@oxy.so/contracts 4.23.0 → 4.25.0

package/dist/esm/appAssertions.js

@@ -0,0 +1,191 @@
+/**
+ * App assertions (ADR 0045): how an Oxy app proves which app it is.
+ *
+ * ## The registry
+ *
+ * Each application may declare how it is recognised, written only by Oxy staff
+ * through the application administration lane
+ * (`PUT /applications/:appId/recognition`): its exact `https://` web origins,
+ * its Android package and signing certificates, and its iOS team and bundle.
+ * A platform it does not declare can never assert it.
+ *
+ * ## The exchange
+ *
+ * With the person's own bearer, the app asks `POST /apps/assertions` for an
+ * `OXY-APP+JWT` naming the application, and proves itself by platform: on the
+ * web the browser's `Origin`; on Android a Play Integrity token whose request
+ * hash is a challenge from `POST /apps/assertions/challenge`; on iOS an App
+ * Attest assertion over such a challenge, made with a key registered through
+ * `POST /apps/attest-keys`. The assertion lives five minutes and names the
+ * person (`sub`) and the session (`sid`) it was issued to.
+ *
+ * The Zod-free half (vocabularies, header name, response checks) is
+ * `./client/appAssertions.ts`.
+ */
+import { z } from 'zod';
+import { APP_ASSERTION_CHALLENGE_PURPOSES, APP_ASSERTION_ERROR_CODES, APP_ASSERTION_PLATFORMS, OXY_APP_ASSERTION_AUDIENCE, OXY_APP_ASSERTION_HEADER, OXY_APP_ASSERTION_TTL_SECONDS, OXY_APP_ASSERTION_TYPE, } from './client/appAssertions.js';
+export { APP_ASSERTION_CHALLENGE_PURPOSES, APP_ASSERTION_ERROR_CODES, APP_ASSERTION_PLATFORMS, OXY_APP_ASSERTION_AUDIENCE, OXY_APP_ASSERTION_HEADER, OXY_APP_ASSERTION_TTL_SECONDS, OXY_APP_ASSERTION_TYPE, };
+const applicationIdSchema = z.string().trim().min(1).max(255);
+const base64Url32Schema = z.string().regex(/^[A-Za-z0-9_-]{43}$/);
+const base64Schema = (max) => z
+    .string()
+    .min(4)
+    .max(max)
+    .regex(/^[A-Za-z0-9+/]+={0,2}$/);
+export const appAssertionPlatformSchema = z.enum(APP_ASSERTION_PLATFORMS);
+export const appAssertionErrorCodeSchema = z.enum(APP_ASSERTION_ERROR_CODES);
+// ---------------------------------------------------------------------------
+// Registry
+// ---------------------------------------------------------------------------
+/** True for an exact origin: `https:`, no path, query, fragment or credentials, in canonical form. */
+export function isExactHttpsOrigin(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' && url.origin === value;
+    }
+    catch {
+        return false;
+    }
+}
+/** An exact `https://` origin, in the form a browser sends in `Origin` (`https://mention.earth`). */
+export const applicationWebOriginSchema = z
+    .string()
+    .max(255)
+    .refine(isExactHttpsOrigin, 'Must be an exact https origin, as a browser sends it');
+/** A Java-style Android application id, at least two segments. */
+export const androidPackageNameSchema = z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/, 'Must be an Android package name');
+/** A signing certificate's SHA-256, 64 lowercase hex characters (keytool's digest without colons). */
+export const signingCertSha256Schema = z
+    .string()
+    .regex(/^[0-9a-f]{64}$/, 'Must be 64 lowercase hex characters');
+/** An Apple Developer team id. */
+export const appleTeamIdSchema = z.string().regex(/^[A-Z0-9]{10}$/, 'Must be an Apple team id');
+/** An Apple bundle id. */
+export const appleBundleIdSchema = z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/, 'Must be an Apple bundle id');
+const unique = (values) => new Set(values).size === values.length;
+export const applicationAndroidRecognitionSchema = z
+    .object({
+    packageName: androidPackageNameSchema,
+    signingCertSha256: z
+        .array(signingCertSha256Schema)
+        .min(1)
+        .max(10)
+        .refine(unique, 'Certificates must be unique'),
+})
+    .strict();
+export const applicationIosRecognitionSchema = z
+    .object({ teamId: appleTeamIdSchema, bundleId: appleBundleIdSchema })
+    .strict();
+/**
+ * What Oxy staff write for an application: the whole declaration, replaced at
+ * once. `null` and `[]` declare nothing for that platform.
+ */
+export const applicationRecognitionWriteSchema = z
+    .object({
+    webOrigins: z
+        .array(applicationWebOriginSchema)
+        .max(20)
+        .refine(unique, 'Origins must be unique'),
+    android: applicationAndroidRecognitionSchema.nullable(),
+    ios: applicationIosRecognitionSchema.nullable(),
+})
+    .strict();
+/** An application's recognition as the registry holds it; `updatedAt` is `null` when none was written. */
+export const applicationRecognitionSchema = applicationRecognitionWriteSchema
+    .extend({
+    applicationId: applicationIdSchema,
+    updatedAt: z.string().datetime().nullable(),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// The exchange
+// ---------------------------------------------------------------------------
+/** `POST /apps/assertions/challenge`: a single-use challenge for a device proof. */
+export const appAssertionChallengeRequestSchema = z.discriminatedUnion('platform', [
+    z.object({ applicationId: applicationIdSchema, platform: z.literal('android') }).strict(),
+    z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: z.literal('ios'),
+        purpose: z.enum(APP_ASSERTION_CHALLENGE_PURPOSES),
+    })
+        .strict(),
+]);
+/**
+ * The challenge, and `requestHash`: what the device signs or hands to Play
+ * Integrity, binding the challenge to this application, platform, purpose and
+ * session. `cloudProjectNumber` is the Google Cloud project Play Integrity
+ * tokens are requested for (Android only).
+ */
+export const appAssertionChallengeResponseSchema = z
+    .object({
+    challenge: base64Url32Schema,
+    requestHash: base64Url32Schema,
+    expiresAt: z.string().datetime(),
+    cloudProjectNumber: z
+        .string()
+        .regex(/^[0-9]{1,20}$/)
+        .optional(),
+})
+    .strict();
+/** An App Attest key id: the standard base64 of the SHA-256 of the key. */
+export const appAttestKeyIdSchema = z.string().regex(/^[A-Za-z0-9+/]{43}=$/);
+/** `POST /apps/attest-keys`: register an App Attest key, attested over a `attest_key` challenge. */
+export const appAttestKeyRequestSchema = z
+    .object({
+    applicationId: applicationIdSchema,
+    keyId: appAttestKeyIdSchema,
+    challenge: base64Url32Schema,
+    attestation: base64Schema(32768),
+})
+    .strict();
+export const appAttestKeyResponseSchema = z.object({ keyId: appAttestKeyIdSchema }).strict();
+/**
+ * `POST /apps/assertions`. The body names the application and the platform;
+ * the proof is the platform's: none on the web (the browser's `Origin` is), a
+ * Play Integrity token on Android, an App Attest assertion on iOS, each over a
+ * challenge minted for `assertion`.
+ */
+export const appAssertionRequestSchema = z.discriminatedUnion('platform', [
+    z.object({ applicationId: applicationIdSchema, platform: z.literal('web') }).strict(),
+    z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: z.literal('android'),
+        proof: z
+            .object({
+            challenge: base64Url32Schema,
+            integrityToken: z.string().min(1).max(16384),
+        })
+            .strict(),
+    })
+        .strict(),
+    z
+        .object({
+        applicationId: applicationIdSchema,
+        platform: z.literal('ios'),
+        proof: z
+            .object({
+            challenge: base64Url32Schema,
+            keyId: appAttestKeyIdSchema,
+            assertion: base64Schema(4096),
+        })
+            .strict(),
+    })
+        .strict(),
+]);
+/** The assertion, and what it says. Send it as {@link OXY_APP_ASSERTION_HEADER}. */
+export const appAssertionResponseSchema = z
+    .object({
+    assertion: z.string().regex(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/),
+    applicationId: z.string().regex(/^\S{1,255}$/),
+    platform: appAssertionPlatformSchema,
+    expiresAt: z.string().datetime(),
+})
+    .strict();

package/dist/esm/client/appAssertions.js

@@ -0,0 +1,77 @@
+/**
+ * App assertions (ADR 0045), without Zod. Schemas: `../appAssertions.ts`.
+ *
+ * An Oxy app proves which app it is by trading platform evidence (the browser's
+ * `Origin`, a Play Integrity verdict, an App Attest assertion) for a short-lived
+ * `OXY-APP+JWT` signed by Oxy. A service that needs to know the app reads it
+ * from {@link OXY_APP_ASSERTION_HEADER} and verifies it against Oxy's JWKS
+ * (`verifyAppAssertion` in `@oxy.so/core/server`).
+ *
+ * Part of `@oxy.so/contracts/client`: never import `zod` here (see `./check.ts`).
+ */
+import { datetime, exact, oneOf, optional, pattern, strictObject, string } from './check.js';
+/** How an app proves itself: the browser's origin, Play Integrity, or App Attest. */
+export const APP_ASSERTION_PLATFORMS = ['web', 'android', 'ios'];
+/**
+ * What a device challenge is spent on: an assertion, or (iOS only) registering
+ * an App Attest key. A challenge minted for one is refused for the other.
+ */
+export const APP_ASSERTION_CHALLENGE_PURPOSES = ['assertion', 'attest_key'];
+/** The JOSE `typ` of an app assertion. No other Oxy token carries it. */
+export const OXY_APP_ASSERTION_TYPE = 'OXY-APP+JWT';
+/** The `aud` of every app assertion. */
+export const OXY_APP_ASSERTION_AUDIENCE = 'oxy-apps';
+/** The request header an app (or an SDK acting for it) sends the assertion in. */
+export const OXY_APP_ASSERTION_HEADER = 'X-Oxy-App-Assertion';
+/** Oxy signs an app assertion for exactly this long. */
+export const OXY_APP_ASSERTION_TTL_SECONDS = 300;
+/**
+ * Why Oxy refused an app assertion, a challenge or an App Attest key. The API
+ * answers `{ error: <code>, message }`.
+ *
+ * - `application_unavailable`: no active application has that id.
+ * - `session_other_application`: the bearer's session belongs to another application.
+ * - `platform_not_registered`: the application declares no recognition for that platform.
+ * - `origin_not_registered`: the request's `Origin` is not one of the application's web origins.
+ * - `challenge_invalid`: the challenge is unknown, used, expired, or minted for something else.
+ * - `integrity_refused`: the Play Integrity verdict does not name this app, a registered
+ *   certificate, a Play-recognised install and this challenge.
+ * - `integrity_unconfigured` / `integrity_unavailable`: Oxy cannot ask Google (503).
+ * - `attest_key_unknown`: no App Attest key with that id is registered for the app; attest a new one.
+ * - `attest_key_exists`: that App Attest key is already registered.
+ * - `attestation_invalid`: the App Attest attestation does not verify.
+ * - `assertion_invalid`: the App Attest assertion does not verify, or its counter did not advance.
+ * - `signing_unavailable`: Oxy cannot sign (503).
+ */
+export const APP_ASSERTION_ERROR_CODES = [
+    'application_unavailable',
+    'session_other_application',
+    'platform_not_registered',
+    'origin_not_registered',
+    'challenge_invalid',
+    'integrity_refused',
+    'integrity_unconfigured',
+    'integrity_unavailable',
+    'attest_key_unknown',
+    'attest_key_exists',
+    'attestation_invalid',
+    'assertion_invalid',
+    'signing_unavailable',
+];
+/** 32 random bytes, base64url: a challenge, or the SHA-256 it is bound into. */
+const BASE64URL_32 = /^[A-Za-z0-9_-]{43}$/;
+/** An App Attest key id: the standard base64 of a SHA-256. */
+const APP_ATTEST_KEY_ID = /^[A-Za-z0-9+/]{43}=$/;
+export const appAssertionChallengeResponseCheck = exact()(strictObject({
+    challenge: string(pattern(BASE64URL_32)),
+    requestHash: string(pattern(BASE64URL_32)),
+    expiresAt: string(datetime),
+    cloudProjectNumber: optional(string(pattern(/^[0-9]{1,20}$/))),
+}));
+export const appAttestKeyResponseCheck = exact()(strictObject({ keyId: string(pattern(APP_ATTEST_KEY_ID)) }));
+export const appAssertionResponseCheck = exact()(strictObject({
+    assertion: string(pattern(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/)),
+    applicationId: string(pattern(/^\S{1,255}$/)),
+    platform: oneOf(APP_ASSERTION_PLATFORMS),
+    expiresAt: string(datetime),
+}));

package/dist/esm/client/index.js

@@ -36,3 +36,5 @@ export { EMAIL_ACCOUNTS_MAX, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_SIGNIN_LINK_TTL_M
 export { BOT_USERNAME_INVALID_MESSAGE, BOT_USERNAME_SUFFIX, NUMERIC_USERNAME_MESSAGE, RESERVED_USERNAMES, RESERVED_USERNAME_MESSAGE, USERNAME_INVALID_MESSAGE, USERNAME_MAX_LENGTH, USERNAME_MIN_LENGTH, USERNAME_PATTERN_SOURCE, applyBotUsernameSuffix, botUsernameCheck, stripDisallowedUsernameCharacters, usernameCheck, usernameCheckForAccountKind, } from './username.js';
 export { userNameCheck } from './userResponse.js';
 export { CLAIMANT_RELATIONSHIPS, CLOSED_CONTENT_CLAIM_STATES, CONTENT_CLAIM_COUNTER_NOTICE_LIMITS, CONTENT_CLAIM_ERROR_CODES, CONTENT_CLAIM_KINDS, CONTENT_CLAIM_LIMITS, CONTENT_CLAIM_REFERENCE_PATTERN, CONTENT_CLAIM_STATES, COUNTER_NOTICE_STATEMENT_VERSION, COUNTER_NOTICE_STATEMENTS, ERASURE_REQUEST_DEADLINE_DAYS, OPEN_CONTENT_CLAIM_STATES, isErasureRequest, isRightsClaim, } from './contentClaims.js';
+export { APP_ASSERTION_CHALLENGE_PURPOSES, APP_ASSERTION_ERROR_CODES, APP_ASSERTION_PLATFORMS, OXY_APP_ASSERTION_AUDIENCE, OXY_APP_ASSERTION_HEADER, OXY_APP_ASSERTION_TTL_SECONDS, OXY_APP_ASSERTION_TYPE, appAssertionChallengeResponseCheck, appAssertionResponseCheck, appAttestKeyResponseCheck, } from './appAssertions.js';
+export * from '../products/one.js';

package/dist/esm/index.js

@@ -180,7 +180,7 @@ PRODUCT_PLAN_STATUSES, productPlanStatusSchema, LIVE_PRODUCT_PLAN_STATUSES, plan
 export { 
 // Economic treatment (I09): derived by the server, never sent by a caller.
 INFERENCE_ECONOMIC_TREATMENTS, inferenceEconomicTreatmentSchema, PROVIDER_COST_SOURCES, providerCostSourceSchema, costCenterUsageSchema, } from './inference/economics.js';
-export { AUTONOMY_LEVELS, CAPABILITY_PACKAGES, autonomyLevelSchema, capabilityPackageSchema, actorRefSchema, executionActorRefSchema, foregroundExecutionAuthorizationInputSchema, resourceRefSchema, toolGrantOverrideSchema, grantLimitSchema, capabilityCatalogBindingSchema, executionAuthorizationRefSchema, capabilityCoordinatorSchema, capabilityTicketRequestSchema, delegationGrantSchema, AGENT_REQUESTER_CEILING_AUTONOMY, agentRequesterCeilingWriteSchema, agentRequesterCeilingSchema, automationTriggerSchema, automationActorSelectionSchema, automationDataFlowSchema, automationDefinitionSchema, capabilityTicketClaimsSchema, invocationPrincipalSchema, policyDecisionSchema, auditResultSchema, auditEventSchema, catalogToolSchema, catalogEventSchema, catalogFeatureSchema, CATALOG_INTERNAL_TRANSPORTS, appCapabilityCatalogSchema, catalogRegistrationSchema, normalizedAppEventSchema, } from './agency.js';
+export { AUTONOMY_LEVELS, CAPABILITY_PACKAGES, autonomyLevelSchema, capabilityPackageSchema, actorRefSchema, executionActorRefSchema, foregroundExecutionAuthorizationInputSchema, resourceRefSchema, toolGrantOverrideSchema, grantLimitSchema, capabilityCatalogBindingSchema, executionAuthorizationRefSchema, capabilityCoordinatorSchema, capabilityTicketRequestSchema, delegationGrantSchema, AGENT_REQUESTER_CEILING_AUTONOMY, agentRequesterCeilingWriteSchema, agentRequesterCeilingSchema, APPLICATION_AGENT_AVAILABILITIES, applicationAgentAvailabilitySchema, applicationAgentWriteSchema, applicationAgentSchema, agentAvailabilitySchema, automationTriggerSchema, automationActorSelectionSchema, automationDataFlowSchema, automationDefinitionSchema, capabilityTicketClaimsSchema, invocationPrincipalSchema, policyDecisionSchema, auditResultSchema, auditEventSchema, catalogToolSchema, catalogEventSchema, catalogFeatureSchema, CATALOG_INTERNAL_TRANSPORTS, appCapabilityCatalogSchema, catalogRegistrationSchema, normalizedAppEventSchema, } from './agency.js';
 export { catalogInvocationPathParameters, catalogInvocationsOverlap, catalogInvocationTemplatesEquivalent, findOverlappingCatalogInvocations, matchCatalogInvocation, resolveCatalogInvocation, } from './capabilityInvocation.js';
 export { emailContextAddressSchema, emailContextMailboxSchema, emailContextMessageSchema, emailAgentContextSchema, } from './emailAgentContext.js';
 export { inboxComposeRequestSchema, inboxDailyBriefRequestSchema, inboxDailyBriefResponseSchema, INBOX_DAILY_BRIEF_SECTIONS, inboxNaturalSearchRequestSchema, inboxMessageInferenceParamsSchema, inboxInferenceTextResponseSchema, inboxNaturalSearchResponseSchema, inboxSmartRepliesResponseSchema, inboxThreadSummaryResponseSchema, inboxInferenceStreamEventSchema, } from './inference/inbox.js';
@@ -208,3 +208,5 @@ export * from './safety.js';
 export { serviceTokenScopesSchema, serviceTokenOptionsSchema, } from './serviceToken.js';
 export * from './applicationRoles.js';
 export * from './contentClaims.js';
+export * from './appAssertions.js';
+export * from './products/one.js';

package/dist/esm/products/one.js

@@ -0,0 +1,137 @@
+export const OXY_ONE_ANNUAL_DISCOUNT = 20;
+export const OXY_ONE_FAMILY_MEMBERS = 6;
+export const OXY_ONE_AUDIENCE_THEMES = {
+    personal: 'one-plans-theme',
+    creator: 'one-creator-theme',
+    business: 'one-professional-theme',
+};
+/** Approved prices and credits; proposed storage capacities for the bundle design.
+ * USD minor units; credits renew monthly even on annual plans. Free 2 GB and Go 20 GB follow
+ * the new product direction; existing backend quotas are not changed here. */
+export const OXY_ONE_PERSONAL_PLANS = {
+    Free: { monthlyPrice: 0, monthlyCredits: 0, creditDiscount: 0, storageGB: 2 },
+    Go: { monthlyPrice: 1500, monthlyCredits: 4000, creditDiscount: 5, storageGB: 20 },
+    Pro: { monthlyPrice: 2999, monthlyCredits: 10000, creditDiscount: 10, storageGB: 100 },
+    Max: { monthlyPrice: 9900, monthlyCredits: 50000, creditDiscount: 15, storageGB: 500 },
+    Ultra: { monthlyPrice: 40000, monthlyCredits: 200000, creditDiscount: 20, storageGB: 2000 },
+};
+/** A family quota belongs to the whole group, never multiplied by member count. */
+export const OXY_ONE_FAMILY_PLANS = {
+    Go: { monthlyPrice: 2500, monthlyCredits: 8000, creditDiscount: 5, storageGB: 40 },
+    Pro: { monthlyPrice: 4900, monthlyCredits: 20000, creditDiscount: 10, storageGB: 200 },
+    Max: { monthlyPrice: 16900, monthlyCredits: 100000, creditDiscount: 15, storageGB: 1000 },
+    Ultra: { monthlyPrice: 59900, monthlyCredits: 300000, creditDiscount: 20, storageGB: 4000 },
+};
+export const OXY_ONE_BUSINESS_PLANS = {
+    Go: {
+        monthlyPrice: 3900,
+        monthlySeatPrice: 900,
+        monthlyCredits: 8000,
+        creditsPerSeat: 2000,
+        creditDiscount: 15,
+        storageGB: 20,
+        storagePerSeatGB: 5,
+    },
+    Pro: {
+        monthlyPrice: 9999,
+        monthlySeatPrice: 1900,
+        monthlyCredits: 25000,
+        creditsPerSeat: 5000,
+        creditDiscount: 25,
+        storageGB: 100,
+        storagePerSeatGB: 10,
+    },
+    Max: {
+        monthlyPrice: 19900,
+        monthlySeatPrice: 2900,
+        monthlyCredits: 60000,
+        creditsPerSeat: 8000,
+        creditDiscount: 30,
+        storageGB: 500,
+        storagePerSeatGB: 25,
+    },
+    Ultra: {
+        monthlyPrice: 59900,
+        monthlySeatPrice: 4900,
+        monthlyCredits: 200000,
+        creditsPerSeat: 15000,
+        creditDiscount: 35,
+        storageGB: 2000,
+        storagePerSeatGB: 50,
+    },
+};
+/** Verification, basic app access and model access are not subscription gates. */
+export const OXY_ONE_CREATOR_PLANS = {
+    Go: { monthlyPrice: 2900, monthlyCredits: 10000, creditDiscount: 10, storageGB: 20 },
+    Pro: { monthlyPrice: 6900, monthlyCredits: 25000, creditDiscount: 15, storageGB: 100 },
+    Max: { monthlyPrice: 14900, monthlyCredits: 60000, creditDiscount: 20, storageGB: 500 },
+    Ultra: { monthlyPrice: 49900, monthlyCredits: 250000, creditDiscount: 25, storageGB: 2000 },
+};
+export function getOnePlans(audience, mode = 'individual') {
+    const plans = audience === 'business'
+        ? OXY_ONE_BUSINESS_PLANS
+        : audience === 'creator'
+            ? OXY_ONE_CREATOR_PLANS
+            : mode === 'family'
+                ? OXY_ONE_FAMILY_PLANS
+                : OXY_ONE_PERSONAL_PLANS;
+    return Object.entries(plans).map(([name, plan]) => ({ name, ...plan }));
+}
+/** Each product owns its tier names; an Oxy One level selects an app subscription.
+ * Bundle inclusion is a proposal and does not activate product entitlements. */
+export const OXY_ONE_APP_SUBSCRIPTIONS = {
+    alia: { name: 'Alia', tiers: { Free: null, Go: 'Go', Pro: 'Pro', Max: 'Max', Ultra: 'Ultra' } },
+    // Product-owned names; these bundle mappings remain a proposal.
+    mention: {
+        name: 'Mention',
+        tiers: { Free: null, Go: 'Plus', Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    mercaria: {
+        name: 'Mercaria',
+        tiers: { Free: null, Go: 'Go', Pro: 'Plus', Max: 'Plus', Ultra: 'Ultra' },
+        creatorTiers: { Free: null, Go: 'Creator', Pro: 'Creator', Max: 'Creator', Ultra: 'Creator' },
+    },
+    noted: { name: 'Noted', tiers: { Free: null, Go: '+', Pro: '+', Max: '+', Ultra: '+' } },
+    clarity: {
+        name: 'Clarity',
+        tiers: { Free: null, Go: null, Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    schedio: {
+        name: 'Schedio',
+        tiers: { Free: null, Go: null, Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    inbox: {
+        name: 'Inbox',
+        tiers: { Free: null, Go: null, Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+    homiio: {
+        name: 'Homiio',
+        tiers: { Free: null, Go: 'Plus', Pro: 'Plus', Max: 'Plus', Ultra: 'Plus' },
+    },
+};
+/** Annual rounding follows the billable base and per-seat line items. */
+export function onePlanQuote(plan, period, seats) {
+    const annual = (value) => Math.round(value * 12 * (1 - OXY_ONE_ANNUAL_DISCOUNT / 100));
+    const baseAnnual = annual(plan.monthlyPrice);
+    const seatAnnual = plan.monthlySeatPrice === undefined ? undefined : annual(plan.monthlySeatPrice);
+    const known = plan.monthlySeatPrice === undefined || seats !== undefined;
+    const totalAnnual = known ? baseAnnual + (seatAnnual ?? 0) * (seats ?? 0) : undefined;
+    return {
+        baseMonthly: period === 'annual' ? Math.round(baseAnnual / 12) : plan.monthlyPrice,
+        seatMonthly: seatAnnual === undefined
+            ? undefined
+            : period === 'annual'
+                ? Math.round(seatAnnual / 12)
+                : plan.monthlySeatPrice,
+        totalMonthly: totalAnnual === undefined
+            ? undefined
+            : period === 'annual'
+                ? Math.round(totalAnnual / 12)
+                : plan.monthlyPrice + (plan.monthlySeatPrice ?? 0) * (seats ?? 0),
+        totalAnnual,
+        storageGB: known ? plan.storageGB + (plan.storagePerSeatGB ?? 0) * (seats ?? 0) : undefined,
+        monthlyCredits: known
+            ? plan.monthlyCredits + (plan.creditsPerSeat ?? 0) * (seats ?? 0)
+            : undefined,
+    };
+}

package/dist/types/agency.d.ts

@@ -533,6 +533,66 @@ export declare const agentRequesterCeilingSchema: z.ZodObject<{
         key: string;
     }[] | undefined;
 }>;
+/**
+ * Where an application's own agent opens (ADR 0044): `anywhere`, or only in
+ * sessions that belong to that application (`own_application`). An agent with
+ * no application row is available anywhere.
+ */
+export declare const APPLICATION_AGENT_AVAILABILITIES: readonly ["anywhere", "own_application"];
+export declare const applicationAgentAvailabilitySchema: z.ZodEnum<["anywhere", "own_application"]>;
+/** What Oxy staff write for one of an application's agents. */
+export declare const applicationAgentWriteSchema: z.ZodObject<{
+    availability: z.ZodEnum<["anywhere", "own_application"]>;
+}, "strict", z.ZodTypeAny, {
+    availability: "anywhere" | "own_application";
+}, {
+    availability: "anywhere" | "own_application";
+}>;
+/** One row of the application registry's agents: an agent is one application's. */
+export declare const applicationAgentSchema: z.ZodObject<{
+    availability: z.ZodEnum<["anywhere", "own_application"]>;
+} & {
+    applicationId: z.ZodString;
+    agentAccountId: z.ZodString;
+    createdByUserId: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    createdAt: string;
+    updatedAt: string;
+    applicationId: string;
+    agentAccountId: string;
+    availability: "anywhere" | "own_application";
+    createdByUserId: string | null;
+}, {
+    createdAt: string;
+    updatedAt: string;
+    applicationId: string;
+    agentAccountId: string;
+    availability: "anywhere" | "own_application";
+    createdByUserId: string | null;
+}>;
+/**
+ * `GET /capabilities/agent-availability/:agentAccountId`: the sessions an agent
+ * is reachable from. `anywhere: false` lists the applications whose sessions
+ * (the session validation answer's `applicationId`) may reach it.
+ */
+export declare const agentAvailabilitySchema: z.ZodDiscriminatedUnion<"anywhere", [z.ZodObject<{
+    anywhere: z.ZodLiteral<true>;
+}, "strict", z.ZodTypeAny, {
+    anywhere: true;
+}, {
+    anywhere: true;
+}>, z.ZodObject<{
+    anywhere: z.ZodLiteral<false>;
+    applicationIds: z.ZodArray<z.ZodString, "many">;
+}, "strict", z.ZodTypeAny, {
+    anywhere: false;
+    applicationIds: string[];
+}, {
+    anywhere: false;
+    applicationIds: string[];
+}>]>;
 export declare const automationTriggerSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"manual">;
 }, "strict", z.ZodTypeAny, {
@@ -3286,5 +3346,9 @@ export type CatalogInternalTransport = (typeof CATALOG_INTERNAL_TRANSPORTS)[numb
 export type AgentRequesterCeilingWrite = z.infer<typeof agentRequesterCeilingWriteSchema>;
 export type AgentRequesterCeiling = z.infer<typeof agentRequesterCeilingSchema>;
 export type AgentRequesterCeilingAutonomy = (typeof AGENT_REQUESTER_CEILING_AUTONOMY)[number];
+export type ApplicationAgentAvailability = (typeof APPLICATION_AGENT_AVAILABILITIES)[number];
+export type ApplicationAgentWrite = z.infer<typeof applicationAgentWriteSchema>;
+export type ApplicationAgent = z.infer<typeof applicationAgentSchema>;
+export type AgentAvailability = z.infer<typeof agentAvailabilitySchema>;
 export type CatalogRegistration = z.infer<typeof catalogRegistrationSchema>;
 export type NormalizedAppEvent = z.infer<typeof normalizedAppEventSchema>;