@garygentry/system1-core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Gary Gentry
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# @garygentry/system1-core
+
+The engine behind the [`decide`](https://www.npmjs.com/package/@garygentry/system1) CLI, as a library: model profiles, transport, sources and splitters, egress excludes and scrubbing, fixtures for replay, the spend ledger, projection, and the spec format.
+
+```ts
+import { createContext, runMany } from "@garygentry/system1-core"
+```
+
+The CLI bundles its own copy, so install this only to build on the engine directly.
+
+Documentation: **https://github.com/garygentry/system1**
+
+MIT

package/dist/config/consent.d.ts

@@ -0,0 +1,11 @@
+import { type Consent } from "./load.js";
+/**
+ * Record (or revoke) egress consent in `<repo>/.system1/config.yaml`,
+ * preserving whatever else the file holds, comments included.
+ */
+export declare function setConsent(repoRoot: string, granted: boolean, by?: string, now?: Date): Consent;
+/**
+ * @throws DecisionsError `egress-refused` when this repo has not consented.
+ */
+export declare function assertConsent(consent: Consent, repoRoot: string): void;
+//# sourceMappingURL=consent.d.ts.map

package/dist/config/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../../src/config/consent.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,OAAO,EAAkB,MAAM,WAAW,CAAA;AAOxD;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,EAAE,CAAC,EAAE,MAAM,EACX,GAAG,OAAa,GACf,OAAO,CAQT;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAStE"}

package/dist/config/consent.js

@@ -0,0 +1,33 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { parseDocument } from "yaml";
+import { DecisionsError } from "../errors.js";
+import { repoConfigPath } from "./load.js";
+const HEADER = `# decisions — per-repo configuration. See https://github.com/garygentry/system1
+# egress.consent records that this repo agreed to send content to the decision
+# model's provider (OpenRouter). Path excludes and secret scrubbing always apply.
+`;
+/**
+ * Record (or revoke) egress consent in `<repo>/.system1/config.yaml`,
+ * preserving whatever else the file holds, comments included.
+ */
+export function setConsent(repoRoot, granted, by, now = new Date()) {
+    const file = repoConfigPath(repoRoot);
+    const doc = existsSync(file) ? parseDocument(readFileSync(file, "utf8")) : parseDocument(HEADER);
+    const consent = { granted, at: now.toISOString(), ...(by ? { by } : {}) };
+    doc.setIn(["egress", "consent"], consent);
+    mkdirSync(dirname(file), { recursive: true });
+    writeFileSync(file, doc.toString());
+    return consent;
+}
+/**
+ * @throws DecisionsError `egress-refused` when this repo has not consented.
+ */
+export function assertConsent(consent, repoRoot) {
+    if (consent.granted)
+        return;
+    throw new DecisionsError("egress-refused", `This repo has not agreed to send content to the decision model's provider. ` +
+        `Run \`decide config egress allow\` in ${repoRoot} (or use the setup skill) to consent. ` +
+        `Replay of recorded answers works without consent.`, { repoRoot });
+}
+//# sourceMappingURL=consent.js.map

package/dist/config/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../../src/config/consent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAgB,cAAc,EAAE,MAAM,WAAW,CAAA;AAExD,MAAM,MAAM,GAAG;;;CAGd,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,OAAgB,EAChB,EAAW,EACX,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IAChG,MAAM,OAAO,GAAY,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAClF,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAA;IACzC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IACnC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,QAAgB;IAC9D,IAAI,OAAO,CAAC,OAAO;QAAE,OAAM;IAC3B,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,6EAA6E;QAC3E,yCAAyC,QAAQ,wCAAwC;QACzF,mDAAmD,EACrD,EAAE,QAAQ,EAAE,CACb,CAAA;AACH,CAAC"}

package/dist/config/load.d.ts

@@ -0,0 +1,64 @@
+import { type ModelProfile } from "../model/profiles.js";
+import { type DetectedSession } from "./session.js";
+export interface Consent {
+    granted: boolean;
+    /** ISO timestamp of the grant. */
+    at?: string;
+    /** Free text, e.g. who granted it or through which harness. */
+    by?: string;
+}
+export interface Budget {
+    /** Above this many calls, a request needs explicit confirmation. */
+    maxCalls: number;
+    /** Above this projected USD, a request needs explicit confirmation. */
+    maxUsd: number;
+}
+export interface DecisionsConfig {
+    model: string;
+    endpoint: string;
+    /** Server-side cap on simultaneous calls in a fan-out. */
+    concurrency: number;
+    /** Per-attempt request timeout. */
+    timeoutMs: number;
+    budget: Budget;
+    egress: {
+        /** Only ever taken from the repo layer. */
+        consent: Consent;
+        /** Extra path patterns never to send, on top of the defaults. */
+        exclude: string[];
+    };
+    /** Extra model profiles, on top of the built-in ones. */
+    profiles: ModelProfile[];
+}
+export interface ResolvedConfig extends DecisionsConfig {
+    repoRoot: string;
+    /** Absent when no key is configured. Never printed. */
+    apiKey: string | undefined;
+    apiKeySource: "env" | "credentials" | undefined;
+    replay: boolean;
+    /** `SYSTEM1_SESSION`, else the harness session id (`claude:…`, `codex:…`, `pi:…`). */
+    session: string | undefined;
+    sessionOrigin: DetectedSession["origin"] | undefined;
+    /** Which files contributed, for `decide config`. */
+    layers: {
+        user?: string;
+        repo?: string;
+        credentials?: string;
+    };
+}
+export declare const DEFAULTS: DecisionsConfig;
+/** Walk up from `cwd` to the nearest directory holding `.system1/` or `.git`; else `cwd`. */
+export declare function findRepoRoot(cwd: string): string;
+export declare function userConfigDir(env?: NodeJS.ProcessEnv, home?: string): string;
+/** Where a repo keeps its decisions state: config, fixtures, the spend ledger. */
+export declare function stateDir(repoRoot: string): string;
+export declare function repoConfigPath(repoRoot: string): string;
+export interface LoadOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+}
+export declare function loadConfig(options?: LoadOptions): ResolvedConfig;
+/** All profiles the config knows: built-ins first, config additions after. */
+export declare function allProfiles(config: Pick<DecisionsConfig, "profiles">): ModelProfile[];
+//# sourceMappingURL=load.d.ts.map

package/dist/config/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAeA,OAAO,EAAoB,KAAK,YAAY,EAAY,MAAM,sBAAsB,CAAA;AAEpF,OAAO,EAAE,KAAK,eAAe,EAAiB,MAAM,cAAc,CAAA;AAElE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,kCAAkC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,MAAM;IACrB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IACnB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE;QACN,2CAA2C;QAC3C,OAAO,EAAE,OAAO,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,CAAA;IACD,yDAAyD;IACzD,QAAQ,EAAE,YAAY,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,cAAe,SAAQ,eAAe;IACrD,QAAQ,EAAE,MAAM,CAAA;IAChB,uDAAuD;IACvD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,YAAY,EAAE,KAAK,GAAG,aAAa,GAAG,SAAS,CAAA;IAC/C,MAAM,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,aAAa,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;IACpD,oDAAoD;IACpD,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/D;AAED,eAAO,MAAM,QAAQ,EAAE,eAQtB,CAAA;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQhD;AAED,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAY,GAAG,MAAM,CAG5F;AAED,kFAAkF;AAClF,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,WAAgB,GAAG,cAAc,CA+CpE;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,GAAG,YAAY,EAAE,CAErF"}

package/dist/config/load.js

@@ -0,0 +1,216 @@
+/**
+ * Layered configuration:
+ *
+ *   defaults → user (`$XDG_CONFIG_HOME/decisions/config.yaml`)
+ *            → repo (`<repo>/.system1/config.yaml`) → env
+ *
+ * Later layers win. There is one exception: egress consent is read **only**
+ * from the repo layer. Consent is per repo (decision 0009), so a user-level
+ * grant is ignored rather than silently covering every repo.
+ */
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { parse } from "yaml";
+import { DecisionsError } from "../errors.js";
+import { DEFAULT_MODEL_ID, PROFILES } from "../model/profiles.js";
+import { DEFAULT_ENDPOINT, DEFAULT_TIMEOUT_MS } from "../transport/openrouter.js";
+import { detectSession } from "./session.js";
+export const DEFAULTS = {
+    model: DEFAULT_MODEL_ID,
+    endpoint: DEFAULT_ENDPOINT,
+    concurrency: 8,
+    timeoutMs: DEFAULT_TIMEOUT_MS,
+    budget: { maxCalls: 200, maxUsd: 0.05 },
+    egress: { consent: { granted: false }, exclude: [] },
+    profiles: [],
+};
+/** Walk up from `cwd` to the nearest directory holding `.system1/` or `.git`; else `cwd`. */
+export function findRepoRoot(cwd) {
+    let dir = resolve(cwd);
+    while (true) {
+        if (existsSync(join(dir, ".system1")) || existsSync(join(dir, ".git")))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return resolve(cwd);
+        dir = parent;
+    }
+}
+export function userConfigDir(env = process.env, home = homedir()) {
+    const base = env.XDG_CONFIG_HOME?.trim() ? env.XDG_CONFIG_HOME : join(home, ".config");
+    return join(base, "system1");
+}
+/** Where a repo keeps its decisions state: config, fixtures, the spend ledger. */
+export function stateDir(repoRoot) {
+    return join(repoRoot, ".system1");
+}
+export function repoConfigPath(repoRoot) {
+    return join(repoRoot, ".system1", "config.yaml");
+}
+export function loadConfig(options = {}) {
+    const env = options.env ?? process.env;
+    const repoRoot = findRepoRoot(options.cwd ?? process.cwd());
+    const userDir = userConfigDir(env, options.home);
+    const userFile = join(userDir, "config.yaml");
+    const repoFile = repoConfigPath(repoRoot);
+    const user = readLayer(userFile);
+    const repo = readLayer(repoFile);
+    const merged = {
+        model: pick("model", "string", repo, user) ?? DEFAULTS.model,
+        endpoint: pick("endpoint", "string", repo, user) ?? DEFAULTS.endpoint,
+        concurrency: pick("concurrency", "number", repo, user) ?? DEFAULTS.concurrency,
+        timeoutMs: pick("timeoutMs", "number", repo, user) ?? DEFAULTS.timeoutMs,
+        budget: {
+            maxCalls: pickIn("budget", "maxCalls", repo, user) ?? DEFAULTS.budget.maxCalls,
+            maxUsd: pickIn("budget", "maxUsd", repo, user) ?? DEFAULTS.budget.maxUsd,
+        },
+        egress: {
+            consent: readConsent(repo, repoFile),
+            exclude: [
+                ...stringList(user, "egress.exclude", userFile),
+                ...stringList(repo, "egress.exclude", repoFile),
+            ],
+        },
+        profiles: [...profileList(user, userFile), ...profileList(repo, repoFile)],
+    };
+    const key = resolveApiKey(env, userDir);
+    const session = detectSession(env);
+    return {
+        ...merged,
+        model: nonEmpty(env.SYSTEM1_MODEL) ?? merged.model,
+        endpoint: nonEmpty(env.SYSTEM1_ENDPOINT) ?? merged.endpoint,
+        repoRoot,
+        apiKey: key?.value,
+        apiKeySource: key?.source,
+        replay: /^(1|true|yes)$/i.test(env.SYSTEM1_REPLAY ?? ""),
+        session: session?.id,
+        sessionOrigin: session?.origin,
+        layers: {
+            ...(user ? { user: userFile } : {}),
+            ...(repo ? { repo: repoFile } : {}),
+            ...(key?.file ? { credentials: key.file } : {}),
+        },
+    };
+}
+/** All profiles the config knows: built-ins first, config additions after. */
+export function allProfiles(config) {
+    return [...PROFILES, ...config.profiles];
+}
+function readLayer(file) {
+    if (!existsSync(file))
+        return undefined;
+    let parsed;
+    try {
+        parsed = parse(readFileSync(file, "utf8"));
+    }
+    catch (error) {
+        throw new DecisionsError("config-error", `${file} is not valid YAML: ${String(error)}`, {
+            file,
+        });
+    }
+    if (parsed === null || parsed === undefined)
+        return {};
+    if (typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new DecisionsError("config-error", `${file} must be a YAML mapping`, { file });
+    }
+    return parsed;
+}
+function pick(key, type, ...layers) {
+    for (const layer of layers) {
+        const value = layer?.[key];
+        if (typeof value === type)
+            return value;
+    }
+    return undefined;
+}
+function pickIn(section, key, ...layers) {
+    for (const layer of layers) {
+        const value = layer?.[section]?.[key];
+        if (typeof value === "number" && value >= 0)
+            return value;
+    }
+    return undefined;
+}
+function readConsent(repo, file) {
+    const consent = repo?.egress?.consent;
+    if (consent === undefined)
+        return { granted: false };
+    if (typeof consent !== "object" ||
+        consent === null ||
+        typeof consent.granted !== "boolean") {
+        throw new DecisionsError("config-error", `${file}: egress.consent must be {granted: true|false, at?, by?}`, { file });
+    }
+    const { granted, at, by } = consent;
+    return {
+        granted,
+        ...(typeof at === "string" ? { at } : {}),
+        ...(typeof by === "string" ? { by } : {}),
+    };
+}
+function stringList(layer, path, file) {
+    const value = layer?.egress?.exclude;
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || !value.every((v) => typeof v === "string")) {
+        throw new DecisionsError("config-error", `${file}: ${path} must be a list of glob patterns`, {
+            file,
+        });
+    }
+    return value;
+}
+function profileList(layer, file) {
+    const value = layer?.profiles;
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value))
+        throw new DecisionsError("config-error", `${file}: profiles must be a list`, { file });
+    return value.map((p, i) => {
+        const profile = p;
+        const ok = typeof profile.id === "string" &&
+            typeof profile.maxStateTokens === "number" &&
+            typeof profile.usdPerInputToken === "number" &&
+            typeof profile.undecidedFloor === "number";
+        if (!ok) {
+            throw new DecisionsError("config-error", `${file}: profiles[${i}] needs id, maxStateTokens, usdPerInputToken and undecidedFloor`, { file });
+        }
+        if (profile.maxChoices !== undefined &&
+            !(Number.isInteger(profile.maxChoices) && profile.maxChoices >= 2)) {
+            throw new DecisionsError("config-error", `${file}: profiles[${i}].maxChoices must be a whole number of at least 2`, { file });
+        }
+        return {
+            displayName: profile.id,
+            transport: "openrouter-decisions",
+            usdPerOutputToken: 0,
+            priceAsOf: "unknown",
+            calibrated: true,
+            // Same wire contract as Jev unless the config says otherwise.
+            maxChoices: 255,
+            ...profile,
+        };
+    });
+}
+/**
+ * The API key: `OPENROUTER_API_KEY` first, then the user credentials file.
+ *
+ * The credentials file holds `openrouter_api_key: sk-…` and must not be
+ * readable by group or others, the same rule ssh applies to private keys.
+ */
+function resolveApiKey(env, userDir) {
+    const fromEnv = nonEmpty(env.OPENROUTER_API_KEY);
+    if (fromEnv)
+        return { value: fromEnv, source: "env" };
+    const file = join(userDir, "credentials");
+    if (!existsSync(file))
+        return undefined;
+    if (process.platform !== "win32" && (statSync(file).mode & 0o077) !== 0) {
+        throw new DecisionsError("config-error", `${file} is readable by other users. Run \`chmod 600 ${file}\`.`, { file });
+    }
+    const parsed = readLayer(file);
+    const value = nonEmpty(typeof parsed?.openrouter_api_key === "string" ? parsed.openrouter_api_key : undefined);
+    return value ? { value, source: "credentials", file } : undefined;
+}
+function nonEmpty(value) {
+    return value === undefined || value.trim() === "" ? undefined : value.trim();
+}
+//# sourceMappingURL=load.js.map

package/dist/config/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAqB,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AACjF,OAAO,EAAwB,aAAa,EAAE,MAAM,cAAc,CAAA;AAgDlE,MAAM,CAAC,MAAM,QAAQ,GAAoB;IACvC,KAAK,EAAE,gBAAgB;IACvB,QAAQ,EAAE,gBAAgB;IAC1B,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,kBAAkB;IAC7B,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACvC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpD,QAAQ,EAAE,EAAE;CACb,CAAA;AAED,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACtB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,GAAG,CAAA;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACvC,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,EAAE;IAClF,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACtF,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;AAClD,CAAC;AAQD,MAAM,UAAU,UAAU,CAAC,OAAO,GAAgB,EAAE;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAEzC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAEhC,MAAM,MAAM,GAAoB;QAC9B,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK;QAC5D,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ;QACrE,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW;QAC9E,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,SAAS;QACxE,MAAM,EAAE;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAC9E,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM;SACzE;QACD,MAAM,EAAE;YACN,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC;YACpC,OAAO,EAAE;gBACP,GAAG,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC;gBAC/C,GAAG,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC;aAChD;SACF;QACD,QAAQ,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;KAC3E,CAAA;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAClC,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,KAAK;QAClD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,QAAQ;QAC3D,QAAQ;QACR,MAAM,EAAE,GAAG,EAAE,KAAK;QAClB,YAAY,EAAE,GAAG,EAAE,MAAM;QACzB,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,EAAE;QACpB,aAAa,EAAE,OAAO,EAAE,MAAM;QAC9B,MAAM,EAAE;YACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD;KACF,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,MAAyC;IACnE,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;AAC1C,CAAC;AAMD,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,GAAG,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;YACtF,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,GAAG,IAAI,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,MAAiC,CAAA;AAC1C,CAAC;AAED,SAAS,IAAI,CACX,GAAW,EACX,IAAO,EACP,GAAG,MAAe;IAElB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,OAAO,KAAK,KAAK,IAAI;YAAE,OAAO,KAA6C,CAAA;IACjF,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,OAAe,EAAE,GAAW,EAAE,GAAG,MAAe;IAC9D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAI,KAAK,EAAE,CAAC,OAAO,CAAyC,EAAE,CAAC,GAAG,CAAC,CAAA;QAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;IAC3D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAW,EAAE,IAAY;IAC5C,MAAM,OAAO,GAAI,IAAI,EAAE,MAA8C,EAAE,OAAO,CAAA;IAC9E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpD,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,OAAQ,OAAmB,CAAC,OAAO,KAAK,SAAS,EACjD,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,GAAG,IAAI,0DAA0D,EACjE,EAAE,IAAI,EAAE,CACT,CAAA;IACH,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,OAAkB,CAAA;IAC9C,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAY,EAAE,IAAY,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAI,KAAK,EAAE,MAA8C,EAAE,OAAO,CAAA;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,GAAG,IAAI,KAAK,IAAI,kCAAkC,EAAE;YAC3F,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAY,EAAE,IAAY;IAC7C,MAAM,KAAK,GAAG,KAAK,EAAE,QAAQ,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,GAAG,IAAI,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,CAA0B,CAAA;QAC1C,MAAM,EAAE,GACN,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;YAC9B,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ;YAC1C,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;YAC5C,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAA;QAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,GAAG,IAAI,cAAc,CAAC,iEAAiE,EACvF,EAAE,IAAI,EAAE,CACT,CAAA;QACH,CAAC;QACD,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;YAChC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,IAAK,OAAO,CAAC,UAAqB,IAAI,CAAC,CAAC,EAC9E,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,GAAG,IAAI,cAAc,CAAC,mDAAmD,EACzE,EAAE,IAAI,EAAE,CACT,CAAA;QACH,CAAC;QACD,OAAO;YACL,WAAW,EAAE,OAAO,CAAC,EAAY;YACjC,SAAS,EAAE,sBAAsB;YACjC,iBAAiB,EAAE,CAAC;YACpB,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,IAAI;YAChB,8DAA8D;YAC9D,UAAU,EAAE,GAAG;YACf,GAAG,OAAO;SACK,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,GAAsB,EACtB,OAAe;IAEf,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAChD,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,GAAG,IAAI,gDAAgD,IAAI,KAAK,EAChE,EAAE,IAAI,EAAE,CACT,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,QAAQ,CACpB,OAAO,MAAM,EAAE,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CACvF,CAAA;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;AAC9E,CAAC"}

package/dist/config/session.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Which agent session a call belongs to, so the spend ledger can answer
+ * "what has this session cost" across separate `decide` invocations.
+ *
+ * `SYSTEM1_SESSION` always wins. Otherwise the id comes from the harness
+ * running the shell. Harnesses leak their variables into child harnesses (a
+ * Pi or Codex run started from Claude Code still sees
+ * `CLAUDE_CODE_SESSION_ID`), so the order below picks the innermost one:
+ *
+ * 1. `AI_AGENT=pi`: Pi overwrites `AI_AGENT`, so this is Pi even if a parent
+ *    harness's id is present.
+ * 2. `AI_AGENT=claude-code…` with no Codex id: Claude also overwrites
+ *    `AI_AGENT`, so a leaked Pi id belongs to a parent.
+ * 3. `CODEX_THREAD_ID`: Codex leaves `AI_AGENT` alone, but no other harness
+ *    sets this.
+ * 4. `PI_SESSION_ID`, then `CLAUDE_CODE_SESSION_ID`.
+ *
+ * Known limits: Claude Code started inside Codex resolves to Codex, and Codex
+ * started inside Pi resolves to Pi (Codex inherits the parent's `AI_AGENT`).
+ * The environment cannot tell these apart. Set `SYSTEM1_SESSION` to override.
+ */
+export type Harness = "claude" | "codex" | "pi";
+export interface DetectedSession {
+    /** `<harness>:<id>`, or the `SYSTEM1_SESSION` value verbatim. */
+    id: string;
+    origin: Harness | "env";
+}
+export declare function detectSession(env: NodeJS.ProcessEnv): DetectedSession | undefined;
+/** The harness running this shell, by the same rule; also known without a session id. */
+export declare function detectHarness(env: NodeJS.ProcessEnv): Harness | undefined;
+//# sourceMappingURL=session.d.ts.map

package/dist/config/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/config/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAA;AAE/C,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,OAAO,GAAG,KAAK,CAAA;CACxB;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,eAAe,GAAG,SAAS,CAKjF;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,GAAG,SAAS,CAEzE"}

package/dist/config/session.js

@@ -0,0 +1,36 @@
+export function detectSession(env) {
+    const explicit = nonEmpty(env.SYSTEM1_SESSION);
+    if (explicit)
+        return { id: explicit, origin: "env" };
+    const found = innermost(env);
+    return found?.id ? { id: `${found.harness}:${found.id}`, origin: found.harness } : undefined;
+}
+/** The harness running this shell, by the same rule; also known without a session id. */
+export function detectHarness(env) {
+    return innermost(env)?.harness;
+}
+function innermost(env) {
+    const pi = nonEmpty(env.PI_SESSION_ID);
+    const codex = nonEmpty(env.CODEX_THREAD_ID) ?? nonEmpty(env.CODEX_SESSION_ID);
+    const claude = nonEmpty(env.CLAUDE_CODE_SESSION_ID);
+    const agent = env.AI_AGENT ?? "";
+    const claudeMarked = env.CLAUDECODE === "1" || claude !== undefined;
+    if (agent === "pi")
+        return found("pi", pi);
+    if (agent.startsWith("claude-code") && claudeMarked && !codex)
+        return found("claude", claude);
+    if (codex)
+        return found("codex", codex);
+    if (pi || env.PI_CODING_AGENT === "true")
+        return found("pi", pi);
+    if (claudeMarked)
+        return found("claude", claude);
+    return undefined;
+}
+function found(harness, id) {
+    return id ? { harness, id } : { harness };
+}
+function nonEmpty(value) {
+    return value?.trim() ? value.trim() : undefined;
+}
+//# sourceMappingURL=session.js.map

package/dist/config/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/config/session.ts"],"names":[],"mappings":"AA6BA,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC9C,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9F,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,GAAsB;IACvC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAA;IAChC,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,CAAA;IAEnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,YAAY,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7F,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACvC,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAChE,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAChD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,KAAK,CAAC,OAAgB,EAAE,EAAsB;IACrD,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,28 @@
+import { type DecideMode, type Decider } from "./decide.js";
+export { DEFAULT_ENDPOINT } from "./transport/openrouter.js";
+export declare const DEFAULT_MODEL = "typesafe/jev-1.13";
+export interface ConnectionConfig {
+    endpoint: string;
+    model: string;
+    /** Never printed; only its presence is ever reported. */
+    apiKey: string | undefined;
+    /** `DECISIONS_REPLAY` forces replay even when a key is present. */
+    replay: boolean;
+}
+export declare function resolveConnection(env?: NodeJS.ProcessEnv): ConnectionConfig;
+/** Where a repo keeps its decisions state. */
+export declare function stateDir(cwd: string): string;
+export interface EnvDeciderOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+    mode?: DecideMode;
+    fetch?: typeof fetch;
+}
+/**
+ * The standard wiring from layered config: profile, a transport only when a
+ * key exists, the repo's egress consent, fixtures under `.decisions/fixtures`,
+ * and spend appended to `.decisions/usage.jsonl`.
+ */
+export declare function createDeciderFromEnv(options?: EnvDeciderOptions): Decider;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA,OAAO,EAAiB,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA;AAO1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC5D,eAAO,MAAM,aAAa,sBAAmB,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,mEAAmE;IACnE,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CAOxF;AAED,8CAA8C;AAC9C,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CA0B7E"}

package/dist/config.js

@@ -0,0 +1,64 @@
+/**
+ * Connection settings, resolved from the environment.
+ *
+ * The M1 subset. Layered config files (user, then repo) arrive with egress
+ * consent in M2, and env always wins over them. The engine never reads a
+ * `.env` file: a project's `.env` belongs to that project, not to us.
+ */
+import { join } from "node:path";
+import { createDecider } from "./decide.js";
+import { FixtureStore } from "./fixtures/store.js";
+import { allProfiles, loadConfig } from "./config/load.js";
+import { DEFAULT_MODEL_ID, resolveProfile } from "./model/profiles.js";
+import { SpendLedger } from "./run/spend.js";
+import { createOpenRouterTransport, DEFAULT_ENDPOINT } from "./transport/openrouter.js";
+export { DEFAULT_ENDPOINT } from "./transport/openrouter.js";
+export const DEFAULT_MODEL = DEFAULT_MODEL_ID;
+export function resolveConnection(env = process.env) {
+    return {
+        endpoint: nonEmpty(env.DECISIONS_ENDPOINT) ?? DEFAULT_ENDPOINT,
+        model: nonEmpty(env.DECISIONS_MODEL) ?? DEFAULT_MODEL,
+        apiKey: nonEmpty(env.OPENROUTER_API_KEY),
+        replay: /^(1|true|yes)$/i.test(env.DECISIONS_REPLAY ?? ""),
+    };
+}
+/** Where a repo keeps its decisions state. */
+export function stateDir(cwd) {
+    return join(cwd, ".decisions");
+}
+/**
+ * The standard wiring from layered config: profile, a transport only when a
+ * key exists, the repo's egress consent, fixtures under `.decisions/fixtures`,
+ * and spend appended to `.decisions/usage.jsonl`.
+ */
+export function createDeciderFromEnv(options = {}) {
+    const config = loadConfig({
+        ...(options.cwd ? { cwd: options.cwd } : {}),
+        ...(options.env ? { env: options.env } : {}),
+        ...(options.home ? { home: options.home } : {}),
+    });
+    const profile = resolveProfile(config.model, allProfiles(config));
+    const dir = stateDir(config.repoRoot);
+    return createDecider({
+        profile,
+        egressConsent: config.egress.consent.granted,
+        repoRoot: config.repoRoot,
+        ...(config.apiKey
+            ? {
+                transport: createOpenRouterTransport({
+                    endpoint: config.endpoint,
+                    apiKey: config.apiKey,
+                    ...(options.fetch ? { fetch: options.fetch } : {}),
+                }),
+            }
+            : {}),
+        fixtures: new FixtureStore(join(dir, "fixtures")),
+        ledger: new SpendLedger(join(dir, "usage.jsonl")),
+        mode: config.replay ? "replay" : (options.mode ?? "auto"),
+        ...(config.session ? { session: config.session } : {}),
+    });
+}
+function nonEmpty(value) {
+    return value === undefined || value.trim() === "" ? undefined : value.trim();
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAiC,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAW7C,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,gBAAgB;QAC9D,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,aAAa;QACrD,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;KAC3D,CAAA;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;AAChC,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAsB,EAAE;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACrC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;QAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC;gBACE,SAAS,EAAE,yBAAyB,CAAC;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnD,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACjD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;AAC9E,CAAC"}

package/dist/decide.d.ts

@@ -0,0 +1,57 @@
+import type { FixtureStore } from "./fixtures/store.js";
+import type { ModelProfile } from "./model/profiles.js";
+import type { Answers, QuestionSet, State, Usage } from "./model/types.js";
+import type { AnswerSource, SpendLedger } from "./run/spend.js";
+import type { Transport } from "./transport/openrouter.js";
+/**
+ * - `auto`: live when a transport (i.e. a key) is available, otherwise replay.
+ * - `live`: always call the model.
+ * - `record`: call the model and write the fixture.
+ * - `replay`: never touch the network; a miss is `replay-miss`.
+ */
+export type DecideMode = "auto" | "live" | "record" | "replay";
+export interface DeciderOptions {
+    profile: ModelProfile;
+    /**
+     * Whether this repo consented to sending content off the machine (decision
+     * 0009). Required, so a caller can't forget it. Replay ignores it.
+     */
+    egressConsent: boolean;
+    /** Named in the `egress-refused` message. */
+    repoRoot?: string;
+    /** Absent when no API key is configured. */
+    transport?: Transport;
+    fixtures?: FixtureStore;
+    ledger?: SpendLedger;
+    mode?: DecideMode;
+    session?: string;
+    now?: () => Date;
+}
+export interface DecideInput {
+    state: State;
+    questions: QuestionSet;
+    /** Fixture namespace: a spec name, or `adhoc`. */
+    namespace?: string;
+    signal?: AbortSignal;
+}
+export interface DecisionResult {
+    source: AnswerSource;
+    /** Requested model id. */
+    model: string;
+    /** Build that actually answered (from the response, live or recorded). */
+    servedBy: string;
+    answers: Answers;
+    /** Names of answers too flat to act on. Never rounded to the top option. */
+    undecided: string[];
+    /** Measured for live calls; zero for replays (nothing was spent). */
+    usage: Usage;
+    latencyMs: number;
+    fixtureKey: string;
+    recordedAt?: string;
+}
+export interface Decider {
+    readonly mode: Exclude<DecideMode, "auto">;
+    decide(input: DecideInput): Promise<DecisionResult>;
+}
+export declare function createDecider(options: DeciderOptions): Decider;
+//# sourceMappingURL=decide.d.ts.map

package/dist/decide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide.d.ts","sourceRoot":"","sources":["../src/decide.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAGvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,OAAO,EAAmB,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAE3F,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE9D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAA;IACrB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAA;IACtB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,WAAW,CAAA;IACtB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAA;IACpB,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,qEAAqE;IACrE,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CACpD;AAID,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CA4F9D"}