@oxy.so/core 4.6.0 → 4.9.0

package/dist/cjs/OxyServices.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OxyServices = exports.OXY_API_URL = exports.OXY_CLOUD_URL = void 0;
+const safety_1 = require("./api/safety");
 /**
  * `OxyServices` — the Oxy API client.
  *
@@ -33,6 +34,7 @@ const privacy_1 = require("./api/privacy");
 const notifications_1 = require("./api/notifications");
 const assets_1 = require("./api/assets");
 const identity_1 = require("./api/identity");
+const organizations_1 = require("./api/organizations");
 const accounts_1 = require("./api/accounts");
 const apps_1 = require("./api/apps");
 const linkedAccounts_1 = require("./api/linkedAccounts");
@@ -196,6 +198,16 @@ class OxyServices {
         return this._identity;
     }
     /** The account graph: accounts and their members. */
+    get safety() {
+        if (!this._safety)
+            this._safety = new safety_1.SafetyApi(this.context);
+        return this._safety;
+    }
+    get organizations() {
+        if (!this._organizations)
+            this._organizations = new organizations_1.OrganizationsApi(this.context);
+        return this._organizations;
+    }
     get accounts() {
         if (!this._accounts)
             this._accounts = new accounts_1.AccountsApi(this.context);

package/dist/cjs/api/accounts.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AccountsApi = exports.AccountAgentKeysApi = exports.AccountMembersApi = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_IDS = void 0;
+exports.AccountsApi = exports.AccountInvitationsApi = exports.AccountAgentKeysApi = exports.AccountMembersApi = exports.kindAcceptsAccountCategories = exports.isSelectableAccountCategoryId = exports.isOperatorSwitchTargetKind = exports.isDelegatedActAsEligibleKind = exports.SELECTABLE_ACCOUNT_CATEGORY_IDS = exports.MAX_ACCOUNT_CATEGORIES = exports.ACCOUNT_KINDS = exports.ACCOUNT_CATEGORY_IDS = void 0;
 /**
  * `oxy.accounts` — the unified account graph (`/accounts`).
  *
@@ -65,7 +65,8 @@ class AccountMembersApi {
         return res.members ?? [];
     }
     /**
-     * Add a member to an account.
+     * @deprecated The API returns 410. Use accounts.invitations.create with an email.
+     * Access is granted only after recipient confirmation.
      * @param accountId - The account's `_id`.
      * @param data - Target user's username or email and role (never `owner`).
      *   The server resolves `usernameOrEmail` to a personal account; an unknown
@@ -119,10 +120,40 @@ class AccountAgentKeysApi {
     }
 }
 exports.AccountAgentKeysApi = AccountAgentKeysApi;
+/** Consent-based invitations; never cached or queued as offline mutations. */
+class AccountInvitationsApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    async list(accountId) {
+        return (await this.ctx.request('GET', `/accounts/${enc(accountId)}/invitations`, undefined, { cache: false })).invitations;
+    }
+    async create(accountId, data) {
+        return (await this.ctx.request('POST', `/accounts/${enc(accountId)}/invitations`, data, { cache: false })).invitation;
+    }
+    async resend(accountId, id) {
+        return (await this.ctx.request('POST', `/accounts/${enc(accountId)}/invitations/${enc(id)}/resend`, undefined, { cache: false })).invitation;
+    }
+    async cancel(accountId, id) {
+        return this.ctx.request('DELETE', `/accounts/${enc(accountId)}/invitations/${enc(id)}`, undefined, { cache: false });
+    }
+    async preview(token) {
+        return this.ctx.request('POST', '/accounts/invitations/preview', { token }, { cache: false });
+    }
+    /** selectedUserId must equal the currently authenticated personal account. */
+    async accept(token, selectedUserId) {
+        const result = await this.ctx.request('POST', '/accounts/invitations/accept', { token, selectedUserId, confirmed: true }, { cache: false });
+        invalidateAccountMembership(this.ctx, result.accountId);
+        (0, accountCacheSweep_1.evictOxyAccountForestCache)(this.ctx.http);
+        return result;
+    }
+}
+exports.AccountInvitationsApi = AccountInvitationsApi;
 class AccountsApi {
     constructor(ctx) {
         this.ctx = ctx;
         this.members = new AccountMembersApi(ctx);
+        this.invitations = new AccountInvitationsApi(ctx);
         this.agentKeys = new AccountAgentKeysApi(ctx);
     }
     /**

package/dist/cjs/api/billing.js

@@ -22,6 +22,15 @@ class BillingApi {
     constructor(ctx) {
         this.ctx = ctx;
     }
+    async renewProductSubscription(request) {
+        return contracts_1.personalPlanCheckoutResultSchema.parse(await this.ctx.request('POST', '/billing/product-subscriptions/renew', contracts_1.productSubscriptionRenewalRequestSchema.parse(request), { cache: false }));
+    }
+    async startProductPlanCheckout(request) {
+        return contracts_1.personalPlanCheckoutResultSchema.parse(await this.ctx.request('POST', '/billing/checkout/product-plan', contracts_1.productPlanCheckoutRequestSchema.parse(request), { cache: false }));
+    }
+    async productPlans(productId) {
+        return contracts_1.productPlanCatalogueSchema.parse(await this.ctx.request('GET', `/billing/product-plans/${encodeURIComponent(productId)}`, undefined, { cache: false }));
+    }
     async startPersonalPlanCheckout(request) {
         return contracts_1.personalPlanCheckoutResultSchema.parse(await this.ctx.request('POST', '/billing/checkout/personal-plan', contracts_1.personalPlanCheckoutRequestSchema.parse(request), { cache: false }));
     }

package/dist/cjs/api/organizations.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationsApi = void 0;
+const contracts_1 = require("@oxy.so/contracts");
+const identityCacheSweep_1 = require("../utils/identityCacheSweep");
+/** The public canonical organization directory. Claiming changes authority, never identity. */
+class OrganizationsApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    async search(input) {
+        return contracts_1.organizationListSchema.parse(await this.ctx.request('GET', '/organizations', input, { cache: false, skipAuth: true }));
+    }
+    async get(accountId) {
+        return contracts_1.organizationSchema.parse(await this.ctx.request('GET', `/organizations/${encodeURIComponent(accountId)}`, undefined, {
+            cache: false,
+            skipAuth: true,
+        }));
+    }
+    async batch(input) {
+        return contracts_1.organizationBatchSchema.parse(await this.ctx.request('POST', '/organizations/batch', input, {
+            cache: false,
+            skipAuth: true,
+        }));
+    }
+    async create(input) {
+        return contracts_1.organizationSchema.parse(await this.ctx.request('POST', '/organizations', input, { cache: false }));
+    }
+    async update(accountId, input) {
+        const result = contracts_1.organizationSchema.parse(await this.ctx.request('PATCH', `/organizations/${encodeURIComponent(accountId)}`, input, {
+            cache: false,
+        }));
+        (0, identityCacheSweep_1.evictOxyIdentityCache)(this.ctx.http, accountId);
+        return result;
+    }
+    async claim(accountId, input) {
+        return contracts_1.organizationClaimSchema.parse(await this.ctx.request('POST', `/organizations/${encodeURIComponent(accountId)}/claims`, input, { cache: false }));
+    }
+    async myClaims(input = {}) {
+        return contracts_1.organizationClaimListSchema.parse(await this.ctx.request('GET', '/organizations/claims/mine', input, { cache: false }));
+    }
+    async myClaim(claimId) {
+        return contracts_1.organizationClaimDetailSchema.parse(await this.ctx.request('GET', `/organizations/claims/mine/${encodeURIComponent(claimId)}`, undefined, { cache: false }));
+    }
+    async reviewClaims(input = {}) {
+        return contracts_1.organizationClaimListSchema.parse(await this.ctx.request('GET', '/organizations/claims/review', input, { cache: false }));
+    }
+    async reviewClaimDetail(claimId) {
+        return contracts_1.organizationClaimDetailSchema.parse(await this.ctx.request('GET', `/organizations/claims/review/${encodeURIComponent(claimId)}`, undefined, { cache: false }));
+    }
+    async reviewClaim(claimId, input) {
+        const result = contracts_1.organizationClaimSchema.parse(await this.ctx.request('POST', `/organizations/claims/${encodeURIComponent(claimId)}/review`, input, { cache: false }));
+        (0, identityCacheSweep_1.evictOxyIdentityCache)(this.ctx.http, result.accountId);
+        return result;
+    }
+    async importBatch(input) {
+        if (!this.ctx.service?.available)
+            throw new Error('Organization batch import requires an OxyServer service identity');
+        return contracts_1.organizationImportBatchResultSchema.parse(await this.ctx.service.request('POST', '/organizations/external/batch', input, {
+            cache: false,
+        }));
+    }
+    async importExternal(input) {
+        return contracts_1.organizationExternalSchema.parse(await this.ctx.request('POST', '/organizations/external', input, { cache: false }));
+    }
+    async resolveExternal(input) {
+        return contracts_1.organizationExternalResolutionSchema.parse(await this.ctx.request('GET', `/organizations/external/${encodeURIComponent(input.namespace)}/${encodeURIComponent(input.externalId)}`, undefined, { cache: false }));
+    }
+    async curate(accountId, input) {
+        const result = contracts_1.organizationCurationResultSchema.parse(await this.ctx.request('POST', `/organizations/${encodeURIComponent(accountId)}/curation`, input, { cache: false }));
+        (0, identityCacheSweep_1.evictOxyIdentityCache)(this.ctx.http, accountId);
+        return result;
+    }
+    async merge(accountId, input) {
+        const result = contracts_1.organizationSchema.parse(await this.ctx.request('POST', `/organizations/${encodeURIComponent(accountId)}/merge`, input, { cache: false }));
+        (0, identityCacheSweep_1.evictOxyIdentityCache)(this.ctx.http, accountId);
+        (0, identityCacheSweep_1.evictOxyIdentityCache)(this.ctx.http, result.accountId);
+        return result;
+    }
+    async *iterate(input) {
+        let cursor = input.cursor;
+        const seen = new Set();
+        do {
+            const page = await this.search({ ...input, cursor });
+            yield* page.items;
+            cursor = page.nextCursor ?? undefined;
+            if (cursor && seen.has(cursor))
+                throw new Error('Organization directory repeated a cursor');
+            if (cursor)
+                seen.add(cursor);
+        } while (cursor);
+    }
+}
+exports.OrganizationsApi = OrganizationsApi;

package/dist/cjs/api/safety.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SafetyApi = void 0;
+const contracts_1 = require("@oxy.so/contracts");
+class SafetyApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    /** Server callers must explicitly supply the incoming user bearer or null for anonymous access. */
+    async profileAccess(input, options) {
+        if (this.ctx.service && options === undefined)
+            throw new Error('Server profile access requires an explicit requester bearer or null');
+        return contracts_1.profileAccessDecisionSchema.parse(await this.ctx.request('GET', '/safety/profile-access', contracts_1.profileAccessInputSchema.parse(input), {
+            cache: false,
+            ...(options
+                ? {
+                    skipAuth: true,
+                    headers: options.accessToken
+                        ? { Authorization: `Bearer ${options.accessToken}` }
+                        : {},
+                }
+                : {}),
+        }));
+    }
+}
+exports.SafetyApi = SafetyApi;

package/dist/cjs/i18n/locales/en-US.js

@@ -1,6 +1,67 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const dict = {
+    organizationDirectory: {
+        invalidName: 'Use a plain-text organization name (up to 300 characters).',
+        review: {
+            title: 'Review organization access requests',
+            forbidden: 'This action requires current staff authorization.',
+            empty: 'No requests are waiting for review.',
+            hint: 'Review the supporting evidence independently. Approval grants management access to the existing organization account.',
+            independent: 'Another reviewer must decide your own request.',
+            evidence: 'Review evidence reference',
+            approved: 'Approve access',
+            rejected: 'Reject request',
+            conflict: 'This request or organization changed. Refresh the queue before making another decision.',
+            failed: 'The review could not be saved. Your decision has not been confirmed.',
+        },
+        title: 'Organization directory',
+        search: 'Find your organization',
+        searchHint: 'Find an existing organization before creating an account. Its identity is shared across Oxy apps.',
+        empty: 'No organizations found.',
+        retry: 'Try again',
+        loadMore: 'Show more',
+        failed: 'Could not load the organization directory.',
+        unclaimed: 'Unclaimed',
+        claimed: 'Managed organization',
+        inactive: 'Inactive',
+        newAccount: 'Create a new organization account',
+        newAccountHint: 'Create and manage a new organization. Choose an existing entry if your organization is already listed.',
+        addDirectory: 'Add to directory',
+        directoryHint: 'This creates a shared, unclaimed entry. It does not give you access to manage the organization.',
+        added: 'Organization added to the directory',
+        back: 'Back to search',
+        type: 'Organization type',
+        types: {
+            business: 'Business',
+            nonprofit: 'Nonprofit',
+            public_body: 'Public body',
+            community: 'Community',
+            other: 'Other',
+        },
+        name: 'Organization name',
+        legalName: 'Legal name',
+        website: 'Website',
+        country: 'Country code',
+        save: 'Save organization',
+        saved: 'Organization updated',
+        invalid: 'Check the organization details. Use a complete website URL and a two-letter country code.',
+        saveFailed: 'Could not save the organization. Try again.',
+        claim: 'Request management access',
+        claimHint: 'Oxy reviews evidence of your authority. A request does not grant access or verify your role.',
+        evidence: 'Supporting evidence reference',
+        evidenceHint: 'Provide a reference to your private verification case or supporting records. Only you and reviewers can read it.',
+        claimSent: 'Request submitted for review',
+        claimFailed: 'Could not submit your request. Try again.',
+        claimedHint: 'This organization already has managers. Contact a manager to request access.',
+        requests: 'Organization access requests',
+        pending: 'Pending review',
+        approved: 'Approved',
+        rejected: 'Rejected',
+        requestError: 'Could not load your access requests.',
+        view: 'Organization details',
+        readonly: 'You do not have permission to edit this organization.',
+    },
     signin: {
         title: 'Sign in',
         subtitle: 'Use your Oxy account',
@@ -1375,6 +1436,13 @@ const dict = {
         },
     },
     preferences: {
+        displayCurrency: {
+            label: 'Display currency',
+            saveFailed: 'Could not save display currency. Please try again.',
+            unavailable: 'Equivalent in {{currency}} unavailable',
+            approximate: 'Approx. {{amount}}',
+            estimate: 'Display estimate. The final payable amount is quoted in FAIR at checkout.',
+        },
         title: 'Preferences',
         subtitle: 'Theme, motion, and regional settings',
         sections: {

package/dist/cjs/i18n/locales/es-ES.js

@@ -1,6 +1,67 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const dict = {
+    organizationDirectory: {
+        invalidName: 'Usa un nombre de organización en texto plano (hasta 300 caracteres).',
+        review: {
+            title: 'Revisar solicitudes de acceso a organizaciones',
+            forbidden: 'Esta acción requiere autorización vigente del personal de Oxy.',
+            empty: 'No hay solicitudes pendientes de revisión.',
+            hint: 'Revisa la documentación de forma independiente. La aprobación concede acceso de administración a la cuenta existente.',
+            independent: 'Otro revisor debe decidir sobre tu propia solicitud.',
+            evidence: 'Referencia de la documentación de revisión',
+            approved: 'Aprobar acceso',
+            rejected: 'Rechazar solicitud',
+            conflict: 'La solicitud o la organización ha cambiado. Actualiza la lista antes de tomar otra decisión.',
+            failed: 'No se pudo guardar la revisión. Tu decisión no se ha confirmado.',
+        },
+        title: 'Directorio de organizaciones',
+        search: 'Busca tu organización',
+        searchHint: 'Busca una organización existente antes de crear una cuenta. Su identidad se comparte entre las aplicaciones de Oxy.',
+        empty: 'No se encontraron organizaciones.',
+        retry: 'Reintentar',
+        loadMore: 'Mostrar más',
+        failed: 'No se pudo cargar el directorio de organizaciones.',
+        unclaimed: 'Sin reclamar',
+        claimed: 'Organización administrada',
+        inactive: 'Inactiva',
+        newAccount: 'Crear una nueva cuenta de organización',
+        newAccountHint: 'Crea y administra una organización nueva. Si ya aparece en el directorio, elige la entrada existente.',
+        addDirectory: 'Añadir al directorio',
+        directoryHint: 'Esto crea una entrada compartida sin reclamar. No te da acceso para administrar la organización.',
+        added: 'Organización añadida al directorio',
+        back: 'Volver a la búsqueda',
+        type: 'Tipo de organización',
+        types: {
+            business: 'Empresa',
+            nonprofit: 'Sin ánimo de lucro',
+            public_body: 'Organismo público',
+            community: 'Comunidad',
+            other: 'Otro',
+        },
+        name: 'Nombre de la organización',
+        legalName: 'Nombre legal',
+        website: 'Sitio web',
+        country: 'Código de país',
+        save: 'Guardar organización',
+        saved: 'Organización actualizada',
+        invalid: 'Revisa los datos. Usa una URL completa y un código de país de dos letras.',
+        saveFailed: 'No se pudo guardar la organización. Inténtalo de nuevo.',
+        claim: 'Solicitar acceso de administración',
+        claimHint: 'Oxy revisará las pruebas de tu autorización. Una solicitud no concede acceso ni verifica tu cargo.',
+        evidence: 'Referencia de la documentación',
+        evidenceHint: 'Indica una referencia a tu expediente privado de verificación o documentación acreditativa. Solo tú y los revisores podéis verla.',
+        claimSent: 'Solicitud enviada para revisión',
+        claimFailed: 'No se pudo enviar la solicitud. Inténtalo de nuevo.',
+        claimedHint: 'Esta organización ya tiene administradores. Contacta con uno para solicitar acceso.',
+        requests: 'Solicitudes de acceso a organizaciones',
+        pending: 'Pendiente de revisión',
+        approved: 'Aprobada',
+        rejected: 'Rechazada',
+        requestError: 'No se pudieron cargar tus solicitudes.',
+        view: 'Datos de la organización',
+        readonly: 'No tienes permiso para editar esta organización.',
+    },
     signin: {
         title: 'Iniciar sesión',
         subtitle: 'Usa tu cuenta de Oxy',
@@ -1375,6 +1436,13 @@ const dict = {
         },
     },
     preferences: {
+        displayCurrency: {
+            label: 'Moneda mostrada',
+            saveFailed: 'No se ha podido guardar la moneda. Inténtalo de nuevo.',
+            unavailable: 'Equivalencia en {{currency}} no disponible',
+            approximate: 'Aprox. {{amount}}',
+            estimate: 'Importe orientativo. El importe final se cotiza en FAIR al pagar.',
+        },
         title: 'Preferencias',
         subtitle: 'Tema, movimiento y configuración regional',
         sections: {

package/dist/esm/OxyServices.js

@@ -1,3 +1,4 @@
+import { SafetyApi } from './api/safety.js';
 /**
  * `OxyServices` — the Oxy API client.
  *
@@ -30,6 +31,7 @@ import { PrivacyApi } from './api/privacy.js';
 import { NotificationsApi } from './api/notifications.js';
 import { AssetsApi } from './api/assets.js';
 import { IdentityApi } from './api/identity.js';
+import { OrganizationsApi } from './api/organizations.js';
 import { AccountsApi } from './api/accounts.js';
 import { AppsApi } from './api/apps.js';
 import { LinkedAccountsApi } from './api/linkedAccounts.js';
@@ -193,6 +195,16 @@ export class OxyServices {
         return this._identity;
     }
     /** The account graph: accounts and their members. */
+    get safety() {
+        if (!this._safety)
+            this._safety = new SafetyApi(this.context);
+        return this._safety;
+    }
+    get organizations() {
+        if (!this._organizations)
+            this._organizations = new OrganizationsApi(this.context);
+        return this._organizations;
+    }
     get accounts() {
         if (!this._accounts)
             this._accounts = new AccountsApi(this.context);

package/dist/esm/api/accounts.js

@@ -54,7 +54,8 @@ export class AccountMembersApi {
         return res.members ?? [];
     }
     /**
-     * Add a member to an account.
+     * @deprecated The API returns 410. Use accounts.invitations.create with an email.
+     * Access is granted only after recipient confirmation.
      * @param accountId - The account's `_id`.
      * @param data - Target user's username or email and role (never `owner`).
      *   The server resolves `usernameOrEmail` to a personal account; an unknown
@@ -106,10 +107,39 @@ export class AccountAgentKeysApi {
         return agentKeyOperationResultSchema.parse(response);
     }
 }
+/** Consent-based invitations; never cached or queued as offline mutations. */
+export class AccountInvitationsApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    async list(accountId) {
+        return (await this.ctx.request('GET', `/accounts/${enc(accountId)}/invitations`, undefined, { cache: false })).invitations;
+    }
+    async create(accountId, data) {
+        return (await this.ctx.request('POST', `/accounts/${enc(accountId)}/invitations`, data, { cache: false })).invitation;
+    }
+    async resend(accountId, id) {
+        return (await this.ctx.request('POST', `/accounts/${enc(accountId)}/invitations/${enc(id)}/resend`, undefined, { cache: false })).invitation;
+    }
+    async cancel(accountId, id) {
+        return this.ctx.request('DELETE', `/accounts/${enc(accountId)}/invitations/${enc(id)}`, undefined, { cache: false });
+    }
+    async preview(token) {
+        return this.ctx.request('POST', '/accounts/invitations/preview', { token }, { cache: false });
+    }
+    /** selectedUserId must equal the currently authenticated personal account. */
+    async accept(token, selectedUserId) {
+        const result = await this.ctx.request('POST', '/accounts/invitations/accept', { token, selectedUserId, confirmed: true }, { cache: false });
+        invalidateAccountMembership(this.ctx, result.accountId);
+        evictOxyAccountForestCache(this.ctx.http);
+        return result;
+    }
+}
 export class AccountsApi {
     constructor(ctx) {
         this.ctx = ctx;
         this.members = new AccountMembersApi(ctx);
+        this.invitations = new AccountInvitationsApi(ctx);
         this.agentKeys = new AccountAgentKeysApi(ctx);
     }
     /**

package/dist/esm/api/billing.js

@@ -1,4 +1,4 @@
-import { personalPlanCheckoutRequestSchema, personalPlanCheckoutResultSchema, } from '@oxy.so/contracts';
+import { personalPlanCheckoutRequestSchema, productPlanCheckoutRequestSchema, productSubscriptionRenewalRequestSchema, productPlanCatalogueSchema, personalPlanCheckoutResultSchema, } from '@oxy.so/contracts';
 /**
  * `oxy.billing` — the signed-in user's subscription, wallet and payment history.
  *
@@ -19,6 +19,15 @@ export class BillingApi {
     constructor(ctx) {
         this.ctx = ctx;
     }
+    async renewProductSubscription(request) {
+        return personalPlanCheckoutResultSchema.parse(await this.ctx.request('POST', '/billing/product-subscriptions/renew', productSubscriptionRenewalRequestSchema.parse(request), { cache: false }));
+    }
+    async startProductPlanCheckout(request) {
+        return personalPlanCheckoutResultSchema.parse(await this.ctx.request('POST', '/billing/checkout/product-plan', productPlanCheckoutRequestSchema.parse(request), { cache: false }));
+    }
+    async productPlans(productId) {
+        return productPlanCatalogueSchema.parse(await this.ctx.request('GET', `/billing/product-plans/${encodeURIComponent(productId)}`, undefined, { cache: false }));
+    }
     async startPersonalPlanCheckout(request) {
         return personalPlanCheckoutResultSchema.parse(await this.ctx.request('POST', '/billing/checkout/personal-plan', personalPlanCheckoutRequestSchema.parse(request), { cache: false }));
     }

package/dist/esm/api/organizations.js

@@ -0,0 +1,90 @@
+import { organizationSchema, organizationListSchema, organizationBatchSchema, organizationClaimSchema, organizationExternalSchema, organizationExternalResolutionSchema, organizationImportBatchResultSchema, organizationCurationResultSchema, organizationClaimListSchema, organizationClaimDetailSchema, } from '@oxy.so/contracts';
+import { evictOxyIdentityCache } from '../utils/identityCacheSweep.js';
+/** The public canonical organization directory. Claiming changes authority, never identity. */
+export class OrganizationsApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    async search(input) {
+        return organizationListSchema.parse(await this.ctx.request('GET', '/organizations', input, { cache: false, skipAuth: true }));
+    }
+    async get(accountId) {
+        return organizationSchema.parse(await this.ctx.request('GET', `/organizations/${encodeURIComponent(accountId)}`, undefined, {
+            cache: false,
+            skipAuth: true,
+        }));
+    }
+    async batch(input) {
+        return organizationBatchSchema.parse(await this.ctx.request('POST', '/organizations/batch', input, {
+            cache: false,
+            skipAuth: true,
+        }));
+    }
+    async create(input) {
+        return organizationSchema.parse(await this.ctx.request('POST', '/organizations', input, { cache: false }));
+    }
+    async update(accountId, input) {
+        const result = organizationSchema.parse(await this.ctx.request('PATCH', `/organizations/${encodeURIComponent(accountId)}`, input, {
+            cache: false,
+        }));
+        evictOxyIdentityCache(this.ctx.http, accountId);
+        return result;
+    }
+    async claim(accountId, input) {
+        return organizationClaimSchema.parse(await this.ctx.request('POST', `/organizations/${encodeURIComponent(accountId)}/claims`, input, { cache: false }));
+    }
+    async myClaims(input = {}) {
+        return organizationClaimListSchema.parse(await this.ctx.request('GET', '/organizations/claims/mine', input, { cache: false }));
+    }
+    async myClaim(claimId) {
+        return organizationClaimDetailSchema.parse(await this.ctx.request('GET', `/organizations/claims/mine/${encodeURIComponent(claimId)}`, undefined, { cache: false }));
+    }
+    async reviewClaims(input = {}) {
+        return organizationClaimListSchema.parse(await this.ctx.request('GET', '/organizations/claims/review', input, { cache: false }));
+    }
+    async reviewClaimDetail(claimId) {
+        return organizationClaimDetailSchema.parse(await this.ctx.request('GET', `/organizations/claims/review/${encodeURIComponent(claimId)}`, undefined, { cache: false }));
+    }
+    async reviewClaim(claimId, input) {
+        const result = organizationClaimSchema.parse(await this.ctx.request('POST', `/organizations/claims/${encodeURIComponent(claimId)}/review`, input, { cache: false }));
+        evictOxyIdentityCache(this.ctx.http, result.accountId);
+        return result;
+    }
+    async importBatch(input) {
+        if (!this.ctx.service?.available)
+            throw new Error('Organization batch import requires an OxyServer service identity');
+        return organizationImportBatchResultSchema.parse(await this.ctx.service.request('POST', '/organizations/external/batch', input, {
+            cache: false,
+        }));
+    }
+    async importExternal(input) {
+        return organizationExternalSchema.parse(await this.ctx.request('POST', '/organizations/external', input, { cache: false }));
+    }
+    async resolveExternal(input) {
+        return organizationExternalResolutionSchema.parse(await this.ctx.request('GET', `/organizations/external/${encodeURIComponent(input.namespace)}/${encodeURIComponent(input.externalId)}`, undefined, { cache: false }));
+    }
+    async curate(accountId, input) {
+        const result = organizationCurationResultSchema.parse(await this.ctx.request('POST', `/organizations/${encodeURIComponent(accountId)}/curation`, input, { cache: false }));
+        evictOxyIdentityCache(this.ctx.http, accountId);
+        return result;
+    }
+    async merge(accountId, input) {
+        const result = organizationSchema.parse(await this.ctx.request('POST', `/organizations/${encodeURIComponent(accountId)}/merge`, input, { cache: false }));
+        evictOxyIdentityCache(this.ctx.http, accountId);
+        evictOxyIdentityCache(this.ctx.http, result.accountId);
+        return result;
+    }
+    async *iterate(input) {
+        let cursor = input.cursor;
+        const seen = new Set();
+        do {
+            const page = await this.search({ ...input, cursor });
+            yield* page.items;
+            cursor = page.nextCursor ?? undefined;
+            if (cursor && seen.has(cursor))
+                throw new Error('Organization directory repeated a cursor');
+            if (cursor)
+                seen.add(cursor);
+        } while (cursor);
+    }
+}

package/dist/esm/api/safety.js

@@ -0,0 +1,22 @@
+import { profileAccessInputSchema, profileAccessDecisionSchema, } from '@oxy.so/contracts';
+export class SafetyApi {
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    /** Server callers must explicitly supply the incoming user bearer or null for anonymous access. */
+    async profileAccess(input, options) {
+        if (this.ctx.service && options === undefined)
+            throw new Error('Server profile access requires an explicit requester bearer or null');
+        return profileAccessDecisionSchema.parse(await this.ctx.request('GET', '/safety/profile-access', profileAccessInputSchema.parse(input), {
+            cache: false,
+            ...(options
+                ? {
+                    skipAuth: true,
+                    headers: options.accessToken
+                        ? { Authorization: `Bearer ${options.accessToken}` }
+                        : {},
+                }
+                : {}),
+        }));
+    }
+}