@oxy.so/contracts 4.6.0 → 4.8.0

package/dist/types/inference/routingPolicy.d.ts

@@ -263,10 +263,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string & z.BRAND<"OxyAccountId">;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     providerAllowlist: string[];
     providerDenylist: string[];
     allowedRegions: string[];
@@ -311,10 +311,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     requireZeroDataRetention: boolean;
     prohibitTrainingOnCustomerData: boolean;
     oxyHostedOnly: boolean;
@@ -359,10 +359,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string & z.BRAND<"OxyAccountId">;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     providerAllowlist: string[];
     providerDenylist: string[];
     allowedRegions: string[];
@@ -407,10 +407,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     requireZeroDataRetention: boolean;
     prohibitTrainingOnCustomerData: boolean;
     oxyHostedOnly: boolean;
@@ -509,8 +509,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, "strict", z.ZodTypeAny, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -522,8 +522,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -562,8 +562,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, "strict", z.ZodTypeAny, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {
@@ -576,8 +576,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {
@@ -590,8 +590,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }>]>, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -603,8 +603,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 } | {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {
@@ -617,8 +617,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -630,8 +630,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 } | {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {

package/dist/types/inference/scopedExecution.d.ts

@@ -0,0 +1,202 @@
+import { z } from "zod";
+/** Explicit extension negotiation; never replaces the legacy 3.5 handshake. */
+export declare const SCOPED_EXECUTION_CONTRACT_VERSION: "3.6.0";
+/** Scoped only; normal envelope v2 and metadata 3.5 remain unchanged. */
+export declare const SCOPED_REQUEST_ENVELOPE_VERSION: 3;
+/** Restriction only: none of these identities grants catalogue eligibility. */
+export declare const scopedExecutionAudienceSchema: z.ZodObject<{
+    permitId: z.ZodString;
+    idempotencyKey: z.ZodString;
+    fixtureSha256: z.ZodString;
+    expiresAt: z.ZodString;
+    principal: z.ZodObject<{
+        accountId: z.ZodString;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<["development", "staging", "production"]>;
+    }, "strict", z.ZodTypeAny, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }>;
+    policy: z.ZodObject<{
+        routingPolicyId: z.ZodString;
+        policyVersion: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }>;
+    deploymentId: z.ZodString;
+    provider: z.ZodString;
+    keyId: z.ZodString;
+    modelReference: z.ZodEffects<z.ZodString, string, string>;
+    upstreamModelId: z.ZodString;
+    priceVersionId: z.ZodString;
+    providerRateCardVersionId: z.ZodString;
+    providerSourceVersion: z.ZodString;
+    maxCostUsd: z.ZodEffects<z.ZodBranded<z.ZodString, "ExactDecimal">, string & z.BRAND<"ExactDecimal">, string>;
+}, "strict", z.ZodTypeAny, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string & z.BRAND<"ExactDecimal">;
+}, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string;
+}>;
+export declare const scopedExecutionSchema: z.ZodObject<{
+    permitId: z.ZodString;
+    idempotencyKey: z.ZodString;
+    fixtureSha256: z.ZodString;
+    expiresAt: z.ZodString;
+    principal: z.ZodObject<{
+        accountId: z.ZodString;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<["development", "staging", "production"]>;
+    }, "strict", z.ZodTypeAny, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }>;
+    policy: z.ZodObject<{
+        routingPolicyId: z.ZodString;
+        policyVersion: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }>;
+    deploymentId: z.ZodString;
+    provider: z.ZodString;
+    keyId: z.ZodString;
+    modelReference: z.ZodEffects<z.ZodString, string, string>;
+    upstreamModelId: z.ZodString;
+    priceVersionId: z.ZodString;
+    providerRateCardVersionId: z.ZodString;
+    providerSourceVersion: z.ZodString;
+    maxCostUsd: z.ZodEffects<z.ZodBranded<z.ZodString, "ExactDecimal">, string & z.BRAND<"ExactDecimal">, string>;
+} & {
+    requestId: z.ZodString;
+    snapshotId: z.ZodString;
+    catalogueEvidenceHash: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string & z.BRAND<"ExactDecimal">;
+    requestId: string;
+    snapshotId: string;
+    catalogueEvidenceHash: string;
+}, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string;
+    requestId: string;
+    snapshotId: string;
+    catalogueEvidenceHash: string;
+}>;
+export type ScopedExecutionAudience = z.infer<typeof scopedExecutionAudienceSchema>;
+export type ScopedExecution = z.infer<typeof scopedExecutionSchema>;
+/**
+ * Canonical JSON wire bytes: recursive UTF-16 key order, JSON string/number
+ * encoding, arrays in order, no whitespace. Hash the whole signed input, not a
+ * reparsed/defaulted decision. Reject non-JSON values rather than dropping them.
+ */
+export declare function canonicalScopedExecutionJson(value: unknown): string;

package/dist/types/inference/streamEvents.d.ts

@@ -46,8 +46,8 @@ export declare const inferenceStreamStartEventSchema: z.ZodObject<{
     requestId: string;
     resolvedModelReference: string;
     servingProvider: string;
-    sequence: number;
     startedAt: string;
+    sequence: number;
     generationId?: string | undefined;
 }, {
     type: "start";
@@ -55,8 +55,8 @@ export declare const inferenceStreamStartEventSchema: z.ZodObject<{
     requestId: string;
     resolvedModelReference: string;
     servingProvider: string;
-    sequence: number;
     startedAt: string;
+    sequence: number;
     generationId?: string | undefined;
 }>;
 /**
@@ -225,23 +225,23 @@ export declare const inferenceStreamUsageEventSchema: z.ZodObject<{
     schemaVersion: 2;
     requestId: string;
     deploymentId: string;
-    sequence: number;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
+    sequence: number;
 }, {
     type: "usage";
     schemaVersion: 2;
     requestId: string;
     deploymentId: string;
-    sequence: number;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
+    sequence: number;
 }>;
 /**
  * What kind of re-route happened.
@@ -609,8 +609,8 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
     requestId: string;
     resolvedModelReference: string;
     servingProvider: string;
-    sequence: number;
     startedAt: string;
+    sequence: number;
     generationId?: string | undefined;
 }, {
     type: "start";
@@ -618,8 +618,8 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
     requestId: string;
     resolvedModelReference: string;
     servingProvider: string;
-    sequence: number;
     startedAt: string;
+    sequence: number;
     generationId?: string | undefined;
 }>, z.ZodObject<{
     /** See `version.ts`: each stream event is a whole message on the wire. */
@@ -730,23 +730,23 @@ export declare const inferenceStreamEventSchema: z.ZodDiscriminatedUnion<"type",
     schemaVersion: 2;
     requestId: string;
     deploymentId: string;
-    sequence: number;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
+    sequence: number;
 }, {
     type: "usage";
     schemaVersion: 2;
     requestId: string;
     deploymentId: string;
-    sequence: number;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
+    sequence: number;
 }>, z.ZodObject<{
     /** See `version.ts`: each stream event is a whole message on the wire. */
     schemaVersion: z.ZodLiteral<1>;

package/dist/types/inference/usage.d.ts

@@ -509,13 +509,13 @@ export declare const normalizedUsageReportSchema: z.ZodEffects<z.ZodObject<{
     };
     deploymentId: string;
     completedAt: string;
-    startedAt: string;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
     routeSwitches: number;
+    startedAt: string;
     generationId?: string | undefined;
     timeToFirstTokenMs?: number | undefined;
 }, {
@@ -540,13 +540,13 @@ export declare const normalizedUsageReportSchema: z.ZodEffects<z.ZodObject<{
     };
     deploymentId: string;
     completedAt: string;
-    startedAt: string;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
     routeSwitches: number;
+    startedAt: string;
     generationId?: string | undefined;
     timeToFirstTokenMs?: number | undefined;
 }>, {
@@ -571,13 +571,13 @@ export declare const normalizedUsageReportSchema: z.ZodEffects<z.ZodObject<{
     };
     deploymentId: string;
     completedAt: string;
-    startedAt: string;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
     routeSwitches: number;
+    startedAt: string;
     generationId?: string | undefined;
     timeToFirstTokenMs?: number | undefined;
 }, {
@@ -602,13 +602,13 @@ export declare const normalizedUsageReportSchema: z.ZodEffects<z.ZodObject<{
     };
     deploymentId: string;
     completedAt: string;
-    startedAt: string;
     units: {
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings" | "audio_input_tokens" | "cached_audio_input_tokens" | "audio_output_tokens" | "session_milliseconds";
         quantity: number;
     }[];
     usageSource: "provider_reported" | "oxy_measured" | "estimated";
     routeSwitches: number;
+    startedAt: string;
     generationId?: string | undefined;
     timeToFirstTokenMs?: number | undefined;
 }>;

package/dist/types/inference/version.d.ts

@@ -99,4 +99,4 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export declare const INFERENCE_CONTRACT_VERSION = "3.4.0";
+export declare const INFERENCE_CONTRACT_VERSION = "3.5.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/contracts",
-  "version": "4.6.0",
+  "version": "4.8.0",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",