@oxyhq/contracts 0.13.2 → 0.14.1

package/dist/esm/deviceSession.js

@@ -69,3 +69,44 @@ export const deviceHubTicketRedeemResponseSchema = z.object({
     deviceId: z.string().min(1),
     deviceSecret: z.string().min(1),
 });
+/* -------------------------------------------------------------------------- */
+/*  Instant cross-app session sync (token-free socket signal)                 */
+/* -------------------------------------------------------------------------- */
+/**
+ * Name of the token-free Socket.IO event emitted to room `user:<userId>` on
+ * every DeviceSession mutation that changes what is signed in for that user.
+ *
+ * This is a pure SIGNAL — it carries NO access token, NO deviceSecret and NO
+ * account bodies. A client that receives it re-fetches its authenticated
+ * session/account state (`GET /session/device/state`, `GET /accounts`). Unlike
+ * `session_state` (scoped to `device:<deviceId>`, i.e. a single origin), this
+ * reaches ALL of a user's connected sockets across their devices/origins so
+ * every Oxy app reflects an add / switch / signout instantly.
+ */
+export const SESSION_ACCOUNTS_CHANGED_EVENT = 'session_accounts_changed';
+/**
+ * Why the signed-in set changed:
+ *  - `login`   — a brand-new session was minted for the user (QR / cross-app authorize)
+ *  - `add`     — an account was registered onto a device set
+ *  - `switch`  — the active account on a device changed
+ *  - `signout` — one or all accounts were signed out of a device
+ *  - `revoke`  — a dead/revoked account was healed out of a device set
+ */
+export const sessionAccountsChangedReasonSchema = z.enum([
+    'login',
+    'add',
+    'switch',
+    'signout',
+    'revoke',
+]);
+/**
+ * Payload of {@link SESSION_ACCOUNTS_CHANGED_EVENT}. `revision` is the mutated
+ * DeviceSession revision for device-scoped reasons (`add`/`switch`/`signout`/
+ * `revoke`); for `login` (no device mutation at emit time) it is `0`. The
+ * payload is deliberately minimal and secret-free — the client refetches.
+ */
+export const sessionAccountsChangedEventSchema = z.object({
+    userId: z.string(),
+    revision: z.number().int().nonnegative(),
+    reason: sessionAccountsChangedReasonSchema,
+});

package/dist/esm/index.js

@@ -38,7 +38,7 @@ credentialRecordSchema, verifiableCredentialResponseSchema, credentialIssueResul
 export { 
 // Schemas
 linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchResponseSchema, linkPreviewResponseSchema, } from './links.js';
-export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceHubTicketIssueRequestSchema, deviceHubTicketIssueResponseSchema, deviceHubTicketRedeemRequestSchema, deviceHubTicketRedeemResponseSchema, } from './deviceSession.js';
+export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceHubTicketIssueRequestSchema, deviceHubTicketIssueResponseSchema, deviceHubTicketRedeemRequestSchema, deviceHubTicketRedeemResponseSchema, SESSION_ACCOUNTS_CHANGED_EVENT, sessionAccountsChangedReasonSchema, sessionAccountsChangedEventSchema, } from './deviceSession.js';
 export { 
 // Schemas
 loginResultSchema, } from './deviceBoot.js';

package/dist/esm/userResponse.js

@@ -52,7 +52,7 @@ export const userNameSchema = z
  *
  * `.passthrough()` keeps the large tail of profile fields
  * (`privacySettings`, `locations`, `links`, `linksMetadata`, `bio`,
- * `description`, `language`, `verified`, timestamps, …) available to callers
+ * `description`, `languages`, `verified`, timestamps, …) available to callers
  * that need them without enumerating every nested shape here — the load-bearing
  * identity/display fields are the ones we pin precisely.
  */
@@ -74,7 +74,13 @@ export const userResponseSchema = z
     color: z.string().nullable().optional(),
     name: userNameSchema,
     verified: z.boolean().optional(),
-    language: z.string().optional(),
+    /**
+     * The account's languages as full BCP-47 locales (`language-REGION`,
+     * e.g. `es-ES`, `en-US`, `pt-BR`), ordered with the PRIMARY (UI) locale
+     * first. `languages[0]` is the primary locale — there is no singular
+     * `language` field.
+     */
+    languages: z.array(z.string()).optional(),
     /**
      * The account's self-sovereign identifier
      * (`did:web:<FEDERATION_DOMAIN>:u:<userId>`). Surfaced as a `User`
@@ -121,7 +127,12 @@ export const userProfileUpdateSchema = z
         id: z.string().optional(),
     }))
         .optional(),
-    language: z.string().optional(),
+    /**
+     * Ordered account locales (`language-REGION`), primary first. Replaces
+     * the eliminated singular `language`; `languages[0]` is the primary UI
+     * locale.
+     */
+    languages: z.array(z.string()).optional(),
     accountExpiresAfterInactivityDays: z.number().nullable().optional(),
     notificationPreferences: z.record(z.unknown()).optional(),
     userPreferences: z.record(z.unknown()).optional(),