@oxy.so/contracts 4.7.0 → 4.9.0

package/dist/cjs/products/access.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.subjectProductAccessSchema = exports.productAccessGrantSchema = exports.productOfferSegmentSchema = exports.productSubscriptionSourceSchema = exports.productOfferSchema = exports.productBenefitSchema = exports.subjectProductAccessQuerySchema = exports.productDefinitionSchema = void 0;
+const zod_1 = require("zod");
+const identifiers_1 = require("../inference/identifiers");
+const identifier = zod_1.z.string().min(1).max(160);
+const count = zod_1.z.number().int().nonnegative().safe();
+const period = zod_1.z.object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() }).strict()
+    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'period end must follow start');
+/** Product ownership and audience are registered together; branding grants no trust. */
+exports.productDefinitionSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), id: identifier, ownerAccountId: identifiers_1.oxyAccountIdSchema,
+    applicationId: identifiers_1.oxyApplicationIdSchema,
+}).strict();
+exports.subjectProductAccessQuerySchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), subjectAccountId: identifiers_1.oxyAccountIdSchema, productId: identifier,
+}).strict();
+/** Every quota declares its combination rule; there is no commercial default. */
+exports.productBenefitSchema = zod_1.z.discriminatedUnion('kind', [
+    zod_1.z.object({ kind: zod_1.z.literal('capability'), productId: identifier, key: identifier }).strict(),
+    zod_1.z.object({ kind: zod_1.z.literal('quota'), productId: identifier, key: identifier,
+        unit: identifier, included: count, combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']) }).strict(),
+]);
+/** A version names a frozen offer. An empty bundle grants nothing. */
+exports.productOfferSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), id: identifier, version: zod_1.z.number().int().positive().safe(),
+    kind: zod_1.z.enum(['individual', 'bundle']), benefits: zod_1.z.array(exports.productBenefitSchema),
+}).strict().refine(value => value.kind === 'bundle' || new Set(value.benefits.map(benefit => benefit.productId)).size <= 1, 'individual offers cannot cover multiple products');
+exports.productSubscriptionSourceSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), id: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, payerAccountId: identifiers_1.oxyAccountIdSchema,
+    provider: zod_1.z.enum(['stripe', 'peable']), providerSubscriptionId: identifier,
+    status: zod_1.z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
+    period, cancelAtPeriodEnd: zod_1.z.boolean(),
+}).strict();
+/** A frozen paid-period/offer segment; upgrades append, never rewrite it. */
+exports.productOfferSegmentSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), id: identifier, subscriptionId: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, offerId: identifier,
+    offerVersion: zod_1.z.number().int().positive().safe(), origin: zod_1.z.enum(['individual', 'bundle']), period,
+}).strict();
+/** Provenance survives cancellation: deactivate a source, never delete history. */
+exports.productAccessGrantSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), id: identifier, sourceSegmentId: identifier,
+    beneficiaryAccountId: identifiers_1.oxyAccountIdSchema, offerId: identifier,
+    offerVersion: zod_1.z.number().int().positive().safe(),
+    origin: zod_1.z.enum(['individual', 'bundle']), benefit: exports.productBenefitSchema,
+    period, revokedAt: zod_1.z.string().datetime().nullable(),
+}).strict();
+/** Access answers contain no payer, provider reference, price or account balance. */
+exports.subjectProductAccessSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal(1), subjectAccountId: identifiers_1.oxyAccountIdSchema, productId: identifier,
+    evaluatedAt: zod_1.z.string().datetime(),
+    capabilities: zod_1.z.array(zod_1.z.object({ key: identifier, grantIds: zod_1.z.array(identifier) }).strict()),
+    quotas: zod_1.z.array(zod_1.z.object({ key: identifier, unit: identifier, included: count,
+        combination: zod_1.z.enum(['maximum', 'sum', 'exclusive']), grantIds: zod_1.z.array(identifier) }).strict()),
+    conflicts: zod_1.z.array(zod_1.z.object({ key: identifier,
+        reason: zod_1.z.enum(['combination_mismatch', 'unit_mismatch', 'exclusive_overlap', 'unsafe_total']),
+        grantIds: zod_1.z.array(identifier) }).strict()),
+}).strict();

package/dist/cjs/products/billing.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.productSubscriptionCancellationResultSchema = exports.cancelProductSubscriptionSchema = exports.subscriptionCreditGrantsResponseSchema = exports.subscriptionCreditGrantSchema = exports.productSubscriptionsResponseSchema = exports.productSubscriptionSummarySchema = void 0;
+const zod_1 = require("zod");
+const identifiers_1 = require("../inference/identifiers");
+const id = zod_1.z.string().min(1).max(160);
+const name = zod_1.z.string().min(1).max(100);
+const count = zod_1.z.number().int().nonnegative().safe();
+const period = zod_1.z.object({ start: zod_1.z.string().datetime(), end: zod_1.z.string().datetime() }).strict()
+    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'Period end must follow start');
+/** Self-service provenance; no payer/provider identifiers or balances in access metadata. */
+exports.productSubscriptionSummarySchema = zod_1.z.object({ sourceId: id,
+    status: zod_1.z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
+    period, cancelAtPeriodEnd: zod_1.z.boolean(), canCancel: zod_1.z.boolean(),
+    offers: zod_1.z.array(zod_1.z.object({ segmentId: id, offerId: id, offerVersion: zod_1.z.number().int().positive().safe(),
+        displayName: name, origin: zod_1.z.enum(['individual', 'bundle']), period, current: zod_1.z.boolean(),
+        products: zod_1.z.array(zod_1.z.object({ id, displayName: name }).strict()),
+    }).strict()),
+}).strict();
+exports.productSubscriptionsResponseSchema = zod_1.z.object({ subscriptions: zod_1.z.array(exports.productSubscriptionSummarySchema) }).strict();
+exports.subscriptionCreditGrantSchema = zod_1.z.object({ id, invoiceId: id,
+    origin: zod_1.z.enum(['subscription_payment', 'subscription_proration', 'subscription_promotional_grant']),
+    period, granted: count, consumed: count, clawed: count, remaining: count,
+    promotionId: id.nullable(), createdAt: zod_1.z.string().datetime(),
+}).strict().refine(value => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) === BigInt(value.granted), 'Grant conservation differs');
+exports.subscriptionCreditGrantsResponseSchema = zod_1.z.object({ grants: zod_1.z.array(exports.subscriptionCreditGrantSchema) }).strict();
+exports.cancelProductSubscriptionSchema = zod_1.z.object({ sourceId: id, expectedSubjectAccountId: identifiers_1.oxyAccountIdSchema.optional() }).strict();
+/** Remote acceptance is distinct from completed local reconciliation. */
+exports.productSubscriptionCancellationResultSchema = zod_1.z.union([
+    zod_1.z.object({ sourceId: id, cancelAtPeriodEnd: zod_1.z.literal(true) }).strict(),
+    zod_1.z.object({ sourceId: id, reconciliationPending: zod_1.z.literal(true) }).strict(),
+]);

package/dist/cjs/signIn.js

@@ -199,7 +199,7 @@ function isSecondFactorRequired(result) {
  * What a re-verification email code confirms. The code is bound to it: a code
  * asked for one change never authorises another, and the email names it.
  */
-exports.REAUTH_ACTIONS = ['change_password', 'totp', 'link_commons', 'delete_account'];
+exports.REAUTH_ACTIONS = ['change_password', 'totp', 'link_commons', 'delete_account', 'credentials_manage'];
 /** `POST /users/me/reauth/email` */
 exports.reauthEmailStartRequestSchema = zod_1.z.object({ action: zod_1.z.enum(exports.REAUTH_ACTIONS) }).strict();
 /**