@oxyhq/contracts 0.14.2 → 0.15.0

package/dist/cjs/deviceBoot.js

@@ -2,10 +2,11 @@
 /**
  * First-party login result contract.
  *
- * SINGLE SOURCE OF TRUTH for the first-party password login result (2FA arm vs.
- * session arm). The API validates its OUTPUT against this schema; every consumer
- * (`@oxyhq/core`'s auth mixin) validates its INPUT against the same definition,
- * so producer and consumers cannot drift.
+ * SINGLE SOURCE OF TRUTH for the first-party login result (the session arm). The
+ * API validates its OUTPUT against this schema; every consumer (`@oxyhq/core`'s
+ * auth mixin) validates its INPUT against the same definition, so producer and
+ * consumers cannot drift. Sign-in is passkey (WebAuthn) or Commons handoff —
+ * password and 2FA were removed, so the only outcome is a completed session.
  *
  * The device transport is `deviceId` + `deviceSecret` + `POST /session/device/token`
  * (see `deviceSession.ts`). The legacy cookie/bootstrap/refresh-family lanes were
@@ -25,10 +26,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loginResultSchema = void 0;
 const zod_1 = require("zod");
-const loginTwoFactorRequiredSchema = zod_1.z.object({
-    twoFactorRequired: zod_1.z.literal(true),
-    loginToken: zod_1.z.string(),
-});
 const securityAlertSchema = zod_1.z.object({
     message: zod_1.z.string(),
     anomalies: zod_1.z.array(zod_1.z.object({
@@ -50,7 +47,4 @@ const loginSessionResultSchema = zod_1.z.object({
         avatar: zod_1.z.string().optional(),
     }),
 });
-exports.loginResultSchema = zod_1.z.union([
-    loginTwoFactorRequiredSchema,
-    loginSessionResultSchema,
-]);
+exports.loginResultSchema = loginSessionResultSchema;

package/dist/cjs/identity.js

@@ -190,7 +190,7 @@ exports.domainVerificationInstructionsSchema = zod_1.z.object({
     }),
 });
 exports.authMethodEntrySchema = zod_1.z.object({
-    type: zod_1.z.enum(['identity', 'password', 'google', 'apple', 'github', 'webauthn']),
+    type: zod_1.z.enum(['identity', 'webauthn']),
     linkedAt: zod_1.z.union([zod_1.z.string(), zod_1.z.date()]),
     verificationMethodId: zod_1.z.string().optional(),
     credentialId: zod_1.z.string().optional(),