@oxy.so/contracts 4.7.0 → 4.8.0

package/dist/types/inference/routingPolicy.d.ts

@@ -263,10 +263,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string & z.BRAND<"OxyAccountId">;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     providerAllowlist: string[];
     providerDenylist: string[];
     allowedRegions: string[];
@@ -311,10 +311,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     requireZeroDataRetention: boolean;
     prohibitTrainingOnCustomerData: boolean;
     oxyHostedOnly: boolean;
@@ -359,10 +359,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string & z.BRAND<"OxyAccountId">;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     providerAllowlist: string[];
     providerDenylist: string[];
     allowedRegions: string[];
@@ -407,10 +407,10 @@ export declare const routingPolicySchema: z.ZodEffects<z.ZodObject<{
         accountId: string;
         applicationId: string;
     };
-    dedicatedCapacity: "disabled" | "prefer" | "require";
-    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     routingPolicyId: string;
     policyVersion: number;
+    dedicatedCapacity: "disabled" | "prefer" | "require";
+    optimiseFor: "price" | "latency" | "throughput" | "balanced";
     requireZeroDataRetention: boolean;
     prohibitTrainingOnCustomerData: boolean;
     oxyHostedOnly: boolean;
@@ -509,8 +509,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, "strict", z.ZodTypeAny, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -522,8 +522,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -562,8 +562,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, "strict", z.ZodTypeAny, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {
@@ -576,8 +576,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {
@@ -590,8 +590,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }>]>, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -603,8 +603,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 } | {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {
@@ -617,8 +617,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 }, {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "same_model";
     customerProviderCredential?: {
         environment: "development" | "staging" | "production";
@@ -630,8 +630,8 @@ export declare const authorizedRouteSchema: z.ZodEffects<z.ZodDiscriminatedUnion
 } | {
     provider: string;
     modelReference: string;
-    regions: string[];
     deploymentId: string;
+    regions: string[];
     substitution: "cross_model";
     authorizedByPolicy: true;
     customerProviderCredential?: {

package/dist/types/inference/scopedExecution.d.ts

@@ -0,0 +1,202 @@
+import { z } from "zod";
+/** Explicit extension negotiation; never replaces the legacy 3.5 handshake. */
+export declare const SCOPED_EXECUTION_CONTRACT_VERSION: "3.6.0";
+/** Scoped only; normal envelope v2 and metadata 3.5 remain unchanged. */
+export declare const SCOPED_REQUEST_ENVELOPE_VERSION: 3;
+/** Restriction only: none of these identities grants catalogue eligibility. */
+export declare const scopedExecutionAudienceSchema: z.ZodObject<{
+    permitId: z.ZodString;
+    idempotencyKey: z.ZodString;
+    fixtureSha256: z.ZodString;
+    expiresAt: z.ZodString;
+    principal: z.ZodObject<{
+        accountId: z.ZodString;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<["development", "staging", "production"]>;
+    }, "strict", z.ZodTypeAny, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }>;
+    policy: z.ZodObject<{
+        routingPolicyId: z.ZodString;
+        policyVersion: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }>;
+    deploymentId: z.ZodString;
+    provider: z.ZodString;
+    keyId: z.ZodString;
+    modelReference: z.ZodEffects<z.ZodString, string, string>;
+    upstreamModelId: z.ZodString;
+    priceVersionId: z.ZodString;
+    providerRateCardVersionId: z.ZodString;
+    providerSourceVersion: z.ZodString;
+    maxCostUsd: z.ZodEffects<z.ZodBranded<z.ZodString, "ExactDecimal">, string & z.BRAND<"ExactDecimal">, string>;
+}, "strict", z.ZodTypeAny, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string & z.BRAND<"ExactDecimal">;
+}, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string;
+}>;
+export declare const scopedExecutionSchema: z.ZodObject<{
+    permitId: z.ZodString;
+    idempotencyKey: z.ZodString;
+    fixtureSha256: z.ZodString;
+    expiresAt: z.ZodString;
+    principal: z.ZodObject<{
+        accountId: z.ZodString;
+        applicationId: z.ZodString;
+        credentialId: z.ZodString;
+        environment: z.ZodEnum<["development", "staging", "production"]>;
+    }, "strict", z.ZodTypeAny, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }, {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    }>;
+    policy: z.ZodObject<{
+        routingPolicyId: z.ZodString;
+        policyVersion: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }, {
+        routingPolicyId: string;
+        policyVersion: number;
+    }>;
+    deploymentId: z.ZodString;
+    provider: z.ZodString;
+    keyId: z.ZodString;
+    modelReference: z.ZodEffects<z.ZodString, string, string>;
+    upstreamModelId: z.ZodString;
+    priceVersionId: z.ZodString;
+    providerRateCardVersionId: z.ZodString;
+    providerSourceVersion: z.ZodString;
+    maxCostUsd: z.ZodEffects<z.ZodBranded<z.ZodString, "ExactDecimal">, string & z.BRAND<"ExactDecimal">, string>;
+} & {
+    requestId: z.ZodString;
+    snapshotId: z.ZodString;
+    catalogueEvidenceHash: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string & z.BRAND<"ExactDecimal">;
+    requestId: string;
+    snapshotId: string;
+    catalogueEvidenceHash: string;
+}, {
+    permitId: string;
+    idempotencyKey: string;
+    fixtureSha256: string;
+    expiresAt: string;
+    principal: {
+        accountId: string;
+        applicationId: string;
+        credentialId: string;
+        environment: "development" | "staging" | "production";
+    };
+    policy: {
+        routingPolicyId: string;
+        policyVersion: number;
+    };
+    deploymentId: string;
+    provider: string;
+    keyId: string;
+    modelReference: string;
+    upstreamModelId: string;
+    priceVersionId: string;
+    providerRateCardVersionId: string;
+    providerSourceVersion: string;
+    maxCostUsd: string;
+    requestId: string;
+    snapshotId: string;
+    catalogueEvidenceHash: string;
+}>;
+export type ScopedExecutionAudience = z.infer<typeof scopedExecutionAudienceSchema>;
+export type ScopedExecution = z.infer<typeof scopedExecutionSchema>;
+/**
+ * Canonical JSON wire bytes: recursive UTF-16 key order, JSON string/number
+ * encoding, arrays in order, no whitespace. Hash the whole signed input, not a
+ * reparsed/defaulted decision. Reject non-JSON values rather than dropping them.
+ */
+export declare function canonicalScopedExecutionJson(value: unknown): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/contracts",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",