@oxyhq/contracts 0.26.0 → 0.27.0

package/dist/cjs/accountGraph.js

@@ -22,9 +22,10 @@ const zod_1 = require("zod");
  * `db/schema/users.ts` mirrors to keep the `users_kind_check` CHECK honest.
  *
  * Deriving the union from the array instead would cost nothing here and be paid
- * by consumers: `kind` travels into `@oxyhq/services` through
- * `SwitchableAccount`, where an indexed-access type is materially more
- * expensive to check than a literal union.
+ * by consumers: `kind` travels into `@oxyhq/services` on every device-directory
+ * context (`deviceContextSchema.kind` → `DeviceContext` → the switcher rows),
+ * and an indexed-access type is materially more expensive to check there than a
+ * literal union.
  */
 exports.ACCOUNT_KINDS = [
     'personal',

package/dist/cjs/index.js

@@ -16,7 +16,9 @@ exports.reputationBalanceBreakdownSchema = exports.reputationTransactionSchema =
 exports.reverseModerationEffectSchema = exports.finalizeModerationDecisionSchema = exports.moderationDecisionEventSchema = exports.moderationPolicyVersionsSchema = exports.moderationDecisionEventSubjectSchema = exports.moderationFindingSchema = exports.applicationModerationStandingSchema = exports.identityBindingStatusSchema = exports.identityBindingTypeSchema = exports.personhoodStatusSchema = exports.contributionTierSchema = exports.conductStandingSchema = exports.conductStrikeStatusSchema = exports.moderationEffectSkipReasonSchema = exports.moderationEffectStatusSchema = exports.moderationEffectTypeSchema = exports.moderationDecisionStatusSchema = exports.moderationAttributionSchema = exports.moderationFindingScopeSchema = exports.moderationSeveritySchema = exports.APPLICATION_MODERATION_STANDINGS = exports.IDENTITY_BINDING_STATUSES = exports.IDENTITY_BINDING_TYPES = exports.PERSONHOOD_STATUSES = exports.CONTRIBUTION_TIERS = exports.CONDUCT_STANDINGS = exports.CONDUCT_STRIKE_STATUSES = exports.MODERATION_EFFECT_SKIP_REASONS = exports.MODERATION_EFFECT_STATUSES = exports.MODERATION_EFFECT_TYPES = exports.MODERATION_DECISION_STATUSES = exports.MODERATION_ATTRIBUTIONS = exports.MODERATION_FINDING_SCOPES = exports.MODERATION_SEVERITIES = exports.isFullReputationBalance = exports.reverseReputationTransactionSchema = exports.upsertReputationRuleSchema = exports.resolveReputationDisputeSchema = exports.createReputationDisputeSchema = exports.awardReputationSchema = exports.reverseReputationTransactionResultSchema = exports.reputationInfluenceResultSchema = exports.reputationLeaderboardEntrySchema = exports.reputationLeaderboardUserSchema = exports.reputationRuleSchema = exports.reputationDisputeSchema = exports.reputationBalanceSchema = exports.reputationBalanceSummarySchema = exports.reputationReliabilitySchema = exports.reputationInfluenceSchema = void 0;
 exports.hubActivateRequestSchema = exports.hubClaimRequestSchema = exports.hubSessionSchema = exports.browserHubRevokeResponseSchema = exports.browserHubErrorSchema = exports.browserHubResolveResponseSchema = exports.browserHubHandleResponseSchema = exports.browserHubHandleRequestSchema = exports.browserHubHandleSchema = exports.BROWSER_HUB_HANDLE_TTL_MS = exports.BROWSER_HUB_COOKIE_ATTRIBUTES = exports.BROWSER_HUB_COOKIE_NAME = exports.oauthAuthorizeCodeResponseSchema = exports.oauthConsentDecisionSchema = exports.deviceDirectorySyncSchema = exports.deviceActivateResponseSchema = exports.deviceActivateRequestSchema = exports.deviceDirectorySchema = exports.devicePrincipalSchema = exports.deviceAccountContextSchema = exports.deviceDirectoryProfileSchema = exports.deviceContextRelationshipSchema = exports.sessionAccountsChangedEventSchema = exports.sessionAccountsChangedReasonSchema = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceBackgroundTokenResponseSchema = exports.deviceBackgroundTokenRequestSchema = exports.deviceBackgroundCredentialResponseSchema = exports.deviceTokenMintResponseSchema = exports.deviceTokenMintRequestSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.linkPreviewResponseSchema = exports.linkPreviewBatchResponseSchema = exports.linkPreviewBatchRequestSchema = exports.linkPreviewSchema = exports.applicationModerationTrustSchema = exports.reputationContextualInfluenceSchema = exports.reputationReviewingSchema = exports.reputationReportingSchema = exports.reputationConductSchema = exports.reputationContributionSchema = exports.reputationPersonhoodSchema = exports.identityBindingSchema = exports.registerIdentityBindingSchema = exports.reverseModerationEffectResultSchema = exports.applyModerationDecisionResultSchema = exports.moderationEffectSchema = void 0;
 exports.transparencyCheckpointSchema = exports.transparencyAnchorSchema = exports.transparencyCheckpointSignatureSchema = exports.deviceTransferDenyResponseSchema = exports.deviceTransferApproveResponseSchema = exports.deviceTransferApproveRequestSchema = exports.deviceTransferInfoResponseSchema = exports.deviceTransferInitResponseSchema = exports.deviceTransferInitRequestSchema = exports.devicePairingStatusSchema = exports.webauthnLoginVerifyRequestSchema = exports.webauthnRegisterVerifyRequestSchema = exports.webauthnLoginOptionsRequestSchema = exports.webauthnRegisterOptionsRequestSchema = exports.updateRolloutPatchSchema = exports.promoteRequestSchema = exports.rollbackToEmbeddedRequestSchema = exports.rollbackRequestSchema = exports.updateListResponseSchema = exports.channelListResponseSchema = exports.channelSchema = exports.rollbackToEmbeddedEntrySchema = exports.createUpdateResponseSchema = exports.updateSchema = exports.createUpdateRequestSchema = exports.updateAssetRefSchema = exports.assetCompleteResponseSchema = exports.assetCompleteResultItemSchema = exports.assetCompleteRequestSchema = exports.assetInitResponseSchema = exports.assetUploadTicketSchema = exports.assetInitRequestSchema = exports.assetInitItemSchema = exports.rolloutPercentSchema = exports.runtimeVersionSchema = exports.channelNameSchema = exports.sha256HexSchema = exports.updateAssetStatusSchema = exports.updateStatusSchema = exports.updatePlatformSchema = exports.backupStatusResponseSchema = exports.backupUploadRequestSchema = exports.encryptedBackupEnvelopeSchema = exports.backupLookupIdSchema = exports.rotateKeyCompleteResponseSchema = exports.rotateKeyCompleteRequestSchema = exports.rotateKeyChallengeResponseSchema = exports.loginResultSchema = exports.hubAuthorizeResultSchema = exports.hubAuthorizeRequestSchema = void 0;
-exports.transparencyCheckpointListSchema = exports.transparencyInclusionProofSchema = void 0;
+exports.inferenceModalitySchema = exports.priceSnapshotSchema = exports.priceVersionSchema = exports.priceVersionStatusSchema = exports.inferenceErrorSchema = exports.providerErrorPassthroughSchema = exports.safeErrorTextSchema = exports.upstreamErrorCategorySchema = exports.inferenceErrorCodeSchema = exports.NON_RETRYABLE_INFERENCE_ERROR_CODES = exports.INFERENCE_ERROR_CODES = exports.inferenceAttributionSchema = exports.authenticatedPrincipalSchema = exports.billingPrincipalSchema = exports.inferenceScopeSchema = exports.INFERENCE_SCOPES = exports.unitPriceSchema = exports.usageQuantitySchema = exports.usageSourceSchema = exports.USAGE_SOURCES = exports.usageUnitSchema = exports.USAGE_UNITS = exports.moneySchema = exports.exactDecimalSchema = exports.INFERENCE_MONEY_SCALE = exports.currencyCodeSchema = exports.RESERVED_ALIA_PUBLISHER = exports.inferenceRegionSchema = exports.deploymentIdSchema = exports.inferenceProviderSlugSchema = exports.routingProfileSlugSchema = exports.modelReferenceSchema = exports.modelRevisionLabelSchema = exports.modelIdSchema = exports.modelSlugSchema = exports.publisherSlugSchema = exports.inferenceHttpsUrlSchema = exports.inferenceDateSchema = exports.inferenceTimestampSchema = exports.inferenceEnvironmentSchema = exports.idempotencyKeySchema = exports.generationIdSchema = exports.requestIdSchema = exports.oxyCredentialIdSchema = exports.oxyApplicationIdSchema = exports.delegatedUserIdSchema = exports.oxyAccountIdSchema = exports.INFERENCE_CONTRACT_VERSION = exports.transparencyCheckpointListSchema = exports.transparencyInclusionProofSchema = void 0;
+exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.inferenceContentSourceSchema = exports.routingPolicyReferenceSchema = exports.routingPolicySchema = exports.routingFallbackPolicySchema = exports.routingPolicyScopeSchema = exports.routingTargetSchema = exports.modelCatalogueEntrySchema = exports.catalogueServingProviderSummarySchema = exports.cataloguePublisherSummarySchema = exports.routingProfileSchema = exports.routingProfileCandidateSchema = exports.modelDeploymentSchema = exports.inferenceProviderSchema = exports.modelRevisionSchema = exports.catalogueModelSchema = exports.modelPublisherSchema = exports.modelSafetyMetadataSchema = exports.modelEvaluationResultSchema = exports.modelDeprecationSchema = exports.commercialPermissionSchema = exports.availabilityScopeSchema = exports.inferenceDataPolicySchema = exports.modelProvenanceSchema = exports.modelLicenseSchema = exports.modelCapabilitiesSchema = void 0;
+exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerSecretReferenceSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -330,3 +332,143 @@ Object.defineProperty(exports, "transparencyAnchorSchema", { enumerable: true, g
 Object.defineProperty(exports, "transparencyCheckpointSchema", { enumerable: true, get: function () { return transparency_1.transparencyCheckpointSchema; } });
 Object.defineProperty(exports, "transparencyInclusionProofSchema", { enumerable: true, get: function () { return transparency_1.transparencyInclusionProofSchema; } });
 Object.defineProperty(exports, "transparencyCheckpointListSchema", { enumerable: true, get: function () { return transparency_1.transparencyCheckpointListSchema; } });
+/* -------------------------------------------------------------------------- */
+/*  Inference (Oxy↔data-plane) — issue #972                                        */
+/* -------------------------------------------------------------------------- */
+var version_1 = require("./inference/version");
+// The version of the contract SET; per-shape versions live in the data.
+Object.defineProperty(exports, "INFERENCE_CONTRACT_VERSION", { enumerable: true, get: function () { return version_1.INFERENCE_CONTRACT_VERSION; } });
+var identifiers_1 = require("./inference/identifiers");
+// Principal identifiers. `oxyAccountIdSchema` and `delegatedUserIdSchema`
+// are branded apart so a delegated end user can never become the payer.
+Object.defineProperty(exports, "oxyAccountIdSchema", { enumerable: true, get: function () { return identifiers_1.oxyAccountIdSchema; } });
+Object.defineProperty(exports, "delegatedUserIdSchema", { enumerable: true, get: function () { return identifiers_1.delegatedUserIdSchema; } });
+Object.defineProperty(exports, "oxyApplicationIdSchema", { enumerable: true, get: function () { return identifiers_1.oxyApplicationIdSchema; } });
+Object.defineProperty(exports, "oxyCredentialIdSchema", { enumerable: true, get: function () { return identifiers_1.oxyCredentialIdSchema; } });
+Object.defineProperty(exports, "requestIdSchema", { enumerable: true, get: function () { return identifiers_1.requestIdSchema; } });
+Object.defineProperty(exports, "generationIdSchema", { enumerable: true, get: function () { return identifiers_1.generationIdSchema; } });
+Object.defineProperty(exports, "idempotencyKeySchema", { enumerable: true, get: function () { return identifiers_1.idempotencyKeySchema; } });
+Object.defineProperty(exports, "inferenceEnvironmentSchema", { enumerable: true, get: function () { return identifiers_1.inferenceEnvironmentSchema; } });
+// Wire primitives
+Object.defineProperty(exports, "inferenceTimestampSchema", { enumerable: true, get: function () { return identifiers_1.inferenceTimestampSchema; } });
+Object.defineProperty(exports, "inferenceDateSchema", { enumerable: true, get: function () { return identifiers_1.inferenceDateSchema; } });
+Object.defineProperty(exports, "inferenceHttpsUrlSchema", { enumerable: true, get: function () { return identifiers_1.inferenceHttpsUrlSchema; } });
+// Catalogue references
+Object.defineProperty(exports, "publisherSlugSchema", { enumerable: true, get: function () { return identifiers_1.publisherSlugSchema; } });
+Object.defineProperty(exports, "modelSlugSchema", { enumerable: true, get: function () { return identifiers_1.modelSlugSchema; } });
+Object.defineProperty(exports, "modelIdSchema", { enumerable: true, get: function () { return identifiers_1.modelIdSchema; } });
+Object.defineProperty(exports, "modelRevisionLabelSchema", { enumerable: true, get: function () { return identifiers_1.modelRevisionLabelSchema; } });
+Object.defineProperty(exports, "modelReferenceSchema", { enumerable: true, get: function () { return identifiers_1.modelReferenceSchema; } });
+Object.defineProperty(exports, "routingProfileSlugSchema", { enumerable: true, get: function () { return identifiers_1.routingProfileSlugSchema; } });
+Object.defineProperty(exports, "inferenceProviderSlugSchema", { enumerable: true, get: function () { return identifiers_1.inferenceProviderSlugSchema; } });
+Object.defineProperty(exports, "deploymentIdSchema", { enumerable: true, get: function () { return identifiers_1.deploymentIdSchema; } });
+Object.defineProperty(exports, "inferenceRegionSchema", { enumerable: true, get: function () { return identifiers_1.inferenceRegionSchema; } });
+Object.defineProperty(exports, "RESERVED_ALIA_PUBLISHER", { enumerable: true, get: function () { return identifiers_1.RESERVED_ALIA_PUBLISHER; } });
+var money_1 = require("./inference/money");
+// Exact money and metered units — never floats, units never money.
+Object.defineProperty(exports, "currencyCodeSchema", { enumerable: true, get: function () { return money_1.currencyCodeSchema; } });
+Object.defineProperty(exports, "INFERENCE_MONEY_SCALE", { enumerable: true, get: function () { return money_1.INFERENCE_MONEY_SCALE; } });
+Object.defineProperty(exports, "exactDecimalSchema", { enumerable: true, get: function () { return money_1.exactDecimalSchema; } });
+Object.defineProperty(exports, "moneySchema", { enumerable: true, get: function () { return money_1.moneySchema; } });
+Object.defineProperty(exports, "USAGE_UNITS", { enumerable: true, get: function () { return money_1.USAGE_UNITS; } });
+Object.defineProperty(exports, "usageUnitSchema", { enumerable: true, get: function () { return money_1.usageUnitSchema; } });
+Object.defineProperty(exports, "USAGE_SOURCES", { enumerable: true, get: function () { return money_1.USAGE_SOURCES; } });
+Object.defineProperty(exports, "usageSourceSchema", { enumerable: true, get: function () { return money_1.usageSourceSchema; } });
+Object.defineProperty(exports, "usageQuantitySchema", { enumerable: true, get: function () { return money_1.usageQuantitySchema; } });
+Object.defineProperty(exports, "unitPriceSchema", { enumerable: true, get: function () { return money_1.unitPriceSchema; } });
+var attribution_1 = require("./inference/attribution");
+// Canonical attribution: who pays, which app, which credential, which user.
+Object.defineProperty(exports, "INFERENCE_SCOPES", { enumerable: true, get: function () { return attribution_1.INFERENCE_SCOPES; } });
+Object.defineProperty(exports, "inferenceScopeSchema", { enumerable: true, get: function () { return attribution_1.inferenceScopeSchema; } });
+Object.defineProperty(exports, "billingPrincipalSchema", { enumerable: true, get: function () { return attribution_1.billingPrincipalSchema; } });
+Object.defineProperty(exports, "authenticatedPrincipalSchema", { enumerable: true, get: function () { return attribution_1.authenticatedPrincipalSchema; } });
+Object.defineProperty(exports, "inferenceAttributionSchema", { enumerable: true, get: function () { return attribution_1.inferenceAttributionSchema; } });
+var errors_1 = require("./inference/errors");
+// Closed error vocabulary + retryability + a leak-proof provider passthrough.
+Object.defineProperty(exports, "INFERENCE_ERROR_CODES", { enumerable: true, get: function () { return errors_1.INFERENCE_ERROR_CODES; } });
+Object.defineProperty(exports, "NON_RETRYABLE_INFERENCE_ERROR_CODES", { enumerable: true, get: function () { return errors_1.NON_RETRYABLE_INFERENCE_ERROR_CODES; } });
+Object.defineProperty(exports, "inferenceErrorCodeSchema", { enumerable: true, get: function () { return errors_1.inferenceErrorCodeSchema; } });
+Object.defineProperty(exports, "upstreamErrorCategorySchema", { enumerable: true, get: function () { return errors_1.upstreamErrorCategorySchema; } });
+Object.defineProperty(exports, "safeErrorTextSchema", { enumerable: true, get: function () { return errors_1.safeErrorTextSchema; } });
+Object.defineProperty(exports, "providerErrorPassthroughSchema", { enumerable: true, get: function () { return errors_1.providerErrorPassthroughSchema; } });
+Object.defineProperty(exports, "inferenceErrorSchema", { enumerable: true, get: function () { return errors_1.inferenceErrorSchema; } });
+var priceVersion_1 = require("./inference/priceVersion");
+// Price versions and the snapshot a settled receipt keeps.
+Object.defineProperty(exports, "priceVersionStatusSchema", { enumerable: true, get: function () { return priceVersion_1.priceVersionStatusSchema; } });
+Object.defineProperty(exports, "priceVersionSchema", { enumerable: true, get: function () { return priceVersion_1.priceVersionSchema; } });
+Object.defineProperty(exports, "priceSnapshotSchema", { enumerable: true, get: function () { return priceVersion_1.priceSnapshotSchema; } });
+var catalogue_1 = require("./inference/catalogue");
+// The six distinct catalogue objects + the customer-safe projection.
+Object.defineProperty(exports, "inferenceModalitySchema", { enumerable: true, get: function () { return catalogue_1.inferenceModalitySchema; } });
+Object.defineProperty(exports, "modelCapabilitiesSchema", { enumerable: true, get: function () { return catalogue_1.modelCapabilitiesSchema; } });
+Object.defineProperty(exports, "modelLicenseSchema", { enumerable: true, get: function () { return catalogue_1.modelLicenseSchema; } });
+Object.defineProperty(exports, "modelProvenanceSchema", { enumerable: true, get: function () { return catalogue_1.modelProvenanceSchema; } });
+Object.defineProperty(exports, "inferenceDataPolicySchema", { enumerable: true, get: function () { return catalogue_1.inferenceDataPolicySchema; } });
+Object.defineProperty(exports, "availabilityScopeSchema", { enumerable: true, get: function () { return catalogue_1.availabilityScopeSchema; } });
+Object.defineProperty(exports, "commercialPermissionSchema", { enumerable: true, get: function () { return catalogue_1.commercialPermissionSchema; } });
+Object.defineProperty(exports, "modelDeprecationSchema", { enumerable: true, get: function () { return catalogue_1.modelDeprecationSchema; } });
+Object.defineProperty(exports, "modelEvaluationResultSchema", { enumerable: true, get: function () { return catalogue_1.modelEvaluationResultSchema; } });
+Object.defineProperty(exports, "modelSafetyMetadataSchema", { enumerable: true, get: function () { return catalogue_1.modelSafetyMetadataSchema; } });
+Object.defineProperty(exports, "modelPublisherSchema", { enumerable: true, get: function () { return catalogue_1.modelPublisherSchema; } });
+Object.defineProperty(exports, "catalogueModelSchema", { enumerable: true, get: function () { return catalogue_1.catalogueModelSchema; } });
+Object.defineProperty(exports, "modelRevisionSchema", { enumerable: true, get: function () { return catalogue_1.modelRevisionSchema; } });
+Object.defineProperty(exports, "inferenceProviderSchema", { enumerable: true, get: function () { return catalogue_1.inferenceProviderSchema; } });
+Object.defineProperty(exports, "modelDeploymentSchema", { enumerable: true, get: function () { return catalogue_1.modelDeploymentSchema; } });
+Object.defineProperty(exports, "routingProfileCandidateSchema", { enumerable: true, get: function () { return catalogue_1.routingProfileCandidateSchema; } });
+Object.defineProperty(exports, "routingProfileSchema", { enumerable: true, get: function () { return catalogue_1.routingProfileSchema; } });
+Object.defineProperty(exports, "cataloguePublisherSummarySchema", { enumerable: true, get: function () { return catalogue_1.cataloguePublisherSummarySchema; } });
+Object.defineProperty(exports, "catalogueServingProviderSummarySchema", { enumerable: true, get: function () { return catalogue_1.catalogueServingProviderSummarySchema; } });
+Object.defineProperty(exports, "modelCatalogueEntrySchema", { enumerable: true, get: function () { return catalogue_1.modelCatalogueEntrySchema; } });
+var routingPolicy_1 = require("./inference/routingPolicy");
+// Routing policy: every control, plus the refinement that rejects a policy
+// no route could ever satisfy.
+Object.defineProperty(exports, "routingTargetSchema", { enumerable: true, get: function () { return routingPolicy_1.routingTargetSchema; } });
+Object.defineProperty(exports, "routingPolicyScopeSchema", { enumerable: true, get: function () { return routingPolicy_1.routingPolicyScopeSchema; } });
+Object.defineProperty(exports, "routingFallbackPolicySchema", { enumerable: true, get: function () { return routingPolicy_1.routingFallbackPolicySchema; } });
+Object.defineProperty(exports, "routingPolicySchema", { enumerable: true, get: function () { return routingPolicy_1.routingPolicySchema; } });
+Object.defineProperty(exports, "routingPolicyReferenceSchema", { enumerable: true, get: function () { return routingPolicy_1.routingPolicyReferenceSchema; } });
+var request_1 = require("./inference/request");
+// The normalized Oxy→data-plane request envelope.
+Object.defineProperty(exports, "inferenceContentSourceSchema", { enumerable: true, get: function () { return request_1.inferenceContentSourceSchema; } });
+Object.defineProperty(exports, "inferenceContentPartSchema", { enumerable: true, get: function () { return request_1.inferenceContentPartSchema; } });
+Object.defineProperty(exports, "inferenceToolCallSchema", { enumerable: true, get: function () { return request_1.inferenceToolCallSchema; } });
+Object.defineProperty(exports, "inferenceMessageRoleSchema", { enumerable: true, get: function () { return request_1.inferenceMessageRoleSchema; } });
+Object.defineProperty(exports, "inferenceMessageSchema", { enumerable: true, get: function () { return request_1.inferenceMessageSchema; } });
+Object.defineProperty(exports, "inferenceInputSchema", { enumerable: true, get: function () { return request_1.inferenceInputSchema; } });
+Object.defineProperty(exports, "samplingParametersSchema", { enumerable: true, get: function () { return request_1.samplingParametersSchema; } });
+Object.defineProperty(exports, "toolDefinitionSchema", { enumerable: true, get: function () { return request_1.toolDefinitionSchema; } });
+Object.defineProperty(exports, "toolChoiceSchema", { enumerable: true, get: function () { return request_1.toolChoiceSchema; } });
+Object.defineProperty(exports, "responseFormatSchema", { enumerable: true, get: function () { return request_1.responseFormatSchema; } });
+Object.defineProperty(exports, "clientRequestMetadataSchema", { enumerable: true, get: function () { return request_1.clientRequestMetadataSchema; } });
+Object.defineProperty(exports, "inferenceRequestSchema", { enumerable: true, get: function () { return request_1.inferenceRequestSchema; } });
+var streamEvents_1 = require("./inference/streamEvents");
+// Normalized SSE events.
+Object.defineProperty(exports, "inferenceStreamStartEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamStartEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamDeltaEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamDeltaEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamToolCallEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamToolCallEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamUsageEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamUsageEventSchema; } });
+Object.defineProperty(exports, "inferenceRouteSwitchDetailSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceRouteSwitchDetailSchema; } });
+Object.defineProperty(exports, "inferenceRouteSwitchReasonSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceRouteSwitchReasonSchema; } });
+Object.defineProperty(exports, "inferenceStreamRouteSwitchEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamRouteSwitchEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamErrorEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamErrorEventSchema; } });
+Object.defineProperty(exports, "inferenceFinishReasonSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceFinishReasonSchema; } });
+Object.defineProperty(exports, "inferenceStreamDoneEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamDoneEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamEventSchema; } });
+var usage_1 = require("./inference/usage");
+// Reserve → settle → refund.
+Object.defineProperty(exports, "usageReservationRequestSchema", { enumerable: true, get: function () { return usage_1.usageReservationRequestSchema; } });
+Object.defineProperty(exports, "usageReservationStatusSchema", { enumerable: true, get: function () { return usage_1.usageReservationStatusSchema; } });
+Object.defineProperty(exports, "usageReservationSchema", { enumerable: true, get: function () { return usage_1.usageReservationSchema; } });
+Object.defineProperty(exports, "inferenceRequestOutcomeSchema", { enumerable: true, get: function () { return usage_1.inferenceRequestOutcomeSchema; } });
+Object.defineProperty(exports, "normalizedUsageReportSchema", { enumerable: true, get: function () { return usage_1.normalizedUsageReportSchema; } });
+Object.defineProperty(exports, "usageReceiptSchema", { enumerable: true, get: function () { return usage_1.usageReceiptSchema; } });
+Object.defineProperty(exports, "usageRefundSubjectSchema", { enumerable: true, get: function () { return usage_1.usageRefundSubjectSchema; } });
+Object.defineProperty(exports, "usageRefundReasonSchema", { enumerable: true, get: function () { return usage_1.usageRefundReasonSchema; } });
+Object.defineProperty(exports, "usageRefundSchema", { enumerable: true, get: function () { return usage_1.usageRefundSchema; } });
+var providerConnection_1 = require("./inference/providerConnection");
+// BYOK connection metadata that structurally cannot carry a secret.
+Object.defineProperty(exports, "providerConnectionScopeSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionScopeSchema; } });
+Object.defineProperty(exports, "providerSecretReferenceSchema", { enumerable: true, get: function () { return providerConnection_1.providerSecretReferenceSchema; } });
+Object.defineProperty(exports, "providerConnectionValidationSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionValidationSchema; } });
+Object.defineProperty(exports, "providerConnectionStatusSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionStatusSchema; } });
+Object.defineProperty(exports, "providerConnectionSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionSchema; } });

package/dist/cjs/inference/attribution.js

@@ -0,0 +1,101 @@
+"use strict";
+/**
+ * Canonical attribution for an inference request.
+ *
+ * Every accepted request resolves to an Oxy account, an Oxy application, the
+ * Oxy credential that authenticated it, an optional delegated end user, and the
+ * ids that correlate it across the edge, the data plane and the ledger. The
+ * data plane may store these as immutable references; it never owns or mutates
+ * them, and it never mints a customer identity of its own.
+ *
+ * The rule this file encodes structurally, rather than restating in prose:
+ * **the delegated `userId` can never be the billing identity.** Two independent
+ * mechanisms enforce it, one at compile time and one at parse time, because a
+ * delegated identity being charged for somebody else's workload is the kind of
+ * mistake that produces a correct-looking invoice for the wrong customer:
+ *
+ *  1. `accountId` and `userId` carry DIFFERENT brands, so neither is assignable
+ *     to the other in any consumer without a cast.
+ *  2. {@link billingPrincipalSchema} is `.strict()` and holds exactly one field,
+ *     so a payload that smuggles `userId` into the billing block is rejected at
+ *     the parse rather than stripped and forgotten.
+ *
+ * These shapes are EMBEDDED — they ride inside a request envelope, a receipt or
+ * a ledger record and inherit its `schemaVersion`. Versioning them separately
+ * would let one message claim two versions.
+ *
+ * Decided in: docs/adr/0007-canonical-request-attribution.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inferenceAttributionSchema = exports.authenticatedPrincipalSchema = exports.billingPrincipalSchema = exports.inferenceScopeSchema = exports.INFERENCE_SCOPES = void 0;
+const zod_1 = require("zod");
+const identifiers_1 = require("./identifiers");
+/**
+ * The inference capability scopes the data plane needs to know about.
+ *
+ * A credential may carry many other Oxy scopes; only these cross the boundary,
+ * because the data plane's authorization questions are exactly "may this caller
+ * invoke", "may it read the catalogue", "may it read usage", "may it read or
+ * write routing", "may it read or write provider connections". Everything else
+ * is the control plane's business and is not the data plane's to hold.
+ */
+exports.INFERENCE_SCOPES = [
+    'inference:invoke',
+    'inference:models:read',
+    'inference:usage:read',
+    'inference:routing:read',
+    'inference:routing:write',
+    'inference:providers:read',
+    'inference:providers:write',
+];
+exports.inferenceScopeSchema = zod_1.z.enum(exports.INFERENCE_SCOPES);
+/**
+ * The financially responsible principal, and the ONLY identity a charge may be
+ * booked against.
+ *
+ * It is its own type — not a field on a larger principal object — precisely so
+ * that a function taking "who pays" cannot be handed a user, a session, a
+ * device or an application. It cannot be constructed from a delegated user id:
+ * the brands differ, and this object accepts no other key.
+ */
+exports.billingPrincipalSchema = zod_1.z
+    .object({
+    accountId: identifiers_1.oxyAccountIdSchema,
+})
+    .strict();
+/**
+ * Who authenticated, as resolved by the Oxy edge before a request is forwarded.
+ *
+ * Mirrors what a verified Oxy service token carries (`appId`, `credentialId`,
+ * `ownerAccountId`, `environment`, effective scopes) so that the two
+ * authentication paths — a machine API key and a first-party service token —
+ * produce one shape downstream. The data plane authorizes against this
+ * envelope; it does not re-derive access from its own database, because it has
+ * no account graph to re-derive it from.
+ */
+exports.authenticatedPrincipalSchema = zod_1.z.object({
+    billing: exports.billingPrincipalSchema,
+    applicationId: identifiers_1.oxyApplicationIdSchema,
+    credentialId: identifiers_1.oxyCredentialIdSchema,
+    environment: identifiers_1.inferenceEnvironmentSchema,
+    inferenceScopes: zod_1.z.array(exports.inferenceScopeSchema),
+});
+/**
+ * The attribution block carried by every request, receipt and ledger record.
+ *
+ * `userId` is the OPTIONAL delegated end user — Alia's `X-Oxy-User-Id`. It is
+ * attribution only: it never changes which account is charged, never grants
+ * access, and lives outside {@link billingPrincipalSchema} so that no code path
+ * can read it as the payer.
+ *
+ * `requestId` is generated by the data plane and always present; `generationId`
+ * is present
+ * once a generation exists, which is why it is optional on a request and
+ * expected on a receipt.
+ */
+exports.inferenceAttributionSchema = zod_1.z.object({
+    principal: exports.authenticatedPrincipalSchema,
+    userId: identifiers_1.delegatedUserIdSchema.optional(),
+    requestId: identifiers_1.requestIdSchema,
+    generationId: identifiers_1.generationIdSchema.optional(),
+});