@oxy.so/core 7.10.6 → 7.11.0

package/dist/cjs/server/OxyServer.js

@@ -530,6 +530,29 @@ class OxyServer extends OxyServices_1.OxyServices {
             throw new Error('Product grant response attribution differs');
         return snapshot;
     }
+    /**
+     * Register accounts this deployment provisioned as its own users, so they count
+     * toward {@link applicationAccountTotal}. Workload identity only (the
+     * application is the workload's); idempotent; at most
+     * `APPLICATION_ACCOUNT_REGISTRATION_BATCH_MAX` ids per call. Ids that are
+     * unknown, federated, not personal or archived are skipped and not reported.
+     * Returns how many became newly registered.
+     */
+    async registerApplicationAccounts(accountIds) {
+        const body = contracts_1.applicationAccountRegistrationRequestSchema.parse({ accountIds });
+        const answer = await this.serviceRequest('POST', '/application-accounts/self/registrations', body, { cache: false });
+        return contracts_1.applicationAccountRegistrationResponseSchema.parse(answer).registered;
+    }
+    /**
+     * This deployment's eligible registered-account total (local, personal, active,
+     * not being closed), from a bounded server snapshot: read `computedAt`,
+     * `stale` and `exact` before presenting it. Rejects when no total is available
+     * (503 before the first snapshot) — never resolve an unknown total to `0`.
+     */
+    async applicationAccountTotal() {
+        const answer = await this.serviceRequest('GET', '/application-accounts/self/total', undefined, { cache: false });
+        return contracts_1.applicationAccountTotalSchema.parse(answer);
+    }
     async serviceRequest(method, url, data, options = {}) {
         const target = new URL(/^https?:\/\//i.test(url)
             ? url

package/dist/esm/server/OxyServer.js

@@ -1,5 +1,5 @@
 import { OxyRequesterClient } from './requesterClient.js';
-import { serviceIntrospectionSchema, resourceIntrospectionSchema, serviceTokenOptionsSchema, subjectProductAccessQuerySchema, subjectProductGrantSnapshotSchema, } from '@oxy.so/contracts';
+import { applicationAccountRegistrationRequestSchema, applicationAccountRegistrationResponseSchema, applicationAccountTotalSchema, serviceIntrospectionSchema, resourceIntrospectionSchema, serviceTokenOptionsSchema, subjectProductAccessQuerySchema, subjectProductGrantSnapshotSchema, } from '@oxy.so/contracts';
 /**
  * `OxyServer` — the Oxy client for a backend.
  *
@@ -526,6 +526,29 @@ export class OxyServer extends OxyServices {
             throw new Error('Product grant response attribution differs');
         return snapshot;
     }
+    /**
+     * Register accounts this deployment provisioned as its own users, so they count
+     * toward {@link applicationAccountTotal}. Workload identity only (the
+     * application is the workload's); idempotent; at most
+     * `APPLICATION_ACCOUNT_REGISTRATION_BATCH_MAX` ids per call. Ids that are
+     * unknown, federated, not personal or archived are skipped and not reported.
+     * Returns how many became newly registered.
+     */
+    async registerApplicationAccounts(accountIds) {
+        const body = applicationAccountRegistrationRequestSchema.parse({ accountIds });
+        const answer = await this.serviceRequest('POST', '/application-accounts/self/registrations', body, { cache: false });
+        return applicationAccountRegistrationResponseSchema.parse(answer).registered;
+    }
+    /**
+     * This deployment's eligible registered-account total (local, personal, active,
+     * not being closed), from a bounded server snapshot: read `computedAt`,
+     * `stale` and `exact` before presenting it. Rejects when no total is available
+     * (503 before the first snapshot) — never resolve an unknown total to `0`.
+     */
+    async applicationAccountTotal() {
+        const answer = await this.serviceRequest('GET', '/application-accounts/self/total', undefined, { cache: false });
+        return applicationAccountTotalSchema.parse(answer);
+    }
     async serviceRequest(method, url, data, options = {}) {
         const target = new URL(/^https?:\/\//i.test(url)
             ? url

package/dist/types/server/OxyServer.d.ts

@@ -1,6 +1,6 @@
 import { OxyRequesterClient } from './requesterClient';
 import type { RequesterProof } from './requesterContext';
-import { type ResourceIntrospection, type ServiceIntrospection, type ServiceTokenOptions, type SubjectProductAccessQuery, type SubjectProductGrantSnapshot } from '@oxy.so/contracts';
+import { type ApplicationAccountTotal, type ResourceIntrospection, type ServiceIntrospection, type ServiceTokenOptions, type SubjectProductAccessQuery, type SubjectProductGrantSnapshot } from '@oxy.so/contracts';
 import { OxyServices, type OxyConfig } from '../OxyServices';
 import type { HttpMethod } from '../client/context';
 import type { RequestOptions, ResponsePayload } from '../HttpService';
@@ -267,6 +267,22 @@ export declare class OxyServer extends OxyServices {
     productGrantSnapshotForUser(query: SubjectProductAccessQuery, accessToken: string): Promise<SubjectProductGrantSnapshot>;
     /** Offline metering read: the API requires this app's live consent for this exact subject. */
     productGrantSnapshotForService(query: SubjectProductAccessQuery): Promise<SubjectProductGrantSnapshot>;
+    /**
+     * Register accounts this deployment provisioned as its own users, so they count
+     * toward {@link applicationAccountTotal}. Workload identity only (the
+     * application is the workload's); idempotent; at most
+     * `APPLICATION_ACCOUNT_REGISTRATION_BATCH_MAX` ids per call. Ids that are
+     * unknown, federated, not personal or archived are skipped and not reported.
+     * Returns how many became newly registered.
+     */
+    registerApplicationAccounts(accountIds: readonly string[]): Promise<number>;
+    /**
+     * This deployment's eligible registered-account total (local, personal, active,
+     * not being closed), from a bounded server snapshot: read `computedAt`,
+     * `stale` and `exact` before presenting it. Rejects when no total is available
+     * (503 before the first snapshot) — never resolve an unknown total to `0`.
+     */
+    applicationAccountTotal(): Promise<ApplicationAccountTotal>;
     serviceRequest<T>(method: HttpMethod, url: string, data?: unknown, options?: RequestOptions & {
         actAs?: string;
         requesterToken?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/core",
-  "version": "7.10.6",
+  "version": "7.11.0",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -181,7 +181,7 @@
   "dependencies": {
     "@noble/ciphers": "^1.3.0",
     "@noble/hashes": "^1.8.0",
-    "@oxy.so/contracts": "6.2.0",
+    "@oxy.so/contracts": "6.3.0",
     "@oxy.so/protocol": "^1.5.1",
     "@oxy.so/telemetry": "^2.1.0",
     "@scure/bip39": "^1.6.0",

package/src/server/OxyServer.ts

@@ -1,6 +1,10 @@
 import { OxyRequesterClient } from './requesterClient';
 import type { RequesterProof } from './requesterContext';
 import {
+  applicationAccountRegistrationRequestSchema,
+  applicationAccountRegistrationResponseSchema,
+  applicationAccountTotalSchema,
+  type ApplicationAccountTotal,
   type OxySessionRevocationEvent,
   serviceIntrospectionSchema,
   resourceIntrospectionSchema,
@@ -786,6 +790,41 @@ export class OxyServer extends OxyServices {
     return snapshot;
   }
 
+  /**
+   * Register accounts this deployment provisioned as its own users, so they count
+   * toward {@link applicationAccountTotal}. Workload identity only (the
+   * application is the workload's); idempotent; at most
+   * `APPLICATION_ACCOUNT_REGISTRATION_BATCH_MAX` ids per call. Ids that are
+   * unknown, federated, not personal or archived are skipped and not reported.
+   * Returns how many became newly registered.
+   */
+  async registerApplicationAccounts(accountIds: readonly string[]): Promise<number> {
+    const body = applicationAccountRegistrationRequestSchema.parse({ accountIds });
+    const answer = await this.serviceRequest<unknown>(
+      'POST',
+      '/application-accounts/self/registrations',
+      body,
+      { cache: false },
+    );
+    return applicationAccountRegistrationResponseSchema.parse(answer).registered;
+  }
+
+  /**
+   * This deployment's eligible registered-account total (local, personal, active,
+   * not being closed), from a bounded server snapshot: read `computedAt`,
+   * `stale` and `exact` before presenting it. Rejects when no total is available
+   * (503 before the first snapshot) — never resolve an unknown total to `0`.
+   */
+  async applicationAccountTotal(): Promise<ApplicationAccountTotal> {
+    const answer = await this.serviceRequest<unknown>(
+      'GET',
+      '/application-accounts/self/total',
+      undefined,
+      { cache: false },
+    );
+    return applicationAccountTotalSchema.parse(answer);
+  }
+
   async serviceRequest<T>(
     method: HttpMethod,
     url: string,