@verdict-ai/api 0.0.0-stage → 0.2.0

package/dist/routes/shared.js

@@ -0,0 +1,94 @@
+/**
+ * Defines shared request handling at the REST boundary.
+ * Tenant context flows to every engine/store operation; validation failures use the shared HTTP error mapper.
+ */
+import { allowAll, hasControl, loadRubricText } from "@verdict-ai/core";
+import { HTTPException } from "hono/http-exception";
+import { z } from "zod";
+/** A refusal clients can tell apart by `type`; `extra` is merged into the error object of the response. */
+export class ApiError extends Error {
+    status;
+    type;
+    extra;
+    constructor(status, type, message, extra = {}) {
+        super(message);
+        this.status = status;
+        this.type = type;
+        this.extra = extra;
+    }
+}
+/** Reads a JSON body of at most `maxBytes`; 413 when larger, 400 when it is not JSON. An empty body reads as `{}`. */
+export async function readJson(req, maxBytes = 100_000) {
+    const text = await req.text();
+    if (new TextEncoder().encode(text).length > maxBytes)
+        throw new HTTPException(413, { message: `the request may be at most ${maxBytes} bytes` });
+    if (!text.trim())
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new HTTPException(400, { message: "the request body must be JSON" });
+    }
+}
+/** Decodes JSON or YAML rubric bodies; rejects read, syntax and rubric validation failures. */
+export async function readRubricBody(req) {
+    const ct = req.headers.get("content-type") ?? "";
+    const text = await req.text();
+    if (ct.includes("yaml") || ct.includes("text/plain"))
+        return loadRubricText(text);
+    return JSON.parse(text);
+}
+/** Returns an optional idempotency key; throws ZodError when its length is outside 1–255 characters. */
+export function readIdempotencyKey(req) {
+    const key = req.headers.get("Idempotency-Key");
+    return key === null ? undefined : z.string().min(1).max(255).parse(key);
+}
+/** Returns the authenticated tenant, or undefined for open local deployments. */
+export const tenant = (c) => c.get("tenantId") || undefined;
+/** Documents leave without the tenant they are stored under. */
+export function bare(doc) {
+    const { tenantId: _tenantId, ...rest } = doc;
+    return rest;
+}
+const REFUSAL_MESSAGES = {
+    forbidden: "this key is not allowed to do that",
+    limit_exceeded: "this account's plan does not allow that",
+    approval_required: "this change needs an approval first",
+};
+/** What a refusal adds to the error object. It never replaces what says which refusal this is. */
+function refusalDetails(details = {}) {
+    const { type: _type, message: _message, ...rest } = details;
+    return rest;
+}
+/**
+ * What every control-plane route works with: the store, the project a request is about, and `allow`, the one place a
+ * request is allowed or refused (docs/design/control-plane.md §9.1). Routes call `allow` before they read or write.
+ */
+export function controlContext({ engine, authorize = allowAll, now = () => Date.now() }) {
+    const store = () => {
+        if (!hasControl(engine.store))
+            throw new HTTPException(501, { message: "this server's store cannot keep projects" });
+        return engine.store.control;
+    };
+    const scope = (c) => {
+        const tenantId = tenant(c), project = c.req.param("project") ?? "";
+        return tenantId === undefined ? { project } : { tenantId, project };
+    };
+    const allow = async (c, action, target = {}) => {
+        const claims = c.get("claims");
+        const decision = await authorize({ principal: { tenantId: tenant(c), actor: c.get("actor"), ...(claims ? { claims } : {}) }, action, target });
+        if (!decision.allow)
+            throw new ApiError(403, decision.reason, decision.message ?? REFUSAL_MESSAGES[decision.reason], refusalDetails(decision.details));
+    };
+    /** 404 unless the project of the request exists. */
+    const project = async (c) => {
+        const s = scope(c);
+        if (!(await store().getProject(s.tenantId, s.project)))
+            throw projectNotFound(s.project);
+        return s;
+    };
+    return { store, scope, allow, project, at: () => new Date(now()).toISOString(), now };
+}
+export const projectNotFound = (name) => new ApiError(404, "not_found", `project ${name} not found`);
+//# sourceMappingURL=shared.js.map

package/dist/routes/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/routes/shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAA+E,MAAM,kBAAkB,CAAC;AAErJ,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,2GAA2G;AAC3G,MAAM,OAAO,QAAS,SAAQ,KAAK;IACZ;IAAuC;IAAwC;IAApG,YAAqB,MAA4B,EAAW,IAAY,EAAE,OAAe,EAAW,QAAiC,EAAE;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAArI,WAAM,GAAN,MAAM,CAAsB;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAA4B,UAAK,GAAL,KAAK,CAA8B;IAAoB,CAAC;CAC7J;AAED,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAY,EAAE,QAAQ,GAAG,OAAO;IAC7D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,8BAA8B,QAAQ,QAAQ,EAAE,CAAC,CAAC;IAChJ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAChC,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAAC,CAAC;AACvF,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY;IAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAiC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;AAE5F,gEAAgE;AAChE,MAAM,UAAU,IAAI,CAAkC,GAAM;IAC1D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,oCAAoC;IAC/C,cAAc,EAAE,yCAAyC;IACzD,iBAAiB,EAAE,qCAAqC;CAChD,CAAC;AAEX,kGAAkG;AAClG,SAAS,cAAc,CAAC,UAAmC,EAAE;IAC3D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,EAAE,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAc;IACjG,MAAM,KAAK,GAAG,GAAiB,EAAE;QAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;QACrH,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9B,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAe,EAAgB,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACnE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EAAE,CAAe,EAAE,MAAqB,EAAE,SAAuB,EAAE,EAAE,EAAE;QACxF,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/I,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACzJ,CAAC,CAAC;IACF,oDAAoD;IACpD,MAAM,OAAO,GAAG,KAAK,EAAE,CAAe,EAAyB,EAAE;QAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,IAAI,YAAY,CAAC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,19 @@
+import { Engine, MemoryQueue, type Store } from "@verdict-ai/core";
+export interface ServerOptions {
+    port?: number;
+    dataDir?: string;
+    database?: string;
+    allowLocalFiles?: boolean;
+    store?: Store;
+    queue?: MemoryQueue;
+    loadDatabase?: (kind: "postgres" | "sqlite") => Promise<{
+        open: typeof import("@verdict-ai/db/postgres").fromPostgres | typeof import("@verdict-ai/db/sqlite").fromSqliteFile;
+    }>;
+}
+/** Starts the Node server using supplied or environment-selected adapters; startup failures reject. */
+export declare function startServer(opts?: ServerOptions): Promise<{
+    app: import("hono").Hono<import("./app.js").Env, import("hono/types").BlankSchema, "/">;
+    engine: Engine;
+    server: import("@hono/node-server").ServerType;
+    port: number;
+}>;

package/dist/server.js

@@ -0,0 +1,69 @@
+/**
+ * Starts the Node HTTP surface with environment-selected persistence.
+ * Database keys retain bootstrap authentication; shutdown drains queued work before exiting.
+ */
+import { serve } from "@hono/node-server";
+import { lazyPlaywrightScreenshot, Engine, MemoryQueue, FileStore, MemoryStore } from "@verdict-ai/core";
+import { createApp, envAuth, routeGroups } from "./app.js";
+// Keep environment interpretation at startup so storage and queue dependencies can be supplied by tests.
+function serverConfig(opts, env = process.env) {
+    return {
+        port: opts.port ?? Number(env.PORT ?? 8787),
+        dataDir: opts.dataDir ?? env.VERDICT_DATA_DIR,
+        database: opts.database ?? env.VERDICT_DATABASE,
+        allowLocalFiles: opts.allowLocalFiles ?? env.VERDICT_ALLOW_LOCAL_FILES === "1",
+        // why: a headless browser per request is costly and fetches arbitrary URLs; servers opt in explicitly.
+        screenshots: env.VERDICT_SCREENSHOTS === "1",
+        log: env.VERDICT_LOG !== "0", apiKeys: env.VERDICT_API_KEYS, adminKey: env.VERDICT_ADMIN_KEY,
+        github: env.GITHUB_CLIENT_ID ? { clientId: env.GITHUB_CLIENT_ID, clientSecret: env.GITHUB_CLIENT_SECRET } : undefined,
+        routes: routeGroups(env.VERDICT_ROUTES),
+    };
+}
+/** Starts the Node server using supplied or environment-selected adapters; startup failures reject. */
+export async function startServer(opts = {}) {
+    const config = serverConfig(opts);
+    const { port, dataDir, database } = config;
+    let store;
+    let auth = envAuth();
+    let keys;
+    if (opts.store)
+        store = opts.store;
+    else if (database) {
+        const kind = /^postgres(ql)?:\/\//.test(database) ? "postgres" : "sqlite";
+        const { open } = await (opts.loadDatabase ?? loadDatabase)(kind);
+        // Env keys stay valid as a bootstrap, but open mode (no VERDICT_API_KEYS) must not bypass the DB keys.
+        const h = await open(database, config.apiKeys ? envAuth() : undefined);
+        store = h.store;
+        auth = h.auth;
+        keys = h.auth;
+    }
+    else
+        store = dataDir ? new FileStore(dataDir) : new MemoryStore();
+    const queue = opts.queue ?? new MemoryQueue();
+    const engine = new Engine({ store, queue, ingest: { allowLocalFiles: config.allowLocalFiles, screenshot: config.screenshots ? lazyPlaywrightScreenshot() : undefined } });
+    queue.engine = engine;
+    const app = createApp({ engine, auth, keys, log: config.log, github: config.github, clientKey: socketAddress, routes: config.routes });
+    const server = serve({ fetch: app.fetch, port }, (info) => {
+        const storeName = database ? (/^postgres(ql)?:\/\//.test(database) ? "postgres" : `sqlite:${database}`) : dataDir ? `file:${dataDir}` : "memory";
+        console.log(`verdict api listening on http://localhost:${info.port}  (store: ${storeName}, auth: ${database ? "db + env keys" : config.apiKeys ? "env keys" : "open"}${config.adminKey && keys ? ", admin on" : ""})`);
+    });
+    process.once("SIGTERM", () => {
+        // why: retry timers are unreferenced; keep Node alive until delayed work drains during graceful shutdown.
+        const keepAlive = setInterval(() => { }, 1000);
+        server.close(() => { void queue.drain().then(() => { clearInterval(keepAlive); process.exit(0); }); });
+    });
+    return { app, engine, server, port };
+}
+// Driver imports belong at startup so the Node factory can be exercised without native modules.
+async function loadDatabase(kind) {
+    if (kind === "postgres")
+        return { open: (await import("@verdict-ai/db/postgres")).fromPostgres };
+    return { open: (await import("@verdict-ai/db/sqlite")).fromSqliteFile };
+}
+if (import.meta.url === `file://${process.argv[1]}`)
+    void startServer();
+/** The Node server limits per socket address: behind a proxy that is the proxy's, so put limits at the proxy too. */
+function socketAddress(c) {
+    return c.env?.incoming?.socket?.remoteAddress ?? "anonymous";
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAc,MAAM,kBAAkB,CAAC;AAErH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAA8B,MAAM,UAAU,CAAC;AAQvF,yGAAyG;AACzG,SAAS,YAAY,CAAC,IAAmB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG;IAC1D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;QAC3C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,gBAAgB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,gBAAgB;QAC/C,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAC9E,uGAAuG;QACvG,WAAW,EAAE,GAAG,CAAC,mBAAmB,KAAK,GAAG;QAC5C,GAAG,EAAE,GAAG,CAAC,WAAW,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,gBAAgB,EAAE,QAAQ,EAAE,GAAG,CAAC,iBAAiB;QAC5F,MAAM,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS;QACrH,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB,EAAE;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC3C,IAAI,KAAY,CAAC;IACjB,IAAI,IAAI,GAAS,OAAO,EAAE,CAAC;IAC3B,IAAI,IAA4B,CAAC;IACjC,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;SAC9B,IAAI,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;QACjE,uGAAuG;QACvG,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;;QAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1K,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvI,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjJ,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,CAAC,IAAI,aAAa,SAAS,WAAW,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzN,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;QAC3B,0GAA0G;QAC1G,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,YAAY,CAAC,IAA2B;IACrD,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;IACjG,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;AAC1E,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IAAE,KAAK,WAAW,EAAE,CAAC;AAExE,qHAAqH;AACrH,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAQ,CAAC,CAAC,GAA0E,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,IAAI,WAAW,CAAC;AACvI,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Builds Workers-compatible engines and consumes Cloudflare queue messages.
+ * D1 reservations commit before judging; failed queue attempts must be acknowledged or retried explicitly.
+ */
+import { Engine, type DecisionProviderAdapter, type Job } from "@verdict-ai/core";
+import { type CloudflareRateLimit, type HubLimits } from "./rate-limit.js";
+export interface Env {
+    [name: string]: unknown;
+    DB?: D1Database;
+    QUEUE?: Pick<Queue<Job>, "send">;
+    /** Workers AI binding: Clef / Clef-flash run in-network without a REST token. */
+    AI?: Pick<Ai, "run">;
+    /** Workers Rate Limiting bindings for the hub; without them, counts are kept per isolate. */
+    HUB_LOGIN_LIMITER?: CloudflareRateLimit;
+    HUB_PUBLISH_LIMITER?: CloudflareRateLimit;
+    HUB_READ_LIMITER?: CloudflareRateLimit;
+}
+/** Hub limits: a Cloudflare binding where configured, else this isolate's counters. */
+export declare function hubLimits(env: Env): HubLimits;
+/**
+ * Decision provider "cloudflare" backed by the Workers AI binding instead of the REST API.
+ * Same System One body (`model` selector, `state`, `questions`); the binding returns the inner result directly.
+ */
+export declare function aiBindingProvider(ai: NonNullable<Env["AI"]>): DecisionProviderAdapter;
+/** Shared by HTTP producers and queue consumers. */
+export declare function buildEngine(env: Env): {
+    engine: Engine;
+    auth: import("./app.js").Auth | import("@verdict-ai/db").DrizzleAuth;
+    keys: import("@verdict-ai/db").DrizzleAuth | undefined;
+    adminKey: string;
+    github: {
+        clientId: string;
+        clientSecret: string;
+    } | undefined;
+    limits: HubLimits;
+    routes: readonly ("evaluations" | "rubrics" | "hub" | "control")[];
+};
+export interface JobMessage {
+    body: Job;
+    ack(): void;
+    retry(options: {
+        delaySeconds: number;
+    }): void;
+}
+/** Returns a queue consumer; retryable jobs retry and terminal jobs are acknowledged. */
+export declare function createQueueHandler(build?: typeof buildEngine): (batch: Pick<MessageBatch<Job>, "messages"> | {
+    messages: readonly JobMessage[];
+}, env: Env, _ctx?: ExecutionContext) => Promise<void>;
+export declare const queue: (batch: Pick<MessageBatch<Job>, "messages"> | {
+    messages: readonly JobMessage[];
+}, env: Env, _ctx?: ExecutionContext) => Promise<void>;
+declare const _default: {
+    fetch(request: Request, env: Env, ctx: Pick<ExecutionContext, "waitUntil">): Response | Promise<Response>;
+    queue: (batch: Pick<MessageBatch<Job>, "messages"> | {
+        messages: readonly JobMessage[];
+    }, env: Env, _ctx?: ExecutionContext) => Promise<void>;
+};
+export default _default;

package/dist/worker.js

@@ -0,0 +1,81 @@
+/**
+ * Builds Workers-compatible engines and consumes Cloudflare queue messages.
+ * D1 reservations commit before judging; failed queue attempts must be acknowledged or retried explicitly.
+ */
+import { CLEF_LIMITS, Engine, MemoryStore, RetryableError, checkClefImages, registerDecisionProvider } from "@verdict-ai/core";
+import { fromD1 } from "@verdict-ai/db";
+import { createApp, envAuth, routeGroups } from "./app.js";
+import { CloudflareQueue } from "./queue-cloudflare.js";
+import { cloudflareLimiter, defaultHubLimits } from "./rate-limit.js";
+const memory = new MemoryStore();
+// An app is built per request; the fallback counters must outlive it to count anything.
+const isolateLimits = defaultHubLimits();
+/** Hub limits: a Cloudflare binding where configured, else this isolate's counters. */
+export function hubLimits(env) {
+    return {
+        login: env.HUB_LOGIN_LIMITER ? cloudflareLimiter(env.HUB_LOGIN_LIMITER) : isolateLimits.login,
+        publish: env.HUB_PUBLISH_LIMITER ? cloudflareLimiter(env.HUB_PUBLISH_LIMITER) : isolateLimits.publish,
+        read: env.HUB_READ_LIMITER ? cloudflareLimiter(env.HUB_READ_LIMITER) : isolateLimits.read,
+    };
+}
+/**
+ * Decision provider "cloudflare" backed by the Workers AI binding instead of the REST API.
+ * Same System One body (`model` selector, `state`, `questions`); the binding returns the inner result directly.
+ */
+export function aiBindingProvider(ai) {
+    return {
+        name: "cloudflare",
+        acceptsImages: true,
+        maxImages: CLEF_LIMITS.maxImages,
+        async decide(req) {
+            const model = req.model ?? "@cf/cloudflare/clef-flash";
+            const extra = req.options?.request;
+            const extras = extra && typeof extra === "object" && !Array.isArray(extra) ? { ...extra } : {};
+            // Same image rules as the REST adapter: rubric-supplied images first, then the evidence's own.
+            const images = [...(Array.isArray(extras.images) ? extras.images.filter((x) => typeof x === "string") : []), ...(req.images ?? [])];
+            checkClefImages(images);
+            const body = { model: req.options?.selector ?? model.split("/").pop(), state: req.state, questions: req.questions, ...extras, ...(images.length ? { images } : {}) };
+            const data = (await ai.run(model, body));
+            return { answers: data.answers ?? {}, model, usage: { inputTokens: data.usage?.input_tokens ?? data.usage?.prompt_tokens ?? 0, outputTokens: data.usage?.output_tokens ?? 0 }, raw: data };
+        },
+    };
+}
+/** Shared by HTTP producers and queue consumers. */
+export function buildEngine(env) {
+    const vars = Object.fromEntries(Object.entries(env).filter((entry) => typeof entry[1] === "string"));
+    const envKeys = envAuth(vars);
+    const d1 = env.DB ? fromD1(env.DB, vars.VERDICT_API_KEYS ? envKeys : undefined) : undefined;
+    if (env.AI)
+        registerDecisionProvider(aiBindingProvider(env.AI));
+    const engine = new Engine({ store: d1?.store ?? memory, queue: env.QUEUE ? new CloudflareQueue(env.QUEUE) : undefined, env: n => vars[n], webhookSecret: vars.VERDICT_WEBHOOK_SECRET });
+    const github = vars.GITHUB_CLIENT_ID ? { clientId: vars.GITHUB_CLIENT_ID, clientSecret: vars.GITHUB_CLIENT_SECRET } : undefined;
+    return { engine, auth: d1?.auth ?? envKeys, keys: d1?.auth, adminKey: vars.VERDICT_ADMIN_KEY, github, limits: hubLimits(env), routes: routeGroups(vars.VERDICT_ROUTES) };
+}
+/** Returns a queue consumer; retryable jobs retry and terminal jobs are acknowledged. */
+export function createQueueHandler(build = buildEngine) {
+    return async (batch, env, _ctx) => {
+        const { engine } = build(env);
+        await Promise.all(batch.messages.map(async (message) => {
+            try {
+                await engine.processJob(message.body);
+                message.ack();
+            }
+            catch (error) {
+                if (error instanceof RetryableError)
+                    message.retry({ delaySeconds: Math.ceil((error.retryAfterMs ?? 0) / 1000) });
+                // why: permanent failures must not poison the queue through endless redelivery.
+                else
+                    message.ack();
+            }
+        }));
+    };
+}
+export const queue = createQueueHandler();
+export default {
+    fetch(request, env, ctx) {
+        const app = createApp({ ...buildEngine(env), background: promise => ctx.waitUntil(promise) });
+        return app.fetch(request);
+    },
+    queue,
+};
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,wBAAwB,EAAgE,MAAM,kBAAkB,CAAC;AAC7L,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAA4C,MAAM,iBAAiB,CAAC;AAahH,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;AACjC,wFAAwF;AACxF,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;AAEzC,uFAAuF;AACvF,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK;QAC7F,OAAO,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO;QACrG,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI;KAC1F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAA0B;IAC1D,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,2BAA2B,CAAC;YACvD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;YACnC,MAAM,MAAM,GAA4B,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxH,+FAA+F;YAC/F,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;YACjJ,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,MAAM,IAAI,GAAG,EAAE,KAAK,EAAG,GAAG,CAAC,OAAO,EAAE,QAA+B,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7L,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAqJ,CAAC;YAC7L,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7L,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IAChI,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,GAAG,CAAC,EAAE;QAAE,wBAAwB,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACxL,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;AAC3K,CAAC;AAOD,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,KAAK,GAAG,WAAW;IACpD,OAAO,KAAK,EAAE,KAAgF,EAAE,GAAQ,EAAE,IAAuB,EAAE,EAAE;QACnI,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;YACnD,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAC7D,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,cAAc;oBAAE,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClH,gFAAgF;;oBAC3E,OAAO,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;AAC1C,eAAe;IACb,KAAK,CAAC,OAAgB,EAAE,GAAQ,EAAE,GAAwC;QACxE,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9F,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK;CACN,CAAC"}

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "@verdict-ai/api",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "Verdict REST API (Hono). Runs on Node and Cloudflare Workers.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    },
+    "./worker": {
+      "types": "./dist/worker.d.ts",
+      "import": "./dist/worker.js"
+    }
+  },
+  "dependencies": {
+    "@hono/node-server": "^2.1.6",
+    "hono": "^4.13.16",
+    "zod": "^4.6.7",
+    "@verdict-ai/core": "0.2.0",
+    "@verdict-ai/db": "0.2.0"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^5.20261104.1"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Ustay-coder/verdict.git",
+    "directory": "packages/api"
+  },
+  "homepage": "https://github.com/Ustay-coder/verdict#readme",
+  "bugs": {
+    "url": "https://github.com/Ustay-coder/verdict/issues"
+  },
+  "keywords": [
+    "evaluation",
+    "rubric",
+    "decision-model",
+    "jev",
+    "clef",
+    "scoring",
+    "llm-judge",
+    "mcp"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "wrangler.example.toml"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "dev": "node --watch dist/server.js",
+    "start": "node dist/server.js"
+  }
 }

package/wrangler.example.toml

@@ -0,0 +1,53 @@
+# Cloudflare Workers deployment (copy to wrangler.toml). Build first: pnpm build
+name = "verdict-api"
+main = "dist/worker.js"
+compatibility_date = "2026-10-01"
+compatibility_flags = ["nodejs_compat"]
+
+# Persistence: Cloudflare D1 through Drizzle. Create with `wrangler d1 create verdict`, paste the id below, then
+#   wrangler d1 migrations apply verdict --local     # dev
+#   wrangler d1 migrations apply verdict --remote    # prod
+[[d1_databases]]
+binding = "DB"
+database_name = "verdict"
+database_id = "<paste-from-wrangler-d1-create>"
+migrations_dir = "../db/drizzle"
+
+# Secrets (wrangler secret put <NAME>):
+#   TYPESAFE_API_KEY         Jev (default judge)
+#   CLOUDFLARE_ACCOUNT_ID, CLOUDFLARE_API_TOKEN   Clef / Clef-flash via Workers AI REST
+#   VERDICT_API_KEYS         bootstrap tenant keys, "key:tenant,..." (DB-managed keys take precedence)
+#   VERDICT_ADMIN_KEY        enables /v1/admin/* (key management, hub takedowns)
+#   VERDICT_WEBHOOK_SECRET   HMAC for webhook deliveries
+#   GITHUB_CLIENT_ID         hub sign-in: OAuth App client id (enable "Device Flow" in the app's settings)
+#   GITHUB_CLIENT_SECRET     hub sign-in: lets the hub check a token was minted for this app (recommended)
+
+# Hub limits shared across isolates (Workers Rate Limiting API; period is 10 or 60 seconds; `wrangler dev` simulates them). Without these bindings the
+# same limits are counted per isolate, which is a floor, not a guarantee. namespace_id: any number unique in your account.
+# [[ratelimits]]
+# name = "HUB_LOGIN_LIMITER"
+# namespace_id = "1001"
+# simple = { limit = 10, period = 60 }
+# [[ratelimits]]
+# name = "HUB_PUBLISH_LIMITER"
+# namespace_id = "1002"
+# simple = { limit = 30, period = 60 }
+# [[ratelimits]]
+# name = "HUB_READ_LIMITER"
+# namespace_id = "1003"
+# simple = { limit = 300, period = 60 }
+
+# Clef inference through the Worker binding (no REST token needed):
+[ai]
+binding = "AI"
+
+# Create verdict-jobs and verdict-dlq before enabling (Queues plan required):
+# [[queues.producers]]
+# binding = "QUEUE"
+# queue = "verdict-jobs"
+# [[queues.consumers]]
+# queue = "verdict-jobs"
+# max_retries = 5
+# max_batch_size = 10
+# max_concurrency = 4
+# dead_letter_queue = "verdict-dlq"