@oxy.so/core 1.7.3 → 1.8.0

package/dist/esm/inference/OxyInferenceClient.js

@@ -140,9 +140,14 @@ export class OxyInferenceClient {
      * both see the PUBLIC catalogue; only an internal/system application's
      * service token sees internal-only routes.
      *
-     * **`[]` is a normal answer**, and is the only answer today: the catalogue
-     * is populated by operators, and a route is not publicly exposed until
-     * somebody has reviewed the right to resell it.
+     * **`[]` is a normal answer**: a route is not publicly exposed until
+     * somebody has reviewed the right to resell it. An official application's
+     * credential also sees the internal catalogue Oxy keeps in step with
+     * Kaana automatically.
+     *
+     * Each entry's `capabilities.reasoningEfforts` lists the efforts a request
+     * may name in `reasoning.effort` (empty: none), and `releasedAt`, when
+     * present, is the date the upstream provider published the model.
      */
     async listModels(options = {}) {
         const body = await __classPrivateFieldGet(this, _OxyInferenceClient_instances, "m", _OxyInferenceClient_request).call(this, 'GET', '/v1/models', { ...(options.signal === undefined ? {} : { signal: options.signal }) });

package/dist/esm/mixins/OxyServices.auth.js

@@ -259,10 +259,13 @@ export function OxyServicesAuthMixin(Base) {
         /**
          * Whether this process can prove what it is (ADR 0026).
          *
-         * The internal package subpath selects a client implementation for native
-         * and browser bundlers, and the signer only for Node hosts. The runtime
-         * Node guard avoids calling attestation on clients; the module boundary
-         * keeps node:crypto out of their bundle graphs (a guard alone cannot).
+         * `#workload-identity` (package.json `imports`) selects a client
+         * implementation for native and browser bundlers, and the signer only for
+         * Node hosts. The runtime Node guard avoids calling attestation on clients;
+         * the module boundary keeps node:crypto out of their bundle graphs (a guard
+         * alone cannot). It is a package import, not a self-reference to an export
+         * subpath: a self-reference only resolves where `@oxy.so/core` is reachable
+         * through `node_modules`, which bundlers inside this workspace are not.
          *
          * @internal
          */
@@ -270,7 +273,7 @@ export function OxyServicesAuthMixin(Base) {
             if (typeof process === 'undefined' || !process.versions?.node)
                 return false;
             try {
-                const { canAttestWorkloadIdentity } = await import('@oxy.so/core/internal/workload-identity');
+                const { canAttestWorkloadIdentity } = await import('#workload-identity');
                 return canAttestWorkloadIdentity();
             }
             catch {
@@ -298,7 +301,7 @@ export function OxyServicesAuthMixin(Base) {
                 return entry.token;
             if (entry?.pending)
                 return entry.pending;
-            const { requestWorkloadServiceToken } = await import('@oxy.so/core/internal/workload-identity');
+            const { requestWorkloadServiceToken } = await import('#workload-identity');
             const seeded = entry ?? {
                 token: '',
                 expiresAt: 0,

package/dist/esm/mixins/OxyServices.utility.js

@@ -493,6 +493,7 @@ export function OxyServicesUtilityMixin(Base) {
                                 return onError(error);
                             return res.status(401).json(error);
                         }
+                        const tier = decoded.tier === 'internal' ? 'internal' : 'external';
                         // Read delegated user ID from header
                         const oxyUserIdRaw = req.headers['x-oxy-user-id'];
                         const oxyUserId = isExactNonEmptyServiceClaim(oxyUserIdRaw) ? oxyUserIdRaw : null;
@@ -513,12 +514,21 @@ export function OxyServicesUtilityMixin(Base) {
                                 return onError(error);
                             return res.status(401).json(error);
                         }
-                        // C3: a service may only act as a user when an explicit
-                        // ServiceActingAs grant exists for that (appId, userId) pair.
-                        // Without the grant we MUST refuse — silently attaching
-                        // `req.userId = oxyUserId` would let any service impersonate
-                        // any user simply by setting the header.
-                        if (oxyUserId) {
+                        // One of Oxy's own applications acts for a user without a grant:
+                        // inside the ecosystem that is trust, not consent. It still acts
+                        // with the USER's authority only — what that user may do is for the
+                        // receiving service to check.
+                        if (oxyUserId && tier === 'internal') {
+                            req.userId = oxyUserId;
+                            req.user = { id: oxyUserId };
+                            req.serviceActingAs = { userId: oxyUserId, scopes: [] };
+                        }
+                        else if (oxyUserId) {
+                            // C3: an EXTERNAL service may only act as a user when an explicit
+                            // ServiceActingAs grant exists for that (appId, userId) pair.
+                            // Without the grant we MUST refuse — silently attaching
+                            // `req.userId = oxyUserId` would let any service impersonate
+                            // any user simply by setting the header.
                             const grant = await oxyInstance.verifyServiceActingAs(appId, oxyUserId);
                             if (!grant || !grant.authorized) {
                                 logger.warn('[oxy.auth] Service token rejected — no delegation grant', {
@@ -569,6 +579,7 @@ export function OxyServicesUtilityMixin(Base) {
                             ownerAccountId,
                             scopes: Array.isArray(decoded.scopes) ? decoded.scopes : [],
                             environment,
+                            tier,
                         };
                         if (debug) {
                             logger.debug(`[oxy.auth] Service token OK app=${decoded.appName} delegateUser=${oxyUserId || '(none)'}`, {
@@ -1001,6 +1012,12 @@ export function OxyServicesUtilityMixin(Base) {
                     });
                     return;
                 }
+                // Oxy's own applications are trusted app to app; scopes are the
+                // external lane.
+                if (req.serviceApp.tier === 'internal') {
+                    next();
+                    return;
+                }
                 const appHasScope = appScopes.includes(scope);
                 const delegationHasScope = delegatedScopes.includes(scope);
                 const hasRequiredScope = req.serviceActingAs

package/dist/esm/package.json

@@ -1,3 +1,11 @@
 {
-  "type": "module"
+  "type": "module",
+  "imports": {
+    "#workload-identity": {
+      "react-native": "./server/workloadIdentity.client.js",
+      "browser": "./server/workloadIdentity.client.js",
+      "node": "./server/workloadIdentity.js",
+      "default": "./server/workloadIdentity.client.js"
+    }
+  }
 }