@juspay/neurolink 12.55.2 → 12.56.0

package/dist/cli/commands/setup.d.ts

@@ -13,9 +13,9 @@ import type { ProviderConfigOptions, SetupArgs } from "../../types/index.js";
  * perplexity, sambanova, together-ai, xai — mistral is the 9th catalog
  * provider but keeps its own handleMistralSetup() flow above, so it's
  * excluded here), spread directly from the catalog JSON via
- * buildCatalogConfigOptions(); decide-kind catalog entries (laya) are spread
- * the same way from getDecideCatalogEntries(). The hand rows listed first
- * reuse the existing createXConfig() factories in providerConfig.ts; the
+ * buildCatalogConfigOptions(); decide-kind catalog entries (laya, xor) are
+ * spread the same way from getDecideCatalogEntries(). The hand rows listed
+ * first reuse the existing createXConfig() factories in providerConfig.ts; the
  * remaining 5 (ollama, litellm, sagemaker, lm-studio, llamacpp) don't have a
  * factory and are defined inline using their real env var names. lm-studio
  * and llamacpp previously

package/dist/cli/commands/setup.js

@@ -21,7 +21,7 @@ import { handleHuggingFaceSetup } from "./setup-huggingface.js";
 import { handleMistralSetup } from "./setup-mistral.js";
 import { OpenRouterModels, } from "../../constants/enums.js";
 import { PROVIDER_DESCRIPTORS_BY_NAME } from "../../factories/providerDescriptors.js";
-import { createCohereConfig, createDeepSeekConfig, createIdeogramConfig, createJinaConfig, createNvidiaNimConfig, createOpenAICompatibleConfig, createRecraftConfig, createReplicateConfig, createStabilityConfig, createVoyageConfig, createTypeSafeConfig, createXorConfig, createPerplexityDeciderConfig, createCloudflareClefConfig, satisfiesFallbacks, } from "../../utils/providerConfig.js";
+import { createCohereConfig, createDeepSeekConfig, createIdeogramConfig, createJinaConfig, createNvidiaNimConfig, createOpenAICompatibleConfig, createRecraftConfig, createReplicateConfig, createStabilityConfig, createVoyageConfig, createTypeSafeConfig, createPerplexityDeciderConfig, createCloudflareClefConfig, satisfiesFallbacks, } from "../../utils/providerConfig.js";
 import { getCatalogJsonEntries, getDecideCatalogEntries, buildCatalogConfigOptions, } from "../../providers/catalog/loader.js";
 // Provider information database
 const PROVIDERS = [
@@ -150,9 +150,9 @@ const PROVIDERS = [
  * perplexity, sambanova, together-ai, xai — mistral is the 9th catalog
  * provider but keeps its own handleMistralSetup() flow above, so it's
  * excluded here), spread directly from the catalog JSON via
- * buildCatalogConfigOptions(); decide-kind catalog entries (laya) are spread
- * the same way from getDecideCatalogEntries(). The hand rows listed first
- * reuse the existing createXConfig() factories in providerConfig.ts; the
+ * buildCatalogConfigOptions(); decide-kind catalog entries (laya, xor) are
+ * spread the same way from getDecideCatalogEntries(). The hand rows listed
+ * first reuse the existing createXConfig() factories in providerConfig.ts; the
  * remaining 5 (ollama, litellm, sagemaker, lm-studio, llamacpp) don't have a
  * factory and are defined inline using their real env var names. lm-studio
  * and llamacpp previously
@@ -172,7 +172,6 @@ export const EXTRA_PROVIDER_CONFIGS = {
     ideogram: createIdeogramConfig(),
     recraft: createRecraftConfig(),
     typesafe: createTypeSafeConfig(),
-    xor: createXorConfig(),
     "perplexity-decider": createPerplexityDeciderConfig(),
     "cloudflare-clef": createCloudflareClefConfig(),
     ...Object.fromEntries(getDecideCatalogEntries().map((e) => [e.id, buildCatalogConfigOptions(e)])),

package/dist/constants/enums.d.ts

@@ -103,6 +103,7 @@ export declare enum AIProviderName {
     WANDB_INFERENCE = "wandb-inference",
     XAI = "xai",
     XIAOMI_MIMO = "xiaomi-mimo",
+    XOR = "xor",
     Z_AI = "z-ai",
     COHERE = "cohere",
     REPLICATE = "replicate",
@@ -113,8 +114,6 @@ export declare enum AIProviderName {
     RECRAFT = "recraft",
     /** TypeSafe (Jev) — serves the `decide` inference type only. */
     TYPESAFE = "typesafe",
-    /** XOR (Juspay, open weights) — serves the `decide` inference type only. */
-    XOR = "xor",
     /**
      * Perplexity Decisions API (`pplx-decider-v1-27b`) — serves the `decide`
      * inference type only. Distinct from `PERPLEXITY`, the Sonar text provider.
@@ -1763,6 +1762,9 @@ export declare enum XaiModels {
 export declare enum XiaomiMimoModels {
     MIMO_V2_6_FLASH = "mimo-v2.6-flash"
 }
+export declare enum XorModels {
+    XOR_1_1 = "xor-1.1"
+}
 export declare enum ZAiModels {
     GLM_5_3 = "glm-5.3",
     GLM_5_3_FLASH = "glm-5.3-flash",
@@ -1788,13 +1790,6 @@ export declare enum TypeSafeModels {
     JEV_LATEST = "jev-latest",
     JEV_PREVIEW = "jev-preview"
 }
-/**
- * XOR decision models. Hand-written: XOR is a Tier-3 provider, so it is not in
- * the provider catalog and codegen never touches this.
- */
-export declare enum XorModels {
-    XOR_1_1 = "xor-1.1"
-}
 /**
  * Perplexity decision models. Hand-written: the Decisions API is a Tier-3
  * provider, so it is not in the provider catalog and codegen never touches

package/dist/constants/enums.js

@@ -108,6 +108,7 @@ export var AIProviderName;
     AIProviderName["WANDB_INFERENCE"] = "wandb-inference";
     AIProviderName["XAI"] = "xai";
     AIProviderName["XIAOMI_MIMO"] = "xiaomi-mimo";
+    AIProviderName["XOR"] = "xor";
     AIProviderName["Z_AI"] = "z-ai";
     // ── END GENERATED(provider-members) ──
     AIProviderName["COHERE"] = "cohere";
@@ -119,8 +120,6 @@ export var AIProviderName;
     AIProviderName["RECRAFT"] = "recraft";
     /** TypeSafe (Jev) — serves the `decide` inference type only. */
     AIProviderName["TYPESAFE"] = "typesafe";
-    /** XOR (Juspay, open weights) — serves the `decide` inference type only. */
-    AIProviderName["XOR"] = "xor";
     /**
      * Perplexity Decisions API (`pplx-decider-v1-27b`) — serves the `decide`
      * inference type only. Distinct from `PERPLEXITY`, the Sonar text provider.
@@ -2086,6 +2085,10 @@ export var XiaomiMimoModels;
 (function (XiaomiMimoModels) {
     XiaomiMimoModels["MIMO_V2_6_FLASH"] = "mimo-v2.6-flash";
 })(XiaomiMimoModels || (XiaomiMimoModels = {}));
+export var XorModels;
+(function (XorModels) {
+    XorModels["XOR_1_1"] = "xor-1.1";
+})(XorModels || (XorModels = {}));
 export var ZAiModels;
 (function (ZAiModels) {
     ZAiModels["GLM_5_3"] = "glm-5.3";
@@ -2114,14 +2117,6 @@ export var TypeSafeModels;
     TypeSafeModels["JEV_LATEST"] = "jev-latest";
     TypeSafeModels["JEV_PREVIEW"] = "jev-preview";
 })(TypeSafeModels || (TypeSafeModels = {}));
-/**
- * XOR decision models. Hand-written: XOR is a Tier-3 provider, so it is not in
- * the provider catalog and codegen never touches this.
- */
-export var XorModels;
-(function (XorModels) {
-    XorModels["XOR_1_1"] = "xor-1.1";
-})(XorModels || (XorModels = {}));
 /**
  * Perplexity decision models. Hand-written: the Decisions API is a Tier-3
  * provider, so it is not in the provider catalog and codegen never touches

package/dist/factories/providerDescriptors.js

@@ -1,5 +1,5 @@
 import { AIProviderName } from "../constants/enums.js";
-import { GoogleAIModels, OpenAIModels, AnthropicModels, VertexModels, OllamaModels, LiteLLMModels, NvidiaNimModels, OpenRouterModels, CohereModels, VoyageModels, TypeSafeModels, XorModels, PerplexityDeciderModels, CloudflareClefModels, JinaModels, StabilityModels, IdeogramModels, RecraftModels, ReplicateModels, } from "../constants/enums.js";
+import { GoogleAIModels, OpenAIModels, AnthropicModels, VertexModels, OllamaModels, LiteLLMModels, NvidiaNimModels, OpenRouterModels, CohereModels, VoyageModels, TypeSafeModels, PerplexityDeciderModels, CloudflareClefModels, JinaModels, StabilityModels, IdeogramModels, RecraftModels, ReplicateModels, } from "../constants/enums.js";
 import { API_KEY_FORMATS } from "../utils/providerConfig.js";
 import { getCatalogJsonEntries, getDecideCatalogEntries, catalogCredentialsKey, catalogEnvVar, } from "../providers/catalog/loader.js";
 import { DEFAULT_INFERENCE_KINDS } from "../types/index.js";
@@ -467,64 +467,23 @@ const HAND_DESCRIPTORS = [
         },
         setupUrl: "https://console.typesafe.ai/keys",
     },
-    // Decision precedence is decideOrder, not position: typesafe 1, laya 2 (from
-    // catalog/laya.json), xor 3, perplexity-decider 4, cloudflare-clef 5.
+    // Decision precedence is decideOrder, not position: typesafe 1, laya 2 and
+    // xor 3 (from catalog/laya.json and catalog/xor.json), perplexity-decider 4,
+    // cloudflare-clef 5.
     // resolveDefaultDecisionProvider() returns the first configured
     // DECISION_PROVIDERS entry in that order, so a host configured for several
     // keeps Jev for every built-in consumer and reaches the others only by
     // naming them. Renumbering silently changes which model routes, compacts
     // and plans for every such host.
-    {
-        name: AIProviderName.XOR,
-        aliases: [],
-        credentialsKey: "xor",
-        envVars: {
-            apiKey: "XOR_API_KEY",
-            baseURL: "XOR_BASE_URL",
-            // XOR has no built-in endpoint (it is reached at a deployment or behind a
-            // proxy), so a key is useless without a base URL. Both are required for
-            // it to count as configured, from the environment or credentials.xor.
-            extraRequired: ["XOR_BASE_URL"],
-            model: "XOR_MODEL",
-        },
-        defaultModel: XorModels.XOR_1_1,
-        // Serves only `decide`, like TypeSafe and Laya — the one declaration that
-        // keeps it out of every generation code path.
-        inferenceKinds: ["decide"],
-        decideOrder: 3,
-        toolSupport: "none",
-        localRuntime: false,
-        healthCheck: "env-only",
-        // Deliberately NO autoSelectPriority / autoSelectPreference /
-        // defaultHealthSweepPriority, for the same reason as TypeSafe above.
-        timeouts: { decideMs: 5000 },
-        // The deployment's prefill is 250,000 tokens, shared by the state, the
-        // questions and any media. 200,000 leaves 20% for those, and a state
-        // between this and the server's 4 MB would otherwise pass validation and
-        // fail inside the engine as a 500, which the base class would retry. There
-        // is no question cap (the server only limits a choice to 2..255 options).
-        // Non-ASCII text is charged per character because the four-characters-
-        // per-token estimate is several times too generous for CJK on this
-        // tokenizer. One token per character is a deliberate upper bound, to be
-        // replaced by a live measurement.
-        decisionLimits: {
-            maxStateTokens: 200_000,
-            nonAsciiTokensPerChar: 1,
-            // The server takes 1..8 images and one video, and refuses a body over
-            // 8 MB.
-            media: { maxImages: 8, video: true, maxRequestBytes: 8 * 1024 * 1024 },
-        },
-        setupUrl: "https://huggingface.co/juspay/xor",
-    },
     {
         name: AIProviderName.PERPLEXITY_DECIDER,
         aliases: [],
         credentialsKey: "perplexityDecider",
         envVars: {
             // The same key the `perplexity` text provider reads, so an ambient
-            // PERPLEXITY_API_KEY configures this provider too. It sits after XOR in
-            // this list, which is what keeps that from displacing any other decision
-            // provider a host has configured.
+            // PERPLEXITY_API_KEY configures this provider too. Its decideOrder (4)
+            // sits after XOR's (3), which is what keeps that from displacing any other
+            // decision provider a host has configured.
             apiKey: "PERPLEXITY_API_KEY",
             // Optional: the API is hosted at a public endpoint, so a key alone is
             // enough and there is no extraRequired.

package/dist/factories/providerRegistry.js

@@ -1,6 +1,6 @@
 import { ProviderFactory } from "./providerFactory.js";
 import { logger } from "../utils/logger.js";
-import { AIProviderName, GoogleAIModels, OpenAIModels, AnthropicModels, VertexModels, OllamaModels, LiteLLMModels, NvidiaNimModels, OpenRouterModels, CohereModels, VoyageModels, JinaModels, StabilityModels, IdeogramModels, RecraftModels, TypeSafeModels, XorModels, PerplexityDeciderModels, CloudflareClefModels, ReplicateModels, } from "../constants/enums.js";
+import { AIProviderName, GoogleAIModels, OpenAIModels, AnthropicModels, VertexModels, OllamaModels, LiteLLMModels, NvidiaNimModels, OpenRouterModels, CohereModels, VoyageModels, JinaModels, StabilityModels, IdeogramModels, RecraftModels, TypeSafeModels, PerplexityDeciderModels, CloudflareClefModels, ReplicateModels, } from "../constants/enums.js";
 import { PROVIDER_DESCRIPTORS_BY_NAME } from "./providerDescriptors.js";
 import { OPENAI_COMPAT_CATALOG } from "../providers/openaiCompatCatalog.js";
 import { providerChoicesFor } from "./mediaHandlerCatalog.js";
@@ -250,14 +250,6 @@ export class ProviderRegistry {
                 const { TypeSafeProvider } = await import("../providers/typesafe.js");
                 return new TypeSafeProvider(modelName, sdk, undefined, typesafeCreds);
             }, process.env.TYPESAFE_MODEL || TypeSafeModels.JEV_LATEST, ["jev", "typesafe-ai"], PROVIDER_DESCRIPTORS_BY_NAME.get(AIProviderName.TYPESAFE));
-            // Register XOR — the third `decide` provider, reached at whatever base
-            // URL its config names. Its descriptor declares inferenceKinds:
-            // ["decide"], so nothing in the generation fallback chain can reach it.
-            ProviderFactory.registerProvider(AIProviderName.XOR, async (modelName, _providerName, sdk, _region, credentials) => {
-                const xorCreds = credentials;
-                const { XorProvider } = await import("../providers/xor.js");
-                return new XorProvider(modelName, sdk, undefined, xorCreds);
-            }, process.env.XOR_MODEL || XorModels.XOR_1_1, [], PROVIDER_DESCRIPTORS_BY_NAME.get(AIProviderName.XOR));
             // Register the Perplexity Decisions API — a `decide` provider reached at
             // Perplexity's public endpoint. Its descriptor declares inferenceKinds:
             // ["decide"], so nothing in the generation fallback chain can reach it,

package/dist/models/manifestRegistry.js

@@ -20,7 +20,6 @@ import { llamacppManifest } from "./manifests/llamacpp.js";
 import { xaiManifest } from "./manifests/xai.js";
 import { groqManifest } from "./manifests/groq.js";
 import { typesafeManifest } from "./manifests/typesafe.js";
-import { xorManifest } from "./manifests/xor.js";
 import { perplexityDeciderManifest } from "./manifests/perplexityDecider.js";
 import { cloudflareClefManifest } from "./manifests/cloudflareClef.js";
 import { cohereManifest } from "./manifests/cohere.js";
@@ -160,7 +159,6 @@ export const MANIFEST_REGISTRY = {
     groq: groqManifest,
     typesafe: typesafeManifest,
     ...Object.fromEntries(getDecideCatalogEntries().map((e) => [e.id, buildDecideManifest(e)])),
-    xor: xorManifest,
     "perplexity-decider": perplexityDeciderManifest,
     "cloudflare-clef": cloudflareClefManifest,
     cerebras: catalogManifest("cerebras"),

package/dist/providers/catalog/index.generated.d.ts

@@ -2,4 +2,4 @@ import type { DecideCatalogJson, ProviderCatalogJson } from "../../types/index.j
 export declare const CATALOG_JSON_ENTRIES: ProviderCatalogJson[];
 export declare const CATALOG_PROVIDER_IDS: readonly ["a2agent", "abliteration", "above-dev", "ai21", "aiand", "aihubmix", "aionlabs", "ambient", "api-route", "arcee", "atlas-cloud", "avian-io", "baidu-qianfan", "baseten", "bee-heossi", "byteplus-modelark", "bytez", "cerebras", "charm-hyper", "chutes", "cloudflare", "crusoe", "dashscope", "deepinfra", "deepseek", "empiriolabs", "featherless-ai", "fireworks", "friendli", "gmicloud", "gradientai", "groq", "hetzner-inference", "huggingface", "inception-labs", "inceptron", "inco", "inference-net", "io-intelligence", "koscompute", "lemonfox-ai", "lilac", "llmtech", "longcat", "mancer", "meta-model-api", "minimax", "mistral", "moark", "modelscope", "moonshot-ai", "morph", "naver-clova-studio", "nebius", "neuralwatt", "novita", "ovhcloud", "parasail", "pareto-inference", "perplexity", "poolside", "prime-intellect", "reka", "runinfra", "sakana-ai", "sambanova", "sarvam", "scaleway", "siliconflow", "stackit", "stepfun", "subconscious", "synthetic", "telnyx", "thinking-machines", "tinfoil", "together-ai", "umans-ai", "upstage", "venice-ai", "vispark", "vultr-inference", "wafer", "wandb-inference", "xai", "xiaomi-mimo", "z-ai"];
 export declare const DECIDE_CATALOG_JSON_ENTRIES: DecideCatalogJson[];
-export declare const DECIDE_CATALOG_PROVIDER_IDS: readonly ["laya"];
+export declare const DECIDE_CATALOG_PROVIDER_IDS: readonly ["laya", "xor"];

package/dist/providers/catalog/index.generated.js

@@ -87,6 +87,7 @@ import waferJson from "./wafer.json" with { type: "json" };
 import wandbInferenceJson from "./wandb-inference.json" with { type: "json" };
 import xaiJson from "./xai.json" with { type: "json" };
 import xiaomiMimoJson from "./xiaomi-mimo.json" with { type: "json" };
+import xorJson from "./xor.json" with { type: "json" };
 import zAiJson from "./z-ai.json" with { type: "json" };
 import { isDecideCatalogEntry, parseCatalogEntry } from "./schema.js";
 const asDecideEntry = (raw) => {
@@ -274,5 +275,8 @@ export const CATALOG_PROVIDER_IDS = [
     "xiaomi-mimo",
     "z-ai",
 ];
-export const DECIDE_CATALOG_JSON_ENTRIES = [layaJson].map(asDecideEntry);
-export const DECIDE_CATALOG_PROVIDER_IDS = ["laya"];
+export const DECIDE_CATALOG_JSON_ENTRIES = [
+    layaJson,
+    xorJson,
+].map(asDecideEntry);
+export const DECIDE_CATALOG_PROVIDER_IDS = ["laya", "xor"];

package/dist/providers/catalog/provider-catalog.schema.json

@@ -60,6 +60,24 @@
         "symbolTokensPerChar": { "type": "number", "exclusiveMinimum": 0 },
         "astralTokensPerChar": { "type": "number", "exclusiveMinimum": 0 },
         "advisory": { "type": "boolean" },
+        "media": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["maxImages", "video", "maxRequestBytes"],
+          "description": "What a request may carry besides text. Requires decide.media, which names the body keys the prepared media is written under.",
+          "properties": {
+            "maxImages": { "type": "integer", "minimum": 1 },
+            "video": {
+              "type": "boolean",
+              "description": "Whether one video is accepted. True requires decide.media.videoKey; false forbids it."
+            },
+            "maxRequestBytes": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "Ceiling on the encoded request body, in bytes."
+            }
+          }
+        },
         "models": {
           "type": "object",
           "description": "Per-model limits keyed by a models.catalog key (enforced by the zod schema).",
@@ -96,7 +114,12 @@
         },
         "baseURLNormalize": {
           "type": "array",
-          "items": { "enum": ["strip-trailing-slash"] }
+          "items": { "enum": ["strip-trailing-slash", "strip-v1-suffix"] },
+          "description": "Applied to the base URL in list order. strip-v1-suffix removes one trailing /v1, in either case."
+        },
+        "baseURLShape": {
+          "enum": ["origin"],
+          "description": "Refuses a normalised base URL that is not an http(s) URL without userinfo, a query string or a fragment. Omitted means no check."
         },
         "endpoint": {
           "type": "string",
@@ -116,6 +139,16 @@
             }
           }
         },
+        "media": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["imagesKey"],
+          "description": "Body keys prepared media is written under, after model, state and questions: imagesKey only when the request carries an image, videoKey only when it carries a video, and the two differ. Requires decisionLimits.media; videoKey is required exactly when that allowance's video is true.",
+          "properties": {
+            "imagesKey": { "$ref": "#/definitions/decideMediaKey" },
+            "videoKey": { "$ref": "#/definitions/decideMediaKey" }
+          }
+        },
         "requestIdHeaders": {
           "type": "array",
           "items": {
@@ -156,6 +189,12 @@
                     ]
                   },
                   "statusMin": { "$ref": "#/definitions/httpStatus" },
+                  "messagePattern": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 200,
+                    "description": "The rule also needs the error message to match this case-insensitive regular expression (first 2,000 characters, key removed). Bounded: outside a character class no unescaped *, + or {n,}, no quantifier on a group, no count above 255, and the counts side by side multiply to at most 4,096 ways (each ? is 2, each {n,m} is m-n+1)."
+                  },
                   "kind": { "$ref": "#/definitions/decisionErrorKind" },
                   "retryable": { "type": "boolean" }
                 }
@@ -595,6 +634,20 @@
   },
   "definitions": {
     "httpStatus": { "type": "integer", "minimum": 100, "maximum": 599 },
+    "decideMediaKey": {
+      "type": "string",
+      "pattern": "^[A-Za-z][A-Za-z0-9_]*$",
+      "not": {
+        "enum": [
+          "model",
+          "state",
+          "questions",
+          "__proto__",
+          "constructor",
+          "prototype"
+        ]
+      }
+    },
     "decisionErrorKind": {
       "enum": [
         "authentication",

package/dist/providers/catalog/schema.js

@@ -397,11 +397,97 @@ const decideErrorKindSchema = z.enum([
     "timeout",
     "network",
 ]);
+// The most steps one `{n}` or `{n,m}` may stand for.
+const MAX_PATTERN_COUNT = 255;
+// The most ways a pattern's counts may multiply: each `?` is 2 and each `{n,m}`
+// is m-n+1. Adjacent bounded counts multiply on a miss (`.{0,255}` three times
+// took 38 s on one 2,000-character message), and a miss on a 5xx is retried.
+// XOR's pattern is 3,362.
+const MAX_PATTERN_WAYS = 4096;
+// What can make a pattern backtrack catastrophically on an error message, so
+// that a catalog author cannot write it: `*`, `+` and an open-ended `{n,}` have
+// no upper bound; any quantifier on a group (`(a|a){0,30}`, `(ab)?`) repeats
+// whatever its alternatives match, and quantifiers nested that way multiply; a
+// count above MAX_PATTERN_COUNT is as good as no bound. A quantifier on a plain
+// character, class or escape is fine. Inside a character class all of them are
+// plain characters, and a backslash makes the next one plain everywhere.
+// Counts that sit side by side multiply, so their product has a budget too
+// (MAX_PATTERN_WAYS); within it a pattern is still not a guarantee of linear
+// time, and wants reading.
+function hasRiskyQuantifier(pattern) {
+    const count = /\{(\d+)(?:,(\d*))?\}/y;
+    let inClass = false;
+    let afterGroup = false;
+    let ways = 1;
+    for (let index = 0; index < pattern.length; index += 1) {
+        const char = pattern[index];
+        const onGroup = afterGroup;
+        afterGroup = false;
+        if (char === "\\") {
+            index += 1;
+        }
+        else if (inClass) {
+            inClass = char !== "]";
+        }
+        else if (char === "[") {
+            inClass = true;
+        }
+        else if (char === ")") {
+            afterGroup = true;
+        }
+        else if (char === "*" || char === "+" || (char === "?" && onGroup)) {
+            return true;
+        }
+        else if (char === "?") {
+            // The `?` that opens a group (`(?:`, `(?=`) is not a quantifier.
+            if (pattern[index - 1] !== "(") {
+                ways *= 2;
+            }
+        }
+        else if (char === "{") {
+            count.lastIndex = index;
+            const found = count.exec(pattern);
+            if (found &&
+                (onGroup ||
+                    found[2] === "" ||
+                    Math.max(Number(found[1]), Number(found[2] ?? 0)) > MAX_PATTERN_COUNT)) {
+                return true;
+            }
+            if (found && found[2] !== undefined) {
+                ways *= Number(found[2]) - Number(found[1]) + 1;
+            }
+        }
+        if (ways > MAX_PATTERN_WAYS) {
+            return true;
+        }
+    }
+    return false;
+}
+function compilesAsPattern(pattern) {
+    try {
+        new RegExp(pattern, "i");
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const decideMessagePatternSchema = z
+    .string()
+    .min(1)
+    .max(200)
+    .refine(compilesAsPattern, {
+    message: "messagePattern is not a valid regular expression",
+})
+    .refine((pattern) => !hasRiskyQuantifier(pattern), {
+    message: "messagePattern must be bounded: an unescaped * or +, an open-ended {n,}, a {n,m} count above 255, or any quantifier on a group, outside a character class, can backtrack catastrophically on an error message. Put ?, or {n,m} up to 255, only on a plain character, a character class or an escape, and keep the counts side by side to 4096 ways in all (each ? is 2, each {n,m} is m-n+1)",
+});
 const decideErrorRuleSchema = z.strictObject({
     status: z
         .union([decideStatusSchema, z.array(decideStatusSchema).min(1)])
         .optional(),
     statusMin: decideStatusSchema.optional(),
+    messagePattern: decideMessagePatternSchema.optional(),
     kind: decideErrorKindSchema,
     retryable: z.boolean().optional(),
 });
@@ -434,16 +520,45 @@ const decideBodyShapeSchema = z
     path: ["formatter"],
     message: "a body shape sets isArray: true together with a formatter, or neither: an array without a formatter never matches, and a formatter on a body that is not an array reads the text as an empty list",
 });
+// The keys the body already uses, and the names an object must not take as an
+// own key from data.
+const RESERVED_MEDIA_KEYS = new Set([
+    "model",
+    "state",
+    "questions",
+    "__proto__",
+    "constructor",
+    "prototype",
+]);
+const decideMediaKeySchema = z
+    .string()
+    .regex(/^[A-Za-z][A-Za-z0-9_]*$/, "a media key must start with a letter and use only letters, digits and underscores")
+    .refine((key) => !RESERVED_MEDIA_KEYS.has(key), {
+    message: "a media key must not be model, state, questions, __proto__, constructor or prototype",
+});
+const decideMediaSchema = z
+    .strictObject({
+    imagesKey: decideMediaKeySchema,
+    videoKey: decideMediaKeySchema.optional(),
+})
+    .refine((media) => media.imagesKey !== media.videoKey, {
+    path: ["videoKey"],
+    message: "decide.media.videoKey must differ from imagesKey: one body key cannot carry both",
+});
 const decideBlockSchema = z.strictObject({
     dialect: z.enum(["system-one"]),
     order: decidePositiveInt,
     baseURLRequired: z.boolean().optional(),
-    baseURLNormalize: z.array(z.enum(["strip-trailing-slash"])).optional(),
+    baseURLNormalize: z
+        .array(z.enum(["strip-trailing-slash", "strip-v1-suffix"]))
+        .optional(),
+    baseURLShape: z.enum(["origin"]).optional(),
     endpoint: decideEndpointSchema,
     model: z.strictObject({
         placement: z.enum(["body", "body-unless-alias"]),
         alias: z.string().min(1).optional(),
     }),
+    media: decideMediaSchema.optional(),
     requestIdHeaders: z.array(decideHeaderNameSchema).optional(),
     response: z
         .strictObject({ modelPaths: z.array(decidePathSchema).optional() })
@@ -487,7 +602,9 @@ const decideModelsSchema = z
         }
     }
 });
-// `media` is deliberately absent: no decide provider migrated yet needs it.
+// `media` is the allowance the base class prepares and gates a request's images
+// and video against; `decide.media` names the body keys they go out under, and
+// the entry refinement below requires the two together.
 const decideLimitsSchema = z.strictObject({
     maxStateTokens: decidePositiveInt,
     maxQuestions: decidePositiveInt.optional(),
@@ -501,6 +618,13 @@ const decideLimitsSchema = z.strictObject({
         nonAsciiTokensPerChar: decidePositiveNumber.optional(),
     }))
         .optional(),
+    media: z
+        .strictObject({
+        maxImages: decidePositiveInt,
+        video: z.boolean(),
+        maxRequestBytes: decidePositiveInt,
+    })
+        .optional(),
     advisory: z.boolean().optional(),
 });
 const decideCatalogJsonSchema = z
@@ -523,6 +647,8 @@ const decideCatalogJsonSchema = z
     const issue = (path, message) => {
         ctx.addIssue({ code: "custom", path, message });
     };
+    // Two rules collide only on the same status AND the same pattern: XOR
+    // lists a pattern rule and a plain rule at one statusMin.
     const seenStatus = new Set();
     const seenStatusMin = new Set();
     decide.errors.rules.forEach((rule, index) => {
@@ -531,17 +657,21 @@ const decideCatalogJsonSchema = z
             issue(at, "errors.rules entry needs exactly one of status or statusMin");
         }
         const statuses = typeof rule.status === "number" ? [rule.status] : (rule.status ?? []);
+        const sameAs = rule.messagePattern === undefined
+            ? ""
+            : " with the same messagePattern";
+        const keyOf = (value) => JSON.stringify([value, rule.messagePattern ?? null]);
         for (const status of statuses) {
-            if (seenStatus.has(status)) {
-                issue([...at, "status"], `errors.rules lists status ${status} more than once`);
+            if (seenStatus.has(keyOf(status))) {
+                issue([...at, "status"], `errors.rules lists status ${status} more than once${sameAs}`);
             }
-            seenStatus.add(status);
+            seenStatus.add(keyOf(status));
         }
         if (rule.statusMin !== undefined) {
-            if (seenStatusMin.has(rule.statusMin)) {
-                issue([...at, "statusMin"], `errors.rules lists statusMin ${rule.statusMin} more than once`);
+            if (seenStatusMin.has(keyOf(rule.statusMin))) {
+                issue([...at, "statusMin"], `errors.rules lists statusMin ${rule.statusMin} more than once${sameAs}`);
             }
-            seenStatusMin.add(rule.statusMin);
+            seenStatusMin.add(keyOf(rule.statusMin));
         }
     });
     const modelKeys = new Set(Object.keys(entry.models.catalog));
@@ -573,6 +703,22 @@ const decideCatalogJsonSchema = z
             issue(["decisionLimits", "models", id], "decisionLimits.models key must be a key of models.catalog");
         }
     }
+    const mediaKeys = decide.media;
+    const mediaAllowance = entry.decisionLimits?.media;
+    if (mediaKeys !== undefined && mediaAllowance === undefined) {
+        issue(["decide", "media"], "decide.media needs decisionLimits.media: without an allowance the base class refuses every image and video, so these keys would never be written");
+    }
+    if (mediaKeys === undefined && mediaAllowance !== undefined) {
+        issue(["decisionLimits", "media"], "decisionLimits.media needs decide.media: without body keys the engine would prepare a request's media and then leave it out of the body");
+    }
+    if (mediaKeys !== undefined && mediaAllowance !== undefined) {
+        if (mediaAllowance.video && mediaKeys.videoKey === undefined) {
+            issue(["decide", "media", "videoKey"], "decide.media.videoKey is required when decisionLimits.media.video is true");
+        }
+        if (!mediaAllowance.video && mediaKeys.videoKey !== undefined) {
+            issue(["decide", "media", "videoKey"], "decide.media.videoKey must be omitted when decisionLimits.media.video is false");
+        }
+    }
     if (decide.baseURLRequired === true &&
         !decide.endpoint.includes("{baseURL}")) {
         issue(["decide", "endpoint"], "decide.endpoint must contain {baseURL} when decide.baseURLRequired is true");