@tensorcost/sdk 1.3.3 → 1.5.0

package/dist/errors.js

@@ -8,11 +8,27 @@
  * Hierarchy:
  *
  *   TensorCostError (base)
- *   ├── TensorCostNetworkError    couldn't reach the proxy at all
- *   ├── TensorCostTimeoutError    request or idle window exceeded limit
- *   ├── TensorCostProxyError      proxy responded with 5xx
- *   ├── TensorCostQuotaError      proxy responded with 429
- *   └── TensorCostProviderError   proxy forwarded an upstream provider error
+ *   ├── TensorCostNetworkError    couldn't reach the proxy at all          ┐
+ *   ├── TensorCostTimeoutError    request or idle window exceeded limit    │ outages: the only
+ *   ├── TensorCostProxyError      proxy responded with 5xx                 │ errors that may fall
+ *   ├── TensorCostQuotaError      proxy 429, or 402 plan ceiling           ┘ back to the provider
+ *   ├── TensorCostProviderError   proxy relayed an upstream provider 4xx
+ *   │                             (rethrown as the provider SDK's own error
+ *   │                             type when the client can build one)
+ *   ├── TensorCostGatewayRejectedError  non-JSON 4xx from in front of TensorCost
+ *   ├── TensorCostKeyRejectedError      token exchange rejected the API key
+ *   └── TensorCostRefusedError    TensorCost refused the call (terminal)
+ *       ├── TensorCostRunBudgetExceededError
+ *       ├── TensorCostRunStoppedError
+ *       ├── TensorCostPeriodBudgetExceededError
+ *       │   └── TensorCostBudgetHardCapError
+ *       ├── TensorCostModelGovernanceDeniedError
+ *       ├── TensorCostGuardrailHardStopError
+ *       ├── TensorCostComplianceDeniedError
+ *       └── TensorCostComplianceTeamMismatchError
+ *
+ * A refusal code this SDK version doesn't model still arrives as a plain
+ * TensorCostRefusedError with its `code`, `reason` and message intact.
  *
  * All subclasses carry:
  *   - `rootCause`   the underlying Error, if any (avoids clash with ES2022 Error.cause)
@@ -62,7 +78,9 @@ export class TensorCostProxyError extends TensorCostError {
     }
 }
 /**
- * The proxy returned 429 Too Many Requests.
+ * The proxy returned 429 Too Many Requests (TensorCost's own rate limit),
+ * or 402 with no refusal body (the plan's monthly proxy-request ceiling;
+ * `status` says which). Neither carries a refusal, so both may fall back.
  * `retryAfterMs` is set when the response included a `Retry-After` header.
  */
 export class TensorCostQuotaError extends TensorCostError {
@@ -72,13 +90,64 @@ export class TensorCostQuotaError extends TensorCostError {
     }
 }
 /**
- * The proxy successfully reached the upstream provider, but the provider
- * itself returned an error (4xx/5xx from OpenAI, Anthropic, etc.). The
- * proxy's response still carries the provider's status in `status`.
+ * The proxy reached the upstream provider and relayed the provider's own
+ * 4xx (OpenAI 400 invalid request, Anthropic 401, and so on). `status` is
+ * the provider's status and `body` is what the provider sent, parsed as
+ * JSON when it was JSON. Never falls back: the provider would only answer
+ * the same way again.
  */
 export class TensorCostProviderError extends TensorCostError {
     constructor(message, opts = {}) {
         super(message, opts);
+        this.body = opts.body ?? null;
+        this.headers = opts.headers ?? {};
+    }
+}
+/**
+ * Something in front of TensorCost turned the request away: a 4xx whose
+ * body isn't JSON (an HTML page from a firewall or load balancer, or
+ * nothing at all). Neither TensorCost nor the provider saw the call.
+ * Terminal: going around it would mean going around whatever put the
+ * firewall there, and the next call would most likely meet it too.
+ */
+export class TensorCostGatewayRejectedError extends TensorCostError {
+    constructor(status, bodyText, opts = {}) {
+        super(`tensorcost: the request was rejected with ${status} before it reached TensorCost ` +
+            "or the provider (for example by a firewall or load balancer in front of the " +
+            "TensorCost proxy). Check the proxy URL and anything in front of it.", { ...opts, status });
+        this.bodyText = bodyText;
+    }
+}
+/**
+ * The token exchange rejected the TensorCost API key (401 or 403): revoked,
+ * mistyped, or issued for a different tenant than the one configured. Not
+ * an outage, so it never fails open.
+ */
+export class TensorCostKeyRejectedError extends TensorCostError {
+    constructor(status, opts = {}) {
+        super(`tensorcost: the TensorCost key was rejected (${status}); check it's current and ` +
+            "that it belongs to the configured tenant id", { ...opts, status });
+    }
+}
+/**
+ * TensorCost answered and the answer is no: a budget, a stop, a policy.
+ *
+ * Every refusal is terminal. It never retries and never falls back to the
+ * provider, because the proxy that sent it is healthy and the refusal is
+ * the product. `code` is the server's refusal code (null when the server
+ * refused without naming one), `reason` its optional sub-reason, and
+ * `detail` the refusal object as the server sent it.
+ *
+ * Subclasses cover the codes this SDK version models. Anything else, a
+ * code added on the server after this release included, is thrown as this
+ * class directly so it is still terminal.
+ */
+export class TensorCostRefusedError extends TensorCostError {
+    constructor(message, refusal = {}, opts = {}) {
+        super(message, opts);
+        this.code = refusal.code ?? null;
+        this.reason = refusal.reason ?? null;
+        this.detail = refusal.detail ?? null;
     }
 }
 /**
@@ -93,38 +162,112 @@ export class TensorCostProviderError extends TensorCostError {
  * anyway, bill the customer, and reduce the cap to a suggestion.
  *
  * See `shouldFallBackToProvider()` in proxy-client.ts, which is the single
- * predicate every provider wrapper consults before falling back.
+ * predicate every provider wrapper consults before falling back. Since
+ * 1.5.0 it is an allow-list of outages, so a refusal can't slip past it.
  */
-export class TensorCostRunBudgetExceededError extends TensorCostError {
+export class TensorCostRunBudgetExceededError extends TensorCostRefusedError {
     constructor(message, workflowId, capCents, spentCents, opts = {}) {
-        super(message, opts);
+        super(message, { code: "RUN_BUDGET_EXCEEDED", detail: opts.detail ?? null }, opts);
         this.workflowId = workflowId;
         this.capCents = capCents;
         this.spentCents = spentCents;
     }
 }
+/**
+ * An operator stopped the agent run this call belongs to, and the proxy
+ * refused the request (HTTP 403, `code: "RUN_STOPPED"`).
+ *
+ * Terminal for the same reason as the budget refusals: a stop is a decision
+ * from a healthy proxy, so falling back to the provider would simply undo
+ * it. Carries the who / when / why the proxy recorded.
+ */
+export class TensorCostRunStoppedError extends TensorCostRefusedError {
+    /**
+     * Build the error from the proxy's 403 `error` object. Shared by the
+     * chat-completions client and the govern-layer admit client, which both
+     * receive the same body.
+     */
+    static fromProxyBody(detail, opts = {}) {
+        const str = (v) => (typeof v === "string" ? v : null);
+        return new TensorCostRunStoppedError(str(detail?.["message"]) ?? "tensorcost: agent run was stopped", {
+            workflowId: str(detail?.["workflow_id"]),
+            stoppedBy: str(detail?.["stopped_by"]),
+            stoppedAt: str(detail?.["stopped_at"]),
+            reason: str(detail?.["reason"]),
+        }, { ...opts, detail: detail ?? null });
+    }
+    constructor(message, detail = {}, opts = {}) {
+        super(message, { code: "RUN_STOPPED", reason: detail.reason ?? null, detail: opts.detail ?? null }, { ...opts, status: opts.status ?? 403 });
+        this.code = "RUN_STOPPED";
+        this.workflowId = detail.workflowId ?? null;
+        this.stoppedBy = detail.stoppedBy ?? null;
+        this.stoppedAt = detail.stoppedAt ?? null;
+    }
+}
 /**
  * Daily or monthly agent/team spend cap exceeded (HTTP 403,
  * `code: "PERIOD_BUDGET_EXCEEDED"`). Terminal — must not fall back to the
  * provider or the cap becomes a suggestion.
  */
-export class TensorCostPeriodBudgetExceededError extends TensorCostError {
+export class TensorCostPeriodBudgetExceededError extends TensorCostRefusedError {
     constructor(message, scope, period, capCents, spentCents, opts = {}) {
-        super(message, opts);
+        super(message, {
+            code: opts.code ?? "PERIOD_BUDGET_EXCEEDED",
+            reason: opts.reason ?? null,
+            detail: opts.detail ?? null,
+        }, opts);
         this.scope = scope;
         this.period = period;
         this.capCents = capCents;
         this.spentCents = spentCents;
     }
 }
+/**
+ * A money budget's hard cap refused the call (HTTP 403).
+ *
+ * The server sends `error.code: "PERIOD_BUDGET_EXCEEDED"` with
+ * `error.budget_code: "BUDGET_HARD_CAP"` (that code is what made 1.4.0
+ * treat it as terminal), and older servers sent `error.code:
+ * "BUDGET_HARD_CAP"`. Both map here. `code` keeps whichever the server
+ * sent; `budgetCode` is always "BUDGET_HARD_CAP".
+ *
+ * It extends TensorCostPeriodBudgetExceededError because 1.4.0 already
+ * raised that class for the current wire shape, so an existing `catch` for
+ * it keeps working, and scope / period / capCents / spentCents are filled
+ * the same way.
+ *
+ * `reason: "spend_not_known_yet"` (with `retryable: true` on the wire)
+ * means the budget hasn't been counted yet, usually for a few seconds after
+ * it is created or its scope changes, so the cap holds calls until the
+ * first count lands. That case is `retryable`, and `retryAfterSeconds`
+ * comes from the Retry-After header or the body's `retry_after_seconds`.
+ * The SDK does not retry on its own.
+ */
+export class TensorCostBudgetHardCapError extends TensorCostPeriodBudgetExceededError {
+    constructor(message, fields = {}, opts = {}) {
+        super(message, fields.scope ?? null, fields.period ?? null, fields.capCents ?? null, fields.spentCents ?? null, {
+            ...opts,
+            status: opts.status ?? 403,
+            code: fields.code ?? "BUDGET_HARD_CAP",
+            reason: fields.reason ?? null,
+            detail: fields.detail ?? null,
+        });
+        this.budgetCode = "BUDGET_HARD_CAP";
+        this.budgetId = fields.budgetId ?? null;
+        this.budgetName = fields.budgetName ?? null;
+        this.burnPct = fields.burnPct ?? null;
+        this.retryable = fields.retryable === true || this.reason === "spend_not_known_yet";
+        this.retryAfterSeconds = fields.retryAfterSeconds ?? null;
+    }
+}
 /**
  * Tenant model governance refused this model (HTTP 403,
  * `code: "MODEL_GOVERNANCE_DENIED"`). Terminal — must not fall back to the
  * provider, or Enforce would become a suggestion.
  */
-export class TensorCostModelGovernanceDeniedError extends TensorCostError {
+export class TensorCostModelGovernanceDeniedError extends TensorCostRefusedError {
     constructor(message, provider, model, governanceStatus, opts = {}) {
-        super(message, opts);
+        super(message, { code: "MODEL_GOVERNANCE_DENIED", detail: opts.detail ?? null }, opts);
         this.provider = provider;
         this.model = model;
         this.governanceStatus = governanceStatus;
@@ -135,23 +278,22 @@ export class TensorCostModelGovernanceDeniedError extends TensorCostError {
  * `code: "GUARDRAIL_HARD_STOP"`). Terminal — same fail-closed contract as
  * run-budget and model governance denials.
  */
-export class TensorCostGuardrailHardStopError extends TensorCostError {
+export class TensorCostGuardrailHardStopError extends TensorCostRefusedError {
     constructor(message, policyId, opts = {}) {
-        super(message, opts);
+        super(message, { code: "GUARDRAIL_HARD_STOP", reason: opts.reason ?? null, detail: opts.detail ?? null }, opts);
         this.policyId = policyId;
     }
 }
 /** Compliance policy refused this call (metadata or in-process DLP). */
-export class TensorCostComplianceDeniedError extends TensorCostError {
+export class TensorCostComplianceDeniedError extends TensorCostRefusedError {
     constructor(message, reason, opts = {}) {
-        super(message, { ...opts, status: opts.status ?? 403 });
-        this.reason = reason;
+        super(message, { code: "COMPLIANCE_DENIED", reason, detail: opts.detail ?? null }, { ...opts, status: opts.status ?? 403 });
     }
 }
 /** Client team_id does not match token-bound team scope. */
-export class TensorCostComplianceTeamMismatchError extends TensorCostError {
+export class TensorCostComplianceTeamMismatchError extends TensorCostRefusedError {
     constructor(message, opts = {}) {
-        super(message, { ...opts, status: opts.status ?? 403 });
+        super(message, { code: "COMPLIANCE_TEAM_MISMATCH", detail: opts.detail ?? null }, { ...opts, status: opts.status ?? 403 });
     }
 }
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH,MAAM,OAAgB,eAAgB,SAAQ,KAAK;IAOjD,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,8DAA8D;QAC9D,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE;YAClC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC5B,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAEjC,8CAA8C;QAC9C,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IACzD,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IAIzD,YACE,OAAe,EACf,WAAyC,EACzC,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACvD,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IAGvD,YACE,OAAe,EACf,YAA2B,EAC3B,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,eAAe;IAC1D,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,gCAAiC,SAAQ,eAAe;IACnE,YACE,OAAe,EACN,UAAyB,EACzB,QAAuB,EACvB,UAAyB,EAClC,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QALZ,eAAU,GAAV,UAAU,CAAe;QACzB,aAAQ,GAAR,QAAQ,CAAe;QACvB,eAAU,GAAV,UAAU,CAAe;IAIpC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IACtE,YACE,OAAe,EACN,KAAoB,EACpB,MAAqB,EACrB,QAAuB,EACvB,UAAyB,EAClC,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QANZ,UAAK,GAAL,KAAK,CAAe;QACpB,WAAM,GAAN,MAAM,CAAe;QACrB,aAAQ,GAAR,QAAQ,CAAe;QACvB,eAAU,GAAV,UAAU,CAAe;IAIpC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oCAAqC,SAAQ,eAAe;IACvE,YACE,OAAe,EACN,QAAuB,EACvB,KAAoB,EACpB,gBAA+B,EACxC,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QALZ,aAAQ,GAAR,QAAQ,CAAe;QACvB,UAAK,GAAL,KAAK,CAAe;QACpB,qBAAgB,GAAhB,gBAAgB,CAAe;IAI1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,gCAAiC,SAAQ,eAAe;IACnE,YACE,OAAe,EACN,QAAuB,EAChC,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAHZ,aAAQ,GAAR,QAAQ,CAAe;IAIlC,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IAClE,YACE,OAAe,EACN,MAAqB,EAC9B,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAH/C,WAAM,GAAN,MAAM,CAAe;IAIhC,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,qCAAsC,SAAQ,eAAe;IACxE,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AASH,MAAM,OAAgB,eAAgB,SAAQ,KAAK;IAOjD,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,8DAA8D;QAC9D,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE;YAClC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC5B,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAEjC,8CAA8C;QAC9C,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IACzD,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IAIzD,YACE,OAAe,EACf,WAAyC,EACzC,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACvD,YAAY,OAAe,EAAE,OAA+B,EAAE;QAC5D,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IAGvD,YACE,OAAe,EACf,YAA2B,EAC3B,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,eAAe;IAK1D,YACE,OAAe,EACf,OAAsF,EAAE;QAExF,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,8BAA+B,SAAQ,eAAe;IAIjE,YAAY,MAAc,EAAE,QAAuB,EAAE,OAA+B,EAAE;QACpF,KAAK,CACH,6CAA6C,MAAM,gCAAgC;YACjF,8EAA8E;YAC9E,qEAAqE,EACvE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CACpB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,0BAA2B,SAAQ,eAAe;IAC7D,YAAY,MAAc,EAAE,OAA+B,EAAE;QAC3D,KAAK,CACH,gDAAgD,MAAM,4BAA4B;YAChF,6CAA6C,EAC/C,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CACpB,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IAKzD,YACE,OAAe,EACf,UAII,EAAE,EACN,OAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,gCAAiC,SAAQ,sBAAsB;IAC1E,YACE,OAAe,EACN,UAAyB,EACzB,QAAuB,EACvB,UAAyB,EAClC,OAA6E,EAAE;QAE/E,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAL1E,eAAU,GAAV,UAAU,CAAe;QACzB,aAAQ,GAAR,QAAQ,CAAe;QACvB,eAAU,GAAV,UAAU,CAAe;IAIpC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,yBAA0B,SAAQ,sBAAsB;IACnE;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAClB,MAA2C,EAC3C,OAA+B,EAAE;QAEjC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9E,OAAO,IAAI,yBAAyB,CAClC,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,mCAAmC,EAC/D;YACE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC;YACxC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;YACtC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;SAChC,EACD,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CACpC,CAAC;IACJ,CAAC;IAOD,YACE,OAAe,EACf,SAKI,EAAE,EACN,OAA6E,EAAE;QAE/E,KAAK,CACH,OAAO,EACP,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EACnF,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CACxC,CAAC;QAnBc,SAAI,GAAG,aAAa,CAAC;QAoBrC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,mCAAoC,SAAQ,sBAAsB;IAC7E,YACE,OAAe,EACN,KAAoB,EACpB,MAAqB,EACrB,QAAuB,EACvB,UAAyB,EAClC,OAII,EAAE;QAEN,KAAK,CACH,OAAO,EACP;YACE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,wBAAwB;YAC3C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;SAC5B,EACD,IAAI,CACL,CAAC;QAlBO,UAAK,GAAL,KAAK,CAAe;QACpB,WAAM,GAAN,MAAM,CAAe;QACrB,aAAQ,GAAR,QAAQ,CAAe;QACvB,eAAU,GAAV,UAAU,CAAe;IAgBpC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,4BAA6B,SAAQ,mCAAmC;IAQnF,YACE,OAAe,EACf,SAaI,EAAE,EACN,OAA+B,EAAE;QAEjC,KAAK,CACH,OAAO,EACP,MAAM,CAAC,KAAK,IAAI,IAAI,EACpB,MAAM,CAAC,MAAM,IAAI,IAAI,EACrB,MAAM,CAAC,QAAQ,IAAI,IAAI,EACvB,MAAM,CAAC,UAAU,IAAI,IAAI,EACzB;YACE,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG;YAC1B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,iBAAiB;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;SAC9B,CACF,CAAC;QAtCK,eAAU,GAAG,iBAAiB,CAAC;QAuCtC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC;QACpF,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC5D,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oCAAqC,SAAQ,sBAAsB;IAC9E,YACE,OAAe,EACN,QAAuB,EACvB,KAAoB,EACpB,gBAA+B,EACxC,OAA6E,EAAE;QAE/E,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAL9E,aAAQ,GAAR,QAAQ,CAAe;QACvB,UAAK,GAAL,KAAK,CAAe;QACpB,qBAAgB,GAAhB,gBAAgB,CAAe;IAI1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,gCAAiC,SAAQ,sBAAsB;IAC1E,YACE,OAAe,EACN,QAAuB,EAChC,OAGI,EAAE;QAEN,KAAK,CACH,OAAO,EACP,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EACzF,IAAI,CACL,CAAC;QAVO,aAAQ,GAAR,QAAQ,CAAe;IAWlC,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,+BAAgC,SAAQ,sBAAsB;IACzE,YACE,OAAe,EACf,MAAqB,EACrB,OAA6E,EAAE;QAE/E,KAAK,CACH,OAAO,EACP,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EAClE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CACxC,CAAC;IACJ,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,qCAAsC,SAAQ,sBAAsB;IAC/E,YACE,OAAe,EACf,OAA6E,EAAE;QAE/E,KAAK,CACH,OAAO,EACP,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EACjE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { wrap } from "./wrap.js";
 export { prewarm, flushObservations } from "./prewarm.js";
 export { MissingConfigError, TensorCostConfigError } from "./config.js";
 export { UnsupportedClientError } from "./providers/detect.js";
-export { TensorCostError, TensorCostNetworkError, TensorCostTimeoutError, TensorCostProxyError, TensorCostQuotaError, TensorCostProviderError, TensorCostRunBudgetExceededError, TensorCostPeriodBudgetExceededError, TensorCostModelGovernanceDeniedError, TensorCostGuardrailHardStopError, TensorCostComplianceDeniedError, TensorCostComplianceTeamMismatchError, } from "./errors.js";
+export { TensorCostError, TensorCostNetworkError, TensorCostTimeoutError, TensorCostProxyError, TensorCostQuotaError, TensorCostProviderError, TensorCostGatewayRejectedError, TensorCostKeyRejectedError, TensorCostRefusedError, TensorCostBudgetHardCapError, TensorCostRunBudgetExceededError, TensorCostRunStoppedError, TensorCostPeriodBudgetExceededError, TensorCostModelGovernanceDeniedError, TensorCostGuardrailHardStopError, TensorCostComplianceDeniedError, TensorCostComplianceTeamMismatchError, } from "./errors.js";
 export type { LifecycleEvent, BeforeRequestEvent, AfterResponseEvent, OnRetryEvent, OnErrorEvent, OnFallbackEvent, LifecycleEventCallback, } from "./telemetry.js";
 export type { RetryConfig } from "./retry.js";
 export type { WrapOptions, Observation, Provider, ObservationModality, ControlLayer, DataGrant, } from "./types.js";
@@ -11,5 +11,5 @@ export { wrapLlamaIndex } from "./adapters/llamaindex.js";
 export { wrapCrewAI } from "./adapters/crewai.js";
 export { wrapVercelAi } from "./adapters/vercel-ai.js";
 export { intersectGrants } from "./layer.js";
-export declare const version = "1.3.0";
+export declare const version = "1.5.0";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,gCAAgC,EAChC,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,eAAO,MAAM,OAAO,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,EAC9B,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/index.js

@@ -2,11 +2,11 @@ export { wrap } from "./wrap.js";
 export { prewarm, flushObservations } from "./prewarm.js";
 export { MissingConfigError, TensorCostConfigError } from "./config.js";
 export { UnsupportedClientError } from "./providers/detect.js";
-export { TensorCostError, TensorCostNetworkError, TensorCostTimeoutError, TensorCostProxyError, TensorCostQuotaError, TensorCostProviderError, TensorCostRunBudgetExceededError, TensorCostPeriodBudgetExceededError, TensorCostModelGovernanceDeniedError, TensorCostGuardrailHardStopError, TensorCostComplianceDeniedError, TensorCostComplianceTeamMismatchError, } from "./errors.js";
+export { TensorCostError, TensorCostNetworkError, TensorCostTimeoutError, TensorCostProxyError, TensorCostQuotaError, TensorCostProviderError, TensorCostGatewayRejectedError, TensorCostKeyRejectedError, TensorCostRefusedError, TensorCostBudgetHardCapError, TensorCostRunBudgetExceededError, TensorCostRunStoppedError, TensorCostPeriodBudgetExceededError, TensorCostModelGovernanceDeniedError, TensorCostGuardrailHardStopError, TensorCostComplianceDeniedError, TensorCostComplianceTeamMismatchError, } from "./errors.js";
 export { wrapLangChain } from "./adapters/langchain.js";
 export { wrapLlamaIndex } from "./adapters/llamaindex.js";
 export { wrapCrewAI } from "./adapters/crewai.js";
 export { wrapVercelAi } from "./adapters/vercel-ai.js";
 export { intersectGrants } from "./layer.js";
-export const version = "1.3.0";
+export const version = "1.5.0";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,gCAAgC,EAChC,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,aAAa,CAAC;AAmBrB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,EAC9B,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,aAAa,CAAC;AAmBrB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/dist/provider-errors.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Rethrowing a relayed provider error as the provider SDK's own type.
+ *
+ * When the proxy relays an OpenAI 400, a caller written against the openai
+ * package expects `openai.BadRequestError`, not a TensorCost class. Both
+ * openai@4 and @anthropic-ai/sdk build their status errors through the
+ * client's `makeStatusError(status, body, message, headers)` (which calls
+ * `APIError.generate`), so the SDK asks the client to build it, exactly as
+ * the client would have for a direct call. Clients without that method, or
+ * whose factory rejects both header shapes below, get the
+ * TensorCostProviderError as is.
+ */
+/** The provider SDK's error for `err`, or `err` itself when one can't be built. */
+export declare function providerNativeError(client: unknown, err: unknown): unknown;
+//# sourceMappingURL=provider-errors.d.ts.map

package/dist/provider-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-errors.d.ts","sourceRoot":"","sources":["../src/provider-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuCH,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAsB1E"}

package/dist/provider-errors.js

@@ -0,0 +1,69 @@
+/**
+ * Rethrowing a relayed provider error as the provider SDK's own type.
+ *
+ * When the proxy relays an OpenAI 400, a caller written against the openai
+ * package expects `openai.BadRequestError`, not a TensorCost class. Both
+ * openai@4 and @anthropic-ai/sdk build their status errors through the
+ * client's `makeStatusError(status, body, message, headers)` (which calls
+ * `APIError.generate`), so the SDK asks the client to build it, exactly as
+ * the client would have for a direct call. Clients without that method, or
+ * whose factory rejects both header shapes below, get the
+ * TensorCostProviderError as is.
+ */
+import { TensorCostProviderError } from "./errors.js";
+function statusErrorFactory(client) {
+    if (!client || typeof client !== "object")
+        return null;
+    const c = client;
+    if (typeof c["makeStatusError"] === "function") {
+        return c["makeStatusError"].bind(client);
+    }
+    // Older shapes expose the error class on the constructor instead.
+    const ctor = client.constructor;
+    const apiError = ctor?.["APIError"];
+    if (apiError && typeof apiError.generate === "function") {
+        return apiError.generate.bind(apiError);
+    }
+    return null;
+}
+/**
+ * The two header shapes the factories expect. openai@4 reads
+ * `headers["x-request-id"]` off a plain object; openai v5/v6 and current
+ * @anthropic-ai/sdk call `headers.get(...)` on a `Headers` instance and throw
+ * on a plain object. The plain object goes first (openai@4 would take a
+ * `Headers` too but lose the request id), then a `Headers` instance.
+ */
+function headerShapes(headers) {
+    const shapes = [headers];
+    if (typeof Headers === "function")
+        shapes.push(new Headers(headers));
+    return shapes;
+}
+/** The provider SDK's error for `err`, or `err` itself when one can't be built. */
+export function providerNativeError(client, err) {
+    if (!(err instanceof TensorCostProviderError) || err.status === null)
+        return err;
+    const make = statusErrorFactory(client);
+    if (!make)
+        return err;
+    const body = err.body !== null && typeof err.body === "object" ? err.body : undefined;
+    for (const headers of headerShapes(err.headers)) {
+        let native;
+        try {
+            native = make(err.status, body, undefined, headers);
+        }
+        catch {
+            continue;
+        }
+        if (native instanceof Error) {
+            Object.defineProperty(native, "tensorcost", {
+                value: err,
+                enumerable: false,
+                configurable: true,
+            });
+            return native;
+        }
+    }
+    return err;
+}
+//# sourceMappingURL=provider-errors.js.map

package/dist/provider-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-errors.js","sourceRoot":"","sources":["../src/provider-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAStD,SAAS,kBAAkB,CAAC,MAAe;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IAAI,OAAO,CAAC,CAAC,iBAAiB,CAAC,KAAK,UAAU,EAAE,CAAC;QAC/C,OAAQ,CAAC,CAAC,iBAAiB,CAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,kEAAkE;IAClE,MAAM,IAAI,GAAI,MAAoD,CAAC,WAAW,CAAC;IAC/E,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,UAAU,CAA+C,CAAC;IAClF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,OAA+B;IACnD,MAAM,MAAM,GAAc,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,GAAY;IAC/D,IAAI,CAAC,CAAC,GAAG,YAAY,uBAAuB,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACjF,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE;gBAC1C,KAAK,EAAE,GAAG;gBACV,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/providers/anthropic.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Anthropic client wrapping.
+ *
+ * Intercepts `client.messages.create`. Same observation contract as the
+ * OpenAI wrapper — only metadata is captured (model, input/output tokens),
+ * never the message content itself.
+ *
+ * Applied-mode hardening (v0.4.0): messages.create routes through the
+ * proxy-client module, which handles retries, timeouts, typed errors,
+ * telemetry hooks, and the fail-open circuit breaker.
+ */
+import type { ObservationTransport } from "../transport.js";
+import type { CircuitBreaker } from "../circuit.js";
+import type { LifecycleEventCallback } from "../telemetry.js";
+import type { RetryConfig } from "../retry.js";
+import type { ControlLayer } from "../layer.js";
+import type { SdkLayerClient } from "../sdk-layer.js";
+export interface AppliedModeHardeningOpts {
+    maxLayer: ControlLayer;
+    appliedMode: boolean;
+    proxyUrl: string | null;
+    baseUrl: string;
+    sdkLayer: SdkLayerClient;
+    retry: RetryConfig;
+    timeoutMs: number;
+    headersTimeoutMs: number;
+    idleTimeoutMs: number;
+    onLifecycleEvent: LifecycleEventCallback | undefined;
+    failOpenEnabled: boolean;
+    circuit: CircuitBreaker;
+    application?: string | null;
+    tags?: string[];
+    customer?: string | null;
+    feature?: string | null;
+    teamId?: string | null;
+}
+/**
+ * The layer an Anthropic client actually runs at.
+ *
+ * The proxy has no Anthropic Messages route yet, so steer/route can't put
+ * the proxy in the request path for Claude. Before 1.5.0 that proxy call
+ * failed and fail-open sent the call straight to Anthropic, which meant
+ * nothing could stop a Claude run. Govern runs the pre-call /admit check
+ * instead, so stops, caps and budgets still apply. One warning per
+ * process says so.
+ */
+export declare function anthropicLayer(requested: ControlLayer): ControlLayer;
+export declare function install(client: unknown, transport: ObservationTransport, tenantId: string | null, environment: string | null, connectionId: string | null, hardeningIn: AppliedModeHardeningOpts, deployment?: string | null, promptTemplateId?: string | null, agentId?: string | null, workflowId?: string | null): void;
+export declare const __test__: {
+    MARKER: string;
+    WITH_META_MARKER: string;
+    resetPinWarning(): void;
+};
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/providers/anthropic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAqB5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAQtD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAifD,wBAAgB,OAAO,CACrB,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,oBAAoB,EAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,SAAS,EAAE,wBAAwB,EACnC,UAAU,GAAE,MAAM,GAAG,IAAW,EAChC,gBAAgB,GAAE,MAAM,GAAG,IAAW,EACtC,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,UAAU,GAAE,MAAM,GAAG,IAAW,GAC/B,IAAI,CAyGN;AAED,eAAO,MAAM,QAAQ;;;CAA+B,CAAC"}
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAuB5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAatD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAyfD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,YAAY,GAAG,YAAY,CAcpE;AAED,wBAAgB,OAAO,CACrB,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,oBAAoB,EAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,EAAE,wBAAwB,EACrC,UAAU,GAAE,MAAM,GAAG,IAAW,EAChC,gBAAgB,GAAE,MAAM,GAAG,IAAW,EACtC,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,UAAU,GAAE,MAAM,GAAG,IAAW,GAC/B,IAAI,CA8GN;AAED,eAAO,MAAM,QAAQ;;;uBAGA,IAAI;CAGxB,CAAC"}

package/dist/providers/anthropic.js

@@ -13,13 +13,15 @@ import { proxyRequest, proxyRequestStream, sseChunksFromStream, shouldFallBackTo
 import { admitRequest } from "../admit-client.js";
 import { assertTeamScope, complianceStampFrom, enforceInProcessDlp, } from "../compliance-guard.js";
 import { extractAnthropicMessagesText } from "../dlp.js";
-import { TensorCostProxyError, TensorCostModelGovernanceDeniedError, TensorCostComplianceDeniedError, TensorCostComplianceTeamMismatchError, } from "../errors.js";
+import { TensorCostProxyError, TensorCostComplianceDeniedError, TensorCostComplianceTeamMismatchError, TensorCostRefusedError, } from "../errors.js";
+import { providerTarget } from "../applied.js";
+import { providerNativeError } from "../provider-errors.js";
 import { emitEvent } from "../telemetry.js";
 import { needsProxyUrl } from "../layer.js";
 import { decisionMetadata } from "../decision.js";
 import { SDK_VERSION } from "../version.js";
 import { resolveModelCallLink } from "../trace-link.js";
-import { WrapOverhead, postObservation, withAwaitExcluded } from "../wrap-overhead.js";
+import { WrapOverhead, observationScope, postObservation, withAwaitExcluded, } from "../wrap-overhead.js";
 const MARKER = "__tensorcost_wrapped__";
 const WITH_META_MARKER = "__tensorcost_with_meta__";
 function nowIso() {
@@ -113,16 +115,26 @@ function wrapMethod(bound, opts) {
                             team_id: opts.hardening.teamId ?? null,
                         },
                         transport: opts.transport,
-                        failOpen: true,
+                        failOpen: opts.hardening.failOpenEnabled,
                     });
                 });
                 if (!admit.allowed) {
-                    throw new TensorCostModelGovernanceDeniedError("tensorcost: request refused at govern layer", "anthropic", String(model), null, { attempt: 1 });
+                    // The admit client types every refusal by its code. The generic
+                    // error is only a guard; it used to say "model governance" for
+                    // every refusal, budget caps included.
+                    throw (admit.refusal ??
+                        new TensorCostRefusedError("tensorcost: request refused at govern layer", {}, {
+                            status: 403,
+                            attempt: 1,
+                        }));
                 }
                 decisionMeta = decisionMetadata(admit.decisionHeader);
             }
             catch (err) {
-                if (err instanceof TensorCostModelGovernanceDeniedError)
+                // Same rule as the proxy path: go around TensorCost only when it
+                // is unavailable (token exchange or admit unreachable), and only
+                // with failOpenEnabled. A refusal, known code or not, stops the call.
+                if (!shouldFallBackToProvider(err) || !opts.hardening.failOpenEnabled)
                     throw err;
             }
         }
@@ -140,15 +152,11 @@ function wrapMethod(bound, opts) {
                 ? { compliance_frameworks: complianceStamp.compliance_frameworks }
                 : {}),
             ...(complianceStamp.dlp_action ? { dlp_action: complianceStamp.dlp_action } : {}),
+            ...observationScope(opts.hardening.application, opts.hardening.tags),
         });
         const proxyUrl = opts.hardening.proxyUrl;
         if (needsProxyUrl(effectiveLayer) && proxyUrl) {
-            // Read the original provider URL from defaultHeaders (set at installAppliedMode).
-            const dh = opts.clientRef && typeof opts.clientRef === "object"
-                ? opts.clientRef["defaultHeaders"]
-                : undefined;
-            const providerUrl = dh?.["x-tc-provider-url"] ?? "https://api.anthropic.com";
-            const providerAuth = dh?.["x-tc-provider-auth"] ?? "";
+            const { providerUrl, providerAuth } = providerTarget(opts.clientRef, "anthropic", "https://api.anthropic.com");
             const body = {
                 ...(firstArg && typeof firstArg === "object" ? firstArg : {}),
                 model: String(model),
@@ -234,7 +242,7 @@ function wrapMethod(bound, opts) {
                 }
                 catch (proxyErr) {
                     if (!shouldFallBackToProvider(proxyErr))
-                        throw proxyErr;
+                        throw providerNativeError(opts.clientRef, proxyErr);
                     proxyFailed = true;
                     proxyFailureError = proxyErr;
                 }
@@ -436,9 +444,38 @@ function wrapMethod(bound, opts) {
     Object.defineProperty(wrapped, MARKER, { value: true, enumerable: false });
     return wrapped;
 }
-export function install(client, transport, tenantId, environment, connectionId, hardening, deployment = null, promptTemplateId = null, agentId = null, workflowId = null) {
+let pinWarned = false;
+/**
+ * The layer an Anthropic client actually runs at.
+ *
+ * The proxy has no Anthropic Messages route yet, so steer/route can't put
+ * the proxy in the request path for Claude. Before 1.5.0 that proxy call
+ * failed and fail-open sent the call straight to Anthropic, which meant
+ * nothing could stop a Claude run. Govern runs the pre-call /admit check
+ * instead, so stops, caps and budgets still apply. One warning per
+ * process says so.
+ */
+export function anthropicLayer(requested) {
+    if (!needsProxyUrl(requested))
+        return requested;
+    if (!pinWarned) {
+        pinWarned = true;
+        // eslint-disable-next-line no-console
+        console.warn(`tensorcost: maxLayer '${requested}' isn't available for Anthropic clients yet ` +
+            "(the TensorCost proxy has no Anthropic Messages route), so this client runs " +
+            "in 'govern': every call is checked with /admit before it goes to Anthropic, " +
+            "which is what lets a run be stopped or capped. Set maxLayer: 'govern' to " +
+            "silence this warning.");
+    }
+    return "govern";
+}
+export function install(client, transport, tenantId, environment, connectionId, hardeningIn, deployment = null, promptTemplateId = null, agentId = null, workflowId = null) {
     if (!client || typeof client !== "object")
         return;
+    const pinned = anthropicLayer(hardeningIn.maxLayer);
+    const hardening = pinned === hardeningIn.maxLayer
+        ? hardeningIn
+        : { ...hardeningIn, maxLayer: pinned, appliedMode: false };
     const c = client;
     const messages = c.messages;
     let originalMessagesBound;
@@ -521,5 +558,11 @@ export function install(client, transport, tenantId, environment, connectionId,
         };
     }
 }
-export const __test__ = { MARKER, WITH_META_MARKER };
+export const __test__ = {
+    MARKER,
+    WITH_META_MARKER,
+    resetPinWarning() {
+        pinWarned = false;
+    },
+};
 //# sourceMappingURL=anthropic.js.map