@agentproto/model-catalog 0.9.4 → 0.10.0

package/dist/{chunk-5XUA72EH.mjs.map → chunk-M3I2OMBX.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/access/catalog-defaults.ts","../src/access/evaluate.ts"],"names":[],"mappings":";;;;;;;;;AAmBO,SAAS,wBACd,KAAA,EACwB;AACxB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,KAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,6BAAA,EAA8B;AAAA,IAChE,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC;AAAA;AAEtE;;;ACXA,IAAM,qBAAA,GAGF;AAAA,EACF,GAAA,EAAK,CAAA;AAAA,EACL,QAAA,EAAU,CAAA;AAAA,EACV,SAAA,EAAW,CAAA;AAAA,EACX,IAAA,EAAM;AACR,CAAA;AAgBA,IAAM,yCAAyB,IAAI,GAAA,CAAI,CAAC,MAAA,EAAQ,YAAY,CAAC,CAAA;AAS7D,SAAS,WAAA,CAAY,MAAkB,KAAA,EAA+B;AACpE,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,QAAQ,OAAO,IAAA;AAAM,IACnB,KAAK,OAAA;AACH,MAAA,OAAO,MAAA,CAAO,OAAO,KAAA,CAAM,EAAA;AAAA,IAC7B,KAAK,MAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,KAAA,CAAM,IAAA;AAAA,IAChC,KAAK,UAAA,EAAY;AACf,MAAA,QAAQ,MAAM,IAAA;AAAM,QAClB,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,KAAA,CAAM,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACzC,KAAK,KAAA;AAWH,UAAA,OACE,KAAA,CAAM,WAAA,CAAY,UAAA,CAAW,CAAA,EAAG,OAAO,KAAK,CAAA,CAAA,CAAG,CAAA,IAC/C,KAAA,CAAM,WAAA,CAAY,QAAA,CAAS,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA;AAEpD,IACF;AAAA,IACA,KAAK,KAAA;AACH,MAAA,OAAO,WAAA,CAAY,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IACxC,KAAK,WAAA;AACH,MAAA,OAAO,qBAAA,CAAsB,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA;AAEtD;AAEO,SAAS,eAAe,KAAA,EAAwC;AACrE,EAAA,MAAM,EAAE,OAAO,QAAA,EAAU,KAAA,GAAQ,EAAC,EAAG,UAAA,GAAa,OAAM,GAAI,KAAA;AAK5D,EAAA,IACE,QAAA,IACA,QAAA,CAAS,KAAA,CAAM,MAAA,GAAS,KACxB,KAAA,CAAM,IAAA,KAAS,OAAA,IACf,CAAC,QAAA,CAAS,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EACnC;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,CAAA,2BAAA,EAA8B,KAAA,CAAM,IAAI,CAAA;AAAA,KAClD;AAAA,EACF;AAMA,EAAA,MAAM,eAAe,KAAA,CAAM,MAAA;AAAA,IACzB,CAAA,CAAA,KACE,EAAE,MAAA,CAAO,IAAA,KAAS,WAAY,CAAA,CAAE,MAAA,CAA0B,OAAO,KAAA,CAAM;AAAA,GAC3E;AACA,EAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,MAAA,GACJ,aAAa,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,MAAA,KAAW,OAAO,CAAA,IAAK,YAAA,CAAa,CAAC,CAAA;AAChE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,MAC3B,MAAA,EAAQ,CAAA,WAAA,EAAc,MAAA,CAAO,MAAM,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,KAChF;AAAA,EACF;AAKA,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAA0B;AACpD,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,CAAA,GAAI,KAAK,MAAA,CAAO,IAAA;AACtB,IAAA,IAAI,MAAM,OAAA,EAAS;AACnB,IAAA,IAAI,CAAC,WAAA,CAAY,IAAA,EAAM,KAAK,CAAA,EAAG;AAC/B,IAAA,IAAI,IAAA,CAAK,WAAW,OAAA,EAAS;AAE3B,MAAA,IACE,UAAA,IACA,IAAA,CAAK,MAAA,CAAO,IAAA,KAAS,eACrB,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,IACtB,CAAC,sBAAA,CAAuB,GAAA,CAAI,IAAA,CAAK,MAAA,IAAU,EAAE,CAAA,EAC7C;AACA,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,sBAAsB,CAAC,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,GAAA,CAAI,IAAI,KAAK,EAAC;AACzC,IAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AACd,IAAA,aAAA,CAAc,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,EAC9B;AAEA,EAAA,IAAI,aAAA,CAAc,OAAO,CAAA,EAAG;AAG1B,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AACnE,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,SAAA,GAAY,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AACxC,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,SAAS,OAAA,IAAW,OAAA;AAC1B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAI,MAAA,CAAO,MAAA;AACjB,MAAA,MAAM,SAAA,GACJ,CAAA,CAAE,IAAA,KAAS,OAAA,GACP,CAAA,MAAA,EAAU,CAAA,CAAqB,EAAE,CAAA,CAAA,GACjC,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAK,EAAwB,KAAK,CAAA,CAAA;AACjD,MAAA,MAAM,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAA;AACnD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,QAC3B,QAAQ,CAAA,KAAA,EAAQ,SAAS,IAAI,MAAA,CAAO,MAAM,GAAG,IAAI,CAAA;AAAA,OACnD;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,QAAA,GAAW,wBAAwB,KAAK,CAAA;AAC9C,EAAA,OAAO,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC9D","file":"chunk-5XUA72EH.mjs","sourcesContent":["/**\n * Catalog-flag defaults — the layer that runs before any workspace\n * override. Mirrors the access-control plan:\n *   - Default-allow: `lifecycle = stable && agentVisible = true`\n *   - Default-block: `lifecycle = preview` or `lifecycle = deprecated`\n *   - Default-block: any model with `agentVisible = false`\n *\n * Legacy catalog data (image/video) carries `agentVisible` but not\n * `lifecycle` — until v2 normalization, lifecycle defaults to \"stable\"\n * for every entry. LLM and audio entries default to allow (curated).\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\n\nexport interface CatalogDefaultDecision {\n  allowed: boolean\n  reason: string\n}\n\nexport function evaluateCatalogDefaults(\n  model: ResolvedModel\n): CatalogDefaultDecision {\n  switch (model.kind) {\n    case \"image\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"video\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"llm\":\n      // LLM entries are curated — every catalog entry is visible.\n      return { allowed: true, reason: \"catalog-default:llm-curated\" }\n    case \"audio\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"voice\":\n      // Voice metadata catalog is curated.\n      return { allowed: true, reason: \"catalog-default:voice-curated\" }\n  }\n}\n","/**\n * Access evaluator — resolves whether a workspace can use a given model.\n *\n * Resolution order:\n *   1. App scope — if the app opts out of the model's kind, deny.\n *   2. Workspace explicit `model:<id>` rule — terminal allow or block.\n *   3. Workspace tag / provider / priceTier / kind rules — most-specific\n *      band wins. Within a band, block wins. Specificity ladder:\n *        tag (4) > provider (3) > priceTier (2) > kind (1).\n *      Rationale: an explicit `allow tag:image:generate` should beat a\n *      blanket `block kind:llm`. The tag rule is the more specific\n *      intent and reflects the operator's allowlist.\n *   4. Catalog defaults — `lifecycle=stable && agentVisible=true` → allow.\n *\n * BYOK relaxation: when `byokActive`, `priceTier=premium` blocks are\n * bypassed (BYOK users pay providers directly). NSFW / compliance\n * blocks NEVER bypass.\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\nimport { modelHasTag, modelMatchesPriceTier } from \"../enrichment/index.js\"\nimport { evaluateCatalogDefaults } from \"./catalog-defaults.js\"\nimport type { AccessRule, AppScope } from \"./types.js\"\n\n/**\n * Specificity of non-model rule targets. Higher = more specific.\n * Most-specific band wins; within a band, block wins.\n *\n * Mirrors the scope specificity logic in\n * `packages/core/src/domain/model-access/types.ts:79`.\n */\nconst NON_MODEL_SPECIFICITY: Record<\n  \"tag\" | \"provider\" | \"priceTier\" | \"kind\",\n  number\n> = {\n  tag: 4,\n  provider: 3,\n  priceTier: 2,\n  kind: 1,\n}\n\nexport interface AccessEvalInput {\n  model: ResolvedModel\n  appScope?: AppScope\n  /** Workspace overrides; v1 callers pass `[]`. */\n  rules?: AccessRule[]\n  byokActive?: boolean\n}\n\nexport interface AccessDecision {\n  allowed: boolean\n  /** Stable token for logs/metrics. */\n  reason: string\n}\n\nconst NSFW_TAG_BLOCK_REASONS = new Set([\"nsfw\", \"compliance\"])\n\n/**\n * Returns true iff the rule matches the resolved model.\n *\n * Tag and priceTier matching go through the enrichment layer\n * (`@agentproto/model-catalog/enrichment`) — explicit per-model\n * enrichment wins, heuristic fallback fills the rest.\n */\nfunction ruleMatches(rule: AccessRule, model: ResolvedModel): boolean {\n  const target = rule.target\n  switch (target.kind) {\n    case \"model\":\n      return target.id === model.id\n    case \"kind\":\n      return target.value === model.kind\n    case \"provider\": {\n      switch (model.kind) {\n        case \"image\":\n          return model.def.provider === target.value\n        case \"video\":\n          return model.def.provider === target.value\n        case \"audio\":\n          return model.def.provider === target.value\n        case \"voice\":\n          return model.voice.provider === target.value\n        case \"llm\":\n          // No provider field on LLM entries — best-effort by canonical id\n          // structure. All LLM ids follow `<vendor>/…` or\n          // `<router>/<vendor>/…` conventions, so check for an exact\n          // prefix segment or an interior `/<vendor>/` segment.\n          // NOTE: avoid plain `.includes(target.value)` — it would\n          // false-positive on any id that merely *contains* the substring\n          // (e.g. \"not-google/…\" matching provider \"google\").\n          // A `<router>/<vendor>/…` id (e.g. `openrouter/anthropic/…`) can\n          // match BOTH a `router` and a `vendor` provider rule — that is\n          // intentional; band resolution (most-specific wins) reconciles it.\n          return (\n            model.canonicalId.startsWith(`${target.value}/`) ||\n            model.canonicalId.includes(`/${target.value}/`)\n          )\n      }\n    }\n    case \"tag\":\n      return modelHasTag(model, target.value)\n    case \"priceTier\":\n      return modelMatchesPriceTier(model, target.value)\n  }\n}\n\nexport function evaluateAccess(input: AccessEvalInput): AccessDecision {\n  const { model, appScope, rules = [], byokActive = false } = input\n\n  // 1. App scope. `voice` rows are metadata, not callable models — they\n  // bypass kind-scope checks (gating happens on the audio MODEL the\n  // voice plays through).\n  if (\n    appScope &&\n    appScope.kinds.length > 0 &&\n    model.kind !== \"voice\" &&\n    !appScope.kinds.includes(model.kind)\n  ) {\n    return {\n      allowed: false,\n      reason: `app-scope:kind-not-allowed:${model.kind}`,\n    }\n  }\n\n  // 2. Explicit per-model rules. Most specific band — terminal if any\n  // matches. Within the band, block wins over allow (so a workspace\n  // `block model:X` beats a tier-policy `allow model:X` regardless of\n  // the order they appear in the merged rule list).\n  const modelMatches = rules.filter(\n    r =>\n      r.target.kind === \"model\" && (r.target as { id: string }).id === model.id\n  )\n  if (modelMatches.length > 0) {\n    const winner =\n      modelMatches.find(r => r.effect === \"block\") ?? modelMatches[0]!\n    return {\n      allowed: winner.effect === \"allow\",\n      reason: `rule:model:${winner.effect}${winner.reason ? `:${winner.reason}` : \"\"}`,\n    }\n  }\n\n  // 3. Tag / provider / priceTier / kind rules. Most-specific band wins;\n  // within a band, block wins. BYOK relaxation drops priceTier=premium\n  // blocks before specificity grouping.\n  const matchedByBand = new Map<number, AccessRule[]>()\n  for (const rule of rules) {\n    const k = rule.target.kind\n    if (k === \"model\") continue\n    if (!ruleMatches(rule, model)) continue\n    if (rule.effect === \"block\") {\n      // BYOK relaxation — same condition as before the refactor.\n      if (\n        byokActive &&\n        rule.target.kind === \"priceTier\" &&\n        rule.target.value === \"premium\" &&\n        !NSFW_TAG_BLOCK_REASONS.has(rule.reason ?? \"\")\n      ) {\n        continue\n      }\n    }\n    const band = NON_MODEL_SPECIFICITY[k]\n    const list = matchedByBand.get(band) ?? []\n    list.push(rule)\n    matchedByBand.set(band, list)\n  }\n\n  if (matchedByBand.size > 0) {\n    // Walk bands from most-specific to least-specific. The first band\n    // with any matching rule decides — block wins within the band.\n    const bands = Array.from(matchedByBand.keys()).sort((a, b) => b - a)\n    for (const band of bands) {\n      const bandRules = matchedByBand.get(band)!\n      const blocked = bandRules.find(r => r.effect === \"block\")\n      const allowed = bandRules.find(r => r.effect === \"allow\")\n      const winner = blocked ?? allowed\n      if (!winner) continue\n      const t = winner.target\n      const targetStr =\n        t.kind === \"model\"\n          ? `model:${(t as { id: string }).id}`\n          : `${t.kind}:${(t as { value: string }).value}`\n      const tail = winner.reason ? `:${winner.reason}` : \"\"\n      return {\n        allowed: winner.effect === \"allow\",\n        reason: `rule:${targetStr}:${winner.effect}${tail}`,\n      }\n    }\n  }\n\n  // 4. Catalog defaults.\n  const fallback = evaluateCatalogDefaults(model)\n  return { allowed: fallback.allowed, reason: fallback.reason }\n}\n"]}
+{"version":3,"sources":["../src/access/catalog-defaults.ts","../src/access/evaluate.ts"],"names":[],"mappings":";;;;;;;;;AAmBO,SAAS,wBACd,KAAA,EACwB;AACxB,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,KAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,6BAAA,EAA8B;AAAA,IAChE,KAAK,OAAA;AACH,MAAA,OAAO,KAAA,CAAM,GAAA,CAAI,YAAA,GACb,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC,GACzD,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,8BAAA,EAA+B;AAAA,IAC/D,KAAK,OAAA;AAEH,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,+BAAA,EAAgC;AAAA;AAEtE;;;ACXA,IAAM,qBAAA,GAGF;AAAA,EACF,GAAA,EAAK,CAAA;AAAA,EACL,QAAA,EAAU,CAAA;AAAA,EACV,SAAA,EAAW,CAAA;AAAA,EACX,IAAA,EAAM;AACR,CAAA;AAgBA,IAAM,yCAAyB,IAAI,GAAA,CAAI,CAAC,MAAA,EAAQ,YAAY,CAAC,CAAA;AAS7D,SAAS,WAAA,CAAY,MAAkB,KAAA,EAA+B;AACpE,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,QAAQ,OAAO,IAAA;AAAM,IACnB,KAAK,OAAA;AACH,MAAA,OAAO,MAAA,CAAO,OAAO,KAAA,CAAM,EAAA;AAAA,IAC7B,KAAK,MAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,KAAA,CAAM,IAAA;AAAA,IAChC,KAAK,UAAA,EAAY;AACf,MAAA,QAAQ,MAAM,IAAA;AAAM,QAClB,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,GAAA,CAAI,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACvC,KAAK,OAAA;AACH,UAAA,OAAO,KAAA,CAAM,KAAA,CAAM,QAAA,KAAa,MAAA,CAAO,KAAA;AAAA,QACzC,KAAK,KAAA;AAWH,UAAA,OACE,KAAA,CAAM,WAAA,CAAY,UAAA,CAAW,CAAA,EAAG,OAAO,KAAK,CAAA,CAAA,CAAG,CAAA,IAC/C,KAAA,CAAM,WAAA,CAAY,QAAA,CAAS,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA;AAEpD,IACF;AAAA,IACA,KAAK,KAAA;AACH,MAAA,OAAO,WAAA,CAAY,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IACxC,KAAK,WAAA;AACH,MAAA,OAAO,qBAAA,CAAsB,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA;AAAA;AAEtD;AAEO,SAAS,eAAe,KAAA,EAAwC;AACrE,EAAA,MAAM,EAAE,OAAO,QAAA,EAAU,KAAA,GAAQ,EAAC,EAAG,UAAA,GAAa,OAAM,GAAI,KAAA;AAK5D,EAAA,IACE,QAAA,IACA,QAAA,CAAS,KAAA,CAAM,MAAA,GAAS,KACxB,KAAA,CAAM,IAAA,KAAS,OAAA,IACf,CAAC,QAAA,CAAS,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EACnC;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,CAAA,2BAAA,EAA8B,KAAA,CAAM,IAAI,CAAA;AAAA,KAClD;AAAA,EACF;AAMA,EAAA,MAAM,eAAe,KAAA,CAAM,MAAA;AAAA,IACzB,CAAA,CAAA,KACE,EAAE,MAAA,CAAO,IAAA,KAAS,WAAY,CAAA,CAAE,MAAA,CAA0B,OAAO,KAAA,CAAM;AAAA,GAC3E;AACA,EAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,IAAA,MAAM,MAAA,GACJ,aAAa,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,MAAA,KAAW,OAAO,CAAA,IAAK,YAAA,CAAa,CAAC,CAAA;AAChE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,MAC3B,MAAA,EAAQ,CAAA,WAAA,EAAc,MAAA,CAAO,MAAM,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,KAChF;AAAA,EACF;AAKA,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAA0B;AACpD,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,CAAA,GAAI,KAAK,MAAA,CAAO,IAAA;AACtB,IAAA,IAAI,MAAM,OAAA,EAAS;AACnB,IAAA,IAAI,CAAC,WAAA,CAAY,IAAA,EAAM,KAAK,CAAA,EAAG;AAC/B,IAAA,IAAI,IAAA,CAAK,WAAW,OAAA,EAAS;AAE3B,MAAA,IACE,UAAA,IACA,IAAA,CAAK,MAAA,CAAO,IAAA,KAAS,eACrB,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,IACtB,CAAC,sBAAA,CAAuB,GAAA,CAAI,IAAA,CAAK,MAAA,IAAU,EAAE,CAAA,EAC7C;AACA,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,sBAAsB,CAAC,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,GAAA,CAAI,IAAI,KAAK,EAAC;AACzC,IAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AACd,IAAA,aAAA,CAAc,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,EAC9B;AAEA,EAAA,IAAI,aAAA,CAAc,OAAO,CAAA,EAAG;AAG1B,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AACnE,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,MAAM,SAAA,GAAY,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AACxC,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,UAAU,SAAA,CAAU,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,MAAA,MAAM,SAAS,OAAA,IAAW,OAAA;AAC1B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAI,MAAA,CAAO,MAAA;AACjB,MAAA,MAAM,SAAA,GACJ,CAAA,CAAE,IAAA,KAAS,OAAA,GACP,CAAA,MAAA,EAAU,CAAA,CAAqB,EAAE,CAAA,CAAA,GACjC,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAK,EAAwB,KAAK,CAAA,CAAA;AACjD,MAAA,MAAM,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,CAAA,EAAI,MAAA,CAAO,MAAM,CAAA,CAAA,GAAK,EAAA;AACnD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,OAAO,MAAA,KAAW,OAAA;AAAA,QAC3B,QAAQ,CAAA,KAAA,EAAQ,SAAS,IAAI,MAAA,CAAO,MAAM,GAAG,IAAI,CAAA;AAAA,OACnD;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,QAAA,GAAW,wBAAwB,KAAK,CAAA;AAC9C,EAAA,OAAO,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC9D","file":"chunk-M3I2OMBX.mjs","sourcesContent":["/**\n * Catalog-flag defaults — the layer that runs before any workspace\n * override. Mirrors the access-control plan:\n *   - Default-allow: `lifecycle = stable && agentVisible = true`\n *   - Default-block: `lifecycle = preview` or `lifecycle = deprecated`\n *   - Default-block: any model with `agentVisible = false`\n *\n * Legacy catalog data (image/video) carries `agentVisible` but not\n * `lifecycle` — until v2 normalization, lifecycle defaults to \"stable\"\n * for every entry. LLM and audio entries default to allow (curated).\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\n\nexport interface CatalogDefaultDecision {\n  allowed: boolean\n  reason: string\n}\n\nexport function evaluateCatalogDefaults(\n  model: ResolvedModel\n): CatalogDefaultDecision {\n  switch (model.kind) {\n    case \"image\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"video\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"llm\":\n      // LLM entries are curated — every catalog entry is visible.\n      return { allowed: true, reason: \"catalog-default:llm-curated\" }\n    case \"audio\":\n      return model.def.agentVisible\n        ? { allowed: true, reason: \"catalog-default:agent-visible\" }\n        : { allowed: false, reason: \"catalog-default:agent-hidden\" }\n    case \"voice\":\n      // Voice metadata catalog is curated.\n      return { allowed: true, reason: \"catalog-default:voice-curated\" }\n  }\n}\n","/**\n * Access evaluator — resolves whether a workspace can use a given model.\n *\n * Resolution order:\n *   1. App scope — if the app opts out of the model's kind, deny.\n *   2. Workspace explicit `model:<id>` rule — terminal allow or block.\n *   3. Workspace tag / provider / priceTier / kind rules — most-specific\n *      band wins. Within a band, block wins. Specificity ladder:\n *        tag (4) > provider (3) > priceTier (2) > kind (1).\n *      Rationale: an explicit `allow tag:image:generate` should beat a\n *      blanket `block kind:llm`. The tag rule is the more specific\n *      intent and reflects the operator's allowlist.\n *   4. Catalog defaults — `lifecycle=stable && agentVisible=true` → allow.\n *\n * BYOK relaxation: when `byokActive`, `priceTier=premium` blocks are\n * bypassed (BYOK users pay providers directly). NSFW / compliance\n * blocks NEVER bypass.\n */\n\nimport type { ResolvedModel } from \"../registry/index.js\"\nimport { modelHasTag, modelMatchesPriceTier } from \"../enrichment/index.js\"\nimport { evaluateCatalogDefaults } from \"./catalog-defaults.js\"\nimport type { AccessRule, AppScope } from \"./types.js\"\n\n/**\n * Specificity of non-model rule targets. Higher = more specific.\n * Most-specific band wins; within a band, block wins.\n *\n * Mirrors the scope specificity logic in\n * `packages/core/src/domain/model-access/types.ts:79`.\n */\nconst NON_MODEL_SPECIFICITY: Record<\n  \"tag\" | \"provider\" | \"priceTier\" | \"kind\",\n  number\n> = {\n  tag: 4,\n  provider: 3,\n  priceTier: 2,\n  kind: 1,\n}\n\nexport interface AccessEvalInput {\n  model: ResolvedModel\n  appScope?: AppScope\n  /** Workspace overrides; v1 callers pass `[]`. */\n  rules?: AccessRule[]\n  byokActive?: boolean\n}\n\nexport interface AccessDecision {\n  allowed: boolean\n  /** Stable token for logs/metrics. */\n  reason: string\n}\n\nconst NSFW_TAG_BLOCK_REASONS = new Set([\"nsfw\", \"compliance\"])\n\n/**\n * Returns true iff the rule matches the resolved model.\n *\n * Tag and priceTier matching go through the enrichment layer\n * (`@agentproto/model-catalog/enrichment`) — explicit per-model\n * enrichment wins, heuristic fallback fills the rest.\n */\nfunction ruleMatches(rule: AccessRule, model: ResolvedModel): boolean {\n  const target = rule.target\n  switch (target.kind) {\n    case \"model\":\n      return target.id === model.id\n    case \"kind\":\n      return target.value === model.kind\n    case \"provider\": {\n      switch (model.kind) {\n        case \"image\":\n          return model.def.provider === target.value\n        case \"video\":\n          return model.def.provider === target.value\n        case \"audio\":\n          return model.def.provider === target.value\n        case \"voice\":\n          return model.voice.provider === target.value\n        case \"llm\":\n          // No provider field on LLM entries — best-effort by canonical id\n          // structure. All LLM ids follow `<vendor>/…` or\n          // `<router>/<vendor>/…` conventions, so check for an exact\n          // prefix segment or an interior `/<vendor>/` segment.\n          // NOTE: avoid plain `.includes(target.value)` — it would\n          // false-positive on any id that merely *contains* the substring\n          // (e.g. \"not-google/…\" matching provider \"google\").\n          // A `<router>/<vendor>/…` id (e.g. `openrouter/anthropic/…`) can\n          // match BOTH a `router` and a `vendor` provider rule — that is\n          // intentional; band resolution (most-specific wins) reconciles it.\n          return (\n            model.canonicalId.startsWith(`${target.value}/`) ||\n            model.canonicalId.includes(`/${target.value}/`)\n          )\n      }\n    }\n    case \"tag\":\n      return modelHasTag(model, target.value)\n    case \"priceTier\":\n      return modelMatchesPriceTier(model, target.value)\n  }\n}\n\nexport function evaluateAccess(input: AccessEvalInput): AccessDecision {\n  const { model, appScope, rules = [], byokActive = false } = input\n\n  // 1. App scope. `voice` rows are metadata, not callable models — they\n  // bypass kind-scope checks (gating happens on the audio MODEL the\n  // voice plays through).\n  if (\n    appScope &&\n    appScope.kinds.length > 0 &&\n    model.kind !== \"voice\" &&\n    !appScope.kinds.includes(model.kind)\n  ) {\n    return {\n      allowed: false,\n      reason: `app-scope:kind-not-allowed:${model.kind}`,\n    }\n  }\n\n  // 2. Explicit per-model rules. Most specific band — terminal if any\n  // matches. Within the band, block wins over allow (so a workspace\n  // `block model:X` beats a tier-policy `allow model:X` regardless of\n  // the order they appear in the merged rule list).\n  const modelMatches = rules.filter(\n    r =>\n      r.target.kind === \"model\" && (r.target as { id: string }).id === model.id\n  )\n  if (modelMatches.length > 0) {\n    const winner =\n      modelMatches.find(r => r.effect === \"block\") ?? modelMatches[0]!\n    return {\n      allowed: winner.effect === \"allow\",\n      reason: `rule:model:${winner.effect}${winner.reason ? `:${winner.reason}` : \"\"}`,\n    }\n  }\n\n  // 3. Tag / provider / priceTier / kind rules. Most-specific band wins;\n  // within a band, block wins. BYOK relaxation drops priceTier=premium\n  // blocks before specificity grouping.\n  const matchedByBand = new Map<number, AccessRule[]>()\n  for (const rule of rules) {\n    const k = rule.target.kind\n    if (k === \"model\") continue\n    if (!ruleMatches(rule, model)) continue\n    if (rule.effect === \"block\") {\n      // BYOK relaxation — same condition as before the refactor.\n      if (\n        byokActive &&\n        rule.target.kind === \"priceTier\" &&\n        rule.target.value === \"premium\" &&\n        !NSFW_TAG_BLOCK_REASONS.has(rule.reason ?? \"\")\n      ) {\n        continue\n      }\n    }\n    const band = NON_MODEL_SPECIFICITY[k]\n    const list = matchedByBand.get(band) ?? []\n    list.push(rule)\n    matchedByBand.set(band, list)\n  }\n\n  if (matchedByBand.size > 0) {\n    // Walk bands from most-specific to least-specific. The first band\n    // with any matching rule decides — block wins within the band.\n    const bands = Array.from(matchedByBand.keys()).sort((a, b) => b - a)\n    for (const band of bands) {\n      const bandRules = matchedByBand.get(band)!\n      const blocked = bandRules.find(r => r.effect === \"block\")\n      const allowed = bandRules.find(r => r.effect === \"allow\")\n      const winner = blocked ?? allowed\n      if (!winner) continue\n      const t = winner.target\n      const targetStr =\n        t.kind === \"model\"\n          ? `model:${(t as { id: string }).id}`\n          : `${t.kind}:${(t as { value: string }).value}`\n      const tail = winner.reason ? `:${winner.reason}` : \"\"\n      return {\n        allowed: winner.effect === \"allow\",\n        reason: `rule:${targetStr}:${winner.effect}${tail}`,\n      }\n    }\n  }\n\n  // 4. Catalog defaults.\n  const fallback = evaluateCatalogDefaults(model)\n  return { allowed: fallback.allowed, reason: fallback.reason }\n}\n"]}