@kaana.ai/contracts 7.0.0 → 8.0.1

package/dist/internal/attribution.d.ts

@@ -4,15 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/attribution.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
-/**
- * The inference capability scopes the data plane needs to know about.
- *
- * A credential may carry many other Oxy scopes; only these cross the boundary,
- * because the data plane's authorization questions are exactly "may this caller
- * invoke", "may it read the catalogue", "may it read usage", "may it read or
- * write routing", "may it read or write provider connections". Everything else
- * is the control plane's business and is not the data plane's to hold.
- */
+/** External caller limits recorded by Oxy. First-party instructions carry no scopes. */
 export declare const INFERENCE_SCOPES: readonly ["inference:invoke", "inference:models:read", "inference:usage:read", "inference:routing:read", "inference:routing:write", "inference:providers:read", "inference:providers:write"];
 export declare const inferenceScopeSchema: z.ZodEnum<{
     "inference:invoke": "inference:invoke";
@@ -35,17 +27,9 @@ export declare const inferenceScopeSchema: z.ZodEnum<{
 export declare const billingPrincipalSchema: z.ZodObject<{
     accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
 }, z.core.$strict>;
-/**
- * Who authenticated, as resolved by the Oxy edge before a request is forwarded.
- *
- * Mirrors what a verified Oxy service token carries (`appId`, `credentialId`,
- * `ownerAccountId`, `environment`, effective scopes) so that the two
- * authentication paths — a machine API key and a first-party service token —
- * produce one shape downstream. The data plane authorizes against this
- * envelope; it does not re-derive access from its own database, because it has
- * no account graph to re-derive it from.
- */
-export declare const authenticatedPrincipalSchema: z.ZodObject<{
+/** Oxy has authorized this instruction; the discriminator never grants customer access in Kaana. */
+export declare const authenticatedPrincipalSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    authority: z.ZodLiteral<"first_party">;
     billing: z.ZodObject<{
         accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
     }, z.core.$strict>;
@@ -56,6 +40,8 @@ export declare const authenticatedPrincipalSchema: z.ZodObject<{
         staging: "staging";
         production: "production";
     }>;
+}, z.core.$strict>, z.ZodObject<{
+    authority: z.ZodOptional<z.ZodLiteral<"external">>;
     inferenceScopes: z.ZodArray<z.ZodEnum<{
         "inference:invoke": "inference:invoke";
         "inference:models:read": "inference:models:read";
@@ -65,7 +51,17 @@ export declare const authenticatedPrincipalSchema: z.ZodObject<{
         "inference:providers:read": "inference:providers:read";
         "inference:providers:write": "inference:providers:write";
     }>>;
-}, z.core.$strip>;
+    billing: z.ZodObject<{
+        accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+    }, z.core.$strict>;
+    applicationId: z.ZodString;
+    credentialId: z.ZodString;
+    environment: z.ZodEnum<{
+        development: "development";
+        staging: "staging";
+        production: "production";
+    }>;
+}, z.core.$strict>], "authority">;
 /**
  * The attribution block carried by every request, receipt and ledger record.
  *
@@ -85,7 +81,8 @@ export declare const authenticatedPrincipalSchema: z.ZodObject<{
  * because only the data plane knows how many outputs a request produced.
  */
 export declare const inferenceAttributionSchema: z.ZodObject<{
-    principal: z.ZodObject<{
+    principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        authority: z.ZodLiteral<"first_party">;
         billing: z.ZodObject<{
             accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
         }, z.core.$strict>;
@@ -96,6 +93,8 @@ export declare const inferenceAttributionSchema: z.ZodObject<{
             staging: "staging";
             production: "production";
         }>;
+    }, z.core.$strict>, z.ZodObject<{
+        authority: z.ZodOptional<z.ZodLiteral<"external">>;
         inferenceScopes: z.ZodArray<z.ZodEnum<{
             "inference:invoke": "inference:invoke";
             "inference:models:read": "inference:models:read";
@@ -105,7 +104,17 @@ export declare const inferenceAttributionSchema: z.ZodObject<{
             "inference:providers:read": "inference:providers:read";
             "inference:providers:write": "inference:providers:write";
         }>>;
-    }, z.core.$strip>;
+        billing: z.ZodObject<{
+            accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+        }, z.core.$strict>;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<{
+            development: "development";
+            staging: "staging";
+            production: "production";
+        }>;
+    }, z.core.$strict>], "authority">;
     userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
     requestId: z.ZodString;
     generationId: z.ZodOptional<z.ZodString>;

package/dist/internal/attribution.js

@@ -6,15 +6,7 @@
 import { z } from 'zod';
 import { delegatedUserIdSchema, generationIdSchema, inferenceEnvironmentSchema, oxyApplicationIdSchema, oxyCredentialIdSchema, requestIdSchema, } from '../public/identifiers.js';
 import { oxyAccountIdSchema } from './identifiers.js';
-/**
- * The inference capability scopes the data plane needs to know about.
- *
- * A credential may carry many other Oxy scopes; only these cross the boundary,
- * because the data plane's authorization questions are exactly "may this caller
- * invoke", "may it read the catalogue", "may it read usage", "may it read or
- * write routing", "may it read or write provider connections". Everything else
- * is the control plane's business and is not the data plane's to hold.
- */
+/** External caller limits recorded by Oxy. First-party instructions carry no scopes. */
 export const INFERENCE_SCOPES = [
     'inference:invoke',
     'inference:models:read',
@@ -49,13 +41,23 @@ export const billingPrincipalSchema = z
  * envelope; it does not re-derive access from its own database, because it has
  * no account graph to re-derive it from.
  */
-export const authenticatedPrincipalSchema = z.object({
+const principalIdentity = {
     billing: billingPrincipalSchema,
     applicationId: oxyApplicationIdSchema,
     credentialId: oxyCredentialIdSchema,
     environment: inferenceEnvironmentSchema,
-    inferenceScopes: z.array(inferenceScopeSchema),
-});
+};
+/** Oxy has authorized this instruction; the discriminator never grants customer access in Kaana. */
+export const authenticatedPrincipalSchema = z.discriminatedUnion('authority', [
+    z.object({ ...principalIdentity, authority: z.literal('first_party') }).strict(),
+    z
+        .object({
+        ...principalIdentity,
+        authority: z.literal('external').optional(),
+        inferenceScopes: z.array(inferenceScopeSchema),
+    })
+        .strict(),
+]);
 /**
  * The attribution block carried by every request, receipt and ledger record.
  *

package/dist/internal/catalogue.d.ts

@@ -262,10 +262,9 @@ export declare const modelDeploymentSchema: z.ZodObject<{
 }, z.core.$strip>;
 /**
  * The commercial facts Kaana publishes about ONE deployment on the descriptors
- * it serves to Oxy (`POST /internal/v1/deployments/query` and
- * `/internal/v1/models/query`), from the reviewed file
- * `configs/deployment-commercial.json`. A deployment that is not sold carries
- * no `commercial` at all, which is why the member is optional on the
+ * it serves to Oxy (`POST /internal/v1/deployments/query`), from the reviewed
+ * file `configs/deployment-commercial.json`. A deployment that is not sold
+ * carries no `commercial` at all, which is why the member is optional on the
  * descriptor. New in contract set 4.4.0.
  *
  * `customer_byok` is the commercial basis of a `byok_only` route and of no

package/dist/internal/catalogue.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/catalogue.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { cataloguePublisherSummarySchema, inferenceDataPolicySchema, modelCapabilitiesSchema, modelDeprecationSchema, modelEvaluationResultSchema, modelLicenseSchema, modelPowerClassSchema, modelProvenanceSchema, modelSafetyMetadataSchema, modelSchema, powerLevelSchema, reasoningEffortSchema, } from '../public/catalogue.js';
 import { inferenceDateSchema, inferenceHttpsUrlSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelReferenceSchema, modelRevisionLabelSchema, modelSlugSchema, publisherSlugSchema, RESERVED_ALIA_PUBLISHER, sha256DigestSchema, } from '../public/identifiers.js';
 import { priceSnapshotSchema } from '../public/money.js';
@@ -34,10 +35,10 @@ export const commercialPermissionSchema = z.enum([
 export const modelPublisherSchema = z.object({
     /** See `version.ts`: served on its own by the catalogue, so it is versioned. */
     schemaVersion: z.literal(1),
-    publisherId: z.string().min(1).max(128),
+    publisherId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     slug: publisherSlugSchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(2000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(2000)).optional(),
     websiteUrl: inferenceHttpsUrlSchema.optional(),
 });
 /**
@@ -54,8 +55,8 @@ export const catalogueModelSchema = z
     modelId: modelIdSchema,
     publisher: publisherSlugSchema,
     slug: modelSlugSchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     capabilities: modelCapabilitiesSchema,
     license: modelLicenseSchema,
     provenance: modelProvenanceSchema,
@@ -98,7 +99,7 @@ export const modelRevisionSchema = z
     .object({
     /** See `version.ts`: served on its own by the catalogue, so it is versioned. */
     schemaVersion: z.literal(1),
-    revisionId: z.string().min(1).max(128),
+    revisionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     modelId: modelIdSchema,
     revision: modelRevisionLabelSchema,
     reference: modelReferenceSchema,
@@ -123,9 +124,9 @@ export const modelRevisionSchema = z
 export const inferenceProviderSchema = z.object({
     /** See `version.ts`: served on its own by the catalogue, so it is versioned. */
     schemaVersion: z.literal(1),
-    providerId: z.string().min(1).max(128),
+    providerId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     slug: inferenceProviderSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     /**
      * `customer_byok` means the customer's own upstream account is billed
      * directly by the provider and Oxy charges only its platform fee.
@@ -165,7 +166,7 @@ export const modelDeploymentSchema = z
     /** Reserved capacity for one enterprise account rather than shared. */
     dedicatedCapacity: z.boolean(),
     /** The price version customers are charged under on this route. */
-    priceVersionId: z.string().min(1).max(128).optional(),
+    priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
 })
     .superRefine((deployment, ctx) => {
     if (!deployment.modelReference.includes('@')) {
@@ -210,10 +211,9 @@ export const modelDeploymentSchema = z
 });
 /**
  * The commercial facts Kaana publishes about ONE deployment on the descriptors
- * it serves to Oxy (`POST /internal/v1/deployments/query` and
- * `/internal/v1/models/query`), from the reviewed file
- * `configs/deployment-commercial.json`. A deployment that is not sold carries
- * no `commercial` at all, which is why the member is optional on the
+ * it serves to Oxy (`POST /internal/v1/deployments/query`), from the reviewed
+ * file `configs/deployment-commercial.json`. A deployment that is not sold
+ * carries no `commercial` at all, which is why the member is optional on the
  * descriptor. New in contract set 4.4.0.
  *
  * `customer_byok` is the commercial basis of a `byok_only` route and of no
@@ -269,8 +269,8 @@ export const routingProfileSchema = z.object({
     schemaVersion: z.literal(1),
     routingProfileId: routingProfileIdSchema,
     slug: routingProfileSlugSchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(2000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(2000)).optional(),
     /** What the profile optimises for when several candidates qualify. */
     optimiseFor: z.enum(['price', 'latency', 'throughput', 'quality', 'balanced']),
     candidates: z.array(routingProfileCandidateSchema).min(1),
@@ -301,7 +301,7 @@ export const routingProfileSchema = z.object({
 export const catalogueServingProviderSummarySchema = z
     .object({
     slug: inferenceProviderSlugSchema,
-    displayName: z.string().min(1).max(200),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
     regions: z.array(inferenceRegionSchema).default([]),
     dataPolicy: inferenceDataPolicySchema,
 })
@@ -318,8 +318,8 @@ export const modelCatalogueEntrySchema = z.object({
     schemaVersion: z.literal(3),
     modelId: modelIdSchema,
     publisher: cataloguePublisherSummarySchema,
-    displayName: z.string().min(1).max(200),
-    description: z.string().max(4000).optional(),
+    displayName: z.string().check(minUtf16Length(1)).check(maxUtf16Length(200)),
+    description: z.string().check(maxUtf16Length(4000)).optional(),
     currentRevision: modelRevisionLabelSchema,
     /** Revisions a customer may pin today, newest first. */
     availableRevisions: z.array(modelRevisionLabelSchema).min(1),

package/dist/internal/credentialControl.js

@@ -6,6 +6,7 @@
  * validation and custody metadata) stay in `@oxy.so/contracts`.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceEnvironmentSchema, oxyApplicationIdSchema, PADDED_BASE64_PATTERN, } from '../public/identifiers.js';
 import { deploymentIdSchema, inferenceProviderSlugSchema } from './identifiers.js';
 /** Opaque reference minted by Kaana. It is not a KMS/Vault/SSM locator. */
@@ -28,7 +29,7 @@ export const kaanaCredentialIdentitySchema = z
     .strict();
 const kaanaCredentialOperationActorSchema = z
     .string()
-    .min(1)
+    .check(minUtf16Length(1))
     .refine((value) => new TextEncoder().encode(value).byteLength <= 256 &&
     value === value.trim() &&
     !/[\r\n]/.test(value), {
@@ -70,8 +71,8 @@ function isVisibleASCIIProviderCredential(value) {
 }
 const kaanaCredentialSecretBase64Schema = z
     .string()
-    .min(1)
-    .max(8192)
+    .check(minUtf16Length(1))
+    .check(maxUtf16Length(8192))
     .regex(PADDED_BASE64_PATTERN)
     .refine(isVisibleASCIIProviderCredential, {
     message: 'a decoded provider credential is 1-4096 visible ASCII bytes',

package/dist/internal/decisions.d.ts

@@ -10,7 +10,8 @@ export declare const decisionResultSchema: z.ZodObject<{
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;
         attribution: z.ZodObject<{
-            principal: z.ZodObject<{
+            principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                authority: z.ZodLiteral<"first_party">;
                 billing: z.ZodObject<{
                     accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
                 }, z.core.$strict>;
@@ -21,6 +22,8 @@ export declare const decisionResultSchema: z.ZodObject<{
                     staging: "staging";
                     production: "production";
                 }>;
+            }, z.core.$strict>, z.ZodObject<{
+                authority: z.ZodOptional<z.ZodLiteral<"external">>;
                 inferenceScopes: z.ZodArray<z.ZodEnum<{
                     "inference:invoke": "inference:invoke";
                     "inference:models:read": "inference:models:read";
@@ -30,7 +33,17 @@ export declare const decisionResultSchema: z.ZodObject<{
                     "inference:providers:read": "inference:providers:read";
                     "inference:providers:write": "inference:providers:write";
                 }>>;
-            }, z.core.$strip>;
+                billing: z.ZodObject<{
+                    accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+                }, z.core.$strict>;
+                applicationId: z.ZodString;
+                credentialId: z.ZodString;
+                environment: z.ZodEnum<{
+                    development: "development";
+                    staging: "staging";
+                    production: "production";
+                }>;
+            }, z.core.$strict>], "authority">;
             userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
             requestId: z.ZodString;
             generationId: z.ZodOptional<z.ZodString>;
@@ -170,7 +183,8 @@ export declare const decisionFailureSchema: z.ZodObject<{
         requestId: z.ZodString;
         generationId: z.ZodOptional<z.ZodString>;
         attribution: z.ZodObject<{
-            principal: z.ZodObject<{
+            principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                authority: z.ZodLiteral<"first_party">;
                 billing: z.ZodObject<{
                     accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
                 }, z.core.$strict>;
@@ -181,6 +195,8 @@ export declare const decisionFailureSchema: z.ZodObject<{
                     staging: "staging";
                     production: "production";
                 }>;
+            }, z.core.$strict>, z.ZodObject<{
+                authority: z.ZodOptional<z.ZodLiteral<"external">>;
                 inferenceScopes: z.ZodArray<z.ZodEnum<{
                     "inference:invoke": "inference:invoke";
                     "inference:models:read": "inference:models:read";
@@ -190,7 +206,17 @@ export declare const decisionFailureSchema: z.ZodObject<{
                     "inference:providers:read": "inference:providers:read";
                     "inference:providers:write": "inference:providers:write";
                 }>>;
-            }, z.core.$strip>;
+                billing: z.ZodObject<{
+                    accountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+                }, z.core.$strict>;
+                applicationId: z.ZodString;
+                credentialId: z.ZodString;
+                environment: z.ZodEnum<{
+                    development: "development";
+                    staging: "staging";
+                    production: "production";
+                }>;
+            }, z.core.$strict>], "authority">;
             userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
             requestId: z.ZodString;
             generationId: z.ZodOptional<z.ZodString>;

package/dist/internal/embeddings.js

@@ -4,6 +4,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/embeddings.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { inferenceErrorSchema } from './errors.js';
 export const embeddingVectorSchema = z
     .object({
@@ -24,8 +25,8 @@ export const embeddingUsageSchema = z
 export const embeddingSuccessSchema = z
     .object({
     schemaVersion: z.literal(1),
-    requestId: z.string().min(1).max(128),
-    model: z.string().min(1).max(255),
+    requestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+    model: z.string().check(minUtf16Length(1)).check(maxUtf16Length(255)),
     dimension: z.number().int().positive().max(1024),
     data: z.array(embeddingVectorSchema).min(1).max(2048),
     usage: embeddingUsageSchema,
@@ -52,7 +53,7 @@ export const embeddingSuccessSchema = z
 export const embeddingFailureSchema = z
     .object({
     schemaVersion: z.literal(1),
-    requestId: z.string().min(1).max(128),
+    requestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     error: inferenceErrorSchema,
 })
     .strict();

package/dist/internal/errors.js

@@ -5,6 +5,7 @@
  * Moved from `@oxy.so/contracts` 4.12.0 (`src/inference/errors.ts`) by Kaana ADR 0002.
  */
 import { z } from 'zod';
+import { maxUtf16Length } from '../stringBounds.js';
 import { publicErrorSchema, safeErrorTextSchema, upstreamErrorCategorySchema, } from '../public/errors.js';
 import { requestIdSchema } from '../public/identifiers.js';
 import { inferenceProviderSlugSchema } from './identifiers.js';
@@ -120,7 +121,7 @@ export const providerErrorPassthroughSchema = z
     /** The upstream HTTP status, when the upstream spoke HTTP. */
     status: z.number().int().min(100).max(599).optional(),
     /** The upstream's own error code, verbatim and uninterpreted. */
-    code: z.string().max(128).optional(),
+    code: z.string().check(maxUtf16Length(128)).optional(),
     /** The upstream's message, subject to the same credential refusal. */
     message: safeErrorTextSchema.optional(),
 })
@@ -143,7 +144,7 @@ export const inferenceErrorSchema = z
     /** How long to wait before retrying. Only meaningful when `retryable`. */
     retryAfterMs: z.number().int().nonnegative().safe().optional(),
     /** The request field at fault, for `invalid_request`. */
-    param: z.string().max(128).optional(),
+    param: z.string().check(maxUtf16Length(128)).optional(),
     /** Present only when an upstream provider was reached and failed. */
     upstreamCategory: upstreamErrorCategorySchema.optional(),
     providerError: providerErrorPassthroughSchema.optional(),

package/dist/internal/grant.d.ts

@@ -241,12 +241,8 @@ export declare const grantLaneSchema: z.ZodEnum<{
     service_token: "service_token";
     product_session: "product_session";
 }>;
-/**
- * Who pays and who called. `billingAccountId` is the owner of the
- * authenticated application, UNRESOLVED: the ledger resolves the billable
- * ancestor. The end user never pays.
- */
-export declare const grantPrincipalSchema: z.ZodObject<{
+export declare const grantPrincipalSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    authority: z.ZodLiteral<"first_party">;
     billingAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
     applicationId: z.ZodString;
     credentialId: z.ZodString;
@@ -255,6 +251,13 @@ export declare const grantPrincipalSchema: z.ZodObject<{
         staging: "staging";
         production: "production";
     }>;
+    lane: z.ZodEnum<{
+        machine_credential: "machine_credential";
+        service_token: "service_token";
+        product_session: "product_session";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    authority: z.ZodOptional<z.ZodLiteral<"external">>;
     scopes: z.ZodArray<z.ZodEnum<{
         "inference:invoke": "inference:invoke";
         "inference:models:read": "inference:models:read";
@@ -264,12 +267,20 @@ export declare const grantPrincipalSchema: z.ZodObject<{
         "inference:providers:read": "inference:providers:read";
         "inference:providers:write": "inference:providers:write";
     }>>;
+    billingAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+    applicationId: z.ZodString;
+    credentialId: z.ZodString;
+    environment: z.ZodEnum<{
+        development: "development";
+        staging: "staging";
+        production: "production";
+    }>;
     lane: z.ZodEnum<{
         machine_credential: "machine_credential";
         service_token: "service_token";
         product_session: "product_session";
     }>;
-}, z.core.$strict>;
+}, z.core.$strict>], "authority">;
 /** A model line Oxy admits for a step, with the price it settles at. */
 export declare const admittedModelLineSchema: z.ZodObject<{
     modelLine: z.ZodString;
@@ -374,7 +385,8 @@ export declare const grantSchema: z.ZodObject<{
     issuedAt: z.ZodString;
     executeBy: z.ZodString;
     bodySha256: z.ZodString;
-    principal: z.ZodObject<{
+    principal: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        authority: z.ZodLiteral<"first_party">;
         billingAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
         applicationId: z.ZodString;
         credentialId: z.ZodString;
@@ -383,6 +395,13 @@ export declare const grantSchema: z.ZodObject<{
             staging: "staging";
             production: "production";
         }>;
+        lane: z.ZodEnum<{
+            machine_credential: "machine_credential";
+            service_token: "service_token";
+            product_session: "product_session";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        authority: z.ZodOptional<z.ZodLiteral<"external">>;
         scopes: z.ZodArray<z.ZodEnum<{
             "inference:invoke": "inference:invoke";
             "inference:models:read": "inference:models:read";
@@ -392,12 +411,20 @@ export declare const grantSchema: z.ZodObject<{
             "inference:providers:read": "inference:providers:read";
             "inference:providers:write": "inference:providers:write";
         }>>;
+        billingAccountId: z.core.$ZodBranded<z.ZodString, "OxyAccountId", "out">;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<{
+            development: "development";
+            staging: "staging";
+            production: "production";
+        }>;
         lane: z.ZodEnum<{
             machine_credential: "machine_credential";
             service_token: "service_token";
             product_session: "product_session";
         }>;
-    }, z.core.$strict>;
+    }, z.core.$strict>], "authority">;
     userId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "DelegatedUserId", "out">>;
     economics: z.ZodObject<{
         treatment: z.ZodEnum<{

package/dist/internal/grant.js

@@ -18,6 +18,7 @@
  * operation, decisions included, is an ordinary grant of ordered steps.
  */
 import { z } from 'zod';
+import { maxUtf16Length, minUtf16Length } from '../stringBounds.js';
 import { powerLevelSchema, realtimeSessionKindSchema } from '../public/catalogue.js';
 import { generationRecordSchema } from '../public/generations.js';
 import { delegatedUserIdSchema, generationIdSchema, idempotencyKeySchema, inferenceEnvironmentSchema, inferenceRegionSchema, inferenceTimestampSchema, modelIdSchema, modelRevisionLabelSchema, oxyApplicationIdSchema, oxyCredentialIdSchema, requestIdSchema, } from '../public/identifiers.js';
@@ -113,7 +114,7 @@ export const grantRequestFactsSchema = z
     realtimeSessionKind: realtimeSessionKindSchema.optional(),
 })
     .strict();
-const credentialSchema = z.string().min(1).max(8192);
+const credentialSchema = z.string().check(minUtf16Length(1)).check(maxUtf16Length(8192));
 /**
  * `POST /internal/kaana/v1/authorizations` for an inference request. Kaana
  * authenticates as a workload (Oxy ADR 0026); `credential` is the caller's
@@ -137,8 +138,8 @@ export const inferenceAuthorizationRequestSchema = z
     client: z
         .object({
         /** The public path, e.g. `/v1/responses`. */
-        endpoint: z.string().min(1).max(256),
-        clientRequestId: z.string().min(1).max(128).optional(),
+        endpoint: z.string().check(minUtf16Length(1)).check(maxUtf16Length(256)),
+        clientRequestId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
         receivedAt: inferenceTimestampSchema,
         labels: requestLabelsSchema.optional(),
     })
@@ -197,21 +198,37 @@ export const grantLaneSchema = z.enum(['machine_credential', 'service_token', 'p
  * authenticated application, UNRESOLVED: the ledger resolves the billable
  * ancestor. The end user never pays.
  */
-export const grantPrincipalSchema = z
-    .object({
+const grantPrincipalIdentity = {
     billingAccountId: oxyAccountIdSchema,
     applicationId: oxyApplicationIdSchema,
     credentialId: oxyCredentialIdSchema,
     environment: inferenceEnvironmentSchema,
-    scopes: z.array(inferenceScopeSchema),
     lane: grantLaneSchema,
-})
-    .strict();
+};
+export const grantPrincipalSchema = z
+    .discriminatedUnion('authority', [
+    z.object({ ...grantPrincipalIdentity, authority: z.literal('first_party') }).strict(),
+    z
+        .object({
+        ...grantPrincipalIdentity,
+        authority: z.literal('external').optional(),
+        scopes: z.array(inferenceScopeSchema),
+    })
+        .strict(),
+])
+    .superRefine((principal, ctx) => {
+    if (principal.authority === 'first_party' && principal.lane === 'machine_credential')
+        ctx.addIssue({
+            code: 'custom',
+            path: ['lane'],
+            message: 'A customer API key never has first-party authority',
+        });
+});
 /** A model line Oxy admits for a step, with the price it settles at. */
 export const admittedModelLineSchema = z
     .object({
     modelLine: modelIdSchema,
-    priceVersionId: z.string().min(1).max(128),
+    priceVersionId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
 })
     .strict();
 /**
@@ -234,7 +251,9 @@ export const grantStepLimitsSchema = z
     deniedRegions: z.array(inferenceRegionSchema).default([]),
     requireZeroDataRetention: z.boolean(),
     prohibitTrainingOnCustomerData: z.boolean(),
-    allowedLicenseIds: z.array(z.string().min(1).max(128)).default([]),
+    allowedLicenseIds: z
+        .array(z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)))
+        .default([]),
     requireCommercialUseRights: z.boolean(),
     /**
      * Whether Kaana may fail over, inside this step, between providers (and
@@ -304,7 +323,7 @@ const customerProviderCredentialBinding = authorizedRouteSchema.options[0].shape
 export const grantSchema = z
     .object({
     schemaVersion: z.literal(1),
-    grantId: z.string().min(1).max(128),
+    grantId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
     requestId: requestIdSchema,
     operation: grantOperationSchema,
     issuedAt: inferenceTimestampSchema,
@@ -318,14 +337,14 @@ export const grantSchema = z
     economics: z
         .object({
         treatment: inferenceEconomicTreatmentSchema,
-        policyVersion: z.string().min(1).max(128),
-        relationshipId: z.string().min(1).max(128).optional(),
+        policyVersion: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
+        relationshipId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)).optional(),
     })
         .strict(),
     /** The hold. Absent for `internal_metered`, which holds nothing. */
     reservation: z
         .object({
-        reservationId: z.string().min(1).max(128),
+        reservationId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)),
         /** The most the hold covers. Shown, never spent by Kaana. */
         ceiling: moneySchema,
         /** `promotional-only`: the hold draws on promotional credit alone. */
@@ -335,7 +354,7 @@ export const grantSchema = z
         .optional(),
     /** The capacity slot an internal relationship claimed (e.g. `alia-kaana`). */
     capacity: z
-        .object({ meteredUsageId: z.string().min(1).max(128) })
+        .object({ meteredUsageId: z.string().check(minUtf16Length(1)).check(maxUtf16Length(128)) })
         .strict()
         .optional(),
     steps: z.array(grantStepSchema).min(1).max(8),