@gobing-ai/ts-decision-clef 0.0.0-stage → 0.5.20

package/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

package/NOTICE

@@ -0,0 +1,5 @@
+@gobing-ai/ts-decision-clef
+Copyright 2026 Robin Min and ts-libs contributors
+
+This package bundles no third-party code and no model weights. It drives the
+Cloudflare Workers AI REST API over the portable ts-infra APIClient seam.

package/README.md

@@ -1,3 +1,97 @@
-# Temporary Holding Version
+# @gobing-ai/ts-decision-clef
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Hosted Cloudflare Clef decision backend for the neutral decision surface
+owned by `@gobing-ai/ts-ai-runner`: answers `choice` / `score` / `noul`
+questions through Cloudflare Workers AI REST API over the portable
+`@gobing-ai/ts-infra` `APIClient` seam ([ADR-037](../../docs/00_ADR.md)).
+
+Part of the `@gobing-ai/ts-libs` monorepo and lockstep-versioned with it.
+
+- **License:** Apache-2.0 (see [LICENSE](./LICENSE)).
+- **No model weights or third-party SDKs are bundled.** It drives Cloudflare Workers AI
+  REST directly via `@gobing-ai/ts-infra`.
+
+---
+
+## Usage
+
+```ts
+import { createDecisionMaker } from '@gobing-ai/ts-ai-runner';
+import { createClefDriver } from '@gobing-ai/ts-decision-clef';
+
+const driver = createClefDriver({
+    accountId: '0123456789abcdef0123456789abcdef',
+    apiToken: 'cf_api_token_secret',
+    model: 'clef-flash', // default; or 'clef'
+});
+
+const dm = createDecisionMaker({ driver });
+
+const answers = await dm.ask({
+    state: 'Customer was billed twice for invoice INV-42.',
+    questions: {
+        sentiment: {
+            kind: 'choice',
+            prompt: 'Sentiment of the message',
+            labels: { positive: 'Praise', negative: 'Complaint' },
+        },
+        priority: {
+            kind: 'score',
+            prompt: 'Queue priority',
+            rubric: ['Routine — normal SLA', 'Critical — customer blocked'],
+        },
+        refund: { kind: 'noul', prompt: 'Refund the duplicate charge?' },
+    },
+});
+```
+
+### Options
+
+| Option | Default | Meaning |
+|--------|---------|---------|
+| `accountId` | required | Cloudflare Account ID (32-character hexadecimal string). |
+| `apiToken` | required | Cloudflare API Token (no whitespace or control characters). |
+| `model` | `'clef-flash'` | Default model selector (`'clef'` \| `'clef-flash'`). |
+| `timeoutMs` | `30000` | Request timeout in milliseconds (positive integer). |
+| `fetch` | `globalThis.fetch` | Custom fetch implementation (injected for tests). |
+
+---
+
+## Provider constraints
+
+1. **Question limits:** 1–64 questions per request.
+2. **Question IDs:** must match `/^[A-Za-z0-9_.-]{1,100}$/`.
+3. **Choice options:** 2–255 non-empty choice label keys per question.
+4. **Score levels:** 2–10 rubric levels per question.
+5. **JSON serializability:** `state` and question contents must be strict JSON values. Cycles, non-finite numbers (`NaN`, `Infinity`), `BigInt`, `undefined`, functions, symbols, sparse arrays, hidden or extra array properties, accessors, and custom object instances (e.g. `Date`) are rejected before transport with `DecisionRequestError`.
+6. **Payload bounds:** request bodies cannot exceed 13 MiB; responses exceeding 8 MiB are rejected with `DecisionBackendError`.
+7. **Instructions fallback:** when a question prompt is omitted, null, or empty whitespace, the question ID is used as the instructions field.
+
+---
+
+## Errors
+
+All failures map to the `@gobing-ai/ts-ai-runner` decision error taxonomy:
+
+| Condition | Class |
+|-----------|-------|
+| Invalid account ID, API token, timeout, or model at construction | `DecisionConfigError` |
+| Invalid question structure, ID format, limits, un-serializable state, body > 13 MiB, or HTTP 4xx | `DecisionRequestError` |
+| HTTP 401 / 403 | `DecisionAuthError` |
+| HTTP 429 (preserves `Retry-After` hint in ms) | `DecisionRateLimitError` |
+| Request timeout | `DecisionTimeoutError` |
+| Network or connection failure | `DecisionConnectionError` |
+| HTTP 5xx, redirects, malformed JSON, envelope failure, missing model, response > 8 MiB | `DecisionBackendError` |
+
+Error messages are redacted: credentials, state, and untrusted upstream text are never exposed.
+
+---
+
+## Release and bootstrap
+
+Releases are lockstep and automated via GitHub Actions OIDC Trusted Publishing.
+For initial package bootstrap on npm, refer to [docs/PACKAGE_RELEASE.md](../../docs/PACKAGE_RELEASE.md#2-publish-the-first-version-manually):
+
+```bash
+bun scripts/builder.ts publish-packages --bootstrap @gobing-ai/ts-decision-clef
+```

package/dist/driver.d.ts

@@ -0,0 +1,22 @@
+import { type DecisionDriver } from '@gobing-ai/ts-ai-runner';
+/** The two hosted Workers AI Clef selectors this driver can route to. */
+export type ClefModel = 'clef' | 'clef-flash';
+/** Construction options for {@link createClefDriver}. Credentials are always explicit. */
+export interface ClefDriverOptions {
+    /** Cloudflare account ID — 32 hexadecimal characters. */
+    accountId: string;
+    /** Cloudflare API token — non-blank, with no whitespace or control characters. */
+    apiToken: string;
+    /** Default model selector; per-call `ask({ model })` wins. Defaults to `clef-flash`. */
+    model?: ClefModel;
+    /** Request timeout in milliseconds; a positive integer. Defaults to `30000`. */
+    timeoutMs?: number;
+    /** Injected fetch, forwarded to the `APIClient` (tests use this instead of a socket). */
+    fetch?: typeof globalThis.fetch;
+}
+/**
+ * Build the hosted Clef driver: validates the configuration and constructs
+ * exactly one `APIClient`. No network call and no environment read happen here.
+ */
+export declare function createClefDriver(options: ClefDriverOptions): DecisionDriver;
+//# sourceMappingURL=driver.d.ts.map

package/dist/driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../src/driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAMH,KAAK,cAAc,EAQtB,MAAM,yBAAyB,CAAC;AAGjC,yEAAyE;AACzE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;AAE9C,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yFAAyF;IACzF,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACnC;AAoJD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CA2Q3E"}

package/dist/driver.js

@@ -0,0 +1,346 @@
+import { DecisionAuthError, DecisionBackendError, DecisionConfigError, DecisionConnectionError, DecisionRateLimitError, DecisionRequestError, DecisionTimeoutError, validateAnswers, validateQuestions, } from '@gobing-ai/ts-ai-runner';
+import { APIClient, APIError } from '@gobing-ai/ts-infra';
+const ACCOUNT_ID_PATTERN = /^[0-9a-fA-F]{32}$/;
+const QUESTION_ID_PATTERN = /^[A-Za-z0-9_.-]{1,100}$/;
+const MAX_REQUEST_BODY_BYTES = 13 * 1024 * 1024;
+const MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/** Blank, whitespace and C0/DEL control characters cannot survive an HTTP header round-trip. */
+function hasControlOrWhitespace(value) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code <= 0x20 || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+function assertJsonSerializable(value, context, ancestors = new Set()) {
+    if (value === null)
+        return;
+    if (typeof value === 'string' || typeof value === 'boolean')
+        return;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value)) {
+            throw new DecisionRequestError(`Non-finite number in ${context}`, undefined, undefined);
+        }
+        return;
+    }
+    if (typeof value === 'bigint' || typeof value === 'function' || typeof value === 'symbol' || value === undefined) {
+        throw new DecisionRequestError(`Unserializable ${typeof value} in ${context}`, undefined, undefined);
+    }
+    if (typeof value === 'object') {
+        if (ancestors.has(value)) {
+            throw new DecisionRequestError(`Circular reference detected in ${context}`, undefined, undefined);
+        }
+        ancestors.add(value);
+        try {
+            if (Object.values(Object.getOwnPropertyDescriptors(value)).some((property) => !Object.hasOwn(property, 'value'))) {
+                throw new DecisionRequestError(`Accessor property in ${context}`, undefined, undefined);
+            }
+            if (Array.isArray(value)) {
+                // Extra own properties and holes are both dropped or coerced by JSON.stringify;
+                // only a dense, index-only array survives round-trip intact.
+                if (Object.keys(value).length !== value.length ||
+                    Object.getOwnPropertyNames(value).length !== value.length + 1 ||
+                    Object.getOwnPropertySymbols(value).length > 0) {
+                    throw new DecisionRequestError(`Sparse or decorated array in ${context}`, undefined, undefined);
+                }
+                for (let i = 0; i < value.length; i++) {
+                    assertJsonSerializable(value[i], context, ancestors);
+                }
+            }
+            else {
+                const proto = Object.getPrototypeOf(value);
+                if (proto !== null && proto !== Object.prototype) {
+                    throw new DecisionRequestError(`Unsupported object instance in ${context}`, undefined, undefined);
+                }
+                // Symbol keys and non-enumerable own properties are invisible to Object.keys and are
+                // dropped by JSON.stringify, so they would otherwise be a silent loss.
+                const ownNames = Object.getOwnPropertyNames(value);
+                if (Object.getOwnPropertySymbols(value).length > 0 || ownNames.length !== Object.keys(value).length) {
+                    throw new DecisionRequestError(`Unserializable own property in ${context}`, undefined, undefined);
+                }
+                for (const key of ownNames) {
+                    assertJsonSerializable(value[key], context, ancestors);
+                }
+            }
+        }
+        finally {
+            ancestors.delete(value);
+        }
+        return;
+    }
+    throw new DecisionRequestError(`Unserializable value in ${context}`, undefined, undefined);
+}
+function resolveInstructions(prompt, questionId) {
+    if (prompt === undefined || prompt === null) {
+        return questionId;
+    }
+    if (typeof prompt === 'string' && prompt.trim().length === 0) {
+        return questionId;
+    }
+    return prompt;
+}
+function mapQuestion(name, q) {
+    const instructions = resolveInstructions(q.prompt, name);
+    switch (q.kind) {
+        case 'choice':
+            return {
+                type: 'choice',
+                instructions,
+                criteria: Object.fromEntries(Object.entries(q.labels)),
+            };
+        case 'score':
+            return {
+                type: 'score',
+                instructions,
+                criteria: q.rubric,
+            };
+        case 'noul': {
+            const mapped = {
+                type: 'noul',
+                instructions,
+            };
+            if (q.yes !== undefined || q.no !== undefined) {
+                const criteria = {};
+                if (q.yes !== undefined)
+                    criteria.true = q.yes;
+                if (q.no !== undefined)
+                    criteria.false = q.no;
+                mapped.criteria = criteria;
+            }
+            return mapped;
+        }
+    }
+}
+function getHeader(headers, name) {
+    const target = name.toLowerCase();
+    for (const [key, value] of Object.entries(headers)) {
+        if (key.toLowerCase() === target) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function parseRetryAfter(header) {
+    if (!header)
+        return undefined;
+    const trimmed = header.trim();
+    if (/^\d+$/.test(trimmed)) {
+        const milliseconds = Number(trimmed) * 1000;
+        return Number.isFinite(milliseconds) ? milliseconds : undefined;
+    }
+    // HTTP dates start with a weekday; Date.parse also accepts invalid numeric hints as dates.
+    if (!/^[A-Za-z]+(?:,| )/.test(trimmed))
+        return undefined;
+    const timestamp = Date.parse(trimmed);
+    if (!Number.isNaN(timestamp)) {
+        return Math.max(0, timestamp - Date.now());
+    }
+    return undefined;
+}
+/**
+ * Build the hosted Clef driver: validates the configuration and constructs
+ * exactly one `APIClient`. No network call and no environment read happen here.
+ */
+export function createClefDriver(options) {
+    if (!options || typeof options !== 'object') {
+        throw new DecisionConfigError('Options must be provided', 'options');
+    }
+    const { accountId, apiToken, model: configuredModel = 'clef-flash', timeoutMs = 30_000, fetch: customFetch, } = options;
+    if (typeof accountId !== 'string' || !ACCOUNT_ID_PATTERN.test(accountId)) {
+        throw new DecisionConfigError('Invalid accountId: must be a 32-character hexadecimal string', 'accountId');
+    }
+    if (typeof apiToken !== 'string' || apiToken.length === 0 || hasControlOrWhitespace(apiToken)) {
+        throw new DecisionConfigError('Invalid apiToken: cannot be blank or contain whitespace or control characters', 'apiToken');
+    }
+    if (typeof timeoutMs !== 'number' || !Number.isInteger(timeoutMs) || timeoutMs <= 0) {
+        throw new DecisionConfigError('Invalid timeoutMs: must be a positive integer', 'timeoutMs');
+    }
+    if (configuredModel !== 'clef' && configuredModel !== 'clef-flash') {
+        throw new DecisionConfigError('Invalid model: must be clef or clef-flash', 'model');
+    }
+    const client = new APIClient({
+        baseUrl: 'https://api.cloudflare.com/client/v4',
+        timeout: timeoutMs,
+        fetch: customFetch,
+    });
+    return {
+        name: 'clef',
+        async ask({ state, questions, model }) {
+            try {
+                validateQuestions(questions);
+            }
+            catch {
+                throw new DecisionRequestError('Invalid decision questions', undefined, undefined);
+            }
+            if (model !== undefined && model !== 'clef' && model !== 'clef-flash') {
+                throw new DecisionRequestError('Invalid model selector: must be clef or clef-flash', undefined, undefined);
+            }
+            const resolvedModel = model ?? configuredModel;
+            const questionEntries = Object.entries(questions);
+            if (questionEntries.length < 1 || questionEntries.length > 64) {
+                throw new DecisionRequestError(`Question count must be between 1 and 64, got ${questionEntries.length}`, undefined, undefined);
+            }
+            for (const [name, q] of questionEntries) {
+                if (!QUESTION_ID_PATTERN.test(name)) {
+                    throw new DecisionRequestError('Question ID does not match pattern ^[A-Za-z0-9_.-]{1,100}$', undefined, undefined);
+                }
+                if (q.kind === 'choice') {
+                    const labelKeys = Object.keys(q.labels);
+                    if (labelKeys.length < 2 || labelKeys.length > 255) {
+                        throw new DecisionRequestError(`Choice question must have between 2 and 255 choice IDs, got ${labelKeys.length}`, undefined, undefined);
+                    }
+                    for (const labelId of labelKeys) {
+                        if (labelId.length === 0) {
+                            throw new DecisionRequestError('Choice question contains empty choice ID', undefined, undefined);
+                        }
+                    }
+                }
+                else if (q.kind === 'score') {
+                    const levels = q.rubric.length;
+                    if (levels < 2 || levels > 10) {
+                        throw new DecisionRequestError(`Score question must have between 2 and 10 score levels, got ${levels}`, undefined, undefined);
+                    }
+                }
+            }
+            assertJsonSerializable(state, 'state');
+            const mappedQuestions = Object.fromEntries(questionEntries.map(([name, q]) => [name, mapQuestion(name, q)]));
+            const requestBody = {
+                model: resolvedModel,
+                state: state ?? null,
+                questions: mappedQuestions,
+            };
+            assertJsonSerializable(requestBody, 'request');
+            const bodyString = JSON.stringify(requestBody);
+            const bodyBytes = new TextEncoder().encode(bodyString).byteLength;
+            if (bodyBytes > MAX_REQUEST_BODY_BYTES) {
+                throw new DecisionRequestError('Request body exceeds maximum size of 13 MiB', undefined, undefined);
+            }
+            const path = `/accounts/${accountId}/ai/run/@cf/cloudflare/${resolvedModel}`;
+            let response;
+            try {
+                response = await client.rawRequest('POST', path, bodyString, {
+                    headers: {
+                        Authorization: `Bearer ${apiToken}`,
+                        'Content-Type': 'application/json',
+                    },
+                    redirect: 'manual',
+                    maxResponseBytes: MAX_RESPONSE_BYTES,
+                });
+            }
+            catch (error) {
+                // The design forbids leaking untrusted transport error text/cause through public
+                // errors, so these stay generic: only the message and the timeoutMs field travel.
+                if (error instanceof APIError && error.status === 0) {
+                    throw new DecisionTimeoutError('Request timed out', timeoutMs);
+                }
+                throw new DecisionConnectionError('Failed to connect to backend');
+            }
+            if (response.truncated) {
+                throw new DecisionBackendError('Response exceeded maximum allowed size of 8 MiB', response.status);
+            }
+            if (response.status >= 300 && response.status < 400) {
+                throw new DecisionBackendError(`HTTP ${response.status} redirect received`, response.status);
+            }
+            if (response.status === 401 || response.status === 403) {
+                throw new DecisionAuthError(`HTTP ${response.status} authentication failure`, response.status);
+            }
+            if (response.status === 429) {
+                const retryAfterHeader = getHeader(response.headers, 'retry-after');
+                const retryAfterMs = parseRetryAfter(retryAfterHeader);
+                throw new DecisionRateLimitError('HTTP 429 rate limit exceeded', response.status, retryAfterMs);
+            }
+            if (response.status >= 400 && response.status < 500) {
+                throw new DecisionRequestError(`HTTP ${response.status} request error`, response.status, undefined);
+            }
+            if (response.status >= 500 && response.status < 600) {
+                throw new DecisionBackendError(`HTTP ${response.status} backend error`, response.status);
+            }
+            if (response.status < 200 || response.status >= 300) {
+                throw new DecisionBackendError(`HTTP ${response.status} unexpected status`, response.status);
+            }
+            let json;
+            try {
+                json = JSON.parse(response.body);
+            }
+            catch {
+                throw new DecisionBackendError('Malformed JSON response from backend', response.status);
+            }
+            if (!isRecord(json) || json.success !== true) {
+                throw new DecisionBackendError('Backend returned failure envelope', response.status);
+            }
+            if (!isRecord(json.result)) {
+                throw new DecisionBackendError('Missing or invalid result in response', response.status);
+            }
+            const result = json.result;
+            if (typeof result.model !== 'string' || result.model.trim().length === 0) {
+                throw new DecisionBackendError('Invalid or missing model in response', response.status);
+            }
+            if (!isRecord(result.answers)) {
+                throw new DecisionBackendError('Invalid or missing answers in response', response.status);
+            }
+            const answers = Object.create(null);
+            for (const [name, rawAnswer] of Object.entries(result.answers)) {
+                if (!isRecord(rawAnswer)) {
+                    throw new DecisionBackendError('Invalid answer in response', response.status);
+                }
+                switch (rawAnswer.type) {
+                    case 'choice': {
+                        if (typeof rawAnswer.choice !== 'string' ||
+                            typeof rawAnswer.confidence !== 'number' ||
+                            !isRecord(rawAnswer.probabilities)) {
+                            throw new DecisionBackendError('Malformed choice answer in response', response.status);
+                        }
+                        answers[name] = {
+                            kind: 'choice',
+                            label: rawAnswer.choice,
+                            confidence: rawAnswer.confidence,
+                            // Cast: shared validateAnswers re-checks every entry's bounds and mass; this
+                            // only reshapes the untyped wire record into the neutral answer shape.
+                            probabilities: Object.fromEntries(Object.entries(rawAnswer.probabilities)),
+                        };
+                        break;
+                    }
+                    case 'score': {
+                        if (typeof rawAnswer.score !== 'number' ||
+                            typeof rawAnswer.confidence !== 'number' ||
+                            !isRecord(rawAnswer.legend) ||
+                            !isRecord(rawAnswer.probabilities)) {
+                            throw new DecisionBackendError('Malformed score answer in response', response.status);
+                        }
+                        answers[name] = {
+                            kind: 'score',
+                            score: rawAnswer.score,
+                            confidence: rawAnswer.confidence,
+                            legend: Object.fromEntries(Object.entries(rawAnswer.legend)),
+                            probabilities: Object.fromEntries(Object.entries(rawAnswer.probabilities)),
+                        };
+                        break;
+                    }
+                    case 'noul': {
+                        if (typeof rawAnswer.noul !== 'number') {
+                            throw new DecisionBackendError('Malformed noul answer in response', response.status);
+                        }
+                        answers[name] = {
+                            kind: 'noul',
+                            probability: rawAnswer.noul,
+                        };
+                        break;
+                    }
+                    default:
+                        throw new DecisionBackendError('Unknown answer type in response', response.status);
+                }
+            }
+            try {
+                validateAnswers(questions, answers);
+            }
+            catch {
+                throw new DecisionBackendError('Invalid decision answers in response', response.status);
+            }
+            return answers;
+        },
+    };
+}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export type { ClefDriverOptions, ClefModel } from './driver';
+export { createClefDriver } from './driver';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1 @@
+export { createClefDriver } from './driver.js';

package/package.json

@@ -1,6 +1,64 @@
 {
-  "name": "@gobing-ai/ts-decision-clef",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+    "name": "@gobing-ai/ts-decision-clef",
+    "version": "0.5.20",
+    "description": "@gobing-ai/ts-decision-clef — Hosted Clef decision backend driving Cloudflare Workers AI over the portable ts-infra APIClient seam.",
+    "keywords": [
+        "typescript",
+        "ai",
+        "decision",
+        "clef",
+        "cloudflare",
+        "workers-ai",
+        "hosted"
+    ],
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/gobing-ai/ts-libs.git",
+        "directory": "packages/decision-clef"
+    },
+    "author": "Robin Min <minlongbing@gmail.com>",
+    "contributors": [
+        "Robin Min <minlongbing@gmail.com>"
+    ],
+    "type": "module",
+    "private": false,
+    "sideEffects": false,
+    "license": "Apache-2.0",
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "import": "./dist/index.js"
+        }
+    },
+    "files": [
+        "dist",
+        "src",
+        "README.md",
+        "LICENSE",
+        "NOTICE"
+    ],
+    "scripts": {
+        "build": "tsc -p tsconfig.build.json && bun ../../scripts/builder.ts fix-dist-esm-extensions dist",
+        "test": "NODE_ENV=test bun test --coverage --coverage-dir=.coverage --reporter=dots",
+        "test:full": "NODE_ENV=test bun test --update-snapshots --coverage --coverage-dir=.coverage",
+        "typecheck": "tsc --noEmit",
+        "lint": "biome check . && bun run typecheck",
+        "format": "biome check . --write",
+        "check": "bun run lint && bun run test",
+        "prepublishOnly": "bun ../../scripts/builder.ts check-publish-manifest . && bun run build",
+        "release": "echo 'Manual publish is disabled. Releases go through GitHub Actions via Trusted Publishing — push a tag: git tag @gobing-ai/ts-decision-clef-v<version> && git push --tags' && exit 1"
+    },
+    "dependencies": {
+        "@gobing-ai/ts-ai-runner": "^0.5.20",
+        "@gobing-ai/ts-infra": "^0.5.20"
+    },
+    "devDependencies": {
+        "@gobing-ai/ts-ai-decision": "^0.5.20",
+        "@types/bun": "1.3.14"
+    },
+    "publishConfig": {
+        "access": "public"
+    }
+}

package/src/driver.ts

@@ -0,0 +1,452 @@
+import {
+    type Answer,
+    DecisionAuthError,
+    DecisionBackendError,
+    DecisionConfigError,
+    DecisionConnectionError,
+    type DecisionDriver,
+    DecisionRateLimitError,
+    DecisionRequestError,
+    DecisionTimeoutError,
+    type Desc,
+    type Question,
+    validateAnswers,
+    validateQuestions,
+} from '@gobing-ai/ts-ai-runner';
+import { APIClient, APIError, type RawHttpResponse } from '@gobing-ai/ts-infra';
+
+/** The two hosted Workers AI Clef selectors this driver can route to. */
+export type ClefModel = 'clef' | 'clef-flash';
+
+/** Construction options for {@link createClefDriver}. Credentials are always explicit. */
+export interface ClefDriverOptions {
+    /** Cloudflare account ID — 32 hexadecimal characters. */
+    accountId: string;
+    /** Cloudflare API token — non-blank, with no whitespace or control characters. */
+    apiToken: string;
+    /** Default model selector; per-call `ask({ model })` wins. Defaults to `clef-flash`. */
+    model?: ClefModel;
+    /** Request timeout in milliseconds; a positive integer. Defaults to `30000`. */
+    timeoutMs?: number;
+    /** Injected fetch, forwarded to the `APIClient` (tests use this instead of a socket). */
+    fetch?: typeof globalThis.fetch;
+}
+
+const ACCOUNT_ID_PATTERN = /^[0-9a-fA-F]{32}$/;
+const QUESTION_ID_PATTERN = /^[A-Za-z0-9_.-]{1,100}$/;
+const MAX_REQUEST_BODY_BYTES = 13 * 1024 * 1024;
+const MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+/** Blank, whitespace and C0/DEL control characters cannot survive an HTTP header round-trip. */
+function hasControlOrWhitespace(value: string): boolean {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code <= 0x20 || code === 0x7f) return true;
+    }
+    return false;
+}
+
+function assertJsonSerializable(value: unknown, context: string, ancestors = new Set<unknown>()): void {
+    if (value === null) return;
+    if (typeof value === 'string' || typeof value === 'boolean') return;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value)) {
+            throw new DecisionRequestError(`Non-finite number in ${context}`, undefined, undefined);
+        }
+        return;
+    }
+    if (typeof value === 'bigint' || typeof value === 'function' || typeof value === 'symbol' || value === undefined) {
+        throw new DecisionRequestError(`Unserializable ${typeof value} in ${context}`, undefined, undefined);
+    }
+    if (typeof value === 'object') {
+        if (ancestors.has(value)) {
+            throw new DecisionRequestError(`Circular reference detected in ${context}`, undefined, undefined);
+        }
+        ancestors.add(value);
+        try {
+            if (
+                Object.values(Object.getOwnPropertyDescriptors(value)).some(
+                    (property) => !Object.hasOwn(property, 'value'),
+                )
+            ) {
+                throw new DecisionRequestError(`Accessor property in ${context}`, undefined, undefined);
+            }
+            if (Array.isArray(value)) {
+                // Extra own properties and holes are both dropped or coerced by JSON.stringify;
+                // only a dense, index-only array survives round-trip intact.
+                if (
+                    Object.keys(value).length !== value.length ||
+                    Object.getOwnPropertyNames(value).length !== value.length + 1 ||
+                    Object.getOwnPropertySymbols(value).length > 0
+                ) {
+                    throw new DecisionRequestError(`Sparse or decorated array in ${context}`, undefined, undefined);
+                }
+                for (let i = 0; i < value.length; i++) {
+                    assertJsonSerializable(value[i], context, ancestors);
+                }
+            } else {
+                const proto = Object.getPrototypeOf(value);
+                if (proto !== null && proto !== Object.prototype) {
+                    throw new DecisionRequestError(`Unsupported object instance in ${context}`, undefined, undefined);
+                }
+                // Symbol keys and non-enumerable own properties are invisible to Object.keys and are
+                // dropped by JSON.stringify, so they would otherwise be a silent loss.
+                const ownNames = Object.getOwnPropertyNames(value);
+                if (Object.getOwnPropertySymbols(value).length > 0 || ownNames.length !== Object.keys(value).length) {
+                    throw new DecisionRequestError(`Unserializable own property in ${context}`, undefined, undefined);
+                }
+                for (const key of ownNames) {
+                    assertJsonSerializable((value as Record<string, unknown>)[key], context, ancestors);
+                }
+            }
+        } finally {
+            ancestors.delete(value);
+        }
+        return;
+    }
+    throw new DecisionRequestError(`Unserializable value in ${context}`, undefined, undefined);
+}
+
+function resolveInstructions(prompt: Desc | undefined, questionId: string): unknown {
+    if (prompt === undefined || prompt === null) {
+        return questionId;
+    }
+    if (typeof prompt === 'string' && prompt.trim().length === 0) {
+        return questionId;
+    }
+    return prompt;
+}
+
+function mapQuestion(name: string, q: Question): Record<string, unknown> {
+    const instructions = resolveInstructions(q.prompt, name);
+    switch (q.kind) {
+        case 'choice':
+            return {
+                type: 'choice',
+                instructions,
+                criteria: Object.fromEntries(Object.entries(q.labels)),
+            };
+        case 'score':
+            return {
+                type: 'score',
+                instructions,
+                criteria: q.rubric,
+            };
+        case 'noul': {
+            const mapped: Record<string, unknown> = {
+                type: 'noul',
+                instructions,
+            };
+            if (q.yes !== undefined || q.no !== undefined) {
+                const criteria: Record<string, unknown> = {};
+                if (q.yes !== undefined) criteria.true = q.yes;
+                if (q.no !== undefined) criteria.false = q.no;
+                mapped.criteria = criteria;
+            }
+            return mapped;
+        }
+    }
+}
+
+function getHeader(headers: Record<string, string>, name: string): string | undefined {
+    const target = name.toLowerCase();
+    for (const [key, value] of Object.entries(headers)) {
+        if (key.toLowerCase() === target) {
+            return value;
+        }
+    }
+    return undefined;
+}
+
+function parseRetryAfter(header: string | undefined): number | undefined {
+    if (!header) return undefined;
+    const trimmed = header.trim();
+    if (/^\d+$/.test(trimmed)) {
+        const milliseconds = Number(trimmed) * 1000;
+        return Number.isFinite(milliseconds) ? milliseconds : undefined;
+    }
+    // HTTP dates start with a weekday; Date.parse also accepts invalid numeric hints as dates.
+    if (!/^[A-Za-z]+(?:,| )/.test(trimmed)) return undefined;
+    const timestamp = Date.parse(trimmed);
+    if (!Number.isNaN(timestamp)) {
+        return Math.max(0, timestamp - Date.now());
+    }
+    return undefined;
+}
+
+/**
+ * Build the hosted Clef driver: validates the configuration and constructs
+ * exactly one `APIClient`. No network call and no environment read happen here.
+ */
+export function createClefDriver(options: ClefDriverOptions): DecisionDriver {
+    if (!options || typeof options !== 'object') {
+        throw new DecisionConfigError('Options must be provided', 'options');
+    }
+    const {
+        accountId,
+        apiToken,
+        model: configuredModel = 'clef-flash',
+        timeoutMs = 30_000,
+        fetch: customFetch,
+    } = options;
+
+    if (typeof accountId !== 'string' || !ACCOUNT_ID_PATTERN.test(accountId)) {
+        throw new DecisionConfigError('Invalid accountId: must be a 32-character hexadecimal string', 'accountId');
+    }
+
+    if (typeof apiToken !== 'string' || apiToken.length === 0 || hasControlOrWhitespace(apiToken)) {
+        throw new DecisionConfigError(
+            'Invalid apiToken: cannot be blank or contain whitespace or control characters',
+            'apiToken',
+        );
+    }
+
+    if (typeof timeoutMs !== 'number' || !Number.isInteger(timeoutMs) || timeoutMs <= 0) {
+        throw new DecisionConfigError('Invalid timeoutMs: must be a positive integer', 'timeoutMs');
+    }
+
+    if (configuredModel !== 'clef' && configuredModel !== 'clef-flash') {
+        throw new DecisionConfigError('Invalid model: must be clef or clef-flash', 'model');
+    }
+
+    const client = new APIClient({
+        baseUrl: 'https://api.cloudflare.com/client/v4',
+        timeout: timeoutMs,
+        fetch: customFetch,
+    });
+
+    return {
+        name: 'clef',
+        async ask({ state, questions, model }) {
+            try {
+                validateQuestions(questions);
+            } catch {
+                throw new DecisionRequestError('Invalid decision questions', undefined, undefined);
+            }
+
+            if (model !== undefined && model !== 'clef' && model !== 'clef-flash') {
+                throw new DecisionRequestError(
+                    'Invalid model selector: must be clef or clef-flash',
+                    undefined,
+                    undefined,
+                );
+            }
+            const resolvedModel: ClefModel = model ?? configuredModel;
+
+            const questionEntries = Object.entries(questions);
+            if (questionEntries.length < 1 || questionEntries.length > 64) {
+                throw new DecisionRequestError(
+                    `Question count must be between 1 and 64, got ${questionEntries.length}`,
+                    undefined,
+                    undefined,
+                );
+            }
+
+            for (const [name, q] of questionEntries) {
+                if (!QUESTION_ID_PATTERN.test(name)) {
+                    throw new DecisionRequestError(
+                        'Question ID does not match pattern ^[A-Za-z0-9_.-]{1,100}$',
+                        undefined,
+                        undefined,
+                    );
+                }
+                if (q.kind === 'choice') {
+                    const labelKeys = Object.keys(q.labels);
+                    if (labelKeys.length < 2 || labelKeys.length > 255) {
+                        throw new DecisionRequestError(
+                            `Choice question must have between 2 and 255 choice IDs, got ${labelKeys.length}`,
+                            undefined,
+                            undefined,
+                        );
+                    }
+                    for (const labelId of labelKeys) {
+                        if (labelId.length === 0) {
+                            throw new DecisionRequestError(
+                                'Choice question contains empty choice ID',
+                                undefined,
+                                undefined,
+                            );
+                        }
+                    }
+                } else if (q.kind === 'score') {
+                    const levels = q.rubric.length;
+                    if (levels < 2 || levels > 10) {
+                        throw new DecisionRequestError(
+                            `Score question must have between 2 and 10 score levels, got ${levels}`,
+                            undefined,
+                            undefined,
+                        );
+                    }
+                }
+            }
+
+            assertJsonSerializable(state, 'state');
+
+            const mappedQuestions = Object.fromEntries(
+                questionEntries.map(([name, q]) => [name, mapQuestion(name, q)]),
+            );
+
+            const requestBody = {
+                model: resolvedModel,
+                state: state ?? null,
+                questions: mappedQuestions,
+            };
+
+            assertJsonSerializable(requestBody, 'request');
+
+            const bodyString = JSON.stringify(requestBody);
+            const bodyBytes = new TextEncoder().encode(bodyString).byteLength;
+            if (bodyBytes > MAX_REQUEST_BODY_BYTES) {
+                throw new DecisionRequestError('Request body exceeds maximum size of 13 MiB', undefined, undefined);
+            }
+
+            const path = `/accounts/${accountId}/ai/run/@cf/cloudflare/${resolvedModel}`;
+            let response: RawHttpResponse;
+            try {
+                response = await client.rawRequest('POST', path, bodyString, {
+                    headers: {
+                        Authorization: `Bearer ${apiToken}`,
+                        'Content-Type': 'application/json',
+                    },
+                    redirect: 'manual',
+                    maxResponseBytes: MAX_RESPONSE_BYTES,
+                });
+            } catch (error) {
+                // The design forbids leaking untrusted transport error text/cause through public
+                // errors, so these stay generic: only the message and the timeoutMs field travel.
+                if (error instanceof APIError && error.status === 0) {
+                    throw new DecisionTimeoutError('Request timed out', timeoutMs);
+                }
+                throw new DecisionConnectionError('Failed to connect to backend');
+            }
+
+            if (response.truncated) {
+                throw new DecisionBackendError('Response exceeded maximum allowed size of 8 MiB', response.status);
+            }
+
+            if (response.status >= 300 && response.status < 400) {
+                throw new DecisionBackendError(`HTTP ${response.status} redirect received`, response.status);
+            }
+
+            if (response.status === 401 || response.status === 403) {
+                throw new DecisionAuthError(`HTTP ${response.status} authentication failure`, response.status);
+            }
+
+            if (response.status === 429) {
+                const retryAfterHeader = getHeader(response.headers, 'retry-after');
+                const retryAfterMs = parseRetryAfter(retryAfterHeader);
+                throw new DecisionRateLimitError('HTTP 429 rate limit exceeded', response.status, retryAfterMs);
+            }
+
+            if (response.status >= 400 && response.status < 500) {
+                throw new DecisionRequestError(`HTTP ${response.status} request error`, response.status, undefined);
+            }
+
+            if (response.status >= 500 && response.status < 600) {
+                throw new DecisionBackendError(`HTTP ${response.status} backend error`, response.status);
+            }
+
+            if (response.status < 200 || response.status >= 300) {
+                throw new DecisionBackendError(`HTTP ${response.status} unexpected status`, response.status);
+            }
+
+            let json: unknown;
+            try {
+                json = JSON.parse(response.body);
+            } catch {
+                throw new DecisionBackendError('Malformed JSON response from backend', response.status);
+            }
+
+            if (!isRecord(json) || json.success !== true) {
+                throw new DecisionBackendError('Backend returned failure envelope', response.status);
+            }
+
+            if (!isRecord(json.result)) {
+                throw new DecisionBackendError('Missing or invalid result in response', response.status);
+            }
+
+            const result = json.result;
+            if (typeof result.model !== 'string' || result.model.trim().length === 0) {
+                throw new DecisionBackendError('Invalid or missing model in response', response.status);
+            }
+
+            if (!isRecord(result.answers)) {
+                throw new DecisionBackendError('Invalid or missing answers in response', response.status);
+            }
+
+            const answers: Record<string, Answer> = Object.create(null);
+            for (const [name, rawAnswer] of Object.entries(result.answers)) {
+                if (!isRecord(rawAnswer)) {
+                    throw new DecisionBackendError('Invalid answer in response', response.status);
+                }
+                switch (rawAnswer.type) {
+                    case 'choice': {
+                        if (
+                            typeof rawAnswer.choice !== 'string' ||
+                            typeof rawAnswer.confidence !== 'number' ||
+                            !isRecord(rawAnswer.probabilities)
+                        ) {
+                            throw new DecisionBackendError('Malformed choice answer in response', response.status);
+                        }
+                        answers[name] = {
+                            kind: 'choice',
+                            label: rawAnswer.choice,
+                            confidence: rawAnswer.confidence,
+                            // Cast: shared validateAnswers re-checks every entry's bounds and mass; this
+                            // only reshapes the untyped wire record into the neutral answer shape.
+                            probabilities: Object.fromEntries(Object.entries(rawAnswer.probabilities)) as Record<
+                                string,
+                                number
+                            >,
+                        };
+                        break;
+                    }
+                    case 'score': {
+                        if (
+                            typeof rawAnswer.score !== 'number' ||
+                            typeof rawAnswer.confidence !== 'number' ||
+                            !isRecord(rawAnswer.legend) ||
+                            !isRecord(rawAnswer.probabilities)
+                        ) {
+                            throw new DecisionBackendError('Malformed score answer in response', response.status);
+                        }
+                        answers[name] = {
+                            kind: 'score',
+                            score: rawAnswer.score,
+                            confidence: rawAnswer.confidence,
+                            legend: Object.fromEntries(Object.entries(rawAnswer.legend)) as Record<number, Desc>,
+                            probabilities: Object.fromEntries(Object.entries(rawAnswer.probabilities)) as Record<
+                                number,
+                                number
+                            >,
+                        };
+                        break;
+                    }
+                    case 'noul': {
+                        if (typeof rawAnswer.noul !== 'number') {
+                            throw new DecisionBackendError('Malformed noul answer in response', response.status);
+                        }
+                        answers[name] = {
+                            kind: 'noul',
+                            probability: rawAnswer.noul,
+                        };
+                        break;
+                    }
+                    default:
+                        throw new DecisionBackendError('Unknown answer type in response', response.status);
+                }
+            }
+
+            try {
+                validateAnswers(questions, answers);
+            } catch {
+                throw new DecisionBackendError('Invalid decision answers in response', response.status);
+            }
+            return answers;
+        },
+    };
+}

package/src/index.ts

@@ -0,0 +1,2 @@
+export type { ClefDriverOptions, ClefModel } from './driver';
+export { createClefDriver } from './driver';