@fayegram-ai/decision-bridge 0.1.1 → 0.1.3

package/docs/reference/ERRORS.md

@@ -1,7 +1,9 @@
 # Errors and recovery
 
 `DecisionError` extends `Error` and exposes `code`, optional `status`, `requestId`,
-`gatewayLogId`, `attempts`, and numeric `upstreamCode` for Cloudflare diagnostics.
+`gatewayLogId`, `attempts`, and numeric `upstreamCode` for Cloudflare diagnostics. Optional `source`,
+`upstreamErrorCode`, `upstreamErrorType`, `retryAfterMs` and `retryable`
+distinguish client controls and upstream failures.
 OpenAI Decisions refusal errors can also carry validated `refusedQuestions` and
 `usage`. `toJSON()` and `publicError(error)` return safe structured details.
 Unknown exceptions become a generic message, not a copied stack/body. Custom
@@ -16,13 +18,13 @@ providers deliberately constructing `DecisionError` must keep its message safe.
 | `USAGE_ERROR` | Invalid CLI flags/arguments or stdin usage; consult help |
 | `IO_ERROR` | Input/output path or permissions failure; preserve previous output |
 | `INPUT_TOO_LARGE` | CLI byte limit exceeded; reduce or split input |
-| `REQUEST_TOO_LARGE` | Encoded provider request exceeds configured limit; reduce input/schema |
+| `REQUEST_TOO_LARGE` | Configured client byte budget or upstream size admission rejected the request; inspect `source` and optional status |
 | `RESPONSE_TOO_LARGE` | Provider response exceeds configured limit; inspect budget/model behavior |
 | `HTTP_ERROR` | Non-success HTTP response; use status/request ID, not raw error body |
 | `CAPACITY_EXCEEDED` | Cloudflare capacity unavailable (3040); busy mode does not queue/retry |
-| `ALLOCATION_EXCEEDED` | Cloudflare allocation limit exceeded (3036) |
-| `RATE_LIMITED` | Cloudflare HTTP 429 without a more specific code |
-| `AUTHENTICATION_ERROR`, `PERMISSION_DENIED` | Cloudflare authentication or authorization failure |
+| `ALLOCATION_EXCEEDED` | Provider allocation, credit or spending limit exceeded; not automatically retried |
+| `RATE_LIMITED` | Temporary provider throttling without a more specific allocation/capacity code |
+| `AUTHENTICATION_ERROR`, `PERMISSION_DENIED` | Provider authentication or authorization failure |
 | `UPSTREAM_TIMEOUT`, `UPSTREAM_ABORTED` | Cloudflare upstream timeout (3007) or abort (3008) |
 | `NETWORK_ERROR` | Transport failed ambiguously; no automatic network retry occurred |
 | `RETRY_BUDGET_EXCEEDED` | Server delay cannot fit remaining deadline; choose a later attempt explicitly |
@@ -35,6 +37,10 @@ providers deliberately constructing `DecisionError` must keep its message safe.
 | `PROVIDER_ERROR` | Sanitized custom-provider exception |
 | `UNSUPPORTED_OPERATION` | Provider does not implement listing or another requested operation |
 | `BATCH_SKIPPED` | SDK stop-on-error prevented a not-yet-started record |
+| `INVALID_REQUEST` | Upstream request rejection; inspect safe machine code/type and correct the request |
+| `CONNECTION_CLOSED`, `DISPOSED` | Live connection ended or controller was disposed; pending work is cancelled |
+| `RESOURCE_LIMIT` | Live client pending-operation budget exceeded; settle existing operations before submitting more |
+| `OBSERVER_ERROR` | Live observer notification failed; no command or application action is repeated |
 | `UNEXPECTED_ERROR` | Unrecognized error sanitized for public output |
 
 ## Retry policy
@@ -44,18 +50,27 @@ available HTTP diagnostics. A refusal of any question fails that complete call;
 successful siblings are not exposed as a partial result.
 
 The shared response transport retries statuses **429, 502, 503, 504, and 529**
-only, for both HTTP requests and Workers AI binding responses. `maxRetries`
+as a fallback for HTTP and binding responses. Provider decoders refine eligibility; known allocation/billing failures are never retried. `maxRetries`
 means additional attempts; the default 2 allows at most 3 total attempts. Native
-OpenAI Decisions and Cloudflare Clef default to 0; explicitly enabling retries can repeat a billed
+OpenAI Decisions, Cloudflare Clef and Clairic default to 0; explicitly enabling retries can repeat a billed
 request. All
 attempts, backoff, and response-body reading share one timeout budget.
 
-`Retry-After` seconds or HTTP dates are honored. Without it, exponential backoff
+Valid `Retry-After` decimal integer seconds or HTTP dates are honored. All three
+HTTP date forms are interpreted in UTC; an elapsed date means zero delay.
+Malformed values are ignored, including fractional, signed, hexadecimal and
+exponent numbers. Without a valid hint, exponential backoff
 starts at 250 ms with jitter and an 8-second base cap. A delay that cannot fit the
 remaining budget fails instead of violating the server's requested wait.
 
-Authentication failures, generic HTTP 500, invalid output, model refusal, and
-ambiguous network failures are not retried automatically. HTTP retries are not an
+When an HTTP rejection body is malformed, too large, or interrupted, the known
+status, safe request/Gateway IDs and valid `Retry-After` remain available. If the
+body cannot be decoded, classification and retry eligibility use the status
+alone; no missing upstream code is invented. Caller cancellation and the total
+deadline still take precedence over this fallback.
+
+Authentication failures, invalid output, model refusal, and
+ambiguous network failures are not retried automatically. OpenAI may classify HTTP 500 as retryable; other transports retain their fallback policy. HTTP retries are not an
 exactly-once billing guarantee. Set `maxRetries: 0` when your workflow requires
 manual retry decisions. The bridge never retries a successful request because an
 observer failed; inspect `meta.observerFailures` separately.
@@ -64,8 +79,9 @@ observer failed; inspect `meta.observerFailures` separately.
 
 401/403 usually requires checking key/account/model authorization with the provider;
 the client reports the actual status rather than claiming to diagnose account
-state. 404 can indicate an incorrect API base/model/route. 429 exposes throttling;
-repeated retries can increase load. For `INVALID_RESPONSE`, a schema-capable model
+state. 404 can indicate an incorrect API base/model/route. A 429 can represent
+temporary throttling or an allocation/billing failure; inspect `code`,
+`upstreamErrorCode`, `upstreamErrorType` and `retryable`. For `INVALID_RESPONSE`, a schema-capable model
 may still emit invalid probabilities or be routed through an incompatible endpoint.
 Change configuration deliberately and retest; do not disable local validation.
 
@@ -83,3 +99,16 @@ For successful OpenAI calls, retain
 the requested selection, resolved outgoing ID, and reported model separately;
 see [model identities](../guides/OPENAI_DECISIONS.md#model-selection). Log input or results only under your
 own data-handling policy. No logging or telemetry is enabled by default.
+
+## Extraction and Live
+
+Clairic preserves native nulls, empty lists and the `truncated` flag in a successful
+extraction envelope; truncation is not converted into a decision-style failure.
+The application decides whether that extraction is sufficient for its task.
+
+Live preserves native refusal answers on completed decision events. Malformed
+server events report `INVALID_RESPONSE`; the offline event-file validator reports
+caller input as `VALIDATION_ERROR`. Observer failures produce `observer_error`
+notifications containing a safe `OBSERVER_ERROR`. Command submission receipts do
+not promise a completed decision. No Live command or application action is
+automatically replayed. See [Live lifecycle](../guides/LIVE_DECISIONS.md).

package/docs/reference/PROVIDERS.md

@@ -44,25 +44,35 @@ contract. The following additional forms are checked before dispatch:
 
 | Provider | Ordered text / embedded images | Typed string/boolean choices | Labelled score levels | Safety identifier | Model listing |
 | --- | --- | --- | --- | --- | --- |
-| Jev | Unsupported | Unsupported | Unsupported | Unsupported | Supported |
-| OpenAI Decisions | Supported; up to 128 images, preserving order | Supported | Supported | Supported | Unsupported |
-| Cloudflare Clef / Clef-flash | Supported; up to four images before text | Supported | Supported; 2–10 levels | Unsupported | Unsupported |
-| Cloudflare Clef-omni | Supported; up to four images before audio/video/text | Supported | Supported; 2–10 levels | Unsupported | Unsupported |
+| Jev | Ordered text; images with explicit opt-in | Unsupported | Unsupported | Unsupported | Supported |
+| OpenAI Decisions | Supported; preserving order | Supported | Supported | Supported | Unsupported |
+| Cloudflare Clef / Clef-flash | Supported; images before text | Supported | Supported; ordered levels | Unsupported | Unsupported |
+| Cloudflare Clef-omni | Supported; images before audio/video/text | Supported | Supported; ordered levels | Unsupported | Unsupported |
 | OpenAI-compatible / OpenRouter / Anthropic | Unsupported | Unsupported | Unsupported | Unsupported | Supported; service-specific catalog |
 
 `bridge.getCapabilities(model)` reports the local profile, and
 `bridge.validate(request)` checks that profile and provider preflight without
 inference. These methods do not authenticate an account or query availability.
-Legacy choice maps and score rubrics have their own limits, described in the
+Legacy choice maps and score rubrics have structural requirements, described in the
 [SDK reference](SDK.md#question-builders). Custom providers declare additional
 capabilities explicitly.
 
-Omni additionally accepts up to four audio clips and two videos. The optional
-capability fields `audio`, `videos`, `maxAudioClips`, and `maxVideos` normalize to
+Omni additionally accepts embedded audio clips and videos; service counts remain
+upstream. The optional capability fields `audio`, `videos`, `maxAudioClips`, and
+`maxVideos` normalize to
 false/zero when omitted, preserving legacy custom profiles. Cloudflare's older
 models and all other shipped providers reject audio/video before inference.
 
-Dedicated `createDecision()` access is available on OpenAI Decisions and
+Jev additionally supports `box` questions on `jev-preview` and pinned 1.14+ models
+when `dangerZone.images` is enabled. Other built-ins reject box questions.
+See the [Jev guide](../guides/JEV.md) for asset placement and experimental opt-ins.
+
+OpenAI additionally supports `conversation`, `toolHistory`, `remoteImages` and
+`promptCaching`. These optional capability flags default to false for existing
+custom providers. Built-in quantitative limits use `null` where admission is
+left to the service; explicit custom-provider limits remain enforced.
+
+Dedicated `createDecision()` access is available on Jev, OpenAI Decisions and
 Cloudflare providers. It uses each service's native request/response shape and
 bypasses bridge preparation and observation hooks.
 
@@ -74,6 +84,12 @@ intermediate language model, skill, portal prompt, or chat conversion is used.
 `GET /v1/models` lists native models. A listed catalog can differ from valid aliases;
 `jev-latest` is the documented stable alias.
 
+`jev-preview` selects the preview release. Images and longer context require
+explicit `dangerZone` settings. Common image input preserves ordering; native
+`createDecision()` additionally accepts JSON assets referenced in state,
+instructions, and criteria. Box outputs preserve normalized edges and confidence.
+See the [Jev guide](../guides/JEV.md) for limits and absence handling.
+
 Pin a version after evaluating it for your workload rather than assuming a moving
 alias yields reproducible quality. Store the returned `model` along with the
 requested model and your question-template revision.
@@ -114,3 +130,10 @@ do not override them. This release has no silent provider failover, model search
 credential refresh, provider-side batch API, or universal quality guarantee.
 Unsupported protocols require an explicit custom decision or generative provider; unsupported server
 features require an explicitly supported mode or a different model.
+
+## Dedicated operations
+
+Clairic is a native extraction model exposed through [extraction](../guides/EXTRACTION.md).
+Its provider is not a DecisionProvider and is not accepted by createBridge.
+[Live Decisions](../guides/LIVE_DECISIONS.md) owns a connection-oriented command
+and event lifecycle through a dedicated export.

package/docs/reference/SDK.md

@@ -7,6 +7,9 @@ TypeScript setup, and CommonJS dynamic import. The source-tree entry point is
 TypeScript declarations are in `src/index.d.mts`; runtime JavaScript is authoritative
 and checked independently of those declarations.
 
+This reference covers **0.1.3**. See
+[version availability](../README.md#version-availability) for earlier versions.
+
 ## Create a bridge
 
 ```javascript
@@ -48,7 +51,7 @@ guides. These are SDK options, not per-evaluation bridge options.
 | --- | --- |
 | `timeoutMs` | 30,000 ms; positive integer through 2,147,483,647; one transport budget for dispatch, retries, backoff, and response reading |
 | `maxRetries` | Additional eligible attempts, 0–10; Jev and generative presets default to 2, native OpenAI and Cloudflare to 0 |
-| `maxRequestBytes` | Complete serialized request ceiling; normally 8 MiB, configurable from 1 byte through 64 MiB; Cloudflare applies its [model-specific budgets](../guides/CLOUDFLARE_DECISIONS.md#embedded-images-and-limits) |
+| `maxRequestBytes` | Complete serialized request ceiling; normally 8 MiB, configurable from 1 byte through 64 MiB; Jev defaults to 32 MiB, with explicit client budgets through 64 MiB; Cloudflare applies its [model-specific budgets](../guides/CLOUDFLARE_DECISIONS.md#embedded-images-and-limits) |
 | `maxResponseBytes` | 8 MiB; configurable from 1 byte through 64 MiB; applies while reading the response body |
 | `fetchImpl` | Optional `(url: string, init?: RequestInit) => Promise<Response>`; defaults to the runtime's `fetch` |
 
@@ -68,8 +71,9 @@ they interact; [errors](ERRORS.md#retry-policy) lists retryable statuses.
 
 ### `bridge.evaluate(request, options?)`
 
-`request` has exactly one of `state` or ordered `input`, `questions`, and optional
-`model` and `safetyIdentifier`. New forms require declared provider capabilities;
+`request` has exactly one of `state`, ordered `input` or `conversation`, plus
+`questions`. Optional fields are `model`, `safetyIdentifier`, `promptCacheKey`
+and `promptCacheOptions`. New forms require declared provider capabilities;
 see [OpenAI Decisions](../guides/OPENAI_DECISIONS.md) and
 [Cloudflare Clef](../guides/CLOUDFLARE_DECISIONS.md). The request model
 wins over the provider's configured default, which an omitted request model inherits.
@@ -81,14 +85,20 @@ resolve to upstream IDs within the provider. No default is assumed for a generat
 independent transport timeout, including Workers AI binding calls.
 
 Ordered parts are `{ type: 'text', text }`, `{ type: 'image', dataUrl, detail? }`,
-`{ type: 'audio', dataUrl }`, or `{ type: 'video', dataUrl }`. Audio/video are
-supported by Cloudflare Clef-omni and explicitly capable custom providers; other
+`{ type: 'image', url, detail? }`, `{ type: 'audio', dataUrl }`, or
+`{ type: 'video', dataUrl }`. Image `url` and `dataUrl` are exclusive. Text/image
+parts may carry `promptCacheBreakpoint`. Remote HTTP(S) images and cache controls
+require their respective capabilities and are forwarded without URL fetching or
+cache-policy selection. `conversation` uses the native Decisions input-item union;
+see [conversation and prompt caching](../guides/OPENAI_DECISIONS.md#conversation-and-prompt-caching).
+Audio/video are supported by Cloudflare Clef-omni and explicitly capable custom providers; other
 built-ins reject them before dispatch. Cloudflare requires images → audio →
-videos → text. Media use embedded data URLs, with format and size checks described
-in the [Cloudflare guide](../guides/CLOUDFLARE_DECISIONS.md#omni-audio-and-video).
+videos → text. Its media use embedded data URLs, with format and client-budget
+checks described in the [Cloudflare guide](../guides/CLOUDFLARE_DECISIONS.md#omni-audio-and-video).
 
-The bridge snapshots and freezes its input, runs sequential state or input preparation,
-invokes the provider once, validates the result, then observes an immutable result.
+The bridge snapshots and freezes its input, runs preparation hooks for the
+selected input form, invokes the provider once, validates the result, then
+observes an immutable result.
 Built-in transports can retry eligible response statuses within that invocation
 when client retries are configured.
 
@@ -146,19 +156,22 @@ const q3 = score('How far did processing progress?', [
 ]);
 ```
 
+`box(instructions)` returns a box question with no criteria; supported providers
+must declare `boxes: true`. Jev supports it with experimental image opt-in and
+a supported model; see [Jev images and boxes](../guides/JEV.md).
+
 Builders return immutable question objects. `choice(instructions, criteria)` accepts
-a label map containing 1 to 255 options. `noul(instructions, criteria?)` accepts an
+a nonempty label map. `noul(instructions, criteria?)` accepts an
 optional criteria object,
-with only `true` and `false` keys. `score(instructions, criteria)` accepts **2–10**
+with only `true` and `false` keys. `score(instructions, criteria)` accepts at least two
 ordered levels; numeric level indices are zero-based. There is no boolean alias:
 `noul` means a probability, not a thresholded truth value.
 
 `choice(instructions, options)` accepts ordered objects with unique string or
 boolean `value` fields and optional text or structured JSON descriptions. Boolean `true` and string
 `"true"` remain distinct. `scoreLevels(instructions, levels)` accepts at least two
-ordered label/description objects. Provider preflight applies service limits:
-OpenAI Decisions and Cloudflare require 2–255 choices; Cloudflare limits scores
-to 2–10 levels, while OpenAI labelled scores have no additional client count cap.
+ordered label/description objects. Provider preflight enforces structural requirements:
+OpenAI Decisions and Cloudflare require at least two choices; maximum service counts remain upstream.
 
 ## Returned data
 
@@ -201,7 +214,8 @@ rubric exactly. Generative providers calculate score and legend locally. Native
 values are validated and preserved, not normalized or replaced.
 
 **Usage:** `input_tokens` and `output_tokens` are nonnegative integers or null.
-Jev, OpenAI Decisions, and Cloudflare require reported integer counts. OpenAI and
+Jev accepts explicitly null counts as unknown; OpenAI Decisions and Cloudflare
+require reported integer counts. OpenAI and
 Anthropic cache creation/read counts are preserved separately when provided;
 Cloudflare does not fabricate cache or total-token fields. No total price, inferred cache saving, or
 estimated token count is fabricated.
@@ -228,20 +242,26 @@ estimated token count is fabricated.
 
 Metadata can have additional JSON fields. Application logic should not assume
 unavailable metadata exists. Result objects and nested data returned by the bridge
-are immutable. Standalone validation functions return snapshots, not frozen values.
+are immutable. Standalone common `validateRequest` and `validateResult` return
+snapshots without freezing them; dedicated extraction and Live validators return
+frozen snapshots.
 
-`schemaVersion` remains 1 for legacy requests and 2 for ordered images/text or
-richer question forms. Audio/video requests use 3. This result version is separate
-from the CLI configuration schema, which remains 1.
+`schemaVersion` is selected by the highest applicable feature: 5 for conversation,
+remote-image URLs or prompt-cache controls; 4 for boxes; 3 for audio/video; 2 for
+ordered images/text, typed choices, labelled scores or a safety identifier; and
+1 for legacy requests. The CLI configuration schema remains 1. Extraction and
+Live use their dedicated native envelopes rather than a common result version.
 
 ## Extensions
 
 An extension has a unique printable `name` (maximum 100 characters), optional
-`prepareState(state, context)`, `prepareInput(input, context)`, and
+`prepareState(state, context)`, `prepareInput(input, context)`,
+`prepareConversation(items, context)`, and
 `onResult(result, context)`. Preparation extensions must support the request's
 input form; incompatible hooks fail explicitly before dispatch.
 
-Preparation returns replacement state or input, or `undefined` to leave it unchanged.
+Preparation returns replacement state, ordered input or conversation, or
+`undefined` to leave it unchanged.
 Preparation exceptions fail before inference with `EXTENSION_ERROR`; transformed
 content is revalidated, including capabilities and provider preflight. Preparation
 cannot rewrite question definitions or switch the model.
@@ -304,6 +324,8 @@ automatic model fallback. The CLI has a separate streaming JSONL implementation.
 - `createProvider(config)`: factory requiring an explicit `type` equal to `jev`,
   `openai-decisions`, or `cloudflare-decisions`.
 - `JevProvider`, `OpenAIDecisionsProvider`, `CloudflareDecisionsProvider`: native provider classes.
+- `box(instructions)` and `JevProvider.createDecision(request, options?)`:
+  bounding boxes and native JSON assets; see the [Jev guide](../guides/JEV.md).
 - `scoreLevels(instructions, levels)` and the array overload of `choice`:
   labelled rubrics and typed string/boolean options, with provider capability checks.
 - `OpenAIDecisionsProvider.createDecision(request, options?)`: dedicated native
@@ -314,9 +336,9 @@ automatic model fallback. The CLI has a separate streaming JSONL implementation.
   an own `input.model` property or an explicitly supplied default; inherited
   models are ignored, and it never selects a Jev model.
   Question builders and schema generation validate without selecting an inference model.
-- `validateResult(input, questions, { native = false, probabilityDecimalPlaces })`: snapshot supplied
+- `validateResult(input, questions, { native = false, nullableUsage = false, probabilityDecimalPlaces })`: snapshot supplied
   questions and validate the canonical result; native mode requires confidence
-  and reported counts.
+  and reported counts unless the provider explicitly enables nullable usage.
 - `decideChoice(answer, { minProbability, minMargin = 0, abstainOptions = [], probabilityDecimalPlaces })`:
   returns a policy result, never executes an action. `minProbability` is required.
 - `DecisionError`, `publicError(error)`: public structured failure handling.
@@ -354,14 +376,14 @@ decision providers may preserve custom string labels. Generative prompt and
 normalization helpers independently validate the shared-state, legacy-question
 profile and explicitly reject unsupported request capabilities.
 Decision-kind classification alone does not require confidence or known counts;
-`validateResult({ native: true })` is a separate strict validation option used for
+`validateResult(result, questions, { native: true })` is a separate strict validation option used for
 Jev's contract. See [custom decision](../guides/CUSTOM_DECISION.md),
 [custom generative](../guides/CUSTOM_GENERATIVE.md), and the shared
 [custom contract](../guides/CUSTOM_PROVIDERS.md).
 
 ## Validation guarantees
 
-Legacy choice criteria maps allow at most 255 options, matching Jev's contract. Noul
+Legacy choice criteria maps must be nonempty. Noul
 criteria must be omitted or an object; its present true/false descriptions cannot
 be raw null. Score levels likewise cannot be raw null (nested null JSON values are
 still allowed). These invalid forms now fail before provider dispatch.
@@ -371,7 +393,10 @@ the answer. `evaluateBatch()` validates array holes as invalid requests before a
 item is dispatched, rather than spending on adjacent valid entries.
 
 The optional third argument to `validateResult()` must be a plain options object
-with optional boolean `native` and integer `probabilityDecimalPlaces` (1–15) fields.
+with optional boolean `native`, boolean `nullableUsage`, and integer
+`probabilityDecimalPlaces` (1–15) fields. Both booleans default to false.
+`nullableUsage: true` permits null token counts when native validation is enabled;
+it does not relax the native confidence requirement.
 Providers can declare a pure synchronous `getResultValidationOptions(model)` hook;
 its policy is validated before inference and is not read from response metadata.
 Returning a Promise is a configuration error; its rejection is observed without
@@ -392,3 +417,24 @@ Native provider cancellation/timeout errors preserve the last observed sanitized
 request ID and attempt count when available. The bridge may settle its own
 cancellation race before the provider returns diagnostics; do not require those
 optional fields on every `ABORTED` or `TIMEOUT` error.
+
+## Dedicated operations
+
+Import these subpaths under `@fayegram-ai/decision-bridge/`. Neither is selected
+by the root `createProvider` factory or implements the bridge's `evaluate` contract.
+
+| Export | Runtime API | Result / integration |
+| --- | --- | --- |
+| `extraction` | `CloudflareExtractionProvider`, `validateExtractionRequest`, `extractBatch` | Immutable `{ extraction, meta }`, with native values and model/transport diagnostics; [extraction guide](../guides/EXTRACTION.md) |
+| `live` | `createLiveDecisions`, `validateLiveConfiguration`, `validateLiveCommand`, `validateLiveEvent` | Commands, acknowledgements and event subscriptions over a caller-owned connection; [Live guide](../guides/LIVE_DECISIONS.md) |
+
+Both export their request, result, configuration and transport types. Extraction
+supports REST or a Workers AI binding; Live owns no authentication, audio,
+connection establishment or reconnection. See the [CLI reference](CLI.md) for
+their command namespaces.
+
+Service quotas, maximum request counts, context/media limits and Gateway
+admission remain authoritative upstream. Offline validation checks adapter
+structure and client resource budgets. SDK and CLI do not estimate tokens or
+enforce RPM/TPM. Explicit transport budgets can select up to 64 MiB, including
+Jev and all Clef models; existing default budgets are retained.

package/docs/reference/SOURCES.md

@@ -11,6 +11,10 @@ reference does not imply that authenticated inference was run against its servic
 | TypeSafe request/response API | https://docs.typesafe.ai/api |
 | TypeSafe JavaScript examples | https://docs.typesafe.ai/sdk/javascript |
 | Native model listing and aliases | https://docs.typesafe.ai/models |
+| Jev image assets and experimental opt-in | https://docs.typesafe.ai/images |
+| Jev bounding boxes | https://docs.typesafe.ai/primitives/box |
+| Jev 1.14 release | https://typesafe.ai/blog/jev-1-14 |
+| Jev nullable usage compatibility | https://docs.typesafe.ai/sdk/javascript/changelog |
 | Choice decisions | https://docs.typesafe.ai/primitives/choice |
 | Noul probabilities | https://docs.typesafe.ai/primitives/noul |
 | Score rubric and weighted expectation | https://docs.typesafe.ai/primitives/score |
@@ -18,6 +22,8 @@ reference does not imply that authenticated inference was run against its servic
 | OpenAI structured output modes | https://platform.openai.com/docs/guides/structured-outputs |
 | OpenAI native Decisions guide | https://developers.openai.com/api/docs/guides/decisions |
 | OpenAI Decisions request/response contract | https://developers.openai.com/api/reference/resources/decisions/methods/create |
+| OpenAI Live Decisions guide | https://developers.openai.com/api/docs/guides/decisions-voice |
+| OpenAI Live protocol | https://developers.openai.com/api/reference/resources/live/primary-websocket |
 | OpenRouter structured output and routing | https://openrouter.ai/docs/guides/features/structured-outputs |
 | Anthropic Messages, tools, usage, and stop reasons | https://platform.claude.com/docs/en/api/messages/create |
 | GitHub checkout action | https://github.com/actions/checkout |
@@ -44,6 +50,11 @@ separate operational check.
 - [Cloudflare-owned model implementation](https://huggingface.co/Cloudflare/clef-flash/blob/main/joint_schema_model.py), including output precision
 - [Cloudflare-owned Omni implementation](https://huggingface.co/Cloudflare/clef-omni/blob/main/joint_schema_model.py), including grouped media and output precision
 
+## Cloudflare extraction
+
+- [Extraction concepts](https://developers.cloudflare.com/workers-ai/concepts/extraction-models/)
+- [Clairic schema snapshot](https://github.com/cloudflare/cloudflare-docs/blob/a5cc2cba1a31b8bd95eda69dad151e6cd307ac7b/src/content/workers-ai-models/clairic.json), the pinned basis for established native fields; underspecified predictive JSON remains preserved
+
 ## Package and repository release
 
 - [Scoped public npm packages](https://docs.npmjs.com/creating-and-publishing-scoped-public-packages/)

package/examples/extraction.mjs

@@ -0,0 +1,16 @@
+// Explicit execution calls Cloudflare; configure account/token in your environment.
+import { CloudflareExtractionProvider } from '../src/extraction/index.mjs';
+import { publicError } from '../src/index.mjs';
+
+try {
+    const provider = new CloudflareExtractionProvider();
+    const result = await provider.extract({
+        state: 'Invoice total: 1080 USD. Due date: 2026-11-01.',
+        reference_date: '2026-10-20',
+        fields: { amount: { type: 'number', unit: 'USD' }, due_date: { type: 'date' } },
+    });
+    console.log(JSON.stringify(result, null, 2));
+} catch (error) {
+    console.error(publicError(error));
+    process.exitCode = 1;
+}

package/examples/live-decisions.mjs

@@ -0,0 +1,24 @@
+// Call with your already authenticated, open WebSocket-like Live connection.
+import { createLiveDecisions } from '../src/live/index.mjs';
+
+export function attachLiveDecisions(connection) {
+    return createLiveDecisions({ transport: {
+        send(command) { connection.send(JSON.stringify(command)); },
+        subscribe(listener) {
+            const message = event => {
+                try { listener({ kind: 'event', event: JSON.parse(event.data) }); }
+                catch { listener({ kind: 'error' }); }
+            };
+            const close = () => listener({ kind: 'close' });
+            const error = () => listener({ kind: 'error' });
+            connection.addEventListener('message', message);
+            connection.addEventListener('close', close);
+            connection.addEventListener('error', error);
+            return () => {
+                connection.removeEventListener('message', message);
+                connection.removeEventListener('close', close);
+                connection.removeEventListener('error', error);
+            };
+        },
+    } });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fayegram-ai/decision-bridge",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "JavaScript SDK and CLI for structured decisions across native decision APIs and configurable model providers",
   "repository": {
     "type": "git",
@@ -44,6 +44,16 @@
       "browser": "./src/custom/generative/index.mjs",
       "import": "./src/custom/generative/index.mjs"
     },
+    "./extraction": {
+      "types": "./src/extraction/index.d.mts",
+      "browser": "./src/extraction/index.mjs",
+      "import": "./src/extraction/index.mjs"
+    },
+    "./live": {
+      "types": "./src/live/index.d.mts",
+      "browser": "./src/live/index.mjs",
+      "import": "./src/live/index.mjs"
+    },
     "./config.schema.json": "./schemas/decision.config.schema.json"
   },
   "bin": {

package/schemas/decision.config.schema.json

@@ -1,7 +1,7 @@
 {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
     "title": "Decision Bridge configuration",
-    "description": "Explicit schemaVersion 1 configuration. Runtime preflight also enforces URL, credential and provider limits.",
+    "description": "Explicit schemaVersion 1 configuration. Runtime validation checks adapter structure and client resource budgets; service limits remain authoritative upstream.",
     "oneOf": [
         {
             "type": "object",
@@ -29,13 +29,27 @@
                     "$ref": "#/$defs/retries"
                 },
                 "maxRequestBytes": {
-                    "$ref": "#/$defs/bytes"
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 67108864
                 },
                 "maxResponseBytes": {
                     "$ref": "#/$defs/bytes"
                 },
                 "provider": {
                     "const": "jev"
+                },
+                "dangerZone": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "properties": {
+                        "images": {
+                            "type": "boolean"
+                        },
+                        "longContext": {
+                            "type": "boolean"
+                        }
+                    }
                 }
             }
         },
@@ -393,6 +407,89 @@
                 "provider",
                 "module"
             ]
+        },
+        {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+                "$schema": {
+                    "$ref": "#/$defs/text"
+                },
+                "schemaVersion": {
+                    "const": 1
+                },
+                "model": {
+                    "enum": [
+                        "clairic",
+                        "@cf/cloudflare/clairic"
+                    ]
+                },
+                "apiKeyEnv": {
+                    "$ref": "#/$defs/keyEnv"
+                },
+                "timeoutMs": {
+                    "$ref": "#/$defs/timeout"
+                },
+                "baseURL": {
+                    "$ref": "#/$defs/text"
+                },
+                "maxRetries": {
+                    "$ref": "#/$defs/retries"
+                },
+                "maxRequestBytes": {
+                    "$ref": "#/$defs/bytes"
+                },
+                "maxResponseBytes": {
+                    "$ref": "#/$defs/bytes"
+                },
+                "provider": {
+                    "const": "cloudflare-extraction"
+                },
+                "accountId": {
+                    "$ref": "#/$defs/text"
+                },
+                "rejectIfBusy": {
+                    "$ref": "#/$defs/boolean"
+                },
+                "gateway": {
+                    "$ref": "#/$defs/gateway"
+                }
+            },
+            "required": [
+                "provider"
+            ],
+            "allOf": [
+                {
+                    "if": {
+                        "properties": {
+                            "rejectIfBusy": {
+                                "const": true
+                            }
+                        },
+                        "required": [
+                            "rejectIfBusy"
+                        ]
+                    },
+                    "then": {
+                        "properties": {
+                            "maxRetries": {
+                                "const": 0
+                            },
+                            "gateway": {
+                                "properties": {
+                                    "retries": {
+                                        "properties": {
+                                            "maxAttempts": {
+                                                "const": 1
+                                            }
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                    }
+                }
+            ]
         }
     ],
     "$defs": {
@@ -482,19 +579,16 @@
                 "id": {
                     "type": "string",
                     "minLength": 1,
-                    "maxLength": 64,
                     "pattern": "^[\\x20-\\x7e]*\\S[\\x20-\\x7e]*$"
                 },
                 "cacheKey": {
                     "type": "string",
                     "minLength": 1,
-                    "maxLength": 200,
                     "pattern": "^[\\x20-\\x7e]*\\S[\\x20-\\x7e]*$"
                 },
                 "cacheTtl": {
                     "type": "integer",
-                    "minimum": 60,
-                    "maximum": 2592000
+                    "minimum": 0
                 },
                 "skipCache": {
                     "type": "boolean"
@@ -509,7 +603,6 @@
                 },
                 "metadata": {
                     "type": "object",
-                    "maxProperties": 5,
                     "propertyNames": {
                         "not": {
                             "pattern": "^cf\\."
@@ -530,13 +623,11 @@
                     "properties": {
                         "maxAttempts": {
                             "type": "integer",
-                            "minimum": 1,
-                            "maximum": 5
+                            "minimum": 1
                         },
                         "retryDelayMs": {
                             "type": "integer",
-                            "minimum": 0,
-                            "maximum": 60000
+                            "minimum": 0
                         },
                         "backoff": {
                             "enum": [