@adversarylabs/sdk 0.1.41 → 0.1.42

package/README.md

@@ -183,6 +183,21 @@ feedback and retries only the final generation call. With repository tools, it r
 retrieved evidence and citations. Exhaustion raises a non-retryable `ModelReviewError` with code
 `model_validation_failed` so hosts do not restart the entire adversary review.
 
+When `validation` is enabled, schema-invalid output rejected by the broker or the
+SDK client (`invalid_model_output`) uses the same bounded final-generation loop,
+before the semantic callback runs. Repair feedback retains schema-owned field
+locations and numeric length limits while excluding quoted rejected text and
+unknown instance keys. Invalid schemas, malformed broker envelopes, cancellation,
+and other model errors retain their existing failure/recovery behavior. Schema and
+semantic repairs share the configured attempt count and original generation deadline.
+
+Reported token usage survives client schema rejection and broker error envelopes with
+an optional `usage` field. Repairs aggregate rejected and accepted completions exactly
+once; 100 input / 50 output tokens followed by 10 / 5 returns 110 / 55. Exhausted
+validation and interrupted repairs expose accumulated counts on
+`ModelReviewError.usage`, retaining the error code, retryability, and diagnostics.
+Missing usage stays unavailable rather than being invented as zero.
+
 For repository-scale reviews, add bounded repository tools instead of placing source bodies in
 `input`. The SDK asks the model which directories and line ranges it needs, performs those reads
 inside the rule context's repository boundary, and then makes the final structured review call:

package/dist/model.d.ts

@@ -79,10 +79,13 @@ export declare class ModelReviewError extends Error {
     readonly code?: string;
     readonly retryable: boolean;
     readonly diagnostics?: Readonly<Record<string, unknown>>;
+    /** Reported usage from completed requests, including rejected output. */
+    readonly usage?: ModelReviewUsage;
     constructor(message: string, options?: {
         code?: string;
         retryable?: boolean;
         diagnostics?: Readonly<Record<string, unknown>>;
+        usage?: ModelReviewUsage;
     });
 }
 export declare function createModelFromEnvironment(environment?: ModelEnvironment): ReviewModel;
@@ -94,7 +97,7 @@ export declare class BrokerReviewModel implements ReviewModel {
     review<T = unknown>(request: ModelReviewRequest<T>): Promise<ModelReviewResult<T>>;
 }
 /**
- * Run adversary-owned semantic validation with SDK-owned bounded regeneration.
+ * Run schema and adversary-owned semantic validation with SDK-owned bounded regeneration.
  *
  * Each retry receives the validator failure as trusted SDK feedback while retaining the
  * original input. The original timeout is shared by all validation attempts, and usage is

package/dist/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAwCjE,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,GAAG,OAAO;IAChD,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,2EAA2E;IAC3E,eAAe,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE;QACN,UAAU,EAAE,0BAA0B,CAAC;KACxC,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,OAAO;IAC5C,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/C,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG;IAChD,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AA8B5E,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,SAA8D;CAIlF;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBAGvD,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC5C;CAQT;AAkBD,wBAAgB,0BAA0B,CACxC,WAAW,GAAE,gBAA8B,GAC1C,WAAW,CAOb;AAED,wBAAgB,gBAAgB,IAAI,WAAW,CAM9C;AAED,qBAAa,iBAAkB,YAAW,WAAW;;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAMd,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B;IA8B7E,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;CAuKzF;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC9B,QAAQ,GAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAsB,GACpF,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAuD/B"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AACvE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AA2CjE,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,GAAG,OAAO;IAChD,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,2EAA2E;IAC3E,eAAe,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE;QACN,UAAU,EAAE,0BAA0B,CAAC;KACxC,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,OAAO;IAC5C,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/C,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG;IAChD,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AA+B5E,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,SAA8D;CAIlF;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;gBAGhC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,EAAE,gBAAgB,CAAC;KACrB;CAST;AAkBD,wBAAgB,0BAA0B,CACxC,WAAW,GAAE,gBAA8B,GAC1C,WAAW,CAOb;AAED,wBAAgB,gBAAgB,IAAI,WAAW,CAM9C;AAED,qBAAa,iBAAkB,YAAW,WAAW;;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAMd,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B;IA8B7E,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;CAgLzF;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC9B,QAAQ,GAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAsB,GACpF,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAwD/B"}

package/dist/model.js

@@ -18,6 +18,8 @@ const MAX_BROKER_RETRY_DELAY_MS = 5_000;
 const DEFAULT_VALIDATION_MAXIMUM_ATTEMPTS = 3;
 const MAX_VALIDATION_MAXIMUM_ATTEMPTS = 5;
 const MAX_VALIDATION_FEEDBACK_BYTES = 8 << 10;
+// Internal request metadata survives wrapper spreads but never enters broker JSON.
+const outputRepairRequest = Symbol("sdk.output-repair");
 // Fetch supplies its own five-minute header timeout, overriding Agent defaults.
 // Override dispatch options for this review only; its shared AbortSignal remains
 // the authoritative deadline across connection, headers, body, and retries.
@@ -45,11 +47,14 @@ export class ModelReviewError extends Error {
     code;
     retryable;
     diagnostics;
+    /** Reported usage from completed requests, including rejected output. */
+    usage;
     constructor(message, options = {}) {
         super(message);
         this.name = "ModelReviewError";
         this.code = options.code;
         this.diagnostics = options.diagnostics;
+        this.usage = options.usage;
         this.retryable = options.retryable ?? false;
     }
 }
@@ -112,28 +117,38 @@ export class BrokerReviewModel {
             throw new ModelReviewError("Repository model tools require ctx.model so the SDK can enforce the repository boundary.", { code: "invalid_model_request" });
         }
         const normalized = normalizeRequest(request);
+        const validationOwnsRetries = request[outputRepairRequest] === true;
         const diagnostics = modelAttemptDiagnostics(normalized.budget.timeoutMs, request.diagnosticStage === "repository_planning" ? "repository_planning" : "model_review");
         const controller = new AbortController();
         const timeout = setTimeout(() => controller.abort(), normalized.budget.timeoutMs);
         const dispatcher = new ModelBrokerDispatcher(normalized.budget.timeoutMs);
+        let usage = {};
         try {
             for (let attempt = 1; attempt <= this.#maximumAttempts; attempt += 1) {
                 const outcome = await this.#reviewAttempt(normalized, controller.signal, dispatcher, diagnostics, attempt);
                 if (outcome.ok)
-                    return outcome.result;
+                    return withAccumulatedResultUsage(outcome.result, usage);
                 const error = outcome.error;
-                if (!(error instanceof ModelReviewError) || !error.retryable)
+                if (!(error instanceof ModelReviewError))
                     throw error;
-                if (controller.signal.aborted) {
+                // Only an opted-in validation loop takes ownership of schema retries.
+                // Other callers retain the broker's existing retryable-error behavior.
+                if (!error.retryable || (validationOwnsRetries && error.code === "invalid_model_output"))
+                    throw error;
+                usage = addModelUsage(usage, error.usage);
+                if (controller.signal.aborted)
                     throw exhaustedModelRecovery(attempt, "deadline");
-                }
-                if (attempt === this.#maximumAttempts) {
+                if (attempt === this.#maximumAttempts)
                     throw exhaustedModelRecovery(attempt, "attempt_limit");
-                }
                 await this.#waitForRetry(attempt, controller.signal, normalized.budget.timeoutMs, diagnostics);
             }
             throw exhaustedModelRecovery(this.#maximumAttempts, "attempt_limit");
         }
+        catch (error) {
+            if (!(error instanceof ModelReviewError))
+                throw error;
+            throw withAccumulatedUsage(error, usage);
+        }
         finally {
             clearTimeout(timeout);
             // Cleanup must not replace the typed request error or a successful response.
@@ -219,13 +234,16 @@ export class BrokerReviewModel {
         }
         if (!response.ok) {
             const failure = decoded;
+            if (failure.usage !== undefined)
+                validateUsage(failure.usage);
             throw new ModelReviewError(failure.error?.message ?? `Model broker returned HTTP ${response.status}.`, {
                 code: failure.error?.code ?? "model_review_failed",
                 retryable: failure.error?.retryable ?? response.status >= 500,
+                ...(failure.usage === undefined ? {} : { usage: failure.usage }),
             });
         }
         const envelope = requireBrokerResponse(decoded);
-        validateModelOutput(normalized.schema, envelope.output);
+        validateModelOutput(normalized.schema, envelope.output, envelope.usage);
         return {
             output: envelope.output,
             provider: envelope.provider,
@@ -235,7 +253,7 @@ export class BrokerReviewModel {
     }
 }
 /**
- * Run adversary-owned semantic validation with SDK-owned bounded regeneration.
+ * Run schema and adversary-owned semantic validation with SDK-owned bounded regeneration.
  *
  * Each retry receives the validator failure as trusted SDK feedback while retaining the
  * original input. The original timeout is shared by all validation attempts, and usage is
@@ -257,37 +275,148 @@ export async function reviewWithValidation(model, request, decorate = (result) =
         const elapsed = Date.now() - startedAt;
         const remainingTimeoutMs = timeoutMs - elapsed;
         if (remainingTimeoutMs <= 0)
-            throw exhaustedModelRecovery(attempt - 1, "deadline");
-        const result = decorate(await model.review({
-            ...baseRequest,
-            prompt: feedback === undefined
-                ? baseRequest.prompt
-                : `${baseRequest.prompt}\n\nSDK VALIDATION FEEDBACK:\nThe previous response failed adversary-defined validation. Correct the response using this trusted validation result and return the complete response again.\n${JSON.stringify({ attempt, error: feedback })}`,
-            budget: {
-                ...baseRequest.budget,
-                timeoutMs: remainingTimeoutMs,
-            },
-        }));
-        usage = addModelUsage(usage, result.usage);
+            throw withAccumulatedUsage(exhaustedModelRecovery(attempt - 1, "deadline"), usage);
+        let outcome;
         try {
-            await validation.validate(result);
+            outcome = await reviewValidationAttempt(model, {
+                ...baseRequest,
+                prompt: feedback === undefined
+                    ? baseRequest.prompt
+                    : `${baseRequest.prompt}\n\nSDK VALIDATION FEEDBACK:\nThe previous response failed output validation. Correct the response using this trusted validation result and return the complete response again.\n${JSON.stringify({ attempt, error: feedback })}`,
+                budget: { ...baseRequest.budget, timeoutMs: remainingTimeoutMs },
+            }, validation, decorate);
+        }
+        catch (error) {
+            if (!(error instanceof ModelReviewError))
+                throw error;
+            throw withAccumulatedUsage(error, usage);
+        }
+        usage = addModelUsage(usage, outcome.ok ? outcome.result.usage : outcome.usage);
+        if (outcome.ok) {
             return {
-                ...result,
+                ...outcome.result,
                 ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),
             };
         }
-        catch (error) {
-            feedback = boundedValidationFeedback(error);
-            if (attempt === maximumAttempts) {
-                throw new ModelReviewError(`Model output failed adversary validation after ${maximumAttempts} attempts: ${feedback}`, { code: "model_validation_failed", retryable: false });
-            }
-        }
+        feedback = outcome.feedback;
+        if (attempt === maximumAttempts)
+            throw exhaustedOutputValidation(maximumAttempts, feedback, usage);
     }
     throw new ModelReviewError("Model validation retry loop exhausted unexpectedly.", {
         code: "model_validation_failed",
         retryable: false,
     });
 }
+// Keep generation and semantic validation failures together for one prepared
+// request. Neither kind of rejection repeats repository evidence gathering.
+async function reviewValidationAttempt(model, request, validation, decorate) {
+    let result;
+    try {
+        const prepared = { ...request, [outputRepairRequest]: true };
+        result = decorate(await model.review(prepared));
+    }
+    catch (error) {
+        if (!(error instanceof ModelReviewError) || error.code !== "invalid_model_output")
+            throw error;
+        return {
+            ok: false,
+            feedback: schemaValidationFeedback(error, request.schema),
+            usage: error.usage,
+        };
+    }
+    try {
+        await validation.validate(result);
+        return { ok: true, result };
+    }
+    catch (error) {
+        return { ok: false, feedback: boundedValidationFeedback(error), usage: result.usage };
+    }
+}
+function withAccumulatedResultUsage(result, accumulated) {
+    const usage = addModelUsage(accumulated, result.usage);
+    return {
+        ...result,
+        ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),
+    };
+}
+// Keep interruption classification and metadata intact without mutating an error
+// that a model implementation may reuse. Current-error usage is counted once.
+function withAccumulatedUsage(error, usage) {
+    if (usage.inputTokens === undefined && usage.outputTokens === undefined)
+        return error;
+    return new ModelReviewError(error.message, {
+        code: error.code,
+        retryable: error.retryable,
+        diagnostics: error.diagnostics,
+        usage: addModelUsage(usage, error.usage),
+    });
+}
+function exhaustedOutputValidation(attempts, feedback, usage) {
+    return new ModelReviewError(`Model output failed adversary validation after ${attempts} attempts: ${feedback}`, {
+        code: "model_validation_failed",
+        retryable: false,
+        ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),
+    });
+}
+// Broker pattern/enum errors can quote rejected model text. Retain only schema-owned
+// locations, fixed keywords, numeric limits, and trusted schema descriptions as feedback.
+function schemaValidationFeedback(error, schema) {
+    const goLocations = [...error.message.matchAll(/- at '([^'\n]*)': ([^\n]*)/g)];
+    const locations = goLocations.length > 0
+        ? goLocations
+        : [...error.message.matchAll(/data((?:\/[^\s;:]*)*) (must [^;\n]*)/g)];
+    const messages = locations.length === 0
+        ? [schemaFailureFeedback(undefined, "", schema)]
+        : locations
+            .slice(0, 32)
+            .map((location) => schemaFailureFeedback(location[1], location[2], schema));
+    return boundedValidationFeedback(new Error([...new Set(messages)].join("\n")));
+}
+function schemaFailureFeedback(rawPath, detail, schema) {
+    let node = schema;
+    const safePath = [];
+    for (const token of (rawPath ?? "").split("/").filter(Boolean).slice(0, 32)) {
+        const key = token.replaceAll("~1", "/").replaceAll("~0", "~");
+        const properties = node.properties;
+        if (properties && Object.hasOwn(properties, key)) {
+            safePath.push(token.slice(0, 128));
+            node = properties[key];
+        }
+        else if (node.type === "array" &&
+            /^\d{1,8}$/.test(key) &&
+            node.items &&
+            typeof node.items === "object") {
+            safePath.push(key);
+            node = node.items;
+        }
+        else {
+            safePath.push("*");
+            node = {};
+        }
+    }
+    const at = rawPath !== undefined ? ` at /${safePath.join("/")}` : "";
+    const length = /^(minLength|maxLength): got (\d{1,8}), want (\d{1,8})$/.exec(detail);
+    let reason = "Return a complete response that satisfies the supplied schema.";
+    if (length) {
+        reason = `${length[1]}: got ${length[2]} characters; required ${length[3]}.`;
+    }
+    else if (/^must NOT have (more|fewer) than \d+ characters$/.test(detail)) {
+        reason = detail;
+    }
+    else if (/^(?:'not' failed|must NOT be valid)$/.test(detail) &&
+        typeof node.not === "object" &&
+        node.not !== null) {
+        const description = node.not.description;
+        reason =
+            typeof description === "string"
+                ? description
+                : "The value violates a 'not' schema constraint.";
+    }
+    else if (/pattern/.test(detail)) {
+        reason = "The value does not satisfy its schema pattern.";
+    }
+    return `Model output does not match the requested schema${at}. ${reason}`;
+}
 function boundedValidationFeedback(error) {
     const message = error instanceof Error ? error.message : String(error);
     const encoded = Buffer.from(message, "utf8");
@@ -479,7 +608,7 @@ function validateUsage(value) {
         }
     }
 }
-function validateModelOutput(schema, output) {
+function validateModelOutput(schema, output, usage) {
     const ajv = new Ajv2020({ allErrors: true, strict: true });
     let validate;
     try {
@@ -492,6 +621,7 @@ function validateModelOutput(schema, output) {
         const detail = ajv.errorsText(validate.errors, { separator: "; " });
         throw new ModelReviewError(`Model output does not match the requested schema: ${detail}`, {
             code: "invalid_model_output",
+            ...(usage === undefined ? {} : { usage }),
         });
     }
 }

package/dist/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAmB,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAOjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AACrC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,gBAAgB,GAAG,GAAG,IAAI,EAAE,CAAC;AACnC,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,IAAI,EAAE,CAAC;AACnC,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,CAAC;AACnC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAC9C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,6BAA6B,GAAG,CAAC,IAAI,EAAE,CAAC;AAE9C,gFAAgF;AAChF,iFAAiF;AACjF,4EAA4E;AAC5E,MAAM,qBAAsB,SAAQ,KAAK;IACV;IAA7B,YAA6B,UAAkB;QAC7C,KAAK,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QADX,eAAU,GAAV,UAAU,CAAQ;IAE/C,CAAC;IAEQ,QAAQ,CACf,OAAmC,EACnC,OAAoC;QAEpC,OAAO,KAAK,CAAC,QAAQ,CACnB;YACE,GAAG,OAAO;YACV,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,WAAW,EAAE,IAAI,CAAC,UAAU;SAC7B,EACD,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AA+GD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,GAAG,2DAA2D;QAC/E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAU;IACd,SAAS,CAAU;IACnB,WAAW,CAAqC;IAEzD,YACE,OAAe,EACf,UAII,EAAE;QAEN,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;CACF;AAED,kFAAkF;AAClF,4EAA4E;AAC5E,SAAS,sBAAsB,CAC7B,QAAgB,EAChB,MAAoC;IAEpC,OAAO,IAAI,gBAAgB,CACzB,4EAA4E,QAAQ,gBAAgB,MAAM,IAAI,EAC9G;QACE,IAAI,EAAE,kCAAkC;QACxC,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;KACjD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,cAAgC,OAAO,CAAC,GAAG;IAE3C,MAAM,QAAQ,GAAG,WAAW,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,WAAW,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACrF,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,gBAAgB,CAAS;IACzB,oBAAoB,CAAS;IAC7B,OAAO,CAAe;IAE/B,YAAY,QAAgB,EAAE,KAAa,EAAE,UAAoC,EAAE;QACjF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IACE,MAAM,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW;gBAC9B,MAAM,CAAC,QAAQ,KAAK,KAAK;gBACzB,MAAM,CAAC,QAAQ,KAAK,OAAO;gBAC3B,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,EAClC,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,0EAA0E,EAC1E,EAAE,IAAI,EAAE,yBAAyB,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CAAC,2CAA2C,EAAE;gBACtE,IAAI,EAAE,sBAAsB;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,+BAA+B,CAAC;QACnF,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QACzF,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,mBAAmB,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC9F,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,oBAAoB,GAAG,mBAAmB,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,OAA8B;QACtD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,gBAAgB,CACxB,0FAA0F,EAC1F,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,uBAAuB,CACzC,UAAU,CAAC,MAAM,CAAC,SAAS,EAC3B,OAAO,CAAC,eAAe,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAC3F,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CACvC,UAAU,EACV,UAAU,CAAC,MAAM,EACjB,UAAU,EACV,WAAW,EACX,OAAO,CACR,CAAC;gBACF,IAAI,OAAO,CAAC,EAAE;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;gBACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS;oBAAE,MAAM,KAAK,CAAC;gBAC1E,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,OAAO,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtC,MAAM,sBAAsB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,EACP,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAAC,SAAS,EAC3B,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,MAAM,sBAAsB,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;QACvE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,6EAA6E;YAC7E,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,cAAc,CAClB,UAAwC,EACxC,MAAmB,EACnB,UAAiC,EACjC,WAAuD,EACvD,OAAe;QAEf,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAI,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACzE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,SAAS,EACT,KAAK,YAAY,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CACtE,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,MAAmB,EACnB,SAAiB,EACjB,WAAuD;QAEvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,yBAAyB,EACzB,IAAI,CAAC,oBAAoB,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAC/C,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,gBAAgB,GAAG,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CACd,KAAK,YAAY,gBAAgB;gBAC/B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,qBAAqB,CAAC;gBACvC,CAAC,CAAC,qBAAqB,CAC1B,CAAC;YACF,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACzD,MAAM,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,UAAwC,EACxC,MAAmB,EACnB,UAAiC;QAEjC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,4BAA4B,EAAE,MAAM,CAAC,gCAAgC,CAAC;iBACvE;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,eAAe,EAAE,gCAAgC;oBACjD,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;iBACG,CAAC;gBAC/B,MAAM;gBACN,UAAU;aACiC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,EAAE;gBAClE,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,OAAmC,CAAC;YACpD,MAAM,IAAI,gBAAgB,CACxB,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,8BAA8B,QAAQ,CAAC,MAAM,GAAG,EAC1E;gBACE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,qBAAqB;gBAClD,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;aAC9D,CACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChD,mBAAmB,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAW;YAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkB,EAClB,OAA8B,EAC9B,WAAmE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;IAErF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,CAAI,WAAW,CAAC,CAAC,CAAC;IAElF,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,IAAI,mCAAmC,CAAC;IAC1F,mBAAmB,CACjB,eAAe,EACf,4BAA4B,EAC5B,CAAC,EACD,+BAA+B,CAChC,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,wBAAwB,CAAC;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAqB,EAAE,CAAC;IACjC,IAAI,QAA4B,CAAC;IAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC;QAC/C,IAAI,kBAAkB,IAAI,CAAC;YAAE,MAAM,sBAAsB,CAAC,OAAO,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,QAAQ,CACrB,MAAM,KAAK,CAAC,MAAM,CAAI;YACpB,GAAG,WAAW;YACd,MAAM,EACJ,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,WAAW,CAAC,MAAM;gBACpB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,+LAA+L,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;YACxQ,MAAM,EAAE;gBACN,GAAG,WAAW,CAAC,MAAM;gBACrB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CACH,CAAC;QACF,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO;gBACL,GAAG,MAAM;gBACT,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;aAC1F,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;gBAChC,MAAM,IAAI,gBAAgB,CACxB,kDAAkD,eAAe,cAAc,QAAQ,EAAE,EACzF,EAAE,IAAI,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK,EAAE,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,qDAAqD,EAAE;QAChF,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,UAAU,IAAI,6BAA6B;QACxD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;AAChF,CAAC;AAED,SAAS,aAAa,CACpB,KAAuB,EACvB,IAAkC;IAElC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YACnE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YACrE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,MAAmB,EACnB,SAAiB;IAEjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,OAAO,IAAI,gBAAgB,CAAC,6BAA6B,SAAS,aAAa,EAAE;QAC/E,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CAAC,yCAAyC,EAAE;YACpE,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,gBAAgB,CAAC,iDAAiD,EAAE;YAC5E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,WAAW,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,gBAAgB,SAAS,EAAE;YACnF,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACzD,IACE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;QAClC,OAAO,CAAC,MAAM,KAAK,IAAI;QACvB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,mDAAmD,EAAE;YAC9E,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAE5D,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,mBAAmB,IAAI,6BAA6B,CAAC;IACjG,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,wBAAwB,CAAC;IACxE,mBAAmB,CACjB,mBAAmB,EACnB,4BAA4B,EAC5B,CAAC,EACD,yBAAyB,CAC1B,CAAC;IACF,mBAAmB,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,EAAE,OAAe;IACpE,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,IAAI,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3G,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,IAAI,6BAA6B,EAAE;YAC5E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,IAAI,YAAY,OAAO,SAAS,EAAE;YAC3E,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,OAAe;IACxF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACnE,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,4BAA4B,OAAO,YAAY,OAAO,GAAG,EAAE;YAC3F,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,MAAmB,EACnB,SAAiB;IAEjB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,KAAK,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,gBAAgB,CACzB,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACxF,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,CAChD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAkB;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/D,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,kBAAkB,SAAS,EAAE;YACvF,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,MAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,kBAAkB,SAAS,EAAE;gBACvF,IAAI,EAAE,0BAA0B;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE;YACrE,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,KAAqC,CAAC;IACvD,IAAI,QAAQ,CAAC,eAAe,KAAK,gCAAgC,EAAE,CAAC;QAClE,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,gCAAgC,GAAG,EAC5E,EAAE,IAAI,EAAE,4BAA4B,EAAE,CACvC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,gBAAgB,CAAC,4DAA4D,EAAE;YACvF,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,EAAE;YACpF,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE;YACrE,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,QAA+B,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CAAC,gDAAgD,EAAE;YAC3E,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAU,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAI,KAA0B,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,KAAK,kCAAkC,EACtE;gBACE,IAAI,EAAE,yBAAyB;aAChC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA+B,EAAE,MAAe;IAC3E,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,QAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACxB,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3F,EAAE,IAAI,EAAE,sBAAsB,EAAE,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,gBAAgB,CAAC,qDAAqD,MAAM,EAAE,EAAE;YACxF,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["import { Ajv2020 } from \"ajv/dist/2020.js\";\nimport { Agent, type Dispatcher } from \"undici\";\nimport { modelAttemptDiagnostics } from \"./model-diagnostics.js\";\nimport type {\n  ModelRepositoryCitation,\n  ModelRepositoryRetrieval,\n  ModelRepositoryToolOptions,\n} from \"./repository-model.js\";\n\nexport const ADVERSARY_MODEL_PROTOCOL_VERSION = 1;\nexport const ADVERSARY_MODEL_ENDPOINT_ENV = \"ADVERSARY_MODEL_ENDPOINT\";\nexport const ADVERSARY_MODEL_TOKEN_ENV = \"ADVERSARY_MODEL_TOKEN\";\n\nconst DEFAULT_MODEL_TIMEOUT_MS = 600_000;\nconst MAX_MODEL_TIMEOUT_MS = 600_000;\nconst DEFAULT_MAXIMUM_OUTPUT_TOKENS = 8_192;\nconst MAX_MAXIMUM_OUTPUT_TOKENS = 65_536;\nconst MAX_PROMPT_BYTES = 256 << 10;\nconst MAX_INPUT_BYTES = 4 << 20;\nconst MAX_SCHEMA_BYTES = 512 << 10;\nconst MAX_RESPONSE_BYTES = 4 << 20;\nconst DEFAULT_BROKER_MAXIMUM_ATTEMPTS = 3;\nconst DEFAULT_BROKER_RETRY_DELAY_MS = 250;\nconst MAX_BROKER_RETRY_DELAY_MS = 5_000;\nconst DEFAULT_VALIDATION_MAXIMUM_ATTEMPTS = 3;\nconst MAX_VALIDATION_MAXIMUM_ATTEMPTS = 5;\nconst MAX_VALIDATION_FEEDBACK_BYTES = 8 << 10;\n\n// Fetch supplies its own five-minute header timeout, overriding Agent defaults.\n// Override dispatch options for this review only; its shared AbortSignal remains\n// the authoritative deadline across connection, headers, body, and retries.\nclass ModelBrokerDispatcher extends Agent {\n  constructor(private readonly deadlineMs: number) {\n    super({ connectTimeout: deadlineMs });\n  }\n\n  override dispatch(\n    options: Dispatcher.DispatchOptions,\n    handler: Dispatcher.DispatchHandlers,\n  ): boolean {\n    return super.dispatch(\n      {\n        ...options,\n        headersTimeout: this.deadlineMs,\n        bodyTimeout: this.deadlineMs,\n      },\n      handler,\n    );\n  }\n}\n\nexport interface ModelReviewBudget {\n  maximumOutputTokens?: number;\n  timeoutMs?: number;\n}\n\nexport interface ModelReviewValidation<T = unknown> {\n  /** Validate a completed model result. Throw to retry generation with the error as feedback. */\n  validate(result: ModelReviewResult<T>): void | Promise<void>;\n  /** Total generation attempts, including the first. Defaults to 3 and is capped at 5. */\n  maximumAttempts?: number;\n}\n\nexport interface ModelReviewRequest<T = unknown> {\n  /** Local timing classification only; never sent to the broker or model. */\n  diagnosticStage?: \"model_review\" | \"repository_planning\";\n  prompt: string;\n  input: unknown;\n  schema: Record<string, unknown>;\n  budget?: ModelReviewBudget;\n  validation?: ModelReviewValidation<T>;\n  tools?: {\n    repository: ModelRepositoryToolOptions;\n  };\n}\n\nexport interface ModelReviewUsage {\n  inputTokens?: number;\n  outputTokens?: number;\n}\n\nexport interface ModelReviewResult<T = unknown> {\n  output: T;\n  provider: string;\n  model: string;\n  usage?: ModelReviewUsage;\n  citations?: readonly ModelRepositoryCitation[];\n  retrieval?: ModelRepositoryRetrieval;\n}\n\nexport interface ReviewModel {\n  review<T = unknown>(request: ModelReviewRequest<T>): Promise<ModelReviewResult<T>>;\n}\n\nexport interface BrokerReviewModelOptions {\n  maximumAttempts?: number;\n  initialRetryDelayMs?: number;\n  random?: () => number;\n}\n\n/**\n * Request a short noun-phrase concern suitable after \"I would address …\".\n * Implemented by the SDK via {@link ReviewModel.review} (CLI broker pass-through).\n */\nexport interface ModelConcernRequest {\n  /** Free-form title, clause, or draft concern to rewrite. */\n  text: string;\n  budget?: ModelReviewBudget;\n  /**\n   * Extra attempts when the model returns a phrase that fails noun-phrase validation.\n   * Defaults to 1 retry (2 total attempts).\n   */\n  maxAttempts?: number;\n}\n\nexport interface ModelConcernResult {\n  /** Validated noun phrase (see requireOpinionConcern). */\n  concern: string;\n  /** False when `text` was already a valid noun phrase (no broker call). */\n  rewritten: boolean;\n  provider: string;\n  model: string;\n  usage?: ModelReviewUsage;\n}\n\n/** Rule-context model: broker review plus opinion-concern rewrite. */\nexport type ContextualReviewModel = ReviewModel & {\n  concern(request: ModelConcernRequest): Promise<ModelConcernResult>;\n};\n\nexport type ModelEnvironment = Readonly<Record<string, string | undefined>>;\n\ninterface ModelBrokerRequest\n  extends Omit<ModelReviewRequest, \"validation\" | \"tools\" | \"diagnosticStage\"> {\n  protocolVersion: typeof ADVERSARY_MODEL_PROTOCOL_VERSION;\n}\n\ninterface ModelBrokerResponse {\n  protocolVersion: typeof ADVERSARY_MODEL_PROTOCOL_VERSION;\n  output: unknown;\n  provider: string;\n  model: string;\n  usage?: ModelReviewUsage;\n}\n\ninterface ModelBrokerErrorResponse {\n  error?: {\n    code?: string;\n    message?: string;\n    retryable?: boolean;\n  };\n}\n\ntype NormalizedModelReviewRequest = Omit<\n  ModelReviewRequest,\n  \"budget\" | \"validation\" | \"tools\" | \"diagnosticStage\"\n> & {\n  budget: Required<ModelReviewBudget>;\n};\n\nexport class ModelUnavailableError extends Error {\n  constructor(message = \"Model review is unavailable for this adversary execution.\") {\n    super(message);\n    this.name = \"ModelUnavailableError\";\n  }\n}\n\nexport class ModelReviewError extends Error {\n  readonly code?: string;\n  readonly retryable: boolean;\n  readonly diagnostics?: Readonly<Record<string, unknown>>;\n\n  constructor(\n    message: string,\n    options: {\n      code?: string;\n      retryable?: boolean;\n      diagnostics?: Readonly<Record<string, unknown>>;\n    } = {},\n  ) {\n    super(message);\n    this.name = \"ModelReviewError\";\n    this.code = options.code;\n    this.diagnostics = options.diagnostics;\n    this.retryable = options.retryable ?? false;\n  }\n}\n\n// The message carries the code because subprocess runners may only retain stderr.\n// Never include an upstream error body, prompt, or validator feedback here.\nfunction exhaustedModelRecovery(\n  attempts: number,\n  reason: \"deadline\" | \"attempt_limit\",\n): ModelReviewError {\n  return new ModelReviewError(\n    `model_request_recovery_exhausted: Model request recovery exhausted after ${attempts} attempt(s) (${reason}).`,\n    {\n      code: \"model_request_recovery_exhausted\",\n      retryable: false,\n      diagnostics: Object.freeze({ attempts, reason }),\n    },\n  );\n}\n\nexport function createModelFromEnvironment(\n  environment: ModelEnvironment = process.env,\n): ReviewModel {\n  const endpoint = environment[ADVERSARY_MODEL_ENDPOINT_ENV]?.trim();\n  const token = environment[ADVERSARY_MODEL_TOKEN_ENV]?.trim();\n  if (endpoint === undefined || endpoint === \"\" || token === undefined || token === \"\") {\n    return unavailableModel();\n  }\n  return new BrokerReviewModel(endpoint, token);\n}\n\nexport function unavailableModel(): ReviewModel {\n  return Object.freeze({\n    async review(): Promise<never> {\n      throw new ModelUnavailableError();\n    },\n  });\n}\n\nexport class BrokerReviewModel implements ReviewModel {\n  readonly endpoint: string;\n  readonly #token: string;\n  readonly #maximumAttempts: number;\n  readonly #initialRetryDelayMs: number;\n  readonly #random: () => number;\n\n  constructor(endpoint: string, token: string, options: BrokerReviewModelOptions = {}) {\n    const parsed = new URL(endpoint);\n    if (\n      parsed.protocol !== \"http:\" ||\n      (parsed.hostname !== \"127.0.0.1\" &&\n        parsed.hostname !== \"::1\" &&\n        parsed.hostname !== \"[::1]\" &&\n        parsed.hostname !== \"localhost\")\n    ) {\n      throw new ModelReviewError(\n        \"The model broker endpoint must use HTTP on the local loopback interface.\",\n        { code: \"invalid_broker_endpoint\" },\n      );\n    }\n    if (token.trim() === \"\") {\n      throw new ModelReviewError(\"The model broker token must not be empty.\", {\n        code: \"invalid_broker_token\",\n      });\n    }\n    this.endpoint = parsed.toString();\n    this.#token = token;\n    const maximumAttempts = options.maximumAttempts ?? DEFAULT_BROKER_MAXIMUM_ATTEMPTS;\n    const initialRetryDelayMs = options.initialRetryDelayMs ?? DEFAULT_BROKER_RETRY_DELAY_MS;\n    requireIntegerRange(maximumAttempts, \"maximumAttempts\", 1, 5);\n    requireIntegerRange(initialRetryDelayMs, \"initialRetryDelayMs\", 0, MAX_BROKER_RETRY_DELAY_MS);\n    this.#maximumAttempts = maximumAttempts;\n    this.#initialRetryDelayMs = initialRetryDelayMs;\n    this.#random = options.random ?? Math.random;\n  }\n\n  async review<T = unknown>(request: ModelReviewRequest<T>): Promise<ModelReviewResult<T>> {\n    if (request.tools?.repository !== undefined) {\n      throw new ModelReviewError(\n        \"Repository model tools require ctx.model so the SDK can enforce the repository boundary.\",\n        { code: \"invalid_model_request\" },\n      );\n    }\n    const normalized = normalizeRequest(request);\n    const diagnostics = modelAttemptDiagnostics(\n      normalized.budget.timeoutMs,\n      request.diagnosticStage === \"repository_planning\" ? \"repository_planning\" : \"model_review\",\n    );\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), normalized.budget.timeoutMs);\n    const dispatcher = new ModelBrokerDispatcher(normalized.budget.timeoutMs);\n    try {\n      for (let attempt = 1; attempt <= this.#maximumAttempts; attempt += 1) {\n        const outcome = await this.#reviewAttempt<T>(\n          normalized,\n          controller.signal,\n          dispatcher,\n          diagnostics,\n          attempt,\n        );\n        if (outcome.ok) return outcome.result;\n        const error = outcome.error;\n        if (!(error instanceof ModelReviewError) || !error.retryable) throw error;\n        if (controller.signal.aborted) {\n          throw exhaustedModelRecovery(attempt, \"deadline\");\n        }\n        if (attempt === this.#maximumAttempts) {\n          throw exhaustedModelRecovery(attempt, \"attempt_limit\");\n        }\n        await this.#waitForRetry(\n          attempt,\n          controller.signal,\n          normalized.budget.timeoutMs,\n          diagnostics,\n        );\n      }\n      throw exhaustedModelRecovery(this.#maximumAttempts, \"attempt_limit\");\n    } finally {\n      clearTimeout(timeout);\n      // Cleanup must not replace the typed request error or a successful response.\n      try {\n        await dispatcher.destroy();\n      } catch {\n        // The dispatcher is no longer used after this request.\n      }\n    }\n  }\n\n  // One attempt owns its timing and error outcome; retry decisions belong to review().\n  async #reviewAttempt<T>(\n    normalized: NormalizedModelReviewRequest,\n    signal: AbortSignal,\n    dispatcher: ModelBrokerDispatcher,\n    diagnostics: ReturnType<typeof modelAttemptDiagnostics>,\n    attempt: number,\n  ): Promise<{ ok: true; result: ModelReviewResult<T> } | { ok: false; error: unknown }> {\n    const finish = diagnostics.start(attempt);\n    try {\n      const result = await this.#reviewOnce<T>(normalized, signal, dispatcher);\n      finish(\"succeeded\", result.provider, result.model);\n      return { ok: true, result };\n    } catch (error) {\n      finish(\n        \"failed\",\n        undefined,\n        undefined,\n        error instanceof ModelReviewError ? error.code : \"broker_unavailable\",\n      );\n      return { ok: false, error };\n    }\n  }\n\n  // Keep backoff, timeout diagnostics, and error translation together.\n  async #waitForRetry(\n    attempt: number,\n    signal: AbortSignal,\n    timeoutMs: number,\n    diagnostics: ReturnType<typeof modelAttemptDiagnostics>,\n  ): Promise<void> {\n    const exponential = Math.min(\n      MAX_BROKER_RETRY_DELAY_MS,\n      this.#initialRetryDelayMs * 2 ** (attempt - 1),\n    );\n    const jittered = Math.round(exponential * (0.75 + 0.5 * this.#random()));\n    const retryDelayFailed = diagnostics.startRetryDelay(attempt);\n    try {\n      await waitForRetry(jittered, signal, timeoutMs);\n    } catch (error) {\n      retryDelayFailed(\n        error instanceof ModelReviewError\n          ? (error.code ?? \"model_review_failed\")\n          : \"model_review_failed\",\n      );\n      if (error instanceof ModelReviewError && error.retryable) {\n        throw exhaustedModelRecovery(attempt, \"deadline\");\n      }\n      throw error;\n    }\n  }\n\n  async #reviewOnce<T>(\n    normalized: NormalizedModelReviewRequest,\n    signal: AbortSignal,\n    dispatcher: ModelBrokerDispatcher,\n  ): Promise<ModelReviewResult<T>> {\n    let response: Response;\n    try {\n      response = await fetch(this.endpoint, {\n        method: \"POST\",\n        headers: {\n          accept: \"application/json\",\n          authorization: `Bearer ${this.#token}`,\n          \"content-type\": \"application/json\",\n          \"x-adversary-model-protocol\": String(ADVERSARY_MODEL_PROTOCOL_VERSION),\n        },\n        body: JSON.stringify({\n          protocolVersion: ADVERSARY_MODEL_PROTOCOL_VERSION,\n          prompt: normalized.prompt,\n          input: normalized.input,\n          schema: normalized.schema,\n          budget: normalized.budget,\n        } satisfies ModelBrokerRequest),\n        signal,\n        dispatcher,\n      } as RequestInit & { dispatcher: Dispatcher });\n    } catch (error) {\n      throw brokerTransportError(error, signal, normalized.budget.timeoutMs);\n    }\n\n    let body: string;\n    try {\n      body = await readBoundedResponse(response);\n    } catch (error) {\n      throw brokerTransportError(error, signal, normalized.budget.timeoutMs);\n    }\n    let decoded: unknown;\n    try {\n      decoded = JSON.parse(body);\n    } catch {\n      throw new ModelReviewError(\"Model broker returned malformed JSON.\", {\n        code: \"invalid_broker_response\",\n      });\n    }\n    if (!response.ok) {\n      const failure = decoded as ModelBrokerErrorResponse;\n      throw new ModelReviewError(\n        failure.error?.message ?? `Model broker returned HTTP ${response.status}.`,\n        {\n          code: failure.error?.code ?? \"model_review_failed\",\n          retryable: failure.error?.retryable ?? response.status >= 500,\n        },\n      );\n    }\n\n    const envelope = requireBrokerResponse(decoded);\n    validateModelOutput(normalized.schema, envelope.output);\n    return {\n      output: envelope.output as T,\n      provider: envelope.provider,\n      model: envelope.model,\n      ...(envelope.usage === undefined ? {} : { usage: envelope.usage }),\n    };\n  }\n}\n\n/**\n * Run adversary-owned semantic validation with SDK-owned bounded regeneration.\n *\n * Each retry receives the validator failure as trusted SDK feedback while retaining the\n * original input. The original timeout is shared by all validation attempts, and usage is\n * aggregated across them. Repository callers may decorate the raw result with citations before\n * validation without repeating repository retrieval.\n */\nexport async function reviewWithValidation<T>(\n  model: ReviewModel,\n  request: ModelReviewRequest<T>,\n  decorate: (result: ModelReviewResult<T>) => ModelReviewResult<T> = (result) => result,\n): Promise<ModelReviewResult<T>> {\n  const validation = request.validation;\n  const { validation: _validation, tools: _tools, ...baseRequest } = request;\n  if (validation === undefined) return decorate(await model.review<T>(baseRequest));\n\n  const maximumAttempts = validation.maximumAttempts ?? DEFAULT_VALIDATION_MAXIMUM_ATTEMPTS;\n  requireIntegerRange(\n    maximumAttempts,\n    \"validation.maximumAttempts\",\n    1,\n    MAX_VALIDATION_MAXIMUM_ATTEMPTS,\n  );\n  const timeoutMs = request.budget?.timeoutMs ?? DEFAULT_MODEL_TIMEOUT_MS;\n  const startedAt = Date.now();\n  let usage: ModelReviewUsage = {};\n  let feedback: string | undefined;\n\n  for (let attempt = 1; attempt <= maximumAttempts; attempt += 1) {\n    const elapsed = Date.now() - startedAt;\n    const remainingTimeoutMs = timeoutMs - elapsed;\n    if (remainingTimeoutMs <= 0) throw exhaustedModelRecovery(attempt - 1, \"deadline\");\n    const result = decorate(\n      await model.review<T>({\n        ...baseRequest,\n        prompt:\n          feedback === undefined\n            ? baseRequest.prompt\n            : `${baseRequest.prompt}\\n\\nSDK VALIDATION FEEDBACK:\\nThe previous response failed adversary-defined validation. Correct the response using this trusted validation result and return the complete response again.\\n${JSON.stringify({ attempt, error: feedback })}`,\n        budget: {\n          ...baseRequest.budget,\n          timeoutMs: remainingTimeoutMs,\n        },\n      }),\n    );\n    usage = addModelUsage(usage, result.usage);\n    try {\n      await validation.validate(result);\n      return {\n        ...result,\n        ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),\n      };\n    } catch (error) {\n      feedback = boundedValidationFeedback(error);\n      if (attempt === maximumAttempts) {\n        throw new ModelReviewError(\n          `Model output failed adversary validation after ${maximumAttempts} attempts: ${feedback}`,\n          { code: \"model_validation_failed\", retryable: false },\n        );\n      }\n    }\n  }\n  throw new ModelReviewError(\"Model validation retry loop exhausted unexpectedly.\", {\n    code: \"model_validation_failed\",\n    retryable: false,\n  });\n}\n\nfunction boundedValidationFeedback(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  const encoded = Buffer.from(message, \"utf8\");\n  return encoded.byteLength <= MAX_VALIDATION_FEEDBACK_BYTES\n    ? message\n    : `${encoded.subarray(0, MAX_VALIDATION_FEEDBACK_BYTES).toString(\"utf8\")}…`;\n}\n\nfunction addModelUsage(\n  total: ModelReviewUsage,\n  next: ModelReviewUsage | undefined,\n): ModelReviewUsage {\n  if (next === undefined) return total;\n  return {\n    ...(total.inputTokens === undefined && next.inputTokens === undefined\n      ? {}\n      : { inputTokens: (total.inputTokens ?? 0) + (next.inputTokens ?? 0) }),\n    ...(total.outputTokens === undefined && next.outputTokens === undefined\n      ? {}\n      : { outputTokens: (total.outputTokens ?? 0) + (next.outputTokens ?? 0) }),\n  };\n}\n\nasync function waitForRetry(\n  delayMs: number,\n  signal: AbortSignal,\n  timeoutMs: number,\n): Promise<void> {\n  if (signal.aborted) {\n    throw modelTimeoutError(timeoutMs);\n  }\n  await new Promise<void>((resolve, reject) => {\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(modelTimeoutError(timeoutMs));\n    };\n    const timer = setTimeout(() => {\n      signal.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, delayMs);\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\nfunction modelTimeoutError(timeoutMs: number): ModelReviewError {\n  return new ModelReviewError(`Model review exceeded its ${timeoutMs}ms timeout.`, {\n    code: \"model_timeout\",\n    retryable: true,\n  });\n}\n\nfunction normalizeRequest(request: ModelReviewRequest): NormalizedModelReviewRequest {\n  if (typeof request !== \"object\" || request === null) {\n    throw new ModelReviewError(\"Model review request must be an object.\", {\n      code: \"invalid_model_request\",\n    });\n  }\n  if (typeof request.prompt !== \"string\" || request.prompt.trim() === \"\") {\n    throw new ModelReviewError(\"Model review prompt must be a non-empty string.\", {\n      code: \"invalid_model_request\",\n    });\n  }\n  const promptBytes = Buffer.byteLength(request.prompt, \"utf8\");\n  if (promptBytes > MAX_PROMPT_BYTES) {\n    throw new ModelReviewError(`Model review prompt exceeds ${MAX_PROMPT_BYTES} bytes.`, {\n      code: \"model_request_too_large\",\n    });\n  }\n  requireJsonSize(request.input, \"input\", MAX_INPUT_BYTES);\n  if (\n    typeof request.schema !== \"object\" ||\n    request.schema === null ||\n    Array.isArray(request.schema)\n  ) {\n    throw new ModelReviewError(\"Model review schema must be a JSON Schema object.\", {\n      code: \"invalid_model_schema\",\n    });\n  }\n  requireJsonSize(request.schema, \"schema\", MAX_SCHEMA_BYTES);\n\n  const maximumOutputTokens = request.budget?.maximumOutputTokens ?? DEFAULT_MAXIMUM_OUTPUT_TOKENS;\n  const timeoutMs = request.budget?.timeoutMs ?? DEFAULT_MODEL_TIMEOUT_MS;\n  requireIntegerRange(\n    maximumOutputTokens,\n    \"budget.maximumOutputTokens\",\n    1,\n    MAX_MAXIMUM_OUTPUT_TOKENS,\n  );\n  requireIntegerRange(timeoutMs, \"budget.timeoutMs\", 1, MAX_MODEL_TIMEOUT_MS);\n  return {\n    prompt: request.prompt,\n    input: request.input,\n    schema: request.schema,\n    budget: { maximumOutputTokens, timeoutMs },\n  };\n}\n\nfunction requireJsonSize(value: unknown, name: string, maximum: number): void {\n  let encoded: string | undefined;\n  try {\n    encoded = JSON.stringify(value);\n  } catch (error) {\n    throw new ModelReviewError(\n      `Model review ${name} must be JSON-serializable: ${error instanceof Error ? error.message : String(error)}`,\n      { code: \"invalid_model_request\" },\n    );\n  }\n  if (encoded === undefined) {\n    throw new ModelReviewError(`Model review ${name} must be JSON-serializable.`, {\n      code: \"invalid_model_request\",\n    });\n  }\n  if (Buffer.byteLength(encoded, \"utf8\") > maximum) {\n    throw new ModelReviewError(`Model review ${name} exceeds ${maximum} bytes.`, {\n      code: \"model_request_too_large\",\n    });\n  }\n}\n\nfunction requireIntegerRange(value: number, name: string, minimum: number, maximum: number): void {\n  if (!Number.isInteger(value) || value < minimum || value > maximum) {\n    throw new ModelReviewError(`${name} must be an integer from ${minimum} through ${maximum}.`, {\n      code: \"invalid_model_budget\",\n    });\n  }\n}\n\nfunction brokerTransportError(\n  error: unknown,\n  signal: AbortSignal,\n  timeoutMs: number,\n): ModelReviewError {\n  if (signal.aborted) return modelTimeoutError(timeoutMs);\n  if (error instanceof ModelReviewError) return error;\n  return new ModelReviewError(\n    `Model broker request failed: ${error instanceof Error ? error.message : String(error)}`,\n    { code: \"broker_unavailable\", retryable: true },\n  );\n}\n\nasync function readBoundedResponse(response: Response): Promise<string> {\n  const declared = response.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_RESPONSE_BYTES) {\n    throw new ModelReviewError(`Model broker response exceeds ${MAX_RESPONSE_BYTES} bytes.`, {\n      code: \"model_response_too_large\",\n    });\n  }\n  if (response.body === null) {\n    return \"\";\n  }\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n    size += value.byteLength;\n    if (size > MAX_RESPONSE_BYTES) {\n      await reader.cancel();\n      throw new ModelReviewError(`Model broker response exceeds ${MAX_RESPONSE_BYTES} bytes.`, {\n        code: \"model_response_too_large\",\n      });\n    }\n    chunks.push(value);\n  }\n  const joined = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    joined.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(joined);\n}\n\nfunction requireBrokerResponse(value: unknown): ModelBrokerResponse {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new ModelReviewError(\"Model broker response must be an object.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  const response = value as Partial<ModelBrokerResponse>;\n  if (response.protocolVersion !== ADVERSARY_MODEL_PROTOCOL_VERSION) {\n    throw new ModelReviewError(\n      `Model broker protocol version must be ${ADVERSARY_MODEL_PROTOCOL_VERSION}.`,\n      { code: \"unsupported_model_protocol\" },\n    );\n  }\n  if (typeof response.provider !== \"string\" || response.provider.trim() === \"\") {\n    throw new ModelReviewError(\"Model broker response provider must be a non-empty string.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  if (typeof response.model !== \"string\" || response.model.trim() === \"\") {\n    throw new ModelReviewError(\"Model broker response model must be a non-empty string.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  if (!Object.hasOwn(response, \"output\")) {\n    throw new ModelReviewError(\"Model broker response is missing output.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  if (response.usage !== undefined) {\n    validateUsage(response.usage);\n  }\n  return response as ModelBrokerResponse;\n}\n\nfunction validateUsage(value: unknown): asserts value is ModelReviewUsage {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new ModelReviewError(\"Model broker response usage must be an object.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  for (const field of [\"inputTokens\", \"outputTokens\"] as const) {\n    const count = (value as ModelReviewUsage)[field];\n    if (count !== undefined && (!Number.isInteger(count) || count < 0)) {\n      throw new ModelReviewError(\n        `Model broker response usage.${field} must be a non-negative integer.`,\n        {\n          code: \"invalid_broker_response\",\n        },\n      );\n    }\n  }\n}\n\nfunction validateModelOutput(schema: Record<string, unknown>, output: unknown): void {\n  const ajv = new Ajv2020({ allErrors: true, strict: true });\n  let validate: ReturnType<Ajv2020[\"compile\"]>;\n  try {\n    validate = ajv.compile(schema);\n  } catch (error) {\n    throw new ModelReviewError(\n      `Model review schema is invalid: ${error instanceof Error ? error.message : String(error)}`,\n      { code: \"invalid_model_schema\" },\n    );\n  }\n  if (!validate(output)) {\n    const detail = ajv.errorsText(validate.errors, { separator: \"; \" });\n    throw new ModelReviewError(`Model output does not match the requested schema: ${detail}`, {\n      code: \"invalid_model_output\",\n    });\n  }\n}\n"]}
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAmB,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAOjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AACrC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,gBAAgB,GAAG,GAAG,IAAI,EAAE,CAAC;AACnC,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,IAAI,EAAE,CAAC;AACnC,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,CAAC;AACnC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAC9C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,6BAA6B,GAAG,CAAC,IAAI,EAAE,CAAC;AAC9C,mFAAmF;AACnF,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAGxD,gFAAgF;AAChF,iFAAiF;AACjF,4EAA4E;AAC5E,MAAM,qBAAsB,SAAQ,KAAK;IACV;IAA7B,YAA6B,UAAkB;QAC7C,KAAK,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QADX,eAAU,GAAV,UAAU,CAAQ;IAE/C,CAAC;IAEQ,QAAQ,CACf,OAAmC,EACnC,OAAoC;QAEpC,OAAO,KAAK,CAAC,QAAQ,CACnB;YACE,GAAG,OAAO;YACV,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,WAAW,EAAE,IAAI,CAAC,UAAU;SAC7B,EACD,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AAgHD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,GAAG,2DAA2D;QAC/E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAU;IACd,SAAS,CAAU;IACnB,WAAW,CAAqC;IACzD,yEAAyE;IAChE,KAAK,CAAoB;IAElC,YACE,OAAe,EACf,UAKI,EAAE;QAEN,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;CACF;AAED,kFAAkF;AAClF,4EAA4E;AAC5E,SAAS,sBAAsB,CAC7B,QAAgB,EAChB,MAAoC;IAEpC,OAAO,IAAI,gBAAgB,CACzB,4EAA4E,QAAQ,gBAAgB,MAAM,IAAI,EAC9G;QACE,IAAI,EAAE,kCAAkC;QACxC,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;KACjD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,cAAgC,OAAO,CAAC,GAAG;IAE3C,MAAM,QAAQ,GAAG,WAAW,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,WAAW,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACrF,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,gBAAgB,CAAS;IACzB,oBAAoB,CAAS;IAC7B,OAAO,CAAe;IAE/B,YAAY,QAAgB,EAAE,KAAa,EAAE,UAAoC,EAAE;QACjF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IACE,MAAM,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW;gBAC9B,MAAM,CAAC,QAAQ,KAAK,KAAK;gBACzB,MAAM,CAAC,QAAQ,KAAK,OAAO;gBAC3B,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,EAClC,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,0EAA0E,EAC1E,EAAE,IAAI,EAAE,yBAAyB,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CAAC,2CAA2C,EAAE;gBACtE,IAAI,EAAE,sBAAsB;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,+BAA+B,CAAC;QACnF,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QACzF,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,mBAAmB,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC9F,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,oBAAoB,GAAG,mBAAmB,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,OAA8B;QACtD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,gBAAgB,CACxB,0FAA0F,EAC1F,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,qBAAqB,GAAI,OAA+B,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC;QAC7F,MAAM,WAAW,GAAG,uBAAuB,CACzC,UAAU,CAAC,MAAM,CAAC,SAAS,EAC3B,OAAO,CAAC,eAAe,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAC3F,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,KAAK,GAAqB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CACvC,UAAU,EACV,UAAU,CAAC,MAAM,EACjB,UAAU,EACV,WAAW,EACX,OAAO,CACR,CAAC;gBACF,IAAI,OAAO,CAAC,EAAE;oBAAE,OAAO,0BAA0B,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACzE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACtD,sEAAsE;gBACtE,uEAAuE;gBACvE,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,qBAAqB,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,CAAC;oBACtF,MAAM,KAAK,CAAC;gBACd,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACjF,IAAI,OAAO,KAAK,IAAI,CAAC,gBAAgB;oBACnC,MAAM,sBAAsB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,EACP,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAAC,SAAS,EAC3B,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,MAAM,sBAAsB,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACtD,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,6EAA6E;YAC7E,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,cAAc,CAClB,UAAwC,EACxC,MAAmB,EACnB,UAAiC,EACjC,WAAuD,EACvD,OAAe;QAEf,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAI,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACzE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,SAAS,EACT,KAAK,YAAY,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CACtE,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,MAAmB,EACnB,SAAiB,EACjB,WAAuD;QAEvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,yBAAyB,EACzB,IAAI,CAAC,oBAAoB,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAC/C,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,gBAAgB,GAAG,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CACd,KAAK,YAAY,gBAAgB;gBAC/B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,qBAAqB,CAAC;gBACvC,CAAC,CAAC,qBAAqB,CAC1B,CAAC;YACF,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACzD,MAAM,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,UAAwC,EACxC,MAAmB,EACnB,UAAiC;QAEjC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,4BAA4B,EAAE,MAAM,CAAC,gCAAgC,CAAC;iBACvE;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,eAAe,EAAE,gCAAgC;oBACjD,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;iBACG,CAAC;gBAC/B,MAAM;gBACN,UAAU;aACiC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,EAAE;gBAClE,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,OAAmC,CAAC;YACpD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,IAAI,gBAAgB,CACxB,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,8BAA8B,QAAQ,CAAC,MAAM,GAAG,EAC1E;gBACE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,qBAAqB;gBAClD,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;gBAC7D,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;aACjE,CACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChD,mBAAmB,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxE,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAW;YAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkB,EAClB,OAA8B,EAC9B,WAAmE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;IAErF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,CAAI,WAAW,CAAC,CAAC,CAAC;IAElF,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,IAAI,mCAAmC,CAAC;IAC1F,mBAAmB,CACjB,eAAe,EACf,4BAA4B,EAC5B,CAAC,EACD,+BAA+B,CAChC,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,wBAAwB,CAAC;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAqB,EAAE,CAAC;IACjC,IAAI,QAA4B,CAAC;IAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC;QAC/C,IAAI,kBAAkB,IAAI,CAAC;YACzB,MAAM,oBAAoB,CAAC,sBAAsB,CAAC,OAAO,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,uBAAuB,CACrC,KAAK,EACL;gBACE,GAAG,WAAW;gBACd,MAAM,EACJ,QAAQ,KAAK,SAAS;oBACpB,CAAC,CAAC,WAAW,CAAC,MAAM;oBACpB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,oLAAoL,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;gBAC7P,MAAM,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE;aACjE,EACD,UAAU,EACV,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACtD,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,GAAG,OAAO,CAAC,MAAM;gBACjB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;aAC1F,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC5B,IAAI,OAAO,KAAK,eAAe;YAC7B,MAAM,yBAAyB,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,qDAAqD,EAAE;QAChF,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAMD,6EAA6E;AAC7E,4EAA4E;AAC5E,KAAK,UAAU,uBAAuB,CACpC,KAAkB,EAClB,OAA8B,EAC9B,UAAoC,EACpC,QAAgE;IAEhE,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAwB,EAAE,GAAG,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;QAClF,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,CAAI,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB;YAAE,MAAM,KAAK,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,yBAAyB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACxF,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA4B,EAC5B,WAA6B;IAE7B,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,KAAuB,EAAE,KAAuB;IAC5E,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtF,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAgB,EAChB,QAAgB,EAChB,KAAuB;IAEvB,OAAO,IAAI,gBAAgB,CACzB,kDAAkD,QAAQ,cAAc,QAAQ,EAAE,EAClF;QACE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,KAAK;QAChB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1F,CACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,0FAA0F;AAC1F,SAAS,wBAAwB,CAC/B,KAAuB,EACvB,MAA+B;IAE/B,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC/E,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GACZ,SAAS,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC,qBAAqB,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,SAAS;aACN,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,OAAO,yBAAyB,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA2B,EAC3B,MAAc,EACd,MAA+B;IAE/B,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAiE,CAAC;QAC1F,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,IACL,IAAI,CAAC,IAAI,KAAK,OAAO;YACrB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YACrB,IAAI,CAAC,KAAK;YACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAC9B,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,GAAG,IAAI,CAAC,KAAgC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,wDAAwD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,MAAM,GAAG,gEAAgE,CAAC;IAC9E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,yBAAyB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/E,CAAC;SAAM,IAAI,kDAAkD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IACL,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC;QACnD,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAC5B,IAAI,CAAC,GAAG,KAAK,IAAI,EACjB,CAAC;QACD,MAAM,WAAW,GAAI,IAAI,CAAC,GAA+B,CAAC,WAAW,CAAC;QACtE,MAAM;YACJ,OAAO,WAAW,KAAK,QAAQ;gBAC7B,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,+CAA+C,CAAC;IACxD,CAAC;SAAM,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,GAAG,gDAAgD,CAAC;IAC5D,CAAC;IACD,OAAO,mDAAmD,EAAE,KAAK,MAAM,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,UAAU,IAAI,6BAA6B;QACxD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;AAChF,CAAC;AAED,SAAS,aAAa,CACpB,KAAuB,EACvB,IAAkC;IAElC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YACnE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YACrE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,MAAmB,EACnB,SAAiB;IAEjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,OAAO,IAAI,gBAAgB,CAAC,6BAA6B,SAAS,aAAa,EAAE;QAC/E,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CAAC,yCAAyC,EAAE;YACpE,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,gBAAgB,CAAC,iDAAiD,EAAE;YAC5E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,WAAW,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,gBAAgB,SAAS,EAAE;YACnF,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACzD,IACE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;QAClC,OAAO,CAAC,MAAM,KAAK,IAAI;QACvB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,mDAAmD,EAAE;YAC9E,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAE5D,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,mBAAmB,IAAI,6BAA6B,CAAC;IACjG,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,wBAAwB,CAAC;IACxE,mBAAmB,CACjB,mBAAmB,EACnB,4BAA4B,EAC5B,CAAC,EACD,yBAAyB,CAC1B,CAAC;IACF,mBAAmB,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,EAAE,OAAe;IACpE,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,IAAI,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3G,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,IAAI,6BAA6B,EAAE;YAC5E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,IAAI,YAAY,OAAO,SAAS,EAAE;YAC3E,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,OAAe;IACxF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACnE,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,4BAA4B,OAAO,YAAY,OAAO,GAAG,EAAE;YAC3F,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,MAAmB,EACnB,SAAiB;IAEjB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,KAAK,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,gBAAgB,CACzB,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACxF,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,CAChD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAkB;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/D,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,kBAAkB,SAAS,EAAE;YACvF,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,MAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,kBAAkB,SAAS,EAAE;gBACvF,IAAI,EAAE,0BAA0B;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE;YACrE,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,KAAqC,CAAC;IACvD,IAAI,QAAQ,CAAC,eAAe,KAAK,gCAAgC,EAAE,CAAC;QAClE,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,gCAAgC,GAAG,EAC5E,EAAE,IAAI,EAAE,4BAA4B,EAAE,CACvC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,gBAAgB,CAAC,4DAA4D,EAAE;YACvF,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,EAAE;YACpF,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE;YACrE,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,QAA+B,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CAAC,gDAAgD,EAAE;YAC3E,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAU,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAI,KAA0B,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,gBAAgB,CACxB,+BAA+B,KAAK,kCAAkC,EACtE;gBACE,IAAI,EAAE,yBAAyB;aAChC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA+B,EAC/B,MAAe,EACf,KAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,QAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACxB,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3F,EAAE,IAAI,EAAE,sBAAsB,EAAE,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,gBAAgB,CAAC,qDAAqD,MAAM,EAAE,EAAE;YACxF,IAAI,EAAE,sBAAsB;YAC5B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["import { Ajv2020 } from \"ajv/dist/2020.js\";\nimport { Agent, type Dispatcher } from \"undici\";\nimport { modelAttemptDiagnostics } from \"./model-diagnostics.js\";\nimport type {\n  ModelRepositoryCitation,\n  ModelRepositoryRetrieval,\n  ModelRepositoryToolOptions,\n} from \"./repository-model.js\";\n\nexport const ADVERSARY_MODEL_PROTOCOL_VERSION = 1;\nexport const ADVERSARY_MODEL_ENDPOINT_ENV = \"ADVERSARY_MODEL_ENDPOINT\";\nexport const ADVERSARY_MODEL_TOKEN_ENV = \"ADVERSARY_MODEL_TOKEN\";\n\nconst DEFAULT_MODEL_TIMEOUT_MS = 600_000;\nconst MAX_MODEL_TIMEOUT_MS = 600_000;\nconst DEFAULT_MAXIMUM_OUTPUT_TOKENS = 8_192;\nconst MAX_MAXIMUM_OUTPUT_TOKENS = 65_536;\nconst MAX_PROMPT_BYTES = 256 << 10;\nconst MAX_INPUT_BYTES = 4 << 20;\nconst MAX_SCHEMA_BYTES = 512 << 10;\nconst MAX_RESPONSE_BYTES = 4 << 20;\nconst DEFAULT_BROKER_MAXIMUM_ATTEMPTS = 3;\nconst DEFAULT_BROKER_RETRY_DELAY_MS = 250;\nconst MAX_BROKER_RETRY_DELAY_MS = 5_000;\nconst DEFAULT_VALIDATION_MAXIMUM_ATTEMPTS = 3;\nconst MAX_VALIDATION_MAXIMUM_ATTEMPTS = 5;\nconst MAX_VALIDATION_FEEDBACK_BYTES = 8 << 10;\n// Internal request metadata survives wrapper spreads but never enters broker JSON.\nconst outputRepairRequest = Symbol(\"sdk.output-repair\");\ntype OutputRepairRequest = ModelReviewRequest & { [outputRepairRequest]?: true };\n\n// Fetch supplies its own five-minute header timeout, overriding Agent defaults.\n// Override dispatch options for this review only; its shared AbortSignal remains\n// the authoritative deadline across connection, headers, body, and retries.\nclass ModelBrokerDispatcher extends Agent {\n  constructor(private readonly deadlineMs: number) {\n    super({ connectTimeout: deadlineMs });\n  }\n\n  override dispatch(\n    options: Dispatcher.DispatchOptions,\n    handler: Dispatcher.DispatchHandlers,\n  ): boolean {\n    return super.dispatch(\n      {\n        ...options,\n        headersTimeout: this.deadlineMs,\n        bodyTimeout: this.deadlineMs,\n      },\n      handler,\n    );\n  }\n}\n\nexport interface ModelReviewBudget {\n  maximumOutputTokens?: number;\n  timeoutMs?: number;\n}\n\nexport interface ModelReviewValidation<T = unknown> {\n  /** Validate a completed model result. Throw to retry generation with the error as feedback. */\n  validate(result: ModelReviewResult<T>): void | Promise<void>;\n  /** Total generation attempts, including the first. Defaults to 3 and is capped at 5. */\n  maximumAttempts?: number;\n}\n\nexport interface ModelReviewRequest<T = unknown> {\n  /** Local timing classification only; never sent to the broker or model. */\n  diagnosticStage?: \"model_review\" | \"repository_planning\";\n  prompt: string;\n  input: unknown;\n  schema: Record<string, unknown>;\n  budget?: ModelReviewBudget;\n  validation?: ModelReviewValidation<T>;\n  tools?: {\n    repository: ModelRepositoryToolOptions;\n  };\n}\n\nexport interface ModelReviewUsage {\n  inputTokens?: number;\n  outputTokens?: number;\n}\n\nexport interface ModelReviewResult<T = unknown> {\n  output: T;\n  provider: string;\n  model: string;\n  usage?: ModelReviewUsage;\n  citations?: readonly ModelRepositoryCitation[];\n  retrieval?: ModelRepositoryRetrieval;\n}\n\nexport interface ReviewModel {\n  review<T = unknown>(request: ModelReviewRequest<T>): Promise<ModelReviewResult<T>>;\n}\n\nexport interface BrokerReviewModelOptions {\n  maximumAttempts?: number;\n  initialRetryDelayMs?: number;\n  random?: () => number;\n}\n\n/**\n * Request a short noun-phrase concern suitable after \"I would address …\".\n * Implemented by the SDK via {@link ReviewModel.review} (CLI broker pass-through).\n */\nexport interface ModelConcernRequest {\n  /** Free-form title, clause, or draft concern to rewrite. */\n  text: string;\n  budget?: ModelReviewBudget;\n  /**\n   * Extra attempts when the model returns a phrase that fails noun-phrase validation.\n   * Defaults to 1 retry (2 total attempts).\n   */\n  maxAttempts?: number;\n}\n\nexport interface ModelConcernResult {\n  /** Validated noun phrase (see requireOpinionConcern). */\n  concern: string;\n  /** False when `text` was already a valid noun phrase (no broker call). */\n  rewritten: boolean;\n  provider: string;\n  model: string;\n  usage?: ModelReviewUsage;\n}\n\n/** Rule-context model: broker review plus opinion-concern rewrite. */\nexport type ContextualReviewModel = ReviewModel & {\n  concern(request: ModelConcernRequest): Promise<ModelConcernResult>;\n};\n\nexport type ModelEnvironment = Readonly<Record<string, string | undefined>>;\n\ninterface ModelBrokerRequest\n  extends Omit<ModelReviewRequest, \"validation\" | \"tools\" | \"diagnosticStage\"> {\n  protocolVersion: typeof ADVERSARY_MODEL_PROTOCOL_VERSION;\n}\n\ninterface ModelBrokerResponse {\n  protocolVersion: typeof ADVERSARY_MODEL_PROTOCOL_VERSION;\n  output: unknown;\n  provider: string;\n  model: string;\n  usage?: ModelReviewUsage;\n}\n\ninterface ModelBrokerErrorResponse {\n  usage?: ModelReviewUsage;\n  error?: {\n    code?: string;\n    message?: string;\n    retryable?: boolean;\n  };\n}\n\ntype NormalizedModelReviewRequest = Omit<\n  ModelReviewRequest,\n  \"budget\" | \"validation\" | \"tools\" | \"diagnosticStage\"\n> & {\n  budget: Required<ModelReviewBudget>;\n};\n\nexport class ModelUnavailableError extends Error {\n  constructor(message = \"Model review is unavailable for this adversary execution.\") {\n    super(message);\n    this.name = \"ModelUnavailableError\";\n  }\n}\n\nexport class ModelReviewError extends Error {\n  readonly code?: string;\n  readonly retryable: boolean;\n  readonly diagnostics?: Readonly<Record<string, unknown>>;\n  /** Reported usage from completed requests, including rejected output. */\n  readonly usage?: ModelReviewUsage;\n\n  constructor(\n    message: string,\n    options: {\n      code?: string;\n      retryable?: boolean;\n      diagnostics?: Readonly<Record<string, unknown>>;\n      usage?: ModelReviewUsage;\n    } = {},\n  ) {\n    super(message);\n    this.name = \"ModelReviewError\";\n    this.code = options.code;\n    this.diagnostics = options.diagnostics;\n    this.usage = options.usage;\n    this.retryable = options.retryable ?? false;\n  }\n}\n\n// The message carries the code because subprocess runners may only retain stderr.\n// Never include an upstream error body, prompt, or validator feedback here.\nfunction exhaustedModelRecovery(\n  attempts: number,\n  reason: \"deadline\" | \"attempt_limit\",\n): ModelReviewError {\n  return new ModelReviewError(\n    `model_request_recovery_exhausted: Model request recovery exhausted after ${attempts} attempt(s) (${reason}).`,\n    {\n      code: \"model_request_recovery_exhausted\",\n      retryable: false,\n      diagnostics: Object.freeze({ attempts, reason }),\n    },\n  );\n}\n\nexport function createModelFromEnvironment(\n  environment: ModelEnvironment = process.env,\n): ReviewModel {\n  const endpoint = environment[ADVERSARY_MODEL_ENDPOINT_ENV]?.trim();\n  const token = environment[ADVERSARY_MODEL_TOKEN_ENV]?.trim();\n  if (endpoint === undefined || endpoint === \"\" || token === undefined || token === \"\") {\n    return unavailableModel();\n  }\n  return new BrokerReviewModel(endpoint, token);\n}\n\nexport function unavailableModel(): ReviewModel {\n  return Object.freeze({\n    async review(): Promise<never> {\n      throw new ModelUnavailableError();\n    },\n  });\n}\n\nexport class BrokerReviewModel implements ReviewModel {\n  readonly endpoint: string;\n  readonly #token: string;\n  readonly #maximumAttempts: number;\n  readonly #initialRetryDelayMs: number;\n  readonly #random: () => number;\n\n  constructor(endpoint: string, token: string, options: BrokerReviewModelOptions = {}) {\n    const parsed = new URL(endpoint);\n    if (\n      parsed.protocol !== \"http:\" ||\n      (parsed.hostname !== \"127.0.0.1\" &&\n        parsed.hostname !== \"::1\" &&\n        parsed.hostname !== \"[::1]\" &&\n        parsed.hostname !== \"localhost\")\n    ) {\n      throw new ModelReviewError(\n        \"The model broker endpoint must use HTTP on the local loopback interface.\",\n        { code: \"invalid_broker_endpoint\" },\n      );\n    }\n    if (token.trim() === \"\") {\n      throw new ModelReviewError(\"The model broker token must not be empty.\", {\n        code: \"invalid_broker_token\",\n      });\n    }\n    this.endpoint = parsed.toString();\n    this.#token = token;\n    const maximumAttempts = options.maximumAttempts ?? DEFAULT_BROKER_MAXIMUM_ATTEMPTS;\n    const initialRetryDelayMs = options.initialRetryDelayMs ?? DEFAULT_BROKER_RETRY_DELAY_MS;\n    requireIntegerRange(maximumAttempts, \"maximumAttempts\", 1, 5);\n    requireIntegerRange(initialRetryDelayMs, \"initialRetryDelayMs\", 0, MAX_BROKER_RETRY_DELAY_MS);\n    this.#maximumAttempts = maximumAttempts;\n    this.#initialRetryDelayMs = initialRetryDelayMs;\n    this.#random = options.random ?? Math.random;\n  }\n\n  async review<T = unknown>(request: ModelReviewRequest<T>): Promise<ModelReviewResult<T>> {\n    if (request.tools?.repository !== undefined) {\n      throw new ModelReviewError(\n        \"Repository model tools require ctx.model so the SDK can enforce the repository boundary.\",\n        { code: \"invalid_model_request\" },\n      );\n    }\n    const normalized = normalizeRequest(request);\n    const validationOwnsRetries = (request as OutputRepairRequest)[outputRepairRequest] === true;\n    const diagnostics = modelAttemptDiagnostics(\n      normalized.budget.timeoutMs,\n      request.diagnosticStage === \"repository_planning\" ? \"repository_planning\" : \"model_review\",\n    );\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), normalized.budget.timeoutMs);\n    const dispatcher = new ModelBrokerDispatcher(normalized.budget.timeoutMs);\n    let usage: ModelReviewUsage = {};\n    try {\n      for (let attempt = 1; attempt <= this.#maximumAttempts; attempt += 1) {\n        const outcome = await this.#reviewAttempt<T>(\n          normalized,\n          controller.signal,\n          dispatcher,\n          diagnostics,\n          attempt,\n        );\n        if (outcome.ok) return withAccumulatedResultUsage(outcome.result, usage);\n        const error = outcome.error;\n        if (!(error instanceof ModelReviewError)) throw error;\n        // Only an opted-in validation loop takes ownership of schema retries.\n        // Other callers retain the broker's existing retryable-error behavior.\n        if (!error.retryable || (validationOwnsRetries && error.code === \"invalid_model_output\"))\n          throw error;\n        usage = addModelUsage(usage, error.usage);\n        if (controller.signal.aborted) throw exhaustedModelRecovery(attempt, \"deadline\");\n        if (attempt === this.#maximumAttempts)\n          throw exhaustedModelRecovery(attempt, \"attempt_limit\");\n        await this.#waitForRetry(\n          attempt,\n          controller.signal,\n          normalized.budget.timeoutMs,\n          diagnostics,\n        );\n      }\n      throw exhaustedModelRecovery(this.#maximumAttempts, \"attempt_limit\");\n    } catch (error) {\n      if (!(error instanceof ModelReviewError)) throw error;\n      throw withAccumulatedUsage(error, usage);\n    } finally {\n      clearTimeout(timeout);\n      // Cleanup must not replace the typed request error or a successful response.\n      try {\n        await dispatcher.destroy();\n      } catch {\n        // The dispatcher is no longer used after this request.\n      }\n    }\n  }\n\n  // One attempt owns its timing and error outcome; retry decisions belong to review().\n  async #reviewAttempt<T>(\n    normalized: NormalizedModelReviewRequest,\n    signal: AbortSignal,\n    dispatcher: ModelBrokerDispatcher,\n    diagnostics: ReturnType<typeof modelAttemptDiagnostics>,\n    attempt: number,\n  ): Promise<{ ok: true; result: ModelReviewResult<T> } | { ok: false; error: unknown }> {\n    const finish = diagnostics.start(attempt);\n    try {\n      const result = await this.#reviewOnce<T>(normalized, signal, dispatcher);\n      finish(\"succeeded\", result.provider, result.model);\n      return { ok: true, result };\n    } catch (error) {\n      finish(\n        \"failed\",\n        undefined,\n        undefined,\n        error instanceof ModelReviewError ? error.code : \"broker_unavailable\",\n      );\n      return { ok: false, error };\n    }\n  }\n\n  // Keep backoff, timeout diagnostics, and error translation together.\n  async #waitForRetry(\n    attempt: number,\n    signal: AbortSignal,\n    timeoutMs: number,\n    diagnostics: ReturnType<typeof modelAttemptDiagnostics>,\n  ): Promise<void> {\n    const exponential = Math.min(\n      MAX_BROKER_RETRY_DELAY_MS,\n      this.#initialRetryDelayMs * 2 ** (attempt - 1),\n    );\n    const jittered = Math.round(exponential * (0.75 + 0.5 * this.#random()));\n    const retryDelayFailed = diagnostics.startRetryDelay(attempt);\n    try {\n      await waitForRetry(jittered, signal, timeoutMs);\n    } catch (error) {\n      retryDelayFailed(\n        error instanceof ModelReviewError\n          ? (error.code ?? \"model_review_failed\")\n          : \"model_review_failed\",\n      );\n      if (error instanceof ModelReviewError && error.retryable) {\n        throw exhaustedModelRecovery(attempt, \"deadline\");\n      }\n      throw error;\n    }\n  }\n\n  async #reviewOnce<T>(\n    normalized: NormalizedModelReviewRequest,\n    signal: AbortSignal,\n    dispatcher: ModelBrokerDispatcher,\n  ): Promise<ModelReviewResult<T>> {\n    let response: Response;\n    try {\n      response = await fetch(this.endpoint, {\n        method: \"POST\",\n        headers: {\n          accept: \"application/json\",\n          authorization: `Bearer ${this.#token}`,\n          \"content-type\": \"application/json\",\n          \"x-adversary-model-protocol\": String(ADVERSARY_MODEL_PROTOCOL_VERSION),\n        },\n        body: JSON.stringify({\n          protocolVersion: ADVERSARY_MODEL_PROTOCOL_VERSION,\n          prompt: normalized.prompt,\n          input: normalized.input,\n          schema: normalized.schema,\n          budget: normalized.budget,\n        } satisfies ModelBrokerRequest),\n        signal,\n        dispatcher,\n      } as RequestInit & { dispatcher: Dispatcher });\n    } catch (error) {\n      throw brokerTransportError(error, signal, normalized.budget.timeoutMs);\n    }\n\n    let body: string;\n    try {\n      body = await readBoundedResponse(response);\n    } catch (error) {\n      throw brokerTransportError(error, signal, normalized.budget.timeoutMs);\n    }\n    let decoded: unknown;\n    try {\n      decoded = JSON.parse(body);\n    } catch {\n      throw new ModelReviewError(\"Model broker returned malformed JSON.\", {\n        code: \"invalid_broker_response\",\n      });\n    }\n    if (!response.ok) {\n      const failure = decoded as ModelBrokerErrorResponse;\n      if (failure.usage !== undefined) validateUsage(failure.usage);\n      throw new ModelReviewError(\n        failure.error?.message ?? `Model broker returned HTTP ${response.status}.`,\n        {\n          code: failure.error?.code ?? \"model_review_failed\",\n          retryable: failure.error?.retryable ?? response.status >= 500,\n          ...(failure.usage === undefined ? {} : { usage: failure.usage }),\n        },\n      );\n    }\n\n    const envelope = requireBrokerResponse(decoded);\n    validateModelOutput(normalized.schema, envelope.output, envelope.usage);\n    return {\n      output: envelope.output as T,\n      provider: envelope.provider,\n      model: envelope.model,\n      ...(envelope.usage === undefined ? {} : { usage: envelope.usage }),\n    };\n  }\n}\n\n/**\n * Run schema and adversary-owned semantic validation with SDK-owned bounded regeneration.\n *\n * Each retry receives the validator failure as trusted SDK feedback while retaining the\n * original input. The original timeout is shared by all validation attempts, and usage is\n * aggregated across them. Repository callers may decorate the raw result with citations before\n * validation without repeating repository retrieval.\n */\nexport async function reviewWithValidation<T>(\n  model: ReviewModel,\n  request: ModelReviewRequest<T>,\n  decorate: (result: ModelReviewResult<T>) => ModelReviewResult<T> = (result) => result,\n): Promise<ModelReviewResult<T>> {\n  const validation = request.validation;\n  const { validation: _validation, tools: _tools, ...baseRequest } = request;\n  if (validation === undefined) return decorate(await model.review<T>(baseRequest));\n\n  const maximumAttempts = validation.maximumAttempts ?? DEFAULT_VALIDATION_MAXIMUM_ATTEMPTS;\n  requireIntegerRange(\n    maximumAttempts,\n    \"validation.maximumAttempts\",\n    1,\n    MAX_VALIDATION_MAXIMUM_ATTEMPTS,\n  );\n  const timeoutMs = request.budget?.timeoutMs ?? DEFAULT_MODEL_TIMEOUT_MS;\n  const startedAt = Date.now();\n  let usage: ModelReviewUsage = {};\n  let feedback: string | undefined;\n\n  for (let attempt = 1; attempt <= maximumAttempts; attempt += 1) {\n    const elapsed = Date.now() - startedAt;\n    const remainingTimeoutMs = timeoutMs - elapsed;\n    if (remainingTimeoutMs <= 0)\n      throw withAccumulatedUsage(exhaustedModelRecovery(attempt - 1, \"deadline\"), usage);\n    let outcome: OutputValidationAttempt<T>;\n    try {\n      outcome = await reviewValidationAttempt(\n        model,\n        {\n          ...baseRequest,\n          prompt:\n            feedback === undefined\n              ? baseRequest.prompt\n              : `${baseRequest.prompt}\\n\\nSDK VALIDATION FEEDBACK:\\nThe previous response failed output validation. Correct the response using this trusted validation result and return the complete response again.\\n${JSON.stringify({ attempt, error: feedback })}`,\n          budget: { ...baseRequest.budget, timeoutMs: remainingTimeoutMs },\n        },\n        validation,\n        decorate,\n      );\n    } catch (error) {\n      if (!(error instanceof ModelReviewError)) throw error;\n      throw withAccumulatedUsage(error, usage);\n    }\n    usage = addModelUsage(usage, outcome.ok ? outcome.result.usage : outcome.usage);\n    if (outcome.ok) {\n      return {\n        ...outcome.result,\n        ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),\n      };\n    }\n    feedback = outcome.feedback;\n    if (attempt === maximumAttempts)\n      throw exhaustedOutputValidation(maximumAttempts, feedback, usage);\n  }\n  throw new ModelReviewError(\"Model validation retry loop exhausted unexpectedly.\", {\n    code: \"model_validation_failed\",\n    retryable: false,\n  });\n}\n\ntype OutputValidationAttempt<T> =\n  | { ok: true; result: ModelReviewResult<T> }\n  | { ok: false; feedback: string; usage?: ModelReviewUsage };\n\n// Keep generation and semantic validation failures together for one prepared\n// request. Neither kind of rejection repeats repository evidence gathering.\nasync function reviewValidationAttempt<T>(\n  model: ReviewModel,\n  request: ModelReviewRequest<T>,\n  validation: ModelReviewValidation<T>,\n  decorate: (result: ModelReviewResult<T>) => ModelReviewResult<T>,\n): Promise<OutputValidationAttempt<T>> {\n  let result: ModelReviewResult<T>;\n  try {\n    const prepared: OutputRepairRequest = { ...request, [outputRepairRequest]: true };\n    result = decorate(await model.review<T>(prepared));\n  } catch (error) {\n    if (!(error instanceof ModelReviewError) || error.code !== \"invalid_model_output\") throw error;\n    return {\n      ok: false,\n      feedback: schemaValidationFeedback(error, request.schema),\n      usage: error.usage,\n    };\n  }\n  try {\n    await validation.validate(result);\n    return { ok: true, result };\n  } catch (error) {\n    return { ok: false, feedback: boundedValidationFeedback(error), usage: result.usage };\n  }\n}\n\nfunction withAccumulatedResultUsage<T>(\n  result: ModelReviewResult<T>,\n  accumulated: ModelReviewUsage,\n): ModelReviewResult<T> {\n  const usage = addModelUsage(accumulated, result.usage);\n  return {\n    ...result,\n    ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),\n  };\n}\n\n// Keep interruption classification and metadata intact without mutating an error\n// that a model implementation may reuse. Current-error usage is counted once.\nfunction withAccumulatedUsage(error: ModelReviewError, usage: ModelReviewUsage): ModelReviewError {\n  if (usage.inputTokens === undefined && usage.outputTokens === undefined) return error;\n  return new ModelReviewError(error.message, {\n    code: error.code,\n    retryable: error.retryable,\n    diagnostics: error.diagnostics,\n    usage: addModelUsage(usage, error.usage),\n  });\n}\n\nfunction exhaustedOutputValidation(\n  attempts: number,\n  feedback: string,\n  usage: ModelReviewUsage,\n): ModelReviewError {\n  return new ModelReviewError(\n    `Model output failed adversary validation after ${attempts} attempts: ${feedback}`,\n    {\n      code: \"model_validation_failed\",\n      retryable: false,\n      ...(usage.inputTokens === undefined && usage.outputTokens === undefined ? {} : { usage }),\n    },\n  );\n}\n\n// Broker pattern/enum errors can quote rejected model text. Retain only schema-owned\n// locations, fixed keywords, numeric limits, and trusted schema descriptions as feedback.\nfunction schemaValidationFeedback(\n  error: ModelReviewError,\n  schema: Record<string, unknown>,\n): string {\n  const goLocations = [...error.message.matchAll(/- at '([^'\\n]*)': ([^\\n]*)/g)];\n  const locations =\n    goLocations.length > 0\n      ? goLocations\n      : [...error.message.matchAll(/data((?:\\/[^\\s;:]*)*) (must [^;\\n]*)/g)];\n  const messages =\n    locations.length === 0\n      ? [schemaFailureFeedback(undefined, \"\", schema)]\n      : locations\n          .slice(0, 32)\n          .map((location) => schemaFailureFeedback(location[1], location[2], schema));\n  return boundedValidationFeedback(new Error([...new Set(messages)].join(\"\\n\")));\n}\n\nfunction schemaFailureFeedback(\n  rawPath: string | undefined,\n  detail: string,\n  schema: Record<string, unknown>,\n): string {\n  let node = schema;\n  const safePath: string[] = [];\n  for (const token of (rawPath ?? \"\").split(\"/\").filter(Boolean).slice(0, 32)) {\n    const key = token.replaceAll(\"~1\", \"/\").replaceAll(\"~0\", \"~\");\n    const properties = node.properties as Record<string, Record<string, unknown>> | undefined;\n    if (properties && Object.hasOwn(properties, key)) {\n      safePath.push(token.slice(0, 128));\n      node = properties[key];\n    } else if (\n      node.type === \"array\" &&\n      /^\\d{1,8}$/.test(key) &&\n      node.items &&\n      typeof node.items === \"object\"\n    ) {\n      safePath.push(key);\n      node = node.items as Record<string, unknown>;\n    } else {\n      safePath.push(\"*\");\n      node = {};\n    }\n  }\n  const at = rawPath !== undefined ? ` at /${safePath.join(\"/\")}` : \"\";\n  const length = /^(minLength|maxLength): got (\\d{1,8}), want (\\d{1,8})$/.exec(detail);\n  let reason = \"Return a complete response that satisfies the supplied schema.\";\n  if (length) {\n    reason = `${length[1]}: got ${length[2]} characters; required ${length[3]}.`;\n  } else if (/^must NOT have (more|fewer) than \\d+ characters$/.test(detail)) {\n    reason = detail;\n  } else if (\n    /^(?:'not' failed|must NOT be valid)$/.test(detail) &&\n    typeof node.not === \"object\" &&\n    node.not !== null\n  ) {\n    const description = (node.not as Record<string, unknown>).description;\n    reason =\n      typeof description === \"string\"\n        ? description\n        : \"The value violates a 'not' schema constraint.\";\n  } else if (/pattern/.test(detail)) {\n    reason = \"The value does not satisfy its schema pattern.\";\n  }\n  return `Model output does not match the requested schema${at}. ${reason}`;\n}\n\nfunction boundedValidationFeedback(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  const encoded = Buffer.from(message, \"utf8\");\n  return encoded.byteLength <= MAX_VALIDATION_FEEDBACK_BYTES\n    ? message\n    : `${encoded.subarray(0, MAX_VALIDATION_FEEDBACK_BYTES).toString(\"utf8\")}…`;\n}\n\nfunction addModelUsage(\n  total: ModelReviewUsage,\n  next: ModelReviewUsage | undefined,\n): ModelReviewUsage {\n  if (next === undefined) return total;\n  return {\n    ...(total.inputTokens === undefined && next.inputTokens === undefined\n      ? {}\n      : { inputTokens: (total.inputTokens ?? 0) + (next.inputTokens ?? 0) }),\n    ...(total.outputTokens === undefined && next.outputTokens === undefined\n      ? {}\n      : { outputTokens: (total.outputTokens ?? 0) + (next.outputTokens ?? 0) }),\n  };\n}\n\nasync function waitForRetry(\n  delayMs: number,\n  signal: AbortSignal,\n  timeoutMs: number,\n): Promise<void> {\n  if (signal.aborted) {\n    throw modelTimeoutError(timeoutMs);\n  }\n  await new Promise<void>((resolve, reject) => {\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(modelTimeoutError(timeoutMs));\n    };\n    const timer = setTimeout(() => {\n      signal.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, delayMs);\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\nfunction modelTimeoutError(timeoutMs: number): ModelReviewError {\n  return new ModelReviewError(`Model review exceeded its ${timeoutMs}ms timeout.`, {\n    code: \"model_timeout\",\n    retryable: true,\n  });\n}\n\nfunction normalizeRequest(request: ModelReviewRequest): NormalizedModelReviewRequest {\n  if (typeof request !== \"object\" || request === null) {\n    throw new ModelReviewError(\"Model review request must be an object.\", {\n      code: \"invalid_model_request\",\n    });\n  }\n  if (typeof request.prompt !== \"string\" || request.prompt.trim() === \"\") {\n    throw new ModelReviewError(\"Model review prompt must be a non-empty string.\", {\n      code: \"invalid_model_request\",\n    });\n  }\n  const promptBytes = Buffer.byteLength(request.prompt, \"utf8\");\n  if (promptBytes > MAX_PROMPT_BYTES) {\n    throw new ModelReviewError(`Model review prompt exceeds ${MAX_PROMPT_BYTES} bytes.`, {\n      code: \"model_request_too_large\",\n    });\n  }\n  requireJsonSize(request.input, \"input\", MAX_INPUT_BYTES);\n  if (\n    typeof request.schema !== \"object\" ||\n    request.schema === null ||\n    Array.isArray(request.schema)\n  ) {\n    throw new ModelReviewError(\"Model review schema must be a JSON Schema object.\", {\n      code: \"invalid_model_schema\",\n    });\n  }\n  requireJsonSize(request.schema, \"schema\", MAX_SCHEMA_BYTES);\n\n  const maximumOutputTokens = request.budget?.maximumOutputTokens ?? DEFAULT_MAXIMUM_OUTPUT_TOKENS;\n  const timeoutMs = request.budget?.timeoutMs ?? DEFAULT_MODEL_TIMEOUT_MS;\n  requireIntegerRange(\n    maximumOutputTokens,\n    \"budget.maximumOutputTokens\",\n    1,\n    MAX_MAXIMUM_OUTPUT_TOKENS,\n  );\n  requireIntegerRange(timeoutMs, \"budget.timeoutMs\", 1, MAX_MODEL_TIMEOUT_MS);\n  return {\n    prompt: request.prompt,\n    input: request.input,\n    schema: request.schema,\n    budget: { maximumOutputTokens, timeoutMs },\n  };\n}\n\nfunction requireJsonSize(value: unknown, name: string, maximum: number): void {\n  let encoded: string | undefined;\n  try {\n    encoded = JSON.stringify(value);\n  } catch (error) {\n    throw new ModelReviewError(\n      `Model review ${name} must be JSON-serializable: ${error instanceof Error ? error.message : String(error)}`,\n      { code: \"invalid_model_request\" },\n    );\n  }\n  if (encoded === undefined) {\n    throw new ModelReviewError(`Model review ${name} must be JSON-serializable.`, {\n      code: \"invalid_model_request\",\n    });\n  }\n  if (Buffer.byteLength(encoded, \"utf8\") > maximum) {\n    throw new ModelReviewError(`Model review ${name} exceeds ${maximum} bytes.`, {\n      code: \"model_request_too_large\",\n    });\n  }\n}\n\nfunction requireIntegerRange(value: number, name: string, minimum: number, maximum: number): void {\n  if (!Number.isInteger(value) || value < minimum || value > maximum) {\n    throw new ModelReviewError(`${name} must be an integer from ${minimum} through ${maximum}.`, {\n      code: \"invalid_model_budget\",\n    });\n  }\n}\n\nfunction brokerTransportError(\n  error: unknown,\n  signal: AbortSignal,\n  timeoutMs: number,\n): ModelReviewError {\n  if (signal.aborted) return modelTimeoutError(timeoutMs);\n  if (error instanceof ModelReviewError) return error;\n  return new ModelReviewError(\n    `Model broker request failed: ${error instanceof Error ? error.message : String(error)}`,\n    { code: \"broker_unavailable\", retryable: true },\n  );\n}\n\nasync function readBoundedResponse(response: Response): Promise<string> {\n  const declared = response.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_RESPONSE_BYTES) {\n    throw new ModelReviewError(`Model broker response exceeds ${MAX_RESPONSE_BYTES} bytes.`, {\n      code: \"model_response_too_large\",\n    });\n  }\n  if (response.body === null) {\n    return \"\";\n  }\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) {\n      break;\n    }\n    size += value.byteLength;\n    if (size > MAX_RESPONSE_BYTES) {\n      await reader.cancel();\n      throw new ModelReviewError(`Model broker response exceeds ${MAX_RESPONSE_BYTES} bytes.`, {\n        code: \"model_response_too_large\",\n      });\n    }\n    chunks.push(value);\n  }\n  const joined = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    joined.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(joined);\n}\n\nfunction requireBrokerResponse(value: unknown): ModelBrokerResponse {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new ModelReviewError(\"Model broker response must be an object.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  const response = value as Partial<ModelBrokerResponse>;\n  if (response.protocolVersion !== ADVERSARY_MODEL_PROTOCOL_VERSION) {\n    throw new ModelReviewError(\n      `Model broker protocol version must be ${ADVERSARY_MODEL_PROTOCOL_VERSION}.`,\n      { code: \"unsupported_model_protocol\" },\n    );\n  }\n  if (typeof response.provider !== \"string\" || response.provider.trim() === \"\") {\n    throw new ModelReviewError(\"Model broker response provider must be a non-empty string.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  if (typeof response.model !== \"string\" || response.model.trim() === \"\") {\n    throw new ModelReviewError(\"Model broker response model must be a non-empty string.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  if (!Object.hasOwn(response, \"output\")) {\n    throw new ModelReviewError(\"Model broker response is missing output.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  if (response.usage !== undefined) {\n    validateUsage(response.usage);\n  }\n  return response as ModelBrokerResponse;\n}\n\nfunction validateUsage(value: unknown): asserts value is ModelReviewUsage {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new ModelReviewError(\"Model broker response usage must be an object.\", {\n      code: \"invalid_broker_response\",\n    });\n  }\n  for (const field of [\"inputTokens\", \"outputTokens\"] as const) {\n    const count = (value as ModelReviewUsage)[field];\n    if (count !== undefined && (!Number.isInteger(count) || count < 0)) {\n      throw new ModelReviewError(\n        `Model broker response usage.${field} must be a non-negative integer.`,\n        {\n          code: \"invalid_broker_response\",\n        },\n      );\n    }\n  }\n}\n\nfunction validateModelOutput(\n  schema: Record<string, unknown>,\n  output: unknown,\n  usage?: ModelReviewUsage,\n): void {\n  const ajv = new Ajv2020({ allErrors: true, strict: true });\n  let validate: ReturnType<Ajv2020[\"compile\"]>;\n  try {\n    validate = ajv.compile(schema);\n  } catch (error) {\n    throw new ModelReviewError(\n      `Model review schema is invalid: ${error instanceof Error ? error.message : String(error)}`,\n      { code: \"invalid_model_schema\" },\n    );\n  }\n  if (!validate(output)) {\n    const detail = ajv.errorsText(validate.errors, { separator: \"; \" });\n    throw new ModelReviewError(`Model output does not match the requested schema: ${detail}`, {\n      code: \"invalid_model_output\",\n      ...(usage === undefined ? {} : { usage }),\n    });\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adversarylabs/sdk",
-  "version": "0.1.41",
+  "version": "0.1.42",
   "description": "Small TypeScript SDK for authoring Adversaries.",
   "type": "module",
   "license": "Apache-2.0",