@oxy.so/contracts 4.16.0 → 4.21.0

package/dist/types/client/deviceSession.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Device-session checks, without Zod. Schemas: `../deviceSession.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+/**
+ * Name of the token-free Socket.IO event emitted to room `user:<userId>` on
+ * every DeviceSession mutation that changes what is signed in for that user.
+ *
+ * This is a pure SIGNAL — it carries NO access token, NO deviceSecret and NO
+ * account bodies. A client that receives it re-fetches its authenticated
+ * session/account state (`GET /session/device/state`, `GET /accounts`). Unlike
+ * `session_state` (scoped to `device:<deviceId>`, i.e. a single origin), this
+ * reaches ALL of a user's connected sockets across their devices/origins so
+ * every Oxy app reflects an add / switch / signout instantly.
+ */
+export declare const SESSION_ACCOUNTS_CHANGED_EVENT = "session_accounts_changed";
+export declare const deviceSessionStateCheck: import("./check").Check<{
+    updatedAt: number;
+    activeAccountId: string | null;
+    deviceId: string;
+    accounts: {
+        accountId: string;
+        sessionId: string;
+        authuser: number;
+        operatedByUserId?: string | undefined;
+    }[];
+    revision: number;
+}>;
+export declare const activeTokenCheck: import("./check").Check<{
+    expiresAt: string;
+    accessToken: string;
+}>;
+export declare const deviceSessionSyncCheck: import("./check").Check<{
+    state: {
+        updatedAt: number;
+        activeAccountId: string | null;
+        deviceId: string;
+        accounts: {
+            accountId: string;
+            sessionId: string;
+            authuser: number;
+            operatedByUserId?: string | undefined;
+        }[];
+        revision: number;
+    };
+    activeToken: {
+        expiresAt: string;
+        accessToken: string;
+    } | null;
+}>;
+export declare const deviceTokenMintResponseCheck: import("./check").Check<{
+    expiresAt: string;
+    accessToken: string;
+    state: {
+        updatedAt: number;
+        activeAccountId: string | null;
+        deviceId: string;
+        accounts: {
+            accountId: string;
+            sessionId: string;
+            authuser: number;
+            operatedByUserId?: string | undefined;
+        }[];
+        revision: number;
+    };
+    nextDeviceSecret: string;
+}>;
+export declare const sessionAccountsChangedEventCheck: import("./check").Check<{
+    reason: "login" | "add" | "switch" | "signout" | "revoke";
+    revision: number;
+    userId: string;
+}>;
+export declare const deviceBackgroundCredentialResponseCheck: import("./check").Check<{
+    accountId: string;
+    expiresAt: string;
+    deviceId: string;
+    secret: string;
+}>;
+export declare const deviceRegisterResponseCheck: import("./check").Check<{
+    deviceId: string;
+    deviceSecret: string;
+}>;
+export declare const deviceJoinResponseCheck: import("./check").Check<{
+    deviceId: string;
+    deviceSecret: string;
+}>;
+export declare const deviceJoinCodeResponseCheck: import("./check").Check<{
+    code: string;
+    expiresIn: number;
+}>;

package/dist/types/client/externalIdentity.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The external-identity reference check, without Zod. Schemas: `../externalIdentity.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+/** One Oxy-proven network alias of a profile — the twin of `externalIdentityReferenceSchema`. */
+export declare const externalIdentityReferenceCheck: import("./check").Check<{
+    canonicalAcct: string;
+    network: string;
+    protocol: "activitypub" | "atproto" | "instagram-graph";
+    actorUri: string;
+    transportAcct: string;
+    sourceUserId: string;
+}>;

package/dist/types/client/identity.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The signed-record envelope check, without Zod. Schemas: `../identity.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+import type { SignedRecordEnvelope } from '../identity';
+/** The twin of `signedRecordEnvelopeSchema`: v2 requires the chain fields, v1 forbids them. */
+export declare const signedRecordEnvelopeCheck: import("./check").Check<SignedRecordEnvelope>;

package/dist/types/client/identityLink.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Identity-link constants, QR payload and response checks, without Zod. Schemas: `../identityLink.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+import type { IdentityLinkCreateResponse, IdentityLinkState } from '../identityLink';
+export declare const IDENTITY_LINK_STATUSES: readonly ["pending", "signed", "completed", "cancelled"];
+export type IdentityLinkStatus = (typeof IDENTITY_LINK_STATUSES)[number];
+/** The scheme and host Commons routes a link QR to. */
+export declare const IDENTITY_LINK_QR_PREFIX = "oxycommons://link";
+export declare const LINK_ID: RegExp;
+export declare const CHALLENGE: RegExp;
+/** The QR auth.oxy.so shows: the request's id and the challenge Commons signs. */
+export declare function buildIdentityLinkQrPayload(linkId: string, challenge: string): string;
+/** The request a scanned code names, or `null` for anything that is not a link QR. */
+export declare function parseIdentityLinkQrPayload(raw: string): {
+    linkId: string;
+    challenge: string;
+} | null;
+export declare const identityLinkCreateResponseCheck: import("./check").Check<IdentityLinkCreateResponse>;
+export declare const identityLinkStateCheck: import("./check").Check<IdentityLinkState>;

package/dist/types/client/identityProof.d.ts

@@ -0,0 +1,73 @@
+/**
+ * The identity-proof message format, without Zod. Schemas: `../identityProof.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+export declare const IDENTITY_PROOF_VERSION: 2;
+export declare const IDENTITY_PROOF_DOMAIN: "oxy-identity-proof";
+/** The audience every API-verified identity proof names. */
+export declare const IDENTITY_PROOF_AUDIENCE: "oxy-api/identity";
+/** How long a proof challenge lives: one interactive ceremony. */
+export declare const IDENTITY_PROOF_CHALLENGE_TTL_MS: number;
+/**
+ * Everything a root proof may authorize. A challenge is minted for exactly one
+ * action and spent only by a proof for that action.
+ */
+export declare const IDENTITY_PROOF_ACTIONS: {
+    /**
+     * Link Commons' root to an account that has none (`POST /auth/link`).
+     * The account becomes self-custodied and its email is deleted
+     * (ADR 0029 D3).
+     */
+    readonly link: "link_identity";
+};
+export type IdentityProofAction = (typeof IDENTITY_PROOF_ACTIONS)[keyof typeof IDENTITY_PROOF_ACTIONS];
+export declare const IDENTITY_PROOF_ACTION_VALUES: [IdentityProofAction, ...IdentityProofAction[]];
+/**
+ * The signed claims. `null` is written explicitly for a field that does not
+ * apply, so "absent" can never be confused with a value.
+ */
+export interface IdentityProofClaims {
+    action: IdentityProofAction;
+    /** The account the operation changes (`users.id`), or a namespaced subject (`username:alice`) before one exists. */
+    subject: string;
+    /** Who performs it: the signed-in personal principal, or `credential:<id>` / `anonymous` where none exists. */
+    actor: string;
+    /** The root doing the signing, lowercase uncompressed hex. */
+    rootPublicKey: string;
+    /** SHA-256 hex of `canonicalJson(payload)`, or `null` when the operation has no payload. */
+    payloadDigest: string | null;
+    /** The revision the operation expects to replace, or `null` when it replaces nothing. */
+    expectedRevision: number | null;
+    audience: string;
+    /** The one-use server challenge. */
+    challenge: string;
+    /** Unix milliseconds after which the proof is refused. */
+    expiresAt: number;
+}
+export declare const HEX_DIGEST: RegExp;
+export declare const ROOT_KEY: RegExp;
+export declare const CHALLENGE: RegExp;
+/**
+ * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace,
+ * `undefined` members omitted, arrays in order. Numbers must be finite. This is
+ * the ONLY serializer for anything digested into a proof.
+ */
+export declare function canonicalJson(value: unknown): string;
+/**
+ * The exact bytes a root signs. Throws on a malformed claim rather than signing
+ * (or verifying) something ambiguous.
+ */
+export declare function buildIdentityProofMessage(claims: IdentityProofClaims): string;
+/**
+ * Stable error codes the root routes answer with (`error.code` in the API error
+ * body). Clients map these through their localization, never the English message.
+ */
+export declare const IDENTITY_ERROR_CODES: {
+    readonly proofInvalid: "IDENTITY_PROOF_INVALID";
+    readonly rootAlreadyLinked: "IDENTITY_ROOT_ALREADY_LINKED";
+    readonly rootLinkedElsewhere: "IDENTITY_ROOT_LINKED_ELSEWHERE";
+    readonly freshFactorRequired: "IDENTITY_FRESH_FACTOR_REQUIRED";
+    readonly notPersonal: "IDENTITY_NOT_PERSONAL_ACCOUNT";
+};
+export type IdentityErrorCode = (typeof IDENTITY_ERROR_CODES)[keyof typeof IDENTITY_ERROR_CODES];

package/dist/types/client/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * `@oxy.so/contracts/client` — the contracts without Zod, for client bundles.
+ *
+ * The root entry is the contract: Zod schemas the API parses with, and the
+ * types inferred from them. Zod's runtime is ~120 KB of JavaScript, evaluated
+ * at startup, that a client only needed to answer "does this response have
+ * the shape its type promises". This entry answers that with small structural
+ * checks (`*Check`, used through {@link checkContract} / {@link parseContract}),
+ * and carries the constants and pure helpers clients use, so an app or SDK
+ * that imports only from here ships no Zod at all.
+ *
+ * Every check is the twin of one schema in the root entry: it is tied to the
+ * schema's type at compile time (`exact` in `./check.ts`) and to its runtime
+ * behaviour by `__tests__/clientChecks.parity.test.ts`. Types are not repeated
+ * here; import them from `@oxy.so/contracts` with `import type`.
+ */
+export { type Check, type CheckIssue, type CheckPath, type CheckResult, ContractCheckError, checkContract, formatCheckPath, parseContract, } from './check';
+export { ACCOUNT_CATEGORY_IDS, ACCOUNT_CATEGORY_KINDS, ACCOUNT_KINDS, CHILD_ACCOUNT_KINDS, MAX_ACCOUNT_CATEGORIES, RETIRED_ACCOUNT_CATEGORY_IDS, SELECTABLE_ACCOUNT_CATEGORY_IDS, isAccountKind, isDelegatedActAsEligibleKind, isOperatorSwitchTargetKind, isSelectableAccountCategoryId, kindAcceptsAccountCategories, newlyAddedRetiredCategories, } from './accountGraph';
+export { EMAIL_CODE_LENGTH, EMAIL_CODE_MAX_ATTEMPTS, EMAIL_CODE_TTL_MS, EMAIL_TICKET_TTL_MS, EMAIL_VERIFICATION_ERROR_CODES, EMAIL_VERIFICATION_PURPOSES, emailAddressCheck, emailTicketCheck, emailVerificationConfirmResponseCheck, emailVerificationStartResponseCheck, } from './accountEmail';
+export { ACCOUNT_AUTH_METHODS, AGENT_PROOF_ACTIONS, AGENT_PROOF_AUDIENCE, AGENT_PROOF_TTL_MS, agentChallengeRequestCheck, agentKeyListResponseCheck, agentKeyOperationChallengeCheck, agentKeyOperationCheck, agentKeyOperationResultCheck, agentProofClaimsCheck, agentVerifyRequestCheck, executeAgentKeyOperationCheck, } from './agentKeys';
+export { isLoopbackOrigin } from '../capabilityBindings';
+export { loginResultCheck } from './deviceBoot';
+export { externalIdentityReferenceCheck } from './externalIdentity';
+export { signedRecordEnvelopeCheck } from './identity';
+export { deviceActivateResponseCheck, deviceDirectoryCheck, deviceDirectorySyncCheck, } from './deviceDirectory';
+export { SESSION_ACCOUNTS_CHANGED_EVENT, activeTokenCheck, deviceBackgroundCredentialResponseCheck, deviceJoinCodeResponseCheck, deviceJoinResponseCheck, deviceRegisterResponseCheck, deviceSessionStateCheck, deviceSessionSyncCheck, deviceTokenMintResponseCheck, sessionAccountsChangedEventCheck, } from './deviceSession';
+export { IDENTITY_LINK_QR_PREFIX, IDENTITY_LINK_STATUSES, buildIdentityLinkQrPayload, identityLinkCreateResponseCheck, identityLinkStateCheck, parseIdentityLinkQrPayload, } from './identityLink';
+export { IDENTITY_ERROR_CODES, IDENTITY_PROOF_ACTIONS, IDENTITY_PROOF_ACTION_VALUES, IDENTITY_PROOF_AUDIENCE, IDENTITY_PROOF_CHALLENGE_TTL_MS, IDENTITY_PROOF_DOMAIN, IDENTITY_PROOF_VERSION, buildIdentityProofMessage, canonicalJson, } from './identityProof';
+export { ORGANIZATION_ALIAS_KINDS, ORGANIZATION_CLAIM_DECISIONS, ORGANIZATION_CLAIM_STATUSES, ORGANIZATION_ERROR_CODES, ORGANIZATION_NAME_MAX_LENGTH, ORGANIZATION_STATUSES, ORGANIZATION_TYPES, createOrganizationCheck, organizationBatchCheck, organizationCheck, organizationClaimCheck, organizationClaimDetailCheck, organizationClaimInputCheck, organizationClaimListCheck, organizationClaimReviewCheck, organizationCurationResultCheck, organizationExternalCheck, organizationExternalResolutionCheck, organizationImportBatchResultCheck, organizationListCheck, organizationNameCheck, updateOrganizationCheck, } from './organizations';
+export { cancelProductSubscriptionCheck, personalPlanCatalogueCheck, personalPlanCheckoutRequestCheck, personalPlanCheckoutResultCheck, productSubscriptionCancellationResultCheck, productSubscriptionsResponseCheck, subjectProductAccessCheck, subjectProductAccessQueryCheck, subscriptionCreditGrantsResponseCheck, } from './products';
+export { recommendationRequestCheck } from './recommendations';
+export { isFullReputationBalance } from './reputation';
+export { PURCHASE_APPROVAL_STATUSES, SAFETY_POLICY_VERSION, SUPERVISED_ACTIONS, SUPERVISION_CONSENT_VERSION, SUPERVISION_INVITATION_STATUSES, SUPERVISION_STATUSES, profileAccessDecisionCheck, profileAccessInputCheck, purchaseApprovalCheck, purchaseApprovalListCheck, purchaseReviewInputCheck, safetyOrganizationsInputCheck, safetyOrganizationsResponseCheck, safetyPeopleInputCheck, safetyPeopleResponseCheck, supervisionAcceptInputCheck, supervisionContactInputCheck, supervisionContactsResponseCheck, supervisionInvitationCheck, supervisionInviteInputCheck, supervisionReviewInputCheck, supervisionStateCheck, } from './safety';
+export { publicApplicationCheck } from './sessionStatus';
+export { EMAIL_ACCOUNTS_MAX, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_SIGNIN_LINK_TTL_MS, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, REAUTH_ACTIONS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGN_IN_ERROR_CODES, TOTP_BACKUP_CODE_COUNT, TOTP_DIGITS, TOTP_PERIOD_SECONDS, emailSignInChooseAccountCheck, emailSignInLinkResponseCheck, emailSignInPendingCheck, emailSignInStartResponseCheck, isEmailSignInChooseAccount, isSecondFactorRequired, normalizeEmailSignInCode, reauthProofCheck, secondFactorRequiredCheck, signInMethodsCheck, totpBackupCodesResponseCheck, totpEnrollResponseCheck, } from './signIn';
+export { BOT_USERNAME_INVALID_MESSAGE, BOT_USERNAME_SUFFIX, NUMERIC_USERNAME_MESSAGE, RESERVED_USERNAMES, RESERVED_USERNAME_MESSAGE, USERNAME_INVALID_MESSAGE, USERNAME_MAX_LENGTH, USERNAME_MIN_LENGTH, USERNAME_PATTERN_SOURCE, applyBotUsernameSuffix, botUsernameCheck, stripDisallowedUsernameCharacters, usernameCheck, usernameCheckForAccountKind, } from './username';
+export { userNameCheck } from './userResponse';

package/dist/types/client/organizations.d.ts

@@ -0,0 +1,167 @@
+/**
+ * Organization vocabularies and checks, without Zod. Schemas: `../organizations.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+import { type Check } from './check';
+/** Real-world identity classification, independent of account topics and permissions. */
+export declare const ORGANIZATION_TYPES: readonly ["business", "nonprofit", "public_body", "community", "other"];
+export declare const ORGANIZATION_STATUSES: readonly ["active", "inactive", "merged", "suppressed"];
+export declare const ORGANIZATION_CLAIM_STATUSES: readonly ["unclaimed", "claimed"];
+export declare const ORGANIZATION_ALIAS_KINDS: readonly ["name_variant", "former_name", "localized_name", "marketing_name", "misspelling"];
+export declare const ORGANIZATION_CLAIM_DECISIONS: readonly ["pending", "approved", "rejected"];
+export declare const ORGANIZATION_NAME_MAX_LENGTH = 300;
+export declare const ORGANIZATION_ERROR_CODES: readonly ["bad_request", "unauthorized", "forbidden", "not_found", "unknown_route", "conflict", "validation_failed", "rate_limited", "internal_error", "service_unavailable"];
+/** The twin of `organizationNameSchema`. */
+export declare const organizationNameCheck: Check<string>;
+export declare const createOrganizationCheck: Check<{
+    name: string;
+    organizationType: "business" | "nonprofit" | "public_body" | "community" | "other";
+    legalName?: string | null | undefined;
+    websiteUrl?: string | null | undefined;
+    countryCode?: string | null | undefined;
+    aliases?: {
+        alias: string;
+        kind: "name_variant" | "former_name" | "localized_name" | "marketing_name" | "misspelling";
+        language?: string | undefined;
+    }[] | undefined;
+}>;
+export declare const updateOrganizationCheck: Check<{
+    name?: string | undefined;
+    organizationType?: "business" | "nonprofit" | "public_body" | "community" | "other" | undefined;
+    legalName?: string | null | undefined;
+    websiteUrl?: string | null | undefined;
+    countryCode?: string | null | undefined;
+    aliases?: {
+        alias: string;
+        kind: "name_variant" | "former_name" | "localized_name" | "marketing_name" | "misspelling";
+        language?: string | undefined;
+    }[] | undefined;
+}>;
+export declare const organizationCheck: Check<{
+    status: "active" | "inactive" | "merged" | "suppressed";
+    name: string;
+    organizationType: "business" | "nonprofit" | "public_body" | "community" | "other";
+    legalName: string | null;
+    websiteUrl: string | null;
+    countryCode: string | null;
+    aliases: {
+        alias: string;
+        kind: "name_variant" | "former_name" | "localized_name" | "marketing_name" | "misspelling";
+        language?: string | undefined;
+    }[];
+    accountId: string;
+    username: string | null;
+    avatar: string | null;
+    verifiedDomains: string[];
+    claimStatus: "unclaimed" | "claimed";
+    mergedIntoAccountId: string | null;
+    createdAt: string;
+    updatedAt: string;
+}>;
+export declare const organizationListCheck: Check<{
+    items: {
+        status: "active" | "inactive" | "merged" | "suppressed";
+        name: string;
+        organizationType: "business" | "nonprofit" | "public_body" | "community" | "other";
+        legalName: string | null;
+        websiteUrl: string | null;
+        countryCode: string | null;
+        aliases: {
+            alias: string;
+            kind: "name_variant" | "former_name" | "localized_name" | "marketing_name" | "misspelling";
+            language?: string | undefined;
+        }[];
+        accountId: string;
+        username: string | null;
+        avatar: string | null;
+        verifiedDomains: string[];
+        claimStatus: "unclaimed" | "claimed";
+        mergedIntoAccountId: string | null;
+        createdAt: string;
+        updatedAt: string;
+    }[];
+    nextCursor: string | null;
+}>;
+export declare const organizationBatchCheck: Check<{
+    items: {
+        requestedAccountId: string;
+        organization: {
+            status: "active" | "inactive" | "merged" | "suppressed";
+            name: string;
+            organizationType: "business" | "nonprofit" | "public_body" | "community" | "other";
+            legalName: string | null;
+            websiteUrl: string | null;
+            countryCode: string | null;
+            aliases: {
+                alias: string;
+                kind: "name_variant" | "former_name" | "localized_name" | "marketing_name" | "misspelling";
+                language?: string | undefined;
+            }[];
+            accountId: string;
+            username: string | null;
+            avatar: string | null;
+            verifiedDomains: string[];
+            claimStatus: "unclaimed" | "claimed";
+            mergedIntoAccountId: string | null;
+            createdAt: string;
+            updatedAt: string;
+        };
+    }[];
+    missingIds: string[];
+}>;
+export declare const organizationClaimInputCheck: Check<{
+    evidenceReference: string;
+}>;
+export declare const organizationClaimCheck: Check<{
+    status: "pending" | "approved" | "rejected";
+    accountId: string;
+    createdAt: string;
+    id: string;
+    claimantUserId: string;
+}>;
+export declare const organizationClaimDetailCheck: Check<{
+    status: "pending" | "approved" | "rejected";
+    accountId: string;
+    createdAt: string;
+    evidenceReference: string;
+    id: string;
+    claimantUserId: string;
+    reviewEvidenceReference: string | null;
+    reviewedAt: string | null;
+}>;
+export declare const organizationClaimListCheck: Check<{
+    items: {
+        status: "pending" | "approved" | "rejected";
+        accountId: string;
+        createdAt: string;
+        evidenceReference: string;
+        id: string;
+        claimantUserId: string;
+        reviewEvidenceReference: string | null;
+        reviewedAt: string | null;
+    }[];
+    nextCursor: string | null;
+}>;
+export declare const organizationClaimReviewCheck: Check<{
+    evidenceReference: string;
+    decision: "approved" | "rejected";
+}>;
+export declare const organizationImportBatchResultCheck: Check<{
+    items: {
+        accountId: string;
+        externalId: string;
+        created: boolean;
+    }[];
+}>;
+export declare const organizationExternalCheck: Check<{
+    accountId: string;
+    created: boolean;
+}>;
+export declare const organizationExternalResolutionCheck: Check<{
+    accountId: string;
+}>;
+export declare const organizationCurationResultCheck: Check<{
+    status: "active" | "inactive" | "suppressed";
+    accountId: string;
+}>;

package/dist/types/client/products.d.ts

@@ -0,0 +1,145 @@
+/**
+ * Product access, plans, checkout and subscription checks, without Zod.
+ * Schemas: `../products/*.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+export declare const subjectProductAccessQueryCheck: import("./check").Check<{
+    schemaVersion: 1;
+    subjectAccountId: string & import("zod").BRAND<"OxyAccountId">;
+    productId: string;
+}>;
+export declare const subjectProductAccessCheck: import("./check").Check<{
+    schemaVersion: 1;
+    subjectAccountId: string & import("zod").BRAND<"OxyAccountId">;
+    capabilities: {
+        key: string;
+        grantIds: string[];
+    }[];
+    evaluatedAt: string;
+    productId: string;
+    quotas: {
+        key: string;
+        unit: string;
+        included: number;
+        combination: "maximum" | "sum" | "exclusive";
+        grantIds: string[];
+    }[];
+    conflicts: {
+        key: string;
+        reason: "combination_mismatch" | "unit_mismatch" | "exclusive_overlap" | "unsafe_total";
+        grantIds: string[];
+    }[];
+}>;
+export declare const personalPlanCatalogueCheck: import("./check").Check<{
+    schemaVersion: 1;
+    state: "unconfigured" | "configured";
+    purchase: "unavailable";
+    plans: {
+        kind: "oxy_one";
+        displayName: string;
+        audience: "personal";
+        benefits: {
+            displayName: string;
+            benefit: {
+                kind: "capability";
+                key: string;
+                productId: string;
+            } | {
+                kind: "quota";
+                key: string;
+                unit: string;
+                included: number;
+                productId: string;
+                combination: "maximum" | "sum" | "exclusive";
+            };
+        }[];
+        offerId: string;
+        offerVersion: number;
+        price?: {
+            currency: string;
+            amountMinorUnits: number;
+            interval: "month";
+            trial: "none";
+            taxTreatment: "inclusive";
+            merchantTotal: "final";
+        } | undefined;
+    }[];
+}>;
+export declare const personalPlanCheckoutRequestCheck: import("./check").Check<{
+    idempotencyKey: string;
+    offerId: string;
+    offerVersion: number;
+    expectedSubjectAccountId: string & import("zod").BRAND<"OxyAccountId">;
+}>;
+export declare const personalPlanCheckoutResultCheck: import("./check").Check<{
+    reason: "provider_unconfigured" | "offer_unconfigured" | "price_unconfigured";
+    state: "unconfigured";
+} | {
+    state: "pending";
+    intentId: string;
+    checkoutUrl?: string | undefined;
+} | {
+    state: "closed";
+    intentId: string;
+} | {
+    state: "fulfilled";
+    intentId: string;
+}>;
+export declare const productSubscriptionsResponseCheck: import("./check").Check<{
+    subscriptions: {
+        status: "active" | "incomplete" | "canceled" | "incomplete_expired" | "past_due" | "paused" | "trialing" | "unpaid";
+        sourceId: string;
+        cancelAtPeriodEnd: boolean;
+        period: {
+            start: string;
+            end: string;
+        };
+        canCancel: boolean;
+        offers: {
+            displayName: string;
+            period: {
+                start: string;
+                end: string;
+            };
+            offerId: string;
+            offerVersion: number;
+            origin: "bundle" | "individual";
+            segmentId: string;
+            current: boolean;
+            products: {
+                id: string;
+                displayName: string;
+            }[];
+        }[];
+    }[];
+}>;
+export declare const subscriptionCreditGrantsResponseCheck: import("./check").Check<{
+    grants: {
+        createdAt: string;
+        id: string;
+        granted: number;
+        remaining: number;
+        period: {
+            start: string;
+            end: string;
+        };
+        origin: "subscription_payment" | "subscription_proration" | "subscription_promotional_grant";
+        invoiceId: string;
+        consumed: number;
+        clawed: number;
+        promotionId: string | null;
+    }[];
+}>;
+export declare const cancelProductSubscriptionCheck: import("./check").Check<{
+    sourceId: string;
+    actionId?: string | undefined;
+    expectedSubjectAccountId?: (string & import("zod").BRAND<"OxyAccountId">) | undefined;
+}>;
+export declare const productSubscriptionCancellationResultCheck: import("./check").Check<{
+    sourceId: string;
+    cancelAtPeriodEnd: true;
+} | {
+    sourceId: string;
+    reconciliationPending: true;
+}>;

package/dist/types/client/recommendations.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The recommendation-request check, without Zod. Schemas: `../recommendations.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+export declare const recommendationRequestCheck: import("./check").Check<{
+    limit?: number | undefined;
+    clientId?: string | undefined;
+    offset?: number | undefined;
+    excludeTypes?: ("agent" | "federated" | "automated")[] | undefined;
+    excludeIds?: string[] | undefined;
+    boosts?: {
+        userIds: string[];
+        weight: number;
+        reason?: string | undefined;
+    }[] | undefined;
+    signalWeights?: {
+        verified?: number | undefined;
+        graph?: number | undefined;
+        completeness?: number | undefined;
+        curation?: number | undefined;
+        interest?: number | undefined;
+        appBoost?: number | undefined;
+        repCandidate?: number | undefined;
+        affinity?: number | undefined;
+    } | undefined;
+}>;

package/dist/types/client/reputation.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The reputation view guard, without Zod. Schemas: `../reputation.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+import type { ReputationBalance, ReputationBalanceView } from '../reputation';
+/**
+ * The fields the full {@link ReputationBalance} carries beyond the public
+ * {@link ReputationBalanceSummary} that the API sends ALL-OR-NOTHING. The
+ * runtime discriminant between the two views.
+ *
+ * The V2 blocks (`conduct`, `contribution`, …) are deliberately NOT listed:
+ * they are optional on the wire, so requiring them here would make a balance
+ * from a server that predates them fail to narrow, hiding the whole private
+ * view. Read a V2 block by checking that block.
+ */
+export declare const FULL_BALANCE_FIELDS: readonly ["positive", "negative", "breakdown", "influence", "reliability", "recalculatedAt", "updatedAt"];
+/**
+ * Whether a balance came back as the SUBJECT view, and so carries the
+ * breakdown / influence / reliability blocks.
+ *
+ * Checks every extra field rather than one representative: the point of the
+ * guard is that the caller then dereferences those blocks, so a partial payload
+ * must not narrow.
+ *
+ * @param balance - A balance from `getReputationBalance`.
+ */
+export declare function isFullReputationBalance(balance: ReputationBalanceView): balance is ReputationBalance;