@dcdr/contracts 2.5.3 → 2.7.0

package/dist/provider-limits.contract.d.ts

@@ -0,0 +1,39 @@
+import { IntentProvider } from "./provider.contract";
+import { DcdrServiceTokenLimitType } from "./service-tokens.contract";
+/**
+ * Tenant-level provider/model limiting gate used by DCDR governance.
+ *
+ * Notes
+ * - Missing/undefined values preserve permissive behavior by default.
+ * - This contract carries configuration only; live metering/enforcement is a
+ *   runtime/backend responsibility.
+ */
+export interface DcdrProviderLimitGate {
+    /** Missing/true = allowed. `false` = fully blocked. */
+    enabled?: boolean;
+    /** Max execution calls allowed within `maxCallsPeriod`. `null` = unlimited. */
+    maxCalls?: number | null;
+    /** Window type for `maxCalls`. Only meaningful when `maxCalls` is set. */
+    maxCallsPeriod?: DcdrServiceTokenLimitType;
+    /** Max spend allowed within `maxBudgetPeriod`. `null` = unlimited. */
+    maxBudget?: number | null;
+    /** Window type for `maxBudget`. Only meaningful when `maxBudget` is set. */
+    maxBudgetPeriod?: DcdrServiceTokenLimitType;
+}
+/**
+ * Per-provider gate plus optional per-model overrides.
+ *
+ * Notes
+ * - Model ids remain free strings rather than a closed enum because the public
+ *   provider catalog is large and versioned independently of tenant config.
+ */
+export interface DcdrProviderLimitEntry extends DcdrProviderLimitGate {
+    models?: Record<string, DcdrProviderLimitGate>;
+}
+/**
+ * Tenant-scoped provider limits configuration.
+ */
+export interface DcdrProviderLimitsConfig {
+    providers?: Partial<Record<IntentProvider, DcdrProviderLimitEntry>>;
+}
+//# sourceMappingURL=provider-limits.contract.d.ts.map

package/dist/provider-limits.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-limits.contract.d.ts","sourceRoot":"","sources":["../src/provider-limits.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAE3C,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC,CAAC;CACrE"}

package/dist/provider-limits.contract.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/service-tokens.contract.d.ts

@@ -6,13 +6,38 @@
  * - Tokens are referenced by sha256(utf8(tokenString)) in hex.
  * - Backend should keep this snapshot stable & ordered for reproducible ETags.
  */
+import { IntentProvider } from "./provider.contract";
 export type DcdrServiceTokenStatus = "ACTIVE" | "REVOKED";
+/**
+ * Stable well-known scopes that can be attached to DCDR service tokens.
+ *
+ * Notes
+ * - `scopes` remains an open `string[]` surface for backward compatibility.
+ * - This enum only publishes shared canonical values that runtime/backend/UI
+ *   may want to reference consistently.
+ */
+export declare enum DcdrServiceTokenScope {
+    GATEWAY = "gateway"
+}
 export declare enum DcdrServiceTokenLimitType {
     FIXED = "FIXED",
     LIMITED_BY_HOUR = "LIMITED_BY_HOUR",
     LIMITED_BY_DAY = "LIMITED_BY_DAY",
     LIMITED_BY_MONTH = "LIMITED_BY_MONTH"
 }
+/**
+ * Gateway binding for one provider.
+ *
+ * Notes
+ * - `credentialRef` uses the same reference concept already used elsewhere in
+ *   DCDR contracts.
+ * - Runtime/backend should treat `provider` as unique within one token's
+ *   `gatewayBindings` array.
+ */
+export interface DcdrServiceTokenGatewayProviderBinding {
+    provider: IntentProvider;
+    credentialRef: string;
+}
 export interface DcdrServiceTokenLimit {
     /**
      * Maximum number of execution endpoint calls allowed for this limit window.
@@ -39,6 +64,16 @@ export type DcdrServiceTokenSnapshotItem = {
     exp?: number;
     /** Optional runtime-enforced execution limits for this token. */
     limits?: DcdrServiceTokenLimit[];
+    /**
+     * Optional OpenAI-compatible gateway bindings.
+     *
+     * Intended use
+     * - A token with `gateway` scope can be constrained to exactly one backend-
+     *   managed credential reference per provider.
+     * - Runtime should resolve the selected credential by reference via backend
+     *   before making the upstream provider call.
+     */
+    gatewayBindings?: DcdrServiceTokenGatewayProviderBinding[];
     /** Optional note for operators. */
     note?: string;
 };

package/dist/service-tokens.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-tokens.contract.d.ts","sourceRoot":"","sources":["../src/service-tokens.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D,oBAAY,yBAAyB;IACnC,KAAK,UAAU;IACf,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,IAAI,EAAE,yBAAyB,CAAC;IAEhC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GAAG;IACzC,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IAEX,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,sBAAsB,CAAC;IAE/B,kGAAkG;IAClG,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,yGAAyG;IACzG,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,iEAAiE;IACjE,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAEjC,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACvC,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC"}
+{"version":3,"file":"service-tokens.contract.d.ts","sourceRoot":"","sources":["../src/service-tokens.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D;;;;;;;GAOG;AACH,oBAAY,qBAAqB;IAC/B,OAAO,YAAY;CACpB;AAED,oBAAY,yBAAyB;IACnC,KAAK,UAAU;IACf,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,IAAI,EAAE,yBAAyB,CAAC;IAEhC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GAAG;IACzC,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IAEX,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,sBAAsB,CAAC;IAE/B,kGAAkG;IAClG,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,yGAAyG;IACzG,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,iEAAiE;IACjE,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAEjC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,sCAAsC,EAAE,CAAC;IAE3D,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACvC,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC"}

package/dist/service-tokens.contract.js

@@ -1,14 +1,18 @@
 "use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DcdrServiceTokenLimitType = exports.DcdrServiceTokenScope = void 0;
 /**
- * Snapshot of allowed (and revoked) customer service tokens.
+ * Stable well-known scopes that can be attached to DCDR service tokens.
  *
- * IMPORTANT:
- * - Never include tokens in clear.
- * - Tokens are referenced by sha256(utf8(tokenString)) in hex.
- * - Backend should keep this snapshot stable & ordered for reproducible ETags.
+ * Notes
+ * - `scopes` remains an open `string[]` surface for backward compatibility.
+ * - This enum only publishes shared canonical values that runtime/backend/UI
+ *   may want to reference consistently.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DcdrServiceTokenLimitType = void 0;
+var DcdrServiceTokenScope;
+(function (DcdrServiceTokenScope) {
+    DcdrServiceTokenScope["GATEWAY"] = "gateway";
+})(DcdrServiceTokenScope || (exports.DcdrServiceTokenScope = DcdrServiceTokenScope = {}));
 var DcdrServiceTokenLimitType;
 (function (DcdrServiceTokenLimitType) {
     DcdrServiceTokenLimitType["FIXED"] = "FIXED";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dcdr/contracts",
-  "version": "2.5.3",
+  "version": "2.7.0",
   "homepage": "https://dcdr.ai",
   "description": "TypeScript contracts and runtime client for DCDR intent-based AI execution",
   "private": false,
@@ -73,7 +73,9 @@
     "./messages.contract": { "types": "./dist/messages.contract.d.ts", "default": "./dist/messages.contract.js" },
     "./policies.contract": { "types": "./dist/policies.contract.d.ts", "default": "./dist/policies.contract.js" },
     "./prompts.contract": { "types": "./dist/prompts.contract.d.ts", "default": "./dist/prompts.contract.js" },
+    "./processing.contract": { "types": "./dist/processing.contract.d.ts", "default": "./dist/processing.contract.js" },
     "./provider.contract": { "types": "./dist/provider.contract.d.ts", "default": "./dist/provider.contract.js" },
+    "./provider-limits.contract": { "types": "./dist/provider-limits.contract.d.ts", "default": "./dist/provider-limits.contract.js" },
     "./provider.catalog.contract": { "types": "./dist/provider.catalog.contract.d.ts", "default": "./dist/provider.catalog.contract.js" },
     "./service-tokens.contract": { "types": "./dist/service-tokens.contract.d.ts", "default": "./dist/service-tokens.contract.js" },
     "./session.contract": { "types": "./dist/session.contract.d.ts", "default": "./dist/session.contract.js" }
@@ -102,7 +104,9 @@
       "messages.contract": ["dist/messages.contract.d.ts"],
       "policies.contract": ["dist/policies.contract.d.ts"],
       "prompts.contract": ["dist/prompts.contract.d.ts"],
+      "processing.contract": ["dist/processing.contract.d.ts"],
       "provider.contract": ["dist/provider.contract.d.ts"],
+      "provider-limits.contract": ["dist/provider-limits.contract.d.ts"],
       "provider.catalog.contract": ["dist/provider.catalog.contract.d.ts"],
       "service-tokens.contract": ["dist/service-tokens.contract.d.ts"],
       "session.contract": ["dist/session.contract.d.ts"]