@oxy.so/contracts 4.17.0 → 4.21.0

package/dist/types/agency.d.ts

@@ -296,10 +296,10 @@ export declare const delegationGrantSchema: z.ZodObject<{
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    expiresAt: string | null;
     createdAt: string;
     updatedAt: string;
     id: string;
+    expiresAt: string | null;
     actor: {
         type: "alia";
         ownerAccountId: string;
@@ -334,10 +334,10 @@ export declare const delegationGrantSchema: z.ZodObject<{
     canRedelegate: boolean;
     revokedAt: string | null;
 }, {
-    expiresAt: string | null;
     createdAt: string;
     updatedAt: string;
     id: string;
+    expiresAt: string | null;
     actor: {
         type: "alia";
         ownerAccountId: string;
@@ -372,6 +372,167 @@ export declare const delegationGrantSchema: z.ZodObject<{
     canRedelegate?: boolean | undefined;
     revokedAt?: string | null | undefined;
 }>;
+/**
+ * The two levels an owner publishes for whoever uses their agent (ADR 0042):
+ * "Ver" and "Ver y actuar". A ceiling never says `draft` or `execute_on_request`:
+ * an agent is either allowed to act on its own or not at all, and nothing ever
+ * asks the person for approval.
+ */
+export declare const AGENT_REQUESTER_CEILING_AUTONOMY: readonly ["read_only", "autonomous"];
+/** What an agent may do in one app for whoever uses it; written by an operator of the bot. */
+export declare const agentRequesterCeilingWriteSchema: z.ZodObject<{
+    capabilityPackages: z.ZodArray<z.ZodEnum<["read", "create", "publish", "communicate", "administer", "finance", "security", "delegate"]>, "many">;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    toolOverrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        decision: z.ZodEnum<["allow", "deny"]>;
+    }, "strict", z.ZodTypeAny, {
+        decision: "allow" | "deny";
+        tool: string;
+    }, {
+        decision: "allow" | "deny";
+        tool: string;
+    }>, "many">>;
+    limits: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        key: z.ZodString;
+        value: z.ZodUnion<[z.ZodNumber, z.ZodBoolean]>;
+    }, "strict", z.ZodTypeAny, {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }, {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }>, "many">>;
+    maximumAutonomy: z.ZodEnum<["read_only", "autonomous"]>;
+}, "strict", z.ZodTypeAny, {
+    capabilityPackages: ("create" | "finance" | "security" | "read" | "publish" | "communicate" | "administer" | "delegate")[];
+    capabilities: string[];
+    toolOverrides: {
+        decision: "allow" | "deny";
+        tool: string;
+    }[];
+    limits: {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }[];
+    maximumAutonomy: "read_only" | "autonomous";
+}, {
+    capabilityPackages: ("create" | "finance" | "security" | "read" | "publish" | "communicate" | "administer" | "delegate")[];
+    maximumAutonomy: "read_only" | "autonomous";
+    capabilities?: string[] | undefined;
+    toolOverrides?: {
+        decision: "allow" | "deny";
+        tool: string;
+    }[] | undefined;
+    limits?: {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }[] | undefined;
+}>;
+export declare const agentRequesterCeilingSchema: z.ZodObject<{
+    capabilityPackages: z.ZodArray<z.ZodEnum<["read", "create", "publish", "communicate", "administer", "finance", "security", "delegate"]>, "many">;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    toolOverrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        decision: z.ZodEnum<["allow", "deny"]>;
+    }, "strict", z.ZodTypeAny, {
+        decision: "allow" | "deny";
+        tool: string;
+    }, {
+        decision: "allow" | "deny";
+        tool: string;
+    }>, "many">>;
+    limits: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        key: z.ZodString;
+        value: z.ZodUnion<[z.ZodNumber, z.ZodBoolean]>;
+    }, "strict", z.ZodTypeAny, {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }, {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }>, "many">>;
+    maximumAutonomy: z.ZodEnum<["read_only", "autonomous"]>;
+} & {
+    id: z.ZodString;
+    agentAccountId: z.ZodString;
+    appId: z.ZodString;
+    catalog: z.ZodObject<{
+        registrationId: z.ZodString;
+        version: z.ZodString;
+        digest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        registrationId: string;
+        version: string;
+        digest: string;
+    }, {
+        registrationId: string;
+        version: string;
+        digest: string;
+    }>;
+    version: z.ZodNumber;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    createdAt: string;
+    updatedAt: string;
+    id: string;
+    version: number;
+    appId: string;
+    catalog: {
+        registrationId: string;
+        version: string;
+        digest: string;
+    };
+    capabilityPackages: ("create" | "finance" | "security" | "read" | "publish" | "communicate" | "administer" | "delegate")[];
+    capabilities: string[];
+    toolOverrides: {
+        decision: "allow" | "deny";
+        tool: string;
+    }[];
+    limits: {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }[];
+    maximumAutonomy: "read_only" | "autonomous";
+    revokedAt: string | null;
+    agentAccountId: string;
+}, {
+    createdAt: string;
+    updatedAt: string;
+    id: string;
+    version: number;
+    appId: string;
+    catalog: {
+        registrationId: string;
+        version: string;
+        digest: string;
+    };
+    capabilityPackages: ("create" | "finance" | "security" | "read" | "publish" | "communicate" | "administer" | "delegate")[];
+    maximumAutonomy: "read_only" | "autonomous";
+    revokedAt: string | null;
+    agentAccountId: string;
+    capabilities?: string[] | undefined;
+    toolOverrides?: {
+        decision: "allow" | "deny";
+        tool: string;
+    }[] | undefined;
+    limits?: {
+        value: number | boolean;
+        tool: string;
+        key: string;
+    }[] | undefined;
+}>;
 export declare const automationTriggerSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"manual">;
 }, "strict", z.ZodTypeAny, {
@@ -924,6 +1085,8 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
         digest: string;
     }>>;
     grantId: z.ZodOptional<z.ZodString>;
+    /** The owner's published ceiling that bounds an agent acting for a non-owner (ADR 0042). */
+    ceilingId: z.ZodOptional<z.ZodString>;
     requesterAccountId: z.ZodString;
     ownerAccountId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
@@ -1040,6 +1203,7 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
         digest: string;
     } | undefined;
     grantId?: string | undefined;
+    ceilingId?: string | undefined;
 }, {
     actor: {
         type: "alia";
@@ -1094,6 +1258,7 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
         key: string;
     }[] | undefined;
     grantId?: string | undefined;
+    ceilingId?: string | undefined;
 }>, {
     actor: {
         type: "alia";
@@ -1148,6 +1313,7 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
         digest: string;
     } | undefined;
     grantId?: string | undefined;
+    ceilingId?: string | undefined;
 }, {
     actor: {
         type: "alia";
@@ -1202,6 +1368,7 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
         key: string;
     }[] | undefined;
     grantId?: string | undefined;
+    ceilingId?: string | undefined;
 }>;
 /** Structural projections only: an authenticated transport must produce these. */
 export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
@@ -1287,6 +1454,8 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             digest: string;
         }>>;
         grantId: z.ZodOptional<z.ZodString>;
+        /** The owner's published ceiling that bounds an agent acting for a non-owner (ADR 0042). */
+        ceilingId: z.ZodOptional<z.ZodString>;
         requesterAccountId: z.ZodString;
         ownerAccountId: z.ZodString;
         actor: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
@@ -1403,6 +1572,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             digest: string;
         } | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     }, {
         actor: {
             type: "alia";
@@ -1457,6 +1627,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             key: string;
         }[] | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     }>, {
         actor: {
             type: "alia";
@@ -1511,6 +1682,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             digest: string;
         } | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     }, {
         actor: {
             type: "alia";
@@ -1565,6 +1737,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             key: string;
         }[] | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     }>, {
         actor: {
             type: "alia";
@@ -1619,6 +1792,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             digest: string;
         } | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     }, {
         actor: {
             type: "alia";
@@ -1673,6 +1847,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             key: string;
         }[] | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
     kind: "capability";
@@ -1730,6 +1905,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             digest: string;
         } | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     };
 }, {
     kind: "capability";
@@ -1787,6 +1963,7 @@ export declare const invocationPrincipalSchema: z.ZodDiscriminatedUnion<"kind",
             key: string;
         }[] | undefined;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
     };
 }>]>;
 export type InvocationPrincipal = z.infer<typeof invocationPrincipalSchema>;
@@ -1795,15 +1972,18 @@ export declare const policyDecisionSchema: z.ZodObject<{
     reason: z.ZodString;
     effectiveAutonomy: z.ZodOptional<z.ZodEnum<["read_only", "draft", "execute_on_request", "autonomous"]>>;
     grantId: z.ZodOptional<z.ZodString>;
+    ceilingId: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     allowed: boolean;
     reason: string;
     grantId?: string | undefined;
+    ceilingId?: string | undefined;
     effectiveAutonomy?: "read_only" | "draft" | "execute_on_request" | "autonomous" | undefined;
 }, {
     allowed: boolean;
     reason: string;
     grantId?: string | undefined;
+    ceilingId?: string | undefined;
     effectiveAutonomy?: "read_only" | "draft" | "execute_on_request" | "autonomous" | undefined;
 }>;
 export declare const auditResultSchema: z.ZodObject<{
@@ -1883,15 +2063,18 @@ export declare const auditEventSchema: z.ZodObject<{
         reason: z.ZodString;
         effectiveAutonomy: z.ZodOptional<z.ZodEnum<["read_only", "draft", "execute_on_request", "autonomous"]>>;
         grantId: z.ZodOptional<z.ZodString>;
+        ceilingId: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
         allowed: boolean;
         reason: string;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
         effectiveAutonomy?: "read_only" | "draft" | "execute_on_request" | "autonomous" | undefined;
     }, {
         allowed: boolean;
         reason: string;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
         effectiveAutonomy?: "read_only" | "draft" | "execute_on_request" | "autonomous" | undefined;
     }>;
     result: z.ZodObject<{
@@ -1968,6 +2151,7 @@ export declare const auditEventSchema: z.ZodObject<{
         allowed: boolean;
         reason: string;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
         effectiveAutonomy?: "read_only" | "draft" | "execute_on_request" | "autonomous" | undefined;
     };
     result: {
@@ -2018,6 +2202,7 @@ export declare const auditEventSchema: z.ZodObject<{
         allowed: boolean;
         reason: string;
         grantId?: string | undefined;
+        ceilingId?: string | undefined;
         effectiveAutonomy?: "read_only" | "draft" | "execute_on_request" | "autonomous" | undefined;
     };
     result: {
@@ -2174,6 +2359,29 @@ export declare const catalogEventSchema: z.ZodObject<{
     resourceTypes: string[];
     dataSchema: Record<string, unknown>;
 }>;
+/**
+ * A feature an agent may gate on (Alia ADR 0020 §6): the app answers whether the
+ * person may use it (`checkTool`) and, when using it costs something, spends it
+ * (`consumeTool`). Both are internal tools of the same catalogue.
+ */
+export declare const catalogFeatureSchema: z.ZodObject<{
+    key: z.ZodString;
+    description: z.ZodString;
+    checkTool: z.ZodString;
+    consumeTool: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    description: string;
+    key: string;
+    checkTool: string;
+    consumeTool?: string | undefined;
+}, {
+    description: string;
+    key: string;
+    checkTool: string;
+    consumeTool?: string | undefined;
+}>;
+/** How a coordinator reaches the catalogue's internal tools. */
+export declare const CATALOG_INTERNAL_TRANSPORTS: readonly ["http", "mcp"];
 export declare const appCapabilityCatalogSchema: z.ZodEffects<z.ZodObject<{
     schemaVersion: z.ZodLiteral<"1">;
     appId: z.ZodString;
@@ -2191,6 +2399,27 @@ export declare const appCapabilityCatalogSchema: z.ZodEffects<z.ZodObject<{
     }, {
         resource: string;
     }>>;
+    /**
+     * `mcp`: internal tools are served at `<internalBaseUrl>/_oxy/mcp`. Absent or
+     * `http`: each tool's `invocation` path on `internalBaseUrl`.
+     */
+    internalTransport: z.ZodOptional<z.ZodEnum<["http", "mcp"]>>;
+    features: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        description: z.ZodString;
+        checkTool: z.ZodString;
+        consumeTool: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        description: string;
+        key: string;
+        checkTool: string;
+        consumeTool?: string | undefined;
+    }, {
+        description: string;
+        key: string;
+        checkTool: string;
+        consumeTool?: string | undefined;
+    }>, "many">>;
     tools: z.ZodArray<z.ZodEffects<z.ZodObject<{
         name: z.ZodString;
         version: z.ZodString;
@@ -2367,6 +2596,13 @@ export declare const appCapabilityCatalogSchema: z.ZodEffects<z.ZodObject<{
     externalMcp?: {
         resource: string;
     } | undefined;
+    internalTransport?: "mcp" | "http" | undefined;
+    features?: {
+        description: string;
+        key: string;
+        checkTool: string;
+        consumeTool?: string | undefined;
+    }[] | undefined;
 }, {
     schemaVersion: "1";
     version: string;
@@ -2406,6 +2642,13 @@ export declare const appCapabilityCatalogSchema: z.ZodEffects<z.ZodObject<{
     externalMcp?: {
         resource: string;
     } | undefined;
+    internalTransport?: "mcp" | "http" | undefined;
+    features?: {
+        description: string;
+        key: string;
+        checkTool: string;
+        consumeTool?: string | undefined;
+    }[] | undefined;
 }>, {
     schemaVersion: "1";
     version: string;
@@ -2445,6 +2688,13 @@ export declare const appCapabilityCatalogSchema: z.ZodEffects<z.ZodObject<{
     externalMcp?: {
         resource: string;
     } | undefined;
+    internalTransport?: "mcp" | "http" | undefined;
+    features?: {
+        description: string;
+        key: string;
+        checkTool: string;
+        consumeTool?: string | undefined;
+    }[] | undefined;
 }, {
     schemaVersion: "1";
     version: string;
@@ -2484,6 +2734,13 @@ export declare const appCapabilityCatalogSchema: z.ZodEffects<z.ZodObject<{
     externalMcp?: {
         resource: string;
     } | undefined;
+    internalTransport?: "mcp" | "http" | undefined;
+    features?: {
+        description: string;
+        key: string;
+        checkTool: string;
+        consumeTool?: string | undefined;
+    }[] | undefined;
 }>;
 export declare const catalogRegistrationSchema: z.ZodObject<{
     catalog: z.ZodEffects<z.ZodObject<{
@@ -2503,6 +2760,27 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         }, {
             resource: string;
         }>>;
+        /**
+         * `mcp`: internal tools are served at `<internalBaseUrl>/_oxy/mcp`. Absent or
+         * `http`: each tool's `invocation` path on `internalBaseUrl`.
+         */
+        internalTransport: z.ZodOptional<z.ZodEnum<["http", "mcp"]>>;
+        features: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            description: z.ZodString;
+            checkTool: z.ZodString;
+            consumeTool: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }, {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }>, "many">>;
         tools: z.ZodArray<z.ZodEffects<z.ZodObject<{
             name: z.ZodString;
             version: z.ZodString;
@@ -2679,6 +2957,13 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         externalMcp?: {
             resource: string;
         } | undefined;
+        internalTransport?: "mcp" | "http" | undefined;
+        features?: {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }[] | undefined;
     }, {
         schemaVersion: "1";
         version: string;
@@ -2718,6 +3003,13 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         externalMcp?: {
             resource: string;
         } | undefined;
+        internalTransport?: "mcp" | "http" | undefined;
+        features?: {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }[] | undefined;
     }>, {
         schemaVersion: "1";
         version: string;
@@ -2757,6 +3049,13 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         externalMcp?: {
             resource: string;
         } | undefined;
+        internalTransport?: "mcp" | "http" | undefined;
+        features?: {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }[] | undefined;
     }, {
         schemaVersion: "1";
         version: string;
@@ -2796,6 +3095,13 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         externalMcp?: {
             resource: string;
         } | undefined;
+        internalTransport?: "mcp" | "http" | undefined;
+        features?: {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }[] | undefined;
     }>;
     digest: z.ZodString;
     signature: z.ZodString;
@@ -2841,6 +3147,13 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         externalMcp?: {
             resource: string;
         } | undefined;
+        internalTransport?: "mcp" | "http" | undefined;
+        features?: {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }[] | undefined;
     };
     signature: string;
     deployedAt: string;
@@ -2885,6 +3198,13 @@ export declare const catalogRegistrationSchema: z.ZodObject<{
         externalMcp?: {
             resource: string;
         } | undefined;
+        internalTransport?: "mcp" | "http" | undefined;
+        features?: {
+            description: string;
+            key: string;
+            checkTool: string;
+            consumeTool?: string | undefined;
+        }[] | undefined;
     };
     signature: string;
     deployedAt: string;
@@ -2961,5 +3281,10 @@ export type AuditEvent = z.infer<typeof auditEventSchema>;
 export type CatalogTool = z.infer<typeof catalogToolSchema>;
 export type CatalogEvent = z.infer<typeof catalogEventSchema>;
 export type AppCapabilityCatalog = z.infer<typeof appCapabilityCatalogSchema>;
+export type CatalogFeature = z.infer<typeof catalogFeatureSchema>;
+export type CatalogInternalTransport = (typeof CATALOG_INTERNAL_TRANSPORTS)[number];
+export type AgentRequesterCeilingWrite = z.infer<typeof agentRequesterCeilingWriteSchema>;
+export type AgentRequesterCeiling = z.infer<typeof agentRequesterCeilingSchema>;
+export type AgentRequesterCeilingAutonomy = (typeof AGENT_REQUESTER_CEILING_AUTONOMY)[number];
 export type CatalogRegistration = z.infer<typeof catalogRegistrationSchema>;
 export type NormalizedAppEvent = z.infer<typeof normalizedAppEventSchema>;

package/dist/types/agentKeys.d.ts

@@ -14,8 +14,8 @@ export declare const agentProofClaimsSchema: z.ZodObject<{
     challenge: z.ZodString;
     expiresAt: z.ZodNumber;
 }, "strict", z.ZodTypeAny, {
-    expiresAt: number;
     accountId: string;
+    expiresAt: number;
     version: 1;
     audience: "oxy-api/agent";
     action: "agent_signin" | "agent_enroll" | "agent_rotate" | "agent_recover" | "agent_governance";
@@ -25,8 +25,8 @@ export declare const agentProofClaimsSchema: z.ZodObject<{
     publicKey: string;
     payloadDigest: string;
 }, {
-    expiresAt: number;
     accountId: string;
+    expiresAt: number;
     version: 1;
     audience: "oxy-api/agent";
     action: "agent_signin" | "agent_enroll" | "agent_rotate" | "agent_recover" | "agent_governance";
@@ -407,8 +407,8 @@ export declare const agentKeyOperationChallengeSchema: z.ZodObject<{
         challenge: z.ZodString;
         expiresAt: z.ZodNumber;
     }, "strict", z.ZodTypeAny, {
-        expiresAt: number;
         accountId: string;
+        expiresAt: number;
         version: 1;
         audience: "oxy-api/agent";
         action: "agent_signin" | "agent_enroll" | "agent_rotate" | "agent_recover" | "agent_governance";
@@ -418,8 +418,8 @@ export declare const agentKeyOperationChallengeSchema: z.ZodObject<{
         publicKey: string;
         payloadDigest: string;
     }, {
-        expiresAt: number;
         accountId: string;
+        expiresAt: number;
         version: 1;
         audience: "oxy-api/agent";
         action: "agent_signin" | "agent_enroll" | "agent_rotate" | "agent_recover" | "agent_governance";
@@ -432,8 +432,8 @@ export declare const agentKeyOperationChallengeSchema: z.ZodObject<{
     governorPublicKey: z.ZodNullable<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     claims: {
-        expiresAt: number;
         accountId: string;
+        expiresAt: number;
         version: 1;
         audience: "oxy-api/agent";
         action: "agent_signin" | "agent_enroll" | "agent_rotate" | "agent_recover" | "agent_governance";
@@ -446,8 +446,8 @@ export declare const agentKeyOperationChallengeSchema: z.ZodObject<{
     governorPublicKey: string | null;
 }, {
     claims: {
-        expiresAt: number;
         accountId: string;
+        expiresAt: number;
         version: 1;
         audience: "oxy-api/agent";
         action: "agent_signin" | "agent_enroll" | "agent_rotate" | "agent_recover" | "agent_governance";