@agentproto/model-catalog 0.12.6 → 0.13.0

package/dist/{chunk-DM77NOWF.mjs → chunk-LMY5TLSF.mjs}

@@ -1,5 +1,5 @@
-import { listModels } from './chunk-VDHRRWLK.mjs';
-import { modelHasTag } from './chunk-KYJLELLO.mjs';
+import { listModels } from './chunk-H2TPFH4A.mjs';
+import { modelHasTag } from './chunk-3WNSSJTB.mjs';
 
 /**
  * @agentproto/model-catalog v0.1.0
@@ -130,5 +130,5 @@ function filterVoicesByProviders(voices, providerTokens) {
 }
 
 export { applyProfile, expandProviders, filterVoicesByProviders, getProviderGroup, getSurfaceProfile, groupForProvider, listProviderGroups, listSurfaceProfiles, listSurfaced, modelMatchesProfile };
-//# sourceMappingURL=chunk-DM77NOWF.mjs.map
-//# sourceMappingURL=chunk-DM77NOWF.mjs.map
+//# sourceMappingURL=chunk-LMY5TLSF.mjs.map
+//# sourceMappingURL=chunk-LMY5TLSF.mjs.map

package/dist/{chunk-DM77NOWF.mjs.map → chunk-LMY5TLSF.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/curation/index.ts"],"names":[],"mappings":";;;;;;;;;;AAgDA,IAAM,eAAA,GAA4C;AAAA,EAChD,EAAE,IAAI,QAAA,EAAU,KAAA,EAAO,UAAU,SAAA,EAAW,CAAC,QAAA,EAAU,iBAAiB,CAAA,EAAE;AAAA,EAC1E,EAAE,IAAI,QAAA,EAAU,KAAA,EAAO,UAAU,SAAA,EAAW,CAAC,QAAA,EAAU,aAAa,CAAA,EAAE;AAAA,EACtE,EAAE,IAAI,WAAA,EAAa,KAAA,EAAO,aAAa,SAAA,EAAW,CAAC,WAAW,CAAA,EAAE;AAAA,EAChE,EAAE,IAAI,SAAA,EAAW,KAAA,EAAO,WAAW,SAAA,EAAW,CAAC,SAAS,CAAA,EAAE;AAAA,EAC1D,EAAE,IAAI,YAAA,EAAc,KAAA,EAAO,cAAc,SAAA,EAAW,CAAC,YAAY,CAAA,EAAE;AAAA,EACnE,EAAE,IAAI,WAAA,EAAa,KAAA,EAAO,aAAa,SAAA,EAAW,CAAC,WAAW,CAAA,EAAE;AAAA,EAChE,EAAE,IAAI,UAAA,EAAY,KAAA,EAAO,YAAY,SAAA,EAAW,CAAC,UAAU,CAAA,EAAE;AAAA,EAC7D,EAAE,IAAI,YAAA,EAAc,KAAA,EAAO,cAAc,SAAA,EAAW,CAAC,YAAY,CAAA;AACnE,CAAA;AAEO,SAAS,kBAAA,GAA+C;AAC7D,EAAA,OAAO,eAAA;AACT;AAEO,SAAS,iBAAiB,EAAA,EAA2B;AAC1D,EAAA,MAAM,QAAQ,eAAA,CAAgB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA;AACnD,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,KAAA,GAAQ,gBAAgB,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,EAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AACtD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,EAAE,CAAA,UAAA,EAAa,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,iBACd,WAAA,EAC2B;AAC3B,EAAA,OAAO,gBAAgB,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,SAAA,CAAU,QAAA,CAAS,WAAW,CAAC,CAAA;AACpE;AAQO,SAAS,gBAAgB,MAAA,EAAqC;AACnE,EAAA,MAAM,GAAA,uBAAU,GAAA,EAAY;AAC5B,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,QAAQ,eAAA,CAAgB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACtD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,MAAW,CAAA,IAAK,KAAA,CAAM,SAAA,EAAW,GAAA,CAAI,IAAI,CAAC,CAAA;AAAA,IAC5C,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,IAAI,KAAK,CAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,GAAG,CAAA;AAChB;AAuBA,IAAM,gBAAA,GAA8C;AAAA,EAClD;AAAA,IACE,EAAA,EAAI,KAAA;AAAA,IACJ,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,MAAA;AAAA,IACJ,WAAA,EAAa,yBAAA;AAAA,IACb,KAAA,EAAO,CAAC,KAAK;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,QAAA;AAAA,IACJ,WAAA,EAAa,mBAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,OAAA;AAAA,IACJ,WAAA,EAAa,mBAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,OAAA;AAAA,IACJ,WAAA,EAAa,qCAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,OAAA;AAAA,IACJ,WAAA,EAAa,mCAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,WAAA;AAAA,IACJ,WAAA,EACE,+DAAA;AAAA,IACF,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,IACf,YAAA,EAAc,CAAC,KAAK;AAAA,GACtB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,WAAA;AAAA,IACJ,WAAA,EAAa,6CAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,IACf,YAAA,EAAc,CAAC,KAAK;AAAA;AAExB,CAAA;AAEO,SAAS,mBAAA,GAAiD;AAC/D,EAAA,OAAO,gBAAA;AACT;AAEO,SAAS,kBAAkB,EAAA,EAA4B;AAC5D,EAAA,MAAM,UAAU,gBAAA,CAAiB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA;AACtD,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,KAAA,GAAQ,iBAAiB,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,EAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AACvD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mCAAA,EAAsC,EAAE,CAAA,UAAA,EAAa,KAAK,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAYO,SAAS,mBAAA,CACd,OACA,OAAA,EACS;AACT,EAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AAC7C,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,CAAM,SAAS,KAAA,CAAM,IAAI,GAAG,OAAO,KAAA;AAAA,EAClD;AACA,EAAA,IAAI,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,SAAA,CAAU,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,OAAA,CAAQ,SAAS,CAAA;AAC9C,IAAA,IAAI,CAAC,KAAK,IAAA,CAAK,CAAA,GAAA,KAAO,YAAY,KAAA,EAAO,GAAG,CAAC,CAAA,EAAG,OAAO,KAAA;AAAA,EACzD;AACA,EAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,IAAA,IAAI,CAAC,QAAQ,YAAA,CAAa,KAAA,CAAM,SAAO,WAAA,CAAY,KAAA,EAAO,GAAG,CAAC,CAAA;AAC5D,MAAA,OAAO,KAAA;AAAA,EACX;AACA,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAA,GAAA,KAAO,YAAY,KAAA,EAAO,GAAG,CAAC,CAAA,EAAG,OAAO,KAAA;AAAA,EAClE;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,YAAA,CACd,QACA,OAAA,EACiB;AACjB,EAAA,OAAO,OAAO,MAAA,CAAO,CAAA,KAAA,KAAS,mBAAA,CAAoB,KAAA,EAAO,OAAO,CAAC,CAAA;AACnE;AAMO,SAAS,aAAa,OAAA,EAA0C;AACrE,EAAA,OAAO,YAAA,CAAa,UAAA,EAAW,EAAG,OAAO,CAAA;AAC3C;AASO,SAAS,uBAAA,CACd,QACA,cAAA,EACgB;AAChB,EAAA,IAAI,cAAA,CAAe,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AACxC,EAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,eAAA,CAAgB,cAAc,CAAC,CAAA;AACpD,EAAA,OAAO,OAAO,MAAA,CAAO,CAAA,CAAA,KAAK,KAAK,GAAA,CAAI,CAAA,CAAE,QAAQ,CAAC,CAAA;AAChD","file":"chunk-DM77NOWF.mjs","sourcesContent":["/**\n * Curation — what an app SURFACES from the catalog, distinct from\n * model-access (who MAY use a model: tier/scope policy). Curation is the\n * \"feature/provider catalog\" layer: an app composes views over the one\n * registry (\"all s2s voices from OpenAI OR Google\", \"images only\", …)\n * without touching the underlying data.\n *\n * Two registries, both following the canonical profile-registry shape\n * (`listX()` / `getX(id)` throwing with the known-id list):\n *\n *   1. PROVIDER GROUPS — a company (`openai`) maps to every provider tag\n *      it owns across kinds (`openai` for the LLM/audio company tag,\n *      `openai-realtime` for its voice engine). This is what reconciles\n *      the two provider vocabularies in the registry: audio MODELS are\n *      tagged by company, voices by engine. Curating by group spans both.\n *\n *   2. SURFACE PROFILES — named presets (`voice-s2s`, `images`, …) an app\n *      selects from. Permissive by default (`all`); apps narrow only when\n *      a picker should diverge.\n *\n * Selection precedence (caller's job): per-call arg → per-app/guild\n * config → env → `all` fallback.\n */\n\nimport {\n  listModels,\n  type CatalogKind,\n  type ResolvedModel,\n} from \"../registry/index.js\"\nimport { modelHasTag } from \"../enrichment/index.js\"\nimport type { CatalogVoice } from \"../schema/voice.js\"\n\n// ───────────────────────────────────────────────────────────────────────\n// Provider groups — company → provider tags across kinds\n// ───────────────────────────────────────────────────────────────────────\n\nexport interface ProviderGroup {\n  /** Canonical company id, e.g. \"openai\", \"google\". */\n  id: string\n  /** Display label. */\n  label: string\n  /**\n   * Every provider tag this company owns across kinds. Audio/image/LLM use\n   * the company tag (`openai`); the voice engine uses its own (`openai-realtime`).\n   */\n  providers: readonly string[]\n}\n\nconst PROVIDER_GROUPS: readonly ProviderGroup[] = [\n  { id: \"openai\", label: \"OpenAI\", providers: [\"openai\", \"openai-realtime\"] },\n  { id: \"google\", label: \"Google\", providers: [\"google\", \"gemini-live\"] },\n  { id: \"anthropic\", label: \"Anthropic\", providers: [\"anthropic\"] },\n  { id: \"minimax\", label: \"MiniMax\", providers: [\"minimax\"] },\n  { id: \"elevenlabs\", label: \"ElevenLabs\", providers: [\"elevenlabs\"] },\n  { id: \"replicate\", label: \"Replicate\", providers: [\"replicate\"] },\n  { id: \"deepgram\", label: \"Deepgram\", providers: [\"deepgram\"] },\n  { id: \"assemblyai\", label: \"AssemblyAI\", providers: [\"assemblyai\"] },\n]\n\nexport function listProviderGroups(): readonly ProviderGroup[] {\n  return PROVIDER_GROUPS\n}\n\nexport function getProviderGroup(id: string): ProviderGroup {\n  const group = PROVIDER_GROUPS.find(g => g.id === id)\n  if (!group) {\n    const known = PROVIDER_GROUPS.map(g => g.id).join(\", \")\n    throw new Error(`curation: unknown provider group \"${id}\". Known: ${known}`)\n  }\n  return group\n}\n\n/** The group that owns a raw provider tag, if any. */\nexport function groupForProvider(\n  providerTag: string\n): ProviderGroup | undefined {\n  return PROVIDER_GROUPS.find(g => g.providers.includes(providerTag))\n}\n\n/**\n * Expand a mixed list of provider-group ids and raw provider tags into the\n * flat set of provider tags to match against. A token that is a known\n * group id expands to its members; anything else passes through as a raw\n * tag (so callers can target an engine directly, e.g. `gemini-live`).\n */\nexport function expandProviders(tokens: readonly string[]): string[] {\n  const out = new Set<string>()\n  for (const token of tokens) {\n    const group = PROVIDER_GROUPS.find(g => g.id === token)\n    if (group) {\n      for (const p of group.providers) out.add(p)\n    } else {\n      out.add(token)\n    }\n  }\n  return [...out]\n}\n\n// ───────────────────────────────────────────────────────────────────────\n// Surface profiles — named views an app surfaces\n// ───────────────────────────────────────────────────────────────────────\n\nexport interface SurfaceProfile {\n  id: string\n  description: string\n  /** Restrict to these kinds. Undefined/empty = every kind. */\n  kinds?: readonly CatalogKind[]\n  /**\n   * Restrict to these provider GROUP ids or raw provider tags (OR-set).\n   * Expanded via `expandProviders`, so `[\"openai\"]` covers both the\n   * `openai` company tag and the `openai-realtime` voice engine.\n   */\n  providers?: readonly string[]\n  /** Require all of these capability tags (AND-set): `s2s`, `tts`, `edit`, … */\n  capabilities?: readonly string[]\n  /** Require all of these arbitrary tags (AND-set). */\n  tags?: readonly string[]\n}\n\nconst SURFACE_PROFILES: readonly SurfaceProfile[] = [\n  {\n    id: \"all\",\n    description: \"Everything the catalog offers — the permissive default\",\n  },\n  {\n    id: \"text\",\n    description: \"Text models (LLMs) only\",\n    kinds: [\"llm\"],\n  },\n  {\n    id: \"images\",\n    description: \"Image models only\",\n    kinds: [\"image\"],\n  },\n  {\n    id: \"video\",\n    description: \"Video models only\",\n    kinds: [\"video\"],\n  },\n  {\n    id: \"audio\",\n    description: \"Audio models (TTS / STT / s2s) only\",\n    kinds: [\"audio\"],\n  },\n  {\n    id: \"voice\",\n    description: \"Every curated voice, any provider\",\n    kinds: [\"voice\"],\n  },\n  {\n    id: \"voice-s2s\",\n    description:\n      \"Speech-to-speech voice engines (OpenAI Realtime, Gemini Live)\",\n    kinds: [\"voice\"],\n    capabilities: [\"s2s\"],\n  },\n  {\n    id: \"voice-tts\",\n    description: \"Sequential TTS voices (MiniMax, ElevenLabs)\",\n    kinds: [\"voice\"],\n    capabilities: [\"tts\"],\n  },\n]\n\nexport function listSurfaceProfiles(): readonly SurfaceProfile[] {\n  return SURFACE_PROFILES\n}\n\nexport function getSurfaceProfile(id: string): SurfaceProfile {\n  const profile = SURFACE_PROFILES.find(p => p.id === id)\n  if (!profile) {\n    const known = SURFACE_PROFILES.map(p => p.id).join(\", \")\n    throw new Error(\n      `curation: unknown surface profile \"${id}\". Known: ${known}`\n    )\n  }\n  return profile\n}\n\n// ───────────────────────────────────────────────────────────────────────\n// Filters\n// ───────────────────────────────────────────────────────────────────────\n\n/**\n * True iff a model passes a surface profile. Provider membership, like\n * capability/tag membership, is checked against the enrichment tag\n * vocabulary (every kind emits its provider as a tag), so this is uniform\n * across kinds and naturally spans the company/engine provider split.\n */\nexport function modelMatchesProfile(\n  model: ResolvedModel,\n  profile: SurfaceProfile\n): boolean {\n  if (profile.kinds && profile.kinds.length > 0) {\n    if (!profile.kinds.includes(model.kind)) return false\n  }\n  if (profile.providers && profile.providers.length > 0) {\n    const tags = expandProviders(profile.providers)\n    if (!tags.some(tag => modelHasTag(model, tag))) return false\n  }\n  if (profile.capabilities) {\n    if (!profile.capabilities.every(cap => modelHasTag(model, cap)))\n      return false\n  }\n  if (profile.tags) {\n    if (!profile.tags.every(tag => modelHasTag(model, tag))) return false\n  }\n  return true\n}\n\n/** Filter a model list down to what a surface profile exposes. */\nexport function applyProfile(\n  models: ResolvedModel[],\n  profile: SurfaceProfile\n): ResolvedModel[] {\n  return models.filter(model => modelMatchesProfile(model, profile))\n}\n\n/**\n * The catalog as a surface profile exposes it — `applyProfile` over the\n * full registry. The composable entry point for \"show me this view\".\n */\nexport function listSurfaced(profile: SurfaceProfile): ResolvedModel[] {\n  return applyProfile(listModels(), profile)\n}\n\n/**\n * Voice-list curation. The merged voice catalog (curated + live\n * ElevenLabs) is `CatalogVoice[]`, not `ResolvedModel[]`, so it gets its\n * own provider filter — same group-expansion semantics. Only the provider\n * facet of a profile applies to a raw voice list (kind is implicitly\n * voice; capability/tag live on the registry projection).\n */\nexport function filterVoicesByProviders(\n  voices: CatalogVoice[],\n  providerTokens: readonly string[]\n): CatalogVoice[] {\n  if (providerTokens.length === 0) return voices\n  const tags = new Set(expandProviders(providerTokens))\n  return voices.filter(v => tags.has(v.provider))\n}\n"]}
+{"version":3,"sources":["../src/curation/index.ts"],"names":[],"mappings":";;;;;;;;;;AAgDA,IAAM,eAAA,GAA4C;AAAA,EAChD,EAAE,IAAI,QAAA,EAAU,KAAA,EAAO,UAAU,SAAA,EAAW,CAAC,QAAA,EAAU,iBAAiB,CAAA,EAAE;AAAA,EAC1E,EAAE,IAAI,QAAA,EAAU,KAAA,EAAO,UAAU,SAAA,EAAW,CAAC,QAAA,EAAU,aAAa,CAAA,EAAE;AAAA,EACtE,EAAE,IAAI,WAAA,EAAa,KAAA,EAAO,aAAa,SAAA,EAAW,CAAC,WAAW,CAAA,EAAE;AAAA,EAChE,EAAE,IAAI,SAAA,EAAW,KAAA,EAAO,WAAW,SAAA,EAAW,CAAC,SAAS,CAAA,EAAE;AAAA,EAC1D,EAAE,IAAI,YAAA,EAAc,KAAA,EAAO,cAAc,SAAA,EAAW,CAAC,YAAY,CAAA,EAAE;AAAA,EACnE,EAAE,IAAI,WAAA,EAAa,KAAA,EAAO,aAAa,SAAA,EAAW,CAAC,WAAW,CAAA,EAAE;AAAA,EAChE,EAAE,IAAI,UAAA,EAAY,KAAA,EAAO,YAAY,SAAA,EAAW,CAAC,UAAU,CAAA,EAAE;AAAA,EAC7D,EAAE,IAAI,YAAA,EAAc,KAAA,EAAO,cAAc,SAAA,EAAW,CAAC,YAAY,CAAA;AACnE,CAAA;AAEO,SAAS,kBAAA,GAA+C;AAC7D,EAAA,OAAO,eAAA;AACT;AAEO,SAAS,iBAAiB,EAAA,EAA2B;AAC1D,EAAA,MAAM,QAAQ,eAAA,CAAgB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA;AACnD,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,KAAA,GAAQ,gBAAgB,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,EAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AACtD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,EAAE,CAAA,UAAA,EAAa,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,iBACd,WAAA,EAC2B;AAC3B,EAAA,OAAO,gBAAgB,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,SAAA,CAAU,QAAA,CAAS,WAAW,CAAC,CAAA;AACpE;AAQO,SAAS,gBAAgB,MAAA,EAAqC;AACnE,EAAA,MAAM,GAAA,uBAAU,GAAA,EAAY;AAC5B,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,QAAQ,eAAA,CAAgB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACtD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,MAAW,CAAA,IAAK,KAAA,CAAM,SAAA,EAAW,GAAA,CAAI,IAAI,CAAC,CAAA;AAAA,IAC5C,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,IAAI,KAAK,CAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,GAAG,CAAA;AAChB;AAuBA,IAAM,gBAAA,GAA8C;AAAA,EAClD;AAAA,IACE,EAAA,EAAI,KAAA;AAAA,IACJ,WAAA,EAAa;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,MAAA;AAAA,IACJ,WAAA,EAAa,yBAAA;AAAA,IACb,KAAA,EAAO,CAAC,KAAK;AAAA,GACf;AAAA,EACA;AAAA,IACE,EAAA,EAAI,QAAA;AAAA,IACJ,WAAA,EAAa,mBAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,OAAA;AAAA,IACJ,WAAA,EAAa,mBAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,OAAA;AAAA,IACJ,WAAA,EAAa,qCAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,OAAA;AAAA,IACJ,WAAA,EAAa,mCAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO;AAAA,GACjB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,WAAA;AAAA,IACJ,WAAA,EACE,+DAAA;AAAA,IACF,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,IACf,YAAA,EAAc,CAAC,KAAK;AAAA,GACtB;AAAA,EACA;AAAA,IACE,EAAA,EAAI,WAAA;AAAA,IACJ,WAAA,EAAa,6CAAA;AAAA,IACb,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,IACf,YAAA,EAAc,CAAC,KAAK;AAAA;AAExB,CAAA;AAEO,SAAS,mBAAA,GAAiD;AAC/D,EAAA,OAAO,gBAAA;AACT;AAEO,SAAS,kBAAkB,EAAA,EAA4B;AAC5D,EAAA,MAAM,UAAU,gBAAA,CAAiB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA;AACtD,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,KAAA,GAAQ,iBAAiB,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,EAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AACvD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mCAAA,EAAsC,EAAE,CAAA,UAAA,EAAa,KAAK,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAYO,SAAS,mBAAA,CACd,OACA,OAAA,EACS;AACT,EAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AAC7C,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,CAAM,SAAS,KAAA,CAAM,IAAI,GAAG,OAAO,KAAA;AAAA,EAClD;AACA,EAAA,IAAI,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,SAAA,CAAU,SAAS,CAAA,EAAG;AACrD,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,OAAA,CAAQ,SAAS,CAAA;AAC9C,IAAA,IAAI,CAAC,KAAK,IAAA,CAAK,CAAA,GAAA,KAAO,YAAY,KAAA,EAAO,GAAG,CAAC,CAAA,EAAG,OAAO,KAAA;AAAA,EACzD;AACA,EAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,IAAA,IAAI,CAAC,QAAQ,YAAA,CAAa,KAAA,CAAM,SAAO,WAAA,CAAY,KAAA,EAAO,GAAG,CAAC,CAAA;AAC5D,MAAA,OAAO,KAAA;AAAA,EACX;AACA,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAA,GAAA,KAAO,YAAY,KAAA,EAAO,GAAG,CAAC,CAAA,EAAG,OAAO,KAAA;AAAA,EAClE;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,YAAA,CACd,QACA,OAAA,EACiB;AACjB,EAAA,OAAO,OAAO,MAAA,CAAO,CAAA,KAAA,KAAS,mBAAA,CAAoB,KAAA,EAAO,OAAO,CAAC,CAAA;AACnE;AAMO,SAAS,aAAa,OAAA,EAA0C;AACrE,EAAA,OAAO,YAAA,CAAa,UAAA,EAAW,EAAG,OAAO,CAAA;AAC3C;AASO,SAAS,uBAAA,CACd,QACA,cAAA,EACgB;AAChB,EAAA,IAAI,cAAA,CAAe,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AACxC,EAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,eAAA,CAAgB,cAAc,CAAC,CAAA;AACpD,EAAA,OAAO,OAAO,MAAA,CAAO,CAAA,CAAA,KAAK,KAAK,GAAA,CAAI,CAAA,CAAE,QAAQ,CAAC,CAAA;AAChD","file":"chunk-LMY5TLSF.mjs","sourcesContent":["/**\n * Curation — what an app SURFACES from the catalog, distinct from\n * model-access (who MAY use a model: tier/scope policy). Curation is the\n * \"feature/provider catalog\" layer: an app composes views over the one\n * registry (\"all s2s voices from OpenAI OR Google\", \"images only\", …)\n * without touching the underlying data.\n *\n * Two registries, both following the canonical profile-registry shape\n * (`listX()` / `getX(id)` throwing with the known-id list):\n *\n *   1. PROVIDER GROUPS — a company (`openai`) maps to every provider tag\n *      it owns across kinds (`openai` for the LLM/audio company tag,\n *      `openai-realtime` for its voice engine). This is what reconciles\n *      the two provider vocabularies in the registry: audio MODELS are\n *      tagged by company, voices by engine. Curating by group spans both.\n *\n *   2. SURFACE PROFILES — named presets (`voice-s2s`, `images`, …) an app\n *      selects from. Permissive by default (`all`); apps narrow only when\n *      a picker should diverge.\n *\n * Selection precedence (caller's job): per-call arg → per-app/guild\n * config → env → `all` fallback.\n */\n\nimport {\n  listModels,\n  type CatalogKind,\n  type ResolvedModel,\n} from \"../registry/index.js\"\nimport { modelHasTag } from \"../enrichment/index.js\"\nimport type { CatalogVoice } from \"../schema/voice.js\"\n\n// ───────────────────────────────────────────────────────────────────────\n// Provider groups — company → provider tags across kinds\n// ───────────────────────────────────────────────────────────────────────\n\nexport interface ProviderGroup {\n  /** Canonical company id, e.g. \"openai\", \"google\". */\n  id: string\n  /** Display label. */\n  label: string\n  /**\n   * Every provider tag this company owns across kinds. Audio/image/LLM use\n   * the company tag (`openai`); the voice engine uses its own (`openai-realtime`).\n   */\n  providers: readonly string[]\n}\n\nconst PROVIDER_GROUPS: readonly ProviderGroup[] = [\n  { id: \"openai\", label: \"OpenAI\", providers: [\"openai\", \"openai-realtime\"] },\n  { id: \"google\", label: \"Google\", providers: [\"google\", \"gemini-live\"] },\n  { id: \"anthropic\", label: \"Anthropic\", providers: [\"anthropic\"] },\n  { id: \"minimax\", label: \"MiniMax\", providers: [\"minimax\"] },\n  { id: \"elevenlabs\", label: \"ElevenLabs\", providers: [\"elevenlabs\"] },\n  { id: \"replicate\", label: \"Replicate\", providers: [\"replicate\"] },\n  { id: \"deepgram\", label: \"Deepgram\", providers: [\"deepgram\"] },\n  { id: \"assemblyai\", label: \"AssemblyAI\", providers: [\"assemblyai\"] },\n]\n\nexport function listProviderGroups(): readonly ProviderGroup[] {\n  return PROVIDER_GROUPS\n}\n\nexport function getProviderGroup(id: string): ProviderGroup {\n  const group = PROVIDER_GROUPS.find(g => g.id === id)\n  if (!group) {\n    const known = PROVIDER_GROUPS.map(g => g.id).join(\", \")\n    throw new Error(`curation: unknown provider group \"${id}\". Known: ${known}`)\n  }\n  return group\n}\n\n/** The group that owns a raw provider tag, if any. */\nexport function groupForProvider(\n  providerTag: string\n): ProviderGroup | undefined {\n  return PROVIDER_GROUPS.find(g => g.providers.includes(providerTag))\n}\n\n/**\n * Expand a mixed list of provider-group ids and raw provider tags into the\n * flat set of provider tags to match against. A token that is a known\n * group id expands to its members; anything else passes through as a raw\n * tag (so callers can target an engine directly, e.g. `gemini-live`).\n */\nexport function expandProviders(tokens: readonly string[]): string[] {\n  const out = new Set<string>()\n  for (const token of tokens) {\n    const group = PROVIDER_GROUPS.find(g => g.id === token)\n    if (group) {\n      for (const p of group.providers) out.add(p)\n    } else {\n      out.add(token)\n    }\n  }\n  return [...out]\n}\n\n// ───────────────────────────────────────────────────────────────────────\n// Surface profiles — named views an app surfaces\n// ───────────────────────────────────────────────────────────────────────\n\nexport interface SurfaceProfile {\n  id: string\n  description: string\n  /** Restrict to these kinds. Undefined/empty = every kind. */\n  kinds?: readonly CatalogKind[]\n  /**\n   * Restrict to these provider GROUP ids or raw provider tags (OR-set).\n   * Expanded via `expandProviders`, so `[\"openai\"]` covers both the\n   * `openai` company tag and the `openai-realtime` voice engine.\n   */\n  providers?: readonly string[]\n  /** Require all of these capability tags (AND-set): `s2s`, `tts`, `edit`, … */\n  capabilities?: readonly string[]\n  /** Require all of these arbitrary tags (AND-set). */\n  tags?: readonly string[]\n}\n\nconst SURFACE_PROFILES: readonly SurfaceProfile[] = [\n  {\n    id: \"all\",\n    description: \"Everything the catalog offers — the permissive default\",\n  },\n  {\n    id: \"text\",\n    description: \"Text models (LLMs) only\",\n    kinds: [\"llm\"],\n  },\n  {\n    id: \"images\",\n    description: \"Image models only\",\n    kinds: [\"image\"],\n  },\n  {\n    id: \"video\",\n    description: \"Video models only\",\n    kinds: [\"video\"],\n  },\n  {\n    id: \"audio\",\n    description: \"Audio models (TTS / STT / s2s) only\",\n    kinds: [\"audio\"],\n  },\n  {\n    id: \"voice\",\n    description: \"Every curated voice, any provider\",\n    kinds: [\"voice\"],\n  },\n  {\n    id: \"voice-s2s\",\n    description:\n      \"Speech-to-speech voice engines (OpenAI Realtime, Gemini Live)\",\n    kinds: [\"voice\"],\n    capabilities: [\"s2s\"],\n  },\n  {\n    id: \"voice-tts\",\n    description: \"Sequential TTS voices (MiniMax, ElevenLabs)\",\n    kinds: [\"voice\"],\n    capabilities: [\"tts\"],\n  },\n]\n\nexport function listSurfaceProfiles(): readonly SurfaceProfile[] {\n  return SURFACE_PROFILES\n}\n\nexport function getSurfaceProfile(id: string): SurfaceProfile {\n  const profile = SURFACE_PROFILES.find(p => p.id === id)\n  if (!profile) {\n    const known = SURFACE_PROFILES.map(p => p.id).join(\", \")\n    throw new Error(\n      `curation: unknown surface profile \"${id}\". Known: ${known}`\n    )\n  }\n  return profile\n}\n\n// ───────────────────────────────────────────────────────────────────────\n// Filters\n// ───────────────────────────────────────────────────────────────────────\n\n/**\n * True iff a model passes a surface profile. Provider membership, like\n * capability/tag membership, is checked against the enrichment tag\n * vocabulary (every kind emits its provider as a tag), so this is uniform\n * across kinds and naturally spans the company/engine provider split.\n */\nexport function modelMatchesProfile(\n  model: ResolvedModel,\n  profile: SurfaceProfile\n): boolean {\n  if (profile.kinds && profile.kinds.length > 0) {\n    if (!profile.kinds.includes(model.kind)) return false\n  }\n  if (profile.providers && profile.providers.length > 0) {\n    const tags = expandProviders(profile.providers)\n    if (!tags.some(tag => modelHasTag(model, tag))) return false\n  }\n  if (profile.capabilities) {\n    if (!profile.capabilities.every(cap => modelHasTag(model, cap)))\n      return false\n  }\n  if (profile.tags) {\n    if (!profile.tags.every(tag => modelHasTag(model, tag))) return false\n  }\n  return true\n}\n\n/** Filter a model list down to what a surface profile exposes. */\nexport function applyProfile(\n  models: ResolvedModel[],\n  profile: SurfaceProfile\n): ResolvedModel[] {\n  return models.filter(model => modelMatchesProfile(model, profile))\n}\n\n/**\n * The catalog as a surface profile exposes it — `applyProfile` over the\n * full registry. The composable entry point for \"show me this view\".\n */\nexport function listSurfaced(profile: SurfaceProfile): ResolvedModel[] {\n  return applyProfile(listModels(), profile)\n}\n\n/**\n * Voice-list curation. The merged voice catalog (curated + live\n * ElevenLabs) is `CatalogVoice[]`, not `ResolvedModel[]`, so it gets its\n * own provider filter — same group-expansion semantics. Only the provider\n * facet of a profile applies to a raw voice list (kind is implicitly\n * voice; capability/tag live on the registry projection).\n */\nexport function filterVoicesByProviders(\n  voices: CatalogVoice[],\n  providerTokens: readonly string[]\n): CatalogVoice[] {\n  if (providerTokens.length === 0) return voices\n  const tags = new Set(expandProviders(providerTokens))\n  return voices.filter(v => tags.has(v.provider))\n}\n"]}

package/dist/{chunk-SKSUC4MT.mjs → chunk-PITHETND.mjs}

@@ -1,4 +1,4 @@
-import { modelMatchesPriceTier, modelHasTag } from './chunk-KYJLELLO.mjs';
+import { modelMatchesPriceTier, modelHasTag } from './chunk-3WNSSJTB.mjs';
 
 /**
  * @agentproto/model-catalog v0.1.0
@@ -112,5 +112,5 @@ function evaluateAccess(input) {
 }
 
 export { evaluateAccess, evaluateCatalogDefaults };
-//# sourceMappingURL=chunk-SKSUC4MT.mjs.map
-//# sourceMappingURL=chunk-SKSUC4MT.mjs.map
+//# sourceMappingURL=chunk-PITHETND.mjs.map
+//# sourceMappingURL=chunk-PITHETND.mjs.map

package/dist/{chunk-SKSUC4MT.mjs.map → chunk-PITHETND.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/access/catalog-defaults.ts","../src/access/evaluate.ts"],"names":[],"mappings":";;;;;;;;;AAmBO,SAAS,wBACd,KAAA,EACwB;AACxB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,KAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,6BAAA,EAA8B;AAAA,IAChE,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC;AAAA;AAEtE;;;ACXA,IAAM,qBAAA,GAGF;AAAA,EACF,GAAA,EAAK,CAAA;AAAA,EACL,QAAA,EAAU,CAAA;AAAA,EACV,SAAA,EAAW,CAAA;AAAA,EACX,IAAA,EAAM;AACR,CAAA;AAgBA,IAAM,yCAAyB,IAAI,GAAA,CAAI,CAAC,MAAA,EAAQ,YAAY,CAAC,CAAA;AAS7D,SAAS,WAAA,CAAY,MAAkB,KAAA,EAA+B;AACpE,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,QAAQ,OAAO,IAAA;AAAM,IACnB,KAAK,OAAA;AACH,MAAA,OAAO,MAAA,CAAO,OAAO,KAAA,CAAM,EAAA;AAAA,IAC7B,KAAK,MAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,KAAA,CAAM,IAAA;AAAA,IAChC,KAAK,UAAA,EAAY;AACf,MAAA,QAAQ,MAAM,IAAA;AAAM,QAClB,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,KAAA,CAAM,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACzC,KAAK,KAAA;AAWH,UAAA,OACE,KAAA,CAAM,WAAA,CAAY,UAAA,CAAW,CAAA,EAAG,OAAO,KAAK,CAAA,CAAA,CAAG,CAAA,IAC/C,KAAA,CAAM,WAAA,CAAY,QAAA,CAAS,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA;AAEpD,IACF;AAAA,IACA,KAAK,KAAA;AACH,MAAA,OAAO,WAAA,CAAY,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IACxC,KAAK,WAAA;AACH,MAAA,OAAO,qBAAA,CAAsB,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA;AAEtD;AAEO,SAAS,eAAe,KAAA,EAAwC;AACrE,EAAA,MAAM,EAAE,OAAO,QAAA,EAAU,KAAA,GAAQ,EAAC,EAAG,UAAA,GAAa,OAAM,GAAI,KAAA;AAK5D,EAAA,IACE,QAAA,IACA,QAAA,CAAS,KAAA,CAAM,MAAA,GAAS,KACxB,KAAA,CAAM,IAAA,KAAS,OAAA,IACf,CAAC,QAAA,CAAS,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EACnC;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,CAAA,2BAAA,EAA8B,KAAA,CAAM,IAAI,CAAA;AAAA,KAClD;AAAA,EACF;AAMA,EAAA,MAAM,eAAe,KAAA,CAAM,MAAA;AAAA,IACzB,CAAA,CAAA,KACE,EAAE,MAAA,CAAO,IAAA,KAAS,WAAY,CAAA,CAAE,MAAA,CAA0B,OAAO,KAAA,CAAM;AAAA,GAC3E;AACA,EAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,MAAA,GACJ,aAAa,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,MAAA,KAAW,OAAO,CAAA,IAAK,YAAA,CAAa,CAAC,CAAA;AAChE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,MAC3B,MAAA,EAAQ,CAAA,WAAA,EAAc,MAAA,CAAO,MAAM,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,KAChF;AAAA,EACF;AAKA,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAA0B;AACpD,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,CAAA,GAAI,KAAK,MAAA,CAAO,IAAA;AACtB,IAAA,IAAI,MAAM,OAAA,EAAS;AACnB,IAAA,IAAI,CAAC,WAAA,CAAY,IAAA,EAAM,KAAK,CAAA,EAAG;AAC/B,IAAA,IAAI,IAAA,CAAK,WAAW,OAAA,EAAS;AAE3B,MAAA,IACE,UAAA,IACA,IAAA,CAAK,MAAA,CAAO,IAAA,KAAS,eACrB,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,IACtB,CAAC,sBAAA,CAAuB,GAAA,CAAI,IAAA,CAAK,MAAA,IAAU,EAAE,CAAA,EAC7C;AACA,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,sBAAsB,CAAC,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,GAAA,CAAI,IAAI,KAAK,EAAC;AACzC,IAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AACd,IAAA,aAAA,CAAc,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,EAC9B;AAEA,EAAA,IAAI,aAAA,CAAc,OAAO,CAAA,EAAG;AAG1B,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AACnE,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,SAAA,GAAY,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AACxC,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,SAAS,OAAA,IAAW,OAAA;AAC1B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAI,MAAA,CAAO,MAAA;AACjB,MAAA,MAAM,SAAA,GACJ,CAAA,CAAE,IAAA,KAAS,OAAA,GACP,CAAA,MAAA,EAAU,CAAA,CAAqB,EAAE,CAAA,CAAA,GACjC,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAK,EAAwB,KAAK,CAAA,CAAA;AACjD,MAAA,MAAM,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAA;AACnD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,QAC3B,QAAQ,CAAA,KAAA,EAAQ,SAAS,IAAI,MAAA,CAAO,MAAM,GAAG,IAAI,CAAA;AAAA,OACnD;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,QAAA,GAAW,wBAAwB,KAAK,CAAA;AAC9C,EAAA,OAAO,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC9D","file":"chunk-SKSUC4MT.mjs","sourcesContent":["/**\n * Catalog-flag defaults — the layer that runs before any workspace\n * override. Mirrors the access-control plan:\n *   - Default-allow: `lifecycle = stable && agentVisible = true`\n *   - Default-block: `lifecycle = preview` or `lifecycle = deprecated`\n *   - Default-block: any model with `agentVisible = false`\n *\n * Legacy catalog data (image/video) carries `agentVisible` but not\n * `lifecycle` — until v2 normalization, lifecycle defaults to \"stable\"\n * for every entry. LLM and audio entries default to allow (curated).\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\n\nexport interface CatalogDefaultDecision {\n  allowed: boolean\n  reason: string\n}\n\nexport function evaluateCatalogDefaults(\n  model: ResolvedModel\n): CatalogDefaultDecision {\n  switch (model.kind) {\n    case \"image\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"video\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"llm\":\n      // LLM entries are curated — every catalog entry is visible.\n      return { allowed: true, reason: \"catalog-default:llm-curated\" }\n    case \"audio\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"voice\":\n      // Voice metadata catalog is curated.\n      return { allowed: true, reason: \"catalog-default:voice-curated\" }\n  }\n}\n","/**\n * Access evaluator — resolves whether a workspace can use a given model.\n *\n * Resolution order:\n *   1. App scope — if the app opts out of the model's kind, deny.\n *   2. Workspace explicit `model:<id>` rule — terminal allow or block.\n *   3. Workspace tag / provider / priceTier / kind rules — most-specific\n *      band wins. Within a band, block wins. Specificity ladder:\n *        tag (4) > provider (3) > priceTier (2) > kind (1).\n *      Rationale: an explicit `allow tag:image:generate` should beat a\n *      blanket `block kind:llm`. The tag rule is the more specific\n *      intent and reflects the operator's allowlist.\n *   4. Catalog defaults — `lifecycle=stable && agentVisible=true` → allow.\n *\n * BYOK relaxation: when `byokActive`, `priceTier=premium` blocks are\n * bypassed (BYOK users pay providers directly). NSFW / compliance\n * blocks NEVER bypass.\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\nimport { modelHasTag, modelMatchesPriceTier } from \"../enrichment/index.js\"\nimport { evaluateCatalogDefaults } from \"./catalog-defaults.js\"\nimport type { AccessRule, AppScope } from \"./types.js\"\n\n/**\n * Specificity of non-model rule targets. Higher = more specific.\n * Most-specific band wins; within a band, block wins.\n *\n * Mirrors the scope specificity logic in\n * `packages/core/src/domain/model-access/types.ts:79`.\n */\nconst NON_MODEL_SPECIFICITY: Record<\n  \"tag\" | \"provider\" | \"priceTier\" | \"kind\",\n  number\n> = {\n  tag: 4,\n  provider: 3,\n  priceTier: 2,\n  kind: 1,\n}\n\nexport interface AccessEvalInput {\n  model: ResolvedModel\n  appScope?: AppScope\n  /** Workspace overrides; v1 callers pass `[]`. */\n  rules?: AccessRule[]\n  byokActive?: boolean\n}\n\nexport interface AccessDecision {\n  allowed: boolean\n  /** Stable token for logs/metrics. */\n  reason: string\n}\n\nconst NSFW_TAG_BLOCK_REASONS = new Set([\"nsfw\", \"compliance\"])\n\n/**\n * Returns true iff the rule matches the resolved model.\n *\n * Tag and priceTier matching go through the enrichment layer\n * (`@agentproto/model-catalog/enrichment`) — explicit per-model\n * enrichment wins, heuristic fallback fills the rest.\n */\nfunction ruleMatches(rule: AccessRule, model: ResolvedModel): boolean {\n  const target = rule.target\n  switch (target.kind) {\n    case \"model\":\n      return target.id === model.id\n    case \"kind\":\n      return target.value === model.kind\n    case \"provider\": {\n      switch (model.kind) {\n        case \"image\":\n          return model.def.provider === target.value\n        case \"video\":\n          return model.def.provider === target.value\n        case \"audio\":\n          return model.def.provider === target.value\n        case \"voice\":\n          return model.voice.provider === target.value\n        case \"llm\":\n          // No provider field on LLM entries — best-effort by canonical id\n          // structure. All LLM ids follow `<vendor>/…` or\n          // `<router>/<vendor>/…` conventions, so check for an exact\n          // prefix segment or an interior `/<vendor>/` segment.\n          // NOTE: avoid plain `.includes(target.value)` — it would\n          // false-positive on any id that merely *contains* the substring\n          // (e.g. \"not-google/…\" matching provider \"google\").\n          // A `<router>/<vendor>/…` id (e.g. `openrouter/anthropic/…`) can\n          // match BOTH a `router` and a `vendor` provider rule — that is\n          // intentional; band resolution (most-specific wins) reconciles it.\n          return (\n            model.canonicalId.startsWith(`${target.value}/`) ||\n            model.canonicalId.includes(`/${target.value}/`)\n          )\n      }\n    }\n    case \"tag\":\n      return modelHasTag(model, target.value)\n    case \"priceTier\":\n      return modelMatchesPriceTier(model, target.value)\n  }\n}\n\nexport function evaluateAccess(input: AccessEvalInput): AccessDecision {\n  const { model, appScope, rules = [], byokActive = false } = input\n\n  // 1. App scope. `voice` rows are metadata, not callable models — they\n  // bypass kind-scope checks (gating happens on the audio MODEL the\n  // voice plays through).\n  if (\n    appScope &&\n    appScope.kinds.length > 0 &&\n    model.kind !== \"voice\" &&\n    !appScope.kinds.includes(model.kind)\n  ) {\n    return {\n      allowed: false,\n      reason: `app-scope:kind-not-allowed:${model.kind}`,\n    }\n  }\n\n  // 2. Explicit per-model rules. Most specific band — terminal if any\n  // matches. Within the band, block wins over allow (so a workspace\n  // `block model:X` beats a tier-policy `allow model:X` regardless of\n  // the order they appear in the merged rule list).\n  const modelMatches = rules.filter(\n    r =>\n      r.target.kind === \"model\" && (r.target as { id: string }).id === model.id\n  )\n  if (modelMatches.length > 0) {\n    const winner =\n      modelMatches.find(r => r.effect === \"block\") ?? modelMatches[0]!\n    return {\n      allowed: winner.effect === \"allow\",\n      reason: `rule:model:${winner.effect}${winner.reason ? `:${winner.reason}` : \"\"}`,\n    }\n  }\n\n  // 3. Tag / provider / priceTier / kind rules. Most-specific band wins;\n  // within a band, block wins. BYOK relaxation drops priceTier=premium\n  // blocks before specificity grouping.\n  const matchedByBand = new Map<number, AccessRule[]>()\n  for (const rule of rules) {\n    const k = rule.target.kind\n    if (k === \"model\") continue\n    if (!ruleMatches(rule, model)) continue\n    if (rule.effect === \"block\") {\n      // BYOK relaxation — same condition as before the refactor.\n      if (\n        byokActive &&\n        rule.target.kind === \"priceTier\" &&\n        rule.target.value === \"premium\" &&\n        !NSFW_TAG_BLOCK_REASONS.has(rule.reason ?? \"\")\n      ) {\n        continue\n      }\n    }\n    const band = NON_MODEL_SPECIFICITY[k]\n    const list = matchedByBand.get(band) ?? []\n    list.push(rule)\n    matchedByBand.set(band, list)\n  }\n\n  if (matchedByBand.size > 0) {\n    // Walk bands from most-specific to least-specific. The first band\n    // with any matching rule decides — block wins within the band.\n    const bands = Array.from(matchedByBand.keys()).sort((a, b) => b - a)\n    for (const band of bands) {\n      const bandRules = matchedByBand.get(band)!\n      const blocked = bandRules.find(r => r.effect === \"block\")\n      const allowed = bandRules.find(r => r.effect === \"allow\")\n      const winner = blocked ?? allowed\n      if (!winner) continue\n      const t = winner.target\n      const targetStr =\n        t.kind === \"model\"\n          ? `model:${(t as { id: string }).id}`\n          : `${t.kind}:${(t as { value: string }).value}`\n      const tail = winner.reason ? `:${winner.reason}` : \"\"\n      return {\n        allowed: winner.effect === \"allow\",\n        reason: `rule:${targetStr}:${winner.effect}${tail}`,\n      }\n    }\n  }\n\n  // 4. Catalog defaults.\n  const fallback = evaluateCatalogDefaults(model)\n  return { allowed: fallback.allowed, reason: fallback.reason }\n}\n"]}
+{"version":3,"sources":["../src/access/catalog-defaults.ts","../src/access/evaluate.ts"],"names":[],"mappings":";;;;;;;;;AAmBO,SAAS,wBACd,KAAA,EACwB;AACxB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,KAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,6BAAA,EAA8B;AAAA,IAChE,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC;AAAA;AAEtE;;;ACXA,IAAM,qBAAA,GAGF;AAAA,EACF,GAAA,EAAK,CAAA;AAAA,EACL,QAAA,EAAU,CAAA;AAAA,EACV,SAAA,EAAW,CAAA;AAAA,EACX,IAAA,EAAM;AACR,CAAA;AAgBA,IAAM,yCAAyB,IAAI,GAAA,CAAI,CAAC,MAAA,EAAQ,YAAY,CAAC,CAAA;AAS7D,SAAS,WAAA,CAAY,MAAkB,KAAA,EAA+B;AACpE,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,QAAQ,OAAO,IAAA;AAAM,IACnB,KAAK,OAAA;AACH,MAAA,OAAO,MAAA,CAAO,OAAO,KAAA,CAAM,EAAA;AAAA,IAC7B,KAAK,MAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,KAAA,CAAM,IAAA;AAAA,IAChC,KAAK,UAAA,EAAY;AACf,MAAA,QAAQ,MAAM,IAAA;AAAM,QAClB,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,KAAA,CAAM,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACzC,KAAK,KAAA;AAWH,UAAA,OACE,KAAA,CAAM,WAAA,CAAY,UAAA,CAAW,CAAA,EAAG,OAAO,KAAK,CAAA,CAAA,CAAG,CAAA,IAC/C,KAAA,CAAM,WAAA,CAAY,QAAA,CAAS,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA;AAEpD,IACF;AAAA,IACA,KAAK,KAAA;AACH,MAAA,OAAO,WAAA,CAAY,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IACxC,KAAK,WAAA;AACH,MAAA,OAAO,qBAAA,CAAsB,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA;AAEtD;AAEO,SAAS,eAAe,KAAA,EAAwC;AACrE,EAAA,MAAM,EAAE,OAAO,QAAA,EAAU,KAAA,GAAQ,EAAC,EAAG,UAAA,GAAa,OAAM,GAAI,KAAA;AAK5D,EAAA,IACE,QAAA,IACA,QAAA,CAAS,KAAA,CAAM,MAAA,GAAS,KACxB,KAAA,CAAM,IAAA,KAAS,OAAA,IACf,CAAC,QAAA,CAAS,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EACnC;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,CAAA,2BAAA,EAA8B,KAAA,CAAM,IAAI,CAAA;AAAA,KAClD;AAAA,EACF;AAMA,EAAA,MAAM,eAAe,KAAA,CAAM,MAAA;AAAA,IACzB,CAAA,CAAA,KACE,EAAE,MAAA,CAAO,IAAA,KAAS,WAAY,CAAA,CAAE,MAAA,CAA0B,OAAO,KAAA,CAAM;AAAA,GAC3E;AACA,EAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,MAAA,GACJ,aAAa,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,MAAA,KAAW,OAAO,CAAA,IAAK,YAAA,CAAa,CAAC,CAAA;AAChE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,MAC3B,MAAA,EAAQ,CAAA,WAAA,EAAc,MAAA,CAAO,MAAM,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,KAChF;AAAA,EACF;AAKA,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAA0B;AACpD,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,CAAA,GAAI,KAAK,MAAA,CAAO,IAAA;AACtB,IAAA,IAAI,MAAM,OAAA,EAAS;AACnB,IAAA,IAAI,CAAC,WAAA,CAAY,IAAA,EAAM,KAAK,CAAA,EAAG;AAC/B,IAAA,IAAI,IAAA,CAAK,WAAW,OAAA,EAAS;AAE3B,MAAA,IACE,UAAA,IACA,IAAA,CAAK,MAAA,CAAO,IAAA,KAAS,eACrB,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,IACtB,CAAC,sBAAA,CAAuB,GAAA,CAAI,IAAA,CAAK,MAAA,IAAU,EAAE,CAAA,EAC7C;AACA,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,sBAAsB,CAAC,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,GAAA,CAAI,IAAI,KAAK,EAAC;AACzC,IAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AACd,IAAA,aAAA,CAAc,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,EAC9B;AAEA,EAAA,IAAI,aAAA,CAAc,OAAO,CAAA,EAAG;AAG1B,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AACnE,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,SAAA,GAAY,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AACxC,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,SAAS,OAAA,IAAW,OAAA;AAC1B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAI,MAAA,CAAO,MAAA;AACjB,MAAA,MAAM,SAAA,GACJ,CAAA,CAAE,IAAA,KAAS,OAAA,GACP,CAAA,MAAA,EAAU,CAAA,CAAqB,EAAE,CAAA,CAAA,GACjC,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAK,EAAwB,KAAK,CAAA,CAAA;AACjD,MAAA,MAAM,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAA;AACnD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,QAC3B,QAAQ,CAAA,KAAA,EAAQ,SAAS,IAAI,MAAA,CAAO,MAAM,GAAG,IAAI,CAAA;AAAA,OACnD;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,QAAA,GAAW,wBAAwB,KAAK,CAAA;AAC9C,EAAA,OAAO,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC9D","file":"chunk-PITHETND.mjs","sourcesContent":["/**\n * Catalog-flag defaults — the layer that runs before any workspace\n * override. Mirrors the access-control plan:\n *   - Default-allow: `lifecycle = stable && agentVisible = true`\n *   - Default-block: `lifecycle = preview` or `lifecycle = deprecated`\n *   - Default-block: any model with `agentVisible = false`\n *\n * Legacy catalog data (image/video) carries `agentVisible` but not\n * `lifecycle` — until v2 normalization, lifecycle defaults to \"stable\"\n * for every entry. LLM and audio entries default to allow (curated).\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\n\nexport interface CatalogDefaultDecision {\n  allowed: boolean\n  reason: string\n}\n\nexport function evaluateCatalogDefaults(\n  model: ResolvedModel\n): CatalogDefaultDecision {\n  switch (model.kind) {\n    case \"image\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"video\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"llm\":\n      // LLM entries are curated — every catalog entry is visible.\n      return { allowed: true, reason: \"catalog-default:llm-curated\" }\n    case \"audio\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"voice\":\n      // Voice metadata catalog is curated.\n      return { allowed: true, reason: \"catalog-default:voice-curated\" }\n  }\n}\n","/**\n * Access evaluator — resolves whether a workspace can use a given model.\n *\n * Resolution order:\n *   1. App scope — if the app opts out of the model's kind, deny.\n *   2. Workspace explicit `model:<id>` rule — terminal allow or block.\n *   3. Workspace tag / provider / priceTier / kind rules — most-specific\n *      band wins. Within a band, block wins. Specificity ladder:\n *        tag (4) > provider (3) > priceTier (2) > kind (1).\n *      Rationale: an explicit `allow tag:image:generate` should beat a\n *      blanket `block kind:llm`. The tag rule is the more specific\n *      intent and reflects the operator's allowlist.\n *   4. Catalog defaults — `lifecycle=stable && agentVisible=true` → allow.\n *\n * BYOK relaxation: when `byokActive`, `priceTier=premium` blocks are\n * bypassed (BYOK users pay providers directly). NSFW / compliance\n * blocks NEVER bypass.\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\nimport { modelHasTag, modelMatchesPriceTier } from \"../enrichment/index.js\"\nimport { evaluateCatalogDefaults } from \"./catalog-defaults.js\"\nimport type { AccessRule, AppScope } from \"./types.js\"\n\n/**\n * Specificity of non-model rule targets. Higher = more specific.\n * Most-specific band wins; within a band, block wins.\n *\n * Mirrors the scope specificity logic in\n * `packages/core/src/domain/model-access/types.ts:79`.\n */\nconst NON_MODEL_SPECIFICITY: Record<\n  \"tag\" | \"provider\" | \"priceTier\" | \"kind\",\n  number\n> = {\n  tag: 4,\n  provider: 3,\n  priceTier: 2,\n  kind: 1,\n}\n\nexport interface AccessEvalInput {\n  model: ResolvedModel\n  appScope?: AppScope\n  /** Workspace overrides; v1 callers pass `[]`. */\n  rules?: AccessRule[]\n  byokActive?: boolean\n}\n\nexport interface AccessDecision {\n  allowed: boolean\n  /** Stable token for logs/metrics. */\n  reason: string\n}\n\nconst NSFW_TAG_BLOCK_REASONS = new Set([\"nsfw\", \"compliance\"])\n\n/**\n * Returns true iff the rule matches the resolved model.\n *\n * Tag and priceTier matching go through the enrichment layer\n * (`@agentproto/model-catalog/enrichment`) — explicit per-model\n * enrichment wins, heuristic fallback fills the rest.\n */\nfunction ruleMatches(rule: AccessRule, model: ResolvedModel): boolean {\n  const target = rule.target\n  switch (target.kind) {\n    case \"model\":\n      return target.id === model.id\n    case \"kind\":\n      return target.value === model.kind\n    case \"provider\": {\n      switch (model.kind) {\n        case \"image\":\n          return model.def.provider === target.value\n        case \"video\":\n          return model.def.provider === target.value\n        case \"audio\":\n          return model.def.provider === target.value\n        case \"voice\":\n          return model.voice.provider === target.value\n        case \"llm\":\n          // No provider field on LLM entries — best-effort by canonical id\n          // structure. All LLM ids follow `<vendor>/…` or\n          // `<router>/<vendor>/…` conventions, so check for an exact\n          // prefix segment or an interior `/<vendor>/` segment.\n          // NOTE: avoid plain `.includes(target.value)` — it would\n          // false-positive on any id that merely *contains* the substring\n          // (e.g. \"not-google/…\" matching provider \"google\").\n          // A `<router>/<vendor>/…` id (e.g. `openrouter/anthropic/…`) can\n          // match BOTH a `router` and a `vendor` provider rule — that is\n          // intentional; band resolution (most-specific wins) reconciles it.\n          return (\n            model.canonicalId.startsWith(`${target.value}/`) ||\n            model.canonicalId.includes(`/${target.value}/`)\n          )\n      }\n    }\n    case \"tag\":\n      return modelHasTag(model, target.value)\n    case \"priceTier\":\n      return modelMatchesPriceTier(model, target.value)\n  }\n}\n\nexport function evaluateAccess(input: AccessEvalInput): AccessDecision {\n  const { model, appScope, rules = [], byokActive = false } = input\n\n  // 1. App scope. `voice` rows are metadata, not callable models — they\n  // bypass kind-scope checks (gating happens on the audio MODEL the\n  // voice plays through).\n  if (\n    appScope &&\n    appScope.kinds.length > 0 &&\n    model.kind !== \"voice\" &&\n    !appScope.kinds.includes(model.kind)\n  ) {\n    return {\n      allowed: false,\n      reason: `app-scope:kind-not-allowed:${model.kind}`,\n    }\n  }\n\n  // 2. Explicit per-model rules. Most specific band — terminal if any\n  // matches. Within the band, block wins over allow (so a workspace\n  // `block model:X` beats a tier-policy `allow model:X` regardless of\n  // the order they appear in the merged rule list).\n  const modelMatches = rules.filter(\n    r =>\n      r.target.kind === \"model\" && (r.target as { id: string }).id === model.id\n  )\n  if (modelMatches.length > 0) {\n    const winner =\n      modelMatches.find(r => r.effect === \"block\") ?? modelMatches[0]!\n    return {\n      allowed: winner.effect === \"allow\",\n      reason: `rule:model:${winner.effect}${winner.reason ? `:${winner.reason}` : \"\"}`,\n    }\n  }\n\n  // 3. Tag / provider / priceTier / kind rules. Most-specific band wins;\n  // within a band, block wins. BYOK relaxation drops priceTier=premium\n  // blocks before specificity grouping.\n  const matchedByBand = new Map<number, AccessRule[]>()\n  for (const rule of rules) {\n    const k = rule.target.kind\n    if (k === \"model\") continue\n    if (!ruleMatches(rule, model)) continue\n    if (rule.effect === \"block\") {\n      // BYOK relaxation — same condition as before the refactor.\n      if (\n        byokActive &&\n        rule.target.kind === \"priceTier\" &&\n        rule.target.value === \"premium\" &&\n        !NSFW_TAG_BLOCK_REASONS.has(rule.reason ?? \"\")\n      ) {\n        continue\n      }\n    }\n    const band = NON_MODEL_SPECIFICITY[k]\n    const list = matchedByBand.get(band) ?? []\n    list.push(rule)\n    matchedByBand.set(band, list)\n  }\n\n  if (matchedByBand.size > 0) {\n    // Walk bands from most-specific to least-specific. The first band\n    // with any matching rule decides — block wins within the band.\n    const bands = Array.from(matchedByBand.keys()).sort((a, b) => b - a)\n    for (const band of bands) {\n      const bandRules = matchedByBand.get(band)!\n      const blocked = bandRules.find(r => r.effect === \"block\")\n      const allowed = bandRules.find(r => r.effect === \"allow\")\n      const winner = blocked ?? allowed\n      if (!winner) continue\n      const t = winner.target\n      const targetStr =\n        t.kind === \"model\"\n          ? `model:${(t as { id: string }).id}`\n          : `${t.kind}:${(t as { value: string }).value}`\n      const tail = winner.reason ? `:${winner.reason}` : \"\"\n      return {\n        allowed: winner.effect === \"allow\",\n        reason: `rule:${targetStr}:${winner.effect}${tail}`,\n      }\n    }\n  }\n\n  // 4. Catalog defaults.\n  const fallback = evaluateCatalogDefaults(model)\n  return { allowed: fallback.allowed, reason: fallback.reason }\n}\n"]}