@oxy.so/contracts 4.21.0 → 4.22.0

package/dist/cjs/client/contentClaims.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * Content claims (ADR 0043 D10) — the constants of the public "Report content
+ * / rights claim" intake and of a claim's review, without Zod. Schemas:
+ * `../contentClaims.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.COUNTER_NOTICE_STATEMENTS = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_ERROR_CODES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.OPEN_CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_LIMITS = exports.CLAIMANT_RELATIONSHIPS = exports.CONTENT_CLAIM_KINDS = void 0;
+exports.isRightsClaim = isRightsClaim;
+exports.isErasureRequest = isErasureRequest;
+/** What a claim asserts. */
+exports.CONTENT_CLAIM_KINDS = [
+    'copyright',
+    'trademark',
+    'privacy',
+    'illegal_content',
+    'other',
+];
+/** Who the claimant is to the content. */
+exports.CLAIMANT_RELATIONSHIPS = [
+    'rights_holder',
+    'authorized_agent',
+    'affected_person',
+    'other',
+];
+/** The bounds of a submission. The website fills its validation messages from these. */
+exports.CONTENT_CLAIM_LIMITS = {
+    minUrls: 1,
+    maxUrls: 20,
+    maxUrlLength: 2048,
+    minDescription: 20,
+    maxDescription: 5000,
+    maxName: 200,
+    maxOrganization: 200,
+    maxEmail: 254,
+};
+/**
+ * Where a claim is in its review.
+ *
+ * `received → reviewing → actioned | rejected`; an actioned claim can be
+ * answered by the content's owner (`counter_noticed`), which ends either in
+ * `reinstated` (the content is served again) or `upheld` (it stays blocked).
+ * A claim can also be rejected straight from `received`.
+ */
+exports.CONTENT_CLAIM_STATES = [
+    'received',
+    'reviewing',
+    'actioned',
+    'rejected',
+    'counter_noticed',
+    'reinstated',
+    'upheld',
+];
+/** The states in which a claim is still open: its evidence is kept and its blocks can change. */
+exports.OPEN_CONTENT_CLAIM_STATES = [
+    'received',
+    'reviewing',
+    'actioned',
+    'counter_noticed',
+];
+/** The states a claim ends in. */
+exports.CLOSED_CONTENT_CLAIM_STATES = [
+    'rejected',
+    'reinstated',
+    'upheld',
+];
+/**
+ * The kinds whose claimant asserts a right in a work or a mark. Only these
+ * carry the link to the original — a privacy or illegal-content report
+ * asserts no ownership.
+ */
+function isRightsClaim(kind) {
+    return kind === 'copyright' || kind === 'trademark';
+}
+/**
+ * A request to erase the claimant's OWN personal data (GDPR art. 17): a
+ * privacy claim made by the person it is about. Oxy must answer it within one
+ * month (art. 12(3)); the claim carries that deadline.
+ */
+function isErasureRequest(kind, relationship) {
+    return kind === 'privacy' && relationship === 'affected_person';
+}
+/** Days Oxy has to answer an erasure request ({@link isErasureRequest}). */
+exports.ERASURE_REQUEST_DEADLINE_DAYS = 30;
+/**
+ * Stable error codes a takedown produces elsewhere in the API. A file whose
+ * bytes are on the blocklist cannot be uploaded, imported or copied by anyone
+ * (HTTP 451).
+ */
+exports.CONTENT_CLAIM_ERROR_CODES = {
+    /** The submission failed validation; `fields` names each problem. */
+    invalid: 'CONTENT_CLAIM_INVALID',
+    /** These exact bytes were taken down after a claim and cannot be stored again. */
+    contentBlocked: 'CONTENT_BLOCKED',
+    /** A counter-notice failed validation; `fields` names each problem. */
+    counterNoticeInvalid: 'CONTENT_CLAIM_COUNTER_NOTICE_INVALID',
+    /** The files named are blocked by more than one claim: name the claim's reference. */
+    counterNoticeAmbiguous: 'CONTENT_CLAIM_COUNTER_NOTICE_AMBIGUOUS',
+    /** This account already sent a counter-notice for this claim. */
+    counterNoticeExists: 'CONTENT_CLAIM_COUNTER_NOTICE_EXISTS',
+};
+/**
+ * A claim's reference as the claimant and the owner are sent it:
+ * `OXY-XXXX-XXXX`, Crockford base32 (no I, L, O or U).
+ */
+exports.CONTENT_CLAIM_REFERENCE_PATTERN = /^OXY-[0-9A-HJKMNP-TV-Z]{4}-[0-9A-HJKMNP-TV-Z]{4}$/;
+/** The bounds of an owner's counter-notice. The website fills its validation messages from these. */
+exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = {
+    maxFileIds: 50,
+    maxFileId: 64,
+    maxName: 200,
+    maxAddress: 500,
+    minPhone: 5,
+    maxPhone: 40,
+    maxEmail: 254,
+    minMaterial: 10,
+    maxMaterial: 2000,
+    maxLocation: 2048,
+    minExplanation: 20,
+    maxExplanation: 5000,
+    maxSignature: 200,
+};
+/**
+ * The statements an owner's counter-notice makes, word for word — what the
+ * form shows beside each box (17 U.S.C. § 512(g)(3)(C) and (D), and what Oxy
+ * does with the notice). The API records {@link COUNTER_NOTICE_STATEMENT_VERSION}
+ * with every notice, so the wording a person agreed to can always be told
+ * apart from a later one. Change the text only together with the version.
+ */
+exports.COUNTER_NOTICE_STATEMENTS = {
+    perjury: 'I swear, under penalty of perjury, that I have a good faith belief that the material identified above was removed or disabled as a result of a mistake or misidentification of the material to be removed or disabled.',
+    jurisdiction: 'I consent to the jurisdiction of the Federal District Court for the judicial district in which my address is located or, if my address is outside of the United States, any judicial district in which Oxy may be found.',
+    serviceOfProcess: 'I will accept service of process from the person who provided the notification of the claimed infringement, or an agent of such person.',
+    disclosure: 'I understand that Oxy sends a copy of this counter-notice, including my name and contact details, to the person who made the claim, as the law requires.',
+};
+/** The version of {@link COUNTER_NOTICE_STATEMENTS} in force. */
+exports.COUNTER_NOTICE_STATEMENT_VERSION = '2026-10-16';

package/dist/cjs/client/index.js

@@ -19,7 +19,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.deviceJoinCodeResponseCheck = exports.deviceBackgroundCredentialResponseCheck = exports.activeTokenCheck = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceDirectorySyncCheck = exports.deviceDirectoryCheck = exports.deviceActivateResponseCheck = exports.signedRecordEnvelopeCheck = exports.externalIdentityReferenceCheck = exports.loginResultCheck = exports.isLoopbackOrigin = exports.executeAgentKeyOperationCheck = exports.agentVerifyRequestCheck = exports.agentProofClaimsCheck = exports.agentKeyOperationResultCheck = exports.agentKeyOperationCheck = exports.agentKeyOperationChallengeCheck = exports.agentKeyListResponseCheck = exports.agentChallengeRequestCheck = exports.AGENT_PROOF_TTL_MS = exports.AGENT_PROOF_AUDIENCE = exports.AGENT_PROOF_ACTIONS = exports.ACCOUNT_AUTH_METHODS = exports.emailVerificationStartResponseCheck = exports.emailVerificationConfirmResponseCheck = exports.emailTicketCheck = exports.emailAddressCheck = exports.EMAIL_VERIFICATION_PURPOSES = exports.EMAIL_VERIFICATION_ERROR_CODES = exports.EMAIL_TICKET_TTL_MS = exports.EMAIL_CODE_TTL_MS = exports.EMAIL_CODE_MAX_ATTEMPTS = exports.EMAIL_CODE_LENGTH = exports.newlyAddedRetiredCategories = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.isAccountKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.RETIRED_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.CHILD_ACCOUNT_KINDS = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_KINDS = exports.ACCOUNT_CATEGORY_IDS = exports.parseContract = exports.formatCheckPath = exports.checkContract = exports.ContractCheckError = void 0;
 exports.subjectProductAccessCheck = exports.productSubscriptionsResponseCheck = exports.productSubscriptionCancellationResultCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.cancelProductSubscriptionCheck = exports.updateOrganizationCheck = exports.organizationNameCheck = exports.organizationListCheck = exports.organizationImportBatchResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationCurationResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimInputCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationCheck = exports.organizationBatchCheck = exports.createOrganizationCheck = exports.ORGANIZATION_TYPES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.canonicalJson = exports.buildIdentityProofMessage = exports.IDENTITY_PROOF_VERSION = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_ERROR_CODES = exports.parseIdentityLinkQrPayload = exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_STATUSES = exports.IDENTITY_LINK_QR_PREFIX = exports.sessionAccountsChangedEventCheck = exports.deviceTokenMintResponseCheck = exports.deviceSessionSyncCheck = exports.deviceSessionStateCheck = exports.deviceRegisterResponseCheck = exports.deviceJoinResponseCheck = void 0;
 exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.supervisionStateCheck = exports.supervisionReviewInputCheck = exports.supervisionInviteInputCheck = exports.supervisionInvitationCheck = exports.supervisionContactsResponseCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.SUPERVISION_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SUPERVISED_ACTIONS = exports.SAFETY_POLICY_VERSION = exports.PURCHASE_APPROVAL_STATUSES = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = void 0;
-exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = void 0;
+exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = void 0;
 var check_1 = require("./check");
 Object.defineProperty(exports, "ContractCheckError", { enumerable: true, get: function () { return check_1.ContractCheckError; } });
 Object.defineProperty(exports, "checkContract", { enumerable: true, get: function () { return check_1.checkContract; } });
@@ -209,3 +209,18 @@ Object.defineProperty(exports, "usernameCheck", { enumerable: true, get: functio
 Object.defineProperty(exports, "usernameCheckForAccountKind", { enumerable: true, get: function () { return username_1.usernameCheckForAccountKind; } });
 var userResponse_1 = require("./userResponse");
 Object.defineProperty(exports, "userNameCheck", { enumerable: true, get: function () { return userResponse_1.userNameCheck; } });
+var contentClaims_1 = require("./contentClaims");
+Object.defineProperty(exports, "CLAIMANT_RELATIONSHIPS", { enumerable: true, get: function () { return contentClaims_1.CLAIMANT_RELATIONSHIPS; } });
+Object.defineProperty(exports, "CLOSED_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.CLOSED_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_COUNTER_NOTICE_LIMITS", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_ERROR_CODES", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_ERROR_CODES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_KINDS", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_KINDS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_LIMITS", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_REFERENCE_PATTERN", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_REFERENCE_PATTERN; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENT_VERSION", { enumerable: true, get: function () { return contentClaims_1.COUNTER_NOTICE_STATEMENT_VERSION; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENTS", { enumerable: true, get: function () { return contentClaims_1.COUNTER_NOTICE_STATEMENTS; } });
+Object.defineProperty(exports, "ERASURE_REQUEST_DEADLINE_DAYS", { enumerable: true, get: function () { return contentClaims_1.ERASURE_REQUEST_DEADLINE_DAYS; } });
+Object.defineProperty(exports, "OPEN_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.OPEN_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "isErasureRequest", { enumerable: true, get: function () { return contentClaims_1.isErasureRequest; } });
+Object.defineProperty(exports, "isRightsClaim", { enumerable: true, get: function () { return contentClaims_1.isRightsClaim; } });

package/dist/cjs/contentClaims.js

@@ -0,0 +1,246 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contentClaimCounterNoticeSchema = exports.CONTENT_CLAIM_COUNTER_NOTICE_VALIDATION_KEYS = exports.CONTENT_CLAIM_EVENT_ACTIONS = exports.CONTENT_CLAIM_TARGET_SOURCES = exports.CONTENT_CLAIM_TARGET_RESOLUTIONS = exports.contentClaimSubmissionSchema = exports.CONTENT_CLAIM_VALIDATION_KEYS = exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = void 0;
+/**
+ * Content claims (ADR 0043 D10): the public "Report content / rights claim"
+ * intake, `POST /content-claims`, and the staff review of a claim.
+ *
+ * {@link contentClaimSubmissionSchema} is the request body the API parses and
+ * the Oxy website validates its form with before posting, so the form cannot
+ * accept what the API would answer 400 to. Every validation message is a
+ * stable KEY under `contentClaim.errors.*` (filled with
+ * {@link CONTENT_CLAIM_LIMITS} by whoever shows it), never English: the website
+ * translates the key, and the API answers its own English sentence for it in
+ * `fields`.
+ */
+const zod_1 = require("zod");
+// The Zod-free half of this contract lives in `./client/` (`@oxy.so/contracts/client`);
+// it is re-exported here so the root entry carries the whole contract.
+const contentClaims_1 = require("./client/contentClaims");
+var contentClaims_2 = require("./client/contentClaims");
+Object.defineProperty(exports, "CLAIMANT_RELATIONSHIPS", { enumerable: true, get: function () { return contentClaims_2.CLAIMANT_RELATIONSHIPS; } });
+Object.defineProperty(exports, "CLOSED_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_2.CLOSED_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_COUNTER_NOTICE_LIMITS", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_ERROR_CODES", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_ERROR_CODES; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_KINDS", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_KINDS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_LIMITS", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_LIMITS; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_REFERENCE_PATTERN", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_REFERENCE_PATTERN; } });
+Object.defineProperty(exports, "CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_2.CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENT_VERSION", { enumerable: true, get: function () { return contentClaims_2.COUNTER_NOTICE_STATEMENT_VERSION; } });
+Object.defineProperty(exports, "COUNTER_NOTICE_STATEMENTS", { enumerable: true, get: function () { return contentClaims_2.COUNTER_NOTICE_STATEMENTS; } });
+Object.defineProperty(exports, "ERASURE_REQUEST_DEADLINE_DAYS", { enumerable: true, get: function () { return contentClaims_2.ERASURE_REQUEST_DEADLINE_DAYS; } });
+Object.defineProperty(exports, "OPEN_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_2.OPEN_CONTENT_CLAIM_STATES; } });
+Object.defineProperty(exports, "isErasureRequest", { enumerable: true, get: function () { return contentClaims_2.isErasureRequest; } });
+Object.defineProperty(exports, "isRightsClaim", { enumerable: true, get: function () { return contentClaims_2.isRightsClaim; } });
+/** Every key a submission's validation can produce, under `contentClaim.errors.*`. */
+exports.CONTENT_CLAIM_VALIDATION_KEYS = [
+    'contentClaim.errors.kind',
+    'contentClaim.errors.contentUrlsRequired',
+    'contentClaim.errors.contentUrlsTooMany',
+    'contentClaim.errors.contentUrlInvalid',
+    'contentClaim.errors.descriptionShort',
+    'contentClaim.errors.descriptionLong',
+    'contentClaim.errors.originalWorkUrl',
+    'contentClaim.errors.name',
+    'contentClaim.errors.email',
+    'contentClaim.errors.organization',
+    'contentClaim.errors.relationship',
+    'contentClaim.errors.goodFaith',
+    'contentClaim.errors.accurate',
+    'contentClaim.errors.signature',
+];
+function isHttpsUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' && url.hostname.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+const httpsUrl = (message) => zod_1.z.string().trim().max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxUrlLength, message).refine(isHttpsUrl, message);
+/**
+ * `POST /content-claims` — a claim, as the claimant sends it. Strict: an
+ * unknown key is refused rather than dropped.
+ */
+exports.contentClaimSubmissionSchema = zod_1.z
+    .object({
+    kind: zod_1.z.enum(contentClaims_1.CONTENT_CLAIM_KINDS, { message: 'contentClaim.errors.kind' }),
+    contentUrls: zod_1.z
+        .array(httpsUrl('contentClaim.errors.contentUrlInvalid'), {
+        message: 'contentClaim.errors.contentUrlsRequired',
+    })
+        .min(contentClaims_1.CONTENT_CLAIM_LIMITS.minUrls, 'contentClaim.errors.contentUrlsRequired')
+        .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxUrls, 'contentClaim.errors.contentUrlsTooMany'),
+    description: zod_1.z
+        .string({ message: 'contentClaim.errors.descriptionShort' })
+        .trim()
+        .min(contentClaims_1.CONTENT_CLAIM_LIMITS.minDescription, 'contentClaim.errors.descriptionShort')
+        .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxDescription, 'contentClaim.errors.descriptionLong'),
+    originalWorkUrl: httpsUrl('contentClaim.errors.originalWorkUrl').optional(),
+    claimant: zod_1.z
+        .object({
+        name: zod_1.z
+            .string({ message: 'contentClaim.errors.name' })
+            .trim()
+            .min(1, 'contentClaim.errors.name')
+            .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxName, 'contentClaim.errors.name'),
+        email: zod_1.z
+            .string({ message: 'contentClaim.errors.email' })
+            .trim()
+            .email('contentClaim.errors.email')
+            .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxEmail, 'contentClaim.errors.email'),
+        organization: zod_1.z
+            .string({ message: 'contentClaim.errors.organization' })
+            .trim()
+            .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxOrganization, 'contentClaim.errors.organization')
+            .optional(),
+        relationship: zod_1.z.enum(contentClaims_1.CLAIMANT_RELATIONSHIPS, {
+            message: 'contentClaim.errors.relationship',
+        }),
+    }, { message: 'contentClaim.errors.name' })
+        .strict(),
+    statements: zod_1.z
+        .object({
+        goodFaith: zod_1.z.literal(true, {
+            errorMap: () => ({ message: 'contentClaim.errors.goodFaith' }),
+        }),
+        accurate: zod_1.z.literal(true, {
+            errorMap: () => ({ message: 'contentClaim.errors.accurate' }),
+        }),
+    }, { message: 'contentClaim.errors.goodFaith' })
+        .strict(),
+    signature: zod_1.z
+        .string({ message: 'contentClaim.errors.signature' })
+        .trim()
+        .min(1, 'contentClaim.errors.signature')
+        .max(contentClaims_1.CONTENT_CLAIM_LIMITS.maxName, 'contentClaim.errors.signature'),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// The staff review (`/content-claims` behind the `content:claims` capability)
+// ---------------------------------------------------------------------------
+/** How a target's URL was understood. */
+exports.CONTENT_CLAIM_TARGET_RESOLUTIONS = [
+    /** An Oxy file: `cloud.oxy.so/<id>`, `/cdn/<id>`, `/assets/<id>…`, a stored key. */
+    'file',
+    /** A page of an Oxy app or anything else: a person attaches the files it shows. */
+    'unresolved',
+];
+/** Who added a target: the claimant's URL, or staff attaching a file by id. */
+exports.CONTENT_CLAIM_TARGET_SOURCES = ['claimant', 'staff'];
+/** What the audit trail records. */
+exports.CONTENT_CLAIM_EVENT_ACTIONS = [
+    'submitted',
+    'review_started',
+    'targets_attached',
+    'targets_blocked',
+    'rejected',
+    'counter_notice_recorded',
+    /** The owner of the blocked content sent a counter-notice themselves (`POST /content-claims/counter-notices`). */
+    'counter_notice_submitted',
+    'reinstated',
+    'upheld',
+    'note_added',
+];
+// ---------------------------------------------------------------------------
+// The owner's counter-notice (`POST /content-claims/counter-notices`)
+// ---------------------------------------------------------------------------
+/** Every key a counter-notice's validation can produce, under `contentClaim.counterNotice.errors.*`. */
+exports.CONTENT_CLAIM_COUNTER_NOTICE_VALIDATION_KEYS = [
+    'contentClaim.counterNotice.errors.claim',
+    'contentClaim.counterNotice.errors.reference',
+    'contentClaim.counterNotice.errors.claimId',
+    'contentClaim.counterNotice.errors.fileIds',
+    'contentClaim.counterNotice.errors.name',
+    'contentClaim.counterNotice.errors.address',
+    'contentClaim.counterNotice.errors.phone',
+    'contentClaim.counterNotice.errors.email',
+    'contentClaim.counterNotice.errors.materialDescription',
+    'contentClaim.counterNotice.errors.materialLocation',
+    'contentClaim.counterNotice.errors.explanation',
+    'contentClaim.counterNotice.errors.perjury',
+    'contentClaim.counterNotice.errors.jurisdiction',
+    'contentClaim.counterNotice.errors.serviceOfProcess',
+    'contentClaim.counterNotice.errors.disclosure',
+    'contentClaim.counterNotice.errors.signature',
+];
+const N = contentClaims_1.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS;
+const boundedText = (min, max, message) => zod_1.z.string({ message }).trim().min(min, message).max(max, message);
+const affirmed = (message) => zod_1.z.literal(true, { errorMap: () => ({ message }) });
+/**
+ * `POST /content-claims/counter-notices` — the owner of content a claim took
+ * down disputes it (17 U.S.C. § 512(g)(3)). Signed in: the API answers only
+ * for files the caller owns.
+ *
+ * Names the claim by its `reference` (the `OXY-XXXX-XXXX` the owner was
+ * emailed), its `claimId`, or the blocked `fileIds` — at least one. With
+ * `fileIds` the notice covers exactly those files; without, every one of the
+ * caller's files the claim blocked. Strict: an unknown key is refused.
+ */
+exports.contentClaimCounterNoticeSchema = zod_1.z
+    .object({
+    reference: zod_1.z
+        .string({ message: 'contentClaim.counterNotice.errors.reference' })
+        .trim()
+        .toUpperCase()
+        .regex(contentClaims_1.CONTENT_CLAIM_REFERENCE_PATTERN, 'contentClaim.counterNotice.errors.reference')
+        .optional(),
+    claimId: zod_1.z
+        .string({ message: 'contentClaim.counterNotice.errors.claimId' })
+        .trim()
+        .uuid('contentClaim.counterNotice.errors.claimId')
+        .optional(),
+    fileIds: zod_1.z
+        .array(boundedText(1, N.maxFileId, 'contentClaim.counterNotice.errors.fileIds'), {
+        message: 'contentClaim.counterNotice.errors.fileIds',
+    })
+        .min(1, 'contentClaim.counterNotice.errors.fileIds')
+        .max(N.maxFileIds, 'contentClaim.counterNotice.errors.fileIds')
+        .optional(),
+    subscriber: zod_1.z
+        .object({
+        name: boundedText(1, N.maxName, 'contentClaim.counterNotice.errors.name'),
+        address: boundedText(1, N.maxAddress, 'contentClaim.counterNotice.errors.address'),
+        phone: boundedText(N.minPhone, N.maxPhone, 'contentClaim.counterNotice.errors.phone').regex(/^\+?[0-9 ().-]+$/, 'contentClaim.counterNotice.errors.phone'),
+        email: zod_1.z
+            .string({ message: 'contentClaim.counterNotice.errors.email' })
+            .trim()
+            .email('contentClaim.counterNotice.errors.email')
+            .max(N.maxEmail, 'contentClaim.counterNotice.errors.email'),
+    }, { message: 'contentClaim.counterNotice.errors.name' })
+        .strict(),
+    material: zod_1.z
+        .object({
+        /** What was removed. */
+        description: boundedText(N.minMaterial, N.maxMaterial, 'contentClaim.counterNotice.errors.materialDescription'),
+        /** Where it appeared before it was removed (a URL, or where in an app). */
+        location: boundedText(1, N.maxLocation, 'contentClaim.counterNotice.errors.materialLocation'),
+    }, { message: 'contentClaim.counterNotice.errors.materialDescription' })
+        .strict(),
+    /** Why it was a mistake or a misidentification, in the owner's words. */
+    explanation: boundedText(N.minExplanation, N.maxExplanation, 'contentClaim.counterNotice.errors.explanation'),
+    /** Each of `COUNTER_NOTICE_STATEMENTS`, affirmed. */
+    statements: zod_1.z
+        .object({
+        perjury: affirmed('contentClaim.counterNotice.errors.perjury'),
+        jurisdiction: affirmed('contentClaim.counterNotice.errors.jurisdiction'),
+        serviceOfProcess: affirmed('contentClaim.counterNotice.errors.serviceOfProcess'),
+        disclosure: affirmed('contentClaim.counterNotice.errors.disclosure'),
+    }, { message: 'contentClaim.counterNotice.errors.perjury' })
+        .strict(),
+    /** The owner's full legal name, typed as their signature. */
+    signature: boundedText(1, N.maxSignature, 'contentClaim.counterNotice.errors.signature'),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    if (value.reference === undefined &&
+        value.claimId === undefined &&
+        value.fileIds === undefined) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['reference'],
+            message: 'contentClaim.counterNotice.errors.claim',
+        });
+    }
+});

package/dist/cjs/index.js

@@ -899,3 +899,4 @@ var serviceToken_1 = require("./serviceToken");
 Object.defineProperty(exports, "serviceTokenScopesSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenScopesSchema; } });
 Object.defineProperty(exports, "serviceTokenOptionsSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenOptionsSchema; } });
 __exportStar(require("./applicationRoles"), exports);
+__exportStar(require("./contentClaims"), exports);

package/dist/esm/client/contentClaims.js

@@ -0,0 +1,134 @@
+/**
+ * Content claims (ADR 0043 D10) — the constants of the public "Report content
+ * / rights claim" intake and of a claim's review, without Zod. Schemas:
+ * `../contentClaims.ts`.
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+/** What a claim asserts. */
+export const CONTENT_CLAIM_KINDS = [
+    'copyright',
+    'trademark',
+    'privacy',
+    'illegal_content',
+    'other',
+];
+/** Who the claimant is to the content. */
+export const CLAIMANT_RELATIONSHIPS = [
+    'rights_holder',
+    'authorized_agent',
+    'affected_person',
+    'other',
+];
+/** The bounds of a submission. The website fills its validation messages from these. */
+export const CONTENT_CLAIM_LIMITS = {
+    minUrls: 1,
+    maxUrls: 20,
+    maxUrlLength: 2048,
+    minDescription: 20,
+    maxDescription: 5000,
+    maxName: 200,
+    maxOrganization: 200,
+    maxEmail: 254,
+};
+/**
+ * Where a claim is in its review.
+ *
+ * `received → reviewing → actioned | rejected`; an actioned claim can be
+ * answered by the content's owner (`counter_noticed`), which ends either in
+ * `reinstated` (the content is served again) or `upheld` (it stays blocked).
+ * A claim can also be rejected straight from `received`.
+ */
+export const CONTENT_CLAIM_STATES = [
+    'received',
+    'reviewing',
+    'actioned',
+    'rejected',
+    'counter_noticed',
+    'reinstated',
+    'upheld',
+];
+/** The states in which a claim is still open: its evidence is kept and its blocks can change. */
+export const OPEN_CONTENT_CLAIM_STATES = [
+    'received',
+    'reviewing',
+    'actioned',
+    'counter_noticed',
+];
+/** The states a claim ends in. */
+export const CLOSED_CONTENT_CLAIM_STATES = [
+    'rejected',
+    'reinstated',
+    'upheld',
+];
+/**
+ * The kinds whose claimant asserts a right in a work or a mark. Only these
+ * carry the link to the original — a privacy or illegal-content report
+ * asserts no ownership.
+ */
+export function isRightsClaim(kind) {
+    return kind === 'copyright' || kind === 'trademark';
+}
+/**
+ * A request to erase the claimant's OWN personal data (GDPR art. 17): a
+ * privacy claim made by the person it is about. Oxy must answer it within one
+ * month (art. 12(3)); the claim carries that deadline.
+ */
+export function isErasureRequest(kind, relationship) {
+    return kind === 'privacy' && relationship === 'affected_person';
+}
+/** Days Oxy has to answer an erasure request ({@link isErasureRequest}). */
+export const ERASURE_REQUEST_DEADLINE_DAYS = 30;
+/**
+ * Stable error codes a takedown produces elsewhere in the API. A file whose
+ * bytes are on the blocklist cannot be uploaded, imported or copied by anyone
+ * (HTTP 451).
+ */
+export const CONTENT_CLAIM_ERROR_CODES = {
+    /** The submission failed validation; `fields` names each problem. */
+    invalid: 'CONTENT_CLAIM_INVALID',
+    /** These exact bytes were taken down after a claim and cannot be stored again. */
+    contentBlocked: 'CONTENT_BLOCKED',
+    /** A counter-notice failed validation; `fields` names each problem. */
+    counterNoticeInvalid: 'CONTENT_CLAIM_COUNTER_NOTICE_INVALID',
+    /** The files named are blocked by more than one claim: name the claim's reference. */
+    counterNoticeAmbiguous: 'CONTENT_CLAIM_COUNTER_NOTICE_AMBIGUOUS',
+    /** This account already sent a counter-notice for this claim. */
+    counterNoticeExists: 'CONTENT_CLAIM_COUNTER_NOTICE_EXISTS',
+};
+/**
+ * A claim's reference as the claimant and the owner are sent it:
+ * `OXY-XXXX-XXXX`, Crockford base32 (no I, L, O or U).
+ */
+export const CONTENT_CLAIM_REFERENCE_PATTERN = /^OXY-[0-9A-HJKMNP-TV-Z]{4}-[0-9A-HJKMNP-TV-Z]{4}$/;
+/** The bounds of an owner's counter-notice. The website fills its validation messages from these. */
+export const CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = {
+    maxFileIds: 50,
+    maxFileId: 64,
+    maxName: 200,
+    maxAddress: 500,
+    minPhone: 5,
+    maxPhone: 40,
+    maxEmail: 254,
+    minMaterial: 10,
+    maxMaterial: 2000,
+    maxLocation: 2048,
+    minExplanation: 20,
+    maxExplanation: 5000,
+    maxSignature: 200,
+};
+/**
+ * The statements an owner's counter-notice makes, word for word — what the
+ * form shows beside each box (17 U.S.C. § 512(g)(3)(C) and (D), and what Oxy
+ * does with the notice). The API records {@link COUNTER_NOTICE_STATEMENT_VERSION}
+ * with every notice, so the wording a person agreed to can always be told
+ * apart from a later one. Change the text only together with the version.
+ */
+export const COUNTER_NOTICE_STATEMENTS = {
+    perjury: 'I swear, under penalty of perjury, that I have a good faith belief that the material identified above was removed or disabled as a result of a mistake or misidentification of the material to be removed or disabled.',
+    jurisdiction: 'I consent to the jurisdiction of the Federal District Court for the judicial district in which my address is located or, if my address is outside of the United States, any judicial district in which Oxy may be found.',
+    serviceOfProcess: 'I will accept service of process from the person who provided the notification of the claimed infringement, or an agent of such person.',
+    disclosure: 'I understand that Oxy sends a copy of this counter-notice, including my name and contact details, to the person who made the claim, as the law requires.',
+};
+/** The version of {@link COUNTER_NOTICE_STATEMENTS} in force. */
+export const COUNTER_NOTICE_STATEMENT_VERSION = '2026-10-16';

package/dist/esm/client/index.js

@@ -35,3 +35,4 @@ export { publicApplicationCheck } from './sessionStatus.js';
 export { EMAIL_ACCOUNTS_MAX, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_SIGNIN_LINK_TTL_MS, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, REAUTH_ACTIONS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGN_IN_ERROR_CODES, TOTP_BACKUP_CODE_COUNT, TOTP_DIGITS, TOTP_PERIOD_SECONDS, emailSignInChooseAccountCheck, emailSignInLinkResponseCheck, emailSignInPendingCheck, emailSignInStartResponseCheck, isEmailSignInChooseAccount, isSecondFactorRequired, normalizeEmailSignInCode, reauthProofCheck, secondFactorRequiredCheck, signInMethodsCheck, totpBackupCodesResponseCheck, totpEnrollResponseCheck, } from './signIn.js';
 export { BOT_USERNAME_INVALID_MESSAGE, BOT_USERNAME_SUFFIX, NUMERIC_USERNAME_MESSAGE, RESERVED_USERNAMES, RESERVED_USERNAME_MESSAGE, USERNAME_INVALID_MESSAGE, USERNAME_MAX_LENGTH, USERNAME_MIN_LENGTH, USERNAME_PATTERN_SOURCE, applyBotUsernameSuffix, botUsernameCheck, stripDisallowedUsernameCharacters, usernameCheck, usernameCheckForAccountKind, } from './username.js';
 export { userNameCheck } from './userResponse.js';
+export { CLAIMANT_RELATIONSHIPS, CLOSED_CONTENT_CLAIM_STATES, CONTENT_CLAIM_COUNTER_NOTICE_LIMITS, CONTENT_CLAIM_ERROR_CODES, CONTENT_CLAIM_KINDS, CONTENT_CLAIM_LIMITS, CONTENT_CLAIM_REFERENCE_PATTERN, CONTENT_CLAIM_STATES, COUNTER_NOTICE_STATEMENT_VERSION, COUNTER_NOTICE_STATEMENTS, ERASURE_REQUEST_DEADLINE_DAYS, OPEN_CONTENT_CLAIM_STATES, isErasureRequest, isRightsClaim, } from './contentClaims.js';