@oxy.so/contracts 4.16.0 → 4.21.0

package/dist/cjs/client/identityLink.js

@@ -0,0 +1,55 @@
+"use strict";
+/**
+ * Identity-link constants, QR payload and response checks, without Zod. Schemas: `../identityLink.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.CHALLENGE = exports.LINK_ID = exports.IDENTITY_LINK_QR_PREFIX = exports.IDENTITY_LINK_STATUSES = void 0;
+exports.buildIdentityLinkQrPayload = buildIdentityLinkQrPayload;
+exports.parseIdentityLinkQrPayload = parseIdentityLinkQrPayload;
+const check_1 = require("./check");
+exports.IDENTITY_LINK_STATUSES = ['pending', 'signed', 'completed', 'cancelled'];
+/** The scheme and host Commons routes a link QR to. */
+exports.IDENTITY_LINK_QR_PREFIX = 'oxycommons://link';
+exports.LINK_ID = /^[0-9a-f]{32}$/;
+exports.CHALLENGE = /^[0-9a-f]{64}$/;
+/** The QR auth.oxy.so shows: the request's id and the challenge Commons signs. */
+function buildIdentityLinkQrPayload(linkId, challenge) {
+    return `${exports.IDENTITY_LINK_QR_PREFIX}?id=${linkId}&c=${challenge}`;
+}
+/** The request a scanned code names, or `null` for anything that is not a link QR. */
+function parseIdentityLinkQrPayload(raw) {
+    const value = raw.trim();
+    if (!value.startsWith(`${exports.IDENTITY_LINK_QR_PREFIX}?`))
+        return null;
+    // Parsed by hand: React Native's `URLSearchParams` does not implement `get`.
+    const params = new Map();
+    for (const pair of value.slice(exports.IDENTITY_LINK_QR_PREFIX.length + 1).split('&')) {
+        const separator = pair.indexOf('=');
+        if (separator > 0)
+            params.set(pair.slice(0, separator), pair.slice(separator + 1));
+    }
+    const linkId = params.get('id') ?? '';
+    const challenge = params.get('c') ?? '';
+    if (!exports.LINK_ID.test(linkId) || !exports.CHALLENGE.test(challenge))
+        return null;
+    return { linkId, challenge };
+}
+/* -------------------------------------------------------------------------- */
+/*  Checks                                                                    */
+/* -------------------------------------------------------------------------- */
+exports.identityLinkCreateResponseCheck = (0, check_1.exact)()((0, check_1.object)({
+    linkId: (0, check_1.string)(check_1.trim, (0, check_1.pattern)(exports.LINK_ID, 'linkId must be 32 lowercase hex characters')),
+    challenge: (0, check_1.string)((0, check_1.pattern)(exports.CHALLENGE)),
+    expiresAt: (0, check_1.number)(check_1.int, check_1.positive),
+    qrPayload: (0, check_1.string)((0, check_1.startsWith)(exports.IDENTITY_LINK_QR_PREFIX)),
+}));
+exports.identityLinkStateCheck = (0, check_1.exact)()((0, check_1.object)({
+    status: (0, check_1.oneOf)(exports.IDENTITY_LINK_STATUSES),
+    userId: (0, check_1.string)((0, check_1.minLength)(1)),
+    username: (0, check_1.nullable)((0, check_1.string)()),
+    publicKey: (0, check_1.nullable)((0, check_1.string)()),
+    audience: (0, check_1.string)((0, check_1.minLength)(1)),
+    expiresAt: (0, check_1.number)(check_1.int, check_1.positive),
+}));

package/dist/cjs/client/identityProof.js

@@ -0,0 +1,109 @@
+"use strict";
+/**
+ * The identity-proof message format, without Zod. Schemas: `../identityProof.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IDENTITY_ERROR_CODES = exports.CHALLENGE = exports.ROOT_KEY = exports.HEX_DIGEST = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_VERSION = void 0;
+exports.canonicalJson = canonicalJson;
+exports.buildIdentityProofMessage = buildIdentityProofMessage;
+exports.IDENTITY_PROOF_VERSION = 2;
+exports.IDENTITY_PROOF_DOMAIN = 'oxy-identity-proof';
+/** The audience every API-verified identity proof names. */
+exports.IDENTITY_PROOF_AUDIENCE = 'oxy-api/identity';
+/** How long a proof challenge lives: one interactive ceremony. */
+exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = 5 * 60 * 1000;
+/**
+ * Everything a root proof may authorize. A challenge is minted for exactly one
+ * action and spent only by a proof for that action.
+ */
+exports.IDENTITY_PROOF_ACTIONS = {
+    /**
+     * Link Commons' root to an account that has none (`POST /auth/link`).
+     * The account becomes self-custodied and its email is deleted
+     * (ADR 0029 D3).
+     */
+    link: 'link_identity',
+};
+exports.IDENTITY_PROOF_ACTION_VALUES = Object.values(exports.IDENTITY_PROOF_ACTIONS);
+exports.HEX_DIGEST = /^[0-9a-f]{64}$/;
+exports.ROOT_KEY = /^04[0-9a-f]{128}$/;
+exports.CHALLENGE = /^[0-9a-f]{64}$/;
+/**
+ * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace,
+ * `undefined` members omitted, arrays in order. Numbers must be finite. This is
+ * the ONLY serializer for anything digested into a proof.
+ */
+function canonicalJson(value) {
+    if (value === null)
+        return 'null';
+    switch (typeof value) {
+        case 'string':
+        case 'boolean':
+            return JSON.stringify(value);
+        case 'number':
+            if (!Number.isFinite(value))
+                throw new Error('canonicalJson: non-finite number');
+            return JSON.stringify(value);
+        case 'object': {
+            if (Array.isArray(value)) {
+                return `[${value.map((entry) => (entry === undefined ? 'null' : canonicalJson(entry))).join(',')}]`;
+            }
+            const record = value;
+            const keys = Object.keys(record)
+                .filter((key) => record[key] !== undefined)
+                .sort();
+            return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(',')}}`;
+        }
+        default:
+            throw new Error(`canonicalJson: unsupported ${typeof value}`);
+    }
+}
+/**
+ * The exact bytes a root signs. Throws on a malformed claim rather than signing
+ * (or verifying) something ambiguous.
+ */
+function buildIdentityProofMessage(claims) {
+    if (!exports.IDENTITY_PROOF_ACTION_VALUES.includes(claims.action))
+        throw new Error('identity proof: unknown action');
+    if (!claims.subject || !claims.actor)
+        throw new Error('identity proof: subject and actor are required');
+    if (!exports.ROOT_KEY.test(claims.rootPublicKey))
+        throw new Error('identity proof: rootPublicKey must be canonical');
+    if (claims.payloadDigest !== null && !exports.HEX_DIGEST.test(claims.payloadDigest)) {
+        throw new Error('identity proof: payloadDigest must be a lowercase SHA-256 hex digest');
+    }
+    if (claims.expectedRevision !== null &&
+        (!Number.isSafeInteger(claims.expectedRevision) || claims.expectedRevision < 0)) {
+        throw new Error('identity proof: expectedRevision must be a non-negative integer');
+    }
+    if (!exports.CHALLENGE.test(claims.challenge))
+        throw new Error('identity proof: challenge must be 64 lowercase hex characters');
+    if (!Number.isSafeInteger(claims.expiresAt) || claims.expiresAt <= 0)
+        throw new Error('identity proof: expiresAt must be unix milliseconds');
+    return canonicalJson({
+        v: exports.IDENTITY_PROOF_VERSION,
+        domain: exports.IDENTITY_PROOF_DOMAIN,
+        action: claims.action,
+        subject: claims.subject,
+        actor: claims.actor,
+        rootPublicKey: claims.rootPublicKey,
+        payloadDigest: claims.payloadDigest,
+        expectedRevision: claims.expectedRevision,
+        audience: claims.audience,
+        challenge: claims.challenge,
+        expiresAt: claims.expiresAt,
+    });
+}
+/**
+ * Stable error codes the root routes answer with (`error.code` in the API error
+ * body). Clients map these through their localization, never the English message.
+ */
+exports.IDENTITY_ERROR_CODES = {
+    proofInvalid: 'IDENTITY_PROOF_INVALID',
+    rootAlreadyLinked: 'IDENTITY_ROOT_ALREADY_LINKED',
+    rootLinkedElsewhere: 'IDENTITY_ROOT_LINKED_ELSEWHERE',
+    freshFactorRequired: 'IDENTITY_FRESH_FACTOR_REQUIRED',
+    notPersonal: 'IDENTITY_NOT_PERSONAL_ACCOUNT',
+};

package/dist/cjs/client/index.js

@@ -0,0 +1,211 @@
+"use strict";
+/**
+ * `@oxy.so/contracts/client` — the contracts without Zod, for client bundles.
+ *
+ * The root entry is the contract: Zod schemas the API parses with, and the
+ * types inferred from them. Zod's runtime is ~120 KB of JavaScript, evaluated
+ * at startup, that a client only needed to answer "does this response have
+ * the shape its type promises". This entry answers that with small structural
+ * checks (`*Check`, used through {@link checkContract} / {@link parseContract}),
+ * and carries the constants and pure helpers clients use, so an app or SDK
+ * that imports only from here ships no Zod at all.
+ *
+ * Every check is the twin of one schema in the root entry: it is tied to the
+ * schema's type at compile time (`exact` in `./check.ts`) and to its runtime
+ * behaviour by `__tests__/clientChecks.parity.test.ts`. Types are not repeated
+ * here; import them from `@oxy.so/contracts` with `import type`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deviceJoinCodeResponseCheck = exports.deviceBackgroundCredentialResponseCheck = exports.activeTokenCheck = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceDirectorySyncCheck = exports.deviceDirectoryCheck = exports.deviceActivateResponseCheck = exports.signedRecordEnvelopeCheck = exports.externalIdentityReferenceCheck = exports.loginResultCheck = exports.isLoopbackOrigin = exports.executeAgentKeyOperationCheck = exports.agentVerifyRequestCheck = exports.agentProofClaimsCheck = exports.agentKeyOperationResultCheck = exports.agentKeyOperationCheck = exports.agentKeyOperationChallengeCheck = exports.agentKeyListResponseCheck = exports.agentChallengeRequestCheck = exports.AGENT_PROOF_TTL_MS = exports.AGENT_PROOF_AUDIENCE = exports.AGENT_PROOF_ACTIONS = exports.ACCOUNT_AUTH_METHODS = exports.emailVerificationStartResponseCheck = exports.emailVerificationConfirmResponseCheck = exports.emailTicketCheck = exports.emailAddressCheck = exports.EMAIL_VERIFICATION_PURPOSES = exports.EMAIL_VERIFICATION_ERROR_CODES = exports.EMAIL_TICKET_TTL_MS = exports.EMAIL_CODE_TTL_MS = exports.EMAIL_CODE_MAX_ATTEMPTS = exports.EMAIL_CODE_LENGTH = exports.newlyAddedRetiredCategories = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.isAccountKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.RETIRED_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.CHILD_ACCOUNT_KINDS = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_KINDS = exports.ACCOUNT_CATEGORY_IDS = exports.parseContract = exports.formatCheckPath = exports.checkContract = exports.ContractCheckError = void 0;
+exports.subjectProductAccessCheck = exports.productSubscriptionsResponseCheck = exports.productSubscriptionCancellationResultCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.cancelProductSubscriptionCheck = exports.updateOrganizationCheck = exports.organizationNameCheck = exports.organizationListCheck = exports.organizationImportBatchResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationCurationResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimInputCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationCheck = exports.organizationBatchCheck = exports.createOrganizationCheck = exports.ORGANIZATION_TYPES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.canonicalJson = exports.buildIdentityProofMessage = exports.IDENTITY_PROOF_VERSION = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_ERROR_CODES = exports.parseIdentityLinkQrPayload = exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_STATUSES = exports.IDENTITY_LINK_QR_PREFIX = exports.sessionAccountsChangedEventCheck = exports.deviceTokenMintResponseCheck = exports.deviceSessionSyncCheck = exports.deviceSessionStateCheck = exports.deviceRegisterResponseCheck = exports.deviceJoinResponseCheck = void 0;
+exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.supervisionStateCheck = exports.supervisionReviewInputCheck = exports.supervisionInviteInputCheck = exports.supervisionInvitationCheck = exports.supervisionContactsResponseCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.SUPERVISION_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SUPERVISED_ACTIONS = exports.SAFETY_POLICY_VERSION = exports.PURCHASE_APPROVAL_STATUSES = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = void 0;
+exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = void 0;
+var check_1 = require("./check");
+Object.defineProperty(exports, "ContractCheckError", { enumerable: true, get: function () { return check_1.ContractCheckError; } });
+Object.defineProperty(exports, "checkContract", { enumerable: true, get: function () { return check_1.checkContract; } });
+Object.defineProperty(exports, "formatCheckPath", { enumerable: true, get: function () { return check_1.formatCheckPath; } });
+Object.defineProperty(exports, "parseContract", { enumerable: true, get: function () { return check_1.parseContract; } });
+var accountGraph_1 = require("./accountGraph");
+Object.defineProperty(exports, "ACCOUNT_CATEGORY_IDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_CATEGORY_IDS; } });
+Object.defineProperty(exports, "ACCOUNT_CATEGORY_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_CATEGORY_KINDS; } });
+Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
+Object.defineProperty(exports, "CHILD_ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.CHILD_ACCOUNT_KINDS; } });
+Object.defineProperty(exports, "MAX_ACCOUNT_CATEGORIES", { enumerable: true, get: function () { return accountGraph_1.MAX_ACCOUNT_CATEGORIES; } });
+Object.defineProperty(exports, "RETIRED_ACCOUNT_CATEGORY_IDS", { enumerable: true, get: function () { return accountGraph_1.RETIRED_ACCOUNT_CATEGORY_IDS; } });
+Object.defineProperty(exports, "SELECTABLE_ACCOUNT_CATEGORY_IDS", { enumerable: true, get: function () { return accountGraph_1.SELECTABLE_ACCOUNT_CATEGORY_IDS; } });
+Object.defineProperty(exports, "isAccountKind", { enumerable: true, get: function () { return accountGraph_1.isAccountKind; } });
+Object.defineProperty(exports, "isDelegatedActAsEligibleKind", { enumerable: true, get: function () { return accountGraph_1.isDelegatedActAsEligibleKind; } });
+Object.defineProperty(exports, "isOperatorSwitchTargetKind", { enumerable: true, get: function () { return accountGraph_1.isOperatorSwitchTargetKind; } });
+Object.defineProperty(exports, "isSelectableAccountCategoryId", { enumerable: true, get: function () { return accountGraph_1.isSelectableAccountCategoryId; } });
+Object.defineProperty(exports, "kindAcceptsAccountCategories", { enumerable: true, get: function () { return accountGraph_1.kindAcceptsAccountCategories; } });
+Object.defineProperty(exports, "newlyAddedRetiredCategories", { enumerable: true, get: function () { return accountGraph_1.newlyAddedRetiredCategories; } });
+var accountEmail_1 = require("./accountEmail");
+Object.defineProperty(exports, "EMAIL_CODE_LENGTH", { enumerable: true, get: function () { return accountEmail_1.EMAIL_CODE_LENGTH; } });
+Object.defineProperty(exports, "EMAIL_CODE_MAX_ATTEMPTS", { enumerable: true, get: function () { return accountEmail_1.EMAIL_CODE_MAX_ATTEMPTS; } });
+Object.defineProperty(exports, "EMAIL_CODE_TTL_MS", { enumerable: true, get: function () { return accountEmail_1.EMAIL_CODE_TTL_MS; } });
+Object.defineProperty(exports, "EMAIL_TICKET_TTL_MS", { enumerable: true, get: function () { return accountEmail_1.EMAIL_TICKET_TTL_MS; } });
+Object.defineProperty(exports, "EMAIL_VERIFICATION_ERROR_CODES", { enumerable: true, get: function () { return accountEmail_1.EMAIL_VERIFICATION_ERROR_CODES; } });
+Object.defineProperty(exports, "EMAIL_VERIFICATION_PURPOSES", { enumerable: true, get: function () { return accountEmail_1.EMAIL_VERIFICATION_PURPOSES; } });
+Object.defineProperty(exports, "emailAddressCheck", { enumerable: true, get: function () { return accountEmail_1.emailAddressCheck; } });
+Object.defineProperty(exports, "emailTicketCheck", { enumerable: true, get: function () { return accountEmail_1.emailTicketCheck; } });
+Object.defineProperty(exports, "emailVerificationConfirmResponseCheck", { enumerable: true, get: function () { return accountEmail_1.emailVerificationConfirmResponseCheck; } });
+Object.defineProperty(exports, "emailVerificationStartResponseCheck", { enumerable: true, get: function () { return accountEmail_1.emailVerificationStartResponseCheck; } });
+var agentKeys_1 = require("./agentKeys");
+Object.defineProperty(exports, "ACCOUNT_AUTH_METHODS", { enumerable: true, get: function () { return agentKeys_1.ACCOUNT_AUTH_METHODS; } });
+Object.defineProperty(exports, "AGENT_PROOF_ACTIONS", { enumerable: true, get: function () { return agentKeys_1.AGENT_PROOF_ACTIONS; } });
+Object.defineProperty(exports, "AGENT_PROOF_AUDIENCE", { enumerable: true, get: function () { return agentKeys_1.AGENT_PROOF_AUDIENCE; } });
+Object.defineProperty(exports, "AGENT_PROOF_TTL_MS", { enumerable: true, get: function () { return agentKeys_1.AGENT_PROOF_TTL_MS; } });
+Object.defineProperty(exports, "agentChallengeRequestCheck", { enumerable: true, get: function () { return agentKeys_1.agentChallengeRequestCheck; } });
+Object.defineProperty(exports, "agentKeyListResponseCheck", { enumerable: true, get: function () { return agentKeys_1.agentKeyListResponseCheck; } });
+Object.defineProperty(exports, "agentKeyOperationChallengeCheck", { enumerable: true, get: function () { return agentKeys_1.agentKeyOperationChallengeCheck; } });
+Object.defineProperty(exports, "agentKeyOperationCheck", { enumerable: true, get: function () { return agentKeys_1.agentKeyOperationCheck; } });
+Object.defineProperty(exports, "agentKeyOperationResultCheck", { enumerable: true, get: function () { return agentKeys_1.agentKeyOperationResultCheck; } });
+Object.defineProperty(exports, "agentProofClaimsCheck", { enumerable: true, get: function () { return agentKeys_1.agentProofClaimsCheck; } });
+Object.defineProperty(exports, "agentVerifyRequestCheck", { enumerable: true, get: function () { return agentKeys_1.agentVerifyRequestCheck; } });
+Object.defineProperty(exports, "executeAgentKeyOperationCheck", { enumerable: true, get: function () { return agentKeys_1.executeAgentKeyOperationCheck; } });
+var capabilityBindings_1 = require("../capabilityBindings");
+Object.defineProperty(exports, "isLoopbackOrigin", { enumerable: true, get: function () { return capabilityBindings_1.isLoopbackOrigin; } });
+var deviceBoot_1 = require("./deviceBoot");
+Object.defineProperty(exports, "loginResultCheck", { enumerable: true, get: function () { return deviceBoot_1.loginResultCheck; } });
+var externalIdentity_1 = require("./externalIdentity");
+Object.defineProperty(exports, "externalIdentityReferenceCheck", { enumerable: true, get: function () { return externalIdentity_1.externalIdentityReferenceCheck; } });
+var identity_1 = require("./identity");
+Object.defineProperty(exports, "signedRecordEnvelopeCheck", { enumerable: true, get: function () { return identity_1.signedRecordEnvelopeCheck; } });
+var deviceDirectory_1 = require("./deviceDirectory");
+Object.defineProperty(exports, "deviceActivateResponseCheck", { enumerable: true, get: function () { return deviceDirectory_1.deviceActivateResponseCheck; } });
+Object.defineProperty(exports, "deviceDirectoryCheck", { enumerable: true, get: function () { return deviceDirectory_1.deviceDirectoryCheck; } });
+Object.defineProperty(exports, "deviceDirectorySyncCheck", { enumerable: true, get: function () { return deviceDirectory_1.deviceDirectorySyncCheck; } });
+var deviceSession_1 = require("./deviceSession");
+Object.defineProperty(exports, "SESSION_ACCOUNTS_CHANGED_EVENT", { enumerable: true, get: function () { return deviceSession_1.SESSION_ACCOUNTS_CHANGED_EVENT; } });
+Object.defineProperty(exports, "activeTokenCheck", { enumerable: true, get: function () { return deviceSession_1.activeTokenCheck; } });
+Object.defineProperty(exports, "deviceBackgroundCredentialResponseCheck", { enumerable: true, get: function () { return deviceSession_1.deviceBackgroundCredentialResponseCheck; } });
+Object.defineProperty(exports, "deviceJoinCodeResponseCheck", { enumerable: true, get: function () { return deviceSession_1.deviceJoinCodeResponseCheck; } });
+Object.defineProperty(exports, "deviceJoinResponseCheck", { enumerable: true, get: function () { return deviceSession_1.deviceJoinResponseCheck; } });
+Object.defineProperty(exports, "deviceRegisterResponseCheck", { enumerable: true, get: function () { return deviceSession_1.deviceRegisterResponseCheck; } });
+Object.defineProperty(exports, "deviceSessionStateCheck", { enumerable: true, get: function () { return deviceSession_1.deviceSessionStateCheck; } });
+Object.defineProperty(exports, "deviceSessionSyncCheck", { enumerable: true, get: function () { return deviceSession_1.deviceSessionSyncCheck; } });
+Object.defineProperty(exports, "deviceTokenMintResponseCheck", { enumerable: true, get: function () { return deviceSession_1.deviceTokenMintResponseCheck; } });
+Object.defineProperty(exports, "sessionAccountsChangedEventCheck", { enumerable: true, get: function () { return deviceSession_1.sessionAccountsChangedEventCheck; } });
+var identityLink_1 = require("./identityLink");
+Object.defineProperty(exports, "IDENTITY_LINK_QR_PREFIX", { enumerable: true, get: function () { return identityLink_1.IDENTITY_LINK_QR_PREFIX; } });
+Object.defineProperty(exports, "IDENTITY_LINK_STATUSES", { enumerable: true, get: function () { return identityLink_1.IDENTITY_LINK_STATUSES; } });
+Object.defineProperty(exports, "buildIdentityLinkQrPayload", { enumerable: true, get: function () { return identityLink_1.buildIdentityLinkQrPayload; } });
+Object.defineProperty(exports, "identityLinkCreateResponseCheck", { enumerable: true, get: function () { return identityLink_1.identityLinkCreateResponseCheck; } });
+Object.defineProperty(exports, "identityLinkStateCheck", { enumerable: true, get: function () { return identityLink_1.identityLinkStateCheck; } });
+Object.defineProperty(exports, "parseIdentityLinkQrPayload", { enumerable: true, get: function () { return identityLink_1.parseIdentityLinkQrPayload; } });
+var identityProof_1 = require("./identityProof");
+Object.defineProperty(exports, "IDENTITY_ERROR_CODES", { enumerable: true, get: function () { return identityProof_1.IDENTITY_ERROR_CODES; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_ACTIONS", { enumerable: true, get: function () { return identityProof_1.IDENTITY_PROOF_ACTIONS; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_ACTION_VALUES", { enumerable: true, get: function () { return identityProof_1.IDENTITY_PROOF_ACTION_VALUES; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_AUDIENCE", { enumerable: true, get: function () { return identityProof_1.IDENTITY_PROOF_AUDIENCE; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_CHALLENGE_TTL_MS", { enumerable: true, get: function () { return identityProof_1.IDENTITY_PROOF_CHALLENGE_TTL_MS; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_DOMAIN", { enumerable: true, get: function () { return identityProof_1.IDENTITY_PROOF_DOMAIN; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_VERSION", { enumerable: true, get: function () { return identityProof_1.IDENTITY_PROOF_VERSION; } });
+Object.defineProperty(exports, "buildIdentityProofMessage", { enumerable: true, get: function () { return identityProof_1.buildIdentityProofMessage; } });
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return identityProof_1.canonicalJson; } });
+var organizations_1 = require("./organizations");
+Object.defineProperty(exports, "ORGANIZATION_ALIAS_KINDS", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_ALIAS_KINDS; } });
+Object.defineProperty(exports, "ORGANIZATION_CLAIM_DECISIONS", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_CLAIM_DECISIONS; } });
+Object.defineProperty(exports, "ORGANIZATION_CLAIM_STATUSES", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_CLAIM_STATUSES; } });
+Object.defineProperty(exports, "ORGANIZATION_ERROR_CODES", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_ERROR_CODES; } });
+Object.defineProperty(exports, "ORGANIZATION_NAME_MAX_LENGTH", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_NAME_MAX_LENGTH; } });
+Object.defineProperty(exports, "ORGANIZATION_STATUSES", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_STATUSES; } });
+Object.defineProperty(exports, "ORGANIZATION_TYPES", { enumerable: true, get: function () { return organizations_1.ORGANIZATION_TYPES; } });
+Object.defineProperty(exports, "createOrganizationCheck", { enumerable: true, get: function () { return organizations_1.createOrganizationCheck; } });
+Object.defineProperty(exports, "organizationBatchCheck", { enumerable: true, get: function () { return organizations_1.organizationBatchCheck; } });
+Object.defineProperty(exports, "organizationCheck", { enumerable: true, get: function () { return organizations_1.organizationCheck; } });
+Object.defineProperty(exports, "organizationClaimCheck", { enumerable: true, get: function () { return organizations_1.organizationClaimCheck; } });
+Object.defineProperty(exports, "organizationClaimDetailCheck", { enumerable: true, get: function () { return organizations_1.organizationClaimDetailCheck; } });
+Object.defineProperty(exports, "organizationClaimInputCheck", { enumerable: true, get: function () { return organizations_1.organizationClaimInputCheck; } });
+Object.defineProperty(exports, "organizationClaimListCheck", { enumerable: true, get: function () { return organizations_1.organizationClaimListCheck; } });
+Object.defineProperty(exports, "organizationClaimReviewCheck", { enumerable: true, get: function () { return organizations_1.organizationClaimReviewCheck; } });
+Object.defineProperty(exports, "organizationCurationResultCheck", { enumerable: true, get: function () { return organizations_1.organizationCurationResultCheck; } });
+Object.defineProperty(exports, "organizationExternalCheck", { enumerable: true, get: function () { return organizations_1.organizationExternalCheck; } });
+Object.defineProperty(exports, "organizationExternalResolutionCheck", { enumerable: true, get: function () { return organizations_1.organizationExternalResolutionCheck; } });
+Object.defineProperty(exports, "organizationImportBatchResultCheck", { enumerable: true, get: function () { return organizations_1.organizationImportBatchResultCheck; } });
+Object.defineProperty(exports, "organizationListCheck", { enumerable: true, get: function () { return organizations_1.organizationListCheck; } });
+Object.defineProperty(exports, "organizationNameCheck", { enumerable: true, get: function () { return organizations_1.organizationNameCheck; } });
+Object.defineProperty(exports, "updateOrganizationCheck", { enumerable: true, get: function () { return organizations_1.updateOrganizationCheck; } });
+var products_1 = require("./products");
+Object.defineProperty(exports, "cancelProductSubscriptionCheck", { enumerable: true, get: function () { return products_1.cancelProductSubscriptionCheck; } });
+Object.defineProperty(exports, "personalPlanCatalogueCheck", { enumerable: true, get: function () { return products_1.personalPlanCatalogueCheck; } });
+Object.defineProperty(exports, "personalPlanCheckoutRequestCheck", { enumerable: true, get: function () { return products_1.personalPlanCheckoutRequestCheck; } });
+Object.defineProperty(exports, "personalPlanCheckoutResultCheck", { enumerable: true, get: function () { return products_1.personalPlanCheckoutResultCheck; } });
+Object.defineProperty(exports, "productSubscriptionCancellationResultCheck", { enumerable: true, get: function () { return products_1.productSubscriptionCancellationResultCheck; } });
+Object.defineProperty(exports, "productSubscriptionsResponseCheck", { enumerable: true, get: function () { return products_1.productSubscriptionsResponseCheck; } });
+Object.defineProperty(exports, "subjectProductAccessCheck", { enumerable: true, get: function () { return products_1.subjectProductAccessCheck; } });
+Object.defineProperty(exports, "subjectProductAccessQueryCheck", { enumerable: true, get: function () { return products_1.subjectProductAccessQueryCheck; } });
+Object.defineProperty(exports, "subscriptionCreditGrantsResponseCheck", { enumerable: true, get: function () { return products_1.subscriptionCreditGrantsResponseCheck; } });
+var recommendations_1 = require("./recommendations");
+Object.defineProperty(exports, "recommendationRequestCheck", { enumerable: true, get: function () { return recommendations_1.recommendationRequestCheck; } });
+var reputation_1 = require("./reputation");
+Object.defineProperty(exports, "isFullReputationBalance", { enumerable: true, get: function () { return reputation_1.isFullReputationBalance; } });
+var safety_1 = require("./safety");
+Object.defineProperty(exports, "PURCHASE_APPROVAL_STATUSES", { enumerable: true, get: function () { return safety_1.PURCHASE_APPROVAL_STATUSES; } });
+Object.defineProperty(exports, "SAFETY_POLICY_VERSION", { enumerable: true, get: function () { return safety_1.SAFETY_POLICY_VERSION; } });
+Object.defineProperty(exports, "SUPERVISED_ACTIONS", { enumerable: true, get: function () { return safety_1.SUPERVISED_ACTIONS; } });
+Object.defineProperty(exports, "SUPERVISION_CONSENT_VERSION", { enumerable: true, get: function () { return safety_1.SUPERVISION_CONSENT_VERSION; } });
+Object.defineProperty(exports, "SUPERVISION_INVITATION_STATUSES", { enumerable: true, get: function () { return safety_1.SUPERVISION_INVITATION_STATUSES; } });
+Object.defineProperty(exports, "SUPERVISION_STATUSES", { enumerable: true, get: function () { return safety_1.SUPERVISION_STATUSES; } });
+Object.defineProperty(exports, "profileAccessDecisionCheck", { enumerable: true, get: function () { return safety_1.profileAccessDecisionCheck; } });
+Object.defineProperty(exports, "profileAccessInputCheck", { enumerable: true, get: function () { return safety_1.profileAccessInputCheck; } });
+Object.defineProperty(exports, "purchaseApprovalCheck", { enumerable: true, get: function () { return safety_1.purchaseApprovalCheck; } });
+Object.defineProperty(exports, "purchaseApprovalListCheck", { enumerable: true, get: function () { return safety_1.purchaseApprovalListCheck; } });
+Object.defineProperty(exports, "purchaseReviewInputCheck", { enumerable: true, get: function () { return safety_1.purchaseReviewInputCheck; } });
+Object.defineProperty(exports, "safetyOrganizationsInputCheck", { enumerable: true, get: function () { return safety_1.safetyOrganizationsInputCheck; } });
+Object.defineProperty(exports, "safetyOrganizationsResponseCheck", { enumerable: true, get: function () { return safety_1.safetyOrganizationsResponseCheck; } });
+Object.defineProperty(exports, "safetyPeopleInputCheck", { enumerable: true, get: function () { return safety_1.safetyPeopleInputCheck; } });
+Object.defineProperty(exports, "safetyPeopleResponseCheck", { enumerable: true, get: function () { return safety_1.safetyPeopleResponseCheck; } });
+Object.defineProperty(exports, "supervisionAcceptInputCheck", { enumerable: true, get: function () { return safety_1.supervisionAcceptInputCheck; } });
+Object.defineProperty(exports, "supervisionContactInputCheck", { enumerable: true, get: function () { return safety_1.supervisionContactInputCheck; } });
+Object.defineProperty(exports, "supervisionContactsResponseCheck", { enumerable: true, get: function () { return safety_1.supervisionContactsResponseCheck; } });
+Object.defineProperty(exports, "supervisionInvitationCheck", { enumerable: true, get: function () { return safety_1.supervisionInvitationCheck; } });
+Object.defineProperty(exports, "supervisionInviteInputCheck", { enumerable: true, get: function () { return safety_1.supervisionInviteInputCheck; } });
+Object.defineProperty(exports, "supervisionReviewInputCheck", { enumerable: true, get: function () { return safety_1.supervisionReviewInputCheck; } });
+Object.defineProperty(exports, "supervisionStateCheck", { enumerable: true, get: function () { return safety_1.supervisionStateCheck; } });
+var sessionStatus_1 = require("./sessionStatus");
+Object.defineProperty(exports, "publicApplicationCheck", { enumerable: true, get: function () { return sessionStatus_1.publicApplicationCheck; } });
+var signIn_1 = require("./signIn");
+Object.defineProperty(exports, "EMAIL_ACCOUNTS_MAX", { enumerable: true, get: function () { return signIn_1.EMAIL_ACCOUNTS_MAX; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_CHOICE_TTL_MS", { enumerable: true, get: function () { return signIn_1.EMAIL_SIGNIN_CHOICE_TTL_MS; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_LINK_TTL_MS", { enumerable: true, get: function () { return signIn_1.EMAIL_SIGNIN_LINK_TTL_MS; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_LONG_CODE_ALPHABET", { enumerable: true, get: function () { return signIn_1.EMAIL_SIGNIN_LONG_CODE_ALPHABET; } });
+Object.defineProperty(exports, "EMAIL_SIGNIN_LONG_CODE_LENGTH", { enumerable: true, get: function () { return signIn_1.EMAIL_SIGNIN_LONG_CODE_LENGTH; } });
+Object.defineProperty(exports, "PASSWORD_MAX_LENGTH", { enumerable: true, get: function () { return signIn_1.PASSWORD_MAX_LENGTH; } });
+Object.defineProperty(exports, "PASSWORD_MIN_LENGTH", { enumerable: true, get: function () { return signIn_1.PASSWORD_MIN_LENGTH; } });
+Object.defineProperty(exports, "REAUTH_ACTIONS", { enumerable: true, get: function () { return signIn_1.REAUTH_ACTIONS; } });
+Object.defineProperty(exports, "SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS", { enumerable: true, get: function () { return signIn_1.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS; } });
+Object.defineProperty(exports, "SIGNIN_SECOND_FACTOR_TTL_MS", { enumerable: true, get: function () { return signIn_1.SIGNIN_SECOND_FACTOR_TTL_MS; } });
+Object.defineProperty(exports, "SIGN_IN_ERROR_CODES", { enumerable: true, get: function () { return signIn_1.SIGN_IN_ERROR_CODES; } });
+Object.defineProperty(exports, "TOTP_BACKUP_CODE_COUNT", { enumerable: true, get: function () { return signIn_1.TOTP_BACKUP_CODE_COUNT; } });
+Object.defineProperty(exports, "TOTP_DIGITS", { enumerable: true, get: function () { return signIn_1.TOTP_DIGITS; } });
+Object.defineProperty(exports, "TOTP_PERIOD_SECONDS", { enumerable: true, get: function () { return signIn_1.TOTP_PERIOD_SECONDS; } });
+Object.defineProperty(exports, "emailSignInChooseAccountCheck", { enumerable: true, get: function () { return signIn_1.emailSignInChooseAccountCheck; } });
+Object.defineProperty(exports, "emailSignInLinkResponseCheck", { enumerable: true, get: function () { return signIn_1.emailSignInLinkResponseCheck; } });
+Object.defineProperty(exports, "emailSignInPendingCheck", { enumerable: true, get: function () { return signIn_1.emailSignInPendingCheck; } });
+Object.defineProperty(exports, "emailSignInStartResponseCheck", { enumerable: true, get: function () { return signIn_1.emailSignInStartResponseCheck; } });
+Object.defineProperty(exports, "isEmailSignInChooseAccount", { enumerable: true, get: function () { return signIn_1.isEmailSignInChooseAccount; } });
+Object.defineProperty(exports, "isSecondFactorRequired", { enumerable: true, get: function () { return signIn_1.isSecondFactorRequired; } });
+Object.defineProperty(exports, "normalizeEmailSignInCode", { enumerable: true, get: function () { return signIn_1.normalizeEmailSignInCode; } });
+Object.defineProperty(exports, "reauthProofCheck", { enumerable: true, get: function () { return signIn_1.reauthProofCheck; } });
+Object.defineProperty(exports, "secondFactorRequiredCheck", { enumerable: true, get: function () { return signIn_1.secondFactorRequiredCheck; } });
+Object.defineProperty(exports, "signInMethodsCheck", { enumerable: true, get: function () { return signIn_1.signInMethodsCheck; } });
+Object.defineProperty(exports, "totpBackupCodesResponseCheck", { enumerable: true, get: function () { return signIn_1.totpBackupCodesResponseCheck; } });
+Object.defineProperty(exports, "totpEnrollResponseCheck", { enumerable: true, get: function () { return signIn_1.totpEnrollResponseCheck; } });
+var username_1 = require("./username");
+Object.defineProperty(exports, "BOT_USERNAME_INVALID_MESSAGE", { enumerable: true, get: function () { return username_1.BOT_USERNAME_INVALID_MESSAGE; } });
+Object.defineProperty(exports, "BOT_USERNAME_SUFFIX", { enumerable: true, get: function () { return username_1.BOT_USERNAME_SUFFIX; } });
+Object.defineProperty(exports, "NUMERIC_USERNAME_MESSAGE", { enumerable: true, get: function () { return username_1.NUMERIC_USERNAME_MESSAGE; } });
+Object.defineProperty(exports, "RESERVED_USERNAMES", { enumerable: true, get: function () { return username_1.RESERVED_USERNAMES; } });
+Object.defineProperty(exports, "RESERVED_USERNAME_MESSAGE", { enumerable: true, get: function () { return username_1.RESERVED_USERNAME_MESSAGE; } });
+Object.defineProperty(exports, "USERNAME_INVALID_MESSAGE", { enumerable: true, get: function () { return username_1.USERNAME_INVALID_MESSAGE; } });
+Object.defineProperty(exports, "USERNAME_MAX_LENGTH", { enumerable: true, get: function () { return username_1.USERNAME_MAX_LENGTH; } });
+Object.defineProperty(exports, "USERNAME_MIN_LENGTH", { enumerable: true, get: function () { return username_1.USERNAME_MIN_LENGTH; } });
+Object.defineProperty(exports, "USERNAME_PATTERN_SOURCE", { enumerable: true, get: function () { return username_1.USERNAME_PATTERN_SOURCE; } });
+Object.defineProperty(exports, "applyBotUsernameSuffix", { enumerable: true, get: function () { return username_1.applyBotUsernameSuffix; } });
+Object.defineProperty(exports, "botUsernameCheck", { enumerable: true, get: function () { return username_1.botUsernameCheck; } });
+Object.defineProperty(exports, "stripDisallowedUsernameCharacters", { enumerable: true, get: function () { return username_1.stripDisallowedUsernameCharacters; } });
+Object.defineProperty(exports, "usernameCheck", { enumerable: true, get: function () { return username_1.usernameCheck; } });
+Object.defineProperty(exports, "usernameCheckForAccountKind", { enumerable: true, get: function () { return username_1.usernameCheckForAccountKind; } });
+var userResponse_1 = require("./userResponse");
+Object.defineProperty(exports, "userNameCheck", { enumerable: true, get: function () { return userResponse_1.userNameCheck; } });

package/dist/cjs/client/organizations.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Organization vocabularies and checks, without Zod. Schemas: `../organizations.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.organizationCurationResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationImportBatchResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationClaimInputCheck = exports.organizationBatchCheck = exports.organizationListCheck = exports.organizationCheck = exports.updateOrganizationCheck = exports.createOrganizationCheck = exports.organizationNameCheck = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_TYPES = void 0;
+const check_1 = require("./check");
+/** Real-world identity classification, independent of account topics and permissions. */
+exports.ORGANIZATION_TYPES = [
+    'business',
+    'nonprofit',
+    'public_body',
+    'community',
+    'other',
+];
+exports.ORGANIZATION_STATUSES = ['active', 'inactive', 'merged', 'suppressed'];
+exports.ORGANIZATION_CLAIM_STATUSES = ['unclaimed', 'claimed'];
+exports.ORGANIZATION_ALIAS_KINDS = [
+    'name_variant',
+    'former_name',
+    'localized_name',
+    'marketing_name',
+    'misspelling',
+];
+exports.ORGANIZATION_CLAIM_DECISIONS = ['pending', 'approved', 'rejected'];
+exports.ORGANIZATION_NAME_MAX_LENGTH = 300;
+exports.ORGANIZATION_ERROR_CODES = [
+    'bad_request',
+    'unauthorized',
+    'forbidden',
+    'not_found',
+    'unknown_route',
+    'conflict',
+    'validation_failed',
+    'rate_limited',
+    'internal_error',
+    'service_unavailable',
+];
+/* -------------------------------------------------------------------------- */
+/*  Checks                                                                    */
+/* -------------------------------------------------------------------------- */
+const id = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128));
+const optionalText = (max) => (0, check_1.optional)((0, check_1.nullable)((0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(max))));
+const evidenceReference = (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(1000));
+const createdAt = (0, check_1.string)(check_1.datetime);
+const organizationAlias = (0, check_1.strictObject)({
+    alias: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    kind: (0, check_1.oneOf)(exports.ORGANIZATION_ALIAS_KINDS),
+    language: (0, check_1.optional)((0, check_1.string)((0, check_1.minLength)(2), (0, check_1.maxLength)(35))),
+});
+/** The twin of `organizationNameSchema`. */
+exports.organizationNameCheck = (0, check_1.refine)((0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(exports.ORGANIZATION_NAME_MAX_LENGTH)), (value) => !/[<>]/.test(value) &&
+    Array.from(value).every((character) => character.charCodeAt(0) >= 32 && character.charCodeAt(0) !== 127), 'Organization name must be plain text');
+const organizationFields = {
+    name: exports.organizationNameCheck,
+    organizationType: (0, check_1.oneOf)(exports.ORGANIZATION_TYPES),
+    legalName: optionalText(300),
+    websiteUrl: (0, check_1.optional)((0, check_1.nullable)((0, check_1.refine)((0, check_1.string)(check_1.url, (0, check_1.maxLength)(2048)), (value) => /^https?:\/\//.test(value), 'Use HTTP or HTTPS'))),
+    countryCode: (0, check_1.optional)((0, check_1.nullable)((0, check_1.string)((0, check_1.pattern)(/^[A-Z]{2}$/)))),
+    aliases: (0, check_1.optional)((0, check_1.array)(organizationAlias, (0, check_1.maxItems)(100))),
+};
+exports.createOrganizationCheck = (0, check_1.exact)()((0, check_1.strictObject)(organizationFields));
+exports.updateOrganizationCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    ...organizationFields,
+    name: (0, check_1.optional)(exports.organizationNameCheck),
+    organizationType: (0, check_1.optional)(organizationFields.organizationType),
+}));
+exports.organizationCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    name: exports.organizationNameCheck,
+    organizationType: (0, check_1.oneOf)(exports.ORGANIZATION_TYPES),
+    legalName: (0, check_1.nullable)((0, check_1.string)()),
+    websiteUrl: (0, check_1.nullable)((0, check_1.string)()),
+    countryCode: (0, check_1.nullable)((0, check_1.string)()),
+    aliases: (0, check_1.array)(organizationAlias),
+    accountId: id,
+    username: (0, check_1.nullable)((0, check_1.string)()),
+    avatar: (0, check_1.nullable)((0, check_1.string)()),
+    verifiedDomains: (0, check_1.array)((0, check_1.string)()),
+    claimStatus: (0, check_1.oneOf)(exports.ORGANIZATION_CLAIM_STATUSES),
+    status: (0, check_1.oneOf)(exports.ORGANIZATION_STATUSES),
+    mergedIntoAccountId: (0, check_1.nullable)(id),
+    createdAt,
+    updatedAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.organizationListCheck = (0, check_1.exact)()((0, check_1.strictObject)({ items: (0, check_1.array)(exports.organizationCheck), nextCursor: (0, check_1.nullable)((0, check_1.string)()) }));
+exports.organizationBatchCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({ requestedAccountId: id, organization: exports.organizationCheck })),
+    missingIds: (0, check_1.array)(id),
+}));
+exports.organizationClaimInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ evidenceReference }));
+const organizationClaimFields = {
+    id,
+    accountId: id,
+    claimantUserId: id,
+    status: (0, check_1.oneOf)(exports.ORGANIZATION_CLAIM_DECISIONS),
+    createdAt,
+};
+exports.organizationClaimCheck = (0, check_1.exact)()((0, check_1.strictObject)(organizationClaimFields));
+exports.organizationClaimDetailCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    ...organizationClaimFields,
+    evidenceReference: (0, check_1.string)(),
+    reviewEvidenceReference: (0, check_1.nullable)((0, check_1.string)()),
+    reviewedAt: (0, check_1.nullable)((0, check_1.string)(check_1.datetime)),
+}));
+exports.organizationClaimListCheck = (0, check_1.exact)()((0, check_1.strictObject)({ items: (0, check_1.array)(exports.organizationClaimDetailCheck), nextCursor: (0, check_1.nullable)((0, check_1.string)()) }));
+exports.organizationClaimReviewCheck = (0, check_1.exact)()((0, check_1.strictObject)({ decision: (0, check_1.oneOf)(['approved', 'rejected']), evidenceReference }));
+exports.organizationImportBatchResultCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({ externalId: (0, check_1.string)(), accountId: id, created: check_1.boolean })),
+}));
+exports.organizationExternalCheck = (0, check_1.exact)()((0, check_1.strictObject)({ accountId: id, created: check_1.boolean }));
+exports.organizationExternalResolutionCheck = (0, check_1.exact)()((0, check_1.strictObject)({ accountId: id }));
+exports.organizationCurationResultCheck = (0, check_1.exact)()((0, check_1.strictObject)({ accountId: id, status: (0, check_1.oneOf)(['active', 'inactive', 'suppressed']) }));