@oxyhq/contracts 0.29.0 → 0.31.0

package/dist/types/inference/money.d.ts

@@ -69,11 +69,11 @@ export declare const moneySchema: z.ZodObject<{
     amount: z.ZodBranded<z.ZodString, "ExactDecimal">;
     currency: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    amount: string & z.BRAND<"ExactDecimal">;
     currency: string;
+    amount: string & z.BRAND<"ExactDecimal">;
 }, {
-    amount: string;
     currency: string;
+    amount: string;
 }>;
 /**
  * The closed set of units inference is metered in.
@@ -166,13 +166,13 @@ export declare const unitPriceSchema: z.ZodObject<{
     per: z.ZodNumber;
     currency: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    amount: string & z.BRAND<"ExactDecimal">;
     currency: string;
+    amount: string & z.BRAND<"ExactDecimal">;
     unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
     per: number;
 }, {
-    amount: string;
     currency: string;
+    amount: string;
     unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
     per: number;
 }>;

package/dist/types/inference/priceVersion.d.ts

@@ -46,13 +46,13 @@ export declare const priceVersionSchema: z.ZodEffects<z.ZodObject<{
         per: z.ZodNumber;
         currency: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        amount: string & z.BRAND<"ExactDecimal">;
         currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }, {
-        amount: string;
         currency: string;
+        amount: string;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }>, "many">;
@@ -64,15 +64,15 @@ export declare const priceVersionSchema: z.ZodEffects<z.ZodObject<{
     createdAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     status: "active" | "superseded" | "draft";
-    createdAt: string;
     currency: string;
+    createdAt: string;
     provider: string;
     schemaVersion: 1;
     priceVersionId: string;
     modelReference: string;
     unitPrices: {
-        amount: string & z.BRAND<"ExactDecimal">;
         currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }[];
@@ -81,15 +81,15 @@ export declare const priceVersionSchema: z.ZodEffects<z.ZodObject<{
     supersedesPriceVersionId?: string | undefined;
 }, {
     status: "active" | "superseded" | "draft";
-    createdAt: string;
     currency: string;
+    createdAt: string;
     provider: string;
     schemaVersion: 1;
     priceVersionId: string;
     modelReference: string;
     unitPrices: {
-        amount: string;
         currency: string;
+        amount: string;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }[];
@@ -98,15 +98,15 @@ export declare const priceVersionSchema: z.ZodEffects<z.ZodObject<{
     supersedesPriceVersionId?: string | undefined;
 }>, {
     status: "active" | "superseded" | "draft";
-    createdAt: string;
     currency: string;
+    createdAt: string;
     provider: string;
     schemaVersion: 1;
     priceVersionId: string;
     modelReference: string;
     unitPrices: {
-        amount: string & z.BRAND<"ExactDecimal">;
         currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }[];
@@ -115,15 +115,15 @@ export declare const priceVersionSchema: z.ZodEffects<z.ZodObject<{
     supersedesPriceVersionId?: string | undefined;
 }, {
     status: "active" | "superseded" | "draft";
-    createdAt: string;
     currency: string;
+    createdAt: string;
     provider: string;
     schemaVersion: 1;
     priceVersionId: string;
     modelReference: string;
     unitPrices: {
-        amount: string;
         currency: string;
+        amount: string;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }[];
@@ -148,13 +148,13 @@ export declare const priceSnapshotSchema: z.ZodObject<{
         per: z.ZodNumber;
         currency: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        amount: string & z.BRAND<"ExactDecimal">;
         currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }, {
-        amount: string;
         currency: string;
+        amount: string;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }>, "many">;
@@ -162,8 +162,8 @@ export declare const priceSnapshotSchema: z.ZodObject<{
     currency: string;
     priceVersionId: string;
     unitPrices: {
-        amount: string & z.BRAND<"ExactDecimal">;
         currency: string;
+        amount: string & z.BRAND<"ExactDecimal">;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }[];
@@ -171,8 +171,8 @@ export declare const priceSnapshotSchema: z.ZodObject<{
     currency: string;
     priceVersionId: string;
     unitPrices: {
-        amount: string;
         currency: string;
+        amount: string;
         unit: "input_tokens" | "cached_input_tokens" | "output_tokens" | "reasoning_tokens" | "requests" | "images" | "audio_input_milliseconds" | "audio_output_milliseconds" | "video_milliseconds" | "characters" | "embeddings";
         per: number;
     }[];

package/dist/types/inference/providerConnection.d.ts

@@ -4,7 +4,7 @@
  *
  * The credential itself is NOT here and cannot be put here. This shape carries
  * a locator (`secretRef`) into Vault/KMS/managed secret storage, a prefix short
- * enough to be useless, a fingerprint, and validation state. Two mechanisms
+ * enough to be useless, a fingerprint, and validation state. Three mechanisms
  * make that structural rather than a convention somebody must remember:
  *
  *  - The object is `.strict()`. A producer that attaches `apiKey`, `secret`,
@@ -14,6 +14,10 @@
  *  - `keyPrefix` is capped at 12 characters — shorter than any provider's
  *    usable credential — so the one field designed to show part of a key cannot
  *    be widened into showing all of it without changing the contract.
+ *  - `secretRef` is DERIVED, not free text: the grammar is closed and the
+ *    refinement below requires it to be this connection's own environment,
+ *    owner account and id under one namespace. A field with no free span is a
+ *    field a credential cannot be smuggled through.
  *
  * BYOK does not move the billing relationship: the upstream provider bills the
  * customer's own account directly, and Oxy charges only its platform fee. The
@@ -64,12 +68,37 @@ export declare const providerConnectionScopeSchema: z.ZodDiscriminatedUnion<"kin
     accountId: string;
     applicationId: string;
 }>]>;
+/**
+ * The namespace every Oxy BYOK locator lives under, whichever store holds it.
+ *
+ * Part of the grammar rather than an implementation detail of the writer: it is
+ * the prefix a store-side IAM or Vault policy is scoped to, so a locator outside
+ * it is one Oxy's own credentials could not resolve anyway.
+ */
+export declare const PROVIDER_SECRET_REFERENCE_NAMESPACE = "oxy/inference/byok";
 /**
  * A locator for the credential in managed secret storage — never the credential.
  *
- * The scheme prefix is constrained to the stores Oxy actually uses, so a
- * producer cannot pass a raw key through this field and have it look like a
- * reference; whitespace is excluded for the same reason.
+ * The grammar is CLOSED, and that is the whole of its value: a store from a
+ * four-name set, one fixed namespace, an environment from a three-name set, and
+ * two bounded id segments. Nothing may precede, follow or be interpolated
+ * between them, so there is no free-form span for credential material to occupy:
+ * the only places anything a producer chooses can sit are the two ids, and
+ * `providerConnectionSchema` below pins those to THIS connection's own owner
+ * account and id.
+ *
+ * ## It was not always closed, and the difference was measured
+ *
+ * The previous grammar was `<store>:<anything from a wide charset>`, under a
+ * comment claiming that meant "a producer cannot pass a raw key through this
+ * field and have it look like a reference". It did not. Splicing a credential in
+ * after the store name —
+ * `vault:sk-ant-api03-…/oxy/inference/byok/production/<account>/<id>` — satisfied
+ * that regex, satisfied the storage partition CHECK (which pins the END of the
+ * string and said nothing about its start), and parsed cleanly. Both mechanisms
+ * constrained the SHAPE of the locator; neither constrained what could be put in
+ * front of it. `packages/api`'s `providerSecretLeak.test.ts` plants exactly that
+ * value, and it is now refused here, by the CHECK, and by the refinement below.
  */
 export declare const providerSecretReferenceSchema: z.ZodString;
 /** Why a credential check failed, as a closed set the Console can render. */
@@ -178,6 +207,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         failureCode?: "unknown" | "network" | "rate_limited" | "unauthorized" | "forbidden" | "not_found" | undefined;
     };
     status: "active" | "revoked" | "disabled" | "pending_validation";
+    createdAt: string;
     scope: {
         kind: "account";
         accountId: string & z.BRAND<"OxyAccountId">;
@@ -189,7 +219,6 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         accountId: string & z.BRAND<"OxyAccountId">;
         applicationId: string;
     };
-    createdAt: string;
     provider: string;
     schemaVersion: 1;
     connectionId: string;
@@ -208,6 +237,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         failureCode?: "unknown" | "network" | "rate_limited" | "unauthorized" | "forbidden" | "not_found" | undefined;
     };
     status: "active" | "revoked" | "disabled" | "pending_validation";
+    createdAt: string;
     scope: {
         kind: "account";
         accountId: string;
@@ -219,7 +249,6 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         accountId: string;
         applicationId: string;
     };
-    createdAt: string;
     provider: string;
     schemaVersion: 1;
     connectionId: string;
@@ -238,6 +267,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         failureCode?: "unknown" | "network" | "rate_limited" | "unauthorized" | "forbidden" | "not_found" | undefined;
     };
     status: "active" | "revoked" | "disabled" | "pending_validation";
+    createdAt: string;
     scope: {
         kind: "account";
         accountId: string & z.BRAND<"OxyAccountId">;
@@ -249,7 +279,6 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         accountId: string & z.BRAND<"OxyAccountId">;
         applicationId: string;
     };
-    createdAt: string;
     provider: string;
     schemaVersion: 1;
     connectionId: string;
@@ -268,6 +297,7 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         failureCode?: "unknown" | "network" | "rate_limited" | "unauthorized" | "forbidden" | "not_found" | undefined;
     };
     status: "active" | "revoked" | "disabled" | "pending_validation";
+    createdAt: string;
     scope: {
         kind: "account";
         accountId: string;
@@ -279,7 +309,6 @@ export declare const providerConnectionSchema: z.ZodEffects<z.ZodObject<{
         accountId: string;
         applicationId: string;
     };
-    createdAt: string;
     provider: string;
     schemaVersion: 1;
     connectionId: string;