@kaana.ai/contracts 0.0.0-stage → 4.4.0

package/dist/internal/grant.d.ts

@@ -0,0 +1,699 @@
+/**
+ * The grant: how Oxy decides who may spend, for every billable request Kaana
+ * serves on `https://kaana.ai/v1` (Kaana ADR 0002, decisions 3 and 4).
+ *
+ * Kaana parses and validates the public request, then asks
+ * `POST https://api.oxy.so/internal/kaana/v1/authorizations` with the caller's
+ * credential VERBATIM and content-free facts — never the prompt, the audio or
+ * the output. Oxy resolves the principal and lane, applies the Console policy,
+ * capacity and rate limits, quotes and RESERVES with its ledger, and answers
+ * with a grant signed under {@link GRANT_SIGNATURE_DOMAIN}. Kaana verifies the
+ * signature, the {@link GRANT_EXECUTION_WINDOW_MS} window and `bodySha256`, and
+ * executes inside the grant; without a valid grant no provider is called.
+ *
+ * The grant carries the funding model as it is today, field for field: it
+ * invents no policy. New in contract set 4.0.0; it replaces what the v1–v4
+ * envelopes signed (`authorizedRoutes`, the scoped and Private Auto bindings).
+ */
+import { z } from 'zod';
+/** The signature domain of a grant. Same Ed25519 keys as the envelope (`KAANA_EDGE_PUBLIC_KEYS`). */
+export declare const GRANT_SIGNATURE_DOMAIN = "oxy-kaana-grant:v1";
+/** How long after `issuedAt` Kaana may START executing a grant. */
+export declare const GRANT_EXECUTION_WINDOW_MS = 60000;
+/**
+ * The bytes a signature covers, the scheme every signed Oxy↔Kaana body already
+ * uses (`internal/edgeauth`): the domain, the key id, the Unix-millisecond
+ * timestamp and the lowercase hex SHA-256 of the exact body bytes, joined by
+ * `\n` with no trailing newline. The key id, timestamp and signature travel in
+ * the `X-Oxy-Kaana-Key-Id`, `X-Oxy-Kaana-Timestamp` and `X-Oxy-Kaana-Signature`
+ * headers of the response (grant) or request (settlement) that carries the body.
+ */
+export declare function signatureInput(domain: string, keyId: string, timestampMillis: number, bodySha256: string): string;
+/** What a request asks to do, as the authorization names it. */
+export declare const grantOperationSchema: z.ZodEnum<{
+    embeddings: "embeddings";
+    decisions: "decisions";
+    responses: "responses";
+    chat_completions: "chat_completions";
+    images_generations: "images_generations";
+    audio_transcriptions: "audio_transcriptions";
+    audio_speech: "audio_speech";
+    realtime_session: "realtime_session";
+}>;
+/**
+ * What the caller asked to be served: a model line, optionally pinned to a
+ * revision, or a power level. Absent on the request means the application's
+ * default from its Console policy.
+ */
+export declare const grantTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"model">;
+    modelLine: z.ZodString;
+    revision: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"level">;
+    level: z.ZodEnum<{
+        medium: "medium";
+        high: "high";
+        auto: "auto";
+        instant: "instant";
+        xhigh: "xhigh";
+        pro: "pro";
+        ultra: "ultra";
+    }>;
+}, z.core.$strict>], "kind">;
+/**
+ * The content-free facts Oxy sizes a hold from. Counts, never content: the
+ * prompt, the audio and the output never leave Kaana.
+ */
+export declare const grantRequestFactsSchema: z.ZodObject<{
+    estimatedInputTokens: z.ZodOptional<z.ZodNumber>;
+    maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+    inputCharacters: z.ZodOptional<z.ZodNumber>;
+    audioInputMilliseconds: z.ZodOptional<z.ZodNumber>;
+    embeddingInputs: z.ZodOptional<z.ZodNumber>;
+    images: z.ZodOptional<z.ZodNumber>;
+    declaredTools: z.ZodNumber;
+    stream: z.ZodBoolean;
+    realtimeSessionKind: z.ZodOptional<z.ZodEnum<{
+        conversation: "conversation";
+        transcription: "transcription";
+        translation: "translation";
+    }>>;
+}, z.core.$strict>;
+/**
+ * `POST /internal/kaana/v1/authorizations` for an inference request. Kaana
+ * authenticates as a workload (Oxy ADR 0026); `credential` is the caller's
+ * `Authorization: Bearer` value, forwarded opaque and never stored.
+ */
+export declare const inferenceAuthorizationRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"inference">;
+    credential: z.ZodString;
+    requestId: z.ZodString;
+    operation: z.ZodEnum<{
+        embeddings: "embeddings";
+        decisions: "decisions";
+        responses: "responses";
+        chat_completions: "chat_completions";
+        images_generations: "images_generations";
+        audio_transcriptions: "audio_transcriptions";
+        audio_speech: "audio_speech";
+        realtime_session: "realtime_session";
+    }>;
+    target: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"model">;
+        modelLine: z.ZodString;
+        revision: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"level">;
+        level: z.ZodEnum<{
+            medium: "medium";
+            high: "high";
+            auto: "auto";
+            instant: "instant";
+            xhigh: "xhigh";
+            pro: "pro";
+            ultra: "ultra";
+        }>;
+    }, z.core.$strict>], "kind">>;
+    facts: z.ZodObject<{
+        estimatedInputTokens: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        inputCharacters: z.ZodOptional<z.ZodNumber>;
+        audioInputMilliseconds: z.ZodOptional<z.ZodNumber>;
+        embeddingInputs: z.ZodOptional<z.ZodNumber>;
+        images: z.ZodOptional<z.ZodNumber>;
+        declaredTools: z.ZodNumber;
+        stream: z.ZodBoolean;
+        realtimeSessionKind: z.ZodOptional<z.ZodEnum<{
+            conversation: "conversation";
+            transcription: "transcription";
+            translation: "translation";
+        }>>;
+    }, z.core.$strict>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    onBehalfOfUserId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+    bodySha256: z.ZodString;
+    canonicalInputSha256: z.ZodOptional<z.ZodString>;
+    client: z.ZodObject<{
+        endpoint: z.ZodString;
+        clientRequestId: z.ZodOptional<z.ZodString>;
+        receivedAt: z.ZodString;
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/**
+ * Authorization to read the catalogue (`GET /v1/models`, `/v1/power-levels`):
+ * no reservation, cached for 60 s per credential.
+ */
+export declare const catalogueAuthorizationRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"catalogue.read">;
+    credential: z.ZodString;
+    requestId: z.ZodString;
+}, z.core.$strict>;
+/**
+ * Authorization to read a generation record (`inference:usage:read`); Oxy
+ * answers with the record itself, amount included.
+ */
+export declare const receiptAuthorizationRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"receipt.read">;
+    credential: z.ZodString;
+    requestId: z.ZodString;
+    generationId: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    onBehalfOfUserId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+}, z.core.$strict>;
+export declare const authorizationRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"inference">;
+    credential: z.ZodString;
+    requestId: z.ZodString;
+    operation: z.ZodEnum<{
+        embeddings: "embeddings";
+        decisions: "decisions";
+        responses: "responses";
+        chat_completions: "chat_completions";
+        images_generations: "images_generations";
+        audio_transcriptions: "audio_transcriptions";
+        audio_speech: "audio_speech";
+        realtime_session: "realtime_session";
+    }>;
+    target: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"model">;
+        modelLine: z.ZodString;
+        revision: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"level">;
+        level: z.ZodEnum<{
+            medium: "medium";
+            high: "high";
+            auto: "auto";
+            instant: "instant";
+            xhigh: "xhigh";
+            pro: "pro";
+            ultra: "ultra";
+        }>;
+    }, z.core.$strict>], "kind">>;
+    facts: z.ZodObject<{
+        estimatedInputTokens: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        inputCharacters: z.ZodOptional<z.ZodNumber>;
+        audioInputMilliseconds: z.ZodOptional<z.ZodNumber>;
+        embeddingInputs: z.ZodOptional<z.ZodNumber>;
+        images: z.ZodOptional<z.ZodNumber>;
+        declaredTools: z.ZodNumber;
+        stream: z.ZodBoolean;
+        realtimeSessionKind: z.ZodOptional<z.ZodEnum<{
+            conversation: "conversation";
+            transcription: "transcription";
+            translation: "translation";
+        }>>;
+    }, z.core.$strict>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    onBehalfOfUserId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+    bodySha256: z.ZodString;
+    canonicalInputSha256: z.ZodOptional<z.ZodString>;
+    client: z.ZodObject<{
+        endpoint: z.ZodString;
+        clientRequestId: z.ZodOptional<z.ZodString>;
+        receivedAt: z.ZodString;
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"catalogue.read">;
+    credential: z.ZodString;
+    requestId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"receipt.read">;
+    credential: z.ZodString;
+    requestId: z.ZodString;
+    generationId: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    onBehalfOfUserId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+}, z.core.$strict>], "kind">;
+/** How the caller authenticated, which decides who pays. */
+export declare const grantLaneSchema: z.ZodEnum<{
+    machine_credential: "machine_credential";
+    service_token: "service_token";
+    product_session: "product_session";
+}>;
+/**
+ * Who pays and who called. `billingAccountId` is the owner of the
+ * authenticated application, UNRESOLVED: the ledger resolves the billable
+ * ancestor. The end user never pays.
+ */
+export declare const grantPrincipalSchema: z.ZodObject<{
+    billingAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+    applicationId: z.ZodString;
+    credentialId: z.ZodString;
+    environment: z.ZodEnum<{
+        development: "development";
+        staging: "staging";
+        production: "production";
+    }>;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "inference:invoke": "inference:invoke";
+        "inference:models:read": "inference:models:read";
+        "inference:usage:read": "inference:usage:read";
+        "inference:routing:read": "inference:routing:read";
+        "inference:routing:write": "inference:routing:write";
+        "inference:providers:read": "inference:providers:read";
+        "inference:providers:write": "inference:providers:write";
+    }>>;
+    lane: z.ZodEnum<{
+        machine_credential: "machine_credential";
+        service_token: "service_token";
+        product_session: "product_session";
+    }>;
+}, z.core.$strict>;
+/** A model line Oxy admits for a step, with the price it settles at. */
+export declare const admittedModelLineSchema: z.ZodObject<{
+    modelLine: z.ZodString;
+    priceVersionId: z.ZodString;
+}, z.core.$strict>;
+/**
+ * What bounds one step: the Console policy, already applied by Oxy, as values
+ * Kaana filters by. Kaana never re-derives a policy: it intersects what it can
+ * serve with `admittedModelLines` and walks keys free → credit → paid within
+ * `maxFundingTier`.
+ */
+export declare const grantStepLimitsSchema: z.ZodObject<{
+    maxPricePerRequest: z.ZodOptional<z.ZodObject<{
+        amount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+        currency: z.ZodString;
+    }, z.core.$strict>>;
+    maxFundingTier: z.ZodOptional<z.ZodEnum<{
+        free: "free";
+        credit: "credit";
+        paid: "paid";
+    }>>;
+    admittedModelLines: z.ZodArray<z.ZodObject<{
+        modelLine: z.ZodString;
+        priceVersionId: z.ZodString;
+    }, z.core.$strict>>;
+    providerAllowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    providerDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    allowedRegions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    deniedRegions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    requireZeroDataRetention: z.ZodBoolean;
+    prohibitTrainingOnCustomerData: z.ZodBoolean;
+    allowedLicenseIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    requireCommercialUseRights: z.ZodBoolean;
+    sameModelFailover: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * One step: a target and its limits. Kaana tries the steps IN ORDER and moves
+ * to the next only when no admissible route of this one is left — before any
+ * output, never after. Alia's Pro/Ultra lane is two steps: the level under
+ * `maxFundingTier: 'credit'`, then `xhigh` on the pilot tuples.
+ */
+export declare const grantStepSchema: z.ZodObject<{
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"model">;
+        modelLine: z.ZodString;
+        revision: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"level">;
+        level: z.ZodEnum<{
+            medium: "medium";
+            high: "high";
+            auto: "auto";
+            instant: "instant";
+            xhigh: "xhigh";
+            pro: "pro";
+            ultra: "ultra";
+        }>;
+    }, z.core.$strict>], "kind">;
+    limits: z.ZodObject<{
+        maxPricePerRequest: z.ZodOptional<z.ZodObject<{
+            amount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+            currency: z.ZodString;
+        }, z.core.$strict>>;
+        maxFundingTier: z.ZodOptional<z.ZodEnum<{
+            free: "free";
+            credit: "credit";
+            paid: "paid";
+        }>>;
+        admittedModelLines: z.ZodArray<z.ZodObject<{
+            modelLine: z.ZodString;
+            priceVersionId: z.ZodString;
+        }, z.core.$strict>>;
+        providerAllowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        providerDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        allowedRegions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        deniedRegions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requireZeroDataRetention: z.ZodBoolean;
+        prohibitTrainingOnCustomerData: z.ZodBoolean;
+        allowedLicenseIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requireCommercialUseRights: z.ZodBoolean;
+        sameModelFailover: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/**
+ * The exact route of an operation with a source approval (scoped execution,
+ * Private Auto, the Mention classifier): the deployment, provider, key and
+ * price the approval fixed, and the input it was approved for.
+ */
+export declare const grantExactRouteSchema: z.ZodObject<{
+    approval: z.ZodEnum<{
+        scoped_execution: "scoped_execution";
+        private_auto: "private_auto";
+        mention_classifier: "mention_classifier";
+    }>;
+    deploymentId: z.ZodString;
+    provider: z.ZodString;
+    keyId: z.ZodString;
+    modelReference: z.ZodString;
+    priceVersionId: z.ZodString;
+    inputSha256: z.ZodString;
+}, z.core.$strict>;
+/**
+ * The signed grant: the body of a successful authorization for an inference
+ * operation. Kaana verifies it and executes inside it; Oxy settles against it.
+ */
+export declare const grantSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    grantId: z.ZodString;
+    requestId: z.ZodString;
+    operation: z.ZodEnum<{
+        embeddings: "embeddings";
+        decisions: "decisions";
+        responses: "responses";
+        chat_completions: "chat_completions";
+        images_generations: "images_generations";
+        audio_transcriptions: "audio_transcriptions";
+        audio_speech: "audio_speech";
+        realtime_session: "realtime_session";
+    }>;
+    issuedAt: z.ZodString;
+    executeBy: z.ZodString;
+    bodySha256: z.ZodString;
+    principal: z.ZodObject<{
+        billingAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<{
+            development: "development";
+            staging: "staging";
+            production: "production";
+        }>;
+        scopes: z.ZodArray<z.ZodEnum<{
+            "inference:invoke": "inference:invoke";
+            "inference:models:read": "inference:models:read";
+            "inference:usage:read": "inference:usage:read";
+            "inference:routing:read": "inference:routing:read";
+            "inference:routing:write": "inference:routing:write";
+            "inference:providers:read": "inference:providers:read";
+            "inference:providers:write": "inference:providers:write";
+        }>>;
+        lane: z.ZodEnum<{
+            machine_credential: "machine_credential";
+            service_token: "service_token";
+            product_session: "product_session";
+        }>;
+    }, z.core.$strict>;
+    userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+    economics: z.ZodObject<{
+        treatment: z.ZodEnum<{
+            commercial: "commercial";
+            internal_metered: "internal_metered";
+            platform_fee_only: "platform_fee_only";
+        }>;
+        policyVersion: z.ZodString;
+        relationshipId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    reservation: z.ZodOptional<z.ZodObject<{
+        reservationId: z.ZodString;
+        ceiling: z.ZodObject<{
+            amount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+            currency: z.ZodString;
+        }, z.core.$strict>;
+        fundingRestriction: z.ZodOptional<z.ZodLiteral<"promotional-only">>;
+    }, z.core.$strict>>;
+    capacity: z.ZodOptional<z.ZodObject<{
+        meteredUsageId: z.ZodString;
+    }, z.core.$strict>>;
+    steps: z.ZodArray<z.ZodObject<{
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"model">;
+            modelLine: z.ZodString;
+            revision: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"level">;
+            level: z.ZodEnum<{
+                medium: "medium";
+                high: "high";
+                auto: "auto";
+                instant: "instant";
+                xhigh: "xhigh";
+                pro: "pro";
+                ultra: "ultra";
+            }>;
+        }, z.core.$strict>], "kind">;
+        limits: z.ZodObject<{
+            maxPricePerRequest: z.ZodOptional<z.ZodObject<{
+                amount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxFundingTier: z.ZodOptional<z.ZodEnum<{
+                free: "free";
+                credit: "credit";
+                paid: "paid";
+            }>>;
+            admittedModelLines: z.ZodArray<z.ZodObject<{
+                modelLine: z.ZodString;
+                priceVersionId: z.ZodString;
+            }, z.core.$strict>>;
+            providerAllowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            providerDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            allowedRegions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            deniedRegions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            requireZeroDataRetention: z.ZodBoolean;
+            prohibitTrainingOnCustomerData: z.ZodBoolean;
+            allowedLicenseIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            requireCommercialUseRights: z.ZodBoolean;
+            sameModelFailover: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    exactRoute: z.ZodOptional<z.ZodObject<{
+        approval: z.ZodEnum<{
+            scoped_execution: "scoped_execution";
+            private_auto: "private_auto";
+            mention_classifier: "mention_classifier";
+        }>;
+        deploymentId: z.ZodString;
+        provider: z.ZodString;
+        keyId: z.ZodString;
+        modelReference: z.ZodString;
+        priceVersionId: z.ZodString;
+        inputSha256: z.ZodString;
+    }, z.core.$strict>>;
+    customerProviderCredential: z.ZodOptional<z.ZodObject<{
+        credentialHandle: z.ZodString;
+        credentialRevision: z.ZodNumber;
+        ownerAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+        connectionId: z.ZodString;
+        environment: z.ZodEnum<{
+            development: "development";
+            staging: "staging";
+            production: "production";
+        }>;
+    }, z.core.$strict>>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    client: z.ZodObject<{
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>;
+    routingPolicy: z.ZodObject<{
+        routingPolicyId: z.ZodString;
+        policyVersion: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/**
+ * The answer to a catalogue authorization: what the credential may see.
+ * Kaana filters `GET /v1/models` and `GET /v1/power-levels` with it.
+ */
+export declare const catalogueAccessSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"catalogue.read">;
+    audience: z.ZodEnum<{
+        platform_internal: "platform_internal";
+        public: "public";
+    }>;
+    allowedLevels: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        medium: "medium";
+        high: "high";
+        auto: "auto";
+        instant: "instant";
+        xhigh: "xhigh";
+        pro: "pro";
+        ultra: "ultra";
+    }>>>;
+    expiresAt: z.ZodString;
+}, z.core.$strict>;
+/** The answer to a receipt authorization: the record, amount included. */
+export declare const receiptAccessSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"receipt.read">;
+    record: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"charge">;
+        receiptId: z.ZodString;
+        priceSnapshot: z.ZodObject<{
+            priceVersionId: z.ZodString;
+            currency: z.ZodString;
+            unitPrices: z.ZodArray<z.ZodObject<{
+                unit: z.ZodEnum<{
+                    input_tokens: "input_tokens";
+                    cached_input_tokens: "cached_input_tokens";
+                    output_tokens: "output_tokens";
+                    reasoning_tokens: "reasoning_tokens";
+                    requests: "requests";
+                    images: "images";
+                    audio_input_milliseconds: "audio_input_milliseconds";
+                    audio_output_milliseconds: "audio_output_milliseconds";
+                    video_milliseconds: "video_milliseconds";
+                    characters: "characters";
+                    embeddings: "embeddings";
+                    audio_input_tokens: "audio_input_tokens";
+                    cached_audio_input_tokens: "cached_audio_input_tokens";
+                    audio_output_tokens: "audio_output_tokens";
+                    session_milliseconds: "session_milliseconds";
+                    input_transcription_milliseconds: "input_transcription_milliseconds";
+                }>;
+                amount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+                per: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        billedAmount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+        currency: z.ZodString;
+        platformFeeOnly: z.ZodBoolean;
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.ZodString;
+        generationId: z.ZodOptional<z.ZodString>;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        delegatedUserId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+        environment: z.ZodEnum<{
+            development: "development";
+            staging: "staging";
+            production: "production";
+        }>;
+        outcome: z.ZodEnum<{
+            cancelled: "cancelled";
+            completed: "completed";
+            partial: "partial";
+            failed: "failed";
+        }>;
+        usageSource: z.ZodEnum<{
+            provider_reported: "provider_reported";
+            oxy_measured: "oxy_measured";
+            estimated: "estimated";
+        }>;
+        units: z.ZodArray<z.ZodObject<{
+            unit: z.ZodEnum<{
+                input_tokens: "input_tokens";
+                cached_input_tokens: "cached_input_tokens";
+                output_tokens: "output_tokens";
+                reasoning_tokens: "reasoning_tokens";
+                requests: "requests";
+                images: "images";
+                audio_input_milliseconds: "audio_input_milliseconds";
+                audio_output_milliseconds: "audio_output_milliseconds";
+                video_milliseconds: "video_milliseconds";
+                characters: "characters";
+                embeddings: "embeddings";
+                audio_input_tokens: "audio_input_tokens";
+                cached_audio_input_tokens: "cached_audio_input_tokens";
+                audio_output_tokens: "audio_output_tokens";
+                session_milliseconds: "session_milliseconds";
+                input_transcription_milliseconds: "input_transcription_milliseconds";
+            }>;
+            quantity: z.ZodNumber;
+        }, z.core.$strict>>;
+        model: z.ZodString;
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        settledAt: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"metered_usage">;
+        meteredUsageId: z.ZodString;
+        parentRequestId: z.ZodOptional<z.ZodString>;
+        tariff: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            status: z.ZodLiteral<"quoted">;
+            amount: z.core.$ZodBranded<z.ZodString, "ExactDecimal", "out">;
+            currency: z.ZodString;
+            priceVersionId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            status: z.ZodLiteral<"unpriced">;
+            priceVersionId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>], "status">;
+        customerCharge: z.ZodObject<{
+            status: z.ZodLiteral<"not_charged">;
+        }, z.core.$strict>;
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.ZodString;
+        generationId: z.ZodOptional<z.ZodString>;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        delegatedUserId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
+        environment: z.ZodEnum<{
+            development: "development";
+            staging: "staging";
+            production: "production";
+        }>;
+        outcome: z.ZodEnum<{
+            cancelled: "cancelled";
+            completed: "completed";
+            partial: "partial";
+            failed: "failed";
+        }>;
+        usageSource: z.ZodEnum<{
+            provider_reported: "provider_reported";
+            oxy_measured: "oxy_measured";
+            estimated: "estimated";
+        }>;
+        units: z.ZodArray<z.ZodObject<{
+            unit: z.ZodEnum<{
+                input_tokens: "input_tokens";
+                cached_input_tokens: "cached_input_tokens";
+                output_tokens: "output_tokens";
+                reasoning_tokens: "reasoning_tokens";
+                requests: "requests";
+                images: "images";
+                audio_input_milliseconds: "audio_input_milliseconds";
+                audio_output_milliseconds: "audio_output_milliseconds";
+                video_milliseconds: "video_milliseconds";
+                characters: "characters";
+                embeddings: "embeddings";
+                audio_input_tokens: "audio_input_tokens";
+                cached_audio_input_tokens: "cached_audio_input_tokens";
+                audio_output_tokens: "audio_output_tokens";
+                session_milliseconds: "session_milliseconds";
+                input_transcription_milliseconds: "input_transcription_milliseconds";
+            }>;
+            quantity: z.ZodNumber;
+        }, z.core.$strict>>;
+        model: z.ZodString;
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        settledAt: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export type GrantOperation = z.infer<typeof grantOperationSchema>;
+export type GrantTarget = z.infer<typeof grantTargetSchema>;
+export type GrantRequestFacts = z.infer<typeof grantRequestFactsSchema>;
+export type InferenceAuthorizationRequest = z.infer<typeof inferenceAuthorizationRequestSchema>;
+export type CatalogueAuthorizationRequest = z.infer<typeof catalogueAuthorizationRequestSchema>;
+export type ReceiptAuthorizationRequest = z.infer<typeof receiptAuthorizationRequestSchema>;
+export type AuthorizationRequest = z.infer<typeof authorizationRequestSchema>;
+export type GrantLane = z.infer<typeof grantLaneSchema>;
+export type GrantPrincipal = z.infer<typeof grantPrincipalSchema>;
+export type AdmittedModelLine = z.infer<typeof admittedModelLineSchema>;
+export type GrantStepLimits = z.infer<typeof grantStepLimitsSchema>;
+export type GrantStep = z.infer<typeof grantStepSchema>;
+export type GrantExactRoute = z.infer<typeof grantExactRouteSchema>;
+export type Grant = z.infer<typeof grantSchema>;
+export type CatalogueAccess = z.infer<typeof catalogueAccessSchema>;
+export type ReceiptAccess = z.infer<typeof receiptAccessSchema>;