@oxyhq/contracts 0.9.1 → 0.11.0

package/dist/cjs/fedcmToken.js

@@ -2,6 +2,16 @@
 /**
  * Canonical contract for the FedCM ID-token JWT payload.
  *
+ * DEAD SINCE THE WAVE-2 FEDCM DELETION (found during the comment sweep, not
+ * fixed here — this is a published `@oxyhq/contracts` export, so removing it
+ * is a breaking change/major-version decision, out of scope for a comment
+ * fix): `POST /fedcm/exchange`, `fedcm.service.exchangeIdToken`, and
+ * `packages/auth/server/index.ts`'s `mintSessionForClient` — every consumer
+ * and producer this file describes — are all deleted. No current code
+ * imports `fedcmTokenPayloadSchema` / `FedcmTokenPayload` outside this
+ * package. Flag for a follow-up major-version cleanup.
+ *
+ * Original doc (historical, describes the now-deleted system):
  * SINGLE SOURCE OF TRUTH for the decoded claims of the HS256 ID token the auth
  * IdP (`auth.oxy.so`) signs and `POST /fedcm/exchange` consumes. The API decodes
  * the JWT, verifies its signature, then validates the resulting claim object

package/dist/cjs/index.js

@@ -11,18 +11,16 @@
  * expo, no `require()` in the ESM build.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validationVoteResultSchema = exports.validationRequestSummarySchema = exports.validationOpenResultSchema = exports.validationOpenRequestSchema = exports.validationVerdictRecordSchema = exports.realLifeAttestationResultSchema = exports.realLifeAttestationRecordSchema = exports.signedPublicCardSchema = exports.publicCardSchema = exports.logPageResponseSchema = exports.chainHeadResponseSchema = exports.oxySignedRecordTypeSchema = exports.exportBundleSchema = exports.exportAttestationSchema = exports.authMethodsResponseSchema = exports.authMethodEntrySchema = exports.domainVerificationInstructionsSchema = exports.domainVerificationRequestSchema = exports.verifiedDomainSchema = exports.signedRecordEnvelopeSchema = exports.didDocumentSchema = exports.didServiceSchema = exports.verificationMethodSchema = exports.appAffinityEventsIngestSchema = exports.appAffinityEventSchema = exports.appAffinityEventTypeSchema = exports.appUserSignalIngestSchema = exports.appInterestInputSchema = exports.appEndorsementInputSchema = exports.recommendationResponseSchema = exports.recommendationItemSchema = exports.recommendationCountSchema = exports.recommendationRequestSchema = exports.recommendationSignalWeightsSchema = exports.recommendationBoostSchema = exports.recommendationExcludeTypeSchema = exports.fedcmTokenPayloadSchema = exports.sessionStatusSchema = exports.publicApplicationSchema = exports.applicationTypeSchema = exports.safeParseContract = exports.resolveUserId = exports.deviceSessionsResponseSchema = exports.deviceSessionAccountSchema = exports.currentUserResponseSchema = exports.refreshAllResponseSchema = exports.refreshAllAccountSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.userNameSchema = void 0;
-exports.deviceResolveResponseSchema = exports.deviceResolveRequestSchema = exports.loginResultSchema = exports.deviceTokenIssueResponseSchema = exports.tokenRefreshResponseSchema = exports.tokenRefreshRequestSchema = exports.webSessionResultSchema = exports.authTokenBundleSchema = exports.deviceExchangeRequestSchema = exports.deviceBootFragmentSchema = exports.deviceBootReasonSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.linkPreviewResponseSchema = exports.linkPreviewBatchResponseSchema = exports.linkPreviewBatchRequestSchema = exports.linkPreviewSchema = exports.credentialVerifyResultSchema = exports.credentialListResultSchema = exports.credentialIssueResultSchema = exports.verifiableCredentialResponseSchema = exports.credentialRecordSchema = exports.vouchResultSchema = exports.personhoodStatusResultSchema = exports.personhoodBreakdownSchema = exports.personhoodVouchRecordSchema = void 0;
+exports.personhoodBreakdownSchema = exports.personhoodVouchRecordSchema = exports.validationVoteResultSchema = exports.validationRequestSummarySchema = exports.validationOpenResultSchema = exports.validationOpenRequestSchema = exports.validationVerdictRecordSchema = exports.realLifeAttestationResultSchema = exports.realLifeAttestationRecordSchema = exports.signedPublicCardSchema = exports.publicCardSchema = exports.logPageResponseSchema = exports.chainHeadResponseSchema = exports.oxySignedRecordTypeSchema = exports.exportBundleSchema = exports.exportAttestationSchema = exports.authMethodsResponseSchema = exports.authMethodEntrySchema = exports.domainVerificationInstructionsSchema = exports.domainVerificationRequestSchema = exports.verifiedDomainSchema = exports.signedRecordEnvelopeSchema = exports.didDocumentSchema = exports.didServiceSchema = exports.verificationMethodSchema = exports.appAffinityEventsIngestSchema = exports.appAffinityEventSchema = exports.appAffinityEventTypeSchema = exports.appUserSignalIngestSchema = exports.appInterestInputSchema = exports.appEndorsementInputSchema = exports.recommendationResponseSchema = exports.recommendationItemSchema = exports.recommendationCountSchema = exports.recommendationRequestSchema = exports.recommendationSignalWeightsSchema = exports.recommendationBoostSchema = exports.recommendationExcludeTypeSchema = exports.fedcmTokenPayloadSchema = exports.sessionStatusSchema = exports.publicApplicationSchema = exports.applicationTypeSchema = exports.safeParseContract = exports.resolveUserId = exports.deviceLinkedSessionsResponseSchema = exports.deviceLinkedSessionSchema = exports.currentUserResponseSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.userNameSchema = void 0;
+exports.deviceResolveResponseSchema = exports.deviceResolveRequestSchema = exports.loginResultSchema = exports.deviceTokenIssueResponseSchema = exports.tokenRefreshResponseSchema = exports.tokenRefreshRequestSchema = exports.webSessionResultSchema = exports.authTokenBundleSchema = exports.deviceExchangeRequestSchema = exports.deviceBootFragmentSchema = exports.deviceBootReasonSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.linkPreviewResponseSchema = exports.linkPreviewBatchResponseSchema = exports.linkPreviewBatchRequestSchema = exports.linkPreviewSchema = exports.credentialVerifyResultSchema = exports.credentialListResultSchema = exports.credentialIssueResultSchema = exports.verifiableCredentialResponseSchema = exports.credentialRecordSchema = exports.vouchResultSchema = exports.personhoodStatusResultSchema = void 0;
 var userResponse_1 = require("./userResponse");
 // Schemas
 Object.defineProperty(exports, "userNameSchema", { enumerable: true, get: function () { return userResponse_1.userNameSchema; } });
 Object.defineProperty(exports, "userResponseSchema", { enumerable: true, get: function () { return userResponse_1.userResponseSchema; } });
 Object.defineProperty(exports, "userProfileUpdateSchema", { enumerable: true, get: function () { return userResponse_1.userProfileUpdateSchema; } });
-Object.defineProperty(exports, "refreshAllAccountSchema", { enumerable: true, get: function () { return userResponse_1.refreshAllAccountSchema; } });
-Object.defineProperty(exports, "refreshAllResponseSchema", { enumerable: true, get: function () { return userResponse_1.refreshAllResponseSchema; } });
 Object.defineProperty(exports, "currentUserResponseSchema", { enumerable: true, get: function () { return userResponse_1.currentUserResponseSchema; } });
-Object.defineProperty(exports, "deviceSessionAccountSchema", { enumerable: true, get: function () { return userResponse_1.deviceSessionAccountSchema; } });
-Object.defineProperty(exports, "deviceSessionsResponseSchema", { enumerable: true, get: function () { return userResponse_1.deviceSessionsResponseSchema; } });
+Object.defineProperty(exports, "deviceLinkedSessionSchema", { enumerable: true, get: function () { return userResponse_1.deviceLinkedSessionSchema; } });
+Object.defineProperty(exports, "deviceLinkedSessionsResponseSchema", { enumerable: true, get: function () { return userResponse_1.deviceLinkedSessionsResponseSchema; } });
 // Helpers
 Object.defineProperty(exports, "resolveUserId", { enumerable: true, get: function () { return userResponse_1.resolveUserId; } });
 Object.defineProperty(exports, "safeParseContract", { enumerable: true, get: function () { return userResponse_1.safeParseContract; } });

package/dist/cjs/sessionStatus.js

@@ -20,9 +20,10 @@
  * Faithful to the producers:
  *  - `packages/api/src/utils/serializeApplication.ts` `serializePublicApplication`
  *    — the ONLY shape returned to an unauthenticated consent UI. Optional fields
- *    (`description`, `icon`, `websiteUrl`, `developerName`) are OMITTED when
- *    absent (never serialized as `null`), so they are `.optional()` — NOT
- *    `.nullable()`. `type` is the `Application.type` enum.
+ *    (`description`, `icon`, `websiteUrl`, `privacyPolicyUrl`, `termsUrl`,
+ *    `developerName`) are OMITTED when absent (never serialized as `null`), so
+ *    they are `.optional()` — NOT `.nullable()`. `type` is the `Application.type`
+ *    enum.
  *  - `packages/api/src/routes/auth.ts` `GET /session/status/:sessionToken` — the
  *    inner object of the API's `{ data: ... }` success envelope. The handler
  *    ALWAYS emits `status`, `authorized` (`status === 'authorized'`),
@@ -55,9 +56,10 @@ exports.applicationTypeSchema = zod_1.z.enum([
  * `GET /auth/oauth/client/:clientId` (OAuth code flow).
  *
  * Optional fields are `.optional()` (NOT `.nullable()`): the serializer OMITS
- * `description` / `icon` / `websiteUrl` / `developerName` when the underlying
- * value is absent — it never writes `null` for them. `developerName` is only
- * attached for non-official apps when a name could be resolved.
+ * `description` / `icon` / `websiteUrl` / `privacyPolicyUrl` / `termsUrl` /
+ * `developerName` when the underlying value is absent — it never writes `null`
+ * for them. `developerName` is only attached for non-official apps when a name
+ * could be resolved.
  */
 exports.publicApplicationSchema = zod_1.z.object({
     id: zod_1.z.string(),
@@ -65,6 +67,8 @@ exports.publicApplicationSchema = zod_1.z.object({
     description: zod_1.z.string().optional(),
     icon: zod_1.z.string().optional(),
     websiteUrl: zod_1.z.string().optional(),
+    privacyPolicyUrl: zod_1.z.string().optional(),
+    termsUrl: zod_1.z.string().optional(),
     type: exports.applicationTypeSchema,
     isOfficial: zod_1.z.boolean(),
     isInternal: zod_1.z.boolean(),

package/dist/cjs/userResponse.js

@@ -17,7 +17,8 @@
  *
  * Faithful to the producers:
  *  - `packages/api/src/utils/userTransform.ts` `formatUserResponse` — the
- *    canonical serialization used by `/auth/refresh-all`, device sessions, etc.
+ *    canonical serialization used by the device-first bootstrap/exchange
+ *    endpoints (`deviceAuth.ts`), login/signup, device sessions, etc.
  *    Emits `id` (NOT `_id`), forwards `username` verbatim (may be absent), and
  *    emits `name` as the structured `{ first, last, full, displayName }`
  *    subdocument.
@@ -25,14 +26,12 @@
  *    `''`; `full` and `displayName` are Mongoose VIRTUALS. Formatted API
  *    responses compose both fields, while raw-document responses may omit the
  *    virtuals if the query did not materialise them.
- *  - The `/auth/refresh-all` handler in `packages/api/src/routes/auth.ts`, whose
- *    per-slot `authuser` is the numeric `oxy_rt_${authuser}` cookie slot.
  *
  * Platform-agnostic — zod only, no react/react-native/expo. ESM-safe (no
  * `require()`).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deviceSessionsResponseSchema = exports.deviceSessionAccountSchema = exports.currentUserResponseSchema = exports.refreshAllResponseSchema = exports.refreshAllAccountSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.userNameSchema = void 0;
+exports.deviceLinkedSessionsResponseSchema = exports.deviceLinkedSessionSchema = exports.currentUserResponseSchema = exports.userProfileUpdateSchema = exports.userResponseSchema = exports.userNameSchema = void 0;
 exports.resolveUserId = resolveUserId;
 exports.safeParseContract = safeParseContract;
 const zod_1 = require("zod");
@@ -136,28 +135,6 @@ exports.userProfileUpdateSchema = zod_1.z
 function resolveUserId(user) {
     return user.id ?? user._id;
 }
-/**
- * One rotated account entry from `POST /auth/refresh-all`.
- *
- * `authuser` is the device-local slot index (`0..N-1`). `user` is the canonical
- * {@link userResponseSchema} shape (the handler projects a whitelist and runs it
- * through `formatUserResponse`).
- */
-exports.refreshAllAccountSchema = zod_1.z.object({
-    authuser: zod_1.z.number().int().nonnegative(),
-    accessToken: zod_1.z.string(),
-    expiresAt: zod_1.z.string(),
-    sessionId: zod_1.z.string(),
-    user: exports.userResponseSchema,
-});
-/**
- * Wire shape of `POST /auth/refresh-all`: every valid device-local account,
- * sorted by `authuser` ascending. An empty `accounts` array means "no signed-in
- * accounts on this device" — the IdP must show the sign-in form.
- */
-exports.refreshAllResponseSchema = zod_1.z.object({
-    accounts: zod_1.z.array(exports.refreshAllAccountSchema),
-});
 /**
  * Wire shape of `GET /users/me` — the API success envelope (`{ data: <user> }`)
  * wrapping the current-user DTO. Some older producers use `_id` instead of
@@ -173,13 +150,13 @@ exports.currentUserResponseSchema = zod_1.z.object({
  * session). Backs the multi-account chooser. The embedded user mirrors
  * `formatUserResponse`; it is nullable on slots that lost their user document.
  */
-exports.deviceSessionAccountSchema = zod_1.z.object({
+exports.deviceLinkedSessionSchema = zod_1.z.object({
     sessionId: zod_1.z.string(),
     isCurrent: zod_1.z.boolean().optional(),
     user: exports.userResponseSchema.nullable().optional(),
 });
 /** Wire shape of `GET /session/device/sessions/:sessionId` (an array). */
-exports.deviceSessionsResponseSchema = zod_1.z.array(exports.deviceSessionAccountSchema);
+exports.deviceLinkedSessionsResponseSchema = zod_1.z.array(exports.deviceLinkedSessionSchema);
 /**
  * Safely parse a value against a contract schema. Returns the parsed (typed)
  * value, or `null` when validation fails — the same ergonomics the auth app's