@oxyhq/contracts 0.13.0 → 0.13.2

package/dist/types/accountGraph.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Account graph wire contracts — organization taxonomy and create-account input.
+ *
+ * `organizationCategory` classifies `kind: 'organization'` accounts (agency,
+ * cooperative, landlord, …) without polluting `User.kind`. Meaningful only when
+ * `kind === 'organization'`.
+ */
+import { z } from 'zod';
+export declare const ORGANIZATION_CATEGORIES: readonly ["agency", "cooperative", "landlord", "other"];
+export type OrganizationCategory = (typeof ORGANIZATION_CATEGORIES)[number];
+export declare const organizationCategorySchema: z.ZodEnum<["agency", "cooperative", "landlord", "other"]>;
+/**
+ * POST /accounts — create a non-personal account under the caller's tree.
+ * `organizationCategory` is accepted only when `kind` is `organization`.
+ */
+export declare const createAccountRequestSchema: z.ZodEffects<z.ZodObject<{
+    parentAccountId: z.ZodOptional<z.ZodString>;
+    kind: z.ZodEnum<["organization", "project", "bot"]>;
+    username: z.ZodString;
+    name: z.ZodOptional<z.ZodObject<{
+        first: z.ZodOptional<z.ZodString>;
+        last: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        first?: string | undefined;
+        last?: string | undefined;
+    }, {
+        first?: string | undefined;
+        last?: string | undefined;
+    }>>;
+    bio: z.ZodOptional<z.ZodString>;
+    avatar: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
+}, "strip", z.ZodTypeAny, {
+    kind: "organization" | "project" | "bot";
+    username: string;
+    parentAccountId?: string | undefined;
+    name?: {
+        first?: string | undefined;
+        last?: string | undefined;
+    } | undefined;
+    bio?: string | undefined;
+    avatar?: string | undefined;
+    description?: string | undefined;
+    organizationCategory?: "agency" | "cooperative" | "landlord" | "other" | undefined;
+}, {
+    kind: "organization" | "project" | "bot";
+    username: string;
+    parentAccountId?: string | undefined;
+    name?: {
+        first?: string | undefined;
+        last?: string | undefined;
+    } | undefined;
+    bio?: string | undefined;
+    avatar?: string | undefined;
+    description?: string | undefined;
+    organizationCategory?: "agency" | "cooperative" | "landlord" | "other" | undefined;
+}>, {
+    kind: "organization" | "project" | "bot";
+    username: string;
+    parentAccountId?: string | undefined;
+    name?: {
+        first?: string | undefined;
+        last?: string | undefined;
+    } | undefined;
+    bio?: string | undefined;
+    avatar?: string | undefined;
+    description?: string | undefined;
+    organizationCategory?: "agency" | "cooperative" | "landlord" | "other" | undefined;
+}, {
+    kind: "organization" | "project" | "bot";
+    username: string;
+    parentAccountId?: string | undefined;
+    name?: {
+        first?: string | undefined;
+        last?: string | undefined;
+    } | undefined;
+    bio?: string | undefined;
+    avatar?: string | undefined;
+    description?: string | undefined;
+    organizationCategory?: "agency" | "cooperative" | "landlord" | "other" | undefined;
+}>;
+export type CreateAccountRequest = z.infer<typeof createAccountRequestSchema>;

package/dist/types/deviceSession.d.ts

@@ -270,3 +270,48 @@ export declare const deviceTokenMintResponseSchema: z.ZodObject<{
 }>;
 export type DeviceTokenMintRequest = z.infer<typeof deviceTokenMintRequestSchema>;
 export type DeviceTokenMintResponse = z.infer<typeof deviceTokenMintResponseSchema>;
+/** Request body for `POST /session/device/hub-ticket`. */
+export declare const deviceHubTicketIssueRequestSchema: z.ZodObject<{
+    returnOrigin: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    returnOrigin: string;
+}, {
+    returnOrigin: string;
+}>;
+/** Response from `POST /session/device/hub-ticket`. */
+export declare const deviceHubTicketIssueResponseSchema: z.ZodObject<{
+    ticket: z.ZodString;
+    expiresIn: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    ticket: string;
+    expiresIn: number;
+}, {
+    ticket: string;
+    expiresIn: number;
+}>;
+/** Request body for `POST /session/device/redeem-ticket`. */
+export declare const deviceHubTicketRedeemRequestSchema: z.ZodObject<{
+    ticket: z.ZodString;
+    returnOrigin: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    returnOrigin: string;
+    ticket: string;
+}, {
+    returnOrigin: string;
+    ticket: string;
+}>;
+/** Response from `POST /session/device/redeem-ticket`. */
+export declare const deviceHubTicketRedeemResponseSchema: z.ZodObject<{
+    deviceId: z.ZodString;
+    deviceSecret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    deviceId: string;
+    deviceSecret: string;
+}, {
+    deviceId: string;
+    deviceSecret: string;
+}>;
+export type DeviceHubTicketIssueRequest = z.infer<typeof deviceHubTicketIssueRequestSchema>;
+export type DeviceHubTicketIssueResponse = z.infer<typeof deviceHubTicketIssueResponseSchema>;
+export type DeviceHubTicketRedeemRequest = z.infer<typeof deviceHubTicketRedeemRequestSchema>;
+export type DeviceHubTicketRedeemResponse = z.infer<typeof deviceHubTicketRedeemResponseSchema>;

package/dist/types/identity.d.ts

@@ -82,13 +82,13 @@ export declare const verificationMethodSchema: z.ZodDiscriminatedUnion<"type", [
     controller: z.ZodString;
     publicKeyHex: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     type: "EcdsaSecp256k1VerificationKey2019";
+    id: string;
     controller: string;
     publicKeyHex: string;
 }, {
-    id: string;
     type: "EcdsaSecp256k1VerificationKey2019";
+    id: string;
     controller: string;
     publicKeyHex: string;
 }>, z.ZodObject<{
@@ -97,13 +97,13 @@ export declare const verificationMethodSchema: z.ZodDiscriminatedUnion<"type", [
     controller: z.ZodString;
     publicKeyMultibase: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     type: "Multikey";
+    id: string;
     controller: string;
     publicKeyMultibase: string;
 }, {
-    id: string;
     type: "Multikey";
+    id: string;
     controller: string;
     publicKeyMultibase: string;
 }>]>;

package/dist/types/index.d.ts

@@ -2,19 +2,19 @@
  * @oxyhq/contracts — single source of truth for API request/response contracts.
  *
  * Zod schemas plus their inferred types, shared by the backend (`@oxyhq/api`)
- * and the client SDKs (`@oxyhq/core`, `@oxyhq/auth`, `@oxyhq/services`). The
+ * and the client SDKs (`@oxyhq/core`, `@oxyhq/services`). The
  * producer validates its output and every consumer validates its input against
  * exactly the same definitions, so the wire shape cannot drift.
  *
  * Platform-agnostic — zod is the only runtime dependency. No react/react-native/
  * expo, no `require()` in the ESM build.
  */
+export { ORGANIZATION_CATEGORIES, organizationCategorySchema, createAccountRequestSchema, } from './accountGraph';
+export type { OrganizationCategory, CreateAccountRequest, } from './accountGraph';
 export { userNameSchema, userResponseSchema, userProfileUpdateSchema, currentUserResponseSchema, deviceLinkedSessionSchema, deviceLinkedSessionsResponseSchema, resolveUserId, safeParseContract, } from './userResponse';
 export type { UserNameResponse, UserResponse, UserProfileUpdate, CurrentUserResponseContract, DeviceLinkedSessionResponse, DeviceLinkedSessionsResponseContract, } from './userResponse';
 export { applicationTypeSchema, publicApplicationSchema, sessionStatusSchema, } from './sessionStatus';
 export type { ApplicationTypeContract, PublicApplicationResponse, SessionStatusResponse, } from './sessionStatus';
-export { fedcmTokenPayloadSchema, } from './fedcmToken';
-export type { FedcmTokenPayload, } from './fedcmToken';
 export { recommendationExcludeTypeSchema, recommendationBoostSchema, recommendationSignalWeightsSchema, recommendationRequestSchema, recommendationCountSchema, recommendationItemSchema, recommendationResponseSchema, appEndorsementInputSchema, appInterestInputSchema, appUserSignalIngestSchema, appAffinityEventTypeSchema, appAffinityEventSchema, appAffinityEventsIngestSchema, } from './recommendations';
 export type { RecommendationExcludeType, RecommendationBoost, RecommendationSignalWeights, RecommendationRequest, RecommendationCount, RecommendationItem, RecommendationResponse, AppEndorsementInput, AppInterestInput, AppUserSignalIngest, AppAffinityEventType, AppAffinityEvent, AppAffinityEventsIngest, } from './recommendations';
 export { verificationMethodSchema, didServiceSchema, didDocumentSchema, signedRecordEnvelopeSchema, verifiedDomainSchema, domainVerificationRequestSchema, domainVerificationInstructionsSchema, authMethodEntrySchema, authMethodsResponseSchema, exportAttestationSchema, exportBundleSchema, } from './identity';
@@ -27,7 +27,7 @@ export { publicCardSchema, signedPublicCardSchema, realLifeAttestationRecordSche
 export type { CardTrustTier, PersonhoodStatus, PublicCard, SignedPublicCard, RealLifeAttestationRecord, RealLifeAttestationResult, ValidationVerdict, ValidationRequestStatus, ValidationVerdictRecord, ValidationOpenRequest, ValidationOpenResult, ValidationRequestSummary, ValidationVoteResult, PersonhoodVouchRecord, PersonhoodBreakdown, PersonhoodStatusResult, VouchResult, CredentialStatus, CredentialRecord, VerifiableCredentialResponse, CredentialIssueResult, CredentialListResult, CredentialVerifyResult, } from './civic';
 export { linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchResponseSchema, linkPreviewResponseSchema, } from './links';
 export type { LinkPreviewStatus, LinkPreview, LinkPreviewBatchRequest, LinkPreviewBatchResponse, } from './links';
-export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, } from './deviceSession';
-export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, DeviceTokenMintRequest, DeviceTokenMintResponse, } from './deviceSession';
+export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceHubTicketIssueRequestSchema, deviceHubTicketIssueResponseSchema, deviceHubTicketRedeemRequestSchema, deviceHubTicketRedeemResponseSchema, } from './deviceSession';
+export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, DeviceTokenMintRequest, DeviceTokenMintResponse, DeviceHubTicketIssueRequest, DeviceHubTicketIssueResponse, DeviceHubTicketRedeemRequest, DeviceHubTicketRedeemResponse, } from './deviceSession';
 export { loginResultSchema, } from './deviceBoot';
 export type { LoginTwoFactorRequired, LoginSessionResult, LoginResult, SecurityAlert, SecurityAlertAnomaly, } from './deviceBoot';

package/dist/types/sessionStatus.d.ts

@@ -68,9 +68,9 @@ export declare const publicApplicationSchema: z.ZodObject<{
     scopes: z.ZodArray<z.ZodString, "many">;
     developerName: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     type: "first_party" | "third_party" | "internal" | "system";
     name: string;
+    id: string;
     isOfficial: boolean;
     isInternal: boolean;
     scopes: string[];
@@ -81,9 +81,9 @@ export declare const publicApplicationSchema: z.ZodObject<{
     termsUrl?: string | undefined;
     developerName?: string | undefined;
 }, {
-    id: string;
     type: "first_party" | "third_party" | "internal" | "system";
     name: string;
+    id: string;
     isOfficial: boolean;
     isInternal: boolean;
     scopes: string[];
@@ -132,9 +132,9 @@ export declare const sessionStatusSchema: z.ZodObject<{
         scopes: z.ZodArray<z.ZodString, "many">;
         developerName: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        id: string;
         type: "first_party" | "third_party" | "internal" | "system";
         name: string;
+        id: string;
         isOfficial: boolean;
         isInternal: boolean;
         scopes: string[];
@@ -145,9 +145,9 @@ export declare const sessionStatusSchema: z.ZodObject<{
         termsUrl?: string | undefined;
         developerName?: string | undefined;
     }, {
-        id: string;
         type: "first_party" | "third_party" | "internal" | "system";
         name: string;
+        id: string;
         isOfficial: boolean;
         isInternal: boolean;
         scopes: string[];
@@ -171,9 +171,9 @@ export declare const sessionStatusSchema: z.ZodObject<{
     authorized?: boolean | undefined;
     sessionToken?: string | undefined;
     application?: {
-        id: string;
         type: "first_party" | "third_party" | "internal" | "system";
         name: string;
+        id: string;
         isOfficial: boolean;
         isInternal: boolean;
         scopes: string[];
@@ -193,9 +193,9 @@ export declare const sessionStatusSchema: z.ZodObject<{
     authorized?: boolean | undefined;
     sessionToken?: string | undefined;
     application?: {
-        id: string;
         type: "first_party" | "third_party" | "internal" | "system";
         name: string;
+        id: string;
         isOfficial: boolean;
         isInternal: boolean;
         scopes: string[];

package/dist/types/userResponse.d.ts

@@ -11,7 +11,7 @@
  *
  * This package (`@oxyhq/contracts`) is the dedicated, zero-dependency home for
  * these contracts so the backend (`@oxyhq/api`) and the client SDKs
- * (`@oxyhq/core`, `@oxyhq/auth`, `@oxyhq/services`) can all depend on it without
+ * (`@oxyhq/core`, `@oxyhq/services`) can all depend on it without
  * the backend having to depend on a client SDK to obtain its schemas.
  *
  * Faithful to the producers:
@@ -107,6 +107,11 @@ export declare const userResponseSchema: z.ZodObject<{
      * entry; present only when the account has verified at least one domain.
      */
     verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+    /**
+     * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+     * Absent on personal, project, and bot accounts.
+     */
+    organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
     id: z.ZodOptional<z.ZodString>;
@@ -136,6 +141,11 @@ export declare const userResponseSchema: z.ZodObject<{
      * entry; present only when the account has verified at least one domain.
      */
     verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+    /**
+     * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+     * Absent on personal, project, and bot accounts.
+     */
+    organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
     id: z.ZodOptional<z.ZodString>;
@@ -165,6 +175,11 @@ export declare const userResponseSchema: z.ZodObject<{
      * entry; present only when the account has verified at least one domain.
      */
     verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+    /**
+     * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+     * Absent on personal, project, and bot accounts.
+     */
+    organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
 }, z.ZodTypeAny, "passthrough">>;
 export type UserResponse = z.infer<typeof userResponseSchema>;
 export declare const userProfileUpdateSchema: z.ZodObject<{
@@ -197,14 +212,14 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         url: string;
-        id?: string | undefined;
         description?: string | undefined;
+        id?: string | undefined;
         title?: string | undefined;
         image?: string | undefined;
     }, {
         url: string;
-        id?: string | undefined;
         description?: string | undefined;
+        id?: string | undefined;
         title?: string | undefined;
         image?: string | undefined;
     }>, "many">>;
@@ -243,14 +258,14 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         url: string;
-        id?: string | undefined;
         description?: string | undefined;
+        id?: string | undefined;
         title?: string | undefined;
         image?: string | undefined;
     }, {
         url: string;
-        id?: string | undefined;
         description?: string | undefined;
+        id?: string | undefined;
         title?: string | undefined;
         image?: string | undefined;
     }>, "many">>;
@@ -289,14 +304,14 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         url: string;
-        id?: string | undefined;
         description?: string | undefined;
+        id?: string | undefined;
         title?: string | undefined;
         image?: string | undefined;
     }, {
         url: string;
-        id?: string | undefined;
         description?: string | undefined;
+        id?: string | undefined;
         title?: string | undefined;
         image?: string | undefined;
     }>, "many">>;
@@ -348,6 +363,11 @@ export declare const currentUserResponseSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
         id: z.ZodOptional<z.ZodString>;
@@ -377,6 +397,11 @@ export declare const currentUserResponseSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
         id: z.ZodOptional<z.ZodString>;
@@ -406,17 +431,23 @@ export declare const currentUserResponseSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough">>;
 }, "strip", z.ZodTypeAny, {
     data: {
         name: UserNameResponse;
+        username?: string | undefined;
+        avatar?: string | null | undefined;
+        organizationCategory?: "agency" | "cooperative" | "landlord" | "other" | undefined;
         id?: string | undefined;
         publicKey?: string | undefined;
         did?: string | undefined;
         verifiedDomains?: import("./identity").VerifiedDomain[] | undefined;
         verified?: boolean | undefined;
-        username?: string | undefined;
-        avatar?: string | null | undefined;
         _id?: string | undefined;
         email?: string | undefined;
         phone?: string | undefined;
@@ -430,13 +461,14 @@ export declare const currentUserResponseSchema: z.ZodObject<{
 }, {
     data: {
         name: UserNameResponse;
+        username?: string | undefined;
+        avatar?: string | null | undefined;
+        organizationCategory?: "agency" | "cooperative" | "landlord" | "other" | undefined;
         id?: string | undefined;
         publicKey?: string | undefined;
         did?: string | undefined;
         verifiedDomains?: import("./identity").VerifiedDomain[] | undefined;
         verified?: boolean | undefined;
-        username?: string | undefined;
-        avatar?: string | null | undefined;
         _id?: string | undefined;
         email?: string | undefined;
         phone?: string | undefined;
@@ -487,6 +519,11 @@ export declare const deviceLinkedSessionSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
         id: z.ZodOptional<z.ZodString>;
@@ -516,6 +553,11 @@ export declare const deviceLinkedSessionSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
         id: z.ZodOptional<z.ZodString>;
@@ -545,6 +587,11 @@ export declare const deviceLinkedSessionSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough">>>>;
 }, "strip", z.ZodTypeAny, {
     sessionId: string;
@@ -577,6 +624,11 @@ export declare const deviceLinkedSessionSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough"> | null | undefined;
     isCurrent?: boolean | undefined;
 }, {
@@ -610,6 +662,11 @@ export declare const deviceLinkedSessionSchema: z.ZodObject<{
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough"> | null | undefined;
     isCurrent?: boolean | undefined;
 }>;
@@ -647,6 +704,11 @@ export declare const deviceLinkedSessionsResponseSchema: z.ZodArray<z.ZodObject<
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
         id: z.ZodOptional<z.ZodString>;
@@ -676,6 +738,11 @@ export declare const deviceLinkedSessionsResponseSchema: z.ZodArray<z.ZodObject<
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         /** MongoDB ObjectId as a string. Present on `formatUserResponse` output. */
         id: z.ZodOptional<z.ZodString>;
@@ -705,6 +772,11 @@ export declare const deviceLinkedSessionsResponseSchema: z.ZodArray<z.ZodObject<
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough">>>>;
 }, "strip", z.ZodTypeAny, {
     sessionId: string;
@@ -737,6 +809,11 @@ export declare const deviceLinkedSessionsResponseSchema: z.ZodArray<z.ZodObject<
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough"> | null | undefined;
     isCurrent?: boolean | undefined;
 }, {
@@ -770,6 +847,11 @@ export declare const deviceLinkedSessionsResponseSchema: z.ZodArray<z.ZodObject<
          * entry; present only when the account has verified at least one domain.
          */
         verifiedDomains: z.ZodOptional<z.ZodArray<z.ZodType<import("./identity").VerifiedDomain, z.ZodTypeDef, import("./identity").VerifiedDomain>, "many">>;
+        /**
+         * Real-estate / team taxonomy for `kind: 'organization'` accounts.
+         * Absent on personal, project, and bot accounts.
+         */
+        organizationCategory: z.ZodOptional<z.ZodEnum<["agency", "cooperative", "landlord", "other"]>>;
     }, z.ZodTypeAny, "passthrough"> | null | undefined;
     isCurrent?: boolean | undefined;
 }>, "many">;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/contracts",
-  "version": "0.13.0",
+  "version": "0.13.2",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/dist/cjs/fedcmToken.js

@@ -1,66 +0,0 @@
-"use strict";
-/**
- * Canonical contract for the FedCM ID-token JWT payload.
- *
- * DEAD SINCE THE WAVE-2 FEDCM DELETION (found during the comment sweep, not
- * fixed here — this is a published `@oxyhq/contracts` export, so removing it
- * is a breaking change/major-version decision, out of scope for a comment
- * fix): `POST /fedcm/exchange`, `fedcm.service.exchangeIdToken`, and
- * `packages/auth/server/index.ts`'s `mintSessionForClient` — every consumer
- * and producer this file describes — are all deleted. No current code
- * imports `fedcmTokenPayloadSchema` / `FedcmTokenPayload` outside this
- * package. Flag for a follow-up major-version cleanup.
- *
- * Original doc (historical, describes the now-deleted system):
- * SINGLE SOURCE OF TRUTH for the decoded claims of the HS256 ID token the auth
- * IdP (`auth.oxy.so`) signs and `POST /fedcm/exchange` consumes. The API decodes
- * the JWT, verifies its signature, then validates the resulting claim object
- * against this schema before trusting any field — a malformed payload (e.g. a
- * forged token whose signature happened to match but whose body is the wrong
- * shape) is rejected at the boundary instead of being cast and used.
- *
- * Validation philosophy — match the existing exchange behaviour exactly:
- *  - This schema validates the STRUCTURAL shape of the decoded claims only
- *    (types of the fields, not their presence or business-rule validity).
- *  - `sub` / `aud` / `nonce` / `iss` / `exp` presence + value checks remain in
- *    `fedcm.service.exchangeIdToken`, which returns the specific
- *    `missing_required_fields` / `invalid_issuer` / `token_expired` errors. So
- *    every field is `.optional()` here: a token missing `nonce` must still reach
- *    the `missing_required_fields` branch, not be rejected as a malformed token.
- *  - `.passthrough()` preserves any additional claims the IdP may add without a
- *    coordinated contract bump.
- *
- * Faithful to the producer:
- *  - `packages/auth/server/index.ts` `mintSessionForClient` — builds the
- *    assertion with `iss` (central issuer), `sub` (user id), `aud` (RP origin),
- *    `exp` / `iat` (numeric epoch seconds), and `nonce` (the server-minted,
- *    origin-bound nonce).
- *
- * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
- * `require()`).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fedcmTokenPayloadSchema = void 0;
-const zod_1 = require("zod");
-/**
- * Decoded FedCM ID-token claims. Every field is optional because presence is
- * enforced downstream (see module doc); the schema's job is to guarantee that
- * any present claim has the correct primitive type before it is read.
- */
-exports.fedcmTokenPayloadSchema = zod_1.z
-    .object({
-    iss: zod_1.z.string().optional(),
-    sub: zod_1.z.string().optional(),
-    aud: zod_1.z.string().optional(),
-    exp: zod_1.z.number().optional(),
-    iat: zod_1.z.number().optional(),
-    nonce: zod_1.z.string().optional(),
-    /**
-     * An explicit central deviceId minted by the IdP, threaded through so the
-     * RP session can inherit a unified device id instead of deriving one from
-     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
-     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
-     */
-    deviceId: zod_1.z.string().optional(),
-})
-    .passthrough();