@oxy.so/core 4.3.0 → 4.4.0

package/dist/cjs/server/OxyServer.js

@@ -162,6 +162,12 @@ class OxyServer extends OxyServices_1.OxyServices {
             this._serverAgency = new namespaces_1.ServerAgencyApi(this.context);
         return this._serverAgency;
     }
+    /** Application management, plus the receiver-bound Alia machine-key lookup. */
+    get apps() {
+        if (!this._serverApps)
+            this._serverApps = new namespaces_1.ServerAppsApi(this.context);
+        return this._serverApps;
+    }
     /** Reputation reads, plus `award`. */
     get reputation() {
         if (!this._serverReputation)

package/dist/cjs/server/aliaMachineCredential.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OXY_ALIA_MACHINE_SCOPES = exports.OXY_ALIA_RESOURCE_APPLICATION_ID = void 0;
+exports.isOxyAliaMachinePrincipal = isOxyAliaMachinePrincipal;
+exports.getOxyAliaMachineCredentialBearer = getOxyAliaMachineCredentialBearer;
+exports.createOxyAliaMachineCredentialAuth = createOxyAliaMachineCredentialAuth;
+/** Stable resource identity, shared with the Oxy control plane. Not a display name. */
+exports.OXY_ALIA_RESOURCE_APPLICATION_ID = '6a2f851751b784a86fd0e934';
+exports.OXY_ALIA_MACHINE_SCOPES = ['alia:chat', 'inference:invoke'];
+function id(value) {
+    return typeof value === 'string' && value.length > 0 && value.length <= 128 && value.trim() === value;
+}
+/** Strict response boundary: extra user/tier fields cannot smuggle authority. */
+function isOxyAliaMachinePrincipal(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const p = value;
+    const keys = ['kind', 'audience', 'applicationId', 'credentialId', 'ownerAccountId', 'environment', 'scopes'];
+    return Object.keys(p).length === keys.length && keys.every(key => Object.prototype.hasOwnProperty.call(p, key))
+        && p.kind === 'machine' && p.audience === exports.OXY_ALIA_RESOURCE_APPLICATION_ID
+        && id(p.applicationId) && id(p.credentialId) && id(p.ownerAccountId)
+        && typeof p.environment === 'string' && ['production', 'staging', 'development'].includes(p.environment)
+        && Array.isArray(p.scopes) && p.scopes.length === 2
+        && exports.OXY_ALIA_MACHINE_SCOPES.every(scope => p.scopes.includes(scope));
+}
+// Keep the forwarding credential out of enumerable request/principal objects,
+// logs, response serialization and persistent SDK/session state. No cache.
+const forwardingCredentials = new WeakMap();
+/** Only for the request-scoped Oxy inference client; never for a user API. */
+function getOxyAliaMachineCredentialBearer(req) {
+    const bound = forwardingCredentials.get(req);
+    return bound && req.machineCredential === bound.principal ? bound.bearer : null;
+}
+/** Opt into Alia's app-only chat lane on its two chat routes, never globally. */
+function createOxyAliaMachineCredentialAuth(server, options) {
+    return async (req, res, next) => {
+        const auth = req.headers.authorization;
+        const token = typeof auth === 'string' && auth.startsWith('Bearer ') ? auth.slice(7) : '';
+        if (!token.startsWith('oxy_sk_') || token.length > 2048) {
+            res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
+            return;
+        }
+        const existing = req;
+        if (existing.user || existing.userId || existing.serviceApp || existing.oxyRequester
+            || req.machineCredential
+            || req.headers['x-oxy-user-id'] !== undefined || req.headers['x-oxy-requester-assertion'] !== undefined) {
+            res.status(403).json({ error: 'MACHINE_USER_DELEGATION_UNSUPPORTED' });
+            return;
+        }
+        try {
+            const answer = await server.apps.introspectAliaMachineCredential(token);
+            if (!answer.active || !isOxyAliaMachinePrincipal(answer.principal) || answer.principal.environment !== options.environment) {
+                res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
+                return;
+            }
+            const principal = Object.freeze({ ...answer.principal, scopes: Object.freeze(['alia:chat', 'inference:invoke']) });
+            req.machineCredential = principal;
+            forwardingCredentials.set(req, { principal, bearer: token });
+            next();
+        }
+        catch {
+            // Transport errors may contain request data; never expose or log them.
+            res.status(503).json({ error: 'MACHINE_CREDENTIAL_VERIFIER_UNAVAILABLE' });
+        }
+    };
+}

package/dist/cjs/server/index.js

@@ -16,8 +16,8 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readCapabilityAuthorization = exports.issueCapabilityTicket = exports.inputSatisfiesCapabilityLimits = exports.createCapabilityTicketMiddleware = exports.CapabilityTicketError = exports.OXY_CSP_BASELINE = exports.inlineScriptCspHash = exports.formatOxyCspPolicy = exports.extractInlineScripts = exports.cspSourcesFor = exports.createOxySecurityHeaders = exports.buildOxyPagesHeaders = exports.buildOxyCspDirectives = exports.createOxyCors = exports.UPSTREAM_HEADERS_TIMEOUT_MS = exports.MAX_URL_LENGTH = exports.MAX_REDIRECTS = exports.DEFAULT_USER_AGENT = exports.BLOCKED_HOSTNAMES = exports.ALLOWED_PROTOCOLS = exports.ALLOWED_PORTS = exports.UpstreamError = exports.SsrfRejection = exports.safeFetch = exports.isBlockedIp = exports.assertSafePublicUrl = exports.createOxyRateLimit = exports.OXY_SERVICE_ENVIRONMENTS = exports.requireOxyAuth = exports.isOxyAuthenticated = exports.getRequiredOxyUserId = exports.getRequiredOxyBillingPrincipal = exports.getOxyUserId = exports.getOxyRequestAttribution = exports.getOxyDelegatedUserId = exports.getOxyBillingPrincipal = exports.getOxyAuthRefusal = exports.getOxyActor = exports.createOxyAuthMiddleware = exports.createOptionalOxyAuth = exports.OXY_ACCOUNT_DELETED_EVENT_URI = exports.OxyAccountEventError = exports.ServerReputationApi = exports.ServerNotificationsApi = exports.ServerLinkedAccountsApi = exports.ServerAssetsApi = exports.ServerAgencyApi = exports.ANONYMOUS_SERVICE_TOKEN_RETRY_MS = exports.ServiceCredentialMismatchError = exports.OxyServer = void 0;
-exports.signInAgentAccount = exports.hasBoundedServiceTokenLifetime = exports.OXY_SERVICE_TOKEN_MAX_LIFETIME_SECONDS = exports.requestWorkloadServiceToken = exports.canAttestWorkloadIdentity = exports.withoutNodeHttpObservation = exports.observeNodeHttp = exports.createEcosystemTraffic = exports.isAllowedDeviceJoinOrigin = exports.isOfficialWebOrigin = exports.isLoopbackOrigin = exports.registrableApex = exports.OXY_IDENTITY_CACHE_PREFIXES = exports.oxyUserByIdCacheKey = exports.evictOxyIdentityCache = exports.publishOxyUserInvalidation = exports.createOxyUserInvalidationHandler = exports.createLiveCapabilityTicketVerifier = exports.verifySecret = exports.verifyOxyRequesterAssertion = exports.signOxyRequesterAssertion = exports.readOxyRequesterAssertionKeyId = exports.oxyRequesterAssertionClaimsSchema = exports.OxyRequesterAssertionError = exports.OXY_REQUESTER_ASSERTION_TYPE = exports.OXY_REQUESTER_ASSERTION_MAX_TTL_SECONDS = exports.OXY_REQUESTER_ASSERTION_HEADER = exports.OXY_REQUESTER_ASSERTION_DEFAULT_ISSUER = exports.createOxyRequesterAssertionAuth = exports.createOxyJwksKeyResolver = exports.verifyCapabilityTicket = void 0;
+exports.inlineScriptCspHash = exports.formatOxyCspPolicy = exports.extractInlineScripts = exports.cspSourcesFor = exports.createOxySecurityHeaders = exports.buildOxyPagesHeaders = exports.buildOxyCspDirectives = exports.createOxyCors = exports.UPSTREAM_HEADERS_TIMEOUT_MS = exports.MAX_URL_LENGTH = exports.MAX_REDIRECTS = exports.DEFAULT_USER_AGENT = exports.BLOCKED_HOSTNAMES = exports.ALLOWED_PROTOCOLS = exports.ALLOWED_PORTS = exports.UpstreamError = exports.SsrfRejection = exports.safeFetch = exports.isBlockedIp = exports.assertSafePublicUrl = exports.createOxyRateLimit = exports.OXY_SERVICE_ENVIRONMENTS = exports.requireOxyAuth = exports.isOxyAuthenticated = exports.getRequiredOxyUserId = exports.getRequiredOxyBillingPrincipal = exports.getOxyUserId = exports.getOxyRequestAttribution = exports.getOxyDelegatedUserId = exports.getOxyBillingPrincipal = exports.getOxyAuthRefusal = exports.getOxyActor = exports.createOxyAuthMiddleware = exports.createOptionalOxyAuth = exports.OXY_ACCOUNT_DELETED_EVENT_URI = exports.OxyAccountEventError = exports.OXY_ALIA_MACHINE_SCOPES = exports.OXY_ALIA_RESOURCE_APPLICATION_ID = exports.isOxyAliaMachinePrincipal = exports.getOxyAliaMachineCredentialBearer = exports.createOxyAliaMachineCredentialAuth = exports.ServerReputationApi = exports.ServerNotificationsApi = exports.ServerLinkedAccountsApi = exports.ServerAssetsApi = exports.ServerAgencyApi = exports.ServerAppsApi = exports.ANONYMOUS_SERVICE_TOKEN_RETRY_MS = exports.ServiceCredentialMismatchError = exports.OxyServer = void 0;
+exports.signInAgentAccount = exports.hasBoundedServiceTokenLifetime = exports.OXY_SERVICE_TOKEN_MAX_LIFETIME_SECONDS = exports.requestWorkloadServiceToken = exports.canAttestWorkloadIdentity = exports.withoutNodeHttpObservation = exports.observeNodeHttp = exports.createEcosystemTraffic = exports.isAllowedDeviceJoinOrigin = exports.isOfficialWebOrigin = exports.isLoopbackOrigin = exports.registrableApex = exports.OXY_IDENTITY_CACHE_PREFIXES = exports.oxyUserByIdCacheKey = exports.evictOxyIdentityCache = exports.publishOxyUserInvalidation = exports.createOxyUserInvalidationHandler = exports.createLiveCapabilityTicketVerifier = exports.verifySecret = exports.verifyOxyRequesterAssertion = exports.signOxyRequesterAssertion = exports.readOxyRequesterAssertionKeyId = exports.oxyRequesterAssertionClaimsSchema = exports.OxyRequesterAssertionError = exports.OXY_REQUESTER_ASSERTION_TYPE = exports.OXY_REQUESTER_ASSERTION_MAX_TTL_SECONDS = exports.OXY_REQUESTER_ASSERTION_HEADER = exports.OXY_REQUESTER_ASSERTION_DEFAULT_ISSUER = exports.createOxyRequesterAssertionAuth = exports.createOxyJwksKeyResolver = exports.verifyCapabilityTicket = exports.readCapabilityAuthorization = exports.issueCapabilityTicket = exports.inputSatisfiesCapabilityLimits = exports.createCapabilityTicketMiddleware = exports.CapabilityTicketError = exports.OXY_CSP_BASELINE = void 0;
 // The backend client: OxyServices plus the service-token lane, middleware,
 // account events and the service-only namespace methods.
 var OxyServer_1 = require("./OxyServer");
@@ -25,11 +25,18 @@ Object.defineProperty(exports, "OxyServer", { enumerable: true, get: function ()
 Object.defineProperty(exports, "ServiceCredentialMismatchError", { enumerable: true, get: function () { return OxyServer_1.ServiceCredentialMismatchError; } });
 Object.defineProperty(exports, "ANONYMOUS_SERVICE_TOKEN_RETRY_MS", { enumerable: true, get: function () { return OxyServer_1.ANONYMOUS_SERVICE_TOKEN_RETRY_MS; } });
 var namespaces_1 = require("./namespaces");
+Object.defineProperty(exports, "ServerAppsApi", { enumerable: true, get: function () { return namespaces_1.ServerAppsApi; } });
 Object.defineProperty(exports, "ServerAgencyApi", { enumerable: true, get: function () { return namespaces_1.ServerAgencyApi; } });
 Object.defineProperty(exports, "ServerAssetsApi", { enumerable: true, get: function () { return namespaces_1.ServerAssetsApi; } });
 Object.defineProperty(exports, "ServerLinkedAccountsApi", { enumerable: true, get: function () { return namespaces_1.ServerLinkedAccountsApi; } });
 Object.defineProperty(exports, "ServerNotificationsApi", { enumerable: true, get: function () { return namespaces_1.ServerNotificationsApi; } });
 Object.defineProperty(exports, "ServerReputationApi", { enumerable: true, get: function () { return namespaces_1.ServerReputationApi; } });
+var aliaMachineCredential_1 = require("./aliaMachineCredential");
+Object.defineProperty(exports, "createOxyAliaMachineCredentialAuth", { enumerable: true, get: function () { return aliaMachineCredential_1.createOxyAliaMachineCredentialAuth; } });
+Object.defineProperty(exports, "getOxyAliaMachineCredentialBearer", { enumerable: true, get: function () { return aliaMachineCredential_1.getOxyAliaMachineCredentialBearer; } });
+Object.defineProperty(exports, "isOxyAliaMachinePrincipal", { enumerable: true, get: function () { return aliaMachineCredential_1.isOxyAliaMachinePrincipal; } });
+Object.defineProperty(exports, "OXY_ALIA_RESOURCE_APPLICATION_ID", { enumerable: true, get: function () { return aliaMachineCredential_1.OXY_ALIA_RESOURCE_APPLICATION_ID; } });
+Object.defineProperty(exports, "OXY_ALIA_MACHINE_SCOPES", { enumerable: true, get: function () { return aliaMachineCredential_1.OXY_ALIA_MACHINE_SCOPES; } });
 var middleware_1 = require("./middleware");
 Object.defineProperty(exports, "OxyAccountEventError", { enumerable: true, get: function () { return middleware_1.OxyAccountEventError; } });
 Object.defineProperty(exports, "OXY_ACCOUNT_DELETED_EVENT_URI", { enumerable: true, get: function () { return middleware_1.OXY_ACCOUNT_DELETED_EVENT_URI; } });

package/dist/cjs/server/namespaces.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServerReputationApi = exports.ServerAgencyApi = exports.ServerLinkedAccountsApi = exports.ServerNotificationsApi = exports.ServerAssetsApi = void 0;
+exports.ServerReputationApi = exports.ServerAgencyApi = exports.ServerLinkedAccountsApi = exports.ServerNotificationsApi = exports.ServerAssetsApi = exports.ServerAppsApi = void 0;
 /**
  * The server-side halves of the namespaces: what exists only with a service
  * credential. `OxyServer` returns these from its namespace getters, so
@@ -13,6 +13,8 @@ const notifications_1 = require("../api/notifications");
 const linkedAccounts_1 = require("../api/linkedAccounts");
 const agency_1 = require("../api/agency");
 const reputation_1 = require("../api/reputation");
+const apps_1 = require("../api/apps");
+const aliaMachineCredential_1 = require("./aliaMachineCredential");
 const OxyServices_errors_1 = require("../OxyServices.errors");
 const errorUtils_1 = require("../utils/errorUtils");
 const logger_1 = require("../logger");
@@ -30,6 +32,28 @@ function lane(ctx) {
     }
     return ctx.service;
 }
+class ServerAppsApi extends apps_1.AppsApi {
+    constructor(serverCtx) {
+        super(serverCtx);
+        this.serverCtx = serverCtx;
+    }
+    /** Live receiver-bound lookup using THIS resource server's own service token. */
+    async introspectAliaMachineCredential(token) {
+        if (!token.startsWith('oxy_sk_') || token.length > 2048)
+            return { active: false };
+        const answer = await lane(this.serverCtx).request('POST', '/internal/alia/machine-credentials/introspect', { token }, { cache: false, retry: false });
+        if (!answer || typeof answer !== 'object' || Array.isArray(answer))
+            throw new Error('Invalid machine credential verdict');
+        const record = answer;
+        if (record.active === false && Object.keys(record).length === 1)
+            return { active: false };
+        if (record.active !== true || Object.keys(record).length !== 2 || !(0, aliaMachineCredential_1.isOxyAliaMachinePrincipal)(record.principal)) {
+            throw new Error('Invalid machine credential verdict');
+        }
+        return { active: true, principal: record.principal };
+    }
+}
+exports.ServerAppsApi = ServerAppsApi;
 function chunk(items, size) {
     const chunks = [];
     for (let i = 0; i < items.length; i += size)

package/dist/esm/server/OxyServer.js

@@ -43,7 +43,7 @@ import { OxyServices } from '../OxyServices.js';
 import { logger } from '../logger/index.js';
 import { canAttestWorkloadIdentity, requestWorkloadServiceToken } from './workloadIdentity.js';
 import { createOxyMiddleware, OXY_ACCOUNT_DELETED_EVENT_URI, OXY_JWT_ISSUER, OxyAccountEventError, parseJsonSegment, resolveServiceTokenPublicKey, } from './middleware.js';
-import { ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces.js';
+import { ServerAppsApi, ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces.js';
 /**
  * How long a failed service-token mint sends session-less requests anonymous
  * before the next attempt, under `serviceIdentity: 'when-anonymous'`.
@@ -158,6 +158,12 @@ export class OxyServer extends OxyServices {
             this._serverAgency = new ServerAgencyApi(this.context);
         return this._serverAgency;
     }
+    /** Application management, plus the receiver-bound Alia machine-key lookup. */
+    get apps() {
+        if (!this._serverApps)
+            this._serverApps = new ServerAppsApi(this.context);
+        return this._serverApps;
+    }
     /** Reputation reads, plus `award`. */
     get reputation() {
         if (!this._serverReputation)

package/dist/esm/server/aliaMachineCredential.js

@@ -0,0 +1,60 @@
+/** Stable resource identity, shared with the Oxy control plane. Not a display name. */
+export const OXY_ALIA_RESOURCE_APPLICATION_ID = '6a2f851751b784a86fd0e934';
+export const OXY_ALIA_MACHINE_SCOPES = ['alia:chat', 'inference:invoke'];
+function id(value) {
+    return typeof value === 'string' && value.length > 0 && value.length <= 128 && value.trim() === value;
+}
+/** Strict response boundary: extra user/tier fields cannot smuggle authority. */
+export function isOxyAliaMachinePrincipal(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const p = value;
+    const keys = ['kind', 'audience', 'applicationId', 'credentialId', 'ownerAccountId', 'environment', 'scopes'];
+    return Object.keys(p).length === keys.length && keys.every(key => Object.prototype.hasOwnProperty.call(p, key))
+        && p.kind === 'machine' && p.audience === OXY_ALIA_RESOURCE_APPLICATION_ID
+        && id(p.applicationId) && id(p.credentialId) && id(p.ownerAccountId)
+        && typeof p.environment === 'string' && ['production', 'staging', 'development'].includes(p.environment)
+        && Array.isArray(p.scopes) && p.scopes.length === 2
+        && OXY_ALIA_MACHINE_SCOPES.every(scope => p.scopes.includes(scope));
+}
+// Keep the forwarding credential out of enumerable request/principal objects,
+// logs, response serialization and persistent SDK/session state. No cache.
+const forwardingCredentials = new WeakMap();
+/** Only for the request-scoped Oxy inference client; never for a user API. */
+export function getOxyAliaMachineCredentialBearer(req) {
+    const bound = forwardingCredentials.get(req);
+    return bound && req.machineCredential === bound.principal ? bound.bearer : null;
+}
+/** Opt into Alia's app-only chat lane on its two chat routes, never globally. */
+export function createOxyAliaMachineCredentialAuth(server, options) {
+    return async (req, res, next) => {
+        const auth = req.headers.authorization;
+        const token = typeof auth === 'string' && auth.startsWith('Bearer ') ? auth.slice(7) : '';
+        if (!token.startsWith('oxy_sk_') || token.length > 2048) {
+            res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
+            return;
+        }
+        const existing = req;
+        if (existing.user || existing.userId || existing.serviceApp || existing.oxyRequester
+            || req.machineCredential
+            || req.headers['x-oxy-user-id'] !== undefined || req.headers['x-oxy-requester-assertion'] !== undefined) {
+            res.status(403).json({ error: 'MACHINE_USER_DELEGATION_UNSUPPORTED' });
+            return;
+        }
+        try {
+            const answer = await server.apps.introspectAliaMachineCredential(token);
+            if (!answer.active || !isOxyAliaMachinePrincipal(answer.principal) || answer.principal.environment !== options.environment) {
+                res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
+                return;
+            }
+            const principal = Object.freeze({ ...answer.principal, scopes: Object.freeze(['alia:chat', 'inference:invoke']) });
+            req.machineCredential = principal;
+            forwardingCredentials.set(req, { principal, bearer: token });
+            next();
+        }
+        catch {
+            // Transport errors may contain request data; never expose or log them.
+            res.status(503).json({ error: 'MACHINE_CREDENTIAL_VERIFIER_UNAVAILABLE' });
+        }
+    };
+}

package/dist/esm/server/index.js

@@ -17,7 +17,8 @@
 // The backend client: OxyServices plus the service-token lane, middleware,
 // account events and the service-only namespace methods.
 export { OxyServer, ServiceCredentialMismatchError, ANONYMOUS_SERVICE_TOKEN_RETRY_MS } from './OxyServer.js';
-export { ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces.js';
+export { ServerAppsApi, ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces.js';
+export { createOxyAliaMachineCredentialAuth, getOxyAliaMachineCredentialBearer, isOxyAliaMachinePrincipal, OXY_ALIA_RESOURCE_APPLICATION_ID, OXY_ALIA_MACHINE_SCOPES, } from './aliaMachineCredential.js';
 export { OxyAccountEventError, OXY_ACCOUNT_DELETED_EVENT_URI } from './middleware.js';
 export { createOptionalOxyAuth, createOxyAuthMiddleware, getOxyActor, getOxyAuthRefusal, getOxyBillingPrincipal, getOxyDelegatedUserId, getOxyRequestAttribution, getOxyUserId, getRequiredOxyBillingPrincipal, getRequiredOxyUserId, isOxyAuthenticated, requireOxyAuth, OXY_SERVICE_ENVIRONMENTS, } from './auth.js';
 export { createOxyRateLimit } from './rateLimit.js';

package/dist/esm/server/namespaces.js

@@ -10,6 +10,8 @@ import { NotificationsApi } from '../api/notifications.js';
 import { LinkedAccountsApi } from '../api/linkedAccounts.js';
 import { AgencyApi } from '../api/agency.js';
 import { ReputationApi } from '../api/reputation.js';
+import { AppsApi } from '../api/apps.js';
+import { isOxyAliaMachinePrincipal } from './aliaMachineCredential.js';
 import { ServiceAssetMetadataError, ServiceLinkedDownloadUrlError } from '../OxyServices.errors.js';
 import { extractErrorStatus } from '../utils/errorUtils.js';
 import { logger } from '../logger/index.js';
@@ -27,6 +29,27 @@ function lane(ctx) {
     }
     return ctx.service;
 }
+export class ServerAppsApi extends AppsApi {
+    constructor(serverCtx) {
+        super(serverCtx);
+        this.serverCtx = serverCtx;
+    }
+    /** Live receiver-bound lookup using THIS resource server's own service token. */
+    async introspectAliaMachineCredential(token) {
+        if (!token.startsWith('oxy_sk_') || token.length > 2048)
+            return { active: false };
+        const answer = await lane(this.serverCtx).request('POST', '/internal/alia/machine-credentials/introspect', { token }, { cache: false, retry: false });
+        if (!answer || typeof answer !== 'object' || Array.isArray(answer))
+            throw new Error('Invalid machine credential verdict');
+        const record = answer;
+        if (record.active === false && Object.keys(record).length === 1)
+            return { active: false };
+        if (record.active !== true || Object.keys(record).length !== 2 || !isOxyAliaMachinePrincipal(record.principal)) {
+            throw new Error('Invalid machine credential verdict');
+        }
+        return { active: true, principal: record.principal };
+    }
+}
 function chunk(items, size) {
     const chunks = [];
     for (let i = 0; i < items.length; i += size)

package/dist/types/server/OxyServer.d.ts

@@ -2,7 +2,7 @@ import { OxyServices, type OxyConfig } from '../OxyServices';
 import type { HttpMethod } from '../client/context';
 import type { RequestOptions } from '../HttpService';
 import { type OxyAccountEvent, type OxyAccountEventFeedPage, type OxyMiddleware, type ServiceActingAsVerification, type VerifyAccountEventOptions } from './middleware';
-import { ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi } from './namespaces';
+import { ServerAppsApi, ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi } from './namespaces';
 export interface OxyServerConfig extends OxyConfig {
     /** This service's application credential. Omit to use workload identity (ADR 0026). */
     serviceAuth?: {
@@ -87,6 +87,7 @@ export declare class OxyServer extends OxyServices {
     private _serverNotifications?;
     private _serverLinkedAccounts?;
     private _serverAgency?;
+    private _serverApps?;
     private _serverReputation?;
     /** Files, plus the service-only metadata and linked-URL lookups. */
     get assets(): ServerAssetsApi;
@@ -96,6 +97,8 @@ export declare class OxyServer extends OxyServices {
     get linkedAccounts(): ServerLinkedAccountsApi;
     /** Delegated capabilities, plus `introspectRequesterAssertion`. */
     get agency(): ServerAgencyApi;
+    /** Application management, plus the receiver-bound Alia machine-key lookup. */
+    get apps(): ServerAppsApi;
     /** Reputation reads, plus `award`. */
     get reputation(): ServerReputationApi;
     /**

package/dist/types/server/aliaMachineCredential.d.ts

@@ -0,0 +1,37 @@
+import type { Request, RequestHandler } from 'express';
+import type { OxyServiceEnvironment } from './auth';
+/** Stable resource identity, shared with the Oxy control plane. Not a display name. */
+export declare const OXY_ALIA_RESOURCE_APPLICATION_ID = "6a2f851751b784a86fd0e934";
+export declare const OXY_ALIA_MACHINE_SCOPES: readonly ["alia:chat", "inference:invoke"];
+/** App-only assistant turn: no human subject, service tier or delegated authority. */
+export interface OxyAliaMachinePrincipal {
+    readonly kind: 'machine';
+    readonly audience: typeof OXY_ALIA_RESOURCE_APPLICATION_ID;
+    readonly applicationId: string;
+    readonly credentialId: string;
+    readonly ownerAccountId: string;
+    readonly environment: OxyServiceEnvironment;
+    readonly scopes: readonly ['alia:chat', 'inference:invoke'];
+}
+export type AliaMachineCredentialIntrospection = {
+    active: false;
+} | {
+    active: true;
+    principal: OxyAliaMachinePrincipal;
+};
+export interface OxyAliaMachineCredentialHost {
+    readonly apps: {
+        introspectAliaMachineCredential(token: string): Promise<AliaMachineCredentialIntrospection>;
+    };
+}
+export interface OxyAliaMachineRequest extends Request {
+    machineCredential?: OxyAliaMachinePrincipal;
+}
+/** Strict response boundary: extra user/tier fields cannot smuggle authority. */
+export declare function isOxyAliaMachinePrincipal(value: unknown): value is OxyAliaMachinePrincipal;
+/** Only for the request-scoped Oxy inference client; never for a user API. */
+export declare function getOxyAliaMachineCredentialBearer(req: Request): string | null;
+/** Opt into Alia's app-only chat lane on its two chat routes, never globally. */
+export declare function createOxyAliaMachineCredentialAuth(server: OxyAliaMachineCredentialHost, options: {
+    environment: OxyServiceEnvironment;
+}): RequestHandler;

package/dist/types/server/index.d.ts

@@ -16,7 +16,9 @@
  */
 export { OxyServer, ServiceCredentialMismatchError, ANONYMOUS_SERVICE_TOKEN_RETRY_MS } from './OxyServer';
 export type { OxyServerConfig, ServiceTokenResponse } from './OxyServer';
-export { ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces';
+export { ServerAppsApi, ServerAgencyApi, ServerAssetsApi, ServerLinkedAccountsApi, ServerNotificationsApi, ServerReputationApi, } from './namespaces';
+export { createOxyAliaMachineCredentialAuth, getOxyAliaMachineCredentialBearer, isOxyAliaMachinePrincipal, OXY_ALIA_RESOURCE_APPLICATION_ID, OXY_ALIA_MACHINE_SCOPES, } from './aliaMachineCredential';
+export type { AliaMachineCredentialIntrospection, OxyAliaMachinePrincipal, OxyAliaMachineRequest, OxyAliaMachineCredentialHost, } from './aliaMachineCredential';
 export type { CapabilityTicketGrant, CapabilityTicketIntrospection, CreateExecutionAuthorizationInput, ServiceCapabilityCatalog, } from './namespaces';
 export { OxyAccountEventError, OXY_ACCOUNT_DELETED_EVENT_URI } from './middleware';
 export type { AuthMiddlewareOptions, OxyAccountEvent, OxyAccountEventFeedItem, OxyAccountEventFeedPage, OxyMiddleware, ServiceActingAsVerification, ServiceApp, VerifyAccountEventOptions, } from './middleware';

package/dist/types/server/namespaces.d.ts

@@ -5,12 +5,21 @@
  * `oxy.assets`.
  */
 import { type ForegroundExecutionAuthorizationInput, type ActorRef, type AppCapabilityCatalog, type AutonomyLevel, type CapabilityTicketClaims, type CapabilityTicketRequest, type GrantLimit, type PolicyDecision, type ResourceRef, type CreateOxyNotificationRequest, type AwardReputationInput, type ReputationTransaction, type ServiceLinkedAccountListResponse } from '@oxy.so/contracts';
+import type { OxyContext } from '../client/context';
 import type { Notification, ServiceAssetMetadata, ServiceAssetMetadataBySha, ServiceLinkedDownloadUrl } from '../models/interfaces';
 import { AssetsApi } from '../api/assets';
 import { NotificationsApi } from '../api/notifications';
 import { LinkedAccountsApi } from '../api/linkedAccounts';
 import { AgencyApi, type CapabilityExecutionAuthorization, type RequesterAssertionGrant, type RequesterAssertionIntrospection } from '../api/agency';
 import { ReputationApi } from '../api/reputation';
+import { AppsApi } from '../api/apps';
+import { type AliaMachineCredentialIntrospection } from './aliaMachineCredential';
+export declare class ServerAppsApi extends AppsApi {
+    private readonly serverCtx;
+    constructor(serverCtx: OxyContext);
+    /** Live receiver-bound lookup using THIS resource server's own service token. */
+    introspectAliaMachineCredential(token: string): Promise<AliaMachineCredentialIntrospection>;
+}
 export declare class ServerAssetsApi extends AssetsApi {
     /**
      * Resolve many asset ids to their content-addressed metadata (`sha256`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/core",
-  "version": "4.3.0",
+  "version": "4.4.0",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/src/server/OxyServer.ts

@@ -59,6 +59,7 @@ import {
   type VerifyAccountEventOptions,
 } from './middleware';
 import {
+  ServerAppsApi,
   ServerAgencyApi,
   ServerAssetsApi,
   ServerLinkedAccountsApi,
@@ -217,6 +218,7 @@ export class OxyServer extends OxyServices {
   private _serverNotifications?: ServerNotificationsApi;
   private _serverLinkedAccounts?: ServerLinkedAccountsApi;
   private _serverAgency?: ServerAgencyApi;
+  private _serverApps?: ServerAppsApi;
   private _serverReputation?: ServerReputationApi;
 
   /** Files, plus the service-only metadata and linked-URL lookups. */
@@ -239,6 +241,11 @@ export class OxyServer extends OxyServices {
     if (!this._serverAgency) this._serverAgency = new ServerAgencyApi(this.context);
     return this._serverAgency;
   }
+  /** Application management, plus the receiver-bound Alia machine-key lookup. */
+  override get apps(): ServerAppsApi {
+    if (!this._serverApps) this._serverApps = new ServerAppsApi(this.context);
+    return this._serverApps;
+  }
   /** Reputation reads, plus `award`. */
   override get reputation(): ServerReputationApi {
     if (!this._serverReputation) this._serverReputation = new ServerReputationApi(this.context);
@@ -695,4 +702,3 @@ export class OxyServer extends OxyServices {
     return appId;
   }
 }
-

package/src/server/aliaMachineCredential.ts

@@ -0,0 +1,94 @@
+import type { Request, RequestHandler } from 'express';
+import type { OxyServiceEnvironment } from './auth';
+
+/** Stable resource identity, shared with the Oxy control plane. Not a display name. */
+export const OXY_ALIA_RESOURCE_APPLICATION_ID = '6a2f851751b784a86fd0e934';
+export const OXY_ALIA_MACHINE_SCOPES = ['alia:chat', 'inference:invoke'] as const;
+
+/** App-only assistant turn: no human subject, service tier or delegated authority. */
+export interface OxyAliaMachinePrincipal {
+  readonly kind: 'machine';
+  readonly audience: typeof OXY_ALIA_RESOURCE_APPLICATION_ID;
+  readonly applicationId: string;
+  readonly credentialId: string;
+  readonly ownerAccountId: string;
+  readonly environment: OxyServiceEnvironment;
+  readonly scopes: readonly ['alia:chat', 'inference:invoke'];
+}
+
+export type AliaMachineCredentialIntrospection =
+  | { active: false }
+  | { active: true; principal: OxyAliaMachinePrincipal };
+
+export interface OxyAliaMachineCredentialHost {
+  readonly apps: {
+    introspectAliaMachineCredential(token: string): Promise<AliaMachineCredentialIntrospection>;
+  };
+}
+
+export interface OxyAliaMachineRequest extends Request {
+  machineCredential?: OxyAliaMachinePrincipal;
+}
+
+function id(value: unknown): value is string {
+  return typeof value === 'string' && value.length > 0 && value.length <= 128 && value.trim() === value;
+}
+
+/** Strict response boundary: extra user/tier fields cannot smuggle authority. */
+export function isOxyAliaMachinePrincipal(value: unknown): value is OxyAliaMachinePrincipal {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return false;
+  const p = value as Record<string, unknown>;
+  const keys = ['kind', 'audience', 'applicationId', 'credentialId', 'ownerAccountId', 'environment', 'scopes'];
+  return Object.keys(p).length === keys.length && keys.every(key => Object.prototype.hasOwnProperty.call(p, key))
+    && p.kind === 'machine' && p.audience === OXY_ALIA_RESOURCE_APPLICATION_ID
+    && id(p.applicationId) && id(p.credentialId) && id(p.ownerAccountId)
+    && typeof p.environment === 'string' && ['production', 'staging', 'development'].includes(p.environment)
+    && Array.isArray(p.scopes) && p.scopes.length === 2
+    && OXY_ALIA_MACHINE_SCOPES.every(scope => (p.scopes as unknown[]).includes(scope));
+}
+
+// Keep the forwarding credential out of enumerable request/principal objects,
+// logs, response serialization and persistent SDK/session state. No cache.
+const forwardingCredentials = new WeakMap<Request, { principal: OxyAliaMachinePrincipal; bearer: string }>();
+
+/** Only for the request-scoped Oxy inference client; never for a user API. */
+export function getOxyAliaMachineCredentialBearer(req: Request): string | null {
+  const bound = forwardingCredentials.get(req);
+  return bound && (req as OxyAliaMachineRequest).machineCredential === bound.principal ? bound.bearer : null;
+}
+
+/** Opt into Alia's app-only chat lane on its two chat routes, never globally. */
+export function createOxyAliaMachineCredentialAuth(
+  server: OxyAliaMachineCredentialHost,
+  options: { environment: OxyServiceEnvironment },
+): RequestHandler {
+  return async (req, res, next) => {
+    const auth = req.headers.authorization;
+    const token = typeof auth === 'string' && auth.startsWith('Bearer ') ? auth.slice(7) : '';
+    if (!token.startsWith('oxy_sk_') || token.length > 2048) {
+      res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
+      return;
+    }
+    const existing = req as Request & { user?: unknown; userId?: unknown; serviceApp?: unknown; oxyRequester?: unknown };
+    if (existing.user || existing.userId || existing.serviceApp || existing.oxyRequester
+      || (req as OxyAliaMachineRequest).machineCredential
+      || req.headers['x-oxy-user-id'] !== undefined || req.headers['x-oxy-requester-assertion'] !== undefined) {
+      res.status(403).json({ error: 'MACHINE_USER_DELEGATION_UNSUPPORTED' });
+      return;
+    }
+    try {
+      const answer = await server.apps.introspectAliaMachineCredential(token);
+      if (!answer.active || !isOxyAliaMachinePrincipal(answer.principal) || answer.principal.environment !== options.environment) {
+        res.status(401).json({ error: 'MACHINE_CREDENTIAL_INVALID' });
+        return;
+      }
+      const principal = Object.freeze({ ...answer.principal, scopes: Object.freeze(['alia:chat', 'inference:invoke'] as const) });
+      (req as OxyAliaMachineRequest).machineCredential = principal;
+      forwardingCredentials.set(req, { principal, bearer: token });
+      next();
+    } catch {
+      // Transport errors may contain request data; never expose or log them.
+      res.status(503).json({ error: 'MACHINE_CREDENTIAL_VERIFIER_UNAVAILABLE' });
+    }
+  };
+}

package/src/server/index.ts

@@ -20,12 +20,26 @@
 export { OxyServer, ServiceCredentialMismatchError, ANONYMOUS_SERVICE_TOKEN_RETRY_MS } from './OxyServer';
 export type { OxyServerConfig, ServiceTokenResponse } from './OxyServer';
 export {
+  ServerAppsApi,
   ServerAgencyApi,
   ServerAssetsApi,
   ServerLinkedAccountsApi,
   ServerNotificationsApi,
   ServerReputationApi,
 } from './namespaces';
+export {
+  createOxyAliaMachineCredentialAuth,
+  getOxyAliaMachineCredentialBearer,
+  isOxyAliaMachinePrincipal,
+  OXY_ALIA_RESOURCE_APPLICATION_ID,
+  OXY_ALIA_MACHINE_SCOPES,
+} from './aliaMachineCredential';
+export type {
+  AliaMachineCredentialIntrospection,
+  OxyAliaMachinePrincipal,
+  OxyAliaMachineRequest,
+  OxyAliaMachineCredentialHost,
+} from './aliaMachineCredential';
 export type {
   CapabilityTicketGrant,
   CapabilityTicketIntrospection,

package/src/server/namespaces.ts

@@ -18,6 +18,8 @@ import { NotificationsApi } from '../api/notifications';
 import { LinkedAccountsApi } from '../api/linkedAccounts';
 import { AgencyApi, type CapabilityExecutionAuthorization, type RequesterAssertionGrant, type RequesterAssertionIntrospection } from '../api/agency';
 import { ReputationApi } from '../api/reputation';
+import { AppsApi } from '../api/apps';
+import { isOxyAliaMachinePrincipal, type AliaMachineCredentialIntrospection } from './aliaMachineCredential';
 import { ServiceAssetMetadataError, ServiceLinkedDownloadUrlError } from '../OxyServices.errors';
 import { extractErrorStatus } from '../utils/errorUtils';
 import { logger } from '../logger';
@@ -39,6 +41,25 @@ function lane(ctx: OxyContext): ServiceLane {
   return ctx.service;
 }
 
+export class ServerAppsApi extends AppsApi {
+  constructor(private readonly serverCtx: OxyContext) { super(serverCtx); }
+  /** Live receiver-bound lookup using THIS resource server's own service token. */
+  async introspectAliaMachineCredential(token: string): Promise<AliaMachineCredentialIntrospection> {
+    if (!token.startsWith('oxy_sk_') || token.length > 2048) return { active: false };
+    const answer = await lane(this.serverCtx).request<unknown>(
+      'POST', '/internal/alia/machine-credentials/introspect', { token },
+      { cache: false, retry: false },
+    );
+    if (!answer || typeof answer !== 'object' || Array.isArray(answer)) throw new Error('Invalid machine credential verdict');
+    const record = answer as Record<string, unknown>;
+    if (record.active === false && Object.keys(record).length === 1) return { active: false };
+    if (record.active !== true || Object.keys(record).length !== 2 || !isOxyAliaMachinePrincipal(record.principal)) {
+      throw new Error('Invalid machine credential verdict');
+    }
+    return { active: true, principal: record.principal };
+  }
+}
+
 function chunk<T>(items: T[], size: number): T[][] {
   const chunks: T[][] = [];
   for (let i = 0; i < items.length; i += size) chunks.push(items.slice(i, i + size));