@sentropic/llm-mesh 0.28.0 → 0.29.0

package/dist/decision/pricing.js

@@ -0,0 +1,65 @@
+import { freezeDecisionData } from './descriptor-validation.js';
+import { hasOnlyKeys, isCorrelationId, isRecord, snapshotBoundedJson } from './validation.js';
+export const isMicroUsd = (value) => typeof value === 'string' && /^(0|[1-9][0-9]*)$/.test(value);
+const ceilRate = (tokens, rate) => (BigInt(tokens) * BigInt(rate) + 999999n) / 1000000n;
+const minimum = (value, price) => value > BigInt(price.minimumMicroUsd) ? value : BigInt(price.minimumMicroUsd);
+export function quoteDecision(request, descriptor, candidate, hostCap) {
+    const snapshot = snapshotBoundedJson(candidate);
+    const value = snapshot.ok ? snapshot.value : null;
+    if (!isRecord(value) || !hasOnlyKeys(value, ['providerId', 'modelId', 'priceRevision', 'inputMicroUsdPerMtok',
+        'outputMicroUsdPerMtok', 'minimumMicroUsd', 'identityMismatchPricing', 'authority', 'protocol']) || value.providerId !== descriptor.evaluator.providerId
+        || value.modelId !== descriptor.wireModel || value.priceRevision !== descriptor.priceProtocol.revision
+        || !isCorrelationId(value.priceRevision)
+        || !isMicroUsd(value.inputMicroUsdPerMtok) || !isMicroUsd(value.outputMicroUsdPerMtok) || !isMicroUsd(value.minimumMicroUsd)
+        || !['requested-model', 'requires-reconciliation'].some((v) => v === value.identityMismatchPricing)
+        || value.authority !== descriptor.priceProtocol.authority
+        || value.protocol !== (descriptor.protocol ?? 'jev-native'))
+        return { ok: false, code: 'PRICING_UNAVAILABLE' };
+    const price = freezeDecisionData(value);
+    if (descriptor.qualification.billingBound !== 'qualified')
+        return { ok: false, code: 'BUDGET_BOUND_UNAVAILABLE' };
+    const inputOnly = (descriptor.protocol ?? 'jev-native') === 'jev-native' || descriptor.protocol === 'openai-decisions';
+    // Native JEV/Decisions tariffs admit no billed output; reject a foreign output rate.
+    if (inputOnly && price.outputMicroUsdPerMtok !== '0')
+        return { ok: false, code: 'BUDGET_BOUND_UNAVAILABLE' };
+    // Other protocols price output work, so quoting requires the descriptor's
+    // enforced output/reasoning bound. Without it no finite liability exists.
+    const outputBound = descriptor.maxBillableOutputTokens;
+    if (!inputOnly && (typeof outputBound !== 'number' || !Number.isSafeInteger(outputBound) || outputBound < 1)) {
+        return { ok: false, code: 'BUDGET_BOUND_UNAVAILABLE' };
+    }
+    const inputReserve = ceilRate(descriptor.maxBillableInputTokens, price.inputMicroUsdPerMtok);
+    const outputReserve = inputOnly ? 0n : ceilRate(descriptor.maxBillableOutputTokens, price.outputMicroUsdPerMtok);
+    const reserve = minimum(inputReserve + outputReserve, price);
+    const caps = [hostCap, request.policy?.budget?.maxCostMicroUsd].filter((v) => v !== undefined);
+    if (caps.some((cap) => !isMicroUsd(cap)))
+        return { ok: false, code: 'PRICING_UNAVAILABLE' };
+    if (caps.some((cap) => reserve > BigInt(cap)))
+        return { ok: false, code: 'BUDGET_EXHAUSTED' };
+    return { ok: true, quote: freezeDecisionData({ price, reservedMicroUsd: reserve.toString() }) };
+}
+/** Uncertain execution uses the reserve, never invented tokens or a zero charge.
+ * Any priced component whose usage is unknown keeps the settlement pending
+ * and charges at least the full reserve: known input spend never releases
+ * the unknown output liability. */
+export function priceDecisionUsage(usage, quote, identityMismatch = false) {
+    const input = usage.tokens.input;
+    const output = usage.tokens.output;
+    const applicable = !identityMismatch || quote.price.identityMismatchPricing === 'requested-model';
+    const inputKnown = input.source === 'provider' && applicable;
+    const outputKnown = inputKnown && output.source === 'provider';
+    const inputPriced = quote.price.inputMicroUsdPerMtok !== '0';
+    const outputPriced = quote.price.outputMicroUsdPerMtok !== '0';
+    const pricedUnknown = (inputPriced && !inputKnown) || (outputPriced && !outputKnown);
+    const inputAmount = inputKnown ? ceilRate(input.value, quote.price.inputMicroUsdPerMtok) : 0n;
+    const outputAmount = outputKnown ? ceilRate(output.value, quote.price.outputMicroUsdPerMtok) : 0n;
+    const computed = inputKnown || outputKnown ? minimum(inputAmount + outputAmount, quote.price) : BigInt(quote.reservedMicroUsd);
+    const reserved = BigInt(quote.reservedMicroUsd);
+    const amount = pricedUnknown && computed < reserved ? reserved : computed;
+    const fullyUnknown = !inputKnown && !outputKnown;
+    return { cost: { status: 'estimated', amountMicroUsd: amount.toString(),
+            source: fullyUnknown || pricedUnknown ? 'reserved-liability' : 'reported-usage-times-rate',
+            priceRevision: quote.price.priceRevision, rounding: 'ceil-micro-usd' },
+        pending: pricedUnknown, overrun: amount > reserved };
+}
+//# sourceMappingURL=pricing.js.map

package/dist/decision/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../src/decision/pricing.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAa9F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9H,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,QAAQ,CAAC;AACxG,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAoB,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAEvI,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,UAAuC,EAAE,SAAkB,EACjH,OAAkB;IAClB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,sBAAsB;QAC3G,uBAAuB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,SAAS,CAAC,UAAU;WACrJ,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa,CAAC,QAAQ;WACnG,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC;WACrC,CAAC,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;WACzH,CAAC,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,uBAAuB,CAAC;WAChG,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,aAAa,CAAC,SAAS;WACtD,KAAK,CAAC,QAAQ,KAAK,CAAC,UAAU,CAAC,QAAQ,IAAI,YAAY,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACjH,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAiC,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,aAAa,CAAC,YAAY,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IAClH,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,YAAY,CAAC,KAAK,YAAY,IAAI,UAAU,CAAC,QAAQ,KAAK,kBAAkB,CAAC;IACvH,qFAAqF;IACrF,IAAI,SAAS,IAAI,KAAK,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IAC7G,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,UAAU,CAAC,uBAAuB,CAAC;IACvD,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,sBAAsB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,GAAG,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC5F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AAClG,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,KAAoB,EAAE,gBAAgB,GAAG,KAAK;IAErG,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,uBAAuB,KAAK,iBAAiB,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,KAAK,GAAG,CAAC;IAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,qBAAqB,KAAK,GAAG,CAAC;IAC/D,MAAM,aAAa,GAAG,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,QAAQ,GAAG,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,GAAG,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,IAAI,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1E,MAAM,YAAY,GAAG,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE;YACrE,MAAM,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,2BAA2B;YAC1F,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE;QACxE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAAC;AACvD,CAAC"}

package/dist/decision/raw.d.ts

@@ -0,0 +1,7 @@
+import type { DecisionRequest } from './request.js';
+import type { DecisionVerdict } from './verdict.js';
+/** Drop whole optional native fields to fit; never truncate the typed verdict. */
+export declare function makeJevProviderRaw(native: unknown, request: DecisionRequest): DecisionVerdict['providerRaw'];
+/** Raw remains optional, bounded and tied to the already validated native evidence. */
+export declare function parseJevProviderRaw(candidate: unknown, native: unknown, request: DecisionRequest): DecisionVerdict['providerRaw'] | null;
+//# sourceMappingURL=raw.d.ts.map

package/dist/decision/raw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/decision/raw.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAQ,MAAM,cAAc,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAOpD,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,eAAe,CAAC,aAAa,CAAC,CAa5G;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,eAAe,CAAC,aAAa,CAAC,GAAG,IAAI,CAkBxI"}

package/dist/decision/raw.js

@@ -0,0 +1,53 @@
+import { hasOnlyKeys, isRecord, snapshotBoundedJson } from './validation.js';
+const fields = ['noul', 'score', 'choice', 'probabilities', 'confidence'];
+const bytes = (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength;
+const limit = (request) => Math.min(16384, request.raw?.maxBytes ?? 16384);
+/** Drop whole optional native fields to fit; never truncate the typed verdict. */
+export function makeJevProviderRaw(native, request) {
+    if (request.raw?.mode !== 'allowlisted' || limit(request) < 2)
+        return undefined;
+    const snapshot = snapshotBoundedJson(native);
+    if (!snapshot.ok || !isRecord(snapshot.value))
+        return undefined;
+    const data = {};
+    let truncated = false;
+    for (const field of fields) {
+        if (!Object.hasOwn(snapshot.value, field))
+            continue;
+        const next = { ...data, [field]: snapshot.value[field] };
+        if (bytes(next) > limit(request)) {
+            truncated = true;
+            continue;
+        }
+        data[field] = snapshot.value[field];
+    }
+    return { data, bytes: bytes(data), truncated };
+}
+/** Raw remains optional, bounded and tied to the already validated native evidence. */
+export function parseJevProviderRaw(candidate, native, request) {
+    const snapshot = snapshotBoundedJson(candidate);
+    if (request.raw?.mode !== 'allowlisted' || !snapshot.ok || !isRecord(snapshot.value) || !isRecord(native))
+        return null;
+    const value = snapshot.value;
+    if (!hasOnlyKeys(value, ['data', 'bytes', 'truncated']) || !isRecord(value.data) || !hasOnlyKeys(value.data, fields)
+        || typeof value.truncated !== 'boolean' || value.bytes !== bytes(value.data) || bytes(value.data) > limit(request))
+        return null;
+    const rawData = value.data;
+    for (const [field, data] of Object.entries(rawData)) {
+        if (!Object.hasOwn(native, field))
+            return null;
+        const expected = native[field];
+        if (isRecord(data) && isRecord(expected)) {
+            if (Object.keys(data).length !== Object.keys(expected).length
+                || !Object.keys(data).every((key) => data[key] === expected[key]))
+                return null;
+        }
+        else if (data !== native[field])
+            return null;
+    }
+    const omitted = fields.some((field) => Object.hasOwn(native, field) && !Object.hasOwn(rawData, field));
+    if (value.truncated !== omitted)
+        return null;
+    return { data: value.data, bytes: value.bytes, truncated: value.truncated };
+}
+//# sourceMappingURL=raw.js.map

package/dist/decision/raw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.js","sourceRoot":"","sources":["../../src/decision/raw.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,CAAU,CAAC;AACnF,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7F,MAAM,KAAK,GAAG,CAAC,OAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC;AAE5F,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,OAAwB;IAC1E,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,SAAS;QACpD,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAS,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,SAAkB,EAAE,MAAe,EAAE,OAAwB;IAC/F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;WAC/G,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;mBACxD,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnF,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAe,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAChG,CAAC"}

package/dist/decision/receipt.d.ts

@@ -0,0 +1,120 @@
+import type { DecisionError, DecisionErrorCode } from './errors.js';
+import type { EvaluatorRef, DecisionRequest, MicroUsd } from './request.js';
+import type { DecisionVerdict } from './verdict.js';
+export type TokenCounter = {
+    value: number;
+    source: 'provider';
+} | {
+    value: null;
+    source: 'not-reported';
+};
+export type TotalTokenCounter = TokenCounter | {
+    value: number;
+    source: 'derived-sum';
+};
+export interface DecisionUsage {
+    tokens: {
+        input: TokenCounter;
+        output: TokenCounter;
+        total: TotalTokenCounter;
+    };
+    evaluatorCalls: number | null;
+    explanations: number | null;
+}
+export type DecisionCost = {
+    status: 'actual';
+    amountMicroUsd: MicroUsd;
+    source: 'provider';
+    priceRevision?: string;
+    rounding: 'ceil-micro-usd';
+} | {
+    status: 'estimated';
+    amountMicroUsd: MicroUsd;
+    source: 'reported-usage-times-rate' | 'call-rate' | 'reserved-liability';
+    priceRevision: string;
+    rounding: 'ceil-micro-usd';
+} | {
+    status: 'not-incurred';
+    amountMicroUsd: '0';
+    source: 'no-dispatch';
+};
+export interface RetentionReceipt {
+    status: 'non-zdr' | 'unknown' | 'not-evaluated';
+    basis: 'published-policy' | 'none';
+    evidenceRefs: readonly string[];
+    retentionDays: number | null;
+    gap?: 'unknown (source-gap)';
+}
+export interface DecisionReceipt {
+    schemaVersion: 1;
+    callId: string;
+    correlationId: string;
+    evaluator: EvaluatorRef | null;
+    servedEvaluator: EvaluatorRef | null;
+    servedModelId: string | null;
+    providerRequestId?: string;
+    startedAt: string;
+    finishedAt: string;
+    latencyMs: number;
+    providerLatencyMs?: number;
+    /** Durable marker dispatch state; 'unknown' on ambiguous marker failure before provider call. */
+    dispatch: 'not-started' | 'started' | 'completed' | 'unknown';
+    /** Number of provider invocation attempts (0 if marking failed before provider dispatch). */
+    attempts: 0 | 1;
+    usage: DecisionUsage;
+    cost: DecisionCost;
+    retention: RetentionReceipt;
+    budget: {
+        state: 'not-admitted' | 'released' | 'settled' | 'pending-reconciliation';
+        reservedMicroUsd?: MicroUsd;
+        overrun: boolean;
+    };
+    outcome: 'verdict' | 'error';
+    errorCode?: DecisionErrorCode;
+}
+export type DecisionResult = {
+    kind: 'verdict';
+    ok: true;
+    verdict: DecisionVerdict;
+    receipt: DecisionReceipt;
+} | {
+    kind: 'error';
+    ok: false;
+    error: DecisionError;
+    receipt: DecisionReceipt;
+};
+export interface DecisionClient {
+    decide(request: DecisionRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<DecisionResult>;
+}
+export interface DecisionConnectionFailure {
+    kind: 'connection-failure';
+    ok: false;
+    error: DecisionError & {
+        code: 'MESH_UNAVAILABLE' | 'TRANSPORT_FAILED' | 'TIMEOUT' | 'CANCELLED';
+    };
+    receipt: null;
+    usage: DecisionUsage;
+    callStatus: 'not-sent' | 'unknown';
+    correlationId: string;
+}
+export interface RemoteDecisionClient {
+    decide(request: DecisionRequest, options?: {
+        signal?: AbortSignal;
+    }): Promise<DecisionResult | DecisionConnectionFailure>;
+}
+/** Unknown counters stay null even when no dispatch proves zero evaluator calls. */
+export declare function unreportedDecisionUsage(execution: 'not-dispatched' | 'unknown'): DecisionUsage;
+/** Correlation is metadata, never financial idempotency or caller authority. */
+export declare function resolveDecisionCorrelationId(value: string | undefined, generate?: () => string): string | null;
+/** Each counter has independent provenance; only a safe, known total can be derived. */
+export declare function parseDecisionUsage(candidate: unknown): DecisionUsage | null;
+export declare function normalizeDecisionUsage(reported: {
+    inputTokens?: number | null;
+    outputTokens?: number | null;
+    totalTokens?: number | null;
+    evaluatorCalls: number | null;
+    explanations: number | null;
+}): DecisionUsage | null;
+//# sourceMappingURL=receipt.d.ts.map

package/dist/decision/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/decision/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAC5C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAExF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE;QAAE,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAChF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,cAAc,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACtD;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,cAAc,EAAE,QAAQ,CAAC;IAC9C,MAAM,EAAE,2BAA2B,GAAG,WAAW,GAAG,oBAAoB,CAAC;IACzE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,cAAc,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;IAChD,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAAC;IACnC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iGAAiG;IACjG,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC9D,6FAA6F;IAC7F,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE;QAAE,KAAK,EAAE,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,wBAAwB,CAAC;QAClF,gBAAgB,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAClD,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,aAAa,GAAG;QAAE,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,GAAG,WAAW,CAAA;KAAE,CAAC;IACnG,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,aAAa,CAAC;IACrB,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,GAAG,yBAAyB,CAAC,CAAC;CAC3H;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,aAAa,CAK9F;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EACpE,QAAQ,GAAE,MAAM,MAA6C,GAAG,MAAM,GAAG,IAAI,CAG9E;AAWD,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAmB3E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,aAAa,GAAG,IAAI,CAYjH"}

package/dist/decision/receipt.js

@@ -0,0 +1,58 @@
+import { hasOnlyKeys, isCorrelationId, isRecord, snapshotBoundedJson } from './validation.js';
+/** Unknown counters stay null even when no dispatch proves zero evaluator calls. */
+export function unreportedDecisionUsage(execution) {
+    return { tokens: { input: { value: null, source: 'not-reported' },
+            output: { value: null, source: 'not-reported' }, total: { value: null, source: 'not-reported' } },
+        evaluatorCalls: execution === 'not-dispatched' ? 0 : null,
+        explanations: execution === 'not-dispatched' ? 0 : null };
+}
+/** Correlation is metadata, never financial idempotency or caller authority. */
+export function resolveDecisionCorrelationId(value, generate = () => globalThis.crypto.randomUUID()) {
+    const candidate = value === undefined ? generate() : value;
+    return isCorrelationId(candidate) ? candidate : null;
+}
+const isCount = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+function isCounter(value, total) {
+    return isRecord(value) && hasOnlyKeys(value, ['value', 'source'])
+        && (value.source === 'not-reported' ? value.value === null
+            : (value.source === 'provider' || (total && value.source === 'derived-sum')) && isCount(value.value));
+}
+/** Each counter has independent provenance; only a safe, known total can be derived. */
+export function parseDecisionUsage(candidate) {
+    const snapshot = snapshotBoundedJson(candidate);
+    if (!snapshot.ok)
+        return null;
+    const value = snapshot.value;
+    if (!isRecord(value) || !hasOnlyKeys(value, ['tokens', 'evaluatorCalls', 'explanations'])
+        || !isRecord(value.tokens) || !hasOnlyKeys(value.tokens, ['input', 'output', 'total'])
+        || !isCounter(value.tokens.input, false) || !isCounter(value.tokens.output, false)
+        || !isCounter(value.tokens.total, true)
+        || (value.evaluatorCalls !== null && !isCount(value.evaluatorCalls))
+        || (value.explanations !== null && !isCount(value.explanations)))
+        return null;
+    const usage = value;
+    const { input, output, total } = usage.tokens;
+    if (total.source === 'derived-sum') {
+        if (input.source !== 'provider' || output.source !== 'provider')
+            return null;
+        const sum = input.value + output.value;
+        if (!isCount(sum) || total.value !== sum)
+            return null;
+    }
+    return { tokens: { input: { ...input }, output: { ...output }, total: { ...total } },
+        evaluatorCalls: usage.evaluatorCalls, explanations: usage.explanations };
+}
+export function normalizeDecisionUsage(reported) {
+    const counter = (value) => value == null
+        ? { value: null, source: 'not-reported' } : { value, source: 'provider' };
+    const input = counter(reported.inputTokens);
+    const output = counter(reported.outputTokens);
+    const total = reported.totalTokens != null
+        ? { value: reported.totalTokens, source: 'provider' }
+        : input.source === 'provider' && output.source === 'provider'
+            ? { value: input.value + output.value, source: 'derived-sum' }
+            : { value: null, source: 'not-reported' };
+    return parseDecisionUsage({ tokens: { input, output, total }, evaluatorCalls: reported.evaluatorCalls,
+        explanations: reported.explanations });
+}
+//# sourceMappingURL=receipt.js.map

package/dist/decision/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/decision/receipt.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AA4E9F,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,SAAuC;IAC7E,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE;YAC/D,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;QACjG,cAAc,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACzD,YAAY,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,KAAyB,EACpE,WAAyB,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;IAC7D,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAEzE,SAAS,SAAS,CAAC,KAAc,EAAE,KAAc;IAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;WAC5D,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;YACxD,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;WACpF,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;WACnF,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;WAC/E,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;WACpC,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;WACjE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,KAAK,GAAG,KAAiC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE;QAClF,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QACoD;IACzF,MAAM,OAAO,GAAG,CAAC,KAAgC,EAAgB,EAAE,CAAC,KAAK,IAAI,IAAI;QAC/E,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAsB,QAAQ,CAAC,WAAW,IAAI,IAAI;QAC3D,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE;QACrD,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAC3D,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE;YAC9D,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9C,OAAO,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc;QACnG,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;AAC3C,CAAC"}

package/dist/decision/request-policy.d.ts

@@ -0,0 +1,3 @@
+export declare function isRequestPolicy(value: unknown): boolean;
+export declare function isRawPolicy(value: unknown): boolean;
+//# sourceMappingURL=request-policy.d.ts.map

package/dist/decision/request-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-policy.d.ts","sourceRoot":"","sources":["../../src/decision/request-policy.ts"],"names":[],"mappings":"AAEA,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOvD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKnD"}

package/dist/decision/request-policy.js

@@ -0,0 +1,19 @@
+import { has, hasOnlyKeys, isMicroUsd, isRecord, DECISION_MAX_RAW_BYTES } from './validation.js';
+export function isRequestPolicy(value) {
+    if (!isRecord(value) || !hasOnlyKeys(value, ['budget', 'timeoutMs', 'explanation']))
+        return false;
+    if (has(value, 'budget') && (!isRecord(value.budget)
+        || !hasOnlyKeys(value.budget, ['maxCostMicroUsd']) || !isMicroUsd(value.budget.maxCostMicroUsd)))
+        return false;
+    if (has(value, 'timeoutMs') && (typeof value.timeoutMs !== 'number'
+        || !Number.isSafeInteger(value.timeoutMs) || value.timeoutMs < 1 || value.timeoutMs > 60_000))
+        return false;
+    return !has(value, 'explanation') || ['none', 'if-available', 'required'].some((v) => v === value.explanation);
+}
+export function isRawPolicy(value) {
+    return isRecord(value) && hasOnlyKeys(value, ['mode', 'maxBytes'])
+        && (value.mode === 'none' || value.mode === 'allowlisted')
+        && (!has(value, 'maxBytes') || (typeof value.maxBytes === 'number'
+            && Number.isSafeInteger(value.maxBytes) && value.maxBytes >= 0 && value.maxBytes <= DECISION_MAX_RAW_BYTES));
+}
+//# sourceMappingURL=request-policy.js.map

package/dist/decision/request-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-policy.js","sourceRoot":"","sources":["../../src/decision/request-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;WAC/C,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjH,IAAI,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAC9D,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;WAC7D,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;WACvD,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAC7D,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,sBAAsB,CAAC,CAAC,CAAC;AACnH,CAAC"}

package/dist/decision/request.d.ts

@@ -0,0 +1,85 @@
+import type { ProviderId } from '../providers.js';
+export type Json = null | boolean | number | string | readonly Json[] | {
+    readonly [key: string]: Json;
+};
+/** Canonical nonnegative integer decimal micro-USD, never floating point. */
+export type MicroUsd = string;
+export interface EvaluatorRef {
+    providerId: ProviderId;
+    evaluatorId: string;
+    revision: string;
+}
+export interface DecisionInputs {
+    input?: Json;
+    output?: Json;
+    context?: readonly Json[];
+    reference?: Json;
+    state?: Json;
+}
+export type DecisionCriterion = {
+    kind: 'binary';
+    instructions: string;
+    criteria?: {
+        true: string;
+        false: string;
+    };
+} | {
+    kind: 'graded';
+    instructions: string;
+    direction: 'higher-is-better' | 'lower-is-better' | 'unordered';
+    levels: readonly {
+        label: string;
+        description: string;
+    }[];
+} | {
+    kind: 'choice';
+    instructions: string;
+    options: readonly {
+        id: string;
+        description: string;
+    }[];
+} | {
+    kind: 'registered';
+    criteriaId: string;
+    revision: string;
+};
+export type DecisionRule = {
+    kind: 'provider';
+} | {
+    kind: 'threshold';
+    field: 'score';
+    op: 'gte' | 'lte';
+    value: number;
+} | {
+    kind: 'labels';
+    passing: readonly string[];
+};
+export interface DecisionRequest {
+    schemaVersion: 1;
+    evaluator: EvaluatorRef;
+    inputs: DecisionInputs;
+    criterion: DecisionCriterion;
+    decision?: DecisionRule;
+    policy?: {
+        budget?: {
+            maxCostMicroUsd: MicroUsd;
+        };
+        timeoutMs?: number;
+        explanation?: 'none' | 'if-available' | 'required';
+    };
+    raw?: {
+        mode: 'none' | 'allowlisted';
+        maxBytes?: number;
+    };
+    correlationId?: string;
+}
+export type DecisionRequestParseResult = {
+    ok: true;
+    request: DecisionRequest;
+} | {
+    ok: false;
+    code: 'REQUEST_INVALID' | 'CAPABILITY_UNSUPPORTED' | 'PROVIDER_UNKNOWN';
+};
+/** Pure preflight parsing: capabilities and descriptor revisions remain service-owned. */
+export declare function parseDecisionRequest(value: unknown): DecisionRequestParseResult;
+//# sourceMappingURL=request.d.ts.map

package/dist/decision/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/decision/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAMlD,MAAM,MAAM,IAAI,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,IAAI,EAAE,GACjE;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AACrC,6EAA6E;AAC7E,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,IAAI,CAAC;CACd;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACrC,SAAS,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,WAAW,CAAC;IAChE,MAAM,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACrC,OAAO,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE;YAAE,eAAe,EAAE,QAAQ,CAAA;SAAE,CAAC;QACvC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,UAAU,CAAC;KACpD,CAAC;IACF,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,wBAAwB,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAE3F,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAkC/E"}

package/dist/decision/request.js

@@ -0,0 +1,49 @@
+import { isProviderId } from '../providers.js';
+import { isDecisionCriterion, isDecisionRule } from './criterion.js';
+import { isRawPolicy, isRequestPolicy } from './request-policy.js';
+import { has, hasOnlyKeys, isCorrelationId, isRecord, isText, snapshotBoundedJson } from './validation.js';
+/** Pure preflight parsing: capabilities and descriptor revisions remain service-owned. */
+export function parseDecisionRequest(value) {
+    const invalid = { ok: false, code: 'REQUEST_INVALID' };
+    const snapshot = snapshotBoundedJson(value);
+    if (!snapshot.ok)
+        return invalid;
+    value = snapshot.value;
+    if (!isRecord(value))
+        return invalid;
+    // Unsupported retention policy takes precedence over ordinary extra-property errors.
+    if (isRecord(value.policy) && has(value.policy, 'zdr')) {
+        return { ok: false, code: 'CAPABILITY_UNSUPPORTED' };
+    }
+    if (!hasOnlyKeys(value, ['schemaVersion', 'evaluator', 'inputs', 'criterion', 'decision', 'policy', 'raw', 'correlationId'])
+        || value.schemaVersion !== 1 || !isRecord(value.evaluator)
+        || !hasOnlyKeys(value.evaluator, ['providerId', 'evaluatorId', 'revision'])
+        || !isText(value.evaluator.providerId) || !isText(value.evaluator.evaluatorId)
+        || !isText(value.evaluator.revision) || !isRecord(value.inputs)
+        || !hasOnlyKeys(value.inputs, ['input', 'output', 'context', 'reference', 'state'])
+        || (!has(value.inputs, 'output') && !has(value.inputs, 'state'))
+        || (has(value.inputs, 'context') && !Array.isArray(value.inputs.context)))
+        return invalid;
+    const criterion = value.criterion;
+    if (!isDecisionCriterion(criterion))
+        return invalid;
+    if (has(value, 'decision')) {
+        const decision = value.decision;
+        if (!isDecisionRule(decision))
+            return invalid;
+        if (decision.kind === 'labels' && criterion.kind !== 'registered') {
+            const labels = criterion.kind === 'choice' ? criterion.options.map((v) => v.id)
+                : criterion.kind === 'graded' ? criterion.levels.map((v) => v.label) : [];
+            if (!decision.passing.every((label) => labels.includes(label)))
+                return invalid;
+        }
+    }
+    if ((has(value, 'policy') && !isRequestPolicy(value.policy))
+        || (has(value, 'raw') && !isRawPolicy(value.raw))
+        || (has(value, 'correlationId') && !isCorrelationId(value.correlationId)))
+        return invalid;
+    if (!isProviderId(value.evaluator.providerId))
+        return { ok: false, code: 'PROVIDER_UNKNOWN' };
+    return { ok: true, request: value };
+}
+//# sourceMappingURL=request.js.map

package/dist/decision/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/decision/request.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAsD3G,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAW,CAAC;IAChE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IACjC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,qFAAqF;IACrF,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;WACvH,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;WACvD,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;WACxE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;WAC3E,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;WAC5D,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;WAChF,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;WAC7D,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5F,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IACpD,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,OAAO,CAAC;QACjF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WACvD,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;WAC9C,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAmC,EAAE,CAAC;AACpE,CAAC"}

package/dist/decision/service.d.ts

@@ -0,0 +1,39 @@
+import type { ProviderAdapter, ProviderRegistry } from '../registry.js';
+import type { EvaluatorRef, DecisionRequest } from './request.js';
+import type { DecisionEvaluatorDescriptor } from './descriptor.js';
+import type { DecisionErrorCode } from './errors.js';
+import type { DecisionHostPolicy } from './policy.js';
+import type { AuthResolution, AuthResolver } from '../auth.js';
+import type { DecisionClient } from './receipt.js';
+import type { DecisionServiceOptions } from './host-options.js';
+export interface DecisionSelectionOptions {
+    registry: ProviderRegistry;
+    resolveEvaluator(ref: EvaluatorRef): DecisionEvaluatorDescriptor | null | Promise<DecisionEvaluatorDescriptor | null>;
+    policy?: DecisionHostPolicy;
+    /** Explicit evaluator allowlist (P28): only exactly listed evaluator
+     * references are admitted. Absent or unlisted refuses before provider egress. */
+    evaluatorAllowlist: readonly EvaluatorRef[];
+}
+export type DecisionSelection = {
+    ok: true;
+    request: DecisionRequest;
+    descriptor: DecisionEvaluatorDescriptor;
+    adapter: ProviderAdapter;
+} | {
+    ok: false;
+    code: DecisionErrorCode;
+};
+/** The significant-input snapshot stays service-owned through every asynchronous phase. */
+export declare function preflightDecisionRequest(candidate: unknown, options: DecisionSelectionOptions): Promise<DecisionSelection>;
+export type DecisionAuthResolution = {
+    ok: true;
+    auth: AuthResolution;
+} | {
+    ok: false;
+    code: 'CREDENTIAL_MISSING';
+};
+/** Host custody only: no request credential, caller-selected owner or key fallback. */
+export declare function resolveDecisionAuth(descriptor: DecisionEvaluatorDescriptor, resolver: AuthResolver): Promise<DecisionAuthResolution>;
+/** Trusted composition only. Construction performs no discovery, key resolution or I/O. */
+export declare function createDecisionService(supplied: DecisionServiceOptions): DecisionClient;
+//# sourceMappingURL=service.d.ts.map

package/dist/decision/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/decision/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAShE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,2BAA2B,GAAG,IAAI,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;IACtH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;qFACiF;IACjF,kBAAkB,EAAE,SAAS,YAAY,EAAE,CAAC;CAC7C;AACD,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACrI;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAuB3C,2FAA2F;AAC3F,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+BhI;AAED,MAAM,MAAM,sBAAsB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC;AACpH,uFAAuF;AACvF,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAmB1I;AAUD,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,cAAc,CA8BtF"}