@tensorcost/sdk 0.5.0 → 1.0.0

package/dist/sdk-layer.js

@@ -0,0 +1,73 @@
+/**
+ * Fetches the console-published control layer with a 30s cache.
+ * Decays to govern when the endpoint is unreachable for SDK_LAYER_DECAY_MS.
+ */
+import { intersectGrants, isControlLayer, minLayer, SDK_LAYER_CACHE_TTL_MS, SDK_LAYER_DECAY_MS, SDK_LAYER_PATH, } from "./layer.js";
+import { SDK_VERSION, sdkCapabilityHeader } from "./version.js";
+export class SdkLayerClient {
+    constructor(opts) {
+        this.cache = null;
+        /** 0 until the first successful fetch — cold start must not skip decay-to-govern. */
+        this.lastSuccessAt = 0;
+        this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
+        this.getToken = opts.getToken;
+        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+    }
+    /** effective = min(codeMaxLayer, published). */
+    async effectiveLayer(codeMaxLayer) {
+        const snap = await this.fetchPublishedSnapshot(codeMaxLayer);
+        return minLayer(codeMaxLayer, snap.layer);
+    }
+    /** intersect(codeMaxGrants, console.data_grants). Absent codeMax = all console grants. */
+    async effectiveGrants(codeMaxGrants, codeMaxLayer = "observe") {
+        const snap = await this.fetchPublishedSnapshot(codeMaxLayer);
+        return intersectGrants(codeMaxGrants, snap.dataGrants);
+    }
+    async fetchPublishedSnapshot(codeMaxLayer) {
+        const now = Date.now();
+        if (this.cache && now - this.cache.fetchedAt < SDK_LAYER_CACHE_TTL_MS) {
+            return {
+                layer: this.cache.layer,
+                dataGrants: this.cache.dataGrants,
+            };
+        }
+        try {
+            const token = await this.getToken();
+            const url = `${this.baseUrl}${SDK_LAYER_PATH}`;
+            const resp = await this.fetchImpl(url, {
+                method: "GET",
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    "x-tc-sdk-version": SDK_VERSION,
+                    "x-tc-sdk-capabilities": sdkCapabilityHeader(),
+                },
+            });
+            if (!resp.ok) {
+                throw new Error(`sdk-layer GET failed status=${resp.status}`);
+            }
+            const body = (await resp.json());
+            const layerRaw = body.published_layer ?? body.layer ?? "observe";
+            let layer = isControlLayer(layerRaw) ? layerRaw : "observe";
+            if (body.routing_paused) {
+                layer = minLayer(layer, "govern");
+            }
+            const dataGrants = (body.data_grants ?? []).filter((g) => g === "telemetry" ||
+                g === "retain_completions" ||
+                g === "retain_prompts" ||
+                g === "retain_tools");
+            this.cache = { layer, dataGrants, fetchedAt: now };
+            this.lastSuccessAt = now;
+            return { layer, dataGrants };
+        }
+        catch {
+            if (now - this.lastSuccessAt >= SDK_LAYER_DECAY_MS) {
+                return { layer: "govern", dataGrants: [] };
+            }
+            return {
+                layer: this.cache?.layer ?? codeMaxLayer,
+                dataGrants: this.cache?.dataGrants ?? [],
+            };
+        }
+    }
+}
+//# sourceMappingURL=sdk-layer.js.map

package/dist/sdk-layer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-layer.js","sourceRoot":"","sources":["../src/sdk-layer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACL,eAAe,EACf,cAAc,EACd,QAAQ,EACR,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,GAEf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAQhE,MAAM,OAAO,cAAc;IAazB,YAAY,IAA2B;QAR/B,UAAK,GAIF,IAAI,CAAC;QAChB,qFAAqF;QAC7E,kBAAa,GAAG,CAAC,CAAC;QAGxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,cAAc,CAAC,YAA0B;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,eAAe,CACnB,aAAoC,EACpC,eAA6B,SAAS;QAEtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAC7D,OAAO,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,YAA0B;QAI7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,sBAAsB,EAAE,CAAC;YACtE,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBACvB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;aAClC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,kBAAkB,EAAE,WAAW;oBAC/B,uBAAuB,EAAE,mBAAmB,EAAE;iBAC/C;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAK9B,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;YACjE,IAAI,KAAK,GAAiB,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAkB,EAAE,CACpB,CAAC,KAAK,WAAW;gBACjB,CAAC,KAAK,oBAAoB;gBAC1B,CAAC,KAAK,gBAAgB;gBACtB,CAAC,KAAK,cAAc,CACvB,CAAC;YAEF,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,kBAAkB,EAAE,CAAC;gBACnD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC7C,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,YAAY;gBACxC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/transport.d.ts

@@ -23,6 +23,8 @@ import type { Observation } from "./types.js";
 export interface TransportOptions {
     baseUrl: string;
     apiKey: string;
+    /** Required for token exchange against current inference-proxy DTO. */
+    tenantId?: string | null;
     timeoutMs?: number;
     failOpen?: boolean;
     /** Optional fetch override for testing. Defaults to global fetch. */
@@ -31,6 +33,7 @@ export interface TransportOptions {
 export declare class ObservationTransport {
     private readonly baseUrl;
     private readonly apiKey;
+    private readonly tenantId;
     private readonly timeoutMs;
     private readonly failOpen;
     private readonly fetchImpl;
@@ -46,7 +49,9 @@ export declare class ObservationTransport {
      */
     post(observation: Observation): void;
     private deliver;
-    private getToken;
+    /** Exchange or return cached JWT for proxy/admit/sdk-layer calls. */
+    getToken(): Promise<string>;
+    private fetchToken;
     private exchangeToken;
 }
 export declare const __test__: {

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAOD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,UAAU,CAA2B;IAC7C,wEAAwE;IACxE,OAAO,CAAC,aAAa,CAAgC;gBAEzC,IAAI,EAAE,gBAAgB;IAQlC;;;;OAIG;IACH,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;YAqBtB,OAAO;YAqCP,QAAQ;YAiBR,aAAa;CAuC5B;AAED,eAAO,MAAM,QAAQ;;;CAGpB,CAAC"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAO9C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAOD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,UAAU,CAA2B;IAC7C,wEAAwE;IACxE,OAAO,CAAC,aAAa,CAAgC;gBAEzC,IAAI,EAAE,gBAAgB;IASlC;;;;OAIG;IACH,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;YAqBtB,OAAO;IAqCrB,qEAAqE;IAC/D,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;YAInB,UAAU;YAiBV,aAAa;CA+C5B;AAED,eAAO,MAAM,QAAQ;;;CAGpB,CAAC"}

package/dist/transport.js

@@ -19,7 +19,7 @@
  *   (the default) and surfaced via console.warn. The customer's call
  *   site never sees an exception.
  */
-const SDK_VERSION = "tensorcost-node/0.3.0";
+import { SDK_VERSION } from "./version.js";
 const TOKEN_REFRESH_LEEWAY_MS = 60_000;
 const DEFAULT_TOKEN_LIFETIME_MS = 15 * 60_000;
 const MAX_QUEUE_DEPTH = 1024;
@@ -32,6 +32,7 @@ export class ObservationTransport {
         this.tokenInflight = null;
         this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
         this.apiKey = opts.apiKey;
+        this.tenantId = opts.tenantId ?? null;
         this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
         this.failOpen = opts.failOpen ?? true;
         this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
@@ -61,7 +62,7 @@ export class ObservationTransport {
     }
     async deliver(observation) {
         try {
-            const token = await this.getToken();
+            const token = await this.fetchToken();
             const url = `${this.baseUrl}/api/inference-proxy/observation`;
             const controller = new AbortController();
             const timer = setTimeout(() => controller.abort(), this.timeoutMs);
@@ -93,7 +94,11 @@ export class ObservationTransport {
             console.warn(`tensorcost: observation delivery failed: ${err.message}`);
         }
     }
+    /** Exchange or return cached JWT for proxy/admit/sdk-layer calls. */
     async getToken() {
+        return this.fetchToken();
+    }
+    async fetchToken() {
         const now = Date.now();
         if (this.tokenCache &&
             now < this.tokenCache.expiresAt - TOKEN_REFRESH_LEEWAY_MS) {
@@ -108,6 +113,9 @@ export class ObservationTransport {
         return this.tokenInflight;
     }
     async exchangeToken() {
+        if (!this.tenantId) {
+            throw new Error("tensorcost: tenant_id required for token exchange (pass tenantId to wrap() or set TENSORCOST_TENANT_ID)");
+        }
         const url = `${this.baseUrl}/api/inference-proxy/sdk-token/exchange`;
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), this.timeoutMs);
@@ -118,7 +126,10 @@ export class ObservationTransport {
                     "Content-Type": "application/json",
                     "User-Agent": SDK_VERSION,
                 },
-                body: JSON.stringify({ api_key: this.apiKey }),
+                body: JSON.stringify({
+                    tenant_id: this.tenantId,
+                    sdk_long_lived_token: this.apiKey,
+                }),
                 signal: controller.signal,
             });
             if (!resp.ok) {

package/dist/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC9C,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAgBjC,MAAM,OAAO,oBAAoB;IAY/B,YAAY,IAAsB;QAL1B,YAAO,GAAG,CAAC,CAAC;QACZ,eAAU,GAAsB,IAAI,CAAC;QAC7C,wEAAwE;QAChE,kBAAa,GAA2B,IAAI,CAAC;QAGnD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,WAAwB;QAC3B,IAAI,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;YACpC,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,iEAAiE;YACjE,+BAA+B;YAC/B,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,EAAE;YAClB,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,WAAwB;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,kCAAkC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,cAAc,EAAE,kBAAkB;wBAClC,YAAY,EAAE,WAAW;qBAC1B;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,sCAAsC;oBACtC,OAAO,CAAC,IAAI,CACV,8CAA8C,IAAI,CAAC,MAAM,EAAE,CAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,4CAA6C,GAAa,CAAC,OAAO,EAAE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACE,IAAI,CAAC,UAAU;YACf,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,uBAAuB,EACzD,CAAC;YACD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,yCAAyC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,WAAW;iBAC1B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAI9B,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,UAAU,GACd,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACjC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI;gBACxB,CAAC,CAAC,yBAAyB,CAAC;YAChC,IAAI,CAAC,UAAU,GAAG;gBAChB,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;aACnC,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,WAAW;IACX,eAAe;CAChB,CAAC"}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC9C,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAkBjC,MAAM,OAAO,oBAAoB;IAa/B,YAAY,IAAsB;QAL1B,YAAO,GAAG,CAAC,CAAC;QACZ,eAAU,GAAsB,IAAI,CAAC;QAC7C,wEAAwE;QAChE,kBAAa,GAA2B,IAAI,CAAC;QAGnD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,WAAwB;QAC3B,IAAI,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;YACpC,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,iEAAiE;YACjE,+BAA+B;YAC/B,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,EAAE;YAClB,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,WAAwB;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,kCAAkC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,cAAc,EAAE,kBAAkB;wBAClC,YAAY,EAAE,WAAW;qBAC1B;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,sCAAsC;oBACtC,OAAO,CAAC,IAAI,CACV,8CAA8C,IAAI,CAAC,MAAM,EAAE,CAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,4CAA6C,GAAa,CAAC,OAAO,EAAE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACE,IAAI,CAAC,UAAU;YACf,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,uBAAuB,EACzD,CAAC;YACD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,yCAAyC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,WAAW;iBAC1B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,oBAAoB,EAAE,IAAI,CAAC,MAAM;iBAClC,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAI9B,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,UAAU,GACd,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACjC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI;gBACxB,CAAC,CAAC,yBAAyB,CAAC;YAChC,IAAI,CAAC,UAAU,GAAG;gBAChB,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;aACnC,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,WAAW;IACX,eAAe;CAChB,CAAC"}

package/dist/types.d.ts

@@ -7,9 +7,12 @@
  */
 import type { LifecycleEventCallback } from "./telemetry.js";
 import type { RetryConfig } from "./retry.js";
-export type Provider = "openai" | "anthropic" | "bedrock";
-export type Operation = "chat.completions" | "completions" | "messages" | "bedrock.invoke_model" | "bedrock.converse" | "bedrock.invoke_model_stream" | "bedrock.converse_stream";
+import type { ControlLayer, DataGrant } from "./layer.js";
+export type { ControlLayer, DataGrant } from "./layer.js";
+export type Provider = "openai" | "anthropic" | "bedrock" | "vertex";
+export type Operation = "chat.completions" | "completions" | "messages" | "bedrock.invoke_model" | "bedrock.converse" | "bedrock.invoke_model_stream" | "bedrock.converse_stream" | "vertex.generate_content" | "vertex.generate_content_stream";
 export type ObservationStatus = "success" | "error";
+export type ObservationModality = "text" | "image" | "audio" | "video" | "mixed";
 /**
  * Wire shape posted to `POST /api/proxy/observation`. Mirrors the
  * Python SDK's `Observation` model byte-for-byte so the two SDKs
@@ -20,6 +23,8 @@ export interface Observation {
     provider: Provider;
     model: string;
     operation: Operation;
+    /** Defaults to "text" when omitted on the wire. */
+    modality?: ObservationModality;
     request_at: string;
     response_at: string;
     input_tokens: number | null;
@@ -47,6 +52,65 @@ export interface Observation {
      * did not set `environment`.
      */
     connection_id?: string;
+    /**
+     * SDK metadata bag. Merged from wrap-time defaults and per-call
+     * withMeta() overrides. The backend stores this verbatim in
+     * trace_span.metadata; two well-known keys are indexed for
+     * group-by queries:
+     *   - deployment            — git SHA, CI run id, or any operator marker
+     *   - prompt_template_id    — per-call-site template name/version
+     */
+    metadata?: Record<string, unknown>;
+    /**
+     * Per-agent-run cost attribution — agent identity. Optional. Stamped
+     * onto the observation envelope when the SDK was constructed with
+     * `wrap(client, { agentId: '...' })`, or overridden per-call via
+     * `.withMeta({ agentId: '...' })`. Forwarded verbatim by
+     * inference-proxy-service's ObservationService onto the Kafka/event-bus
+     * envelope; ai-service writes it straight into
+     * `ai.ai_spend_events.agent_id` (migration 011 — the column has existed
+     * since April 2026 as `agent_id text -- populated by tag propagation
+     * (post-MVP)`; this is that propagation).
+     *
+     * A stable identifier for the *kind* of agent making calls (e.g.
+     * "code-review-agent", "support-triage-bot") — set once per wrapped
+     * client is the common case, hence the wrap-time default.
+     *
+     * Unlike `environment` / `connection_id`, this is NOT stored in the
+     * `metadata` JSONB bag — it is a dedicated indexed column
+     * (`spend_events_tenant_agent_time` partial index), so it is threaded
+     * through as its own top-level envelope field the same way
+     * `environment` / `connection_id` are.
+     */
+    agent_id?: string;
+    /**
+     * Per-agent-run cost attribution — run identity. Optional. Same
+     * plumbing as `agent_id` (see above), landing in
+     * `ai.ai_spend_events.workflow_id`.
+     *
+     * A unique identifier for ONE execution of an agent (e.g. a session id,
+     * a job id) — this almost always varies call-to-call within a single
+     * wrapped client's lifetime, so the primary way to set it is per-call
+     * via `.withMeta({ workflowId: '...' })` rather than at `wrap()` time.
+     * A wrap-time default is still supported for the case where one
+     * process = one run (e.g. a short-lived batch job).
+     *
+     * "Cost of one agent run" is defined as
+     * `SUM(total_cost_cents) WHERE tenant_id = ? AND workflow_id = ? AND
+     * superseded_at IS NULL` — see ai-service's `agent-runs` module.
+     */
+    workflow_id?: string;
+    /**
+     * A-04 chargeback — end-customer cohort. Optional. Stamped on every
+     * observation when configured via `wrap({ customer })` or per-call
+     * `.withMeta({ customer })`. Lands in `ai.ai_spend_events.customer`.
+     */
+    customer?: string;
+    /**
+     * A-04 chargeback — product feature. Same plumbing as `customer`,
+     * landing in `ai.ai_spend_events.feature`.
+     */
+    feature?: string;
 }
 export interface WrapOptions {
     /** Long-lived TensorCost API key. Falls back to `TENSORCOST_API_KEY`. */
@@ -91,19 +155,26 @@ export interface WrapOptions {
      */
     failOpen?: boolean;
     /**
-     * Layer 2 applied mode. When true, the SDK routes every inference
-     * request through the TensorCost inference-proxy rather than sending
-     * it directly to the upstream AI provider. The proxy decides
-     * per-request whether to actually re-route or pass through unchanged.
+     * Control-layer ceiling for this wrapped client. A layer is a ceiling,
+     * not a setting — effective layer is min(code.maxLayer, console published).
      *
-     * Defaults to false. Observe-only telemetry continues to fire
-     * regardless of this setting.
+     *   off     — no SDK wiring; client returned unchanged
+     *   observe — telemetry only (default when maxLayer unset)
+     *   govern  — metadata-only admit before direct provider call
+     *   steer   — proxy in path; proxy may steer without full route
+     *   route   — full applied-mode routing through inference-proxy
      *
-     * Requires `proxyUrl` (or `TENSORCOST_PROXY_URL` env var) to be set;
-     * throws `TensorCostConfigError` at `wrap()` time if neither is present.
-     *
-     * Not yet supported for AWS Bedrock clients — `wrap()` will throw
-     * immediately if you enable applied mode with a Bedrock client.
+     * Requires `proxyUrl` when maxLayer is steer or route.
+     */
+    maxLayer?: ControlLayer;
+    /**
+     * Code-side data-grant ceiling. Effective grants =
+     * intersect(maxGrants, console.data_grants). Omit to allow all console grants.
+     */
+    maxGrants?: readonly DataGrant[];
+    /**
+     * @deprecated Use `maxLayer: 'route'` instead. When true and maxLayer is
+     * unset, resolves to route and emits a console warning.
      */
     appliedMode?: boolean;
     /**
@@ -167,6 +238,78 @@ export interface WrapOptions {
      * you are using the SDK in a context where the client's key is unavailable.
      */
     providerApiKey?: string;
+    /**
+     * Deployment identifier stamped on every observation from this wrapped
+     * client. Typically a git SHA, CI run id, or a human-readable release
+     * label like `"2026-05-28-hotfix"`.
+     *
+     * Stored as `metadata.deployment` in the trace_span row. The dashboard's
+     * "Group by deployment" view buckets spans by this value so Priya can
+     * answer "did my latest deploy change cost?".
+     *
+     * Falls back to `TENSORCOST_DEPLOYMENT` env var. Leave unset if you don't
+     * use deployment-level cost attribution.
+     */
+    deployment?: string;
+    /**
+     * Default prompt-template identifier for every call made through this
+     * client. Stored as `metadata.prompt_template_id` on each observation.
+     *
+     * Per-call overrides are available via `.withMeta({ promptTemplateId })`.
+     * The per-call value wins over this wrap-time default.
+     *
+     * Falls back to `TENSORCOST_PROMPT_TEMPLATE_ID` env var.
+     */
+    promptTemplateId?: string;
+    /**
+     * Stable identifier for the kind of agent making calls through this
+     * client (e.g. "code-review-agent"). Stamped on every observation as
+     * the top-level `agent_id` field — NOT the metadata bag — and lands in
+     * `ai.ai_spend_events.agent_id`.
+     *
+     * Per-call overrides are available via `.withMeta({ agentId })` on the
+     * OpenAI and Anthropic wrappers. Bedrock has no per-call hook (Smithy
+     * middleware is registered once at wrap() time), so for Bedrock this
+     * wrap-time value is the only way to set `agent_id`.
+     *
+     * Falls back to `TENSORCOST_AGENT_ID` env var.
+     */
+    agentId?: string;
+    /**
+     * Identifier for ONE execution of an agent (a run/session id). Stamped
+     * on every observation as the top-level `workflow_id` field and lands
+     * in `ai.ai_spend_events.workflow_id`.
+     *
+     * Because a run id almost always changes between calls, the primary
+     * way to set this is per-call via `.withMeta({ workflowId })`. This
+     * wrap-time default exists for the one-process-per-run case (batch
+     * jobs, Bedrock clients with no per-call hook).
+     *
+     * Falls back to `TENSORCOST_WORKFLOW_ID` env var.
+     */
+    workflowId?: string;
+    /**
+     * Routing-policy application scope. Sent as `x-tc-application` on proxy
+     * requests. Falls back to `TC_APPLICATION` / `TENSORCOST_APPLICATION`.
+     */
+    application?: string;
+    /**
+     * Routing-policy tags. Sent as comma-separated `x-tc-tags` on proxy
+     * requests. Falls back to `TC_TAGS` / `TENSORCOST_TAGS` (comma-separated).
+     */
+    tags?: string | string[];
+    /**
+     * A-04 chargeback — end-customer cohort (max 128 chars). Sent on
+     * observations and as `x-tc-customer` in applied mode.
+     * Falls back to `TENSORCOST_CUSTOMER`.
+     */
+    customer?: string;
+    /**
+     * A-04 chargeback — product feature (max 128 chars). Sent on
+     * observations and as `x-tc-feature` in applied mode.
+     * Falls back to `TENSORCOST_FEATURE`.
+     */
+    feature?: string;
 }
 export interface ResolvedConfig {
     apiKey: string;
@@ -186,12 +329,12 @@ export interface ResolvedConfig {
      */
     connectionId: string | null;
     failOpen: boolean;
-    /** Resolved applied-mode flag. */
+    /** Resolved control-layer ceiling. */
+    maxLayer: ControlLayer;
+    /** @deprecated Derived: maxLayer is steer or route. */
     appliedMode: boolean;
     /**
-     * Resolved proxy base URL. Non-null only when `appliedMode=true`.
-     * Guaranteed by config resolution — `wrap()` throws before returning
-     * a config with `appliedMode=true` and `proxyUrl=null`.
+     * Resolved proxy base URL. Required when maxLayer is steer or route.
      */
     proxyUrl: string | null;
     retry: RetryConfig;
@@ -200,5 +343,23 @@ export interface ResolvedConfig {
     onLifecycleEvent: LifecycleEventCallback | undefined;
     failOpenEnabled: boolean;
     providerApiKey: string | null;
+    /** Resolved deployment tag. `null` when not configured. */
+    deployment: string | null;
+    /** Resolved default prompt-template id. `null` when not configured. */
+    promptTemplateId: string | null;
+    /** Resolved wrap-time agent id default. `null` when not configured. */
+    agentId: string | null;
+    /** Resolved wrap-time workflow (run) id default. `null` when not configured. */
+    workflowId: string | null;
+    /** Resolved application scope for routing policies. `null` when unset. */
+    application: string | null;
+    /** Resolved routing tags (normalized list). Empty when unset. */
+    tags: string[];
+    /** A-04 — resolved customer cohort. `null` when unset. */
+    customer: string | null;
+    /** A-04 — resolved product feature. `null` when unset. */
+    feature: string | null;
+    /** Resolved code-side data grant ceiling. Empty = no ceiling. */
+    maxGrants: DataGrant[];
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE1D,MAAM,MAAM,SAAS,GACjB,kBAAkB,GAClB,aAAa,GACb,UAAU,GACV,sBAAsB,GACtB,kBAAkB,GAClB,6BAA6B,GAC7B,yBAAyB,CAAC;AAE9B,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAE7B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAE1C;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,kCAAkC;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAGxB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE1D,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErE,MAAM,MAAM,SAAS,GACjB,kBAAkB,GAClB,aAAa,GACb,UAAU,GACV,sBAAsB,GACtB,kBAAkB,GAClB,6BAA6B,GAC7B,yBAAyB,GACzB,yBAAyB,GACzB,gCAAgC,CAAC;AAErC,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AAEpD,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,CAAC;AAEZ;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAE7B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAE1C;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAMxB;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAM1B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,sCAAsC;IACtC,QAAQ,EAAE,YAAY,CAAC;IACvB,uDAAuD;IACvD,WAAW,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAGxB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,2DAA2D;IAC3D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,uEAAuE;IACvE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gFAAgF;IAChF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iEAAiE;IACjE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,SAAS,EAAE,SAAS,EAAE,CAAC;CACxB"}

package/dist/version.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Central SDK identity — wire headers and observation sdk_version.
+ */
+export declare const SDK_VERSION = "tensorcost-node/1.0.0";
+/** Advertise only capabilities this build implements. */
+export declare const SDK_CAPABILITIES: readonly ["streaming", "refusal-v1"];
+export type SdkCapability = (typeof SDK_CAPABILITIES)[number];
+export declare function sdkCapabilityHeader(): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,WAAW,0BAA0B,CAAC;AAEnD,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,sCAAuC,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/version.js

@@ -0,0 +1,10 @@
+/**
+ * Central SDK identity — wire headers and observation sdk_version.
+ */
+export const SDK_VERSION = "tensorcost-node/1.0.0";
+/** Advertise only capabilities this build implements. */
+export const SDK_CAPABILITIES = ["streaming", "refusal-v1"];
+export function sdkCapabilityHeader() {
+    return SDK_CAPABILITIES.join(",");
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAEnD,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,YAAY,CAAU,CAAC;AAGrE,MAAM,UAAU,mBAAmB;IACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/wrap.d.ts

@@ -5,21 +5,20 @@
  * ergonomics non-negotiable: customer changes one line, no other code
  * paths shift.
  *
- * Applied mode (Layer 2): when `options.appliedMode=true`, the client's
- * baseURL is permanently redirected to the TensorCost inference-proxy and
- * two custom headers (`x-tc-provider-url`, `x-tc-provider-auth`) are
- * injected into `client.defaultHeaders`. The proxy handles per-request
- * routing decisions. Observe-only telemetry still fires post-call.
- *
- * Hardening (v0.4.0): applied-mode requests now go through the proxy-client
- * module which adds retries, timeouts, typed errors, telemetry hooks, and
- * the fail-open circuit breaker.
- *
- * Bedrock (v0.4.0): observe-only. Applied mode is not supported for Bedrock —
- * wrap(bedrockClient, { appliedMode: true }) throws TensorCostConfigError.
- * The Smithy middleware registered on client.middlewareStack intercepts
- * every client.send() call transparently.
+ * Control layers:
+ *   off     — client returned unchanged (no transport, no hooks)
+ *   observe — telemetry only
+ *   govern  — admit (metadata) then direct provider call
+ *   steer/route — proxy in request path (OpenAI / Anthropic only)
  */
+import { TensorCostConfigError } from "./config.js";
+import { layerRank } from "./layer.js";
 import type { WrapOptions } from "./types.js";
+declare function steerRouteUnsupportedError(provider: string, maxLayer: string): TensorCostConfigError;
 export declare function wrap<T>(client: T, options?: WrapOptions): T;
+export declare const __test__: {
+    layerRank: typeof layerRank;
+    steerRouteUnsupportedError: typeof steerRouteUnsupportedError;
+};
+export {};
 //# sourceMappingURL=wrap.d.ts.map

package/dist/wrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../src/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAWH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,GAAE,WAAgB,GAAG,CAAC,CAqF/D"}
+{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../src/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAUpD,OAAO,EAAE,SAAS,EAAiB,MAAM,YAAY,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,iBAAS,0BAA0B,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,qBAAqB,CAOvB;AAED,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,GAAE,WAAgB,GAAG,CAAC,CA4H/D;AAED,eAAO,MAAM,QAAQ;;;CAA4C,CAAC"}