@sentropic/llm-mesh 0.28.0 → 0.28.1

package/dist/decision/policy.d.ts

@@ -0,0 +1,11 @@
+import type { DecisionRequest } from './request.js';
+import type { DecisionEvaluatorDescriptor } from './descriptor.js';
+import type { DecisionErrorCode } from './errors.js';
+export interface DecisionHostPolicy {
+    timeoutMs?: number;
+    maxCostMicroUsd?: string;
+    allowRaw?: boolean;
+}
+/** Capability/decision refusal precedes credential acquisition and financial admission. */
+export declare function validateDecisionPolicy(request: DecisionRequest, descriptor: DecisionEvaluatorDescriptor, host?: DecisionHostPolicy): DecisionErrorCode | null;
+//# sourceMappingURL=policy.d.ts.map

package/dist/decision/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/decision/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD,MAAM,WAAW,kBAAkB;IAAG,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE;AACxG,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,2BAA2B,EACtG,IAAI,GAAE,kBAAuB,GAAG,iBAAiB,GAAG,IAAI,CAqBzD"}

package/dist/decision/policy.js

@@ -0,0 +1,33 @@
+import { encodeJevRequest } from './jev-codec.js';
+/** Capability/decision refusal precedes credential acquisition and financial admission. */
+export function validateDecisionPolicy(request, descriptor, host = {}) {
+    const encoded = encodeJevRequest(request, descriptor);
+    if (!encoded.ok)
+        return encoded.code;
+    const criterion = encoded.criterion;
+    if (descriptor.qualification.servedIdentity !== 'qualified')
+        return 'PROVIDER_UNAVAILABLE';
+    if (request.policy?.explanation === 'required' || request.decision?.kind === 'provider')
+        return 'CAPABILITY_UNSUPPORTED';
+    if (request.raw?.mode === 'allowlisted' && host.allowRaw !== true)
+        return 'CAPABILITY_UNSUPPORTED';
+    if (criterion.kind === 'choice' && criterion.options.some((option) => ['__proto__', 'constructor', 'prototype'].includes(option.id))) {
+        return 'CAPABILITY_UNSUPPORTED';
+    }
+    const rule = request.decision;
+    if (rule?.kind === 'threshold') {
+        if (criterion.kind === 'choice')
+            return 'CAPABILITY_UNSUPPORTED';
+        const max = criterion.kind === 'binary' ? 1 : criterion.levels.length - 1;
+        if (rule.value < 0 || rule.value > max)
+            return 'REQUEST_INVALID';
+    }
+    if (rule?.kind === 'labels') {
+        if (criterion.kind !== 'choice')
+            return 'CAPABILITY_UNSUPPORTED';
+        if (!rule.passing.every((label) => criterion.options.some((option) => option.id === label)))
+            return 'REQUEST_INVALID';
+    }
+    return null;
+}
+//# sourceMappingURL=policy.js.map

package/dist/decision/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/decision/policy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,OAAwB,EAAE,UAAuC,EACtG,OAA2B,EAAE;IAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IAAI,UAAU,CAAC,aAAa,CAAC,cAAc,KAAK,WAAW;QAAE,OAAO,sBAAsB,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,EAAE,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,KAAK,UAAU;QAAE,OAAO,wBAAwB,CAAC;IACzH,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,wBAAwB,CAAC;IACnG,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrI,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,wBAAwB,CAAC;QACjE,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,GAAG;YAAE,OAAO,iBAAiB,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,wBAAwB,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,iBAAiB,CAAC;IACxH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/decision/pricing.d.ts

@@ -0,0 +1,40 @@
+import type { DecisionRequest, MicroUsd } from './request.js';
+import type { DecisionBackendProtocol, DecisionEvaluatorDescriptor } from './descriptor.js';
+import type { DecisionCost, DecisionUsage } from './receipt.js';
+/** Projection of the host's existing immutable provider/model price row. The
+ * optional authority/protocol cells bind a row to one price authority and
+ * backend protocol; present cells must match the descriptor (§3.2
+ * Accounting), so two authorities cannot share a revision silently. */
+export interface DecisionPrice {
+    providerId: string;
+    modelId: string;
+    priceRevision: string;
+    inputMicroUsdPerMtok: MicroUsd;
+    outputMicroUsdPerMtok: MicroUsd;
+    minimumMicroUsd: MicroUsd;
+    identityMismatchPricing: 'requested-model' | 'requires-reconciliation';
+    authority: string;
+    protocol: DecisionBackendProtocol;
+}
+export interface DecisionQuote {
+    price: DecisionPrice;
+    reservedMicroUsd: MicroUsd;
+}
+export declare const isMicroUsd: (value: unknown) => value is string;
+export declare function quoteDecision(request: DecisionRequest, descriptor: DecisionEvaluatorDescriptor, candidate: unknown, hostCap?: MicroUsd): {
+    ok: true;
+    quote: DecisionQuote;
+} | {
+    ok: false;
+    code: 'PRICING_UNAVAILABLE' | 'BUDGET_BOUND_UNAVAILABLE' | 'BUDGET_EXHAUSTED';
+};
+/** Uncertain execution uses the reserve, never invented tokens or a zero charge.
+ * Any priced component whose usage is unknown keeps the settlement pending
+ * and charges at least the full reserve: known input spend never releases
+ * the unknown output liability. */
+export declare function priceDecisionUsage(usage: DecisionUsage, quote: DecisionQuote, identityMismatch?: boolean): {
+    cost: DecisionCost;
+    pending: boolean;
+    overrun: boolean;
+};
+//# sourceMappingURL=pricing.d.ts.map

package/dist/decision/pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../src/decision/pricing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAIhE;;;uEAGuE;AACvE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAC3D,oBAAoB,EAAE,QAAQ,CAAC;IAAC,qBAAqB,EAAE,QAAQ,CAAC;IAAC,eAAe,EAAE,QAAQ,CAAC;IAC3F,uBAAuB,EAAE,iBAAiB,GAAG,yBAAyB,CAAC;IACvE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,uBAAuB,CAAC;CACtD;AACD,MAAM,WAAW,aAAa;IAAG,KAAK,EAAE,aAAa,CAAC;IAAC,gBAAgB,EAAE,QAAQ,CAAA;CAAE;AACnF,eAAO,MAAM,UAAU,UAAW,OAAO,oBAAoF,CAAC;AAI9H,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,2BAA2B,EAAE,SAAS,EAAE,OAAO,EACjH,OAAO,CAAC,EAAE,QAAQ,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,qBAAqB,GAAG,0BAA0B,GAAG,kBAAkB,CAAA;CAAE,CA6BvJ;AAED;;;mCAGmC;AACnC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,gBAAgB,UAAQ,GACrG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAmB3D"}

package/dist/decision/pricing.js

@@ -0,0 +1,65 @@
+import { freezeDecisionData } from './descriptor-validation.js';
+import { hasOnlyKeys, isCorrelationId, isRecord, snapshotBoundedJson } from './validation.js';
+export const isMicroUsd = (value) => typeof value === 'string' && /^(0|[1-9][0-9]*)$/.test(value);
+const ceilRate = (tokens, rate) => (BigInt(tokens) * BigInt(rate) + 999999n) / 1000000n;
+const minimum = (value, price) => value > BigInt(price.minimumMicroUsd) ? value : BigInt(price.minimumMicroUsd);
+export function quoteDecision(request, descriptor, candidate, hostCap) {
+    const snapshot = snapshotBoundedJson(candidate);
+    const value = snapshot.ok ? snapshot.value : null;
+    if (!isRecord(value) || !hasOnlyKeys(value, ['providerId', 'modelId', 'priceRevision', 'inputMicroUsdPerMtok',
+        'outputMicroUsdPerMtok', 'minimumMicroUsd', 'identityMismatchPricing', 'authority', 'protocol']) || value.providerId !== descriptor.evaluator.providerId
+        || value.modelId !== descriptor.wireModel || value.priceRevision !== descriptor.priceProtocol.revision
+        || !isCorrelationId(value.priceRevision)
+        || !isMicroUsd(value.inputMicroUsdPerMtok) || !isMicroUsd(value.outputMicroUsdPerMtok) || !isMicroUsd(value.minimumMicroUsd)
+        || !['requested-model', 'requires-reconciliation'].some((v) => v === value.identityMismatchPricing)
+        || value.authority !== descriptor.priceProtocol.authority
+        || value.protocol !== (descriptor.protocol ?? 'jev-native'))
+        return { ok: false, code: 'PRICING_UNAVAILABLE' };
+    const price = freezeDecisionData(value);
+    if (descriptor.qualification.billingBound !== 'qualified')
+        return { ok: false, code: 'BUDGET_BOUND_UNAVAILABLE' };
+    const isJev = (descriptor.protocol ?? 'jev-native') === 'jev-native';
+    // JEV has no qualified output liability bound. A nonzero output rate cannot be reserved.
+    if (isJev && price.outputMicroUsdPerMtok !== '0')
+        return { ok: false, code: 'BUDGET_BOUND_UNAVAILABLE' };
+    // Non-JEV protocols price output work, so quoting requires the descriptor's
+    // enforced output/reasoning bound. Without it no finite liability exists.
+    const outputBound = descriptor.maxBillableOutputTokens;
+    if (!isJev && (typeof outputBound !== 'number' || !Number.isSafeInteger(outputBound) || outputBound < 1)) {
+        return { ok: false, code: 'BUDGET_BOUND_UNAVAILABLE' };
+    }
+    const inputReserve = ceilRate(descriptor.maxBillableInputTokens, price.inputMicroUsdPerMtok);
+    const outputReserve = isJev ? 0n : ceilRate(descriptor.maxBillableOutputTokens, price.outputMicroUsdPerMtok);
+    const reserve = minimum(inputReserve + outputReserve, price);
+    const caps = [hostCap, request.policy?.budget?.maxCostMicroUsd].filter((v) => v !== undefined);
+    if (caps.some((cap) => !isMicroUsd(cap)))
+        return { ok: false, code: 'PRICING_UNAVAILABLE' };
+    if (caps.some((cap) => reserve > BigInt(cap)))
+        return { ok: false, code: 'BUDGET_EXHAUSTED' };
+    return { ok: true, quote: freezeDecisionData({ price, reservedMicroUsd: reserve.toString() }) };
+}
+/** Uncertain execution uses the reserve, never invented tokens or a zero charge.
+ * Any priced component whose usage is unknown keeps the settlement pending
+ * and charges at least the full reserve: known input spend never releases
+ * the unknown output liability. */
+export function priceDecisionUsage(usage, quote, identityMismatch = false) {
+    const input = usage.tokens.input;
+    const output = usage.tokens.output;
+    const applicable = !identityMismatch || quote.price.identityMismatchPricing === 'requested-model';
+    const inputKnown = input.source === 'provider' && applicable;
+    const outputKnown = inputKnown && output.source === 'provider';
+    const inputPriced = quote.price.inputMicroUsdPerMtok !== '0';
+    const outputPriced = quote.price.outputMicroUsdPerMtok !== '0';
+    const pricedUnknown = (inputPriced && !inputKnown) || (outputPriced && !outputKnown);
+    const inputAmount = inputKnown ? ceilRate(input.value, quote.price.inputMicroUsdPerMtok) : 0n;
+    const outputAmount = outputKnown ? ceilRate(output.value, quote.price.outputMicroUsdPerMtok) : 0n;
+    const computed = inputKnown || outputKnown ? minimum(inputAmount + outputAmount, quote.price) : BigInt(quote.reservedMicroUsd);
+    const reserved = BigInt(quote.reservedMicroUsd);
+    const amount = pricedUnknown && computed < reserved ? reserved : computed;
+    const fullyUnknown = !inputKnown && !outputKnown;
+    return { cost: { status: 'estimated', amountMicroUsd: amount.toString(),
+            source: fullyUnknown || pricedUnknown ? 'reserved-liability' : 'reported-usage-times-rate',
+            priceRevision: quote.price.priceRevision, rounding: 'ceil-micro-usd' },
+        pending: pricedUnknown, overrun: amount > reserved };
+}
+//# sourceMappingURL=pricing.js.map

package/dist/decision/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../src/decision/pricing.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAa9F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9H,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,QAAQ,CAAC;AACxG,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAoB,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAEvI,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,UAAuC,EAAE,SAAkB,EACjH,OAAkB;IAClB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,sBAAsB;QAC3G,uBAAuB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,SAAS,CAAC,UAAU;WACrJ,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa,CAAC,QAAQ;WACnG,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC;WACrC,CAAC,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;WACzH,CAAC,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,uBAAuB,CAAC;WAChG,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,aAAa,CAAC,SAAS;WACtD,KAAK,CAAC,QAAQ,KAAK,CAAC,UAAU,CAAC,QAAQ,IAAI,YAAY,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACjH,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAiC,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,aAAa,CAAC,YAAY,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IAClH,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,YAAY,CAAC,KAAK,YAAY,CAAC;IACrE,yFAAyF;IACzF,IAAI,KAAK,IAAI,KAAK,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACzG,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,UAAU,CAAC,uBAAuB,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,CAAC,EAAE,CAAC;QACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,sBAAsB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,GAAG,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC5F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AAClG,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,KAAoB,EAAE,gBAAgB,GAAG,KAAK;IAErG,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,uBAAuB,KAAK,iBAAiB,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,KAAK,GAAG,CAAC;IAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,qBAAqB,KAAK,GAAG,CAAC;IAC/D,MAAM,aAAa,GAAG,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,QAAQ,GAAG,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,GAAG,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,IAAI,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1E,MAAM,YAAY,GAAG,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE;YACrE,MAAM,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,2BAA2B;YAC1F,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE;QACxE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAAC;AACvD,CAAC"}

package/dist/decision/raw.d.ts

@@ -0,0 +1,7 @@
+import type { DecisionRequest } from './request.js';
+import type { DecisionVerdict } from './verdict.js';
+/** Drop whole optional native fields to fit; never truncate the typed verdict. */
+export declare function makeJevProviderRaw(native: unknown, request: DecisionRequest): DecisionVerdict['providerRaw'];
+/** Raw remains optional, bounded and tied to the already validated native evidence. */
+export declare function parseJevProviderRaw(candidate: unknown, native: unknown, request: DecisionRequest): DecisionVerdict['providerRaw'] | null;
+//# sourceMappingURL=raw.d.ts.map

package/dist/decision/raw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/decision/raw.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAQ,MAAM,cAAc,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAOpD,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,eAAe,CAAC,aAAa,CAAC,CAa5G;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,eAAe,CAAC,aAAa,CAAC,GAAG,IAAI,CAkBxI"}

package/dist/decision/raw.js

@@ -0,0 +1,53 @@
+import { hasOnlyKeys, isRecord, snapshotBoundedJson } from './validation.js';
+const fields = ['noul', 'score', 'choice', 'probabilities', 'confidence'];
+const bytes = (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength;
+const limit = (request) => Math.min(16384, request.raw?.maxBytes ?? 16384);
+/** Drop whole optional native fields to fit; never truncate the typed verdict. */
+export function makeJevProviderRaw(native, request) {
+    if (request.raw?.mode !== 'allowlisted' || limit(request) < 2)
+        return undefined;
+    const snapshot = snapshotBoundedJson(native);
+    if (!snapshot.ok || !isRecord(snapshot.value))
+        return undefined;
+    const data = {};
+    let truncated = false;
+    for (const field of fields) {
+        if (!Object.hasOwn(snapshot.value, field))
+            continue;
+        const next = { ...data, [field]: snapshot.value[field] };
+        if (bytes(next) > limit(request)) {
+            truncated = true;
+            continue;
+        }
+        data[field] = snapshot.value[field];
+    }
+    return { data, bytes: bytes(data), truncated };
+}
+/** Raw remains optional, bounded and tied to the already validated native evidence. */
+export function parseJevProviderRaw(candidate, native, request) {
+    const snapshot = snapshotBoundedJson(candidate);
+    if (request.raw?.mode !== 'allowlisted' || !snapshot.ok || !isRecord(snapshot.value) || !isRecord(native))
+        return null;
+    const value = snapshot.value;
+    if (!hasOnlyKeys(value, ['data', 'bytes', 'truncated']) || !isRecord(value.data) || !hasOnlyKeys(value.data, fields)
+        || typeof value.truncated !== 'boolean' || value.bytes !== bytes(value.data) || bytes(value.data) > limit(request))
+        return null;
+    const rawData = value.data;
+    for (const [field, data] of Object.entries(rawData)) {
+        if (!Object.hasOwn(native, field))
+            return null;
+        const expected = native[field];
+        if (isRecord(data) && isRecord(expected)) {
+            if (Object.keys(data).length !== Object.keys(expected).length
+                || !Object.keys(data).every((key) => data[key] === expected[key]))
+                return null;
+        }
+        else if (data !== native[field])
+            return null;
+    }
+    const omitted = fields.some((field) => Object.hasOwn(native, field) && !Object.hasOwn(rawData, field));
+    if (value.truncated !== omitted)
+        return null;
+    return { data: value.data, bytes: value.bytes, truncated: value.truncated };
+}
+//# sourceMappingURL=raw.js.map

package/dist/decision/raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.js","sourceRoot":"","sources":["../../src/decision/raw.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,CAAU,CAAC;AACnF,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7F,MAAM,KAAK,GAAG,CAAC,OAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC;AAE5F,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,OAAwB;IAC1E,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,SAAS;QACpD,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAS,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,SAAkB,EAAE,MAAe,EAAE,OAAwB;IAC/F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;WAC/G,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;mBACxD,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnF,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAe,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAChG,CAAC"}

package/dist/decision/receipt.d.ts

@@ -0,0 +1,120 @@
+import type { DecisionError, DecisionErrorCode } from './errors.js';
+import type { EvaluatorRef, DecisionRequest, MicroUsd } from './request.js';
+import type { DecisionVerdict } from './verdict.js';
+export type TokenCounter = {
+    value: number;
+    source: 'provider';
+} | {
+    value: null;
+    source: 'not-reported';
+};
+export type TotalTokenCounter = TokenCounter | {
+    value: number;
+    source: 'derived-sum';
+};
+export interface DecisionUsage {
+    tokens: {
+        input: TokenCounter;
+        output: TokenCounter;
+        total: TotalTokenCounter;
+    };
+    evaluatorCalls: number | null;
+    explanations: number | null;
+}
+export type DecisionCost = {
+    status: 'actual';
+    amountMicroUsd: MicroUsd;
+    source: 'provider';
+    priceRevision?: string;
+    rounding: 'ceil-micro-usd';
+} | {
+    status: 'estimated';
+    amountMicroUsd: MicroUsd;
+    source: 'reported-usage-times-rate' | 'call-rate' | 'reserved-liability';
+    priceRevision: string;
+    rounding: 'ceil-micro-usd';
+} | {
+    status: 'not-incurred';
+    amountMicroUsd: '0';
+    source: 'no-dispatch';
+};
+export interface RetentionReceipt {
+    status: 'non-zdr' | 'unknown' | 'not-evaluated';
+    basis: 'published-policy' | 'none';
+    evidenceRefs: readonly string[];
+    retentionDays: number | null;
+    gap?: 'unknown (source-gap)';
+}
+export interface DecisionReceipt {
+    schemaVersion: 1;
+    callId: string;
+    correlationId: string;
+    evaluator: EvaluatorRef | null;
+    servedEvaluator: EvaluatorRef | null;
+    servedModelId: string | null;
+    providerRequestId?: string;
+    startedAt: string;
+    finishedAt: string;
+    latencyMs: number;
+    providerLatencyMs?: number;
+    /** Durable marker dispatch state; 'unknown' on ambiguous marker failure before provider call. */
+    dispatch: 'not-started' | 'started' | 'completed' | 'unknown';
+    /** Number of provider invocation attempts (0 if marking failed before provider dispatch). */
+    attempts: 0 | 1;
+    usage: DecisionUsage;
+    cost: DecisionCost;
+    retention: RetentionReceipt;
+    budget: {
+        state: 'not-admitted' | 'released' | 'settled' | 'pending-reconciliation';
+        reservedMicroUsd?: MicroUsd;
+        overrun: boolean;
+    };
+    outcome: 'verdict' | 'error';
+    errorCode?: DecisionErrorCode;
+}
+export type DecisionResult = {
+    kind: 'verdict';
+    ok: true;
+    verdict: DecisionVerdict;
+    receipt: DecisionReceipt;
+} | {
+    kind: 'error';
+    ok: false;
+    error: DecisionError;
+    receipt: DecisionReceipt;
+};
+export interface DecisionClient {
+    decide(request: DecisionRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<DecisionResult>;
+}
+export interface DecisionConnectionFailure {
+    kind: 'connection-failure';
+    ok: false;
+    error: DecisionError & {
+        code: 'MESH_UNAVAILABLE' | 'TRANSPORT_FAILED' | 'TIMEOUT' | 'CANCELLED';
+    };
+    receipt: null;
+    usage: DecisionUsage;
+    callStatus: 'not-sent' | 'unknown';
+    correlationId: string;
+}
+export interface RemoteDecisionClient {
+    decide(request: DecisionRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<DecisionResult | DecisionConnectionFailure>;
+}
+/** Unknown counters stay null even when no dispatch proves zero evaluator calls. */
+export declare function unreportedDecisionUsage(execution: 'not-dispatched' | 'unknown'): DecisionUsage;
+/** Correlation is metadata, never financial idempotency or caller authority. */
+export declare function resolveDecisionCorrelationId(value: string | undefined, generate?: () => string): string | null;
+/** Each counter has independent provenance; only a safe, known total can be derived. */
+export declare function parseDecisionUsage(candidate: unknown): DecisionUsage | null;
+export declare function normalizeDecisionUsage(reported: {
+    inputTokens?: number | null;
+    outputTokens?: number | null;
+    totalTokens?: number | null;
+    evaluatorCalls: number | null;
+    explanations: number | null;
+}): DecisionUsage | null;
+//# sourceMappingURL=receipt.d.ts.map

package/dist/decision/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/decision/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAC5C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAExF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE;QAAE,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAChF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,cAAc,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACtD;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,cAAc,EAAE,QAAQ,CAAC;IAC9C,MAAM,EAAE,2BAA2B,GAAG,WAAW,GAAG,oBAAoB,CAAC;IACzE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,cAAc,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;IAChD,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAAC;IACnC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iGAAiG;IACjG,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC9D,6FAA6F;IAC7F,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE;QAAE,KAAK,EAAE,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,wBAAwB,CAAC;QAClF,gBAAgB,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAClD,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,aAAa,GAAG;QAAE,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,GAAG,WAAW,CAAA;KAAE,CAAC;IACnG,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,aAAa,CAAC;IACrB,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,GAAG,yBAAyB,CAAC,CAAC;CAC3H;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,aAAa,CAK9F;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EACpE,QAAQ,GAAE,MAAM,MAA6C,GAAG,MAAM,GAAG,IAAI,CAG9E;AAWD,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAmB3E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,aAAa,GAAG,IAAI,CAYjH"}

package/dist/decision/receipt.js

@@ -0,0 +1,58 @@
+import { hasOnlyKeys, isCorrelationId, isRecord, snapshotBoundedJson } from './validation.js';
+/** Unknown counters stay null even when no dispatch proves zero evaluator calls. */
+export function unreportedDecisionUsage(execution) {
+    return { tokens: { input: { value: null, source: 'not-reported' },
+            output: { value: null, source: 'not-reported' }, total: { value: null, source: 'not-reported' } },
+        evaluatorCalls: execution === 'not-dispatched' ? 0 : null,
+        explanations: execution === 'not-dispatched' ? 0 : null };
+}
+/** Correlation is metadata, never financial idempotency or caller authority. */
+export function resolveDecisionCorrelationId(value, generate = () => globalThis.crypto.randomUUID()) {
+    const candidate = value === undefined ? generate() : value;
+    return isCorrelationId(candidate) ? candidate : null;
+}
+const isCount = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+function isCounter(value, total) {
+    return isRecord(value) && hasOnlyKeys(value, ['value', 'source'])
+        && (value.source === 'not-reported' ? value.value === null
+            : (value.source === 'provider' || (total && value.source === 'derived-sum')) && isCount(value.value));
+}
+/** Each counter has independent provenance; only a safe, known total can be derived. */
+export function parseDecisionUsage(candidate) {
+    const snapshot = snapshotBoundedJson(candidate);
+    if (!snapshot.ok)
+        return null;
+    const value = snapshot.value;
+    if (!isRecord(value) || !hasOnlyKeys(value, ['tokens', 'evaluatorCalls', 'explanations'])
+        || !isRecord(value.tokens) || !hasOnlyKeys(value.tokens, ['input', 'output', 'total'])
+        || !isCounter(value.tokens.input, false) || !isCounter(value.tokens.output, false)
+        || !isCounter(value.tokens.total, true)
+        || (value.evaluatorCalls !== null && !isCount(value.evaluatorCalls))
+        || (value.explanations !== null && !isCount(value.explanations)))
+        return null;
+    const usage = value;
+    const { input, output, total } = usage.tokens;
+    if (total.source === 'derived-sum') {
+        if (input.source !== 'provider' || output.source !== 'provider')
+            return null;
+        const sum = input.value + output.value;
+        if (!isCount(sum) || total.value !== sum)
+            return null;
+    }
+    return { tokens: { input: { ...input }, output: { ...output }, total: { ...total } },
+        evaluatorCalls: usage.evaluatorCalls, explanations: usage.explanations };
+}
+export function normalizeDecisionUsage(reported) {
+    const counter = (value) => value == null
+        ? { value: null, source: 'not-reported' } : { value, source: 'provider' };
+    const input = counter(reported.inputTokens);
+    const output = counter(reported.outputTokens);
+    const total = reported.totalTokens != null
+        ? { value: reported.totalTokens, source: 'provider' }
+        : input.source === 'provider' && output.source === 'provider'
+            ? { value: input.value + output.value, source: 'derived-sum' }
+            : { value: null, source: 'not-reported' };
+    return parseDecisionUsage({ tokens: { input, output, total }, evaluatorCalls: reported.evaluatorCalls,
+        explanations: reported.explanations });
+}
+//# sourceMappingURL=receipt.js.map

package/dist/decision/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/decision/receipt.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AA4E9F,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,SAAuC;IAC7E,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE;YAC/D,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;QACjG,cAAc,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACzD,YAAY,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,KAAyB,EACpE,WAAyB,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;IAC7D,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAEzE,SAAS,SAAS,CAAC,KAAc,EAAE,KAAc;IAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;WAC5D,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;YACxD,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;WACpF,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;WACnF,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;WAC/E,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;WACpC,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;WACjE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,KAAK,GAAG,KAAiC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE;QAClF,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QACoD;IACzF,MAAM,OAAO,GAAG,CAAC,KAAgC,EAAgB,EAAE,CAAC,KAAK,IAAI,IAAI;QAC/E,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAsB,QAAQ,CAAC,WAAW,IAAI,IAAI;QAC3D,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE;QACrD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAC3D,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE;YAC9D,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9C,OAAO,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc;QACnG,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;AAC3C,CAAC"}

package/dist/decision/request-policy.d.ts

@@ -0,0 +1,3 @@
+export declare function isRequestPolicy(value: unknown): boolean;
+export declare function isRawPolicy(value: unknown): boolean;
+//# sourceMappingURL=request-policy.d.ts.map

package/dist/decision/request-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-policy.d.ts","sourceRoot":"","sources":["../../src/decision/request-policy.ts"],"names":[],"mappings":"AAEA,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOvD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKnD"}

package/dist/decision/request-policy.js

@@ -0,0 +1,19 @@
+import { has, hasOnlyKeys, isMicroUsd, isRecord, DECISION_MAX_RAW_BYTES } from './validation.js';
+export function isRequestPolicy(value) {
+    if (!isRecord(value) || !hasOnlyKeys(value, ['budget', 'timeoutMs', 'explanation']))
+        return false;
+    if (has(value, 'budget') && (!isRecord(value.budget)
+        || !hasOnlyKeys(value.budget, ['maxCostMicroUsd']) || !isMicroUsd(value.budget.maxCostMicroUsd)))
+        return false;
+    if (has(value, 'timeoutMs') && (typeof value.timeoutMs !== 'number'
+        || !Number.isSafeInteger(value.timeoutMs) || value.timeoutMs < 1 || value.timeoutMs > 60_000))
+        return false;
+    return !has(value, 'explanation') || ['none', 'if-available', 'required'].some((v) => v === value.explanation);
+}
+export function isRawPolicy(value) {
+    return isRecord(value) && hasOnlyKeys(value, ['mode', 'maxBytes'])
+        && (value.mode === 'none' || value.mode === 'allowlisted')
+        && (!has(value, 'maxBytes') || (typeof value.maxBytes === 'number'
+            && Number.isSafeInteger(value.maxBytes) && value.maxBytes >= 0 && value.maxBytes <= DECISION_MAX_RAW_BYTES));
+}
+//# sourceMappingURL=request-policy.js.map

package/dist/decision/request-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-policy.js","sourceRoot":"","sources":["../../src/decision/request-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;WAC/C,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjH,IAAI,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAC9D,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;WAC7D,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;WACvD,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAC7D,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,sBAAsB,CAAC,CAAC,CAAC;AACnH,CAAC"}

package/dist/decision/request.d.ts

@@ -0,0 +1,85 @@
+import type { ProviderId } from '../providers.js';
+export type Json = null | boolean | number | string | readonly Json[] | {
+    readonly [key: string]: Json;
+};
+/** Canonical nonnegative integer decimal micro-USD, never floating point. */
+export type MicroUsd = string;
+export interface EvaluatorRef {
+    providerId: ProviderId;
+    evaluatorId: string;
+    revision: string;
+}
+export interface DecisionInputs {
+    input?: Json;
+    output?: Json;
+    context?: readonly Json[];
+    reference?: Json;
+    state?: Json;
+}
+export type DecisionCriterion = {
+    kind: 'binary';
+    instructions: string;
+    criteria?: {
+        true: string;
+        false: string;
+    };
+} | {
+    kind: 'graded';
+    instructions: string;
+    direction: 'higher-is-better' | 'lower-is-better' | 'unordered';
+    levels: readonly {
+        label: string;
+        description: string;
+    }[];
+} | {
+    kind: 'choice';
+    instructions: string;
+    options: readonly {
+        id: string;
+        description: string;
+    }[];
+} | {
+    kind: 'registered';
+    criteriaId: string;
+    revision: string;
+};
+export type DecisionRule = {
+    kind: 'provider';
+} | {
+    kind: 'threshold';
+    field: 'score';
+    op: 'gte' | 'lte';
+    value: number;
+} | {
+    kind: 'labels';
+    passing: readonly string[];
+};
+export interface DecisionRequest {
+    schemaVersion: 1;
+    evaluator: EvaluatorRef;
+    inputs: DecisionInputs;
+    criterion: DecisionCriterion;
+    decision?: DecisionRule;
+    policy?: {
+        budget?: {
+            maxCostMicroUsd: MicroUsd;
+        };
+        timeoutMs?: number;
+        explanation?: 'none' | 'if-available' | 'required';
+    };
+    raw?: {
+        mode: 'none' | 'allowlisted';
+        maxBytes?: number;
+    };
+    correlationId?: string;
+}
+export type DecisionRequestParseResult = {
+    ok: true;
+    request: DecisionRequest;
+} | {
+    ok: false;
+    code: 'REQUEST_INVALID' | 'CAPABILITY_UNSUPPORTED' | 'PROVIDER_UNKNOWN';
+};
+/** Pure preflight parsing: capabilities and descriptor revisions remain service-owned. */
+export declare function parseDecisionRequest(value: unknown): DecisionRequestParseResult;
+//# sourceMappingURL=request.d.ts.map

package/dist/decision/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/decision/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAMlD,MAAM,MAAM,IAAI,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,IAAI,EAAE,GACjE;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AACrC,6EAA6E;AAC7E,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,IAAI,CAAC;CACd;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACrC,SAAS,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,WAAW,CAAC;IAChE,MAAM,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACrC,OAAO,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE;YAAE,eAAe,EAAE,QAAQ,CAAA;SAAE,CAAC;QACvC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,UAAU,CAAC;KACpD,CAAC;IACF,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,wBAAwB,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAE3F,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAkC/E"}

package/dist/decision/request.js

@@ -0,0 +1,49 @@
+import { isProviderId } from '../providers.js';
+import { isDecisionCriterion, isDecisionRule } from './criterion.js';
+import { isRawPolicy, isRequestPolicy } from './request-policy.js';
+import { has, hasOnlyKeys, isCorrelationId, isRecord, isText, snapshotBoundedJson } from './validation.js';
+/** Pure preflight parsing: capabilities and descriptor revisions remain service-owned. */
+export function parseDecisionRequest(value) {
+    const invalid = { ok: false, code: 'REQUEST_INVALID' };
+    const snapshot = snapshotBoundedJson(value);
+    if (!snapshot.ok)
+        return invalid;
+    value = snapshot.value;
+    if (!isRecord(value))
+        return invalid;
+    // Unsupported retention policy takes precedence over ordinary extra-property errors.
+    if (isRecord(value.policy) && has(value.policy, 'zdr')) {
+        return { ok: false, code: 'CAPABILITY_UNSUPPORTED' };
+    }
+    if (!hasOnlyKeys(value, ['schemaVersion', 'evaluator', 'inputs', 'criterion', 'decision', 'policy', 'raw', 'correlationId'])
+        || value.schemaVersion !== 1 || !isRecord(value.evaluator)
+        || !hasOnlyKeys(value.evaluator, ['providerId', 'evaluatorId', 'revision'])
+        || !isText(value.evaluator.providerId) || !isText(value.evaluator.evaluatorId)
+        || !isText(value.evaluator.revision) || !isRecord(value.inputs)
+        || !hasOnlyKeys(value.inputs, ['input', 'output', 'context', 'reference', 'state'])
+        || (!has(value.inputs, 'output') && !has(value.inputs, 'state'))
+        || (has(value.inputs, 'context') && !Array.isArray(value.inputs.context)))
+        return invalid;
+    const criterion = value.criterion;
+    if (!isDecisionCriterion(criterion))
+        return invalid;
+    if (has(value, 'decision')) {
+        const decision = value.decision;
+        if (!isDecisionRule(decision))
+            return invalid;
+        if (decision.kind === 'labels' && criterion.kind !== 'registered') {
+            const labels = criterion.kind === 'choice' ? criterion.options.map((v) => v.id)
+                : criterion.kind === 'graded' ? criterion.levels.map((v) => v.label) : [];
+            if (!decision.passing.every((label) => labels.includes(label)))
+                return invalid;
+        }
+    }
+    if ((has(value, 'policy') && !isRequestPolicy(value.policy))
+        || (has(value, 'raw') && !isRawPolicy(value.raw))
+        || (has(value, 'correlationId') && !isCorrelationId(value.correlationId)))
+        return invalid;
+    if (!isProviderId(value.evaluator.providerId))
+        return { ok: false, code: 'PROVIDER_UNKNOWN' };
+    return { ok: true, request: value };
+}
+//# sourceMappingURL=request.js.map