@oxy.so/contracts 4.16.0 → 4.21.0

package/dist/cjs/client/username.js

@@ -0,0 +1,173 @@
+"use strict";
+/**
+ * The username policy, without Zod. Schemas: `../username.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.botUsernameCheck = exports.usernameCheck = exports.BOT_USERNAME_INVALID_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.USERNAME_PATTERN = exports.USERNAME_PATTERN_SOURCE = exports.NUMERIC_USERNAME_MESSAGE = exports.RESERVED_USERNAME_SEGMENTS = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.USERNAME_INVALID_MESSAGE = exports.USERNAME_MAX_LENGTH = exports.USERNAME_MIN_LENGTH = void 0;
+exports.stripDisallowedUsernameCharacters = stripDisallowedUsernameCharacters;
+exports.applyBotUsernameSuffix = applyBotUsernameSuffix;
+exports.usernameCheckForAccountKind = usernameCheckForAccountKind;
+const check_1 = require("./check");
+/** Shortest storable handle. `oxy` sets the floor. */
+exports.USERNAME_MIN_LENGTH = 3;
+/** Longest storable handle, and the `maxLength` an input field should carry. */
+exports.USERNAME_MAX_LENGTH = 30;
+/** The 400 / inline-validation copy for every path that rejects a handle. */
+exports.USERNAME_INVALID_MESSAGE = 'Username must be 3-30 characters, use only letters, numbers, hyphens and underscores, ' +
+    'start and end with a letter or number, and never repeat a separator';
+/**
+ * Exact-match handles nobody may newly claim, regardless of account kind.
+ *
+ * This is NOT a namespace tightening like the bot suffix — it is a list of
+ * names withheld from `users_lower_username_key` before anybody asks for
+ * them. Compared against the same normalization the unique index applies
+ * (`lower(btrim(username))`), so `Admin`, ` ADMIN ` and `admin` are the one
+ * name this list means.
+ *
+ * `oxy`, `mention`, `homiio`, `clarity`, `faircoin`, `astro` and `mercaria`
+ * are deliberately NOT here: each already has an `organization`/`project`
+ * row, so the unique index already refuses a second one, and `oxy` is the
+ * name `USERNAME_MIN_LENGTH` is pinned against in
+ * `__tests__/username.test.ts` — listing it would make
+ * `usernameSchema.safeParse('oxy')` fail and falsify that comment. A brand
+ * with no account of its own yet (measured 2026-09-18: Alia, Allo, TNP,
+ * Kaana, Bloom) has no row to protect it, so it is listed until one exists.
+ */
+exports.RESERVED_USERNAMES = new Set([
+    // Oxy product lines with no account row of their own yet.
+    'alia',
+    'allo',
+    'tnp',
+    'kaana',
+    'bloom',
+    // System / role words a signup impersonating staff or Oxy itself would reach for.
+    'admin',
+    'administrator',
+    'root',
+    'superadmin',
+    'super',
+    'superuser',
+    'support',
+    'staff',
+    'moderator',
+    'mod',
+    'security',
+    'system',
+    'official',
+    'help',
+    'noreply',
+    'anonymous',
+    'everyone',
+    'owner',
+]);
+/** The 400 / inline-validation copy for a handle on {@link RESERVED_USERNAMES}. */
+exports.RESERVED_USERNAME_MESSAGE = 'This username is reserved and cannot be registered';
+/**
+ * {@link RESERVED_USERNAMES}, minus `alia`, checked against each `-`/`_`
+ * separated SEGMENT of a candidate rather than the whole string — so
+ * `official-oxy`, `super-admin` and `team-kaana` are refused the same as the
+ * bare words, without banning every word that merely CONTAINS one as a
+ * substring (`superman`, `modern`, `grassroot`, `homeowner` all stay legal:
+ * none of them separates the reserved word from the rest with `-` or `_`).
+ *
+ * `alia` is excluded because `alia-` is the live internal-cost-centre
+ * namespace: `alia-production-chat` is a minted account and
+ * `alia-research` / `alia-voice` / `alia-evaluations` are pinned as legal
+ * slugs in `__tests__/username.test.ts` and `internalCostCenterSpecs.test.ts`.
+ * Segment-matching `alia` would refuse all four. The bare word `alia` is
+ * still refused — {@link RESERVED_USERNAMES} above catches it exactly.
+ */
+exports.RESERVED_USERNAME_SEGMENTS = new Set([...exports.RESERVED_USERNAMES].filter((word) => word !== 'alia'));
+/** The 400 / inline-validation copy for a handle that is only digits. */
+exports.NUMERIC_USERNAME_MESSAGE = 'Username cannot be only numbers';
+/**
+ * Alphanumeric runs joined by single separators, as a SOURCE string.
+ *
+ * A string rather than a literal because the OpenAPI docblocks that publish this
+ * rule (`POST /auth/register`, `PUT /users/:userId`) must quote it verbatim, and
+ * `usernamePolicySingleSource.test.ts` compares them against THIS constant. A
+ * published `pattern:` that drifts from the enforced rule is a lie told to every
+ * client that generates from the spec, and it is exactly the kind of copy nobody
+ * notices going stale.
+ *
+ * Deliberately NOT re-exported from the package barrel: it exists for the
+ * schema below and for that one gate. Anything validating a username uses
+ * {@link usernameSchema}, so there is no second way to ask the question.
+ *
+ * Written as an unambiguous alternation rather than a lookahead: every character
+ * belongs to exactly one branch, so matching is linear and there is no
+ * backtracking to bound. It also carries no `\p{…}` property escape, which
+ * mobile Hermes throws on at runtime — this module is reachable from every React
+ * Native consumer.
+ */
+exports.USERNAME_PATTERN_SOURCE = '^[A-Za-z0-9]+(?:[-_][A-Za-z0-9]+)*$';
+exports.USERNAME_PATTERN = new RegExp(exports.USERNAME_PATTERN_SOURCE);
+/**
+ * Drop the characters the policy forbids, for an input field that filters
+ * keystrokes.
+ *
+ * This is a TYPING aid and nothing else — the result still has to pass
+ * {@link usernameSchema}, which is what decides. It does not lower-case (case is
+ * preserved, see the header) and it cannot repair a name: a value that is too
+ * short, edge-separated or doubly-separated comes back unchanged and fails
+ * validation with a message, which is the outcome the coercing rules this
+ * replaces used to hide.
+ */
+function stripDisallowedUsernameCharacters(input) {
+    return input.replace(/[^A-Za-z0-9_-]/g, '');
+}
+/**
+ * The label a bot's handle ends in — the ONE exception the policy carries.
+ *
+ * Lower-case here because it is what a generator appends; the comparison that
+ * enforces it folds case, so `MyBot` satisfies it just as `mybot` does.
+ *
+ * Deliberately NOT re-exported from the package barrel, for the same reason
+ * {@link USERNAME_PATTERN_SOURCE} is not: it exists for the schema and the
+ * generator aid below. A consumer that wants to SAY the rule uses
+ * {@link BOT_USERNAME_INVALID_MESSAGE}, which already quotes it, and one that
+ * wants to APPLY it uses {@link applyBotUsernameSuffix} — so there is no second
+ * way to spell the check.
+ */
+exports.BOT_USERNAME_SUFFIX = 'bot';
+/** The 400 / inline-validation copy for a bot handle that carries no label. */
+exports.BOT_USERNAME_INVALID_MESSAGE = `A bot account's username must end in "${exports.BOT_USERNAME_SUFFIX}"`;
+/**
+ * Label a proposed bot handle, so a generator PROPOSES something the server will
+ * accept.
+ *
+ * Alia builds an agent's handle from its display name; without this it would
+ * propose `garden-helper` for a bot and be 400ed on submit, which is the same
+ * "suggest, then refuse" defect the minimum length already caused once.
+ *
+ * It appends and never inserts: a separator is the caller's choice, so
+ * `garden-helper` becomes `garden-helperbot` while a caller who typed
+ * `garden-helper-` gets `garden-helper-bot`. It truncates to leave room rather
+ * than overflowing {@link USERNAME_MAX_LENGTH}.
+ *
+ * Like {@link stripDisallowedUsernameCharacters} it is an aid, not a decision: it
+ * cannot repair a handle the base policy refuses, and the result still has to
+ * pass {@link botUsernameSchema}.
+ */
+function applyBotUsernameSuffix(candidate) {
+    const trimmed = candidate.trim();
+    if (trimmed.toLowerCase().endsWith(exports.BOT_USERNAME_SUFFIX)) {
+        return trimmed;
+    }
+    return trimmed.slice(0, exports.USERNAME_MAX_LENGTH - exports.BOT_USERNAME_SUFFIX.length) + exports.BOT_USERNAME_SUFFIX;
+}
+/* -------------------------------------------------------------------------- */
+/*  Checks                                                                    */
+/* -------------------------------------------------------------------------- */
+/** The username policy as a check — the twin of `usernameSchema`, same messages. */
+exports.usernameCheck = (0, check_1.refine)((0, check_1.refine)((0, check_1.refine)((0, check_1.string)(check_1.trim, (0, check_1.minLength)(exports.USERNAME_MIN_LENGTH, exports.USERNAME_INVALID_MESSAGE), (0, check_1.maxLength)(exports.USERNAME_MAX_LENGTH, exports.USERNAME_INVALID_MESSAGE), (0, check_1.pattern)(exports.USERNAME_PATTERN, exports.USERNAME_INVALID_MESSAGE)), (username) => !/^[0-9]+$/.test(username), exports.NUMERIC_USERNAME_MESSAGE), (username) => !exports.RESERVED_USERNAMES.has(username.toLowerCase()), exports.RESERVED_USERNAME_MESSAGE), (username) => !username
+    .split(/[-_]/)
+    .some((segment) => exports.RESERVED_USERNAME_SEGMENTS.has(segment.toLowerCase())), exports.RESERVED_USERNAME_MESSAGE);
+/** A bot's username: the policy plus the `bot` suffix — the twin of `botUsernameSchema`. */
+exports.botUsernameCheck = (0, check_1.refine)(exports.usernameCheck, (username) => username.toLowerCase().endsWith(exports.BOT_USERNAME_SUFFIX), exports.BOT_USERNAME_INVALID_MESSAGE);
+/** The twin of `usernameSchemaForAccountKind`. */
+function usernameCheckForAccountKind(kind) {
+    return kind === 'bot' ? exports.botUsernameCheck : exports.usernameCheck;
+}

package/dist/cjs/deviceSession.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deviceJoinResponseSchema = exports.deviceJoinRequestSchema = exports.deviceJoinCodeResponseSchema = exports.deviceJoinCodeRequestSchema = exports.deviceRegisterResponseSchema = exports.deviceProofSchema = exports.deviceBackgroundTokenResponseSchema = exports.deviceBackgroundTokenRequestSchema = exports.deviceBackgroundCredentialResponseSchema = exports.sessionAccountsChangedEventSchema = exports.sessionAccountsChangedReasonSchema = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceTokenMintResponseSchema = exports.deviceTokenMintRequestSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = void 0;
+exports.deviceJoinResponseSchema = exports.deviceJoinRequestSchema = exports.deviceJoinCodeResponseSchema = exports.deviceJoinCodeRequestSchema = exports.deviceRegisterResponseSchema = exports.deviceProofSchema = exports.deviceBackgroundTokenResponseSchema = exports.deviceBackgroundTokenRequestSchema = exports.deviceBackgroundCredentialResponseSchema = exports.sessionAccountsChangedEventSchema = exports.sessionAccountsChangedReasonSchema = exports.deviceTokenMintResponseSchema = exports.deviceTokenMintRequestSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.SESSION_ACCOUNTS_CHANGED_EVENT = void 0;
 const zod_1 = require("zod");
+var deviceSession_1 = require("./client/deviceSession");
+Object.defineProperty(exports, "SESSION_ACCOUNTS_CHANGED_EVENT", { enumerable: true, get: function () { return deviceSession_1.SESSION_ACCOUNTS_CHANGED_EVENT; } });
 exports.sessionAccountSchema = zod_1.z.object({
     accountId: zod_1.z.string(),
     sessionId: zod_1.z.string(),
@@ -61,21 +63,6 @@ exports.deviceTokenMintResponseSchema = zod_1.z.object({
     nextDeviceSecret: zod_1.z.string(),
     state: exports.deviceSessionStateSchema,
 });
-/* -------------------------------------------------------------------------- */
-/*  Instant cross-app session sync (token-free socket signal)                 */
-/* -------------------------------------------------------------------------- */
-/**
- * Name of the token-free Socket.IO event emitted to room `user:<userId>` on
- * every DeviceSession mutation that changes what is signed in for that user.
- *
- * This is a pure SIGNAL — it carries NO access token, NO deviceSecret and NO
- * account bodies. A client that receives it re-fetches its authenticated
- * session/account state (`GET /session/device/state`, `GET /accounts`). Unlike
- * `session_state` (scoped to `device:<deviceId>`, i.e. a single origin), this
- * reaches ALL of a user's connected sockets across their devices/origins so
- * every Oxy app reflects an add / switch / signout instantly.
- */
-exports.SESSION_ACCOUNTS_CHANGED_EVENT = 'session_accounts_changed';
 /**
  * Why the signed-in set changed:
  *  - `login`   — a brand-new session was minted for the user (QR / cross-app authorize)

package/dist/cjs/identityLink.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.identityLinkCompleteRequestSchema = exports.identityLinkProofRequestSchema = exports.identityLinkStateSchema = exports.identityLinkCreateResponseSchema = exports.identityLinkIdSchema = exports.IDENTITY_LINK_QR_PREFIX = exports.IDENTITY_LINK_STATUSES = void 0;
-exports.buildIdentityLinkQrPayload = buildIdentityLinkQrPayload;
-exports.parseIdentityLinkQrPayload = parseIdentityLinkQrPayload;
+exports.identityLinkCompleteRequestSchema = exports.identityLinkProofRequestSchema = exports.identityLinkStateSchema = exports.identityLinkCreateResponseSchema = exports.identityLinkIdSchema = exports.parseIdentityLinkQrPayload = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_QR_PREFIX = exports.IDENTITY_LINK_STATUSES = void 0;
 /**
  * Linking Commons to an account without a key (ADR 0029 D3) — the two-device
  * relay.
@@ -31,45 +29,26 @@ exports.parseIdentityLinkQrPayload = parseIdentityLinkQrPayload;
 const zod_1 = require("zod");
 const identityProof_1 = require("./identityProof");
 const signIn_1 = require("./signIn");
-exports.IDENTITY_LINK_STATUSES = ['pending', 'signed', 'completed', 'cancelled'];
-/** The scheme and host Commons routes a link QR to. */
-exports.IDENTITY_LINK_QR_PREFIX = 'oxycommons://link';
-const LINK_ID = /^[0-9a-f]{32}$/;
-const CHALLENGE = /^[0-9a-f]{64}$/;
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const identityLink_1 = require("./client/identityLink");
+var identityLink_2 = require("./client/identityLink");
+Object.defineProperty(exports, "IDENTITY_LINK_STATUSES", { enumerable: true, get: function () { return identityLink_2.IDENTITY_LINK_STATUSES; } });
+Object.defineProperty(exports, "IDENTITY_LINK_QR_PREFIX", { enumerable: true, get: function () { return identityLink_2.IDENTITY_LINK_QR_PREFIX; } });
+Object.defineProperty(exports, "buildIdentityLinkQrPayload", { enumerable: true, get: function () { return identityLink_2.buildIdentityLinkQrPayload; } });
+Object.defineProperty(exports, "parseIdentityLinkQrPayload", { enumerable: true, get: function () { return identityLink_2.parseIdentityLinkQrPayload; } });
 exports.identityLinkIdSchema = zod_1.z
     .string()
     .trim()
-    .regex(LINK_ID, 'linkId must be 32 lowercase hex characters');
-/** The QR auth.oxy.so shows: the request's id and the challenge Commons signs. */
-function buildIdentityLinkQrPayload(linkId, challenge) {
-    return `${exports.IDENTITY_LINK_QR_PREFIX}?id=${linkId}&c=${challenge}`;
-}
-/** The request a scanned code names, or `null` for anything that is not a link QR. */
-function parseIdentityLinkQrPayload(raw) {
-    const value = raw.trim();
-    if (!value.startsWith(`${exports.IDENTITY_LINK_QR_PREFIX}?`))
-        return null;
-    // Parsed by hand: React Native's `URLSearchParams` does not implement `get`.
-    const params = new Map();
-    for (const pair of value.slice(exports.IDENTITY_LINK_QR_PREFIX.length + 1).split('&')) {
-        const separator = pair.indexOf('=');
-        if (separator > 0)
-            params.set(pair.slice(0, separator), pair.slice(separator + 1));
-    }
-    const linkId = params.get('id') ?? '';
-    const challenge = params.get('c') ?? '';
-    if (!LINK_ID.test(linkId) || !CHALLENGE.test(challenge))
-        return null;
-    return { linkId, challenge };
-}
+    .regex(identityLink_1.LINK_ID, 'linkId must be 32 lowercase hex characters');
 exports.identityLinkCreateResponseSchema = zod_1.z.object({
     linkId: exports.identityLinkIdSchema,
-    challenge: zod_1.z.string().regex(CHALLENGE),
+    challenge: zod_1.z.string().regex(identityLink_1.CHALLENGE),
     expiresAt: zod_1.z.number().int().positive(),
-    qrPayload: zod_1.z.string().startsWith(exports.IDENTITY_LINK_QR_PREFIX),
+    qrPayload: zod_1.z.string().startsWith(identityLink_1.IDENTITY_LINK_QR_PREFIX),
 });
 exports.identityLinkStateSchema = zod_1.z.object({
-    status: zod_1.z.enum(exports.IDENTITY_LINK_STATUSES),
+    status: zod_1.z.enum(identityLink_1.IDENTITY_LINK_STATUSES),
     userId: zod_1.z.string().min(1),
     username: zod_1.z.string().nullable(),
     publicKey: zod_1.z.string().nullable(),

package/dist/cjs/identityProof.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.identityRootStatusSchema = exports.IDENTITY_ERROR_CODES = exports.identityProofChallengeResponseSchema = exports.identityProofChallengeRequestSchema = exports.identityProofSchema = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_VERSION = void 0;
-exports.canonicalJson = canonicalJson;
-exports.buildIdentityProofMessage = buildIdentityProofMessage;
+exports.identityRootStatusSchema = exports.identityProofChallengeResponseSchema = exports.identityProofChallengeRequestSchema = exports.identityProofSchema = exports.IDENTITY_ERROR_CODES = exports.buildIdentityProofMessage = exports.canonicalJson = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_VERSION = void 0;
 /**
  * Identity proof contract — the ONE signed format for operations on a personal root.
  *
@@ -21,121 +19,35 @@ exports.buildIdentityProofMessage = buildIdentityProofMessage;
  * primitive and passes the hex digest in).
  */
 const zod_1 = require("zod");
-exports.IDENTITY_PROOF_VERSION = 2;
-exports.IDENTITY_PROOF_DOMAIN = 'oxy-identity-proof';
-/** The audience every API-verified identity proof names. */
-exports.IDENTITY_PROOF_AUDIENCE = 'oxy-api/identity';
-/** How long a proof challenge lives: one interactive ceremony. */
-exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = 5 * 60 * 1000;
-/**
- * Everything a root proof may authorize. A challenge is minted for exactly one
- * action and spent only by a proof for that action.
- */
-exports.IDENTITY_PROOF_ACTIONS = {
-    /**
-     * Link Commons' root to an account that has none (`POST /auth/link`).
-     * The account becomes self-custodied and its email is deleted
-     * (ADR 0029 D3).
-     */
-    link: 'link_identity',
-};
-exports.IDENTITY_PROOF_ACTION_VALUES = Object.values(exports.IDENTITY_PROOF_ACTIONS);
-const HEX_DIGEST = /^[0-9a-f]{64}$/;
-const ROOT_KEY = /^04[0-9a-f]{128}$/;
-const CHALLENGE = /^[0-9a-f]{64}$/;
-/**
- * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace,
- * `undefined` members omitted, arrays in order. Numbers must be finite. This is
- * the ONLY serializer for anything digested into a proof.
- */
-function canonicalJson(value) {
-    if (value === null)
-        return 'null';
-    switch (typeof value) {
-        case 'string':
-        case 'boolean':
-            return JSON.stringify(value);
-        case 'number':
-            if (!Number.isFinite(value))
-                throw new Error('canonicalJson: non-finite number');
-            return JSON.stringify(value);
-        case 'object': {
-            if (Array.isArray(value)) {
-                return `[${value.map((entry) => (entry === undefined ? 'null' : canonicalJson(entry))).join(',')}]`;
-            }
-            const record = value;
-            const keys = Object.keys(record)
-                .filter((key) => record[key] !== undefined)
-                .sort();
-            return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(',')}}`;
-        }
-        default:
-            throw new Error(`canonicalJson: unsupported ${typeof value}`);
-    }
-}
-/**
- * The exact bytes a root signs. Throws on a malformed claim rather than signing
- * (or verifying) something ambiguous.
- */
-function buildIdentityProofMessage(claims) {
-    if (!exports.IDENTITY_PROOF_ACTION_VALUES.includes(claims.action))
-        throw new Error('identity proof: unknown action');
-    if (!claims.subject || !claims.actor)
-        throw new Error('identity proof: subject and actor are required');
-    if (!ROOT_KEY.test(claims.rootPublicKey))
-        throw new Error('identity proof: rootPublicKey must be canonical');
-    if (claims.payloadDigest !== null && !HEX_DIGEST.test(claims.payloadDigest)) {
-        throw new Error('identity proof: payloadDigest must be a lowercase SHA-256 hex digest');
-    }
-    if (claims.expectedRevision !== null &&
-        (!Number.isSafeInteger(claims.expectedRevision) || claims.expectedRevision < 0)) {
-        throw new Error('identity proof: expectedRevision must be a non-negative integer');
-    }
-    if (!CHALLENGE.test(claims.challenge))
-        throw new Error('identity proof: challenge must be 64 lowercase hex characters');
-    if (!Number.isSafeInteger(claims.expiresAt) || claims.expiresAt <= 0)
-        throw new Error('identity proof: expiresAt must be unix milliseconds');
-    return canonicalJson({
-        v: exports.IDENTITY_PROOF_VERSION,
-        domain: exports.IDENTITY_PROOF_DOMAIN,
-        action: claims.action,
-        subject: claims.subject,
-        actor: claims.actor,
-        rootPublicKey: claims.rootPublicKey,
-        payloadDigest: claims.payloadDigest,
-        expectedRevision: claims.expectedRevision,
-        audience: claims.audience,
-        challenge: claims.challenge,
-        expiresAt: claims.expiresAt,
-    });
-}
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const identityProof_1 = require("./client/identityProof");
+var identityProof_2 = require("./client/identityProof");
+Object.defineProperty(exports, "IDENTITY_PROOF_VERSION", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_VERSION; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_DOMAIN", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_DOMAIN; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_AUDIENCE", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_AUDIENCE; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_CHALLENGE_TTL_MS", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_CHALLENGE_TTL_MS; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_ACTIONS", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_ACTIONS; } });
+Object.defineProperty(exports, "IDENTITY_PROOF_ACTION_VALUES", { enumerable: true, get: function () { return identityProof_2.IDENTITY_PROOF_ACTION_VALUES; } });
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return identityProof_2.canonicalJson; } });
+Object.defineProperty(exports, "buildIdentityProofMessage", { enumerable: true, get: function () { return identityProof_2.buildIdentityProofMessage; } });
+Object.defineProperty(exports, "IDENTITY_ERROR_CODES", { enumerable: true, get: function () { return identityProof_2.IDENTITY_ERROR_CODES; } });
 /** The proof as it travels: the signature plus the two claims the verifier cannot derive. */
 exports.identityProofSchema = zod_1.z.object({
-    v: zod_1.z.literal(exports.IDENTITY_PROOF_VERSION),
-    challenge: zod_1.z.string().trim().regex(CHALLENGE, 'challenge must be 64 lowercase hex characters'),
+    v: zod_1.z.literal(identityProof_1.IDENTITY_PROOF_VERSION),
+    challenge: zod_1.z.string().trim().regex(identityProof_1.CHALLENGE, 'challenge must be 64 lowercase hex characters'),
     expiresAt: zod_1.z.number().int().positive(),
     signature: zod_1.z.string().trim().min(1).max(512),
 });
 /** `POST /identity/proof-challenge` */
 exports.identityProofChallengeRequestSchema = zod_1.z.object({
-    action: zod_1.z.enum(exports.IDENTITY_PROOF_ACTION_VALUES),
+    action: zod_1.z.enum(identityProof_1.IDENTITY_PROOF_ACTION_VALUES),
 });
 exports.identityProofChallengeResponseSchema = zod_1.z.object({
-    challenge: zod_1.z.string().regex(CHALLENGE),
+    challenge: zod_1.z.string().regex(identityProof_1.CHALLENGE),
     expiresAt: zod_1.z.number().int().positive(),
     audience: zod_1.z.string().min(1),
 });
-/**
- * Stable error codes the root routes answer with (`error.code` in the API error
- * body). Clients map these through their localization, never the English message.
- */
-exports.IDENTITY_ERROR_CODES = {
-    proofInvalid: 'IDENTITY_PROOF_INVALID',
-    rootAlreadyLinked: 'IDENTITY_ROOT_ALREADY_LINKED',
-    rootLinkedElsewhere: 'IDENTITY_ROOT_LINKED_ELSEWHERE',
-    freshFactorRequired: 'IDENTITY_FRESH_FACTOR_REQUIRED',
-    notPersonal: 'IDENTITY_NOT_PERSONAL_ACCOUNT',
-};
 exports.identityRootStatusSchema = zod_1.z.object({
     rootLinked: zod_1.z.boolean(),
     recoveryEmail: zod_1.z.string().nullable(),

package/dist/cjs/index.js

@@ -37,9 +37,9 @@ exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.i
 exports.realtimeItemTruncateCommandSchema = exports.realtimeItemDeleteCommandSchema = exports.realtimeItemCreateCommandSchema = exports.realtimeSessionUpdateCommandSchema = exports.realtimeResponseParametersSchema = exports.realtimeConversationItemSchema = exports.realtimeContentPartSchema = exports.realtimeSessionRequestSchema = exports.realtimeClientMetadataSchema = exports.realtimeSessionLimitsSchema = exports.realtimeSessionConfigUpdateSchema = exports.realtimeSessionConfigSchema = exports.realtimeTranslationSchema = exports.realtimeInputTranscriptionSchema = exports.realtimeTurnDetectionSchema = exports.realtimeOutputModalitySchema = exports.realtimeAudioFormatSchema = exports.realtimeResponseIdSchema = exports.realtimeItemIdSchema = exports.realtimeCommandIdSchema = exports.MAX_REALTIME_RESUME_WINDOW_MS = exports.MAX_REALTIME_SESSION_AUDIO_BYTES = exports.MAX_REALTIME_SESSION_DURATION_MS = exports.MAX_REALTIME_AUDIO_FRAME_BASE64_LENGTH = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamAudioEventSchema = exports.MAX_INFERENCE_AUDIO_BYTES = exports.inferenceAudioMediaTypeSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.inferenceReasoningSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = void 0;
 exports.kaanaCredentialRotateMutationSchema = exports.kaanaCredentialCreateMutationSchema = exports.kaanaCredentialIdentitySchema = exports.kaanaCredentialOperationActionSchema = exports.kaanaCredentialOperationIdSchema = exports.kaanaCredentialHandleSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.realtimeServerEventSchema = exports.realtimeSessionClosedEventSchema = exports.realtimeSessionCloseReasonSchema = exports.realtimeErrorEventSchema = exports.realtimeResponseDoneEventSchema = exports.realtimeResponseStatusSchema = exports.realtimeToolCallEventSchema = exports.realtimeTextDeltaEventSchema = exports.realtimeTranscriptDoneEventSchema = exports.realtimeTranscriptDeltaEventSchema = exports.realtimeTranscriptSourceSchema = exports.realtimeOutputAudioDoneEventSchema = exports.realtimeOutputAudioDeltaEventSchema = exports.realtimeResponseCreatedEventSchema = exports.realtimeInputAudioClearedEventSchema = exports.realtimeInputAudioCommittedEventSchema = exports.realtimeSpeechStoppedEventSchema = exports.realtimeSpeechStartedEventSchema = exports.realtimeItemTruncatedEventSchema = exports.realtimeItemDeletedEventSchema = exports.realtimeItemDoneEventSchema = exports.realtimeItemAddedEventSchema = exports.realtimeCommandAcceptedEventSchema = exports.realtimeSessionResumedEventSchema = exports.realtimeSessionUpdatedEventSchema = exports.realtimeSessionCreatedEventSchema = exports.realtimeClientCommandSchema = exports.realtimeSessionCloseCommandSchema = exports.realtimeSessionResumeCommandSchema = exports.realtimeResponseCancelCommandSchema = exports.realtimeResponseCreateCommandSchema = exports.realtimeInputAudioClearCommandSchema = exports.realtimeInputAudioCommitCommandSchema = exports.realtimeInputAudioAppendCommandSchema = void 0;
 exports.payAsYouGoEntitlementSchema = exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerCredentialCustodyStateSchema = exports.providerCredentialValidationDeploymentSchema = exports.providerCredentialValidationOperationSchema = exports.kaanaCredentialValidationOutcomeSchema = exports.kaanaCredentialValidationFailureCodeSchema = exports.kaanaCredentialValidationOutcomeStateSchema = exports.kaanaCredentialValidationTaskSchema = exports.kaanaCredentialOutcomeSchema = exports.kaanaCredentialConflictOutcomeSchema = exports.kaanaCredentialAppliedOutcomeSchema = exports.kaanaCredentialOutcomeRequestSchema = exports.kaanaCredentialRevokeOutcomeRequestSchema = exports.kaanaCredentialRotateOutcomeRequestSchema = exports.kaanaCredentialCreateOutcomeRequestSchema = exports.kaanaCredentialMutationSchema = exports.kaanaCredentialRevokeMutationSchema = void 0;
-exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
-exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = void 0;
-exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = void 0;
+exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
+exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = void 0;
+exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -782,6 +782,9 @@ Object.defineProperty(exports, "executionAuthorizationRefSchema", { enumerable:
 Object.defineProperty(exports, "capabilityCoordinatorSchema", { enumerable: true, get: function () { return agency_1.capabilityCoordinatorSchema; } });
 Object.defineProperty(exports, "capabilityTicketRequestSchema", { enumerable: true, get: function () { return agency_1.capabilityTicketRequestSchema; } });
 Object.defineProperty(exports, "delegationGrantSchema", { enumerable: true, get: function () { return agency_1.delegationGrantSchema; } });
+Object.defineProperty(exports, "AGENT_REQUESTER_CEILING_AUTONOMY", { enumerable: true, get: function () { return agency_1.AGENT_REQUESTER_CEILING_AUTONOMY; } });
+Object.defineProperty(exports, "agentRequesterCeilingWriteSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingWriteSchema; } });
+Object.defineProperty(exports, "agentRequesterCeilingSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingSchema; } });
 Object.defineProperty(exports, "automationTriggerSchema", { enumerable: true, get: function () { return agency_1.automationTriggerSchema; } });
 Object.defineProperty(exports, "automationActorSelectionSchema", { enumerable: true, get: function () { return agency_1.automationActorSelectionSchema; } });
 Object.defineProperty(exports, "automationDataFlowSchema", { enumerable: true, get: function () { return agency_1.automationDataFlowSchema; } });
@@ -793,6 +796,8 @@ Object.defineProperty(exports, "auditResultSchema", { enumerable: true, get: fun
 Object.defineProperty(exports, "auditEventSchema", { enumerable: true, get: function () { return agency_1.auditEventSchema; } });
 Object.defineProperty(exports, "catalogToolSchema", { enumerable: true, get: function () { return agency_1.catalogToolSchema; } });
 Object.defineProperty(exports, "catalogEventSchema", { enumerable: true, get: function () { return agency_1.catalogEventSchema; } });
+Object.defineProperty(exports, "catalogFeatureSchema", { enumerable: true, get: function () { return agency_1.catalogFeatureSchema; } });
+Object.defineProperty(exports, "CATALOG_INTERNAL_TRANSPORTS", { enumerable: true, get: function () { return agency_1.CATALOG_INTERNAL_TRANSPORTS; } });
 Object.defineProperty(exports, "appCapabilityCatalogSchema", { enumerable: true, get: function () { return agency_1.appCapabilityCatalogSchema; } });
 Object.defineProperty(exports, "catalogRegistrationSchema", { enumerable: true, get: function () { return agency_1.catalogRegistrationSchema; } });
 Object.defineProperty(exports, "normalizedAppEventSchema", { enumerable: true, get: function () { return agency_1.normalizedAppEventSchema; } });
@@ -823,6 +828,7 @@ Object.defineProperty(exports, "inboxInferenceStreamEventSchema", { enumerable:
 __exportStar(require("./externalIdentity"), exports);
 __exportStar(require("./linkedAccounts"), exports);
 __exportStar(require("./federationInstanceFetch"), exports);
+__exportStar(require("./accountAccess"), exports);
 __exportStar(require("./notifications"), exports);
 __exportStar(require("./email/messages"), exports);
 __exportStar(require("./stickers"), exports);
@@ -889,3 +895,7 @@ Object.defineProperty(exports, "personalPlanCatalogueSchema", { enumerable: true
 __exportStar(require("./products/checkout"), exports);
 __exportStar(require("./organizations"), exports);
 __exportStar(require("./safety"), exports);
+var serviceToken_1 = require("./serviceToken");
+Object.defineProperty(exports, "serviceTokenScopesSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenScopesSchema; } });
+Object.defineProperty(exports, "serviceTokenOptionsSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenOptionsSchema; } });
+__exportStar(require("./applicationRoles"), exports);

package/dist/cjs/organizations.js

@@ -1,46 +1,38 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.organizationCurationResultSchema = exports.organizationCurationSchema = exports.organizationErrorSchema = exports.ORGANIZATION_ERROR_CODES = exports.organizationMergeSchema = exports.organizationExternalResolutionSchema = exports.organizationExternalSchema = exports.organizationImportBatchResultSchema = exports.organizationImportBatchSchema = exports.organizationExternalInputSchema = exports.organizationClaimReviewSchema = exports.organizationClaimListSchema = exports.organizationClaimListQuerySchema = exports.organizationClaimDetailSchema = exports.organizationClaimSchema = exports.organizationClaimInputSchema = exports.organizationBatchSchema = exports.organizationBatchInputSchema = exports.organizationListSchema = exports.organizationSearchSchema = exports.organizationSchema = exports.updateOrganizationSchema = exports.createOrganizationSchema = exports.organizationNameSchema = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.organizationAliasSchema = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_TYPES = void 0;
+exports.organizationCurationResultSchema = exports.organizationCurationSchema = exports.organizationErrorSchema = exports.organizationMergeSchema = exports.organizationExternalResolutionSchema = exports.organizationExternalSchema = exports.organizationImportBatchResultSchema = exports.organizationImportBatchSchema = exports.organizationExternalInputSchema = exports.organizationClaimReviewSchema = exports.organizationClaimListSchema = exports.organizationClaimListQuerySchema = exports.organizationClaimDetailSchema = exports.organizationClaimSchema = exports.organizationClaimInputSchema = exports.organizationBatchSchema = exports.organizationBatchInputSchema = exports.organizationListSchema = exports.organizationSearchSchema = exports.organizationSchema = exports.updateOrganizationSchema = exports.createOrganizationSchema = exports.organizationNameSchema = exports.organizationAliasSchema = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_TYPES = void 0;
 const zod_1 = require("zod");
-/** Real-world identity classification, independent of account topics and permissions. */
-exports.ORGANIZATION_TYPES = [
-    'business',
-    'nonprofit',
-    'public_body',
-    'community',
-    'other',
-];
-exports.ORGANIZATION_STATUSES = ['active', 'inactive', 'merged', 'suppressed'];
-exports.ORGANIZATION_CLAIM_STATUSES = ['unclaimed', 'claimed'];
-exports.ORGANIZATION_ALIAS_KINDS = [
-    'name_variant',
-    'former_name',
-    'localized_name',
-    'marketing_name',
-    'misspelling',
-];
-exports.ORGANIZATION_CLAIM_DECISIONS = ['pending', 'approved', 'rejected'];
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry is unchanged.
+const organizations_1 = require("./client/organizations");
+var organizations_2 = require("./client/organizations");
+Object.defineProperty(exports, "ORGANIZATION_TYPES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_TYPES; } });
+Object.defineProperty(exports, "ORGANIZATION_STATUSES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_STATUSES; } });
+Object.defineProperty(exports, "ORGANIZATION_CLAIM_STATUSES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_CLAIM_STATUSES; } });
+Object.defineProperty(exports, "ORGANIZATION_ALIAS_KINDS", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_ALIAS_KINDS; } });
+Object.defineProperty(exports, "ORGANIZATION_CLAIM_DECISIONS", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_CLAIM_DECISIONS; } });
+Object.defineProperty(exports, "ORGANIZATION_NAME_MAX_LENGTH", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_NAME_MAX_LENGTH; } });
+Object.defineProperty(exports, "ORGANIZATION_ERROR_CODES", { enumerable: true, get: function () { return organizations_2.ORGANIZATION_ERROR_CODES; } });
 const id = zod_1.z.string().min(1).max(128);
 const optionalText = (max) => zod_1.z.string().trim().min(1).max(max).nullable().optional();
 exports.organizationAliasSchema = zod_1.z
     .object({
     alias: zod_1.z.string().trim().min(1).max(300),
-    kind: zod_1.z.enum(exports.ORGANIZATION_ALIAS_KINDS),
+    kind: zod_1.z.enum(organizations_1.ORGANIZATION_ALIAS_KINDS),
     language: zod_1.z.string().min(2).max(35).optional(),
 })
     .strict();
-exports.ORGANIZATION_NAME_MAX_LENGTH = 300;
 exports.organizationNameSchema = zod_1.z
     .string()
     .trim()
     .min(1)
-    .max(exports.ORGANIZATION_NAME_MAX_LENGTH)
+    .max(organizations_1.ORGANIZATION_NAME_MAX_LENGTH)
     .refine((value) => !/[<>]/.test(value) &&
     Array.from(value).every((character) => character.charCodeAt(0) >= 32 && character.charCodeAt(0) !== 127), 'Organization name must be plain text');
 exports.createOrganizationSchema = zod_1.z
     .object({
     name: exports.organizationNameSchema,
-    organizationType: zod_1.z.enum(exports.ORGANIZATION_TYPES),
+    organizationType: zod_1.z.enum(organizations_1.ORGANIZATION_TYPES),
     legalName: optionalText(300),
     websiteUrl: zod_1.z
         .string()
@@ -68,8 +60,8 @@ exports.organizationSchema = exports.createOrganizationSchema
     countryCode: zod_1.z.string().nullable(),
     aliases: zod_1.z.array(exports.organizationAliasSchema),
     verifiedDomains: zod_1.z.array(zod_1.z.string()),
-    claimStatus: zod_1.z.enum(exports.ORGANIZATION_CLAIM_STATUSES),
-    status: zod_1.z.enum(exports.ORGANIZATION_STATUSES),
+    claimStatus: zod_1.z.enum(organizations_1.ORGANIZATION_CLAIM_STATUSES),
+    status: zod_1.z.enum(organizations_1.ORGANIZATION_STATUSES),
     mergedIntoAccountId: id.nullable(),
     createdAt: zod_1.z.string().datetime(),
     updatedAt: zod_1.z.string().datetime(),
@@ -78,7 +70,7 @@ exports.organizationSchema = exports.createOrganizationSchema
 exports.organizationSearchSchema = zod_1.z
     .object({
     query: zod_1.z.string().trim().max(200).default(''),
-    organizationType: zod_1.z.enum(exports.ORGANIZATION_TYPES).optional(),
+    organizationType: zod_1.z.enum(organizations_1.ORGANIZATION_TYPES).optional(),
     limit: zod_1.z.coerce.number().int().min(1).max(50).default(20),
     cursor: zod_1.z.string().min(1).max(2048).optional(),
 })
@@ -103,7 +95,7 @@ exports.organizationClaimSchema = zod_1.z
     id,
     accountId: id,
     claimantUserId: id,
-    status: zod_1.z.enum(exports.ORGANIZATION_CLAIM_DECISIONS),
+    status: zod_1.z.enum(organizations_1.ORGANIZATION_CLAIM_DECISIONS),
     createdAt: zod_1.z.string().datetime(),
 })
     .strict();
@@ -116,7 +108,7 @@ exports.organizationClaimDetailSchema = exports.organizationClaimSchema
     .strict();
 exports.organizationClaimListQuerySchema = zod_1.z
     .object({
-    status: zod_1.z.enum(exports.ORGANIZATION_CLAIM_DECISIONS).optional(),
+    status: zod_1.z.enum(organizations_1.ORGANIZATION_CLAIM_DECISIONS).optional(),
     limit: zod_1.z.coerce.number().int().min(1).max(50).default(20),
     cursor: zod_1.z.string().min(1).max(2048).optional(),
 })
@@ -171,23 +163,11 @@ exports.organizationMergeSchema = zod_1.z
     evidenceReference: zod_1.z.string().trim().min(1).max(1000),
 })
     .strict();
-exports.ORGANIZATION_ERROR_CODES = [
-    'bad_request',
-    'unauthorized',
-    'forbidden',
-    'not_found',
-    'unknown_route',
-    'conflict',
-    'validation_failed',
-    'rate_limited',
-    'internal_error',
-    'service_unavailable',
-];
 exports.organizationErrorSchema = zod_1.z
     .object({
     error: zod_1.z
         .object({
-        code: zod_1.z.enum(exports.ORGANIZATION_ERROR_CODES),
+        code: zod_1.z.enum(organizations_1.ORGANIZATION_ERROR_CODES),
         message: zod_1.z.string(),
         details: zod_1.z
             .record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.null()]))