@full-self-browsing/lattice 1.3.0 → 1.5.0

package/dist/replay-CtIhpLek.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-CtIhpLek.js","names":["fail"],"sources":["../src/observability/otel.ts","../src/receipts/keyset.ts","../src/receipts/remote-signer.ts","../src/receipts/sign.ts","../src/receipts/verify.ts","../src/version.ts","../src/audit/external-execution.ts","../src/replay/materialize.ts","../src/replay/replay.ts"],"sourcesContent":["import { receiptCid } from \"../receipts/cid.js\";\nimport type { ReceiptEnvelope } from \"../receipts/types.js\";\nimport type { RunEvent, RunEventSink } from \"../tracing/tracing.js\";\n\nexport type OtelAttributeValue =\n  | string\n  | number\n  | boolean\n  | readonly string[]\n  | readonly number[]\n  | readonly boolean[];\n\nexport type OtelAttributes = Record<string, OtelAttributeValue>;\n\nexport interface OtelSpanStatus {\n  readonly code: number;\n  readonly message?: string;\n}\n\nexport interface OtelSpanLike {\n  setAttribute?(key: string, value: OtelAttributeValue): unknown;\n  setAttributes?(attributes: OtelAttributes): unknown;\n  addEvent?(name: string, attributes?: OtelAttributes): unknown;\n  setStatus?(status: OtelSpanStatus): unknown;\n  recordException?(error: Error | string | Record<string, unknown>): unknown;\n  end?(endTime?: Date | number): unknown;\n}\n\nexport interface OtelTracerLike {\n  startSpan(\n    name: string,\n    options?: {\n      readonly attributes?: OtelAttributes;\n      readonly startTime?: Date | number;\n    },\n  ): OtelSpanLike;\n}\n\nexport type OtelContentCaptureMode = \"none\" | \"metadata\";\n\nexport interface OtelSanitizerOptions {\n  readonly contentCapture?: OtelContentCaptureMode;\n}\n\nexport interface OtelRunEventSinkOptions extends OtelSanitizerOptions {\n  readonly tracer: OtelTracerLike;\n  readonly spanName?: string;\n}\n\nexport interface OtelHttpTraceConfig {\n  readonly endpoint: string;\n  readonly headers: Record<string, string>;\n}\n\nexport interface LangfuseOtlpConfigOptions {\n  readonly baseUrl?: string;\n  readonly publicKey?: string;\n  readonly secretKey?: string;\n  readonly authString?: string;\n  readonly ingestionVersion?: string;\n  readonly headers?: Record<string, string>;\n}\n\nexport interface PhoenixOtlpConfigOptions {\n  readonly baseUrl?: string;\n  readonly endpoint?: string;\n  readonly apiKey?: string;\n  readonly projectName?: string;\n  readonly headers?: Record<string, string>;\n}\n\nconst DEFAULT_SPAN_NAME = \"lattice.run\";\nconst DEFAULT_LANGFUSE_BASE_URL = \"https://cloud.langfuse.com\";\nconst DEFAULT_PHOENIX_BASE_URL = \"http://localhost:6006\";\nconst OTEL_STATUS_OK = 1;\nconst OTEL_STATUS_ERROR = 2;\nconst SECRET_KEY_RE = /api[-_]?key|authorization|credentials?|headers?|password|secret|token/iu;\nconst CONTENT_KEY_RE = /artifact|body|content|input|inputs|message|messages|output|outputs|payload|prompt|rawOutputs|task|value/iu;\n\nexport function createOtelRunEventSink(\n  options: OtelRunEventSinkOptions,\n): RunEventSink {\n  const spans = new Map<string, OtelSpanLike>();\n\n  return async (event) => {\n    const span = getOrCreateRunSpan(event, options, spans);\n    const attributes = await createRunEventAttributes(event, options);\n    setSpanAttributes(span, attributes);\n    span.addEvent?.(`lattice.${event.kind}`, attributes);\n\n    if (event.kind === \"capabilities.negotiation.fallback\") {\n      span.setStatus?.({ code: OTEL_STATUS_OK });\n      span.end?.(eventTime(event));\n      spans.delete(event.runId);\n      return;\n    }\n\n    if (event.kind === \"run.complete\") {\n      span.setStatus?.({ code: OTEL_STATUS_OK });\n      span.end?.(eventTime(event));\n      spans.delete(event.runId);\n      return;\n    }\n\n    if (event.kind === \"run.failed\") {\n      const message = metadataString(event, \"reason\");\n      span.setStatus?.({\n        code: OTEL_STATUS_ERROR,\n        ...(message !== undefined ? { message } : {}),\n      });\n      if (message !== undefined) {\n        span.recordException?.(message);\n      }\n      span.end?.(eventTime(event));\n      spans.delete(event.runId);\n    }\n  };\n}\n\nexport function sanitizeRunEventAttributes(\n  event: RunEvent,\n  options: OtelSanitizerOptions = {},\n): OtelAttributes {\n  const attributes: OtelAttributes = {\n    \"lattice.event.kind\": event.kind,\n    \"lattice.run.id\": event.runId,\n  };\n\n  assignString(attributes, \"lattice.plan.id\", event.planId);\n  assignString(attributes, \"lattice.stage.id\", event.stageId);\n  assignString(attributes, \"lattice.provider.id\", event.providerId);\n  assignString(attributes, \"lattice.model.id\", event.modelId);\n  assignString(attributes, \"lattice.artifact.id\", event.artifactId);\n  assignString(attributes, \"gen_ai.provider.name\", event.providerId);\n  assignString(attributes, \"gen_ai.request.model\", event.modelId);\n\n  if (event.kind === \"stream.start\" || event.kind === \"stream.complete\" || event.kind === \"stream.failed\") {\n    attributes[\"gen_ai.request.stream\"] = true;\n  }\n\n  const metadata = event.metadata ?? {};\n  assignString(attributes, \"lattice.event.status\", metadataString(event, \"status\"));\n  assignBoolean(attributes, \"lattice.error.present\", metadataString(event, \"error\") !== undefined ? true : undefined);\n  assignString(attributes, \"lattice.failure.reason\", metadataString(event, \"reason\"));\n  assignString(attributes, \"lattice.tripwire.invariant_id\", asString(metadata.invariantId));\n  assignString(attributes, \"lattice.artifact.source\", asString(metadata.source));\n  assignString(attributes, \"lattice.receipt.id\", asString(metadata.receiptId));\n  assignBoolean(attributes, \"lattice.receipt.mint_error.present\", asString(metadata.mintError) !== undefined ? true : undefined);\n  assignString(attributes, \"lattice.route.selected_model\", asString(metadata.selected));\n  assignNumber(attributes, \"lattice.route.rejected.count\", asNumber(metadata.rejected));\n  assignNumber(attributes, \"lattice.route.fallback.count\", asNumber(metadata.fallbacks));\n  assignBoolean(attributes, \"lattice.provider.attempt.fallback\", asBoolean(metadata.fallback));\n  assignNumber(attributes, \"lattice.context.estimated_tokens\", asNumber(metadata.estimatedTokens));\n  assignNumber(attributes, \"lattice.context.included.count\", asNumber(metadata.included));\n  assignNumber(attributes, \"lattice.context.summarized.count\", asNumber(metadata.summarized));\n  assignNumber(attributes, \"lattice.context.omitted.count\", asNumber(metadata.omitted));\n  assignString(attributes, \"lattice.tool.name\", asString(metadata.toolName));\n  assignString(attributes, \"lattice.tool.call.id\", asString(metadata.callId));\n  assignStringArray(attributes, \"lattice.output.names\", asStringArray(metadata.outputNames));\n  assignUsage(attributes, metadata);\n  assignGateway(attributes, metadata.gateway);\n  captureSafeMetadata(attributes, metadata, options);\n\n  return attributes;\n}\n\nexport async function createOtelReceiptAttributes(\n  envelope: ReceiptEnvelope,\n): Promise<OtelAttributes> {\n  const attributes: OtelAttributes = {\n    \"lattice.receipt.cid\": await receiptCid(envelope),\n    \"lattice.receipt.signature.count\": envelope.signatures.length,\n  };\n  assignString(\n    attributes,\n    \"lattice.receipt.signature.keyid\",\n    envelope.signatures[0]?.keyid,\n  );\n  return attributes;\n}\n\nexport function createLangfuseOtlpConfig(\n  options: LangfuseOtlpConfigOptions = {},\n): OtelHttpTraceConfig {\n  const authString = langfuseAuthString(options);\n  return {\n    endpoint: langfuseTraceEndpoint(options.baseUrl ?? DEFAULT_LANGFUSE_BASE_URL),\n    headers: {\n      ...(authString !== undefined ? { Authorization: `Basic ${authString}` } : {}),\n      \"x-langfuse-ingestion-version\": options.ingestionVersion ?? \"4\",\n      ...(options.headers ?? {}),\n    },\n  };\n}\n\nexport function createPhoenixOtlpConfig(\n  options: PhoenixOtlpConfigOptions = {},\n): OtelHttpTraceConfig {\n  return {\n    endpoint: options.endpoint ?? phoenixTraceEndpoint(options.baseUrl ?? DEFAULT_PHOENIX_BASE_URL),\n    headers: {\n      ...(options.apiKey !== undefined ? { Authorization: `Bearer ${options.apiKey}` } : {}),\n      ...(options.projectName !== undefined ? { \"x-project-name\": options.projectName } : {}),\n      ...(options.headers ?? {}),\n    },\n  };\n}\n\nfunction getOrCreateRunSpan(\n  event: RunEvent,\n  options: OtelRunEventSinkOptions,\n  spans: Map<string, OtelSpanLike>,\n): OtelSpanLike {\n  const existing = spans.get(event.runId);\n  if (existing !== undefined) {\n    return existing;\n  }\n\n  const span = options.tracer.startSpan(options.spanName ?? DEFAULT_SPAN_NAME, {\n    attributes: sanitizeRunEventAttributes(event, options),\n    startTime: eventTime(event),\n  });\n  spans.set(event.runId, span);\n  return span;\n}\n\nfunction setSpanAttributes(span: OtelSpanLike, attributes: OtelAttributes): void {\n  if (span.setAttributes !== undefined) {\n    span.setAttributes(attributes);\n    return;\n  }\n\n  for (const [key, value] of Object.entries(attributes)) {\n    span.setAttribute?.(key, value);\n  }\n}\n\nasync function createRunEventAttributes(\n  event: RunEvent,\n  options: OtelSanitizerOptions,\n): Promise<OtelAttributes> {\n  const attributes = sanitizeRunEventAttributes(event, options);\n  const envelope = findReceiptEnvelope(event.metadata);\n  if (envelope === undefined) {\n    return attributes;\n  }\n\n  try {\n    return {\n      ...attributes,\n      ...(await createOtelReceiptAttributes(envelope)),\n    };\n  } catch {\n    return attributes;\n  }\n}\n\nfunction eventTime(event: RunEvent): Date {\n  return new Date(event.timestamp);\n}\n\nfunction metadataString(event: RunEvent, key: string): string | undefined {\n  return asString(event.metadata?.[key]);\n}\n\nfunction assignString(\n  attributes: OtelAttributes,\n  key: string,\n  value: string | undefined,\n): void {\n  if (value !== undefined) {\n    attributes[key] = value;\n  }\n}\n\nfunction assignNumber(\n  attributes: OtelAttributes,\n  key: string,\n  value: number | undefined,\n): void {\n  if (value !== undefined) {\n    attributes[key] = value;\n  }\n}\n\nfunction assignBoolean(\n  attributes: OtelAttributes,\n  key: string,\n  value: boolean | undefined,\n): void {\n  if (value !== undefined) {\n    attributes[key] = value;\n  }\n}\n\nfunction assignStringArray(\n  attributes: OtelAttributes,\n  key: string,\n  value: readonly string[] | undefined,\n): void {\n  if (value !== undefined && value.length > 0) {\n    attributes[key] = value;\n  }\n}\n\nfunction assignNumberArray(\n  attributes: OtelAttributes,\n  key: string,\n  value: readonly number[] | undefined,\n): void {\n  if (value !== undefined && value.length > 0) {\n    attributes[key] = value;\n  }\n}\n\nfunction assignBooleanArray(\n  attributes: OtelAttributes,\n  key: string,\n  value: readonly boolean[] | undefined,\n): void {\n  if (value !== undefined && value.length > 0) {\n    attributes[key] = value;\n  }\n}\n\nfunction asString(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction asNumber(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : undefined;\n}\n\nfunction asBoolean(value: unknown): boolean | undefined {\n  return typeof value === \"boolean\" ? value : undefined;\n}\n\nfunction asStringArray(value: unknown): readonly string[] | undefined {\n  return Array.isArray(value) && value.every((item) => typeof item === \"string\")\n    ? value\n    : undefined;\n}\n\nfunction asNumberArray(value: unknown): readonly number[] | undefined {\n  return Array.isArray(value) && value.every((item) => typeof item === \"number\" && Number.isFinite(item))\n    ? value\n    : undefined;\n}\n\nfunction asBooleanArray(value: unknown): readonly boolean[] | undefined {\n  return Array.isArray(value) && value.every((item) => typeof item === \"boolean\")\n    ? value\n    : undefined;\n}\n\nfunction assignUsage(attributes: OtelAttributes, metadata: Record<string, unknown>): void {\n  const usage = usageFrom(metadata.normalizedUsage)\n    ?? usageFrom(metadata.usage)\n    ?? usageFrom(metadata);\n\n  if (usage === undefined) {\n    return;\n  }\n\n  assignNumber(attributes, \"gen_ai.usage.input_tokens\", usage.inputTokens);\n  assignNumber(attributes, \"gen_ai.usage.output_tokens\", usage.outputTokens);\n  assignNumber(attributes, \"llm.token_count.prompt\", usage.inputTokens);\n  assignNumber(attributes, \"llm.token_count.completion\", usage.outputTokens);\n  assignNumber(attributes, \"lattice.usage.cost_usd\", usage.costUsd);\n}\n\nfunction usageFrom(value: unknown):\n  | {\n      readonly inputTokens?: number;\n      readonly outputTokens?: number;\n      readonly costUsd?: number;\n    }\n  | undefined {\n  if (!isRecord(value)) {\n    return undefined;\n  }\n\n  const inputTokens = asNumber(value.promptTokens) ?? asNumber(value.inputTokens);\n  const outputTokens = asNumber(value.completionTokens) ?? asNumber(value.outputTokens);\n  const costUsd = asNumber(value.costUsd);\n\n  if (inputTokens === undefined && outputTokens === undefined && costUsd === undefined) {\n    return undefined;\n  }\n\n  return {\n    ...(inputTokens !== undefined ? { inputTokens } : {}),\n    ...(outputTokens !== undefined ? { outputTokens } : {}),\n    ...(costUsd !== undefined ? { costUsd } : {}),\n  };\n}\n\nfunction assignGateway(attributes: OtelAttributes, value: unknown): void {\n  if (!isRecord(value)) {\n    return;\n  }\n\n  assignBoolean(attributes, \"lattice.gateway.used\", asBoolean(value.used));\n  assignString(attributes, \"lattice.gateway.provider.id\", asString(value.providerId));\n  assignString(attributes, \"lattice.gateway.selected_provider.id\", asString(value.selectedProviderId));\n  assignString(attributes, \"lattice.gateway.requested_model\", asString(value.requestedModel));\n  assignString(attributes, \"lattice.gateway.observed_model\", asString(value.observedModel));\n  assignStringArray(attributes, \"lattice.gateway.fallback_models\", asStringArray(value.fallbackModels));\n\n  const requestedModel = asString(value.requestedModel);\n  const observedModel = asString(value.observedModel);\n  if (requestedModel !== undefined && attributes[\"gen_ai.request.model\"] === undefined) {\n    attributes[\"gen_ai.request.model\"] = requestedModel;\n  }\n  assignString(attributes, \"gen_ai.response.model\", observedModel);\n}\n\nfunction captureSafeMetadata(\n  attributes: OtelAttributes,\n  metadata: Record<string, unknown>,\n  options: OtelSanitizerOptions,\n): void {\n  if (options.contentCapture !== \"metadata\") {\n    return;\n  }\n\n  const knownKeys = new Set([\n    \"callId\",\n    \"estimatedTokens\",\n    \"error\",\n    \"fallback\",\n    \"fallbacks\",\n    \"gateway\",\n    \"included\",\n    \"invariantId\",\n    \"mintError\",\n    \"normalizedUsage\",\n    \"omitted\",\n    \"outputNames\",\n    \"reason\",\n    \"receiptId\",\n    \"rejected\",\n    \"selected\",\n    \"source\",\n    \"status\",\n    \"summarized\",\n    \"toolName\",\n    \"usage\",\n  ]);\n\n  for (const [key, value] of Object.entries(metadata)) {\n    if (knownKeys.has(key) || isUnsafeMetadataKey(key)) {\n      continue;\n    }\n    const attrKey = `lattice.metadata.${safeAttributeKey(key)}`;\n    assignString(attributes, attrKey, asString(value));\n    assignNumber(attributes, attrKey, asNumber(value));\n    assignBoolean(attributes, attrKey, asBoolean(value));\n    assignStringArray(attributes, attrKey, asStringArray(value));\n    assignNumberArray(attributes, attrKey, asNumberArray(value));\n    assignBooleanArray(attributes, attrKey, asBooleanArray(value));\n  }\n}\n\nfunction isUnsafeMetadataKey(key: string): boolean {\n  return SECRET_KEY_RE.test(key) || CONTENT_KEY_RE.test(key);\n}\n\nfunction safeAttributeKey(key: string): string {\n  return key.replace(/[^a-zA-Z0-9_.-]+/gu, \"_\");\n}\n\nfunction findReceiptEnvelope(metadata: Record<string, unknown> | undefined): ReceiptEnvelope | undefined {\n  if (metadata === undefined) {\n    return undefined;\n  }\n\n  const candidates = [metadata.envelope, metadata.receiptEnvelope, metadata.receipt];\n  return candidates.find(isReceiptEnvelope);\n}\n\nfunction isReceiptEnvelope(value: unknown): value is ReceiptEnvelope {\n  return (\n    isRecord(value) &&\n    value.payloadType === \"application/vnd.lattice.receipt+json\" &&\n    typeof value.payload === \"string\" &&\n    Array.isArray(value.signatures) &&\n    value.signatures.every((signature) =>\n      isRecord(signature) &&\n      typeof signature.keyid === \"string\" &&\n      typeof signature.sig === \"string\",\n    )\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction langfuseAuthString(options: LangfuseOtlpConfigOptions): string | undefined {\n  if (options.authString !== undefined) {\n    return options.authString;\n  }\n\n  if (options.publicKey === undefined && options.secretKey === undefined) {\n    return undefined;\n  }\n\n  if (options.publicKey === undefined || options.secretKey === undefined) {\n    throw new Error(\"Langfuse OTLP auth requires both publicKey and secretKey.\");\n  }\n\n  return base64Utf8(`${options.publicKey}:${options.secretKey}`);\n}\n\nfunction langfuseTraceEndpoint(baseUrl: string): string {\n  const base = trimTrailingSlashes(baseUrl);\n  if (base.endsWith(\"/api/public/otel/v1/traces\")) {\n    return base;\n  }\n  if (base.endsWith(\"/api/public/otel\")) {\n    return `${base}/v1/traces`;\n  }\n  return `${base}/api/public/otel/v1/traces`;\n}\n\nfunction phoenixTraceEndpoint(baseUrl: string): string {\n  const base = trimTrailingSlashes(baseUrl);\n  if (base.endsWith(\"/v1/traces\")) {\n    return base;\n  }\n  return `${base}/v1/traces`;\n}\n\nfunction trimTrailingSlashes(value: string): string {\n  return value.replace(/\\/+$/u, \"\");\n}\n\nfunction base64Utf8(value: string): string {\n  const bytes = new TextEncoder().encode(value);\n  let binary = \"\";\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte);\n  }\n  return btoa(binary);\n}\n","import type { KeyEntry, KeySet } from \"./types.js\";\n\n/**\n * In-memory KeySet factory.\n *\n * Verification flow (plan 09-03):\n *   - keySet.lookup(kid) returns undefined  → VerifyError {kind: \"key-not-found\"}\n *   - entry.state === \"revoked\"             → VerifyError {kind: \"key-revoked\"}\n *   - entry.state === \"retired\"             → VerifyOk + keyState: \"retired\" (caller may warn)\n *   - entry.state === \"active\"              → VerifyOk + keyState: \"active\"\n *\n * Duplicate kids: last write wins (deterministic — callers control entry order).\n * Empty entries array is legal — every lookup returns undefined.\n * Returned KeySet exposes only `lookup` — no enumeration.\n *\n * See 09-CONTEXT.md \"Key Management (UNRETROFITTABLE)\".\n */\nexport function createMemoryKeySet(entries: readonly KeyEntry[]): KeySet {\n  const byKid = new Map<string, KeyEntry>();\n  for (const entry of entries) {\n    byKid.set(entry.kid, entry);\n  }\n  return {\n    lookup(kid: string): KeyEntry | undefined {\n      return byKid.get(kid);\n    },\n  };\n}\n","import type { ReceiptSigner } from \"./types.js\";\n\nexport type RemoteReceiptSignerProvider =\n  | \"aws-kms\"\n  | \"gcp-kms\"\n  | \"external-kms\"\n  | (string & {});\n\nexport type RemoteReceiptPayloadFormat = \"dsse-pae\";\n\nexport interface RemoteReceiptSignRequest {\n  readonly kid: string;\n  readonly publicKeyJwk: JsonWebKey;\n  readonly bytes: Uint8Array;\n  readonly payloadFormat: RemoteReceiptPayloadFormat;\n  readonly algorithm: \"Ed25519\";\n  readonly provider?: RemoteReceiptSignerProvider;\n  readonly keyRef?: string;\n  readonly metadata?: Record<string, unknown>;\n}\n\nexport interface RemoteReceiptSignResult {\n  readonly signature: Uint8Array;\n}\n\nexport interface RemoteReceiptSignerOptions {\n  readonly kid: string;\n  readonly publicKeyJwk: JsonWebKey;\n  readonly provider?: RemoteReceiptSignerProvider;\n  readonly keyRef?: string;\n  readonly metadata?: Record<string, unknown>;\n  sign(\n    request: RemoteReceiptSignRequest,\n  ): Promise<Uint8Array | RemoteReceiptSignResult>;\n}\n\n/**\n * Adapt a remote signing service to Lattice's existing ReceiptSigner contract.\n *\n * The callback receives the exact DSSE PAE bytes that createReceipt signs.\n * Cloud-specific request construction, hashing choices, credentials, retries,\n * and audit logging stay outside core.\n */\nexport function createRemoteReceiptSigner(\n  options: RemoteReceiptSignerOptions,\n): ReceiptSigner {\n  return {\n    kid: options.kid,\n    publicKeyJwk: options.publicKeyJwk,\n    async sign(bytes: Uint8Array): Promise<Uint8Array> {\n      const result = await options.sign({\n        kid: options.kid,\n        publicKeyJwk: options.publicKeyJwk,\n        bytes: copyBytes(bytes),\n        payloadFormat: \"dsse-pae\",\n        algorithm: \"Ed25519\",\n        ...(options.provider !== undefined ? { provider: options.provider } : {}),\n        ...(options.keyRef !== undefined ? { keyRef: options.keyRef } : {}),\n        ...(options.metadata !== undefined ? { metadata: options.metadata } : {}),\n      });\n      return copyBytes(result instanceof Uint8Array ? result : result.signature);\n    },\n  };\n}\n\nfunction copyBytes(bytes: Uint8Array): Uint8Array {\n  const copy = new Uint8Array(bytes.byteLength);\n  copy.set(bytes);\n  return copy;\n}\n","/**\n * WebCrypto Ed25519 wrappers + in-memory signer factory.\n *\n * 09-CONTEXT.md (UNRETROFITTABLE):\n *   - Algorithm name is the LITERAL string \"Ed25519\" (no params object needed\n *     for sign/verify; Node 24 subtle accepts both forms).\n *   - ReceiptSigner returns 64-byte Ed25519 signatures.\n *   - The runtime accepts a signer reference, NEVER raw private keys.\n *   - Production users plug their own signer (KMS adapter / OS keyring).\n *     createInMemorySigner is the in-process default for tests and dev.\n *\n * Reconciled in plan 09-03 to import ReceiptSigner from ./types.js (plan 09-01\n * owns the spine). `ReceiptSigner_Local` retained as a deprecated alias for\n * backward compatibility with Wave 1 sibling imports.\n */\n\nimport type { ReceiptSigner } from \"./types.js\";\n\n/**\n * @deprecated Use ReceiptSigner from \"./types.js\". Retained as an alias\n * during the Wave 1 -> Wave 2 reconciliation.\n */\nexport type ReceiptSigner_Local = ReceiptSigner;\n\nconst ALG = \"Ed25519\" as const;\n\n/**\n * Copy a Uint8Array into a fresh ArrayBuffer. WebCrypto's BufferSource type\n * (under exactOptionalPropertyTypes + strict TS) rejects `Uint8Array<ArrayBufferLike>`\n * because the underlying buffer could be a SharedArrayBuffer. Matches the\n * pattern used in storage/fingerprint.ts.\n */\nfunction toArrayBuffer(bytes: Uint8Array): ArrayBuffer {\n  const copy = new Uint8Array(bytes.byteLength);\n  copy.set(bytes);\n  return copy.buffer as ArrayBuffer;\n}\n\nexport async function importEd25519PrivateKey(\n  jwk: JsonWebKey,\n): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\"jwk\", jwk, ALG, true, [\"sign\"]);\n}\n\nexport async function importEd25519PublicKey(\n  jwk: JsonWebKey,\n): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\"jwk\", jwk, ALG, true, [\"verify\"]);\n}\n\nexport interface GeneratedEd25519KeyPair {\n  readonly privateKeyJwk: JsonWebKey;\n  readonly publicKeyJwk: JsonWebKey;\n}\n\nexport async function generateEd25519KeyPairJwk(): Promise<GeneratedEd25519KeyPair> {\n  const pair = (await crypto.subtle.generateKey(ALG, true, [\n    \"sign\",\n    \"verify\",\n  ])) as CryptoKeyPair;\n  const [privateKeyJwk, publicKeyJwk] = await Promise.all([\n    crypto.subtle.exportKey(\"jwk\", pair.privateKey),\n    crypto.subtle.exportKey(\"jwk\", pair.publicKey),\n  ]);\n  return { privateKeyJwk, publicKeyJwk };\n}\n\nexport async function verifyEd25519Signature(\n  publicKeyJwk: JsonWebKey,\n  message: Uint8Array,\n  signature: Uint8Array,\n): Promise<boolean> {\n  let key: CryptoKey;\n  try {\n    key = await importEd25519PublicKey(publicKeyJwk);\n  } catch {\n    return false;\n  }\n  try {\n    return await crypto.subtle.verify(\n      ALG,\n      key,\n      toArrayBuffer(signature),\n      toArrayBuffer(message),\n    );\n  } catch {\n    // Malformed signature length or other subtle error — treat as invalid.\n    return false;\n  }\n}\n\nexport function createInMemorySigner(\n  privateKeyJwk: JsonWebKey,\n  options: { readonly kid: string; readonly publicKeyJwk: JsonWebKey },\n): ReceiptSigner {\n  // Lazily import the key on first sign() — keeps the factory synchronous\n  // and avoids touching crypto.subtle during module load.\n  let cachedKey: CryptoKey | undefined;\n  const ensureKey = async (): Promise<CryptoKey> => {\n    if (cachedKey === undefined) {\n      cachedKey = await importEd25519PrivateKey(privateKeyJwk);\n    }\n    return cachedKey;\n  };\n  return {\n    kid: options.kid,\n    publicKeyJwk: options.publicKeyJwk,\n    async sign(bytes: Uint8Array): Promise<Uint8Array> {\n      const key = await ensureKey();\n      const sig = await crypto.subtle.sign(ALG, key, toArrayBuffer(bytes));\n      return new Uint8Array(sig);\n    },\n  };\n}\n","import { canonicalizeReceiptBody } from \"./canonical.js\";\nimport {\n  PAYLOAD_TYPE,\n  base64Encode,\n  buildPae,\n  decodeEnvelope,\n} from \"./envelope.js\";\nimport { verifyEd25519Signature } from \"./sign.js\";\nimport type {\n  CapabilityReceiptBody,\n  KeyEntry,\n  KeySet,\n  ReceiptEnvelope,\n  VerifyError,\n  VerifyResult,\n} from \"./types.js\";\n\nfunction fail(kind: VerifyError[\"kind\"], message: string): VerifyResult {\n  return { ok: false, error: { kind, message } };\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.byteLength !== b.byteLength) return false;\n  for (let i = 0; i < a.byteLength; i += 1) {\n    if (a[i] !== b[i]) return false;\n  }\n  return true;\n}\n\n/**\n * Receipt body shape check. We trust the JSON parse — but we re-validate\n * that the required fields exist with the right primitive types before\n * canonicalizing again. Anything off -> version-mismatch (the body is\n * structurally NOT a v1 receipt, even if it parses as JSON).\n */\nfunction asReceiptBody(value: unknown): CapabilityReceiptBody | undefined {\n  if (typeof value !== \"object\" || value === null) return undefined;\n  const v = value as Record<string, unknown>;\n  // CRYPTO-01: accept undefined / v1 / v1.1 / v1.2 / v1.3 so too-low versions all\n  // reach Step 4 (the schema-version-too-low chokepoint). An unknown\n  // non-undefined literal (e.g. lattice-receipt/v2 or \"garbage\") is still a\n  // structural shape failure and falls through to the version-mismatch path.\n  if (\n    v.version !== undefined &&\n    v.version !== \"lattice-receipt/v1\" &&\n    v.version !== \"lattice-receipt/v1.1\" &&\n    v.version !== \"lattice-receipt/v1.2\" &&\n    v.version !== \"lattice-receipt/v1.3\"\n  ) {\n    return undefined;\n  }\n  if (typeof v.receiptId !== \"string\") return undefined;\n  if (typeof v.runId !== \"string\") return undefined;\n  if (typeof v.issuedAt !== \"string\") return undefined;\n  if (typeof v.kid !== \"string\") return undefined;\n  if (typeof v.model !== \"object\" || v.model === null) return undefined;\n  if (typeof v.route !== \"object\" || v.route === null) return undefined;\n  if (typeof v.usage !== \"object\" || v.usage === null) return undefined;\n  if (typeof v.contractVerdict !== \"string\") return undefined;\n  if (!Array.isArray(v.inputHashes)) return undefined;\n  if (typeof v.redactionPolicyId !== \"string\") return undefined;\n  if (!Array.isArray(v.redactions)) return undefined;\n  return v as unknown as CapabilityReceiptBody;\n}\n\n/**\n * Pure receipt verifier.\n *\n * Returns a typed VerifyResult — never throws across the verification\n * boundary (PITFALLS.md security: \"Verifier panics on malformed receipts\n * -> DoS via crafted input\"). All parsing failures become typed errors.\n *\n * Decision tree (first match wins):\n *   1. decodeEnvelope throws OR signatures[] empty       -> envelope-malformed\n *   2. payload bytes are not valid JSON                  -> envelope-malformed\n *   3. body shape check fails OR version unknown literal -> version-mismatch\n *   4. body.version === undefined OR \"lattice-receipt/v1\"-> schema-version-too-low (CRYPTO-01)\n *   5. keySet.lookup(keyid) === undefined                -> key-not-found\n *   6. entry.state === \"revoked\"                         -> key-revoked\n *   7. re-canonicalized body != signed payloadBytes      -> canonicalization-mismatch\n *   8. Ed25519 verification of PAE fails                 -> signature-invalid\n *   9. body.kid !== entry.kid (defense in depth)         -> signature-invalid\n *  10. otherwise                                         -> ok + keyState\n */\nexport async function verifyReceipt(\n  envelope: ReceiptEnvelope,\n  keySet: KeySet,\n): Promise<VerifyResult> {\n  // Step 1: decode envelope (catches wrong payloadType, base64 errors).\n  let decoded;\n  try {\n    decoded = decodeEnvelope(envelope);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return fail(\"envelope-malformed\", message);\n  }\n  if (decoded.signatures.length === 0) {\n    return fail(\"envelope-malformed\", \"envelope has no signatures\");\n  }\n\n  // Step 2: parse the canonical payload.\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(new TextDecoder().decode(decoded.payloadBytes));\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return fail(\"envelope-malformed\", `payload is not valid JSON: ${message}`);\n  }\n\n  // Step 3: structural body check + version check.\n  const body = asReceiptBody(parsed);\n  if (body === undefined) {\n    return fail(\n      \"version-mismatch\",\n      \"receipt body is not a lattice-receipt/v1.1, lattice-receipt/v1.2, or lattice-receipt/v1.3 shape\",\n    );\n  }\n\n  // Step 4: receipt-downgrade defense (CRYPTO-01).\n  // Reject receipts whose body.version is absent or equals the v1 literal.\n  // v1 receipts predate the v1.1 step-marker integrity surface and the v1.2\n  // modelClass audit tag; an attacker holding a valid signing key could mint a\n  // v1-shaped body and submit it to bypass newer schema commitments.\n  // Short-circuits before any cryptographic work (keyset lookup, canonical\n  // re-check, signature verify) so the downgrade verdict is unambiguous.\n  // See SECURITY.md (Phase 26 threat model) and Radicle 2026-03 precedent.\n  if (body.version === undefined || body.version === \"lattice-receipt/v1\") {\n    return fail(\n      \"schema-version-too-low\",\n      \"Receipt body.version must be 'lattice-receipt/v1.1', 'lattice-receipt/v1.2', or 'lattice-receipt/v1.3' — v1 receipts are not accepted (CRYPTO-01).\",\n    );\n  }\n\n  // Step 5: keyset lookup (use first signature; multi-sig deferred to a future schema).\n  const firstSig = decoded.signatures[0]!;\n  const entry: KeyEntry | undefined = keySet.lookup(firstSig.keyid);\n  if (entry === undefined) {\n    return fail(\n      \"key-not-found\",\n      `keySet has no entry for kid \"${firstSig.keyid}\"`,\n    );\n  }\n  if (entry.state === \"revoked\") {\n    return fail(\"key-revoked\", `key \"${entry.kid}\" is revoked`);\n  }\n\n  // Step 6: re-canonicalize body and compare byte-for-byte against\n  // decoded.payloadBytes. Catches any swap of canonical form mid-flight\n  // (the signed bytes must canonicalize back to themselves).\n  const reCanonical = canonicalizeReceiptBody(body);\n  if (!bytesEqual(reCanonical, decoded.payloadBytes)) {\n    return fail(\n      \"canonicalization-mismatch\",\n      \"re-canonicalized body does not match signed payload bytes\",\n    );\n  }\n\n  // Step 7: rebuild PAE and verify Ed25519 signature.\n  const payloadB64 = base64Encode(decoded.payloadBytes);\n  const pae = buildPae(PAYLOAD_TYPE, payloadB64);\n  const sigValid = await verifyEd25519Signature(\n    entry.publicKeyJwk,\n    pae,\n    firstSig.sig,\n  );\n  if (!sigValid) {\n    return fail(\"signature-invalid\", \"Ed25519 signature does not verify\");\n  }\n\n  // Step 8: defense-in-depth — body.kid MUST equal envelope keyid.\n  if (body.kid !== entry.kid) {\n    return fail(\n      \"signature-invalid\",\n      `body.kid \"${body.kid}\" does not match envelope keyid \"${entry.kid}\"`,\n    );\n  }\n\n  // Step 9: success — surface the key state so callers can warn on retired.\n  return { ok: true, body, keyState: entry.state };\n}\n","// AUTO-GENERATED FILE - DO NOT EDIT.\n// Source: package.json version field.\n// Regenerate with this package's stamp:version script.\nexport const latticeVersion = \"1.5.0\";\n","import canonicalize from \"canonicalize\";\n\nimport type { ArtifactInput, ArtifactRef } from \"../artifacts/artifact.js\";\nimport { toArtifactRef } from \"../artifacts/artifact.js\";\nimport type { CapabilityContract } from \"../contract/contract.js\";\nimport type { OutputContractMap } from \"../outputs/contracts.js\";\nimport type { ExecutionPlan, UsageRecord } from \"../plan/plan.js\";\nimport { createExecutionPlan, withPlanStatus } from \"../plan/plan.js\";\nimport type { PolicySpec } from \"../policy/policy.js\";\nimport type {\n  ContractVerdict,\n  ReceiptEnvelope,\n  ReceiptModel,\n  ReceiptRoute,\n  ReceiptSigner,\n} from \"../receipts/types.js\";\nimport { computeArtifactLineageMerkleRoot } from \"../receipts/lineage.js\";\nimport { createReceipt } from \"../receipts/receipt.js\";\nimport type { ReplayEnvelope } from \"../replay/replay.js\";\nimport { fingerprintArtifactValue } from \"../storage/fingerprint.js\";\nimport { latticeVersion } from \"../version.js\";\n\nexport type ExternalExecutionSidecarOutputSpec =\n  | \"text\"\n  | { readonly kind: \"citations\" }\n  | { readonly kind: \"artifacts\" };\n\nexport interface ExternalExecutionUsage {\n  readonly promptTokens: number;\n  readonly completionTokens: number;\n  readonly costUsd: number | null;\n}\n\nexport interface ExternalExecutionAuditInput<\n  TOutputs extends Record<string, unknown> = Record<string, unknown>,\n> {\n  readonly task: string;\n  readonly artifacts?: readonly ArtifactInput[];\n  readonly outputSpecs?: Record<string, ExternalExecutionSidecarOutputSpec>;\n  readonly outputs?: TOutputs;\n  readonly policy: PolicySpec;\n  readonly contract: CapabilityContract;\n  readonly model: ReceiptModel;\n  readonly route: ReceiptRoute;\n  readonly usage: ExternalExecutionUsage;\n  readonly rawRequest?: unknown;\n  readonly rawResponse?: unknown;\n  readonly contractVerdict?: ContractVerdict;\n  readonly runId?: string;\n  readonly receiptId?: string;\n  readonly issuedAt?: string;\n  readonly catalogVersion?: string;\n  readonly metadata?: Record<string, unknown>;\n}\n\nexport interface ExternalExecutionMetadata {\n  readonly kind: \"external-execution\";\n  readonly model: ReceiptModel;\n  readonly route: ReceiptRoute;\n  readonly usage: ExternalExecutionUsage;\n  readonly rawRequest?: unknown;\n  readonly rawResponse?: unknown;\n  readonly rawRequestHash?: string;\n  readonly rawResponseHash?: string;\n  readonly inputHashes: readonly string[];\n  readonly outputHash: string | null;\n  readonly metadata?: Record<string, unknown>;\n}\n\nexport interface ExternalExecutionSidecar<\n  TOutputs extends Record<string, unknown> = Record<string, unknown>,\n> {\n  readonly version: \"lattice-sidecar/v1\";\n  readonly task: string;\n  readonly outputs: Record<string, ExternalExecutionSidecarOutputSpec>;\n  readonly policy: PolicySpec;\n  readonly contract: CapabilityContract;\n  readonly rawOutputs?: TOutputs;\n  readonly externalExecution: ExternalExecutionMetadata;\n}\n\nexport interface ExternalExecutionAuditResult<\n  TOutputs extends Record<string, unknown> = Record<string, unknown>,\n> {\n  readonly receipt: ReceiptEnvelope;\n  readonly sidecar: ExternalExecutionSidecar<TOutputs>;\n  readonly replayEnvelope: ReplayEnvelope<OutputContractMap>;\n  readonly inputHashes: readonly string[];\n  readonly outputHash: string | null;\n}\n\nexport async function createExternalExecutionAudit<\n  TOutputs extends Record<string, unknown> = Record<string, unknown>,\n>(\n  input: ExternalExecutionAuditInput<TOutputs>,\n  signer: ReceiptSigner,\n): Promise<ExternalExecutionAuditResult<TOutputs>> {\n  const runId = input.runId ?? createId(\"external-run\");\n  const receiptId = input.receiptId ?? createId(\"external-receipt\");\n  const issuedAt = input.issuedAt ?? new Date().toISOString();\n  const artifacts = input.artifacts ?? [];\n  const artifactRefs = artifacts.map(toArtifactRef);\n  const outputSpecs = input.outputSpecs ?? inferOutputSpecs(input.outputs);\n  const inputHashes = await hashInputArtifacts(artifacts);\n  const outputHash = input.outputs === undefined ? null : await hashUnknown(input.outputs);\n  const contractHash = await hashCanonical(input.contract);\n  const lineageMerkleRoot = await computeArtifactLineageMerkleRoot(artifacts);\n  const rawRequestHash = input.rawRequest === undefined\n    ? undefined\n    : (await hashUnknown(input.rawRequest)) ?? undefined;\n  const rawResponseHash = input.rawResponse === undefined\n    ? undefined\n    : (await hashUnknown(input.rawResponse)) ?? undefined;\n  const contractVerdict = input.contractVerdict ?? \"success\";\n\n  const receipt = await createReceipt(\n    {\n      runId,\n      receiptId,\n      issuedAt,\n      model: input.model,\n      route: input.route,\n      ...(lineageMerkleRoot !== undefined ? { lineageMerkleRoot } : {}),\n      usage: input.usage,\n      contractVerdict,\n      contractHash,\n      inputHashes,\n      outputHash,\n    },\n    signer,\n  );\n\n  const sidecar: ExternalExecutionSidecar<TOutputs> = {\n    version: \"lattice-sidecar/v1\",\n    task: input.task,\n    outputs: outputSpecs,\n    policy: input.policy,\n    contract: input.contract,\n    ...(input.outputs !== undefined ? { rawOutputs: input.outputs } : {}),\n    externalExecution: {\n      kind: \"external-execution\",\n      model: input.model,\n      route: input.route,\n      usage: input.usage,\n      ...(input.rawRequest !== undefined ? { rawRequest: input.rawRequest } : {}),\n      ...(input.rawResponse !== undefined ? { rawResponse: input.rawResponse } : {}),\n      ...(rawRequestHash !== undefined ? { rawRequestHash } : {}),\n      ...(rawResponseHash !== undefined ? { rawResponseHash } : {}),\n      inputHashes,\n      outputHash,\n      ...(input.metadata !== undefined ? { metadata: input.metadata } : {}),\n    },\n  };\n\n  return {\n    receipt,\n    sidecar,\n    replayEnvelope: createExternalReplayEnvelope({\n      runId,\n      task: input.task,\n      artifacts: artifactRefs,\n      outputSpecs,\n      outputs: input.outputs,\n      catalogVersion: input.catalogVersion ?? \"external\",\n      route: input.route,\n      usage: input.usage,\n      receipt,\n      contract: input.contract,\n      contractVerdict,\n      metadata: input.metadata,\n    }),\n    inputHashes,\n    outputHash,\n  };\n}\n\nfunction createExternalReplayEnvelope(input: {\n  readonly runId: string;\n  readonly task: string;\n  readonly artifacts: readonly ArtifactRef[];\n  readonly outputSpecs: Record<string, ExternalExecutionSidecarOutputSpec>;\n  readonly outputs: Record<string, unknown> | undefined;\n  readonly catalogVersion: string;\n  readonly route: ReceiptRoute;\n  readonly usage: ExternalExecutionUsage;\n  readonly receipt: ReceiptEnvelope;\n  readonly contract: CapabilityContract;\n  readonly contractVerdict: ContractVerdict;\n  readonly metadata: Record<string, unknown> | undefined;\n}): ReplayEnvelope<OutputContractMap> {\n  const isSuccess = input.contractVerdict === \"success\";\n  const attempt = {\n    providerId: input.route.providerId,\n    modelId: input.route.capabilityId,\n    status: isSuccess ? \"succeeded\" as const : \"failed\" as const,\n    usage: usageRecord(input.usage),\n    metadata: { externalExecution: true },\n    ...(!isSuccess ? { error: input.contractVerdict } : {}),\n  };\n  const plan = withPlanStatus(\n    createExecutionPlan({\n      task: input.task,\n      artifacts: input.artifacts,\n      outputs: input.outputSpecs as OutputContractMap,\n      route: {\n        catalogVersion: input.catalogVersion,\n        selected: {\n          providerId: input.route.providerId,\n          modelId: input.route.capabilityId,\n          score: 0,\n          estimates: {\n            inputTokens: input.usage.promptTokens,\n            outputTokens: input.usage.completionTokens,\n            ...(input.usage.costUsd !== null ? { costUsd: input.usage.costUsd } : {}),\n          },\n          inputModalities: [],\n          outputModalities: [],\n          fileTransport: [],\n        },\n        candidates: [],\n        rejected: [],\n        fallbackChain: [],\n        noRouteReasons: [],\n      },\n      metadata: {\n        externalExecution: true,\n        runId: input.runId,\n        contractVerdict: input.contractVerdict,\n        ...(input.metadata !== undefined ? { external: input.metadata } : {}),\n      },\n    }),\n    isSuccess ? \"completed\" : \"failed\",\n    {\n      stages: isSuccess\n        ? markAllStagesCompleted\n        : markExternalStagesFailed(input.contractVerdict),\n      attempts: [attempt],\n    },\n  );\n\n  return {\n    kind: \"replay-envelope\",\n    version: 1,\n    runtimeVersion: latticeVersion,\n    catalogVersion: input.catalogVersion,\n    createdAt: new Date().toISOString(),\n    plan,\n    artifacts: input.artifacts,\n    ...(isSuccess && input.outputs !== undefined ? { outputs: input.outputs } : {}),\n    warnings: [],\n    errors: isSuccess ? [] : [input.contractVerdict],\n    usage: usageRecord(input.usage),\n    events: [],\n    receipt: input.receipt,\n    contract: input.contract,\n  };\n}\n\nfunction markExternalStagesFailed(verdict: ContractVerdict): ExecutionPlan[\"stages\"] {\n  const failedStage = failedStageForVerdict(verdict);\n  let hasFailed = false;\n\n  return markAllStagesCompleted.map((stage) => {\n    if (stage.kind === failedStage) {\n      hasFailed = true;\n      return {\n        ...stage,\n        status: \"failed\" as const,\n        warnings: [...stage.warnings, verdict],\n      };\n    }\n\n    if (hasFailed) {\n      return {\n        ...stage,\n        status: \"skipped\" as const,\n      };\n    }\n\n    return stage;\n  });\n}\n\nfunction failedStageForVerdict(verdict: ContractVerdict): ExecutionPlan[\"stages\"][number][\"kind\"] {\n  switch (verdict) {\n    case \"validation-failed\":\n      return \"validation\";\n    case \"tripwire-violated\":\n      return \"tripwire\";\n    case \"no-contract-match\":\n      return \"analysis\";\n    case \"execution-failed\":\n    case \"success\":\n      return \"execution\";\n  }\n}\n\nfunction usageRecord(usage: ExternalExecutionUsage): UsageRecord {\n  return {\n    inputTokens: usage.promptTokens,\n    outputTokens: usage.completionTokens,\n    totalTokens: usage.promptTokens + usage.completionTokens,\n    ...(usage.costUsd !== null ? { costUsd: usage.costUsd } : {}),\n  };\n}\n\nfunction inferOutputSpecs(\n  outputs: Record<string, unknown> | undefined,\n): Record<string, ExternalExecutionSidecarOutputSpec> {\n  if (outputs === undefined) {\n    return {};\n  }\n\n  return Object.fromEntries(Object.keys(outputs).map((name) => [name, \"text\" as const]));\n}\n\nasync function hashInputArtifacts(\n  artifacts: readonly ArtifactInput[],\n): Promise<readonly string[]> {\n  const hashes: string[] = [];\n  for (const artifact of artifacts) {\n    hashes.push(artifact.fingerprint?.value ?? await hashUnknown(artifact.value) ?? \"\");\n  }\n\n  return hashes;\n}\n\nasync function hashUnknown(value: unknown): Promise<string | null> {\n  return (await fingerprintArtifactValue(value))?.value ?? null;\n}\n\nasync function hashCanonical(value: unknown): Promise<string | null> {\n  const canonical = canonicalize(value);\n  if (canonical === undefined) {\n    return null;\n  }\n\n  return hashUnknown(canonical);\n}\n\nfunction createId(prefix: string): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\") {\n    return `${prefix}:${crypto.randomUUID()}`;\n  }\n\n  return `${prefix}:${Date.now()}:${Math.random().toString(16).slice(2)}`;\n}\n\nconst markAllStagesCompleted: ExecutionPlan[\"stages\"] = [\n  {\n    id: \"stage:analysis\",\n    kind: \"analysis\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:transforms\",\n    kind: \"transforms\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:context-packing\",\n    kind: \"context-packing\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:provider-packaging\",\n    kind: \"provider-packaging\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:tool-execution\",\n    kind: \"tool-execution\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:execution\",\n    kind: \"execution\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:validation\",\n    kind: \"validation\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:tripwire\",\n    kind: \"tripwire\",\n    status: \"completed\",\n    warnings: [],\n  },\n  {\n    id: \"stage:persistence\",\n    kind: \"persistence\",\n    status: \"completed\",\n    warnings: [],\n  },\n];\n","/**\n * Phase 10 — materializeReplayEnvelope.\n *\n * Reconstructs a `ReplayEnvelope` from a signed `ReceiptEnvelope` plus a\n * pluggable artifact loader. The flow is:\n *\n *   1. verifyReceipt(receipt, keySet) — REQUIRED before any other work.\n *      A tampered or revoked receipt MUST short-circuit before the artifact\n *      loader is invoked (no side effects on bad input).\n *   2. Parse the verified body to learn `inputHashes`.\n *   3. Invoke `artifactLoader(hash)` once per input hash, in order.\n *   4. Assemble a `ReplayEnvelope` whose `plan` reproduces the receipt's\n *      route/usage fields, attach the receipt itself, and (optionally) the\n *      caller-supplied contract / task / outputs / policy.\n *\n * v1.1 limitation: the receipt body does NOT carry the original task string,\n * outputs schema, or policy snapshot. Callers may supply them via the options\n * bag; when omitted, the envelope's `task` defaults to \"\" and `outputs`\n * remains undefined. Phase 11's `lattice repro` CLI accepts a sidecar JSON\n * file to populate these fields.\n *\n * Errors NEVER cross the boundary as plain `Error`. All failures surface as\n * typed `MaterializationError` values thrown from the async function so the\n * caller can pattern-match on `error.kind` (and a `MaterializationError` IS\n * a thrown object whose `kind` discriminates the failure mode).\n */\n\nimport type { ArtifactInput } from \"../artifacts/artifact.js\";\nimport { toArtifactRef } from \"../artifacts/artifact.js\";\nimport type { CapabilityContract } from \"../contract/contract.js\";\nimport type { OutputContractMap } from \"../outputs/contracts.js\";\nimport type { InferOutputMap } from \"../outputs/infer.js\";\nimport { createExecutionPlan, type ExecutionPlan, type UsageRecord } from \"../plan/plan.js\";\nimport type { PolicySpec } from \"../policy/policy.js\";\nimport type { CapabilityModality } from \"../providers/provider.js\";\nimport type {\n  CapabilityReceiptBody,\n  KeySet,\n  ReceiptEnvelope,\n} from \"../receipts/types.js\";\nimport { verifyReceipt } from \"../receipts/verify.js\";\nimport { latticeVersion } from \"../version.js\";\n\nimport type { ReplayEnvelope } from \"./replay.js\";\n\n/**\n * Discriminated union of materialization failure modes.\n *\n *   - \"verify-failed\"        — receipt failed verifyReceipt (signature, key\n *                              missing/revoked, canonicalization mismatch).\n *   - \"artifact-load-failed\" — the artifactLoader callback rejected for at\n *                              least one input hash.\n *   - \"envelope-malformed\"   — receipt verified but the verified body is\n *                              structurally unusable (should never happen\n *                              under verifyReceipt invariants, but kept as a\n *                              defensive third branch).\n */\nexport interface MaterializationError {\n  readonly kind: \"verify-failed\" | \"artifact-load-failed\" | \"envelope-malformed\";\n  readonly message: string;\n}\n\nfunction asMaterializationError(value: unknown): value is MaterializationError {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    typeof (value as { kind?: unknown }).kind === \"string\" &&\n    typeof (value as { message?: unknown }).message === \"string\"\n  );\n}\n\n/** Throwable shape — `instanceof Error` is not required for typed unions, so\n *  the function just throws a plain object literal that matches the\n *  `MaterializationError` shape. Callers pattern-match on `err.kind`. */\nfunction fail(\n  kind: MaterializationError[\"kind\"],\n  message: string,\n): MaterializationError {\n  return { kind, message };\n}\n\n/**\n * Async callback that resolves an artifact body from its sha256 hex digest.\n * Phase 10 ships only the in-memory variant for tests. Phase 11's CLI plugs\n * in a filesystem-backed loader reading from `.lattice/fixtures/<sha256>.bin`.\n */\nexport type ArtifactLoader = (hash: string) => Promise<ArtifactInput>;\n\nexport interface MaterializeReplayEnvelopeOptions<\n  TOutputs extends OutputContractMap = OutputContractMap,\n> {\n  readonly artifactLoader: ArtifactLoader;\n  readonly keySet: KeySet;\n  /** Optional original task string. Defaults to \"\" when omitted. */\n  readonly task?: string;\n  /**\n   * Optional caller-supplied outputs map. When provided, the resulting\n   * `ReplayEnvelope.outputs` is populated and `replayOffline` will return\n   * an `ok: true` result. When omitted, `replayOffline` reports an\n   * `execution_unavailable` failure (current Phase 5 semantics).\n   */\n  readonly outputs?: InferOutputMap<TOutputs>;\n  readonly policy?: PolicySpec;\n  readonly contract?: CapabilityContract;\n}\n\n/**\n * Pure async function that reconstructs a `ReplayEnvelope` from a receipt.\n *\n * Verify-FIRST ordering: `verifyReceipt` runs before `artifactLoader` is\n * touched. Tampered receipts MUST NOT cause loader side effects.\n */\nexport async function materializeReplayEnvelope<\n  TOutputs extends OutputContractMap = OutputContractMap,\n>(\n  receipt: ReceiptEnvelope,\n  options: MaterializeReplayEnvelopeOptions<TOutputs>,\n): Promise<ReplayEnvelope<TOutputs>> {\n  // Step 1: verify FIRST. No artifact loader call before this resolves.\n  const verifyResult = await verifyReceipt(receipt, options.keySet);\n  if (!verifyResult.ok) {\n    throw fail(\n      verifyResult.error.kind === \"envelope-malformed\"\n        ? \"envelope-malformed\"\n        : \"verify-failed\",\n      verifyResult.error.message,\n    );\n  }\n\n  const body: CapabilityReceiptBody = verifyResult.body;\n\n  // Step 2: load every artifact referenced by the receipt's inputHashes.\n  // We treat any loader rejection as `artifact-load-failed` and surface the\n  // underlying message — the loader is the system boundary, so its error\n  // text is the most informative thing we have.\n  const loadedInputs: ArtifactInput[] = [];\n  for (const hash of body.inputHashes) {\n    if (hash === \"\") {\n      // Skip empty-hash slots — Phase 9 emits \"\" for unfingerprintable\n      // values (e.g., undefined artifact bodies). They have no resolvable\n      // content and the replay artifacts array preserves order via the\n      // remaining loaded entries.\n      continue;\n    }\n    try {\n      const input = await options.artifactLoader(hash);\n      loadedInputs.push(input);\n    } catch (error) {\n      const message =\n        error instanceof Error\n          ? error.message\n          : asMaterializationError(error)\n            ? error.message\n            : String(error);\n      throw fail(\"artifact-load-failed\", message);\n    }\n  }\n\n  // Step 3: assemble the ExecutionPlan envelope shell. The receipt does NOT\n  // carry the full RouteDecision/ContextPack — we synthesize a minimal but\n  // valid plan that reproduces the receipt's route + usage fields. This is\n  // intentionally lossy and matches the v1.1 limitation note in 10-CONTEXT.md.\n  const artifactRefs = loadedInputs.map(toArtifactRef);\n  const outputsMap = (options.outputs !== undefined\n    ? (Object.fromEntries(\n        Object.keys(options.outputs as Record<string, unknown>).map((k) => [\n          k,\n          \"text\" as const,\n        ]),\n      ) as OutputContractMap)\n    : ({} as OutputContractMap));\n\n  const plan: ExecutionPlan = createExecutionPlan({\n    task: options.task ?? \"\",\n    artifacts: artifactRefs,\n    outputs: outputsMap,\n    route: {\n      catalogVersion: \"materialized\",\n      selected: {\n        providerId: body.route.providerId,\n        modelId: body.route.capabilityId,\n        score: 0,\n        estimates: { inputTokens: 0, outputTokens: 0 },\n        inputModalities: [] as readonly CapabilityModality[],\n        outputModalities: [] as readonly CapabilityModality[],\n        fileTransport: [],\n      },\n      candidates: [],\n      rejected: [],\n      fallbackChain: [],\n      noRouteReasons: [],\n    },\n    warnings: [],\n    metadata: {\n      materialized: true,\n      receiptId: body.receiptId,\n      runId: body.runId,\n      contractVerdict: body.contractVerdict,\n      ...(options.policy !== undefined ? { policy: { ...options.policy } } : {}),\n    },\n  });\n\n  const usage: UsageRecord = {\n    inputTokens: body.usage.promptTokens,\n    outputTokens: body.usage.completionTokens,\n    ...(body.usage.costUsd !== null\n      ? { costUsd: Number(body.usage.costUsd) }\n      : {}),\n  };\n\n  const envelope: ReplayEnvelope<TOutputs> = {\n    kind: \"replay-envelope\",\n    version: 1,\n    runtimeVersion: latticeVersion,\n    catalogVersion: \"materialized\",\n    createdAt: new Date().toISOString(),\n    plan,\n    artifacts: artifactRefs,\n    ...(options.outputs !== undefined ? { outputs: options.outputs } : {}),\n    warnings: [],\n    errors: [],\n    usage,\n    events: [],\n    receipt,\n    ...(options.contract !== undefined ? { contract: options.contract } : {}),\n  };\n\n  return envelope;\n}\n","import type { ArtifactRef } from \"../artifacts/artifact.js\";\nimport type { CapabilityContract } from \"../contract/contract.js\";\nimport type { OutputContractMap } from \"../outputs/contracts.js\";\nimport type { InferOutputMap } from \"../outputs/infer.js\";\nimport type { ExecutionPlan, UsageRecord } from \"../plan/plan.js\";\nimport type { Usage } from \"../providers/provider.js\";\nimport type { ReceiptEnvelope } from \"../receipts/types.js\";\nimport type { RunResult } from \"../results/result.js\";\nimport type { AI, RunIntent } from \"../runtime/create-ai.js\";\nimport type { RunEvent } from \"../tracing/tracing.js\";\nimport { latticeVersion } from \"../version.js\";\n\nexport interface ReplayEnvelope<TOutputs extends OutputContractMap = OutputContractMap> {\n  readonly kind: \"replay-envelope\";\n  readonly version: 1;\n  readonly runtimeVersion: string;\n  readonly catalogVersion: string;\n  readonly createdAt: string;\n  readonly plan: ExecutionPlan;\n  readonly artifacts: readonly ArtifactRef[];\n  readonly outputs?: InferOutputMap<TOutputs>;\n  readonly warnings: readonly string[];\n  readonly errors: readonly string[];\n  readonly usage?: UsageRecord;\n  readonly events: readonly RunEvent[];\n  /**\n   * Phase 10 — optional signed receipt recorded alongside the envelope so a\n   * single artifact is sufficient to materialize an offline replay session\n   * deterministically. Type-only import — replay.ts stays runtime-import-free\n   * of the receipts builder.\n   */\n  readonly receipt?: ReceiptEnvelope;\n  /**\n   * Phase 10 — optional contract recorded so replays can re-run pre-flight\n   * checks deterministically.\n   */\n  readonly contract?: CapabilityContract;\n}\n\nexport function createReplayEnvelope<TOutputs extends OutputContractMap>(\n  result: RunResult<TOutputs>,\n): ReplayEnvelope<TOutputs> {\n  if (result.plan.kind !== \"execution-plan\") {\n    throw new Error(\"Replay envelopes require an execution plan.\");\n  }\n\n  const usage = result.plan.attempts.at(-1)?.usage;\n\n  return {\n    kind: \"replay-envelope\",\n    version: 1,\n    runtimeVersion: latticeVersion,\n    catalogVersion: result.plan.route.catalogVersion,\n    createdAt: new Date().toISOString(),\n    plan: redactPlan(result.plan),\n    artifacts: result.ok ? result.artifacts : result.plan.artifactRefs,\n    ...(result.ok ? { outputs: result.outputs } : {}),\n    warnings: result.plan.warnings,\n    errors: result.ok ? [] : [result.error.message],\n    ...(usage !== undefined ? { usage } : {}),\n    events: result.events ?? [],\n  };\n}\n\nexport async function replayOffline<TOutputs extends OutputContractMap>(\n  envelope: ReplayEnvelope<TOutputs>,\n): Promise<RunResult<TOutputs>> {\n  const replayedUsage = envelopeUsage(envelope);\n  if (envelope.outputs === undefined) {\n    return {\n      ok: false,\n      error: {\n        kind: \"execution_unavailable\",\n        message: \"Replay envelope does not contain successful outputs.\",\n      },\n      usage: replayedUsage,\n      plan: envelope.plan,\n      events: envelope.events,\n    };\n  }\n\n  return {\n    ok: true,\n    outputs: envelope.outputs,\n    artifacts: envelope.artifacts,\n    usage: replayedUsage,\n    plan: envelope.plan,\n    events: envelope.events,\n  };\n}\n\nfunction envelopeUsage(envelope: ReplayEnvelope<OutputContractMap>): Usage {\n  if (envelope.usage === undefined) {\n    return { promptTokens: 0, completionTokens: 0, costUsd: null };\n  }\n  return {\n    promptTokens: envelope.usage.inputTokens ?? 0,\n    completionTokens: envelope.usage.outputTokens ?? 0,\n    costUsd: envelope.usage.costUsd ?? null,\n  };\n}\n\nexport async function rerunLive<TOutputs extends OutputContractMap>(\n  ai: AI,\n  envelope: ReplayEnvelope<TOutputs>,\n  intent: RunIntent<TOutputs>,\n): Promise<RunResult<TOutputs>> {\n  const result = await ai.run(intent);\n\n  if (result.plan.kind === \"execution-plan\") {\n    return {\n      ...result,\n      plan: {\n        ...result.plan,\n        warnings: [\n          ...result.plan.warnings,\n          `Live rerun of ${envelope.plan.id}: provider behavior, model versions, cost, and latency may differ.`,\n        ],\n      },\n    };\n  }\n\n  return result;\n}\n\nexport function redactReplayEnvelope<TOutputs extends OutputContractMap>(\n  envelope: ReplayEnvelope<TOutputs>,\n): ReplayEnvelope<TOutputs> {\n  return {\n    ...envelope,\n    plan: redactPlan(envelope.plan),\n    artifacts: envelope.artifacts.map(redactArtifactRef),\n    events: envelope.events.map((event) => {\n      const metadata = redactRecord(event.metadata);\n\n      return {\n        ...event,\n        ...(metadata !== undefined ? { metadata } : {}),\n      };\n    }),\n  };\n}\n\nexport function redactPlan(plan: ExecutionPlan): ExecutionPlan {\n  return {\n    ...plan,\n    task: redactText(plan.task),\n    artifactRefs: plan.artifactRefs.map(redactArtifactRef),\n    ...(plan.providerPackaging !== undefined\n      ? {\n          providerPackaging: {\n            ...plan.providerPackaging,\n            artifacts: plan.providerPackaging.artifacts.map((item) => ({\n              ...item,\n              warnings: item.warnings.map(redactText),\n            })),\n            warnings: plan.providerPackaging.warnings.map(redactText),\n          },\n        }\n      : {}),\n    warnings: plan.warnings.map(redactText),\n  };\n}\n\nexport function redactArtifactRef(ref: ArtifactRef): ArtifactRef {\n  const redactedMetadata = redactRecord(ref.metadata);\n\n  return {\n    ...ref,\n    ...(redactedMetadata !== undefined ? { metadata: redactedMetadata } : {}),\n    ...(ref.source === \"url\"\n      ? {\n          metadata: {\n            ...redactedMetadata,\n            redactedSource: \"url\",\n          },\n        }\n      : {}),\n  };\n}\n\nfunction redactRecord(\n  record: Record<string, unknown> | undefined,\n): Record<string, unknown> | undefined {\n  if (record === undefined) {\n    return undefined;\n  }\n\n  return Object.fromEntries(\n    Object.entries(record).map(([key, value]) => [\n      key,\n      shouldRedactKey(key) ? \"[redacted]\" : redactValue(value),\n    ]),\n  );\n}\n\nfunction redactValue(value: unknown): unknown {\n  if (typeof value === \"string\") {\n    return redactText(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.map(redactValue);\n  }\n\n  if (typeof value === \"object\" && value !== null) {\n    return redactRecord(value as Record<string, unknown>);\n  }\n\n  return value;\n}\n\nfunction redactText(value: string): string {\n  return value\n    .replace(/Bearer\\s+[A-Za-z0-9._-]+/gu, \"Bearer [redacted]\")\n    .replace(/https?:\\/\\/[^\\s)]+/gu, \"[redacted-url]\")\n    .replace(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}/gu, \"[redacted-email]\");\n}\n\nfunction shouldRedactKey(key: string): boolean {\n  return /api.?key|authorization|token|secret|password|credential|signed.?url|raw|body|transcript/iu.test(key);\n}\n"],"mappings":";;;;;;;AAuEA,MAAM,oBAAoB;AAC1B,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;AACjC,MAAM,iBAAiB;AACvB,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAEvB,SAAgB,uBACd,SACc;CACd,MAAM,wBAAQ,IAAI,KAA2B;AAE7C,QAAO,OAAO,UAAU;EACtB,MAAM,OAAO,mBAAmB,OAAO,SAAS,MAAM;EACtD,MAAM,aAAa,MAAM,yBAAyB,OAAO,QAAQ;AACjE,oBAAkB,MAAM,WAAW;AACnC,OAAK,WAAW,WAAW,MAAM,QAAQ,WAAW;AAEpD,MAAI,MAAM,SAAS,qCAAqC;AACtD,QAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1C,QAAK,MAAM,UAAU,MAAM,CAAC;AAC5B,SAAM,OAAO,MAAM,MAAM;AACzB;;AAGF,MAAI,MAAM,SAAS,gBAAgB;AACjC,QAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1C,QAAK,MAAM,UAAU,MAAM,CAAC;AAC5B,SAAM,OAAO,MAAM,MAAM;AACzB;;AAGF,MAAI,MAAM,SAAS,cAAc;GAC/B,MAAM,UAAU,eAAe,OAAO,SAAS;AAC/C,QAAK,YAAY;IACf,MAAM;IACN,GAAI,YAAY,KAAA,IAAY,EAAE,SAAS,GAAG,EAAE;IAC7C,CAAC;AACF,OAAI,YAAY,KAAA,EACd,MAAK,kBAAkB,QAAQ;AAEjC,QAAK,MAAM,UAAU,MAAM,CAAC;AAC5B,SAAM,OAAO,MAAM,MAAM;;;;AAK/B,SAAgB,2BACd,OACA,UAAgC,EAAE,EAClB;CAChB,MAAM,aAA6B;EACjC,sBAAsB,MAAM;EAC5B,kBAAkB,MAAM;EACzB;AAED,cAAa,YAAY,mBAAmB,MAAM,OAAO;AACzD,cAAa,YAAY,oBAAoB,MAAM,QAAQ;AAC3D,cAAa,YAAY,uBAAuB,MAAM,WAAW;AACjE,cAAa,YAAY,oBAAoB,MAAM,QAAQ;AAC3D,cAAa,YAAY,uBAAuB,MAAM,WAAW;AACjE,cAAa,YAAY,wBAAwB,MAAM,WAAW;AAClE,cAAa,YAAY,wBAAwB,MAAM,QAAQ;AAE/D,KAAI,MAAM,SAAS,kBAAkB,MAAM,SAAS,qBAAqB,MAAM,SAAS,gBACtF,YAAW,2BAA2B;CAGxC,MAAM,WAAW,MAAM,YAAY,EAAE;AACrC,cAAa,YAAY,wBAAwB,eAAe,OAAO,SAAS,CAAC;AACjF,eAAc,YAAY,yBAAyB,eAAe,OAAO,QAAQ,KAAK,KAAA,IAAY,OAAO,KAAA,EAAU;AACnH,cAAa,YAAY,0BAA0B,eAAe,OAAO,SAAS,CAAC;AACnF,cAAa,YAAY,iCAAiC,SAAS,SAAS,YAAY,CAAC;AACzF,cAAa,YAAY,2BAA2B,SAAS,SAAS,OAAO,CAAC;AAC9E,cAAa,YAAY,sBAAsB,SAAS,SAAS,UAAU,CAAC;AAC5E,eAAc,YAAY,sCAAsC,SAAS,SAAS,UAAU,KAAK,KAAA,IAAY,OAAO,KAAA,EAAU;AAC9H,cAAa,YAAY,gCAAgC,SAAS,SAAS,SAAS,CAAC;AACrF,cAAa,YAAY,gCAAgC,SAAS,SAAS,SAAS,CAAC;AACrF,cAAa,YAAY,gCAAgC,SAAS,SAAS,UAAU,CAAC;AACtF,eAAc,YAAY,qCAAqC,UAAU,SAAS,SAAS,CAAC;AAC5F,cAAa,YAAY,oCAAoC,SAAS,SAAS,gBAAgB,CAAC;AAChG,cAAa,YAAY,kCAAkC,SAAS,SAAS,SAAS,CAAC;AACvF,cAAa,YAAY,oCAAoC,SAAS,SAAS,WAAW,CAAC;AAC3F,cAAa,YAAY,iCAAiC,SAAS,SAAS,QAAQ,CAAC;AACrF,cAAa,YAAY,qBAAqB,SAAS,SAAS,SAAS,CAAC;AAC1E,cAAa,YAAY,wBAAwB,SAAS,SAAS,OAAO,CAAC;AAC3E,mBAAkB,YAAY,wBAAwB,cAAc,SAAS,YAAY,CAAC;AAC1F,aAAY,YAAY,SAAS;AACjC,eAAc,YAAY,SAAS,QAAQ;AAC3C,qBAAoB,YAAY,UAAU,QAAQ;AAElD,QAAO;;AAGT,eAAsB,4BACpB,UACyB;CACzB,MAAM,aAA6B;EACjC,uBAAuB,MAAM,WAAW,SAAS;EACjD,mCAAmC,SAAS,WAAW;EACxD;AACD,cACE,YACA,mCACA,SAAS,WAAW,IAAI,MACzB;AACD,QAAO;;AAGT,SAAgB,yBACd,UAAqC,EAAE,EAClB;CACrB,MAAM,aAAa,mBAAmB,QAAQ;AAC9C,QAAO;EACL,UAAU,sBAAsB,QAAQ,WAAW,0BAA0B;EAC7E,SAAS;GACP,GAAI,eAAe,KAAA,IAAY,EAAE,eAAe,SAAS,cAAc,GAAG,EAAE;GAC5E,gCAAgC,QAAQ,oBAAoB;GAC5D,GAAI,QAAQ,WAAW,EAAE;GAC1B;EACF;;AAGH,SAAgB,wBACd,UAAoC,EAAE,EACjB;AACrB,QAAO;EACL,UAAU,QAAQ,YAAY,qBAAqB,QAAQ,WAAW,yBAAyB;EAC/F,SAAS;GACP,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,eAAe,UAAU,QAAQ,UAAU,GAAG,EAAE;GACrF,GAAI,QAAQ,gBAAgB,KAAA,IAAY,EAAE,kBAAkB,QAAQ,aAAa,GAAG,EAAE;GACtF,GAAI,QAAQ,WAAW,EAAE;GAC1B;EACF;;AAGH,SAAS,mBACP,OACA,SACA,OACc;CACd,MAAM,WAAW,MAAM,IAAI,MAAM,MAAM;AACvC,KAAI,aAAa,KAAA,EACf,QAAO;CAGT,MAAM,OAAO,QAAQ,OAAO,UAAU,QAAQ,YAAY,mBAAmB;EAC3E,YAAY,2BAA2B,OAAO,QAAQ;EACtD,WAAW,UAAU,MAAM;EAC5B,CAAC;AACF,OAAM,IAAI,MAAM,OAAO,KAAK;AAC5B,QAAO;;AAGT,SAAS,kBAAkB,MAAoB,YAAkC;AAC/E,KAAI,KAAK,kBAAkB,KAAA,GAAW;AACpC,OAAK,cAAc,WAAW;AAC9B;;AAGF,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,WAAW,CACnD,MAAK,eAAe,KAAK,MAAM;;AAInC,eAAe,yBACb,OACA,SACyB;CACzB,MAAM,aAAa,2BAA2B,OAAO,QAAQ;CAC7D,MAAM,WAAW,oBAAoB,MAAM,SAAS;AACpD,KAAI,aAAa,KAAA,EACf,QAAO;AAGT,KAAI;AACF,SAAO;GACL,GAAG;GACH,GAAI,MAAM,4BAA4B,SAAS;GAChD;SACK;AACN,SAAO;;;AAIX,SAAS,UAAU,OAAuB;AACxC,QAAO,IAAI,KAAK,MAAM,UAAU;;AAGlC,SAAS,eAAe,OAAiB,KAAiC;AACxE,QAAO,SAAS,MAAM,WAAW,KAAK;;AAGxC,SAAS,aACP,YACA,KACA,OACM;AACN,KAAI,UAAU,KAAA,EACZ,YAAW,OAAO;;AAItB,SAAS,aACP,YACA,KACA,OACM;AACN,KAAI,UAAU,KAAA,EACZ,YAAW,OAAO;;AAItB,SAAS,cACP,YACA,KACA,OACM;AACN,KAAI,UAAU,KAAA,EACZ,YAAW,OAAO;;AAItB,SAAS,kBACP,YACA,KACA,OACM;AACN,KAAI,UAAU,KAAA,KAAa,MAAM,SAAS,EACxC,YAAW,OAAO;;AAItB,SAAS,kBACP,YACA,KACA,OACM;AACN,KAAI,UAAU,KAAA,KAAa,MAAM,SAAS,EACxC,YAAW,OAAO;;AAItB,SAAS,mBACP,YACA,KACA,OACM;AACN,KAAI,UAAU,KAAA,KAAa,MAAM,SAAS,EACxC,YAAW,OAAO;;AAItB,SAAS,SAAS,OAAoC;AACpD,QAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;;AAGjE,SAAS,SAAS,OAAoC;AACpD,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,MAAM,GAAG,QAAQ,KAAA;;AAGvE,SAAS,UAAU,OAAqC;AACtD,QAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;;AAG9C,SAAS,cAAc,OAA+C;AACpE,QAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAS,OAAO,SAAS,SAAS,GAC1E,QACA,KAAA;;AAGN,SAAS,cAAc,OAA+C;AACpE,QAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,KAAK,CAAC,GACnG,QACA,KAAA;;AAGN,SAAS,eAAe,OAAgD;AACtE,QAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAS,OAAO,SAAS,UAAU,GAC3E,QACA,KAAA;;AAGN,SAAS,YAAY,YAA4B,UAAyC;CACxF,MAAM,QAAQ,UAAU,SAAS,gBAAgB,IAC5C,UAAU,SAAS,MAAM,IACzB,UAAU,SAAS;AAExB,KAAI,UAAU,KAAA,EACZ;AAGF,cAAa,YAAY,6BAA6B,MAAM,YAAY;AACxE,cAAa,YAAY,8BAA8B,MAAM,aAAa;AAC1E,cAAa,YAAY,0BAA0B,MAAM,YAAY;AACrE,cAAa,YAAY,8BAA8B,MAAM,aAAa;AAC1E,cAAa,YAAY,0BAA0B,MAAM,QAAQ;;AAGnE,SAAS,UAAU,OAML;AACZ,KAAI,CAAC,SAAS,MAAM,CAClB;CAGF,MAAM,cAAc,SAAS,MAAM,aAAa,IAAI,SAAS,MAAM,YAAY;CAC/E,MAAM,eAAe,SAAS,MAAM,iBAAiB,IAAI,SAAS,MAAM,aAAa;CACrF,MAAM,UAAU,SAAS,MAAM,QAAQ;AAEvC,KAAI,gBAAgB,KAAA,KAAa,iBAAiB,KAAA,KAAa,YAAY,KAAA,EACzE;AAGF,QAAO;EACL,GAAI,gBAAgB,KAAA,IAAY,EAAE,aAAa,GAAG,EAAE;EACpD,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,YAAY,KAAA,IAAY,EAAE,SAAS,GAAG,EAAE;EAC7C;;AAGH,SAAS,cAAc,YAA4B,OAAsB;AACvE,KAAI,CAAC,SAAS,MAAM,CAClB;AAGF,eAAc,YAAY,wBAAwB,UAAU,MAAM,KAAK,CAAC;AACxE,cAAa,YAAY,+BAA+B,SAAS,MAAM,WAAW,CAAC;AACnF,cAAa,YAAY,wCAAwC,SAAS,MAAM,mBAAmB,CAAC;AACpG,cAAa,YAAY,mCAAmC,SAAS,MAAM,eAAe,CAAC;AAC3F,cAAa,YAAY,kCAAkC,SAAS,MAAM,cAAc,CAAC;AACzF,mBAAkB,YAAY,mCAAmC,cAAc,MAAM,eAAe,CAAC;CAErG,MAAM,iBAAiB,SAAS,MAAM,eAAe;CACrD,MAAM,gBAAgB,SAAS,MAAM,cAAc;AACnD,KAAI,mBAAmB,KAAA,KAAa,WAAW,4BAA4B,KAAA,EACzE,YAAW,0BAA0B;AAEvC,cAAa,YAAY,yBAAyB,cAAc;;AAGlE,SAAS,oBACP,YACA,UACA,SACM;AACN,KAAI,QAAQ,mBAAmB,WAC7B;CAGF,MAAM,YAAY,IAAI,IAAI;EACxB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;AACnD,MAAI,UAAU,IAAI,IAAI,IAAI,oBAAoB,IAAI,CAChD;EAEF,MAAM,UAAU,oBAAoB,iBAAiB,IAAI;AACzD,eAAa,YAAY,SAAS,SAAS,MAAM,CAAC;AAClD,eAAa,YAAY,SAAS,SAAS,MAAM,CAAC;AAClD,gBAAc,YAAY,SAAS,UAAU,MAAM,CAAC;AACpD,oBAAkB,YAAY,SAAS,cAAc,MAAM,CAAC;AAC5D,oBAAkB,YAAY,SAAS,cAAc,MAAM,CAAC;AAC5D,qBAAmB,YAAY,SAAS,eAAe,MAAM,CAAC;;;AAIlE,SAAS,oBAAoB,KAAsB;AACjD,QAAO,cAAc,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI;;AAG5D,SAAS,iBAAiB,KAAqB;AAC7C,QAAO,IAAI,QAAQ,sBAAsB,IAAI;;AAG/C,SAAS,oBAAoB,UAA4E;AACvG,KAAI,aAAa,KAAA,EACf;AAIF,QADmB;EAAC,SAAS;EAAU,SAAS;EAAiB,SAAS;EAAQ,CAChE,KAAK,kBAAkB;;AAG3C,SAAS,kBAAkB,OAA0C;AACnE,QACE,SAAS,MAAM,IACf,MAAM,gBAAgB,0CACtB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,MAAM,WAAW,IAC/B,MAAM,WAAW,OAAO,cACtB,SAAS,UAAU,IACnB,OAAO,UAAU,UAAU,YAC3B,OAAO,UAAU,QAAQ,SAC1B;;AAIL,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAS,mBAAmB,SAAwD;AAClF,KAAI,QAAQ,eAAe,KAAA,EACzB,QAAO,QAAQ;AAGjB,KAAI,QAAQ,cAAc,KAAA,KAAa,QAAQ,cAAc,KAAA,EAC3D;AAGF,KAAI,QAAQ,cAAc,KAAA,KAAa,QAAQ,cAAc,KAAA,EAC3D,OAAM,IAAI,MAAM,4DAA4D;AAG9E,QAAO,WAAW,GAAG,QAAQ,UAAU,GAAG,QAAQ,YAAY;;AAGhE,SAAS,sBAAsB,SAAyB;CACtD,MAAM,OAAO,oBAAoB,QAAQ;AACzC,KAAI,KAAK,SAAS,6BAA6B,CAC7C,QAAO;AAET,KAAI,KAAK,SAAS,mBAAmB,CACnC,QAAO,GAAG,KAAK;AAEjB,QAAO,GAAG,KAAK;;AAGjB,SAAS,qBAAqB,SAAyB;CACrD,MAAM,OAAO,oBAAoB,QAAQ;AACzC,KAAI,KAAK,SAAS,aAAa,CAC7B,QAAO;AAET,QAAO,GAAG,KAAK;;AAGjB,SAAS,oBAAoB,OAAuB;AAClD,QAAO,MAAM,QAAQ,SAAS,GAAG;;AAGnC,SAAS,WAAW,OAAuB;CACzC,MAAM,QAAQ,IAAI,aAAa,CAAC,OAAO,MAAM;CAC7C,IAAI,SAAS;AACb,MAAK,MAAM,QAAQ,MACjB,WAAU,OAAO,aAAa,KAAK;AAErC,QAAO,KAAK,OAAO;;;;;;;;;;;;;;;;;;;AC/gBrB,SAAgB,mBAAmB,SAAsC;CACvE,MAAM,wBAAQ,IAAI,KAAuB;AACzC,MAAK,MAAM,SAAS,QAClB,OAAM,IAAI,MAAM,KAAK,MAAM;AAE7B,QAAO,EACL,OAAO,KAAmC;AACxC,SAAO,MAAM,IAAI,IAAI;IAExB;;;;;;;;;;;ACiBH,SAAgB,0BACd,SACe;AACf,QAAO;EACL,KAAK,QAAQ;EACb,cAAc,QAAQ;EACtB,MAAM,KAAK,OAAwC;GACjD,MAAM,SAAS,MAAM,QAAQ,KAAK;IAChC,KAAK,QAAQ;IACb,cAAc,QAAQ;IACtB,OAAO,UAAU,MAAM;IACvB,eAAe;IACf,WAAW;IACX,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;IACxE,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;IAClE,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;IACzE,CAAC;AACF,UAAO,UAAU,kBAAkB,aAAa,SAAS,OAAO,UAAU;;EAE7E;;AAGH,SAAS,UAAU,OAA+B;CAChD,MAAM,OAAO,IAAI,WAAW,MAAM,WAAW;AAC7C,MAAK,IAAI,MAAM;AACf,QAAO;;;;AC5CT,MAAM,MAAM;;;;;;;AAQZ,SAAS,cAAc,OAAgC;CACrD,MAAM,OAAO,IAAI,WAAW,MAAM,WAAW;AAC7C,MAAK,IAAI,MAAM;AACf,QAAO,KAAK;;AAGd,eAAsB,wBACpB,KACoB;AACpB,QAAO,OAAO,OAAO,UAAU,OAAO,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC;;AAGjE,eAAsB,uBACpB,KACoB;AACpB,QAAO,OAAO,OAAO,UAAU,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,CAAC;;AAQnE,eAAsB,4BAA8D;CAClF,MAAM,OAAQ,MAAM,OAAO,OAAO,YAAY,KAAK,MAAM,CACvD,QACA,SACD,CAAC;CACF,MAAM,CAAC,eAAe,gBAAgB,MAAM,QAAQ,IAAI,CACtD,OAAO,OAAO,UAAU,OAAO,KAAK,WAAW,EAC/C,OAAO,OAAO,UAAU,OAAO,KAAK,UAAU,CAC/C,CAAC;AACF,QAAO;EAAE;EAAe;EAAc;;AAGxC,eAAsB,uBACpB,cACA,SACA,WACkB;CAClB,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,uBAAuB,aAAa;SAC1C;AACN,SAAO;;AAET,KAAI;AACF,SAAO,MAAM,OAAO,OAAO,OACzB,KACA,KACA,cAAc,UAAU,EACxB,cAAc,QAAQ,CACvB;SACK;AAEN,SAAO;;;AAIX,SAAgB,qBACd,eACA,SACe;CAGf,IAAI;CACJ,MAAM,YAAY,YAAgC;AAChD,MAAI,cAAc,KAAA,EAChB,aAAY,MAAM,wBAAwB,cAAc;AAE1D,SAAO;;AAET,QAAO;EACL,KAAK,QAAQ;EACb,cAAc,QAAQ;EACtB,MAAM,KAAK,OAAwC;GACjD,MAAM,MAAM,MAAM,WAAW;GAC7B,MAAM,MAAM,MAAM,OAAO,OAAO,KAAK,KAAK,KAAK,cAAc,MAAM,CAAC;AACpE,UAAO,IAAI,WAAW,IAAI;;EAE7B;;;;AC/FH,SAASA,OAAK,MAA2B,SAA+B;AACtE,QAAO;EAAE,IAAI;EAAO,OAAO;GAAE;GAAM;GAAS;EAAE;;AAGhD,SAAS,WAAW,GAAe,GAAwB;AACzD,KAAI,EAAE,eAAe,EAAE,WAAY,QAAO;AAC1C,MAAK,IAAI,IAAI,GAAG,IAAI,EAAE,YAAY,KAAK,EACrC,KAAI,EAAE,OAAO,EAAE,GAAI,QAAO;AAE5B,QAAO;;;;;;;;AAST,SAAS,cAAc,OAAmD;AACxE,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,KAAA;CACxD,MAAM,IAAI;AAKV,KACE,EAAE,YAAY,KAAA,KACd,EAAE,YAAY,wBACd,EAAE,YAAY,0BACd,EAAE,YAAY,0BACd,EAAE,YAAY,uBAEd;AAEF,KAAI,OAAO,EAAE,cAAc,SAAU,QAAO,KAAA;AAC5C,KAAI,OAAO,EAAE,UAAU,SAAU,QAAO,KAAA;AACxC,KAAI,OAAO,EAAE,aAAa,SAAU,QAAO,KAAA;AAC3C,KAAI,OAAO,EAAE,QAAQ,SAAU,QAAO,KAAA;AACtC,KAAI,OAAO,EAAE,UAAU,YAAY,EAAE,UAAU,KAAM,QAAO,KAAA;AAC5D,KAAI,OAAO,EAAE,UAAU,YAAY,EAAE,UAAU,KAAM,QAAO,KAAA;AAC5D,KAAI,OAAO,EAAE,UAAU,YAAY,EAAE,UAAU,KAAM,QAAO,KAAA;AAC5D,KAAI,OAAO,EAAE,oBAAoB,SAAU,QAAO,KAAA;AAClD,KAAI,CAAC,MAAM,QAAQ,EAAE,YAAY,CAAE,QAAO,KAAA;AAC1C,KAAI,OAAO,EAAE,sBAAsB,SAAU,QAAO,KAAA;AACpD,KAAI,CAAC,MAAM,QAAQ,EAAE,WAAW,CAAE,QAAO,KAAA;AACzC,QAAO;;;;;;;;;;;;;;;;;;;;;AAsBT,eAAsB,cACpB,UACA,QACuB;CAEvB,IAAI;AACJ,KAAI;AACF,YAAU,eAAe,SAAS;UAC3B,OAAO;AAEd,SAAOA,OAAK,sBADI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAC5B;;AAE5C,KAAI,QAAQ,WAAW,WAAW,EAChC,QAAOA,OAAK,sBAAsB,6BAA6B;CAIjE,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,QAAQ,aAAa,CAAC;UAC5D,OAAO;AAEd,SAAOA,OAAK,sBAAsB,8BADlB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACI;;CAI5E,MAAM,OAAO,cAAc,OAAO;AAClC,KAAI,SAAS,KAAA,EACX,QAAOA,OACL,oBACA,kGACD;AAWH,KAAI,KAAK,YAAY,KAAA,KAAa,KAAK,YAAY,qBACjD,QAAOA,OACL,0BACA,qJACD;CAIH,MAAM,WAAW,QAAQ,WAAW;CACpC,MAAM,QAA8B,OAAO,OAAO,SAAS,MAAM;AACjE,KAAI,UAAU,KAAA,EACZ,QAAOA,OACL,iBACA,gCAAgC,SAAS,MAAM,GAChD;AAEH,KAAI,MAAM,UAAU,UAClB,QAAOA,OAAK,eAAe,QAAQ,MAAM,IAAI,cAAc;AAO7D,KAAI,CAAC,WADe,wBAAwB,KAAK,EACpB,QAAQ,aAAa,CAChD,QAAOA,OACL,6BACA,4DACD;CAKH,MAAM,MAAM,SAAS,cADF,aAAa,QAAQ,aAAa,CACP;AAM9C,KAAI,CALa,MAAM,uBACrB,MAAM,cACN,KACA,SAAS,IACV,CAEC,QAAOA,OAAK,qBAAqB,oCAAoC;AAIvE,KAAI,KAAK,QAAQ,MAAM,IACrB,QAAOA,OACL,qBACA,aAAa,KAAK,IAAI,mCAAmC,MAAM,IAAI,GACpE;AAIH,QAAO;EAAE,IAAI;EAAM;EAAM,UAAU,MAAM;EAAO;;;;AC/KlD,MAAa,iBAAiB;;;ACwF9B,eAAsB,6BAGpB,OACA,QACiD;CACjD,MAAM,QAAQ,MAAM,SAAS,SAAS,eAAe;CACrD,MAAM,YAAY,MAAM,aAAa,SAAS,mBAAmB;CACjE,MAAM,WAAW,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CAC3D,MAAM,YAAY,MAAM,aAAa,EAAE;CACvC,MAAM,eAAe,UAAU,IAAI,cAAc;CACjD,MAAM,cAAc,MAAM,eAAe,iBAAiB,MAAM,QAAQ;CACxE,MAAM,cAAc,MAAM,mBAAmB,UAAU;CACvD,MAAM,aAAa,MAAM,YAAY,KAAA,IAAY,OAAO,MAAM,YAAY,MAAM,QAAQ;CACxF,MAAM,eAAe,MAAM,cAAc,MAAM,SAAS;CACxD,MAAM,oBAAoB,MAAM,iCAAiC,UAAU;CAC3E,MAAM,iBAAiB,MAAM,eAAe,KAAA,IACxC,KAAA,IACC,MAAM,YAAY,MAAM,WAAW,IAAK,KAAA;CAC7C,MAAM,kBAAkB,MAAM,gBAAgB,KAAA,IAC1C,KAAA,IACC,MAAM,YAAY,MAAM,YAAY,IAAK,KAAA;CAC9C,MAAM,kBAAkB,MAAM,mBAAmB;CAEjD,MAAM,UAAU,MAAM,cACpB;EACE;EACA;EACA;EACA,OAAO,MAAM;EACb,OAAO,MAAM;EACb,GAAI,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,GAAG,EAAE;EAChE,OAAO,MAAM;EACb;EACA;EACA;EACA;EACD,EACD,OACD;AAwBD,QAAO;EACL;EACA,SAxBkD;GAClD,SAAS;GACT,MAAM,MAAM;GACZ,SAAS;GACT,QAAQ,MAAM;GACd,UAAU,MAAM;GAChB,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,YAAY,MAAM,SAAS,GAAG,EAAE;GACpE,mBAAmB;IACjB,MAAM;IACN,OAAO,MAAM;IACb,OAAO,MAAM;IACb,OAAO,MAAM;IACb,GAAI,MAAM,eAAe,KAAA,IAAY,EAAE,YAAY,MAAM,YAAY,GAAG,EAAE;IAC1E,GAAI,MAAM,gBAAgB,KAAA,IAAY,EAAE,aAAa,MAAM,aAAa,GAAG,EAAE;IAC7E,GAAI,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,GAAG,EAAE;IAC1D,GAAI,oBAAoB,KAAA,IAAY,EAAE,iBAAiB,GAAG,EAAE;IAC5D;IACA;IACA,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,UAAU,GAAG,EAAE;IACrE;GACF;EAKC,gBAAgB,6BAA6B;GAC3C;GACA,MAAM,MAAM;GACZ,WAAW;GACX;GACA,SAAS,MAAM;GACf,gBAAgB,MAAM,kBAAkB;GACxC,OAAO,MAAM;GACb,OAAO,MAAM;GACb;GACA,UAAU,MAAM;GAChB;GACA,UAAU,MAAM;GACjB,CAAC;EACF;EACA;EACD;;AAGH,SAAS,6BAA6B,OAaA;CACpC,MAAM,YAAY,MAAM,oBAAoB;CAC5C,MAAM,UAAU;EACd,YAAY,MAAM,MAAM;EACxB,SAAS,MAAM,MAAM;EACrB,QAAQ,YAAY,cAAuB;EAC3C,OAAO,YAAY,MAAM,MAAM;EAC/B,UAAU,EAAE,mBAAmB,MAAM;EACrC,GAAI,CAAC,YAAY,EAAE,OAAO,MAAM,iBAAiB,GAAG,EAAE;EACvD;CACD,MAAM,OAAO,eACX,oBAAoB;EAClB,MAAM,MAAM;EACZ,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,OAAO;GACL,gBAAgB,MAAM;GACtB,UAAU;IACR,YAAY,MAAM,MAAM;IACxB,SAAS,MAAM,MAAM;IACrB,OAAO;IACP,WAAW;KACT,aAAa,MAAM,MAAM;KACzB,cAAc,MAAM,MAAM;KAC1B,GAAI,MAAM,MAAM,YAAY,OAAO,EAAE,SAAS,MAAM,MAAM,SAAS,GAAG,EAAE;KACzE;IACD,iBAAiB,EAAE;IACnB,kBAAkB,EAAE;IACpB,eAAe,EAAE;IAClB;GACD,YAAY,EAAE;GACd,UAAU,EAAE;GACZ,eAAe,EAAE;GACjB,gBAAgB,EAAE;GACnB;EACD,UAAU;GACR,mBAAmB;GACnB,OAAO,MAAM;GACb,iBAAiB,MAAM;GACvB,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,UAAU,GAAG,EAAE;GACrE;EACF,CAAC,EACF,YAAY,cAAc,UAC1B;EACE,QAAQ,YACJ,yBACA,yBAAyB,MAAM,gBAAgB;EACnD,UAAU,CAAC,QAAQ;EACpB,CACF;AAED,QAAO;EACL,MAAM;EACN,SAAS;EACT,gBAAgB;EAChB,gBAAgB,MAAM;EACtB,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC;EACA,WAAW,MAAM;EACjB,GAAI,aAAa,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;EAC9E,UAAU,EAAE;EACZ,QAAQ,YAAY,EAAE,GAAG,CAAC,MAAM,gBAAgB;EAChD,OAAO,YAAY,MAAM,MAAM;EAC/B,QAAQ,EAAE;EACV,SAAS,MAAM;EACf,UAAU,MAAM;EACjB;;AAGH,SAAS,yBAAyB,SAAmD;CACnF,MAAM,cAAc,sBAAsB,QAAQ;CAClD,IAAI,YAAY;AAEhB,QAAO,uBAAuB,KAAK,UAAU;AAC3C,MAAI,MAAM,SAAS,aAAa;AAC9B,eAAY;AACZ,UAAO;IACL,GAAG;IACH,QAAQ;IACR,UAAU,CAAC,GAAG,MAAM,UAAU,QAAQ;IACvC;;AAGH,MAAI,UACF,QAAO;GACL,GAAG;GACH,QAAQ;GACT;AAGH,SAAO;GACP;;AAGJ,SAAS,sBAAsB,SAAmE;AAChG,SAAQ,SAAR;EACE,KAAK,oBACH,QAAO;EACT,KAAK,oBACH,QAAO;EACT,KAAK,oBACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;;;AAIb,SAAS,YAAY,OAA4C;AAC/D,QAAO;EACL,aAAa,MAAM;EACnB,cAAc,MAAM;EACpB,aAAa,MAAM,eAAe,MAAM;EACxC,GAAI,MAAM,YAAY,OAAO,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;EAC7D;;AAGH,SAAS,iBACP,SACoD;AACpD,KAAI,YAAY,KAAA,EACd,QAAO,EAAE;AAGX,QAAO,OAAO,YAAY,OAAO,KAAK,QAAQ,CAAC,KAAK,SAAS,CAAC,MAAM,OAAgB,CAAC,CAAC;;AAGxF,eAAe,mBACb,WAC4B;CAC5B,MAAM,SAAmB,EAAE;AAC3B,MAAK,MAAM,YAAY,UACrB,QAAO,KAAK,SAAS,aAAa,SAAS,MAAM,YAAY,SAAS,MAAM,IAAI,GAAG;AAGrF,QAAO;;AAGT,eAAe,YAAY,OAAwC;AACjE,SAAQ,MAAM,yBAAyB,MAAM,GAAG,SAAS;;AAG3D,eAAe,cAAc,OAAwC;CACnE,MAAM,YAAY,aAAa,MAAM;AACrC,KAAI,cAAc,KAAA,EAChB,QAAO;AAGT,QAAO,YAAY,UAAU;;AAG/B,SAAS,SAAS,QAAwB;AACxC,KAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,WAChE,QAAO,GAAG,OAAO,GAAG,OAAO,YAAY;AAGzC,QAAO,GAAG,OAAO,GAAG,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE;;AAGvE,MAAM,yBAAkD;CACtD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACD;EACE,IAAI;EACJ,MAAM;EACN,QAAQ;EACR,UAAU,EAAE;EACb;CACF;;;ACrVD,SAAS,uBAAuB,OAA+C;AAC7E,QACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAA6B,SAAS,YAC9C,OAAQ,MAAgC,YAAY;;;;;AAOxD,SAAS,KACP,MACA,SACsB;AACtB,QAAO;EAAE;EAAM;EAAS;;;;;;;;AAkC1B,eAAsB,0BAGpB,SACA,SACmC;CAEnC,MAAM,eAAe,MAAM,cAAc,SAAS,QAAQ,OAAO;AACjE,KAAI,CAAC,aAAa,GAChB,OAAM,KACJ,aAAa,MAAM,SAAS,uBACxB,uBACA,iBACJ,aAAa,MAAM,QACpB;CAGH,MAAM,OAA8B,aAAa;CAMjD,MAAM,eAAgC,EAAE;AACxC,MAAK,MAAM,QAAQ,KAAK,aAAa;AACnC,MAAI,SAAS,GAKX;AAEF,MAAI;GACF,MAAM,QAAQ,MAAM,QAAQ,eAAe,KAAK;AAChD,gBAAa,KAAK,MAAM;WACjB,OAAO;AAOd,SAAM,KAAK,wBALT,iBAAiB,QACb,MAAM,UACN,uBAAuB,MAAM,GAC3B,MAAM,UACN,OAAO,MAAM,CACsB;;;CAQ/C,MAAM,eAAe,aAAa,IAAI,cAAc;CACpD,MAAM,aAAc,QAAQ,YAAY,KAAA,IACnC,OAAO,YACN,OAAO,KAAK,QAAQ,QAAmC,CAAC,KAAK,MAAM,CACjE,GACA,OACD,CAAC,CACH,GACA,EAAE;CAEP,MAAM,OAAsB,oBAAoB;EAC9C,MAAM,QAAQ,QAAQ;EACtB,WAAW;EACX,SAAS;EACT,OAAO;GACL,gBAAgB;GAChB,UAAU;IACR,YAAY,KAAK,MAAM;IACvB,SAAS,KAAK,MAAM;IACpB,OAAO;IACP,WAAW;KAAE,aAAa;KAAG,cAAc;KAAG;IAC9C,iBAAiB,EAAE;IACnB,kBAAkB,EAAE;IACpB,eAAe,EAAE;IAClB;GACD,YAAY,EAAE;GACd,UAAU,EAAE;GACZ,eAAe,EAAE;GACjB,gBAAgB,EAAE;GACnB;EACD,UAAU,EAAE;EACZ,UAAU;GACR,cAAc;GACd,WAAW,KAAK;GAChB,OAAO,KAAK;GACZ,iBAAiB,KAAK;GACtB,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,EAAE,GAAG,QAAQ,QAAQ,EAAE,GAAG,EAAE;GAC1E;EACF,CAAC;CAEF,MAAM,QAAqB;EACzB,aAAa,KAAK,MAAM;EACxB,cAAc,KAAK,MAAM;EACzB,GAAI,KAAK,MAAM,YAAY,OACvB,EAAE,SAAS,OAAO,KAAK,MAAM,QAAQ,EAAE,GACvC,EAAE;EACP;AAmBD,QAjB2C;EACzC,MAAM;EACN,SAAS;EACT,gBAAgB;EAChB,gBAAgB;EAChB,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC;EACA,WAAW;EACX,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,SAAS,GAAG,EAAE;EACrE,UAAU,EAAE;EACZ,QAAQ,EAAE;EACV;EACA,QAAQ,EAAE;EACV;EACA,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EACzE;;;;AC1LH,SAAgB,qBACd,QAC0B;AAC1B,KAAI,OAAO,KAAK,SAAS,iBACvB,OAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,QAAQ,OAAO,KAAK,SAAS,GAAG,GAAG,EAAE;AAE3C,QAAO;EACL,MAAM;EACN,SAAS;EACT,gBAAgB;EAChB,gBAAgB,OAAO,KAAK,MAAM;EAClC,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC,MAAM,WAAW,OAAO,KAAK;EAC7B,WAAW,OAAO,KAAK,OAAO,YAAY,OAAO,KAAK;EACtD,GAAI,OAAO,KAAK,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE;EAChD,UAAU,OAAO,KAAK;EACtB,QAAQ,OAAO,KAAK,EAAE,GAAG,CAAC,OAAO,MAAM,QAAQ;EAC/C,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,QAAQ,OAAO,UAAU,EAAE;EAC5B;;AAGH,eAAsB,cACpB,UAC8B;CAC9B,MAAM,gBAAgB,cAAc,SAAS;AAC7C,KAAI,SAAS,YAAY,KAAA,EACvB,QAAO;EACL,IAAI;EACJ,OAAO;GACL,MAAM;GACN,SAAS;GACV;EACD,OAAO;EACP,MAAM,SAAS;EACf,QAAQ,SAAS;EAClB;AAGH,QAAO;EACL,IAAI;EACJ,SAAS,SAAS;EAClB,WAAW,SAAS;EACpB,OAAO;EACP,MAAM,SAAS;EACf,QAAQ,SAAS;EAClB;;AAGH,SAAS,cAAc,UAAoD;AACzE,KAAI,SAAS,UAAU,KAAA,EACrB,QAAO;EAAE,cAAc;EAAG,kBAAkB;EAAG,SAAS;EAAM;AAEhE,QAAO;EACL,cAAc,SAAS,MAAM,eAAe;EAC5C,kBAAkB,SAAS,MAAM,gBAAgB;EACjD,SAAS,SAAS,MAAM,WAAW;EACpC;;AAGH,eAAsB,UACpB,IACA,UACA,QAC8B;CAC9B,MAAM,SAAS,MAAM,GAAG,IAAI,OAAO;AAEnC,KAAI,OAAO,KAAK,SAAS,iBACvB,QAAO;EACL,GAAG;EACH,MAAM;GACJ,GAAG,OAAO;GACV,UAAU,CACR,GAAG,OAAO,KAAK,UACf,iBAAiB,SAAS,KAAK,GAAG,oEACnC;GACF;EACF;AAGH,QAAO;;AAGT,SAAgB,qBACd,UAC0B;AAC1B,QAAO;EACL,GAAG;EACH,MAAM,WAAW,SAAS,KAAK;EAC/B,WAAW,SAAS,UAAU,IAAI,kBAAkB;EACpD,QAAQ,SAAS,OAAO,KAAK,UAAU;GACrC,MAAM,WAAW,aAAa,MAAM,SAAS;AAE7C,UAAO;IACL,GAAG;IACH,GAAI,aAAa,KAAA,IAAY,EAAE,UAAU,GAAG,EAAE;IAC/C;IACD;EACH;;AAGH,SAAgB,WAAW,MAAoC;AAC7D,QAAO;EACL,GAAG;EACH,MAAM,WAAW,KAAK,KAAK;EAC3B,cAAc,KAAK,aAAa,IAAI,kBAAkB;EACtD,GAAI,KAAK,sBAAsB,KAAA,IAC3B,EACE,mBAAmB;GACjB,GAAG,KAAK;GACR,WAAW,KAAK,kBAAkB,UAAU,KAAK,UAAU;IACzD,GAAG;IACH,UAAU,KAAK,SAAS,IAAI,WAAW;IACxC,EAAE;GACH,UAAU,KAAK,kBAAkB,SAAS,IAAI,WAAW;GAC1D,EACF,GACD,EAAE;EACN,UAAU,KAAK,SAAS,IAAI,WAAW;EACxC;;AAGH,SAAgB,kBAAkB,KAA+B;CAC/D,MAAM,mBAAmB,aAAa,IAAI,SAAS;AAEnD,QAAO;EACL,GAAG;EACH,GAAI,qBAAqB,KAAA,IAAY,EAAE,UAAU,kBAAkB,GAAG,EAAE;EACxE,GAAI,IAAI,WAAW,QACf,EACE,UAAU;GACR,GAAG;GACH,gBAAgB;GACjB,EACF,GACD,EAAE;EACP;;AAGH,SAAS,aACP,QACqC;AACrC,KAAI,WAAW,KAAA,EACb;AAGF,QAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,CAC3C,KACA,gBAAgB,IAAI,GAAG,eAAe,YAAY,MAAM,CACzD,CAAC,CACH;;AAGH,SAAS,YAAY,OAAyB;AAC5C,KAAI,OAAO,UAAU,SACnB,QAAO,WAAW,MAAM;AAG1B,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,IAAI,YAAY;AAG/B,KAAI,OAAO,UAAU,YAAY,UAAU,KACzC,QAAO,aAAa,MAAiC;AAGvD,QAAO;;AAGT,SAAS,WAAW,OAAuB;AACzC,QAAO,MACJ,QAAQ,8BAA8B,oBAAoB,CAC1D,QAAQ,wBAAwB,iBAAiB,CACjD,QAAQ,oDAAoD,mBAAmB;;AAGpF,SAAS,gBAAgB,KAAsB;AAC7C,QAAO,4FAA4F,KAAK,IAAI"}

package/dist/result-DLEx2WvU.d.ts

@@ -0,0 +1,38 @@
+import { T as Usage, gt as LatticeRunError, mn as OutputContractMap, o as ProviderGatewayMetadata, rn as ResultPlan, vn as RunEvent } from "./provider-C2IfKsvz.js";
+import { s as ArtifactRef } from "./artifact-Bg6mJGnm.js";
+import { c as ReceiptEnvelope, n as InferOutputMap } from "./infer-DLqp5QIM.js";
+
+//#region src/results/result.d.ts
+interface RunSuccess<TOutputs extends OutputContractMap> {
+  readonly ok: true;
+  readonly outputs: InferOutputMap<TOutputs>;
+  readonly artifacts: readonly ArtifactRef[];
+  readonly usage: Usage;
+  readonly plan: ResultPlan;
+  readonly events?: readonly RunEvent[];
+  readonly gateway?: ProviderGatewayMetadata;
+  /**
+   * Phase 9 — signed capability receipt issued when `LatticeConfig.signer`
+   * is configured. Undefined when no signer is set.
+   */
+  readonly receipt?: ReceiptEnvelope;
+}
+interface RunFailure {
+  readonly ok: false;
+  readonly error: LatticeRunError;
+  readonly usage: Usage;
+  readonly raw?: unknown;
+  readonly partialOutputs?: Record<string, unknown>;
+  readonly plan: ResultPlan;
+  readonly events?: readonly RunEvent[];
+  readonly gateway?: ProviderGatewayMetadata;
+  /**
+   * Phase 9 — signed capability receipt issued when `LatticeConfig.signer`
+   * is configured. Undefined when no signer is set.
+   */
+  readonly receipt?: ReceiptEnvelope;
+}
+type RunResult<TOutputs extends OutputContractMap> = RunSuccess<TOutputs> | RunFailure;
+//#endregion
+export { RunResult as n, RunSuccess as r, RunFailure as t };
+//# sourceMappingURL=result-DLEx2WvU.d.ts.map

package/dist/result-DLEx2WvU.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result-DLEx2WvU.d.ts","names":[],"sources":["../src/results/result.ts"],"mappings":";;;;;UASiB,UAAA,kBAA4B,iBAAA;EAAA,SAClC,EAAA;EAAA,SACA,OAAA,EAAS,cAAA,CAAe,QAAA;EAAA,SACxB,SAAA,WAAoB,WAAA;EAAA,SACpB,KAAA,EAAO,KAAA;EAAA,SACP,IAAA,EAAM,UAAA;EAAA,SACN,MAAA,YAAkB,QAAA;EAAA,SAClB,OAAA,GAAU,uBAAA;EAKA;;;;EAAA,SAAV,OAAA,GAAU,eAAA;AAAA;AAAA,UAGJ,UAAA;EAAA,SACN,EAAA;EAAA,SACA,KAAA,EAAO,eAAA;EAAA,SACP,KAAA,EAAO,KAAA;EAAA,SACP,GAAA;EAAA,SACA,cAAA,GAAiB,MAAA;EAAA,SACjB,IAAA,EAAM,UAAA;EAAA,SACN,MAAA,YAAkB,QAAA;EAAA,SAClB,OAAA,GAAU,uBAAA;EAjBV;;;;EAAA,SAsBA,OAAA,GAAU,eAAA;AAAA;AAAA,KAGT,SAAA,kBAA2B,iBAAA,IACnC,UAAA,CAAW,QAAA,IACX,UAAA"}

package/dist/router-DU4Z3pTd.js

@@ -0,0 +1,314 @@
+import { i as effectivePer1kPricing } from "./catalog-CAfYwB_-.js";
+import { n as estimateArtifactTokens, r as estimateTokens } from "./context-pack-Bz3GXmjv.js";
+//#region src/contract/preflight.ts
+/**
+* Pure cost estimator. Returns `null` when pricing is unknown (so downstream
+* gates can distinguish "free / zero" from "unmeasured" per the Phase 7
+* cost-normalization decision). Uses static catalog metadata only — no probes,
+* no external pricing APIs.
+*/
+function estimateRouteCost(input) {
+	const { inputPer1kTokens, outputPer1kTokens } = effectivePer1kPricing(input.capability.pricing);
+	if (inputPer1kTokens === void 0 && outputPer1kTokens === void 0) return null;
+	return (inputPer1kTokens ?? 0) * input.estimatedInputTokens / 1e3 + (outputPer1kTokens ?? 0) * input.estimatedOutputTokens / 1e3;
+}
+/**
+* Pure pre-flight evaluator. Phase 9 receipts will reuse this for deterministic
+* verdict reconstruction.
+*
+* Token estimation: Phase 7 does NOT define a separate token estimator. Output-
+* token projection is the canonical responsibility of the router's existing
+* `estimateRoute()` helper (in `routing/router.ts`), which already produces an
+* `estimatedOutputTokens` value. The router passes that same value into this
+* evaluator via `EvaluateContractInput.estimatedOutputTokens`, so preflight
+* and the router always agree on the projected output size. Phase 9 receipts
+* will pin the router's estimate as the deterministic input — intentionally
+* one source of truth.
+*
+* Reject taxonomy (Phase 7 emits three of four codes):
+*  - `contract-budget-exceeded` (CONTRACT-04 + COST-03)
+*  - `contract-modality-missing` (CONTRACT-06)
+*  - `contract-privacy-mismatch` (CONTRACT-06)
+*  - `contract-quality-floor` (reserved for Phase 12 `lattice eval`; NEVER emitted here)
+*/
+function evaluateContractAgainstRoute(contract, input) {
+	if (contract === void 0) return {
+		ok: true,
+		reasons: []
+	};
+	const reasons = [];
+	if (contract.budget?.maxCostUsd !== void 0) {
+		const estimatedCost = estimateRouteCost({
+			capability: input.capability,
+			estimatedInputTokens: input.estimatedInputTokens,
+			estimatedOutputTokens: input.estimatedOutputTokens
+		});
+		if (estimatedCost === null) reasons.push({
+			code: "contract-budget-exceeded",
+			message: `${input.capability.modelId} pricing unknown; contract budget declared (maxCostUsd=${contract.budget.maxCostUsd}).`
+		});
+		else if (estimatedCost > contract.budget.maxCostUsd) reasons.push({
+			code: "contract-budget-exceeded",
+			message: `${input.capability.modelId} estimated ${estimatedCost.toFixed(6)} exceeds contract budget ${contract.budget.maxCostUsd}.`
+		});
+	}
+	if (contract.requiredModalities !== void 0) {
+		for (const modality of contract.requiredModalities) if (!input.capability.inputModalities.includes(modality) && !input.capability.outputModalities.includes(modality)) reasons.push({
+			code: "contract-modality-missing",
+			message: `${input.capability.modelId} does not support required modality ${modality}.`
+		});
+	}
+	if (contract.requiredPrivacy !== void 0) {
+		if (!input.capability.dataPolicy.privacy.includes(contract.requiredPrivacy)) reasons.push({
+			code: "contract-privacy-mismatch",
+			message: `${input.capability.modelId} does not satisfy contract privacy ${contract.requiredPrivacy}.`
+		});
+	}
+	return {
+		ok: reasons.length === 0,
+		reasons
+	};
+}
+//#endregion
+//#region src/policy/policy.ts
+function mergePolicy(defaultPolicy, runPolicy) {
+	if (defaultPolicy === void 0 && runPolicy === void 0) return;
+	const gateway = mergeGatewayPolicy(defaultPolicy?.gateway, runPolicy?.gateway);
+	return {
+		...defaultPolicy,
+		...runPolicy,
+		...gateway !== void 0 ? { gateway } : {}
+	};
+}
+function mergeGatewayPolicy(defaultGateway, runGateway) {
+	if (defaultGateway === void 0 && runGateway === void 0) return;
+	const metadata = defaultGateway?.metadata !== void 0 || runGateway?.metadata !== void 0 ? {
+		...defaultGateway?.metadata,
+		...runGateway?.metadata
+	} : void 0;
+	return {
+		...defaultGateway,
+		...runGateway,
+		...metadata !== void 0 ? { metadata } : {}
+	};
+}
+//#endregion
+//#region src/routing/router.ts
+function routeDeterministically(catalog, request) {
+	const requiredInputs = requiredInputModalities(request.artifacts);
+	const requiredOutputs = requiredOutputModalities(request.outputs);
+	const requiresStructuredOutput = outputRequiresStructuredOutput(request.outputs);
+	const estimatedInputTokens = estimateTokens(request.task) + request.artifacts.reduce((total, artifact) => total + estimateArtifactTokens(artifact), 0);
+	const candidates = catalog.models.map((capability, index) => evaluateCapability(capability, {
+		requiredInputs,
+		requiredOutputs,
+		requiresStructuredOutput,
+		estimatedInputTokens,
+		...request.policy !== void 0 ? { policy: request.policy } : {},
+		...request.provider !== void 0 ? { provider: request.provider } : {},
+		...request.model !== void 0 ? { model: request.model } : {},
+		...request.contract !== void 0 ? { contract: request.contract } : {},
+		index
+	})).sort(compareCandidates);
+	const accepted = candidates.filter((candidate) => candidate.accepted);
+	const selected = accepted[0];
+	return {
+		catalogVersion: catalog.version,
+		...selected !== void 0 ? { selected: {
+			providerId: selected.providerId,
+			modelId: selected.modelId,
+			score: selected.score,
+			estimates: selected.estimates,
+			inputModalities: selected.capability.inputModalities,
+			outputModalities: selected.capability.outputModalities,
+			fileTransport: selected.capability.fileTransport
+		} } : {},
+		candidates,
+		rejected: candidates.filter((candidate) => !candidate.accepted),
+		fallbackChain: accepted.slice(1).map((candidate) => ({
+			providerId: candidate.providerId,
+			modelId: candidate.modelId,
+			score: candidate.score,
+			reason: "policy-preserving-fallback"
+		})),
+		noRouteReasons: selected === void 0 ? summarizeNoRouteReasons(candidates) : []
+	};
+}
+function evaluateCapability(capability, input) {
+	const reasons = [];
+	if (capability.available === false) reasons.push({
+		code: "provider-unavailable",
+		message: `${capability.providerId}/${capability.modelId} is not available.`
+	});
+	if (input.provider !== void 0 && capability.providerId !== input.provider) reasons.push({
+		code: "provider-forced-mismatch",
+		message: `Provider override requires ${input.provider}.`
+	});
+	if (input.model !== void 0 && capability.modelId !== input.model) reasons.push({
+		code: "model-forced-mismatch",
+		message: `Model override requires ${input.model}.`
+	});
+	for (const modality of input.requiredInputs) if (!capability.inputModalities.includes(modality)) reasons.push({
+		code: "input-modality-unsupported",
+		message: `${capability.modelId} does not support ${modality} input.`
+	});
+	for (const modality of input.requiredOutputs) if (!capability.outputModalities.includes(modality)) reasons.push({
+		code: "output-modality-unsupported",
+		message: `${capability.modelId} does not support ${modality} output.`
+	});
+	if (input.requiresStructuredOutput && !capability.structuredOutput) reasons.push({
+		code: "structured-output-unsupported",
+		message: `${capability.modelId} does not support structured output contracts.`
+	});
+	if (input.estimatedInputTokens > capability.contextWindow) reasons.push({
+		code: "context-window-exceeded",
+		message: `Estimated input ${input.estimatedInputTokens} tokens exceeds ${capability.contextWindow}.`
+	});
+	const estimates = estimateRoute(capability, input.estimatedInputTokens);
+	addPolicyRejectReasons(reasons, capability, estimates, input.policy);
+	const contractResult = evaluateContractAgainstRoute(input.contract, {
+		capability,
+		estimatedInputTokens: input.estimatedInputTokens,
+		estimatedOutputTokens: estimates.outputTokens
+	});
+	for (const reason of contractResult.reasons) reasons.push(reason);
+	const score = scoreCapability(capability, estimates, input.index);
+	return {
+		providerId: capability.providerId,
+		modelId: capability.modelId,
+		capability,
+		score,
+		accepted: reasons.length === 0,
+		reasons,
+		estimates
+	};
+}
+function addPolicyRejectReasons(reasons, capability, estimates, policy) {
+	if (policy === void 0) return;
+	if (policy.providerAllowList !== void 0 && !policy.providerAllowList.includes(capability.providerId)) reasons.push({
+		code: "provider-not-allowed",
+		message: `${capability.providerId} is not in the provider allow list.`
+	});
+	if (policy.providerDenyList?.includes(capability.providerId) === true) reasons.push({
+		code: "provider-denied",
+		message: `${capability.providerId} is in the provider deny list.`
+	});
+	if (policy.privacy !== void 0 && !capability.dataPolicy.privacy.includes(policy.privacy)) reasons.push({
+		code: "privacy-unsupported",
+		message: `${capability.modelId} does not satisfy ${policy.privacy} privacy.`
+	});
+	if (policy.noLogging === true && capability.dataPolicy.supportsNoLogging !== true) reasons.push({
+		code: "no-logging-unsupported",
+		message: `${capability.modelId} cannot satisfy noLogging.`
+	});
+	if (policy.stream === true && capability.streaming !== true) reasons.push({
+		code: "streaming-unsupported",
+		message: `${capability.modelId} does not support streaming.`
+	});
+	if (policy.noUpload === true && capability.fileTransport.length > 0 && capability.fileTransport.every((transport) => transport === "provider-upload")) reasons.push({
+		code: "no-upload-violated",
+		message: `${capability.modelId} requires an upload transport disallowed by policy.`
+	});
+	if (policy.latency !== void 0 && capability.latency !== policy.latency) reasons.push({
+		code: "latency-class-mismatch",
+		message: `${capability.modelId} latency class is ${capability.latency}, not ${policy.latency}.`
+	});
+	if (policy.maxCostUsd !== void 0 && estimates.costUsd !== void 0 && estimates.costUsd > policy.maxCostUsd) reasons.push({
+		code: "budget-exceeded",
+		message: `${capability.modelId} estimated cost ${estimates.costUsd} exceeds maxCostUsd ${policy.maxCostUsd}.`
+	});
+}
+function estimateRoute(capability, inputTokens) {
+	const outputTokens = 512;
+	const inputCost = capability.pricing?.inputCostPer1M === void 0 ? void 0 : inputTokens / 1e6 * capability.pricing.inputCostPer1M;
+	const outputCost = capability.pricing?.outputCostPer1M === void 0 ? void 0 : outputTokens / 1e6 * capability.pricing.outputCostPer1M;
+	return {
+		inputTokens,
+		outputTokens,
+		...inputCost !== void 0 || outputCost !== void 0 ? { costUsd: (inputCost ?? 0) + (outputCost ?? 0) } : {},
+		latencyMs: capability.latency === "interactive" ? 1e3 : 1e4
+	};
+}
+function scoreCapability(capability, estimates, index) {
+	const costScore = Math.round((estimates.costUsd ?? 0) * 1e6);
+	const latencyScore = capability.latency === "interactive" ? 0 : 1e5;
+	const contextHeadroom = Math.max(0, capability.contextWindow - estimates.inputTokens);
+	const contextScore = Math.max(0, 1e4 - Math.min(contextHeadroom, 1e4));
+	return costScore + latencyScore + contextScore + index;
+}
+function compareCandidates(left, right) {
+	if (left.accepted !== right.accepted) return left.accepted ? -1 : 1;
+	if (left.score !== right.score) return left.score - right.score;
+	const provider = left.providerId.localeCompare(right.providerId);
+	return provider === 0 ? left.modelId.localeCompare(right.modelId) : provider;
+}
+function requiredInputModalities(artifacts) {
+	const modalities = new Set(["text"]);
+	for (const artifact of artifacts) switch (artifact.kind) {
+		case "text":
+			modalities.add("text");
+			break;
+		case "json":
+			modalities.add("json");
+			break;
+		case "image":
+			modalities.add("image");
+			break;
+		case "audio":
+			modalities.add("audio");
+			break;
+		case "video":
+			modalities.add("video");
+			break;
+		case "document":
+			modalities.add("document");
+			break;
+		case "url":
+			modalities.add("url");
+			break;
+		case "tool-result":
+			modalities.add("tool");
+			break;
+		case "file":
+			modalities.add("file");
+			break;
+	}
+	return [...modalities];
+}
+function requiredOutputModalities(outputs) {
+	const modalities = /* @__PURE__ */ new Set();
+	for (const contract of Object.values(outputs)) {
+		if (contract === "text") {
+			modalities.add("text");
+			continue;
+		}
+		if (isStructuredContract(contract)) {
+			modalities.add("json");
+			continue;
+		}
+		if (isReferenceContract(contract)) modalities.add("json");
+	}
+	return [...modalities];
+}
+function outputRequiresStructuredOutput(outputs) {
+	return Object.values(outputs).some(isStructuredContract);
+}
+function isStructuredContract(contract) {
+	return typeof contract === "object" && contract !== null && "~standard" in contract;
+}
+function isReferenceContract(contract) {
+	return typeof contract === "object" && contract !== null && "kind" in contract && (contract.kind === "citations" || contract.kind === "artifacts");
+}
+function summarizeNoRouteReasons(candidates) {
+	if (candidates.length === 0) return [{
+		code: "catalog-empty",
+		message: "No provider capabilities are configured."
+	}];
+	const unique = /* @__PURE__ */ new Map();
+	for (const candidate of candidates) for (const reason of candidate.reasons) unique.set(reason.code, reason);
+	return [...unique.values()];
+}
+//#endregion
+export { evaluateContractAgainstRoute as i, mergePolicy as n, estimateRouteCost as r, routeDeterministically as t };
+
+//# sourceMappingURL=router-DU4Z3pTd.js.map

package/dist/router-DU4Z3pTd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router-DU4Z3pTd.js","names":[],"sources":["../src/contract/preflight.ts","../src/policy/policy.ts","../src/routing/router.ts"],"sourcesContent":["import type { RouteRejectReason } from \"../plan/plan.js\";\nimport type { ModelCapability } from \"../providers/provider.js\";\nimport { effectivePer1kPricing } from \"../routing/catalog.js\";\nimport type { CapabilityContract } from \"./contract.js\";\n\n/**\n * Result of a single pre-flight contract evaluation against a candidate\n * capability. `reasons` is empty when `ok` is true and contains one or more\n * `RouteRejectReason` entries when `ok` is false.\n *\n * The evaluator surfaces ALL failing reasons in a single pass — not the\n * first-failing only — so the deterministic router can aggregate per-candidate\n * rejection detail (CONTEXT.md \"Pre-flight surfaces ALL failed candidates\n * with per-candidate rejection reasons\").\n */\nexport interface ContractPreflightResult {\n  readonly ok: boolean;\n  readonly reasons: readonly RouteRejectReason[];\n}\n\n/**\n * Input for the pure cost estimator. Token counts come from the router's\n * existing `estimateRoute()` helper so preflight and router agree on the\n * projected output size (one source of truth — see `evaluateContractAgainstRoute`).\n */\nexport interface EstimateRouteCostInput {\n  readonly capability: ModelCapability;\n  readonly estimatedInputTokens: number;\n  readonly estimatedOutputTokens: number;\n}\n\n/**\n * Pure cost estimator. Returns `null` when pricing is unknown (so downstream\n * gates can distinguish \"free / zero\" from \"unmeasured\" per the Phase 7\n * cost-normalization decision). Uses static catalog metadata only — no probes,\n * no external pricing APIs.\n */\nexport function estimateRouteCost(input: EstimateRouteCostInput): number | null {\n  const { inputPer1kTokens, outputPer1kTokens } = effectivePer1kPricing(\n    input.capability.pricing,\n  );\n  if (inputPer1kTokens === undefined && outputPer1kTokens === undefined) {\n    return null;\n  }\n  const inputCost = ((inputPer1kTokens ?? 0) * input.estimatedInputTokens) / 1000;\n  const outputCost = ((outputPer1kTokens ?? 0) * input.estimatedOutputTokens) / 1000;\n  return inputCost + outputCost;\n}\n\n/** Input for the pre-flight evaluator. */\nexport interface EvaluateContractInput {\n  readonly capability: ModelCapability;\n  readonly estimatedInputTokens: number;\n  readonly estimatedOutputTokens: number;\n}\n\n/**\n * Pure pre-flight evaluator. Phase 9 receipts will reuse this for deterministic\n * verdict reconstruction.\n *\n * Token estimation: Phase 7 does NOT define a separate token estimator. Output-\n * token projection is the canonical responsibility of the router's existing\n * `estimateRoute()` helper (in `routing/router.ts`), which already produces an\n * `estimatedOutputTokens` value. The router passes that same value into this\n * evaluator via `EvaluateContractInput.estimatedOutputTokens`, so preflight\n * and the router always agree on the projected output size. Phase 9 receipts\n * will pin the router's estimate as the deterministic input — intentionally\n * one source of truth.\n *\n * Reject taxonomy (Phase 7 emits three of four codes):\n *  - `contract-budget-exceeded` (CONTRACT-04 + COST-03)\n *  - `contract-modality-missing` (CONTRACT-06)\n *  - `contract-privacy-mismatch` (CONTRACT-06)\n *  - `contract-quality-floor` (reserved for Phase 12 `lattice eval`; NEVER emitted here)\n */\nexport function evaluateContractAgainstRoute(\n  contract: CapabilityContract | undefined,\n  input: EvaluateContractInput,\n): ContractPreflightResult {\n  if (contract === undefined) {\n    return { ok: true, reasons: [] };\n  }\n  const reasons: RouteRejectReason[] = [];\n\n  // BUDGET — CONTRACT-04 + COST-03\n  if (contract.budget?.maxCostUsd !== undefined) {\n    const estimatedCost = estimateRouteCost({\n      capability: input.capability,\n      estimatedInputTokens: input.estimatedInputTokens,\n      estimatedOutputTokens: input.estimatedOutputTokens,\n    });\n    if (estimatedCost === null) {\n      reasons.push({\n        code: \"contract-budget-exceeded\",\n        message: `${input.capability.modelId} pricing unknown; contract budget declared (maxCostUsd=${contract.budget.maxCostUsd}).`,\n      });\n    } else if (estimatedCost > contract.budget.maxCostUsd) {\n      reasons.push({\n        code: \"contract-budget-exceeded\",\n        message: `${input.capability.modelId} estimated ${estimatedCost.toFixed(6)} exceeds contract budget ${contract.budget.maxCostUsd}.`,\n      });\n    }\n  }\n\n  // MODALITY — CONTRACT-06 (contract-modality-missing)\n  if (contract.requiredModalities !== undefined) {\n    for (const modality of contract.requiredModalities) {\n      if (\n        !input.capability.inputModalities.includes(modality) &&\n        !input.capability.outputModalities.includes(modality)\n      ) {\n        reasons.push({\n          code: \"contract-modality-missing\",\n          message: `${input.capability.modelId} does not support required modality ${modality}.`,\n        });\n      }\n    }\n  }\n\n  // PRIVACY — CONTRACT-06 (contract-privacy-mismatch)\n  if (contract.requiredPrivacy !== undefined) {\n    if (!input.capability.dataPolicy.privacy.includes(contract.requiredPrivacy)) {\n      reasons.push({\n        code: \"contract-privacy-mismatch\",\n        message: `${input.capability.modelId} does not satisfy contract privacy ${contract.requiredPrivacy}.`,\n      });\n    }\n  }\n\n  // QUALITY FLOOR — declared but NOT enforced on the capability side in Phase 7.\n  // CONTEXT.md: \"qualityFloor is parsed and forwarded into the pre-flight\n  // evaluator but only enforced by Phase 12's lattice eval\".\n  // The reject code \"contract-quality-floor\" stays reserved for Phase 12.\n\n  return { ok: reasons.length === 0, reasons };\n}\n","export type GatewayMetadataValue =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly GatewayMetadataValue[]\n  | { readonly [key: string]: GatewayMetadataValue };\n\nexport interface GatewayPolicy {\n  readonly routeTags?: readonly string[];\n  readonly providerPreferences?: readonly string[];\n  readonly metadata?: Record<string, GatewayMetadataValue>;\n  readonly allowFallbacks?: boolean;\n}\n\nexport interface PolicySpec {\n  readonly maxCostUsd?: number;\n  readonly latency?: \"interactive\" | \"batch\";\n  readonly privacy?: \"standard\" | \"sensitive\" | \"restricted\";\n  readonly providerAllowList?: readonly string[];\n  readonly providerDenyList?: readonly string[];\n  readonly noUpload?: boolean;\n  readonly noPublicUrl?: boolean;\n  readonly noLogging?: boolean;\n  readonly stream?: boolean;\n  readonly gateway?: GatewayPolicy;\n  readonly metadata?: Record<string, unknown>;\n}\n\nexport function mergePolicy(\n  defaultPolicy?: PolicySpec,\n  runPolicy?: PolicySpec,\n): PolicySpec | undefined {\n  if (defaultPolicy === undefined && runPolicy === undefined) {\n    return undefined;\n  }\n\n  const gateway = mergeGatewayPolicy(defaultPolicy?.gateway, runPolicy?.gateway);\n\n  return {\n    ...defaultPolicy,\n    ...runPolicy,\n    ...(gateway !== undefined ? { gateway } : {}),\n  };\n}\n\nfunction mergeGatewayPolicy(\n  defaultGateway?: GatewayPolicy,\n  runGateway?: GatewayPolicy,\n): GatewayPolicy | undefined {\n  if (defaultGateway === undefined && runGateway === undefined) {\n    return undefined;\n  }\n\n  const metadata =\n    defaultGateway?.metadata !== undefined || runGateway?.metadata !== undefined\n      ? {\n          ...defaultGateway?.metadata,\n          ...runGateway?.metadata,\n        }\n      : undefined;\n\n  return {\n    ...defaultGateway,\n    ...runGateway,\n    ...(metadata !== undefined ? { metadata } : {}),\n  };\n}\n","import type { ArtifactInput } from \"../artifacts/artifact.js\";\nimport type { CapabilityContract } from \"../contract/contract.js\";\nimport { evaluateContractAgainstRoute } from \"../contract/preflight.js\";\nimport type { OutputContract, OutputContractMap } from \"../outputs/contracts.js\";\nimport type { PolicySpec } from \"../policy/policy.js\";\nimport type {\n  CapabilityModality,\n  ModelCapability,\n} from \"../providers/provider.js\";\nimport type {\n  RouteCandidate,\n  RouteDecision,\n  RouteEstimates,\n  RouteRejectReason,\n} from \"../plan/plan.js\";\nimport { estimateArtifactTokens, estimateTokens } from \"../context/context-pack.js\";\nimport type { CapabilityCatalog } from \"./catalog.js\";\n\nexport interface RouteRequest {\n  readonly task: string;\n  readonly artifacts: readonly ArtifactInput[];\n  readonly outputs: OutputContractMap;\n  readonly policy?: PolicySpec;\n  readonly provider?: string;\n  readonly model?: string;\n  readonly contract?: CapabilityContract;\n}\n\nexport function routeDeterministically(\n  catalog: CapabilityCatalog,\n  request: RouteRequest,\n): RouteDecision {\n  const requiredInputs = requiredInputModalities(request.artifacts);\n  const requiredOutputs = requiredOutputModalities(request.outputs);\n  const requiresStructuredOutput = outputRequiresStructuredOutput(request.outputs);\n  const estimatedInputTokens =\n    estimateTokens(request.task) +\n    request.artifacts.reduce((total, artifact) => total + estimateArtifactTokens(artifact), 0);\n  const candidates = catalog.models\n    .map((capability, index) =>\n      evaluateCapability(capability, {\n        requiredInputs,\n        requiredOutputs,\n        requiresStructuredOutput,\n        estimatedInputTokens,\n        ...(request.policy !== undefined ? { policy: request.policy } : {}),\n        ...(request.provider !== undefined ? { provider: request.provider } : {}),\n        ...(request.model !== undefined ? { model: request.model } : {}),\n        ...(request.contract !== undefined ? { contract: request.contract } : {}),\n        index,\n      }),\n    )\n    .sort(compareCandidates);\n  const accepted = candidates.filter((candidate) => candidate.accepted);\n  const selected = accepted[0];\n\n  return {\n    catalogVersion: catalog.version,\n    ...(selected !== undefined\n      ? {\n          selected: {\n            providerId: selected.providerId,\n            modelId: selected.modelId,\n            score: selected.score,\n            estimates: selected.estimates,\n            inputModalities: selected.capability.inputModalities,\n            outputModalities: selected.capability.outputModalities,\n            fileTransport: selected.capability.fileTransport,\n          },\n        }\n      : {}),\n    candidates,\n    rejected: candidates.filter((candidate) => !candidate.accepted),\n    fallbackChain: accepted.slice(1).map((candidate) => ({\n      providerId: candidate.providerId,\n      modelId: candidate.modelId,\n      score: candidate.score,\n      reason: \"policy-preserving-fallback\",\n    })),\n    noRouteReasons:\n      selected === undefined\n        ? summarizeNoRouteReasons(candidates)\n        : [],\n  };\n}\n\nfunction evaluateCapability(\n  capability: ModelCapability,\n  input: {\n    readonly requiredInputs: readonly CapabilityModality[];\n    readonly requiredOutputs: readonly CapabilityModality[];\n    readonly requiresStructuredOutput: boolean;\n    readonly estimatedInputTokens: number;\n    readonly policy?: PolicySpec;\n    readonly provider?: string;\n    readonly model?: string;\n    readonly contract?: CapabilityContract;\n    readonly index: number;\n  },\n): RouteCandidate {\n  const reasons: RouteRejectReason[] = [];\n\n  if (capability.available === false) {\n    reasons.push({\n      code: \"provider-unavailable\",\n      message: `${capability.providerId}/${capability.modelId} is not available.`,\n    });\n  }\n\n  if (input.provider !== undefined && capability.providerId !== input.provider) {\n    reasons.push({\n      code: \"provider-forced-mismatch\",\n      message: `Provider override requires ${input.provider}.`,\n    });\n  }\n\n  if (input.model !== undefined && capability.modelId !== input.model) {\n    reasons.push({\n      code: \"model-forced-mismatch\",\n      message: `Model override requires ${input.model}.`,\n    });\n  }\n\n  for (const modality of input.requiredInputs) {\n    if (!capability.inputModalities.includes(modality)) {\n      reasons.push({\n        code: \"input-modality-unsupported\",\n        message: `${capability.modelId} does not support ${modality} input.`,\n      });\n    }\n  }\n\n  for (const modality of input.requiredOutputs) {\n    if (!capability.outputModalities.includes(modality)) {\n      reasons.push({\n        code: \"output-modality-unsupported\",\n        message: `${capability.modelId} does not support ${modality} output.`,\n      });\n    }\n  }\n\n  if (input.requiresStructuredOutput && !capability.structuredOutput) {\n    reasons.push({\n      code: \"structured-output-unsupported\",\n      message: `${capability.modelId} does not support structured output contracts.`,\n    });\n  }\n\n  if (input.estimatedInputTokens > capability.contextWindow) {\n    reasons.push({\n      code: \"context-window-exceeded\",\n      message: `Estimated input ${input.estimatedInputTokens} tokens exceeds ${capability.contextWindow}.`,\n    });\n  }\n\n  const estimates = estimateRoute(capability, input.estimatedInputTokens);\n  addPolicyRejectReasons(reasons, capability, estimates, input.policy);\n\n  // Phase 7 contract preflight — reuse the router's own output-token estimate\n  // so preflight and the router agree on the projected output size (one source\n  // of truth, consumed by Phase 9 receipts).\n  const contractResult = evaluateContractAgainstRoute(input.contract, {\n    capability,\n    estimatedInputTokens: input.estimatedInputTokens,\n    estimatedOutputTokens: estimates.outputTokens,\n  });\n  for (const reason of contractResult.reasons) {\n    reasons.push(reason);\n  }\n\n  const score = scoreCapability(capability, estimates, input.index);\n\n  return {\n    providerId: capability.providerId,\n    modelId: capability.modelId,\n    capability,\n    score,\n    accepted: reasons.length === 0,\n    reasons,\n    estimates,\n  };\n}\n\nfunction addPolicyRejectReasons(\n  reasons: RouteRejectReason[],\n  capability: ModelCapability,\n  estimates: RouteEstimates,\n  policy?: PolicySpec,\n): void {\n  if (policy === undefined) {\n    return;\n  }\n\n  if (\n    policy.providerAllowList !== undefined &&\n    !policy.providerAllowList.includes(capability.providerId)\n  ) {\n    reasons.push({\n      code: \"provider-not-allowed\",\n      message: `${capability.providerId} is not in the provider allow list.`,\n    });\n  }\n\n  if (policy.providerDenyList?.includes(capability.providerId) === true) {\n    reasons.push({\n      code: \"provider-denied\",\n      message: `${capability.providerId} is in the provider deny list.`,\n    });\n  }\n\n  if (\n    policy.privacy !== undefined &&\n    !capability.dataPolicy.privacy.includes(policy.privacy)\n  ) {\n    reasons.push({\n      code: \"privacy-unsupported\",\n      message: `${capability.modelId} does not satisfy ${policy.privacy} privacy.`,\n    });\n  }\n\n  if (policy.noLogging === true && capability.dataPolicy.supportsNoLogging !== true) {\n    reasons.push({\n      code: \"no-logging-unsupported\",\n      message: `${capability.modelId} cannot satisfy noLogging.`,\n    });\n  }\n\n  if (policy.stream === true && capability.streaming !== true) {\n    reasons.push({\n      code: \"streaming-unsupported\",\n      message: `${capability.modelId} does not support streaming.`,\n    });\n  }\n\n  if (\n    policy.noUpload === true &&\n    capability.fileTransport.length > 0 &&\n    capability.fileTransport.every((transport) => transport === \"provider-upload\")\n  ) {\n    reasons.push({\n      code: \"no-upload-violated\",\n      message: `${capability.modelId} requires an upload transport disallowed by policy.`,\n    });\n  }\n\n  if (policy.latency !== undefined && capability.latency !== policy.latency) {\n    reasons.push({\n      code: \"latency-class-mismatch\",\n      message: `${capability.modelId} latency class is ${capability.latency}, not ${policy.latency}.`,\n    });\n  }\n\n  if (\n    policy.maxCostUsd !== undefined &&\n    estimates.costUsd !== undefined &&\n    estimates.costUsd > policy.maxCostUsd\n  ) {\n    reasons.push({\n      code: \"budget-exceeded\",\n      message: `${capability.modelId} estimated cost ${estimates.costUsd} exceeds maxCostUsd ${policy.maxCostUsd}.`,\n    });\n  }\n}\n\nfunction estimateRoute(\n  capability: ModelCapability,\n  inputTokens: number,\n): RouteEstimates {\n  const outputTokens = 512;\n  const inputCost =\n    capability.pricing?.inputCostPer1M === undefined\n      ? undefined\n      : (inputTokens / 1_000_000) * capability.pricing.inputCostPer1M;\n  const outputCost =\n    capability.pricing?.outputCostPer1M === undefined\n      ? undefined\n      : (outputTokens / 1_000_000) * capability.pricing.outputCostPer1M;\n\n  return {\n    inputTokens,\n    outputTokens,\n    ...(inputCost !== undefined || outputCost !== undefined\n      ? { costUsd: (inputCost ?? 0) + (outputCost ?? 0) }\n      : {}),\n    latencyMs: capability.latency === \"interactive\" ? 1_000 : 10_000,\n  };\n}\n\nfunction scoreCapability(\n  capability: ModelCapability,\n  estimates: RouteEstimates,\n  index: number,\n): number {\n  const costScore = Math.round((estimates.costUsd ?? 0) * 1_000_000);\n  const latencyScore = capability.latency === \"interactive\" ? 0 : 100_000;\n  const contextHeadroom = Math.max(0, capability.contextWindow - estimates.inputTokens);\n  const contextScore = Math.max(0, 10_000 - Math.min(contextHeadroom, 10_000));\n\n  return costScore + latencyScore + contextScore + index;\n}\n\nfunction compareCandidates(left: RouteCandidate, right: RouteCandidate): number {\n  if (left.accepted !== right.accepted) {\n    return left.accepted ? -1 : 1;\n  }\n\n  if (left.score !== right.score) {\n    return left.score - right.score;\n  }\n\n  const provider = left.providerId.localeCompare(right.providerId);\n\n  return provider === 0 ? left.modelId.localeCompare(right.modelId) : provider;\n}\n\nfunction requiredInputModalities(\n  artifacts: readonly ArtifactInput[],\n): readonly CapabilityModality[] {\n  const modalities = new Set<CapabilityModality>([\"text\"]);\n\n  for (const artifact of artifacts) {\n    switch (artifact.kind) {\n      case \"text\":\n        modalities.add(\"text\");\n        break;\n      case \"json\":\n        modalities.add(\"json\");\n        break;\n      case \"image\":\n        modalities.add(\"image\");\n        break;\n      case \"audio\":\n        modalities.add(\"audio\");\n        break;\n      case \"video\":\n        modalities.add(\"video\");\n        break;\n      case \"document\":\n        modalities.add(\"document\");\n        break;\n      case \"url\":\n        modalities.add(\"url\");\n        break;\n      case \"tool-result\":\n        modalities.add(\"tool\");\n        break;\n      case \"file\":\n        modalities.add(\"file\");\n        break;\n    }\n  }\n\n  return [...modalities];\n}\n\nfunction requiredOutputModalities(\n  outputs: OutputContractMap,\n): readonly CapabilityModality[] {\n  const modalities = new Set<CapabilityModality>();\n\n  for (const contract of Object.values(outputs)) {\n    if (contract === \"text\") {\n      modalities.add(\"text\");\n      continue;\n    }\n\n    if (isStructuredContract(contract)) {\n      modalities.add(\"json\");\n      continue;\n    }\n\n    if (isReferenceContract(contract)) {\n      modalities.add(\"json\");\n    }\n  }\n\n  return [...modalities];\n}\n\nfunction outputRequiresStructuredOutput(outputs: OutputContractMap): boolean {\n  return Object.values(outputs).some(isStructuredContract);\n}\n\nfunction isStructuredContract(contract: OutputContract): boolean {\n  return (\n    typeof contract === \"object\" &&\n    contract !== null &&\n    \"~standard\" in contract\n  );\n}\n\nfunction isReferenceContract(contract: OutputContract): boolean {\n  return (\n    typeof contract === \"object\" &&\n    contract !== null &&\n    \"kind\" in contract &&\n    (contract.kind === \"citations\" || contract.kind === \"artifacts\")\n  );\n}\n\nfunction summarizeNoRouteReasons(\n  candidates: readonly RouteCandidate[],\n): readonly RouteRejectReason[] {\n  if (candidates.length === 0) {\n    return [\n      {\n        code: \"catalog-empty\",\n        message: \"No provider capabilities are configured.\",\n      },\n    ];\n  }\n\n  const unique = new Map<string, RouteRejectReason>();\n\n  for (const candidate of candidates) {\n    for (const reason of candidate.reasons) {\n      unique.set(reason.code, reason);\n    }\n  }\n\n  return [...unique.values()];\n}\n"],"mappings":";;;;;;;;;AAqCA,SAAgB,kBAAkB,OAA8C;CAC9E,MAAM,EAAE,kBAAkB,sBAAsB,sBAC9C,MAAM,WAAW,QAClB;AACD,KAAI,qBAAqB,KAAA,KAAa,sBAAsB,KAAA,EAC1D,QAAO;AAIT,SAFoB,oBAAoB,KAAK,MAAM,uBAAwB,OACtD,qBAAqB,KAAK,MAAM,wBAAyB;;;;;;;;;;;;;;;;;;;;;AA8BhF,SAAgB,6BACd,UACA,OACyB;AACzB,KAAI,aAAa,KAAA,EACf,QAAO;EAAE,IAAI;EAAM,SAAS,EAAE;EAAE;CAElC,MAAM,UAA+B,EAAE;AAGvC,KAAI,SAAS,QAAQ,eAAe,KAAA,GAAW;EAC7C,MAAM,gBAAgB,kBAAkB;GACtC,YAAY,MAAM;GAClB,sBAAsB,MAAM;GAC5B,uBAAuB,MAAM;GAC9B,CAAC;AACF,MAAI,kBAAkB,KACpB,SAAQ,KAAK;GACX,MAAM;GACN,SAAS,GAAG,MAAM,WAAW,QAAQ,yDAAyD,SAAS,OAAO,WAAW;GAC1H,CAAC;WACO,gBAAgB,SAAS,OAAO,WACzC,SAAQ,KAAK;GACX,MAAM;GACN,SAAS,GAAG,MAAM,WAAW,QAAQ,aAAa,cAAc,QAAQ,EAAE,CAAC,2BAA2B,SAAS,OAAO,WAAW;GAClI,CAAC;;AAKN,KAAI,SAAS,uBAAuB,KAAA;OAC7B,MAAM,YAAY,SAAS,mBAC9B,KACE,CAAC,MAAM,WAAW,gBAAgB,SAAS,SAAS,IACpD,CAAC,MAAM,WAAW,iBAAiB,SAAS,SAAS,CAErD,SAAQ,KAAK;GACX,MAAM;GACN,SAAS,GAAG,MAAM,WAAW,QAAQ,sCAAsC,SAAS;GACrF,CAAC;;AAMR,KAAI,SAAS,oBAAoB,KAAA;MAC3B,CAAC,MAAM,WAAW,WAAW,QAAQ,SAAS,SAAS,gBAAgB,CACzE,SAAQ,KAAK;GACX,MAAM;GACN,SAAS,GAAG,MAAM,WAAW,QAAQ,qCAAqC,SAAS,gBAAgB;GACpG,CAAC;;AASN,QAAO;EAAE,IAAI,QAAQ,WAAW;EAAG;EAAS;;;;ACzG9C,SAAgB,YACd,eACA,WACwB;AACxB,KAAI,kBAAkB,KAAA,KAAa,cAAc,KAAA,EAC/C;CAGF,MAAM,UAAU,mBAAmB,eAAe,SAAS,WAAW,QAAQ;AAE9E,QAAO;EACL,GAAG;EACH,GAAG;EACH,GAAI,YAAY,KAAA,IAAY,EAAE,SAAS,GAAG,EAAE;EAC7C;;AAGH,SAAS,mBACP,gBACA,YAC2B;AAC3B,KAAI,mBAAmB,KAAA,KAAa,eAAe,KAAA,EACjD;CAGF,MAAM,WACJ,gBAAgB,aAAa,KAAA,KAAa,YAAY,aAAa,KAAA,IAC/D;EACE,GAAG,gBAAgB;EACnB,GAAG,YAAY;EAChB,GACD,KAAA;AAEN,QAAO;EACL,GAAG;EACH,GAAG;EACH,GAAI,aAAa,KAAA,IAAY,EAAE,UAAU,GAAG,EAAE;EAC/C;;;;ACtCH,SAAgB,uBACd,SACA,SACe;CACf,MAAM,iBAAiB,wBAAwB,QAAQ,UAAU;CACjE,MAAM,kBAAkB,yBAAyB,QAAQ,QAAQ;CACjE,MAAM,2BAA2B,+BAA+B,QAAQ,QAAQ;CAChF,MAAM,uBACJ,eAAe,QAAQ,KAAK,GAC5B,QAAQ,UAAU,QAAQ,OAAO,aAAa,QAAQ,uBAAuB,SAAS,EAAE,EAAE;CAC5F,MAAM,aAAa,QAAQ,OACxB,KAAK,YAAY,UAChB,mBAAmB,YAAY;EAC7B;EACA;EACA;EACA;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,QAAQ,GAAG,EAAE;EAClE,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EACxE,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,OAAO,GAAG,EAAE;EAC/D,GAAI,QAAQ,aAAa,KAAA,IAAY,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EACxE;EACD,CAAC,CACH,CACA,KAAK,kBAAkB;CAC1B,MAAM,WAAW,WAAW,QAAQ,cAAc,UAAU,SAAS;CACrE,MAAM,WAAW,SAAS;AAE1B,QAAO;EACL,gBAAgB,QAAQ;EACxB,GAAI,aAAa,KAAA,IACb,EACE,UAAU;GACR,YAAY,SAAS;GACrB,SAAS,SAAS;GAClB,OAAO,SAAS;GAChB,WAAW,SAAS;GACpB,iBAAiB,SAAS,WAAW;GACrC,kBAAkB,SAAS,WAAW;GACtC,eAAe,SAAS,WAAW;GACpC,EACF,GACD,EAAE;EACN;EACA,UAAU,WAAW,QAAQ,cAAc,CAAC,UAAU,SAAS;EAC/D,eAAe,SAAS,MAAM,EAAE,CAAC,KAAK,eAAe;GACnD,YAAY,UAAU;GACtB,SAAS,UAAU;GACnB,OAAO,UAAU;GACjB,QAAQ;GACT,EAAE;EACH,gBACE,aAAa,KAAA,IACT,wBAAwB,WAAW,GACnC,EAAE;EACT;;AAGH,SAAS,mBACP,YACA,OAWgB;CAChB,MAAM,UAA+B,EAAE;AAEvC,KAAI,WAAW,cAAc,MAC3B,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,WAAW,GAAG,WAAW,QAAQ;EACzD,CAAC;AAGJ,KAAI,MAAM,aAAa,KAAA,KAAa,WAAW,eAAe,MAAM,SAClE,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,8BAA8B,MAAM,SAAS;EACvD,CAAC;AAGJ,KAAI,MAAM,UAAU,KAAA,KAAa,WAAW,YAAY,MAAM,MAC5D,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,2BAA2B,MAAM,MAAM;EACjD,CAAC;AAGJ,MAAK,MAAM,YAAY,MAAM,eAC3B,KAAI,CAAC,WAAW,gBAAgB,SAAS,SAAS,CAChD,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ,oBAAoB,SAAS;EAC7D,CAAC;AAIN,MAAK,MAAM,YAAY,MAAM,gBAC3B,KAAI,CAAC,WAAW,iBAAiB,SAAS,SAAS,CACjD,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ,oBAAoB,SAAS;EAC7D,CAAC;AAIN,KAAI,MAAM,4BAA4B,CAAC,WAAW,iBAChD,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ;EAChC,CAAC;AAGJ,KAAI,MAAM,uBAAuB,WAAW,cAC1C,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,mBAAmB,MAAM,qBAAqB,kBAAkB,WAAW,cAAc;EACnG,CAAC;CAGJ,MAAM,YAAY,cAAc,YAAY,MAAM,qBAAqB;AACvE,wBAAuB,SAAS,YAAY,WAAW,MAAM,OAAO;CAKpE,MAAM,iBAAiB,6BAA6B,MAAM,UAAU;EAClE;EACA,sBAAsB,MAAM;EAC5B,uBAAuB,UAAU;EAClC,CAAC;AACF,MAAK,MAAM,UAAU,eAAe,QAClC,SAAQ,KAAK,OAAO;CAGtB,MAAM,QAAQ,gBAAgB,YAAY,WAAW,MAAM,MAAM;AAEjE,QAAO;EACL,YAAY,WAAW;EACvB,SAAS,WAAW;EACpB;EACA;EACA,UAAU,QAAQ,WAAW;EAC7B;EACA;EACD;;AAGH,SAAS,uBACP,SACA,YACA,WACA,QACM;AACN,KAAI,WAAW,KAAA,EACb;AAGF,KACE,OAAO,sBAAsB,KAAA,KAC7B,CAAC,OAAO,kBAAkB,SAAS,WAAW,WAAW,CAEzD,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,WAAW;EACnC,CAAC;AAGJ,KAAI,OAAO,kBAAkB,SAAS,WAAW,WAAW,KAAK,KAC/D,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,WAAW;EACnC,CAAC;AAGJ,KACE,OAAO,YAAY,KAAA,KACnB,CAAC,WAAW,WAAW,QAAQ,SAAS,OAAO,QAAQ,CAEvD,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ,oBAAoB,OAAO,QAAQ;EACnE,CAAC;AAGJ,KAAI,OAAO,cAAc,QAAQ,WAAW,WAAW,sBAAsB,KAC3E,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ;EAChC,CAAC;AAGJ,KAAI,OAAO,WAAW,QAAQ,WAAW,cAAc,KACrD,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ;EAChC,CAAC;AAGJ,KACE,OAAO,aAAa,QACpB,WAAW,cAAc,SAAS,KAClC,WAAW,cAAc,OAAO,cAAc,cAAc,kBAAkB,CAE9E,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ;EAChC,CAAC;AAGJ,KAAI,OAAO,YAAY,KAAA,KAAa,WAAW,YAAY,OAAO,QAChE,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ,oBAAoB,WAAW,QAAQ,QAAQ,OAAO,QAAQ;EAC9F,CAAC;AAGJ,KACE,OAAO,eAAe,KAAA,KACtB,UAAU,YAAY,KAAA,KACtB,UAAU,UAAU,OAAO,WAE3B,SAAQ,KAAK;EACX,MAAM;EACN,SAAS,GAAG,WAAW,QAAQ,kBAAkB,UAAU,QAAQ,sBAAsB,OAAO,WAAW;EAC5G,CAAC;;AAIN,SAAS,cACP,YACA,aACgB;CAChB,MAAM,eAAe;CACrB,MAAM,YACJ,WAAW,SAAS,mBAAmB,KAAA,IACnC,KAAA,IACC,cAAc,MAAa,WAAW,QAAQ;CACrD,MAAM,aACJ,WAAW,SAAS,oBAAoB,KAAA,IACpC,KAAA,IACC,eAAe,MAAa,WAAW,QAAQ;AAEtD,QAAO;EACL;EACA;EACA,GAAI,cAAc,KAAA,KAAa,eAAe,KAAA,IAC1C,EAAE,UAAU,aAAa,MAAM,cAAc,IAAI,GACjD,EAAE;EACN,WAAW,WAAW,YAAY,gBAAgB,MAAQ;EAC3D;;AAGH,SAAS,gBACP,YACA,WACA,OACQ;CACR,MAAM,YAAY,KAAK,OAAO,UAAU,WAAW,KAAK,IAAU;CAClE,MAAM,eAAe,WAAW,YAAY,gBAAgB,IAAI;CAChE,MAAM,kBAAkB,KAAK,IAAI,GAAG,WAAW,gBAAgB,UAAU,YAAY;CACrF,MAAM,eAAe,KAAK,IAAI,GAAG,MAAS,KAAK,IAAI,iBAAiB,IAAO,CAAC;AAE5E,QAAO,YAAY,eAAe,eAAe;;AAGnD,SAAS,kBAAkB,MAAsB,OAA+B;AAC9E,KAAI,KAAK,aAAa,MAAM,SAC1B,QAAO,KAAK,WAAW,KAAK;AAG9B,KAAI,KAAK,UAAU,MAAM,MACvB,QAAO,KAAK,QAAQ,MAAM;CAG5B,MAAM,WAAW,KAAK,WAAW,cAAc,MAAM,WAAW;AAEhE,QAAO,aAAa,IAAI,KAAK,QAAQ,cAAc,MAAM,QAAQ,GAAG;;AAGtE,SAAS,wBACP,WAC+B;CAC/B,MAAM,aAAa,IAAI,IAAwB,CAAC,OAAO,CAAC;AAExD,MAAK,MAAM,YAAY,UACrB,SAAQ,SAAS,MAAjB;EACE,KAAK;AACH,cAAW,IAAI,OAAO;AACtB;EACF,KAAK;AACH,cAAW,IAAI,OAAO;AACtB;EACF,KAAK;AACH,cAAW,IAAI,QAAQ;AACvB;EACF,KAAK;AACH,cAAW,IAAI,QAAQ;AACvB;EACF,KAAK;AACH,cAAW,IAAI,QAAQ;AACvB;EACF,KAAK;AACH,cAAW,IAAI,WAAW;AAC1B;EACF,KAAK;AACH,cAAW,IAAI,MAAM;AACrB;EACF,KAAK;AACH,cAAW,IAAI,OAAO;AACtB;EACF,KAAK;AACH,cAAW,IAAI,OAAO;AACtB;;AAIN,QAAO,CAAC,GAAG,WAAW;;AAGxB,SAAS,yBACP,SAC+B;CAC/B,MAAM,6BAAa,IAAI,KAAyB;AAEhD,MAAK,MAAM,YAAY,OAAO,OAAO,QAAQ,EAAE;AAC7C,MAAI,aAAa,QAAQ;AACvB,cAAW,IAAI,OAAO;AACtB;;AAGF,MAAI,qBAAqB,SAAS,EAAE;AAClC,cAAW,IAAI,OAAO;AACtB;;AAGF,MAAI,oBAAoB,SAAS,CAC/B,YAAW,IAAI,OAAO;;AAI1B,QAAO,CAAC,GAAG,WAAW;;AAGxB,SAAS,+BAA+B,SAAqC;AAC3E,QAAO,OAAO,OAAO,QAAQ,CAAC,KAAK,qBAAqB;;AAG1D,SAAS,qBAAqB,UAAmC;AAC/D,QACE,OAAO,aAAa,YACpB,aAAa,QACb,eAAe;;AAInB,SAAS,oBAAoB,UAAmC;AAC9D,QACE,OAAO,aAAa,YACpB,aAAa,QACb,UAAU,aACT,SAAS,SAAS,eAAe,SAAS,SAAS;;AAIxD,SAAS,wBACP,YAC8B;AAC9B,KAAI,WAAW,WAAW,EACxB,QAAO,CACL;EACE,MAAM;EACN,SAAS;EACV,CACF;CAGH,MAAM,yBAAS,IAAI,KAAgC;AAEnD,MAAK,MAAM,aAAa,WACtB,MAAK,MAAM,UAAU,UAAU,QAC7B,QAAO,IAAI,OAAO,MAAM,OAAO;AAInC,QAAO,CAAC,GAAG,OAAO,QAAQ,CAAC"}