum(organizations_1.ORGANIZATION_TYPES).optional(),
     limit: zod_1.z.coerce.number().int().min(1).max(50).default(20),
     cursor: zod_1.z.string().min(1).max(2048).optional(),
 })
@@ -103,7 +95,7 @@ exports.organizationClaimSchema = zod_1.z
     id,
     accountId: id,
     claimantUserId: id,
-    status: zod_1.z.enum(exports.ORGANIZATION_CLAIM_DECISIONS),
+    status: zod_1.z.enum(organizations_1.ORGANIZATION_CLAIM_DECISIONS),
     createdAt: zod_1.z.string().datetime(),
 })
     .strict();
@@ -116,7 +108,7 @@ exports.organizationClaimDetailSchema = exports.organizationClaimSchema
     .strict();
 exports.organizationClaimListQuerySchema = zod_1.z
     .object({
-    status: zod_1.z.enum(exports.ORGANIZATION_CLAIM_DECISIONS).optional(),
+    status: zod_1.z.enum(organizations_1.ORGANIZATION_CLAIM_DECISIONS).optional(),
     limit: zod_1.z.coerce.number().int().min(1).max(50).default(20),
     cursor: zod_1.z.string().min(1).max(2048).optional(),
 })
@@ -171,23 +163,11 @@ exports.organizationMergeSchema = zod_1.z
     evidenceReference: zod_1.z.string().trim().min(1).max(1000),
 })
     .strict();
-exports.ORGANIZATION_ERROR_CODES = [
-    'bad_request',
-    'unauthorized',
-    'forbidden',
-    'not_found',
-    'unknown_route',
-    'conflict',
-    'validation_failed',
-    'rate_limited',
-    'internal_error',
-    'service_unavailable',
-];
 exports.organizationErrorSchema = zod_1.z
     .object({
     error: zod_1.z
         .object({
-        code: zod_1.z.enum(exports.ORGANIZATION_ERROR_CODES),
+        code: zod_1.z.enum(organizations_1.ORGANIZATION_ERROR_CODES),
         message: zod_1.z.string(),
         details: zod_1.z
             .record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.null()]))

package/dist/cjs/reputation.js

@@ -40,11 +40,12 @@
  * `require()`).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.awardReputationSchema = exports.reputationInfluenceResultSchema = exports.reputationLeaderboardEntrySchema = exports.reputationLeaderboardUserSchema = exports.reputationRulesResponseSchema = exports.reputationRuleSchema = exports.reputationBalanceSchema = exports.reputationBalanceSummarySchema = exports.reputationReliabilitySchema = exports.reputationInfluenceSchema = exports.reputationBalanceBreakdownSchema = exports.reputationTransactionSchema = exports.reputationInfluenceContextSchema = exports.REPUTATION_INFLUENCE_CONTEXTS = exports.reputationTargetEntityTypeSchema = exports.REPUTATION_TARGET_ENTITY_TYPES = exports.trustTierSchema = exports.TRUST_TIERS = exports.reputationTransactionStatusSchema = exports.REPUTATION_TRANSACTION_STATUSES = exports.reputationCategorySchema = exports.REPUTATION_CATEGORIES = void 0;
-exports.isFullReputationBalance = isFullReputationBalance;
+exports.awardReputationSchema = exports.reputationInfluenceResultSchema = exports.reputationLeaderboardEntrySchema = exports.reputationLeaderboardUserSchema = exports.reputationRulesResponseSchema = exports.reputationRuleSchema = exports.reputationBalanceSchema = exports.reputationBalanceSummarySchema = exports.reputationReliabilitySchema = exports.reputationInfluenceSchema = exports.reputationBalanceBreakdownSchema = exports.reputationTransactionSchema = exports.reputationInfluenceContextSchema = exports.REPUTATION_INFLUENCE_CONTEXTS = exports.reputationTargetEntityTypeSchema = exports.REPUTATION_TARGET_ENTITY_TYPES = exports.trustTierSchema = exports.TRUST_TIERS = exports.reputationTransactionStatusSchema = exports.REPUTATION_TRANSACTION_STATUSES = exports.reputationCategorySchema = exports.REPUTATION_CATEGORIES = exports.isFullReputationBalance = void 0;
 const zod_1 = require("zod");
 const userResponse_1 = require("./userResponse");
 const moderationReputation_1 = require("./moderationReputation");
+var reputation_1 = require("./client/reputation");
+Object.defineProperty(exports, "isFullReputationBalance", { enumerable: true, get: function () { return reputation_1.isFullReputationBalance; } });
 /* -------------------------------------------------------------------------- */
 /*  Closed value sets                                                         */
 /* -------------------------------------------------------------------------- */
@@ -174,38 +175,6 @@ exports.reputationBalanceSchema = zod_1.z.object({
     reviewing: moderationReputation_1.reputationReviewingSchema.optional(),
     contextualInfluence: moderationReputation_1.reputationContextualInfluenceSchema.optional(),
 });
-/**
- * The fields the full {@link ReputationBalance} carries beyond the public
- * {@link ReputationBalanceSummary} that the API sends ALL-OR-NOTHING. The
- * runtime discriminant between the two views.
- *
- * The V2 blocks (`conduct`, `contribution`, …) are deliberately NOT listed:
- * they are optional on the wire, so requiring them here would make a balance
- * from a server that predates them fail to narrow, hiding the whole private
- * view. Read a V2 block by checking that block.
- */
-const FULL_BALANCE_FIELDS = [
-    'positive',
-    'negative',
-    'breakdown',
-    'influence',
-    'reliability',
-    'recalculatedAt',
-    'updatedAt',
-];
-/**
- * Whether a balance came back as the SUBJECT view, and so carries the
- * breakdown / influence / reliability blocks.
- *
- * Checks every extra field rather than one representative: the point of the
- * guard is that the caller then dereferences those blocks, so a partial payload
- * must not narrow.
- *
- * @param balance - A balance from `getReputationBalance`.
- */
-function isFullReputationBalance(balance) {
-    return FULL_BALANCE_FIELDS.every((field) => field in balance);
-}
 exports.reputationRuleSchema = zod_1.z.object({
     actionType: zod_1.z.string(),
     points: zod_1.z.number(),

package/dist/cjs/signIn.js

@@ -1,9 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SIGN_IN_ERROR_CODES = exports.totpBackupCodesResponseSchema = exports.totpReauthRequestSchema = exports.totpConfirmRequestSchema = exports.totpEnrollResponseSchema = exports.signInMethodsSchema = exports.passwordSetRequestSchema = exports.emailReauthProofSchema = exports.reauthProofSchema = exports.reauthEmailStartRequestSchema = exports.REAUTH_ACTIONS = exports.emailSignInChooseRequestSchema = exports.emailSignInChooseAccountSchema = exports.emailSignInAccountOptionSchema = exports.EMAIL_ACCOUNTS_MAX = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.emailSignInPendingSchema = exports.secondFactorRequiredSchema = exports.signUpRequestSchema = exports.secondFactorSignInRequestSchema = exports.passwordSignInRequestSchema = exports.emailSignInLinkResponseSchema = exports.emailSignInLinkRequestSchema = exports.emailSignInCollectRequestSchema = exports.emailSignInConfirmRequestSchema = exports.emailSignInCodeSchema = exports.emailSignInStartResponseSchema = exports.emailSignInStartRequestSchema = exports.secondFactorCodeSchema = exports.newPasswordSchema = exports.passwordInputSchema = exports.signInIdentifierSchema = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.TOTP_BACKUP_CODE_COUNT = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.PASSWORD_MAX_LENGTH = exports.PASSWORD_MIN_LENGTH = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.EMAIL_SIGNIN_LINK_TTL_MS = void 0;
-exports.normalizeEmailSignInCode = normalizeEmailSignInCode;
-exports.isSecondFactorRequired = isSecondFactorRequired;
-exports.isEmailSignInChooseAccount = isEmailSignInChooseAccount;
+exports.totpBackupCodesResponseSchema = exports.totpReauthRequestSchema = exports.totpConfirmRequestSchema = exports.totpEnrollResponseSchema = exports.signInMethodsSchema = exports.passwordSetRequestSchema = exports.emailReauthProofSchema = exports.reauthProofSchema = exports.reauthEmailStartRequestSchema = exports.emailSignInChooseRequestSchema = exports.emailSignInChooseAccountSchema = exports.emailSignInAccountOptionSchema = exports.emailSignInPendingSchema = exports.secondFactorRequiredSchema = exports.signUpRequestSchema = exports.secondFactorSignInRequestSchema = exports.passwordSignInRequestSchema = exports.emailSignInLinkResponseSchema = exports.emailSignInLinkRequestSchema = exports.emailSignInCollectRequestSchema = exports.emailSignInConfirmRequestSchema = exports.emailSignInCodeSchema = exports.emailSignInStartResponseSchema = exports.emailSignInStartRequestSchema = exports.secondFactorCodeSchema = exports.newPasswordSchema = exports.passwordInputSchema = exports.signInIdentifierSchema = exports.SIGN_IN_ERROR_CODES = exports.REAUTH_ACTIONS = exports.isEmailSignInChooseAccount = exports.isSecondFactorRequired = exports.EMAIL_ACCOUNTS_MAX = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.normalizeEmailSignInCode = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.TOTP_BACKUP_CODE_COUNT = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.PASSWORD_MAX_LENGTH = exports.PASSWORD_MIN_LENGTH = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.EMAIL_SIGNIN_LINK_TTL_MS = void 0;
 /**
  * Signing in: an email code or link, an optional password,
  * and an optional authenticator app (TOTP) as a second factor.
@@ -38,40 +35,27 @@ exports.isEmailSignInChooseAccount = isEmailSignInChooseAccount;
 const zod_1 = require("zod");
 const accountEmail_1 = require("./accountEmail");
 const deviceSession_1 = require("./deviceSession");
-/** How long the link in a sign-in email can be opened. */
-exports.EMAIL_SIGNIN_LINK_TTL_MS = 15 * 60 * 1000;
-/** How long a second-factor challenge can be answered. */
-exports.SIGNIN_SECOND_FACTOR_TTL_MS = 5 * 60 * 1000;
-/** Wrong second-factor codes one challenge accepts. */
-exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = 5;
-/** Shortest password Oxy accepts when one is set. */
-exports.PASSWORD_MIN_LENGTH = 10;
-/** Longest password Oxy accepts (characters). */
-exports.PASSWORD_MAX_LENGTH = 256;
-/** Digits in an authenticator code. */
-exports.TOTP_DIGITS = 6;
-/** Seconds each authenticator code lasts. */
-exports.TOTP_PERIOD_SECONDS = 30;
-/** Backup codes issued when an authenticator is enabled or they are regenerated. */
-exports.TOTP_BACKUP_CODE_COUNT = 10;
-/**
- * The long sign-in code: ten characters of Crockford base32 without the
- * look-alikes (no 0, O, 1, I, L, U), shown as `XXXXX-XXXXX`. An account whose
- * sign-in codes were guessed at too often today (the per-account ceiling) is
- * sent this instead of 6 digits for the rest of the day, so its owner can still
- * type a code while guessing one is infeasible.
- */
-exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = '23456789ABCDEFGHJKMNPQRSTVWXYZ';
-exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = 10;
-/**
- * Normalise a typed sign-in code: 6 digits stay as they are; a long code is
- * upper-cased with its dash and spaces removed. Anything else is returned
- * trimmed (and will simply be wrong).
- */
-function normalizeEmailSignInCode(code) {
-    const compact = code.trim().replace(/[\s-]/g, '').toUpperCase();
-    return compact;
-}
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const signIn_1 = require("./client/signIn");
+var signIn_2 = require("./client/signIn");
+Object.defineProperty(exports, "EMAIL_SIGNIN_LINK_TTL_MS", { enumerable: true, get: function () { return signIn_2.EMAIL_SIGNIN_LINK_TTL_MS; } });
+Object.defineProperty(exports, "SIGNIN_SECOND_FACTOR_TTL_MS", { enumerable: true, get: function () { return signIn_2.SIGNIN_SECOND_FACTOR_TTL_MS; } });
+Object.defineProperty(exports, "SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS", { enumerable: true, get: function () { return signIn_2.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS; } });
+Object.defineProperty(exports, "PASSWORD_MIN_LENGTH", { enumerable: true, get: function () { return signIn_2.PASSWORD_MIN_LENGTH; } });
+Object.defineProperty(exports, "PASSWORD_MAX_LENGTH", { enumerable: true, get: function () { return signIn_2.PASSWORD_MAX_LENGTH; } });
+Object.defineProperty(exports, "TOTP_DIGITS", { enumerable: true, get: function () { return signIn_2.TOTP_DIGITS; } });
+Object.defineProperty(exports, "TOTP_PERIOD_SECONDS", { enumerable: true, get: function () { return signIn_2.TOTP_PERIOD_SECONDS; } });
+Object.defineProperty(exports, "TOTP_BACKUP_CODE_COUNT", { enumerable: true, get: function () { return signIn_2.TOTP_BACKUP_CODE_COUNT; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_LONG_CODE_ALPHABET", { enumerable: true, get: function () { return signIn_2.EMAIL_SIGNIN_LONG_CODE_ALPHABET; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_LONG_CODE_LENGTH", { enumerable: true, get: function () { return signIn_2.EMAIL_SIGNIN_LONG_CODE_LENGTH; } });
+Object.defineProperty(exports, "normalizeEmailSignInCode", { enumerable: true, get: function () { return signIn_2.normalizeEmailSignInCode; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_CHOICE_TTL_MS", { enumerable: true, get: function () { return signIn_2.EMAIL_SIGNIN_CHOICE_TTL_MS; } });
+Object.defineProperty(exports, "EMAIL_ACCOUNTS_MAX", { enumerable: true, get: function () { return signIn_2.EMAIL_ACCOUNTS_MAX; } });
+Object.defineProperty(exports, "isSecondFactorRequired", { enumerable: true, get: function () { return signIn_2.isSecondFactorRequired; } });
+Object.defineProperty(exports, "isEmailSignInChooseAccount", { enumerable: true, get: function () { return signIn_2.isEmailSignInChooseAccount; } });
+Object.defineProperty(exports, "REAUTH_ACTIONS", { enumerable: true, get: function () { return signIn_2.REAUTH_ACTIONS; } });
+Object.defineProperty(exports, "SIGN_IN_ERROR_CODES", { enumerable: true, get: function () { return signIn_2.SIGN_IN_ERROR_CODES; } });
 const sixDigits = zod_1.z
     .string()
     .trim()
@@ -84,17 +68,17 @@ const opaqueTokenSchema = accountEmail_1.emailTicketSchema;
 /** A username or an email. */
 exports.signInIdentifierSchema = zod_1.z.string().trim().min(1).max(254);
 /** A password as typed. Its policy applies only when one is set. */
-exports.passwordInputSchema = zod_1.z.string().min(1).max(exports.PASSWORD_MAX_LENGTH);
+exports.passwordInputSchema = zod_1.z.string().min(1).max(signIn_1.PASSWORD_MAX_LENGTH);
 /** A new password. */
 exports.newPasswordSchema = zod_1.z
     .string()
-    .min(exports.PASSWORD_MIN_LENGTH, `password must be at least ${exports.PASSWORD_MIN_LENGTH} characters`)
-    .max(exports.PASSWORD_MAX_LENGTH, `password must be at most ${exports.PASSWORD_MAX_LENGTH} characters`);
+    .min(signIn_1.PASSWORD_MIN_LENGTH, `password must be at least ${signIn_1.PASSWORD_MIN_LENGTH} characters`)
+    .max(signIn_1.PASSWORD_MAX_LENGTH, `password must be at most ${signIn_1.PASSWORD_MAX_LENGTH} characters`);
 /**
  * An authenticator code (6 digits) or a backup code (10 characters, with or
  * without its dash). Normalised server-side.
  */
-exports.secondFactorCodeSchema = zod_1.z.string().trim().min(exports.TOTP_DIGITS).max(16);
+exports.secondFactorCodeSchema = zod_1.z.string().trim().min(signIn_1.TOTP_DIGITS).max(16);
 /** The device-session fields every body that ends in a session may carry. */
 const sessionEnvelope = {
     deviceName: zod_1.z.string().trim().min(1).max(120).optional(),
@@ -127,11 +111,11 @@ exports.emailSignInCodeSchema = zod_1.z
     .string()
     .trim()
     .refine((value) => {
-    const code = normalizeEmailSignInCode(value);
+    const code = (0, signIn_1.normalizeEmailSignInCode)(value);
     return (new RegExp(`^\\d{${accountEmail_1.EMAIL_CODE_LENGTH}}$`).test(code) ||
-        new RegExp(`^[${exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET}]{${exports.EMAIL_SIGNIN_LONG_CODE_LENGTH}}$`).test(code));
+        new RegExp(`^[${signIn_1.EMAIL_SIGNIN_LONG_CODE_ALPHABET}]{${signIn_1.EMAIL_SIGNIN_LONG_CODE_LENGTH}}$`).test(code));
 }, {
-    message: `code must be ${accountEmail_1.EMAIL_CODE_LENGTH} digits or the ${exports.EMAIL_SIGNIN_LONG_CODE_LENGTH}-character code from the email`,
+    message: `code must be ${accountEmail_1.EMAIL_CODE_LENGTH} digits or the ${signIn_1.EMAIL_SIGNIN_LONG_CODE_LENGTH}-character code from the email`,
 });
 /** `POST /auth/signin/email/confirm` — the code from the email. */
 exports.emailSignInConfirmRequestSchema = zod_1.z
@@ -199,13 +183,6 @@ exports.emailSignInPendingSchema = zod_1.z.object({
     status: zod_1.z.literal('pending'),
     expiresAt: zod_1.z.number().int().positive(),
 });
-/**
- * How long, once the email is proven, the person has to choose which of its
- * accounts signs in.
- */
-exports.EMAIL_SIGNIN_CHOICE_TTL_MS = 5 * 60 * 1000;
-/** Most accounts one email can hold; sign-up refuses another past it. */
-exports.EMAIL_ACCOUNTS_MAX = 20;
 exports.emailSignInAccountOptionSchema = zod_1.z.object({
     id: zod_1.z.string().min(1).max(64),
     username: zod_1.z.string().min(1).optional(),
@@ -214,7 +191,7 @@ exports.emailSignInAccountOptionSchema = zod_1.z.object({
 });
 exports.emailSignInChooseAccountSchema = zod_1.z.object({
     chooseAccount: zod_1.z.literal(true),
-    accounts: zod_1.z.array(exports.emailSignInAccountOptionSchema).min(2).max(exports.EMAIL_ACCOUNTS_MAX),
+    accounts: zod_1.z.array(exports.emailSignInAccountOptionSchema).min(2).max(signIn_1.EMAIL_ACCOUNTS_MAX),
     expiresAt: zod_1.z.number().int().positive(),
 });
 /** `POST /auth/signin/email/choose` — the account, from those {@link EmailSignInChooseAccount} listed. */
@@ -226,27 +203,8 @@ exports.emailSignInChooseRequestSchema = zod_1.z
     ...sessionEnvelope,
 })
     .strict();
-/** Narrow a {@link SignInStepResult}. */
-function isSecondFactorRequired(result) {
-    return result.secondFactorRequired === true;
-}
-/** Narrow an {@link EmailSignInStepResult}. */
-function isEmailSignInChooseAccount(result) {
-    return result.chooseAccount === true;
-}
-/**
- * What a re-verification email code confirms. The code is bound to it: a code
- * asked for one change never authorises another, and the email names it.
- */
-exports.REAUTH_ACTIONS = [
-    'change_password',
-    'totp',
-    'link_commons',
-    'delete_account',
-    'credentials_manage',
-];
 /** `POST /users/me/reauth/email` */
-exports.reauthEmailStartRequestSchema = zod_1.z.object({ action: zod_1.z.enum(exports.REAUTH_ACTIONS) }).strict();
+exports.reauthEmailStartRequestSchema = zod_1.z.object({ action: zod_1.z.enum(signIn_1.REAUTH_ACTIONS) }).strict();
 /**
  * A fresh proof that the person, not only their session, is asking: the
  * current password, or a code just sent to the account's email
@@ -307,7 +265,7 @@ exports.totpConfirmRequestSchema = zod_1.z
     code: zod_1.z
         .string()
         .trim()
-        .regex(new RegExp(`^\\d{${exports.TOTP_DIGITS}}$`)),
+        .regex(new RegExp(`^\\d{${signIn_1.TOTP_DIGITS}}$`)),
     reauth: exports.reauthProofSchema,
 })
     .strict();
@@ -316,41 +274,5 @@ exports.totpReauthRequestSchema = zod_1.z.object({ reauth: exports.reauthProofSc
 exports.totpBackupCodesResponseSchema = zod_1.z.object({
     backupCodes: zod_1.z
         .array(zod_1.z.string().regex(/^[a-z2-9]{5}-[a-z2-9]{5}$/))
-        .length(exports.TOTP_BACKUP_CODE_COUNT),
+        .length(signIn_1.TOTP_BACKUP_CODE_COUNT),
 });
-/**
- * Stable error codes (`error.code` in the API error body). Clients map these
- * through their localization, never the English message.
- */
-exports.SIGN_IN_ERROR_CODES = {
-    /** Wrong identifier or password — never says which. */
-    invalidCredentials: 'SIGNIN_INVALID_CREDENTIALS',
-    /** The request is unknown, expired, spent, or its secret is wrong. */
-    requestInvalid: 'SIGNIN_REQUEST_INVALID',
-    /** The link is unknown, expired or already used. */
-    linkInvalid: 'SIGNIN_LINK_INVALID',
-    /** The link was opened in another browser: type the code in the app instead. */
-    linkOtherDevice: 'SIGNIN_LINK_OTHER_DEVICE',
-    /** The second-factor challenge or its code is wrong, expired or spent. */
-    secondFactorInvalid: 'SECOND_FACTOR_INVALID',
-    /** Too many failures for this account: wait and try again. */
-    locked: 'SIGNIN_LOCKED',
-    /** The step needs a fresh proof (`reauth`). */
-    reauthRequired: 'REAUTH_REQUIRED',
-    /** The fresh proof was wrong. */
-    reauthInvalid: 'REAUTH_INVALID',
-    /** The account has an authenticator: the proof must carry its code. */
-    totpRequired: 'TOTP_REQUIRED',
-    /** Enrolling or confirming an authenticator that is already on. */
-    totpAlreadyEnabled: 'TOTP_ALREADY_ENABLED',
-    /** Disabling, confirming or regenerating codes with no authenticator (or no pending one). */
-    totpNotEnabled: 'TOTP_NOT_ENABLED',
-    /** The code the authenticator showed at enrolment is wrong. */
-    totpCodeInvalid: 'TOTP_CODE_INVALID',
-    /** Only official Oxy apps and auth.oxy.so may sign people in here. */
-    originNotAllowed: 'SIGNIN_ORIGIN_NOT_ALLOWED',
-    /** The username is taken. */
-    usernameTaken: 'USERNAME_TAKEN',
-    /** The email already holds `EMAIL_ACCOUNTS_MAX` accounts: no sign-up adds another. */
-    emailAccountsFull: 'EMAIL_ACCOUNTS_FULL',
-};