@oxyhq/contracts 0.30.0 → 0.31.0

package/dist/types/inference/providerConnection.d.ts

@@ -4,7 +4,7 @@
  *
  * The credential itself is NOT here and cannot be put here. This shape carries
  * a locator (`secretRef`) into Vault/KMS/managed secret storage, a prefix short
- * enough to be useless, a fingerprint, and validation state. Two mechanisms
+ * enough to be useless, a fingerprint, and validation state. Three mechanisms
  * make that structural rather than a convention somebody must remember:
  *
  *  - The object is `.strict()`. A producer that attaches `apiKey`, `secret`,
@@ -14,6 +14,10 @@
  *  - `keyPrefix` is capped at 12 characters — shorter than any provider's
  *    usable credential — so the one field designed to show part of a key cannot
  *    be widened into showing all of it without changing the contract.
+ *  - `secretRef` is DERIVED, not free text: the grammar is closed and the
+ *    refinement below requires it to be this connection's own environment,
+ *    owner account and id under one namespace. A field with no free span is a
+ *    field a credential cannot be smuggled through.
  *
  * BYOK does not move the billing relationship: the upstream provider bills the
  * customer's own account directly, and Oxy charges only its platform fee. The
@@ -64,12 +68,37 @@ export declare const providerConnectionScopeSchema: z.ZodDiscriminatedUnion<"kin
     accountId: string;
     applicationId: string;
 }>]>;
+/**
+ * The namespace every Oxy BYOK locator lives under, whichever store holds it.
+ *
+ * Part of the grammar rather than an implementation detail of the writer: it is
+ * the prefix a store-side IAM or Vault policy is scoped to, so a locator outside
+ * it is one Oxy's own credentials could not resolve anyway.
+ */
+export declare const PROVIDER_SECRET_REFERENCE_NAMESPACE = "oxy/inference/byok";
 /**
  * A locator for the credential in managed secret storage — never the credential.
  *
- * The scheme prefix is constrained to the stores Oxy actually uses, so a
- * producer cannot pass a raw key through this field and have it look like a
- * reference; whitespace is excluded for the same reason.
+ * The grammar is CLOSED, and that is the whole of its value: a store from a
+ * four-name set, one fixed namespace, an environment from a three-name set, and
+ * two bounded id segments. Nothing may precede, follow or be interpolated
+ * between them, so there is no free-form span for credential material to occupy:
+ * the only places anything a producer chooses can sit are the two ids, and
+ * `providerConnectionSchema` below pins those to THIS connection's own owner
+ * account and id.
+ *
+ * ## It was not always closed, and the difference was measured
+ *
+ * The previous grammar was `<store>:<anything from a wide charset>`, under a
+ * comment claiming that meant "a producer cannot pass a raw key through this
+ * field and have it look like a reference". It did not. Splicing a credential in
+ * after the store name —
+ * `vault:sk-ant-api03-…/oxy/inference/byok/production/<account>/<id>` — satisfied
+ * that regex, satisfied the storage partition CHECK (which pins the END of the
+ * string and said nothing about its start), and parsed cleanly. Both mechanisms
+ * constrained the SHAPE of the locator; neither constrained what could be put in
+ * front of it. `packages/api`'s `providerSecretLeak.test.ts` plants exactly that
+ * value, and it is now refused here, by the CHECK, and by the refinement below.
  */
 export declare const providerSecretReferenceSchema: z.ZodString;
 /** Why a credential check failed, as a closed set the Console can render. */

package/dist/types/inference/version.d.ts

@@ -99,4 +99,4 @@
  * change to, say, the catalogue reject every in-flight inference request; the
  * per-shape `schemaVersion` is what a message is validated against.
  */
-export declare const INFERENCE_CONTRACT_VERSION = "1.2.0";
+export declare const INFERENCE_CONTRACT_VERSION = "1.3.0";

package/dist/types/updates.d.ts

@@ -115,18 +115,22 @@ export declare const assetUploadTicketSchema: z.ZodObject<{
      * carries the long immutable cache header (assets are content-addressed).
      */
     cacheControl: z.ZodString;
+    /** Base64 SHA-256 value required in the presigned PUT's checksum header. */
+    checksumSHA256: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     sha256: string;
     contentType: string;
     uploadUrl: string;
     storageKey: string;
     cacheControl: string;
+    checksumSHA256: string;
 }, {
     sha256: string;
     contentType: string;
     uploadUrl: string;
     storageKey: string;
     cacheControl: string;
+    checksumSHA256: string;
 }>;
 export type AssetUploadTicket = z.infer<typeof assetUploadTicketSchema>;
 /**
@@ -149,18 +153,22 @@ export declare const assetInitResponseSchema: z.ZodObject<{
          * carries the long immutable cache header (assets are content-addressed).
          */
         cacheControl: z.ZodString;
+        /** Base64 SHA-256 value required in the presigned PUT's checksum header. */
+        checksumSHA256: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         sha256: string;
         contentType: string;
         uploadUrl: string;
         storageKey: string;
         cacheControl: string;
+        checksumSHA256: string;
     }, {
         sha256: string;
         contentType: string;
         uploadUrl: string;
         storageKey: string;
         cacheControl: string;
+        checksumSHA256: string;
     }>, "many">;
     existing: z.ZodArray<z.ZodString, "many">;
 }, "strip", z.ZodTypeAny, {
@@ -170,6 +178,7 @@ export declare const assetInitResponseSchema: z.ZodObject<{
         uploadUrl: string;
         storageKey: string;
         cacheControl: string;
+        checksumSHA256: string;
     }[];
     existing: string[];
 }, {
@@ -179,6 +188,7 @@ export declare const assetInitResponseSchema: z.ZodObject<{
         uploadUrl: string;
         storageKey: string;
         cacheControl: string;
+        checksumSHA256: string;
     }[];
     existing: string[];
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/contracts",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "description": "OxyHQ API contracts — single source of truth for request/response Zod schemas and inferred types, shared by the backend and the client SDKs",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",