@oxy.so/contracts 4.17.0 → 4.22.0

package/dist/cjs/client/index.js

@@ -18,7 +18,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deviceJoinCodeResponseCheck = exports.deviceBackgroundCredentialResponseCheck = exports.activeTokenCheck = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceDirectorySyncCheck = exports.deviceDirectoryCheck = exports.deviceActivateResponseCheck = exports.signedRecordEnvelopeCheck = exports.externalIdentityReferenceCheck = exports.loginResultCheck = exports.isLoopbackOrigin = exports.executeAgentKeyOperationCheck = exports.agentVerifyRequestCheck = exports.agentProofClaimsCheck = exports.agentKeyOperationResultCheck = exports.agentKeyOperationCheck = exports.agentKeyOperationChallengeCheck = exports.agentKeyListResponseCheck = exports.agentChallengeRequestCheck = exports.AGENT_PROOF_TTL_MS = exports.AGENT_PROOF_AUDIENCE = exports.AGENT_PROOF_ACTIONS = exports.ACCOUNT_AUTH_METHODS = exports.emailVerificationStartResponseCheck = exports.emailVerificationConfirmResponseCheck = exports.emailTicketCheck = exports.emailAddressCheck = exports.EMAIL_VERIFICATION_PURPOSES = exports.EMAIL_VERIFICATION_ERROR_CODES = exports.EMAIL_TICKET_TTL_MS = exports.EMAIL_CODE_TTL_MS = exports.EMAIL_CODE_MAX_ATTEMPTS = exports.EMAIL_CODE_LENGTH = exports.newlyAddedRetiredCategories = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.isAccountKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.RETIRED_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.CHILD_ACCOUNT_KINDS = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_KINDS = exports.ACCOUNT_CATEGORY_IDS = exports.parseContract = exports.formatCheckPath = exports.checkContract = exports.ContractCheckError = void 0;
 exports.subjectProductAccessCheck = exports.productSubscriptionsResponseCheck = exports.productSubscriptionCancellationResultCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.cancelProductSubscriptionCheck = exports.updateOrganizationCheck = exports.organizationNameCheck = exports.organizationListCheck = exports.organizationImportBatchResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationCurationResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimInputCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationCheck = exports.organizationBatchCheck = exports.createOrganizationCheck = exports.ORGANIZATION_TYPES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.canonicalJson = exports.buildIdentityProofMessage = exports.IDENTITY_PROOF_VERSION = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_ERROR_CODES = exports.parseIdentityLinkQrPayload = exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_STATUSES = exports.IDENTITY_LINK_QR_PREFIX = exports.sessionAccountsChangedEventCheck = exports.deviceTokenMintResponseCheck = exports.deviceSessionSyncCheck = exports.deviceSessionStateCheck = exports.deviceRegisterResponseCheck = exports.deviceJoinResponseCheck = void 0;
-exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = void 0;
+exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.supervisionStateCheck = exports.supervisionReviewInputCheck = exports.supervisionInviteInputCheck = exports.supervisionInvitationCheck = exports.supervisionContactsResponseCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.SUPERVISION_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SUPERVISED_ACTIONS = exports.SAFETY_POLICY_VERSION = exports.PURCHASE_APPROVAL_STATUSES = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = void 0;
+exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = void 0;
 var check_1 = require("./check");
 Object.defineProperty(exports, "ContractCheckError", { enumerable: true, get: function () { return check_1.ContractCheckError; } });
 Object.defineProperty(exports, "checkContract", { enumerable: true, get: function () { return check_1.checkContract; } });
@@ -140,8 +141,28 @@ Object.defineProperty(exports, "recommendationRequestCheck", { enumerable: true,
 var reputation_1 = require("./reputation");
 Object.defineProperty(exports, "isFullReputationBalance", { enumerable: true, get: function () { return reputation_1.isFullReputationBalance; } });
 var safety_1 = require("./safety");
+Object.defineProperty(exports, "PURCHASE_APPROVAL_STATUSES", { enumerable: true, get: function () { return safety_1.PURCHASE_APPROVAL_STATUSES; } });
+Object.defineProperty(exports, "SAFETY_POLICY_VERSION", { enumerable: true, get: function () { return safety_1.SAFETY_POLICY_VERSION; } });
+Object.defineProperty(exports, "SUPERVISED_ACTIONS", { enumerable: true, get: function () { return safety_1.SUPERVISED_ACTIONS; } });
+Object.defineProperty(exports, "SUPERVISION_CONSENT_VERSION", { enumerable: true, get: function () { return safety_1.SUPERVISION_CONSENT_VERSION; } });
+Object.defineProperty(exports, "SUPERVISION_INVITATION_STATUSES", { enumerable: true, get: function () { return safety_1.SUPERVISION_INVITATION_STATUSES; } });
+Object.defineProperty(exports, "SUPERVISION_STATUSES", { enumerable: true, get: function () { return safety_1.SUPERVISION_STATUSES; } });
 Object.defineProperty(exports, "profileAccessDecisionCheck", { enumerable: true, get: function () { return safety_1.profileAccessDecisionCheck; } });
 Object.defineProperty(exports, "profileAccessInputCheck", { enumerable: true, get: function () { return safety_1.profileAccessInputCheck; } });
+Object.defineProperty(exports, "purchaseApprovalCheck", { enumerable: true, get: function () { return safety_1.purchaseApprovalCheck; } });
+Object.defineProperty(exports, "purchaseApprovalListCheck", { enumerable: true, get: function () { return safety_1.purchaseApprovalListCheck; } });
+Object.defineProperty(exports, "purchaseReviewInputCheck", { enumerable: true, get: function () { return safety_1.purchaseReviewInputCheck; } });
+Object.defineProperty(exports, "safetyOrganizationsInputCheck", { enumerable: true, get: function () { return safety_1.safetyOrganizationsInputCheck; } });
+Object.defineProperty(exports, "safetyOrganizationsResponseCheck", { enumerable: true, get: function () { return safety_1.safetyOrganizationsResponseCheck; } });
+Object.defineProperty(exports, "safetyPeopleInputCheck", { enumerable: true, get: function () { return safety_1.safetyPeopleInputCheck; } });
+Object.defineProperty(exports, "safetyPeopleResponseCheck", { enumerable: true, get: function () { return safety_1.safetyPeopleResponseCheck; } });
+Object.defineProperty(exports, "supervisionAcceptInputCheck", { enumerable: true, get: function () { return safety_1.supervisionAcceptInputCheck; } });
+Object.defineProperty(exports, "supervisionContactInputCheck", { enumerable: true, get: function () { return safety_1.supervisionContactInputCheck; } });
+Object.defineProperty(exports, "supervisionContactsResponseCheck", { enumerable: true, get: function () { return safety_1.supervisionContactsResponseCheck; } });
+Object.defineProperty(exports, "supervisionInvitationCheck", { enumerable: true, get: function () { return safety_1.supervisionInvitationCheck; } });
+Object.defineProperty(exports, "supervisionInviteInputCheck", { enumerable: true, get: function () { return safety_1.supervisionInviteInputCheck; } });
+Object.defineProperty(exports, "supervisionReviewInputCheck", { enumerable: true, get: function () { return safety_1.supervisionReviewInputCheck; } });
+Object.defineProperty(exports, "supervisionStateCheck", { enumerable: true, get: function () { return safety_1.supervisionStateCheck; } });
 var sessionStatus_1 = require("./sessionStatus");
 Object.defineProperty(exports, "publicApplicationCheck", { enumerable: true, get: function () { return sessionStatus_1.publicApplicationCheck; } });
 var signIn_1 = require("./signIn");
@@ -188,3 +209,18 @@ Object.defineProperty(exports, "usernameCheck", { enumerable: true, get: functio
 Object.defineProperty(exports, "usernameCheckForAccountKind", { enumerable: true, get: function () { return username_1.usernameCheckForAccountKind; } });
 var userResponse_1 = require("./userResponse");
 Object.defineProperty(exports, "userNameCheck", { enumerable: true, get: function () { return userResponse_1.userNameCheck; } });
+var contentClaims_1 = require("./contentClaims");
+Object.defineProperty(exports, "CLAIMANT_RELATIONSHIPS", { enumerable: true, get: function () { return contentClaims_1.CLAIMANT_RELATIONSHIPS; } });
+Object.defineProperty(exports, "CLOSED_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.CLOSED_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_COUNTER_NOTICE_LIMITS", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_ERROR_CODES", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_ERROR_CODES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_KINDS", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_KINDS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_LIMITS", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_REFERENCE_PATTERN", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_REFERENCE_PATTERN; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENT_VERSION", { enumerable: true, get: function () { return contentClaims_1.COUNTER_NOTICE_STATEMENT_VERSION; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENTS", { enumerable: true, get: function () { return contentClaims_1.COUNTER_NOTICE_STATEMENTS; } });
+Object.defineProperty(exports, "ERASURE_REQUEST_DEADLINE_DAYS", { enumerable: true, get: function () { return contentClaims_1.ERASURE_REQUEST_DEADLINE_DAYS; } });
+Object.defineProperty(exports, "OPEN_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.OPEN_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "isErasureRequest", { enumerable: true, get: function () { return contentClaims_1.isErasureRequest; } });
+Object.defineProperty(exports, "isRightsClaim", { enumerable: true, get: function () { return contentClaims_1.isRightsClaim; } });

package/dist/cjs/client/safety.js

@@ -1,15 +1,196 @@
 "use strict";
 /**
- * Profile-access checks, without Zod. Schemas: `../safety.ts`.
+ * Safety and supervision checks, without Zod. Schemas: `../safety.ts`.
+ *
+ * Only what a browser or device sends and reads is here: the profile-access
+ * read, supervision management and the guardian's purchase review. The service
+ * decision lanes are server-only (`@oxy.so/core/server`) and parse with the
+ * Zod schemas directly.
  *
  * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.profileAccessDecisionCheck = exports.profileAccessInputCheck = void 0;
+exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.supervisionReviewInputCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.supervisionInviteInputCheck = exports.supervisionContactsResponseCheck = exports.supervisionStateCheck = exports.supervisionInvitationCheck = exports.profileAccessDecisionCheck = exports.profileAccessInputCheck = exports.PURCHASE_APPROVAL_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SAFETY_POLICY_VERSION = exports.SUPERVISED_ACTIONS = void 0;
 const check_1 = require("./check");
+const organizations_1 = require("./organizations");
+const signIn_1 = require("./signIn");
+/** Supervision is a personal-account safety policy, never a new login/account kind. */
+exports.SUPERVISED_ACTIONS = ['profile', 'messaging', 'content', 'purchases'];
+exports.SAFETY_POLICY_VERSION = '2';
+exports.SUPERVISION_CONSENT_VERSION = '1';
+exports.SUPERVISION_STATUSES = ['active', 'orphaned', 'ended'];
+exports.SUPERVISION_INVITATION_STATUSES = ['pending', 'accepted', 'cancelled'];
+exports.PURCHASE_APPROVAL_STATUSES = [
+    'pending',
+    'approved',
+    'rejected',
+    'reserved',
+    'confirmed',
+    'cancelled',
+];
 exports.profileAccessInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ subjectAccountId: (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128)) }));
 exports.profileAccessDecisionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
     allowed: check_1.boolean,
     reason: (0, check_1.oneOf)(['public', 'owner', 'private', 'blocked', 'unavailable']),
     policyVersion: (0, check_1.literal)('1'),
 }));
+const accountId = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(128));
+const resourceId = (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(256));
+const uniqueIds = (max) => (0, check_1.refine)((0, check_1.array)(accountId, (0, check_1.minItems)(1), (0, check_1.maxItems)(max)), (ids) => new Set(ids).size === ids.length, 'Account IDs must be unique');
+/* -------------------------------------------------------------------------- */
+/*  Supervision management                                                    */
+/* -------------------------------------------------------------------------- */
+const supervisionCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    guardianAccountId: (0, check_1.nullable)(accountId),
+    status: (0, check_1.oneOf)(exports.SUPERVISION_STATUSES),
+    policyVersion: (0, check_1.literal)(exports.SAFETY_POLICY_VERSION),
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    createdAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.supervisionInvitationCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    id: accountId,
+    childAccountId: accountId,
+    guardianAccountId: accountId,
+    status: (0, check_1.oneOf)(exports.SUPERVISION_INVITATION_STATUSES),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    createdAt: (0, check_1.string)(check_1.datetime),
+}));
+exports.supervisionStateCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    self: (0, check_1.nullable)(supervisionCheck),
+    children: (0, check_1.array)(supervisionCheck, (0, check_1.maxItems)(100)),
+    invitations: (0, check_1.array)(exports.supervisionInvitationCheck, (0, check_1.maxItems)(100)),
+}));
+exports.supervisionContactsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({
+        childAccountId: accountId,
+        contactAccountId: accountId,
+        approvedAt: (0, check_1.string)(check_1.datetime),
+    }), (0, check_1.maxItems)(1000)),
+}));
+exports.supervisionInviteInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    guardianAccountId: accountId,
+    consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION),
+    reauth: signIn_1.reauthProofCheck,
+}));
+exports.supervisionAcceptInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ consentVersion: (0, check_1.literal)(exports.SUPERVISION_CONSENT_VERSION), reauth: signIn_1.reauthProofCheck }));
+exports.supervisionContactInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    contactAccountId: accountId,
+    reauth: signIn_1.reauthProofCheck,
+}));
+exports.supervisionReviewInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    childAccountId: accountId,
+    action: (0, check_1.oneOf)(['end', 'transfer']),
+    guardianAccountId: (0, check_1.optional)(accountId),
+    evidenceReference: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(2048)),
+    reauth: signIn_1.reauthProofCheck,
+}));
+/* -------------------------------------------------------------------------- */
+/*  Minimal identities for the management screens                            */
+/* -------------------------------------------------------------------------- */
+const safetyPersonCheck = (0, check_1.exact)()((0, check_1.strictObject)({ accountId, username: (0, check_1.nullable)((0, check_1.string)()), displayName: (0, check_1.nullable)((0, check_1.string)()) }));
+exports.safetyPeopleInputCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({ query: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(2), (0, check_1.maxLength)(100)) }), (0, check_1.strictObject)({ accountIds: uniqueIds(100) })));
+exports.safetyPeopleResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({ items: (0, check_1.array)(safetyPersonCheck, (0, check_1.maxItems)(100)) }));
+exports.safetyOrganizationsInputCheck = (0, check_1.exact)()((0, check_1.union)((0, check_1.strictObject)({
+    query: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(100)),
+    limit: (0, check_1.optional)((0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(20))),
+}), (0, check_1.strictObject)({ ids: uniqueIds(100) })));
+exports.safetyOrganizationsResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)((0, check_1.strictObject)({
+        requestedAccountId: accountId,
+        organization: (0, check_1.strictObject)({
+            accountId,
+            username: (0, check_1.nullable)((0, check_1.string)()),
+            name: (0, check_1.string)(),
+            organizationType: (0, check_1.oneOf)(organizations_1.ORGANIZATION_TYPES),
+        }),
+    }), (0, check_1.maxItems)(100)),
+    missingIds: (0, check_1.array)(accountId, (0, check_1.maxItems)(100)),
+}));
+/* -------------------------------------------------------------------------- */
+/*  Purchase approvals                                                        */
+/* -------------------------------------------------------------------------- */
+const fingerprint = (0, check_1.string)((0, check_1.pattern)(/^[a-f0-9]{64}$/));
+const minorUnits = (0, check_1.number)(check_1.int, check_1.nonnegative, (0, check_1.atMost)(Number.MAX_SAFE_INTEGER));
+const purchaseApprovalLineCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    itemReference: resourceId,
+    title: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    optionsText: (0, check_1.string)(check_1.trim, (0, check_1.maxLength)(300)),
+    merchantAccountId: accountId,
+    quantity: (0, check_1.number)(check_1.int, (0, check_1.atLeast)(1), (0, check_1.atMost)(1000000)),
+    unitAmountMinor: minorUnits,
+    lineAmountMinor: minorUnits,
+}));
+/** The effect fields every approval shape shares, in the schema's key order. */
+const purchaseEffectFields = {
+    operationId: resourceId,
+    resourceId,
+    cartFingerprint: fingerprint,
+    summary: (0, check_1.string)(check_1.trim, (0, check_1.minLength)(1), (0, check_1.maxLength)(300)),
+    merchantAccountIds: (0, check_1.transform)((0, check_1.refine)((0, check_1.array)(accountId, (0, check_1.minItems)(1), (0, check_1.maxItems)(100)), (ids) => new Set(ids).size === ids.length, 'Merchant accounts must be unique'), (ids) => [...ids].sort()),
+};
+const purchaseAmountFields = {
+    shippingMinor: minorUnits,
+    taxMinor: minorUnits,
+    discountMinor: minorUnits,
+    roundingAdjustmentMinor: (0, check_1.number)(check_1.int, (0, check_1.atLeast)(-Number.MAX_SAFE_INTEGER), (0, check_1.atMost)(Number.MAX_SAFE_INTEGER)),
+    paymentFingerprint: fingerprint,
+    amountMinor: minorUnits,
+    currency: (0, check_1.string)((0, check_1.pattern)(/^[A-Z]{3}$/)),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+};
+const purchaseApprovalFields = {
+    id: accountId,
+    childAccountId: accountId,
+    applicationId: accountId,
+    status: (0, check_1.oneOf)(exports.PURCHASE_APPROVAL_STATUSES),
+    createdAt: (0, check_1.string)(check_1.datetime),
+    receiptReference: (0, check_1.nullable)((0, check_1.string)((0, check_1.maxLength)(512))),
+};
+/** The first problem `validatePurchaseEvidence` in `../safety.ts` reports, in its order. */
+function purchaseEvidenceProblem(value) {
+    const merchants = new Set(value.merchantAccountIds);
+    const references = new Set();
+    for (const line of value.lineItems) {
+        const key = `${line.merchantAccountId}:${line.itemReference}`;
+        if (!merchants.has(line.merchantAccountId) || references.has(key)) {
+            return {
+                path: [],
+                message: 'Purchase lines must name an included merchant and unique item reference',
+            };
+        }
+        references.add(key);
+    }
+    if (merchants.size !== new Set(value.lineItems.map((line) => line.merchantAccountId)).size) {
+        return { path: [], message: 'Every merchant must have an approval line' };
+    }
+    const total = value.lineItems.reduce((sum, line) => sum + BigInt(line.lineAmountMinor), 0n) +
+        BigInt(value.shippingMinor) +
+        BigInt(value.taxMinor) -
+        BigInt(value.discountMinor) +
+        BigInt(value.roundingAdjustmentMinor);
+    if (total < 0n ||
+        total > BigInt(Number.MAX_SAFE_INTEGER) ||
+        total !== BigInt(value.amountMinor)) {
+        return { path: [], message: 'Approval evidence must equal the exact payment total' };
+    }
+    if (Math.abs(value.roundingAdjustmentMinor) >
+        value.lineItems.length + 3 * value.merchantAccountIds.length) {
+        return { path: [], message: 'Rounding adjustment exceeds the bounded conversion stages' };
+    }
+    return undefined;
+}
+exports.purchaseApprovalCheck = (0, check_1.exact)()((0, check_1.refineAt)((0, check_1.strictObject)({
+    ...purchaseEffectFields,
+    lineItems: (0, check_1.array)(purchaseApprovalLineCheck, (0, check_1.minItems)(1), (0, check_1.maxItems)(200)),
+    ...purchaseAmountFields,
+    ...purchaseApprovalFields,
+}), purchaseEvidenceProblem));
+const purchaseApprovalSummaryCheck = (0, check_1.exact)()((0, check_1.strictObject)({ ...purchaseEffectFields, ...purchaseAmountFields, ...purchaseApprovalFields }));
+exports.purchaseApprovalListCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    items: (0, check_1.array)(purchaseApprovalSummaryCheck, (0, check_1.maxItems)(100)),
+    nextCursor: (0, check_1.nullable)((0, check_1.string)()),
+}));
+exports.purchaseReviewInputCheck = (0, check_1.exact)()((0, check_1.strictObject)({ decision: (0, check_1.oneOf)(['approved', 'rejected']), reauth: signIn_1.reauthProofCheck }));

package/dist/cjs/client/signIn.js

@@ -70,6 +70,8 @@ exports.REAUTH_ACTIONS = [
     'link_commons',
     'delete_account',
     'credentials_manage',
+    'supervision',
+    'supervision_purchase',
 ];
 /**
  * Stable error codes (`error.code` in the API error body). Clients map these

package/dist/cjs/contentClaims.js

@@ -0,0 +1,246 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contentClaimCounterNoticeSchema = exports.CONTENT_CLAIM_COUNTER_NOTICE_VALIDATION_KEYS = exports.CONTENT_CLAIM_EVENT_ACTIONS = exports.CONTENT_CLAIM_TARGET_SOURCES = exports.CONTENT_CLAIM_TARGET_RESOLUTIONS = exports.contentClaimSubmissionSchema = exports.CONTENT_CLAIM_VALIDATION_KEYS = exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = void 0;
+/**
+ * Content claims (ADR 0043 D10): the public "Report content / rights claim"
+ * intake, `POST /content-claims`, and the staff review of a claim.
+ *
+ * {@link contentClaimSubmissionSchema} is the request body the API parses and
+ * the Oxy website validates its form with before posting, so the form cannot
+ * accept what the API would answer 400 to. Every validation message is a
+ * stable KEY under `contentClaim.errors.*` (filled with
+ * {@link CONTENT_CLAIM_LIMITS} by whoever shows it), never English: the website
+ * translates the key, and the API answers its own English sentence for it in
+ * `fields`.
+ */
+const zod_1 = require("zod");
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry carries the whole contract.
+const contentClaims_1 = require("./client/contentClaims");
+var contentClaims_2 = require("./client/contentClaims");
+Object.defineProperty(exports, "CLAIMANT_RELATIONSHIPS", { enumerable: true, get: function () { return contentClaims_2.CLAIMANT_RELATIONSHIPS; } });
+Object.defineProperty(exports, "CLOSED_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_2.CLOSED_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_COUNTER_NOTICE_LIMITS", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_ERROR_CODES", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_ERROR_CODES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_KINDS", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_KINDS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_LIMITS", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_REFERENCE_PATTERN", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_REFERENCE_PATTERN; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENT_VERSION", { enumerable: true, get: function () { return contentClaims_2.COUNTER_NOTICE_STATEMENT_VERSION; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENTS", { enumerable: true, get: function () { return contentClaims_2.COUNTER_NOTICE_STATEMENTS; } });
+Object.defineProperty(exports, "ERASURE_REQUEST_DEADLINE_DAYS", { enumerable: true, get: function () { return contentClaims_2.ERASURE_REQUEST_DEADLINE_DAYS; } });
+Object.defineProperty(exports, "OPEN_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_2.OPEN_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "isErasureRequest", { enumerable: true, get: function () { return contentClaims_2.isErasureRequest; } });
+Object.defineProperty(exports, "isRightsClaim", { enumerable: true, get: function () { return contentClaims_2.isRightsClaim; } });
+/** Every key a submission's validation can produce, under `contentClaim.errors.*`. */
+exports.CONTENT_CLAIM_VALIDATION_KEYS = [
+    'contentClaim.errors.kind',
+    'contentClaim.errors.contentUrlsRequired',
+    'contentClaim.errors.contentUrlsTooMany',
+    'contentClaim.errors.contentUrlInvalid',
+    'contentClaim.errors.descriptionShort',
+    'contentClaim.errors.descriptionLong',
+    'contentClaim.errors.originalWorkUrl',
+    'contentClaim.errors.name',
+    'contentClaim.errors.email',
+    'contentClaim.errors.organization',
+    'contentClaim.errors.relationship',
+    'contentClaim.errors.goodFaith',
+    'contentClaim.errors.accurate',
+    'contentClaim.errors.signature',
+];
+function isHttpsUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' && url.hostname.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+const httpsUrl = (message) => zod_1.z.string().trim().max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxUrlLength, message).refine(isHttpsUrl, message);
+/**
+ * `POST /content-claims` — a claim, as the claimant sends it. Strict: an
+ * unknown key is refused rather than dropped.
+ */
+exports.contentClaimSubmissionSchema = zod_1.z
+    .object({
+    kind: zod_1.z.enum(contentClaims_1.CONTENT_CLAIM_KINDS, { message: 'contentClaim.errors.kind' }),
+    contentUrls: zod_1.z
+        .array(httpsUrl('contentClaim.errors.contentUrlInvalid'), {
+        message: 'contentClaim.errors.contentUrlsRequired',
+    })
+        .min(contentClaims_1.CONTENT_CLAIM_LIMITS.minUrls, 'contentClaim.errors.contentUrlsRequired')
+        .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxUrls, 'contentClaim.errors.contentUrlsTooMany'),
+    description: zod_1.z
+        .string({ message: 'contentClaim.errors.descriptionShort' })
+        .trim()
+        .min(contentClaims_1.CONTENT_CLAIM_LIMITS.minDescription, 'contentClaim.errors.descriptionShort')
+        .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxDescription, 'contentClaim.errors.descriptionLong'),
+    originalWorkUrl: httpsUrl('contentClaim.errors.originalWorkUrl').optional(),
+    claimant: zod_1.z
+        .object({
+        name: zod_1.z
+            .string({ message: 'contentClaim.errors.name' })
+            .trim()
+            .min(1, 'contentClaim.errors.name')
+            .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxName, 'contentClaim.errors.name'),
+        email: zod_1.z
+            .string({ message: 'contentClaim.errors.email' })
+            .trim()
+            .email('contentClaim.errors.email')
+            .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxEmail, 'contentClaim.errors.email'),
+        organization: zod_1.z
+            .string({ message: 'contentClaim.errors.organization' })
+            .trim()
+            .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxOrganization, 'contentClaim.errors.organization')
+            .optional(),
+        relationship: zod_1.z.enum(contentClaims_1.CLAIMANT_RELATIONSHIPS, {
+            message: 'contentClaim.errors.relationship',
+        }),
+    }, { message: 'contentClaim.errors.name' })
+        .strict(),
+    statements: zod_1.z
+        .object({
+        goodFaith: zod_1.z.literal(true, {
+            errorMap: () => ({ message: 'contentClaim.errors.goodFaith' }),
+        }),
+        accurate: zod_1.z.literal(true, {
+            errorMap: () => ({ message: 'contentClaim.errors.accurate' }),
+        }),
+    }, { message: 'contentClaim.errors.goodFaith' })
+        .strict(),
+    signature: zod_1.z
+        .string({ message: 'contentClaim.errors.signature' })
+        .trim()
+        .min(1, 'contentClaim.errors.signature')
+        .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxName, 'contentClaim.errors.signature'),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// The staff review (`/content-claims` behind the `content:claims` capability)
+// ---------------------------------------------------------------------------
+/** How a target's URL was understood. */
+exports.CONTENT_CLAIM_TARGET_RESOLUTIONS = [
+    /** An Oxy file: `cloud.oxy.so/<id>`, `/cdn/<id>`, `/assets/<id>…`, a stored key. */
+    'file',
+    /** A page of an Oxy app or anything else: a person attaches the files it shows. */
+    'unresolved',
+];
+/** Who added a target: the claimant's URL, or staff attaching a file by id. */
+exports.CONTENT_CLAIM_TARGET_SOURCES = ['claimant', 'staff'];
+/** What the audit trail records. */
+exports.CONTENT_CLAIM_EVENT_ACTIONS = [
+    'submitted',
+    'review_started',
+    'targets_attached',
+    'targets_blocked',
+    'rejected',
+    'counter_notice_recorded',
+    /** The owner of the blocked content sent a counter-notice themselves (`POST /content-claims/counter-notices`). */
+    'counter_notice_submitted',
+    'reinstated',
+    'upheld',
+    'note_added',
+];
+// ---------------------------------------------------------------------------
+// The owner's counter-notice (`POST /content-claims/counter-notices`)
+// ---------------------------------------------------------------------------
+/** Every key a counter-notice's validation can produce, under `contentClaim.counterNotice.errors.*`. */
+exports.CONTENT_CLAIM_COUNTER_NOTICE_VALIDATION_KEYS = [
+    'contentClaim.counterNotice.errors.claim',
+    'contentClaim.counterNotice.errors.reference',
+    'contentClaim.counterNotice.errors.claimId',
+    'contentClaim.counterNotice.errors.fileIds',
+    'contentClaim.counterNotice.errors.name',
+    'contentClaim.counterNotice.errors.address',
+    'contentClaim.counterNotice.errors.phone',
+    'contentClaim.counterNotice.errors.email',
+    'contentClaim.counterNotice.errors.materialDescription',
+    'contentClaim.counterNotice.errors.materialLocation',
+    'contentClaim.counterNotice.errors.explanation',
+    'contentClaim.counterNotice.errors.perjury',
+    'contentClaim.counterNotice.errors.jurisdiction',
+    'contentClaim.counterNotice.errors.serviceOfProcess',
+    'contentClaim.counterNotice.errors.disclosure',
+    'contentClaim.counterNotice.errors.signature',
+];
+const N = contentClaims_1.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS;
+const boundedText = (min, max, message) => zod_1.z.string({ message }).trim().min(min, message).max(max, message);
+const affirmed = (message) => zod_1.z.literal(true, { errorMap: () => ({ message }) });
+/**
+ * `POST /content-claims/counter-notices` — the owner of content a claim took
+ * down disputes it (17 U.S.C. § 512(g)(3)). Signed in: the API answers only
+ * for files the caller owns.
+ *
+ * Names the claim by its `reference` (the `OXY-XXXX-XXXX` the owner was
+ * emailed), its `claimId`, or the blocked `fileIds` — at least one. With
+ * `fileIds` the notice covers exactly those files; without, every one of the
+ * caller's files the claim blocked. Strict: an unknown key is refused.
+ */
+exports.contentClaimCounterNoticeSchema = zod_1.z
+    .object({
+    reference: zod_1.z
+        .string({ message: 'contentClaim.counterNotice.errors.reference' })
+        .trim()
+        .toUpperCase()
+        .regex(contentClaims_1.CONTENT_CLAIM_REFERENCE_PATTERN, 'contentClaim.counterNotice.errors.reference')
+        .optional(),
+    claimId: zod_1.z
+        .string({ message: 'contentClaim.counterNotice.errors.claimId' })
+        .trim()
+        .uuid('contentClaim.counterNotice.errors.claimId')
+        .optional(),
+    fileIds: zod_1.z
+        .array(boundedText(1, N.maxFileId, 'contentClaim.counterNotice.errors.fileIds'), {
+        message: 'contentClaim.counterNotice.errors.fileIds',
+    })
+        .min(1, 'contentClaim.counterNotice.errors.fileIds')
+        .max(N.maxFileIds, 'contentClaim.counterNotice.errors.fileIds')
+        .optional(),
+    subscriber: zod_1.z
+        .object({
+        name: boundedText(1, N.maxName, 'contentClaim.counterNotice.errors.name'),
+        address: boundedText(1, N.maxAddress, 'contentClaim.counterNotice.errors.address'),
+        phone: boundedText(N.minPhone, N.maxPhone, 'contentClaim.counterNotice.errors.phone').regex(/^\+?[0-9 ().-]+$/, 'contentClaim.counterNotice.errors.phone'),
+        email: zod_1.z
+            .string({ message: 'contentClaim.counterNotice.errors.email' })
+            .trim()
+            .email('contentClaim.counterNotice.errors.email')
+            .max(N.maxEmail, 'contentClaim.counterNotice.errors.email'),
+    }, { message: 'contentClaim.counterNotice.errors.name' })
+        .strict(),
+    material: zod_1.z
+        .object({
+        /** What was removed. */
+        description: boundedText(N.minMaterial, N.maxMaterial, 'contentClaim.counterNotice.errors.materialDescription'),
+        /** Where it appeared before it was removed (a URL, or where in an app). */
+        location: boundedText(1, N.maxLocation, 'contentClaim.counterNotice.errors.materialLocation'),
+    }, { message: 'contentClaim.counterNotice.errors.materialDescription' })
+        .strict(),
+    /** Why it was a mistake or a misidentification, in the owner's words. */
+    explanation: boundedText(N.minExplanation, N.maxExplanation, 'contentClaim.counterNotice.errors.explanation'),
+    /** Each of `COUNTER_NOTICE_STATEMENTS`, affirmed. */
+    statements: zod_1.z
+        .object({
+        perjury: affirmed('contentClaim.counterNotice.errors.perjury'),
+        jurisdiction: affirmed('contentClaim.counterNotice.errors.jurisdiction'),
+        serviceOfProcess: affirmed('contentClaim.counterNotice.errors.serviceOfProcess'),
+        disclosure: affirmed('contentClaim.counterNotice.errors.disclosure'),
+    }, { message: 'contentClaim.counterNotice.errors.perjury' })
+        .strict(),
+    /** The owner's full legal name, typed as their signature. */
+    signature: boundedText(1, N.maxSignature, 'contentClaim.counterNotice.errors.signature'),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    if (value.reference === undefined &&
+        value.claimId === undefined &&
+        value.fileIds === undefined) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['reference'],
+            message: 'contentClaim.counterNotice.errors.claim',
+        });
+    }
+});

package/dist/cjs/index.js

@@ -37,9 +37,9 @@ exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.i
 exports.realtimeItemTruncateCommandSchema = exports.realtimeItemDeleteCommandSchema = exports.realtimeItemCreateCommandSchema = exports.realtimeSessionUpdateCommandSchema = exports.realtimeResponseParametersSchema = exports.realtimeConversationItemSchema = exports.realtimeContentPartSchema = exports.realtimeSessionRequestSchema = exports.realtimeClientMetadataSchema = exports.realtimeSessionLimitsSchema = exports.realtimeSessionConfigUpdateSchema = exports.realtimeSessionConfigSchema = exports.realtimeTranslationSchema = exports.realtimeInputTranscriptionSchema = exports.realtimeTurnDetectionSchema = exports.realtimeOutputModalitySchema = exports.realtimeAudioFormatSchema = exports.realtimeResponseIdSchema = exports.realtimeItemIdSchema = exports.realtimeCommandIdSchema = exports.MAX_REALTIME_RESUME_WINDOW_MS = exports.MAX_REALTIME_SESSION_AUDIO_BYTES = exports.MAX_REALTIME_SESSION_DURATION_MS = exports.MAX_REALTIME_AUDIO_FRAME_BASE64_LENGTH = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamAudioEventSchema = exports.MAX_INFERENCE_AUDIO_BYTES = exports.inferenceAudioMediaTypeSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.inferenceReasoningSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = void 0;
 exports.kaanaCredentialRotateMutationSchema = exports.kaanaCredentialCreateMutationSchema = exports.kaanaCredentialIdentitySchema = exports.kaanaCredentialOperationActionSchema = exports.kaanaCredentialOperationIdSchema = exports.kaanaCredentialHandleSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.realtimeServerEventSchema = exports.realtimeSessionClosedEventSchema = exports.realtimeSessionCloseReasonSchema = exports.realtimeErrorEventSchema = exports.realtimeResponseDoneEventSchema = exports.realtimeResponseStatusSchema = exports.realtimeToolCallEventSchema = exports.realtimeTextDeltaEventSchema = exports.realtimeTranscriptDoneEventSchema = exports.realtimeTranscriptDeltaEventSchema = exports.realtimeTranscriptSourceSchema = exports.realtimeOutputAudioDoneEventSchema = exports.realtimeOutputAudioDeltaEventSchema = exports.realtimeResponseCreatedEventSchema = exports.realtimeInputAudioClearedEventSchema = exports.realtimeInputAudioCommittedEventSchema = exports.realtimeSpeechStoppedEventSchema = exports.realtimeSpeechStartedEventSchema = exports.realtimeItemTruncatedEventSchema = exports.realtimeItemDeletedEventSchema = exports.realtimeItemDoneEventSchema = exports.realtimeItemAddedEventSchema = exports.realtimeCommandAcceptedEventSchema = exports.realtimeSessionResumedEventSchema = exports.realtimeSessionUpdatedEventSchema = exports.realtimeSessionCreatedEventSchema = exports.realtimeClientCommandSchema = exports.realtimeSessionCloseCommandSchema = exports.realtimeSessionResumeCommandSchema = exports.realtimeResponseCancelCommandSchema = exports.realtimeResponseCreateCommandSchema = exports.realtimeInputAudioClearCommandSchema = exports.realtimeInputAudioCommitCommandSchema = exports.realtimeInputAudioAppendCommandSchema = void 0;
 exports.payAsYouGoEntitlementSchema = exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerCredentialCustodyStateSchema = exports.providerCredentialValidationDeploymentSchema = exports.providerCredentialValidationOperationSchema = exports.kaanaCredentialValidationOutcomeSchema = exports.kaanaCredentialValidationFailureCodeSchema = exports.kaanaCredentialValidationOutcomeStateSchema = exports.kaanaCredentialValidationTaskSchema = exports.kaanaCredentialOutcomeSchema = exports.kaanaCredentialConflictOutcomeSchema = exports.kaanaCredentialAppliedOutcomeSchema = exports.kaanaCredentialOutcomeRequestSchema = exports.kaanaCredentialRevokeOutcomeRequestSchema = exports.kaanaCredentialRotateOutcomeRequestSchema = exports.kaanaCredentialCreateOutcomeRequestSchema = exports.kaanaCredentialMutationSchema = exports.kaanaCredentialRevokeMutationSchema = void 0;
-exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
-exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = void 0;
-exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = void 0;
+exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
+exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = void 0;
+exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -782,6 +782,9 @@ Object.defineProperty(exports, "executionAuthorizationRefSchema", { enumerable:
 Object.defineProperty(exports, "capabilityCoordinatorSchema", { enumerable: true, get: function () { return agency_1.capabilityCoordinatorSchema; } });
 Object.defineProperty(exports, "capabilityTicketRequestSchema", { enumerable: true, get: function () { return agency_1.capabilityTicketRequestSchema; } });
 Object.defineProperty(exports, "delegationGrantSchema", { enumerable: true, get: function () { return agency_1.delegationGrantSchema; } });
+Object.defineProperty(exports, "AGENT_REQUESTER_CEILING_AUTONOMY", { enumerable: true, get: function () { return agency_1.AGENT_REQUESTER_CEILING_AUTONOMY; } });
+Object.defineProperty(exports, "agentRequesterCeilingWriteSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingWriteSchema; } });
+Object.defineProperty(exports, "agentRequesterCeilingSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingSchema; } });
 Object.defineProperty(exports, "automationTriggerSchema", { enumerable: true, get: function () { return agency_1.automationTriggerSchema; } });
 Object.defineProperty(exports, "automationActorSelectionSchema", { enumerable: true, get: function () { return agency_1.automationActorSelectionSchema; } });
 Object.defineProperty(exports, "automationDataFlowSchema", { enumerable: true, get: function () { return agency_1.automationDataFlowSchema; } });
@@ -793,6 +796,8 @@ Object.defineProperty(exports, "auditResultSchema", { enumerable: true, get: fun
 Object.defineProperty(exports, "auditEventSchema", { enumerable: true, get: function () { return agency_1.auditEventSchema; } });
 Object.defineProperty(exports, "catalogToolSchema", { enumerable: true, get: function () { return agency_1.catalogToolSchema; } });
 Object.defineProperty(exports, "catalogEventSchema", { enumerable: true, get: function () { return agency_1.catalogEventSchema; } });
+Object.defineProperty(exports, "catalogFeatureSchema", { enumerable: true, get: function () { return agency_1.catalogFeatureSchema; } });
+Object.defineProperty(exports, "CATALOG_INTERNAL_TRANSPORTS", { enumerable: true, get: function () { return agency_1.CATALOG_INTERNAL_TRANSPORTS; } });
 Object.defineProperty(exports, "appCapabilityCatalogSchema", { enumerable: true, get: function () { return agency_1.appCapabilityCatalogSchema; } });
 Object.defineProperty(exports, "catalogRegistrationSchema", { enumerable: true, get: function () { return agency_1.catalogRegistrationSchema; } });
 Object.defineProperty(exports, "normalizedAppEventSchema", { enumerable: true, get: function () { return agency_1.normalizedAppEventSchema; } });
@@ -823,6 +828,7 @@ Object.defineProperty(exports, "inboxInferenceStreamEventSchema", { enumerable:
 __exportStar(require("./externalIdentity"), exports);
 __exportStar(require("./linkedAccounts"), exports);
 __exportStar(require("./federationInstanceFetch"), exports);
+__exportStar(require("./accountAccess"), exports);
 __exportStar(require("./notifications"), exports);
 __exportStar(require("./email/messages"), exports);
 __exportStar(require("./stickers"), exports);
@@ -889,3 +895,8 @@ Object.defineProperty(exports, "personalPlanCatalogueSchema", { enumerable: true
 __exportStar(require("./products/checkout"), exports);
 __exportStar(require("./organizations"), exports);
 __exportStar(require("./safety"), exports);
+var serviceToken_1 = require("./serviceToken");
+Object.defineProperty(exports, "serviceTokenScopesSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenScopesSchema; } });
+Object.defineProperty(exports, "serviceTokenOptionsSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenOptionsSchema; } });
+__exportStar(require("./applicationRoles"), exports);
+__exportStar(require("./contentClaims"), exports);