@oxy.so/contracts 4.23.0 → 4.25.0

package/dist/cjs/agency.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.CAPABILITY_PACKAGES = exports.autonomyLevelSchema = exports.AUTONOMY_LEVELS = void 0;
+exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentAvailabilitySchema = exports.applicationAgentSchema = exports.applicationAgentWriteSchema = exports.applicationAgentAvailabilitySchema = exports.APPLICATION_AGENT_AVAILABILITIES = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.CAPABILITY_PACKAGES = exports.autonomyLevelSchema = exports.AUTONOMY_LEVELS = void 0;
 const zod_1 = require("zod");
 const capabilityInvocation_1 = require("./capabilityInvocation");
 const nonEmptyStringSchema = zod_1.z.string().trim().min(1);
@@ -172,6 +172,38 @@ exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema
     updatedAt: zod_1.z.string().datetime(),
 })
     .strict();
+/**
+ * Where an application's own agent opens (ADR 0044): `anywhere`, or only in
+ * sessions that belong to that application (`own_application`). An agent with
+ * no application row is available anywhere.
+ */
+exports.APPLICATION_AGENT_AVAILABILITIES = ['anywhere', 'own_application'];
+exports.applicationAgentAvailabilitySchema = zod_1.z.enum(exports.APPLICATION_AGENT_AVAILABILITIES);
+/** What Oxy staff write for one of an application's agents. */
+exports.applicationAgentWriteSchema = zod_1.z
+    .object({ availability: exports.applicationAgentAvailabilitySchema })
+    .strict();
+/** One row of the application registry's agents: an agent is one application's. */
+exports.applicationAgentSchema = exports.applicationAgentWriteSchema
+    .extend({
+    applicationId: identifierSchema,
+    agentAccountId: identifierSchema,
+    createdByUserId: identifierSchema.nullable(),
+    createdAt: zod_1.z.string().datetime(),
+    updatedAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/**
+ * `GET /capabilities/agent-availability/:agentAccountId`: the sessions an agent
+ * is reachable from. `anywhere: false` lists the applications whose sessions
+ * (the session validation answer's `applicationId`) may reach it.
+ */
+exports.agentAvailabilitySchema = zod_1.z.discriminatedUnion('anywhere', [
+    zod_1.z.object({ anywhere: zod_1.z.literal(true) }).strict(),
+    zod_1.z
+        .object({ anywhere: zod_1.z.literal(false), applicationIds: zod_1.z.array(identifierSchema).min(1) })
+        .strict(),
+]);
 exports.automationTriggerSchema = zod_1.z.discriminatedUnion('type', [
     zod_1.z.object({ type: zod_1.z.literal('manual') }).strict(),
     zod_1.z

package/dist/cjs/appAssertions.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * App assertions (ADR 0045): how an Oxy app proves which app it is.
+ *
+ * ## The registry
+ *
+ * Each application may declare how it is recognised, written only by Oxy staff
+ * through the application administration lane
+ * (`PUT /applications/:appId/recognition`): its exact `https://` web origins,
+ * its Android package and signing certificates, and its iOS team and bundle.
+ * A platform it does not declare can never assert it.
+ *
+ * ## The exchange
+ *
+ * With the person's own bearer, the app asks `POST /apps/assertions` for an
+ * `OXY-APP+JWT` naming the application, and proves itself by platform: on the
+ * web the browser's `Origin`; on Android a Play Integrity token whose request
+ * hash is a challenge from `POST /apps/assertions/challenge`; on iOS an App
+ * Attest assertion over such a challenge, made with a key registered through
+ * `POST /apps/attest-keys`. The assertion lives five minutes and names the
+ * person (`sub`) and the session (`sid`) it was issued to.
+ *
+ * The Zod-free half (vocabularies, header name, response checks) is
+ * `./client/appAssertions.ts`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appAssertionResponseSchema = exports.appAssertionRequestSchema = exports.appAttestKeyResponseSchema = exports.appAttestKeyRequestSchema = exports.appAttestKeyIdSchema = exports.appAssertionChallengeResponseSchema = exports.appAssertionChallengeRequestSchema = exports.applicationRecognitionSchema = exports.applicationRecognitionWriteSchema = exports.applicationIosRecognitionSchema = exports.applicationAndroidRecognitionSchema = exports.appleBundleIdSchema = exports.appleTeamIdSchema = exports.signingCertSha256Schema = exports.androidPackageNameSchema = exports.applicationWebOriginSchema = exports.appAssertionErrorCodeSchema = exports.appAssertionPlatformSchema = exports.OXY_APP_ASSERTION_TYPE = exports.OXY_APP_ASSERTION_TTL_SECONDS = exports.OXY_APP_ASSERTION_HEADER = exports.OXY_APP_ASSERTION_AUDIENCE = exports.APP_ASSERTION_PLATFORMS = exports.APP_ASSERTION_ERROR_CODES = exports.APP_ASSERTION_CHALLENGE_PURPOSES = void 0;
+exports.isExactHttpsOrigin = isExactHttpsOrigin;
+const zod_1 = require("zod");
+const appAssertions_1 = require("./client/appAssertions");
+Object.defineProperty(exports, "APP_ASSERTION_CHALLENGE_PURPOSES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_CHALLENGE_PURPOSES; } });
+Object.defineProperty(exports, "APP_ASSERTION_ERROR_CODES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_ERROR_CODES; } });
+Object.defineProperty(exports, "APP_ASSERTION_PLATFORMS", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_PLATFORMS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_AUDIENCE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_AUDIENCE; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_HEADER", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_HEADER; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TTL_SECONDS", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TTL_SECONDS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TYPE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TYPE; } });
+const applicationIdSchema = zod_1.z.string().trim().min(1).max(255);
+const base64Url32Schema = zod_1.z.string().regex(/^[A-Za-z0-9_-]{43}$/);
+const base64Schema = (max) => zod_1.z
+    .string()
+    .min(4)
+    .max(max)
+    .regex(/^[A-Za-z0-9+/]+={0,2}$/);
+exports.appAssertionPlatformSchema = zod_1.z.enum(appAssertions_1.APP_ASSERTION_PLATFORMS);
+exports.appAssertionErrorCodeSchema = zod_1.z.enum(appAssertions_1.APP_ASSERTION_ERROR_CODES);
+// ---------------------------------------------------------------------------
+// Registry
+// ---------------------------------------------------------------------------
+/** True for an exact origin: `https:`, no path, query, fragment or credentials, in canonical form. */
+function isExactHttpsOrigin(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' && url.origin === value;
+    }
+    catch {
+        return false;
+    }
+}
+/** An exact `https://` origin, in the form a browser sends in `Origin` (`https://mention.earth`). */
+exports.applicationWebOriginSchema = zod_1.z
+    .string()
+    .max(255)
+    .refine(isExactHttpsOrigin, 'Must be an exact https origin, as a browser sends it');
+/** A Java-style Android application id, at least two segments. */
+exports.androidPackageNameSchema = zod_1.z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/, 'Must be an Android package name');
+/** A signing certificate's SHA-256, 64 lowercase hex characters (keytool's digest without colons). */
+exports.signingCertSha256Schema = zod_1.z
+    .string()
+    .regex(/^[0-9a-f]{64}$/, 'Must be 64 lowercase hex characters');
+/** An Apple Developer team id. */
+exports.appleTeamIdSchema = zod_1.z.string().regex(/^[A-Z0-9]{10}$/, 'Must be an Apple team id');
+/** An Apple bundle id. */
+exports.appleBundleIdSchema = zod_1.z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/, 'Must be an Apple bundle id');
+const unique = (values) => new Set(values).size === values.length;
+exports.applicationAndroidRecognitionSchema = zod_1.z
+    .object({
+    packageName: exports.androidPackageNameSchema,
+    signingCertSha256: zod_1.z
+        .array(exports.signingCertSha256Schema)
+        .min(1)
+        .max(10)
+        .refine(unique, 'Certificates must be unique'),
+})
+    .strict();
+exports.applicationIosRecognitionSchema = zod_1.z
+    .object({ teamId: exports.appleTeamIdSchema, bundleId: exports.appleBundleIdSchema })
+    .strict();
+/**
+ * What Oxy staff write for an application: the whole declaration, replaced at
+ * once. `null` and `[]` declare nothing for that platform.
+ */
+exports.applicationRecognitionWriteSchema = zod_1.z
+    .object({
+    webOrigins: zod_1.z
+        .array(exports.applicationWebOriginSchema)
+        .max(20)
+        .refine(unique, 'Origins must be unique'),
+    android: exports.applicationAndroidRecognitionSchema.nullable(),
+    ios: exports.applicationIosRecognitionSchema.nullable(),
+})
+    .strict();
+/** An application's recognition as the registry holds it; `updatedAt` is `null` when none was written. */
+exports.applicationRecognitionSchema = exports.applicationRecognitionWriteSchema
+    .extend({
+    applicationId: applicationIdSchema,
+    updatedAt: zod_1.z.string().datetime().nullable(),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// The exchange
+// ---------------------------------------------------------------------------
+/** `POST /apps/assertions/challenge`: a single-use challenge for a device proof. */
+exports.appAssertionChallengeRequestSchema = zod_1.z.discriminatedUnion('platform', [
+    zod_1.z.object({ applicationId: applicationIdSchema, platform: zod_1.z.literal('android') }).strict(),
+    zod_1.z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: zod_1.z.literal('ios'),
+        purpose: zod_1.z.enum(appAssertions_1.APP_ASSERTION_CHALLENGE_PURPOSES),
+    })
+        .strict(),
+]);
+/**
+ * The challenge, and `requestHash`: what the device signs or hands to Play
+ * Integrity, binding the challenge to this application, platform, purpose and
+ * session. `cloudProjectNumber` is the Google Cloud project Play Integrity
+ * tokens are requested for (Android only).
+ */
+exports.appAssertionChallengeResponseSchema = zod_1.z
+    .object({
+    challenge: base64Url32Schema,
+    requestHash: base64Url32Schema,
+    expiresAt: zod_1.z.string().datetime(),
+    cloudProjectNumber: zod_1.z
+        .string()
+        .regex(/^[0-9]{1,20}$/)
+        .optional(),
+})
+    .strict();
+/** An App Attest key id: the standard base64 of the SHA-256 of the key. */
+exports.appAttestKeyIdSchema = zod_1.z.string().regex(/^[A-Za-z0-9+/]{43}=$/);
+/** `POST /apps/attest-keys`: register an App Attest key, attested over a `attest_key` challenge. */
+exports.appAttestKeyRequestSchema = zod_1.z
+    .object({
+    applicationId: applicationIdSchema,
+    keyId: exports.appAttestKeyIdSchema,
+    challenge: base64Url32Schema,
+    attestation: base64Schema(32768),
+})
+    .strict();
+exports.appAttestKeyResponseSchema = zod_1.z.object({ keyId: exports.appAttestKeyIdSchema }).strict();
+/**
+ * `POST /apps/assertions`. The body names the application and the platform;
+ * the proof is the platform's: none on the web (the browser's `Origin` is), a
+ * Play Integrity token on Android, an App Attest assertion on iOS, each over a
+ * challenge minted for `assertion`.
+ */
+exports.appAssertionRequestSchema = zod_1.z.discriminatedUnion('platform', [
+    zod_1.z.object({ applicationId: applicationIdSchema, platform: zod_1.z.literal('web') }).strict(),
+    zod_1.z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: zod_1.z.literal('android'),
+        proof: zod_1.z
+            .object({
+            challenge: base64Url32Schema,
+            integrityToken: zod_1.z.string().min(1).max(16384),
+        })
+            .strict(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: zod_1.z.literal('ios'),
+        proof: zod_1.z
+            .object({
+            challenge: base64Url32Schema,
+            keyId: exports.appAttestKeyIdSchema,
+            assertion: base64Schema(4096),
+        })
+            .strict(),
+    })
+        .strict(),
+]);
+/** The assertion, and what it says. Send it as {@link OXY_APP_ASSERTION_HEADER}. */
+exports.appAssertionResponseSchema = zod_1.z
+    .object({
+    assertion: zod_1.z.string().regex(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/),
+    applicationId: zod_1.z.string().regex(/^\S{1,255}$/),
+    platform: exports.appAssertionPlatformSchema,
+    expiresAt: zod_1.z.string().datetime(),
+})
+    .strict();

package/dist/cjs/client/appAssertions.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * App assertions (ADR 0045), without Zod. Schemas: `../appAssertions.ts`.
+ *
+ * An Oxy app proves which app it is by trading platform evidence (the browser's
+ * `Origin`, a Play Integrity verdict, an App Attest assertion) for a short-lived
+ * `OXY-APP+JWT` signed by Oxy. A service that needs to know the app reads it
+ * from {@link OXY_APP_ASSERTION_HEADER} and verifies it against Oxy's JWKS
+ * (`verifyAppAssertion` in `@oxy.so/core/server`).
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appAssertionResponseCheck = exports.appAttestKeyResponseCheck = exports.appAssertionChallengeResponseCheck = exports.APP_ASSERTION_ERROR_CODES = exports.OXY_APP_ASSERTION_TTL_SECONDS = exports.OXY_APP_ASSERTION_HEADER = exports.OXY_APP_ASSERTION_AUDIENCE = exports.OXY_APP_ASSERTION_TYPE = exports.APP_ASSERTION_CHALLENGE_PURPOSES = exports.APP_ASSERTION_PLATFORMS = void 0;
+const check_1 = require("./check");
+/** How an app proves itself: the browser's origin, Play Integrity, or App Attest. */
+exports.APP_ASSERTION_PLATFORMS = ['web', 'android', 'ios'];
+/**
+ * What a device challenge is spent on: an assertion, or (iOS only) registering
+ * an App Attest key. A challenge minted for one is refused for the other.
+ */
+exports.APP_ASSERTION_CHALLENGE_PURPOSES = ['assertion', 'attest_key'];
+/** The JOSE `typ` of an app assertion. No other Oxy token carries it. */
+exports.OXY_APP_ASSERTION_TYPE = 'OXY-APP+JWT';
+/** The `aud` of every app assertion. */
+exports.OXY_APP_ASSERTION_AUDIENCE = 'oxy-apps';
+/** The request header an app (or an SDK acting for it) sends the assertion in. */
+exports.OXY_APP_ASSERTION_HEADER = 'X-Oxy-App-Assertion';
+/** Oxy signs an app assertion for exactly this long. */
+exports.OXY_APP_ASSERTION_TTL_SECONDS = 300;
+/**
+ * Why Oxy refused an app assertion, a challenge or an App Attest key. The API
+ * answers `{ error: <code>, message }`.
+ *
+ * - `application_unavailable`: no active application has that id.
+ * - `session_other_application`: the bearer's session belongs to another application.
+ * - `platform_not_registered`: the application declares no recognition for that platform.
+ * - `origin_not_registered`: the request's `Origin` is not one of the application's web origins.
+ * - `challenge_invalid`: the challenge is unknown, used, expired, or minted for something else.
+ * - `integrity_refused`: the Play Integrity verdict does not name this app, a registered
+ *   certificate, a Play-recognised install and this challenge.
+ * - `integrity_unconfigured` / `integrity_unavailable`: Oxy cannot ask Google (503).
+ * - `attest_key_unknown`: no App Attest key with that id is registered for the app; attest a new one.
+ * - `attest_key_exists`: that App Attest key is already registered.
+ * - `attestation_invalid`: the App Attest attestation does not verify.
+ * - `assertion_invalid`: the App Attest assertion does not verify, or its counter did not advance.
+ * - `signing_unavailable`: Oxy cannot sign (503).
+ */
+exports.APP_ASSERTION_ERROR_CODES = [
+    'application_unavailable',
+    'session_other_application',
+    'platform_not_registered',
+    'origin_not_registered',
+    'challenge_invalid',
+    'integrity_refused',
+    'integrity_unconfigured',
+    'integrity_unavailable',
+    'attest_key_unknown',
+    'attest_key_exists',
+    'attestation_invalid',
+    'assertion_invalid',
+    'signing_unavailable',
+];
+/** 32 random bytes, base64url: a challenge, or the SHA-256 it is bound into. */
+const BASE64URL_32 = /^[A-Za-z0-9_-]{43}$/;
+/** An App Attest key id: the standard base64 of a SHA-256. */
+const APP_ATTEST_KEY_ID = /^[A-Za-z0-9+/]{43}=$/;
+exports.appAssertionChallengeResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    challenge: (0, check_1.string)((0, check_1.pattern)(BASE64URL_32)),
+    requestHash: (0, check_1.string)((0, check_1.pattern)(BASE64URL_32)),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+    cloudProjectNumber: (0, check_1.optional)((0, check_1.string)((0, check_1.pattern)(/^[0-9]{1,20}$/))),
+}));
+exports.appAttestKeyResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({ keyId: (0, check_1.string)((0, check_1.pattern)(APP_ATTEST_KEY_ID)) }));
+exports.appAssertionResponseCheck = (0, check_1.exact)()((0, check_1.strictObject)({
+    assertion: (0, check_1.string)((0, check_1.pattern)(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/)),
+    applicationId: (0, check_1.string)((0, check_1.pattern)(/^\S{1,255}$/)),
+    platform: (0, check_1.oneOf)(exports.APP_ASSERTION_PLATFORMS),
+    expiresAt: (0, check_1.string)(check_1.datetime),
+}));

package/dist/cjs/client/index.js

@@ -15,11 +15,25 @@
  * behaviour by `__tests__/clientChecks.parity.test.ts`. Types are not repeated
  * here; import them from `@oxy.so/contracts` with `import type`.
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deviceJoinCodeResponseCheck = exports.deviceBackgroundCredentialResponseCheck = exports.activeTokenCheck = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceDirectorySyncCheck = exports.deviceDirectoryCheck = exports.deviceActivateResponseCheck = exports.signedRecordEnvelopeCheck = exports.externalIdentityReferenceCheck = exports.loginResultCheck = exports.isLoopbackOrigin = exports.executeAgentKeyOperationCheck = exports.agentVerifyRequestCheck = exports.agentProofClaimsCheck = exports.agentKeyOperationResultCheck = exports.agentKeyOperationCheck = exports.agentKeyOperationChallengeCheck = exports.agentKeyListResponseCheck = exports.agentChallengeRequestCheck = exports.AGENT_PROOF_TTL_MS = exports.AGENT_PROOF_AUDIENCE = exports.AGENT_PROOF_ACTIONS = exports.ACCOUNT_AUTH_METHODS = exports.emailVerificationStartResponseCheck = exports.emailVerificationConfirmResponseCheck = exports.emailTicketCheck = exports.emailAddressCheck = exports.EMAIL_VERIFICATION_PURPOSES = exports.EMAIL_VERIFICATION_ERROR_CODES = exports.EMAIL_TICKET_TTL_MS = exports.EMAIL_CODE_TTL_MS = exports.EMAIL_CODE_MAX_ATTEMPTS = exports.EMAIL_CODE_LENGTH = exports.newlyAddedRetiredCategories = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.isAccountKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.RETIRED_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.CHILD_ACCOUNT_KINDS = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_KINDS = exports.ACCOUNT_CATEGORY_IDS = exports.parseContract = exports.formatCheckPath = exports.checkContract = exports.ContractCheckError = void 0;
 exports.productSubscriptionCancellationResultCheck = exports.productPlanCheckoutRequestCheck = exports.productPlanCatalogueCheck = exports.personalPlanCheckoutResultCheck = exports.personalPlanCheckoutRequestCheck = exports.personalPlanCatalogueCheck = exports.cancelProductSubscriptionCheck = exports.updateOrganizationCheck = exports.organizationNameCheck = exports.organizationListCheck = exports.organizationImportBatchResultCheck = exports.organizationExternalResolutionCheck = exports.organizationExternalCheck = exports.organizationCurationResultCheck = exports.organizationClaimReviewCheck = exports.organizationClaimListCheck = exports.organizationClaimInputCheck = exports.organizationClaimDetailCheck = exports.organizationClaimCheck = exports.organizationCheck = exports.organizationBatchCheck = exports.createOrganizationCheck = exports.ORGANIZATION_TYPES = exports.ORGANIZATION_STATUSES = exports.ORGANIZATION_NAME_MAX_LENGTH = exports.ORGANIZATION_ERROR_CODES = exports.ORGANIZATION_CLAIM_STATUSES = exports.ORGANIZATION_CLAIM_DECISIONS = exports.ORGANIZATION_ALIAS_KINDS = exports.canonicalJson = exports.buildIdentityProofMessage = exports.IDENTITY_PROOF_VERSION = exports.IDENTITY_PROOF_DOMAIN = exports.IDENTITY_PROOF_CHALLENGE_TTL_MS = exports.IDENTITY_PROOF_AUDIENCE = exports.IDENTITY_PROOF_ACTION_VALUES = exports.IDENTITY_PROOF_ACTIONS = exports.IDENTITY_ERROR_CODES = exports.parseIdentityLinkQrPayload = exports.identityLinkStateCheck = exports.identityLinkCreateResponseCheck = exports.buildIdentityLinkQrPayload = exports.IDENTITY_LINK_STATUSES = exports.IDENTITY_LINK_QR_PREFIX = exports.sessionAccountsChangedEventCheck = exports.deviceTokenMintResponseCheck = exports.deviceSessionSyncCheck = exports.deviceSessionStateCheck = exports.deviceRegisterResponseCheck = exports.deviceJoinResponseCheck = void 0;
 exports.isSecondFactorRequired = exports.isEmailSignInChooseAccount = exports.emailSignInStartResponseCheck = exports.emailSignInPendingCheck = exports.emailSignInLinkResponseCheck = exports.emailSignInChooseAccountCheck = exports.TOTP_PERIOD_SECONDS = exports.TOTP_DIGITS = exports.TOTP_BACKUP_CODE_COUNT = exports.SIGN_IN_ERROR_CODES = exports.SIGNIN_SECOND_FACTOR_TTL_MS = exports.SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS = exports.REAUTH_ACTIONS = exports.PASSWORD_MIN_LENGTH = exports.PASSWORD_MAX_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_LENGTH = exports.EMAIL_SIGNIN_LONG_CODE_ALPHABET = exports.EMAIL_SIGNIN_LINK_TTL_MS = exports.EMAIL_SIGNIN_CHOICE_TTL_MS = exports.EMAIL_ACCOUNTS_MAX = exports.publicApplicationCheck = exports.supervisionStateCheck = exports.supervisionReviewInputCheck = exports.supervisionInviteInputCheck = exports.supervisionInvitationCheck = exports.supervisionContactsResponseCheck = exports.supervisionContactInputCheck = exports.supervisionAcceptInputCheck = exports.safetyPeopleResponseCheck = exports.safetyPeopleInputCheck = exports.safetyOrganizationsResponseCheck = exports.safetyOrganizationsInputCheck = exports.purchaseReviewInputCheck = exports.purchaseApprovalListCheck = exports.purchaseApprovalCheck = exports.profileAccessInputCheck = exports.profileAccessDecisionCheck = exports.SUPERVISION_STATUSES = exports.SUPERVISION_INVITATION_STATUSES = exports.SUPERVISION_CONSENT_VERSION = exports.SUPERVISED_ACTIONS = exports.SAFETY_POLICY_VERSION = exports.PURCHASE_APPROVAL_STATUSES = exports.isFullReputationBalance = exports.recommendationRequestCheck = exports.subscriptionCreditGrantsResponseCheck = exports.subjectProductAccessQueryCheck = exports.subjectProductAccessCheck = exports.productSubscriptionsResponseCheck = exports.productSubscriptionRenewalRequestCheck = void 0;
-exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = void 0;
+exports.appAttestKeyResponseCheck = exports.appAssertionResponseCheck = exports.appAssertionChallengeResponseCheck = exports.OXY_APP_ASSERTION_TYPE = exports.OXY_APP_ASSERTION_TTL_SECONDS = exports.OXY_APP_ASSERTION_HEADER = exports.OXY_APP_ASSERTION_AUDIENCE = exports.APP_ASSERTION_PLATFORMS = exports.APP_ASSERTION_ERROR_CODES = exports.APP_ASSERTION_CHALLENGE_PURPOSES = exports.isRightsClaim = exports.isErasureRequest = exports.OPEN_CONTENT_CLAIM_STATES = exports.ERASURE_REQUEST_DEADLINE_DAYS = exports.COUNTER_NOTICE_STATEMENTS = exports.COUNTER_NOTICE_STATEMENT_VERSION = exports.CONTENT_CLAIM_STATES = exports.CONTENT_CLAIM_REFERENCE_PATTERN = exports.CONTENT_CLAIM_LIMITS = exports.CONTENT_CLAIM_KINDS = exports.CONTENT_CLAIM_ERROR_CODES = exports.CONTENT_CLAIM_COUNTER_NOTICE_LIMITS = exports.CLOSED_CONTENT_CLAIM_STATES = exports.CLAIMANT_RELATIONSHIPS = exports.userNameCheck = exports.usernameCheckForAccountKind = exports.usernameCheck = exports.stripDisallowedUsernameCharacters = exports.botUsernameCheck = exports.applyBotUsernameSuffix = exports.USERNAME_PATTERN_SOURCE = exports.USERNAME_MIN_LENGTH = exports.USERNAME_MAX_LENGTH = exports.USERNAME_INVALID_MESSAGE = exports.RESERVED_USERNAME_MESSAGE = exports.RESERVED_USERNAMES = exports.NUMERIC_USERNAME_MESSAGE = exports.BOT_USERNAME_SUFFIX = exports.BOT_USERNAME_INVALID_MESSAGE = exports.totpEnrollResponseCheck = exports.totpBackupCodesResponseCheck = exports.signInMethodsCheck = exports.secondFactorRequiredCheck = exports.reauthProofCheck = exports.normalizeEmailSignInCode = void 0;
 var check_1 = require("./check");
 Object.defineProperty(exports, "ContractCheckError", { enumerable: true, get: function () { return check_1.ContractCheckError; } });
 Object.defineProperty(exports, "checkContract", { enumerable: true, get: function () { return check_1.checkContract; } });
@@ -227,3 +241,15 @@ Object.defineProperty(exports, "ERASURE_REQUEST_DEADLINE_DAYS", { enumerable: tr
 Object.defineProperty(exports, "OPEN_CONTENT_CLAIM_STATES", { enumerable: true, get: function () { return contentClaims_1.OPEN_CONTENT_CLAIM_STATES; } });
 Object.defineProperty(exports, "isErasureRequest", { enumerable: true, get: function () { return contentClaims_1.isErasureRequest; } });
 Object.defineProperty(exports, "isRightsClaim", { enumerable: true, get: function () { return contentClaims_1.isRightsClaim; } });
+var appAssertions_1 = require("./appAssertions");
+Object.defineProperty(exports, "APP_ASSERTION_CHALLENGE_PURPOSES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_CHALLENGE_PURPOSES; } });
+Object.defineProperty(exports, "APP_ASSERTION_ERROR_CODES", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_ERROR_CODES; } });
+Object.defineProperty(exports, "APP_ASSERTION_PLATFORMS", { enumerable: true, get: function () { return appAssertions_1.APP_ASSERTION_PLATFORMS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_AUDIENCE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_AUDIENCE; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_HEADER", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_HEADER; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TTL_SECONDS", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TTL_SECONDS; } });
+Object.defineProperty(exports, "OXY_APP_ASSERTION_TYPE", { enumerable: true, get: function () { return appAssertions_1.OXY_APP_ASSERTION_TYPE; } });
+Object.defineProperty(exports, "appAssertionChallengeResponseCheck", { enumerable: true, get: function () { return appAssertions_1.appAssertionChallengeResponseCheck; } });
+Object.defineProperty(exports, "appAssertionResponseCheck", { enumerable: true, get: function () { return appAssertions_1.appAssertionResponseCheck; } });
+Object.defineProperty(exports, "appAttestKeyResponseCheck", { enumerable: true, get: function () { return appAssertions_1.appAttestKeyResponseCheck; } });
+__exportStar(require("../products/one"), exports);

package/dist/cjs/index.js

@@ -37,9 +37,9 @@ exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.i
 exports.realtimeItemTruncateCommandSchema = exports.realtimeItemDeleteCommandSchema = exports.realtimeItemCreateCommandSchema = exports.realtimeSessionUpdateCommandSchema = exports.realtimeResponseParametersSchema = exports.realtimeConversationItemSchema = exports.realtimeContentPartSchema = exports.realtimeSessionRequestSchema = exports.realtimeClientMetadataSchema = exports.realtimeSessionLimitsSchema = exports.realtimeSessionConfigUpdateSchema = exports.realtimeSessionConfigSchema = exports.realtimeTranslationSchema = exports.realtimeInputTranscriptionSchema = exports.realtimeTurnDetectionSchema = exports.realtimeOutputModalitySchema = exports.realtimeAudioFormatSchema = exports.realtimeResponseIdSchema = exports.realtimeItemIdSchema = exports.realtimeCommandIdSchema = exports.MAX_REALTIME_RESUME_WINDOW_MS = exports.MAX_REALTIME_SESSION_AUDIO_BYTES = exports.MAX_REALTIME_SESSION_DURATION_MS = exports.MAX_REALTIME_AUDIO_FRAME_BASE64_LENGTH = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamAudioEventSchema = exports.MAX_INFERENCE_AUDIO_BYTES = exports.inferenceAudioMediaTypeSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.inferenceReasoningSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = void 0;
 exports.kaanaCredentialRotateMutationSchema = exports.kaanaCredentialCreateMutationSchema = exports.kaanaCredentialIdentitySchema = exports.kaanaCredentialOperationActionSchema = exports.kaanaCredentialOperationIdSchema = exports.kaanaCredentialHandleSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.realtimeServerEventSchema = exports.realtimeSessionClosedEventSchema = exports.realtimeSessionCloseReasonSchema = exports.realtimeErrorEventSchema = exports.realtimeResponseDoneEventSchema = exports.realtimeResponseStatusSchema = exports.realtimeToolCallEventSchema = exports.realtimeTextDeltaEventSchema = exports.realtimeTranscriptDoneEventSchema = exports.realtimeTranscriptDeltaEventSchema = exports.realtimeTranscriptSourceSchema = exports.realtimeOutputAudioDoneEventSchema = exports.realtimeOutputAudioDeltaEventSchema = exports.realtimeResponseCreatedEventSchema = exports.realtimeInputAudioClearedEventSchema = exports.realtimeInputAudioCommittedEventSchema = exports.realtimeSpeechStoppedEventSchema = exports.realtimeSpeechStartedEventSchema = exports.realtimeItemTruncatedEventSchema = exports.realtimeItemDeletedEventSchema = exports.realtimeItemDoneEventSchema = exports.realtimeItemAddedEventSchema = exports.realtimeCommandAcceptedEventSchema = exports.realtimeSessionResumedEventSchema = exports.realtimeSessionUpdatedEventSchema = exports.realtimeSessionCreatedEventSchema = exports.realtimeClientCommandSchema = exports.realtimeSessionCloseCommandSchema = exports.realtimeSessionResumeCommandSchema = exports.realtimeResponseCancelCommandSchema = exports.realtimeResponseCreateCommandSchema = exports.realtimeInputAudioClearCommandSchema = exports.realtimeInputAudioCommitCommandSchema = exports.realtimeInputAudioAppendCommandSchema = void 0;
 exports.payAsYouGoEntitlementSchema = exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerCredentialCustodyStateSchema = exports.providerCredentialValidationDeploymentSchema = exports.providerCredentialValidationOperationSchema = exports.kaanaCredentialValidationOutcomeSchema = exports.kaanaCredentialValidationFailureCodeSchema = exports.kaanaCredentialValidationOutcomeStateSchema = exports.kaanaCredentialValidationTaskSchema = exports.kaanaCredentialOutcomeSchema = exports.kaanaCredentialConflictOutcomeSchema = exports.kaanaCredentialAppliedOutcomeSchema = exports.kaanaCredentialOutcomeRequestSchema = exports.kaanaCredentialRevokeOutcomeRequestSchema = exports.kaanaCredentialRotateOutcomeRequestSchema = exports.kaanaCredentialCreateOutcomeRequestSchema = exports.kaanaCredentialMutationSchema = exports.kaanaCredentialRevokeMutationSchema = void 0;
-exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
-exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = void 0;
-exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.productPlanCatalogueSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = void 0;
+exports.catalogInvocationPathParameters = exports.normalizedAppEventSchema = exports.catalogRegistrationSchema = exports.appCapabilityCatalogSchema = exports.CATALOG_INTERNAL_TRANSPORTS = exports.catalogFeatureSchema = exports.catalogEventSchema = exports.catalogToolSchema = exports.auditEventSchema = exports.auditResultSchema = exports.policyDecisionSchema = exports.invocationPrincipalSchema = exports.capabilityTicketClaimsSchema = exports.automationDefinitionSchema = exports.automationDataFlowSchema = exports.automationActorSelectionSchema = exports.automationTriggerSchema = exports.agentAvailabilitySchema = exports.applicationAgentSchema = exports.applicationAgentWriteSchema = exports.applicationAgentAvailabilitySchema = exports.APPLICATION_AGENT_AVAILABILITIES = exports.agentRequesterCeilingSchema = exports.agentRequesterCeilingWriteSchema = exports.AGENT_REQUESTER_CEILING_AUTONOMY = exports.delegationGrantSchema = exports.capabilityTicketRequestSchema = exports.capabilityCoordinatorSchema = exports.executionAuthorizationRefSchema = exports.capabilityCatalogBindingSchema = exports.grantLimitSchema = exports.toolGrantOverrideSchema = exports.resourceRefSchema = exports.foregroundExecutionAuthorizationInputSchema = exports.executionActorRefSchema = exports.actorRefSchema = exports.capabilityPackageSchema = exports.autonomyLevelSchema = exports.CAPABILITY_PACKAGES = exports.AUTONOMY_LEVELS = exports.costCenterUsageSchema = exports.providerCostSourceSchema = exports.PROVIDER_COST_SOURCES = exports.inferenceEconomicTreatmentSchema = exports.INFERENCE_ECONOMIC_TREATMENTS = exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = void 0;
+exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = exports.privateAutoInferenceRequestSchema = exports.privateAutoOperationId = exports.privateAutoInputSchema = exports.privateAutoExecutionSchema = exports.privateAutoSourceApprovalSchema = exports.privateAutoPrincipalSchema = exports.PRIVATE_AUTO_QUESTION = exports.PRIVATE_AUTO_INSTRUCTIONS = exports.PRIVATE_AUTO_LIMITS = exports.PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION = exports.PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION = exports.scopedInferenceRequestSchema = exports.canonicalScopedExecutionJson = exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = exports.decisionAnswersMatch = exports.decisionFitsGateway = exports.decisionInputBudget = exports.decisionFailureSchema = exports.decisionSuccessSchema = exports.decisionResultSchema = exports.decisionAnswerSchema = exports.decisionRequestSchema = exports.decisionInputSchema = exports.decisionQuestionSchema = exports.decisionEffortSchema = exports.inboxInferenceStreamEventSchema = exports.inboxThreadSummaryResponseSchema = exports.inboxSmartRepliesResponseSchema = exports.inboxNaturalSearchResponseSchema = exports.inboxInferenceTextResponseSchema = exports.inboxMessageInferenceParamsSchema = exports.inboxNaturalSearchRequestSchema = exports.INBOX_DAILY_BRIEF_SECTIONS = exports.inboxDailyBriefResponseSchema = exports.inboxDailyBriefRequestSchema = exports.inboxComposeRequestSchema = exports.emailAgentContextSchema = exports.emailContextMessageSchema = exports.emailContextMailboxSchema = exports.emailContextAddressSchema = exports.resolveCatalogInvocation = exports.matchCatalogInvocation = exports.findOverlappingCatalogInvocations = exports.catalogInvocationTemplatesEquivalent = exports.catalogInvocationsOverlap = void 0;
+exports.serviceTokenOptionsSchema = exports.serviceTokenScopesSchema = exports.productPlanCatalogueSchema = exports.personalPlanCatalogueSchema = exports.personalPlanDisplayPriceSchema = exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = exports.isLoopbackOrigin = exports.inputSatisfiesCapabilityLimits = exports.canonicalCapabilityJson = exports.meteredGenerationSchema = exports.subjectProductAccessSchema = exports.productOfferSegmentSchema = exports.subjectProductGrantSnapshotSchema = exports.productAccessGrantSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -785,6 +785,11 @@ Object.defineProperty(exports, "delegationGrantSchema", { enumerable: true, get:
 Object.defineProperty(exports, "AGENT_REQUESTER_CEILING_AUTONOMY", { enumerable: true, get: function () { return agency_1.AGENT_REQUESTER_CEILING_AUTONOMY; } });
 Object.defineProperty(exports, "agentRequesterCeilingWriteSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingWriteSchema; } });
 Object.defineProperty(exports, "agentRequesterCeilingSchema", { enumerable: true, get: function () { return agency_1.agentRequesterCeilingSchema; } });
+Object.defineProperty(exports, "APPLICATION_AGENT_AVAILABILITIES", { enumerable: true, get: function () { return agency_1.APPLICATION_AGENT_AVAILABILITIES; } });
+Object.defineProperty(exports, "applicationAgentAvailabilitySchema", { enumerable: true, get: function () { return agency_1.applicationAgentAvailabilitySchema; } });
+Object.defineProperty(exports, "applicationAgentWriteSchema", { enumerable: true, get: function () { return agency_1.applicationAgentWriteSchema; } });
+Object.defineProperty(exports, "applicationAgentSchema", { enumerable: true, get: function () { return agency_1.applicationAgentSchema; } });
+Object.defineProperty(exports, "agentAvailabilitySchema", { enumerable: true, get: function () { return agency_1.agentAvailabilitySchema; } });
 Object.defineProperty(exports, "automationTriggerSchema", { enumerable: true, get: function () { return agency_1.automationTriggerSchema; } });
 Object.defineProperty(exports, "automationActorSelectionSchema", { enumerable: true, get: function () { return agency_1.automationActorSelectionSchema; } });
 Object.defineProperty(exports, "automationDataFlowSchema", { enumerable: true, get: function () { return agency_1.automationDataFlowSchema; } });
@@ -901,3 +906,5 @@ Object.defineProperty(exports, "serviceTokenScopesSchema", { enumerable: true, g
 Object.defineProperty(exports, "serviceTokenOptionsSchema", { enumerable: true, get: function () { return serviceToken_1.serviceTokenOptionsSchema; } });
 __exportStar(require("./applicationRoles"), exports);
 __exportStar(require("./contentClaims"), exports);
+__exportStar(require("./appAssertions"), exports);
+__exportStar(require("./products/one"), exports);

package/dist/cjs/products/one.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OXY_ONE_APP_SUBSCRIPTIONS = exports.OXY_ONE_CREATOR_PLANS = exports.OXY_ONE_BUSINESS_PLANS = exports.OXY_ONE_FAMILY_PLANS = exports.OXY_ONE_PERSONAL_PLANS = exports.OXY_ONE_AUDIENCE_THEMES = exports.OXY_ONE_FAMILY_MEMBERS = exports.OXY_ONE_ANNUAL_DISCOUNT = void 0;
+exports.getOnePlans = getOnePlans;
+exports.onePlanQuote = onePlanQuote;
+exports.OXY_ONE_ANNUAL_DISCOUNT = 20;
+exports.OXY_ONE_FAMILY_MEMBERS = 6;
+exports.OXY_ONE_AUDIENCE_THEMES = {
+    personal: 'one-plans-theme',
+    creator: 'one-creator-theme',
+    business: 'one-professional-theme',
+};
+/** Approved prices and credits; proposed storage capacities for the bundle design.
+ * USD minor units; credits renew monthly even on annual plans. Free 2 GB and Go 20 GB follow
+ * the new product direction; existing backend quotas are not changed here. */
+exports.OXY_ONE_PERSONAL_PLANS = {
+    Free: { monthlyPrice: 0, monthlyCredits: 0, creditDiscount: 0, storageGB: 2 },
+    Go: { monthlyPrice: 1500, monthlyCredits: 4000, creditDiscount: 5, storageGB: 20 },
+    Pro: { monthlyPrice: 2999, monthlyCredits: 10000, creditDiscount: 10, storageGB: 100 },
+    Max: { monthlyPrice: 9900, monthlyCredits: 50000, creditDiscount: 15, storageGB: 500 },
+    Ultra: { monthlyPrice: 40000, monthlyCredits: 200000, creditDiscount: 20, storageGB: 2000 },
+};
+/** A family quota belongs to the whole group, never multiplied by member count. */
+exports.OXY_ONE_FAMILY_PLANS = {
+    Go: { monthlyPrice: 2500, monthlyCredits: 8000, creditDiscount: 5, storageGB: 40 },
+    Pro: { monthlyPrice: 4900, monthlyCredits: 20000, creditDiscount: 10, storageGB: 200 },
+    Max: { monthlyPrice: 16900, monthlyCredits: 100000, creditDiscount: 15, storageGB: 1000 },
+    Ultra: { monthlyPrice: 59900, monthlyCredits: 300000, creditDiscount: 20, storageGB: 4000 },
+};
+exports.OXY_ONE_BUSINESS_PLANS = {
+    Go: {
+        monthlyPrice: 3900,
+        monthlySeatPrice: 900,
+        monthlyCredits: 8000,
+        creditsPerSeat: 2000,
+        creditDiscount: 15,
+        storageGB: 20,
+        storagePerSeatGB: 5,
+    },
+    Pro: {
+        monthlyPrice: 9999,
+        monthlySeatPrice: 1900,
+        monthlyCredits: 25000,
+        creditsPerSeat: 5000,
+        creditDiscount: 25,
+        storageGB: 100,
+        storagePerSeatGB: 10,
+    },
+    Max: {
+        monthlyPrice: 19900,
+        monthlySeatPrice: 2900,
+        monthlyCredits: 60000,
+        creditsPerSeat: 8000,
+        creditDiscount: 30,
+        storageGB: 500,
+        storagePerSeatGB: 25,
+    },
+    Ultra: {
+        monthlyPrice: 59900,
+        monthlySeatPrice: 4900,
+        monthlyCredits: 200000,
+        creditsPerSeat: 15000,
+        creditDiscount: 35,
+        storageGB: 2000,
+        storagePerSeatGB: 50,
+    },
+};
+/** Verification, basic app access and model access are not subscription gates. */
+exports.OXY_ONE_CREATOR_PLANS = {
+    Go: { monthlyPrice: 2900, monthlyCredits: 10000, creditDiscount: 10, storageGB: 20 },
+    Pro: { monthlyPrice: 6900, monthlyCredits: 25000, creditDiscount: 15, storageGB: 100 },
+    Max: { monthlyPrice: 14900, monthlyCredits: 60000, creditDiscount: 20, storageGB: 500 },
+    Ultra: { monthlyPrice: 49900, monthlyCredits: 250000, creditDiscount: 25, storageGB: 2000 },
+};
+function getOnePlans(audience, mode = 'individual') {
+    const plans = audience === 'business'
+        ? exports.OXY_ONE_BUSINESS_PLANS
+        : audience === 'creator'
+            ? exports.OXY_ONE_CREATOR_PLANS
+            : mode === 'family'
+                ? exports.OXY_ONE_FAMILY_PLANS
+                : exports.OXY_ONE_PERSONAL_PLANS;
+    return Object.entries(plans).map(([name, plan]) => ({ name, ...plan }));
+}
+/** Each product owns its tier names; an Oxy One level selects an app subscription.
+ * Bundle inclusion is a proposal and does not activate product entitlements. */
+exports.OXY_ONE_APP_SUBSCRIPTIONS = {
+    alia: { name: 'Alia', tiers: { Free: null, Go: 'Go', Pro: 'Pro', Max: 'Max', Ultra: 'Ultra' } },
+    // Product-owned names; these bundle mappings remain a proposal.
+    mention: {
+        name: 'Mention',
+        tiers: { Free: null, Go: 'Plus', Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    mercaria: {
+        name: 'Mercaria',
+        tiers: { Free: null, Go: 'Go', Pro: 'Plus', Max: 'Plus', Ultra: 'Ultra' },
+        creatorTiers: { Free: null, Go: 'Creator', Pro: 'Creator', Max: 'Creator', Ultra: 'Creator' },
+    },
+    noted: { name: 'Noted', tiers: { Free: null, Go: '+', Pro: '+', Max: '+', Ultra: '+' } },
+    clarity: {
+        name: 'Clarity',
+        tiers: { Free: null, Go: null, Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    schedio: {
+        name: 'Schedio',
+        tiers: { Free: null, Go: null, Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    inbox: {
+        name: 'Inbox',
+        tiers: { Free: null, Go: null, Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    homiio: {
+        name: 'Homiio',
+        tiers: { Free: null, Go: 'Plus', Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+};
+/** Annual rounding follows the billable base and per-seat line items. */
+function onePlanQuote(plan, period, seats) {
+    const annual = (value) => Math.round(value * 12 * (1 - exports.OXY_ONE_ANNUAL_DISCOUNT / 100));
+    const baseAnnual = annual(plan.monthlyPrice);
+    const seatAnnual = plan.monthlySeatPrice === undefined ? undefined : annual(plan.monthlySeatPrice);
+    const known = plan.monthlySeatPrice === undefined || seats !== undefined;
+    const totalAnnual = known ? baseAnnual + (seatAnnual ?? 0) * (seats ?? 0) : undefined;
+    return {
+        baseMonthly: period === 'annual' ? Math.round(baseAnnual / 12) : plan.monthlyPrice,
+        seatMonthly: seatAnnual === undefined
+            ? undefined
+            : period === 'annual'
+                ? Math.round(seatAnnual / 12)
+                : plan.monthlySeatPrice,
+        totalMonthly: totalAnnual === undefined
+            ? undefined
+            : period === 'annual'
+                ? Math.round(totalAnnual / 12)
+                : plan.monthlyPrice + (plan.monthlySeatPrice ?? 0) * (seats ?? 0),
+        totalAnnual,
+        storageGB: known ? plan.storageGB + (plan.storagePerSeatGB ?? 0) * (seats ?? 0) : undefined,
+        monthlyCredits: known
+            ? plan.monthlyCredits + (plan.creditsPerSeat ?? 0) * (seats ?? 0)
+            : undefined,
+    };
+}

package/dist/esm/agency.js

@@ -169,6 +169,38 @@ export const agentRequesterCeilingSchema = agentRequesterCeilingWriteSchema
     updatedAt: z.string().datetime(),
 })
     .strict();
+/**
+ * Where an application's own agent opens (ADR 0044): `anywhere`, or only in
+ * sessions that belong to that application (`own_application`). An agent with
+ * no application row is available anywhere.
+ */
+export const APPLICATION_AGENT_AVAILABILITIES = ['anywhere', 'own_application'];
+export const applicationAgentAvailabilitySchema = z.enum(APPLICATION_AGENT_AVAILABILITIES);
+/** What Oxy staff write for one of an application's agents. */
+export const applicationAgentWriteSchema = z
+    .object({ availability: applicationAgentAvailabilitySchema })
+    .strict();
+/** One row of the application registry's agents: an agent is one application's. */
+export const applicationAgentSchema = applicationAgentWriteSchema
+    .extend({
+    applicationId: identifierSchema,
+    agentAccountId: identifierSchema,
+    createdByUserId: identifierSchema.nullable(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+})
+    .strict();
+/**
+ * `GET /capabilities/agent-availability/:agentAccountId`: the sessions an agent
+ * is reachable from. `anywhere: false` lists the applications whose sessions
+ * (the session validation answer's `applicationId`) may reach it.
+ */
+export const agentAvailabilitySchema = z.discriminatedUnion('anywhere', [
+    z.object({ anywhere: z.literal(true) }).strict(),
+    z
+        .object({ anywhere: z.literal(false), applicationIds: z.array(identifierSchema).min(1) })
+        .strict(),
+]);
 export const automationTriggerSchema = z.discriminatedUnion('type', [
     z.object({ type: z.literal('manual') }).strict(),
     z