@oxy.so/contracts 4.16.0 → 4.21.0

package/dist/cjs/client/products.js

@@ -0,0 +1,153 @@
+"use strict";
+/**
+ * Product access, plans, checkout and subscription checks, without Zod.
+ * Schemas: `../products/*.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.productSubscriptionCancellationResultCheck = exports.cancelProductSubscriptionCheck = exports.subscriptionCreditGrantsResponseCheck = exports.productSubscriptionsResponseCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.subjectProductAccessCheck = exports.subjectProductAccessQueryCheck = void 0;
+const check_1 = require("./check");
+const identifier = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(160));
+const displayName = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(100));
+const count = (0, check_1.number)(check_1.int, check_1.nonnegative, check_1.safe);
+const version = (0, check_1.number)(check_1.int, check_1.positive, check_1.safe);
+const oxyAccountId = (0, check_1.branded)((0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(64)));
+const actionKey = (0, check_1.string)((0, check_1.minLength)(8), (0, check_1.maxLength)(160), (0, check_1.pattern)(/^[a-zA-Z0-9_-]+$/));
+const combination = (0, check_1.oneOf)(['maximum', 'sum', 'exclusive']);
+const origin = (0, check_1.oneOf)(['individual', 'bundle']);
+const period = (message) => (0, check_1.refine)((0, check_1.strictObject)({ start: (0, check_1.string)(check_1.datetime), end: (0, check_1.string)(check_1.datetime) }), (value) => Date.parse(value.end) > Date.parse(value.start), message);
+const productBenefit = (0, check_1.discriminatedUnion)('kind', {
+    capability: (0, check_1.strictObject)({ kind: (0, check_1.literal)('capability'), productId: identifier, key: identifier }),
+    quota: (0, check_1.strictObject)({
+        kind: (0, check_1.literal)('quota'),
+        productId: identifier,
+        key: identifier,
+        unit: identifier,
+        included: count,
+        combination,
+    }),
+});
+exports.subjectProductAccessQueryCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    schemaVersion: (0, check_1.literal)(1),
+    subjectAccountId: oxyAccountId,
+    productId: identifier,
+}));
+exports.subjectProductAccessCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    schemaVersion: (0, check_1.literal)(1),
+    subjectAccountId: oxyAccountId,
+    productId: identifier,
+    evaluatedAt: (0, check_1.string)(check_1.datetime),
+    capabilities: (0, check_1.array)((0, check_1.strictObject)({ key: identifier, grantIds: (0, check_1.array)(identifier) })),
+    quotas: (0, check_1.array)((0, check_1.strictObject)({
+        key: identifier,
+        unit: identifier,
+        included: count,
+        combination,
+        grantIds: (0, check_1.array)(identifier),
+    })),
+    conflicts: (0, check_1.array)((0, check_1.strictObject)({
+        key: identifier,
+        reason: (0, check_1.oneOf)([
+            'combination_mismatch',
+            'unit_mismatch',
+            'exclusive_overlap',
+            'unsafe_total',
+        ]),
+        grantIds: (0, check_1.array)(identifier),
+    })),
+}));
+exports.personalPlanCatalogueCheck = (0, check_1.exact)()((0, check_1.refine)((0, check_1.strictObject)({
+    schemaVersion: (0, check_1.literal)(1),
+    state: (0, check_1.oneOf)(['unconfigured', 'configured']),
+    purchase: (0, check_1.literal)('unavailable'),
+    plans: (0, check_1.array)((0, check_1.strictObject)({
+        offerId: identifier,
+        offerVersion: version,
+        displayName,
+        audience: (0, check_1.literal)('personal'),
+        kind: (0, check_1.literal)('oxy_one'),
+        price: (0, check_1.optional)((0, check_1.strictObject)({
+            currency: (0, check_1.string)((0, check_1.pattern)(/^[A-Z]{3}$/)),
+            amountMinorUnits: version,
+            interval: (0, check_1.literal)('month'),
+            trial: (0, check_1.literal)('none'),
+            taxTreatment: (0, check_1.literal)('inclusive'),
+            merchantTotal: (0, check_1.literal)('final'),
+        })),
+        benefits: (0, check_1.array)((0, check_1.strictObject)({ displayName, benefit: productBenefit })),
+    })),
+}), (value) => (value.state === 'unconfigured') === (value.plans.length === 0), 'Catalogue state must match published plans'));
+exports.personalPlanCheckoutRequestCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    expectedSubjectAccountId: oxyAccountId,
+    offerId: identifier,
+    offerVersion: version,
+    idempotencyKey: actionKey,
+}));
+exports.personalPlanCheckoutResultCheck = (0, check_1.exact)()((0, check_1.discriminatedUnion)('state', {
+    unconfigured: (0, check_1.strictObject)({
+        state: (0, check_1.literal)('unconfigured'),
+        reason: (0, check_1.oneOf)(['provider_unconfigured', 'offer_unconfigured', 'price_unconfigured']),
+    }),
+    pending: (0, check_1.strictObject)({
+        state: (0, check_1.literal)('pending'),
+        intentId: identifier,
+        checkoutUrl: (0, check_1.optional)((0, check_1.string)(check_1.url, (0, check_1.startsWith)('https://'))),
+    }),
+    closed: (0, check_1.strictObject)({ state: (0, check_1.literal)('closed'), intentId: identifier }),
+    fulfilled: (0, check_1.strictObject)({ state: (0, check_1.literal)('fulfilled'), intentId: identifier }),
+}));
+const billingPeriod = period('Period end must follow start');
+exports.productSubscriptionsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    subscriptions: (0, check_1.array)((0, check_1.strictObject)({
+        sourceId: identifier,
+        status: (0, check_1.oneOf)([
+            'active',
+            'trialing',
+            'past_due',
+            'unpaid',
+            'canceled',
+            'paused',
+            'incomplete',
+            'incomplete_expired',
+        ]),
+        period: billingPeriod,
+        cancelAtPeriodEnd: check_1.boolean,
+        canCancel: check_1.boolean,
+        offers: (0, check_1.array)((0, check_1.strictObject)({
+            segmentId: identifier,
+            offerId: identifier,
+            offerVersion: version,
+            displayName,
+            origin,
+            period: billingPeriod,
+            current: check_1.boolean,
+            products: (0, check_1.array)((0, check_1.strictObject)({ id: identifier, displayName })),
+        })),
+    })),
+}));
+exports.subscriptionCreditGrantsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    grants: (0, check_1.array)((0, check_1.refine)((0, check_1.strictObject)({
+        id: identifier,
+        invoiceId: identifier,
+        origin: (0, check_1.oneOf)([
+            'subscription_payment',
+            'subscription_proration',
+            'subscription_promotional_grant',
+        ]),
+        period: billingPeriod,
+        granted: count,
+        consumed: count,
+        clawed: count,
+        remaining: count,
+        promotionId: (0, check_1.nullable)(identifier),
+        createdAt: (0, check_1.string)(check_1.datetime),
+    }), (value) => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) ===
+        BigInt(value.granted), 'Grant conservation differs')),
+}));
+exports.cancelProductSubscriptionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    sourceId: identifier,
+    actionId: (0, check_1.optional)(actionKey),
+    expectedSubjectAccountId: (0, check_1.optional)(oxyAccountId),
+}));
+exports.productSubscriptionCancellationResultCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({ sourceId: identifier, cancelAtPeriodEnd: (0, check_1.literal)(true) }), (0, check_1.strictObject)({ sourceId: identifier, reconciliationPending: (0, check_1.literal)(true) })));

package/dist/cjs/client/recommendations.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * The recommendation-request check, without Zod. Schemas: `../recommendations.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recommendationRequestCheck = void 0;
+const check_1 = require("./check");
+const id = (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1));
+const weight = (0, check_1.optional)((0, check_1.number)((0, check_1.atLeast)(0), (0, check_1.atMost)(10)));
+exports.recommendationRequestCheck = (0, check_1.exact)()((0, check_1.object)({
+    clientId: (0, check_1.optional)((0, check_1.string)(check_1.trim, (0, check_1.minLength)(1))),
+    limit: (0, check_1.optional)((0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(100))),
+    offset: (0, check_1.optional)((0, check_1.number)(check_1.int, (0, check_1.atLeast)(0))),
+    excludeTypes: (0, check_1.optional)((0, check_1.array)((0, check_1.oneOf)(['federated', 'agent', 'automated']))),
+    excludeIds: (0, check_1.optional)((0, check_1.array)(id, (0, check_1.maxItems)(500))),
+    boosts: (0, check_1.optional)((0, check_1.array)((0, check_1.object)({
+        userIds: (0, check_1.array)(id, (0, check_1.minItems)(1), (0, check_1.maxItems)(200)),
+        weight: (0, check_1.number)((0, check_1.atLeast)(-5), (0, check_1.atMost)(5)),
+        reason: (0, check_1.optional)((0, check_1.string)(check_1.trim, (0, check_1.maxLength)(120))),
+    }), (0, check_1.maxItems)(50))),
+    signalWeights: (0, check_1.optional)((0, check_1.object)({
+        graph: weight,
+        completeness: weight,
+        verified: weight,
+        curation: weight,
+        interest: weight,
+        appBoost: weight,
+        repCandidate: weight,
+        affinity: weight,
+    })),
+}));

package/dist/cjs/client/reputation.js

@@ -0,0 +1,41 @@
+"use strict";
+/**
+ * The reputation view guard, without Zod. Schemas: `../reputation.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FULL_BALANCE_FIELDS = void 0;
+exports.isFullReputationBalance = isFullReputationBalance;
+/**
+ * The fields the full {@link ReputationBalance} carries beyond the public
+ * {@link ReputationBalanceSummary} that the API sends ALL-OR-NOTHING. The
+ * runtime discriminant between the two views.
+ *
+ * The V2 blocks (`conduct`, `contribution`, …) are deliberately NOT listed:
+ * they are optional on the wire, so requiring them here would make a balance
+ * from a server that predates them fail to narrow, hiding the whole private
+ * view. Read a V2 block by checking that block.
+ */
+exports.FULL_BALANCE_FIELDS = [
+    'positive',
+    'negative',
+    'breakdown',
+    'influence',
+    'reliability',
+    'recalculatedAt',
+    'updatedAt',
+];
+/**
+ * Whether a balance came back as the SUBJECT view, and so carries the
+ * breakdown / influence / reliability blocks.
+ *
+ * Checks every extra field rather than one representative: the point of the
+ * guard is that the caller then dereferences those blocks, so a partial payload
+ * must not narrow.
+ *
+ * @param balance - A balance from `getReputationBalance`.
+ */
+function isFullReputationBalance(balance) {
+    return exports.FULL_BALANCE_FIELDS.every((field) => field in balance);
+}

package/dist/cjs/client/safety.js

@@ -0,0 +1,196 @@
+"use strict";
+/**
+ * Safety and supervision checks, without Zod. Schemas: `../safety.ts`.
+ *
+ * Only what a browser or device sends and reads is here: the profile-access
+ * read, supervision management and the guardian's purchase review. The service
+ * decision lanes are server-only (`@oxy.so/core/server`) and parse with the
+ * Zod schemas directly.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.supervisionReviewInputCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.supervisionInviteInputCheck = exports.supervisionContactsResponseCheck = exports.supervisionStateCheck = exports.supervisionInvitationCheck = exports.profileAccessDecisionCheck = exports.profileAccessInputCheck = exports.PURCHASE_APPROVAL_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SAFETY_POLICY_VERSION = exports.SUPERVISED_ACTIONS = void 0;
+const check_1 = require("./check");
+const organizations_1 = require("./organizations");
+const signIn_1 = require("./signIn");
+/** Supervision is a personal-account safety policy, never a new login/account kind. */
+exports.SUPERVISED_ACTIONS = ['profile', 'messaging', 'content', 'purchases'];
+exports.SAFETY_POLICY_VERSION = '2';
+exports.SUPERVISION_CONSENT_VERSION = '1';
+exports.SUPERVISION_STATUSES = ['active', 'orphaned', 'ended'];
+exports.SUPERVISION_INVITATION_STATUSES = ['pending', 'accepted', 'cancelled'];
+exports.PURCHASE_APPROVAL_STATUSES = [
+    'pending',
+    'approved',
+    'rejected',
+    'reserved',
+    'confirmed',
+    'cancelled',
+];
+exports.profileAccessInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ subjectAccountId: (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128)) }));
+exports.profileAccessDecisionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    allowed: check_1.boolean,
+    reason: (0, check_1.oneOf)(['public', 'owner', 'private', 'blocked', 'unavailable']),
+    policyVersion: (0, check_1.literal)('1'),
+}));
+const accountId = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128));
+const resourceId = (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(256));
+const uniqueIds = (max) => (0, check_1.refine)((0, check_1.array)(accountId, (0, check_1.minItems)(1), (0, check_1.maxItems)(max)), (ids) => new Set(ids).size === ids.length, 'Account IDs must be unique');
+/* -------------------------------------------------------------------------- */
+/*  Supervision management                                                    */
+/* -------------------------------------------------------------------------- */
+const supervisionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    guardianAccountId: (0, check_1.nullable)(accountId),
+    status: (0, check_1.oneOf)(exports.SUPERVISION_STATUSES),
+    policyVersion: (0, check_1.literal)(exports.SAFETY_POLICY_VERSION),
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    createdAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.supervisionInvitationCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    id: accountId,
+    childAccountId: accountId,
+    guardianAccountId: accountId,
+    status: (0, check_1.oneOf)(exports.SUPERVISION_INVITATION_STATUSES),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    createdAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.supervisionStateCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    self: (0, check_1.nullable)(supervisionCheck),
+    children: (0, check_1.array)(supervisionCheck, (0, check_1.maxItems)(100)),
+    invitations: (0, check_1.array)(exports.supervisionInvitationCheck, (0, check_1.maxItems)(100)),
+}));
+exports.supervisionContactsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({
+        childAccountId: accountId,
+        contactAccountId: accountId,
+        approvedAt: (0, check_1.string)(check_1.datetime),
+    }), (0, check_1.maxItems)(1000)),
+}));
+exports.supervisionInviteInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    guardianAccountId: accountId,
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    reauth: signIn_1.reauthProofCheck,
+}));
+exports.supervisionAcceptInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION), reauth: signIn_1.reauthProofCheck }));
+exports.supervisionContactInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    contactAccountId: accountId,
+    reauth: signIn_1.reauthProofCheck,
+}));
+exports.supervisionReviewInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    action: (0, check_1.oneOf)(['end', 'transfer']),
+    guardianAccountId: (0, check_1.optional)(accountId),
+    evidenceReference: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(2048)),
+    reauth: signIn_1.reauthProofCheck,
+}));
+/* -------------------------------------------------------------------------- */
+/*  Minimal identities for the management screens                            */
+/* -------------------------------------------------------------------------- */
+const safetyPersonCheck = (0, check_1.exact)()((0, check_1.strictObject)({ accountId, username: (0, check_1.nullable)((0, check_1.string)()), displayName: (0, check_1.nullable)((0, check_1.string)()) }));
+exports.safetyPeopleInputCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({ query: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(2), (0, check_1.maxLength)(100)) }), (0, check_1.strictObject)({ accountIds: uniqueIds(100) })));
+exports.safetyPeopleResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({ items: (0, check_1.array)(safetyPersonCheck, (0, check_1.maxItems)(100)) }));
+exports.safetyOrganizationsInputCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({
+    query: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(100)),
+    limit: (0, check_1.optional)((0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(20))),
+}), (0, check_1.strictObject)({ ids: uniqueIds(100) })));
+exports.safetyOrganizationsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({
+        requestedAccountId: accountId,
+        organization: (0, check_1.strictObject)({
+            accountId,
+            username: (0, check_1.nullable)((0, check_1.string)()),
+            name: (0, check_1.string)(),
+            organizationType: (0, check_1.oneOf)(organizations_1.ORGANIZATION_TYPES),
+        }),
+    }), (0, check_1.maxItems)(100)),
+    missingIds: (0, check_1.array)(accountId, (0, check_1.maxItems)(100)),
+}));
+/* -------------------------------------------------------------------------- */
+/*  Purchase approvals                                                        */
+/* -------------------------------------------------------------------------- */
+const fingerprint = (0, check_1.string)((0, check_1.pattern)(/^[a-f0-9]{64}$/));
+const minorUnits = (0, check_1.number)(check_1.int, check_1.nonnegative, (0, check_1.atMost)(Number.MAX_SAFE_INTEGER));
+const purchaseApprovalLineCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    itemReference: resourceId,
+    title: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    optionsText: (0, check_1.string)(check_1.trim, (0, check_1.maxLength)(300)),
+    merchantAccountId: accountId,
+    quantity: (0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(1000000)),
+    unitAmountMinor: minorUnits,
+    lineAmountMinor: minorUnits,
+}));
+/** The effect fields every approval shape shares, in the schema's key order. */
+const purchaseEffectFields = {
+    operationId: resourceId,
+    resourceId,
+    cartFingerprint: fingerprint,
+    summary: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    merchantAccountIds: (0, check_1.transform)((0, check_1.refine)((0, check_1.array)(accountId, (0, check_1.minItems)(1), (0, check_1.maxItems)(100)), (ids) => new Set(ids).size === ids.length, 'Merchant accounts must be unique'), (ids) => [...ids].sort()),
+};
+const purchaseAmountFields = {
+    shippingMinor: minorUnits,
+    taxMinor: minorUnits,
+    discountMinor: minorUnits,
+    roundingAdjustmentMinor: (0, check_1.number)(check_1.int, (0, check_1.atLeast)(-Number.MAX_SAFE_INTEGER), (0, check_1.atMost)(Number.MAX_SAFE_INTEGER)),
+    paymentFingerprint: fingerprint,
+    amountMinor: minorUnits,
+    currency: (0, check_1.string)((0, check_1.pattern)(/^[A-Z]{3}$/)),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+};
+const purchaseApprovalFields = {
+    id: accountId,
+    childAccountId: accountId,
+    applicationId: accountId,
+    status: (0, check_1.oneOf)(exports.PURCHASE_APPROVAL_STATUSES),
+    createdAt: (0, check_1.string)(check_1.datetime),
+    receiptReference: (0, check_1.nullable)((0, check_1.string)((0, check_1.maxLength)(512))),
+};
+/** The first problem `validatePurchaseEvidence` in `../safety.ts` reports, in its order. */
+function purchaseEvidenceProblem(value) {
+    const merchants = new Set(value.merchantAccountIds);
+    const references = new Set();
+    for (const line of value.lineItems) {
+        const key = `${line.merchantAccountId}:${line.itemReference}`;
+        if (!merchants.has(line.merchantAccountId) || references.has(key)) {
+            return {
+                path: [],
+                message: 'Purchase lines must name an included merchant and unique item reference',
+            };
+        }
+        references.add(key);
+    }
+    if (merchants.size !== new Set(value.lineItems.map((line) => line.merchantAccountId)).size) {
+        return { path: [], message: 'Every merchant must have an approval line' };
+    }
+    const total = value.lineItems.reduce((sum, line) => sum + BigInt(line.lineAmountMinor), 0n) +
+        BigInt(value.shippingMinor) +
+        BigInt(value.taxMinor) -
+        BigInt(value.discountMinor) +
+        BigInt(value.roundingAdjustmentMinor);
+    if (total < 0n ||
+        total > BigInt(Number.MAX_SAFE_INTEGER) ||
+        total !== BigInt(value.amountMinor)) {
+        return { path: [], message: 'Approval evidence must equal the exact payment total' };
+    }
+    if (Math.abs(value.roundingAdjustmentMinor) >
+        value.lineItems.length + 3 * value.merchantAccountIds.length) {
+        return { path: [], message: 'Rounding adjustment exceeds the bounded conversion stages' };
+    }
+    return undefined;
+}
+exports.purchaseApprovalCheck = (0, check_1.exact)()((0, check_1.refineAt)((0, check_1.strictObject)({
+    ...purchaseEffectFields,
+    lineItems: (0, check_1.array)(purchaseApprovalLineCheck, (0, check_1.minItems)(1), (0, check_1.maxItems)(200)),
+    ...purchaseAmountFields,
+    ...purchaseApprovalFields,
+}), purchaseEvidenceProblem));
+const purchaseApprovalSummaryCheck = (0, check_1.exact)()((0, check_1.strictObject)({ ...purchaseEffectFields, ...purchaseAmountFields, ...purchaseApprovalFields }));
+exports.purchaseApprovalListCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)(purchaseApprovalSummaryCheck, (0, check_1.maxItems)(100)),
+    nextCursor: (0, check_1.nullable)((0, check_1.string)()),
+}));
+exports.purchaseReviewInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ decision: (0, check_1.oneOf)(['approved', 'rejected']), reauth: signIn_1.reauthProofCheck }));

package/dist/cjs/client/sessionStatus.js

@@ -0,0 +1,23 @@
+"use strict";
+/**
+ * The public-application check, without Zod. Schemas: `../sessionStatus.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publicApplicationCheck = void 0;
+const check_1 = require("./check");
+exports.publicApplicationCheck = (0, check_1.exact)()((0, check_1.object)({
+    id: (0, check_1.string)(),
+    name: (0, check_1.string)(),
+    description: (0, check_1.optional)((0, check_1.string)()),
+    icon: (0, check_1.optional)((0, check_1.string)()),
+    websiteUrl: (0, check_1.optional)((0, check_1.string)()),
+    privacyPolicyUrl: (0, check_1.optional)((0, check_1.string)()),
+    termsUrl: (0, check_1.optional)((0, check_1.string)()),
+    type: (0, check_1.oneOf)(['first_party', 'third_party', 'internal', 'system']),
+    isOfficial: check_1.boolean,
+    isInternal: check_1.boolean,
+    scopes: (0, check_1.array)((0, check_1.string)()),
+    developerName: (0, check_1.optional)((0, check_1.string)()),
+}));

package/dist/cjs/client/signIn.js

@@ -0,0 +1,159 @@
+"use strict";
+/**
+ * Sign-in constants, guards and response checks, without Zod. Schemas: `../signIn.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reauthProofCheck = exports.totpBackupCodesResponseCheck = exports.totpEnrollResponseCheck = exports.signInMethodsCheck = exports.emailSignInChooseAccountCheck = exports.emailSignInPendingCheck = exports.secondFactorRequiredCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInStartResponseCheck = exports.SIGN_IN_ERROR_CODES = exports.REAUTH_ACTIONS = exports.EMAIL_ACCOUNTS_MAX = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.TOTP_BACKUP_CODE_COUNT = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.PASSWORD_MAX_LENGTH = exports.PASSWORD_MIN_LENGTH = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.EMAIL_SIGNIN_LINK_TTL_MS = void 0;
+exports.normalizeEmailSignInCode = normalizeEmailSignInCode;
+exports.isSecondFactorRequired = isSecondFactorRequired;
+exports.isEmailSignInChooseAccount = isEmailSignInChooseAccount;
+const accountEmail_1 = require("./accountEmail");
+const check_1 = require("./check");
+/** How long the link in a sign-in email can be opened. */
+exports.EMAIL_SIGNIN_LINK_TTL_MS = 15 * 60 * 1000;
+/** How long a second-factor challenge can be answered. */
+exports.SIGNIN_SECOND_FACTOR_TTL_MS = 5 * 60 * 1000;
+/** Wrong second-factor codes one challenge accepts. */
+exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = 5;
+/** Shortest password Oxy accepts when one is set. */
+exports.PASSWORD_MIN_LENGTH = 10;
+/** Longest password Oxy accepts (characters). */
+exports.PASSWORD_MAX_LENGTH = 256;
+/** Digits in an authenticator code. */
+exports.TOTP_DIGITS = 6;
+/** Seconds each authenticator code lasts. */
+exports.TOTP_PERIOD_SECONDS = 30;
+/** Backup codes issued when an authenticator is enabled or they are regenerated. */
+exports.TOTP_BACKUP_CODE_COUNT = 10;
+/**
+ * The long sign-in code: ten characters of Crockford base32 without the
+ * look-alikes (no 0, O, 1, I, L, U), shown as `XXXXX-XXXXX`. An account whose
+ * sign-in codes were guessed at too often today (the per-account ceiling) is
+ * sent this instead of 6 digits for the rest of the day, so its owner can still
+ * type a code while guessing one is infeasible.
+ */
+exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = '23456789ABCDEFGHJKMNPQRSTVWXYZ';
+exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = 10;
+/**
+ * Normalise a typed sign-in code: 6 digits stay as they are; a long code is
+ * upper-cased with its dash and spaces removed. Anything else is returned
+ * trimmed (and will simply be wrong).
+ */
+function normalizeEmailSignInCode(code) {
+    const compact = code.trim().replace(/[\s-]/g, '').toUpperCase();
+    return compact;
+}
+/**
+ * How long, once the email is proven, the person has to choose which of its
+ * accounts signs in.
+ */
+exports.EMAIL_SIGNIN_CHOICE_TTL_MS = 5 * 60 * 1000;
+/** Most accounts one email can hold; sign-up refuses another past it. */
+exports.EMAIL_ACCOUNTS_MAX = 20;
+/** Narrow a {@link SignInStepResult}. */
+function isSecondFactorRequired(result) {
+    return result.secondFactorRequired === true;
+}
+/** Narrow an {@link EmailSignInStepResult}. */
+function isEmailSignInChooseAccount(result) {
+    return result.chooseAccount === true;
+}
+/**
+ * What a re-verification email code confirms. The code is bound to it: a code
+ * asked for one change never authorises another, and the email names it.
+ */
+exports.REAUTH_ACTIONS = [
+    'change_password',
+    'totp',
+    'link_commons',
+    'delete_account',
+    'credentials_manage',
+    'supervision',
+    'supervision_purchase',
+];
+/**
+ * Stable error codes (`error.code` in the API error body). Clients map these
+ * through their localization, never the English message.
+ */
+exports.SIGN_IN_ERROR_CODES = {
+    /** Wrong identifier or password — never says which. */
+    invalidCredentials: 'SIGNIN_INVALID_CREDENTIALS',
+    /** The request is unknown, expired, spent, or its secret is wrong. */
+    requestInvalid: 'SIGNIN_REQUEST_INVALID',
+    /** The link is unknown, expired or already used. */
+    linkInvalid: 'SIGNIN_LINK_INVALID',
+    /** The link was opened in another browser: type the code in the app instead. */
+    linkOtherDevice: 'SIGNIN_LINK_OTHER_DEVICE',
+    /** The second-factor challenge or its code is wrong, expired or spent. */
+    secondFactorInvalid: 'SECOND_FACTOR_INVALID',
+    /** Too many failures for this account: wait and try again. */
+    locked: 'SIGNIN_LOCKED',
+    /** The step needs a fresh proof (`reauth`). */
+    reauthRequired: 'REAUTH_REQUIRED',
+    /** The fresh proof was wrong. */
+    reauthInvalid: 'REAUTH_INVALID',
+    /** The account has an authenticator: the proof must carry its code. */
+    totpRequired: 'TOTP_REQUIRED',
+    /** Enrolling or confirming an authenticator that is already on. */
+    totpAlreadyEnabled: 'TOTP_ALREADY_ENABLED',
+    /** Disabling, confirming or regenerating codes with no authenticator (or no pending one). */
+    totpNotEnabled: 'TOTP_NOT_ENABLED',
+    /** The code the authenticator showed at enrolment is wrong. */
+    totpCodeInvalid: 'TOTP_CODE_INVALID',
+    /** Only official Oxy apps and auth.oxy.so may sign people in here. */
+    originNotAllowed: 'SIGNIN_ORIGIN_NOT_ALLOWED',
+    /** The username is taken. */
+    usernameTaken: 'USERNAME_TAKEN',
+    /** The email already holds `EMAIL_ACCOUNTS_MAX` accounts: no sign-up adds another. */
+    emailAccountsFull: 'EMAIL_ACCOUNTS_FULL',
+};
+/* -------------------------------------------------------------------------- */
+/*  Checks                                                                    */
+/* -------------------------------------------------------------------------- */
+const expiresAt = (0, check_1.number)(check_1.int, check_1.positive);
+const sixDigits = (0, check_1.string)(check_1.trim, (0, check_1.pattern)(new RegExp(`^\\d{${accountEmail_1.EMAIL_CODE_LENGTH}}$`), `code must be ${accountEmail_1.EMAIL_CODE_LENGTH} digits`));
+const passwordInput = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(exports.PASSWORD_MAX_LENGTH));
+const secondFactorCode = (0, check_1.string)(check_1.trim, (0, check_1.minLength)(exports.TOTP_DIGITS), (0, check_1.maxLength)(16));
+exports.emailSignInStartResponseCheck = (0, check_1.exact)()((0, check_1.object)({
+    requestId: (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(64)),
+    requestSecret: accountEmail_1.emailTicketCheck,
+    expiresAt,
+    retryLater: (0, check_1.optional)((0, check_1.literal)(true)),
+}));
+exports.emailSignInLinkResponseCheck = (0, check_1.exact)()((0, check_1.object)({ approved: (0, check_1.literal)(true) }));
+exports.secondFactorRequiredCheck = (0, check_1.exact)()((0, check_1.object)({ secondFactorRequired: (0, check_1.literal)(true), challengeId: accountEmail_1.emailTicketCheck, expiresAt }));
+exports.emailSignInPendingCheck = (0, check_1.exact)()((0, check_1.object)({ status: (0, check_1.literal)('pending'), expiresAt }));
+const emailSignInAccountOption = (0, check_1.exact)()((0, check_1.object)({
+    id: (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(64)),
+    username: (0, check_1.optional)((0, check_1.string)((0, check_1.minLength)(1))),
+    displayName: (0, check_1.optional)((0, check_1.string)((0, check_1.minLength)(1))),
+    avatar: (0, check_1.optional)((0, check_1.string)((0, check_1.minLength)(1))),
+}));
+exports.emailSignInChooseAccountCheck = (0, check_1.exact)()((0, check_1.object)({
+    chooseAccount: (0, check_1.literal)(true),
+    accounts: (0, check_1.array)(emailSignInAccountOption, (0, check_1.minItems)(2), (0, check_1.maxItems)(exports.EMAIL_ACCOUNTS_MAX)),
+    expiresAt,
+}));
+exports.signInMethodsCheck = (0, check_1.exact)()((0, check_1.object)({
+    hasEmail: check_1.boolean,
+    hasPassword: check_1.boolean,
+    totpEnabled: check_1.boolean,
+    backupCodesRemaining: (0, check_1.number)(check_1.int, check_1.nonnegative),
+}));
+exports.totpEnrollResponseCheck = (0, check_1.exact)()((0, check_1.object)({
+    secret: (0, check_1.string)((0, check_1.pattern)(/^[A-Z2-7]+$/)),
+    otpauthUri: (0, check_1.string)((0, check_1.startsWith)('otpauth://totp/')),
+}));
+exports.totpBackupCodesResponseCheck = (0, check_1.exact)()((0, check_1.object)({
+    backupCodes: (0, check_1.array)((0, check_1.string)((0, check_1.pattern)(/^[a-z2-9]{5}-[a-z2-9]{5}$/)), (0, check_1.exactItems)(exports.TOTP_BACKUP_CODE_COUNT)),
+}));
+exports.reauthProofCheck = (0, check_1.exact)()((0, check_1.refine)((0, check_1.strictObject)({
+    password: (0, check_1.optional)(passwordInput),
+    emailCode: (0, check_1.optional)((0, check_1.strictObject)({
+        verificationId: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(64)),
+        code: sixDigits,
+    })),
+    totpCode: (0, check_1.optional)(secondFactorCode),
+}), (proof) => proof.password !== undefined || proof.emailCode !== undefined, 'password or emailCode is required'));

package/dist/cjs/client/userResponse.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * User-response checks, without Zod. Schemas: `../userResponse.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userNameCheck = void 0;
+const check_1 = require("./check");
+exports.userNameCheck = (0, check_1.exact)()((0, check_1.looseObject)({
+    first: (0, check_1.optional)((0, check_1.string)()),
+    last: (0, check_1.optional)((0, check_1.string)()),
+    full: (0, check_1.optional)((0, check_1.string)()),
+    displayName: (0, check_1.optional)((0, check_1.string)()),
+}));