@game-infra/ai-schemas 0.3.0

package/dist/subscription.d.ts

@@ -0,0 +1,275 @@
+import { type InferOutput } from "valibot";
+/**
+ * Coding-plan subscriptions, the credentials that are already paid for.
+ *
+ * A subscription is not an API key with a different name. It is a personal
+ * credential issued to one human under terms that usually forbid sharing it, it
+ * bills against a flat-rate quota rather than per token, and it is the route
+ * this service prefers first for exactly that reason. What makes it different
+ * everywhere in the code is the unlock: the token is sealed under a password
+ * only its owner knows, so a stored subscription is inert until a request
+ * carries that password.
+ */
+/**
+ * The vendors whose coding plans this service can call.
+ *
+ * Every one but `codex` speaks the Anthropic Messages dialect: Claude Code is
+ * an Anthropic-API client, and Z.ai, Moonshot and DeepSeek each publish an
+ * Anthropic-compatible endpoint precisely so it can be pointed at them. That is
+ * why one dialect covers four vendors, and why a fifth Anthropic-compatible
+ * plan is a table row rather than an integration.
+ */
+export declare const SUBSCRIPTION_VENDORS: readonly ["claude", "glm", "kimi", "deepseek", "codex"];
+export declare const SubscriptionVendorSchema: import("valibot").PicklistSchema<readonly ["claude", "glm", "kimi", "deepseek", "codex"], undefined>;
+export type SubscriptionVendor = InferOutput<typeof SubscriptionVendorSchema>;
+/**
+ * How a plan's credential is presented to its endpoint.
+ *
+ * `bearer` puts it in `Authorization: Bearer`, which is what the Claude Code
+ * client does with an OAuth token and what every Anthropic-compatible coding
+ * plan documents for that client; `api-key` puts it in `x-api-key`, the header
+ * Anthropic's own platform keys use. The two are not interchangeable and
+ * nothing in the credential says which it is, so it is a property of the vendor
+ * rather than something to detect.
+ */
+export declare const SUBSCRIPTION_AUTH_SCHEMES: readonly ["bearer", "api-key"];
+export declare const SubscriptionAuthSchemeSchema: import("valibot").PicklistSchema<readonly ["bearer", "api-key"], undefined>;
+export type SubscriptionAuthScheme = InferOutput<typeof SubscriptionAuthSchemeSchema>;
+/** What ai-service knows about a subscription vendor before an operator configures one. */
+export interface SubscriptionVendorProfile {
+    /** Label shown in the console. */
+    label: string;
+    /** The wire dialect its endpoint speaks. */
+    dialect: "anthropic" | "openai-responses";
+    /**
+     * Endpoint the plan's token authenticates against, as the SDK client for
+     * {@link dialect} expects it: the base the client appends its own operation
+     * path to. For the Anthropic dialect that is the versioned base, because
+     * `@ai-sdk/anthropic` appends a bare `/messages` to whatever it is given —
+     * a base without the version segment posts to a path the vendor answers 404
+     * on, and every request then falls silently through to a metered provider.
+     */
+    baseUrl: string;
+    /** Where the credential goes. */
+    authScheme: SubscriptionAuthScheme;
+    /**
+     * Headers the vendor's client sends alongside the credential. Merged under
+     * whatever the stored subscription sets, so an operator can correct one
+     * without this table having to be right forever.
+     */
+    defaultHeaders?: Readonly<Record<string, string>>;
+    /**
+     * Whether the vendor's own terms license the plan to one named individual.
+     * ai-service does not enforce this: it renders it, because the person storing
+     * the credential is the one who agreed to those terms and is entitled to know
+     * that this service will happily let their colleagues' requests spend it if
+     * they hand out the unlock password.
+     */
+    individualOnly: boolean;
+}
+/**
+ * The built-in vendor table.
+ *
+ * `baseUrl` is a default, not a constant: every field here is overridable on
+ * the stored subscription, because a vendor moving an endpoint should be an
+ * edit in the console rather than a release of this package.
+ *
+ * Every Anthropic-dialect entry carries the `/v1` segment for the reason given
+ * on {@link SubscriptionVendorProfile.baseUrl}: the SDK client appends only
+ * `/messages`, so the version belongs to the base rather than to the client.
+ * An operator overriding one of these on a stored subscription has to include
+ * it too, which is why the field documents the rule rather than the table.
+ */
+export declare const SUBSCRIPTION_VENDOR_PROFILES: Record<SubscriptionVendor, SubscriptionVendorProfile>;
+/**
+ * A stored subscription, as the API describes it.
+ *
+ * There is no field here that could be turned back into the credential, and
+ * that is structural rather than careful: the stored value is sealed under the
+ * owner's password, so this service could not return the token even if a route
+ * asked it to.
+ */
+export declare const SubscriptionSchema: import("valibot").ObjectSchema<{
+    readonly id: import("valibot").StringSchema<undefined>;
+    readonly vendor: import("valibot").PicklistSchema<readonly ["claude", "glm", "kimi", "deepseek", "codex"], undefined>;
+    /** Display label, so two plans with the same vendor stay tellable apart. */
+    readonly label: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 120, undefined>]>;
+    /**
+     * Endpoint override. Absent means the vendor profile's own base URL.
+     */
+    readonly baseUrl: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").UrlAction<string, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>, undefined>;
+    /**
+     * Headers sent alongside the credential, layered over the vendor profile's
+     * defaults. This is the seam that keeps a vendor changing a required header
+     * from being a release of this package: correct it here and the plan works
+     * again. Stored in the clear, so never a place to put a credential.
+     */
+    readonly headers: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly name: import("valibot").StringSchema<undefined>;
+        readonly value: import("valibot").StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+    /**
+     * The identity-service account that sealed this credential. Only that
+     * account's requests may unlock it, because the password check alone would
+     * otherwise let anyone who learned the password spend somebody else's quota.
+     */
+    readonly ownerUserId: import("valibot").StringSchema<undefined>;
+    /** Whether routing may pick this subscription. */
+    readonly enabled: import("valibot").BooleanSchema<undefined>;
+    /** Canonical models this plan serves, and their ids at the vendor. */
+    readonly models: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly model: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 160, undefined>]>;
+        readonly providerModelId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 200, undefined>]>;
+    }, undefined>, undefined>;
+    readonly createdAt: import("valibot").StringSchema<undefined>;
+    readonly updatedAt: import("valibot").StringSchema<undefined>;
+}, undefined>;
+export type Subscription = InferOutput<typeof SubscriptionSchema>;
+/** Fields accepted when storing a subscription. */
+export declare const CreateSubscriptionRequestSchema: import("valibot").ObjectSchema<{
+    readonly vendor: import("valibot").PicklistSchema<readonly ["claude", "glm", "kimi", "deepseek", "codex"], undefined>;
+    readonly label: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 120, undefined>]>;
+    readonly baseUrl: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").UrlAction<string, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>, undefined>;
+    readonly headers: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly name: import("valibot").StringSchema<undefined>;
+        readonly value: import("valibot").StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+    /**
+     * The plan's own credential: a Claude Code OAuth token, a Codex session
+     * token, or a coding-plan key. Sealed under {@link password} before it is
+     * written and unreadable without it.
+     */
+    readonly credential: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 8000, undefined>]>;
+    /**
+     * The password the credential is sealed under. It is never stored, in any
+     * form: a wrong password is detected by the seal failing to open, not by
+     * comparing against something on disk, so there is nothing here for a
+     * database dump to attack offline beyond the sealed credential itself.
+     */
+    readonly password: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 8, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>;
+    readonly enabled: import("valibot").OptionalSchema<import("valibot").BooleanSchema<undefined>, undefined>;
+    readonly models: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly model: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 160, undefined>]>;
+        readonly providerModelId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 200, undefined>]>;
+    }, undefined>, undefined>, undefined>;
+}, undefined>;
+export type CreateSubscriptionRequest = InferOutput<typeof CreateSubscriptionRequestSchema>;
+/** Fields accepted when updating a subscription. The credential is replaced by re-creating it. */
+export declare const UpdateSubscriptionRequestSchema: import("valibot").ObjectSchema<{
+    readonly label: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 120, undefined>]>, undefined>;
+    readonly baseUrl: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").UrlAction<string, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>, undefined>;
+    readonly headers: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly name: import("valibot").StringSchema<undefined>;
+        readonly value: import("valibot").StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+    readonly enabled: import("valibot").OptionalSchema<import("valibot").BooleanSchema<undefined>, undefined>;
+    readonly models: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly model: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 160, undefined>]>;
+        readonly providerModelId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 200, undefined>]>;
+    }, undefined>, undefined>, undefined>;
+}, undefined>;
+export type UpdateSubscriptionRequest = InferOutput<typeof UpdateSubscriptionRequestSchema>;
+/** A password offered against a stored subscription. */
+export declare const UnlockSubscriptionRequestSchema: import("valibot").ObjectSchema<{
+    readonly password: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>;
+}, undefined>;
+export type UnlockSubscriptionRequest = InferOutput<typeof UnlockSubscriptionRequestSchema>;
+/**
+ * Whether the offered password opened the seal.
+ *
+ * The console uses this to tell somebody they typed the wrong password while
+ * they are still in the credential screen, rather than letting them find out
+ * from a run that silently fell through to a metered provider.
+ */
+export declare const UnlockSubscriptionResponseSchema: import("valibot").ObjectSchema<{
+    readonly success: import("valibot").BooleanSchema<undefined>;
+    readonly error: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+} & {
+    unlocked: import("valibot").OptionalSchema<import("valibot").BooleanSchema<undefined>, undefined>;
+}, undefined>;
+export type UnlockSubscriptionResponse = InferOutput<typeof UnlockSubscriptionResponseSchema>;
+/** One subscription. */
+export declare const SubscriptionResponseSchema: import("valibot").ObjectSchema<{
+    readonly success: import("valibot").BooleanSchema<undefined>;
+    readonly error: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+} & {
+    subscription: import("valibot").OptionalSchema<import("valibot").ObjectSchema<{
+        readonly id: import("valibot").StringSchema<undefined>;
+        readonly vendor: import("valibot").PicklistSchema<readonly ["claude", "glm", "kimi", "deepseek", "codex"], undefined>;
+        /** Display label, so two plans with the same vendor stay tellable apart. */
+        readonly label: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 120, undefined>]>;
+        /**
+         * Endpoint override. Absent means the vendor profile's own base URL.
+         */
+        readonly baseUrl: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").UrlAction<string, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>, undefined>;
+        /**
+         * Headers sent alongside the credential, layered over the vendor profile's
+         * defaults. This is the seam that keeps a vendor changing a required header
+         * from being a release of this package: correct it here and the plan works
+         * again. Stored in the clear, so never a place to put a credential.
+         */
+        readonly headers: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+            readonly name: import("valibot").StringSchema<undefined>;
+            readonly value: import("valibot").StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        /**
+         * The identity-service account that sealed this credential. Only that
+         * account's requests may unlock it, because the password check alone would
+         * otherwise let anyone who learned the password spend somebody else's quota.
+         */
+        readonly ownerUserId: import("valibot").StringSchema<undefined>;
+        /** Whether routing may pick this subscription. */
+        readonly enabled: import("valibot").BooleanSchema<undefined>;
+        /** Canonical models this plan serves, and their ids at the vendor. */
+        readonly models: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+            readonly model: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 160, undefined>]>;
+            readonly providerModelId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 200, undefined>]>;
+        }, undefined>, undefined>;
+        readonly createdAt: import("valibot").StringSchema<undefined>;
+        readonly updatedAt: import("valibot").StringSchema<undefined>;
+    }, undefined>, undefined>;
+}, undefined>;
+export type SubscriptionResponse = InferOutput<typeof SubscriptionResponseSchema>;
+/** Every subscription the calling account owns. */
+export declare const SubscriptionListResponseSchema: import("valibot").ObjectSchema<{
+    readonly success: import("valibot").BooleanSchema<undefined>;
+    readonly error: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+} & {
+    subscriptions: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+        readonly id: import("valibot").StringSchema<undefined>;
+        readonly vendor: import("valibot").PicklistSchema<readonly ["claude", "glm", "kimi", "deepseek", "codex"], undefined>;
+        /** Display label, so two plans with the same vendor stay tellable apart. */
+        readonly label: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 120, undefined>]>;
+        /**
+         * Endpoint override. Absent means the vendor profile's own base URL.
+         */
+        readonly baseUrl: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").UrlAction<string, undefined>, import("valibot").MaxLengthAction<string, 400, undefined>]>, undefined>;
+        /**
+         * Headers sent alongside the credential, layered over the vendor profile's
+         * defaults. This is the seam that keeps a vendor changing a required header
+         * from being a release of this package: correct it here and the plan works
+         * again. Stored in the clear, so never a place to put a credential.
+         */
+        readonly headers: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+            readonly name: import("valibot").StringSchema<undefined>;
+            readonly value: import("valibot").StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        /**
+         * The identity-service account that sealed this credential. Only that
+         * account's requests may unlock it, because the password check alone would
+         * otherwise let anyone who learned the password spend somebody else's quota.
+         */
+        readonly ownerUserId: import("valibot").StringSchema<undefined>;
+        /** Whether routing may pick this subscription. */
+        readonly enabled: import("valibot").BooleanSchema<undefined>;
+        /** Canonical models this plan serves, and their ids at the vendor. */
+        readonly models: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+            readonly model: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 160, undefined>]>;
+            readonly providerModelId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 200, undefined>]>;
+        }, undefined>, undefined>;
+        readonly createdAt: import("valibot").StringSchema<undefined>;
+        readonly updatedAt: import("valibot").StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+}, undefined>;
+export type SubscriptionListResponse = InferOutput<typeof SubscriptionListResponseSchema>;
+//# sourceMappingURL=subscription.d.ts.map

package/dist/subscription.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription.d.ts","sourceRoot":"","sources":["../src/subscription.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,WAAW,EAWjB,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;GAUG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,YAAI,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAC5F,eAAO,MAAM,wBAAwB,sGAAiC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE9E;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,YAAI,QAAQ,EAAE,SAAS,CAAU,CAAC;AACxE,eAAO,MAAM,4BAA4B,6EAAsC,CAAC;AAChF,MAAM,MAAM,sBAAsB,GAAG,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEtF,2FAA2F;AAC3F,MAAM,WAAW,yBAAyB;IACxC,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,OAAO,EAAE,WAAW,GAAG,kBAAkB,CAAC;IAC1C;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,UAAU,EAAE,sBAAsB,CAAC;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD;;;;;;OAMG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,EAAE,MAAM,CAAC,kBAAkB,EAAE,yBAAyB,CAiD9F,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;;IAG7B,4EAA4E;;IAE5E;;OAEG;;IAEH;;;;;OAKG;;;;;IAEH;;;;OAIG;;IAEH,kDAAkD;;IAElD,sEAAsE;;;;;;;aAStE,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,mDAAmD;AACnD,eAAO,MAAM,+BAA+B;;;;;;;;IAK1C;;;;OAIG;;IAEH;;;;;OAKG;;;;;;;aAWH,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE5F,kGAAkG;AAClG,eAAO,MAAM,+BAA+B;;;;;;;;;;;;aAa1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE5F,wDAAwD;AACxD,eAAO,MAAM,+BAA+B;;aAE1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE5F;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC;;;;;aAE3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE9F,wBAAwB;AACxB,eAAO,MAAM,0BAA0B;;;;;;;QAzGrC,4EAA4E;;QAE5E;;WAEG;;QAEH;;;;;WAKG;;;;;QAEH;;;;WAIG;;QAEH,kDAAkD;;QAElD,sEAAsE;;;;;;;;aAsFtE,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAElF,mDAAmD;AACnD,eAAO,MAAM,8BAA8B;;;;;;;QA/GzC,4EAA4E;;QAE5E;;WAEG;;QAEH;;;;;WAKG;;;;;QAEH;;;;WAIG;;QAEH,kDAAkD;;QAElD,sEAAsE;;;;;;;;aA4FtE,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/subscription.js

@@ -0,0 +1,198 @@
+import { createSuccessResponseSchema } from "@game-infra/api-schemas-core";
+import { array, boolean, maxLength, minLength, object, optional, picklist, pipe, string, url, } from "valibot";
+/**
+ * Coding-plan subscriptions, the credentials that are already paid for.
+ *
+ * A subscription is not an API key with a different name. It is a personal
+ * credential issued to one human under terms that usually forbid sharing it, it
+ * bills against a flat-rate quota rather than per token, and it is the route
+ * this service prefers first for exactly that reason. What makes it different
+ * everywhere in the code is the unlock: the token is sealed under a password
+ * only its owner knows, so a stored subscription is inert until a request
+ * carries that password.
+ */
+/**
+ * The vendors whose coding plans this service can call.
+ *
+ * Every one but `codex` speaks the Anthropic Messages dialect: Claude Code is
+ * an Anthropic-API client, and Z.ai, Moonshot and DeepSeek each publish an
+ * Anthropic-compatible endpoint precisely so it can be pointed at them. That is
+ * why one dialect covers four vendors, and why a fifth Anthropic-compatible
+ * plan is a table row rather than an integration.
+ */
+export const SUBSCRIPTION_VENDORS = ["claude", "glm", "kimi", "deepseek", "codex"];
+export const SubscriptionVendorSchema = picklist(SUBSCRIPTION_VENDORS);
+/**
+ * How a plan's credential is presented to its endpoint.
+ *
+ * `bearer` puts it in `Authorization: Bearer`, which is what the Claude Code
+ * client does with an OAuth token and what every Anthropic-compatible coding
+ * plan documents for that client; `api-key` puts it in `x-api-key`, the header
+ * Anthropic's own platform keys use. The two are not interchangeable and
+ * nothing in the credential says which it is, so it is a property of the vendor
+ * rather than something to detect.
+ */
+export const SUBSCRIPTION_AUTH_SCHEMES = ["bearer", "api-key"];
+export const SubscriptionAuthSchemeSchema = picklist(SUBSCRIPTION_AUTH_SCHEMES);
+/**
+ * The built-in vendor table.
+ *
+ * `baseUrl` is a default, not a constant: every field here is overridable on
+ * the stored subscription, because a vendor moving an endpoint should be an
+ * edit in the console rather than a release of this package.
+ *
+ * Every Anthropic-dialect entry carries the `/v1` segment for the reason given
+ * on {@link SubscriptionVendorProfile.baseUrl}: the SDK client appends only
+ * `/messages`, so the version belongs to the base rather than to the client.
+ * An operator overriding one of these on a stored subscription has to include
+ * it too, which is why the field documents the rule rather than the table.
+ */
+export const SUBSCRIPTION_VENDOR_PROFILES = {
+    claude: {
+        label: "Claude (Anthropic)",
+        dialect: "anthropic",
+        baseUrl: "https://api.anthropic.com/v1",
+        authScheme: "bearer",
+        // The beta header the Claude Code client sends with an OAuth token. An
+        // Anthropic PLATFORM key needs neither this nor the bearer scheme, and is
+        // configured as an `anthropic` provider rather than as a subscription.
+        defaultHeaders: { "anthropic-beta": "oauth-2025-04-20" },
+        individualOnly: true,
+    },
+    glm: {
+        label: "GLM (Z.ai)",
+        dialect: "anthropic",
+        baseUrl: "https://api.z.ai/api/anthropic/v1",
+        authScheme: "bearer",
+        individualOnly: true,
+    },
+    kimi: {
+        label: "Kimi (Moonshot)",
+        dialect: "anthropic",
+        baseUrl: "https://api.moonshot.ai/anthropic/v1",
+        authScheme: "bearer",
+        individualOnly: false,
+    },
+    deepseek: {
+        label: "DeepSeek",
+        dialect: "anthropic",
+        baseUrl: "https://api.deepseek.com/anthropic/v1",
+        authScheme: "bearer",
+        individualOnly: false,
+    },
+    /**
+     * The ChatGPT plan behind Codex. It is the one vendor here that does not
+     * speak the Anthropic dialect: its endpoint is the OpenAI Responses shape,
+     * served from the ChatGPT backend rather than the platform API, and it is the
+     * one whose base URL an operator is most likely to have to correct, because
+     * OpenAI documents that host for the Codex client rather than as a public
+     * API. Stored as a default so a working deployment is one edit away, not as
+     * an assertion that it is stable.
+     */
+    codex: {
+        label: "ChatGPT (Codex)",
+        dialect: "openai-responses",
+        baseUrl: "https://chatgpt.com/backend-api/codex",
+        authScheme: "bearer",
+        individualOnly: true,
+    },
+};
+/**
+ * A stored subscription, as the API describes it.
+ *
+ * There is no field here that could be turned back into the credential, and
+ * that is structural rather than careful: the stored value is sealed under the
+ * owner's password, so this service could not return the token even if a route
+ * asked it to.
+ */
+export const SubscriptionSchema = object({
+    id: string(),
+    vendor: SubscriptionVendorSchema,
+    /** Display label, so two plans with the same vendor stay tellable apart. */
+    label: pipe(string(), minLength(1), maxLength(120)),
+    /**
+     * Endpoint override. Absent means the vendor profile's own base URL.
+     */
+    baseUrl: optional(pipe(string(), url(), maxLength(400))),
+    /**
+     * Headers sent alongside the credential, layered over the vendor profile's
+     * defaults. This is the seam that keeps a vendor changing a required header
+     * from being a release of this package: correct it here and the plan works
+     * again. Stored in the clear, so never a place to put a credential.
+     */
+    headers: optional(array(object({ name: string(), value: string() }))),
+    /**
+     * The identity-service account that sealed this credential. Only that
+     * account's requests may unlock it, because the password check alone would
+     * otherwise let anyone who learned the password spend somebody else's quota.
+     */
+    ownerUserId: string(),
+    /** Whether routing may pick this subscription. */
+    enabled: boolean(),
+    /** Canonical models this plan serves, and their ids at the vendor. */
+    models: array(object({
+        model: pipe(string(), minLength(1), maxLength(160)),
+        providerModelId: pipe(string(), minLength(1), maxLength(200)),
+    })),
+    createdAt: string(),
+    updatedAt: string(),
+});
+/** Fields accepted when storing a subscription. */
+export const CreateSubscriptionRequestSchema = object({
+    vendor: SubscriptionVendorSchema,
+    label: pipe(string(), minLength(1), maxLength(120)),
+    baseUrl: optional(pipe(string(), url(), maxLength(400))),
+    headers: optional(array(object({ name: string(), value: string() }))),
+    /**
+     * The plan's own credential: a Claude Code OAuth token, a Codex session
+     * token, or a coding-plan key. Sealed under {@link password} before it is
+     * written and unreadable without it.
+     */
+    credential: pipe(string(), minLength(1), maxLength(8000)),
+    /**
+     * The password the credential is sealed under. It is never stored, in any
+     * form: a wrong password is detected by the seal failing to open, not by
+     * comparing against something on disk, so there is nothing here for a
+     * database dump to attack offline beyond the sealed credential itself.
+     */
+    password: pipe(string(), minLength(8), maxLength(400)),
+    enabled: optional(boolean()),
+    models: optional(array(object({
+        model: pipe(string(), minLength(1), maxLength(160)),
+        providerModelId: pipe(string(), minLength(1), maxLength(200)),
+    }))),
+});
+/** Fields accepted when updating a subscription. The credential is replaced by re-creating it. */
+export const UpdateSubscriptionRequestSchema = object({
+    label: optional(pipe(string(), minLength(1), maxLength(120))),
+    baseUrl: optional(pipe(string(), url(), maxLength(400))),
+    headers: optional(array(object({ name: string(), value: string() }))),
+    enabled: optional(boolean()),
+    models: optional(array(object({
+        model: pipe(string(), minLength(1), maxLength(160)),
+        providerModelId: pipe(string(), minLength(1), maxLength(200)),
+    }))),
+});
+/** A password offered against a stored subscription. */
+export const UnlockSubscriptionRequestSchema = object({
+    password: pipe(string(), minLength(1), maxLength(400)),
+});
+/**
+ * Whether the offered password opened the seal.
+ *
+ * The console uses this to tell somebody they typed the wrong password while
+ * they are still in the credential screen, rather than letting them find out
+ * from a run that silently fell through to a metered provider.
+ */
+export const UnlockSubscriptionResponseSchema = createSuccessResponseSchema({
+    unlocked: optional(boolean()),
+});
+/** One subscription. */
+export const SubscriptionResponseSchema = createSuccessResponseSchema({
+    subscription: optional(SubscriptionSchema),
+});
+/** Every subscription the calling account owns. */
+export const SubscriptionListResponseSchema = createSuccessResponseSchema({
+    subscriptions: optional(array(SubscriptionSchema)),
+});
+//# sourceMappingURL=subscription.js.map

package/dist/subscription.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription.js","sourceRoot":"","sources":["../src/subscription.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAEL,KAAK,EACL,OAAO,EACP,SAAS,EACT,SAAS,EACT,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,GAAG,GACJ,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;GAUG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAC5F,MAAM,CAAC,MAAM,wBAAwB,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AAGvE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AAoChF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA0D;IACjG,MAAM,EAAE;QACN,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,8BAA8B;QACvC,UAAU,EAAE,QAAQ;QACpB,uEAAuE;QACvE,0EAA0E;QAC1E,uEAAuE;QACvE,cAAc,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,EAAE;QACxD,cAAc,EAAE,IAAI;KACrB;IACD,GAAG,EAAE;QACH,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,mCAAmC;QAC5C,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,IAAI;KACrB;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,sCAAsC;QAC/C,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,KAAK;KACtB;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,uCAAuC;QAChD,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,KAAK;KACtB;IACD;;;;;;;;OAQG;IACH,KAAK,EAAE;QACL,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,uCAAuC;QAChD,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,IAAI;KACrB;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;IACvC,EAAE,EAAE,MAAM,EAAE;IACZ,MAAM,EAAE,wBAAwB;IAChC,4EAA4E;IAC5E,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD;;OAEG;IACH,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD;;;;;OAKG;IACH,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACrE;;;;OAIG;IACH,WAAW,EAAE,MAAM,EAAE;IACrB,kDAAkD;IAClD,OAAO,EAAE,OAAO,EAAE;IAClB,sEAAsE;IACtE,MAAM,EAAE,KAAK,CACX,MAAM,CAAC;QACL,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACnD,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;KAC9D,CAAC,CACH;IACD,SAAS,EAAE,MAAM,EAAE;IACnB,SAAS,EAAE,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH,mDAAmD;AACnD,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;IACpD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACrE;;;;OAIG;IACH,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,EAAE,QAAQ,CACd,KAAK,CACH,MAAM,CAAC;QACL,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACnD,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;KAC9D,CAAC,CACH,CACF;CACF,CAAC,CAAC;AAIH,kGAAkG;AAClG,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;IACpD,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,EAAE,QAAQ,CACd,KAAK,CACH,MAAM,CAAC;QACL,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACnD,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;KAC9D,CAAC,CACH,CACF;CACF,CAAC,CAAC;AAIH,wDAAwD;AACxD,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;IACpD,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;CACvD,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,2BAA2B,CAAC;IAC1E,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;CAC9B,CAAC,CAAC;AAIH,wBAAwB;AACxB,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;IACpE,YAAY,EAAE,QAAQ,CAAC,kBAAkB,CAAC;CAC3C,CAAC,CAAC;AAGH,mDAAmD;AACnD,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;IACxE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;CACnD,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@game-infra/ai-schemas",
+  "version": "0.3.0",
+  "description": "ai-service API contract: provider/credential/subscription configuration, routing presets, the named request-schema registry, and the inference endpoint definitions",
+  "homepage": "https://github.com/kibertoad/game-infra/tree/main/packages/schemas/ai-schemas#readme",
+  "bugs": {
+    "url": "https://github.com/kibertoad/game-infra/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kibertoad/game-infra.git",
+    "directory": "packages/schemas/ai-schemas"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@toad-contracts/core": "0.4.0",
+    "@toad-contracts/valibot": "0.5.0",
+    "@game-infra/api-schemas-core": "0.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.2",
+    "rimraf": "^6.1.3",
+    "typescript": "^7.0.2",
+    "valibot": "^1.4.2",
+    "vitest": "^4.1.10"
+  },
+  "peerDependencies": {
+    "valibot": "^1.4.0"
+  },
+  "scripts": {
+    "build": "rimraf dist && tsc --project tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "clean": "rimraf dist"
+  }
+}