@revealui/ai 0.10.1 → 1.0.1

package/README.md

@@ -54,9 +54,9 @@ rejected at provider construction. Operator escape (never seed):
 Quick setup:
 
 ```bash
-sudo snap install nemotron-3-nano      # default; or gemma4 / nemotron-3-nano-omni
-nemotron-3-nano set http.port=9090
-nemotron-3-nano status                 # confirms base URL
+sudo snap install gemma3               # default; or gemma4 / nemotron-3-nano
+gemma3 set http.port=9090 --assume-yes
+gemma3 status                          # confirms base URL
 ```
 
 ```typescript
@@ -66,7 +66,7 @@ const client = new LLMClient({
   provider: 'inference-snaps',
   apiKey: 'inference-snaps',
   baseURL: 'http://localhost:9090/v1',
-  model: 'nemotron-3-nano', // default when omitted
+  model: 'gemma3', // default when omitted
 })
 
 // Or the provider alone:
@@ -201,7 +201,7 @@ import { InferenceSnapsProvider, createSamplingHandler } from '@revealui/ai'
 
 const llm = new InferenceSnapsProvider({
   baseURL: 'http://localhost:9090/v1',
-  model: 'nemotron-3-nano',
+  model: 'gemma3',
 })
 
 const client = new McpClient({
@@ -209,9 +209,9 @@ const client = new McpClient({
   transport: { kind: 'streamable-http', url: 'https://example.com/mcp' },
   samplingHandler: createSamplingHandler({
     llm,
-    defaultModel: 'nemotron-3-nano',
+    defaultModel: 'gemma3',
     // Keep sampling hints on the US-origin allowlist (provider also enforces).
-    allowedModels: ['nemotron-3-nano', 'gemma4', 'gemma3'],
+    allowedModels: ['gemma3', 'gemma4', 'nemotron-3-nano'],
     onSamplingRequest: (info) => {
       // metering / audit trail
       metrics.incr('mcp.sampling', { model: info.model })
@@ -231,9 +231,9 @@ parts extension. `stopSequences` aren't forwarded to the LLM yet (the
 current `LLMChatOptions` doesn't expose that field); this is advisory per
 spec, so omission is compliant.
 
-The legacy `mcpToolSource` path (hypervisor-backed) still works and is
-kept for backwards compatibility, but new integrations should prefer the
-`mcpClients` path.
+Mount MCP tools with `createToolsFromMcpClient` / `AgentRuntime.mcpClients`.
+Process-local spawn and tenant scoping stay on `MCPHypervisor` in
+`@revealui/mcp` — connect those processes with a real `McpClient`.
 
 ## Installation
 

package/dist/client/hooks/useAgentStream.d.ts

@@ -68,6 +68,8 @@ export interface AgentStreamRequest {
      * request schema.
      */
     mode?: 'admin' | 'coding';
+    /** Built-in agent id. Scopes admin tools on /api/agent-stream. */
+    agentId?: string;
 }
 /**
  * Outstanding elicitation request awaiting a UI response. The hook keeps

package/dist/client/hooks/useAgentStream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAgentStream.d.ts","sourceRoot":"","sources":["../../../src/client/hooks/useAgentStream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,MAAM,GACN,iBAAiB,GACjB,kBAAkB,GAClB,OAAO,GACP,MAAM,GACN,cAAc,GACd,kBAAkB,GAClB,qBAAqB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,oEAAoE;IACpE,WAAW,CAAC,EAAE;QACZ,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,OAAO,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;AAC3E,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0DAA0D;IAC1D,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB;;;;OAIG;IACH,iBAAiB,EAAE,CACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAWD,wBAAgB,cAAc,IAAI,oBAAoB,CAwIrD;AAED;;;;;;GAMG;AACH,iBAAS,UAAU,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,GAAG,mBAAmB,CA8CxF;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,mBAAa,CAAC;AAChD,eAAO,MAAM,uBAAuB,EAAE,mBAAmC,CAAC"}
+{"version":3,"file":"useAgentStream.d.ts","sourceRoot":"","sources":["../../../src/client/hooks/useAgentStream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,MAAM,GACN,iBAAiB,GACjB,kBAAkB,GAClB,OAAO,GACP,MAAM,GACN,cAAc,GACd,kBAAkB,GAClB,qBAAqB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,oEAAoE;IACpE,WAAW,CAAC,EAAE;QACZ,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,OAAO,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;AAC3E,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0DAA0D;IAC1D,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB;;;;OAIG;IACH,iBAAiB,EAAE,CACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAWD,wBAAgB,cAAc,IAAI,oBAAoB,CAwIrD;AAED;;;;;;GAMG;AACH,iBAAS,UAAU,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,GAAG,mBAAmB,CA8CxF;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,mBAAa,CAAC;AAChD,eAAO,MAAM,uBAAuB,EAAE,mBAAmC,CAAC"}

package/dist/index.d.ts

@@ -54,6 +54,7 @@ export * from './a2a/index.js';
 export * from './audit/index.js';
 export * from './embeddings/index.js';
 export * from './ingestion/index.js';
+export * from './llm/artifact-provenance.js';
 export * from './llm/client.js';
 export * from './llm/local-ai-profile.js';
 export * from './llm/provider-health.js';
@@ -63,6 +64,7 @@ export * from './llm/providers/openai-compat.js';
 export * from './llm/providers/us-origin-snaps.js';
 export * from './llm/resolve.js';
 export * from './llm/token-counter.js';
+export { sanitizeProviderToolSchema, toolParametersToJsonSchema } from './llm/tool-json-schema.js';
 export * from './llm/workspace-provider-config.js';
 export * from './memory/index.js';
 export * from './orchestration/agent.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAGH,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAIjC,cAAc,uBAAuB,CAAC;AAEtC,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oCAAoC,CAAC;AAEnD,cAAc,mBAAmB,CAAC;AAElC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,mBAAmB,CAAC;AAElC,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAGH,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAIjC,cAAc,uBAAuB,CAAC;AAEtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAE7C,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACnG,cAAc,oCAAoC,CAAC;AAEnD,cAAc,mBAAmB,CAAC;AAElC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,mBAAmB,CAAC;AAElC,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -60,6 +60,7 @@ export * from './audit/index.js';
 export * from './embeddings/index.js';
 // Re-export ingestion pipeline (RAG document indexing + hybrid search)
 export * from './ingestion/index.js';
+export * from './llm/artifact-provenance.js';
 // Re-export LLM providers and client
 export * from './llm/client.js';
 export * from './llm/local-ai-profile.js';
@@ -70,6 +71,7 @@ export * from './llm/providers/openai-compat.js';
 export * from './llm/providers/us-origin-snaps.js';
 export * from './llm/resolve.js';
 export * from './llm/token-counter.js';
+export { sanitizeProviderToolSchema, toolParametersToJsonSchema } from './llm/tool-json-schema.js';
 export * from './llm/workspace-provider-config.js';
 // Re-export memory system
 export * from './memory/index.js';

package/dist/llm/artifact-provenance.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Model/data artifact C-SCRM door (GAP-484).
+ *
+ * NIST C-SCRM + AI 100-2 (Vassilev, SSCA 2024): hash + URL provenance, refuse
+ * pickle-class deserialize-to-ACE formats. Do not scan weights for behavior.
+ *
+ * This is the only supported fetch path for fleet-fetched weight artifacts.
+ * Inference Snaps stay on the US-origin snap allowlist (us-origin-snaps.ts).
+ * Snap store / Ollama registry names are not weight files.
+ */
+/** Formats that deserialize to arbitrary code (pickle protocol family). */
+export declare const ACE_MODEL_SUFFIXES: readonly [".pickle", ".pkl", ".joblib", ".dill", ".pth", ".pt", ".ckpt", ".bin"];
+/** Formats that do not use pickle deserialize. */
+export declare const SAFE_MODEL_SUFFIXES: readonly [".safetensors", ".gguf", ".onnx"];
+export declare class AceModelArtifactError extends Error {
+    readonly code: "ACE_MODEL_ARTIFACT";
+    readonly filename: string;
+    constructor(filename: string);
+}
+export declare class ArtifactProvenanceError extends Error {
+    readonly code: "ARTIFACT_PROVENANCE";
+    constructor(message: string);
+}
+export declare class ArtifactHashMismatchError extends Error {
+    readonly code: "ARTIFACT_HASH_MISMATCH";
+    readonly expected: string;
+    readonly actual: string;
+    constructor(expected: string, actual: string);
+}
+export interface ArtifactProvenance {
+    readonly url: string;
+    readonly sha256: string;
+    readonly filename: string;
+}
+/** True when the path looks like a pickle-class deserialize format. */
+export declare function isAceDeserializeArtifact(name: string): boolean;
+/** True when the path is an allowlisted non-pickle weight format. */
+export declare function isSafeModelArtifactName(name: string): boolean;
+/**
+ * Refuse pickle-class filenames. Allow only safetensors / gguf / onnx.
+ */
+export declare function assertSafeModelArtifactName(name: string): string;
+/**
+ * Validate URL + sha256 + safe filename. Does not fetch and does not scan weights.
+ */
+export declare function assertArtifactProvenance(spec: {
+    readonly url: string;
+    readonly sha256: string;
+    readonly filename?: string;
+}): ArtifactProvenance;
+export declare function sha256Hex(bytes: Uint8Array): string;
+/** Integrity check only. Not a capability or safety scan of the weights. */
+export declare function verifyBytesSha256(bytes: Uint8Array, expectedHex: string): void;
+export interface FetchProvenancedArtifactOptions {
+    readonly fetch?: typeof fetch;
+}
+/**
+ * The fleet fetch door for weight artifacts: URL + sha256, then hash-verify.
+ * Fails closed on ACE formats, bad URLs, missing hash, or mismatch.
+ */
+export declare function fetchProvenancedArtifact(spec: {
+    readonly url: string;
+    readonly sha256: string;
+    readonly filename?: string;
+}, options?: FetchProvenancedArtifactOptions): Promise<Uint8Array>;
+/**
+ * Ollama pull refs are registry names (`gemma3:latest`), not files.
+ * Refuse refs that look like local pickle/ACE paths.
+ */
+export declare function assertOllamaPullRef(modelName: string): string;
+/** Snap install names stay on the US-origin product allowlist. */
+export declare function assertSnapInstallName(snapName: string): string;
+//# sourceMappingURL=artifact-provenance.d.ts.map

package/dist/llm/artifact-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-provenance.d.ts","sourceRoot":"","sources":["../../src/llm/artifact-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,kFASrB,CAAC;AAEX,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,6CAA8C,CAAC;AAE/E,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAG,oBAAoB,CAAU;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAS7B;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBAEnC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAG,wBAAwB,CAAU;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAS7C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAkBD,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI7D;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAShE;AAqBD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,kBAAkB,CAqBrB;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEnD;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAS9E;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE;IACJ,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,EACD,OAAO,CAAC,EAAE,+BAA+B,GACxC,OAAO,CAAC,UAAU,CAAC,CAerB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D"}

package/dist/llm/artifact-provenance.js

@@ -0,0 +1,189 @@
+/**
+ * Model/data artifact C-SCRM door (GAP-484).
+ *
+ * NIST C-SCRM + AI 100-2 (Vassilev, SSCA 2024): hash + URL provenance, refuse
+ * pickle-class deserialize-to-ACE formats. Do not scan weights for behavior.
+ *
+ * This is the only supported fetch path for fleet-fetched weight artifacts.
+ * Inference Snaps stay on the US-origin snap allowlist (us-origin-snaps.ts).
+ * Snap store / Ollama registry names are not weight files.
+ */
+import { createHash } from 'node:crypto';
+import { assertUsOriginInferenceSnap } from './providers/us-origin-snaps.js';
+/** Formats that deserialize to arbitrary code (pickle protocol family). */
+export const ACE_MODEL_SUFFIXES = [
+    '.pickle',
+    '.pkl',
+    '.joblib',
+    '.dill',
+    '.pth',
+    '.pt',
+    '.ckpt',
+    '.bin',
+];
+/** Formats that do not use pickle deserialize. */
+export const SAFE_MODEL_SUFFIXES = ['.safetensors', '.gguf', '.onnx'];
+export class AceModelArtifactError extends Error {
+    code = 'ACE_MODEL_ARTIFACT';
+    filename;
+    constructor(filename) {
+        super(`Refusing model artifact "${filename}": pickle-class formats can deserialize ` +
+            'to arbitrary code (NIST AI 100-2 / GAP-484). Use .safetensors, .gguf, or .onnx. ' +
+            'We do not scan weights for behavior.');
+        this.name = 'AceModelArtifactError';
+        this.filename = filename;
+    }
+}
+export class ArtifactProvenanceError extends Error {
+    code = 'ARTIFACT_PROVENANCE';
+    constructor(message) {
+        super(message);
+        this.name = 'ArtifactProvenanceError';
+    }
+}
+export class ArtifactHashMismatchError extends Error {
+    code = 'ARTIFACT_HASH_MISMATCH';
+    expected;
+    actual;
+    constructor(expected, actual) {
+        super(`Artifact sha256 mismatch (GAP-484). expected=${expected} actual=${actual}. ` +
+            'This is an integrity check, not a capability scan of the weights.');
+        this.name = 'ArtifactHashMismatchError';
+        this.expected = expected;
+        this.actual = actual;
+    }
+}
+function lastPathSegment(value) {
+    const trimmed = value.trim();
+    const slash = trimmed.lastIndexOf('/');
+    const raw = slash === -1 ? trimmed : trimmed.slice(slash + 1);
+    const query = raw.indexOf('?');
+    return query === -1 ? raw : raw.slice(0, query);
+}
+function lowerName(value) {
+    return lastPathSegment(value).toLowerCase();
+}
+function hasSuffix(name, suffix) {
+    return name.length > suffix.length && name.endsWith(suffix);
+}
+/** True when the path looks like a pickle-class deserialize format. */
+export function isAceDeserializeArtifact(name) {
+    const n = lowerName(name);
+    return ACE_MODEL_SUFFIXES.some((suffix) => hasSuffix(n, suffix));
+}
+/** True when the path is an allowlisted non-pickle weight format. */
+export function isSafeModelArtifactName(name) {
+    const n = lowerName(name);
+    if (n.length === 0)
+        return false;
+    return SAFE_MODEL_SUFFIXES.some((suffix) => hasSuffix(n, suffix));
+}
+/**
+ * Refuse pickle-class filenames. Allow only safetensors / gguf / onnx.
+ */
+export function assertSafeModelArtifactName(name) {
+    const filename = lastPathSegment(name);
+    if (filename.length === 0) {
+        throw new AceModelArtifactError(name);
+    }
+    if (isAceDeserializeArtifact(filename) || !isSafeModelArtifactName(filename)) {
+        throw new AceModelArtifactError(filename);
+    }
+    return filename;
+}
+function isSha256Hex(value) {
+    if (value.length !== 64)
+        return false;
+    for (let i = 0; i < value.length; i++) {
+        const c = value.charCodeAt(i);
+        const isDigit = c >= 48 && c <= 57;
+        const isAf = c >= 97 && c <= 102;
+        const isAF = c >= 65 && c <= 70;
+        if (!(isDigit || isAf || isAF))
+            return false;
+    }
+    return true;
+}
+function isAllowedProvenanceUrl(url) {
+    if (url.protocol === 'https:')
+        return true;
+    if (url.protocol !== 'http:')
+        return false;
+    const host = url.hostname.toLowerCase();
+    return host === 'localhost' || host === '127.0.0.1';
+}
+/**
+ * Validate URL + sha256 + safe filename. Does not fetch and does not scan weights.
+ */
+export function assertArtifactProvenance(spec) {
+    let parsed;
+    try {
+        parsed = new URL(spec.url);
+    }
+    catch {
+        throw new ArtifactProvenanceError(`Invalid artifact URL: ${spec.url}`);
+    }
+    if (!isAllowedProvenanceUrl(parsed)) {
+        throw new ArtifactProvenanceError(`Artifact URL must be https (or http localhost for operator/dev): ${spec.url}`);
+    }
+    if (!isSha256Hex(spec.sha256)) {
+        throw new ArtifactProvenanceError('Artifact sha256 must be 64 hex characters (GAP-484).');
+    }
+    const filename = assertSafeModelArtifactName(spec.filename ?? lastPathSegment(parsed.pathname));
+    return {
+        url: parsed.href,
+        sha256: spec.sha256.toLowerCase(),
+        filename,
+    };
+}
+export function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/** Integrity check only. Not a capability or safety scan of the weights. */
+export function verifyBytesSha256(bytes, expectedHex) {
+    if (!isSha256Hex(expectedHex)) {
+        throw new ArtifactProvenanceError('Artifact sha256 must be 64 hex characters (GAP-484).');
+    }
+    const actual = sha256Hex(bytes);
+    const expected = expectedHex.toLowerCase();
+    if (actual !== expected) {
+        throw new ArtifactHashMismatchError(expected, actual);
+    }
+}
+/**
+ * The fleet fetch door for weight artifacts: URL + sha256, then hash-verify.
+ * Fails closed on ACE formats, bad URLs, missing hash, or mismatch.
+ */
+export async function fetchProvenancedArtifact(spec, options) {
+    const provenanced = assertArtifactProvenance(spec);
+    const fetchImpl = options?.fetch ?? globalThis.fetch;
+    if (typeof fetchImpl !== 'function') {
+        throw new ArtifactProvenanceError('fetch is not available');
+    }
+    const response = await fetchImpl(provenanced.url);
+    if (!response.ok) {
+        throw new ArtifactProvenanceError(`Artifact fetch failed: ${response.status} ${response.statusText}`);
+    }
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    verifyBytesSha256(bytes, provenanced.sha256);
+    return bytes;
+}
+/**
+ * Ollama pull refs are registry names (`gemma3:latest`), not files.
+ * Refuse refs that look like local pickle/ACE paths.
+ */
+export function assertOllamaPullRef(modelName) {
+    const name = modelName.trim();
+    if (name.length === 0) {
+        throw new ArtifactProvenanceError('Ollama pull ref is empty');
+    }
+    if (isAceDeserializeArtifact(name) || isSafeModelArtifactName(name)) {
+        throw new ArtifactProvenanceError(`Ollama pull ref "${name}" looks like a weight file. Pull a registry name, ` +
+            'not a pickle or local artifact path (GAP-484).');
+    }
+    return name;
+}
+/** Snap install names stay on the US-origin product allowlist. */
+export function assertSnapInstallName(snapName) {
+    return assertUsOriginInferenceSnap(snapName);
+}

package/dist/llm/cache-utils.d.ts

@@ -91,15 +91,6 @@ export declare function createCachedConversation(config: {
     contextDocs?: string[];
     messages: Message[];
 }): Message[];
-/**
- * @deprecated Use `MODEL_PRICING` from `./token-counter.js`. Retained as a thin derived
- * view (the Anthropic-with-cache subset) so existing importers keep one source of truth.
- */
-export declare const ANTHROPIC_PRICING: {
-    readonly 'claude-3-5-sonnet-20241022': import("./token-counter.js").ModelPricing;
-    readonly 'claude-3-5-haiku-20241022': import("./token-counter.js").ModelPricing;
-    readonly 'claude-3-opus-20240229': import("./token-counter.js").ModelPricing;
-};
 /**
  * Calculate actual cost of a request with caching, using the unified MODEL_PRICING table.
  * Unknown models price at zero (matching `estimateCost`).

package/dist/llm/cache-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-utils.d.ts","sourceRoot":"","sources":["../../src/llm/cache-utils.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAKnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,qBAAqB,EAAE,MAAM,GAC5B,MAAM,CAeR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,GAAG,IAAI,CAqBhB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAItE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,GAAG,OAAO,EAAE,CAwBZ;AAWD;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;CAIpB,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA6BxE"}
+{"version":3,"file":"cache-utils.d.ts","sourceRoot":"","sources":["../../src/llm/cache-utils.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAKnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,qBAAqB,EAAE,MAAM,GAC5B,MAAM,CAeR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,GAAG,IAAI,CAqBhB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAItE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,GAAG,OAAO,EAAE,CAwBZ;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA6BxE"}

package/dist/llm/cache-utils.js

@@ -127,23 +127,6 @@ export function createCachedConversation(config) {
     result.push(...config.messages);
     return result;
 }
-/** Look up a model's pricing, asserting presence (used only for known-present keys). */
-function requirePricing(model) {
-    const pricing = MODEL_PRICING[model];
-    if (!pricing) {
-        throw new Error(`No pricing entry for model: ${model}`);
-    }
-    return pricing;
-}
-/**
- * @deprecated Use `MODEL_PRICING` from `./token-counter.js`. Retained as a thin derived
- * view (the Anthropic-with-cache subset) so existing importers keep one source of truth.
- */
-export const ANTHROPIC_PRICING = {
-    'claude-3-5-sonnet-20241022': requirePricing('claude-3-5-sonnet-20241022'),
-    'claude-3-5-haiku-20241022': requirePricing('claude-3-5-haiku-20241022'),
-    'claude-3-opus-20240229': requirePricing('claude-3-opus-20240229'),
-};
 /**
  * Calculate actual cost of a request with caching, using the unified MODEL_PRICING table.
  * Unknown models price at zero (matching `estimateCost`).

package/dist/llm/client.d.ts

@@ -6,11 +6,13 @@
 import type { Database } from '@revealui/db/client';
 import { CircuitBreaker } from '@revealui/resilience';
 import type { AuditStore } from '../audit/store.js';
+import { type LLMProviderType } from './inference-route.js';
 import type { ProviderHealthMonitor } from './provider-health.js';
 import type { Embedding, LLMChatOptions, LLMChunk, LLMEmbedOptions, LLMProvider, LLMResponse, LLMStreamOptions, Message } from './providers/base.js';
 import { type CacheStats, type ResponseCacheOptions } from './response-cache.js';
-import { type SemanticCacheOptions, type SemanticCacheStats } from './semantic-cache.js';
-export type LLMProviderType = 'anthropic' | 'openai' | 'groq' | 'huggingface' | 'ollama' | 'inference-snaps' | 'xai';
+import type { SemanticCacheOptions, SemanticCacheStats } from './semantic-cache.js';
+export type { InferenceRoute, InferenceRouteInput, LLMProviderType } from './inference-route.js';
+export { defaultBaseURLForProvider, defaultModelForProvider, GROQ_DEFAULT_BASE_URL, GROQ_DEFAULT_MODEL, groqAcceptedModel, isGroqCatalogModel, resolveInferenceRoute, resolveModelForProvider, } from './inference-route.js';
 /**
  * Providers reachable from a hosted (serverless) deployment. Localhost-only
  * providers are false. Consumed by PR-2/PR-3 (resolver + settings UI) to pick
@@ -68,6 +70,7 @@ export declare class LLMClient {
     private rateLimitState;
     private responseCache?;
     private semanticCache?;
+    private semanticCacheLoading?;
     private healthMonitor?;
     private circuitBreaker;
     private fallbackCircuitBreaker?;
@@ -82,6 +85,7 @@ export declare class LLMClient {
     private refreshProviderIfNeeded;
     private checkRateLimit;
     private recordRequest;
+    private ensureSemanticCache;
     chat(messages: Message[], options?: LLMChatOptions): Promise<LLMResponse>;
     embed(text: string | string[], options?: LLMEmbedOptions): Promise<Embedding | Embedding[]>;
     stream(messages: Message[], options?: LLMStreamOptions): AsyncIterable<LLMChunk>;
@@ -147,13 +151,13 @@ export declare class LLMClient {
  *
  * Canonical Inference Snaps is the reference local provider on Ubuntu — offline,
  * silicon-optimized, no API key required. Product usage is **US-origin snaps
- * only** (nemotron-3-nano default; gemma3/4 also allowlisted). See
+ * only** (gemma3 default; gemma4 and nemotron also allowlisted). See
  * `providers/us-origin-snaps.ts` and `providers/inference-snaps.ts`.
  *
  * Provider defaults:
- *   inference-snaps → nemotron-3-nano   (base URL defaults to http://localhost:9090/v1)
- *   groq            → qwen/qwen3-32b
- *   ollama          → gemma4:e2b        (base URL defaults to http://localhost:11434)
+ *   inference-snaps → gemma3   (base URL defaults to http://localhost:9090/v1)
+ *   groq            → openai/gpt-oss-120b (Groq-accepted default; retired llama ids remap)
+ *   ollama          → DEFAULT_DAILY_OLLAMA_MODEL (qwen2.5:3b; base URL http://localhost:11434)
  *   anthropic       → claude-sonnet-4-6 (base URL defaults to https://api.anthropic.com/v1)
  *   openai          → gpt-4o            (base URL defaults to https://api.openai.com/v1)
  *   xai             → grok-4.5          (base URL defaults to https://api.x.ai/v1)
@@ -162,9 +166,12 @@ export declare function createLLMClientFromEnv(): LLMClient;
 /**
  * Create an LLM client using a user's stored BYOK API key.
  *
- * Looks up the user's preferred provider from `tenant_provider_configs`
- * (falling back to the first key in `user_api_keys`), decrypts the key
- * with AES-256-GCM, and returns a configured LLMClient.
+ * Looks up the user's preferred provider from `tenant_provider_configs`.
+ * If that provider has no saved key, uses another saved key (hosted-viable
+ * when `opts.hostedViableOnly` is set — e.g. a saved Groq key). Decrypts
+ * with AES-256-GCM and returns a configured LLMClient whose model and
+ * base URL match the **key's** provider, never a stale preferred-provider
+ * model (a Groq id must not be sent to OpenAI).
  *
  * Returns `null` if the user has no stored keys (callers should fall back
  * to `createLLMClientFromEnv()` or return a 402/feature-unavailable error).

package/dist/llm/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/llm/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EACL,cAAc,EAGf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,OAAO,EACR,MAAM,qBAAqB,CAAC;AAW7B,OAAO,EAAE,KAAK,UAAU,EAAiB,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,QAAQ,GACR,MAAM,GACN,aAAa,GACb,QAAQ,GACR,iBAAiB,GACjB,KAAK,CAAC;AAEV;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,CAQzD,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEjE;AAMD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,eAAe,CAAC;IACnC,SAAS,CAAC,EAAE;QACV,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,oFAAoF;IACpF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,4EAA4E;IAC5E,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,qEAAqE;IACrE,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,kFAAkF;IAClF,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAQD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAc;IACvC,OAAO,CAAC,qBAAqB,CAAC,CAAc;IAC5C,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAwB;IAC9C,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,sBAAsB,CAAC,CAAiB;IAChD,wFAAwF;IACxF,OAAO,CAAC,aAAa,CAAS;gBAElB,MAAM,EAAE,eAAe;IA0DnC,OAAO,CAAC,cAAc;IAmCtB;;;OAGG;YACW,uBAAuB;IAmBrC,OAAO,CAAC,cAAc;IAoCtB,OAAO,CAAC,aAAa;IAMf,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAwHzE,KAAK,CACT,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC;IAsD5B,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC;IA4EvF;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAIlF;;OAEG;IACH,sBAAsB,IAAI;QACxB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;SAAE,CAAC;QACxF,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;SAAE,CAAC;KAC3F;IAkBD;;OAEG;IACH,gBAAgB,IAAI,qBAAqB,GAAG,SAAS;IAIrD;;;;OAIG;IACH,qBAAqB,IAAI,UAAU,GAAG,SAAS;IAI/C;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAI1B;;;;OAIG;IACH,qBAAqB,IAAI,kBAAkB,GAAG,SAAS;IAIvD;;OAEG;IACH,kBAAkB,IAAI,IAAI;CAG3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,IAAI,SAAS,CAoGlD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,QAAQ,EAGZ,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EACvC,IAAI,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAsD3B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/llm/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EACL,cAAc,EAGf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,OAAO,EACR,MAAM,qBAAqB,CAAC;AAU7B,OAAO,EAAE,KAAK,UAAU,EAAiB,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,KAAK,EAAiB,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGnG,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAE9B;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,CAQzD,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEjE;AAMD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,eAAe,CAAC;IACnC,SAAS,CAAC,EAAE;QACV,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,oFAAoF;IACpF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,4EAA4E;IAC5E,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,qEAAqE;IACrE,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,kFAAkF;IAClF,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAQD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAc;IACvC,OAAO,CAAC,qBAAqB,CAAC,CAAc;IAC5C,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,oBAAoB,CAAC,CAAyB;IACtD,OAAO,CAAC,aAAa,CAAC,CAAwB;IAC9C,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,sBAAsB,CAAC,CAAiB;IAChD,wFAAwF;IACxF,OAAO,CAAC,aAAa,CAAS;gBAElB,MAAM,EAAE,eAAe;IAgEnC,OAAO,CAAC,cAAc;IAmCtB;;;OAGG;YACW,uBAAuB;IAmBrC,OAAO,CAAC,cAAc;IAoCtB,OAAO,CAAC,aAAa;YAMP,mBAAmB;IAgB3B,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAyHzE,KAAK,CACT,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC;IAsD5B,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC;IA4EvF;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAIlF;;OAEG;IACH,sBAAsB,IAAI;QACxB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;SAAE,CAAC;QACxF,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;SAAE,CAAC;KAC3F;IAkBD;;OAEG;IACH,gBAAgB,IAAI,qBAAqB,GAAG,SAAS;IAIrD;;;;OAIG;IACH,qBAAqB,IAAI,UAAU,GAAG,SAAS;IAI/C;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAI1B;;;;OAIG;IACH,qBAAqB,IAAI,kBAAkB,GAAG,SAAS;IAIvD;;OAEG;IACH,kBAAkB,IAAI,IAAI;CAG3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,IAAI,SAAS,CA+GlD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,QAAQ,EAGZ,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EACvC,IAAI,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAsE3B"}