@oxy.so/core 7.20.0 → 7.21.1

package/dist/cjs/server/safety.js

@@ -47,6 +47,14 @@ class ServerSafetyApi extends safety_1.SafetyApi {
     async deliveryAccessBatch(input) {
         return contracts_1.messageAccessBatchResponseSchema.parse(await this.service('delivery-access-batch', contracts_1.deliveryAccessBatchInputSchema.parse(input)));
     }
+    /**
+     * Whether each actor may notify each recipient — blocks either way,
+     * availability and supervised contact approval — for background delivery
+     * with no human proof. Reviewed `safety:notification-delivery:v1` authority.
+     */
+    async notificationAccessBatch(input) {
+        return contracts_1.notificationAccessBatchResponseSchema.parse(await this.service('notification-access-batch', contracts_1.notificationAccessBatchInputSchema.parse(input)));
+    }
     async contactAccess(input, options) {
         return contracts_1.contactAccessResponseSchema.parse(await this.decision('contact-access', contracts_1.contactAccessInputSchema.parse(input), options));
     }

package/dist/esm/server/safety.js

@@ -9,7 +9,7 @@
  * Server-only, so the Zod schemas parse here; the browser half of the API is
  * `../api/safety.ts`, on the Zod-free checks.
  */
-import { cancelPurchaseSchema, confirmPurchaseSchema, contactAccessInputSchema, contactAccessResponseSchema, contentAccessBatchInputSchema, contentAccessBatchResponseSchema, contentAccessInputSchema, deliveryAccessBatchInputSchema, deliveryAccessInputSchema, messageAccessBatchInputSchema, messageAccessBatchResponseSchema, messageAccessInputSchema, messagingSessionsInputSchema, messagingSessionsResponseSchema, profileAccessBatchInputSchema, profileAccessBatchResponseSchema, profileAccessDecisionSchema, profileAccessInputSchema, publicationPoliciesInputSchema, publicationPoliciesResponseSchema, publicationPolicySchema, purchaseApprovalSchema, purchaseEffectsSchema, reservePurchaseSchema, safetyDecisionSchema, safetyRequesterSchema, } from '@oxy.so/contracts';
+import { cancelPurchaseSchema, confirmPurchaseSchema, contactAccessInputSchema, contactAccessResponseSchema, contentAccessBatchInputSchema, contentAccessBatchResponseSchema, contentAccessInputSchema, deliveryAccessBatchInputSchema, deliveryAccessInputSchema, messageAccessBatchInputSchema, messageAccessBatchResponseSchema, messageAccessInputSchema, messagingSessionsInputSchema, messagingSessionsResponseSchema, notificationAccessBatchInputSchema, notificationAccessBatchResponseSchema, profileAccessBatchInputSchema, profileAccessBatchResponseSchema, profileAccessDecisionSchema, profileAccessInputSchema, publicationPoliciesInputSchema, publicationPoliciesResponseSchema, publicationPolicySchema, purchaseApprovalSchema, purchaseEffectsSchema, reservePurchaseSchema, safetyDecisionSchema, safetyRequesterSchema, } from '@oxy.so/contracts';
 import { SafetyApi } from '../api/safety.js';
 export class ServerSafetyApi extends SafetyApi {
     service(path, input) {
@@ -44,6 +44,14 @@ export class ServerSafetyApi extends SafetyApi {
     async deliveryAccessBatch(input) {
         return messageAccessBatchResponseSchema.parse(await this.service('delivery-access-batch', deliveryAccessBatchInputSchema.parse(input)));
     }
+    /**
+     * Whether each actor may notify each recipient — blocks either way,
+     * availability and supervised contact approval — for background delivery
+     * with no human proof. Reviewed `safety:notification-delivery:v1` authority.
+     */
+    async notificationAccessBatch(input) {
+        return notificationAccessBatchResponseSchema.parse(await this.service('notification-access-batch', notificationAccessBatchInputSchema.parse(input)));
+    }
     async contactAccess(input, options) {
         return contactAccessResponseSchema.parse(await this.decision('contact-access', contactAccessInputSchema.parse(input), options));
     }

package/dist/types/server/safety.d.ts

@@ -9,7 +9,7 @@
  * Server-only, so the Zod schemas parse here; the browser half of the API is
  * `../api/safety.ts`, on the Zod-free checks.
  */
-import { type CancelPurchase, type ConfirmPurchase, type ContactAccessInput, type ContentAccessBatchInput, type ContentAccessInput, type DeliveryAccessBatchInput, type DeliveryAccessInput, type MessageAccessBatchInput, type MessageAccessInput, type MessagingSessionsInput, type ProfileAccessBatchInput, type ProfileAccessInput, type PublicationPoliciesInput, type PurchaseEffects, type ReservePurchase, type SafetyRequester } from '@oxy.so/contracts';
+import { type CancelPurchase, type ConfirmPurchase, type ContactAccessInput, type ContentAccessBatchInput, type ContentAccessInput, type DeliveryAccessBatchInput, type DeliveryAccessInput, type MessageAccessBatchInput, type MessageAccessInput, type MessagingSessionsInput, type NotificationAccessBatchInput, type ProfileAccessBatchInput, type ProfileAccessInput, type PublicationPoliciesInput, type PurchaseEffects, type ReservePurchase, type SafetyRequester } from '@oxy.so/contracts';
 import { SafetyApi } from '../api/safety';
 export declare class ServerSafetyApi extends SafetyApi {
     private service;
@@ -65,6 +65,21 @@ export declare class ServerSafetyApi extends SafetyApi {
             };
         }[];
     }>;
+    /**
+     * Whether each actor may notify each recipient — blocks either way,
+     * availability and supervised contact approval — for background delivery
+     * with no human proof. Reviewed `safety:notification-delivery:v1` authority.
+     */
+    notificationAccessBatch(input: NotificationAccessBatchInput): Promise<{
+        items: {
+            resourceId: string;
+            decision: {
+                allowed: boolean;
+                reason: "blocked" | "private" | "public" | "unavailable" | "owner" | "allowed" | "unsupported_consumer" | "contact_not_approved" | "mature_content" | "unrated_content" | "approval_required";
+                policyVersion: "2";
+            };
+        }[];
+    }>;
     contactAccess(input: ContactAccessInput, options: SafetyRequester): Promise<{
         items: {
             targetAccountId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/core",
-  "version": "7.20.0",
+  "version": "7.21.1",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -181,7 +181,7 @@
   "dependencies": {
     "@noble/ciphers": "^2.4.0",
     "@noble/hashes": "^2.4.0",
-    "@oxy.so/contracts": "6.6.0",
+    "@oxy.so/contracts": "6.8.0",
     "@oxy.so/protocol": "^1.6.1",
     "@oxy.so/telemetry": "^2.1.0",
     "@scure/bip39": "^2.4.0",

package/src/server/safety.ts

@@ -24,6 +24,8 @@ import {
   messageAccessInputSchema,
   messagingSessionsInputSchema,
   messagingSessionsResponseSchema,
+  notificationAccessBatchInputSchema,
+  notificationAccessBatchResponseSchema,
   profileAccessBatchInputSchema,
   profileAccessBatchResponseSchema,
   profileAccessDecisionSchema,
@@ -46,6 +48,7 @@ import {
   type MessageAccessBatchInput,
   type MessageAccessInput,
   type MessagingSessionsInput,
+  type NotificationAccessBatchInput,
   type ProfileAccessBatchInput,
   type ProfileAccessInput,
   type PublicationPoliciesInput,
@@ -116,6 +119,20 @@ export class ServerSafetyApi extends SafetyApi {
     );
   }
 
+  /**
+   * Whether each actor may notify each recipient — blocks either way,
+   * availability and supervised contact approval — for background delivery
+   * with no human proof. Reviewed `safety:notification-delivery:v1` authority.
+   */
+  async notificationAccessBatch(input: NotificationAccessBatchInput) {
+    return notificationAccessBatchResponseSchema.parse(
+      await this.service(
+        'notification-access-batch',
+        notificationAccessBatchInputSchema.parse(input),
+      ),
+    );
+  }
+
   async contactAccess(input: ContactAccessInput, options: SafetyRequester) {
     return contactAccessResponseSchema.parse(
       await this.decision('contact-access', contactAccessInputSchema.parse(input), options),