@oxyhq/contracts 0.8.0 → 0.9.1

package/dist/types/deviceBoot.d.ts

@@ -0,0 +1,254 @@
+/**
+ * Device-first bootstrap & token contracts (auth centralization, wave 1).
+ *
+ * SINGLE SOURCE OF TRUTH for the wire shape of the new device-first session
+ * bootstrap: the top-level `#oxy_boot=…` fragment the API hands back from
+ * `GET /auth/device/bootstrap`, the token bundle a boot code / web-session
+ * fast-path exchanges into, the persisted-refresh rotation, the native
+ * device-token issuance, the IdP chooser's device-resolve, and the first-party
+ * password login result (2FA arm vs. session arm). The API validates its OUTPUT
+ * against these schemas; every consumer (`@oxyhq/core`'s device-boot mixin, the
+ * SDK cold boot, the IdP chooser) validates its INPUT against the same
+ * definitions, so producer and consumers cannot drift.
+ *
+ * Design anchors (from the auth-centralization plan):
+ *  - The bootstrap fragment carries NO tokens and NO deviceId — only a
+ *    `state` echo (CSRF), a `reason`, a short-lived single-use `code`, and an
+ *    opaque `deviceToken`. Tokens are obtained by exchanging the `code` at
+ *    `POST /auth/device/exchange` (origin-bound GETDEL burn).
+ *  - Refresh is ONE rotating, single-use family shared by web and native.
+ *  - `loginResult` mirrors what `POST /auth/login` returns today
+ *    (`buildSessionAuthResponse` in the API's `session.controller.ts`): either a
+ *    2FA challenge (`{ twoFactorRequired: true, loginToken }`) or a session
+ *    payload. The session arm matches `SessionAuthResponse` EXACTLY, plus an
+ *    optional `refreshToken` the new server adds for the persisted-refresh lane.
+ *
+ * Nested-object response shapes are declared as explicit `interface`s with the
+ * runtime schema annotated `z.ZodType<Interface>` — the same rationale as
+ * `identity.ts` / `userResponse.ts`: a `z.infer<>` of a nested object schema can
+ * degrade to `{}` under a consumer's `moduleResolution: "node"` (node10), so the
+ * load-bearing shapes are pinned by literal interfaces. Flat request/response
+ * shapes (no nested-object hazard) are inferred via `z.infer<>`.
+ *
+ * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
+ * `require()`).
+ */
+import { z } from 'zod';
+import { type UserResponse } from './userResponse';
+/**
+ * Why the bootstrap hop resolved the way it did.
+ *  - `session` — the device cookie resolved an active session; a `code` is
+ *    present to exchange for tokens.
+ *  - `no_session` — the device is known but has no active session; no `code`.
+ *  - `new_device` — first contact; the cookie was just planted, no session yet.
+ */
+export declare const deviceBootReasonSchema: z.ZodEnum<["session", "no_session", "new_device"]>;
+export type DeviceBootReason = z.infer<typeof deviceBootReasonSchema>;
+export declare const deviceBootFragmentSchema: z.ZodDiscriminatedUnion<"reason", [z.ZodObject<{
+    reason: z.ZodLiteral<"session">;
+    code: z.ZodString;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+    reason: "session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    code: string;
+    reason: "session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>, z.ZodObject<{
+    reason: z.ZodLiteral<"no_session">;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: "no_session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    reason: "no_session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>, z.ZodObject<{
+    reason: z.ZodLiteral<"new_device">;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: "new_device";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    reason: "new_device";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>]>;
+export type DeviceBootFragment = z.infer<typeof deviceBootFragmentSchema>;
+/** Request body for `POST /auth/device/exchange` — the single-use boot code. */
+export declare const deviceExchangeRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+}, {
+    code: string;
+}>;
+export type DeviceExchangeRequest = z.infer<typeof deviceExchangeRequestSchema>;
+/**
+ * The token bundle returned by `POST /auth/device/exchange` and
+ * `POST /auth/device/web-session` — the freshly-minted access token, its
+ * rotating refresh-family head, the owning `sessionId`, and the full canonical
+ * user object. `expiresAt` is an ISO string.
+ */
+export interface AuthTokenBundle {
+    sessionId: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: string;
+    user: UserResponse;
+}
+export declare const authTokenBundleSchema: z.ZodType<AuthTokenBundle>;
+/**
+ * The `*.oxy.so` same-site fast path returns a `reason`-discriminated result:
+ * a full session (the device cookie resolved an active session) OR a
+ * signed-out arm (the device is known / was just planted). BOTH arms carry the
+ * rotated opaque `deviceToken` to persist — the deviceToken is device-level
+ * attribution, not session-level, so it is refreshed even when signed out.
+ *
+ * IMPORTANT: the success arm nests the token bundle under `session` — it is
+ * NOT a bare {@link AuthTokenBundle}. That distinction is load-bearing for the
+ * consumer (`@oxyhq/core`'s cold boot uses `result.session` and persists the
+ * `deviceToken` from the SAME envelope).
+ */
+/**
+ * Success arm: an active session resolved from the same-site device cookie.
+ */
+export interface WebSessionSession {
+    reason: 'session';
+    session: AuthTokenBundle;
+    deviceToken: string;
+}
+/**
+ * Signed-out arm: the device is known (or freshly planted) but has no active
+ * session. Carries only the rotated `deviceToken`.
+ */
+export interface WebSessionNoSession {
+    reason: 'no_session' | 'new_device';
+    deviceToken: string;
+}
+/** The `reason`-discriminated outcome of `POST /auth/device/web-session`. */
+export type WebSessionResult = WebSessionSession | WebSessionNoSession;
+export declare const webSessionResultSchema: z.ZodType<WebSessionResult>;
+/** Request body for `POST /auth/refresh-token` — the current refresh token. */
+export declare const tokenRefreshRequestSchema: z.ZodObject<{
+    refreshToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    refreshToken: string;
+}, {
+    refreshToken: string;
+}>;
+export type TokenRefreshRequest = z.infer<typeof tokenRefreshRequestSchema>;
+/**
+ * Wire shape of `POST /auth/refresh-token`: the rotated (single-use) family —
+ * a new access token, the next refresh token, the new access-token expiry, and
+ * the owning session id. `expiresAt` is an ISO string.
+ */
+export declare const tokenRefreshResponseSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    refreshToken: z.ZodString;
+    expiresAt: z.ZodString;
+    sessionId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    expiresAt: string;
+    accessToken: string;
+    sessionId: string;
+    refreshToken: string;
+}, {
+    expiresAt: string;
+    accessToken: string;
+    sessionId: string;
+    refreshToken: string;
+}>;
+export type TokenRefreshResponse = z.infer<typeof tokenRefreshResponseSchema>;
+/**
+ * Wire shape of `POST /auth/device/token` — issues (or rotates) the opaque
+ * device token for the native channel. The deviceId is taken from the bearer
+ * JWT claims server-side; only the token comes back.
+ */
+export declare const deviceTokenIssueResponseSchema: z.ZodObject<{
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    deviceToken: string;
+}, {
+    deviceToken: string;
+}>;
+export type DeviceTokenIssueResponse = z.infer<typeof deviceTokenIssueResponseSchema>;
+/**
+ * `POST /auth/login` when the account has 2FA enabled: a short-lived login
+ * token to be presented at the 2FA challenge, and no session yet.
+ */
+export interface LoginTwoFactorRequired {
+    twoFactorRequired: true;
+    loginToken: string;
+}
+/**
+ * `POST /auth/login` when authentication completed in one step. Matches the
+ * API's `SessionAuthResponse` EXACTLY (`buildSessionAuthResponse`), plus the
+ * optional `refreshToken` the persisted-refresh lane adds. `user` is the
+ * truncated session-user shape the login endpoint emits (NOT the full
+ * `userResponseSchema`).
+ */
+export interface LoginSessionResult {
+    sessionId: string;
+    deviceId: string;
+    expiresAt: string;
+    accessToken?: string;
+    refreshToken?: string;
+    user: {
+        id: string;
+        username?: string;
+        avatar?: string;
+    };
+}
+/** The discriminated outcome of `POST /auth/login`. */
+export type LoginResult = LoginTwoFactorRequired | LoginSessionResult;
+export declare const loginResultSchema: z.ZodType<LoginResult>;
+/**
+ * Request body for `POST /auth/device/resolve` (X-Oxy-Internal, called by the
+ * IdP chooser) — the device key the chooser read from the first-party
+ * `oxy_device` cookie.
+ */
+export declare const deviceResolveRequestSchema: z.ZodObject<{
+    deviceKey: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    deviceKey: string;
+}, {
+    deviceKey: string;
+}>;
+export type DeviceResolveRequest = z.infer<typeof deviceResolveRequestSchema>;
+/** One account resolved for the IdP chooser from a device's session set. */
+export interface DeviceResolveAccount {
+    user: UserResponse;
+    sessionId: string;
+    accessToken: string;
+    expiresAt: string;
+}
+/**
+ * Wire shape of `POST /auth/device/resolve` — the device's active account id
+ * (or `null` when signed out of all) plus every account signed in on the
+ * device. Replaces the IdP's `/auth/refresh-all` chooser feed.
+ */
+export interface DeviceResolveResponse {
+    activeAccountId: string | null;
+    accounts: DeviceResolveAccount[];
+}
+export declare const deviceResolveResponseSchema: z.ZodType<DeviceResolveResponse>;

package/dist/types/deviceSession.d.ts

@@ -5,14 +5,14 @@ export declare const sessionAccountSchema: z.ZodObject<{
     authuser: z.ZodNumber;
     operatedByUserId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    accountId: string;
-    sessionId: string;
     authuser: number;
+    sessionId: string;
+    accountId: string;
     operatedByUserId?: string | undefined;
 }, {
-    accountId: string;
-    sessionId: string;
     authuser: number;
+    sessionId: string;
+    accountId: string;
     operatedByUserId?: string | undefined;
 }>;
 export declare const deviceSessionStateSchema: z.ZodObject<{
@@ -23,14 +23,14 @@ export declare const deviceSessionStateSchema: z.ZodObject<{
         authuser: z.ZodNumber;
         operatedByUserId: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        accountId: string;
-        sessionId: string;
         authuser: number;
+        sessionId: string;
+        accountId: string;
         operatedByUserId?: string | undefined;
     }, {
-        accountId: string;
-        sessionId: string;
         authuser: number;
+        sessionId: string;
+        accountId: string;
         operatedByUserId?: string | undefined;
     }>, "many">;
     activeAccountId: z.ZodNullable<z.ZodString>;
@@ -38,24 +38,24 @@ export declare const deviceSessionStateSchema: z.ZodObject<{
     updatedAt: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
     updatedAt: number;
-    deviceId: string;
     accounts: {
-        accountId: string;
-        sessionId: string;
         authuser: number;
+        sessionId: string;
+        accountId: string;
         operatedByUserId?: string | undefined;
     }[];
+    deviceId: string;
     activeAccountId: string | null;
     revision: number;
 }, {
     updatedAt: number;
-    deviceId: string;
     accounts: {
-        accountId: string;
-        sessionId: string;
         authuser: number;
+        sessionId: string;
+        accountId: string;
         operatedByUserId?: string | undefined;
     }[];
+    deviceId: string;
     activeAccountId: string | null;
     revision: number;
 }>;
@@ -78,14 +78,14 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
             authuser: z.ZodNumber;
             operatedByUserId: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            accountId: string;
-            sessionId: string;
             authuser: number;
+            sessionId: string;
+            accountId: string;
             operatedByUserId?: string | undefined;
         }, {
-            accountId: string;
-            sessionId: string;
             authuser: number;
+            sessionId: string;
+            accountId: string;
             operatedByUserId?: string | undefined;
         }>, "many">;
         activeAccountId: z.ZodNullable<z.ZodString>;
@@ -93,24 +93,24 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
         updatedAt: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
         updatedAt: number;
-        deviceId: string;
         accounts: {
-            accountId: string;
-            sessionId: string;
             authuser: number;
+            sessionId: string;
+            accountId: string;
             operatedByUserId?: string | undefined;
         }[];
+        deviceId: string;
         activeAccountId: string | null;
         revision: number;
     }, {
         updatedAt: number;
-        deviceId: string;
         accounts: {
-            accountId: string;
-            sessionId: string;
             authuser: number;
+            sessionId: string;
+            accountId: string;
             operatedByUserId?: string | undefined;
         }[];
+        deviceId: string;
         activeAccountId: string | null;
         revision: number;
     }>;
@@ -127,13 +127,13 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     state: {
         updatedAt: number;
-        deviceId: string;
         accounts: {
-            accountId: string;
-            sessionId: string;
             authuser: number;
+            sessionId: string;
+            accountId: string;
             operatedByUserId?: string | undefined;
         }[];
+        deviceId: string;
         activeAccountId: string | null;
         revision: number;
     };
@@ -144,13 +144,13 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
 }, {
     state: {
         updatedAt: number;
-        deviceId: string;
         accounts: {
-            accountId: string;
-            sessionId: string;
             authuser: number;
+            sessionId: string;
+            accountId: string;
             operatedByUserId?: string | undefined;
         }[];
+        deviceId: string;
         activeAccountId: string | null;
         revision: number;
     };

package/dist/types/index.d.ts

@@ -15,8 +15,8 @@ export { applicationTypeSchema, publicApplicationSchema, sessionStatusSchema, }
 export type { ApplicationTypeContract, PublicApplicationResponse, SessionStatusResponse, } from './sessionStatus';
 export { fedcmTokenPayloadSchema, } from './fedcmToken';
 export type { FedcmTokenPayload, } from './fedcmToken';
-export { recommendationExcludeTypeSchema, recommendationBoostSchema, recommendationSignalWeightsSchema, recommendationRequestSchema, recommendationCountSchema, recommendationItemSchema, recommendationResponseSchema, appEndorsementInputSchema, appInterestInputSchema, appUserSignalIngestSchema, } from './recommendations';
-export type { RecommendationExcludeType, RecommendationBoost, RecommendationSignalWeights, RecommendationRequest, RecommendationCount, RecommendationItem, RecommendationResponse, AppEndorsementInput, AppInterestInput, AppUserSignalIngest, } from './recommendations';
+export { recommendationExcludeTypeSchema, recommendationBoostSchema, recommendationSignalWeightsSchema, recommendationRequestSchema, recommendationCountSchema, recommendationItemSchema, recommendationResponseSchema, appEndorsementInputSchema, appInterestInputSchema, appUserSignalIngestSchema, appAffinityEventTypeSchema, appAffinityEventSchema, appAffinityEventsIngestSchema, } from './recommendations';
+export type { RecommendationExcludeType, RecommendationBoost, RecommendationSignalWeights, RecommendationRequest, RecommendationCount, RecommendationItem, RecommendationResponse, AppEndorsementInput, AppInterestInput, AppUserSignalIngest, AppAffinityEventType, AppAffinityEvent, AppAffinityEventsIngest, } from './recommendations';
 export { verificationMethodSchema, didServiceSchema, didDocumentSchema, signedRecordEnvelopeSchema, verifiedDomainSchema, domainVerificationRequestSchema, domainVerificationInstructionsSchema, authMethodEntrySchema, authMethodsResponseSchema, exportAttestationSchema, exportBundleSchema, } from './identity';
 export type { VerificationMethod, Secp256k1VerificationMethod, MultikeyVerificationMethod, DidService, DidDocument, SignedRecordEnvelope, VerifiedDomain, DomainVerificationRequest, DomainVerificationInstructions, AuthMethodEntry, AuthMethodsResponse, ExportAttestation, ExportBundle, } from './identity';
 export { oxySignedRecordTypeSchema, } from './oxyRecordTypes';
@@ -29,3 +29,5 @@ export { linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchRespo
 export type { LinkPreviewStatus, LinkPreview, LinkPreviewBatchRequest, LinkPreviewBatchResponse, } from './links';
 export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, } from './deviceSession';
 export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, } from './deviceSession';
+export { deviceBootReasonSchema, deviceBootFragmentSchema, deviceExchangeRequestSchema, authTokenBundleSchema, webSessionResultSchema, tokenRefreshRequestSchema, tokenRefreshResponseSchema, deviceTokenIssueResponseSchema, loginResultSchema, deviceResolveRequestSchema, deviceResolveResponseSchema, } from './deviceBoot';
+export type { DeviceBootReason, DeviceBootFragment, DeviceExchangeRequest, AuthTokenBundle, WebSessionResult, WebSessionSession, WebSessionNoSession, TokenRefreshRequest, TokenRefreshResponse, DeviceTokenIssueResponse, LoginTwoFactorRequired, LoginSessionResult, LoginResult, DeviceResolveRequest, DeviceResolveAccount, DeviceResolveResponse, } from './deviceBoot';

package/dist/types/recommendations.d.ts

@@ -47,6 +47,7 @@ export declare const recommendationSignalWeightsSchema: z.ZodObject<{
     interest: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
     appBoost: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
     repCandidate: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+    affinity: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
     verified?: number | undefined;
     graph?: number | undefined;
@@ -55,6 +56,7 @@ export declare const recommendationSignalWeightsSchema: z.ZodObject<{
     interest?: number | undefined;
     appBoost?: number | undefined;
     repCandidate?: number | undefined;
+    affinity?: number | undefined;
 }, {
     verified?: number | undefined;
     graph?: number | undefined;
@@ -63,6 +65,7 @@ export declare const recommendationSignalWeightsSchema: z.ZodObject<{
     interest?: number | undefined;
     appBoost?: number | undefined;
     repCandidate?: number | undefined;
+    affinity?: number | undefined;
 }>;
 export type RecommendationSignalWeights = z.infer<typeof recommendationSignalWeightsSchema>;
 /**
@@ -100,6 +103,7 @@ export declare const recommendationRequestSchema: z.ZodObject<{
         interest: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
         appBoost: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
         repCandidate: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+        affinity: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
     }, "strip", z.ZodTypeAny, {
         verified?: number | undefined;
         graph?: number | undefined;
@@ -108,6 +112,7 @@ export declare const recommendationRequestSchema: z.ZodObject<{
         interest?: number | undefined;
         appBoost?: number | undefined;
         repCandidate?: number | undefined;
+        affinity?: number | undefined;
     }, {
         verified?: number | undefined;
         graph?: number | undefined;
@@ -116,6 +121,7 @@ export declare const recommendationRequestSchema: z.ZodObject<{
         interest?: number | undefined;
         appBoost?: number | undefined;
         repCandidate?: number | undefined;
+        affinity?: number | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
     clientId?: string | undefined;
@@ -136,6 +142,7 @@ export declare const recommendationRequestSchema: z.ZodObject<{
         interest?: number | undefined;
         appBoost?: number | undefined;
         repCandidate?: number | undefined;
+        affinity?: number | undefined;
     } | undefined;
 }, {
     clientId?: string | undefined;
@@ -156,6 +163,7 @@ export declare const recommendationRequestSchema: z.ZodObject<{
         interest?: number | undefined;
         appBoost?: number | undefined;
         repCandidate?: number | undefined;
+        affinity?: number | undefined;
     } | undefined;
 }>;
 export type RecommendationRequest = z.infer<typeof recommendationRequestSchema>;
@@ -443,3 +451,92 @@ export declare const appUserSignalIngestSchema: z.ZodEffects<z.ZodObject<{
     }[] | undefined;
 }>;
 export type AppUserSignalIngest = z.infer<typeof appUserSignalIngestSchema>;
+/**
+ * The directed interaction types a consuming app may report between two users.
+ * Each type carries a server-side default weight (see the API's
+ * `AFFINITY_EVENT_WEIGHTS`); a caller may override the applied weight per event.
+ */
+export declare const appAffinityEventTypeSchema: z.ZodEnum<["like", "reply", "boost", "follow", "mention", "profile_view", "quote", "repost"]>;
+export type AppAffinityEventType = z.infer<typeof appAffinityEventTypeSchema>;
+/**
+ * One directed interaction event: `fromUserId` interacted with `toUserId`
+ * (`type`) at `occurredAt`. The Oxy affinity-graph folds these into a per-app,
+ * time-decayed directed affinity edge (`fromUserId → toUserId`).
+ *
+ * - `weight` (optional) overrides the per-type default weight for this event.
+ * - `occurredAt` (optional, ISO) is the event time; absent means "now" at ingest.
+ * - `eventId` (optional) makes an event idempotent — a repeated `eventId` for the
+ *   same application is folded at most once (bounded dedup window).
+ */
+export declare const appAffinityEventSchema: z.ZodObject<{
+    fromUserId: z.ZodString;
+    toUserId: z.ZodString;
+    type: z.ZodEnum<["like", "reply", "boost", "follow", "mention", "profile_view", "quote", "repost"]>;
+    weight: z.ZodOptional<z.ZodNumber>;
+    occurredAt: z.ZodOptional<z.ZodString>;
+    eventId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "like" | "reply" | "boost" | "follow" | "mention" | "profile_view" | "quote" | "repost";
+    fromUserId: string;
+    toUserId: string;
+    weight?: number | undefined;
+    occurredAt?: string | undefined;
+    eventId?: string | undefined;
+}, {
+    type: "like" | "reply" | "boost" | "follow" | "mention" | "profile_view" | "quote" | "repost";
+    fromUserId: string;
+    toUserId: string;
+    weight?: number | undefined;
+    occurredAt?: string | undefined;
+    eventId?: string | undefined;
+}>;
+export type AppAffinityEvent = z.infer<typeof appAffinityEventSchema>;
+/**
+ * Request body for `POST /app-signals/events` (service token, `signals:write`).
+ *
+ * A non-empty batch (1..1000) of directed interaction events for the requesting
+ * application. Self-edges (`fromUserId === toUserId`) are dropped server-side.
+ */
+export declare const appAffinityEventsIngestSchema: z.ZodObject<{
+    events: z.ZodArray<z.ZodObject<{
+        fromUserId: z.ZodString;
+        toUserId: z.ZodString;
+        type: z.ZodEnum<["like", "reply", "boost", "follow", "mention", "profile_view", "quote", "repost"]>;
+        weight: z.ZodOptional<z.ZodNumber>;
+        occurredAt: z.ZodOptional<z.ZodString>;
+        eventId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "like" | "reply" | "boost" | "follow" | "mention" | "profile_view" | "quote" | "repost";
+        fromUserId: string;
+        toUserId: string;
+        weight?: number | undefined;
+        occurredAt?: string | undefined;
+        eventId?: string | undefined;
+    }, {
+        type: "like" | "reply" | "boost" | "follow" | "mention" | "profile_view" | "quote" | "repost";
+        fromUserId: string;
+        toUserId: string;
+        weight?: number | undefined;
+        occurredAt?: string | undefined;
+        eventId?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    events: {
+        type: "like" | "reply" | "boost" | "follow" | "mention" | "profile_view" | "quote" | "repost";
+        fromUserId: string;
+        toUserId: string;
+        weight?: number | undefined;
+        occurredAt?: string | undefined;
+        eventId?: string | undefined;
+    }[];
+}, {
+    events: {
+        type: "like" | "reply" | "boost" | "follow" | "mention" | "profile_view" | "quote" | "repost";
+        fromUserId: string;
+        toUserId: string;
+        weight?: number | undefined;
+        occurredAt?: string | undefined;
+        eventId?: string | undefined;
+    }[];
+}>;
+export type AppAffinityEventsIngest = z.infer<typeof appAffinityEventsIngestSchema>;

package/dist/types/userResponse.d.ts

@@ -189,7 +189,6 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
     phone: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodString>;
     birthday: z.ZodOptional<z.ZodString>;
-    location: z.ZodOptional<z.ZodString>;
     locations: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
     links: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     linksMetadata: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -236,7 +235,6 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
     phone: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodString>;
     birthday: z.ZodOptional<z.ZodString>;
-    location: z.ZodOptional<z.ZodString>;
     locations: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
     links: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     linksMetadata: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -283,7 +281,6 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
     phone: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodString>;
     birthday: z.ZodOptional<z.ZodString>;
-    location: z.ZodOptional<z.ZodString>;
     locations: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
     links: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     linksMetadata: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -419,9 +416,9 @@ export declare const refreshAllAccountSchema: z.ZodObject<{
     }, z.ZodTypeAny, "passthrough">>;
 }, "strip", z.ZodTypeAny, {
     expiresAt: string;
-    sessionId: string;
     authuser: number;
     accessToken: string;
+    sessionId: string;
     user: {
         name: UserNameResponse;
         id?: string | undefined;
@@ -443,9 +440,9 @@ export declare const refreshAllAccountSchema: z.ZodObject<{
     };
 }, {
     expiresAt: string;
-    sessionId: string;
     authuser: number;
     accessToken: string;
+    sessionId: string;
     user: {
         name: UserNameResponse;
         id?: string | undefined;
@@ -568,9 +565,9 @@ export declare const refreshAllResponseSchema: z.ZodObject<{
         }, z.ZodTypeAny, "passthrough">>;
     }, "strip", z.ZodTypeAny, {
         expiresAt: string;
-        sessionId: string;
         authuser: number;
         accessToken: string;
+        sessionId: string;
         user: {
             name: UserNameResponse;
             id?: string | undefined;
@@ -592,9 +589,9 @@ export declare const refreshAllResponseSchema: z.ZodObject<{
         };
     }, {
         expiresAt: string;
-        sessionId: string;
         authuser: number;
         accessToken: string;
+        sessionId: string;
         user: {
             name: UserNameResponse;
             id?: string | undefined;
@@ -618,9 +615,9 @@ export declare const refreshAllResponseSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     accounts: {
         expiresAt: string;
-        sessionId: string;
         authuser: number;
         accessToken: string;
+        sessionId: string;
         user: {
             name: UserNameResponse;
             id?: string | undefined;
@@ -644,9 +641,9 @@ export declare const refreshAllResponseSchema: z.ZodObject<{
 }, {
     accounts: {
         expiresAt: string;
-        sessionId: string;
         authuser: number;
         accessToken: string;
+        sessionId: string;
         user: {
             name: UserNameResponse;
             id?: string | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/contracts",
-  "version": "0.8.0",
+  "version": "0.9.1",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",