@to11ai/sdk 2.0.0-rc.2 → 2.0.0-rc.4

package/dist/client.d.ts

@@ -1,27 +1,20 @@
 import { type Conversation, Session, type Turn } from "./context";
 import { ProjectEnvironmentResource } from "./projectEnvironments/resource";
-import type { CacheConfig } from "./prompts/cache";
 import { PromptResource } from "./prompts/resource";
 import { type RenderFormat, type UnknownRoleMode } from "./prompts/types";
-import { RoutingRulesResource } from "./routingRules/resource";
-export { BehaviorStore, type BehaviorStoreOptions, envVarNameForKey, type SdkBehaviorEnvelope, } from "./behaviors/store";
 export type { TurnAuthContext } from "./context";
 export { Conversation, Session, Turn } from "./context";
-export type { AmbiguousEnvLabelsReason, EnvNotFoundReason, NoActiveReleaseReason, NoApplicableRouteReason, PromptNotFoundReason, PromptPolicyViolationReason, } from "./errors";
-export { AmbiguousEnvLabelsError, EnvNotEnabledForProviderError, EnvNotFoundError, NoActiveReleaseError, NoApplicableRouteError, PromptLabelNotRegisteredError, PromptNotFoundError, PromptPolicyViolationError, RuleNotFoundError, RuleVersionInvalidSnapshotError, To11aiApiError, To11aiAuthError, To11aiError, To11aiNetworkError, To11aiRateLimitError, To11aiValidationError, UnknownRoleError, } from "./errors";
+export type { NoActiveReleaseReason, PromptNotFoundReason, PromptPolicyViolationReason, } from "./errors";
+export { LabelNotFoundError, MissingLabelError, NoActiveReleaseError, PromptLabelNotRegisteredError, PromptNotFoundError, PromptPolicyViolationError, To11aiApiError, To11aiAuthError, To11aiError, To11aiNetworkError, To11aiRateLimitError, To11aiValidationError, UnknownRoleError, } from "./errors";
 export type { ConvertMessagesOptions, GatewayAuthOptions } from "./gateway";
 export { gatewayAuthHeaders, gatewayPromptHeaders } from "./gateway";
 export type { ArchiveProjectEnvironmentInput, ArchiveProjectEnvironmentResult, CreateProjectEnvironmentInput, CreateProjectEnvironmentResult, GetProjectEnvironmentInput, GetProjectEnvironmentResult, ListProjectEnvironmentsInput, ListProjectEnvironmentsResult, LivePointerCounts, ProjectEnvironment, RestoreProjectEnvironmentInput, RestoreProjectEnvironmentResult, UpdateProjectEnvironmentInput, UpdateProjectEnvironmentResult, } from "./projectEnvironments/resource";
 export { ProjectEnvironmentResource } from "./projectEnvironments/resource";
-export type { CacheConfig } from "./prompts/cache";
 export type { PromptResourceConfig } from "./prompts/resource";
 export { PromptResource } from "./prompts/resource";
 export type { AnthropicRenderedPrompt, OpenAiRenderedPrompt, PromptConfig, PromptMetadata, RenderResult, } from "./prompts/shape";
-export type { BlockRenderRecord, RenderedChatMessage, RenderedPrompt, RenderFormat, RenderOptions, ResolvedPrompt, ResolvedPromptEnvelope, UnknownRoleMode, } from "./prompts/types";
+export type { BlockRenderRecord, RenderedChatMessage, RenderedPrompt, RenderFormat, RenderOptions, UnknownRoleMode, } from "./prompts/types";
 export { ENV_SLUG_REGEX } from "./prompts/types";
-export type { CreateRuleVersionInput, CreateRuleVersionResult, GetRuleVersionInput, GetRuleVersionResult, ListRuleReleasesInput, ListRuleReleasesResult, ListRuleVersionsInput, ListRuleVersionsResult, RollbackRuleReleaseInput, RollbackRuleReleaseResult, RuleModelBinding, RuleProviderRef, RuleRelease, RuleReleaseActorType, RuleReleaseApprovalStatus, RuleReleaseChangeKind, RuleReleaseStrategy, RuleReleaseWeight, RuleSnapshot, RuleStrategy, RuleVersion, SetRuleReleaseInput, SetRuleReleaseResult, } from "./routingRules/resource";
-export { RoutingRuleReleaseResource, RoutingRulesResource, RoutingRuleVersionResource, } from "./routingRules/resource";
-export type { Transport } from "./transport";
 export interface ClientOptions {
     /**
      * Control-plane base URL. Precedence: this option → `TO11_API_URL` env →
@@ -34,12 +27,11 @@ export interface ClientOptions {
      */
     gatewayUrl?: string;
     /**
-     * API key for server-side use. Precedence: this option → `TO11_API_KEY` env.
-     * Rejected in browser contexts — use `getAccessToken` there.
+     * API key for server-side use (server, CLI, backend job). Precedence: this
+     * option → `TO11_API_KEY` env. Required. Rejected in browser contexts — a
+     * to11 API key carries gateway access and must never ship in client code.
      */
     apiKey?: string;
-    /** Token callback for browser / edge contexts — avoids static secrets. */
-    getAccessToken?: () => Promise<string>;
     /**
      * Provider API key (BYOK) carried by `openaiOptions()` / `anthropicOptions()`
      * as the provider client's `apiKey`, so a BYOK call is a single
@@ -74,17 +66,10 @@ export interface ClientOptions {
      * via `render(slug, { onUnknownRole })`.
      */
     onUnknownRole?: UnknownRoleMode;
-    /** LRU cache configuration for render(). Defaults: ttlSeconds=300, maxEntries=100 */
-    cache?: CacheConfig;
     /** Request timeout in milliseconds. Default: 30_000 */
     timeoutMs?: number;
     /** Max retry attempts for network errors / 5xx. Default: 3 */
     maxRetries?: number;
-    /**
-     * Purely local overrides for server-evaluated SDK-behavior flags (TO11-2100).
-     * An init option here wins over a `TO11_SDK_BEHAVIOR_*` env var. No LaunchDarkly.
-     */
-    behaviorOverrides?: Record<string, unknown>;
 }
 /**
  * Overrides accepted by `openaiOptions()` / `anthropicOptions()`. The three
@@ -112,21 +97,23 @@ export type ProviderClientOptions<T extends ProviderClientOverrides = ProviderCl
 export interface To11aiClient<F extends RenderFormat | undefined = undefined> {
     readonly prompts: PromptResource<F>;
     readonly projectEnvironments: ProjectEnvironmentResource;
-    readonly routingRules: RoutingRulesResource;
-    /**
-     * Resolve a server-evaluated SDK-behavior flag value (TO11-2100) under the
-     * fixed precedence: local override (init option → `TO11_SDK_BEHAVIOR_*` env
-     * var) → server-delivered value (captured from responses the client has
-     * already made) → the `codedDefault` passed here. A value whose runtime type
-     * disagrees with `codedDefault` falls through to the next tier. The SDK
-     * carries no LaunchDarkly dependency; this only reads what the server
-     * delivered on the envelope.
-     */
-    readonly resolveBehavior: <T>(key: string, codedDefault: T) => T;
-    /** Resolved API key (server mode); `undefined` in browser (`getAccessToken`) mode. */
-    readonly apiKey: string | undefined;
+    /** Resolved API key (option → `TO11_API_KEY`). */
+    readonly apiKey: string;
+    /** Resolved control-plane base URL (option → `TO11_API_URL` → default). */
+    readonly baseUrl: string;
     /** Resolved data-plane gateway URL (option → `TO11_GATEWAY_URL` → default). */
     readonly gatewayUrl: string;
+    /**
+     * Resolved project id (option → `TO11_PROJECT_ID`); `undefined` when none is
+     * configured. Read-only, for your own logging / manual headers — `prompts.*`
+     * already default to it, so you don't need to pass it back into calls.
+     */
+    readonly projectId: string | undefined;
+    /**
+     * Resolved default serving environment (option → `TO11_ENV`); `undefined`
+     * when none is configured. `prompts.render()` already defaults to it.
+     */
+    readonly env: string | undefined;
     /** A new session (unit of work). Pass an id to group telemetry by your own id. */
     session(id?: string): Session;
     /**
@@ -168,9 +155,8 @@ export interface To11aiClient<F extends RenderFormat | undefined = undefined> {
  *  - URLs (`baseUrl` / `gatewayUrl`) — option → env var → built-in default.
  *  - `apiKey` / `projectId` — option → env var (no default).
  *  - `env` / `format` — option only.
- * Auth mode:
- *  - `apiKey` (or `TO11_API_KEY`) → server-side; rejected in browser contexts.
- *  - `getAccessToken`             → browser-safe; token fetched per request.
+ * Authenticate with `apiKey` (or `TO11_API_KEY`) — required, and server-side
+ * only (server, CLI, backend job); constructing with `apiKey` in a browser throws.
  *
  * @example Minimal setup (single call)
  * import { createClient } from "@to11ai/sdk";

package/dist/client.js

@@ -10,24 +10,15 @@ import { PromptResource } from "./prompts/resource";
 import {
   ENV_SLUG_REGEX
 } from "./prompts/types";
-import { RoutingRulesResource } from "./routingRules/resource";
 import { Transport } from "./transport";
-import {
-  BehaviorStore as BehaviorStore2,
-  envVarNameForKey
-} from "./behaviors/store";
 import { Conversation, Session as Session2, Turn } from "./context";
 import {
-  AmbiguousEnvLabelsError,
-  EnvNotEnabledForProviderError,
-  EnvNotFoundError,
+  LabelNotFoundError,
+  MissingLabelError,
   NoActiveReleaseError,
-  NoApplicableRouteError,
   PromptLabelNotRegisteredError,
   PromptNotFoundError,
   PromptPolicyViolationError,
-  RuleNotFoundError,
-  RuleVersionInvalidSnapshotError,
   To11aiApiError,
   To11aiAuthError,
   To11aiError,
@@ -40,11 +31,6 @@ import { gatewayAuthHeaders as gatewayAuthHeaders2, gatewayPromptHeaders } from
 import { ProjectEnvironmentResource as ProjectEnvironmentResource2 } from "./projectEnvironments/resource";
 import { PromptResource as PromptResource2 } from "./prompts/resource";
 import { ENV_SLUG_REGEX as ENV_SLUG_REGEX2 } from "./prompts/types";
-import {
-  RoutingRuleReleaseResource,
-  RoutingRulesResource as RoutingRulesResource2,
-  RoutingRuleVersionResource
-} from "./routingRules/resource";
 function createClient(options = {}) {
   const isDomBrowser = typeof globalThis === "object" && typeof globalThis.document !== "undefined";
   const workerLikeGlobal = globalThis;
@@ -61,13 +47,12 @@ function createClient(options = {}) {
   };
   const baseUrl = pick(options.baseUrl, "TO11_API_URL") ?? DEFAULT_API_URL;
   const gatewayUrl = (pick(options.gatewayUrl, "TO11_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL).replace(/\/+$/, "").replace(/\/v1$/, "");
-  const getAccessToken = options.getAccessToken;
-  const apiKey = getAccessToken !== undefined ? options.apiKey : pick(options.apiKey, "TO11_API_KEY");
+  const apiKey = pick(options.apiKey, "TO11_API_KEY");
   const projectId = pick(options.projectId, "TO11_PROJECT_ID");
   const env = pick(options.env, "TO11_ENV");
   const providerApiKey = options.providerApiKey?.trim() || undefined;
   if (isBrowser && options.apiKey !== undefined) {
-    throw new Error("[to11ai/sdk] Do not use `apiKey` in browser contexts — use `getAccessToken` instead.");
+    throw new Error("[to11ai/sdk] Do not use `apiKey` in a browser — a to11 API key carries gateway access and must stay server-side (server, CLI, or backend job).");
   }
   if (options.apiKey !== undefined && options.apiKey.trim() === "") {
     throw new Error("[to11ai/sdk] `apiKey` must not be an empty string.");
@@ -81,16 +66,11 @@ function createClient(options = {}) {
   if (env !== undefined && !ENV_SLUG_REGEX.test(env)) {
     throw new Error(`[to11ai/sdk] \`env\` must match ${ENV_SLUG_REGEX} (lowercase-kebab, 1-63 chars). Received: ${JSON.stringify(env)}`);
   }
-  const hasApiKey = apiKey !== undefined;
-  const hasGetAccessToken = getAccessToken !== undefined;
-  if (hasApiKey === hasGetAccessToken) {
-    throw new Error("[to11ai/sdk] Provide exactly one of `apiKey` (or `TO11_API_KEY`) or `getAccessToken`.");
+  if (apiKey === undefined) {
+    throw new Error("[to11ai/sdk] An `apiKey` (or `TO11_API_KEY`) is required.");
   }
-  const auth = hasApiKey ? { apiKey } : { getAccessToken };
-  const behaviorStore = new BehaviorStore({
-    initOverrides: options.behaviorOverrides,
-    env: processEnv
-  });
+  const auth = { apiKey };
+  const behaviorStore = new BehaviorStore({ env: processEnv });
   const transport = new Transport({
     baseUrl,
     auth,
@@ -98,18 +78,14 @@ function createClient(options = {}) {
     maxRetries: options.maxRetries,
     behaviorStore
   });
-  const prompts = new PromptResource(transport, options.cache, {
+  const prompts = new PromptResource(transport, {
     projectId,
     env,
     format: options.format,
     onUnknownRole: options.onUnknownRole
   });
   const projectEnvironments = new ProjectEnvironmentResource(transport);
-  const routingRules = new RoutingRulesResource(transport);
   const gatewayAuthContext = () => {
-    if (apiKey === undefined) {
-      throw new Error("[to11ai/sdk] session()/turn()/openaiOptions() need an `apiKey` (or `TO11_API_KEY`) — gateway calls require a server-side key. In the browser use `getAccessToken` for control-plane calls only.");
-    }
     if (projectId === undefined) {
       throw new Error("[to11ai/sdk] session()/turn() need a `projectId` (or `TO11_PROJECT_ID`).");
     }
@@ -123,9 +99,6 @@ function createClient(options = {}) {
     return defaultSession;
   };
   const gatewayClientOptions = (defaultBaseURL, overrides) => {
-    if (apiKey === undefined) {
-      throw new Error("[to11ai/sdk] openaiOptions()/anthropicOptions() need an `apiKey` (or `TO11_API_KEY`) — gateway calls require a server-side key. In the browser use `getAccessToken` for control-plane calls only.");
-    }
     if (projectId === undefined) {
       throw new Error("[to11ai/sdk] openaiOptions()/anthropicOptions() need a `projectId` (or `TO11_PROJECT_ID`) — it authenticates the gateway call via `x-to11-project-id`.");
     }
@@ -146,10 +119,11 @@ function createClient(options = {}) {
   return {
     prompts,
     projectEnvironments,
-    routingRules,
-    resolveBehavior: (key, codedDefault) => behaviorStore.resolve(key, codedDefault),
     apiKey,
+    baseUrl,
     gatewayUrl,
+    projectId,
+    env,
     session: (id) => new Session(gatewayAuthContext(), id),
     conversation: (id) => clientDefaultSession().conversation(id),
     turn: () => clientDefaultSession().turn(),
@@ -160,7 +134,6 @@ function createClient(options = {}) {
 export {
   gatewayPromptHeaders,
   gatewayAuthHeaders2 as gatewayAuthHeaders,
-  envVarNameForKey,
   createClient,
   UnknownRoleError,
   Turn,
@@ -171,22 +144,14 @@ export {
   To11aiAuthError,
   To11aiApiError,
   Session2 as Session,
-  RuleVersionInvalidSnapshotError,
-  RuleNotFoundError,
-  RoutingRulesResource2 as RoutingRulesResource,
-  RoutingRuleVersionResource,
-  RoutingRuleReleaseResource,
   PromptResource2 as PromptResource,
   PromptPolicyViolationError,
   PromptNotFoundError,
   PromptLabelNotRegisteredError,
   ProjectEnvironmentResource2 as ProjectEnvironmentResource,
-  NoApplicableRouteError,
   NoActiveReleaseError,
-  EnvNotFoundError,
-  EnvNotEnabledForProviderError,
+  MissingLabelError,
+  LabelNotFoundError,
   ENV_SLUG_REGEX2 as ENV_SLUG_REGEX,
-  Conversation,
-  BehaviorStore2 as BehaviorStore,
-  AmbiguousEnvLabelsError
+  Conversation
 };

package/dist/errors.cjs

@@ -54,9 +54,9 @@ __export(exports_errors, {
   PromptLabelNotRegisteredError: () => PromptLabelNotRegisteredError,
   NoApplicableRouteError: () => NoApplicableRouteError,
   NoActiveReleaseError: () => NoActiveReleaseError,
-  EnvNotFoundError: () => EnvNotFoundError,
-  EnvNotEnabledForProviderError: () => EnvNotEnabledForProviderError,
-  AmbiguousEnvLabelsError: () => AmbiguousEnvLabelsError
+  MissingLabelError: () => MissingLabelError,
+  LabelNotFoundError: () => LabelNotFoundError,
+  EnvNotEnabledForProviderError: () => EnvNotEnabledForProviderError
 });
 module.exports = __toCommonJS(exports_errors);
 
@@ -226,19 +226,27 @@ class PromptNotFoundError extends To11aiApiError {
   }
 }
 
-class EnvNotFoundError extends To11aiApiError {
-  reason;
-  constructor(message, reason, details, statusCode) {
+class LabelNotFoundError extends To11aiApiError {
+  label;
+  constructor(message, label, details, statusCode) {
     super(message, statusCode, "ENV_NOT_FOUND", details);
-    this.name = "EnvNotFoundError";
-    this.reason = reason;
+    this.name = "LabelNotFoundError";
+    this.label = label;
     Object.setPrototypeOf(this, new.target.prototype);
   }
-  static missing(env) {
-    return new EnvNotFoundError("[to11ai/sdk] No environment resolvable for prompts.render(): none supplied at client init and none supplied per call. Pass `env` to createClient or render(slug, { env }).", { env, source: "missing" }, undefined, 0);
+  static is(err) {
+    return err instanceof LabelNotFoundError;
+  }
+}
+
+class MissingLabelError extends To11aiError {
+  constructor(message = "[to11ai/sdk] No label resolvable for prompts.render(): none supplied per call, and no client env (or TO11_ENV) to fall back to. Pass `label` to render(slug, { label }) or set `env` on createClient.") {
+    super(message);
+    this.name = "MissingLabelError";
+    Object.setPrototypeOf(this, new.target.prototype);
   }
   static is(err) {
-    return err instanceof EnvNotFoundError;
+    return err instanceof MissingLabelError;
   }
 }
 
@@ -268,19 +276,6 @@ class PromptPolicyViolationError extends To11aiApiError {
   }
 }
 
-class AmbiguousEnvLabelsError extends To11aiApiError {
-  reason;
-  constructor(message, reason, details, statusCode = 409) {
-    super(message, statusCode, "AMBIGUOUS_ENV_LABELS", details);
-    this.name = "AmbiguousEnvLabelsError";
-    this.reason = reason;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-  static is(err) {
-    return err instanceof AmbiguousEnvLabelsError;
-  }
-}
-
 class RuleVersionInvalidSnapshotError extends To11aiApiError {
   field;
   reason;

package/dist/errors.d.ts

@@ -171,35 +171,29 @@ export declare class PromptNotFoundError extends To11aiApiError {
     static is(err: unknown): err is PromptNotFoundError;
 }
 /**
- * Reason payload for `EnvNotFoundError`.
+ * Thrown when the label supplied to `prompts.render()` does not resolve to an
+ * existing (active) label on the server. Surfaced from the server's
+ * `ENV_NOT_FOUND` code; `label` carries the rejected slug when the server
+ * echoes it.
  *
- * `source` discriminates the two failure modes (D2):
- *   - `"missing"` — no env was supplied at init OR at call time. Raised
- *     CLIENT-side, eagerly, before any request (R4 / AC4); `env` is absent.
- *   - `"unknown"` — an env was supplied but the server's registry has no
- *     such (active) env. Surfaced from the `ENV_NOT_FOUND` server code; `env`
- *     carries the rejected slug when the server echoes it.
+ * This is distinct from `MissingLabelError`, which is raised client-side when
+ * no label was supplied at all.
  */
-export interface EnvNotFoundReason {
-    env?: string;
-    source: "missing" | "unknown";
+export declare class LabelNotFoundError extends To11aiApiError {
+    /** The label slug that could not be found, when the server echoes it. */
+    readonly label?: string;
+    constructor(message: string, label: string | undefined, details: unknown, statusCode: number);
+    static is(err: unknown): err is LabelNotFoundError;
 }
 /**
- * Thrown when no serving environment can be resolved for a `prompts.render()`
- * call. One class, two `reason.source` discriminants (see
- * `EnvNotFoundReason`): client-eager `"missing"` (R4) and server-forwarded
- * `"unknown"` (`ENV_NOT_FOUND`).
- *
- * The client-eager variant carries no `statusCode`/`errorCode` from the wire
- * (no request was made); it reports status `0` and errorCode `ENV_NOT_FOUND`
- * for a uniform catch surface.
+ * Thrown CLIENT-side, eagerly (before any request), when `prompts.render()` is
+ * called but no label is resolvable at all: none supplied per call, and no
+ * client `env` (or `TO11_ENV`) to fall back to. A usage error, not a lookup
+ * failure — distinct from `LabelNotFoundError`.
  */
-export declare class EnvNotFoundError extends To11aiApiError {
-    readonly reason: EnvNotFoundReason;
-    constructor(message: string, reason: EnvNotFoundReason, details: unknown, statusCode: number);
-    /** Build the client-eager (missing-at-both) variant — no transport call. */
-    static missing(env?: string): EnvNotFoundError;
-    static is(err: unknown): err is EnvNotFoundError;
+export declare class MissingLabelError extends To11aiError {
+    constructor(message?: string);
+    static is(err: unknown): err is MissingLabelError;
 }
 /**
  * Reason payload for `NoActiveReleaseError`.
@@ -250,28 +244,6 @@ export declare class PromptPolicyViolationError extends To11aiApiError {
     constructor(message: string, reason: PromptPolicyViolationReason, details?: unknown, statusCode?: number);
     static is(err: unknown): err is PromptPolicyViolationError;
 }
-/**
- * Reason payload for `AmbiguousEnvLabelsError`.
- *
- * Carried when the supplied env-label matched more than one candidate
- * version and the server cannot pick deterministically
- * (`AMBIGUOUS_ENV_LABELS`).
- */
-export interface AmbiguousEnvLabelsReason {
-    env?: string;
-    slug?: string;
-}
-/**
- * Thrown when the env→label resolution is ambiguous on the server
- * (`AMBIGUOUS_ENV_LABELS`) — the label matched multiple candidates and the
- * server declines to guess. Surfaces (rather than 500ing) so callers get a
- * typed, actionable error.
- */
-export declare class AmbiguousEnvLabelsError extends To11aiApiError {
-    readonly reason: AmbiguousEnvLabelsReason;
-    constructor(message: string, reason: AmbiguousEnvLabelsReason, details?: unknown, statusCode?: number);
-    static is(err: unknown): err is AmbiguousEnvLabelsError;
-}
 /**
  * Thrown when version create rejects the snapshot for a structural
  * reason — invalid variant params, malformed `when` clause, illegal

package/dist/errors.js

@@ -165,19 +165,27 @@ class PromptNotFoundError extends To11aiApiError {
   }
 }
 
-class EnvNotFoundError extends To11aiApiError {
-  reason;
-  constructor(message, reason, details, statusCode) {
+class LabelNotFoundError extends To11aiApiError {
+  label;
+  constructor(message, label, details, statusCode) {
     super(message, statusCode, "ENV_NOT_FOUND", details);
-    this.name = "EnvNotFoundError";
-    this.reason = reason;
+    this.name = "LabelNotFoundError";
+    this.label = label;
     Object.setPrototypeOf(this, new.target.prototype);
   }
-  static missing(env) {
-    return new EnvNotFoundError("[to11ai/sdk] No environment resolvable for prompts.render(): none supplied at client init and none supplied per call. Pass `env` to createClient or render(slug, { env }).", { env, source: "missing" }, undefined, 0);
+  static is(err) {
+    return err instanceof LabelNotFoundError;
+  }
+}
+
+class MissingLabelError extends To11aiError {
+  constructor(message = "[to11ai/sdk] No label resolvable for prompts.render(): none supplied per call, and no client env (or TO11_ENV) to fall back to. Pass `label` to render(slug, { label }) or set `env` on createClient.") {
+    super(message);
+    this.name = "MissingLabelError";
+    Object.setPrototypeOf(this, new.target.prototype);
   }
   static is(err) {
-    return err instanceof EnvNotFoundError;
+    return err instanceof MissingLabelError;
   }
 }
 
@@ -207,19 +215,6 @@ class PromptPolicyViolationError extends To11aiApiError {
   }
 }
 
-class AmbiguousEnvLabelsError extends To11aiApiError {
-  reason;
-  constructor(message, reason, details, statusCode = 409) {
-    super(message, statusCode, "AMBIGUOUS_ENV_LABELS", details);
-    this.name = "AmbiguousEnvLabelsError";
-    this.reason = reason;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-  static is(err) {
-    return err instanceof AmbiguousEnvLabelsError;
-  }
-}
-
 class RuleVersionInvalidSnapshotError extends To11aiApiError {
   field;
   reason;
@@ -252,7 +247,7 @@ export {
   PromptLabelNotRegisteredError,
   NoApplicableRouteError,
   NoActiveReleaseError,
-  EnvNotFoundError,
-  EnvNotEnabledForProviderError,
-  AmbiguousEnvLabelsError
+  MissingLabelError,
+  LabelNotFoundError,
+  EnvNotEnabledForProviderError
 };

package/dist/gateway.cjs

@@ -75,21 +75,27 @@ function gatewayAuthHeaders(options) {
   return headers;
 }
 function gatewayPromptHeaders(prompt) {
-  const headers = {
-    "x-to11-prompt-id": prompt.promptId,
-    "x-to11-prompt-version": String(prompt.version)
-  };
-  if (typeof prompt.releaseId === "string" && prompt.releaseId.length > 0) {
-    headers["x-to11-release-id"] = prompt.releaseId;
+  const p = prompt != null && "metadata" in prompt ? prompt.metadata : prompt;
+  const headers = {};
+  if (p == null)
+    return headers;
+  if (typeof p.promptId === "string" && p.promptId.length > 0) {
+    headers["x-to11-prompt-id"] = p.promptId;
+  }
+  if (typeof p.version === "number" && Number.isFinite(p.version)) {
+    headers["x-to11-prompt-version"] = String(p.version);
+  }
+  if (typeof p.releaseId === "string" && p.releaseId.length > 0) {
+    headers["x-to11-release-id"] = p.releaseId;
   }
-  if (typeof prompt.variantName === "string" && prompt.variantName.length > 0) {
-    headers["x-to11-variant-name"] = prompt.variantName;
+  if (typeof p.variantName === "string" && p.variantName.length > 0) {
+    headers["x-to11-variant-name"] = p.variantName;
   }
-  if (prompt.label.length > 0) {
-    headers["x-to11-prompt-label"] = prompt.label;
+  if (typeof p.label === "string" && p.label.length > 0) {
+    headers["x-to11-prompt-label"] = p.label;
   }
-  if (typeof prompt.slug === "string" && prompt.slug.length > 0) {
-    headers["x-to11-prompt-slug"] = prompt.slug;
+  if (typeof p.slug === "string" && p.slug.length > 0) {
+    headers["x-to11-prompt-slug"] = p.slug;
   }
   return headers;
 }

package/dist/gateway.d.ts

@@ -30,29 +30,26 @@ export interface GatewayAuthOptions {
  */
 export declare function gatewayAuthHeaders(options: GatewayAuthOptions): Record<string, string>;
 /**
- * Build prompt provenance headers from a resolved prompt (TO11-980 / R7).
+ * Build prompt provenance headers from a `render()` result (or a format-shaped
+ * result's `metadata`, unwrapped automatically).
  *
- * Emits the full provenance set for every gateway-bound LLM request that
- * follows from a resolved prompt:
- *   - `x-to11-prompt-id`, `x-to11-prompt-version` — always.
- *   - `x-to11-release-id` — when the result carries a non-null `releaseId`
- *     (the enriched `render()` result; a legacy `resolve()` result has no
- *     `releaseId`, so it is omitted — non-breaking).
- *   - `x-to11-variant-name` — IFF `variantName` is present (i.e. the resolved
- *     release was weighted); omitted for `single`-strategy releases.
- *   - `x-to11-prompt-label` — the single label the prompt resolved through (the
- *     env slug today); omitted when empty (the gateway rejects empty values).
- *   - `x-to11-prompt-slug` — the prompt's human-readable slug, so traces show a
- *     readable name alongside the opaque `x-to11-prompt-id`; omitted when empty
- *     or absent (a legacy `resolve()` result carries no slug).
+ * No provenance header is required, and the gateway rejects empty header
+ * values — so each header is emitted only when its value is present and valid,
+ * and the function never throws:
+ *   - `x-to11-prompt-id` — a non-empty string.
+ *   - `x-to11-prompt-version` — a finite number (a non-number/NaN is dropped
+ *     rather than stringified to junk like `"[object Object]"`).
+ *   - `x-to11-release-id` — a non-empty `releaseId` (the offline-fallback path
+ *     can carry an explicit `null`, which is omitted).
+ *   - `x-to11-variant-name` — present IFF the resolved release was weighted.
+ *   - `x-to11-prompt-label` — the single label the prompt resolved through.
+ *   - `x-to11-prompt-slug` — the prompt's human-readable slug.
  *
- * The parameter type is WIDENED to accept either the enriched `render()`
- * result or the legacy `ResolvedPrompt`. The new fields are read when present
- * and omitted otherwise, so an old `resolve()` result still produces exactly
- * the original three headers (non-breaking; D1/D7 shape coexistence).
+ * An input with no usable provenance yields an empty header bag — the same as
+ * a prompt-less `turn.headers()` call.
  *
  * @example
- * const result = await client.prompts.render(slug, { env: "prod" });
+ * const result = await client.prompts.render(slug, { label: "prod" });
  * const headers = gatewayPromptHeaders(result);
  */
 export interface GatewayPromptProvenance {
@@ -70,7 +67,9 @@ export interface GatewayPromptProvenance {
     /** Present IFF the resolved release was weighted. */
     variantName?: string;
 }
-export declare function gatewayPromptHeaders(prompt: GatewayPromptProvenance): Record<string, string>;
+export declare function gatewayPromptHeaders(prompt: GatewayPromptProvenance | {
+    metadata: GatewayPromptProvenance;
+}): Record<string, string>;
 /** OpenAI Chat Completions `tools[]` entry (`function` tool). */
 export interface OpenAITool {
     type: "function";

package/dist/gateway.js

@@ -26,21 +26,27 @@ function gatewayAuthHeaders(options) {
   return headers;
 }
 function gatewayPromptHeaders(prompt) {
-  const headers = {
-    "x-to11-prompt-id": prompt.promptId,
-    "x-to11-prompt-version": String(prompt.version)
-  };
-  if (typeof prompt.releaseId === "string" && prompt.releaseId.length > 0) {
-    headers["x-to11-release-id"] = prompt.releaseId;
+  const p = prompt != null && "metadata" in prompt ? prompt.metadata : prompt;
+  const headers = {};
+  if (p == null)
+    return headers;
+  if (typeof p.promptId === "string" && p.promptId.length > 0) {
+    headers["x-to11-prompt-id"] = p.promptId;
+  }
+  if (typeof p.version === "number" && Number.isFinite(p.version)) {
+    headers["x-to11-prompt-version"] = String(p.version);
+  }
+  if (typeof p.releaseId === "string" && p.releaseId.length > 0) {
+    headers["x-to11-release-id"] = p.releaseId;
   }
-  if (typeof prompt.variantName === "string" && prompt.variantName.length > 0) {
-    headers["x-to11-variant-name"] = prompt.variantName;
+  if (typeof p.variantName === "string" && p.variantName.length > 0) {
+    headers["x-to11-variant-name"] = p.variantName;
   }
-  if (prompt.label.length > 0) {
-    headers["x-to11-prompt-label"] = prompt.label;
+  if (typeof p.label === "string" && p.label.length > 0) {
+    headers["x-to11-prompt-label"] = p.label;
   }
-  if (typeof prompt.slug === "string" && prompt.slug.length > 0) {
-    headers["x-to11-prompt-slug"] = prompt.slug;
+  if (typeof p.slug === "string" && p.slug.length > 0) {
+    headers["x-to11-prompt-slug"] = p.slug;
   }
   return headers;
 }