@juspay/neurolink 12.57.0 → 12.58.0

package/dist/cli/commands/decide.d.ts

@@ -9,7 +9,10 @@
  *
  * Credentials are env-only here, exactly as every other CLI command: the
  * decision provider reads its own settings (TYPESAFE_API_KEY, LAYA_API_KEY and
- * LAYA_BASE_URL, XOR_API_KEY and XOR_BASE_URL, or PERPLEXITY_API_KEY) itself.
+ * LAYA_BASE_URL, XOR_API_KEY and XOR_BASE_URL, SUBQ_API_KEY, PERPLEXITY_API_KEY,
+ * CLOUDFLARE_API_KEY and CLOUDFLARE_ACCOUNT_ID, or OPENAI_API_KEY) itself. An
+ * OPENAI_API_KEY beside an OPENAI_BASE_URL, OPENAI_API_BASE or credentials.openai.baseURL that names a host
+ * other than https://api.openai.com is a gateway's and is not used by default.
  */
 import type { CommandModule } from "yargs";
 import type { CliDecideArgs } from "../../types/index.js";

package/dist/cli/commands/decide.js

@@ -9,7 +9,10 @@
  *
  * Credentials are env-only here, exactly as every other CLI command: the
  * decision provider reads its own settings (TYPESAFE_API_KEY, LAYA_API_KEY and
- * LAYA_BASE_URL, XOR_API_KEY and XOR_BASE_URL, or PERPLEXITY_API_KEY) itself.
+ * LAYA_BASE_URL, XOR_API_KEY and XOR_BASE_URL, SUBQ_API_KEY, PERPLEXITY_API_KEY,
+ * CLOUDFLARE_API_KEY and CLOUDFLARE_ACCOUNT_ID, or OPENAI_API_KEY) itself. An
+ * OPENAI_API_KEY beside an OPENAI_BASE_URL, OPENAI_API_BASE or credentials.openai.baseURL that names a host
+ * other than https://api.openai.com is a gateway's and is not used by default.
  */
 import chalk from "chalk";
 import ora from "ora";
@@ -191,7 +194,7 @@ export const decideCommand = {
         type: "string",
         array: true,
         nargs: 1,
-        describe: "Image for the model to read: a file path or a data: URL. Repeat for several (XOR and Perplexity take up to 8, Cloudflare Clef up to 4)",
+        describe: "Image for the model to read: a file path or a data: URL. Repeat for several (XOR, Perplexity and OpenAI Decisions take up to 8, Cloudflare Clef up to 4)",
     })
         .option("video", {
         type: "string",
@@ -217,7 +220,7 @@ export const decideCommand = {
     })
         .example('$0 decide "Refund request for a damaged item" --questions \'{"urgent":{"type":"boolean","instructions":"Is this urgent?"}}\'', "Ask a single yes/no question")
         .example("$0 decide --state-file ticket.json --questions-file questions.json --format json", "Read state and questions from files, emit raw JSON")
-        .example('$0 decide "What color is this?" --provider xor --image ./photo.png --questions \'{"color":{"type":"choice","instructions":"What color is the image?","criteria":{"red":"red","blue":"blue"}}}\'', "Ask about an image (XOR, Perplexity and Cloudflare Clef read images)"),
+        .example('$0 decide "What color is this?" --provider xor --image ./photo.png --questions \'{"color":{"type":"choice","instructions":"What color is the image?","criteria":{"red":"red","blue":"blue"}}}\'', "Ask about an image (XOR, Perplexity, Cloudflare Clef and OpenAI Decisions read images)"),
     handler: async (argv) => {
         const outputFormat = argv.format ?? "text";
         // --- Validate before any provider work ---------------------------------

package/dist/cli/commands/setup.d.ts

@@ -13,7 +13,7 @@ import type { ProviderConfigOptions, SetupArgs } from "../../types/index.js";
  * perplexity, sambanova, together-ai, xai — mistral is the 9th catalog
  * provider but keeps its own handleMistralSetup() flow above, so it's
  * excluded here), spread directly from the catalog JSON via
- * buildCatalogConfigOptions(); decide-kind catalog entries (laya, xor, subq) are
+ * buildCatalogConfigOptions(); decide-kind catalog entries (laya, xor, subq, openai-decisions) are
  * spread the same way from getDecideCatalogEntries(). The hand rows listed
  * first reuse the existing createXConfig() factories in providerConfig.ts; the
  * remaining 5 (ollama, litellm, sagemaker, lm-studio, llamacpp) don't have a

package/dist/cli/commands/setup.js

@@ -150,7 +150,7 @@ const PROVIDERS = [
  * perplexity, sambanova, together-ai, xai — mistral is the 9th catalog
  * provider but keeps its own handleMistralSetup() flow above, so it's
  * excluded here), spread directly from the catalog JSON via
- * buildCatalogConfigOptions(); decide-kind catalog entries (laya, xor, subq) are
+ * buildCatalogConfigOptions(); decide-kind catalog entries (laya, xor, subq, openai-decisions) are
  * spread the same way from getDecideCatalogEntries(). The hand rows listed
  * first reuse the existing createXConfig() factories in providerConfig.ts; the
  * remaining 5 (ollama, litellm, sagemaker, lm-studio, llamacpp) don't have a

package/dist/cli/factories/commandFactory.js

@@ -649,7 +649,7 @@ export class CLICommandFactory {
         },
         classifierStrategy: {
             type: "string",
-            description: "Classifier strategy: 'auto' (default — 'jev' when a decision provider is configured, such as TYPESAFE_API_KEY, LAYA_API_KEY with LAYA_BASE_URL, XOR_API_KEY with XOR_BASE_URL, SUBQ_API_KEY, PERPLEXITY_API_KEY, or CLOUDFLARE_API_KEY with CLOUDFLARE_ACCOUNT_ID, else 'heuristic'), 'heuristic' (no LLM), 'llm' (a cheap model picks per prompt), or 'jev' (a System One decision model — TypeSafe Jev, Laya, XOR, SubQ, Perplexity or Cloudflare Clef — with calibrated confidence).",
+            description: "Classifier strategy: 'auto' (default — 'jev' when a decision provider is configured, such as TYPESAFE_API_KEY, LAYA_API_KEY with LAYA_BASE_URL, XOR_API_KEY with XOR_BASE_URL, SUBQ_API_KEY, PERPLEXITY_API_KEY, CLOUDFLARE_API_KEY with CLOUDFLARE_ACCOUNT_ID, or OPENAI_API_KEY unless OPENAI_BASE_URL, OPENAI_API_BASE or credentials.openai.baseURL names a host other than https://api.openai.com, else 'heuristic'), 'heuristic' (no LLM), 'llm' (a cheap model picks per prompt), or 'jev' (a decision model — whichever decision provider is configured: TypeSafe Jev, Laya, XOR, SubQ, Perplexity, Cloudflare Clef or OpenAI Decisions — with the confidence it reports).",
             choices: ["auto", "heuristic", "llm", "jev"],
             alias: "classifier-strategy",
         },

package/dist/constants/enums.d.ts

@@ -73,6 +73,7 @@ export declare enum AIProviderName {
     NEBIUS = "nebius",
     NEURALWATT = "neuralwatt",
     NOVITA = "novita",
+    OPENAI_DECISIONS = "openai-decisions",
     OVHCLOUD = "ovhcloud",
     PARASAIL = "parasail",
     PARETO_INFERENCE = "pareto-inference",
@@ -1476,6 +1477,9 @@ export declare enum NovitaModels {
     QWEN_QWEN_2_5_72B_INSTRUCT = "qwen/qwen-2.5-72b-instruct",
     GOOGLE_GEMMA_3_27B_IT = "google/gemma-3-27b-it"
 }
+export declare enum OpenAIDecisionsModels {
+    GPT_6_LUNA = "gpt-6-luna"
+}
 export declare enum OvhcloudModels {
     GPT_OSS_120B = "gpt-oss-120b",
     GPT_OSS_20B = "gpt-oss-20b",

package/dist/constants/enums.js

@@ -78,6 +78,7 @@ export var AIProviderName;
     AIProviderName["NEBIUS"] = "nebius";
     AIProviderName["NEURALWATT"] = "neuralwatt";
     AIProviderName["NOVITA"] = "novita";
+    AIProviderName["OPENAI_DECISIONS"] = "openai-decisions";
     AIProviderName["OVHCLOUD"] = "ovhcloud";
     AIProviderName["PARASAIL"] = "parasail";
     AIProviderName["PARETO_INFERENCE"] = "pareto-inference";
@@ -1769,6 +1770,10 @@ export var NovitaModels;
     NovitaModels["QWEN_QWEN_2_5_72B_INSTRUCT"] = "qwen/qwen-2.5-72b-instruct";
     NovitaModels["GOOGLE_GEMMA_3_27B_IT"] = "google/gemma-3-27b-it";
 })(NovitaModels || (NovitaModels = {}));
+export var OpenAIDecisionsModels;
+(function (OpenAIDecisionsModels) {
+    OpenAIDecisionsModels["GPT_6_LUNA"] = "gpt-6-luna";
+})(OpenAIDecisionsModels || (OpenAIDecisionsModels = {}));
 export var OvhcloudModels;
 (function (OvhcloudModels) {
     OvhcloudModels["GPT_OSS_120B"] = "gpt-oss-120b";

package/dist/core/factory.d.ts

@@ -14,6 +14,13 @@ export declare class AIProviderFactory {
      * Prevents hanging on non-responsive endpoints
      */
     private static initializeDynamicProviderWithTimeout;
+    /**
+     * A provider whose descriptor declares `inferenceKinds` of exactly `["decide"]`
+     * names its own model (its registered default reads its own variable), so a
+     * chat provider's model variable has no claim on it. Exactly `["decide"]`: a
+     * provider that also serves text keeps its chat-model fallbacks.
+     */
+    private static isDecisionOnly;
     private static resolveModelFromEnvironment;
     private static resolveDynamicModelName;
     private static createResolvedProvider;

package/dist/core/factory.js

@@ -3,6 +3,7 @@
 import { SpanKind, SpanStatusCode } from "@opentelemetry/api";
 import { tracers } from "../telemetry/tracers.js";
 import { ProviderFactory } from "../factories/providerFactory.js";
+import { PROVIDER_ALIAS_INDEX, PROVIDER_DESCRIPTORS_BY_NAME, } from "../factories/providerDescriptors.js";
 import { ProviderRegistry } from "../factories/providerRegistry.js";
 import { getBestProvider } from "../utils/providerUtils.js";
 import { logger } from "../utils/logger.js";
@@ -47,11 +48,30 @@ export class AIProviderFactory {
             // This ensures the factory continues to work even if dynamic models fail
         }
     }
+    /**
+     * A provider whose descriptor declares `inferenceKinds` of exactly `["decide"]`
+     * names its own model (its registered default reads its own variable), so a
+     * chat provider's model variable has no claim on it. Exactly `["decide"]`: a
+     * provider that also serves text keeps its chat-model fallbacks.
+     */
+    static isDecisionOnly(providerName) {
+        const canonical = PROVIDER_ALIAS_INDEX.get(providerName.toLowerCase());
+        const kinds = canonical === undefined
+            ? undefined
+            : PROVIDER_DESCRIPTORS_BY_NAME.get(canonical)?.inferenceKinds;
+        return kinds?.length === 1 && kinds[0] === "decide";
+    }
     static resolveModelFromEnvironment(providerName, modelName, functionTag) {
         if (modelName && modelName !== "default") {
             logger.debug(`[${functionTag}] Skipping environment variable check - explicit model provided: ${modelName}`);
             return modelName;
         }
+        // The group below is chosen by `includes`, so "openai-decisions" would be
+        // handed OPENAI_MODEL, the chat provider's variable, ahead of its own.
+        if (this.isDecisionOnly(providerName)) {
+            logger.debug(`[${functionTag}] Skipping chat-model environment variables - ${providerName} serves decisions only and reads its own model setting`);
+            return modelName;
+        }
         logger.debug(`[${functionTag}] Checking environment variables for provider: ${providerName}`);
         const normalizedProvider = providerName.toLowerCase();
         const envConfigs = [

package/dist/factories/providerDescriptors.js

@@ -469,16 +469,18 @@ const HAND_DESCRIPTORS = [
     },
     // Decision precedence is decideOrder, not position: typesafe 1, laya 2 and
     // xor 3 (from catalog/laya.json and catalog/xor.json), subq 4 (from
-    // catalog/subq.json), perplexity-decider 5, cloudflare-clef 6.
+    // catalog/subq.json), perplexity-decider 5, cloudflare-clef 6 and
+    // openai-decisions 7 (catalog/openai-decisions.json).
     // resolveDefaultDecisionProvider() returns the first configured
     // DECISION_PROVIDERS entry in that order, so a host configured for several
     // keeps Jev for every built-in consumer and reaches the others only by
     // naming them. Renumbering silently changes which model routes, compacts
     // and plans for every such host.
-    // perplexity-decider and cloudflare-clef come last because each shares its
-    // environment key with a text provider: a key set only for that text provider
-    // must not displace a decision provider a host set up on purpose. subq is
-    // ahead of them only because SUBQ_API_KEY belongs to no other provider.
+    // perplexity-decider, cloudflare-clef and openai-decisions come last because
+    // each shares its environment key with a text provider: a key set only for
+    // that text provider must not displace a decision provider a host set up on
+    // purpose. subq is ahead of them only because SUBQ_API_KEY belongs to no other
+    // provider.
     {
         name: AIProviderName.PERPLEXITY_DECIDER,
         aliases: [],
@@ -727,6 +729,19 @@ export function buildDecideDescriptor(entry) {
         defaultModel: entry.models.default,
         inferenceKinds: ["decide"],
         decideOrder: entry.decide.order,
+        ...(entry.decide.ambientKeyGuard
+            ? {
+                ambientKeyGuard: {
+                    baseURLEnvVars: [...entry.decide.ambientKeyGuard.baseURLEnvVars],
+                    trustedOrigins: [...entry.decide.ambientKeyGuard.trustedOrigins],
+                    ...(entry.decide.ambientKeyGuard.credentialBaseURLs
+                        ? {
+                            credentialBaseURLs: entry.decide.ambientKeyGuard.credentialBaseURLs.map((credentialField) => ({ ...credentialField })),
+                        }
+                        : {}),
+                },
+            }
+            : {}),
         toolSupport: "none",
         localRuntime: false,
         healthCheck: "env-only",
@@ -796,11 +811,61 @@ assertUniqueDecideOrder(PROVIDER_DESCRIPTORS);
  * provider that declares nothing is a text provider, so it is not here.
  */
 export const DECISION_PROVIDERS = orderDecisionProviders(PROVIDER_DESCRIPTORS);
+/**
+ * The scheme, host and port of a base URL, lower-cased and without the default
+ * port, or undefined when the text is not an http(s) URL. The path, query and a
+ * trailing slash do not matter, and userinfo is not part of an origin, so
+ * `https://api.openai.com@evil.test/v1` reads as `https://evil.test`.
+ */
+function originOf(text) {
+    try {
+        const url = new URL(text.trim());
+        return url.protocol === "http:" || url.protocol === "https:"
+            ? url.origin
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Whether the guard lets a key found in the environment stand. It does not
+ * when a listed base-URL variable, or a listed credentials field, is set to
+ * something other than a trusted origin; an unparseable value is untrusted, a
+ * blank or absent one is unset. A credentials field that is not text cannot be
+ * read as a URL, so it is untrusted too.
+ */
+function ambientKeyTrusted(guard, credentials) {
+    const trusted = new Set(guard.trustedOrigins
+        .map(originOf)
+        .filter((origin) => origin !== undefined));
+    const standsFor = (value) => {
+        if (value === undefined || value === null) {
+            return true;
+        }
+        if (typeof value !== "string") {
+            return false;
+        }
+        if (value.trim() === "") {
+            return true;
+        }
+        const origin = originOf(value);
+        return origin !== undefined && trusted.has(origin);
+    };
+    const slices = credentials;
+    return (guard.baseURLEnvVars.every((name) => standsFor(process.env[name])) &&
+        (guard.credentialBaseURLs ?? []).every(({ key, field }) => standsFor(slices?.[key]?.[field])));
+}
 /**
  * Whether a decision provider is fully configured: its key and every
  * extraRequired variable are set, each either in the environment or in
  * `credentials` — the same config a caller passes to
  * `new NeuroLink({ credentials })` or per call. Whitespace counts as unset.
+ *
+ * A key found only in the environment does not count while the descriptor's
+ * `ambientKeyGuard` finds that it belongs to something else, unless the host
+ * routed the provider on purpose with its own base-URL variable or a
+ * `credentials` base URL. A key in `credentials` always counts.
  */
 function isDecisionProviderConfigured(descriptor, credentials) {
     const isSet = (value) => typeof value === "string" && value.trim() !== "";
@@ -808,8 +873,13 @@ function isDecisionProviderConfigured(descriptor, credentials) {
     const slice = descriptor.credentialsKey
         ? credentials?.[descriptor.credentialsKey]
         : undefined;
+    const routedOnPurpose = inEnv(descriptor.envVars.baseURL) || isSet(slice?.baseURL);
+    const envKeyStands = descriptor.ambientKeyGuard === undefined ||
+        routedOnPurpose ||
+        ambientKeyTrusted(descriptor.ambientKeyGuard, credentials);
     // `gatewayApiKey` is TypeSafe's config form of AI_GATEWAY_API_KEY.
-    const hasKey = [descriptor.envVars.apiKey, ...(descriptor.envVars.fallbacks ?? [])].some(inEnv) ||
+    const hasKey = (envKeyStands &&
+        [descriptor.envVars.apiKey, ...(descriptor.envVars.fallbacks ?? [])].some(inEnv)) ||
         isSet(slice?.apiKey) ||
         isSet(slice?.gatewayApiKey);
     // A required base URL can also come from credentials.<key>.baseURL, and any
@@ -845,6 +915,12 @@ export function listMediaDecisionProviders(needs) {
         return media !== undefined && (!needs?.video || media.video);
     }).map((descriptor) => descriptor.name);
 }
+/** "a", "a or b", "a, b or c". */
+function listOr(items) {
+    return items.length < 2
+        ? items.join("")
+        : `${items.slice(0, -1).join(", ")} or ${items[items.length - 1]}`;
+}
 /**
  * The variables that would configure each decision provider, one clause per
  * provider in precedence order, e.g. "TYPESAFE_API_KEY or AI_GATEWAY_API_KEY
@@ -859,6 +935,19 @@ export function describeDecisionProviderKeys() {
             ...(descriptor.envVars.fallbacks ?? []),
         ].filter((name) => typeof name === "string" && name !== "");
         const required = descriptor.envVars.extraRequired ?? [];
-        return `${[keys.join(" or "), ...required].join(" and ")} for ${descriptor.name}`;
+        const guard = descriptor.ambientKeyGuard;
+        const unlessRouted = descriptor.envVars.baseURL
+            ? `, unless ${descriptor.envVars.baseURL} is set`
+            : "";
+        const named = guard
+            ? [
+                ...guard.baseURLEnvVars,
+                ...(guard.credentialBaseURLs ?? []).map(({ key, field }) => `credentials.${key}.${field}`),
+            ]
+            : [];
+        const caveat = guard
+            ? ` (ignored while ${listOr(named)} names a host outside ${listOr(guard.trustedOrigins)}${unlessRouted})`
+            : "";
+        return `${[keys.join(" or "), ...required].join(" and ")} for ${descriptor.name}${caveat}`;
     }).join(", or ");
 }

package/dist/providers/catalog/index.generated.d.ts

@@ -2,4 +2,4 @@ import type { DecideCatalogJson, ProviderCatalogJson } from "../../types/index.j
 export declare const CATALOG_JSON_ENTRIES: ProviderCatalogJson[];
 export declare const CATALOG_PROVIDER_IDS: readonly ["a2agent", "abliteration", "above-dev", "ai21", "aiand", "aihubmix", "aionlabs", "ambient", "api-route", "arcee", "atlas-cloud", "avian-io", "baidu-qianfan", "baseten", "bee-heossi", "byteplus-modelark", "bytez", "cerebras", "charm-hyper", "chutes", "cloudflare", "crusoe", "dashscope", "deepinfra", "deepseek", "empiriolabs", "featherless-ai", "fireworks", "friendli", "gmicloud", "gradientai", "groq", "hetzner-inference", "huggingface", "inception-labs", "inceptron", "inco", "inference-net", "io-intelligence", "koscompute", "lemonfox-ai", "lilac", "llmtech", "longcat", "mancer", "meta-model-api", "minimax", "mistral", "moark", "modelscope", "moonshot-ai", "morph", "naver-clova-studio", "nebius", "neuralwatt", "novita", "ovhcloud", "parasail", "pareto-inference", "perplexity", "poolside", "prime-intellect", "reka", "runinfra", "sakana-ai", "sambanova", "sarvam", "scaleway", "siliconflow", "stackit", "stepfun", "subconscious", "synthetic", "telnyx", "thinking-machines", "tinfoil", "together-ai", "umans-ai", "upstage", "venice-ai", "vispark", "vultr-inference", "wafer", "wandb-inference", "xai", "xiaomi-mimo", "z-ai"];
 export declare const DECIDE_CATALOG_JSON_ENTRIES: DecideCatalogJson[];
-export declare const DECIDE_CATALOG_PROVIDER_IDS: readonly ["laya", "subq", "xor"];
+export declare const DECIDE_CATALOG_PROVIDER_IDS: readonly ["laya", "openai-decisions", "subq", "xor"];

package/dist/providers/catalog/index.generated.js

@@ -57,6 +57,7 @@ import naverClovaStudioJson from "./naver-clova-studio.json" with { type: "json"
 import nebiusJson from "./nebius.json" with { type: "json" };
 import neuralwattJson from "./neuralwatt.json" with { type: "json" };
 import novitaJson from "./novita.json" with { type: "json" };
+import openaiDecisionsJson from "./openai-decisions.json" with { type: "json" };
 import ovhcloudJson from "./ovhcloud.json" with { type: "json" };
 import parasailJson from "./parasail.json" with { type: "json" };
 import paretoInferenceJson from "./pareto-inference.json" with { type: "json" };
@@ -278,7 +279,13 @@ export const CATALOG_PROVIDER_IDS = [
 ];
 export const DECIDE_CATALOG_JSON_ENTRIES = [
     layaJson,
+    openaiDecisionsJson,
     subqJson,
     xorJson,
 ].map(asDecideEntry);
-export const DECIDE_CATALOG_PROVIDER_IDS = ["laya", "subq", "xor"];
+export const DECIDE_CATALOG_PROVIDER_IDS = [
+    "laya",
+    "openai-decisions",
+    "subq",
+    "xor",
+];

package/dist/providers/catalog/openai-decisions.json

@@ -0,0 +1,75 @@
+{
+    "$schema": "./provider-catalog.schema.json",
+    "id": "openai-decisions",
+    "displayName": "OpenAI Decisions",
+    "enumTypeName": "OpenAIDecisionsModels",
+    "aliases": [],
+    "inferenceKinds": ["decide"],
+    "wire": {
+        "baseURL": "https://api.openai.com",
+        "envOverrides": { "apiKey": "OPENAI_API_KEY" }
+    },
+    "models": {
+        "default": "gpt-6-luna",
+        "topModels": ["gpt-6-luna"],
+        "catalog": {
+            "gpt-6-luna": {
+                "contextWindow": 1050000,
+                "maxOutputTokens": 256,
+                "vision": true,
+                "status": "preview",
+                "description": "GPT-6 Luna on OpenAI's Decisions API (public beta): text and images"
+            }
+        }
+    },
+    "timeouts": { "decideMs": 10000 },
+    "decisionLimits": {
+        "maxStateTokens": 922000,
+        "advisory": true,
+        "media": { "maxImages": 8, "video": false, "maxRequestBytes": 33554432 }
+    },
+    "decide": {
+        "dialect": "openai-decisions",
+        "order": 7,
+        "baseURLNormalize": ["strip-trailing-slash", "strip-v1-suffix"],
+        "baseURLShape": "origin",
+        "ambientKeyGuard": {
+            "baseURLEnvVars": ["OPENAI_BASE_URL", "OPENAI_API_BASE"],
+            "trustedOrigins": ["https://api.openai.com"],
+            "credentialBaseURLs": [{ "key": "openai", "field": "baseURL" }]
+        },
+        "endpoint": "{baseURL}/v1/decisions",
+        "model": { "placement": "body" },
+        "requestIdHeaders": ["x-request-id"],
+        "errors": {
+            "rules": [
+                { "status": 401, "kind": "authentication" },
+                { "status": 429, "kind": "rate_limit", "retryable": false },
+                { "status": 503, "kind": "overloaded" },
+                { "statusMin": 500, "kind": "server" }
+            ],
+            "default": "invalid_request",
+            "bodyShapes": [{ "path": "error.message" }]
+        }
+    },
+    "setup": {
+        "url": "https://platform.openai.com/api-keys",
+        "apiKeyFormat": null,
+        "billingPolicy": "no-free-tier",
+        "description": "OpenAI API key (the same OPENAI_API_KEY the openai chat provider reads)",
+        "instructions": [
+            "1. Create an API key at https://platform.openai.com/api-keys",
+            "2. Set {apiKeyEnvVar}; it is shared with the openai chat provider",
+            "3. With no other decision provider configured, {apiKeyEnvVar} alone makes openai-decisions the default decision provider (the last resort, after every other one, as PERPLEXITY_API_KEY does for perplexity-decider), unless OPENAI_BASE_URL, OPENAI_API_BASE or credentials.openai.baseURL names a host other than https://api.openai.com: the key is then taken to be a gateway's and is not used by default. To use it while another provider is configured, name it in a call (provider: \"openai-decisions\" or --provider openai-decisions), but only if the key is OpenAI's, because a named call sends the environment key to api.openai.com. Behind a gateway, route it on purpose with OPENAI_DECISIONS_BASE_URL or credentials.openaiDecisions, or do not use it",
+            "4. Optional: OPENAI_DECISIONS_BASE_URL (an origin) and OPENAI_DECISIONS_MODEL (default gpt-6-luna)"
+        ]
+    },
+    "evidence": {
+        "rosterVerified": {
+            "date": "2026-10-07",
+            "method": "OpenAI's Decisions guide and gpt-6-luna model page saved 2026-10-07: gpt-6-luna is the only model the endpoint supports. Read from documentation; no live call"
+        },
+        "liveMatrix": null,
+        "addedInPR": "https://github.com/juspay/neurolink/pull/1996"
+    }
+}

package/dist/providers/catalog/provider-catalog.schema.json

@@ -64,7 +64,7 @@
           "type": "object",
           "additionalProperties": false,
           "required": ["maxImages", "video", "maxRequestBytes"],
-          "description": "What a request may carry besides text. Requires decide.media, which names the body keys the prepared media is written under.",
+          "description": "What a request may carry besides text. With dialect system-one it requires decide.media, which names the body keys the prepared media is written under; with openai-decisions it stands alone and video must be false.",
           "properties": {
             "maxImages": { "type": "integer", "minimum": 1 },
             "video": {
@@ -102,7 +102,10 @@
       "required": ["dialect", "order", "endpoint", "model", "errors"],
       "description": "Decide entries only: how a decision provider is called and how its errors are classified.",
       "properties": {
-        "dialect": { "enum": ["system-one"] },
+        "dialect": {
+          "enum": ["system-one", "openai-decisions"],
+          "description": "The wire family. openai-decisions places images in the request input itself, so it refuses decide.media, a video allowance and any model placement other than body (enforced by the zod schema)."
+        },
         "order": {
           "type": "integer",
           "minimum": 1,
@@ -143,12 +146,62 @@
           "type": "object",
           "additionalProperties": false,
           "required": ["imagesKey"],
-          "description": "Body keys prepared media is written under, after model, state and questions: imagesKey only when the request carries an image, videoKey only when it carries a video, and the two differ. Requires decisionLimits.media; videoKey is required exactly when that allowance's video is true.",
+          "description": "Body keys prepared media is written under, after model, state and questions: imagesKey only when the request carries an image, videoKey only when it carries a video, and the two differ. With dialect system-one it requires decisionLimits.media, and videoKey is required exactly when that allowance's video is true. Not valid with openai-decisions.",
           "properties": {
             "imagesKey": { "$ref": "#/definitions/decideMediaKey" },
             "videoKey": { "$ref": "#/definitions/decideMediaKey" }
           }
         },
+        "ambientKeyGuard": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["baseURLEnvVars", "trustedOrigins"],
+          "description": "Keeps a key found only in the environment from becoming the default decision provider while another host is named. The key is skipped for default resolution when any baseURLEnvVars variable, or any credentials field in credentialBaseURLs (read from the credentials the resolver is given: the instance's merged with the call's), holds a URL whose origin (scheme, host and port, compared case-insensitively; path and trailing slash ignored) is not in trustedOrigins; a value that does not parse as an http(s) URL counts as untrusted and a blank one as unset. It does not apply when the provider's own base-URL variable is set or credentials supply a key or a base URL, and never to a call that names the provider. The zod schema also refuses what JSON Schema cannot say: an origin without a valid host (such as 999.999.999.999) or with a port above 65535, a variable, an origin or a credentials field listed twice, and the provider's own base-URL variable in baseURLEnvVars.",
+          "properties": {
+            "baseURLEnvVars": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 8,
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "maxLength": 64,
+                "pattern": "^[A-Z][A-Z0-9_]*$"
+              }
+            },
+            "trustedOrigins": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 8,
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "maxLength": 100,
+                "pattern": "^https?://[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*(:[0-9]{1,5})?$"
+              }
+            },
+            "credentialBaseURLs": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 8,
+              "uniqueItems": true,
+              "description": "Credentials fields that move the key's other users off the vendor's host, such as the chat provider's credentials.openai.baseURL. Omitted means only the environment is read.",
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["key", "field"],
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "maxLength": 64,
+                    "pattern": "^[a-zA-Z][a-zA-Z0-9]*$"
+                  },
+                  "field": { "enum": ["baseURL"] }
+                }
+              }
+            }
+          }
+        },
         "requestIdHeaders": {
           "type": "array",
           "items": {