@oxy.so/contracts 4.5.0 → 4.7.0

package/dist/esm/inference/routingPolicy.js

@@ -85,10 +85,26 @@ export const routingPolicyScopeSchema = z.discriminatedUnion("kind", [
 export const routingFallbackPolicySchema = z
     .object({
     disabled: z.boolean(),
-    sameModelDeployment: z.boolean(),
+    /**
+     * Same-model deployment failover. OPTIONAL since contract set 3.4.0, and
+     * absent means ON unless `disabled` is set: serving the same weights from
+     * another deployment of the same revision is an availability decision, not
+     * a substitution. A policy opts out with an explicit `false` (or
+     * `disabled: true`). See `effectiveSameModelDeployment`.
+     */
+    sameModelDeployment: z.boolean().optional(),
     authorizedCrossModel: z.array(modelReferenceSchema).default([]),
 })
     .strict();
+/**
+ * Whether a fallback block authorizes same-model deployment failover: an
+ * explicit `sameModelDeployment` wins; absent means on unless `disabled`.
+ */
+export function effectiveSameModelDeployment(fallback) {
+    if (fallback.disabled)
+        return false;
+    return fallback.sameModelDeployment ?? true;
+}
 /**
  * A versioned routing policy.
  *
@@ -128,6 +144,14 @@ export const routingPolicySchema = z
     allowedLicenseIds: z.array(z.string().min(1).max(128)).default([]),
     requireCommercialUseRights: z.boolean(),
     fallback: routingFallbackPolicySchema,
+    /**
+     * The routing profiles (power levels) this scope may target, by exact id
+     * (contract set 3.4.0). Empty means no restriction. A request naming a
+     * profile outside a non-empty list is refused with `policy_violation`, and
+     * `auto` only climbs to levels on the list. Concrete model targets are
+     * governed by the other controls, not by this list.
+     */
+    allowedRoutingProfileIds: z.array(routingProfileIdSchema).default([]),
     /** Whether the customer's own provider credentials may or must be used. */
     byokPreference: z.enum(["disabled", "prefer", "require"]),
     /** Enterprise reserved capacity rather than shared endpoints. */
@@ -207,6 +231,25 @@ export const routingPolicySchema = z
             }
         }
     }
+    const allowedProfiles = policy.allowedRoutingProfileIds;
+    if (new Set(allowedProfiles).size !== allowedProfiles.length) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["allowedRoutingProfileIds"],
+            message: "each routing profile is allowed at most once",
+        });
+    }
+    // A default the policy itself forbids would refuse every request that
+    // names no model — a policy that cannot serve its own default.
+    if (allowedProfiles.length > 0 &&
+        policy.defaultTarget?.kind === "routing_profile_id" &&
+        !allowedProfiles.includes(policy.defaultTarget.routingProfileId)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["defaultTarget", "routingProfileId"],
+            message: "the default routing profile must be one of allowedRoutingProfileIds",
+        });
+    }
 });
 /**
  * The reference a request records: which policy, at which of the customer's own

package/dist/esm/inference/version.js

@@ -99,4 +99,4 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export const INFERENCE_CONTRACT_VERSION = '3.3.0';
+export const INFERENCE_CONTRACT_VERSION = '3.5.0';