@kaana.ai/contracts 6.1.1 → 8.0.0

package/dist/internal/request.js

@@ -1,5 +1,5 @@
 /**
- * The signed Oxy→Kaana request envelope (versions 1–4).
+ * The signed Oxy→Kaana request envelope (versions 1–2).
  *
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/request.ts`) by Kaana ADR 0002.
  */
@@ -10,9 +10,7 @@ import { idempotencyKeySchema, inferenceTimestampSchema } from '../public/identi
 import { inferenceAudioOutputParametersSchema, inferenceMessageSchema, inferenceReasoningSchema, inferenceSpeechParametersSchema, inferenceTranscriptionParametersSchema, responseFormatSchema, samplingParametersSchema, toolChoiceSchema, toolDefinitionSchema, } from '../public/messages.js';
 import { routingPolicyReferenceSchema } from '../public/policy.js';
 import { inferenceAttributionSchema } from './attribution.js';
-import { PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION, privateAutoExecutionSchema, privateAutoInputSchema, } from './privateAutoExecution.js';
 import { authorizedRouteSchema, routingTargetSchema } from './routing.js';
-import { SCOPED_REQUEST_ENVELOPE_VERSION, scopedExecutionSchema } from './scopedExecution.js';
 /**
  * The request's input.
  *
@@ -84,8 +82,6 @@ const modelLineOf = (reference) => {
 const inferenceRequestObjectSchema = z.object({
     /** See `version.ts`: this is the Oxy→data-plane request envelope. */
     schemaVersion: z.literal(2),
-    /** Recognized so v2 refuses rather than silently stripping a restriction. */
-    scopedExecution: scopedExecutionSchema.optional(),
     attribution: inferenceAttributionSchema,
     target: routingTargetSchema,
     modality: inferenceModalitySchema,
@@ -142,17 +138,22 @@ const inferenceRequestObjectSchema = z.object({
     authorizedRoutes: z.array(authorizedRouteSchema).min(1).optional(),
 });
 export const inferenceRequestSchema = inferenceRequestObjectSchema.superRefine((request, ctx) => {
-    if (request.scopedExecution !== undefined)
-        ctx.addIssue({
-            code: 'custom',
-            path: ['scopedExecution'],
-            message: 'Scoped execution requires envelope v3.',
-        });
     if (request.input.format === 'decisions' || request.client.apiFormat === 'decisions') {
-        const exactModel = request.target.kind === 'model' && request.target.modelReference.includes('@');
-        const foreignRoute = request.authorizedRoutes?.some((route) => request.target.kind !== 'model' ||
-            route.modelReference !== request.target.modelReference ||
-            route.substitution !== 'same_model');
+        // A pinned model is served on exactly that revision, and an unpinned one
+        // on one revision of its line. A request that named no model carries its
+        // policy's target and is served on whichever pinned line the first
+        // admissible route names. Either way no route substitutes a revision, and
+        // an attempt never moves after dispatch.
+        const target = request.target;
+        const routes = request.authorizedRoutes ?? [];
+        const revision = target.kind === 'model' && target.modelReference.includes('@')
+            ? target.modelReference
+            : routes[0]?.modelReference;
+        const exactModel = target.kind === 'routing_profile_id' ||
+            (revision !== undefined && revision.split('@')[0] === target.modelReference.split('@')[0]);
+        const foreignRoute = routes.some((route) => target.kind === 'model'
+            ? route.modelReference !== revision || route.substitution !== 'same_model'
+            : !route.modelReference.includes('@'));
         if (request.input.format !== 'decisions' ||
             request.client.apiFormat !== 'decisions' ||
             request.modality !== 'text' ||
@@ -171,7 +172,7 @@ export const inferenceRequestSchema = inferenceRequestObjectSchema.superRefine((
             ctx.addIssue({
                 code: 'custom',
                 path: ['input'],
-                message: 'Decisions require exact-model typed nonstreaming input without generation controls or model substitution.',
+                message: 'Decisions require typed nonstreaming input on pinned routes without generation controls or revision substitution.',
             });
         }
     }
@@ -327,91 +328,3 @@ export const inferenceRequestSchema = inferenceRequestObjectSchema.superRefine((
         });
     }
 });
-/** Explicit restrictive generation: old v2 receivers reject this version whole. */
-export const scopedInferenceRequestSchema = inferenceRequestObjectSchema
-    .extend({
-    schemaVersion: z.literal(SCOPED_REQUEST_ENVELOPE_VERSION),
-    scopedExecution: scopedExecutionSchema,
-})
-    .superRefine((request, ctx) => {
-    const { scopedExecution: scope, ...base } = request;
-    const legacy = inferenceRequestSchema.safeParse({ ...base, schemaVersion: 2 });
-    if (!legacy.success)
-        for (const issue of legacy.error.issues)
-            ctx.addIssue({ code: 'custom', path: issue.path, message: issue.message });
-    const principal = request.attribution.principal;
-    const route = request.authorizedRoutes?.[0];
-    if (request.input.format !== 'decisions' ||
-        request.client.apiFormat !== 'decisions' ||
-        scope.requestId !== request.attribution.requestId ||
-        scope.idempotencyKey !== request.idempotencyKey ||
-        scope.principal.accountId !== principal.billing.accountId ||
-        scope.principal.applicationId !== principal.applicationId ||
-        scope.principal.credentialId !== principal.credentialId ||
-        scope.principal.environment !== principal.environment ||
-        scope.policy.routingPolicyId !== request.routingPolicy.routingPolicyId ||
-        scope.policy.policyVersion !== request.routingPolicy.policyVersion ||
-        request.authorizedRoutes?.length !== 1 ||
-        route?.customerProviderCredential !== undefined ||
-        route?.deploymentId !== scope.deploymentId ||
-        route?.provider !== scope.provider ||
-        route?.modelReference !== scope.modelReference ||
-        request.target.kind !== 'model' ||
-        request.target.modelReference !== scope.modelReference) {
-        ctx.addIssue({
-            code: 'custom',
-            path: ['scopedExecution'],
-            message: 'Scoped execution must restrict the exact attributed decisions request and one platform route.',
-        });
-    }
-});
-/** Private repeated Auto is independently negotiated, never a v3 fixture renewal. */
-export const privateAutoInferenceRequestSchema = inferenceRequestObjectSchema
-    .omit({ scopedExecution: true })
-    .extend({
-    schemaVersion: z.literal(PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION),
-    privateAutoExecution: privateAutoExecutionSchema,
-})
-    .strict()
-    .superRefine((request, ctx) => {
-    const { privateAutoExecution: permit, ...base } = request;
-    const legacy = inferenceRequestSchema.safeParse({ ...base, schemaVersion: 2 });
-    if (!legacy.success)
-        for (const issue of legacy.error.issues)
-            ctx.addIssue({ code: 'custom', path: issue.path, message: issue.message });
-    const input = privateAutoInputSchema.safeParse(request.input);
-    if (!input.success)
-        for (const issue of input.error.issues)
-            ctx.addIssue({ code: 'custom', path: ['input', ...issue.path], message: issue.message });
-    const principal = request.attribution.principal;
-    const route = request.authorizedRoutes?.[0];
-    if (request.attribution.userId !== undefined ||
-        request.client.apiFormat !== 'decisions' ||
-        permit.requestId !== request.attribution.requestId ||
-        permit.operationId !== request.idempotencyKey ||
-        permit.principal.accountId !== principal.billing.accountId ||
-        permit.principal.applicationId !== principal.applicationId ||
-        permit.principal.credentialId !== principal.credentialId ||
-        permit.principal.environment !== principal.environment ||
-        !principal.inferenceScopes.includes('inference:invoke') ||
-        request.client.endpoint !== '/internal/auto-classification' ||
-        permit.policy.routingPolicyId !== request.routingPolicy.routingPolicyId ||
-        permit.policy.policyVersion !== request.routingPolicy.policyVersion ||
-        request.authorizedRoutes?.length !== 1 ||
-        route?.customerProviderCredential !== undefined ||
-        route?.deploymentId !== permit.deploymentId ||
-        route?.provider !== permit.provider ||
-        route?.modelReference !== permit.modelReference ||
-        request.target.kind !== 'model' ||
-        request.target.modelReference !== permit.modelReference ||
-        route.regions.length !== permit.regions.length ||
-        route.regions.some((region) => !permit.regions.includes(region)) ||
-        Date.parse(permit.runtimeExpiresAt) <= Date.parse(request.client.receivedAt) ||
-        Date.parse(permit.runtimeExpiresAt) > Date.parse(request.client.receivedAt) + 1000) {
-        ctx.addIssue({
-            code: 'custom',
-            path: ['privateAutoExecution'],
-            message: 'Private Auto must bind one exact attributed decisions child and platform route.',
-        });
-    }
-});

package/dist/internal/settlement.d.ts

@@ -30,7 +30,8 @@ export declare const settlementSchema: z.ZodObject<{
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;
         attribution: z.ZodObject<{
-            principal: z.ZodObject<{
+            principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                authority: z.ZodLiteral<"first_party">;
                 billing: z.ZodObject<{
                     accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
                 }, z.core.$strict>;
@@ -41,6 +42,8 @@ export declare const settlementSchema: z.ZodObject<{
                     staging: "staging";
                     production: "production";
                 }>;
+            }, z.core.$strict>, z.ZodObject<{
+                authority: z.ZodOptional<z.ZodLiteral<"external">>;
                 inferenceScopes: z.ZodArray<z.ZodEnum<{
                     "inference:invoke": "inference:invoke";
                     "inference:models:read": "inference:models:read";
@@ -50,7 +53,17 @@ export declare const settlementSchema: z.ZodObject<{
                     "inference:providers:read": "inference:providers:read";
                     "inference:providers:write": "inference:providers:write";
                 }>>;
-            }, z.core.$strip>;
+                billing: z.ZodObject<{
+                    accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+                }, z.core.$strict>;
+                applicationId: z.ZodString;
+                credentialId: z.ZodString;
+                environment: z.ZodEnum<{
+                    development: "development";
+                    staging: "staging";
+                    production: "production";
+                }>;
+            }, z.core.$strict>], "authority">;
             userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
             requestId: z.ZodString;
             generationId: z.ZodOptional<z.ZodString>;
@@ -141,7 +154,8 @@ export declare const settlementPageSchema: z.ZodObject<{
             requestId: z.ZodString;
             generationId: z.ZodOptional<z.ZodString>;
             attribution: z.ZodObject<{
-                principal: z.ZodObject<{
+                principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    authority: z.ZodLiteral<"first_party">;
                     billing: z.ZodObject<{
                         accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
                     }, z.core.$strict>;
@@ -152,6 +166,8 @@ export declare const settlementPageSchema: z.ZodObject<{
                         staging: "staging";
                         production: "production";
                     }>;
+                }, z.core.$strict>, z.ZodObject<{
+                    authority: z.ZodOptional<z.ZodLiteral<"external">>;
                     inferenceScopes: z.ZodArray<z.ZodEnum<{
                         "inference:invoke": "inference:invoke";
                         "inference:models:read": "inference:models:read";
@@ -161,7 +177,17 @@ export declare const settlementPageSchema: z.ZodObject<{
                         "inference:providers:read": "inference:providers:read";
                         "inference:providers:write": "inference:providers:write";
                     }>>;
-                }, z.core.$strip>;
+                    billing: z.ZodObject<{
+                        accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+                    }, z.core.$strict>;
+                    applicationId: z.ZodString;
+                    credentialId: z.ZodString;
+                    environment: z.ZodEnum<{
+                        development: "development";
+                        staging: "staging";
+                        production: "production";
+                    }>;
+                }, z.core.$strict>], "authority">;
                 userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
                 requestId: z.ZodString;
                 generationId: z.ZodOptional<z.ZodString>;

package/dist/internal/usage.d.ts

@@ -54,7 +54,8 @@ export declare const normalizedUsageReportSchema: z.ZodObject<{
     requestId: z.ZodString;
     generationId: z.ZodOptional<z.ZodString>;
     attribution: z.ZodObject<{
-        principal: z.ZodObject<{
+        principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            authority: z.ZodLiteral<"first_party">;
             billing: z.ZodObject<{
                 accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
             }, z.core.$strict>;
@@ -65,6 +66,8 @@ export declare const normalizedUsageReportSchema: z.ZodObject<{
                 staging: "staging";
                 production: "production";
             }>;
+        }, z.core.$strict>, z.ZodObject<{
+            authority: z.ZodOptional<z.ZodLiteral<"external">>;
             inferenceScopes: z.ZodArray<z.ZodEnum<{
                 "inference:invoke": "inference:invoke";
                 "inference:models:read": "inference:models:read";
@@ -74,7 +77,17 @@ export declare const normalizedUsageReportSchema: z.ZodObject<{
                 "inference:providers:read": "inference:providers:read";
                 "inference:providers:write": "inference:providers:write";
             }>>;
-        }, z.core.$strip>;
+            billing: z.ZodObject<{
+                accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+            }, z.core.$strict>;
+            applicationId: z.ZodString;
+            credentialId: z.ZodString;
+            environment: z.ZodEnum<{
+                development: "development";
+                staging: "staging";
+                production: "production";
+            }>;
+        }, z.core.$strict>], "authority">;
         userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;

package/dist/internal.d.ts

@@ -1,17 +1,16 @@
 /**
  * `@kaana.ai/contracts/internal` — what Oxy and Kaana exchange privately.
  *
- * The grant and its authorization request, the settlement, the canonical
- * input hash, the operational catalogue, customer-credential control and the
- * signed v1–v4 envelope with its stream and usage report (retired at the end
- * of the cut, Kaana ADR 0002 phase 5). Nothing here is a public API: it names
+ * The grant and its authorization request, the settlement, the operational
+ * catalogue, customer-credential control and the signed v1–v2 envelope with
+ * its stream and usage report (retired at the end of the cut, Kaana ADR 0002
+ * phase 5). Nothing here is a public API: it names
  * providers, deployments, keys and billing accounts.
  *
  * Shared vocabulary (identifiers, messages, money) is imported from the
  * package root; this entry point exports only what is internal.
  */
 export * from './internal/attribution.js';
-export * from './internal/canonical.js';
 export * from './internal/catalogue.js';
 export * from './internal/credentialControl.js';
 export * from './internal/decisions.js';
@@ -20,11 +19,9 @@ export * from './internal/embeddings.js';
 export * from './internal/errors.js';
 export * from './internal/grant.js';
 export * from './internal/identifiers.js';
-export * from './internal/privateAutoExecution.js';
 export * from './internal/realtime.js';
 export * from './internal/request.js';
 export * from './internal/routing.js';
-export * from './internal/scopedExecution.js';
 export * from './internal/settlement.js';
 export * from './internal/streamEvents.js';
 export * from './internal/usage.js';

package/dist/internal.js

@@ -1,17 +1,16 @@
 /**
  * `@kaana.ai/contracts/internal` — what Oxy and Kaana exchange privately.
  *
- * The grant and its authorization request, the settlement, the canonical
- * input hash, the operational catalogue, customer-credential control and the
- * signed v1–v4 envelope with its stream and usage report (retired at the end
- * of the cut, Kaana ADR 0002 phase 5). Nothing here is a public API: it names
+ * The grant and its authorization request, the settlement, the operational
+ * catalogue, customer-credential control and the signed v1–v2 envelope with
+ * its stream and usage report (retired at the end of the cut, Kaana ADR 0002
+ * phase 5). Nothing here is a public API: it names
  * providers, deployments, keys and billing accounts.
  *
  * Shared vocabulary (identifiers, messages, money) is imported from the
  * package root; this entry point exports only what is internal.
  */
 export * from './internal/attribution.js';
-export * from './internal/canonical.js';
 export * from './internal/catalogue.js';
 export * from './internal/credentialControl.js';
 export * from './internal/decisions.js';
@@ -20,11 +19,9 @@ export * from './internal/embeddings.js';
 export * from './internal/errors.js';
 export * from './internal/grant.js';
 export * from './internal/identifiers.js';
-export * from './internal/privateAutoExecution.js';
 export * from './internal/realtime.js';
 export * from './internal/request.js';
 export * from './internal/routing.js';
-export * from './internal/scopedExecution.js';
 export * from './internal/settlement.js';
 export * from './internal/streamEvents.js';
 export * from './internal/usage.js';

package/dist/public/decisions.d.ts

@@ -72,6 +72,12 @@ export declare const decisionInputSchema: z.ZodObject<{
         xhigh: "xhigh";
     }>>;
 }, z.core.$strict>;
+/**
+ * `model`, when present, pins the exact revision that must answer, and is
+ * never substituted. Absent, the application's decisions profile chooses: Oxy
+ * grants its lines in order and the first one Kaana can serve answers; the
+ * success names the revision that did (contract set 7.0.0).
+ */
 export declare const decisionRequestSchema: z.ZodObject<{
     state: z.ZodString;
     instructions: z.ZodOptional<z.ZodString>;
@@ -100,7 +106,7 @@ export declare const decisionRequestSchema: z.ZodObject<{
         instant: "instant";
         xhigh: "xhigh";
     }>>;
-    model: z.ZodString;
+    model: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export declare const decisionAnswerSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     id: z.ZodString;

package/dist/public/decisions.js

@@ -155,9 +155,17 @@ function validateInput(payload, ctx) {
         });
 }
 export const decisionInputSchema = z.object(payloadFields).strict().superRefine(validateInput);
+/**
+ * `model`, when present, pins the exact revision that must answer, and is
+ * never substituted. Absent, the application's decisions profile chooses: Oxy
+ * grants its lines in order and the first one Kaana can serve answers; the
+ * success names the revision that did (contract set 7.0.0).
+ */
 export const decisionRequestSchema = z
     .object({
-    model: modelReferenceSchema.refine((model) => model.includes('@'), 'Decisions require a revision-pinned model.'),
+    model: modelReferenceSchema
+        .refine((model) => model.includes('@'), 'Decisions require a revision-pinned model.')
+        .optional(),
     ...payloadFields,
 })
     .strict()

package/dist/public/version.d.ts

@@ -100,7 +100,7 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export declare const INFERENCE_CONTRACT_VERSION = "6.0.0";
+export declare const INFERENCE_CONTRACT_VERSION = "8.0.0";
 /**
  * Contract set 4.0.0 (Kaana ADR 0002) is the first published as
  * `@kaana.ai/contracts`. MAJOR because the set changed hands and split in two:
@@ -170,6 +170,17 @@ export declare const INFERENCE_CONTRACT_VERSION = "6.0.0";
  * per item, and `REALTIME_DEFAULT_SILENCE_DURATION_MS`, the silence a
  * `server_vad` that names none waits on every provider. A client on 5.0.0
  * parses every 6.0.0 response.
+ *
+ * Contract set 7.0.0 serves decisions as an ordinary grant: a decisions
+ * request's `model` is optional (pinned when present; absent, the
+ * application's decisions profile chooses), and the signed envelope admits a
+ * decisions request carried as its policy's target on pinned routes. MAJOR
+ * because it REMOVES the one-off source approvals: the grant's `exactRoute`
+ * (`grantExactRouteSchema`) and the authorization's `canonicalInputSha256`,
+ * `canonicalJson` and `canonicalInputSha256()`, the scoped and Private Auto
+ * envelopes v3 and v4 (`scopedExecutionSchema`, `privateAutoExecutionSchema`
+ * and every shape under them) and a deployment's `scopedExecution`. A grant
+ * or a request that parsed under 6.0.0 without them still parses the same.
  */
 /** The public API's one origin and version. */
 export declare const KAANA_API_BASE_URL = "https://kaana.ai/v1";

package/dist/public/version.js

@@ -100,7 +100,7 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export const INFERENCE_CONTRACT_VERSION = '6.0.0';
+export const INFERENCE_CONTRACT_VERSION = '8.0.0';
 /**
  * Contract set 4.0.0 (Kaana ADR 0002) is the first published as
  * `@kaana.ai/contracts`. MAJOR because the set changed hands and split in two:
@@ -170,6 +170,17 @@ export const INFERENCE_CONTRACT_VERSION = '6.0.0';
  * per item, and `REALTIME_DEFAULT_SILENCE_DURATION_MS`, the silence a
  * `server_vad` that names none waits on every provider. A client on 5.0.0
  * parses every 6.0.0 response.
+ *
+ * Contract set 7.0.0 serves decisions as an ordinary grant: a decisions
+ * request's `model` is optional (pinned when present; absent, the
+ * application's decisions profile chooses), and the signed envelope admits a
+ * decisions request carried as its policy's target on pinned routes. MAJOR
+ * because it REMOVES the one-off source approvals: the grant's `exactRoute`
+ * (`grantExactRouteSchema`) and the authorization's `canonicalInputSha256`,
+ * `canonicalJson` and `canonicalInputSha256()`, the scoped and Private Auto
+ * envelopes v3 and v4 (`scopedExecutionSchema`, `privateAutoExecutionSchema`
+ * and every shape under them) and a deployment's `scopedExecution`. A grant
+ * or a request that parsed under 6.0.0 without them still parses the same.
  */
 /** The public API's one origin and version. */
 export const KAANA_API_BASE_URL = 'https://kaana.ai/v1';

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Kaana API",
-    "version": "6.0.0",
+    "version": "8.0.0",
     "description": "Kaana inference API. Generated from @kaana.ai/contracts; the Zod source is the authority. Accounts, applications, oxy_sk_ keys, limits and billing are managed in Oxy Console: https://console.oxy.so"
   },
   "servers": [
@@ -2307,7 +2307,6 @@
           }
         },
         "required": [
-          "model",
           "state",
           "questions"
         ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kaana.ai/contracts",
-  "version": "6.1.1",
+  "version": "8.0.0",
   "description": "Kaana inference contract: the Zod schemas of the public API at https://kaana.ai/v1 and, under /internal, of the Oxy-Kaana grant, settlement and signed lane.",
   "type": "module",
   "sideEffects": false,

package/dist/internal/canonical.d.ts

@@ -1,31 +0,0 @@
-/**
- * Canonical JSON and the canonical input hash.
- *
- * Operations with a source approval (scoped execution, Private Auto, the Jev
- * classifier) bind the exact input they were approved for. Kaana computes the
- * hash of the input it is about to execute and Oxy compares it with the one
- * the approval fixed (Kaana ADR 0002, decision 4), so both sides must hash the
- * same bytes. This is that one definition.
- *
- * `canonicalJson` is moved from `@oxy.so/contracts` 4.12.0
- * (`canonicalScopedExecutionJson`, `src/inference/scopedExecution.ts`), and Go
- * restates it in `internal/contract/scoped_execution.go`.
- */
-/**
- * Canonical JSON wire bytes: recursive UTF-16 key order, JSON string/number
- * encoding, arrays in order, no whitespace. Hash the whole signed input, not a
- * reparsed/defaulted decision. Reject non-JSON values rather than dropping them.
- */
-export declare function canonicalJson(value: unknown): string;
-/** The name scoped execution has always used for {@link canonicalJson}. */
-export declare const canonicalScopedExecutionJson: typeof canonicalJson;
-/**
- * The canonical input hash: lowercase hex SHA-256 of {@link canonicalJson} of
- * the request input, UTF-8 encoded.
- *
- * Asynchronous because it uses Web Crypto, which every runtime this package
- * supports (Node 20+, Bun, browsers, Hermes with a crypto polyfill) provides
- * without importing a platform module. Never logged or persisted: it binds
- * transient signed bytes.
- */
-export declare function canonicalInputSha256(input: unknown): Promise<string>;

package/dist/internal/canonical.js

@@ -1,57 +0,0 @@
-/**
- * Canonical JSON and the canonical input hash.
- *
- * Operations with a source approval (scoped execution, Private Auto, the Jev
- * classifier) bind the exact input they were approved for. Kaana computes the
- * hash of the input it is about to execute and Oxy compares it with the one
- * the approval fixed (Kaana ADR 0002, decision 4), so both sides must hash the
- * same bytes. This is that one definition.
- *
- * `canonicalJson` is moved from `@oxy.so/contracts` 4.12.0
- * (`canonicalScopedExecutionJson`, `src/inference/scopedExecution.ts`), and Go
- * restates it in `internal/contract/scoped_execution.go`.
- */
-/**
- * Canonical JSON wire bytes: recursive UTF-16 key order, JSON string/number
- * encoding, arrays in order, no whitespace. Hash the whole signed input, not a
- * reparsed/defaulted decision. Reject non-JSON values rather than dropping them.
- */
-export function canonicalJson(value) {
-    if (value === null || typeof value === 'string' || typeof value === 'boolean')
-        return JSON.stringify(value);
-    if (typeof value === 'number' && Number.isFinite(value))
-        return JSON.stringify(value);
-    if (Array.isArray(value)) {
-        const entries = Array.from(value, (entry, index) => {
-            if (!(index in value))
-                throw new Error('Canonical JSON requires dense JSON arrays.');
-            return canonicalJson(entry);
-        });
-        return `[${entries.join(',')}]`;
-    }
-    if (typeof value === 'object' &&
-        value !== null &&
-        Object.getPrototypeOf(value) === Object.prototype) {
-        const entries = Object.keys(value)
-            .sort()
-            .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`);
-        return `{${entries.join(',')}}`;
-    }
-    throw new Error('Canonical JSON requires JSON wire values.');
-}
-/** The name scoped execution has always used for {@link canonicalJson}. */
-export const canonicalScopedExecutionJson = canonicalJson;
-/**
- * The canonical input hash: lowercase hex SHA-256 of {@link canonicalJson} of
- * the request input, UTF-8 encoded.
- *
- * Asynchronous because it uses Web Crypto, which every runtime this package
- * supports (Node 20+, Bun, browsers, Hermes with a crypto polyfill) provides
- * without importing a platform module. Never logged or persisted: it binds
- * transient signed bytes.
- */
-export async function canonicalInputSha256(input) {
-    const bytes = new TextEncoder().encode(canonicalJson(input));
-    const digest = await globalThis.crypto.subtle.digest('SHA-256', bytes);
-    return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('');
-}