@oxy.so/contracts 4.17.0 → 4.21.0

package/dist/cjs/client/safety.js

@@ -1,15 +1,196 @@
 "use strict";
 /**
- * Profile-access checks, without Zod. Schemas: `../safety.ts`.
+ * Safety and supervision checks, without Zod. Schemas: `../safety.ts`.
+ *
+ * Only what a browser or device sends and reads is here: the profile-access
+ * read, supervision management and the guardian's purchase review. The service
+ * decision lanes are server-only (`@oxy.so/core/server`) and parse with the
+ * Zod schemas directly.
  *
  * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.profileAccessDecisionCheck = exports.profileAccessInputCheck = void 0;
+exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.supervisionReviewInputCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.supervisionInviteInputCheck = exports.supervisionContactsResponseCheck = exports.supervisionStateCheck = exports.supervisionInvitationCheck = exports.profileAccessDecisionCheck = exports.profileAccessInputCheck = exports.PURCHASE_APPROVAL_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SAFETY_POLICY_VERSION = exports.SUPERVISED_ACTIONS = void 0;
 const check_1 = require("./check");
+const organizations_1 = require("./organizations");
+const signIn_1 = require("./signIn");
+/** Supervision is a personal-account safety policy, never a new login/account kind. */
+exports.SUPERVISED_ACTIONS = ['profile', 'messaging', 'content', 'purchases'];
+exports.SAFETY_POLICY_VERSION = '2';
+exports.SUPERVISION_CONSENT_VERSION = '1';
+exports.SUPERVISION_STATUSES = ['active', 'orphaned', 'ended'];
+exports.SUPERVISION_INVITATION_STATUSES = ['pending', 'accepted', 'cancelled'];
+exports.PURCHASE_APPROVAL_STATUSES = [
+    'pending',
+    'approved',
+    'rejected',
+    'reserved',
+    'confirmed',
+    'cancelled',
+];
 exports.profileAccessInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ subjectAccountId: (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128)) }));
 exports.profileAccessDecisionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
     allowed: check_1.boolean,
     reason: (0, check_1.oneOf)(['public', 'owner', 'private', 'blocked', 'unavailable']),
     policyVersion: (0, check_1.literal)('1'),
 }));
+const accountId = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128));
+const resourceId = (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(256));
+const uniqueIds = (max) => (0, check_1.refine)((0, check_1.array)(accountId, (0, check_1.minItems)(1), (0, check_1.maxItems)(max)), (ids) => new Set(ids).size === ids.length, 'Account IDs must be unique');
+/* -------------------------------------------------------------------------- */
+/*  Supervision management                                                    */
+/* -------------------------------------------------------------------------- */
+const supervisionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    guardianAccountId: (0, check_1.nullable)(accountId),
+    status: (0, check_1.oneOf)(exports.SUPERVISION_STATUSES),
+    policyVersion: (0, check_1.literal)(exports.SAFETY_POLICY_VERSION),
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    createdAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.supervisionInvitationCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    id: accountId,
+    childAccountId: accountId,
+    guardianAccountId: accountId,
+    status: (0, check_1.oneOf)(exports.SUPERVISION_INVITATION_STATUSES),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    createdAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.supervisionStateCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    self: (0, check_1.nullable)(supervisionCheck),
+    children: (0, check_1.array)(supervisionCheck, (0, check_1.maxItems)(100)),
+    invitations: (0, check_1.array)(exports.supervisionInvitationCheck, (0, check_1.maxItems)(100)),
+}));
+exports.supervisionContactsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({
+        childAccountId: accountId,
+        contactAccountId: accountId,
+        approvedAt: (0, check_1.string)(check_1.datetime),
+    }), (0, check_1.maxItems)(1000)),
+}));
+exports.supervisionInviteInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    guardianAccountId: accountId,
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    reauth: signIn_1.reauthProofCheck,
+}));
+exports.supervisionAcceptInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION), reauth: signIn_1.reauthProofCheck }));
+exports.supervisionContactInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    contactAccountId: accountId,
+    reauth: signIn_1.reauthProofCheck,
+}));
+exports.supervisionReviewInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    action: (0, check_1.oneOf)(['end', 'transfer']),
+    guardianAccountId: (0, check_1.optional)(accountId),
+    evidenceReference: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(2048)),
+    reauth: signIn_1.reauthProofCheck,
+}));
+/* -------------------------------------------------------------------------- */
+/*  Minimal identities for the management screens                            */
+/* -------------------------------------------------------------------------- */
+const safetyPersonCheck = (0, check_1.exact)()((0, check_1.strictObject)({ accountId, username: (0, check_1.nullable)((0, check_1.string)()), displayName: (0, check_1.nullable)((0, check_1.string)()) }));
+exports.safetyPeopleInputCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({ query: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(2), (0, check_1.maxLength)(100)) }), (0, check_1.strictObject)({ accountIds: uniqueIds(100) })));
+exports.safetyPeopleResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({ items: (0, check_1.array)(safetyPersonCheck, (0, check_1.maxItems)(100)) }));
+exports.safetyOrganizationsInputCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({
+    query: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(100)),
+    limit: (0, check_1.optional)((0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(20))),
+}), (0, check_1.strictObject)({ ids: uniqueIds(100) })));
+exports.safetyOrganizationsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({
+        requestedAccountId: accountId,
+        organization: (0, check_1.strictObject)({
+            accountId,
+            username: (0, check_1.nullable)((0, check_1.string)()),
+            name: (0, check_1.string)(),
+            organizationType: (0, check_1.oneOf)(organizations_1.ORGANIZATION_TYPES),
+        }),
+    }), (0, check_1.maxItems)(100)),
+    missingIds: (0, check_1.array)(accountId, (0, check_1.maxItems)(100)),
+}));
+/* -------------------------------------------------------------------------- */
+/*  Purchase approvals                                                        */
+/* -------------------------------------------------------------------------- */
+const fingerprint = (0, check_1.string)((0, check_1.pattern)(/^[a-f0-9]{64}$/));
+const minorUnits = (0, check_1.number)(check_1.int, check_1.nonnegative, (0, check_1.atMost)(Number.MAX_SAFE_INTEGER));
+const purchaseApprovalLineCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    itemReference: resourceId,
+    title: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    optionsText: (0, check_1.string)(check_1.trim, (0, check_1.maxLength)(300)),
+    merchantAccountId: accountId,
+    quantity: (0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(1000000)),
+    unitAmountMinor: minorUnits,
+    lineAmountMinor: minorUnits,
+}));
+/** The effect fields every approval shape shares, in the schema's key order. */
+const purchaseEffectFields = {
+    operationId: resourceId,
+    resourceId,
+    cartFingerprint: fingerprint,
+    summary: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    merchantAccountIds: (0, check_1.transform)((0, check_1.refine)((0, check_1.array)(accountId, (0, check_1.minItems)(1), (0, check_1.maxItems)(100)), (ids) => new Set(ids).size === ids.length, 'Merchant accounts must be unique'), (ids) => [...ids].sort()),
+};
+const purchaseAmountFields = {
+    shippingMinor: minorUnits,
+    taxMinor: minorUnits,
+    discountMinor: minorUnits,
+    roundingAdjustmentMinor: (0, check_1.number)(check_1.int, (0, check_1.atLeast)(-Number.MAX_SAFE_INTEGER), (0, check_1.atMost)(Number.MAX_SAFE_INTEGER)),
+    paymentFingerprint: fingerprint,
+    amountMinor: minorUnits,
+    currency: (0, check_1.string)((0, check_1.pattern)(/^[A-Z]{3}$/)),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+};
+const purchaseApprovalFields = {
+    id: accountId,
+    childAccountId: accountId,
+    applicationId: accountId,
+    status: (0, check_1.oneOf)(exports.PURCHASE_APPROVAL_STATUSES),
+    createdAt: (0, check_1.string)(check_1.datetime),
+    receiptReference: (0, check_1.nullable)((0, check_1.string)((0, check_1.maxLength)(512))),
+};
+/** The first problem `validatePurchaseEvidence` in `../safety.ts` reports, in its order. */
+function purchaseEvidenceProblem(value) {
+    const merchants = new Set(value.merchantAccountIds);
+    const references = new Set();
+    for (const line of value.lineItems) {
+        const key = `${line.merchantAccountId}:${line.itemReference}`;
+        if (!merchants.has(line.merchantAccountId) || references.has(key)) {
+            return {
+                path: [],
+                message: 'Purchase lines must name an included merchant and unique item reference',
+            };
+        }
+        references.add(key);
+    }
+    if (merchants.size !== new Set(value.lineItems.map((line) => line.merchantAccountId)).size) {
+        return { path: [], message: 'Every merchant must have an approval line' };
+    }
+    const total = value.lineItems.reduce((sum, line) => sum + BigInt(line.lineAmountMinor), 0n) +
+        BigInt(value.shippingMinor) +
+        BigInt(value.taxMinor) -
+        BigInt(value.discountMinor) +
+        BigInt(value.roundingAdjustmentMinor);
+    if (total < 0n ||
+        total > BigInt(Number.MAX_SAFE_INTEGER) ||
+        total !== BigInt(value.amountMinor)) {
+        return { path: [], message: 'Approval evidence must equal the exact payment total' };
+    }
+    if (Math.abs(value.roundingAdjustmentMinor) >
+        value.lineItems.length + 3 * value.merchantAccountIds.length) {
+        return { path: [], message: 'Rounding adjustment exceeds the bounded conversion stages' };
+    }
+    return undefined;
+}
+exports.purchaseApprovalCheck = (0, check_1.exact)()((0, check_1.refineAt)((0, check_1.strictObject)({
+    ...purchaseEffectFields,
+    lineItems: (0, check_1.array)(purchaseApprovalLineCheck, (0, check_1.minItems)(1), (0, check_1.maxItems)(200)),
+    ...purchaseAmountFields,
+    ...purchaseApprovalFields,
+}), purchaseEvidenceProblem));
+const purchaseApprovalSummaryCheck = (0, check_1.exact)()((0, check_1.strictObject)({ ...purchaseEffectFields, ...purchaseAmountFields, ...purchaseApprovalFields }));
+exports.purchaseApprovalListCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)(purchaseApprovalSummaryCheck, (0, check_1.maxItems)(100)),
+    nextCursor: (0, check_1.nullable)((0, check_1.string)()),
+}));
+exports.purchaseReviewInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ decision: (0, check_1.oneOf)(['approved', 'rejected']), reauth: signIn_1.reauthProofCheck }));

package/dist/cjs/client/signIn.js

@@ -70,6 +70,8 @@ exports.REAUTH_ACTIONS = [
     'link_commons',
     'delete_account',
     'credentials_manage',
+    'supervision',
+    'supervision_purchase',
 ];
 /**
  * Stable error codes (`error.code` in the API error body). Clients map these

package/dist/cjs/index.js

@@ -37,9 +37,9 @@ exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.i
 exports.realtimeItemTruncateCommandSchema = exports.realtimeItemDeleteCommandSchema = exports.realtimeItemCreateCommandSchema = exports.realtimeSessionUpdateCommandSchema = exports.realtimeResponseParametersSchema = exports.realtimeConversationItemSchema = exports.realtimeContentPartSchema = exports.realtimeSessionRequestSchema = exports.realtimeClientMetadataSchema = exports.realtimeSessionLimitsSchema = exports.realtimeSessionConfigUpdateSchema = exports.realtimeSessionConfigSchema = exports.realtimeTranslationSchema = exports.realtimeInputTranscriptionSchema = exports.realtimeTurnDetectionSchema = exports.realtimeOutputModalitySchema = exports.realtimeAudioFormatSchema = exports.realtimeResponseIdSchema = exports.realtimeItemIdSchema = exports.realtimeCommandIdSchema = exports.MAX_REALTIME_RESUME_WINDOW_MS = exports.MAX_REALTIME_SESSION_AUDIO_BYTES = exports.MAX_REALTIME_SESSION_DURATION_MS = exports.MAX_REALTIME_AUDIO_FRAME_BASE64_LENGTH = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamAudioEventSchema = exports.MAX_INFERENCE_AUDIO_BYTES = exports.inferenceAudioMediaTypeSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.inferenceReasoningSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = void 0;
 exports.kaanaCredentialRotateMutationSchema = exports.kaanaCredentialCreateMutationSchema = exports.kaanaCredentialIdentitySchema = exports.kaanaCredentialOperationActionSchema = exports.kaanaCredentialOperationIdSchema = exports.kaanaCredentialHandleSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.realtimeServerEventSchema = exports.realtimeSessionClosedEventSchema = exports.realtimeSessionCloseReasonSchema = exports.realtimeErrorEventSchema = exports.realtimeResponseDoneEventSchema = exports.realtimeResponseStatusSchema = exports.realtimeToolCallEventSchema = exports.realtimeTextDeltaEventSchema = exports.realtimeTranscriptDoneEventSchema = exports.realtimeTranscriptDeltaEventSchema = exports.realtimeTranscriptSourceSchema = exports.realtimeOutputAudioDoneEventSchema = exports.realtimeOutputAudioDeltaEventSchema = exports.realtimeResponseCreatedEventSchema = exports.realtimeInputAudioClearedEventSchema = exports.realtimeInputAudioCommittedEventSchema = exports.realtimeSpeechStoppedEventSchema = exports.realtimeSpeechStartedEventSchema = exports.realtimeItemTruncatedEventSchema = exports.realtimeItemDeletedEventSchema = exports.realtimeItemDoneEventSchema = exports.realtimeItemAddedEventSchema = exports.realtimeCommandAcceptedEventSchema = exports.realtimeSessionResumedEventSchema = exports.realtimeSessionUpdatedEventSchema = exports.realtimeSessionCreatedEventSchema = exports.realtimeClientCommandSchema = exports.realtimeSessionCloseCommandSchema = exports.realtimeSessionResumeCommandSchema = exports.realtimeResponseCancelCommandSchema = exports.realtimeResponseCreateCommandSchema = exports.realtimeInputAudioClearCommandSchema = exports.realtimeInputAudioCommitCommandSchema = exports.realtimeInputAudioAppendCommandSchema = void 0;
 exports.payAsYouGoEntitlementSchema = exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerCredentialCustodyStateSchema = exports.providerCredentialValidationDeploymentSchema = exports.providerCredentialValidationOperationSchema = exports.kaanaCredentialValidationOutcomeSchema = exports.kaanaCredentialValidationFailureCodeSchema = exports.kaanaCredentialValidationOutcomeStateSchema = exports.kaanaCredentialValidationTaskSchema = exports.kaanaCredentialOutcomeSchema = exports.kaanaCredentialConflictOutcomeSchema = exports.kaanaCredentialAppliedOutcomeSchema = exports.kaanaCredentialOutcomeRequestSchema = exports.kaanaCredentialRevokeOutcomeRequestSchema = exports.kaanaCredentialRotateOutcomeRequestSchema = exports.kaanaCredentialCreateOutcomeRequestSchema = exports.kaanaCredentialMutationSchema = exports.kaanaCredentialRevokeMutationSchema = void 0;
-exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
-exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = void 0;
-exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = void 0;
+exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
+exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = void 0;
+exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -782,6 +782,9 @@ Object.defineProperty(exports, "executionAuthorizationRefSchema", { enumerable:
 Object.defineProperty(exports, "capabilityCoordinatorSchema", { enumerable: true, get: function () { return agency_1.capabilityCoordinatorSchema; } });
 Object.defineProperty(exports, "capabilityTicketRequestSchema", { enumerable: true, get: function () { return agency_1.capabilityTicketRequestSchema; } });
 Object.defineProperty(exports, "delegationGrantSchema", { enumerable: true, get: function () { return agency_1.delegationGrantSchema; } });
+Object.defineProperty(exports, "AGENT_REQUESTER_CEILING_AUTONOMY", { enumerable: true, get: function () { return agency_1.AGENT_REQUESTER_CEILING_AUTONOMY; } });
+Object.defineProperty(exports, "agentRequesterCeilingWriteSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingWriteSchema; } });
+Object.defineProperty(exports, "agentRequesterCeilingSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingSchema; } });
 Object.defineProperty(exports, "automationTriggerSchema", { enumerable: true, get: function () { return agency_1.automationTriggerSchema; } });
 Object.defineProperty(exports, "automationActorSelectionSchema", { enumerable: true, get: function () { return agency_1.automationActorSelectionSchema; } });
 Object.defineProperty(exports, "automationDataFlowSchema", { enumerable: true, get: function () { return agency_1.automationDataFlowSchema; } });
@@ -793,6 +796,8 @@ Object.defineProperty(exports, "auditResultSchema", { enumerable: true, get: fun
 Object.defineProperty(exports, "auditEventSchema", { enumerable: true, get: function () { return agency_1.auditEventSchema; } });
 Object.defineProperty(exports, "catalogToolSchema", { enumerable: true, get: function () { return agency_1.catalogToolSchema; } });
 Object.defineProperty(exports, "catalogEventSchema", { enumerable: true, get: function () { return agency_1.catalogEventSchema; } });
+Object.defineProperty(exports, "catalogFeatureSchema", { enumerable: true, get: function () { return agency_1.catalogFeatureSchema; } });
+Object.defineProperty(exports, "CATALOG_INTERNAL_TRANSPORTS", { enumerable: true, get: function () { return agency_1.CATALOG_INTERNAL_TRANSPORTS; } });
 Object.defineProperty(exports, "appCapabilityCatalogSchema", { enumerable: true, get: function () { return agency_1.appCapabilityCatalogSchema; } });
 Object.defineProperty(exports, "catalogRegistrationSchema", { enumerable: true, get: function () { return agency_1.catalogRegistrationSchema; } });
 Object.defineProperty(exports, "normalizedAppEventSchema", { enumerable: true, get: function () { return agency_1.normalizedAppEventSchema; } });
@@ -823,6 +828,7 @@ Object.defineProperty(exports, "inboxInferenceStreamEventSchema", { enumerable:
 __exportStar(require("./externalIdentity"), exports);
 __exportStar(require("./linkedAccounts"), exports);
 __exportStar(require("./federationInstanceFetch"), exports);
+__exportStar(require("./accountAccess"), exports);
 __exportStar(require("./notifications"), exports);
 __exportStar(require("./email/messages"), exports);
 __exportStar(require("./stickers"), exports);
@@ -889,3 +895,7 @@ Object.defineProperty(exports, "personalPlanCatalogueSchema", { enumerable: true
 __exportStar(require("./products/checkout"), exports);
 __exportStar(require("./organizations"), exports);
 __exportStar(require("./safety"), exports);
+var serviceToken_1 = require("./serviceToken");
+Object.defineProperty(exports, "serviceTokenScopesSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenScopesSchema; } });
+Object.defineProperty(exports, "serviceTokenOptionsSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenOptionsSchema; } });
+__exportStar(require("./applicationRoles"), exports);