@oxy.so/contracts 4.6.0 → 4.8.0

package/dist/cjs/inference/request.js

@@ -25,8 +25,10 @@
  * docs/adr/0017-authorized-routes-in-the-envelope.md.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.inferenceRequestSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.clientRequestMetadataSchema = exports.inferenceReasoningSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.inferenceContentSourceSchema = void 0;
+exports.scopedInferenceRequestSchema = exports.inferenceRequestSchema = exports.inferenceAudioOutputParametersSchema = exports.inferenceSpeechParametersSchema = exports.clientRequestMetadataSchema = exports.inferenceReasoningSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.inferenceContentSourceSchema = void 0;
+const decisions_1 = require("./decisions");
 const zod_1 = require("zod");
+const scopedExecution_1 = require("./scopedExecution");
 const attribution_1 = require("./attribution");
 const catalogue_1 = require("./catalogue");
 const identifiers_1 = require("./identifiers");
@@ -198,6 +200,7 @@ exports.inferenceMessageSchema = zod_1.z
  * that both metering and provider translation depend on.
  */
 exports.inferenceInputSchema = zod_1.z.discriminatedUnion("format", [
+    zod_1.z.object({ format: zod_1.z.literal("decisions"), decisions: decisions_1.decisionInputSchema }).strict(),
     zod_1.z
         .object({
         format: zod_1.z.literal("messages"),
@@ -352,6 +355,8 @@ exports.inferenceRequestSchema = zod_1.z
     .object({
     /** See `version.ts`: this is the Oxy→data-plane request envelope. */
     schemaVersion: zod_1.z.literal(2),
+    /** Recognized so v2 refuses rather than silently stripping a restriction. */
+    scopedExecution: scopedExecution_1.scopedExecutionSchema.optional(),
     attribution: attribution_1.inferenceAttributionSchema,
     target: routingPolicy_1.routingTargetSchema,
     modality: catalogue_1.inferenceModalitySchema,
@@ -406,6 +411,19 @@ exports.inferenceRequestSchema = zod_1.z
     authorizedRoutes: zod_1.z.array(routingPolicy_1.authorizedRouteSchema).min(1).optional(),
 })
     .superRefine((request, ctx) => {
+    if (request.scopedExecution !== undefined)
+        ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ["scopedExecution"], message: "Scoped execution requires envelope v3." });
+    if (request.input.format === "decisions" || request.client.apiFormat === "decisions") {
+        const exactModel = request.target.kind === "model" && request.target.modelReference.includes('@');
+        const foreignRoute = request.authorizedRoutes?.some((route) => request.target.kind !== "model" || route.modelReference !== request.target.modelReference || route.substitution !== "same_model");
+        if (request.input.format !== "decisions" || request.client.apiFormat !== "decisions" ||
+            request.modality !== "text" || request.stream || !exactModel || foreignRoute ||
+            request.maxOutputTokens !== undefined || Object.keys(request.sampling).length > 0 ||
+            request.tools.length > 0 || request.toolChoice !== undefined || request.responseFormat !== undefined ||
+            request.reasoning !== undefined || request.speech !== undefined || request.audioOutput !== undefined) {
+            ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ["input"], message: "Decisions require exact-model typed nonstreaming input without generation controls or model substitution." });
+        }
+    }
     const isSpeech = request.client.apiFormat === "audio_speech";
     if (isSpeech && request.speech !== undefined && (request.modality !== "audio" || request.input.format !== "text" || request.stream)) {
         ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ["speech"], message: "speech requires audio modality, text input, parameters and non-streaming output" });
@@ -524,3 +542,30 @@ exports.inferenceRequestSchema = zod_1.z
         });
     }
 });
+/** Explicit restrictive generation: old v2 receivers reject this version whole. */
+exports.scopedInferenceRequestSchema = exports.inferenceRequestSchema.innerType()
+    .extend({ schemaVersion: zod_1.z.literal(scopedExecution_1.SCOPED_REQUEST_ENVELOPE_VERSION), scopedExecution: scopedExecution_1.scopedExecutionSchema })
+    .superRefine((request, ctx) => {
+    const { scopedExecution: scope, ...base } = request;
+    const legacy = exports.inferenceRequestSchema.safeParse({ ...base, schemaVersion: 2 });
+    if (!legacy.success)
+        for (const issue of legacy.error.issues)
+            ctx.addIssue(issue);
+    const principal = request.attribution.principal;
+    const route = request.authorizedRoutes?.[0];
+    if (request.input.format !== "decisions" || request.client.apiFormat !== "decisions" ||
+        scope.requestId !== request.attribution.requestId ||
+        scope.idempotencyKey !== request.idempotencyKey ||
+        scope.principal.accountId !== principal.billing.accountId ||
+        scope.principal.applicationId !== principal.applicationId ||
+        scope.principal.credentialId !== principal.credentialId ||
+        scope.principal.environment !== principal.environment ||
+        scope.policy.routingPolicyId !== request.routingPolicy.routingPolicyId ||
+        scope.policy.policyVersion !== request.routingPolicy.policyVersion ||
+        request.authorizedRoutes?.length !== 1 || route?.customerProviderCredential !== undefined ||
+        route?.deploymentId !== scope.deploymentId || route?.provider !== scope.provider ||
+        route?.modelReference !== scope.modelReference ||
+        request.target.kind !== "model" || request.target.modelReference !== scope.modelReference) {
+        ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ["scopedExecution"], message: "Scoped execution must restrict the exact attributed decisions request and one platform route." });
+    }
+});

package/dist/cjs/inference/scopedExecution.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema = exports.SCOPED_REQUEST_ENVELOPE_VERSION = exports.SCOPED_EXECUTION_CONTRACT_VERSION = void 0;
+exports.canonicalScopedExecutionJson = canonicalScopedExecutionJson;
+const zod_1 = require("zod");
+const identifiers_1 = require("./identifiers");
+const money_1 = require("./money");
+/** Explicit extension negotiation; never replaces the legacy 3.5 handshake. */
+exports.SCOPED_EXECUTION_CONTRACT_VERSION = "3.6.0";
+/** Scoped only; normal envelope v2 and metadata 3.5 remain unchanged. */
+exports.SCOPED_REQUEST_ENVELOPE_VERSION = 3;
+const identity = zod_1.z.string().min(1).max(256);
+const sha256 = zod_1.z.string().regex(/^[0-9a-f]{64}$/);
+const maxCost = money_1.exactDecimalSchema.refine((value) => {
+    if (!money_1.exactDecimalSchema.safeParse(value).success)
+        return false;
+    const [whole, fraction = ""] = value.split(".");
+    const units = BigInt(whole) * 1000000000000n + BigInt(fraction.padEnd(12, "0"));
+    return units > 0n && units <= 10000000000n;
+}, "scoped cost must be positive and at most 0.01 USD");
+/** Restriction only: none of these identities grants catalogue eligibility. */
+exports.scopedExecutionAudienceSchema = zod_1.z
+    .object({
+    permitId: identity,
+    idempotencyKey: identifiers_1.idempotencyKeySchema,
+    fixtureSha256: sha256,
+    expiresAt: zod_1.z.string().datetime(),
+    principal: zod_1.z
+        .object({
+        accountId: identity,
+        applicationId: identity,
+        credentialId: identity,
+        environment: identifiers_1.inferenceEnvironmentSchema,
+    })
+        .strict(),
+    policy: zod_1.z
+        .object({
+        routingPolicyId: zod_1.z.string().min(1).max(128),
+        policyVersion: zod_1.z.number().int().positive().safe(),
+    })
+        .strict(),
+    deploymentId: identifiers_1.deploymentIdSchema,
+    provider: identifiers_1.inferenceProviderSlugSchema,
+    keyId: identity,
+    modelReference: identifiers_1.modelReferenceSchema.refine((value) => value.includes("@"), "must pin a revision"),
+    upstreamModelId: identity,
+    priceVersionId: identity,
+    providerRateCardVersionId: identity,
+    providerSourceVersion: identity,
+    maxCostUsd: maxCost,
+})
+    .strict();
+exports.scopedExecutionSchema = exports.scopedExecutionAudienceSchema
+    .extend({
+    requestId: identifiers_1.requestIdSchema,
+    snapshotId: identity,
+    catalogueEvidenceHash: sha256,
+})
+    .strict();
+/**
+ * Canonical JSON wire bytes: recursive UTF-16 key order, JSON string/number
+ * encoding, arrays in order, no whitespace. Hash the whole signed input, not a
+ * reparsed/defaulted decision. Reject non-JSON values rather than dropping them.
+ */
+function canonicalScopedExecutionJson(value) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return JSON.stringify(value);
+    if (typeof value === "number" && Number.isFinite(value))
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        const entries = Array.from(value, (entry, index) => {
+            if (!(index in value))
+                throw new Error("Scoped execution requires dense JSON arrays.");
+            return canonicalScopedExecutionJson(entry);
+        });
+        return `[${entries.join(",")}]`;
+    }
+    if (typeof value === "object" &&
+        value !== null &&
+        Object.getPrototypeOf(value) === Object.prototype) {
+        const entries = Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalScopedExecutionJson(value[key])}`);
+        return `{${entries.join(",")}}`;
+    }
+    throw new Error("Scoped execution requires JSON wire values.");
+}

package/dist/cjs/inference/version.js

@@ -102,4 +102,4 @@ exports.INFERENCE_CONTRACT_VERSION = void 0;
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-exports.INFERENCE_CONTRACT_VERSION = '3.4.0';
+exports.INFERENCE_CONTRACT_VERSION = '3.5.0';