@sentropic/llm-mesh 0.27.1 → 0.28.1

package/dist/decision/validate-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-result.d.ts","sourceRoot":"","sources":["../../src/decision/validate-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,cAAc,CAAC;AAIpE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAgEzE;;4EAE4E;AAC5E,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,eAAe,EACrE,eAAe,EAAE,yBAAyB,GAAG,IAAI,EAAE,SAAS,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAqB9F"}

package/dist/decision/validate-result.js

@@ -0,0 +1,91 @@
+import { createDecisionError } from './errors.js';
+import { has, hasOnlyKeys, isRecord } from './validation.js';
+import { isValidDecisionReceipt, isValidDecisionVerdict } from './client.js';
+import { isDecisionErrorCode } from './errors.js';
+/** Rebuild a wire error from code/phase/liability evidence; never carries wording. */
+function rebuildWireError(error, receipt) {
+    if (!isRecord(error) || !hasOnlyKeys(error, ['code', 'message', 'phase', 'retryable', 'retryAfterMs'])
+        || !isDecisionErrorCode(error.code)
+        || !['preflight', 'admission', 'dispatch', 'parse', 'settlement'].includes(error.phase))
+        return null;
+    const unresolved = receipt.budget.state !== 'not-admitted' && receipt.budget.state !== 'released';
+    const nonRetryable = unresolved || error.retryable === false;
+    const rebuilt = createDecisionError(error.code, error.phase, { retryAfterMs: !nonRetryable && has(error, 'retryAfterMs') && typeof error.retryAfterMs === 'number'
+            ? error.retryAfterMs : undefined });
+    if (nonRetryable) {
+        rebuilt.retryable = false;
+        delete rebuilt.retryAfterMs;
+    }
+    return rebuilt;
+}
+const rebuildVerdict = (verdict) => {
+    const rebuilt = {
+        criterionKind: verdict.criterionKind,
+        resolvedCriterionKind: verdict.resolvedCriterionKind,
+        score: structuredClone(verdict.score),
+        decision: structuredClone(verdict.decision),
+        label: structuredClone(verdict.label),
+        rationale: structuredClone(verdict.rationale),
+        confidence: structuredClone(verdict.confidence),
+        distribution: structuredClone(verdict.distribution),
+    };
+    if (Object.hasOwn(verdict, 'providerRaw'))
+        rebuilt.providerRaw = structuredClone(verdict.providerRaw);
+    return rebuilt;
+};
+const rebuildReceipt = (receipt) => {
+    const rebuilt = {
+        schemaVersion: receipt.schemaVersion,
+        callId: receipt.callId,
+        correlationId: receipt.correlationId,
+        evaluator: receipt.evaluator === null ? null : { providerId: receipt.evaluator.providerId,
+            evaluatorId: receipt.evaluator.evaluatorId, revision: receipt.evaluator.revision },
+        servedEvaluator: receipt.servedEvaluator === null ? null : { providerId: receipt.servedEvaluator.providerId,
+            evaluatorId: receipt.servedEvaluator.evaluatorId, revision: receipt.servedEvaluator.revision },
+        servedModelId: receipt.servedModelId,
+        startedAt: receipt.startedAt,
+        finishedAt: receipt.finishedAt,
+        latencyMs: receipt.latencyMs,
+        dispatch: receipt.dispatch,
+        attempts: receipt.attempts,
+        usage: structuredClone(receipt.usage),
+        cost: structuredClone(receipt.cost),
+        retention: structuredClone(receipt.retention),
+        budget: structuredClone(receipt.budget),
+        outcome: receipt.outcome,
+    };
+    if (has(receipt, 'providerRequestId'))
+        rebuilt.providerRequestId = receipt.providerRequestId;
+    if (has(receipt, 'providerLatencyMs'))
+        rebuilt.providerLatencyMs = receipt.providerLatencyMs;
+    if (has(receipt, 'errorCode'))
+        rebuilt.errorCode = receipt.errorCode;
+    return rebuilt;
+};
+/** Pure wire-result validator: no network, provider imports, env reads or credentials.
+ * Validates a detached wire envelope against the transmitted request snapshot
+ * and trusted context snapshot, rebuilding both branches field by field. */
+export function validateDecisionResult(requestSnapshot, contextSnapshot, wireValue) {
+    if (!isRecord(wireValue) || typeof requestSnapshot.correlationId !== 'string')
+        return null;
+    const expectedCorrelationId = requestSnapshot.correlationId;
+    if (hasOnlyKeys(wireValue, ['kind', 'ok', 'verdict', 'receipt'])
+        && wireValue.kind === 'verdict' && wireValue.ok === true
+        && isValidDecisionReceipt(wireValue.receipt, requestSnapshot, expectedCorrelationId, contextSnapshot)
+        && wireValue.receipt.outcome === 'verdict'
+        && isValidDecisionVerdict(wireValue.verdict, requestSnapshot, contextSnapshot)) {
+        return { kind: 'verdict', ok: true, verdict: rebuildVerdict(wireValue.verdict),
+            receipt: rebuildReceipt(wireValue.receipt) };
+    }
+    if (hasOnlyKeys(wireValue, ['kind', 'ok', 'error', 'receipt'])
+        && wireValue.kind === 'error' && wireValue.ok === false
+        && isValidDecisionReceipt(wireValue.receipt, requestSnapshot, expectedCorrelationId, contextSnapshot)
+        && wireValue.receipt.outcome === 'error') {
+        const error = rebuildWireError(wireValue.error, wireValue.receipt);
+        if (error && wireValue.receipt.errorCode === error.code) {
+            return { kind: 'error', ok: false, error, receipt: rebuildReceipt(wireValue.receipt) };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=validate-result.js.map

package/dist/decision/validate-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-result.js","sourceRoot":"","sources":["../../src/decision/validate-result.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAAwB;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;WACjG,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;WAChC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACjH,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC;IAClG,MAAM,YAAY,GAAG,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC;IAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAA+B,EACnF,EAAE,YAAY,EAAE,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YACnG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACxC,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,OAAO,OAAO,CAAC,YAAY,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,OAAwB,EAAmB,EAAE;IACnE,MAAM,OAAO,GAA4B;QACvC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3C,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/C,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC;KACpD,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,OAAO,CAAC,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtG,OAAO,OAAqC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAwB,EAAmB,EAAE;IACnE,MAAM,OAAO,GAA4B;QACvC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;YACvF,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;QACpF,eAAe,EAAE,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,UAAU;YACzG,WAAW,EAAE,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE;QAChG,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,IAAI,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAAE,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC7F,IAAI,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAAE,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC7F,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC;QAAE,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrE,OAAO,OAAqC,CAAC;AAC/C,CAAC,CAAC;AAEF;;4EAE4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,eAAgC,EACrE,eAAiD,EAAE,SAAkB;IACrE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,eAAe,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,qBAAqB,GAAG,eAAe,CAAC,aAAa,CAAC;IAC5D,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;WAC3D,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,IAAI;WACrD,sBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,CAAC;WACjG,SAAS,CAAC,OAA2B,CAAC,OAAO,KAAK,SAAS;WAC5D,sBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,OAA0B,CAAC;YAC/F,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,OAA0B,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;WACzD,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK;WACpD,sBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,CAAC;WACjG,SAAS,CAAC,OAA2B,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,OAA0B,CAAC,CAAC;QACtF,IAAI,KAAK,IAAK,SAAS,CAAC,OAA2B,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,OAA0B,CAAC,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/decision/validation-context.d.ts

@@ -0,0 +1,55 @@
+import type { DecisionCriterion, DecisionRequest, EvaluatorRef } from './request.js';
+/** Closed validation relation and version, published with the selected definition. */
+export interface DecisionValidationProfile {
+    profile: 'native-distribution-v1' | 'scalar-label-v1';
+    version: string;
+}
+export interface DecisionValidationScoreSemantics {
+    meaning: string;
+    min: number;
+    max: number;
+}
+export interface DecisionValidationConfidenceSemantics {
+    meaning: string;
+    meaningRef: string;
+    min: number;
+    max: number;
+}
+/** Evidence the selected profile admits for one resolved kind. Null score or
+ * confidence forbids that carrier; rationale stays forbidden unless optional. */
+export interface DecisionValidationSemantics {
+    nativeDecision: boolean;
+    score: DecisionValidationScoreSemantics | null;
+    confidence: DecisionValidationConfidenceSemantics | null;
+    rationale: 'forbidden' | 'optional';
+}
+export type DirectDecisionCriterion = Exclude<DecisionCriterion, {
+    kind: 'registered';
+}>;
+/** Trusted resolution of one registered criterion: exact requested identity,
+ * resolved direct criterion, trusted timestamp and consumer-set age bound. */
+export interface DecisionRegisteredResolution {
+    criteriaId: string;
+    revision: string;
+    resolvedKind: 'binary' | 'graded' | 'choice';
+    criterion: DirectDecisionCriterion;
+    resolvedAt: string;
+    maxAgeMs: number;
+}
+/** The only source of revision-specific validation facts. The response never
+ * selects or weakens its own profile. Detached and frozen on parse. */
+export interface DecisionValidationContext {
+    evaluator: EvaluatorRef;
+    validationProfile: DecisionValidationProfile;
+    acceptedServedModelIds: readonly string[];
+    semantics: DecisionValidationSemantics;
+    registeredResolution?: DecisionRegisteredResolution;
+    definitionDigest: string;
+}
+export type DecisionValidationContextResolver = (snapshot: DecisionRequest) => DecisionValidationContext | null | undefined | Promise<DecisionValidationContext | null | undefined>;
+/** Parse, bind to the transmitted snapshot and freeze. Null on any fault:
+ * wrong shape, wrong evaluator, unknown profile, empty model set, missing or
+ * stale/future registered resolution. Direct criteria resolve from the
+ * request snapshot and never consult a resolution. */
+export declare function parseDecisionValidationContext(candidate: unknown, request: DecisionRequest, nowMs: number): DecisionValidationContext | null;
+//# sourceMappingURL=validation-context.d.ts.map

package/dist/decision/validation-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-context.d.ts","sourceRoot":"","sources":["../../src/decision/validation-context.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAErF,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAOD;iFACiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,gCAAgC,GAAG,IAAI,CAAC;IAC/C,UAAU,EAAE,qCAAqC,GAAG,IAAI,CAAC;IACzD,SAAS,EAAE,WAAW,GAAG,UAAU,CAAC;CACrC;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC;AAEzF;8EAC8E;AAC9E,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC7C,SAAS,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;uEACuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,YAAY,CAAC;IACxB,iBAAiB,EAAE,yBAAyB,CAAC;IAC7C,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,SAAS,EAAE,2BAA2B,CAAC;IACvC,oBAAoB,CAAC,EAAE,4BAA4B,CAAC;IACpD,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iCAAiC,GAAG,CAC9C,QAAQ,EAAE,eAAe,KACtB,yBAAyB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AA6C1G;;;sDAGsD;AACtD,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EACzF,KAAK,EAAE,MAAM,GAAG,yBAAyB,GAAG,IAAI,CAiEjD"}

package/dist/decision/validation-context.js

@@ -0,0 +1,134 @@
+import { hasOnlyKeys, isRecord, isText, snapshotBoundedJson } from './validation.js';
+import { freezeDecisionData } from './descriptor-validation.js';
+import { isDecisionCriterion } from './criterion.js';
+const KNOWN_PROFILE_VERSIONS = {
+    'native-distribution-v1': ['v1'],
+    'scalar-label-v1': ['v1'],
+};
+const KNOWN_PROFILES = new Set(['native-distribution-v1', 'scalar-label-v1']);
+const RESOLVED_KINDS = new Set(['binary', 'graded', 'choice']);
+const DIGEST_RE = /^[0-9a-f]{64}$/;
+const isEvaluatorRef = (value) => isRecord(value) && hasOnlyKeys(value, ['providerId', 'evaluatorId', 'revision'])
+    && isText(value.providerId) && isText(value.evaluatorId) && isText(value.revision);
+const sameEvaluatorRef = (left, right) => left.providerId === right.providerId && left.evaluatorId === right.evaluatorId && left.revision === right.revision;
+const isBoundedMeaning = (value) => isRecord(value) && hasOnlyKeys(value, ['meaning', 'min', 'max'])
+    && isText(value.meaning) && typeof value.min === 'number' && Number.isFinite(value.min)
+    && typeof value.max === 'number' && Number.isFinite(value.max) && value.min < value.max;
+const isBoundedConfidence = (value) => isRecord(value) && hasOnlyKeys(value, ['meaning', 'meaningRef', 'min', 'max'])
+    && isText(value.meaning) && isText(value.meaningRef) && typeof value.min === 'number' && Number.isFinite(value.min)
+    && typeof value.max === 'number' && Number.isFinite(value.max) && value.min <= value.max;
+const isDirectCriterionOfKind = (value, kind) => {
+    if (!isDecisionCriterion(value) || value.kind !== kind)
+        return false;
+    return true;
+};
+const MAX_CONTEXT_AGE_MS = 86_400_000;
+const isRegisteredResolution = (value, request, nowMs) => {
+    if (!isRecord(value) || !hasOnlyKeys(value, ['criteriaId', 'revision', 'resolvedKind', 'criterion', 'resolvedAt', 'maxAgeMs']))
+        return false;
+    if (!isText(value.criteriaId) || !isText(value.revision) || !RESOLVED_KINDS.has(value.resolvedKind))
+        return false;
+    if (request.criterion.kind !== 'registered')
+        return false;
+    if (value.criteriaId !== request.criterion.criteriaId || value.revision !== request.criterion.revision)
+        return false;
+    if (!isDirectCriterionOfKind(value.criterion, value.resolvedKind))
+        return false;
+    if (value.criterion.kind !== value.resolvedKind)
+        return false;
+    if (!isText(value.resolvedAt))
+        return false;
+    const resolvedAt = Date.parse(value.resolvedAt);
+    if (!Number.isFinite(resolvedAt) || resolvedAt > nowMs)
+        return false;
+    if (typeof value.maxAgeMs !== 'number' || !Number.isSafeInteger(value.maxAgeMs) || value.maxAgeMs < 1
+        || value.maxAgeMs > MAX_CONTEXT_AGE_MS)
+        return false;
+    return nowMs - resolvedAt <= value.maxAgeMs;
+};
+/** Parse, bind to the transmitted snapshot and freeze. Null on any fault:
+ * wrong shape, wrong evaluator, unknown profile, empty model set, missing or
+ * stale/future registered resolution. Direct criteria resolve from the
+ * request snapshot and never consult a resolution. */
+export function parseDecisionValidationContext(candidate, request, nowMs) {
+    const snapshot = snapshotBoundedJson(candidate);
+    if (!snapshot.ok || !isRecord(snapshot.value))
+        return null;
+    const source = snapshot.value;
+    if (!hasOnlyKeys(source, ['evaluator', 'validationProfile', 'acceptedServedModelIds',
+        'semantics', 'definitionDigest', 'registeredResolution'])
+        && !hasOnlyKeys(source, ['evaluator', 'validationProfile', 'acceptedServedModelIds', 'semantics', 'definitionDigest'])) {
+        return null;
+    }
+    if (!isEvaluatorRef(source.evaluator) || !sameEvaluatorRef(source.evaluator, request.evaluator))
+        return null;
+    const profile = source.validationProfile;
+    if (!isRecord(profile) || !hasOnlyKeys(profile, ['profile', 'version'])
+        || !KNOWN_PROFILES.has(profile.profile) || !isText(profile.version))
+        return null;
+    const allowedVersions = KNOWN_PROFILE_VERSIONS[profile.profile];
+    if (!allowedVersions || !allowedVersions.includes(profile.version))
+        return null;
+    const models = source.acceptedServedModelIds;
+    if (!Array.isArray(models) || models.length === 0 || !models.every(isText)
+        || new Set(models).size !== models.length)
+        return null;
+    const semantics = source.semantics;
+    if (!isRecord(semantics) || !hasOnlyKeys(semantics, ['nativeDecision', 'score', 'confidence', 'rationale']))
+        return null;
+    if (typeof semantics.nativeDecision !== 'boolean')
+        return null;
+    if (semantics.score !== null && !isBoundedMeaning(semantics.score))
+        return null;
+    if (semantics.confidence !== null && !isBoundedConfidence(semantics.confidence))
+        return null;
+    if (semantics.rationale !== 'forbidden' && semantics.rationale !== 'optional')
+        return null;
+    // §3.4 native-distribution-v1 forbids fabricated native evidence: a context
+    // that permits rationale under the native profile contradicts the profile
+    // and must fail before headers or fetch, never redefine native semantics.
+    if (profile.profile === 'native-distribution-v1' && semantics.rationale !== 'forbidden')
+        return null;
+    if (!isText(source.definitionDigest) || !DIGEST_RE.test(source.definitionDigest))
+        return null;
+    const registered = request.criterion.kind === 'registered';
+    if (registered && !isRegisteredResolution(source.registeredResolution, request, nowMs))
+        return null;
+    if (!registered && source.registeredResolution !== undefined)
+        return null;
+    // Required profile evidence (§3.4): a native binary/graded verdict carries a
+    // native score, so a native context without score semantics for those kinds
+    // cannot validate anything and fails here rather than at the response.
+    const effectiveKind = registered
+        ? source.registeredResolution.resolvedKind
+        : request.criterion.kind;
+    if (profile.profile === 'native-distribution-v1' && effectiveKind !== 'choice' && semantics.score === null)
+        return null;
+    const ref = source.evaluator;
+    const scoreSource = semantics.score;
+    const confidenceSource = semantics.confidence;
+    const context = {
+        evaluator: { providerId: ref.providerId, evaluatorId: ref.evaluatorId, revision: ref.revision },
+        validationProfile: { profile: profile.profile,
+            version: profile.version },
+        acceptedServedModelIds: [...models],
+        semantics: { nativeDecision: semantics.nativeDecision,
+            score: scoreSource === null ? null : { ...scoreSource },
+            confidence: confidenceSource === null ? null : { ...confidenceSource },
+            rationale: semantics.rationale },
+        definitionDigest: source.definitionDigest,
+    };
+    if (registered) {
+        const resolution = source.registeredResolution;
+        context.registeredResolution = {
+            criteriaId: resolution.criteriaId,
+            revision: resolution.revision,
+            resolvedKind: resolution.resolvedKind,
+            criterion: structuredClone(resolution.criterion),
+            resolvedAt: resolution.resolvedAt,
+            maxAgeMs: resolution.maxAgeMs,
+        };
+    }
+    return freezeDecisionData(context);
+}
+//# sourceMappingURL=validation-context.js.map

package/dist/decision/validation-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-context.js","sourceRoot":"","sources":["../../src/decision/validation-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAsBrD,MAAM,sBAAsB,GAAgD;IAC1E,wBAAwB,EAAE,CAAC,IAAI,CAAC;IAChC,iBAAiB,EAAE,CAAC,IAAI,CAAC;CAC1B,CAAC;AAuCF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAC9E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE,CAC/D,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;OAC7E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAErF,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAAE,KAAmB,EAAW,EAAE,CAC5E,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AAErH,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAA6C,EAAE,CACrF,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;OAC7D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;OACpF,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;AAE1F,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAkD,EAAE,CAC7F,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;OAC3E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;OAChH,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC;AAE3F,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAE,IAAoC,EAAoC,EAAE;IACzH,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAE,OAAwB,EAAE,KAAa,EAAyC,EAAE;IAChI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7I,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,YAAsB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5H,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,SAAS,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrH,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAA8C,CAAC;QAAE,OAAO,KAAK,CAAC;IAClH,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,KAAK;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;WAChG,KAAK,CAAC,QAAQ,GAAG,kBAAkB;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,KAAK,GAAG,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC;AAC9C,CAAC,CAAC;AAEF;;;sDAGsD;AACtD,MAAM,UAAU,8BAA8B,CAAC,SAAkB,EAAE,OAAwB,EACzF,KAAa;IACb,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAgC,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,wBAAwB;QAClF,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;WACtD,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;WAClE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,OAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7F,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAiB,CAAC,CAAC;IAC1E,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;WACrE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzH,IAAI,OAAO,SAAS,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3F,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,IAAI,OAAO,CAAC,OAAO,KAAK,wBAAwB,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,gBAA0B,CAAC;QAAE,OAAO,IAAI,CAAC;IACxG,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC;IAC3D,IAAI,UAAU,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1E,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,aAAa,GAAG,UAAU;QAC9B,CAAC,CAAE,MAAM,CAAC,oBAAqD,CAAC,YAAY;QAC5E,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;IAC3B,IAAI,OAAO,CAAC,OAAO,KAAK,wBAAwB,IAAI,aAAa,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxH,MAAM,GAAG,GAAG,MAAM,CAAC,SAAyB,CAAC;IAC7C,MAAM,WAAW,GAAI,SAA6D,CAAC,KAAK,CAAC;IACzF,MAAM,gBAAgB,GAAI,SAAuE,CAAC,UAAU,CAAC;IAC7G,MAAM,OAAO,GAA8B;QACzC,SAAS,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;QAC/F,iBAAiB,EAAE,EAAE,OAAO,EAAG,OAA6D,CAAC,OAAO;YAClG,OAAO,EAAG,OAA+B,CAAC,OAAO,EAAE;QACrD,sBAAsB,EAAE,CAAC,GAAI,MAAmB,CAAC;QACjD,SAAS,EAAE,EAAE,cAAc,EAAG,SAAyC,CAAC,cAAc;YACpF,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAI,WAAgD,EAAE;YAC7F,UAAU,EAAE,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAI,gBAA0D,EAAE;YACjH,SAAS,EAAG,SAAqD,CAAC,SAAS,EAAE;QAC/E,gBAAgB,EAAE,MAAM,CAAC,gBAA0B;KACpD,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoD,CAAC;QAC/E,OAAO,CAAC,oBAAoB,GAAG;YAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC,SAAS,CAA4B;YAC3E,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/decision/validation.d.ts

@@ -0,0 +1,19 @@
+export declare const DECISION_MAX_JSON_BYTES: number;
+export declare const DECISION_MAX_JSON_DEPTH = 16;
+export declare const DECISION_MAX_RAW_BYTES: number;
+export declare const isRecord: (value: unknown) => value is Record<string, unknown>;
+export declare const has: (value: object, key: string) => boolean;
+export declare const hasOnlyKeys: (value: object, keys: readonly string[]) => boolean;
+export declare const isText: (value: unknown) => value is string;
+export declare const isMicroUsd: (value: unknown) => value is string;
+export declare const isCorrelationId: (value: unknown) => value is string;
+/** sha256 hex digest over the canonical form of one compiled artifact. */
+export declare const digestStructuredArtifact: (value: unknown) => string;
+export declare function snapshotBoundedJson(value: unknown, maxBytes?: number): {
+    ok: true;
+    value: unknown;
+} | {
+    ok: false;
+};
+export declare const isBoundedJson: (value: unknown, maxBytes?: number) => boolean;
+//# sourceMappingURL=validation.d.ts.map

package/dist/decision/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/decision/validation.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAClD,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,sBAAsB,QAAY,CAAC;AAGhD,eAAO,MAAM,QAAQ,UAAW,OAAO,qCAC+B,CAAC;AACvE,eAAO,MAAM,GAAG,UAAW,MAAM,OAAO,MAAM,KAAG,OAAoC,CAAC;AACtF,eAAO,MAAM,WAAW,UAAW,MAAM,QAAQ,SAAS,MAAM,EAAE,KAAG,OACd,CAAC;AACxD,eAAO,MAAM,MAAM,UAAW,OAAO,oBACiB,CAAC;AACvD,eAAO,MAAM,UAAU,UAAW,OAAO,oBACqB,CAAC;AAC/D,eAAO,MAAM,eAAe,UAAW,OAAO,oBACuB,CAAC;AActE,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,UAAW,OAAO,KAAG,MACO,CAAC;AAkClE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAA0B,GACpF;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAU7C;AAED,eAAO,MAAM,aAAa,UAAW,OAAO,wBAAuC,OAC1C,CAAC"}

package/dist/decision/validation.js

@@ -0,0 +1,86 @@
+import { createHash } from 'node:crypto';
+export const DECISION_MAX_JSON_BYTES = 256 * 1024;
+export const DECISION_MAX_JSON_DEPTH = 16;
+export const DECISION_MAX_RAW_BYTES = 16 * 1024;
+const unsafeKeys = new Set(['__proto__', 'constructor', 'prototype']);
+export const isRecord = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+export const has = (value, key) => Object.hasOwn(value, key);
+export const hasOnlyKeys = (value, keys) => Object.keys(value).every((key) => keys.includes(key));
+export const isText = (value) => typeof value === 'string' && value.trim().length > 0;
+export const isMicroUsd = (value) => typeof value === 'string' && /^(0|[1-9][0-9]*)$/.test(value);
+export const isCorrelationId = (value) => typeof value === 'string' && /^[A-Za-z0-9._:-]{1,128}$/.test(value);
+/** Canonical JSON with sorted object keys, so digests are process-stable. */
+const canonicalJson = (value) => {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    if (value !== null && typeof value === 'object') {
+        const record = value;
+        return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(',')}}`;
+    }
+    const serialized = JSON.stringify(value) ?? 'null';
+    if (typeof value === 'number' && !Number.isFinite(value))
+        throw new Error('Non-finite digest input.');
+    return serialized;
+};
+/** sha256 hex digest over the canonical form of one compiled artifact. */
+export const digestStructuredArtifact = (value) => createHash('sha256').update(canonicalJson(value)).digest('hex');
+/** Copy data descriptors only; never serialize or read fields from the live caller object. */
+function copyJson(value, depth, budget) {
+    if (--budget.remaining < 0 || depth > DECISION_MAX_JSON_DEPTH)
+        throw new Error('Invalid JSON.');
+    if (typeof value === 'string') {
+        budget.remaining -= value.length;
+        if (budget.remaining < 0)
+            throw new Error('Invalid JSON.');
+        return value;
+    }
+    if (value === null || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value !== 'object')
+        throw new Error('Invalid JSON.');
+    const array = Array.isArray(value);
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== (array ? Array.prototype : Object.prototype) && proto !== null)
+        throw new Error('Invalid JSON.');
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    if (Object.getOwnPropertySymbols(descriptors).length)
+        throw new Error('Invalid JSON.');
+    const length = descriptors.length?.value;
+    if (array && (!Number.isSafeInteger(length) || length < 0
+        || Object.keys(descriptors).length !== length + 1))
+        throw new Error('Invalid JSON.');
+    const copy = array ? [] : Object.create(null);
+    for (const [key, descriptor] of Object.entries(descriptors)) {
+        if (array && key === 'length')
+            continue;
+        if (array && (!/^(0|[1-9][0-9]*)$/.test(key) || Number(key) >= length))
+            throw new Error('Invalid JSON.');
+        if (unsafeKeys.has(key) || descriptor.enumerable !== true || !has(descriptor, 'value'))
+            throw new Error('Invalid JSON.');
+        // Node visits and text lengths are lower bounds on serialized bytes, including shared paths.
+        if (!array)
+            budget.remaining -= key.length;
+        if (budget.remaining < 0)
+            throw new Error('Invalid JSON.');
+        copy[key] = copyJson(descriptor.value, depth + 1, budget);
+    }
+    return copy;
+}
+export function snapshotBoundedJson(value, maxBytes = DECISION_MAX_JSON_BYTES) {
+    try {
+        if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)
+            return { ok: false };
+        const copy = copyJson(value, 0, { remaining: maxBytes });
+        const serialized = JSON.stringify(copy);
+        if (new TextEncoder().encode(serialized).byteLength > maxBytes)
+            return { ok: false };
+        return { ok: true, value: JSON.parse(serialized) };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+export const isBoundedJson = (value, maxBytes = DECISION_MAX_JSON_BYTES) => snapshotBoundedJson(value, maxBytes).ok;
+//# sourceMappingURL=validation.js.map

package/dist/decision/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/decision/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC3E,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,GAAW,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,IAAuB,EAAW,EAAE,CAC7E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CACxD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC5D,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAAmB,EAAE,CACjE,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEtE,6EAA6E;AAC7E,MAAM,aAAa,GAAG,CAAC,KAAc,EAAU,EAAE;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1H,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACtG,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAAU,EAAE,CACjE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElE,8FAA8F;AAC9F,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa,EAAE,MAA6B;IAC5E,IAAI,EAAE,MAAM,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,GAAG,uBAAuB;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAChG,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QACjC,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/G,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;IACzC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;WACpD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACvF,MAAM,IAAI,GAA4B,KAAK,CAAC,CAAC,CAAC,EAAwC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7G,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAS;QACxC,IAAI,KAAK,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzH,6FAA6F;QAC7F,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;QAC3C,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,QAAQ,GAAG,uBAAuB;IAEpF,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,uBAAuB,EAAW,EAAE,CAC3F,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC"}

package/dist/decision/verdict.d.ts

@@ -0,0 +1,81 @@
+import type { DecisionRule, Json, DecisionCriterion } from './request.js';
+export type ScoreScale = {
+    kind: 'bounded';
+    min: number;
+    max: number;
+    direction: 'higher-is-better' | 'lower-is-better' | 'unordered';
+} | {
+    kind: 'unknown';
+    reason: 'unknown (source-gap)';
+};
+export interface DecisionScore {
+    value: number;
+    scale: ScoreScale;
+    meaning: 'rubric-grade' | 'probability-true' | 'support' | 'provider-defined';
+    normalized?: {
+        value: number;
+        transform: 'linear-min-max';
+    };
+}
+export interface DecisionVerdict {
+    criterionKind: DecisionCriterion['kind'];
+    resolvedCriterionKind: 'binary' | 'graded' | 'choice';
+    score: DecisionScore | null;
+    decision: {
+        pass: boolean;
+        origin: 'provider' | 'threshold' | 'labels';
+        rule?: DecisionRule;
+    } | null;
+    label: {
+        value: string;
+        origin: 'provider';
+    } | null;
+    rationale: {
+        text: string;
+        origin: 'provider';
+    } | null;
+    confidence: {
+        value: number;
+        min: number;
+        max: number;
+        meaning: 'provider-confidence' | 'decision-confidence';
+        meaningRef: string;
+        origin: 'provider';
+    } | null;
+    distribution: readonly {
+        outcome: string;
+        nativeOutcome: string;
+        probability: number;
+    }[] | null;
+    providerRaw?: {
+        data: Json;
+        bytes: number;
+        truncated: boolean;
+    };
+}
+/** Preserve native values and direction; normalization is relative position, not accuracy. */
+export declare function parseDecisionScore(candidate: unknown): DecisionScore | null;
+/** A descriptor supplies the documented meaning; this never derives confidence from score. */
+export declare function parseDecisionConfidence(candidate: unknown): DecisionVerdict['confidence'];
+/** Map an exact, descriptor-owned native key set, preserving order and probabilities. */
+export declare function mapDecisionDistribution(candidate: unknown, declared: readonly {
+    outcome: string;
+    nativeOutcome: string;
+}[]): DecisionVerdict['distribution'];
+export type DecisionDerivation = {
+    ok: true;
+    decision: DecisionVerdict['decision'];
+} | {
+    ok: false;
+    code: 'REQUEST_INVALID' | 'CAPABILITY_UNSUPPORTED' | 'VERDICT_INVALID';
+};
+export declare function deriveDecision(input: {
+    rule?: DecisionRule;
+    score: DecisionScore | null;
+    label: string | null;
+    providerDecision: boolean | null;
+    declaredLabels?: readonly string[];
+}): DecisionDerivation;
+/** Primary values must be meaningful; false and zero are valid evidence. */
+export declare function hasDecisionVerdictValue(value: Pick<DecisionVerdict, 'score' | 'decision' | 'label'>): boolean;
+//# sourceMappingURL=verdict.d.ts.map

package/dist/decision/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../src/decision/verdict.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAI1E,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAC1C,SAAS,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,WAAW,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,cAAc,GAAG,kBAAkB,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAC9E,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,gBAAgB,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,qBAAqB,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtD,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;QAAC,IAAI,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IACrG,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI,CAAC;IACvD,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QACpD,OAAO,EAAE,qBAAqB,GAAG,qBAAqB,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1G,YAAY,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI,CAAC;IAChG,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CACjE;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CA0B3E;AAED,8FAA8F;AAC9F,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAazF;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,OAAO,EACxD,QAAQ,EAAE,SAAS;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,eAAe,CAAC,cAAc,CAAC,CAyBlG;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,wBAAwB,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAE1F,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IACvF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,kBAAkB,CAyBlH;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC,GAAG,OAAO,CAM7G"}