@oxy.so/contracts 1.0.0

package/dist/types/inference/routingPolicy.d.ts

@@ -0,0 +1,616 @@
+/**
+ * Routing policy — the customer-facing routing configuration.
+ *
+ * Stored under an Oxy account or application (the control plane owns it),
+ * executed by the data plane, which owns execution. Every request records the
+ * exact `{routingPolicyId, policyVersion}` it was served under, so a route
+ * decision months old can be explained against the policy that was in force,
+ * not against the policy that exists now.
+ *
+ * Two rules shape the fallback controls:
+ *
+ *  - **Same-model deployment failover is not cross-model fallback.** Moving
+ *    between two deployments of the SAME revision is an availability decision
+ *    and is on by default; serving a DIFFERENT model is a substitution the
+ *    customer must have authorized by name.
+ *  - **A request for a concrete model is never silently replaced.** Cross-model
+ *    fallback is an explicit list of references, and a switch that uses it emits
+ *    a customer-visible route-switch event.
+ *
+ * The controls are flat and independent, matching what Console renders — which
+ * means contradictory combinations are EXPRESSIBLE and must therefore be
+ * REJECTED, rather than being quietly resolved by whichever field the executor
+ * happens to read first. That rejection is `routingPolicySchema`'s refinement.
+ *
+ * **The policy itself never crosses to the data plane.** What crosses is
+ * {@link authorizedRouteSchema} — the candidate routes that SURVIVED these
+ * controls, in preference order — plus {@link routingPolicyReferenceSchema} as
+ * provenance for the receipt. The data plane holds no control value and needs
+ * none: it fails over by taking the next entry. See ADR 0017.
+ *
+ * Decided in: docs/adr/0008-catalogue-concept-separation.md,
+ * docs/adr/0017-authorized-routes-in-the-envelope.md, issue #972 workstream 6.
+ */
+import { z } from "zod";
+/**
+ * What a policy resolves to when a caller names no model.
+ *
+ * A discriminated union rather than two optional fields, so "which one did the
+ * customer configure" is never a question about which field is non-null.
+ */
+export declare const routingTargetSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"model">;
+    modelReference: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    kind: "model";
+    modelReference: string;
+}, {
+    kind: "model";
+    modelReference: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"routing_profile_id">;
+    routingProfileId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    kind: "routing_profile_id";
+    routingProfileId: string;
+}, {
+    kind: "routing_profile_id";
+    routingProfileId: string;
+}>]>;
+/**
+ * Which account or application a policy governs.
+ *
+ * Application-scoped policies are the common case; an account-scoped policy is
+ * the floor its applications inherit, and inheritance is resolved by the control
+ * plane before a policy reaches the data plane.
+ */
+export declare const routingPolicyScopeSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"account">;
+    accountId: z.ZodBranded<z.ZodString, "OxyAccountId">;
+}, "strict", z.ZodTypeAny, {
+    kind: "account";
+    accountId: string & z.BRAND<"OxyAccountId">;
+}, {
+    kind: "account";
+    accountId: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"application">;
+    accountId: z.ZodBranded<z.ZodString, "OxyAccountId">;
+    applicationId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    kind: "application";
+    accountId: string & z.BRAND<"OxyAccountId">;
+    applicationId: string;
+}, {
+    kind: "application";
+    accountId: string;
+    applicationId: string;
+}>]>;
+/**
+ * The fallback controls, kept together so a reviewer sees all three at once.
+ *
+ * `authorizedCrossModel` is a list of model references the customer has
+ * explicitly permitted as substitutes — never a boolean, because "allow
+ * fallback" without naming the destination is exactly the silent substitution
+ * the invariant forbids.
+ */
+export declare const routingFallbackPolicySchema: z.ZodObject<{
+    disabled: z.ZodBoolean;
+    sameModelDeployment: z.ZodBoolean;
+    authorizedCrossModel: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    disabled: boolean;
+    sameModelDeployment: boolean;
+    authorizedCrossModel: string[];
+}, {
+    disabled: boolean;
+    sameModelDeployment: boolean;
+    authorizedCrossModel?: string[] | undefined;
+}>;
+/**
+ * A versioned routing policy.
+ *
+ * `policyVersion` is the CUSTOMER's revision of their own configuration and is
+ * unrelated to `schemaVersion`, which is the version of this wire shape. They
+ * are two different clocks: a customer edits their policy without any contract
+ * change, and a contract change does not renumber anybody's policy.
+ */
+export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
+    /** See `version.ts`: exchanged with the data plane on its own. */
+    schemaVersion: z.ZodLiteral<2>;
+    routingPolicyId: z.ZodString;
+    policyVersion: z.ZodNumber;
+    scope: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"account">;
+        accountId: z.ZodBranded<z.ZodString, "OxyAccountId">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "account";
+        accountId: string & z.BRAND<"OxyAccountId">;
+    }, {
+        kind: "account";
+        accountId: string;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"application">;
+        accountId: z.ZodBranded<z.ZodString, "OxyAccountId">;
+        applicationId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "application";
+        accountId: string & z.BRAND<"OxyAccountId">;
+        applicationId: string;
+    }, {
+        kind: "application";
+        accountId: string;
+        applicationId: string;
+    }>]>;
+    /** Absent when every request must name its own model. */
+    defaultTarget: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"model">;
+        modelReference: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "model";
+        modelReference: string;
+    }, {
+        kind: "model";
+        modelReference: string;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"routing_profile_id">;
+        routingProfileId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "routing_profile_id";
+        routingProfileId: string;
+    }, {
+        kind: "routing_profile_id";
+        routingProfileId: string;
+    }>]>>;
+    /** Empty means "no allowlist" — every provider qualifies unless denied. */
+    providerAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    providerDenylist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Empty means "no residency constraint". */
+    allowedRegions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    deniedRegions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    requireZeroDataRetention: z.ZodBoolean;
+    prohibitTrainingOnCustomerData: z.ZodBoolean;
+    /** Ceilings on what a route may cost the customer, quoted like catalogue prices. */
+    maxPricePerUnit: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        unit: z.ZodEnum<["input_tokens", "cached_input_tokens", "output_tokens", "reasoning_tokens", "requests", "images", "audio_input_milliseconds", "audio_output_milliseconds", "video_milliseconds", "characters", "embeddings"]>;
+        amount: z.ZodBranded<z.ZodString, "ExactDecimal">;
+        per: z.ZodNumber;
+        currency: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
+        unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
+        per: number;
+    }, {
+        currency: string;
+        amount: string;
+        unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
+        per: number;
+    }>, "many">>;
+    maxPricePerRequest: z.ZodOptional<z.ZodObject<{
+        amount: z.ZodBranded<z.ZodString, "ExactDecimal">;
+        currency: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
+    }, {
+        currency: string;
+        amount: string;
+    }>>;
+    /** What to optimise for among the routes that qualify. */
+    optimiseFor: z.ZodEnum<["price", "latency", "throughput", "balanced"]>;
+    /** Serve only from Oxy's own hosting of open-weight models. */
+    oxyHostedOnly: z.ZodBoolean;
+    /** License / usage-right constraints. Empty license list means unconstrained. */
+    allowedLicenseIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    requireCommercialUseRights: z.ZodBoolean;
+    fallback: z.ZodObject<{
+        disabled: z.ZodBoolean;
+        sameModelDeployment: z.ZodBoolean;
+        authorizedCrossModel: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        disabled: boolean;
+        sameModelDeployment: boolean;
+        authorizedCrossModel: string[];
+    }, {
+        disabled: boolean;
+        sameModelDeployment: boolean;
+        authorizedCrossModel?: string[] | undefined;
+    }>;
+    /** Whether the customer's own provider credentials may or must be used. */
+    byokPreference: z.ZodEnum<["disabled", "prefer", "require"]>;
+    /** Enterprise reserved capacity rather than shared endpoints. */
+    dedicatedCapacity: z.ZodEnum<["disabled", "prefer", "require"]>;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    updatedAt: string;
+    schemaVersion: 2;
+    scope: {
+        kind: "account";
+        accountId: string & z.BRAND<"OxyAccountId">;
+    } | {
+        kind: "application";
+        accountId: string & z.BRAND<"OxyAccountId">;
+        applicationId: string;
+    };
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
+    routingPolicyId: string;
+    policyVersion: number;
+    providerAllowlist: string[];
+    providerDenylist: string[];
+    allowedRegions: string[];
+    deniedRegions: string[];
+    requireZeroDataRetention: boolean;
+    prohibitTrainingOnCustomerData: boolean;
+    maxPricePerUnit: {
+        currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
+        unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
+        per: number;
+    }[];
+    oxyHostedOnly: boolean;
+    allowedLicenseIds: string[];
+    requireCommercialUseRights: boolean;
+    fallback: {
+        disabled: boolean;
+        sameModelDeployment: boolean;
+        authorizedCrossModel: string[];
+    };
+    byokPreference: "disabled" | "prefer" | "require";
+    defaultTarget?: {
+        kind: "model";
+        modelReference: string;
+    } | {
+        kind: "routing_profile_id";
+        routingProfileId: string;
+    } | undefined;
+    maxPricePerRequest?: {
+        currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
+    } | undefined;
+}, {
+    updatedAt: string;
+    schemaVersion: 2;
+    scope: {
+        kind: "account";
+        accountId: string;
+    } | {
+        kind: "application";
+        accountId: string;
+        applicationId: string;
+    };
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
+    routingPolicyId: string;
+    policyVersion: number;
+    requireZeroDataRetention: boolean;
+    prohibitTrainingOnCustomerData: boolean;
+    oxyHostedOnly: boolean;
+    requireCommercialUseRights: boolean;
+    fallback: {
+        disabled: boolean;
+        sameModelDeployment: boolean;
+        authorizedCrossModel?: string[] | undefined;
+    };
+    byokPreference: "disabled" | "prefer" | "require";
+    defaultTarget?: {
+        kind: "model";
+        modelReference: string;
+    } | {
+        kind: "routing_profile_id";
+        routingProfileId: string;
+    } | undefined;
+    providerAllowlist?: string[] | undefined;
+    providerDenylist?: string[] | undefined;
+    allowedRegions?: string[] | undefined;
+    deniedRegions?: string[] | undefined;
+    maxPricePerUnit?: {
+        currency: string;
+        amount: string;
+        unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
+        per: number;
+    }[] | undefined;
+    maxPricePerRequest?: {
+        currency: string;
+        amount: string;
+    } | undefined;
+    allowedLicenseIds?: string[] | undefined;
+}>, {
+    updatedAt: string;
+    schemaVersion: 2;
+    scope: {
+        kind: "account";
+        accountId: string & z.BRAND<"OxyAccountId">;
+    } | {
+        kind: "application";
+        accountId: string & z.BRAND<"OxyAccountId">;
+        applicationId: string;
+    };
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
+    routingPolicyId: string;
+    policyVersion: number;
+    providerAllowlist: string[];
+    providerDenylist: string[];
+    allowedRegions: string[];
+    deniedRegions: string[];
+    requireZeroDataRetention: boolean;
+    prohibitTrainingOnCustomerData: boolean;
+    maxPricePerUnit: {
+        currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
+        unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
+        per: number;
+    }[];
+    oxyHostedOnly: boolean;
+    allowedLicenseIds: string[];
+    requireCommercialUseRights: boolean;
+    fallback: {
+        disabled: boolean;
+        sameModelDeployment: boolean;
+        authorizedCrossModel: string[];
+    };
+    byokPreference: "disabled" | "prefer" | "require";
+    defaultTarget?: {
+        kind: "model";
+        modelReference: string;
+    } | {
+        kind: "routing_profile_id";
+        routingProfileId: string;
+    } | undefined;
+    maxPricePerRequest?: {
+        currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
+    } | undefined;
+}, {
+    updatedAt: string;
+    schemaVersion: 2;
+    scope: {
+        kind: "account";
+        accountId: string;
+    } | {
+        kind: "application";
+        accountId: string;
+        applicationId: string;
+    };
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
+    routingPolicyId: string;
+    policyVersion: number;
+    requireZeroDataRetention: boolean;
+    prohibitTrainingOnCustomerData: boolean;
+    oxyHostedOnly: boolean;
+    requireCommercialUseRights: boolean;
+    fallback: {
+        disabled: boolean;
+        sameModelDeployment: boolean;
+        authorizedCrossModel?: string[] | undefined;
+    };
+    byokPreference: "disabled" | "prefer" | "require";
+    defaultTarget?: {
+        kind: "model";
+        modelReference: string;
+    } | {
+        kind: "routing_profile_id";
+        routingProfileId: string;
+    } | undefined;
+    providerAllowlist?: string[] | undefined;
+    providerDenylist?: string[] | undefined;
+    allowedRegions?: string[] | undefined;
+    deniedRegions?: string[] | undefined;
+    maxPricePerUnit?: {
+        currency: string;
+        amount: string;
+        unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
+        per: number;
+    }[] | undefined;
+    maxPricePerRequest?: {
+        currency: string;
+        amount: string;
+    } | undefined;
+    allowedLicenseIds?: string[] | undefined;
+}>;
+/**
+ * The reference a request records: which policy, at which of the customer's own
+ * revisions. Embedded in the request envelope and in the settled receipt, so a
+ * charge can be explained against the exact configuration that produced it.
+ */
+export declare const routingPolicyReferenceSchema: z.ZodObject<{
+    routingPolicyId: z.ZodString;
+    policyVersion: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    routingPolicyId: string;
+    policyVersion: number;
+}, {
+    routingPolicyId: string;
+    policyVersion: number;
+}>;
+/**
+ * One route the control plane has already authorized for one request.
+ *
+ * **Authorization is an ENTRY, never a boolean.** The same stance
+ * `inference_routing_policy_fallbacks` takes in storage: being allowed to serve
+ * a route IS appearing here, and every entry names its destination. A flag
+ * saying "substitution allowed" without naming the destination is exactly the
+ * silent substitution the platform forbids, and it invents a "flag set, list
+ * empty" state somebody then has to decide what to do with.
+ *
+ * Discriminated on `substitution`, relative to the FIRST entry — the primary
+ * route Oxy resolved:
+ *
+ *  - `same_model` serves the same model line as the primary. This is
+ *    availability failover between deployments of one model.
+ *  - `cross_model` serves a DIFFERENT model line, and is expressible only with
+ *    `authorizedByPolicy: true` as a literal. So "a model was substituted
+ *    without the customer authorizing it" is not a sentence this contract can
+ *    say — the same construction `inferenceRouteSwitchDetailSchema` uses to make
+ *    the resulting route-switch event unreportable.
+ */
+export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion<"substitution", [z.ZodObject<{
+    deploymentId: z.ZodString;
+    modelReference: z.ZodString;
+    provider: z.ZodString;
+    regions: z.ZodArray<z.ZodString, "many">;
+    customerProviderCredential: z.ZodOptional<z.ZodObject<{
+        credentialHandle: z.ZodString;
+        credentialRevision: z.ZodNumber;
+        ownerAccountId: z.ZodBranded<z.ZodString, "OxyAccountId">;
+        connectionId: z.ZodString;
+        environment: z.ZodEnum<["development", "staging", "production"]>;
+    }, "strict", z.ZodTypeAny, {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string & z.BRAND<"OxyAccountId">;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    }, {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    }>>;
+    substitution: z.ZodLiteral<"same_model">;
+}, "strict", z.ZodTypeAny, {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "same_model";
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string & z.BRAND<"OxyAccountId">;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+}, {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "same_model";
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+}>, z.ZodObject<{
+    /** Literal `true`: an unauthorized substitution cannot be expressed. */
+    authorizedByPolicy: z.ZodLiteral<true>;
+    deploymentId: z.ZodString;
+    modelReference: z.ZodString;
+    provider: z.ZodString;
+    regions: z.ZodArray<z.ZodString, "many">;
+    customerProviderCredential: z.ZodOptional<z.ZodObject<{
+        credentialHandle: z.ZodString;
+        credentialRevision: z.ZodNumber;
+        ownerAccountId: z.ZodBranded<z.ZodString, "OxyAccountId">;
+        connectionId: z.ZodString;
+        environment: z.ZodEnum<["development", "staging", "production"]>;
+    }, "strict", z.ZodTypeAny, {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string & z.BRAND<"OxyAccountId">;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    }, {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    }>>;
+    substitution: z.ZodLiteral<"cross_model">;
+}, "strict", z.ZodTypeAny, {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "cross_model";
+    authorizedByPolicy: true;
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string & z.BRAND<"OxyAccountId">;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+}, {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "cross_model";
+    authorizedByPolicy: true;
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+}>]>, {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "same_model";
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string & z.BRAND<"OxyAccountId">;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+} | {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "cross_model";
+    authorizedByPolicy: true;
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string & z.BRAND<"OxyAccountId">;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+}, {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "same_model";
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+} | {
+    provider: string;
+    modelReference: string;
+    regions: string[];
+    deploymentId: string;
+    substitution: "cross_model";
+    authorizedByPolicy: true;
+    customerProviderCredential?: {
+        environment: "development" | "staging" | "production";
+        ownerAccountId: string;
+        connectionId: string;
+        credentialHandle: string;
+        credentialRevision: number;
+    } | undefined;
+}>;
+export type RoutingTarget = z.infer<typeof routingTargetSchema>;
+export type RoutingPolicyScope = z.infer<typeof routingPolicyScopeSchema>;
+export type RoutingFallbackPolicy = z.infer<typeof routingFallbackPolicySchema>;
+export type RoutingPolicy = z.infer<typeof routingPolicySchema>;
+export type RoutingPolicyReference = z.infer<typeof routingPolicyReferenceSchema>;
+export type AuthorizedRoute = z.infer<typeof authorizedRouteSchema>;