@open-everywhere/adapters 0.6.0 → 0.8.0

package/dist/agent/model/gateway-probe.js

@@ -12,6 +12,12 @@
 //   ② REACHABILITY, from one GET of the gateway's PUBLIC model catalog — the same unauthenticated
 //      endpoint `scripts/seed-model-catalog-cache.ts` reads.
 //
+//   ③ THE MODEL CONFIG (OPE-2556), when the app registered its models: one GET of the public
+//      `/v1/models/<id>/endpoints` read per model, judged against `models.targets` and `models.dataPolicy`
+//      (model-config-check.ts). A demand no provider can meet turns the row "no". The route is public, so the
+//      detail names no model, provider or target, and counts nothing. The answer is cached for ten minutes, so an
+//      anonymous caller cannot make the route fan out a read per request.
+//
 // It does NOT prove the deployment's credential is ACCEPTED: the only call that proves that is an
 // inference call, which is neither cheap nor free, and a status route an unbounded caller can poke
 // must not be able to spend money. The detail string says so in as many words, because a status
@@ -19,18 +25,25 @@
 //
 // FAIL-SOFT and BOUNDED: a 2-second abort, and any throw answers "no" with no vendor error text
 // forwarded (a fetch failure's message carries the host, and the status route is public).
-import { registerStatusProbe, onVercel } from "@open-everywhere/core/agent/adapter-api.js";
+import { DEFAULT_MODEL_VIA, getSettings, modelTargetFor, registerStatusProbe, onVercel, } from "@open-everywhere/core/agent/adapter-api.js";
+import { checkModelConfig } from "./model-config-check.js";
+import { targetBaseUrl } from "./target-url.js";
 /** The gateway's PUBLIC, unauthenticated model catalog — eve's own `AI_GATEWAY_MODELS_CATALOG_URL`. */
 export const GATEWAY_CATALOG_URL = "https://ai-gateway.vercel.sh/v1/models/catalog";
 /** How long the probe waits before it calls the gateway unreachable. */
 export const GATEWAY_PROBE_TIMEOUT_MS = 2_000;
+/** The `gateway` target's base URL: `models.targets.gateway.url`, else the deprecated `OE_AI_GATEWAY_URL` in `env`. */
+function gatewayBaseUrl(env = process.env) {
+    const targets = getSettings().models.targets;
+    return targetBaseUrl(DEFAULT_MODEL_VIA, modelTargetFor(DEFAULT_MODEL_VIA, targets), env);
+}
 /**
- * The catalog URL this deployment probes. `OE_AI_GATEWAY_URL` retargets the whole gateway (a relay,
- * an on-prem proxy, a fixture), and it names the CHAT base (`…/v4/ai`), so the catalog is taken
- * from its ORIGIN rather than appended to it.
+ * The catalog URL this deployment probes. The `gateway` target's url (or the deprecated `OE_AI_GATEWAY_URL`)
+ * retargets the whole gateway (a relay, an on-prem proxy, a fixture), and it names the CHAT base (`…/v4/ai`), so the
+ * catalog is taken from its ORIGIN rather than appended to it.
  */
 export function gatewayCatalogUrl(env = process.env) {
-    const override = env.OE_AI_GATEWAY_URL?.trim();
+    const override = gatewayBaseUrl(env);
     if (!override)
         return GATEWAY_CATALOG_URL;
     try {
@@ -42,6 +55,54 @@ export function gatewayCatalogUrl(env = process.env) {
         return GATEWAY_CATALOG_URL;
     }
 }
+/** How long one config-check answer is reused. */
+const MODEL_CONFIG_CHECK_TTL_MS = 10 * 60_000;
+const CONFIG_CHECK_CACHE = {};
+let registeredModels;
+/**
+ * Register the models the deployment can resolve, so the `model-route` probe also runs the live config check.
+ * Called once from the app's boot wiring, beside the other registrations.
+ */
+export function registerModelConfigCheck(models) {
+    registeredModels = models;
+}
+/** The config-check answer in closed-vocabulary words, for the PUBLIC status route. Pure. */
+function publicConfigWords(r) {
+    if (r.met === "no")
+        return "the model config has a models.dataPolicy, providers.only or target dataPolicy demand that no provider can serve for at least one model — run `npm run check:model-config` for the names";
+    // An unused `providers.only` name is a warning on a config that was fully measured: say so, not "not measured".
+    if (r.met === "unknown" && r.findings.every((f) => f.row.endsWith(".providers.only"))) {
+        return "the model config can be served; a providers.only name serves none of the checked models — run `npm run check:model-config` for the names";
+    }
+    if (r.met === "unknown")
+        return "the model config was not fully measured — run `npm run check:model-config` for the details";
+    return "the model config can be served";
+}
+/** Run the config check, or reuse an answer younger than {@link MODEL_CONFIG_CHECK_TTL_MS}. Never throws. */
+async function cachedConfigCheck(deps, models) {
+    const cache = deps.cache ?? CONFIG_CHECK_CACHE;
+    const now = (deps.now ?? Date.now)();
+    if (cache.value !== undefined && now - cache.value.at < MODEL_CONFIG_CHECK_TTL_MS)
+        return cache.value.result;
+    const env = deps.env ?? process.env;
+    let result;
+    try {
+        const settings = getSettings().models;
+        result = await checkModelConfig({
+            models: models(),
+            targets: settings.targets,
+            policy: settings.dataPolicy,
+            baseUrlFor: (via) => targetBaseUrl(via, modelTargetFor(via, settings.targets), env),
+            timeoutMs: GATEWAY_PROBE_TIMEOUT_MS,
+            ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+        });
+    }
+    catch {
+        result = { met: "unknown", findings: [{ met: "unknown", row: "config", detail: "the model config could not be read" }], checked: 0 };
+    }
+    cache.value = { at: now, result };
+    return result;
+}
 /** Run the probe once. Exported so a test drives every arm with no network. */
 export async function probeGatewayRoute(deps = {}) {
     const env = deps.env ?? process.env;
@@ -52,10 +113,10 @@ export async function probeGatewayRoute(deps = {}) {
     // owes nobody a model catalog and may need no key of ours. Both of this probe's facts are then
     // about the shipped Vercel gateway, not about the route the deployment actually uses — and
     // "measured, and it does not hold" would be false for a deployment whose models route fine.
-    const retargeted = (env.OE_AI_GATEWAY_URL ?? "").trim().length > 0;
+    const retargeted = gatewayBaseUrl(env) !== undefined;
     if (!vercel && !keySet) {
         if (retargeted) {
-            return { met: "unknown", detail: "the model route is retargeted by OE_AI_GATEWAY_URL and holds no AI_GATEWAY_API_KEY — a relay may need neither, so this was not measured" };
+            return { met: "unknown", detail: "the model route is retargeted (models.targets.gateway.url) and holds no AI_GATEWAY_API_KEY — a relay may need neither, so this was not measured" };
         }
         return { met: "no", detail: "no gateway credential: off Vercel the deployment needs AI_GATEWAY_API_KEY (on Vercel, OIDC authenticates it)" };
     }
@@ -74,10 +135,16 @@ export async function probeGatewayRoute(deps = {}) {
             }
             return { met: "no", detail: `the model gateway answered HTTP ${res.status} to a catalog read; the credential posture is ${credential}` };
         }
-        return {
-            met: "yes",
-            detail: `the model gateway answered a catalog read and the credential posture is ${credential} — this does not prove an inference call is authorised`,
-        };
+        const reached = `the model gateway answered a catalog read and the credential posture is ${credential} — this does not prove an inference call is authorised`;
+        const models = deps.models ?? registeredModels;
+        if (models === undefined)
+            return { met: "yes", detail: reached };
+        // ③ The config check. A demand no provider can meet makes the row "no": every call of that model would fail closed.
+        // An unknown part keeps "yes", because the route itself was measured, and the detail says what was not.
+        // 🔴 THE STATUS ROUTE IS PUBLIC, so the detail is closed-vocabulary prose: no model id, no provider slug, no target
+        // name and no count. `npm run check:model-config` names them, from the app.
+        const check = await cachedConfigCheck(deps, models);
+        return { met: check.met === "no" ? "no" : "yes", detail: `${reached}; ${publicConfigWords(check)}` };
     }
     catch {
         return { met: "no", detail: `the model gateway did not answer within ${GATEWAY_PROBE_TIMEOUT_MS} ms; the credential posture is ${credential}` };

package/dist/agent/model/gateway-probe.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-probe.js","sourceRoot":"","sources":["../../../agent/model/gateway-probe.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,2EAA2E;AAC3E,EAAE;AACF,mGAAmG;AACnG,+FAA+F;AAC/F,EAAE;AACF,8DAA8D;AAC9D,EAAE;AACF,4FAA4F;AAC5F,mGAAmG;AACnG,iDAAiD;AACjD,kGAAkG;AAClG,6DAA6D;AAC7D,EAAE;AACF,kGAAkG;AAClG,mGAAmG;AACnG,gGAAgG;AAChG,sEAAsE;AACtE,EAAE;AACF,gGAAgG;AAChG,0FAA0F;AAE1F,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAoB,MAAM,4CAA4C,CAAC;AAE7G,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAAG,gDAAgD,CAAC;AAEpF,wEAAwE;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,oBAAoB,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;QAC1F,0FAA0F;QAC1F,OAAO,mBAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAQD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,GAAqB,EAAE;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,iGAAiG;IACjG,iGAAiG;IACjG,+FAA+F;IAC/F,2FAA2F;IAC3F,4FAA4F;IAC5F,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,yIAAyI,EAAE,CAAC;QAC/K,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,8GAA8G,EAAE,CAAC;IAC/I,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,8FAA8F;YAC9F,6FAA6F;YAC7F,0CAA0C;YAC1C,IAAI,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,qEAAqE,GAAG,CAAC,MAAM,kEAAkE,UAAU,EAAE,EAAE,CAAC;YACnM,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,GAAG,CAAC,MAAM,iDAAiD,UAAU,EAAE,EAAE,CAAC;QAC3I,CAAC;QACD,OAAO;YACL,GAAG,EAAE,KAAK;YACV,MAAM,EAAE,2EAA2E,UAAU,wDAAwD;SACtJ,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,2CAA2C,wBAAwB,kCAAkC,UAAU,EAAE,EAAE,CAAC;IAClJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,yBAAyB;IACvC,mBAAmB,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"gateway-probe.js","sourceRoot":"","sources":["../../../agent/model/gateway-probe.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,2EAA2E;AAC3E,EAAE;AACF,mGAAmG;AACnG,+FAA+F;AAC/F,EAAE;AACF,8DAA8D;AAC9D,EAAE;AACF,4FAA4F;AAC5F,mGAAmG;AACnG,iDAAiD;AACjD,kGAAkG;AAClG,6DAA6D;AAC7D,EAAE;AACF,6FAA6F;AAC7F,2GAA2G;AAC3G,8GAA8G;AAC9G,kHAAkH;AAClH,0EAA0E;AAC1E,EAAE;AACF,kGAAkG;AAClG,mGAAmG;AACnG,gGAAgG;AAChG,sEAAsE;AACtE,EAAE;AACF,gGAAgG;AAChG,0FAA0F;AAE1F,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,QAAQ,GAGT,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAAG,gDAAgD,CAAC;AAEpF,wEAAwE;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAE9C,uHAAuH;AACvH,SAAS,cAAc,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC1D,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7C,OAAO,aAAa,CAAC,iBAAiB,EAAE,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,oBAAoB,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;QAC1F,0FAA0F;QAC1F,OAAO,mBAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAaD,kDAAkD;AAClD,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAC;AAM9C,MAAM,kBAAkB,GAAqB,EAAE,CAAC;AAEhD,IAAI,gBAAgE,CAAC;AAErE;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwC;IAC/E,gBAAgB,GAAG,MAAM,CAAC;AAC5B,CAAC;AAED,6FAA6F;AAC7F,SAAS,iBAAiB,CAAC,CAAoB;IAC7C,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,yLAAyL,CAAC;IACrN,gHAAgH;IAChH,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,0IAA0I,CAAC;IACpJ,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,4FAA4F,CAAC;IAC7H,OAAO,gCAAgC,CAAC;AAC1C,CAAC;AAED,6GAA6G;AAC7G,KAAK,UAAU,iBAAiB,CAAC,IAAsB,EAAE,MAAwC;IAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,yBAAyB;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC;QACtC,MAAM,GAAG,MAAM,gBAAgB,CAAC;YAC9B,MAAM,EAAE,MAAM,EAAE;YAChB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,UAAU;YAC3B,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;YACnF,SAAS,EAAE,wBAAwB;YACnC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACvI,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,GAAqB,EAAE;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,iGAAiG;IACjG,iGAAiG;IACjG,+FAA+F;IAC/F,2FAA2F;IAC3F,4FAA4F;IAC5F,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,iJAAiJ,EAAE,CAAC;QACvL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,8GAA8G,EAAE,CAAC;IAC/I,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,8FAA8F;YAC9F,6FAA6F;YAC7F,0CAA0C;YAC1C,IAAI,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,qEAAqE,GAAG,CAAC,MAAM,kEAAkE,UAAU,EAAE,EAAE,CAAC;YACnM,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,GAAG,CAAC,MAAM,iDAAiD,UAAU,EAAE,EAAE,CAAC;QAC3I,CAAC;QACD,MAAM,OAAO,GAAG,2EAA2E,UAAU,wDAAwD,CAAC;QAC9J,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACjE,oHAAoH;QACpH,wGAAwG;QACxG,oHAAoH;QACpH,4EAA4E;QAC5E,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,KAAK,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,2CAA2C,wBAAwB,kCAAkC,UAAU,EAAE,EAAE,CAAC;IAClJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,yBAAyB;IACvC,mBAAmB,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/dist/agent/model/gateway-vision.d.ts

@@ -3,9 +3,11 @@ import { type ImageDescribeResult, type ImageDescribeUsage, type ImageDescriber
 export interface GatewayVisionDefaults {
     /** Gateway vision model id, e.g. "alibaba/qwen3-vl-instruct". */
     readonly id: string;
+    /** The `models.targets` entry the call goes through (OPE-2556). Absent: `gateway`. */
+    readonly via?: string;
     /**
-     * providerOptions.gateway for the call, forwarded verbatim. Absent in the reference config: ZDR is the
-     * gateway's org policy now. A self-host wanting a per-call posture passes one here.
+     * providerOptions.gateway for the call, forwarded verbatim. Absent in the reference config. The deployment's
+     * `models.dataPolicy` rows ride the call whatever this holds, and win over it.
      */
     readonly gateway?: Record<string, unknown>;
 }

package/dist/agent/model/gateway-vision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-vision.d.ts","sourceRoot":"","sources":["../../../agent/model/gateway-vision.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAEpB,MAAM,4CAA4C,CAAC;AAEpD,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAiBnE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,CAE/D;AAED;;0DAE0D;AAC1D,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACvG,QAAQ,CAAC,kBAAkB,CAAC,EAAE;YAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,kBAAkB,CAuCxF;AAED;;yEAEyE;AACzE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,cAAc,CA8BrF;AAED;;mFAEmF;AACnF,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAEnF"}
+{"version":3,"file":"gateway-vision.d.ts","sourceRoot":"","sources":["../../../agent/model/gateway-vision.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAEpB,MAAM,4CAA4C,CAAC;AAEpD,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAiBnE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,CAE/D;AAED;;0DAE0D;AAC1D,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACvG,QAAQ,CAAC,kBAAkB,CAAC,EAAE;YAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,kBAAkB,CAuCxF;AAED;;yEAEyE;AACzE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,cAAc,CA8BrF;AAED;;mFAEmF;AACnF,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAEnF"}

package/dist/agent/model/gateway-vision.js

@@ -1,6 +1,8 @@
-// Gateway transport for the image describer — core owns the seam. Zero-data-retention is enforced AT THE
-// GATEWAY by org policy; the call is fail-closed, reports its own spend, and must NOT stamp the model.
-import { gateway, generateText } from "ai";
+// Gateway transport for the image describer — core owns the seam. The model comes from gateway.ts, so the call
+// carries `models.dataPolicy` (OPE-2535); a gateway's own org policy applies on top. The call is fail-closed,
+// reports its own spend, and must NOT stamp the model.
+import { generateText } from "ai";
+import { gatewayLanguageModel } from "./gateway.js";
 import { registerImageDescriber, } from "@open-everywhere/core/agent/adapter-api.js";
 // The instruction: describe, transcribe on-image text, reply STRICT JSON. Kept here rather than in core
 // because it is paired with THIS transport's message shape.
@@ -94,7 +96,7 @@ export function gatewayImageDescriber(defaults) {
             let res;
             try {
                 res = await generateText({
-                    model: gateway(defaults.id),
+                    model: gatewayLanguageModel(defaults.id, defaults.via),
                     messages: [
                         {
                             role: "user",

package/dist/agent/model/gateway-vision.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-vision.js","sourceRoot":"","sources":["../../../agent/model/gateway-vision.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,uGAAuG;AAEvG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,EAKL,sBAAsB,GACvB,MAAM,4CAA4C,CAAC;AAapD,wGAAwG;AACxG,4DAA4D;AAC5D,MAAM,aAAa,GACjB,0FAA0F;IAC1F,8DAA8D;IAC9D,4EAA4E;IAC5E,8FAA8F;IAC9F,8EAA8E,CAAC;AAEjF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAA4B,CAAC;YAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,GAAY;IACtD,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChG,CAAC;AAeD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,GAAwB;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,GAAwC,EAAE;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;IACvH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,GAAG,CAAC,GAAuB,EAAE;QACxC,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,YAAY,GAAG,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAK,EAAE,CAAC,cAAc,CAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,cAAc,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACxJ,2FAA2F;IAC3F,kGAAkG;IAClG,2EAA2E;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAG;QACV,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAChC,YAAY,EAAE,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;QAClC,eAAe,EAAE,GAAG,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,CAAC;QAC3D,gBAAgB,EAAE,GAAG,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;QAC7D,4GAA4G;QAC5G,0GAA0G;QAC1G,eAAe,EAAE,GAAG,CAAC,CAAC,EAAE,kBAAkB,EAAE,eAAe,CAAC;KAC7D,CAAC;IACF,OAAO;QACL,KAAK,EAAE,EAAE;QACT,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,QAA+B;IACnE,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,GAAyB;YACtC,IAAI,GAA2C,CAAC;YAChD,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,YAAY,CAAC;oBACvB,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3B,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,MAAM;4BACZ,OAAO,EAAE;gCACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,mBAAmB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE;gCAChG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;6BAC7D;yBACF;qBACF;oBACD,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;wBAChC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAA2D,EAAE;wBAC7G,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,oFAAoF;gBACpF,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,6FAA6F;YAC7F,8FAA8F;YAC9F,OAAO,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,6BAA6B,CAAC,QAA+B;IAC3E,sBAAsB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"gateway-vision.js","sourceRoot":"","sources":["../../../agent/model/gateway-vision.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,8GAA8G;AAC9G,uDAAuD;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAKL,sBAAsB,GACvB,MAAM,4CAA4C,CAAC;AAepD,wGAAwG;AACxG,4DAA4D;AAC5D,MAAM,aAAa,GACjB,0FAA0F;IAC1F,8DAA8D;IAC9D,4EAA4E;IAC5E,8FAA8F;IAC9F,8EAA8E,CAAC;AAEjF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAA4B,CAAC;YAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,GAAY;IACtD,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChG,CAAC;AAeD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,GAAwB;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,GAAwC,EAAE;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;IACvH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,GAAG,CAAC,GAAuB,EAAE;QACxC,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,YAAY,GAAG,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAK,EAAE,CAAC,cAAc,CAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,cAAc,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACxJ,2FAA2F;IAC3F,kGAAkG;IAClG,2EAA2E;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAG;QACV,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAChC,YAAY,EAAE,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;QAClC,eAAe,EAAE,GAAG,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,CAAC;QAC3D,gBAAgB,EAAE,GAAG,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;QAC7D,4GAA4G;QAC5G,0GAA0G;QAC1G,eAAe,EAAE,GAAG,CAAC,CAAC,EAAE,kBAAkB,EAAE,eAAe,CAAC;KAC7D,CAAC;IACF,OAAO;QACL,KAAK,EAAE,EAAE;QACT,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,QAA+B;IACnE,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,GAAyB;YACtC,IAAI,GAA2C,CAAC;YAChD,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,YAAY,CAAC;oBACvB,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC;oBACtD,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,MAAM;4BACZ,OAAO,EAAE;gCACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,mBAAmB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE;gCAChG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;6BAC7D;yBACF;qBACF;oBACD,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;wBAChC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAA2D,EAAE;wBAC7G,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,oFAAoF;gBACpF,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,6FAA6F;YAC7F,8FAA8F;YAC9F,OAAO,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,6BAA6B,CAAC,QAA+B;IAC3E,sBAAsB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/agent/model/gateway.d.ts

@@ -1,21 +1,94 @@
 import { gateway } from "ai";
-import { type ModelRoute, type ModelBackend, type RoutedCallOptions } from "@open-everywhere/core/agent/adapter-api.js";
+import { type ModelRoute, type ModelBackend, type RoutedCallOptions, type ModelDataPolicy, type ModelTarget } from "@open-everywhere/core/agent/adapter-api.js";
+export { DEPRECATED_GATEWAY_URL_ENV, targetBaseUrl } from "./target-url.js";
 type GatewayModel = ReturnType<typeof gateway>;
+type GatewayProvider = typeof gateway;
 /** The gateway's own host when {@link GATEWAY_BASE_URL} is unset. It must match the `ai` package's default base URL. */
 export declare const DEFAULT_GATEWAY_HOST = "ai-gateway.vercel.sh";
 /** The one host the model call reaches: the retarget's host, else the default. An unparseable retarget falls back to the default host. */
 export declare function gatewayHost(baseUrl: string | undefined): string;
-/** The one host this deployment's gateway calls reach — what every host-plane push must keep declaring. */
-export declare const GATEWAY_TARGET_HOST: string;
+/** The one host the `gateway` target's calls reach (its `url`, else the deprecated env var, else the default). */
+export declare function gatewayTargetHost(): string;
 /** Add `hosts` to this process's host plane and return the shared fetch (undefined off the proxy tier). */
 export declare function sharedHostPlaneFetch(hosts: readonly string[]): typeof fetch | undefined;
-/** The gateway provider this backend resolves model ids through — retargeted only when
- *  {@link GATEWAY_BASE_URL} names a different host. */
-declare const provider: import("@ai-sdk/gateway").GatewayProvider;
+/**
+ * The Vercel AI Gateway options for one `models.dataPolicy`. Pure. An absent row adds no key, so the shipped `{}`
+ * changes no request byte.
+ */
+export declare function vercelDataPolicyOptions(p: ModelDataPolicy): Record<string, unknown>;
+/** The call-options shape every model kind shares: language, transcription and embedding calls all carry it. */
+type ProviderOptionsCarrier = {
+    readonly providerOptions?: Record<string, unknown> | undefined;
+};
+/**
+ * Put the policy on one call's options. Pure. The policy's keys WIN over the call's own gateway keys, so a call
+ * cannot weaken a row (`zeroDataRetention: false` on a call is overwritten). Every other key passes through. A
+ * policy that demands nothing returns the options unchanged.
+ */
+export declare function withDataPolicy<T extends ProviderOptionsCarrier>(options: T, p: ModelDataPolicy): T;
+/**
+ * The demands on a call, in the words of the settings file, for an error: `models.dataPolicy (region eu)`,
+ * `models.targets.gateway.providers.only (openai, azure)`, `models.targets.mistral.dataPolicy (zeroRetention)`, or
+ * several joined with " + ".
+ */
+export declare function demandLabel(p: ModelDataPolicy, t?: ModelTarget, via?: string): string;
+/**
+ * Put a target's rows and the data policy on one call's options. Pure but for a refusal. The order of the merge:
+ *  1. the target's `options` are a FLOOR: a call's own key wins;
+ *  2. the target's `providers.order` applies when the call names no `order` (a route's `providerOrder` wins);
+ *  3. the target's `providers.only` is a DEMAND: a call's own `only` narrows it to the intersection, and an empty
+ *     intersection REFUSES (an empty `only` would read as no filter at all);
+ *  4. the policy's keys win over everything. The policy is `models.dataPolicy` plus the target's own `dataPolicy` rows
+ *     (OPE-2531): a target adds rows and never removes one.
+ * A target with no rows and a policy that demands nothing return the options unchanged, so the shipped value changes
+ * no request byte.
+ */
+export declare function withTargetRows<T extends ProviderOptionsCarrier>(options: T, t: ModelTarget | undefined, global: ModelDataPolicy, via?: string): T;
+/**
+ * Name the policy rows on a refusal the policy caused. A model with no provider that meets the rows fails with an
+ * error that says which rows, and which model: "models.dataPolicy (region eu): no provider serves …". Any other
+ * error, or any error with no policy set, passes through unchanged.
+ */
+export declare function dataPolicyCallError(modelId: string, p: ModelDataPolicy, err: unknown, t?: ModelTarget, via?: string): unknown;
+/**
+ * A model that carries the data policy on EVERY call it sends. A Proxy, so the model keeps its class, its
+ * `provider`, its `modelId` and every other member: eve and the AI SDK see the same object shape. Only the calls
+ * change: the policy merges into the options, and a refusal it caused names the rows.
+ */
+export declare function policyModel<M extends object>(model: M, via?: string): M;
+/** A gateway LANGUAGE model on the target `via` names (absent: `gateway`), with its url and the host-plane fetch,
+ *  carrying the target's rows and the data policy. The one way a module outside this file gets a gateway model. */
+export declare function gatewayLanguageModel(id: string, via?: string): GatewayModel;
+/**
+ * A provider whose every model-building member (`languageModel`, its `chat` alias, `evaluationModel`, `reranking`,
+ * `experimental_batch`, …) hands out policy models. A denylist, not an allow-list: a member the SDK adds later is
+ * wrapped by default. A member's own properties (`experimental_transcription.getToken`) stay on it.
+ */
+export declare function policyProvider<P extends object>(base: P): P;
+/** Test seam: let the next bare-id call note the gap again. */
+export declare function _resetBareGapNoticeForTest(): void;
+/**
+ * THE BARE-ID PROVIDER (OPE-2566). A provider that sends each bare id through the target its role names
+ * (core model/bare-model-via.ts): the role that names the id, else the primary role's target, else `gateway`. Every
+ * model it builds is a policy model on that target, so the target's url, provider pin and data-policy rows ride the
+ * call. It reads the table at CALL time: the app registers its roles after this module loads. A member's own
+ * properties (`experimental_transcription.getToken`) and the account reads use the deployment default's target.
+ * Exported for tests.
+ */
+export declare function bareIdProvider(): GatewayProvider;
+/**
+ * A foreign default provider, kept, behind a guard: with no policy it is untouched; under a policy every model call
+ * through it refuses, because nothing proves that provider honours the rows. The guard reads the target the bare id
+ * goes through (OPE-2566): that target's rows count, and a target other than `gateway` refuses too, because the
+ * foreign provider would send the call somewhere else. Exported for tests.
+ */
+export declare function foreignProviderGuard<P extends object>(base: P): P;
 /** Static defaults for one routed slot — mirrors what a plain string config said. */
 export interface GatewayRoutedDefaults {
-    /** Default gateway model id (what unrouted channels use), e.g. "zai/glm-5.2". */
+    /** Default gateway model id (what unrouted channels use), e.g. "openai/gpt-6-luna". */
     readonly id: string;
+    /** The `models.targets` entry the role's calls go through (OPE-2556). A route's own `via` wins. Absent: `gateway`. */
+    readonly via?: string;
     /**
      * Gateway providerOptions applied when the CALL carries none — a floor, since turn calls carry their own.
      * Any gateway option is forwarded verbatim; this mapping has no allow-list of keys.
@@ -24,7 +97,8 @@ export interface GatewayRoutedDefaults {
 }
 /**
  * Map a route's provider hints onto one call's gateway options. Pure. A MODEL CHANGE strips the pin keys — a
- * pin set for one model is broken for another — and a route's `providers` becomes `order`, never `only`.
+ * pin set for one model is broken for another — and a route's `providerOrder` becomes `order`, never `only`. The
+ * target's own rows (`providers.only`, `providers.order`, `options`) join later, on every call (`withTargetRows`).
  */
 export declare function applyGatewayOptions(route: ModelRoute, options: RoutedCallOptions, ids: {
     readonly id: string;
@@ -32,13 +106,12 @@ export declare function applyGatewayOptions(route: ModelRoute, options: RoutedCa
 }, defaults?: Record<string, unknown>): RoutedCallOptions;
 /** A gateway TRANSCRIPTION model, on the same provider (retarget and host-plane fetch included) the turn
  *  model uses. The meeting bot's `gateway` route (meeting-gateway.ts) reads it. */
-export declare function gatewayTranscriptionModel(id: string): ReturnType<typeof provider.transcriptionModel>;
-/** The gateway ModelBackend (see core ModelBackend). */
-export declare function gatewayModelBackend(defaults?: Record<string, unknown>): ModelBackend<GatewayModel>;
+export declare function gatewayTranscriptionModel(id: string): ReturnType<GatewayProvider["transcriptionModel"]>;
+/** The gateway ModelBackend (see core ModelBackend). `via` is the role's target; a route's own `via` wins. */
+export declare function gatewayModelBackend(defaults?: Record<string, unknown>, via?: string): ModelBackend<GatewayModel>;
 /**
  * A `step.started` dynamic-model resolver. It MUST be `step.started`: eve discards a model INSTANCE at turn
  * scope. It ALWAYS returns a model, never null, and `event` carries the turn id this ctx does not.
  */
 export declare function gatewayModelResolver(primary: GatewayRoutedDefaults): (event: unknown, ctx: unknown) => Promise<GatewayModel>;
-export {};
 //# sourceMappingURL=gateway.d.ts.map

package/dist/agent/model/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../agent/model/gateway.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAiB,MAAM,IAAI,CAAC;AAC5C,OAAO,EACL,KAAK,UAAU,EAEf,KAAK,YAAY,EACjB,KAAK,iBAAiB,EAKvB,MAAM,4CAA4C,CAAC;AAEpD,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAQ/C,wHAAwH;AACxH,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,0IAA0I;AAC1I,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAO/D;AAED,2GAA2G;AAC3G,eAAO,MAAM,mBAAmB,QAAgC,CAAC;AA8BjE,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,KAAK,GAAG,SAAS,CAOvF;AAED;uDACuD;AACvD,QAAA,MAAM,QAAQ,2CAGD,CAAC;AAEd,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAKD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,iBAAiB,CAanB;AAED;mFACmF;AACnF,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,kBAAkB,CAAC,CAEpG;AAED,wDAAwD;AACxD,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAKlG;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAG5H"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../agent/model/gateway.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,OAAO,EAAiB,MAAM,IAAI,CAAC;AAC5C,OAAO,EACL,KAAK,UAAU,EAEf,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,WAAW,EAcjB,MAAM,4CAA4C,CAAC;AAGpD,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE5E,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC/C,KAAK,eAAe,GAAG,OAAO,OAAO,CAAC;AAOtC,wHAAwH;AACxH,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,0IAA0I;AAC1I,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAO/D;AAUD,kHAAkH;AAClH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AA2CD,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,KAAK,GAAG,SAAS,CAOvF;AAqBD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMnF;AAED,gHAAgH;AAChH,KAAK,sBAAsB,GAAG;IAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjG;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,sBAAsB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,GAAG,CAAC,CAElG;AAQD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,GAAE,MAA0B,GAAG,MAAM,CAOxG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,sBAAsB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,GAAG,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,GAAE,MAA0B,GAAG,CAAC,CAwBpK;AAOD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAS7H;AA4DD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,GAAE,MAA0B,GAAG,CAAC,CAqB1F;AAED;mHACmH;AACnH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,YAAY,CAE3E;AASD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAiB3D;AAyBD,+DAA+D;AAC/D,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAkBhD;AAwBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAuCjE;AAED,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,sHAAsH;IACtH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAKD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,iBAAiB,CAanB;AAED;mFACmF;AACnF,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAEvG;AAED,8GAA8G;AAC9G,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAKhH;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAG5H"}