@spendguard/sdk 0.5.0

package/dist/client.js

@@ -0,0 +1,4815 @@
+import { createHash, createHmac } from 'crypto';
+import { credentials } from '@grpc/grpc-js';
+import { GrpcTransport } from '@protobuf-ts/grpc-transport';
+import { ServiceType, RpcError, stackIntercept } from '@protobuf-ts/runtime-rpc';
+import { MessageType, PbLong, typeofJsonValue, isJsonObject } from '@protobuf-ts/runtime';
+import { AsyncLocalStorage } from 'async_hooks';
+
+// src/client.ts
+var Timestamp$Type = class extends MessageType {
+  constructor() {
+    super("google.protobuf.Timestamp", [
+      {
+        no: 1,
+        name: "seconds",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 2,
+        name: "nanos",
+        kind: "scalar",
+        T: 5
+        /*ScalarType.INT32*/
+      }
+    ]);
+  }
+  /**
+   * Creates a new `Timestamp` for the current time.
+   */
+  now() {
+    const msg = this.create();
+    const ms = Date.now();
+    msg.seconds = PbLong.from(Math.floor(ms / 1e3)).toString();
+    msg.nanos = ms % 1e3 * 1e6;
+    return msg;
+  }
+  /**
+   * Converts a `Timestamp` to a JavaScript Date.
+   */
+  toDate(message) {
+    return new Date(PbLong.from(message.seconds).toNumber() * 1e3 + Math.ceil(message.nanos / 1e6));
+  }
+  /**
+   * Converts a JavaScript Date to a `Timestamp`.
+   */
+  fromDate(date) {
+    const msg = this.create();
+    const ms = date.getTime();
+    msg.seconds = PbLong.from(Math.floor(ms / 1e3)).toString();
+    msg.nanos = (ms % 1e3 + (ms < 0 && ms % 1e3 !== 0 ? 1e3 : 0)) * 1e6;
+    return msg;
+  }
+  /**
+   * In JSON format, the `Timestamp` type is encoded as a string
+   * in the RFC 3339 format.
+   */
+  internalJsonWrite(message, options) {
+    let ms = PbLong.from(message.seconds).toNumber() * 1e3;
+    if (ms < Date.parse("0001-01-01T00:00:00Z") || ms > Date.parse("9999-12-31T23:59:59Z"))
+      throw new Error("Unable to encode Timestamp to JSON. Must be from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59Z inclusive.");
+    if (message.nanos < 0)
+      throw new Error("Unable to encode invalid Timestamp to JSON. Nanos must not be negative.");
+    let z = "Z";
+    if (message.nanos > 0) {
+      let nanosStr = (message.nanos + 1e9).toString().substring(1);
+      if (nanosStr.substring(3) === "000000")
+        z = "." + nanosStr.substring(0, 3) + "Z";
+      else if (nanosStr.substring(6) === "000")
+        z = "." + nanosStr.substring(0, 6) + "Z";
+      else
+        z = "." + nanosStr + "Z";
+    }
+    return new Date(ms).toISOString().replace(".000Z", z);
+  }
+  /**
+   * In JSON format, the `Timestamp` type is encoded as a string
+   * in the RFC 3339 format.
+   */
+  internalJsonRead(json, options, target) {
+    if (typeof json !== "string")
+      throw new Error("Unable to parse Timestamp from JSON " + typeofJsonValue(json) + ".");
+    let matches = json.match(/^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:Z|\.([0-9]{3,9})Z|([+-][0-9][0-9]:[0-9][0-9]))$/);
+    if (!matches)
+      throw new Error("Unable to parse Timestamp from JSON. Invalid format.");
+    let ms = Date.parse(matches[1] + "-" + matches[2] + "-" + matches[3] + "T" + matches[4] + ":" + matches[5] + ":" + matches[6] + (matches[8] ? matches[8] : "Z"));
+    if (Number.isNaN(ms))
+      throw new Error("Unable to parse Timestamp from JSON. Invalid value.");
+    if (ms < Date.parse("0001-01-01T00:00:00Z") || ms > Date.parse("9999-12-31T23:59:59Z"))
+      throw new globalThis.Error("Unable to parse Timestamp from JSON. Must be from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59Z inclusive.");
+    if (!target)
+      target = this.create();
+    target.seconds = PbLong.from(ms / 1e3).toString();
+    target.nanos = 0;
+    if (matches[7])
+      target.nanos = parseInt("1" + matches[7] + "0".repeat(9 - matches[7].length)) - 1e9;
+    return target;
+  }
+};
+var Timestamp = new Timestamp$Type();
+
+// src/_proto/spendguard/common/v1/common.ts
+var UnitRef_Kind = /* @__PURE__ */ ((UnitRef_Kind2) => {
+  UnitRef_Kind2[UnitRef_Kind2["KIND_UNSPECIFIED"] = 0] = "KIND_UNSPECIFIED";
+  UnitRef_Kind2[UnitRef_Kind2["MONETARY"] = 1] = "MONETARY";
+  UnitRef_Kind2[UnitRef_Kind2["TOKEN"] = 2] = "TOKEN";
+  UnitRef_Kind2[UnitRef_Kind2["CREDIT"] = 3] = "CREDIT";
+  UnitRef_Kind2[UnitRef_Kind2["NON_MONETARY"] = 4] = "NON_MONETARY";
+  return UnitRef_Kind2;
+})(UnitRef_Kind || {});
+var Replay_StatusCode = /* @__PURE__ */ ((Replay_StatusCode2) => {
+  Replay_StatusCode2[Replay_StatusCode2["STATUS_CODE_UNSPECIFIED"] = 0] = "STATUS_CODE_UNSPECIFIED";
+  Replay_StatusCode2[Replay_StatusCode2["POSTED"] = 1] = "POSTED";
+  Replay_StatusCode2[Replay_StatusCode2["VOIDED"] = 2] = "VOIDED";
+  Replay_StatusCode2[Replay_StatusCode2["PENDING"] = 3] = "PENDING";
+  return Replay_StatusCode2;
+})(Replay_StatusCode || {});
+var Error_Code = /* @__PURE__ */ ((Error_Code2) => {
+  Error_Code2[Error_Code2["CODE_UNSPECIFIED"] = 0] = "CODE_UNSPECIFIED";
+  Error_Code2[Error_Code2["FENCING_EPOCH_STALE"] = 1] = "FENCING_EPOCH_STALE";
+  Error_Code2[Error_Code2["LOCK_ORDER_TOKEN_MISMATCH"] = 2] = "LOCK_ORDER_TOKEN_MISMATCH";
+  Error_Code2[Error_Code2["PRICING_VERSION_UNKNOWN"] = 3] = "PRICING_VERSION_UNKNOWN";
+  Error_Code2[Error_Code2["UNIT_NORMALIZATION_REQUIRED"] = 4] = "UNIT_NORMALIZATION_REQUIRED";
+  Error_Code2[Error_Code2["BUDGET_EXHAUSTED"] = 5] = "BUDGET_EXHAUSTED";
+  Error_Code2[Error_Code2["DEADLOCK_TIMEOUT"] = 6] = "DEADLOCK_TIMEOUT";
+  Error_Code2[Error_Code2["SYNC_REPLICA_UNAVAILABLE"] = 7] = "SYNC_REPLICA_UNAVAILABLE";
+  Error_Code2[Error_Code2["TENANT_DISABLED"] = 8] = "TENANT_DISABLED";
+  Error_Code2[Error_Code2["SCHEMA_BUNDLE_UNKNOWN"] = 9] = "SCHEMA_BUNDLE_UNKNOWN";
+  Error_Code2[Error_Code2["SIGNATURE_INVALID"] = 10] = "SIGNATURE_INVALID";
+  Error_Code2[Error_Code2["AUDIT_INVARIANT_VIOLATED"] = 11] = "AUDIT_INVARIANT_VIOLATED";
+  Error_Code2[Error_Code2["DUPLICATE_DECISION_EVENT"] = 12] = "DUPLICATE_DECISION_EVENT";
+  Error_Code2[Error_Code2["RESERVATION_STATE_CONFLICT"] = 13] = "RESERVATION_STATE_CONFLICT";
+  Error_Code2[Error_Code2["PRICING_FREEZE_MISMATCH"] = 14] = "PRICING_FREEZE_MISMATCH";
+  Error_Code2[Error_Code2["OVERRUN_RESERVATION"] = 15] = "OVERRUN_RESERVATION";
+  Error_Code2[Error_Code2["RESERVATION_TTL_EXPIRED"] = 16] = "RESERVATION_TTL_EXPIRED";
+  Error_Code2[Error_Code2["MULTI_RESERVATION_COMMIT_DEFERRED"] = 17] = "MULTI_RESERVATION_COMMIT_DEFERRED";
+  Error_Code2[Error_Code2["IDEMPOTENCY_CONFLICT"] = 18] = "IDEMPOTENCY_CONFLICT";
+  return Error_Code2;
+})(Error_Code || {});
+var BudgetClaim_Direction = /* @__PURE__ */ ((BudgetClaim_Direction2) => {
+  BudgetClaim_Direction2[BudgetClaim_Direction2["DIRECTION_UNSPECIFIED"] = 0] = "DIRECTION_UNSPECIFIED";
+  BudgetClaim_Direction2[BudgetClaim_Direction2["DEBIT"] = 1] = "DEBIT";
+  BudgetClaim_Direction2[BudgetClaim_Direction2["CREDIT"] = 2] = "CREDIT";
+  return BudgetClaim_Direction2;
+})(BudgetClaim_Direction || {});
+var SubscriptionMeter_CapDecision = /* @__PURE__ */ ((SubscriptionMeter_CapDecision2) => {
+  SubscriptionMeter_CapDecision2[SubscriptionMeter_CapDecision2["CAP_DECISION_UNSPECIFIED"] = 0] = "CAP_DECISION_UNSPECIFIED";
+  SubscriptionMeter_CapDecision2[SubscriptionMeter_CapDecision2["CAP_PASS"] = 1] = "CAP_PASS";
+  SubscriptionMeter_CapDecision2[SubscriptionMeter_CapDecision2["CAP_SOFT_ALERT"] = 2] = "CAP_SOFT_ALERT";
+  SubscriptionMeter_CapDecision2[SubscriptionMeter_CapDecision2["CAP_HARD_BLOCK"] = 3] = "CAP_HARD_BLOCK";
+  return SubscriptionMeter_CapDecision2;
+})(SubscriptionMeter_CapDecision || {});
+var ReservationSource = /* @__PURE__ */ ((ReservationSource2) => {
+  ReservationSource2[ReservationSource2["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+  ReservationSource2[ReservationSource2["BYOK"] = 1] = "BYOK";
+  ReservationSource2[ReservationSource2["SUBSCRIPTION_METER"] = 2] = "SUBSCRIPTION_METER";
+  return ReservationSource2;
+})(ReservationSource || {});
+var TraceContext$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.TraceContext", [
+      {
+        no: 1,
+        name: "trace_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "span_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "parent_span_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "trace_state",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var TraceContext = new TraceContext$Type();
+var SpendGuardIds$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.SpendGuardIds", [
+      {
+        no: 1,
+        name: "run_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "step_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "llm_call_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "tool_call_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "decision_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 6,
+        name: "snapshot_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var SpendGuardIds = new SpendGuardIds$Type();
+var UnitRef$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.UnitRef", [
+      {
+        no: 1,
+        name: "unit_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "kind", kind: "enum", T: () => ["spendguard.common.v1.UnitRef.Kind", UnitRef_Kind] },
+      {
+        no: 3,
+        name: "currency",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "unit_name",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "token_kind",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 6,
+        name: "model_family",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 7,
+        name: "credit_program",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var UnitRef = new UnitRef$Type();
+var Amount$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.Amount", [
+      {
+        no: 1,
+        name: "atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "unit", kind: "message", T: () => UnitRef }
+    ]);
+  }
+};
+new Amount$Type();
+var PricingFreeze$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.PricingFreeze", [
+      {
+        no: 1,
+        name: "pricing_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "price_snapshot_hash",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 3,
+        name: "fx_rate_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "unit_conversion_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var PricingFreeze = new PricingFreeze$Type();
+var Fencing$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.Fencing", [
+      {
+        no: 1,
+        name: "epoch",
+        kind: "scalar",
+        T: 4
+        /*ScalarType.UINT64*/
+      },
+      {
+        no: 2,
+        name: "scope_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "workload_instance_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+new Fencing$Type();
+var Replay$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.Replay", [
+      {
+        no: 1,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "operation_kind",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "audit_decision_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "recorded_at", kind: "message", T: () => Timestamp },
+      {
+        no: 5,
+        name: "operation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 6, name: "status_code", kind: "enum", T: () => ["spendguard.common.v1.Replay.StatusCode", Replay_StatusCode] },
+      {
+        no: 7,
+        name: "decision_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 8,
+        name: "projection_ids",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 9, name: "ttl_expires_at", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+new Replay$Type();
+var FullResponsePayload$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.FullResponsePayload", [
+      {
+        no: 1,
+        name: "payload",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      { no: 2, name: "expires_at", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+new FullResponsePayload$Type();
+var Error$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.Error", [
+      { no: 1, name: "code", kind: "enum", T: () => ["spendguard.common.v1.Error.Code", Error_Code] },
+      {
+        no: 2,
+        name: "message",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 3, name: "details", kind: "map", K: 9, V: {
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      } }
+    ]);
+  }
+};
+var Error2 = new Error$Type();
+var BudgetClaim$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.BudgetClaim", [
+      {
+        no: 1,
+        name: "budget_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "unit", kind: "message", T: () => UnitRef },
+      {
+        no: 3,
+        name: "amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "direction", kind: "enum", T: () => ["spendguard.common.v1.BudgetClaim.Direction", BudgetClaim_Direction] },
+      {
+        no: 5,
+        name: "window_instance_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var BudgetClaim = new BudgetClaim$Type();
+var LockOrderToken$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.LockOrderToken", [
+      {
+        no: 1,
+        name: "value",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+new LockOrderToken$Type();
+var CloudEvent$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.CloudEvent", [
+      {
+        no: 1,
+        name: "specversion",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "type",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "source",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 5, name: "time", kind: "message", T: () => Timestamp },
+      {
+        no: 6,
+        name: "datacontenttype",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 7,
+        name: "data",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 100,
+        name: "tenant_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 101,
+        name: "run_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 102,
+        name: "decision_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 103,
+        name: "schema_bundle_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 200,
+        name: "producer_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 201,
+        name: "producer_sequence",
+        kind: "scalar",
+        T: 4
+        /*ScalarType.UINT64*/
+      },
+      {
+        no: 202,
+        name: "producer_signature",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 203,
+        name: "signing_key_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 300,
+        name: "predicted_a_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 301,
+        name: "predicted_b_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 302,
+        name: "predicted_c_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 303,
+        name: "reserved_strategy",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 304,
+        name: "prediction_strategy_used",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 305,
+        name: "prediction_policy_used",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 306,
+        name: "tokenizer_tier",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 307,
+        name: "tokenizer_version_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 308,
+        name: "prediction_confidence",
+        kind: "scalar",
+        T: 2
+        /*ScalarType.FLOAT*/
+      },
+      {
+        no: 309,
+        name: "prediction_sample_size",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 310,
+        name: "cold_start_layer_used",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 311,
+        name: "run_projection_at_decision_atomic",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 312,
+        name: "run_predicted_remaining_steps",
+        kind: "scalar",
+        T: 5
+        /*ScalarType.INT32*/
+      },
+      {
+        no: 313,
+        name: "run_steps_completed_so_far",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 314,
+        name: "actual_input_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 315,
+        name: "actual_output_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 316,
+        name: "delta_b_ratio",
+        kind: "scalar",
+        T: 2
+        /*ScalarType.FLOAT*/
+      },
+      {
+        no: 317,
+        name: "delta_c_ratio",
+        kind: "scalar",
+        T: 2
+        /*ScalarType.FLOAT*/
+      }
+    ]);
+  }
+};
+new CloudEvent$Type();
+var SchemaBundleRef$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.SchemaBundleRef", [
+      {
+        no: 1,
+        name: "schema_bundle_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "schema_bundle_hash",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 3,
+        name: "canonical_schema_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var SchemaBundleRef = new SchemaBundleRef$Type();
+var ContractBundleRef$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.ContractBundleRef", [
+      {
+        no: 1,
+        name: "bundle_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "bundle_hash",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 3,
+        name: "bundle_signature",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 4,
+        name: "signing_key_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ContractBundleRef = new ContractBundleRef$Type();
+var Idempotency$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.Idempotency", [
+      {
+        no: 1,
+        name: "key",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "request_hash",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      }
+    ]);
+  }
+};
+var Idempotency = new Idempotency$Type();
+var SubscriptionMeter$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.common.v1.SubscriptionMeter", [
+      {
+        no: 1,
+        name: "plan",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "period_start", kind: "message", T: () => Timestamp },
+      { no: 3, name: "period_end", kind: "message", T: () => Timestamp },
+      {
+        no: 4,
+        name: "consumed_atomic",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 5,
+        name: "monthly_cap_atomic",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 6,
+        name: "alert_at_atomic",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 7,
+        name: "hard_cap_at_atomic",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      { no: 8, name: "cap_decision", kind: "enum", T: () => ["spendguard.common.v1.SubscriptionMeter.CapDecision", SubscriptionMeter_CapDecision] },
+      {
+        no: 9,
+        name: "retry_after_seconds",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      }
+    ]);
+  }
+};
+var SubscriptionMeter = new SubscriptionMeter$Type();
+var NullValue = /* @__PURE__ */ ((NullValue2) => {
+  NullValue2[NullValue2["NULL_VALUE"] = 0] = "NULL_VALUE";
+  return NullValue2;
+})(NullValue || {});
+var Struct$Type = class extends MessageType {
+  constructor() {
+    super("google.protobuf.Struct", [
+      { no: 1, name: "fields", kind: "map", K: 9, V: { kind: "message", T: () => Value } }
+    ]);
+  }
+  /**
+   * Encode `Struct` to JSON object.
+   */
+  internalJsonWrite(message, options) {
+    let json = {};
+    for (let [k, v] of Object.entries(message.fields)) {
+      json[k] = Value.toJson(v);
+    }
+    return json;
+  }
+  /**
+   * Decode `Struct` from JSON object.
+   */
+  internalJsonRead(json, options, target) {
+    if (!isJsonObject(json))
+      throw new globalThis.Error("Unable to parse message " + this.typeName + " from JSON " + typeofJsonValue(json) + ".");
+    if (!target)
+      target = this.create();
+    for (let [k, v] of globalThis.Object.entries(json)) {
+      target.fields[k] = Value.fromJson(v);
+    }
+    return target;
+  }
+};
+var Struct = new Struct$Type();
+var Value$Type = class extends MessageType {
+  constructor() {
+    super("google.protobuf.Value", [
+      { no: 1, name: "null_value", kind: "enum", oneof: "kind", T: () => ["google.protobuf.NullValue", NullValue] },
+      {
+        no: 2,
+        name: "number_value",
+        kind: "scalar",
+        oneof: "kind",
+        T: 1
+        /*ScalarType.DOUBLE*/
+      },
+      {
+        no: 3,
+        name: "string_value",
+        kind: "scalar",
+        oneof: "kind",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "bool_value",
+        kind: "scalar",
+        oneof: "kind",
+        T: 8
+        /*ScalarType.BOOL*/
+      },
+      { no: 5, name: "struct_value", kind: "message", oneof: "kind", T: () => Struct },
+      { no: 6, name: "list_value", kind: "message", oneof: "kind", T: () => ListValue }
+    ]);
+  }
+  /**
+   * Encode `Value` to JSON value.
+   */
+  internalJsonWrite(message, options) {
+    if (message.kind.oneofKind === void 0)
+      throw new globalThis.Error();
+    switch (message.kind.oneofKind) {
+      case void 0:
+        throw new globalThis.Error();
+      case "boolValue":
+        return message.kind.boolValue;
+      case "nullValue":
+        return null;
+      case "numberValue":
+        let numberValue = message.kind.numberValue;
+        if (typeof numberValue == "number" && !Number.isFinite(numberValue))
+          throw new globalThis.Error();
+        return numberValue;
+      case "stringValue":
+        return message.kind.stringValue;
+      case "listValue":
+        let listValueField = this.fields.find((f) => f.no === 6);
+        if (listValueField?.kind !== "message")
+          throw new globalThis.Error();
+        return listValueField.T().toJson(message.kind.listValue);
+      case "structValue":
+        let structValueField = this.fields.find((f) => f.no === 5);
+        if (structValueField?.kind !== "message")
+          throw new globalThis.Error();
+        return structValueField.T().toJson(message.kind.structValue);
+    }
+  }
+  /**
+   * Decode `Value` from JSON value.
+   */
+  internalJsonRead(json, options, target) {
+    if (!target)
+      target = this.create();
+    switch (typeof json) {
+      case "number":
+        target.kind = { oneofKind: "numberValue", numberValue: json };
+        break;
+      case "string":
+        target.kind = { oneofKind: "stringValue", stringValue: json };
+        break;
+      case "boolean":
+        target.kind = { oneofKind: "boolValue", boolValue: json };
+        break;
+      case "object":
+        if (json === null) {
+          target.kind = { oneofKind: "nullValue", nullValue: 0 /* NULL_VALUE */ };
+        } else if (globalThis.Array.isArray(json)) {
+          target.kind = { oneofKind: "listValue", listValue: ListValue.fromJson(json) };
+        } else {
+          target.kind = { oneofKind: "structValue", structValue: Struct.fromJson(json) };
+        }
+        break;
+      default:
+        throw new globalThis.Error("Unable to parse " + this.typeName + " from JSON " + typeofJsonValue(json));
+    }
+    return target;
+  }
+};
+var Value = new Value$Type();
+var ListValue$Type = class extends MessageType {
+  constructor() {
+    super("google.protobuf.ListValue", [
+      { no: 1, name: "values", kind: "message", repeat: 2, T: () => Value }
+    ]);
+  }
+  /**
+   * Encode `ListValue` to JSON array.
+   */
+  internalJsonWrite(message, options) {
+    return message.values.map((v) => Value.toJson(v));
+  }
+  /**
+   * Decode `ListValue` from JSON array.
+   */
+  internalJsonRead(json, options, target) {
+    if (!globalThis.Array.isArray(json))
+      throw new globalThis.Error("Unable to parse " + this.typeName + " from JSON " + typeofJsonValue(json));
+    if (!target)
+      target = this.create();
+    let values = json.map((v) => Value.fromJson(v));
+    target.values.push(...values);
+    return target;
+  }
+};
+var ListValue = new ListValue$Type();
+
+// src/_proto/spendguard/sidecar_adapter/v1/adapter.ts
+var HandshakeRequest_CapabilityLevel = /* @__PURE__ */ ((HandshakeRequest_CapabilityLevel2) => {
+  HandshakeRequest_CapabilityLevel2[HandshakeRequest_CapabilityLevel2["CAPABILITY_LEVEL_UNSPECIFIED"] = 0] = "CAPABILITY_LEVEL_UNSPECIFIED";
+  HandshakeRequest_CapabilityLevel2[HandshakeRequest_CapabilityLevel2["L0_INGEST"] = 16] = "L0_INGEST";
+  HandshakeRequest_CapabilityLevel2[HandshakeRequest_CapabilityLevel2["L1_LLM_CALL"] = 32] = "L1_LLM_CALL";
+  HandshakeRequest_CapabilityLevel2[HandshakeRequest_CapabilityLevel2["L2_STEP"] = 48] = "L2_STEP";
+  HandshakeRequest_CapabilityLevel2[HandshakeRequest_CapabilityLevel2["L3_POLICY_HOOK"] = 64] = "L3_POLICY_HOOK";
+  HandshakeRequest_CapabilityLevel2[HandshakeRequest_CapabilityLevel2["L4_RUNTIME_NATIVE"] = 80] = "L4_RUNTIME_NATIVE";
+  return HandshakeRequest_CapabilityLevel2;
+})(HandshakeRequest_CapabilityLevel || {});
+var DecisionRequest_Trigger = /* @__PURE__ */ ((DecisionRequest_Trigger2) => {
+  DecisionRequest_Trigger2[DecisionRequest_Trigger2["TRIGGER_UNSPECIFIED"] = 0] = "TRIGGER_UNSPECIFIED";
+  DecisionRequest_Trigger2[DecisionRequest_Trigger2["RUN_PRE"] = 1] = "RUN_PRE";
+  DecisionRequest_Trigger2[DecisionRequest_Trigger2["AGENT_STEP_PRE"] = 2] = "AGENT_STEP_PRE";
+  DecisionRequest_Trigger2[DecisionRequest_Trigger2["LLM_CALL_PRE"] = 3] = "LLM_CALL_PRE";
+  DecisionRequest_Trigger2[DecisionRequest_Trigger2["TOOL_CALL_PRE"] = 4] = "TOOL_CALL_PRE";
+  return DecisionRequest_Trigger2;
+})(DecisionRequest_Trigger || {});
+var DecisionResponse_Decision = /* @__PURE__ */ ((DecisionResponse_Decision2) => {
+  DecisionResponse_Decision2[DecisionResponse_Decision2["DECISION_UNSPECIFIED"] = 0] = "DECISION_UNSPECIFIED";
+  DecisionResponse_Decision2[DecisionResponse_Decision2["CONTINUE"] = 1] = "CONTINUE";
+  DecisionResponse_Decision2[DecisionResponse_Decision2["DEGRADE"] = 2] = "DEGRADE";
+  DecisionResponse_Decision2[DecisionResponse_Decision2["SKIP"] = 3] = "SKIP";
+  DecisionResponse_Decision2[DecisionResponse_Decision2["STOP"] = 4] = "STOP";
+  DecisionResponse_Decision2[DecisionResponse_Decision2["REQUIRE_APPROVAL"] = 5] = "REQUIRE_APPROVAL";
+  DecisionResponse_Decision2[DecisionResponse_Decision2["STOP_RUN_PROJECTION"] = 6] = "STOP_RUN_PROJECTION";
+  return DecisionResponse_Decision2;
+})(DecisionResponse_Decision || {});
+var PublishOutcomeRequest_Outcome = /* @__PURE__ */ ((PublishOutcomeRequest_Outcome2) => {
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["OUTCOME_UNSPECIFIED"] = 0] = "OUTCOME_UNSPECIFIED";
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["APPLIED"] = 1] = "APPLIED";
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["APPLIED_NOOP"] = 2] = "APPLIED_NOOP";
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["APPLY_FAILED"] = 3] = "APPLY_FAILED";
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["APPROVAL_GRANTED"] = 4] = "APPROVAL_GRANTED";
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["APPROVAL_DENIED"] = 5] = "APPROVAL_DENIED";
+  PublishOutcomeRequest_Outcome2[PublishOutcomeRequest_Outcome2["APPROVAL_TIMED_OUT"] = 6] = "APPROVAL_TIMED_OUT";
+  return PublishOutcomeRequest_Outcome2;
+})(PublishOutcomeRequest_Outcome || {});
+var TraceEvent_EventKind = /* @__PURE__ */ ((TraceEvent_EventKind2) => {
+  TraceEvent_EventKind2[TraceEvent_EventKind2["EVENT_KIND_UNSPECIFIED"] = 0] = "EVENT_KIND_UNSPECIFIED";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["RUN_START"] = 1] = "RUN_START";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["RUN_END"] = 2] = "RUN_END";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["AGENT_STEP_POST"] = 3] = "AGENT_STEP_POST";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["LLM_CALL_POST"] = 4] = "LLM_CALL_POST";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["TOOL_CALL_POST"] = 5] = "TOOL_CALL_POST";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["SPAN_DELTA"] = 6] = "SPAN_DELTA";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["APPROVAL_LIFECYCLE"] = 7] = "APPROVAL_LIFECYCLE";
+  TraceEvent_EventKind2[TraceEvent_EventKind2["ROLLBACK"] = 8] = "ROLLBACK";
+  return TraceEvent_EventKind2;
+})(TraceEvent_EventKind || {});
+var LlmCallPostPayload_Outcome = /* @__PURE__ */ ((LlmCallPostPayload_Outcome2) => {
+  LlmCallPostPayload_Outcome2[LlmCallPostPayload_Outcome2["OUTCOME_UNSPECIFIED"] = 0] = "OUTCOME_UNSPECIFIED";
+  LlmCallPostPayload_Outcome2[LlmCallPostPayload_Outcome2["SUCCESS"] = 1] = "SUCCESS";
+  LlmCallPostPayload_Outcome2[LlmCallPostPayload_Outcome2["PROVIDER_ERROR"] = 2] = "PROVIDER_ERROR";
+  LlmCallPostPayload_Outcome2[LlmCallPostPayload_Outcome2["CLIENT_TIMEOUT"] = 3] = "CLIENT_TIMEOUT";
+  LlmCallPostPayload_Outcome2[LlmCallPostPayload_Outcome2["RUN_ABORTED"] = 4] = "RUN_ABORTED";
+  return LlmCallPostPayload_Outcome2;
+})(LlmCallPostPayload_Outcome || {});
+var ApprovalLifecyclePayload_State = /* @__PURE__ */ ((ApprovalLifecyclePayload_State2) => {
+  ApprovalLifecyclePayload_State2[ApprovalLifecyclePayload_State2["STATE_UNSPECIFIED"] = 0] = "STATE_UNSPECIFIED";
+  ApprovalLifecyclePayload_State2[ApprovalLifecyclePayload_State2["REQUESTED"] = 1] = "REQUESTED";
+  ApprovalLifecyclePayload_State2[ApprovalLifecyclePayload_State2["GRANTED"] = 2] = "GRANTED";
+  ApprovalLifecyclePayload_State2[ApprovalLifecyclePayload_State2["DENIED"] = 3] = "DENIED";
+  ApprovalLifecyclePayload_State2[ApprovalLifecyclePayload_State2["EXPIRED"] = 4] = "EXPIRED";
+  return ApprovalLifecyclePayload_State2;
+})(ApprovalLifecyclePayload_State || {});
+var TraceEventAck_Status = /* @__PURE__ */ ((TraceEventAck_Status2) => {
+  TraceEventAck_Status2[TraceEventAck_Status2["STATUS_UNSPECIFIED"] = 0] = "STATUS_UNSPECIFIED";
+  TraceEventAck_Status2[TraceEventAck_Status2["ACCEPTED"] = 1] = "ACCEPTED";
+  TraceEventAck_Status2[TraceEventAck_Status2["QUARANTINED"] = 2] = "QUARANTINED";
+  TraceEventAck_Status2[TraceEventAck_Status2["REJECTED"] = 3] = "REJECTED";
+  return TraceEventAck_Status2;
+})(TraceEventAck_Status || {});
+var DrainSignal_Phase = /* @__PURE__ */ ((DrainSignal_Phase2) => {
+  DrainSignal_Phase2[DrainSignal_Phase2["PHASE_UNSPECIFIED"] = 0] = "PHASE_UNSPECIFIED";
+  DrainSignal_Phase2[DrainSignal_Phase2["DRAIN_INITIATED"] = 1] = "DRAIN_INITIATED";
+  DrainSignal_Phase2[DrainSignal_Phase2["DRAIN_TIMEOUT_APPROACHING"] = 2] = "DRAIN_TIMEOUT_APPROACHING";
+  DrainSignal_Phase2[DrainSignal_Phase2["DRAIN_COMPLETE"] = 3] = "DRAIN_COMPLETE";
+  return DrainSignal_Phase2;
+})(DrainSignal_Phase || {});
+var CommitSessionDeltaRequest_Outcome = /* @__PURE__ */ ((CommitSessionDeltaRequest_Outcome2) => {
+  CommitSessionDeltaRequest_Outcome2[CommitSessionDeltaRequest_Outcome2["OUTCOME_UNSPECIFIED"] = 0] = "OUTCOME_UNSPECIFIED";
+  CommitSessionDeltaRequest_Outcome2[CommitSessionDeltaRequest_Outcome2["SUCCESS"] = 1] = "SUCCESS";
+  CommitSessionDeltaRequest_Outcome2[CommitSessionDeltaRequest_Outcome2["PROVIDER_ERROR"] = 2] = "PROVIDER_ERROR";
+  CommitSessionDeltaRequest_Outcome2[CommitSessionDeltaRequest_Outcome2["CLIENT_TIMEOUT"] = 3] = "CLIENT_TIMEOUT";
+  CommitSessionDeltaRequest_Outcome2[CommitSessionDeltaRequest_Outcome2["RUN_ABORTED"] = 4] = "RUN_ABORTED";
+  return CommitSessionDeltaRequest_Outcome2;
+})(CommitSessionDeltaRequest_Outcome || {});
+var ResumeAfterApprovalRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ResumeAfterApprovalRequest", [
+      {
+        no: 1,
+        name: "tenant_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "decision_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "approval_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "workload_instance_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ResumeAfterApprovalRequest = new ResumeAfterApprovalRequest$Type();
+var ResumeAfterApprovalResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ResumeAfterApprovalResponse", [
+      { no: 1, name: "decision", kind: "message", oneof: "outcome", T: () => DecisionResponse },
+      { no: 2, name: "denied", kind: "message", oneof: "outcome", T: () => ResumeAfterApprovalDenied },
+      { no: 3, name: "error", kind: "message", oneof: "outcome", T: () => Error2 }
+    ]);
+  }
+};
+var ResumeAfterApprovalResponse = new ResumeAfterApprovalResponse$Type();
+var ResumeAfterApprovalDenied$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ResumeAfterApprovalDenied", [
+      {
+        no: 1,
+        name: "audit_decision_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "approver_reason",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "approver_subject",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "matched_rule_ids",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ResumeAfterApprovalDenied = new ResumeAfterApprovalDenied$Type();
+var HandshakeRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.HandshakeRequest", [
+      {
+        no: 1,
+        name: "sdk_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "runtime_kind",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "runtime_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "capability_level", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.HandshakeRequest.CapabilityLevel", HandshakeRequest_CapabilityLevel] },
+      {
+        no: 5,
+        name: "tenant_id_assertion",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 6,
+        name: "workload_instance_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 7,
+        name: "protocol_version",
+        kind: "scalar",
+        T: 13
+        /*ScalarType.UINT32*/
+      }
+    ]);
+  }
+};
+var HandshakeRequest = new HandshakeRequest$Type();
+var HandshakeResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.HandshakeResponse", [
+      {
+        no: 1,
+        name: "sidecar_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "schema_bundle", kind: "message", T: () => SchemaBundleRef },
+      { no: 3, name: "contract_bundle", kind: "message", T: () => ContractBundleRef },
+      { no: 4, name: "capability_required", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.HandshakeRequest.CapabilityLevel", HandshakeRequest_CapabilityLevel] },
+      { no: 5, name: "active_key_epochs", kind: "message", T: () => HandshakeResponse_KeyEpochs },
+      {
+        no: 6,
+        name: "protocol_version",
+        kind: "scalar",
+        T: 13
+        /*ScalarType.UINT32*/
+      },
+      {
+        no: 7,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 8,
+        name: "signing_key_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 9,
+        name: "announcement_signature",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      }
+    ]);
+  }
+};
+var HandshakeResponse = new HandshakeResponse$Type();
+var HandshakeResponse_KeyEpochs$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.HandshakeResponse.KeyEpochs", [
+      {
+        no: 1,
+        name: "producer_signing_key_epochs",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "hmac_tenant_salt_epochs",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var HandshakeResponse_KeyEpochs = new HandshakeResponse_KeyEpochs$Type();
+var ClaimEstimate$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ClaimEstimate", [
+      {
+        no: 1,
+        name: "tokenizer_tier",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "tokenizer_version_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "input_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 4,
+        name: "predicted_a_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 5,
+        name: "predicted_b_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 6,
+        name: "predicted_c_tokens",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 7,
+        name: "reserved_strategy",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 8,
+        name: "prediction_strategy_used",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 9,
+        name: "prediction_policy_used",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 10,
+        name: "prediction_confidence",
+        kind: "scalar",
+        T: 2
+        /*ScalarType.FLOAT*/
+      },
+      {
+        no: 11,
+        name: "prediction_sample_size",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 12,
+        name: "cold_start_layer_used",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 13,
+        name: "classifier_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 14,
+        name: "fingerprint_version",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 15,
+        name: "prompt_class_fingerprint",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 16,
+        name: "run_projection_at_decision_atomic",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 17,
+        name: "run_predicted_remaining_steps",
+        kind: "scalar",
+        T: 5
+        /*ScalarType.INT32*/
+      },
+      {
+        no: 18,
+        name: "run_steps_completed_so_far",
+        kind: "scalar",
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 19,
+        name: "run_code_triggered",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 20,
+        name: "model",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 21,
+        name: "prompt_class",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ClaimEstimate = new ClaimEstimate$Type();
+var DecisionRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.DecisionRequest", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "trigger", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.DecisionRequest.Trigger", DecisionRequest_Trigger] },
+      { no: 3, name: "trace", kind: "message", T: () => TraceContext },
+      { no: 4, name: "ids", kind: "message", T: () => SpendGuardIds },
+      {
+        no: 5,
+        name: "route",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 6, name: "inputs", kind: "message", T: () => DecisionRequest_Inputs },
+      {
+        no: 7,
+        name: "parent_run_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 8,
+        name: "budget_grant_jti",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 9, name: "idempotency", kind: "message", T: () => Idempotency },
+      {
+        no: 17,
+        name: "planned_steps_hint",
+        kind: "scalar",
+        T: 5
+        /*ScalarType.INT32*/
+      },
+      { no: 18, name: "reservation_source", kind: "enum", T: () => ["spendguard.common.v1.ReservationSource", ReservationSource, "RESERVATION_SOURCE_"] },
+      {
+        no: 19,
+        name: "meter_only_estimate",
+        kind: "scalar",
+        T: 8
+        /*ScalarType.BOOL*/
+      }
+    ]);
+  }
+};
+var DecisionRequest = new DecisionRequest$Type();
+var DecisionRequest_Inputs$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.DecisionRequest.Inputs", [
+      { no: 1, name: "projected_claims", kind: "message", repeat: 2, T: () => BudgetClaim },
+      {
+        no: 2,
+        name: "projected_p50_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "projected_p90_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "projected_p95_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "projected_p99_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 6, name: "projected_unit", kind: "message", T: () => UnitRef },
+      { no: 7, name: "runtime_metadata", kind: "message", T: () => Struct },
+      { no: 8, name: "claim_estimate", kind: "message", T: () => ClaimEstimate }
+    ]);
+  }
+};
+var DecisionRequest_Inputs = new DecisionRequest_Inputs$Type();
+var DecisionResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.DecisionResponse", [
+      {
+        no: 1,
+        name: "decision_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "audit_decision_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 3, name: "decision", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.DecisionResponse.Decision", DecisionResponse_Decision] },
+      {
+        no: 4,
+        name: "reason_codes",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "matched_rule_ids",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 6,
+        name: "mutation_patch_json",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 7,
+        name: "effect_hash",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 8,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 9,
+        name: "reservation_ids",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 10, name: "ttl_expires_at", kind: "message", T: () => Timestamp },
+      {
+        no: 11,
+        name: "approval_request_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 12, name: "approval_ttl", kind: "message", T: () => Timestamp },
+      {
+        no: 13,
+        name: "approver_role",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 14,
+        name: "terminal",
+        kind: "scalar",
+        T: 8
+        /*ScalarType.BOOL*/
+      },
+      { no: 15, name: "error", kind: "message", T: () => Error2 },
+      {
+        no: 16,
+        name: "run_code_triggered",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 17, name: "subscription_meter", kind: "message", T: () => SubscriptionMeter }
+    ]);
+  }
+};
+var DecisionResponse = new DecisionResponse$Type();
+var PublishOutcomeRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.PublishOutcomeRequest", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "decision_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "effect_hash",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      { no: 4, name: "outcome", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.PublishOutcomeRequest.Outcome", PublishOutcomeRequest_Outcome] },
+      {
+        no: 5,
+        name: "adapter_error",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var PublishOutcomeRequest = new PublishOutcomeRequest$Type();
+var PublishOutcomeResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.PublishOutcomeResponse", [
+      {
+        no: 1,
+        name: "audit_outcome_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "recorded_at", kind: "message", T: () => Timestamp },
+      { no: 3, name: "error", kind: "message", T: () => Error2 }
+    ]);
+  }
+};
+var PublishOutcomeResponse = new PublishOutcomeResponse$Type();
+var TraceEvent$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.TraceEvent", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "trace", kind: "message", T: () => TraceContext },
+      { no: 3, name: "ids", kind: "message", T: () => SpendGuardIds },
+      { no: 4, name: "kind", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.TraceEvent.EventKind", TraceEvent_EventKind] },
+      { no: 5, name: "event_time", kind: "message", T: () => Timestamp },
+      { no: 6, name: "generic", kind: "message", oneof: "payload", T: () => Struct },
+      { no: 8, name: "llm_call_post", kind: "message", oneof: "payload", T: () => LlmCallPostPayload },
+      { no: 9, name: "approval", kind: "message", oneof: "payload", T: () => ApprovalLifecyclePayload },
+      { no: 10, name: "rollback", kind: "message", oneof: "payload", T: () => RollbackPayload },
+      {
+        no: 7,
+        name: "provider_response_metadata",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var TraceEvent = new TraceEvent$Type();
+var LlmCallPostPayload$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.LlmCallPostPayload", [
+      {
+        no: 1,
+        name: "reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "provider_reported_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 3, name: "unit", kind: "message", T: () => UnitRef },
+      { no: 4, name: "pricing", kind: "message", T: () => PricingFreeze },
+      {
+        no: 5,
+        name: "provider_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 6, name: "outcome", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.LlmCallPostPayload.Outcome", LlmCallPostPayload_Outcome] },
+      {
+        no: 7,
+        name: "estimated_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 8,
+        name: "actual_input_tokens",
+        kind: "scalar",
+        opt: true,
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 9,
+        name: "actual_output_tokens",
+        kind: "scalar",
+        opt: true,
+        T: 3
+        /*ScalarType.INT64*/
+      },
+      {
+        no: 10,
+        name: "delta_b_ratio",
+        kind: "scalar",
+        opt: true,
+        T: 2
+        /*ScalarType.FLOAT*/
+      },
+      {
+        no: 11,
+        name: "delta_c_ratio",
+        kind: "scalar",
+        opt: true,
+        T: 2
+        /*ScalarType.FLOAT*/
+      }
+    ]);
+  }
+};
+var LlmCallPostPayload = new LlmCallPostPayload$Type();
+var ApprovalLifecyclePayload$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ApprovalLifecyclePayload", [
+      {
+        no: 1,
+        name: "approval_request_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "state", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.ApprovalLifecyclePayload.State", ApprovalLifecyclePayload_State] },
+      {
+        no: 3,
+        name: "approver",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "deadline", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+var ApprovalLifecyclePayload = new ApprovalLifecyclePayload$Type();
+var RollbackPayload$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.RollbackPayload", [
+      {
+        no: 1,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "reason_code",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "compensating_ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var RollbackPayload = new RollbackPayload$Type();
+var TraceEventAck$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.TraceEventAck", [
+      {
+        no: 1,
+        name: "event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 2, name: "status", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.TraceEventAck.Status", TraceEventAck_Status] },
+      { no: 3, name: "error", kind: "message", T: () => Error2 }
+    ]);
+  }
+};
+var TraceEventAck = new TraceEventAck$Type();
+var IssueBudgetGrantRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.IssueBudgetGrantRequest", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "parent_run_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "child_workload_kind",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "scope", kind: "message", T: () => IssueBudgetGrantRequest_Scope }
+    ]);
+  }
+};
+var IssueBudgetGrantRequest = new IssueBudgetGrantRequest$Type();
+var IssueBudgetGrantRequest_Scope$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.IssueBudgetGrantRequest.Scope", [
+      {
+        no: 1,
+        name: "allowed_routes",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "allowed_runtimes",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "max_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "max_amount_unit", kind: "message", T: () => UnitRef },
+      { no: 5, name: "expires_at", kind: "message", T: () => Timestamp },
+      {
+        no: 6,
+        name: "reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var IssueBudgetGrantRequest_Scope = new IssueBudgetGrantRequest_Scope$Type();
+var IssueBudgetGrantResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.IssueBudgetGrantResponse", [
+      {
+        no: 1,
+        name: "jwt_grant",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "grant_jti",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 3, name: "issued_at", kind: "message", T: () => Timestamp },
+      { no: 4, name: "expires_at", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+var IssueBudgetGrantResponse = new IssueBudgetGrantResponse$Type();
+var RevokeBudgetGrantRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.RevokeBudgetGrantRequest", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "grant_jti",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "reason",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var RevokeBudgetGrantRequest = new RevokeBudgetGrantRequest$Type();
+var RevokeBudgetGrantResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.RevokeBudgetGrantResponse", [
+      {
+        no: 1,
+        name: "revoked",
+        kind: "scalar",
+        T: 8
+        /*ScalarType.BOOL*/
+      },
+      { no: 2, name: "revoked_at", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+var RevokeBudgetGrantResponse = new RevokeBudgetGrantResponse$Type();
+var ConsumeBudgetGrantRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ConsumeBudgetGrantRequest", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "jwt_grant",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ConsumeBudgetGrantRequest = new ConsumeBudgetGrantRequest$Type();
+var ConsumeBudgetGrantResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ConsumeBudgetGrantResponse", [
+      {
+        no: 1,
+        name: "accepted",
+        kind: "scalar",
+        T: 8
+        /*ScalarType.BOOL*/
+      },
+      {
+        no: 2,
+        name: "parent_run_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "parent_tenant_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "expires_at", kind: "message", T: () => Timestamp },
+      { no: 5, name: "error", kind: "message", T: () => Error2 }
+    ]);
+  }
+};
+var ConsumeBudgetGrantResponse = new ConsumeBudgetGrantResponse$Type();
+var DrainSubscribeRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.DrainSubscribeRequest", [
+      {
+        no: 1,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var DrainSubscribeRequest = new DrainSubscribeRequest$Type();
+var DrainSignal$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.DrainSignal", [
+      { no: 1, name: "phase", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.DrainSignal.Phase", DrainSignal_Phase] },
+      { no: 2, name: "deadline", kind: "message", T: () => Timestamp },
+      {
+        no: 3,
+        name: "drain_trigger",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var DrainSignal = new DrainSignal$Type();
+var ReleaseReservationRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReleaseReservationRequest", [
+      {
+        no: 1,
+        name: "reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "idempotency_key",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "reason_codes",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 100,
+        name: "tenant_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 101,
+        name: "workload_instance_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 102,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ReleaseReservationRequest = new ReleaseReservationRequest$Type();
+var ReleaseReservationResponse$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReleaseReservationResponse", [
+      {
+        no: 1,
+        name: "audit_event_signature",
+        kind: "scalar",
+        T: 12
+        /*ScalarType.BYTES*/
+      },
+      {
+        no: 100,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 101,
+        name: "released_reservation_ids",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ReleaseReservationResponse = new ReleaseReservationResponse$Type();
+var ReserveSessionRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReserveSessionRequest", [
+      {
+        no: 1,
+        name: "tenant_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "budget_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "window_instance_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "unit", kind: "message", T: () => UnitRef },
+      { no: 5, name: "pricing", kind: "message", T: () => PricingFreeze },
+      {
+        no: 6,
+        name: "session_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 7,
+        name: "route",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 8,
+        name: "estimated_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 9,
+        name: "ttl_seconds",
+        kind: "scalar",
+        T: 13
+        /*ScalarType.UINT32*/
+      },
+      {
+        no: 10,
+        name: "idempotency_key",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ReserveSessionRequest = new ReserveSessionRequest$Type();
+var ReserveSessionOutcome$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReserveSessionOutcome", [
+      { no: 1, name: "accepted", kind: "message", oneof: "outcome", T: () => ReserveSessionAccepted },
+      { no: 2, name: "denied", kind: "message", oneof: "outcome", T: () => ReserveSessionDenied },
+      { no: 3, name: "error", kind: "message", oneof: "outcome", T: () => Error2 }
+    ]);
+  }
+};
+var ReserveSessionOutcome = new ReserveSessionOutcome$Type();
+var ReserveSessionAccepted$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReserveSessionAccepted", [
+      {
+        no: 1,
+        name: "session_reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "audit_session_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "ttl_expires_at", kind: "message", T: () => Timestamp },
+      {
+        no: 5,
+        name: "reserved_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 6,
+        name: "remaining_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ReserveSessionAccepted = new ReserveSessionAccepted$Type();
+var ReserveSessionDenied$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReserveSessionDenied", [
+      {
+        no: 1,
+        name: "audit_session_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "reason_codes",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "matched_rule_ids",
+        kind: "scalar",
+        repeat: 2,
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "error", kind: "message", T: () => Error2 }
+    ]);
+  }
+};
+var ReserveSessionDenied = new ReserveSessionDenied$Type();
+var CommitSessionDeltaRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.CommitSessionDeltaRequest", [
+      {
+        no: 1,
+        name: "session_reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "streaming_commit_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "amount_atomic_delta",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 4, name: "outcome", kind: "enum", T: () => ["spendguard.sidecar_adapter.v1.CommitSessionDeltaRequest.Outcome", CommitSessionDeltaRequest_Outcome] },
+      { no: 5, name: "event_time", kind: "message", T: () => Timestamp },
+      {
+        no: 6,
+        name: "idempotency_key",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var CommitSessionDeltaRequest = new CommitSessionDeltaRequest$Type();
+var CommitSessionDeltaOutcome$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.CommitSessionDeltaOutcome", [
+      { no: 1, name: "accepted", kind: "message", oneof: "outcome", T: () => CommitSessionDeltaAccepted },
+      { no: 2, name: "error", kind: "message", oneof: "outcome", T: () => Error2 }
+    ]);
+  }
+};
+var CommitSessionDeltaOutcome = new CommitSessionDeltaOutcome$Type();
+var CommitSessionDeltaAccepted$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.CommitSessionDeltaAccepted", [
+      {
+        no: 1,
+        name: "session_reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "streaming_commit_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "audit_session_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "committed_delta_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 6,
+        name: "cumulative_committed_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 7,
+        name: "remaining_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 8, name: "recorded_at", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+var CommitSessionDeltaAccepted = new CommitSessionDeltaAccepted$Type();
+var ReleaseSessionRequest$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReleaseSessionRequest", [
+      {
+        no: 1,
+        name: "session_reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "reason_code",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 3, name: "event_time", kind: "message", T: () => Timestamp },
+      {
+        no: 4,
+        name: "idempotency_key",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      }
+    ]);
+  }
+};
+var ReleaseSessionRequest = new ReleaseSessionRequest$Type();
+var ReleaseSessionOutcome$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReleaseSessionOutcome", [
+      { no: 1, name: "accepted", kind: "message", oneof: "outcome", T: () => ReleaseSessionAccepted },
+      { no: 2, name: "error", kind: "message", oneof: "outcome", T: () => Error2 }
+    ]);
+  }
+};
+var ReleaseSessionOutcome = new ReleaseSessionOutcome$Type();
+var ReleaseSessionAccepted$Type = class extends MessageType {
+  constructor() {
+    super("spendguard.sidecar_adapter.v1.ReleaseSessionAccepted", [
+      {
+        no: 1,
+        name: "session_reservation_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 2,
+        name: "ledger_transaction_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 3,
+        name: "audit_session_event_id",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 4,
+        name: "released_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      {
+        no: 5,
+        name: "committed_amount_atomic",
+        kind: "scalar",
+        T: 9
+        /*ScalarType.STRING*/
+      },
+      { no: 6, name: "recorded_at", kind: "message", T: () => Timestamp }
+    ]);
+  }
+};
+var ReleaseSessionAccepted = new ReleaseSessionAccepted$Type();
+var SidecarAdapter = new ServiceType("spendguard.sidecar_adapter.v1.SidecarAdapter", [
+  { name: "Handshake", options: {}, I: HandshakeRequest, O: HandshakeResponse },
+  { name: "RequestDecision", options: {}, I: DecisionRequest, O: DecisionResponse },
+  { name: "ConfirmPublishOutcome", options: {}, I: PublishOutcomeRequest, O: PublishOutcomeResponse },
+  { name: "EmitTraceEvents", serverStreaming: true, clientStreaming: true, options: {}, I: TraceEvent, O: TraceEventAck },
+  { name: "IssueBudgetGrant", options: {}, I: IssueBudgetGrantRequest, O: IssueBudgetGrantResponse },
+  { name: "RevokeBudgetGrant", options: {}, I: RevokeBudgetGrantRequest, O: RevokeBudgetGrantResponse },
+  { name: "ConsumeBudgetGrant", options: {}, I: ConsumeBudgetGrantRequest, O: ConsumeBudgetGrantResponse },
+  { name: "StreamDrainSignal", serverStreaming: true, options: {}, I: DrainSubscribeRequest, O: DrainSignal },
+  { name: "ResumeAfterApproval", options: {}, I: ResumeAfterApprovalRequest, O: ResumeAfterApprovalResponse },
+  { name: "ReleaseReservation", options: {}, I: ReleaseReservationRequest, O: ReleaseReservationResponse },
+  { name: "ReserveSession", options: {}, I: ReserveSessionRequest, O: ReserveSessionOutcome },
+  { name: "CommitSessionDelta", options: {}, I: CommitSessionDeltaRequest, O: CommitSessionDeltaOutcome },
+  { name: "ReleaseSession", options: {}, I: ReleaseSessionRequest, O: ReleaseSessionOutcome }
+]);
+var SidecarAdapterClient = class {
+  constructor(_transport) {
+    this._transport = _transport;
+  }
+  _transport;
+  typeName = SidecarAdapter.typeName;
+  methods = SidecarAdapter.methods;
+  options = SidecarAdapter.options;
+  /**
+   * Initial handshake; mandatory before any other RPC. Negotiates SDK version,
+   * runtime kind, capability level, tenant_id assertion, key epochs.
+   *
+   * @generated from protobuf rpc: Handshake
+   */
+  handshake(input, options) {
+    const method = this.methods[0], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  // -- Decision boundary (per Contract §15 trigger points) -----------------
+  /**
+   * Adapter requests a decision at a *.pre trigger point.
+   * Sidecar runs Contract §6 stages 1-5 and returns DecisionResult.
+   * Sidecar may take up to Contract §14 latency budget (50ms p99 warm).
+   *
+   * @generated from protobuf rpc: RequestDecision
+   */
+  requestDecision(input, options) {
+    const method = this.methods[1], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  /**
+   * Adapter confirms publish_effect outcome (per Contract §6 stage 7).
+   * Idempotent via effect_hash (Stage 2 §4.6).
+   *
+   * @generated from protobuf rpc: ConfirmPublishOutcome
+   */
+  confirmPublishOutcome(input, options) {
+    const method = this.methods[2], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  // -- Trace events (per Contract §15 *.post triggers; observation only) ---
+  /**
+   * Adapter emits canonical/lifecycle events (agent.run.start, agent.step.post
+   * tool.call.post, llm.call.post for commit, etc.). Server-streamed because
+   * sidecar may emit follow-up acks or correction events.
+   *
+   * @generated from protobuf rpc: EmitTraceEvents
+   */
+  emitTraceEvents(options) {
+    const method = this.methods[3], opt = this._transport.mergeOptions(options);
+    return stackIntercept("duplex", this._transport, method, opt);
+  }
+  // -- Sub-agent budget grant (per Contract §8) ----------------------------
+  /**
+   * Parent agent requests budget_grant JWT to delegate to child agent.
+   *
+   * @generated from protobuf rpc: IssueBudgetGrant
+   */
+  issueBudgetGrant(input, options) {
+    const method = this.methods[4], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  /**
+   * Parent revokes a previously issued grant.
+   *
+   * @generated from protobuf rpc: RevokeBudgetGrant
+   */
+  revokeBudgetGrant(input, options) {
+    const method = this.methods[5], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  /**
+   * Child agent uses grant to bootstrap budget context.
+   *
+   * @generated from protobuf rpc: ConsumeBudgetGrant
+   */
+  consumeBudgetGrant(input, options) {
+    const method = this.methods[6], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  // -- Lifecycle drain (per Sidecar §11) -----------------------------------
+  /**
+   * Sidecar signals adapter that drain has begun; adapter should stop
+   * initiating new decision boundaries and let in-flight finish.
+   *
+   * @generated from protobuf rpc: StreamDrainSignal
+   */
+  streamDrainSignal(input, options) {
+    const method = this.methods[7], opt = this._transport.mergeOptions(options);
+    return stackIntercept("serverStreaming", this._transport, method, opt, input);
+  }
+  // -- Approval resume (Phase 5 GA hardening S16) --------------------------
+  /**
+   * Adapter calls this AFTER the human approver has approved/denied the
+   * pending approval (REQUIRE_APPROVAL outcome from RequestDecision).
+   * Sidecar:
+   *   1. Looks up the approval by (tenant_id, decision_id, approval_id).
+   *   2. Reads the current state (must be `approved` or `denied`).
+   *   3. For `approved`: re-runs Contract evaluation + Ledger.ReserveSet
+   *      with a NEW idempotency key derived from approval_id (so a
+   *      replay can never double-publish the effect).
+   *   4. For `denied`: emits the deny audit row + returns Decision::STOP.
+   *   5. For other states (pending/expired/cancelled): returns the
+   *      typed Error code so the adapter raises the right exception.
+   *
+   * Idempotent: repeated ResumeAfterApproval calls with the same
+   * (decision_id, approval_id) produce the same DecisionResponse
+   * because the idempotency key includes both.
+   *
+   * @generated from protobuf rpc: ResumeAfterApproval
+   */
+  resumeAfterApproval(input, options) {
+    const method = this.methods[8], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  // -- Explicit Release (Draft-01 §4 of Agent Spend Protocol) ---------------
+  /**
+   * Adapter-initiated release of a held reservation before commit.
+   * Use when the provider call is aborted, the client times out, or the
+   * agent run is cancelled — and the adapter wants to surface that
+   * explicitly rather than waiting for an outcome-driven (APPLY_FAILED
+   * or trace-event-driven) implicit release.
+   *
+   * Coexists with the implicit release paths in ConfirmPublishOutcome and
+   * EmitTraceEvents; those remain unchanged. Implicit paths are still the
+   * default for adapters that report outcomes naturally; the explicit RPC
+   * is for adapters that want to match the Agent Spend Protocol Draft-01
+   * wire shape (docs/specs/agent-spend-protocol/draft-01.md §4).
+   *
+   * Idempotent: repeated ReleaseReservation calls with the same
+   * (reservation_id, idempotency_key) pair return the original outcome.
+   *
+   * @generated from protobuf rpc: ReleaseReservation
+   */
+  releaseReservation(input, options) {
+    const method = this.methods[9], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  // -- Session reservation (D41 voice substrate SR-V1) ---------------------
+  /**
+   * Reserve a session-scoped ledger hold before a realtime voice session
+   * connects to paid model providers. Idempotent by
+   * (tenant_id, session_id, route, idempotency_key).
+   *
+   * @generated from protobuf rpc: ReserveSession
+   */
+  reserveSession(input, options) {
+    const method = this.methods[10], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  /**
+   * Commit one positive streaming spend delta against an existing session
+   * reservation. Idempotent by (session_reservation_id,
+   * streaming_commit_id). amount_atomic_delta MUST be > 0.
+   *
+   * @generated from protobuf rpc: CommitSessionDelta
+   */
+  commitSessionDelta(input, options) {
+    const method = this.methods[11], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+  /**
+   * Release the uncommitted remainder of a session-scoped reservation.
+   * Idempotent by (session_reservation_id, idempotency_key).
+   *
+   * @generated from protobuf rpc: ReleaseSession
+   */
+  releaseSession(input, options) {
+    const method = this.methods[12], opt = this._transport.mergeOptions(options);
+    return stackIntercept("unary", this._transport, method, opt, input);
+  }
+};
+
+// src/errors.ts
+var SpendGuardError = class extends Error {
+  name = "SpendGuardError";
+  constructor(message, opts) {
+    super(message);
+    if (opts?.cause !== void 0) {
+      this.cause = opts.cause;
+    }
+    Object.defineProperty(this, "name", {
+      value: this.name,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  }
+};
+var SpendGuardConfigError = class extends SpendGuardError {
+  name = "SpendGuardConfigError";
+};
+var SidecarUnavailable = class extends SpendGuardError {
+  name = "SidecarUnavailable";
+  statusCode = 503;
+};
+var SpendGuardConnectionError = class extends SpendGuardError {
+  name = "SpendGuardConnectionError";
+};
+var HandshakeError = class extends SpendGuardError {
+  name = "HandshakeError";
+};
+var DecisionDenied = class extends SpendGuardError {
+  name = "DecisionDenied";
+  statusCode = 403;
+  decisionId;
+  reasonCodes;
+  auditDecisionEventId;
+  matchedRuleIds;
+  constructor(message, init, opts) {
+    super(message, opts);
+    this.decisionId = init.decisionId;
+    this.reasonCodes = init.reasonCodes ?? [];
+    if (init.auditDecisionEventId !== void 0) {
+      this.auditDecisionEventId = init.auditDecisionEventId;
+    }
+    this.matchedRuleIds = init.matchedRuleIds ?? [];
+  }
+};
+var DecisionStopped = class extends DecisionDenied {
+  name = "DecisionStopped";
+};
+var DecisionSkipped = class extends DecisionDenied {
+  name = "DecisionSkipped";
+};
+var ApprovalRequired = class extends DecisionDenied {
+  name = "ApprovalRequired";
+  approvalRequestId;
+  approverRole;
+  tenantId;
+  constructor(message, init, opts) {
+    super(message, init, opts);
+    this.approvalRequestId = init.approvalRequestId;
+    if (init.approverRole !== void 0) {
+      this.approverRole = init.approverRole;
+    }
+    if (init.tenantId !== void 0) {
+      this.tenantId = init.tenantId;
+    }
+  }
+  /**
+   * Resume the decision after a human operator has acted. Delegates to
+   * `client.resumeAfterApproval(...)`.
+   *
+   * @throws ApprovalDeniedError when the operator rejected.
+   * @throws ApprovalLapsedError when the approval expired / was cancelled.
+   * @throws ApprovalBundleHotReloadedError when bundle rotated mid-approval.
+   */
+  async resume(client) {
+    return client.resumeAfterApproval({
+      approvalId: this.approvalRequestId,
+      tenantId: this.tenantId ?? "",
+      decisionId: this.decisionId
+    });
+  }
+};
+var ApprovalBundleHotReloadedError = class extends SpendGuardError {
+  name = "ApprovalBundleHotReloadedError";
+  originalBundleHash;
+  currentBundleHash;
+  constructor(message, init, opts) {
+    super(message, opts);
+    this.originalBundleHash = init.originalBundleHash;
+    this.currentBundleHash = init.currentBundleHash;
+  }
+};
+var MutationApplyFailed = class extends SpendGuardError {
+  name = "MutationApplyFailed";
+};
+
+// src/config.ts
+var DEFAULT_DECISION_TIMEOUT_MS = 250;
+var DEFAULT_HANDSHAKE_TIMEOUT_MS = 2e3;
+var DEFAULT_PUBLISH_TIMEOUT_MS = 150;
+var DEFAULT_TRACE_TIMEOUT_MS = 500;
+var DEFAULT_CAPABILITY_LEVEL = 64;
+var DEFAULT_PROTOCOL_VERSION = 1;
+function validateConfig(cfg) {
+  if (cfg.socketPath.length === 0) {
+    throw new SpendGuardConfigError(
+      "socketPath is required (or set SPENDGUARD_SOCKET_PATH / SPENDGUARD_SIDECAR_UDS)"
+    );
+  }
+  if (cfg.tenantId.length === 0) {
+    throw new SpendGuardConfigError("tenantId is required (or set SPENDGUARD_TENANT_ID)");
+  }
+  if (cfg.otelTracer !== void 0 && cfg.onSpan !== void 0) {
+    throw new SpendGuardConfigError("otelTracer and onSpan are mutually exclusive");
+  }
+  if (cfg.runtime !== "uds-grpc") {
+    throw new SpendGuardConfigError(
+      `runtime=${JSON.stringify(cfg.runtime)} is not supported in v0.1.x; only "uds-grpc" is wired`
+    );
+  }
+  if (cfg.protocolVersion !== 1) {
+    throw new SpendGuardConfigError(
+      `protocolVersion=${cfg.protocolVersion} is not supported in v0.1.x; only 1 is wired`
+    );
+  }
+  assertPositiveIntegerField(cfg.capabilityLevel, "capabilityLevel");
+  assertPositiveIntegerField(cfg.decisionTimeoutMs, "decisionTimeoutMs");
+  assertPositiveIntegerField(cfg.handshakeTimeoutMs, "handshakeTimeoutMs");
+  assertPositiveIntegerField(cfg.publishTimeoutMs, "publishTimeoutMs");
+  assertPositiveIntegerField(cfg.traceTimeoutMs, "traceTimeoutMs");
+}
+function assertPositiveIntegerField(value, field) {
+  if (!Number.isFinite(value) || !Number.isInteger(value) || value < 0) {
+    throw new SpendGuardConfigError(`${field}=${value} must be a finite non-negative integer`);
+  }
+}
+
+// src/env.ts
+var DEFAULT_SOCKET_PATH = "/var/run/spendguard/adapter.sock";
+function resolveEnvConfig(env = process.env) {
+  const out = {};
+  const socketPath = env.SPENDGUARD_SOCKET_PATH ?? env.SPENDGUARD_SIDECAR_UDS;
+  if (socketPath !== void 0 && socketPath.length > 0) {
+    out.socketPath = socketPath;
+  }
+  const tenantId = env.SPENDGUARD_TENANT_ID;
+  if (tenantId !== void 0 && tenantId.length > 0) {
+    out.tenantId = tenantId;
+  }
+  const workloadInstanceId = env.SPENDGUARD_WORKLOAD_INSTANCE_ID;
+  if (workloadInstanceId !== void 0 && workloadInstanceId.length > 0) {
+    out.workloadInstanceId = workloadInstanceId;
+  }
+  const decisionTimeoutMs = parsePositiveIntegerEnv(
+    env.SPENDGUARD_DECISION_TIMEOUT_MS,
+    "SPENDGUARD_DECISION_TIMEOUT_MS"
+  );
+  if (decisionTimeoutMs !== void 0) {
+    out.decisionTimeoutMs = decisionTimeoutMs;
+  }
+  const handshakeTimeoutMs = parsePositiveIntegerEnv(
+    env.SPENDGUARD_HANDSHAKE_TIMEOUT_MS,
+    "SPENDGUARD_HANDSHAKE_TIMEOUT_MS"
+  );
+  if (handshakeTimeoutMs !== void 0) {
+    out.handshakeTimeoutMs = handshakeTimeoutMs;
+  }
+  const runProjectionDefault = env.SPENDGUARD_RUN_PROJECTION_DEFAULT;
+  if (runProjectionDefault !== void 0 && runProjectionDefault.length > 0) {
+    out.runProjectionDefault = runProjectionDefault;
+  }
+  const profile = env.SPENDGUARD_PROFILE;
+  if (profile !== void 0 && profile.length > 0) {
+    out.profile = profile.toLowerCase();
+  }
+  const disabled = env.SPENDGUARD_DISABLE;
+  if (disabled !== void 0) {
+    const norm = disabled.toLowerCase();
+    if (norm === "1" || norm === "true" || norm === "yes" || norm === "on") {
+      out.disabled = true;
+    }
+  }
+  return out;
+}
+function parsePositiveIntegerEnv(raw, name) {
+  if (raw === void 0 || raw.length === 0) return void 0;
+  const n = Number(raw);
+  if (!Number.isFinite(n) || !Number.isInteger(n) || n < 0) {
+    throw new EnvParseError(
+      `env var ${name}=${JSON.stringify(raw)} is not a finite non-negative integer`,
+      name
+    );
+  }
+  return n;
+}
+var EnvParseError = class extends Error {
+  name = "EnvParseError";
+  varName;
+  constructor(message, varName) {
+    super(message);
+    this.varName = varName;
+  }
+};
+
+// src/otel.ts
+var SPENDGUARD_OTEL_ATTR = {
+  TENANT_ID: "spendguard.tenant_id",
+  DECISION_ID: "spendguard.decision_id",
+  TRIGGER: "spendguard.trigger",
+  SDK_VERSION: "spendguard.sdk.version",
+  RESERVATION_ID: "spendguard.reservation_id",
+  SCOPE_ID: "spendguard.scope_id"
+};
+var SPAN_STATUS_ERROR = 2;
+async function withOtelSpan(tracer, rpcName, attributes, fn, onSpan) {
+  if (tracer === void 0 && onSpan === void 0) return await fn();
+  const spanName = `spendguard.${rpcName}`;
+  const filtered = {};
+  for (const [k, v] of Object.entries(attributes)) {
+    if (v !== void 0) filtered[k] = v;
+  }
+  if (tracer === void 0) {
+    const startTimeMs2 = Date.now();
+    let error;
+    try {
+      return await fn();
+    } catch (err) {
+      error = err instanceof Error ? err : new Error(String(err));
+      throw err;
+    } finally {
+      emitSpanRecord(onSpan, spanName, startTimeMs2, filtered, error);
+    }
+  }
+  const startTimeMs = Date.now();
+  let observerError;
+  const span = tracer.startSpan(spanName, { attributes: filtered });
+  try {
+    const result = await fn();
+    return result;
+  } catch (err) {
+    if (err instanceof Error) {
+      observerError = err;
+      span.recordException(err);
+      span.setStatus({ code: SPAN_STATUS_ERROR, message: err.message });
+    } else {
+      const message = typeof err === "string" ? err : String(err);
+      observerError = new Error(message);
+      span.recordException({ name: "SpendGuardError", message });
+      span.setStatus({ code: SPAN_STATUS_ERROR, message });
+    }
+    throw err;
+  } finally {
+    span.end();
+    emitSpanRecord(onSpan, spanName, startTimeMs, filtered, observerError);
+  }
+}
+function emitSpanRecord(onSpan, name, startTimeMs, filtered, error) {
+  if (onSpan === void 0) return;
+  const attributes = {};
+  for (const [k, v] of Object.entries(filtered)) {
+    if (typeof v === "string" || typeof v === "number" || typeof v === "boolean") {
+      attributes[k] = v;
+    }
+  }
+  const record = {
+    name,
+    startTimeMs,
+    durationMs: Date.now() - startTimeMs,
+    attributes,
+    ...error !== void 0 ? { error } : {}
+  };
+  try {
+    onSpan(record);
+  } catch {
+  }
+}
+var ASCII_WHITESPACE = /* @__PURE__ */ new Set([" ", "	", "\n", "\f", "\r"]);
+var UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+function canonicalizeTenant(tenantId) {
+  if (UUID_RE.test(tenantId)) return tenantId.toLowerCase();
+  return tenantId;
+}
+function stripAscii(s) {
+  let i = 0;
+  while (i < s.length && ASCII_WHITESPACE.has(s.charAt(i))) i++;
+  let j = s.length;
+  while (j > i && ASCII_WHITESPACE.has(s.charAt(j - 1))) j--;
+  return s.slice(i, j);
+}
+function computePromptHash(promptText, tenantId) {
+  const key = canonicalizeTenant(tenantId);
+  const trimmed = stripAscii(promptText);
+  return createHmac("sha256", key).update(trimmed, "utf8").digest("hex");
+}
+
+// src/retry.ts
+var TRANSIENT_STATUS_CODES = /* @__PURE__ */ new Set([
+  "UNAVAILABLE",
+  "DEADLINE_EXCEEDED",
+  "CANCELLED"
+]);
+function classifyRpcError(err) {
+  if (err instanceof SidecarUnavailable) return "transient";
+  if (err !== null && typeof err === "object" && "code" in err) {
+    const code = err.code;
+    if (typeof code === "string" && TRANSIENT_STATUS_CODES.has(code)) {
+      return "transient";
+    }
+  }
+  return "permanent";
+}
+async function runWithRetry(fn, opts = {}) {
+  const idempotencyKey = opts.idempotencyKey;
+  const maxAttempts = clampMaxAttempts(opts.maxAttempts ?? 2);
+  const baseBackoffMs = opts.baseBackoffMs ?? 25;
+  const jitterMs = opts.jitterMs ?? 25;
+  const sleep = opts.sleep ?? defaultSleep;
+  let lastErr;
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      const classification = classifyRpcError(err);
+      if (classification === "permanent") {
+        throw err;
+      }
+      if (idempotencyKey === void 0 || idempotencyKey.length === 0) {
+        if (err instanceof SidecarUnavailable) {
+          throw err;
+        }
+        throw new SidecarUnavailable(
+          `transient RPC failure with no idempotency key; refusing to retry: ${errorMessage(err)}`,
+          { cause: err }
+        );
+      }
+      lastErr = err;
+      if (attempt < maxAttempts) {
+        const delay = baseBackoffMs + Math.floor(Math.random() * (jitterMs + 1));
+        await sleep(delay);
+        continue;
+      }
+      throw err;
+    }
+  }
+  throw lastErr ?? new SpendGuardError("runWithRetry: unreachable");
+}
+function clampMaxAttempts(value) {
+  if (!Number.isFinite(value) || !Number.isInteger(value)) return 2;
+  if (value < 1) return 1;
+  if (value > 5) return 5;
+  return value;
+}
+function defaultSleep(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+function errorMessage(err) {
+  if (err instanceof Error) return err.message;
+  if (typeof err === "string") return err;
+  return String(err);
+}
+var storage = new AsyncLocalStorage();
+function currentRunPlan() {
+  return storage.getStore() ?? null;
+}
+
+// src/session.ts
+function buildReserveSessionRequest(req) {
+  assertPositiveDecimal(req.estimatedAmountAtomic, "estimatedAmountAtomic");
+  assertPositiveInteger(req.ttlSeconds, "ttlSeconds");
+  return {
+    tenantId: req.tenantId,
+    budgetId: req.budgetId,
+    windowInstanceId: req.windowInstanceId,
+    unit: mapUnitRef(req.unit),
+    pricing: {
+      pricingVersion: req.pricing.pricingVersion,
+      priceSnapshotHash: req.pricing.pricingHash,
+      fxRateVersion: req.pricing.fxRateVersion ?? "",
+      unitConversionVersion: req.pricing.unitConversionVersion ?? ""
+    },
+    sessionId: req.sessionId,
+    route: req.route,
+    estimatedAmountAtomic: req.estimatedAmountAtomic,
+    ttlSeconds: req.ttlSeconds,
+    idempotencyKey: req.idempotencyKey
+  };
+}
+function buildCommitSessionDeltaRequest(req) {
+  assertPositiveDecimal(req.amountAtomicDelta, "amountAtomicDelta");
+  return {
+    sessionReservationId: req.sessionReservationId,
+    streamingCommitId: req.streamingCommitId,
+    amountAtomicDelta: req.amountAtomicDelta,
+    outcome: commitOutcomeEnumOf(req.outcome),
+    eventTime: toTimestamp(req.eventTime),
+    idempotencyKey: req.idempotencyKey
+  };
+}
+function buildReleaseSessionRequest(req) {
+  return {
+    sessionReservationId: req.sessionReservationId,
+    reasonCode: req.reasonCode,
+    eventTime: toTimestamp(req.eventTime),
+    idempotencyKey: req.idempotencyKey
+  };
+}
+function mapUnitRef(unit) {
+  return {
+    unitId: unit.unitId ?? "",
+    kind: 0,
+    currency: "",
+    unitName: unit.unit,
+    tokenKind: "",
+    modelFamily: "",
+    creditProgram: ""
+  };
+}
+function commitOutcomeEnumOf(outcome) {
+  switch (outcome) {
+    case "SUCCESS":
+      return 1 /* SUCCESS */;
+    case "PROVIDER_ERROR":
+      return 2 /* PROVIDER_ERROR */;
+    case "CLIENT_TIMEOUT":
+      return 3 /* CLIENT_TIMEOUT */;
+    case "RUN_ABORTED":
+      return 4 /* RUN_ABORTED */;
+  }
+}
+function assertPositiveDecimal(value, field) {
+  if (!/^[0-9]+$/.test(value)) {
+    throw new RangeError(`${field} must be a positive decimal string`);
+  }
+  if (BigInt(value) <= 0n) {
+    throw new RangeError(`${field} must be greater than zero`);
+  }
+}
+function assertPositiveInteger(value, field) {
+  if (!Number.isInteger(value) || value <= 0) {
+    throw new RangeError(`${field} must be a positive integer`);
+  }
+}
+function toTimestamp(value) {
+  if (value instanceof Date) return epochMsToTimestamp(value.getTime());
+  if (typeof value === "number") return epochMsToTimestamp(value);
+  return value;
+}
+function epochMsToTimestamp(epochMs) {
+  if (!Number.isFinite(epochMs)) {
+    throw new RangeError("eventTime must be finite");
+  }
+  const seconds = Math.floor(epochMs / 1e3);
+  const nanos = (epochMs - seconds * 1e3) * 1e6;
+  return { seconds: seconds.toString(), nanos };
+}
+function timestampToDate(value) {
+  if (value === void 0) return null;
+  const seconds = typeof value.seconds === "bigint" ? Number(value.seconds) : Number.parseInt(value.seconds, 10);
+  if (!Number.isFinite(seconds)) return null;
+  return new Date(seconds * 1e3 + Math.floor(value.nanos / 1e6));
+}
+
+// src/version.ts
+var VERSION = "0.5.0";
+
+// src/client.ts
+var SLICE_7_NOT_WIRED = "not yet wired \u2014 SLICE 7 (see docs/internal/slices/COV_S05_05_d05_release_query.md anti-scope)";
+var QUERY_BUDGET_NOT_YET_WIRED = "query_budget not yet wired in sidecar; tracked at https://github.com/m24927605/agentic-spendguard/issues/TBD-queryBudget";
+function resolveDisabled(explicitDisabled, envSnapshot) {
+  if (explicitDisabled === true) {
+    emitDisabledWarning(
+      "SpendGuard ENFORCEMENT DISABLED via the explicit `disabled: true` option \u2014 all decisions return CONTINUE with no reservation and no audit record. This is for tests only and must never be set in production."
+    );
+    return true;
+  }
+  if (envSnapshot.disabled === true) {
+    if (envSnapshot.profile === "demo") {
+      emitDisabledWarning(
+        "SpendGuard ENFORCEMENT DISABLED via SPENDGUARD_DISABLE under SPENDGUARD_PROFILE=demo \u2014 all decisions return CONTINUE with no reservation and no audit record. Never set this in production."
+      );
+      return true;
+    }
+    emitDisabledWarning(
+      `SPENDGUARD_DISABLE is set but SPENDGUARD_PROFILE is not 'demo' (got ${JSON.stringify(envSnapshot.profile ?? "")}); IGNORING the disable request and keeping enforcement ON. To intentionally disable enforcement (tests/demos only) set SPENDGUARD_PROFILE=demo or pass \`disabled: true\` explicitly.`
+    );
+    return false;
+  }
+  return false;
+}
+function emitDisabledWarning(message) {
+  const proc = globalThis.process;
+  if (proc?.emitWarning !== void 0) {
+    proc.emitWarning(message, "SpendGuardEnforcementWarning");
+  }
+}
+var SpendGuardClient = class _SpendGuardClient {
+  /** Frozen, merged + validated configuration. */
+  cfg;
+  /** Active gRPC transport, or `null` before `connect()` / after `close()`. */
+  transport = null;
+  /** Active SidecarAdapter gRPC client; mirrors `transport` lifetime. */
+  adapterClient = null;
+  /** Cached handshake outcome; first `handshake()` populates, subsequent reads reuse. */
+  handshakeResult = null;
+  /**
+   * Coalesces concurrent `handshake()` callers into a single in-flight RPC.
+   * Mirrors Python `self._handshake_lock` in `client.py`. Stays non-null only
+   * while a handshake RPC is pending; cleared after success or failure so a
+   * post-failure retry can re-enter.
+   */
+  handshakeInFlight = null;
+  /**
+   * Construct a client. Per design.md §5.2: explicit options win over env
+   * fallback; required fields without either throw `SpendGuardConfigError`
+   * immediately.
+   */
+  constructor(rawOpts = {}) {
+    let envSnapshot;
+    try {
+      envSnapshot = resolveEnvConfig();
+    } catch (err) {
+      if (err instanceof EnvParseError) {
+        throw new SpendGuardConfigError(err.message);
+      }
+      throw err;
+    }
+    const socketPath = rawOpts.socketPath ?? envSnapshot.socketPath ?? "";
+    const tenantId = rawOpts.tenantId ?? envSnapshot.tenantId ?? "";
+    const disabled = resolveDisabled(rawOpts.disabled, envSnapshot);
+    const cfg = {
+      socketPath,
+      tenantId,
+      runtimeKind: rawOpts.runtimeKind ?? "",
+      runtimeVersion: rawOpts.runtimeVersion ?? "",
+      sdkVersion: rawOpts.sdkVersion ?? VERSION,
+      protocolVersion: rawOpts.protocolVersion ?? DEFAULT_PROTOCOL_VERSION,
+      capabilityLevel: rawOpts.capabilityLevel ?? DEFAULT_CAPABILITY_LEVEL,
+      workloadInstanceId: rawOpts.workloadInstanceId ?? envSnapshot.workloadInstanceId ?? "",
+      decisionTimeoutMs: rawOpts.decisionTimeoutMs ?? envSnapshot.decisionTimeoutMs ?? DEFAULT_DECISION_TIMEOUT_MS,
+      handshakeTimeoutMs: rawOpts.handshakeTimeoutMs ?? envSnapshot.handshakeTimeoutMs ?? DEFAULT_HANDSHAKE_TIMEOUT_MS,
+      publishTimeoutMs: rawOpts.publishTimeoutMs ?? DEFAULT_PUBLISH_TIMEOUT_MS,
+      traceTimeoutMs: rawOpts.traceTimeoutMs ?? DEFAULT_TRACE_TIMEOUT_MS,
+      runtime: rawOpts.runtime ?? "uds-grpc",
+      disabled,
+      runProjectionDefault: rawOpts.runProjectionDefault ?? envSnapshot.runProjectionDefault ?? ""
+    };
+    if (rawOpts.onSpan !== void 0) {
+      cfg.onSpan = rawOpts.onSpan;
+    }
+    if (rawOpts.otelTracer !== void 0) {
+      cfg.otelTracer = rawOpts.otelTracer;
+    }
+    if (rawOpts.idempotencyCache !== void 0) {
+      cfg.idempotencyCache = rawOpts.idempotencyCache;
+    }
+    validateConfig(cfg);
+    this.cfg = Object.freeze(cfg);
+  }
+  /**
+   * Wrap an RPC body in the configured observability hook(s). Threads BOTH
+   * `cfg.otelTracer` and `cfg.onSpan` into `withOtelSpan` so every RPC site
+   * gets span emission uniformly — the documented `onSpan` observer (the
+   * no-OTel-dep path) is invoked once per RPC, fixing the prior drift where
+   * `onSpan` was stored but never called. The two are mutually exclusive at
+   * config-validation time, so at most one fires.
+   */
+  withSpan(rpcName, attributes, fn) {
+    return withOtelSpan(this.cfg.otelTracer, rpcName, attributes, fn, this.cfg.onSpan);
+  }
+  /**
+   * Convenience factory that reads required config from env vars and falls
+   * back to `/var/run/spendguard/adapter.sock` when `SPENDGUARD_SOCKET_PATH`
+   * is unset.
+   *
+   * Env vars consumed:
+   *   - `SPENDGUARD_SOCKET_PATH` (slice-doc alias) / `SPENDGUARD_SIDECAR_UDS`
+   *     (design §5.1) — UDS path; defaults to `/var/run/spendguard/adapter.sock`.
+   *   - `SPENDGUARD_TENANT_ID` — **required**; throws `SpendGuardConfigError`
+   *     when unset.
+   *   - `SPENDGUARD_RUN_PROJECTION_DEFAULT` — optional default
+   *     `run_projection` policy name; SLICE 4 wires consumption.
+   *   - `SPENDGUARD_WORKLOAD_INSTANCE_ID` / `SPENDGUARD_DECISION_TIMEOUT_MS`
+   *     / `SPENDGUARD_HANDSHAKE_TIMEOUT_MS` / `SPENDGUARD_DISABLE` — optional
+   *     per design §5.1.
+   *
+   * Extra options provided as the `overrides` argument win over env per
+   * design.md §5.2.
+   *
+   * @throws SpendGuardConfigError when `SPENDGUARD_TENANT_ID` is missing.
+   */
+  static fromEnv(overrides = {}) {
+    let envSnapshot;
+    try {
+      envSnapshot = resolveEnvConfig();
+    } catch (err) {
+      if (err instanceof EnvParseError) {
+        throw new SpendGuardConfigError(err.message);
+      }
+      throw err;
+    }
+    const resolvedTenant = overrides.tenantId ?? envSnapshot.tenantId;
+    const merged = {
+      socketPath: overrides.socketPath ?? envSnapshot.socketPath ?? DEFAULT_SOCKET_PATH,
+      ...resolvedTenant !== void 0 ? { tenantId: resolvedTenant } : {},
+      ...envSnapshot.workloadInstanceId !== void 0 ? { workloadInstanceId: envSnapshot.workloadInstanceId } : {},
+      ...envSnapshot.runProjectionDefault !== void 0 ? { runProjectionDefault: envSnapshot.runProjectionDefault } : {},
+      ...envSnapshot.decisionTimeoutMs !== void 0 ? { decisionTimeoutMs: envSnapshot.decisionTimeoutMs } : {},
+      ...envSnapshot.handshakeTimeoutMs !== void 0 ? { handshakeTimeoutMs: envSnapshot.handshakeTimeoutMs } : {},
+      // NOTE: we deliberately do NOT promote `envSnapshot.disabled` into an
+      // explicit `disabled: true` option here. Doing so would bypass the
+      // fail-closed profile gate in `resolveDisabled` (an explicit option is
+      // honored unconditionally). The constructor re-reads the env itself and
+      // applies the `SPENDGUARD_PROFILE=demo` gate to the env-var disable
+      // path. An explicit `overrides.disabled` (deliberate code-level opt-in)
+      // still wins via the spread below.
+      ...overrides
+    };
+    return new _SpendGuardClient(merged);
+  }
+  // ── Lifecycle ────────────────────────────────────────────────────────────
+  /**
+   * Open the UDS gRPC channel. Idempotent — a second call when already
+   * connected is a no-op.
+   *
+   * Per design.md §6.3 / Python `client.py:240-251`, the `unix:` URI scheme
+   * is used and `grpc.default_authority=localhost` is set so the tonic-based
+   * sidecar accepts the HTTP/2 `:authority` pseudo-header. Without this
+   * channel option, tonic resets every stream with `PROTOCOL_ERROR`.
+   *
+   * In disabled mode (`SPENDGUARD_DISABLE=1` or `disabled: true`), no
+   * transport is opened — the call returns immediately. Subsequent RPCs
+   * short-circuit to no-op outcomes in SLICE 4.
+   *
+   * @throws SpendGuardConnectionError when the underlying transport could
+   *   not be opened (e.g. malformed socket path).
+   */
+  async connect() {
+    if (this.cfg.disabled) return;
+    if (this.transport !== null) return;
+    const target = `unix:${this.cfg.socketPath}`;
+    try {
+      this.transport = new GrpcTransport({
+        host: target,
+        channelCredentials: this.buildChannelCredentials(),
+        clientOptions: {
+          // tonic-compat: see design §6.3 + Python `client.py:240-251`.
+          "grpc.default_authority": "localhost",
+          // v1 message ceiling per review-standards §6.3 (≥ 4 MiB).
+          "grpc.max_receive_message_length": 4 * 1024 * 1024,
+          "grpc.max_send_message_length": 4 * 1024 * 1024
+        }
+      });
+      this.adapterClient = new SidecarAdapterClient(this.transport);
+    } catch (err) {
+      this.transport = null;
+      this.adapterClient = null;
+      throw new SpendGuardConnectionError(
+        `failed to open UDS transport to ${target}: ${errorMessage2(err)}`,
+        { cause: err }
+      );
+    }
+  }
+  /**
+   * Graceful close. Idempotent — calling `close()` twice (or `close()` before
+   * `connect()`) does not throw.
+   *
+   * On success the transport is dropped; the next `connect()` allocates a new
+   * channel. In-flight RPCs may complete with a `CANCELLED` status; SLICE 8
+   * adds the grace-period drain semantics that mirror the Python SDK's
+   * `await ch.close(grace=0.5)` path.
+   */
+  async close() {
+    const t = this.transport;
+    this.transport = null;
+    this.adapterClient = null;
+    if (t === null) return;
+    try {
+      t.close();
+    } catch {
+    }
+  }
+  /**
+   * ESM 2024 `await using` hook. Equivalent to `await this.close()`.
+   *
+   * Usage:
+   *
+   *     await using client = new SpendGuardClient({ ... });
+   *     // ... use client ...
+   *     // [Symbol.asyncDispose] runs here automatically.
+   */
+  async [Symbol.asyncDispose]() {
+    await this.close();
+  }
+  // ── Read-only state ──────────────────────────────────────────────────────
+  /** The tenant id this client asserted at construction. Stable for the client's lifetime. */
+  get tenantId() {
+    return this.cfg.tenantId;
+  }
+  /**
+   * The negotiated session id. Throws `HandshakeError` until `handshake()`
+   * has completed (SLICE 4 wires the handshake; until then the getter is
+   * effectively unusable, which is intentional — adapters should call
+   * `handshake()` before reading state).
+   *
+   * @throws HandshakeError before `handshake()` completes.
+   */
+  get sessionId() {
+    if (this.handshakeResult === null) {
+      throw new HandshakeError("handshake() has not completed; sessionId is not yet known");
+    }
+    return this.handshakeResult.sessionId;
+  }
+  /** Full handshake outcome. Throws `HandshakeError` until `handshake()` completes. */
+  get handshakeOutcome() {
+    if (this.handshakeResult === null) {
+      throw new HandshakeError("handshake() has not completed");
+    }
+    return this.handshakeResult;
+  }
+  /** Whether the client is currently connected to the sidecar. */
+  get isConnected() {
+    return this.transport !== null;
+  }
+  /** Frozen view of the resolved configuration. Useful for tests + debugging. */
+  get config() {
+    return this.cfg;
+  }
+  // ── Handshake (design.md §4.5 lifecycle) ────────────────────────────────
+  /**
+   * Mandatory initial handshake. Idempotent — a second call returns the cached
+   * outcome without re-issuing the RPC (design.md §4.5). Concurrent callers
+   * are coalesced into the same in-flight RPC via `handshakeInFlight`.
+   *
+   * Disabled mode (`SPENDGUARD_DISABLE=1` / `disabled: true`) short-circuits
+   * to a synthetic `HandshakeOutcome` so unit tests can run without a real
+   * sidecar (`makeDisabledHandshake`).
+   *
+   * @throws HandshakeError on protocol-version mismatch or insufficient
+   *   capability advertisement.
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws SpendGuardError on any other gRPC failure surface.
+   */
+  async handshake(opts = {}) {
+    if (this.cfg.disabled) {
+      if (this.handshakeResult === null) {
+        this.handshakeResult = makeDisabledHandshake();
+      }
+      return this.handshakeResult;
+    }
+    if (this.handshakeResult !== null) return this.handshakeResult;
+    if (this.handshakeInFlight !== null) return this.handshakeInFlight;
+    const promise = this.doHandshake(opts).finally(() => {
+      this.handshakeInFlight = null;
+    });
+    this.handshakeInFlight = promise;
+    return promise;
+  }
+  /**
+   * Internal: issue the real Handshake RPC and map the response.
+   *
+   * Splits out from `handshake()` so the idempotency guard there stays
+   * obviously correct: `doHandshake` never reads `handshakeResult` itself;
+   * it only writes it on success.
+   */
+  async doHandshake(opts) {
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for handshake");
+    }
+    const workloadInstanceId = opts.workloadInstanceId ?? this.cfg.workloadInstanceId ?? "";
+    const req = {
+      sdkVersion: this.cfg.sdkVersion,
+      runtimeKind: this.cfg.runtimeKind,
+      runtimeVersion: this.cfg.runtimeVersion,
+      // Wire-level enum uses the same numeric value as cfg.capabilityLevel
+      // (DEFAULT_CAPABILITY_LEVEL = 0x40 = L3_POLICY_HOOK = 64).
+      capabilityLevel: this.cfg.capabilityLevel,
+      tenantIdAssertion: this.cfg.tenantId,
+      workloadInstanceId,
+      protocolVersion: this.cfg.protocolVersion
+    };
+    const resp = await this.withSpan(
+      "handshake",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        try {
+          return await adapter.handshake(req, {
+            timeout: this.cfg.handshakeTimeoutMs
+          }).response;
+        } catch (err) {
+          throw mapGrpcStatusToError(err, { rpc: "handshake" });
+        }
+      }
+    );
+    if (resp.protocolVersion !== this.cfg.protocolVersion) {
+      throw new HandshakeError(
+        `protocol version mismatch: adapter=${this.cfg.protocolVersion} sidecar=${resp.protocolVersion}`
+      );
+    }
+    const outcome = {
+      sessionId: resp.sessionId,
+      sidecarVersion: resp.sidecarVersion,
+      schemaBundleId: resp.schemaBundle?.schemaBundleId ?? "",
+      schemaBundleHash: resp.schemaBundle?.schemaBundleHash ?? new Uint8Array(),
+      contractBundleId: resp.contractBundle?.bundleId ?? "",
+      contractBundleHash: resp.contractBundle?.bundleHash ?? new Uint8Array(),
+      capabilityRequired: Number(resp.capabilityRequired ?? 0),
+      signingKeyId: resp.signingKeyId,
+      announcementSignature: resp.announcementSignature ?? new Uint8Array()
+    };
+    if (outcome.capabilityRequired > this.cfg.capabilityLevel) {
+      throw new HandshakeError(
+        `sidecar requires capability ${toHex(outcome.capabilityRequired)} but adapter advertised ${toHex(this.cfg.capabilityLevel)}; refusing`
+      );
+    }
+    this.handshakeResult = outcome;
+    return outcome;
+  }
+  // ── Core RPC surface (handshake / reserve / commitEstimated wired) ───────
+  /**
+   * Run a `*.pre` decision boundary through the sidecar. Equivalent to the
+   * Python SDK's `request_decision` (design.md §4.7).
+   *
+   * The wire shape is built in `buildDecisionRequest()` and consumes:
+   *   - the cached handshake `sessionId` (auto-handshakes on first use),
+   *   - the caller-supplied `idempotencyKey` (REQUIRED — see design §6.5),
+   *   - `runProjectionDefault` from config when the caller did not pass
+   *     one in `decisionContextJson.run_projection_policy` (closes MJ-1).
+   *
+   * The response is mapped through `mapDecisionResponse()`: CONTINUE / DEGRADE
+   * return a `DecisionOutcome`; STOP / STOP_RUN_PROJECTION / SKIP /
+   * REQUIRE_APPROVAL raise the matching typed exception so adapters can route
+   * on `instanceof DecisionDenied` (and its subclasses) per review-standards §5.
+   *
+   * @throws DecisionStopped on STOP / STOP_RUN_PROJECTION.
+   * @throws DecisionSkipped on SKIP.
+   * @throws ApprovalRequired on REQUIRE_APPROVAL — `await err.resume(client)`
+   *   surfaces the operator decision.
+   * @throws DecisionDenied on an unknown decision enum.
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws SpendGuardError on any other gRPC failure surface.
+   */
+  async reserve(req) {
+    if (this.cfg.disabled) return makeDisabledDecision(req);
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "reserve() requires handshake(); call await client.handshake() before reserve()"
+      );
+    }
+    const cache = this.cfg.idempotencyCache;
+    const bodyHash = cache !== void 0 && req.idempotencyKey.length > 0 ? computeReserveBodyHash(req) : void 0;
+    if (cache !== void 0 && req.idempotencyKey.length > 0) {
+      const cached = cache.get(req.idempotencyKey, bodyHash);
+      if (cached !== void 0) return cached;
+    }
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for reserve");
+    }
+    const grpcReq = this.buildDecisionRequest(req);
+    return await this.withSpan(
+      "reserve",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.DECISION_ID]: req.decisionId,
+        [SPENDGUARD_OTEL_ATTR.TRIGGER]: req.trigger,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        let resp;
+        try {
+          resp = await runWithRetry(
+            async () => {
+              try {
+                return await adapter.requestDecision(grpcReq, {
+                  timeout: this.cfg.decisionTimeoutMs
+                }).response;
+              } catch (err) {
+                throw mapGrpcStatusToError(err, { rpc: "reserve" });
+              }
+            },
+            { idempotencyKey: req.idempotencyKey }
+          );
+        } catch (err) {
+          if (err instanceof SpendGuardError) throw err;
+          throw mapGrpcStatusToError(err, { rpc: "reserve" });
+        }
+        if (resp.error && resp.error.code !== 0) {
+          throw new SpendGuardError(
+            `sidecar error code=${resp.error.code} message=${resp.error.message}`
+          );
+        }
+        const outcome = mapDecisionResponse(resp, this.cfg.tenantId);
+        if (cache !== void 0 && req.idempotencyKey.length > 0) {
+          cache.set(req.idempotencyKey, outcome, void 0, bodyHash);
+        }
+        return outcome;
+      }
+    );
+  }
+  /**
+   * Alias for `reserve()` — identical function reference (review-standards §1.5
+   * P0 BLOCKER). The Python SDK exposes the symbol as `request_decision`; the
+   * TS surface keeps `reserve` as the canonical name AND exposes
+   * `requestDecision` so cross-language docs work without surprise.
+   *
+   * Implemented as an instance-field initializer that reads `this.reserve`
+   * during construction. The dot-lookup on `this.reserve` (inside the field
+   * initializer, before any instance shadow exists) resolves to the prototype
+   * method `SpendGuardClient.prototype.reserve`. Assigning it to the field
+   * makes `client.requestDecision === client.reserve` Boolean-true at runtime
+   * (both resolve to the same prototype function reference).
+   *
+   * NOTE on `.bind(this)`: implementation.md §4 line 581 sketches the field
+   * as `this.reserve.bind(this)`. The literal `bind` would produce a NEW
+   * function object and break the §1.5 identity gate; the constraint cited
+   * by the slice doc (review-standards §1.5 P0 BLOCKER) wins, so we drop
+   * `.bind(this)`. Callers always invoke as `client.requestDecision(req)`
+   * (method-call form) which preserves `this` via JS dispatch semantics —
+   * the bind was over-specification for the Pythonic detached-method
+   * pattern, which the TS SDK does not advertise.
+   *
+   * NOTE: do NOT add a JSDoc `@throws` block here — TypeScript erases JSDoc
+   * from runtime fields and the identity invariant is the primary contract
+   * this declaration enforces.
+   */
+  requestDecision = this.reserve;
+  /**
+   * Commit an estimated LLM-call outcome. Equivalent to the Python SDK's
+   * `emit_llm_call_post` with `estimated_amount_atomic` (design.md §4.8).
+   *
+   * Single-event LlmCallPostPayload over the EmitTraceEvents duplex stream:
+   * the client opens a fresh stream per commit, sends one event, awaits one
+   * ack, and closes (Python parity — `emit_llm_call_post` at client.py:818).
+   * SLICE 5+ may switch to a long-lived stream for production latency, but
+   * the per-event setup cost is acceptable in v0.1.x.
+   *
+   * Ack semantics: the sidecar emits exactly one `TraceEventAck` per inbound
+   * event in this POC. Status != ACCEPTED surfaces as `SpendGuardError`
+   * (Codex round-2 P1.1 from Python parity — silent failure here would mask
+   * a commit-lifecycle bug).
+   *
+   * Mutually exclusive with the deferred provider-report path: this method
+   * always sends `estimated_amount_atomic`; the `provider_reported_amount_atomic`
+   * wire field stays empty. Adapters needing the provider-report path use the
+   * lower-level `emitLlmCallPost` (SLICE 7+).
+   *
+   * **SLICE 5 multi-event extension.** When `req.outcomeKind` is set, the
+   * client emits TWO events on the same bidi stream — the original
+   * LLM_CALL_POST event first, then a second LLM_CALL_POST-kind event whose
+   * `outcome` field reflects `outcomeKind` (SUCCESS → SUCCESS,
+   * FAILURE → PROVIDER_ERROR) and whose `providerResponseMetadata` carries a
+   * `{"error_message": ...}` envelope when `actualErrorMessage` is supplied.
+   * Both events are acked individually; if either ack is non-ACCEPTED the
+   * method raises `SpendGuardError`. See the JSDoc on
+   * `CommitEstimatedRequest.outcomeKind` for the LLM_CALL_OUTCOME proto-kind
+   * deviation note (Declared Deviation #1 in SLICE 5).
+   *
+   * When `req.outcomeKind` is ABSENT, behaviour is identical to SLICE 4 —
+   * a single event is sent, a single ack is drained.
+   *
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws SpendGuardError on rejected ack or any other gRPC failure surface.
+   */
+  async commitEstimated(req) {
+    if (this.cfg.disabled) return;
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "commitEstimated() requires handshake(); call await client.handshake() before commitEstimated()"
+      );
+    }
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for commitEstimated");
+    }
+    const events = [this.buildLlmCallPostEvent(req)];
+    if (req.outcomeKind !== void 0) {
+      events.push(this.buildLlmCallOutcomeEvent(req));
+    }
+    await this.withSpan(
+      "commitEstimated",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.DECISION_ID]: req.decisionId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        let call;
+        try {
+          call = adapter.emitTraceEvents({
+            timeout: this.cfg.traceTimeoutMs
+          });
+          for (const event of events) {
+            await call.requests.send(event);
+          }
+          await call.requests.complete();
+        } catch (err) {
+          throw mapGrpcStatusToError(err, { rpc: "commitEstimated" });
+        }
+        try {
+          let acked = 0;
+          for await (const ack of call.responses) {
+            acked += 1;
+            if (ack.status !== 1 /* ACCEPTED */) {
+              throw new SpendGuardError(buildAckRejectMessage(ack));
+            }
+          }
+          await call.status;
+          await call.trailers;
+          if (acked === 0) {
+            throw new SpendGuardError("EmitTraceEvents closed without an ack from sidecar");
+          }
+          if (acked < events.length) {
+            throw new SpendGuardError(
+              `EmitTraceEvents acked ${acked} of ${events.length} events before closing`
+            );
+          }
+        } catch (err) {
+          if (err instanceof SpendGuardError) throw err;
+          throw mapGrpcStatusToError(err, { rpc: "commitEstimated" });
+        }
+      }
+    );
+  }
+  /**
+   * Explicit release of a held reservation. Matches Agent Spend Protocol
+   * Draft-01 §4 one-to-one (the proto wire's
+   * `ReleaseReservationRequest` carries the canonical ASP fields at tags 1-3
+   * and SpendGuard extensions at tag 100+).
+   *
+   * Behaviour:
+   *   - Disabled-mode short-circuit returns a synthetic
+   *     `makeDisabledReleaseOutcome(req)` — no UDS contact.
+   *   - Pre-handshake call throws `HandshakeError` via the `sessionId` getter
+   *     gate (the request envelope requires the negotiated session id).
+   *   - Wire envelope built by `buildReleaseRequest(req, sessionId)`.
+   *   - Response mapped by `mapReleaseResponse(res, decisionIdHint)`.
+   *   - Errors mapped centrally through `mapGrpcStatusToError`, with the
+   *     `release`-specific NOT_FOUND override (reservation lookup misses
+   *     surface as a plain `SpendGuardError("reservation not found")` so
+   *     adapters can distinguish "no such reservation" from the rich
+   *     FAILED_PRECONDITION cluster).
+   *
+   * @throws HandshakeError before `handshake()` completes.
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws MutationApplyFailed on FAILED_PRECONDITION + IDEMPOTENCY_CONFLICT
+   *   or BUDGET_EXCEEDED — or an unknown FAILED_PRECONDITION reason (the
+   *   conservative default; never bare `SpendGuardError` for this cluster).
+   * @throws ApprovalBundleHotReloadedError on FAILED_PRECONDITION +
+   *   BUNDLE_HOT_RELOADED.
+   * @throws SpendGuardError on NOT_FOUND ("reservation not found") + any
+   *   other unmapped gRPC failure.
+   */
+  async release(req) {
+    if (this.cfg.disabled) return makeDisabledReleaseOutcome(req);
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "release() requires handshake(); call await client.handshake() before release()"
+      );
+    }
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for release");
+    }
+    const grpcReq = buildReleaseRequest(req, this.handshakeResult.sessionId);
+    return await this.withSpan(
+      "release",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.RESERVATION_ID]: req.reservationId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        let resp;
+        try {
+          resp = await adapter.releaseReservation(grpcReq, {
+            timeout: this.cfg.publishTimeoutMs
+          }).response;
+        } catch (err) {
+          throw mapGrpcStatusToError(err, { rpc: "release", releaseNotFoundAsPlain: true });
+        }
+        return mapReleaseResponse(resp);
+      }
+    );
+  }
+  /**
+   * Reserve a session-scoped hold for a realtime voice session (D41 SR-V3).
+   *
+   * The public request shape mirrors `buildReserveSessionRequest`. When
+   * `req.sessionId` is empty, the SDK fills it from the completed sidecar
+   * handshake so adapter code can bind the session reservation to the active
+   * UDS session without duplicating handshake plumbing.
+   *
+   * @throws HandshakeError before `handshake()` completes.
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws SpendGuardError on proto error outcome or unmapped gRPC failure.
+   */
+  async reserveSession(req) {
+    if (this.cfg.disabled) {
+      buildReserveSessionRequest(req);
+      return makeDisabledReserveSessionOutcome(req);
+    }
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "reserveSession() requires handshake(); call await client.handshake() before reserveSession()"
+      );
+    }
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for reserveSession");
+    }
+    const grpcReq = buildReserveSessionRequest({
+      ...req,
+      sessionId: req.sessionId || this.handshakeResult.sessionId
+    });
+    return await this.withSpan(
+      "reserveSession",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        try {
+          const resp = await adapter.reserveSession(grpcReq, {
+            timeout: this.cfg.decisionTimeoutMs
+          }).response;
+          return mapReserveSessionOutcome(resp);
+        } catch (err) {
+          throw mapGrpcStatusToError(err, { rpc: "reserveSession" });
+        }
+      }
+    );
+  }
+  /**
+   * Commit one positive streaming spend delta against a session reservation.
+   *
+   * @throws HandshakeError before `handshake()` completes.
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws SpendGuardError on proto error outcome or unmapped gRPC failure.
+   */
+  async commitSessionDelta(req) {
+    if (this.cfg.disabled) {
+      buildCommitSessionDeltaRequest(req);
+      return makeDisabledCommitSessionDeltaOutcome(req);
+    }
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "commitSessionDelta() requires handshake(); call await client.handshake() before commitSessionDelta()"
+      );
+    }
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for commitSessionDelta");
+    }
+    const grpcReq = buildCommitSessionDeltaRequest(req);
+    return await this.withSpan(
+      "commitSessionDelta",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        try {
+          const resp = await adapter.commitSessionDelta(grpcReq, {
+            timeout: this.cfg.traceTimeoutMs
+          }).response;
+          return mapCommitSessionDeltaOutcome(resp);
+        } catch (err) {
+          throw mapGrpcStatusToError(err, { rpc: "commitSessionDelta" });
+        }
+      }
+    );
+  }
+  /**
+   * Release the uncommitted remainder of a session reservation.
+   *
+   * @throws HandshakeError before `handshake()` completes.
+   * @throws SidecarUnavailable on UNAVAILABLE / DEADLINE_EXCEEDED / CANCELLED.
+   * @throws SpendGuardError on proto error outcome or unmapped gRPC failure.
+   */
+  async releaseSession(req) {
+    if (this.cfg.disabled) {
+      buildReleaseSessionRequest(req);
+      return makeDisabledReleaseSessionOutcome(req);
+    }
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "releaseSession() requires handshake(); call await client.handshake() before releaseSession()"
+      );
+    }
+    if (this.adapterClient === null) {
+      await this.connect();
+    }
+    const adapter = this.adapterClient;
+    if (adapter === null) {
+      throw new SidecarUnavailable("transport not established for releaseSession");
+    }
+    const grpcReq = buildReleaseSessionRequest(req);
+    return await this.withSpan(
+      "releaseSession",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        try {
+          const resp = await adapter.releaseSession(grpcReq, {
+            timeout: this.cfg.publishTimeoutMs
+          }).response;
+          return mapReleaseSessionOutcome(resp);
+        } catch (err) {
+          throw mapGrpcStatusToError(err, { rpc: "releaseSession" });
+        }
+      }
+    );
+  }
+  /**
+   * Read-only budget snapshot. Locked decision #4 of design.md §9: in v0.1.x
+   * the substrate ships the method signature but the sidecar wire is NOT yet
+   * implemented. SLICE 5 wires the §9.4 placeholder body — adapters call this
+   * method, catch the explicit `SpendGuardError`, and surface a clear "feature
+   * not yet available" upstream rather than a stray NOT_FOUND from a missing
+   * RPC route.
+   *
+   * Disabled-mode short-circuit returns a synthetic
+   * `makeDisabledQueryBudgetResult(req)` so unit tests can program against
+   * the method without a sidecar.
+   *
+   * @throws HandshakeError before `handshake()` completes.
+   * @throws SpendGuardError carrying the tracking-issue URL otherwise.
+   */
+  async queryBudget(req) {
+    if (this.cfg.disabled) return makeDisabledQueryBudgetResult(req);
+    if (this.handshakeResult === null) {
+      throw new HandshakeError(
+        "queryBudget() requires handshake(); call await client.handshake() before queryBudget()"
+      );
+    }
+    return await this.withSpan(
+      "queryBudget",
+      {
+        [SPENDGUARD_OTEL_ATTR.TENANT_ID]: this.cfg.tenantId,
+        [SPENDGUARD_OTEL_ATTR.SCOPE_ID]: req.scopeId,
+        [SPENDGUARD_OTEL_ATTR.SDK_VERSION]: this.cfg.sdkVersion
+      },
+      async () => {
+        throw new SpendGuardError(QUERY_BUDGET_NOT_YET_WIRED);
+      }
+    );
+  }
+  // ── Lower-level surface (deferred to SLICE 7+) ──────────────────────────
+  /**
+   * Confirm `publish_effect` outcome. SLICE 7 wires body.
+   * @throws SpendGuardError until SLICE 7 wires the body.
+   */
+  async confirmPublishOutcome(req) {
+    throw new SpendGuardError(`confirmPublishOutcome() ${SLICE_7_NOT_WIRED}`);
+  }
+  /**
+   * Resume after a human approver acted on a `REQUIRE_APPROVAL` decision.
+   * SLICE 7 wires the body; references this method from `ApprovalRequired.resume`.
+   * @throws SpendGuardError until SLICE 7 wires the body.
+   */
+  async resumeAfterApproval(req) {
+    throw new SpendGuardError(`resumeAfterApproval() ${SLICE_7_NOT_WIRED}`);
+  }
+  /**
+   * Safe-ack the `APPLY_FAILED` publish outcome — swallows transport errors
+   * so the caller's original exception is never shadowed. SLICE 7 wires body.
+   * @throws SpendGuardError until SLICE 7 wires the body.
+   */
+  async safeConfirmApplyFailed(req) {
+    throw new SpendGuardError(`safeConfirmApplyFailed() ${SLICE_7_NOT_WIRED}`);
+  }
+  /**
+   * Lower-level entry point that `commitEstimated()` wraps. Provided so
+   * adapters that need the raw trace-event surface have access. SLICE 7
+   * wires body (the provider-report path).
+   * @throws SpendGuardError until SLICE 7 wires the body.
+   */
+  async emitLlmCallPost(req) {
+    throw new SpendGuardError(`emitLlmCallPost() ${SLICE_7_NOT_WIRED}`);
+  }
+  // ── Internals ────────────────────────────────────────────────────────────
+  /**
+   * Build the gRPC channel credentials. Always insecure over UDS — the kernel
+   * `SO_PEERCRED` check on the sidecar side is the trust anchor (Sidecar
+   * Architecture §5). TLS over a Unix socket adds overhead with no security
+   * benefit when the connection is implicitly local.
+   *
+   * Carved into its own method so a future slice can override under a
+   * `runtime` flag once HTTP-gateway transport is added — `runtime: "fetch"`
+   * would override to use TLS credentials. v0.1.x only supports `"uds-grpc"`.
+   */
+  buildChannelCredentials() {
+    return credentials.createInsecure();
+  }
+  /**
+   * Translate the public `ReserveRequest` (camelCase, TS-idiomatic) into the
+   * snake_case-on-wire `DecisionRequest` proto. Per implementation.md §4:
+   *
+   *   1. SessionId from the cached handshake (caller already gated above).
+   *   2. Trigger enum mapping via `triggerEnumOf()`.
+   *   3. W3C `traceparent` → `TraceContext` via `buildTraceContext()` (matches
+   *      Python `_build_trace_context`).
+   *   4. `runtimeMetadata` carries the prompt hash (when caller supplied
+   *      `promptText`) and any `decisionContextJson` keys. The
+   *      `run_projection_policy` slot is filled from the caller's
+   *      `decisionContextJson.run_projection_policy` if present, otherwise
+   *      from `cfg.runProjectionDefault` when non-empty. **This is the
+   *      SLICE 4 consumption of MJ-1** — SLICE 3 stored the field on the
+   *      config; this method wires it onto the wire.
+   *   5. `plannedStepsHint` is `plan.plannedCalls + plan.plannedTools` when
+   *      a `withRunPlan` scope is active (SLICE 7 R2), otherwise the proto3
+   *      default `0`.
+   *
+   * `runtime_metadata` is encoded as a hand-built `google.protobuf.Struct`
+   * payload because the SDK does not yet ship `computePromptHash` (SLICE 6).
+   * Until then this method ALWAYS sends an empty Struct body when no caller
+   * decoration is requested — matching Python `runtime_metadata = None` which
+   * is wire-equivalent to "field absent" under proto3 message optionality.
+   */
+  buildDecisionRequest(req) {
+    if (this.handshakeResult === null) {
+      throw new HandshakeError("internal: buildDecisionRequest without handshake");
+    }
+    const plan = currentRunPlan();
+    const plannedStepsHint = plan !== null ? plan.plannedCalls + plan.plannedTools : 0;
+    const trigger = triggerEnumOf(req.trigger);
+    const trace = buildTraceContext(req.traceparent ?? "", req.tracestate ?? "");
+    const ids = {
+      runId: req.runId,
+      stepId: req.stepId,
+      llmCallId: req.llmCallId,
+      toolCallId: req.toolCallId ?? "",
+      decisionId: req.decisionId,
+      snapshotId: ""
+    };
+    const projectedClaims = req.projectedClaims.map((claim) => ({
+      budgetId: claim.scopeId,
+      unit: mapUnitRef2(claim.unit),
+      amountAtomic: claim.amountAtomic,
+      // direction: DEBIT (1) — SDK callers only project debits; credits are
+      // generated server-side as compensating ledger entries (Stage 2 §4.6).
+      direction: 1,
+      // HARDEN_D05_WI — thread caller-supplied windowInstanceId onto the
+      // wire claim. Omitted keeps the pre-HARDEN wire shape ("").
+      windowInstanceId: claim.windowInstanceId ?? ""
+    }));
+    const runtimeMetadata = this.buildRuntimeMetadataStruct(req);
+    const inputs = {
+      projectedClaims,
+      projectedP50Atomic: req.projectedP50Atomic ?? "",
+      projectedP90Atomic: req.projectedP90Atomic ?? "",
+      projectedP95Atomic: req.projectedP95Atomic ?? "",
+      projectedP99Atomic: req.projectedP99Atomic ?? "",
+      ...req.projectedUnit !== void 0 ? { projectedUnit: mapUnitRef2(req.projectedUnit) } : {},
+      ...runtimeMetadata !== void 0 ? { runtimeMetadata } : {},
+      ...req.claimEstimate !== void 0 ? { claimEstimate: mapClaimEstimate(req.claimEstimate) } : {}
+    };
+    const idempotency = {
+      key: req.idempotencyKey,
+      // The sidecar/ledger own the canonical request hash; SDK leaves it empty
+      // (matches Python parity at client.py:494).
+      requestHash: new Uint8Array()
+    };
+    return {
+      sessionId: this.handshakeResult.sessionId,
+      trigger,
+      trace,
+      ids,
+      route: req.route,
+      inputs,
+      parentRunId: req.parentRunId ?? "",
+      budgetGrantJti: req.budgetGrantJti ?? "",
+      idempotency,
+      // SLICE 7 R2: Signal 3 — `plannedCalls + plannedTools` when an active
+      // `withRunPlan` scope is in flight, otherwise proto3 default `0`. The
+      // sidecar enforces the upper bound `[0, MAX_PLANNED_STEPS]` server-side
+      // (`services/run_cost_projector/src/server.rs`) so the SDK doesn't gate
+      // on a value the server may bump independently.
+      plannedStepsHint,
+      // D13 additive proto fields. These defaults preserve the pre-D13 BYOK
+      // request-scoped path until an adapter explicitly opts into meter-only.
+      reservationSource: 0 /* UNSPECIFIED */,
+      meterOnlyEstimate: false
+    };
+  }
+  /**
+   * Build the `google.protobuf.Struct` payload that lands in
+   * `DecisionRequest.inputs.runtime_metadata`. Returns `undefined` when there
+   * is nothing to send (proto3 message optionality — wire equivalent to
+   * "field absent").
+   *
+   * Two slots are populated here:
+   *   - `decision_context_json.*` keys from the caller (verbatim).
+   *   - `run_projection_policy` from the caller (if present in
+   *     `decisionContextJson`) OR `cfg.runProjectionDefault` (when set and
+   *     non-empty). The caller's value wins; the default only fills in when
+   *     the caller did not provide one — matches design.md §4.2 R2 semantics.
+   *
+   * SLICE 6 R1 closure of SLICE 4 M-3: when `req.promptText` is set,
+   * `computePromptHash(req.promptText, this.cfg.tenantId)` populates
+   * `runtime_metadata.prompt_hash` as a stringValue. Mirrors Python parity
+   * at `sdk/python/.../client.py` (the `prompt_hash` field is the rules
+   * dedup key per Cost Advisor P0.5 §5.1). The caller may pre-set
+   * `decisionContextJson.prompt_hash` to override (e.g. when the prompt is
+   * tokenised upstream and the hash is computed there); the caller-supplied
+   * value wins.
+   */
+  buildRuntimeMetadataStruct(req) {
+    const fields = {};
+    let hasField = false;
+    if (req.decisionContextJson !== void 0) {
+      for (const [k, v] of Object.entries(req.decisionContextJson)) {
+        fields[k] = jsonValueToStructValue(v);
+        hasField = true;
+      }
+    }
+    if (this.cfg.runProjectionDefault !== "" && fields.run_projection_policy === void 0) {
+      fields.run_projection_policy = jsonValueToStructValue(this.cfg.runProjectionDefault);
+      hasField = true;
+    }
+    if (req.promptText !== void 0 && fields.prompt_hash === void 0) {
+      const hash = computePromptHash(req.promptText, this.cfg.tenantId);
+      fields.prompt_hash = jsonValueToStructValue(hash);
+      hasField = true;
+    }
+    return hasField ? { fields } : void 0;
+  }
+  /**
+   * Build the single LLM_CALL_POST trace event for `commitEstimated()`.
+   * Mirrors Python `emit_llm_call_post` at client.py:818 with the difference
+   * that `provider_reported_amount_atomic` is always empty here (the
+   * provider-report path lives in SLICE 5+'s `emitLlmCallPost`).
+   */
+  buildLlmCallPostEvent(req) {
+    if (this.handshakeResult === null) {
+      throw new HandshakeError("internal: buildLlmCallPostEvent without handshake");
+    }
+    const ts = wallClockToTimestamp(Date.now());
+    return {
+      sessionId: this.handshakeResult.sessionId,
+      trace: buildTraceContext(req.traceparent ?? "", req.tracestate ?? ""),
+      ids: {
+        runId: req.runId,
+        stepId: req.stepId,
+        llmCallId: req.llmCallId,
+        toolCallId: "",
+        decisionId: req.decisionId,
+        snapshotId: ""
+      },
+      kind: 4 /* LLM_CALL_POST */,
+      eventTime: ts,
+      payload: {
+        oneofKind: "llmCallPost",
+        llmCallPost: {
+          reservationId: req.reservationId,
+          providerReportedAmountAtomic: "",
+          unit: mapUnitRef2(req.unit),
+          pricing: {
+            pricingVersion: req.pricing.pricingVersion,
+            priceSnapshotHash: req.pricing.pricingHash,
+            // HARDEN_D05_WI — thread the full freeze tuple (omitted → "").
+            fxRateVersion: req.pricing.fxRateVersion ?? "",
+            unitConversionVersion: req.pricing.unitConversionVersion ?? ""
+          },
+          providerEventId: req.providerEventId,
+          outcome: llmOutcomeEnumOf(req.outcome),
+          estimatedAmountAtomic: req.estimatedAmountAtomic,
+          ...req.actualInputTokens !== void 0 ? { actualInputTokens: String(req.actualInputTokens) } : {},
+          ...req.actualOutputTokens !== void 0 ? { actualOutputTokens: String(req.actualOutputTokens) } : {},
+          ...req.deltaBRatio !== void 0 ? { deltaBRatio: req.deltaBRatio } : {},
+          ...req.deltaCRatio !== void 0 ? { deltaCRatio: req.deltaCRatio } : {}
+        }
+      },
+      providerResponseMetadata: req.providerResponseMetadata ?? ""
+    };
+  }
+  /**
+   * Build the SLICE 5 multi-event "outcome" companion event for
+   * `commitEstimated()` when `req.outcomeKind` is set.
+   *
+   * The event reuses `TraceEvent_EventKind.LLM_CALL_POST` (per Declared
+   * Deviation #1 — `LLM_CALL_OUTCOME` does not exist as a proto enum value
+   * in `sidecar_adapter/v1/adapter.proto` yet).
+   *
+   * TODO(GH-issue-TBD): proto bump for `LLM_CALL_OUTCOME` +
+   * sidecar `x-spendguard-reason-code` trailer extension. Both deferred to
+   * the cross-component slice that touches `proto/` and
+   * `services/sidecar/`. Track at
+   * https://github.com/m24927605/agentic-spendguard/issues/TBD-proto-bump-llm-call-outcome
+   * (R2 follow-up; not in scope for D05 SLICE 5).
+   *
+   * The `outcome` field on the inner `LlmCallPostPayload` carries the
+   * semantic:
+   *
+   *   - `outcomeKind === "SUCCESS"` → `LlmCallPostPayload_Outcome.SUCCESS`
+   *   - `outcomeKind === "FAILURE"` → `LlmCallPostPayload_Outcome.PROVIDER_ERROR`
+   *
+   * Actuals (`actualInputTokens` / `actualOutputTokens`) prefer the SLICE 5
+   * `*Wire` fields when supplied (int64-as-string form), falling back to
+   * the SLICE 4 numeric `actualInputTokens` / `actualOutputTokens` shape so
+   * adapters do not need to double-specify. `actualErrorMessage` is threaded
+   * onto `TraceEvent.providerResponseMetadata` as a JSON envelope
+   * `{"error_message": "..."}` only when `outcomeKind === "FAILURE"`.
+   *
+   * `estimatedAmountAtomic` is intentionally set to an empty string on the
+   * outcome event — the first event already booked the commit; the outcome
+   * event only carries observation, not commit semantics. The sidecar will
+   * surface a rejection ack if it requires the field (`mock-sidecar`'s tests
+   * lock this in).
+   *
+   * @private
+   */
+  buildLlmCallOutcomeEvent(req) {
+    if (this.handshakeResult === null) {
+      throw new HandshakeError("internal: buildLlmCallOutcomeEvent without handshake");
+    }
+    if (req.outcomeKind === void 0) {
+      throw new SpendGuardError(
+        "internal: buildLlmCallOutcomeEvent called without outcomeKind set"
+      );
+    }
+    const ts = wallClockToTimestamp(Date.now());
+    const inputWire = req.actualInputTokensWire ?? (req.actualInputTokens !== void 0 ? String(req.actualInputTokens) : void 0);
+    const outputWire = req.actualOutputTokensWire ?? (req.actualOutputTokens !== void 0 ? String(req.actualOutputTokens) : void 0);
+    const outcomeEnum = req.outcomeKind === "SUCCESS" ? 1 /* SUCCESS */ : 2 /* PROVIDER_ERROR */;
+    const errorMessageEnvelope = req.outcomeKind === "FAILURE" && req.actualErrorMessage !== void 0 ? JSON.stringify({ error_message: req.actualErrorMessage }) : req.providerResponseMetadata ?? "";
+    return {
+      sessionId: this.handshakeResult.sessionId,
+      trace: buildTraceContext(req.traceparent ?? "", req.tracestate ?? ""),
+      ids: {
+        runId: req.runId,
+        stepId: req.stepId,
+        llmCallId: req.llmCallId,
+        toolCallId: "",
+        decisionId: req.decisionId,
+        snapshotId: ""
+      },
+      kind: 4 /* LLM_CALL_POST */,
+      eventTime: ts,
+      payload: {
+        oneofKind: "llmCallPost",
+        llmCallPost: {
+          reservationId: req.reservationId,
+          providerReportedAmountAtomic: "",
+          unit: mapUnitRef2(req.unit),
+          pricing: {
+            pricingVersion: req.pricing.pricingVersion,
+            priceSnapshotHash: req.pricing.pricingHash,
+            // HARDEN_D05_WI — thread the full freeze tuple (omitted → "").
+            fxRateVersion: req.pricing.fxRateVersion ?? "",
+            unitConversionVersion: req.pricing.unitConversionVersion ?? ""
+          },
+          providerEventId: req.providerEventId,
+          outcome: outcomeEnum,
+          // The outcome companion event carries observation; the booking
+          // amount stayed on the first event. Empty string is wire-equivalent
+          // to "absent" for the proto3 string field.
+          estimatedAmountAtomic: "",
+          ...inputWire !== void 0 ? { actualInputTokens: inputWire } : {},
+          ...outputWire !== void 0 ? { actualOutputTokens: outputWire } : {},
+          ...req.deltaBRatio !== void 0 ? { deltaBRatio: req.deltaBRatio } : {},
+          ...req.deltaCRatio !== void 0 ? { deltaCRatio: req.deltaCRatio } : {}
+        }
+      },
+      providerResponseMetadata: errorMessageEnvelope
+    };
+  }
+};
+function errorMessage2(err) {
+  if (err instanceof Error) return err.message;
+  if (typeof err === "string") return err;
+  try {
+    return JSON.stringify(err);
+  } catch {
+    return String(err);
+  }
+}
+function toHex(n) {
+  return `0x${n.toString(16)}`;
+}
+function triggerEnumOf(name) {
+  switch (name) {
+    case "RUN_PRE":
+      return 1 /* RUN_PRE */;
+    case "AGENT_STEP_PRE":
+      return 2 /* AGENT_STEP_PRE */;
+    case "LLM_CALL_PRE":
+      return 3 /* LLM_CALL_PRE */;
+    case "TOOL_CALL_PRE":
+      return 4 /* TOOL_CALL_PRE */;
+    default: {
+      throw new SpendGuardError(`unknown trigger: ${String(name)}`);
+    }
+  }
+}
+function llmOutcomeEnumOf(name) {
+  switch (name) {
+    case "SUCCESS":
+      return 1 /* SUCCESS */;
+    case "PROVIDER_ERROR":
+      return 2 /* PROVIDER_ERROR */;
+    case "CLIENT_TIMEOUT":
+      return 3 /* CLIENT_TIMEOUT */;
+    case "RUN_ABORTED":
+      return 4 /* RUN_ABORTED */;
+    default: {
+      throw new SpendGuardError(`unknown llm outcome: ${String(name)}`);
+    }
+  }
+}
+function decisionEnumName(value) {
+  switch (value) {
+    case 1 /* CONTINUE */:
+      return "CONTINUE";
+    case 2 /* DEGRADE */:
+      return "DEGRADE";
+    case 3 /* SKIP */:
+      return "SKIP";
+    case 4 /* STOP */:
+      return "STOP";
+    case 5 /* REQUIRE_APPROVAL */:
+      return "REQUIRE_APPROVAL";
+    case 6 /* STOP_RUN_PROJECTION */:
+      return "STOP_RUN_PROJECTION";
+    default:
+      return "UNKNOWN";
+  }
+}
+function buildTraceContext(traceparent, tracestate) {
+  if (traceparent === "") {
+    return {
+      traceId: "",
+      spanId: "",
+      parentSpanId: "",
+      traceState: tracestate
+    };
+  }
+  const parts = traceparent.split("-");
+  if (parts.length !== 4 || parts[1]?.length !== 32 || parts[2]?.length !== 16) {
+    return {
+      traceId: "",
+      spanId: "",
+      parentSpanId: "",
+      traceState: tracestate
+    };
+  }
+  return {
+    traceId: parts[1],
+    spanId: parts[2],
+    // Per Python parity, reuse upstream span_id as parent_span_id — the next
+    // event is a child span from the sidecar's perspective.
+    parentSpanId: parts[2],
+    traceState: tracestate
+  };
+}
+function mapUnitRef2(unit) {
+  return {
+    unitId: unit.unitId ?? "",
+    kind: 0,
+    currency: "",
+    unitName: unit.unit,
+    tokenKind: "",
+    modelFamily: "",
+    creditProgram: ""
+  };
+}
+function mapClaimEstimate(estimate) {
+  return {
+    tokenizerTier: estimate.tokenizerTier ?? "",
+    tokenizerVersionId: estimate.tokenizerVersionId ?? "",
+    inputTokens: int64Field(estimate.inputTokens),
+    predictedATokens: int64Field(estimate.predictedATokens),
+    predictedBTokens: int64Field(estimate.predictedBTokens),
+    predictedCTokens: int64Field(estimate.predictedCTokens),
+    reservedStrategy: estimate.reservedStrategy ?? "",
+    predictionStrategyUsed: estimate.predictionStrategyUsed ?? "",
+    predictionPolicyUsed: estimate.predictionPolicyUsed ?? "",
+    predictionConfidence: estimate.predictionConfidence ?? 0,
+    predictionSampleSize: int64Field(estimate.predictionSampleSize),
+    coldStartLayerUsed: estimate.coldStartLayerUsed ?? "",
+    classifierVersion: estimate.classifierVersion ?? "",
+    fingerprintVersion: estimate.fingerprintVersion ?? "",
+    promptClassFingerprint: estimate.promptClassFingerprint ?? "",
+    runProjectionAtDecisionAtomic: int64Field(estimate.runProjectionAtDecisionAtomic),
+    runPredictedRemainingSteps: estimate.runPredictedRemainingSteps ?? 0,
+    runStepsCompletedSoFar: int64Field(estimate.runStepsCompletedSoFar),
+    runCodeTriggered: estimate.runCodeTriggered ?? "",
+    model: estimate.model ?? "",
+    promptClass: estimate.promptClass ?? ""
+  };
+}
+function int64Field(v) {
+  if (v === void 0) return "0";
+  return typeof v === "bigint" ? v.toString() : Math.trunc(v).toString();
+}
+function wallClockToTimestamp(epochMs) {
+  const seconds = Math.floor(epochMs / 1e3);
+  const nanos = epochMs % 1e3 * 1e6;
+  return { seconds: seconds.toString(), nanos };
+}
+function jsonValueToStructValue(value) {
+  if (value === null || value === void 0) {
+    return { kind: { oneofKind: "nullValue", nullValue: 0 } };
+  }
+  if (typeof value === "boolean") {
+    return { kind: { oneofKind: "boolValue", boolValue: value } };
+  }
+  if (typeof value === "number") {
+    return { kind: { oneofKind: "numberValue", numberValue: value } };
+  }
+  if (typeof value === "bigint") {
+    return { kind: { oneofKind: "stringValue", stringValue: value.toString() } };
+  }
+  if (typeof value === "string") {
+    return { kind: { oneofKind: "stringValue", stringValue: value } };
+  }
+  if (Array.isArray(value)) {
+    return {
+      kind: {
+        oneofKind: "listValue",
+        listValue: { values: value.map(jsonValueToStructValue) }
+      }
+    };
+  }
+  if (value instanceof Date) {
+    return { kind: { oneofKind: "stringValue", stringValue: value.toISOString() } };
+  }
+  if (typeof value === "object") {
+    const fields = {};
+    for (const [k, v] of Object.entries(value)) {
+      fields[k] = jsonValueToStructValue(v);
+    }
+    return {
+      kind: { oneofKind: "structValue", structValue: { fields } }
+    };
+  }
+  return { kind: { oneofKind: "stringValue", stringValue: String(value) } };
+}
+function mapDecisionResponse(resp, tenantId) {
+  const name = decisionEnumName(resp.decision);
+  if (name === "CONTINUE" || name === "DEGRADE") {
+    return {
+      decisionId: resp.decisionId,
+      auditDecisionEventId: resp.auditDecisionEventId,
+      decision: name,
+      mutationPatchJson: resp.mutationPatchJson,
+      effectHash: resp.effectHash ?? new Uint8Array(),
+      ledgerTransactionId: resp.ledgerTransactionId,
+      reservationIds: Object.freeze([...resp.reservationIds]),
+      ttlExpiresAtSeconds: Number(resp.ttlExpiresAt?.seconds ?? 0),
+      reasonCodes: Object.freeze([...resp.reasonCodes]),
+      matchedRuleIds: Object.freeze([...resp.matchedRuleIds])
+    };
+  }
+  if (name === "STOP" || name === "STOP_RUN_PROJECTION") {
+    throw new DecisionStopped(
+      `sidecar ${name} terminal=${resp.terminal} reasons=${JSON.stringify(resp.reasonCodes)}`,
+      {
+        decisionId: resp.decisionId,
+        reasonCodes: [...resp.reasonCodes],
+        ...resp.auditDecisionEventId ? { auditDecisionEventId: resp.auditDecisionEventId } : {},
+        matchedRuleIds: [...resp.matchedRuleIds]
+      }
+    );
+  }
+  if (name === "SKIP") {
+    throw new DecisionSkipped(`sidecar SKIP reasons=${JSON.stringify(resp.reasonCodes)}`, {
+      decisionId: resp.decisionId,
+      reasonCodes: [...resp.reasonCodes],
+      ...resp.auditDecisionEventId ? { auditDecisionEventId: resp.auditDecisionEventId } : {},
+      matchedRuleIds: [...resp.matchedRuleIds]
+    });
+  }
+  if (name === "REQUIRE_APPROVAL") {
+    throw new ApprovalRequired(
+      `sidecar REQUIRE_APPROVAL approval_request_id=${resp.approvalRequestId}`,
+      {
+        decisionId: resp.decisionId,
+        approvalRequestId: resp.approvalRequestId,
+        ...resp.approverRole ? { approverRole: resp.approverRole } : {},
+        reasonCodes: [...resp.reasonCodes],
+        ...resp.auditDecisionEventId ? { auditDecisionEventId: resp.auditDecisionEventId } : {},
+        matchedRuleIds: [...resp.matchedRuleIds],
+        tenantId
+      }
+    );
+  }
+  throw new DecisionDenied(`sidecar returned unknown decision=${resp.decision}`, {
+    decisionId: resp.decisionId,
+    reasonCodes: [...resp.reasonCodes],
+    ...resp.auditDecisionEventId ? { auditDecisionEventId: resp.auditDecisionEventId } : {},
+    matchedRuleIds: [...resp.matchedRuleIds]
+  });
+}
+function computeReserveBodyHash(req) {
+  const { idempotencyKey: _omit, ...identity } = req;
+  return createHash("sha256").update(canonicalStableJson(identity), "utf8").digest("hex");
+}
+function canonicalStableJson(value) {
+  if (value === null) return "null";
+  if (typeof value === "bigint") return `"bigint:${value.toString()}"`;
+  if (value instanceof Uint8Array) return `"bytes:${Buffer.from(value).toString("base64")}"`;
+  if (Array.isArray(value)) {
+    return `[${value.map((v) => canonicalStableJson(v)).join(",")}]`;
+  }
+  if (typeof value === "object") {
+    const obj = value;
+    const keys = Object.keys(obj).filter((k) => obj[k] !== void 0).sort();
+    const parts = keys.map((k) => `${JSON.stringify(k)}:${canonicalStableJson(obj[k])}`);
+    return `{${parts.join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var REASON_CODE_HEADER = "x-spendguard-reason-code";
+var REASON_CODE_PREFIXES = [
+  // Forward-compat: bracket-tagged emission from the resume path.
+  ["[bundle_hot_reloaded]", "BUNDLE_HOT_RELOADED"],
+  // Defensive: matches the test fixture wording ("bundle hot-reloaded ...")
+  // and any future un-bracketed sidecar emission without coupling to exact
+  // detail text.
+  ["bundle hot-reload", "BUNDLE_HOT_RELOADED"],
+  // DomainError::IdempotencyConflict (error.rs:44-45).
+  ["idempotency conflict", "IDEMPOTENCY_CONFLICT"],
+  // FAILED_PRECONDITION cluster mapped to BUDGET_EXCEEDED — the five
+  // variants from error.rs (lines 26-39) that to_status() routes to
+  // Status::failed_precondition (excluding IdempotencyConflict above).
+  ["reservation state conflict", "BUDGET_EXCEEDED"],
+  ["reservation ttl expired", "BUDGET_EXCEEDED"],
+  ["pricing freeze mismatch", "BUDGET_EXCEEDED"],
+  ["overrun reservation", "BUDGET_EXCEEDED"],
+  ["multi-reservation commit deferred", "BUDGET_EXCEEDED"]
+];
+function mapGrpcStatusToError(err, ctx) {
+  if (err instanceof SpendGuardError) return err;
+  if (!(err instanceof RpcError)) {
+    return new SpendGuardError(`${ctx.rpc} failed: ${errorMessage2(err)}`, { cause: err });
+  }
+  const code = err.code;
+  const cause = err;
+  if (code === "UNAVAILABLE" || code === "DEADLINE_EXCEEDED" || code === "CANCELLED") {
+    return new SidecarUnavailable(
+      `${ctx.rpc} failed: code=${code} detail=${JSON.stringify(err.message)}`,
+      { cause }
+    );
+  }
+  if (code === "FAILED_PRECONDITION") {
+    const reason = readReasonCode(err);
+    if (reason === "BUNDLE_HOT_RELOADED") {
+      return new ApprovalBundleHotReloadedError(
+        `${ctx.rpc} failed: code=FAILED_PRECONDITION reason=BUNDLE_HOT_RELOADED detail=${JSON.stringify(err.message)}`,
+        { originalBundleHash: "", currentBundleHash: "" },
+        { cause }
+      );
+    }
+    const reasonSuffix = reason !== void 0 ? ` reason=${reason}` : "";
+    return new MutationApplyFailed(
+      `${ctx.rpc} failed: code=FAILED_PRECONDITION${reasonSuffix} detail=${JSON.stringify(err.message)}`,
+      { cause }
+    );
+  }
+  if (code === "NOT_FOUND") {
+    if (ctx.releaseNotFoundAsPlain === true) {
+      return new SpendGuardError("reservation not found", { cause });
+    }
+    return new SpendGuardError(
+      `${ctx.rpc} failed: code=NOT_FOUND detail=${JSON.stringify(err.message)}`,
+      { cause }
+    );
+  }
+  if (code === "ABORTED") {
+    return new SpendGuardError(
+      `${ctx.rpc} failed: code=ABORTED detail=${JSON.stringify(err.message)}`,
+      { cause }
+    );
+  }
+  return new SpendGuardError(
+    `${ctx.rpc} failed: code=${code} detail=${JSON.stringify(err.message)}`,
+    { cause }
+  );
+}
+function readReasonCode(err) {
+  const msg = err.message;
+  if (typeof msg === "string" && msg.length > 0) {
+    const lower = msg.toLowerCase();
+    for (const [prefix, code] of REASON_CODE_PREFIXES) {
+      if (lower.startsWith(prefix)) return code;
+    }
+  }
+  const raw = err.meta?.[REASON_CODE_HEADER];
+  if (raw === void 0) return void 0;
+  if (typeof raw === "string") return raw;
+  if (Array.isArray(raw) && raw.length > 0 && typeof raw[0] === "string") return raw[0];
+  return void 0;
+}
+function buildAckRejectMessage(ack) {
+  const statusName = ackStatusName(ack.status);
+  const code = ack.error?.code ?? 0;
+  const message = ack.error?.message ?? "";
+  return `EmitTraceEvents rejected: status=${statusName} code=${code} message=${JSON.stringify(message)}`;
+}
+function ackStatusName(value) {
+  switch (value) {
+    case 1 /* ACCEPTED */:
+      return "ACCEPTED";
+    case 2 /* QUARANTINED */:
+      return "QUARANTINED";
+    case 3 /* REJECTED */:
+      return "REJECTED";
+    default:
+      return `STATUS_${value}`;
+  }
+}
+function makeDisabledHandshake() {
+  return {
+    sessionId: "disabled-noop-session",
+    sidecarVersion: "disabled",
+    schemaBundleId: "",
+    schemaBundleHash: new Uint8Array(),
+    contractBundleId: "",
+    contractBundleHash: new Uint8Array(),
+    capabilityRequired: 0,
+    signingKeyId: "",
+    announcementSignature: new Uint8Array()
+  };
+}
+function makeDisabledDecision(req) {
+  return {
+    decisionId: req.decisionId,
+    auditDecisionEventId: "",
+    decision: "CONTINUE",
+    mutationPatchJson: "",
+    effectHash: new Uint8Array(),
+    ledgerTransactionId: "",
+    reservationIds: Object.freeze([]),
+    ttlExpiresAtSeconds: 0,
+    reasonCodes: Object.freeze(["disabled_mode"]),
+    matchedRuleIds: Object.freeze([])
+  };
+}
+function makeDisabledReleaseOutcome(req) {
+  return {
+    auditEventSignature: new Uint8Array(),
+    ledgerTransactionId: "",
+    releasedReservationIds: Object.freeze([req.reservationId])
+  };
+}
+function makeDisabledReserveSessionOutcome(req) {
+  return {
+    kind: "accepted",
+    sessionReservationId: `disabled:${req.sessionId || "session"}`,
+    ledgerTransactionId: "",
+    auditSessionEventId: "",
+    ttlExpiresAt: null,
+    reservedAmountAtomic: req.estimatedAmountAtomic,
+    remainingAmountAtomic: req.estimatedAmountAtomic
+  };
+}
+function makeDisabledCommitSessionDeltaOutcome(req) {
+  return {
+    sessionReservationId: req.sessionReservationId,
+    streamingCommitId: req.streamingCommitId,
+    ledgerTransactionId: "",
+    auditSessionEventId: "",
+    committedDeltaAtomic: req.amountAtomicDelta,
+    cumulativeCommittedAtomic: req.amountAtomicDelta,
+    remainingAmountAtomic: "0",
+    recordedAt: null
+  };
+}
+function makeDisabledReleaseSessionOutcome(req) {
+  return {
+    sessionReservationId: req.sessionReservationId,
+    ledgerTransactionId: "",
+    auditSessionEventId: "",
+    releasedAmountAtomic: "0",
+    committedAmountAtomic: "0",
+    recordedAt: null
+  };
+}
+function makeDisabledQueryBudgetResult(req) {
+  return {
+    availableAtomic: "0",
+    reservedAtomic: "0",
+    committedAtomic: "0",
+    unit: { unit: "USD_MICROS", denomination: 1 },
+    asOfSeconds: req.asOfSeconds ?? 0
+  };
+}
+function buildReleaseRequest(req, sessionId) {
+  return {
+    reservationId: req.reservationId,
+    idempotencyKey: req.idempotencyKey,
+    reasonCodes: [...req.reasonCodes ?? []],
+    tenantId: req.tenantId ?? "",
+    workloadInstanceId: req.workloadInstanceId ?? "",
+    sessionId
+  };
+}
+function mapReserveSessionOutcome(resp) {
+  switch (resp.outcome.oneofKind) {
+    case "accepted": {
+      const accepted = resp.outcome.accepted;
+      return {
+        kind: "accepted",
+        sessionReservationId: accepted.sessionReservationId,
+        ledgerTransactionId: accepted.ledgerTransactionId,
+        auditSessionEventId: accepted.auditSessionEventId,
+        ttlExpiresAt: timestampToDate(accepted.ttlExpiresAt),
+        reservedAmountAtomic: accepted.reservedAmountAtomic,
+        remainingAmountAtomic: accepted.remainingAmountAtomic
+      };
+    }
+    case "denied": {
+      const denied = resp.outcome.denied;
+      return {
+        kind: "denied",
+        auditSessionEventId: denied.auditSessionEventId,
+        reasonCodes: Object.freeze([...denied.reasonCodes]),
+        matchedRuleIds: Object.freeze([...denied.matchedRuleIds]),
+        ...denied.error !== void 0 ? { error: denied.error } : {}
+      };
+    }
+    case "error":
+      throw new SpendGuardError(
+        `sidecar reserveSession error code=${resp.outcome.error.code} message=${resp.outcome.error.message}`
+      );
+    default:
+      throw new SpendGuardError("sidecar reserveSession returned empty outcome");
+  }
+}
+function mapCommitSessionDeltaOutcome(resp) {
+  switch (resp.outcome.oneofKind) {
+    case "accepted": {
+      const accepted = resp.outcome.accepted;
+      return {
+        sessionReservationId: accepted.sessionReservationId,
+        streamingCommitId: accepted.streamingCommitId,
+        ledgerTransactionId: accepted.ledgerTransactionId,
+        auditSessionEventId: accepted.auditSessionEventId,
+        committedDeltaAtomic: accepted.committedDeltaAtomic,
+        cumulativeCommittedAtomic: accepted.cumulativeCommittedAtomic,
+        remainingAmountAtomic: accepted.remainingAmountAtomic,
+        recordedAt: timestampToDate(accepted.recordedAt)
+      };
+    }
+    case "error":
+      throw new SpendGuardError(
+        `sidecar commitSessionDelta error code=${resp.outcome.error.code} message=${resp.outcome.error.message}`
+      );
+    default:
+      throw new SpendGuardError("sidecar commitSessionDelta returned empty outcome");
+  }
+}
+function mapReleaseSessionOutcome(resp) {
+  switch (resp.outcome.oneofKind) {
+    case "accepted": {
+      const accepted = resp.outcome.accepted;
+      return {
+        sessionReservationId: accepted.sessionReservationId,
+        ledgerTransactionId: accepted.ledgerTransactionId,
+        auditSessionEventId: accepted.auditSessionEventId,
+        releasedAmountAtomic: accepted.releasedAmountAtomic,
+        committedAmountAtomic: accepted.committedAmountAtomic,
+        recordedAt: timestampToDate(accepted.recordedAt)
+      };
+    }
+    case "error":
+      throw new SpendGuardError(
+        `sidecar releaseSession error code=${resp.outcome.error.code} message=${resp.outcome.error.message}`
+      );
+    default:
+      throw new SpendGuardError("sidecar releaseSession returned empty outcome");
+  }
+}
+function mapReleaseResponse(resp) {
+  return {
+    auditEventSignature: resp.auditEventSignature ?? new Uint8Array(),
+    ledgerTransactionId: resp.ledgerTransactionId,
+    releasedReservationIds: Object.freeze([...resp.releasedReservationIds])
+  };
+}
+
+export { DEFAULT_CAPABILITY_LEVEL, DEFAULT_DECISION_TIMEOUT_MS, DEFAULT_HANDSHAKE_TIMEOUT_MS, DEFAULT_PROTOCOL_VERSION, DEFAULT_PUBLISH_TIMEOUT_MS, DEFAULT_TRACE_TIMEOUT_MS, REASON_CODE_PREFIXES, SpendGuardClient, computeReserveBodyHash };
+//# sourceMappingURL=client.js.map
+//# sourceMappingURL=client.js.map