@oxyhq/contracts 0.9.0 → 0.9.1

package/dist/types/deviceBoot.d.ts

@@ -44,31 +44,55 @@ import { type UserResponse } from './userResponse';
  */
 export declare const deviceBootReasonSchema: z.ZodEnum<["session", "no_session", "new_device"]>;
 export type DeviceBootReason = z.infer<typeof deviceBootReasonSchema>;
-/**
- * The `#oxy_boot=<json>` fragment `GET /auth/device/bootstrap` appends to the
- * `return_to` URL. Carries the CSRF `state` echo, the resolution `reason`, an
- * optional single-use exchange `code` (present iff `reason === 'session'`), and
- * the opaque `deviceToken`. NEVER carries tokens or a deviceId.
- */
-export declare const deviceBootFragmentSchema: z.ZodObject<{
+export declare const deviceBootFragmentSchema: z.ZodDiscriminatedUnion<"reason", [z.ZodObject<{
+    reason: z.ZodLiteral<"session">;
+    code: z.ZodString;
     v: z.ZodLiteral<1>;
     state: z.ZodString;
-    reason: z.ZodEnum<["session", "no_session", "new_device"]>;
-    code: z.ZodOptional<z.ZodString>;
     deviceToken: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    reason: "session" | "no_session" | "new_device";
+    code: string;
+    reason: "session";
     v: 1;
     state: string;
     deviceToken: string;
-    code?: string | undefined;
 }, {
-    reason: "session" | "no_session" | "new_device";
+    code: string;
+    reason: "session";
     v: 1;
     state: string;
     deviceToken: string;
-    code?: string | undefined;
-}>;
+}>, z.ZodObject<{
+    reason: z.ZodLiteral<"no_session">;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: "no_session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    reason: "no_session";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>, z.ZodObject<{
+    reason: z.ZodLiteral<"new_device">;
+    v: z.ZodLiteral<1>;
+    state: z.ZodString;
+    deviceToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: "new_device";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}, {
+    reason: "new_device";
+    v: 1;
+    state: string;
+    deviceToken: string;
+}>]>;
 export type DeviceBootFragment = z.infer<typeof deviceBootFragmentSchema>;
 /** Request body for `POST /auth/device/exchange` — the single-use boot code. */
 export declare const deviceExchangeRequestSchema: z.ZodObject<{
@@ -93,6 +117,37 @@ export interface AuthTokenBundle {
     user: UserResponse;
 }
 export declare const authTokenBundleSchema: z.ZodType<AuthTokenBundle>;
+/**
+ * The `*.oxy.so` same-site fast path returns a `reason`-discriminated result:
+ * a full session (the device cookie resolved an active session) OR a
+ * signed-out arm (the device is known / was just planted). BOTH arms carry the
+ * rotated opaque `deviceToken` to persist — the deviceToken is device-level
+ * attribution, not session-level, so it is refreshed even when signed out.
+ *
+ * IMPORTANT: the success arm nests the token bundle under `session` — it is
+ * NOT a bare {@link AuthTokenBundle}. That distinction is load-bearing for the
+ * consumer (`@oxyhq/core`'s cold boot uses `result.session` and persists the
+ * `deviceToken` from the SAME envelope).
+ */
+/**
+ * Success arm: an active session resolved from the same-site device cookie.
+ */
+export interface WebSessionSession {
+    reason: 'session';
+    session: AuthTokenBundle;
+    deviceToken: string;
+}
+/**
+ * Signed-out arm: the device is known (or freshly planted) but has no active
+ * session. Carries only the rotated `deviceToken`.
+ */
+export interface WebSessionNoSession {
+    reason: 'no_session' | 'new_device';
+    deviceToken: string;
+}
+/** The `reason`-discriminated outcome of `POST /auth/device/web-session`. */
+export type WebSessionResult = WebSessionSession | WebSessionNoSession;
+export declare const webSessionResultSchema: z.ZodType<WebSessionResult>;
 /** Request body for `POST /auth/refresh-token` — the current refresh token. */
 export declare const tokenRefreshRequestSchema: z.ZodObject<{
     refreshToken: z.ZodString;

package/dist/types/index.d.ts

@@ -29,5 +29,5 @@ export { linkPreviewSchema, linkPreviewBatchRequestSchema, linkPreviewBatchRespo
 export type { LinkPreviewStatus, LinkPreview, LinkPreviewBatchRequest, LinkPreviewBatchResponse, } from './links';
 export { sessionAccountSchema, deviceSessionStateSchema, activeTokenSchema, deviceSessionSyncSchema, } from './deviceSession';
 export type { SessionAccount, DeviceSessionState, ActiveToken, DeviceSessionSync, } from './deviceSession';
-export { deviceBootReasonSchema, deviceBootFragmentSchema, deviceExchangeRequestSchema, authTokenBundleSchema, tokenRefreshRequestSchema, tokenRefreshResponseSchema, deviceTokenIssueResponseSchema, loginResultSchema, deviceResolveRequestSchema, deviceResolveResponseSchema, } from './deviceBoot';
-export type { DeviceBootReason, DeviceBootFragment, DeviceExchangeRequest, AuthTokenBundle, TokenRefreshRequest, TokenRefreshResponse, DeviceTokenIssueResponse, LoginTwoFactorRequired, LoginSessionResult, LoginResult, DeviceResolveRequest, DeviceResolveAccount, DeviceResolveResponse, } from './deviceBoot';
+export { deviceBootReasonSchema, deviceBootFragmentSchema, deviceExchangeRequestSchema, authTokenBundleSchema, webSessionResultSchema, tokenRefreshRequestSchema, tokenRefreshResponseSchema, deviceTokenIssueResponseSchema, loginResultSchema, deviceResolveRequestSchema, deviceResolveResponseSchema, } from './deviceBoot';
+export type { DeviceBootReason, DeviceBootFragment, DeviceExchangeRequest, AuthTokenBundle, WebSessionResult, WebSessionSession, WebSessionNoSession, TokenRefreshRequest, TokenRefreshResponse, DeviceTokenIssueResponse, LoginTwoFactorRequired, LoginSessionResult, LoginResult, DeviceResolveRequest, DeviceResolveAccount, DeviceResolveResponse, } from './deviceBoot';

package/dist/types/userResponse.d.ts

@@ -189,7 +189,6 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
     phone: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodString>;
     birthday: z.ZodOptional<z.ZodString>;
-    location: z.ZodOptional<z.ZodString>;
     locations: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
     links: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     linksMetadata: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -236,7 +235,6 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
     phone: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodString>;
     birthday: z.ZodOptional<z.ZodString>;
-    location: z.ZodOptional<z.ZodString>;
     locations: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
     links: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     linksMetadata: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -283,7 +281,6 @@ export declare const userProfileUpdateSchema: z.ZodObject<{
     phone: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodString>;
     birthday: z.ZodOptional<z.ZodString>;
-    location: z.ZodOptional<z.ZodString>;
     locations: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
     links: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     linksMetadata: z.ZodOptional<z.ZodArray<z.ZodObject<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/contracts",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",