@oxyhq/contracts 0.9.0 → 0.10.0

package/dist/types/deviceBoot.d.ts

@@ -44,31 +44,55 @@ import { type UserResponse } from './userResponse';
  */
 export declare const deviceBootReasonSchema: z.ZodEnum<["session", "no_session", "new_device"]>;
 export type DeviceBootReason = z.infer<typeof deviceBootReasonSchema>;
-/**
- * The `#oxy_boot=<json>` fragment `GET /auth/device/bootstrap` appends to the
- * `return_to` URL. Carries the CSRF `state` echo, the resolution `reason`, an
- * optional single-use exchange `code` (present iff `reason === 'session'`), and
- * the opaque `deviceToken`. NEVER carries tokens or a deviceId.
- */
-export declare const deviceBootFragmentSchema: z.ZodObject<{
+export declare const deviceBootFragmentSchema: z.ZodDiscriminatedUnion<"reason", [z.ZodObject<{
+    reason: z.ZodLiteral<"session">;
+    code: z.ZodString;
     v: z.ZodLiteral<1>;
     state: z.ZodString;
-    reason: z.ZodEnum<["session", "no_session", "new_device"]>;
-    code: z.ZodOptional<z.ZodString>;
     deviceToken: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    reason: "session" | "no_session" | "new_device";
+    code: string;
+    reason: "session";
     v: 1;
     state: string;
     deviceToken: string;
-    code?: string | undefined;
 }, {
-    reason: "session" | "no_session" | "new_device";
+    code: string;
+    reason: "session";
     v: 1;
     state: string;
     deviceToken: string;
-    code?: string | undefined;
-}>;
+}>, z.ZodObject<{
+    reason: z.ZodLiteral<"no_session">;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: "no_session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    reason: "no_session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>, z.ZodObject<{
+    reason: z.ZodLiteral<"new_device">;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: "new_device";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    reason: "new_device";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>]>;
 export type DeviceBootFragment = z.infer<typeof deviceBootFragmentSchema>;
 /** Request body for `POST /auth/device/exchange` — the single-use boot code. */
 export declare const deviceExchangeRequestSchema: z.ZodObject<{
@@ -93,6 +117,37 @@ export interface AuthTokenBundle {
     user: UserResponse;
 }
 export declare const authTokenBundleSchema: z.ZodType<AuthTokenBundle>;
+/**
+ * The `*.oxy.so` same-site fast path returns a `reason`-discriminated result:
+ * a full session (the device cookie resolved an active session) OR a
+ * signed-out arm (the device is known / was just planted). BOTH arms carry the
+ * rotated opaque `deviceToken` to persist — the deviceToken is device-level
+ * attribution, not session-level, so it is refreshed even when signed out.
+ *
+ * IMPORTANT: the success arm nests the token bundle under `session` — it is
+ * NOT a bare {@link AuthTokenBundle}. That distinction is load-bearing for the
+ * consumer (`@oxyhq/core`'s cold boot uses `result.session` and persists the
+ * `deviceToken` from the SAME envelope).
+ */
+/**
+ * Success arm: an active session resolved from the same-site device cookie.
+ */
+export interface WebSessionSession {
+    reason: 'session';
+    session: AuthTokenBundle;
+    deviceToken: string;
+}
+/**
+ * Signed-out arm: the device is known (or freshly planted) but has no active
+ * session. Carries only the rotated `deviceToken`.
+ */
+export interface WebSessionNoSession {
+    reason: 'no_session' | 'new_device';
+    deviceToken: string;
+}
+/** The `reason`-discriminated outcome of `POST /auth/device/web-session`. */
+export type WebSessionResult = WebSessionSession | WebSessionNoSession;
+export declare const webSessionResultSchema: z.ZodType<WebSessionResult>;
 /** Request body for `POST /auth/refresh-token` — the current refresh token. */
 export declare const tokenRefreshRequestSchema: z.ZodObject<{
     refreshToken: z.ZodString;
@@ -114,13 +169,13 @@ export declare const tokenRefreshResponseSchema: z.ZodObject<{
     sessionId: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     expiresAt: string;
-    accessToken: string;
     sessionId: string;
+    accessToken: string;
     refreshToken: string;
 }, {
     expiresAt: string;
-    accessToken: string;
     sessionId: string;
+    accessToken: string;
     refreshToken: string;
 }>;
 export type TokenRefreshResponse = z.infer<typeof tokenRefreshResponseSchema>;

package/dist/types/deviceSession.d.ts

@@ -5,14 +5,14 @@ export declare const sessionAccountSchema: z.ZodObject<{
     authuser: z.ZodNumber;
     operatedByUserId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    authuser: number;
     sessionId: string;
     accountId: string;
+    authuser: number;
     operatedByUserId?: string | undefined;
 }, {
-    authuser: number;
     sessionId: string;
     accountId: string;
+    authuser: number;
     operatedByUserId?: string | undefined;
 }>;
 export declare const deviceSessionStateSchema: z.ZodObject<{
@@ -23,14 +23,14 @@ export declare const deviceSessionStateSchema: z.ZodObject<{
         authuser: z.ZodNumber;
         operatedByUserId: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        authuser: number;
         sessionId: string;
         accountId: string;
+        authuser: number;
         operatedByUserId?: string | undefined;
     }, {
-        authuser: number;
         sessionId: string;
         accountId: string;
+        authuser: number;
         operatedByUserId?: string | undefined;
     }>, "many">;
     activeAccountId: z.ZodNullable<z.ZodString>;
@@ -38,25 +38,25 @@ export declare const deviceSessionStateSchema: z.ZodObject<{
     updatedAt: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
     updatedAt: number;
+    deviceId: string;
+    activeAccountId: string | null;
     accounts: {
-        authuser: number;
         sessionId: string;
         accountId: string;
+        authuser: number;
         operatedByUserId?: string | undefined;
     }[];
-    deviceId: string;
-    activeAccountId: string | null;
     revision: number;
 }, {
     updatedAt: number;
+    deviceId: string;
+    activeAccountId: string | null;
     accounts: {
-        authuser: number;
         sessionId: string;
         accountId: string;
+        authuser: number;
         operatedByUserId?: string | undefined;
     }[];
-    deviceId: string;
-    activeAccountId: string | null;
     revision: number;
 }>;
 export declare const activeTokenSchema: z.ZodObject<{
@@ -78,14 +78,14 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
             authuser: z.ZodNumber;
             operatedByUserId: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            authuser: number;
             sessionId: string;
             accountId: string;
+            authuser: number;
             operatedByUserId?: string | undefined;
         }, {
-            authuser: number;
             sessionId: string;
             accountId: string;
+            authuser: number;
             operatedByUserId?: string | undefined;
         }>, "many">;
         activeAccountId: z.ZodNullable<z.ZodString>;
@@ -93,25 +93,25 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
         updatedAt: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
         updatedAt: number;
+        deviceId: string;
+        activeAccountId: string | null;
         accounts: {
-            authuser: number;
             sessionId: string;
             accountId: string;
+            authuser: number;
             operatedByUserId?: string | undefined;
         }[];
-        deviceId: string;
-        activeAccountId: string | null;
         revision: number;
     }, {
         updatedAt: number;
+        deviceId: string;
+        activeAccountId: string | null;
         accounts: {
-            authuser: number;
             sessionId: string;
             accountId: string;
+            authuser: number;
             operatedByUserId?: string | undefined;
         }[];
-        deviceId: string;
-        activeAccountId: string | null;
         revision: number;
     }>;
     activeToken: z.ZodNullable<z.ZodObject<{
@@ -127,14 +127,14 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     state: {
         updatedAt: number;
+        deviceId: string;
+        activeAccountId: string | null;
         accounts: {
-            authuser: number;
             sessionId: string;
             accountId: string;
+            authuser: number;
             operatedByUserId?: string | undefined;
         }[];
-        deviceId: string;
-        activeAccountId: string | null;
         revision: number;
     };
     activeToken: {
@@ -144,14 +144,14 @@ export declare const deviceSessionSyncSchema: z.ZodObject<{
 }, {
     state: {
         updatedAt: number;
+        deviceId: string;
+        activeAccountId: string | null;
         accounts: {
-            authuser: number;
             sessionId: string;
             accountId: string;
+            authuser: number;
             operatedByUserId?: string | undefined;
         }[];
-        deviceId: string;
-        activeAccountId: string | null;
         revision: number;
     };
     activeToken: {

package/dist/types/index.d.ts

@@ -9,8 +9,8 @@
  * Platform-agnostic — zod is the only runtime dependency. No react/react-native/
  * expo, no `require()` in the ESM build.
  */
-export { userNameSchema, userResponseSchema, userProfileUpdateSchema, refreshAllAccountSchema, refreshAllResponseSchema, currentUserResponseSchema, deviceSessionAccountSchema, deviceSessionsResponseSchema, resolveUserId, safeParseContract, } from './userResponse';
-export type { UserNameResponse, UserResponse, UserProfileUpdate, RefreshAllAccountResponse, RefreshAllResponseContract, CurrentUserResponseContract, DeviceSessionAccountResponse, DeviceSessionsResponseContract, } from './userResponse';
+export { userNameSchema, userResponseSchema, userProfileUpdateSchema, currentUserResponseSchema, deviceSessionAccountSchema, deviceSessionsResponseSchema, resolveUserId, safeParseContract, } from './userResponse';
+export type { UserNameResponse, UserResponse, UserProfileUpdate, CurrentUserResponseContract, DeviceSessionAccountResponse, DeviceSessionsResponseContract, } from './userResponse';
 export { applicationTypeSchema, publicApplicationSchema, sessionStatusSchema, } from './sessionStatus';
 export type { ApplicationTypeContract, PublicApplicationResponse, SessionStatusResponse, } from './sessionStatus';
 export { fedcmTokenPayloadSchema, } from './fedcmToken';
@@ -29,5 +29,5 @@ export { linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchRespo
 export type { LinkPreviewStatus, LinkPreview, LinkPreviewBatchRequest, LinkPreviewBatchResponse, } from './links';
 export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, } from './deviceSession';
 export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, } from './deviceSession';
-export { deviceBootReasonSchema, deviceBootFragmentSchema, deviceExchangeRequestSchema, authTokenBundleSchema, tokenRefreshRequestSchema, tokenRefreshResponseSchema, deviceTokenIssueResponseSchema, loginResultSchema, deviceResolveRequestSchema, deviceResolveResponseSchema, } from './deviceBoot';
-export type { DeviceBootReason, DeviceBootFragment, DeviceExchangeRequest, AuthTokenBundle, TokenRefreshRequest, TokenRefreshResponse, DeviceTokenIssueResponse, LoginTwoFactorRequired, LoginSessionResult, LoginResult, DeviceResolveRequest, DeviceResolveAccount, DeviceResolveResponse, } from './deviceBoot';
+export { deviceBootReasonSchema, deviceBootFragmentSchema, deviceExchangeRequestSchema, authTokenBundleSchema, webSessionResultSchema, tokenRefreshRequestSchema, tokenRefreshResponseSchema, deviceTokenIssueResponseSchema, loginResultSchema, deviceResolveRequestSchema, deviceResolveResponseSchema, } from './deviceBoot';
+export type { DeviceBootReason, DeviceBootFragment, DeviceExchangeRequest, AuthTokenBundle, WebSessionResult, WebSessionSession, WebSessionNoSession, TokenRefreshRequest, TokenRefreshResponse, DeviceTokenIssueResponse, LoginTwoFactorRequired, LoginSessionResult, LoginResult, DeviceResolveRequest, DeviceResolveAccount, DeviceResolveResponse, } from './deviceBoot';