@oxyhq/contracts 0.7.0 → 0.8.0

package/dist/esm/deviceSession.js

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+export const sessionAccountSchema = z.object({
+    accountId: z.string(),
+    sessionId: z.string(),
+    authuser: z.number().int().nonnegative(),
+    operatedByUserId: z.string().optional(),
+});
+export const deviceSessionStateSchema = z.object({
+    deviceId: z.string(),
+    accounts: z.array(sessionAccountSchema),
+    activeAccountId: z.string().nullable(),
+    revision: z.number().int().nonnegative(),
+    updatedAt: z.number(),
+});
+export const activeTokenSchema = z.object({
+    accessToken: z.string(),
+    expiresAt: z.string(),
+});
+export const deviceSessionSyncSchema = z.object({
+    state: deviceSessionStateSchema,
+    activeToken: activeTokenSchema.nullable(),
+});

package/dist/esm/fedcmToken.js

@@ -42,5 +42,12 @@ export const fedcmTokenPayloadSchema = z
     exp: z.number().optional(),
     iat: z.number().optional(),
     nonce: z.string().optional(),
+    /**
+     * An explicit central deviceId minted by the IdP, threaded through so the
+     * RP session can inherit a unified device id instead of deriving one from
+     * the (userId, RP origin) stableDeviceKey. Optional and additive — omitted
+     * tokens fall back to the existing stableDeviceKey/UA-IP derivation.
+     */
+    deviceId: z.string().optional(),
 })
     .passthrough();

package/dist/esm/identity.js

@@ -38,12 +38,27 @@
  * `require()`).
  */
 import { z } from 'zod';
-export const verificationMethodSchema = z.object({
+// The option schemas are left UN-annotated so they keep their concrete
+// `ZodObject` type — `z.discriminatedUnion` requires object options and an
+// explicit `z.ZodType<>` annotation would erase the shape it discriminates on.
+// `z.object` already infers each option's type exactly (id/type/controller +
+// the key field), so the union is structurally `VerificationMethod`.
+const secp256k1VerificationMethodSchema = z.object({
     id: z.string(),
     type: z.literal('EcdsaSecp256k1VerificationKey2019'),
     controller: z.string(),
     publicKeyHex: z.string(),
 });
+const multikeyVerificationMethodSchema = z.object({
+    id: z.string(),
+    type: z.literal('Multikey'),
+    controller: z.string(),
+    publicKeyMultibase: z.string(),
+});
+export const verificationMethodSchema = z.discriminatedUnion('type', [
+    secp256k1VerificationMethodSchema,
+    multikeyVerificationMethodSchema,
+]);
 export const didServiceSchema = z.object({
     id: z.string(),
     type: z.string(),

package/dist/esm/index.js

@@ -40,3 +40,4 @@ credentialRecordSchema, verifiableCredentialResponseSchema, credentialIssueResul
 export { 
 // Schemas
 linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchResponseSchema, linkPreviewResponseSchema, } from './links.js';
+export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, } from './deviceSession.js';