@oxyhq/contracts 0.13.0 → 0.13.1

package/dist/types/deviceSession.d.ts

@@ -270,3 +270,48 @@ export declare const deviceTokenMintResponseSchema: z.ZodObject<{
 }>;
 export type DeviceTokenMintRequest = z.infer<typeof deviceTokenMintRequestSchema>;
 export type DeviceTokenMintResponse = z.infer<typeof deviceTokenMintResponseSchema>;
+/** Request body for `POST /session/device/hub-ticket`. */
+export declare const deviceHubTicketIssueRequestSchema: z.ZodObject<{
+    returnOrigin: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    returnOrigin: string;
+}, {
+    returnOrigin: string;
+}>;
+/** Response from `POST /session/device/hub-ticket`. */
+export declare const deviceHubTicketIssueResponseSchema: z.ZodObject<{
+    ticket: z.ZodString;
+    expiresIn: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    ticket: string;
+    expiresIn: number;
+}, {
+    ticket: string;
+    expiresIn: number;
+}>;
+/** Request body for `POST /session/device/redeem-ticket`. */
+export declare const deviceHubTicketRedeemRequestSchema: z.ZodObject<{
+    ticket: z.ZodString;
+    returnOrigin: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    returnOrigin: string;
+    ticket: string;
+}, {
+    returnOrigin: string;
+    ticket: string;
+}>;
+/** Response from `POST /session/device/redeem-ticket`. */
+export declare const deviceHubTicketRedeemResponseSchema: z.ZodObject<{
+    deviceId: z.ZodString;
+    deviceSecret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    deviceId: string;
+    deviceSecret: string;
+}, {
+    deviceId: string;
+    deviceSecret: string;
+}>;
+export type DeviceHubTicketIssueRequest = z.infer<typeof deviceHubTicketIssueRequestSchema>;
+export type DeviceHubTicketIssueResponse = z.infer<typeof deviceHubTicketIssueResponseSchema>;
+export type DeviceHubTicketRedeemRequest = z.infer<typeof deviceHubTicketRedeemRequestSchema>;
+export type DeviceHubTicketRedeemResponse = z.infer<typeof deviceHubTicketRedeemResponseSchema>;

package/dist/types/index.d.ts

@@ -2,7 +2,7 @@
  * @oxyhq/contracts — single source of truth for API request/response contracts.
  *
  * Zod schemas plus their inferred types, shared by the backend (`@oxyhq/api`)
- * and the client SDKs (`@oxyhq/core`, `@oxyhq/auth`, `@oxyhq/services`). The
+ * and the client SDKs (`@oxyhq/core`, `@oxyhq/services`). The
  * producer validates its output and every consumer validates its input against
  * exactly the same definitions, so the wire shape cannot drift.
  *
@@ -13,8 +13,6 @@ export { userNameSchema, userResponseSchema, userProfileUpdateSchema, currentUse
 export type { UserNameResponse, UserResponse, UserProfileUpdate, CurrentUserResponseContract, DeviceLinkedSessionResponse, DeviceLinkedSessionsResponseContract, } from './userResponse';
 export { applicationTypeSchema, publicApplicationSchema, sessionStatusSchema, } from './sessionStatus';
 export type { ApplicationTypeContract, PublicApplicationResponse, SessionStatusResponse, } from './sessionStatus';
-export { fedcmTokenPayloadSchema, } from './fedcmToken';
-export type { FedcmTokenPayload, } from './fedcmToken';
 export { recommendationExcludeTypeSchema, recommendationBoostSchema, recommendationSignalWeightsSchema, recommendationRequestSchema, recommendationCountSchema, recommendationItemSchema, recommendationResponseSchema, appEndorsementInputSchema, appInterestInputSchema, appUserSignalIngestSchema, appAffinityEventTypeSchema, appAffinityEventSchema, appAffinityEventsIngestSchema, } from './recommendations';
 export type { RecommendationExcludeType, RecommendationBoost, RecommendationSignalWeights, RecommendationRequest, RecommendationCount, RecommendationItem, RecommendationResponse, AppEndorsementInput, AppInterestInput, AppUserSignalIngest, AppAffinityEventType, AppAffinityEvent, AppAffinityEventsIngest, } from './recommendations';
 export { verificationMethodSchema, didServiceSchema, didDocumentSchema, signedRecordEnvelopeSchema, verifiedDomainSchema, domainVerificationRequestSchema, domainVerificationInstructionsSchema, authMethodEntrySchema, authMethodsResponseSchema, exportAttestationSchema, exportBundleSchema, } from './identity';
@@ -27,7 +25,7 @@ export { publicCardSchema, signedPublicCardSchema, realLifeAttestationRecordSche
 export type { CardTrustTier, PersonhoodStatus, PublicCard, SignedPublicCard, RealLifeAttestationRecord, RealLifeAttestationResult, ValidationVerdict, ValidationRequestStatus, ValidationVerdictRecord, ValidationOpenRequest, ValidationOpenResult, ValidationRequestSummary, ValidationVoteResult, PersonhoodVouchRecord, PersonhoodBreakdown, PersonhoodStatusResult, VouchResult, CredentialStatus, CredentialRecord, VerifiableCredentialResponse, CredentialIssueResult, CredentialListResult, CredentialVerifyResult, } from './civic';
 export { linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchResponseSchema, linkPreviewResponseSchema, } from './links';
 export type { LinkPreviewStatus, LinkPreview, LinkPreviewBatchRequest, LinkPreviewBatchResponse, } from './links';
-export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, } from './deviceSession';
-export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, DeviceTokenMintRequest, DeviceTokenMintResponse, } from './deviceSession';
+export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceHubTicketIssueRequestSchema, deviceHubTicketIssueResponseSchema, deviceHubTicketRedeemRequestSchema, deviceHubTicketRedeemResponseSchema, } from './deviceSession';
+export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, DeviceTokenMintRequest, DeviceTokenMintResponse, DeviceHubTicketIssueRequest, DeviceHubTicketIssueResponse, DeviceHubTicketRedeemRequest, DeviceHubTicketRedeemResponse, } from './deviceSession';
 export { loginResultSchema, } from './deviceBoot';
 export type { LoginTwoFactorRequired, LoginSessionResult, LoginResult, SecurityAlert, SecurityAlertAnomaly, } from './deviceBoot';

package/dist/types/userResponse.d.ts

@@ -11,7 +11,7 @@
  *
  * This package (`@oxyhq/contracts`) is the dedicated, zero-dependency home for
  * these contracts so the backend (`@oxyhq/api`) and the client SDKs
- * (`@oxyhq/core`, `@oxyhq/auth`, `@oxyhq/services`) can all depend on it without
+ * (`@oxyhq/core`, `@oxyhq/services`) can all depend on it without
  * the backend having to depend on a client SDK to obtain its schemas.
  *
  * Faithful to the producers:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/contracts",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/dist/cjs/fedcmToken.js

@@ -1,66 +0,0 @@
-"use strict";
-/**
- * Canonical contract for the FedCM ID-token JWT payload.
- *
- * DEAD SINCE THE WAVE-2 FEDCM DELETION (found during the comment sweep, not
- * fixed here — this is a published `@oxyhq/contracts` export, so removing it
- * is a breaking change/major-version decision, out of scope for a comment
- * fix): `POST /fedcm/exchange`, `fedcm.service.exchangeIdToken`, and
- * `packages/auth/server/index.ts`'s `mintSessionForClient` — every consumer
- * and producer this file describes — are all deleted. No current code
- * imports `fedcmTokenPayloadSchema` / `FedcmTokenPayload` outside this
- * package. Flag for a follow-up major-version cleanup.
- *
- * Original doc (historical, describes the now-deleted system):
- * SINGLE SOURCE OF TRUTH for the decoded claims of the HS256 ID token the auth
- * IdP (`auth.oxy.so`) signs and `POST /fedcm/exchange` consumes. The API decodes
- * the JWT, verifies its signature, then validates the resulting claim object
- * against this schema before trusting any field — a malformed payload (e.g. a
- * forged token whose signature happened to match but whose body is the wrong
- * shape) is rejected at the boundary instead of being cast and used.
- *
- * Validation philosophy — match the existing exchange behaviour exactly:
- *  - This schema validates the STRUCTURAL shape of the decoded claims only
- *    (types of the fields, not their presence or business-rule validity).
- *  - `sub` / `aud` / `nonce` / `iss` / `exp` presence + value checks remain in
- *    `fedcm.service.exchangeIdToken`, which returns the specific
- *    `missing_required_fields` / `invalid_issuer` / `token_expired` errors. So
- *    every field is `.optional()` here: a token missing `nonce` must still reach
- *    the `missing_required_fields` branch, not be rejected as a malformed token.
- *  - `.passthrough()` preserves any additional claims the IdP may add without a
- *    coordinated contract bump.
- *
- * Faithful to the producer:
- *  - `packages/auth/server/index.ts` `mintSessionForClient` — builds the
- *    assertion with `iss` (central issuer), `sub` (user id), `aud` (RP origin),
- *    `exp` / `iat` (numeric epoch seconds), and `nonce` (the server-minted,
- *    origin-bound nonce).
- *
- * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
- * `require()`).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fedcmTokenPayloadSchema = void 0;
-const zod_1 = require("zod");
-/**
- * Decoded FedCM ID-token claims. Every field is optional because presence is
- * enforced downstream (see module doc); the schema's job is to guarantee that
- * any present claim has the correct primitive type before it is read.
- */
-exports.fedcmTokenPayloadSchema = zod_1.z
-    .object({
-    iss: zod_1.z.string().optional(),
-    sub: zod_1.z.string().optional(),
-    aud: zod_1.z.string().optional(),
-    exp: zod_1.z.number().optional(),
-    iat: zod_1.z.number().optional(),
-    nonce: zod_1.z.string().optional(),
-    /**
-     * An explicit central deviceId minted by the IdP, threaded through so the
-     * RP session can inherit a unified device id instead of deriving one from
-     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
-     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
-     */
-    deviceId: zod_1.z.string().optional(),
-})
-    .passthrough();

package/dist/esm/fedcmToken.js

@@ -1,63 +0,0 @@
-/**
- * Canonical contract for the FedCM ID-token JWT payload.
- *
- * DEAD SINCE THE WAVE-2 FEDCM DELETION (found during the comment sweep, not
- * fixed here — this is a published `@oxyhq/contracts` export, so removing it
- * is a breaking change/major-version decision, out of scope for a comment
- * fix): `POST /fedcm/exchange`, `fedcm.service.exchangeIdToken`, and
- * `packages/auth/server/index.ts`'s `mintSessionForClient` — every consumer
- * and producer this file describes — are all deleted. No current code
- * imports `fedcmTokenPayloadSchema` / `FedcmTokenPayload` outside this
- * package. Flag for a follow-up major-version cleanup.
- *
- * Original doc (historical, describes the now-deleted system):
- * SINGLE SOURCE OF TRUTH for the decoded claims of the HS256 ID token the auth
- * IdP (`auth.oxy.so`) signs and `POST /fedcm/exchange` consumes. The API decodes
- * the JWT, verifies its signature, then validates the resulting claim object
- * against this schema before trusting any field — a malformed payload (e.g. a
- * forged token whose signature happened to match but whose body is the wrong
- * shape) is rejected at the boundary instead of being cast and used.
- *
- * Validation philosophy — match the existing exchange behaviour exactly:
- *  - This schema validates the STRUCTURAL shape of the decoded claims only
- *    (types of the fields, not their presence or business-rule validity).
- *  - `sub` / `aud` / `nonce` / `iss` / `exp` presence + value checks remain in
- *    `fedcm.service.exchangeIdToken`, which returns the specific
- *    `missing_required_fields` / `invalid_issuer` / `token_expired` errors. So
- *    every field is `.optional()` here: a token missing `nonce` must still reach
- *    the `missing_required_fields` branch, not be rejected as a malformed token.
- *  - `.passthrough()` preserves any additional claims the IdP may add without a
- *    coordinated contract bump.
- *
- * Faithful to the producer:
- *  - `packages/auth/server/index.ts` `mintSessionForClient` — builds the
- *    assertion with `iss` (central issuer), `sub` (user id), `aud` (RP origin),
- *    `exp` / `iat` (numeric epoch seconds), and `nonce` (the server-minted,
- *    origin-bound nonce).
- *
- * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
- * `require()`).
- */
-import { z } from 'zod';
-/**
- * Decoded FedCM ID-token claims. Every field is optional because presence is
- * enforced downstream (see module doc); the schema's job is to guarantee that
- * any present claim has the correct primitive type before it is read.
- */
-export const fedcmTokenPayloadSchema = z
-    .object({
-    iss: z.string().optional(),
-    sub: z.string().optional(),
-    aud: z.string().optional(),
-    exp: z.number().optional(),
-    iat: z.number().optional(),
-    nonce: z.string().optional(),
-    /**
-     * An explicit central deviceId minted by the IdP, threaded through so the
-     * RP session can inherit a unified device id instead of deriving one from
-     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
-     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
-     */
-    deviceId: z.string().optional(),
-})
-    .passthrough();

package/dist/types/fedcmToken.d.ts

@@ -1,90 +0,0 @@
-/**
- * Canonical contract for the FedCM ID-token JWT payload.
- *
- * DEAD SINCE THE WAVE-2 FEDCM DELETION (found during the comment sweep, not
- * fixed here — this is a published `@oxyhq/contracts` export, so removing it
- * is a breaking change/major-version decision, out of scope for a comment
- * fix): `POST /fedcm/exchange`, `fedcm.service.exchangeIdToken`, and
- * `packages/auth/server/index.ts`'s `mintSessionForClient` — every consumer
- * and producer this file describes — are all deleted. No current code
- * imports `fedcmTokenPayloadSchema` / `FedcmTokenPayload` outside this
- * package. Flag for a follow-up major-version cleanup.
- *
- * Original doc (historical, describes the now-deleted system):
- * SINGLE SOURCE OF TRUTH for the decoded claims of the HS256 ID token the auth
- * IdP (`auth.oxy.so`) signs and `POST /fedcm/exchange` consumes. The API decodes
- * the JWT, verifies its signature, then validates the resulting claim object
- * against this schema before trusting any field — a malformed payload (e.g. a
- * forged token whose signature happened to match but whose body is the wrong
- * shape) is rejected at the boundary instead of being cast and used.
- *
- * Validation philosophy — match the existing exchange behaviour exactly:
- *  - This schema validates the STRUCTURAL shape of the decoded claims only
- *    (types of the fields, not their presence or business-rule validity).
- *  - `sub` / `aud` / `nonce` / `iss` / `exp` presence + value checks remain in
- *    `fedcm.service.exchangeIdToken`, which returns the specific
- *    `missing_required_fields` / `invalid_issuer` / `token_expired` errors. So
- *    every field is `.optional()` here: a token missing `nonce` must still reach
- *    the `missing_required_fields` branch, not be rejected as a malformed token.
- *  - `.passthrough()` preserves any additional claims the IdP may add without a
- *    coordinated contract bump.
- *
- * Faithful to the producer:
- *  - `packages/auth/server/index.ts` `mintSessionForClient` — builds the
- *    assertion with `iss` (central issuer), `sub` (user id), `aud` (RP origin),
- *    `exp` / `iat` (numeric epoch seconds), and `nonce` (the server-minted,
- *    origin-bound nonce).
- *
- * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
- * `require()`).
- */
-import { z } from 'zod';
-/**
- * Decoded FedCM ID-token claims. Every field is optional because presence is
- * enforced downstream (see module doc); the schema's job is to guarantee that
- * any present claim has the correct primitive type before it is read.
- */
-export declare const fedcmTokenPayloadSchema: z.ZodObject<{
-    iss: z.ZodOptional<z.ZodString>;
-    sub: z.ZodOptional<z.ZodString>;
-    aud: z.ZodOptional<z.ZodString>;
-    exp: z.ZodOptional<z.ZodNumber>;
-    iat: z.ZodOptional<z.ZodNumber>;
-    nonce: z.ZodOptional<z.ZodString>;
-    /**
-     * An explicit central deviceId minted by the IdP, threaded through so the
-     * RP session can inherit a unified device id instead of deriving one from
-     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
-     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
-     */
-    deviceId: z.ZodOptional<z.ZodString>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    iss: z.ZodOptional<z.ZodString>;
-    sub: z.ZodOptional<z.ZodString>;
-    aud: z.ZodOptional<z.ZodString>;
-    exp: z.ZodOptional<z.ZodNumber>;
-    iat: z.ZodOptional<z.ZodNumber>;
-    nonce: z.ZodOptional<z.ZodString>;
-    /**
-     * An explicit central deviceId minted by the IdP, threaded through so the
-     * RP session can inherit a unified device id instead of deriving one from
-     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
-     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
-     */
-    deviceId: z.ZodOptional<z.ZodString>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    iss: z.ZodOptional<z.ZodString>;
-    sub: z.ZodOptional<z.ZodString>;
-    aud: z.ZodOptional<z.ZodString>;
-    exp: z.ZodOptional<z.ZodNumber>;
-    iat: z.ZodOptional<z.ZodNumber>;
-    nonce: z.ZodOptional<z.ZodString>;
-    /**
-     * An explicit central deviceId minted by the IdP, threaded through so the
-     * RP session can inherit a unified device id instead of deriving one from
-     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
-     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
-     */
-    deviceId: z.ZodOptional<z.ZodString>;
-}, z.ZodTypeAny, "passthrough">>;
-export type FedcmTokenPayload = z.infer<typeof fedcmTokenPayloadSchema>;