@oxy.so/contracts 4.25.0 → 5.1.0

package/dist/esm/inference/request.js

@@ -23,10 +23,7 @@
  * Decided in: docs/adr/0010-public-api-compatibility.md,
  * docs/adr/0017-authorized-routes-in-the-envelope.md.
  */
-import { decisionInputSchema } from './decisions.js';
 import { z } from "zod";
-import { scopedExecutionSchema, SCOPED_REQUEST_ENVELOPE_VERSION } from "./scopedExecution.js";
-import { privateAutoExecutionSchema, privateAutoInputSchema, PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION } from "./privateAutoExecution.js";
 import { inferenceAttributionSchema } from "./attribution.js";
 import { inferenceApiFormatSchema, inferenceModalitySchema, reasoningEffortSchema, } from "./catalogue.js";
 import { idempotencyKeySchema, inferenceTimestampSchema } from "./identifiers.js";
@@ -198,7 +195,6 @@ export const inferenceMessageSchema = z
  * that both metering and provider translation depend on.
  */
 export const inferenceInputSchema = z.discriminatedUnion("format", [
-    z.object({ format: z.literal("decisions"), decisions: decisionInputSchema }).strict(),
     z
         .object({
         format: z.literal("messages"),
@@ -353,8 +349,6 @@ export const inferenceRequestSchema = z
     .object({
     /** See `version.ts`: this is the Oxy→data-plane request envelope. */
     schemaVersion: z.literal(2),
-    /** Recognized so v2 refuses rather than silently stripping a restriction. */
-    scopedExecution: scopedExecutionSchema.optional(),
     attribution: inferenceAttributionSchema,
     target: routingTargetSchema,
     modality: inferenceModalitySchema,
@@ -409,18 +403,10 @@ export const inferenceRequestSchema = z
     authorizedRoutes: z.array(authorizedRouteSchema).min(1).optional(),
 })
     .superRefine((request, ctx) => {
-    if (request.scopedExecution !== undefined)
-        ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["scopedExecution"], message: "Scoped execution requires envelope v3." });
-    if (request.input.format === "decisions" || request.client.apiFormat === "decisions") {
-        const exactModel = request.target.kind === "model" && request.target.modelReference.includes('@');
-        const foreignRoute = request.authorizedRoutes?.some((route) => request.target.kind !== "model" || route.modelReference !== request.target.modelReference || route.substitution !== "same_model");
-        if (request.input.format !== "decisions" || request.client.apiFormat !== "decisions" ||
-            request.modality !== "text" || request.stream || !exactModel || foreignRoute ||
-            request.maxOutputTokens !== undefined || Object.keys(request.sampling).length > 0 ||
-            request.tools.length > 0 || request.toolChoice !== undefined || request.responseFormat !== undefined ||
-            request.reasoning !== undefined || request.speech !== undefined || request.audioOutput !== undefined) {
-            ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["input"], message: "Decisions require exact-model typed nonstreaming input without generation controls or model substitution." });
-        }
+    // Decisions are a grant operation of `kaana.ai/v1` (Kaana ADR 0002) and
+    // never ride this envelope.
+    if (request.client.apiFormat === "decisions") {
+        ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["client", "apiFormat"], message: "Decisions are served by https://kaana.ai/v1/decisions, never on this envelope." });
     }
     const isSpeech = request.client.apiFormat === "audio_speech";
     if (isSpeech && request.speech !== undefined && (request.modality !== "audio" || request.input.format !== "text" || request.stream)) {
@@ -540,63 +526,3 @@ export const inferenceRequestSchema = z
         });
     }
 });
-/** Explicit restrictive generation: old v2 receivers reject this version whole. */
-export const scopedInferenceRequestSchema = inferenceRequestSchema.innerType()
-    .extend({ schemaVersion: z.literal(SCOPED_REQUEST_ENVELOPE_VERSION), scopedExecution: scopedExecutionSchema })
-    .superRefine((request, ctx) => {
-    const { scopedExecution: scope, ...base } = request;
-    const legacy = inferenceRequestSchema.safeParse({ ...base, schemaVersion: 2 });
-    if (!legacy.success)
-        for (const issue of legacy.error.issues)
-            ctx.addIssue(issue);
-    const principal = request.attribution.principal;
-    const route = request.authorizedRoutes?.[0];
-    if (request.input.format !== "decisions" || request.client.apiFormat !== "decisions" ||
-        scope.requestId !== request.attribution.requestId ||
-        scope.idempotencyKey !== request.idempotencyKey ||
-        scope.principal.accountId !== principal.billing.accountId ||
-        scope.principal.applicationId !== principal.applicationId ||
-        scope.principal.credentialId !== principal.credentialId ||
-        scope.principal.environment !== principal.environment ||
-        scope.policy.routingPolicyId !== request.routingPolicy.routingPolicyId ||
-        scope.policy.policyVersion !== request.routingPolicy.policyVersion ||
-        request.authorizedRoutes?.length !== 1 || route?.customerProviderCredential !== undefined ||
-        route?.deploymentId !== scope.deploymentId || route?.provider !== scope.provider ||
-        route?.modelReference !== scope.modelReference ||
-        request.target.kind !== "model" || request.target.modelReference !== scope.modelReference) {
-        ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["scopedExecution"], message: "Scoped execution must restrict the exact attributed decisions request and one platform route." });
-    }
-});
-/** Private repeated Auto is independently negotiated, never a v3 fixture renewal. */
-export const privateAutoInferenceRequestSchema = inferenceRequestSchema.innerType()
-    .omit({ scopedExecution: true })
-    .extend({ schemaVersion: z.literal(PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION), privateAutoExecution: privateAutoExecutionSchema })
-    .strict()
-    .superRefine((request, ctx) => {
-    const { privateAutoExecution: permit, ...base } = request;
-    const legacy = inferenceRequestSchema.safeParse({ ...base, schemaVersion: 2 });
-    if (!legacy.success)
-        for (const issue of legacy.error.issues)
-            ctx.addIssue(issue);
-    const input = privateAutoInputSchema.safeParse(request.input);
-    if (!input.success)
-        for (const issue of input.error.issues)
-            ctx.addIssue({ ...issue, path: ['input', ...issue.path] });
-    const principal = request.attribution.principal;
-    const route = request.authorizedRoutes?.[0];
-    if (request.attribution.userId !== undefined || request.client.apiFormat !== 'decisions' || permit.requestId !== request.attribution.requestId ||
-        permit.operationId !== request.idempotencyKey ||
-        permit.principal.accountId !== principal.billing.accountId ||
-        permit.principal.applicationId !== principal.applicationId ||
-        permit.principal.credentialId !== principal.credentialId || permit.principal.environment !== principal.environment ||
-        !principal.inferenceScopes.includes('inference:invoke') || request.client.endpoint !== '/internal/auto-classification' ||
-        permit.policy.routingPolicyId !== request.routingPolicy.routingPolicyId || permit.policy.policyVersion !== request.routingPolicy.policyVersion ||
-        request.authorizedRoutes?.length !== 1 || route?.customerProviderCredential !== undefined ||
-        route?.deploymentId !== permit.deploymentId || route?.provider !== permit.provider || route?.modelReference !== permit.modelReference ||
-        request.target.kind !== 'model' || request.target.modelReference !== permit.modelReference ||
-        route.regions.length !== permit.regions.length || route.regions.some((region) => !permit.regions.includes(region)) ||
-        Date.parse(permit.runtimeExpiresAt) <= Date.parse(request.client.receivedAt) ||
-        Date.parse(permit.runtimeExpiresAt) > Date.parse(request.client.receivedAt) + 1000) {
-        ctx.addIssue({ code: z.ZodIssueCode.custom, path: ['privateAutoExecution'], message: 'Private Auto must bind one exact attributed decisions child and platform route.' });
-    }
-});

package/dist/esm/inference/version.js

@@ -99,4 +99,4 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export const INFERENCE_CONTRACT_VERSION = '3.9.0';
+export const INFERENCE_CONTRACT_VERSION = '4.0.0';

package/dist/esm/signIn.js

@@ -208,18 +208,6 @@ export const reauthProofSchema = z
     .refine((proof) => proof.password !== undefined || proof.emailCode !== undefined, {
     message: 'password or emailCode is required',
 });
-/** A proof by email code only (+ TOTP): deleting an account, linking Commons. */
-export const emailReauthProofSchema = z
-    .object({
-    emailCode: z
-        .object({
-        verificationId: z.string().trim().min(1).max(64),
-        code: sixDigits,
-    })
-        .strict(),
-    totpCode: secondFactorCodeSchema.optional(),
-})
-    .strict();
 /** `PUT /users/me/password` — set or change the password. */
 export const passwordSetRequestSchema = z
     .object({
@@ -229,6 +217,27 @@ export const passwordSetRequestSchema = z
     revokeOtherSessions: z.boolean().optional(),
 })
     .strict();
+/**
+ * `DELETE /users/me/password` — only while the account has an email to sign
+ * in with; `DELETE /users/me/email` — only while it has a password, and
+ * confirmed with that password.
+ */
+export const signInMethodRemoveRequestSchema = z.object({ reauth: reauthProofSchema }).strict();
+/** `POST /users/me/email/verify/start` — a code to the address the account moves to. */
+export const emailChangeStartRequestSchema = z.object({ email: emailAddressSchema }).strict();
+/**
+ * `PUT /users/me/email` — add or change the email: the NEW address and the
+ * code it got (`verificationId`, `code`), and the proof it is the person (the
+ * password, or a code to the current email; plus the authenticator's).
+ */
+export const emailSetRequestSchema = z
+    .object({
+    email: emailAddressSchema,
+    verificationId: z.string().trim().min(1).max(64),
+    code: sixDigits,
+    reauth: reauthProofSchema,
+})
+    .strict();
 export const signInMethodsSchema = z.object({
     hasEmail: z.boolean(),
     hasPassword: z.boolean(),

package/dist/types/client/accountEmail.d.ts

@@ -10,8 +10,10 @@ import type { EmailVerificationConfirmResponse, EmailVerificationStartResponse }
  * - `reauth`: a signed-in person proving it is them before a sensitive step
  *   (`POST /users/me/reauth/email`): a password, an authenticator, deleting the
  *   account, linking Commons.
+ * - `email_change`: a signed-in account proving the NEW address it moves to
+ *   (`POST /users/me/email/verify/start`); bound to the account and that address.
  */
-export declare const EMAIL_VERIFICATION_PURPOSES: readonly ["signup", "signin", "reauth"];
+export declare const EMAIL_VERIFICATION_PURPOSES: readonly ["signup", "signin", "reauth", "email_change"];
 export type EmailVerificationPurpose = (typeof EMAIL_VERIFICATION_PURPOSES)[number];
 /** Digits in a code. */
 export declare const EMAIL_CODE_LENGTH = 6;

package/dist/types/client/signIn.d.ts

@@ -50,7 +50,7 @@ export declare function isEmailSignInChooseAccount(result: EmailSignInStepResult
  * What a re-verification email code confirms. The code is bound to it: a code
  * asked for one change never authorises another, and the email names it.
  */
-export declare const REAUTH_ACTIONS: readonly ["change_password", "totp", "link_commons", "delete_account", "credentials_manage", "supervision", "supervision_purchase"];
+export declare const REAUTH_ACTIONS: readonly ["change_password", "change_email", "totp", "link_commons", "delete_account", "credentials_manage", "supervision", "supervision_purchase"];
 export type ReauthAction = (typeof REAUTH_ACTIONS)[number];
 /**
  * Stable error codes (`error.code` in the API error body). Clients map these
@@ -87,6 +87,12 @@ export declare const SIGN_IN_ERROR_CODES: {
     readonly usernameTaken: "USERNAME_TAKEN";
     /** The email already holds `EMAIL_ACCOUNTS_MAX` accounts: no sign-up adds another. */
     readonly emailAccountsFull: "EMAIL_ACCOUNTS_FULL";
+    /** Removing the one way in left (the email when there is no password, or the reverse). */
+    readonly lastSignInMethod: "LAST_SIGN_IN_METHOD";
+    /** Removing the email needs a password set, and is confirmed with it. */
+    readonly passwordRequired: "PASSWORD_REQUIRED";
+    /** The new email is the one the account already has. */
+    readonly emailUnchanged: "EMAIL_UNCHANGED";
 };
 export type SignInErrorCode = (typeof SIGN_IN_ERROR_CODES)[keyof typeof SIGN_IN_ERROR_CODES];
 export declare const emailSignInStartResponseCheck: import("./check").Check<EmailSignInStartResponse>;

package/dist/types/identityLink.d.ts

@@ -89,12 +89,13 @@ export declare const identityLinkProofRequestSchema: z.ZodObject<{
 export type IdentityLinkProofRequest = z.infer<typeof identityLinkProofRequestSchema>;
 /**
  * `POST /identity/link/:linkId/complete` — the account's own confirmation: a
- * code just sent to its email for this link (`reauth`, plus its authenticator
- * code when it has one).
+ * code just sent to its email for this link, or its password when it has no
+ * email (`reauth`, plus its authenticator code when it has one).
  */
 export declare const identityLinkCompleteRequestSchema: z.ZodObject<{
-    reauth: z.ZodObject<{
-        emailCode: z.ZodObject<{
+    reauth: z.ZodEffects<z.ZodObject<{
+        password: z.ZodOptional<z.ZodString>;
+        emailCode: z.ZodOptional<z.ZodObject<{
             verificationId: z.ZodString;
             code: z.ZodString;
         }, "strict", z.ZodTypeAny, {
@@ -103,35 +104,53 @@ export declare const identityLinkCompleteRequestSchema: z.ZodObject<{
         }, {
             code: string;
             verificationId: string;
-        }>;
+        }>>;
         totpCode: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        emailCode: {
+        password?: string | undefined;
+        emailCode?: {
             code: string;
             verificationId: string;
-        };
+        } | undefined;
         totpCode?: string | undefined;
     }, {
-        emailCode: {
+        password?: string | undefined;
+        emailCode?: {
             code: string;
             verificationId: string;
-        };
+        } | undefined;
+        totpCode?: string | undefined;
+    }>, {
+        password?: string | undefined;
+        emailCode?: {
+            code: string;
+            verificationId: string;
+        } | undefined;
+        totpCode?: string | undefined;
+    }, {
+        password?: string | undefined;
+        emailCode?: {
+            code: string;
+            verificationId: string;
+        } | undefined;
         totpCode?: string | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
     reauth: {
-        emailCode: {
+        password?: string | undefined;
+        emailCode?: {
             code: string;
             verificationId: string;
-        };
+        } | undefined;
         totpCode?: string | undefined;
     };
 }, {
     reauth: {
-        emailCode: {
+        password?: string | undefined;
+        emailCode?: {
             code: string;
             verificationId: string;
-        };
+        } | undefined;
         totpCode?: string | undefined;
     };
 }>;

package/dist/types/index.d.ts

@@ -58,8 +58,8 @@ export type { IdentityProofAction, IdentityErrorCode, IdentityProofClaims, Ident
 export { updatePlatformSchema, updateStatusSchema, updateAssetStatusSchema, sha256HexSchema, channelNameSchema, runtimeVersionSchema, rolloutPercentSchema, assetInitItemSchema, assetInitRequestSchema, assetUploadTicketSchema, assetInitResponseSchema, assetCompleteRequestSchema, assetCompleteResultItemSchema, assetCompleteResponseSchema, updateAssetRefSchema, createUpdateRequestSchema, updateSchema, createUpdateResponseSchema, rollbackToEmbeddedEntrySchema, channelSchema, channelListResponseSchema, updateListResponseSchema, rollbackRequestSchema, rollbackToEmbeddedRequestSchema, promoteRequestSchema, updateRolloutPatchSchema, } from './updates';
 export type { UpdatePlatform, UpdateStatus, UpdateAssetStatus, AssetInitItem, AssetInitRequest, AssetUploadTicket, AssetInitResponse, AssetCompleteRequest, AssetCompleteResultItem, AssetCompleteResponse, UpdateAssetRef, CreateUpdateRequest, Update, CreateUpdateResponse, RollbackToEmbeddedEntry, Channel, ChannelListResponse, UpdateListResponse, RollbackRequest, RollbackToEmbeddedRequest, PromoteRequest, UpdateRolloutPatch, } from './updates';
 export { EMAIL_VERIFICATION_PURPOSES, EMAIL_CODE_LENGTH, EMAIL_CODE_TTL_MS, EMAIL_CODE_MAX_ATTEMPTS, EMAIL_TICKET_TTL_MS, EMAIL_VERIFICATION_ERROR_CODES, emailAddressSchema, emailTicketSchema, emailVerificationStartRequestSchema, emailVerificationStartResponseSchema, emailVerificationConfirmRequestSchema, emailVerificationConfirmResponseSchema, } from './accountEmail';
-export { EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, SIGN_IN_ERROR_CODES, signInIdentifierSchema, passwordInputSchema, newPasswordSchema, secondFactorCodeSchema, emailSignInStartRequestSchema, emailSignInStartResponseSchema, emailSignInConfirmRequestSchema, emailSignInCodeSchema, normalizeEmailSignInCode, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, emailSignInCollectRequestSchema, emailSignInLinkRequestSchema, emailSignInLinkResponseSchema, emailSignInPendingSchema, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_ACCOUNTS_MAX, emailSignInAccountOptionSchema, emailSignInChooseAccountSchema, emailSignInChooseRequestSchema, isEmailSignInChooseAccount, passwordSignInRequestSchema, secondFactorSignInRequestSchema, secondFactorRequiredSchema, signUpRequestSchema, isSecondFactorRequired, reauthProofSchema, emailReauthProofSchema, REAUTH_ACTIONS, reauthEmailStartRequestSchema, passwordSetRequestSchema, signInMethodsSchema, totpEnrollResponseSchema, totpConfirmRequestSchema, totpReauthRequestSchema, totpBackupCodesResponseSchema, } from './signIn';
-export type { EmailSignInStartRequest, EmailSignInStartResponse, EmailSignInConfirmRequest, EmailSignInCollectRequest, EmailSignInLinkRequest, EmailSignInLinkResponse, EmailSignInPending, EmailSignInAccountOption, EmailSignInChooseAccount, EmailSignInChooseRequest, EmailSignInStepResult, PasswordSignInRequest, SecondFactorSignInRequest, SecondFactorRequired, SignInStepResult, SignUpRequest, ReauthProof, EmailReauthProof, ReauthAction, ReauthEmailStartRequest, PasswordSetRequest, SignInMethods, TotpEnrollResponse, TotpConfirmRequest, TotpReauthRequest, TotpBackupCodesResponse, SignInErrorCode, } from './signIn';
+export { EMAIL_SIGNIN_LINK_TTL_MS, SIGNIN_SECOND_FACTOR_TTL_MS, SIGNIN_SECOND_FACTOR_MAX_ATTEMPTS, PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, TOTP_DIGITS, TOTP_PERIOD_SECONDS, TOTP_BACKUP_CODE_COUNT, SIGN_IN_ERROR_CODES, signInIdentifierSchema, passwordInputSchema, newPasswordSchema, secondFactorCodeSchema, emailSignInStartRequestSchema, emailSignInStartResponseSchema, emailSignInConfirmRequestSchema, emailSignInCodeSchema, normalizeEmailSignInCode, EMAIL_SIGNIN_LONG_CODE_ALPHABET, EMAIL_SIGNIN_LONG_CODE_LENGTH, emailSignInCollectRequestSchema, emailSignInLinkRequestSchema, emailSignInLinkResponseSchema, emailSignInPendingSchema, EMAIL_SIGNIN_CHOICE_TTL_MS, EMAIL_ACCOUNTS_MAX, emailSignInAccountOptionSchema, emailSignInChooseAccountSchema, emailSignInChooseRequestSchema, isEmailSignInChooseAccount, passwordSignInRequestSchema, secondFactorSignInRequestSchema, secondFactorRequiredSchema, signUpRequestSchema, isSecondFactorRequired, reauthProofSchema, REAUTH_ACTIONS, reauthEmailStartRequestSchema, passwordSetRequestSchema, signInMethodRemoveRequestSchema, emailChangeStartRequestSchema, emailSetRequestSchema, signInMethodsSchema, totpEnrollResponseSchema, totpConfirmRequestSchema, totpReauthRequestSchema, totpBackupCodesResponseSchema, } from './signIn';
+export type { EmailSignInStartRequest, EmailSignInStartResponse, EmailSignInConfirmRequest, EmailSignInCollectRequest, EmailSignInLinkRequest, EmailSignInLinkResponse, EmailSignInPending, EmailSignInAccountOption, EmailSignInChooseAccount, EmailSignInChooseRequest, EmailSignInStepResult, PasswordSignInRequest, SecondFactorSignInRequest, SecondFactorRequired, SignInStepResult, SignUpRequest, ReauthProof, ReauthAction, ReauthEmailStartRequest, PasswordSetRequest, SignInMethodRemoveRequest, EmailChangeStartRequest, EmailSetRequest, SignInMethods, TotpEnrollResponse, TotpConfirmRequest, TotpReauthRequest, TotpBackupCodesResponse, SignInErrorCode, } from './signIn';
 export { IDENTITY_LINK_STATUSES, IDENTITY_LINK_QR_PREFIX, identityLinkIdSchema, buildIdentityLinkQrPayload, parseIdentityLinkQrPayload, identityLinkCreateResponseSchema, identityLinkStateSchema, identityLinkProofRequestSchema, identityLinkCompleteRequestSchema, } from './identityLink';
 export type { IdentityLinkStatus, IdentityLinkCreateResponse, IdentityLinkState, IdentityLinkProofRequest, IdentityLinkCompleteRequest, } from './identityLink';
 export type { EmailVerificationPurpose, EmailVerificationStartRequest, EmailVerificationStartResponse, EmailVerificationConfirmRequest, EmailVerificationConfirmResponse, EmailVerificationErrorCode, } from './accountEmail';
@@ -117,16 +117,6 @@ export * from './accountAccess';
 export * from './notifications';
 export * from './email/messages';
 export * from './stickers';
-export { decisionEffortSchema, decisionQuestionSchema, decisionInputSchema, decisionRequestSchema, decisionAnswerSchema, decisionResultSchema, decisionSuccessSchema, decisionFailureSchema, decisionInputBudget, decisionFitsGateway, decisionAnswersMatch, } from './inference/decisions';
-export type { DecisionQuestion, DecisionInput, DecisionRequest, DecisionAnswer, DecisionFailure, DecisionResult, DecisionSuccess, } from './inference/decisions';
-export { SCOPED_EXECUTION_CONTRACT_VERSION, SCOPED_REQUEST_ENVELOPE_VERSION, scopedExecutionAudienceSchema, scopedExecutionSchema, canonicalScopedExecutionJson, } from './inference/scopedExecution';
-export type { ScopedExecutionAudience, ScopedExecution } from './inference/scopedExecution';
-export { scopedInferenceRequestSchema } from './inference/request';
-export type { ScopedInferenceRequest } from './inference/request';
-export { PRIVATE_AUTO_EXECUTION_CONTRACT_VERSION, PRIVATE_AUTO_REQUEST_ENVELOPE_VERSION, PRIVATE_AUTO_LIMITS, PRIVATE_AUTO_INSTRUCTIONS, PRIVATE_AUTO_QUESTION, privateAutoPrincipalSchema, privateAutoSourceApprovalSchema, privateAutoExecutionSchema, privateAutoInputSchema, privateAutoOperationId, } from './inference/privateAutoExecution';
-export type { PrivateAutoPrincipal, PrivateAutoSourceApproval, PrivateAutoExecution, } from './inference/privateAutoExecution';
-export { privateAutoInferenceRequestSchema } from './inference/request';
-export type { PrivateAutoInferenceRequest } from './inference/request';
 export { productDefinitionSchema, subjectProductAccessQuerySchema, productBenefitSchema, productOfferSchema, productSubscriptionSourceSchema, productAccessGrantSchema, subjectProductGrantSnapshotSchema, productOfferSegmentSchema, subjectProductAccessSchema, } from './products/access';
 export type { ProductDefinition, SubjectProductAccessQuery, SubjectProductGrantSnapshot, ProductBenefit, ProductOffer, ProductSubscriptionSource, ProductAccessGrant, ProductOfferSegment, SubjectProductAccess, } from './products/access';
 export { meteredGenerationSchema, type MeteredGeneration } from './inference/economics';

package/dist/types/inference/catalogue.d.ts

@@ -1071,96 +1071,6 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
     /** See `version.ts`: exchanged with the data plane on its own. */
     schemaVersion: z.ZodLiteral<2>;
     deploymentId: z.ZodString;
-    /** Restrictive audience; never an eligibility approval. */
-    scopedExecution: z.ZodOptional<z.ZodObject<{
-        permitId: z.ZodString;
-        idempotencyKey: z.ZodString;
-        fixtureSha256: z.ZodString;
-        expiresAt: z.ZodString;
-        principal: z.ZodObject<{
-            accountId: z.ZodString;
-            applicationId: z.ZodString;
-            credentialId: z.ZodString;
-            environment: z.ZodEnum<["development", "staging", "production"]>;
-        }, "strict", z.ZodTypeAny, {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        }, {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        }>;
-        policy: z.ZodObject<{
-            routingPolicyId: z.ZodString;
-            policyVersion: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            routingPolicyId: string;
-            policyVersion: number;
-        }, {
-            routingPolicyId: string;
-            policyVersion: number;
-        }>;
-        deploymentId: z.ZodString;
-        provider: z.ZodString;
-        keyId: z.ZodString;
-        modelReference: z.ZodEffects<z.ZodString, string, string>;
-        upstreamModelId: z.ZodString;
-        priceVersionId: z.ZodString;
-        providerRateCardVersionId: z.ZodString;
-        providerSourceVersion: z.ZodString;
-        maxCostUsd: z.ZodEffects<z.ZodBranded<z.ZodString, "ExactDecimal">, string & z.BRAND<"ExactDecimal">, string>;
-    }, "strict", z.ZodTypeAny, {
-        expiresAt: string;
-        keyId: string;
-        idempotencyKey: string;
-        principal: {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        };
-        provider: string;
-        priceVersionId: string;
-        modelReference: string;
-        permitId: string;
-        fixtureSha256: string;
-        policy: {
-            routingPolicyId: string;
-            policyVersion: number;
-        };
-        deploymentId: string;
-        upstreamModelId: string;
-        providerRateCardVersionId: string;
-        providerSourceVersion: string;
-        maxCostUsd: string & z.BRAND<"ExactDecimal">;
-    }, {
-        expiresAt: string;
-        keyId: string;
-        idempotencyKey: string;
-        principal: {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        };
-        provider: string;
-        priceVersionId: string;
-        modelReference: string;
-        permitId: string;
-        fixtureSha256: string;
-        policy: {
-            routingPolicyId: string;
-            policyVersion: number;
-        };
-        deploymentId: string;
-        upstreamModelId: string;
-        providerRateCardVersionId: string;
-        providerSourceVersion: string;
-        maxCostUsd: string;
-    }>>;
     provider: z.ZodString;
     /** Always revision-pinned: a deployment serves specific weights. */
     modelReference: z.ZodString;
@@ -1215,7 +1125,6 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
     schemaVersion: 2;
     provider: string;
     modelReference: string;
-    deploymentId: string;
     regions: string[];
     dataPolicy: {
         retainsPayloads: boolean;
@@ -1225,41 +1134,16 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         subprocessors: string[];
         policyUrl?: string | undefined;
     };
+    deploymentId: string;
     availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
-    scopedExecution?: {
-        expiresAt: string;
-        keyId: string;
-        idempotencyKey: string;
-        principal: {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        };
-        provider: string;
-        priceVersionId: string;
-        modelReference: string;
-        permitId: string;
-        fixtureSha256: string;
-        policy: {
-            routingPolicyId: string;
-            policyVersion: number;
-        };
-        deploymentId: string;
-        upstreamModelId: string;
-        providerRateCardVersionId: string;
-        providerSourceVersion: string;
-        maxCostUsd: string & z.BRAND<"ExactDecimal">;
-    } | undefined;
 }, {
     status: "active" | "retired" | "disabled" | "degraded";
     schemaVersion: 2;
     provider: string;
     modelReference: string;
-    deploymentId: string;
     regions: string[];
     dataPolicy: {
         retainsPayloads: boolean;
@@ -1269,41 +1153,16 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         subprocessors?: string[] | undefined;
         policyUrl?: string | undefined;
     };
+    deploymentId: string;
     availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
-    scopedExecution?: {
-        expiresAt: string;
-        keyId: string;
-        idempotencyKey: string;
-        principal: {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        };
-        provider: string;
-        priceVersionId: string;
-        modelReference: string;
-        permitId: string;
-        fixtureSha256: string;
-        policy: {
-            routingPolicyId: string;
-            policyVersion: number;
-        };
-        deploymentId: string;
-        upstreamModelId: string;
-        providerRateCardVersionId: string;
-        providerSourceVersion: string;
-        maxCostUsd: string;
-    } | undefined;
 }>, {
     status: "active" | "retired" | "disabled" | "degraded";
     schemaVersion: 2;
     provider: string;
     modelReference: string;
-    deploymentId: string;
     regions: string[];
     dataPolicy: {
         retainsPayloads: boolean;
@@ -1313,41 +1172,16 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         subprocessors: string[];
         policyUrl?: string | undefined;
     };
+    deploymentId: string;
     availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
-    scopedExecution?: {
-        expiresAt: string;
-        keyId: string;
-        idempotencyKey: string;
-        principal: {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        };
-        provider: string;
-        priceVersionId: string;
-        modelReference: string;
-        permitId: string;
-        fixtureSha256: string;
-        policy: {
-            routingPolicyId: string;
-            policyVersion: number;
-        };
-        deploymentId: string;
-        upstreamModelId: string;
-        providerRateCardVersionId: string;
-        providerSourceVersion: string;
-        maxCostUsd: string & z.BRAND<"ExactDecimal">;
-    } | undefined;
 }, {
     status: "active" | "retired" | "disabled" | "degraded";
     schemaVersion: 2;
     provider: string;
     modelReference: string;
-    deploymentId: string;
     regions: string[];
     dataPolicy: {
         retainsPayloads: boolean;
@@ -1357,35 +1191,11 @@ export declare const modelDeploymentSchema: z.ZodEffects<z.ZodObject<{
         subprocessors?: string[] | undefined;
         policyUrl?: string | undefined;
     };
+    deploymentId: string;
     availabilityScope: "platform_internal" | "public_payg" | "enterprise" | "byok_only" | "oxy_hosted";
     commercialPermission: "standard_application_use" | "public_resale_approved" | "wholesale_contract" | "customer_byok" | "open_weight_hosting";
     dedicatedCapacity: boolean;
     priceVersionId?: string | undefined;
-    scopedExecution?: {
-        expiresAt: string;
-        keyId: string;
-        idempotencyKey: string;
-        principal: {
-            accountId: string;
-            environment: "development" | "staging" | "production";
-            applicationId: string;
-            credentialId: string;
-        };
-        provider: string;
-        priceVersionId: string;
-        modelReference: string;
-        permitId: string;
-        fixtureSha256: string;
-        policy: {
-            routingPolicyId: string;
-            policyVersion: number;
-        };
-        deploymentId: string;
-        upstreamModelId: string;
-        providerRateCardVersionId: string;
-        providerSourceVersion: string;
-        maxCostUsd: string;
-    } | undefined;
 }>;
 /** One candidate a profile may resolve to, and how strongly it is preferred. */
 export declare const routingProfileCandidateSchema: z.ZodObject<{

package/dist/types/inference/economics.d.ts

@@ -320,7 +320,6 @@ export declare const meteredGenerationSchema: z.ZodObject<{
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
-    economicPolicyVersion: string;
     tariff: {
         status: "quoted";
         currency: string;
@@ -335,6 +334,7 @@ export declare const meteredGenerationSchema: z.ZodObject<{
     };
     meteredUsageId: string;
     economicTreatment: "internal_metered";
+    economicPolicyVersion: string;
     generationId?: string | undefined;
     parentRequestId?: string | undefined;
     delegatedUserId?: string | undefined;
@@ -354,7 +354,6 @@ export declare const meteredGenerationSchema: z.ZodObject<{
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
-    economicPolicyVersion: string;
     tariff: {
         status: "quoted";
         currency: string;
@@ -369,6 +368,7 @@ export declare const meteredGenerationSchema: z.ZodObject<{
     };
     meteredUsageId: string;
     economicTreatment: "internal_metered";
+    economicPolicyVersion: string;
     generationId?: string | undefined;
     parentRequestId?: string | undefined;
     delegatedUserId?: string | undefined;