@oxy.so/contracts 4.6.0 → 4.8.0

package/dist/types/agency.d.ts

@@ -858,8 +858,8 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
     }>, "many">>;
     autonomy: z.ZodEnum<["read_only", "draft", "execute_on_request", "autonomous"]>;
 }, "strict", z.ZodTypeAny, {
-    ownerAccountId: string;
     tool: string;
+    ownerAccountId: string;
     actor: {
         type: "alia";
         ownerAccountId: string;
@@ -904,8 +904,8 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
     stepId?: string | undefined;
     grantId?: string | undefined;
 }, {
-    ownerAccountId: string;
     tool: string;
+    ownerAccountId: string;
     actor: {
         type: "alia";
         ownerAccountId: string;
@@ -950,8 +950,8 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
     stepId?: string | undefined;
     grantId?: string | undefined;
 }>, {
-    ownerAccountId: string;
     tool: string;
+    ownerAccountId: string;
     actor: {
         type: "alia";
         ownerAccountId: string;
@@ -996,8 +996,8 @@ export declare const capabilityTicketClaimsSchema: z.ZodEffects<z.ZodObject<{
     stepId?: string | undefined;
     grantId?: string | undefined;
 }, {
-    ownerAccountId: string;
     tool: string;
+    ownerAccountId: string;
     actor: {
         type: "alia";
         ownerAccountId: string;
@@ -1180,9 +1180,9 @@ export declare const auditEventSchema: z.ZodObject<{
         capabilityTicketId?: string | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
+    tool: string;
     appId: string;
     effectiveAccountId: string;
-    tool: string;
     resource: {
         appId: string;
         effectiveAccountId: string;
@@ -1227,9 +1227,9 @@ export declare const auditEventSchema: z.ZodObject<{
         capabilityTicketId?: string | undefined;
     };
 }, {
+    tool: string;
     appId: string;
     effectiveAccountId: string;
-    tool: string;
     resource: {
         appId: string;
         effectiveAccountId: string;

package/dist/types/capabilityInvocation.d.ts

@@ -0,0 +1,80 @@
+/**
+ * How a catalog tool call travels over HTTP, in both directions.
+ *
+ * A capability catalog names each tool's `invocation` as a method plus a path
+ * template (`/email/messages/{emailId}`). Two parties have to agree on what
+ * that means: the coordinator that BUILDS the request from the model's
+ * arguments (Alia), and the app that MATCHES an incoming request back to the
+ * one tool its ticket was signed for (the Inbox capability middleware). Each
+ * used to carry its own copy of the rules, and the matcher walked the tool list
+ * in array order, so a literal segment (`/messages/unread`) and a parameter
+ * (`/messages/{id}`) in the same position resolved to whichever tool happened to
+ * be declared first. Both halves live here now, next to the catalog schema that
+ * refuses a catalog whose templates could ever match the same request — so a
+ * match is unique by construction, not by ordering.
+ */
+/** The part of a catalog tool this module needs. */
+export interface CatalogInvocationTemplate {
+    readonly method: string;
+    readonly path: string;
+}
+interface InvocationCarrier {
+    readonly name: string;
+    readonly invocation: CatalogInvocationTemplate;
+}
+/** The `{name}` placeholders of a path template, in order. */
+export declare function catalogInvocationPathParameters(path: string): string[];
+/**
+ * Whether one concrete request could match BOTH templates.
+ *
+ * Same method, same number of segments, and at every position either the same
+ * literal or a parameter on at least one side. `/messages/{id}` and
+ * `/messages/unread` overlap (the request `/messages/unread` fits both);
+ * `/messages/{id}` and `/messages/{id}/thread` do not.
+ */
+export declare function catalogInvocationsOverlap(left: CatalogInvocationTemplate, right: CatalogInvocationTemplate): boolean;
+/**
+ * Whether two templates name the same ADDRESS: same method, and at every
+ * position the same literal or a parameter on both sides — parameter names do
+ * not matter (`/messages/{id}` and `/messages/{emailId}` are one address;
+ * `/messages/{id}` and `/messages/bundled` are not, though they overlap).
+ * Used to say which documented REST operation shares its address with a tool.
+ */
+export declare function catalogInvocationTemplatesEquivalent(left: CatalogInvocationTemplate, right: CatalogInvocationTemplate): boolean;
+/** Every pair of tools whose invocations overlap — empty for a valid catalog. */
+export declare function findOverlappingCatalogInvocations<T extends InvocationCarrier>(tools: readonly T[]): Array<readonly [T, T]>;
+export interface CatalogInvocationMatch<T> {
+    readonly tool: T;
+    /** Decoded path parameters, keyed by their template names. */
+    readonly params: Record<string, string>;
+}
+/**
+ * The ONE tool whose invocation matches `method` + `path` (the full app-local
+ * path, e.g. `/email/messages/abc`), or null.
+ *
+ * Every tool is tried, not the first hit, so the answer cannot depend on the
+ * order the catalog lists its tools in. A second hit means the catalog should
+ * never have validated — `appCapabilityCatalogSchema` refuses overlapping
+ * templates — so it throws rather than guessing which tool the ticket meant.
+ */
+export declare function matchCatalogInvocation<T extends InvocationCarrier>(tools: readonly T[], method: string, path: string): CatalogInvocationMatch<T> | null;
+export interface ResolvedCatalogInvocation {
+    readonly method: string;
+    readonly url: URL;
+    /** JSON body for non-GET invocations; GET arguments travel in the query. */
+    readonly body?: Record<string, unknown>;
+}
+/**
+ * Build the HTTP request for a tool call from the model's arguments.
+ *
+ * Path parameters are substituted (and removed from the remaining arguments);
+ * GET sends the rest as query parameters, everything else as a JSON body. A GET
+ * argument that is not a scalar is refused instead of being stringified into
+ * `[object Object]` — the catalog schema only lets GET tools declare scalar
+ * inputs, so reaching that branch means the arguments did not come from the
+ * tool's own schema. The resolved URL must stay on `internalBaseUrl`'s origin.
+ */
+export declare function resolveCatalogInvocation(catalog: {
+    readonly internalBaseUrl: string;
+}, tool: InvocationCarrier, args: Readonly<Record<string, unknown>>): ResolvedCatalogInvocation;
+export {};

package/dist/types/index.d.ts

@@ -98,6 +98,8 @@ export { PRODUCT_PLAN_STATUSES, productPlanStatusSchema, LIVE_PRODUCT_PLAN_STATU
 export type { ProductPlanStatus, PlanAllowance, ProductPlan, PayAsYouGoEntitlement, CostCenterStatus, CostCenter, CostCenterSpend, ProductEntitlement, } from './inference/entitlement';
 export { AUTONOMY_LEVELS, CAPABILITY_PACKAGES, autonomyLevelSchema, capabilityPackageSchema, actorRefSchema, resourceRefSchema, toolGrantOverrideSchema, grantLimitSchema, capabilityCatalogBindingSchema, executionAuthorizationRefSchema, capabilityCoordinatorSchema, delegationGrantSchema, automationTriggerSchema, automationActorSelectionSchema, automationDataFlowSchema, automationDefinitionSchema, capabilityTicketClaimsSchema, policyDecisionSchema, auditResultSchema, auditEventSchema, catalogToolSchema, catalogEventSchema, appCapabilityCatalogSchema, catalogRegistrationSchema, normalizedAppEventSchema, } from './agency';
 export type { AutonomyLevel, CapabilityPackage, ActorRef, ResourceRef, ToolGrantOverride, GrantLimit, CapabilityCatalogBinding, ExecutionAuthorizationRef, CapabilityCoordinator, DelegationGrant, AutomationTrigger, AutomationActorSelection, AutomationDefinition, CapabilityTicketClaims, PolicyDecision, AuditEvent, CatalogTool, CatalogEvent, AppCapabilityCatalog, CatalogRegistration, NormalizedAppEvent, } from './agency';
+export { catalogInvocationPathParameters, catalogInvocationsOverlap, catalogInvocationTemplatesEquivalent, findOverlappingCatalogInvocations, matchCatalogInvocation, resolveCatalogInvocation, } from './capabilityInvocation';
+export type { CatalogInvocationMatch, CatalogInvocationTemplate, ResolvedCatalogInvocation, } from './capabilityInvocation';
 export { emailContextAddressSchema, emailContextMailboxSchema, emailContextMessageSchema, emailAgentContextSchema, } from './emailAgentContext';
 export type { EmailContextAddress, EmailContextMailbox, EmailContextMessage, EmailAgentContext, } from './emailAgentContext';
 export { inboxComposeRequestSchema, inboxDailyBriefRequestSchema, inboxNaturalSearchRequestSchema, inboxMessageInferenceParamsSchema, inboxInferenceTextResponseSchema, inboxNaturalSearchResponseSchema, inboxSmartRepliesResponseSchema, inboxThreadSummaryResponseSchema, inboxInferenceStreamEventSchema, } from './inference/inbox';
@@ -108,3 +110,9 @@ export * from './federationInstanceFetch';
 export * from './notifications';
 export * from './email/messages';
 export * from './stickers';
+export { decisionEffortSchema, decisionQuestionSchema, decisionInputSchema, decisionRequestSchema, decisionAnswerSchema, decisionResultSchema, decisionSuccessSchema, decisionFailureSchema, decisionInputBudget, decisionFitsGateway, decisionAnswersMatch, } from './inference/decisions';
+export type { DecisionQuestion, DecisionInput, DecisionRequest, DecisionAnswer, DecisionFailure, DecisionResult, DecisionSuccess, } from './inference/decisions';
+export { SCOPED_EXECUTION_CONTRACT_VERSION, SCOPED_REQUEST_ENVELOPE_VERSION, scopedExecutionAudienceSchema, scopedExecutionSchema, canonicalScopedExecutionJson } from './inference/scopedExecution';
+export type { ScopedExecutionAudience, ScopedExecution } from './inference/scopedExecution';
+export { scopedInferenceRequestSchema } from './inference/request';
+export type { ScopedInferenceRequest } from './inference/request';

package/dist/types/inference/aliaModelRelease.d.ts

@@ -139,17 +139,17 @@ export declare const aliaReleaseSignatureSchema: z.ZodObject<{
     signature: z.ZodString;
     signedAt: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    signature: string;
-    signedAt: string;
     keyId: string;
     algorithm: "ed25519";
     canonicalization: "jcs";
-}, {
     signature: string;
     signedAt: string;
+}, {
     keyId: string;
     algorithm: "ed25519";
     canonicalization: "jcs";
+    signature: string;
+    signedAt: string;
 }>;
 /**
  * A signed release of an `alia/*` model revision.
@@ -188,15 +188,15 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             evaluatedAt: z.ZodOptional<z.ZodString>;
             reportUrl: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }, {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }>, "many">>;
@@ -218,15 +218,15 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         }>>;
     }, "strip", z.ZodTypeAny, {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         evaluations: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[];
@@ -241,18 +241,18 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         } | undefined;
     }, {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         retiredAt?: string | undefined;
         artifactDigest?: string | undefined;
         modelCardUrl?: string | undefined;
         evaluations?: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[] | undefined;
@@ -264,15 +264,15 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         } | undefined;
     }>, {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         evaluations: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[];
@@ -287,18 +287,18 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         } | undefined;
     }, {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         retiredAt?: string | undefined;
         artifactDigest?: string | undefined;
         modelCardUrl?: string | undefined;
         evaluations?: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[] | undefined;
@@ -331,15 +331,15 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         requiresAttribution: z.ZodBoolean;
         acceptableUsePolicyUrl: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        displayName: string;
         licenseId: string;
+        displayName: string;
         commercialUseAllowed: boolean;
         requiresAttribution: boolean;
         url?: string | undefined;
         acceptableUsePolicyUrl?: string | undefined;
     }, {
-        displayName: string;
         licenseId: string;
+        displayName: string;
         commercialUseAllowed: boolean;
         requiresAttribution: boolean;
         url?: string | undefined;
@@ -375,32 +375,44 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         signature: z.ZodString;
         signedAt: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        signature: string;
-        signedAt: string;
         keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
-    }, {
         signature: string;
         signedAt: string;
+    }, {
         keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
+        signature: string;
+        signedAt: string;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     schemaVersion: 1;
-    issuedAt: string;
+    license: {
+        licenseId: string;
+        displayName: string;
+        commercialUseAllowed: boolean;
+        requiresAttribution: boolean;
+        url?: string | undefined;
+        acceptableUsePolicyUrl?: string | undefined;
+    };
+    provenance: {
+        releaseKind: "first_party_original" | "first_party_derived" | "open_weight" | "third_party_hosted";
+        baseModelId?: string | undefined;
+        trainingOrganization?: string | undefined;
+    };
     revision: {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         evaluations: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[];
@@ -414,16 +426,26 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             safetyCardUrl?: string | undefined;
         } | undefined;
     };
+    releaseId: string;
+    issuedAt: string;
+    artifacts: {
+        path: string;
+        digest: string;
+        sizeBytes: number;
+        mediaType?: string | undefined;
+    }[];
     signatures: {
-        signature: string;
-        signedAt: string;
         keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
+        signature: string;
+        signedAt: string;
     }[];
+}, {
+    schemaVersion: 1;
     license: {
-        displayName: string;
         licenseId: string;
+        displayName: string;
         commercialUseAllowed: boolean;
         requiresAttribution: boolean;
         url?: string | undefined;
@@ -434,30 +456,20 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         baseModelId?: string | undefined;
         trainingOrganization?: string | undefined;
     };
-    releaseId: string;
-    artifacts: {
-        path: string;
-        digest: string;
-        sizeBytes: number;
-        mediaType?: string | undefined;
-    }[];
-}, {
-    schemaVersion: 1;
-    issuedAt: string;
     revision: {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         retiredAt?: string | undefined;
         artifactDigest?: string | undefined;
         modelCardUrl?: string | undefined;
         evaluations?: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[] | undefined;
@@ -468,16 +480,26 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             knownLimitations?: string[] | undefined;
         } | undefined;
     };
+    releaseId: string;
+    issuedAt: string;
+    artifacts: {
+        path: string;
+        digest: string;
+        sizeBytes: number;
+        mediaType?: string | undefined;
+    }[];
     signatures: {
-        signature: string;
-        signedAt: string;
         keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
+        signature: string;
+        signedAt: string;
     }[];
+}>, {
+    schemaVersion: 1;
     license: {
-        displayName: string;
         licenseId: string;
+        displayName: string;
         commercialUseAllowed: boolean;
         requiresAttribution: boolean;
         url?: string | undefined;
@@ -488,27 +510,17 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         baseModelId?: string | undefined;
         trainingOrganization?: string | undefined;
     };
-    releaseId: string;
-    artifacts: {
-        path: string;
-        digest: string;
-        sizeBytes: number;
-        mediaType?: string | undefined;
-    }[];
-}>, {
-    schemaVersion: 1;
-    issuedAt: string;
     revision: {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         evaluations: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[];
@@ -522,16 +534,26 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             safetyCardUrl?: string | undefined;
         } | undefined;
     };
+    releaseId: string;
+    issuedAt: string;
+    artifacts: {
+        path: string;
+        digest: string;
+        sizeBytes: number;
+        mediaType?: string | undefined;
+    }[];
     signatures: {
-        signature: string;
-        signedAt: string;
         keyId: string;
         algorithm: "ed25519";
         canonicalization: "jcs";
+        signature: string;
+        signedAt: string;
     }[];
+}, {
+    schemaVersion: 1;
     license: {
-        displayName: string;
         licenseId: string;
+        displayName: string;
         commercialUseAllowed: boolean;
         requiresAttribution: boolean;
         url?: string | undefined;
@@ -542,30 +564,20 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
         baseModelId?: string | undefined;
         trainingOrganization?: string | undefined;
     };
-    releaseId: string;
-    artifacts: {
-        path: string;
-        digest: string;
-        sizeBytes: number;
-        mediaType?: string | undefined;
-    }[];
-}, {
-    schemaVersion: 1;
-    issuedAt: string;
     revision: {
         schemaVersion: 1;
-        revision: string;
         modelId: string;
         revisionId: string;
+        revision: string;
         reference: string;
         releasedAt: string;
         retiredAt?: string | undefined;
         artifactDigest?: string | undefined;
         modelCardUrl?: string | undefined;
         evaluations?: {
-            score: string;
             suite: string;
             metric: string;
+            score: string;
             evaluatedAt?: string | undefined;
             reportUrl?: string | undefined;
         }[] | undefined;
@@ -576,33 +588,21 @@ export declare const aliaModelReleaseManifestSchema: z.ZodEffects<z.ZodObject<{
             knownLimitations?: string[] | undefined;
         } | undefined;
     };
-    signatures: {
-        signature: string;
-        signedAt: string;
-        keyId: string;
-        algorithm: "ed25519";
-        canonicalization: "jcs";
-    }[];
-    license: {
-        displayName: string;
-        licenseId: string;
-        commercialUseAllowed: boolean;
-        requiresAttribution: boolean;
-        url?: string | undefined;
-        acceptableUsePolicyUrl?: string | undefined;
-    };
-    provenance: {
-        releaseKind: "first_party_original" | "first_party_derived" | "open_weight" | "third_party_hosted";
-        baseModelId?: string | undefined;
-        trainingOrganization?: string | undefined;
-    };
     releaseId: string;
+    issuedAt: string;
     artifacts: {
         path: string;
         digest: string;
         sizeBytes: number;
         mediaType?: string | undefined;
     }[];
+    signatures: {
+        keyId: string;
+        algorithm: "ed25519";
+        canonicalization: "jcs";
+        signature: string;
+        signedAt: string;
+    }[];
 }>;
 export type AliaReleaseArtifact = z.infer<typeof aliaReleaseArtifactSchema>;
 export type AliaReleaseSignature = z.infer<typeof aliaReleaseSignatureSchema>;