@oxyhq/contracts 0.13.0 → 0.13.2

package/dist/esm/accountGraph.js

@@ -0,0 +1,45 @@
+/**
+ * Account graph wire contracts — organization taxonomy and create-account input.
+ *
+ * `organizationCategory` classifies `kind: 'organization'` accounts (agency,
+ * cooperative, landlord, …) without polluting `User.kind`. Meaningful only when
+ * `kind === 'organization'`.
+ */
+import { z } from 'zod';
+export const ORGANIZATION_CATEGORIES = [
+    'agency',
+    'cooperative',
+    'landlord',
+    'other',
+];
+export const organizationCategorySchema = z.enum(ORGANIZATION_CATEGORIES);
+const accountNameSchema = z
+    .object({
+    first: z.string().trim().max(100).optional(),
+    last: z.string().trim().max(100).optional(),
+})
+    .optional();
+/**
+ * POST /accounts — create a non-personal account under the caller's tree.
+ * `organizationCategory` is accepted only when `kind` is `organization`.
+ */
+export const createAccountRequestSchema = z
+    .object({
+    parentAccountId: z.string().trim().min(1).optional(),
+    kind: z.enum(['organization', 'project', 'bot']),
+    username: z.string().trim().min(1).max(100),
+    name: accountNameSchema,
+    bio: z.string().trim().max(500).optional(),
+    avatar: z.string().optional(),
+    description: z.string().trim().max(1000).optional(),
+    organizationCategory: organizationCategorySchema.optional(),
+})
+    .superRefine((data, ctx) => {
+    if (data.organizationCategory !== undefined && data.kind !== 'organization') {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'organizationCategory applies only when kind is organization',
+            path: ['organizationCategory'],
+        });
+    }
+});

package/dist/esm/deviceSession.js

@@ -47,3 +47,25 @@ export const deviceTokenMintResponseSchema = z.object({
     nextDeviceSecret: z.string(),
     state: deviceSessionStateSchema,
 });
+/* -------------------------------------------------------------------------- */
+/*  Hub ticket — server-side cross-origin device credential sync               */
+/* -------------------------------------------------------------------------- */
+/** Request body for `POST /session/device/hub-ticket`. */
+export const deviceHubTicketIssueRequestSchema = z.object({
+    returnOrigin: z.string().min(1),
+});
+/** Response from `POST /session/device/hub-ticket`. */
+export const deviceHubTicketIssueResponseSchema = z.object({
+    ticket: z.string().min(1),
+    expiresIn: z.number().int().positive(),
+});
+/** Request body for `POST /session/device/redeem-ticket`. */
+export const deviceHubTicketRedeemRequestSchema = z.object({
+    ticket: z.string().min(1),
+    returnOrigin: z.string().min(1),
+});
+/** Response from `POST /session/device/redeem-ticket`. */
+export const deviceHubTicketRedeemResponseSchema = z.object({
+    deviceId: z.string().min(1),
+    deviceSecret: z.string().min(1),
+});

package/dist/esm/index.js

@@ -2,13 +2,14 @@
  * @oxyhq/contracts — single source of truth for API request/response contracts.
  *
  * Zod schemas plus their inferred types, shared by the backend (`@oxyhq/api`)
- * and the client SDKs (`@oxyhq/core`, `@oxyhq/auth`, `@oxyhq/services`). The
+ * and the client SDKs (`@oxyhq/core`, `@oxyhq/services`). The
  * producer validates its output and every consumer validates its input against
  * exactly the same definitions, so the wire shape cannot drift.
  *
  * Platform-agnostic — zod is the only runtime dependency. No react/react-native/
  * expo, no `require()` in the ESM build.
  */
+export { ORGANIZATION_CATEGORIES, organizationCategorySchema, createAccountRequestSchema, } from './accountGraph.js';
 export { 
 // Schemas
 userNameSchema, userResponseSchema, userProfileUpdateSchema, currentUserResponseSchema, deviceLinkedSessionSchema, deviceLinkedSessionsResponseSchema, 
@@ -19,9 +20,6 @@ export {
 applicationTypeSchema, publicApplicationSchema, sessionStatusSchema, } from './sessionStatus.js';
 export { 
 // Schemas
-fedcmTokenPayloadSchema, } from './fedcmToken.js';
-export { 
-// Schemas
 recommendationExcludeTypeSchema, recommendationBoostSchema, recommendationSignalWeightsSchema, recommendationRequestSchema, recommendationCountSchema, recommendationItemSchema, recommendationResponseSchema, appEndorsementInputSchema, appInterestInputSchema, appUserSignalIngestSchema, appAffinityEventTypeSchema, appAffinityEventSchema, appAffinityEventsIngestSchema, } from './recommendations.js';
 export { 
 // Schemas
@@ -40,7 +38,7 @@ credentialRecordSchema, verifiableCredentialResponseSchema, credentialIssueResul
 export { 
 // Schemas
 linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchResponseSchema, linkPreviewResponseSchema, } from './links.js';
-export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, } from './deviceSession.js';
+export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceHubTicketIssueRequestSchema, deviceHubTicketIssueResponseSchema, deviceHubTicketRedeemRequestSchema, deviceHubTicketRedeemResponseSchema, } from './deviceSession.js';
 export { 
 // Schemas
 loginResultSchema, } from './deviceBoot.js';

package/dist/esm/userResponse.js

@@ -11,7 +11,7 @@
  *
  * This package (`@oxyhq/contracts`) is the dedicated, zero-dependency home for
  * these contracts so the backend (`@oxyhq/api`) and the client SDKs
- * (`@oxyhq/core`, `@oxyhq/auth`, `@oxyhq/services`) can all depend on it without
+ * (`@oxyhq/core`, `@oxyhq/services`) can all depend on it without
  * the backend having to depend on a client SDK to obtain its schemas.
  *
  * Faithful to the producers:
@@ -30,6 +30,7 @@
  */
 import { z } from 'zod';
 import { verifiedDomainSchema } from './identity.js';
+import { organizationCategorySchema } from './accountGraph.js';
 export const userNameSchema = z
     .object({
     first: z.string().optional(),
@@ -85,6 +86,11 @@ export const userResponseSchema = z
      * entry; present only when the account has verified at least one domain.
      */
     verifiedDomains: z.array(verifiedDomainSchema).optional(),
+    /**
+     * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+     * Absent on personal, project, and bot accounts.
+     */
+    organizationCategory: organizationCategorySchema.optional(),
 })
     .passthrough();
 export const userProfileUpdateSchema = z