@oxy.so/contracts 4.22.0 → 4.24.0

package/dist/cjs/agency.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.CAPABILITY_PACKAGES = exports.autonomyLevelSchema = exports.AUTONOMY_LEVELS = void 0;
+exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentAvailabilitySchema = exports.applicationAgentSchema = exports.applicationAgentWriteSchema = exports.applicationAgentAvailabilitySchema = exports.APPLICATION_AGENT_AVAILABILITIES = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.CAPABILITY_PACKAGES = exports.autonomyLevelSchema = exports.AUTONOMY_LEVELS = void 0;
 const zod_1 = require("zod");
 const capabilityInvocation_1 = require("./capabilityInvocation");
 const nonEmptyStringSchema = zod_1.z.string().trim().min(1);
@@ -172,6 +172,38 @@ exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema
     updatedAt: zod_1.z.string().datetime(),
 })
     .strict();
+/**
+ * Where an application's own agent opens (ADR 0044): `anywhere`, or only in
+ * sessions that belong to that application (`own_application`). An agent with
+ * no application row is available anywhere.
+ */
+exports.APPLICATION_AGENT_AVAILABILITIES = ['anywhere', 'own_application'];
+exports.applicationAgentAvailabilitySchema = zod_1.z.enum(exports.APPLICATION_AGENT_AVAILABILITIES);
+/** What Oxy staff write for one of an application's agents. */
+exports.applicationAgentWriteSchema = zod_1.z
+    .object({ availability: exports.applicationAgentAvailabilitySchema })
+    .strict();
+/** One row of the application registry's agents: an agent is one application's. */
+exports.applicationAgentSchema = exports.applicationAgentWriteSchema
+    .extend({
+    applicationId: identifierSchema,
+    agentAccountId: identifierSchema,
+    createdByUserId: identifierSchema.nullable(),
+    createdAt: zod_1.z.string().datetime(),
+    updatedAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/**
+ * `GET /capabilities/agent-availability/:agentAccountId`: the sessions an agent
+ * is reachable from. `anywhere: false` lists the applications whose sessions
+ * (the session validation answer's `applicationId`) may reach it.
+ */
+exports.agentAvailabilitySchema = zod_1.z.discriminatedUnion('anywhere', [
+    zod_1.z.object({ anywhere: zod_1.z.literal(true) }).strict(),
+    zod_1.z
+        .object({ anywhere: zod_1.z.literal(false), applicationIds: zod_1.z.array(identifierSchema).min(1) })
+        .strict(),
+]);
 exports.automationTriggerSchema = zod_1.z.discriminatedUnion('type', [
     zod_1.z.object({ type: zod_1.z.literal('manual') }).strict(),
     zod_1.z

package/dist/cjs/appAssertions.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * App assertions (ADR 0045): how an Oxy app proves which app it is.
+ *
+ * ## The registry
+ *
+ * Each application may declare how it is recognised, written only by Oxy staff
+ * through the application administration lane
+ * (`PUT /applications/:appId/recognition`): its exact `https://` web origins,
+ * its Android package and signing certificates, and its iOS team and bundle.
+ * A platform it does not declare can never assert it.
+ *
+ * ## The exchange
+ *
+ * With the person's own bearer, the app asks `POST /apps/assertions` for an
+ * `OXY-APP+JWT` naming the application, and proves itself by platform: on the
+ * web the browser's `Origin`; on Android a Play Integrity token whose request
+ * hash is a challenge from `POST /apps/assertions/challenge`; on iOS an App
+ * Attest assertion over such a challenge, made with a key registered through
+ * `POST /apps/attest-keys`. The assertion lives five minutes and names the
+ * person (`sub`) and the session (`sid`) it was issued to.
+ *
+ * The Zod-free half (vocabularies, header name, response checks) is
+ * `./client/appAssertions.ts`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appAssertionResponseSchema = exports.appAssertionRequestSchema = exports.appAttestKeyResponseSchema = exports.appAttestKeyRequestSchema = exports.appAttestKeyIdSchema = exports.appAssertionChallengeResponseSchema = exports.appAssertionChallengeRequestSchema = exports.applicationRecognitionSchema = exports.applicationRecognitionWriteSchema = exports.applicationIosRecognitionSchema = exports.applicationAndroidRecognitionSchema = exports.appleBundleIdSchema = exports.appleTeamIdSchema = exports.signingCertSha256Schema = exports.androidPackageNameSchema = exports.applicationWebOriginSchema = exports.appAssertionErrorCodeSchema = exports.appAssertionPlatformSchema = exports.OXY_APP_ASSERTION_TYPE = exports.OXY_APP_ASSERTION_TTL_SECONDS = exports.OXY_APP_ASSERTION_HEADER = exports.OXY_APP_ASSERTION_AUDIENCE = exports.APP_ASSERTION_PLATFORMS = exports.APP_ASSERTION_ERROR_CODES = exports.APP_ASSERTION_CHALLENGE_PURPOSES = void 0;
+exports.isExactHttpsOrigin = isExactHttpsOrigin;
+const zod_1 = require("zod");
+const appAssertions_1 = require("./client/appAssertions");
+Object.defineProperty(exports, "APP_ASSERTION_CHALLENGE_PURPOSES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_CHALLENGE_PURPOSES; } });
+Object.defineProperty(exports, "APP_ASSERTION_ERROR_CODES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_ERROR_CODES; } });
+Object.defineProperty(exports, "APP_ASSERTION_PLATFORMS", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_PLATFORMS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_AUDIENCE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_AUDIENCE; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_HEADER", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_HEADER; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TTL_SECONDS", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TTL_SECONDS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TYPE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TYPE; } });
+const applicationIdSchema = zod_1.z.string().trim().min(1).max(255);
+const base64Url32Schema = zod_1.z.string().regex(/^[A-Za-z0-9_-]{43}$/);
+const base64Schema = (max) => zod_1.z
+    .string()
+    .min(4)
+    .max(max)
+    .regex(/^[A-Za-z0-9+/]+={0,2}$/);
+exports.appAssertionPlatformSchema = zod_1.z.enum(appAssertions_1.APP_ASSERTION_PLATFORMS);
+exports.appAssertionErrorCodeSchema = zod_1.z.enum(appAssertions_1.APP_ASSERTION_ERROR_CODES);
+// ---------------------------------------------------------------------------
+// Registry
+// ---------------------------------------------------------------------------
+/** True for an exact origin: `https:`, no path, query, fragment or credentials, in canonical form. */
+function isExactHttpsOrigin(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' && url.origin === value;
+    }
+    catch {
+        return false;
+    }
+}
+/** An exact `https://` origin, in the form a browser sends in `Origin` (`https://mention.earth`). */
+exports.applicationWebOriginSchema = zod_1.z
+    .string()
+    .max(255)
+    .refine(isExactHttpsOrigin, 'Must be an exact https origin, as a browser sends it');
+/** A Java-style Android application id, at least two segments. */
+exports.androidPackageNameSchema = zod_1.z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/, 'Must be an Android package name');
+/** A signing certificate's SHA-256, 64 lowercase hex characters (keytool's digest without colons). */
+exports.signingCertSha256Schema = zod_1.z
+    .string()
+    .regex(/^[0-9a-f]{64}$/, 'Must be 64 lowercase hex characters');
+/** An Apple Developer team id. */
+exports.appleTeamIdSchema = zod_1.z.string().regex(/^[A-Z0-9]{10}$/, 'Must be an Apple team id');
+/** An Apple bundle id. */
+exports.appleBundleIdSchema = zod_1.z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/, 'Must be an Apple bundle id');
+const unique = (values) => new Set(values).size === values.length;
+exports.applicationAndroidRecognitionSchema = zod_1.z
+    .object({
+    packageName: exports.androidPackageNameSchema,
+    signingCertSha256: zod_1.z
+        .array(exports.signingCertSha256Schema)
+        .min(1)
+        .max(10)
+        .refine(unique, 'Certificates must be unique'),
+})
+    .strict();
+exports.applicationIosRecognitionSchema = zod_1.z
+    .object({ teamId: exports.appleTeamIdSchema, bundleId: exports.appleBundleIdSchema })
+    .strict();
+/**
+ * What Oxy staff write for an application: the whole declaration, replaced at
+ * once. `null` and `[]` declare nothing for that platform.
+ */
+exports.applicationRecognitionWriteSchema = zod_1.z
+    .object({
+    webOrigins: zod_1.z
+        .array(exports.applicationWebOriginSchema)
+        .max(20)
+        .refine(unique, 'Origins must be unique'),
+    android: exports.applicationAndroidRecognitionSchema.nullable(),
+    ios: exports.applicationIosRecognitionSchema.nullable(),
+})
+    .strict();
+/** An application's recognition as the registry holds it; `updatedAt` is `null` when none was written. */
+exports.applicationRecognitionSchema = exports.applicationRecognitionWriteSchema
+    .extend({
+    applicationId: applicationIdSchema,
+    updatedAt: zod_1.z.string().datetime().nullable(),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// The exchange
+// ---------------------------------------------------------------------------
+/** `POST /apps/assertions/challenge`: a single-use challenge for a device proof. */
+exports.appAssertionChallengeRequestSchema = zod_1.z.discriminatedUnion('platform', [
+    zod_1.z.object({ applicationId: applicationIdSchema, platform: zod_1.z.literal('android') }).strict(),
+    zod_1.z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: zod_1.z.literal('ios'),
+        purpose: zod_1.z.enum(appAssertions_1.APP_ASSERTION_CHALLENGE_PURPOSES),
+    })
+        .strict(),
+]);
+/**
+ * The challenge, and `requestHash`: what the device signs or hands to Play
+ * Integrity, binding the challenge to this application, platform, purpose and
+ * session. `cloudProjectNumber` is the Google Cloud project Play Integrity
+ * tokens are requested for (Android only).
+ */
+exports.appAssertionChallengeResponseSchema = zod_1.z
+    .object({
+    challenge: base64Url32Schema,
+    requestHash: base64Url32Schema,
+    expiresAt: zod_1.z.string().datetime(),
+    cloudProjectNumber: zod_1.z
+        .string()
+        .regex(/^[0-9]{1,20}$/)
+        .optional(),
+})
+    .strict();
+/** An App Attest key id: the standard base64 of the SHA-256 of the key. */
+exports.appAttestKeyIdSchema = zod_1.z.string().regex(/^[A-Za-z0-9+/]{43}=$/);
+/** `POST /apps/attest-keys`: register an App Attest key, attested over a `attest_key` challenge. */
+exports.appAttestKeyRequestSchema = zod_1.z
+    .object({
+    applicationId: applicationIdSchema,
+    keyId: exports.appAttestKeyIdSchema,
+    challenge: base64Url32Schema,
+    attestation: base64Schema(32768),
+})
+    .strict();
+exports.appAttestKeyResponseSchema = zod_1.z.object({ keyId: exports.appAttestKeyIdSchema }).strict();
+/**
+ * `POST /apps/assertions`. The body names the application and the platform;
+ * the proof is the platform's: none on the web (the browser's `Origin` is), a
+ * Play Integrity token on Android, an App Attest assertion on iOS, each over a
+ * challenge minted for `assertion`.
+ */
+exports.appAssertionRequestSchema = zod_1.z.discriminatedUnion('platform', [
+    zod_1.z.object({ applicationId: applicationIdSchema, platform: zod_1.z.literal('web') }).strict(),
+    zod_1.z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: zod_1.z.literal('android'),
+        proof: zod_1.z
+            .object({
+            challenge: base64Url32Schema,
+            integrityToken: zod_1.z.string().min(1).max(16384),
+        })
+            .strict(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: zod_1.z.literal('ios'),
+        proof: zod_1.z
+            .object({
+            challenge: base64Url32Schema,
+            keyId: exports.appAttestKeyIdSchema,
+            assertion: base64Schema(4096),
+        })
+            .strict(),
+    })
+        .strict(),
+]);
+/** The assertion, and what it says. Send it as {@link OXY_APP_ASSERTION_HEADER}. */
+exports.appAssertionResponseSchema = zod_1.z
+    .object({
+    assertion: zod_1.z.string().regex(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/),
+    applicationId: zod_1.z.string().regex(/^\S{1,255}$/),
+    platform: exports.appAssertionPlatformSchema,
+    expiresAt: zod_1.z.string().datetime(),
+})
+    .strict();

package/dist/cjs/client/appAssertions.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * App assertions (ADR 0045), without Zod. Schemas: `../appAssertions.ts`.
+ *
+ * An Oxy app proves which app it is by trading platform evidence (the browser's
+ * `Origin`, a Play Integrity verdict, an App Attest assertion) for a short-lived
+ * `OXY-APP+JWT` signed by Oxy. A service that needs to know the app reads it
+ * from {@link OXY_APP_ASSERTION_HEADER} and verifies it against Oxy's JWKS
+ * (`verifyAppAssertion` in `@oxy.so/core/server`).
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appAssertionResponseCheck = exports.appAttestKeyResponseCheck = exports.appAssertionChallengeResponseCheck = exports.APP_ASSERTION_ERROR_CODES = exports.OXY_APP_ASSERTION_TTL_SECONDS = exports.OXY_APP_ASSERTION_HEADER = exports.OXY_APP_ASSERTION_AUDIENCE = exports.OXY_APP_ASSERTION_TYPE = exports.APP_ASSERTION_CHALLENGE_PURPOSES = exports.APP_ASSERTION_PLATFORMS = void 0;
+const check_1 = require("./check");
+/** How an app proves itself: the browser's origin, Play Integrity, or App Attest. */
+exports.APP_ASSERTION_PLATFORMS = ['web', 'android', 'ios'];
+/**
+ * What a device challenge is spent on: an assertion, or (iOS only) registering
+ * an App Attest key. A challenge minted for one is refused for the other.
+ */
+exports.APP_ASSERTION_CHALLENGE_PURPOSES = ['assertion', 'attest_key'];
+/** The JOSE `typ` of an app assertion. No other Oxy token carries it. */
+exports.OXY_APP_ASSERTION_TYPE = 'OXY-APP+JWT';
+/** The `aud` of every app assertion. */
+exports.OXY_APP_ASSERTION_AUDIENCE = 'oxy-apps';
+/** The request header an app (or an SDK acting for it) sends the assertion in. */
+exports.OXY_APP_ASSERTION_HEADER = 'X-Oxy-App-Assertion';
+/** Oxy signs an app assertion for exactly this long. */
+exports.OXY_APP_ASSERTION_TTL_SECONDS = 300;
+/**
+ * Why Oxy refused an app assertion, a challenge or an App Attest key. The API
+ * answers `{ error: <code>, message }`.
+ *
+ * - `application_unavailable`: no active application has that id.
+ * - `session_other_application`: the bearer's session belongs to another application.
+ * - `platform_not_registered`: the application declares no recognition for that platform.
+ * - `origin_not_registered`: the request's `Origin` is not one of the application's web origins.
+ * - `challenge_invalid`: the challenge is unknown, used, expired, or minted for something else.
+ * - `integrity_refused`: the Play Integrity verdict does not name this app, a registered
+ *   certificate, a Play-recognised install and this challenge.
+ * - `integrity_unconfigured` / `integrity_unavailable`: Oxy cannot ask Google (503).
+ * - `attest_key_unknown`: no App Attest key with that id is registered for the app; attest a new one.
+ * - `attest_key_exists`: that App Attest key is already registered.
+ * - `attestation_invalid`: the App Attest attestation does not verify.
+ * - `assertion_invalid`: the App Attest assertion does not verify, or its counter did not advance.
+ * - `signing_unavailable`: Oxy cannot sign (503).
+ */
+exports.APP_ASSERTION_ERROR_CODES = [
+    'application_unavailable',
+    'session_other_application',
+    'platform_not_registered',
+    'origin_not_registered',
+    'challenge_invalid',
+    'integrity_refused',
+    'integrity_unconfigured',
+    'integrity_unavailable',
+    'attest_key_unknown',
+    'attest_key_exists',
+    'attestation_invalid',
+    'assertion_invalid',
+    'signing_unavailable',
+];
+/** 32 random bytes, base64url: a challenge, or the SHA-256 it is bound into. */
+const BASE64URL_32 = /^[A-Za-z0-9_-]{43}$/;
+/** An App Attest key id: the standard base64 of a SHA-256. */
+const APP_ATTEST_KEY_ID = /^[A-Za-z0-9+/]{43}=$/;
+exports.appAssertionChallengeResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    challenge: (0, check_1.string)((0, check_1.pattern)(BASE64URL_32)),
+    requestHash: (0, check_1.string)((0, check_1.pattern)(BASE64URL_32)),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+    cloudProjectNumber: (0, check_1.optional)((0, check_1.string)((0, check_1.pattern)(/^[0-9]{1,20}$/))),
+}));
+exports.appAttestKeyResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({ keyId: (0, check_1.string)((0, check_1.pattern)(APP_ATTEST_KEY_ID)) }));
+exports.appAssertionResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    assertion: (0, check_1.string)((0, check_1.pattern)(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/)),
+    applicationId: (0, check_1.string)((0, check_1.pattern)(/^\S{1,255}$/)),
+    platform: (0, check_1.oneOf)(exports.APP_ASSERTION_PLATFORMS),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+}));

package/dist/cjs/client/index.js

@@ -17,9 +17,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deviceJoinCodeResponseCheck = exports.deviceBackgroundCredentialResponseCheck = exports.activeTokenCheck = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceDirectorySyncCheck = exports.deviceDirectoryCheck = exports.deviceActivateResponseCheck = exports.signedRecordEnvelopeCheck = exports.externalIdentityReferenceCheck = exports.loginResultCheck = exports.isLoopbackOrigin = exports.executeAgentKeyOperationCheck = exports.agentVerifyRequestCheck = exports.agentProofClaimsCheck = exports.agentKeyOperationResultCheck = exports.agentKeyOperationCheck = exports.agentKeyOperationChallengeCheck = exports.agentKeyListResponseCheck = exports.agentChallengeRequestCheck = exports.AGENT_PROOF_TTL_MS = exports.AGENT_PROOF_AUDIENCE = exports.AGENT_PROOF_ACTIONS = exports.ACCOUNT_AUTH_METHODS = exports.emailVerificationStartResponseCheck = exports.emailVerificationConfirmResponseCheck = exports.emailTicketCheck = exports.emailAddressCheck = exports.EMAIL_VERIFICATION_PURPOSES = exports.EMAIL_VERIFICATION_ERROR_CODES = exports.EMAIL_TICKET_TTL_MS = exports.EMAIL_CODE_TTL_MS = exports.EMAIL_CODE_MAX_ATTEMPTS = exports.EMAIL_CODE_LENGTH = exports.newlyAddedRetiredCategories = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.isAccountKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.RETIRED_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.CHILD_ACCOUNT_KINDS = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_KINDS = exports.ACCOUNT_CATEGORY_IDS = exports.parseContract = exports.formatCheckPath = exports.checkContract = exports.ContractCheckError = void 0;
-exports.subjectProductAccessCheck = exports.productSubscriptionsResponseCheck = exports.productSubscriptionCancellationResultCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.cancelProductSubscriptionCheck = exports.updateOrganizationCheck = exports.organizationNameCheck = exports.organizationListCheck = exports.organizationImportBatchResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationCurationResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimInputCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationCheck = exports.organizationBatchCheck = exports.createOrganizationCheck = exports.ORGANIZATION_TYPES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.canonicalJson = exports.buildIdentityProofMessage = exports.IDENTITY_PROOF_VERSION = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_ERROR_CODES = exports.parseIdentityLinkQrPayload = exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_STATUSES = exports.IDENTITY_LINK_QR_PREFIX = exports.sessionAccountsChangedEventCheck = exports.deviceTokenMintResponseCheck = exports.deviceSessionSyncCheck = exports.deviceSessionStateCheck = exports.deviceRegisterResponseCheck = exports.deviceJoinResponseCheck = void 0;
-exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.supervisionStateCheck = exports.supervisionReviewInputCheck = exports.supervisionInviteInputCheck = exports.supervisionInvitationCheck = exports.supervisionContactsResponseCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.SUPERVISION_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SUPERVISED_ACTIONS = exports.SAFETY_POLICY_VERSION = exports.PURCHASE_APPROVAL_STATUSES = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = void 0;
-exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = void 0;
+exports.productSubscriptionCancellationResultCheck = exports.productPlanCheckoutRequestCheck = exports.productPlanCatalogueCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.cancelProductSubscriptionCheck = exports.updateOrganizationCheck = exports.organizationNameCheck = exports.organizationListCheck = exports.organizationImportBatchResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationCurationResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimInputCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationCheck = exports.organizationBatchCheck = exports.createOrganizationCheck = exports.ORGANIZATION_TYPES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.canonicalJson = exports.buildIdentityProofMessage = exports.IDENTITY_PROOF_VERSION = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_ERROR_CODES = exports.parseIdentityLinkQrPayload = exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_STATUSES = exports.IDENTITY_LINK_QR_PREFIX = exports.sessionAccountsChangedEventCheck = exports.deviceTokenMintResponseCheck = exports.deviceSessionSyncCheck = exports.deviceSessionStateCheck = exports.deviceRegisterResponseCheck = exports.deviceJoinResponseCheck = void 0;
+exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.supervisionStateCheck = exports.supervisionReviewInputCheck = exports.supervisionInviteInputCheck = exports.supervisionInvitationCheck = exports.supervisionContactsResponseCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.SUPERVISION_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SUPERVISED_ACTIONS = exports.SAFETY_POLICY_VERSION = exports.PURCHASE_APPROVAL_STATUSES = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = exports.subjectProductAccessCheck = exports.productSubscriptionsResponseCheck = exports.productSubscriptionRenewalRequestCheck = void 0;
+exports.appAttestKeyResponseCheck = exports.appAssertionResponseCheck = exports.appAssertionChallengeResponseCheck = exports.OXY_APP_ASSERTION_TYPE = exports.OXY_APP_ASSERTION_TTL_SECONDS = exports.OXY_APP_ASSERTION_HEADER = exports.OXY_APP_ASSERTION_AUDIENCE = exports.APP_ASSERTION_PLATFORMS = exports.APP_ASSERTION_ERROR_CODES = exports.APP_ASSERTION_CHALLENGE_PURPOSES = exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = void 0;
 var check_1 = require("./check");
 Object.defineProperty(exports, "ContractCheckError", { enumerable: true, get: function () { return check_1.ContractCheckError; } });
 Object.defineProperty(exports, "checkContract", { enumerable: true, get: function () { return check_1.checkContract; } });
@@ -131,7 +131,10 @@ Object.defineProperty(exports, "cancelProductSubscriptionCheck", { enumerable: t
 Object.defineProperty(exports, "personalPlanCatalogueCheck", { enumerable: true, get: function () { return products_1.personalPlanCatalogueCheck; } });
 Object.defineProperty(exports, "personalPlanCheckoutRequestCheck", { enumerable: true, get: function () { return products_1.personalPlanCheckoutRequestCheck; } });
 Object.defineProperty(exports, "personalPlanCheckoutResultCheck", { enumerable: true, get: function () { return products_1.personalPlanCheckoutResultCheck; } });
+Object.defineProperty(exports, "productPlanCatalogueCheck", { enumerable: true, get: function () { return products_1.productPlanCatalogueCheck; } });
+Object.defineProperty(exports, "productPlanCheckoutRequestCheck", { enumerable: true, get: function () { return products_1.productPlanCheckoutRequestCheck; } });
 Object.defineProperty(exports, "productSubscriptionCancellationResultCheck", { enumerable: true, get: function () { return products_1.productSubscriptionCancellationResultCheck; } });
+Object.defineProperty(exports, "productSubscriptionRenewalRequestCheck", { enumerable: true, get: function () { return products_1.productSubscriptionRenewalRequestCheck; } });
 Object.defineProperty(exports, "productSubscriptionsResponseCheck", { enumerable: true, get: function () { return products_1.productSubscriptionsResponseCheck; } });
 Object.defineProperty(exports, "subjectProductAccessCheck", { enumerable: true, get: function () { return products_1.subjectProductAccessCheck; } });
 Object.defineProperty(exports, "subjectProductAccessQueryCheck", { enumerable: true, get: function () { return products_1.subjectProductAccessQueryCheck; } });
@@ -224,3 +227,14 @@ Object.defineProperty(exports, "ERASURE_REQUEST_DEADLINE_DAYS", { enumerable: tr
 Object.defineProperty(exports, "OPEN_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.OPEN_CONTENT_CLAIM_STATES; } });
 Object.defineProperty(exports, "isErasureRequest", { enumerable: true, get: function () { return contentClaims_1.isErasureRequest; } });
 Object.defineProperty(exports, "isRightsClaim", { enumerable: true, get: function () { return contentClaims_1.isRightsClaim; } });
+var appAssertions_1 = require("./appAssertions");
+Object.defineProperty(exports, "APP_ASSERTION_CHALLENGE_PURPOSES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_CHALLENGE_PURPOSES; } });
+Object.defineProperty(exports, "APP_ASSERTION_ERROR_CODES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_ERROR_CODES; } });
+Object.defineProperty(exports, "APP_ASSERTION_PLATFORMS", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_PLATFORMS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_AUDIENCE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_AUDIENCE; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_HEADER", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_HEADER; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TTL_SECONDS", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TTL_SECONDS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TYPE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TYPE; } });
+Object.defineProperty(exports, "appAssertionChallengeResponseCheck", { enumerable: true, get: function () { return appAssertions_1.appAssertionChallengeResponseCheck; } });
+Object.defineProperty(exports, "appAssertionResponseCheck", { enumerable: true, get: function () { return appAssertions_1.appAssertionResponseCheck; } });
+Object.defineProperty(exports, "appAttestKeyResponseCheck", { enumerable: true, get: function () { return appAssertions_1.appAttestKeyResponseCheck; } });

package/dist/cjs/client/products.js

@@ -6,7 +6,7 @@
  * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.productSubscriptionCancellationResultCheck = exports.cancelProductSubscriptionCheck = exports.subscriptionCreditGrantsResponseCheck = exports.productSubscriptionsResponseCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.subjectProductAccessCheck = exports.subjectProductAccessQueryCheck = void 0;
+exports.productSubscriptionCancellationResultCheck = exports.cancelProductSubscriptionCheck = exports.subscriptionCreditGrantsResponseCheck = exports.productSubscriptionsResponseCheck = exports.personalPlanCheckoutResultCheck = exports.productSubscriptionRenewalRequestCheck = exports.productPlanCheckoutRequestCheck = exports.personalPlanCheckoutRequestCheck = exports.productPlanCatalogueCheck = exports.personalPlanCatalogueCheck = exports.subjectProductAccessCheck = exports.subjectProductAccessQueryCheck = void 0;
 const check_1 = require("./check");
 const identifier = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(160));
 const displayName = (0, check_1.string)((0, check_1.minLength)(1), (0, check_1.maxLength)(100));
@@ -16,6 +16,15 @@ const oxyAccountId = (0, check_1.branded)((0, check_1.string)((0, check_1.minLen
 const actionKey = (0, check_1.string)((0, check_1.minLength)(8), (0, check_1.maxLength)(160), (0, check_1.pattern)(/^[a-zA-Z0-9_-]+$/));
 const combination = (0, check_1.oneOf)(['maximum', 'sum', 'exclusive']);
 const origin = (0, check_1.oneOf)(['individual', 'bundle']);
+const purchase = (0, check_1.oneOf)(['unavailable', 'available']);
+const displayPrice = (interval) => (0, check_1.strictObject)({
+    currency: (0, check_1.string)((0, check_1.pattern)(/^[A-Z]{3}$/)),
+    amountMinorUnits: version,
+    interval,
+    trial: (0, check_1.literal)('none'),
+    taxTreatment: (0, check_1.literal)('inclusive'),
+    merchantTotal: (0, check_1.literal)('final'),
+});
 const period = (message) => (0, check_1.refine)((0, check_1.strictObject)({ start: (0, check_1.string)(check_1.datetime), end: (0, check_1.string)(check_1.datetime) }), (value) => Date.parse(value.end) > Date.parse(value.start), message);
 const productBenefit = (0, check_1.discriminatedUnion)('kind', {
     capability: (0, check_1.strictObject)({ kind: (0, check_1.literal)('capability'), productId: identifier, key: identifier }),
@@ -60,29 +69,41 @@ exports.subjectProductAccessCheck = (0, check_1.exact)()((0, check_1.strictObjec
 exports.personalPlanCatalogueCheck = (0, check_1.exact)()((0, check_1.refine)((0, check_1.strictObject)({
     schemaVersion: (0, check_1.literal)(1),
     state: (0, check_1.oneOf)(['unconfigured', 'configured']),
-    purchase: (0, check_1.literal)('unavailable'),
+    purchase,
     plans: (0, check_1.array)((0, check_1.strictObject)({
         offerId: identifier,
         offerVersion: version,
         displayName,
         audience: (0, check_1.literal)('personal'),
         kind: (0, check_1.literal)('oxy_one'),
-        price: (0, check_1.optional)((0, check_1.strictObject)({
-            currency: (0, check_1.string)((0, check_1.pattern)(/^[A-Z]{3}$/)),
-            amountMinorUnits: version,
-            interval: (0, check_1.literal)('month'),
-            trial: (0, check_1.literal)('none'),
-            taxTreatment: (0, check_1.literal)('inclusive'),
-            merchantTotal: (0, check_1.literal)('final'),
-        })),
+        price: (0, check_1.optional)(displayPrice((0, check_1.literal)('month'))),
         benefits: (0, check_1.array)((0, check_1.strictObject)({ displayName, benefit: productBenefit })),
     })),
 }), (value) => (value.state === 'unconfigured') === (value.plans.length === 0), 'Catalogue state must match published plans'));
-exports.personalPlanCheckoutRequestCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+exports.productPlanCatalogueCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    schemaVersion: (0, check_1.literal)(1),
+    productId: identifier,
+    purchase,
+    plans: (0, check_1.array)((0, check_1.strictObject)({
+        productId: identifier,
+        offerId: identifier,
+        offerVersion: version,
+        displayName,
+        price: displayPrice((0, check_1.oneOf)(['month', 'year'])),
+    })),
+}));
+const checkoutRequestShape = {
     expectedSubjectAccountId: oxyAccountId,
     offerId: identifier,
     offerVersion: version,
     idempotencyKey: actionKey,
+};
+exports.personalPlanCheckoutRequestCheck = (0, check_1.exact)()((0, check_1.strictObject)(checkoutRequestShape));
+exports.productPlanCheckoutRequestCheck = (0, check_1.exact)()((0, check_1.strictObject)({ ...checkoutRequestShape, productId: identifier }));
+exports.productSubscriptionRenewalRequestCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    expectedSubjectAccountId: oxyAccountId,
+    sourceId: identifier,
+    idempotencyKey: actionKey,
 }));
 exports.personalPlanCheckoutResultCheck = (0, check_1.exact)()((0, check_1.discriminatedUnion)('state', {
     unconfigured: (0, check_1.strictObject)({
@@ -114,6 +135,7 @@ exports.productSubscriptionsResponseCheck = (0, check_1.exact)()((0, check_1.str
         period: billingPeriod,
         cancelAtPeriodEnd: check_1.boolean,
         canCancel: check_1.boolean,
+        canRenew: (0, check_1.optional)(check_1.boolean),
         offers: (0, check_1.array)((0, check_1.strictObject)({
             segmentId: identifier,
             offerId: identifier,

package/dist/cjs/index.js

@@ -37,9 +37,9 @@ exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.i
 exports.realtimeItemTruncateCommandSchema = exports.realtimeItemDeleteCommandSchema = exports.realtimeItemCreateCommandSchema = exports.realtimeSessionUpdateCommandSchema = exports.realtimeResponseParametersSchema = exports.realtimeConversationItemSchema = exports.realtimeContentPartSchema = exports.realtimeSessionRequestSchema = exports.realtimeClientMetadataSchema = exports.realtimeSessionLimitsSchema = exports.realtimeSessionConfigUpdateSchema = exports.realtimeSessionConfigSchema = exports.realtimeTranslationSchema = exports.realtimeInputTranscriptionSchema = exports.realtimeTurnDetectionSchema = exports.realtimeOutputModalitySchema = exports.realtimeAudioFormatSchema = exports.realtimeResponseIdSchema = exports.realtimeItemIdSchema = exports.realtimeCommandIdSchema = exports.MAX_REALTIME_RESUME_WINDOW_MS = exports.MAX_REALTIME_SESSION_AUDIO_BYTES = exports.MAX_REALTIME_SESSION_DURATION_MS = exports.MAX_REALTIME_AUDIO_FRAME_BASE64_LENGTH = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamAudioEventSchema = exports.MAX_INFERENCE_AUDIO_BYTES = exports.inferenceAudioMediaTypeSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.inferenceReasoningSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = void 0;
 exports.kaanaCredentialRotateMutationSchema = exports.kaanaCredentialCreateMutationSchema = exports.kaanaCredentialIdentitySchema = exports.kaanaCredentialOperationActionSchema = exports.kaanaCredentialOperationIdSchema = exports.kaanaCredentialHandleSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.realtimeServerEventSchema = exports.realtimeSessionClosedEventSchema = exports.realtimeSessionCloseReasonSchema = exports.realtimeErrorEventSchema = exports.realtimeResponseDoneEventSchema = exports.realtimeResponseStatusSchema = exports.realtimeToolCallEventSchema = exports.realtimeTextDeltaEventSchema = exports.realtimeTranscriptDoneEventSchema = exports.realtimeTranscriptDeltaEventSchema = exports.realtimeTranscriptSourceSchema = exports.realtimeOutputAudioDoneEventSchema = exports.realtimeOutputAudioDeltaEventSchema = exports.realtimeResponseCreatedEventSchema = exports.realtimeInputAudioClearedEventSchema = exports.realtimeInputAudioCommittedEventSchema = exports.realtimeSpeechStoppedEventSchema = exports.realtimeSpeechStartedEventSchema = exports.realtimeItemTruncatedEventSchema = exports.realtimeItemDeletedEventSchema = exports.realtimeItemDoneEventSchema = exports.realtimeItemAddedEventSchema = exports.realtimeCommandAcceptedEventSchema = exports.realtimeSessionResumedEventSchema = exports.realtimeSessionUpdatedEventSchema = exports.realtimeSessionCreatedEventSchema = exports.realtimeClientCommandSchema = exports.realtimeSessionCloseCommandSchema = exports.realtimeSessionResumeCommandSchema = exports.realtimeResponseCancelCommandSchema = exports.realtimeResponseCreateCommandSchema = exports.realtimeInputAudioClearCommandSchema = exports.realtimeInputAudioCommitCommandSchema = exports.realtimeInputAudioAppendCommandSchema = void 0;
 exports.payAsYouGoEntitlementSchema = exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerCredentialCustodyStateSchema = exports.providerCredentialValidationDeploymentSchema = exports.providerCredentialValidationOperationSchema = exports.kaanaCredentialValidationOutcomeSchema = exports.kaanaCredentialValidationFailureCodeSchema = exports.kaanaCredentialValidationOutcomeStateSchema = exports.kaanaCredentialValidationTaskSchema = exports.kaanaCredentialOutcomeSchema = exports.kaanaCredentialConflictOutcomeSchema = exports.kaanaCredentialAppliedOutcomeSchema = exports.kaanaCredentialOutcomeRequestSchema = exports.kaanaCredentialRevokeOutcomeRequestSchema = exports.kaanaCredentialRotateOutcomeRequestSchema = exports.kaanaCredentialCreateOutcomeRequestSchema = exports.kaanaCredentialMutationSchema = exports.kaanaCredentialRevokeMutationSchema = void 0;
-exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
-exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = void 0;
-exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = void 0;
+exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentAvailabilitySchema = exports.applicationAgentSchema = exports.applicationAgentWriteSchema = exports.applicationAgentAvailabilitySchema = exports.APPLICATION_AGENT_AVAILABILITIES = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
+exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = void 0;
+exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.productPlanCatalogueSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -785,6 +785,11 @@ Object.defineProperty(exports, "delegationGrantSchema", { enumerable: true, get:
 Object.defineProperty(exports, "AGENT_REQUESTER_CEILING_AUTONOMY", { enumerable: true, get: function () { return agency_1.AGENT_REQUESTER_CEILING_AUTONOMY; } });
 Object.defineProperty(exports, "agentRequesterCeilingWriteSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingWriteSchema; } });
 Object.defineProperty(exports, "agentRequesterCeilingSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingSchema; } });
+Object.defineProperty(exports, "APPLICATION_AGENT_AVAILABILITIES", { enumerable: true, get: function () { return agency_1.APPLICATION_AGENT_AVAILABILITIES; } });
+Object.defineProperty(exports, "applicationAgentAvailabilitySchema", { enumerable: true, get: function () { return agency_1.applicationAgentAvailabilitySchema; } });
+Object.defineProperty(exports, "applicationAgentWriteSchema", { enumerable: true, get: function () { return agency_1.applicationAgentWriteSchema; } });
+Object.defineProperty(exports, "applicationAgentSchema", { enumerable: true, get: function () { return agency_1.applicationAgentSchema; } });
+Object.defineProperty(exports, "agentAvailabilitySchema", { enumerable: true, get: function () { return agency_1.agentAvailabilitySchema; } });
 Object.defineProperty(exports, "automationTriggerSchema", { enumerable: true, get: function () { return agency_1.automationTriggerSchema; } });
 Object.defineProperty(exports, "automationActorSelectionSchema", { enumerable: true, get: function () { return agency_1.automationActorSelectionSchema; } });
 Object.defineProperty(exports, "automationDataFlowSchema", { enumerable: true, get: function () { return agency_1.automationDataFlowSchema; } });
@@ -892,6 +897,7 @@ Object.defineProperty(exports, "productSubscriptionCancellationResultSchema", {
 var plans_1 = require("./products/plans");
 Object.defineProperty(exports, "personalPlanDisplayPriceSchema", { enumerable: true, get: function () { return plans_1.personalPlanDisplayPriceSchema; } });
 Object.defineProperty(exports, "personalPlanCatalogueSchema", { enumerable: true, get: function () { return plans_1.personalPlanCatalogueSchema; } });
+Object.defineProperty(exports, "productPlanCatalogueSchema", { enumerable: true, get: function () { return plans_1.productPlanCatalogueSchema; } });
 __exportStar(require("./products/checkout"), exports);
 __exportStar(require("./organizations"), exports);
 __exportStar(require("./safety"), exports);
@@ -900,3 +906,4 @@ Object.defineProperty(exports, "serviceTokenScopesSchema", { enumerable: true, g
 Object.defineProperty(exports, "serviceTokenOptionsSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenOptionsSchema; } });
 __exportStar(require("./applicationRoles"), exports);
 __exportStar(require("./contentClaims"), exports);
+__exportStar(require("./appAssertions"), exports);

package/dist/cjs/products/billing.js

@@ -27,6 +27,7 @@ exports.productSubscriptionSummarySchema = zod_1.z
     period,
     cancelAtPeriodEnd: zod_1.z.boolean(),
     canCancel: zod_1.z.boolean(),
+    canRenew: zod_1.z.boolean().optional(),
     offers: zod_1.z.array(zod_1.z
         .object({
         segmentId: id,

package/dist/cjs/products/checkout.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.personalPlanCheckoutResultSchema = exports.personalPlanCheckoutRequestSchema = void 0;
+exports.productSubscriptionRenewalRequestSchema = exports.productPlanCheckoutRequestSchema = exports.personalPlanCheckoutResultSchema = exports.personalPlanCheckoutRequestSchema = void 0;
 const zod_1 = require("zod");
 const identifiers_1 = require("../inference/identifiers");
 exports.personalPlanCheckoutRequestSchema = zod_1.z
@@ -33,3 +33,16 @@ exports.personalPlanCheckoutResultSchema = zod_1.z.discriminatedUnion('state', [
     zod_1.z.object({ state: zod_1.z.literal('closed'), intentId: zod_1.z.string().min(1).max(160) }).strict(),
     zod_1.z.object({ state: zod_1.z.literal('fulfilled'), intentId: zod_1.z.string().min(1).max(160) }).strict(),
 ]);
+/** Explicit individual product offer; still owned and paid through Oxy. */
+exports.productPlanCheckoutRequestSchema = exports.personalPlanCheckoutRequestSchema
+    .extend({
+    productId: zod_1.z.string().min(1).max(160),
+})
+    .strict();
+exports.productSubscriptionRenewalRequestSchema = zod_1.z
+    .object({
+    expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema,
+    sourceId: zod_1.z.string().min(1).max(160),
+    idempotencyKey: exports.personalPlanCheckoutRequestSchema.shape.idempotencyKey,
+})
+    .strict();

package/dist/cjs/products/plans.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = void 0;
+exports.productPlanCatalogueSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = void 0;
 const zod_1 = require("zod");
 const access_1 = require("./access");
 /** Approved display terms never identify or activate a billing-provider price. */
@@ -19,7 +19,7 @@ exports.personalPlanCatalogueSchema = zod_1.z
     .object({
     schemaVersion: zod_1.z.literal(1),
     state: zod_1.z.enum(['unconfigured', 'configured']),
-    purchase: zod_1.z.literal('unavailable'),
+    purchase: zod_1.z.enum(['unavailable', 'available']),
     plans: zod_1.z.array(zod_1.z
         .object({
         offerId: zod_1.z.string().min(1).max(160),
@@ -36,3 +36,19 @@ exports.personalPlanCatalogueSchema = zod_1.z
 })
     .strict()
     .refine((value) => (value.state === 'unconfigured') === (value.plans.length === 0), 'Catalogue state must match published plans');
+exports.productPlanCatalogueSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    productId: zod_1.z.string().min(1).max(160),
+    purchase: zod_1.z.enum(['unavailable', 'available']),
+    plans: zod_1.z.array(zod_1.z
+        .object({
+        productId: zod_1.z.string().min(1).max(160),
+        offerId: zod_1.z.string().min(1).max(160),
+        offerVersion: zod_1.z.number().int().positive().safe(),
+        displayName: zod_1.z.string().min(1).max(100),
+        price: exports.personalPlanDisplayPriceSchema.extend({ interval: zod_1.z.enum(['month', 'year']) }),
+    })
+        .strict()),
+})
+    .strict();