@oxyhq/contracts 0.14.2 → 0.15.0

package/dist/types/deviceBoot.d.ts

@@ -1,10 +1,11 @@
 /**
  * First-party login result contract.
  *
- * SINGLE SOURCE OF TRUTH for the first-party password login result (2FA arm vs.
- * session arm). The API validates its OUTPUT against this schema; every consumer
- * (`@oxyhq/core`'s auth mixin) validates its INPUT against the same definition,
- * so producer and consumers cannot drift.
+ * SINGLE SOURCE OF TRUTH for the first-party login result (the session arm). The
+ * API validates its OUTPUT against this schema; every consumer (`@oxyhq/core`'s
+ * auth mixin) validates its INPUT against the same definition, so producer and
+ * consumers cannot drift. Sign-in is passkey (WebAuthn) or Commons handoff —
+ * password and 2FA were removed, so the only outcome is a completed session.
  *
  * The device transport is `deviceId` + `deviceSecret` + `POST /session/device/token`
  * (see `deviceSession.ts`). The legacy cookie/bootstrap/refresh-family lanes were
@@ -39,18 +40,9 @@ export interface SecurityAlert {
     anomalies: SecurityAlertAnomaly[];
 }
 /**
- * `POST /auth/login` when the account has 2FA enabled: a short-lived login
- * token to be presented at the 2FA challenge, and no session yet.
- */
-export interface LoginTwoFactorRequired {
-    twoFactorRequired: true;
-    loginToken: string;
-}
-/**
- * `POST /auth/login` when authentication completed in one step. Matches the
- * API's `SessionAuthResponse` EXACTLY (`buildSessionAuthResponse`). `user` is the
- * truncated session-user shape the login endpoint emits (NOT the full
- * `userResponseSchema`).
+ * A successful sign-in. Matches the API's `SessionAuthResponse` EXACTLY
+ * (`buildSessionAuthResponse`). `user` is the truncated session-user shape the
+ * sign-in endpoints emit (NOT the full `userResponseSchema`).
  */
 export interface LoginSessionResult {
     sessionId: string;
@@ -77,6 +69,6 @@ export interface LoginSessionResult {
         avatar?: string;
     };
 }
-/** The discriminated outcome of `POST /auth/login`. */
-export type LoginResult = LoginTwoFactorRequired | LoginSessionResult;
+/** The outcome of a successful sign-in — always a completed session. */
+export type LoginResult = LoginSessionResult;
 export declare const loginResultSchema: z.ZodType<LoginResult>;

package/dist/types/identity.d.ts

@@ -275,15 +275,15 @@ export declare const domainVerificationInstructionsSchema: z.ZodObject<{
 export type DomainVerificationInstructions = z.infer<typeof domainVerificationInstructionsSchema>;
 /**
  * One linked authentication method. Mirrors a `User.authMethods[]` entry.
- * `verificationMethodId` is present for `identity` methods (a key) and absent
- * for `password`/social methods, linking the auth method to its DID
- * verification-method fragment. For `webauthn` methods `credentialId` identifies
- * the specific passkey (one entry per registered credential) and `name` is its
- * user-facing label; a passkey is NOT a DID verification method, so it carries
- * no `verificationMethodId` (a passkey-only account stays custodial).
+ * `verificationMethodId` is present for `identity` methods (a key), linking the
+ * auth method to its DID verification-method fragment. For `webauthn` methods
+ * `credentialId` identifies the specific passkey (one entry per registered
+ * credential) and `name` is its user-facing label; a passkey is NOT a DID
+ * verification method, so it carries no `verificationMethodId` (a passkey-only
+ * account stays custodial).
  */
 export interface AuthMethodEntry {
-    type: 'identity' | 'password' | 'google' | 'apple' | 'github' | 'webauthn';
+    type: 'identity' | 'webauthn';
     linkedAt: string | Date;
     verificationMethodId?: string;
     credentialId?: string;

package/dist/types/index.d.ts

@@ -30,7 +30,7 @@ export type { LinkPreviewStatus, LinkPreview, LinkPreviewBatchRequest, LinkPrevi
 export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, deviceTokenMintRequestSchema, deviceTokenMintResponseSchema, deviceHubTicketIssueRequestSchema, deviceHubTicketIssueResponseSchema, deviceHubTicketRedeemRequestSchema, deviceHubTicketRedeemResponseSchema, SESSION_ACCOUNTS_CHANGED_EVENT, sessionAccountsChangedReasonSchema, sessionAccountsChangedEventSchema, } from './deviceSession';
 export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, DeviceTokenMintRequest, DeviceTokenMintResponse, DeviceHubTicketIssueRequest, DeviceHubTicketIssueResponse, DeviceHubTicketRedeemRequest, DeviceHubTicketRedeemResponse, SessionAccountsChangedReason, SessionAccountsChangedEvent, } from './deviceSession';
 export { loginResultSchema, } from './deviceBoot';
-export type { LoginTwoFactorRequired, LoginSessionResult, LoginResult, SecurityAlert, SecurityAlertAnomaly, } from './deviceBoot';
+export type { LoginSessionResult, LoginResult, SecurityAlert, SecurityAlertAnomaly, } from './deviceBoot';
 export { updatePlatformSchema, updateStatusSchema, updateAssetStatusSchema, sha256HexSchema, channelNameSchema, runtimeVersionSchema, rolloutPercentSchema, assetInitItemSchema, assetInitRequestSchema, assetUploadTicketSchema, assetInitResponseSchema, assetCompleteRequestSchema, assetCompleteResultItemSchema, assetCompleteResponseSchema, updateAssetRefSchema, createUpdateRequestSchema, updateSchema, createUpdateResponseSchema, rollbackToEmbeddedEntrySchema, channelSchema, channelListResponseSchema, updateListResponseSchema, rollbackRequestSchema, rollbackToEmbeddedRequestSchema, promoteRequestSchema, updateRolloutPatchSchema, } from './updates';
 export type { UpdatePlatform, UpdateStatus, UpdateAssetStatus, AssetInitItem, AssetInitRequest, AssetUploadTicket, AssetInitResponse, AssetCompleteRequest, AssetCompleteResultItem, AssetCompleteResponse, UpdateAssetRef, CreateUpdateRequest, Update, CreateUpdateResponse, RollbackToEmbeddedEntry, Channel, ChannelListResponse, UpdateListResponse, RollbackRequest, RollbackToEmbeddedRequest, PromoteRequest, UpdateRolloutPatch, } from './updates';
 export { webauthnRegisterOptionsRequestSchema, webauthnLoginOptionsRequestSchema, webauthnRegisterVerifyRequestSchema, webauthnLoginVerifyRequestSchema, } from './webauthn';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/contracts",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",