@oxy.so/contracts 4.8.0 → 4.9.0

package/dist/esm/products/access.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { oxyAccountIdSchema, oxyApplicationIdSchema } from '../inference/identifiers.js';
+const identifier = z.string().min(1).max(160);
+const count = z.number().int().nonnegative().safe();
+const period = z.object({ start: z.string().datetime(), end: z.string().datetime() }).strict()
+    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'period end must follow start');
+/** Product ownership and audience are registered together; branding grants no trust. */
+export const productDefinitionSchema = z.object({
+    schemaVersion: z.literal(1), id: identifier, ownerAccountId: oxyAccountIdSchema,
+    applicationId: oxyApplicationIdSchema,
+}).strict();
+export const subjectProductAccessQuerySchema = z.object({
+    schemaVersion: z.literal(1), subjectAccountId: oxyAccountIdSchema, productId: identifier,
+}).strict();
+/** Every quota declares its combination rule; there is no commercial default. */
+export const productBenefitSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('capability'), productId: identifier, key: identifier }).strict(),
+    z.object({ kind: z.literal('quota'), productId: identifier, key: identifier,
+        unit: identifier, included: count, combination: z.enum(['maximum', 'sum', 'exclusive']) }).strict(),
+]);
+/** A version names a frozen offer. An empty bundle grants nothing. */
+export const productOfferSchema = z.object({
+    schemaVersion: z.literal(1), id: identifier, version: z.number().int().positive().safe(),
+    kind: z.enum(['individual', 'bundle']), benefits: z.array(productBenefitSchema),
+}).strict().refine(value => value.kind === 'bundle' || new Set(value.benefits.map(benefit => benefit.productId)).size <= 1, 'individual offers cannot cover multiple products');
+export const productSubscriptionSourceSchema = z.object({
+    schemaVersion: z.literal(1), id: identifier,
+    beneficiaryAccountId: oxyAccountIdSchema, payerAccountId: oxyAccountIdSchema,
+    provider: z.enum(['stripe', 'peable']), providerSubscriptionId: identifier,
+    status: z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
+    period, cancelAtPeriodEnd: z.boolean(),
+}).strict();
+/** A frozen paid-period/offer segment; upgrades append, never rewrite it. */
+export const productOfferSegmentSchema = z.object({
+    schemaVersion: z.literal(1), id: identifier, subscriptionId: identifier,
+    beneficiaryAccountId: oxyAccountIdSchema, offerId: identifier,
+    offerVersion: z.number().int().positive().safe(), origin: z.enum(['individual', 'bundle']), period,
+}).strict();
+/** Provenance survives cancellation: deactivate a source, never delete history. */
+export const productAccessGrantSchema = z.object({
+    schemaVersion: z.literal(1), id: identifier, sourceSegmentId: identifier,
+    beneficiaryAccountId: oxyAccountIdSchema, offerId: identifier,
+    offerVersion: z.number().int().positive().safe(),
+    origin: z.enum(['individual', 'bundle']), benefit: productBenefitSchema,
+    period, revokedAt: z.string().datetime().nullable(),
+}).strict();
+/** Access answers contain no payer, provider reference, price or account balance. */
+export const subjectProductAccessSchema = z.object({
+    schemaVersion: z.literal(1), subjectAccountId: oxyAccountIdSchema, productId: identifier,
+    evaluatedAt: z.string().datetime(),
+    capabilities: z.array(z.object({ key: identifier, grantIds: z.array(identifier) }).strict()),
+    quotas: z.array(z.object({ key: identifier, unit: identifier, included: count,
+        combination: z.enum(['maximum', 'sum', 'exclusive']), grantIds: z.array(identifier) }).strict()),
+    conflicts: z.array(z.object({ key: identifier,
+        reason: z.enum(['combination_mismatch', 'unit_mismatch', 'exclusive_overlap', 'unsafe_total']),
+        grantIds: z.array(identifier) }).strict()),
+}).strict();

package/dist/esm/products/billing.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { oxyAccountIdSchema } from '../inference/identifiers.js';
+const id = z.string().min(1).max(160);
+const name = z.string().min(1).max(100);
+const count = z.number().int().nonnegative().safe();
+const period = z.object({ start: z.string().datetime(), end: z.string().datetime() }).strict()
+    .refine(value => Date.parse(value.end) > Date.parse(value.start), 'Period end must follow start');
+/** Self-service provenance; no payer/provider identifiers or balances in access metadata. */
+export const productSubscriptionSummarySchema = z.object({ sourceId: id,
+    status: z.enum(['active', 'trialing', 'past_due', 'unpaid', 'canceled', 'paused', 'incomplete', 'incomplete_expired']),
+    period, cancelAtPeriodEnd: z.boolean(), canCancel: z.boolean(),
+    offers: z.array(z.object({ segmentId: id, offerId: id, offerVersion: z.number().int().positive().safe(),
+        displayName: name, origin: z.enum(['individual', 'bundle']), period, current: z.boolean(),
+        products: z.array(z.object({ id, displayName: name }).strict()),
+    }).strict()),
+}).strict();
+export const productSubscriptionsResponseSchema = z.object({ subscriptions: z.array(productSubscriptionSummarySchema) }).strict();
+export const subscriptionCreditGrantSchema = z.object({ id, invoiceId: id,
+    origin: z.enum(['subscription_payment', 'subscription_proration', 'subscription_promotional_grant']),
+    period, granted: count, consumed: count, clawed: count, remaining: count,
+    promotionId: id.nullable(), createdAt: z.string().datetime(),
+}).strict().refine(value => BigInt(value.consumed) + BigInt(value.clawed) + BigInt(value.remaining) === BigInt(value.granted), 'Grant conservation differs');
+export const subscriptionCreditGrantsResponseSchema = z.object({ grants: z.array(subscriptionCreditGrantSchema) }).strict();
+export const cancelProductSubscriptionSchema = z.object({ sourceId: id, expectedSubjectAccountId: oxyAccountIdSchema.optional() }).strict();
+/** Remote acceptance is distinct from completed local reconciliation. */
+export const productSubscriptionCancellationResultSchema = z.union([
+    z.object({ sourceId: id, cancelAtPeriodEnd: z.literal(true) }).strict(),
+    z.object({ sourceId: id, reconciliationPending: z.literal(true) }).strict(),
+]);

package/dist/esm/signIn.js

@@ -194,7 +194,7 @@ export function isSecondFactorRequired(result) {
  * What a re-verification email code confirms. The code is bound to it: a code
  * asked for one change never authorises another, and the email names it.
  */
-export const REAUTH_ACTIONS = ['change_password', 'totp', 'link_commons', 'delete_account'];
+export const REAUTH_ACTIONS = ['change_password', 'totp', 'link_commons', 'delete_account', 'credentials_manage'];
 /** `POST /users/me/reauth/email` */
 export const reauthEmailStartRequestSchema = z.object({ action: z.enum(REAUTH_ACTIONS) }).strict();
 /**